ofs | hex dump | ascii |
---|
0000 | de 12 04 95 00 00 00 00 f3 13 00 00 1c 00 00 00 b4 9f 00 00 a7 1a 00 00 4c 3f 01 00 00 00 00 00 | ........................L?...... |
0020 | e8 a9 01 00 43 00 00 00 e9 a9 01 00 52 00 00 00 2d aa 01 00 42 00 00 00 80 aa 01 00 3b 00 00 00 | ....C.......R...-...B.......;... |
0040 | c3 aa 01 00 42 00 00 00 ff aa 01 00 3a 00 00 00 42 ab 01 00 24 00 00 00 7d ab 01 00 1a 00 00 00 | ....B.......:...B...$...}....... |
0060 | a2 ab 01 00 66 00 00 00 bd ab 01 00 6f 00 00 00 24 ac 01 00 5d 01 00 00 94 ac 01 00 48 00 00 00 | ....f.......o...$...].......H... |
0080 | f2 ad 01 00 46 00 00 00 3b ae 01 00 31 00 00 00 82 ae 01 00 31 00 00 00 b4 ae 01 00 3e 00 00 00 | ....F...;...1.......1.......>... |
00a0 | e6 ae 01 00 23 00 00 00 25 af 01 00 18 00 00 00 49 af 01 00 7d 00 00 00 62 af 01 00 92 00 00 00 | ....#...%.......I...}...b....... |
00c0 | e0 af 01 00 23 00 00 00 73 b0 01 00 20 00 00 00 97 b0 01 00 21 00 00 00 b8 b0 01 00 21 00 00 00 | ....#...s...........!.......!... |
00e0 | da b0 01 00 3f 00 00 00 fc b0 01 00 78 00 00 00 3c b1 01 00 7f 00 00 00 b5 b1 01 00 15 00 00 00 | ....?.......x...<............... |
0100 | 35 b2 01 00 2d 00 00 00 4b b2 01 00 27 00 00 00 79 b2 01 00 1d 00 00 00 a1 b2 01 00 5c 00 00 00 | 5...-...K...'...y...........\... |
0120 | bf b2 01 00 1c 00 00 00 1c b3 01 00 0c 00 00 00 39 b3 01 00 21 00 00 00 46 b3 01 00 4e 00 00 00 | ................9...!...F...N... |
0140 | 68 b3 01 00 e0 00 00 00 b7 b3 01 00 e0 00 00 00 98 b4 01 00 23 00 00 00 79 b5 01 00 3e 00 00 00 | h...................#...y...>... |
0160 | 9d b5 01 00 0c 00 00 00 dc b5 01 00 12 00 00 00 e9 b5 01 00 11 00 00 00 fc b5 01 00 4d 00 00 00 | ............................M... |
0180 | 0e b6 01 00 b4 00 00 00 5c b6 01 00 6c 00 00 00 11 b7 01 00 6b 00 00 00 7e b7 01 00 81 00 00 00 | ........\...l.......k...~....... |
01a0 | ea b7 01 00 3b 00 00 00 6c b8 01 00 12 00 00 00 a8 b8 01 00 8b 00 00 00 bb b8 01 00 8c 00 00 00 | ....;...l....................... |
01c0 | 47 b9 01 00 30 01 00 00 d4 b9 01 00 fb 00 00 00 05 bb 01 00 fc 00 00 00 01 bc 01 00 d5 00 00 00 | G...0........................... |
01e0 | fe bc 01 00 94 00 00 00 d4 bd 01 00 2c 01 00 00 69 be 01 00 f6 01 00 00 96 bf 01 00 67 00 00 00 | ............,...i...........g... |
0200 | 8d c1 01 00 67 00 00 00 f5 c1 01 00 da 00 00 00 5d c2 01 00 d9 00 00 00 38 c3 01 00 12 00 00 00 | ....g...........].......8....... |
0220 | 12 c4 01 00 08 00 00 00 25 c4 01 00 b8 00 00 00 2e c4 01 00 14 01 00 00 e7 c4 01 00 18 00 00 00 | ........%....................... |
0240 | fc c5 01 00 18 00 00 00 15 c6 01 00 1b 00 00 00 2e c6 01 00 1a 00 00 00 4a c6 01 00 15 00 00 00 | ........................J....... |
0260 | 65 c6 01 00 0d 00 00 00 7b c6 01 00 14 00 00 00 89 c6 01 00 0a 00 00 00 9e c6 01 00 0b 00 00 00 | e.......{....................... |
0280 | a9 c6 01 00 0a 00 00 00 b5 c6 01 00 0b 00 00 00 c0 c6 01 00 0a 00 00 00 cc c6 01 00 0a 00 00 00 | ................................ |
02a0 | d7 c6 01 00 4d 00 00 00 e2 c6 01 00 7e 03 00 00 30 c7 01 00 10 00 00 00 af ca 01 00 10 00 00 00 | ....M.......~...0............... |
02c0 | c0 ca 01 00 a0 01 00 00 d1 ca 01 00 98 01 00 00 72 cc 01 00 99 01 00 00 0b ce 01 00 10 00 00 00 | ................r............... |
02e0 | a5 cf 01 00 4a 00 00 00 b6 cf 01 00 16 00 00 00 01 d0 01 00 93 00 00 00 18 d0 01 00 2f 01 00 00 | ....J......................./... |
0300 | ac d0 01 00 2e 01 00 00 dc d1 01 00 0b 00 00 00 0b d3 01 00 2e 00 00 00 17 d3 01 00 2d 00 00 00 | ............................-... |
0320 | 46 d3 01 00 37 00 00 00 74 d3 01 00 33 00 00 00 ac d3 01 00 29 00 00 00 e0 d3 01 00 3b 00 00 00 | F...7...t...3.......).......;... |
0340 | 0a d4 01 00 1e 00 00 00 46 d4 01 00 3b 00 00 00 65 d4 01 00 2e 00 00 00 a1 d4 01 00 4e 00 00 00 | ........F...;...e...........N... |
0360 | d0 d4 01 00 11 00 00 00 1f d5 01 00 06 00 00 00 31 d5 01 00 11 00 00 00 38 d5 01 00 06 00 00 00 | ................1.......8....... |
0380 | 4a d5 01 00 2d 00 00 00 51 d5 01 00 25 00 00 00 7f d5 01 00 09 00 00 00 a5 d5 01 00 b9 00 00 00 | J...-...Q...%................... |
03a0 | af d5 01 00 0c 00 00 00 69 d6 01 00 0c 00 00 00 76 d6 01 00 0c 00 00 00 83 d6 01 00 13 00 00 00 | ........i.......v............... |
03c0 | 90 d6 01 00 30 00 00 00 a4 d6 01 00 31 00 00 00 d5 d6 01 00 07 00 00 00 07 d7 01 00 07 00 00 00 | ....0.......1................... |
03e0 | 0f d7 01 00 0d 00 00 00 17 d7 01 00 14 00 00 00 25 d7 01 00 1d 00 00 00 3a d7 01 00 49 00 00 00 | ................%.......:...I... |
0400 | 58 d7 01 00 19 00 00 00 a2 d7 01 00 0a 00 00 00 bc d7 01 00 24 00 00 00 c7 d7 01 00 27 00 00 00 | X...................$.......'... |
0420 | ec d7 01 00 0b 00 00 00 14 d8 01 00 10 00 00 00 20 d8 01 00 10 00 00 00 31 d8 01 00 70 00 00 00 | ........................1...p... |
0440 | 42 d8 01 00 57 00 00 00 b3 d8 01 00 42 00 00 00 0b d9 01 00 32 00 00 00 4e d9 01 00 37 00 00 00 | B...W.......B.......2...N...7... |
0460 | 81 d9 01 00 5a 00 00 00 b9 d9 01 00 a3 00 00 00 14 da 01 00 74 00 00 00 b8 da 01 00 35 01 00 00 | ....Z...............t.......5... |
0480 | 2d db 01 00 73 00 00 00 63 dc 01 00 16 01 00 00 d7 dc 01 00 7e 00 00 00 ee dd 01 00 49 00 00 00 | -...s...c...........~.......I... |
04a0 | 6d de 01 00 2f 02 00 00 b7 de 01 00 6f 00 00 00 e7 e0 01 00 39 01 00 00 57 e1 01 00 dd 00 00 00 | m.../.......o.......9...W....... |
04c0 | 91 e2 01 00 20 00 00 00 6f e3 01 00 30 00 00 00 90 e3 01 00 14 00 00 00 c1 e3 01 00 2c 00 00 00 | ........o...0...............,... |
04e0 | d6 e3 01 00 90 00 00 00 03 e4 01 00 52 00 00 00 94 e4 01 00 58 00 00 00 e7 e4 01 00 26 00 00 00 | ............R.......X.......&... |
0500 | 40 e5 01 00 58 00 00 00 67 e5 01 00 e4 00 00 00 c0 e5 01 00 68 00 00 00 a5 e6 01 00 5d 00 00 00 | @...X...g...........h.......]... |
0520 | 0e e7 01 00 6c 00 00 00 6c e7 01 00 5a 00 00 00 d9 e7 01 00 a4 00 00 00 34 e8 01 00 eb 00 00 00 | ....l...l...Z...........4....... |
0540 | d9 e8 01 00 41 00 00 00 c5 e9 01 00 52 00 00 00 07 ea 01 00 6d 00 00 00 5a ea 01 00 c7 00 00 00 | ....A.......R.......m...Z....... |
0560 | c8 ea 01 00 f1 00 00 00 90 eb 01 00 08 00 00 00 82 ec 01 00 35 00 00 00 8b ec 01 00 32 00 00 00 | ....................5.......2... |
0580 | c1 ec 01 00 4c 00 00 00 f4 ec 01 00 30 00 00 00 41 ed 01 00 38 00 00 00 72 ed 01 00 36 00 00 00 | ....L.......0...A...8...r...6... |
05a0 | ab ed 01 00 19 00 00 00 e2 ed 01 00 3a 00 00 00 fc ed 01 00 37 00 00 00 37 ee 01 00 7b 01 00 00 | ............:.......7...7...{... |
05c0 | 6f ee 01 00 36 00 00 00 eb ef 01 00 47 00 00 00 22 f0 01 00 55 00 00 00 6a f0 01 00 35 00 00 00 | o...6.......G..."...U...j...5... |
05e0 | c0 f0 01 00 29 00 00 00 f6 f0 01 00 23 00 00 00 20 f1 01 00 24 00 00 00 44 f1 01 00 af 00 00 00 | ....).......#.......$...D....... |
0600 | 69 f1 01 00 6c 00 00 00 19 f2 01 00 a7 00 00 00 86 f2 01 00 ee 00 00 00 2e f3 01 00 47 00 00 00 | i...l.......................G... |
0620 | 1d f4 01 00 47 00 00 00 65 f4 01 00 3a 00 00 00 ad f4 01 00 4b 00 00 00 e8 f4 01 00 5a 01 00 00 | ....G...e...:.......K.......Z... |
0640 | 34 f5 01 00 9f 01 00 00 8f f6 01 00 b5 00 00 00 2f f8 01 00 51 00 00 00 e5 f8 01 00 31 00 00 00 | 4.............../...Q.......1... |
0660 | 37 f9 01 00 1a 00 00 00 69 f9 01 00 4c 00 00 00 84 f9 01 00 80 00 00 00 d1 f9 01 00 26 00 00 00 | 7.......i...L...............&... |
0680 | 52 fa 01 00 26 00 00 00 79 fa 01 00 40 00 00 00 a0 fa 01 00 09 00 00 00 e1 fa 01 00 3c 00 00 00 | R...&...y...@...............<... |
06a0 | eb fa 01 00 42 00 00 00 28 fb 01 00 b1 00 00 00 6b fb 01 00 54 00 00 00 1d fc 01 00 2c 00 00 00 | ....B...(.......k...T.......,... |
06c0 | 72 fc 01 00 47 00 00 00 9f fc 01 00 bc 00 00 00 e7 fc 01 00 bf 00 00 00 a4 fd 01 00 1e 00 00 00 | r...G........................... |
06e0 | 64 fe 01 00 37 00 00 00 83 fe 01 00 33 00 00 00 bb fe 01 00 9a 00 00 00 ef fe 01 00 01 00 00 00 | d...7.......3................... |
0700 | 8a ff 01 00 2c 00 00 00 8c ff 01 00 11 00 00 00 b9 ff 01 00 06 00 00 00 cb ff 01 00 06 00 00 00 | ....,........................... |
0720 | d2 ff 01 00 06 00 00 00 d9 ff 01 00 06 00 00 00 e0 ff 01 00 06 00 00 00 e7 ff 01 00 06 00 00 00 | ................................ |
0740 | ee ff 01 00 06 00 00 00 f5 ff 01 00 06 00 00 00 fc ff 01 00 06 00 00 00 03 00 02 00 06 00 00 00 | ................................ |
0760 | 0a 00 02 00 0e 00 00 00 11 00 02 00 01 00 00 00 20 00 02 00 11 00 00 00 22 00 02 00 0a 00 00 00 | ........................"....... |
0780 | 34 00 02 00 1a 00 00 00 3f 00 02 00 b7 00 00 00 5a 00 02 00 02 00 00 00 12 01 02 00 0e 00 00 00 | 4.......?.......Z............... |
07a0 | 15 01 02 00 2d 00 00 00 24 01 02 00 10 00 00 00 52 01 02 00 0f 00 00 00 63 01 02 00 11 00 00 00 | ....-...$.......R.......c....... |
07c0 | 73 01 02 00 13 00 00 00 85 01 02 00 06 00 00 00 99 01 02 00 06 00 00 00 a0 01 02 00 06 00 00 00 | s............................... |
07e0 | a7 01 02 00 06 00 00 00 ae 01 02 00 02 00 00 00 b5 01 02 00 03 00 00 00 b8 01 02 00 02 00 00 00 | ................................ |
0800 | bc 01 02 00 08 00 00 00 bf 01 02 00 02 00 00 00 c8 01 02 00 02 00 00 00 cb 01 02 00 02 00 00 00 | ................................ |
0820 | ce 01 02 00 02 00 00 00 d1 01 02 00 02 00 00 00 d4 01 02 00 32 00 00 00 d7 01 02 00 02 00 00 00 | ....................2........... |
0840 | 0a 02 02 00 02 00 00 00 0d 02 02 00 35 00 00 00 10 02 02 00 17 00 00 00 46 02 02 00 01 00 00 00 | ............5...........F....... |
0860 | 5e 02 02 00 1a 00 00 00 60 02 02 00 80 00 00 00 7b 02 02 00 02 00 00 00 fc 02 02 00 02 00 00 00 | ^.......`.......{............... |
0880 | ff 02 02 00 02 00 00 00 02 03 02 00 02 00 00 00 05 03 02 00 11 00 00 00 08 03 02 00 11 00 00 00 | ................................ |
08a0 | 1a 03 02 00 03 00 00 00 2c 03 02 00 02 00 00 00 30 03 02 00 02 00 00 00 33 03 02 00 63 00 00 00 | ........,.......0.......3...c... |
08c0 | 36 03 02 00 0f 00 00 00 9a 03 02 00 01 00 00 00 aa 03 02 00 20 00 00 00 ac 03 02 00 02 00 00 00 | 6............................... |
08e0 | cd 03 02 00 02 00 00 00 d0 03 02 00 02 00 00 00 d3 03 02 00 02 00 00 00 d6 03 02 00 01 00 00 00 | ................................ |
0900 | d9 03 02 00 1a 00 00 00 db 03 02 00 a2 00 00 00 f6 03 02 00 e6 00 00 00 99 04 02 00 11 00 00 00 | ................................ |
0920 | 80 05 02 00 02 00 00 00 92 05 02 00 02 00 00 00 95 05 02 00 02 00 00 00 98 05 02 00 01 00 00 00 | ................................ |
0940 | 9b 05 02 00 11 00 00 00 9d 05 02 00 c3 00 00 00 af 05 02 00 0f 00 00 00 73 06 02 00 11 00 00 00 | ........................s....... |
0960 | 83 06 02 00 02 00 00 00 95 06 02 00 01 00 00 00 98 06 02 00 6b 00 00 00 9a 06 02 00 02 00 00 00 | ....................k........... |
0980 | 06 07 02 00 3b 00 00 00 09 07 02 00 02 00 00 00 45 07 02 00 02 00 00 00 48 07 02 00 0a 00 00 00 | ....;...........E.......H....... |
09a0 | 4b 07 02 00 6b 02 00 00 56 07 02 00 01 00 00 00 c2 09 02 00 02 00 00 00 c4 09 02 00 01 00 00 00 | K...k...V....................... |
09c0 | c7 09 02 00 6c 00 00 00 c9 09 02 00 01 00 00 00 36 0a 02 00 76 00 00 00 38 0a 02 00 61 01 00 00 | ....l...........6...v...8...a... |
09e0 | af 0a 02 00 8b 00 00 00 11 0c 02 00 10 01 00 00 9d 0c 02 00 36 00 00 00 ae 0d 02 00 22 01 00 00 | ....................6......."... |
0a00 | e5 0d 02 00 26 02 00 00 08 0f 02 00 ec 00 00 00 2f 11 02 00 8b 00 00 00 1c 12 02 00 8c 01 00 00 | ....&.........../............... |
0a20 | a8 12 02 00 bd 00 00 00 35 14 02 00 08 02 00 00 f3 14 02 00 53 01 00 00 fc 16 02 00 dc 00 00 00 | ........5...........S........... |
0a40 | 50 18 02 00 4f 00 00 00 2d 19 02 00 aa 03 00 00 7d 19 02 00 8b 01 00 00 28 1d 02 00 80 01 00 00 | P...O...-.......}.......(....... |
0a60 | b4 1e 02 00 b5 01 00 00 35 20 02 00 61 00 00 00 eb 21 02 00 8f 05 00 00 4d 22 02 00 32 02 00 00 | ........5...a....!......M"..2... |
0a80 | dd 27 02 00 0b 01 00 00 10 2a 02 00 3d 02 00 00 1c 2b 02 00 7e 00 00 00 5a 2d 02 00 37 00 00 00 | .'.......*..=....+..~...Z-..7... |
0aa0 | d9 2d 02 00 8f 01 00 00 11 2e 02 00 01 01 00 00 a1 2f 02 00 da 01 00 00 a3 30 02 00 3e 01 00 00 | .-.............../.......0..>... |
0ac0 | 7e 32 02 00 8e 02 00 00 bd 33 02 00 a6 00 00 00 4c 36 02 00 e3 01 00 00 f3 36 02 00 af 01 00 00 | ~2.......3......L6.......6...... |
0ae0 | d7 38 02 00 f6 01 00 00 87 3a 02 00 17 02 00 00 7e 3c 02 00 d9 01 00 00 96 3e 02 00 8e 00 00 00 | .8.......:......~<.......>...... |
0b00 | 70 40 02 00 57 01 00 00 ff 40 02 00 82 00 00 00 57 42 02 00 fb 00 00 00 da 42 02 00 b4 01 00 00 | p@..W....@......WB.......B...... |
0b20 | d6 43 02 00 d6 01 00 00 8b 45 02 00 59 01 00 00 62 47 02 00 50 01 00 00 bc 48 02 00 be 01 00 00 | .C.......E..Y...bG..P....H...... |
0b40 | 0d 4a 02 00 68 01 00 00 cc 4b 02 00 04 02 00 00 35 4d 02 00 84 00 00 00 3a 4f 02 00 f9 00 00 00 | .J..h....K......5M......:O...... |
0b60 | bf 4f 02 00 a4 00 00 00 b9 50 02 00 43 00 00 00 5e 51 02 00 5c 00 00 00 a2 51 02 00 52 00 00 00 | .O.......P..C...^Q..\....Q..R... |
0b80 | ff 51 02 00 46 00 00 00 52 52 02 00 50 00 00 00 99 52 02 00 48 00 00 00 ea 52 02 00 4c 00 00 00 | .Q..F...RR..P....R..H....R..L... |
0ba0 | 33 53 02 00 47 00 00 00 80 53 02 00 48 00 00 00 c8 53 02 00 41 00 00 00 11 54 02 00 44 00 00 00 | 3S..G....S..H....S..A....T..D... |
0bc0 | 53 54 02 00 19 00 00 00 98 54 02 00 29 00 00 00 b2 54 02 00 12 00 00 00 dc 54 02 00 3d 00 00 00 | ST.......T..)....T.......T..=... |
0be0 | ef 54 02 00 13 00 00 00 2d 55 02 00 3f 00 00 00 41 55 02 00 13 00 00 00 81 55 02 00 3f 00 00 00 | .T......-U..?...AU.......U..?... |
0c00 | 95 55 02 00 15 00 00 00 d5 55 02 00 43 00 00 00 eb 55 02 00 15 00 00 00 2f 56 02 00 43 00 00 00 | .U.......U..C....U....../V..C... |
0c20 | 45 56 02 00 31 01 00 00 89 56 02 00 11 00 00 00 bb 57 02 00 80 01 00 00 cd 57 02 00 41 01 00 00 | EV..1....V.......W.......W..A... |
0c40 | 4e 59 02 00 19 00 00 00 90 5a 02 00 37 00 00 00 aa 5a 02 00 2a 00 00 00 e2 5a 02 00 39 00 00 00 | NY.......Z..7....Z..*....Z..9... |
0c60 | 0d 5b 02 00 29 00 00 00 47 5b 02 00 07 00 00 00 71 5b 02 00 4d 00 00 00 79 5b 02 00 b6 00 00 00 | .[..)...G[......q[..M...y[...... |
0c80 | c7 5b 02 00 40 00 00 00 7e 5c 02 00 2f 00 00 00 bf 5c 02 00 32 00 00 00 ef 5c 02 00 35 00 00 00 | .[..@...~\../....\..2....\..5... |
0ca0 | 22 5d 02 00 1d 00 00 00 58 5d 02 00 27 00 00 00 76 5d 02 00 1f 00 00 00 9e 5d 02 00 36 00 00 00 | "]......X]..'...v].......]..6... |
0cc0 | be 5d 02 00 39 00 00 00 f5 5d 02 00 18 01 00 00 2f 5e 02 00 1e 00 00 00 48 5f 02 00 5c 00 00 00 | .]..9....]....../^......H_..\... |
0ce0 | 67 5f 02 00 37 01 00 00 c4 5f 02 00 cb 01 00 00 fc 60 02 00 59 01 00 00 c8 62 02 00 3a 01 00 00 | g_..7...._.......`..Y....b..:... |
0d00 | 22 64 02 00 2d 00 00 00 5d 65 02 00 3a 00 00 00 8b 65 02 00 6d 00 00 00 c6 65 02 00 77 00 00 00 | "d..-...]e..:....e..m....e..w... |
0d20 | 34 66 02 00 8b 00 00 00 ac 66 02 00 cc 01 00 00 38 67 02 00 ba 00 00 00 05 69 02 00 16 00 00 00 | 4f.......f......8g.......i...... |
0d40 | c0 69 02 00 33 00 00 00 d7 69 02 00 28 00 00 00 0b 6a 02 00 77 01 00 00 34 6a 02 00 51 00 00 00 | .i..3....i..(....j..w...4j..Q... |
0d60 | ac 6b 02 00 74 00 00 00 fe 6b 02 00 26 00 00 00 73 6c 02 00 85 00 00 00 9a 6c 02 00 8b 00 00 00 | .k..t....k..&...sl.......l...... |
0d80 | 20 6d 02 00 cf 00 00 00 ac 6d 02 00 34 01 00 00 7c 6e 02 00 2f 00 00 00 b1 6f 02 00 72 00 00 00 | .m.......m..4...|n../....o..r... |
0da0 | e1 6f 02 00 65 00 00 00 54 70 02 00 31 00 00 00 ba 70 02 00 01 01 00 00 ec 70 02 00 33 00 00 00 | .o..e...Tp..1....p.......p..3... |
0dc0 | ee 71 02 00 3c 00 00 00 22 72 02 00 93 01 00 00 5f 72 02 00 e4 01 00 00 f3 73 02 00 63 00 00 00 | .q..<..."r......_r.......s..c... |
0de0 | d8 75 02 00 d4 00 00 00 3c 76 02 00 ed 00 00 00 11 77 02 00 78 00 00 00 ff 77 02 00 90 00 00 00 | .u......<v.......w..x....w...... |
0e00 | 78 78 02 00 c0 01 00 00 09 79 02 00 a2 00 00 00 ca 7a 02 00 88 00 00 00 6d 7b 02 00 4e 00 00 00 | xx.......y.......z......m{..N... |
0e20 | f6 7b 02 00 58 00 00 00 45 7c 02 00 08 01 00 00 9e 7c 02 00 65 00 00 00 a7 7d 02 00 7e 00 00 00 | .{..X...E|.......|..e....}..~... |
0e40 | 0d 7e 02 00 48 01 00 00 8c 7e 02 00 35 01 00 00 d5 7f 02 00 90 00 00 00 0b 81 02 00 a3 00 00 00 | .~..H....~..5................... |
0e60 | 9c 81 02 00 02 01 00 00 40 82 02 00 3f 00 00 00 43 83 02 00 24 00 00 00 83 83 02 00 22 01 00 00 | ........@...?...C...$......."... |
0e80 | a8 83 02 00 1c 00 00 00 cb 84 02 00 2c 00 00 00 e8 84 02 00 43 00 00 00 15 85 02 00 c8 00 00 00 | ............,.......C........... |
0ea0 | 59 85 02 00 b8 00 00 00 22 86 02 00 b1 01 00 00 db 86 02 00 4f 00 00 00 8d 88 02 00 37 00 00 00 | Y......."...........O.......7... |
0ec0 | dd 88 02 00 26 00 00 00 15 89 02 00 0a 02 00 00 3c 89 02 00 62 00 00 00 47 8b 02 00 41 00 00 00 | ....&...........<...b...G...A... |
0ee0 | aa 8b 02 00 3d 00 00 00 ec 8b 02 00 5e 00 00 00 2a 8c 02 00 35 00 00 00 89 8c 02 00 77 00 00 00 | ....=.......^...*...5.......w... |
0f00 | bf 8c 02 00 04 00 00 00 37 8d 02 00 1c 00 00 00 3c 8d 02 00 03 00 00 00 59 8d 02 00 03 00 00 00 | ........7.......<.......Y....... |
0f20 | 5d 8d 02 00 5c 00 00 00 61 8d 02 00 a7 01 00 00 be 8d 02 00 0c 00 00 00 66 8f 02 00 a8 00 00 00 | ]...\...a...............f....... |
0f40 | 73 8f 02 00 70 00 00 00 1c 90 02 00 3c 00 00 00 8d 90 02 00 33 00 00 00 ca 90 02 00 12 00 00 00 | s...p.......<.......3........... |
0f60 | fe 90 02 00 0c 00 00 00 11 91 02 00 79 00 00 00 1e 91 02 00 45 00 00 00 98 91 02 00 07 00 00 00 | ............y.......E........... |
0f80 | de 91 02 00 10 00 00 00 e6 91 02 00 22 00 00 00 f7 91 02 00 68 00 00 00 1a 92 02 00 41 00 00 00 | ............".......h.......A... |
0fa0 | 83 92 02 00 40 00 00 00 c5 92 02 00 23 00 00 00 06 93 02 00 c5 00 00 00 2a 93 02 00 9f 00 00 00 | ....@.......#...........*....... |
0fc0 | f0 93 02 00 3c 00 00 00 90 94 02 00 35 00 00 00 cd 94 02 00 4e 00 00 00 03 95 02 00 86 00 00 00 | ....<.......5.......N........... |
0fe0 | 52 95 02 00 68 00 00 00 d9 95 02 00 63 00 00 00 42 96 02 00 2f 00 00 00 a6 96 02 00 48 00 00 00 | R...h.......c...B.../.......H... |
1000 | d6 96 02 00 a3 00 00 00 1f 97 02 00 b8 00 00 00 c3 97 02 00 81 00 00 00 7c 98 02 00 46 00 00 00 | ........................|...F... |
1020 | fe 98 02 00 1c 00 00 00 45 99 02 00 7d 00 00 00 62 99 02 00 60 00 00 00 e0 99 02 00 ee 00 00 00 | ........E...}...b...`........... |
1040 | 41 9a 02 00 09 01 00 00 30 9b 02 00 68 00 00 00 3a 9c 02 00 07 00 00 00 a3 9c 02 00 12 00 00 00 | A.......0...h...:............... |
1060 | ab 9c 02 00 10 00 00 00 be 9c 02 00 0e 00 00 00 cf 9c 02 00 42 00 00 00 de 9c 02 00 0d 00 00 00 | ....................B........... |
1080 | 21 9d 02 00 24 00 00 00 2f 9d 02 00 c6 00 00 00 54 9d 02 00 ba 00 00 00 1b 9e 02 00 17 00 00 00 | !...$.../.......T............... |
10a0 | d6 9e 02 00 1a 00 00 00 ee 9e 02 00 10 00 00 00 09 9f 02 00 c7 00 00 00 1a 9f 02 00 1a 00 00 00 | ................................ |
10c0 | e2 9f 02 00 3c 00 00 00 fd 9f 02 00 1a 00 00 00 3a a0 02 00 14 00 00 00 55 a0 02 00 7e 00 00 00 | ....<...........:.......U...~... |
10e0 | 6a a0 02 00 74 00 00 00 e9 a0 02 00 26 01 00 00 5e a1 02 00 40 01 00 00 85 a2 02 00 74 00 00 00 | j...t.......&...^...@.......t... |
1100 | c6 a3 02 00 63 01 00 00 3b a4 02 00 2e 00 00 00 9f a5 02 00 05 00 00 00 ce a5 02 00 09 00 00 00 | ....c...;....................... |
1120 | d4 a5 02 00 07 00 00 00 de a5 02 00 66 00 00 00 e6 a5 02 00 4f 00 00 00 4d a6 02 00 9a 00 00 00 | ............f.......O...M....... |
1140 | 9d a6 02 00 b1 00 00 00 38 a7 02 00 0e 00 00 00 ea a7 02 00 67 00 00 00 f9 a7 02 00 ae 00 00 00 | ........8...........g........... |
1160 | 61 a8 02 00 89 00 00 00 10 a9 02 00 28 00 00 00 9a a9 02 00 3a 00 00 00 c3 a9 02 00 ac 00 00 00 | a...........(.......:........... |
1180 | fe a9 02 00 74 00 00 00 ab aa 02 00 97 00 00 00 20 ab 02 00 3a 00 00 00 b8 ab 02 00 40 00 00 00 | ....t...............:.......@... |
11a0 | f3 ab 02 00 27 00 00 00 34 ac 02 00 29 00 00 00 5c ac 02 00 21 00 00 00 86 ac 02 00 08 01 00 00 | ....'...4...)...\...!........... |
11c0 | a8 ac 02 00 61 01 00 00 b1 ad 02 00 2e 00 00 00 13 af 02 00 80 00 00 00 42 af 02 00 7b 00 00 00 | ....a...................B...{... |
11e0 | c3 af 02 00 30 00 00 00 3f b0 02 00 c8 00 00 00 70 b0 02 00 c8 00 00 00 39 b1 02 00 9c 00 00 00 | ....0...?.......p.......9....... |
1200 | 02 b2 02 00 40 00 00 00 9f b2 02 00 b7 00 00 00 e0 b2 02 00 b7 00 00 00 98 b3 02 00 5a 00 00 00 | ....@.......................Z... |
1220 | 50 b4 02 00 c4 00 00 00 ab b4 02 00 6e 00 00 00 70 b5 02 00 a5 00 00 00 df b5 02 00 c3 00 00 00 | P...........n...p............... |
1240 | 85 b6 02 00 18 00 00 00 49 b7 02 00 54 00 00 00 62 b7 02 00 89 00 00 00 b7 b7 02 00 6b 00 00 00 | ........I...T...b...........k... |
1260 | 41 b8 02 00 3d 00 00 00 ad b8 02 00 91 00 00 00 eb b8 02 00 81 00 00 00 7d b9 02 00 39 00 00 00 | A...=...................}...9... |
1280 | ff b9 02 00 3e 01 00 00 39 ba 02 00 58 00 00 00 78 bb 02 00 c2 00 00 00 d1 bb 02 00 6a 00 00 00 | ....>...9...X...x...........j... |
12a0 | 94 bc 02 00 85 02 00 00 ff bc 02 00 cb 00 00 00 85 bf 02 00 40 00 00 00 51 c0 02 00 5f 00 00 00 | ....................@...Q..._... |
12c0 | 92 c0 02 00 9e 01 00 00 f2 c0 02 00 9f 01 00 00 91 c2 02 00 84 01 00 00 31 c4 02 00 bb 00 00 00 | ........................1....... |
12e0 | b6 c5 02 00 56 00 00 00 72 c6 02 00 39 00 00 00 c9 c6 02 00 1d 00 00 00 03 c7 02 00 4b 00 00 00 | ....V...r...9...............K... |
1300 | 21 c7 02 00 0b 00 00 00 6d c7 02 00 02 01 00 00 79 c7 02 00 30 00 00 00 7c c8 02 00 5d 00 00 00 | !.......m.......y...0...|...]... |
1320 | ad c8 02 00 5d 00 00 00 0b c9 02 00 1a 00 00 00 69 c9 02 00 0d 00 00 00 84 c9 02 00 3b 00 00 00 | ....]...........i...........;... |
1340 | 92 c9 02 00 15 00 00 00 ce c9 02 00 34 00 00 00 e4 c9 02 00 2c 00 00 00 19 ca 02 00 2f 00 00 00 | ............4.......,......./... |
1360 | 46 ca 02 00 c8 00 00 00 76 ca 02 00 43 01 00 00 3f cb 02 00 9c 00 00 00 83 cc 02 00 3e 00 00 00 | F.......v...C...?...........>... |
1380 | 20 cd 02 00 ad 00 00 00 5f cd 02 00 aa 00 00 00 0d ce 02 00 44 00 00 00 b8 ce 02 00 1d 00 00 00 | ........_...........D........... |
13a0 | fd ce 02 00 23 00 00 00 1b cf 02 00 19 00 00 00 3f cf 02 00 12 00 00 00 59 cf 02 00 43 00 00 00 | ....#...........?.......Y...C... |
13c0 | 6c cf 02 00 31 00 00 00 b0 cf 02 00 0a 00 00 00 e2 cf 02 00 08 00 00 00 ed cf 02 00 28 01 00 00 | l...1.......................(... |
13e0 | f6 cf 02 00 81 00 00 00 1f d1 02 00 aa 00 00 00 a1 d1 02 00 d5 00 00 00 4c d2 02 00 a5 01 00 00 | ........................L....... |
1400 | 22 d3 02 00 71 00 00 00 c8 d4 02 00 78 00 00 00 3a d5 02 00 99 00 00 00 b3 d5 02 00 1d 01 00 00 | "...q.......x...:............... |
1420 | 4d d6 02 00 49 01 00 00 6b d7 02 00 18 01 00 00 b5 d8 02 00 1a 01 00 00 ce d9 02 00 39 01 00 00 | M...I...k...................9... |
1440 | e9 da 02 00 5f 00 00 00 23 dc 02 00 32 01 00 00 83 dc 02 00 82 00 00 00 b6 dd 02 00 a2 00 00 00 | ...._...#...2................... |
1460 | 39 de 02 00 93 00 00 00 dc de 02 00 af 00 00 00 70 df 02 00 7e 00 00 00 20 e0 02 00 47 00 00 00 | 9...............p...~.......G... |
1480 | 9f e0 02 00 83 00 00 00 e7 e0 02 00 6e 00 00 00 6b e1 02 00 91 00 00 00 da e1 02 00 59 00 00 00 | ............n...k...........Y... |
14a0 | 6c e2 02 00 96 00 00 00 c6 e2 02 00 8e 00 00 00 5d e3 02 00 c1 00 00 00 ec e3 02 00 59 01 00 00 | l...............]...........Y... |
14c0 | ae e4 02 00 23 00 00 00 08 e6 02 00 43 00 00 00 2c e6 02 00 27 00 00 00 70 e6 02 00 2d 00 00 00 | ....#.......C...,...'...p...-... |
14e0 | 98 e6 02 00 3b 00 00 00 c6 e6 02 00 6e 00 00 00 02 e7 02 00 82 00 00 00 71 e7 02 00 68 00 00 00 | ....;.......n...........q...h... |
1500 | f4 e7 02 00 19 00 00 00 5d e8 02 00 19 00 00 00 77 e8 02 00 19 00 00 00 91 e8 02 00 19 00 00 00 | ........].......w............... |
1520 | ab e8 02 00 19 00 00 00 c5 e8 02 00 19 00 00 00 df e8 02 00 19 00 00 00 f9 e8 02 00 19 00 00 00 | ................................ |
1540 | 13 e9 02 00 19 00 00 00 2d e9 02 00 19 00 00 00 47 e9 02 00 19 00 00 00 61 e9 02 00 19 00 00 00 | ........-.......G.......a....... |
1560 | 7b e9 02 00 7b 00 00 00 95 e9 02 00 c2 00 00 00 11 ea 02 00 41 00 00 00 d4 ea 02 00 c0 00 00 00 | {...{...............A........... |
1580 | 16 eb 02 00 68 00 00 00 d7 eb 02 00 0e 00 00 00 40 ec 02 00 16 00 00 00 4f ec 02 00 1f 00 00 00 | ....h...........@.......O....... |
15a0 | 66 ec 02 00 25 00 00 00 86 ec 02 00 29 00 00 00 ac ec 02 00 24 00 00 00 d6 ec 02 00 e6 00 00 00 | f...%.......).......$........... |
15c0 | fb ec 02 00 20 00 00 00 e2 ed 02 00 14 00 00 00 03 ee 02 00 45 00 00 00 18 ee 02 00 13 00 00 00 | ....................E........... |
15e0 | 5e ee 02 00 17 00 00 00 72 ee 02 00 17 00 00 00 8a ee 02 00 e7 00 00 00 a2 ee 02 00 3d 00 00 00 | ^.......r...................=... |
1600 | 8a ef 02 00 12 00 00 00 c8 ef 02 00 14 00 00 00 db ef 02 00 13 00 00 00 f0 ef 02 00 03 00 00 00 | ................................ |
1620 | 04 f0 02 00 1b 00 00 00 08 f0 02 00 59 00 00 00 24 f0 02 00 03 00 00 00 7e f0 02 00 14 00 00 00 | ............Y...$.......~....... |
1640 | 82 f0 02 00 14 00 00 00 97 f0 02 00 1d 00 00 00 ac f0 02 00 1a 00 00 00 ca f0 02 00 0b 00 00 00 | ................................ |
1660 | e5 f0 02 00 18 00 00 00 f1 f0 02 00 19 00 00 00 0a f1 02 00 44 00 00 00 24 f1 02 00 1a 00 00 00 | ....................D...$....... |
1680 | 69 f1 02 00 1f 00 00 00 84 f1 02 00 1c 00 00 00 a4 f1 02 00 20 00 00 00 c1 f1 02 00 65 01 00 00 | i...........................e... |
16a0 | e2 f1 02 00 54 01 00 00 48 f3 02 00 c3 02 00 00 9d f4 02 00 05 00 00 00 61 f7 02 00 67 00 00 00 | ....T...H...............a...g... |
16c0 | 67 f7 02 00 81 01 00 00 cf f7 02 00 07 00 00 00 51 f9 02 00 13 00 00 00 59 f9 02 00 0f 00 00 00 | g...............Q.......Y....... |
16e0 | 6d f9 02 00 1e 00 00 00 7d f9 02 00 11 00 00 00 9c f9 02 00 21 00 00 00 ae f9 02 00 4c 00 00 00 | m.......}...........!.......L... |
1700 | d0 f9 02 00 50 00 00 00 1d fa 02 00 69 00 00 00 6e fa 02 00 55 00 00 00 d8 fa 02 00 55 00 00 00 | ....P.......i...n...U.......U... |
1720 | 2e fb 02 00 17 00 00 00 84 fb 02 00 0e 00 00 00 9c fb 02 00 0e 00 00 00 ab fb 02 00 3f 00 00 00 | ............................?... |
1740 | ba fb 02 00 36 00 00 00 fa fb 02 00 0b 00 00 00 31 fc 02 00 d1 00 00 00 3d fc 02 00 19 00 00 00 | ....6...........1.......=....... |
1760 | 0f fd 02 00 87 00 00 00 29 fd 02 00 89 00 00 00 b1 fd 02 00 db 00 00 00 3b fe 02 00 55 00 00 00 | ........)...............;...U... |
1780 | 17 ff 02 00 75 00 00 00 6d ff 02 00 27 00 00 00 e3 ff 02 00 1c 00 00 00 0b 00 03 00 7d 01 00 00 | ....u...m...'...............}... |
17a0 | 28 00 03 00 11 00 00 00 a6 01 03 00 0c 00 00 00 b8 01 03 00 2f 00 00 00 c5 01 03 00 3f 00 00 00 | (.................../.......?... |
17c0 | f5 01 03 00 63 00 00 00 35 02 03 00 09 00 00 00 99 02 03 00 5d 00 00 00 a3 02 03 00 58 00 00 00 | ....c...5...........].......X... |
17e0 | 01 03 03 00 59 00 00 00 5a 03 03 00 34 00 00 00 b4 03 03 00 17 00 00 00 e9 03 03 00 0c 00 00 00 | ....Y...Z...4................... |
1800 | 01 04 03 00 25 00 00 00 0e 04 03 00 13 00 00 00 34 04 03 00 29 00 00 00 48 04 03 00 83 00 00 00 | ....%...........4...)...H....... |
1820 | 72 04 03 00 6e 00 00 00 f6 04 03 00 31 00 00 00 65 05 03 00 06 00 00 00 97 05 03 00 1d 00 00 00 | r...n.......1...e............... |
1840 | 9e 05 03 00 0e 00 00 00 bc 05 03 00 0c 00 00 00 cb 05 03 00 3f 00 00 00 d8 05 03 00 37 00 00 00 | ....................?.......7... |
1860 | 18 06 03 00 07 00 00 00 50 06 03 00 0b 00 00 00 58 06 03 00 0e 00 00 00 64 06 03 00 d0 00 00 00 | ........P.......X.......d....... |
1880 | 73 06 03 00 9c 00 00 00 44 07 03 00 51 00 00 00 e1 07 03 00 9c 00 00 00 33 08 03 00 ef 00 00 00 | s.......D...Q...........3....... |
18a0 | d0 08 03 00 8d 01 00 00 c0 09 03 00 37 01 00 00 4e 0b 03 00 38 01 00 00 86 0c 03 00 ce 00 00 00 | ............7...N...8........... |
18c0 | bf 0d 03 00 d9 00 00 00 8e 0e 03 00 3b 00 00 00 68 0f 03 00 63 00 00 00 a4 0f 03 00 78 00 00 00 | ............;...h...c.......x... |
18e0 | 08 10 03 00 9d 00 00 00 81 10 03 00 97 00 00 00 1f 11 03 00 25 00 00 00 b7 11 03 00 a1 00 00 00 | ....................%........... |
1900 | dd 11 03 00 3a 01 00 00 7f 12 03 00 16 00 00 00 ba 13 03 00 1a 00 00 00 d1 13 03 00 0a 00 00 00 | ....:........................... |
1920 | ec 13 03 00 27 00 00 00 f7 13 03 00 16 00 00 00 1f 14 03 00 c8 00 00 00 36 14 03 00 1a 00 00 00 | ....'...................6....... |
1940 | ff 14 03 00 2a 00 00 00 1a 15 03 00 0c 00 00 00 45 15 03 00 30 00 00 00 52 15 03 00 2c 00 00 00 | ....*...........E...0...R...,... |
1960 | 83 15 03 00 0b 01 00 00 b0 15 03 00 76 00 00 00 bc 16 03 00 bc 00 00 00 33 17 03 00 91 00 00 00 | ............v...........3....... |
1980 | f0 17 03 00 3e 00 00 00 82 18 03 00 0c 00 00 00 c1 18 03 00 46 00 00 00 ce 18 03 00 06 00 00 00 | ....>...............F........... |
19a0 | 15 19 03 00 14 00 00 00 1c 19 03 00 06 00 00 00 31 19 03 00 9f 00 00 00 38 19 03 00 0e 00 00 00 | ................1.......8....... |
19c0 | d8 19 03 00 2d 00 00 00 e7 19 03 00 1b 00 00 00 15 1a 03 00 0f 00 00 00 31 1a 03 00 07 00 00 00 | ....-...................1....... |
19e0 | 41 1a 03 00 16 00 00 00 49 1a 03 00 1d 00 00 00 60 1a 03 00 06 00 00 00 7e 1a 03 00 14 00 00 00 | A.......I.......`.......~....... |
1a00 | 85 1a 03 00 15 00 00 00 9a 1a 03 00 14 00 00 00 b0 1a 03 00 1f 00 00 00 c5 1a 03 00 3d 00 00 00 | ............................=... |
1a20 | e5 1a 03 00 0b 00 00 00 23 1b 03 00 14 00 00 00 2f 1b 03 00 12 00 00 00 44 1b 03 00 14 00 00 00 | ........#......./.......D....... |
1a40 | 57 1b 03 00 6c 00 00 00 6c 1b 03 00 07 00 00 00 d9 1b 03 00 6a 00 00 00 e1 1b 03 00 98 00 00 00 | W...l...l...........j........... |
1a60 | 4c 1c 03 00 0c 00 00 00 e5 1c 03 00 96 00 00 00 f2 1c 03 00 3e 00 00 00 89 1d 03 00 77 00 00 00 | L...................>.......w... |
1a80 | c8 1d 03 00 38 00 00 00 40 1e 03 00 08 00 00 00 79 1e 03 00 40 00 00 00 82 1e 03 00 1e 00 00 00 | ....8...@.......y...@........... |
1aa0 | c3 1e 03 00 11 00 00 00 e2 1e 03 00 1b 00 00 00 f4 1e 03 00 58 00 00 00 10 1f 03 00 0d 00 00 00 | ....................X........... |
1ac0 | 69 1f 03 00 15 00 00 00 77 1f 03 00 16 00 00 00 8d 1f 03 00 13 00 00 00 a4 1f 03 00 15 00 00 00 | i.......w....................... |
1ae0 | b8 1f 03 00 2f 00 00 00 ce 1f 03 00 0b 01 00 00 fe 1f 03 00 af 00 00 00 0a 21 03 00 16 00 00 00 | ..../....................!...... |
1b00 | ba 21 03 00 59 00 00 00 d1 21 03 00 26 00 00 00 2b 22 03 00 20 00 00 00 52 22 03 00 25 00 00 00 | .!..Y....!..&...+"......R"..%... |
1b20 | 73 22 03 00 a5 00 00 00 99 22 03 00 09 00 00 00 3f 23 03 00 94 00 00 00 49 23 03 00 0d 00 00 00 | s"......."......?#......I#...... |
1b40 | de 23 03 00 51 00 00 00 ec 23 03 00 25 00 00 00 3e 24 03 00 37 00 00 00 64 24 03 00 c0 00 00 00 | .#..Q....#..%...>$..7...d$...... |
1b60 | 9c 24 03 00 71 00 00 00 5d 25 03 00 24 00 00 00 cf 25 03 00 52 00 00 00 f4 25 03 00 4e 00 00 00 | .$..q...]%..$....%..R....%..N... |
1b80 | 47 26 03 00 68 00 00 00 96 26 03 00 55 00 00 00 ff 26 03 00 22 00 00 00 55 27 03 00 22 00 00 00 | G&..h....&..U....&.."...U'.."... |
1ba0 | 78 27 03 00 4c 00 00 00 9b 27 03 00 57 00 00 00 e8 27 03 00 75 00 00 00 40 28 03 00 70 00 00 00 | x'..L....'..W....'..u...@(..p... |
1bc0 | b6 28 03 00 75 00 00 00 27 29 03 00 a4 00 00 00 9d 29 03 00 37 00 00 00 42 2a 03 00 fc 00 00 00 | .(..u...').......)..7...B*...... |
1be0 | 7a 2a 03 00 bb 00 00 00 77 2b 03 00 7a 00 00 00 33 2c 03 00 77 00 00 00 ae 2c 03 00 71 00 00 00 | z*......w+..z...3,..w....,..q... |
1c00 | 26 2d 03 00 aa 00 00 00 98 2d 03 00 3a 00 00 00 43 2e 03 00 2b 00 00 00 7e 2e 03 00 48 00 00 00 | &-.......-..:...C...+...~...H... |
1c20 | aa 2e 03 00 3a 00 00 00 f3 2e 03 00 60 00 00 00 2e 2f 03 00 62 00 00 00 8f 2f 03 00 26 00 00 00 | ....:.......`..../..b..../..&... |
1c40 | f2 2f 03 00 2b 00 00 00 19 30 03 00 43 00 00 00 45 30 03 00 2b 00 00 00 89 30 03 00 5b 00 00 00 | ./..+....0..C...E0..+....0..[... |
1c60 | b5 30 03 00 61 00 00 00 11 31 03 00 27 00 00 00 73 31 03 00 5b 00 00 00 9b 31 03 00 2e 00 00 00 | .0..a....1..'...s1..[....1...... |
1c80 | f7 31 03 00 47 00 00 00 26 32 03 00 9a 00 00 00 6e 32 03 00 31 00 00 00 09 33 03 00 31 00 00 00 | .1..G...&2......n2..1....3..1... |
1ca0 | 3b 33 03 00 41 00 00 00 6d 33 03 00 84 00 00 00 af 33 03 00 5f 00 00 00 34 34 03 00 5f 00 00 00 | ;3..A...m3.......3.._...44.._... |
1cc0 | 94 34 03 00 3c 00 00 00 f4 34 03 00 39 00 00 00 31 35 03 00 89 00 00 00 6b 35 03 00 58 00 00 00 | .4..<....4..9...15......k5..X... |
1ce0 | f5 35 03 00 2c 00 00 00 4e 36 03 00 2b 00 00 00 7b 36 03 00 64 00 00 00 a7 36 03 00 65 00 00 00 | .5..,...N6..+...{6..d....6..e... |
1d00 | 0c 37 03 00 2f 00 00 00 72 37 03 00 4b 00 00 00 a2 37 03 00 5f 00 00 00 ee 37 03 00 42 00 00 00 | .7../...r7..K....7.._....7..B... |
1d20 | 4e 38 03 00 2a 00 00 00 91 38 03 00 3b 00 00 00 bc 38 03 00 2b 00 00 00 f8 38 03 00 34 00 00 00 | N8..*....8..;....8..+....8..4... |
1d40 | 24 39 03 00 42 00 00 00 59 39 03 00 99 00 00 00 9c 39 03 00 3f 00 00 00 36 3a 03 00 3f 00 00 00 | $9..B...Y9.......9..?...6:..?... |
1d60 | 76 3a 03 00 50 00 00 00 b6 3a 03 00 b2 00 00 00 07 3b 03 00 5d 00 00 00 ba 3b 03 00 49 00 00 00 | v:..P....:.......;..]....;..I... |
1d80 | 18 3c 03 00 49 00 00 00 62 3c 03 00 3c 00 00 00 ac 3c 03 00 1f 00 00 00 e9 3c 03 00 59 00 00 00 | .<..I...b<..<....<.......<..Y... |
1da0 | 09 3d 03 00 95 00 00 00 63 3d 03 00 38 00 00 00 f9 3d 03 00 10 00 00 00 32 3e 03 00 92 00 00 00 | .=......c=..8....=......2>...... |
1dc0 | 43 3e 03 00 17 00 00 00 d6 3e 03 00 11 00 00 00 ee 3e 03 00 17 00 00 00 00 3f 03 00 25 00 00 00 | C>.......>.......>.......?..%... |
1de0 | 18 3f 03 00 18 00 00 00 3e 3f 03 00 17 00 00 00 57 3f 03 00 1d 00 00 00 6f 3f 03 00 21 00 00 00 | .?......>?......W?......o?..!... |
1e00 | 8d 3f 03 00 17 00 00 00 af 3f 03 00 17 00 00 00 c7 3f 03 00 b2 00 00 00 df 3f 03 00 42 00 00 00 | .?.......?.......?.......?..B... |
1e20 | 92 40 03 00 12 00 00 00 d5 40 03 00 b7 00 00 00 e8 40 03 00 44 01 00 00 a0 41 03 00 3c 01 00 00 | .@.......@.......@..D....A..<... |
1e40 | e5 42 03 00 c4 01 00 00 22 44 03 00 09 00 00 00 e7 45 03 00 0e 00 00 00 f1 45 03 00 16 00 00 00 | .B......"D.......E.......E...... |
1e60 | 00 46 03 00 16 00 00 00 17 46 03 00 0d 00 00 00 2e 46 03 00 07 00 00 00 3c 46 03 00 0e 00 00 00 | .F.......F.......F......<F...... |
1e80 | 44 46 03 00 30 00 00 00 53 46 03 00 09 00 00 00 84 46 03 00 12 00 00 00 8e 46 03 00 12 00 00 00 | DF..0...SF.......F.......F...... |
1ea0 | a1 46 03 00 11 00 00 00 b4 46 03 00 49 00 00 00 c6 46 03 00 49 00 00 00 10 47 03 00 c9 00 00 00 | .F.......F..I....F..I....G...... |
1ec0 | 5a 47 03 00 b3 00 00 00 24 48 03 00 36 00 00 00 d8 48 03 00 39 00 00 00 0f 49 03 00 81 00 00 00 | ZG......$H..6....H..9....I...... |
1ee0 | 49 49 03 00 82 00 00 00 cb 49 03 00 92 00 00 00 4e 4a 03 00 64 00 00 00 e1 4a 03 00 8a 00 00 00 | II.......I......NJ..d....J...... |
1f00 | 46 4b 03 00 15 00 00 00 d1 4b 03 00 5f 00 00 00 e7 4b 03 00 44 00 00 00 47 4c 03 00 69 00 00 00 | FK.......K.._....K..D...GL..i... |
1f20 | 8c 4c 03 00 92 00 00 00 f6 4c 03 00 75 00 00 00 89 4d 03 00 66 00 00 00 ff 4d 03 00 4e 00 00 00 | .L.......L..u....M..f....M..N... |
1f40 | 66 4e 03 00 8c 00 00 00 b5 4e 03 00 56 00 00 00 42 4f 03 00 76 00 00 00 99 4f 03 00 73 00 00 00 | fN.......N..V...BO..v....O..s... |
1f60 | 10 50 03 00 c3 00 00 00 84 50 03 00 c0 00 00 00 48 51 03 00 6b 00 00 00 09 52 03 00 30 00 00 00 | .P.......P......HQ..k....R..0... |
1f80 | 75 52 03 00 7b 00 00 00 a6 52 03 00 45 00 00 00 22 53 03 00 7f 00 00 00 68 53 03 00 6d 00 00 00 | uR..{....R..E..."S......hS..m... |
1fa0 | e8 53 03 00 3d 00 00 00 56 54 03 00 d9 00 00 00 94 54 03 00 a0 00 00 00 6e 55 03 00 68 00 00 00 | .S..=...VT.......T......nU..h... |
1fc0 | 0f 56 03 00 9c 00 00 00 78 56 03 00 54 00 00 00 15 57 03 00 2b 00 00 00 6a 57 03 00 21 00 00 00 | .V......xV..T....W..+...jW..!... |
1fe0 | 96 57 03 00 5a 00 00 00 b8 57 03 00 70 00 00 00 13 58 03 00 4a 00 00 00 84 58 03 00 16 00 00 00 | .W..Z....W..p....X..J....X...... |
2000 | cf 58 03 00 19 00 00 00 e6 58 03 00 25 00 00 00 00 59 03 00 62 00 00 00 26 59 03 00 08 00 00 00 | .X.......X..%....Y..b...&Y...... |
2020 | 89 59 03 00 2d 00 00 00 92 59 03 00 14 00 00 00 c0 59 03 00 14 00 00 00 d5 59 03 00 14 00 00 00 | .Y..-....Y.......Y.......Y...... |
2040 | ea 59 03 00 14 00 00 00 ff 59 03 00 0d 00 00 00 14 5a 03 00 39 00 00 00 22 5a 03 00 43 00 00 00 | .Y.......Y.......Z..9..."Z..C... |
2060 | 5c 5a 03 00 0b 00 00 00 a0 5a 03 00 da 00 00 00 ac 5a 03 00 f3 00 00 00 87 5b 03 00 dc 00 00 00 | \Z.......Z.......Z.......[...... |
2080 | 7b 5c 03 00 dc 00 00 00 58 5d 03 00 43 00 00 00 35 5e 03 00 3d 00 00 00 79 5e 03 00 00 01 00 00 | {\......X]..C...5^..=...y^...... |
20a0 | b7 5e 03 00 b3 00 00 00 b8 5f 03 00 0f 00 00 00 6c 60 03 00 0b 00 00 00 7c 60 03 00 61 00 00 00 | .^......._......l`......|`..a... |
20c0 | 88 60 03 00 0a 00 00 00 ea 60 03 00 0b 00 00 00 f5 60 03 00 18 00 00 00 01 61 03 00 10 00 00 00 | .`.......`.......`.......a...... |
20e0 | 1a 61 03 00 3a 00 00 00 2b 61 03 00 12 00 00 00 66 61 03 00 3c 00 00 00 79 61 03 00 84 00 00 00 | .a..:...+a......fa..<...ya...... |
2100 | b6 61 03 00 14 00 00 00 3b 62 03 00 4c 00 00 00 50 62 03 00 05 00 00 00 9d 62 03 00 15 00 00 00 | .a......;b..L...Pb.......b...... |
2120 | a3 62 03 00 0d 00 00 00 b9 62 03 00 b6 00 00 00 c7 62 03 00 04 00 00 00 7e 63 03 00 bf 00 00 00 | .b.......b.......b......~c...... |
2140 | 83 63 03 00 52 00 00 00 43 64 03 00 06 00 00 00 96 64 03 00 0e 00 00 00 9d 64 03 00 10 00 00 00 | .c..R...Cd.......d.......d...... |
2160 | ac 64 03 00 1c 00 00 00 bd 64 03 00 17 00 00 00 da 64 03 00 2b 00 00 00 f2 64 03 00 05 00 00 00 | .d.......d.......d..+....d...... |
2180 | 1e 65 03 00 2f 00 00 00 24 65 03 00 34 00 00 00 54 65 03 00 01 01 00 00 89 65 03 00 05 00 00 00 | .e../...$e..4...Te.......e...... |
21a0 | 8b 66 03 00 67 00 00 00 91 66 03 00 07 00 00 00 f9 66 03 00 0a 00 00 00 01 67 03 00 15 00 00 00 | .f..g....f.......f.......g...... |
21c0 | 0c 67 03 00 19 00 00 00 22 67 03 00 a4 00 00 00 3c 67 03 00 32 00 00 00 e1 67 03 00 31 00 00 00 | .g......"g......<g..2....g..1... |
21e0 | 14 68 03 00 1d 00 00 00 46 68 03 00 14 00 00 00 64 68 03 00 32 00 00 00 79 68 03 00 15 00 00 00 | .h......Fh......dh..2...yh...... |
2200 | ac 68 03 00 0a 00 00 00 c2 68 03 00 0c 00 00 00 cd 68 03 00 11 00 00 00 da 68 03 00 17 00 00 00 | .h.......h.......h.......h...... |
2220 | ec 68 03 00 13 00 00 00 04 69 03 00 19 00 00 00 18 69 03 00 74 00 00 00 32 69 03 00 98 00 00 00 | .h.......i.......i..t...2i...... |
2240 | a7 69 03 00 24 00 00 00 40 6a 03 00 25 00 00 00 65 6a 03 00 0d 00 00 00 8b 6a 03 00 42 00 00 00 | .i..$...@j..%...ej.......j..B... |
2260 | 99 6a 03 00 16 00 00 00 dc 6a 03 00 13 00 00 00 f3 6a 03 00 55 00 00 00 07 6b 03 00 95 00 00 00 | .j.......j.......j..U....k...... |
2280 | 5d 6b 03 00 35 00 00 00 f3 6b 03 00 8e 00 00 00 29 6c 03 00 68 00 00 00 b8 6c 03 00 77 00 00 00 | ]k..5....k......)l..h....l..w... |
22a0 | 21 6d 03 00 81 00 00 00 99 6d 03 00 21 00 00 00 1b 6e 03 00 2e 00 00 00 3d 6e 03 00 7e 00 00 00 | !m.......m..!....n......=n..~... |
22c0 | 6c 6e 03 00 4b 00 00 00 eb 6e 03 00 38 00 00 00 37 6f 03 00 95 00 00 00 70 6f 03 00 70 00 00 00 | ln..K....n..8...7o......po..p... |
22e0 | 06 70 03 00 32 00 00 00 77 70 03 00 69 00 00 00 aa 70 03 00 7b 00 00 00 14 71 03 00 2a 00 00 00 | .p..2...wp..i....p..{....q..*... |
2300 | 90 71 03 00 62 00 00 00 bb 71 03 00 4b 01 00 00 1e 72 03 00 a6 00 00 00 6a 73 03 00 89 00 00 00 | .q..b....q..K....r......js...... |
2320 | 11 74 03 00 af 00 00 00 9b 74 03 00 88 00 00 00 4b 75 03 00 31 00 00 00 d4 75 03 00 2d 00 00 00 | .t.......t......Ku..1....u..-... |
2340 | 06 76 03 00 7a 00 00 00 34 76 03 00 92 00 00 00 af 76 03 00 6b 00 00 00 42 77 03 00 0e 00 00 00 | .v..z...4v.......v..k...Bw...... |
2360 | ae 77 03 00 4b 00 00 00 bd 77 03 00 33 00 00 00 09 78 03 00 39 00 00 00 3d 78 03 00 0b 00 00 00 | .w..K....w..3....x..9...=x...... |
2380 | 77 78 03 00 6d 00 00 00 83 78 03 00 1a 00 00 00 f1 78 03 00 20 00 00 00 0c 79 03 00 25 00 00 00 | wx..m....x.......x.......y..%... |
23a0 | 2d 79 03 00 4d 00 00 00 53 79 03 00 4e 00 00 00 a1 79 03 00 0b 00 00 00 f0 79 03 00 f6 00 00 00 | -y..M...Sy..N....y.......y...... |
23c0 | fc 79 03 00 2e 00 00 00 f3 7a 03 00 13 00 00 00 22 7b 03 00 0f 00 00 00 36 7b 03 00 12 00 00 00 | .y.......z......"{......6{...... |
23e0 | 46 7b 03 00 71 01 00 00 59 7b 03 00 fe 00 00 00 cb 7c 03 00 4e 00 00 00 ca 7d 03 00 c9 00 00 00 | F{..q...Y{.......|..N....}...... |
2400 | 19 7e 03 00 13 00 00 00 e3 7e 03 00 19 00 00 00 f7 7e 03 00 7c 00 00 00 11 7f 03 00 38 00 00 00 | .~.......~.......~..|.......8... |
2420 | 8e 7f 03 00 3b 00 00 00 c7 7f 03 00 46 00 00 00 03 80 03 00 2f 00 00 00 4a 80 03 00 19 00 00 00 | ....;.......F......./...J....... |
2440 | 7a 80 03 00 12 00 00 00 94 80 03 00 14 00 00 00 a7 80 03 00 22 00 00 00 bc 80 03 00 84 00 00 00 | z..................."........... |
2460 | df 80 03 00 26 00 00 00 64 81 03 00 24 00 00 00 8b 81 03 00 1b 00 00 00 b0 81 03 00 1d 00 00 00 | ....&...d...$................... |
2480 | cc 81 03 00 58 00 00 00 ea 81 03 00 43 00 00 00 43 82 03 00 56 00 00 00 87 82 03 00 43 00 00 00 | ....X.......C...C...V.......C... |
24a0 | de 82 03 00 75 00 00 00 22 83 03 00 1e 00 00 00 98 83 03 00 25 00 00 00 b7 83 03 00 25 00 00 00 | ....u..."...........%.......%... |
24c0 | dd 83 03 00 15 00 00 00 03 84 03 00 86 00 00 00 19 84 03 00 2e 00 00 00 a0 84 03 00 95 00 00 00 | ................................ |
24e0 | cf 84 03 00 2b 00 00 00 65 85 03 00 2b 00 00 00 91 85 03 00 37 01 00 00 bd 85 03 00 38 00 00 00 | ....+...e...+.......7.......8... |
2500 | f5 86 03 00 3b 00 00 00 2e 87 03 00 18 00 00 00 6a 87 03 00 16 00 00 00 83 87 03 00 7a 00 00 00 | ....;...........j...........z... |
2520 | 9a 87 03 00 12 00 00 00 15 88 03 00 67 00 00 00 28 88 03 00 3a 00 00 00 90 88 03 00 3a 00 00 00 | ............g...(...:.......:... |
2540 | cb 88 03 00 0c 00 00 00 06 89 03 00 18 00 00 00 13 89 03 00 39 00 00 00 2c 89 03 00 47 00 00 00 | ....................9...,...G... |
2560 | 66 89 03 00 42 00 00 00 ae 89 03 00 4c 00 00 00 f1 89 03 00 3f 00 00 00 3e 8a 03 00 3b 00 00 00 | f...B.......L.......?...>...;... |
2580 | 7e 8a 03 00 41 00 00 00 ba 8a 03 00 11 01 00 00 fc 8a 03 00 3d 00 00 00 0e 8c 03 00 31 00 00 00 | ~...A...............=.......1... |
25a0 | 4c 8c 03 00 26 01 00 00 7e 8c 03 00 e2 00 00 00 a5 8d 03 00 9f 00 00 00 88 8e 03 00 9f 00 00 00 | L...&...~....................... |
25c0 | 28 8f 03 00 3a 00 00 00 c8 8f 03 00 f8 00 00 00 03 90 03 00 e2 00 00 00 fc 90 03 00 88 00 00 00 | (...:........................... |
25e0 | df 91 03 00 31 00 00 00 68 92 03 00 06 00 00 00 9a 92 03 00 0d 00 00 00 a1 92 03 00 0b 00 00 00 | ....1...h....................... |
2600 | af 92 03 00 2e 00 00 00 bb 92 03 00 67 00 00 00 ea 92 03 00 3e 00 00 00 52 93 03 00 13 00 00 00 | ............g.......>...R....... |
2620 | 91 93 03 00 ab 00 00 00 a5 93 03 00 b5 00 00 00 51 94 03 00 b5 00 00 00 07 95 03 00 90 00 00 00 | ................Q............... |
2640 | bd 95 03 00 30 00 00 00 4e 96 03 00 47 00 00 00 7f 96 03 00 22 00 00 00 c7 96 03 00 22 00 00 00 | ....0...N...G......."......."... |
2660 | ea 96 03 00 24 00 00 00 0d 97 03 00 09 00 00 00 32 97 03 00 09 00 00 00 3c 97 03 00 92 00 00 00 | ....$...........2.......<....... |
2680 | 46 97 03 00 38 00 00 00 d9 97 03 00 05 00 00 00 12 98 03 00 0f 00 00 00 18 98 03 00 88 00 00 00 | F...8........................... |
26a0 | 28 98 03 00 bd 00 00 00 b1 98 03 00 c2 00 00 00 6f 99 03 00 7e 00 00 00 32 9a 03 00 0b 00 00 00 | (...............o...~...2....... |
26c0 | b1 9a 03 00 12 00 00 00 bd 9a 03 00 6a 00 00 00 d0 9a 03 00 2f 00 00 00 3b 9b 03 00 0a 00 00 00 | ............j......./...;....... |
26e0 | 6b 9b 03 00 f4 00 00 00 76 9b 03 00 d2 01 00 00 6b 9c 03 00 ad 01 00 00 3e 9e 03 00 dd 00 00 00 | k.......v.......k.......>....... |
2700 | ec 9f 03 00 91 01 00 00 ca a0 03 00 7f 00 00 00 5c a2 03 00 af 00 00 00 dc a2 03 00 2a 03 00 00 | ................\...........*... |
2720 | 8c a3 03 00 6b 00 00 00 b7 a6 03 00 a3 00 00 00 23 a7 03 00 9a 00 00 00 c7 a7 03 00 50 00 00 00 | ....k...........#...........P... |
2740 | 62 a8 03 00 81 00 00 00 b3 a8 03 00 2c 00 00 00 35 a9 03 00 7a 00 00 00 62 a9 03 00 2b 00 00 00 | b...........,...5...z...b...+... |
2760 | dd a9 03 00 31 00 00 00 09 aa 03 00 25 00 00 00 3b aa 03 00 09 00 00 00 61 aa 03 00 34 00 00 00 | ....1.......%...;.......a...4... |
2780 | 6b aa 03 00 23 00 00 00 a0 aa 03 00 23 00 00 00 c4 aa 03 00 25 00 00 00 e8 aa 03 00 11 00 00 00 | k...#.......#.......%........... |
27a0 | 0e ab 03 00 12 00 00 00 20 ab 03 00 12 00 00 00 33 ab 03 00 1e 00 00 00 46 ab 03 00 23 00 00 00 | ................3.......F...#... |
27c0 | 65 ab 03 00 39 00 00 00 89 ab 03 00 2c 00 00 00 c3 ab 03 00 2d 00 00 00 f0 ab 03 00 1c 00 00 00 | e...9.......,.......-........... |
27e0 | 1e ac 03 00 1d 00 00 00 3b ac 03 00 1e 00 00 00 59 ac 03 00 0c 00 00 00 78 ac 03 00 28 00 00 00 | ........;.......Y.......x...(... |
2800 | 85 ac 03 00 3a 00 00 00 ae ac 03 00 30 00 00 00 e9 ac 03 00 27 00 00 00 1a ad 03 00 38 00 00 00 | ....:.......0.......'.......8... |
2820 | 42 ad 03 00 1d 00 00 00 7b ad 03 00 13 00 00 00 99 ad 03 00 0b 00 00 00 ad ad 03 00 28 00 00 00 | B.......{...................(... |
2840 | b9 ad 03 00 30 00 00 00 e2 ad 03 00 4c 00 00 00 13 ae 03 00 74 00 00 00 60 ae 03 00 55 00 00 00 | ....0.......L.......t...`...U... |
2860 | d5 ae 03 00 30 00 00 00 2b af 03 00 0b 00 00 00 5c af 03 00 28 00 00 00 68 af 03 00 35 00 00 00 | ....0...+.......\...(...h...5... |
2880 | 91 af 03 00 0a 00 00 00 c7 af 03 00 56 00 00 00 d2 af 03 00 1f 00 00 00 29 b0 03 00 18 00 00 00 | ............V...........)....... |
28a0 | 49 b0 03 00 2d 00 00 00 62 b0 03 00 23 00 00 00 90 b0 03 00 3f 00 00 00 b4 b0 03 00 4d 00 00 00 | I...-...b...#.......?.......M... |
28c0 | f4 b0 03 00 20 00 00 00 42 b1 03 00 6d 00 00 00 63 b1 03 00 61 00 00 00 d1 b1 03 00 63 00 00 00 | ........B...m...c...a.......c... |
28e0 | 33 b2 03 00 31 00 00 00 97 b2 03 00 34 00 00 00 c9 b2 03 00 1b 01 00 00 fe b2 03 00 3a 00 00 00 | 3...1.......4...............:... |
2900 | 1a b4 03 00 4a 00 00 00 55 b4 03 00 38 00 00 00 a0 b4 03 00 40 01 00 00 d9 b4 03 00 3a 00 00 00 | ....J...U...8.......@.......:... |
2920 | 1a b6 03 00 4f 00 00 00 55 b6 03 00 2e 00 00 00 a5 b6 03 00 86 00 00 00 d4 b6 03 00 bb 01 00 00 | ....O...U....................... |
2940 | 5b b7 03 00 06 01 00 00 17 b9 03 00 bf 00 00 00 1e ba 03 00 25 00 00 00 de ba 03 00 4b 00 00 00 | [...................%.......K... |
2960 | 04 bb 03 00 79 00 00 00 50 bb 03 00 22 00 00 00 ca bb 03 00 64 00 00 00 ed bb 03 00 16 00 00 00 | ....y...P...".......d........... |
2980 | 52 bc 03 00 14 00 00 00 69 bc 03 00 79 00 00 00 7e bc 03 00 42 00 00 00 f8 bc 03 00 1c 00 00 00 | R.......i...y...~...B........... |
29a0 | 3b bd 03 00 33 00 00 00 58 bd 03 00 a7 00 00 00 8c bd 03 00 c1 00 00 00 34 be 03 00 32 00 00 00 | ;...3...X...............4...2... |
29c0 | f6 be 03 00 05 00 00 00 29 bf 03 00 10 00 00 00 2f bf 03 00 5e 00 00 00 40 bf 03 00 08 00 00 00 | ........)......./...^...@....... |
29e0 | 9f bf 03 00 dc 00 00 00 a8 bf 03 00 10 00 00 00 85 c0 03 00 5d 00 00 00 96 c0 03 00 0d 00 00 00 | ....................]........... |
2a00 | f4 c0 03 00 21 00 00 00 02 c1 03 00 21 00 00 00 24 c1 03 00 d4 00 00 00 46 c1 03 00 14 00 00 00 | ....!.......!...$.......F....... |
2a20 | 1b c2 03 00 38 00 00 00 30 c2 03 00 a3 00 00 00 69 c2 03 00 a7 00 00 00 0d c3 03 00 23 00 00 00 | ....8...0.......i...........#... |
2a40 | b5 c3 03 00 91 00 00 00 d9 c3 03 00 59 00 00 00 6b c4 03 00 a6 01 00 00 c5 c4 03 00 ca 00 00 00 | ............Y...k............... |
2a60 | 6c c6 03 00 70 01 00 00 37 c7 03 00 63 01 00 00 a8 c8 03 00 07 00 00 00 0c ca 03 00 15 00 00 00 | l...p...7...c................... |
2a80 | 14 ca 03 00 12 00 00 00 2a ca 03 00 0f 00 00 00 3d ca 03 00 16 00 00 00 4d ca 03 00 2f 00 00 00 | ........*.......=.......M.../... |
2aa0 | 64 ca 03 00 2f 00 00 00 94 ca 03 00 77 00 00 00 c4 ca 03 00 17 00 00 00 3c cb 03 00 10 00 00 00 | d.../.......w...........<....... |
2ac0 | 54 cb 03 00 51 00 00 00 65 cb 03 00 08 00 00 00 b7 cb 03 00 bf 00 00 00 c0 cb 03 00 58 00 00 00 | T...Q...e...................X... |
2ae0 | 80 cc 03 00 e0 00 00 00 d9 cc 03 00 3d 00 00 00 ba cd 03 00 3b 00 00 00 f8 cd 03 00 3c 00 00 00 | ............=.......;.......<... |
2b00 | 34 ce 03 00 3e 00 00 00 71 ce 03 00 3c 00 00 00 b0 ce 03 00 3d 00 00 00 ed ce 03 00 34 00 00 00 | 4...>...q...<.......=.......4... |
2b20 | 2b cf 03 00 36 00 00 00 60 cf 03 00 33 00 00 00 97 cf 03 00 a3 00 00 00 cb cf 03 00 08 00 00 00 | +...6...`...3................... |
2b40 | 6f d0 03 00 1b 00 00 00 78 d0 03 00 09 00 00 00 94 d0 03 00 c5 00 00 00 9e d0 03 00 0f 00 00 00 | o.......x....................... |
2b60 | 64 d1 03 00 0f 00 00 00 74 d1 03 00 31 00 00 00 84 d1 03 00 2a 00 00 00 b6 d1 03 00 19 00 00 00 | d.......t...1.......*........... |
2b80 | e1 d1 03 00 0b 00 00 00 fb d1 03 00 40 00 00 00 07 d2 03 00 28 00 00 00 48 d2 03 00 1c 00 00 00 | ............@.......(...H....... |
2ba0 | 71 d2 03 00 8e 00 00 00 8e d2 03 00 08 00 00 00 1d d3 03 00 c1 00 00 00 26 d3 03 00 9a 00 00 00 | q.......................&....... |
2bc0 | e8 d3 03 00 dc 00 00 00 83 d4 03 00 a5 01 00 00 60 d5 03 00 03 00 00 00 06 d7 03 00 98 00 00 00 | ................`............... |
2be0 | 0a d7 03 00 46 01 00 00 a3 d7 03 00 0a 00 00 00 ea d8 03 00 0a 00 00 00 f5 d8 03 00 39 00 00 00 | ....F.......................9... |
2c00 | 00 d9 03 00 0d 00 00 00 3a d9 03 00 08 00 00 00 48 d9 03 00 0f 00 00 00 51 d9 03 00 2d 00 00 00 | ........:.......H.......Q...-... |
2c20 | 61 d9 03 00 e5 00 00 00 8f d9 03 00 0a 00 00 00 75 da 03 00 57 01 00 00 80 da 03 00 31 01 00 00 | a...............u...W.......1... |
2c40 | d8 db 03 00 0a 00 00 00 0a dd 03 00 69 01 00 00 15 dd 03 00 26 00 00 00 7f de 03 00 05 00 00 00 | ............i.......&........... |
2c60 | a6 de 03 00 71 00 00 00 ac de 03 00 5c 00 00 00 1e df 03 00 90 00 00 00 7b df 03 00 33 00 00 00 | ....q.......\...........{...3... |
2c80 | 0c e0 03 00 51 00 00 00 40 e0 03 00 95 00 00 00 92 e0 03 00 09 00 00 00 28 e1 03 00 c1 00 00 00 | ....Q...@...............(....... |
2ca0 | 32 e1 03 00 53 00 00 00 f4 e1 03 00 08 00 00 00 48 e2 03 00 15 00 00 00 51 e2 03 00 15 00 00 00 | 2...S...........H.......Q....... |
2cc0 | 67 e2 03 00 16 00 00 00 7d e2 03 00 23 00 00 00 94 e2 03 00 14 00 00 00 b8 e2 03 00 13 00 00 00 | g.......}...#................... |
2ce0 | cd e2 03 00 0d 00 00 00 e1 e2 03 00 0e 00 00 00 ef e2 03 00 0f 00 00 00 fe e2 03 00 4f 01 00 00 | ............................O... |
2d00 | 0e e3 03 00 20 01 00 00 5e e4 03 00 23 01 00 00 7f e5 03 00 4d 00 00 00 a3 e6 03 00 95 00 00 00 | ........^...#.......M........... |
2d20 | f1 e6 03 00 89 00 00 00 87 e7 03 00 22 00 00 00 11 e8 03 00 0f 00 00 00 34 e8 03 00 0f 00 00 00 | ............"...........4....... |
2d40 | 44 e8 03 00 28 00 00 00 54 e8 03 00 78 01 00 00 7d e8 03 00 60 00 00 00 f6 e9 03 00 1d 01 00 00 | D...(...T...x...}...`........... |
2d60 | 57 ea 03 00 0b 00 00 00 75 eb 03 00 53 00 00 00 81 eb 03 00 ca 00 00 00 d5 eb 03 00 f4 00 00 00 | W.......u...S................... |
2d80 | a0 ec 03 00 98 00 00 00 95 ed 03 00 98 00 00 00 2e ee 03 00 00 01 00 00 c7 ee 03 00 aa 00 00 00 | ................................ |
2da0 | c8 ef 03 00 05 00 00 00 73 f0 03 00 0e 00 00 00 79 f0 03 00 0f 00 00 00 88 f0 03 00 0b 00 00 00 | ........s.......y............... |
2dc0 | 98 f0 03 00 1f 00 00 00 a4 f0 03 00 b1 00 00 00 c4 f0 03 00 17 00 00 00 76 f1 03 00 a7 00 00 00 | ........................v....... |
2de0 | 8e f1 03 00 21 00 00 00 36 f2 03 00 90 00 00 00 58 f2 03 00 26 00 00 00 e9 f2 03 00 1a 00 00 00 | ....!...6.......X...&........... |
2e00 | 10 f3 03 00 44 00 00 00 2b f3 03 00 48 00 00 00 70 f3 03 00 2a 00 00 00 b9 f3 03 00 6e 00 00 00 | ....D...+...H...p...*.......n... |
2e20 | e4 f3 03 00 90 00 00 00 53 f4 03 00 cf 00 00 00 e4 f4 03 00 0f 00 00 00 b4 f5 03 00 0c 00 00 00 | ........S....................... |
2e40 | c4 f5 03 00 69 01 00 00 d1 f5 03 00 93 00 00 00 3b f7 03 00 0f 00 00 00 cf f7 03 00 10 00 00 00 | ....i...........;............... |
2e60 | df f7 03 00 3e 00 00 00 f0 f7 03 00 81 00 00 00 2f f8 03 00 8b 00 00 00 b1 f8 03 00 bd 00 00 00 | ....>.........../............... |
2e80 | 3d f9 03 00 30 01 00 00 fb f9 03 00 96 00 00 00 2c fb 03 00 69 01 00 00 c3 fb 03 00 0c 00 00 00 | =...0...........,...i........... |
2ea0 | 2d fd 03 00 5a 00 00 00 3a fd 03 00 3c 01 00 00 95 fd 03 00 db 00 00 00 d2 fe 03 00 52 00 00 00 | -...Z...:...<...............R... |
2ec0 | ae ff 03 00 2f 00 00 00 01 00 04 00 ac 00 00 00 31 00 04 00 09 00 00 00 de 00 04 00 eb 00 00 00 | ..../...........1............... |
2ee0 | e8 00 04 00 d8 00 00 00 d4 01 04 00 5c 00 00 00 ad 02 04 00 63 00 00 00 0a 03 04 00 22 01 00 00 | ............\.......c......."... |
2f00 | 6e 03 04 00 af 00 00 00 91 04 04 00 30 00 00 00 41 05 04 00 4b 00 00 00 72 05 04 00 66 00 00 00 | n...........0...A...K...r...f... |
2f20 | be 05 04 00 52 00 00 00 25 06 04 00 49 00 00 00 78 06 04 00 1b 01 00 00 c2 06 04 00 bb 00 00 00 | ....R...%...I...x............... |
2f40 | de 07 04 00 60 00 00 00 9a 08 04 00 62 00 00 00 fb 08 04 00 52 01 00 00 5e 09 04 00 f3 00 00 00 | ....`.......b.......R...^....... |
2f60 | b1 0a 04 00 bc 00 00 00 a5 0b 04 00 77 00 00 00 62 0c 04 00 af 00 00 00 da 0c 04 00 e8 00 00 00 | ............w...b............... |
2f80 | 8a 0d 04 00 76 00 00 00 73 0e 04 00 3c 01 00 00 ea 0e 04 00 97 00 00 00 27 10 04 00 a2 00 00 00 | ....v...s...<...........'....... |
2fa0 | bf 10 04 00 d3 00 00 00 62 11 04 00 62 00 00 00 36 12 04 00 0e 00 00 00 99 12 04 00 cc 00 00 00 | ........b...b...6............... |
2fc0 | a8 12 04 00 32 00 00 00 75 13 04 00 11 00 00 00 a8 13 04 00 14 01 00 00 ba 13 04 00 b9 00 00 00 | ....2...u....................... |
2fe0 | cf 14 04 00 06 00 00 00 89 15 04 00 06 00 00 00 90 15 04 00 5d 02 00 00 97 15 04 00 0e 00 00 00 | ....................]........... |
3000 | f5 17 04 00 80 01 00 00 04 18 04 00 23 01 00 00 85 19 04 00 0c 01 00 00 a9 1a 04 00 8b 00 00 00 | ............#................... |
3020 | b6 1b 04 00 06 00 00 00 42 1c 04 00 59 00 00 00 49 1c 04 00 59 00 00 00 a3 1c 04 00 07 00 00 00 | ........B...Y...I...Y........... |
3040 | fd 1c 04 00 15 00 00 00 05 1d 04 00 44 00 00 00 1b 1d 04 00 4d 00 00 00 60 1d 04 00 3d 00 00 00 | ............D.......M...`...=... |
3060 | ae 1d 04 00 10 00 00 00 ec 1d 04 00 45 00 00 00 fd 1d 04 00 59 00 00 00 43 1e 04 00 7c 00 00 00 | ............E.......Y...C...|... |
3080 | 9d 1e 04 00 ac 00 00 00 1a 1f 04 00 89 00 00 00 c7 1f 04 00 23 00 00 00 51 20 04 00 0e 00 00 00 | ....................#...Q....... |
30a0 | 75 20 04 00 26 00 00 00 84 20 04 00 2d 00 00 00 ab 20 04 00 2e 00 00 00 d9 20 04 00 2d 00 00 00 | u...&.......-...............-... |
30c0 | 08 21 04 00 0f 00 00 00 36 21 04 00 1d 01 00 00 46 21 04 00 19 01 00 00 64 22 04 00 07 00 00 00 | .!......6!......F!......d"...... |
30e0 | 7e 23 04 00 17 00 00 00 86 23 04 00 0e 00 00 00 9e 23 04 00 25 00 00 00 ad 23 04 00 0e 00 00 00 | ~#.......#.......#..%....#...... |
3100 | d3 23 04 00 11 00 00 00 e2 23 04 00 0f 00 00 00 f4 23 04 00 10 00 00 00 04 24 04 00 0e 00 00 00 | .#.......#.......#.......$...... |
3120 | 15 24 04 00 06 00 00 00 24 24 04 00 d0 00 00 00 2b 24 04 00 57 00 00 00 fc 24 04 00 2b 00 00 00 | .$......$$......+$..W....$..+... |
3140 | 54 25 04 00 08 00 00 00 80 25 04 00 13 00 00 00 89 25 04 00 22 00 00 00 9d 25 04 00 0b 00 00 00 | T%.......%.......%.."....%...... |
3160 | c0 25 04 00 08 00 00 00 cc 25 04 00 1a 00 00 00 d5 25 04 00 6d 00 00 00 f0 25 04 00 17 00 00 00 | .%.......%.......%..m....%...... |
3180 | 5e 26 04 00 47 01 00 00 76 26 04 00 14 00 00 00 be 27 04 00 0d 00 00 00 d3 27 04 00 0c 00 00 00 | ^&..G...v&.......'.......'...... |
31a0 | e1 27 04 00 3e 00 00 00 ee 27 04 00 78 00 00 00 2d 28 04 00 3c 00 00 00 a6 28 04 00 df 00 00 00 | .'..>....'..x...-(..<....(...... |
31c0 | e3 28 04 00 34 00 00 00 c3 29 04 00 4d 00 00 00 f8 29 04 00 3e 00 00 00 46 2a 04 00 64 00 00 00 | .(..4....)..M....)..>...F*..d... |
31e0 | 85 2a 04 00 db 00 00 00 ea 2a 04 00 3b 00 00 00 c6 2b 04 00 18 00 00 00 02 2c 04 00 12 00 00 00 | .*.......*..;....+.......,...... |
3200 | 1b 2c 04 00 3f 00 00 00 2e 2c 04 00 04 00 00 00 6e 2c 04 00 11 00 00 00 73 2c 04 00 11 00 00 00 | .,..?....,......n,......s,...... |
3220 | 85 2c 04 00 0a 00 00 00 97 2c 04 00 2a 00 00 00 a2 2c 04 00 10 00 00 00 cd 2c 04 00 09 00 00 00 | .,.......,..*....,.......,...... |
3240 | de 2c 04 00 30 00 00 00 e8 2c 04 00 08 00 00 00 19 2d 04 00 05 01 00 00 22 2d 04 00 1e 00 00 00 | .,..0....,.......-......"-...... |
3260 | 28 2e 04 00 13 00 00 00 47 2e 04 00 c5 00 00 00 5b 2e 04 00 6a 00 00 00 21 2f 04 00 c0 00 00 00 | (.......G.......[...j...!/...... |
3280 | 8c 2f 04 00 25 00 00 00 4d 30 04 00 25 00 00 00 73 30 04 00 03 00 00 00 99 30 04 00 d3 00 00 00 | ./..%...M0..%...s0.......0...... |
32a0 | 9d 30 04 00 a8 00 00 00 71 31 04 00 90 01 00 00 1a 32 04 00 d4 01 00 00 ab 33 04 00 23 01 00 00 | .0......q1.......2.......3..#... |
32c0 | 80 35 04 00 2a 00 00 00 a4 36 04 00 0a 00 00 00 cf 36 04 00 26 00 00 00 da 36 04 00 0a 00 00 00 | .5..*....6.......6..&....6...... |
32e0 | 01 37 04 00 96 01 00 00 0c 37 04 00 05 00 00 00 a3 38 04 00 05 00 00 00 a9 38 04 00 2b 00 00 00 | .7.......7.......8.......8..+... |
3300 | af 38 04 00 02 00 00 00 db 38 04 00 0a 00 00 00 de 38 04 00 53 00 00 00 e9 38 04 00 1d 00 00 00 | .8.......8.......8..S....8...... |
3320 | 3d 39 04 00 25 00 00 00 5b 39 04 00 18 00 00 00 81 39 04 00 19 00 00 00 9a 39 04 00 19 00 00 00 | =9..%...[9.......9.......9...... |
3340 | b4 39 04 00 33 00 00 00 ce 39 04 00 33 00 00 00 02 3a 04 00 ea 00 00 00 36 3a 04 00 2b 00 00 00 | .9..3....9..3....:......6:..+... |
3360 | 21 3b 04 00 4d 00 00 00 4d 3b 04 00 15 00 00 00 9b 3b 04 00 14 02 00 00 b1 3b 04 00 34 00 00 00 | !;..M...M;.......;.......;..4... |
3380 | c6 3d 04 00 33 00 00 00 fb 3d 04 00 36 00 00 00 2f 3e 04 00 34 00 00 00 66 3e 04 00 2d 00 00 00 | .=..3....=..6.../>..4...f>..-... |
33a0 | 9b 3e 04 00 27 00 00 00 c9 3e 04 00 1b 00 00 00 f1 3e 04 00 38 00 00 00 0d 3f 04 00 38 00 00 00 | .>..'....>.......>..8....?..8... |
33c0 | 46 3f 04 00 06 00 00 00 7f 3f 04 00 04 00 00 00 86 3f 04 00 05 00 00 00 8b 3f 04 00 11 00 00 00 | F?.......?.......?.......?...... |
33e0 | 91 3f 04 00 19 00 00 00 a3 3f 04 00 1d 00 00 00 bd 3f 04 00 19 00 00 00 db 3f 04 00 41 00 00 00 | .?.......?.......?.......?..A... |
3400 | f5 3f 04 00 11 00 00 00 37 40 04 00 12 00 00 00 49 40 04 00 06 00 00 00 5c 40 04 00 0b 00 00 00 | .?......7@......I@......\@...... |
3420 | 63 40 04 00 f7 00 00 00 6f 40 04 00 24 01 00 00 67 41 04 00 39 00 00 00 8c 42 04 00 05 00 00 00 | c@......o@..$...gA..9....B...... |
3440 | c6 42 04 00 19 00 00 00 cc 42 04 00 04 00 00 00 e6 42 04 00 1b 00 00 00 eb 42 04 00 25 00 00 00 | .B.......B.......B.......B..%... |
3460 | 07 43 04 00 2d 00 00 00 2d 43 04 00 2e 00 00 00 5b 43 04 00 0c 00 00 00 8a 43 04 00 0a 00 00 00 | .C..-...-C......[C.......C...... |
3480 | 97 43 04 00 7a 00 00 00 a2 43 04 00 50 00 00 00 1d 44 04 00 0b 00 00 00 6e 44 04 00 76 00 00 00 | .C..z....C..P....D......nD..v... |
34a0 | 7a 44 04 00 04 00 00 00 f1 44 04 00 10 00 00 00 f6 44 04 00 15 00 00 00 07 45 04 00 16 00 00 00 | zD.......D.......D.......E...... |
34c0 | 1d 45 04 00 20 00 00 00 34 45 04 00 1b 00 00 00 55 45 04 00 0e 00 00 00 71 45 04 00 16 00 00 00 | .E......4E......UE......qE...... |
34e0 | 80 45 04 00 11 00 00 00 97 45 04 00 14 00 00 00 a9 45 04 00 87 00 00 00 be 45 04 00 39 00 00 00 | .E.......E.......E.......E..9... |
3500 | 46 46 04 00 3a 00 00 00 80 46 04 00 3a 00 00 00 bb 46 04 00 ec 00 00 00 f6 46 04 00 14 00 00 00 | FF..:....F..:....F.......F...... |
3520 | e3 47 04 00 1f 00 00 00 f8 47 04 00 25 00 00 00 18 48 04 00 0c 00 00 00 3e 48 04 00 3e 00 00 00 | .G.......G..%....H......>H..>... |
3540 | 4b 48 04 00 0c 00 00 00 8a 48 04 00 0a 00 00 00 97 48 04 00 54 00 00 00 a2 48 04 00 0b 00 00 00 | KH.......H.......H..T....H...... |
3560 | f7 48 04 00 0c 00 00 00 03 49 04 00 05 00 00 00 10 49 04 00 1a 00 00 00 16 49 04 00 16 00 00 00 | .H.......I.......I.......I...... |
3580 | 31 49 04 00 14 00 00 00 48 49 04 00 1c 00 00 00 5d 49 04 00 75 00 00 00 7a 49 04 00 07 01 00 00 | 1I......HI......]I..u...zI...... |
35a0 | f0 49 04 00 78 01 00 00 f8 4a 04 00 45 00 00 00 71 4c 04 00 39 00 00 00 b7 4c 04 00 ec 00 00 00 | .I..x....J..E...qL..9....L...... |
35c0 | f1 4c 04 00 e6 00 00 00 de 4d 04 00 4a 00 00 00 c5 4e 04 00 57 00 00 00 10 4f 04 00 69 00 00 00 | .L.......M..J....N..W....O..i... |
35e0 | 68 4f 04 00 d2 00 00 00 d2 4f 04 00 c2 00 00 00 a5 50 04 00 b8 00 00 00 68 51 04 00 98 00 00 00 | hO.......O.......P......hQ...... |
3600 | 21 52 04 00 b5 00 00 00 ba 52 04 00 ff 00 00 00 70 53 04 00 7f 00 00 00 70 54 04 00 83 00 00 00 | !R.......R......pS......pT...... |
3620 | f0 54 04 00 5a 00 00 00 74 55 04 00 69 00 00 00 cf 55 04 00 0d 02 00 00 39 56 04 00 b8 00 00 00 | .T..Z...tU..i....U......9V...... |
3640 | 47 58 04 00 a4 00 00 00 00 59 04 00 b1 01 00 00 a5 59 04 00 ad 00 00 00 57 5b 04 00 6f 00 00 00 | GX.......Y.......Y......W[..o... |
3660 | 05 5c 04 00 89 00 00 00 75 5c 04 00 ae 00 00 00 ff 5c 04 00 38 01 00 00 ae 5d 04 00 46 01 00 00 | .\......u\.......\..8....]..F... |
3680 | e7 5e 04 00 5f 01 00 00 2e 60 04 00 f0 00 00 00 8e 61 04 00 57 00 00 00 7f 62 04 00 83 00 00 00 | .^.._....`.......a..W....b...... |
36a0 | d7 62 04 00 32 00 00 00 5b 63 04 00 25 01 00 00 8e 63 04 00 6c 00 00 00 b4 64 04 00 6a 01 00 00 | .b..2...[c..%....c..l....d..j... |
36c0 | 21 65 04 00 9b 00 00 00 8c 66 04 00 2a 00 00 00 28 67 04 00 78 00 00 00 53 67 04 00 a3 00 00 00 | !e.......f..*...(g..x...Sg...... |
36e0 | cc 67 04 00 94 00 00 00 70 68 04 00 93 00 00 00 05 69 04 00 51 00 00 00 99 69 04 00 92 00 00 00 | .g......ph.......i..Q....i...... |
3700 | eb 69 04 00 c0 00 00 00 7e 6a 04 00 bb 00 00 00 3f 6b 04 00 b2 00 00 00 fb 6b 04 00 97 00 00 00 | .i......~j......?k.......k...... |
3720 | ae 6c 04 00 b5 00 00 00 46 6d 04 00 55 00 00 00 fc 6d 04 00 6e 00 00 00 52 6e 04 00 a6 00 00 00 | .l......Fm..U....m..n...Rn...... |
3740 | c1 6e 04 00 a7 00 00 00 68 6f 04 00 ac 00 00 00 10 70 04 00 73 00 00 00 bd 70 04 00 68 00 00 00 | .n......ho.......p..s....p..h... |
3760 | 31 71 04 00 42 01 00 00 9a 71 04 00 d4 00 00 00 dd 72 04 00 d1 00 00 00 b2 73 04 00 b3 00 00 00 | 1q..B....q.......r.......s...... |
3780 | 84 74 04 00 38 00 00 00 38 75 04 00 87 00 00 00 71 75 04 00 8f 00 00 00 f9 75 04 00 79 00 00 00 | .t..8...8u......qu.......u..y... |
37a0 | 89 76 04 00 8a 00 00 00 03 77 04 00 a3 00 00 00 8e 77 04 00 60 00 00 00 32 78 04 00 66 00 00 00 | .v.......w.......w..`...2x..f... |
37c0 | 93 78 04 00 ab 00 00 00 fa 78 04 00 45 00 00 00 a6 79 04 00 d3 00 00 00 ec 79 04 00 d3 00 00 00 | .x.......x..E....y.......y...... |
37e0 | c0 7a 04 00 8e 00 00 00 94 7b 04 00 61 00 00 00 23 7c 04 00 7f 00 00 00 85 7c 04 00 69 01 00 00 | .z.......{..a...#|.......|..i... |
3800 | 05 7d 04 00 9d 01 00 00 6f 7e 04 00 b6 00 00 00 0d 80 04 00 cd 00 00 00 c4 80 04 00 bf 00 00 00 | .}......o~...................... |
3820 | 92 81 04 00 a8 00 00 00 52 82 04 00 5f 00 00 00 fb 82 04 00 e5 00 00 00 5b 83 04 00 55 00 00 00 | ........R..._...........[...U... |
3840 | 41 84 04 00 69 00 00 00 97 84 04 00 74 00 00 00 01 85 04 00 57 01 00 00 76 85 04 00 8a 00 00 00 | A...i.......t.......W...v....... |
3860 | ce 86 04 00 9b 00 00 00 59 87 04 00 8d 00 00 00 f5 87 04 00 74 00 00 00 83 88 04 00 97 00 00 00 | ........Y...........t........... |
3880 | f8 88 04 00 5c 00 00 00 90 89 04 00 8e 00 00 00 ed 89 04 00 92 00 00 00 7c 8a 04 00 69 00 00 00 | ....\...................|...i... |
38a0 | 0f 8b 04 00 74 01 00 00 79 8b 04 00 55 00 00 00 ee 8c 04 00 87 00 00 00 44 8d 04 00 3e 00 00 00 | ....t...y...U...........D...>... |
38c0 | cc 8d 04 00 d5 00 00 00 0b 8e 04 00 91 00 00 00 e1 8e 04 00 bf 00 00 00 73 8f 04 00 37 01 00 00 | ........................s...7... |
38e0 | 33 90 04 00 55 00 00 00 6b 91 04 00 2c 00 00 00 c1 91 04 00 21 00 00 00 ee 91 04 00 9d 00 00 00 | 3...U...k...,.......!........... |
3900 | 10 92 04 00 1e 00 00 00 ae 92 04 00 09 00 00 00 cd 92 04 00 1a 00 00 00 d7 92 04 00 b7 00 00 00 | ................................ |
3920 | f2 92 04 00 40 00 00 00 aa 93 04 00 31 00 00 00 eb 93 04 00 80 00 00 00 1d 94 04 00 43 00 00 00 | ....@.......1...............C... |
3940 | 9e 94 04 00 38 00 00 00 e2 94 04 00 2c 00 00 00 1b 95 04 00 9f 00 00 00 48 95 04 00 7e 00 00 00 | ....8.......,...........H...~... |
3960 | e8 95 04 00 a3 00 00 00 67 96 04 00 55 00 00 00 0b 97 04 00 70 00 00 00 61 97 04 00 70 00 00 00 | ........g...U.......p...a...p... |
3980 | d2 97 04 00 4e 00 00 00 43 98 04 00 3b 00 00 00 92 98 04 00 6b 01 00 00 ce 98 04 00 4a 00 00 00 | ....N...C...;.......k.......J... |
39a0 | 3a 9a 04 00 b5 00 00 00 85 9a 04 00 71 00 00 00 3b 9b 04 00 c2 00 00 00 ad 9b 04 00 67 00 00 00 | :...........q...;...........g... |
39c0 | 70 9c 04 00 70 00 00 00 d8 9c 04 00 dd 00 00 00 49 9d 04 00 dc 00 00 00 27 9e 04 00 4a 00 00 00 | p...p...........I.......'...J... |
39e0 | 04 9f 04 00 4d 00 00 00 4f 9f 04 00 32 00 00 00 9d 9f 04 00 6f 00 00 00 d0 9f 04 00 68 00 00 00 | ....M...O...2.......o.......h... |
3a00 | 40 a0 04 00 e3 00 00 00 a9 a0 04 00 01 03 00 00 8d a1 04 00 2c 00 00 00 8f a4 04 00 bc 01 00 00 | @...................,........... |
3a20 | bc a4 04 00 da 00 00 00 79 a6 04 00 8e 00 00 00 54 a7 04 00 d0 00 00 00 e3 a7 04 00 81 00 00 00 | ........y.......T............... |
3a40 | b4 a8 04 00 b0 01 00 00 36 a9 04 00 94 00 00 00 e7 aa 04 00 f7 00 00 00 7c ab 04 00 49 00 00 00 | ........6...............|...I... |
3a60 | 74 ac 04 00 56 02 00 00 be ac 04 00 85 00 00 00 15 af 04 00 08 01 00 00 9b af 04 00 1d 02 00 00 | t...V........................... |
3a80 | a4 b0 04 00 c5 00 00 00 c2 b2 04 00 5b 00 00 00 88 b3 04 00 46 00 00 00 e4 b3 04 00 5b 00 00 00 | ............[.......F.......[... |
3aa0 | 2b b4 04 00 b4 00 00 00 87 b4 04 00 33 00 00 00 3c b5 04 00 60 00 00 00 70 b5 04 00 fe 00 00 00 | +...........3...<...`...p....... |
3ac0 | d1 b5 04 00 61 00 00 00 d0 b6 04 00 9d 00 00 00 32 b7 04 00 9c 00 00 00 d0 b7 04 00 13 01 00 00 | ....a...........2............... |
3ae0 | 6d b8 04 00 bb 00 00 00 81 b9 04 00 3d 00 00 00 3d ba 04 00 c2 00 00 00 7b ba 04 00 db 00 00 00 | m...........=...=.......{....... |
3b00 | 3e bb 04 00 d2 00 00 00 1a bc 04 00 77 00 00 00 ed bc 04 00 08 01 00 00 65 bd 04 00 96 00 00 00 | >...........w...........e....... |
3b20 | 6e be 04 00 2e 01 00 00 05 bf 04 00 68 00 00 00 34 c0 04 00 3c 00 00 00 9d c0 04 00 45 01 00 00 | n...........h...4...<.......E... |
3b40 | da c0 04 00 c1 01 00 00 20 c2 04 00 4e 00 00 00 e2 c3 04 00 62 00 00 00 31 c4 04 00 ae 00 00 00 | ............N.......b...1....... |
3b60 | 94 c4 04 00 dd 00 00 00 43 c5 04 00 77 00 00 00 21 c6 04 00 b7 00 00 00 99 c6 04 00 a2 00 00 00 | ........C...w...!............... |
3b80 | 51 c7 04 00 bb 00 00 00 f4 c7 04 00 5c 00 00 00 b0 c8 04 00 6a 01 00 00 0d c9 04 00 62 00 00 00 | Q...........\.......j.......b... |
3ba0 | 78 ca 04 00 c3 00 00 00 db ca 04 00 11 00 00 00 9f cb 04 00 ba 00 00 00 b1 cb 04 00 ba 00 00 00 | x............................... |
3bc0 | 6c cc 04 00 bc 00 00 00 27 cd 04 00 6e 00 00 00 e4 cd 04 00 6f 00 00 00 53 ce 04 00 a0 00 00 00 | l.......'...n.......o...S....... |
3be0 | c3 ce 04 00 42 00 00 00 64 cf 04 00 d2 00 00 00 a7 cf 04 00 1d 01 00 00 7a d0 04 00 9b 01 00 00 | ....B...d...............z....... |
3c00 | 98 d1 04 00 9b 01 00 00 34 d3 04 00 6b 00 00 00 d0 d4 04 00 98 00 00 00 3c d5 04 00 4a 00 00 00 | ........4...k...........<...J... |
3c20 | d5 d5 04 00 0a 00 00 00 20 d6 04 00 18 00 00 00 2b d6 04 00 3e 00 00 00 44 d6 04 00 67 01 00 00 | ................+...>...D...g... |
3c40 | 83 d6 04 00 0d 00 00 00 eb d7 04 00 16 00 00 00 f9 d7 04 00 23 00 00 00 10 d8 04 00 0d 00 00 00 | ....................#........... |
3c60 | 34 d8 04 00 58 00 00 00 42 d8 04 00 67 00 00 00 9b d8 04 00 ef 00 00 00 03 d9 04 00 6e 00 00 00 | 4...X...B...g...............n... |
3c80 | f3 d9 04 00 98 00 00 00 62 da 04 00 0b 00 00 00 fb da 04 00 0b 00 00 00 07 db 04 00 4c 00 00 00 | ........b...................L... |
3ca0 | 13 db 04 00 2f 00 00 00 60 db 04 00 17 00 00 00 90 db 04 00 10 00 00 00 a8 db 04 00 10 00 00 00 | ..../...`....................... |
3cc0 | b9 db 04 00 90 00 00 00 ca db 04 00 17 00 00 00 5b dc 04 00 37 00 00 00 73 dc 04 00 36 00 00 00 | ................[...7...s...6... |
3ce0 | ab dc 04 00 1b 00 00 00 e2 dc 04 00 2f 00 00 00 fe dc 04 00 97 00 00 00 2e dd 04 00 10 00 00 00 | ............/................... |
3d00 | c6 dd 04 00 0a 00 00 00 d7 dd 04 00 18 00 00 00 e2 dd 04 00 72 01 00 00 fb dd 04 00 40 00 00 00 | ....................r.......@... |
3d20 | 6e df 04 00 7f 01 00 00 af df 04 00 c0 00 00 00 2f e1 04 00 48 01 00 00 f0 e1 04 00 54 01 00 00 | n.............../...H.......T... |
3d40 | 39 e3 04 00 9e 01 00 00 8e e4 04 00 14 00 00 00 2d e6 04 00 08 00 00 00 42 e6 04 00 18 00 00 00 | 9...............-.......B....... |
3d60 | 4b e6 04 00 31 00 00 00 64 e6 04 00 8f 01 00 00 96 e6 04 00 f7 00 00 00 26 e8 04 00 e9 00 00 00 | K...1...d...............&....... |
3d80 | 1e e9 04 00 89 00 00 00 08 ea 04 00 38 00 00 00 92 ea 04 00 8f 00 00 00 cb ea 04 00 37 00 00 00 | ............8...............7... |
3da0 | 5b eb 04 00 1b 00 00 00 93 eb 04 00 25 01 00 00 af eb 04 00 cb 00 00 00 d5 ec 04 00 db 00 00 00 | [...........%................... |
3dc0 | a1 ed 04 00 d7 00 00 00 7d ee 04 00 a5 00 00 00 55 ef 04 00 93 00 00 00 fb ef 04 00 e3 00 00 00 | ........}.......U............... |
3de0 | 8f f0 04 00 02 02 00 00 73 f1 04 00 c4 00 00 00 76 f3 04 00 a6 00 00 00 3b f4 04 00 e6 00 00 00 | ........s.......v.......;....... |
3e00 | e2 f4 04 00 4f 00 00 00 c9 f5 04 00 a4 00 00 00 19 f6 04 00 28 01 00 00 be f6 04 00 9d 00 00 00 | ....O...............(........... |
3e20 | e7 f7 04 00 3b 00 00 00 85 f8 04 00 4a 00 00 00 c1 f8 04 00 81 00 00 00 0c f9 04 00 68 00 00 00 | ....;.......J...............h... |
3e40 | 8e f9 04 00 49 00 00 00 f7 f9 04 00 36 00 00 00 41 fa 04 00 11 00 00 00 78 fa 04 00 06 00 00 00 | ....I.......6...A.......x....... |
3e60 | 8a fa 04 00 0f 00 00 00 91 fa 04 00 18 00 00 00 a1 fa 04 00 0e 00 00 00 ba fa 04 00 0e 00 00 00 | ................................ |
3e80 | c9 fa 04 00 0f 00 00 00 d8 fa 04 00 0b 00 00 00 e8 fa 04 00 6c 01 00 00 f4 fa 04 00 3a 01 00 00 | ....................l.......:... |
3ea0 | 61 fc 04 00 0f 00 00 00 9c fd 04 00 0f 00 00 00 ac fd 04 00 08 00 00 00 bc fd 04 00 07 00 00 00 | a............................... |
3ec0 | c5 fd 04 00 04 00 00 00 cd fd 04 00 0f 00 00 00 d2 fd 04 00 06 00 00 00 e2 fd 04 00 ff 00 00 00 | ................................ |
3ee0 | e9 fd 04 00 23 00 00 00 e9 fe 04 00 23 00 00 00 0d ff 04 00 0e 00 00 00 31 ff 04 00 07 00 00 00 | ....#.......#...........1....... |
3f00 | 40 ff 04 00 0a 00 00 00 48 ff 04 00 04 00 00 00 53 ff 04 00 36 00 00 00 58 ff 04 00 b5 00 00 00 | @.......H.......S...6...X....... |
3f20 | 8f ff 04 00 04 00 00 00 45 00 05 00 f5 00 00 00 4a 00 05 00 19 00 00 00 40 01 05 00 42 00 00 00 | ........E.......J.......@...B... |
3f40 | 5a 01 05 00 1b 00 00 00 9d 01 05 00 34 01 00 00 b9 01 05 00 3e 00 00 00 ee 02 05 00 29 00 00 00 | Z...........4.......>.......)... |
3f60 | 2d 03 05 00 0f 00 00 00 57 03 05 00 33 00 00 00 67 03 05 00 14 02 00 00 9b 03 05 00 40 00 00 00 | -.......W...3...g...........@... |
3f80 | b0 05 05 00 3d 00 00 00 f1 05 05 00 07 01 00 00 2f 06 05 00 23 00 00 00 37 07 05 00 11 00 00 00 | ....=.........../...#...7....... |
3fa0 | 5b 07 05 00 3f 00 00 00 6d 07 05 00 20 00 00 00 ad 07 05 00 6f 00 00 00 ce 07 05 00 78 00 00 00 | [...?...m...........o.......x... |
3fc0 | 3e 08 05 00 3d 00 00 00 b7 08 05 00 68 00 00 00 f5 08 05 00 6b 00 00 00 5e 09 05 00 23 00 00 00 | >...=.......h.......k...^...#... |
3fe0 | ca 09 05 00 07 00 00 00 ee 09 05 00 7d 00 00 00 f6 09 05 00 06 00 00 00 74 0a 05 00 16 00 00 00 | ............}...........t....... |
4000 | 7b 0a 05 00 35 00 00 00 92 0a 05 00 10 00 00 00 c8 0a 05 00 69 02 00 00 d9 0a 05 00 1b 00 00 00 | {...5...............i........... |
4020 | 43 0d 05 00 52 01 00 00 5f 0d 05 00 4a 00 00 00 b2 0e 05 00 e8 01 00 00 fd 0e 05 00 9d 01 00 00 | C...R..._...J................... |
4040 | e6 10 05 00 d7 00 00 00 84 12 05 00 1e 00 00 00 5c 13 05 00 2f 00 00 00 7b 13 05 00 21 00 00 00 | ................\.../...{...!... |
4060 | ab 13 05 00 0c 00 00 00 cd 13 05 00 0e 00 00 00 da 13 05 00 24 00 00 00 e9 13 05 00 0e 00 00 00 | ....................$........... |
4080 | 0e 14 05 00 59 00 00 00 1d 14 05 00 22 00 00 00 77 14 05 00 05 00 00 00 9a 14 05 00 20 00 00 00 | ....Y......."...w............... |
40a0 | a0 14 05 00 14 00 00 00 c1 14 05 00 3c 00 00 00 d6 14 05 00 42 00 00 00 13 15 05 00 1f 00 00 00 | ............<.......B........... |
40c0 | 56 15 05 00 2e 00 00 00 76 15 05 00 10 00 00 00 a5 15 05 00 10 00 00 00 b6 15 05 00 12 00 00 00 | V.......v....................... |
40e0 | c7 15 05 00 12 00 00 00 da 15 05 00 2e 00 00 00 ed 15 05 00 3c 00 00 00 1c 16 05 00 3b 00 00 00 | ....................<.......;... |
4100 | 59 16 05 00 0b 00 00 00 95 16 05 00 38 00 00 00 a1 16 05 00 2c 00 00 00 da 16 05 00 09 00 00 00 | Y...........8.......,........... |
4120 | 07 17 05 00 09 00 00 00 11 17 05 00 0e 00 00 00 1b 17 05 00 63 00 00 00 2a 17 05 00 9c 00 00 00 | ....................c...*....... |
4140 | 8e 17 05 00 ab 00 00 00 2b 18 05 00 eb 00 00 00 d7 18 05 00 30 00 00 00 c3 19 05 00 07 00 00 00 | ........+...........0........... |
4160 | f4 19 05 00 63 00 00 00 fc 19 05 00 0c 01 00 00 60 1a 05 00 0c 00 00 00 6d 1b 05 00 0c 00 00 00 | ....c...........`.......m....... |
4180 | 7a 1b 05 00 15 00 00 00 87 1b 05 00 19 00 00 00 9d 1b 05 00 08 00 00 00 b7 1b 05 00 8c 00 00 00 | z............................... |
41a0 | c0 1b 05 00 03 00 00 00 4d 1c 05 00 0a 00 00 00 51 1c 05 00 35 00 00 00 5c 1c 05 00 13 00 00 00 | ........M.......Q...5...\....... |
41c0 | 92 1c 05 00 19 00 00 00 a6 1c 05 00 06 00 00 00 c0 1c 05 00 3b 02 00 00 c7 1c 05 00 85 00 00 00 | ....................;........... |
41e0 | 03 1f 05 00 0e 00 00 00 89 1f 05 00 09 00 00 00 98 1f 05 00 35 00 00 00 a2 1f 05 00 04 00 00 00 | ....................5........... |
4200 | d8 1f 05 00 e8 01 00 00 dd 1f 05 00 5f 00 00 00 c6 21 05 00 61 00 00 00 26 22 05 00 03 00 00 00 | ............_....!..a...&"...... |
4220 | 88 22 05 00 0b 00 00 00 8c 22 05 00 4c 00 00 00 98 22 05 00 2f 00 00 00 e5 22 05 00 1d 00 00 00 | ."......."..L...."../...."...... |
4240 | 15 23 05 00 10 00 00 00 33 23 05 00 4d 00 00 00 44 23 05 00 0f 00 00 00 92 23 05 00 3b 00 00 00 | .#......3#..M...D#.......#..;... |
4260 | a2 23 05 00 12 00 00 00 de 23 05 00 1d 00 00 00 f1 23 05 00 44 00 00 00 0f 24 05 00 51 00 00 00 | .#.......#.......#..D....$..Q... |
4280 | 54 24 05 00 41 00 00 00 a6 24 05 00 6a 00 00 00 e8 24 05 00 66 00 00 00 53 25 05 00 1c 00 00 00 | T$..A....$..j....$..f...S%...... |
42a0 | ba 25 05 00 8d 00 00 00 d7 25 05 00 d1 00 00 00 65 26 05 00 1d 00 00 00 37 27 05 00 e3 00 00 00 | .%.......%......e&......7'...... |
42c0 | 55 27 05 00 e4 00 00 00 39 28 05 00 24 00 00 00 1e 29 05 00 8d 00 00 00 43 29 05 00 5a 00 00 00 | U'......9(..$....)......C)..Z... |
42e0 | d1 29 05 00 1a 00 00 00 2c 2a 05 00 21 00 00 00 47 2a 05 00 22 00 00 00 69 2a 05 00 70 00 00 00 | .)......,*..!...G*.."...i*..p... |
4300 | 8c 2a 05 00 72 00 00 00 fd 2a 05 00 29 00 00 00 70 2b 05 00 77 00 00 00 9a 2b 05 00 73 00 00 00 | .*..r....*..)...p+..w....+..s... |
4320 | 12 2c 05 00 90 00 00 00 86 2c 05 00 53 00 00 00 17 2d 05 00 b6 00 00 00 6b 2d 05 00 5c 00 00 00 | .,.......,..S....-......k-..\... |
4340 | 22 2e 05 00 1e 00 00 00 7f 2e 05 00 91 00 00 00 9e 2e 05 00 54 00 00 00 30 2f 05 00 b7 00 00 00 | "...................T...0/...... |
4360 | 85 2f 05 00 60 00 00 00 3d 30 05 00 24 00 00 00 9e 30 05 00 61 00 00 00 c3 30 05 00 48 00 00 00 | ./..`...=0..$....0..a....0..H... |
4380 | 25 31 05 00 30 00 00 00 6e 31 05 00 3b 00 00 00 9f 31 05 00 25 00 00 00 db 31 05 00 28 00 00 00 | %1..0...n1..;....1..%....1..(... |
43a0 | 01 32 05 00 2e 00 00 00 2a 32 05 00 9e 00 00 00 59 32 05 00 3e 00 00 00 f8 32 05 00 11 00 00 00 | .2......*2......Y2..>....2...... |
43c0 | 37 33 05 00 19 00 00 00 49 33 05 00 7a 00 00 00 63 33 05 00 17 00 00 00 de 33 05 00 13 00 00 00 | 73......I3..z...c3.......3...... |
43e0 | f6 33 05 00 7d 00 00 00 0a 34 05 00 83 00 00 00 88 34 05 00 11 00 00 00 0c 35 05 00 10 00 00 00 | .3..}....4.......4.......5...... |
4400 | 1e 35 05 00 33 00 00 00 2f 35 05 00 33 00 00 00 63 35 05 00 33 00 00 00 97 35 05 00 33 00 00 00 | .5..3.../5..3...c5..3....5..3... |
4420 | cb 35 05 00 6a 00 00 00 ff 35 05 00 22 00 00 00 6a 36 05 00 1e 01 00 00 8d 36 05 00 33 00 00 00 | .5..j....5.."...j6.......6..3... |
4440 | ac 37 05 00 dd 00 00 00 e0 37 05 00 17 01 00 00 be 38 05 00 49 00 00 00 d6 39 05 00 06 00 00 00 | .7.......7.......8..I....9...... |
4460 | 20 3a 05 00 11 00 00 00 27 3a 05 00 38 00 00 00 39 3a 05 00 28 00 00 00 72 3a 05 00 24 00 00 00 | .:......':..8...9:..(...r:..$... |
4480 | 9b 3a 05 00 9d 00 00 00 c0 3a 05 00 37 00 00 00 5e 3b 05 00 89 00 00 00 96 3b 05 00 5c 00 00 00 | .:.......:..7...^;.......;..\... |
44a0 | 20 3c 05 00 cd 01 00 00 7d 3c 05 00 c2 00 00 00 4b 3e 05 00 65 00 00 00 0e 3f 05 00 43 00 00 00 | .<......}<......K>..e....?..C... |
44c0 | 74 3f 05 00 0a 00 00 00 b8 3f 05 00 b3 00 00 00 c3 3f 05 00 8c 00 00 00 77 40 05 00 e8 00 00 00 | t?.......?.......?......w@...... |
44e0 | 04 41 05 00 21 00 00 00 ed 41 05 00 05 00 00 00 0f 42 05 00 89 01 00 00 15 42 05 00 ae 01 00 00 | .A..!....A.......B.......B...... |
4500 | 9f 43 05 00 27 00 00 00 4e 45 05 00 09 00 00 00 76 45 05 00 fc 00 00 00 80 45 05 00 79 01 00 00 | .C..'...NE......vE.......E..y... |
4520 | 7d 46 05 00 0f 00 00 00 f7 47 05 00 6c 00 00 00 07 48 05 00 35 00 00 00 74 48 05 00 d4 00 00 00 | }F.......G..l....H..5...tH...... |
4540 | aa 48 05 00 d4 00 00 00 7f 49 05 00 f4 00 00 00 54 4a 05 00 24 00 00 00 49 4b 05 00 6f 00 00 00 | .H.......I......TJ..$...IK..o... |
4560 | 6e 4b 05 00 10 00 00 00 de 4b 05 00 c6 00 00 00 ef 4b 05 00 30 00 00 00 b6 4c 05 00 a3 00 00 00 | nK.......K.......K..0....L...... |
4580 | e7 4c 05 00 a4 00 00 00 8b 4d 05 00 25 00 00 00 30 4e 05 00 38 00 00 00 56 4e 05 00 22 00 00 00 | .L.......M..%...0N..8...VN.."... |
45a0 | 8f 4e 05 00 65 00 00 00 b2 4e 05 00 80 00 00 00 18 4f 05 00 74 00 00 00 99 4f 05 00 6a 00 00 00 | .N..e....N.......O..t....O..j... |
45c0 | 0e 50 05 00 a9 00 00 00 79 50 05 00 01 00 00 00 23 51 05 00 03 00 00 00 25 51 05 00 1f 00 00 00 | .P......yP......#Q......%Q...... |
45e0 | 29 51 05 00 11 00 00 00 49 51 05 00 10 00 00 00 5b 51 05 00 37 01 00 00 6c 51 05 00 0b 00 00 00 | )Q......IQ......[Q..7...lQ...... |
4600 | a4 52 05 00 0e 00 00 00 b0 52 05 00 17 00 00 00 bf 52 05 00 22 00 00 00 d7 52 05 00 05 00 00 00 | .R.......R.......R.."....R...... |
4620 | fa 52 05 00 05 00 00 00 00 53 05 00 1b 00 00 00 06 53 05 00 40 00 00 00 22 53 05 00 1b 00 00 00 | .R.......S.......S..@..."S...... |
4640 | 63 53 05 00 0c 00 00 00 7f 53 05 00 eb 00 00 00 8c 53 05 00 03 00 00 00 78 54 05 00 41 02 00 00 | cS.......S.......S......xT..A... |
4660 | 7c 54 05 00 ad 00 00 00 be 56 05 00 0d 00 00 00 6c 57 05 00 91 00 00 00 7a 57 05 00 0b 00 00 00 | |T.......V......lW......zW...... |
4680 | 0c 58 05 00 34 00 00 00 18 58 05 00 25 00 00 00 4d 58 05 00 16 00 00 00 73 58 05 00 40 00 00 00 | .X..4....X..%...MX......sX..@... |
46a0 | 8a 58 05 00 23 00 00 00 cb 58 05 00 1f 00 00 00 ef 58 05 00 07 00 00 00 0f 59 05 00 0f 00 00 00 | .X..#....X.......X.......Y...... |
46c0 | 17 59 05 00 4b 00 00 00 27 59 05 00 ab 01 00 00 73 59 05 00 a3 00 00 00 1f 5b 05 00 13 00 00 00 | .Y..K...'Y......sY.......[...... |
46e0 | c3 5b 05 00 0f 00 00 00 d7 5b 05 00 1c 00 00 00 e7 5b 05 00 18 00 00 00 04 5c 05 00 23 00 00 00 | .[.......[.......[.......\..#... |
4700 | 1d 5c 05 00 0f 00 00 00 41 5c 05 00 10 00 00 00 51 5c 05 00 0e 00 00 00 62 5c 05 00 25 00 00 00 | .\......A\......Q\......b\..%... |
4720 | 71 5c 05 00 1a 00 00 00 97 5c 05 00 18 00 00 00 b2 5c 05 00 45 00 00 00 cb 5c 05 00 16 00 00 00 | q\.......\.......\..E....\...... |
4740 | 11 5d 05 00 43 00 00 00 28 5d 05 00 25 00 00 00 6c 5d 05 00 38 00 00 00 92 5d 05 00 36 00 00 00 | .]..C...(]..%...l]..8....]..6... |
4760 | cb 5d 05 00 20 00 00 00 02 5e 05 00 13 00 00 00 23 5e 05 00 1e 00 00 00 37 5e 05 00 15 00 00 00 | .].......^......#^......7^...... |
4780 | 56 5e 05 00 10 00 00 00 6c 5e 05 00 ec 00 00 00 7d 5e 05 00 ba 00 00 00 6a 5f 05 00 25 00 00 00 | V^......l^......}^......j_..%... |
47a0 | 25 60 05 00 89 00 00 00 4b 60 05 00 13 00 00 00 d5 60 05 00 1a 00 00 00 e9 60 05 00 3a 00 00 00 | %`......K`.......`.......`..:... |
47c0 | 04 61 05 00 81 01 00 00 3f 61 05 00 47 00 00 00 c1 62 05 00 74 00 00 00 09 63 05 00 9d 00 00 00 | .a......?a..G....b..t....c...... |
47e0 | 7e 63 05 00 7b 01 00 00 1c 64 05 00 61 00 00 00 98 65 05 00 6c 00 00 00 fa 65 05 00 06 00 00 00 | ~c..{....d..a....e..l....e...... |
4800 | 67 66 05 00 47 00 00 00 6e 66 05 00 44 00 00 00 b6 66 05 00 37 00 00 00 fb 66 05 00 07 01 00 00 | gf..G...nf..D....f..7....f...... |
4820 | 33 67 05 00 57 00 00 00 3b 68 05 00 31 00 00 00 93 68 05 00 5b 00 00 00 c5 68 05 00 1f 00 00 00 | 3g..W...;h..1....h..[....h...... |
4840 | 21 69 05 00 62 00 00 00 41 69 05 00 2b 00 00 00 a4 69 05 00 04 00 00 00 d0 69 05 00 16 00 00 00 | !i..b...Ai..+....i.......i...... |
4860 | d5 69 05 00 37 00 00 00 ec 69 05 00 38 01 00 00 24 6a 05 00 0d 00 00 00 5d 6b 05 00 0d 00 00 00 | .i..7....i..8...$j......]k...... |
4880 | 6b 6b 05 00 12 00 00 00 79 6b 05 00 0a 00 00 00 8c 6b 05 00 4e 00 00 00 97 6b 05 00 08 01 00 00 | kk......yk.......k..N....k...... |
48a0 | e6 6b 05 00 24 01 00 00 ef 6c 05 00 15 00 00 00 14 6e 05 00 9c 01 00 00 2a 6e 05 00 5c 00 00 00 | .k..$....l.......n......*n..\... |
48c0 | c7 6f 05 00 a4 00 00 00 24 70 05 00 16 00 00 00 c9 70 05 00 8a 02 00 00 e0 70 05 00 1d 00 00 00 | .o......$p.......p.......p...... |
48e0 | 6b 73 05 00 0c 00 00 00 89 73 05 00 1f 00 00 00 96 73 05 00 43 00 00 00 b6 73 05 00 0d 00 00 00 | ks.......s.......s..C....s...... |
4900 | fa 73 05 00 c1 00 00 00 08 74 05 00 77 00 00 00 ca 74 05 00 69 00 00 00 42 75 05 00 62 00 00 00 | .s.......t..w....t..i...Bu..b... |
4920 | ac 75 05 00 76 00 00 00 0f 76 05 00 0e 01 00 00 86 76 05 00 cb 00 00 00 95 77 05 00 19 01 00 00 | .u..v....v.......v.......w...... |
4940 | 61 78 05 00 43 00 00 00 7b 79 05 00 ab 00 00 00 bf 79 05 00 9a 00 00 00 6b 7a 05 00 a6 00 00 00 | ax..C...{y.......y......kz...... |
4960 | 06 7b 05 00 6e 01 00 00 ad 7b 05 00 17 01 00 00 1c 7d 05 00 6f 00 00 00 34 7e 05 00 7b 00 00 00 | .{..n....{.......}..o...4~..{... |
4980 | a4 7e 05 00 7d 00 00 00 20 7f 05 00 12 01 00 00 9e 7f 05 00 e6 00 00 00 b1 80 05 00 b6 00 00 00 | .~..}........................... |
49a0 | 98 81 05 00 b1 00 00 00 4f 82 05 00 fb 00 00 00 01 83 05 00 20 00 00 00 fd 83 05 00 a0 01 00 00 | ........O....................... |
49c0 | 1e 84 05 00 53 00 00 00 bf 85 05 00 39 00 00 00 13 86 05 00 28 00 00 00 4d 86 05 00 4a 00 00 00 | ....S.......9.......(...M...J... |
49e0 | 76 86 05 00 3b 00 00 00 c1 86 05 00 34 00 00 00 fd 86 05 00 52 00 00 00 32 87 05 00 53 00 00 00 | v...;.......4.......R...2...S... |
4a00 | 85 87 05 00 52 00 00 00 d9 87 05 00 80 01 00 00 2c 88 05 00 36 00 00 00 ad 89 05 00 23 00 00 00 | ....R...........,...6.......#... |
4a20 | e4 89 05 00 0b 00 00 00 08 8a 05 00 ad 00 00 00 14 8a 05 00 91 00 00 00 c2 8a 05 00 1b 02 00 00 | ................................ |
4a40 | 54 8b 05 00 e8 01 00 00 70 8d 05 00 07 00 00 00 59 8f 05 00 df 00 00 00 61 8f 05 00 45 01 00 00 | T.......p.......Y.......a...E... |
4a60 | 41 90 05 00 22 00 00 00 87 91 05 00 79 01 00 00 aa 91 05 00 a6 00 00 00 24 93 05 00 e9 00 00 00 | A...".......y...........$....... |
4a80 | cb 93 05 00 83 00 00 00 b5 94 05 00 19 00 00 00 39 95 05 00 0f 00 00 00 53 95 05 00 09 00 00 00 | ................9.......S....... |
4aa0 | 63 95 05 00 12 00 00 00 6d 95 05 00 0e 00 00 00 80 95 05 00 21 00 00 00 8f 95 05 00 0e 00 00 00 | c.......m...........!........... |
4ac0 | b1 95 05 00 17 00 00 00 c0 95 05 00 14 00 00 00 d8 95 05 00 19 00 00 00 ed 95 05 00 14 00 00 00 | ................................ |
4ae0 | 07 96 05 00 06 00 00 00 1c 96 05 00 13 00 00 00 23 96 05 00 12 00 00 00 37 96 05 00 0d 00 00 00 | ................#.......7....... |
4b00 | 4a 96 05 00 6a 00 00 00 58 96 05 00 17 00 00 00 c3 96 05 00 2e 00 00 00 db 96 05 00 2d 00 00 00 | J...j...X...................-... |
4b20 | 0a 97 05 00 08 00 00 00 38 97 05 00 16 00 00 00 41 97 05 00 ea 00 00 00 58 97 05 00 59 00 00 00 | ........8.......A.......X...Y... |
4b40 | 43 98 05 00 19 00 00 00 9d 98 05 00 7e 00 00 00 b7 98 05 00 07 00 00 00 36 99 05 00 2a 00 00 00 | C...........~...........6...*... |
4b60 | 3e 99 05 00 4f 00 00 00 69 99 05 00 17 00 00 00 b9 99 05 00 3b 00 00 00 d1 99 05 00 60 00 00 00 | >...O...i...........;.......`... |
4b80 | 0d 9a 05 00 87 01 00 00 6e 9a 05 00 6e 00 00 00 f6 9b 05 00 24 00 00 00 65 9c 05 00 54 00 00 00 | ........n...n.......$...e...T... |
4ba0 | 8a 9c 05 00 a4 01 00 00 df 9c 05 00 8f 01 00 00 84 9e 05 00 24 00 00 00 14 a0 05 00 1f 00 00 00 | ....................$........... |
4bc0 | 39 a0 05 00 07 00 00 00 59 a0 05 00 1b 00 00 00 61 a0 05 00 08 00 00 00 7d a0 05 00 5c 00 00 00 | 9.......Y.......a.......}...\... |
4be0 | 86 a0 05 00 08 00 00 00 e3 a0 05 00 1b 00 00 00 ec a0 05 00 57 00 00 00 08 a1 05 00 14 00 00 00 | ....................W........... |
4c00 | 60 a1 05 00 3f 00 00 00 75 a1 05 00 3a 00 00 00 b5 a1 05 00 75 00 00 00 f0 a1 05 00 69 00 00 00 | `...?...u...:.......u.......i... |
4c20 | 66 a2 05 00 32 01 00 00 d0 a2 05 00 36 01 00 00 03 a4 05 00 0c 00 00 00 3a a5 05 00 26 00 00 00 | f...2.......6...........:...&... |
4c40 | 47 a5 05 00 18 00 00 00 6e a5 05 00 2e 00 00 00 87 a5 05 00 41 01 00 00 b6 a5 05 00 03 00 00 00 | G.......n...........A........... |
4c60 | f8 a6 05 00 04 00 00 00 fc a6 05 00 14 00 00 00 01 a7 05 00 0c 00 00 00 16 a7 05 00 05 00 00 00 | ................................ |
4c80 | 23 a7 05 00 0c 00 00 00 29 a7 05 00 0d 00 00 00 36 a7 05 00 0b 00 00 00 44 a7 05 00 ae 00 00 00 | #.......).......6.......D....... |
4ca0 | 50 a7 05 00 31 01 00 00 ff a7 05 00 4f 00 00 00 31 a9 05 00 ca 00 00 00 81 a9 05 00 43 00 00 00 | P...1.......O...1...........C... |
4cc0 | 4c aa 05 00 46 00 00 00 90 aa 05 00 0b 00 00 00 d7 aa 05 00 0b 00 00 00 e3 aa 05 00 19 00 00 00 | L...F........................... |
4ce0 | ef aa 05 00 0f 00 00 00 09 ab 05 00 ba 01 00 00 19 ab 05 00 6a 00 00 00 d4 ac 05 00 13 00 00 00 | ....................j........... |
4d00 | 3f ad 05 00 e4 00 00 00 53 ad 05 00 46 00 00 00 38 ae 05 00 88 01 00 00 7f ae 05 00 89 01 00 00 | ?.......S...F...8............... |
4d20 | 08 b0 05 00 0b 00 00 00 92 b1 05 00 ce 00 00 00 9e b1 05 00 6c 00 00 00 6d b2 05 00 10 01 00 00 | ....................l...m....... |
4d40 | da b2 05 00 6e 00 00 00 eb b3 05 00 26 00 00 00 5a b4 05 00 40 00 00 00 81 b4 05 00 a0 00 00 00 | ....n.......&...Z...@........... |
4d60 | c2 b4 05 00 b9 00 00 00 63 b5 05 00 58 00 00 00 1d b6 05 00 64 00 00 00 76 b6 05 00 39 00 00 00 | ........c...X.......d...v...9... |
4d80 | db b6 05 00 45 00 00 00 15 b7 05 00 4a 00 00 00 5b b7 05 00 4b 00 00 00 a6 b7 05 00 56 00 00 00 | ....E.......J...[...K.......V... |
4da0 | f2 b7 05 00 57 00 00 00 49 b8 05 00 96 00 00 00 a1 b8 05 00 37 00 00 00 38 b9 05 00 8f 00 00 00 | ....W...I...........7...8....... |
4dc0 | 70 b9 05 00 06 00 00 00 00 ba 05 00 0f 00 00 00 07 ba 05 00 1b 00 00 00 17 ba 05 00 33 00 00 00 | p...........................3... |
4de0 | 33 ba 05 00 56 00 00 00 67 ba 05 00 0b 00 00 00 be ba 05 00 12 00 00 00 ca ba 05 00 38 00 00 00 | 3...V...g...................8... |
4e00 | dd ba 05 00 19 00 00 00 16 bb 05 00 33 00 00 00 30 bb 05 00 1f 00 00 00 64 bb 05 00 2e 00 00 00 | ............3...0.......d....... |
4e20 | 84 bb 05 00 93 01 00 00 b3 bb 05 00 0f 00 00 00 47 bd 05 00 0a 00 00 00 57 bd 05 00 0a 00 00 00 | ................G.......W....... |
4e40 | 62 bd 05 00 63 00 00 00 6d bd 05 00 2f 00 00 00 d1 bd 05 00 32 00 00 00 01 be 05 00 4c 00 00 00 | b...c...m.../.......2.......L... |
4e60 | 34 be 05 00 23 00 00 00 81 be 05 00 64 00 00 00 a5 be 05 00 65 00 00 00 0a bf 05 00 6e 00 00 00 | 4...#.......d.......e.......n... |
4e80 | 70 bf 05 00 29 00 00 00 df bf 05 00 dd 00 00 00 09 c0 05 00 2d 00 00 00 e7 c0 05 00 11 00 00 00 | p...)...............-........... |
4ea0 | 15 c1 05 00 11 00 00 00 27 c1 05 00 12 00 00 00 39 c1 05 00 0c 00 00 00 4c c1 05 00 30 00 00 00 | ........'.......9.......L...0... |
4ec0 | 59 c1 05 00 3f 00 00 00 8a c1 05 00 40 00 00 00 ca c1 05 00 04 01 00 00 0b c2 05 00 a9 00 00 00 | Y...?.......@................... |
4ee0 | 10 c3 05 00 18 00 00 00 ba c3 05 00 08 00 00 00 d3 c3 05 00 46 00 00 00 dc c3 05 00 4d 00 00 00 | ....................F.......M... |
4f00 | 23 c4 05 00 1f 00 00 00 71 c4 05 00 4f 00 00 00 91 c4 05 00 3d 00 00 00 e1 c4 05 00 08 00 00 00 | #.......q...O.......=........... |
4f20 | 1f c5 05 00 0e 00 00 00 28 c5 05 00 84 01 00 00 37 c5 05 00 8c 00 00 00 bc c6 05 00 fb 00 00 00 | ........(.......7............... |
4f40 | 49 c7 05 00 11 00 00 00 45 c8 05 00 0e 01 00 00 57 c8 05 00 3a 00 00 00 66 c9 05 00 09 00 00 00 | I.......E.......W...:...f....... |
4f60 | a1 c9 05 00 38 00 00 00 ab c9 05 00 bd 00 00 00 e4 c9 05 00 30 00 00 00 a2 ca 05 00 31 00 00 00 | ....8...............0.......1... |
4f80 | d3 ca 05 00 24 00 00 00 05 cb 05 00 28 00 00 00 2a cb 05 00 23 00 00 00 53 cb 05 00 20 00 00 00 | ....$.......(...*...#...S....... |
4fa0 | 77 cb 05 00 21 00 00 00 98 cb 05 00 3a 00 00 00 ba cb 05 00 1f 00 00 00 f5 cb 05 00 32 00 00 00 | w...!.......:...............2... |
4fc0 | 15 cc 05 00 26 00 00 00 48 cc 05 00 13 00 00 00 6f cc 05 00 41 00 00 00 83 cc 05 00 a0 00 00 00 | ....&...H.......o...A........... |
4fe0 | c5 cc 05 00 3e 00 00 00 66 cd 05 00 1f 00 00 00 a5 cd 05 00 ce 00 00 00 c5 cd 05 00 4c 01 00 00 | ....>...f...................L... |
5000 | 94 ce 05 00 36 01 00 00 e1 cf 05 00 21 00 00 00 18 d1 05 00 1e 00 00 00 3a d1 05 00 0e 00 00 00 | ....6.......!...........:....... |
5020 | 59 d1 05 00 03 00 00 00 68 d1 05 00 39 00 00 00 6c d1 05 00 2f 00 00 00 a6 d1 05 00 b8 00 00 00 | Y.......h...9...l.../........... |
5040 | d6 d1 05 00 24 00 00 00 8f d2 05 00 49 00 00 00 b4 d2 05 00 03 00 00 00 fe d2 05 00 24 00 00 00 | ....$.......I...............$... |
5060 | 02 d3 05 00 03 00 00 00 27 d3 05 00 06 00 00 00 2b d3 05 00 0c 00 00 00 32 d3 05 00 18 00 00 00 | ........'.......+.......2....... |
5080 | 3f d3 05 00 17 00 00 00 58 d3 05 00 15 00 00 00 70 d3 05 00 22 00 00 00 86 d3 05 00 4c 00 00 00 | ?.......X.......p...".......L... |
50a0 | a9 d3 05 00 45 00 00 00 f6 d3 05 00 98 00 00 00 3c d4 05 00 15 00 00 00 d5 d4 05 00 53 01 00 00 | ....E...........<...........S... |
50c0 | eb d4 05 00 20 00 00 00 3f d6 05 00 03 00 00 00 60 d6 05 00 21 00 00 00 64 d6 05 00 21 00 00 00 | ........?.......`...!...d...!... |
50e0 | 86 d6 05 00 04 00 00 00 a8 d6 05 00 15 00 00 00 ad d6 05 00 e1 00 00 00 c3 d6 05 00 08 00 00 00 | ................................ |
5100 | a5 d7 05 00 0d 00 00 00 ae d7 05 00 c3 00 00 00 bc d7 05 00 20 00 00 00 80 d8 05 00 21 00 00 00 | ............................!... |
5120 | a1 d8 05 00 0c 00 00 00 c3 d8 05 00 0a 00 00 00 d0 d8 05 00 72 00 00 00 db d8 05 00 dc 00 00 00 | ....................r........... |
5140 | 4e d9 05 00 0e 00 00 00 2b da 05 00 4f 00 00 00 3a da 05 00 6a 00 00 00 8a da 05 00 50 00 00 00 | N.......+...O...:...j.......P... |
5160 | f5 da 05 00 0e 00 00 00 46 db 05 00 0b 00 00 00 55 db 05 00 1f 00 00 00 61 db 05 00 41 00 00 00 | ........F.......U.......a...A... |
5180 | 81 db 05 00 13 04 00 00 c3 db 05 00 87 00 00 00 d7 df 05 00 25 00 00 00 5f e0 05 00 16 00 00 00 | ....................%..._....... |
51a0 | 85 e0 05 00 2f 01 00 00 9c e0 05 00 96 00 00 00 cc e1 05 00 1e 00 00 00 63 e2 05 00 1c 00 00 00 | ..../...................c....... |
51c0 | 82 e2 05 00 ad 01 00 00 9f e2 05 00 45 00 00 00 4d e4 05 00 16 00 00 00 93 e4 05 00 35 00 00 00 | ............E...M...........5... |
51e0 | aa e4 05 00 3b 00 00 00 e0 e4 05 00 4a 00 00 00 1c e5 05 00 54 00 00 00 67 e5 05 00 73 00 00 00 | ....;.......J.......T...g...s... |
5200 | bc e5 05 00 4c 00 00 00 30 e6 05 00 0d 00 00 00 7d e6 05 00 23 00 00 00 8b e6 05 00 23 00 00 00 | ....L...0.......}...#.......#... |
5220 | af e6 05 00 21 00 00 00 d3 e6 05 00 15 00 00 00 f5 e6 05 00 0b 00 00 00 0b e7 05 00 0a 00 00 00 | ....!........................... |
5240 | 17 e7 05 00 1e 00 00 00 22 e7 05 00 0b 00 00 00 41 e7 05 00 1f 00 00 00 4d e7 05 00 15 00 00 00 | ........".......A.......M....... |
5260 | 6d e7 05 00 48 00 00 00 83 e7 05 00 4e 00 00 00 cc e7 05 00 0b 00 00 00 1b e8 05 00 3d 00 00 00 | m...H.......N...............=... |
5280 | 27 e8 05 00 25 00 00 00 65 e8 05 00 29 00 00 00 8b e8 05 00 11 00 00 00 b5 e8 05 00 76 00 00 00 | '...%...e...)...............v... |
52a0 | c7 e8 05 00 43 00 00 00 3e e9 05 00 6b 00 00 00 82 e9 05 00 0c 00 00 00 ee e9 05 00 20 00 00 00 | ....C...>...k................... |
52c0 | fb e9 05 00 0d 00 00 00 1c ea 05 00 05 00 00 00 2a ea 05 00 0d 00 00 00 30 ea 05 00 0e 00 00 00 | ................*.......0....... |
52e0 | 3e ea 05 00 81 00 00 00 4d ea 05 00 07 00 00 00 cf ea 05 00 1a 00 00 00 d7 ea 05 00 27 00 00 00 | >.......M...................'... |
5300 | f2 ea 05 00 19 00 00 00 1a eb 05 00 1e 00 00 00 34 eb 05 00 17 00 00 00 53 eb 05 00 1f 00 00 00 | ................4.......S....... |
5320 | 6b eb 05 00 6d 00 00 00 8b eb 05 00 58 00 00 00 f9 eb 05 00 0c 00 00 00 52 ec 05 00 0b 00 00 00 | k...m.......X...........R....... |
5340 | 5f ec 05 00 10 00 00 00 6b ec 05 00 3d 00 00 00 7c ec 05 00 39 00 00 00 ba ec 05 00 40 00 00 00 | _.......k...=...|...9.......@... |
5360 | f4 ec 05 00 0d 00 00 00 35 ed 05 00 0b 00 00 00 43 ed 05 00 1f 00 00 00 4f ed 05 00 0f 00 00 00 | ........5.......C.......O....... |
5380 | 6f ed 05 00 0f 00 00 00 7f ed 05 00 1d 00 00 00 8f ed 05 00 09 00 00 00 ad ed 05 00 10 00 00 00 | o............................... |
53a0 | b7 ed 05 00 14 00 00 00 c8 ed 05 00 1d 00 00 00 dd ed 05 00 0f 00 00 00 fb ed 05 00 1d 00 00 00 | ................................ |
53c0 | 0b ee 05 00 17 00 00 00 29 ee 05 00 d0 01 00 00 41 ee 05 00 2e 00 00 00 12 f0 05 00 7d 00 00 00 | ........).......A...........}... |
53e0 | 41 f0 05 00 c1 00 00 00 bf f0 05 00 0c 00 00 00 81 f1 05 00 13 00 00 00 8e f1 05 00 15 00 00 00 | A............................... |
5400 | a2 f1 05 00 0f 00 00 00 b8 f1 05 00 67 00 00 00 c8 f1 05 00 56 00 00 00 30 f2 05 00 11 00 00 00 | ............g.......V...0....... |
5420 | 87 f2 05 00 c1 00 00 00 99 f2 05 00 59 00 00 00 5b f3 05 00 c6 00 00 00 b5 f3 05 00 07 00 00 00 | ............Y...[............... |
5440 | 7c f4 05 00 07 00 00 00 84 f4 05 00 35 00 00 00 8c f4 05 00 69 00 00 00 c2 f4 05 00 6c 00 00 00 | |...........5.......i.......l... |
5460 | 2c f5 05 00 2b 00 00 00 99 f5 05 00 7c 00 00 00 c5 f5 05 00 69 00 00 00 42 f6 05 00 0b 00 00 00 | ,...+.......|.......i...B....... |
5480 | ac f6 05 00 09 00 00 00 b8 f6 05 00 11 00 00 00 c2 f6 05 00 05 00 00 00 d4 f6 05 00 ad 00 00 00 | ................................ |
54a0 | da f6 05 00 4c 00 00 00 88 f7 05 00 12 00 00 00 d5 f7 05 00 04 00 00 00 e8 f7 05 00 06 00 00 00 | ....L........................... |
54c0 | ed f7 05 00 06 00 00 00 f4 f7 05 00 04 00 00 00 fb f7 05 00 0f 00 00 00 00 f8 05 00 16 00 00 00 | ................................ |
54e0 | 10 f8 05 00 d7 00 00 00 27 f8 05 00 fd 00 00 00 ff f8 05 00 65 01 00 00 fd f9 05 00 06 00 00 00 | ........'...........e........... |
5500 | 63 fb 05 00 f4 00 00 00 6a fb 05 00 00 01 00 00 5f fc 05 00 06 00 00 00 60 fd 05 00 0b 02 00 00 | c.......j......._.......`....... |
5520 | 67 fd 05 00 e2 01 00 00 73 ff 05 00 03 00 00 00 56 01 06 00 27 00 00 00 5a 01 06 00 18 00 00 00 | g.......s.......V...'...Z....... |
5540 | 82 01 06 00 0a 00 00 00 9b 01 06 00 7b 01 00 00 a6 01 06 00 40 00 00 00 22 03 06 00 a9 01 00 00 | ............{.......@..."....... |
5560 | 63 03 06 00 30 00 00 00 0d 05 06 00 10 00 00 00 3e 05 06 00 1b 00 00 00 4f 05 06 00 2e 00 00 00 | c...0...........>.......O....... |
5580 | 6b 05 06 00 0b 00 00 00 9a 05 06 00 13 00 00 00 a6 05 06 00 0b 00 00 00 ba 05 06 00 2e 00 00 00 | k............................... |
55a0 | c6 05 06 00 46 00 00 00 f5 05 06 00 0d 00 00 00 3c 06 06 00 0b 00 00 00 4a 06 06 00 58 01 00 00 | ....F...........<.......J...X... |
55c0 | 56 06 06 00 88 00 00 00 af 07 06 00 45 00 00 00 38 08 06 00 29 00 00 00 7e 08 06 00 96 00 00 00 | V...........E...8...)...~....... |
55e0 | a8 08 06 00 10 00 00 00 3f 09 06 00 2f 00 00 00 50 09 06 00 43 00 00 00 80 09 06 00 37 00 00 00 | ........?.../...P...C.......7... |
5600 | c4 09 06 00 49 00 00 00 fc 09 06 00 09 00 00 00 46 0a 06 00 a8 00 00 00 50 0a 06 00 3a 00 00 00 | ....I...........F.......P...:... |
5620 | f9 0a 06 00 08 00 00 00 34 0b 06 00 20 00 00 00 3d 0b 06 00 28 00 00 00 5e 0b 06 00 4b 00 00 00 | ........4.......=...(...^...K... |
5640 | 87 0b 06 00 0f 00 00 00 d3 0b 06 00 26 01 00 00 e3 0b 06 00 5b 01 00 00 0a 0d 06 00 87 00 00 00 | ............&.......[........... |
5660 | 66 0e 06 00 86 00 00 00 ee 0e 06 00 ce 01 00 00 75 0f 06 00 18 00 00 00 44 11 06 00 51 00 00 00 | f...............u.......D...Q... |
5680 | 5d 11 06 00 f2 00 00 00 af 11 06 00 0e 00 00 00 a2 12 06 00 34 00 00 00 b1 12 06 00 36 00 00 00 | ]...................4.......6... |
56a0 | e6 12 06 00 bd 00 00 00 1d 13 06 00 7e 00 00 00 db 13 06 00 33 00 00 00 5a 14 06 00 0e 00 00 00 | ............~.......3...Z....... |
56c0 | 8e 14 06 00 dd 00 00 00 9d 14 06 00 06 00 00 00 7b 15 06 00 12 00 00 00 82 15 06 00 14 00 00 00 | ................{............... |
56e0 | 95 15 06 00 0b 00 00 00 aa 15 06 00 14 00 00 00 b6 15 06 00 42 00 00 00 cb 15 06 00 07 00 00 00 | ....................B........... |
5700 | 0e 16 06 00 07 00 00 00 16 16 06 00 c7 00 00 00 1e 16 06 00 29 00 00 00 e6 16 06 00 28 00 00 00 | ....................).......(... |
5720 | 10 17 06 00 23 00 00 00 39 17 06 00 14 00 00 00 5d 17 06 00 20 00 00 00 72 17 06 00 18 00 00 00 | ....#...9.......].......r....... |
5740 | 93 17 06 00 28 00 00 00 ac 17 06 00 1d 00 00 00 d5 17 06 00 29 00 00 00 f3 17 06 00 1e 00 00 00 | ....(...............)........... |
5760 | 1d 18 06 00 30 00 00 00 3c 18 06 00 4b 00 00 00 6d 18 06 00 6e 00 00 00 b9 18 06 00 2d 00 00 00 | ....0...<...K...m...n.......-... |
5780 | 28 19 06 00 35 00 00 00 56 19 06 00 16 00 00 00 8c 19 06 00 1c 00 00 00 a3 19 06 00 1b 00 00 00 | (...5...V....................... |
57a0 | c0 19 06 00 41 00 00 00 dc 19 06 00 35 00 00 00 1e 1a 06 00 97 00 00 00 54 1a 06 00 4e 00 00 00 | ....A.......5...........T...N... |
57c0 | ec 1a 06 00 1d 00 00 00 3b 1b 06 00 4c 00 00 00 59 1b 06 00 17 00 00 00 a6 1b 06 00 1f 00 00 00 | ........;...L...Y............... |
57e0 | be 1b 06 00 1b 00 00 00 de 1b 06 00 24 00 00 00 fa 1b 06 00 31 00 00 00 1f 1c 06 00 4a 00 00 00 | ............$.......1.......J... |
5800 | 51 1c 06 00 5a 00 00 00 9c 1c 06 00 2a 00 00 00 f7 1c 06 00 3f 00 00 00 22 1d 06 00 47 00 00 00 | Q...Z.......*.......?..."...G... |
5820 | 62 1d 06 00 42 00 00 00 aa 1d 06 00 28 00 00 00 ed 1d 06 00 2a 00 00 00 16 1e 06 00 2d 00 00 00 | b...B.......(.......*.......-... |
5840 | 41 1e 06 00 30 00 00 00 6f 1e 06 00 2d 00 00 00 a0 1e 06 00 2c 00 00 00 ce 1e 06 00 19 00 00 00 | A...0...o...-.......,........... |
5860 | fb 1e 06 00 29 00 00 00 15 1f 06 00 30 00 00 00 3f 1f 06 00 24 00 00 00 70 1f 06 00 2b 00 00 00 | ....).......0...?...$...p...+... |
5880 | 95 1f 06 00 29 00 00 00 c1 1f 06 00 35 00 00 00 eb 1f 06 00 2a 00 00 00 21 20 06 00 10 00 00 00 | ....).......5.......*...!....... |
58a0 | 4c 20 06 00 2b 00 00 00 5d 20 06 00 55 00 00 00 89 20 06 00 3c 00 00 00 df 20 06 00 90 00 00 00 | L...+...]...U.......<........... |
58c0 | 1c 21 06 00 1a 00 00 00 ad 21 06 00 4c 00 00 00 c8 21 06 00 1f 00 00 00 15 22 06 00 71 00 00 00 | .!.......!..L....!......."..q... |
58e0 | 35 22 06 00 6b 00 00 00 a7 22 06 00 5b 00 00 00 13 23 06 00 2c 00 00 00 6f 23 06 00 4e 00 00 00 | 5"..k...."..[....#..,...o#..N... |
5900 | 9c 23 06 00 2a 00 00 00 eb 23 06 00 a0 00 00 00 16 24 06 00 65 00 00 00 b7 24 06 00 27 01 00 00 | .#..*....#.......$..e....$..'... |
5920 | 1d 25 06 00 d0 00 00 00 45 26 06 00 d8 00 00 00 16 27 06 00 3f 00 00 00 ef 27 06 00 38 00 00 00 | .%......E&.......'..?....'..8... |
5940 | 2f 28 06 00 46 00 00 00 68 28 06 00 40 00 00 00 af 28 06 00 53 00 00 00 f0 28 06 00 45 00 00 00 | /(..F...h(..@....(..S....(..E... |
5960 | 44 29 06 00 26 01 00 00 8a 29 06 00 f1 00 00 00 b1 2a 06 00 48 00 00 00 a3 2b 06 00 49 00 00 00 | D)..&....).......*..H....+..I... |
5980 | ec 2b 06 00 d0 00 00 00 36 2c 06 00 24 00 00 00 07 2d 06 00 16 00 00 00 2c 2d 06 00 60 00 00 00 | .+......6,..$....-......,-..`... |
59a0 | 43 2d 06 00 50 00 00 00 a4 2d 06 00 27 00 00 00 f5 2d 06 00 18 00 00 00 1d 2e 06 00 49 00 00 00 | C-..P....-..'....-..........I... |
59c0 | 36 2e 06 00 52 00 00 00 80 2e 06 00 58 00 00 00 d3 2e 06 00 3d 00 00 00 2c 2f 06 00 25 00 00 00 | 6...R.......X.......=...,/..%... |
59e0 | 6a 2f 06 00 26 00 00 00 90 2f 06 00 2a 00 00 00 b7 2f 06 00 23 00 00 00 e2 2f 06 00 47 00 00 00 | j/..&..../..*..../..#..../..G... |
5a00 | 06 30 06 00 a4 00 00 00 4e 30 06 00 aa 00 00 00 f3 30 06 00 f4 00 00 00 9e 31 06 00 44 00 00 00 | .0......N0.......0.......1..D... |
5a20 | 93 32 06 00 61 00 00 00 d8 32 06 00 54 00 00 00 3a 33 06 00 3c 00 00 00 8f 33 06 00 6d 00 00 00 | .2..a....2..T...:3..<....3..m... |
5a40 | cc 33 06 00 6a 00 00 00 3a 34 06 00 43 00 00 00 a5 34 06 00 5c 00 00 00 e9 34 06 00 34 00 00 00 | .3..j...:4..C....4..\....4..4... |
5a60 | 46 35 06 00 a4 00 00 00 7b 35 06 00 a8 00 00 00 20 36 06 00 e8 00 00 00 c9 36 06 00 ec 00 00 00 | F5......{5.......6.......6...... |
5a80 | b2 37 06 00 2c 00 00 00 9f 38 06 00 34 00 00 00 cc 38 06 00 23 00 00 00 01 39 06 00 55 00 00 00 | .7..,....8..4....8..#....9..U... |
5aa0 | 25 39 06 00 66 00 00 00 7b 39 06 00 7b 00 00 00 e2 39 06 00 41 00 00 00 5e 3a 06 00 42 00 00 00 | %9..f...{9..{....9..A...^:..B... |
5ac0 | a0 3a 06 00 41 00 00 00 e3 3a 06 00 56 00 00 00 25 3b 06 00 35 00 00 00 7c 3b 06 00 2b 00 00 00 | .:..A....:..V...%;..5...|;..+... |
5ae0 | b2 3b 06 00 2f 00 00 00 de 3b 06 00 63 00 00 00 0e 3c 06 00 56 00 00 00 72 3c 06 00 4d 00 00 00 | .;../....;..c....<..V...r<..M... |
5b00 | c9 3c 06 00 34 00 00 00 17 3d 06 00 79 01 00 00 4c 3d 06 00 df 00 00 00 c6 3e 06 00 f0 00 00 00 | .<..4....=..y...L=.......>...... |
5b20 | a6 3f 06 00 54 00 00 00 97 40 06 00 32 00 00 00 ec 40 06 00 0c 01 00 00 1f 41 06 00 59 00 00 00 | .?..T....@..2....@.......A..Y... |
5b40 | 2c 42 06 00 4e 00 00 00 86 42 06 00 26 01 00 00 d5 42 06 00 4a 00 00 00 fc 43 06 00 1a 00 00 00 | ,B..N....B..&....B..J....C...... |
5b60 | 47 44 06 00 2f 00 00 00 62 44 06 00 a4 00 00 00 92 44 06 00 2a 00 00 00 37 45 06 00 1d 01 00 00 | GD../...bD.......D..*...7E...... |
5b80 | 62 45 06 00 2d 00 00 00 80 46 06 00 af 00 00 00 ae 46 06 00 ce 00 00 00 5e 47 06 00 53 00 00 00 | bE..-....F.......F......^G..S... |
5ba0 | 2d 48 06 00 45 00 00 00 81 48 06 00 34 00 00 00 c7 48 06 00 7a 00 00 00 fc 48 06 00 32 00 00 00 | -H..E....H..4....H..z....H..2... |
5bc0 | 77 49 06 00 27 00 00 00 aa 49 06 00 27 00 00 00 d2 49 06 00 5b 00 00 00 fa 49 06 00 78 00 00 00 | wI..'....I..'....I..[....I..x... |
5be0 | 56 4a 06 00 5f 00 00 00 cf 4a 06 00 1b 00 00 00 2f 4b 06 00 0c 00 00 00 4b 4b 06 00 b4 01 00 00 | VJ.._....J....../K......KK...... |
5c00 | 58 4b 06 00 11 00 00 00 0d 4d 06 00 12 00 00 00 1f 4d 06 00 ed 00 00 00 32 4d 06 00 17 00 00 00 | XK.......M.......M......2M...... |
5c20 | 20 4e 06 00 18 00 00 00 38 4e 06 00 12 00 00 00 51 4e 06 00 35 00 00 00 64 4e 06 00 26 00 00 00 | .N......8N......QN..5...dN..&... |
5c40 | 9a 4e 06 00 2c 00 00 00 c1 4e 06 00 75 00 00 00 ee 4e 06 00 41 00 00 00 64 4f 06 00 41 00 00 00 | .N..,....N..u....N..A...dO..A... |
5c60 | a6 4f 06 00 6f 00 00 00 e8 4f 06 00 9f 00 00 00 58 50 06 00 a1 00 00 00 f8 50 06 00 7f 00 00 00 | .O..o....O......XP.......P...... |
5c80 | 9a 51 06 00 77 00 00 00 1a 52 06 00 08 00 00 00 92 52 06 00 0e 00 00 00 9b 52 06 00 06 00 00 00 | .Q..w....R.......R.......R...... |
5ca0 | aa 52 06 00 15 00 00 00 b1 52 06 00 27 00 00 00 c7 52 06 00 ee 00 00 00 ef 52 06 00 eb 00 00 00 | .R.......R..'....R.......R...... |
5cc0 | de 53 06 00 04 00 00 00 ca 54 06 00 20 00 00 00 cf 54 06 00 22 00 00 00 f0 54 06 00 11 00 00 00 | .S.......T.......T.."....T...... |
5ce0 | 13 55 06 00 3a 00 00 00 25 55 06 00 20 00 00 00 60 55 06 00 14 00 00 00 81 55 06 00 55 00 00 00 | .U..:...%U......`U.......U..U... |
5d00 | 96 55 06 00 28 00 00 00 ec 55 06 00 88 00 00 00 15 56 06 00 16 00 00 00 9e 56 06 00 16 00 00 00 | .U..(....U.......V.......V...... |
5d20 | b5 56 06 00 18 00 00 00 cc 56 06 00 26 00 00 00 e5 56 06 00 1a 00 00 00 0c 57 06 00 27 00 00 00 | .V.......V..&....V.......W..'... |
5d40 | 27 57 06 00 23 00 00 00 4f 57 06 00 17 00 00 00 73 57 06 00 21 00 00 00 8b 57 06 00 28 00 00 00 | 'W..#...OW......sW..!....W..(... |
5d60 | ad 57 06 00 49 00 00 00 d6 57 06 00 44 00 00 00 20 58 06 00 25 00 00 00 65 58 06 00 12 00 00 00 | .W..I....W..D....X..%...eX...... |
5d80 | 8b 58 06 00 3a 00 00 00 9e 58 06 00 32 00 00 00 d9 58 06 00 3f 00 00 00 0c 59 06 00 a2 00 00 00 | .X..:....X..2....X..?....Y...... |
5da0 | 4c 59 06 00 21 00 00 00 ef 59 06 00 0d 00 00 00 11 5a 06 00 4a 00 00 00 1f 5a 06 00 2e 00 00 00 | LY..!....Y.......Z..J....Z...... |
5dc0 | 6a 5a 06 00 2e 00 00 00 99 5a 06 00 2e 00 00 00 c8 5a 06 00 1f 00 00 00 f7 5a 06 00 41 00 00 00 | jZ.......Z.......Z.......Z..A... |
5de0 | 17 5b 06 00 3c 00 00 00 59 5b 06 00 5b 00 00 00 96 5b 06 00 30 00 00 00 f2 5b 06 00 3f 00 00 00 | .[..<...Y[..[....[..0....[..?... |
5e00 | 23 5c 06 00 38 00 00 00 63 5c 06 00 52 00 00 00 9c 5c 06 00 39 00 00 00 ef 5c 06 00 3b 00 00 00 | #\..8...c\..R....\..9....\..;... |
5e20 | 29 5d 06 00 4a 00 00 00 65 5d 06 00 2d 00 00 00 b0 5d 06 00 3d 00 00 00 de 5d 06 00 24 00 00 00 | )]..J...e]..-....]..=....]..$... |
5e40 | 1c 5e 06 00 20 00 00 00 41 5e 06 00 29 00 00 00 62 5e 06 00 2b 00 00 00 8c 5e 06 00 38 00 00 00 | .^......A^..)...b^..+....^..8... |
5e60 | b8 5e 06 00 3a 00 00 00 f1 5e 06 00 3a 00 00 00 2c 5f 06 00 30 00 00 00 67 5f 06 00 27 00 00 00 | .^..:....^..:...,_..0...g_..'... |
5e80 | 98 5f 06 00 8d 00 00 00 c0 5f 06 00 8d 00 00 00 4e 60 06 00 2f 00 00 00 dc 60 06 00 2a 00 00 00 | ._......._......N`../....`..*... |
5ea0 | 0c 61 06 00 19 00 00 00 37 61 06 00 5e 00 00 00 51 61 06 00 23 00 00 00 b0 61 06 00 37 00 00 00 | .a......7a..^...Qa..#....a..7... |
5ec0 | d4 61 06 00 20 00 00 00 0c 62 06 00 1c 00 00 00 2d 62 06 00 30 00 00 00 4a 62 06 00 27 00 00 00 | .a.......b......-b..0...Jb..'... |
5ee0 | 7b 62 06 00 20 00 00 00 a3 62 06 00 25 00 00 00 c4 62 06 00 dd 00 00 00 ea 62 06 00 da 00 00 00 | {b.......b..%....b.......b...... |
5f00 | c8 63 06 00 da 00 00 00 a3 64 06 00 0e 00 00 00 7e 65 06 00 40 00 00 00 8d 65 06 00 23 00 00 00 | .c.......d......~e..@....e..#... |
5f20 | ce 65 06 00 24 00 00 00 f2 65 06 00 07 00 00 00 17 66 06 00 07 00 00 00 1f 66 06 00 33 00 00 00 | .e..$....e.......f.......f..3... |
5f40 | 27 66 06 00 33 00 00 00 5b 66 06 00 33 00 00 00 8f 66 06 00 33 00 00 00 c3 66 06 00 40 00 00 00 | 'f..3...[f..3....f..3....f..@... |
5f60 | f7 66 06 00 51 00 00 00 38 67 06 00 4f 00 00 00 8a 67 06 00 3d 00 00 00 da 67 06 00 64 00 00 00 | .f..Q...8g..O....g..=....g..d... |
5f80 | 18 68 06 00 6f 00 00 00 7d 68 06 00 cd 00 00 00 ed 68 06 00 82 00 00 00 bb 69 06 00 8f 00 00 00 | .h..o...}h.......h.......i...... |
5fa0 | 3e 6a 06 00 e1 00 00 00 ce 6a 06 00 c3 00 00 00 b0 6b 06 00 8b 00 00 00 74 6c 06 00 19 00 00 00 | >j.......j.......k......tl...... |
5fc0 | 00 6d 06 00 10 00 00 00 1a 6d 06 00 0c 00 00 00 2b 6d 06 00 ac 00 00 00 38 6d 06 00 e2 00 00 00 | .m.......m......+m......8m...... |
5fe0 | e5 6d 06 00 14 00 00 00 c8 6e 06 00 c3 00 00 00 dd 6e 06 00 95 00 00 00 a1 6f 06 00 13 01 00 00 | .m.......n.......n.......o...... |
6000 | 37 70 06 00 31 00 00 00 4b 71 06 00 0a 00 00 00 7d 71 06 00 21 01 00 00 88 71 06 00 d8 00 00 00 | 7p..1...Kq......}q..!....q...... |
6020 | aa 72 06 00 8b 00 00 00 83 73 06 00 8c 00 00 00 0f 74 06 00 f8 00 00 00 9c 74 06 00 39 00 00 00 | .r.......s.......t.......t..9... |
6040 | 95 75 06 00 49 00 00 00 cf 75 06 00 b6 00 00 00 19 76 06 00 93 00 00 00 d0 76 06 00 80 00 00 00 | .u..I....u.......v.......v...... |
6060 | 64 77 06 00 79 00 00 00 e5 77 06 00 79 00 00 00 5f 78 06 00 53 01 00 00 d9 78 06 00 7f 00 00 00 | dw..y....w..y..._x..S....x...... |
6080 | 2d 7a 06 00 a9 00 00 00 ad 7a 06 00 b6 00 00 00 57 7b 06 00 83 00 00 00 0e 7c 06 00 86 00 00 00 | -z.......z......W{.......|...... |
60a0 | 92 7c 06 00 0e 00 00 00 19 7d 06 00 5d 00 00 00 28 7d 06 00 36 00 00 00 86 7d 06 00 10 00 00 00 | .|.......}..]...(}..6....}...... |
60c0 | bd 7d 06 00 0d 00 00 00 ce 7d 06 00 45 00 00 00 dc 7d 06 00 45 00 00 00 22 7e 06 00 19 00 00 00 | .}.......}..E....}..E..."~...... |
60e0 | 68 7e 06 00 22 00 00 00 82 7e 06 00 1c 00 00 00 a5 7e 06 00 45 00 00 00 c2 7e 06 00 50 00 00 00 | h~.."....~.......~..E....~..P... |
6100 | 08 7f 06 00 65 00 00 00 59 7f 06 00 2f 00 00 00 bf 7f 06 00 60 00 00 00 ef 7f 06 00 54 00 00 00 | ....e...Y.../.......`.......T... |
6120 | 50 80 06 00 55 00 00 00 a5 80 06 00 48 00 00 00 fb 80 06 00 26 00 00 00 44 81 06 00 26 00 00 00 | P...U.......H.......&...D...&... |
6140 | 6b 81 06 00 b2 00 00 00 92 81 06 00 eb 00 00 00 45 82 06 00 75 00 00 00 31 83 06 00 77 00 00 00 | k...............E...u...1...w... |
6160 | a7 83 06 00 4d 00 00 00 1f 84 06 00 e2 00 00 00 6d 84 06 00 78 00 00 00 50 85 06 00 29 01 00 00 | ....M...........m...x...P...)... |
6180 | c9 85 06 00 53 00 00 00 f3 86 06 00 42 00 00 00 47 87 06 00 8b 00 00 00 8a 87 06 00 1e 00 00 00 | ....S.......B...G............... |
61a0 | 16 88 06 00 56 00 00 00 35 88 06 00 d2 00 00 00 8c 88 06 00 36 00 00 00 5f 89 06 00 ce 00 00 00 | ....V...5...........6..._....... |
61c0 | 96 89 06 00 c1 00 00 00 65 8a 06 00 38 00 00 00 27 8b 06 00 57 00 00 00 60 8b 06 00 bd 00 00 00 | ........e...8...'...W...`....... |
61e0 | b8 8b 06 00 85 00 00 00 76 8c 06 00 4f 00 00 00 fc 8c 06 00 ba 01 00 00 4c 8d 06 00 b6 00 00 00 | ........v...O...........L....... |
6200 | 07 8f 06 00 63 00 00 00 be 8f 06 00 4c 00 00 00 22 90 06 00 d5 00 00 00 6f 90 06 00 66 00 00 00 | ....c.......L...".......o...f... |
6220 | 45 91 06 00 45 01 00 00 ac 91 06 00 57 00 00 00 f2 92 06 00 a4 00 00 00 4a 93 06 00 bc 00 00 00 | E...E.......W...........J....... |
6240 | ef 93 06 00 65 00 00 00 ac 94 06 00 3f 00 00 00 12 95 06 00 c0 01 00 00 52 95 06 00 72 00 00 00 | ....e.......?...........R...r... |
6260 | 13 97 06 00 74 00 00 00 86 97 06 00 58 00 00 00 fb 97 06 00 45 00 00 00 54 98 06 00 41 00 00 00 | ....t.......X.......E...T...A... |
6280 | 9a 98 06 00 52 00 00 00 dc 98 06 00 81 00 00 00 2f 99 06 00 75 00 00 00 b1 99 06 00 30 00 00 00 | ....R.........../...u.......0... |
62a0 | 27 9a 06 00 31 00 00 00 58 9a 06 00 7e 00 00 00 8a 9a 06 00 50 00 00 00 09 9b 06 00 36 00 00 00 | '...1...X...~.......P.......6... |
62c0 | 5a 9b 06 00 50 01 00 00 91 9b 06 00 69 00 00 00 e2 9c 06 00 5d 00 00 00 4c 9d 06 00 8e 00 00 00 | Z...P.......i.......]...L....... |
62e0 | aa 9d 06 00 4a 00 00 00 39 9e 06 00 57 00 00 00 84 9e 06 00 6d 00 00 00 dc 9e 06 00 64 00 00 00 | ....J...9...W.......m.......d... |
6300 | 4a 9f 06 00 64 00 00 00 af 9f 06 00 99 00 00 00 14 a0 06 00 26 00 00 00 ae a0 06 00 ad 00 00 00 | J...d...............&........... |
6320 | d5 a0 06 00 81 00 00 00 83 a1 06 00 33 00 00 00 05 a2 06 00 c0 00 00 00 39 a2 06 00 90 00 00 00 | ............3...........9....... |
6340 | fa a2 06 00 a2 00 00 00 8b a3 06 00 83 00 00 00 2e a4 06 00 41 00 00 00 b2 a4 06 00 3a 00 00 00 | ....................A.......:... |
6360 | f4 a4 06 00 4b 00 00 00 2f a5 06 00 65 00 00 00 7b a5 06 00 06 00 00 00 e1 a5 06 00 05 00 00 00 | ....K.../...e...{............... |
6380 | e8 a5 06 00 e3 01 00 00 ee a5 06 00 1e 00 00 00 d2 a7 06 00 3d 00 00 00 f1 a7 06 00 4b 02 00 00 | ....................=.......K... |
63a0 | 2f a8 06 00 5a 02 00 00 7b aa 06 00 6d 00 00 00 d6 ac 06 00 a8 00 00 00 44 ad 06 00 bf 00 00 00 | /...Z...{...m...........D....... |
63c0 | ed ad 06 00 b2 00 00 00 ad ae 06 00 06 00 00 00 60 af 06 00 4b 01 00 00 67 af 06 00 4c 01 00 00 | ................`...K...g...L... |
63e0 | b3 b0 06 00 17 00 00 00 00 b2 06 00 0b 00 00 00 18 b2 06 00 0d 00 00 00 24 b2 06 00 55 00 00 00 | ........................$...U... |
6400 | 32 b2 06 00 0f 00 00 00 88 b2 06 00 0f 00 00 00 98 b2 06 00 5c 00 00 00 a8 b2 06 00 ff 02 00 00 | 2...................\........... |
6420 | 05 b3 06 00 b1 00 00 00 05 b6 06 00 37 00 00 00 b7 b6 06 00 06 00 00 00 ef b6 06 00 12 00 00 00 | ............7................... |
6440 | f6 b6 06 00 9a 00 00 00 09 b7 06 00 08 00 00 00 a4 b7 06 00 38 00 00 00 ad b7 06 00 11 00 00 00 | ....................8........... |
6460 | e6 b7 06 00 1c 00 00 00 f8 b7 06 00 12 00 00 00 15 b8 06 00 1a 00 00 00 28 b8 06 00 49 00 00 00 | ........................(...I... |
6480 | 43 b8 06 00 1e 00 00 00 8d b8 06 00 2f 00 00 00 ac b8 06 00 73 00 00 00 dc b8 06 00 ae 00 00 00 | C.........../.......s........... |
64a0 | 50 b9 06 00 af 00 00 00 ff b9 06 00 d0 00 00 00 af ba 06 00 0b 00 00 00 80 bb 06 00 08 00 00 00 | P............................... |
64c0 | 8c bb 06 00 14 00 00 00 95 bb 06 00 4a 00 00 00 aa bb 06 00 60 00 00 00 f5 bb 06 00 06 00 00 00 | ............J.......`........... |
64e0 | 56 bc 06 00 06 00 00 00 5d bc 06 00 da 00 00 00 64 bc 06 00 98 00 00 00 3f bd 06 00 bc 00 00 00 | V.......].......d.......?....... |
6500 | d8 bd 06 00 06 00 00 00 95 be 06 00 0a 00 00 00 9c be 06 00 14 00 00 00 a7 be 06 00 1b 00 00 00 | ................................ |
6520 | bc be 06 00 0c 00 00 00 d8 be 06 00 2e 00 00 00 e5 be 06 00 1d 00 00 00 14 bf 06 00 0e 00 00 00 | ................................ |
6540 | 32 bf 06 00 ff 01 00 00 41 bf 06 00 26 00 00 00 41 c1 06 00 0e 00 00 00 68 c1 06 00 21 00 00 00 | 2.......A...&...A.......h...!... |
6560 | 77 c1 06 00 98 00 00 00 99 c1 06 00 07 00 00 00 32 c2 06 00 03 00 00 00 3a c2 06 00 91 00 00 00 | w...............2.......:....... |
6580 | 3e c2 06 00 0b 00 00 00 d0 c2 06 00 6a 00 00 00 dc c2 06 00 0e 00 00 00 47 c3 06 00 08 00 00 00 | >...........j...........G....... |
65a0 | 56 c3 06 00 2b 00 00 00 5f c3 06 00 29 00 00 00 8b c3 06 00 35 00 00 00 b5 c3 06 00 54 00 00 00 | V...+..._...).......5.......T... |
65c0 | eb c3 06 00 5c 00 00 00 40 c4 06 00 7b 00 00 00 9d c4 06 00 56 00 00 00 19 c5 06 00 25 00 00 00 | ....\...@...{.......V.......%... |
65e0 | 70 c5 06 00 3a 00 00 00 96 c5 06 00 3a 00 00 00 d1 c5 06 00 0d 00 00 00 0c c6 06 00 64 00 00 00 | p...:.......:...............d... |
6600 | 1a c6 06 00 64 00 00 00 7f c6 06 00 67 00 00 00 e4 c6 06 00 67 00 00 00 4c c7 06 00 1f 00 00 00 | ....d.......g.......g...L....... |
6620 | b4 c7 06 00 0c 00 00 00 d4 c7 06 00 16 00 00 00 e1 c7 06 00 44 01 00 00 f8 c7 06 00 41 00 00 00 | ....................D.......A... |
6640 | 3d c9 06 00 47 00 00 00 7f c9 06 00 d3 00 00 00 c7 c9 06 00 3a 02 00 00 9b ca 06 00 d7 00 00 00 | =...G...............:........... |
6660 | d6 cc 06 00 93 00 00 00 ae cd 06 00 4e 01 00 00 42 ce 06 00 30 00 00 00 91 cf 06 00 c8 00 00 00 | ............N...B...0........... |
6680 | c2 cf 06 00 ab 00 00 00 8b d0 06 00 31 00 00 00 37 d1 06 00 68 01 00 00 69 d1 06 00 39 00 00 00 | ............1...7...h...i...9... |
66a0 | d2 d2 06 00 3b 01 00 00 0c d3 06 00 b2 00 00 00 48 d4 06 00 27 00 00 00 fb d4 06 00 44 00 00 00 | ....;...........H...'.......D... |
66c0 | 23 d5 06 00 d2 00 00 00 68 d5 06 00 73 00 00 00 3b d6 06 00 d7 00 00 00 af d6 06 00 9f 00 00 00 | #.......h...s...;............... |
66e0 | 87 d7 06 00 af 00 00 00 27 d8 06 00 cc 00 00 00 d7 d8 06 00 4f 00 00 00 a4 d9 06 00 3f 01 00 00 | ........'...........O.......?... |
6700 | f4 d9 06 00 c1 00 00 00 34 db 06 00 59 00 00 00 f6 db 06 00 21 01 00 00 50 dc 06 00 29 01 00 00 | ........4...Y.......!...P...)... |
6720 | 72 dd 06 00 6f 00 00 00 9c de 06 00 8f 00 00 00 0c df 06 00 8d 00 00 00 9c df 06 00 9e 00 00 00 | r...o........................... |
6740 | 2a e0 06 00 6c 00 00 00 c9 e0 06 00 3a 00 00 00 36 e1 06 00 95 00 00 00 71 e1 06 00 68 00 00 00 | *...l.......:...6.......q...h... |
6760 | 07 e2 06 00 58 00 00 00 70 e2 06 00 15 01 00 00 c9 e2 06 00 52 00 00 00 df e3 06 00 94 00 00 00 | ....X...p...........R........... |
6780 | 32 e4 06 00 9e 00 00 00 c7 e4 06 00 79 00 00 00 66 e5 06 00 50 00 00 00 e0 e5 06 00 9e 00 00 00 | 2...........y...f...P........... |
67a0 | 31 e6 06 00 13 00 00 00 d0 e6 06 00 3a 00 00 00 e4 e6 06 00 98 01 00 00 1f e7 06 00 2d 00 00 00 | 1...........:...............-... |
67c0 | b8 e8 06 00 39 00 00 00 e6 e8 06 00 e0 00 00 00 20 e9 06 00 26 00 00 00 01 ea 06 00 b5 00 00 00 | ....9...............&........... |
67e0 | 28 ea 06 00 70 01 00 00 de ea 06 00 1b 00 00 00 4f ec 06 00 bb 00 00 00 6b ec 06 00 bb 00 00 00 | (...p...........O.......k....... |
6800 | 27 ed 06 00 fd 00 00 00 e3 ed 06 00 85 00 00 00 e1 ee 06 00 b5 00 00 00 67 ef 06 00 5b 00 00 00 | '.......................g...[... |
6820 | 1d f0 06 00 83 00 00 00 79 f0 06 00 4b 00 00 00 fd f0 06 00 59 01 00 00 49 f1 06 00 27 00 00 00 | ........y...K.......Y...I...'... |
6840 | a3 f2 06 00 f8 00 00 00 cb f2 06 00 28 02 00 00 c4 f3 06 00 ff 00 00 00 ed f5 06 00 61 00 00 00 | ............(...............a... |
6860 | ed f6 06 00 5a 00 00 00 4f f7 06 00 5c 00 00 00 aa f7 06 00 a9 00 00 00 07 f8 06 00 b6 00 00 00 | ....Z...O...\................... |
6880 | b1 f8 06 00 5e 00 00 00 68 f9 06 00 d3 00 00 00 c7 f9 06 00 24 00 00 00 9b fa 06 00 14 00 00 00 | ....^...h...........$........... |
68a0 | c0 fa 06 00 1a 00 00 00 d5 fa 06 00 bc 00 00 00 f0 fa 06 00 68 00 00 00 ad fb 06 00 1f 00 00 00 | ....................h........... |
68c0 | 16 fc 06 00 24 00 00 00 36 fc 06 00 bd 00 00 00 5b fc 06 00 1f 00 00 00 19 fd 06 00 17 00 00 00 | ....$...6.......[............... |
68e0 | 39 fd 06 00 21 00 00 00 51 fd 06 00 21 00 00 00 73 fd 06 00 22 00 00 00 95 fd 06 00 40 00 00 00 | 9...!...Q...!...s...".......@... |
6900 | b8 fd 06 00 1a 00 00 00 f9 fd 06 00 45 00 00 00 14 fe 06 00 17 01 00 00 5a fe 06 00 54 00 00 00 | ............E...........Z...T... |
6920 | 72 ff 06 00 c0 01 00 00 c7 ff 06 00 d2 01 00 00 88 01 07 00 a2 00 00 00 5b 03 07 00 d1 00 00 00 | r.......................[....... |
6940 | fe 03 07 00 e4 00 00 00 d0 04 07 00 bf 00 00 00 b5 05 07 00 dc 00 00 00 75 06 07 00 4e 01 00 00 | ........................u...N... |
6960 | 52 07 07 00 45 00 00 00 a1 08 07 00 34 00 00 00 e7 08 07 00 b4 00 00 00 1c 09 07 00 f9 00 00 00 | R...E.......4................... |
6980 | d1 09 07 00 c5 00 00 00 cb 0a 07 00 27 00 00 00 91 0b 07 00 b7 00 00 00 b9 0b 07 00 ae 00 00 00 | ............'................... |
69a0 | 71 0c 07 00 52 00 00 00 20 0d 07 00 ab 00 00 00 73 0d 07 00 c8 00 00 00 1f 0e 07 00 5b 00 00 00 | q...R...........s...........[... |
69c0 | e8 0e 07 00 6d 00 00 00 44 0f 07 00 ab 00 00 00 b2 0f 07 00 30 00 00 00 5e 10 07 00 68 00 00 00 | ....m...D...........0...^...h... |
69e0 | 8f 10 07 00 53 00 00 00 f8 10 07 00 33 00 00 00 4c 11 07 00 2d 00 00 00 80 11 07 00 4e 00 00 00 | ....S.......3...L...-.......N... |
6a00 | ae 11 07 00 70 00 00 00 fd 11 07 00 6c 00 00 00 6e 12 07 00 c5 00 00 00 db 12 07 00 b7 00 00 00 | ....p.......l...n............... |
6a20 | a1 13 07 00 38 00 00 00 59 14 07 00 dd 00 00 00 92 14 07 00 1e 01 00 00 70 15 07 00 5f 01 00 00 | ....8...Y...............p..._... |
6a40 | 8f 16 07 00 dc 00 00 00 ef 17 07 00 c8 00 00 00 cc 18 07 00 36 00 00 00 95 19 07 00 6e 00 00 00 | ....................6.......n... |
6a60 | cc 19 07 00 91 00 00 00 3b 1a 07 00 60 00 00 00 cd 1a 07 00 b0 00 00 00 2e 1b 07 00 6e 00 00 00 | ........;...`...............n... |
6a80 | df 1b 07 00 6b 00 00 00 4e 1c 07 00 35 00 00 00 ba 1c 07 00 33 00 00 00 f0 1c 07 00 f1 00 00 00 | ....k...N...5.......3........... |
6aa0 | 24 1d 07 00 2b 00 00 00 16 1e 07 00 38 00 00 00 42 1e 07 00 3a 01 00 00 7b 1e 07 00 4b 00 00 00 | $...+.......8...B...:...{...K... |
6ac0 | b6 1f 07 00 53 01 00 00 02 20 07 00 92 01 00 00 56 21 07 00 a1 00 00 00 e9 22 07 00 28 00 00 00 | ....S...........V!......."..(... |
6ae0 | 8b 23 07 00 35 01 00 00 b4 23 07 00 9a 00 00 00 ea 24 07 00 10 01 00 00 85 25 07 00 2b 00 00 00 | .#..5....#.......$.......%..+... |
6b00 | 96 26 07 00 a6 00 00 00 c2 26 07 00 2e 00 00 00 69 27 07 00 3f 00 00 00 98 27 07 00 ec 00 00 00 | .&.......&......i'..?....'...... |
6b20 | d8 27 07 00 ee 00 00 00 c5 28 07 00 7c 00 00 00 b4 29 07 00 9a 01 00 00 31 2a 07 00 42 00 00 00 | .'.......(..|....)......1*..B... |
6b40 | cc 2b 07 00 82 00 00 00 0f 2c 07 00 9b 00 00 00 92 2c 07 00 31 00 00 00 2e 2d 07 00 b4 00 00 00 | .+.......,.......,..1....-...... |
6b60 | 60 2d 07 00 63 00 00 00 15 2e 07 00 33 00 00 00 79 2e 07 00 3a 00 00 00 ad 2e 07 00 5e 00 00 00 | `-..c.......3...y...:.......^... |
6b80 | e8 2e 07 00 25 01 00 00 47 2f 07 00 42 00 00 00 6d 30 07 00 5c 00 00 00 b0 30 07 00 56 00 00 00 | ....%...G/..B...m0..\....0..V... |
6ba0 | 0d 31 07 00 fe 00 00 00 64 31 07 00 79 00 00 00 63 32 07 00 55 00 00 00 dd 32 07 00 58 00 00 00 | .1......d1..y...c2..U....2..X... |
6bc0 | 33 33 07 00 cd 01 00 00 8c 33 07 00 3d 00 00 00 5a 35 07 00 e8 01 00 00 98 35 07 00 40 00 00 00 | 33.......3..=...Z5.......5..@... |
6be0 | 81 37 07 00 7f 00 00 00 c2 37 07 00 6c 00 00 00 42 38 07 00 6e 00 00 00 af 38 07 00 e8 00 00 00 | .7.......7..l...B8..n....8...... |
6c00 | 1e 39 07 00 a5 00 00 00 07 3a 07 00 6b 00 00 00 ad 3a 07 00 69 01 00 00 19 3b 07 00 34 00 00 00 | .9.......:..k....:..i....;..4... |
6c20 | 83 3c 07 00 79 00 00 00 b8 3c 07 00 3d 00 00 00 32 3d 07 00 54 00 00 00 70 3d 07 00 4c 00 00 00 | .<..y....<..=...2=..T...p=..L... |
6c40 | c5 3d 07 00 bc 00 00 00 12 3e 07 00 ea 00 00 00 cf 3e 07 00 6d 00 00 00 ba 3f 07 00 e6 00 00 00 | .=.......>.......>..m....?...... |
6c60 | 28 40 07 00 36 00 00 00 0f 41 07 00 5b 00 00 00 46 41 07 00 6a 00 00 00 a2 41 07 00 82 00 00 00 | (@..6....A..[...FA..j....A...... |
6c80 | 0d 42 07 00 73 00 00 00 90 42 07 00 49 00 00 00 04 43 07 00 29 00 00 00 4e 43 07 00 2a 01 00 00 | .B..s....B..I....C..)...NC..*... |
6ca0 | 78 43 07 00 47 00 00 00 a3 44 07 00 46 00 00 00 eb 44 07 00 49 00 00 00 32 45 07 00 49 00 00 00 | xC..G....D..F....D..I...2E..I... |
6cc0 | 7c 45 07 00 22 00 00 00 c6 45 07 00 54 00 00 00 e9 45 07 00 65 00 00 00 3e 46 07 00 32 00 00 00 | |E.."....E..T....E..e...>F..2... |
6ce0 | a4 46 07 00 9d 00 00 00 d7 46 07 00 77 00 00 00 75 47 07 00 2c 00 00 00 ed 47 07 00 42 00 00 00 | .F.......F..w...uG..,....G..B... |
6d00 | 1a 48 07 00 2b 00 00 00 5d 48 07 00 86 01 00 00 89 48 07 00 c4 00 00 00 10 4a 07 00 c6 00 00 00 | .H..+...]H.......H.......J...... |
6d20 | d5 4a 07 00 80 00 00 00 9c 4b 07 00 49 01 00 00 1d 4c 07 00 90 00 00 00 67 4d 07 00 38 00 00 00 | .J.......K..I....L......gM..8... |
6d40 | f8 4d 07 00 9f 00 00 00 31 4e 07 00 1c 01 00 00 d1 4e 07 00 d5 00 00 00 ee 4f 07 00 38 00 00 00 | .M......1N.......N.......O..8... |
6d60 | c4 50 07 00 28 00 00 00 fd 50 07 00 5c 00 00 00 26 51 07 00 29 00 00 00 83 51 07 00 71 00 00 00 | .P..(....P..\...&Q..)....Q..q... |
6d80 | ad 51 07 00 41 00 00 00 1f 52 07 00 0f 01 00 00 61 52 07 00 fc 00 00 00 71 53 07 00 89 00 00 00 | .Q..A....R......aR......qS...... |
6da0 | 6e 54 07 00 25 00 00 00 f8 54 07 00 5f 00 00 00 1e 55 07 00 ec 00 00 00 7e 55 07 00 4e 00 00 00 | nT..%....T.._....U......~U..N... |
6dc0 | 6b 56 07 00 84 00 00 00 ba 56 07 00 55 00 00 00 3f 57 07 00 12 01 00 00 95 57 07 00 75 00 00 00 | kV.......V..U...?W.......W..u... |
6de0 | a8 58 07 00 65 00 00 00 1e 59 07 00 e2 00 00 00 84 59 07 00 2f 00 00 00 67 5a 07 00 29 00 00 00 | .X..e....Y.......Y../...gZ..)... |
6e00 | 97 5a 07 00 a0 01 00 00 c1 5a 07 00 ff 00 00 00 62 5c 07 00 db 00 00 00 62 5d 07 00 36 00 00 00 | .Z.......Z......b\......b]..6... |
6e20 | 3e 5e 07 00 40 00 00 00 75 5e 07 00 1f 00 00 00 b6 5e 07 00 40 00 00 00 d6 5e 07 00 4d 00 00 00 | >^..@...u^.......^..@....^..M... |
6e40 | 17 5f 07 00 4c 00 00 00 65 5f 07 00 92 00 00 00 b2 5f 07 00 43 00 00 00 45 60 07 00 af 00 00 00 | ._..L...e_......._..C...E`...... |
6e60 | 89 60 07 00 65 00 00 00 39 61 07 00 a8 00 00 00 9f 61 07 00 38 00 00 00 48 62 07 00 3e 01 00 00 | .`..e...9a.......a..8...Hb..>... |
6e80 | 81 62 07 00 3c 00 00 00 c0 63 07 00 90 00 00 00 fd 63 07 00 58 00 00 00 8e 64 07 00 95 00 00 00 | .b..<....c.......c..X....d...... |
6ea0 | e7 64 07 00 50 00 00 00 7d 65 07 00 64 00 00 00 ce 65 07 00 50 00 00 00 33 66 07 00 6d 00 00 00 | .d..P...}e..d....e..P...3f..m... |
6ec0 | 84 66 07 00 3a 00 00 00 f2 66 07 00 29 00 00 00 2d 67 07 00 6d 00 00 00 57 67 07 00 c0 00 00 00 | .f..:....f..)...-g..m...Wg...... |
6ee0 | c5 67 07 00 b8 01 00 00 86 68 07 00 51 00 00 00 3f 6a 07 00 21 00 00 00 91 6a 07 00 25 00 00 00 | .g.......h..Q...?j..!....j..%... |
6f00 | b3 6a 07 00 71 00 00 00 d9 6a 07 00 24 00 00 00 4b 6b 07 00 bc 01 00 00 70 6b 07 00 55 00 00 00 | .j..q....j..$...Kk......pk..U... |
6f20 | 2d 6d 07 00 a9 00 00 00 83 6d 07 00 4c 00 00 00 2d 6e 07 00 ee 00 00 00 7a 6e 07 00 43 00 00 00 | -m.......m..L...-n......zn..C... |
6f40 | 69 6f 07 00 39 00 00 00 ad 6f 07 00 a9 00 00 00 e7 6f 07 00 50 00 00 00 91 70 07 00 53 01 00 00 | io..9....o.......o..P....p..S... |
6f60 | e2 70 07 00 46 00 00 00 36 72 07 00 44 00 00 00 7d 72 07 00 43 00 00 00 c2 72 07 00 de 00 00 00 | .p..F...6r..D...}r..C....r...... |
6f80 | 06 73 07 00 83 00 00 00 e5 73 07 00 83 00 00 00 69 74 07 00 39 01 00 00 ed 74 07 00 a0 00 00 00 | .s.......s......it..9....t...... |
6fa0 | 27 76 07 00 d1 00 00 00 c8 76 07 00 61 00 00 00 9a 77 07 00 b4 00 00 00 fc 77 07 00 b7 00 00 00 | 'v.......v..a....w.......w...... |
6fc0 | b1 78 07 00 b6 00 00 00 69 79 07 00 bb 00 00 00 20 7a 07 00 a1 00 00 00 dc 7a 07 00 5c 00 00 00 | .x......iy.......z.......z..\... |
6fe0 | 7e 7b 07 00 58 00 00 00 db 7b 07 00 5c 00 00 00 34 7c 07 00 58 00 00 00 91 7c 07 00 71 00 00 00 | ~{..X....{..\...4|..X....|..q... |
7000 | ea 7c 07 00 5e 00 00 00 5c 7d 07 00 21 01 00 00 bb 7d 07 00 13 01 00 00 dd 7e 07 00 12 01 00 00 | .|..^...\}..!....}.......~...... |
7020 | f1 7f 07 00 09 01 00 00 04 81 07 00 40 00 00 00 0e 82 07 00 a3 00 00 00 4f 82 07 00 a3 00 00 00 | ............@...........O....... |
7040 | f3 82 07 00 9f 00 00 00 97 83 07 00 9f 00 00 00 37 84 07 00 bb 00 00 00 d7 84 07 00 b4 00 00 00 | ................7............... |
7060 | 93 85 07 00 54 00 00 00 48 86 07 00 bc 00 00 00 9d 86 07 00 56 00 00 00 5a 87 07 00 be 00 00 00 | ....T...H...........V...Z....... |
7080 | b1 87 07 00 4e 00 00 00 70 88 07 00 cf 01 00 00 bf 88 07 00 29 01 00 00 8f 8a 07 00 46 00 00 00 | ....N...p...........).......F... |
70a0 | b9 8b 07 00 7e 00 00 00 00 8c 07 00 3c 00 00 00 7f 8c 07 00 db 00 00 00 bc 8c 07 00 42 00 00 00 | ....~.......<...............B... |
70c0 | 98 8d 07 00 4e 00 00 00 db 8d 07 00 4e 00 00 00 2a 8e 07 00 49 00 00 00 79 8e 07 00 49 00 00 00 | ....N.......N...*...I...y...I... |
70e0 | c3 8e 07 00 43 00 00 00 0d 8f 07 00 4b 00 00 00 51 8f 07 00 64 00 00 00 9d 8f 07 00 46 00 00 00 | ....C.......K...Q...d.......F... |
7100 | 02 90 07 00 84 00 00 00 49 90 07 00 7c 00 00 00 ce 90 07 00 86 00 00 00 4b 91 07 00 2f 00 00 00 | ........I...|...........K.../... |
7120 | d2 91 07 00 79 00 00 00 02 92 07 00 76 00 00 00 7c 92 07 00 81 00 00 00 f3 92 07 00 46 01 00 00 | ....y.......v...|...........F... |
7140 | 75 93 07 00 71 00 00 00 bc 94 07 00 66 00 00 00 2e 95 07 00 3f 00 00 00 95 95 07 00 88 00 00 00 | u...q.......f.......?........... |
7160 | d5 95 07 00 da 00 00 00 5e 96 07 00 19 00 00 00 39 97 07 00 90 01 00 00 53 97 07 00 a5 00 00 00 | ........^.......9.......S....... |
7180 | e4 98 07 00 43 00 00 00 8a 99 07 00 2a 00 00 00 ce 99 07 00 4c 00 00 00 f9 99 07 00 3a 00 00 00 | ....C.......*.......L.......:... |
71a0 | 46 9a 07 00 4e 00 00 00 81 9a 07 00 b0 00 00 00 d0 9a 07 00 2a 00 00 00 81 9b 07 00 21 00 00 00 | F...N...............*.......!... |
71c0 | ac 9b 07 00 51 00 00 00 ce 9b 07 00 45 00 00 00 20 9c 07 00 5f 00 00 00 66 9c 07 00 37 00 00 00 | ....Q.......E......._...f...7... |
71e0 | c6 9c 07 00 41 00 00 00 fe 9c 07 00 44 00 00 00 40 9d 07 00 6a 00 00 00 85 9d 07 00 3c 00 00 00 | ....A.......D...@...j.......<... |
7200 | f0 9d 07 00 56 00 00 00 2d 9e 07 00 4a 00 00 00 84 9e 07 00 ee 00 00 00 cf 9e 07 00 47 00 00 00 | ....V...-...J...............G... |
7220 | be 9f 07 00 7a 00 00 00 06 a0 07 00 d2 00 00 00 81 a0 07 00 5f 00 00 00 54 a1 07 00 d5 00 00 00 | ....z..............._...T....... |
7240 | b4 a1 07 00 39 00 00 00 8a a2 07 00 70 00 00 00 c4 a2 07 00 5d 00 00 00 35 a3 07 00 55 00 00 00 | ....9.......p.......]...5...U... |
7260 | 93 a3 07 00 2b 00 00 00 e9 a3 07 00 38 00 00 00 15 a4 07 00 46 00 00 00 4e a4 07 00 4c 00 00 00 | ....+.......8.......F...N...L... |
7280 | 95 a4 07 00 62 00 00 00 e2 a4 07 00 55 01 00 00 45 a5 07 00 c0 00 00 00 9b a6 07 00 b6 00 00 00 | ....b.......U...E............... |
72a0 | 5c a7 07 00 8d 00 00 00 13 a8 07 00 d5 00 00 00 a1 a8 07 00 7e 00 00 00 77 a9 07 00 a4 00 00 00 | \...................~...w....... |
72c0 | f6 a9 07 00 a6 00 00 00 9b aa 07 00 c7 01 00 00 42 ab 07 00 32 01 00 00 0a ad 07 00 a8 00 00 00 | ................B...2........... |
72e0 | 3d ae 07 00 79 00 00 00 e6 ae 07 00 33 00 00 00 60 af 07 00 90 00 00 00 94 af 07 00 b0 00 00 00 | =...y.......3...`............... |
7300 | 25 b0 07 00 63 00 00 00 d6 b0 07 00 b3 00 00 00 3a b1 07 00 d6 00 00 00 ee b1 07 00 2c 00 00 00 | %...c...........:...........,... |
7320 | c5 b2 07 00 52 00 00 00 f2 b2 07 00 6e 00 00 00 45 b3 07 00 4d 01 00 00 b4 b3 07 00 3b 00 00 00 | ....R.......n...E...M.......;... |
7340 | 02 b5 07 00 ad 00 00 00 3e b5 07 00 7b 02 00 00 ec b5 07 00 54 01 00 00 68 b8 07 00 53 00 00 00 | ........>...{.......T...h...S... |
7360 | bd b9 07 00 4b 00 00 00 11 ba 07 00 04 01 00 00 5d ba 07 00 eb 00 00 00 62 bb 07 00 c8 00 00 00 | ....K...........].......b....... |
7380 | 4e bc 07 00 c8 00 00 00 17 bd 07 00 b6 00 00 00 e0 bd 07 00 bb 00 00 00 97 be 07 00 60 00 00 00 | N...........................`... |
73a0 | 53 bf 07 00 b5 00 00 00 b4 bf 07 00 b9 00 00 00 6a c0 07 00 9b 00 00 00 24 c1 07 00 0a 01 00 00 | S...............j.......$....... |
73c0 | c0 c1 07 00 01 01 00 00 cb c2 07 00 38 00 00 00 cd c3 07 00 3b 00 00 00 06 c4 07 00 45 00 00 00 | ............8.......;.......E... |
73e0 | 42 c4 07 00 2c 00 00 00 88 c4 07 00 70 00 00 00 b5 c4 07 00 4e 00 00 00 26 c5 07 00 7c 01 00 00 | B...,.......p.......N...&...|... |
7400 | 75 c5 07 00 71 01 00 00 f2 c6 07 00 90 00 00 00 64 c8 07 00 4b 00 00 00 f5 c8 07 00 11 01 00 00 | u...q...........d...K........... |
7420 | 41 c9 07 00 7b 00 00 00 53 ca 07 00 58 00 00 00 cf ca 07 00 a9 00 00 00 28 cb 07 00 72 00 00 00 | A...{...S...X...........(...r... |
7440 | d2 cb 07 00 6c 00 00 00 45 cc 07 00 60 00 00 00 b2 cc 07 00 17 01 00 00 13 cd 07 00 ff 00 00 00 | ....l...E...`................... |
7460 | 2b ce 07 00 44 00 00 00 2b cf 07 00 87 00 00 00 70 cf 07 00 70 00 00 00 f8 cf 07 00 87 00 00 00 | +...D...+.......p...p........... |
7480 | 69 d0 07 00 65 00 00 00 f1 d0 07 00 6e 00 00 00 57 d1 07 00 64 00 00 00 c6 d1 07 00 59 02 00 00 | i...e.......n...W...d.......Y... |
74a0 | 2b d2 07 00 88 00 00 00 85 d4 07 00 25 00 00 00 0e d5 07 00 88 00 00 00 34 d5 07 00 a5 00 00 00 | +...........%...........4....... |
74c0 | bd d5 07 00 57 01 00 00 63 d6 07 00 32 01 00 00 bb d7 07 00 49 01 00 00 ee d8 07 00 51 01 00 00 | ....W...c...2.......I.......Q... |
74e0 | 38 da 07 00 fb 00 00 00 8a db 07 00 28 00 00 00 86 dc 07 00 95 00 00 00 af dc 07 00 af 00 00 00 | 8...........(................... |
7500 | 45 dd 07 00 af 00 00 00 f5 dd 07 00 76 00 00 00 a5 de 07 00 a6 00 00 00 1c df 07 00 84 01 00 00 | E...........v................... |
7520 | c3 df 07 00 6a 00 00 00 48 e1 07 00 b9 00 00 00 b3 e1 07 00 0f 01 00 00 6d e2 07 00 36 00 00 00 | ....j...H...............m...6... |
7540 | 7d e3 07 00 a5 00 00 00 b4 e3 07 00 a7 00 00 00 5a e4 07 00 7b 00 00 00 02 e5 07 00 67 00 00 00 | }...............Z...{.......g... |
7560 | 7e e5 07 00 32 00 00 00 e6 e5 07 00 fe 00 00 00 19 e6 07 00 9d 00 00 00 18 e7 07 00 bb 00 00 00 | ~...2........................... |
7580 | b6 e7 07 00 77 00 00 00 72 e8 07 00 bf 00 00 00 ea e8 07 00 c7 00 00 00 aa e9 07 00 cc 00 00 00 | ....w...r....................... |
75a0 | 72 ea 07 00 d1 00 00 00 3f eb 07 00 2d 04 00 00 11 ec 07 00 5d 00 00 00 3f f0 07 00 e3 00 00 00 | r.......?...-.......]...?....... |
75c0 | 9d f0 07 00 cf 00 00 00 81 f1 07 00 07 01 00 00 51 f2 07 00 10 01 00 00 59 f3 07 00 9c 00 00 00 | ................Q.......Y....... |
75e0 | 6a f4 07 00 8a 00 00 00 07 f5 07 00 97 00 00 00 92 f5 07 00 40 00 00 00 2a f6 07 00 f0 00 00 00 | j...................@...*....... |
7600 | 6b f6 07 00 0b 01 00 00 5c f7 07 00 37 01 00 00 68 f8 07 00 75 01 00 00 a0 f9 07 00 97 01 00 00 | k.......\...7...h...u........... |
7620 | 16 fb 07 00 f0 00 00 00 ae fc 07 00 01 01 00 00 9f fd 07 00 aa 00 00 00 a1 fe 07 00 69 00 00 00 | ............................i... |
7640 | 4c ff 07 00 6b 00 00 00 b6 ff 07 00 df 00 00 00 22 00 08 00 44 00 00 00 02 01 08 00 ec 00 00 00 | L...k..........."...D........... |
7660 | 47 01 08 00 86 00 00 00 34 02 08 00 d5 00 00 00 bb 02 08 00 b9 00 00 00 91 03 08 00 a6 00 00 00 | G.......4....................... |
7680 | 4b 04 08 00 c8 00 00 00 f2 04 08 00 71 00 00 00 bb 05 08 00 2c 01 00 00 2d 06 08 00 84 00 00 00 | K...........q.......,...-....... |
76a0 | 5a 07 08 00 00 01 00 00 df 07 08 00 e5 00 00 00 e0 08 08 00 2d 01 00 00 c6 09 08 00 12 01 00 00 | Z...................-........... |
76c0 | f4 0a 08 00 f2 00 00 00 07 0c 08 00 a4 00 00 00 fa 0c 08 00 90 01 00 00 9f 0d 08 00 a2 00 00 00 | ................................ |
76e0 | 30 0f 08 00 b3 01 00 00 d3 0f 08 00 53 00 00 00 87 11 08 00 5f 00 00 00 db 11 08 00 80 00 00 00 | 0...........S......._........... |
7700 | 3b 12 08 00 81 00 00 00 bc 12 08 00 8f 00 00 00 3e 13 08 00 7b 00 00 00 ce 13 08 00 7a 00 00 00 | ;...............>...{.......z... |
7720 | 4a 14 08 00 f3 00 00 00 c5 14 08 00 f2 00 00 00 b9 15 08 00 3a 00 00 00 ac 16 08 00 3a 00 00 00 | J...................:.......:... |
7740 | e7 16 08 00 41 00 00 00 22 17 08 00 67 00 00 00 64 17 08 00 42 00 00 00 cc 17 08 00 38 00 00 00 | ....A..."...g...d...B.......8... |
7760 | 0f 18 08 00 53 00 00 00 48 18 08 00 5c 00 00 00 9c 18 08 00 e1 01 00 00 f9 18 08 00 bb 00 00 00 | ....S...H...\................... |
7780 | db 1a 08 00 e7 00 00 00 97 1b 08 00 4d 00 00 00 7f 1c 08 00 96 00 00 00 cd 1c 08 00 80 00 00 00 | ............M................... |
77a0 | 64 1d 08 00 e5 00 00 00 e5 1d 08 00 da 00 00 00 cb 1e 08 00 a4 00 00 00 a6 1f 08 00 66 00 00 00 | d...........................f... |
77c0 | 4b 20 08 00 ad 00 00 00 b2 20 08 00 17 00 00 00 60 21 08 00 16 00 00 00 78 21 08 00 16 00 00 00 | K...............`!......x!...... |
77e0 | 8f 21 08 00 1c 00 00 00 a6 21 08 00 1d 00 00 00 c3 21 08 00 14 00 00 00 e1 21 08 00 13 00 00 00 | .!.......!.......!.......!...... |
7800 | f6 21 08 00 14 00 00 00 0a 22 08 00 22 00 00 00 1f 22 08 00 3f 00 00 00 42 22 08 00 16 00 00 00 | .!.......".."...."..?...B"...... |
7820 | 82 22 08 00 52 00 00 00 99 22 08 00 89 00 00 00 ec 22 08 00 4b 00 00 00 76 23 08 00 0d 01 00 00 | ."..R...."......."..K...v#...... |
7840 | c2 23 08 00 41 00 00 00 d0 24 08 00 6d 00 00 00 12 25 08 00 6a 00 00 00 80 25 08 00 32 00 00 00 | .#..A....$..m....%..j....%..2... |
7860 | eb 25 08 00 61 00 00 00 1e 26 08 00 8d 00 00 00 80 26 08 00 8e 00 00 00 0e 27 08 00 47 00 00 00 | .%..a....&.......&.......'..G... |
7880 | 9d 27 08 00 40 00 00 00 e5 27 08 00 6c 00 00 00 26 28 08 00 4c 00 00 00 93 28 08 00 3f 00 00 00 | .'..@....'..l...&(..L....(..?... |
78a0 | e0 28 08 00 00 01 00 00 20 29 08 00 1c 01 00 00 21 2a 08 00 a2 00 00 00 3e 2b 08 00 97 00 00 00 | .(.......)......!*......>+...... |
78c0 | e1 2b 08 00 59 00 00 00 79 2c 08 00 62 00 00 00 d3 2c 08 00 1a 00 00 00 36 2d 08 00 1c 00 00 00 | .+..Y...y,..b....,......6-...... |
78e0 | 51 2d 08 00 bb 00 00 00 6e 2d 08 00 32 00 00 00 2a 2e 08 00 73 00 00 00 5d 2e 08 00 61 00 00 00 | Q-......n-..2...*...s...]...a... |
7900 | d1 2e 08 00 76 00 00 00 33 2f 08 00 47 00 00 00 aa 2f 08 00 43 01 00 00 f2 2f 08 00 7d 00 00 00 | ....v...3/..G..../..C..../..}... |
7920 | 36 31 08 00 e5 00 00 00 b4 31 08 00 11 00 00 00 9a 32 08 00 63 00 00 00 ac 32 08 00 c6 00 00 00 | 61.......1.......2..c....2...... |
7940 | 10 33 08 00 8e 00 00 00 d7 33 08 00 2a 00 00 00 66 34 08 00 98 00 00 00 91 34 08 00 bd 00 00 00 | .3.......3..*...f4.......4...... |
7960 | 2a 35 08 00 44 00 00 00 e8 35 08 00 a0 00 00 00 2d 36 08 00 ca 00 00 00 ce 36 08 00 41 00 00 00 | *5..D....5......-6.......6..A... |
7980 | 99 37 08 00 76 00 00 00 db 37 08 00 c7 00 00 00 52 38 08 00 58 00 00 00 1a 39 08 00 23 00 00 00 | .7..v....7......R8..X....9..#... |
79a0 | 73 39 08 00 76 00 00 00 97 39 08 00 36 00 00 00 0e 3a 08 00 97 00 00 00 45 3a 08 00 2c 00 00 00 | s9..v....9..6....:......E:..,... |
79c0 | dd 3a 08 00 2b 00 00 00 0a 3b 08 00 2e 00 00 00 36 3b 08 00 33 00 00 00 65 3b 08 00 fc 00 00 00 | .:..+....;......6;..3...e;...... |
79e0 | 99 3b 08 00 e9 00 00 00 96 3c 08 00 31 00 00 00 80 3d 08 00 26 00 00 00 b2 3d 08 00 60 00 00 00 | .;.......<..1....=..&....=..`... |
7a00 | d9 3d 08 00 1d 00 00 00 3a 3e 08 00 89 00 00 00 58 3e 08 00 be 00 00 00 e2 3e 08 00 60 01 00 00 | .=......:>......X>.......>..`... |
7a20 | a1 3f 08 00 80 00 00 00 02 41 08 00 78 00 00 00 83 41 08 00 7b 00 00 00 fc 41 08 00 29 00 00 00 | .?.......A..x....A..{....A..)... |
7a40 | 78 42 08 00 e9 00 00 00 a2 42 08 00 3d 00 00 00 8c 43 08 00 6f 00 00 00 ca 43 08 00 3b 00 00 00 | xB.......B..=....C..o....C..;... |
7a60 | 3a 44 08 00 a5 00 00 00 76 44 08 00 2d 01 00 00 1c 45 08 00 2c 01 00 00 4a 46 08 00 dd 00 00 00 | :D......vD..-....E..,...JF...... |
7a80 | 77 47 08 00 64 00 00 00 55 48 08 00 40 00 00 00 ba 48 08 00 77 00 00 00 fb 48 08 00 76 00 00 00 | wG..d...UH..@....H..w....H..v... |
7aa0 | 73 49 08 00 6f 00 00 00 ea 49 08 00 d3 00 00 00 5a 4a 08 00 23 01 00 00 2e 4b 08 00 9d 01 00 00 | sI..o....I......ZJ..#....K...... |
7ac0 | 52 4c 08 00 48 00 00 00 f0 4d 08 00 2c 00 00 00 39 4e 08 00 bb 00 00 00 66 4e 08 00 23 00 00 00 | RL..H....M..,...9N......fN..#... |
7ae0 | 22 4f 08 00 3d 00 00 00 46 4f 08 00 42 00 00 00 84 4f 08 00 5b 00 00 00 c7 4f 08 00 6b 00 00 00 | "O..=...FO..B....O..[....O..k... |
7b00 | 23 50 08 00 30 00 00 00 8f 50 08 00 3d 00 00 00 c0 50 08 00 2c 00 00 00 fe 50 08 00 54 00 00 00 | #P..0....P..=....P..,....P..T... |
7b20 | 2b 51 08 00 38 00 00 00 80 51 08 00 3a 00 00 00 b9 51 08 00 3c 00 00 00 f4 51 08 00 44 00 00 00 | +Q..8....Q..:....Q..<....Q..D... |
7b40 | 31 52 08 00 34 00 00 00 76 52 08 00 32 01 00 00 ab 52 08 00 30 00 00 00 de 53 08 00 dd 00 00 00 | 1R..4...vR..2....R..0....S...... |
7b60 | 0f 54 08 00 09 00 00 00 ed 54 08 00 d6 00 00 00 f7 54 08 00 49 00 00 00 ce 55 08 00 47 00 00 00 | .T.......T.......T..I....U..G... |
7b80 | 18 56 08 00 44 00 00 00 60 56 08 00 4a 00 00 00 a5 56 08 00 26 00 00 00 f0 56 08 00 1f 00 00 00 | .V..D...`V..J....V..&....V...... |
7ba0 | 17 57 08 00 74 00 00 00 37 57 08 00 12 00 00 00 ac 57 08 00 30 00 00 00 bf 57 08 00 45 00 00 00 | .W..t...7W.......W..0....W..E... |
7bc0 | f0 57 08 00 2e 00 00 00 36 58 08 00 06 00 00 00 65 58 08 00 65 00 00 00 6c 58 08 00 4e 00 00 00 | .W......6X......eX..e...lX..N... |
7be0 | d2 58 08 00 b1 00 00 00 21 59 08 00 9b 00 00 00 d3 59 08 00 91 00 00 00 6f 5a 08 00 ae 00 00 00 | .X......!Y.......Y......oZ...... |
7c00 | 01 5b 08 00 22 00 00 00 b0 5b 08 00 aa 00 00 00 d3 5b 08 00 39 01 00 00 7e 5c 08 00 5c 00 00 00 | .[.."....[.......[..9...~\..\... |
7c20 | b8 5d 08 00 74 00 00 00 15 5e 08 00 58 00 00 00 8a 5e 08 00 6f 00 00 00 e3 5e 08 00 99 00 00 00 | .]..t....^..X....^..o....^...... |
7c40 | 53 5f 08 00 80 00 00 00 ed 5f 08 00 54 00 00 00 6e 60 08 00 4c 00 00 00 c3 60 08 00 51 00 00 00 | S_......._..T...n`..L....`..Q... |
7c60 | 10 61 08 00 d7 00 00 00 62 61 08 00 68 00 00 00 3a 62 08 00 62 00 00 00 a3 62 08 00 5e 00 00 00 | .a......ba..h...:b..b....b..^... |
7c80 | 06 63 08 00 3c 00 00 00 65 63 08 00 77 00 00 00 a2 63 08 00 40 00 00 00 1a 64 08 00 d7 00 00 00 | .c..<...ec..w....c..@....d...... |
7ca0 | 5b 64 08 00 b3 00 00 00 33 65 08 00 66 00 00 00 e7 65 08 00 37 00 00 00 4e 66 08 00 6a 00 00 00 | [d......3e..f....e..7...Nf..j... |
7cc0 | 86 66 08 00 42 00 00 00 f1 66 08 00 3d 00 00 00 34 67 08 00 38 00 00 00 72 67 08 00 3d 00 00 00 | .f..B....f..=...4g..8...rg..=... |
7ce0 | ab 67 08 00 40 00 00 00 e9 67 08 00 4a 01 00 00 2a 68 08 00 52 00 00 00 75 69 08 00 51 00 00 00 | .g..@....g..J...*h..R...ui..Q... |
7d00 | c8 69 08 00 d9 00 00 00 1a 6a 08 00 c9 00 00 00 f4 6a 08 00 4f 00 00 00 be 6b 08 00 67 00 00 00 | .i.......j.......j..O....k..g... |
7d20 | 0e 6c 08 00 8d 00 00 00 76 6c 08 00 49 00 00 00 04 6d 08 00 a0 01 00 00 4e 6d 08 00 87 00 00 00 | .l......vl..I....m......Nm...... |
7d40 | ef 6e 08 00 5f 00 00 00 77 6f 08 00 fa 00 00 00 d7 6f 08 00 54 00 00 00 d2 70 08 00 25 00 00 00 | .n.._...wo.......o..T....p..%... |
7d60 | 27 71 08 00 49 00 00 00 4d 71 08 00 92 00 00 00 97 71 08 00 54 00 00 00 2a 72 08 00 96 00 00 00 | 'q..I...Mq.......q..T...*r...... |
7d80 | 7f 72 08 00 2a 00 00 00 16 73 08 00 1c 00 00 00 41 73 08 00 1f 00 00 00 5e 73 08 00 32 00 00 00 | .r..*....s......As......^s..2... |
7da0 | 7e 73 08 00 12 01 00 00 b1 73 08 00 71 00 00 00 c4 74 08 00 5f 00 00 00 36 75 08 00 69 00 00 00 | ~s.......s..q....t.._...6u..i... |
7dc0 | 96 75 08 00 a5 00 00 00 00 76 08 00 45 00 00 00 a6 76 08 00 09 00 00 00 ec 76 08 00 2c 00 00 00 | .u.......v..E....v.......v..,... |
7de0 | f6 76 08 00 0e 00 00 00 23 77 08 00 05 00 00 00 32 77 08 00 83 00 00 00 38 77 08 00 44 02 00 00 | .v......#w......2w......8w..D... |
7e00 | bc 77 08 00 dc 00 00 00 01 7a 08 00 8a 01 00 00 de 7a 08 00 0f 00 00 00 69 7c 08 00 93 00 00 00 | .w.......z.......z......i|...... |
7e20 | 79 7c 08 00 0e 00 00 00 0d 7d 08 00 5e 00 00 00 1c 7d 08 00 a6 00 00 00 7b 7d 08 00 9e 00 00 00 | y|.......}..^....}......{}...... |
7e40 | 22 7e 08 00 97 00 00 00 c1 7e 08 00 19 00 00 00 59 7f 08 00 b8 00 00 00 73 7f 08 00 12 00 00 00 | "~.......~......Y.......s....... |
7e60 | 2c 80 08 00 60 01 00 00 3f 80 08 00 11 00 00 00 a0 81 08 00 0f 00 00 00 b2 81 08 00 0f 00 00 00 | ,...`...?....................... |
7e80 | c2 81 08 00 06 00 00 00 d2 81 08 00 0b 00 00 00 d9 81 08 00 35 00 00 00 e5 81 08 00 28 00 00 00 | ....................5.......(... |
7ea0 | 1b 82 08 00 44 00 00 00 44 82 08 00 60 00 00 00 89 82 08 00 3f 00 00 00 ea 82 08 00 5f 00 00 00 | ....D...D...`.......?......._... |
7ec0 | 2a 83 08 00 7c 00 00 00 8a 83 08 00 13 00 00 00 07 84 08 00 1f 00 00 00 1b 84 08 00 17 00 00 00 | *...|........................... |
7ee0 | 3b 84 08 00 15 00 00 00 53 84 08 00 12 00 00 00 69 84 08 00 29 00 00 00 7c 84 08 00 0d 00 00 00 | ;.......S.......i...)...|....... |
7f00 | a6 84 08 00 38 00 00 00 b4 84 08 00 af 00 00 00 ed 84 08 00 0e 00 00 00 9d 85 08 00 07 00 00 00 | ....8........................... |
7f20 | ac 85 08 00 0c 00 00 00 b4 85 08 00 0d 00 00 00 c1 85 08 00 1b 00 00 00 cf 85 08 00 05 00 00 00 | ................................ |
7f40 | eb 85 08 00 46 01 00 00 f1 85 08 00 9b 01 00 00 38 87 08 00 06 00 00 00 d4 88 08 00 16 00 00 00 | ....F...........8............... |
7f60 | db 88 08 00 15 00 00 00 f2 88 08 00 07 00 00 00 08 89 08 00 9c 00 00 00 10 89 08 00 2e 00 00 00 | ................................ |
7f80 | ad 89 08 00 49 00 00 00 dc 89 08 00 e2 00 00 00 26 8a 08 00 58 00 00 00 09 8b 08 00 14 00 00 00 | ....I...........&...X........... |
7fa0 | 62 8b 08 00 66 00 00 00 77 8b 08 00 25 00 00 00 de 8b 08 00 26 00 00 00 04 8c 08 00 20 00 00 00 | b...f...w...%.......&........... |
7fc0 | 2b 8c 08 00 13 00 00 00 4c 8c 08 00 39 00 00 00 60 8c 08 00 59 00 00 00 9a 8c 08 00 3e 00 00 00 | +.......L...9...`...Y.......>... |
7fe0 | f4 8c 08 00 00 01 00 00 33 8d 08 00 55 00 00 00 34 8e 08 00 54 00 00 00 8a 8e 08 00 51 00 00 00 | ........3...U...4...T.......Q... |
8000 | df 8e 08 00 55 00 00 00 31 8f 08 00 52 00 00 00 87 8f 08 00 1a 00 00 00 da 8f 08 00 44 00 00 00 | ....U...1...R...............D... |
8020 | f5 8f 08 00 36 00 00 00 3a 90 08 00 46 00 00 00 71 90 08 00 2c 00 00 00 b8 90 08 00 22 00 00 00 | ....6...:...F...q...,......."... |
8040 | e5 90 08 00 88 00 00 00 08 91 08 00 30 00 00 00 91 91 08 00 43 00 00 00 c2 91 08 00 18 00 00 00 | ............0.......C........... |
8060 | 06 92 08 00 28 00 00 00 1f 92 08 00 2f 00 00 00 48 92 08 00 68 00 00 00 78 92 08 00 8c 00 00 00 | ....(......./...H...h...x....... |
8080 | e1 92 08 00 9a 00 00 00 6e 93 08 00 8a 00 00 00 09 94 08 00 78 00 00 00 94 94 08 00 59 00 00 00 | ........n...........x.......Y... |
80a0 | 0d 95 08 00 19 01 00 00 67 95 08 00 24 01 00 00 81 96 08 00 22 01 00 00 a6 97 08 00 08 01 00 00 | ........g...$......."........... |
80c0 | c9 98 08 00 f8 00 00 00 d2 99 08 00 f7 00 00 00 cb 9a 08 00 f9 00 00 00 c3 9b 08 00 f7 00 00 00 | ................................ |
80e0 | bd 9c 08 00 f7 00 00 00 b5 9d 08 00 f7 00 00 00 ad 9e 08 00 c4 00 00 00 a5 9f 08 00 a1 00 00 00 | ................................ |
8100 | 6a a0 08 00 73 00 00 00 0c a1 08 00 f8 00 00 00 80 a1 08 00 4e 00 00 00 79 a2 08 00 99 00 00 00 | j...s...............N...y....... |
8120 | c8 a2 08 00 4b 00 00 00 62 a3 08 00 5b 00 00 00 ae a3 08 00 4a 00 00 00 0a a4 08 00 4a 00 00 00 | ....K...b...[.......J.......J... |
8140 | 55 a4 08 00 50 00 00 00 a0 a4 08 00 47 00 00 00 f1 a4 08 00 44 01 00 00 39 a5 08 00 45 01 00 00 | U...P.......G.......D...9...E... |
8160 | 7e a6 08 00 44 01 00 00 c4 a7 08 00 44 01 00 00 09 a9 08 00 44 01 00 00 4e aa 08 00 3c 01 00 00 | ~...D.......D.......D...N...<... |
8180 | 93 ab 08 00 a0 00 00 00 d0 ac 08 00 30 01 00 00 71 ad 08 00 50 01 00 00 a2 ae 08 00 d1 00 00 00 | ............0...q...P........... |
81a0 | f3 af 08 00 23 01 00 00 c5 b0 08 00 08 01 00 00 e9 b1 08 00 29 01 00 00 f2 b2 08 00 2f 01 00 00 | ....#...............)......./... |
81c0 | 1c b4 08 00 da 00 00 00 4c b5 08 00 34 01 00 00 27 b6 08 00 89 00 00 00 5c b7 08 00 66 00 00 00 | ........L...4...'.......\...f... |
81e0 | e6 b7 08 00 88 00 00 00 4d b8 08 00 a5 00 00 00 d6 b8 08 00 70 00 00 00 7c b9 08 00 6f 00 00 00 | ........M...........p...|...o... |
8200 | ed b9 08 00 8e 00 00 00 5d ba 08 00 b0 00 00 00 ec ba 08 00 0f 01 00 00 9d bb 08 00 c3 00 00 00 | ........]....................... |
8220 | ad bc 08 00 84 00 00 00 71 bd 08 00 be 00 00 00 f6 bd 08 00 db 00 00 00 b5 be 08 00 85 00 00 00 | ........q....................... |
8240 | 91 bf 08 00 7d 00 00 00 17 c0 08 00 9a 00 00 00 95 c0 08 00 92 00 00 00 30 c1 08 00 91 00 00 00 | ....}...................0....... |
8260 | c3 c1 08 00 d5 00 00 00 55 c2 08 00 93 00 00 00 2b c3 08 00 8e 00 00 00 bf c3 08 00 fa 00 00 00 | ........U.......+............... |
8280 | 4e c4 08 00 bd 00 00 00 49 c5 08 00 f5 00 00 00 07 c6 08 00 a6 00 00 00 fd c6 08 00 a1 00 00 00 | N.......I....................... |
82a0 | a4 c7 08 00 7b 00 00 00 46 c8 08 00 fc 00 00 00 c2 c8 08 00 fd 00 00 00 bf c9 08 00 19 01 00 00 | ....{...F....................... |
82c0 | bd ca 08 00 9d 00 00 00 d7 cb 08 00 be 01 00 00 75 cc 08 00 b1 00 00 00 34 ce 08 00 5b 00 00 00 | ................u.......4...[... |
82e0 | e6 ce 08 00 63 00 00 00 42 cf 08 00 33 01 00 00 a6 cf 08 00 3b 00 00 00 da d0 08 00 98 00 00 00 | ....c...B...3.......;........... |
8300 | 16 d1 08 00 54 00 00 00 af d1 08 00 59 00 00 00 04 d2 08 00 de 00 00 00 5e d2 08 00 9a 00 00 00 | ....T.......Y...........^....... |
8320 | 3d d3 08 00 2b 00 00 00 d8 d3 08 00 c0 00 00 00 04 d4 08 00 c5 00 00 00 c5 d4 08 00 3a 00 00 00 | =...+.......................:... |
8340 | 8b d5 08 00 35 00 00 00 c6 d5 08 00 87 00 00 00 fc d5 08 00 5c 00 00 00 84 d6 08 00 74 00 00 00 | ....5...............\.......t... |
8360 | e1 d6 08 00 da 00 00 00 56 d7 08 00 f0 00 00 00 31 d8 08 00 84 00 00 00 22 d9 08 00 f0 00 00 00 | ........V.......1......."....... |
8380 | a7 d9 08 00 f0 00 00 00 98 da 08 00 f0 00 00 00 89 db 08 00 f1 00 00 00 7a dc 08 00 5f 00 00 00 | ........................z..._... |
83a0 | 6c dd 08 00 83 00 00 00 cc dd 08 00 bd 00 00 00 50 de 08 00 79 00 00 00 0e df 08 00 7e 00 00 00 | l...............P...y.......~... |
83c0 | 88 df 08 00 36 00 00 00 07 e0 08 00 78 00 00 00 3e e0 08 00 85 00 00 00 b7 e0 08 00 51 00 00 00 | ....6.......x...>...........Q... |
83e0 | 3d e1 08 00 3e 00 00 00 8f e1 08 00 3e 00 00 00 ce e1 08 00 75 00 00 00 0d e2 08 00 53 00 00 00 | =...>.......>.......u.......S... |
8400 | 83 e2 08 00 df 00 00 00 d7 e2 08 00 a1 00 00 00 b7 e3 08 00 ac 00 00 00 59 e4 08 00 3b 00 00 00 | ........................Y...;... |
8420 | 06 e5 08 00 47 00 00 00 42 e5 08 00 67 00 00 00 8a e5 08 00 d8 00 00 00 f2 e5 08 00 5a 00 00 00 | ....G...B...g...............Z... |
8440 | cb e6 08 00 38 00 00 00 26 e7 08 00 88 01 00 00 5f e7 08 00 c5 00 00 00 e8 e8 08 00 a1 00 00 00 | ....8...&......._............... |
8460 | ae e9 08 00 6d 00 00 00 50 ea 08 00 4e 00 00 00 be ea 08 00 54 00 00 00 0d eb 08 00 3d 00 00 00 | ....m...P...N.......T.......=... |
8480 | 62 eb 08 00 8a 00 00 00 a0 eb 08 00 6f 00 00 00 2b ec 08 00 2e 00 00 00 9b ec 08 00 31 00 00 00 | b...........o...+...........1... |
84a0 | ca ec 08 00 3c 00 00 00 fc ec 08 00 17 01 00 00 39 ed 08 00 db 00 00 00 51 ee 08 00 49 00 00 00 | ....<...........9.......Q...I... |
84c0 | 2d ef 08 00 4a 00 00 00 77 ef 08 00 49 00 00 00 c2 ef 08 00 49 00 00 00 0c f0 08 00 0b 01 00 00 | -...J...w...I.......I........... |
84e0 | 56 f0 08 00 51 00 00 00 62 f1 08 00 96 00 00 00 b4 f1 08 00 5d 00 00 00 4b f2 08 00 49 00 00 00 | V...Q...b...........]...K...I... |
8500 | a9 f2 08 00 46 00 00 00 f3 f2 08 00 37 00 00 00 3a f3 08 00 38 01 00 00 72 f3 08 00 31 00 00 00 | ....F.......7...:...8...r...1... |
8520 | ab f4 08 00 30 00 00 00 dd f4 08 00 39 00 00 00 0e f5 08 00 33 00 00 00 48 f5 08 00 33 00 00 00 | ....0.......9.......3...H...3... |
8540 | 7c f5 08 00 49 00 00 00 b0 f5 08 00 d9 00 00 00 fa f5 08 00 78 00 00 00 d4 f6 08 00 79 00 00 00 | |...I...............x.......y... |
8560 | 4d f7 08 00 8c 00 00 00 c7 f7 08 00 47 00 00 00 54 f8 08 00 fb 00 00 00 9c f8 08 00 b7 00 00 00 | M...........G...T............... |
8580 | 98 f9 08 00 5b 00 00 00 50 fa 08 00 b7 00 00 00 ac fa 08 00 42 00 00 00 64 fb 08 00 46 00 00 00 | ....[...P...........B...d...F... |
85a0 | a7 fb 08 00 30 00 00 00 ee fb 08 00 39 00 00 00 1f fc 08 00 25 00 00 00 59 fc 08 00 2e 00 00 00 | ....0.......9.......%...Y....... |
85c0 | 7f fc 08 00 2e 00 00 00 ae fc 08 00 39 00 00 00 dd fc 08 00 c1 00 00 00 17 fd 08 00 8c 00 00 00 | ............9................... |
85e0 | d9 fd 08 00 b5 00 00 00 66 fe 08 00 42 00 00 00 1c ff 08 00 a5 00 00 00 5f ff 08 00 b9 00 00 00 | ........f...B..........._....... |
8600 | 05 00 09 00 3e 00 00 00 bf 00 09 00 74 00 00 00 fe 00 09 00 6c 00 00 00 73 01 09 00 81 00 00 00 | ....>.......t.......l...s....... |
8620 | e0 01 09 00 19 00 00 00 62 02 09 00 23 00 00 00 7c 02 09 00 b7 00 00 00 a0 02 09 00 dc 00 00 00 | ........b...#...|............... |
8640 | 58 03 09 00 13 00 00 00 35 04 09 00 54 00 00 00 49 04 09 00 5f 01 00 00 9e 04 09 00 17 00 00 00 | X.......5...T...I..._........... |
8660 | fe 05 09 00 1a 00 00 00 16 06 09 00 17 00 00 00 31 06 09 00 5b 00 00 00 49 06 09 00 3b 00 00 00 | ................1...[...I...;... |
8680 | a5 06 09 00 dd 00 00 00 e1 06 09 00 1d 01 00 00 bf 07 09 00 32 00 00 00 dd 08 09 00 20 00 00 00 | ....................2........... |
86a0 | 10 09 09 00 5d 00 00 00 31 09 09 00 54 00 00 00 8f 09 09 00 04 00 00 00 e4 09 09 00 30 00 00 00 | ....]...1...T...............0... |
86c0 | e9 09 09 00 0c 00 00 00 1a 0a 09 00 0c 00 00 00 27 0a 09 00 60 00 00 00 34 0a 09 00 09 00 00 00 | ................'...`...4....... |
86e0 | 95 0a 09 00 35 01 00 00 9f 0a 09 00 33 01 00 00 d5 0b 09 00 70 00 00 00 09 0d 09 00 03 00 00 00 | ....5.......3.......p........... |
8700 | 7a 0d 09 00 62 00 00 00 7e 0d 09 00 03 00 00 00 e1 0d 09 00 11 00 00 00 e5 0d 09 00 0b 00 00 00 | z...b...~....................... |
8720 | f7 0d 09 00 16 00 00 00 03 0e 09 00 19 00 00 00 1a 0e 09 00 15 00 00 00 34 0e 09 00 11 00 00 00 | ........................4....... |
8740 | 4a 0e 09 00 14 00 00 00 5c 0e 09 00 6a 02 00 00 71 0e 09 00 3d 01 00 00 dc 10 09 00 85 01 00 00 | J.......\...j...q...=........... |
8760 | 1a 12 09 00 95 00 00 00 a0 13 09 00 d5 01 00 00 36 14 09 00 32 00 00 00 0c 16 09 00 1e 00 00 00 | ................6...2........... |
8780 | 3f 16 09 00 05 00 00 00 5e 16 09 00 45 01 00 00 64 16 09 00 16 00 00 00 aa 17 09 00 3b 00 00 00 | ?.......^...E...d...........;... |
87a0 | c1 17 09 00 18 00 00 00 fd 17 09 00 05 00 00 00 16 18 09 00 8e 00 00 00 1c 18 09 00 60 00 00 00 | ............................`... |
87c0 | ab 18 09 00 0c 00 00 00 0c 19 09 00 0d 00 00 00 19 19 09 00 3b 00 00 00 27 19 09 00 07 00 00 00 | ....................;...'....... |
87e0 | 63 19 09 00 10 00 00 00 6b 19 09 00 6c 00 00 00 7c 19 09 00 0e 00 00 00 e9 19 09 00 4b 00 00 00 | c.......k...l...|...........K... |
8800 | f8 19 09 00 47 00 00 00 44 1a 09 00 65 00 00 00 8c 1a 09 00 a1 00 00 00 f2 1a 09 00 3f 00 00 00 | ....G...D...e...............?... |
8820 | 94 1b 09 00 4a 01 00 00 d4 1b 09 00 44 01 00 00 1f 1d 09 00 15 00 00 00 64 1e 09 00 24 00 00 00 | ....J.......D...........d...$... |
8840 | 7a 1e 09 00 0a 00 00 00 9f 1e 09 00 24 00 00 00 aa 1e 09 00 09 00 00 00 cf 1e 09 00 29 00 00 00 | z...........$...............)... |
8860 | d9 1e 09 00 1b 00 00 00 03 1f 09 00 c9 00 00 00 1f 1f 09 00 0b 00 00 00 e9 1f 09 00 85 00 00 00 | ................................ |
8880 | f5 1f 09 00 26 00 00 00 7b 20 09 00 3d 00 00 00 a2 20 09 00 52 00 00 00 e0 20 09 00 b4 00 00 00 | ....&...{...=.......R........... |
88a0 | 33 21 09 00 a9 00 00 00 e8 21 09 00 26 00 00 00 92 22 09 00 b0 00 00 00 b9 22 09 00 df 00 00 00 | 3!.......!..&...."......."...... |
88c0 | 6a 23 09 00 1c 00 00 00 4a 24 09 00 8f 00 00 00 67 24 09 00 8c 00 00 00 f7 24 09 00 90 00 00 00 | j#......J$......g$.......$...... |
88e0 | 84 25 09 00 5d 00 00 00 15 26 09 00 44 00 00 00 73 26 09 00 2f 00 00 00 b8 26 09 00 b0 00 00 00 | .%..]....&..D...s&../....&...... |
8900 | e8 26 09 00 50 00 00 00 99 27 09 00 a6 00 00 00 ea 27 09 00 ec 00 00 00 91 28 09 00 64 00 00 00 | .&..P....'.......'.......(..d... |
8920 | 7e 29 09 00 53 00 00 00 e3 29 09 00 df 00 00 00 37 2a 09 00 86 00 00 00 17 2b 09 00 63 00 00 00 | ~)..S....)......7*.......+..c... |
8940 | 9e 2b 09 00 68 00 00 00 02 2c 09 00 d1 00 00 00 6b 2c 09 00 6f 00 00 00 3d 2d 09 00 8d 00 00 00 | .+..h....,......k,..o...=-...... |
8960 | ad 2d 09 00 78 00 00 00 3b 2e 09 00 7a 00 00 00 b4 2e 09 00 7d 00 00 00 2f 2f 09 00 80 00 00 00 | .-..x...;...z.......}...//...... |
8980 | ad 2f 09 00 33 00 00 00 2e 30 09 00 71 00 00 00 62 30 09 00 db 00 00 00 d4 30 09 00 a5 00 00 00 | ./..3....0..q...b0.......0...... |
89a0 | b0 31 09 00 75 00 00 00 56 32 09 00 59 00 00 00 cc 32 09 00 58 00 00 00 26 33 09 00 9b 00 00 00 | .1..u...V2..Y....2..X...&3...... |
89c0 | 7f 33 09 00 b6 00 00 00 1b 34 09 00 29 00 00 00 d2 34 09 00 9c 00 00 00 fc 34 09 00 e3 00 00 00 | .3.......4..)....4.......4...... |
89e0 | 99 35 09 00 9e 00 00 00 7d 36 09 00 44 00 00 00 1c 37 09 00 44 00 00 00 61 37 09 00 ed 00 00 00 | .5......}6..D....7..D...a7...... |
8a00 | a6 37 09 00 3c 00 00 00 94 38 09 00 bd 00 00 00 d1 38 09 00 bf 00 00 00 8f 39 09 00 88 00 00 00 | .7..<....8.......8.......9...... |
8a20 | 4f 3a 09 00 85 00 00 00 d8 3a 09 00 6f 00 00 00 5e 3b 09 00 cf 00 00 00 ce 3b 09 00 17 00 00 00 | O:.......:..o...^;.......;...... |
8a40 | 9e 3c 09 00 12 00 00 00 b6 3c 09 00 18 00 00 00 c9 3c 09 00 39 00 00 00 e2 3c 09 00 1b 00 00 00 | .<.......<.......<..9....<...... |
8a60 | 1c 3d 09 00 21 00 00 00 38 3d 09 00 07 00 00 00 5a 3d 09 00 12 00 00 00 62 3d 09 00 79 00 00 00 | .=..!...8=......Z=......b=..y... |
8a80 | 75 3d 09 00 e5 00 00 00 ef 3d 09 00 ac 00 00 00 d5 3e 09 00 84 00 00 00 82 3f 09 00 36 01 00 00 | u=.......=.......>.......?..6... |
8aa0 | 07 40 09 00 5a 00 00 00 3e 41 09 00 c4 00 00 00 99 41 09 00 4b 00 00 00 5e 42 09 00 a7 00 00 00 | .@..Z...>A.......A..K...^B...... |
8ac0 | aa 42 09 00 17 00 00 00 52 43 09 00 e8 00 00 00 6a 43 09 00 48 00 00 00 53 44 09 00 41 00 00 00 | .B......RC......jC..H...SD..A... |
8ae0 | 9c 44 09 00 2e 00 00 00 de 44 09 00 47 00 00 00 0d 45 09 00 3f 00 00 00 55 45 09 00 9c 00 00 00 | .D.......D..G....E..?...UE...... |
8b00 | 95 45 09 00 68 00 00 00 32 46 09 00 1b 01 00 00 9b 46 09 00 22 00 00 00 b7 47 09 00 08 00 00 00 | .E..h...2F.......F.."....G...... |
8b20 | da 47 09 00 2a 00 00 00 e3 47 09 00 34 00 00 00 0e 48 09 00 ae 00 00 00 43 48 09 00 17 01 00 00 | .G..*....G..4....H......CH...... |
8b40 | f2 48 09 00 79 00 00 00 0a 4a 09 00 73 00 00 00 84 4a 09 00 bf 00 00 00 f8 4a 09 00 dc 00 00 00 | .H..y....J..s....J.......J...... |
8b60 | b8 4b 09 00 7b 01 00 00 95 4c 09 00 90 01 00 00 11 4e 09 00 13 01 00 00 a2 4f 09 00 a0 00 00 00 | .K..{....L.......N.......O...... |
8b80 | b6 50 09 00 36 01 00 00 57 51 09 00 04 02 00 00 8e 52 09 00 b6 00 00 00 93 54 09 00 ad 00 00 00 | .P..6...WQ.......R.......T...... |
8ba0 | 4a 55 09 00 67 00 00 00 f8 55 09 00 71 00 00 00 60 56 09 00 fe 00 00 00 d2 56 09 00 7d 00 00 00 | JU..g....U..q...`V.......V..}... |
8bc0 | d1 57 09 00 6d 01 00 00 4f 58 09 00 7a 00 00 00 bd 59 09 00 e2 00 00 00 38 5a 09 00 1e 01 00 00 | .W..m...OX..z....Y......8Z...... |
8be0 | 1b 5b 09 00 56 00 00 00 3a 5c 09 00 16 01 00 00 91 5c 09 00 06 01 00 00 a8 5d 09 00 b1 00 00 00 | .[..V...:\.......\.......]...... |
8c00 | af 5e 09 00 58 00 00 00 61 5f 09 00 80 00 00 00 ba 5f 09 00 7d 00 00 00 3b 60 09 00 98 00 00 00 | .^..X...a_......._..}...;`...... |
8c20 | b9 60 09 00 b5 00 00 00 52 61 09 00 a2 00 00 00 08 62 09 00 00 01 00 00 ab 62 09 00 37 00 00 00 | .`......Ra.......b.......b..7... |
8c40 | ac 63 09 00 42 00 00 00 e4 63 09 00 cf 00 00 00 27 64 09 00 fd 00 00 00 f7 64 09 00 3c 01 00 00 | .c..B....c......'d.......d..<... |
8c60 | f5 65 09 00 fb 00 00 00 32 67 09 00 bf 00 00 00 2e 68 09 00 9e 00 00 00 ee 68 09 00 a4 00 00 00 | .e......2g.......h.......h...... |
8c80 | 8d 69 09 00 fb 00 00 00 32 6a 09 00 18 01 00 00 2e 6b 09 00 20 01 00 00 47 6c 09 00 5d 00 00 00 | .i......2j.......k......Gl..]... |
8ca0 | 68 6d 09 00 4b 00 00 00 c6 6d 09 00 97 00 00 00 12 6e 09 00 57 00 00 00 aa 6e 09 00 3e 00 00 00 | hm..K....m.......n..W....n..>... |
8cc0 | 02 6f 09 00 b0 00 00 00 41 6f 09 00 f1 00 00 00 f2 6f 09 00 b8 00 00 00 e4 70 09 00 b8 00 00 00 | .o......Ao.......o.......p...... |
8ce0 | 9d 71 09 00 5d 00 00 00 56 72 09 00 4a 00 00 00 b4 72 09 00 34 00 00 00 ff 72 09 00 2c 00 00 00 | .q..]...Vr..J....r..4....r..,... |
8d00 | 34 73 09 00 24 00 00 00 61 73 09 00 41 00 00 00 86 73 09 00 d6 00 00 00 c8 73 09 00 ae 00 00 00 | 4s..$...as..A....s.......s...... |
8d20 | 9f 74 09 00 cf 00 00 00 4e 75 09 00 59 00 00 00 1e 76 09 00 c3 00 00 00 78 76 09 00 48 00 00 00 | .t......Nu..Y....v......xv..H... |
8d40 | 3c 77 09 00 62 00 00 00 85 77 09 00 86 00 00 00 e8 77 09 00 fe 00 00 00 6f 78 09 00 41 00 00 00 | <w..b....w.......w......ox..A... |
8d60 | 6e 79 09 00 93 00 00 00 b0 79 09 00 09 00 00 00 44 7a 09 00 18 00 00 00 4e 7a 09 00 33 00 00 00 | ny.......y......Dz......Nz..3... |
8d80 | 67 7a 09 00 99 00 00 00 9b 7a 09 00 9a 00 00 00 35 7b 09 00 16 00 00 00 d0 7b 09 00 27 00 00 00 | gz.......z......5{.......{..'... |
8da0 | e7 7b 09 00 30 00 00 00 0f 7c 09 00 10 00 00 00 40 7c 09 00 21 00 00 00 51 7c 09 00 1c 00 00 00 | .{..0....|......@|..!...Q|...... |
8dc0 | 73 7c 09 00 aa 01 00 00 90 7c 09 00 82 00 00 00 3b 7e 09 00 ac 00 00 00 be 7e 09 00 fe 00 00 00 | s|.......|......;~.......~...... |
8de0 | 6b 7f 09 00 60 00 00 00 6a 80 09 00 86 01 00 00 cb 80 09 00 85 01 00 00 52 82 09 00 01 00 00 00 | k...`...j...............R....... |
8e00 | d8 83 09 00 76 00 00 00 da 83 09 00 6b 00 00 00 51 84 09 00 60 00 00 00 bd 84 09 00 a9 00 00 00 | ....v.......k...Q...`........... |
8e20 | 1e 85 09 00 c9 00 00 00 c8 85 09 00 9b 00 00 00 92 86 09 00 c3 00 00 00 2e 87 09 00 3c 00 00 00 | ............................<... |
8e40 | f2 87 09 00 38 00 00 00 2f 88 09 00 95 00 00 00 68 88 09 00 2e 00 00 00 fe 88 09 00 57 00 00 00 | ....8.../.......h...........W... |
8e60 | 2d 89 09 00 61 00 00 00 85 89 09 00 69 00 00 00 e7 89 09 00 4b 00 00 00 51 8a 09 00 a4 00 00 00 | -...a.......i.......K...Q....... |
8e80 | 9d 8a 09 00 52 00 00 00 42 8b 09 00 53 00 00 00 95 8b 09 00 65 00 00 00 e9 8b 09 00 35 00 00 00 | ....R...B...S.......e.......5... |
8ea0 | 4f 8c 09 00 51 00 00 00 85 8c 09 00 a7 00 00 00 d7 8c 09 00 8a 00 00 00 7f 8d 09 00 96 00 00 00 | O...Q........................... |
8ec0 | 0a 8e 09 00 81 00 00 00 a1 8e 09 00 7f 00 00 00 23 8f 09 00 88 00 00 00 a3 8f 09 00 e3 00 00 00 | ................#............... |
8ee0 | 2c 90 09 00 c3 00 00 00 10 91 09 00 3a 00 00 00 d4 91 09 00 5a 00 00 00 0f 92 09 00 65 00 00 00 | ,...........:.......Z.......e... |
8f00 | 6a 92 09 00 c3 00 00 00 d0 92 09 00 db 00 00 00 94 93 09 00 50 00 00 00 70 94 09 00 1d 01 00 00 | j...................P...p....... |
8f20 | c1 94 09 00 f2 00 00 00 df 95 09 00 48 00 00 00 d2 96 09 00 b0 00 00 00 1b 97 09 00 9f 00 00 00 | ............H................... |
8f40 | cc 97 09 00 1f 00 00 00 6c 98 09 00 71 00 00 00 8c 98 09 00 75 00 00 00 fe 98 09 00 75 00 00 00 | ........l...q.......u.......u... |
8f60 | 74 99 09 00 dc 00 00 00 ea 99 09 00 3f 00 00 00 c7 9a 09 00 6d 00 00 00 07 9b 09 00 da 00 00 00 | t...........?.......m........... |
8f80 | 75 9b 09 00 1c 00 00 00 50 9c 09 00 13 00 00 00 6d 9c 09 00 20 00 00 00 81 9c 09 00 14 00 00 00 | u.......P.......m............... |
8fa0 | a2 9c 09 00 13 00 00 00 b7 9c 09 00 03 01 00 00 cb 9c 09 00 1d 00 00 00 cf 9d 09 00 1d 00 00 00 | ................................ |
8fc0 | ed 9d 09 00 23 00 00 00 0b 9e 09 00 1d 00 00 00 2f 9e 09 00 29 00 00 00 4d 9e 09 00 31 00 00 00 | ....#.........../...)...M...1... |
8fe0 | 77 9e 09 00 31 00 00 00 a9 9e 09 00 33 00 00 00 db 9e 09 00 33 00 00 00 0f 9f 09 00 10 00 00 00 | w...1.......3.......3........... |
9000 | 43 9f 09 00 0c 00 00 00 54 9f 09 00 2d 00 00 00 61 9f 09 00 2c 00 00 00 8f 9f 09 00 12 00 00 00 | C.......T...-...a...,........... |
9020 | bc 9f 09 00 2c 00 00 00 cf 9f 09 00 25 00 00 00 fc 9f 09 00 3c 00 00 00 22 a0 09 00 12 00 00 00 | ....,.......%.......<..."....... |
9040 | 5f a0 09 00 35 00 00 00 72 a0 09 00 13 00 00 00 a8 a0 09 00 34 00 00 00 bc a0 09 00 16 00 00 00 | _...5...r...........4........... |
9060 | f1 a0 09 00 1c 00 00 00 08 a1 09 00 12 00 00 00 25 a1 09 00 34 00 00 00 38 a1 09 00 13 00 00 00 | ................%...4...8....... |
9080 | 6d a1 09 00 1d 00 00 00 81 a1 09 00 30 00 00 00 9f a1 09 00 1f 00 00 00 d0 a1 09 00 13 00 00 00 | m...........0................... |
90a0 | f0 a1 09 00 16 00 00 00 04 a2 09 00 25 01 00 00 1b a2 09 00 d3 00 00 00 41 a3 09 00 13 00 00 00 | ............%...........A....... |
90c0 | 15 a4 09 00 38 00 00 00 29 a4 09 00 16 00 00 00 62 a4 09 00 9d 00 00 00 79 a4 09 00 41 00 00 00 | ....8...).......b.......y...A... |
90e0 | 17 a5 09 00 38 00 00 00 59 a5 09 00 1e 00 00 00 92 a5 09 00 22 00 00 00 b1 a5 09 00 5d 00 00 00 | ....8...Y...........".......]... |
9100 | d4 a5 09 00 55 00 00 00 32 a6 09 00 1e 00 00 00 88 a6 09 00 44 00 00 00 a7 a6 09 00 25 00 00 00 | ....U...2...........D.......%... |
9120 | ec a6 09 00 08 01 00 00 12 a7 09 00 fd 01 00 00 1b a8 09 00 87 00 00 00 19 aa 09 00 54 00 00 00 | ............................T... |
9140 | a1 aa 09 00 5b 00 00 00 f6 aa 09 00 87 02 00 00 52 ab 09 00 c3 00 00 00 da ad 09 00 59 00 00 00 | ....[...........R...........Y... |
9160 | 9e ae 09 00 1e 00 00 00 f8 ae 09 00 2a 00 00 00 17 af 09 00 2f 00 00 00 42 af 09 00 27 00 00 00 | ............*......./...B...'... |
9180 | 72 af 09 00 37 00 00 00 9a af 09 00 54 00 00 00 d2 af 09 00 4f 00 00 00 27 b0 09 00 59 00 00 00 | r...7.......T.......O...'...Y... |
91a0 | 77 b0 09 00 4d 00 00 00 d1 b0 09 00 5f 00 00 00 1f b1 09 00 33 00 00 00 7f b1 09 00 64 00 00 00 | w...M......._.......3.......d... |
91c0 | b3 b1 09 00 7b 00 00 00 18 b2 09 00 49 00 00 00 94 b2 09 00 1e 00 00 00 de b2 09 00 f3 00 00 00 | ....{.......I................... |
91e0 | fd b2 09 00 f1 00 00 00 f1 b3 09 00 5e 00 00 00 e3 b4 09 00 79 00 00 00 42 b5 09 00 54 00 00 00 | ............^.......y...B...T... |
9200 | bc b5 09 00 43 00 00 00 11 b6 09 00 4f 00 00 00 55 b6 09 00 29 00 00 00 a5 b6 09 00 82 00 00 00 | ....C.......O...U...)........... |
9220 | cf b6 09 00 22 00 00 00 52 b7 09 00 47 02 00 00 75 b7 09 00 47 02 00 00 bd b9 09 00 fc 00 00 00 | ...."...R...G...u...G........... |
9240 | 05 bc 09 00 9c 00 00 00 02 bd 09 00 2c 00 00 00 9f bd 09 00 16 00 00 00 cc bd 09 00 53 00 00 00 | ............,...............S... |
9260 | e3 bd 09 00 7d 00 00 00 37 be 09 00 66 00 00 00 b5 be 09 00 b4 00 00 00 1c bf 09 00 55 00 00 00 | ....}...7...f...............U... |
9280 | d1 bf 09 00 22 00 00 00 27 c0 09 00 18 00 00 00 4a c0 09 00 31 00 00 00 63 c0 09 00 1b 00 00 00 | ...."...'.......J...1...c....... |
92a0 | 95 c0 09 00 1a 00 00 00 b1 c0 09 00 17 00 00 00 cc c0 09 00 17 00 00 00 e4 c0 09 00 17 00 00 00 | ................................ |
92c0 | fc c0 09 00 35 00 00 00 14 c1 09 00 41 00 00 00 4a c1 09 00 25 00 00 00 8c c1 09 00 2d 00 00 00 | ....5.......A...J...%.......-... |
92e0 | b2 c1 09 00 3e 00 00 00 e0 c1 09 00 24 00 00 00 1f c2 09 00 28 00 00 00 44 c2 09 00 4d 00 00 00 | ....>.......$.......(...D...M... |
9300 | 6d c2 09 00 50 00 00 00 bb c2 09 00 33 00 00 00 0c c3 09 00 35 00 00 00 40 c3 09 00 20 00 00 00 | m...P.......3.......5...@....... |
9320 | 76 c3 09 00 73 02 00 00 97 c3 09 00 74 02 00 00 0b c6 09 00 c9 00 00 00 80 c8 09 00 28 00 00 00 | v...s.......t...............(... |
9340 | 4a c9 09 00 5c 00 00 00 73 c9 09 00 23 00 00 00 d0 c9 09 00 27 00 00 00 f4 c9 09 00 18 00 00 00 | J...\...s...#.......'........... |
9360 | 1c ca 09 00 25 00 00 00 35 ca 09 00 1c 00 00 00 5b ca 09 00 53 00 00 00 78 ca 09 00 53 00 00 00 | ....%...5.......[...S...x...S... |
9380 | cc ca 09 00 16 00 00 00 20 cb 09 00 7e 00 00 00 37 cb 09 00 33 00 00 00 b6 cb 09 00 25 00 00 00 | ............~...7...3.......%... |
93a0 | ea cb 09 00 af 00 00 00 10 cc 09 00 d0 00 00 00 c0 cc 09 00 7e 00 00 00 91 cd 09 00 25 00 00 00 | ....................~.......%... |
93c0 | 10 ce 09 00 3d 00 00 00 36 ce 09 00 04 01 00 00 74 ce 09 00 49 00 00 00 79 cf 09 00 bd 00 00 00 | ....=...6.......t...I...y....... |
93e0 | c3 cf 09 00 78 00 00 00 81 d0 09 00 41 00 00 00 fa d0 09 00 43 00 00 00 3c d1 09 00 3d 00 00 00 | ....x.......A.......C...<...=... |
9400 | 80 d1 09 00 27 00 00 00 be d1 09 00 1a 00 00 00 e6 d1 09 00 d2 00 00 00 01 d2 09 00 5b 00 00 00 | ....'.......................[... |
9420 | d4 d2 09 00 ab 00 00 00 30 d3 09 00 5a 00 00 00 dc d3 09 00 5a 00 00 00 37 d4 09 00 77 00 00 00 | ........0...Z.......Z...7...w... |
9440 | 92 d4 09 00 7d 00 00 00 0a d5 09 00 dd 00 00 00 88 d5 09 00 3f 00 00 00 66 d6 09 00 40 00 00 00 | ....}...............?...f...@... |
9460 | a6 d6 09 00 55 00 00 00 e7 d6 09 00 af 00 00 00 3d d7 09 00 5e 00 00 00 ed d7 09 00 72 00 00 00 | ....U...........=...^.......r... |
9480 | 4c d8 09 00 3b 00 00 00 bf d8 09 00 65 00 00 00 fb d8 09 00 37 00 00 00 61 d9 09 00 25 00 00 00 | L...;.......e.......7...a...%... |
94a0 | 99 d9 09 00 51 00 00 00 bf d9 09 00 55 00 00 00 11 da 09 00 38 00 00 00 67 da 09 00 13 00 00 00 | ....Q.......U.......8...g....... |
94c0 | a0 da 09 00 45 00 00 00 b4 da 09 00 40 00 00 00 fa da 09 00 26 00 00 00 3b db 09 00 24 00 00 00 | ....E.......@.......&...;...$... |
94e0 | 62 db 09 00 44 00 00 00 87 db 09 00 4b 00 00 00 cc db 09 00 4b 00 00 00 18 dc 09 00 1f 00 00 00 | b...D.......K.......K........... |
9500 | 64 dc 09 00 96 00 00 00 84 dc 09 00 26 00 00 00 1b dd 09 00 29 00 00 00 42 dd 09 00 22 00 00 00 | d...........&.......)...B..."... |
9520 | 6c dd 09 00 1f 00 00 00 8f dd 09 00 24 00 00 00 af dd 09 00 28 00 00 00 d4 dd 09 00 18 00 00 00 | l...........$.......(........... |
9540 | fd dd 09 00 1b 00 00 00 16 de 09 00 26 00 00 00 32 de 09 00 29 00 00 00 59 de 09 00 57 00 00 00 | ............&...2...)...Y...W... |
9560 | 83 de 09 00 54 00 00 00 db de 09 00 52 00 00 00 30 df 09 00 51 00 00 00 83 df 09 00 40 00 00 00 | ....T.......R...0...Q.......@... |
9580 | d5 df 09 00 28 00 00 00 16 e0 09 00 70 00 00 00 3f e0 09 00 26 00 00 00 b0 e0 09 00 79 00 00 00 | ....(.......p...?...&.......y... |
95a0 | d7 e0 09 00 56 00 00 00 51 e1 09 00 0b 00 00 00 a8 e1 09 00 2c 00 00 00 b4 e1 09 00 35 00 00 00 | ....V...Q...........,.......5... |
95c0 | e1 e1 09 00 3f 00 00 00 17 e2 09 00 2d 00 00 00 57 e2 09 00 33 00 00 00 85 e2 09 00 31 00 00 00 | ....?.......-...W...3.......1... |
95e0 | b9 e2 09 00 69 00 00 00 eb e2 09 00 9c 00 00 00 55 e3 09 00 89 00 00 00 f2 e3 09 00 56 00 00 00 | ....i...........U...........V... |
9600 | 7c e4 09 00 4c 00 00 00 d3 e4 09 00 3c 00 00 00 20 e5 09 00 9e 00 00 00 5d e5 09 00 26 00 00 00 | |...L.......<...........]...&... |
9620 | fc e5 09 00 27 00 00 00 23 e6 09 00 1f 00 00 00 4b e6 09 00 5c 00 00 00 6b e6 09 00 3f 00 00 00 | ....'...#.......K...\...k...?... |
9640 | c8 e6 09 00 36 00 00 00 08 e7 09 00 38 00 00 00 3f e7 09 00 66 00 00 00 78 e7 09 00 24 00 00 00 | ....6.......8...?...f...x...$... |
9660 | df e7 09 00 27 00 00 00 04 e8 09 00 27 00 00 00 2c e8 09 00 1e 00 00 00 54 e8 09 00 24 01 00 00 | ....'.......'...,.......T...$... |
9680 | 73 e8 09 00 a1 00 00 00 98 e9 09 00 3c 00 00 00 3a ea 09 00 6e 00 00 00 77 ea 09 00 83 00 00 00 | s...........<...:...n...w....... |
96a0 | e6 ea 09 00 3e 00 00 00 6a eb 09 00 55 00 00 00 a9 eb 09 00 27 01 00 00 ff eb 09 00 50 00 00 00 | ....>...j...U.......'.......P... |
96c0 | 27 ed 09 00 22 00 00 00 78 ed 09 00 5a 00 00 00 9b ed 09 00 2c 00 00 00 f6 ed 09 00 47 00 00 00 | '..."...x...Z.......,.......G... |
96e0 | 23 ee 09 00 7b 00 00 00 6b ee 09 00 77 00 00 00 e7 ee 09 00 65 00 00 00 5f ef 09 00 65 00 00 00 | #...{...k...w.......e..._...e... |
9700 | c5 ef 09 00 5a 00 00 00 2b f0 09 00 5a 00 00 00 86 f0 09 00 72 00 00 00 e1 f0 09 00 2e 00 00 00 | ....Z...+...Z.......r........... |
9720 | 54 f1 09 00 24 00 00 00 83 f1 09 00 61 00 00 00 a8 f1 09 00 55 00 00 00 0a f2 09 00 2b 00 00 00 | T...$.......a.......U.......+... |
9740 | 60 f2 09 00 29 00 00 00 8c f2 09 00 27 00 00 00 b6 f2 09 00 28 00 00 00 de f2 09 00 29 00 00 00 | `...).......'.......(.......)... |
9760 | 07 f3 09 00 27 00 00 00 31 f3 09 00 28 00 00 00 59 f3 09 00 4c 00 00 00 82 f3 09 00 4c 00 00 00 | ....'...1...(...Y...L.......L... |
9780 | cf f3 09 00 38 00 00 00 1c f4 09 00 54 00 00 00 55 f4 09 00 0b 00 00 00 aa f4 09 00 0f 00 00 00 | ....8.......T...U............... |
97a0 | b6 f4 09 00 49 00 00 00 c6 f4 09 00 0b 00 00 00 10 f5 09 00 43 00 00 00 1c f5 09 00 43 00 00 00 | ....I...............C.......C... |
97c0 | 60 f5 09 00 36 00 00 00 a4 f5 09 00 29 00 00 00 db f5 09 00 2e 00 00 00 05 f6 09 00 22 00 00 00 | `...6.......)..............."... |
97e0 | 34 f6 09 00 77 00 00 00 57 f6 09 00 28 00 00 00 cf f6 09 00 3e 00 00 00 f8 f6 09 00 28 00 00 00 | 4...w...W...(.......>.......(... |
9800 | 37 f7 09 00 3e 00 00 00 60 f7 09 00 29 00 00 00 9f f7 09 00 5d 00 00 00 c9 f7 09 00 c9 00 00 00 | 7...>...`...).......]........... |
9820 | 27 f8 09 00 3f 00 00 00 f1 f8 09 00 dd 00 00 00 31 f9 09 00 4c 00 00 00 0f fa 09 00 7f 00 00 00 | '...?...........1...L........... |
9840 | 5c fa 09 00 1d 00 00 00 dc fa 09 00 73 00 00 00 fa fa 09 00 31 00 00 00 6e fb 09 00 d7 00 00 00 | \...........s.......1...n....... |
9860 | a0 fb 09 00 1e 00 00 00 78 fc 09 00 24 00 00 00 97 fc 09 00 5c 00 00 00 bc fc 09 00 21 00 00 00 | ........x...$.......\.......!... |
9880 | 19 fd 09 00 52 00 00 00 3b fd 09 00 5c 00 00 00 8e fd 09 00 b7 00 00 00 eb fd 09 00 44 01 00 00 | ....R...;...\...............D... |
98a0 | a3 fe 09 00 a5 01 00 00 e8 ff 09 00 27 00 00 00 8e 01 0a 00 88 01 00 00 b6 01 0a 00 30 00 00 00 | ............'...............0... |
98c0 | 3f 03 0a 00 3e 00 00 00 70 03 0a 00 33 01 00 00 af 03 0a 00 41 00 00 00 e3 04 0a 00 d1 00 00 00 | ?...>...p...3.......A........... |
98e0 | 25 05 0a 00 c2 01 00 00 f7 05 0a 00 49 00 00 00 ba 07 0a 00 e7 00 00 00 04 08 0a 00 65 01 00 00 | %...........I...............e... |
9900 | ec 08 0a 00 1f 00 00 00 52 0a 0a 00 30 00 00 00 72 0a 0a 00 33 00 00 00 a3 0a 0a 00 11 00 00 00 | ........R...0...r...3........... |
9920 | d7 0a 0a 00 05 00 00 00 e9 0a 0a 00 03 00 00 00 ef 0a 0a 00 0e 00 00 00 f3 0a 0a 00 1b 00 00 00 | ................................ |
9940 | 02 0b 0a 00 1d 00 00 00 1e 0b 0a 00 1f 00 00 00 3c 0b 0a 00 04 00 00 00 5c 0b 0a 00 0d 00 00 00 | ................<.......\....... |
9960 | 61 0b 0a 00 32 00 00 00 6f 0b 0a 00 29 00 00 00 a2 0b 0a 00 04 00 00 00 cc 0b 0a 00 07 00 00 00 | a...2...o...)................... |
9980 | d1 0b 0a 00 09 00 00 00 d9 0b 0a 00 0d 00 00 00 e3 0b 0a 00 17 00 00 00 f1 0b 0a 00 0f 00 00 00 | ................................ |
99a0 | 09 0c 0a 00 0d 00 00 00 19 0c 0a 00 06 00 00 00 27 0c 0a 00 19 00 00 00 2e 0c 0a 00 14 00 00 00 | ................'............... |
99c0 | 48 0c 0a 00 05 00 00 00 5d 0c 0a 00 15 00 00 00 63 0c 0a 00 04 00 00 00 79 0c 0a 00 04 00 00 00 | H.......].......c.......y....... |
99e0 | 7e 0c 0a 00 06 00 00 00 83 0c 0a 00 51 00 00 00 8a 0c 0a 00 4a 01 00 00 dc 0c 0a 00 50 01 00 00 | ~...........Q.......J.......P... |
9a00 | 27 0e 0a 00 4d 00 00 00 78 0f 0a 00 05 00 00 00 c6 0f 0a 00 12 00 00 00 cc 0f 0a 00 15 00 00 00 | '...M...x....................... |
9a20 | df 0f 0a 00 22 00 00 00 f5 0f 0a 00 10 00 00 00 18 10 0a 00 12 00 00 00 29 10 0a 00 0e 00 00 00 | ...."...................)....... |
9a40 | 3c 10 0a 00 10 00 00 00 4b 10 0a 00 13 00 00 00 5c 10 0a 00 16 00 00 00 70 10 0a 00 06 00 00 00 | <.......K.......\.......p....... |
9a60 | 87 10 0a 00 09 00 00 00 8e 10 0a 00 1d 00 00 00 98 10 0a 00 05 00 00 00 b6 10 0a 00 0b 00 00 00 | ................................ |
9a80 | bc 10 0a 00 13 00 00 00 c8 10 0a 00 0d 00 00 00 dc 10 0a 00 05 00 00 00 ea 10 0a 00 68 00 00 00 | ............................h... |
9aa0 | f0 10 0a 00 67 00 00 00 59 11 0a 00 79 00 00 00 c1 11 0a 00 66 00 00 00 3b 12 0a 00 03 00 00 00 | ....g...Y...y.......f...;....... |
9ac0 | a2 12 0a 00 08 00 00 00 a6 12 0a 00 31 00 00 00 af 12 0a 00 07 00 00 00 e1 12 0a 00 08 00 00 00 | ............1................... |
9ae0 | e9 12 0a 00 38 00 00 00 f2 12 0a 00 10 00 00 00 2b 13 0a 00 0b 00 00 00 3c 13 0a 00 03 00 00 00 | ....8...........+.......<....... |
9b00 | 48 13 0a 00 1d 00 00 00 4c 13 0a 00 06 00 00 00 6a 13 0a 00 1d 00 00 00 71 13 0a 00 09 00 00 00 | H.......L.......j.......q....... |
9b20 | 8f 13 0a 00 26 00 00 00 99 13 0a 00 6d 00 00 00 c0 13 0a 00 46 00 00 00 2e 14 0a 00 32 00 00 00 | ....&.......m.......F.......2... |
9b40 | 75 14 0a 00 46 00 00 00 a8 14 0a 00 04 00 00 00 ef 14 0a 00 08 00 00 00 f4 14 0a 00 07 00 00 00 | u...F........................... |
9b60 | fd 14 0a 00 46 00 00 00 05 15 0a 00 0d 00 00 00 4c 15 0a 00 05 00 00 00 5a 15 0a 00 1c 00 00 00 | ....F...........L.......Z....... |
9b80 | 60 15 0a 00 73 00 00 00 7d 15 0a 00 04 00 00 00 f1 15 0a 00 06 00 00 00 f6 15 0a 00 04 00 00 00 | `...s...}....................... |
9ba0 | fd 15 0a 00 05 00 00 00 02 16 0a 00 10 00 00 00 08 16 0a 00 3c 00 00 00 19 16 0a 00 32 00 00 00 | ....................<.......2... |
9bc0 | 56 16 0a 00 1c 00 00 00 89 16 0a 00 6d 00 00 00 a6 16 0a 00 08 00 00 00 14 17 0a 00 14 00 00 00 | V...........m................... |
9be0 | 1d 17 0a 00 14 00 00 00 32 17 0a 00 14 00 00 00 47 17 0a 00 14 00 00 00 5c 17 0a 00 14 00 00 00 | ........2.......G.......\....... |
9c00 | 71 17 0a 00 14 00 00 00 86 17 0a 00 14 00 00 00 9b 17 0a 00 06 00 00 00 b0 17 0a 00 06 00 00 00 | q............................... |
9c20 | b7 17 0a 00 06 00 00 00 be 17 0a 00 06 00 00 00 c5 17 0a 00 06 00 00 00 cc 17 0a 00 06 00 00 00 | ................................ |
9c40 | d3 17 0a 00 06 00 00 00 da 17 0a 00 06 00 00 00 e1 17 0a 00 1f 00 00 00 e8 17 0a 00 08 00 00 00 | ................................ |
9c60 | 08 18 0a 00 08 00 00 00 11 18 0a 00 a4 00 00 00 1a 18 0a 00 03 00 00 00 bf 18 0a 00 0d 00 00 00 | ................................ |
9c80 | c3 18 0a 00 74 00 00 00 d1 18 0a 00 9a 00 00 00 46 19 0a 00 4c 00 00 00 e1 19 0a 00 04 00 00 00 | ....t...........F...L........... |
9ca0 | 2e 1a 0a 00 0c 00 00 00 33 1a 0a 00 3f 00 00 00 40 1a 0a 00 29 00 00 00 80 1a 0a 00 37 00 00 00 | ........3...?...@...).......7... |
9cc0 | aa 1a 0a 00 2c 00 00 00 e2 1a 0a 00 0e 00 00 00 0f 1b 0a 00 33 00 00 00 1e 1b 0a 00 33 00 00 00 | ....,...............3.......3... |
9ce0 | 52 1b 0a 00 0b 00 00 00 86 1b 0a 00 14 00 00 00 92 1b 0a 00 71 00 00 00 a7 1b 0a 00 46 00 00 00 | R...................q.......F... |
9d00 | 19 1c 0a 00 04 00 00 00 60 1c 0a 00 0b 00 00 00 65 1c 0a 00 12 00 00 00 71 1c 0a 00 0f 00 00 00 | ........`.......e.......q....... |
9d20 | 84 1c 0a 00 08 00 00 00 94 1c 0a 00 06 00 00 00 9d 1c 0a 00 03 00 00 00 a4 1c 0a 00 0a 00 00 00 | ................................ |
9d40 | a8 1c 0a 00 0b 00 00 00 b3 1c 0a 00 40 00 00 00 bf 1c 0a 00 07 00 00 00 00 1d 0a 00 06 00 00 00 | ............@................... |
9d60 | 08 1d 0a 00 05 00 00 00 0f 1d 0a 00 9b 00 00 00 15 1d 0a 00 11 00 00 00 b1 1d 0a 00 0d 00 00 00 | ................................ |
9d80 | c3 1d 0a 00 13 00 00 00 d1 1d 0a 00 15 00 00 00 e5 1d 0a 00 18 00 00 00 fb 1d 0a 00 1b 00 00 00 | ................................ |
9da0 | 14 1e 0a 00 0a 00 00 00 30 1e 0a 00 12 00 00 00 3b 1e 0a 00 1c 00 00 00 4e 1e 0a 00 0f 00 00 00 | ........0.......;.......N....... |
9dc0 | 6b 1e 0a 00 05 00 00 00 7b 1e 0a 00 0e 00 00 00 81 1e 0a 00 0e 00 00 00 90 1e 0a 00 0d 00 00 00 | k.......{....................... |
9de0 | 9f 1e 0a 00 2a 00 00 00 ad 1e 0a 00 15 00 00 00 d8 1e 0a 00 31 00 00 00 ee 1e 0a 00 39 00 00 00 | ....*...............1.......9... |
9e00 | 20 1f 0a 00 34 00 00 00 5a 1f 0a 00 04 00 00 00 8f 1f 0a 00 0b 00 00 00 94 1f 0a 00 09 00 00 00 | ....4...Z....................... |
9e20 | a0 1f 0a 00 07 00 00 00 aa 1f 0a 00 05 00 00 00 b2 1f 0a 00 72 00 00 00 b8 1f 0a 00 08 00 00 00 | ....................r........... |
9e40 | 2b 20 0a 00 0e 00 00 00 34 20 0a 00 11 00 00 00 43 20 0a 00 38 00 00 00 55 20 0a 00 0d 00 00 00 | +.......4.......C...8...U....... |
9e60 | 8e 20 0a 00 0d 00 00 00 9c 20 0a 00 06 00 00 00 aa 20 0a 00 3a 00 00 00 b1 20 0a 00 0b 00 00 00 | ....................:........... |
9e80 | ec 20 0a 00 40 00 00 00 f8 20 0a 00 0e 00 00 00 39 21 0a 00 0f 00 00 00 48 21 0a 00 07 00 00 00 | ....@...........9!......H!...... |
9ea0 | 58 21 0a 00 0e 00 00 00 60 21 0a 00 0c 00 00 00 6f 21 0a 00 ad 00 00 00 7c 21 0a 00 0b 00 00 00 | X!......`!......o!......|!...... |
9ec0 | 2a 22 0a 00 06 00 00 00 36 22 0a 00 04 00 00 00 3d 22 0a 00 d7 00 00 00 42 22 0a 00 10 00 00 00 | *"......6"......="......B"...... |
9ee0 | 1a 23 0a 00 ed 01 00 00 2b 23 0a 00 0b 00 00 00 19 25 0a 00 0b 00 00 00 25 25 0a 00 0c 00 00 00 | .#......+#.......%......%%...... |
9f00 | 31 25 0a 00 06 00 00 00 3e 25 0a 00 0e 00 00 00 45 25 0a 00 58 00 00 00 54 25 0a 00 04 00 00 00 | 1%......>%......E%..X...T%...... |
9f20 | ad 25 0a 00 04 00 00 00 b2 25 0a 00 05 00 00 00 b7 25 0a 00 0e 00 00 00 bd 25 0a 00 47 00 00 00 | .%.......%.......%.......%..G... |
9f40 | cc 25 0a 00 05 00 00 00 14 26 0a 00 07 00 00 00 1a 26 0a 00 68 00 00 00 22 26 0a 00 19 00 00 00 | .%.......&.......&..h..."&...... |
9f60 | 8b 26 0a 00 14 00 00 00 a5 26 0a 00 2c 00 00 00 ba 26 0a 00 0b 00 00 00 e7 26 0a 00 09 00 00 00 | .&.......&..,....&.......&...... |
9f80 | f3 26 0a 00 08 00 00 00 fd 26 0a 00 53 00 00 00 06 27 0a 00 08 00 00 00 5a 27 0a 00 22 00 00 00 | .&.......&..S....'......Z'.."... |
9fa0 | 63 27 0a 00 04 00 00 00 86 27 0a 00 05 00 00 00 8b 27 0a 00 e2 00 00 00 91 27 0a 00 43 00 00 00 | c'.......'.......'.......'..C... |
9fc0 | 74 28 0a 00 52 00 00 00 b8 28 0a 00 42 00 00 00 0b 29 0a 00 3b 00 00 00 4e 29 0a 00 42 00 00 00 | t(..R....(..B....)..;...N)..B... |
9fe0 | 8a 29 0a 00 3a 00 00 00 cd 29 0a 00 24 00 00 00 08 2a 0a 00 1a 00 00 00 2d 2a 0a 00 66 00 00 00 | .)..:....)..$....*......-*..f... |
a000 | 48 2a 0a 00 6f 00 00 00 af 2a 0a 00 5d 01 00 00 1f 2b 0a 00 48 00 00 00 7d 2c 0a 00 46 00 00 00 | H*..o....*..]....+..H...},..F... |
a020 | c6 2c 0a 00 31 00 00 00 0d 2d 0a 00 31 00 00 00 3f 2d 0a 00 3e 00 00 00 71 2d 0a 00 23 00 00 00 | .,..1....-..1...?-..>...q-..#... |
a040 | b0 2d 0a 00 18 00 00 00 d4 2d 0a 00 7d 00 00 00 ed 2d 0a 00 92 00 00 00 6b 2e 0a 00 23 00 00 00 | .-.......-..}....-......k...#... |
a060 | fe 2e 0a 00 20 00 00 00 22 2f 0a 00 21 00 00 00 43 2f 0a 00 21 00 00 00 65 2f 0a 00 3f 00 00 00 | ........"/..!...C/..!...e/..?... |
a080 | 87 2f 0a 00 78 00 00 00 c7 2f 0a 00 7f 00 00 00 40 30 0a 00 15 00 00 00 c0 30 0a 00 2d 00 00 00 | ./..x..../......@0.......0..-... |
a0a0 | d6 30 0a 00 27 00 00 00 04 31 0a 00 1d 00 00 00 2c 31 0a 00 5c 00 00 00 4a 31 0a 00 1c 00 00 00 | .0..'....1......,1..\...J1...... |
a0c0 | a7 31 0a 00 0c 00 00 00 c4 31 0a 00 21 00 00 00 d1 31 0a 00 4e 00 00 00 f3 31 0a 00 e0 00 00 00 | .1.......1..!....1..N....1...... |
a0e0 | 42 32 0a 00 e0 00 00 00 23 33 0a 00 23 00 00 00 04 34 0a 00 3e 00 00 00 28 34 0a 00 0c 00 00 00 | B2......#3..#....4..>...(4...... |
a100 | 67 34 0a 00 12 00 00 00 74 34 0a 00 11 00 00 00 87 34 0a 00 4d 00 00 00 99 34 0a 00 b4 00 00 00 | g4......t4.......4..M....4...... |
a120 | e7 34 0a 00 6c 00 00 00 9c 35 0a 00 6b 00 00 00 09 36 0a 00 81 00 00 00 75 36 0a 00 3b 00 00 00 | .4..l....5..k....6......u6..;... |
a140 | f7 36 0a 00 12 00 00 00 33 37 0a 00 8b 00 00 00 46 37 0a 00 8c 00 00 00 d2 37 0a 00 30 01 00 00 | .6......37......F7.......7..0... |
a160 | 5f 38 0a 00 fb 00 00 00 90 39 0a 00 fc 00 00 00 8c 3a 0a 00 d5 00 00 00 89 3b 0a 00 94 00 00 00 | _8.......9.......:.......;...... |
a180 | 5f 3c 0a 00 2c 01 00 00 f4 3c 0a 00 f6 01 00 00 21 3e 0a 00 67 00 00 00 18 40 0a 00 67 00 00 00 | _<..,....<......!>..g....@..g... |
a1a0 | 80 40 0a 00 da 00 00 00 e8 40 0a 00 d9 00 00 00 c3 41 0a 00 12 00 00 00 9d 42 0a 00 08 00 00 00 | .@.......@.......A.......B...... |
a1c0 | b0 42 0a 00 b8 00 00 00 b9 42 0a 00 14 01 00 00 72 43 0a 00 18 00 00 00 87 44 0a 00 18 00 00 00 | .B.......B......rC.......D...... |
a1e0 | a0 44 0a 00 1b 00 00 00 b9 44 0a 00 1a 00 00 00 d5 44 0a 00 15 00 00 00 f0 44 0a 00 0d 00 00 00 | .D.......D.......D.......D...... |
a200 | 06 45 0a 00 14 00 00 00 14 45 0a 00 0a 00 00 00 29 45 0a 00 0b 00 00 00 34 45 0a 00 0a 00 00 00 | .E.......E......)E......4E...... |
a220 | 40 45 0a 00 0b 00 00 00 4b 45 0a 00 0a 00 00 00 57 45 0a 00 0a 00 00 00 62 45 0a 00 4d 00 00 00 | @E......KE......WE......bE..M... |
a240 | 6d 45 0a 00 7e 03 00 00 bb 45 0a 00 10 00 00 00 3a 49 0a 00 10 00 00 00 4b 49 0a 00 a0 01 00 00 | mE..~....E......:I......KI...... |
a260 | 5c 49 0a 00 98 01 00 00 fd 4a 0a 00 99 01 00 00 96 4c 0a 00 10 00 00 00 30 4e 0a 00 4a 00 00 00 | \I.......J.......L......0N..J... |
a280 | 41 4e 0a 00 16 00 00 00 8c 4e 0a 00 93 00 00 00 a3 4e 0a 00 2f 01 00 00 37 4f 0a 00 2e 01 00 00 | AN.......N.......N../...7O...... |
a2a0 | 67 50 0a 00 0b 00 00 00 96 51 0a 00 2e 00 00 00 a2 51 0a 00 2d 00 00 00 d1 51 0a 00 37 00 00 00 | gP.......Q.......Q..-....Q..7... |
a2c0 | ff 51 0a 00 33 00 00 00 37 52 0a 00 29 00 00 00 6b 52 0a 00 3b 00 00 00 95 52 0a 00 1e 00 00 00 | .Q..3...7R..)...kR..;....R...... |
a2e0 | d1 52 0a 00 3b 00 00 00 f0 52 0a 00 2e 00 00 00 2c 53 0a 00 4e 00 00 00 5b 53 0a 00 11 00 00 00 | .R..;....R......,S..N...[S...... |
a300 | aa 53 0a 00 06 00 00 00 bc 53 0a 00 11 00 00 00 c3 53 0a 00 06 00 00 00 d5 53 0a 00 2d 00 00 00 | .S.......S.......S.......S..-... |
a320 | dc 53 0a 00 25 00 00 00 0a 54 0a 00 09 00 00 00 30 54 0a 00 b9 00 00 00 3a 54 0a 00 0c 00 00 00 | .S..%....T......0T......:T...... |
a340 | f4 54 0a 00 0c 00 00 00 01 55 0a 00 0c 00 00 00 0e 55 0a 00 13 00 00 00 1b 55 0a 00 30 00 00 00 | .T.......U.......U.......U..0... |
a360 | 2f 55 0a 00 31 00 00 00 60 55 0a 00 07 00 00 00 92 55 0a 00 07 00 00 00 9a 55 0a 00 0d 00 00 00 | /U..1...`U.......U.......U...... |
a380 | a2 55 0a 00 14 00 00 00 b0 55 0a 00 1d 00 00 00 c5 55 0a 00 49 00 00 00 e3 55 0a 00 19 00 00 00 | .U.......U.......U..I....U...... |
a3a0 | 2d 56 0a 00 0a 00 00 00 47 56 0a 00 24 00 00 00 52 56 0a 00 27 00 00 00 77 56 0a 00 0b 00 00 00 | -V......GV..$...RV..'...wV...... |
a3c0 | 9f 56 0a 00 10 00 00 00 ab 56 0a 00 10 00 00 00 bc 56 0a 00 70 00 00 00 cd 56 0a 00 57 00 00 00 | .V.......V.......V..p....V..W... |
a3e0 | 3e 57 0a 00 42 00 00 00 96 57 0a 00 32 00 00 00 d9 57 0a 00 37 00 00 00 0c 58 0a 00 5a 00 00 00 | >W..B....W..2....W..7....X..Z... |
a400 | 44 58 0a 00 a3 00 00 00 9f 58 0a 00 74 00 00 00 43 59 0a 00 35 01 00 00 b8 59 0a 00 73 00 00 00 | DX.......X..t...CY..5....Y..s... |
a420 | ee 5a 0a 00 16 01 00 00 62 5b 0a 00 7e 00 00 00 79 5c 0a 00 49 00 00 00 f8 5c 0a 00 2f 02 00 00 | .Z......b[..~...y\..I....\../... |
a440 | 42 5d 0a 00 6f 00 00 00 72 5f 0a 00 39 01 00 00 e2 5f 0a 00 dd 00 00 00 1c 61 0a 00 20 00 00 00 | B]..o...r_..9...._.......a...... |
a460 | fa 61 0a 00 30 00 00 00 1b 62 0a 00 14 00 00 00 4c 62 0a 00 2c 00 00 00 61 62 0a 00 90 00 00 00 | .a..0....b......Lb..,...ab...... |
a480 | 8e 62 0a 00 52 00 00 00 1f 63 0a 00 58 00 00 00 72 63 0a 00 26 00 00 00 cb 63 0a 00 58 00 00 00 | .b..R....c..X...rc..&....c..X... |
a4a0 | f2 63 0a 00 e4 00 00 00 4b 64 0a 00 68 00 00 00 30 65 0a 00 5d 00 00 00 99 65 0a 00 6c 00 00 00 | .c......Kd..h...0e..]....e..l... |
a4c0 | f7 65 0a 00 5a 00 00 00 64 66 0a 00 a4 00 00 00 bf 66 0a 00 eb 00 00 00 64 67 0a 00 41 00 00 00 | .e..Z...df.......f......dg..A... |
a4e0 | 50 68 0a 00 52 00 00 00 92 68 0a 00 6d 00 00 00 e5 68 0a 00 c7 00 00 00 53 69 0a 00 f1 00 00 00 | Ph..R....h..m....h......Si...... |
a500 | 1b 6a 0a 00 08 00 00 00 0d 6b 0a 00 35 00 00 00 16 6b 0a 00 32 00 00 00 4c 6b 0a 00 4c 00 00 00 | .j.......k..5....k..2...Lk..L... |
a520 | 7f 6b 0a 00 30 00 00 00 cc 6b 0a 00 38 00 00 00 fd 6b 0a 00 36 00 00 00 36 6c 0a 00 19 00 00 00 | .k..0....k..8....k..6...6l...... |
a540 | 6d 6c 0a 00 3a 00 00 00 87 6c 0a 00 37 00 00 00 c2 6c 0a 00 7b 01 00 00 fa 6c 0a 00 36 00 00 00 | ml..:....l..7....l..{....l..6... |
a560 | 76 6e 0a 00 47 00 00 00 ad 6e 0a 00 55 00 00 00 f5 6e 0a 00 35 00 00 00 4b 6f 0a 00 29 00 00 00 | vn..G....n..U....n..5...Ko..)... |
a580 | 81 6f 0a 00 23 00 00 00 ab 6f 0a 00 24 00 00 00 cf 6f 0a 00 af 00 00 00 f4 6f 0a 00 6c 00 00 00 | .o..#....o..$....o.......o..l... |
a5a0 | a4 70 0a 00 a7 00 00 00 11 71 0a 00 ee 00 00 00 b9 71 0a 00 47 00 00 00 a8 72 0a 00 47 00 00 00 | .p.......q.......q..G....r..G... |
a5c0 | f0 72 0a 00 3a 00 00 00 38 73 0a 00 4b 00 00 00 73 73 0a 00 5a 01 00 00 bf 73 0a 00 9f 01 00 00 | .r..:...8s..K...ss..Z....s...... |
a5e0 | 1a 75 0a 00 b5 00 00 00 ba 76 0a 00 51 00 00 00 70 77 0a 00 31 00 00 00 c2 77 0a 00 1a 00 00 00 | .u.......v..Q...pw..1....w...... |
a600 | f4 77 0a 00 4c 00 00 00 0f 78 0a 00 80 00 00 00 5c 78 0a 00 26 00 00 00 dd 78 0a 00 26 00 00 00 | .w..L....x......\x..&....x..&... |
a620 | 04 79 0a 00 40 00 00 00 2b 79 0a 00 09 00 00 00 6c 79 0a 00 3c 00 00 00 76 79 0a 00 42 00 00 00 | .y..@...+y......ly..<...vy..B... |
a640 | b3 79 0a 00 b1 00 00 00 f6 79 0a 00 54 00 00 00 a8 7a 0a 00 2c 00 00 00 fd 7a 0a 00 47 00 00 00 | .y.......y..T....z..,....z..G... |
a660 | 2a 7b 0a 00 bc 00 00 00 72 7b 0a 00 bf 00 00 00 2f 7c 0a 00 1e 00 00 00 ef 7c 0a 00 37 00 00 00 | *{......r{....../|.......|..7... |
a680 | 0e 7d 0a 00 33 00 00 00 46 7d 0a 00 9a 00 00 00 7a 7d 0a 00 01 00 00 00 15 7e 0a 00 2c 00 00 00 | .}..3...F}......z}.......~..,... |
a6a0 | 17 7e 0a 00 11 00 00 00 44 7e 0a 00 06 00 00 00 56 7e 0a 00 06 00 00 00 5d 7e 0a 00 06 00 00 00 | .~......D~......V~......]~...... |
a6c0 | 64 7e 0a 00 06 00 00 00 6b 7e 0a 00 06 00 00 00 72 7e 0a 00 06 00 00 00 79 7e 0a 00 06 00 00 00 | d~......k~......r~......y~...... |
a6e0 | 80 7e 0a 00 06 00 00 00 87 7e 0a 00 06 00 00 00 8e 7e 0a 00 06 00 00 00 95 7e 0a 00 0e 00 00 00 | .~.......~.......~.......~...... |
a700 | 9c 7e 0a 00 01 00 00 00 ab 7e 0a 00 11 00 00 00 ad 7e 0a 00 0a 00 00 00 bf 7e 0a 00 1a 00 00 00 | .~.......~.......~.......~...... |
a720 | ca 7e 0a 00 b7 00 00 00 e5 7e 0a 00 02 00 00 00 9d 7f 0a 00 0e 00 00 00 a0 7f 0a 00 2d 00 00 00 | .~.......~..................-... |
a740 | af 7f 0a 00 10 00 00 00 dd 7f 0a 00 0f 00 00 00 ee 7f 0a 00 11 00 00 00 fe 7f 0a 00 13 00 00 00 | ................................ |
a760 | 10 80 0a 00 06 00 00 00 24 80 0a 00 06 00 00 00 2b 80 0a 00 06 00 00 00 32 80 0a 00 06 00 00 00 | ........$.......+.......2....... |
a780 | 39 80 0a 00 02 00 00 00 40 80 0a 00 03 00 00 00 43 80 0a 00 02 00 00 00 47 80 0a 00 08 00 00 00 | 9.......@.......C.......G....... |
a7a0 | 4a 80 0a 00 02 00 00 00 53 80 0a 00 02 00 00 00 56 80 0a 00 02 00 00 00 59 80 0a 00 02 00 00 00 | J.......S.......V.......Y....... |
a7c0 | 5c 80 0a 00 02 00 00 00 5f 80 0a 00 32 00 00 00 62 80 0a 00 02 00 00 00 95 80 0a 00 02 00 00 00 | \......._...2...b............... |
a7e0 | 98 80 0a 00 35 00 00 00 9b 80 0a 00 17 00 00 00 d1 80 0a 00 01 00 00 00 e9 80 0a 00 1a 00 00 00 | ....5........................... |
a800 | eb 80 0a 00 80 00 00 00 06 81 0a 00 02 00 00 00 87 81 0a 00 02 00 00 00 8a 81 0a 00 02 00 00 00 | ................................ |
a820 | 8d 81 0a 00 02 00 00 00 90 81 0a 00 11 00 00 00 93 81 0a 00 11 00 00 00 a5 81 0a 00 03 00 00 00 | ................................ |
a840 | b7 81 0a 00 02 00 00 00 bb 81 0a 00 02 00 00 00 be 81 0a 00 63 00 00 00 c1 81 0a 00 0f 00 00 00 | ....................c........... |
a860 | 25 82 0a 00 01 00 00 00 35 82 0a 00 20 00 00 00 37 82 0a 00 02 00 00 00 58 82 0a 00 02 00 00 00 | %.......5.......7.......X....... |
a880 | 5b 82 0a 00 02 00 00 00 5e 82 0a 00 02 00 00 00 61 82 0a 00 01 00 00 00 64 82 0a 00 1a 00 00 00 | [.......^.......a.......d....... |
a8a0 | 66 82 0a 00 a2 00 00 00 81 82 0a 00 e6 00 00 00 24 83 0a 00 11 00 00 00 0b 84 0a 00 02 00 00 00 | f...............$............... |
a8c0 | 1d 84 0a 00 02 00 00 00 20 84 0a 00 02 00 00 00 23 84 0a 00 01 00 00 00 26 84 0a 00 11 00 00 00 | ................#.......&....... |
a8e0 | 28 84 0a 00 c3 00 00 00 3a 84 0a 00 0f 00 00 00 fe 84 0a 00 11 00 00 00 0e 85 0a 00 02 00 00 00 | (.......:....................... |
a900 | 20 85 0a 00 01 00 00 00 23 85 0a 00 6b 00 00 00 25 85 0a 00 02 00 00 00 91 85 0a 00 3b 00 00 00 | ........#...k...%...........;... |
a920 | 94 85 0a 00 02 00 00 00 d0 85 0a 00 02 00 00 00 d3 85 0a 00 0a 00 00 00 d6 85 0a 00 6b 02 00 00 | ............................k... |
a940 | e1 85 0a 00 01 00 00 00 4d 88 0a 00 02 00 00 00 4f 88 0a 00 01 00 00 00 52 88 0a 00 6c 00 00 00 | ........M.......O.......R...l... |
a960 | 54 88 0a 00 01 00 00 00 c1 88 0a 00 76 00 00 00 c3 88 0a 00 61 01 00 00 3a 89 0a 00 8b 00 00 00 | T...........v.......a...:....... |
a980 | 9c 8a 0a 00 10 01 00 00 28 8b 0a 00 36 00 00 00 39 8c 0a 00 22 01 00 00 70 8c 0a 00 26 02 00 00 | ........(...6...9..."...p...&... |
a9a0 | 93 8d 0a 00 ec 00 00 00 ba 8f 0a 00 8b 00 00 00 a7 90 0a 00 8c 01 00 00 33 91 0a 00 bd 00 00 00 | ........................3....... |
a9c0 | c0 92 0a 00 08 02 00 00 7e 93 0a 00 53 01 00 00 87 95 0a 00 dc 00 00 00 db 96 0a 00 4f 00 00 00 | ........~...S...............O... |
a9e0 | b8 97 0a 00 aa 03 00 00 08 98 0a 00 8b 01 00 00 b3 9b 0a 00 80 01 00 00 3f 9d 0a 00 b5 01 00 00 | ........................?....... |
aa00 | c0 9e 0a 00 61 00 00 00 76 a0 0a 00 8f 05 00 00 d8 a0 0a 00 32 02 00 00 68 a6 0a 00 0b 01 00 00 | ....a...v...........2...h....... |
aa20 | 9b a8 0a 00 3d 02 00 00 a7 a9 0a 00 7e 00 00 00 e5 ab 0a 00 37 00 00 00 64 ac 0a 00 8f 01 00 00 | ....=.......~.......7...d....... |
aa40 | 9c ac 0a 00 01 01 00 00 2c ae 0a 00 da 01 00 00 2e af 0a 00 3e 01 00 00 09 b1 0a 00 8e 02 00 00 | ........,...........>........... |
aa60 | 48 b2 0a 00 a6 00 00 00 d7 b4 0a 00 e3 01 00 00 7e b5 0a 00 af 01 00 00 62 b7 0a 00 f6 01 00 00 | H...............~.......b....... |
aa80 | 12 b9 0a 00 17 02 00 00 09 bb 0a 00 d9 01 00 00 21 bd 0a 00 8e 00 00 00 fb be 0a 00 57 01 00 00 | ................!...........W... |
aaa0 | 8a bf 0a 00 82 00 00 00 e2 c0 0a 00 fb 00 00 00 65 c1 0a 00 b4 01 00 00 61 c2 0a 00 d6 01 00 00 | ................e.......a....... |
aac0 | 16 c4 0a 00 59 01 00 00 ed c5 0a 00 50 01 00 00 47 c7 0a 00 be 01 00 00 98 c8 0a 00 68 01 00 00 | ....Y.......P...G...........h... |
aae0 | 57 ca 0a 00 04 02 00 00 c0 cb 0a 00 84 00 00 00 c5 cd 0a 00 f9 00 00 00 4a ce 0a 00 a4 00 00 00 | W.......................J....... |
ab00 | 44 cf 0a 00 43 00 00 00 e9 cf 0a 00 5c 00 00 00 2d d0 0a 00 52 00 00 00 8a d0 0a 00 46 00 00 00 | D...C.......\...-...R.......F... |
ab20 | dd d0 0a 00 50 00 00 00 24 d1 0a 00 48 00 00 00 75 d1 0a 00 4c 00 00 00 be d1 0a 00 47 00 00 00 | ....P...$...H...u...L.......G... |
ab40 | 0b d2 0a 00 48 00 00 00 53 d2 0a 00 41 00 00 00 9c d2 0a 00 44 00 00 00 de d2 0a 00 19 00 00 00 | ....H...S...A.......D........... |
ab60 | 23 d3 0a 00 29 00 00 00 3d d3 0a 00 12 00 00 00 67 d3 0a 00 3d 00 00 00 7a d3 0a 00 13 00 00 00 | #...)...=.......g...=...z....... |
ab80 | b8 d3 0a 00 3f 00 00 00 cc d3 0a 00 13 00 00 00 0c d4 0a 00 3f 00 00 00 20 d4 0a 00 15 00 00 00 | ....?...............?........... |
aba0 | 60 d4 0a 00 43 00 00 00 76 d4 0a 00 15 00 00 00 ba d4 0a 00 43 00 00 00 d0 d4 0a 00 31 01 00 00 | `...C...v...........C.......1... |
abc0 | 14 d5 0a 00 11 00 00 00 46 d6 0a 00 80 01 00 00 58 d6 0a 00 41 01 00 00 d9 d7 0a 00 19 00 00 00 | ........F.......X...A........... |
abe0 | 1b d9 0a 00 37 00 00 00 35 d9 0a 00 2a 00 00 00 6d d9 0a 00 39 00 00 00 98 d9 0a 00 29 00 00 00 | ....7...5...*...m...9.......)... |
ac00 | d2 d9 0a 00 07 00 00 00 fc d9 0a 00 4d 00 00 00 04 da 0a 00 b6 00 00 00 52 da 0a 00 40 00 00 00 | ............M...........R...@... |
ac20 | 09 db 0a 00 2f 00 00 00 4a db 0a 00 32 00 00 00 7a db 0a 00 35 00 00 00 ad db 0a 00 1d 00 00 00 | ..../...J...2...z...5........... |
ac40 | e3 db 0a 00 27 00 00 00 01 dc 0a 00 1f 00 00 00 29 dc 0a 00 36 00 00 00 49 dc 0a 00 39 00 00 00 | ....'...........)...6...I...9... |
ac60 | 80 dc 0a 00 18 01 00 00 ba dc 0a 00 1e 00 00 00 d3 dd 0a 00 5c 00 00 00 f2 dd 0a 00 37 01 00 00 | ....................\.......7... |
ac80 | 4f de 0a 00 cb 01 00 00 87 df 0a 00 59 01 00 00 53 e1 0a 00 3a 01 00 00 ad e2 0a 00 2d 00 00 00 | O...........Y...S...:.......-... |
aca0 | e8 e3 0a 00 3a 00 00 00 16 e4 0a 00 6d 00 00 00 51 e4 0a 00 77 00 00 00 bf e4 0a 00 8b 00 00 00 | ....:.......m...Q...w........... |
acc0 | 37 e5 0a 00 cc 01 00 00 c3 e5 0a 00 ba 00 00 00 90 e7 0a 00 16 00 00 00 4b e8 0a 00 33 00 00 00 | 7.......................K...3... |
ace0 | 62 e8 0a 00 28 00 00 00 96 e8 0a 00 77 01 00 00 bf e8 0a 00 51 00 00 00 37 ea 0a 00 74 00 00 00 | b...(.......w.......Q...7...t... |
ad00 | 89 ea 0a 00 26 00 00 00 fe ea 0a 00 85 00 00 00 25 eb 0a 00 8b 00 00 00 ab eb 0a 00 cf 00 00 00 | ....&...........%............... |
ad20 | 37 ec 0a 00 34 01 00 00 07 ed 0a 00 2f 00 00 00 3c ee 0a 00 72 00 00 00 6c ee 0a 00 65 00 00 00 | 7...4......./...<...r...l...e... |
ad40 | df ee 0a 00 31 00 00 00 45 ef 0a 00 01 01 00 00 77 ef 0a 00 33 00 00 00 79 f0 0a 00 3c 00 00 00 | ....1...E.......w...3...y...<... |
ad60 | ad f0 0a 00 93 01 00 00 ea f0 0a 00 e4 01 00 00 7e f2 0a 00 63 00 00 00 63 f4 0a 00 d4 00 00 00 | ................~...c...c....... |
ad80 | c7 f4 0a 00 ed 00 00 00 9c f5 0a 00 78 00 00 00 8a f6 0a 00 90 00 00 00 03 f7 0a 00 c0 01 00 00 | ............x................... |
ada0 | 94 f7 0a 00 a2 00 00 00 55 f9 0a 00 88 00 00 00 f8 f9 0a 00 4e 00 00 00 81 fa 0a 00 58 00 00 00 | ........U...........N.......X... |
adc0 | d0 fa 0a 00 08 01 00 00 29 fb 0a 00 65 00 00 00 32 fc 0a 00 7e 00 00 00 98 fc 0a 00 48 01 00 00 | ........)...e...2...~.......H... |
ade0 | 17 fd 0a 00 35 01 00 00 60 fe 0a 00 90 00 00 00 96 ff 0a 00 a3 00 00 00 27 00 0b 00 02 01 00 00 | ....5...`...............'....... |
ae00 | cb 00 0b 00 3f 00 00 00 ce 01 0b 00 24 00 00 00 0e 02 0b 00 22 01 00 00 33 02 0b 00 1c 00 00 00 | ....?.......$......."...3....... |
ae20 | 56 03 0b 00 2c 00 00 00 73 03 0b 00 43 00 00 00 a0 03 0b 00 c8 00 00 00 e4 03 0b 00 b8 00 00 00 | V...,...s...C................... |
ae40 | ad 04 0b 00 b1 01 00 00 66 05 0b 00 4f 00 00 00 18 07 0b 00 37 00 00 00 68 07 0b 00 26 00 00 00 | ........f...O.......7...h...&... |
ae60 | a0 07 0b 00 0a 02 00 00 c7 07 0b 00 62 00 00 00 d2 09 0b 00 41 00 00 00 35 0a 0b 00 3d 00 00 00 | ............b.......A...5...=... |
ae80 | 77 0a 0b 00 5e 00 00 00 b5 0a 0b 00 35 00 00 00 14 0b 0b 00 77 00 00 00 4a 0b 0b 00 04 00 00 00 | w...^.......5.......w...J....... |
aea0 | c2 0b 0b 00 1c 00 00 00 c7 0b 0b 00 03 00 00 00 e4 0b 0b 00 03 00 00 00 e8 0b 0b 00 5c 00 00 00 | ............................\... |
aec0 | ec 0b 0b 00 a7 01 00 00 49 0c 0b 00 0c 00 00 00 f1 0d 0b 00 a8 00 00 00 fe 0d 0b 00 70 00 00 00 | ........I...................p... |
aee0 | a7 0e 0b 00 3c 00 00 00 18 0f 0b 00 33 00 00 00 55 0f 0b 00 12 00 00 00 89 0f 0b 00 0c 00 00 00 | ....<.......3...U............... |
af00 | 9c 0f 0b 00 79 00 00 00 a9 0f 0b 00 45 00 00 00 23 10 0b 00 07 00 00 00 69 10 0b 00 10 00 00 00 | ....y.......E...#.......i....... |
af20 | 71 10 0b 00 22 00 00 00 82 10 0b 00 68 00 00 00 a5 10 0b 00 41 00 00 00 0e 11 0b 00 40 00 00 00 | q...".......h.......A.......@... |
af40 | 50 11 0b 00 23 00 00 00 91 11 0b 00 c5 00 00 00 b5 11 0b 00 9f 00 00 00 7b 12 0b 00 3c 00 00 00 | P...#...................{...<... |
af60 | 1b 13 0b 00 35 00 00 00 58 13 0b 00 4e 00 00 00 8e 13 0b 00 86 00 00 00 dd 13 0b 00 68 00 00 00 | ....5...X...N...............h... |
af80 | 64 14 0b 00 63 00 00 00 cd 14 0b 00 2f 00 00 00 31 15 0b 00 48 00 00 00 61 15 0b 00 a3 00 00 00 | d...c......./...1...H...a....... |
afa0 | aa 15 0b 00 b8 00 00 00 4e 16 0b 00 81 00 00 00 07 17 0b 00 46 00 00 00 89 17 0b 00 1c 00 00 00 | ........N...........F........... |
afc0 | d0 17 0b 00 7d 00 00 00 ed 17 0b 00 60 00 00 00 6b 18 0b 00 ee 00 00 00 cc 18 0b 00 09 01 00 00 | ....}.......`...k............... |
afe0 | bb 19 0b 00 68 00 00 00 c5 1a 0b 00 07 00 00 00 2e 1b 0b 00 12 00 00 00 36 1b 0b 00 10 00 00 00 | ....h...................6....... |
b000 | 49 1b 0b 00 0e 00 00 00 5a 1b 0b 00 42 00 00 00 69 1b 0b 00 0d 00 00 00 ac 1b 0b 00 24 00 00 00 | I.......Z...B...i...........$... |
b020 | ba 1b 0b 00 c6 00 00 00 df 1b 0b 00 ba 00 00 00 a6 1c 0b 00 17 00 00 00 61 1d 0b 00 1a 00 00 00 | ........................a....... |
b040 | 79 1d 0b 00 10 00 00 00 94 1d 0b 00 c7 00 00 00 a5 1d 0b 00 1a 00 00 00 6d 1e 0b 00 3c 00 00 00 | y.......................m...<... |
b060 | 88 1e 0b 00 1a 00 00 00 c5 1e 0b 00 14 00 00 00 e0 1e 0b 00 7e 00 00 00 f5 1e 0b 00 74 00 00 00 | ....................~.......t... |
b080 | 74 1f 0b 00 26 01 00 00 e9 1f 0b 00 40 01 00 00 10 21 0b 00 74 00 00 00 51 22 0b 00 63 01 00 00 | t...&.......@....!..t...Q"..c... |
b0a0 | c6 22 0b 00 2e 00 00 00 2a 24 0b 00 05 00 00 00 59 24 0b 00 09 00 00 00 5f 24 0b 00 07 00 00 00 | ."......*$......Y$......_$...... |
b0c0 | 69 24 0b 00 66 00 00 00 71 24 0b 00 4f 00 00 00 d8 24 0b 00 9a 00 00 00 28 25 0b 00 b1 00 00 00 | i$..f...q$..O....$......(%...... |
b0e0 | c3 25 0b 00 0e 00 00 00 75 26 0b 00 67 00 00 00 84 26 0b 00 ae 00 00 00 ec 26 0b 00 89 00 00 00 | .%......u&..g....&.......&...... |
b100 | 9b 27 0b 00 28 00 00 00 25 28 0b 00 3a 00 00 00 4e 28 0b 00 ac 00 00 00 89 28 0b 00 74 00 00 00 | .'..(...%(..:...N(.......(..t... |
b120 | 36 29 0b 00 97 00 00 00 ab 29 0b 00 3a 00 00 00 43 2a 0b 00 40 00 00 00 7e 2a 0b 00 27 00 00 00 | 6).......)..:...C*..@...~*..'... |
b140 | bf 2a 0b 00 29 00 00 00 e7 2a 0b 00 21 00 00 00 11 2b 0b 00 08 01 00 00 33 2b 0b 00 61 01 00 00 | .*..)....*..!....+......3+..a... |
b160 | 3c 2c 0b 00 2e 00 00 00 9e 2d 0b 00 80 00 00 00 cd 2d 0b 00 7b 00 00 00 4e 2e 0b 00 30 00 00 00 | <,.......-.......-..{...N...0... |
b180 | ca 2e 0b 00 c8 00 00 00 fb 2e 0b 00 c8 00 00 00 c4 2f 0b 00 9c 00 00 00 8d 30 0b 00 40 00 00 00 | ................./.......0..@... |
b1a0 | 2a 31 0b 00 b7 00 00 00 6b 31 0b 00 b7 00 00 00 23 32 0b 00 5a 00 00 00 db 32 0b 00 c4 00 00 00 | *1......k1......#2..Z....2...... |
b1c0 | 36 33 0b 00 6e 00 00 00 fb 33 0b 00 a5 00 00 00 6a 34 0b 00 c3 00 00 00 10 35 0b 00 18 00 00 00 | 63..n....3......j4.......5...... |
b1e0 | d4 35 0b 00 54 00 00 00 ed 35 0b 00 89 00 00 00 42 36 0b 00 6b 00 00 00 cc 36 0b 00 3d 00 00 00 | .5..T....5......B6..k....6..=... |
b200 | 38 37 0b 00 91 00 00 00 76 37 0b 00 81 00 00 00 08 38 0b 00 39 00 00 00 8a 38 0b 00 3e 01 00 00 | 87......v7.......8..9....8..>... |
b220 | c4 38 0b 00 58 00 00 00 03 3a 0b 00 c2 00 00 00 5c 3a 0b 00 6a 00 00 00 1f 3b 0b 00 85 02 00 00 | .8..X....:......\:..j....;...... |
b240 | 8a 3b 0b 00 cb 00 00 00 10 3e 0b 00 40 00 00 00 dc 3e 0b 00 5f 00 00 00 1d 3f 0b 00 9e 01 00 00 | .;.......>..@....>.._....?...... |
b260 | 7d 3f 0b 00 9f 01 00 00 1c 41 0b 00 84 01 00 00 bc 42 0b 00 bb 00 00 00 41 44 0b 00 56 00 00 00 | }?.......A.......B......AD..V... |
b280 | fd 44 0b 00 39 00 00 00 54 45 0b 00 1d 00 00 00 8e 45 0b 00 4b 00 00 00 ac 45 0b 00 0b 00 00 00 | .D..9...TE.......E..K....E...... |
b2a0 | f8 45 0b 00 02 01 00 00 04 46 0b 00 30 00 00 00 07 47 0b 00 5d 00 00 00 38 47 0b 00 5d 00 00 00 | .E.......F..0....G..]...8G..]... |
b2c0 | 96 47 0b 00 1a 00 00 00 f4 47 0b 00 0d 00 00 00 0f 48 0b 00 3b 00 00 00 1d 48 0b 00 15 00 00 00 | .G.......G.......H..;....H...... |
b2e0 | 59 48 0b 00 34 00 00 00 6f 48 0b 00 2c 00 00 00 a4 48 0b 00 2f 00 00 00 d1 48 0b 00 c8 00 00 00 | YH..4...oH..,....H../....H...... |
b300 | 01 49 0b 00 43 01 00 00 ca 49 0b 00 9c 00 00 00 0e 4b 0b 00 3e 00 00 00 ab 4b 0b 00 ad 00 00 00 | .I..C....I.......K..>....K...... |
b320 | ea 4b 0b 00 aa 00 00 00 98 4c 0b 00 44 00 00 00 43 4d 0b 00 1d 00 00 00 88 4d 0b 00 23 00 00 00 | .K.......L..D...CM.......M..#... |
b340 | a6 4d 0b 00 19 00 00 00 ca 4d 0b 00 12 00 00 00 e4 4d 0b 00 43 00 00 00 f7 4d 0b 00 31 00 00 00 | .M.......M.......M..C....M..1... |
b360 | 3b 4e 0b 00 0a 00 00 00 6d 4e 0b 00 08 00 00 00 78 4e 0b 00 28 01 00 00 81 4e 0b 00 81 00 00 00 | ;N......mN......xN..(....N...... |
b380 | aa 4f 0b 00 aa 00 00 00 2c 50 0b 00 d5 00 00 00 d7 50 0b 00 a5 01 00 00 ad 51 0b 00 71 00 00 00 | .O......,P.......P.......Q..q... |
b3a0 | 53 53 0b 00 78 00 00 00 c5 53 0b 00 99 00 00 00 3e 54 0b 00 1d 01 00 00 d8 54 0b 00 49 01 00 00 | SS..x....S......>T.......T..I... |
b3c0 | f6 55 0b 00 18 01 00 00 40 57 0b 00 1a 01 00 00 59 58 0b 00 39 01 00 00 74 59 0b 00 5f 00 00 00 | .U......@W......YX..9...tY.._... |
b3e0 | ae 5a 0b 00 32 01 00 00 0e 5b 0b 00 82 00 00 00 41 5c 0b 00 a2 00 00 00 c4 5c 0b 00 93 00 00 00 | .Z..2....[......A\.......\...... |
b400 | 67 5d 0b 00 af 00 00 00 fb 5d 0b 00 7e 00 00 00 ab 5e 0b 00 47 00 00 00 2a 5f 0b 00 83 00 00 00 | g].......]..~....^..G...*_...... |
b420 | 72 5f 0b 00 6e 00 00 00 f6 5f 0b 00 91 00 00 00 65 60 0b 00 59 00 00 00 f7 60 0b 00 96 00 00 00 | r_..n...._......e`..Y....`...... |
b440 | 51 61 0b 00 8e 00 00 00 e8 61 0b 00 c1 00 00 00 77 62 0b 00 59 01 00 00 39 63 0b 00 23 00 00 00 | Qa.......a......wb..Y...9c..#... |
b460 | 93 64 0b 00 43 00 00 00 b7 64 0b 00 27 00 00 00 fb 64 0b 00 2d 00 00 00 23 65 0b 00 3b 00 00 00 | .d..C....d..'....d..-...#e..;... |
b480 | 51 65 0b 00 6e 00 00 00 8d 65 0b 00 82 00 00 00 fc 65 0b 00 68 00 00 00 7f 66 0b 00 19 00 00 00 | Qe..n....e.......e..h....f...... |
b4a0 | e8 66 0b 00 19 00 00 00 02 67 0b 00 19 00 00 00 1c 67 0b 00 19 00 00 00 36 67 0b 00 19 00 00 00 | .f.......g.......g......6g...... |
b4c0 | 50 67 0b 00 19 00 00 00 6a 67 0b 00 19 00 00 00 84 67 0b 00 19 00 00 00 9e 67 0b 00 19 00 00 00 | Pg......jg.......g.......g...... |
b4e0 | b8 67 0b 00 19 00 00 00 d2 67 0b 00 19 00 00 00 ec 67 0b 00 19 00 00 00 06 68 0b 00 7b 00 00 00 | .g.......g.......g.......h..{... |
b500 | 20 68 0b 00 c2 00 00 00 9c 68 0b 00 41 00 00 00 5f 69 0b 00 c0 00 00 00 a1 69 0b 00 68 00 00 00 | .h.......h..A..._i.......i..h... |
b520 | 62 6a 0b 00 0e 00 00 00 cb 6a 0b 00 16 00 00 00 da 6a 0b 00 1f 00 00 00 f1 6a 0b 00 25 00 00 00 | bj.......j.......j.......j..%... |
b540 | 11 6b 0b 00 29 00 00 00 37 6b 0b 00 24 00 00 00 61 6b 0b 00 e6 00 00 00 86 6b 0b 00 20 00 00 00 | .k..)...7k..$...ak.......k...... |
b560 | 6d 6c 0b 00 14 00 00 00 8e 6c 0b 00 45 00 00 00 a3 6c 0b 00 13 00 00 00 e9 6c 0b 00 17 00 00 00 | ml.......l..E....l.......l...... |
b580 | fd 6c 0b 00 17 00 00 00 15 6d 0b 00 e7 00 00 00 2d 6d 0b 00 3d 00 00 00 15 6e 0b 00 12 00 00 00 | .l.......m......-m..=....n...... |
b5a0 | 53 6e 0b 00 14 00 00 00 66 6e 0b 00 13 00 00 00 7b 6e 0b 00 03 00 00 00 8f 6e 0b 00 1b 00 00 00 | Sn......fn......{n.......n...... |
b5c0 | 93 6e 0b 00 59 00 00 00 af 6e 0b 00 03 00 00 00 09 6f 0b 00 14 00 00 00 0d 6f 0b 00 14 00 00 00 | .n..Y....n.......o.......o...... |
b5e0 | 22 6f 0b 00 1d 00 00 00 37 6f 0b 00 1a 00 00 00 55 6f 0b 00 0b 00 00 00 70 6f 0b 00 18 00 00 00 | "o......7o......Uo......po...... |
b600 | 7c 6f 0b 00 19 00 00 00 95 6f 0b 00 44 00 00 00 af 6f 0b 00 1a 00 00 00 f4 6f 0b 00 1f 00 00 00 | |o.......o..D....o.......o...... |
b620 | 0f 70 0b 00 1c 00 00 00 2f 70 0b 00 20 00 00 00 4c 70 0b 00 65 01 00 00 6d 70 0b 00 54 01 00 00 | .p....../p......Lp..e...mp..T... |
b640 | d3 71 0b 00 c3 02 00 00 28 73 0b 00 05 00 00 00 ec 75 0b 00 67 00 00 00 f2 75 0b 00 81 01 00 00 | .q......(s.......u..g....u...... |
b660 | 5a 76 0b 00 07 00 00 00 dc 77 0b 00 13 00 00 00 e4 77 0b 00 0f 00 00 00 f8 77 0b 00 1e 00 00 00 | Zv.......w.......w.......w...... |
b680 | 08 78 0b 00 11 00 00 00 27 78 0b 00 21 00 00 00 39 78 0b 00 4c 00 00 00 5b 78 0b 00 50 00 00 00 | .x......'x..!...9x..L...[x..P... |
b6a0 | a8 78 0b 00 69 00 00 00 f9 78 0b 00 55 00 00 00 63 79 0b 00 55 00 00 00 b9 79 0b 00 17 00 00 00 | .x..i....x..U...cy..U....y...... |
b6c0 | 0f 7a 0b 00 0e 00 00 00 27 7a 0b 00 0e 00 00 00 36 7a 0b 00 3f 00 00 00 45 7a 0b 00 36 00 00 00 | .z......'z......6z..?...Ez..6... |
b6e0 | 85 7a 0b 00 0b 00 00 00 bc 7a 0b 00 d1 00 00 00 c8 7a 0b 00 19 00 00 00 9a 7b 0b 00 87 00 00 00 | .z.......z.......z.......{...... |
b700 | b4 7b 0b 00 89 00 00 00 3c 7c 0b 00 db 00 00 00 c6 7c 0b 00 55 00 00 00 a2 7d 0b 00 75 00 00 00 | .{......<|.......|..U....}..u... |
b720 | f8 7d 0b 00 27 00 00 00 6e 7e 0b 00 1c 00 00 00 96 7e 0b 00 7d 01 00 00 b3 7e 0b 00 11 00 00 00 | .}..'...n~.......~..}....~...... |
b740 | 31 80 0b 00 0c 00 00 00 43 80 0b 00 2f 00 00 00 50 80 0b 00 3f 00 00 00 80 80 0b 00 63 00 00 00 | 1.......C.../...P...?.......c... |
b760 | c0 80 0b 00 09 00 00 00 24 81 0b 00 5d 00 00 00 2e 81 0b 00 58 00 00 00 8c 81 0b 00 59 00 00 00 | ........$...].......X.......Y... |
b780 | e5 81 0b 00 34 00 00 00 3f 82 0b 00 17 00 00 00 74 82 0b 00 0c 00 00 00 8c 82 0b 00 25 00 00 00 | ....4...?.......t...........%... |
b7a0 | 99 82 0b 00 13 00 00 00 bf 82 0b 00 29 00 00 00 d3 82 0b 00 83 00 00 00 fd 82 0b 00 6e 00 00 00 | ............)...............n... |
b7c0 | 81 83 0b 00 31 00 00 00 f0 83 0b 00 06 00 00 00 22 84 0b 00 1d 00 00 00 29 84 0b 00 0e 00 00 00 | ....1...........".......)....... |
b7e0 | 47 84 0b 00 0c 00 00 00 56 84 0b 00 3f 00 00 00 63 84 0b 00 37 00 00 00 a3 84 0b 00 07 00 00 00 | G.......V...?...c...7........... |
b800 | db 84 0b 00 0b 00 00 00 e3 84 0b 00 0e 00 00 00 ef 84 0b 00 d0 00 00 00 fe 84 0b 00 9c 00 00 00 | ................................ |
b820 | cf 85 0b 00 51 00 00 00 6c 86 0b 00 9c 00 00 00 be 86 0b 00 ef 00 00 00 5b 87 0b 00 8d 01 00 00 | ....Q...l...............[....... |
b840 | 4b 88 0b 00 37 01 00 00 d9 89 0b 00 38 01 00 00 11 8b 0b 00 ce 00 00 00 4a 8c 0b 00 d9 00 00 00 | K...7.......8...........J....... |
b860 | 19 8d 0b 00 3b 00 00 00 f3 8d 0b 00 63 00 00 00 2f 8e 0b 00 78 00 00 00 93 8e 0b 00 9d 00 00 00 | ....;.......c.../...x........... |
b880 | 0c 8f 0b 00 97 00 00 00 aa 8f 0b 00 25 00 00 00 42 90 0b 00 a1 00 00 00 68 90 0b 00 3a 01 00 00 | ............%...B.......h...:... |
b8a0 | 0a 91 0b 00 16 00 00 00 45 92 0b 00 1a 00 00 00 5c 92 0b 00 0a 00 00 00 77 92 0b 00 27 00 00 00 | ........E.......\.......w...'... |
b8c0 | 82 92 0b 00 16 00 00 00 aa 92 0b 00 c8 00 00 00 c1 92 0b 00 1a 00 00 00 8a 93 0b 00 2a 00 00 00 | ............................*... |
b8e0 | a5 93 0b 00 0c 00 00 00 d0 93 0b 00 30 00 00 00 dd 93 0b 00 2c 00 00 00 0e 94 0b 00 0b 01 00 00 | ............0.......,........... |
b900 | 3b 94 0b 00 76 00 00 00 47 95 0b 00 bc 00 00 00 be 95 0b 00 91 00 00 00 7b 96 0b 00 3e 00 00 00 | ;...v...G...............{...>... |
b920 | 0d 97 0b 00 0c 00 00 00 4c 97 0b 00 46 00 00 00 59 97 0b 00 06 00 00 00 a0 97 0b 00 14 00 00 00 | ........L...F...Y............... |
b940 | a7 97 0b 00 06 00 00 00 bc 97 0b 00 9f 00 00 00 c3 97 0b 00 0e 00 00 00 63 98 0b 00 2d 00 00 00 | ........................c...-... |
b960 | 72 98 0b 00 1b 00 00 00 a0 98 0b 00 0f 00 00 00 bc 98 0b 00 07 00 00 00 cc 98 0b 00 16 00 00 00 | r............................... |
b980 | d4 98 0b 00 1d 00 00 00 eb 98 0b 00 06 00 00 00 09 99 0b 00 14 00 00 00 10 99 0b 00 15 00 00 00 | ................................ |
b9a0 | 25 99 0b 00 14 00 00 00 3b 99 0b 00 1f 00 00 00 50 99 0b 00 3d 00 00 00 70 99 0b 00 0b 00 00 00 | %.......;.......P...=...p....... |
b9c0 | ae 99 0b 00 14 00 00 00 ba 99 0b 00 12 00 00 00 cf 99 0b 00 14 00 00 00 e2 99 0b 00 6c 00 00 00 | ............................l... |
b9e0 | f7 99 0b 00 07 00 00 00 64 9a 0b 00 6a 00 00 00 6c 9a 0b 00 98 00 00 00 d7 9a 0b 00 0c 00 00 00 | ........d...j...l............... |
ba00 | 70 9b 0b 00 96 00 00 00 7d 9b 0b 00 3e 00 00 00 14 9c 0b 00 77 00 00 00 53 9c 0b 00 38 00 00 00 | p.......}...>.......w...S...8... |
ba20 | cb 9c 0b 00 08 00 00 00 04 9d 0b 00 40 00 00 00 0d 9d 0b 00 1e 00 00 00 4e 9d 0b 00 11 00 00 00 | ............@...........N....... |
ba40 | 6d 9d 0b 00 1b 00 00 00 7f 9d 0b 00 58 00 00 00 9b 9d 0b 00 0d 00 00 00 f4 9d 0b 00 15 00 00 00 | m...........X................... |
ba60 | 02 9e 0b 00 16 00 00 00 18 9e 0b 00 13 00 00 00 2f 9e 0b 00 15 00 00 00 43 9e 0b 00 2f 00 00 00 | ................/.......C.../... |
ba80 | 59 9e 0b 00 0b 01 00 00 89 9e 0b 00 af 00 00 00 95 9f 0b 00 16 00 00 00 45 a0 0b 00 59 00 00 00 | Y.......................E...Y... |
baa0 | 5c a0 0b 00 26 00 00 00 b6 a0 0b 00 20 00 00 00 dd a0 0b 00 25 00 00 00 fe a0 0b 00 a5 00 00 00 | \...&...............%........... |
bac0 | 24 a1 0b 00 09 00 00 00 ca a1 0b 00 94 00 00 00 d4 a1 0b 00 0d 00 00 00 69 a2 0b 00 51 00 00 00 | $.......................i...Q... |
bae0 | 77 a2 0b 00 25 00 00 00 c9 a2 0b 00 37 00 00 00 ef a2 0b 00 c0 00 00 00 27 a3 0b 00 71 00 00 00 | w...%.......7...........'...q... |
bb00 | e8 a3 0b 00 24 00 00 00 5a a4 0b 00 52 00 00 00 7f a4 0b 00 4e 00 00 00 d2 a4 0b 00 68 00 00 00 | ....$...Z...R.......N.......h... |
bb20 | 21 a5 0b 00 55 00 00 00 8a a5 0b 00 22 00 00 00 e0 a5 0b 00 22 00 00 00 03 a6 0b 00 4c 00 00 00 | !...U.......".......".......L... |
bb40 | 26 a6 0b 00 57 00 00 00 73 a6 0b 00 75 00 00 00 cb a6 0b 00 70 00 00 00 41 a7 0b 00 75 00 00 00 | &...W...s...u.......p...A...u... |
bb60 | b2 a7 0b 00 a4 00 00 00 28 a8 0b 00 37 00 00 00 cd a8 0b 00 fc 00 00 00 05 a9 0b 00 bb 00 00 00 | ........(...7................... |
bb80 | 02 aa 0b 00 7a 00 00 00 be aa 0b 00 77 00 00 00 39 ab 0b 00 71 00 00 00 b1 ab 0b 00 aa 00 00 00 | ....z.......w...9...q........... |
bba0 | 23 ac 0b 00 3a 00 00 00 ce ac 0b 00 2b 00 00 00 09 ad 0b 00 48 00 00 00 35 ad 0b 00 3a 00 00 00 | #...:.......+.......H...5...:... |
bbc0 | 7e ad 0b 00 60 00 00 00 b9 ad 0b 00 62 00 00 00 1a ae 0b 00 26 00 00 00 7d ae 0b 00 2b 00 00 00 | ~...`.......b.......&...}...+... |
bbe0 | a4 ae 0b 00 43 00 00 00 d0 ae 0b 00 2b 00 00 00 14 af 0b 00 5b 00 00 00 40 af 0b 00 61 00 00 00 | ....C.......+.......[...@...a... |
bc00 | 9c af 0b 00 27 00 00 00 fe af 0b 00 5b 00 00 00 26 b0 0b 00 2e 00 00 00 82 b0 0b 00 47 00 00 00 | ....'.......[...&...........G... |
bc20 | b1 b0 0b 00 9a 00 00 00 f9 b0 0b 00 31 00 00 00 94 b1 0b 00 31 00 00 00 c6 b1 0b 00 41 00 00 00 | ............1.......1.......A... |
bc40 | f8 b1 0b 00 84 00 00 00 3a b2 0b 00 5f 00 00 00 bf b2 0b 00 5f 00 00 00 1f b3 0b 00 3c 00 00 00 | ........:..._......._.......<... |
bc60 | 7f b3 0b 00 39 00 00 00 bc b3 0b 00 89 00 00 00 f6 b3 0b 00 58 00 00 00 80 b4 0b 00 2c 00 00 00 | ....9...............X.......,... |
bc80 | d9 b4 0b 00 2b 00 00 00 06 b5 0b 00 64 00 00 00 32 b5 0b 00 65 00 00 00 97 b5 0b 00 2f 00 00 00 | ....+.......d...2...e......./... |
bca0 | fd b5 0b 00 4b 00 00 00 2d b6 0b 00 5f 00 00 00 79 b6 0b 00 42 00 00 00 d9 b6 0b 00 2a 00 00 00 | ....K...-..._...y...B.......*... |
bcc0 | 1c b7 0b 00 3b 00 00 00 47 b7 0b 00 2b 00 00 00 83 b7 0b 00 34 00 00 00 af b7 0b 00 42 00 00 00 | ....;...G...+.......4.......B... |
bce0 | e4 b7 0b 00 99 00 00 00 27 b8 0b 00 3f 00 00 00 c1 b8 0b 00 3f 00 00 00 01 b9 0b 00 50 00 00 00 | ........'...?.......?.......P... |
bd00 | 41 b9 0b 00 b2 00 00 00 92 b9 0b 00 5d 00 00 00 45 ba 0b 00 49 00 00 00 a3 ba 0b 00 49 00 00 00 | A...........]...E...I.......I... |
bd20 | ed ba 0b 00 3c 00 00 00 37 bb 0b 00 1f 00 00 00 74 bb 0b 00 59 00 00 00 94 bb 0b 00 95 00 00 00 | ....<...7.......t...Y........... |
bd40 | ee bb 0b 00 38 00 00 00 84 bc 0b 00 10 00 00 00 bd bc 0b 00 92 00 00 00 ce bc 0b 00 17 00 00 00 | ....8........................... |
bd60 | 61 bd 0b 00 11 00 00 00 79 bd 0b 00 17 00 00 00 8b bd 0b 00 25 00 00 00 a3 bd 0b 00 18 00 00 00 | a.......y...........%........... |
bd80 | c9 bd 0b 00 17 00 00 00 e2 bd 0b 00 1d 00 00 00 fa bd 0b 00 21 00 00 00 18 be 0b 00 17 00 00 00 | ....................!........... |
bda0 | 3a be 0b 00 17 00 00 00 52 be 0b 00 b2 00 00 00 6a be 0b 00 42 00 00 00 1d bf 0b 00 12 00 00 00 | :.......R.......j...B........... |
bdc0 | 60 bf 0b 00 b7 00 00 00 73 bf 0b 00 44 01 00 00 2b c0 0b 00 3c 01 00 00 70 c1 0b 00 c4 01 00 00 | `.......s...D...+...<...p....... |
bde0 | ad c2 0b 00 09 00 00 00 72 c4 0b 00 0e 00 00 00 7c c4 0b 00 16 00 00 00 8b c4 0b 00 16 00 00 00 | ........r.......|............... |
be00 | a2 c4 0b 00 0d 00 00 00 b9 c4 0b 00 07 00 00 00 c7 c4 0b 00 0e 00 00 00 cf c4 0b 00 30 00 00 00 | ............................0... |
be20 | de c4 0b 00 09 00 00 00 0f c5 0b 00 12 00 00 00 19 c5 0b 00 12 00 00 00 2c c5 0b 00 11 00 00 00 | ........................,....... |
be40 | 3f c5 0b 00 49 00 00 00 51 c5 0b 00 49 00 00 00 9b c5 0b 00 c9 00 00 00 e5 c5 0b 00 b3 00 00 00 | ?...I...Q...I................... |
be60 | af c6 0b 00 36 00 00 00 63 c7 0b 00 39 00 00 00 9a c7 0b 00 81 00 00 00 d4 c7 0b 00 82 00 00 00 | ....6...c...9................... |
be80 | 56 c8 0b 00 92 00 00 00 d9 c8 0b 00 64 00 00 00 6c c9 0b 00 8a 00 00 00 d1 c9 0b 00 15 00 00 00 | V...........d...l............... |
bea0 | 5c ca 0b 00 5f 00 00 00 72 ca 0b 00 44 00 00 00 d2 ca 0b 00 69 00 00 00 17 cb 0b 00 92 00 00 00 | \..._...r...D.......i........... |
bec0 | 81 cb 0b 00 75 00 00 00 14 cc 0b 00 66 00 00 00 8a cc 0b 00 4e 00 00 00 f1 cc 0b 00 8c 00 00 00 | ....u.......f.......N........... |
bee0 | 40 cd 0b 00 56 00 00 00 cd cd 0b 00 76 00 00 00 24 ce 0b 00 73 00 00 00 9b ce 0b 00 c3 00 00 00 | @...V.......v...$...s........... |
bf00 | 0f cf 0b 00 c0 00 00 00 d3 cf 0b 00 6b 00 00 00 94 d0 0b 00 30 00 00 00 00 d1 0b 00 7b 00 00 00 | ............k.......0.......{... |
bf20 | 31 d1 0b 00 45 00 00 00 ad d1 0b 00 7f 00 00 00 f3 d1 0b 00 6d 00 00 00 73 d2 0b 00 3d 00 00 00 | 1...E...............m...s...=... |
bf40 | e1 d2 0b 00 d9 00 00 00 1f d3 0b 00 a0 00 00 00 f9 d3 0b 00 68 00 00 00 9a d4 0b 00 9c 00 00 00 | ....................h........... |
bf60 | 03 d5 0b 00 54 00 00 00 a0 d5 0b 00 2b 00 00 00 f5 d5 0b 00 21 00 00 00 21 d6 0b 00 5a 00 00 00 | ....T.......+.......!...!...Z... |
bf80 | 43 d6 0b 00 70 00 00 00 9e d6 0b 00 4a 00 00 00 0f d7 0b 00 16 00 00 00 5a d7 0b 00 19 00 00 00 | C...p.......J...........Z....... |
bfa0 | 71 d7 0b 00 25 00 00 00 8b d7 0b 00 62 00 00 00 b1 d7 0b 00 08 00 00 00 14 d8 0b 00 2d 00 00 00 | q...%.......b...............-... |
bfc0 | 1d d8 0b 00 14 00 00 00 4b d8 0b 00 14 00 00 00 60 d8 0b 00 14 00 00 00 75 d8 0b 00 14 00 00 00 | ........K.......`.......u....... |
bfe0 | 8a d8 0b 00 0d 00 00 00 9f d8 0b 00 39 00 00 00 ad d8 0b 00 43 00 00 00 e7 d8 0b 00 0b 00 00 00 | ............9.......C........... |
c000 | 2b d9 0b 00 da 00 00 00 37 d9 0b 00 f3 00 00 00 12 da 0b 00 dc 00 00 00 06 db 0b 00 dc 00 00 00 | +.......7....................... |
c020 | e3 db 0b 00 43 00 00 00 c0 dc 0b 00 3d 00 00 00 04 dd 0b 00 00 01 00 00 42 dd 0b 00 b3 00 00 00 | ....C.......=...........B....... |
c040 | 43 de 0b 00 0f 00 00 00 f7 de 0b 00 0b 00 00 00 07 df 0b 00 61 00 00 00 13 df 0b 00 0a 00 00 00 | C...................a........... |
c060 | 75 df 0b 00 0b 00 00 00 80 df 0b 00 18 00 00 00 8c df 0b 00 10 00 00 00 a5 df 0b 00 3a 00 00 00 | u...........................:... |
c080 | b6 df 0b 00 12 00 00 00 f1 df 0b 00 3c 00 00 00 04 e0 0b 00 84 00 00 00 41 e0 0b 00 14 00 00 00 | ............<...........A....... |
c0a0 | c6 e0 0b 00 4c 00 00 00 db e0 0b 00 05 00 00 00 28 e1 0b 00 15 00 00 00 2e e1 0b 00 0d 00 00 00 | ....L...........(............... |
c0c0 | 44 e1 0b 00 b6 00 00 00 52 e1 0b 00 04 00 00 00 09 e2 0b 00 bf 00 00 00 0e e2 0b 00 52 00 00 00 | D.......R...................R... |
c0e0 | ce e2 0b 00 06 00 00 00 21 e3 0b 00 0e 00 00 00 28 e3 0b 00 10 00 00 00 37 e3 0b 00 1c 00 00 00 | ........!.......(.......7....... |
c100 | 48 e3 0b 00 17 00 00 00 65 e3 0b 00 2b 00 00 00 7d e3 0b 00 05 00 00 00 a9 e3 0b 00 2f 00 00 00 | H.......e...+...}.........../... |
c120 | af e3 0b 00 34 00 00 00 df e3 0b 00 01 01 00 00 14 e4 0b 00 05 00 00 00 16 e5 0b 00 67 00 00 00 | ....4.......................g... |
c140 | 1c e5 0b 00 07 00 00 00 84 e5 0b 00 0a 00 00 00 8c e5 0b 00 15 00 00 00 97 e5 0b 00 19 00 00 00 | ................................ |
c160 | ad e5 0b 00 a4 00 00 00 c7 e5 0b 00 32 00 00 00 6c e6 0b 00 31 00 00 00 9f e6 0b 00 1d 00 00 00 | ............2...l...1........... |
c180 | d1 e6 0b 00 14 00 00 00 ef e6 0b 00 32 00 00 00 04 e7 0b 00 15 00 00 00 37 e7 0b 00 0a 00 00 00 | ............2...........7....... |
c1a0 | 4d e7 0b 00 0c 00 00 00 58 e7 0b 00 11 00 00 00 65 e7 0b 00 17 00 00 00 77 e7 0b 00 13 00 00 00 | M.......X.......e.......w....... |
c1c0 | 8f e7 0b 00 19 00 00 00 a3 e7 0b 00 74 00 00 00 bd e7 0b 00 98 00 00 00 32 e8 0b 00 24 00 00 00 | ............t...........2...$... |
c1e0 | cb e8 0b 00 25 00 00 00 f0 e8 0b 00 0d 00 00 00 16 e9 0b 00 42 00 00 00 24 e9 0b 00 16 00 00 00 | ....%...............B...$....... |
c200 | 67 e9 0b 00 13 00 00 00 7e e9 0b 00 55 00 00 00 92 e9 0b 00 95 00 00 00 e8 e9 0b 00 35 00 00 00 | g.......~...U...............5... |
c220 | 7e ea 0b 00 8e 00 00 00 b4 ea 0b 00 68 00 00 00 43 eb 0b 00 77 00 00 00 ac eb 0b 00 81 00 00 00 | ~...........h...C...w........... |
c240 | 24 ec 0b 00 21 00 00 00 a6 ec 0b 00 2e 00 00 00 c8 ec 0b 00 7e 00 00 00 f7 ec 0b 00 4b 00 00 00 | $...!...............~.......K... |
c260 | 76 ed 0b 00 38 00 00 00 c2 ed 0b 00 95 00 00 00 fb ed 0b 00 70 00 00 00 91 ee 0b 00 32 00 00 00 | v...8...............p.......2... |
c280 | 02 ef 0b 00 69 00 00 00 35 ef 0b 00 7b 00 00 00 9f ef 0b 00 2a 00 00 00 1b f0 0b 00 62 00 00 00 | ....i...5...{.......*.......b... |
c2a0 | 46 f0 0b 00 4b 01 00 00 a9 f0 0b 00 a6 00 00 00 f5 f1 0b 00 89 00 00 00 9c f2 0b 00 af 00 00 00 | F...K........................... |
c2c0 | 26 f3 0b 00 88 00 00 00 d6 f3 0b 00 31 00 00 00 5f f4 0b 00 2d 00 00 00 91 f4 0b 00 7a 00 00 00 | &...........1..._...-.......z... |
c2e0 | bf f4 0b 00 92 00 00 00 3a f5 0b 00 6b 00 00 00 cd f5 0b 00 0e 00 00 00 39 f6 0b 00 4b 00 00 00 | ........:...k...........9...K... |
c300 | 48 f6 0b 00 33 00 00 00 94 f6 0b 00 39 00 00 00 c8 f6 0b 00 0b 00 00 00 02 f7 0b 00 6d 00 00 00 | H...3.......9...............m... |
c320 | 0e f7 0b 00 1a 00 00 00 7c f7 0b 00 20 00 00 00 97 f7 0b 00 25 00 00 00 b8 f7 0b 00 4d 00 00 00 | ........|...........%.......M... |
c340 | de f7 0b 00 4e 00 00 00 2c f8 0b 00 0b 00 00 00 7b f8 0b 00 f6 00 00 00 87 f8 0b 00 2e 00 00 00 | ....N...,.......{............... |
c360 | 7e f9 0b 00 13 00 00 00 ad f9 0b 00 0f 00 00 00 c1 f9 0b 00 12 00 00 00 d1 f9 0b 00 71 01 00 00 | ~...........................q... |
c380 | e4 f9 0b 00 fe 00 00 00 56 fb 0b 00 4e 00 00 00 55 fc 0b 00 c9 00 00 00 a4 fc 0b 00 13 00 00 00 | ........V...N...U............... |
c3a0 | 6e fd 0b 00 19 00 00 00 82 fd 0b 00 7c 00 00 00 9c fd 0b 00 38 00 00 00 19 fe 0b 00 3b 00 00 00 | n...........|.......8.......;... |
c3c0 | 52 fe 0b 00 46 00 00 00 8e fe 0b 00 2f 00 00 00 d5 fe 0b 00 19 00 00 00 05 ff 0b 00 12 00 00 00 | R...F......./................... |
c3e0 | 1f ff 0b 00 14 00 00 00 32 ff 0b 00 22 00 00 00 47 ff 0b 00 84 00 00 00 6a ff 0b 00 26 00 00 00 | ........2..."...G.......j...&... |
c400 | ef ff 0b 00 24 00 00 00 16 00 0c 00 1b 00 00 00 3b 00 0c 00 1d 00 00 00 57 00 0c 00 58 00 00 00 | ....$...........;.......W...X... |
c420 | 75 00 0c 00 43 00 00 00 ce 00 0c 00 56 00 00 00 12 01 0c 00 43 00 00 00 69 01 0c 00 75 00 00 00 | u...C.......V.......C...i...u... |
c440 | ad 01 0c 00 1e 00 00 00 23 02 0c 00 25 00 00 00 42 02 0c 00 25 00 00 00 68 02 0c 00 15 00 00 00 | ........#...%...B...%...h....... |
c460 | 8e 02 0c 00 86 00 00 00 a4 02 0c 00 2e 00 00 00 2b 03 0c 00 95 00 00 00 5a 03 0c 00 2b 00 00 00 | ................+.......Z...+... |
c480 | f0 03 0c 00 2b 00 00 00 1c 04 0c 00 37 01 00 00 48 04 0c 00 38 00 00 00 80 05 0c 00 3b 00 00 00 | ....+.......7...H...8.......;... |
c4a0 | b9 05 0c 00 18 00 00 00 f5 05 0c 00 16 00 00 00 0e 06 0c 00 7a 00 00 00 25 06 0c 00 12 00 00 00 | ....................z...%....... |
c4c0 | a0 06 0c 00 67 00 00 00 b3 06 0c 00 3a 00 00 00 1b 07 0c 00 3a 00 00 00 56 07 0c 00 0c 00 00 00 | ....g.......:.......:...V....... |
c4e0 | 91 07 0c 00 18 00 00 00 9e 07 0c 00 39 00 00 00 b7 07 0c 00 47 00 00 00 f1 07 0c 00 42 00 00 00 | ............9.......G.......B... |
c500 | 39 08 0c 00 4c 00 00 00 7c 08 0c 00 3f 00 00 00 c9 08 0c 00 3b 00 00 00 09 09 0c 00 41 00 00 00 | 9...L...|...?.......;.......A... |
c520 | 45 09 0c 00 11 01 00 00 87 09 0c 00 3d 00 00 00 99 0a 0c 00 31 00 00 00 d7 0a 0c 00 26 01 00 00 | E...........=.......1.......&... |
c540 | 09 0b 0c 00 e2 00 00 00 30 0c 0c 00 9f 00 00 00 13 0d 0c 00 9f 00 00 00 b3 0d 0c 00 3a 00 00 00 | ........0...................:... |
c560 | 53 0e 0c 00 f8 00 00 00 8e 0e 0c 00 e2 00 00 00 87 0f 0c 00 88 00 00 00 6a 10 0c 00 31 00 00 00 | S.......................j...1... |
c580 | f3 10 0c 00 06 00 00 00 25 11 0c 00 0d 00 00 00 2c 11 0c 00 0b 00 00 00 3a 11 0c 00 2e 00 00 00 | ........%.......,.......:....... |
c5a0 | 46 11 0c 00 67 00 00 00 75 11 0c 00 3e 00 00 00 dd 11 0c 00 13 00 00 00 1c 12 0c 00 ab 00 00 00 | F...g...u...>................... |
c5c0 | 30 12 0c 00 b5 00 00 00 dc 12 0c 00 b5 00 00 00 92 13 0c 00 90 00 00 00 48 14 0c 00 30 00 00 00 | 0.......................H...0... |
c5e0 | d9 14 0c 00 47 00 00 00 0a 15 0c 00 22 00 00 00 52 15 0c 00 22 00 00 00 75 15 0c 00 24 00 00 00 | ....G......."...R..."...u...$... |
c600 | 98 15 0c 00 09 00 00 00 bd 15 0c 00 09 00 00 00 c7 15 0c 00 92 00 00 00 d1 15 0c 00 38 00 00 00 | ............................8... |
c620 | 64 16 0c 00 05 00 00 00 9d 16 0c 00 0f 00 00 00 a3 16 0c 00 88 00 00 00 b3 16 0c 00 bd 00 00 00 | d............................... |
c640 | 3c 17 0c 00 c2 00 00 00 fa 17 0c 00 7e 00 00 00 bd 18 0c 00 0b 00 00 00 3c 19 0c 00 12 00 00 00 | <...........~...........<....... |
c660 | 48 19 0c 00 6a 00 00 00 5b 19 0c 00 2f 00 00 00 c6 19 0c 00 0a 00 00 00 f6 19 0c 00 f4 00 00 00 | H...j...[.../................... |
c680 | 01 1a 0c 00 d2 01 00 00 f6 1a 0c 00 ad 01 00 00 c9 1c 0c 00 dd 00 00 00 77 1e 0c 00 91 01 00 00 | ........................w....... |
c6a0 | 55 1f 0c 00 7f 00 00 00 e7 20 0c 00 af 00 00 00 67 21 0c 00 2a 03 00 00 17 22 0c 00 6b 00 00 00 | U...............g!..*...."..k... |
c6c0 | 42 25 0c 00 a3 00 00 00 ae 25 0c 00 9a 00 00 00 52 26 0c 00 50 00 00 00 ed 26 0c 00 81 00 00 00 | B%.......%......R&..P....&...... |
c6e0 | 3e 27 0c 00 2c 00 00 00 c0 27 0c 00 7a 00 00 00 ed 27 0c 00 2b 00 00 00 68 28 0c 00 31 00 00 00 | >'..,....'..z....'..+...h(..1... |
c700 | 94 28 0c 00 25 00 00 00 c6 28 0c 00 09 00 00 00 ec 28 0c 00 34 00 00 00 f6 28 0c 00 23 00 00 00 | .(..%....(.......(..4....(..#... |
c720 | 2b 29 0c 00 23 00 00 00 4f 29 0c 00 25 00 00 00 73 29 0c 00 11 00 00 00 99 29 0c 00 12 00 00 00 | +)..#...O)..%...s).......)...... |
c740 | ab 29 0c 00 12 00 00 00 be 29 0c 00 1e 00 00 00 d1 29 0c 00 23 00 00 00 f0 29 0c 00 39 00 00 00 | .).......).......)..#....)..9... |
c760 | 14 2a 0c 00 2c 00 00 00 4e 2a 0c 00 2d 00 00 00 7b 2a 0c 00 1c 00 00 00 a9 2a 0c 00 1d 00 00 00 | .*..,...N*..-...{*.......*...... |
c780 | c6 2a 0c 00 1e 00 00 00 e4 2a 0c 00 0c 00 00 00 03 2b 0c 00 28 00 00 00 10 2b 0c 00 3a 00 00 00 | .*.......*.......+..(....+..:... |
c7a0 | 39 2b 0c 00 30 00 00 00 74 2b 0c 00 27 00 00 00 a5 2b 0c 00 38 00 00 00 cd 2b 0c 00 1d 00 00 00 | 9+..0...t+..'....+..8....+...... |
c7c0 | 06 2c 0c 00 13 00 00 00 24 2c 0c 00 0b 00 00 00 38 2c 0c 00 28 00 00 00 44 2c 0c 00 30 00 00 00 | .,......$,......8,..(...D,..0... |
c7e0 | 6d 2c 0c 00 4c 00 00 00 9e 2c 0c 00 74 00 00 00 eb 2c 0c 00 55 00 00 00 60 2d 0c 00 30 00 00 00 | m,..L....,..t....,..U...`-..0... |
c800 | b6 2d 0c 00 0b 00 00 00 e7 2d 0c 00 28 00 00 00 f3 2d 0c 00 35 00 00 00 1c 2e 0c 00 0a 00 00 00 | .-.......-..(....-..5........... |
c820 | 52 2e 0c 00 56 00 00 00 5d 2e 0c 00 1f 00 00 00 b4 2e 0c 00 18 00 00 00 d4 2e 0c 00 2d 00 00 00 | R...V...]...................-... |
c840 | ed 2e 0c 00 23 00 00 00 1b 2f 0c 00 3f 00 00 00 3f 2f 0c 00 4d 00 00 00 7f 2f 0c 00 20 00 00 00 | ....#..../..?...?/..M..../...... |
c860 | cd 2f 0c 00 6d 00 00 00 ee 2f 0c 00 61 00 00 00 5c 30 0c 00 63 00 00 00 be 30 0c 00 31 00 00 00 | ./..m..../..a...\0..c....0..1... |
c880 | 22 31 0c 00 34 00 00 00 54 31 0c 00 1b 01 00 00 89 31 0c 00 3a 00 00 00 a5 32 0c 00 4a 00 00 00 | "1..4...T1.......1..:....2..J... |
c8a0 | e0 32 0c 00 38 00 00 00 2b 33 0c 00 40 01 00 00 64 33 0c 00 3a 00 00 00 a5 34 0c 00 4f 00 00 00 | .2..8...+3..@...d3..:....4..O... |
c8c0 | e0 34 0c 00 2e 00 00 00 30 35 0c 00 86 00 00 00 5f 35 0c 00 bb 01 00 00 e6 35 0c 00 06 01 00 00 | .4......05......_5.......5...... |
c8e0 | a2 37 0c 00 bf 00 00 00 a9 38 0c 00 25 00 00 00 69 39 0c 00 4b 00 00 00 8f 39 0c 00 79 00 00 00 | .7.......8..%...i9..K....9..y... |
c900 | db 39 0c 00 22 00 00 00 55 3a 0c 00 64 00 00 00 78 3a 0c 00 16 00 00 00 dd 3a 0c 00 14 00 00 00 | .9.."...U:..d...x:.......:...... |
c920 | f4 3a 0c 00 79 00 00 00 09 3b 0c 00 42 00 00 00 83 3b 0c 00 1c 00 00 00 c6 3b 0c 00 33 00 00 00 | .:..y....;..B....;.......;..3... |
c940 | e3 3b 0c 00 a7 00 00 00 17 3c 0c 00 c1 00 00 00 bf 3c 0c 00 32 00 00 00 81 3d 0c 00 05 00 00 00 | .;.......<.......<..2....=...... |
c960 | b4 3d 0c 00 10 00 00 00 ba 3d 0c 00 5e 00 00 00 cb 3d 0c 00 08 00 00 00 2a 3e 0c 00 dc 00 00 00 | .=.......=..^....=......*>...... |
c980 | 33 3e 0c 00 10 00 00 00 10 3f 0c 00 5d 00 00 00 21 3f 0c 00 0d 00 00 00 7f 3f 0c 00 21 00 00 00 | 3>.......?..]...!?.......?..!... |
c9a0 | 8d 3f 0c 00 21 00 00 00 af 3f 0c 00 d4 00 00 00 d1 3f 0c 00 14 00 00 00 a6 40 0c 00 38 00 00 00 | .?..!....?.......?.......@..8... |
c9c0 | bb 40 0c 00 a3 00 00 00 f4 40 0c 00 a7 00 00 00 98 41 0c 00 23 00 00 00 40 42 0c 00 91 00 00 00 | .@.......@.......A..#...@B...... |
c9e0 | 64 42 0c 00 59 00 00 00 f6 42 0c 00 a6 01 00 00 50 43 0c 00 ca 00 00 00 f7 44 0c 00 70 01 00 00 | dB..Y....B......PC.......D..p... |
ca00 | c2 45 0c 00 63 01 00 00 33 47 0c 00 07 00 00 00 97 48 0c 00 15 00 00 00 9f 48 0c 00 12 00 00 00 | .E..c...3G.......H.......H...... |
ca20 | b5 48 0c 00 0f 00 00 00 c8 48 0c 00 16 00 00 00 d8 48 0c 00 2f 00 00 00 ef 48 0c 00 2f 00 00 00 | .H.......H.......H../....H../... |
ca40 | 1f 49 0c 00 77 00 00 00 4f 49 0c 00 17 00 00 00 c7 49 0c 00 10 00 00 00 df 49 0c 00 51 00 00 00 | .I..w...OI.......I.......I..Q... |
ca60 | f0 49 0c 00 08 00 00 00 42 4a 0c 00 bf 00 00 00 4b 4a 0c 00 58 00 00 00 0b 4b 0c 00 e0 00 00 00 | .I......BJ......KJ..X....K...... |
ca80 | 64 4b 0c 00 3d 00 00 00 45 4c 0c 00 3b 00 00 00 83 4c 0c 00 3c 00 00 00 bf 4c 0c 00 3e 00 00 00 | dK..=...EL..;....L..<....L..>... |
caa0 | fc 4c 0c 00 3c 00 00 00 3b 4d 0c 00 3d 00 00 00 78 4d 0c 00 34 00 00 00 b6 4d 0c 00 36 00 00 00 | .L..<...;M..=...xM..4....M..6... |
cac0 | eb 4d 0c 00 33 00 00 00 22 4e 0c 00 a3 00 00 00 56 4e 0c 00 08 00 00 00 fa 4e 0c 00 1b 00 00 00 | .M..3..."N......VN.......N...... |
cae0 | 03 4f 0c 00 09 00 00 00 1f 4f 0c 00 c5 00 00 00 29 4f 0c 00 0f 00 00 00 ef 4f 0c 00 0f 00 00 00 | .O.......O......)O.......O...... |
cb00 | ff 4f 0c 00 31 00 00 00 0f 50 0c 00 2a 00 00 00 41 50 0c 00 19 00 00 00 6c 50 0c 00 0b 00 00 00 | .O..1....P..*...AP......lP...... |
cb20 | 86 50 0c 00 40 00 00 00 92 50 0c 00 28 00 00 00 d3 50 0c 00 1c 00 00 00 fc 50 0c 00 8e 00 00 00 | .P..@....P..(....P.......P...... |
cb40 | 19 51 0c 00 08 00 00 00 a8 51 0c 00 c1 00 00 00 b1 51 0c 00 9a 00 00 00 73 52 0c 00 dc 00 00 00 | .Q.......Q.......Q......sR...... |
cb60 | 0e 53 0c 00 a5 01 00 00 eb 53 0c 00 03 00 00 00 91 55 0c 00 98 00 00 00 95 55 0c 00 46 01 00 00 | .S.......S.......U.......U..F... |
cb80 | 2e 56 0c 00 0a 00 00 00 75 57 0c 00 0a 00 00 00 80 57 0c 00 39 00 00 00 8b 57 0c 00 0d 00 00 00 | .V......uW.......W..9....W...... |
cba0 | c5 57 0c 00 08 00 00 00 d3 57 0c 00 0f 00 00 00 dc 57 0c 00 2d 00 00 00 ec 57 0c 00 e5 00 00 00 | .W.......W.......W..-....W...... |
cbc0 | 1a 58 0c 00 0a 00 00 00 00 59 0c 00 57 01 00 00 0b 59 0c 00 31 01 00 00 63 5a 0c 00 0a 00 00 00 | .X.......Y..W....Y..1...cZ...... |
cbe0 | 95 5b 0c 00 69 01 00 00 a0 5b 0c 00 26 00 00 00 0a 5d 0c 00 05 00 00 00 31 5d 0c 00 71 00 00 00 | .[..i....[..&....]......1]..q... |
cc00 | 37 5d 0c 00 5c 00 00 00 a9 5d 0c 00 90 00 00 00 06 5e 0c 00 33 00 00 00 97 5e 0c 00 51 00 00 00 | 7]..\....].......^..3....^..Q... |
cc20 | cb 5e 0c 00 95 00 00 00 1d 5f 0c 00 09 00 00 00 b3 5f 0c 00 c1 00 00 00 bd 5f 0c 00 53 00 00 00 | .^......._......._......._..S... |
cc40 | 7f 60 0c 00 08 00 00 00 d3 60 0c 00 15 00 00 00 dc 60 0c 00 15 00 00 00 f2 60 0c 00 16 00 00 00 | .`.......`.......`.......`...... |
cc60 | 08 61 0c 00 23 00 00 00 1f 61 0c 00 14 00 00 00 43 61 0c 00 13 00 00 00 58 61 0c 00 0d 00 00 00 | .a..#....a......Ca......Xa...... |
cc80 | 6c 61 0c 00 0e 00 00 00 7a 61 0c 00 0f 00 00 00 89 61 0c 00 4f 01 00 00 99 61 0c 00 20 01 00 00 | la......za.......a..O....a...... |
cca0 | e9 62 0c 00 23 01 00 00 0a 64 0c 00 4d 00 00 00 2e 65 0c 00 95 00 00 00 7c 65 0c 00 89 00 00 00 | .b..#....d..M....e......|e...... |
ccc0 | 12 66 0c 00 22 00 00 00 9c 66 0c 00 0f 00 00 00 bf 66 0c 00 0f 00 00 00 cf 66 0c 00 28 00 00 00 | .f.."....f.......f.......f..(... |
cce0 | df 66 0c 00 78 01 00 00 08 67 0c 00 60 00 00 00 81 68 0c 00 1d 01 00 00 e2 68 0c 00 0b 00 00 00 | .f..x....g..`....h.......h...... |
cd00 | 00 6a 0c 00 53 00 00 00 0c 6a 0c 00 ca 00 00 00 60 6a 0c 00 f4 00 00 00 2b 6b 0c 00 98 00 00 00 | .j..S....j......`j......+k...... |
cd20 | 20 6c 0c 00 98 00 00 00 b9 6c 0c 00 00 01 00 00 52 6d 0c 00 aa 00 00 00 53 6e 0c 00 05 00 00 00 | .l.......l......Rm......Sn...... |
cd40 | fe 6e 0c 00 0e 00 00 00 04 6f 0c 00 0f 00 00 00 13 6f 0c 00 0b 00 00 00 23 6f 0c 00 1f 00 00 00 | .n.......o.......o......#o...... |
cd60 | 2f 6f 0c 00 b1 00 00 00 4f 6f 0c 00 17 00 00 00 01 70 0c 00 a7 00 00 00 19 70 0c 00 21 00 00 00 | /o......Oo.......p.......p..!... |
cd80 | c1 70 0c 00 90 00 00 00 e3 70 0c 00 26 00 00 00 74 71 0c 00 1a 00 00 00 9b 71 0c 00 44 00 00 00 | .p.......p..&...tq.......q..D... |
cda0 | b6 71 0c 00 48 00 00 00 fb 71 0c 00 2a 00 00 00 44 72 0c 00 6e 00 00 00 6f 72 0c 00 90 00 00 00 | .q..H....q..*...Dr..n...or...... |
cdc0 | de 72 0c 00 cf 00 00 00 6f 73 0c 00 0f 00 00 00 3f 74 0c 00 0c 00 00 00 4f 74 0c 00 69 01 00 00 | .r......os......?t......Ot..i... |
cde0 | 5c 74 0c 00 93 00 00 00 c6 75 0c 00 0f 00 00 00 5a 76 0c 00 10 00 00 00 6a 76 0c 00 3e 00 00 00 | \t.......u......Zv......jv..>... |
ce00 | 7b 76 0c 00 81 00 00 00 ba 76 0c 00 8b 00 00 00 3c 77 0c 00 bd 00 00 00 c8 77 0c 00 30 01 00 00 | {v.......v......<w.......w..0... |
ce20 | 86 78 0c 00 96 00 00 00 b7 79 0c 00 69 01 00 00 4e 7a 0c 00 0c 00 00 00 b8 7b 0c 00 5a 00 00 00 | .x.......y..i...Nz.......{..Z... |
ce40 | c5 7b 0c 00 3c 01 00 00 20 7c 0c 00 db 00 00 00 5d 7d 0c 00 52 00 00 00 39 7e 0c 00 2f 00 00 00 | .{..<....|......]}..R...9~../... |
ce60 | 8c 7e 0c 00 ac 00 00 00 bc 7e 0c 00 09 00 00 00 69 7f 0c 00 eb 00 00 00 73 7f 0c 00 d8 00 00 00 | .~.......~......i.......s....... |
ce80 | 5f 80 0c 00 5c 00 00 00 38 81 0c 00 63 00 00 00 95 81 0c 00 22 01 00 00 f9 81 0c 00 af 00 00 00 | _...\...8...c......."........... |
cea0 | 1c 83 0c 00 30 00 00 00 cc 83 0c 00 4b 00 00 00 fd 83 0c 00 66 00 00 00 49 84 0c 00 52 00 00 00 | ....0.......K.......f...I...R... |
cec0 | b0 84 0c 00 49 00 00 00 03 85 0c 00 1b 01 00 00 4d 85 0c 00 bb 00 00 00 69 86 0c 00 60 00 00 00 | ....I...........M.......i...`... |
cee0 | 25 87 0c 00 62 00 00 00 86 87 0c 00 52 01 00 00 e9 87 0c 00 f3 00 00 00 3c 89 0c 00 bc 00 00 00 | %...b.......R...........<....... |
cf00 | 30 8a 0c 00 77 00 00 00 ed 8a 0c 00 af 00 00 00 65 8b 0c 00 e8 00 00 00 15 8c 0c 00 76 00 00 00 | 0...w...........e...........v... |
cf20 | fe 8c 0c 00 3c 01 00 00 75 8d 0c 00 97 00 00 00 b2 8e 0c 00 a2 00 00 00 4a 8f 0c 00 d3 00 00 00 | ....<...u...............J....... |
cf40 | ed 8f 0c 00 62 00 00 00 c1 90 0c 00 0e 00 00 00 24 91 0c 00 cc 00 00 00 33 91 0c 00 32 00 00 00 | ....b...........$.......3...2... |
cf60 | 00 92 0c 00 11 00 00 00 33 92 0c 00 14 01 00 00 45 92 0c 00 b9 00 00 00 5a 93 0c 00 06 00 00 00 | ........3.......E.......Z....... |
cf80 | 14 94 0c 00 06 00 00 00 1b 94 0c 00 5d 02 00 00 22 94 0c 00 0e 00 00 00 80 96 0c 00 80 01 00 00 | ............]..."............... |
cfa0 | 8f 96 0c 00 23 01 00 00 10 98 0c 00 0c 01 00 00 34 99 0c 00 8b 00 00 00 41 9a 0c 00 06 00 00 00 | ....#...........4.......A....... |
cfc0 | cd 9a 0c 00 59 00 00 00 d4 9a 0c 00 59 00 00 00 2e 9b 0c 00 07 00 00 00 88 9b 0c 00 15 00 00 00 | ....Y.......Y................... |
cfe0 | 90 9b 0c 00 44 00 00 00 a6 9b 0c 00 4d 00 00 00 eb 9b 0c 00 3d 00 00 00 39 9c 0c 00 10 00 00 00 | ....D.......M.......=...9....... |
d000 | 77 9c 0c 00 45 00 00 00 88 9c 0c 00 59 00 00 00 ce 9c 0c 00 7c 00 00 00 28 9d 0c 00 ac 00 00 00 | w...E.......Y.......|...(....... |
d020 | a5 9d 0c 00 89 00 00 00 52 9e 0c 00 23 00 00 00 dc 9e 0c 00 0e 00 00 00 00 9f 0c 00 26 00 00 00 | ........R...#...............&... |
d040 | 0f 9f 0c 00 2d 00 00 00 36 9f 0c 00 2e 00 00 00 64 9f 0c 00 2d 00 00 00 93 9f 0c 00 0f 00 00 00 | ....-...6.......d...-........... |
d060 | c1 9f 0c 00 1d 01 00 00 d1 9f 0c 00 19 01 00 00 ef a0 0c 00 07 00 00 00 09 a2 0c 00 17 00 00 00 | ................................ |
d080 | 11 a2 0c 00 0e 00 00 00 29 a2 0c 00 25 00 00 00 38 a2 0c 00 0e 00 00 00 5e a2 0c 00 11 00 00 00 | ........)...%...8.......^....... |
d0a0 | 6d a2 0c 00 0f 00 00 00 7f a2 0c 00 10 00 00 00 8f a2 0c 00 0e 00 00 00 a0 a2 0c 00 06 00 00 00 | m............................... |
d0c0 | af a2 0c 00 d0 00 00 00 b6 a2 0c 00 57 00 00 00 87 a3 0c 00 2b 00 00 00 df a3 0c 00 08 00 00 00 | ............W.......+........... |
d0e0 | 0b a4 0c 00 13 00 00 00 14 a4 0c 00 22 00 00 00 28 a4 0c 00 0b 00 00 00 4b a4 0c 00 08 00 00 00 | ............"...(.......K....... |
d100 | 57 a4 0c 00 1a 00 00 00 60 a4 0c 00 6d 00 00 00 7b a4 0c 00 17 00 00 00 e9 a4 0c 00 47 01 00 00 | W.......`...m...{...........G... |
d120 | 01 a5 0c 00 14 00 00 00 49 a6 0c 00 0d 00 00 00 5e a6 0c 00 0c 00 00 00 6c a6 0c 00 3e 00 00 00 | ........I.......^.......l...>... |
d140 | 79 a6 0c 00 78 00 00 00 b8 a6 0c 00 3c 00 00 00 31 a7 0c 00 df 00 00 00 6e a7 0c 00 34 00 00 00 | y...x.......<...1.......n...4... |
d160 | 4e a8 0c 00 4d 00 00 00 83 a8 0c 00 3e 00 00 00 d1 a8 0c 00 64 00 00 00 10 a9 0c 00 db 00 00 00 | N...M.......>.......d........... |
d180 | 75 a9 0c 00 3b 00 00 00 51 aa 0c 00 18 00 00 00 8d aa 0c 00 12 00 00 00 a6 aa 0c 00 3f 00 00 00 | u...;...Q...................?... |
d1a0 | b9 aa 0c 00 04 00 00 00 f9 aa 0c 00 11 00 00 00 fe aa 0c 00 11 00 00 00 10 ab 0c 00 0a 00 00 00 | ................................ |
d1c0 | 22 ab 0c 00 2a 00 00 00 2d ab 0c 00 10 00 00 00 58 ab 0c 00 09 00 00 00 69 ab 0c 00 30 00 00 00 | "...*...-.......X.......i...0... |
d1e0 | 73 ab 0c 00 08 00 00 00 a4 ab 0c 00 05 01 00 00 ad ab 0c 00 1e 00 00 00 b3 ac 0c 00 13 00 00 00 | s............................... |
d200 | d2 ac 0c 00 c5 00 00 00 e6 ac 0c 00 6a 00 00 00 ac ad 0c 00 c0 00 00 00 17 ae 0c 00 25 00 00 00 | ............j...............%... |
d220 | d8 ae 0c 00 25 00 00 00 fe ae 0c 00 03 00 00 00 24 af 0c 00 d3 00 00 00 28 af 0c 00 a8 00 00 00 | ....%...........$.......(....... |
d240 | fc af 0c 00 90 01 00 00 a5 b0 0c 00 d4 01 00 00 36 b2 0c 00 23 01 00 00 0b b4 0c 00 2a 00 00 00 | ................6...#.......*... |
d260 | 2f b5 0c 00 0a 00 00 00 5a b5 0c 00 26 00 00 00 65 b5 0c 00 0a 00 00 00 8c b5 0c 00 96 01 00 00 | /.......Z...&...e............... |
d280 | 97 b5 0c 00 05 00 00 00 2e b7 0c 00 05 00 00 00 34 b7 0c 00 2b 00 00 00 3a b7 0c 00 02 00 00 00 | ................4...+...:....... |
d2a0 | 66 b7 0c 00 0a 00 00 00 69 b7 0c 00 53 00 00 00 74 b7 0c 00 1d 00 00 00 c8 b7 0c 00 25 00 00 00 | f.......i...S...t...........%... |
d2c0 | e6 b7 0c 00 18 00 00 00 0c b8 0c 00 19 00 00 00 25 b8 0c 00 19 00 00 00 3f b8 0c 00 33 00 00 00 | ................%.......?...3... |
d2e0 | 59 b8 0c 00 33 00 00 00 8d b8 0c 00 ea 00 00 00 c1 b8 0c 00 2b 00 00 00 ac b9 0c 00 4d 00 00 00 | Y...3...............+.......M... |
d300 | d8 b9 0c 00 15 00 00 00 26 ba 0c 00 14 02 00 00 3c ba 0c 00 34 00 00 00 51 bc 0c 00 33 00 00 00 | ........&.......<...4...Q...3... |
d320 | 86 bc 0c 00 36 00 00 00 ba bc 0c 00 34 00 00 00 f1 bc 0c 00 2d 00 00 00 26 bd 0c 00 27 00 00 00 | ....6.......4.......-...&...'... |
d340 | 54 bd 0c 00 1b 00 00 00 7c bd 0c 00 38 00 00 00 98 bd 0c 00 38 00 00 00 d1 bd 0c 00 06 00 00 00 | T.......|...8.......8........... |
d360 | 0a be 0c 00 04 00 00 00 11 be 0c 00 05 00 00 00 16 be 0c 00 11 00 00 00 1c be 0c 00 19 00 00 00 | ................................ |
d380 | 2e be 0c 00 1d 00 00 00 48 be 0c 00 19 00 00 00 66 be 0c 00 41 00 00 00 80 be 0c 00 11 00 00 00 | ........H.......f...A........... |
d3a0 | c2 be 0c 00 12 00 00 00 d4 be 0c 00 06 00 00 00 e7 be 0c 00 0b 00 00 00 ee be 0c 00 f7 00 00 00 | ................................ |
d3c0 | fa be 0c 00 24 01 00 00 f2 bf 0c 00 39 00 00 00 17 c1 0c 00 05 00 00 00 51 c1 0c 00 19 00 00 00 | ....$.......9...........Q....... |
d3e0 | 57 c1 0c 00 04 00 00 00 71 c1 0c 00 1b 00 00 00 76 c1 0c 00 25 00 00 00 92 c1 0c 00 2d 00 00 00 | W.......q.......v...%.......-... |
d400 | b8 c1 0c 00 2e 00 00 00 e6 c1 0c 00 0c 00 00 00 15 c2 0c 00 0a 00 00 00 22 c2 0c 00 7a 00 00 00 | ........................"...z... |
d420 | 2d c2 0c 00 50 00 00 00 a8 c2 0c 00 0b 00 00 00 f9 c2 0c 00 76 00 00 00 05 c3 0c 00 04 00 00 00 | -...P...............v........... |
d440 | 7c c3 0c 00 10 00 00 00 81 c3 0c 00 15 00 00 00 92 c3 0c 00 16 00 00 00 a8 c3 0c 00 20 00 00 00 | |............................... |
d460 | bf c3 0c 00 1b 00 00 00 e0 c3 0c 00 0e 00 00 00 fc c3 0c 00 16 00 00 00 0b c4 0c 00 11 00 00 00 | ................................ |
d480 | 22 c4 0c 00 14 00 00 00 34 c4 0c 00 87 00 00 00 49 c4 0c 00 39 00 00 00 d1 c4 0c 00 3a 00 00 00 | ".......4.......I...9.......:... |
d4a0 | 0b c5 0c 00 3a 00 00 00 46 c5 0c 00 ec 00 00 00 81 c5 0c 00 14 00 00 00 6e c6 0c 00 1f 00 00 00 | ....:...F...............n....... |
d4c0 | 83 c6 0c 00 25 00 00 00 a3 c6 0c 00 0c 00 00 00 c9 c6 0c 00 3e 00 00 00 d6 c6 0c 00 0c 00 00 00 | ....%...............>........... |
d4e0 | 15 c7 0c 00 0a 00 00 00 22 c7 0c 00 54 00 00 00 2d c7 0c 00 0b 00 00 00 82 c7 0c 00 0c 00 00 00 | ........"...T...-............... |
d500 | 8e c7 0c 00 05 00 00 00 9b c7 0c 00 1a 00 00 00 a1 c7 0c 00 16 00 00 00 bc c7 0c 00 14 00 00 00 | ................................ |
d520 | d3 c7 0c 00 1c 00 00 00 e8 c7 0c 00 75 00 00 00 05 c8 0c 00 07 01 00 00 7b c8 0c 00 78 01 00 00 | ............u...........{...x... |
d540 | 83 c9 0c 00 45 00 00 00 fc ca 0c 00 39 00 00 00 42 cb 0c 00 ec 00 00 00 7c cb 0c 00 e6 00 00 00 | ....E.......9...B.......|....... |
d560 | 69 cc 0c 00 4a 00 00 00 50 cd 0c 00 57 00 00 00 9b cd 0c 00 69 00 00 00 f3 cd 0c 00 d2 00 00 00 | i...J...P...W.......i........... |
d580 | 5d ce 0c 00 c2 00 00 00 30 cf 0c 00 b8 00 00 00 f3 cf 0c 00 98 00 00 00 ac d0 0c 00 b5 00 00 00 | ].......0....................... |
d5a0 | 45 d1 0c 00 ff 00 00 00 fb d1 0c 00 7f 00 00 00 fb d2 0c 00 83 00 00 00 7b d3 0c 00 5a 00 00 00 | E.......................{...Z... |
d5c0 | ff d3 0c 00 69 00 00 00 5a d4 0c 00 0d 02 00 00 c4 d4 0c 00 b8 00 00 00 d2 d6 0c 00 a4 00 00 00 | ....i...Z....................... |
d5e0 | 8b d7 0c 00 b1 01 00 00 30 d8 0c 00 ad 00 00 00 e2 d9 0c 00 6f 00 00 00 90 da 0c 00 89 00 00 00 | ........0...........o........... |
d600 | 00 db 0c 00 ae 00 00 00 8a db 0c 00 38 01 00 00 39 dc 0c 00 46 01 00 00 72 dd 0c 00 5f 01 00 00 | ............8...9...F...r..._... |
d620 | b9 de 0c 00 f0 00 00 00 19 e0 0c 00 57 00 00 00 0a e1 0c 00 83 00 00 00 62 e1 0c 00 32 00 00 00 | ............W...........b...2... |
d640 | e6 e1 0c 00 25 01 00 00 19 e2 0c 00 6c 00 00 00 3f e3 0c 00 6a 01 00 00 ac e3 0c 00 9b 00 00 00 | ....%.......l...?...j........... |
d660 | 17 e5 0c 00 2a 00 00 00 b3 e5 0c 00 78 00 00 00 de e5 0c 00 a3 00 00 00 57 e6 0c 00 94 00 00 00 | ....*.......x...........W....... |
d680 | fb e6 0c 00 93 00 00 00 90 e7 0c 00 51 00 00 00 24 e8 0c 00 92 00 00 00 76 e8 0c 00 c0 00 00 00 | ............Q...$.......v....... |
d6a0 | 09 e9 0c 00 bb 00 00 00 ca e9 0c 00 b2 00 00 00 86 ea 0c 00 97 00 00 00 39 eb 0c 00 b5 00 00 00 | ........................9....... |
d6c0 | d1 eb 0c 00 55 00 00 00 87 ec 0c 00 6e 00 00 00 dd ec 0c 00 a6 00 00 00 4c ed 0c 00 a7 00 00 00 | ....U.......n...........L....... |
d6e0 | f3 ed 0c 00 ac 00 00 00 9b ee 0c 00 73 00 00 00 48 ef 0c 00 68 00 00 00 bc ef 0c 00 42 01 00 00 | ............s...H...h.......B... |
d700 | 25 f0 0c 00 d4 00 00 00 68 f1 0c 00 d1 00 00 00 3d f2 0c 00 b3 00 00 00 0f f3 0c 00 38 00 00 00 | %.......h.......=...........8... |
d720 | c3 f3 0c 00 87 00 00 00 fc f3 0c 00 8f 00 00 00 84 f4 0c 00 79 00 00 00 14 f5 0c 00 8a 00 00 00 | ....................y........... |
d740 | 8e f5 0c 00 a3 00 00 00 19 f6 0c 00 60 00 00 00 bd f6 0c 00 66 00 00 00 1e f7 0c 00 ab 00 00 00 | ............`.......f........... |
d760 | 85 f7 0c 00 45 00 00 00 31 f8 0c 00 d3 00 00 00 77 f8 0c 00 d3 00 00 00 4b f9 0c 00 8e 00 00 00 | ....E...1.......w.......K....... |
d780 | 1f fa 0c 00 61 00 00 00 ae fa 0c 00 7f 00 00 00 10 fb 0c 00 69 01 00 00 90 fb 0c 00 9d 01 00 00 | ....a...............i........... |
d7a0 | fa fc 0c 00 b6 00 00 00 98 fe 0c 00 cd 00 00 00 4f ff 0c 00 bf 00 00 00 1d 00 0d 00 a8 00 00 00 | ................O............... |
d7c0 | dd 00 0d 00 5f 00 00 00 86 01 0d 00 e5 00 00 00 e6 01 0d 00 55 00 00 00 cc 02 0d 00 69 00 00 00 | ...._...............U.......i... |
d7e0 | 22 03 0d 00 74 00 00 00 8c 03 0d 00 57 01 00 00 01 04 0d 00 8a 00 00 00 59 05 0d 00 9b 00 00 00 | "...t.......W...........Y....... |
d800 | e4 05 0d 00 8d 00 00 00 80 06 0d 00 74 00 00 00 0e 07 0d 00 97 00 00 00 83 07 0d 00 5c 00 00 00 | ............t...............\... |
d820 | 1b 08 0d 00 8e 00 00 00 78 08 0d 00 92 00 00 00 07 09 0d 00 69 00 00 00 9a 09 0d 00 74 01 00 00 | ........x...........i.......t... |
d840 | 04 0a 0d 00 55 00 00 00 79 0b 0d 00 87 00 00 00 cf 0b 0d 00 3e 00 00 00 57 0c 0d 00 d5 00 00 00 | ....U...y...........>...W....... |
d860 | 96 0c 0d 00 91 00 00 00 6c 0d 0d 00 bf 00 00 00 fe 0d 0d 00 37 01 00 00 be 0e 0d 00 55 00 00 00 | ........l...........7.......U... |
d880 | f6 0f 0d 00 2c 00 00 00 4c 10 0d 00 21 00 00 00 79 10 0d 00 9d 00 00 00 9b 10 0d 00 1e 00 00 00 | ....,...L...!...y............... |
d8a0 | 39 11 0d 00 09 00 00 00 58 11 0d 00 1a 00 00 00 62 11 0d 00 b7 00 00 00 7d 11 0d 00 40 00 00 00 | 9.......X.......b.......}...@... |
d8c0 | 35 12 0d 00 31 00 00 00 76 12 0d 00 80 00 00 00 a8 12 0d 00 43 00 00 00 29 13 0d 00 38 00 00 00 | 5...1...v...........C...)...8... |
d8e0 | 6d 13 0d 00 2c 00 00 00 a6 13 0d 00 9f 00 00 00 d3 13 0d 00 7e 00 00 00 73 14 0d 00 a3 00 00 00 | m...,...............~...s....... |
d900 | f2 14 0d 00 55 00 00 00 96 15 0d 00 70 00 00 00 ec 15 0d 00 70 00 00 00 5d 16 0d 00 4e 00 00 00 | ....U.......p.......p...]...N... |
d920 | ce 16 0d 00 3b 00 00 00 1d 17 0d 00 6b 01 00 00 59 17 0d 00 4a 00 00 00 c5 18 0d 00 b5 00 00 00 | ....;.......k...Y...J........... |
d940 | 10 19 0d 00 71 00 00 00 c6 19 0d 00 c2 00 00 00 38 1a 0d 00 67 00 00 00 fb 1a 0d 00 70 00 00 00 | ....q...........8...g.......p... |
d960 | 63 1b 0d 00 dd 00 00 00 d4 1b 0d 00 dc 00 00 00 b2 1c 0d 00 4a 00 00 00 8f 1d 0d 00 4d 00 00 00 | c...................J.......M... |
d980 | da 1d 0d 00 32 00 00 00 28 1e 0d 00 6f 00 00 00 5b 1e 0d 00 68 00 00 00 cb 1e 0d 00 e3 00 00 00 | ....2...(...o...[...h........... |
d9a0 | 34 1f 0d 00 01 03 00 00 18 20 0d 00 2c 00 00 00 1a 23 0d 00 bc 01 00 00 47 23 0d 00 da 00 00 00 | 4...........,....#......G#...... |
d9c0 | 04 25 0d 00 8e 00 00 00 df 25 0d 00 d0 00 00 00 6e 26 0d 00 81 00 00 00 3f 27 0d 00 b0 01 00 00 | .%.......%......n&......?'...... |
d9e0 | c1 27 0d 00 94 00 00 00 72 29 0d 00 f7 00 00 00 07 2a 0d 00 49 00 00 00 ff 2a 0d 00 56 02 00 00 | .'......r).......*..I....*..V... |
da00 | 49 2b 0d 00 85 00 00 00 a0 2d 0d 00 08 01 00 00 26 2e 0d 00 1d 02 00 00 2f 2f 0d 00 c5 00 00 00 | I+.......-......&.......//...... |
da20 | 4d 31 0d 00 5b 00 00 00 13 32 0d 00 46 00 00 00 6f 32 0d 00 5b 00 00 00 b6 32 0d 00 b4 00 00 00 | M1..[....2..F...o2..[....2...... |
da40 | 12 33 0d 00 33 00 00 00 c7 33 0d 00 60 00 00 00 fb 33 0d 00 fe 00 00 00 5c 34 0d 00 61 00 00 00 | .3..3....3..`....3......\4..a... |
da60 | 5b 35 0d 00 9d 00 00 00 bd 35 0d 00 9c 00 00 00 5b 36 0d 00 13 01 00 00 f8 36 0d 00 bb 00 00 00 | [5.......5......[6.......6...... |
da80 | 0c 38 0d 00 3d 00 00 00 c8 38 0d 00 c2 00 00 00 06 39 0d 00 db 00 00 00 c9 39 0d 00 d2 00 00 00 | .8..=....8.......9.......9...... |
daa0 | a5 3a 0d 00 77 00 00 00 78 3b 0d 00 08 01 00 00 f0 3b 0d 00 96 00 00 00 f9 3c 0d 00 2e 01 00 00 | .:..w...x;.......;.......<...... |
dac0 | 90 3d 0d 00 68 00 00 00 bf 3e 0d 00 3c 00 00 00 28 3f 0d 00 45 01 00 00 65 3f 0d 00 c1 01 00 00 | .=..h....>..<...(?..E...e?...... |
dae0 | ab 40 0d 00 4e 00 00 00 6d 42 0d 00 62 00 00 00 bc 42 0d 00 ae 00 00 00 1f 43 0d 00 dd 00 00 00 | .@..N...mB..b....B.......C...... |
db00 | ce 43 0d 00 77 00 00 00 ac 44 0d 00 b7 00 00 00 24 45 0d 00 a2 00 00 00 dc 45 0d 00 bb 00 00 00 | .C..w....D......$E.......E...... |
db20 | 7f 46 0d 00 5c 00 00 00 3b 47 0d 00 6a 01 00 00 98 47 0d 00 62 00 00 00 03 49 0d 00 c3 00 00 00 | .F..\...;G..j....G..b....I...... |
db40 | 66 49 0d 00 11 00 00 00 2a 4a 0d 00 ba 00 00 00 3c 4a 0d 00 ba 00 00 00 f7 4a 0d 00 bc 00 00 00 | fI......*J......<J.......J...... |
db60 | b2 4b 0d 00 6e 00 00 00 6f 4c 0d 00 6f 00 00 00 de 4c 0d 00 a0 00 00 00 4e 4d 0d 00 42 00 00 00 | .K..n...oL..o....L......NM..B... |
db80 | ef 4d 0d 00 d2 00 00 00 32 4e 0d 00 1d 01 00 00 05 4f 0d 00 9b 01 00 00 23 50 0d 00 9b 01 00 00 | .M......2N.......O......#P...... |
dba0 | bf 51 0d 00 6b 00 00 00 5b 53 0d 00 98 00 00 00 c7 53 0d 00 4a 00 00 00 60 54 0d 00 0a 00 00 00 | .Q..k...[S.......S..J...`T...... |
dbc0 | ab 54 0d 00 18 00 00 00 b6 54 0d 00 3e 00 00 00 cf 54 0d 00 67 01 00 00 0e 55 0d 00 0d 00 00 00 | .T.......T..>....T..g....U...... |
dbe0 | 76 56 0d 00 16 00 00 00 84 56 0d 00 23 00 00 00 9b 56 0d 00 0d 00 00 00 bf 56 0d 00 58 00 00 00 | vV.......V..#....V.......V..X... |
dc00 | cd 56 0d 00 67 00 00 00 26 57 0d 00 ef 00 00 00 8e 57 0d 00 6e 00 00 00 7e 58 0d 00 98 00 00 00 | .V..g...&W.......W..n...~X...... |
dc20 | ed 58 0d 00 0b 00 00 00 86 59 0d 00 0b 00 00 00 92 59 0d 00 4c 00 00 00 9e 59 0d 00 2f 00 00 00 | .X.......Y.......Y..L....Y../... |
dc40 | eb 59 0d 00 17 00 00 00 1b 5a 0d 00 10 00 00 00 33 5a 0d 00 10 00 00 00 44 5a 0d 00 90 00 00 00 | .Y.......Z......3Z......DZ...... |
dc60 | 55 5a 0d 00 17 00 00 00 e6 5a 0d 00 37 00 00 00 fe 5a 0d 00 36 00 00 00 36 5b 0d 00 1b 00 00 00 | UZ.......Z..7....Z..6...6[...... |
dc80 | 6d 5b 0d 00 2f 00 00 00 89 5b 0d 00 97 00 00 00 b9 5b 0d 00 10 00 00 00 51 5c 0d 00 0a 00 00 00 | m[../....[.......[......Q\...... |
dca0 | 62 5c 0d 00 18 00 00 00 6d 5c 0d 00 72 01 00 00 86 5c 0d 00 40 00 00 00 f9 5d 0d 00 7f 01 00 00 | b\......m\..r....\..@....]...... |
dcc0 | 3a 5e 0d 00 c0 00 00 00 ba 5f 0d 00 48 01 00 00 7b 60 0d 00 54 01 00 00 c4 61 0d 00 9e 01 00 00 | :^......._..H...{`..T....a...... |
dce0 | 19 63 0d 00 14 00 00 00 b8 64 0d 00 08 00 00 00 cd 64 0d 00 18 00 00 00 d6 64 0d 00 31 00 00 00 | .c.......d.......d.......d..1... |
dd00 | ef 64 0d 00 8f 01 00 00 21 65 0d 00 f7 00 00 00 b1 66 0d 00 e9 00 00 00 a9 67 0d 00 89 00 00 00 | .d......!e.......f.......g...... |
dd20 | 93 68 0d 00 38 00 00 00 1d 69 0d 00 8f 00 00 00 56 69 0d 00 37 00 00 00 e6 69 0d 00 1b 00 00 00 | .h..8....i......Vi..7....i...... |
dd40 | 1e 6a 0d 00 25 01 00 00 3a 6a 0d 00 cb 00 00 00 60 6b 0d 00 db 00 00 00 2c 6c 0d 00 d7 00 00 00 | .j..%...:j......`k......,l...... |
dd60 | 08 6d 0d 00 a5 00 00 00 e0 6d 0d 00 93 00 00 00 86 6e 0d 00 e3 00 00 00 1a 6f 0d 00 02 02 00 00 | .m.......m.......n.......o...... |
dd80 | fe 6f 0d 00 c4 00 00 00 01 72 0d 00 a6 00 00 00 c6 72 0d 00 e6 00 00 00 6d 73 0d 00 4f 00 00 00 | .o.......r.......r......ms..O... |
dda0 | 54 74 0d 00 a4 00 00 00 a4 74 0d 00 28 01 00 00 49 75 0d 00 9d 00 00 00 72 76 0d 00 3b 00 00 00 | Tt.......t..(...Iu......rv..;... |
ddc0 | 10 77 0d 00 4a 00 00 00 4c 77 0d 00 81 00 00 00 97 77 0d 00 68 00 00 00 19 78 0d 00 49 00 00 00 | .w..J...Lw.......w..h....x..I... |
dde0 | 82 78 0d 00 36 00 00 00 cc 78 0d 00 11 00 00 00 03 79 0d 00 06 00 00 00 15 79 0d 00 0f 00 00 00 | .x..6....x.......y.......y...... |
de00 | 1c 79 0d 00 18 00 00 00 2c 79 0d 00 0e 00 00 00 45 79 0d 00 0e 00 00 00 54 79 0d 00 0f 00 00 00 | .y......,y......Ey......Ty...... |
de20 | 63 79 0d 00 0b 00 00 00 73 79 0d 00 6c 01 00 00 7f 79 0d 00 3a 01 00 00 ec 7a 0d 00 0f 00 00 00 | cy......sy..l....y..:....z...... |
de40 | 27 7c 0d 00 0f 00 00 00 37 7c 0d 00 08 00 00 00 47 7c 0d 00 07 00 00 00 50 7c 0d 00 04 00 00 00 | '|......7|......G|......P|...... |
de60 | 58 7c 0d 00 0f 00 00 00 5d 7c 0d 00 06 00 00 00 6d 7c 0d 00 ff 00 00 00 74 7c 0d 00 23 00 00 00 | X|......]|......m|......t|..#... |
de80 | 74 7d 0d 00 23 00 00 00 98 7d 0d 00 0e 00 00 00 bc 7d 0d 00 07 00 00 00 cb 7d 0d 00 0a 00 00 00 | t}..#....}.......}.......}...... |
dea0 | d3 7d 0d 00 04 00 00 00 de 7d 0d 00 36 00 00 00 e3 7d 0d 00 b5 00 00 00 1a 7e 0d 00 04 00 00 00 | .}.......}..6....}.......~...... |
dec0 | d0 7e 0d 00 f5 00 00 00 d5 7e 0d 00 19 00 00 00 cb 7f 0d 00 42 00 00 00 e5 7f 0d 00 1b 00 00 00 | .~.......~..........B........... |
dee0 | 28 80 0d 00 34 01 00 00 44 80 0d 00 3e 00 00 00 79 81 0d 00 29 00 00 00 b8 81 0d 00 0f 00 00 00 | (...4...D...>...y...)........... |
df00 | e2 81 0d 00 33 00 00 00 f2 81 0d 00 14 02 00 00 26 82 0d 00 40 00 00 00 3b 84 0d 00 3d 00 00 00 | ....3...........&...@...;...=... |
df20 | 7c 84 0d 00 07 01 00 00 ba 84 0d 00 23 00 00 00 c2 85 0d 00 11 00 00 00 e6 85 0d 00 3f 00 00 00 | |...........#...............?... |
df40 | f8 85 0d 00 20 00 00 00 38 86 0d 00 6f 00 00 00 59 86 0d 00 78 00 00 00 c9 86 0d 00 3d 00 00 00 | ........8...o...Y...x.......=... |
df60 | 42 87 0d 00 68 00 00 00 80 87 0d 00 6b 00 00 00 e9 87 0d 00 23 00 00 00 55 88 0d 00 07 00 00 00 | B...h.......k.......#...U....... |
df80 | 79 88 0d 00 7d 00 00 00 81 88 0d 00 06 00 00 00 ff 88 0d 00 16 00 00 00 06 89 0d 00 35 00 00 00 | y...}.......................5... |
dfa0 | 1d 89 0d 00 10 00 00 00 53 89 0d 00 69 02 00 00 64 89 0d 00 1b 00 00 00 ce 8b 0d 00 52 01 00 00 | ........S...i...d...........R... |
dfc0 | ea 8b 0d 00 4a 00 00 00 3d 8d 0d 00 e8 01 00 00 88 8d 0d 00 9d 01 00 00 71 8f 0d 00 d7 00 00 00 | ....J...=...............q....... |
dfe0 | 0f 91 0d 00 1e 00 00 00 e7 91 0d 00 2f 00 00 00 06 92 0d 00 21 00 00 00 36 92 0d 00 0c 00 00 00 | ............/.......!...6....... |
e000 | 58 92 0d 00 0e 00 00 00 65 92 0d 00 24 00 00 00 74 92 0d 00 0e 00 00 00 99 92 0d 00 59 00 00 00 | X.......e...$...t...........Y... |
e020 | a8 92 0d 00 22 00 00 00 02 93 0d 00 05 00 00 00 25 93 0d 00 20 00 00 00 2b 93 0d 00 14 00 00 00 | ...."...........%.......+....... |
e040 | 4c 93 0d 00 3c 00 00 00 61 93 0d 00 42 00 00 00 9e 93 0d 00 1f 00 00 00 e1 93 0d 00 2e 00 00 00 | L...<...a...B................... |
e060 | 01 94 0d 00 10 00 00 00 30 94 0d 00 10 00 00 00 41 94 0d 00 12 00 00 00 52 94 0d 00 12 00 00 00 | ........0.......A.......R....... |
e080 | 65 94 0d 00 2e 00 00 00 78 94 0d 00 3c 00 00 00 a7 94 0d 00 3b 00 00 00 e4 94 0d 00 0b 00 00 00 | e.......x...<.......;........... |
e0a0 | 20 95 0d 00 38 00 00 00 2c 95 0d 00 2c 00 00 00 65 95 0d 00 09 00 00 00 92 95 0d 00 09 00 00 00 | ....8...,...,...e............... |
e0c0 | 9c 95 0d 00 0e 00 00 00 a6 95 0d 00 63 00 00 00 b5 95 0d 00 9c 00 00 00 19 96 0d 00 ab 00 00 00 | ............c................... |
e0e0 | b6 96 0d 00 eb 00 00 00 62 97 0d 00 30 00 00 00 4e 98 0d 00 07 00 00 00 7f 98 0d 00 63 00 00 00 | ........b...0...N...........c... |
e100 | 87 98 0d 00 0c 01 00 00 eb 98 0d 00 0c 00 00 00 f8 99 0d 00 0c 00 00 00 05 9a 0d 00 15 00 00 00 | ................................ |
e120 | 12 9a 0d 00 19 00 00 00 28 9a 0d 00 08 00 00 00 42 9a 0d 00 8c 00 00 00 4b 9a 0d 00 03 00 00 00 | ........(.......B.......K....... |
e140 | d8 9a 0d 00 0a 00 00 00 dc 9a 0d 00 35 00 00 00 e7 9a 0d 00 13 00 00 00 1d 9b 0d 00 19 00 00 00 | ............5................... |
e160 | 31 9b 0d 00 06 00 00 00 4b 9b 0d 00 3b 02 00 00 52 9b 0d 00 85 00 00 00 8e 9d 0d 00 0e 00 00 00 | 1.......K...;...R............... |
e180 | 14 9e 0d 00 09 00 00 00 23 9e 0d 00 35 00 00 00 2d 9e 0d 00 04 00 00 00 63 9e 0d 00 e8 01 00 00 | ........#...5...-.......c....... |
e1a0 | 68 9e 0d 00 5f 00 00 00 51 a0 0d 00 61 00 00 00 b1 a0 0d 00 03 00 00 00 13 a1 0d 00 0b 00 00 00 | h..._...Q...a................... |
e1c0 | 17 a1 0d 00 4c 00 00 00 23 a1 0d 00 2f 00 00 00 70 a1 0d 00 1d 00 00 00 a0 a1 0d 00 10 00 00 00 | ....L...#.../...p............... |
e1e0 | be a1 0d 00 4d 00 00 00 cf a1 0d 00 0f 00 00 00 1d a2 0d 00 3b 00 00 00 2d a2 0d 00 12 00 00 00 | ....M...............;...-....... |
e200 | 69 a2 0d 00 1d 00 00 00 7c a2 0d 00 44 00 00 00 9a a2 0d 00 51 00 00 00 df a2 0d 00 41 00 00 00 | i.......|...D.......Q.......A... |
e220 | 31 a3 0d 00 6a 00 00 00 73 a3 0d 00 66 00 00 00 de a3 0d 00 1c 00 00 00 45 a4 0d 00 8d 00 00 00 | 1...j...s...f...........E....... |
e240 | 62 a4 0d 00 d1 00 00 00 f0 a4 0d 00 1d 00 00 00 c2 a5 0d 00 e3 00 00 00 e0 a5 0d 00 e4 00 00 00 | b............................... |
e260 | c4 a6 0d 00 24 00 00 00 a9 a7 0d 00 8d 00 00 00 ce a7 0d 00 5a 00 00 00 5c a8 0d 00 1a 00 00 00 | ....$...............Z...\....... |
e280 | b7 a8 0d 00 21 00 00 00 d2 a8 0d 00 22 00 00 00 f4 a8 0d 00 70 00 00 00 17 a9 0d 00 72 00 00 00 | ....!.......".......p.......r... |
e2a0 | 88 a9 0d 00 29 00 00 00 fb a9 0d 00 77 00 00 00 25 aa 0d 00 73 00 00 00 9d aa 0d 00 90 00 00 00 | ....).......w...%...s........... |
e2c0 | 11 ab 0d 00 53 00 00 00 a2 ab 0d 00 b6 00 00 00 f6 ab 0d 00 5c 00 00 00 ad ac 0d 00 1e 00 00 00 | ....S...............\........... |
e2e0 | 0a ad 0d 00 91 00 00 00 29 ad 0d 00 54 00 00 00 bb ad 0d 00 b7 00 00 00 10 ae 0d 00 60 00 00 00 | ........)...T...............`... |
e300 | c8 ae 0d 00 24 00 00 00 29 af 0d 00 61 00 00 00 4e af 0d 00 48 00 00 00 b0 af 0d 00 30 00 00 00 | ....$...)...a...N...H.......0... |
e320 | f9 af 0d 00 3b 00 00 00 2a b0 0d 00 25 00 00 00 66 b0 0d 00 28 00 00 00 8c b0 0d 00 2e 00 00 00 | ....;...*...%...f...(........... |
e340 | b5 b0 0d 00 9e 00 00 00 e4 b0 0d 00 3e 00 00 00 83 b1 0d 00 11 00 00 00 c2 b1 0d 00 19 00 00 00 | ............>................... |
e360 | d4 b1 0d 00 7a 00 00 00 ee b1 0d 00 17 00 00 00 69 b2 0d 00 13 00 00 00 81 b2 0d 00 7d 00 00 00 | ....z...........i...........}... |
e380 | 95 b2 0d 00 83 00 00 00 13 b3 0d 00 11 00 00 00 97 b3 0d 00 10 00 00 00 a9 b3 0d 00 33 00 00 00 | ............................3... |
e3a0 | ba b3 0d 00 33 00 00 00 ee b3 0d 00 33 00 00 00 22 b4 0d 00 33 00 00 00 56 b4 0d 00 6a 00 00 00 | ....3.......3..."...3...V...j... |
e3c0 | 8a b4 0d 00 22 00 00 00 f5 b4 0d 00 1e 01 00 00 18 b5 0d 00 33 00 00 00 37 b6 0d 00 dd 00 00 00 | ...."...............3...7....... |
e3e0 | 6b b6 0d 00 17 01 00 00 49 b7 0d 00 49 00 00 00 61 b8 0d 00 06 00 00 00 ab b8 0d 00 11 00 00 00 | k.......I...I...a............... |
e400 | b2 b8 0d 00 38 00 00 00 c4 b8 0d 00 28 00 00 00 fd b8 0d 00 24 00 00 00 26 b9 0d 00 9d 00 00 00 | ....8.......(.......$...&....... |
e420 | 4b b9 0d 00 37 00 00 00 e9 b9 0d 00 89 00 00 00 21 ba 0d 00 5c 00 00 00 ab ba 0d 00 cd 01 00 00 | K...7...........!...\........... |
e440 | 08 bb 0d 00 c2 00 00 00 d6 bc 0d 00 65 00 00 00 99 bd 0d 00 43 00 00 00 ff bd 0d 00 0a 00 00 00 | ............e.......C........... |
e460 | 43 be 0d 00 b3 00 00 00 4e be 0d 00 8c 00 00 00 02 bf 0d 00 e8 00 00 00 8f bf 0d 00 21 00 00 00 | C.......N...................!... |
e480 | 78 c0 0d 00 05 00 00 00 9a c0 0d 00 89 01 00 00 a0 c0 0d 00 ae 01 00 00 2a c2 0d 00 27 00 00 00 | x.......................*...'... |
e4a0 | d9 c3 0d 00 09 00 00 00 01 c4 0d 00 fc 00 00 00 0b c4 0d 00 79 01 00 00 08 c5 0d 00 0f 00 00 00 | ....................y........... |
e4c0 | 82 c6 0d 00 6c 00 00 00 92 c6 0d 00 35 00 00 00 ff c6 0d 00 d4 00 00 00 35 c7 0d 00 d4 00 00 00 | ....l.......5...........5....... |
e4e0 | 0a c8 0d 00 f4 00 00 00 df c8 0d 00 24 00 00 00 d4 c9 0d 00 6f 00 00 00 f9 c9 0d 00 10 00 00 00 | ............$.......o........... |
e500 | 69 ca 0d 00 c6 00 00 00 7a ca 0d 00 30 00 00 00 41 cb 0d 00 a3 00 00 00 72 cb 0d 00 a4 00 00 00 | i.......z...0...A.......r....... |
e520 | 16 cc 0d 00 25 00 00 00 bb cc 0d 00 38 00 00 00 e1 cc 0d 00 22 00 00 00 1a cd 0d 00 65 00 00 00 | ....%.......8.......".......e... |
e540 | 3d cd 0d 00 80 00 00 00 a3 cd 0d 00 74 00 00 00 24 ce 0d 00 6a 00 00 00 99 ce 0d 00 a9 00 00 00 | =...........t...$...j........... |
e560 | 04 cf 0d 00 01 00 00 00 ae cf 0d 00 03 00 00 00 b0 cf 0d 00 1f 00 00 00 b4 cf 0d 00 11 00 00 00 | ................................ |
e580 | d4 cf 0d 00 10 00 00 00 e6 cf 0d 00 37 01 00 00 f7 cf 0d 00 0b 00 00 00 2f d1 0d 00 0e 00 00 00 | ............7.........../....... |
e5a0 | 3b d1 0d 00 17 00 00 00 4a d1 0d 00 22 00 00 00 62 d1 0d 00 05 00 00 00 85 d1 0d 00 05 00 00 00 | ;.......J..."...b............... |
e5c0 | 8b d1 0d 00 1b 00 00 00 91 d1 0d 00 40 00 00 00 ad d1 0d 00 1b 00 00 00 ee d1 0d 00 0c 00 00 00 | ............@................... |
e5e0 | 0a d2 0d 00 eb 00 00 00 17 d2 0d 00 03 00 00 00 03 d3 0d 00 41 02 00 00 07 d3 0d 00 ad 00 00 00 | ....................A........... |
e600 | 49 d5 0d 00 0d 00 00 00 f7 d5 0d 00 91 00 00 00 05 d6 0d 00 0b 00 00 00 97 d6 0d 00 34 00 00 00 | I...........................4... |
e620 | a3 d6 0d 00 25 00 00 00 d8 d6 0d 00 16 00 00 00 fe d6 0d 00 40 00 00 00 15 d7 0d 00 23 00 00 00 | ....%...............@.......#... |
e640 | 56 d7 0d 00 1f 00 00 00 7a d7 0d 00 07 00 00 00 9a d7 0d 00 0f 00 00 00 a2 d7 0d 00 4b 00 00 00 | V.......z...................K... |
e660 | b2 d7 0d 00 ab 01 00 00 fe d7 0d 00 a3 00 00 00 aa d9 0d 00 13 00 00 00 4e da 0d 00 0f 00 00 00 | ........................N....... |
e680 | 62 da 0d 00 1c 00 00 00 72 da 0d 00 18 00 00 00 8f da 0d 00 23 00 00 00 a8 da 0d 00 0f 00 00 00 | b.......r...........#........... |
e6a0 | cc da 0d 00 10 00 00 00 dc da 0d 00 0e 00 00 00 ed da 0d 00 25 00 00 00 fc da 0d 00 1a 00 00 00 | ....................%........... |
e6c0 | 22 db 0d 00 18 00 00 00 3d db 0d 00 45 00 00 00 56 db 0d 00 16 00 00 00 9c db 0d 00 43 00 00 00 | ".......=...E...V...........C... |
e6e0 | b3 db 0d 00 25 00 00 00 f7 db 0d 00 38 00 00 00 1d dc 0d 00 36 00 00 00 56 dc 0d 00 20 00 00 00 | ....%.......8.......6...V....... |
e700 | 8d dc 0d 00 13 00 00 00 ae dc 0d 00 1e 00 00 00 c2 dc 0d 00 15 00 00 00 e1 dc 0d 00 10 00 00 00 | ................................ |
e720 | f7 dc 0d 00 ec 00 00 00 08 dd 0d 00 ba 00 00 00 f5 dd 0d 00 25 00 00 00 b0 de 0d 00 89 00 00 00 | ....................%........... |
e740 | d6 de 0d 00 13 00 00 00 60 df 0d 00 1a 00 00 00 74 df 0d 00 3a 00 00 00 8f df 0d 00 81 01 00 00 | ........`.......t...:........... |
e760 | ca df 0d 00 47 00 00 00 4c e1 0d 00 74 00 00 00 94 e1 0d 00 9d 00 00 00 09 e2 0d 00 7b 01 00 00 | ....G...L...t...............{... |
e780 | a7 e2 0d 00 61 00 00 00 23 e4 0d 00 6c 00 00 00 85 e4 0d 00 06 00 00 00 f2 e4 0d 00 47 00 00 00 | ....a...#...l...............G... |
e7a0 | f9 e4 0d 00 44 00 00 00 41 e5 0d 00 37 00 00 00 86 e5 0d 00 07 01 00 00 be e5 0d 00 57 00 00 00 | ....D...A...7...............W... |
e7c0 | c6 e6 0d 00 31 00 00 00 1e e7 0d 00 5b 00 00 00 50 e7 0d 00 1f 00 00 00 ac e7 0d 00 62 00 00 00 | ....1.......[...P...........b... |
e7e0 | cc e7 0d 00 2b 00 00 00 2f e8 0d 00 04 00 00 00 5b e8 0d 00 16 00 00 00 60 e8 0d 00 37 00 00 00 | ....+.../.......[.......`...7... |
e800 | 77 e8 0d 00 38 01 00 00 af e8 0d 00 0d 00 00 00 e8 e9 0d 00 0d 00 00 00 f6 e9 0d 00 12 00 00 00 | w...8........................... |
e820 | 04 ea 0d 00 0a 00 00 00 17 ea 0d 00 4e 00 00 00 22 ea 0d 00 08 01 00 00 71 ea 0d 00 24 01 00 00 | ............N...".......q...$... |
e840 | 7a eb 0d 00 15 00 00 00 9f ec 0d 00 9c 01 00 00 b5 ec 0d 00 5c 00 00 00 52 ee 0d 00 a4 00 00 00 | z...................\...R....... |
e860 | af ee 0d 00 16 00 00 00 54 ef 0d 00 8a 02 00 00 6b ef 0d 00 1d 00 00 00 f6 f1 0d 00 0c 00 00 00 | ........T.......k............... |
e880 | 14 f2 0d 00 1f 00 00 00 21 f2 0d 00 43 00 00 00 41 f2 0d 00 0d 00 00 00 85 f2 0d 00 c1 00 00 00 | ........!...C...A............... |
e8a0 | 93 f2 0d 00 77 00 00 00 55 f3 0d 00 69 00 00 00 cd f3 0d 00 62 00 00 00 37 f4 0d 00 76 00 00 00 | ....w...U...i.......b...7...v... |
e8c0 | 9a f4 0d 00 0e 01 00 00 11 f5 0d 00 cb 00 00 00 20 f6 0d 00 19 01 00 00 ec f6 0d 00 43 00 00 00 | ............................C... |
e8e0 | 06 f8 0d 00 ab 00 00 00 4a f8 0d 00 9a 00 00 00 f6 f8 0d 00 a6 00 00 00 91 f9 0d 00 6e 01 00 00 | ........J...................n... |
e900 | 38 fa 0d 00 17 01 00 00 a7 fb 0d 00 6f 00 00 00 bf fc 0d 00 7b 00 00 00 2f fd 0d 00 7d 00 00 00 | 8...........o.......{.../...}... |
e920 | ab fd 0d 00 12 01 00 00 29 fe 0d 00 e6 00 00 00 3c ff 0d 00 b6 00 00 00 23 00 0e 00 b1 00 00 00 | ........).......<.......#....... |
e940 | da 00 0e 00 fb 00 00 00 8c 01 0e 00 20 00 00 00 88 02 0e 00 a0 01 00 00 a9 02 0e 00 53 00 00 00 | ............................S... |
e960 | 4a 04 0e 00 39 00 00 00 9e 04 0e 00 28 00 00 00 d8 04 0e 00 4a 00 00 00 01 05 0e 00 3b 00 00 00 | J...9.......(.......J.......;... |
e980 | 4c 05 0e 00 34 00 00 00 88 05 0e 00 52 00 00 00 bd 05 0e 00 53 00 00 00 10 06 0e 00 52 00 00 00 | L...4.......R.......S.......R... |
e9a0 | 64 06 0e 00 80 01 00 00 b7 06 0e 00 36 00 00 00 38 08 0e 00 23 00 00 00 6f 08 0e 00 0b 00 00 00 | d...........6...8...#...o....... |
e9c0 | 93 08 0e 00 ad 00 00 00 9f 08 0e 00 91 00 00 00 4d 09 0e 00 1b 02 00 00 df 09 0e 00 e8 01 00 00 | ................M............... |
e9e0 | fb 0b 0e 00 07 00 00 00 e4 0d 0e 00 df 00 00 00 ec 0d 0e 00 45 01 00 00 cc 0e 0e 00 22 00 00 00 | ....................E......."... |
ea00 | 12 10 0e 00 79 01 00 00 35 10 0e 00 a6 00 00 00 af 11 0e 00 e9 00 00 00 56 12 0e 00 83 00 00 00 | ....y...5...............V....... |
ea20 | 40 13 0e 00 19 00 00 00 c4 13 0e 00 0f 00 00 00 de 13 0e 00 09 00 00 00 ee 13 0e 00 12 00 00 00 | @............................... |
ea40 | f8 13 0e 00 0e 00 00 00 0b 14 0e 00 21 00 00 00 1a 14 0e 00 0e 00 00 00 3c 14 0e 00 17 00 00 00 | ............!...........<....... |
ea60 | 4b 14 0e 00 14 00 00 00 63 14 0e 00 19 00 00 00 78 14 0e 00 14 00 00 00 92 14 0e 00 06 00 00 00 | K.......c.......x............... |
ea80 | a7 14 0e 00 13 00 00 00 ae 14 0e 00 12 00 00 00 c2 14 0e 00 0d 00 00 00 d5 14 0e 00 6a 00 00 00 | ............................j... |
eaa0 | e3 14 0e 00 17 00 00 00 4e 15 0e 00 2e 00 00 00 66 15 0e 00 2d 00 00 00 95 15 0e 00 08 00 00 00 | ........N.......f...-........... |
eac0 | c3 15 0e 00 16 00 00 00 cc 15 0e 00 ea 00 00 00 e3 15 0e 00 59 00 00 00 ce 16 0e 00 19 00 00 00 | ....................Y........... |
eae0 | 28 17 0e 00 7e 00 00 00 42 17 0e 00 07 00 00 00 c1 17 0e 00 2a 00 00 00 c9 17 0e 00 4f 00 00 00 | (...~...B...........*.......O... |
eb00 | f4 17 0e 00 17 00 00 00 44 18 0e 00 3b 00 00 00 5c 18 0e 00 60 00 00 00 98 18 0e 00 87 01 00 00 | ........D...;...\...`........... |
eb20 | f9 18 0e 00 6e 00 00 00 81 1a 0e 00 24 00 00 00 f0 1a 0e 00 54 00 00 00 15 1b 0e 00 a4 01 00 00 | ....n.......$.......T........... |
eb40 | 6a 1b 0e 00 8f 01 00 00 0f 1d 0e 00 24 00 00 00 9f 1e 0e 00 1f 00 00 00 c4 1e 0e 00 07 00 00 00 | j...........$................... |
eb60 | e4 1e 0e 00 1b 00 00 00 ec 1e 0e 00 08 00 00 00 08 1f 0e 00 5c 00 00 00 11 1f 0e 00 08 00 00 00 | ....................\........... |
eb80 | 6e 1f 0e 00 1b 00 00 00 77 1f 0e 00 57 00 00 00 93 1f 0e 00 14 00 00 00 eb 1f 0e 00 3f 00 00 00 | n.......w...W...............?... |
eba0 | 00 20 0e 00 3a 00 00 00 40 20 0e 00 75 00 00 00 7b 20 0e 00 69 00 00 00 f1 20 0e 00 32 01 00 00 | ....:...@...u...{...i.......2... |
ebc0 | 5b 21 0e 00 36 01 00 00 8e 22 0e 00 0c 00 00 00 c5 23 0e 00 26 00 00 00 d2 23 0e 00 18 00 00 00 | [!..6....".......#..&....#...... |
ebe0 | f9 23 0e 00 2e 00 00 00 12 24 0e 00 41 01 00 00 41 24 0e 00 03 00 00 00 83 25 0e 00 04 00 00 00 | .#.......$..A...A$.......%...... |
ec00 | 87 25 0e 00 14 00 00 00 8c 25 0e 00 0c 00 00 00 a1 25 0e 00 05 00 00 00 ae 25 0e 00 0c 00 00 00 | .%.......%.......%.......%...... |
ec20 | b4 25 0e 00 0d 00 00 00 c1 25 0e 00 0b 00 00 00 cf 25 0e 00 ae 00 00 00 db 25 0e 00 31 01 00 00 | .%.......%.......%.......%..1... |
ec40 | 8a 26 0e 00 4f 00 00 00 bc 27 0e 00 ca 00 00 00 0c 28 0e 00 43 00 00 00 d7 28 0e 00 46 00 00 00 | .&..O....'.......(..C....(..F... |
ec60 | 1b 29 0e 00 0b 00 00 00 62 29 0e 00 0b 00 00 00 6e 29 0e 00 19 00 00 00 7a 29 0e 00 0f 00 00 00 | .)......b)......n)......z)...... |
ec80 | 94 29 0e 00 ba 01 00 00 a4 29 0e 00 6a 00 00 00 5f 2b 0e 00 13 00 00 00 ca 2b 0e 00 e4 00 00 00 | .).......)..j..._+.......+...... |
eca0 | de 2b 0e 00 46 00 00 00 c3 2c 0e 00 88 01 00 00 0a 2d 0e 00 89 01 00 00 93 2e 0e 00 0b 00 00 00 | .+..F....,.......-.............. |
ecc0 | 1d 30 0e 00 ce 00 00 00 29 30 0e 00 6c 00 00 00 f8 30 0e 00 10 01 00 00 65 31 0e 00 6e 00 00 00 | .0......)0..l....0......e1..n... |
ece0 | 76 32 0e 00 26 00 00 00 e5 32 0e 00 40 00 00 00 0c 33 0e 00 a0 00 00 00 4d 33 0e 00 b9 00 00 00 | v2..&....2..@....3......M3...... |
ed00 | ee 33 0e 00 58 00 00 00 a8 34 0e 00 64 00 00 00 01 35 0e 00 39 00 00 00 66 35 0e 00 45 00 00 00 | .3..X....4..d....5..9...f5..E... |
ed20 | a0 35 0e 00 4a 00 00 00 e6 35 0e 00 4b 00 00 00 31 36 0e 00 56 00 00 00 7d 36 0e 00 57 00 00 00 | .5..J....5..K...16..V...}6..W... |
ed40 | d4 36 0e 00 96 00 00 00 2c 37 0e 00 37 00 00 00 c3 37 0e 00 8f 00 00 00 fb 37 0e 00 06 00 00 00 | .6......,7..7....7.......7...... |
ed60 | 8b 38 0e 00 0f 00 00 00 92 38 0e 00 1b 00 00 00 a2 38 0e 00 33 00 00 00 be 38 0e 00 56 00 00 00 | .8.......8.......8..3....8..V... |
ed80 | f2 38 0e 00 0b 00 00 00 49 39 0e 00 12 00 00 00 55 39 0e 00 38 00 00 00 68 39 0e 00 19 00 00 00 | .8......I9......U9..8...h9...... |
eda0 | a1 39 0e 00 33 00 00 00 bb 39 0e 00 1f 00 00 00 ef 39 0e 00 2e 00 00 00 0f 3a 0e 00 93 01 00 00 | .9..3....9.......9.......:...... |
edc0 | 3e 3a 0e 00 0f 00 00 00 d2 3b 0e 00 0a 00 00 00 e2 3b 0e 00 0a 00 00 00 ed 3b 0e 00 63 00 00 00 | >:.......;.......;.......;..c... |
ede0 | f8 3b 0e 00 2f 00 00 00 5c 3c 0e 00 32 00 00 00 8c 3c 0e 00 4c 00 00 00 bf 3c 0e 00 23 00 00 00 | .;../...\<..2....<..L....<..#... |
ee00 | 0c 3d 0e 00 64 00 00 00 30 3d 0e 00 65 00 00 00 95 3d 0e 00 6e 00 00 00 fb 3d 0e 00 29 00 00 00 | .=..d...0=..e....=..n....=..)... |
ee20 | 6a 3e 0e 00 dd 00 00 00 94 3e 0e 00 2d 00 00 00 72 3f 0e 00 11 00 00 00 a0 3f 0e 00 11 00 00 00 | j>.......>..-...r?.......?...... |
ee40 | b2 3f 0e 00 12 00 00 00 c4 3f 0e 00 0c 00 00 00 d7 3f 0e 00 30 00 00 00 e4 3f 0e 00 3f 00 00 00 | .?.......?.......?..0....?..?... |
ee60 | 15 40 0e 00 40 00 00 00 55 40 0e 00 04 01 00 00 96 40 0e 00 a9 00 00 00 9b 41 0e 00 18 00 00 00 | .@..@...U@.......@.......A...... |
ee80 | 45 42 0e 00 08 00 00 00 5e 42 0e 00 46 00 00 00 67 42 0e 00 4d 00 00 00 ae 42 0e 00 1f 00 00 00 | EB......^B..F...gB..M....B...... |
eea0 | fc 42 0e 00 4f 00 00 00 1c 43 0e 00 3d 00 00 00 6c 43 0e 00 08 00 00 00 aa 43 0e 00 0e 00 00 00 | .B..O....C..=...lC.......C...... |
eec0 | b3 43 0e 00 84 01 00 00 c2 43 0e 00 8c 00 00 00 47 45 0e 00 fb 00 00 00 d4 45 0e 00 11 00 00 00 | .C.......C......GE.......E...... |
eee0 | d0 46 0e 00 0e 01 00 00 e2 46 0e 00 3a 00 00 00 f1 47 0e 00 09 00 00 00 2c 48 0e 00 38 00 00 00 | .F.......F..:....G......,H..8... |
ef00 | 36 48 0e 00 bd 00 00 00 6f 48 0e 00 30 00 00 00 2d 49 0e 00 31 00 00 00 5e 49 0e 00 24 00 00 00 | 6H......oH..0...-I..1...^I..$... |
ef20 | 90 49 0e 00 28 00 00 00 b5 49 0e 00 23 00 00 00 de 49 0e 00 20 00 00 00 02 4a 0e 00 21 00 00 00 | .I..(....I..#....I.......J..!... |
ef40 | 23 4a 0e 00 3a 00 00 00 45 4a 0e 00 1f 00 00 00 80 4a 0e 00 32 00 00 00 a0 4a 0e 00 26 00 00 00 | #J..:...EJ.......J..2....J..&... |
ef60 | d3 4a 0e 00 13 00 00 00 fa 4a 0e 00 41 00 00 00 0e 4b 0e 00 a0 00 00 00 50 4b 0e 00 3e 00 00 00 | .J.......J..A....K......PK..>... |
ef80 | f1 4b 0e 00 1f 00 00 00 30 4c 0e 00 ce 00 00 00 50 4c 0e 00 4c 01 00 00 1f 4d 0e 00 36 01 00 00 | .K......0L......PL..L....M..6... |
efa0 | 6c 4e 0e 00 21 00 00 00 a3 4f 0e 00 1e 00 00 00 c5 4f 0e 00 0e 00 00 00 e4 4f 0e 00 03 00 00 00 | lN..!....O.......O.......O...... |
efc0 | f3 4f 0e 00 39 00 00 00 f7 4f 0e 00 2f 00 00 00 31 50 0e 00 b8 00 00 00 61 50 0e 00 24 00 00 00 | .O..9....O../...1P......aP..$... |
efe0 | 1a 51 0e 00 49 00 00 00 3f 51 0e 00 03 00 00 00 89 51 0e 00 24 00 00 00 8d 51 0e 00 03 00 00 00 | .Q..I...?Q.......Q..$....Q...... |
f000 | b2 51 0e 00 06 00 00 00 b6 51 0e 00 0c 00 00 00 bd 51 0e 00 18 00 00 00 ca 51 0e 00 17 00 00 00 | .Q.......Q.......Q.......Q...... |
f020 | e3 51 0e 00 15 00 00 00 fb 51 0e 00 22 00 00 00 11 52 0e 00 4c 00 00 00 34 52 0e 00 45 00 00 00 | .Q.......Q.."....R..L...4R..E... |
f040 | 81 52 0e 00 98 00 00 00 c7 52 0e 00 15 00 00 00 60 53 0e 00 53 01 00 00 76 53 0e 00 20 00 00 00 | .R.......R......`S..S...vS...... |
f060 | ca 54 0e 00 03 00 00 00 eb 54 0e 00 21 00 00 00 ef 54 0e 00 21 00 00 00 11 55 0e 00 04 00 00 00 | .T.......T..!....T..!....U...... |
f080 | 33 55 0e 00 15 00 00 00 38 55 0e 00 e1 00 00 00 4e 55 0e 00 08 00 00 00 30 56 0e 00 0d 00 00 00 | 3U......8U......NU......0V...... |
f0a0 | 39 56 0e 00 c3 00 00 00 47 56 0e 00 20 00 00 00 0b 57 0e 00 21 00 00 00 2c 57 0e 00 0c 00 00 00 | 9V......GV.......W..!...,W...... |
f0c0 | 4e 57 0e 00 0a 00 00 00 5b 57 0e 00 72 00 00 00 66 57 0e 00 dc 00 00 00 d9 57 0e 00 0e 00 00 00 | NW......[W..r...fW.......W...... |
f0e0 | b6 58 0e 00 4f 00 00 00 c5 58 0e 00 6a 00 00 00 15 59 0e 00 50 00 00 00 80 59 0e 00 0e 00 00 00 | .X..O....X..j....Y..P....Y...... |
f100 | d1 59 0e 00 0b 00 00 00 e0 59 0e 00 1f 00 00 00 ec 59 0e 00 41 00 00 00 0c 5a 0e 00 13 04 00 00 | .Y.......Y.......Y..A....Z...... |
f120 | 4e 5a 0e 00 87 00 00 00 62 5e 0e 00 25 00 00 00 ea 5e 0e 00 16 00 00 00 10 5f 0e 00 2f 01 00 00 | NZ......b^..%....^......._../... |
f140 | 27 5f 0e 00 96 00 00 00 57 60 0e 00 1e 00 00 00 ee 60 0e 00 1c 00 00 00 0d 61 0e 00 ad 01 00 00 | '_......W`.......`.......a...... |
f160 | 2a 61 0e 00 45 00 00 00 d8 62 0e 00 16 00 00 00 1e 63 0e 00 35 00 00 00 35 63 0e 00 3b 00 00 00 | *a..E....b.......c..5...5c..;... |
f180 | 6b 63 0e 00 4a 00 00 00 a7 63 0e 00 54 00 00 00 f2 63 0e 00 73 00 00 00 47 64 0e 00 4c 00 00 00 | kc..J....c..T....c..s...Gd..L... |
f1a0 | bb 64 0e 00 0d 00 00 00 08 65 0e 00 23 00 00 00 16 65 0e 00 23 00 00 00 3a 65 0e 00 21 00 00 00 | .d.......e..#....e..#...:e..!... |
f1c0 | 5e 65 0e 00 15 00 00 00 80 65 0e 00 0b 00 00 00 96 65 0e 00 0a 00 00 00 a2 65 0e 00 1e 00 00 00 | ^e.......e.......e.......e...... |
f1e0 | ad 65 0e 00 0b 00 00 00 cc 65 0e 00 1f 00 00 00 d8 65 0e 00 15 00 00 00 f8 65 0e 00 48 00 00 00 | .e.......e.......e.......e..H... |
f200 | 0e 66 0e 00 4e 00 00 00 57 66 0e 00 0b 00 00 00 a6 66 0e 00 3d 00 00 00 b2 66 0e 00 25 00 00 00 | .f..N...Wf.......f..=....f..%... |
f220 | f0 66 0e 00 29 00 00 00 16 67 0e 00 11 00 00 00 40 67 0e 00 76 00 00 00 52 67 0e 00 43 00 00 00 | .f..)....g......@g..v...Rg..C... |
f240 | c9 67 0e 00 6b 00 00 00 0d 68 0e 00 0c 00 00 00 79 68 0e 00 20 00 00 00 86 68 0e 00 0d 00 00 00 | .g..k....h......yh.......h...... |
f260 | a7 68 0e 00 05 00 00 00 b5 68 0e 00 0d 00 00 00 bb 68 0e 00 0e 00 00 00 c9 68 0e 00 81 00 00 00 | .h.......h.......h.......h...... |
f280 | d8 68 0e 00 07 00 00 00 5a 69 0e 00 1a 00 00 00 62 69 0e 00 27 00 00 00 7d 69 0e 00 19 00 00 00 | .h......Zi......bi..'...}i...... |
f2a0 | a5 69 0e 00 1e 00 00 00 bf 69 0e 00 17 00 00 00 de 69 0e 00 1f 00 00 00 f6 69 0e 00 6d 00 00 00 | .i.......i.......i.......i..m... |
f2c0 | 16 6a 0e 00 58 00 00 00 84 6a 0e 00 0c 00 00 00 dd 6a 0e 00 0b 00 00 00 ea 6a 0e 00 10 00 00 00 | .j..X....j.......j.......j...... |
f2e0 | f6 6a 0e 00 3d 00 00 00 07 6b 0e 00 39 00 00 00 45 6b 0e 00 40 00 00 00 7f 6b 0e 00 0d 00 00 00 | .j..=....k..9...Ek..@....k...... |
f300 | c0 6b 0e 00 0b 00 00 00 ce 6b 0e 00 1f 00 00 00 da 6b 0e 00 0f 00 00 00 fa 6b 0e 00 0f 00 00 00 | .k.......k.......k.......k...... |
f320 | 0a 6c 0e 00 1d 00 00 00 1a 6c 0e 00 09 00 00 00 38 6c 0e 00 10 00 00 00 42 6c 0e 00 14 00 00 00 | .l.......l......8l......Bl...... |
f340 | 53 6c 0e 00 1d 00 00 00 68 6c 0e 00 0f 00 00 00 86 6c 0e 00 1d 00 00 00 96 6c 0e 00 17 00 00 00 | Sl......hl.......l.......l...... |
f360 | b4 6c 0e 00 d0 01 00 00 cc 6c 0e 00 2e 00 00 00 9d 6e 0e 00 7d 00 00 00 cc 6e 0e 00 c1 00 00 00 | .l.......l.......n..}....n...... |
f380 | 4a 6f 0e 00 0c 00 00 00 0c 70 0e 00 13 00 00 00 19 70 0e 00 15 00 00 00 2d 70 0e 00 0f 00 00 00 | Jo.......p.......p......-p...... |
f3a0 | 43 70 0e 00 67 00 00 00 53 70 0e 00 56 00 00 00 bb 70 0e 00 11 00 00 00 12 71 0e 00 c1 00 00 00 | Cp..g...Sp..V....p.......q...... |
f3c0 | 24 71 0e 00 59 00 00 00 e6 71 0e 00 c6 00 00 00 40 72 0e 00 07 00 00 00 07 73 0e 00 07 00 00 00 | $q..Y....q......@r.......s...... |
f3e0 | 0f 73 0e 00 35 00 00 00 17 73 0e 00 69 00 00 00 4d 73 0e 00 6c 00 00 00 b7 73 0e 00 2b 00 00 00 | .s..5....s..i...Ms..l....s..+... |
f400 | 24 74 0e 00 7c 00 00 00 50 74 0e 00 69 00 00 00 cd 74 0e 00 0b 00 00 00 37 75 0e 00 09 00 00 00 | $t..|...Pt..i....t......7u...... |
f420 | 43 75 0e 00 11 00 00 00 4d 75 0e 00 05 00 00 00 5f 75 0e 00 ad 00 00 00 65 75 0e 00 4c 00 00 00 | Cu......Mu......_u......eu..L... |
f440 | 13 76 0e 00 12 00 00 00 60 76 0e 00 04 00 00 00 73 76 0e 00 06 00 00 00 78 76 0e 00 06 00 00 00 | .v......`v......sv......xv...... |
f460 | 7f 76 0e 00 04 00 00 00 86 76 0e 00 0f 00 00 00 8b 76 0e 00 16 00 00 00 9b 76 0e 00 d7 00 00 00 | .v.......v.......v.......v...... |
f480 | b2 76 0e 00 fd 00 00 00 8a 77 0e 00 65 01 00 00 88 78 0e 00 06 00 00 00 ee 79 0e 00 f4 00 00 00 | .v.......w..e....x.......y...... |
f4a0 | f5 79 0e 00 00 01 00 00 ea 7a 0e 00 06 00 00 00 eb 7b 0e 00 0b 02 00 00 f2 7b 0e 00 e2 01 00 00 | .y.......z.......{.......{...... |
f4c0 | fe 7d 0e 00 03 00 00 00 e1 7f 0e 00 27 00 00 00 e5 7f 0e 00 18 00 00 00 0d 80 0e 00 0a 00 00 00 | .}..........'................... |
f4e0 | 26 80 0e 00 7b 01 00 00 31 80 0e 00 40 00 00 00 ad 81 0e 00 a9 01 00 00 ee 81 0e 00 30 00 00 00 | &...{...1...@...............0... |
f500 | 98 83 0e 00 10 00 00 00 c9 83 0e 00 1b 00 00 00 da 83 0e 00 2e 00 00 00 f6 83 0e 00 0b 00 00 00 | ................................ |
f520 | 25 84 0e 00 13 00 00 00 31 84 0e 00 0b 00 00 00 45 84 0e 00 2e 00 00 00 51 84 0e 00 46 00 00 00 | %.......1.......E.......Q...F... |
f540 | 80 84 0e 00 0d 00 00 00 c7 84 0e 00 0b 00 00 00 d5 84 0e 00 58 01 00 00 e1 84 0e 00 88 00 00 00 | ....................X........... |
f560 | 3a 86 0e 00 45 00 00 00 c3 86 0e 00 29 00 00 00 09 87 0e 00 96 00 00 00 33 87 0e 00 10 00 00 00 | :...E.......)...........3....... |
f580 | ca 87 0e 00 2f 00 00 00 db 87 0e 00 43 00 00 00 0b 88 0e 00 37 00 00 00 4f 88 0e 00 49 00 00 00 | ..../.......C.......7...O...I... |
f5a0 | 87 88 0e 00 09 00 00 00 d1 88 0e 00 a8 00 00 00 db 88 0e 00 3a 00 00 00 84 89 0e 00 08 00 00 00 | ....................:........... |
f5c0 | bf 89 0e 00 20 00 00 00 c8 89 0e 00 28 00 00 00 e9 89 0e 00 4b 00 00 00 12 8a 0e 00 0f 00 00 00 | ............(.......K........... |
f5e0 | 5e 8a 0e 00 26 01 00 00 6e 8a 0e 00 5b 01 00 00 95 8b 0e 00 87 00 00 00 f1 8c 0e 00 86 00 00 00 | ^...&...n...[................... |
f600 | 79 8d 0e 00 ce 01 00 00 00 8e 0e 00 18 00 00 00 cf 8f 0e 00 51 00 00 00 e8 8f 0e 00 f2 00 00 00 | y...................Q........... |
f620 | 3a 90 0e 00 0e 00 00 00 2d 91 0e 00 34 00 00 00 3c 91 0e 00 36 00 00 00 71 91 0e 00 bd 00 00 00 | :.......-...4...<...6...q....... |
f640 | a8 91 0e 00 7e 00 00 00 66 92 0e 00 33 00 00 00 e5 92 0e 00 0e 00 00 00 19 93 0e 00 dd 00 00 00 | ....~...f...3................... |
f660 | 28 93 0e 00 06 00 00 00 06 94 0e 00 12 00 00 00 0d 94 0e 00 14 00 00 00 20 94 0e 00 0b 00 00 00 | (............................... |
f680 | 35 94 0e 00 14 00 00 00 41 94 0e 00 42 00 00 00 56 94 0e 00 07 00 00 00 99 94 0e 00 07 00 00 00 | 5.......A...B...V............... |
f6a0 | a1 94 0e 00 c7 00 00 00 a9 94 0e 00 29 00 00 00 71 95 0e 00 28 00 00 00 9b 95 0e 00 23 00 00 00 | ............)...q...(.......#... |
f6c0 | c4 95 0e 00 14 00 00 00 e8 95 0e 00 20 00 00 00 fd 95 0e 00 18 00 00 00 1e 96 0e 00 28 00 00 00 | ............................(... |
f6e0 | 37 96 0e 00 1d 00 00 00 60 96 0e 00 29 00 00 00 7e 96 0e 00 1e 00 00 00 a8 96 0e 00 30 00 00 00 | 7.......`...)...~...........0... |
f700 | c7 96 0e 00 4b 00 00 00 f8 96 0e 00 6e 00 00 00 44 97 0e 00 2d 00 00 00 b3 97 0e 00 35 00 00 00 | ....K.......n...D...-.......5... |
f720 | e1 97 0e 00 16 00 00 00 17 98 0e 00 1c 00 00 00 2e 98 0e 00 1b 00 00 00 4b 98 0e 00 41 00 00 00 | ........................K...A... |
f740 | 67 98 0e 00 35 00 00 00 a9 98 0e 00 97 00 00 00 df 98 0e 00 4e 00 00 00 77 99 0e 00 1d 00 00 00 | g...5...............N...w....... |
f760 | c6 99 0e 00 4c 00 00 00 e4 99 0e 00 17 00 00 00 31 9a 0e 00 1f 00 00 00 49 9a 0e 00 1b 00 00 00 | ....L...........1.......I....... |
f780 | 69 9a 0e 00 24 00 00 00 85 9a 0e 00 31 00 00 00 aa 9a 0e 00 4a 00 00 00 dc 9a 0e 00 5a 00 00 00 | i...$.......1.......J.......Z... |
f7a0 | 27 9b 0e 00 2a 00 00 00 82 9b 0e 00 3f 00 00 00 ad 9b 0e 00 47 00 00 00 ed 9b 0e 00 42 00 00 00 | '...*.......?.......G.......B... |
f7c0 | 35 9c 0e 00 28 00 00 00 78 9c 0e 00 2a 00 00 00 a1 9c 0e 00 2d 00 00 00 cc 9c 0e 00 30 00 00 00 | 5...(...x...*.......-.......0... |
f7e0 | fa 9c 0e 00 2d 00 00 00 2b 9d 0e 00 2c 00 00 00 59 9d 0e 00 19 00 00 00 86 9d 0e 00 29 00 00 00 | ....-...+...,...Y...........)... |
f800 | a0 9d 0e 00 30 00 00 00 ca 9d 0e 00 24 00 00 00 fb 9d 0e 00 2b 00 00 00 20 9e 0e 00 29 00 00 00 | ....0.......$.......+.......)... |
f820 | 4c 9e 0e 00 35 00 00 00 76 9e 0e 00 2a 00 00 00 ac 9e 0e 00 10 00 00 00 d7 9e 0e 00 2b 00 00 00 | L...5...v...*...............+... |
f840 | e8 9e 0e 00 55 00 00 00 14 9f 0e 00 3c 00 00 00 6a 9f 0e 00 90 00 00 00 a7 9f 0e 00 1a 00 00 00 | ....U.......<...j............... |
f860 | 38 a0 0e 00 4c 00 00 00 53 a0 0e 00 1f 00 00 00 a0 a0 0e 00 71 00 00 00 c0 a0 0e 00 6b 00 00 00 | 8...L...S...........q.......k... |
f880 | 32 a1 0e 00 5b 00 00 00 9e a1 0e 00 2c 00 00 00 fa a1 0e 00 4e 00 00 00 27 a2 0e 00 2a 00 00 00 | 2...[.......,.......N...'...*... |
f8a0 | 76 a2 0e 00 a0 00 00 00 a1 a2 0e 00 65 00 00 00 42 a3 0e 00 27 01 00 00 a8 a3 0e 00 d0 00 00 00 | v...........e...B...'........... |
f8c0 | d0 a4 0e 00 d8 00 00 00 a1 a5 0e 00 3f 00 00 00 7a a6 0e 00 38 00 00 00 ba a6 0e 00 46 00 00 00 | ............?...z...8.......F... |
f8e0 | f3 a6 0e 00 40 00 00 00 3a a7 0e 00 53 00 00 00 7b a7 0e 00 45 00 00 00 cf a7 0e 00 26 01 00 00 | ....@...:...S...{...E.......&... |
f900 | 15 a8 0e 00 f1 00 00 00 3c a9 0e 00 48 00 00 00 2e aa 0e 00 49 00 00 00 77 aa 0e 00 d0 00 00 00 | ........<...H.......I...w....... |
f920 | c1 aa 0e 00 24 00 00 00 92 ab 0e 00 16 00 00 00 b7 ab 0e 00 60 00 00 00 ce ab 0e 00 50 00 00 00 | ....$...............`.......P... |
f940 | 2f ac 0e 00 27 00 00 00 80 ac 0e 00 18 00 00 00 a8 ac 0e 00 49 00 00 00 c1 ac 0e 00 52 00 00 00 | /...'...............I.......R... |
f960 | 0b ad 0e 00 58 00 00 00 5e ad 0e 00 3d 00 00 00 b7 ad 0e 00 25 00 00 00 f5 ad 0e 00 26 00 00 00 | ....X...^...=.......%.......&... |
f980 | 1b ae 0e 00 2a 00 00 00 42 ae 0e 00 23 00 00 00 6d ae 0e 00 47 00 00 00 91 ae 0e 00 a4 00 00 00 | ....*...B...#...m...G........... |
f9a0 | d9 ae 0e 00 aa 00 00 00 7e af 0e 00 f4 00 00 00 29 b0 0e 00 44 00 00 00 1e b1 0e 00 61 00 00 00 | ........~.......)...D.......a... |
f9c0 | 63 b1 0e 00 54 00 00 00 c5 b1 0e 00 3c 00 00 00 1a b2 0e 00 6d 00 00 00 57 b2 0e 00 6a 00 00 00 | c...T.......<.......m...W...j... |
f9e0 | c5 b2 0e 00 43 00 00 00 30 b3 0e 00 5c 00 00 00 74 b3 0e 00 34 00 00 00 d1 b3 0e 00 a4 00 00 00 | ....C...0...\...t...4........... |
fa00 | 06 b4 0e 00 a8 00 00 00 ab b4 0e 00 e8 00 00 00 54 b5 0e 00 ec 00 00 00 3d b6 0e 00 2c 00 00 00 | ................T.......=...,... |
fa20 | 2a b7 0e 00 34 00 00 00 57 b7 0e 00 23 00 00 00 8c b7 0e 00 55 00 00 00 b0 b7 0e 00 66 00 00 00 | *...4...W...#.......U.......f... |
fa40 | 06 b8 0e 00 7b 00 00 00 6d b8 0e 00 41 00 00 00 e9 b8 0e 00 42 00 00 00 2b b9 0e 00 41 00 00 00 | ....{...m...A.......B...+...A... |
fa60 | 6e b9 0e 00 56 00 00 00 b0 b9 0e 00 35 00 00 00 07 ba 0e 00 2b 00 00 00 3d ba 0e 00 2f 00 00 00 | n...V.......5.......+...=.../... |
fa80 | 69 ba 0e 00 63 00 00 00 99 ba 0e 00 56 00 00 00 fd ba 0e 00 4d 00 00 00 54 bb 0e 00 34 00 00 00 | i...c.......V.......M...T...4... |
faa0 | a2 bb 0e 00 79 01 00 00 d7 bb 0e 00 df 00 00 00 51 bd 0e 00 f0 00 00 00 31 be 0e 00 54 00 00 00 | ....y...........Q.......1...T... |
fac0 | 22 bf 0e 00 32 00 00 00 77 bf 0e 00 0c 01 00 00 aa bf 0e 00 59 00 00 00 b7 c0 0e 00 4e 00 00 00 | "...2...w...........Y.......N... |
fae0 | 11 c1 0e 00 26 01 00 00 60 c1 0e 00 4a 00 00 00 87 c2 0e 00 1a 00 00 00 d2 c2 0e 00 2f 00 00 00 | ....&...`...J.............../... |
fb00 | ed c2 0e 00 a4 00 00 00 1d c3 0e 00 2a 00 00 00 c2 c3 0e 00 1d 01 00 00 ed c3 0e 00 2d 00 00 00 | ............*...............-... |
fb20 | 0b c5 0e 00 af 00 00 00 39 c5 0e 00 ce 00 00 00 e9 c5 0e 00 53 00 00 00 b8 c6 0e 00 45 00 00 00 | ........9...........S.......E... |
fb40 | 0c c7 0e 00 34 00 00 00 52 c7 0e 00 7a 00 00 00 87 c7 0e 00 32 00 00 00 02 c8 0e 00 27 00 00 00 | ....4...R...z.......2.......'... |
fb60 | 35 c8 0e 00 27 00 00 00 5d c8 0e 00 5b 00 00 00 85 c8 0e 00 78 00 00 00 e1 c8 0e 00 5f 00 00 00 | 5...'...]...[.......x......._... |
fb80 | 5a c9 0e 00 1b 00 00 00 ba c9 0e 00 0c 00 00 00 d6 c9 0e 00 b4 01 00 00 e3 c9 0e 00 11 00 00 00 | Z............................... |
fba0 | 98 cb 0e 00 12 00 00 00 aa cb 0e 00 ed 00 00 00 bd cb 0e 00 17 00 00 00 ab cc 0e 00 18 00 00 00 | ................................ |
fbc0 | c3 cc 0e 00 12 00 00 00 dc cc 0e 00 35 00 00 00 ef cc 0e 00 26 00 00 00 25 cd 0e 00 2c 00 00 00 | ............5.......&...%...,... |
fbe0 | 4c cd 0e 00 75 00 00 00 79 cd 0e 00 41 00 00 00 ef cd 0e 00 41 00 00 00 31 ce 0e 00 6f 00 00 00 | L...u...y...A.......A...1...o... |
fc00 | 73 ce 0e 00 9f 00 00 00 e3 ce 0e 00 a1 00 00 00 83 cf 0e 00 7f 00 00 00 25 d0 0e 00 77 00 00 00 | s.......................%...w... |
fc20 | a5 d0 0e 00 08 00 00 00 1d d1 0e 00 0e 00 00 00 26 d1 0e 00 06 00 00 00 35 d1 0e 00 15 00 00 00 | ................&.......5....... |
fc40 | 3c d1 0e 00 27 00 00 00 52 d1 0e 00 ee 00 00 00 7a d1 0e 00 eb 00 00 00 69 d2 0e 00 04 00 00 00 | <...'...R.......z.......i....... |
fc60 | 55 d3 0e 00 20 00 00 00 5a d3 0e 00 22 00 00 00 7b d3 0e 00 11 00 00 00 9e d3 0e 00 3a 00 00 00 | U.......Z..."...{...........:... |
fc80 | b0 d3 0e 00 20 00 00 00 eb d3 0e 00 14 00 00 00 0c d4 0e 00 55 00 00 00 21 d4 0e 00 28 00 00 00 | ....................U...!...(... |
fca0 | 77 d4 0e 00 88 00 00 00 a0 d4 0e 00 16 00 00 00 29 d5 0e 00 16 00 00 00 40 d5 0e 00 18 00 00 00 | w...............).......@....... |
fcc0 | 57 d5 0e 00 26 00 00 00 70 d5 0e 00 1a 00 00 00 97 d5 0e 00 27 00 00 00 b2 d5 0e 00 23 00 00 00 | W...&...p...........'.......#... |
fce0 | da d5 0e 00 17 00 00 00 fe d5 0e 00 21 00 00 00 16 d6 0e 00 28 00 00 00 38 d6 0e 00 49 00 00 00 | ............!.......(...8...I... |
fd00 | 61 d6 0e 00 44 00 00 00 ab d6 0e 00 25 00 00 00 f0 d6 0e 00 12 00 00 00 16 d7 0e 00 3a 00 00 00 | a...D.......%...............:... |
fd20 | 29 d7 0e 00 32 00 00 00 64 d7 0e 00 3f 00 00 00 97 d7 0e 00 a2 00 00 00 d7 d7 0e 00 21 00 00 00 | )...2...d...?...............!... |
fd40 | 7a d8 0e 00 0d 00 00 00 9c d8 0e 00 4a 00 00 00 aa d8 0e 00 2e 00 00 00 f5 d8 0e 00 2e 00 00 00 | z...........J................... |
fd60 | 24 d9 0e 00 2e 00 00 00 53 d9 0e 00 1f 00 00 00 82 d9 0e 00 41 00 00 00 a2 d9 0e 00 3c 00 00 00 | $.......S...........A.......<... |
fd80 | e4 d9 0e 00 5b 00 00 00 21 da 0e 00 30 00 00 00 7d da 0e 00 3f 00 00 00 ae da 0e 00 38 00 00 00 | ....[...!...0...}...?.......8... |
fda0 | ee da 0e 00 52 00 00 00 27 db 0e 00 39 00 00 00 7a db 0e 00 3b 00 00 00 b4 db 0e 00 4a 00 00 00 | ....R...'...9...z...;.......J... |
fdc0 | f0 db 0e 00 2d 00 00 00 3b dc 0e 00 3d 00 00 00 69 dc 0e 00 24 00 00 00 a7 dc 0e 00 20 00 00 00 | ....-...;...=...i...$........... |
fde0 | cc dc 0e 00 29 00 00 00 ed dc 0e 00 2b 00 00 00 17 dd 0e 00 38 00 00 00 43 dd 0e 00 3a 00 00 00 | ....).......+.......8...C...:... |
fe00 | 7c dd 0e 00 3a 00 00 00 b7 dd 0e 00 30 00 00 00 f2 dd 0e 00 27 00 00 00 23 de 0e 00 8d 00 00 00 | |...:.......0.......'...#....... |
fe20 | 4b de 0e 00 8d 00 00 00 d9 de 0e 00 2f 00 00 00 67 df 0e 00 2a 00 00 00 97 df 0e 00 19 00 00 00 | K.........../...g...*........... |
fe40 | c2 df 0e 00 5e 00 00 00 dc df 0e 00 23 00 00 00 3b e0 0e 00 37 00 00 00 5f e0 0e 00 20 00 00 00 | ....^.......#...;...7..._....... |
fe60 | 97 e0 0e 00 1c 00 00 00 b8 e0 0e 00 30 00 00 00 d5 e0 0e 00 27 00 00 00 06 e1 0e 00 20 00 00 00 | ............0.......'........... |
fe80 | 2e e1 0e 00 25 00 00 00 4f e1 0e 00 dd 00 00 00 75 e1 0e 00 da 00 00 00 53 e2 0e 00 da 00 00 00 | ....%...O.......u.......S....... |
fea0 | 2e e3 0e 00 0e 00 00 00 09 e4 0e 00 40 00 00 00 18 e4 0e 00 23 00 00 00 59 e4 0e 00 24 00 00 00 | ............@.......#...Y...$... |
fec0 | 7d e4 0e 00 07 00 00 00 a2 e4 0e 00 07 00 00 00 aa e4 0e 00 33 00 00 00 b2 e4 0e 00 33 00 00 00 | }...................3.......3... |
fee0 | e6 e4 0e 00 33 00 00 00 1a e5 0e 00 33 00 00 00 4e e5 0e 00 40 00 00 00 82 e5 0e 00 51 00 00 00 | ....3.......3...N...@.......Q... |
ff00 | c3 e5 0e 00 4f 00 00 00 15 e6 0e 00 3d 00 00 00 65 e6 0e 00 64 00 00 00 a3 e6 0e 00 6f 00 00 00 | ....O.......=...e...d.......o... |
ff20 | 08 e7 0e 00 cd 00 00 00 78 e7 0e 00 82 00 00 00 46 e8 0e 00 8f 00 00 00 c9 e8 0e 00 e1 00 00 00 | ........x.......F............... |
ff40 | 59 e9 0e 00 c3 00 00 00 3b ea 0e 00 8b 00 00 00 ff ea 0e 00 19 00 00 00 8b eb 0e 00 10 00 00 00 | Y.......;....................... |
ff60 | a5 eb 0e 00 0c 00 00 00 b6 eb 0e 00 ac 00 00 00 c3 eb 0e 00 e2 00 00 00 70 ec 0e 00 14 00 00 00 | ........................p....... |
ff80 | 53 ed 0e 00 c3 00 00 00 68 ed 0e 00 95 00 00 00 2c ee 0e 00 13 01 00 00 c2 ee 0e 00 31 00 00 00 | S.......h.......,...........1... |
ffa0 | d6 ef 0e 00 0a 00 00 00 08 f0 0e 00 21 01 00 00 13 f0 0e 00 d8 00 00 00 35 f1 0e 00 8b 00 00 00 | ............!...........5....... |
ffc0 | 0e f2 0e 00 8c 00 00 00 9a f2 0e 00 f8 00 00 00 27 f3 0e 00 39 00 00 00 20 f4 0e 00 49 00 00 00 | ................'...9.......I... |
ffe0 | 5a f4 0e 00 b6 00 00 00 a4 f4 0e 00 93 00 00 00 5b f5 0e 00 80 00 00 00 ef f5 0e 00 79 00 00 00 | Z...............[...........y... |
10000 | 70 f6 0e 00 79 00 00 00 ea f6 0e 00 53 01 00 00 64 f7 0e 00 7f 00 00 00 b8 f8 0e 00 a9 00 00 00 | p...y.......S...d............... |
10020 | 38 f9 0e 00 b6 00 00 00 e2 f9 0e 00 83 00 00 00 99 fa 0e 00 86 00 00 00 1d fb 0e 00 0e 00 00 00 | 8............................... |
10040 | a4 fb 0e 00 5d 00 00 00 b3 fb 0e 00 36 00 00 00 11 fc 0e 00 10 00 00 00 48 fc 0e 00 0d 00 00 00 | ....].......6...........H....... |
10060 | 59 fc 0e 00 45 00 00 00 67 fc 0e 00 45 00 00 00 ad fc 0e 00 19 00 00 00 f3 fc 0e 00 22 00 00 00 | Y...E...g...E..............."... |
10080 | 0d fd 0e 00 1c 00 00 00 30 fd 0e 00 45 00 00 00 4d fd 0e 00 50 00 00 00 93 fd 0e 00 65 00 00 00 | ........0...E...M...P.......e... |
100a0 | e4 fd 0e 00 2f 00 00 00 4a fe 0e 00 60 00 00 00 7a fe 0e 00 54 00 00 00 db fe 0e 00 55 00 00 00 | ..../...J...`...z...T.......U... |
100c0 | 30 ff 0e 00 48 00 00 00 86 ff 0e 00 26 00 00 00 cf ff 0e 00 26 00 00 00 f6 ff 0e 00 b2 00 00 00 | 0...H.......&.......&........... |
100e0 | 1d 00 0f 00 eb 00 00 00 d0 00 0f 00 75 00 00 00 bc 01 0f 00 77 00 00 00 32 02 0f 00 4d 00 00 00 | ............u.......w...2...M... |
10100 | aa 02 0f 00 e2 00 00 00 f8 02 0f 00 78 00 00 00 db 03 0f 00 29 01 00 00 54 04 0f 00 53 00 00 00 | ............x.......)...T...S... |
10120 | 7e 05 0f 00 42 00 00 00 d2 05 0f 00 8b 00 00 00 15 06 0f 00 1e 00 00 00 a1 06 0f 00 56 00 00 00 | ~...B.......................V... |
10140 | c0 06 0f 00 d2 00 00 00 17 07 0f 00 36 00 00 00 ea 07 0f 00 ce 00 00 00 21 08 0f 00 c1 00 00 00 | ............6...........!....... |
10160 | f0 08 0f 00 38 00 00 00 b2 09 0f 00 57 00 00 00 eb 09 0f 00 bd 00 00 00 43 0a 0f 00 85 00 00 00 | ....8.......W...........C....... |
10180 | 01 0b 0f 00 4f 00 00 00 87 0b 0f 00 ba 01 00 00 d7 0b 0f 00 b6 00 00 00 92 0d 0f 00 63 00 00 00 | ....O.......................c... |
101a0 | 49 0e 0f 00 4c 00 00 00 ad 0e 0f 00 d5 00 00 00 fa 0e 0f 00 66 00 00 00 d0 0f 0f 00 45 01 00 00 | I...L...............f.......E... |
101c0 | 37 10 0f 00 57 00 00 00 7d 11 0f 00 a4 00 00 00 d5 11 0f 00 bc 00 00 00 7a 12 0f 00 65 00 00 00 | 7...W...}...............z...e... |
101e0 | 37 13 0f 00 3f 00 00 00 9d 13 0f 00 c0 01 00 00 dd 13 0f 00 72 00 00 00 9e 15 0f 00 74 00 00 00 | 7...?...............r.......t... |
10200 | 11 16 0f 00 58 00 00 00 86 16 0f 00 45 00 00 00 df 16 0f 00 41 00 00 00 25 17 0f 00 52 00 00 00 | ....X.......E.......A...%...R... |
10220 | 67 17 0f 00 81 00 00 00 ba 17 0f 00 75 00 00 00 3c 18 0f 00 30 00 00 00 b2 18 0f 00 31 00 00 00 | g...........u...<...0.......1... |
10240 | e3 18 0f 00 7e 00 00 00 15 19 0f 00 50 00 00 00 94 19 0f 00 36 00 00 00 e5 19 0f 00 50 01 00 00 | ....~.......P.......6.......P... |
10260 | 1c 1a 0f 00 69 00 00 00 6d 1b 0f 00 5d 00 00 00 d7 1b 0f 00 8e 00 00 00 35 1c 0f 00 4a 00 00 00 | ....i...m...]...........5...J... |
10280 | c4 1c 0f 00 57 00 00 00 0f 1d 0f 00 6d 00 00 00 67 1d 0f 00 64 00 00 00 d5 1d 0f 00 64 00 00 00 | ....W.......m...g...d.......d... |
102a0 | 3a 1e 0f 00 99 00 00 00 9f 1e 0f 00 26 00 00 00 39 1f 0f 00 ad 00 00 00 60 1f 0f 00 81 00 00 00 | :...........&...9.......`....... |
102c0 | 0e 20 0f 00 33 00 00 00 90 20 0f 00 c0 00 00 00 c4 20 0f 00 90 00 00 00 85 21 0f 00 a2 00 00 00 | ....3....................!...... |
102e0 | 16 22 0f 00 83 00 00 00 b9 22 0f 00 41 00 00 00 3d 23 0f 00 3a 00 00 00 7f 23 0f 00 4b 00 00 00 | ."......."..A...=#..:....#..K... |
10300 | ba 23 0f 00 65 00 00 00 06 24 0f 00 06 00 00 00 6c 24 0f 00 05 00 00 00 73 24 0f 00 e3 01 00 00 | .#..e....$......l$......s$...... |
10320 | 79 24 0f 00 1e 00 00 00 5d 26 0f 00 3d 00 00 00 7c 26 0f 00 4b 02 00 00 ba 26 0f 00 5a 02 00 00 | y$......]&..=...|&..K....&..Z... |
10340 | 06 29 0f 00 6d 00 00 00 61 2b 0f 00 a8 00 00 00 cf 2b 0f 00 bf 00 00 00 78 2c 0f 00 b2 00 00 00 | .)..m...a+.......+......x,...... |
10360 | 38 2d 0f 00 06 00 00 00 eb 2d 0f 00 4b 01 00 00 f2 2d 0f 00 4c 01 00 00 3e 2f 0f 00 17 00 00 00 | 8-.......-..K....-..L...>/...... |
10380 | 8b 30 0f 00 0b 00 00 00 a3 30 0f 00 0d 00 00 00 af 30 0f 00 55 00 00 00 bd 30 0f 00 0f 00 00 00 | .0.......0.......0..U....0...... |
103a0 | 13 31 0f 00 0f 00 00 00 23 31 0f 00 5c 00 00 00 33 31 0f 00 ff 02 00 00 90 31 0f 00 b1 00 00 00 | .1......#1..\...31.......1...... |
103c0 | 90 34 0f 00 37 00 00 00 42 35 0f 00 06 00 00 00 7a 35 0f 00 12 00 00 00 81 35 0f 00 9a 00 00 00 | .4..7...B5......z5.......5...... |
103e0 | 94 35 0f 00 08 00 00 00 2f 36 0f 00 38 00 00 00 38 36 0f 00 11 00 00 00 71 36 0f 00 1c 00 00 00 | .5....../6..8...86......q6...... |
10400 | 83 36 0f 00 12 00 00 00 a0 36 0f 00 1a 00 00 00 b3 36 0f 00 49 00 00 00 ce 36 0f 00 1e 00 00 00 | .6.......6.......6..I....6...... |
10420 | 18 37 0f 00 2f 00 00 00 37 37 0f 00 73 00 00 00 67 37 0f 00 ae 00 00 00 db 37 0f 00 af 00 00 00 | .7../...77..s...g7.......7...... |
10440 | 8a 38 0f 00 d0 00 00 00 3a 39 0f 00 0b 00 00 00 0b 3a 0f 00 08 00 00 00 17 3a 0f 00 14 00 00 00 | .8......:9.......:.......:...... |
10460 | 20 3a 0f 00 4a 00 00 00 35 3a 0f 00 60 00 00 00 80 3a 0f 00 06 00 00 00 e1 3a 0f 00 06 00 00 00 | .:..J...5:..`....:.......:...... |
10480 | e8 3a 0f 00 da 00 00 00 ef 3a 0f 00 98 00 00 00 ca 3b 0f 00 bc 00 00 00 63 3c 0f 00 06 00 00 00 | .:.......:.......;......c<...... |
104a0 | 20 3d 0f 00 0a 00 00 00 27 3d 0f 00 14 00 00 00 32 3d 0f 00 1b 00 00 00 47 3d 0f 00 0c 00 00 00 | .=......'=......2=......G=...... |
104c0 | 63 3d 0f 00 2e 00 00 00 70 3d 0f 00 1d 00 00 00 9f 3d 0f 00 0e 00 00 00 bd 3d 0f 00 ff 01 00 00 | c=......p=.......=.......=...... |
104e0 | cc 3d 0f 00 26 00 00 00 cc 3f 0f 00 0e 00 00 00 f3 3f 0f 00 21 00 00 00 02 40 0f 00 98 00 00 00 | .=..&....?.......?..!....@...... |
10500 | 24 40 0f 00 07 00 00 00 bd 40 0f 00 03 00 00 00 c5 40 0f 00 91 00 00 00 c9 40 0f 00 0b 00 00 00 | $@.......@.......@.......@...... |
10520 | 5b 41 0f 00 6a 00 00 00 67 41 0f 00 0e 00 00 00 d2 41 0f 00 08 00 00 00 e1 41 0f 00 2b 00 00 00 | [A..j...gA.......A.......A..+... |
10540 | ea 41 0f 00 29 00 00 00 16 42 0f 00 35 00 00 00 40 42 0f 00 54 00 00 00 76 42 0f 00 5c 00 00 00 | .A..)....B..5...@B..T...vB..\... |
10560 | cb 42 0f 00 7b 00 00 00 28 43 0f 00 56 00 00 00 a4 43 0f 00 25 00 00 00 fb 43 0f 00 3a 00 00 00 | .B..{...(C..V....C..%....C..:... |
10580 | 21 44 0f 00 3a 00 00 00 5c 44 0f 00 0d 00 00 00 97 44 0f 00 64 00 00 00 a5 44 0f 00 64 00 00 00 | !D..:...\D.......D..d....D..d... |
105a0 | 0a 45 0f 00 67 00 00 00 6f 45 0f 00 67 00 00 00 d7 45 0f 00 1f 00 00 00 3f 46 0f 00 0c 00 00 00 | .E..g...oE..g....E......?F...... |
105c0 | 5f 46 0f 00 16 00 00 00 6c 46 0f 00 44 01 00 00 83 46 0f 00 41 00 00 00 c8 47 0f 00 47 00 00 00 | _F......lF..D....F..A....G..G... |
105e0 | 0a 48 0f 00 d3 00 00 00 52 48 0f 00 3a 02 00 00 26 49 0f 00 d7 00 00 00 61 4b 0f 00 93 00 00 00 | .H......RH..:...&I......aK...... |
10600 | 39 4c 0f 00 4e 01 00 00 cd 4c 0f 00 30 00 00 00 1c 4e 0f 00 c8 00 00 00 4d 4e 0f 00 ab 00 00 00 | 9L..N....L..0....N......MN...... |
10620 | 16 4f 0f 00 31 00 00 00 c2 4f 0f 00 68 01 00 00 f4 4f 0f 00 39 00 00 00 5d 51 0f 00 3b 01 00 00 | .O..1....O..h....O..9...]Q..;... |
10640 | 97 51 0f 00 b2 00 00 00 d3 52 0f 00 27 00 00 00 86 53 0f 00 44 00 00 00 ae 53 0f 00 d2 00 00 00 | .Q.......R..'....S..D....S...... |
10660 | f3 53 0f 00 73 00 00 00 c6 54 0f 00 d7 00 00 00 3a 55 0f 00 9f 00 00 00 12 56 0f 00 af 00 00 00 | .S..s....T......:U.......V...... |
10680 | b2 56 0f 00 cc 00 00 00 62 57 0f 00 4f 00 00 00 2f 58 0f 00 3f 01 00 00 7f 58 0f 00 c1 00 00 00 | .V......bW..O.../X..?....X...... |
106a0 | bf 59 0f 00 59 00 00 00 81 5a 0f 00 21 01 00 00 db 5a 0f 00 29 01 00 00 fd 5b 0f 00 6f 00 00 00 | .Y..Y....Z..!....Z..)....[..o... |
106c0 | 27 5d 0f 00 8f 00 00 00 97 5d 0f 00 8d 00 00 00 27 5e 0f 00 9e 00 00 00 b5 5e 0f 00 6c 00 00 00 | '].......]......'^.......^..l... |
106e0 | 54 5f 0f 00 3a 00 00 00 c1 5f 0f 00 95 00 00 00 fc 5f 0f 00 68 00 00 00 92 60 0f 00 58 00 00 00 | T_..:...._......._..h....`..X... |
10700 | fb 60 0f 00 15 01 00 00 54 61 0f 00 52 00 00 00 6a 62 0f 00 94 00 00 00 bd 62 0f 00 9e 00 00 00 | .`......Ta..R...jb.......b...... |
10720 | 52 63 0f 00 79 00 00 00 f1 63 0f 00 50 00 00 00 6b 64 0f 00 9e 00 00 00 bc 64 0f 00 13 00 00 00 | Rc..y....c..P...kd.......d...... |
10740 | 5b 65 0f 00 3a 00 00 00 6f 65 0f 00 98 01 00 00 aa 65 0f 00 2d 00 00 00 43 67 0f 00 39 00 00 00 | [e..:...oe.......e..-...Cg..9... |
10760 | 71 67 0f 00 e0 00 00 00 ab 67 0f 00 26 00 00 00 8c 68 0f 00 b5 00 00 00 b3 68 0f 00 70 01 00 00 | qg.......g..&....h.......h..p... |
10780 | 69 69 0f 00 1b 00 00 00 da 6a 0f 00 bb 00 00 00 f6 6a 0f 00 bb 00 00 00 b2 6b 0f 00 fd 00 00 00 | ii.......j.......j.......k...... |
107a0 | 6e 6c 0f 00 85 00 00 00 6c 6d 0f 00 b5 00 00 00 f2 6d 0f 00 5b 00 00 00 a8 6e 0f 00 83 00 00 00 | nl......lm.......m..[....n...... |
107c0 | 04 6f 0f 00 4b 00 00 00 88 6f 0f 00 59 01 00 00 d4 6f 0f 00 27 00 00 00 2e 71 0f 00 f8 00 00 00 | .o..K....o..Y....o..'....q...... |
107e0 | 56 71 0f 00 28 02 00 00 4f 72 0f 00 ff 00 00 00 78 74 0f 00 61 00 00 00 78 75 0f 00 5a 00 00 00 | Vq..(...Or......xt..a...xu..Z... |
10800 | da 75 0f 00 5c 00 00 00 35 76 0f 00 a9 00 00 00 92 76 0f 00 b6 00 00 00 3c 77 0f 00 5e 00 00 00 | .u..\...5v.......v......<w..^... |
10820 | f3 77 0f 00 d3 00 00 00 52 78 0f 00 24 00 00 00 26 79 0f 00 14 00 00 00 4b 79 0f 00 1a 00 00 00 | .w......Rx..$...&y......Ky...... |
10840 | 60 79 0f 00 bc 00 00 00 7b 79 0f 00 68 00 00 00 38 7a 0f 00 1f 00 00 00 a1 7a 0f 00 24 00 00 00 | `y......{y..h...8z.......z..$... |
10860 | c1 7a 0f 00 bd 00 00 00 e6 7a 0f 00 1f 00 00 00 a4 7b 0f 00 17 00 00 00 c4 7b 0f 00 21 00 00 00 | .z.......z.......{.......{..!... |
10880 | dc 7b 0f 00 21 00 00 00 fe 7b 0f 00 22 00 00 00 20 7c 0f 00 40 00 00 00 43 7c 0f 00 1a 00 00 00 | .{..!....{.."....|..@...C|...... |
108a0 | 84 7c 0f 00 45 00 00 00 9f 7c 0f 00 17 01 00 00 e5 7c 0f 00 54 00 00 00 fd 7d 0f 00 c0 01 00 00 | .|..E....|.......|..T....}...... |
108c0 | 52 7e 0f 00 d2 01 00 00 13 80 0f 00 a2 00 00 00 e6 81 0f 00 d1 00 00 00 89 82 0f 00 e4 00 00 00 | R~.............................. |
108e0 | 5b 83 0f 00 bf 00 00 00 40 84 0f 00 dc 00 00 00 00 85 0f 00 4e 01 00 00 dd 85 0f 00 45 00 00 00 | [.......@...........N.......E... |
10900 | 2c 87 0f 00 34 00 00 00 72 87 0f 00 b4 00 00 00 a7 87 0f 00 f9 00 00 00 5c 88 0f 00 c5 00 00 00 | ,...4...r...............\....... |
10920 | 56 89 0f 00 27 00 00 00 1c 8a 0f 00 b7 00 00 00 44 8a 0f 00 ae 00 00 00 fc 8a 0f 00 52 00 00 00 | V...'...........D...........R... |
10940 | ab 8b 0f 00 ab 00 00 00 fe 8b 0f 00 c8 00 00 00 aa 8c 0f 00 5b 00 00 00 73 8d 0f 00 6d 00 00 00 | ....................[...s...m... |
10960 | cf 8d 0f 00 ab 00 00 00 3d 8e 0f 00 30 00 00 00 e9 8e 0f 00 68 00 00 00 1a 8f 0f 00 53 00 00 00 | ........=...0.......h.......S... |
10980 | 83 8f 0f 00 33 00 00 00 d7 8f 0f 00 2d 00 00 00 0b 90 0f 00 4e 00 00 00 39 90 0f 00 70 00 00 00 | ....3.......-.......N...9...p... |
109a0 | 88 90 0f 00 6c 00 00 00 f9 90 0f 00 c5 00 00 00 66 91 0f 00 b7 00 00 00 2c 92 0f 00 38 00 00 00 | ....l...........f.......,...8... |
109c0 | e4 92 0f 00 dd 00 00 00 1d 93 0f 00 1e 01 00 00 fb 93 0f 00 5f 01 00 00 1a 95 0f 00 dc 00 00 00 | ...................._........... |
109e0 | 7a 96 0f 00 c8 00 00 00 57 97 0f 00 36 00 00 00 20 98 0f 00 6e 00 00 00 57 98 0f 00 91 00 00 00 | z.......W...6.......n...W....... |
10a00 | c6 98 0f 00 60 00 00 00 58 99 0f 00 b0 00 00 00 b9 99 0f 00 6e 00 00 00 6a 9a 0f 00 6b 00 00 00 | ....`...X...........n...j...k... |
10a20 | d9 9a 0f 00 35 00 00 00 45 9b 0f 00 33 00 00 00 7b 9b 0f 00 f1 00 00 00 af 9b 0f 00 2b 00 00 00 | ....5...E...3...{...........+... |
10a40 | a1 9c 0f 00 38 00 00 00 cd 9c 0f 00 3a 01 00 00 06 9d 0f 00 4b 00 00 00 41 9e 0f 00 53 01 00 00 | ....8.......:.......K...A...S... |
10a60 | 8d 9e 0f 00 92 01 00 00 e1 9f 0f 00 a1 00 00 00 74 a1 0f 00 28 00 00 00 16 a2 0f 00 35 01 00 00 | ................t...(.......5... |
10a80 | 3f a2 0f 00 9a 00 00 00 75 a3 0f 00 10 01 00 00 10 a4 0f 00 2b 00 00 00 21 a5 0f 00 a6 00 00 00 | ?.......u...........+...!....... |
10aa0 | 4d a5 0f 00 2e 00 00 00 f4 a5 0f 00 3f 00 00 00 23 a6 0f 00 ec 00 00 00 63 a6 0f 00 ee 00 00 00 | M...........?...#.......c....... |
10ac0 | 50 a7 0f 00 7c 00 00 00 3f a8 0f 00 9a 01 00 00 bc a8 0f 00 42 00 00 00 57 aa 0f 00 82 00 00 00 | P...|...?...........B...W....... |
10ae0 | 9a aa 0f 00 9b 00 00 00 1d ab 0f 00 31 00 00 00 b9 ab 0f 00 b4 00 00 00 eb ab 0f 00 63 00 00 00 | ............1...............c... |
10b00 | a0 ac 0f 00 33 00 00 00 04 ad 0f 00 3a 00 00 00 38 ad 0f 00 5e 00 00 00 73 ad 0f 00 25 01 00 00 | ....3.......:...8...^...s...%... |
10b20 | d2 ad 0f 00 42 00 00 00 f8 ae 0f 00 5c 00 00 00 3b af 0f 00 56 00 00 00 98 af 0f 00 fe 00 00 00 | ....B.......\...;...V........... |
10b40 | ef af 0f 00 79 00 00 00 ee b0 0f 00 55 00 00 00 68 b1 0f 00 58 00 00 00 be b1 0f 00 cd 01 00 00 | ....y.......U...h...X........... |
10b60 | 17 b2 0f 00 3d 00 00 00 e5 b3 0f 00 e8 01 00 00 23 b4 0f 00 40 00 00 00 0c b6 0f 00 7f 00 00 00 | ....=...........#...@........... |
10b80 | 4d b6 0f 00 6c 00 00 00 cd b6 0f 00 6e 00 00 00 3a b7 0f 00 e8 00 00 00 a9 b7 0f 00 a5 00 00 00 | M...l.......n...:............... |
10ba0 | 92 b8 0f 00 6b 00 00 00 38 b9 0f 00 69 01 00 00 a4 b9 0f 00 34 00 00 00 0e bb 0f 00 79 00 00 00 | ....k...8...i.......4.......y... |
10bc0 | 43 bb 0f 00 3d 00 00 00 bd bb 0f 00 54 00 00 00 fb bb 0f 00 4c 00 00 00 50 bc 0f 00 bc 00 00 00 | C...=.......T.......L...P....... |
10be0 | 9d bc 0f 00 ea 00 00 00 5a bd 0f 00 6d 00 00 00 45 be 0f 00 e6 00 00 00 b3 be 0f 00 36 00 00 00 | ........Z...m...E...........6... |
10c00 | 9a bf 0f 00 5b 00 00 00 d1 bf 0f 00 6a 00 00 00 2d c0 0f 00 82 00 00 00 98 c0 0f 00 73 00 00 00 | ....[.......j...-...........s... |
10c20 | 1b c1 0f 00 49 00 00 00 8f c1 0f 00 29 00 00 00 d9 c1 0f 00 2a 01 00 00 03 c2 0f 00 47 00 00 00 | ....I.......).......*.......G... |
10c40 | 2e c3 0f 00 46 00 00 00 76 c3 0f 00 49 00 00 00 bd c3 0f 00 49 00 00 00 07 c4 0f 00 22 00 00 00 | ....F...v...I.......I......."... |
10c60 | 51 c4 0f 00 54 00 00 00 74 c4 0f 00 65 00 00 00 c9 c4 0f 00 32 00 00 00 2f c5 0f 00 9d 00 00 00 | Q...T...t...e.......2.../....... |
10c80 | 62 c5 0f 00 77 00 00 00 00 c6 0f 00 2c 00 00 00 78 c6 0f 00 42 00 00 00 a5 c6 0f 00 2b 00 00 00 | b...w.......,...x...B.......+... |
10ca0 | e8 c6 0f 00 86 01 00 00 14 c7 0f 00 c4 00 00 00 9b c8 0f 00 c6 00 00 00 60 c9 0f 00 80 00 00 00 | ........................`....... |
10cc0 | 27 ca 0f 00 49 01 00 00 a8 ca 0f 00 90 00 00 00 f2 cb 0f 00 38 00 00 00 83 cc 0f 00 9f 00 00 00 | '...I...............8........... |
10ce0 | bc cc 0f 00 1c 01 00 00 5c cd 0f 00 d5 00 00 00 79 ce 0f 00 38 00 00 00 4f cf 0f 00 28 00 00 00 | ........\.......y...8...O...(... |
10d00 | 88 cf 0f 00 5c 00 00 00 b1 cf 0f 00 29 00 00 00 0e d0 0f 00 71 00 00 00 38 d0 0f 00 41 00 00 00 | ....\.......).......q...8...A... |
10d20 | aa d0 0f 00 0f 01 00 00 ec d0 0f 00 fc 00 00 00 fc d1 0f 00 89 00 00 00 f9 d2 0f 00 25 00 00 00 | ............................%... |
10d40 | 83 d3 0f 00 5f 00 00 00 a9 d3 0f 00 ec 00 00 00 09 d4 0f 00 4e 00 00 00 f6 d4 0f 00 84 00 00 00 | ...._...............N........... |
10d60 | 45 d5 0f 00 55 00 00 00 ca d5 0f 00 12 01 00 00 20 d6 0f 00 75 00 00 00 33 d7 0f 00 65 00 00 00 | E...U...............u...3...e... |
10d80 | a9 d7 0f 00 e2 00 00 00 0f d8 0f 00 2f 00 00 00 f2 d8 0f 00 29 00 00 00 22 d9 0f 00 a0 01 00 00 | ............/.......)..."....... |
10da0 | 4c d9 0f 00 ff 00 00 00 ed da 0f 00 db 00 00 00 ed db 0f 00 36 00 00 00 c9 dc 0f 00 40 00 00 00 | L...................6.......@... |
10dc0 | 00 dd 0f 00 1f 00 00 00 41 dd 0f 00 40 00 00 00 61 dd 0f 00 4d 00 00 00 a2 dd 0f 00 4c 00 00 00 | ........A...@...a...M.......L... |
10de0 | f0 dd 0f 00 92 00 00 00 3d de 0f 00 43 00 00 00 d0 de 0f 00 af 00 00 00 14 df 0f 00 65 00 00 00 | ........=...C...............e... |
10e00 | c4 df 0f 00 a8 00 00 00 2a e0 0f 00 38 00 00 00 d3 e0 0f 00 3e 01 00 00 0c e1 0f 00 3c 00 00 00 | ........*...8.......>.......<... |
10e20 | 4b e2 0f 00 90 00 00 00 88 e2 0f 00 58 00 00 00 19 e3 0f 00 95 00 00 00 72 e3 0f 00 50 00 00 00 | K...........X...........r...P... |
10e40 | 08 e4 0f 00 64 00 00 00 59 e4 0f 00 50 00 00 00 be e4 0f 00 6d 00 00 00 0f e5 0f 00 3a 00 00 00 | ....d...Y...P.......m.......:... |
10e60 | 7d e5 0f 00 29 00 00 00 b8 e5 0f 00 6d 00 00 00 e2 e5 0f 00 c0 00 00 00 50 e6 0f 00 b8 01 00 00 | }...).......m...........P....... |
10e80 | 11 e7 0f 00 51 00 00 00 ca e8 0f 00 21 00 00 00 1c e9 0f 00 25 00 00 00 3e e9 0f 00 71 00 00 00 | ....Q.......!.......%...>...q... |
10ea0 | 64 e9 0f 00 24 00 00 00 d6 e9 0f 00 bc 01 00 00 fb e9 0f 00 55 00 00 00 b8 eb 0f 00 a9 00 00 00 | d...$...............U........... |
10ec0 | 0e ec 0f 00 4c 00 00 00 b8 ec 0f 00 ee 00 00 00 05 ed 0f 00 43 00 00 00 f4 ed 0f 00 39 00 00 00 | ....L...............C.......9... |
10ee0 | 38 ee 0f 00 a9 00 00 00 72 ee 0f 00 50 00 00 00 1c ef 0f 00 53 01 00 00 6d ef 0f 00 46 00 00 00 | 8.......r...P.......S...m...F... |
10f00 | c1 f0 0f 00 44 00 00 00 08 f1 0f 00 43 00 00 00 4d f1 0f 00 de 00 00 00 91 f1 0f 00 83 00 00 00 | ....D.......C...M............... |
10f20 | 70 f2 0f 00 83 00 00 00 f4 f2 0f 00 39 01 00 00 78 f3 0f 00 a0 00 00 00 b2 f4 0f 00 d1 00 00 00 | p...........9...x............... |
10f40 | 53 f5 0f 00 61 00 00 00 25 f6 0f 00 b4 00 00 00 87 f6 0f 00 b7 00 00 00 3c f7 0f 00 b6 00 00 00 | S...a...%...............<....... |
10f60 | f4 f7 0f 00 bb 00 00 00 ab f8 0f 00 a1 00 00 00 67 f9 0f 00 5c 00 00 00 09 fa 0f 00 58 00 00 00 | ................g...\.......X... |
10f80 | 66 fa 0f 00 5c 00 00 00 bf fa 0f 00 58 00 00 00 1c fb 0f 00 71 00 00 00 75 fb 0f 00 5e 00 00 00 | f...\.......X.......q...u...^... |
10fa0 | e7 fb 0f 00 21 01 00 00 46 fc 0f 00 13 01 00 00 68 fd 0f 00 12 01 00 00 7c fe 0f 00 09 01 00 00 | ....!...F.......h.......|....... |
10fc0 | 8f ff 0f 00 40 00 00 00 99 00 10 00 a3 00 00 00 da 00 10 00 a3 00 00 00 7e 01 10 00 9f 00 00 00 | ....@...................~....... |
10fe0 | 22 02 10 00 9f 00 00 00 c2 02 10 00 bb 00 00 00 62 03 10 00 b4 00 00 00 1e 04 10 00 54 00 00 00 | "...............b...........T... |
11000 | d3 04 10 00 bc 00 00 00 28 05 10 00 56 00 00 00 e5 05 10 00 be 00 00 00 3c 06 10 00 4e 00 00 00 | ........(...V...........<...N... |
11020 | fb 06 10 00 cf 01 00 00 4a 07 10 00 29 01 00 00 1a 09 10 00 46 00 00 00 44 0a 10 00 7e 00 00 00 | ........J...).......F...D...~... |
11040 | 8b 0a 10 00 3c 00 00 00 0a 0b 10 00 db 00 00 00 47 0b 10 00 42 00 00 00 23 0c 10 00 4e 00 00 00 | ....<...........G...B...#...N... |
11060 | 66 0c 10 00 4e 00 00 00 b5 0c 10 00 49 00 00 00 04 0d 10 00 49 00 00 00 4e 0d 10 00 43 00 00 00 | f...N.......I.......I...N...C... |
11080 | 98 0d 10 00 4b 00 00 00 dc 0d 10 00 64 00 00 00 28 0e 10 00 46 00 00 00 8d 0e 10 00 84 00 00 00 | ....K.......d...(...F........... |
110a0 | d4 0e 10 00 7c 00 00 00 59 0f 10 00 86 00 00 00 d6 0f 10 00 2f 00 00 00 5d 10 10 00 79 00 00 00 | ....|...Y.........../...]...y... |
110c0 | 8d 10 10 00 76 00 00 00 07 11 10 00 81 00 00 00 7e 11 10 00 46 01 00 00 00 12 10 00 71 00 00 00 | ....v...........~...F.......q... |
110e0 | 47 13 10 00 66 00 00 00 b9 13 10 00 3f 00 00 00 20 14 10 00 88 00 00 00 60 14 10 00 da 00 00 00 | G...f.......?...........`....... |
11100 | e9 14 10 00 19 00 00 00 c4 15 10 00 90 01 00 00 de 15 10 00 a5 00 00 00 6f 17 10 00 43 00 00 00 | ........................o...C... |
11120 | 15 18 10 00 2a 00 00 00 59 18 10 00 4c 00 00 00 84 18 10 00 3a 00 00 00 d1 18 10 00 4e 00 00 00 | ....*...Y...L.......:.......N... |
11140 | 0c 19 10 00 b0 00 00 00 5b 19 10 00 2a 00 00 00 0c 1a 10 00 21 00 00 00 37 1a 10 00 51 00 00 00 | ........[...*.......!...7...Q... |
11160 | 59 1a 10 00 45 00 00 00 ab 1a 10 00 5f 00 00 00 f1 1a 10 00 37 00 00 00 51 1b 10 00 41 00 00 00 | Y...E......._.......7...Q...A... |
11180 | 89 1b 10 00 44 00 00 00 cb 1b 10 00 6a 00 00 00 10 1c 10 00 3c 00 00 00 7b 1c 10 00 56 00 00 00 | ....D.......j.......<...{...V... |
111a0 | b8 1c 10 00 4a 00 00 00 0f 1d 10 00 ee 00 00 00 5a 1d 10 00 47 00 00 00 49 1e 10 00 7a 00 00 00 | ....J...........Z...G...I...z... |
111c0 | 91 1e 10 00 d2 00 00 00 0c 1f 10 00 5f 00 00 00 df 1f 10 00 d5 00 00 00 3f 20 10 00 39 00 00 00 | ............_...........?...9... |
111e0 | 15 21 10 00 70 00 00 00 4f 21 10 00 5d 00 00 00 c0 21 10 00 55 00 00 00 1e 22 10 00 2b 00 00 00 | .!..p...O!..]....!..U...."..+... |
11200 | 74 22 10 00 38 00 00 00 a0 22 10 00 46 00 00 00 d9 22 10 00 4c 00 00 00 20 23 10 00 62 00 00 00 | t"..8...."..F...."..L....#..b... |
11220 | 6d 23 10 00 55 01 00 00 d0 23 10 00 c0 00 00 00 26 25 10 00 b6 00 00 00 e7 25 10 00 8d 00 00 00 | m#..U....#......&%.......%...... |
11240 | 9e 26 10 00 d5 00 00 00 2c 27 10 00 7e 00 00 00 02 28 10 00 a4 00 00 00 81 28 10 00 a6 00 00 00 | .&......,'..~....(.......(...... |
11260 | 26 29 10 00 c7 01 00 00 cd 29 10 00 32 01 00 00 95 2b 10 00 a8 00 00 00 c8 2c 10 00 79 00 00 00 | &).......)..2....+.......,..y... |
11280 | 71 2d 10 00 33 00 00 00 eb 2d 10 00 90 00 00 00 1f 2e 10 00 b0 00 00 00 b0 2e 10 00 63 00 00 00 | q-..3....-..................c... |
112a0 | 61 2f 10 00 b3 00 00 00 c5 2f 10 00 d6 00 00 00 79 30 10 00 2c 00 00 00 50 31 10 00 52 00 00 00 | a/......./......y0..,...P1..R... |
112c0 | 7d 31 10 00 6e 00 00 00 d0 31 10 00 4d 01 00 00 3f 32 10 00 3b 00 00 00 8d 33 10 00 ad 00 00 00 | }1..n....1..M...?2..;....3...... |
112e0 | c9 33 10 00 7b 02 00 00 77 34 10 00 54 01 00 00 f3 36 10 00 53 00 00 00 48 38 10 00 4b 00 00 00 | .3..{...w4..T....6..S...H8..K... |
11300 | 9c 38 10 00 04 01 00 00 e8 38 10 00 eb 00 00 00 ed 39 10 00 c8 00 00 00 d9 3a 10 00 c8 00 00 00 | .8.......8.......9.......:...... |
11320 | a2 3b 10 00 b6 00 00 00 6b 3c 10 00 bb 00 00 00 22 3d 10 00 60 00 00 00 de 3d 10 00 b5 00 00 00 | .;......k<......"=..`....=...... |
11340 | 3f 3e 10 00 b9 00 00 00 f5 3e 10 00 9b 00 00 00 af 3f 10 00 0a 01 00 00 4b 40 10 00 01 01 00 00 | ?>.......>.......?......K@...... |
11360 | 56 41 10 00 38 00 00 00 58 42 10 00 3b 00 00 00 91 42 10 00 45 00 00 00 cd 42 10 00 2c 00 00 00 | VA..8...XB..;....B..E....B..,... |
11380 | 13 43 10 00 70 00 00 00 40 43 10 00 4e 00 00 00 b1 43 10 00 7c 01 00 00 00 44 10 00 71 01 00 00 | .C..p...@C..N....C..|....D..q... |
113a0 | 7d 45 10 00 90 00 00 00 ef 46 10 00 4b 00 00 00 80 47 10 00 11 01 00 00 cc 47 10 00 7b 00 00 00 | }E.......F..K....G.......G..{... |
113c0 | de 48 10 00 58 00 00 00 5a 49 10 00 a9 00 00 00 b3 49 10 00 72 00 00 00 5d 4a 10 00 6c 00 00 00 | .H..X...ZI.......I..r...]J..l... |
113e0 | d0 4a 10 00 60 00 00 00 3d 4b 10 00 17 01 00 00 9e 4b 10 00 ff 00 00 00 b6 4c 10 00 44 00 00 00 | .J..`...=K.......K.......L..D... |
11400 | b6 4d 10 00 87 00 00 00 fb 4d 10 00 70 00 00 00 83 4e 10 00 87 00 00 00 f4 4e 10 00 65 00 00 00 | .M.......M..p....N.......N..e... |
11420 | 7c 4f 10 00 6e 00 00 00 e2 4f 10 00 64 00 00 00 51 50 10 00 59 02 00 00 b6 50 10 00 88 00 00 00 | |O..n....O..d...QP..Y....P...... |
11440 | 10 53 10 00 25 00 00 00 99 53 10 00 88 00 00 00 bf 53 10 00 a5 00 00 00 48 54 10 00 57 01 00 00 | .S..%....S.......S......HT..W... |
11460 | ee 54 10 00 32 01 00 00 46 56 10 00 49 01 00 00 79 57 10 00 51 01 00 00 c3 58 10 00 fb 00 00 00 | .T..2...FV..I...yW..Q....X...... |
11480 | 15 5a 10 00 28 00 00 00 11 5b 10 00 95 00 00 00 3a 5b 10 00 af 00 00 00 d0 5b 10 00 af 00 00 00 | .Z..(....[......:[.......[...... |
114a0 | 80 5c 10 00 76 00 00 00 30 5d 10 00 a6 00 00 00 a7 5d 10 00 84 01 00 00 4e 5e 10 00 6a 00 00 00 | .\..v...0].......]......N^..j... |
114c0 | d3 5f 10 00 b9 00 00 00 3e 60 10 00 0f 01 00 00 f8 60 10 00 36 00 00 00 08 62 10 00 a5 00 00 00 | ._......>`.......`..6....b...... |
114e0 | 3f 62 10 00 a7 00 00 00 e5 62 10 00 7b 00 00 00 8d 63 10 00 67 00 00 00 09 64 10 00 32 00 00 00 | ?b.......b..{....c..g....d..2... |
11500 | 71 64 10 00 fe 00 00 00 a4 64 10 00 9d 00 00 00 a3 65 10 00 bb 00 00 00 41 66 10 00 77 00 00 00 | qd.......d.......e......Af..w... |
11520 | fd 66 10 00 bf 00 00 00 75 67 10 00 c7 00 00 00 35 68 10 00 cc 00 00 00 fd 68 10 00 d1 00 00 00 | .f......ug......5h.......h...... |
11540 | ca 69 10 00 2d 04 00 00 9c 6a 10 00 5d 00 00 00 ca 6e 10 00 e3 00 00 00 28 6f 10 00 cf 00 00 00 | .i..-....j..]....n......(o...... |
11560 | 0c 70 10 00 07 01 00 00 dc 70 10 00 10 01 00 00 e4 71 10 00 9c 00 00 00 f5 72 10 00 8a 00 00 00 | .p.......p.......q.......r...... |
11580 | 92 73 10 00 97 00 00 00 1d 74 10 00 40 00 00 00 b5 74 10 00 f0 00 00 00 f6 74 10 00 0b 01 00 00 | .s.......t..@....t.......t...... |
115a0 | e7 75 10 00 37 01 00 00 f3 76 10 00 75 01 00 00 2b 78 10 00 97 01 00 00 a1 79 10 00 f0 00 00 00 | .u..7....v..u...+x.......y...... |
115c0 | 39 7b 10 00 01 01 00 00 2a 7c 10 00 aa 00 00 00 2c 7d 10 00 69 00 00 00 d7 7d 10 00 6b 00 00 00 | 9{......*|......,}..i....}..k... |
115e0 | 41 7e 10 00 df 00 00 00 ad 7e 10 00 44 00 00 00 8d 7f 10 00 ec 00 00 00 d2 7f 10 00 86 00 00 00 | A~.......~..D................... |
11600 | bf 80 10 00 d5 00 00 00 46 81 10 00 b9 00 00 00 1c 82 10 00 a6 00 00 00 d6 82 10 00 c8 00 00 00 | ........F....................... |
11620 | 7d 83 10 00 71 00 00 00 46 84 10 00 2c 01 00 00 b8 84 10 00 84 00 00 00 e5 85 10 00 00 01 00 00 | }...q...F...,................... |
11640 | 6a 86 10 00 e5 00 00 00 6b 87 10 00 2d 01 00 00 51 88 10 00 12 01 00 00 7f 89 10 00 f2 00 00 00 | j.......k...-...Q............... |
11660 | 92 8a 10 00 a4 00 00 00 85 8b 10 00 90 01 00 00 2a 8c 10 00 a2 00 00 00 bb 8d 10 00 b3 01 00 00 | ................*............... |
11680 | 5e 8e 10 00 53 00 00 00 12 90 10 00 5f 00 00 00 66 90 10 00 80 00 00 00 c6 90 10 00 81 00 00 00 | ^...S......._...f............... |
116a0 | 47 91 10 00 8f 00 00 00 c9 91 10 00 7b 00 00 00 59 92 10 00 7a 00 00 00 d5 92 10 00 f3 00 00 00 | G...........{...Y...z........... |
116c0 | 50 93 10 00 f2 00 00 00 44 94 10 00 3a 00 00 00 37 95 10 00 3a 00 00 00 72 95 10 00 41 00 00 00 | P.......D...:...7...:...r...A... |
116e0 | ad 95 10 00 67 00 00 00 ef 95 10 00 42 00 00 00 57 96 10 00 38 00 00 00 9a 96 10 00 53 00 00 00 | ....g.......B...W...8.......S... |
11700 | d3 96 10 00 5c 00 00 00 27 97 10 00 e1 01 00 00 84 97 10 00 bb 00 00 00 66 99 10 00 e7 00 00 00 | ....\...'...............f....... |
11720 | 22 9a 10 00 4d 00 00 00 0a 9b 10 00 96 00 00 00 58 9b 10 00 80 00 00 00 ef 9b 10 00 e5 00 00 00 | "...M...........X............... |
11740 | 70 9c 10 00 da 00 00 00 56 9d 10 00 a4 00 00 00 31 9e 10 00 66 00 00 00 d6 9e 10 00 ad 00 00 00 | p.......V.......1...f........... |
11760 | 3d 9f 10 00 17 00 00 00 eb 9f 10 00 16 00 00 00 03 a0 10 00 16 00 00 00 1a a0 10 00 1c 00 00 00 | =............................... |
11780 | 31 a0 10 00 1d 00 00 00 4e a0 10 00 14 00 00 00 6c a0 10 00 13 00 00 00 81 a0 10 00 14 00 00 00 | 1.......N.......l............... |
117a0 | 95 a0 10 00 22 00 00 00 aa a0 10 00 3f 00 00 00 cd a0 10 00 16 00 00 00 0d a1 10 00 52 00 00 00 | ....".......?...............R... |
117c0 | 24 a1 10 00 89 00 00 00 77 a1 10 00 4b 00 00 00 01 a2 10 00 0d 01 00 00 4d a2 10 00 41 00 00 00 | $.......w...K...........M...A... |
117e0 | 5b a3 10 00 6d 00 00 00 9d a3 10 00 6a 00 00 00 0b a4 10 00 32 00 00 00 76 a4 10 00 61 00 00 00 | [...m.......j.......2...v...a... |
11800 | a9 a4 10 00 8d 00 00 00 0b a5 10 00 8e 00 00 00 99 a5 10 00 47 00 00 00 28 a6 10 00 40 00 00 00 | ....................G...(...@... |
11820 | 70 a6 10 00 6c 00 00 00 b1 a6 10 00 4c 00 00 00 1e a7 10 00 3f 00 00 00 6b a7 10 00 00 01 00 00 | p...l.......L.......?...k....... |
11840 | ab a7 10 00 1c 01 00 00 ac a8 10 00 a2 00 00 00 c9 a9 10 00 97 00 00 00 6c aa 10 00 59 00 00 00 | ........................l...Y... |
11860 | 04 ab 10 00 62 00 00 00 5e ab 10 00 1a 00 00 00 c1 ab 10 00 1c 00 00 00 dc ab 10 00 bb 00 00 00 | ....b...^....................... |
11880 | f9 ab 10 00 32 00 00 00 b5 ac 10 00 73 00 00 00 e8 ac 10 00 61 00 00 00 5c ad 10 00 76 00 00 00 | ....2.......s.......a...\...v... |
118a0 | be ad 10 00 47 00 00 00 35 ae 10 00 43 01 00 00 7d ae 10 00 7d 00 00 00 c1 af 10 00 e5 00 00 00 | ....G...5...C...}...}........... |
118c0 | 3f b0 10 00 11 00 00 00 25 b1 10 00 63 00 00 00 37 b1 10 00 c6 00 00 00 9b b1 10 00 8e 00 00 00 | ?.......%...c...7............... |
118e0 | 62 b2 10 00 2a 00 00 00 f1 b2 10 00 98 00 00 00 1c b3 10 00 bd 00 00 00 b5 b3 10 00 44 00 00 00 | b...*.......................D... |
11900 | 73 b4 10 00 a0 00 00 00 b8 b4 10 00 ca 00 00 00 59 b5 10 00 41 00 00 00 24 b6 10 00 76 00 00 00 | s...............Y...A...$...v... |
11920 | 66 b6 10 00 c7 00 00 00 dd b6 10 00 58 00 00 00 a5 b7 10 00 23 00 00 00 fe b7 10 00 76 00 00 00 | f...........X.......#.......v... |
11940 | 22 b8 10 00 36 00 00 00 99 b8 10 00 97 00 00 00 d0 b8 10 00 2c 00 00 00 68 b9 10 00 2b 00 00 00 | "...6...............,...h...+... |
11960 | 95 b9 10 00 2e 00 00 00 c1 b9 10 00 33 00 00 00 f0 b9 10 00 fc 00 00 00 24 ba 10 00 e9 00 00 00 | ............3...........$....... |
11980 | 21 bb 10 00 31 00 00 00 0b bc 10 00 26 00 00 00 3d bc 10 00 60 00 00 00 64 bc 10 00 1d 00 00 00 | !...1.......&...=...`...d....... |
119a0 | c5 bc 10 00 89 00 00 00 e3 bc 10 00 be 00 00 00 6d bd 10 00 60 01 00 00 2c be 10 00 80 00 00 00 | ................m...`...,....... |
119c0 | 8d bf 10 00 78 00 00 00 0e c0 10 00 7b 00 00 00 87 c0 10 00 29 00 00 00 03 c1 10 00 e9 00 00 00 | ....x.......{.......)........... |
119e0 | 2d c1 10 00 3d 00 00 00 17 c2 10 00 6f 00 00 00 55 c2 10 00 3b 00 00 00 c5 c2 10 00 a5 00 00 00 | -...=.......o...U...;........... |
11a00 | 01 c3 10 00 2d 01 00 00 a7 c3 10 00 2c 01 00 00 d5 c4 10 00 dd 00 00 00 02 c6 10 00 64 00 00 00 | ....-.......,...............d... |
11a20 | e0 c6 10 00 40 00 00 00 45 c7 10 00 77 00 00 00 86 c7 10 00 76 00 00 00 fe c7 10 00 6f 00 00 00 | ....@...E...w.......v.......o... |
11a40 | 75 c8 10 00 d3 00 00 00 e5 c8 10 00 23 01 00 00 b9 c9 10 00 9d 01 00 00 dd ca 10 00 48 00 00 00 | u...........#...............H... |
11a60 | 7b cc 10 00 2c 00 00 00 c4 cc 10 00 bb 00 00 00 f1 cc 10 00 23 00 00 00 ad cd 10 00 3d 00 00 00 | {...,...............#.......=... |
11a80 | d1 cd 10 00 42 00 00 00 0f ce 10 00 5b 00 00 00 52 ce 10 00 6b 00 00 00 ae ce 10 00 30 00 00 00 | ....B.......[...R...k.......0... |
11aa0 | 1a cf 10 00 3d 00 00 00 4b cf 10 00 2c 00 00 00 89 cf 10 00 54 00 00 00 b6 cf 10 00 38 00 00 00 | ....=...K...,.......T.......8... |
11ac0 | 0b d0 10 00 3a 00 00 00 44 d0 10 00 3c 00 00 00 7f d0 10 00 44 00 00 00 bc d0 10 00 34 00 00 00 | ....:...D...<.......D.......4... |
11ae0 | 01 d1 10 00 32 01 00 00 36 d1 10 00 30 00 00 00 69 d2 10 00 dd 00 00 00 9a d2 10 00 09 00 00 00 | ....2...6...0...i............... |
11b00 | 78 d3 10 00 d6 00 00 00 82 d3 10 00 49 00 00 00 59 d4 10 00 47 00 00 00 a3 d4 10 00 44 00 00 00 | x...........I...Y...G.......D... |
11b20 | eb d4 10 00 4a 00 00 00 30 d5 10 00 26 00 00 00 7b d5 10 00 1f 00 00 00 a2 d5 10 00 74 00 00 00 | ....J...0...&...{...........t... |
11b40 | c2 d5 10 00 12 00 00 00 37 d6 10 00 30 00 00 00 4a d6 10 00 45 00 00 00 7b d6 10 00 2e 00 00 00 | ........7...0...J...E...{....... |
11b60 | c1 d6 10 00 06 00 00 00 f0 d6 10 00 65 00 00 00 f7 d6 10 00 4e 00 00 00 5d d7 10 00 b1 00 00 00 | ............e.......N...]....... |
11b80 | ac d7 10 00 9b 00 00 00 5e d8 10 00 91 00 00 00 fa d8 10 00 ae 00 00 00 8c d9 10 00 22 00 00 00 | ........^..................."... |
11ba0 | 3b da 10 00 aa 00 00 00 5e da 10 00 39 01 00 00 09 db 10 00 5c 00 00 00 43 dc 10 00 74 00 00 00 | ;.......^...9.......\...C...t... |
11bc0 | a0 dc 10 00 58 00 00 00 15 dd 10 00 6f 00 00 00 6e dd 10 00 99 00 00 00 de dd 10 00 80 00 00 00 | ....X.......o...n............... |
11be0 | 78 de 10 00 54 00 00 00 f9 de 10 00 4c 00 00 00 4e df 10 00 51 00 00 00 9b df 10 00 d7 00 00 00 | x...T.......L...N...Q........... |
11c00 | ed df 10 00 68 00 00 00 c5 e0 10 00 62 00 00 00 2e e1 10 00 5e 00 00 00 91 e1 10 00 3c 00 00 00 | ....h.......b.......^.......<... |
11c20 | f0 e1 10 00 77 00 00 00 2d e2 10 00 40 00 00 00 a5 e2 10 00 d7 00 00 00 e6 e2 10 00 b3 00 00 00 | ....w...-...@................... |
11c40 | be e3 10 00 66 00 00 00 72 e4 10 00 37 00 00 00 d9 e4 10 00 6a 00 00 00 11 e5 10 00 42 00 00 00 | ....f...r...7.......j.......B... |
11c60 | 7c e5 10 00 3d 00 00 00 bf e5 10 00 38 00 00 00 fd e5 10 00 3d 00 00 00 36 e6 10 00 40 00 00 00 | |...=.......8.......=...6...@... |
11c80 | 74 e6 10 00 4a 01 00 00 b5 e6 10 00 52 00 00 00 00 e8 10 00 51 00 00 00 53 e8 10 00 d9 00 00 00 | t...J.......R.......Q...S....... |
11ca0 | a5 e8 10 00 c9 00 00 00 7f e9 10 00 4f 00 00 00 49 ea 10 00 67 00 00 00 99 ea 10 00 8d 00 00 00 | ............O...I...g........... |
11cc0 | 01 eb 10 00 49 00 00 00 8f eb 10 00 a0 01 00 00 d9 eb 10 00 87 00 00 00 7a ed 10 00 5f 00 00 00 | ....I...................z..._... |
11ce0 | 02 ee 10 00 fa 00 00 00 62 ee 10 00 54 00 00 00 5d ef 10 00 25 00 00 00 b2 ef 10 00 49 00 00 00 | ........b...T...]...%.......I... |
11d00 | d8 ef 10 00 92 00 00 00 22 f0 10 00 54 00 00 00 b5 f0 10 00 96 00 00 00 0a f1 10 00 2a 00 00 00 | ........"...T...............*... |
11d20 | a1 f1 10 00 1c 00 00 00 cc f1 10 00 1f 00 00 00 e9 f1 10 00 32 00 00 00 09 f2 10 00 12 01 00 00 | ....................2........... |
11d40 | 3c f2 10 00 71 00 00 00 4f f3 10 00 5f 00 00 00 c1 f3 10 00 69 00 00 00 21 f4 10 00 a5 00 00 00 | <...q...O..._.......i...!....... |
11d60 | 8b f4 10 00 45 00 00 00 31 f5 10 00 09 00 00 00 77 f5 10 00 2c 00 00 00 81 f5 10 00 0e 00 00 00 | ....E...1.......w...,........... |
11d80 | ae f5 10 00 05 00 00 00 bd f5 10 00 83 00 00 00 c3 f5 10 00 44 02 00 00 47 f6 10 00 dc 00 00 00 | ....................D...G....... |
11da0 | 8c f8 10 00 8a 01 00 00 69 f9 10 00 0f 00 00 00 f4 fa 10 00 93 00 00 00 04 fb 10 00 0e 00 00 00 | ........i....................... |
11dc0 | 98 fb 10 00 5e 00 00 00 a7 fb 10 00 a6 00 00 00 06 fc 10 00 9e 00 00 00 ad fc 10 00 97 00 00 00 | ....^........................... |
11de0 | 4c fd 10 00 19 00 00 00 e4 fd 10 00 b8 00 00 00 fe fd 10 00 12 00 00 00 b7 fe 10 00 60 01 00 00 | L...........................`... |
11e00 | ca fe 10 00 11 00 00 00 2b 00 11 00 0f 00 00 00 3d 00 11 00 0f 00 00 00 4d 00 11 00 06 00 00 00 | ........+.......=.......M....... |
11e20 | 5d 00 11 00 0b 00 00 00 64 00 11 00 35 00 00 00 70 00 11 00 28 00 00 00 a6 00 11 00 44 00 00 00 | ].......d...5...p...(.......D... |
11e40 | cf 00 11 00 60 00 00 00 14 01 11 00 3f 00 00 00 75 01 11 00 5f 00 00 00 b5 01 11 00 7c 00 00 00 | ....`.......?...u..._.......|... |
11e60 | 15 02 11 00 13 00 00 00 92 02 11 00 1f 00 00 00 a6 02 11 00 17 00 00 00 c6 02 11 00 15 00 00 00 | ................................ |
11e80 | de 02 11 00 12 00 00 00 f4 02 11 00 29 00 00 00 07 03 11 00 0d 00 00 00 31 03 11 00 38 00 00 00 | ............)...........1...8... |
11ea0 | 3f 03 11 00 af 00 00 00 78 03 11 00 0e 00 00 00 28 04 11 00 07 00 00 00 37 04 11 00 0c 00 00 00 | ?.......x.......(.......7....... |
11ec0 | 3f 04 11 00 0d 00 00 00 4c 04 11 00 1b 00 00 00 5a 04 11 00 05 00 00 00 76 04 11 00 46 01 00 00 | ?.......L.......Z.......v...F... |
11ee0 | 7c 04 11 00 9b 01 00 00 c3 05 11 00 06 00 00 00 5f 07 11 00 16 00 00 00 66 07 11 00 15 00 00 00 | |..............._.......f....... |
11f00 | 7d 07 11 00 07 00 00 00 93 07 11 00 9c 00 00 00 9b 07 11 00 2e 00 00 00 38 08 11 00 49 00 00 00 | }.......................8...I... |
11f20 | 67 08 11 00 e2 00 00 00 b1 08 11 00 58 00 00 00 94 09 11 00 14 00 00 00 ed 09 11 00 66 00 00 00 | g...........X...............f... |
11f40 | 02 0a 11 00 25 00 00 00 69 0a 11 00 26 00 00 00 8f 0a 11 00 20 00 00 00 b6 0a 11 00 13 00 00 00 | ....%...i...&................... |
11f60 | d7 0a 11 00 39 00 00 00 eb 0a 11 00 59 00 00 00 25 0b 11 00 3e 00 00 00 7f 0b 11 00 00 01 00 00 | ....9.......Y...%...>........... |
11f80 | be 0b 11 00 55 00 00 00 bf 0c 11 00 54 00 00 00 15 0d 11 00 51 00 00 00 6a 0d 11 00 55 00 00 00 | ....U.......T.......Q...j...U... |
11fa0 | bc 0d 11 00 52 00 00 00 12 0e 11 00 1a 00 00 00 65 0e 11 00 44 00 00 00 80 0e 11 00 36 00 00 00 | ....R...........e...D.......6... |
11fc0 | c5 0e 11 00 46 00 00 00 fc 0e 11 00 2c 00 00 00 43 0f 11 00 22 00 00 00 70 0f 11 00 88 00 00 00 | ....F.......,...C..."...p....... |
11fe0 | 93 0f 11 00 30 00 00 00 1c 10 11 00 43 00 00 00 4d 10 11 00 18 00 00 00 91 10 11 00 28 00 00 00 | ....0.......C...M...........(... |
12000 | aa 10 11 00 2f 00 00 00 d3 10 11 00 68 00 00 00 03 11 11 00 8c 00 00 00 6c 11 11 00 9a 00 00 00 | ..../.......h...........l....... |
12020 | f9 11 11 00 8a 00 00 00 94 12 11 00 78 00 00 00 1f 13 11 00 59 00 00 00 98 13 11 00 19 01 00 00 | ............x.......Y........... |
12040 | f2 13 11 00 24 01 00 00 0c 15 11 00 22 01 00 00 31 16 11 00 08 01 00 00 54 17 11 00 f8 00 00 00 | ....$......."...1.......T....... |
12060 | 5d 18 11 00 f7 00 00 00 56 19 11 00 f9 00 00 00 4e 1a 11 00 f7 00 00 00 48 1b 11 00 f7 00 00 00 | ].......V.......N.......H....... |
12080 | 40 1c 11 00 f7 00 00 00 38 1d 11 00 c4 00 00 00 30 1e 11 00 a1 00 00 00 f5 1e 11 00 73 00 00 00 | @.......8.......0...........s... |
120a0 | 97 1f 11 00 f8 00 00 00 0b 20 11 00 4e 00 00 00 04 21 11 00 99 00 00 00 53 21 11 00 4b 00 00 00 | ............N....!......S!..K... |
120c0 | ed 21 11 00 5b 00 00 00 39 22 11 00 4a 00 00 00 95 22 11 00 4a 00 00 00 e0 22 11 00 50 00 00 00 | .!..[...9"..J...."..J...."..P... |
120e0 | 2b 23 11 00 47 00 00 00 7c 23 11 00 44 01 00 00 c4 23 11 00 45 01 00 00 09 25 11 00 44 01 00 00 | +#..G...|#..D....#..E....%..D... |
12100 | 4f 26 11 00 44 01 00 00 94 27 11 00 44 01 00 00 d9 28 11 00 3c 01 00 00 1e 2a 11 00 a0 00 00 00 | O&..D....'..D....(..<....*...... |
12120 | 5b 2b 11 00 30 01 00 00 fc 2b 11 00 50 01 00 00 2d 2d 11 00 d1 00 00 00 7e 2e 11 00 23 01 00 00 | [+..0....+..P...--......~...#... |
12140 | 50 2f 11 00 08 01 00 00 74 30 11 00 29 01 00 00 7d 31 11 00 2f 01 00 00 a7 32 11 00 da 00 00 00 | P/......t0..)...}1../....2...... |
12160 | d7 33 11 00 34 01 00 00 b2 34 11 00 89 00 00 00 e7 35 11 00 66 00 00 00 71 36 11 00 88 00 00 00 | .3..4....4.......5..f...q6...... |
12180 | d8 36 11 00 a5 00 00 00 61 37 11 00 70 00 00 00 07 38 11 00 6f 00 00 00 78 38 11 00 8e 00 00 00 | .6......a7..p....8..o...x8...... |
121a0 | e8 38 11 00 b0 00 00 00 77 39 11 00 0f 01 00 00 28 3a 11 00 c3 00 00 00 38 3b 11 00 84 00 00 00 | .8......w9......(:......8;...... |
121c0 | fc 3b 11 00 be 00 00 00 81 3c 11 00 db 00 00 00 40 3d 11 00 85 00 00 00 1c 3e 11 00 7d 00 00 00 | .;.......<......@=.......>..}... |
121e0 | a2 3e 11 00 9a 00 00 00 20 3f 11 00 92 00 00 00 bb 3f 11 00 91 00 00 00 4e 40 11 00 d5 00 00 00 | .>.......?.......?......N@...... |
12200 | e0 40 11 00 93 00 00 00 b6 41 11 00 8e 00 00 00 4a 42 11 00 fa 00 00 00 d9 42 11 00 bd 00 00 00 | .@.......A......JB.......B...... |
12220 | d4 43 11 00 f5 00 00 00 92 44 11 00 a6 00 00 00 88 45 11 00 a1 00 00 00 2f 46 11 00 7b 00 00 00 | .C.......D.......E....../F..{... |
12240 | d1 46 11 00 fc 00 00 00 4d 47 11 00 fd 00 00 00 4a 48 11 00 19 01 00 00 48 49 11 00 9d 00 00 00 | .F......MG......JH......HI...... |
12260 | 62 4a 11 00 be 01 00 00 00 4b 11 00 b1 00 00 00 bf 4c 11 00 5b 00 00 00 71 4d 11 00 63 00 00 00 | bJ.......K.......L..[...qM..c... |
12280 | cd 4d 11 00 33 01 00 00 31 4e 11 00 3b 00 00 00 65 4f 11 00 98 00 00 00 a1 4f 11 00 54 00 00 00 | .M..3...1N..;...eO.......O..T... |
122a0 | 3a 50 11 00 59 00 00 00 8f 50 11 00 de 00 00 00 e9 50 11 00 9a 00 00 00 c8 51 11 00 2b 00 00 00 | :P..Y....P.......P.......Q..+... |
122c0 | 63 52 11 00 c0 00 00 00 8f 52 11 00 c5 00 00 00 50 53 11 00 3a 00 00 00 16 54 11 00 35 00 00 00 | cR.......R......PS..:....T..5... |
122e0 | 51 54 11 00 87 00 00 00 87 54 11 00 5c 00 00 00 0f 55 11 00 74 00 00 00 6c 55 11 00 da 00 00 00 | QT.......T..\....U..t...lU...... |
12300 | e1 55 11 00 f0 00 00 00 bc 56 11 00 84 00 00 00 ad 57 11 00 f0 00 00 00 32 58 11 00 f0 00 00 00 | .U.......V.......W......2X...... |
12320 | 23 59 11 00 f0 00 00 00 14 5a 11 00 f1 00 00 00 05 5b 11 00 5f 00 00 00 f7 5b 11 00 83 00 00 00 | #Y.......Z.......[.._....[...... |
12340 | 57 5c 11 00 bd 00 00 00 db 5c 11 00 79 00 00 00 99 5d 11 00 7e 00 00 00 13 5e 11 00 36 00 00 00 | W\.......\..y....]..~....^..6... |
12360 | 92 5e 11 00 78 00 00 00 c9 5e 11 00 85 00 00 00 42 5f 11 00 51 00 00 00 c8 5f 11 00 3e 00 00 00 | .^..x....^......B_..Q...._..>... |
12380 | 1a 60 11 00 3e 00 00 00 59 60 11 00 75 00 00 00 98 60 11 00 53 00 00 00 0e 61 11 00 df 00 00 00 | .`..>...Y`..u....`..S....a...... |
123a0 | 62 61 11 00 a1 00 00 00 42 62 11 00 ac 00 00 00 e4 62 11 00 3b 00 00 00 91 63 11 00 47 00 00 00 | ba......Bb.......b..;....c..G... |
123c0 | cd 63 11 00 67 00 00 00 15 64 11 00 d8 00 00 00 7d 64 11 00 5a 00 00 00 56 65 11 00 38 00 00 00 | .c..g....d......}d..Z...Ve..8... |
123e0 | b1 65 11 00 88 01 00 00 ea 65 11 00 c5 00 00 00 73 67 11 00 a1 00 00 00 39 68 11 00 6d 00 00 00 | .e.......e......sg......9h..m... |
12400 | db 68 11 00 4e 00 00 00 49 69 11 00 54 00 00 00 98 69 11 00 3d 00 00 00 ed 69 11 00 8a 00 00 00 | .h..N...Ii..T....i..=....i...... |
12420 | 2b 6a 11 00 6f 00 00 00 b6 6a 11 00 2e 00 00 00 26 6b 11 00 31 00 00 00 55 6b 11 00 3c 00 00 00 | +j..o....j......&k..1...Uk..<... |
12440 | 87 6b 11 00 17 01 00 00 c4 6b 11 00 db 00 00 00 dc 6c 11 00 49 00 00 00 b8 6d 11 00 4a 00 00 00 | .k.......k.......l..I....m..J... |
12460 | 02 6e 11 00 49 00 00 00 4d 6e 11 00 49 00 00 00 97 6e 11 00 0b 01 00 00 e1 6e 11 00 51 00 00 00 | .n..I...Mn..I....n.......n..Q... |
12480 | ed 6f 11 00 96 00 00 00 3f 70 11 00 5d 00 00 00 d6 70 11 00 49 00 00 00 34 71 11 00 46 00 00 00 | .o......?p..]....p..I...4q..F... |
124a0 | 7e 71 11 00 37 00 00 00 c5 71 11 00 38 01 00 00 fd 71 11 00 31 00 00 00 36 73 11 00 30 00 00 00 | ~q..7....q..8....q..1...6s..0... |
124c0 | 68 73 11 00 39 00 00 00 99 73 11 00 33 00 00 00 d3 73 11 00 33 00 00 00 07 74 11 00 49 00 00 00 | hs..9....s..3....s..3....t..I... |
124e0 | 3b 74 11 00 d9 00 00 00 85 74 11 00 78 00 00 00 5f 75 11 00 79 00 00 00 d8 75 11 00 8c 00 00 00 | ;t.......t..x..._u..y....u...... |
12500 | 52 76 11 00 47 00 00 00 df 76 11 00 fb 00 00 00 27 77 11 00 b7 00 00 00 23 78 11 00 5b 00 00 00 | Rv..G....v......'w......#x..[... |
12520 | db 78 11 00 b7 00 00 00 37 79 11 00 42 00 00 00 ef 79 11 00 46 00 00 00 32 7a 11 00 30 00 00 00 | .x......7y..B....y..F...2z..0... |
12540 | 79 7a 11 00 39 00 00 00 aa 7a 11 00 25 00 00 00 e4 7a 11 00 2e 00 00 00 0a 7b 11 00 2e 00 00 00 | yz..9....z..%....z.......{...... |
12560 | 39 7b 11 00 39 00 00 00 68 7b 11 00 c1 00 00 00 a2 7b 11 00 8c 00 00 00 64 7c 11 00 b5 00 00 00 | 9{..9...h{.......{......d|...... |
12580 | f1 7c 11 00 42 00 00 00 a7 7d 11 00 a5 00 00 00 ea 7d 11 00 b9 00 00 00 90 7e 11 00 3e 00 00 00 | .|..B....}.......}.......~..>... |
125a0 | 4a 7f 11 00 74 00 00 00 89 7f 11 00 6c 00 00 00 fe 7f 11 00 81 00 00 00 6b 80 11 00 19 00 00 00 | J...t.......l...........k....... |
125c0 | ed 80 11 00 23 00 00 00 07 81 11 00 b7 00 00 00 2b 81 11 00 dc 00 00 00 e3 81 11 00 13 00 00 00 | ....#...........+............... |
125e0 | c0 82 11 00 54 00 00 00 d4 82 11 00 5f 01 00 00 29 83 11 00 17 00 00 00 89 84 11 00 1a 00 00 00 | ....T......._...)............... |
12600 | a1 84 11 00 17 00 00 00 bc 84 11 00 5b 00 00 00 d4 84 11 00 3b 00 00 00 30 85 11 00 dd 00 00 00 | ............[.......;...0....... |
12620 | 6c 85 11 00 1d 01 00 00 4a 86 11 00 32 00 00 00 68 87 11 00 20 00 00 00 9b 87 11 00 5d 00 00 00 | l.......J...2...h...........]... |
12640 | bc 87 11 00 54 00 00 00 1a 88 11 00 04 00 00 00 6f 88 11 00 30 00 00 00 74 88 11 00 0c 00 00 00 | ....T...........o...0...t....... |
12660 | a5 88 11 00 0c 00 00 00 b2 88 11 00 60 00 00 00 bf 88 11 00 09 00 00 00 20 89 11 00 35 01 00 00 | ............`...............5... |
12680 | 2a 89 11 00 33 01 00 00 60 8a 11 00 70 00 00 00 94 8b 11 00 03 00 00 00 05 8c 11 00 62 00 00 00 | *...3...`...p...............b... |
126a0 | 09 8c 11 00 03 00 00 00 6c 8c 11 00 11 00 00 00 70 8c 11 00 0b 00 00 00 82 8c 11 00 16 00 00 00 | ........l.......p............... |
126c0 | 8e 8c 11 00 19 00 00 00 a5 8c 11 00 15 00 00 00 bf 8c 11 00 11 00 00 00 d5 8c 11 00 14 00 00 00 | ................................ |
126e0 | e7 8c 11 00 6a 02 00 00 fc 8c 11 00 3d 01 00 00 67 8f 11 00 85 01 00 00 a5 90 11 00 95 00 00 00 | ....j.......=...g............... |
12700 | 2b 92 11 00 d5 01 00 00 c1 92 11 00 32 00 00 00 97 94 11 00 1e 00 00 00 ca 94 11 00 05 00 00 00 | +...........2................... |
12720 | e9 94 11 00 45 01 00 00 ef 94 11 00 16 00 00 00 35 96 11 00 3b 00 00 00 4c 96 11 00 18 00 00 00 | ....E...........5...;...L....... |
12740 | 88 96 11 00 05 00 00 00 a1 96 11 00 8e 00 00 00 a7 96 11 00 60 00 00 00 36 97 11 00 0c 00 00 00 | ....................`...6....... |
12760 | 97 97 11 00 0d 00 00 00 a4 97 11 00 3b 00 00 00 b2 97 11 00 07 00 00 00 ee 97 11 00 10 00 00 00 | ............;................... |
12780 | f6 97 11 00 6c 00 00 00 07 98 11 00 0e 00 00 00 74 98 11 00 4b 00 00 00 83 98 11 00 47 00 00 00 | ....l...........t...K.......G... |
127a0 | cf 98 11 00 65 00 00 00 17 99 11 00 a1 00 00 00 7d 99 11 00 3f 00 00 00 1f 9a 11 00 4a 01 00 00 | ....e...........}...?.......J... |
127c0 | 5f 9a 11 00 44 01 00 00 aa 9b 11 00 15 00 00 00 ef 9c 11 00 24 00 00 00 05 9d 11 00 0a 00 00 00 | _...D...............$........... |
127e0 | 2a 9d 11 00 24 00 00 00 35 9d 11 00 09 00 00 00 5a 9d 11 00 29 00 00 00 64 9d 11 00 1b 00 00 00 | *...$...5.......Z...)...d....... |
12800 | 8e 9d 11 00 c9 00 00 00 aa 9d 11 00 0b 00 00 00 74 9e 11 00 85 00 00 00 80 9e 11 00 26 00 00 00 | ................t...........&... |
12820 | 06 9f 11 00 3d 00 00 00 2d 9f 11 00 52 00 00 00 6b 9f 11 00 b4 00 00 00 be 9f 11 00 a9 00 00 00 | ....=...-...R...k............... |
12840 | 73 a0 11 00 26 00 00 00 1d a1 11 00 b0 00 00 00 44 a1 11 00 df 00 00 00 f5 a1 11 00 1c 00 00 00 | s...&...........D............... |
12860 | d5 a2 11 00 8f 00 00 00 f2 a2 11 00 8c 00 00 00 82 a3 11 00 90 00 00 00 0f a4 11 00 5d 00 00 00 | ............................]... |
12880 | a0 a4 11 00 44 00 00 00 fe a4 11 00 2f 00 00 00 43 a5 11 00 b0 00 00 00 73 a5 11 00 50 00 00 00 | ....D......./...C.......s...P... |
128a0 | 24 a6 11 00 a6 00 00 00 75 a6 11 00 ec 00 00 00 1c a7 11 00 64 00 00 00 09 a8 11 00 53 00 00 00 | $.......u...........d.......S... |
128c0 | 6e a8 11 00 df 00 00 00 c2 a8 11 00 86 00 00 00 a2 a9 11 00 63 00 00 00 29 aa 11 00 68 00 00 00 | n...................c...)...h... |
128e0 | 8d aa 11 00 d1 00 00 00 f6 aa 11 00 6f 00 00 00 c8 ab 11 00 8d 00 00 00 38 ac 11 00 78 00 00 00 | ............o...........8...x... |
12900 | c6 ac 11 00 7a 00 00 00 3f ad 11 00 7d 00 00 00 ba ad 11 00 80 00 00 00 38 ae 11 00 33 00 00 00 | ....z...?...}...........8...3... |
12920 | b9 ae 11 00 71 00 00 00 ed ae 11 00 db 00 00 00 5f af 11 00 a5 00 00 00 3b b0 11 00 75 00 00 00 | ....q..........._.......;...u... |
12940 | e1 b0 11 00 59 00 00 00 57 b1 11 00 58 00 00 00 b1 b1 11 00 9b 00 00 00 0a b2 11 00 b6 00 00 00 | ....Y...W...X................... |
12960 | a6 b2 11 00 29 00 00 00 5d b3 11 00 9c 00 00 00 87 b3 11 00 e3 00 00 00 24 b4 11 00 9e 00 00 00 | ....)...]...............$....... |
12980 | 08 b5 11 00 44 00 00 00 a7 b5 11 00 44 00 00 00 ec b5 11 00 ed 00 00 00 31 b6 11 00 3c 00 00 00 | ....D.......D...........1...<... |
129a0 | 1f b7 11 00 bd 00 00 00 5c b7 11 00 bf 00 00 00 1a b8 11 00 88 00 00 00 da b8 11 00 85 00 00 00 | ........\....................... |
129c0 | 63 b9 11 00 6f 00 00 00 e9 b9 11 00 cf 00 00 00 59 ba 11 00 17 00 00 00 29 bb 11 00 12 00 00 00 | c...o...........Y.......)....... |
129e0 | 41 bb 11 00 18 00 00 00 54 bb 11 00 39 00 00 00 6d bb 11 00 1b 00 00 00 a7 bb 11 00 21 00 00 00 | A.......T...9...m...........!... |
12a00 | c3 bb 11 00 07 00 00 00 e5 bb 11 00 12 00 00 00 ed bb 11 00 79 00 00 00 00 bc 11 00 e5 00 00 00 | ....................y........... |
12a20 | 7a bc 11 00 ac 00 00 00 60 bd 11 00 84 00 00 00 0d be 11 00 36 01 00 00 92 be 11 00 5a 00 00 00 | z.......`...........6.......Z... |
12a40 | c9 bf 11 00 c4 00 00 00 24 c0 11 00 4b 00 00 00 e9 c0 11 00 a7 00 00 00 35 c1 11 00 17 00 00 00 | ........$...K...........5....... |
12a60 | dd c1 11 00 e8 00 00 00 f5 c1 11 00 48 00 00 00 de c2 11 00 41 00 00 00 27 c3 11 00 2e 00 00 00 | ............H.......A...'....... |
12a80 | 69 c3 11 00 47 00 00 00 98 c3 11 00 3f 00 00 00 e0 c3 11 00 9c 00 00 00 20 c4 11 00 68 00 00 00 | i...G.......?...............h... |
12aa0 | bd c4 11 00 1b 01 00 00 26 c5 11 00 22 00 00 00 42 c6 11 00 08 00 00 00 65 c6 11 00 2a 00 00 00 | ........&..."...B.......e...*... |
12ac0 | 6e c6 11 00 34 00 00 00 99 c6 11 00 ae 00 00 00 ce c6 11 00 17 01 00 00 7d c7 11 00 79 00 00 00 | n...4...................}...y... |
12ae0 | 95 c8 11 00 73 00 00 00 0f c9 11 00 bf 00 00 00 83 c9 11 00 dc 00 00 00 43 ca 11 00 7b 01 00 00 | ....s...................C...{... |
12b00 | 20 cb 11 00 90 01 00 00 9c cc 11 00 13 01 00 00 2d ce 11 00 a0 00 00 00 41 cf 11 00 36 01 00 00 | ................-.......A...6... |
12b20 | e2 cf 11 00 04 02 00 00 19 d1 11 00 b6 00 00 00 1e d3 11 00 ad 00 00 00 d5 d3 11 00 67 00 00 00 | ............................g... |
12b40 | 83 d4 11 00 71 00 00 00 eb d4 11 00 fe 00 00 00 5d d5 11 00 7d 00 00 00 5c d6 11 00 6d 01 00 00 | ....q...........]...}...\...m... |
12b60 | da d6 11 00 7a 00 00 00 48 d8 11 00 e2 00 00 00 c3 d8 11 00 1e 01 00 00 a6 d9 11 00 56 00 00 00 | ....z...H...................V... |
12b80 | c5 da 11 00 16 01 00 00 1c db 11 00 06 01 00 00 33 dc 11 00 b1 00 00 00 3a dd 11 00 58 00 00 00 | ................3.......:...X... |
12ba0 | ec dd 11 00 80 00 00 00 45 de 11 00 7d 00 00 00 c6 de 11 00 98 00 00 00 44 df 11 00 b5 00 00 00 | ........E...}...........D....... |
12bc0 | dd df 11 00 a2 00 00 00 93 e0 11 00 00 01 00 00 36 e1 11 00 37 00 00 00 37 e2 11 00 42 00 00 00 | ................6...7...7...B... |
12be0 | 6f e2 11 00 cf 00 00 00 b2 e2 11 00 fd 00 00 00 82 e3 11 00 3c 01 00 00 80 e4 11 00 fb 00 00 00 | o...................<........... |
12c00 | bd e5 11 00 bf 00 00 00 b9 e6 11 00 9e 00 00 00 79 e7 11 00 a4 00 00 00 18 e8 11 00 fb 00 00 00 | ................y............... |
12c20 | bd e8 11 00 18 01 00 00 b9 e9 11 00 20 01 00 00 d2 ea 11 00 5d 00 00 00 f3 eb 11 00 4b 00 00 00 | ....................].......K... |
12c40 | 51 ec 11 00 97 00 00 00 9d ec 11 00 57 00 00 00 35 ed 11 00 3e 00 00 00 8d ed 11 00 b0 00 00 00 | Q...........W...5...>........... |
12c60 | cc ed 11 00 f1 00 00 00 7d ee 11 00 b8 00 00 00 6f ef 11 00 b8 00 00 00 28 f0 11 00 5d 00 00 00 | ........}.......o.......(...]... |
12c80 | e1 f0 11 00 4a 00 00 00 3f f1 11 00 34 00 00 00 8a f1 11 00 2c 00 00 00 bf f1 11 00 24 00 00 00 | ....J...?...4.......,.......$... |
12ca0 | ec f1 11 00 41 00 00 00 11 f2 11 00 d6 00 00 00 53 f2 11 00 ae 00 00 00 2a f3 11 00 cf 00 00 00 | ....A...........S.......*....... |
12cc0 | d9 f3 11 00 59 00 00 00 a9 f4 11 00 c3 00 00 00 03 f5 11 00 48 00 00 00 c7 f5 11 00 62 00 00 00 | ....Y...............H.......b... |
12ce0 | 10 f6 11 00 86 00 00 00 73 f6 11 00 fe 00 00 00 fa f6 11 00 41 00 00 00 f9 f7 11 00 93 00 00 00 | ........s...........A........... |
12d00 | 3b f8 11 00 09 00 00 00 cf f8 11 00 18 00 00 00 d9 f8 11 00 33 00 00 00 f2 f8 11 00 99 00 00 00 | ;...................3........... |
12d20 | 26 f9 11 00 9a 00 00 00 c0 f9 11 00 16 00 00 00 5b fa 11 00 27 00 00 00 72 fa 11 00 30 00 00 00 | &...............[...'...r...0... |
12d40 | 9a fa 11 00 10 00 00 00 cb fa 11 00 21 00 00 00 dc fa 11 00 1c 00 00 00 fe fa 11 00 aa 01 00 00 | ............!................... |
12d60 | 1b fb 11 00 82 00 00 00 c6 fc 11 00 ac 00 00 00 49 fd 11 00 fe 00 00 00 f6 fd 11 00 60 00 00 00 | ................I...........`... |
12d80 | f5 fe 11 00 86 01 00 00 56 ff 11 00 85 01 00 00 dd 00 12 00 01 00 00 00 63 02 12 00 76 00 00 00 | ........V...............c...v... |
12da0 | 65 02 12 00 6b 00 00 00 dc 02 12 00 60 00 00 00 48 03 12 00 a9 00 00 00 a9 03 12 00 c9 00 00 00 | e...k.......`...H............... |
12dc0 | 53 04 12 00 9b 00 00 00 1d 05 12 00 c3 00 00 00 b9 05 12 00 3c 00 00 00 7d 06 12 00 38 00 00 00 | S...................<...}...8... |
12de0 | ba 06 12 00 95 00 00 00 f3 06 12 00 2e 00 00 00 89 07 12 00 57 00 00 00 b8 07 12 00 61 00 00 00 | ....................W.......a... |
12e00 | 10 08 12 00 69 00 00 00 72 08 12 00 4b 00 00 00 dc 08 12 00 a4 00 00 00 28 09 12 00 52 00 00 00 | ....i...r...K...........(...R... |
12e20 | cd 09 12 00 53 00 00 00 20 0a 12 00 65 00 00 00 74 0a 12 00 35 00 00 00 da 0a 12 00 51 00 00 00 | ....S.......e...t...5.......Q... |
12e40 | 10 0b 12 00 a7 00 00 00 62 0b 12 00 8a 00 00 00 0a 0c 12 00 96 00 00 00 95 0c 12 00 81 00 00 00 | ........b....................... |
12e60 | 2c 0d 12 00 7f 00 00 00 ae 0d 12 00 88 00 00 00 2e 0e 12 00 e3 00 00 00 b7 0e 12 00 c3 00 00 00 | ,............................... |
12e80 | 9b 0f 12 00 3a 00 00 00 5f 10 12 00 5a 00 00 00 9a 10 12 00 65 00 00 00 f5 10 12 00 c3 00 00 00 | ....:..._...Z.......e........... |
12ea0 | 5b 11 12 00 db 00 00 00 1f 12 12 00 50 00 00 00 fb 12 12 00 1d 01 00 00 4c 13 12 00 f2 00 00 00 | [...........P...........L....... |
12ec0 | 6a 14 12 00 48 00 00 00 5d 15 12 00 b0 00 00 00 a6 15 12 00 9f 00 00 00 57 16 12 00 1f 00 00 00 | j...H...]...............W....... |
12ee0 | f7 16 12 00 71 00 00 00 17 17 12 00 75 00 00 00 89 17 12 00 75 00 00 00 ff 17 12 00 dc 00 00 00 | ....q.......u.......u........... |
12f00 | 75 18 12 00 3f 00 00 00 52 19 12 00 6d 00 00 00 92 19 12 00 da 00 00 00 00 1a 12 00 1c 00 00 00 | u...?...R...m................... |
12f20 | db 1a 12 00 13 00 00 00 f8 1a 12 00 20 00 00 00 0c 1b 12 00 14 00 00 00 2d 1b 12 00 13 00 00 00 | ........................-....... |
12f40 | 42 1b 12 00 03 01 00 00 56 1b 12 00 1d 00 00 00 5a 1c 12 00 1d 00 00 00 78 1c 12 00 23 00 00 00 | B.......V.......Z.......x...#... |
12f60 | 96 1c 12 00 1d 00 00 00 ba 1c 12 00 29 00 00 00 d8 1c 12 00 31 00 00 00 02 1d 12 00 31 00 00 00 | ............).......1.......1... |
12f80 | 34 1d 12 00 33 00 00 00 66 1d 12 00 33 00 00 00 9a 1d 12 00 10 00 00 00 ce 1d 12 00 0c 00 00 00 | 4...3...f...3................... |
12fa0 | df 1d 12 00 2d 00 00 00 ec 1d 12 00 2c 00 00 00 1a 1e 12 00 12 00 00 00 47 1e 12 00 2c 00 00 00 | ....-.......,...........G...,... |
12fc0 | 5a 1e 12 00 25 00 00 00 87 1e 12 00 3c 00 00 00 ad 1e 12 00 12 00 00 00 ea 1e 12 00 35 00 00 00 | Z...%.......<...............5... |
12fe0 | fd 1e 12 00 13 00 00 00 33 1f 12 00 34 00 00 00 47 1f 12 00 16 00 00 00 7c 1f 12 00 1c 00 00 00 | ........3...4...G.......|....... |
13000 | 93 1f 12 00 12 00 00 00 b0 1f 12 00 34 00 00 00 c3 1f 12 00 13 00 00 00 f8 1f 12 00 1d 00 00 00 | ............4................... |
13020 | 0c 20 12 00 30 00 00 00 2a 20 12 00 1f 00 00 00 5b 20 12 00 13 00 00 00 7b 20 12 00 16 00 00 00 | ....0...*.......[.......{....... |
13040 | 8f 20 12 00 25 01 00 00 a6 20 12 00 d3 00 00 00 cc 21 12 00 13 00 00 00 a0 22 12 00 38 00 00 00 | ....%............!......."..8... |
13060 | b4 22 12 00 16 00 00 00 ed 22 12 00 9d 00 00 00 04 23 12 00 41 00 00 00 a2 23 12 00 38 00 00 00 | .".......".......#..A....#..8... |
13080 | e4 23 12 00 1e 00 00 00 1d 24 12 00 22 00 00 00 3c 24 12 00 5d 00 00 00 5f 24 12 00 55 00 00 00 | .#.......$.."...<$..]..._$..U... |
130a0 | bd 24 12 00 1e 00 00 00 13 25 12 00 44 00 00 00 32 25 12 00 25 00 00 00 77 25 12 00 08 01 00 00 | .$.......%..D...2%..%...w%...... |
130c0 | 9d 25 12 00 fd 01 00 00 a6 26 12 00 87 00 00 00 a4 28 12 00 54 00 00 00 2c 29 12 00 5b 00 00 00 | .%.......&.......(..T...,)..[... |
130e0 | 81 29 12 00 87 02 00 00 dd 29 12 00 c3 00 00 00 65 2c 12 00 59 00 00 00 29 2d 12 00 1e 00 00 00 | .).......)......e,..Y...)-...... |
13100 | 83 2d 12 00 2a 00 00 00 a2 2d 12 00 2f 00 00 00 cd 2d 12 00 27 00 00 00 fd 2d 12 00 37 00 00 00 | .-..*....-../....-..'....-..7... |
13120 | 25 2e 12 00 54 00 00 00 5d 2e 12 00 4f 00 00 00 b2 2e 12 00 59 00 00 00 02 2f 12 00 4d 00 00 00 | %...T...]...O.......Y..../..M... |
13140 | 5c 2f 12 00 5f 00 00 00 aa 2f 12 00 33 00 00 00 0a 30 12 00 64 00 00 00 3e 30 12 00 7b 00 00 00 | \/.._..../..3....0..d...>0..{... |
13160 | a3 30 12 00 49 00 00 00 1f 31 12 00 1e 00 00 00 69 31 12 00 f3 00 00 00 88 31 12 00 f1 00 00 00 | .0..I....1......i1.......1...... |
13180 | 7c 32 12 00 5e 00 00 00 6e 33 12 00 79 00 00 00 cd 33 12 00 54 00 00 00 47 34 12 00 43 00 00 00 | |2..^...n3..y....3..T...G4..C... |
131a0 | 9c 34 12 00 4f 00 00 00 e0 34 12 00 29 00 00 00 30 35 12 00 82 00 00 00 5a 35 12 00 22 00 00 00 | .4..O....4..)...05......Z5.."... |
131c0 | dd 35 12 00 47 02 00 00 00 36 12 00 47 02 00 00 48 38 12 00 fc 00 00 00 90 3a 12 00 9c 00 00 00 | .5..G....6..G...H8.......:...... |
131e0 | 8d 3b 12 00 2c 00 00 00 2a 3c 12 00 16 00 00 00 57 3c 12 00 53 00 00 00 6e 3c 12 00 7d 00 00 00 | .;..,...*<......W<..S...n<..}... |
13200 | c2 3c 12 00 66 00 00 00 40 3d 12 00 b4 00 00 00 a7 3d 12 00 55 00 00 00 5c 3e 12 00 22 00 00 00 | .<..f...@=.......=..U...\>.."... |
13220 | b2 3e 12 00 18 00 00 00 d5 3e 12 00 31 00 00 00 ee 3e 12 00 1b 00 00 00 20 3f 12 00 1a 00 00 00 | .>.......>..1....>.......?...... |
13240 | 3c 3f 12 00 17 00 00 00 57 3f 12 00 17 00 00 00 6f 3f 12 00 17 00 00 00 87 3f 12 00 35 00 00 00 | <?......W?......o?.......?..5... |
13260 | 9f 3f 12 00 41 00 00 00 d5 3f 12 00 25 00 00 00 17 40 12 00 2d 00 00 00 3d 40 12 00 3e 00 00 00 | .?..A....?..%....@..-...=@..>... |
13280 | 6b 40 12 00 24 00 00 00 aa 40 12 00 28 00 00 00 cf 40 12 00 4d 00 00 00 f8 40 12 00 50 00 00 00 | k@..$....@..(....@..M....@..P... |
132a0 | 46 41 12 00 33 00 00 00 97 41 12 00 35 00 00 00 cb 41 12 00 20 00 00 00 01 42 12 00 73 02 00 00 | FA..3....A..5....A.......B..s... |
132c0 | 22 42 12 00 74 02 00 00 96 44 12 00 c9 00 00 00 0b 47 12 00 28 00 00 00 d5 47 12 00 5c 00 00 00 | "B..t....D.......G..(....G..\... |
132e0 | fe 47 12 00 23 00 00 00 5b 48 12 00 27 00 00 00 7f 48 12 00 18 00 00 00 a7 48 12 00 25 00 00 00 | .G..#...[H..'....H.......H..%... |
13300 | c0 48 12 00 1c 00 00 00 e6 48 12 00 53 00 00 00 03 49 12 00 53 00 00 00 57 49 12 00 16 00 00 00 | .H.......H..S....I..S...WI...... |
13320 | ab 49 12 00 7e 00 00 00 c2 49 12 00 33 00 00 00 41 4a 12 00 25 00 00 00 75 4a 12 00 af 00 00 00 | .I..~....I..3...AJ..%...uJ...... |
13340 | 9b 4a 12 00 d0 00 00 00 4b 4b 12 00 7e 00 00 00 1c 4c 12 00 25 00 00 00 9b 4c 12 00 3d 00 00 00 | .J......KK..~....L..%....L..=... |
13360 | c1 4c 12 00 04 01 00 00 ff 4c 12 00 49 00 00 00 04 4e 12 00 bd 00 00 00 4e 4e 12 00 78 00 00 00 | .L.......L..I....N......NN..x... |
13380 | 0c 4f 12 00 41 00 00 00 85 4f 12 00 43 00 00 00 c7 4f 12 00 3d 00 00 00 0b 50 12 00 27 00 00 00 | .O..A....O..C....O..=....P..'... |
133a0 | 49 50 12 00 1a 00 00 00 71 50 12 00 d2 00 00 00 8c 50 12 00 5b 00 00 00 5f 51 12 00 ab 00 00 00 | IP......qP.......P..[..._Q...... |
133c0 | bb 51 12 00 5a 00 00 00 67 52 12 00 5a 00 00 00 c2 52 12 00 77 00 00 00 1d 53 12 00 7d 00 00 00 | .Q..Z...gR..Z....R..w....S..}... |
133e0 | 95 53 12 00 dd 00 00 00 13 54 12 00 3f 00 00 00 f1 54 12 00 40 00 00 00 31 55 12 00 55 00 00 00 | .S.......T..?....T..@...1U..U... |
13400 | 72 55 12 00 af 00 00 00 c8 55 12 00 5e 00 00 00 78 56 12 00 72 00 00 00 d7 56 12 00 3b 00 00 00 | rU.......U..^...xV..r....V..;... |
13420 | 4a 57 12 00 65 00 00 00 86 57 12 00 37 00 00 00 ec 57 12 00 25 00 00 00 24 58 12 00 51 00 00 00 | JW..e....W..7....W..%...$X..Q... |
13440 | 4a 58 12 00 55 00 00 00 9c 58 12 00 38 00 00 00 f2 58 12 00 13 00 00 00 2b 59 12 00 45 00 00 00 | JX..U....X..8....X......+Y..E... |
13460 | 3f 59 12 00 40 00 00 00 85 59 12 00 26 00 00 00 c6 59 12 00 24 00 00 00 ed 59 12 00 44 00 00 00 | ?Y..@....Y..&....Y..$....Y..D... |
13480 | 12 5a 12 00 4b 00 00 00 57 5a 12 00 4b 00 00 00 a3 5a 12 00 1f 00 00 00 ef 5a 12 00 96 00 00 00 | .Z..K...WZ..K....Z.......Z...... |
134a0 | 0f 5b 12 00 26 00 00 00 a6 5b 12 00 29 00 00 00 cd 5b 12 00 22 00 00 00 f7 5b 12 00 1f 00 00 00 | .[..&....[..)....[.."....[...... |
134c0 | 1a 5c 12 00 24 00 00 00 3a 5c 12 00 28 00 00 00 5f 5c 12 00 18 00 00 00 88 5c 12 00 1b 00 00 00 | .\..$...:\..(..._\.......\...... |
134e0 | a1 5c 12 00 26 00 00 00 bd 5c 12 00 29 00 00 00 e4 5c 12 00 57 00 00 00 0e 5d 12 00 54 00 00 00 | .\..&....\..)....\..W....]..T... |
13500 | 66 5d 12 00 52 00 00 00 bb 5d 12 00 51 00 00 00 0e 5e 12 00 40 00 00 00 60 5e 12 00 28 00 00 00 | f]..R....]..Q....^..@...`^..(... |
13520 | a1 5e 12 00 70 00 00 00 ca 5e 12 00 26 00 00 00 3b 5f 12 00 79 00 00 00 62 5f 12 00 56 00 00 00 | .^..p....^..&...;_..y...b_..V... |
13540 | dc 5f 12 00 0b 00 00 00 33 60 12 00 2c 00 00 00 3f 60 12 00 35 00 00 00 6c 60 12 00 3f 00 00 00 | ._......3`..,...?`..5...l`..?... |
13560 | a2 60 12 00 2d 00 00 00 e2 60 12 00 33 00 00 00 10 61 12 00 31 00 00 00 44 61 12 00 69 00 00 00 | .`..-....`..3....a..1...Da..i... |
13580 | 76 61 12 00 9c 00 00 00 e0 61 12 00 89 00 00 00 7d 62 12 00 56 00 00 00 07 63 12 00 4c 00 00 00 | va.......a......}b..V....c..L... |
135a0 | 5e 63 12 00 3c 00 00 00 ab 63 12 00 9e 00 00 00 e8 63 12 00 26 00 00 00 87 64 12 00 27 00 00 00 | ^c..<....c.......c..&....d..'... |
135c0 | ae 64 12 00 1f 00 00 00 d6 64 12 00 5c 00 00 00 f6 64 12 00 3f 00 00 00 53 65 12 00 36 00 00 00 | .d.......d..\....d..?...Se..6... |
135e0 | 93 65 12 00 38 00 00 00 ca 65 12 00 66 00 00 00 03 66 12 00 24 00 00 00 6a 66 12 00 27 00 00 00 | .e..8....e..f....f..$...jf..'... |
13600 | 8f 66 12 00 27 00 00 00 b7 66 12 00 1e 00 00 00 df 66 12 00 24 01 00 00 fe 66 12 00 a1 00 00 00 | .f..'....f.......f..$....f...... |
13620 | 23 68 12 00 3c 00 00 00 c5 68 12 00 6e 00 00 00 02 69 12 00 83 00 00 00 71 69 12 00 3e 00 00 00 | #h..<....h..n....i......qi..>... |
13640 | f5 69 12 00 55 00 00 00 34 6a 12 00 27 01 00 00 8a 6a 12 00 50 00 00 00 b2 6b 12 00 22 00 00 00 | .i..U...4j..'....j..P....k.."... |
13660 | 03 6c 12 00 5a 00 00 00 26 6c 12 00 2c 00 00 00 81 6c 12 00 47 00 00 00 ae 6c 12 00 7b 00 00 00 | .l..Z...&l..,....l..G....l..{... |
13680 | f6 6c 12 00 77 00 00 00 72 6d 12 00 65 00 00 00 ea 6d 12 00 65 00 00 00 50 6e 12 00 5a 00 00 00 | .l..w...rm..e....m..e...Pn..Z... |
136a0 | b6 6e 12 00 5a 00 00 00 11 6f 12 00 72 00 00 00 6c 6f 12 00 2e 00 00 00 df 6f 12 00 24 00 00 00 | .n..Z....o..r...lo.......o..$... |
136c0 | 0e 70 12 00 61 00 00 00 33 70 12 00 55 00 00 00 95 70 12 00 2b 00 00 00 eb 70 12 00 29 00 00 00 | .p..a...3p..U....p..+....p..)... |
136e0 | 17 71 12 00 27 00 00 00 41 71 12 00 28 00 00 00 69 71 12 00 29 00 00 00 92 71 12 00 27 00 00 00 | .q..'...Aq..(...iq..)....q..'... |
13700 | bc 71 12 00 28 00 00 00 e4 71 12 00 4c 00 00 00 0d 72 12 00 4c 00 00 00 5a 72 12 00 38 00 00 00 | .q..(....q..L....r..L...Zr..8... |
13720 | a7 72 12 00 54 00 00 00 e0 72 12 00 0b 00 00 00 35 73 12 00 0f 00 00 00 41 73 12 00 49 00 00 00 | .r..T....r......5s......As..I... |
13740 | 51 73 12 00 0b 00 00 00 9b 73 12 00 43 00 00 00 a7 73 12 00 43 00 00 00 eb 73 12 00 36 00 00 00 | Qs.......s..C....s..C....s..6... |
13760 | 2f 74 12 00 29 00 00 00 66 74 12 00 2e 00 00 00 90 74 12 00 22 00 00 00 bf 74 12 00 77 00 00 00 | /t..)...ft.......t.."....t..w... |
13780 | e2 74 12 00 28 00 00 00 5a 75 12 00 3e 00 00 00 83 75 12 00 28 00 00 00 c2 75 12 00 3e 00 00 00 | .t..(...Zu..>....u..(....u..>... |
137a0 | eb 75 12 00 29 00 00 00 2a 76 12 00 5d 00 00 00 54 76 12 00 c9 00 00 00 b2 76 12 00 3f 00 00 00 | .u..)...*v..]...Tv.......v..?... |
137c0 | 7c 77 12 00 dd 00 00 00 bc 77 12 00 4c 00 00 00 9a 78 12 00 7f 00 00 00 e7 78 12 00 1d 00 00 00 | |w.......w..L....x.......x...... |
137e0 | 67 79 12 00 73 00 00 00 85 79 12 00 31 00 00 00 f9 79 12 00 d7 00 00 00 2b 7a 12 00 1e 00 00 00 | gy..s....y..1....y......+z...... |
13800 | 03 7b 12 00 24 00 00 00 22 7b 12 00 5c 00 00 00 47 7b 12 00 21 00 00 00 a4 7b 12 00 52 00 00 00 | .{..$..."{..\...G{..!....{..R... |
13820 | c6 7b 12 00 5c 00 00 00 19 7c 12 00 b7 00 00 00 76 7c 12 00 44 01 00 00 2e 7d 12 00 a5 01 00 00 | .{..\....|......v|..D....}...... |
13840 | 73 7e 12 00 27 00 00 00 19 80 12 00 88 01 00 00 41 80 12 00 30 00 00 00 ca 81 12 00 3e 00 00 00 | s~..'...........A...0.......>... |
13860 | fb 81 12 00 33 01 00 00 3a 82 12 00 41 00 00 00 6e 83 12 00 d1 00 00 00 b0 83 12 00 c2 01 00 00 | ....3...:...A...n............... |
13880 | 82 84 12 00 49 00 00 00 45 86 12 00 e7 00 00 00 8f 86 12 00 65 01 00 00 77 87 12 00 1f 00 00 00 | ....I...E...........e...w....... |
138a0 | dd 88 12 00 30 00 00 00 fd 88 12 00 33 00 00 00 2e 89 12 00 11 00 00 00 62 89 12 00 05 00 00 00 | ....0.......3...........b....... |
138c0 | 74 89 12 00 03 00 00 00 7a 89 12 00 0e 00 00 00 7e 89 12 00 1b 00 00 00 8d 89 12 00 1d 00 00 00 | t.......z.......~............... |
138e0 | a9 89 12 00 1f 00 00 00 c7 89 12 00 04 00 00 00 e7 89 12 00 0d 00 00 00 ec 89 12 00 32 00 00 00 | ............................2... |
13900 | fa 89 12 00 29 00 00 00 2d 8a 12 00 04 00 00 00 57 8a 12 00 07 00 00 00 5c 8a 12 00 09 00 00 00 | ....)...-.......W.......\....... |
13920 | 64 8a 12 00 0d 00 00 00 6e 8a 12 00 17 00 00 00 7c 8a 12 00 0f 00 00 00 94 8a 12 00 0d 00 00 00 | d.......n.......|............... |
13940 | a4 8a 12 00 06 00 00 00 b2 8a 12 00 19 00 00 00 b9 8a 12 00 14 00 00 00 d3 8a 12 00 05 00 00 00 | ................................ |
13960 | e8 8a 12 00 15 00 00 00 ee 8a 12 00 04 00 00 00 04 8b 12 00 04 00 00 00 09 8b 12 00 06 00 00 00 | ................................ |
13980 | 0e 8b 12 00 51 00 00 00 15 8b 12 00 4a 01 00 00 67 8b 12 00 50 01 00 00 b2 8c 12 00 4d 00 00 00 | ....Q.......J...g...P.......M... |
139a0 | 03 8e 12 00 05 00 00 00 51 8e 12 00 12 00 00 00 57 8e 12 00 15 00 00 00 6a 8e 12 00 22 00 00 00 | ........Q.......W.......j..."... |
139c0 | 80 8e 12 00 10 00 00 00 a3 8e 12 00 12 00 00 00 b4 8e 12 00 0e 00 00 00 c7 8e 12 00 10 00 00 00 | ................................ |
139e0 | d6 8e 12 00 13 00 00 00 e7 8e 12 00 16 00 00 00 fb 8e 12 00 06 00 00 00 12 8f 12 00 09 00 00 00 | ................................ |
13a00 | 19 8f 12 00 1d 00 00 00 23 8f 12 00 05 00 00 00 41 8f 12 00 0b 00 00 00 47 8f 12 00 13 00 00 00 | ........#.......A.......G....... |
13a20 | 53 8f 12 00 0d 00 00 00 67 8f 12 00 05 00 00 00 75 8f 12 00 68 00 00 00 7b 8f 12 00 67 00 00 00 | S.......g.......u...h...{...g... |
13a40 | e4 8f 12 00 79 00 00 00 4c 90 12 00 66 00 00 00 c6 90 12 00 03 00 00 00 2d 91 12 00 08 00 00 00 | ....y...L...f...........-....... |
13a60 | 31 91 12 00 31 00 00 00 3a 91 12 00 07 00 00 00 6c 91 12 00 08 00 00 00 74 91 12 00 38 00 00 00 | 1...1...:.......l.......t...8... |
13a80 | 7d 91 12 00 10 00 00 00 b6 91 12 00 0b 00 00 00 c7 91 12 00 03 00 00 00 d3 91 12 00 1d 00 00 00 | }............................... |
13aa0 | d7 91 12 00 06 00 00 00 f5 91 12 00 1d 00 00 00 fc 91 12 00 09 00 00 00 1a 92 12 00 26 00 00 00 | ............................&... |
13ac0 | 24 92 12 00 6d 00 00 00 4b 92 12 00 46 00 00 00 b9 92 12 00 32 00 00 00 00 93 12 00 46 00 00 00 | $...m...K...F.......2.......F... |
13ae0 | 33 93 12 00 04 00 00 00 7a 93 12 00 08 00 00 00 7f 93 12 00 07 00 00 00 88 93 12 00 46 00 00 00 | 3.......z...................F... |
13b00 | 90 93 12 00 0d 00 00 00 d7 93 12 00 05 00 00 00 e5 93 12 00 1c 00 00 00 eb 93 12 00 73 00 00 00 | ............................s... |
13b20 | 08 94 12 00 04 00 00 00 7c 94 12 00 06 00 00 00 81 94 12 00 04 00 00 00 88 94 12 00 05 00 00 00 | ........|....................... |
13b40 | 8d 94 12 00 10 00 00 00 93 94 12 00 3c 00 00 00 a4 94 12 00 32 00 00 00 e1 94 12 00 1c 00 00 00 | ............<.......2........... |
13b60 | 14 95 12 00 6d 00 00 00 31 95 12 00 08 00 00 00 9f 95 12 00 14 00 00 00 a8 95 12 00 14 00 00 00 | ....m...1....................... |
13b80 | bd 95 12 00 14 00 00 00 d2 95 12 00 14 00 00 00 e7 95 12 00 14 00 00 00 fc 95 12 00 14 00 00 00 | ................................ |
13ba0 | 11 96 12 00 14 00 00 00 26 96 12 00 06 00 00 00 3b 96 12 00 06 00 00 00 42 96 12 00 06 00 00 00 | ........&.......;.......B....... |
13bc0 | 49 96 12 00 06 00 00 00 50 96 12 00 06 00 00 00 57 96 12 00 06 00 00 00 5e 96 12 00 06 00 00 00 | I.......P.......W.......^....... |
13be0 | 65 96 12 00 06 00 00 00 6c 96 12 00 1f 00 00 00 73 96 12 00 08 00 00 00 93 96 12 00 08 00 00 00 | e.......l.......s............... |
13c00 | 9c 96 12 00 a4 00 00 00 a5 96 12 00 03 00 00 00 4a 97 12 00 0d 00 00 00 4e 97 12 00 74 00 00 00 | ................J.......N...t... |
13c20 | 5c 97 12 00 9a 00 00 00 d1 97 12 00 4c 00 00 00 6c 98 12 00 04 00 00 00 b9 98 12 00 0c 00 00 00 | \...........L...l............... |
13c40 | be 98 12 00 3f 00 00 00 cb 98 12 00 29 00 00 00 0b 99 12 00 37 00 00 00 35 99 12 00 2c 00 00 00 | ....?.......).......7...5...,... |
13c60 | 6d 99 12 00 0e 00 00 00 9a 99 12 00 33 00 00 00 a9 99 12 00 33 00 00 00 dd 99 12 00 0b 00 00 00 | m...........3.......3........... |
13c80 | 11 9a 12 00 14 00 00 00 1d 9a 12 00 71 00 00 00 32 9a 12 00 46 00 00 00 a4 9a 12 00 04 00 00 00 | ............q...2...F........... |
13ca0 | eb 9a 12 00 0b 00 00 00 f0 9a 12 00 12 00 00 00 fc 9a 12 00 0f 00 00 00 0f 9b 12 00 08 00 00 00 | ................................ |
13cc0 | 1f 9b 12 00 06 00 00 00 28 9b 12 00 03 00 00 00 2f 9b 12 00 0a 00 00 00 33 9b 12 00 0b 00 00 00 | ........(......./.......3....... |
13ce0 | 3e 9b 12 00 40 00 00 00 4a 9b 12 00 07 00 00 00 8b 9b 12 00 06 00 00 00 93 9b 12 00 05 00 00 00 | >...@...J....................... |
13d00 | 9a 9b 12 00 9b 00 00 00 a0 9b 12 00 11 00 00 00 3c 9c 12 00 0d 00 00 00 4e 9c 12 00 13 00 00 00 | ................<.......N....... |
13d20 | 5c 9c 12 00 15 00 00 00 70 9c 12 00 18 00 00 00 86 9c 12 00 1b 00 00 00 9f 9c 12 00 0a 00 00 00 | \.......p....................... |
13d40 | bb 9c 12 00 12 00 00 00 c6 9c 12 00 1c 00 00 00 d9 9c 12 00 0f 00 00 00 f6 9c 12 00 05 00 00 00 | ................................ |
13d60 | 06 9d 12 00 0e 00 00 00 0c 9d 12 00 0e 00 00 00 1b 9d 12 00 0d 00 00 00 2a 9d 12 00 2a 00 00 00 | ........................*...*... |
13d80 | 38 9d 12 00 15 00 00 00 63 9d 12 00 31 00 00 00 79 9d 12 00 39 00 00 00 ab 9d 12 00 34 00 00 00 | 8.......c...1...y...9.......4... |
13da0 | e5 9d 12 00 04 00 00 00 1a 9e 12 00 0b 00 00 00 1f 9e 12 00 09 00 00 00 2b 9e 12 00 07 00 00 00 | ........................+....... |
13dc0 | 35 9e 12 00 05 00 00 00 3d 9e 12 00 72 00 00 00 43 9e 12 00 08 00 00 00 b6 9e 12 00 0e 00 00 00 | 5.......=...r...C............... |
13de0 | bf 9e 12 00 11 00 00 00 ce 9e 12 00 38 00 00 00 e0 9e 12 00 0d 00 00 00 19 9f 12 00 0d 00 00 00 | ............8................... |
13e00 | 27 9f 12 00 06 00 00 00 35 9f 12 00 3a 00 00 00 3c 9f 12 00 0b 00 00 00 77 9f 12 00 40 00 00 00 | '.......5...:...<.......w...@... |
13e20 | 83 9f 12 00 0e 00 00 00 c4 9f 12 00 0f 00 00 00 d3 9f 12 00 07 00 00 00 e3 9f 12 00 0e 00 00 00 | ................................ |
13e40 | eb 9f 12 00 0c 00 00 00 fa 9f 12 00 ad 00 00 00 07 a0 12 00 0b 00 00 00 b5 a0 12 00 06 00 00 00 | ................................ |
13e60 | c1 a0 12 00 04 00 00 00 c8 a0 12 00 d7 00 00 00 cd a0 12 00 10 00 00 00 a5 a1 12 00 ed 01 00 00 | ................................ |
13e80 | b6 a1 12 00 0b 00 00 00 a4 a3 12 00 0b 00 00 00 b0 a3 12 00 0c 00 00 00 bc a3 12 00 06 00 00 00 | ................................ |
13ea0 | c9 a3 12 00 0e 00 00 00 d0 a3 12 00 58 00 00 00 df a3 12 00 04 00 00 00 38 a4 12 00 04 00 00 00 | ............X...........8....... |
13ec0 | 3d a4 12 00 05 00 00 00 42 a4 12 00 0e 00 00 00 48 a4 12 00 47 00 00 00 57 a4 12 00 05 00 00 00 | =.......B.......H...G...W....... |
13ee0 | 9f a4 12 00 07 00 00 00 a5 a4 12 00 68 00 00 00 ad a4 12 00 19 00 00 00 16 a5 12 00 14 00 00 00 | ............h................... |
13f00 | 30 a5 12 00 2c 00 00 00 45 a5 12 00 0b 00 00 00 72 a5 12 00 09 00 00 00 7e a5 12 00 08 00 00 00 | 0...,...E.......r.......~....... |
13f20 | 88 a5 12 00 53 00 00 00 91 a5 12 00 08 00 00 00 e5 a5 12 00 22 00 00 00 ee a5 12 00 04 00 00 00 | ....S..............."........... |
13f40 | 11 a6 12 00 05 00 00 00 16 a6 12 00 01 00 00 00 e6 05 00 00 1c 04 00 00 b1 07 00 00 a8 0f 00 00 | ................................ |
13f60 | 4c 02 00 00 7d 13 00 00 00 00 00 00 b3 12 00 00 39 01 00 00 75 03 00 00 64 0d 00 00 09 00 00 00 | L...}...........9...u...d....... |
13f80 | b7 0c 00 00 90 05 00 00 9d 0e 00 00 53 0c 00 00 ae 12 00 00 df 0b 00 00 b0 0e 00 00 00 00 00 00 | ............S................... |
13fa0 | 6c 13 00 00 34 06 00 00 00 00 00 00 2b 02 00 00 9e 08 00 00 39 13 00 00 90 04 00 00 f7 06 00 00 | l...4.......+.......9........... |
13fc0 | f4 11 00 00 ef 12 00 00 1e 0e 00 00 32 0d 00 00 94 13 00 00 00 00 00 00 f5 02 00 00 11 0b 00 00 | ............2................... |
13fe0 | 2a 08 00 00 18 03 00 00 a9 0c 00 00 54 0b 00 00 5b 0b 00 00 db 06 00 00 00 00 00 00 cb 0d 00 00 | *...........T...[............... |
14000 | 6e 0b 00 00 05 00 00 00 81 08 00 00 24 00 00 00 eb 00 00 00 09 01 00 00 17 01 00 00 12 01 00 00 | n...........$................... |
14020 | 25 01 00 00 2b 01 00 00 33 01 00 00 35 01 00 00 37 01 00 00 8d 01 00 00 c4 07 00 00 48 05 00 00 | %...+...3...5...7...........H... |
14040 | 76 09 00 00 00 00 00 00 48 0a 00 00 a5 0c 00 00 00 00 00 00 62 00 00 00 f5 05 00 00 00 00 00 00 | v.......H...........b........... |
14060 | 93 10 00 00 00 00 00 00 6d 05 00 00 a2 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fa 01 00 00 | ........m....................... |
14080 | ef 0c 00 00 b7 08 00 00 4f 10 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 42 00 00 00 d0 01 00 00 | ........O...............B....... |
140a0 | 56 10 00 00 8d 04 00 00 69 0b 00 00 2a 09 00 00 6d 10 00 00 5a 0d 00 00 52 04 00 00 d9 04 00 00 | V.......i...*...m...Z...R....... |
140c0 | 76 07 00 00 59 06 00 00 f8 11 00 00 c0 08 00 00 dd 00 00 00 cd 0e 00 00 2b 10 00 00 55 05 00 00 | v...Y...................+...U... |
140e0 | 4d 09 00 00 22 08 00 00 e4 04 00 00 6c 07 00 00 1d 01 00 00 00 00 00 00 00 00 00 00 14 0d 00 00 | M...".......l................... |
14100 | 25 03 00 00 4b 06 00 00 af 0c 00 00 0a 0f 00 00 00 00 00 00 f3 06 00 00 00 00 00 00 62 0d 00 00 | %...K.......................b... |
14120 | 0a 00 00 00 70 0d 00 00 cd 05 00 00 ba 05 00 00 00 00 00 00 59 09 00 00 fd 02 00 00 5d 0b 00 00 | ....p...............Y.......]... |
14140 | 5f 10 00 00 55 03 00 00 51 00 00 00 68 10 00 00 00 00 00 00 e6 0c 00 00 8e 0c 00 00 e4 03 00 00 | _...U...Q...h................... |
14160 | 36 0e 00 00 00 00 00 00 00 00 00 00 7a 12 00 00 4b 08 00 00 b2 06 00 00 7b 13 00 00 0f 04 00 00 | 6...........z...K.......{....... |
14180 | e0 12 00 00 00 00 00 00 2b 05 00 00 00 00 00 00 46 04 00 00 00 00 00 00 32 0f 00 00 00 00 00 00 | ........+.......F.......2....... |
141a0 | 00 00 00 00 63 10 00 00 83 0d 00 00 5b 10 00 00 00 00 00 00 df 08 00 00 00 00 00 00 7b 00 00 00 | ....c.......[...............{... |
141c0 | 27 0f 00 00 3d 0a 00 00 60 01 00 00 c9 08 00 00 00 00 00 00 8f 0a 00 00 c7 08 00 00 37 08 00 00 | '...=...`...................7... |
141e0 | 4b 07 00 00 f9 07 00 00 78 0a 00 00 f5 04 00 00 00 00 00 00 5f 09 00 00 0e 13 00 00 00 00 00 00 | K.......x..........._........... |
14200 | d3 01 00 00 00 00 00 00 f3 0e 00 00 00 00 00 00 c2 01 00 00 00 00 00 00 1d 04 00 00 00 00 00 00 | ................................ |
14220 | ac 0d 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7c 0e 00 00 f9 0f 00 00 00 00 00 00 | ....................|........... |
14240 | 40 0e 00 00 00 00 00 00 d2 00 00 00 7f 04 00 00 c5 0b 00 00 7e 12 00 00 88 04 00 00 74 0d 00 00 | @...................~.......t... |
14260 | 00 00 00 00 00 00 00 00 ca 03 00 00 76 0a 00 00 fe 10 00 00 8f 0c 00 00 aa 05 00 00 5e 10 00 00 | ............v...............^... |
14280 | 77 06 00 00 cc 0c 00 00 0e 08 00 00 00 00 00 00 00 00 00 00 56 11 00 00 6c 0a 00 00 71 06 00 00 | w...................V...l...q... |
142a0 | fa 10 00 00 70 07 00 00 5c 09 00 00 41 0e 00 00 e0 0a 00 00 c1 0c 00 00 a8 00 00 00 8c 04 00 00 | ....p...\...A................... |
142c0 | 00 00 00 00 00 00 00 00 e7 12 00 00 65 01 00 00 b8 0a 00 00 36 10 00 00 7c 00 00 00 2d 05 00 00 | ............e.......6...|...-... |
142e0 | c1 09 00 00 00 00 00 00 b6 07 00 00 66 0e 00 00 6b 06 00 00 32 04 00 00 9e 0b 00 00 e1 07 00 00 | ............f...k...2........... |
14300 | 90 10 00 00 f2 06 00 00 b2 00 00 00 f2 05 00 00 b1 0d 00 00 a8 0b 00 00 72 03 00 00 07 09 00 00 | ........................r....... |
14320 | c1 0d 00 00 00 00 00 00 65 03 00 00 65 0e 00 00 bc 10 00 00 00 00 00 00 a0 0f 00 00 6b 08 00 00 | ........e...e...............k... |
14340 | 91 05 00 00 f0 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 05 00 00 fc 05 00 00 e0 0d 00 00 | ................................ |
14360 | a9 02 00 00 00 00 00 00 d4 11 00 00 f9 0d 00 00 49 09 00 00 76 0c 00 00 00 00 00 00 6f 03 00 00 | ................I...v.......o... |
14380 | 0f 0d 00 00 58 0a 00 00 3f 09 00 00 10 0d 00 00 00 00 00 00 6f 06 00 00 00 00 00 00 9c 08 00 00 | ....X...?...........o........... |
143a0 | 00 00 00 00 bb 09 00 00 9d 0a 00 00 43 07 00 00 bf 03 00 00 a9 03 00 00 1e 13 00 00 00 00 00 00 | ............C................... |
143c0 | 8c 05 00 00 00 00 00 00 cc 06 00 00 8b 08 00 00 5c 0a 00 00 98 08 00 00 9a 13 00 00 f1 0c 00 00 | ................\............... |
143e0 | c8 03 00 00 00 00 00 00 d6 04 00 00 3e 0e 00 00 79 0c 00 00 6c 10 00 00 4f 12 00 00 00 00 00 00 | ............>...y...l...O....... |
14400 | 9c 07 00 00 a7 09 00 00 6d 0c 00 00 a8 0c 00 00 e4 12 00 00 fd 09 00 00 e5 0a 00 00 c5 06 00 00 | ........m....................... |
14420 | d7 0e 00 00 00 00 00 00 50 03 00 00 af 00 00 00 00 00 00 00 00 00 00 00 1f 11 00 00 f1 0a 00 00 | ........P....................... |
14440 | 00 00 00 00 00 00 00 00 ab 0e 00 00 00 00 00 00 de 0a 00 00 7b 0e 00 00 00 00 00 00 38 01 00 00 | ....................{.......8... |
14460 | 00 00 00 00 76 11 00 00 94 12 00 00 00 00 00 00 00 00 00 00 0c 0f 00 00 64 04 00 00 36 0f 00 00 | ....v...................d...6... |
14480 | 0f 0e 00 00 f1 11 00 00 6b 0b 00 00 00 00 00 00 00 00 00 00 47 03 00 00 ee 0d 00 00 00 00 00 00 | ........k...........G........... |
144a0 | 00 00 00 00 6f 01 00 00 f6 10 00 00 27 01 00 00 00 00 00 00 82 01 00 00 00 00 00 00 00 00 00 00 | ....o.......'................... |
144c0 | 63 0b 00 00 f4 10 00 00 7e 0c 00 00 47 12 00 00 96 0b 00 00 00 00 00 00 00 00 00 00 c8 13 00 00 | c.......~...G................... |
144e0 | 00 00 00 00 91 03 00 00 bd 11 00 00 00 00 00 00 a1 12 00 00 38 02 00 00 b8 13 00 00 22 05 00 00 | ....................8......."... |
14500 | c8 0e 00 00 85 04 00 00 00 00 00 00 a6 06 00 00 d4 01 00 00 2b 0e 00 00 34 08 00 00 5e 0d 00 00 | ....................+...4...^... |
14520 | 00 00 00 00 00 00 00 00 00 00 00 00 b8 0e 00 00 a1 09 00 00 55 0f 00 00 6d 13 00 00 28 05 00 00 | ....................U...m...(... |
14540 | 75 0c 00 00 6f 12 00 00 00 00 00 00 7d 00 00 00 50 08 00 00 4a 0d 00 00 0d 12 00 00 d7 0d 00 00 | u...o.......}...P...J........... |
14560 | 2b 13 00 00 96 07 00 00 f8 09 00 00 e9 0c 00 00 38 0d 00 00 d8 0e 00 00 72 0c 00 00 00 00 00 00 | +...............8.......r....... |
14580 | ae 09 00 00 51 10 00 00 00 00 00 00 5c 08 00 00 48 08 00 00 7b 01 00 00 00 00 00 00 00 00 00 00 | ....Q.......\...H...{........... |
145a0 | d7 0f 00 00 b6 0d 00 00 00 00 00 00 5a 02 00 00 fb 0a 00 00 ed 0e 00 00 43 10 00 00 28 0f 00 00 | ............Z...........C...(... |
145c0 | 37 0b 00 00 4f 00 00 00 eb 08 00 00 ff 0e 00 00 9b 13 00 00 fd 06 00 00 30 05 00 00 46 02 00 00 | 7...O...................0...F... |
145e0 | 5c 04 00 00 00 00 00 00 00 00 00 00 0d 08 00 00 8d 0c 00 00 ec 0f 00 00 96 11 00 00 c0 0d 00 00 | \............................... |
14600 | 02 0e 00 00 a6 11 00 00 b8 12 00 00 80 0e 00 00 cc 09 00 00 24 13 00 00 b5 00 00 00 91 0d 00 00 | ....................$........... |
14620 | ca 0b 00 00 e4 13 00 00 d7 0c 00 00 00 00 00 00 d3 09 00 00 75 09 00 00 36 11 00 00 eb 10 00 00 | ....................u...6....... |
14640 | 2c 07 00 00 91 0f 00 00 9c 0f 00 00 00 00 00 00 e1 0f 00 00 00 00 00 00 70 11 00 00 b9 00 00 00 | ,.......................p....... |
14660 | 0e 0c 00 00 d4 0d 00 00 40 10 00 00 1e 11 00 00 00 00 00 00 00 00 00 00 d1 0b 00 00 00 00 00 00 | ........@....................... |
14680 | 94 02 00 00 f8 06 00 00 01 09 00 00 07 01 00 00 6e 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................n............... |
146a0 | 00 00 00 00 2a 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe 0d 00 00 ac 11 00 00 | ....*........................... |
146c0 | 00 00 00 00 00 00 00 00 00 00 00 00 5c 05 00 00 20 06 00 00 0a 12 00 00 00 00 00 00 74 0a 00 00 | ............\...............t... |
146e0 | 00 00 00 00 32 0b 00 00 d7 11 00 00 83 02 00 00 00 00 00 00 42 13 00 00 7b 0f 00 00 5b 02 00 00 | ....2...............B...{...[... |
14700 | d2 06 00 00 50 0d 00 00 00 00 00 00 9e 09 00 00 65 04 00 00 00 00 00 00 f3 0c 00 00 00 00 00 00 | ....P...........e............... |
14720 | 59 01 00 00 5b 06 00 00 5c 06 00 00 00 00 00 00 c6 05 00 00 e2 03 00 00 9a 0f 00 00 f9 06 00 00 | Y...[...\....................... |
14740 | 00 00 00 00 ec 03 00 00 f7 03 00 00 bc 03 00 00 5c 02 00 00 97 02 00 00 00 00 00 00 00 00 00 00 | ................\............... |
14760 | 40 08 00 00 00 00 00 00 eb 0d 00 00 00 00 00 00 0b 0a 00 00 d2 04 00 00 6a 0e 00 00 85 07 00 00 | @.......................j....... |
14780 | a9 04 00 00 ed 09 00 00 00 00 00 00 8c 0e 00 00 00 00 00 00 00 00 00 00 7c 0b 00 00 98 10 00 00 | ........................|....... |
147a0 | c6 0b 00 00 04 03 00 00 c2 0d 00 00 57 06 00 00 a4 05 00 00 cb 0f 00 00 1f 12 00 00 72 10 00 00 | ............W...............r... |
147c0 | be 11 00 00 9d 09 00 00 b8 0b 00 00 00 00 00 00 98 09 00 00 49 02 00 00 28 06 00 00 02 00 00 00 | ....................I...(....... |
147e0 | b6 03 00 00 e0 0c 00 00 95 00 00 00 00 00 00 00 e3 02 00 00 b0 08 00 00 42 07 00 00 da 0e 00 00 | ........................B....... |
14800 | 00 00 00 00 7d 0a 00 00 1f 0f 00 00 17 04 00 00 1e 0f 00 00 21 11 00 00 f2 10 00 00 8b 02 00 00 | ....}...............!........... |
14820 | 85 0d 00 00 fa 0d 00 00 ed 0c 00 00 60 07 00 00 00 00 00 00 39 02 00 00 e1 06 00 00 00 00 00 00 | ............`.......9........... |
14840 | 00 00 00 00 00 00 00 00 21 01 00 00 79 06 00 00 70 01 00 00 05 02 00 00 00 00 00 00 c9 0d 00 00 | ........!...y...p............... |
14860 | db 00 00 00 e0 08 00 00 00 00 00 00 9d 04 00 00 24 02 00 00 b0 0c 00 00 71 11 00 00 c6 08 00 00 | ................$.......q....... |
14880 | 81 11 00 00 e3 08 00 00 01 13 00 00 00 00 00 00 b5 08 00 00 02 06 00 00 e9 11 00 00 17 0c 00 00 | ................................ |
148a0 | 6e 02 00 00 5c 13 00 00 a4 08 00 00 eb 0f 00 00 da 10 00 00 00 00 00 00 08 0e 00 00 82 03 00 00 | n...\........................... |
148c0 | 62 0c 00 00 00 00 00 00 f0 0d 00 00 89 0e 00 00 c9 02 00 00 62 0e 00 00 76 01 00 00 00 00 00 00 | b...................b...v....... |
148e0 | 00 00 00 00 d4 09 00 00 00 00 00 00 00 00 00 00 d2 03 00 00 c7 0a 00 00 00 00 00 00 00 00 00 00 | ................................ |
14900 | b2 11 00 00 00 00 00 00 b8 08 00 00 eb 11 00 00 13 0a 00 00 d3 04 00 00 00 00 00 00 80 02 00 00 | ................................ |
14920 | 00 00 00 00 2d 0d 00 00 25 0c 00 00 a1 0f 00 00 0e 0b 00 00 a0 06 00 00 00 00 00 00 05 06 00 00 | ....-...%....................... |
14940 | 03 10 00 00 00 00 00 00 00 00 00 00 51 0a 00 00 00 00 00 00 9b 07 00 00 35 07 00 00 0b 01 00 00 | ............Q...........5....... |
14960 | 27 03 00 00 97 0e 00 00 54 0a 00 00 00 00 00 00 00 00 00 00 34 10 00 00 80 06 00 00 00 00 00 00 | '.......T...........4........... |
14980 | d2 0b 00 00 55 06 00 00 09 05 00 00 00 00 00 00 00 00 00 00 c5 09 00 00 70 13 00 00 00 00 00 00 | ....U...................p....... |
149a0 | ff 0d 00 00 29 0c 00 00 14 02 00 00 00 00 00 00 8f 0b 00 00 00 00 00 00 cb 0a 00 00 00 00 00 00 | ....)........................... |
149c0 | 73 0b 00 00 00 00 00 00 a5 00 00 00 41 08 00 00 01 07 00 00 00 00 00 00 5b 04 00 00 2c 0d 00 00 | s...........A...........[...,... |
149e0 | 4b 0c 00 00 60 09 00 00 2e 07 00 00 43 08 00 00 6c 11 00 00 52 10 00 00 77 0d 00 00 00 00 00 00 | K...`.......C...l...R...w....... |
14a00 | 6f 02 00 00 00 00 00 00 00 00 00 00 73 13 00 00 65 10 00 00 85 10 00 00 1d 02 00 00 d4 02 00 00 | o...........s...e............... |
14a20 | c4 0a 00 00 00 00 00 00 74 09 00 00 f8 01 00 00 73 00 00 00 b2 12 00 00 df 05 00 00 10 0f 00 00 | ........t.......s............... |
14a40 | 55 02 00 00 6d 0d 00 00 11 03 00 00 12 07 00 00 f8 07 00 00 78 10 00 00 23 03 00 00 06 0e 00 00 | U...m...............x...#....... |
14a60 | ff 03 00 00 64 05 00 00 00 00 00 00 16 09 00 00 e6 06 00 00 00 00 00 00 b3 0d 00 00 36 08 00 00 | ....d.......................6... |
14a80 | 00 00 00 00 f3 07 00 00 00 00 00 00 00 00 00 00 f9 02 00 00 86 12 00 00 cd 00 00 00 70 08 00 00 | ............................p... |
14aa0 | 19 04 00 00 83 12 00 00 00 00 00 00 d8 09 00 00 00 00 00 00 1f 00 00 00 6f 08 00 00 00 00 00 00 | ........................o....... |
14ac0 | 00 00 00 00 84 0e 00 00 3e 05 00 00 12 0a 00 00 83 03 00 00 89 0a 00 00 7a 0f 00 00 60 02 00 00 | ........>...............z...`... |
14ae0 | 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2f 03 00 00 d4 04 00 00 76 03 00 00 5b 0c 00 00 | D.............../.......v...[... |
14b00 | a0 03 00 00 22 07 00 00 39 04 00 00 58 11 00 00 00 00 00 00 a9 07 00 00 aa 0c 00 00 ef 08 00 00 | ...."...9...X................... |
14b20 | c7 05 00 00 99 06 00 00 0c 07 00 00 00 00 00 00 17 09 00 00 e0 0f 00 00 10 13 00 00 15 04 00 00 | ................................ |
14b40 | b5 09 00 00 bd 08 00 00 00 00 00 00 6d 0f 00 00 e0 13 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ............m................... |
14b60 | 00 00 00 00 00 00 00 00 00 00 00 00 c6 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 03 00 00 | ............................S... |
14b80 | e0 05 00 00 96 0f 00 00 a9 00 00 00 93 03 00 00 00 00 00 00 d3 0a 00 00 ca 08 00 00 9c 03 00 00 | ................................ |
14ba0 | 00 00 00 00 84 00 00 00 58 10 00 00 00 00 00 00 02 04 00 00 ef 10 00 00 00 00 00 00 22 11 00 00 | ........X..................."... |
14bc0 | 00 00 00 00 00 00 00 00 c1 0e 00 00 1c 0b 00 00 7c 13 00 00 8a 0e 00 00 75 11 00 00 00 00 00 00 | ................|.......u....... |
14be0 | 37 09 00 00 48 07 00 00 bd 07 00 00 14 10 00 00 00 00 00 00 1d 0f 00 00 00 00 00 00 00 00 00 00 | 7...H........................... |
14c00 | 00 00 00 00 be 13 00 00 b1 02 00 00 7d 02 00 00 8f 09 00 00 e6 0d 00 00 00 00 00 00 8d 00 00 00 | ............}................... |
14c20 | b2 05 00 00 ff 11 00 00 ac 0e 00 00 00 00 00 00 cd 0b 00 00 00 00 00 00 b3 03 00 00 80 0b 00 00 | ................................ |
14c40 | 16 00 00 00 89 05 00 00 09 04 00 00 f0 00 00 00 fb 00 00 00 fd 00 00 00 ff 00 00 00 00 01 00 00 | ................................ |
14c60 | 01 01 00 00 02 01 00 00 03 01 00 00 05 01 00 00 06 01 00 00 00 00 00 00 2c 11 00 00 00 00 00 00 | ........................,....... |
14c80 | 1d 06 00 00 1a 03 00 00 4c 05 00 00 0c 01 00 00 0d 01 00 00 0e 01 00 00 0f 01 00 00 44 01 00 00 | ........L...................D... |
14ca0 | af 12 00 00 13 01 00 00 f6 06 00 00 14 01 00 00 00 00 00 00 35 0a 00 00 e2 0a 00 00 00 00 00 00 | ....................5........... |
14cc0 | 00 00 00 00 9d 0b 00 00 00 00 00 00 19 01 00 00 0d 0d 00 00 64 08 00 00 74 05 00 00 1a 01 00 00 | ....................d...t....... |
14ce0 | 46 0d 00 00 1b 01 00 00 af 0f 00 00 1c 01 00 00 53 04 00 00 00 00 00 00 e6 07 00 00 00 00 00 00 | F...............S............... |
14d00 | c9 07 00 00 00 00 00 00 ca 0c 00 00 00 00 00 00 33 12 00 00 22 01 00 00 00 00 00 00 23 01 00 00 | ................3...".......#... |
14d20 | 66 01 00 00 d5 00 00 00 41 00 00 00 a9 06 00 00 53 0e 00 00 9c 0a 00 00 69 0e 00 00 28 0c 00 00 | f.......A.......S.......i...(... |
14d40 | 00 00 00 00 b4 09 00 00 00 00 00 00 74 06 00 00 a5 0e 00 00 c4 09 00 00 00 00 00 00 2a 01 00 00 | ............t...............*... |
14d60 | 8a 07 00 00 ac 08 00 00 9b 12 00 00 00 00 00 00 d5 01 00 00 d7 10 00 00 0f 07 00 00 c0 12 00 00 | ................................ |
14d80 | 00 00 00 00 1b 03 00 00 62 08 00 00 9c 0e 00 00 f9 12 00 00 16 01 00 00 7a 11 00 00 1b 11 00 00 | ........b...............z....... |
14da0 | 26 0f 00 00 2d 01 00 00 2f 01 00 00 52 08 00 00 30 01 00 00 00 00 00 00 c8 08 00 00 1b 0a 00 00 | &...-.../...R...0............... |
14dc0 | 6e 08 00 00 90 01 00 00 00 00 00 00 34 01 00 00 00 00 00 00 00 00 00 00 ce 03 00 00 00 00 00 00 | n...........4................... |
14de0 | 89 0f 00 00 78 06 00 00 47 0a 00 00 81 04 00 00 79 0e 00 00 7d 11 00 00 31 0d 00 00 f7 0a 00 00 | ....x...G.......y...}...1....... |
14e00 | 9b 03 00 00 79 02 00 00 78 03 00 00 25 05 00 00 fe 03 00 00 69 11 00 00 38 04 00 00 e7 08 00 00 | ....y...x...%.......i...8....... |
14e20 | 00 00 00 00 00 00 00 00 85 11 00 00 3c 0f 00 00 74 00 00 00 4e 03 00 00 bb 0f 00 00 60 11 00 00 | ............<...t...N.......`... |
14e40 | 00 00 00 00 a6 07 00 00 aa 0e 00 00 62 04 00 00 3b 06 00 00 cf 02 00 00 00 00 00 00 19 12 00 00 | ............b...;............... |
14e60 | 00 00 00 00 e5 0d 00 00 ec 12 00 00 93 04 00 00 33 0b 00 00 51 13 00 00 62 13 00 00 a8 06 00 00 | ................3...Q...b....... |
14e80 | 00 00 00 00 71 08 00 00 77 03 00 00 59 0c 00 00 ca 01 00 00 00 00 00 00 03 0f 00 00 a4 0d 00 00 | ....q...w...Y................... |
14ea0 | b2 04 00 00 17 05 00 00 c8 00 00 00 90 06 00 00 00 00 00 00 bb 05 00 00 71 0d 00 00 00 00 00 00 | ........................q....... |
14ec0 | 6b 0c 00 00 f4 0e 00 00 ad 04 00 00 94 01 00 00 82 0c 00 00 29 04 00 00 eb 03 00 00 eb 0a 00 00 | k...................)........... |
14ee0 | 00 00 00 00 97 0c 00 00 00 00 00 00 0e 0d 00 00 78 09 00 00 db 10 00 00 00 00 00 00 4f 01 00 00 | ................x...........O... |
14f00 | 1a 0c 00 00 db 0d 00 00 49 10 00 00 00 00 00 00 76 10 00 00 3f 04 00 00 00 00 00 00 30 07 00 00 | ........I.......v...?.......0... |
14f20 | e1 00 00 00 7c 0c 00 00 78 11 00 00 12 13 00 00 00 00 00 00 09 0c 00 00 21 0b 00 00 d4 03 00 00 | ....|...x...............!....... |
14f40 | fa 05 00 00 de 07 00 00 00 00 00 00 7e 0d 00 00 00 00 00 00 66 13 00 00 72 13 00 00 0e 00 00 00 | ............~.......f...r....... |
14f60 | 9b 0c 00 00 00 00 00 00 7c 12 00 00 00 00 00 00 50 07 00 00 69 03 00 00 fb 12 00 00 00 00 00 00 | ........|.......P...i........... |
14f80 | 00 09 00 00 e5 04 00 00 82 0b 00 00 61 12 00 00 f9 10 00 00 94 0d 00 00 ee 09 00 00 30 0d 00 00 | ............a...............0... |
14fa0 | 30 08 00 00 e4 00 00 00 00 00 00 00 4a 07 00 00 ae 07 00 00 e9 05 00 00 4e 12 00 00 f6 07 00 00 | 0...........J...........N....... |
14fc0 | 20 0a 00 00 28 08 00 00 fa 12 00 00 89 10 00 00 00 00 00 00 ed 01 00 00 e7 07 00 00 00 00 00 00 | ....(........................... |
14fe0 | 84 0d 00 00 00 00 00 00 af 05 00 00 d0 0d 00 00 d8 00 00 00 5e 08 00 00 00 00 00 00 3e 0a 00 00 | ....................^.......>... |
15000 | 1e 00 00 00 c5 0e 00 00 00 00 00 00 c1 03 00 00 f9 0a 00 00 10 07 00 00 a4 00 00 00 00 00 00 00 | ................................ |
15020 | fe 00 00 00 74 13 00 00 37 12 00 00 41 13 00 00 ef 0a 00 00 59 13 00 00 15 09 00 00 00 00 00 00 | ....t...7...A.......Y........... |
15040 | 1e 07 00 00 00 00 00 00 40 0c 00 00 07 0d 00 00 c5 0a 00 00 e7 01 00 00 00 00 00 00 00 00 00 00 | ........@....................... |
15060 | 00 00 00 00 ed 06 00 00 95 0a 00 00 00 00 00 00 ad 02 00 00 87 08 00 00 42 0c 00 00 3c 01 00 00 | ........................B...<... |
15080 | bd 00 00 00 00 00 00 00 62 0a 00 00 72 05 00 00 02 03 00 00 cf 10 00 00 ba 0b 00 00 cf 0d 00 00 | ........b...r................... |
150a0 | 1f 0c 00 00 30 03 00 00 73 07 00 00 9c 11 00 00 00 00 00 00 00 00 00 00 d0 07 00 00 00 00 00 00 | ....0...s....................... |
150c0 | 4d 0c 00 00 9b 10 00 00 00 00 00 00 8f 0f 00 00 54 04 00 00 99 00 00 00 2f 13 00 00 00 00 00 00 | M...............T......./....... |
150e0 | c4 0c 00 00 a0 11 00 00 80 08 00 00 a1 11 00 00 c4 13 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
15100 | 51 03 00 00 53 00 00 00 57 0d 00 00 00 00 00 00 38 06 00 00 00 00 00 00 42 12 00 00 3b 10 00 00 | Q...S...W.......8.......B...;... |
15120 | d8 08 00 00 15 12 00 00 dc 0f 00 00 7b 06 00 00 aa 02 00 00 0c 0e 00 00 3d 03 00 00 00 00 00 00 | ............{...........=....... |
15140 | 6a 05 00 00 5f 00 00 00 60 0c 00 00 b3 06 00 00 e8 10 00 00 58 07 00 00 00 00 00 00 d0 13 00 00 | j..._...`...........X........... |
15160 | 27 11 00 00 e0 10 00 00 00 00 00 00 00 00 00 00 76 02 00 00 b2 0d 00 00 81 03 00 00 ab 0f 00 00 | '...............v............... |
15180 | 41 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14 0a 00 00 f3 05 00 00 00 00 00 00 | A............................... |
151a0 | 00 00 00 00 14 12 00 00 98 0c 00 00 00 00 00 00 58 02 00 00 2c 0c 00 00 00 00 00 00 e1 03 00 00 | ................X...,........... |
151c0 | ad 0e 00 00 0a 0d 00 00 d5 10 00 00 e9 0d 00 00 06 05 00 00 00 00 00 00 45 09 00 00 00 00 00 00 | ........................E....... |
151e0 | f9 04 00 00 1a 06 00 00 9b 08 00 00 36 03 00 00 3a 08 00 00 95 0c 00 00 7e 0f 00 00 00 00 00 00 | ............6...:.......~....... |
15200 | a3 0b 00 00 e9 06 00 00 c7 0d 00 00 da 07 00 00 a7 0b 00 00 24 08 00 00 14 03 00 00 01 02 00 00 | ....................$........... |
15220 | 00 00 00 00 00 00 00 00 99 02 00 00 ec 0b 00 00 00 00 00 00 00 00 00 00 7c 03 00 00 80 04 00 00 | ........................|....... |
15240 | a4 0a 00 00 49 06 00 00 b5 06 00 00 00 00 00 00 84 05 00 00 e4 01 00 00 00 00 00 00 cb 0e 00 00 | ....I........................... |
15260 | 00 00 00 00 60 0b 00 00 c4 0b 00 00 64 12 00 00 31 08 00 00 db 09 00 00 00 00 00 00 41 0f 00 00 | ....`.......d...1...........A... |
15280 | 00 00 00 00 22 04 00 00 34 05 00 00 f6 09 00 00 02 12 00 00 00 00 00 00 3e 08 00 00 51 05 00 00 | ...."...4...............>...Q... |
152a0 | 24 10 00 00 d3 06 00 00 2f 09 00 00 56 02 00 00 00 00 00 00 18 06 00 00 46 12 00 00 47 0e 00 00 | $......./...V...........F...G... |
152c0 | 64 0b 00 00 82 09 00 00 55 11 00 00 5e 06 00 00 00 00 00 00 19 00 00 00 54 11 00 00 9e 0e 00 00 | d.......U...^...........T....... |
152e0 | e2 00 00 00 92 08 00 00 68 0f 00 00 00 00 00 00 66 0b 00 00 68 09 00 00 56 0a 00 00 2e 0b 00 00 | ........h.......f...h...V....... |
15300 | 20 01 00 00 00 00 00 00 00 00 00 00 85 08 00 00 36 06 00 00 f2 04 00 00 de 04 00 00 d9 07 00 00 | ................6............... |
15320 | e3 00 00 00 96 04 00 00 87 0b 00 00 61 11 00 00 42 08 00 00 a2 0a 00 00 c8 01 00 00 cb 02 00 00 | ............a...B............... |
15340 | 00 00 00 00 a1 10 00 00 3a 07 00 00 3d 06 00 00 42 09 00 00 6a 0f 00 00 4d 0d 00 00 89 09 00 00 | ........:...=...B...j...M....... |
15360 | 8f 12 00 00 e5 00 00 00 00 00 00 00 00 00 00 00 4b 10 00 00 a0 04 00 00 48 06 00 00 3a 10 00 00 | ................K.......H...:... |
15380 | 8f 07 00 00 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 4c 12 00 00 21 05 00 00 00 00 00 00 | ....................L...!....... |
153a0 | 5b 05 00 00 e6 00 00 00 3c 0b 00 00 00 00 00 00 b9 13 00 00 41 0c 00 00 89 04 00 00 8b 03 00 00 | [.......<...........A........... |
153c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 00 72 11 00 00 aa 00 00 00 ce 04 00 00 | ....................r........... |
153e0 | 00 00 00 00 35 09 00 00 00 00 00 00 5a 04 00 00 00 00 00 00 86 06 00 00 aa 0f 00 00 09 11 00 00 | ....5.......Z................... |
15400 | f7 0b 00 00 a3 10 00 00 00 00 00 00 9d 01 00 00 93 07 00 00 9e 05 00 00 00 00 00 00 e4 0d 00 00 | ................................ |
15420 | b2 08 00 00 97 04 00 00 00 00 00 00 00 00 00 00 fd 0a 00 00 84 0b 00 00 09 0b 00 00 00 00 00 00 | ................................ |
15440 | 61 09 00 00 7b 05 00 00 00 00 00 00 36 12 00 00 00 00 00 00 da 0c 00 00 07 00 00 00 39 0a 00 00 | a...{.......6...............9... |
15460 | dd 0c 00 00 5a 01 00 00 2d 11 00 00 c4 06 00 00 aa 0d 00 00 00 00 00 00 a7 06 00 00 65 05 00 00 | ....Z...-...................e... |
15480 | 00 00 00 00 23 0c 00 00 00 00 00 00 8a 09 00 00 a9 12 00 00 3e 00 00 00 2d 03 00 00 d1 01 00 00 | ....#...............>...-....... |
154a0 | 30 09 00 00 00 00 00 00 be 0d 00 00 84 02 00 00 58 0b 00 00 27 00 00 00 00 00 00 00 00 00 00 00 | 0...............X...'........... |
154c0 | 14 13 00 00 fa 09 00 00 e4 10 00 00 00 00 00 00 6d 0a 00 00 22 09 00 00 fc 09 00 00 a5 0b 00 00 | ................m..."........... |
154e0 | c5 01 00 00 5c 10 00 00 0f 05 00 00 00 00 00 00 57 09 00 00 71 00 00 00 00 00 00 00 d9 0e 00 00 | ....\...........W...q........... |
15500 | 00 00 00 00 b6 04 00 00 ff 02 00 00 00 00 00 00 01 11 00 00 8d 05 00 00 9c 0b 00 00 29 0d 00 00 | ............................)... |
15520 | aa 10 00 00 00 00 00 00 41 09 00 00 c4 01 00 00 00 00 00 00 e8 06 00 00 8a 0c 00 00 00 00 00 00 | ........A....................... |
15540 | 3a 09 00 00 ba 03 00 00 00 00 00 00 04 12 00 00 6c 0e 00 00 8c 07 00 00 e2 12 00 00 e5 03 00 00 | :...............l............... |
15560 | 0f 08 00 00 00 00 00 00 26 0e 00 00 ac 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........&....................... |
15580 | 3f 00 00 00 e7 13 00 00 cc 10 00 00 b3 04 00 00 23 0b 00 00 00 00 00 00 57 05 00 00 14 0c 00 00 | ?...............#.......W....... |
155a0 | e4 08 00 00 e4 06 00 00 61 0a 00 00 6d 02 00 00 f6 12 00 00 f0 0c 00 00 f1 00 00 00 2b 00 00 00 | ........a...m...............+... |
155c0 | b0 0b 00 00 a1 01 00 00 6e 11 00 00 ed 0f 00 00 4e 0e 00 00 5b 07 00 00 00 00 00 00 56 07 00 00 | ........n.......N...[.......V... |
155e0 | b7 0d 00 00 b6 01 00 00 00 00 00 00 2b 04 00 00 51 12 00 00 75 12 00 00 63 03 00 00 eb 0e 00 00 | ............+...Q...u...c....... |
15600 | 37 10 00 00 9c 02 00 00 08 02 00 00 8c 01 00 00 84 07 00 00 00 0c 00 00 1f 10 00 00 5c 0b 00 00 | 7...........................\... |
15620 | b1 06 00 00 cf 0e 00 00 58 04 00 00 00 11 00 00 72 00 00 00 00 00 00 00 f5 01 00 00 9e 12 00 00 | ........X.......r............... |
15640 | 00 00 00 00 1b 06 00 00 00 00 00 00 a1 0a 00 00 00 00 00 00 00 00 00 00 24 09 00 00 35 0f 00 00 | ........................$...5... |
15660 | 00 00 00 00 72 0d 00 00 00 00 00 00 e5 01 00 00 00 00 00 00 00 00 00 00 20 10 00 00 00 00 00 00 | ....r........................... |
15680 | 00 00 00 00 36 0b 00 00 00 00 00 00 5f 01 00 00 b7 05 00 00 00 00 00 00 de 02 00 00 22 13 00 00 | ....6......._..............."... |
156a0 | ac 05 00 00 c9 0e 00 00 80 13 00 00 81 13 00 00 82 13 00 00 62 01 00 00 84 13 00 00 f9 0b 00 00 | ....................b........... |
156c0 | 1a 09 00 00 c1 0b 00 00 00 00 00 00 7d 06 00 00 d2 05 00 00 9c 05 00 00 04 01 00 00 fd 11 00 00 | ............}................... |
156e0 | 02 0c 00 00 00 00 00 00 0e 09 00 00 2f 0a 00 00 47 02 00 00 00 00 00 00 66 02 00 00 00 00 00 00 | ............/...G.......f....... |
15700 | d2 11 00 00 00 00 00 00 00 00 00 00 b4 01 00 00 ea 05 00 00 10 00 00 00 22 10 00 00 11 13 00 00 | ........................"....... |
15720 | 5d 00 00 00 9b 05 00 00 b7 09 00 00 24 05 00 00 fe 02 00 00 4d 0a 00 00 8f 10 00 00 00 00 00 00 | ]...........$.......M........... |
15740 | 95 04 00 00 f5 0f 00 00 00 00 00 00 37 04 00 00 14 00 00 00 00 00 00 00 d7 09 00 00 43 00 00 00 | ............7...............C... |
15760 | 00 00 00 00 9b 01 00 00 89 11 00 00 00 00 00 00 00 00 00 00 e9 03 00 00 44 12 00 00 28 02 00 00 | ........................D...(... |
15780 | 08 12 00 00 00 00 00 00 2b 08 00 00 6e 01 00 00 75 04 00 00 70 0b 00 00 69 13 00 00 9f 11 00 00 | ........+...n...u...p...i....... |
157a0 | e9 0f 00 00 f0 0f 00 00 9d 0f 00 00 00 00 00 00 b0 0a 00 00 00 00 00 00 c3 13 00 00 57 12 00 00 | ............................W... |
157c0 | 3d 02 00 00 00 00 00 00 00 00 00 00 a7 00 00 00 2c 0b 00 00 00 00 00 00 27 08 00 00 00 00 00 00 | =...............,.......'....... |
157e0 | ac 01 00 00 f7 00 00 00 00 00 00 00 4d 06 00 00 2b 03 00 00 c4 04 00 00 51 0d 00 00 c5 07 00 00 | ............M...+.......Q....... |
15800 | 4f 02 00 00 43 09 00 00 fb 08 00 00 48 0c 00 00 e5 0c 00 00 95 10 00 00 00 00 00 00 00 00 00 00 | O...C.......H................... |
15820 | 87 06 00 00 9e 0a 00 00 39 0f 00 00 90 12 00 00 92 06 00 00 af 0a 00 00 00 00 00 00 00 00 00 00 | ........9....................... |
15840 | 00 00 00 00 f5 10 00 00 33 04 00 00 da 0a 00 00 f2 02 00 00 99 03 00 00 00 00 00 00 fd 08 00 00 | ........3....................... |
15860 | fb 07 00 00 9c 04 00 00 f9 11 00 00 d4 0f 00 00 00 00 00 00 25 02 00 00 19 05 00 00 bb 07 00 00 | ....................%........... |
15880 | ee 12 00 00 00 05 00 00 6e 0d 00 00 0e 05 00 00 27 0d 00 00 d2 0d 00 00 dd 12 00 00 88 13 00 00 | ........n.......'............... |
158a0 | 45 0f 00 00 19 02 00 00 c0 00 00 00 63 07 00 00 ab 08 00 00 00 00 00 00 68 0c 00 00 5d 09 00 00 | E...........c...........h...]... |
158c0 | 84 03 00 00 c5 0d 00 00 aa 11 00 00 61 13 00 00 b0 03 00 00 b7 0e 00 00 4a 13 00 00 52 03 00 00 | ............a...........J...R... |
158e0 | 00 00 00 00 da 05 00 00 88 08 00 00 67 07 00 00 00 00 00 00 c8 06 00 00 d9 09 00 00 8e 0d 00 00 | ............g................... |
15900 | f9 09 00 00 c1 08 00 00 ee 0a 00 00 7d 09 00 00 00 00 00 00 bf 08 00 00 1b 0c 00 00 37 0d 00 00 | ............}...............7... |
15920 | 20 09 00 00 bb 04 00 00 af 03 00 00 b7 0b 00 00 3a 0d 00 00 02 0f 00 00 00 00 00 00 26 0b 00 00 | ................:...........&... |
15940 | fb 04 00 00 0c 04 00 00 47 0c 00 00 00 00 00 00 20 02 00 00 00 00 00 00 f5 03 00 00 7c 0a 00 00 | ........G...................|... |
15960 | 82 0a 00 00 80 12 00 00 00 00 00 00 c2 07 00 00 5e 02 00 00 28 0a 00 00 00 00 00 00 a7 12 00 00 | ................^...(........... |
15980 | 00 00 00 00 00 00 00 00 00 00 00 00 d7 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 | ................................ |
159a0 | 00 00 00 00 26 02 00 00 00 00 00 00 53 07 00 00 b1 09 00 00 6b 01 00 00 24 07 00 00 00 00 00 00 | ....&.......S.......k...$....... |
159c0 | 00 00 00 00 00 00 00 00 00 00 00 00 d9 0b 00 00 2c 0f 00 00 9b 06 00 00 42 04 00 00 c4 0d 00 00 | ................,.......B....... |
159e0 | b8 01 00 00 ef 0b 00 00 57 11 00 00 00 00 00 00 02 02 00 00 1a 0d 00 00 85 0a 00 00 ca 05 00 00 | ........W....................... |
15a00 | a8 08 00 00 46 03 00 00 00 00 00 00 a4 0f 00 00 00 00 00 00 d1 07 00 00 ed 04 00 00 ce 0c 00 00 | ....F........................... |
15a20 | bb 01 00 00 0c 12 00 00 88 00 00 00 1b 0b 00 00 06 11 00 00 f3 11 00 00 04 13 00 00 a5 08 00 00 | ................................ |
15a40 | 74 07 00 00 de 00 00 00 6b 00 00 00 00 00 00 00 d0 09 00 00 68 00 00 00 8b 10 00 00 c8 04 00 00 | t.......k...........h........... |
15a60 | 0d 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 07 00 00 90 08 00 00 e2 11 00 00 2f 0c 00 00 | ............................/... |
15a80 | 00 00 00 00 00 03 00 00 35 0c 00 00 00 00 00 00 33 08 00 00 00 00 00 00 00 00 00 00 26 06 00 00 | ........5.......3...........&... |
15aa0 | a6 0c 00 00 b6 13 00 00 ba 04 00 00 4f 0d 00 00 5e 04 00 00 4b 0d 00 00 cb 07 00 00 7c 0f 00 00 | ............O...^...K.......|... |
15ac0 | 11 08 00 00 00 00 00 00 bf 04 00 00 fa 02 00 00 ee 03 00 00 18 00 00 00 38 09 00 00 35 04 00 00 | ........................8...5... |
15ae0 | 00 00 00 00 c3 0a 00 00 87 0a 00 00 1a 05 00 00 0c 02 00 00 4f 0e 00 00 32 08 00 00 00 00 00 00 | ....................O...2....... |
15b00 | 24 01 00 00 aa 12 00 00 00 00 00 00 32 13 00 00 d6 0d 00 00 b9 02 00 00 a2 0c 00 00 d9 01 00 00 | $...........2................... |
15b20 | 0b 12 00 00 6e 12 00 00 00 00 00 00 00 00 00 00 5f 0a 00 00 29 03 00 00 a5 0d 00 00 d4 13 00 00 | ....n..........._...)........... |
15b40 | be 08 00 00 12 00 00 00 ba 10 00 00 2a 04 00 00 2e 04 00 00 da 11 00 00 12 0b 00 00 1d 0d 00 00 | ............*................... |
15b60 | 67 04 00 00 00 00 00 00 f0 03 00 00 11 04 00 00 00 00 00 00 12 09 00 00 00 00 00 00 2d 10 00 00 | g...........................-... |
15b80 | ce 00 00 00 e7 0a 00 00 57 02 00 00 7e 04 00 00 e9 10 00 00 86 03 00 00 00 00 00 00 c4 12 00 00 | ........W...~................... |
15ba0 | 00 00 00 00 f8 00 00 00 00 00 00 00 35 08 00 00 21 0f 00 00 ce 0d 00 00 5f 0f 00 00 51 0f 00 00 | ............5...!......._...Q... |
15bc0 | 00 00 00 00 df 01 00 00 0a 08 00 00 f3 01 00 00 00 00 00 00 6a 07 00 00 30 02 00 00 2a 03 00 00 | ....................j...0...*... |
15be0 | 00 00 00 00 f9 00 00 00 00 00 00 00 00 00 00 00 06 0d 00 00 cb 13 00 00 51 11 00 00 48 0b 00 00 | ........................Q...H... |
15c00 | 0f 0f 00 00 00 00 00 00 d8 0c 00 00 a6 0e 00 00 96 10 00 00 eb 06 00 00 b2 01 00 00 6a 01 00 00 | ............................j... |
15c20 | 65 07 00 00 00 00 00 00 e2 09 00 00 50 0b 00 00 59 00 00 00 00 00 00 00 00 00 00 00 1b 00 00 00 | e...........P...Y............... |
15c40 | 49 13 00 00 ac 00 00 00 00 00 00 00 ae 0d 00 00 36 04 00 00 00 00 00 00 6b 10 00 00 00 00 00 00 | I...............6.......k....... |
15c60 | 99 12 00 00 bb 11 00 00 01 03 00 00 ec 0d 00 00 00 00 00 00 31 03 00 00 00 00 00 00 61 05 00 00 | ....................1.......a... |
15c80 | 69 07 00 00 dc 0a 00 00 be 05 00 00 2a 0f 00 00 00 00 00 00 bc 07 00 00 91 0b 00 00 00 00 00 00 | i...........*................... |
15ca0 | c0 04 00 00 e8 08 00 00 00 00 00 00 bc 05 00 00 da 12 00 00 a8 11 00 00 00 00 00 00 b8 0d 00 00 | ................................ |
15cc0 | 7f 0e 00 00 bf 05 00 00 dc 04 00 00 00 00 00 00 00 00 00 00 b6 09 00 00 75 0f 00 00 59 0a 00 00 | ........................u...Y... |
15ce0 | ba 02 00 00 00 00 00 00 05 03 00 00 3e 10 00 00 78 00 00 00 7a 08 00 00 f2 0a 00 00 1f 0d 00 00 | ............>...x...z........... |
15d00 | f2 12 00 00 2b 12 00 00 00 00 00 00 00 00 00 00 7f 0c 00 00 fa 03 00 00 00 00 00 00 2c 08 00 00 | ....+.......................,... |
15d20 | 00 00 00 00 4e 08 00 00 c2 02 00 00 e3 10 00 00 77 0b 00 00 e4 05 00 00 00 00 00 00 e4 0e 00 00 | ....N...........w............... |
15d40 | 06 0a 00 00 3f 08 00 00 8c 0a 00 00 00 00 00 00 c1 01 00 00 79 0b 00 00 33 03 00 00 b6 06 00 00 | ....?...............y...3....... |
15d60 | 00 00 00 00 00 00 00 00 68 0b 00 00 8c 12 00 00 00 00 00 00 1b 08 00 00 66 0d 00 00 47 0f 00 00 | ........h...............f...G... |
15d80 | 00 00 00 00 45 05 00 00 00 00 00 00 66 05 00 00 e7 0f 00 00 9a 04 00 00 0f 0a 00 00 5b 0d 00 00 | ....E.......f...............[... |
15da0 | a4 11 00 00 89 0c 00 00 00 00 00 00 30 0a 00 00 d3 0f 00 00 43 04 00 00 c6 09 00 00 00 00 00 00 | ............0.......C........... |
15dc0 | cf 11 00 00 68 12 00 00 00 00 00 00 af 01 00 00 67 02 00 00 7e 11 00 00 a5 05 00 00 11 09 00 00 | ....h...........g...~........... |
15de0 | 26 03 00 00 00 00 00 00 df 0e 00 00 00 00 00 00 9d 10 00 00 1e 02 00 00 08 0f 00 00 62 03 00 00 | &...........................b... |
15e00 | 00 00 00 00 9d 02 00 00 00 00 00 00 00 00 00 00 b1 0e 00 00 0d 06 00 00 31 09 00 00 7a 09 00 00 | ........................1...z... |
15e20 | 00 00 00 00 52 06 00 00 78 0c 00 00 6e 06 00 00 69 0a 00 00 25 12 00 00 49 0b 00 00 ea 08 00 00 | ....R...x...n...i...%...I....... |
15e40 | f4 08 00 00 f7 0d 00 00 6d 00 00 00 dd 05 00 00 00 00 00 00 36 0c 00 00 00 00 00 00 00 00 00 00 | ........m...........6........... |
15e60 | 2e 02 00 00 dc 02 00 00 e6 0a 00 00 91 04 00 00 00 00 00 00 00 00 00 00 d0 05 00 00 00 00 00 00 | ................................ |
15e80 | c0 0b 00 00 00 00 00 00 8d 0e 00 00 46 0e 00 00 bd 03 00 00 fb 03 00 00 89 13 00 00 52 0e 00 00 | ............F...............R... |
15ea0 | 96 0a 00 00 00 00 00 00 11 02 00 00 7d 0c 00 00 00 00 00 00 00 00 00 00 d1 0e 00 00 42 01 00 00 | ............}...............B... |
15ec0 | b7 02 00 00 4e 0b 00 00 20 0d 00 00 94 07 00 00 2d 12 00 00 58 01 00 00 2d 04 00 00 86 0a 00 00 | ....N...........-...X...-....... |
15ee0 | 27 0b 00 00 15 0a 00 00 f8 12 00 00 fe 07 00 00 dc 13 00 00 00 00 00 00 00 00 00 00 a7 04 00 00 | '............................... |
15f00 | 72 0f 00 00 5b 13 00 00 b2 13 00 00 29 12 00 00 3b 07 00 00 66 07 00 00 ed 08 00 00 f1 01 00 00 | r...[.......)...;...f........... |
15f20 | 00 00 00 00 3a 0e 00 00 d6 05 00 00 7a 13 00 00 00 00 00 00 5b 03 00 00 6a 06 00 00 25 10 00 00 | ....:.......z.......[...j...%... |
15f40 | 00 00 00 00 1f 04 00 00 69 0f 00 00 a2 13 00 00 fa 08 00 00 25 04 00 00 1f 06 00 00 b9 07 00 00 | ........i...........%........... |
15f60 | a0 09 00 00 00 00 00 00 62 07 00 00 9f 09 00 00 af 0b 00 00 2c 04 00 00 d9 05 00 00 ca 00 00 00 | ........b...........,........... |
15f80 | af 0e 00 00 00 00 00 00 56 0d 00 00 c8 11 00 00 4d 01 00 00 9c 00 00 00 00 00 00 00 5a 0b 00 00 | ........V.......M...........Z... |
15fa0 | db 0e 00 00 7e 06 00 00 3e 03 00 00 ec 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cc 02 00 00 | ....~...>....................... |
15fc0 | 00 00 00 00 49 0c 00 00 45 01 00 00 4a 0e 00 00 61 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....I...E...J...a............... |
15fe0 | 8c 0d 00 00 b6 0f 00 00 93 08 00 00 22 03 00 00 b5 10 00 00 9f 03 00 00 e7 09 00 00 00 00 00 00 | ............"................... |
16000 | 3e 07 00 00 00 00 00 00 74 12 00 00 4a 08 00 00 5e 03 00 00 c2 03 00 00 64 0c 00 00 aa 0b 00 00 | >.......t...J...^.......d....... |
16020 | fb 01 00 00 00 00 00 00 cc 0e 00 00 d4 0b 00 00 00 00 00 00 e2 07 00 00 e2 10 00 00 00 00 00 00 | ................................ |
16040 | 00 00 00 00 60 0f 00 00 8b 06 00 00 91 08 00 00 5d 05 00 00 cf 05 00 00 00 00 00 00 56 0f 00 00 | ....`...........]...........V... |
16060 | 3d 01 00 00 f2 08 00 00 00 00 00 00 e1 0d 00 00 59 02 00 00 00 00 00 00 11 0c 00 00 78 02 00 00 | =...............Y...........x... |
16080 | ad 07 00 00 b1 01 00 00 33 0f 00 00 83 06 00 00 9a 09 00 00 b4 0f 00 00 e2 05 00 00 b7 06 00 00 | ........3....................... |
160a0 | 92 11 00 00 00 00 00 00 1c 05 00 00 02 11 00 00 39 08 00 00 69 06 00 00 8c 0b 00 00 00 00 00 00 | ................9...i........... |
160c0 | 74 10 00 00 00 00 00 00 a9 08 00 00 7f 0a 00 00 03 0c 00 00 2e 05 00 00 00 00 00 00 83 09 00 00 | t............................... |
160e0 | 5d 0a 00 00 fd 12 00 00 aa 08 00 00 00 00 00 00 79 00 00 00 26 0d 00 00 fe 01 00 00 00 10 00 00 | ]...............y...&........... |
16100 | eb 04 00 00 04 10 00 00 a6 05 00 00 e8 0c 00 00 00 00 00 00 6e 0a 00 00 54 0d 00 00 00 00 00 00 | ....................n...T....... |
16120 | 00 00 00 00 00 00 00 00 00 00 00 00 b4 12 00 00 7e 07 00 00 00 00 00 00 b9 10 00 00 be 10 00 00 | ................~............... |
16140 | 4b 13 00 00 64 0a 00 00 b3 10 00 00 00 00 00 00 3e 12 00 00 60 10 00 00 a3 0a 00 00 63 00 00 00 | K...d...........>...`.......c... |
16160 | 27 05 00 00 2f 0f 00 00 7f 07 00 00 00 00 00 00 0b 02 00 00 42 0e 00 00 c0 09 00 00 33 0d 00 00 | '.../...............B.......3... |
16180 | 00 00 00 00 eb 0c 00 00 e6 08 00 00 a0 01 00 00 00 00 00 00 00 00 00 00 cc 05 00 00 00 00 00 00 | ................................ |
161a0 | a2 08 00 00 00 00 00 00 de 06 00 00 43 0c 00 00 2f 12 00 00 00 00 00 00 ce 08 00 00 00 00 00 00 | ............C.../............... |
161c0 | 01 08 00 00 00 00 00 00 00 00 00 00 9f 0e 00 00 c3 0f 00 00 00 00 00 00 16 02 00 00 79 0f 00 00 | ............................y... |
161e0 | fc 11 00 00 77 12 00 00 5f 05 00 00 00 00 00 00 ea 06 00 00 00 00 00 00 bc 0c 00 00 9f 08 00 00 | ....w..._....................... |
16200 | 67 0f 00 00 60 13 00 00 7c 06 00 00 77 07 00 00 9d 0c 00 00 8d 11 00 00 ca 02 00 00 65 0c 00 00 | g...`...|...w...............e... |
16220 | e5 12 00 00 29 08 00 00 d7 01 00 00 3c 05 00 00 00 00 00 00 00 00 00 00 26 0c 00 00 00 00 00 00 | ....).......<...........&....... |
16240 | ed 02 00 00 6b 05 00 00 0b 0d 00 00 00 00 00 00 00 00 00 00 4e 0c 00 00 e6 09 00 00 cb 08 00 00 | ....k...............N........... |
16260 | ac 04 00 00 de 11 00 00 0d 09 00 00 00 00 00 00 73 10 00 00 0b 0c 00 00 b3 01 00 00 a1 0d 00 00 | ................s............... |
16280 | e2 08 00 00 00 00 00 00 67 0c 00 00 18 09 00 00 fc 0a 00 00 00 00 00 00 f1 04 00 00 00 00 00 00 | ........g....................... |
162a0 | 00 00 00 00 8c 13 00 00 f8 0c 00 00 18 02 00 00 35 0b 00 00 f8 03 00 00 00 00 00 00 19 0c 00 00 | ................5............... |
162c0 | f7 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fa 11 00 00 87 04 00 00 00 00 00 00 34 04 00 00 | ............................4... |
162e0 | b6 00 00 00 75 02 00 00 d5 0e 00 00 00 00 00 00 12 05 00 00 5a 10 00 00 48 10 00 00 dc 03 00 00 | ....u...............Z...H....... |
16300 | 00 00 00 00 f2 0d 00 00 ad 05 00 00 79 01 00 00 98 03 00 00 1c 0f 00 00 5d 07 00 00 0f 12 00 00 | ............y...........]....... |
16320 | 6c 01 00 00 ec 0c 00 00 a8 12 00 00 00 00 00 00 91 13 00 00 c1 12 00 00 b9 05 00 00 00 00 00 00 | l............................... |
16340 | 90 0b 00 00 d5 13 00 00 58 05 00 00 00 00 00 00 97 08 00 00 00 00 00 00 a7 02 00 00 a8 02 00 00 | ........X....................... |
16360 | 63 01 00 00 e9 04 00 00 00 00 00 00 ee 11 00 00 32 05 00 00 8c 08 00 00 00 00 00 00 83 0e 00 00 | c...............2............... |
16380 | 2d 0c 00 00 00 00 00 00 00 00 00 00 0f 03 00 00 03 09 00 00 7e 09 00 00 a4 02 00 00 a5 02 00 00 | -...................~........... |
163a0 | a6 02 00 00 3d 0f 00 00 23 10 00 00 bf 07 00 00 e7 0c 00 00 00 00 00 00 00 00 00 00 c0 13 00 00 | ....=...#....................... |
163c0 | c4 08 00 00 6d 06 00 00 e3 06 00 00 15 02 00 00 00 00 00 00 3c 06 00 00 a1 02 00 00 a2 02 00 00 | ....m...............<........... |
163e0 | a3 02 00 00 48 01 00 00 00 00 00 00 15 0c 00 00 1b 12 00 00 26 01 00 00 00 00 00 00 8f 06 00 00 | ....H...............&........... |
16400 | 00 00 00 00 e8 0a 00 00 d8 0a 00 00 0a 03 00 00 f1 0f 00 00 00 00 00 00 9e 02 00 00 9f 02 00 00 | ................................ |
16420 | a0 02 00 00 1a 08 00 00 83 0a 00 00 75 06 00 00 8b 0f 00 00 07 02 00 00 64 01 00 00 00 00 00 00 | ............u...........d....... |
16440 | 72 08 00 00 c2 05 00 00 77 04 00 00 83 10 00 00 00 00 00 00 a4 10 00 00 75 05 00 00 00 00 00 00 | r.......w...............u....... |
16460 | 33 0a 00 00 81 09 00 00 f4 0b 00 00 00 00 00 00 ec 09 00 00 98 00 00 00 00 00 00 00 74 02 00 00 | 3...........................t... |
16480 | 00 00 00 00 b3 05 00 00 bd 06 00 00 c9 00 00 00 00 00 00 00 45 10 00 00 03 08 00 00 01 05 00 00 | ....................E........... |
164a0 | 0b 13 00 00 3b 09 00 00 00 00 00 00 bf 11 00 00 00 00 00 00 a3 09 00 00 00 00 00 00 00 00 00 00 | ....;........................... |
164c0 | c7 02 00 00 98 0d 00 00 00 00 00 00 00 00 00 00 6a 10 00 00 fd 05 00 00 00 00 00 00 80 11 00 00 | ................j............... |
164e0 | bb 02 00 00 9e 10 00 00 00 00 00 00 87 00 00 00 6f 07 00 00 c8 0f 00 00 56 01 00 00 00 00 00 00 | ................o.......V....... |
16500 | 6c 03 00 00 86 0b 00 00 25 09 00 00 d2 0c 00 00 69 08 00 00 00 00 00 00 88 11 00 00 25 0d 00 00 | l.......%.......i...........%... |
16520 | 99 08 00 00 3c 02 00 00 da 0f 00 00 00 00 00 00 d3 13 00 00 cd 12 00 00 d1 0d 00 00 a7 10 00 00 | ....<........................... |
16540 | b8 0f 00 00 05 0e 00 00 a3 07 00 00 45 0a 00 00 60 0d 00 00 24 0a 00 00 00 00 00 00 73 11 00 00 | ............E...`...$.......s... |
16560 | 8d 06 00 00 51 0c 00 00 7f 03 00 00 5c 0c 00 00 11 07 00 00 00 00 00 00 37 11 00 00 63 0c 00 00 | ....Q.......\...........7...c... |
16580 | ac 12 00 00 00 00 00 00 2a 0b 00 00 0b 10 00 00 00 00 00 00 6c 08 00 00 cf 0f 00 00 00 00 00 00 | ........*...........l........... |
165a0 | f0 12 00 00 fc 04 00 00 00 00 00 00 00 00 00 00 94 0c 00 00 ca 04 00 00 00 00 00 00 1b 09 00 00 | ................................ |
165c0 | b3 02 00 00 bf 0b 00 00 4e 07 00 00 0f 0b 00 00 00 00 00 00 2e 0e 00 00 dd 0d 00 00 5d 0f 00 00 | ........N...................]... |
165e0 | 31 0b 00 00 b7 07 00 00 71 02 00 00 51 06 00 00 f2 01 00 00 00 00 00 00 40 07 00 00 52 13 00 00 | 1.......q...Q...........@...R... |
16600 | 29 00 00 00 ae 01 00 00 00 00 00 00 d8 01 00 00 6a 11 00 00 00 00 00 00 4c 0a 00 00 be 01 00 00 | )...............j.......L....... |
16620 | 65 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 03 00 00 00 00 00 00 56 12 00 00 | e...................t.......V... |
16640 | 00 00 00 00 15 05 00 00 07 0e 00 00 00 00 00 00 eb 09 00 00 00 00 00 00 e0 02 00 00 a0 13 00 00 | ................................ |
16660 | d0 0a 00 00 16 10 00 00 05 07 00 00 00 00 00 00 a3 01 00 00 00 00 00 00 02 09 00 00 4e 10 00 00 | ............................N... |
16680 | 76 12 00 00 3b 0a 00 00 f0 13 00 00 fc 10 00 00 73 04 00 00 00 00 00 00 d8 10 00 00 00 00 00 00 | v...;...........s............... |
166a0 | 26 00 00 00 3a 01 00 00 06 08 00 00 8b 0b 00 00 00 00 00 00 7e 05 00 00 f3 10 00 00 fe 05 00 00 | &...:...............~........... |
166c0 | d7 04 00 00 df 04 00 00 7a 0a 00 00 de 12 00 00 1c 0e 00 00 96 09 00 00 01 06 00 00 00 00 00 00 | ........z....................... |
166e0 | 00 00 00 00 18 01 00 00 11 0f 00 00 87 0f 00 00 00 00 00 00 be 0e 00 00 f0 11 00 00 00 00 00 00 | ................................ |
16700 | 05 05 00 00 6b 13 00 00 3c 09 00 00 00 00 00 00 00 00 00 00 55 13 00 00 16 06 00 00 01 0f 00 00 | ....k...<...........U........... |
16720 | 56 00 00 00 1d 12 00 00 00 00 00 00 1c 07 00 00 81 02 00 00 00 00 00 00 8e 0e 00 00 17 0f 00 00 | V............................... |
16740 | a0 0e 00 00 00 00 00 00 00 00 00 00 b0 07 00 00 9f 05 00 00 b8 09 00 00 b6 0a 00 00 66 04 00 00 | ............................f... |
16760 | 00 00 00 00 00 00 00 00 00 00 00 00 99 13 00 00 00 00 00 00 ec 01 00 00 00 00 00 00 ad 13 00 00 | ................................ |
16780 | 0b 0f 00 00 00 00 00 00 63 11 00 00 00 00 00 00 42 0b 00 00 ea 04 00 00 00 00 00 00 a5 07 00 00 | ........c.......B............... |
167a0 | 8c 09 00 00 05 09 00 00 db 12 00 00 10 01 00 00 65 02 00 00 8a 11 00 00 3c 0c 00 00 e2 06 00 00 | ................e.......<....... |
167c0 | 7c 11 00 00 c1 10 00 00 ee 00 00 00 ad 10 00 00 c5 04 00 00 d9 0c 00 00 e1 02 00 00 9d 06 00 00 | |............................... |
167e0 | 65 0f 00 00 00 00 00 00 00 00 00 00 df 12 00 00 00 00 00 00 83 11 00 00 00 00 00 00 ab 10 00 00 | e............................... |
16800 | 7d 08 00 00 6a 0c 00 00 e9 0a 00 00 1c 13 00 00 27 0e 00 00 86 11 00 00 7f 11 00 00 00 00 00 00 | }...j...........'............... |
16820 | 4d 10 00 00 00 00 00 00 49 07 00 00 00 00 00 00 0b 00 00 00 8e 12 00 00 f8 0e 00 00 31 05 00 00 | M.......I...................1... |
16840 | 82 08 00 00 77 0f 00 00 47 10 00 00 07 0a 00 00 a3 13 00 00 7c 05 00 00 00 00 00 00 3f 01 00 00 | ....w...G...........|.......?... |
16860 | 00 00 00 00 d7 00 00 00 98 13 00 00 b4 10 00 00 c3 01 00 00 00 00 00 00 6c 0d 00 00 00 00 00 00 | ........................l....... |
16880 | 00 00 00 00 86 05 00 00 a6 12 00 00 b0 01 00 00 d0 06 00 00 07 11 00 00 56 04 00 00 3c 08 00 00 | ........................V...<... |
168a0 | 1c 09 00 00 8d 0b 00 00 00 00 00 00 a8 13 00 00 00 08 00 00 1a 07 00 00 92 10 00 00 00 00 00 00 | ................................ |
168c0 | 00 00 00 00 00 00 00 00 00 00 00 00 ce 0b 00 00 0a 07 00 00 00 00 00 00 00 00 00 00 64 00 00 00 | ............................d... |
168e0 | 00 00 00 00 4c 08 00 00 79 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 0e 00 00 00 00 00 00 | ....L...y...............?....... |
16900 | 00 00 00 00 00 00 00 00 7a 0b 00 00 81 01 00 00 12 06 00 00 00 00 00 00 13 11 00 00 92 04 00 00 | ........z....................... |
16920 | 00 00 00 00 82 0e 00 00 9f 0f 00 00 00 00 00 00 d1 0f 00 00 b8 07 00 00 b1 00 00 00 6e 10 00 00 | ............................n... |
16940 | 00 00 00 00 83 04 00 00 ef 09 00 00 92 00 00 00 de 13 00 00 10 04 00 00 91 12 00 00 5a 06 00 00 | ............................Z... |
16960 | 58 0c 00 00 fc 01 00 00 62 05 00 00 bc 04 00 00 4e 06 00 00 44 04 00 00 00 00 00 00 ce 07 00 00 | X.......b.......N...D........... |
16980 | 4b 0b 00 00 00 00 00 00 61 0c 00 00 91 00 00 00 f8 0f 00 00 c6 10 00 00 21 07 00 00 00 00 00 00 | K.......a...............!....... |
169a0 | 00 00 00 00 63 09 00 00 00 00 00 00 71 09 00 00 55 09 00 00 6f 0b 00 00 e8 02 00 00 cd 04 00 00 | ....c.......q...U...o........... |
169c0 | 46 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 08 00 00 00 00 00 00 45 0d 00 00 | F...........................E... |
169e0 | f2 0c 00 00 00 00 00 00 bc 01 00 00 0a 0b 00 00 53 11 00 00 e3 0a 00 00 00 00 00 00 c8 0b 00 00 | ................S............... |
16a00 | 6f 0f 00 00 00 00 00 00 00 00 00 00 f7 04 00 00 08 0a 00 00 00 00 00 00 c7 03 00 00 d4 12 00 00 | o............................... |
16a20 | 23 09 00 00 46 05 00 00 00 00 00 00 1b 0f 00 00 00 00 00 00 82 05 00 00 3b 08 00 00 00 00 00 00 | #...F...................;....... |
16a40 | 14 0b 00 00 bb 06 00 00 d4 0a 00 00 3e 06 00 00 dd 01 00 00 3c 00 00 00 c7 04 00 00 fb 11 00 00 | ............>.......<........... |
16a60 | 04 0f 00 00 00 00 00 00 00 00 00 00 e4 0a 00 00 00 00 00 00 18 13 00 00 c1 07 00 00 28 11 00 00 | ............................(... |
16a80 | 00 00 00 00 ae 08 00 00 ef 07 00 00 00 00 00 00 0a 0a 00 00 c8 09 00 00 6a 13 00 00 00 00 00 00 | ........................j....... |
16aa0 | c8 05 00 00 8b 07 00 00 00 00 00 00 00 00 00 00 a6 0b 00 00 c9 03 00 00 00 00 00 00 f9 0c 00 00 | ................................ |
16ac0 | 00 00 00 00 c7 11 00 00 ff 0a 00 00 c2 06 00 00 30 12 00 00 56 05 00 00 e7 04 00 00 9a 06 00 00 | ................0...V........... |
16ae0 | 3f 0c 00 00 8d 03 00 00 32 00 00 00 00 00 00 00 00 00 00 00 6b 0d 00 00 00 00 00 00 00 00 00 00 | ?.......2...........k........... |
16b00 | 51 08 00 00 1d 05 00 00 00 00 00 00 00 00 00 00 1a 13 00 00 69 01 00 00 30 04 00 00 23 0d 00 00 | Q...................i...0...#... |
16b20 | de 0c 00 00 0c 00 00 00 6d 12 00 00 1d 11 00 00 fb 10 00 00 00 00 00 00 2c 00 00 00 00 00 00 00 | ........m...............,....... |
16b40 | ac 13 00 00 b2 0b 00 00 5b 09 00 00 73 03 00 00 c0 10 00 00 03 05 00 00 6c 02 00 00 39 00 00 00 | ........[...s...........l...9... |
16b60 | 14 06 00 00 00 00 00 00 b3 0c 00 00 f4 0a 00 00 00 00 00 00 83 08 00 00 94 05 00 00 00 00 00 00 | ................................ |
16b80 | e3 09 00 00 92 09 00 00 00 00 00 00 00 00 00 00 b0 04 00 00 4c 07 00 00 d8 05 00 00 a4 13 00 00 | ....................L........... |
16ba0 | 4d 02 00 00 00 00 00 00 af 10 00 00 5a 07 00 00 2a 05 00 00 18 11 00 00 00 00 00 00 3d 08 00 00 | M...........Z...*...........=... |
16bc0 | 40 0d 00 00 67 11 00 00 f7 01 00 00 29 0e 00 00 fe 09 00 00 c3 03 00 00 00 00 00 00 cf 03 00 00 | @...g.......)................... |
16be0 | 00 00 00 00 50 00 00 00 32 03 00 00 00 00 00 00 a5 03 00 00 df 02 00 00 f3 04 00 00 52 02 00 00 | ....P...2...................R... |
16c00 | 92 05 00 00 9b 0b 00 00 3f 06 00 00 f4 02 00 00 00 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 | ........?....................... |
16c20 | f3 13 00 00 4b 0a 00 00 e7 11 00 00 90 03 00 00 6c 0b 00 00 bf 0f 00 00 11 0e 00 00 00 00 00 00 | ....K...........l............... |
16c40 | ee 0e 00 00 dd 08 00 00 4c 13 00 00 5e 00 00 00 47 00 00 00 8d 0a 00 00 2c 03 00 00 00 00 00 00 | ........L...^...G.......,....... |
16c60 | 43 0a 00 00 da 04 00 00 bd 0e 00 00 38 07 00 00 00 00 00 00 fb 0f 00 00 00 00 00 00 e8 0d 00 00 | C...........8................... |
16c80 | 00 00 00 00 00 00 00 00 46 01 00 00 ee 08 00 00 be 03 00 00 0e 11 00 00 00 00 00 00 4b 02 00 00 | ........F...................K... |
16ca0 | 9a 07 00 00 00 00 00 00 96 12 00 00 83 00 00 00 2c 09 00 00 ea 09 00 00 d8 04 00 00 1b 13 00 00 | ................,............... |
16cc0 | fc 08 00 00 00 00 00 00 dd 0b 00 00 70 02 00 00 61 01 00 00 87 0d 00 00 eb 02 00 00 3d 11 00 00 | ............p...a...........=... |
16ce0 | a9 0e 00 00 00 00 00 00 ef 0f 00 00 02 0b 00 00 39 05 00 00 19 03 00 00 55 0d 00 00 00 00 00 00 | ................9.......U....... |
16d00 | c0 0a 00 00 81 0f 00 00 91 02 00 00 00 00 00 00 df 10 00 00 ae 0c 00 00 0d 0e 00 00 11 0a 00 00 | ................................ |
16d20 | dc 0b 00 00 63 0f 00 00 0a 10 00 00 00 00 00 00 b4 06 00 00 b6 10 00 00 e6 03 00 00 d4 05 00 00 | ....c........................... |
16d40 | d2 12 00 00 c0 03 00 00 a6 01 00 00 00 00 00 00 00 00 00 00 5c 11 00 00 00 00 00 00 40 0b 00 00 | ....................\.......@... |
16d60 | 6d 11 00 00 d6 07 00 00 00 00 00 00 b3 11 00 00 00 00 00 00 00 00 00 00 16 07 00 00 d9 11 00 00 | m............................... |
16d80 | 00 00 00 00 00 00 00 00 00 00 00 00 2a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 99 05 00 00 | ............*................... |
16da0 | 8a 00 00 00 00 00 00 00 00 00 00 00 3a 0c 00 00 88 10 00 00 4f 07 00 00 a7 01 00 00 31 12 00 00 | ............:.......O.......1... |
16dc0 | 00 00 00 00 98 01 00 00 0e 04 00 00 00 00 00 00 00 00 00 00 7b 08 00 00 4a 10 00 00 d6 03 00 00 | ....................{...J....... |
16de0 | 31 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f7 02 00 00 00 00 00 00 e8 09 00 00 | 1............................... |
16e00 | 00 00 00 00 0f 09 00 00 63 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f5 07 00 00 45 0b 00 00 | ........c...................E... |
16e20 | 66 03 00 00 02 0d 00 00 7e 10 00 00 71 0f 00 00 a9 13 00 00 ea 00 00 00 06 03 00 00 7f 01 00 00 | f.......~...q................... |
16e40 | 68 0e 00 00 63 13 00 00 e7 06 00 00 00 00 00 00 b5 12 00 00 4f 11 00 00 a3 08 00 00 93 0b 00 00 | h...c...............O........... |
16e60 | 8d 12 00 00 85 0c 00 00 00 00 00 00 00 00 00 00 00 06 00 00 58 0e 00 00 f2 0e 00 00 70 00 00 00 | ....................X.......p... |
16e80 | f0 02 00 00 99 11 00 00 eb 01 00 00 98 0e 00 00 5f 0e 00 00 43 0f 00 00 00 00 00 00 3c 13 00 00 | ................_...C.......<... |
16ea0 | 16 04 00 00 ef 0e 00 00 2f 11 00 00 50 12 00 00 b9 04 00 00 00 00 00 00 00 00 00 00 5f 03 00 00 | ......../...P..............._... |
16ec0 | 65 0a 00 00 51 01 00 00 00 00 00 00 77 0a 00 00 00 00 00 00 d9 02 00 00 61 0d 00 00 00 00 00 00 | e...Q.......w...........a....... |
16ee0 | 06 00 00 00 00 00 00 00 cb 11 00 00 c6 13 00 00 2b 0f 00 00 b1 03 00 00 d3 12 00 00 74 0f 00 00 | ................+...........t... |
16f00 | 1e 04 00 00 f3 02 00 00 98 0f 00 00 89 02 00 00 72 0a 00 00 00 00 00 00 34 11 00 00 00 00 00 00 | ................r.......4....... |
16f20 | 82 00 00 00 db 0f 00 00 5e 01 00 00 18 04 00 00 b0 05 00 00 05 0a 00 00 00 00 00 00 cc 04 00 00 | ........^....................... |
16f40 | 67 01 00 00 1e 06 00 00 5a 05 00 00 6f 11 00 00 00 00 00 00 9c 13 00 00 e0 09 00 00 54 12 00 00 | g.......Z...o...............T... |
16f60 | ff 07 00 00 5b 00 00 00 ea 12 00 00 24 0b 00 00 00 00 00 00 00 00 00 00 b9 0c 00 00 00 00 00 00 | ....[.......$................... |
16f80 | 90 0c 00 00 00 00 00 00 65 00 00 00 36 0a 00 00 4c 03 00 00 2d 08 00 00 e9 0e 00 00 00 00 00 00 | ........e...6...L...-........... |
16fa0 | 15 0e 00 00 15 01 00 00 00 00 00 00 0c 0d 00 00 af 08 00 00 00 00 00 00 15 08 00 00 7d 0e 00 00 | ............................}... |
16fc0 | 33 05 00 00 c9 0b 00 00 db 03 00 00 97 0d 00 00 bb 00 00 00 31 02 00 00 2f 0e 00 00 2e 06 00 00 | 3...................1.../....... |
16fe0 | 48 00 00 00 00 00 00 00 c7 10 00 00 62 11 00 00 d9 13 00 00 e8 05 00 00 4c 0c 00 00 c5 12 00 00 | H...........b...........L....... |
17000 | 81 0a 00 00 d6 0e 00 00 00 00 00 00 3a 13 00 00 75 01 00 00 f1 0e 00 00 00 00 00 00 00 00 00 00 | ............:...u............... |
17020 | 6a 12 00 00 b1 0b 00 00 0c 05 00 00 8d 08 00 00 00 00 00 00 ae 10 00 00 00 00 00 00 00 00 00 00 | j............................... |
17040 | 97 05 00 00 bf 01 00 00 e0 03 00 00 34 07 00 00 00 00 00 00 92 0b 00 00 00 00 00 00 bf 00 00 00 | ............4................... |
17060 | 00 00 00 00 ea 02 00 00 96 02 00 00 6e 13 00 00 71 0a 00 00 10 02 00 00 00 00 00 00 e3 03 00 00 | ............n...q............... |
17080 | e8 11 00 00 00 00 00 00 ba 0a 00 00 00 00 00 00 62 0b 00 00 f6 08 00 00 00 00 00 00 d3 00 00 00 | ................b............... |
170a0 | 67 08 00 00 00 00 00 00 99 0a 00 00 bb 0c 00 00 ee 05 00 00 00 00 00 00 ba 0f 00 00 b9 06 00 00 | g............................... |
170c0 | 76 13 00 00 82 12 00 00 c9 0f 00 00 54 05 00 00 6a 0b 00 00 c7 12 00 00 00 00 00 00 00 00 00 00 | v...........T...j............... |
170e0 | 00 00 00 00 d3 05 00 00 6a 08 00 00 00 00 00 00 39 11 00 00 07 12 00 00 5d 13 00 00 00 00 00 00 | ........j.......9.......]....... |
17100 | ff 04 00 00 17 0e 00 00 4a 0b 00 00 88 05 00 00 35 11 00 00 ac 10 00 00 82 04 00 00 a7 08 00 00 | ........J.......5............... |
17120 | a7 0d 00 00 77 00 00 00 2b 09 00 00 6e 0c 00 00 28 07 00 00 d1 11 00 00 0d 11 00 00 00 00 00 00 | ....w...+...n...(............... |
17140 | 00 00 00 00 00 00 00 00 62 06 00 00 1f 03 00 00 5f 0c 00 00 00 00 00 00 f6 0e 00 00 5b 12 00 00 | ........b......._...........[... |
17160 | 3e 0d 00 00 7f 08 00 00 aa 0a 00 00 44 0c 00 00 db 08 00 00 00 00 00 00 35 02 00 00 96 0e 00 00 | >...........D...........5....... |
17180 | 94 03 00 00 4f 05 00 00 00 00 00 00 86 02 00 00 00 00 00 00 13 05 00 00 a3 11 00 00 dd 03 00 00 | ....O........................... |
171a0 | 08 01 00 00 e8 03 00 00 00 00 00 00 93 0e 00 00 d3 0e 00 00 53 12 00 00 14 08 00 00 77 0c 00 00 | ....................S.......w... |
171c0 | 00 00 00 00 3f 11 00 00 ff 12 00 00 47 04 00 00 4b 03 00 00 d3 0c 00 00 00 00 00 00 f6 01 00 00 | ....?.......G...K............... |
171e0 | 68 04 00 00 19 06 00 00 00 00 00 00 3b 0d 00 00 8b 09 00 00 fb 0b 00 00 00 00 00 00 00 00 00 00 | h...........;................... |
17200 | 00 00 00 00 24 12 00 00 53 02 00 00 24 0d 00 00 00 00 00 00 00 00 00 00 9a 0a 00 00 00 00 00 00 | ....$...S...$................... |
17220 | 1b 0e 00 00 00 00 00 00 27 02 00 00 00 00 00 00 07 05 00 00 6e 09 00 00 38 0f 00 00 48 12 00 00 | ........'...........n...8...H... |
17240 | 53 0a 00 00 d3 02 00 00 60 12 00 00 6c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 0a 00 00 | S.......`...l................... |
17260 | 8e 08 00 00 54 03 00 00 db 11 00 00 f7 05 00 00 c8 12 00 00 9b 11 00 00 da 08 00 00 6d 03 00 00 | ....T.......................m... |
17280 | 2a 0a 00 00 79 11 00 00 94 10 00 00 bc 0e 00 00 00 00 00 00 2b 11 00 00 8a 13 00 00 c6 0f 00 00 | *...y...............+........... |
172a0 | 00 00 00 00 84 09 00 00 00 00 00 00 00 00 00 00 58 12 00 00 00 00 00 00 92 12 00 00 8f 13 00 00 | ................X............... |
172c0 | 23 11 00 00 26 07 00 00 00 00 00 00 f8 02 00 00 00 00 00 00 10 12 00 00 00 00 00 00 46 0b 00 00 | #...&.......................F... |
172e0 | c9 0c 00 00 ab 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4d 07 00 00 00 00 00 00 93 01 00 00 | ....................M........... |
17300 | 64 06 00 00 d0 0f 00 00 00 00 00 00 f7 12 00 00 00 00 00 00 56 0c 00 00 93 0a 00 00 3b 12 00 00 | d...................V.......;... |
17320 | 87 0e 00 00 a8 03 00 00 00 00 00 00 50 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 0d 00 00 | ............P................... |
17340 | 27 13 00 00 bb 03 00 00 86 10 00 00 71 01 00 00 00 00 00 00 00 00 00 00 2f 10 00 00 00 00 00 00 | '...........q.........../....... |
17360 | 00 00 00 00 2a 0c 00 00 00 00 00 00 00 00 00 00 0d 00 00 00 9e 03 00 00 43 02 00 00 ba 11 00 00 | ....*...................C....... |
17380 | ff 0f 00 00 00 00 00 00 64 13 00 00 1e 0c 00 00 e5 0b 00 00 00 00 00 00 cb 01 00 00 1c 10 00 00 | ........d....................... |
173a0 | 36 09 00 00 85 09 00 00 00 00 00 00 00 00 00 00 70 10 00 00 d7 0b 00 00 64 03 00 00 e8 07 00 00 | 6...............p.......d....... |
173c0 | c6 01 00 00 8e 00 00 00 97 07 00 00 4f 08 00 00 00 00 00 00 5e 0c 00 00 00 00 00 00 3d 0e 00 00 | ............O.......^.......=... |
173e0 | 0d 07 00 00 00 00 00 00 13 0b 00 00 78 05 00 00 8f 0e 00 00 13 0d 00 00 54 06 00 00 bf 0a 00 00 | ............x...........T....... |
17400 | 29 10 00 00 9f 13 00 00 00 00 00 00 00 00 00 00 ee 02 00 00 88 03 00 00 90 0d 00 00 00 00 00 00 | )............................... |
17420 | 00 00 00 00 c4 05 00 00 0a 02 00 00 18 0f 00 00 86 09 00 00 11 11 00 00 09 03 00 00 00 00 00 00 | ................................ |
17440 | d9 03 00 00 52 11 00 00 92 07 00 00 b4 11 00 00 00 00 00 00 25 0f 00 00 cf 13 00 00 f3 12 00 00 | ....R...............%........... |
17460 | 20 05 00 00 77 08 00 00 81 10 00 00 d3 03 00 00 80 03 00 00 af 09 00 00 56 0b 00 00 00 00 00 00 | ....w...................V....... |
17480 | 43 01 00 00 f4 0d 00 00 98 06 00 00 00 00 00 00 3e 0f 00 00 b3 0e 00 00 df 0f 00 00 00 00 00 00 | C...............>............... |
174a0 | b7 0f 00 00 00 0a 00 00 00 00 00 00 da 0b 00 00 95 08 00 00 00 00 00 00 3a 0a 00 00 00 00 00 00 | ........................:....... |
174c0 | be 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 45 08 00 00 70 04 00 00 18 0d 00 00 59 12 00 00 | ................E...p.......Y... |
174e0 | 78 0e 00 00 ad 11 00 00 00 07 00 00 08 13 00 00 23 07 00 00 e8 0f 00 00 00 00 00 00 5f 06 00 00 | x...............#..........._... |
17500 | d6 12 00 00 cf 0c 00 00 89 0d 00 00 c1 0a 00 00 00 00 00 00 00 00 00 00 7f 00 00 00 64 02 00 00 | ............................d... |
17520 | 4f 0c 00 00 72 09 00 00 00 00 00 00 40 12 00 00 cb 00 00 00 17 13 00 00 71 0b 00 00 00 00 00 00 | O...r.......@...........q....... |
17540 | cd 06 00 00 00 00 00 00 00 00 00 00 2c 05 00 00 00 00 00 00 40 0a 00 00 00 00 00 00 96 0c 00 00 | ............,.......@........... |
17560 | d7 05 00 00 00 00 00 00 16 0a 00 00 d9 0d 00 00 68 01 00 00 d8 0d 00 00 52 0b 00 00 0f 00 00 00 | ................h.......R....... |
17580 | 0e 03 00 00 00 00 00 00 93 00 00 00 16 05 00 00 85 01 00 00 d9 00 00 00 be 07 00 00 13 04 00 00 | ................................ |
175a0 | 00 00 00 00 ec 05 00 00 00 00 00 00 ad 0d 00 00 04 11 00 00 00 00 00 00 74 0e 00 00 b0 0d 00 00 | ........................t....... |
175c0 | 3f 12 00 00 54 0f 00 00 e3 04 00 00 78 08 00 00 88 02 00 00 57 04 00 00 58 09 00 00 41 05 00 00 | ?...T.......x.......W...X...A... |
175e0 | 00 00 00 00 00 00 00 00 35 12 00 00 c9 10 00 00 00 00 00 00 00 00 00 00 e5 07 00 00 24 06 00 00 | ........5...................$... |
17600 | 00 00 00 00 4d 0b 00 00 10 11 00 00 50 0c 00 00 72 02 00 00 1f 01 00 00 00 00 00 00 3c 0e 00 00 | ....M.......P...r...........<... |
17620 | 6e 0f 00 00 00 00 00 00 a0 08 00 00 00 00 00 00 cd 0c 00 00 00 00 00 00 6b 0e 00 00 00 00 00 00 | n.......................k....... |
17640 | 7f 06 00 00 55 0a 00 00 1c 0c 00 00 78 13 00 00 2d 13 00 00 bf 0e 00 00 15 06 00 00 a1 08 00 00 | ....U.......x...-............... |
17660 | 3a 03 00 00 71 13 00 00 e5 0e 00 00 f2 09 00 00 aa 01 00 00 e3 0d 00 00 00 00 00 00 d1 0a 00 00 | :...q........................... |
17680 | 00 00 00 00 00 00 00 00 00 00 00 00 49 08 00 00 c7 0c 00 00 98 12 00 00 00 00 00 00 07 13 00 00 | ............I................... |
176a0 | 50 02 00 00 b7 03 00 00 00 00 00 00 59 03 00 00 00 00 00 00 00 00 00 00 77 02 00 00 42 0f 00 00 | P...........Y...........w...B... |
176c0 | 17 0a 00 00 37 07 00 00 00 00 00 00 b9 12 00 00 48 03 00 00 ed 05 00 00 17 0b 00 00 06 13 00 00 | ....7...........H............... |
176e0 | 28 12 00 00 4b 11 00 00 71 0c 00 00 00 00 00 00 4a 11 00 00 f1 03 00 00 00 00 00 00 1a 04 00 00 | (...K...q.......J............... |
17700 | bf 0c 00 00 2e 00 00 00 10 0b 00 00 77 10 00 00 00 00 00 00 00 00 00 00 5a 0a 00 00 00 00 00 00 | ............w...........Z....... |
17720 | 00 00 00 00 cd 13 00 00 3c 0d 00 00 c2 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 68 13 00 00 | ........<...................h... |
17740 | ed 0a 00 00 e4 09 00 00 00 00 00 00 00 00 00 00 c4 03 00 00 ce 09 00 00 73 12 00 00 00 00 00 00 | ........................s....... |
17760 | 00 00 00 00 db 0c 00 00 6a 04 00 00 5c 00 00 00 70 0c 00 00 77 11 00 00 68 03 00 00 00 00 00 00 | ........j...\...p...w...h....... |
17780 | 00 00 00 00 00 00 00 00 00 00 00 00 10 03 00 00 00 00 00 00 fa 0f 00 00 29 0b 00 00 35 06 00 00 | ........................)...5... |
177a0 | df 00 00 00 00 00 00 00 35 13 00 00 82 0d 00 00 2b 07 00 00 17 06 00 00 da 03 00 00 5f 0d 00 00 | ........5.......+..........._... |
177c0 | 44 09 00 00 59 0d 00 00 04 0e 00 00 36 13 00 00 21 13 00 00 a6 0a 00 00 3f 13 00 00 15 0d 00 00 | D...Y.......6...!.......?....... |
177e0 | 00 00 00 00 b7 11 00 00 4c 04 00 00 00 00 00 00 e0 11 00 00 12 12 00 00 00 00 00 00 7e 13 00 00 | ........L...................~... |
17800 | 78 04 00 00 74 0c 00 00 3f 0a 00 00 00 00 00 00 26 0a 00 00 00 00 00 00 1b 10 00 00 00 00 00 00 | x...t...?.......&............... |
17820 | e1 0b 00 00 cd 01 00 00 00 00 00 00 a4 0e 00 00 00 00 00 00 54 0c 00 00 00 00 00 00 84 0c 00 00 | ....................T........... |
17840 | da 13 00 00 30 0f 00 00 00 00 00 00 00 00 00 00 5e 0a 00 00 06 02 00 00 89 12 00 00 f2 03 00 00 | ....0...........^............... |
17860 | b1 10 00 00 6e 00 00 00 8b 0c 00 00 a6 0f 00 00 ef 04 00 00 00 00 00 00 00 00 00 00 b4 0c 00 00 | ....n........................... |
17880 | 00 00 00 00 1e 08 00 00 d0 0c 00 00 08 0c 00 00 c2 04 00 00 e1 09 00 00 f5 0e 00 00 fb 06 00 00 | ................................ |
178a0 | 48 13 00 00 bb 0d 00 00 f4 00 00 00 9e 04 00 00 00 00 00 00 00 00 00 00 45 0c 00 00 95 05 00 00 | H.......................E....... |
178c0 | d7 13 00 00 d0 0e 00 00 00 00 00 00 24 03 00 00 08 11 00 00 5f 13 00 00 00 00 00 00 48 02 00 00 | ............$......._.......H... |
178e0 | f9 03 00 00 19 11 00 00 27 10 00 00 d2 09 00 00 00 00 00 00 74 08 00 00 ce 0e 00 00 a2 0b 00 00 | ........'...........t........... |
17900 | 00 00 00 00 dd 0f 00 00 16 08 00 00 00 00 00 00 8e 07 00 00 c9 01 00 00 b4 05 00 00 a7 13 00 00 | ................................ |
17920 | 80 01 00 00 4e 02 00 00 f6 00 00 00 59 0b 00 00 00 00 00 00 20 0e 00 00 40 05 00 00 00 00 00 00 | ....N.......Y...........@....... |
17940 | ea 01 00 00 cb 12 00 00 f7 08 00 00 0b 09 00 00 00 00 00 00 00 00 00 00 6f 09 00 00 ad 0f 00 00 | ........................o....... |
17960 | 36 02 00 00 c2 12 00 00 03 02 00 00 34 0b 00 00 81 0d 00 00 0d 10 00 00 0b 07 00 00 e0 00 00 00 | 6...........4................... |
17980 | 00 00 00 00 dd 09 00 00 00 00 00 00 53 0f 00 00 00 00 00 00 00 00 00 00 f9 08 00 00 00 00 00 00 | ............S................... |
179a0 | 00 00 00 00 25 0a 00 00 63 06 00 00 00 00 00 00 be 04 00 00 00 00 00 00 a3 0f 00 00 67 12 00 00 | ....%...c...................g... |
179c0 | 34 09 00 00 ff 01 00 00 fe 0c 00 00 00 00 00 00 cf 12 00 00 9e 11 00 00 bc 13 00 00 bc 0f 00 00 | 4............................... |
179e0 | a4 04 00 00 56 03 00 00 f3 08 00 00 00 00 00 00 5b 08 00 00 00 00 00 00 00 00 00 00 6d 08 00 00 | ....V...........[...........m... |
17a00 | c0 0f 00 00 a4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cc 07 00 00 bd 0c 00 00 6f 0e 00 00 | ............................o... |
17a20 | 8c 02 00 00 8a 02 00 00 26 11 00 00 5a 09 00 00 00 00 00 00 49 0f 00 00 ce 0f 00 00 00 00 00 00 | ........&...Z.......I........... |
17a40 | 8c 03 00 00 7e 0a 00 00 00 00 00 00 08 04 00 00 a1 04 00 00 a7 0a 00 00 40 09 00 00 04 00 00 00 | ....~...................@....... |
17a60 | 2b 0b 00 00 00 00 00 00 1d 13 00 00 22 0c 00 00 10 09 00 00 07 10 00 00 00 00 00 00 6e 04 00 00 | +..........."...............n... |
17a80 | 5a 08 00 00 b9 03 00 00 0d 0b 00 00 09 06 00 00 00 00 00 00 00 00 00 00 2d 09 00 00 99 09 00 00 | Z.......................-....... |
17aa0 | 8f 11 00 00 1a 0e 00 00 c7 09 00 00 09 0e 00 00 5d 11 00 00 23 00 00 00 66 12 00 00 58 00 00 00 | ................]...#...f...X... |
17ac0 | ea 13 00 00 ad 0b 00 00 00 00 00 00 fd 07 00 00 9a 0d 00 00 07 07 00 00 00 00 00 00 00 00 00 00 | ................................ |
17ae0 | 38 05 00 00 cf 01 00 00 00 00 00 00 75 0b 00 00 ce 01 00 00 00 00 00 00 dd 10 00 00 b2 03 00 00 | 8...........u................... |
17b00 | 00 00 00 00 c3 04 00 00 00 00 00 00 00 00 00 00 d7 03 00 00 f7 10 00 00 a5 06 00 00 50 13 00 00 | ............................P... |
17b20 | 00 00 00 00 4f 06 00 00 a5 11 00 00 f3 0f 00 00 7b 0d 00 00 6f 0a 00 00 67 06 00 00 b0 00 00 00 | ....O...........{...o...g....... |
17b40 | 30 06 00 00 fc 03 00 00 9b 09 00 00 22 0d 00 00 ce 12 00 00 29 0f 00 00 7e 08 00 00 2d 02 00 00 | 0...........".......)...~...-... |
17b60 | 00 00 00 00 95 0e 00 00 29 11 00 00 af 02 00 00 00 00 00 00 ef 06 00 00 31 00 00 00 20 13 00 00 | ........)...............1....... |
17b80 | ea 10 00 00 00 00 00 00 6d 01 00 00 00 00 00 00 84 04 00 00 1c 02 00 00 0f 06 00 00 00 00 00 00 | ........m....................... |
17ba0 | df 0d 00 00 aa 07 00 00 ae 04 00 00 00 00 00 00 a1 0b 00 00 63 0a 00 00 e6 02 00 00 00 00 00 00 | ....................c........... |
17bc0 | 7e 01 00 00 3f 02 00 00 7a 04 00 00 82 11 00 00 c2 00 00 00 91 09 00 00 00 00 00 00 c6 11 00 00 | ~...?...z....................... |
17be0 | 97 09 00 00 e2 04 00 00 00 00 00 00 5b 11 00 00 fc 0f 00 00 b4 04 00 00 22 12 00 00 df 0a 00 00 | ............[..........."....... |
17c00 | 00 00 00 00 ce 0a 00 00 a0 00 00 00 bb 08 00 00 21 0e 00 00 28 0d 00 00 00 00 00 00 07 0c 00 00 | ................!...(........... |
17c20 | f4 05 00 00 00 00 00 00 ba 0d 00 00 80 05 00 00 00 00 00 00 cc 03 00 00 09 0f 00 00 09 08 00 00 | ................................ |
17c40 | 00 00 00 00 e5 06 00 00 75 08 00 00 bf 10 00 00 00 00 00 00 23 02 00 00 37 00 00 00 8f 08 00 00 | ........u...........#...7....... |
17c60 | cd 0a 00 00 41 0d 00 00 09 13 00 00 21 0c 00 00 04 0a 00 00 ff 09 00 00 00 00 00 00 34 0f 00 00 | ....A.......!...............4... |
17c80 | b4 0e 00 00 00 00 00 00 29 01 00 00 7f 0f 00 00 00 00 00 00 00 00 00 00 d1 0c 00 00 c5 08 00 00 | ........)....................... |
17ca0 | f8 08 00 00 06 09 00 00 db 07 00 00 1d 0b 00 00 ad 01 00 00 a2 12 00 00 8a 0f 00 00 b3 08 00 00 | ................................ |
17cc0 | de 0e 00 00 b7 10 00 00 7f 0d 00 00 59 10 00 00 00 00 00 00 10 10 00 00 20 00 00 00 00 00 00 00 | ............Y................... |
17ce0 | 61 06 00 00 80 10 00 00 00 00 00 00 00 00 00 00 e9 02 00 00 fb 0c 00 00 00 00 00 00 9f 00 00 00 | a............................... |
17d00 | 7d 0b 00 00 dd 0a 00 00 2e 09 00 00 4d 13 00 00 fa 07 00 00 2f 00 00 00 00 00 00 00 3b 01 00 00 | }...........M......./.......;... |
17d20 | 03 0e 00 00 00 00 00 00 00 00 00 00 7c 10 00 00 16 0c 00 00 a2 10 00 00 a6 04 00 00 dd 07 00 00 | ............|................... |
17d40 | 00 00 00 00 bd 09 00 00 e9 13 00 00 5d 0c 00 00 30 0b 00 00 e1 11 00 00 71 12 00 00 1b 0d 00 00 | ............]...0.......q....... |
17d60 | 00 00 00 00 1b 02 00 00 9a 0c 00 00 00 00 00 00 94 0b 00 00 3c 10 00 00 34 00 00 00 97 00 00 00 | ....................<...4....... |
17d80 | 00 00 00 00 4a 04 00 00 c9 04 00 00 2e 0d 00 00 d9 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....J........................... |
17da0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 00 00 80 09 00 00 b9 0d 00 00 ee 04 00 00 10 08 00 00 | ................................ |
17dc0 | d6 02 00 00 eb 07 00 00 90 0a 00 00 99 04 00 00 1f 0e 00 00 6f 05 00 00 47 06 00 00 00 00 00 00 | ....................o...G....... |
17de0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 95 13 00 00 00 00 00 00 f1 13 00 00 55 0c 00 00 | ............................U... |
17e00 | 08 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6f 00 00 00 59 11 00 00 54 08 00 00 13 13 00 00 | ................o...Y...T....... |
17e20 | 27 06 00 00 00 00 00 00 00 00 00 00 13 0c 00 00 0d 0a 00 00 40 01 00 00 00 00 00 00 ae 03 00 00 | '...................@........... |
17e40 | 00 00 00 00 ef 11 00 00 ab 13 00 00 61 03 00 00 00 00 00 00 00 00 00 00 78 0b 00 00 e9 08 00 00 | ............a...........x....... |
17e60 | f5 09 00 00 52 12 00 00 de 0d 00 00 c4 0e 00 00 00 00 00 00 00 00 00 00 ca 10 00 00 44 02 00 00 | ....R.......................D... |
17e80 | 09 0a 00 00 65 09 00 00 29 13 00 00 00 00 00 00 65 08 00 00 a3 0e 00 00 87 02 00 00 fd 03 00 00 | ....e...).......e............... |
17ea0 | 00 00 00 00 13 00 00 00 0b 0b 00 00 fe 11 00 00 00 00 00 00 68 11 00 00 20 03 00 00 93 13 00 00 | ....................h........... |
17ec0 | 36 01 00 00 8b 12 00 00 c6 0e 00 00 ea 0c 00 00 06 07 00 00 f1 05 00 00 33 13 00 00 9d 07 00 00 | 6.......................3....... |
17ee0 | 87 12 00 00 ba 06 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 db 0b 00 00 63 05 00 00 ea 0b 00 00 | ........"...............c....... |
17f00 | 77 05 00 00 94 11 00 00 4c 01 00 00 4e 11 00 00 0f 10 00 00 9a 0e 00 00 b2 0f 00 00 00 00 00 00 | w.......L...N................... |
17f20 | 00 00 00 00 a5 13 00 00 5f 11 00 00 c7 0b 00 00 6d 04 00 00 f6 0f 00 00 00 00 00 00 00 00 00 00 | ........_.......m............... |
17f40 | 00 00 00 00 00 00 00 00 91 10 00 00 12 04 00 00 13 08 00 00 f0 0a 00 00 c9 09 00 00 65 0b 00 00 | ............................e... |
17f60 | a5 04 00 00 41 0a 00 00 77 01 00 00 00 00 00 00 97 12 00 00 45 13 00 00 00 00 00 00 4d 08 00 00 | ....A...w...........E.......M... |
17f80 | cb 05 00 00 00 00 00 00 a1 0c 00 00 ef 02 00 00 24 11 00 00 80 0d 00 00 00 00 00 00 9b 0d 00 00 | ................$............... |
17fa0 | 00 00 00 00 a5 12 00 00 b1 11 00 00 7c 07 00 00 00 00 00 00 00 00 00 00 88 12 00 00 f8 0b 00 00 | ............|................... |
17fc0 | b5 0c 00 00 4e 04 00 00 00 00 00 00 f5 0d 00 00 00 00 00 00 9d 12 00 00 f6 0d 00 00 9d 11 00 00 | ....N........................... |
17fe0 | d3 0d 00 00 00 00 00 00 00 00 00 00 21 00 00 00 39 09 00 00 93 06 00 00 3b 0e 00 00 00 00 00 00 | ............!...9.......;....... |
18000 | 00 00 00 00 16 13 00 00 73 09 00 00 0e 12 00 00 00 00 00 00 76 08 00 00 0c 13 00 00 5b 0e 00 00 | ........s...........v.......[... |
18020 | 5f 04 00 00 00 00 00 00 e2 0e 00 00 9d 0d 00 00 e9 0b 00 00 00 00 00 00 52 0d 00 00 d3 11 00 00 | _.......................R....... |
18040 | 85 0e 00 00 76 0f 00 00 9a 05 00 00 43 06 00 00 fa 0b 00 00 00 00 00 00 72 01 00 00 00 00 00 00 | ....v.......C...........r....... |
18060 | d4 07 00 00 3a 0f 00 00 37 0c 00 00 de 0f 00 00 00 00 00 00 8e 06 00 00 00 00 00 00 00 00 00 00 | ....:...7....................... |
18080 | 00 13 00 00 00 00 00 00 00 00 00 00 8d 09 00 00 90 00 00 00 9f 01 00 00 a4 09 00 00 13 09 00 00 | ................................ |
180a0 | b2 0e 00 00 24 0e 00 00 99 07 00 00 70 03 00 00 8b 0d 00 00 8a 03 00 00 73 0f 00 00 1d 10 00 00 | ....$.......p...........s....... |
180c0 | 00 00 00 00 c2 11 00 00 89 06 00 00 65 0d 00 00 3b 0b 00 00 51 07 00 00 39 0e 00 00 fd 0b 00 00 | ............e...;...Q...9....... |
180e0 | 23 04 00 00 00 00 00 00 dd 0e 00 00 54 07 00 00 4d 12 00 00 0b 08 00 00 00 00 00 00 cb 06 00 00 | #...........T...M............... |
18100 | c3 06 00 00 3d 07 00 00 c7 13 00 00 a8 05 00 00 72 0e 00 00 bd 0a 00 00 00 00 00 00 93 09 00 00 | ....=...........r............... |
18120 | 00 00 00 00 58 06 00 00 41 11 00 00 92 0e 00 00 00 00 00 00 8a 06 00 00 d1 10 00 00 1a 12 00 00 | ....X...A....................... |
18140 | 00 00 00 00 0f 11 00 00 8b 13 00 00 7f 10 00 00 e2 0f 00 00 13 07 00 00 f3 0a 00 00 e4 11 00 00 | ................................ |
18160 | 96 03 00 00 00 00 00 00 50 04 00 00 2d 0f 00 00 73 06 00 00 00 00 00 00 78 07 00 00 11 05 00 00 | ........P...-...s.......x....... |
18180 | 00 00 00 00 c1 05 00 00 1e 0a 00 00 3f 0f 00 00 00 00 00 00 c3 0b 00 00 2f 0d 00 00 87 05 00 00 | ............?.........../....... |
181a0 | 00 00 00 00 9e 07 00 00 23 0f 00 00 1a 0b 00 00 00 00 00 00 de 05 00 00 00 00 00 00 00 00 00 00 | ........#....................... |
181c0 | ed 11 00 00 7b 12 00 00 00 00 00 00 40 04 00 00 78 01 00 00 57 07 00 00 02 0a 00 00 bd 0d 00 00 | ....{.......@...x...W........... |
181e0 | 06 12 00 00 e2 0b 00 00 00 00 00 00 ec 0e 00 00 ca 06 00 00 b9 11 00 00 6f 10 00 00 00 00 00 00 | ........................o....... |
18200 | 00 00 00 00 91 0c 00 00 00 00 00 00 7f 0b 00 00 29 0a 00 00 00 00 00 00 8a 01 00 00 c1 13 00 00 | ................)............... |
18220 | a7 0e 00 00 d5 03 00 00 77 09 00 00 9c 01 00 00 2a 12 00 00 00 00 00 00 a3 03 00 00 00 00 00 00 | ........w.......*............... |
18240 | 00 00 00 00 e8 0b 00 00 23 12 00 00 45 11 00 00 be 02 00 00 a1 05 00 00 6b 03 00 00 00 00 00 00 | ........#...E...........k....... |
18260 | 70 12 00 00 00 12 00 00 21 03 00 00 00 00 00 00 26 05 00 00 86 07 00 00 00 00 00 00 00 00 00 00 | p.......!.......&............... |
18280 | aa 06 00 00 00 00 00 00 b6 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba 0e 00 00 ce 02 00 00 | ................................ |
182a0 | 59 04 00 00 04 0d 00 00 d5 04 00 00 00 00 00 00 dc 0d 00 00 38 0c 00 00 c4 0f 00 00 7a 00 00 00 | Y...................8.......z... |
182c0 | 8f 04 00 00 2e 0c 00 00 48 0f 00 00 99 01 00 00 19 08 00 00 01 12 00 00 3a 12 00 00 05 13 00 00 | ........H...............:....... |
182e0 | ac 0c 00 00 ac 0f 00 00 00 00 00 00 dc 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 11 00 00 | ................................ |
18300 | 1d 09 00 00 5d 0e 00 00 a8 0e 00 00 9f 0d 00 00 85 05 00 00 d5 0c 00 00 73 0a 00 00 20 07 00 00 | ....]...................s....... |
18320 | d6 0b 00 00 72 0b 00 00 35 0d 00 00 7e 00 00 00 2e 12 00 00 83 13 00 00 e0 01 00 00 9a 08 00 00 | ....r...5...~................... |
18340 | 57 0e 00 00 b6 02 00 00 92 13 00 00 20 12 00 00 1a 10 00 00 87 13 00 00 0f 02 00 00 dc 12 00 00 | W............................... |
18360 | 00 00 00 00 cd 07 00 00 00 00 00 00 3d 12 00 00 00 00 00 00 ec 11 00 00 d4 08 00 00 41 12 00 00 | ............=...............A... |
18380 | 00 00 00 00 00 00 00 00 ab 07 00 00 bc 09 00 00 79 0a 00 00 0c 06 00 00 00 00 00 00 00 00 00 00 | ................y............... |
183a0 | 00 00 00 00 46 00 00 00 06 10 00 00 00 00 00 00 79 09 00 00 00 00 00 00 5e 0f 00 00 67 00 00 00 | ....F...........y.......^...g... |
183c0 | 00 00 00 00 26 10 00 00 45 0e 00 00 00 00 00 00 68 0a 00 00 e1 01 00 00 46 0a 00 00 d4 10 00 00 | ....&...E.......h.......F....... |
183e0 | 00 00 00 00 75 0d 00 00 00 00 00 00 c0 02 00 00 16 0d 00 00 55 04 00 00 62 10 00 00 57 0c 00 00 | ....u...............U...b...W... |
18400 | 00 00 00 00 00 00 00 00 00 00 00 00 2a 13 00 00 e3 0e 00 00 bd 12 00 00 00 00 00 00 95 03 00 00 | ............*................... |
18420 | 90 0e 00 00 8d 0d 00 00 00 00 00 00 0b 03 00 00 ae 0e 00 00 ff 06 00 00 7a 07 00 00 00 00 00 00 | ........................z....... |
18440 | ba 12 00 00 00 00 00 00 5e 12 00 00 db 02 00 00 d0 12 00 00 5e 09 00 00 e1 05 00 00 48 04 00 00 | ........^...........^.......H... |
18460 | 1b 05 00 00 2f 0b 00 00 00 00 00 00 c3 11 00 00 97 06 00 00 b8 0c 00 00 10 0e 00 00 b1 0a 00 00 | ..../........................... |
18480 | d7 06 00 00 9a 02 00 00 ca 0e 00 00 ba 08 00 00 15 0b 00 00 c6 07 00 00 00 00 00 00 6b 09 00 00 | ............................k... |
184a0 | ae 0f 00 00 c1 02 00 00 00 00 00 00 49 0e 00 00 00 00 00 00 8e 0a 00 00 00 00 00 00 13 0e 00 00 | ............I................... |
184c0 | 00 00 00 00 56 09 00 00 3d 0c 00 00 00 00 00 00 fb 02 00 00 00 00 00 00 a2 0f 00 00 aa 04 00 00 | ....V...=....................... |
184e0 | 86 00 00 00 b8 06 00 00 00 00 00 00 aa 03 00 00 04 0c 00 00 00 00 00 00 3e 13 00 00 bf 13 00 00 | ........................>....... |
18500 | c6 12 00 00 a3 04 00 00 4d 03 00 00 1f 09 00 00 87 09 00 00 c4 02 00 00 d5 11 00 00 37 03 00 00 | ........M...................7... |
18520 | 00 00 00 00 f0 07 00 00 7d 01 00 00 50 01 00 00 62 02 00 00 bf 0d 00 00 40 11 00 00 1f 08 00 00 | ........}...P...b.......@....... |
18540 | cf 06 00 00 28 09 00 00 00 00 00 00 00 00 00 00 8a 12 00 00 3d 05 00 00 d9 06 00 00 15 00 00 00 | ....(...............=........... |
18560 | f0 0e 00 00 ae 13 00 00 00 00 00 00 30 0e 00 00 40 00 00 00 00 00 00 00 f3 09 00 00 35 00 00 00 | ............0...@...........5... |
18580 | 13 12 00 00 1f 07 00 00 a8 0a 00 00 2e 03 00 00 1d 0e 00 00 ab 05 00 00 cc 0a 00 00 54 10 00 00 | ............................T... |
185a0 | 58 0d 00 00 23 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 05 00 00 e4 0f 00 00 05 12 00 00 | X...#...............C........... |
185c0 | 88 0f 00 00 4d 00 00 00 5a 03 00 00 44 07 00 00 96 01 00 00 00 00 00 00 31 07 00 00 fc 06 00 00 | ....M...Z...D...........1....... |
185e0 | 34 0e 00 00 53 01 00 00 00 00 00 00 d6 0c 00 00 11 00 00 00 33 0c 00 00 53 06 00 00 00 00 00 00 | 4...S...............3...S....... |
18600 | 00 00 00 00 00 00 00 00 b4 13 00 00 63 08 00 00 00 00 00 00 a0 10 00 00 fc 12 00 00 57 10 00 00 | ............c...............W... |
18620 | 42 03 00 00 00 0b 00 00 32 12 00 00 e5 0f 00 00 00 00 00 00 b2 0a 00 00 76 0b 00 00 83 01 00 00 | B.......2...............v....... |
18640 | 7e 02 00 00 cc 08 00 00 aa 13 00 00 a6 0d 00 00 00 00 00 00 01 10 00 00 00 00 00 00 8b 05 00 00 | ~............................... |
18660 | 00 00 00 00 00 00 00 00 9e 06 00 00 a8 04 00 00 00 00 00 00 6e 0e 00 00 87 10 00 00 cc 0d 00 00 | ....................n........... |
18680 | 2e 01 00 00 8b 01 00 00 1e 0d 00 00 00 00 00 00 00 00 00 00 a7 03 00 00 00 00 00 00 7d 05 00 00 | ............................}... |
186a0 | 12 0f 00 00 52 0f 00 00 de 03 00 00 e1 0e 00 00 b4 02 00 00 67 0d 00 00 a0 0d 00 00 c2 0b 00 00 | ....R...............g........... |
186c0 | b8 00 00 00 27 07 00 00 6c 04 00 00 bb 10 00 00 c5 00 00 00 ca 11 00 00 be 0b 00 00 2e 11 00 00 | ....'...l....................... |
186e0 | 54 00 00 00 42 05 00 00 f8 04 00 00 b6 0b 00 00 00 00 00 00 35 0e 00 00 00 00 00 00 4f 0a 00 00 | T...B...............5.......O... |
18700 | 00 00 00 00 d2 02 00 00 00 00 00 00 5d 06 00 00 15 03 00 00 82 02 00 00 8c 06 00 00 00 00 00 00 | ............]................... |
18720 | 22 0b 00 00 a9 10 00 00 79 07 00 00 c5 10 00 00 ed 0d 00 00 2b 0a 00 00 bb 0e 00 00 5a 00 00 00 | ".......y...........+.......Z... |
18740 | 00 00 00 00 40 02 00 00 3e 09 00 00 00 00 00 00 53 10 00 00 ab 0d 00 00 a1 03 00 00 00 00 00 00 | ....@...>.......S............... |
18760 | 00 00 00 00 00 00 00 00 8a 0a 00 00 7d 0f 00 00 7a 03 00 00 00 00 00 00 61 00 00 00 38 10 00 00 | ............}...z.......a...8... |
18780 | 00 00 00 00 9a 0b 00 00 79 12 00 00 00 00 00 00 00 00 00 00 18 05 00 00 60 0a 00 00 4b 00 00 00 | ........y...............`...K... |
187a0 | a2 05 00 00 d3 0b 00 00 00 00 00 00 8e 02 00 00 04 06 00 00 82 06 00 00 00 00 00 00 30 13 00 00 | ............................0... |
187c0 | 00 00 00 00 d4 06 00 00 42 0a 00 00 22 00 00 00 a1 06 00 00 81 06 00 00 09 09 00 00 b9 01 00 00 | ........B..."................... |
187e0 | 59 08 00 00 cc 00 00 00 00 00 00 00 bb 0b 00 00 37 0f 00 00 8d 10 00 00 86 0c 00 00 03 04 00 00 | Y...............7............... |
18800 | b0 10 00 00 35 10 00 00 8c 0f 00 00 3f 07 00 00 00 00 00 00 04 08 00 00 b3 0f 00 00 00 00 00 00 | ....5.......?................... |
18820 | d2 13 00 00 ff 0b 00 00 9e 0d 00 00 9f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9a 11 00 00 | ................................ |
18840 | d1 04 00 00 09 0d 00 00 00 00 00 00 b7 12 00 00 00 00 00 00 00 00 00 00 43 0d 00 00 3f 10 00 00 | ........................C...?... |
18860 | 00 00 00 00 41 02 00 00 b1 04 00 00 ab 02 00 00 00 00 00 00 12 11 00 00 14 07 00 00 00 00 00 00 | ....A........................... |
18880 | 4a 01 00 00 00 00 00 00 f1 07 00 00 7a 10 00 00 9e 13 00 00 14 11 00 00 6a 0a 00 00 00 00 00 00 | J...........z...........j....... |
188a0 | 00 00 00 00 00 00 00 00 fa 06 00 00 00 00 00 00 00 00 00 00 ac 02 00 00 7f 09 00 00 00 00 00 00 | ................................ |
188c0 | 40 06 00 00 cb 0c 00 00 b7 0a 00 00 00 00 00 00 1c 0a 00 00 c3 02 00 00 ca 13 00 00 47 11 00 00 | @...........................G... |
188e0 | 00 00 00 00 00 00 00 00 00 00 00 00 71 03 00 00 5a 0f 00 00 00 00 00 00 08 07 00 00 3a 11 00 00 | ............q...Z...........:... |
18900 | 1e 09 00 00 42 06 00 00 8e 0b 00 00 4e 0d 00 00 8c 00 00 00 81 07 00 00 df 03 00 00 00 00 00 00 | ....B.......N................... |
18920 | 00 00 00 00 0c 10 00 00 46 0c 00 00 43 13 00 00 00 00 00 00 3e 0c 00 00 01 0c 00 00 be 12 00 00 | ........F...C.......>........... |
18940 | 00 00 00 00 38 0b 00 00 f2 07 00 00 6c 0f 00 00 df 07 00 00 c2 0e 00 00 a0 0c 00 00 00 00 00 00 | ....8.......l................... |
18960 | 00 00 00 00 00 00 00 00 49 0a 00 00 00 00 00 00 00 00 00 00 8e 10 00 00 9a 03 00 00 00 00 00 00 | ........I....................... |
18980 | be 0a 00 00 ea 0e 00 00 d2 0e 00 00 0a 11 00 00 39 10 00 00 c5 03 00 00 69 0d 00 00 60 03 00 00 | ................9.......i...`... |
189a0 | ba 0c 00 00 68 08 00 00 00 00 00 00 00 00 00 00 c5 11 00 00 ed 00 00 00 7c 01 00 00 ca 0a 00 00 | ....h...................|....... |
189c0 | f5 0c 00 00 96 13 00 00 64 09 00 00 a6 08 00 00 00 00 00 00 9e 00 00 00 64 11 00 00 00 00 00 00 | ........d...............d....... |
189e0 | 00 00 00 00 b6 0c 00 00 00 00 00 00 49 04 00 00 03 06 00 00 00 00 00 00 4a 03 00 00 c8 0d 00 00 | ............I...........J....... |
18a00 | f4 04 00 00 78 0d 00 00 e5 11 00 00 ff 08 00 00 01 0d 00 00 00 00 00 00 e7 10 00 00 ea 0d 00 00 | ....x........................... |
18a20 | 9d 00 00 00 da 01 00 00 c1 04 00 00 d4 00 00 00 33 02 00 00 76 0e 00 00 a0 0a 00 00 59 0f 00 00 | ................3...v.......Y... |
18a40 | 7b 0c 00 00 00 00 00 00 44 13 00 00 d6 00 00 00 eb 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | {.......D....................... |
18a60 | 00 04 00 00 49 03 00 00 bd 02 00 00 d3 10 00 00 4a 06 00 00 a5 0f 00 00 b3 09 00 00 a9 01 00 00 | ....I...........J............... |
18a80 | 51 04 00 00 87 11 00 00 00 00 00 00 00 00 00 00 76 06 00 00 dd 06 00 00 c9 06 00 00 a2 0d 00 00 | Q...............v............... |
18aa0 | ee 07 00 00 81 0e 00 00 00 00 00 00 8e 11 00 00 32 06 00 00 de 0b 00 00 e4 02 00 00 cf 08 00 00 | ................2............... |
18ac0 | 8b 0a 00 00 4f 04 00 00 00 00 00 00 35 03 00 00 a2 01 00 00 00 00 00 00 0e 06 00 00 c5 13 00 00 | ....O.......5................... |
18ae0 | 51 0e 00 00 33 0e 00 00 96 05 00 00 00 00 00 00 9d 08 00 00 61 10 00 00 4a 09 00 00 0e 10 00 00 | Q...3...............a...J....... |
18b00 | 00 00 00 00 b6 08 00 00 34 0d 00 00 1d 08 00 00 c9 11 00 00 54 09 00 00 55 0b 00 00 e7 0d 00 00 | ........4...........T...U....... |
18b20 | 00 00 00 00 38 0e 00 00 59 0e 00 00 00 00 00 00 b7 01 00 00 89 07 00 00 00 00 00 00 ac 07 00 00 | ....8...Y....................... |
18b40 | 00 00 00 00 6d 07 00 00 00 00 00 00 94 00 00 00 4b 09 00 00 00 00 00 00 ef 03 00 00 93 05 00 00 | ....m...........K............... |
18b60 | 42 0d 00 00 64 07 00 00 00 00 00 00 89 00 00 00 d9 0a 00 00 32 02 00 00 95 09 00 00 f4 07 00 00 | B...d...............2........... |
18b80 | f8 0a 00 00 3c 03 00 00 da 02 00 00 39 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0b 00 00 | ....<.......9................... |
18ba0 | 0f 0c 00 00 10 06 00 00 44 11 00 00 98 02 00 00 8a 0d 00 00 a4 0b 00 00 00 00 00 00 bf 09 00 00 | ........D....................... |
18bc0 | 00 00 00 00 00 00 00 00 00 00 00 00 8b 00 00 00 8f 02 00 00 2e 13 00 00 86 0d 00 00 44 0f 00 00 | ............................D... |
18be0 | 4c 0d 00 00 95 01 00 00 89 0b 00 00 70 0a 00 00 29 05 00 00 04 04 00 00 1e 12 00 00 05 04 00 00 | L...........p...)............... |
18c00 | da 09 00 00 06 04 00 00 d0 00 00 00 68 0d 00 00 48 11 00 00 15 11 00 00 e2 02 00 00 c3 10 00 00 | ............h...H............... |
18c20 | 00 00 00 00 11 0d 00 00 fe 0e 00 00 25 13 00 00 44 0b 00 00 5f 02 00 00 7b 11 00 00 3f 0d 00 00 | ............%...D..._...{...?... |
18c40 | 00 00 00 00 00 00 00 00 00 00 00 00 c7 01 00 00 00 00 00 00 2d 0a 00 00 80 0a 00 00 a9 0d 00 00 | ....................-........... |
18c60 | c7 07 00 00 77 13 00 00 2a 10 00 00 a2 06 00 00 2b 06 00 00 60 05 00 00 09 12 00 00 00 00 00 00 | ....w...*.......+...`........... |
18c80 | f3 00 00 00 b9 09 00 00 67 09 00 00 b2 02 00 00 18 0b 00 00 3b 13 00 00 75 07 00 00 00 00 00 00 | ........g...........;...u....... |
18ca0 | a5 0a 00 00 de 01 00 00 7b 09 00 00 93 0d 00 00 98 11 00 00 f8 05 00 00 00 00 00 00 55 12 00 00 | ........{...................U... |
18cc0 | f5 08 00 00 59 05 00 00 00 00 00 00 01 0b 00 00 86 13 00 00 b3 13 00 00 30 00 00 00 00 00 00 00 | ....Y...................0....... |
18ce0 | 23 13 00 00 00 00 00 00 85 0b 00 00 00 00 00 00 19 10 00 00 04 07 00 00 00 00 00 00 00 00 00 00 | #............................... |
18d00 | 98 04 00 00 d8 0b 00 00 99 10 00 00 39 0d 00 00 00 00 00 00 00 00 00 00 66 0c 00 00 00 00 00 00 | ............9...........f....... |
18d20 | 00 00 00 00 84 11 00 00 f8 0d 00 00 00 00 00 00 48 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................H............... |
18d40 | 3c 07 00 00 cc 13 00 00 00 00 00 00 44 08 00 00 c5 0c 00 00 dc 11 00 00 ef 00 00 00 2e 10 00 00 | <...........D................... |
18d60 | cf 09 00 00 00 00 00 00 00 00 00 00 bd 0b 00 00 13 10 00 00 13 0f 00 00 c2 08 00 00 92 03 00 00 | ................................ |
18d80 | d1 13 00 00 87 0c 00 00 00 00 00 00 44 05 00 00 0d 03 00 00 00 00 00 00 d0 08 00 00 0a 06 00 00 | ............D................... |
18da0 | 9a 12 00 00 0f 13 00 00 d5 0a 00 00 00 00 00 00 08 08 00 00 00 00 00 00 81 05 00 00 23 0a 00 00 | ............................#... |
18dc0 | a7 0f 00 00 c3 05 00 00 c1 11 00 00 83 05 00 00 b2 10 00 00 e8 01 00 00 62 09 00 00 00 00 00 00 | ........................b....... |
18de0 | 58 0f 00 00 71 07 00 00 12 08 00 00 08 09 00 00 fd 0f 00 00 79 10 00 00 b4 08 00 00 f4 01 00 00 | X...q...............y........... |
18e00 | ff 05 00 00 00 00 00 00 39 07 00 00 e9 01 00 00 44 0a 00 00 00 00 00 00 00 00 00 00 51 09 00 00 | ........9.......D...........Q... |
18e20 | a3 06 00 00 ea 07 00 00 e7 02 00 00 3c 11 00 00 4a 12 00 00 ec 06 00 00 52 01 00 00 00 00 00 00 | ............<...J.......R....... |
18e40 | da 06 00 00 04 0b 00 00 00 00 00 00 b7 04 00 00 00 00 00 00 07 0f 00 00 be 09 00 00 09 02 00 00 | ................................ |
18e60 | 00 00 00 00 ad 03 00 00 d8 02 00 00 00 00 00 00 00 00 00 00 b5 0b 00 00 fe 0a 00 00 00 00 00 00 | ................................ |
18e80 | 00 00 00 00 e3 0f 00 00 e6 13 00 00 18 0c 00 00 00 00 00 00 39 12 00 00 f6 0c 00 00 87 03 00 00 | ....................9........... |
18ea0 | c9 13 00 00 00 00 00 00 67 0b 00 00 ed 0b 00 00 20 0f 00 00 7b 02 00 00 73 05 00 00 d1 02 00 00 | ........g...........{...s....... |
18ec0 | 00 00 00 00 fb 0e 00 00 ab 01 00 00 d5 07 00 00 87 01 00 00 fe 04 00 00 00 00 00 00 00 00 00 00 | ................................ |
18ee0 | bb 12 00 00 fc 0b 00 00 52 05 00 00 ee 13 00 00 36 05 00 00 26 13 00 00 00 00 00 00 00 00 00 00 | ........R.......6...&........... |
18f00 | d2 10 00 00 96 0d 00 00 75 10 00 00 66 0a 00 00 0a 01 00 00 88 0c 00 00 7f 13 00 00 8b 04 00 00 | ........u...f................... |
18f20 | 00 00 00 00 83 0b 00 00 c2 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ab 0a 00 00 31 04 00 00 | ............................1... |
18f40 | 0a 05 00 00 00 00 00 00 f1 02 00 00 00 00 00 00 00 00 00 00 83 0f 00 00 10 0c 00 00 00 00 00 00 | ................................ |
18f60 | 9b 0e 00 00 db 04 00 00 55 0e 00 00 cf 04 00 00 7d 0d 00 00 00 00 00 00 8b 0e 00 00 00 00 00 00 | ........U.......}............... |
18f80 | 18 12 00 00 8d 02 00 00 18 0a 00 00 5c 03 00 00 00 00 00 00 d5 0f 00 00 d2 08 00 00 5c 12 00 00 | ............\...............\... |
18fa0 | ee 0b 00 00 e7 00 00 00 37 0a 00 00 22 06 00 00 e6 0b 00 00 cc 0f 00 00 00 00 00 00 b7 00 00 00 | ........7..."................... |
18fc0 | 00 00 00 00 69 02 00 00 95 11 00 00 6f 04 00 00 3d 00 00 00 00 00 00 00 dc 00 00 00 ce 11 00 00 | ....i.......o...=............... |
18fe0 | b9 0a 00 00 00 00 00 00 c8 10 00 00 16 0e 00 00 e7 0e 00 00 c6 04 00 00 3f 0b 00 00 8a 0b 00 00 | ........................?....... |
19000 | 19 0f 00 00 00 00 00 00 00 00 00 00 d0 04 00 00 00 00 00 00 e0 06 00 00 9e 0c 00 00 00 00 00 00 | ................................ |
19020 | 53 13 00 00 ea 03 00 00 4c 10 00 00 d3 08 00 00 57 01 00 00 00 00 00 00 00 00 00 00 d0 03 00 00 | S.......L.......W............... |
19040 | 76 05 00 00 18 0e 00 00 97 01 00 00 9b 0f 00 00 79 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | v...............y............... |
19060 | 94 08 00 00 00 00 00 00 ea 11 00 00 43 11 00 00 cd 0d 00 00 0a 0e 00 00 a6 10 00 00 7a 02 00 00 | ............C...............z... |
19080 | 00 00 00 00 4f 13 00 00 60 04 00 00 6e 07 00 00 0b 0e 00 00 9b 00 00 00 62 12 00 00 fc 02 00 00 | ....O...`...n...........b....... |
190a0 | 28 04 00 00 a0 05 00 00 9f 04 00 00 1c 08 00 00 b1 0c 00 00 f1 09 00 00 87 07 00 00 97 0b 00 00 | (............................... |
190c0 | 00 00 00 00 0a 09 00 00 32 01 00 00 96 00 00 00 0c 03 00 00 d5 08 00 00 00 00 00 00 1a 0f 00 00 | ........2....................... |
190e0 | 40 13 00 00 ae 0b 00 00 d6 0f 00 00 c3 0e 00 00 00 00 00 00 f7 11 00 00 00 00 00 00 00 00 00 00 | @............................... |
19100 | 3c 0a 00 00 00 00 00 00 54 0e 00 00 fe 06 00 00 f5 0a 00 00 00 00 00 00 95 02 00 00 e2 0c 00 00 | <.......T....................... |
19120 | d9 08 00 00 00 00 00 00 17 07 00 00 5e 0e 00 00 06 0c 00 00 c1 00 00 00 6b 02 00 00 85 06 00 00 | ............^...........k....... |
19140 | dc 06 00 00 dc 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a8 10 00 00 71 10 00 00 46 06 00 00 | ........................q...F... |
19160 | a2 09 00 00 ee 06 00 00 8a 05 00 00 0b 06 00 00 cf 00 00 00 4a 00 00 00 05 10 00 00 00 00 00 00 | ....................J........... |
19180 | 2a 0d 00 00 00 00 00 00 31 0f 00 00 91 0a 00 00 00 00 00 00 88 0e 00 00 00 00 00 00 a6 03 00 00 | *.......1....................... |
191a0 | 00 00 00 00 57 0f 00 00 00 00 00 00 97 03 00 00 00 00 00 00 7a 06 00 00 00 00 00 00 e3 12 00 00 | ....W...............z........... |
191c0 | 00 00 00 00 39 03 00 00 00 00 00 00 00 00 00 00 d6 10 00 00 e2 13 00 00 00 00 00 00 20 11 00 00 | ....9........................... |
191e0 | fe 08 00 00 7d 12 00 00 00 00 00 00 50 09 00 00 f9 0e 00 00 d5 0b 00 00 80 00 00 00 b3 0b 00 00 | ....}.......P................... |
19200 | f1 06 00 00 a1 13 00 00 bc 0d 00 00 79 0d 00 00 00 00 00 00 22 0e 00 00 00 00 00 00 00 00 00 00 | ............y......."........... |
19220 | 30 0c 00 00 00 00 00 00 4e 0a 00 00 68 05 00 00 69 12 00 00 00 00 00 00 00 00 00 00 90 07 00 00 | 0.......N...h...i............... |
19240 | 5b 0f 00 00 f2 0b 00 00 90 02 00 00 00 00 00 00 3c 04 00 00 00 00 00 00 3e 02 00 00 49 12 00 00 | [...............<.......>...I... |
19260 | 00 00 00 00 00 00 00 00 00 00 00 00 34 02 00 00 00 00 00 00 00 00 00 00 af 07 00 00 b4 07 00 00 | ............4................... |
19280 | ad 12 00 00 ca 07 00 00 ef 0d 00 00 b5 04 00 00 31 0c 00 00 f0 09 00 00 2a 00 00 00 0d 05 00 00 | ................1.......*....... |
192a0 | 67 03 00 00 2d 07 00 00 e6 0f 00 00 4c 0b 00 00 00 00 00 00 00 00 00 00 6d 09 00 00 00 00 00 00 | g...-.......L...........m....... |
192c0 | 00 00 00 00 5b 01 00 00 99 0d 00 00 55 10 00 00 cd 10 00 00 00 00 00 00 cd 11 00 00 71 05 00 00 | ....[.......U...............q... |
192e0 | 00 00 00 00 5f 07 00 00 00 00 00 00 00 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 78 12 00 00 | ...._.......................x... |
19300 | 01 0a 00 00 ec 10 00 00 74 04 00 00 00 00 00 00 cb 04 00 00 32 0a 00 00 d0 11 00 00 5c 0e 00 00 | ........t...........2.......\... |
19320 | e4 0c 00 00 3c 12 00 00 00 00 00 00 d5 0d 00 00 d6 11 00 00 ba 09 00 00 78 0f 00 00 00 00 00 00 | ....<...................x....... |
19340 | 6b 11 00 00 bd 05 00 00 6f 0d 00 00 06 06 00 00 00 00 00 00 00 00 00 00 89 03 00 00 30 10 00 00 | k.......o...................0... |
19360 | e2 0d 00 00 e8 00 00 00 50 0f 00 00 ed 07 00 00 00 00 00 00 07 08 00 00 00 00 00 00 ac 06 00 00 | ........P....................... |
19380 | 02 07 00 00 ac 09 00 00 60 08 00 00 9f 0a 00 00 d5 02 00 00 be 0f 00 00 e6 12 00 00 21 09 00 00 | ........`...................!... |
193a0 | 00 00 00 00 e9 00 00 00 df 09 00 00 6a 09 00 00 c6 03 00 00 00 00 00 00 4d 04 00 00 e2 01 00 00 | ............j...........M....... |
193c0 | 69 10 00 00 1a 00 00 00 5a 0e 00 00 00 00 00 00 f0 06 00 00 84 0a 00 00 50 0e 00 00 90 11 00 00 | i.......Z...............P....... |
193e0 | b0 06 00 00 83 07 00 00 26 08 00 00 47 0d 00 00 85 02 00 00 00 00 00 00 cd 02 00 00 34 03 00 00 | ........&...G...............4... |
19400 | 02 13 00 00 c4 00 00 00 c0 0c 00 00 00 00 00 00 5e 11 00 00 e1 0c 00 00 1f 02 00 00 37 13 00 00 | ................^...........7... |
19420 | 00 00 00 00 03 0a 00 00 4d 0f 00 00 e8 12 00 00 00 00 00 00 17 00 00 00 00 00 00 00 00 00 00 00 | ........M....................... |
19440 | 25 11 00 00 17 0d 00 00 00 00 00 00 f2 11 00 00 bb 13 00 00 1c 03 00 00 3d 13 00 00 1d 0c 00 00 | %.......................=....... |
19460 | 00 00 00 00 e6 01 00 00 7a 0d 00 00 72 07 00 00 00 00 00 00 66 00 00 00 da 0d 00 00 00 00 00 00 | ........z...r.......f........... |
19480 | 00 00 00 00 5e 05 00 00 5d 08 00 00 dd 11 00 00 00 00 00 00 b5 13 00 00 ad 09 00 00 00 00 00 00 | ....^...]....................... |
194a0 | e3 0c 00 00 85 00 00 00 a4 12 00 00 9d 03 00 00 ba 01 00 00 2d 06 00 00 48 0e 00 00 20 04 00 00 | ....................-...H....... |
194c0 | 47 08 00 00 2b 0d 00 00 3a 05 00 00 d3 07 00 00 94 09 00 00 43 0e 00 00 00 00 00 00 7c 08 00 00 | G...+...:...........C.......|... |
194e0 | 44 10 00 00 00 00 00 00 fa 0c 00 00 90 0f 00 00 03 00 00 00 00 00 00 00 26 12 00 00 f9 01 00 00 | D.......................&....... |
19500 | 7f 12 00 00 b4 0b 00 00 00 00 00 00 00 00 00 00 38 0a 00 00 16 0f 00 00 31 06 00 00 6b 0a 00 00 | ................8.......1...k... |
19520 | 0d 04 00 00 00 00 00 00 37 06 00 00 fd 01 00 00 b5 01 00 00 00 00 00 00 ef 05 00 00 e1 13 00 00 | ........7....................... |
19540 | ab 03 00 00 00 00 00 00 25 0e 00 00 3d 0d 00 00 00 00 00 00 68 06 00 00 24 0f 00 00 12 03 00 00 | ........%...=.......h...$....... |
19560 | 00 00 00 00 80 0f 00 00 4a 02 00 00 c3 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 72 12 00 00 | ........J...................r... |
19580 | bc 06 00 00 00 00 00 00 a9 0b 00 00 00 00 00 00 9d 13 00 00 27 0a 00 00 fd 0e 00 00 31 11 00 00 | ....................'.......1... |
195a0 | 07 0b 00 00 f6 11 00 00 80 07 00 00 9f 06 00 00 52 0c 00 00 00 00 00 00 57 03 00 00 e6 10 00 00 | ................R.......W....... |
195c0 | 97 13 00 00 48 0d 00 00 c4 11 00 00 11 01 00 00 ce 05 00 00 c2 0a 00 00 5c 07 00 00 00 00 00 00 | ....H...................\....... |
195e0 | b1 13 00 00 5d 0d 00 00 00 00 00 00 45 02 00 00 18 07 00 00 b2 0c 00 00 74 0b 00 00 e1 04 00 00 | ....].......E...........t....... |
19600 | f0 05 00 00 4e 0f 00 00 91 11 00 00 85 03 00 00 61 0e 00 00 72 06 00 00 91 0e 00 00 00 00 00 00 | ....N...........a...r........... |
19620 | c5 02 00 00 1c 0d 00 00 38 03 00 00 49 05 00 00 9b 0a 00 00 00 00 00 00 00 00 00 00 1f 05 00 00 | ........8...I................... |
19640 | 19 07 00 00 00 00 00 00 b3 07 00 00 6f 0c 00 00 00 00 00 00 ae 0a 00 00 21 08 00 00 28 0e 00 00 | ............o...........!...(... |
19660 | 0c 08 00 00 00 00 00 00 00 00 00 00 1e 10 00 00 00 00 00 00 00 00 00 00 79 03 00 00 00 00 00 00 | ........................y....... |
19680 | 19 0d 00 00 d6 09 00 00 84 0f 00 00 8e 03 00 00 62 0f 00 00 00 00 00 00 b8 10 00 00 1d 00 00 00 | ................b............... |
196a0 | 46 13 00 00 00 00 00 00 a4 06 00 00 dd 04 00 00 6b 12 00 00 53 08 00 00 7d 04 00 00 44 06 00 00 | F...............k...S...}...D... |
196c0 | 71 04 00 00 b5 02 00 00 25 06 00 00 05 11 00 00 f0 04 00 00 cc 0b 00 00 ad 0c 00 00 d1 09 00 00 | q.......%....................... |
196e0 | f3 0b 00 00 00 00 00 00 7d 03 00 00 00 00 00 00 13 03 00 00 e1 0a 00 00 a9 05 00 00 3e 0b 00 00 | ........}...................>... |
19700 | 00 00 00 00 96 06 00 00 b5 0f 00 00 42 10 00 00 3b 05 00 00 00 00 00 00 e1 08 00 00 b5 0a 00 00 | ............B...;............... |
19720 | 36 00 00 00 f7 09 00 00 91 07 00 00 3a 00 00 00 00 00 00 00 cd 08 00 00 d9 12 00 00 98 0b 00 00 | 6...........:................... |
19740 | db 01 00 00 f0 08 00 00 bb 0a 00 00 1b 07 00 00 a3 0c 00 00 d7 0a 00 00 00 00 00 00 2e 0f 00 00 | ................................ |
19760 | 26 04 00 00 3b 00 00 00 00 00 00 00 5f 08 00 00 4d 05 00 00 d2 0a 00 00 00 00 00 00 00 00 00 00 | &...;......._...M............... |
19780 | 18 10 00 00 bd 04 00 00 3b 0c 00 00 a3 05 00 00 ef 13 00 00 44 00 00 00 c0 07 00 00 88 06 00 00 | ........;...........D........... |
197a0 | 9a 00 00 00 79 05 00 00 00 00 00 00 af 0d 00 00 25 08 00 00 eb 0b 00 00 52 07 00 00 8e 09 00 00 | ....y...........%.......R....... |
197c0 | 47 09 00 00 00 00 00 00 00 00 00 00 ed 10 00 00 00 00 00 00 00 00 00 00 8a 08 00 00 0a 04 00 00 | G............................... |
197e0 | 08 0d 00 00 bf 12 00 00 00 00 00 00 33 06 00 00 38 12 00 00 5c 0f 00 00 57 13 00 00 2c 12 00 00 | ............3...8...\...W...,... |
19800 | 00 00 00 00 f3 0d 00 00 27 09 00 00 b0 11 00 00 a4 03 00 00 26 09 00 00 d2 01 00 00 00 00 00 00 | ........'...........&........... |
19820 | 9f 12 00 00 51 02 00 00 1e 0b 00 00 00 00 00 00 06 0b 00 00 21 0a 00 00 05 0f 00 00 16 0b 00 00 | ....Q...............!........... |
19840 | 0e 0e 00 00 00 00 00 00 c5 05 00 00 9c 0c 00 00 00 00 00 00 01 0e 00 00 74 11 00 00 00 00 00 00 | ........................t....... |
19860 | de 09 00 00 41 10 00 00 73 0d 00 00 a6 00 00 00 23 05 00 00 00 00 00 00 6a 02 00 00 e0 0e 00 00 | ....A...s.......#.......j....... |
19880 | 00 00 00 00 61 0f 00 00 94 0f 00 00 f7 0f 00 00 00 00 00 00 df 0c 00 00 08 03 00 00 00 00 00 00 | ....a........................... |
198a0 | b3 0a 00 00 e5 13 00 00 47 05 00 00 c7 0e 00 00 32 09 00 00 00 00 00 00 6c 09 00 00 bc 12 00 00 | ........G.......2.......l....... |
198c0 | 00 00 00 00 1e 01 00 00 5e 13 00 00 d4 0e 00 00 f2 13 00 00 6e 03 00 00 00 00 00 00 00 00 00 00 | ........^...........n........... |
198e0 | ad 06 00 00 28 0b 00 00 47 0b 00 00 e7 03 00 00 00 00 00 00 00 00 00 00 40 0f 00 00 b0 12 00 00 | ....(...G...............@....... |
19900 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 32 0e 00 00 cd 0f 00 00 f6 03 00 00 fb 05 00 00 | ................2............... |
19920 | 00 00 00 00 00 00 00 00 0d 13 00 00 b7 13 00 00 7e 0b 00 00 73 0c 00 00 00 00 00 00 12 10 00 00 | ................~...s........... |
19940 | 15 13 00 00 00 00 00 00 41 04 00 00 d8 07 00 00 47 01 00 00 f0 10 00 00 1a 0a 00 00 00 00 00 00 | ........A.......G............... |
19960 | d7 08 00 00 91 01 00 00 65 11 00 00 a7 0c 00 00 00 00 00 00 be 06 00 00 1d 07 00 00 00 00 00 00 | ........e....................... |
19980 | 00 00 00 00 00 00 00 00 ca 09 00 00 46 07 00 00 00 00 00 00 16 03 00 00 2a 11 00 00 35 05 00 00 | ............F...........*...5... |
199a0 | cb 03 00 00 88 0a 00 00 41 06 00 00 ef 01 00 00 f1 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........A....................... |
199c0 | c0 01 00 00 66 06 00 00 00 00 00 00 29 02 00 00 00 00 00 00 00 00 00 00 9b 02 00 00 94 04 00 00 | ....f.......)................... |
199e0 | be 00 00 00 8d 07 00 00 ad 0a 00 00 00 00 00 00 e8 13 00 00 00 00 00 00 00 00 00 00 e3 11 00 00 | ................................ |
19a00 | 0e 0a 00 00 84 10 00 00 fe 12 00 00 af 06 00 00 00 00 00 00 00 00 00 00 99 0f 00 00 00 00 00 00 | ................................ |
19a20 | 4c 06 00 00 00 00 00 00 a6 13 00 00 17 02 00 00 fd 0d 00 00 00 00 00 00 67 13 00 00 32 07 00 00 | L.......................g...2... |
19a40 | c1 0f 00 00 92 02 00 00 00 00 00 00 00 00 00 00 4e 01 00 00 00 00 00 00 73 02 00 00 e6 04 00 00 | ................N.......s....... |
19a60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7d 07 00 00 03 03 00 00 ab 11 00 00 00 00 00 00 | ................}............... |
19a80 | 00 00 00 00 d8 13 00 00 cf 0a 00 00 94 0e 00 00 db 0a 00 00 d9 10 00 00 7b 0a 00 00 cd 09 00 00 | ........................{....... |
19aa0 | f5 0b 00 00 00 00 00 00 c7 0f 00 00 49 00 00 00 4c 09 00 00 47 13 00 00 04 09 00 00 00 00 00 00 | ............I...L...G........... |
19ac0 | 00 00 00 00 4a 0f 00 00 37 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 de 08 00 00 00 00 00 00 | ....J...7....................... |
19ae0 | b4 00 00 00 00 00 00 00 00 00 00 00 c8 0a 00 00 00 00 00 00 e3 05 00 00 00 00 00 00 00 00 00 00 | ................................ |
19b00 | c8 0c 00 00 00 00 00 00 e1 10 00 00 ed 12 00 00 00 00 00 00 00 00 00 00 1f 0a 00 00 64 0e 00 00 | ............................d... |
19b20 | 33 10 00 00 dc 0c 00 00 00 00 00 00 ee 01 00 00 2f 04 00 00 20 08 00 00 f5 00 00 00 07 03 00 00 | 3.............../............... |
19b40 | 61 04 00 00 97 0f 00 00 01 04 00 00 37 0e 00 00 58 08 00 00 8c 11 00 00 3a 04 00 00 bd 10 00 00 | a...........7...X.......:....... |
19b60 | 12 02 00 00 14 0f 00 00 c3 0d 00 00 23 08 00 00 6a 00 00 00 00 00 00 00 c6 0d 00 00 77 0e 00 00 | ............#...j...........w... |
19b80 | ab 09 00 00 00 00 00 00 a3 00 00 00 00 00 00 00 00 00 00 00 1e 03 00 00 00 00 00 00 23 06 00 00 | ............................#... |
19ba0 | e7 05 00 00 00 00 00 00 80 0c 00 00 00 00 00 00 46 0f 00 00 00 00 00 00 83 0c 00 00 29 09 00 00 | ................F...........)... |
19bc0 | 3d 0b 00 00 e5 09 00 00 12 0c 00 00 00 00 00 00 e5 08 00 00 d0 10 00 00 00 00 00 00 00 00 00 00 | =............................... |
19be0 | ba 13 00 00 fa 00 00 00 1c 11 00 00 00 00 00 00 00 00 00 00 b1 05 00 00 75 13 00 00 9c 10 00 00 | ........................u....... |
19c00 | 81 00 00 00 54 01 00 00 4b 01 00 00 00 00 00 00 a8 09 00 00 00 00 00 00 a0 0b 00 00 00 00 00 00 | ....T...K....................... |
19c20 | 00 00 00 00 9f 07 00 00 cf 0b 00 00 b4 0a 00 00 95 0f 00 00 ce 13 00 00 00 00 00 00 00 00 00 00 | ................................ |
19c40 | e6 11 00 00 b2 07 00 00 2e 0a 00 00 df 13 00 00 00 00 00 00 2f 05 00 00 81 0c 00 00 8a 04 00 00 | ..................../........... |
19c60 | a5 10 00 00 5f 0b 00 00 00 00 00 00 7c 04 00 00 61 02 00 00 00 00 00 00 d8 06 00 00 47 07 00 00 | ...._.......|...a...........G... |
19c80 | 00 00 00 00 00 00 00 00 bd 13 00 00 e9 12 00 00 28 10 00 00 00 00 00 00 3e 01 00 00 4f 03 00 00 | ................(.......>...O... |
19ca0 | 64 10 00 00 9e 01 00 00 00 00 00 00 4c 11 00 00 a9 0a 00 00 58 03 00 00 00 00 00 00 84 08 00 00 | d...........L.......X........... |
19cc0 | 00 00 00 00 ce 06 00 00 2d 0b 00 00 0e 07 00 00 2b 0c 00 00 5d 03 00 00 00 00 00 00 27 12 00 00 | ........-.......+...].......'... |
19ce0 | 95 07 00 00 c2 10 00 00 c9 12 00 00 69 09 00 00 57 0b 00 00 de 10 00 00 a9 0f 00 00 e0 07 00 00 | ............i...W............... |
19d00 | 39 0c 00 00 12 0e 00 00 3a 06 00 00 84 12 00 00 07 06 00 00 14 05 00 00 05 0c 00 00 a9 11 00 00 | 9.......:....................... |
19d20 | 00 00 00 00 8e 01 00 00 df 06 00 00 00 00 00 00 6c 00 00 00 ac 0a 00 00 aa 09 00 00 00 00 00 00 | ................l............... |
19d40 | 00 00 00 00 82 07 00 00 f3 03 00 00 ff 0c 00 00 0c 11 00 00 16 11 00 00 db 13 00 00 74 01 00 00 | ............................t... |
19d60 | 56 13 00 00 25 07 00 00 00 00 00 00 70 0f 00 00 09 07 00 00 00 00 00 00 f5 12 00 00 38 08 00 00 | V...%.......p...............8... |
19d80 | 22 0f 00 00 92 01 00 00 6d 0b 00 00 5d 01 00 00 50 10 00 00 2f 06 00 00 00 00 00 00 00 00 00 00 | ".......m...]...P.../........... |
19da0 | 34 0c 00 00 00 00 00 00 ba 00 00 00 76 00 00 00 8f 05 00 00 00 00 00 00 11 12 00 00 03 13 00 00 | 4...........v................... |
19dc0 | 17 12 00 00 b8 02 00 00 a7 07 00 00 1b 04 00 00 4b 12 00 00 c6 00 00 00 00 00 00 00 00 00 00 00 | ................K............... |
19de0 | 00 00 00 00 d1 05 00 00 ee 10 00 00 53 09 00 00 00 00 00 00 90 13 00 00 00 00 00 00 d7 07 00 00 | ............S................... |
19e00 | 00 00 00 00 d6 06 00 00 45 06 00 00 29 06 00 00 95 06 00 00 12 0d 00 00 a4 0c 00 00 34 12 00 00 | ........E...)...............4... |
19e20 | 00 00 00 00 dc 05 00 00 fa 0a 00 00 d6 01 00 00 6d 0e 00 00 05 0d 00 00 00 00 00 00 cc 12 00 00 | ................m............... |
19e40 | 24 0c 00 00 52 00 00 00 93 0f 00 00 00 00 00 00 9e 0f 00 00 a8 0d 00 00 00 00 00 00 00 00 00 00 | $...R........................... |
19e60 | 5d 04 00 00 4a 0a 00 00 cc 01 00 00 00 00 00 00 7b 0b 00 00 00 0d 00 00 d2 0f 00 00 ca 0f 00 00 | ]...J...........{............... |
19e80 | b6 11 00 00 86 01 00 00 61 0b 00 00 5e 0b 00 00 00 00 00 00 ed 13 00 00 00 00 00 00 7e 0e 00 00 | ........a...^...............~... |
19ea0 | fe 0f 00 00 e8 0e 00 00 3e 04 00 00 ad 08 00 00 07 04 00 00 4e 00 00 00 95 12 00 00 f6 0a 00 00 | ........>...........N........... |
19ec0 | 00 00 00 00 00 00 00 00 00 00 00 00 f1 08 00 00 70 09 00 00 00 00 00 00 1e 05 00 00 66 08 00 00 | ................p...........f... |
19ee0 | 05 08 00 00 a2 04 00 00 00 00 00 00 66 09 00 00 08 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ............f................... |
19f00 | c0 0e 00 00 00 00 00 00 00 00 00 00 fc 07 00 00 58 13 00 00 4b 0f 00 00 1c 12 00 00 7e 03 00 00 | ................X...K.......~... |
19f20 | 00 00 00 00 00 00 00 00 d1 08 00 00 00 00 00 00 b0 13 00 00 e5 02 00 00 9c 09 00 00 9c 0d 00 00 | ................................ |
19f40 | 17 10 00 00 3b 03 00 00 f2 0f 00 00 00 00 00 00 ab 00 00 00 37 05 00 00 6b 04 00 00 f5 11 00 00 | ....;...............7...k....... |
19f60 | 00 00 00 00 38 11 00 00 85 0f 00 00 f8 10 00 00 5c 01 00 00 0b 11 00 00 3a 02 00 00 00 0f 00 00 | ....8...........\.......:....... |
19f80 | af 13 00 00 e5 05 00 00 00 00 00 00 e5 10 00 00 7c 09 00 00 00 00 00 00 00 00 00 00 3e 11 00 00 | ................|...........>... |
19fa0 | fa 0e 00 00 00 00 00 00 00 00 00 00 4b 04 00 00 0d 0c 00 00 66 0f 00 00 00 00 00 00 d8 0f 00 00 | ............K.......f........... |
19fc0 | 00 00 00 00 82 10 00 00 67 0a 00 00 f5 06 00 00 90 09 00 00 00 00 00 00 c2 13 00 00 79 13 00 00 | ........g...................y... |
19fe0 | 96 08 00 00 f4 09 00 00 67 0e 00 00 00 00 00 00 f1 0d 00 00 97 0a 00 00 5d 02 00 00 ec 07 00 00 | ........g...............]....... |
1a000 | f7 07 00 00 00 00 00 00 00 00 00 00 a3 0d 00 00 2d 0e 00 00 31 01 00 00 00 00 00 00 98 07 00 00 | ................-...1........... |
1a020 | d8 03 00 00 28 13 00 00 0e 0f 00 00 e4 07 00 00 9b 04 00 00 00 00 00 00 66 10 00 00 00 00 00 00 | ....(...................f....... |
1a040 | 57 00 00 00 00 00 00 00 92 0a 00 00 55 07 00 00 00 00 00 00 63 02 00 00 7a 01 00 00 a1 0e 00 00 | W...........U.......c...z....... |
1a060 | 00 00 00 00 81 12 00 00 fc 0c 00 00 13 06 00 00 00 00 00 00 a5 01 00 00 00 00 00 00 21 12 00 00 | ............................!... |
1a080 | af 04 00 00 0e 02 00 00 21 0d 00 00 17 08 00 00 4d 0e 00 00 18 08 00 00 fd 10 00 00 4b 0e 00 00 | ........!.......M...........K... |
1a0a0 | 4e 13 00 00 8d 13 00 00 24 04 00 00 d5 09 00 00 16 12 00 00 d8 11 00 00 50 05 00 00 f6 04 00 00 | N.......$...............P....... |
1a0c0 | 8c 0c 00 00 4f 0b 00 00 14 04 00 00 fa 04 00 00 3b 0f 00 00 99 0c 00 00 d2 07 00 00 1f 13 00 00 | ....O...........;............... |
1a0e0 | 7f 02 00 00 00 00 00 00 d0 0b 00 00 00 00 00 00 97 11 00 00 91 06 00 00 02 08 00 00 55 08 00 00 | ............................U... |
1a100 | c0 11 00 00 92 0f 00 00 39 0b 00 00 45 03 00 00 3a 0b 00 00 00 00 00 00 db 05 00 00 19 0b 00 00 | ........9...E...:............... |
1a120 | 00 00 00 00 b8 03 00 00 00 00 00 00 94 0a 00 00 bc 02 00 00 2c 0a 00 00 a2 00 00 00 5a 13 00 00 | ....................,.......Z... |
1a140 | 38 13 00 00 00 00 00 00 fd 0c 00 00 00 00 00 00 09 10 00 00 f7 0c 00 00 32 0c 00 00 1f 0b 00 00 | 8.......................2....... |
1a160 | 00 00 00 00 49 01 00 00 94 06 00 00 c9 05 00 00 4b 05 00 00 bd 01 00 00 31 0a 00 00 99 0b 00 00 | ....I...........K.......1....... |
1a180 | 33 07 00 00 60 06 00 00 00 00 00 00 56 08 00 00 00 00 00 00 42 02 00 00 ae 06 00 00 00 00 00 00 | 3...`.......V.......B........... |
1a1a0 | 88 0d 00 00 05 0b 00 00 27 04 00 00 b5 11 00 00 c6 0a 00 00 03 0d 00 00 ec 00 00 00 d1 12 00 00 | ........'....................... |
1a1c0 | 51 0b 00 00 00 00 00 00 8f 03 00 00 7d 10 00 00 00 00 00 00 cb 0b 00 00 2a 0e 00 00 00 00 00 00 | Q...........}...........*....... |
1a1e0 | ee 0f 00 00 25 00 00 00 00 00 00 00 00 00 00 00 8e 04 00 00 ac 0b 00 00 49 0d 00 00 c1 06 00 00 | ....%...................I....... |
1a200 | 67 10 00 00 00 00 00 00 00 00 00 00 eb 13 00 00 00 00 00 00 89 01 00 00 e3 07 00 00 14 0e 00 00 | g............................... |
1a220 | 75 0a 00 00 7a 0c 00 00 6c 0c 00 00 54 13 00 00 a4 07 00 00 ae 02 00 00 00 00 00 00 95 0d 00 00 | u...z...l...T................... |
1a240 | 00 00 00 00 73 0e 00 00 c7 00 00 00 a2 03 00 00 00 00 00 00 1a 02 00 00 8b 11 00 00 4e 09 00 00 | ....s.......................N... |
1a260 | 00 00 00 00 5a 12 00 00 04 05 00 00 00 00 00 00 e4 0b 00 00 00 00 00 00 b0 0f 00 00 00 00 00 00 | ....Z........................... |
1a280 | 0a 0c 00 00 11 06 00 00 c6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0a 00 00 00 00 00 00 | ........................4....... |
1a2a0 | 28 03 00 00 00 00 00 00 3d 04 00 00 00 00 00 00 e3 0b 00 00 33 00 00 00 c7 06 00 00 55 00 00 00 | (.......=...........3.......U... |
1a2c0 | 00 00 00 00 b0 02 00 00 dc 08 00 00 4f 09 00 00 7a 0e 00 00 b4 0d 00 00 cf 07 00 00 7c 0d 00 00 | ............O...z...........|... |
1a2e0 | 43 12 00 00 41 0b 00 00 55 01 00 00 b6 12 00 00 10 0a 00 00 3d 09 00 00 00 00 00 00 50 11 00 00 | C...A...U...........=.......P... |
1a300 | 4e 05 00 00 00 00 00 00 53 0d 00 00 00 00 00 00 00 00 00 00 af 11 00 00 11 10 00 00 42 11 00 00 | N.......S...................B... |
1a320 | 75 00 00 00 71 0e 00 00 73 01 00 00 00 00 00 00 10 05 00 00 b8 05 00 00 a2 11 00 00 4c 00 00 00 | u...q...s...................L... |
1a340 | 00 00 00 00 92 0d 00 00 76 0d 00 00 21 02 00 00 00 00 00 00 1c 00 00 00 34 13 00 00 ae 00 00 00 | ........v...!...........4....... |
1a360 | c8 02 00 00 03 11 00 00 4f 0f 00 00 89 08 00 00 6b 07 00 00 00 00 00 00 c6 0c 00 00 36 07 00 00 | ........O.......k...........6... |
1a380 | 5b 0a 00 00 b5 0e 00 00 70 0e 00 00 a9 09 00 00 5d 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | [.......p.......]............... |
1a3a0 | b8 11 00 00 13 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d1 06 00 00 | ................................ |
1a3c0 | b5 03 00 00 00 00 00 00 2a 06 00 00 c0 05 00 00 f0 01 00 00 65 12 00 00 b8 04 00 00 00 00 00 00 | ........*...........e........... |
1a3e0 | 68 07 00 00 b9 0e 00 00 00 00 00 00 52 0a 00 00 63 04 00 00 00 00 00 00 14 09 00 00 7f 05 00 00 | h...........R...c............... |
1a400 | e0 04 00 00 00 00 00 00 e7 0b 00 00 00 00 00 00 00 00 00 00 6f 13 00 00 2c 10 00 00 d5 05 00 00 | ....................o...,....... |
1a420 | c3 08 00 00 00 00 00 00 00 00 00 00 8e 05 00 00 cc 11 00 00 b9 0f 00 00 03 07 00 00 32 11 00 00 | ............................2... |
1a440 | 00 00 00 00 00 00 00 00 eb 05 00 00 02 05 00 00 dc 0e 00 00 99 0e 00 00 15 0f 00 00 7b 04 00 00 | ............................{... |
1a460 | 00 00 00 00 ec 13 00 00 f4 06 00 00 00 00 00 00 00 00 00 00 6a 0d 00 00 00 00 00 00 5d 12 00 00 | ....................j.......]... |
1a480 | 00 00 00 00 00 00 00 00 00 00 00 00 3b 04 00 00 f4 0f 00 00 00 00 00 00 00 00 00 00 25 0b 00 00 | ............;...............%... |
1a4a0 | b2 09 00 00 0c 0c 00 00 e9 07 00 00 03 0b 00 00 f4 12 00 00 30 11 00 00 65 13 00 00 46 10 00 00 | ....................0...e...F... |
1a4c0 | 00 00 00 00 52 09 00 00 00 00 00 00 b1 0f 00 00 9a 10 00 00 bc 0b 00 00 53 05 00 00 00 00 00 00 | ....R...................S....... |
1a4e0 | 00 00 00 00 ad 00 00 00 e3 13 00 00 17 03 00 00 c2 0f 00 00 08 05 00 00 19 09 00 00 98 0a 00 00 | ................................ |
1a500 | 00 00 00 00 67 05 00 00 2f 07 00 00 69 04 00 00 21 10 00 00 00 00 00 00 9c 12 00 00 00 00 00 00 | ....g.../...i...!............... |
1a520 | 41 01 00 00 29 07 00 00 00 00 00 00 45 04 00 00 a3 12 00 00 ca 0d 00 00 b5 05 00 00 00 00 00 00 | A...).......E................... |
1a540 | ec 0a 00 00 00 00 00 00 6c 06 00 00 ca 12 00 00 e1 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........l....................... |
1a560 | 60 00 00 00 63 12 00 00 ff 10 00 00 88 09 00 00 ab 04 00 00 dc 10 00 00 88 01 00 00 45 00 00 00 | `...c.......................E... |
1a580 | 93 11 00 00 98 05 00 00 d6 13 00 00 95 0b 00 00 5e 07 00 00 2c 0e 00 00 41 07 00 00 00 00 00 00 | ................^...,...A....... |
1a5a0 | 3b 02 00 00 f6 05 00 00 9d 05 00 00 6b 0f 00 00 ec 08 00 00 00 00 00 00 2f 08 00 00 b5 0d 00 00 | ;...........k.........../....... |
1a5c0 | ae 11 00 00 df 11 00 00 00 00 00 00 8c 10 00 00 b1 08 00 00 fc 00 00 00 6c 12 00 00 00 00 00 00 | ........................l....... |
1a5e0 | c5 0f 00 00 00 00 00 00 a5 09 00 00 2e 08 00 00 e3 01 00 00 a6 09 00 00 40 03 00 00 44 0d 00 00 | ........................@...D... |
1a600 | 2c 01 00 00 c3 09 00 00 00 00 00 00 bc 11 00 00 a1 00 00 00 0b 04 00 00 00 00 00 00 1c 06 00 00 | ,............................... |
1a620 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c3 07 00 00 2c 13 00 00 68 02 00 00 7b 07 00 00 | ....................,...h...{... |
1a640 | 19 0e 00 00 15 10 00 00 64 0f 00 00 cb 09 00 00 cd 03 00 00 c3 00 00 00 ae 05 00 00 4a 0c 00 00 | ........d...................J... |
1a660 | e8 04 00 00 2f 02 00 00 00 00 00 00 7a 05 00 00 00 00 00 00 22 02 00 00 6a 03 00 00 27 0c 00 00 | ..../.......z......."...j...'... |
1a680 | 00 00 00 00 2c 02 00 00 33 11 00 00 70 06 00 00 20 0b 00 00 f2 00 00 00 fb 09 00 00 5a 11 00 00 | ....,...3...p...............Z... |
1a6a0 | 75 0e 00 00 33 09 00 00 ed 03 00 00 00 00 00 00 9f 0b 00 00 02 10 00 00 61 07 00 00 00 00 00 00 | u...3...................a....... |
1a6c0 | d1 00 00 00 8a 10 00 00 d0 02 00 00 4d 11 00 00 00 00 00 00 ab 06 00 00 bd 0f 00 00 00 00 00 00 | ............M................... |
1a6e0 | 88 0b 00 00 d7 12 00 00 1d 03 00 00 00 00 00 00 2c 06 00 00 ce 10 00 00 82 0f 00 00 73 08 00 00 | ................,...........s... |
1a700 | 7c 02 00 00 8e 0f 00 00 da 00 00 00 57 0a 00 00 00 00 00 00 49 11 00 00 c9 0a 00 00 00 00 00 00 | |...........W.......I........... |
1a720 | a1 07 00 00 bc 08 00 00 c0 06 00 00 00 00 00 00 c4 10 00 00 21 06 00 00 d8 12 00 00 3f 03 00 00 | ....................!.......?... |
1a740 | 00 00 00 00 00 00 00 00 57 08 00 00 00 00 00 00 88 07 00 00 69 0c 00 00 17 11 00 00 08 06 00 00 | ........W...........i........... |
1a760 | f9 05 00 00 b9 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 84 06 00 00 5f 12 00 00 fd 04 00 00 | ........................_....... |
1a780 | 93 12 00 00 fe 0b 00 00 8f 01 00 00 b0 09 00 00 f6 0b 00 00 03 12 00 00 f4 03 00 00 00 00 00 00 | ................................ |
1a7a0 | 00 00 00 00 00 00 00 00 28 01 00 00 4c 0e 00 00 85 13 00 00 00 00 00 00 45 07 00 00 43 03 00 00 | ........(...L...........E...C... |
1a7c0 | 00 00 00 00 fc 0d 00 00 c3 12 00 00 00 00 00 00 53 0b 00 00 5c 0d 00 00 00 00 00 00 bc 0a 00 00 | ................S...\........... |
1a7e0 | 8f 00 00 00 43 0b 00 00 ea 0f 00 00 86 0f 00 00 ab 0c 00 00 38 00 00 00 69 05 00 00 59 07 00 00 | ....C...............8...i...Y... |
1a800 | 20 0c 00 00 66 11 00 00 00 00 00 00 4a 05 00 00 00 00 00 00 fc 0e 00 00 00 00 00 00 72 04 00 00 | ....f.......J...............r... |
1a820 | 70 05 00 00 00 00 00 00 81 0b 00 00 56 06 00 00 19 13 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 | p...........V................... |
1a840 | 7b 10 00 00 21 04 00 00 bf 06 00 00 44 0e 00 00 d5 12 00 00 cb 10 00 00 7b 03 00 00 00 00 00 00 | {...!.......D...........{....... |
1a860 | 32 10 00 00 31 13 00 00 00 00 00 00 dd 13 00 00 04 02 00 00 00 00 00 00 3b 11 00 00 00 00 00 00 | 2...1...................;....... |
1a880 | 00 00 00 00 86 0e 00 00 fb 0d 00 00 00 00 00 00 85 12 00 00 00 00 00 00 0b 05 00 00 dd 02 00 00 | ................................ |
1a8a0 | 3f 05 00 00 0a 13 00 00 b1 12 00 00 00 00 00 00 bc 00 00 00 1d 0a 00 00 00 00 00 00 a8 01 00 00 | ?............................... |
1a8c0 | 8e 13 00 00 19 0a 00 00 e6 0e 00 00 0c 0b 00 00 b9 0b 00 00 00 00 00 00 00 00 00 00 50 06 00 00 | ............................P... |
1a8e0 | a8 07 00 00 86 04 00 00 36 0d 00 00 ee 0c 00 00 ab 12 00 00 a0 12 00 00 92 0c 00 00 00 00 00 00 | ........6....................... |
1a900 | 3d 10 00 00 00 00 00 00 93 02 00 00 ec 02 00 00 a0 07 00 00 84 01 00 00 97 10 00 00 bf 02 00 00 | =............................... |
1a920 | 93 0c 00 00 d5 06 00 00 46 09 00 00 00 00 00 00 46 11 00 00 86 08 00 00 00 00 00 00 00 00 00 00 | ........F.......F............... |
1a940 | 45 12 00 00 28 00 00 00 00 00 00 00 b3 00 00 00 00 00 00 00 dc 09 00 00 ea 0a 00 00 0c 0a 00 00 | E...(........................... |
1a960 | 06 0f 00 00 76 04 00 00 00 00 00 00 63 0d 00 00 60 0e 00 00 d1 03 00 00 b5 07 00 00 00 00 00 00 | ....v.......c...`............... |
1a980 | 00 00 00 00 00 00 00 00 9a 01 00 00 2d 00 00 00 54 02 00 00 b4 03 00 00 31 0e 00 00 56 0e 00 00 | ............-...T.......1...V... |
1a9a0 | 0d 02 00 00 00 00 00 00 8d 0f 00 00 9f 0c 00 00 00 00 00 00 f1 12 00 00 69 00 00 00 00 00 00 00 | ........................i....... |
1a9c0 | 00 00 00 00 e9 09 00 00 4c 0f 00 00 5a 0c 00 00 00 00 00 00 a7 11 00 00 f1 0b 00 00 15 07 00 00 | ........L...Z................... |
1a9e0 | a2 07 00 00 a7 05 00 00 00 21 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 2f 78 3e 3a 20 4d | .........!<h:h:h:h:h:h:h:h/x>:.M |
1aa00 | 61 74 63 68 20 65 76 65 72 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 | atch.everything.except.the.speci |
1aa20 | 66 69 65 64 20 70 72 65 66 69 78 2e 00 21 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 2d | fied.prefix..!<h:h:h:h:h:h:h:h>- |
1aa40 | 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 3a 20 4d 61 74 63 68 20 65 76 65 72 79 74 68 | <h:h:h:h:h:h:h:h>:.Match.everyth |
1aa60 | 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 72 61 6e 67 65 2e 00 | ing.except.the.specified.range.. |
1aa80 | 21 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 3a 20 4d 61 74 63 68 20 65 76 65 72 79 74 | !<h:h:h:h:h:h:h:h>:.Match.everyt |
1aaa0 | 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 | hing.except.the.specified.addres |
1aac0 | 73 2e 00 21 3c 78 2e 78 2e 78 2e 78 2f 78 3e 3a 20 4d 61 74 63 68 20 65 76 65 72 79 74 68 69 6e | s..!<x.x.x.x/x>:.Match.everythin |
1aae0 | 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 73 75 62 6e 65 74 2e 00 21 | g.except.the.specified.subnet..! |
1ab00 | 3c 78 2e 78 2e 78 2e 78 3e 2d 3c 78 2e 78 2e 78 2e 78 3e 3a 20 4d 61 74 63 68 20 65 76 65 72 79 | <x.x.x.x>-<x.x.x.x>:.Match.every |
1ab20 | 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 72 61 6e 67 65 | thing.except.the.specified.range |
1ab40 | 2e 00 21 3c 78 2e 78 2e 78 2e 78 3e 3a 20 4d 61 74 63 68 20 65 76 65 72 79 74 68 69 6e 67 20 65 | ..!<x.x.x.x>:.Match.everything.e |
1ab60 | 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 2e 00 22 4d 61 | xcept.the.specified.address.."Ma |
1ab80 | 6e 61 67 65 64 20 61 64 64 72 65 73 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 20 66 6c 61 | naged.address.configuration".fla |
1aba0 | 67 00 22 4f 74 68 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 20 66 6c 61 67 00 23 23 23 | g."Other.configuration".flag.### |
1abc0 | 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 c3 a4 23 23 23 23 23 23 23 23 23 23 23 23 23 20 | ################..#############. |
1abe0 | 46 6c 6f 77 74 61 62 6c 65 73 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f | Flowtables.Firewall.Configuratio |
1ac00 | 6e 20 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 | n.############################## |
1ac20 | 23 23 23 00 28 54 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 66 75 6c 20 77 68 65 6e 20 61 20 63 | ###.(This.can.be.useful.when.a.c |
1ac40 | 61 6c 6c 65 64 20 73 65 72 76 69 63 65 20 68 61 73 20 6d 61 6e 79 20 61 6e 64 2f 6f 72 20 6f 66 | alled.service.has.many.and/or.of |
1ac60 | 74 65 6e 20 63 68 61 6e 67 69 6e 67 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 | ten.changing.destination.address |
1ac80 | 65 73 20 2d 20 65 2e 67 2e 20 4e 65 74 66 6c 69 78 2e 29 00 2a 2a 31 2d 32 35 34 2a 2a 20 e2 80 | es.-.e.g..Netflix.).**1-254**... |
1aca0 | 93 20 69 6e 74 65 72 66 61 63 65 73 20 77 69 74 68 20 61 20 63 68 61 6e 6e 65 6c 20 6e 75 6d 62 | ..interfaces.with.a.channel.numb |
1acc0 | 65 72 20 69 6e 74 65 72 66 65 72 65 20 77 69 74 68 20 69 6e 74 65 72 66 65 72 69 6e 67 20 69 6e | er.interfere.with.interfering.in |
1ace0 | 74 65 72 66 61 63 65 73 20 61 6e 64 20 69 6e 74 65 72 66 61 63 65 73 20 77 69 74 68 20 74 68 65 | terfaces.and.interfaces.with.the |
1ad00 | 20 73 61 6d 65 20 63 68 61 6e 6e 65 6c 20 6e 75 6d 62 65 72 2e 20 2a 2a 69 6e 74 65 72 66 65 72 | .same.channel.number..**interfer |
1ad20 | 69 6e 67 2a 2a 20 e2 80 93 20 69 6e 74 65 72 66 65 72 69 6e 67 20 69 6e 74 65 72 66 61 63 65 73 | ing**.....interfering.interfaces |
1ad40 | 20 61 72 65 20 61 73 73 75 6d 65 64 20 74 6f 20 69 6e 74 65 72 66 65 72 65 20 77 69 74 68 20 61 | .are.assumed.to.interfere.with.a |
1ad60 | 6c 6c 20 6f 74 68 65 72 20 63 68 61 6e 6e 65 6c 73 20 65 78 63 65 70 74 20 6e 6f 6e 69 6e 74 65 | ll.other.channels.except.noninte |
1ad80 | 72 66 65 72 69 6e 67 20 63 68 61 6e 6e 65 6c 73 2e 20 2a 2a 6e 6f 6e 69 6e 74 65 72 66 65 72 69 | rfering.channels..**noninterferi |
1ada0 | 6e 67 2a 2a 20 e2 80 93 20 6e 6f 6e 69 6e 74 65 72 66 65 72 69 6e 67 20 69 6e 74 65 72 66 61 63 | ng**.....noninterfering.interfac |
1adc0 | 65 73 20 61 72 65 20 61 73 73 75 6d 65 64 20 74 6f 20 6f 6e 6c 79 20 69 6e 74 65 72 66 65 72 65 | es.are.assumed.to.only.interfere |
1ade0 | 20 77 69 74 68 20 74 68 65 6d 73 65 6c 76 65 73 2e 00 2a 2a 31 2e 20 43 6f 6e 66 69 72 6d 20 49 | .with.themselves..**1..Confirm.I |
1ae00 | 50 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 62 65 74 77 65 65 6e 20 74 75 6e 6e 65 6c 20 73 6f | P.connectivity.between.tunnel.so |
1ae20 | 75 72 63 65 2d 61 64 64 72 65 73 73 20 61 6e 64 20 72 65 6d 6f 74 65 3a 2a 2a 00 2a 2a 31 30 2a | urce-address.and.remote:**.**10* |
1ae40 | 2a 20 2d 20 3a 61 62 62 72 3a 60 49 50 46 49 58 20 28 49 50 20 46 6c 6f 77 20 49 6e 66 6f 72 6d | *.-.:abbr:`IPFIX.(IP.Flow.Inform |
1ae60 | 61 74 69 6f 6e 20 45 78 70 6f 72 74 29 60 20 61 73 20 70 65 72 20 3a 72 66 63 3a 60 33 39 31 37 | ation.Export)`.as.per.:rfc:`3917 |
1ae80 | 60 00 2a 2a 32 2e 20 43 6f 6e 66 69 72 6d 20 74 68 65 20 6c 69 6e 6b 20 74 79 70 65 20 68 61 73 | `.**2..Confirm.the.link.type.has |
1aea0 | 20 62 65 65 6e 20 73 65 74 20 74 6f 20 47 52 45 3a 2a 2a 00 2a 2a 33 2e 20 43 6f 6e 66 69 72 6d | .been.set.to.GRE:**.**3..Confirm |
1aec0 | 20 49 50 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 61 63 72 6f 73 73 20 74 68 65 20 74 75 6e 6e | .IP.connectivity.across.the.tunn |
1aee0 | 65 6c 3a 2a 2a 00 2a 2a 35 2a 2a 20 2d 20 4d 6f 73 74 20 63 6f 6d 6d 6f 6e 20 76 65 72 73 69 6f | el:**.**5**.-.Most.common.versio |
1af00 | 6e 2c 20 62 75 74 20 72 65 73 74 72 69 63 74 65 64 20 74 6f 20 49 50 76 34 20 66 6c 6f 77 73 20 | n,.but.restricted.to.IPv4.flows. |
1af20 | 6f 6e 6c 79 00 2a 2a 39 2a 2a 20 2d 20 4e 65 74 46 6c 6f 77 20 76 65 72 73 69 6f 6e 20 39 20 28 | only.**9**.-.NetFlow.version.9.( |
1af40 | 64 65 66 61 75 6c 74 29 00 2a 2a 41 53 20 70 61 74 68 20 6c 65 6e 67 74 68 20 63 68 65 63 6b 2a | default).**AS.path.length.check* |
1af60 | 2a 00 2a 2a 41 63 74 69 76 65 2d 61 63 74 69 76 65 2a 2a 3a 20 62 6f 74 68 20 44 48 43 50 20 73 | *.**Active-active**:.both.DHCP.s |
1af80 | 65 72 76 65 72 73 20 77 69 6c 6c 20 72 65 73 70 6f 6e 64 20 74 6f 20 44 48 43 50 20 72 65 71 75 | ervers.will.respond.to.DHCP.requ |
1afa0 | 65 73 74 73 2e 20 49 66 20 60 60 6d 6f 64 65 60 60 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 | ests..If.``mode``.is.not.defined |
1afc0 | 2c 20 74 68 69 73 20 69 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 62 65 68 61 76 69 6f 72 2e 00 | ,.this.is.the.default.behavior.. |
1afe0 | 2a 2a 41 63 74 69 76 65 2d 70 61 73 73 69 76 65 2a 2a 3a 20 6f 6e 6c 79 20 60 60 70 72 69 6d 61 | **Active-passive**:.only.``prima |
1b000 | 72 79 60 60 20 73 65 72 76 65 72 20 77 69 6c 6c 20 72 65 73 70 6f 6e 64 20 74 6f 20 44 48 43 50 | ry``.server.will.respond.to.DHCP |
1b020 | 20 72 65 71 75 65 73 74 73 2e 20 49 66 20 74 68 69 73 20 73 65 72 76 65 72 20 67 6f 65 73 20 6f | .requests..If.this.server.goes.o |
1b040 | 66 66 6c 69 6e 65 2c 20 74 68 65 6e 20 60 60 73 65 63 6f 6e 64 61 72 79 60 60 20 73 65 72 76 65 | ffline,.then.``secondary``.serve |
1b060 | 72 20 77 69 6c 6c 20 74 61 6b 65 20 70 6c 61 63 65 2e 00 2a 2a 41 6c 72 65 61 64 79 2d 73 65 6c | r.will.take.place..**Already-sel |
1b080 | 65 63 74 65 64 20 65 78 74 65 72 6e 61 6c 20 63 68 65 63 6b 2a 2a 00 2a 2a 41 70 70 6c 69 65 73 | ected.external.check**.**Applies |
1b0a0 | 20 74 6f 3a 2a 2a 20 49 6e 62 6f 75 6e 64 20 74 72 61 66 66 69 63 2e 00 2a 2a 41 70 70 6c 69 65 | .to:**.Inbound.traffic..**Applie |
1b0c0 | 73 20 74 6f 3a 2a 2a 20 4f 75 74 62 6f 75 6e 64 20 54 72 61 66 66 69 63 2e 00 2a 2a 41 70 70 6c | s.to:**.Outbound.Traffic..**Appl |
1b0e0 | 69 65 73 20 74 6f 3a 2a 2a 20 4f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 2e 00 2a 2a 41 70 | ies.to:**.Outbound.traffic..**Ap |
1b100 | 70 6c 79 20 74 68 65 20 74 72 61 66 66 69 63 20 70 6f 6c 69 63 79 20 74 6f 20 61 6e 20 69 6e 74 | ply.the.traffic.policy.to.an.int |
1b120 | 65 72 66 61 63 65 20 69 6e 67 72 65 73 73 20 6f 72 20 65 67 72 65 73 73 2a 2a 2e 00 2a 2a 42 72 | erface.ingress.or.egress**..**Br |
1b140 | 69 64 67 65 20 50 6f 72 74 3f 2a 2a 3a 20 63 68 6f 6f 73 65 20 61 70 70 72 6f 70 69 61 74 65 20 | idge.Port?**:.choose.appropiate. |
1b160 | 70 61 74 68 20 62 61 73 65 64 20 6f 6e 20 69 66 20 69 6e 74 65 72 66 61 63 65 20 77 65 72 65 20 | path.based.on.if.interface.were. |
1b180 | 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 69 73 20 70 61 72 74 20 | the.packet.was.received.is.part. |
1b1a0 | 6f 66 20 61 20 62 72 69 64 67 65 2c 20 6f 72 20 6e 6f 74 2e 00 2a 2a 42 72 69 64 67 65 20 50 6f | of.a.bridge,.or.not..**Bridge.Po |
1b1c0 | 72 74 3f 2a 2a 3a 20 63 68 6f 6f 73 65 20 61 70 70 72 6f 70 72 69 61 74 65 20 70 61 74 68 20 62 | rt?**:.choose.appropriate.path.b |
1b1e0 | 61 73 65 64 20 6f 6e 20 77 68 65 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 | ased.on.whether.interface.where. |
1b200 | 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 69 73 20 70 61 72 74 20 | the.packet.was.received.is.part. |
1b220 | 6f 66 20 61 20 62 72 69 64 67 65 2c 20 6f 72 20 6e 6f 74 2e 00 2a 2a 43 69 73 63 6f 20 49 4f 53 | of.a.bridge,.or.not..**Cisco.IOS |
1b240 | 20 52 6f 75 74 65 72 3a 2a 2a 00 2a 2a 43 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 20 76 | .Router:**.**Client.IP.address.v |
1b260 | 69 61 20 49 50 20 72 61 6e 67 65 20 64 65 66 69 6e 69 74 69 6f 6e 2a 2a 00 2a 2a 43 6c 69 65 6e | ia.IP.range.definition**.**Clien |
1b280 | 74 20 49 50 20 73 75 62 6e 65 74 73 20 76 69 61 20 43 49 44 52 20 6e 6f 74 61 74 69 6f 6e 2a 2a | t.IP.subnets.via.CIDR.notation** |
1b2a0 | 00 2a 2a 43 6c 75 73 74 65 72 2d 4c 69 73 74 20 6c 65 6e 67 74 68 20 63 68 65 63 6b 2a 2a 00 2a | .**Cluster-List.length.check**.* |
1b2c0 | 2a 43 6f 6e 6e 74 72 61 63 6b 20 49 67 6e 6f 72 65 2a 2a 3a 20 72 75 6c 65 73 20 64 65 66 69 6e | *Conntrack.Ignore**:.rules.defin |
1b2e0 | 65 64 20 75 6e 64 65 72 20 60 60 73 65 74 20 73 79 73 74 65 6d 20 63 6f 6e 6e 74 72 61 63 6b 20 | ed.under.``set.system.conntrack. |
1b300 | 69 67 6e 6f 72 65 20 5b 69 70 76 34 20 7c 20 69 70 76 36 5d 20 2e 2e 2e 60 60 2e 00 2a 2a 43 72 | ignore.[ipv4.|.ipv6]....``..**Cr |
1b320 | 65 61 74 65 20 61 20 74 72 61 66 66 69 63 20 70 6f 6c 69 63 79 2a 2a 2e 00 2a 2a 44 48 43 50 28 | eate.a.traffic.policy**..**DHCP( |
1b340 | 76 36 29 2a 2a 00 2a 2a 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e | v6)**.**DHCPv6.Prefix.Delegation |
1b360 | 20 28 50 44 29 2a 2a 00 2a 2a 44 65 73 74 69 6e 61 74 69 6f 6e 20 4e 41 54 2a 2a 3a 20 72 75 6c | .(PD)**.**Destination.NAT**:.rul |
1b380 | 65 73 20 64 65 66 69 6e 65 64 20 75 6e 64 65 72 20 60 60 73 65 74 20 5b 6e 61 74 20 7c 20 6e 61 | es.defined.under.``set.[nat.|.na |
1b3a0 | 74 36 36 5d 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 2e 2e 60 60 2e 00 2a 2a 44 65 73 74 69 6e 61 | t66].destination...``..**Destina |
1b3c0 | 74 69 6f 6e 20 69 73 20 74 68 65 20 72 6f 75 74 65 72 3f 2a 2a 3a 20 63 68 6f 6f 73 65 20 61 70 | tion.is.the.router?**:.choose.ap |
1b3e0 | 70 72 6f 70 69 61 74 65 20 70 61 74 68 20 62 61 73 65 64 20 6f 6e 20 64 65 73 74 69 6e 61 74 69 | propiate.path.based.on.destinati |
1b400 | 6f 6e 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 72 61 6e 73 69 74 20 66 6f 72 77 61 72 64 20 63 | on.IP.address..Transit.forward.c |
1b420 | 6f 6e 74 69 6e 75 6e 65 73 20 74 6f 20 2a 2a 66 6f 72 77 61 72 64 2a 2a 2c 20 77 68 69 6c 65 20 | ontinunes.to.**forward**,.while. |
1b440 | 74 72 61 66 66 69 63 20 74 68 61 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 | traffic.that.destination.IP.addr |
1b460 | 65 73 73 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 20 | ess.is.configured.on.the.router. |
1b480 | 63 6f 6e 74 69 6e 75 65 73 20 74 6f 20 2a 2a 69 6e 70 75 74 2a 2a 2e 00 2a 2a 44 65 73 74 69 6e | continues.to.**input**..**Destin |
1b4a0 | 61 74 69 6f 6e 20 69 73 20 74 68 65 20 72 6f 75 74 65 72 3f 2a 2a 3a 20 63 68 6f 6f 73 65 20 61 | ation.is.the.router?**:.choose.a |
1b4c0 | 70 70 72 6f 70 72 69 61 74 65 20 70 61 74 68 20 62 61 73 65 64 20 6f 6e 20 64 65 73 74 69 6e 61 | ppropriate.path.based.on.destina |
1b4e0 | 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 72 61 6e 73 69 74 20 66 6f 72 77 61 72 64 | tion.IP.address..Transit.forward |
1b500 | 20 63 6f 6e 74 69 6e 75 65 73 20 74 6f 20 2a 2a 66 6f 72 77 61 72 64 2a 2a 2c 20 77 68 69 6c 65 | .continues.to.**forward**,.while |
1b520 | 20 74 72 61 66 66 69 63 20 74 68 61 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 | .traffic.that.destination.IP.add |
1b540 | 72 65 73 73 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 | ress.is.configured.on.the.router |
1b560 | 20 63 6f 6e 74 69 6e 75 65 73 20 74 6f 20 2a 2a 69 6e 70 75 74 2a 2a 2e 00 2a 2a 44 6f 63 75 6d | .continues.to.**input**..**Docum |
1b580 | 65 6e 74 61 74 69 6f 6e 20 75 6e 64 65 72 20 64 65 76 65 6c 6f 70 6d 65 6e 74 2a 2a 00 2a 2a 45 | entation.under.development**.**E |
1b5a0 | 74 68 65 72 6e 65 74 20 28 70 72 6f 74 6f 63 6f 6c 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 | thernet.(protocol,.destination.a |
1b5c0 | 64 64 72 65 73 73 20 6f 72 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 29 2a 2a 00 2a 2a 45 78 | ddress.or.source.address)**.**Ex |
1b5e0 | 61 6d 70 6c 65 3a 2a 2a 00 2a 2a 45 78 74 65 72 6e 61 6c 20 63 68 65 63 6b 2a 2a 00 2a 2a 46 69 | ample:**.**External.check**.**Fi |
1b600 | 72 65 77 61 6c 6c 20 6d 61 72 6b 2a 2a 00 2a 2a 46 6c 6f 77 74 61 62 6c 65 20 52 65 66 65 72 65 | rewall.mark**.**Flowtable.Refere |
1b620 | 6e 63 65 3a 2a 2a 20 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 6b 65 72 6e 65 6c 2e 6f 72 67 2f 6e | nce:**.https://docs.kernel.org/n |
1b640 | 65 74 77 6f 72 6b 69 6e 67 2f 6e 66 5f 66 6c 6f 77 74 61 62 6c 65 2e 68 74 6d 6c 00 2a 2a 46 6f | etworking/nf_flowtable.html.**Fo |
1b660 | 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2a 2a 20 6f 66 20 4e 65 74 66 69 6c 74 65 | r.more.information**.of.Netfilte |
1b680 | 72 20 68 6f 6f 6b 73 20 61 6e 64 20 4c 69 6e 75 78 20 6e 65 74 77 6f 72 6b 69 6e 67 20 70 61 63 | r.hooks.and.Linux.networking.pac |
1b6a0 | 6b 65 74 20 66 6c 6f 77 73 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 60 4e 65 74 66 69 | ket.flows.can.be.found.in.`Netfi |
1b6c0 | 6c 74 65 72 2d 48 6f 6f 6b 73 20 3c 68 74 74 70 73 3a 2f 2f 77 69 6b 69 2e 6e 66 74 61 62 6c 65 | lter-Hooks.<https://wiki.nftable |
1b6e0 | 73 2e 6f 72 67 2f 77 69 6b 69 2d 6e 66 74 61 62 6c 65 73 2f 69 6e 64 65 78 2e 70 68 70 2f 4e 65 | s.org/wiki-nftables/index.php/Ne |
1b700 | 74 66 69 6c 74 65 72 5f 68 6f 6f 6b 73 3e 60 5f 00 2a 2a 46 6f 72 77 61 72 64 20 28 42 72 69 64 | tfilter_hooks>`_.**Forward.(Brid |
1b720 | 67 65 29 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 | ge)**:.stage.where.traffic.that. |
1b740 | 69 73 20 74 72 61 73 73 70 61 73 69 6e 67 20 74 68 72 6f 75 67 68 20 74 68 65 20 62 72 69 64 67 | is.trasspasing.through.the.bridg |
1b760 | 65 20 69 73 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 3a 00 2a 2a | e.is.filtered.and.controlled:.** |
1b780 | 46 6f 72 77 61 72 64 20 28 42 72 69 64 67 65 29 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 | Forward.(Bridge)**:.stage.where. |
1b7a0 | 74 72 61 66 66 69 63 20 74 68 61 74 20 69 73 20 74 72 65 73 70 61 73 69 6e 67 20 74 68 72 6f 75 | traffic.that.is.trespasing.throu |
1b7c0 | 67 68 20 74 68 65 20 62 72 69 64 67 65 20 69 73 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f | gh.the.bridge.is.filtered.and.co |
1b7e0 | 6e 74 72 6f 6c 6c 65 64 3a 00 2a 2a 46 6f 72 77 61 72 64 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 | ntrolled:.**Forward**:.stage.whe |
1b800 | 72 65 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 66 69 6c 74 65 72 | re.transit.traffic.can.be.filter |
1b820 | 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 | ed.and.controlled..This.includes |
1b840 | 20 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 | .ipv4.and.ipv6.filtering.rules,. |
1b860 | 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 48 61 72 64 77 61 72 65 20 6f 66 66 6c 6f 61 64 3a 2a | defined.in:.**Hardware.offload:* |
1b880 | 2a 20 73 68 6f 75 6c 64 20 62 65 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 65 20 4e 49 43 | *.should.be.supported.by.the.NIC |
1b8a0 | 73 20 75 73 65 64 2e 00 2a 2a 49 47 50 20 63 6f 73 74 20 63 68 65 63 6b 2a 2a 00 2a 2a 49 50 76 | s.used..**IGP.cost.check**.**IPv |
1b8c0 | 34 20 28 44 53 43 50 20 76 61 6c 75 65 2c 20 6d 61 78 69 6d 75 6d 20 70 61 63 6b 65 74 20 6c 65 | 4.(DSCP.value,.maximum.packet.le |
1b8e0 | 6e 67 74 68 2c 20 70 72 6f 74 6f 63 6f 6c 2c 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2c 2a | ngth,.protocol,.source.address,* |
1b900 | 2a 20 2a 2a 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2c 20 73 6f 75 72 63 65 20 | *.**destination.address,.source. |
1b920 | 70 6f 72 74 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 6f 72 20 54 43 50 20 66 6c | port,.destination.port.or.TCP.fl |
1b940 | 61 67 73 29 2a 2a 00 2a 2a 49 50 76 36 20 28 44 53 43 50 20 76 61 6c 75 65 2c 20 6d 61 78 69 6d | ags)**.**IPv6.(DSCP.value,.maxim |
1b960 | 75 6d 20 70 61 79 6c 6f 61 64 20 6c 65 6e 67 74 68 2c 20 70 72 6f 74 6f 63 6f 6c 2c 20 73 6f 75 | um.payload.length,.protocol,.sou |
1b980 | 72 63 65 20 61 64 64 72 65 73 73 2c 2a 2a 20 2a 2a 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 | rce.address,**.**destination.add |
1b9a0 | 72 65 73 73 2c 20 73 6f 75 72 63 65 20 70 6f 72 74 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 | ress,.source.port,.destination.p |
1b9c0 | 6f 72 74 20 6f 72 20 54 43 50 20 66 6c 61 67 73 29 2a 2a 00 2a 2a 49 66 20 79 6f 75 20 61 72 65 | ort.or.TCP.flags)**.**If.you.are |
1b9e0 | 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 61 20 70 6f 6c 69 63 79 20 66 6f 72 20 79 6f 75 72 20 6f | .looking.for.a.policy.for.your.o |
1ba00 | 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 2a 2a 20 62 75 74 20 79 6f 75 20 64 6f 6e 27 74 20 | utbound.traffic**.but.you.don't. |
1ba20 | 6b 6e 6f 77 20 77 68 69 63 68 20 6f 6e 65 20 79 6f 75 20 6e 65 65 64 20 61 6e 64 20 79 6f 75 20 | know.which.one.you.need.and.you. |
1ba40 | 64 6f 6e 27 74 20 77 61 6e 74 20 74 6f 20 67 6f 20 74 68 72 6f 75 67 68 20 65 76 65 72 79 20 70 | don't.want.to.go.through.every.p |
1ba60 | 6f 73 73 69 62 6c 65 20 70 6f 6c 69 63 79 20 73 68 6f 77 6e 20 68 65 72 65 2c 20 2a 2a 6f 75 72 | ossible.policy.shown.here,.**our |
1ba80 | 20 62 65 74 20 69 73 20 74 68 61 74 20 68 69 67 68 6c 79 20 6c 69 6b 65 6c 79 20 79 6f 75 20 61 | .bet.is.that.highly.likely.you.a |
1baa0 | 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 61 2a 2a 20 53 68 61 70 65 72 5f 20 2a 2a 70 6f 6c | re.looking.for.a**.Shaper_.**pol |
1bac0 | 69 63 79 20 61 6e 64 20 79 6f 75 20 77 61 6e 74 20 74 6f 2a 2a 20 3a 72 65 66 3a 60 73 65 74 20 | icy.and.you.want.to**.:ref:`set. |
1bae0 | 69 74 73 20 71 75 65 75 65 73 20 3c 65 6d 62 65 64 3e 60 20 2a 2a 61 73 20 46 51 2d 43 6f 44 65 | its.queues.<embed>`.**as.FQ-CoDe |
1bb00 | 6c 2a 2a 2e 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 20 61 62 6f 75 74 20 64 65 66 61 | l**..**Important.note.about.defa |
1bb20 | 75 6c 74 2d 61 63 74 69 6f 6e 73 3a 2a 2a 20 49 66 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e | ult-actions:**.If.default.action |
1bb40 | 20 66 6f 72 20 61 6e 79 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e | .for.any.base.chain.is.not.defin |
1bb60 | 65 64 2c 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 73 | ed,.then.the.default.action.is.s |
1bb80 | 65 74 20 74 6f 20 2a 2a 61 63 63 65 70 74 2a 2a 20 66 6f 72 20 74 68 61 74 20 63 68 61 69 6e 2e | et.to.**accept**.for.that.chain. |
1bba0 | 20 46 6f 72 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 73 2c 20 69 66 20 64 65 66 61 75 6c 74 20 61 | .For.custom.chains,.if.default.a |
1bbc0 | 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 74 68 65 20 64 | ction.is.not.defined,.then.the.d |
1bbe0 | 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a 2a 64 72 6f 70 2a 2a | efault-action.is.set.to.**drop** |
1bc00 | 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 20 61 62 6f 75 74 20 64 65 66 61 75 6c 74 2d | .**Important.note.about.default- |
1bc20 | 61 63 74 69 6f 6e 73 3a 2a 2a 20 49 66 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 66 6f 72 | actions:**.If.default.action.for |
1bc40 | 20 61 6e 79 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 | .any.base.chain.is.not.defined,. |
1bc60 | 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 | then.the.default.action.is.set.t |
1bc80 | 6f 20 2a 2a 61 63 63 65 70 74 2a 2a 20 66 6f 72 20 74 68 61 74 20 63 68 61 69 6e 2e 20 46 6f 72 | o.**accept**.for.that.chain..For |
1bca0 | 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 73 2c 20 69 66 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f | .custom.chains,.if.default.actio |
1bcc0 | 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 | n.is.not.defined,.then.the.defau |
1bce0 | 6c 74 2d 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a 2a 64 72 6f 70 2a 2a 2e 00 2a 2a | lt-action.is.set.to.**drop**..** |
1bd00 | 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 20 61 62 6f 75 74 20 64 65 66 61 75 6c 74 2d 61 63 74 | Important.note.about.default-act |
1bd20 | 69 6f 6e 73 3a 2a 2a 20 49 66 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 66 6f 72 20 61 6e | ions:**.If.default.action.for.an |
1bd40 | 79 20 63 68 61 69 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 74 68 65 | y.chain.is.not.defined,.then.the |
1bd60 | 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a 2a 61 63 63 65 | .default.action.is.set.to.**acce |
1bd80 | 70 74 2a 2a 20 66 6f 72 20 74 68 61 74 20 63 68 61 69 6e 2e 20 4f 6e 6c 79 20 66 6f 72 20 63 75 | pt**.for.that.chain..Only.for.cu |
1bda0 | 73 74 6f 6d 20 63 68 61 69 6e 73 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 | stom.chains,.the.default.action. |
1bdc0 | 69 73 20 73 65 74 20 74 6f 20 2a 2a 64 72 6f 70 2a 2a 2e 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 | is.set.to.**drop**..**Important. |
1bde0 | 6e 6f 74 65 20 61 62 6f 75 74 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 73 3a 2a 2a 20 49 66 | note.about.default-actions:**.If |
1be00 | 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 66 6f 72 20 61 6e 79 20 63 68 61 69 6e 20 69 73 | .default.action.for.any.chain.is |
1be20 | 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 | .not.defined,.then.the.default.a |
1be40 | 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a 2a 64 72 6f 70 2a 2a 20 66 6f 72 20 74 68 61 | ction.is.set.to.**drop**.for.tha |
1be60 | 74 20 63 68 61 69 6e 2e 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 20 6f 6e 20 75 73 61 | t.chain..**Important.note.on.usa |
1be80 | 67 65 20 6f 66 20 74 65 72 6d 73 3a 2a 2a 20 54 68 65 20 66 69 72 65 77 61 6c 6c 20 6d 61 6b 65 | ge.of.terms:**.The.firewall.make |
1bea0 | 73 20 75 73 65 20 6f 66 20 74 68 65 20 74 65 72 6d 73 20 60 66 6f 72 77 61 72 64 60 2c 20 60 69 | s.use.of.the.terms.`forward`,.`i |
1bec0 | 6e 70 75 74 60 2c 20 61 6e 64 20 60 6f 75 74 70 75 74 60 20 66 6f 72 20 66 69 72 65 77 61 6c 6c | nput`,.and.`output`.for.firewall |
1bee0 | 20 70 6f 6c 69 63 79 2e 20 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 4e 65 74 | .policy..More.information.of.Net |
1bf00 | 66 69 6c 74 65 72 20 68 6f 6f 6b 73 20 61 6e 64 20 4c 69 6e 75 78 20 6e 65 74 77 6f 72 6b 69 6e | filter.hooks.and.Linux.networkin |
1bf20 | 67 20 70 61 63 6b 65 74 20 66 6c 6f 77 73 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 60 | g.packet.flows.can.be.found.in.` |
1bf40 | 4e 65 74 66 69 6c 74 65 72 2d 48 6f 6f 6b 73 20 3c 68 74 74 70 73 3a 2f 2f 77 69 6b 69 2e 6e 66 | Netfilter-Hooks.<https://wiki.nf |
1bf60 | 74 61 62 6c 65 73 2e 6f 72 67 2f 77 69 6b 69 2d 6e 66 74 61 62 6c 65 73 2f 69 6e 64 65 78 2e 70 | tables.org/wiki-nftables/index.p |
1bf80 | 68 70 2f 4e 65 74 66 69 6c 74 65 72 5f 68 6f 6f 6b 73 3e 60 5f 00 2a 2a 49 6d 70 6f 72 74 61 6e | hp/Netfilter_hooks>`_.**Importan |
1bfa0 | 74 20 6e 6f 74 65 20 6f 6e 20 75 73 61 67 65 20 6f 66 20 74 65 72 6d 73 3a 2a 2a 20 54 68 65 20 | t.note.on.usage.of.terms:**.The. |
1bfc0 | 66 69 72 65 77 61 6c 6c 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 74 68 65 20 74 65 72 6d 73 20 | firewall.makes.use.of.the.terms. |
1bfe0 | 60 69 6e 60 2c 20 60 6f 75 74 60 2c 20 61 6e 64 20 60 6c 6f 63 61 6c 60 20 66 6f 72 20 66 69 72 | `in`,.`out`,.and.`local`.for.fir |
1c000 | 65 77 61 6c 6c 20 70 6f 6c 69 63 79 2e 20 55 73 65 72 73 20 65 78 70 65 72 69 65 6e 63 65 64 20 | ewall.policy..Users.experienced. |
1c020 | 77 69 74 68 20 6e 65 74 66 69 6c 74 65 72 20 6f 66 74 65 6e 20 63 6f 6e 66 75 73 65 20 60 69 6e | with.netfilter.often.confuse.`in |
1c040 | 60 20 74 6f 20 62 65 20 61 20 72 65 66 65 72 65 6e 63 65 20 74 6f 20 74 68 65 20 60 49 4e 50 55 | `.to.be.a.reference.to.the.`INPU |
1c060 | 54 60 20 63 68 61 69 6e 2c 20 61 6e 64 20 60 6f 75 74 60 20 74 68 65 20 60 4f 55 54 50 55 54 60 | T`.chain,.and.`out`.the.`OUTPUT` |
1c080 | 20 63 68 61 69 6e 20 66 72 6f 6d 20 6e 65 74 66 69 6c 74 65 72 2e 20 54 68 69 73 20 69 73 20 6e | .chain.from.netfilter..This.is.n |
1c0a0 | 6f 74 20 74 68 65 20 63 61 73 65 2e 20 54 68 65 73 65 20 69 6e 73 74 65 61 64 20 69 6e 64 69 63 | ot.the.case..These.instead.indic |
1c0c0 | 61 74 65 20 74 68 65 20 75 73 65 20 6f 66 20 74 68 65 20 60 46 4f 52 57 41 52 44 60 20 63 68 61 | ate.the.use.of.the.`FORWARD`.cha |
1c0e0 | 69 6e 20 61 6e 64 20 65 69 74 68 65 72 20 74 68 65 20 69 6e 70 75 74 20 6f 72 20 6f 75 74 70 75 | in.and.either.the.input.or.outpu |
1c100 | 74 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 60 49 4e 50 55 54 60 20 63 68 61 69 6e 2c 20 | t.interface..The.`INPUT`.chain,. |
1c120 | 77 68 69 63 68 20 69 73 20 75 73 65 64 20 66 6f 72 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 20 | which.is.used.for.local.traffic. |
1c140 | 74 6f 20 74 68 65 20 4f 53 2c 20 69 73 20 61 20 72 65 66 65 72 65 6e 63 65 20 74 6f 20 61 73 20 | to.the.OS,.is.a.reference.to.as. |
1c160 | 60 6c 6f 63 61 6c 60 20 77 69 74 68 20 72 65 73 70 65 63 74 20 74 6f 20 69 74 73 20 69 6e 70 75 | `local`.with.respect.to.its.inpu |
1c180 | 74 20 69 6e 74 65 72 66 61 63 65 2e 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 3a 2a 2a | t.interface..**Important.note:** |
1c1a0 | 20 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 69 73 20 76 61 6c 69 64 20 6f 6e 6c | .This.documentation.is.valid.onl |
1c1c0 | 79 20 66 6f 72 20 56 79 4f 53 20 53 61 67 69 74 74 61 20 70 72 69 6f 72 20 74 6f 20 31 2e 34 2d | y.for.VyOS.Sagitta.prior.to.1.4- |
1c1e0 | 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 | rolling-202308040557.**Important |
1c200 | 20 6e 6f 74 65 3a 2a 2a 20 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 69 73 20 76 | .note:**.This.documentation.is.v |
1c220 | 61 6c 69 64 20 6f 6e 6c 79 20 66 6f 72 20 56 79 4f 53 20 53 61 67 69 74 74 61 20 70 72 69 6f 72 | alid.only.for.VyOS.Sagitta.prior |
1c240 | 20 74 6f 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 59 59 59 59 4d 4d 44 44 48 48 6d 6d 00 2a 2a 49 | .to.1.4-rolling-YYYYMMDDHHmm.**I |
1c260 | 6e 70 75 74 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 64 65 73 74 | nput**:.stage.where.traffic.dest |
1c280 | 69 6e 61 74 65 64 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 20 63 61 6e 20 | inated.to.the.router.itself.can. |
1c2a0 | 62 65 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 2e 20 54 68 69 73 | be.filtered.and.controlled..This |
1c2c0 | 20 69 73 20 77 68 65 72 65 20 61 6c 6c 20 72 75 6c 65 73 20 66 6f 72 20 73 65 63 75 72 69 6e 67 | .is.where.all.rules.for.securing |
1c2e0 | 20 74 68 65 20 72 6f 75 74 65 72 20 73 68 6f 75 6c 64 20 74 61 6b 65 20 70 6c 61 63 65 2e 20 54 | .the.router.should.take.place..T |
1c300 | 68 69 73 20 69 6e 63 6c 75 64 65 73 20 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 66 69 6c 74 65 | his.includes.ipv4.and.ipv6.filte |
1c320 | 72 69 6e 67 20 72 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 49 6e 70 75 74 2a | ring.rules,.defined.in:.**Input* |
1c340 | 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 64 65 73 74 69 6e 65 64 20 | *:.stage.where.traffic.destined. |
1c360 | 66 6f 72 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 20 63 61 6e 20 62 65 20 66 69 6c | for.the.router.itself.can.be.fil |
1c380 | 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 2e 20 54 68 69 73 20 69 73 20 77 68 | tered.and.controlled..This.is.wh |
1c3a0 | 65 72 65 20 61 6c 6c 20 72 75 6c 65 73 20 66 6f 72 20 73 65 63 75 72 69 6e 67 20 74 68 65 20 72 | ere.all.rules.for.securing.the.r |
1c3c0 | 6f 75 74 65 72 20 73 68 6f 75 6c 64 20 74 61 6b 65 20 70 6c 61 63 65 2e 20 54 68 69 73 20 69 6e | outer.should.take.place..This.in |
1c3e0 | 63 6c 75 64 65 73 20 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 66 69 6c 74 65 72 69 6e 67 20 72 | cludes.ipv4.and.ipv6.filtering.r |
1c400 | 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 49 6e 74 65 72 66 61 63 65 20 6e 61 | ules,.defined.in:.**Interface.na |
1c420 | 6d 65 2a 2a 00 2a 2a 4c 45 46 54 2a 2a 00 2a 2a 4c 45 46 54 3a 2a 2a 20 2a 20 57 41 4e 20 69 6e | me**.**LEFT**.**LEFT:**.*.WAN.in |
1c440 | 74 65 72 66 61 63 65 20 6f 6e 20 60 65 74 68 30 2e 32 30 31 60 20 2a 20 60 65 74 68 30 2e 32 30 | terface.on.`eth0.201`.*.`eth0.20 |
1c460 | 31 60 20 69 6e 74 65 72 66 61 63 65 20 49 50 3a 20 60 31 37 32 2e 31 38 2e 32 30 31 2e 31 30 2f | 1`.interface.IP:.`172.18.201.10/ |
1c480 | 32 34 60 20 2a 20 60 76 74 69 31 30 60 20 69 6e 74 65 72 66 61 63 65 20 49 50 3a 20 60 31 30 2e | 24`.*.`vti10`.interface.IP:.`10. |
1c4a0 | 30 2e 30 2e 32 2f 33 31 60 20 2a 20 60 64 75 6d 30 60 20 69 6e 74 65 72 66 61 63 65 20 49 50 3a | 0.0.2/31`.*.`dum0`.interface.IP: |
1c4c0 | 20 60 31 30 2e 30 2e 31 31 2e 31 2f 32 34 60 20 28 66 6f 72 20 74 65 73 74 69 6e 67 20 70 75 72 | .`10.0.11.1/24`.(for.testing.pur |
1c4e0 | 70 6f 73 65 73 29 00 2a 2a 4c 61 79 65 72 20 33 20 62 72 69 64 67 65 2a 2a 3a 20 57 68 65 6e 20 | poses).**Layer.3.bridge**:.When. |
1c500 | 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 74 68 65 | an.IP.address.is.assigned.to.the |
1c520 | 20 62 72 69 64 67 65 20 69 6e 74 65 72 66 61 63 65 2c 20 61 6e 64 20 69 66 20 74 72 61 66 66 69 | .bridge.interface,.and.if.traffi |
1c540 | 63 20 69 73 20 73 65 6e 74 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 74 6f 20 74 68 69 73 20 | c.is.sent.to.the.router.to.this. |
1c560 | 49 50 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 20 75 73 69 6e 67 20 73 75 63 68 20 49 50 20 61 73 | IP.(for.example.using.such.IP.as |
1c580 | 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 29 2c 20 74 68 65 6e 20 72 75 6c 65 73 20 64 65 | .default.gateway),.then.rules.de |
1c5a0 | 66 69 6e 65 64 20 66 6f 72 20 2a 2a 62 72 69 64 67 65 20 66 69 72 65 77 61 6c 6c 2a 2a 20 77 6f | fined.for.**bridge.firewall**.wo |
1c5c0 | 6e 27 74 20 6d 61 74 63 68 2c 20 61 6e 64 20 66 69 72 65 77 61 6c 6c 20 61 6e 61 6c 79 73 69 73 | n't.match,.and.firewall.analysis |
1c5e0 | 20 63 6f 6e 74 69 6e 75 65 73 20 61 74 20 2a 2a 49 50 20 6c 61 79 65 72 2a 2a 2e 00 2a 2a 4c 65 | .continues.at.**IP.layer**..**Le |
1c600 | 61 66 32 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 2a 2a 00 2a 2a 4c 65 61 66 33 20 63 6f 6e | af2.configuration:**.**Leaf3.con |
1c620 | 66 69 67 75 72 61 74 69 6f 6e 3a 2a 2a 00 2a 2a 4c 69 6e 75 78 20 73 79 73 74 65 6d 64 2d 6e 65 | figuration:**.**Linux.systemd-ne |
1c640 | 74 77 6f 72 6b 64 3a 2a 2a 00 2a 2a 4c 6f 63 61 6c 20 70 72 65 66 65 72 65 6e 63 65 20 63 68 65 | tworkd:**.**Local.preference.che |
1c660 | 63 6b 2a 2a 00 2a 2a 4c 6f 63 61 6c 20 72 6f 75 74 65 20 63 68 65 63 6b 2a 2a 00 2a 2a 4d 45 44 | ck**.**Local.route.check**.**MED |
1c680 | 20 63 68 65 63 6b 2a 2a 00 2a 2a 4d 75 6c 74 69 2d 70 61 74 68 20 63 68 65 63 6b 2a 2a 00 2a 2a | .check**.**Multi-path.check**.** |
1c6a0 | 4e 6f 64 65 20 31 2a 2a 00 2a 2a 4e 6f 64 65 20 31 3a 2a 2a 00 2a 2a 4e 6f 64 65 20 32 2a 2a 00 | Node.1**.**Node.1:**.**Node.2**. |
1c6c0 | 2a 2a 4e 6f 64 65 20 32 3a 2a 2a 00 2a 2a 4e 6f 64 65 31 3a 2a 2a 00 2a 2a 4e 6f 64 65 32 3a 2a | **Node.2:**.**Node1:**.**Node2:* |
1c6e0 | 2a 00 2a 2a 4f 50 54 49 4f 4e 41 4c 3a 2a 2a 20 45 78 63 6c 75 64 65 20 49 6e 74 65 72 2d 56 4c | *.**OPTIONAL:**.Exclude.Inter-VL |
1c700 | 41 4e 20 74 72 61 66 66 69 63 20 28 62 65 74 77 65 65 6e 20 56 4c 41 4e 31 30 20 61 6e 64 20 56 | AN.traffic.(between.VLAN10.and.V |
1c720 | 4c 41 4e 31 31 29 20 66 72 6f 6d 20 50 42 52 00 2a 2a 4f 53 50 46 20 6e 65 74 77 6f 72 6b 20 72 | LAN11).from.PBR.**OSPF.network.r |
1c740 | 6f 75 74 69 6e 67 20 74 61 62 6c 65 2a 2a 20 e2 80 93 20 69 6e 63 6c 75 64 65 73 20 61 20 6c 69 | outing.table**.....includes.a.li |
1c760 | 73 74 20 6f 66 20 61 63 71 75 69 72 65 64 20 72 6f 75 74 65 73 20 66 6f 72 20 61 6c 6c 20 61 63 | st.of.acquired.routes.for.all.ac |
1c780 | 63 65 73 73 69 62 6c 65 20 6e 65 74 77 6f 72 6b 73 20 28 6f 72 20 61 67 67 72 65 67 61 74 65 64 | cessible.networks.(or.aggregated |
1c7a0 | 20 61 72 65 61 20 72 61 6e 67 65 73 29 20 6f 66 20 4f 53 50 46 20 73 79 73 74 65 6d 2e 20 22 49 | .area.ranges).of.OSPF.system.."I |
1c7c0 | 41 22 20 66 6c 61 67 20 6d 65 61 6e 73 20 74 68 61 74 20 72 6f 75 74 65 20 64 65 73 74 69 6e 61 | A".flag.means.that.route.destina |
1c7e0 | 74 69 6f 6e 20 69 73 20 69 6e 20 74 68 65 20 61 72 65 61 20 74 6f 20 77 68 69 63 68 20 74 68 65 | tion.is.in.the.area.to.which.the |
1c800 | 20 72 6f 75 74 65 72 20 69 73 20 6e 6f 74 20 63 6f 6e 6e 65 63 74 65 64 2c 20 69 2e 65 2e 20 69 | .router.is.not.connected,.i.e..i |
1c820 | 74 e2 80 99 73 20 61 6e 20 69 6e 74 65 72 2d 61 72 65 61 20 70 61 74 68 2e 20 49 6e 20 73 71 75 | t...s.an.inter-area.path..In.squ |
1c840 | 61 72 65 20 62 72 61 63 6b 65 74 73 20 61 20 73 75 6d 6d 61 72 79 20 6d 65 74 72 69 63 20 66 6f | are.brackets.a.summary.metric.fo |
1c860 | 72 20 61 6c 6c 20 6c 69 6e 6b 73 20 74 68 72 6f 75 67 68 20 77 68 69 63 68 20 61 20 70 61 74 68 | r.all.links.through.which.a.path |
1c880 | 20 6c 69 65 73 20 74 6f 20 74 68 69 73 20 6e 65 74 77 6f 72 6b 20 69 73 20 73 70 65 63 69 66 69 | .lies.to.this.network.is.specifi |
1c8a0 | 65 64 2e 20 22 76 69 61 22 20 70 72 65 66 69 78 20 64 65 66 69 6e 65 73 20 61 20 72 6f 75 74 65 | ed.."via".prefix.defines.a.route |
1c8c0 | 72 2d 67 61 74 65 77 61 79 2c 20 69 2e 65 2e 20 74 68 65 20 66 69 72 73 74 20 72 6f 75 74 65 72 | r-gateway,.i.e..the.first.router |
1c8e0 | 20 6f 6e 20 74 68 65 20 77 61 79 20 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 28 | .on.the.way.to.the.destination.( |
1c900 | 6e 65 78 74 20 68 6f 70 29 2e 20 2a 2a 4f 53 50 46 20 72 6f 75 74 65 72 20 72 6f 75 74 69 6e 67 | next.hop)..**OSPF.router.routing |
1c920 | 20 74 61 62 6c 65 2a 2a 20 e2 80 93 20 69 6e 63 6c 75 64 65 73 20 61 20 6c 69 73 74 20 6f 66 20 | .table**.....includes.a.list.of. |
1c940 | 61 63 71 75 69 72 65 64 20 72 6f 75 74 65 73 20 74 6f 20 61 6c 6c 20 61 63 63 65 73 73 69 62 6c | acquired.routes.to.all.accessibl |
1c960 | 65 20 41 42 52 73 20 61 6e 64 20 41 53 42 52 73 2e 20 2a 2a 4f 53 50 46 20 65 78 74 65 72 6e 61 | e.ABRs.and.ASBRs..**OSPF.externa |
1c980 | 6c 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2a 2a 20 e2 80 93 20 69 6e 63 6c 75 64 65 73 20 61 | l.routing.table**.....includes.a |
1c9a0 | 20 6c 69 73 74 20 6f 66 20 61 63 71 75 69 72 65 64 20 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 | .list.of.acquired.routes.that.ar |
1c9c0 | 65 20 65 78 74 65 72 6e 61 6c 20 74 6f 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 2e 20 | e.external.to.the.OSPF.process.. |
1c9e0 | 22 45 22 20 66 6c 61 67 20 70 6f 69 6e 74 73 20 74 6f 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 | "E".flag.points.to.the.external. |
1ca00 | 6c 69 6e 6b 20 6d 65 74 72 69 63 20 74 79 70 65 20 28 45 31 20 e2 80 93 20 6d 65 74 72 69 63 20 | link.metric.type.(E1.....metric. |
1ca20 | 74 79 70 65 20 31 2c 20 45 32 20 e2 80 93 20 6d 65 74 72 69 63 20 74 79 70 65 20 32 29 2e 20 45 | type.1,.E2.....metric.type.2)..E |
1ca40 | 78 74 65 72 6e 61 6c 20 6c 69 6e 6b 20 6d 65 74 72 69 63 20 69 73 20 70 72 69 6e 74 65 64 20 69 | xternal.link.metric.is.printed.i |
1ca60 | 6e 20 74 68 65 20 22 3c 6d 65 74 72 69 63 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 20 77 68 69 | n.the."<metric.of.the.router.whi |
1ca80 | 63 68 20 61 64 76 65 72 74 69 73 65 64 20 74 68 65 20 6c 69 6e 6b 3e 2f 3c 6c 69 6e 6b 20 6d 65 | ch.advertised.the.link>/<link.me |
1caa0 | 74 72 69 63 3e 22 20 66 6f 72 6d 61 74 2e 00 2a 2a 4f 6e 65 20 67 61 74 65 77 61 79 3a 2a 2a 00 | tric>".format..**One.gateway:**. |
1cac0 | 2a 2a 4f 72 69 67 69 6e 20 63 68 65 63 6b 2a 2a 00 2a 2a 4f 75 74 70 75 74 2a 2a 3a 20 73 74 61 | **Origin.check**.**Output**:.sta |
1cae0 | 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 69 73 20 6f 72 69 67 69 6e 61 | ge.where.traffic.that.is.origina |
1cb00 | 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 20 63 61 6e 20 62 65 20 | ted.by.the.router.itself.can.be. |
1cb20 | 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 2e 20 42 61 72 65 20 69 6e | filtered.and.controlled..Bare.in |
1cb40 | 20 6d 69 6e 64 20 74 68 61 74 20 74 68 69 73 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 61 | .mind.that.this.traffic.can.be.a |
1cb60 | 20 6e 65 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 72 69 67 69 6e 74 65 64 20 62 79 20 61 20 69 | .new.connection.originted.by.a.i |
1cb80 | 6e 74 65 72 6e 61 6c 20 70 72 6f 63 65 73 73 20 72 75 6e 6e 69 6e 67 20 6f 6e 20 56 79 4f 53 20 | nternal.process.running.on.VyOS. |
1cba0 | 72 6f 75 74 65 72 2c 20 73 75 63 68 20 61 73 20 4e 54 50 2c 20 6f 72 20 63 61 6e 20 62 65 20 61 | router,.such.as.NTP,.or.can.be.a |
1cbc0 | 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 74 72 61 66 66 69 63 20 72 65 63 65 69 76 65 64 20 65 78 | .response.to.traffic.received.ex |
1cbe0 | 74 65 72 6e 61 6c 79 20 74 68 72 6f 75 67 68 20 2a 2a 69 6e 70 75 74 74 2a 2a 20 28 66 6f 72 20 | ternaly.through.**inputt**.(for. |
1cc00 | 65 78 61 6d 70 6c 65 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 61 6e 20 73 73 68 20 6c 6f 67 69 6e | example.response.to.an.ssh.login |
1cc20 | 20 61 74 74 65 6d 70 74 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 29 2e 20 54 68 69 73 20 69 6e | .attempt.to.the.router)..This.in |
1cc40 | 63 6c 75 64 65 73 20 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 66 69 6c 74 65 72 69 6e 67 20 72 | cludes.ipv4.and.ipv6.filtering.r |
1cc60 | 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 4f 75 74 70 75 74 2a 2a 3a 20 73 74 | ules,.defined.in:.**Output**:.st |
1cc80 | 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 6f 72 69 67 69 6e 61 74 65 | age.where.traffic.that.originate |
1cca0 | 73 20 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 20 63 61 6e 20 62 65 20 | s.from.the.router.itself.can.be. |
1ccc0 | 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 2e 20 42 65 61 72 20 69 6e | filtered.and.controlled..Bear.in |
1cce0 | 20 6d 69 6e 64 20 74 68 61 74 20 74 68 69 73 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 61 | .mind.that.this.traffic.can.be.a |
1cd00 | 20 6e 65 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 72 69 67 69 6e 61 74 65 64 20 62 79 20 61 20 | .new.connection.originated.by.a. |
1cd20 | 69 6e 74 65 72 6e 61 6c 20 70 72 6f 63 65 73 73 20 72 75 6e 6e 69 6e 67 20 6f 6e 20 56 79 4f 53 | internal.process.running.on.VyOS |
1cd40 | 20 72 6f 75 74 65 72 2c 20 73 75 63 68 20 61 73 20 4e 54 50 2c 20 6f 72 20 61 20 72 65 73 70 6f | .router,.such.as.NTP,.or.a.respo |
1cd60 | 6e 73 65 20 74 6f 20 74 72 61 66 66 69 63 20 72 65 63 65 69 76 65 64 20 65 78 74 65 72 6e 61 6c | nse.to.traffic.received.external |
1cd80 | 79 20 74 68 72 6f 75 67 68 20 2a 2a 69 6e 70 75 74 2a 2a 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 | y.through.**input**.(for.example |
1cda0 | 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 61 6e 20 73 73 68 20 6c 6f 67 69 6e 20 61 74 74 65 6d 70 | .response.to.an.ssh.login.attemp |
1cdc0 | 74 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 29 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 | t.to.the.router)..This.includes. |
1cde0 | 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 64 | ipv4.and.ipv6.filtering.rules,.d |
1ce00 | 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 4f 75 74 70 75 74 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 | efined.in:.**Output**:.stage.whe |
1ce20 | 72 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 6f 72 69 67 69 6e 61 74 65 73 20 66 72 6f 6d 20 | re.traffic.that.originates.from. |
1ce40 | 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 20 63 61 6e 20 62 65 20 66 69 6c 74 65 72 65 | the.router.itself.can.be.filtere |
1ce60 | 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 2e 20 42 65 61 72 20 69 6e 20 6d 69 6e 64 20 74 | d.and.controlled..Bear.in.mind.t |
1ce80 | 68 61 74 20 74 68 69 73 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 61 20 6e 65 77 20 63 6f | hat.this.traffic.can.be.a.new.co |
1cea0 | 6e 6e 65 63 74 69 6f 6e 20 6f 72 69 67 69 6e 61 74 65 64 20 62 79 20 61 20 69 6e 74 65 72 6e 61 | nnection.originated.by.a.interna |
1cec0 | 6c 20 70 72 6f 63 65 73 73 20 72 75 6e 6e 69 6e 67 20 6f 6e 20 56 79 4f 53 20 72 6f 75 74 65 72 | l.process.running.on.VyOS.router |
1cee0 | 2c 20 73 75 63 68 20 61 73 20 4e 54 50 2c 20 6f 72 20 61 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 | ,.such.as.NTP,.or.a.response.to. |
1cf00 | 74 72 61 66 66 69 63 20 72 65 63 65 69 76 65 64 20 65 78 74 65 72 6e 61 6c 79 20 74 68 72 6f 75 | traffic.received.externaly.throu |
1cf20 | 67 68 20 2a 2a 69 6e 70 75 74 74 2a 2a 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 20 72 65 73 70 6f | gh.**inputt**.(for.example.respo |
1cf40 | 6e 73 65 20 74 6f 20 61 6e 20 73 73 68 20 6c 6f 67 69 6e 20 61 74 74 65 6d 70 74 20 74 6f 20 74 | nse.to.an.ssh.login.attempt.to.t |
1cf60 | 68 65 20 72 6f 75 74 65 72 29 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 69 70 76 34 20 61 | he.router)..This.includes.ipv4.a |
1cf80 | 6e 64 20 69 70 76 36 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 | nd.ipv6.filtering.rules,.defined |
1cfa0 | 20 69 6e 3a 00 2a 2a 50 65 65 72 20 61 64 64 72 65 73 73 2a 2a 00 2a 2a 50 6f 6c 69 63 79 20 52 | .in:.**Peer.address**.**Policy.R |
1cfc0 | 6f 75 74 65 2a 2a 3a 20 72 75 6c 65 73 20 64 65 66 69 6e 65 64 20 75 6e 64 65 72 20 60 60 73 65 | oute**:.rules.defined.under.``se |
1cfe0 | 74 20 70 6f 6c 69 63 79 20 5b 72 6f 75 74 65 20 7c 20 72 6f 75 74 65 36 5d 20 2e 2e 2e 60 60 2e | t.policy.[route.|.route6]....``. |
1d000 | 00 2a 2a 50 6f 6c 69 63 79 20 64 65 66 69 6e 69 74 69 6f 6e 3a 2a 2a 00 2a 2a 50 6f 73 74 72 6f | .**Policy.definition:**.**Postro |
1d020 | 75 74 69 6e 67 2a 2a 3a 20 61 73 20 69 6e 20 2a 2a 50 72 65 72 6f 75 74 69 6e 67 2a 2a 2c 20 73 | uting**:.as.in.**Prerouting**,.s |
1d040 | 65 76 65 72 61 6c 20 61 63 74 69 6f 6e 73 20 64 65 66 69 6e 65 64 20 69 6e 20 64 69 66 66 65 72 | everal.actions.defined.in.differ |
1d060 | 65 6e 74 20 70 61 72 74 73 20 6f 66 20 56 79 4f 53 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | ent.parts.of.VyOS.configuration. |
1d080 | 61 72 65 20 70 65 72 66 6f 72 6d 65 64 20 69 6e 20 74 68 69 73 20 73 74 61 67 65 2e 20 54 68 69 | are.performed.in.this.stage..Thi |
1d0a0 | 73 20 69 6e 63 6c 75 64 65 73 3a 00 2a 2a 50 72 65 72 6f 75 74 69 6e 67 2a 2a 3a 20 73 65 76 65 | s.includes:.**Prerouting**:.seve |
1d0c0 | 72 61 6c 20 61 63 74 69 6f 6e 73 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 69 6e 20 74 68 69 73 20 | ral.actions.can.be.done.in.this. |
1d0e0 | 73 74 61 67 65 2c 20 61 6e 64 20 63 75 72 72 65 6e 74 6c 79 20 74 68 65 73 65 20 61 63 74 69 6f | stage,.and.currently.these.actio |
1d100 | 6e 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 74 | ns.are.defined.in.different.part |
1d120 | 73 20 69 6e 20 56 79 4f 53 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 4f 72 64 65 72 20 69 | s.in.VyOS.configuration..Order.i |
1d140 | 73 20 69 6d 70 6f 72 74 61 6e 74 2c 20 61 6e 64 20 61 6c 6c 20 74 68 65 73 65 20 61 63 74 69 6f | s.important,.and.all.these.actio |
1d160 | 6e 73 20 61 72 65 20 70 65 72 66 6f 72 6d 65 64 20 62 65 66 6f 72 65 20 61 6e 79 20 61 63 74 69 | ns.are.performed.before.any.acti |
1d180 | 6f 6e 73 20 64 65 66 69 6e 65 64 20 75 6e 64 65 72 20 60 60 66 69 72 65 77 61 6c 6c 60 60 20 73 | ons.defined.under.``firewall``.s |
1d1a0 | 65 63 74 69 6f 6e 2e 20 52 65 6c 65 76 61 6e 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 | ection..Relevant.configuration.t |
1d1c0 | 68 61 74 20 61 63 74 73 20 69 6e 20 74 68 69 73 20 73 74 61 67 65 20 61 72 65 3a 00 2a 2a 50 72 | hat.acts.in.this.stage.are:.**Pr |
1d1e0 | 65 72 6f 75 74 69 6e 67 2a 2a 3a 20 73 65 76 65 72 61 6c 20 61 63 74 69 6f 6e 73 20 63 61 6e 20 | erouting**:.several.actions.can. |
1d200 | 62 65 20 64 6f 6e 65 20 69 6e 20 74 68 69 73 20 73 74 61 67 65 2c 20 61 6e 64 20 63 75 72 72 65 | be.done.in.this.stage,.and.curre |
1d220 | 6e 74 6c 79 20 74 68 65 73 65 20 61 63 74 69 6f 6e 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 | ntly.these.actions.are.defined.i |
1d240 | 6e 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 74 73 20 69 6e 20 76 79 6f 73 20 63 6f 6e 66 69 67 | n.different.parts.in.vyos.config |
1d260 | 75 72 61 74 69 6f 6e 2e 20 4f 72 64 65 72 20 69 73 20 69 6d 70 6f 72 74 61 6e 74 2c 20 61 6e 64 | uration..Order.is.important,.and |
1d280 | 20 61 6c 6c 20 74 68 65 73 65 20 61 63 74 69 6f 6e 73 20 61 72 65 20 70 65 72 66 6f 72 6d 65 64 | .all.these.actions.are.performed |
1d2a0 | 20 62 65 66 6f 72 65 20 61 6e 79 20 61 63 74 69 6f 6e 73 20 64 65 66 69 6e 65 20 75 6e 64 65 72 | .before.any.actions.define.under |
1d2c0 | 20 60 60 66 69 72 65 77 61 6c 6c 60 60 20 73 65 63 74 69 6f 6e 2e 20 52 65 6c 65 76 61 6e 74 20 | .``firewall``.section..Relevant. |
1d2e0 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 61 63 74 73 20 69 6e 20 74 68 69 73 20 | configuration.that.acts.in.this. |
1d300 | 73 74 61 67 65 20 61 72 65 3a 00 2a 2a 50 72 69 6d 61 72 79 2a 2a 00 2a 2a 51 75 65 75 65 69 6e | stage.are:.**Primary**.**Queuein |
1d320 | 67 20 64 69 73 63 69 70 6c 69 6e 65 2a 2a 20 46 61 69 72 2f 46 6c 6f 77 20 51 75 65 75 65 20 43 | g.discipline**.Fair/Flow.Queue.C |
1d340 | 6f 44 65 6c 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 44 | oDel..**Queueing.discipline:**.D |
1d360 | 65 66 69 63 69 74 20 52 6f 75 6e 64 20 52 6f 62 69 6e 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 | eficit.Round.Robin..**Queueing.d |
1d380 | 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 47 65 6e 65 72 61 6c 69 7a 65 64 20 52 61 6e 64 6f 6d 20 | iscipline:**.Generalized.Random. |
1d3a0 | 45 61 72 6c 79 20 44 72 6f 70 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e | Early.Drop..**Queueing.disciplin |
1d3c0 | 65 3a 2a 2a 20 48 69 65 72 61 72 63 68 69 63 61 6c 20 54 6f 6b 65 6e 20 42 75 63 6b 65 74 2e 00 | e:**.Hierarchical.Token.Bucket.. |
1d3e0 | 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 49 6e 67 72 65 73 73 | **Queueing.discipline:**.Ingress |
1d400 | 20 70 6f 6c 69 63 65 72 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a | .policer..**Queueing.discipline: |
1d420 | 2a 2a 20 50 46 49 46 4f 20 28 50 61 63 6b 65 74 20 46 69 72 73 74 20 49 6e 20 46 69 72 73 74 20 | **.PFIFO.(Packet.First.In.First. |
1d440 | 4f 75 74 29 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 50 | Out)..**Queueing.discipline:**.P |
1d460 | 52 49 4f 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 53 46 | RIO..**Queueing.discipline:**.SF |
1d480 | 51 20 28 53 74 6f 63 68 61 73 74 69 63 20 46 61 69 72 6e 65 73 73 20 51 75 65 75 69 6e 67 29 2e | Q.(Stochastic.Fairness.Queuing). |
1d4a0 | 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 54 6f 63 6b 65 6e | .**Queueing.discipline:**.Tocken |
1d4c0 | 20 42 75 63 6b 65 74 20 46 69 6c 74 65 72 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 | .Bucket.Filter..**Queueing.disci |
1d4e0 | 70 6c 69 6e 65 3a 2a 2a 20 6e 65 74 65 6d 20 28 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 | pline:**.netem.(Network.Emulator |
1d500 | 29 20 2b 20 54 42 46 20 28 54 6f 6b 65 6e 20 42 75 63 6b 65 74 20 46 69 6c 74 65 72 29 2e 00 2a | ).+.TBF.(Token.Bucket.Filter)..* |
1d520 | 2a 52 31 20 53 74 61 74 69 63 20 4b 65 79 2a 2a 00 2a 2a 52 31 2a 2a 00 2a 2a 52 32 20 53 74 61 | *R1.Static.Key**.**R1**.**R2.Sta |
1d540 | 74 69 63 20 4b 65 79 2a 2a 00 2a 2a 52 32 2a 2a 00 2a 2a 52 41 44 49 55 53 20 62 61 73 65 64 20 | tic.Key**.**R2**.**RADIUS.based. |
1d560 | 49 50 20 70 6f 6f 6c 73 20 28 46 72 61 6d 65 64 2d 49 50 2d 41 64 64 72 65 73 73 29 2a 2a 00 2a | IP.pools.(Framed-IP-Address)**.* |
1d580 | 2a 52 41 44 49 55 53 20 73 65 73 73 69 6f 6e 73 20 6d 61 6e 61 67 65 6d 65 6e 74 20 44 4d 2f 43 | *RADIUS.sessions.management.DM/C |
1d5a0 | 6f 41 2a 2a 00 2a 2a 52 49 47 48 54 2a 2a 00 2a 2a 52 49 47 48 54 3a 2a 2a 20 2a 20 57 41 4e 20 | oA**.**RIGHT**.**RIGHT:**.*.WAN. |
1d5c0 | 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 60 65 74 68 30 2e 32 30 32 60 20 2a 20 60 65 74 68 30 2e | interface.on.`eth0.202`.*.`eth0. |
1d5e0 | 32 30 31 60 20 69 6e 74 65 72 66 61 63 65 20 49 50 3a 20 60 31 37 32 2e 31 38 2e 32 30 32 2e 31 | 201`.interface.IP:.`172.18.202.1 |
1d600 | 30 2f 32 34 60 20 2a 20 60 76 74 69 31 30 60 20 69 6e 74 65 72 66 61 63 65 20 49 50 3a 20 60 31 | 0/24`.*.`vti10`.interface.IP:.`1 |
1d620 | 30 2e 30 2e 30 2e 33 2f 33 31 60 20 2a 20 60 64 75 6d 30 60 20 69 6e 74 65 72 66 61 63 65 20 49 | 0.0.0.3/31`.*.`dum0`.interface.I |
1d640 | 50 3a 20 60 31 30 2e 30 2e 31 32 2e 31 2f 32 34 60 20 28 66 6f 72 20 74 65 73 74 69 6e 67 20 70 | P:.`10.0.12.1/24`.(for.testing.p |
1d660 | 75 72 70 6f 73 65 73 29 00 2a 2a 52 6f 75 74 65 72 20 31 2a 2a 00 2a 2a 52 6f 75 74 65 72 20 32 | urposes).**Router.1**.**Router.2 |
1d680 | 2a 2a 00 2a 2a 52 6f 75 74 65 72 20 33 2a 2a 00 2a 2a 52 6f 75 74 65 72 2d 49 44 20 63 68 65 63 | **.**Router.3**.**Router-ID.chec |
1d6a0 | 6b 2a 2a 00 2a 2a 52 6f 75 74 65 73 20 6c 65 61 72 6e 65 64 20 61 66 74 65 72 20 72 6f 75 74 69 | k**.**Routes.learned.after.routi |
1d6c0 | 6e 67 20 70 6f 6c 69 63 79 20 61 70 70 6c 69 65 64 3a 2a 2a 00 2a 2a 52 6f 75 74 65 73 20 6c 65 | ng.policy.applied:**.**Routes.le |
1d6e0 | 61 72 6e 65 64 20 62 65 66 6f 72 65 20 72 6f 75 74 69 6e 67 20 70 6f 6c 69 63 79 20 61 70 70 6c | arned.before.routing.policy.appl |
1d700 | 69 65 64 3a 2a 2a 00 2a 2a 53 57 31 2a 2a 00 2a 2a 53 57 32 2a 2a 00 2a 2a 53 65 63 6f 6e 64 61 | ied:**.**SW1**.**SW2**.**Seconda |
1d720 | 72 79 2a 2a 00 2a 2a 53 65 74 74 69 6e 67 20 75 70 20 49 50 53 65 63 2a 2a 00 2a 2a 53 65 74 74 | ry**.**Setting.up.IPSec**.**Sett |
1d740 | 69 6e 67 20 75 70 20 74 68 65 20 47 52 45 20 74 75 6e 6e 65 6c 2a 2a 00 2a 2a 53 6f 75 72 63 65 | ing.up.the.GRE.tunnel**.**Source |
1d760 | 20 4e 41 54 2a 2a 3a 20 72 75 6c 65 73 20 64 65 66 69 6e 65 64 20 75 6e 64 65 72 20 60 60 73 65 | .NAT**:.rules.defined.under.``se |
1d780 | 74 20 5b 6e 61 74 20 7c 20 6e 61 74 36 36 5d 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 2e 2e 60 60 | t.[nat.|.nat66].destination...`` |
1d7a0 | 2e 00 2a 2a 53 70 69 6e 65 31 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 2a 2a 00 2a 2a 53 74 | ..**Spine1.Configuration:**.**St |
1d7c0 | 61 74 75 73 2a 2a 00 2a 2a 54 6f 20 73 65 65 20 74 68 65 20 72 65 64 69 73 74 72 69 62 75 74 65 | atus**.**To.see.the.redistribute |
1d7e0 | 64 20 72 6f 75 74 65 73 3a 2a 2a 00 2a 2a 54 77 6f 20 67 61 74 65 77 61 79 73 20 61 6e 64 20 64 | d.routes:**.**Two.gateways.and.d |
1d800 | 69 66 66 65 72 65 6e 74 20 6d 65 74 72 69 63 73 3a 2a 2a 00 2a 2a 56 4c 41 4e 20 49 44 2a 2a 00 | ifferent.metrics:**.**VLAN.ID**. |
1d820 | 2a 2a 56 79 4f 53 20 52 6f 75 74 65 72 3a 2a 2a 00 2a 2a 57 65 69 67 68 74 20 63 68 65 63 6b 2a | **VyOS.Router:**.**Weight.check* |
1d840 | 2a 00 2a 2a 61 64 64 72 65 73 73 2a 2a 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 6d | *.**address**.can.be.specified.m |
1d860 | 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 20 61 73 20 49 50 76 34 20 61 6e 64 2f 6f 72 20 49 50 76 | ultiple.times.as.IPv4.and/or.IPv |
1d880 | 36 20 61 64 64 72 65 73 73 2c 20 65 2e 67 2e 20 31 39 32 2e 30 2e 32 2e 31 2f 32 34 20 61 6e 64 | 6.address,.e.g..192.0.2.1/24.and |
1d8a0 | 2f 6f 72 20 32 30 30 31 3a 64 62 38 3a 3a 31 2f 36 34 00 2a 2a 61 64 64 72 65 73 73 2a 2a 20 63 | /or.2001:db8::1/64.**address**.c |
1d8c0 | 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2c 20 | an.be.specified.multiple.times,. |
1d8e0 | 65 2e 67 2e 20 31 39 32 2e 31 36 38 2e 31 30 30 2e 31 20 61 6e 64 2f 6f 72 20 31 39 32 2e 31 36 | e.g..192.168.100.1.and/or.192.16 |
1d900 | 38 2e 31 30 30 2e 30 2f 32 34 00 2a 2a 61 6c 6c 6f 77 2a 2a 20 2d 20 4e 65 67 6f 74 69 61 74 65 | 8.100.0/24.**allow**.-.Negotiate |
1d920 | 20 49 50 76 34 20 6f 6e 6c 79 20 69 66 20 63 6c 69 65 6e 74 20 72 65 71 75 65 73 74 73 20 28 44 | .IPv4.only.if.client.requests.(D |
1d940 | 65 66 61 75 6c 74 20 76 61 6c 75 65 29 00 2a 2a 61 6c 6c 6f 77 2a 2a 20 2d 20 4e 65 67 6f 74 69 | efault.value).**allow**.-.Negoti |
1d960 | 61 74 65 20 49 50 76 36 20 6f 6e 6c 79 20 69 66 20 63 6c 69 65 6e 74 20 72 65 71 75 65 73 74 73 | ate.IPv6.only.if.client.requests |
1d980 | 00 2a 2a 61 6c 6c 6f 77 2d 68 6f 73 74 2d 6e 65 74 77 6f 72 6b 73 2a 2a 20 63 61 6e 6e 6f 74 20 | .**allow-host-networks**.cannot. |
1d9a0 | 62 65 20 75 73 65 64 20 77 69 74 68 20 2a 2a 6e 65 74 77 6f 72 6b 2a 2a 00 2a 2a 61 6c 77 61 79 | be.used.with.**network**.**alway |
1d9c0 | 73 2a 2a 3a 20 52 65 73 74 61 72 74 20 63 6f 6e 74 61 69 6e 65 72 73 20 77 68 65 6e 20 74 68 65 | s**:.Restart.containers.when.the |
1d9e0 | 79 20 65 78 69 74 2c 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 73 74 61 74 75 73 2c 20 72 65 | y.exit,.regardless.of.status,.re |
1da00 | 74 72 79 69 6e 67 20 69 6e 64 65 66 69 6e 69 74 65 6c 79 00 2a 2a 61 70 70 65 6e 64 3a 2a 2a 20 | trying.indefinitely.**append:**. |
1da20 | 54 68 65 20 72 65 6c 61 79 20 61 67 65 6e 74 20 69 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 70 | The.relay.agent.is.allowed.to.ap |
1da40 | 70 65 6e 64 20 69 74 73 20 6f 77 6e 20 72 65 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 | pend.its.own.relay.information.t |
1da60 | 6f 20 61 20 72 65 63 65 69 76 65 64 20 44 48 43 50 20 70 61 63 6b 65 74 2c 20 64 69 73 72 65 67 | o.a.received.DHCP.packet,.disreg |
1da80 | 61 72 64 69 6e 67 20 72 65 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6c 72 65 61 64 79 | arding.relay.information.already |
1daa0 | 20 70 72 65 73 65 6e 74 20 69 6e 20 74 68 65 20 70 61 63 6b 65 74 2e 00 2a 2a 61 70 70 6c 69 63 | .present.in.the.packet..**applic |
1dac0 | 61 74 69 6f 6e 2a 2a 3a 20 61 6e 61 6c 79 7a 65 73 20 72 65 63 65 69 76 65 64 20 66 6c 6f 77 20 | ation**:.analyzes.received.flow. |
1dae0 | 64 61 74 61 20 69 6e 20 74 68 65 20 63 6f 6e 74 65 78 74 20 6f 66 20 69 6e 74 72 75 73 69 6f 6e | data.in.the.context.of.intrusion |
1db00 | 20 64 65 74 65 63 74 69 6f 6e 20 6f 72 20 74 72 61 66 66 69 63 20 70 72 6f 66 69 6c 69 6e 67 2c | .detection.or.traffic.profiling, |
1db20 | 20 66 6f 72 20 65 78 61 6d 70 6c 65 00 2a 2a 61 75 74 6f 2a 2a 20 e2 80 93 20 61 75 74 6f 6d 61 | .for.example.**auto**.....automa |
1db40 | 74 69 63 61 6c 6c 79 20 64 65 74 65 72 6d 69 6e 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 | tically.determines.the.interface |
1db60 | 20 74 79 70 65 2e 20 2a 2a 77 69 72 65 64 2a 2a 20 e2 80 93 20 65 6e 61 62 6c 65 73 20 6f 70 74 | .type..**wired**.....enables.opt |
1db80 | 69 6d 69 73 61 74 69 6f 6e 73 20 66 6f 72 20 77 69 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 2e | imisations.for.wired.interfaces. |
1dba0 | 20 2a 2a 77 69 72 65 6c 65 73 73 2a 2a 20 e2 80 93 20 64 69 73 61 62 6c 65 73 20 61 20 6e 75 6d | .**wireless**.....disables.a.num |
1dbc0 | 62 65 72 20 6f 66 20 6f 70 74 69 6d 69 73 61 74 69 6f 6e 73 20 74 68 61 74 20 61 72 65 20 6f 6e | ber.of.optimisations.that.are.on |
1dbe0 | 6c 79 20 63 6f 72 72 65 63 74 20 6f 6e 20 77 69 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 2e 20 | ly.correct.on.wired.interfaces.. |
1dc00 | 53 70 65 63 69 66 79 69 6e 67 20 77 69 72 65 6c 65 73 73 20 69 73 20 61 6c 77 61 79 73 20 63 6f | Specifying.wireless.is.always.co |
1dc20 | 72 72 65 63 74 2c 20 62 75 74 20 6d 61 79 20 63 61 75 73 65 20 73 6c 6f 77 65 72 20 63 6f 6e 76 | rrect,.but.may.cause.slower.conv |
1dc40 | 65 72 67 65 6e 63 65 20 61 6e 64 20 65 78 74 72 61 20 72 6f 75 74 69 6e 67 20 74 72 61 66 66 69 | ergence.and.extra.routing.traffi |
1dc60 | 63 2e 00 2a 2a 62 61 6e 2d 74 69 6d 65 2a 2a 20 61 6e 64 20 2a 2a 74 68 72 65 73 68 6f 6c 64 2a | c..**ban-time**.and.**threshold* |
1dc80 | 2a 3a 20 74 68 65 73 65 20 76 61 6c 75 65 73 20 61 72 65 20 6b 65 70 74 20 76 65 72 79 20 6c 6f | *:.these.values.are.kept.very.lo |
1dca0 | 77 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 65 61 73 69 6c 79 20 69 64 65 6e 74 69 66 79 20 61 6e | w.in.order.to.easily.identify.an |
1dcc0 | 64 20 67 65 6e 65 72 61 74 65 20 61 6e 64 20 61 74 74 61 63 6b 2e 00 2a 2a 62 72 6f 61 64 63 61 | d.generate.and.attack..**broadca |
1dce0 | 73 74 2a 2a 20 e2 80 93 20 62 72 6f 61 64 63 61 73 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 | st**.....broadcast.IP.addresses. |
1dd00 | 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 20 2a 2a 6e 6f 6e 2d 62 72 6f 61 64 63 61 73 74 2a 2a 20 | distribution..**non-broadcast**. |
1dd20 | e2 80 93 20 61 64 64 72 65 73 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 69 6e 20 4e 42 4d 41 | ....address.distribution.in.NBMA |
1dd40 | 20 6e 65 74 77 6f 72 6b 73 20 74 6f 70 6f 6c 6f 67 79 2e 20 2a 2a 70 6f 69 6e 74 2d 74 6f 2d 6d | .networks.topology..**point-to-m |
1dd60 | 75 6c 74 69 70 6f 69 6e 74 2a 2a 20 e2 80 93 20 61 64 64 72 65 73 73 20 64 69 73 74 72 69 62 75 | ultipoint**.....address.distribu |
1dd80 | 74 69 6f 6e 20 69 6e 20 70 6f 69 6e 74 2d 74 6f 2d 6d 75 6c 74 69 70 6f 69 6e 74 20 6e 65 74 77 | tion.in.point-to-multipoint.netw |
1dda0 | 6f 72 6b 73 2e 20 2a 2a 70 6f 69 6e 74 2d 74 6f 2d 70 6f 69 6e 74 2a 2a 20 e2 80 93 20 61 64 64 | orks..**point-to-point**.....add |
1ddc0 | 72 65 73 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 69 6e 20 70 6f 69 6e 74 2d 74 6f 2d 70 6f | ress.distribution.in.point-to-po |
1dde0 | 69 6e 74 20 6e 65 74 77 6f 72 6b 73 2e 00 2a 2a 62 72 6f 61 64 63 61 73 74 2a 2a 20 e2 80 93 20 | int.networks..**broadcast**..... |
1de00 | 62 72 6f 61 64 63 61 73 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 64 69 73 74 72 69 62 75 74 | broadcast.IP.addresses.distribut |
1de20 | 69 6f 6e 2e 20 2a 2a 70 6f 69 6e 74 2d 74 6f 2d 70 6f 69 6e 74 2a 2a 20 e2 80 93 20 61 64 64 72 | ion..**point-to-point**.....addr |
1de40 | 65 73 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 69 6e 20 70 6f 69 6e 74 2d 74 6f 2d 70 6f 69 | ess.distribution.in.point-to-poi |
1de60 | 6e 74 20 6e 65 74 77 6f 72 6b 73 2e 00 2a 2a 63 61 6c 6c 69 6e 67 2d 73 69 64 2a 2a 20 2d 20 43 | nt.networks..**calling-sid**.-.C |
1de80 | 61 6c 63 75 6c 61 74 65 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 72 | alculate.interface.identifier.fr |
1dea0 | 6f 6d 20 63 61 6c 6c 69 6e 67 2d 73 74 61 74 69 6f 6e 2d 69 64 2e 00 2a 2a 63 69 73 63 6f 2a 2a | om.calling-station-id..**cisco** |
1dec0 | 20 e2 80 93 20 61 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 62 65 20 63 6f 6e 73 69 64 65 72 65 64 | .....a.router.will.be.considered |
1dee0 | 20 61 73 20 41 42 52 20 69 66 20 69 74 20 68 61 73 20 73 65 76 65 72 61 6c 20 63 6f 6e 66 69 67 | .as.ABR.if.it.has.several.config |
1df00 | 75 72 65 64 20 6c 69 6e 6b 73 20 74 6f 20 74 68 65 20 6e 65 74 77 6f 72 6b 73 20 69 6e 20 64 69 | ured.links.to.the.networks.in.di |
1df20 | 66 66 65 72 65 6e 74 20 61 72 65 61 73 20 6f 6e 65 20 6f 66 20 77 68 69 63 68 20 69 73 20 61 20 | fferent.areas.one.of.which.is.a. |
1df40 | 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 2e 20 4d 6f 72 65 6f 76 65 72 2c 20 74 68 65 20 6c 69 6e | backbone.area..Moreover,.the.lin |
1df60 | 6b 20 74 6f 20 74 68 65 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 73 68 6f 75 6c 64 20 62 65 | k.to.the.backbone.area.should.be |
1df80 | 20 61 63 74 69 76 65 20 28 77 6f 72 6b 69 6e 67 29 2e 20 2a 2a 69 62 6d 2a 2a 20 e2 80 93 20 69 | .active.(working)..**ibm**.....i |
1dfa0 | 64 65 6e 74 69 63 61 6c 20 74 6f 20 22 63 69 73 63 6f 22 20 6d 6f 64 65 6c 20 62 75 74 20 69 6e | dentical.to."cisco".model.but.in |
1dfc0 | 20 74 68 69 73 20 63 61 73 65 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 6c 69 6e 6b 20 | .this.case.a.backbone.area.link. |
1dfe0 | 6d 61 79 20 6e 6f 74 20 62 65 20 61 63 74 69 76 65 2e 20 2a 2a 73 74 61 6e 64 61 72 64 2a 2a 20 | may.not.be.active..**standard**. |
1e000 | e2 80 93 20 72 6f 75 74 65 72 20 68 61 73 20 73 65 76 65 72 61 6c 20 61 63 74 69 76 65 20 6c 69 | ....router.has.several.active.li |
1e020 | 6e 6b 73 20 74 6f 20 64 69 66 66 65 72 65 6e 74 20 61 72 65 61 73 2e 20 2a 2a 73 68 6f 72 74 63 | nks.to.different.areas..**shortc |
1e040 | 75 74 2a 2a 20 e2 80 93 20 69 64 65 6e 74 69 63 61 6c 20 74 6f 20 22 73 74 61 6e 64 61 72 64 22 | ut**.....identical.to."standard" |
1e060 | 20 62 75 74 20 69 6e 20 74 68 69 73 20 6d 6f 64 65 6c 20 61 20 72 6f 75 74 65 72 20 69 73 20 61 | .but.in.this.model.a.router.is.a |
1e080 | 6c 6c 6f 77 65 64 20 74 6f 20 75 73 65 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 61 72 65 61 73 20 | llowed.to.use.a.connected.areas. |
1e0a0 | 74 6f 70 6f 6c 6f 67 79 20 77 69 74 68 6f 75 74 20 69 6e 76 6f 6c 76 69 6e 67 20 61 20 62 61 63 | topology.without.involving.a.bac |
1e0c0 | 6b 62 6f 6e 65 20 61 72 65 61 20 66 6f 72 20 69 6e 74 65 72 2d 61 72 65 61 20 63 6f 6e 6e 65 63 | kbone.area.for.inter-area.connec |
1e0e0 | 74 69 6f 6e 73 2e 00 2a 2a 63 6f 6c 6c 65 63 74 6f 72 2a 2a 3a 20 72 65 73 70 6f 6e 73 69 62 6c | tions..**collector**:.responsibl |
1e100 | 65 20 66 6f 72 20 72 65 63 65 70 74 69 6f 6e 2c 20 73 74 6f 72 61 67 65 20 61 6e 64 20 70 72 65 | e.for.reception,.storage.and.pre |
1e120 | 2d 70 72 6f 63 65 73 73 69 6e 67 20 6f 66 20 66 6c 6f 77 20 64 61 74 61 20 72 65 63 65 69 76 65 | -processing.of.flow.data.receive |
1e140 | 64 20 66 72 6f 6d 20 61 20 66 6c 6f 77 20 65 78 70 6f 72 74 65 72 00 2a 2a 64 65 66 61 75 6c 74 | d.from.a.flow.exporter.**default |
1e160 | 2a 2a 20 e2 80 93 20 20 74 68 69 73 20 61 72 65 61 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 66 | **......this.area.will.be.used.f |
1e180 | 6f 72 20 73 68 6f 72 74 63 75 74 74 69 6e 67 20 6f 6e 6c 79 20 69 66 20 41 42 52 20 64 6f 65 73 | or.shortcutting.only.if.ABR.does |
1e1a0 | 20 6e 6f 74 20 68 61 76 65 20 61 20 6c 69 6e 6b 20 74 6f 20 74 68 65 20 62 61 63 6b 62 6f 6e 65 | .not.have.a.link.to.the.backbone |
1e1c0 | 20 61 72 65 61 20 6f 72 20 74 68 69 73 20 6c 69 6e 6b 20 77 61 73 20 6c 6f 73 74 2e 20 2a 2a 65 | .area.or.this.link.was.lost..**e |
1e1e0 | 6e 61 62 6c 65 2a 2a 20 e2 80 93 20 74 68 65 20 61 72 65 61 20 77 69 6c 6c 20 62 65 20 75 73 65 | nable**.....the.area.will.be.use |
1e200 | 64 20 66 6f 72 20 73 68 6f 72 74 63 75 74 74 69 6e 67 20 65 76 65 72 79 20 74 69 6d 65 20 74 68 | d.for.shortcutting.every.time.th |
1e220 | 65 20 72 6f 75 74 65 20 74 68 61 74 20 67 6f 65 73 20 74 68 72 6f 75 67 68 20 69 74 20 69 73 20 | e.route.that.goes.through.it.is. |
1e240 | 63 68 65 61 70 65 72 2e 20 2a 2a 64 69 73 61 62 6c 65 2a 2a 20 e2 80 93 20 74 68 69 73 20 61 72 | cheaper..**disable**.....this.ar |
1e260 | 65 61 20 69 73 20 6e 65 76 65 72 20 75 73 65 64 20 62 79 20 41 42 52 20 66 6f 72 20 72 6f 75 74 | ea.is.never.used.by.ABR.for.rout |
1e280 | 65 73 20 73 68 6f 72 74 63 75 74 74 69 6e 67 2e 00 2a 2a 64 65 66 61 75 6c 74 2a 2a 20 e2 80 93 | es.shortcutting..**default**.... |
1e2a0 | 20 65 6e 61 62 6c 65 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 6f 6e 20 77 69 72 65 64 20 69 | .enable.split-horizon.on.wired.i |
1e2c0 | 6e 74 65 72 66 61 63 65 73 2c 20 61 6e 64 20 64 69 73 61 62 6c 65 20 73 70 6c 69 74 2d 68 6f 72 | nterfaces,.and.disable.split-hor |
1e2e0 | 69 7a 6f 6e 20 6f 6e 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 73 2e 20 2a 2a 65 | izon.on.wireless.interfaces..**e |
1e300 | 6e 61 62 6c 65 2a 2a 20 e2 80 93 20 65 6e 61 62 6c 65 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e | nable**.....enable.split-horizon |
1e320 | 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 73 2e 20 2a 2a 64 69 73 61 62 6c 65 2a 2a | .on.this.interfaces..**disable** |
1e340 | 20 e2 80 93 20 64 69 73 61 62 6c 65 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 6f 6e 20 74 68 | .....disable.split-horizon.on.th |
1e360 | 69 73 20 69 6e 74 65 72 66 61 63 65 73 2e 00 2a 2a 64 65 6e 79 2a 2a 20 2d 20 44 6f 20 6e 6f 74 | is.interfaces..**deny**.-.Do.not |
1e380 | 20 6e 65 67 6f 74 69 61 74 65 20 49 50 76 34 00 2a 2a 64 65 6e 79 2a 2a 20 2d 20 44 6f 20 6e 6f | .negotiate.IPv4.**deny**.-.Do.no |
1e3a0 | 74 20 6e 65 67 6f 74 69 61 74 65 20 49 50 76 36 20 28 64 65 66 61 75 6c 74 20 76 61 6c 75 65 29 | t.negotiate.IPv6.(default.value) |
1e3c0 | 00 2a 2a 64 65 6e 79 2a 2a 20 2d 20 64 65 6e 79 20 6d 70 70 65 00 2a 2a 64 65 6e 79 2a 2a 3a 20 | .**deny**.-.deny.mppe.**deny**:. |
1e3e0 | 44 65 6e 79 20 73 65 63 6f 6e 64 20 73 65 73 73 69 6f 6e 20 61 75 74 68 6f 72 69 7a 61 74 69 6f | Deny.second.session.authorizatio |
1e400 | 6e 2e 00 2a 2a 64 65 73 74 69 6e 61 74 69 6f 6e 2a 2a 20 2d 20 73 70 65 63 69 66 79 20 77 68 69 | n..**destination**.-.specify.whi |
1e420 | 63 68 20 70 61 63 6b 65 74 73 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 77 69 6c 6c 20 | ch.packets.the.translation.will. |
1e440 | 62 65 20 61 70 70 6c 69 65 64 20 74 6f 2c 20 6f 6e 6c 79 20 62 61 73 65 64 20 6f 6e 20 74 68 65 | be.applied.to,.only.based.on.the |
1e460 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 61 6e 64 2f 6f 72 20 70 6f 72 74 | .destination.address.and/or.port |
1e480 | 20 6e 75 6d 62 65 72 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 2a 2a 64 68 63 70 2a 2a 20 69 6e 74 | .number.configured..**dhcp**.int |
1e4a0 | 65 72 66 61 63 65 20 61 64 64 72 65 73 73 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 44 48 | erface.address.is.received.by.DH |
1e4c0 | 43 50 20 66 72 6f 6d 20 61 20 44 48 43 50 20 73 65 72 76 65 72 20 6f 6e 20 74 68 69 73 20 73 65 | CP.from.a.DHCP.server.on.this.se |
1e4e0 | 67 6d 65 6e 74 2e 00 2a 2a 64 68 63 70 76 36 2a 2a 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 | gment..**dhcpv6**.interface.addr |
1e500 | 65 73 73 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 44 48 43 50 76 36 20 66 72 6f 6d 20 61 | ess.is.received.by.DHCPv6.from.a |
1e520 | 20 44 48 43 50 76 36 20 73 65 72 76 65 72 20 6f 6e 20 74 68 69 73 20 73 65 67 6d 65 6e 74 2e 00 | .DHCPv6.server.on.this.segment.. |
1e540 | 2a 2a 64 69 73 61 62 6c 65 2a 2a 3a 20 44 69 73 61 62 6c 65 73 20 73 65 73 73 69 6f 6e 20 63 6f | **disable**:.Disables.session.co |
1e560 | 6e 74 72 6f 6c 2e 00 2a 2a 64 69 73 63 61 72 64 3a 2a 2a 20 52 65 63 65 69 76 65 64 20 70 61 63 | ntrol..**discard:**.Received.pac |
1e580 | 6b 65 74 73 20 77 68 69 63 68 20 61 6c 72 65 61 64 79 20 63 6f 6e 74 61 69 6e 20 72 65 6c 61 79 | kets.which.already.contain.relay |
1e5a0 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 64 69 73 63 61 72 64 65 64 2e 00 | .information.will.be.discarded.. |
1e5c0 | 2a 2a 64 6f 77 6e 73 74 72 65 61 6d 3a 2a 2a 20 44 6f 77 6e 73 74 72 65 61 6d 20 6e 65 74 77 6f | **downstream:**.Downstream.netwo |
1e5e0 | 72 6b 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 74 68 65 20 64 69 73 74 72 69 62 75 74 69 | rk.interfaces.are.the.distributi |
1e600 | 6f 6e 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e | on.interfaces.to.the.destination |
1e620 | 20 6e 65 74 77 6f 72 6b 73 2c 20 77 68 65 72 65 20 6d 75 6c 74 69 63 61 73 74 20 63 6c 69 65 6e | .networks,.where.multicast.clien |
1e640 | 74 73 20 63 61 6e 20 6a 6f 69 6e 20 67 72 6f 75 70 73 20 61 6e 64 20 72 65 63 65 69 76 65 20 6d | ts.can.join.groups.and.receive.m |
1e660 | 75 6c 74 69 63 61 73 74 20 64 61 74 61 2e 20 4f 6e 65 20 6f 72 20 6d 6f 72 65 20 64 6f 77 6e 73 | ulticast.data..One.or.more.downs |
1e680 | 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 73 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 | tream.interfaces.must.be.configu |
1e6a0 | 72 65 64 2e 00 2a 2a 65 78 70 6f 72 74 65 72 2a 2a 3a 20 61 67 67 72 65 67 61 74 65 73 20 70 61 | red..**exporter**:.aggregates.pa |
1e6c0 | 63 6b 65 74 73 20 69 6e 74 6f 20 66 6c 6f 77 73 20 61 6e 64 20 65 78 70 6f 72 74 73 20 66 6c 6f | ckets.into.flows.and.exports.flo |
1e6e0 | 77 20 72 65 63 6f 72 64 73 20 74 6f 77 61 72 64 73 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 66 6c | w.records.towards.one.or.more.fl |
1e700 | 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 73 00 2a 2a 66 69 72 65 77 61 6c 6c 20 61 6c 6c 2d 70 69 6e | ow.collectors.**firewall.all-pin |
1e720 | 67 2a 2a 20 61 66 66 65 63 74 73 20 6f 6e 6c 79 20 74 6f 20 4c 4f 43 41 4c 20 61 6e 64 20 69 74 | g**.affects.only.to.LOCAL.and.it |
1e740 | 20 61 6c 77 61 79 73 20 62 65 68 61 76 65 73 20 69 6e 20 74 68 65 20 6d 6f 73 74 20 72 65 73 74 | .always.behaves.in.the.most.rest |
1e760 | 72 69 63 74 69 76 65 20 77 61 79 00 2a 2a 66 69 72 65 77 61 6c 6c 20 67 6c 6f 62 61 6c 2d 6f 70 | rictive.way.**firewall.global-op |
1e780 | 74 69 6f 6e 73 20 61 6c 6c 2d 70 69 6e 67 2a 2a 20 61 66 66 65 63 74 73 20 6f 6e 6c 79 20 74 6f | tions.all-ping**.affects.only.to |
1e7a0 | 20 4c 4f 43 41 4c 20 61 6e 64 20 69 74 20 61 6c 77 61 79 73 20 62 65 68 61 76 65 73 20 69 6e 20 | .LOCAL.and.it.always.behaves.in. |
1e7c0 | 74 68 65 20 6d 6f 73 74 20 72 65 73 74 72 69 63 74 69 76 65 20 77 61 79 00 2a 2a 66 6f 72 77 61 | the.most.restrictive.way.**forwa |
1e7e0 | 72 64 3a 2a 2a 20 41 6c 6c 20 70 61 63 6b 65 74 73 20 61 72 65 20 66 6f 72 77 61 72 64 65 64 2c | rd:**.All.packets.are.forwarded, |
1e800 | 20 72 65 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6c 72 65 61 64 79 20 70 72 65 73 65 | .relay.information.already.prese |
1e820 | 6e 74 20 77 69 6c 6c 20 62 65 20 69 67 6e 6f 72 65 64 2e 00 2a 2a 69 6e 62 6f 75 6e 64 2d 69 6e | nt.will.be.ignored..**inbound-in |
1e840 | 74 65 72 66 61 63 65 2a 2a 20 2d 20 61 70 70 6c 69 63 61 62 6c 65 20 6f 6e 6c 79 20 74 6f 20 3a | terface**.-.applicable.only.to.: |
1e860 | 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 2e 20 49 74 20 63 6f 6e 66 69 67 | ref:`destination-nat`..It.config |
1e880 | 75 72 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 75 73 65 64 | ures.the.interface.which.is.used |
1e8a0 | 20 66 6f 72 20 74 68 65 20 69 6e 73 69 64 65 20 74 72 61 66 66 69 63 20 74 68 65 20 74 72 61 6e | .for.the.inside.traffic.the.tran |
1e8c0 | 73 6c 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 20 74 6f 2e 00 2a 2a 69 6e 62 6f 75 | slation.rule.applies.to..**inbou |
1e8e0 | 6e 64 2d 69 6e 74 65 72 66 61 63 65 2a 2a 20 2d 20 61 70 70 6c 69 63 61 62 6c 65 20 6f 6e 6c 79 | nd-interface**.-.applicable.only |
1e900 | 20 74 6f 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 2e 20 49 74 20 63 | .to.:ref:`destination-nat`..It.c |
1e920 | 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 | onfigures.the.interface.which.is |
1e940 | 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 69 6e 73 69 64 65 20 74 72 61 66 66 69 63 20 74 68 65 | .used.for.the.inside.traffic.the |
1e960 | 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 20 74 6f 2e 20 49 6e | .translation.rule.applies.to..In |
1e980 | 74 65 72 66 61 63 65 20 67 72 6f 75 70 73 2c 20 69 6e 76 65 72 74 65 64 20 73 65 6c 65 63 74 69 | terface.groups,.inverted.selecti |
1e9a0 | 6f 6e 20 61 6e 64 20 77 69 6c 64 63 61 72 64 2c 20 61 72 65 20 61 6c 73 6f 20 73 75 70 70 6f 72 | on.and.wildcard,.are.also.suppor |
1e9c0 | 74 65 64 2e 00 2a 2a 69 70 76 34 2d 61 64 64 72 2a 2a 20 2d 20 43 61 6c 63 75 6c 61 74 65 20 69 | ted..**ipv4-addr**.-.Calculate.i |
1e9e0 | 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 72 6f 6d 20 49 50 76 34 20 61 64 | nterface.identifier.from.IPv4.ad |
1ea00 | 64 72 65 73 73 2e 00 2a 2a 6c 32 2a 2a 3a 20 49 74 20 6d 65 61 6e 73 20 74 68 61 74 20 63 6c 69 | dress..**l2**:.It.means.that.cli |
1ea20 | 65 6e 74 73 20 61 72 65 20 6f 6e 20 73 61 6d 65 20 6e 65 74 77 6f 72 6b 20 77 68 65 72 65 20 69 | ents.are.on.same.network.where.i |
1ea40 | 6e 74 65 72 66 61 63 65 20 69 73 2e 2a 2a 28 64 65 66 61 75 6c 74 29 2a 2a 00 2a 2a 6c 61 79 65 | nterface.is.**(default)**.**laye |
1ea60 | 72 32 2a 2a 20 2d 20 55 73 65 73 20 58 4f 52 20 6f 66 20 68 61 72 64 77 61 72 65 20 4d 41 43 20 | r2**.-.Uses.XOR.of.hardware.MAC. |
1ea80 | 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 70 61 63 6b 65 74 20 74 79 70 65 20 49 44 20 66 69 65 | addresses.and.packet.type.ID.fie |
1eaa0 | 6c 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 73 68 2e 20 54 68 65 20 66 6f 72 | ld.to.generate.the.hash..The.for |
1eac0 | 6d 75 6c 61 20 69 73 00 2a 2a 6c 61 79 65 72 32 2b 33 2a 2a 20 2d 20 54 68 69 73 20 70 6f 6c 69 | mula.is.**layer2+3**.-.This.poli |
1eae0 | 63 79 20 75 73 65 73 20 61 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 20 6f 66 20 6c 61 79 65 72 32 20 | cy.uses.a.combination.of.layer2. |
1eb00 | 61 6e 64 20 6c 61 79 65 72 33 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | and.layer3.protocol.information. |
1eb20 | 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 73 68 2e 20 55 73 65 73 20 58 4f 52 20 6f | to.generate.the.hash..Uses.XOR.o |
1eb40 | 66 20 68 61 72 64 77 61 72 65 20 4d 41 43 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 49 50 20 | f.hardware.MAC.addresses.and.IP. |
1eb60 | 61 64 64 72 65 73 73 65 73 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 73 68 2e 20 | addresses.to.generate.the.hash.. |
1eb80 | 54 68 65 20 66 6f 72 6d 75 6c 61 20 69 73 3a 00 2a 2a 6c 61 79 65 72 33 2b 34 2a 2a 20 2d 20 54 | The.formula.is:.**layer3+4**.-.T |
1eba0 | 68 69 73 20 70 6f 6c 69 63 79 20 75 73 65 73 20 75 70 70 65 72 20 6c 61 79 65 72 20 70 72 6f 74 | his.policy.uses.upper.layer.prot |
1ebc0 | 6f 63 6f 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 77 68 65 6e 20 61 76 61 69 6c 61 62 6c 65 | ocol.information,.when.available |
1ebe0 | 2c 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 73 68 2e 20 54 68 69 73 20 61 6c 6c | ,.to.generate.the.hash..This.all |
1ec00 | 6f 77 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 74 6f 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 | ows.for.traffic.to.a.particular. |
1ec20 | 6e 65 74 77 6f 72 6b 20 70 65 65 72 20 74 6f 20 73 70 61 6e 20 6d 75 6c 74 69 70 6c 65 20 73 6c | network.peer.to.span.multiple.sl |
1ec40 | 61 76 65 73 2c 20 61 6c 74 68 6f 75 67 68 20 61 20 73 69 6e 67 6c 65 20 63 6f 6e 6e 65 63 74 69 | aves,.although.a.single.connecti |
1ec60 | 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 73 70 61 6e 20 6d 75 6c 74 69 70 6c 65 20 73 6c 61 76 65 73 | on.will.not.span.multiple.slaves |
1ec80 | 2e 00 2a 2a 6c 65 66 74 2a 2a 00 2a 2a 6c 65 76 65 6c 2d 31 2a 2a 20 2d 20 41 63 74 20 61 73 20 | ..**left**.**level-1**.-.Act.as. |
1eca0 | 61 20 73 74 61 74 69 6f 6e 20 28 4c 65 76 65 6c 20 31 29 20 72 6f 75 74 65 72 20 6f 6e 6c 79 2e | a.station.(Level.1).router.only. |
1ecc0 | 00 2a 2a 6c 65 76 65 6c 2d 31 2a 2a 20 2d 20 4c 65 76 65 6c 2d 31 20 6f 6e 6c 79 20 61 64 6a 61 | .**level-1**.-.Level-1.only.adja |
1ece0 | 63 65 6e 63 69 65 73 20 61 72 65 20 66 6f 72 6d 65 64 2e 00 2a 2a 6c 65 76 65 6c 2d 31 2d 32 2a | cencies.are.formed..**level-1-2* |
1ed00 | 2a 20 2d 20 41 63 74 20 61 73 20 61 20 73 74 61 74 69 6f 6e 20 28 4c 65 76 65 6c 20 31 29 20 72 | *.-.Act.as.a.station.(Level.1).r |
1ed20 | 6f 75 74 65 72 20 61 6e 64 20 61 72 65 61 20 28 4c 65 76 65 6c 20 32 29 20 72 6f 75 74 65 72 2e | outer.and.area.(Level.2).router. |
1ed40 | 00 2a 2a 6c 65 76 65 6c 2d 31 2d 32 2a 2a 20 2d 20 4c 65 76 65 6c 2d 31 2d 32 20 61 64 6a 61 63 | .**level-1-2**.-.Level-1-2.adjac |
1ed60 | 65 6e 63 69 65 73 20 61 72 65 20 66 6f 72 6d 65 64 00 2a 2a 6c 65 76 65 6c 2d 32 2d 6f 6e 6c 79 | encies.are.formed.**level-2-only |
1ed80 | 2a 2a 20 2d 20 41 63 74 20 61 73 20 61 6e 20 61 72 65 61 20 28 4c 65 76 65 6c 20 32 29 20 72 6f | **.-.Act.as.an.area.(Level.2).ro |
1eda0 | 75 74 65 72 20 6f 6e 6c 79 2e 00 2a 2a 6c 65 76 65 6c 2d 32 2d 6f 6e 6c 79 2a 2a 20 2d 20 4c 65 | uter.only..**level-2-only**.-.Le |
1edc0 | 76 65 6c 2d 32 20 6f 6e 6c 79 20 61 64 6a 61 63 65 6e 63 69 65 73 20 61 72 65 20 66 6f 72 6d 65 | vel-2.only.adjacencies.are.forme |
1ede0 | 64 00 2a 2a 6c 6f 63 61 6c 20 73 69 64 65 20 2d 20 63 6f 6d 6d 61 6e 64 73 2a 2a 00 2a 2a 6c 6f | d.**local.side.-.commands**.**lo |
1ee00 | 63 61 6c 2a 2a 3a 20 41 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 71 75 65 72 69 65 | cal**:.All.authentication.querie |
1ee20 | 73 20 61 72 65 20 68 61 6e 64 6c 65 64 20 6c 6f 63 61 6c 6c 79 2e 00 2a 2a 6c 6f 63 61 6c 2a 2a | s.are.handled.locally..**local** |
1ee40 | 3a 20 49 74 20 6d 65 61 6e 73 20 74 68 61 74 20 63 6c 69 65 6e 74 20 61 72 65 20 62 65 68 69 6e | :.It.means.that.client.are.behin |
1ee60 | 64 20 73 6f 6d 65 20 72 6f 75 74 65 72 2e 00 2a 2a 6c 6f 67 2d 66 61 69 6c 2a 2a 20 49 6e 20 74 | d.some.router..**log-fail**.In.t |
1ee80 | 68 69 73 20 6d 6f 64 65 2c 20 74 68 65 20 72 65 63 75 72 73 6f 72 20 77 69 6c 6c 20 61 74 74 65 | his.mode,.the.recursor.will.atte |
1eea0 | 6d 70 74 20 74 6f 20 76 61 6c 69 64 61 74 65 20 61 6c 6c 20 64 61 74 61 20 69 74 20 72 65 74 72 | mpt.to.validate.all.data.it.retr |
1eec0 | 69 65 76 65 73 20 66 72 6f 6d 20 61 75 74 68 6f 72 69 74 61 74 69 76 65 20 73 65 72 76 65 72 73 | ieves.from.authoritative.servers |
1eee0 | 2c 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 27 73 20 44 4e 53 | ,.regardless.of.the.client's.DNS |
1ef00 | 53 45 43 20 64 65 73 69 72 65 73 2c 20 61 6e 64 20 77 69 6c 6c 20 6c 6f 67 20 74 68 65 20 76 61 | SEC.desires,.and.will.log.the.va |
1ef20 | 6c 69 64 61 74 69 6f 6e 20 72 65 73 75 6c 74 2e 20 54 68 69 73 20 6d 6f 64 65 20 63 61 6e 20 62 | lidation.result..This.mode.can.b |
1ef40 | 65 20 75 73 65 64 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 65 78 74 72 61 20 6c 6f | e.used.to.determine.the.extra.lo |
1ef60 | 61 64 20 61 6e 64 20 61 6d 6f 75 6e 74 20 6f 66 20 70 6f 73 73 69 62 6c 79 20 62 6f 67 75 73 20 | ad.and.amount.of.possibly.bogus. |
1ef80 | 61 6e 73 77 65 72 73 20 62 65 66 6f 72 65 20 74 75 72 6e 69 6e 67 20 6f 6e 20 66 75 6c 6c 2d 62 | answers.before.turning.on.full-b |
1efa0 | 6c 6f 77 6e 20 76 61 6c 69 64 61 74 69 6f 6e 2e 20 52 65 73 70 6f 6e 73 65 73 20 74 6f 20 63 6c | lown.validation..Responses.to.cl |
1efc0 | 69 65 6e 74 20 71 75 65 72 69 65 73 20 61 72 65 20 74 68 65 20 73 61 6d 65 20 61 73 20 77 69 74 | ient.queries.are.the.same.as.wit |
1efe0 | 68 20 70 72 6f 63 65 73 73 2e 00 2a 2a 6e 61 72 72 6f 77 2a 2a 20 2d 20 55 73 65 20 6f 6c 64 20 | h.process..**narrow**.-.Use.old. |
1f000 | 73 74 79 6c 65 20 6f 66 20 54 4c 56 73 20 77 69 74 68 20 6e 61 72 72 6f 77 20 6d 65 74 72 69 63 | style.of.TLVs.with.narrow.metric |
1f020 | 2e 00 2a 2a 6e 65 74 2d 61 64 6d 69 6e 2a 2a 3a 20 4e 65 74 77 6f 72 6b 20 6f 70 65 72 61 74 69 | ..**net-admin**:.Network.operati |
1f040 | 6f 6e 73 20 28 69 6e 74 65 72 66 61 63 65 2c 20 66 69 72 65 77 61 6c 6c 2c 20 72 6f 75 74 69 6e | ons.(interface,.firewall,.routin |
1f060 | 67 20 74 61 62 6c 65 73 29 00 2a 2a 6e 65 74 2d 62 69 6e 64 2d 73 65 72 76 69 63 65 2a 2a 3a 20 | g.tables).**net-bind-service**:. |
1f080 | 42 69 6e 64 20 61 20 73 6f 63 6b 65 74 20 74 6f 20 70 72 69 76 69 6c 65 67 65 64 20 70 6f 72 74 | Bind.a.socket.to.privileged.port |
1f0a0 | 73 20 28 70 6f 72 74 20 6e 75 6d 62 65 72 73 20 6c 65 73 73 20 74 68 61 6e 20 31 30 32 34 29 00 | s.(port.numbers.less.than.1024). |
1f0c0 | 2a 2a 6e 65 74 2d 72 61 77 2a 2a 3a 20 50 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 63 72 65 61 74 | **net-raw**:.Permission.to.creat |
1f0e0 | 65 20 72 61 77 20 6e 65 74 77 6f 72 6b 20 73 6f 63 6b 65 74 73 00 2a 2a 6e 6f 2a 2a 3a 20 44 6f | e.raw.network.sockets.**no**:.Do |
1f100 | 20 6e 6f 74 20 72 65 73 74 61 72 74 20 63 6f 6e 74 61 69 6e 65 72 73 20 6f 6e 20 65 78 69 74 00 | .not.restart.containers.on.exit. |
1f120 | 2a 2a 6e 6f 61 75 74 68 2a 2a 3a 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 69 73 61 62 | **noauth**:.Authentication.disab |
1f140 | 6c 65 64 00 2a 2a 6e 6f 61 75 74 68 2a 2a 3a 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 | led.**noauth**:.Authentication.d |
1f160 | 69 73 61 62 6c 65 64 2e 00 2a 2a 6f 66 66 2a 2a 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 2c 20 6e | isabled..**off**.In.this.mode,.n |
1f180 | 6f 20 44 4e 53 53 45 43 20 70 72 6f 63 65 73 73 69 6e 67 20 74 61 6b 65 73 20 70 6c 61 63 65 2e | o.DNSSEC.processing.takes.place. |
1f1a0 | 20 54 68 65 20 72 65 63 75 72 73 6f 72 20 77 69 6c 6c 20 6e 6f 74 20 73 65 74 20 74 68 65 20 44 | .The.recursor.will.not.set.the.D |
1f1c0 | 4e 53 53 45 43 20 4f 4b 20 28 44 4f 29 20 62 69 74 20 69 6e 20 74 68 65 20 6f 75 74 67 6f 69 6e | NSSEC.OK.(DO).bit.in.the.outgoin |
1f1e0 | 67 20 71 75 65 72 69 65 73 20 61 6e 64 20 77 69 6c 6c 20 69 67 6e 6f 72 65 20 74 68 65 20 44 4f | g.queries.and.will.ignore.the.DO |
1f200 | 20 61 6e 64 20 41 44 20 62 69 74 73 20 69 6e 20 71 75 65 72 69 65 73 2e 00 2a 2a 6f 6e 2d 66 61 | .and.AD.bits.in.queries..**on-fa |
1f220 | 69 6c 75 72 65 2a 2a 3a 20 52 65 73 74 61 72 74 20 63 6f 6e 74 61 69 6e 65 72 73 20 77 68 65 6e | ilure**:.Restart.containers.when |
1f240 | 20 74 68 65 79 20 65 78 69 74 20 77 69 74 68 20 61 20 6e 6f 6e 2d 7a 65 72 6f 20 65 78 69 74 20 | .they.exit.with.a.non-zero.exit. |
1f260 | 63 6f 64 65 2c 20 72 65 74 72 79 69 6e 67 20 69 6e 64 65 66 69 6e 69 74 65 6c 79 20 28 64 65 66 | code,.retrying.indefinitely.(def |
1f280 | 61 75 6c 74 29 00 2a 2a 6f 75 74 62 6f 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 2a 2a 20 2d 20 61 | ault).**outbound-interface**.-.a |
1f2a0 | 70 70 6c 69 63 61 62 6c 65 20 6f 6e 6c 79 20 74 6f 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e | pplicable.only.to.:ref:`source-n |
1f2c0 | 61 74 60 2e 20 49 74 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 | at`..It.configures.the.interface |
1f2e0 | 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 6f 75 74 73 69 64 65 20 74 | .which.is.used.for.the.outside.t |
1f300 | 72 61 66 66 69 63 20 74 68 61 74 20 74 68 69 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c | raffic.that.this.translation.rul |
1f320 | 65 20 61 70 70 6c 69 65 73 20 74 6f 2e 00 2a 2a 6f 75 74 62 6f 75 6e 64 2d 69 6e 74 65 72 66 61 | e.applies.to..**outbound-interfa |
1f340 | 63 65 2a 2a 20 2d 20 61 70 70 6c 69 63 61 62 6c 65 20 6f 6e 6c 79 20 74 6f 20 3a 72 65 66 3a 60 | ce**.-.applicable.only.to.:ref:` |
1f360 | 73 6f 75 72 63 65 2d 6e 61 74 60 2e 20 49 74 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 69 | source-nat`..It.configures.the.i |
1f380 | 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 6f | nterface.which.is.used.for.the.o |
1f3a0 | 75 74 73 69 64 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 74 68 69 73 20 74 72 61 6e 73 6c 61 | utside.traffic.that.this.transla |
1f3c0 | 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 20 74 6f 2e 20 49 6e 74 65 72 66 61 63 65 20 | tion.rule.applies.to..Interface. |
1f3e0 | 67 72 6f 75 70 73 2c 20 69 6e 76 65 72 74 65 64 20 73 65 6c 65 63 74 69 6f 6e 20 61 6e 64 20 77 | groups,.inverted.selection.and.w |
1f400 | 69 6c 64 63 61 72 64 2c 20 61 72 65 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 65 64 2e 00 2a 2a 70 | ildcard,.are.also.supported..**p |
1f420 | 72 65 66 65 72 2a 2a 20 2d 20 41 73 6b 20 63 6c 69 65 6e 74 20 66 6f 72 20 49 50 76 34 20 6e 65 | refer**.-.Ask.client.for.IPv4.ne |
1f440 | 67 6f 74 69 61 74 69 6f 6e 2c 20 64 6f 20 6e 6f 74 20 66 61 69 6c 20 69 66 20 69 74 20 72 65 6a | gotiation,.do.not.fail.if.it.rej |
1f460 | 65 63 74 73 00 2a 2a 70 72 65 66 65 72 2a 2a 20 2d 20 41 73 6b 20 63 6c 69 65 6e 74 20 66 6f 72 | ects.**prefer**.-.Ask.client.for |
1f480 | 20 49 50 76 36 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2c 20 64 6f 20 6e 6f 74 20 66 61 69 6c 20 69 | .IPv6.negotiation,.do.not.fail.i |
1f4a0 | 66 20 69 74 20 72 65 6a 65 63 74 73 00 2a 2a 70 72 65 66 65 72 2a 2a 20 2d 20 61 73 6b 20 63 6c | f.it.rejects.**prefer**.-.ask.cl |
1f4c0 | 69 65 6e 74 20 66 6f 72 20 6d 70 70 65 2c 20 69 66 20 69 74 20 72 65 6a 65 63 74 73 20 64 6f 6e | ient.for.mppe,.if.it.rejects.don |
1f4e0 | 27 74 20 66 61 69 6c 00 2a 2a 70 72 65 66 65 72 2a 2a 20 2d 20 61 73 6b 20 63 6c 69 65 6e 74 20 | 't.fail.**prefer**.-.ask.client. |
1f500 | 66 6f 72 20 6d 70 70 65 2c 20 69 66 20 69 74 20 72 65 6a 65 63 74 73 20 64 6f 6e 27 74 20 66 61 | for.mppe,.if.it.rejects.don't.fa |
1f520 | 69 6c 2e 20 28 44 65 66 61 75 6c 74 20 76 61 6c 75 65 29 00 2a 2a 70 72 6f 63 65 73 73 2a 2a 20 | il..(Default.value).**process**. |
1f540 | 57 68 65 6e 20 64 6e 73 73 65 63 20 69 73 20 73 65 74 20 74 6f 20 70 72 6f 63 65 73 73 20 74 68 | When.dnssec.is.set.to.process.th |
1f560 | 65 20 62 65 68 61 76 69 6f 72 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 70 72 6f 63 65 73 73 | e.behavior.is.similar.to.process |
1f580 | 2d 6e 6f 2d 76 61 6c 69 64 61 74 65 2e 20 48 6f 77 65 76 65 72 2c 20 74 68 65 20 72 65 63 75 72 | -no-validate..However,.the.recur |
1f5a0 | 73 6f 72 20 77 69 6c 6c 20 74 72 79 20 74 6f 20 76 61 6c 69 64 61 74 65 20 74 68 65 20 64 61 74 | sor.will.try.to.validate.the.dat |
1f5c0 | 61 20 69 66 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 6f 66 20 74 68 65 20 44 4f 20 6f 72 20 41 | a.if.at.least.one.of.the.DO.or.A |
1f5e0 | 44 20 62 69 74 73 20 69 73 20 73 65 74 20 69 6e 20 74 68 65 20 71 75 65 72 79 3b 20 69 6e 20 74 | D.bits.is.set.in.the.query;.in.t |
1f600 | 68 61 74 20 63 61 73 65 2c 20 69 74 20 77 69 6c 6c 20 73 65 74 20 74 68 65 20 41 44 2d 62 69 74 | hat.case,.it.will.set.the.AD-bit |
1f620 | 20 69 6e 20 74 68 65 20 72 65 73 70 6f 6e 73 65 20 77 68 65 6e 20 74 68 65 20 64 61 74 61 20 69 | .in.the.response.when.the.data.i |
1f640 | 73 20 76 61 6c 69 64 61 74 65 64 20 73 75 63 63 65 73 73 66 75 6c 6c 79 2c 20 6f 72 20 73 65 6e | s.validated.successfully,.or.sen |
1f660 | 64 20 53 45 52 56 46 41 49 4c 20 77 68 65 6e 20 74 68 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 63 | d.SERVFAIL.when.the.validation.c |
1f680 | 6f 6d 65 73 20 75 70 20 62 6f 67 75 73 2e 00 2a 2a 70 72 6f 63 65 73 73 2d 6e 6f 2d 76 61 6c 69 | omes.up.bogus..**process-no-vali |
1f6a0 | 64 61 74 65 2a 2a 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 20 74 68 65 20 72 65 63 75 72 73 6f 72 | date**.In.this.mode.the.recursor |
1f6c0 | 20 61 63 74 73 20 61 73 20 61 20 22 73 65 63 75 72 69 74 79 20 61 77 61 72 65 2c 20 6e 6f 6e 2d | .acts.as.a."security.aware,.non- |
1f6e0 | 76 61 6c 69 64 61 74 69 6e 67 22 20 6e 61 6d 65 73 65 72 76 65 72 2c 20 6d 65 61 6e 69 6e 67 20 | validating".nameserver,.meaning. |
1f700 | 69 74 20 77 69 6c 6c 20 73 65 74 20 74 68 65 20 44 4f 2d 62 69 74 20 6f 6e 20 6f 75 74 67 6f 69 | it.will.set.the.DO-bit.on.outgoi |
1f720 | 6e 67 20 71 75 65 72 69 65 73 20 61 6e 64 20 77 69 6c 6c 20 70 72 6f 76 69 64 65 20 44 4e 53 53 | ng.queries.and.will.provide.DNSS |
1f740 | 45 43 20 72 65 6c 61 74 65 64 20 52 52 73 65 74 73 20 28 4e 53 45 43 2c 20 52 52 53 49 47 29 20 | EC.related.RRsets.(NSEC,.RRSIG). |
1f760 | 74 6f 20 63 6c 69 65 6e 74 73 20 74 68 61 74 20 61 73 6b 20 66 6f 72 20 74 68 65 6d 20 28 62 79 | to.clients.that.ask.for.them.(by |
1f780 | 20 6d 65 61 6e 73 20 6f 66 20 61 20 44 4f 2d 62 69 74 20 69 6e 20 74 68 65 20 71 75 65 72 79 29 | .means.of.a.DO-bit.in.the.query) |
1f7a0 | 2c 20 65 78 63 65 70 74 20 66 6f 72 20 7a 6f 6e 65 73 20 70 72 6f 76 69 64 65 64 20 74 68 72 6f | ,.except.for.zones.provided.thro |
1f7c0 | 75 67 68 20 74 68 65 20 61 75 74 68 2d 7a 6f 6e 65 73 20 73 65 74 74 69 6e 67 2e 20 49 74 20 77 | ugh.the.auth-zones.setting..It.w |
1f7e0 | 69 6c 6c 20 6e 6f 74 20 64 6f 20 61 6e 79 20 76 61 6c 69 64 61 74 69 6f 6e 20 69 6e 20 74 68 69 | ill.not.do.any.validation.in.thi |
1f800 | 73 20 6d 6f 64 65 2c 20 6e 6f 74 20 65 76 65 6e 20 77 68 65 6e 20 72 65 71 75 65 73 74 65 64 20 | s.mode,.not.even.when.requested. |
1f820 | 62 79 20 74 68 65 20 63 6c 69 65 6e 74 2e 00 2a 2a 70 72 6f 74 6f 63 6f 6c 2a 2a 20 2d 20 73 70 | by.the.client..**protocol**.-.sp |
1f840 | 65 63 69 66 79 20 77 68 69 63 68 20 74 79 70 65 73 20 6f 66 20 70 72 6f 74 6f 63 6f 6c 73 20 74 | ecify.which.types.of.protocols.t |
1f860 | 68 69 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 20 74 6f 2e | his.translation.rule.applies.to. |
1f880 | 20 4f 6e 6c 79 20 70 61 63 6b 65 74 73 20 6d 61 74 63 68 69 6e 67 20 74 68 65 20 73 70 65 63 69 | .Only.packets.matching.the.speci |
1f8a0 | 66 69 65 64 20 70 72 6f 74 6f 63 6f 6c 20 61 72 65 20 4e 41 54 65 64 2e 20 42 79 20 64 65 66 61 | fied.protocol.are.NATed..By.defa |
1f8c0 | 75 6c 74 20 74 68 69 73 20 61 70 70 6c 69 65 73 20 74 6f 20 60 61 6c 6c 60 20 70 72 6f 74 6f 63 | ult.this.applies.to.`all`.protoc |
1f8e0 | 6f 6c 73 2e 00 2a 2a 72 61 64 69 75 73 2a 2a 3a 20 41 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 74 | ols..**radius**:.All.authenticat |
1f900 | 69 6f 6e 20 71 75 65 72 69 65 73 20 61 72 65 20 68 61 6e 64 6c 65 64 20 62 79 20 61 20 63 6f 6e | ion.queries.are.handled.by.a.con |
1f920 | 66 69 67 75 72 65 64 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 2a 2a 72 61 6e 64 6f 6d 2a | figured.RADIUS.server..**random* |
1f940 | 2a 20 2d 20 52 61 6e 64 6f 6d 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 | *.-.Random.interface.identifier. |
1f960 | 66 6f 72 20 49 50 76 36 00 2a 2a 72 65 6d 6f 74 65 20 73 69 64 65 20 2d 20 63 6f 6d 6d 61 6e 64 | for.IPv6.**remote.side.-.command |
1f980 | 73 2a 2a 00 2a 2a 72 65 70 6c 61 63 65 2a 2a 3a 20 54 65 72 6d 69 6e 61 74 65 20 66 69 72 73 74 | s**.**replace**:.Terminate.first |
1f9a0 | 20 73 65 73 73 69 6f 6e 20 77 68 65 6e 20 73 65 63 6f 6e 64 20 69 73 20 61 75 74 68 6f 72 69 7a | .session.when.second.is.authoriz |
1f9c0 | 65 64 20 2a 2a 28 64 65 66 61 75 6c 74 29 2a 2a 00 2a 2a 72 65 70 6c 61 63 65 3a 2a 2a 20 52 65 | ed.**(default)**.**replace:**.Re |
1f9e0 | 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6c 72 65 61 64 79 20 70 72 65 73 65 6e 74 20 | lay.information.already.present. |
1fa00 | 69 6e 20 61 20 70 61 63 6b 65 74 20 69 73 20 73 74 72 69 70 70 65 64 20 61 6e 64 20 72 65 70 6c | in.a.packet.is.stripped.and.repl |
1fa20 | 61 63 65 64 20 77 69 74 68 20 74 68 65 20 72 6f 75 74 65 72 27 73 20 6f 77 6e 20 72 65 6c 61 79 | aced.with.the.router's.own.relay |
1fa40 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 73 65 74 2e 00 2a 2a 72 65 71 75 69 72 65 2a 2a 20 2d 20 | .information.set..**require**.-. |
1fa60 | 52 65 71 75 69 72 65 20 49 50 76 34 20 6e 65 67 6f 74 69 61 74 69 6f 6e 00 2a 2a 72 65 71 75 69 | Require.IPv4.negotiation.**requi |
1fa80 | 72 65 2a 2a 20 2d 20 52 65 71 75 69 72 65 20 49 50 76 36 20 6e 65 67 6f 74 69 61 74 69 6f 6e 00 | re**.-.Require.IPv6.negotiation. |
1faa0 | 2a 2a 72 65 71 75 69 72 65 2a 2a 20 2d 20 61 73 6b 20 63 6c 69 65 6e 74 20 66 6f 72 20 6d 70 70 | **require**.-.ask.client.for.mpp |
1fac0 | 65 2c 20 69 66 20 69 74 20 72 65 6a 65 63 74 73 20 64 72 6f 70 20 63 6f 6e 6e 65 63 74 69 6f 6e | e,.if.it.rejects.drop.connection |
1fae0 | 00 2a 2a 72 69 67 68 74 2a 2a 00 2a 2a 73 65 74 70 63 61 70 2a 2a 3a 20 43 61 70 61 62 69 6c 69 | .**right**.**setpcap**:.Capabili |
1fb00 | 74 79 20 73 65 74 73 20 28 66 72 6f 6d 20 62 6f 75 6e 64 65 64 20 6f 72 20 69 6e 68 65 72 69 74 | ty.sets.(from.bounded.or.inherit |
1fb20 | 65 64 20 73 65 74 29 00 2a 2a 73 68 61 72 65 64 2a 2a 3a 20 4d 75 6c 74 69 70 6c 65 20 63 6c 69 | ed.set).**shared**:.Multiple.cli |
1fb40 | 65 6e 74 73 20 73 68 61 72 65 20 74 68 65 20 73 61 6d 65 20 6e 65 74 77 6f 72 6b 2e 20 2a 2a 28 | ents.share.the.same.network..**( |
1fb60 | 64 65 66 61 75 6c 74 29 2a 2a 00 2a 2a 73 6f 75 72 63 65 2a 2a 20 2d 20 73 70 65 63 69 66 69 65 | default)**.**source**.-.specifie |
1fb80 | 73 20 77 68 69 63 68 20 70 61 63 6b 65 74 73 20 74 68 65 20 4e 41 54 20 74 72 61 6e 73 6c 61 74 | s.which.packets.the.NAT.translat |
1fba0 | 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 20 74 6f 20 62 61 73 65 64 20 6f 6e 20 74 68 65 | ion.rule.applies.to.based.on.the |
1fbc0 | 20 70 61 63 6b 65 74 73 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 2f 6f | .packets.source.IP.address.and/o |
1fbe0 | 72 20 73 6f 75 72 63 65 20 70 6f 72 74 2e 20 4f 6e 6c 79 20 6d 61 74 63 68 69 6e 67 20 70 61 63 | r.source.port..Only.matching.pac |
1fc00 | 6b 65 74 73 20 61 72 65 20 63 6f 6e 73 69 64 65 72 65 64 20 66 6f 72 20 4e 41 54 2e 00 2a 2a 73 | kets.are.considered.for.NAT..**s |
1fc20 | 79 73 2d 61 64 6d 69 6e 2a 2a 3a 20 41 64 6d 69 6e 69 73 74 61 74 69 6f 6e 20 6f 70 65 72 61 74 | ys-admin**:.Administation.operat |
1fc40 | 69 6f 6e 73 20 28 71 75 6f 74 61 63 74 6c 2c 20 6d 6f 75 6e 74 2c 20 73 65 74 68 6f 73 74 6e 61 | ions.(quotactl,.mount,.sethostna |
1fc60 | 6d 65 2c 20 73 65 74 64 6f 6d 61 69 6e 61 6d 65 29 00 2a 2a 73 79 73 2d 74 69 6d 65 2a 2a 3a 20 | me,.setdomainame).**sys-time**:. |
1fc80 | 50 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 73 65 74 20 73 79 73 74 65 6d 20 63 6c 6f 63 6b 00 2a | Permission.to.set.system.clock.* |
1fca0 | 2a 74 72 61 6e 73 69 74 69 6f 6e 2a 2a 20 2d 20 53 65 6e 64 20 61 6e 64 20 61 63 63 65 70 74 20 | *transition**.-.Send.and.accept. |
1fcc0 | 62 6f 74 68 20 73 74 79 6c 65 73 20 6f 66 20 54 4c 56 73 20 64 75 72 69 6e 67 20 74 72 61 6e 73 | both.styles.of.TLVs.during.trans |
1fce0 | 69 74 69 6f 6e 2e 00 2a 2a 75 70 73 74 72 65 61 6d 3a 2a 2a 20 54 68 65 20 75 70 73 74 72 65 61 | ition..**upstream:**.The.upstrea |
1fd00 | 6d 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 74 68 65 20 6f 75 74 67 6f | m.network.interface.is.the.outgo |
1fd20 | 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 72 65 73 70 6f 6e 73 69 62 | ing.interface.which.is.responsib |
1fd40 | 6c 65 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6e 67 20 74 6f 20 61 76 61 69 6c 61 62 6c | le.for.communicating.to.availabl |
1fd60 | 65 20 6d 75 6c 74 69 63 61 73 74 20 64 61 74 61 20 73 6f 75 72 63 65 73 2e 20 54 68 65 72 65 20 | e.multicast.data.sources..There. |
1fd80 | 63 61 6e 20 6f 6e 6c 79 20 62 65 20 6f 6e 65 20 75 70 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 | can.only.be.one.upstream.interfa |
1fda0 | 63 65 2e 00 2a 2a 76 61 6c 69 64 61 74 65 2a 2a 20 54 68 65 20 68 69 67 68 65 73 74 20 6d 6f 64 | ce..**validate**.The.highest.mod |
1fdc0 | 65 20 6f 66 20 44 4e 53 53 45 43 20 70 72 6f 63 65 73 73 69 6e 67 2e 20 49 6e 20 74 68 69 73 20 | e.of.DNSSEC.processing..In.this. |
1fde0 | 6d 6f 64 65 2c 20 61 6c 6c 20 71 75 65 72 69 65 73 20 77 69 6c 6c 20 62 65 20 76 61 6c 69 64 61 | mode,.all.queries.will.be.valida |
1fe00 | 74 65 64 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 61 6e 73 77 65 72 65 64 20 77 69 74 68 20 61 20 | ted.and.will.be.answered.with.a. |
1fe20 | 53 45 52 56 46 41 49 4c 20 69 6e 20 63 61 73 65 20 6f 66 20 62 6f 67 75 73 20 64 61 74 61 2c 20 | SERVFAIL.in.case.of.bogus.data,. |
1fe40 | 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 27 73 20 72 65 71 75 65 | regardless.of.the.client's.reque |
1fe60 | 73 74 2e 00 2a 2a 76 6c 61 6e 2a 2a 3a 20 4f 6e 65 20 56 4c 41 4e 20 70 65 72 20 63 6c 69 65 6e | st..**vlan**:.One.VLAN.per.clien |
1fe80 | 74 2e 00 2a 2a 77 69 64 65 2a 2a 20 2d 20 55 73 65 20 6e 65 77 20 73 74 79 6c 65 20 6f 66 20 54 | t..**wide**.-.Use.new.style.of.T |
1fea0 | 4c 56 73 20 74 6f 20 63 61 72 72 79 20 77 69 64 65 72 20 6d 65 74 72 69 63 2e 00 2a 2a 78 3a 78 | LVs.to.carry.wider.metric..**x:x |
1fec0 | 3a 78 3a 78 2a 2a 20 2d 20 53 70 65 63 69 66 79 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 | :x:x**.-.Specify.interface.ident |
1fee0 | 69 66 69 65 72 20 66 6f 72 20 49 50 76 36 00 2a 62 67 70 64 2a 20 73 75 70 70 6f 72 74 73 20 4d | ifier.for.IPv6.*bgpd*.supports.M |
1ff00 | 75 6c 74 69 70 72 6f 74 6f 63 6f 6c 20 45 78 74 65 6e 73 69 6f 6e 20 66 6f 72 20 42 47 50 2e 20 | ultiprotocol.Extension.for.BGP.. |
1ff20 | 53 6f 20 69 66 20 61 20 72 65 6d 6f 74 65 20 70 65 65 72 20 73 75 70 70 6f 72 74 73 20 74 68 65 | So.if.a.remote.peer.supports.the |
1ff40 | 20 70 72 6f 74 6f 63 6f 6c 2c 20 2a 62 67 70 64 2a 20 63 61 6e 20 65 78 63 68 61 6e 67 65 20 49 | .protocol,.*bgpd*.can.exchange.I |
1ff60 | 50 76 36 20 61 6e 64 2f 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 72 6f 75 74 69 6e 67 20 69 6e 66 | Pv6.and/or.multicast.routing.inf |
1ff80 | 6f 72 6d 61 74 69 6f 6e 2e 00 30 00 30 20 69 66 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 77 68 | ormation..0.0.if.not.defined,.wh |
1ffa0 | 69 63 68 20 6d 65 61 6e 73 20 6e 6f 20 72 65 66 72 65 73 68 69 6e 67 2e 00 30 20 69 66 20 6e 6f | ich.means.no.refreshing..0.if.no |
1ffc0 | 74 20 64 65 66 69 6e 65 64 2e 00 30 30 30 30 30 30 00 30 30 31 30 31 30 00 30 30 31 31 30 30 00 | t.defined..000000.001010.001100. |
1ffe0 | 30 30 31 31 31 30 00 30 31 30 30 31 30 00 30 31 30 31 30 30 00 30 31 30 31 31 30 00 30 31 31 30 | 001110.010010.010100.010110.0110 |
20000 | 31 30 00 30 31 31 31 30 30 00 30 31 31 31 31 30 00 30 3a 20 44 69 73 61 62 6c 65 20 44 41 44 00 | 10.011100.011110.0:.Disable.DAD. |
20020 | 31 00 31 20 69 66 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e 00 31 2d 74 6f 2d 31 20 4e 41 54 00 31 | 1.1.if.not.defined..1-to-1.NAT.1 |
20040 | 2e 20 43 72 65 61 74 65 20 61 6e 20 65 76 65 6e 74 20 68 61 6e 64 6c 65 72 00 31 2e 20 46 69 72 | ..Create.an.event.handler.1..Fir |
20060 | 73 74 20 70 61 63 6b 65 74 20 69 73 20 72 65 63 65 69 76 65 64 20 6f 6e 20 65 68 74 30 2c 20 77 | st.packet.is.received.on.eht0,.w |
20080 | 69 74 68 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 31 39 32 2e 30 2e 32 2e | ith.destination.address.192.0.2. |
200a0 | 31 30 30 2c 20 70 72 6f 74 6f 63 6f 6c 20 74 63 70 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f | 100,.protocol.tcp.and.destinatio |
200c0 | 6e 20 70 6f 72 74 20 31 31 32 32 2e 20 41 73 73 75 6d 65 20 73 75 63 68 20 64 65 73 74 69 6e 61 | n.port.1122..Assume.such.destina |
200e0 | 74 69 6f 6e 20 61 64 64 72 65 73 73 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 74 68 72 6f 75 67 | tion.address.is.reachable.throug |
20100 | 68 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 31 2e 00 31 30 00 31 30 20 2d 20 31 30 20 4d 42 69 | h.interface.eth1..10.10.-.10.MBi |
20120 | 74 2f 73 00 31 30 2e 30 2e 30 2e 30 20 74 6f 20 31 30 2e 32 35 35 2e 32 35 35 2e 32 35 35 20 28 | t/s.10.0.0.0.to.10.255.255.255.( |
20140 | 43 49 44 52 3a 20 31 30 2e 30 2e 30 2e 30 2f 38 29 00 31 30 30 20 2d 20 31 30 30 20 4d 42 69 74 | CIDR:.10.0.0.0/8).100.-.100.MBit |
20160 | 2f 73 00 31 30 30 30 20 2d 20 31 20 47 42 69 74 2f 73 00 31 30 30 30 30 20 2d 20 31 30 20 47 42 | /s.1000.-.1.GBit/s.10000.-.10.GB |
20180 | 69 74 2f 73 00 31 30 30 30 30 30 20 2d 20 31 30 30 20 47 42 69 74 2f 73 00 31 30 30 30 31 30 00 | it/s.100000.-.100.GBit/s.100010. |
201a0 | 31 30 30 31 30 30 00 31 30 30 31 31 30 00 31 30 31 31 31 30 00 31 31 00 31 31 39 00 31 32 00 31 | 100100.100110.101110.11.119.12.1 |
201c0 | 32 31 2c 20 32 34 39 00 31 33 00 31 34 00 31 35 00 31 36 00 31 37 00 31 37 32 2e 31 36 2e 30 2e | 21,.249.13.14.15.16.17.172.16.0. |
201e0 | 30 20 74 6f 20 31 37 32 2e 33 31 2e 32 35 35 2e 32 35 35 20 28 43 49 44 52 3a 20 31 37 32 2e 31 | 0.to.172.31.255.255.(CIDR:.172.1 |
20200 | 36 2e 30 2e 30 2f 31 32 29 00 31 38 00 31 39 00 31 39 32 2e 31 36 38 2e 30 2e 30 20 74 6f 20 31 | 6.0.0/12).18.19.192.168.0.0.to.1 |
20220 | 39 32 2e 31 36 38 2e 32 35 35 2e 32 35 35 20 28 43 49 44 52 3a 20 31 39 32 2e 31 36 38 2e 30 2e | 92.168.255.255.(CIDR:.192.168.0. |
20240 | 30 2f 31 36 29 00 31 3a 20 45 6e 61 62 6c 65 20 44 41 44 20 28 64 65 66 61 75 6c 74 29 00 32 00 | 0/16).1:.Enable.DAD.(default).2. |
20260 | 32 2e 20 41 64 64 20 72 65 67 65 78 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 00 32 2e 20 53 69 | 2..Add.regex.to.the.script.2..Si |
20280 | 6e 63 65 20 74 68 69 73 20 69 73 20 74 68 65 20 66 69 72 73 74 20 70 61 63 6b 65 74 2c 20 63 6f | nce.this.is.the.first.packet,.co |
202a0 | 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 75 73 20 6f 66 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 | nnection.status.of.this.connecti |
202c0 | 6f 6e 2c 20 73 6f 20 66 61 72 20 69 73 20 2a 2a 6e 65 77 2a 2a 2e 20 53 6f 20 6e 65 69 74 68 65 | on,.so.far.is.**new**..So.neithe |
202e0 | 72 20 72 75 6c 65 20 31 30 20 6e 6f 72 20 32 30 20 61 72 65 20 76 61 6c 69 64 2e 00 32 30 00 32 | r.rule.10.nor.20.are.valid..20.2 |
20300 | 31 00 32 32 00 32 33 00 32 35 30 30 20 2d 20 32 2e 35 20 47 42 69 74 2f 73 00 32 35 30 30 30 20 | 1.22.23.2500.-.2.5.GBit/s.25000. |
20320 | 2d 20 32 35 20 47 42 69 74 2f 73 00 32 35 32 00 32 36 00 32 38 00 32 3a 20 45 6e 61 62 6c 65 20 | -.25.GBit/s.252.26.28.2:.Enable. |
20340 | 44 41 44 2c 20 61 6e 64 20 64 69 73 61 62 6c 65 20 49 50 76 36 20 6f 70 65 72 61 74 69 6f 6e 20 | DAD,.and.disable.IPv6.operation. |
20360 | 69 66 20 4d 41 43 2d 62 61 73 65 64 20 64 75 70 6c 69 63 61 74 65 20 6c 69 6e 6b 2d 6c 6f 63 61 | if.MAC-based.duplicate.link-loca |
20380 | 6c 20 61 64 64 72 65 73 73 20 68 61 73 20 62 65 65 6e 20 66 6f 75 6e 64 2e 00 32 46 41 20 4f 54 | l.address.has.been.found..2FA.OT |
203a0 | 50 20 73 75 70 70 6f 72 74 00 33 00 33 2e 20 41 64 64 20 61 20 66 75 6c 6c 20 70 61 74 68 20 74 | P.support.3.3..Add.a.full.path.t |
203c0 | 6f 20 74 68 65 20 73 63 72 69 70 74 00 33 30 00 33 34 00 33 36 00 33 38 00 34 00 34 2e 20 41 64 | o.the.script.30.34.36.38.4.4..Ad |
203e0 | 64 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 73 00 34 2e 20 4f 6e 63 65 20 61 6e | d.optional.parameters.4..Once.an |
20400 | 73 77 65 72 20 66 72 6f 6d 20 73 65 72 76 65 72 20 31 39 32 2e 30 2e 32 2e 31 30 30 20 69 73 20 | swer.from.server.192.0.2.100.is. |
20420 | 73 65 65 6e 20 69 6e 20 6f 70 70 6f 73 69 74 65 20 64 69 72 65 63 74 69 6f 6e 2c 20 63 6f 6e 6e | seen.in.opposite.direction,.conn |
20440 | 65 63 74 69 6f 6e 20 73 74 61 74 65 20 77 69 6c 6c 20 62 65 20 74 72 69 67 67 65 72 65 64 20 74 | ection.state.will.be.triggered.t |
20460 | 6f 20 2a 2a 65 73 74 61 62 6c 69 73 68 65 64 2a 2a 2c 20 73 6f 20 74 68 69 73 20 72 65 70 6c 79 | o.**established**,.so.this.reply |
20480 | 20 69 73 20 61 63 63 65 70 74 65 64 20 69 6e 20 72 75 6c 65 20 31 30 2e 00 34 30 20 4d 48 7a 20 | .is.accepted.in.rule.10..40.MHz. |
204a0 | 63 68 61 6e 6e 65 6c 73 20 6d 61 79 20 73 77 69 74 63 68 20 74 68 65 69 72 20 70 72 69 6d 61 72 | channels.may.switch.their.primar |
204c0 | 79 20 61 6e 64 20 73 65 63 6f 6e 64 61 72 79 20 63 68 61 6e 6e 65 6c 73 20 69 66 20 6e 65 65 64 | y.and.secondary.channels.if.need |
204e0 | 65 64 20 6f 72 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 34 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c | ed.or.creation.of.40.MHz.channel |
20500 | 20 6d 61 79 62 65 20 72 65 6a 65 63 74 65 64 20 62 61 73 65 64 20 6f 6e 20 6f 76 65 72 6c 61 70 | .maybe.rejected.based.on.overlap |
20520 | 70 69 6e 67 20 42 53 53 65 73 2e 20 54 68 65 73 65 20 63 68 61 6e 67 65 73 20 61 72 65 20 64 6f | ping.BSSes..These.changes.are.do |
20540 | 6e 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 77 68 65 6e 20 68 6f 73 74 61 70 64 20 69 73 | ne.automatically.when.hostapd.is |
20560 | 20 73 65 74 74 69 6e 67 20 75 70 20 74 68 65 20 34 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 2e 00 | .setting.up.the.40.MHz.channel.. |
20580 | 34 30 30 30 30 20 2d 20 34 30 20 47 42 69 74 2f 73 00 34 32 00 34 34 00 34 36 00 35 00 35 20 69 | 40000.-.40.GBit/s.42.44.46.5.5.i |
205a0 | 66 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e 00 35 2e 20 53 65 63 6f 6e 64 20 70 61 63 6b 65 74 20 | f.not.defined..5..Second.packet. |
205c0 | 66 6f 72 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 72 65 63 65 69 76 65 64 20 | for.this.connection.is.received. |
205e0 | 62 79 20 74 68 65 20 72 6f 75 74 65 72 2e 20 53 69 6e 63 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 | by.the.router..Since.connection. |
20600 | 73 74 61 74 65 20 69 73 20 2a 2a 65 73 74 61 62 6c 69 73 68 65 64 2a 2a 2c 20 74 68 65 6e 20 72 | state.is.**established**,.then.r |
20620 | 75 6c 65 20 31 30 20 69 73 20 68 69 74 2c 20 61 6e 64 20 61 20 6e 65 77 20 65 6e 74 72 79 20 69 | ule.10.is.hit,.and.a.new.entry.i |
20640 | 6e 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 46 54 30 31 20 69 73 20 61 64 64 65 64 20 66 6f | n.the.flowtable.FT01.is.added.fo |
20660 | 72 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 35 30 30 30 20 2d 20 35 20 47 42 69 74 | r.this.connection..5000.-.5.GBit |
20680 | 2f 73 00 35 30 30 30 30 20 2d 20 35 30 20 47 42 69 74 2f 73 00 35 34 00 36 00 36 2e 20 41 6c 6c | /s.50000.-.50.GBit/s.54.6.6..All |
206a0 | 20 73 75 62 73 65 63 75 65 6e 74 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 73 6b 69 70 20 74 72 | .subsecuent.packets.will.skip.tr |
206c0 | 61 64 69 74 69 6f 6e 61 6c 20 70 61 74 68 2c 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 6f 66 66 6c | aditional.path,.and.will.be.offl |
206e0 | 6f 61 64 65 64 20 61 6e 64 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 2a 2a 46 61 73 74 20 50 61 | oaded.and.will.use.the.**Fast.Pa |
20700 | 74 68 2a 2a 2e 00 36 36 00 36 36 25 20 6f 66 20 74 72 61 66 66 69 63 20 69 73 20 72 6f 75 74 65 | th**..66.66%.of.traffic.is.route |
20720 | 64 20 74 6f 20 65 74 68 30 2c 20 65 74 68 31 20 67 65 74 73 20 33 33 25 20 6f 66 20 74 72 61 66 | d.to.eth0,.eth1.gets.33%.of.traf |
20740 | 66 69 63 2e 00 36 37 00 36 39 00 36 69 6e 34 20 28 53 49 54 29 00 36 69 6e 34 20 75 73 65 73 20 | fic..67.69.6in4.(SIT).6in4.uses. |
20760 | 74 75 6e 6e 65 6c 69 6e 67 20 74 6f 20 65 6e 63 61 70 73 75 6c 61 74 65 20 49 50 76 36 20 74 72 | tunneling.to.encapsulate.IPv6.tr |
20780 | 61 66 66 69 63 20 6f 76 65 72 20 49 50 76 34 20 6c 69 6e 6b 73 20 61 73 20 64 65 66 69 6e 65 64 | affic.over.IPv4.links.as.defined |
207a0 | 20 69 6e 20 3a 72 66 63 3a 60 34 32 31 33 60 2e 20 54 68 65 20 36 69 6e 34 20 74 72 61 66 66 69 | .in.:rfc:`4213`..The.6in4.traffi |
207c0 | 63 20 69 73 20 73 65 6e 74 20 6f 76 65 72 20 49 50 76 34 20 69 6e 73 69 64 65 20 49 50 76 34 20 | c.is.sent.over.IPv4.inside.IPv4. |
207e0 | 70 61 63 6b 65 74 73 20 77 68 6f 73 65 20 49 50 20 68 65 61 64 65 72 73 20 68 61 76 65 20 74 68 | packets.whose.IP.headers.have.th |
20800 | 65 20 49 50 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 6d 62 65 72 20 73 65 74 20 74 6f 20 34 31 2e 20 | e.IP.protocol.number.set.to.41.. |
20820 | 54 68 69 73 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 6d 62 65 72 20 69 73 20 73 70 65 63 69 66 69 63 | This.protocol.number.is.specific |
20840 | 61 6c 6c 79 20 64 65 73 69 67 6e 61 74 65 64 20 66 6f 72 20 49 50 76 36 20 65 6e 63 61 70 73 75 | ally.designated.for.IPv6.encapsu |
20860 | 6c 61 74 69 6f 6e 2c 20 74 68 65 20 49 50 76 34 20 70 61 63 6b 65 74 20 68 65 61 64 65 72 20 69 | lation,.the.IPv4.packet.header.i |
20880 | 73 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 66 6f 6c 6c 6f 77 65 64 20 62 79 20 74 68 65 20 49 50 | s.immediately.followed.by.the.IP |
208a0 | 76 36 20 70 61 63 6b 65 74 20 62 65 69 6e 67 20 63 61 72 72 69 65 64 2e 20 54 68 65 20 65 6e 63 | v6.packet.being.carried..The.enc |
208c0 | 61 70 73 75 6c 61 74 69 6f 6e 20 6f 76 65 72 68 65 61 64 20 69 73 20 74 68 65 20 73 69 7a 65 20 | apsulation.overhead.is.the.size. |
208e0 | 6f 66 20 74 68 65 20 49 50 76 34 20 68 65 61 64 65 72 20 6f 66 20 32 30 20 62 79 74 65 73 2c 20 | of.the.IPv4.header.of.20.bytes,. |
20900 | 74 68 65 72 65 66 6f 72 65 20 77 69 74 68 20 61 6e 20 4d 54 55 20 6f 66 20 31 35 30 30 20 62 79 | therefore.with.an.MTU.of.1500.by |
20920 | 74 65 73 2c 20 49 50 76 36 20 70 61 63 6b 65 74 73 20 6f 66 20 31 34 38 30 20 62 79 74 65 73 20 | tes,.IPv6.packets.of.1480.bytes. |
20940 | 63 61 6e 20 62 65 20 73 65 6e 74 20 77 69 74 68 6f 75 74 20 66 72 61 67 6d 65 6e 74 61 74 69 6f | can.be.sent.without.fragmentatio |
20960 | 6e 2e 20 54 68 69 73 20 74 75 6e 6e 65 6c 69 6e 67 20 74 65 63 68 6e 69 71 75 65 20 69 73 20 66 | n..This.tunneling.technique.is.f |
20980 | 72 65 71 75 65 6e 74 6c 79 20 75 73 65 64 20 62 79 20 49 50 76 36 20 74 75 6e 6e 65 6c 20 62 72 | requently.used.by.IPv6.tunnel.br |
209a0 | 6f 6b 65 72 73 20 6c 69 6b 65 20 60 48 75 72 72 69 63 61 6e 65 20 45 6c 65 63 74 72 69 63 60 5f | okers.like.`Hurricane.Electric`_ |
209c0 | 2e 00 37 00 37 30 00 38 00 38 30 32 2e 31 71 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 | ..7.70.8.802.1q.VLAN.interfaces. |
209e0 | 61 72 65 20 72 65 70 72 65 73 65 6e 74 65 64 20 61 73 20 76 69 72 74 75 61 6c 20 73 75 62 2d 69 | are.represented.as.virtual.sub-i |
20a00 | 6e 74 65 72 66 61 63 65 73 20 69 6e 20 56 79 4f 53 2e 20 54 68 65 20 74 65 72 6d 20 75 73 65 64 | nterfaces.in.VyOS..The.term.used |
20a20 | 20 66 6f 72 20 74 68 69 73 20 69 73 20 60 60 76 69 66 60 60 2e 00 39 00 3a 61 62 62 72 3a 60 41 | .for.this.is.``vif``..9.:abbr:`A |
20a40 | 46 49 20 28 41 64 64 72 65 73 73 20 66 61 6d 69 6c 79 20 61 75 74 68 6f 72 69 74 79 20 69 64 65 | FI.(Address.family.authority.ide |
20a60 | 6e 74 69 66 69 65 72 29 60 20 2d 20 60 60 34 39 60 60 20 54 68 65 20 41 46 49 20 76 61 6c 75 65 | ntifier)`.-.``49``.The.AFI.value |
20a80 | 20 34 39 20 69 73 20 77 68 61 74 20 49 53 2d 49 53 20 75 73 65 73 20 66 6f 72 20 70 72 69 76 61 | .49.is.what.IS-IS.uses.for.priva |
20aa0 | 74 65 20 61 64 64 72 65 73 73 69 6e 67 2e 00 3a 61 62 62 72 3a 60 41 52 50 20 28 41 64 64 72 65 | te.addressing..:abbr:`ARP.(Addre |
20ac0 | 73 73 20 52 65 73 6f 6c 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 63 6f | ss.Resolution.Protocol)`.is.a.co |
20ae0 | 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 64 20 66 6f 72 20 64 69 | mmunication.protocol.used.for.di |
20b00 | 73 63 6f 76 65 72 69 6e 67 20 74 68 65 20 6c 69 6e 6b 20 6c 61 79 65 72 20 61 64 64 72 65 73 73 | scovering.the.link.layer.address |
20b20 | 2c 20 73 75 63 68 20 61 73 20 61 20 4d 41 43 20 61 64 64 72 65 73 73 2c 20 61 73 73 6f 63 69 61 | ,.such.as.a.MAC.address,.associa |
20b40 | 74 65 64 20 77 69 74 68 20 61 20 67 69 76 65 6e 20 69 6e 74 65 72 6e 65 74 20 6c 61 79 65 72 20 | ted.with.a.given.internet.layer. |
20b60 | 61 64 64 72 65 73 73 2c 20 74 79 70 69 63 61 6c 6c 79 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 | address,.typically.an.IPv4.addre |
20b80 | 73 73 2e 20 54 68 69 73 20 6d 61 70 70 69 6e 67 20 69 73 20 61 20 63 72 69 74 69 63 61 6c 20 66 | ss..This.mapping.is.a.critical.f |
20ba0 | 75 6e 63 74 69 6f 6e 20 69 6e 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 70 72 6f 74 6f 63 6f 6c | unction.in.the.Internet.protocol |
20bc0 | 20 73 75 69 74 65 2e 20 41 52 50 20 77 61 73 20 64 65 66 69 6e 65 64 20 69 6e 20 31 39 38 32 20 | .suite..ARP.was.defined.in.1982. |
20be0 | 62 79 20 3a 72 66 63 3a 60 38 32 36 60 20 77 68 69 63 68 20 69 73 20 49 6e 74 65 72 6e 65 74 20 | by.:rfc:`826`.which.is.Internet. |
20c00 | 53 74 61 6e 64 61 72 64 20 53 54 44 20 33 37 2e 00 3a 61 62 62 72 3a 60 42 46 44 20 28 42 69 64 | Standard.STD.37..:abbr:`BFD.(Bid |
20c20 | 69 72 65 63 74 69 6f 6e 61 6c 20 46 6f 72 77 61 72 64 69 6e 67 20 44 65 74 65 63 74 69 6f 6e 29 | irectional.Forwarding.Detection) |
20c40 | 60 20 69 73 20 64 65 73 63 72 69 62 65 64 20 61 6e 64 20 65 78 74 65 6e 64 65 64 20 62 79 20 74 | `.is.described.and.extended.by.t |
20c60 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 52 46 43 73 3a 20 3a 72 66 63 3a 60 35 38 38 30 60 2c 20 | he.following.RFCs:.:rfc:`5880`,. |
20c80 | 3a 72 66 63 3a 60 35 38 38 31 60 20 61 6e 64 20 3a 72 66 63 3a 60 35 38 38 33 60 2e 00 3a 61 62 | :rfc:`5881`.and.:rfc:`5883`..:ab |
20ca0 | 62 72 3a 60 42 47 50 20 28 42 6f 72 64 65 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c | br:`BGP.(Border.Gateway.Protocol |
20cc0 | 29 60 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 45 78 74 65 72 69 6f 72 20 47 61 74 65 77 61 | )`.is.one.of.the.Exterior.Gatewa |
20ce0 | 79 20 50 72 6f 74 6f 63 6f 6c 73 20 61 6e 64 20 74 68 65 20 64 65 20 66 61 63 74 6f 20 73 74 61 | y.Protocols.and.the.de.facto.sta |
20d00 | 6e 64 61 72 64 20 69 6e 74 65 72 64 6f 6d 61 69 6e 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 | ndard.interdomain.routing.protoc |
20d20 | 6f 6c 2e 20 54 68 65 20 6c 61 74 65 73 74 20 42 47 50 20 76 65 72 73 69 6f 6e 20 69 73 20 34 2e | ol..The.latest.BGP.version.is.4. |
20d40 | 20 42 47 50 2d 34 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 31 37 37 | .BGP-4.is.described.in.:rfc:`177 |
20d60 | 31 60 20 61 6e 64 20 75 70 64 61 74 65 64 20 62 79 20 3a 72 66 63 3a 60 34 32 37 31 60 2e 20 3a | 1`.and.updated.by.:rfc:`4271`..: |
20d80 | 72 66 63 3a 60 32 38 35 38 60 20 61 64 64 73 20 6d 75 6c 74 69 70 72 6f 74 6f 63 6f 6c 20 73 75 | rfc:`2858`.adds.multiprotocol.su |
20da0 | 70 70 6f 72 74 20 74 6f 20 42 47 50 2e 00 3a 61 62 62 72 3a 60 43 4b 4e 20 28 4d 41 43 73 65 63 | pport.to.BGP..:abbr:`CKN.(MACsec |
20dc0 | 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 6e 61 6d 65 29 60 | .connectivity.association.name)` |
20de0 | 20 6b 65 79 00 3a 61 62 62 72 3a 60 44 4d 56 50 4e 20 28 44 79 6e 61 6d 69 63 20 4d 75 6c 74 69 | .key.:abbr:`DMVPN.(Dynamic.Multi |
20e00 | 70 6f 69 6e 74 20 56 69 72 74 75 61 6c 20 50 72 69 76 61 74 65 20 4e 65 74 77 6f 72 6b 29 60 20 | point.Virtual.Private.Network)`. |
20e20 | 69 73 20 61 20 64 79 6e 61 6d 69 63 20 3a 61 62 62 72 3a 60 56 50 4e 20 28 56 69 72 74 75 61 6c | is.a.dynamic.:abbr:`VPN.(Virtual |
20e40 | 20 50 72 69 76 61 74 65 20 4e 65 74 77 6f 72 6b 29 60 20 74 65 63 68 6e 6f 6c 6f 67 79 20 6f 72 | .Private.Network)`.technology.or |
20e60 | 69 67 69 6e 61 6c 6c 79 20 64 65 76 65 6c 6f 70 65 64 20 62 79 20 43 69 73 63 6f 2e 20 57 68 69 | iginally.developed.by.Cisco..Whi |
20e80 | 6c 65 20 74 68 65 69 72 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 77 61 73 20 73 6f 6d 65 | le.their.implementation.was.some |
20ea0 | 77 68 61 74 20 70 72 6f 70 72 69 65 74 61 72 79 2c 20 74 68 65 20 75 6e 64 65 72 6c 79 69 6e 67 | what.proprietary,.the.underlying |
20ec0 | 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 61 72 65 20 61 63 74 75 61 6c 6c 79 20 73 74 61 6e 64 | .technologies.are.actually.stand |
20ee0 | 61 72 64 73 20 62 61 73 65 64 2e 20 54 68 65 20 74 68 72 65 65 20 74 65 63 68 6e 6f 6c 6f 67 69 | ards.based..The.three.technologi |
20f00 | 65 73 20 61 72 65 3a 00 3a 61 62 62 72 3a 60 44 4e 41 54 20 28 44 65 73 74 69 6e 61 74 69 6f 6e | es.are:.:abbr:`DNAT.(Destination |
20f20 | 20 4e 65 74 77 6f 72 6b 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 63 | .Network.Address.Translation)`.c |
20f40 | 68 61 6e 67 65 73 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6f | hanges.the.destination.address.o |
20f60 | 66 20 70 61 63 6b 65 74 73 20 70 61 73 73 69 6e 67 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f | f.packets.passing.through.the.ro |
20f80 | 75 74 65 72 2c 20 77 68 69 6c 65 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 63 68 | uter,.while.:ref:`source-nat`.ch |
20fa0 | 61 6e 67 65 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 70 61 63 6b | anges.the.source.address.of.pack |
20fc0 | 65 74 73 2e 20 44 4e 41 54 20 69 73 20 74 79 70 69 63 61 6c 6c 79 20 75 73 65 64 20 77 68 65 6e | ets..DNAT.is.typically.used.when |
20fe0 | 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 28 70 75 62 6c 69 63 29 20 68 6f 73 74 20 6e 65 65 64 73 | .an.external.(public).host.needs |
21000 | 20 74 6f 20 69 6e 69 74 69 61 74 65 20 61 20 73 65 73 73 69 6f 6e 20 77 69 74 68 20 61 6e 20 69 | .to.initiate.a.session.with.an.i |
21020 | 6e 74 65 72 6e 61 6c 20 28 70 72 69 76 61 74 65 29 20 68 6f 73 74 2e 20 41 20 63 75 73 74 6f 6d | nternal.(private).host..A.custom |
21040 | 65 72 20 6e 65 65 64 73 20 74 6f 20 61 63 63 65 73 73 20 61 20 70 72 69 76 61 74 65 20 73 65 72 | er.needs.to.access.a.private.ser |
21060 | 76 69 63 65 20 62 65 68 69 6e 64 20 74 68 65 20 72 6f 75 74 65 72 73 20 70 75 62 6c 69 63 20 49 | vice.behind.the.routers.public.I |
21080 | 50 2e 20 41 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 65 73 74 61 62 6c 69 73 68 65 64 20 77 | P..A.connection.is.established.w |
210a0 | 69 74 68 20 74 68 65 20 72 6f 75 74 65 72 73 20 70 75 62 6c 69 63 20 49 50 20 61 64 64 72 65 73 | ith.the.routers.public.IP.addres |
210c0 | 73 20 6f 6e 20 61 20 77 65 6c 6c 20 6b 6e 6f 77 6e 20 70 6f 72 74 20 61 6e 64 20 74 68 75 73 20 | s.on.a.well.known.port.and.thus. |
210e0 | 61 6c 6c 20 74 72 61 66 66 69 63 20 66 6f 72 20 74 68 69 73 20 70 6f 72 74 20 69 73 20 72 65 77 | all.traffic.for.this.port.is.rew |
21100 | 72 69 74 74 65 6e 20 74 6f 20 61 64 64 72 65 73 73 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 28 | ritten.to.address.the.internal.( |
21120 | 70 72 69 76 61 74 65 29 20 68 6f 73 74 2e 00 3a 61 62 62 72 3a 60 45 41 50 20 28 45 78 74 65 6e | private).host..:abbr:`EAP.(Exten |
21140 | 73 69 62 6c 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 | sible.Authentication.Protocol)`. |
21160 | 6f 76 65 72 20 4c 41 4e 20 28 45 41 50 6f 4c 29 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 70 6f | over.LAN.(EAPoL).is.a.network.po |
21180 | 72 74 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 64 20 | rt.authentication.protocol.used. |
211a0 | 69 6e 20 49 45 45 45 20 38 30 32 2e 31 58 20 28 50 6f 72 74 20 42 61 73 65 64 20 4e 65 74 77 6f | in.IEEE.802.1X.(Port.Based.Netwo |
211c0 | 72 6b 20 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c 29 20 64 65 76 65 6c 6f 70 65 64 20 74 6f 20 | rk.Access.Control).developed.to. |
211e0 | 67 69 76 65 20 61 20 67 65 6e 65 72 69 63 20 6e 65 74 77 6f 72 6b 20 73 69 67 6e 2d 6f 6e 20 74 | give.a.generic.network.sign-on.t |
21200 | 6f 20 61 63 63 65 73 73 20 6e 65 74 77 6f 72 6b 20 72 65 73 6f 75 72 63 65 73 2e 00 3a 61 62 62 | o.access.network.resources..:abb |
21220 | 72 3a 60 45 55 49 2d 36 34 20 28 36 34 2d 42 69 74 20 45 78 74 65 6e 64 65 64 20 55 6e 69 71 75 | r:`EUI-64.(64-Bit.Extended.Uniqu |
21240 | 65 20 49 64 65 6e 74 69 66 69 65 72 29 60 20 61 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 3a | e.Identifier)`.as.specified.in.: |
21260 | 72 66 63 3a 60 34 32 39 31 60 20 61 6c 6c 6f 77 73 20 61 20 68 6f 73 74 20 74 6f 20 61 73 73 69 | rfc:`4291`.allows.a.host.to.assi |
21280 | 67 6e 20 69 74 65 73 6c 66 20 61 20 75 6e 69 71 75 65 20 36 34 2d 42 69 74 20 49 50 76 36 20 61 | gn.iteslf.a.unique.64-Bit.IPv6.a |
212a0 | 64 64 72 65 73 73 2e 00 3a 61 62 62 72 3a 60 47 45 4e 45 56 45 20 28 47 65 6e 65 72 69 63 20 4e | ddress..:abbr:`GENEVE.(Generic.N |
212c0 | 65 74 77 6f 72 6b 20 56 69 72 74 75 61 6c 69 7a 61 74 69 6f 6e 20 45 6e 63 61 70 73 75 6c 61 74 | etwork.Virtualization.Encapsulat |
212e0 | 69 6f 6e 29 60 20 73 75 70 70 6f 72 74 73 20 61 6c 6c 20 6f 66 20 74 68 65 20 63 61 70 61 62 69 | ion)`.supports.all.of.the.capabi |
21300 | 6c 69 74 69 65 73 20 6f 66 20 3a 61 62 62 72 3a 60 56 58 4c 41 4e 20 28 56 69 72 74 75 61 6c 20 | lities.of.:abbr:`VXLAN.(Virtual. |
21320 | 45 78 74 65 6e 73 69 62 6c 65 20 4c 41 4e 29 60 2c 20 3a 61 62 62 72 3a 60 4e 56 47 52 45 20 28 | Extensible.LAN)`,.:abbr:`NVGRE.( |
21340 | 4e 65 74 77 6f 72 6b 20 56 69 72 74 75 61 6c 69 7a 61 74 69 6f 6e 20 75 73 69 6e 67 20 47 65 6e | Network.Virtualization.using.Gen |
21360 | 65 72 69 63 20 52 6f 75 74 69 6e 67 20 45 6e 63 61 70 73 75 6c 61 74 69 6f 6e 29 60 2c 20 61 6e | eric.Routing.Encapsulation)`,.an |
21380 | 64 20 3a 61 62 62 72 3a 60 53 54 54 20 28 53 74 61 74 65 6c 65 73 73 20 54 72 61 6e 73 70 6f 72 | d.:abbr:`STT.(Stateless.Transpor |
213a0 | 74 20 54 75 6e 6e 65 6c 69 6e 67 29 60 20 61 6e 64 20 77 61 73 20 64 65 73 69 67 6e 65 64 20 74 | t.Tunneling)`.and.was.designed.t |
213c0 | 6f 20 6f 76 65 72 63 6f 6d 65 20 74 68 65 69 72 20 70 65 72 63 65 69 76 65 64 20 6c 69 6d 69 74 | o.overcome.their.perceived.limit |
213e0 | 61 74 69 6f 6e 73 2e 20 4d 61 6e 79 20 62 65 6c 69 65 76 65 20 47 45 4e 45 56 45 20 63 6f 75 6c | ations..Many.believe.GENEVE.coul |
21400 | 64 20 65 76 65 6e 74 75 61 6c 6c 79 20 72 65 70 6c 61 63 65 20 74 68 65 73 65 20 65 61 72 6c 69 | d.eventually.replace.these.earli |
21420 | 65 72 20 66 6f 72 6d 61 74 73 20 65 6e 74 69 72 65 6c 79 2e 00 3a 61 62 62 72 3a 60 47 52 45 20 | er.formats.entirely..:abbr:`GRE. |
21440 | 28 47 65 6e 65 72 69 63 20 52 6f 75 74 69 6e 67 20 45 6e 63 61 70 73 75 6c 61 74 69 6f 6e 29 60 | (Generic.Routing.Encapsulation)` |
21460 | 2c 20 47 52 45 2f 49 50 73 65 63 20 28 6f 72 20 49 50 49 50 2f 49 50 73 65 63 2c 20 53 49 54 2f | ,.GRE/IPsec.(or.IPIP/IPsec,.SIT/ |
21480 | 49 50 73 65 63 2c 20 6f 72 20 61 6e 79 20 6f 74 68 65 72 20 73 74 61 74 65 6c 65 73 73 20 74 75 | IPsec,.or.any.other.stateless.tu |
214a0 | 6e 6e 65 6c 20 70 72 6f 74 6f 63 6f 6c 20 6f 76 65 72 20 49 50 73 65 63 29 20 69 73 20 74 68 65 | nnel.protocol.over.IPsec).is.the |
214c0 | 20 75 73 75 61 6c 20 77 61 79 20 74 6f 20 70 72 6f 74 65 63 74 20 74 68 65 20 74 72 61 66 66 69 | .usual.way.to.protect.the.traffi |
214e0 | 63 20 69 6e 73 69 64 65 20 61 20 74 75 6e 6e 65 6c 2e 00 3a 61 62 62 72 3a 60 47 52 4f 20 28 47 | c.inside.a.tunnel..:abbr:`GRO.(G |
21500 | 65 6e 65 72 69 63 20 72 65 63 65 69 76 65 20 6f 66 66 6c 6f 61 64 29 60 20 69 73 20 74 68 65 20 | eneric.receive.offload)`.is.the. |
21520 | 63 6f 6d 70 6c 65 6d 65 6e 74 20 74 6f 20 47 53 4f 2e 20 49 64 65 61 6c 6c 79 20 61 6e 79 20 66 | complement.to.GSO..Ideally.any.f |
21540 | 72 61 6d 65 20 61 73 73 65 6d 62 6c 65 64 20 62 79 20 47 52 4f 20 73 68 6f 75 6c 64 20 62 65 20 | rame.assembled.by.GRO.should.be. |
21560 | 73 65 67 6d 65 6e 74 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 6e 20 69 64 65 6e 74 69 63 61 6c | segmented.to.create.an.identical |
21580 | 20 73 65 71 75 65 6e 63 65 20 6f 66 20 66 72 61 6d 65 73 20 75 73 69 6e 67 20 47 53 4f 2c 20 61 | .sequence.of.frames.using.GSO,.a |
215a0 | 6e 64 20 61 6e 79 20 73 65 71 75 65 6e 63 65 20 6f 66 20 66 72 61 6d 65 73 20 73 65 67 6d 65 6e | nd.any.sequence.of.frames.segmen |
215c0 | 74 65 64 20 62 79 20 47 53 4f 20 73 68 6f 75 6c 64 20 62 65 20 61 62 6c 65 20 74 6f 20 62 65 20 | ted.by.GSO.should.be.able.to.be. |
215e0 | 72 65 61 73 73 65 6d 62 6c 65 64 20 62 61 63 6b 20 74 6f 20 74 68 65 20 6f 72 69 67 69 6e 61 6c | reassembled.back.to.the.original |
21600 | 20 62 79 20 47 52 4f 2e 20 54 68 65 20 6f 6e 6c 79 20 65 78 63 65 70 74 69 6f 6e 20 74 6f 20 74 | .by.GRO..The.only.exception.to.t |
21620 | 68 69 73 20 69 73 20 49 50 76 34 20 49 44 20 69 6e 20 74 68 65 20 63 61 73 65 20 74 68 61 74 20 | his.is.IPv4.ID.in.the.case.that. |
21640 | 74 68 65 20 44 46 20 62 69 74 20 69 73 20 73 65 74 20 66 6f 72 20 61 20 67 69 76 65 6e 20 49 50 | the.DF.bit.is.set.for.a.given.IP |
21660 | 20 68 65 61 64 65 72 2e 20 49 66 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 49 50 76 | .header..If.the.value.of.the.IPv |
21680 | 34 20 49 44 20 69 73 20 6e 6f 74 20 73 65 71 75 65 6e 74 69 61 6c 6c 79 20 69 6e 63 72 65 6d 65 | 4.ID.is.not.sequentially.increme |
216a0 | 6e 74 69 6e 67 20 69 74 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 20 73 6f 20 74 68 61 74 | nting.it.will.be.altered.so.that |
216c0 | 20 69 74 20 69 73 20 77 68 65 6e 20 61 20 66 72 61 6d 65 20 61 73 73 65 6d 62 6c 65 64 20 76 69 | .it.is.when.a.frame.assembled.vi |
216e0 | 61 20 47 52 4f 20 69 73 20 73 65 67 6d 65 6e 74 65 64 20 76 69 61 20 47 53 4f 2e 00 3a 61 62 62 | a.GRO.is.segmented.via.GSO..:abb |
21700 | 72 3a 60 47 53 4f 20 28 47 65 6e 65 72 69 63 20 53 65 67 6d 65 6e 74 61 74 69 6f 6e 20 4f 66 66 | r:`GSO.(Generic.Segmentation.Off |
21720 | 6c 6f 61 64 29 60 20 69 73 20 61 20 70 75 72 65 20 73 6f 66 74 77 61 72 65 20 6f 66 66 6c 6f 61 | load)`.is.a.pure.software.offloa |
21740 | 64 20 74 68 61 74 20 69 73 20 6d 65 61 6e 74 20 74 6f 20 64 65 61 6c 20 77 69 74 68 20 63 61 73 | d.that.is.meant.to.deal.with.cas |
21760 | 65 73 20 77 68 65 72 65 20 64 65 76 69 63 65 20 64 72 69 76 65 72 73 20 63 61 6e 6e 6f 74 20 70 | es.where.device.drivers.cannot.p |
21780 | 65 72 66 6f 72 6d 20 74 68 65 20 6f 66 66 6c 6f 61 64 73 20 64 65 73 63 72 69 62 65 64 20 61 62 | erform.the.offloads.described.ab |
217a0 | 6f 76 65 2e 20 57 68 61 74 20 6f 63 63 75 72 73 20 69 6e 20 47 53 4f 20 69 73 20 74 68 61 74 20 | ove..What.occurs.in.GSO.is.that. |
217c0 | 61 20 67 69 76 65 6e 20 73 6b 62 75 66 66 20 77 69 6c 6c 20 68 61 76 65 20 69 74 73 20 64 61 74 | a.given.skbuff.will.have.its.dat |
217e0 | 61 20 62 72 6f 6b 65 6e 20 6f 75 74 20 6f 76 65 72 20 6d 75 6c 74 69 70 6c 65 20 73 6b 62 75 66 | a.broken.out.over.multiple.skbuf |
21800 | 66 73 20 74 68 61 74 20 68 61 76 65 20 62 65 65 6e 20 72 65 73 69 7a 65 64 20 74 6f 20 6d 61 74 | fs.that.have.been.resized.to.mat |
21820 | 63 68 20 74 68 65 20 4d 53 53 20 70 72 6f 76 69 64 65 64 20 76 69 61 20 73 6b 62 5f 73 68 69 6e | ch.the.MSS.provided.via.skb_shin |
21840 | 66 6f 28 29 2d 3e 67 73 6f 5f 73 69 7a 65 2e 00 3a 61 62 62 72 3a 60 49 47 4d 50 20 28 49 6e 74 | fo()->gso_size..:abbr:`IGMP.(Int |
21860 | 65 72 6e 65 74 20 47 72 6f 75 70 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 | ernet.Group.Management.Protocol) |
21880 | 60 20 70 72 6f 78 79 20 73 65 6e 64 73 20 49 47 4d 50 20 68 6f 73 74 20 6d 65 73 73 61 67 65 73 | `.proxy.sends.IGMP.host.messages |
218a0 | 20 6f 6e 20 62 65 68 61 6c 66 20 6f 66 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 63 6c 69 65 6e 74 | .on.behalf.of.a.connected.client |
218c0 | 2e 20 54 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 75 73 74 20 64 65 66 69 6e 65 20 | ..The.configuration.must.define. |
218e0 | 6f 6e 65 2c 20 61 6e 64 20 6f 6e 6c 79 20 6f 6e 65 20 75 70 73 74 72 65 61 6d 20 69 6e 74 65 72 | one,.and.only.one.upstream.inter |
21900 | 66 61 63 65 2c 20 61 6e 64 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 64 6f 77 6e 73 74 72 65 61 6d | face,.and.one.or.more.downstream |
21920 | 20 69 6e 74 65 72 66 61 63 65 73 2e 00 3a 61 62 62 72 3a 60 49 50 53 65 63 20 28 49 50 20 53 65 | .interfaces..:abbr:`IPSec.(IP.Se |
21940 | 63 75 72 69 74 79 29 60 20 2d 20 74 6f 6f 20 6d 61 6e 79 20 52 46 43 73 20 74 6f 20 6c 69 73 74 | curity)`.-.too.many.RFCs.to.list |
21960 | 2c 20 62 75 74 20 73 74 61 72 74 20 77 69 74 68 20 3a 72 66 63 3a 60 34 33 30 31 60 00 3a 61 62 | ,.but.start.with.:rfc:`4301`.:ab |
21980 | 62 72 3a 60 49 53 2d 49 53 20 28 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 73 74 65 6d 20 74 | br:`IS-IS.(Intermediate.System.t |
219a0 | 6f 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 73 74 65 6d 29 60 20 69 73 20 61 20 6c 69 6e | o.Intermediate.System)`.is.a.lin |
219c0 | 6b 2d 73 74 61 74 65 20 69 6e 74 65 72 69 6f 72 20 67 61 74 65 77 61 79 20 70 72 6f 74 6f 63 6f | k-state.interior.gateway.protoco |
219e0 | 6c 20 28 49 47 50 29 20 77 68 69 63 68 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 49 53 | l.(IGP).which.is.described.in.IS |
21a00 | 4f 31 30 35 38 39 2c 20 3a 72 66 63 3a 60 31 31 39 35 60 2c 20 3a 72 66 63 3a 60 35 33 30 38 60 | O10589,.:rfc:`1195`,.:rfc:`5308` |
21a20 | 2e 20 49 53 2d 49 53 20 72 75 6e 73 20 74 68 65 20 44 69 6a 6b 73 74 72 61 20 73 68 6f 72 74 65 | ..IS-IS.runs.the.Dijkstra.shorte |
21a40 | 73 74 2d 70 61 74 68 20 66 69 72 73 74 20 28 53 50 46 29 20 61 6c 67 6f 72 69 74 68 6d 20 74 6f | st-path.first.(SPF).algorithm.to |
21a60 | 20 63 72 65 61 74 65 20 61 20 64 61 74 61 62 61 73 65 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 | .create.a.database.of.the.networ |
21a80 | 6b e2 80 99 73 20 74 6f 70 6f 6c 6f 67 79 2c 20 61 6e 64 20 66 72 6f 6d 20 74 68 61 74 20 64 61 | k...s.topology,.and.from.that.da |
21aa0 | 74 61 62 61 73 65 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 62 65 73 74 20 28 74 68 | tabase.to.determine.the.best.(th |
21ac0 | 61 74 20 69 73 2c 20 6c 6f 77 65 73 74 20 63 6f 73 74 29 20 70 61 74 68 20 74 6f 20 61 20 64 65 | at.is,.lowest.cost).path.to.a.de |
21ae0 | 73 74 69 6e 61 74 69 6f 6e 2e 20 54 68 65 20 69 6e 74 65 72 6d 65 64 69 61 74 65 20 73 79 73 74 | stination..The.intermediate.syst |
21b00 | 65 6d 73 20 28 74 68 65 20 6e 61 6d 65 20 66 6f 72 20 72 6f 75 74 65 72 73 29 20 65 78 63 68 61 | ems.(the.name.for.routers).excha |
21b20 | 6e 67 65 20 74 6f 70 6f 6c 6f 67 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 74 68 20 74 68 | nge.topology.information.with.th |
21b40 | 65 69 72 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 65 6e 63 74 65 64 20 6e 65 69 67 68 62 6f 72 73 | eir.directly.conencted.neighbors |
21b60 | 2e 20 49 53 2d 49 53 20 72 75 6e 73 20 64 69 72 65 63 74 6c 79 20 6f 6e 20 74 68 65 20 64 61 74 | ..IS-IS.runs.directly.on.the.dat |
21b80 | 61 20 6c 69 6e 6b 20 6c 61 79 65 72 20 28 4c 61 79 65 72 20 32 29 2e 20 49 53 2d 49 53 20 61 64 | a.link.layer.(Layer.2)..IS-IS.ad |
21ba0 | 64 72 65 73 73 65 73 20 61 72 65 20 63 61 6c 6c 65 64 20 3a 61 62 62 72 3a 60 4e 45 54 73 20 28 | dresses.are.called.:abbr:`NETs.( |
21bc0 | 4e 65 74 77 6f 72 6b 20 45 6e 74 69 74 79 20 54 69 74 6c 65 73 29 60 20 61 6e 64 20 63 61 6e 20 | Network.Entity.Titles)`.and.can. |
21be0 | 62 65 20 38 20 74 6f 20 32 30 20 62 79 74 65 73 20 6c 6f 6e 67 2c 20 62 75 74 20 61 72 65 20 67 | be.8.to.20.bytes.long,.but.are.g |
21c00 | 65 6e 65 72 61 6c 6c 79 20 31 30 20 62 79 74 65 73 20 6c 6f 6e 67 2e 20 54 68 65 20 74 72 65 65 | enerally.10.bytes.long..The.tree |
21c20 | 20 64 61 74 61 62 61 73 65 20 74 68 61 74 20 69 73 20 63 72 65 61 74 65 64 20 77 69 74 68 20 49 | .database.that.is.created.with.I |
21c40 | 53 2d 49 53 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 74 68 65 20 6f 6e 65 20 74 68 61 74 20 | S-IS.is.similar.to.the.one.that. |
21c60 | 69 73 20 63 72 65 61 74 65 64 20 77 69 74 68 20 4f 53 50 46 20 69 6e 20 74 68 61 74 20 74 68 65 | is.created.with.OSPF.in.that.the |
21c80 | 20 70 61 74 68 73 20 63 68 6f 73 65 6e 20 73 68 6f 75 6c 64 20 62 65 20 73 69 6d 69 6c 61 72 2e | .paths.chosen.should.be.similar. |
21ca0 | 20 43 6f 6d 70 61 72 69 73 6f 6e 73 20 74 6f 20 4f 53 50 46 20 61 72 65 20 69 6e 65 76 69 74 61 | .Comparisons.to.OSPF.are.inevita |
21cc0 | 62 6c 65 20 61 6e 64 20 6f 66 74 65 6e 20 61 72 65 20 72 65 61 73 6f 6e 61 62 6c 65 20 6f 6e 65 | ble.and.often.are.reasonable.one |
21ce0 | 73 20 74 6f 20 6d 61 6b 65 20 69 6e 20 72 65 67 61 72 64 73 20 74 6f 20 74 68 65 20 77 61 79 20 | s.to.make.in.regards.to.the.way. |
21d00 | 61 20 6e 65 74 77 6f 72 6b 20 77 69 6c 6c 20 72 65 73 70 6f 6e 64 20 77 69 74 68 20 65 69 74 68 | a.network.will.respond.with.eith |
21d20 | 65 72 20 49 47 50 2e 00 3a 61 62 62 72 3a 60 4c 33 56 50 4e 20 56 52 46 73 20 28 20 4c 61 79 65 | er.IGP..:abbr:`L3VPN.VRFs.(.Laye |
21d40 | 72 20 33 20 56 69 72 74 75 61 6c 20 50 72 69 76 61 74 65 20 4e 65 74 77 6f 72 6b 73 20 29 60 20 | r.3.Virtual.Private.Networks.)`. |
21d60 | 62 67 70 64 20 73 75 70 70 6f 72 74 73 20 66 6f 72 20 49 50 76 34 20 52 46 43 20 34 33 36 34 20 | bgpd.supports.for.IPv4.RFC.4364. |
21d80 | 61 6e 64 20 49 50 76 36 20 52 46 43 20 34 36 35 39 2e 20 4c 33 56 50 4e 20 72 6f 75 74 65 73 2c | and.IPv6.RFC.4659..L3VPN.routes, |
21da0 | 20 61 6e 64 20 74 68 65 69 72 20 61 73 73 6f 63 69 61 74 65 64 20 56 52 46 20 4d 50 4c 53 20 6c | .and.their.associated.VRF.MPLS.l |
21dc0 | 61 62 65 6c 73 2c 20 63 61 6e 20 62 65 20 64 69 73 74 72 69 62 75 74 65 64 20 74 6f 20 56 50 4e | abels,.can.be.distributed.to.VPN |
21de0 | 20 53 41 46 49 20 6e 65 69 67 68 62 6f 72 73 20 69 6e 20 74 68 65 20 64 65 66 61 75 6c 74 2c 20 | .SAFI.neighbors.in.the.default,. |
21e00 | 69 2e 65 2e 2c 20 6e 6f 6e 20 56 52 46 2c 20 42 47 50 20 69 6e 73 74 61 6e 63 65 2e 20 56 52 46 | i.e.,.non.VRF,.BGP.instance..VRF |
21e20 | 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 61 72 65 20 72 65 61 63 68 65 64 20 75 73 69 6e 67 20 63 | .MPLS.labels.are.reached.using.c |
21e40 | 6f 72 65 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 77 68 69 63 68 20 61 72 65 20 64 69 73 74 72 69 | ore.MPLS.labels.which.are.distri |
21e60 | 62 75 74 65 64 20 75 73 69 6e 67 20 4c 44 50 20 6f 72 20 42 47 50 20 6c 61 62 65 6c 65 64 20 75 | buted.using.LDP.or.BGP.labeled.u |
21e80 | 6e 69 63 61 73 74 2e 20 62 67 70 64 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 73 20 69 6e 74 65 72 | nicast..bgpd.also.supports.inter |
21ea0 | 2d 56 52 46 20 72 6f 75 74 65 20 6c 65 61 6b 69 6e 67 2e 00 3a 61 62 62 72 3a 60 4c 44 50 20 28 | -VRF.route.leaking..:abbr:`LDP.( |
21ec0 | 4c 61 62 65 6c 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 | Label.Distribution.Protocol)`.is |
21ee0 | 20 61 20 54 43 50 20 62 61 73 65 64 20 4d 50 4c 53 20 73 69 67 6e 61 6c 69 6e 67 20 70 72 6f 74 | .a.TCP.based.MPLS.signaling.prot |
21f00 | 6f 63 6f 6c 20 74 68 61 74 20 64 69 73 74 72 69 62 75 74 65 73 20 6c 61 62 65 6c 73 20 63 72 65 | ocol.that.distributes.labels.cre |
21f20 | 61 74 69 6e 67 20 4d 50 4c 53 20 6c 61 62 65 6c 20 73 77 69 74 63 68 65 64 20 70 61 74 68 73 20 | ating.MPLS.label.switched.paths. |
21f40 | 69 6e 20 61 20 64 79 6e 61 6d 69 63 20 6d 61 6e 6e 65 72 2e 20 4c 44 50 20 69 73 20 6e 6f 74 20 | in.a.dynamic.manner..LDP.is.not. |
21f60 | 61 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2c 20 61 73 20 69 74 20 72 65 6c 69 65 73 | a.routing.protocol,.as.it.relies |
21f80 | 20 6f 6e 20 6f 74 68 65 72 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 66 6f 72 20 | .on.other.routing.protocols.for. |
21fa0 | 66 6f 72 77 61 72 64 69 6e 67 20 64 65 63 69 73 69 6f 6e 73 2e 20 4c 44 50 20 63 61 6e 6e 6f 74 | forwarding.decisions..LDP.cannot |
21fc0 | 20 62 6f 6f 74 73 74 72 61 70 20 69 74 73 65 6c 66 2c 20 61 6e 64 20 74 68 65 72 65 66 6f 72 65 | .bootstrap.itself,.and.therefore |
21fe0 | 20 72 65 6c 69 65 73 20 6f 6e 20 73 61 69 64 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c | .relies.on.said.routing.protocol |
22000 | 73 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 77 69 74 68 20 6f 74 68 65 72 20 72 | s.for.communication.with.other.r |
22020 | 6f 75 74 65 72 73 20 74 68 61 74 20 75 73 65 20 4c 44 50 2e 00 3a 61 62 62 72 3a 60 4c 4c 44 50 | outers.that.use.LDP..:abbr:`LLDP |
22040 | 20 28 4c 69 6e 6b 20 4c 61 79 65 72 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 29 | .(Link.Layer.Discovery.Protocol) |
22060 | 60 20 69 73 20 61 20 76 65 6e 64 6f 72 2d 6e 65 75 74 72 61 6c 20 6c 69 6e 6b 20 6c 61 79 65 72 | `.is.a.vendor-neutral.link.layer |
22080 | 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 | .protocol.in.the.Internet.Protoc |
220a0 | 6f 6c 20 53 75 69 74 65 20 75 73 65 64 20 62 79 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 73 | ol.Suite.used.by.network.devices |
220c0 | 20 66 6f 72 20 61 64 76 65 72 74 69 73 69 6e 67 20 74 68 65 69 72 20 69 64 65 6e 74 69 74 79 2c | .for.advertising.their.identity, |
220e0 | 20 63 61 70 61 62 69 6c 69 74 69 65 73 2c 20 61 6e 64 20 6e 65 69 67 68 62 6f 72 73 20 6f 6e 20 | .capabilities,.and.neighbors.on. |
22100 | 61 6e 20 49 45 45 45 20 38 30 32 20 6c 6f 63 61 6c 20 61 72 65 61 20 6e 65 74 77 6f 72 6b 2c 20 | an.IEEE.802.local.area.network,. |
22120 | 70 72 69 6e 63 69 70 61 6c 6c 79 20 77 69 72 65 64 20 45 74 68 65 72 6e 65 74 2e 20 54 68 65 20 | principally.wired.Ethernet..The. |
22140 | 70 72 6f 74 6f 63 6f 6c 20 69 73 20 66 6f 72 6d 61 6c 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f | protocol.is.formally.referred.to |
22160 | 20 62 79 20 74 68 65 20 49 45 45 45 20 61 73 20 53 74 61 74 69 6f 6e 20 61 6e 64 20 4d 65 64 69 | .by.the.IEEE.as.Station.and.Medi |
22180 | 61 20 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c 20 43 6f 6e 6e 65 63 74 69 76 69 74 79 20 44 69 | a.Access.Control.Connectivity.Di |
221a0 | 73 63 6f 76 65 72 79 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 49 45 45 45 20 38 30 32 2e 31 41 | scovery.specified.in.IEEE.802.1A |
221c0 | 42 20 61 6e 64 20 49 45 45 45 20 38 30 32 2e 33 2d 32 30 31 32 20 73 65 63 74 69 6f 6e 20 36 20 | B.and.IEEE.802.3-2012.section.6. |
221e0 | 63 6c 61 75 73 65 20 37 39 2e 00 3a 61 62 62 72 3a 60 4d 4b 41 20 28 4d 41 43 73 65 63 20 4b 65 | clause.79..:abbr:`MKA.(MACsec.Ke |
22200 | 79 20 41 67 72 65 65 6d 65 6e 74 20 70 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 75 73 65 64 20 74 | y.Agreement.protocol)`.is.used.t |
22220 | 6f 20 73 79 6e 63 68 72 6f 6e 69 7a 65 20 6b 65 79 73 20 62 65 74 77 65 65 6e 20 69 6e 64 69 76 | o.synchronize.keys.between.indiv |
22240 | 69 64 75 61 6c 20 70 65 65 72 73 2e 00 3a 61 62 62 72 3a 60 4d 50 4c 53 20 28 4d 75 6c 74 69 2d | idual.peers..:abbr:`MPLS.(Multi- |
22260 | 50 72 6f 74 6f 63 6f 6c 20 4c 61 62 65 6c 20 53 77 69 74 63 68 69 6e 67 29 60 20 69 73 20 61 20 | Protocol.Label.Switching)`.is.a. |
22280 | 70 61 63 6b 65 74 20 66 6f 72 77 61 72 64 69 6e 67 20 70 61 72 61 64 69 67 6d 20 77 68 69 63 68 | packet.forwarding.paradigm.which |
222a0 | 20 64 69 66 66 65 72 73 20 66 72 6f 6d 20 72 65 67 75 6c 61 72 20 49 50 20 66 6f 72 77 61 72 64 | .differs.from.regular.IP.forward |
222c0 | 69 6e 67 2e 20 49 6e 73 74 65 61 64 20 6f 66 20 49 50 20 61 64 64 72 65 73 73 65 73 20 62 65 69 | ing..Instead.of.IP.addresses.bei |
222e0 | 6e 67 20 75 73 65 64 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 64 65 63 69 73 69 6f 6e 20 6f 6e 20 | ng.used.to.make.the.decision.on. |
22300 | 66 69 6e 64 69 6e 67 20 74 68 65 20 65 78 69 74 20 69 6e 74 65 72 66 61 63 65 2c 20 61 20 72 6f | finding.the.exit.interface,.a.ro |
22320 | 75 74 65 72 20 77 69 6c 6c 20 69 6e 73 74 65 61 64 20 75 73 65 20 61 6e 20 65 78 61 63 74 20 6d | uter.will.instead.use.an.exact.m |
22340 | 61 74 63 68 20 6f 6e 20 61 20 33 32 20 62 69 74 2f 34 20 62 79 74 65 20 68 65 61 64 65 72 20 63 | atch.on.a.32.bit/4.byte.header.c |
22360 | 61 6c 6c 65 64 20 74 68 65 20 4d 50 4c 53 20 6c 61 62 65 6c 2e 20 54 68 69 73 20 6c 61 62 65 6c | alled.the.MPLS.label..This.label |
22380 | 20 69 73 20 69 6e 73 65 72 74 65 64 20 62 65 74 77 65 65 6e 20 74 68 65 20 65 74 68 65 72 6e 65 | .is.inserted.between.the.etherne |
223a0 | 74 20 28 6c 61 79 65 72 20 32 29 20 68 65 61 64 65 72 20 61 6e 64 20 74 68 65 20 49 50 20 28 6c | t.(layer.2).header.and.the.IP.(l |
223c0 | 61 79 65 72 20 33 29 20 68 65 61 64 65 72 2e 20 4f 6e 65 20 63 61 6e 20 73 74 61 74 69 63 61 6c | ayer.3).header..One.can.statical |
223e0 | 6c 79 20 6f 72 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 61 73 73 69 67 6e 20 6c 61 62 65 6c 20 61 | ly.or.dynamically.assign.label.a |
22400 | 6c 6c 6f 63 61 74 69 6f 6e 73 2c 20 62 75 74 20 77 65 20 77 69 6c 6c 20 66 6f 63 75 73 20 6f 6e | llocations,.but.we.will.focus.on |
22420 | 20 64 79 6e 61 6d 69 63 20 61 6c 6c 6f 63 61 74 69 6f 6e 20 6f 66 20 6c 61 62 65 6c 73 20 75 73 | .dynamic.allocation.of.labels.us |
22440 | 69 6e 67 20 73 6f 6d 65 20 73 6f 72 74 20 6f 66 20 6c 61 62 65 6c 20 64 69 73 74 72 69 62 75 74 | ing.some.sort.of.label.distribut |
22460 | 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c 20 28 73 75 63 68 20 61 73 20 74 68 65 20 61 70 74 6c 79 20 | ion.protocol.(such.as.the.aptly. |
22480 | 6e 61 6d 65 64 20 4c 61 62 65 6c 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f | named.Label.Distribution.Protoco |
224a0 | 6c 20 2f 20 4c 44 50 2c 20 52 65 73 6f 75 72 63 65 20 52 65 73 65 72 76 61 74 69 6f 6e 20 50 72 | l./.LDP,.Resource.Reservation.Pr |
224c0 | 6f 74 6f 63 6f 6c 20 2f 20 52 53 56 50 2c 20 6f 72 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e | otocol./.RSVP,.or.Segment.Routin |
224e0 | 67 20 74 68 72 6f 75 67 68 20 4f 53 50 46 2f 49 53 49 53 29 2e 20 54 68 65 73 65 20 70 72 6f 74 | g.through.OSPF/ISIS)..These.prot |
22500 | 6f 63 6f 6c 73 20 61 6c 6c 6f 77 20 66 6f 72 20 74 68 65 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 | ocols.allow.for.the.creation.of. |
22520 | 61 20 75 6e 69 64 69 72 65 63 74 69 6f 6e 61 6c 2f 75 6e 69 63 61 73 74 20 70 61 74 68 20 63 61 | a.unidirectional/unicast.path.ca |
22540 | 6c 6c 65 64 20 61 20 6c 61 62 65 6c 65 64 20 73 77 69 74 63 68 65 64 20 70 61 74 68 20 28 69 6e | lled.a.labeled.switched.path.(in |
22560 | 69 74 69 61 6c 69 7a 65 64 20 61 73 20 4c 53 50 29 20 74 68 72 6f 75 67 68 6f 75 74 20 74 68 65 | itialized.as.LSP).throughout.the |
22580 | 20 6e 65 74 77 6f 72 6b 20 74 68 61 74 20 6f 70 65 72 61 74 65 73 20 76 65 72 79 20 6d 75 63 68 | .network.that.operates.very.much |
225a0 | 20 6c 69 6b 65 20 61 20 74 75 6e 6e 65 6c 20 74 68 72 6f 75 67 68 20 74 68 65 20 6e 65 74 77 6f | .like.a.tunnel.through.the.netwo |
225c0 | 72 6b 2e 20 41 6e 20 65 61 73 79 20 77 61 79 20 6f 66 20 74 68 69 6e 6b 69 6e 67 20 61 62 6f 75 | rk..An.easy.way.of.thinking.abou |
225e0 | 74 20 68 6f 77 20 61 6e 20 4d 50 4c 53 20 4c 53 50 20 61 63 74 75 61 6c 6c 79 20 66 6f 72 77 61 | t.how.an.MPLS.LSP.actually.forwa |
22600 | 72 64 73 20 74 72 61 66 66 69 63 20 74 68 72 6f 75 67 68 6f 75 74 20 61 20 6e 65 74 77 6f 72 6b | rds.traffic.throughout.a.network |
22620 | 20 69 73 20 74 6f 20 74 68 69 6e 6b 20 6f 66 20 61 20 47 52 45 20 74 75 6e 6e 65 6c 2e 20 54 68 | .is.to.think.of.a.GRE.tunnel..Th |
22640 | 65 79 20 61 72 65 20 6e 6f 74 20 74 68 65 20 73 61 6d 65 20 69 6e 20 68 6f 77 20 74 68 65 79 20 | ey.are.not.the.same.in.how.they. |
22660 | 6f 70 65 72 61 74 65 2c 20 62 75 74 20 74 68 65 79 20 61 72 65 20 74 68 65 20 73 61 6d 65 20 69 | operate,.but.they.are.the.same.i |
22680 | 6e 20 68 6f 77 20 74 68 65 79 20 68 61 6e 64 6c 65 20 74 68 65 20 74 75 6e 6e 65 6c 65 64 20 70 | n.how.they.handle.the.tunneled.p |
226a0 | 61 63 6b 65 74 2e 20 49 74 20 77 6f 75 6c 64 20 62 65 20 67 6f 6f 64 20 74 6f 20 74 68 69 6e 6b | acket..It.would.be.good.to.think |
226c0 | 20 6f 66 20 4d 50 4c 53 20 61 73 20 61 20 74 75 6e 6e 65 6c 69 6e 67 20 74 65 63 68 6e 6f 6c 6f | .of.MPLS.as.a.tunneling.technolo |
226e0 | 67 79 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 74 72 61 6e 73 70 6f 72 74 | gy.that.can.be.used.to.transport |
22700 | 20 6d 61 6e 79 20 64 69 66 66 65 72 65 6e 74 20 74 79 70 65 73 20 6f 66 20 70 61 63 6b 65 74 73 | .many.different.types.of.packets |
22720 | 2c 20 74 6f 20 61 69 64 20 69 6e 20 74 72 61 66 66 69 63 20 65 6e 67 69 6e 65 65 72 69 6e 67 20 | ,.to.aid.in.traffic.engineering. |
22740 | 62 79 20 61 6c 6c 6f 77 69 6e 67 20 6f 6e 65 20 74 6f 20 73 70 65 63 69 66 79 20 70 61 74 68 73 | by.allowing.one.to.specify.paths |
22760 | 20 74 68 72 6f 75 67 68 6f 75 74 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 28 75 73 69 6e 67 20 52 | .throughout.the.network.(using.R |
22780 | 53 56 50 20 6f 72 20 53 52 29 2c 20 61 6e 64 20 74 6f 20 67 65 6e 65 72 61 6c 6c 79 20 61 6c 6c | SVP.or.SR),.and.to.generally.all |
227a0 | 6f 77 20 66 6f 72 20 65 61 73 69 65 72 20 69 6e 74 72 61 2f 69 6e 74 65 72 20 6e 65 74 77 6f 72 | ow.for.easier.intra/inter.networ |
227c0 | 6b 20 74 72 61 6e 73 70 6f 72 74 20 6f 66 20 64 61 74 61 20 70 61 63 6b 65 74 73 2e 00 3a 61 62 | k.transport.of.data.packets..:ab |
227e0 | 62 72 3a 60 4e 41 54 20 28 4e 65 74 77 6f 72 6b 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 | br:`NAT.(Network.Address.Transla |
22800 | 74 69 6f 6e 29 60 20 69 73 20 61 20 63 6f 6d 6d 6f 6e 20 6d 65 74 68 6f 64 20 6f 66 20 72 65 6d | tion)`.is.a.common.method.of.rem |
22820 | 61 70 70 69 6e 67 20 6f 6e 65 20 49 50 20 61 64 64 72 65 73 73 20 73 70 61 63 65 20 69 6e 74 6f | apping.one.IP.address.space.into |
22840 | 20 61 6e 6f 74 68 65 72 20 62 79 20 6d 6f 64 69 66 79 69 6e 67 20 6e 65 74 77 6f 72 6b 20 61 64 | .another.by.modifying.network.ad |
22860 | 64 72 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 74 68 65 20 49 50 20 68 65 61 64 | dress.information.in.the.IP.head |
22880 | 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 77 68 69 6c 65 20 74 68 65 79 20 61 72 65 20 69 6e 20 | er.of.packets.while.they.are.in. |
228a0 | 74 72 61 6e 73 69 74 20 61 63 72 6f 73 73 20 61 20 74 72 61 66 66 69 63 20 72 6f 75 74 69 6e 67 | transit.across.a.traffic.routing |
228c0 | 20 64 65 76 69 63 65 2e 20 54 68 65 20 74 65 63 68 6e 69 71 75 65 20 77 61 73 20 6f 72 69 67 69 | .device..The.technique.was.origi |
228e0 | 6e 61 6c 6c 79 20 75 73 65 64 20 61 73 20 61 20 73 68 6f 72 74 63 75 74 20 74 6f 20 61 76 6f 69 | nally.used.as.a.shortcut.to.avoi |
22900 | 64 20 74 68 65 20 6e 65 65 64 20 74 6f 20 72 65 61 64 64 72 65 73 73 20 65 76 65 72 79 20 68 6f | d.the.need.to.readdress.every.ho |
22920 | 73 74 20 77 68 65 6e 20 61 20 6e 65 74 77 6f 72 6b 20 77 61 73 20 6d 6f 76 65 64 2e 20 49 74 20 | st.when.a.network.was.moved..It. |
22940 | 68 61 73 20 62 65 63 6f 6d 65 20 61 20 70 6f 70 75 6c 61 72 20 61 6e 64 20 65 73 73 65 6e 74 69 | has.become.a.popular.and.essenti |
22960 | 61 6c 20 74 6f 6f 6c 20 69 6e 20 63 6f 6e 73 65 72 76 69 6e 67 20 67 6c 6f 62 61 6c 20 61 64 64 | al.tool.in.conserving.global.add |
22980 | 72 65 73 73 20 73 70 61 63 65 20 69 6e 20 74 68 65 20 66 61 63 65 20 6f 66 20 49 50 76 34 20 61 | ress.space.in.the.face.of.IPv4.a |
229a0 | 64 64 72 65 73 73 20 65 78 68 61 75 73 74 69 6f 6e 2e 20 4f 6e 65 20 49 6e 74 65 72 6e 65 74 2d | ddress.exhaustion..One.Internet- |
229c0 | 72 6f 75 74 61 62 6c 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 4e 41 54 20 67 61 74 | routable.IP.address.of.a.NAT.gat |
229e0 | 65 77 61 79 20 63 61 6e 20 62 65 20 75 73 65 64 20 66 6f 72 20 61 6e 20 65 6e 74 69 72 65 20 70 | eway.can.be.used.for.an.entire.p |
22a00 | 72 69 76 61 74 65 20 6e 65 74 77 6f 72 6b 2e 00 3a 61 62 62 72 3a 60 4e 41 54 20 28 4e 65 74 77 | rivate.network..:abbr:`NAT.(Netw |
22a20 | 6f 72 6b 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 63 6f 6e | ork.Address.Translation)`.is.con |
22a40 | 66 69 67 75 72 65 64 20 65 6e 74 69 72 65 6c 79 20 6f 6e 20 61 20 73 65 72 69 65 73 20 6f 66 20 | figured.entirely.on.a.series.of. |
22a60 | 73 6f 20 63 61 6c 6c 65 64 20 60 72 75 6c 65 73 60 2e 20 52 75 6c 65 73 20 61 72 65 20 6e 75 6d | so.called.`rules`..Rules.are.num |
22a80 | 62 65 72 65 64 20 61 6e 64 20 65 76 61 6c 75 61 74 65 64 20 62 79 20 74 68 65 20 75 6e 64 65 72 | bered.and.evaluated.by.the.under |
22aa0 | 6c 79 69 6e 67 20 4f 53 20 69 6e 20 6e 75 6d 65 72 69 63 61 6c 20 6f 72 64 65 72 21 20 54 68 65 | lying.OS.in.numerical.order!.The |
22ac0 | 20 72 75 6c 65 20 6e 75 6d 62 65 72 73 20 63 61 6e 20 62 65 20 63 68 61 6e 67 65 73 20 62 79 20 | .rule.numbers.can.be.changes.by. |
22ae0 | 75 74 69 6c 69 7a 69 6e 67 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 72 65 6e 61 6d 65 60 20 61 | utilizing.the.:cfgcmd:`rename`.a |
22b00 | 6e 64 20 3a 63 66 67 63 6d 64 3a 60 63 6f 70 79 60 20 63 6f 6d 6d 61 6e 64 73 2e 00 3a 61 62 62 | nd.:cfgcmd:`copy`.commands..:abb |
22b20 | 72 3a 60 4e 41 54 36 34 20 28 49 50 76 36 2d 74 6f 2d 49 50 76 34 20 50 72 65 66 69 78 20 54 72 | r:`NAT64.(IPv6-to-IPv4.Prefix.Tr |
22b40 | 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 20 63 72 69 74 69 63 61 6c 20 63 6f 6d 70 6f 6e | anslation)`.is.a.critical.compon |
22b60 | 65 6e 74 20 69 6e 20 6d 6f 64 65 72 6e 20 6e 65 74 77 6f 72 6b 69 6e 67 2c 20 66 61 63 69 6c 69 | ent.in.modern.networking,.facili |
22b80 | 74 61 74 69 6e 67 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 49 50 76 | tating.communication.between.IPv |
22ba0 | 36 20 61 6e 64 20 49 50 76 34 20 6e 65 74 77 6f 72 6b 73 2e 20 54 68 69 73 20 64 6f 63 75 6d 65 | 6.and.IPv4.networks..This.docume |
22bc0 | 6e 74 61 74 69 6f 6e 20 6f 75 74 6c 69 6e 65 73 20 74 68 65 20 73 65 74 75 70 2c 20 63 6f 6e 66 | ntation.outlines.the.setup,.conf |
22be0 | 69 67 75 72 61 74 69 6f 6e 2c 20 61 6e 64 20 75 73 61 67 65 20 6f 66 20 74 68 65 20 4e 41 54 36 | iguration,.and.usage.of.the.NAT6 |
22c00 | 34 20 66 65 61 74 75 72 65 20 69 6e 20 79 6f 75 72 20 70 72 6f 6a 65 63 74 2e 20 57 68 65 74 68 | 4.feature.in.your.project..Wheth |
22c20 | 65 72 20 79 6f 75 20 61 72 65 20 74 72 61 6e 73 69 74 69 6f 6e 69 6e 67 20 74 6f 20 49 50 76 36 | er.you.are.transitioning.to.IPv6 |
22c40 | 20 6f 72 20 6e 65 65 64 20 74 6f 20 73 65 61 6d 6c 65 73 73 6c 79 20 63 6f 6e 6e 65 63 74 20 49 | .or.need.to.seamlessly.connect.I |
22c60 | 50 76 34 20 61 6e 64 20 49 50 76 36 20 64 65 76 69 63 65 73 2e 20 4e 41 54 36 34 20 69 73 20 61 | Pv4.and.IPv6.devices..NAT64.is.a |
22c80 | 20 73 74 61 74 65 66 75 6c 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 20 | .stateful.translation.mechanism. |
22ca0 | 74 68 61 74 20 74 72 61 6e 73 6c 61 74 65 73 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 74 | that.translates.IPv6.addresses.t |
22cc0 | 6f 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 49 50 76 34 20 61 64 64 72 65 73 | o.IPv4.addresses.and.IPv4.addres |
22ce0 | 73 65 73 20 74 6f 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 2e 20 4e 41 54 36 34 20 69 73 20 | ses.to.IPv6.addresses..NAT64.is. |
22d00 | 75 73 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 49 50 76 36 2d 6f 6e 6c 79 20 63 6c 69 65 6e 74 73 | used.to.enable.IPv6-only.clients |
22d20 | 20 74 6f 20 63 6f 6e 74 61 63 74 20 49 50 76 34 20 73 65 72 76 65 72 73 20 75 73 69 6e 67 20 75 | .to.contact.IPv4.servers.using.u |
22d40 | 6e 69 63 61 73 74 20 55 44 50 2c 20 54 43 50 2c 20 6f 72 20 49 43 4d 50 2e 00 3a 61 62 62 72 3a | nicast.UDP,.TCP,.or.ICMP..:abbr: |
22d60 | 60 4e 45 54 20 28 4e 65 74 77 6f 72 6b 20 45 6e 74 69 74 79 20 54 69 74 6c 65 29 60 20 73 65 6c | `NET.(Network.Entity.Title)`.sel |
22d80 | 65 63 74 6f 72 3a 20 60 60 30 30 60 60 20 4d 75 73 74 20 61 6c 77 61 79 73 20 62 65 20 30 30 2e | ector:.``00``.Must.always.be.00. |
22da0 | 20 54 68 69 73 20 73 65 74 74 69 6e 67 20 69 6e 64 69 63 61 74 65 73 20 22 74 68 69 73 20 73 79 | .This.setting.indicates."this.sy |
22dc0 | 73 74 65 6d 22 20 6f 72 20 22 6c 6f 63 61 6c 20 73 79 73 74 65 6d 2e 22 00 3a 61 62 62 72 3a 60 | stem".or."local.system.".:abbr:` |
22de0 | 4e 48 52 50 20 28 4e 65 78 74 20 48 6f 70 20 52 65 73 6f 6c 75 74 69 6f 6e 20 50 72 6f 74 6f 63 | NHRP.(Next.Hop.Resolution.Protoc |
22e00 | 6f 6c 29 60 20 3a 72 66 63 3a 60 32 33 33 32 60 00 3a 61 62 62 72 3a 60 4e 50 54 76 36 20 28 49 | ol)`.:rfc:`2332`.:abbr:`NPTv6.(I |
22e20 | 50 76 36 2d 74 6f 2d 49 50 76 36 20 4e 65 74 77 6f 72 6b 20 50 72 65 66 69 78 20 54 72 61 6e 73 | Pv6-to-IPv6.Network.Prefix.Trans |
22e40 | 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 6e 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 69 | lation)`.is.an.address.translati |
22e60 | 6f 6e 20 74 65 63 68 6e 6f 6c 6f 67 79 20 62 61 73 65 64 20 6f 6e 20 49 50 76 36 20 6e 65 74 77 | on.technology.based.on.IPv6.netw |
22e80 | 6f 72 6b 73 2c 20 75 73 65 64 20 74 6f 20 63 6f 6e 76 65 72 74 20 61 6e 20 49 50 76 36 20 61 64 | orks,.used.to.convert.an.IPv6.ad |
22ea0 | 64 72 65 73 73 20 70 72 65 66 69 78 20 69 6e 20 61 6e 20 49 50 76 36 20 6d 65 73 73 61 67 65 20 | dress.prefix.in.an.IPv6.message. |
22ec0 | 69 6e 74 6f 20 61 6e 6f 74 68 65 72 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 | into.another.IPv6.address.prefix |
22ee0 | 2e 20 57 65 20 63 61 6c 6c 20 74 68 69 73 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 69 | ..We.call.this.address.translati |
22f00 | 6f 6e 20 6d 65 74 68 6f 64 20 4e 41 54 36 36 2e 20 44 65 76 69 63 65 73 20 74 68 61 74 20 73 75 | on.method.NAT66..Devices.that.su |
22f20 | 70 70 6f 72 74 20 74 68 65 20 4e 41 54 36 36 20 66 75 6e 63 74 69 6f 6e 20 61 72 65 20 63 61 6c | pport.the.NAT66.function.are.cal |
22f40 | 6c 65 64 20 4e 41 54 36 36 20 64 65 76 69 63 65 73 2c 20 77 68 69 63 68 20 63 61 6e 20 70 72 6f | led.NAT66.devices,.which.can.pro |
22f60 | 76 69 64 65 20 4e 41 54 36 36 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f | vide.NAT66.source.and.destinatio |
22f80 | 6e 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 66 75 6e 63 74 69 6f 6e 73 2e | n.address.translation.functions. |
22fa0 | 00 3a 61 62 62 72 3a 60 4e 54 50 20 28 4e 65 74 77 6f 72 6b 20 54 69 6d 65 20 50 72 6f 74 6f 63 | .:abbr:`NTP.(Network.Time.Protoc |
22fc0 | 6f 6c 60 29 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 66 6f | ol`).is.a.networking.protocol.fo |
22fe0 | 72 20 63 6c 6f 63 6b 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 | r.clock.synchronization.between. |
23000 | 63 6f 6d 70 75 74 65 72 20 73 79 73 74 65 6d 73 20 6f 76 65 72 20 70 61 63 6b 65 74 2d 73 77 69 | computer.systems.over.packet-swi |
23020 | 74 63 68 65 64 2c 20 76 61 72 69 61 62 6c 65 2d 6c 61 74 65 6e 63 79 20 64 61 74 61 20 6e 65 74 | tched,.variable-latency.data.net |
23040 | 77 6f 72 6b 73 2e 20 49 6e 20 6f 70 65 72 61 74 69 6f 6e 20 73 69 6e 63 65 20 62 65 66 6f 72 65 | works..In.operation.since.before |
23060 | 20 31 39 38 35 2c 20 4e 54 50 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 6f 6c 64 65 73 74 20 | .1985,.NTP.is.one.of.the.oldest. |
23080 | 49 6e 74 65 72 6e 65 74 20 70 72 6f 74 6f 63 6f 6c 73 20 69 6e 20 63 75 72 72 65 6e 74 20 75 73 | Internet.protocols.in.current.us |
230a0 | 65 2e 00 3a 61 62 62 72 3a 60 4f 53 50 46 20 28 4f 70 65 6e 20 53 68 6f 72 74 65 73 74 20 50 61 | e..:abbr:`OSPF.(Open.Shortest.Pa |
230c0 | 74 68 20 46 69 72 73 74 29 60 20 69 73 20 61 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c | th.First)`.is.a.routing.protocol |
230e0 | 20 66 6f 72 20 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 6f 6c 20 28 49 50 29 20 6e 65 74 77 | .for.Internet.Protocol.(IP).netw |
23100 | 6f 72 6b 73 2e 20 49 74 20 75 73 65 73 20 61 20 6c 69 6e 6b 20 73 74 61 74 65 20 72 6f 75 74 69 | orks..It.uses.a.link.state.routi |
23120 | 6e 67 20 28 4c 53 52 29 20 61 6c 67 6f 72 69 74 68 6d 20 61 6e 64 20 66 61 6c 6c 73 20 69 6e 74 | ng.(LSR).algorithm.and.falls.int |
23140 | 6f 20 74 68 65 20 67 72 6f 75 70 20 6f 66 20 69 6e 74 65 72 69 6f 72 20 67 61 74 65 77 61 79 20 | o.the.group.of.interior.gateway. |
23160 | 70 72 6f 74 6f 63 6f 6c 73 20 28 49 47 50 73 29 2c 20 6f 70 65 72 61 74 69 6e 67 20 77 69 74 68 | protocols.(IGPs),.operating.with |
23180 | 69 6e 20 61 20 73 69 6e 67 6c 65 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 28 41 | in.a.single.autonomous.system.(A |
231a0 | 53 29 2e 20 49 74 20 69 73 20 64 65 66 69 6e 65 64 20 61 73 20 4f 53 50 46 20 56 65 72 73 69 6f | S)..It.is.defined.as.OSPF.Versio |
231c0 | 6e 20 32 20 69 6e 20 3a 72 66 63 3a 60 32 33 32 38 60 20 28 31 39 39 38 29 20 66 6f 72 20 49 50 | n.2.in.:rfc:`2328`.(1998).for.IP |
231e0 | 76 34 2e 20 55 70 64 61 74 65 73 20 66 6f 72 20 49 50 76 36 20 61 72 65 20 73 70 65 63 69 66 69 | v4..Updates.for.IPv6.are.specifi |
23200 | 65 64 20 61 73 20 4f 53 50 46 20 56 65 72 73 69 6f 6e 20 33 20 69 6e 20 3a 72 66 63 3a 60 35 33 | ed.as.OSPF.Version.3.in.:rfc:`53 |
23220 | 34 30 60 20 28 32 30 30 38 29 2e 20 4f 53 50 46 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 3a 61 | 40`.(2008)..OSPF.supports.the.:a |
23240 | 62 62 72 3a 60 43 49 44 52 20 28 43 6c 61 73 73 6c 65 73 73 20 49 6e 74 65 72 2d 44 6f 6d 61 69 | bbr:`CIDR.(Classless.Inter-Domai |
23260 | 6e 20 52 6f 75 74 69 6e 67 29 60 20 61 64 64 72 65 73 73 69 6e 67 20 6d 6f 64 65 6c 2e 00 3a 61 | n.Routing)`.addressing.model..:a |
23280 | 62 62 72 3a 60 50 49 4d 20 28 50 72 6f 74 6f 63 6f 6c 20 49 6e 64 65 70 65 6e 64 65 6e 74 20 4d | bbr:`PIM.(Protocol.Independent.M |
232a0 | 75 6c 74 69 63 61 73 74 29 60 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e | ulticast)`.must.be.configured.in |
232c0 | 20 65 76 65 72 79 20 69 6e 74 65 72 66 61 63 65 20 6f 66 20 65 76 65 72 79 20 70 61 72 74 69 63 | .every.interface.of.every.partic |
232e0 | 69 70 61 74 69 6e 67 20 72 6f 75 74 65 72 2e 20 45 76 65 72 79 20 72 6f 75 74 65 72 20 6d 75 73 | ipating.router..Every.router.mus |
23300 | 74 20 61 6c 73 6f 20 68 61 76 65 20 74 68 65 20 6c 6f 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 | t.also.have.the.location.of.the. |
23320 | 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 6d 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 | Rendevouz.Point.manually.configu |
23340 | 72 65 64 2e 20 54 68 65 6e 2c 20 75 6e 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 73 68 61 72 65 64 | red..Then,.unidirectional.shared |
23360 | 20 74 72 65 65 73 20 72 6f 6f 74 65 64 20 61 74 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 | .trees.rooted.at.the.Rendevouz.P |
23380 | 6f 69 6e 74 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 62 65 20 62 75 69 6c 74 | oint.will.automatically.be.built |
233a0 | 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 00 3a 61 62 | .for.multicast.distribution..:ab |
233c0 | 62 72 3a 60 50 50 50 6f 45 20 28 50 6f 69 6e 74 2d 74 6f 2d 50 6f 69 6e 74 20 50 72 6f 74 6f 63 | br:`PPPoE.(Point-to-Point.Protoc |
233e0 | 6f 6c 20 6f 76 65 72 20 45 74 68 65 72 6e 65 74 29 60 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 | ol.over.Ethernet)`.is.a.network. |
23400 | 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 65 6e 63 61 70 73 75 6c 61 74 69 6e 67 20 50 50 50 20 66 | protocol.for.encapsulating.PPP.f |
23420 | 72 61 6d 65 73 20 69 6e 73 69 64 65 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 73 2e 20 49 74 | rames.inside.Ethernet.frames..It |
23440 | 20 61 70 70 65 61 72 65 64 20 69 6e 20 31 39 39 39 2c 20 69 6e 20 74 68 65 20 63 6f 6e 74 65 78 | .appeared.in.1999,.in.the.contex |
23460 | 74 20 6f 66 20 74 68 65 20 62 6f 6f 6d 20 6f 66 20 44 53 4c 20 61 73 20 74 68 65 20 73 6f 6c 75 | t.of.the.boom.of.DSL.as.the.solu |
23480 | 74 69 6f 6e 20 66 6f 72 20 74 75 6e 6e 65 6c 69 6e 67 20 70 61 63 6b 65 74 73 20 6f 76 65 72 20 | tion.for.tunneling.packets.over. |
234a0 | 74 68 65 20 44 53 4c 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 74 68 65 20 3a 61 62 62 72 3a | the.DSL.connection.to.the.:abbr: |
234c0 | 60 49 53 50 73 20 28 49 6e 74 65 72 6e 65 74 20 53 65 72 76 69 63 65 20 50 72 6f 76 69 64 65 72 | `ISPs.(Internet.Service.Provider |
234e0 | 73 29 60 20 49 50 20 6e 65 74 77 6f 72 6b 2c 20 61 6e 64 20 66 72 6f 6d 20 74 68 65 72 65 20 74 | s)`.IP.network,.and.from.there.t |
23500 | 6f 20 74 68 65 20 72 65 73 74 20 6f 66 20 74 68 65 20 49 6e 74 65 72 6e 65 74 2e 20 41 20 32 30 | o.the.rest.of.the.Internet..A.20 |
23520 | 30 35 20 6e 65 74 77 6f 72 6b 69 6e 67 20 62 6f 6f 6b 20 6e 6f 74 65 64 20 74 68 61 74 20 22 4d | 05.networking.book.noted.that."M |
23540 | 6f 73 74 20 44 53 4c 20 70 72 6f 76 69 64 65 72 73 20 75 73 65 20 50 50 50 6f 45 2c 20 77 68 69 | ost.DSL.providers.use.PPPoE,.whi |
23560 | 63 68 20 70 72 6f 76 69 64 65 73 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2c 20 65 6e 63 72 | ch.provides.authentication,.encr |
23580 | 79 70 74 69 6f 6e 2c 20 61 6e 64 20 63 6f 6d 70 72 65 73 73 69 6f 6e 2e 22 20 54 79 70 69 63 61 | yption,.and.compression.".Typica |
235a0 | 6c 20 75 73 65 20 6f 66 20 50 50 50 6f 45 20 69 6e 76 6f 6c 76 65 73 20 6c 65 76 65 72 61 67 69 | l.use.of.PPPoE.involves.leveragi |
235c0 | 6e 67 20 74 68 65 20 50 50 50 20 66 61 63 69 6c 69 74 69 65 73 20 66 6f 72 20 61 75 74 68 65 6e | ng.the.PPP.facilities.for.authen |
235e0 | 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 73 65 72 20 77 69 74 68 20 61 20 75 73 65 72 6e 61 6d | ticating.the.user.with.a.usernam |
23600 | 65 20 61 6e 64 20 70 61 73 73 77 6f 72 64 2c 20 70 72 65 64 6f 6d 69 6e 61 74 65 6c 79 20 76 69 | e.and.password,.predominately.vi |
23620 | 61 20 74 68 65 20 50 41 50 20 70 72 6f 74 6f 63 6f 6c 20 61 6e 64 20 6c 65 73 73 20 6f 66 74 65 | a.the.PAP.protocol.and.less.ofte |
23640 | 6e 20 76 69 61 20 43 48 41 50 2e 00 3a 61 62 62 72 3a 60 52 41 73 20 28 52 6f 75 74 65 72 20 61 | n.via.CHAP..:abbr:`RAs.(Router.a |
23660 | 64 76 65 72 74 69 73 65 6d 65 6e 74 73 29 60 20 61 72 65 20 64 65 73 63 72 69 62 65 64 20 69 6e | dvertisements)`.are.described.in |
23680 | 20 3a 72 66 63 3a 60 34 38 36 31 23 73 65 63 74 69 6f 6e 2d 34 2e 36 2e 32 60 2e 20 54 68 65 79 | .:rfc:`4861#section-4.6.2`..They |
236a0 | 20 61 72 65 20 70 61 72 74 20 6f 66 20 77 68 61 74 20 69 73 20 6b 6e 6f 77 6e 20 61 73 20 3a 61 | .are.part.of.what.is.known.as.:a |
236c0 | 62 62 72 3a 60 53 4c 41 41 43 20 28 53 74 61 74 65 6c 65 73 73 20 41 64 64 72 65 73 73 20 41 75 | bbr:`SLAAC.(Stateless.Address.Au |
236e0 | 74 6f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 29 60 2e 00 3a 61 62 62 72 3a 60 52 49 50 20 28 52 | toconfiguration)`..:abbr:`RIP.(R |
23700 | 6f 75 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 | outing.Information.Protocol)`.is |
23720 | 20 61 20 77 69 64 65 6c 79 20 64 65 70 6c 6f 79 65 64 20 69 6e 74 65 72 69 6f 72 20 67 61 74 65 | .a.widely.deployed.interior.gate |
23740 | 77 61 79 20 70 72 6f 74 6f 63 6f 6c 2e 20 52 49 50 20 77 61 73 20 64 65 76 65 6c 6f 70 65 64 20 | way.protocol..RIP.was.developed. |
23760 | 69 6e 20 74 68 65 20 31 39 37 30 73 20 61 74 20 58 65 72 6f 78 20 4c 61 62 73 20 61 73 20 70 61 | in.the.1970s.at.Xerox.Labs.as.pa |
23780 | 72 74 20 6f 66 20 74 68 65 20 58 4e 53 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2e 20 | rt.of.the.XNS.routing.protocol.. |
237a0 | 52 49 50 20 69 73 20 61 20 64 69 73 74 61 6e 63 65 2d 76 65 63 74 6f 72 20 70 72 6f 74 6f 63 6f | RIP.is.a.distance-vector.protoco |
237c0 | 6c 20 61 6e 64 20 69 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 42 65 6c 6c 6d 61 6e 2d 46 6f | l.and.is.based.on.the.Bellman-Fo |
237e0 | 72 64 20 61 6c 67 6f 72 69 74 68 6d 73 2e 20 41 73 20 61 20 64 69 73 74 61 6e 63 65 2d 76 65 63 | rd.algorithms..As.a.distance-vec |
23800 | 74 6f 72 20 70 72 6f 74 6f 63 6f 6c 2c 20 52 49 50 20 72 6f 75 74 65 72 20 73 65 6e 64 20 75 70 | tor.protocol,.RIP.router.send.up |
23820 | 64 61 74 65 73 20 74 6f 20 69 74 73 20 6e 65 69 67 68 62 6f 72 73 20 70 65 72 69 6f 64 69 63 61 | dates.to.its.neighbors.periodica |
23840 | 6c 6c 79 2c 20 74 68 75 73 20 61 6c 6c 6f 77 69 6e 67 20 74 68 65 20 63 6f 6e 76 65 72 67 65 6e | lly,.thus.allowing.the.convergen |
23860 | 63 65 20 74 6f 20 61 20 6b 6e 6f 77 6e 20 74 6f 70 6f 6c 6f 67 79 2e 20 49 6e 20 65 61 63 68 20 | ce.to.a.known.topology..In.each. |
23880 | 75 70 64 61 74 65 2c 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 74 6f 20 61 6e 79 20 67 69 76 65 | update,.the.distance.to.any.give |
238a0 | 6e 20 6e 65 74 77 6f 72 6b 20 77 69 6c 6c 20 62 65 20 62 72 6f 61 64 63 61 73 74 20 74 6f 20 69 | n.network.will.be.broadcast.to.i |
238c0 | 74 73 20 6e 65 69 67 68 62 6f 72 69 6e 67 20 72 6f 75 74 65 72 2e 00 3a 61 62 62 72 3a 60 52 50 | ts.neighboring.router..:abbr:`RP |
238e0 | 4b 49 20 28 52 65 73 6f 75 72 63 65 20 50 75 62 6c 69 63 20 4b 65 79 20 49 6e 66 72 61 73 74 72 | KI.(Resource.Public.Key.Infrastr |
23900 | 75 63 74 75 72 65 29 60 20 69 73 20 61 20 66 72 61 6d 65 77 6f 72 6b 20 3a 61 62 62 72 3a 60 50 | ucture)`.is.a.framework.:abbr:`P |
23920 | 4b 49 20 28 50 75 62 6c 69 63 20 4b 65 79 20 49 6e 66 72 61 73 74 72 75 63 74 75 72 65 29 60 20 | KI.(Public.Key.Infrastructure)`. |
23940 | 64 65 73 69 67 6e 65 64 20 74 6f 20 73 65 63 75 72 65 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 | designed.to.secure.the.Internet. |
23960 | 72 6f 75 74 69 6e 67 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 2e 20 49 74 20 61 73 73 6f 63 | routing.infrastructure..It.assoc |
23980 | 69 61 74 65 73 20 42 47 50 20 72 6f 75 74 65 20 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 20 77 69 | iates.BGP.route.announcements.wi |
239a0 | 74 68 20 74 68 65 20 63 6f 72 72 65 63 74 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 3a 61 62 62 72 | th.the.correct.originating.:abbr |
239c0 | 3a 60 41 53 4e 20 28 41 75 74 6f 6e 6f 6d 75 73 20 53 79 73 74 65 6d 20 4e 75 6d 62 65 72 29 60 | :`ASN.(Autonomus.System.Number)` |
239e0 | 20 77 68 69 63 68 20 42 47 50 20 72 6f 75 74 65 72 73 20 63 61 6e 20 74 68 65 6e 20 75 73 65 20 | .which.BGP.routers.can.then.use. |
23a00 | 74 6f 20 63 68 65 63 6b 20 65 61 63 68 20 72 6f 75 74 65 20 61 67 61 69 6e 73 74 20 74 68 65 20 | to.check.each.route.against.the. |
23a20 | 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 3a 61 62 62 72 3a 60 52 4f 41 20 28 52 6f 75 74 65 20 | corresponding.:abbr:`ROA.(Route. |
23a40 | 4f 72 69 67 69 6e 20 41 75 74 68 6f 72 69 73 61 74 69 6f 6e 29 60 20 66 6f 72 20 76 61 6c 69 64 | Origin.Authorisation)`.for.valid |
23a60 | 69 74 79 2e 20 52 50 4b 49 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 | ity..RPKI.is.described.in.:rfc:` |
23a80 | 36 34 38 30 60 2e 00 3a 61 62 62 72 3a 60 52 50 53 20 28 52 65 63 65 69 76 65 20 50 61 63 6b 65 | 6480`..:abbr:`RPS.(Receive.Packe |
23aa0 | 74 20 53 74 65 65 72 69 6e 67 29 60 20 69 73 20 6c 6f 67 69 63 61 6c 6c 79 20 61 20 73 6f 66 74 | t.Steering)`.is.logically.a.soft |
23ac0 | 77 61 72 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 6f 66 20 3a 61 62 62 72 3a 60 52 53 | ware.implementation.of.:abbr:`RS |
23ae0 | 53 20 28 52 65 63 65 69 76 65 20 53 69 64 65 20 53 63 61 6c 69 6e 67 29 60 2e 20 42 65 69 6e 67 | S.(Receive.Side.Scaling)`..Being |
23b00 | 20 69 6e 20 73 6f 66 74 77 61 72 65 2c 20 69 74 20 69 73 20 6e 65 63 65 73 73 61 72 69 6c 79 20 | .in.software,.it.is.necessarily. |
23b20 | 63 61 6c 6c 65 64 20 6c 61 74 65 72 20 69 6e 20 74 68 65 20 64 61 74 61 70 61 74 68 2e 20 57 68 | called.later.in.the.datapath..Wh |
23b40 | 65 72 65 61 73 20 52 53 53 20 73 65 6c 65 63 74 73 20 74 68 65 20 71 75 65 75 65 20 61 6e 64 20 | ereas.RSS.selects.the.queue.and. |
23b60 | 68 65 6e 63 65 20 43 50 55 20 74 68 61 74 20 77 69 6c 6c 20 72 75 6e 20 74 68 65 20 68 61 72 64 | hence.CPU.that.will.run.the.hard |
23b80 | 77 61 72 65 20 69 6e 74 65 72 72 75 70 74 20 68 61 6e 64 6c 65 72 2c 20 52 50 53 20 73 65 6c 65 | ware.interrupt.handler,.RPS.sele |
23ba0 | 63 74 73 20 74 68 65 20 43 50 55 20 74 6f 20 70 65 72 66 6f 72 6d 20 70 72 6f 74 6f 63 6f 6c 20 | cts.the.CPU.to.perform.protocol. |
23bc0 | 70 72 6f 63 65 73 73 69 6e 67 20 61 62 6f 76 65 20 74 68 65 20 69 6e 74 65 72 72 75 70 74 20 68 | processing.above.the.interrupt.h |
23be0 | 61 6e 64 6c 65 72 2e 20 54 68 69 73 20 69 73 20 61 63 63 6f 6d 70 6c 69 73 68 65 64 20 62 79 20 | andler..This.is.accomplished.by. |
23c00 | 70 6c 61 63 69 6e 67 20 74 68 65 20 70 61 63 6b 65 74 20 6f 6e 20 74 68 65 20 64 65 73 69 72 65 | placing.the.packet.on.the.desire |
23c20 | 64 20 43 50 55 27 73 20 62 61 63 6b 6c 6f 67 20 71 75 65 75 65 20 61 6e 64 20 77 61 6b 69 6e 67 | d.CPU's.backlog.queue.and.waking |
23c40 | 20 75 70 20 74 68 65 20 43 50 55 20 66 6f 72 20 70 72 6f 63 65 73 73 69 6e 67 2e 20 52 50 53 20 | .up.the.CPU.for.processing..RPS. |
23c60 | 68 61 73 20 73 6f 6d 65 20 61 64 76 61 6e 74 61 67 65 73 20 6f 76 65 72 20 52 53 53 3a 00 3a 61 | has.some.advantages.over.RSS:.:a |
23c80 | 62 62 72 3a 60 53 4c 41 41 43 20 28 53 74 61 74 65 6c 65 73 73 20 41 64 64 72 65 73 73 20 41 75 | bbr:`SLAAC.(Stateless.Address.Au |
23ca0 | 74 6f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 29 60 20 3a 72 66 63 3a 60 34 38 36 32 60 2e 20 49 | toconfiguration)`.:rfc:`4862`..I |
23cc0 | 50 76 36 20 68 6f 73 74 73 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 6d 73 65 6c 76 | Pv6.hosts.can.configure.themselv |
23ce0 | 65 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 77 68 65 6e 20 63 6f 6e 6e 65 63 74 65 64 20 | es.automatically.when.connected. |
23d00 | 74 6f 20 61 6e 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 20 75 73 69 6e 67 20 74 68 65 20 4e 65 69 | to.an.IPv6.network.using.the.Nei |
23d20 | 67 68 62 6f 72 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 20 76 69 61 20 3a 61 62 | ghbor.Discovery.Protocol.via.:ab |
23d40 | 62 72 3a 60 49 43 4d 50 76 36 20 28 49 6e 74 65 72 6e 65 74 20 43 6f 6e 74 72 6f 6c 20 4d 65 73 | br:`ICMPv6.(Internet.Control.Mes |
23d60 | 73 61 67 65 20 50 72 6f 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e 20 36 29 60 20 72 6f 75 74 65 72 | sage.Protocol.version.6)`.router |
23d80 | 20 64 69 73 63 6f 76 65 72 79 20 6d 65 73 73 61 67 65 73 2e 20 57 68 65 6e 20 66 69 72 73 74 20 | .discovery.messages..When.first. |
23da0 | 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 20 6e 65 74 77 6f 72 6b 2c 20 61 20 68 6f 73 74 20 73 | connected.to.a.network,.a.host.s |
23dc0 | 65 6e 64 73 20 61 20 6c 69 6e 6b 2d 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 73 6f 6c 69 63 69 74 | ends.a.link-local.router.solicit |
23de0 | 61 74 69 6f 6e 20 6d 75 6c 74 69 63 61 73 74 20 72 65 71 75 65 73 74 20 66 6f 72 20 69 74 73 20 | ation.multicast.request.for.its. |
23e00 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 3b 20 72 6f 75 74 65 72 | configuration.parameters;.router |
23e20 | 73 20 72 65 73 70 6f 6e 64 20 74 6f 20 73 75 63 68 20 61 20 72 65 71 75 65 73 74 20 77 69 74 68 | s.respond.to.such.a.request.with |
23e40 | 20 61 20 72 6f 75 74 65 72 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 20 70 61 63 6b 65 74 20 74 | .a.router.advertisement.packet.t |
23e60 | 68 61 74 20 63 6f 6e 74 61 69 6e 73 20 49 6e 74 65 72 6e 65 74 20 4c 61 79 65 72 20 63 6f 6e 66 | hat.contains.Internet.Layer.conf |
23e80 | 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 2e 00 3a 61 62 62 72 3a 60 53 4e 41 | iguration.parameters..:abbr:`SNA |
23ea0 | 54 20 28 53 6f 75 72 63 65 20 4e 65 74 77 6f 72 6b 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c | T.(Source.Network.Address.Transl |
23ec0 | 61 74 69 6f 6e 29 60 20 69 73 20 74 68 65 20 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 20 66 6f 72 6d 20 | ation)`.is.the.most.common.form. |
23ee0 | 6f 66 20 3a 61 62 62 72 3a 60 4e 41 54 20 28 4e 65 74 77 6f 72 6b 20 41 64 64 72 65 73 73 20 54 | of.:abbr:`NAT.(Network.Address.T |
23f00 | 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 61 6e 64 20 69 73 20 74 79 70 69 63 61 6c 6c 79 20 72 65 | ranslation)`.and.is.typically.re |
23f20 | 66 65 72 72 65 64 20 74 6f 20 73 69 6d 70 6c 79 20 61 73 20 4e 41 54 2e 20 54 6f 20 62 65 20 6d | ferred.to.simply.as.NAT..To.be.m |
23f40 | 6f 72 65 20 63 6f 72 72 65 63 74 2c 20 77 68 61 74 20 6d 6f 73 74 20 70 65 6f 70 6c 65 20 72 65 | ore.correct,.what.most.people.re |
23f60 | 66 65 72 20 74 6f 20 61 73 20 3a 61 62 62 72 3a 60 4e 41 54 20 28 4e 65 74 77 6f 72 6b 20 41 64 | fer.to.as.:abbr:`NAT.(Network.Ad |
23f80 | 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 63 74 75 61 6c 6c 79 20 | dress.Translation)`.is.actually. |
23fa0 | 74 68 65 20 70 72 6f 63 65 73 73 20 6f 66 20 3a 61 62 62 72 3a 60 50 41 54 20 28 50 6f 72 74 20 | the.process.of.:abbr:`PAT.(Port. |
23fc0 | 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 2c 20 6f 72 20 4e 41 54 20 6f 76 | Address.Translation)`,.or.NAT.ov |
23fe0 | 65 72 6c 6f 61 64 2e 20 53 4e 41 54 20 69 73 20 74 79 70 69 63 61 6c 6c 79 20 75 73 65 64 20 62 | erload..SNAT.is.typically.used.b |
24000 | 79 20 69 6e 74 65 72 6e 61 6c 20 75 73 65 72 73 2f 70 72 69 76 61 74 65 20 68 6f 73 74 73 20 74 | y.internal.users/private.hosts.t |
24020 | 6f 20 61 63 63 65 73 73 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 2d 20 74 68 65 20 73 6f 75 72 | o.access.the.Internet.-.the.sour |
24040 | 63 65 20 61 64 64 72 65 73 73 20 69 73 20 74 72 61 6e 73 6c 61 74 65 64 20 61 6e 64 20 74 68 75 | ce.address.is.translated.and.thu |
24060 | 73 20 6b 65 70 74 20 70 72 69 76 61 74 65 2e 00 3a 61 62 62 72 3a 60 53 4e 41 54 36 34 20 28 49 | s.kept.private..:abbr:`SNAT64.(I |
24080 | 50 76 36 2d 74 6f 2d 49 50 76 34 20 53 6f 75 72 63 65 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 | Pv6-to-IPv4.Source.Address.Trans |
240a0 | 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 20 73 74 61 74 65 66 75 6c 20 74 72 61 6e 73 6c 61 74 69 | lation)`.is.a.stateful.translati |
240c0 | 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 20 74 68 61 74 20 74 72 61 6e 73 6c 61 74 65 73 20 49 50 76 | on.mechanism.that.translates.IPv |
240e0 | 36 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 2e 00 3a | 6.addresses.to.IPv4.addresses..: |
24100 | 61 62 62 72 3a 60 53 4e 4d 50 20 28 53 69 6d 70 6c 65 20 4e 65 74 77 6f 72 6b 20 4d 61 6e 61 67 | abbr:`SNMP.(Simple.Network.Manag |
24120 | 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 6e 20 49 6e 74 65 72 6e 65 74 20 | ement.Protocol)`.is.an.Internet. |
24140 | 53 74 61 6e 64 61 72 64 20 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 63 6f 6c 6c 65 63 74 69 6e 67 | Standard.protocol.for.collecting |
24160 | 20 61 6e 64 20 6f 72 67 61 6e 69 7a 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 | .and.organizing.information.abou |
24180 | 74 20 6d 61 6e 61 67 65 64 20 64 65 76 69 63 65 73 20 6f 6e 20 49 50 20 6e 65 74 77 6f 72 6b 73 | t.managed.devices.on.IP.networks |
241a0 | 20 61 6e 64 20 66 6f 72 20 6d 6f 64 69 66 79 69 6e 67 20 74 68 61 74 20 69 6e 66 6f 72 6d 61 74 | .and.for.modifying.that.informat |
241c0 | 69 6f 6e 20 74 6f 20 63 68 61 6e 67 65 20 64 65 76 69 63 65 20 62 65 68 61 76 69 6f 72 2e 20 44 | ion.to.change.device.behavior..D |
241e0 | 65 76 69 63 65 73 20 74 68 61 74 20 74 79 70 69 63 61 6c 6c 79 20 73 75 70 70 6f 72 74 20 53 4e | evices.that.typically.support.SN |
24200 | 4d 50 20 69 6e 63 6c 75 64 65 20 63 61 62 6c 65 20 6d 6f 64 65 6d 73 2c 20 72 6f 75 74 65 72 73 | MP.include.cable.modems,.routers |
24220 | 2c 20 73 77 69 74 63 68 65 73 2c 20 73 65 72 76 65 72 73 2c 20 77 6f 72 6b 73 74 61 74 69 6f 6e | ,.switches,.servers,.workstation |
24240 | 73 2c 20 70 72 69 6e 74 65 72 73 2c 20 61 6e 64 20 6d 6f 72 65 2e 00 3a 61 62 62 72 3a 60 53 4e | s,.printers,.and.more..:abbr:`SN |
24260 | 50 54 76 36 20 28 53 6f 75 72 63 65 20 49 50 76 36 2d 74 6f 2d 49 50 76 36 20 4e 65 74 77 6f 72 | PTv6.(Source.IPv6-to-IPv6.Networ |
24280 | 6b 20 50 72 65 66 69 78 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 54 68 65 20 63 6f 6e 76 65 | k.Prefix.Translation)`.The.conve |
242a0 | 72 73 69 6f 6e 20 66 75 6e 63 74 69 6f 6e 20 69 73 20 6d 61 69 6e 6c 79 20 75 73 65 64 20 69 6e | rsion.function.is.mainly.used.in |
242c0 | 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 63 65 6e 61 72 69 6f 73 3a 00 3a 61 62 62 72 3a | .the.following.scenarios:.:abbr: |
242e0 | 60 53 53 48 20 28 53 65 63 75 72 65 20 53 68 65 6c 6c 29 60 20 69 73 20 61 20 63 72 79 70 74 6f | `SSH.(Secure.Shell)`.is.a.crypto |
24300 | 67 72 61 70 68 69 63 20 6e 65 74 77 6f 72 6b 20 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 6f 70 65 | graphic.network.protocol.for.ope |
24320 | 72 61 74 69 6e 67 20 6e 65 74 77 6f 72 6b 20 73 65 72 76 69 63 65 73 20 73 65 63 75 72 65 6c 79 | rating.network.services.securely |
24340 | 20 6f 76 65 72 20 61 6e 20 75 6e 73 65 63 75 72 65 64 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 20 | .over.an.unsecured.network..The. |
24360 | 73 74 61 6e 64 61 72 64 20 54 43 50 20 70 6f 72 74 20 66 6f 72 20 53 53 48 20 69 73 20 32 32 2e | standard.TCP.port.for.SSH.is.22. |
24380 | 20 54 68 65 20 62 65 73 74 20 6b 6e 6f 77 6e 20 65 78 61 6d 70 6c 65 20 61 70 70 6c 69 63 61 74 | .The.best.known.example.applicat |
243a0 | 69 6f 6e 20 69 73 20 66 6f 72 20 72 65 6d 6f 74 65 20 6c 6f 67 69 6e 20 74 6f 20 63 6f 6d 70 75 | ion.is.for.remote.login.to.compu |
243c0 | 74 65 72 20 73 79 73 74 65 6d 73 20 62 79 20 75 73 65 72 73 2e 00 3a 61 62 62 72 3a 60 53 53 54 | ter.systems.by.users..:abbr:`SST |
243e0 | 50 20 28 53 65 63 75 72 65 20 53 6f 63 6b 65 74 20 54 75 6e 6e 65 6c 69 6e 67 20 50 72 6f 74 6f | P.(Secure.Socket.Tunneling.Proto |
24400 | 63 6f 6c 29 60 20 69 73 20 61 20 66 6f 72 6d 20 6f 66 20 3a 61 62 62 72 3a 60 56 50 4e 20 28 56 | col)`.is.a.form.of.:abbr:`VPN.(V |
24420 | 69 72 74 75 61 6c 20 50 72 69 76 61 74 65 20 4e 65 74 77 6f 72 6b 29 60 20 74 75 6e 6e 65 6c 20 | irtual.Private.Network)`.tunnel. |
24440 | 74 68 61 74 20 70 72 6f 76 69 64 65 73 20 61 20 6d 65 63 68 61 6e 69 73 6d 20 74 6f 20 74 72 61 | that.provides.a.mechanism.to.tra |
24460 | 6e 73 70 6f 72 74 20 50 50 50 20 74 72 61 66 66 69 63 20 74 68 72 6f 75 67 68 20 61 6e 20 53 53 | nsport.PPP.traffic.through.an.SS |
24480 | 4c 2f 54 4c 53 20 63 68 61 6e 6e 65 6c 2e 20 53 53 4c 2f 54 4c 53 20 70 72 6f 76 69 64 65 73 20 | L/TLS.channel..SSL/TLS.provides. |
244a0 | 74 72 61 6e 73 70 6f 72 74 2d 6c 65 76 65 6c 20 73 65 63 75 72 69 74 79 20 77 69 74 68 20 6b 65 | transport-level.security.with.ke |
244c0 | 79 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2c 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6e 64 20 74 72 | y.negotiation,.encryption.and.tr |
244e0 | 61 66 66 69 63 20 69 6e 74 65 67 72 69 74 79 20 63 68 65 63 6b 69 6e 67 2e 20 54 68 65 20 75 73 | affic.integrity.checking..The.us |
24500 | 65 20 6f 66 20 53 53 4c 2f 54 4c 53 20 6f 76 65 72 20 54 43 50 20 70 6f 72 74 20 34 34 33 20 61 | e.of.SSL/TLS.over.TCP.port.443.a |
24520 | 6c 6c 6f 77 73 20 53 53 54 50 20 74 6f 20 70 61 73 73 20 74 68 72 6f 75 67 68 20 76 69 72 74 75 | llows.SSTP.to.pass.through.virtu |
24540 | 61 6c 6c 79 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 73 20 61 6e 64 20 70 72 6f 78 79 20 73 65 72 | ally.all.firewalls.and.proxy.ser |
24560 | 76 65 72 73 20 65 78 63 65 70 74 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 77 65 | vers.except.for.authenticated.we |
24580 | 62 20 70 72 6f 78 69 65 73 2e 00 3a 61 62 62 72 3a 60 53 53 54 50 20 28 53 65 63 75 72 65 20 53 | b.proxies..:abbr:`SSTP.(Secure.S |
245a0 | 6f 63 6b 65 74 20 54 75 6e 6e 65 6c 69 6e 67 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 | ocket.Tunneling.Protocol)`.is.a. |
245c0 | 66 6f 72 6d 20 6f 66 20 3a 61 62 62 72 3a 60 56 54 50 20 28 56 69 72 74 75 61 6c 20 50 72 69 76 | form.of.:abbr:`VTP.(Virtual.Priv |
245e0 | 61 74 65 20 4e 65 74 77 6f 72 6b 29 60 20 74 75 6e 6e 65 6c 20 74 68 61 74 20 70 72 6f 76 69 64 | ate.Network)`.tunnel.that.provid |
24600 | 65 73 20 61 20 6d 65 63 68 61 6e 69 73 6d 20 74 6f 20 74 72 61 6e 73 70 6f 72 74 20 50 50 50 20 | es.a.mechanism.to.transport.PPP. |
24620 | 74 72 61 66 66 69 63 20 74 68 72 6f 75 67 68 20 61 6e 20 53 53 4c 2f 54 4c 53 20 63 68 61 6e 6e | traffic.through.an.SSL/TLS.chann |
24640 | 65 6c 2e 20 53 53 4c 2f 54 4c 53 20 70 72 6f 76 69 64 65 73 20 74 72 61 6e 73 70 6f 72 74 2d 6c | el..SSL/TLS.provides.transport-l |
24660 | 65 76 65 6c 20 73 65 63 75 72 69 74 79 20 77 69 74 68 20 6b 65 79 20 6e 65 67 6f 74 69 61 74 69 | evel.security.with.key.negotiati |
24680 | 6f 6e 2c 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6e 64 20 74 72 61 66 66 69 63 20 69 6e 74 65 67 | on,.encryption.and.traffic.integ |
246a0 | 72 69 74 79 20 63 68 65 63 6b 69 6e 67 2e 20 54 68 65 20 75 73 65 20 6f 66 20 53 53 4c 2f 54 4c | rity.checking..The.use.of.SSL/TL |
246c0 | 53 20 6f 76 65 72 20 54 43 50 20 70 6f 72 74 20 34 34 33 20 28 62 79 20 64 65 66 61 75 6c 74 2c | S.over.TCP.port.443.(by.default, |
246e0 | 20 70 6f 72 74 20 63 61 6e 20 62 65 20 63 68 61 6e 67 65 64 29 20 61 6c 6c 6f 77 73 20 53 53 54 | .port.can.be.changed).allows.SST |
24700 | 50 20 74 6f 20 70 61 73 73 20 74 68 72 6f 75 67 68 20 76 69 72 74 75 61 6c 6c 79 20 61 6c 6c 20 | P.to.pass.through.virtually.all. |
24720 | 66 69 72 65 77 61 6c 6c 73 20 61 6e 64 20 70 72 6f 78 79 20 73 65 72 76 65 72 73 20 65 78 63 65 | firewalls.and.proxy.servers.exce |
24740 | 70 74 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 77 65 62 20 70 72 6f 78 69 65 73 | pt.for.authenticated.web.proxies |
24760 | 2e 00 3a 61 62 62 72 3a 60 53 54 50 20 28 53 70 61 6e 6e 69 6e 67 20 54 72 65 65 20 50 72 6f 74 | ..:abbr:`STP.(Spanning.Tree.Prot |
24780 | 6f 63 6f 6c 29 60 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 70 72 6f 74 6f 63 6f 6c 20 74 68 61 | ocol)`.is.a.network.protocol.tha |
247a0 | 74 20 62 75 69 6c 64 73 20 61 20 6c 6f 6f 70 2d 66 72 65 65 20 6c 6f 67 69 63 61 6c 20 74 6f 70 | t.builds.a.loop-free.logical.top |
247c0 | 6f 6c 6f 67 79 20 66 6f 72 20 45 74 68 65 72 6e 65 74 20 6e 65 74 77 6f 72 6b 73 2e 20 54 68 65 | ology.for.Ethernet.networks..The |
247e0 | 20 62 61 73 69 63 20 66 75 6e 63 74 69 6f 6e 20 6f 66 20 53 54 50 20 69 73 20 74 6f 20 70 72 65 | .basic.function.of.STP.is.to.pre |
24800 | 76 65 6e 74 20 62 72 69 64 67 65 20 6c 6f 6f 70 73 20 61 6e 64 20 74 68 65 20 62 72 6f 61 64 63 | vent.bridge.loops.and.the.broadc |
24820 | 61 73 74 20 72 61 64 69 61 74 69 6f 6e 20 74 68 61 74 20 72 65 73 75 6c 74 73 20 66 72 6f 6d 20 | ast.radiation.that.results.from. |
24840 | 74 68 65 6d 2e 20 53 70 61 6e 6e 69 6e 67 20 74 72 65 65 20 61 6c 73 6f 20 61 6c 6c 6f 77 73 20 | them..Spanning.tree.also.allows. |
24860 | 61 20 6e 65 74 77 6f 72 6b 20 64 65 73 69 67 6e 20 74 6f 20 69 6e 63 6c 75 64 65 20 62 61 63 6b | a.network.design.to.include.back |
24880 | 75 70 20 6c 69 6e 6b 73 20 70 72 6f 76 69 64 69 6e 67 20 66 61 75 6c 74 20 74 6f 6c 65 72 61 6e | up.links.providing.fault.toleran |
248a0 | 63 65 20 69 66 20 61 6e 20 61 63 74 69 76 65 20 6c 69 6e 6b 20 66 61 69 6c 73 2e 00 3a 61 62 62 | ce.if.an.active.link.fails..:abb |
248c0 | 72 3a 60 54 46 54 50 20 28 54 72 69 76 69 61 6c 20 46 69 6c 65 20 54 72 61 6e 73 66 65 72 20 50 | r:`TFTP.(Trivial.File.Transfer.P |
248e0 | 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 73 69 6d 70 6c 65 2c 20 6c 6f 63 6b 73 74 65 70 20 | rotocol)`.is.a.simple,.lockstep. |
24900 | 66 69 6c 65 20 74 72 61 6e 73 66 65 72 20 70 72 6f 74 6f 63 6f 6c 20 77 68 69 63 68 20 61 6c 6c | file.transfer.protocol.which.all |
24920 | 6f 77 73 20 61 20 63 6c 69 65 6e 74 20 74 6f 20 67 65 74 20 61 20 66 69 6c 65 20 66 72 6f 6d 20 | ows.a.client.to.get.a.file.from. |
24940 | 6f 72 20 70 75 74 20 61 20 66 69 6c 65 20 6f 6e 74 6f 20 61 20 72 65 6d 6f 74 65 20 68 6f 73 74 | or.put.a.file.onto.a.remote.host |
24960 | 2e 20 4f 6e 65 20 6f 66 20 69 74 73 20 70 72 69 6d 61 72 79 20 75 73 65 73 20 69 73 20 69 6e 20 | ..One.of.its.primary.uses.is.in. |
24980 | 74 68 65 20 65 61 72 6c 79 20 73 74 61 67 65 73 20 6f 66 20 6e 6f 64 65 73 20 62 6f 6f 74 69 6e | the.early.stages.of.nodes.bootin |
249a0 | 67 20 66 72 6f 6d 20 61 20 6c 6f 63 61 6c 20 61 72 65 61 20 6e 65 74 77 6f 72 6b 2e 20 54 46 54 | g.from.a.local.area.network..TFT |
249c0 | 50 20 68 61 73 20 62 65 65 6e 20 75 73 65 64 20 66 6f 72 20 74 68 69 73 20 61 70 70 6c 69 63 61 | P.has.been.used.for.this.applica |
249e0 | 74 69 6f 6e 20 62 65 63 61 75 73 65 20 69 74 20 69 73 20 76 65 72 79 20 73 69 6d 70 6c 65 20 74 | tion.because.it.is.very.simple.t |
24a00 | 6f 20 69 6d 70 6c 65 6d 65 6e 74 2e 00 3a 61 62 62 72 3a 60 56 4e 49 20 28 56 69 72 74 75 61 6c | o.implement..:abbr:`VNI.(Virtual |
24a20 | 20 4e 65 74 77 6f 72 6b 20 49 64 65 6e 74 69 66 69 65 72 29 60 20 69 73 20 61 6e 20 69 64 65 6e | .Network.Identifier)`.is.an.iden |
24a40 | 74 69 66 69 65 72 20 66 6f 72 20 61 20 75 6e 69 71 75 65 20 65 6c 65 6d 65 6e 74 20 6f 66 20 61 | tifier.for.a.unique.element.of.a |
24a60 | 20 76 69 72 74 75 61 6c 20 6e 65 74 77 6f 72 6b 2e 20 20 49 6e 20 6d 61 6e 79 20 73 69 74 75 61 | .virtual.network...In.many.situa |
24a80 | 74 69 6f 6e 73 20 74 68 69 73 20 6d 61 79 20 72 65 70 72 65 73 65 6e 74 20 61 6e 20 4c 32 20 73 | tions.this.may.represent.an.L2.s |
24aa0 | 65 67 6d 65 6e 74 2c 20 68 6f 77 65 76 65 72 2c 20 74 68 65 20 63 6f 6e 74 72 6f 6c 20 70 6c 61 | egment,.however,.the.control.pla |
24ac0 | 6e 65 20 64 65 66 69 6e 65 73 20 74 68 65 20 66 6f 72 77 61 72 64 69 6e 67 20 73 65 6d 61 6e 74 | ne.defines.the.forwarding.semant |
24ae0 | 69 63 73 20 6f 66 20 64 65 63 61 70 73 75 6c 61 74 65 64 20 70 61 63 6b 65 74 73 2e 20 54 68 65 | ics.of.decapsulated.packets..The |
24b00 | 20 56 4e 49 20 4d 41 59 20 62 65 20 75 73 65 64 20 61 73 20 70 61 72 74 20 6f 66 20 45 43 4d 50 | .VNI.MAY.be.used.as.part.of.ECMP |
24b20 | 20 66 6f 72 77 61 72 64 69 6e 67 20 64 65 63 69 73 69 6f 6e 73 20 6f 72 20 4d 41 59 20 62 65 20 | .forwarding.decisions.or.MAY.be. |
24b40 | 75 73 65 64 20 61 73 20 61 20 6d 65 63 68 61 6e 69 73 6d 20 74 6f 20 64 69 73 74 69 6e 67 75 69 | used.as.a.mechanism.to.distingui |
24b60 | 73 68 20 62 65 74 77 65 65 6e 20 6f 76 65 72 6c 61 70 70 69 6e 67 20 61 64 64 72 65 73 73 20 73 | sh.between.overlapping.address.s |
24b80 | 70 61 63 65 73 20 63 6f 6e 74 61 69 6e 65 64 20 69 6e 20 74 68 65 20 65 6e 63 61 70 73 75 6c 61 | paces.contained.in.the.encapsula |
24ba0 | 74 65 64 20 70 61 63 6b 65 74 20 77 68 65 6e 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 61 | ted.packet.when.load.balancing.a |
24bc0 | 63 72 6f 73 73 20 43 50 55 73 2e 00 3a 61 62 62 72 3a 60 56 52 46 20 28 56 69 72 74 75 61 6c 20 | cross.CPUs..:abbr:`VRF.(Virtual. |
24be0 | 52 6f 75 74 69 6e 67 20 61 6e 64 20 46 6f 72 77 61 72 64 69 6e 67 29 60 20 64 65 76 69 63 65 73 | Routing.and.Forwarding)`.devices |
24c00 | 20 63 6f 6d 62 69 6e 65 64 20 77 69 74 68 20 69 70 20 72 75 6c 65 73 20 70 72 6f 76 69 64 65 73 | .combined.with.ip.rules.provides |
24c20 | 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 63 72 65 61 74 65 20 76 69 72 74 75 61 6c 20 72 | .the.ability.to.create.virtual.r |
24c40 | 6f 75 74 69 6e 67 20 61 6e 64 20 66 6f 72 77 61 72 64 69 6e 67 20 64 6f 6d 61 69 6e 73 20 28 61 | outing.and.forwarding.domains.(a |
24c60 | 6b 61 20 56 52 46 73 2c 20 56 52 46 2d 6c 69 74 65 20 74 6f 20 62 65 20 73 70 65 63 69 66 69 63 | ka.VRFs,.VRF-lite.to.be.specific |
24c80 | 29 20 69 6e 20 74 68 65 20 4c 69 6e 75 78 20 6e 65 74 77 6f 72 6b 20 73 74 61 63 6b 2e 20 4f 6e | ).in.the.Linux.network.stack..On |
24ca0 | 65 20 75 73 65 20 63 61 73 65 20 69 73 20 74 68 65 20 6d 75 6c 74 69 2d 74 65 6e 61 6e 63 79 20 | e.use.case.is.the.multi-tenancy. |
24cc0 | 70 72 6f 62 6c 65 6d 20 77 68 65 72 65 20 65 61 63 68 20 74 65 6e 61 6e 74 20 68 61 73 20 74 68 | problem.where.each.tenant.has.th |
24ce0 | 65 69 72 20 6f 77 6e 20 75 6e 69 71 75 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 20 61 6e | eir.own.unique.routing.tables.an |
24d00 | 64 20 69 6e 20 74 68 65 20 76 65 72 79 20 6c 65 61 73 74 20 6e 65 65 64 20 64 69 66 66 65 72 65 | d.in.the.very.least.need.differe |
24d20 | 6e 74 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 73 2e 00 3a 61 62 62 72 3a 60 56 58 4c 41 | nt.default.gateways..:abbr:`VXLA |
24d40 | 4e 20 28 56 69 72 74 75 61 6c 20 45 78 74 65 6e 73 69 62 6c 65 20 4c 41 4e 29 60 20 69 73 20 61 | N.(Virtual.Extensible.LAN)`.is.a |
24d60 | 20 6e 65 74 77 6f 72 6b 20 76 69 72 74 75 61 6c 69 7a 61 74 69 6f 6e 20 74 65 63 68 6e 6f 6c 6f | .network.virtualization.technolo |
24d80 | 67 79 20 74 68 61 74 20 61 74 74 65 6d 70 74 73 20 74 6f 20 61 64 64 72 65 73 73 20 74 68 65 20 | gy.that.attempts.to.address.the. |
24da0 | 73 63 61 6c 61 62 69 6c 69 74 79 20 70 72 6f 62 6c 65 6d 73 20 61 73 73 6f 63 69 61 74 65 64 20 | scalability.problems.associated. |
24dc0 | 77 69 74 68 20 6c 61 72 67 65 20 63 6c 6f 75 64 20 63 6f 6d 70 75 74 69 6e 67 20 64 65 70 6c 6f | with.large.cloud.computing.deplo |
24de0 | 79 6d 65 6e 74 73 2e 20 49 74 20 75 73 65 73 20 61 20 56 4c 41 4e 2d 6c 69 6b 65 20 65 6e 63 61 | yments..It.uses.a.VLAN-like.enca |
24e00 | 70 73 75 6c 61 74 69 6f 6e 20 74 65 63 68 6e 69 71 75 65 20 74 6f 20 65 6e 63 61 70 73 75 6c 61 | psulation.technique.to.encapsula |
24e20 | 74 65 20 4f 53 49 20 6c 61 79 65 72 20 32 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 73 20 77 | te.OSI.layer.2.Ethernet.frames.w |
24e40 | 69 74 68 69 6e 20 6c 61 79 65 72 20 34 20 55 44 50 20 64 61 74 61 67 72 61 6d 73 2c 20 75 73 69 | ithin.layer.4.UDP.datagrams,.usi |
24e60 | 6e 67 20 34 37 38 39 20 61 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 49 41 4e 41 2d 61 73 73 69 | ng.4789.as.the.default.IANA-assi |
24e80 | 67 6e 65 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 55 44 50 20 70 6f 72 74 20 6e 75 6d 62 65 72 | gned.destination.UDP.port.number |
24ea0 | 2e 20 56 58 4c 41 4e 20 65 6e 64 70 6f 69 6e 74 73 2c 20 77 68 69 63 68 20 74 65 72 6d 69 6e 61 | ..VXLAN.endpoints,.which.termina |
24ec0 | 74 65 20 56 58 4c 41 4e 20 74 75 6e 6e 65 6c 73 20 61 6e 64 20 6d 61 79 20 62 65 20 65 69 74 68 | te.VXLAN.tunnels.and.may.be.eith |
24ee0 | 65 72 20 76 69 72 74 75 61 6c 20 6f 72 20 70 68 79 73 69 63 61 6c 20 73 77 69 74 63 68 20 70 6f | er.virtual.or.physical.switch.po |
24f00 | 72 74 73 2c 20 61 72 65 20 6b 6e 6f 77 6e 20 61 73 20 3a 61 62 62 72 3a 60 56 54 45 50 73 20 28 | rts,.are.known.as.:abbr:`VTEPs.( |
24f20 | 56 58 4c 41 4e 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 73 29 60 2e 00 3a 61 62 62 72 3a | VXLAN.tunnel.endpoints)`..:abbr: |
24f40 | 60 57 41 50 20 28 57 69 72 65 6c 65 73 73 20 41 63 63 65 73 73 2d 50 6f 69 6e 74 29 60 20 70 72 | `WAP.(Wireless.Access-Point)`.pr |
24f60 | 6f 76 69 64 65 73 20 6e 65 74 77 6f 72 6b 20 61 63 63 65 73 73 20 74 6f 20 63 6f 6e 6e 65 63 74 | ovides.network.access.to.connect |
24f80 | 69 6e 67 20 73 74 61 74 69 6f 6e 73 20 69 66 20 74 68 65 20 70 68 79 73 69 63 61 6c 20 68 61 72 | ing.stations.if.the.physical.har |
24fa0 | 64 77 61 72 65 20 73 75 70 70 6f 72 74 73 20 61 63 74 69 6e 67 20 61 73 20 61 20 57 41 50 00 3a | dware.supports.acting.as.a.WAP.: |
24fc0 | 61 62 62 72 3a 60 57 4c 41 4e 20 28 57 69 72 65 6c 65 73 73 20 4c 41 4e 29 60 20 69 6e 74 65 72 | abbr:`WLAN.(Wireless.LAN)`.inter |
24fe0 | 66 61 63 65 20 70 72 6f 76 69 64 65 20 38 30 32 2e 31 31 20 28 61 2f 62 2f 67 2f 6e 2f 61 63 29 | face.provide.802.11.(a/b/g/n/ac) |
25000 | 20 77 69 72 65 6c 65 73 73 20 73 75 70 70 6f 72 74 20 28 63 6f 6d 6d 6f 6e 6c 79 20 72 65 66 65 | .wireless.support.(commonly.refe |
25020 | 72 72 65 64 20 74 6f 20 61 73 20 57 69 2d 46 69 29 20 62 79 20 6d 65 61 6e 73 20 6f 66 20 63 6f | rred.to.as.Wi-Fi).by.means.of.co |
25040 | 6d 70 61 74 69 62 6c 65 20 68 61 72 64 77 61 72 65 2e 20 49 66 20 79 6f 75 72 20 68 61 72 64 77 | mpatible.hardware..If.your.hardw |
25060 | 61 72 65 20 73 75 70 70 6f 72 74 73 20 69 74 2c 20 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 6d | are.supports.it,.VyOS.supports.m |
25080 | 75 6c 74 69 70 6c 65 20 6c 6f 67 69 63 61 6c 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 | ultiple.logical.wireless.interfa |
250a0 | 63 65 73 20 70 65 72 20 70 68 79 73 69 63 61 6c 20 64 65 76 69 63 65 2e 00 3a 61 62 62 72 3a 60 | ces.per.physical.device..:abbr:` |
250c0 | 57 50 41 20 28 57 69 2d 46 69 20 50 72 6f 74 65 63 74 65 64 20 41 63 63 65 73 73 29 60 20 61 6e | WPA.(Wi-Fi.Protected.Access)`.an |
250e0 | 64 20 57 50 41 32 20 45 6e 74 65 72 70 72 69 73 65 20 69 6e 20 63 6f 6d 62 69 6e 61 74 69 6f 6e | d.WPA2.Enterprise.in.combination |
25100 | 20 77 69 74 68 20 38 30 32 2e 31 78 20 62 61 73 65 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | .with.802.1x.based.authenticatio |
25120 | 6e 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 75 73 | n.can.be.used.to.authenticate.us |
25140 | 65 72 73 20 6f 72 20 63 6f 6d 70 75 74 65 72 73 20 69 6e 20 61 20 64 6f 6d 61 69 6e 2e 00 3a 61 | ers.or.computers.in.a.domain..:a |
25160 | 62 62 72 3a 60 6d 47 52 45 20 28 4d 75 6c 74 69 70 6f 69 6e 74 20 47 65 6e 65 72 69 63 20 52 6f | bbr:`mGRE.(Multipoint.Generic.Ro |
25180 | 75 74 69 6e 67 20 45 6e 63 61 70 73 75 6c 61 74 69 6f 6e 29 60 20 3a 72 66 63 3a 60 31 37 30 32 | uting.Encapsulation)`.:rfc:`1702 |
251a0 | 60 00 3a 63 66 67 63 6d 64 3a 60 61 64 76 2d 72 6f 75 74 65 72 20 3c 41 2e 42 2e 43 2e 44 3e 60 | `.:cfgcmd:`adv-router.<A.B.C.D>` |
251c0 | 20 e2 80 93 20 72 6f 75 74 65 72 20 69 64 2c 20 77 68 69 63 68 20 6c 69 6e 6b 20 61 64 76 65 72 | .....router.id,.which.link.adver |
251e0 | 74 69 73 65 6d 65 6e 74 73 20 6e 65 65 64 20 74 6f 20 62 65 20 72 65 76 69 65 77 65 64 2e 00 3a | tisements.need.to.be.reviewed..: |
25200 | 63 66 67 63 6d 64 3a 60 73 65 6c 66 2d 6f 72 69 67 69 6e 61 74 65 60 20 64 69 73 70 6c 61 79 73 | cfgcmd:`self-originate`.displays |
25220 | 20 6f 6e 6c 79 20 73 65 6c 66 2d 6f 72 69 67 69 6e 61 74 65 64 20 4c 53 41 73 20 66 72 6f 6d 20 | .only.self-originated.LSAs.from. |
25240 | 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2e 00 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 73 | the.local.router..:cfgcmd:`set.s |
25260 | 65 72 76 69 63 65 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 20 69 6e 74 65 72 66 61 63 65 20 | ervice.conntrack-sync.interface. |
25280 | 65 74 68 30 20 70 65 65 72 20 31 39 32 2e 31 36 38 2e 30 2e 32 35 30 60 00 3a 63 6f 64 65 3a 60 | eth0.peer.192.168.0.250`.:code:` |
252a0 | 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 75 72 6c 2d 66 69 6c 74 65 72 69 | set.service.webproxy.url-filteri |
252c0 | 6e 67 20 73 71 75 69 64 67 75 61 72 64 20 61 75 74 6f 2d 75 70 64 61 74 65 20 75 70 64 61 74 65 | ng.squidguard.auto-update.update |
252e0 | 2d 68 6f 75 72 20 32 33 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 | -hour.23`.:code:`set.service.web |
25300 | 70 72 6f 78 79 20 75 72 6c 2d 66 69 6c 74 65 72 69 6e 67 20 73 71 75 69 64 67 75 61 72 64 20 62 | proxy.url-filtering.squidguard.b |
25320 | 6c 6f 63 6b 2d 63 61 74 65 67 6f 72 79 20 61 64 73 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 | lock-category.ads`.:code:`set.se |
25340 | 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 75 72 6c 2d 66 69 6c 74 65 72 69 6e 67 20 73 71 75 | rvice.webproxy.url-filtering.squ |
25360 | 69 64 67 75 61 72 64 20 62 6c 6f 63 6b 2d 63 61 74 65 67 6f 72 79 20 6d 61 6c 77 61 72 65 60 00 | idguard.block-category.malware`. |
25380 | 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 77 68 69 74 | :code:`set.service.webproxy.whit |
253a0 | 65 6c 69 73 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 2d 61 64 64 72 65 73 73 20 31 39 32 2e 30 2e | elist.destination-address.192.0. |
253c0 | 32 2e 30 2f 32 34 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 | 2.0/24`.:code:`set.service.webpr |
253e0 | 6f 78 79 20 77 68 69 74 65 6c 69 73 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 2d 61 64 64 72 65 73 | oxy.whitelist.destination-addres |
25400 | 73 20 31 39 38 2e 35 31 2e 31 30 30 2e 33 33 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 72 76 | s.198.51.100.33`.:code:`set.serv |
25420 | 69 63 65 20 77 65 62 70 72 6f 78 79 20 77 68 69 74 65 6c 69 73 74 20 73 6f 75 72 63 65 2d 61 64 | ice.webproxy.whitelist.source-ad |
25440 | 64 72 65 73 73 20 31 39 32 2e 31 36 38 2e 31 2e 32 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 | dress.192.168.1.2`.:code:`set.se |
25460 | 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 77 68 69 74 65 6c 69 73 74 20 73 6f 75 72 63 65 2d | rvice.webproxy.whitelist.source- |
25480 | 61 64 64 72 65 73 73 20 31 39 32 2e 31 36 38 2e 32 2e 30 2f 32 34 60 00 3a 6c 61 73 74 70 72 6f | address.192.168.2.0/24`.:lastpro |
254a0 | 6f 66 72 65 61 64 3a 32 30 32 31 2d 30 37 2d 31 32 00 3a 6f 70 63 6d 64 3a 60 67 65 6e 65 72 61 | ofread:2021-07-12.:opcmd:`genera |
254c0 | 74 65 20 70 6b 69 20 77 69 72 65 67 75 61 72 64 20 6b 65 79 2d 70 61 69 72 60 2e 00 3a 72 65 66 | te.pki.wireguard.key-pair`..:ref |
254e0 | 3a 60 72 6f 75 74 69 6e 67 2d 62 67 70 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 62 67 70 | :`routing-bgp`.:ref:`routing-bgp |
25500 | 60 3a 20 60 60 73 65 74 20 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 70 72 6f 74 6f 63 6f | `:.``set.vrf.name.<name>.protoco |
25520 | 6c 73 20 62 67 70 20 2e 2e 2e 60 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 69 73 69 73 60 | ls.bgp....``.:ref:`routing-isis` |
25540 | 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 69 73 69 73 60 3a 20 60 60 73 65 74 20 76 72 66 20 | .:ref:`routing-isis`:.``set.vrf. |
25560 | 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 70 72 6f 74 6f 63 6f 6c 73 20 69 73 69 73 20 2e 2e 2e 60 60 | name.<name>.protocols.isis....`` |
25580 | 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 6f 73 70 66 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 | .:ref:`routing-ospf`.:ref:`routi |
255a0 | 6e 67 2d 6f 73 70 66 60 3a 20 60 60 73 65 74 20 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 | ng-ospf`:.``set.vrf.name.<name>. |
255c0 | 70 72 6f 74 6f 63 6f 6c 73 20 6f 73 70 66 20 2e 2e 2e 60 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 | protocols.ospf....``.:ref:`routi |
255e0 | 6e 67 2d 6f 73 70 66 76 33 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 6f 73 70 66 76 33 60 | ng-ospfv3`.:ref:`routing-ospfv3` |
25600 | 3a 20 60 60 73 65 74 20 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 70 72 6f 74 6f 63 6f 6c | :.``set.vrf.name.<name>.protocol |
25620 | 73 20 6f 73 70 66 76 33 20 2e 2e 2e 60 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 73 74 61 | s.ospfv3....``.:ref:`routing-sta |
25640 | 74 69 63 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 73 74 61 74 69 63 60 3a 20 60 60 73 65 | tic`.:ref:`routing-static`:.``se |
25660 | 74 20 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 70 72 6f 74 6f 63 6f 6c 73 20 73 74 61 74 | t.vrf.name.<name>.protocols.stat |
25680 | 69 63 20 2e 2e 2e 60 60 00 3a 72 66 63 3a 60 32 31 33 31 60 20 73 74 61 74 65 73 3a 20 54 68 65 | ic....``.:rfc:`2131`.states:.The |
256a0 | 20 63 6c 69 65 6e 74 20 4d 41 59 20 63 68 6f 6f 73 65 20 74 6f 20 65 78 70 6c 69 63 69 74 6c 79 | .client.MAY.choose.to.explicitly |
256c0 | 20 70 72 6f 76 69 64 65 20 74 68 65 20 69 64 65 6e 74 69 66 69 65 72 20 74 68 72 6f 75 67 68 20 | .provide.the.identifier.through. |
256e0 | 74 68 65 20 27 63 6c 69 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 27 20 6f 70 74 69 6f 6e 2e 20 | the.'client.identifier'.option.. |
25700 | 49 66 20 74 68 65 20 63 6c 69 65 6e 74 20 73 75 70 70 6c 69 65 73 20 61 20 27 63 6c 69 65 6e 74 | If.the.client.supplies.a.'client |
25720 | 20 69 64 65 6e 74 69 66 69 65 72 27 2c 20 74 68 65 20 63 6c 69 65 6e 74 20 4d 55 53 54 20 75 73 | .identifier',.the.client.MUST.us |
25740 | 65 20 74 68 65 20 73 61 6d 65 20 27 63 6c 69 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 27 20 69 | e.the.same.'client.identifier'.i |
25760 | 6e 20 61 6c 6c 20 73 75 62 73 65 71 75 65 6e 74 20 6d 65 73 73 61 67 65 73 2c 20 61 6e 64 20 74 | n.all.subsequent.messages,.and.t |
25780 | 68 65 20 73 65 72 76 65 72 20 4d 55 53 54 20 75 73 65 20 74 68 61 74 20 69 64 65 6e 74 69 66 69 | he.server.MUST.use.that.identifi |
257a0 | 65 72 20 74 6f 20 69 64 65 6e 74 69 66 79 20 74 68 65 20 63 6c 69 65 6e 74 2e 00 3a 72 66 63 3a | er.to.identify.the.client..:rfc: |
257c0 | 60 32 31 33 36 60 20 42 61 73 65 64 00 3a 72 66 63 3a 60 32 33 32 38 60 2c 20 74 68 65 20 73 75 | `2136`.Based.:rfc:`2328`,.the.su |
257e0 | 63 63 65 73 73 6f 72 20 74 6f 20 3a 72 66 63 3a 60 31 35 38 33 60 2c 20 73 75 67 67 65 73 74 73 | ccessor.to.:rfc:`1583`,.suggests |
25800 | 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 73 65 63 74 69 6f 6e 20 47 2e 32 20 28 63 68 61 6e 67 | .according.to.section.G.2.(chang |
25820 | 65 73 29 20 69 6e 20 73 65 63 74 69 6f 6e 20 31 36 2e 34 2e 31 20 61 20 63 68 61 6e 67 65 20 74 | es).in.section.16.4.1.a.change.t |
25840 | 6f 20 74 68 65 20 70 61 74 68 20 70 72 65 66 65 72 65 6e 63 65 20 61 6c 67 6f 72 69 74 68 6d 20 | o.the.path.preference.algorithm. |
25860 | 74 68 61 74 20 70 72 65 76 65 6e 74 73 20 70 6f 73 73 69 62 6c 65 20 72 6f 75 74 69 6e 67 20 6c | that.prevents.possible.routing.l |
25880 | 6f 6f 70 73 20 74 68 61 74 20 77 65 72 65 20 70 6f 73 73 69 62 6c 65 20 69 6e 20 74 68 65 20 6f | oops.that.were.possible.in.the.o |
258a0 | 6c 64 20 76 65 72 73 69 6f 6e 20 6f 66 20 4f 53 50 46 76 32 2e 20 4d 6f 72 65 20 73 70 65 63 69 | ld.version.of.OSPFv2..More.speci |
258c0 | 66 69 63 61 6c 6c 79 20 69 74 20 64 65 6d 61 6e 64 73 20 74 68 61 74 20 69 6e 74 65 72 2d 61 72 | fically.it.demands.that.inter-ar |
258e0 | 65 61 20 70 61 74 68 73 20 61 6e 64 20 69 6e 74 72 61 2d 61 72 65 61 20 62 61 63 6b 62 6f 6e 65 | ea.paths.and.intra-area.backbone |
25900 | 20 70 61 74 68 20 61 72 65 20 6e 6f 77 20 6f 66 20 65 71 75 61 6c 20 70 72 65 66 65 72 65 6e 63 | .path.are.now.of.equal.preferenc |
25920 | 65 20 62 75 74 20 73 74 69 6c 6c 20 62 6f 74 68 20 70 72 65 66 65 72 72 65 64 20 74 6f 20 65 78 | e.but.still.both.preferred.to.ex |
25940 | 74 65 72 6e 61 6c 20 70 61 74 68 73 2e 00 3a 76 79 74 61 73 6b 3a 60 54 33 36 34 32 60 20 64 65 | ternal.paths..:vytask:`T3642`.de |
25960 | 73 63 72 69 62 65 73 20 61 20 6e 65 77 20 43 4c 49 20 73 75 62 73 79 73 74 65 6d 20 74 68 61 74 | scribes.a.new.CLI.subsystem.that |
25980 | 20 73 65 72 76 65 73 20 61 73 20 61 20 22 63 65 72 74 73 74 6f 72 65 22 20 74 6f 20 61 6c 6c 20 | .serves.as.a."certstore".to.all. |
259a0 | 73 65 72 76 69 63 65 73 20 72 65 71 75 69 72 69 6e 67 20 61 6e 79 20 6b 69 6e 64 20 6f 66 20 65 | services.requiring.any.kind.of.e |
259c0 | 6e 63 72 79 70 74 69 6f 6e 20 6b 65 79 28 73 29 2e 20 49 6e 20 73 68 6f 72 74 2c 20 70 75 62 6c | ncryption.key(s)..In.short,.publ |
259e0 | 69 63 20 61 6e 64 20 70 72 69 76 61 74 65 20 63 65 72 74 69 66 69 63 61 74 65 73 20 61 72 65 20 | ic.and.private.certificates.are. |
25a00 | 6e 6f 77 20 73 74 6f 72 65 64 20 69 6e 20 50 4b 43 53 23 38 20 66 6f 72 6d 61 74 20 69 6e 20 74 | now.stored.in.PKCS#8.format.in.t |
25a20 | 68 65 20 72 65 67 75 6c 61 72 20 56 79 4f 53 20 43 4c 49 2e 20 4b 65 79 73 20 63 61 6e 20 6e 6f | he.regular.VyOS.CLI..Keys.can.no |
25a40 | 77 20 62 65 20 61 64 64 65 64 2c 20 65 64 69 74 65 64 2c 20 61 6e 64 20 64 65 6c 65 74 65 64 20 | w.be.added,.edited,.and.deleted. |
25a60 | 75 73 69 6e 67 20 74 68 65 20 72 65 67 75 6c 61 72 20 73 65 74 2f 65 64 69 74 2f 64 65 6c 65 74 | using.the.regular.set/edit/delet |
25a80 | 65 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 73 2e 00 3c 31 2d 36 35 35 33 35 3e 3a 20 4e 75 6d 62 65 | e.CLI.commands..<1-65535>:.Numbe |
25aa0 | 72 65 64 20 70 6f 72 74 2e 00 3c 61 61 3a 6e 6e 3a 6e 6e 3e 3a 20 45 78 74 65 6e 64 65 64 20 63 | red.port..<aa:nn:nn>:.Extended.c |
25ac0 | 6f 6d 6d 75 6e 69 74 79 20 6c 69 73 74 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e | ommunity.list.regular.expression |
25ae0 | 2e 00 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 2f 78 3e 3a 20 49 50 76 36 20 70 72 65 66 | ..<h:h:h:h:h:h:h:h/x>:.IPv6.pref |
25b00 | 69 78 20 74 6f 20 6d 61 74 63 68 2e 00 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 2d 3c | ix.to.match..<h:h:h:h:h:h:h:h>-< |
25b20 | 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 3a 20 49 50 76 36 20 72 61 6e 67 65 20 74 6f 20 | h:h:h:h:h:h:h:h>:.IPv6.range.to. |
25b40 | 6d 61 74 63 68 2e 00 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 3a 20 49 50 76 36 20 61 | match..<h:h:h:h:h:h:h:h>:.IPv6.a |
25b60 | 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 3c 6c 69 6e 65 73 3e 00 3c 6e 75 6d 62 65 72 | ddress.to.match..<lines>.<number |
25b80 | 3e 20 6d 75 73 74 20 62 65 20 66 72 6f 6d 20 33 34 20 2d 20 31 37 33 2e 20 46 6f 72 20 38 30 20 | >.must.be.from.34.-.173..For.80. |
25ba0 | 4d 48 7a 20 63 68 61 6e 6e 65 6c 73 20 69 74 20 73 68 6f 75 6c 64 20 62 65 20 63 68 61 6e 6e 65 | MHz.channels.it.should.be.channe |
25bc0 | 6c 20 2b 20 36 2e 00 3c 6e 75 6d 62 65 72 3e 20 e2 80 93 20 61 72 65 61 20 69 64 65 6e 74 69 66 | l.+.6..<number>.....area.identif |
25be0 | 69 65 72 20 74 68 72 6f 75 67 68 20 77 68 69 63 68 20 61 20 76 69 72 74 75 61 6c 20 6c 69 6e 6b | ier.through.which.a.virtual.link |
25c00 | 20 67 6f 65 73 2e 20 3c 41 2e 42 2e 43 2e 44 3e 20 e2 80 93 20 41 42 52 20 72 6f 75 74 65 72 2d | .goes..<A.B.C.D>.....ABR.router- |
25c20 | 69 64 20 77 69 74 68 20 77 68 69 63 68 20 61 20 76 69 72 74 75 61 6c 20 6c 69 6e 6b 20 69 73 20 | id.with.which.a.virtual.link.is. |
25c40 | 65 73 74 61 62 6c 69 73 68 65 64 2e 20 56 69 72 74 75 61 6c 20 6c 69 6e 6b 20 6d 75 73 74 20 62 | established..Virtual.link.must.b |
25c60 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 62 6f 74 68 20 72 6f 75 74 65 72 73 2e 00 3c 70 | e.configured.on.both.routers..<p |
25c80 | 6f 72 74 20 6e 61 6d 65 3e 3a 20 4e 61 6d 65 64 20 70 6f 72 74 20 28 61 6e 79 20 6e 61 6d 65 20 | ort.name>:.Named.port.(any.name. |
25ca0 | 69 6e 20 2f 65 74 63 2f 73 65 72 76 69 63 65 73 2c 20 65 2e 67 2e 2c 20 68 74 74 70 29 2e 00 3c | in./etc/services,.e.g.,.http)..< |
25cc0 | 72 74 20 61 61 3a 6e 6e 3a 6e 6e 3e 3a 20 52 6f 75 74 65 20 54 61 72 67 65 74 20 72 65 67 75 6c | rt.aa:nn:nn>:.Route.Target.regul |
25ce0 | 61 72 20 65 78 70 72 65 73 73 69 6f 6e 2e 00 3c 73 6f 6f 20 61 61 3a 6e 6e 3a 6e 6e 3e 3a 20 53 | ar.expression..<soo.aa:nn:nn>:.S |
25d00 | 69 74 65 20 6f 66 20 4f 72 69 67 69 6e 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e | ite.of.Origin.regular.expression |
25d20 | 2e 00 3c 73 74 61 72 74 3e 2d 3c 65 6e 64 3e 3a 20 4e 75 6d 62 65 72 65 64 20 70 6f 72 74 20 72 | ..<start>-<end>:.Numbered.port.r |
25d40 | 61 6e 67 65 20 28 65 2e 67 2e 2c 20 31 30 30 31 2d 31 30 30 35 29 2e 00 3c 78 2e 78 2e 78 2e 78 | ange.(e.g.,.1001-1005)..<x.x.x.x |
25d60 | 2f 78 3e 3a 20 53 75 62 6e 65 74 20 74 6f 20 6d 61 74 63 68 2e 00 3c 78 2e 78 2e 78 2e 78 3e 2d | /x>:.Subnet.to.match..<x.x.x.x>- |
25d80 | 3c 78 2e 78 2e 78 2e 78 3e 3a 20 49 50 20 72 61 6e 67 65 20 74 6f 20 6d 61 74 63 68 2e 00 3c 78 | <x.x.x.x>:.IP.range.to.match..<x |
25da0 | 2e 78 2e 78 2e 78 3e 3a 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 41 20 | .x.x.x>:.IP.address.to.match..A. |
25dc0 | 2a 2a 64 6f 6d 61 69 6e 20 67 72 6f 75 70 2a 2a 20 72 65 70 72 65 73 65 6e 74 73 20 61 20 63 6f | **domain.group**.represents.a.co |
25de0 | 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 64 6f 6d 61 69 6e 73 2e 00 41 20 2a 2a 6d 61 63 20 67 72 6f | llection.of.domains..A.**mac.gro |
25e00 | 75 70 2a 2a 20 72 65 70 72 65 73 65 6e 74 73 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 | up**.represents.a.collection.of. |
25e20 | 6d 61 63 20 61 64 64 72 65 73 73 65 73 2e 00 41 20 2a 2a 70 6f 72 74 20 67 72 6f 75 70 2a 2a 20 | mac.addresses..A.**port.group**. |
25e40 | 72 65 70 72 65 73 65 6e 74 73 20 6f 6e 6c 79 20 70 6f 72 74 20 6e 75 6d 62 65 72 73 2c 20 6e 6f | represents.only.port.numbers,.no |
25e60 | 74 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 2e 20 50 6f 72 74 20 67 72 6f 75 70 73 20 63 61 6e 20 | t.the.protocol..Port.groups.can. |
25e80 | 62 65 20 72 65 66 65 72 65 6e 63 65 64 20 66 6f 72 20 65 69 74 68 65 72 20 54 43 50 20 6f 72 20 | be.referenced.for.either.TCP.or. |
25ea0 | 55 44 50 2e 20 49 74 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 68 61 74 20 54 43 50 20 | UDP..It.is.recommended.that.TCP. |
25ec0 | 61 6e 64 20 55 44 50 20 67 72 6f 75 70 73 20 61 72 65 20 63 72 65 61 74 65 64 20 73 65 70 61 72 | and.UDP.groups.are.created.separ |
25ee0 | 61 74 65 6c 79 20 74 6f 20 61 76 6f 69 64 20 61 63 63 69 64 65 6e 74 61 6c 6c 79 20 66 69 6c 74 | ately.to.avoid.accidentally.filt |
25f00 | 65 72 69 6e 67 20 75 6e 6e 65 63 65 73 73 61 72 79 20 70 6f 72 74 73 2e 20 52 61 6e 67 65 73 20 | ering.unnecessary.ports..Ranges. |
25f20 | 6f 66 20 70 6f 72 74 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 62 79 20 75 73 69 | of.ports.can.be.specified.by.usi |
25f40 | 6e 67 20 60 2d 60 2e 00 41 20 2a 62 69 74 2a 20 69 73 20 77 72 69 74 74 65 6e 20 61 73 20 2a 2a | ng.`-`..A.*bit*.is.written.as.** |
25f60 | 62 69 74 2a 2a 2c 00 41 20 3a 61 62 62 72 3a 60 4e 49 53 20 28 4e 65 74 77 6f 72 6b 20 49 6e 66 | bit**,.A.:abbr:`NIS.(Network.Inf |
25f80 | 6f 72 6d 61 74 69 6f 6e 20 53 65 72 76 69 63 65 29 60 20 64 6f 6d 61 69 6e 20 63 61 6e 20 62 65 | ormation.Service)`.domain.can.be |
25fa0 | 20 73 65 74 20 74 6f 20 62 65 20 75 73 65 64 20 66 6f 72 20 44 48 43 50 76 36 20 63 6c 69 65 6e | .set.to.be.used.for.DHCPv6.clien |
25fc0 | 74 73 2e 00 41 20 42 47 50 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 64 69 76 69 64 65 73 20 | ts..A.BGP.confederation.divides. |
25fe0 | 6f 75 72 20 41 53 20 69 6e 74 6f 20 73 75 62 2d 41 53 65 73 20 74 6f 20 72 65 64 75 63 65 20 74 | our.AS.into.sub-ASes.to.reduce.t |
26000 | 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 72 65 71 75 69 72 65 64 20 49 42 47 50 20 70 65 65 72 69 | he.number.of.required.IBGP.peeri |
26020 | 6e 67 73 2e 20 57 69 74 68 69 6e 20 61 20 73 75 62 2d 41 53 20 77 65 20 73 74 69 6c 6c 20 72 65 | ngs..Within.a.sub-AS.we.still.re |
26040 | 71 75 69 72 65 20 66 75 6c 6c 2d 6d 65 73 68 20 49 42 47 50 20 62 75 74 20 62 65 74 77 65 65 6e | quire.full-mesh.IBGP.but.between |
26060 | 20 74 68 65 73 65 20 73 75 62 2d 41 53 65 73 20 77 65 20 75 73 65 20 73 6f 6d 65 74 68 69 6e 67 | .these.sub-ASes.we.use.something |
26080 | 20 74 68 61 74 20 6c 6f 6f 6b 73 20 6c 69 6b 65 20 45 42 47 50 20 62 75 74 20 62 65 68 61 76 65 | .that.looks.like.EBGP.but.behave |
260a0 | 73 20 6c 69 6b 65 20 49 42 47 50 20 28 63 61 6c 6c 65 64 20 63 6f 6e 66 65 64 65 72 61 74 69 6f | s.like.IBGP.(called.confederatio |
260c0 | 6e 20 42 47 50 29 2e 20 43 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 20 | n.BGP)..Confederation.mechanism. |
260e0 | 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 30 36 35 60 00 41 20 42 47 | is.described.in.:rfc:`5065`.A.BG |
26100 | 50 2d 73 70 65 61 6b 69 6e 67 20 72 6f 75 74 65 72 20 6c 69 6b 65 20 56 79 4f 53 20 63 61 6e 20 | P-speaking.router.like.VyOS.can. |
26120 | 72 65 74 72 69 65 76 65 20 52 4f 41 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 52 50 | retrieve.ROA.information.from.RP |
26140 | 4b 49 20 22 52 65 6c 79 69 6e 67 20 50 61 72 74 79 20 73 6f 66 74 77 61 72 65 22 20 28 6f 66 74 | KI."Relying.Party.software".(oft |
26160 | 65 6e 20 6a 75 73 74 20 63 61 6c 6c 65 64 20 61 6e 20 22 52 50 4b 49 20 73 65 72 76 65 72 22 20 | en.just.called.an."RPKI.server". |
26180 | 6f 72 20 22 52 50 4b 49 20 76 61 6c 69 64 61 74 6f 72 22 29 20 62 79 20 75 73 69 6e 67 20 3a 61 | or."RPKI.validator").by.using.:a |
261a0 | 62 62 72 3a 60 52 54 52 20 28 52 50 4b 49 20 74 6f 20 52 6f 75 74 65 72 29 60 20 70 72 6f 74 6f | bbr:`RTR.(RPKI.to.Router)`.proto |
261c0 | 63 6f 6c 2e 20 54 68 65 72 65 20 61 72 65 20 73 65 76 65 72 61 6c 20 6f 70 65 6e 20 73 6f 75 72 | col..There.are.several.open.sour |
261e0 | 63 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 74 6f 20 63 68 6f 6f 73 65 20 66 72 6f | ce.implementations.to.choose.fro |
26200 | 6d 2c 20 73 75 63 68 20 61 73 20 4e 4c 4e 65 74 4c 61 62 73 27 20 52 6f 75 74 69 6e 61 74 6f 72 | m,.such.as.NLNetLabs'.Routinator |
26220 | 5f 20 28 77 72 69 74 74 65 6e 20 69 6e 20 52 75 73 74 29 2c 20 43 6c 6f 75 64 66 6c 61 72 65 27 | _.(written.in.Rust),.Cloudflare' |
26240 | 73 20 47 6f 52 54 52 5f 20 61 6e 64 20 4f 63 74 6f 52 50 4b 49 5f 20 28 77 72 69 74 74 65 6e 20 | s.GoRTR_.and.OctoRPKI_.(written. |
26260 | 69 6e 20 47 6f 29 2c 20 61 6e 64 20 52 49 50 45 20 4e 43 43 27 73 20 52 50 4b 49 20 56 61 6c 69 | in.Go),.and.RIPE.NCC's.RPKI.Vali |
26280 | 64 61 74 6f 72 5f 20 28 77 72 69 74 74 65 6e 20 69 6e 20 4a 61 76 61 29 2e 20 54 68 65 20 52 54 | dator_.(written.in.Java)..The.RT |
262a0 | 52 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a | R.protocol.is.described.in.:rfc: |
262c0 | 60 38 32 31 30 60 2e 00 41 20 42 72 69 64 67 65 20 69 73 20 61 20 77 61 79 20 74 6f 20 63 6f 6e | `8210`..A.Bridge.is.a.way.to.con |
262e0 | 6e 65 63 74 20 74 77 6f 20 45 74 68 65 72 6e 65 74 20 73 65 67 6d 65 6e 74 73 20 74 6f 67 65 74 | nect.two.Ethernet.segments.toget |
26300 | 68 65 72 20 69 6e 20 61 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 77 61 | her.in.a.protocol.independent.wa |
26320 | 79 2e 20 50 61 63 6b 65 74 73 20 61 72 65 20 66 6f 72 77 61 72 64 65 64 20 62 61 73 65 64 20 6f | y..Packets.are.forwarded.based.o |
26340 | 6e 20 45 74 68 65 72 6e 65 74 20 61 64 64 72 65 73 73 2c 20 72 61 74 68 65 72 20 74 68 61 6e 20 | n.Ethernet.address,.rather.than. |
26360 | 49 50 20 61 64 64 72 65 73 73 20 28 6c 69 6b 65 20 61 20 72 6f 75 74 65 72 29 2e 20 53 69 6e 63 | IP.address.(like.a.router)..Sinc |
26380 | 65 20 66 6f 72 77 61 72 64 69 6e 67 20 69 73 20 64 6f 6e 65 20 61 74 20 4c 61 79 65 72 20 32 2c | e.forwarding.is.done.at.Layer.2, |
263a0 | 20 61 6c 6c 20 70 72 6f 74 6f 63 6f 6c 73 20 63 61 6e 20 67 6f 20 74 72 61 6e 73 70 61 72 65 6e | .all.protocols.can.go.transparen |
263c0 | 74 6c 79 20 74 68 72 6f 75 67 68 20 61 20 62 72 69 64 67 65 2e 20 54 68 65 20 4c 69 6e 75 78 20 | tly.through.a.bridge..The.Linux. |
263e0 | 62 72 69 64 67 65 20 63 6f 64 65 20 69 6d 70 6c 65 6d 65 6e 74 73 20 61 20 73 75 62 73 65 74 20 | bridge.code.implements.a.subset. |
26400 | 6f 66 20 74 68 65 20 41 4e 53 49 2f 49 45 45 45 20 38 30 32 2e 31 64 20 73 74 61 6e 64 61 72 64 | of.the.ANSI/IEEE.802.1d.standard |
26420 | 2e 00 41 20 47 52 45 20 74 75 6e 6e 65 6c 20 6f 70 65 72 61 74 65 73 20 61 74 20 6c 61 79 65 72 | ..A.GRE.tunnel.operates.at.layer |
26440 | 20 33 20 6f 66 20 74 68 65 20 4f 53 49 20 6d 6f 64 65 6c 20 61 6e 64 20 69 73 20 72 65 70 72 65 | .3.of.the.OSI.model.and.is.repre |
26460 | 73 65 6e 74 65 64 20 62 79 20 49 50 20 70 72 6f 74 6f 63 6f 6c 20 34 37 2e 20 54 68 65 20 6d 61 | sented.by.IP.protocol.47..The.ma |
26480 | 69 6e 20 62 65 6e 65 66 69 74 20 6f 66 20 61 20 47 52 45 20 74 75 6e 6e 65 6c 20 69 73 20 74 68 | in.benefit.of.a.GRE.tunnel.is.th |
264a0 | 61 74 20 79 6f 75 20 61 72 65 20 61 62 6c 65 20 74 6f 20 63 61 72 72 79 20 6d 75 6c 74 69 70 6c | at.you.are.able.to.carry.multipl |
264c0 | 65 20 70 72 6f 74 6f 63 6f 6c 73 20 69 6e 73 69 64 65 20 74 68 65 20 73 61 6d 65 20 74 75 6e 6e | e.protocols.inside.the.same.tunn |
264e0 | 65 6c 2e 20 47 52 45 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 73 20 6d 75 6c 74 69 63 61 73 74 20 | el..GRE.also.supports.multicast. |
26500 | 74 72 61 66 66 69 63 20 61 6e 64 20 73 75 70 70 6f 72 74 73 20 72 6f 75 74 69 6e 67 20 70 72 6f | traffic.and.supports.routing.pro |
26520 | 74 6f 63 6f 6c 73 20 74 68 61 74 20 6c 65 76 65 72 61 67 65 20 6d 75 6c 74 69 63 61 73 74 20 74 | tocols.that.leverage.multicast.t |
26540 | 6f 20 66 6f 72 6d 20 6e 65 69 67 68 62 6f 72 20 61 64 6a 61 63 65 6e 63 69 65 73 2e 00 41 20 52 | o.form.neighbor.adjacencies..A.R |
26560 | 75 6c 65 2d 53 65 74 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 65 76 65 72 79 20 | ule-Set.can.be.applied.to.every. |
26580 | 69 6e 74 65 72 66 61 63 65 3a 00 41 20 53 4e 54 50 20 73 65 72 76 65 72 20 61 64 64 72 65 73 73 | interface:.A.SNTP.server.address |
265a0 | 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 66 6f 72 20 44 48 43 50 76 36 20 63 6c 69 | .can.be.specified.for.DHCPv6.cli |
265c0 | 65 6e 74 73 2e 00 41 20 56 52 46 20 64 65 76 69 63 65 20 69 73 20 63 72 65 61 74 65 64 20 77 69 | ents..A.VRF.device.is.created.wi |
265e0 | 74 68 20 61 6e 20 61 73 73 6f 63 69 61 74 65 64 20 72 6f 75 74 65 20 74 61 62 6c 65 2e 20 4e 65 | th.an.associated.route.table..Ne |
26600 | 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 74 68 65 6e 20 65 6e 73 6c 61 76 | twork.interfaces.are.then.enslav |
26620 | 65 64 20 74 6f 20 61 20 56 52 46 20 64 65 76 69 63 65 2e 00 41 20 56 79 4f 53 20 47 52 45 20 74 | ed.to.a.VRF.device..A.VyOS.GRE.t |
26640 | 75 6e 6e 65 6c 20 63 61 6e 20 63 61 72 72 79 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 | unnel.can.carry.both.IPv4.and.IP |
26660 | 76 36 20 74 72 61 66 66 69 63 20 61 6e 64 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 63 72 65 61 74 | v6.traffic.and.can.also.be.creat |
26680 | 65 64 20 6f 76 65 72 20 65 69 74 68 65 72 20 49 50 76 34 20 28 67 72 65 29 20 6f 72 20 49 50 76 | ed.over.either.IPv4.(gre).or.IPv |
266a0 | 36 20 28 69 70 36 67 72 65 29 2e 00 41 20 56 79 4f 53 20 72 6f 75 74 65 72 20 77 69 74 68 20 74 | 6.(ip6gre)..A.VyOS.router.with.t |
266c0 | 77 6f 20 69 6e 74 65 72 66 61 63 65 73 20 2d 20 65 74 68 30 20 28 57 41 4e 29 20 61 6e 64 20 65 | wo.interfaces.-.eth0.(WAN).and.e |
266e0 | 74 68 31 20 28 4c 41 4e 29 20 2d 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 69 6d 70 6c 65 | th1.(LAN).-.is.required.to.imple |
26700 | 6d 65 6e 74 20 61 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 44 4e 53 20 63 6f 6e 66 69 67 75 | ment.a.split-horizon.DNS.configu |
26720 | 72 61 74 69 6f 6e 20 66 6f 72 20 65 78 61 6d 70 6c 65 2e 63 6f 6d 2e 00 41 20 62 61 73 69 63 20 | ration.for.example.com..A.basic. |
26740 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 72 65 71 75 69 72 65 73 20 61 20 74 75 6e 6e 65 6c 20 | configuration.requires.a.tunnel. |
26760 | 73 6f 75 72 63 65 20 28 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 29 2c 20 61 20 74 75 6e 6e 65 | source.(source-address),.a.tunne |
26780 | 6c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 28 72 65 6d 6f 74 65 29 2c 20 61 6e 20 65 6e 63 61 70 | l.destination.(remote),.an.encap |
267a0 | 73 75 6c 61 74 69 6f 6e 20 74 79 70 65 20 28 67 72 65 29 2c 20 61 6e 64 20 61 6e 20 61 64 64 72 | sulation.type.(gre),.and.an.addr |
267c0 | 65 73 73 20 28 69 70 76 34 2f 69 70 76 36 29 2e 20 42 65 6c 6f 77 20 69 73 20 61 20 62 61 73 69 | ess.(ipv4/ipv6)..Below.is.a.basi |
267e0 | 63 20 49 50 76 34 20 6f 6e 6c 79 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 78 61 6d 70 6c | c.IPv4.only.configuration.exampl |
26800 | 65 20 74 61 6b 65 6e 20 66 72 6f 6d 20 61 20 56 79 4f 53 20 72 6f 75 74 65 72 20 61 6e 64 20 61 | e.taken.from.a.VyOS.router.and.a |
26820 | 20 43 69 73 63 6f 20 49 4f 53 20 72 6f 75 74 65 72 2e 20 54 68 65 20 6d 61 69 6e 20 64 69 66 66 | .Cisco.IOS.router..The.main.diff |
26840 | 65 72 65 6e 63 65 20 62 65 74 77 65 65 6e 20 74 68 65 73 65 20 74 77 6f 20 63 6f 6e 66 69 67 75 | erence.between.these.two.configu |
26860 | 72 61 74 69 6f 6e 73 20 69 73 20 74 68 61 74 20 56 79 4f 53 20 72 65 71 75 69 72 65 73 20 79 6f | rations.is.that.VyOS.requires.yo |
26880 | 75 20 65 78 70 6c 69 63 69 74 6c 79 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 65 6e 63 61 70 | u.explicitly.configure.the.encap |
268a0 | 73 75 6c 61 74 69 6f 6e 20 74 79 70 65 2e 20 54 68 65 20 43 69 73 63 6f 20 72 6f 75 74 65 72 20 | sulation.type..The.Cisco.router. |
268c0 | 64 65 66 61 75 6c 74 73 20 74 6f 20 47 52 45 20 49 50 20 6f 74 68 65 72 77 69 73 65 20 69 74 20 | defaults.to.GRE.IP.otherwise.it. |
268e0 | 77 6f 75 6c 64 20 68 61 76 65 20 74 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 77 | would.have.to.be.configured.as.w |
26900 | 65 6c 6c 2e 00 41 20 62 61 73 69 63 20 69 6e 74 72 6f 64 75 63 74 69 6f 6e 20 74 6f 20 7a 6f 6e | ell..A.basic.introduction.to.zon |
26920 | 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 73 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 60 | e-based.firewalls.can.be.found.` |
26940 | 68 65 72 65 20 3c 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 76 79 6f 73 2e 69 6f 2f 65 6e | here.<https://support.vyos.io/en |
26960 | 2f 6b 62 2f 61 72 74 69 63 6c 65 73 2f 61 2d 70 72 69 6d 65 72 2d 74 6f 2d 7a 6f 6e 65 2d 62 61 | /kb/articles/a-primer-to-zone-ba |
26980 | 73 65 64 2d 66 69 72 65 77 61 6c 6c 3e 60 5f 2c 20 61 6e 64 20 61 6e 20 65 78 61 6d 70 6c 65 20 | sed-firewall>`_,.and.an.example. |
269a0 | 61 74 20 3a 72 65 66 3a 60 65 78 61 6d 70 6c 65 73 2d 7a 6f 6e 65 2d 70 6f 6c 69 63 79 60 2e 00 | at.:ref:`examples-zone-policy`.. |
269c0 | 41 20 62 72 69 64 67 65 20 6e 61 6d 65 64 20 60 62 72 31 30 30 60 00 41 20 62 72 69 65 66 20 64 | A.bridge.named.`br100`.A.brief.d |
269e0 | 65 73 63 72 69 70 74 69 6f 6e 20 77 68 61 74 20 74 68 69 73 20 6e 65 74 77 6f 72 6b 20 69 73 20 | escription.what.this.network.is. |
26a00 | 61 6c 6c 20 61 62 6f 75 74 2e 00 41 20 63 6c 61 73 73 20 63 61 6e 20 68 61 76 65 20 6d 75 6c 74 | all.about..A.class.can.have.mult |
26a20 | 69 70 6c 65 20 6d 61 74 63 68 20 66 69 6c 74 65 72 73 3a 00 41 20 63 6f 6d 6d 6f 6e 20 65 78 61 | iple.match.filters:.A.common.exa |
26a40 | 6d 70 6c 65 20 69 73 20 74 68 65 20 63 61 73 65 20 6f 66 20 73 6f 6d 65 20 70 6f 6c 69 63 69 65 | mple.is.the.case.of.some.policie |
26a60 | 73 20 77 68 69 63 68 2c 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 65 66 66 65 63 74 69 76 | s.which,.in.order.to.be.effectiv |
26a80 | 65 2c 20 74 68 65 79 20 6e 65 65 64 20 74 6f 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 6e | e,.they.need.to.be.applied.to.an |
26aa0 | 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 69 73 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e | .interface.that.is.directly.conn |
26ac0 | 65 63 74 65 64 20 77 68 65 72 65 20 74 68 65 20 62 6f 74 74 6c 65 6e 65 63 6b 20 69 73 2e 20 49 | ected.where.the.bottleneck.is..I |
26ae0 | 66 20 79 6f 75 72 20 72 6f 75 74 65 72 20 69 73 20 6e 6f 74 20 64 69 72 65 63 74 6c 79 20 63 6f | f.your.router.is.not.directly.co |
26b00 | 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 62 6f 74 74 6c 65 6e 65 63 6b 2c 20 62 75 74 20 73 | nnected.to.the.bottleneck,.but.s |
26b20 | 6f 6d 65 20 68 6f 70 20 62 65 66 6f 72 65 20 69 74 2c 20 79 6f 75 20 63 61 6e 20 65 6d 75 6c 61 | ome.hop.before.it,.you.can.emula |
26b40 | 74 65 20 74 68 65 20 62 6f 74 74 6c 65 6e 65 63 6b 20 62 79 20 65 6d 62 65 64 64 69 6e 67 20 79 | te.the.bottleneck.by.embedding.y |
26b60 | 6f 75 72 20 6e 6f 6e 2d 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 20 63 6c | our.non-shaping.policy.into.a.cl |
26b80 | 61 73 73 66 75 6c 20 73 68 61 70 69 6e 67 20 6f 6e 65 20 73 6f 20 74 68 61 74 20 69 74 20 74 61 | assful.shaping.one.so.that.it.ta |
26ba0 | 6b 65 73 20 65 66 66 65 63 74 2e 00 41 20 63 6f 6d 70 6c 65 74 65 20 4c 44 41 50 20 61 75 74 68 | kes.effect..A.complete.LDAP.auth |
26bc0 | 20 4f 70 65 6e 56 50 4e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 75 6c 64 20 6c 6f 6f | .OpenVPN.configuration.could.loo |
26be0 | 6b 20 6c 69 6b 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 3a 00 41 20 | k.like.the.following.example:.A. |
26c00 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 78 61 6d 70 6c 65 20 63 61 6e 20 62 65 20 66 6f 75 | configuration.example.can.be.fou |
26c20 | 6e 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 20 49 6e 20 74 68 69 73 20 73 69 6d 70 | nd.in.this.section..In.this.simp |
26c40 | 6c 69 66 69 65 64 20 73 63 65 6e 61 72 69 6f 2c 20 6d 61 69 6e 20 74 68 69 6e 67 73 20 74 6f 20 | lified.scenario,.main.things.to. |
26c60 | 62 65 20 63 6f 6e 73 69 64 65 72 65 64 20 61 72 65 3a 00 41 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 | be.considered.are:.A.connection. |
26c80 | 61 74 74 65 6d 70 74 20 77 69 6c 6c 20 62 65 20 73 68 6f 77 6e 20 61 73 3a 00 41 20 64 65 66 61 | attempt.will.be.shown.as:.A.defa |
26ca0 | 75 6c 74 20 72 6f 75 74 65 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 69 6e 73 74 61 | ult.route.is.automatically.insta |
26cc0 | 6c 6c 65 64 20 6f 6e 63 65 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 75 70 2e 20 54 | lled.once.the.interface.is.up..T |
26ce0 | 6f 20 63 68 61 6e 67 65 20 74 68 69 73 20 62 65 68 61 76 69 6f 72 20 75 73 65 20 74 68 65 20 60 | o.change.this.behavior.use.the.` |
26d00 | 60 6e 6f 2d 64 65 66 61 75 6c 74 2d 72 6f 75 74 65 60 60 20 43 4c 49 20 6f 70 74 69 6f 6e 2e 00 | `no-default-route``.CLI.option.. |
26d20 | 41 20 64 65 73 63 72 69 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 61 64 64 65 64 20 66 6f 72 20 65 | A.description.can.be.added.for.e |
26d40 | 61 63 68 20 61 6e 64 20 65 76 65 72 79 20 75 6e 69 71 75 65 20 72 65 6c 61 79 20 49 44 2e 20 54 | ach.and.every.unique.relay.ID..T |
26d60 | 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 74 6f 20 64 69 73 74 69 6e 67 75 69 73 68 20 62 65 74 | his.is.useful.to.distinguish.bet |
26d80 | 77 65 65 6e 20 6d 75 6c 74 69 70 6c 65 20 64 69 66 66 65 72 65 6e 74 20 70 6f 72 74 73 2f 61 70 | ween.multiple.different.ports/ap |
26da0 | 70 6c 69 61 63 74 69 6f 6e 73 2e 00 41 20 64 69 73 61 62 6c 65 64 20 67 72 6f 75 70 20 77 69 6c | pliactions..A.disabled.group.wil |
26dc0 | 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 20 56 52 52 50 20 70 72 6f 63 65 | l.be.removed.from.the.VRRP.proce |
26de0 | 73 73 20 61 6e 64 20 79 6f 75 72 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 6e 6f 74 20 70 61 72 74 | ss.and.your.router.will.not.part |
26e00 | 69 63 69 70 61 74 65 20 69 6e 20 56 52 52 50 20 66 6f 72 20 74 68 61 74 20 56 52 49 44 2e 20 49 | icipate.in.VRRP.for.that.VRID..I |
26e20 | 74 20 77 69 6c 6c 20 64 69 73 61 70 70 65 61 72 20 66 72 6f 6d 20 6f 70 65 72 61 74 69 6f 6e 61 | t.will.disappear.from.operationa |
26e40 | 6c 20 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 20 6f 75 74 70 75 74 2c 20 72 61 74 68 65 72 20 74 | l.mode.commands.output,.rather.t |
26e60 | 68 61 6e 20 65 6e 74 65 72 20 74 68 65 20 62 61 63 6b 75 70 20 73 74 61 74 65 2e 00 41 20 64 6f | han.enter.the.backup.state..A.do |
26e80 | 6d 61 69 6e 20 6e 61 6d 65 20 69 73 20 74 68 65 20 6c 61 62 65 6c 20 28 6e 61 6d 65 29 20 61 73 | main.name.is.the.label.(name).as |
26ea0 | 73 69 67 6e 65 64 20 74 6f 20 61 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 61 6e 64 | signed.to.a.computer.network.and |
26ec0 | 20 69 73 20 74 68 75 73 20 75 6e 69 71 75 65 2e 20 56 79 4f 53 20 61 70 70 65 6e 64 73 20 74 68 | .is.thus.unique..VyOS.appends.th |
26ee0 | 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 61 73 20 61 20 73 75 66 66 69 78 20 74 6f 20 61 6e 79 | e.domain.name.as.a.suffix.to.any |
26f00 | 20 75 6e 71 75 61 6c 69 66 69 65 64 20 6e 61 6d 65 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 | .unqualified.name..For.example,. |
26f20 | 69 66 20 79 6f 75 20 73 65 74 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 60 65 78 61 6d | if.you.set.the.domain.name.`exam |
26f40 | 70 6c 65 2e 63 6f 6d 60 2c 20 61 6e 64 20 79 6f 75 20 77 6f 75 6c 64 20 70 69 6e 67 20 74 68 65 | ple.com`,.and.you.would.ping.the |
26f60 | 20 75 6e 71 75 61 6c 69 66 69 65 64 20 6e 61 6d 65 20 6f 66 20 60 63 72 75 78 60 2c 20 74 68 65 | .unqualified.name.of.`crux`,.the |
26f80 | 6e 20 56 79 4f 53 20 71 75 61 6c 69 66 69 65 73 20 74 68 65 20 6e 61 6d 65 20 74 6f 20 60 63 72 | n.VyOS.qualifies.the.name.to.`cr |
26fa0 | 75 78 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 60 2e 00 41 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 | ux.example.com`..A.dummy.interfa |
26fc0 | 63 65 20 66 6f 72 20 74 68 65 20 70 72 6f 76 69 64 65 72 2d 61 73 73 69 67 6e 65 64 20 49 50 3b | ce.for.the.provider-assigned.IP; |
26fe0 | 00 41 20 66 69 72 65 77 61 6c 6c 20 6d 61 72 6b 20 60 60 66 77 6d 61 72 6b 60 60 20 61 6c 6c 6f | .A.firewall.mark.``fwmark``.allo |
27000 | 77 73 20 75 73 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 70 6f 72 74 73 20 66 6f 72 20 68 69 67 68 | ws.using.multiple.ports.for.high |
27020 | 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 20 76 69 72 74 75 61 6c 2d 73 65 72 76 65 72 2e 20 49 74 | -availability.virtual-server..It |
27040 | 20 75 73 65 73 20 66 77 6d 61 72 6b 20 76 61 6c 75 65 2e 00 41 20 66 75 6c 6c 20 65 78 61 6d 70 | .uses.fwmark.value..A.full.examp |
27060 | 6c 65 20 6f 66 20 61 20 54 75 6e 6e 65 6c 62 72 6f 6b 65 72 2e 6e 65 74 20 63 6f 6e 66 69 67 20 | le.of.a.Tunnelbroker.net.config. |
27080 | 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 61 74 20 3a 72 65 66 3a 60 68 65 72 65 20 3c 65 78 61 6d | can.be.found.at.:ref:`here.<exam |
270a0 | 70 6c 65 73 2d 74 75 6e 6e 65 6c 62 72 6f 6b 65 72 2d 69 70 76 36 3e 60 2e 00 41 20 67 65 6e 65 | ples-tunnelbroker-ipv6>`..A.gene |
270c0 | 72 69 63 20 60 3c 6e 61 6d 65 3e 60 20 72 65 66 65 72 65 6e 63 69 6e 67 20 74 68 69 73 20 73 79 | ric.`<name>`.referencing.this.sy |
270e0 | 6e 63 20 73 65 72 76 69 63 65 2e 00 41 20 68 6f 73 74 6e 61 6d 65 20 69 73 20 74 68 65 20 6c 61 | nc.service..A.hostname.is.the.la |
27100 | 62 65 6c 20 28 6e 61 6d 65 29 20 61 73 73 69 67 6e 65 64 20 74 6f 20 61 20 6e 65 74 77 6f 72 6b | bel.(name).assigned.to.a.network |
27120 | 20 64 65 76 69 63 65 20 28 61 20 68 6f 73 74 29 20 6f 6e 20 61 20 6e 65 74 77 6f 72 6b 20 61 6e | .device.(a.host).on.a.network.an |
27140 | 64 20 69 73 20 75 73 65 64 20 74 6f 20 64 69 73 74 69 6e 67 75 69 73 68 20 6f 6e 65 20 64 65 76 | d.is.used.to.distinguish.one.dev |
27160 | 69 63 65 20 66 72 6f 6d 20 61 6e 6f 74 68 65 72 20 6f 6e 20 73 70 65 63 69 66 69 63 20 6e 65 74 | ice.from.another.on.specific.net |
27180 | 77 6f 72 6b 73 20 6f 72 20 6f 76 65 72 20 74 68 65 20 69 6e 74 65 72 6e 65 74 2e 20 4f 6e 20 74 | works.or.over.the.internet..On.t |
271a0 | 68 65 20 6f 74 68 65 72 20 68 61 6e 64 20 74 68 69 73 20 77 69 6c 6c 20 62 65 20 74 68 65 20 6e | he.other.hand.this.will.be.the.n |
271c0 | 61 6d 65 20 77 68 69 63 68 20 61 70 70 65 61 72 73 20 6f 6e 20 74 68 65 20 63 6f 6d 6d 61 6e 64 | ame.which.appears.on.the.command |
271e0 | 20 6c 69 6e 65 20 70 72 6f 6d 70 74 2e 00 41 20 68 75 6d 61 6e 20 72 65 61 64 61 62 6c 65 20 64 | .line.prompt..A.human.readable.d |
27200 | 65 73 63 72 69 70 74 69 6f 6e 20 77 68 61 74 20 74 68 69 73 20 43 41 20 69 73 20 61 62 6f 75 74 | escription.what.this.CA.is.about |
27220 | 2e 00 41 20 68 75 6d 61 6e 20 72 65 61 64 61 62 6c 65 20 64 65 73 63 72 69 70 74 69 6f 6e 20 77 | ..A.human.readable.description.w |
27240 | 68 61 74 20 74 68 69 73 20 63 65 72 74 69 66 69 63 61 74 65 20 69 73 20 61 62 6f 75 74 2e 00 41 | hat.this.certificate.is.about..A |
27260 | 20 6c 6f 6f 6b 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 6c 77 61 79 73 20 75 70 | .lookback.interface.is.always.up |
27280 | 2c 20 74 68 75 73 20 69 74 20 63 6f 75 6c 64 20 62 65 20 75 73 65 64 20 66 6f 72 20 6d 61 6e 61 | ,.thus.it.could.be.used.for.mana |
272a0 | 67 65 6d 65 6e 74 20 74 72 61 66 66 69 63 20 6f 72 20 61 73 20 73 6f 75 72 63 65 2f 64 65 73 74 | gement.traffic.or.as.source/dest |
272c0 | 69 6e 61 74 69 6f 6e 20 66 6f 72 20 61 6e 64 20 3a 61 62 62 72 3a 60 49 47 50 20 28 49 6e 74 65 | ination.for.and.:abbr:`IGP.(Inte |
272e0 | 72 69 6f 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 29 60 20 6c 69 6b 65 20 3a 72 65 | rior.Gateway.Protocol)`.like.:re |
27300 | 66 3a 60 72 6f 75 74 69 6e 67 2d 62 67 70 60 20 73 6f 20 79 6f 75 72 20 69 6e 74 65 72 6e 61 6c | f:`routing-bgp`.so.your.internal |
27320 | 20 42 47 50 20 6c 69 6e 6b 20 69 73 20 6e 6f 74 20 64 65 70 65 6e 64 65 6e 74 20 6f 6e 20 70 68 | .BGP.link.is.not.dependent.on.ph |
27340 | 79 73 69 63 61 6c 20 6c 69 6e 6b 20 73 74 61 74 65 73 20 61 6e 64 20 6d 75 6c 74 69 70 6c 65 20 | ysical.link.states.and.multiple. |
27360 | 72 6f 75 74 65 73 20 63 61 6e 20 62 65 20 63 68 6f 73 65 6e 20 74 6f 20 74 68 65 20 64 65 73 74 | routes.can.be.chosen.to.the.dest |
27380 | 69 6e 61 74 69 6f 6e 2e 20 41 20 3a 72 65 66 3a 60 64 75 6d 6d 79 2d 69 6e 74 65 72 66 61 63 65 | ination..A.:ref:`dummy-interface |
273a0 | 60 20 49 6e 74 65 72 66 61 63 65 20 73 68 6f 75 6c 64 20 61 6c 77 61 79 73 20 62 65 20 70 72 65 | `.Interface.should.always.be.pre |
273c0 | 66 65 72 72 65 64 20 6f 76 65 72 20 61 20 3a 72 65 66 3a 60 6c 6f 6f 70 62 61 63 6b 2d 69 6e 74 | ferred.over.a.:ref:`loopback-int |
273e0 | 65 72 66 61 63 65 60 20 69 6e 74 65 72 66 61 63 65 2e 00 41 20 6d 61 6e 61 67 65 64 20 64 65 76 | erface`.interface..A.managed.dev |
27400 | 69 63 65 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 6e 6f 64 65 20 74 68 61 74 20 69 6d 70 6c 65 | ice.is.a.network.node.that.imple |
27420 | 6d 65 6e 74 73 20 61 6e 20 53 4e 4d 50 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 61 6c 6c | ments.an.SNMP.interface.that.all |
27440 | 6f 77 73 20 75 6e 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 28 72 65 61 64 2d 6f 6e 6c 79 29 20 6f | ows.unidirectional.(read-only).o |
27460 | 72 20 62 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 28 72 65 61 64 20 61 6e 64 20 77 72 69 74 65 29 | r.bidirectional.(read.and.write) |
27480 | 20 61 63 63 65 73 73 20 74 6f 20 6e 6f 64 65 2d 73 70 65 63 69 66 69 63 20 69 6e 66 6f 72 6d 61 | .access.to.node-specific.informa |
274a0 | 74 69 6f 6e 2e 20 4d 61 6e 61 67 65 64 20 64 65 76 69 63 65 73 20 65 78 63 68 61 6e 67 65 20 6e | tion..Managed.devices.exchange.n |
274c0 | 6f 64 65 2d 73 70 65 63 69 66 69 63 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 74 68 20 74 68 | ode-specific.information.with.th |
274e0 | 65 20 4e 4d 53 73 2e 20 53 6f 6d 65 74 69 6d 65 73 20 63 61 6c 6c 65 64 20 6e 65 74 77 6f 72 6b | e.NMSs..Sometimes.called.network |
27500 | 20 65 6c 65 6d 65 6e 74 73 2c 20 74 68 65 20 6d 61 6e 61 67 65 64 20 64 65 76 69 63 65 73 20 63 | .elements,.the.managed.devices.c |
27520 | 61 6e 20 62 65 20 61 6e 79 20 74 79 70 65 20 6f 66 20 64 65 76 69 63 65 2c 20 69 6e 63 6c 75 64 | an.be.any.type.of.device,.includ |
27540 | 69 6e 67 2c 20 62 75 74 20 6e 6f 74 20 6c 69 6d 69 74 65 64 20 74 6f 2c 20 72 6f 75 74 65 72 73 | ing,.but.not.limited.to,.routers |
27560 | 2c 20 61 63 63 65 73 73 20 73 65 72 76 65 72 73 2c 20 73 77 69 74 63 68 65 73 2c 20 63 61 62 6c | ,.access.servers,.switches,.cabl |
27580 | 65 20 6d 6f 64 65 6d 73 2c 20 62 72 69 64 67 65 73 2c 20 68 75 62 73 2c 20 49 50 20 74 65 6c 65 | e.modems,.bridges,.hubs,.IP.tele |
275a0 | 70 68 6f 6e 65 73 2c 20 49 50 20 76 69 64 65 6f 20 63 61 6d 65 72 61 73 2c 20 63 6f 6d 70 75 74 | phones,.IP.video.cameras,.comput |
275c0 | 65 72 20 68 6f 73 74 73 2c 20 61 6e 64 20 70 72 69 6e 74 65 72 73 2e 00 41 20 6d 61 74 63 68 20 | er.hosts,.and.printers..A.match. |
275e0 | 66 69 6c 74 65 72 20 63 61 6e 20 63 6f 6e 74 61 69 6e 20 6d 75 6c 74 69 70 6c 65 20 63 72 69 74 | filter.can.contain.multiple.crit |
27600 | 65 72 69 61 20 61 6e 64 20 77 69 6c 6c 20 6d 61 74 63 68 20 74 72 61 66 66 69 63 20 69 66 20 61 | eria.and.will.match.traffic.if.a |
27620 | 6c 6c 20 74 68 6f 73 65 20 63 72 69 74 65 72 69 61 20 61 72 65 20 74 72 75 65 2e 00 41 20 6d 6f | ll.those.criteria.are.true..A.mo |
27640 | 6e 69 74 6f 72 65 64 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 63 6f 6e 64 69 74 69 6f 6e 73 20 | nitored.static.route.conditions. |
27660 | 74 68 65 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 20 74 6f 20 74 68 65 20 52 49 42 20 6f 6e 20 74 | the.installation.to.the.RIB.on.t |
27680 | 68 65 20 42 46 44 20 73 65 73 73 69 6f 6e 20 72 75 6e 6e 69 6e 67 20 73 74 61 74 65 3a 20 77 68 | he.BFD.session.running.state:.wh |
276a0 | 65 6e 20 42 46 44 20 73 65 73 73 69 6f 6e 20 69 73 20 75 70 20 74 68 65 20 72 6f 75 74 65 20 69 | en.BFD.session.is.up.the.route.i |
276c0 | 73 20 69 6e 73 74 61 6c 6c 65 64 20 74 6f 20 52 49 42 2c 20 62 75 74 20 77 68 65 6e 20 74 68 65 | s.installed.to.RIB,.but.when.the |
276e0 | 20 42 46 44 20 73 65 73 73 69 6f 6e 20 69 73 20 64 6f 77 6e 20 69 74 20 69 73 20 72 65 6d 6f 76 | .BFD.session.is.down.it.is.remov |
27700 | 65 64 20 66 72 6f 6d 20 74 68 65 20 52 49 42 2e 00 41 20 6e 65 74 77 6f 72 6b 20 6d 61 6e 61 67 | ed.from.the.RIB..A.network.manag |
27720 | 65 6d 65 6e 74 20 73 74 61 74 69 6f 6e 20 65 78 65 63 75 74 65 73 20 61 70 70 6c 69 63 61 74 69 | ement.station.executes.applicati |
27740 | 6f 6e 73 20 74 68 61 74 20 6d 6f 6e 69 74 6f 72 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 20 6d 61 6e | ons.that.monitor.and.control.man |
27760 | 61 67 65 64 20 64 65 76 69 63 65 73 2e 20 4e 4d 53 73 20 70 72 6f 76 69 64 65 20 74 68 65 20 62 | aged.devices..NMSs.provide.the.b |
27780 | 75 6c 6b 20 6f 66 20 74 68 65 20 70 72 6f 63 65 73 73 69 6e 67 20 61 6e 64 20 6d 65 6d 6f 72 79 | ulk.of.the.processing.and.memory |
277a0 | 20 72 65 73 6f 75 72 63 65 73 20 72 65 71 75 69 72 65 64 20 66 6f 72 20 6e 65 74 77 6f 72 6b 20 | .resources.required.for.network. |
277c0 | 6d 61 6e 61 67 65 6d 65 6e 74 2e 20 4f 6e 65 20 6f 72 20 6d 6f 72 65 20 4e 4d 53 73 20 6d 61 79 | management..One.or.more.NMSs.may |
277e0 | 20 65 78 69 73 74 20 6f 6e 20 61 6e 79 20 6d 61 6e 61 67 65 64 20 6e 65 74 77 6f 72 6b 2e 00 41 | .exist.on.any.managed.network..A |
27800 | 20 6e 65 77 20 69 6e 74 65 72 66 61 63 65 20 62 65 63 6f 6d 65 73 20 70 72 65 73 65 6e 74 20 60 | .new.interface.becomes.present.` |
27820 | 60 50 6f 72 74 2d 63 68 61 6e 6e 65 6c 31 60 60 2c 20 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 | `Port-channel1``,.all.configurat |
27840 | 69 6f 6e 20 6c 69 6b 65 20 61 6c 6c 6f 77 65 64 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 | ion.like.allowed.VLAN.interfaces |
27860 | 2c 20 53 54 50 20 77 69 6c 6c 20 68 61 70 70 65 6e 20 68 65 72 65 2e 00 41 20 70 61 63 6b 65 74 | ,.STP.will.happen.here..A.packet |
27880 | 20 72 61 74 65 20 6c 69 6d 69 74 20 63 61 6e 20 62 65 20 73 65 74 20 66 6f 72 20 61 20 72 75 6c | .rate.limit.can.be.set.for.a.rul |
278a0 | 65 20 74 6f 20 61 70 70 6c 79 20 74 68 65 20 72 75 6c 65 20 74 6f 20 74 72 61 66 66 69 63 20 61 | e.to.apply.the.rule.to.traffic.a |
278c0 | 62 6f 76 65 20 6f 72 20 62 65 6c 6f 77 20 61 20 73 70 65 63 69 66 69 65 64 20 74 68 72 65 73 68 | bove.or.below.a.specified.thresh |
278e0 | 6f 6c 64 2e 20 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 72 61 74 65 20 6c 69 6d 69 74 | old..To.configure.the.rate.limit |
27900 | 69 6e 67 20 75 73 65 3a 00 41 20 70 61 63 6b 65 74 20 74 68 61 74 20 66 69 6e 64 73 20 61 20 6d | ing.use:.A.packet.that.finds.a.m |
27920 | 61 74 63 68 69 6e 67 20 65 6e 74 72 79 20 69 6e 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 28 | atching.entry.in.the.flowtable.( |
27940 | 66 6c 6f 77 74 61 62 6c 65 20 68 69 74 29 20 69 73 20 74 72 61 6e 73 6d 69 74 74 65 64 20 74 6f | flowtable.hit).is.transmitted.to |
27960 | 20 74 68 65 20 6f 75 74 70 75 74 20 6e 65 74 64 65 76 69 63 65 2c 20 68 65 6e 63 65 2c 20 70 61 | .the.output.netdevice,.hence,.pa |
27980 | 63 6b 65 74 73 20 62 79 70 61 73 73 20 74 68 65 20 63 6c 61 73 73 69 63 20 49 50 20 66 6f 72 77 | ckets.bypass.the.classic.IP.forw |
279a0 | 61 72 64 69 6e 67 20 70 61 74 68 20 61 6e 64 20 75 73 65 73 20 74 68 65 20 2a 2a 46 61 73 74 20 | arding.path.and.uses.the.**Fast. |
279c0 | 50 61 74 68 2a 2a 20 28 6f 72 61 6e 67 65 20 63 69 72 63 6c 65 73 20 70 61 74 68 29 2e 20 54 68 | Path**.(orange.circles.path)..Th |
279e0 | 65 20 76 69 73 69 62 6c 65 20 65 66 66 65 63 74 20 69 73 20 74 68 61 74 20 79 6f 75 20 64 6f 20 | e.visible.effect.is.that.you.do. |
27a00 | 6e 6f 74 20 73 65 65 20 74 68 65 73 65 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 61 6e 79 20 6f | not.see.these.packets.from.any.o |
27a20 | 66 20 74 68 65 20 4e 65 74 66 69 6c 74 65 72 20 68 6f 6f 6b 73 20 63 6f 6d 69 6e 67 20 61 66 74 | f.the.Netfilter.hooks.coming.aft |
27a40 | 65 72 20 69 6e 67 72 65 73 73 2e 20 49 6e 20 63 61 73 65 20 74 68 61 74 20 74 68 65 72 65 20 69 | er.ingress..In.case.that.there.i |
27a60 | 73 20 6e 6f 20 6d 61 74 63 68 69 6e 67 20 65 6e 74 72 79 20 69 6e 20 74 68 65 20 66 6c 6f 77 74 | s.no.matching.entry.in.the.flowt |
27a80 | 61 62 6c 65 20 28 66 6c 6f 77 74 61 62 6c 65 20 6d 69 73 73 29 2c 20 74 68 65 20 70 61 63 6b 65 | able.(flowtable.miss),.the.packe |
27aa0 | 74 20 66 6f 6c 6c 6f 77 73 20 74 68 65 20 63 6c 61 73 73 69 63 20 49 50 20 66 6f 72 77 61 72 64 | t.follows.the.classic.IP.forward |
27ac0 | 69 6e 67 20 70 61 74 68 2e 00 41 20 70 65 6e 61 6c 74 79 20 6f 66 20 31 30 30 30 20 69 73 20 61 | ing.path..A.penalty.of.1000.is.a |
27ae0 | 73 73 65 73 73 65 64 20 65 61 63 68 20 74 69 6d 65 20 74 68 65 20 72 6f 75 74 65 20 66 61 69 6c | ssessed.each.time.the.route.fail |
27b00 | 73 2e 20 57 68 65 6e 20 74 68 65 20 70 65 6e 61 6c 74 69 65 73 20 72 65 61 63 68 20 61 20 70 72 | s..When.the.penalties.reach.a.pr |
27b20 | 65 64 65 66 69 6e 65 64 20 74 68 72 65 73 68 6f 6c 64 20 28 73 75 70 70 72 65 73 73 2d 76 61 6c | edefined.threshold.(suppress-val |
27b40 | 75 65 29 2c 20 74 68 65 20 72 6f 75 74 65 72 20 73 74 6f 70 73 20 61 64 76 65 72 74 69 73 69 6e | ue),.the.router.stops.advertisin |
27b60 | 67 20 74 68 65 20 72 6f 75 74 65 2e 00 41 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 | g.the.route..A.physical.interfac |
27b80 | 65 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 68 69 73 20 4d 41 | e.is.required.to.connect.this.MA |
27ba0 | 43 73 65 63 20 69 6e 73 74 61 6e 63 65 20 74 6f 2e 20 54 72 61 66 66 69 63 20 6c 65 61 76 69 6e | Csec.instance.to..Traffic.leavin |
27bc0 | 67 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 77 69 6c 6c 20 6e 6f 77 20 62 65 20 61 75 74 | g.this.interface.will.now.be.aut |
27be0 | 68 65 6e 74 69 63 61 74 65 64 2f 65 6e 63 72 79 70 74 65 64 2e 00 41 20 70 6f 6f 6c 20 6f 66 20 | henticated/encrypted..A.pool.of. |
27c00 | 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 62 79 20 75 73 69 6e | addresses.can.be.defined.by.usin |
27c20 | 67 20 61 20 68 79 70 68 65 6e 20 62 65 74 77 65 65 6e 20 74 77 6f 20 49 50 20 61 64 64 72 65 73 | g.a.hyphen.between.two.IP.addres |
27c40 | 73 65 73 3a 00 41 20 70 6f 72 74 20 63 61 6e 20 62 65 20 73 65 74 20 77 69 74 68 20 61 20 70 6f | ses:.A.port.can.be.set.with.a.po |
27c60 | 72 74 20 6e 75 6d 62 65 72 20 6f 72 20 61 20 6e 61 6d 65 20 77 68 69 63 68 20 69 73 20 68 65 72 | rt.number.or.a.name.which.is.her |
27c80 | 65 20 64 65 66 69 6e 65 64 3a 20 60 60 2f 65 74 63 2f 73 65 72 76 69 63 65 73 60 60 2e 00 41 20 | e.defined:.``/etc/services``..A. |
27ca0 | 71 75 65 72 79 20 66 6f 72 20 77 68 69 63 68 20 74 68 65 72 65 20 69 73 20 61 75 74 68 6f 72 69 | query.for.which.there.is.authori |
27cc0 | 74 61 74 69 76 65 6c 79 20 6e 6f 20 61 6e 73 77 65 72 20 69 73 20 63 61 63 68 65 64 20 74 6f 20 | tatively.no.answer.is.cached.to. |
27ce0 | 71 75 69 63 6b 6c 79 20 64 65 6e 79 20 61 20 72 65 63 6f 72 64 27 73 20 65 78 69 73 74 65 6e 63 | quickly.deny.a.record's.existenc |
27d00 | 65 20 6c 61 74 65 72 20 6f 6e 2c 20 77 69 74 68 6f 75 74 20 70 75 74 74 69 6e 67 20 61 20 68 65 | e.later.on,.without.putting.a.he |
27d20 | 61 76 79 20 6c 6f 61 64 20 6f 6e 20 74 68 65 20 72 65 6d 6f 74 65 20 73 65 72 76 65 72 2e 20 49 | avy.load.on.the.remote.server..I |
27d40 | 6e 20 70 72 61 63 74 69 63 65 2c 20 63 61 63 68 65 73 20 63 61 6e 20 62 65 63 6f 6d 65 20 73 61 | n.practice,.caches.can.become.sa |
27d60 | 74 75 72 61 74 65 64 20 77 69 74 68 20 68 75 6e 64 72 65 64 73 20 6f 66 20 74 68 6f 75 73 61 6e | turated.with.hundreds.of.thousan |
27d80 | 64 73 20 6f 66 20 68 6f 73 74 73 20 77 68 69 63 68 20 61 72 65 20 74 72 69 65 64 20 6f 6e 6c 79 | ds.of.hosts.which.are.tried.only |
27da0 | 20 6f 6e 63 65 2e 00 41 20 72 65 63 65 69 76 65 64 20 4e 48 52 50 20 54 72 61 66 66 69 63 20 49 | .once..A.received.NHRP.Traffic.I |
27dc0 | 6e 64 69 63 61 74 69 6f 6e 20 77 69 6c 6c 20 74 72 69 67 67 65 72 20 74 68 65 20 72 65 73 6f 6c | ndication.will.trigger.the.resol |
27de0 | 75 74 69 6f 6e 20 61 6e 64 20 65 73 74 61 62 6c 69 73 68 6d 65 6e 74 20 6f 66 20 61 20 73 68 6f | ution.and.establishment.of.a.sho |
27e00 | 72 74 63 75 74 20 72 6f 75 74 65 2e 00 41 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 49 44 20 | rtcut.route..A.routing.table.ID. |
27e20 | 63 61 6e 20 6e 6f 74 20 62 65 20 6d 6f 64 69 66 69 65 64 20 6f 6e 63 65 20 69 74 20 69 73 20 61 | can.not.be.modified.once.it.is.a |
27e40 | 73 73 69 67 6e 65 64 2e 20 49 74 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 63 68 61 6e 67 65 64 20 | ssigned..It.can.only.be.changed. |
27e60 | 62 79 20 64 65 6c 65 74 69 6e 67 20 61 6e 64 20 72 65 2d 61 64 64 69 6e 67 20 74 68 65 20 56 52 | by.deleting.and.re-adding.the.VR |
27e80 | 46 20 69 6e 73 74 61 6e 63 65 2e 00 41 20 72 75 6c 65 2d 73 65 74 20 69 73 20 61 20 6e 61 6d 65 | F.instance..A.rule-set.is.a.name |
27ea0 | 64 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 74 | d.collection.of.firewall.rules.t |
27ec0 | 68 61 74 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 | hat.can.be.applied.to.an.interfa |
27ee0 | 63 65 20 6f 72 20 61 20 7a 6f 6e 65 2e 20 45 61 63 68 20 72 75 6c 65 20 69 73 20 6e 75 6d 62 65 | ce.or.a.zone..Each.rule.is.numbe |
27f00 | 72 65 64 2c 20 68 61 73 20 61 6e 20 61 63 74 69 6f 6e 20 74 6f 20 61 70 70 6c 79 20 69 66 20 74 | red,.has.an.action.to.apply.if.t |
27f20 | 68 65 20 72 75 6c 65 20 69 73 20 6d 61 74 63 68 65 64 2c 20 61 6e 64 20 74 68 65 20 61 62 69 6c | he.rule.is.matched,.and.the.abil |
27f40 | 69 74 79 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 63 72 69 74 65 72 69 61 20 74 6f 20 6d | ity.to.specify.the.criteria.to.m |
27f60 | 61 74 63 68 2e 20 44 61 74 61 20 70 61 63 6b 65 74 73 20 67 6f 20 74 68 72 6f 75 67 68 20 74 68 | atch..Data.packets.go.through.th |
27f80 | 65 20 72 75 6c 65 73 20 66 72 6f 6d 20 31 20 2d 20 39 39 39 39 39 39 2c 20 61 74 20 74 68 65 20 | e.rules.from.1.-.999999,.at.the. |
27fa0 | 66 69 72 73 74 20 6d 61 74 63 68 20 74 68 65 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 75 | first.match.the.action.of.the.ru |
27fc0 | 6c 65 20 77 69 6c 6c 20 62 65 20 65 78 65 63 75 74 65 64 2e 00 41 20 72 75 6c 65 2d 73 65 74 20 | le.will.be.executed..A.rule-set. |
27fe0 | 69 73 20 61 20 6e 61 6d 65 64 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 72 75 6c 65 73 20 74 | is.a.named.collection.of.rules.t |
28000 | 68 61 74 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 | hat.can.be.applied.to.an.interfa |
28020 | 63 65 2e 20 45 61 63 68 20 72 75 6c 65 20 69 73 20 6e 75 6d 62 65 72 65 64 2c 20 68 61 73 20 61 | ce..Each.rule.is.numbered,.has.a |
28040 | 6e 20 61 63 74 69 6f 6e 20 74 6f 20 61 70 70 6c 79 20 69 66 20 74 68 65 20 72 75 6c 65 20 69 73 | n.action.to.apply.if.the.rule.is |
28060 | 20 6d 61 74 63 68 65 64 2c 20 61 6e 64 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 73 70 65 | .matched,.and.the.ability.to.spe |
28080 | 63 69 66 79 20 74 68 65 20 63 72 69 74 65 72 69 61 20 74 6f 20 6d 61 74 63 68 2e 20 44 61 74 61 | cify.the.criteria.to.match..Data |
280a0 | 20 70 61 63 6b 65 74 73 20 67 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 75 6c 65 73 20 66 72 | .packets.go.through.the.rules.fr |
280c0 | 6f 6d 20 31 20 2d 20 39 39 39 39 39 39 2c 20 61 74 20 74 68 65 20 66 69 72 73 74 20 6d 61 74 63 | om.1.-.999999,.at.the.first.matc |
280e0 | 68 20 74 68 65 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 75 6c 65 20 77 69 6c 6c 20 62 65 | h.the.action.of.the.rule.will.be |
28100 | 20 65 78 65 63 75 74 65 64 2e 00 41 20 73 63 72 69 70 74 20 63 61 6e 20 62 65 20 72 75 6e 20 77 | .executed..A.script.can.be.run.w |
28120 | 68 65 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 73 74 61 74 65 20 63 68 61 6e 67 65 20 6f 63 | hen.an.interface.state.change.oc |
28140 | 63 75 72 73 2e 20 53 63 72 69 70 74 73 20 61 72 65 20 72 75 6e 20 66 72 6f 6d 20 2f 63 6f 6e 66 | curs..Scripts.are.run.from./conf |
28160 | 69 67 2f 73 63 72 69 70 74 73 2c 20 66 6f 72 20 61 20 64 69 66 66 65 72 65 6e 74 20 6c 6f 63 61 | ig/scripts,.for.a.different.loca |
28180 | 74 69 6f 6e 20 73 70 65 63 69 66 79 20 74 68 65 20 66 75 6c 6c 20 70 61 74 68 3a 00 41 20 73 65 | tion.specify.the.full.path:.A.se |
281a0 | 67 6d 65 6e 74 20 49 44 20 74 68 61 74 20 63 6f 6e 74 61 69 6e 73 20 61 6e 20 49 50 20 61 64 64 | gment.ID.that.contains.an.IP.add |
281c0 | 72 65 73 73 20 70 72 65 66 69 78 20 63 61 6c 63 75 6c 61 74 65 64 20 62 79 20 61 6e 20 49 47 50 | ress.prefix.calculated.by.an.IGP |
281e0 | 20 69 6e 20 74 68 65 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 63 6f 72 65 20 6e 65 | .in.the.service.provider.core.ne |
28200 | 74 77 6f 72 6b 2e 20 50 72 65 66 69 78 20 53 49 44 73 20 61 72 65 20 67 6c 6f 62 61 6c 6c 79 20 | twork..Prefix.SIDs.are.globally. |
28220 | 75 6e 69 71 75 65 2c 20 74 68 69 73 20 76 61 6c 75 65 20 69 6e 64 65 6e 74 69 66 79 20 69 74 00 | unique,.this.value.indentify.it. |
28240 | 41 20 73 65 6e 64 69 6e 67 20 73 74 61 74 69 6f 6e 20 28 63 6f 6d 70 75 74 65 72 20 6f 72 20 6e | A.sending.station.(computer.or.n |
28260 | 65 74 77 6f 72 6b 20 73 77 69 74 63 68 29 20 6d 61 79 20 62 65 20 74 72 61 6e 73 6d 69 74 74 69 | etwork.switch).may.be.transmitti |
28280 | 6e 67 20 64 61 74 61 20 66 61 73 74 65 72 20 74 68 61 6e 20 74 68 65 20 6f 74 68 65 72 20 65 6e | ng.data.faster.than.the.other.en |
282a0 | 64 20 6f 66 20 74 68 65 20 6c 69 6e 6b 20 63 61 6e 20 61 63 63 65 70 74 20 69 74 2e 20 55 73 69 | d.of.the.link.can.accept.it..Usi |
282c0 | 6e 67 20 66 6c 6f 77 20 63 6f 6e 74 72 6f 6c 2c 20 74 68 65 20 72 65 63 65 69 76 69 6e 67 20 73 | ng.flow.control,.the.receiving.s |
282e0 | 74 61 74 69 6f 6e 20 63 61 6e 20 73 69 67 6e 61 6c 20 74 68 65 20 73 65 6e 64 65 72 20 72 65 71 | tation.can.signal.the.sender.req |
28300 | 75 65 73 74 69 6e 67 20 73 75 73 70 65 6e 73 69 6f 6e 20 6f 66 20 74 72 61 6e 73 6d 69 73 73 69 | uesting.suspension.of.transmissi |
28320 | 6f 6e 73 20 75 6e 74 69 6c 20 74 68 65 20 72 65 63 65 69 76 65 72 20 63 61 74 63 68 65 73 20 75 | ons.until.the.receiver.catches.u |
28340 | 70 2e 00 41 20 73 68 61 72 65 64 20 6e 65 74 77 6f 72 6b 20 6e 61 6d 65 64 20 60 60 4e 45 54 31 | p..A.shared.network.named.``NET1 |
28360 | 60 60 20 73 65 72 76 65 73 20 73 75 62 6e 65 74 20 60 60 32 30 30 31 3a 64 62 38 3a 3a 2f 36 34 | ``.serves.subnet.``2001:db8::/64 |
28380 | 60 60 00 41 20 73 69 6d 70 6c 65 20 42 47 50 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 76 69 | ``.A.simple.BGP.configuration.vi |
283a0 | 61 20 49 50 76 36 2e 00 41 20 73 69 6d 70 6c 65 20 52 61 6e 64 6f 6d 20 45 61 72 6c 79 20 44 65 | a.IPv6..A.simple.Random.Early.De |
283c0 | 74 65 63 74 69 6f 6e 20 28 52 45 44 29 20 70 6f 6c 69 63 79 20 77 6f 75 6c 64 20 73 74 61 72 74 | tection.(RED).policy.would.start |
283e0 | 20 72 61 6e 64 6f 6d 6c 79 20 64 72 6f 70 70 69 6e 67 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 | .randomly.dropping.packets.from. |
28400 | 61 20 71 75 65 75 65 20 62 65 66 6f 72 65 20 69 74 20 72 65 61 63 68 65 73 20 69 74 73 20 71 75 | a.queue.before.it.reaches.its.qu |
28420 | 65 75 65 20 6c 69 6d 69 74 20 74 68 75 73 20 61 76 6f 69 64 69 6e 67 20 63 6f 6e 67 65 73 74 69 | eue.limit.thus.avoiding.congesti |
28440 | 6f 6e 2e 20 54 68 61 74 20 69 73 20 67 6f 6f 64 20 66 6f 72 20 54 43 50 20 63 6f 6e 6e 65 63 74 | on..That.is.good.for.TCP.connect |
28460 | 69 6f 6e 73 20 61 73 20 74 68 65 20 67 72 61 64 75 61 6c 20 64 72 6f 70 70 69 6e 67 20 6f 66 20 | ions.as.the.gradual.dropping.of. |
28480 | 70 61 63 6b 65 74 73 20 61 63 74 73 20 61 73 20 61 20 73 69 67 6e 61 6c 20 66 6f 72 20 74 68 65 | packets.acts.as.a.signal.for.the |
284a0 | 20 73 65 6e 64 65 72 20 74 6f 20 64 65 63 72 65 61 73 65 20 69 74 73 20 74 72 61 6e 73 6d 69 73 | .sender.to.decrease.its.transmis |
284c0 | 73 69 6f 6e 20 72 61 74 65 2e 00 41 20 73 69 6d 70 6c 65 20 65 42 47 50 20 63 6f 6e 66 69 67 75 | sion.rate..A.simple.eBGP.configu |
284e0 | 72 61 74 69 6f 6e 3a 00 41 20 73 69 6d 70 6c 65 20 65 78 61 6d 70 6c 65 20 6f 66 20 53 68 61 70 | ration:.A.simple.example.of.Shap |
28500 | 65 72 20 75 73 69 6e 67 20 70 72 69 6f 72 69 74 69 65 73 2e 00 41 20 73 69 6d 70 6c 65 20 65 78 | er.using.priorities..A.simple.ex |
28520 | 61 6d 70 6c 65 20 6f 66 20 61 6e 20 46 51 2d 43 6f 44 65 6c 20 70 6f 6c 69 63 79 20 77 6f 72 6b | ample.of.an.FQ-CoDel.policy.work |
28540 | 69 6e 67 20 69 6e 73 69 64 65 20 61 20 53 68 61 70 65 72 20 6f 6e 65 2e 00 41 20 73 69 6d 70 6c | ing.inside.a.Shaper.one..A.simpl |
28560 | 69 66 69 65 64 20 74 72 61 66 66 69 63 20 66 6c 6f 77 20 64 69 61 67 72 61 6d 2c 20 62 61 73 65 | ified.traffic.flow.diagram,.base |
28580 | 64 20 6f 6e 20 4e 65 74 66 69 6c 74 65 72 20 70 61 63 6b 65 74 20 66 6c 6f 77 2c 20 69 73 20 73 | d.on.Netfilter.packet.flow,.is.s |
285a0 | 68 6f 77 6e 20 6e 65 78 74 2c 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 68 61 76 65 20 61 20 66 75 | hown.next,.in.order.to.have.a.fu |
285c0 | 6c 6c 20 76 69 65 77 20 61 6e 64 20 75 6e 64 65 72 73 74 61 6e 64 69 6e 67 20 6f 66 20 68 6f 77 | ll.view.and.understanding.of.how |
285e0 | 20 70 61 63 6b 65 74 73 20 61 72 65 20 70 72 6f 63 65 73 73 65 64 2c 20 61 6e 64 20 77 68 61 74 | .packets.are.processed,.and.what |
28600 | 20 70 6f 73 73 69 62 6c 65 20 70 61 74 68 73 20 74 72 61 66 66 69 63 20 63 61 6e 20 74 61 6b 65 | .possible.paths.traffic.can.take |
28620 | 2e 00 41 20 73 69 6d 70 6c 69 66 69 65 64 20 74 72 61 66 66 69 63 20 66 6c 6f 77 2c 20 62 61 73 | ..A.simplified.traffic.flow,.bas |
28640 | 65 64 20 6f 6e 20 4e 65 74 66 69 6c 74 65 72 20 70 61 63 6b 65 74 20 66 6c 6f 77 2c 20 69 73 20 | ed.on.Netfilter.packet.flow,.is. |
28660 | 73 68 6f 77 6e 20 6e 65 78 74 2c 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 68 61 76 65 20 61 20 66 | shown.next,.in.order.to.have.a.f |
28680 | 75 6c 6c 20 76 69 65 77 20 61 6e 64 20 75 6e 64 65 72 73 74 61 6e 64 69 6e 67 20 6f 66 20 68 6f | ull.view.and.understanding.of.ho |
286a0 | 77 20 70 61 63 6b 65 74 73 20 61 72 65 20 70 72 6f 63 65 73 73 65 64 2c 20 61 6e 64 20 77 68 61 | w.packets.are.processed,.and.wha |
286c0 | 74 20 70 6f 73 73 69 62 6c 65 20 70 61 74 68 73 20 63 61 6e 20 74 61 6b 65 2e 00 41 20 73 69 6e | t.possible.paths.can.take..A.sin |
286e0 | 67 6c 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 6e 64 20 65 78 74 65 72 6e 61 | gle.internal.network.and.externa |
28700 | 6c 20 6e 65 74 77 6f 72 6b 2e 20 55 73 65 20 74 68 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 20 | l.network..Use.the.NAT66.device. |
28720 | 74 6f 20 63 6f 6e 6e 65 63 74 20 61 20 73 69 6e 67 6c 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 | to.connect.a.single.internal.net |
28740 | 77 6f 72 6b 20 61 6e 64 20 70 75 62 6c 69 63 20 6e 65 74 77 6f 72 6b 2c 20 61 6e 64 20 74 68 65 | work.and.public.network,.and.the |
28760 | 20 68 6f 73 74 73 20 69 6e 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 75 | .hosts.in.the.internal.network.u |
28780 | 73 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 65 73 20 74 68 61 74 20 6f 6e | se.IPv6.address.prefixes.that.on |
287a0 | 6c 79 20 73 75 70 70 6f 72 74 20 72 6f 75 74 69 6e 67 20 77 69 74 68 69 6e 20 74 68 65 20 6c 6f | ly.support.routing.within.the.lo |
287c0 | 63 61 6c 20 72 61 6e 67 65 2e 20 57 68 65 6e 20 61 20 68 6f 73 74 20 69 6e 20 74 68 65 20 69 6e | cal.range..When.a.host.in.the.in |
287e0 | 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 63 63 65 73 73 65 73 20 74 68 65 20 65 78 74 65 | ternal.network.accesses.the.exte |
28800 | 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 2c 20 74 68 65 20 73 6f 75 72 63 65 20 49 50 76 36 20 61 64 | rnal.network,.the.source.IPv6.ad |
28820 | 64 72 65 73 73 20 70 72 65 66 69 78 20 69 6e 20 74 68 65 20 6d 65 73 73 61 67 65 20 77 69 6c 6c | dress.prefix.in.the.message.will |
28840 | 20 62 65 20 63 6f 6e 76 65 72 74 65 64 20 69 6e 74 6f 20 61 20 67 6c 6f 62 61 6c 20 75 6e 69 63 | .be.converted.into.a.global.unic |
28860 | 61 73 74 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 20 62 79 20 74 68 65 20 4e | ast.IPv6.address.prefix.by.the.N |
28880 | 41 54 36 36 20 64 65 76 69 63 65 2e 00 41 20 73 74 61 74 69 6f 6e 20 61 63 74 73 20 61 73 20 61 | AT66.device..A.station.acts.as.a |
288a0 | 20 57 69 2d 46 69 20 63 6c 69 65 6e 74 20 61 63 63 65 73 73 69 6e 67 20 74 68 65 20 6e 65 74 77 | .Wi-Fi.client.accessing.the.netw |
288c0 | 6f 72 6b 20 74 68 72 6f 75 67 68 20 61 6e 20 61 76 61 69 6c 61 62 6c 65 20 57 41 50 00 41 20 73 | ork.through.an.available.WAP.A.s |
288e0 | 79 6e 63 20 67 72 6f 75 70 20 61 6c 6c 6f 77 73 20 56 52 52 50 20 67 72 6f 75 70 73 20 74 6f 20 | ync.group.allows.VRRP.groups.to. |
28900 | 74 72 61 6e 73 69 74 69 6f 6e 20 74 6f 67 65 74 68 65 72 2e 00 41 20 74 79 70 69 63 61 6c 20 63 | transition.together..A.typical.c |
28920 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 75 73 69 6e 67 20 32 20 6e 6f 64 65 73 2e 00 41 20 74 79 | onfiguration.using.2.nodes..A.ty |
28940 | 70 69 63 61 6c 20 70 72 6f 62 6c 65 6d 20 77 69 74 68 20 75 73 69 6e 67 20 4e 41 54 20 61 6e 64 | pical.problem.with.using.NAT.and |
28960 | 20 68 6f 73 74 69 6e 67 20 70 75 62 6c 69 63 20 73 65 72 76 65 72 73 20 69 73 20 74 68 65 20 61 | .hosting.public.servers.is.the.a |
28980 | 62 69 6c 69 74 79 20 66 6f 72 20 69 6e 74 65 72 6e 61 6c 20 73 79 73 74 65 6d 73 20 74 6f 20 72 | bility.for.internal.systems.to.r |
289a0 | 65 61 63 68 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 73 65 72 76 65 72 20 75 73 69 6e 67 20 69 74 | each.an.internal.server.using.it |
289c0 | 27 73 20 65 78 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 73 6f 6c 75 | 's.external.IP.address..The.solu |
289e0 | 74 69 6f 6e 20 74 6f 20 74 68 69 73 20 69 73 20 75 73 75 61 6c 6c 79 20 74 68 65 20 75 73 65 20 | tion.to.this.is.usually.the.use. |
28a00 | 6f 66 20 73 70 6c 69 74 2d 44 4e 53 20 74 6f 20 63 6f 72 72 65 63 74 6c 79 20 70 6f 69 6e 74 20 | of.split-DNS.to.correctly.point. |
28a20 | 68 6f 73 74 20 73 79 73 74 65 6d 73 20 74 6f 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 61 64 64 | host.systems.to.the.internal.add |
28a40 | 72 65 73 73 20 77 68 65 6e 20 72 65 71 75 65 73 74 73 20 61 72 65 20 6d 61 64 65 20 69 6e 74 65 | ress.when.requests.are.made.inte |
28a60 | 72 6e 61 6c 6c 79 2e 20 42 65 63 61 75 73 65 20 6d 61 6e 79 20 73 6d 61 6c 6c 65 72 20 6e 65 74 | rnally..Because.many.smaller.net |
28a80 | 77 6f 72 6b 73 20 6c 61 63 6b 20 44 4e 53 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 2c 20 61 | works.lack.DNS.infrastructure,.a |
28aa0 | 20 77 6f 72 6b 2d 61 72 6f 75 6e 64 20 69 73 20 63 6f 6d 6d 6f 6e 6c 79 20 64 65 70 6c 6f 79 65 | .work-around.is.commonly.deploye |
28ac0 | 64 20 74 6f 20 66 61 63 69 6c 69 74 61 74 65 20 74 68 65 20 74 72 61 66 66 69 63 20 62 79 20 4e | d.to.facilitate.the.traffic.by.N |
28ae0 | 41 54 69 6e 67 20 74 68 65 20 72 65 71 75 65 73 74 20 66 72 6f 6d 20 69 6e 74 65 72 6e 61 6c 20 | ATing.the.request.from.internal. |
28b00 | 68 6f 73 74 73 20 74 6f 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 | hosts.to.the.source.address.of.t |
28b20 | 68 65 20 69 6e 74 65 72 6e 61 6c 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 74 68 65 20 66 69 72 | he.internal.interface.on.the.fir |
28b40 | 65 77 61 6c 6c 2e 00 41 20 75 73 65 72 20 66 72 69 65 6e 64 6c 79 20 61 6c 69 61 73 20 66 6f 72 | ewall..A.user.friendly.alias.for |
28b60 | 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 43 61 6e 20 62 65 20 75 73 65 64 20 69 6e | .this.connection..Can.be.used.in |
28b80 | 73 74 65 61 64 20 6f 66 20 74 68 65 20 64 65 76 69 63 65 20 6e 61 6d 65 20 77 68 65 6e 20 63 6f | stead.of.the.device.name.when.co |
28ba0 | 6e 6e 65 63 74 69 6e 67 2e 00 41 20 75 73 65 72 20 66 72 69 65 6e 64 6c 79 20 64 65 73 63 72 69 | nnecting..A.user.friendly.descri |
28bc0 | 70 74 69 6f 6e 20 69 64 65 6e 74 69 66 79 69 6e 67 20 74 68 65 20 63 6f 6e 6e 65 63 74 65 64 20 | ption.identifying.the.connected. |
28be0 | 70 65 72 69 70 68 65 72 61 6c 2e 00 41 20 76 61 6c 75 65 20 6f 66 20 30 20 64 69 73 61 62 6c 65 | peripheral..A.value.of.0.disable |
28c00 | 73 20 41 52 50 20 6d 6f 6e 69 74 6f 72 69 6e 67 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 | s.ARP.monitoring..The.default.va |
28c20 | 6c 75 65 20 69 73 20 30 2e 00 41 20 76 61 6c 75 65 20 6f 66 20 32 39 36 20 77 6f 72 6b 73 20 77 | lue.is.0..A.value.of.296.works.w |
28c40 | 65 6c 6c 20 6f 6e 20 76 65 72 79 20 73 6c 6f 77 20 6c 69 6e 6b 73 20 28 34 30 20 62 79 74 65 73 | ell.on.very.slow.links.(40.bytes |
28c60 | 20 66 6f 72 20 54 43 50 2f 49 50 20 68 65 61 64 65 72 20 2b 20 32 35 36 20 62 79 74 65 73 20 6f | .for.TCP/IP.header.+.256.bytes.o |
28c80 | 66 20 64 61 74 61 29 2e 00 41 20 76 65 72 79 20 73 6d 61 6c 6c 20 62 75 66 66 65 72 20 77 69 6c | f.data)..A.very.small.buffer.wil |
28ca0 | 6c 20 73 6f 6f 6e 20 73 74 61 72 74 20 64 72 6f 70 70 69 6e 67 20 70 61 63 6b 65 74 73 2e 00 41 | l.soon.start.dropping.packets..A |
28cc0 | 20 7a 6f 6e 65 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 62 65 66 6f 72 65 20 | .zone.must.be.configured.before. |
28ce0 | 61 6e 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 69 74 20 61 | an.interface.is.assigned.to.it.a |
28d00 | 6e 64 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 62 65 20 61 73 73 69 67 6e 65 64 20 | nd.an.interface.can.be.assigned. |
28d20 | 74 6f 20 6f 6e 6c 79 20 61 20 73 69 6e 67 6c 65 20 7a 6f 6e 65 2e 00 41 43 4d 45 00 41 43 4d 45 | to.only.a.single.zone..ACME.ACME |
28d40 | 20 44 69 72 65 63 74 6f 72 79 20 52 65 73 6f 75 72 63 65 20 55 52 49 2e 00 41 50 49 00 41 52 50 | .Directory.Resource.URI..API.ARP |
28d60 | 00 41 62 6f 76 65 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 75 73 65 20 60 31 30 2e 30 2e 30 2e | .Above.command.will.use.`10.0.0. |
28d80 | 33 60 20 61 73 20 73 6f 75 72 63 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 66 6f 72 20 61 6c | 3`.as.source.IPv4.address.for.al |
28da0 | 6c 20 52 41 44 49 55 53 20 71 75 65 72 69 65 73 20 6f 6e 20 74 68 69 73 20 4e 41 53 2e 00 41 62 | l.RADIUS.queries.on.this.NAS..Ab |
28dc0 | 6f 76 65 2c 20 63 6f 6d 6d 61 6e 64 20 73 79 6e 74 61 78 20 69 73 6e 20 6e 6f 74 65 64 20 74 6f | ove,.command.syntax.isn.noted.to |
28de0 | 20 63 6f 6e 66 69 67 75 72 65 20 64 79 6e 61 6d 69 63 20 64 6e 73 20 6f 6e 20 61 20 73 70 65 63 | .configure.dynamic.dns.on.a.spec |
28e00 | 69 66 69 63 20 69 6e 74 65 72 66 61 63 65 2e 20 49 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 | ific.interface..It.is.possible.t |
28e20 | 6f 20 6f 76 65 72 6c 6f 6f 6b 20 74 68 65 20 61 64 64 69 74 69 6f 6e 61 6c 20 61 64 64 72 65 73 | o.overlook.the.additional.addres |
28e40 | 73 20 6f 70 74 69 6f 6e 2c 20 77 65 62 2c 20 77 68 65 6e 20 63 6f 6d 70 6c 65 74 65 69 6e 67 20 | s.option,.web,.when.completeing. |
28e60 | 74 68 6f 73 65 20 63 6f 6d 6d 61 6e 64 73 2e 20 64 64 63 6c 69 65 6e 74 5f 20 68 61 73 20 61 6e | those.commands..ddclient_.has.an |
28e80 | 6f 74 68 65 72 20 77 61 79 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 57 41 4e 20 49 | other.way.to.determine.the.WAN.I |
28ea0 | 50 20 61 64 64 72 65 73 73 2c 20 75 73 69 6e 67 20 61 20 77 65 62 2d 62 61 73 65 64 20 75 72 6c | P.address,.using.a.web-based.url |
28ec0 | 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 49 50 2e 20 45 | .to.determine.the.external.IP..E |
28ee0 | 61 63 68 20 6f 66 20 74 68 65 20 63 6f 6d 6d 61 6e 64 73 20 61 62 6f 76 65 20 77 69 6c 6c 20 6e | ach.of.the.commands.above.will.n |
28f00 | 65 65 64 20 74 6f 20 62 65 20 6d 6f 64 69 66 69 65 64 20 74 6f 20 75 73 65 20 27 77 65 62 27 20 | eed.to.be.modified.to.use.'web'. |
28f20 | 61 73 20 74 68 65 20 27 69 6e 74 65 72 66 61 63 65 27 20 73 70 65 63 69 66 69 65 64 20 69 66 20 | as.the.'interface'.specified.if. |
28f40 | 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 69 73 20 74 6f 20 62 65 20 75 74 69 6c | this.functionality.is.to.be.util |
28f60 | 69 7a 65 64 2e 00 41 63 63 65 6c 65 72 61 74 69 6f 6e 00 41 63 63 65 70 74 20 53 53 48 20 63 6f | ized..Acceleration.Accept.SSH.co |
28f80 | 6e 6e 65 63 74 69 6f 6e 73 20 66 6f 72 20 74 68 65 20 67 69 76 65 6e 20 60 3c 64 65 76 69 63 65 | nnections.for.the.given.`<device |
28fa0 | 3e 60 20 6f 6e 20 54 43 50 20 70 6f 72 74 20 60 3c 70 6f 72 74 3e 60 2e 20 41 66 74 65 72 20 73 | >`.on.TCP.port.`<port>`..After.s |
28fc0 | 75 63 63 65 73 73 66 75 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 74 68 65 20 75 73 | uccessfull.authentication.the.us |
28fe0 | 65 72 20 77 69 6c 6c 20 62 65 20 64 69 72 65 63 74 6c 79 20 64 72 6f 70 70 65 64 20 74 6f 20 74 | er.will.be.directly.dropped.to.t |
29000 | 68 65 20 63 6f 6e 6e 65 63 74 65 64 20 73 65 72 69 61 6c 20 64 65 76 69 63 65 2e 00 41 63 63 65 | he.connected.serial.device..Acce |
29020 | 70 74 20 6f 6e 6c 79 20 63 65 72 74 61 69 6e 20 70 72 6f 74 6f 63 6f 6c 73 3a 20 59 6f 75 20 6d | pt.only.certain.protocols:.You.m |
29040 | 61 79 20 77 61 6e 74 20 74 6f 20 72 65 70 6c 69 63 61 74 65 20 74 68 65 20 73 74 61 74 65 20 6f | ay.want.to.replicate.the.state.o |
29060 | 66 20 66 6c 6f 77 73 20 64 65 70 65 6e 64 69 6e 67 20 6f 6e 20 74 68 65 69 72 20 6c 61 79 65 72 | f.flows.depending.on.their.layer |
29080 | 20 34 20 70 72 6f 74 6f 63 6f 6c 2e 00 41 63 63 65 70 74 20 70 65 65 72 20 69 6e 74 65 72 66 61 | .4.protocol..Accept.peer.interfa |
290a0 | 63 65 20 69 64 65 6e 74 69 66 69 65 72 2e 20 42 79 20 64 65 66 61 75 6c 74 20 69 73 20 6e 6f 74 | ce.identifier..By.default.is.not |
290c0 | 20 64 65 66 69 6e 65 64 2e 00 41 63 63 65 70 74 61 62 6c 65 20 72 61 74 65 20 6f 66 20 63 6f 6e | .defined..Acceptable.rate.of.con |
290e0 | 6e 65 63 74 69 6f 6e 73 20 28 65 2e 67 2e 20 31 2f 6d 69 6e 2c 20 36 30 2f 73 65 63 29 00 41 63 | nections.(e.g..1/min,.60/sec).Ac |
29100 | 63 65 73 73 20 4c 69 73 74 20 50 6f 6c 69 63 79 00 41 63 63 65 73 73 20 4c 69 73 74 73 00 41 63 | cess.List.Policy.Access.Lists.Ac |
29120 | 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 74 61 6b 65 6e 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 2d | tion.must.be.taken.immediately.- |
29140 | 20 41 20 63 6f 6e 64 69 74 69 6f 6e 20 74 68 61 74 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 72 72 | .A.condition.that.should.be.corr |
29160 | 65 63 74 65 64 20 69 6d 6d 65 64 69 61 74 65 6c 79 2c 20 73 75 63 68 20 61 73 20 61 20 63 6f 72 | ected.immediately,.such.as.a.cor |
29180 | 72 75 70 74 65 64 20 73 79 73 74 65 6d 20 64 61 74 61 62 61 73 65 2e 00 41 63 74 69 6f 6e 20 77 | rupted.system.database..Action.w |
291a0 | 68 69 63 68 20 77 69 6c 6c 20 62 65 20 72 75 6e 20 6f 6e 63 65 20 74 68 65 20 63 74 72 6c 2d 61 | hich.will.be.run.once.the.ctrl-a |
291c0 | 6c 74 2d 64 65 6c 20 6b 65 79 73 74 72 6f 6b 65 20 69 73 20 72 65 63 65 69 76 65 64 2e 00 41 63 | lt-del.keystroke.is.received..Ac |
291e0 | 74 69 6f 6e 73 00 41 63 74 69 76 65 20 44 69 72 65 63 74 6f 72 79 00 41 63 74 69 76 65 20 68 65 | tions.Active.Directory.Active.he |
29200 | 61 6c 74 68 20 63 68 65 63 6b 20 62 61 63 6b 65 6e 64 20 73 65 72 76 65 72 00 41 64 64 20 4e 54 | alth.check.backend.server.Add.NT |
29220 | 41 20 28 6e 65 67 61 74 69 76 65 20 74 72 75 73 74 20 61 6e 63 68 6f 72 29 20 66 6f 72 20 74 68 | A.(negative.trust.anchor).for.th |
29240 | 69 73 20 64 6f 6d 61 69 6e 2e 20 54 68 69 73 20 6d 75 73 74 20 62 65 20 73 65 74 20 69 66 20 74 | is.domain..This.must.be.set.if.t |
29260 | 68 65 20 64 6f 6d 61 69 6e 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 44 4e 53 53 45 | he.domain.does.not.support.DNSSE |
29280 | 43 2e 00 41 64 64 20 50 6f 77 65 72 20 43 6f 6e 73 74 72 61 69 6e 74 20 65 6c 65 6d 65 6e 74 20 | C..Add.Power.Constraint.element. |
292a0 | 74 6f 20 42 65 61 63 6f 6e 20 61 6e 64 20 50 72 6f 62 65 20 52 65 73 70 6f 6e 73 65 20 66 72 61 | to.Beacon.and.Probe.Response.fra |
292c0 | 6d 65 73 2e 00 41 64 64 20 61 20 66 6f 72 77 61 72 64 69 6e 67 20 72 75 6c 65 20 6d 61 74 63 68 | mes..Add.a.forwarding.rule.match |
292e0 | 69 6e 67 20 55 44 50 20 70 6f 72 74 20 6f 6e 20 79 6f 75 72 20 69 6e 74 65 72 6e 65 74 20 72 6f | ing.UDP.port.on.your.internet.ro |
29300 | 75 74 65 72 2e 00 41 64 64 20 61 20 68 6f 73 74 20 64 65 76 69 63 65 20 74 6f 20 74 68 65 20 63 | uter..Add.a.host.device.to.the.c |
29320 | 6f 6e 74 61 69 6e 65 72 2e 00 41 64 64 20 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 20 64 69 72 | ontainer..Add.access-control.dir |
29340 | 65 63 74 69 76 65 20 74 6f 20 61 6c 6c 6f 77 20 6f 72 20 64 65 6e 79 20 75 73 65 72 73 20 61 6e | ective.to.allow.or.deny.users.an |
29360 | 64 20 67 72 6f 75 70 73 2e 20 44 69 72 65 63 74 69 76 65 73 20 61 72 65 20 70 72 6f 63 65 73 73 | d.groups..Directives.are.process |
29380 | 65 64 20 69 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 72 64 65 72 20 6f 66 20 70 72 65 | ed.in.the.following.order.of.pre |
293a0 | 63 65 64 65 6e 63 65 3a 20 60 60 64 65 6e 79 2d 75 73 65 72 73 60 60 2c 20 60 60 61 6c 6c 6f 77 | cedence:.``deny-users``,.``allow |
293c0 | 2d 75 73 65 72 73 60 60 2c 20 60 60 64 65 6e 79 2d 67 72 6f 75 70 73 60 60 20 61 6e 64 20 60 60 | -users``,.``deny-groups``.and.`` |
293e0 | 61 6c 6c 6f 77 2d 67 72 6f 75 70 73 60 60 2e 00 41 64 64 20 63 75 73 74 6f 6d 20 65 6e 76 69 72 | allow-groups``..Add.custom.envir |
29400 | 6f 6e 6d 65 6e 74 20 76 61 72 69 61 62 6c 65 73 2e 20 4d 75 6c 74 69 70 6c 65 20 65 6e 76 69 72 | onment.variables..Multiple.envir |
29420 | 6f 6e 6d 65 6e 74 20 76 61 72 69 61 62 6c 65 73 20 61 72 65 20 61 6c 6c 6f 77 65 64 2e 20 54 68 | onment.variables.are.allowed..Th |
29440 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 74 72 61 6e 73 6c 61 74 65 20 74 | e.following.commands.translate.t |
29460 | 6f 20 22 2d 65 20 6b 65 79 3d 76 61 6c 75 65 22 20 77 68 65 6e 20 74 68 65 20 63 6f 6e 74 61 69 | o."-e.key=value".when.the.contai |
29480 | 6e 65 72 20 69 73 20 63 72 65 61 74 65 64 2e 00 41 64 64 20 64 65 66 61 75 6c 74 20 72 6f 75 74 | ner.is.created..Add.default.rout |
294a0 | 65 73 20 66 6f 72 20 72 6f 75 74 69 6e 67 20 60 60 74 61 62 6c 65 20 31 30 60 60 20 61 6e 64 20 | es.for.routing.``table.10``.and. |
294c0 | 60 60 74 61 62 6c 65 20 31 31 60 60 00 41 64 64 20 6d 75 6c 74 69 70 6c 65 20 73 6f 75 72 63 65 | ``table.11``.Add.multiple.source |
294e0 | 20 49 50 20 69 6e 20 6f 6e 65 20 72 75 6c 65 20 77 69 74 68 20 73 61 6d 65 20 70 72 69 6f 72 69 | .IP.in.one.rule.with.same.priori |
29500 | 74 79 00 41 64 64 20 6e 65 77 20 70 6f 72 74 20 74 6f 20 53 53 4c 2d 70 6f 72 74 73 20 61 63 6c | ty.Add.new.port.to.SSL-ports.acl |
29520 | 2e 20 50 6f 72 74 73 20 69 6e 63 6c 75 64 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 69 6e 20 53 | ..Ports.included.by.default.in.S |
29540 | 53 4c 2d 70 6f 72 74 73 20 61 63 6c 3a 20 34 34 33 00 41 64 64 20 6e 65 77 20 70 6f 72 74 20 74 | SL-ports.acl:.443.Add.new.port.t |
29560 | 6f 20 53 61 66 65 2d 70 6f 72 74 73 20 61 63 6c 2e 20 50 6f 72 74 73 20 69 6e 63 6c 75 64 65 64 | o.Safe-ports.acl..Ports.included |
29580 | 20 62 79 20 64 65 66 61 75 6c 74 20 69 6e 20 53 61 66 65 2d 70 6f 72 74 73 20 61 63 6c 3a 20 32 | .by.default.in.Safe-ports.acl:.2 |
295a0 | 31 2c 20 37 30 2c 20 38 30 2c 20 32 31 30 2c 20 32 38 30 2c 20 34 34 33 2c 20 34 38 38 2c 20 35 | 1,.70,.80,.210,.280,.443,.488,.5 |
295c0 | 39 31 2c 20 37 37 37 2c 20 38 37 33 2c 20 31 30 32 35 2d 36 35 35 33 35 00 41 64 64 20 6f 72 20 | 91,.777,.873,.1025-65535.Add.or. |
295e0 | 72 65 70 6c 61 63 65 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 79 20 61 74 74 72 69 62 75 74 65 20 | replace.BGP.community.attribute. |
29600 | 69 6e 20 66 6f 72 6d 61 74 20 60 60 3c 30 2d 36 35 35 33 35 3a 30 2d 36 35 35 33 35 3e 60 60 20 | in.format.``<0-65535:0-65535>``. |
29620 | 6f 72 20 66 72 6f 6d 20 77 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 79 20 6c 69 73 | or.from.well-known.community.lis |
29640 | 74 00 41 64 64 20 6f 72 20 72 65 70 6c 61 63 65 20 42 47 50 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 | t.Add.or.replace.BGP.large-commu |
29660 | 6e 69 74 79 20 61 74 74 72 69 62 75 74 65 20 69 6e 20 66 6f 72 6d 61 74 20 60 60 3c 30 2d 34 32 | nity.attribute.in.format.``<0-42 |
29680 | 39 34 39 36 37 32 39 35 3a 30 2d 34 32 39 34 39 36 37 32 39 35 3a 30 2d 34 32 39 34 39 36 37 32 | 94967295:0-4294967295:0-42949672 |
296a0 | 39 35 3e 60 60 00 41 64 64 20 70 6f 6c 69 63 79 20 72 6f 75 74 65 20 6d 61 74 63 68 69 6e 67 20 | 95>``.Add.policy.route.matching. |
296c0 | 56 4c 41 4e 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 65 73 00 41 64 64 20 70 75 62 6c 69 63 | VLAN.source.addresses.Add.public |
296e0 | 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 | .key.portion.for.the.certificate |
29700 | 20 6e 61 6d 65 64 20 60 6e 61 6d 65 60 20 74 6f 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2e 00 41 | .named.`name`.to.the.VyOS.CLI..A |
29720 | 64 64 20 74 68 65 20 43 41 73 20 70 72 69 76 61 74 65 20 6b 65 79 20 74 6f 20 74 68 65 20 56 79 | dd.the.CAs.private.key.to.the.Vy |
29740 | 4f 53 20 43 4c 49 2e 20 54 68 69 73 20 73 68 6f 75 6c 64 20 6e 65 76 65 72 20 6c 65 61 76 65 20 | OS.CLI..This.should.never.leave. |
29760 | 74 68 65 20 73 79 73 74 65 6d 2c 20 61 6e 64 20 69 73 20 6f 6e 6c 79 20 72 65 71 75 69 72 65 64 | the.system,.and.is.only.required |
29780 | 20 69 66 20 79 6f 75 20 75 73 65 20 56 79 4f 53 20 61 73 20 79 6f 75 72 20 63 65 72 74 69 66 69 | .if.you.use.VyOS.as.your.certifi |
297a0 | 63 61 74 65 20 67 65 6e 65 72 61 74 6f 72 20 61 73 20 6d 65 6e 74 69 6f 6e 65 64 20 61 62 6f 76 | cate.generator.as.mentioned.abov |
297c0 | 65 2e 00 41 64 64 20 74 68 65 20 63 6f 6d 6d 61 6e 64 73 20 66 72 6f 6d 20 53 6e 69 70 70 65 74 | e..Add.the.commands.from.Snippet |
297e0 | 20 69 6e 20 74 68 65 20 57 69 6e 64 6f 77 73 20 73 69 64 65 20 76 69 61 20 50 6f 77 65 72 53 68 | .in.the.Windows.side.via.PowerSh |
29800 | 65 6c 6c 2e 20 41 6c 73 6f 20 69 6d 70 6f 72 74 20 74 68 65 20 72 6f 6f 74 20 43 41 20 63 65 72 | ell..Also.import.the.root.CA.cer |
29820 | 74 20 74 6f 20 74 68 65 20 57 69 6e 64 6f 77 73 20 e2 80 9c 54 72 75 73 74 65 64 20 52 6f 6f 74 | t.to.the.Windows....Trusted.Root |
29840 | 20 43 65 72 74 69 66 69 63 61 74 69 6f 6e 20 41 75 74 68 6f 72 69 74 69 65 73 e2 80 9d 20 61 6e | .Certification.Authorities....an |
29860 | 64 20 65 73 74 61 62 6c 69 73 68 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 41 64 64 20 | d.establish.the.connection..Add. |
29880 | 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 6f 66 20 74 68 69 73 20 | the.private.key.portion.of.this. |
298a0 | 63 65 72 74 69 66 69 63 61 74 65 20 74 6f 20 74 68 65 20 43 4c 49 2e 20 54 68 69 73 20 73 68 6f | certificate.to.the.CLI..This.sho |
298c0 | 75 6c 64 20 6e 65 76 65 72 20 6c 65 61 76 65 20 74 68 65 20 73 79 73 74 65 6d 20 61 73 20 69 74 | uld.never.leave.the.system.as.it |
298e0 | 20 69 73 20 75 73 65 64 20 74 6f 20 64 65 63 72 79 70 74 20 74 68 65 20 64 61 74 61 2e 00 41 64 | .is.used.to.decrypt.the.data..Ad |
29900 | 64 20 74 68 65 20 70 75 62 6c 69 63 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 66 6f 72 20 | d.the.public.CA.certificate.for. |
29920 | 74 68 65 20 43 41 20 6e 61 6d 65 64 20 60 6e 61 6d 65 60 20 74 6f 20 74 68 65 20 56 79 4f 53 20 | the.CA.named.`name`.to.the.VyOS. |
29940 | 43 4c 49 2e 00 41 64 64 69 6e 67 20 61 20 32 46 41 20 77 69 74 68 20 61 6e 20 4f 54 50 2d 6b 65 | CLI..Adding.a.2FA.with.an.OTP-ke |
29960 | 79 00 41 64 64 69 74 69 6f 6e 61 6c 20 67 6c 6f 62 61 6c 20 70 61 72 61 6d 65 74 65 72 73 20 61 | y.Additional.global.parameters.a |
29980 | 72 65 20 73 65 74 2c 20 69 6e 63 6c 75 64 69 6e 67 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 | re.set,.including.the.maximum.nu |
299a0 | 6d 62 65 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6c 69 6d 69 74 20 6f 66 20 34 30 30 30 20 61 6e | mber.connection.limit.of.4000.an |
299c0 | 64 20 61 20 6d 69 6e 69 6d 75 6d 20 54 4c 53 20 76 65 72 73 69 6f 6e 20 6f 66 20 31 2e 33 2e 00 | d.a.minimum.TLS.version.of.1.3.. |
299e0 | 41 64 64 69 74 69 6f 6e 61 6c 20 6f 70 74 69 6f 6e 20 74 6f 20 72 75 6e 20 54 46 54 50 20 73 65 | Additional.option.to.run.TFTP.se |
29a00 | 72 76 65 72 20 69 6e 20 74 68 65 20 3a 61 62 62 72 3a 60 56 52 46 20 28 56 69 72 74 75 61 6c 20 | rver.in.the.:abbr:`VRF.(Virtual. |
29a20 | 52 6f 75 74 69 6e 67 20 61 6e 64 20 46 6f 72 77 61 72 64 69 6e 67 29 60 20 63 6f 6e 74 65 78 74 | Routing.and.Forwarding)`.context |
29a40 | 00 41 64 64 69 74 69 6f 6e 61 6c 6c 79 20 79 6f 75 20 73 68 6f 75 6c 64 20 6b 65 65 70 20 69 6e | .Additionally.you.should.keep.in |
29a60 | 20 6d 69 6e 64 20 74 68 61 74 20 74 68 69 73 20 66 65 61 74 75 72 65 20 66 75 6e 64 61 6d 65 6e | .mind.that.this.feature.fundamen |
29a80 | 74 61 6c 6c 79 20 64 69 73 61 62 6c 65 73 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 75 73 | tally.disables.the.ability.to.us |
29aa0 | 65 20 77 69 64 65 6c 79 20 64 65 70 6c 6f 79 65 64 20 42 47 50 20 66 65 61 74 75 72 65 73 2e 20 | e.widely.deployed.BGP.features.. |
29ac0 | 42 47 50 20 75 6e 6e 75 6d 62 65 72 65 64 2c 20 68 6f 73 74 6e 61 6d 65 20 73 75 70 70 6f 72 74 | BGP.unnumbered,.hostname.support |
29ae0 | 2c 20 41 53 34 2c 20 41 64 64 70 61 74 68 2c 20 52 6f 75 74 65 20 52 65 66 72 65 73 68 2c 20 4f | ,.AS4,.Addpath,.Route.Refresh,.O |
29b00 | 52 46 2c 20 44 79 6e 61 6d 69 63 20 43 61 70 61 62 69 6c 69 74 69 65 73 2c 20 61 6e 64 20 67 72 | RF,.Dynamic.Capabilities,.and.gr |
29b20 | 61 63 65 66 75 6c 20 72 65 73 74 61 72 74 2e 00 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 65 61 | aceful.restart..Additionally,.ea |
29b40 | 63 68 20 63 6c 69 65 6e 74 20 6e 65 65 64 73 20 61 20 63 6f 70 79 20 6f 66 20 63 61 20 63 65 72 | ch.client.needs.a.copy.of.ca.cer |
29b60 | 74 20 61 6e 64 20 69 74 73 20 6f 77 6e 20 63 6c 69 65 6e 74 20 6b 65 79 20 61 6e 64 20 63 65 72 | t.and.its.own.client.key.and.cer |
29b80 | 74 20 66 69 6c 65 73 2e 20 54 68 65 20 66 69 6c 65 73 20 61 72 65 20 70 6c 61 69 6e 74 65 78 74 | t.files..The.files.are.plaintext |
29ba0 | 20 73 6f 20 74 68 65 79 20 6d 61 79 20 62 65 20 63 6f 70 69 65 64 20 65 69 74 68 65 72 20 6d 61 | .so.they.may.be.copied.either.ma |
29bc0 | 6e 75 61 6c 6c 79 20 66 72 6f 6d 20 74 68 65 20 43 4c 49 2e 20 43 6c 69 65 6e 74 20 6b 65 79 20 | nually.from.the.CLI..Client.key. |
29be0 | 61 6e 64 20 63 65 72 74 20 66 69 6c 65 73 20 73 68 6f 75 6c 64 20 62 65 20 73 69 67 6e 65 64 20 | and.cert.files.should.be.signed. |
29c00 | 77 69 74 68 20 74 68 65 20 70 72 6f 70 65 72 20 63 61 20 63 65 72 74 20 61 6e 64 20 67 65 6e 65 | with.the.proper.ca.cert.and.gene |
29c20 | 72 61 74 65 64 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 20 73 69 64 65 2e 00 41 64 64 69 74 69 | rated.on.the.server.side..Additi |
29c40 | 6f 6e 61 6c 6c 79 2c 20 77 65 20 77 61 6e 74 20 74 6f 20 75 73 65 20 56 50 4e 73 20 6f 6e 6c 79 | onally,.we.want.to.use.VPNs.only |
29c60 | 20 6f 6e 20 6f 75 72 20 65 74 68 31 20 69 6e 74 65 72 66 61 63 65 20 28 74 68 65 20 65 78 74 65 | .on.our.eth1.interface.(the.exte |
29c80 | 72 6e 61 6c 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 74 68 65 20 69 6d 61 67 65 20 61 62 6f 76 | rnal.interface.in.the.image.abov |
29ca0 | 65 29 00 41 64 64 72 65 73 73 00 41 64 64 72 65 73 73 20 43 6f 6e 76 65 72 73 69 6f 6e 00 41 64 | e).Address.Address.Conversion.Ad |
29cc0 | 64 72 65 73 73 20 46 61 6d 69 6c 69 65 73 00 41 64 64 72 65 73 73 20 47 72 6f 75 70 73 00 41 64 | dress.Families.Address.Groups.Ad |
29ce0 | 64 72 65 73 73 20 70 6f 6f 6c 20 73 68 61 6c 6c 20 62 65 20 60 60 32 30 30 31 3a 64 62 38 3a 3a | dress.pool.shall.be.``2001:db8:: |
29d00 | 31 30 30 60 60 20 74 68 72 6f 75 67 68 20 60 60 32 30 30 31 3a 64 62 38 3a 3a 31 39 39 60 60 2e | 100``.through.``2001:db8::199``. |
29d20 | 00 41 64 64 72 65 73 73 20 70 6f 6f 6c 73 00 41 64 64 72 65 73 73 20 74 6f 20 6c 69 73 74 65 6e | .Address.pools.Address.to.listen |
29d40 | 20 66 6f 72 20 48 54 54 50 53 20 72 65 71 75 65 73 74 73 00 41 64 64 73 20 72 65 67 69 73 74 72 | .for.HTTPS.requests.Adds.registr |
29d60 | 79 20 74 6f 20 6c 69 73 74 20 6f 66 20 75 6e 71 75 61 6c 69 66 69 65 64 2d 73 65 61 72 63 68 2d | y.to.list.of.unqualified-search- |
29d80 | 72 65 67 69 73 74 72 69 65 73 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 66 6f 72 20 61 6e 79 20 | registries..By.default,.for.any. |
29da0 | 69 6d 61 67 65 20 74 68 61 74 20 64 6f 65 73 20 6e 6f 74 20 69 6e 63 6c 75 64 65 20 74 68 65 20 | image.that.does.not.include.the. |
29dc0 | 72 65 67 69 73 74 72 79 20 69 6e 20 74 68 65 20 69 6d 61 67 65 20 6e 61 6d 65 2c 20 56 79 4f 53 | registry.in.the.image.name,.VyOS |
29de0 | 20 77 69 6c 6c 20 75 73 65 20 64 6f 63 6b 65 72 2e 69 6f 20 61 6e 64 20 71 75 61 79 2e 69 6f 20 | .will.use.docker.io.and.quay.io. |
29e00 | 61 73 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 73 74 72 79 2e 00 41 64 64 73 20 | as.the.container.registry..Adds. |
29e20 | 72 65 67 69 73 74 72 79 20 74 6f 20 6c 69 73 74 20 6f 66 20 75 6e 71 75 61 6c 69 66 69 65 64 2d | registry.to.list.of.unqualified- |
29e40 | 73 65 61 72 63 68 2d 72 65 67 69 73 74 72 69 65 73 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 66 | search-registries..By.default,.f |
29e60 | 6f 72 20 61 6e 79 20 69 6d 61 67 65 20 74 68 61 74 20 64 6f 65 73 20 6e 6f 74 20 69 6e 63 6c 75 | or.any.image.that.does.not.inclu |
29e80 | 64 65 20 74 68 65 20 72 65 67 69 73 74 72 79 20 69 6e 20 74 68 65 20 69 6d 61 67 65 20 6e 61 6d | de.the.registry.in.the.image.nam |
29ea0 | 65 2c 20 56 79 6f 73 20 77 69 6c 6c 20 75 73 65 20 64 6f 63 6b 65 72 2e 69 6f 20 61 73 20 74 68 | e,.Vyos.will.use.docker.io.as.th |
29ec0 | 65 20 63 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 73 74 72 79 2e 00 41 64 6d 69 6e 69 73 74 72 61 | e.container.registry..Administra |
29ee0 | 74 69 76 65 20 44 69 73 74 61 6e 63 65 00 41 64 76 61 6e 63 65 64 20 49 6e 74 65 72 66 61 63 65 | tive.Distance.Advanced.Interface |
29f00 | 20 4f 70 74 69 6f 6e 73 00 41 64 76 61 6e 63 65 64 20 4f 70 74 69 6f 6e 73 00 41 64 76 61 6e 63 | .Options.Advanced.Options.Advanc |
29f20 | 65 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 20 | ed.configuration.can.be.used.in. |
29f40 | 6f 72 64 65 72 20 74 6f 20 61 70 70 6c 79 20 73 6f 75 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 | order.to.apply.source.or.destina |
29f60 | 74 69 6f 6e 20 4e 41 54 2c 20 61 6e 64 20 77 69 74 68 69 6e 20 61 20 73 69 6e 67 6c 65 20 72 75 | tion.NAT,.and.within.a.single.ru |
29f80 | 6c 65 2c 20 62 65 20 61 62 6c 65 20 74 6f 20 64 65 66 69 6e 65 20 6d 75 6c 74 69 70 6c 65 20 74 | le,.be.able.to.define.multiple.t |
29fa0 | 72 61 6e 73 6c 61 74 65 64 20 61 64 64 72 65 73 73 65 73 2c 20 73 6f 20 4e 41 54 20 62 61 6c 61 | ranslated.addresses,.so.NAT.bala |
29fc0 | 6e 63 65 73 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 73 20 61 6d 6f 6e 67 20 74 68 65 6d | nces.the.translations.among.them |
29fe0 | 2e 00 41 64 76 61 6e 74 61 67 65 73 20 6f 66 20 4f 70 65 6e 56 50 4e 20 61 72 65 3a 00 41 64 76 | ..Advantages.of.OpenVPN.are:.Adv |
2a000 | 65 72 74 69 73 65 20 44 4e 53 20 73 65 72 76 65 72 20 70 65 72 20 68 74 74 70 73 3a 2f 2f 74 6f | ertise.DNS.server.per.https://to |
2a020 | 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 36 31 30 36 00 41 64 76 65 72 74 | ols.ietf.org/html/rfc6106.Advert |
2a040 | 69 73 69 6e 67 20 61 20 4e 41 54 36 34 20 50 72 65 66 69 78 00 41 64 76 65 72 74 69 73 69 6e 67 | ising.a.NAT64.Prefix.Advertising |
2a060 | 20 61 20 50 72 65 66 69 78 00 41 66 74 65 72 20 63 6f 6d 6d 69 74 20 74 68 65 20 70 6c 61 69 6e | .a.Prefix.After.commit.the.plain |
2a080 | 74 65 78 74 20 70 61 73 73 77 6f 72 64 73 20 77 69 6c 6c 20 62 65 20 68 61 73 68 65 64 20 61 6e | text.passwords.will.be.hashed.an |
2a0a0 | 64 20 73 74 6f 72 65 64 20 69 6e 20 79 6f 75 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 | d.stored.in.your.configuration.. |
2a0c0 | 54 68 65 20 72 65 73 75 6c 74 69 6e 67 20 43 4c 49 20 63 6f 6e 66 69 67 20 77 69 6c 6c 20 6c 6f | The.resulting.CLI.config.will.lo |
2a0e0 | 6f 6b 20 6c 69 6b 65 3a 00 41 66 74 65 72 20 63 6f 6d 6d 69 74 74 69 6e 67 20 74 68 65 20 63 6f | ok.like:.After.committing.the.co |
2a100 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 65 20 63 61 6e 20 76 65 72 69 66 79 20 61 6c 6c 20 6c 65 | nfiguration.we.can.verify.all.le |
2a120 | 61 6b 65 64 20 72 6f 75 74 65 73 20 61 72 65 20 69 6e 73 74 61 6c 6c 65 64 2c 20 61 6e 64 20 74 | aked.routes.are.installed,.and.t |
2a140 | 72 79 20 74 6f 20 49 43 4d 50 20 70 69 6e 67 20 50 43 31 20 66 72 6f 6d 20 50 43 33 2e 00 41 66 | ry.to.ICMP.ping.PC1.from.PC3..Af |
2a160 | 74 65 72 20 74 68 65 20 50 4b 49 20 63 65 72 74 73 20 61 72 65 20 61 6c 6c 20 73 65 74 20 75 70 | ter.the.PKI.certs.are.all.set.up |
2a180 | 20 77 65 20 63 61 6e 20 73 74 61 72 74 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 6f 75 72 20 49 50 | .we.can.start.configuring.our.IP |
2a1a0 | 53 65 63 2f 49 4b 45 20 70 72 6f 70 6f 73 61 6c 73 20 75 73 65 64 20 66 6f 72 20 6b 65 79 2d 65 | Sec/IKE.proposals.used.for.key-e |
2a1c0 | 78 63 68 61 6e 67 65 20 65 6e 64 20 64 61 74 61 20 65 6e 63 72 79 70 74 69 6f 6e 2e 20 54 68 65 | xchange.end.data.encryption..The |
2a1e0 | 20 75 73 65 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 69 70 68 65 72 73 20 61 6e 64 20 69 6e 74 | .used.encryption.ciphers.and.int |
2a200 | 65 67 72 69 74 79 20 61 6c 67 6f 72 69 74 68 6d 73 20 76 61 72 79 20 66 72 6f 6d 20 6f 70 65 72 | egrity.algorithms.vary.from.oper |
2a220 | 61 74 69 6e 67 20 73 79 73 74 65 6d 20 74 6f 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d | ating.system.to.operating.system |
2a240 | 2e 20 54 68 65 20 6f 6e 65 73 20 75 73 65 64 20 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 | ..The.ones.used.in.this.example. |
2a260 | 61 72 65 20 76 61 6c 69 64 61 74 65 64 20 74 6f 20 77 6f 72 6b 20 6f 6e 20 57 69 6e 64 6f 77 73 | are.validated.to.work.on.Windows |
2a280 | 20 31 30 2e 00 41 66 74 65 72 20 74 68 65 20 50 4b 49 20 63 65 72 74 73 20 61 72 65 20 61 6c 6c | .10..After.the.PKI.certs.are.all |
2a2a0 | 20 73 65 74 20 75 70 20 77 65 20 63 61 6e 20 73 74 61 72 74 20 63 6f 6e 66 69 67 75 72 69 6e 67 | .set.up.we.can.start.configuring |
2a2c0 | 20 6f 75 72 20 49 50 53 65 63 2f 49 4b 45 20 70 72 6f 70 6f 73 61 6c 73 20 75 73 65 64 20 66 6f | .our.IPSec/IKE.proposals.used.fo |
2a2e0 | 72 20 6b 65 79 2d 65 78 63 68 61 6e 67 65 20 65 6e 64 20 64 61 74 61 20 65 6e 63 72 79 70 74 69 | r.key-exchange.end.data.encrypti |
2a300 | 6f 6e 2e 20 54 68 65 20 75 73 65 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 69 70 68 65 72 73 20 | on..The.used.encryption.ciphers. |
2a320 | 61 6e 64 20 69 6e 74 65 67 72 69 74 79 20 61 6c 67 6f 72 69 74 68 6d 73 20 76 61 72 79 20 66 72 | and.integrity.algorithms.vary.fr |
2a340 | 6f 6d 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d 20 74 6f 20 6f 70 65 72 61 74 69 6e 67 | om.operating.system.to.operating |
2a360 | 20 73 79 73 74 65 6d 2e 20 54 68 65 20 6f 6e 65 73 20 75 73 65 64 20 69 6e 20 74 68 69 73 20 70 | .system..The.ones.used.in.this.p |
2a380 | 6f 73 74 20 61 72 65 20 76 61 6c 69 64 61 74 65 64 20 74 6f 20 77 6f 72 6b 20 6f 6e 20 62 6f 74 | ost.are.validated.to.work.on.bot |
2a3a0 | 68 20 57 69 6e 64 6f 77 73 20 31 30 20 61 6e 64 20 69 4f 53 2f 69 50 61 64 4f 53 20 31 34 20 74 | h.Windows.10.and.iOS/iPadOS.14.t |
2a3c0 | 6f 20 31 37 2e 00 41 66 74 65 72 20 77 65 20 68 61 76 65 20 69 6d 70 6f 72 74 65 64 20 74 68 65 | o.17..After.we.have.imported.the |
2a3e0 | 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 28 73 29 20 77 65 20 63 61 6e 20 6e 6f 77 20 69 6d | .CA.certificate(s).we.can.now.im |
2a400 | 70 6f 72 74 20 61 6e 64 20 61 64 64 20 63 65 72 74 69 66 69 63 61 74 65 73 20 75 73 65 64 20 62 | port.and.add.certificates.used.b |
2a420 | 79 20 73 65 72 76 69 63 65 73 20 6f 6e 20 74 68 69 73 20 72 6f 75 74 65 72 2e 00 41 66 74 65 72 | y.services.on.this.router..After |
2a440 | 20 79 6f 75 20 6f 62 74 61 69 6e 65 64 20 79 6f 75 72 20 73 65 72 76 65 72 20 63 65 72 74 69 66 | .you.obtained.your.server.certif |
2a460 | 69 63 61 74 65 20 79 6f 75 20 63 61 6e 20 69 6d 70 6f 72 74 20 69 74 20 66 72 6f 6d 20 61 20 66 | icate.you.can.import.it.from.a.f |
2a480 | 69 6c 65 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 66 69 6c 65 73 79 73 74 65 6d 2c 20 6f 72 20 | ile.on.the.local.filesystem,.or. |
2a4a0 | 70 61 73 74 65 20 69 74 20 69 6e 74 6f 20 74 68 65 20 43 4c 49 2e 20 50 6c 65 61 73 65 20 6e 6f | paste.it.into.the.CLI..Please.no |
2a4c0 | 74 65 20 74 68 61 74 20 77 68 65 6e 20 65 6e 74 65 72 69 6e 67 20 74 68 65 20 63 65 72 74 69 66 | te.that.when.entering.the.certif |
2a4e0 | 69 63 61 74 65 20 6d 61 6e 75 61 6c 6c 79 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 74 72 69 70 | icate.manually.you.need.to.strip |
2a500 | 20 74 68 65 20 60 60 2d 2d 2d 2d 2d 42 45 47 49 4e 20 4b 45 59 2d 2d 2d 2d 2d 60 60 20 61 6e 64 | .the.``-----BEGIN.KEY-----``.and |
2a520 | 20 60 60 2d 2d 2d 2d 2d 45 4e 44 20 4b 45 59 2d 2d 2d 2d 2d 60 60 20 74 61 67 73 2e 20 41 6c 73 | .``-----END.KEY-----``.tags..Als |
2a540 | 6f 2c 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 6f 72 20 6b 65 79 20 6e 65 65 64 73 20 | o,.the.certificate.or.key.needs. |
2a560 | 74 6f 20 62 65 20 70 72 65 73 65 6e 74 65 64 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 6c 69 6e 65 | to.be.presented.in.a.single.line |
2a580 | 20 77 69 74 68 6f 75 74 20 6c 69 6e 65 20 62 72 65 61 6b 73 20 28 60 60 5c 6e 60 60 29 2e 00 41 | .without.line.breaks.(``\n``)..A |
2a5a0 | 67 65 6e 74 20 2d 20 73 6f 66 74 77 61 72 65 20 77 68 69 63 68 20 72 75 6e 73 20 6f 6e 20 6d 61 | gent.-.software.which.runs.on.ma |
2a5c0 | 6e 61 67 65 64 20 64 65 76 69 63 65 73 00 41 6c 65 72 74 00 41 6c 67 6f 72 69 74 68 6d 00 41 6c | naged.devices.Alert.Algorithm.Al |
2a5e0 | 69 61 73 65 73 00 41 6c 6c 20 44 4e 53 20 72 65 71 75 65 73 74 73 20 66 6f 72 20 65 78 61 6d 70 | iases.All.DNS.requests.for.examp |
2a600 | 6c 65 2e 63 6f 6d 20 6d 75 73 74 20 62 65 20 66 6f 72 77 61 72 64 65 64 20 74 6f 20 61 20 44 4e | le.com.must.be.forwarded.to.a.DN |
2a620 | 53 20 73 65 72 76 65 72 20 61 74 20 31 39 32 2e 30 2e 32 2e 32 35 34 20 61 6e 64 20 32 30 30 31 | S.server.at.192.0.2.254.and.2001 |
2a640 | 3a 64 62 38 3a 63 61 66 65 3a 3a 31 00 41 6c 6c 20 53 4e 4d 50 20 4d 49 42 73 20 61 72 65 20 6c | :db8:cafe::1.All.SNMP.MIBs.are.l |
2a660 | 6f 63 61 74 65 64 20 69 6e 20 65 61 63 68 20 69 6d 61 67 65 20 6f 66 20 56 79 4f 53 20 68 65 72 | ocated.in.each.image.of.VyOS.her |
2a680 | 65 3a 20 60 60 2f 75 73 72 2f 73 68 61 72 65 2f 73 6e 6d 70 2f 6d 69 62 73 2f 60 60 00 41 6c 6c | e:.``/usr/share/snmp/mibs/``.All |
2a6a0 | 20 61 76 61 69 6c 61 62 6c 65 20 57 57 41 4e 20 63 61 72 64 73 20 68 61 76 65 20 61 20 62 75 69 | .available.WWAN.cards.have.a.bui |
2a6c0 | 6c 64 20 69 6e 2c 20 72 65 70 72 6f 67 72 61 6d 6d 61 62 6c 65 20 66 69 72 6d 77 61 72 65 2e 20 | ld.in,.reprogrammable.firmware.. |
2a6e0 | 4d 6f 73 74 20 6f 66 20 74 68 65 20 76 65 6e 64 6f 72 73 20 70 72 6f 76 69 64 65 20 61 20 72 65 | Most.of.the.vendors.provide.a.re |
2a700 | 67 75 6c 61 72 20 75 70 64 61 74 65 20 74 6f 20 74 68 65 20 66 69 72 6d 77 61 72 65 20 75 73 65 | gular.update.to.the.firmware.use |
2a720 | 64 20 69 6e 20 74 68 65 20 62 61 73 65 62 61 6e 64 20 63 68 69 70 2e 00 41 6c 6c 20 63 65 72 74 | d.in.the.baseband.chip..All.cert |
2a740 | 69 66 69 63 61 74 65 73 20 73 68 6f 75 6c 64 20 62 65 20 73 74 6f 72 65 64 20 6f 6e 20 56 79 4f | ificates.should.be.stored.on.VyO |
2a760 | 53 20 75 6e 64 65 72 20 60 60 2f 63 6f 6e 66 69 67 2f 61 75 74 68 60 60 2e 20 49 66 20 63 65 72 | S.under.``/config/auth``..If.cer |
2a780 | 74 69 66 69 63 61 74 65 73 20 61 72 65 20 6e 6f 74 20 73 74 6f 72 65 64 20 69 6e 20 74 68 65 20 | tificates.are.not.stored.in.the. |
2a7a0 | 60 60 2f 63 6f 6e 66 69 67 60 60 20 64 69 72 65 63 74 6f 72 79 20 74 68 65 79 20 77 69 6c 6c 20 | ``/config``.directory.they.will. |
2a7c0 | 6e 6f 74 20 62 65 20 6d 69 67 72 61 74 65 64 20 64 75 72 69 6e 67 20 61 20 73 6f 66 74 77 61 72 | not.be.migrated.during.a.softwar |
2a7e0 | 65 20 75 70 64 61 74 65 2e 00 41 6c 6c 20 66 61 63 69 6c 69 74 69 65 73 00 41 6c 6c 20 69 6e 74 | e.update..All.facilities.All.int |
2a800 | 65 72 66 61 63 65 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 44 48 43 50 20 72 65 6c 61 79 20 | erfaces.used.for.the.DHCP.relay. |
2a820 | 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 | must.be.configured..This.include |
2a840 | 73 20 74 68 65 20 75 70 6c 69 6e 6b 20 74 6f 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 2e | s.the.uplink.to.the.DHCP.server. |
2a860 | 00 41 6c 6c 20 69 74 65 6d 73 20 69 6e 20 61 20 73 79 6e 63 20 67 72 6f 75 70 20 73 68 6f 75 6c | .All.items.in.a.sync.group.shoul |
2a880 | 64 20 62 65 20 73 69 6d 69 6c 61 72 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 49 66 20 6f 6e | d.be.similarly.configured..If.on |
2a8a0 | 65 20 56 52 52 50 20 67 72 6f 75 70 20 69 73 20 73 65 74 20 74 6f 20 61 20 64 69 66 66 65 72 65 | e.VRRP.group.is.set.to.a.differe |
2a8c0 | 6e 74 20 70 72 65 65 6d 70 74 69 6f 6e 20 64 65 6c 61 79 20 6f 72 20 70 72 69 6f 72 69 74 79 2c | nt.preemption.delay.or.priority, |
2a8e0 | 20 69 74 20 77 6f 75 6c 64 20 72 65 73 75 6c 74 20 69 6e 20 61 6e 20 65 6e 64 6c 65 73 73 20 74 | .it.would.result.in.an.endless.t |
2a900 | 72 61 6e 73 69 74 69 6f 6e 20 6c 6f 6f 70 2e 00 41 6c 6c 20 6f 74 68 65 72 20 44 4e 53 20 72 65 | ransition.loop..All.other.DNS.re |
2a920 | 71 75 65 73 74 73 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 64 65 64 20 74 6f 20 61 20 64 69 | quests.will.be.forwarded.to.a.di |
2a940 | 66 66 65 72 65 6e 74 20 73 65 74 20 6f 66 20 44 4e 53 20 73 65 72 76 65 72 73 20 61 74 20 31 39 | fferent.set.of.DNS.servers.at.19 |
2a960 | 32 2e 30 2e 32 2e 31 2c 20 31 39 32 2e 30 2e 32 2e 32 2c 20 32 30 30 31 3a 64 62 38 3a 3a 31 3a | 2.0.2.1,.192.0.2.2,.2001:db8::1: |
2a980 | 66 66 66 66 20 61 6e 64 20 32 30 30 31 3a 64 62 38 3a 3a 32 3a 66 66 66 66 00 41 6c 6c 20 72 65 | ffff.and.2001:db8::2:ffff.All.re |
2a9a0 | 70 6c 79 20 73 69 7a 65 73 20 61 72 65 20 61 63 63 65 70 74 65 64 20 62 79 20 64 65 66 61 75 6c | ply.sizes.are.accepted.by.defaul |
2a9c0 | 74 2e 00 41 6c 6c 20 72 6f 75 74 65 72 73 20 69 6e 20 74 68 65 20 50 49 4d 20 6e 65 74 77 6f 72 | t..All.routers.in.the.PIM.networ |
2a9e0 | 6b 20 6d 75 73 74 20 61 67 72 65 65 20 6f 6e 20 74 68 65 73 65 20 76 61 6c 75 65 73 2e 00 41 6c | k.must.agree.on.these.values..Al |
2aa00 | 6c 20 73 63 72 69 70 74 73 20 65 78 63 65 63 75 74 65 64 20 74 68 69 73 20 77 61 79 20 61 72 65 | l.scripts.excecuted.this.way.are |
2aa20 | 20 65 78 65 63 75 74 65 64 20 61 73 20 72 6f 6f 74 20 75 73 65 72 20 2d 20 74 68 69 73 20 6d 61 | .executed.as.root.user.-.this.ma |
2aa40 | 79 20 62 65 20 64 61 6e 67 65 72 6f 75 73 2e 20 54 6f 67 65 74 68 65 72 20 77 69 74 68 20 3a 72 | y.be.dangerous..Together.with.:r |
2aa60 | 65 66 3a 60 63 6f 6d 6d 61 6e 64 2d 73 63 72 69 70 74 69 6e 67 60 20 74 68 69 73 20 63 61 6e 20 | ef:`command-scripting`.this.can. |
2aa80 | 62 65 20 75 73 65 64 20 66 6f 72 20 61 75 74 6f 6d 61 74 69 6e 67 20 28 72 65 2d 29 63 6f 6e 66 | be.used.for.automating.(re-)conf |
2aaa0 | 69 67 75 72 61 74 69 6f 6e 2e 00 41 6c 6c 20 74 68 65 73 65 20 72 75 6c 65 73 20 77 69 74 68 20 | iguration..All.these.rules.with. |
2aac0 | 4f 54 43 20 77 69 6c 6c 20 68 65 6c 70 20 74 6f 20 64 65 74 65 63 74 20 61 6e 64 20 6d 69 74 69 | OTC.will.help.to.detect.and.miti |
2aae0 | 67 61 74 65 20 72 6f 75 74 65 20 6c 65 61 6b 73 20 61 6e 64 20 68 61 70 70 65 6e 20 61 75 74 6f | gate.route.leaks.and.happen.auto |
2ab00 | 6d 61 74 69 63 61 6c 6c 79 20 69 66 20 6c 6f 63 61 6c 2d 72 6f 6c 65 20 69 73 20 73 65 74 2e 00 | matically.if.local-role.is.set.. |
2ab20 | 41 6c 6c 20 74 68 6f 73 65 20 70 72 6f 74 6f 63 6f 6c 73 20 61 72 65 20 67 72 6f 75 70 65 64 20 | All.those.protocols.are.grouped. |
2ab40 | 75 6e 64 65 72 20 60 60 69 6e 74 65 72 66 61 63 65 73 20 74 75 6e 6e 65 6c 60 60 20 69 6e 20 56 | under.``interfaces.tunnel``.in.V |
2ab60 | 79 4f 53 2e 20 4c 65 74 27 73 20 74 61 6b 65 20 61 20 63 6c 6f 73 65 72 20 6c 6f 6f 6b 20 61 74 | yOS..Let's.take.a.closer.look.at |
2ab80 | 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 73 20 61 6e 64 20 6f 70 74 69 6f 6e 73 20 63 75 72 72 65 | .the.protocols.and.options.curre |
2aba0 | 6e 74 6c 79 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 56 79 4f 53 2e 00 41 6c 6c 20 74 72 61 66 | ntly.supported.by.VyOS..All.traf |
2abc0 | 66 69 63 20 62 65 74 77 65 65 6e 20 7a 6f 6e 65 73 20 69 73 20 61 66 66 65 63 74 65 64 20 62 79 | fic.between.zones.is.affected.by |
2abe0 | 20 65 78 69 73 74 69 6e 67 20 70 6f 6c 69 63 69 65 73 00 41 6c 6c 20 74 72 61 66 66 69 63 20 74 | .existing.policies.All.traffic.t |
2ac00 | 6f 20 61 6e 64 20 66 72 6f 6d 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 69 6e 20 61 | o.and.from.an.interface.within.a |
2ac20 | 20 7a 6f 6e 65 20 69 73 20 70 65 72 6d 69 74 74 65 64 2e 00 41 6c 6c 20 74 75 6e 6e 65 6c 20 73 | .zone.is.permitted..All.tunnel.s |
2ac40 | 65 73 73 69 6f 6e 73 20 63 61 6e 20 62 65 20 63 68 65 63 6b 65 64 20 76 69 61 3a 00 41 6c 6c 6f | essions.can.be.checked.via:.Allo |
2ac60 | 63 61 74 69 6f 6e 20 63 6c 69 65 6e 74 73 20 69 70 20 61 64 64 72 65 73 73 65 73 20 62 79 20 52 | cation.clients.ip.addresses.by.R |
2ac80 | 41 44 49 55 53 00 41 6c 6c 6f 77 20 60 60 73 73 68 60 60 20 64 79 6e 61 6d 69 63 2d 70 72 6f 74 | ADIUS.Allow.``ssh``.dynamic-prot |
2aca0 | 65 63 74 69 6f 6e 2e 00 41 6c 6c 6f 77 20 61 63 63 65 73 73 20 74 6f 20 73 69 74 65 73 20 69 6e | ection..Allow.access.to.sites.in |
2acc0 | 20 61 20 64 6f 6d 61 69 6e 20 77 69 74 68 6f 75 74 20 72 65 74 72 69 65 76 69 6e 67 20 74 68 65 | .a.domain.without.retrieving.the |
2ace0 | 6d 20 66 72 6f 6d 20 74 68 65 20 50 72 6f 78 79 20 63 61 63 68 65 2e 20 53 70 65 63 69 66 79 69 | m.from.the.Proxy.cache..Specifyi |
2ad00 | 6e 67 20 22 76 79 6f 73 2e 6e 65 74 22 20 77 69 6c 6c 20 61 6c 6c 6f 77 20 61 63 63 65 73 73 20 | ng."vyos.net".will.allow.access. |
2ad20 | 74 6f 20 76 79 6f 73 2e 6e 65 74 20 62 75 74 20 74 68 65 20 70 61 67 65 73 20 61 63 63 65 73 73 | to.vyos.net.but.the.pages.access |
2ad40 | 65 64 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 61 63 68 65 64 2e 20 49 74 20 75 73 65 66 75 6c | ed.will.not.be.cached..It.useful |
2ad60 | 20 66 6f 72 20 77 6f 72 6b 69 6e 67 20 61 72 6f 75 6e 64 20 70 72 6f 62 6c 65 6d 73 20 77 69 74 | .for.working.around.problems.wit |
2ad80 | 68 20 22 49 66 2d 4d 6f 64 69 66 69 65 64 2d 53 69 6e 63 65 22 20 63 68 65 63 6b 69 6e 67 20 61 | h."If-Modified-Since".checking.a |
2ada0 | 74 20 63 65 72 74 61 69 6e 20 73 69 74 65 73 2e 00 41 6c 6c 6f 77 20 62 67 70 20 74 6f 20 6e 65 | t.certain.sites..Allow.bgp.to.ne |
2adc0 | 67 6f 74 69 61 74 65 20 74 68 65 20 65 78 74 65 6e 64 65 64 2d 6e 65 78 74 68 6f 70 20 63 61 70 | gotiate.the.extended-nexthop.cap |
2ade0 | 61 62 69 6c 69 74 79 20 77 69 74 68 20 69 74 e2 80 99 73 20 70 65 65 72 2e 20 49 66 20 79 6f 75 | ability.with.it...s.peer..If.you |
2ae00 | 20 61 72 65 20 70 65 65 72 69 6e 67 20 6f 76 65 72 20 61 20 49 50 76 36 20 4c 69 6e 6b 2d 4c 6f | .are.peering.over.a.IPv6.Link-Lo |
2ae20 | 63 61 6c 20 61 64 64 72 65 73 73 20 74 68 65 6e 20 74 68 69 73 20 63 61 70 61 62 69 6c 69 74 79 | cal.address.then.this.capability |
2ae40 | 20 69 73 20 74 75 72 6e 65 64 20 6f 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 20 49 66 20 | .is.turned.on.automatically..If. |
2ae60 | 79 6f 75 20 61 72 65 20 70 65 65 72 69 6e 67 20 6f 76 65 72 20 61 20 49 50 76 36 20 47 6c 6f 62 | you.are.peering.over.a.IPv6.Glob |
2ae80 | 61 6c 20 41 64 64 72 65 73 73 20 74 68 65 6e 20 74 75 72 6e 69 6e 67 20 6f 6e 20 74 68 69 73 20 | al.Address.then.turning.on.this. |
2aea0 | 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 61 6c 6c 6f 77 20 42 47 50 20 74 6f 20 69 6e 73 74 61 6c | command.will.allow.BGP.to.instal |
2aec0 | 6c 20 49 50 76 34 20 72 6f 75 74 65 73 20 77 69 74 68 20 49 50 76 36 20 6e 65 78 74 68 6f 70 73 | l.IPv4.routes.with.IPv6.nexthops |
2aee0 | 20 69 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 68 61 76 65 20 49 50 76 34 20 63 6f 6e 66 69 67 75 | .if.you.do.not.have.IPv4.configu |
2af00 | 72 65 64 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 73 2e 00 41 6c 6c 6f 77 20 65 78 70 6c 69 63 69 | red.on.interfaces..Allow.explici |
2af20 | 74 20 49 50 76 36 20 61 64 64 72 65 73 73 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 | t.IPv6.address.for.the.interface |
2af40 | 2e 00 41 6c 6c 6f 77 20 68 6f 73 74 20 6e 65 74 77 6f 72 6b 69 6e 67 20 69 6e 20 61 20 63 6f 6e | ..Allow.host.networking.in.a.con |
2af60 | 74 61 69 6e 65 72 2e 20 54 68 65 20 6e 65 74 77 6f 72 6b 20 73 74 61 63 6b 20 6f 66 20 74 68 65 | tainer..The.network.stack.of.the |
2af80 | 20 63 6f 6e 74 61 69 6e 65 72 20 69 73 20 6e 6f 74 20 69 73 6f 6c 61 74 65 64 20 66 72 6f 6d 20 | .container.is.not.isolated.from. |
2afa0 | 74 68 65 20 68 6f 73 74 20 61 6e 64 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 68 6f 73 74 20 49 | the.host.and.will.use.the.host.I |
2afc0 | 50 2e 00 41 6c 6c 6f 77 20 6c 69 73 74 69 6e 67 20 61 64 64 69 74 69 6f 6e 61 6c 20 63 75 73 74 | P..Allow.listing.additional.cust |
2afe0 | 6f 6d 20 64 6f 6d 61 69 6e 73 20 74 6f 20 62 65 20 62 72 6f 77 73 65 64 20 28 69 6e 20 61 64 64 | om.domains.to.be.browsed.(in.add |
2b000 | 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 64 65 66 61 75 6c 74 20 60 60 6c 6f 63 61 6c 60 60 29 20 | ition.to.the.default.``local``). |
2b020 | 73 6f 20 74 68 61 74 20 74 68 65 79 20 63 61 6e 20 62 65 20 72 65 66 6c 65 63 74 65 64 2e 00 41 | so.that.they.can.be.reflected..A |
2b040 | 6c 6c 6f 77 20 74 68 69 73 20 42 46 44 20 70 65 65 72 20 74 6f 20 6e 6f 74 20 62 65 20 64 69 72 | llow.this.BFD.peer.to.not.be.dir |
2b060 | 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 00 41 6c 6c 6f 77 65 64 20 76 61 6c 75 65 73 20 66 | ectly.connected.Allowed.values.f |
2b080 | 70 72 20 54 43 50 20 66 6c 61 67 73 3a 20 60 60 53 59 4e 60 60 2c 20 60 60 41 43 4b 60 60 2c 20 | pr.TCP.flags:.``SYN``,.``ACK``,. |
2b0a0 | 60 60 46 49 4e 60 60 2c 20 60 60 52 53 54 60 60 2c 20 60 60 55 52 47 60 60 2c 20 60 60 50 53 48 | ``FIN``,.``RST``,.``URG``,.``PSH |
2b0c0 | 60 60 2c 20 60 60 41 4c 4c 60 60 20 57 68 65 6e 20 73 70 65 63 69 66 79 69 6e 67 20 6d 6f 72 65 | ``,.``ALL``.When.specifying.more |
2b0e0 | 20 74 68 61 6e 20 6f 6e 65 20 66 6c 61 67 2c 20 66 6c 61 67 73 20 73 68 6f 75 6c 64 20 62 65 20 | .than.one.flag,.flags.should.be. |
2b100 | 63 6f 6d 6d 61 20 73 65 70 61 72 61 74 65 64 2e 20 54 68 65 20 60 60 21 60 60 20 6e 65 67 61 74 | comma.separated..The.``!``.negat |
2b120 | 65 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 70 72 6f 74 6f 63 6f 6c 2e 00 41 6c 6c 6f 77 65 64 | e.the.selected.protocol..Allowed |
2b140 | 20 76 61 6c 75 65 73 20 66 70 72 20 54 43 50 20 66 6c 61 67 73 3a 20 60 60 61 63 6b 60 60 2c 20 | .values.fpr.TCP.flags:.``ack``,. |
2b160 | 60 60 63 77 72 60 60 2c 20 60 60 65 63 6e 60 60 2c 20 60 60 66 69 6e 60 60 2c 20 60 60 70 73 68 | ``cwr``,.``ecn``,.``fin``,.``psh |
2b180 | 60 60 2c 20 60 60 72 73 74 60 60 2c 20 60 60 73 79 6e 60 60 20 61 6e 64 20 60 60 75 72 67 60 60 | ``,.``rst``,.``syn``.and.``urg`` |
2b1a0 | 2e 20 4d 75 6c 74 69 70 6c 65 20 76 61 6c 75 65 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2c | ..Multiple.values.are.supported, |
2b1c0 | 20 61 6e 64 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 73 65 6c 65 63 74 69 6f 6e 20 75 73 65 20 | .and.for.inverted.selection.use. |
2b1e0 | 60 60 6e 6f 74 60 60 2c 20 61 73 20 73 68 6f 77 6e 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 | ``not``,.as.shown.in.the.example |
2b200 | 2e 00 41 6c 6c 6f 77 73 20 73 70 65 63 69 66 69 63 20 56 4c 41 4e 20 49 44 73 20 74 6f 20 70 61 | ..Allows.specific.VLAN.IDs.to.pa |
2b220 | 73 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 62 72 69 64 67 65 20 6d 65 6d 62 65 72 20 69 6e 74 | ss.through.the.bridge.member.int |
2b240 | 65 72 66 61 63 65 2e 20 54 68 69 73 20 63 61 6e 20 65 69 74 68 65 72 20 62 65 20 61 6e 20 69 6e | erface..This.can.either.be.an.in |
2b260 | 64 69 76 69 64 75 61 6c 20 56 4c 41 4e 20 69 64 20 6f 72 20 61 20 72 61 6e 67 65 20 6f 66 20 56 | dividual.VLAN.id.or.a.range.of.V |
2b280 | 4c 41 4e 20 69 64 73 20 64 65 6c 69 6d 69 74 65 64 20 62 79 20 61 20 68 79 70 68 65 6e 2e 00 41 | LAN.ids.delimited.by.a.hyphen..A |
2b2a0 | 6c 6c 6f 77 73 20 74 6f 20 64 65 66 69 6e 65 20 55 52 4c 20 70 61 74 68 20 6d 61 74 63 68 69 6e | llows.to.define.URL.path.matchin |
2b2c0 | 67 20 72 75 6c 65 73 20 66 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 73 65 72 76 69 63 65 2e 00 | g.rules.for.a.specific.service.. |
2b2e0 | 41 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6e 65 78 74 | Allows.you.to.configure.the.next |
2b300 | 2d 68 6f 70 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2d | -hop.interface.for.an.interface- |
2b320 | 62 61 73 65 64 20 49 50 76 34 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 20 60 3c 69 6e 74 65 72 | based.IPv4.static.route..`<inter |
2b340 | 66 61 63 65 3e 60 20 77 69 6c 6c 20 62 65 20 74 68 65 20 6e 65 78 74 2d 68 6f 70 20 69 6e 74 65 | face>`.will.be.the.next-hop.inte |
2b360 | 72 66 61 63 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 69 73 20 72 6f 75 74 65 64 20 66 6f | rface.where.traffic.is.routed.fo |
2b380 | 72 20 74 68 65 20 67 69 76 65 6e 20 60 3c 73 75 62 6e 65 74 3e 60 2e 00 41 6c 6c 6f 77 73 20 79 | r.the.given.`<subnet>`..Allows.y |
2b3a0 | 6f 75 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6e 65 78 74 2d 68 6f 70 20 69 6e 74 | ou.to.configure.the.next-hop.int |
2b3c0 | 65 72 66 61 63 65 20 66 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2d 62 61 73 65 64 20 49 50 | erface.for.an.interface-based.IP |
2b3e0 | 76 36 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 77 | v6.static.route..`<interface>`.w |
2b400 | 69 6c 6c 20 62 65 20 74 68 65 20 6e 65 78 74 2d 68 6f 70 20 69 6e 74 65 72 66 61 63 65 20 77 68 | ill.be.the.next-hop.interface.wh |
2b420 | 65 72 65 20 74 72 61 66 66 69 63 20 69 73 20 72 6f 75 74 65 64 20 66 6f 72 20 74 68 65 20 67 69 | ere.traffic.is.routed.for.the.gi |
2b440 | 76 65 6e 20 60 3c 73 75 62 6e 65 74 3e 60 2e 00 41 6c 72 65 61 64 79 20 6c 65 61 72 6e 65 64 20 | ven.`<subnet>`..Already.learned. |
2b460 | 6b 6e 6f 77 6e 5f 68 6f 73 74 73 20 66 69 6c 65 73 20 6f 66 20 63 6c 69 65 6e 74 73 20 6e 65 65 | known_hosts.files.of.clients.nee |
2b480 | 64 20 61 6e 20 75 70 64 61 74 65 20 61 73 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 77 69 | d.an.update.as.the.public.key.wi |
2b4a0 | 6c 6c 20 63 68 61 6e 67 65 2e 00 41 6c 73 6f 2c 20 2a 2a 64 65 66 61 75 6c 74 2d 61 63 74 69 6f | ll.change..Also,.**default-actio |
2b4c0 | 6e 2a 2a 20 69 73 20 61 6e 20 61 63 74 69 6f 6e 20 74 68 61 74 20 74 61 6b 65 73 20 70 6c 61 63 | n**.is.an.action.that.takes.plac |
2b4e0 | 65 20 77 68 65 6e 65 76 65 72 20 61 20 70 61 63 6b 65 74 20 64 6f 65 73 20 6e 6f 74 20 6d 61 74 | e.whenever.a.packet.does.not.mat |
2b500 | 63 68 20 61 6e 79 20 72 75 6c 65 20 69 6e 20 69 74 27 73 20 63 68 61 69 6e 2e 20 46 6f 72 20 62 | ch.any.rule.in.it's.chain..For.b |
2b520 | 61 73 65 20 63 68 61 69 6e 73 2c 20 70 6f 73 73 69 62 6c 65 20 6f 70 74 69 6f 6e 73 20 66 6f 72 | ase.chains,.possible.options.for |
2b540 | 20 2a 2a 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 2a 2a 20 61 72 65 20 2a 2a 61 63 63 65 70 74 | .**default-action**.are.**accept |
2b560 | 2a 2a 20 6f 72 20 2a 2a 64 72 6f 70 2a 2a 2e 00 41 6c 73 6f 2c 20 66 6f 72 20 62 61 63 6b 77 61 | **.or.**drop**..Also,.for.backwa |
2b580 | 72 64 73 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 | rds.compatibility.this.configura |
2b5a0 | 74 69 6f 6e 2c 20 77 68 69 63 68 20 75 73 65 73 20 67 65 6e 65 72 69 63 20 69 6e 74 65 72 66 61 | tion,.which.uses.generic.interfa |
2b5c0 | 63 65 20 64 65 66 69 6e 69 74 69 6f 6e 2c 20 69 73 20 73 74 69 6c 6c 20 76 61 6c 69 64 3a 00 41 | ce.definition,.is.still.valid:.A |
2b5e0 | 6c 73 6f 2c 20 66 6f 72 20 74 68 6f 73 65 20 77 68 6f 20 68 61 76 65 6e 27 74 20 75 70 64 61 74 | lso,.for.those.who.haven't.updat |
2b600 | 65 64 20 74 6f 20 6e 65 77 65 72 20 76 65 72 73 69 6f 6e 2c 20 6c 65 67 61 63 79 20 64 6f 63 75 | ed.to.newer.version,.legacy.docu |
2b620 | 6d 65 6e 74 61 74 69 6f 6e 20 69 73 20 73 74 69 6c 6c 20 70 72 65 73 65 6e 74 20 61 6e 64 20 76 | mentation.is.still.present.and.v |
2b640 | 61 6c 69 64 20 66 6f 72 20 61 6c 6c 20 73 61 67 69 74 74 61 20 76 65 72 73 69 6f 6e 20 70 72 69 | alid.for.all.sagitta.version.pri |
2b660 | 6f 72 20 74 6f 20 56 79 4f 53 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 | or.to.VyOS.1.4-rolling-202308040 |
2b680 | 35 35 37 3a 00 41 6c 73 6f 2c 20 69 6e 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d | 557:.Also,.in.:ref:`destination- |
2b6a0 | 6e 61 74 60 2c 20 72 65 64 69 72 65 63 74 69 6f 6e 20 74 6f 20 6c 6f 63 61 6c 68 6f 73 74 20 69 | nat`,.redirection.to.localhost.i |
2b6c0 | 73 20 73 75 70 70 6f 72 74 65 64 2e 20 54 68 65 20 72 65 64 69 72 65 63 74 20 73 74 61 74 65 6d | s.supported..The.redirect.statem |
2b6e0 | 65 6e 74 20 69 73 20 61 20 73 70 65 63 69 61 6c 20 66 6f 72 6d 20 6f 66 20 64 6e 61 74 20 77 68 | ent.is.a.special.form.of.dnat.wh |
2b700 | 69 63 68 20 61 6c 77 61 79 73 20 74 72 61 6e 73 6c 61 74 65 73 20 74 68 65 20 64 65 73 74 69 6e | ich.always.translates.the.destin |
2b720 | 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 74 6f 20 74 68 65 20 6c 6f 63 61 6c 20 68 6f 73 74 e2 | ation.address.to.the.local.host. |
2b740 | 80 99 73 20 6f 6e 65 2e 00 41 6c 74 65 72 6e 61 74 65 20 52 6f 75 74 69 6e 67 20 54 61 62 6c 65 | ..s.one..Alternate.Routing.Table |
2b760 | 73 00 41 6c 74 65 72 6e 61 74 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 20 61 72 65 20 75 | s.Alternate.routing.tables.are.u |
2b780 | 73 65 64 20 77 69 74 68 20 70 6f 6c 69 63 79 20 62 61 73 65 64 20 72 6f 75 74 69 6e 67 20 62 79 | sed.with.policy.based.routing.by |
2b7a0 | 20 75 74 69 6c 69 7a 69 6e 67 20 3a 72 65 66 3a 60 76 72 66 60 2e 00 41 6c 74 65 72 6e 61 74 69 | .utilizing.:ref:`vrf`..Alternati |
2b7c0 | 76 65 20 74 6f 20 6d 75 6c 74 69 63 61 73 74 2c 20 74 68 65 20 72 65 6d 6f 74 65 20 49 50 76 34 | ve.to.multicast,.the.remote.IPv4 |
2b7e0 | 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 56 58 4c 41 4e 20 74 75 6e 6e 65 6c 20 63 61 6e | .address.of.the.VXLAN.tunnel.can |
2b800 | 20 62 65 20 73 65 74 20 64 69 72 65 63 74 6c 79 2e 20 4c 65 74 27 73 20 63 68 61 6e 67 65 20 74 | .be.set.directly..Let's.change.t |
2b820 | 68 65 20 4d 75 6c 74 69 63 61 73 74 20 65 78 61 6d 70 6c 65 20 66 72 6f 6d 20 61 62 6f 76 65 3a | he.Multicast.example.from.above: |
2b840 | 00 41 6c 77 61 79 73 20 65 78 63 6c 75 64 65 20 74 68 69 73 20 61 64 64 72 65 73 73 20 66 72 6f | .Always.exclude.this.address.fro |
2b860 | 6d 20 61 6e 79 20 64 65 66 69 6e 65 64 20 72 61 6e 67 65 2e 20 54 68 69 73 20 61 64 64 72 65 73 | m.any.defined.range..This.addres |
2b880 | 73 20 77 69 6c 6c 20 6e 65 76 65 72 20 62 65 20 61 73 73 69 67 6e 65 64 20 62 79 20 74 68 65 20 | s.will.never.be.assigned.by.the. |
2b8a0 | 44 48 43 50 20 73 65 72 76 65 72 2e 00 41 6e 20 2a 2a 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 | DHCP.server..An.**interface.grou |
2b8c0 | 70 2a 2a 20 72 65 70 72 65 73 65 6e 74 73 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 69 | p**.represents.a.collection.of.i |
2b8e0 | 6e 74 65 72 66 61 63 65 73 2e 00 41 6e 20 41 53 20 69 73 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 | nterfaces..An.AS.is.a.connected. |
2b900 | 67 72 6f 75 70 20 6f 66 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 49 50 20 70 72 65 66 69 78 65 73 | group.of.one.or.more.IP.prefixes |
2b920 | 20 72 75 6e 20 62 79 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 6e 65 74 77 6f 72 6b 20 6f 70 65 72 | .run.by.one.or.more.network.oper |
2b940 | 61 74 6f 72 73 20 77 68 69 63 68 20 68 61 73 20 61 20 53 49 4e 47 4c 45 20 61 6e 64 20 43 4c 45 | ators.which.has.a.SINGLE.and.CLE |
2b960 | 41 52 4c 59 20 44 45 46 49 4e 45 44 20 72 6f 75 74 69 6e 67 20 70 6f 6c 69 63 79 2e 00 41 6e 20 | ARLY.DEFINED.routing.policy..An. |
2b980 | 49 50 76 34 20 54 43 50 20 66 69 6c 74 65 72 20 77 69 6c 6c 20 6f 6e 6c 79 20 6d 61 74 63 68 20 | IPv4.TCP.filter.will.only.match. |
2b9a0 | 70 61 63 6b 65 74 73 20 77 69 74 68 20 61 6e 20 49 50 76 34 20 68 65 61 64 65 72 20 6c 65 6e 67 | packets.with.an.IPv4.header.leng |
2b9c0 | 74 68 20 6f 66 20 32 30 20 62 79 74 65 73 20 28 77 68 69 63 68 20 69 73 20 74 68 65 20 6d 61 6a | th.of.20.bytes.(which.is.the.maj |
2b9e0 | 6f 72 69 74 79 20 6f 66 20 49 50 76 34 20 70 61 63 6b 65 74 73 20 61 6e 79 77 61 79 29 2e 00 41 | ority.of.IPv4.packets.anyway)..A |
2ba00 | 6e 20 53 4e 4d 50 2d 6d 61 6e 61 67 65 64 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 73 69 73 74 73 20 | n.SNMP-managed.network.consists. |
2ba20 | 6f 66 20 74 68 72 65 65 20 6b 65 79 20 63 6f 6d 70 6f 6e 65 6e 74 73 3a 00 41 6e 20 60 3c 69 6e | of.three.key.components:.An.`<in |
2ba40 | 74 65 72 66 61 63 65 3e 60 20 73 70 65 63 69 66 79 69 6e 67 20 77 68 69 63 68 20 73 6c 61 76 65 | terface>`.specifying.which.slave |
2ba60 | 20 69 73 20 74 68 65 20 70 72 69 6d 61 72 79 20 64 65 76 69 63 65 2e 20 54 68 65 20 73 70 65 63 | .is.the.primary.device..The.spec |
2ba80 | 69 66 69 65 64 20 64 65 76 69 63 65 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 62 65 20 74 68 65 20 | ified.device.will.always.be.the. |
2baa0 | 61 63 74 69 76 65 20 73 6c 61 76 65 20 77 68 69 6c 65 20 69 74 20 69 73 20 61 76 61 69 6c 61 62 | active.slave.while.it.is.availab |
2bac0 | 6c 65 2e 20 4f 6e 6c 79 20 77 68 65 6e 20 74 68 65 20 70 72 69 6d 61 72 79 20 69 73 20 6f 66 66 | le..Only.when.the.primary.is.off |
2bae0 | 2d 6c 69 6e 65 20 77 69 6c 6c 20 61 6c 74 65 72 6e 61 74 65 20 64 65 76 69 63 65 73 20 62 65 20 | -line.will.alternate.devices.be. |
2bb00 | 75 73 65 64 2e 20 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 77 68 65 6e 20 6f 6e 65 20 73 6c | used..This.is.useful.when.one.sl |
2bb20 | 61 76 65 20 69 73 20 70 72 65 66 65 72 72 65 64 20 6f 76 65 72 20 61 6e 6f 74 68 65 72 2c 20 65 | ave.is.preferred.over.another,.e |
2bb40 | 2e 67 2e 2c 20 77 68 65 6e 20 6f 6e 65 20 73 6c 61 76 65 20 68 61 73 20 68 69 67 68 65 72 20 74 | .g.,.when.one.slave.has.higher.t |
2bb60 | 68 72 6f 75 67 68 70 75 74 20 74 68 61 6e 20 61 6e 6f 74 68 65 72 2e 00 41 6e 20 61 64 64 69 74 | hroughput.than.another..An.addit |
2bb80 | 69 6f 6e 61 6c 20 6c 61 79 65 72 20 6f 66 20 73 79 6d 6d 65 74 72 69 63 2d 6b 65 79 20 63 72 79 | ional.layer.of.symmetric-key.cry |
2bba0 | 70 74 6f 20 63 61 6e 20 62 65 20 75 73 65 64 20 6f 6e 20 74 6f 70 20 6f 66 20 74 68 65 20 61 73 | pto.can.be.used.on.top.of.the.as |
2bbc0 | 79 6d 6d 65 74 72 69 63 20 63 72 79 70 74 6f 2e 00 41 6e 20 61 64 64 69 74 69 6f 6e 61 6c 20 6c | ymmetric.crypto..An.additional.l |
2bbe0 | 61 79 65 72 20 6f 66 20 73 79 6d 6d 65 74 72 69 63 2d 6b 65 79 20 63 72 79 70 74 6f 20 63 61 6e | ayer.of.symmetric-key.crypto.can |
2bc00 | 20 62 65 20 75 73 65 64 20 6f 6e 20 74 6f 70 20 6f 66 20 74 68 65 20 61 73 79 6d 6d 65 74 72 69 | .be.used.on.top.of.the.asymmetri |
2bc20 | 63 20 63 72 79 70 74 6f 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 75 74 6f 6d 61 74 69 63 | c.crypto..This.command.automatic |
2bc40 | 61 6c 6c 79 20 63 72 65 61 74 65 73 20 66 6f 72 20 79 6f 75 20 74 68 65 20 72 65 71 75 69 72 65 | ally.creates.for.you.the.require |
2bc60 | 64 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 6e 73 74 61 6c 6c 20 74 68 69 73 20 50 53 | d.CLI.command.to.install.this.PS |
2bc80 | 4b 20 66 6f 72 20 61 20 67 69 76 65 6e 20 70 65 65 72 2e 00 41 6e 20 61 64 64 69 74 69 6f 6e 61 | K.for.a.given.peer..An.additiona |
2bca0 | 6c 20 6c 61 79 65 72 20 6f 66 20 73 79 6d 6d 65 74 72 69 63 2d 6b 65 79 20 63 72 79 70 74 6f 20 | l.layer.of.symmetric-key.crypto. |
2bcc0 | 63 61 6e 20 62 65 20 75 73 65 64 20 6f 6e 20 74 6f 70 20 6f 66 20 74 68 65 20 61 73 79 6d 6d 65 | can.be.used.on.top.of.the.asymme |
2bce0 | 74 72 69 63 20 63 72 79 70 74 6f 2e 20 54 68 69 73 20 69 73 20 6f 70 74 69 6f 6e 61 6c 2e 00 41 | tric.crypto..This.is.optional..A |
2bd00 | 6e 20 61 64 76 61 6e 74 61 67 65 20 6f 66 20 74 68 69 73 20 73 63 68 65 6d 65 20 69 73 20 74 68 | n.advantage.of.this.scheme.is.th |
2bd20 | 61 74 20 79 6f 75 20 67 65 74 20 61 20 72 65 61 6c 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 | at.you.get.a.real.interface.with |
2bd40 | 20 69 74 73 20 6f 77 6e 20 61 64 64 72 65 73 73 2c 20 77 68 69 63 68 20 6d 61 6b 65 73 20 69 74 | .its.own.address,.which.makes.it |
2bd60 | 20 65 61 73 69 65 72 20 74 6f 20 73 65 74 75 70 20 73 74 61 74 69 63 20 72 6f 75 74 65 73 20 6f | .easier.to.setup.static.routes.o |
2bd80 | 72 20 75 73 65 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 | r.use.dynamic.routing.protocols. |
2bda0 | 77 69 74 68 6f 75 74 20 68 61 76 69 6e 67 20 74 6f 20 6d 6f 64 69 66 79 20 49 50 73 65 63 20 70 | without.having.to.modify.IPsec.p |
2bdc0 | 6f 6c 69 63 69 65 73 2e 20 54 68 65 20 6f 74 68 65 72 20 61 64 76 61 6e 74 61 67 65 20 69 73 20 | olicies..The.other.advantage.is. |
2bde0 | 74 68 61 74 20 69 74 20 67 72 65 61 74 6c 79 20 73 69 6d 70 6c 69 66 69 65 73 20 72 6f 75 74 65 | that.it.greatly.simplifies.route |
2be00 | 72 20 74 6f 20 72 6f 75 74 65 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 2c 20 77 68 69 63 68 | r.to.router.communication,.which |
2be20 | 20 63 61 6e 20 62 65 20 74 72 69 63 6b 79 20 77 69 74 68 20 70 6c 61 69 6e 20 49 50 73 65 63 20 | .can.be.tricky.with.plain.IPsec. |
2be40 | 62 65 63 61 75 73 65 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6f 75 74 67 6f 69 6e 67 20 61 64 | because.the.external.outgoing.ad |
2be60 | 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 20 75 73 75 61 6c 6c 79 20 64 6f 65 73 | dress.of.the.router.usually.does |
2be80 | 6e 27 74 20 6d 61 74 63 68 20 74 68 65 20 49 50 73 65 63 20 70 6f 6c 69 63 79 20 6f 66 20 74 79 | n't.match.the.IPsec.policy.of.ty |
2bea0 | 70 69 63 61 6c 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 73 65 74 75 70 20 61 6e 64 20 79 6f 75 | pical.site-to-site.setup.and.you |
2bec0 | 20 6e 65 65 64 20 74 6f 20 61 64 64 20 73 70 65 63 69 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 | .need.to.add.special.configurati |
2bee0 | 6f 6e 20 66 6f 72 20 69 74 2c 20 6f 72 20 61 64 6a 75 73 74 20 74 68 65 20 73 6f 75 72 63 65 20 | on.for.it,.or.adjust.the.source. |
2bf00 | 61 64 64 72 65 73 73 20 66 6f 72 20 6f 75 74 67 6f 69 6e 67 20 74 72 61 66 66 69 63 20 6f 66 20 | address.for.outgoing.traffic.of. |
2bf20 | 79 6f 75 72 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2e 20 47 52 45 2f 49 50 73 65 63 20 68 61 73 | your.applications..GRE/IPsec.has |
2bf40 | 20 6e 6f 20 73 75 63 68 20 70 72 6f 62 6c 65 6d 20 61 6e 64 20 69 73 20 63 6f 6d 70 6c 65 74 65 | .no.such.problem.and.is.complete |
2bf60 | 6c 79 20 74 72 61 6e 73 70 61 72 65 6e 74 20 66 6f 72 20 74 68 65 20 61 70 70 6c 69 63 61 74 69 | ly.transparent.for.the.applicati |
2bf80 | 6f 6e 73 2e 00 41 6e 20 61 67 65 6e 74 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 2d 6d 61 6e 61 67 | ons..An.agent.is.a.network-manag |
2bfa0 | 65 6d 65 6e 74 20 73 6f 66 74 77 61 72 65 20 6d 6f 64 75 6c 65 20 74 68 61 74 20 72 65 73 69 64 | ement.software.module.that.resid |
2bfc0 | 65 73 20 6f 6e 20 61 20 6d 61 6e 61 67 65 64 20 64 65 76 69 63 65 2e 20 41 6e 20 61 67 65 6e 74 | es.on.a.managed.device..An.agent |
2bfe0 | 20 68 61 73 20 6c 6f 63 61 6c 20 6b 6e 6f 77 6c 65 64 67 65 20 6f 66 20 6d 61 6e 61 67 65 6d 65 | .has.local.knowledge.of.manageme |
2c000 | 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6e 64 20 74 72 61 6e 73 6c 61 74 65 73 20 74 68 | nt.information.and.translates.th |
2c020 | 61 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 6f 72 20 66 72 6f 6d 20 61 6e 20 53 4e 4d | at.information.to.or.from.an.SNM |
2c040 | 50 2d 73 70 65 63 69 66 69 63 20 66 6f 72 6d 2e 00 41 6e 20 61 6c 74 65 72 6e 61 74 65 20 63 6f | P-specific.form..An.alternate.co |
2c060 | 6d 6d 61 6e 64 20 63 6f 75 6c 64 20 62 65 20 22 6d 70 6c 73 2d 74 65 20 6f 6e 22 20 28 54 72 61 | mmand.could.be."mpls-te.on".(Tra |
2c080 | 66 66 69 63 20 45 6e 67 69 6e 65 65 72 69 6e 67 29 00 41 6e 20 61 72 62 69 74 72 61 72 79 20 6e | ffic.Engineering).An.arbitrary.n |
2c0a0 | 65 74 6d 61 73 6b 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 6d 61 73 6b 20 61 64 | etmask.can.be.applied.to.mask.ad |
2c0c0 | 64 72 65 73 73 65 73 20 74 6f 20 6f 6e 6c 79 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 20 | dresses.to.only.match.against.a. |
2c0e0 | 73 70 65 63 69 66 69 63 20 70 6f 72 74 69 6f 6e 2e 00 41 6e 20 61 72 62 69 74 72 61 72 79 20 6e | specific.portion..An.arbitrary.n |
2c100 | 65 74 6d 61 73 6b 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 6d 61 73 6b 20 61 64 | etmask.can.be.applied.to.mask.ad |
2c120 | 64 72 65 73 73 65 73 20 74 6f 20 6f 6e 6c 79 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 20 | dresses.to.only.match.against.a. |
2c140 | 73 70 65 63 69 66 69 63 20 70 6f 72 74 69 6f 6e 2e 20 54 68 69 73 20 69 73 20 70 61 72 74 69 63 | specific.portion..This.is.partic |
2c160 | 75 6c 61 72 6c 79 20 75 73 65 66 75 6c 20 77 69 74 68 20 49 50 76 36 20 61 6e 64 20 61 20 7a 6f | ularly.useful.with.IPv6.and.a.zo |
2c180 | 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 61 73 20 72 75 6c 65 73 20 77 69 6c 6c 20 | ne-based.firewall.as.rules.will. |
2c1a0 | 72 65 6d 61 69 6e 20 76 61 6c 69 64 20 69 66 20 74 68 65 20 49 50 76 36 20 70 72 65 66 69 78 20 | remain.valid.if.the.IPv6.prefix. |
2c1c0 | 63 68 61 6e 67 65 73 20 61 6e 64 20 74 68 65 20 68 6f 73 74 20 70 6f 72 74 69 6f 6e 20 6f 66 20 | changes.and.the.host.portion.of. |
2c1e0 | 73 79 73 74 65 6d 73 20 49 50 76 36 20 61 64 64 72 65 73 73 20 69 73 20 73 74 61 74 69 63 20 28 | systems.IPv6.address.is.static.( |
2c200 | 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 77 69 74 68 20 53 4c 41 41 43 20 6f 72 20 60 74 6f 6b 65 | for.example,.with.SLAAC.or.`toke |
2c220 | 6e 69 73 65 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 3c 68 74 74 70 73 3a 2f 2f 64 61 | nised.IPv6.addresses.<https://da |
2c240 | 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 69 64 2f 64 72 61 66 74 2d | tatracker.ietf.org/doc/id/draft- |
2c260 | 63 68 6f 77 6e 2d 36 6d 61 6e 2d 74 6f 6b 65 6e 69 73 65 64 2d 69 70 76 36 2d 69 64 65 6e 74 69 | chown-6man-tokenised-ipv6-identi |
2c280 | 66 69 65 72 73 2d 30 32 2e 74 78 74 3e 60 5f 29 00 41 6e 20 61 72 62 69 74 72 61 72 79 20 6e 65 | fiers-02.txt>`_).An.arbitrary.ne |
2c2a0 | 74 6d 61 73 6b 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 6d 61 73 6b 20 61 64 64 | tmask.can.be.applied.to.mask.add |
2c2c0 | 72 65 73 73 65 73 20 74 6f 20 6f 6e 6c 79 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 20 73 | resses.to.only.match.against.a.s |
2c2e0 | 70 65 63 69 66 69 63 20 70 6f 72 74 69 6f 6e 2e 20 54 68 69 73 20 69 73 20 70 61 72 74 69 63 75 | pecific.portion..This.is.particu |
2c300 | 6c 61 72 6c 79 20 75 73 65 66 75 6c 20 77 69 74 68 20 49 50 76 36 20 61 6e 64 20 61 20 7a 6f 6e | larly.useful.with.IPv6.and.a.zon |
2c320 | 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 61 73 20 72 75 6c 65 73 20 77 69 6c 6c 20 72 | e-based.firewall.as.rules.will.r |
2c340 | 65 6d 61 69 6e 20 76 61 6c 69 64 20 69 66 20 74 68 65 20 49 50 76 36 20 70 72 65 66 69 78 20 63 | emain.valid.if.the.IPv6.prefix.c |
2c360 | 68 61 6e 67 65 73 20 61 6e 64 20 74 68 65 20 68 6f 73 74 20 70 6f 72 74 69 6f 6e 20 6f 66 20 73 | hanges.and.the.host.portion.of.s |
2c380 | 79 73 74 65 6d 73 20 49 50 76 36 20 61 64 64 72 65 73 73 20 69 73 20 73 74 61 74 69 63 20 28 66 | ystems.IPv6.address.is.static.(f |
2c3a0 | 6f 72 20 65 78 61 6d 70 6c 65 2c 20 77 69 74 68 20 53 4c 41 41 43 20 6f 72 20 60 74 6f 6b 65 6e | or.example,.with.SLAAC.or.`token |
2c3c0 | 69 73 65 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 3c 68 74 74 70 73 3a 2f 2f 64 61 74 | ised.IPv6.addresses.<https://dat |
2c3e0 | 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 69 64 2f 64 72 61 66 74 2d 63 | atracker.ietf.org/doc/id/draft-c |
2c400 | 68 6f 77 6e 2d 36 6d 61 6e 2d 74 6f 6b 65 6e 69 73 65 64 2d 69 70 76 36 2d 69 64 65 6e 74 69 66 | hown-6man-tokenised-ipv6-identif |
2c420 | 69 65 72 73 2d 30 32 2e 74 78 74 3e 60 5f 29 2e 00 41 6e 20 61 72 62 69 74 72 61 72 79 20 6e 65 | iers-02.txt>`_)..An.arbitrary.ne |
2c440 | 74 6d 61 73 6b 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 6d 61 73 6b 20 61 64 64 | tmask.can.be.applied.to.mask.add |
2c460 | 72 65 73 73 65 73 20 74 6f 20 6f 6e 6c 79 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 20 73 | resses.to.only.match.against.a.s |
2c480 | 70 65 63 69 66 69 63 20 70 6f 72 74 69 6f 6e 2e 20 54 68 69 73 20 69 73 20 70 61 72 74 69 63 75 | pecific.portion..This.is.particu |
2c4a0 | 6c 61 72 6c 79 20 75 73 65 66 75 6c 20 77 69 74 68 20 49 50 76 36 20 61 73 20 72 75 6c 65 73 20 | larly.useful.with.IPv6.as.rules. |
2c4c0 | 77 69 6c 6c 20 72 65 6d 61 69 6e 20 76 61 6c 69 64 20 69 66 20 74 68 65 20 49 50 76 36 20 70 72 | will.remain.valid.if.the.IPv6.pr |
2c4e0 | 65 66 69 78 20 63 68 61 6e 67 65 73 20 61 6e 64 20 74 68 65 20 68 6f 73 74 20 70 6f 72 74 69 6f | efix.changes.and.the.host.portio |
2c500 | 6e 20 6f 66 20 73 79 73 74 65 6d 73 20 49 50 76 36 20 61 64 64 72 65 73 73 20 69 73 20 73 74 61 | n.of.systems.IPv6.address.is.sta |
2c520 | 74 69 63 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 77 69 74 68 20 53 4c 41 41 43 20 6f 72 20 | tic.(for.example,.with.SLAAC.or. |
2c540 | 60 74 6f 6b 65 6e 69 73 65 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 3c 68 74 74 70 73 | `tokenised.IPv6.addresses.<https |
2c560 | 3a 2f 2f 64 61 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 69 64 2f 64 | ://datatracker.ietf.org/doc/id/d |
2c580 | 72 61 66 74 2d 63 68 6f 77 6e 2d 36 6d 61 6e 2d 74 6f 6b 65 6e 69 73 65 64 2d 69 70 76 36 2d 69 | raft-chown-6man-tokenised-ipv6-i |
2c5a0 | 64 65 6e 74 69 66 69 65 72 73 2d 30 32 2e 74 78 74 3e 60 5f 29 00 41 6e 20 62 61 73 69 63 20 69 | dentifiers-02.txt>`_).An.basic.i |
2c5c0 | 6e 74 72 6f 64 75 63 74 69 6f 6e 20 74 6f 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 | ntroduction.to.zone-based.firewa |
2c5e0 | 6c 6c 73 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 60 68 65 72 65 20 3c 68 74 74 70 73 3a 2f 2f | lls.can.be.found.`here.<https:// |
2c600 | 73 75 70 70 6f 72 74 2e 76 79 6f 73 2e 69 6f 2f 65 6e 2f 6b 62 2f 61 72 74 69 63 6c 65 73 2f 61 | support.vyos.io/en/kb/articles/a |
2c620 | 2d 70 72 69 6d 65 72 2d 74 6f 2d 7a 6f 6e 65 2d 62 61 73 65 64 2d 66 69 72 65 77 61 6c 6c 3e 60 | -primer-to-zone-based-firewall>` |
2c640 | 5f 2c 20 61 6e 64 20 61 6e 20 65 78 61 6d 70 6c 65 20 61 74 20 3a 72 65 66 3a 60 65 78 61 6d 70 | _,.and.an.example.at.:ref:`examp |
2c660 | 6c 65 73 2d 7a 6f 6e 65 2d 70 6f 6c 69 63 79 60 2e 00 41 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 | les-zone-policy`..An.example.of. |
2c680 | 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 73 65 6e 64 73 20 60 60 74 65 6c | a.configuration.that.sends.``tel |
2c6a0 | 65 67 72 61 66 60 60 20 6d 65 74 72 69 63 73 20 74 6f 20 72 65 6d 6f 74 65 20 60 60 49 6e 66 6c | egraf``.metrics.to.remote.``Infl |
2c6c0 | 75 78 44 42 20 32 60 60 00 41 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 63 72 65 61 74 69 6e 67 20 | uxDB.2``.An.example.of.creating. |
2c6e0 | 61 20 56 4c 41 4e 2d 61 77 61 72 65 20 62 72 69 64 67 65 20 69 73 20 61 73 20 66 6f 6c 6c 6f 77 | a.VLAN-aware.bridge.is.as.follow |
2c700 | 73 3a 00 41 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 6b 65 79 20 67 65 6e 65 72 61 74 69 6f 6e 3a | s:.An.example.of.key.generation: |
2c720 | 00 41 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 74 68 65 20 64 61 74 61 20 63 61 70 74 75 72 65 64 | .An.example.of.the.data.captured |
2c740 | 20 62 79 20 61 20 46 52 45 45 52 41 44 49 55 53 20 73 65 72 76 65 72 20 77 69 74 68 20 73 71 6c | .by.a.FREERADIUS.server.with.sql |
2c760 | 20 61 63 63 6f 75 6e 74 69 6e 67 3a 00 41 6e 20 65 78 61 6d 70 6c 65 3a 00 41 6e 20 6f 70 74 69 | .accounting:.An.example:.An.opti |
2c780 | 6f 6e 20 74 68 61 74 20 74 61 6b 65 73 20 61 20 71 75 6f 74 65 64 20 73 74 72 69 6e 67 20 69 73 | on.that.takes.a.quoted.string.is |
2c7a0 | 20 73 65 74 20 62 79 20 72 65 70 6c 61 63 69 6e 67 20 61 6c 6c 20 71 75 6f 74 65 20 63 68 61 72 | .set.by.replacing.all.quote.char |
2c7c0 | 61 63 74 65 72 73 20 77 69 74 68 20 74 68 65 20 73 74 72 69 6e 67 20 60 60 26 71 75 6f 74 3b 60 | acters.with.the.string.``"` |
2c7e0 | 60 20 69 6e 73 69 64 65 20 74 68 65 20 73 74 61 74 69 63 2d 6d 61 70 70 69 6e 67 2d 70 61 72 61 | `.inside.the.static-mapping-para |
2c800 | 6d 65 74 65 72 73 20 76 61 6c 75 65 2e 20 54 68 65 20 72 65 73 75 6c 74 69 6e 67 20 6c 69 6e 65 | meters.value..The.resulting.line |
2c820 | 20 69 6e 20 64 68 63 70 64 2e 63 6f 6e 66 20 77 69 6c 6c 20 62 65 20 60 60 6f 70 74 69 6f 6e 20 | .in.dhcpd.conf.will.be.``option. |
2c840 | 70 78 65 6c 69 6e 75 78 2e 63 6f 6e 66 69 67 66 69 6c 65 20 22 70 78 65 6c 69 6e 75 78 2e 63 66 | pxelinux.configfile."pxelinux.cf |
2c860 | 67 2f 30 31 2d 30 30 2d 31 35 2d 31 37 2d 34 34 2d 32 64 2d 61 61 22 3b 60 60 2e 00 41 6e 61 6c | g/01-00-15-17-44-2d-aa";``..Anal |
2c880 | 79 73 69 73 20 6f 6e 20 77 68 61 74 20 68 61 70 70 65 6e 73 20 66 6f 72 20 64 65 73 69 72 65 64 | ysis.on.what.happens.for.desired |
2c8a0 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 00 41 6e 64 20 62 61 73 65 20 63 68 61 69 6e 20 66 6f 72 20 | .connection:.And.base.chain.for. |
2c8c0 | 74 72 61 66 66 69 63 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 | traffic.generated.by.the.router. |
2c8e0 | 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 6f 75 74 70 75 74 20 66 69 | is.``set.firewall.ipv4.output.fi |
2c900 | 6c 74 65 72 20 2e 2e 2e 60 60 00 41 6e 64 20 62 61 73 65 20 63 68 61 69 6e 20 66 6f 72 20 74 72 | lter....``.And.base.chain.for.tr |
2c920 | 61 66 66 69 63 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 69 73 | affic.generated.by.the.router.is |
2c940 | 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 6f 75 74 70 75 74 20 66 69 6c 74 | .``set.firewall.ipv6.output.filt |
2c960 | 65 72 20 2e 2e 2e 60 60 00 41 6e 64 20 63 6f 6e 74 65 6e 74 20 6f 66 20 74 68 65 20 73 63 72 69 | er....``.And.content.of.the.scri |
2c980 | 70 74 3a 00 41 6e 64 20 66 6f 72 20 69 70 76 36 3a 00 41 6e 64 20 6e 65 78 74 2c 20 73 6f 6d 65 | pt:.And.for.ipv6:.And.next,.some |
2c9a0 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 78 61 6d 70 6c 65 20 77 68 65 72 65 20 67 72 6f | .configuration.example.where.gro |
2c9c0 | 75 70 73 20 61 72 65 20 75 73 65 64 3a 00 41 6e 64 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e | ups.are.used:.And.op-mode.comman |
2c9e0 | 64 73 3a 00 41 6e 64 20 74 68 65 20 64 69 66 66 65 72 65 6e 74 20 49 50 76 34 20 2a 2a 72 65 73 | ds:.And.the.different.IPv4.**res |
2ca00 | 65 74 2a 2a 20 63 6f 6d 6d 61 6e 64 73 20 61 76 61 69 6c 61 62 6c 65 3a 00 41 6e 64 20 74 68 65 | et**.commands.available:.And.the |
2ca20 | 6e 20 68 61 73 68 20 69 73 20 72 65 64 75 63 65 64 20 6d 6f 64 75 6c 6f 20 73 6c 61 76 65 20 63 | n.hash.is.reduced.modulo.slave.c |
2ca40 | 6f 75 6e 74 2e 00 41 6e 64 2c 20 74 6f 20 70 72 69 6e 74 20 6f 6e 6c 79 20 62 72 69 64 67 65 20 | ount..And,.to.print.only.bridge. |
2ca60 | 66 69 72 65 77 61 6c 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 00 41 6e 6f 74 68 65 72 20 74 65 | firewall.information:.Another.te |
2ca80 | 72 6d 20 6f 66 74 65 6e 20 75 73 65 64 20 66 6f 72 20 44 4e 41 54 20 69 73 20 2a 2a 31 2d 74 6f | rm.often.used.for.DNAT.is.**1-to |
2caa0 | 2d 31 20 4e 41 54 2a 2a 2e 20 46 6f 72 20 61 20 31 2d 74 6f 2d 31 20 4e 41 54 20 63 6f 6e 66 69 | -1.NAT**..For.a.1-to-1.NAT.confi |
2cac0 | 67 75 72 61 74 69 6f 6e 2c 20 62 6f 74 68 20 44 4e 41 54 20 61 6e 64 20 53 4e 41 54 20 61 72 65 | guration,.both.DNAT.and.SNAT.are |
2cae0 | 20 75 73 65 64 20 74 6f 20 4e 41 54 20 61 6c 6c 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 61 6e | .used.to.NAT.all.traffic.from.an |
2cb00 | 20 65 78 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 61 6e 20 69 6e 74 65 72 | .external.IP.address.to.an.inter |
2cb20 | 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 20 76 69 63 65 2d 76 65 72 73 61 2e 00 41 | nal.IP.address.and.vice-versa..A |
2cb40 | 6e 6f 74 68 65 72 20 74 68 69 6e 67 20 74 6f 20 6b 65 65 70 20 69 6e 20 6d 69 6e 64 20 77 69 74 | nother.thing.to.keep.in.mind.wit |
2cb60 | 68 20 4c 44 50 20 69 73 20 74 68 61 74 20 6d 75 63 68 20 6c 69 6b 65 20 42 47 50 2c 20 69 74 20 | h.LDP.is.that.much.like.BGP,.it. |
2cb80 | 69 73 20 61 20 70 72 6f 74 6f 63 6f 6c 20 74 68 61 74 20 72 75 6e 73 20 6f 6e 20 74 6f 70 20 6f | is.a.protocol.that.runs.on.top.o |
2cba0 | 66 20 54 43 50 2e 20 49 74 20 68 6f 77 65 76 65 72 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 | f.TCP..It.however.does.not.have. |
2cbc0 | 61 6e 20 61 62 69 6c 69 74 79 20 74 6f 20 64 6f 20 73 6f 6d 65 74 68 69 6e 67 20 6c 69 6b 65 20 | an.ability.to.do.something.like. |
2cbe0 | 61 20 72 65 66 72 65 73 68 20 63 61 70 61 62 69 6c 69 74 79 20 6c 69 6b 65 20 42 47 50 73 20 72 | a.refresh.capability.like.BGPs.r |
2cc00 | 6f 75 74 65 20 72 65 66 72 65 73 68 20 63 61 70 61 62 69 6c 69 74 79 2e 20 54 68 65 72 65 66 6f | oute.refresh.capability..Therefo |
2cc20 | 72 65 20 6f 6e 65 20 6d 69 67 68 74 20 68 61 76 65 20 74 6f 20 72 65 73 65 74 20 74 68 65 20 6e | re.one.might.have.to.reset.the.n |
2cc40 | 65 69 67 68 62 6f 72 20 66 6f 72 20 61 20 63 61 70 61 62 69 6c 69 74 79 20 63 68 61 6e 67 65 20 | eighbor.for.a.capability.change. |
2cc60 | 6f 72 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 68 61 6e 67 65 20 74 6f 20 77 6f 72 | or.a.configuration.change.to.wor |
2cc80 | 6b 2e 00 41 70 70 6c 65 20 69 4f 53 2f 69 50 61 64 4f 53 20 65 78 70 65 63 74 73 20 74 68 65 20 | k..Apple.iOS/iPadOS.expects.the. |
2cca0 | 73 65 72 76 65 72 20 6e 61 6d 65 20 74 6f 20 62 65 20 61 6c 73 6f 20 75 73 65 64 20 69 6e 20 74 | server.name.to.be.also.used.in.t |
2ccc0 | 68 65 20 73 65 72 76 65 72 27 73 20 63 65 72 74 69 66 69 63 61 74 65 20 63 6f 6d 6d 6f 6e 20 6e | he.server's.certificate.common.n |
2cce0 | 61 6d 65 2c 20 73 6f 20 69 74 27 73 20 62 65 73 74 20 74 6f 20 75 73 65 20 74 68 69 73 20 44 4e | ame,.so.it's.best.to.use.this.DN |
2cd00 | 53 20 6e 61 6d 65 20 66 6f 72 20 79 6f 75 72 20 56 50 4e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 | S.name.for.your.VPN.connection.. |
2cd20 | 41 70 70 6c 79 20 61 20 72 6f 75 74 65 2d 6d 61 70 20 66 69 6c 74 65 72 20 74 6f 20 72 6f 75 74 | Apply.a.route-map.filter.to.rout |
2cd40 | 65 73 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 6f 74 6f 63 6f 6c 2e 00 41 | es.for.the.specified.protocol..A |
2cd60 | 70 70 6c 79 20 61 20 72 6f 75 74 65 2d 6d 61 70 20 66 69 6c 74 65 72 20 74 6f 20 72 6f 75 74 65 | pply.a.route-map.filter.to.route |
2cd80 | 73 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 6f 74 6f 63 6f 6c 2e 20 54 68 | s.for.the.specified.protocol..Th |
2cda0 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 63 61 6e 20 62 65 20 75 73 65 | e.following.protocols.can.be.use |
2cdc0 | 64 3a 20 61 6e 79 2c 20 62 61 62 65 6c 2c 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 65 | d:.any,.babel,.bgp,.connected,.e |
2cde0 | 69 67 72 70 2c 20 69 73 69 73 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 | igrp,.isis,.kernel,.ospf,.rip,.s |
2ce00 | 74 61 74 69 63 2c 20 74 61 62 6c 65 00 41 70 70 6c 79 20 61 20 72 6f 75 74 65 2d 6d 61 70 20 66 | tatic,.table.Apply.a.route-map.f |
2ce20 | 69 6c 74 65 72 20 74 6f 20 72 6f 75 74 65 73 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 | ilter.to.routes.for.the.specifie |
2ce40 | 64 20 70 72 6f 74 6f 63 6f 6c 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f 63 | d.protocol..The.following.protoc |
2ce60 | 6f 6c 73 20 63 61 6e 20 62 65 20 75 73 65 64 3a 20 61 6e 79 2c 20 62 61 62 65 6c 2c 20 62 67 70 | ols.can.be.used:.any,.babel,.bgp |
2ce80 | 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 69 73 69 73 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 76 | ,.connected,.isis,.kernel,.ospfv |
2cea0 | 33 2c 20 72 69 70 6e 67 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 00 41 70 70 6c 79 20 72 6f | 3,.ripng,.static,.table.Apply.ro |
2cec0 | 75 74 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 2a 2a 69 6e 62 6f 75 6e 64 2a 2a 20 64 69 72 65 | uting.policy.to.**inbound**.dire |
2cee0 | 63 74 69 6f 6e 20 6f 66 20 6f 75 74 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 00 41 70 70 | ction.of.out.VLAN.interfaces.App |
2cf00 | 6c 79 69 6e 67 20 61 20 52 75 6c 65 2d 53 65 74 20 74 6f 20 61 20 5a 6f 6e 65 00 41 70 70 6c 79 | lying.a.Rule-Set.to.a.Zone.Apply |
2cf20 | 69 6e 67 20 61 20 52 75 6c 65 2d 53 65 74 20 74 6f 20 61 6e 20 49 6e 74 65 72 66 61 63 65 00 41 | ing.a.Rule-Set.to.an.Interface.A |
2cf40 | 70 70 6c 79 69 6e 67 20 61 20 74 72 61 66 66 69 63 20 70 6f 6c 69 63 79 00 41 72 65 61 20 43 6f | pplying.a.traffic.policy.Area.Co |
2cf60 | 6e 66 69 67 75 72 61 74 69 6f 6e 00 41 72 65 61 20 69 64 65 6e 74 69 66 69 65 72 3a 20 60 60 30 | nfiguration.Area.identifier:.``0 |
2cf80 | 30 30 31 60 60 20 49 53 2d 49 53 20 61 72 65 61 20 6e 75 6d 62 65 72 20 28 6e 75 6d 62 65 72 69 | 001``.IS-IS.area.number.(numberi |
2cfa0 | 63 61 6c 20 61 72 65 61 20 60 60 31 60 60 29 00 41 72 67 75 6d 65 6e 74 73 20 77 68 69 63 68 20 | cal.area.``1``).Arguments.which. |
2cfc0 | 77 69 6c 6c 20 62 65 20 70 61 73 73 65 64 20 74 6f 20 74 68 65 20 65 78 65 63 75 74 61 62 6c 65 | will.be.passed.to.the.executable |
2cfe0 | 2e 00 41 72 69 73 74 61 20 45 4f 53 00 41 72 75 62 61 2f 48 50 00 41 73 20 49 6e 74 65 72 6e 65 | ..Arista.EOS.Aruba/HP.As.Interne |
2d000 | 74 20 77 69 64 65 20 50 4d 54 55 20 64 69 73 63 6f 76 65 72 79 20 72 61 72 65 6c 79 20 77 6f 72 | t.wide.PMTU.discovery.rarely.wor |
2d020 | 6b 73 2c 20 77 65 20 73 6f 6d 65 74 69 6d 65 73 20 6e 65 65 64 20 74 6f 20 63 6c 61 6d 70 20 6f | ks,.we.sometimes.need.to.clamp.o |
2d040 | 75 72 20 54 43 50 20 4d 53 53 20 76 61 6c 75 65 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 76 | ur.TCP.MSS.value.to.a.specific.v |
2d060 | 61 6c 75 65 2e 20 54 68 69 73 20 69 73 20 61 20 66 69 65 6c 64 20 69 6e 20 74 68 65 20 54 43 50 | alue..This.is.a.field.in.the.TCP |
2d080 | 20 6f 70 74 69 6f 6e 73 20 70 61 72 74 20 6f 66 20 61 20 53 59 4e 20 70 61 63 6b 65 74 2e 20 42 | .options.part.of.a.SYN.packet..B |
2d0a0 | 79 20 73 65 74 74 69 6e 67 20 74 68 65 20 4d 53 53 20 76 61 6c 75 65 2c 20 79 6f 75 20 61 72 65 | y.setting.the.MSS.value,.you.are |
2d0c0 | 20 74 65 6c 6c 69 6e 67 20 74 68 65 20 72 65 6d 6f 74 65 20 73 69 64 65 20 75 6e 65 71 75 69 76 | .telling.the.remote.side.unequiv |
2d0e0 | 6f 63 61 6c 6c 79 20 27 64 6f 20 6e 6f 74 20 74 72 79 20 74 6f 20 73 65 6e 64 20 6d 65 20 70 61 | ocally.'do.not.try.to.send.me.pa |
2d100 | 63 6b 65 74 73 20 62 69 67 67 65 72 20 74 68 61 6e 20 74 68 69 73 20 76 61 6c 75 65 27 2e 00 41 | ckets.bigger.than.this.value'..A |
2d120 | 73 20 53 53 54 50 20 70 72 6f 76 69 64 65 73 20 50 50 50 20 76 69 61 20 61 20 53 53 4c 2f 54 4c | s.SSTP.provides.PPP.via.a.SSL/TL |
2d140 | 53 20 63 68 61 6e 6e 65 6c 20 74 68 65 20 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 70 75 62 6c | S.channel.the.use.of.either.publ |
2d160 | 69 63 61 6c 6c 79 20 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 73 20 61 73 20 77 65 | ically.signed.certificates.as.we |
2d180 | 6c 6c 20 61 73 20 61 20 70 72 69 76 61 74 65 20 50 4b 49 20 69 73 20 72 65 71 75 69 72 65 64 2e | ll.as.a.private.PKI.is.required. |
2d1a0 | 00 41 73 20 56 79 4f 53 20 69 73 20 4c 69 6e 75 78 20 62 61 73 65 64 20 74 68 65 20 64 65 66 61 | .As.VyOS.is.Linux.based.the.defa |
2d1c0 | 75 6c 74 20 70 6f 72 74 20 75 73 65 64 20 69 73 20 6e 6f 74 20 75 73 69 6e 67 20 34 37 38 39 20 | ult.port.used.is.not.using.4789. |
2d1e0 | 61 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 49 41 4e 41 2d 61 73 73 69 67 6e 65 64 20 64 65 73 | as.the.default.IANA-assigned.des |
2d200 | 74 69 6e 61 74 69 6f 6e 20 55 44 50 20 70 6f 72 74 20 6e 75 6d 62 65 72 2e 20 49 6e 73 74 65 61 | tination.UDP.port.number..Instea |
2d220 | 64 20 56 79 4f 53 20 75 73 65 73 20 74 68 65 20 4c 69 6e 75 78 20 64 65 66 61 75 6c 74 20 70 6f | d.VyOS.uses.the.Linux.default.po |
2d240 | 72 74 20 6f 66 20 38 34 37 32 2e 00 41 73 20 56 79 4f 53 20 69 73 20 62 61 73 65 64 20 6f 6e 20 | rt.of.8472..As.VyOS.is.based.on. |
2d260 | 4c 69 6e 75 78 20 61 6e 64 20 74 68 65 72 65 20 77 61 73 20 6e 6f 20 6f 66 66 69 63 69 61 6c 20 | Linux.and.there.was.no.official. |
2d280 | 49 41 4e 41 20 70 6f 72 74 20 61 73 73 69 67 6e 65 64 20 66 6f 72 20 56 58 4c 41 4e 2c 20 56 79 | IANA.port.assigned.for.VXLAN,.Vy |
2d2a0 | 4f 53 20 75 73 65 73 20 61 20 64 65 66 61 75 6c 74 20 70 6f 72 74 20 6f 66 20 38 34 37 32 2e 20 | OS.uses.a.default.port.of.8472.. |
2d2c0 | 59 6f 75 20 63 61 6e 20 63 68 61 6e 67 65 20 74 68 65 20 70 6f 72 74 20 6f 6e 20 61 20 70 65 72 | You.can.change.the.port.on.a.per |
2d2e0 | 20 56 58 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 20 62 61 73 69 73 20 74 6f 20 67 65 74 20 69 74 | .VXLAN.interface.basis.to.get.it |
2d300 | 20 77 6f 72 6b 69 6e 67 20 61 63 72 6f 73 73 20 6d 75 6c 74 69 70 6c 65 20 76 65 6e 64 6f 72 73 | .working.across.multiple.vendors |
2d320 | 2e 00 41 73 20 56 79 4f 53 20 69 73 20 62 61 73 65 64 20 6f 6e 20 4c 69 6e 75 78 20 69 74 20 6c | ..As.VyOS.is.based.on.Linux.it.l |
2d340 | 65 76 65 72 61 67 65 73 20 69 74 73 20 66 69 72 65 77 61 6c 6c 2e 20 54 68 65 20 4e 65 74 66 69 | everages.its.firewall..The.Netfi |
2d360 | 6c 74 65 72 20 70 72 6f 6a 65 63 74 20 63 72 65 61 74 65 64 20 69 70 74 61 62 6c 65 73 20 61 6e | lter.project.created.iptables.an |
2d380 | 64 20 69 74 73 20 73 75 63 63 65 73 73 6f 72 20 6e 66 74 61 62 6c 65 73 20 66 6f 72 20 74 68 65 | d.its.successor.nftables.for.the |
2d3a0 | 20 4c 69 6e 75 78 20 6b 65 72 6e 65 6c 20 74 6f 20 77 6f 72 6b 20 64 69 72 65 63 74 6c 79 20 6f | .Linux.kernel.to.work.directly.o |
2d3c0 | 6e 20 70 61 63 6b 65 74 20 64 61 74 61 20 66 6c 6f 77 73 2e 20 54 68 69 73 20 6e 6f 77 20 65 78 | n.packet.data.flows..This.now.ex |
2d3e0 | 74 65 6e 64 73 20 74 68 65 20 63 6f 6e 63 65 70 74 20 6f 66 20 7a 6f 6e 65 2d 62 61 73 65 64 20 | tends.the.concept.of.zone-based. |
2d400 | 73 65 63 75 72 69 74 79 20 74 6f 20 61 6c 6c 6f 77 20 66 6f 72 20 6d 61 6e 69 70 75 6c 61 74 69 | security.to.allow.for.manipulati |
2d420 | 6e 67 20 74 68 65 20 64 61 74 61 20 61 74 20 6d 75 6c 74 69 70 6c 65 20 73 74 61 67 65 73 20 6f | ng.the.data.at.multiple.stages.o |
2d440 | 6e 63 65 20 61 63 63 65 70 74 65 64 20 62 79 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 | nce.accepted.by.the.network.inte |
2d460 | 72 66 61 63 65 20 61 6e 64 20 74 68 65 20 64 72 69 76 65 72 20 62 65 66 6f 72 65 20 62 65 69 6e | rface.and.the.driver.before.bein |
2d480 | 67 20 68 61 6e 64 65 64 20 6f 66 66 20 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 | g.handed.off.to.the.destination. |
2d4a0 | 28 65 2e 67 2e 2c 20 61 20 77 65 62 20 73 65 72 76 65 72 20 4f 52 20 61 6e 6f 74 68 65 72 20 64 | (e.g.,.a.web.server.OR.another.d |
2d4c0 | 65 76 69 63 65 29 2e 00 41 73 20 56 79 4f 53 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 74 68 65 | evice)..As.VyOS.makes.use.of.the |
2d4e0 | 20 51 4d 49 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 | .QMI.interface.to.connect.to.the |
2d500 | 20 57 57 41 4e 20 6d 6f 64 65 6d 20 63 61 72 64 73 2c 20 61 6c 73 6f 20 74 68 65 20 66 69 72 6d | .WWAN.modem.cards,.also.the.firm |
2d520 | 77 61 72 65 20 63 61 6e 20 62 65 20 72 65 70 72 6f 67 72 61 6d 6d 65 64 2e 00 41 73 20 61 20 72 | ware.can.be.reprogrammed..As.a.r |
2d540 | 65 66 65 72 65 6e 63 65 3a 20 66 6f 72 20 31 30 6d 62 69 74 2f 73 20 6f 6e 20 49 6e 74 65 6c 2c | eference:.for.10mbit/s.on.Intel, |
2d560 | 20 79 6f 75 20 6d 69 67 68 74 20 6e 65 65 64 20 61 74 20 6c 65 61 73 74 20 31 30 6b 62 79 74 65 | .you.might.need.at.least.10kbyte |
2d580 | 20 62 75 66 66 65 72 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 72 65 61 63 68 20 79 6f 75 | .buffer.if.you.want.to.reach.you |
2d5a0 | 72 20 63 6f 6e 66 69 67 75 72 65 64 20 72 61 74 65 2e 00 41 73 20 61 20 72 65 73 75 6c 74 2c 20 | r.configured.rate..As.a.result,. |
2d5c0 | 74 68 65 20 70 72 6f 63 65 73 73 69 6e 67 20 6f 66 20 65 61 63 68 20 70 61 63 6b 65 74 20 62 65 | the.processing.of.each.packet.be |
2d5e0 | 63 6f 6d 65 73 20 6d 6f 72 65 20 65 66 66 69 63 69 65 6e 74 2c 20 70 6f 74 65 6e 74 69 61 6c 6c | comes.more.efficient,.potentiall |
2d600 | 79 20 6c 65 76 65 72 61 67 69 6e 67 20 68 61 72 64 77 61 72 65 20 65 6e 63 72 79 70 74 69 6f 6e | y.leveraging.hardware.encryption |
2d620 | 20 6f 66 66 6c 6f 61 64 69 6e 67 20 73 75 70 70 6f 72 74 20 61 76 61 69 6c 61 62 6c 65 20 69 6e | .offloading.support.available.in |
2d640 | 20 74 68 65 20 6b 65 72 6e 65 6c 2e 00 41 73 20 61 6e 20 61 6c 74 65 72 6e 61 74 69 76 65 20 74 | .the.kernel..As.an.alternative.t |
2d660 | 6f 20 61 70 70 6c 79 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 | o.applying.policy.to.an.interfac |
2d680 | 65 20 64 69 72 65 63 74 6c 79 2c 20 61 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c | e.directly,.a.zone-based.firewal |
2d6a0 | 6c 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 20 74 6f 20 73 69 6d 70 6c 69 66 79 20 63 6f 6e | l.can.be.created.to.simplify.con |
2d6c0 | 66 69 67 75 72 61 74 69 6f 6e 20 77 68 65 6e 20 6d 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 66 61 | figuration.when.multiple.interfa |
2d6e0 | 63 65 73 20 62 65 6c 6f 6e 67 20 74 6f 20 74 68 65 20 73 61 6d 65 20 73 65 63 75 72 69 74 79 20 | ces.belong.to.the.same.security. |
2d700 | 7a 6f 6e 65 2e 20 49 6e 73 74 65 61 64 20 6f 66 20 61 70 70 6c 79 69 6e 67 20 72 75 6c 65 2d 73 | zone..Instead.of.applying.rule-s |
2d720 | 65 74 73 20 74 6f 20 69 6e 74 65 72 66 61 63 65 73 2c 20 74 68 65 79 20 61 72 65 20 61 70 70 6c | ets.to.interfaces,.they.are.appl |
2d740 | 69 65 64 20 74 6f 20 73 6f 75 72 63 65 20 7a 6f 6e 65 2d 64 65 73 74 69 6e 61 74 69 6f 6e 20 7a | ied.to.source.zone-destination.z |
2d760 | 6f 6e 65 20 70 61 69 72 73 2e 00 41 73 20 62 6f 74 68 20 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e | one.pairs..As.both.Microsoft.Win |
2d780 | 64 6f 77 73 20 61 6e 64 20 41 70 70 6c 65 20 69 4f 53 2f 69 50 61 64 4f 53 20 6f 6e 6c 79 20 73 | dows.and.Apple.iOS/iPadOS.only.s |
2d7a0 | 75 70 70 6f 72 74 20 61 20 63 65 72 74 61 69 6e 20 73 65 74 20 6f 66 20 65 6e 63 72 79 70 74 69 | upport.a.certain.set.of.encrypti |
2d7c0 | 6f 6e 20 63 69 70 68 65 72 73 20 61 6e 64 20 69 6e 74 65 67 72 69 74 79 20 61 6c 67 6f 72 69 74 | on.ciphers.and.integrity.algorit |
2d7e0 | 68 6d 73 20 77 65 20 77 69 6c 6c 20 76 61 6c 69 64 61 74 65 20 74 68 65 20 63 6f 6e 66 69 67 75 | hms.we.will.validate.the.configu |
2d800 | 72 65 64 20 49 4b 45 2f 45 53 50 20 70 72 6f 70 6f 73 61 6c 73 20 61 6e 64 20 6f 6e 6c 79 20 6c | red.IKE/ESP.proposals.and.only.l |
2d820 | 69 73 74 20 74 68 65 20 63 6f 6d 70 61 74 69 62 6c 65 20 6f 6e 65 73 20 74 6f 20 74 68 65 20 75 | ist.the.compatible.ones.to.the.u |
2d840 | 73 65 72 20 e2 80 94 20 69 66 20 6d 75 6c 74 69 70 6c 65 20 61 72 65 20 64 65 66 69 6e 65 64 2e | ser.....if.multiple.are.defined. |
2d860 | 20 49 66 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 6d 61 74 63 68 69 6e 67 20 70 72 6f 70 6f 73 | .If.there.are.no.matching.propos |
2d880 | 61 6c 73 20 66 6f 75 6e 64 20 e2 80 94 20 77 65 20 63 61 6e 20 6e 6f 74 20 67 65 6e 65 72 61 74 | als.found.....we.can.not.generat |
2d8a0 | 65 20 61 20 70 72 6f 66 69 6c 65 20 66 6f 72 20 79 6f 75 2e 00 41 73 20 64 65 73 63 72 69 62 65 | e.a.profile.for.you..As.describe |
2d8c0 | 64 2c 20 66 69 72 73 74 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 65 76 61 6c 75 61 74 65 | d,.first.packet.will.be.evaluate |
2d8e0 | 64 20 62 79 20 61 6c 6c 20 74 68 65 20 66 69 72 65 77 61 6c 6c 20 70 61 74 68 2c 20 73 6f 20 64 | d.by.all.the.firewall.path,.so.d |
2d900 | 65 73 69 72 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 68 6f 75 6c 64 20 62 65 20 65 78 70 6c | esired.connection.should.be.expl |
2d920 | 69 63 69 74 65 6c 79 20 61 63 63 65 70 74 65 64 2e 20 53 61 6d 65 20 74 68 69 6e 67 20 73 68 6f | icitely.accepted..Same.thing.sho |
2d940 | 75 6c 64 20 62 65 20 74 61 6b 65 6e 20 69 6e 74 6f 20 61 63 63 6f 75 6e 74 20 66 6f 72 20 74 72 | uld.be.taken.into.account.for.tr |
2d960 | 61 66 66 69 63 20 69 6e 20 72 65 76 65 72 73 65 20 6f 72 64 65 72 2e 20 49 6e 20 6d 6f 73 74 20 | affic.in.reverse.order..In.most. |
2d980 | 63 61 73 65 73 20 73 74 61 74 65 20 70 6f 6c 69 63 69 65 73 20 61 72 65 20 75 73 65 64 20 69 6e | cases.state.policies.are.used.in |
2d9a0 | 20 6f 72 64 65 72 20 74 6f 20 61 63 63 65 70 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 6e 20 72 | .order.to.accept.connection.in.r |
2d9c0 | 65 76 65 72 73 65 20 70 61 74 63 68 2e 00 41 73 20 6d 6f 72 65 20 61 6e 64 20 6d 6f 72 65 20 72 | everse.patch..As.more.and.more.r |
2d9e0 | 6f 75 74 65 72 73 20 72 75 6e 20 6f 6e 20 48 79 70 65 72 76 69 73 6f 72 73 2c 20 65 78 70 65 63 | outers.run.on.Hypervisors,.expec |
2da00 | 69 61 6c 6c 79 20 77 69 74 68 20 61 20 3a 61 62 62 72 3a 60 4e 4f 53 20 28 4e 65 74 77 6f 72 6b | ially.with.a.:abbr:`NOS.(Network |
2da20 | 20 4f 70 65 72 61 74 69 6e 67 20 53 79 73 74 65 6d 29 60 20 61 73 20 56 79 4f 53 2c 20 69 74 20 | .Operating.System)`.as.VyOS,.it. |
2da40 | 6d 61 6b 65 73 20 66 65 77 65 72 20 61 6e 64 20 66 65 77 65 72 20 73 65 6e 73 65 20 74 6f 20 75 | makes.fewer.and.fewer.sense.to.u |
2da60 | 73 65 20 73 74 61 74 69 63 20 72 65 73 6f 75 72 63 65 20 62 69 6e 64 69 6e 67 73 20 6c 69 6b 65 | se.static.resource.bindings.like |
2da80 | 20 60 60 73 6d 70 2d 61 66 66 69 6e 69 74 79 60 60 20 61 73 20 70 72 65 73 65 6e 74 20 69 6e 20 | .``smp-affinity``.as.present.in. |
2daa0 | 56 79 4f 53 20 31 2e 32 20 61 6e 64 20 65 61 72 6c 69 65 72 20 74 6f 20 70 69 6e 20 63 65 72 74 | VyOS.1.2.and.earlier.to.pin.cert |
2dac0 | 61 69 6e 20 69 6e 74 65 72 72 75 70 74 20 68 61 6e 64 6c 65 72 73 20 74 6f 20 73 70 65 63 69 66 | ain.interrupt.handlers.to.specif |
2dae0 | 69 63 20 43 50 55 73 2e 00 41 73 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 20 74 72 61 6e | ic.CPUs..As.network.address.tran |
2db00 | 73 6c 61 74 69 6f 6e 20 6d 6f 64 69 66 69 65 73 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 | slation.modifies.the.IP.address. |
2db20 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 70 61 63 6b 65 74 73 2c 20 4e 41 54 20 69 6d 70 6c | information.in.packets,.NAT.impl |
2db40 | 65 6d 65 6e 74 61 74 69 6f 6e 73 20 6d 61 79 20 76 61 72 79 20 69 6e 20 74 68 65 69 72 20 73 70 | ementations.may.vary.in.their.sp |
2db60 | 65 63 69 66 69 63 20 62 65 68 61 76 69 6f 72 20 69 6e 20 76 61 72 69 6f 75 73 20 61 64 64 72 65 | ecific.behavior.in.various.addre |
2db80 | 73 73 69 6e 67 20 63 61 73 65 73 20 61 6e 64 20 74 68 65 69 72 20 65 66 66 65 63 74 20 6f 6e 20 | ssing.cases.and.their.effect.on. |
2dba0 | 6e 65 74 77 6f 72 6b 20 74 72 61 66 66 69 63 2e 20 54 68 65 20 73 70 65 63 69 66 69 63 73 20 6f | network.traffic..The.specifics.o |
2dbc0 | 66 20 4e 41 54 20 62 65 68 61 76 69 6f 72 20 61 72 65 20 6e 6f 74 20 63 6f 6d 6d 6f 6e 6c 79 20 | f.NAT.behavior.are.not.commonly. |
2dbe0 | 64 6f 63 75 6d 65 6e 74 65 64 20 62 79 20 76 65 6e 64 6f 72 73 20 6f 66 20 65 71 75 69 70 6d 65 | documented.by.vendors.of.equipme |
2dc00 | 6e 74 20 63 6f 6e 74 61 69 6e 69 6e 67 20 4e 41 54 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e | nt.containing.NAT.implementation |
2dc20 | 73 2e 00 41 73 20 6f 66 20 56 79 4f 53 20 31 2e 34 2c 20 4f 70 65 6e 56 50 4e 20 73 69 74 65 2d | s..As.of.VyOS.1.4,.OpenVPN.site- |
2dc40 | 74 6f 2d 73 69 74 65 20 6d 6f 64 65 20 63 61 6e 20 75 73 65 20 65 69 74 68 65 72 20 70 72 65 2d | to-site.mode.can.use.either.pre- |
2dc60 | 73 68 61 72 65 64 20 6b 65 79 73 20 6f 72 20 78 2e 35 30 39 20 63 65 72 74 69 66 69 63 61 74 65 | shared.keys.or.x.509.certificate |
2dc80 | 73 2e 00 41 73 20 70 65 72 20 64 65 66 61 75 6c 74 20 61 6e 64 20 69 66 20 6e 6f 74 20 6f 74 68 | s..As.per.default.and.if.not.oth |
2dca0 | 65 72 77 69 73 65 20 64 65 66 69 6e 65 64 2c 20 6d 73 63 68 61 70 2d 76 32 20 69 73 20 62 65 69 | erwise.defined,.mschap-v2.is.bei |
2dcc0 | 6e 67 20 75 73 65 64 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 6e 64 20 6d | ng.used.for.authentication.and.m |
2dce0 | 70 70 65 20 31 32 38 2d 62 69 74 20 28 73 74 61 74 65 6c 65 73 73 29 20 66 6f 72 20 65 6e 63 72 | ppe.128-bit.(stateless).for.encr |
2dd00 | 79 70 74 69 6f 6e 2e 20 49 66 20 6e 6f 20 67 61 74 65 77 61 79 2d 61 64 64 72 65 73 73 20 69 73 | yption..If.no.gateway-address.is |
2dd20 | 20 73 65 74 20 77 69 74 68 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 74 | .set.within.the.configuration,.t |
2dd40 | 68 65 20 6c 6f 77 65 73 74 20 49 50 20 6f 75 74 20 6f 66 20 74 68 65 20 2f 32 34 20 63 6c 69 65 | he.lowest.IP.out.of.the./24.clie |
2dd60 | 6e 74 2d 69 70 2d 70 6f 6f 6c 20 69 73 20 62 65 69 6e 67 20 75 73 65 64 2e 20 46 6f 72 20 69 6e | nt-ip-pool.is.being.used..For.in |
2dd80 | 73 74 61 6e 63 65 2c 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 62 65 6c 6f 77 20 69 74 20 | stance,.in.the.example.below.it. |
2dda0 | 77 6f 75 6c 64 20 62 65 20 31 39 32 2e 31 36 38 2e 30 2e 31 2e 00 41 73 20 73 61 69 64 20 62 65 | would.be.192.168.0.1..As.said.be |
2ddc0 | 66 6f 72 65 2c 20 6f 6e 63 65 20 66 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 73 20 61 72 65 20 63 | fore,.once.firewall.groups.are.c |
2dde0 | 72 65 61 74 65 64 2c 20 74 68 65 79 20 63 61 6e 20 62 65 20 72 65 66 65 72 65 6e 63 65 64 20 65 | reated,.they.can.be.referenced.e |
2de00 | 69 74 68 65 72 20 69 6e 20 66 69 72 65 77 61 6c 6c 2c 20 6e 61 74 2c 20 6e 61 74 36 36 20 61 6e | ither.in.firewall,.nat,.nat66.an |
2de20 | 64 2f 6f 72 20 70 6f 6c 69 63 79 2d 72 6f 75 74 65 20 72 75 6c 65 73 2e 00 41 73 20 73 68 6f 77 | d/or.policy-route.rules..As.show |
2de40 | 6e 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 61 62 6f 76 65 2c 20 6f 6e 65 20 6f 66 20 74 | n.in.the.example.above,.one.of.t |
2de60 | 68 65 20 70 6f 73 73 69 62 69 6c 69 74 69 65 73 20 74 6f 20 6d 61 74 63 68 20 70 61 63 6b 65 74 | he.possibilities.to.match.packet |
2de80 | 73 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6d 61 72 6b 73 20 64 6f 6e 65 20 62 79 20 74 68 65 20 | s.is.based.on.marks.done.by.the. |
2dea0 | 66 69 72 65 77 61 6c 6c 2c 20 60 74 68 61 74 20 63 61 6e 20 67 69 76 65 20 79 6f 75 20 61 20 67 | firewall,.`that.can.give.you.a.g |
2dec0 | 72 65 61 74 20 64 65 61 6c 20 6f 66 20 66 6c 65 78 69 62 69 6c 69 74 79 60 5f 2e 00 41 73 20 73 | reat.deal.of.flexibility`_..As.s |
2dee0 | 68 6f 77 6e 20 69 6e 20 74 68 65 20 6c 61 73 74 20 63 6f 6d 6d 61 6e 64 20 6f 66 20 74 68 65 20 | hown.in.the.last.command.of.the. |
2df00 | 65 78 61 6d 70 6c 65 20 61 62 6f 76 65 2c 20 74 68 65 20 60 71 75 65 75 65 2d 74 79 70 65 60 20 | example.above,.the.`queue-type`. |
2df20 | 73 65 74 74 69 6e 67 20 61 6c 6c 6f 77 73 20 74 68 65 73 65 20 63 6f 6d 62 69 6e 61 74 69 6f 6e | setting.allows.these.combination |
2df40 | 73 2e 20 59 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 75 73 65 20 69 74 20 69 6e | s..You.will.be.able.to.use.it.in |
2df60 | 20 6d 61 6e 79 20 70 6f 6c 69 63 69 65 73 2e 00 41 73 20 74 68 65 20 65 78 61 6d 70 6c 65 20 69 | .many.policies..As.the.example.i |
2df80 | 6d 61 67 65 20 62 65 6c 6f 77 20 73 68 6f 77 73 2c 20 74 68 65 20 64 65 76 69 63 65 20 6e 6f 77 | mage.below.shows,.the.device.now |
2dfa0 | 20 6e 65 65 64 73 20 72 75 6c 65 73 20 74 6f 20 61 6c 6c 6f 77 2f 62 6c 6f 63 6b 20 74 72 61 66 | .needs.rules.to.allow/block.traf |
2dfc0 | 66 69 63 20 74 6f 20 6f 72 20 66 72 6f 6d 20 74 68 65 20 73 65 72 76 69 63 65 73 20 72 75 6e 6e | fic.to.or.from.the.services.runn |
2dfe0 | 69 6e 67 20 6f 6e 20 74 68 65 20 64 65 76 69 63 65 20 74 68 61 74 20 68 61 76 65 20 6f 70 65 6e | ing.on.the.device.that.have.open |
2e000 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 6f 6e 20 74 68 61 74 20 69 6e 74 65 72 66 61 63 65 2e 00 | .connections.on.that.interface.. |
2e020 | 41 73 20 74 68 65 20 65 78 61 6d 70 6c 65 20 69 6d 61 67 65 20 62 65 6c 6f 77 20 73 68 6f 77 73 | As.the.example.image.below.shows |
2e040 | 2c 20 74 68 65 20 64 65 76 69 63 65 20 77 61 73 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 | ,.the.device.was.configured.with |
2e060 | 20 72 75 6c 65 73 20 62 6c 6f 63 6b 69 6e 67 20 69 6e 62 6f 75 6e 64 20 6f 72 20 6f 75 74 62 6f | .rules.blocking.inbound.or.outbo |
2e080 | 75 6e 64 20 74 72 61 66 66 69 63 20 6f 6e 20 65 61 63 68 20 69 6e 74 65 72 66 61 63 65 2e 00 41 | und.traffic.on.each.interface..A |
2e0a0 | 73 20 74 68 65 20 6e 61 6d 65 20 69 6d 70 6c 69 65 73 2c 20 69 74 27 73 20 49 50 76 34 20 65 6e | s.the.name.implies,.it's.IPv4.en |
2e0c0 | 63 61 70 73 75 6c 61 74 65 64 20 69 6e 20 49 50 76 36 2c 20 61 73 20 73 69 6d 70 6c 65 20 61 73 | capsulated.in.IPv6,.as.simple.as |
2e0e0 | 20 74 68 61 74 2e 00 41 73 20 77 65 6c 6c 20 61 73 20 74 68 65 20 62 65 6c 6f 77 20 74 6f 20 61 | .that..As.well.as.the.below.to.a |
2e100 | 6c 6c 6f 77 20 4e 41 54 2d 74 72 61 76 65 72 73 61 6c 20 28 77 68 65 6e 20 4e 41 54 20 69 73 20 | llow.NAT-traversal.(when.NAT.is. |
2e120 | 64 65 74 65 63 74 65 64 20 62 79 20 74 68 65 20 56 50 4e 20 63 6c 69 65 6e 74 2c 20 45 53 50 20 | detected.by.the.VPN.client,.ESP. |
2e140 | 69 73 20 65 6e 63 61 70 73 75 6c 61 74 65 64 20 69 6e 20 55 44 50 20 66 6f 72 20 4e 41 54 2d 74 | is.encapsulated.in.UDP.for.NAT-t |
2e160 | 72 61 76 65 72 73 61 6c 29 3a 00 41 73 20 77 69 74 68 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 | raversal):.As.with.other.policie |
2e180 | 73 2c 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 63 61 6e 20 65 6d 62 65 64 5f 20 61 6e 6f 74 68 65 | s,.Round-Robin.can.embed_.anothe |
2e1a0 | 72 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 20 74 68 72 6f 75 67 68 20 74 68 | r.policy.into.a.class.through.th |
2e1c0 | 65 20 60 60 71 75 65 75 65 2d 74 79 70 65 60 60 20 73 65 74 74 69 6e 67 2e 00 41 73 20 77 69 74 | e.``queue-type``.setting..As.wit |
2e1e0 | 68 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 73 2c 20 53 68 61 70 65 72 20 63 61 6e 20 65 6d 62 | h.other.policies,.Shaper.can.emb |
2e200 | 65 64 5f 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 73 20 69 6e 74 6f 20 69 74 73 20 63 6c 61 73 | ed_.other.policies.into.its.clas |
2e220 | 73 65 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 60 60 71 75 65 75 65 2d 74 79 70 65 60 60 20 73 | ses.through.the.``queue-type``.s |
2e240 | 65 74 74 69 6e 67 20 61 6e 64 20 74 68 65 6e 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 69 72 20 | etting.and.then.configure.their. |
2e260 | 70 61 72 61 6d 65 74 65 72 73 2e 00 41 73 20 77 69 74 68 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 | parameters..As.with.other.polici |
2e280 | 65 73 2c 20 79 6f 75 20 63 61 6e 20 64 65 66 69 6e 65 20 64 69 66 66 65 72 65 6e 74 20 74 79 70 | es,.you.can.define.different.typ |
2e2a0 | 65 20 6f 66 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 73 20 66 6f 72 20 79 6f 75 72 20 63 6c 61 | e.of.matching.rules.for.your.cla |
2e2c0 | 73 73 65 73 3a 00 41 73 20 77 69 74 68 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 73 2c 20 79 6f | sses:.As.with.other.policies,.yo |
2e2e0 | 75 20 63 61 6e 20 65 6d 62 65 64 5f 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 73 20 69 6e 74 6f | u.can.embed_.other.policies.into |
2e300 | 20 74 68 65 20 63 6c 61 73 73 65 73 20 28 61 6e 64 20 64 65 66 61 75 6c 74 29 20 6f 66 20 79 6f | .the.classes.(and.default).of.yo |
2e320 | 75 72 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 70 6f 6c 69 63 79 20 74 68 72 6f 75 67 68 | ur.Priority.Queue.policy.through |
2e340 | 20 74 68 65 20 60 60 71 75 65 75 65 2d 74 79 70 65 60 60 20 73 65 74 74 69 6e 67 3a 00 41 73 20 | .the.``queue-type``.setting:.As. |
2e360 | 79 6f 75 20 63 61 6e 20 73 65 65 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 68 65 72 65 2c | you.can.see.in.the.example.here, |
2e380 | 20 79 6f 75 20 63 61 6e 20 61 73 73 69 67 6e 20 74 68 65 20 73 61 6d 65 20 72 75 6c 65 2d 73 65 | .you.can.assign.the.same.rule-se |
2e3a0 | 74 20 74 6f 20 73 65 76 65 72 61 6c 20 69 6e 74 65 72 66 61 63 65 73 2e 20 41 6e 20 69 6e 74 65 | t.to.several.interfaces..An.inte |
2e3c0 | 72 66 61 63 65 20 63 61 6e 20 6f 6e 6c 79 20 68 61 76 65 20 6f 6e 65 20 72 75 6c 65 2d 73 65 74 | rface.can.only.have.one.rule-set |
2e3e0 | 20 70 65 72 20 63 68 61 69 6e 2e 00 41 73 20 79 6f 75 20 63 61 6e 20 73 65 65 2c 20 4c 65 61 66 | .per.chain..As.you.can.see,.Leaf |
2e400 | 32 20 61 6e 64 20 4c 65 61 66 33 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 61 6c 6d | 2.and.Leaf3.configuration.is.alm |
2e420 | 6f 73 74 20 69 64 65 6e 74 69 63 61 6c 2e 20 54 68 65 72 65 20 61 72 65 20 6c 6f 74 73 20 6f 66 | ost.identical..There.are.lots.of |
2e440 | 20 63 6f 6d 6d 61 6e 64 73 20 61 62 6f 76 65 2c 20 49 27 6c 6c 20 74 72 79 20 74 6f 20 69 6e 74 | .commands.above,.I'll.try.to.int |
2e460 | 6f 20 6d 6f 72 65 20 64 65 74 61 69 6c 20 62 65 6c 6f 77 2c 20 63 6f 6d 6d 61 6e 64 20 64 65 73 | o.more.detail.below,.command.des |
2e480 | 63 72 69 70 74 69 6f 6e 73 20 61 72 65 20 70 6c 61 63 65 64 20 75 6e 64 65 72 20 74 68 65 20 63 | criptions.are.placed.under.the.c |
2e4a0 | 6f 6d 6d 61 6e 64 20 62 6f 78 65 73 3a 00 41 73 73 69 67 6e 20 60 3c 6d 65 6d 62 65 72 3e 60 20 | ommand.boxes:.Assign.`<member>`. |
2e4c0 | 69 6e 74 65 72 66 61 63 65 20 74 6f 20 62 72 69 64 67 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e | interface.to.bridge.`<interface> |
2e4e0 | 60 2e 20 41 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 68 65 6c 70 65 72 20 77 69 6c 6c 20 68 65 6c 70 | `..A.completion.helper.will.help |
2e500 | 20 79 6f 75 20 77 69 74 68 20 61 6c 6c 20 61 6c 6c 6f 77 65 64 20 69 6e 74 65 72 66 61 63 65 73 | .you.with.all.allowed.interfaces |
2e520 | 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 62 72 69 64 67 65 64 2e 20 54 68 69 73 20 69 6e 63 6c | .which.can.be.bridged..This.incl |
2e540 | 75 64 65 73 20 3a 72 65 66 3a 60 65 74 68 65 72 6e 65 74 2d 69 6e 74 65 72 66 61 63 65 60 2c 20 | udes.:ref:`ethernet-interface`,. |
2e560 | 3a 72 65 66 3a 60 62 6f 6e 64 2d 69 6e 74 65 72 66 61 63 65 60 2c 20 3a 72 65 66 3a 60 6c 32 74 | :ref:`bond-interface`,.:ref:`l2t |
2e580 | 70 76 33 2d 69 6e 74 65 72 66 61 63 65 60 2c 20 3a 72 65 66 3a 60 6f 70 65 6e 76 70 6e 60 2c 20 | pv3-interface`,.:ref:`openvpn`,. |
2e5a0 | 3a 72 65 66 3a 60 76 78 6c 61 6e 2d 69 6e 74 65 72 66 61 63 65 60 2c 20 3a 72 65 66 3a 60 77 69 | :ref:`vxlan-interface`,.:ref:`wi |
2e5c0 | 72 65 6c 65 73 73 2d 69 6e 74 65 72 66 61 63 65 60 2c 20 3a 72 65 66 3a 60 74 75 6e 6e 65 6c 2d | reless-interface`,.:ref:`tunnel- |
2e5e0 | 69 6e 74 65 72 66 61 63 65 60 20 61 6e 64 20 3a 72 65 66 3a 60 67 65 6e 65 76 65 2d 69 6e 74 65 | interface`.and.:ref:`geneve-inte |
2e600 | 72 66 61 63 65 60 2e 00 41 73 73 69 67 6e 20 61 20 73 70 65 63 69 66 69 63 20 62 61 63 6b 65 6e | rface`..Assign.a.specific.backen |
2e620 | 64 20 74 6f 20 61 20 72 75 6c 65 00 41 73 73 69 67 6e 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 | d.to.a.rule.Assign.interface.ide |
2e640 | 6e 74 69 66 69 65 64 20 62 79 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 74 6f 20 56 52 46 20 | ntified.by.`<interface>`.to.VRF. |
2e660 | 6e 61 6d 65 64 20 60 3c 6e 61 6d 65 3e 60 2e 00 41 73 73 69 67 6e 20 6d 65 6d 62 65 72 20 69 6e | named.`<name>`..Assign.member.in |
2e680 | 74 65 72 66 61 63 65 73 20 74 6f 20 50 6f 72 74 43 68 61 6e 6e 65 6c 00 41 73 73 69 67 6e 20 73 | terfaces.to.PortChannel.Assign.s |
2e6a0 | 74 61 74 69 63 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 60 3c 75 73 65 72 3e 60 20 61 63 63 | tatic.IP.address.to.`<user>`.acc |
2e6c0 | 6f 75 6e 74 2e 00 41 73 73 69 67 6e 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 74 | ount..Assign.the.IP.address.to.t |
2e6e0 | 68 69 73 20 6d 61 63 68 69 6e 65 20 66 6f 72 20 60 3c 74 69 6d 65 3e 60 20 73 65 63 6f 6e 64 73 | his.machine.for.`<time>`.seconds |
2e700 | 2e 00 41 73 73 69 67 6e 20 74 68 65 20 53 53 48 20 70 75 62 6c 69 63 20 6b 65 79 20 70 6f 72 74 | ..Assign.the.SSH.public.key.port |
2e720 | 69 6f 6e 20 60 3c 6b 65 79 3e 60 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 70 65 72 2d 6b 65 | ion.`<key>`.identified.by.per-ke |
2e740 | 79 20 60 3c 69 64 65 6e 74 69 66 69 65 72 3e 60 20 74 6f 20 74 68 65 20 6c 6f 63 61 6c 20 75 73 | y.`<identifier>`.to.the.local.us |
2e760 | 65 72 20 60 3c 75 73 65 72 6e 61 6d 65 3e 60 2e 00 41 73 73 6f 63 69 61 74 65 73 20 74 68 65 20 | er.`<username>`..Associates.the. |
2e780 | 70 72 65 76 69 6f 75 73 6c 79 20 67 65 6e 65 72 61 74 65 64 20 70 72 69 76 61 74 65 20 6b 65 79 | previously.generated.private.key |
2e7a0 | 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 | .to.a.specific.WireGuard.interfa |
2e7c0 | 63 65 2e 20 54 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 63 61 6e 20 62 65 20 67 65 6e 65 72 | ce..The.private.key.can.be.gener |
2e7e0 | 61 74 65 20 76 69 61 20 74 68 65 20 63 6f 6d 6d 61 6e 64 00 41 73 73 75 72 65 20 74 68 61 74 20 | ate.via.the.command.Assure.that. |
2e800 | 79 6f 75 72 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 61 6c 6c 6f 77 20 74 68 65 20 74 72 | your.firewall.rules.allow.the.tr |
2e820 | 61 66 66 69 63 2c 20 69 6e 20 77 68 69 63 68 20 63 61 73 65 20 79 6f 75 20 68 61 76 65 20 61 20 | affic,.in.which.case.you.have.a. |
2e840 | 77 6f 72 6b 69 6e 67 20 56 50 4e 20 75 73 69 6e 67 20 57 69 72 65 47 75 61 72 64 2e 00 41 73 73 | working.VPN.using.WireGuard..Ass |
2e860 | 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 31 31 00 41 73 73 75 72 65 64 20 46 | ured.Forwarding(AF).11.Assured.F |
2e880 | 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 31 32 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 | orwarding(AF).12.Assured.Forward |
2e8a0 | 69 6e 67 28 41 46 29 20 31 33 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 | ing(AF).13.Assured.Forwarding(AF |
2e8c0 | 29 20 32 31 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 32 32 00 41 | ).21.Assured.Forwarding(AF).22.A |
2e8e0 | 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 32 33 00 41 73 73 75 72 65 64 | ssured.Forwarding(AF).23.Assured |
2e900 | 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 33 31 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 | .Forwarding(AF).31.Assured.Forwa |
2e920 | 72 64 69 6e 67 28 41 46 29 20 33 32 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 | rding(AF).32.Assured.Forwarding( |
2e940 | 41 46 29 20 33 33 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 34 31 | AF).33.Assured.Forwarding(AF).41 |
2e960 | 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 34 32 00 41 73 73 75 72 | .Assured.Forwarding(AF).42.Assur |
2e980 | 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 34 33 00 41 74 20 65 76 65 72 79 20 72 6f | ed.Forwarding(AF).43.At.every.ro |
2e9a0 | 75 6e 64 2c 20 74 68 65 20 64 65 66 69 63 69 74 20 63 6f 75 6e 74 65 72 20 61 64 64 73 20 74 68 | und,.the.deficit.counter.adds.th |
2e9c0 | 65 20 71 75 61 6e 74 75 6d 20 73 6f 20 74 68 61 74 20 65 76 65 6e 20 6c 61 72 67 65 20 70 61 63 | e.quantum.so.that.even.large.pac |
2e9e0 | 6b 65 74 73 20 77 69 6c 6c 20 68 61 76 65 20 74 68 65 69 72 20 6f 70 70 6f 72 74 75 6e 69 74 79 | kets.will.have.their.opportunity |
2ea00 | 20 74 6f 20 62 65 20 64 65 71 75 65 75 65 64 2e 00 41 74 20 74 68 65 20 6d 6f 6d 65 6e 74 20 69 | .to.be.dequeued..At.the.moment.i |
2ea20 | 74 20 6e 6f 74 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 6c 6f 6f 6b 20 61 74 20 74 68 65 20 77 68 | t.not.possible.to.look.at.the.wh |
2ea40 | 6f 6c 65 20 66 69 72 65 77 61 6c 6c 20 6c 6f 67 20 77 69 74 68 20 56 79 4f 53 20 6f 70 65 72 61 | ole.firewall.log.with.VyOS.opera |
2ea60 | 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 2e 20 41 6c 6c 20 6c 6f 67 73 20 77 69 6c 6c 20 73 | tional.commands..All.logs.will.s |
2ea80 | 61 76 65 20 74 6f 20 60 60 2f 76 61 72 2f 6c 6f 67 73 2f 6d 65 73 73 61 67 65 73 60 60 2e 20 46 | ave.to.``/var/logs/messages``..F |
2eaa0 | 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 67 72 65 70 20 27 31 30 2e 31 30 2e 30 2e 31 30 27 20 | or.example:.``grep.'10.10.0.10'. |
2eac0 | 2f 76 61 72 2f 6c 6f 67 2f 6d 65 73 73 61 67 65 73 60 60 00 41 74 20 74 68 65 20 74 69 6d 65 20 | /var/log/messages``.At.the.time. |
2eae0 | 6f 66 20 74 68 69 73 20 77 72 69 74 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 64 69 | of.this.writing.the.following.di |
2eb00 | 73 70 6c 61 79 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 3a 00 41 74 20 76 65 72 79 20 6c 6f | splays.are.supported:.At.very.lo |
2eb20 | 77 20 72 61 74 65 73 20 28 62 65 6c 6f 77 20 33 4d 62 69 74 29 2c 20 62 65 73 69 64 65 73 20 74 | w.rates.(below.3Mbit),.besides.t |
2eb40 | 75 6e 69 6e 67 20 60 71 75 61 6e 74 75 6d 60 20 28 33 30 30 20 6b 65 65 70 73 20 62 65 69 6e 67 | uning.`quantum`.(300.keeps.being |
2eb60 | 20 6f 6b 29 20 79 6f 75 20 6d 61 79 20 61 6c 73 6f 20 77 61 6e 74 20 74 6f 20 69 6e 63 72 65 61 | .ok).you.may.also.want.to.increa |
2eb80 | 73 65 20 60 74 61 72 67 65 74 60 20 74 6f 20 73 6f 6d 65 74 68 69 6e 67 20 6c 69 6b 65 20 31 35 | se.`target`.to.something.like.15 |
2eba0 | 6d 73 20 61 6e 64 20 69 6e 63 72 65 61 73 65 20 60 69 6e 74 65 72 76 61 6c 60 20 74 6f 20 73 6f | ms.and.increase.`interval`.to.so |
2ebc0 | 6d 65 74 68 69 6e 67 20 61 72 6f 75 6e 64 20 31 35 30 20 6d 73 2e 00 41 74 74 61 63 68 65 73 20 | mething.around.150.ms..Attaches. |
2ebe0 | 75 73 65 72 2d 64 65 66 69 6e 65 64 20 6e 65 74 77 6f 72 6b 20 74 6f 20 61 20 63 6f 6e 74 61 69 | user-defined.network.to.a.contai |
2ec00 | 6e 65 72 2e 20 4f 6e 6c 79 20 6f 6e 65 20 6e 65 74 77 6f 72 6b 20 6d 75 73 74 20 62 65 20 73 70 | ner..Only.one.network.must.be.sp |
2ec20 | 65 63 69 66 69 65 64 20 61 6e 64 20 6d 75 73 74 20 61 6c 72 65 61 64 79 20 65 78 69 73 74 2e 00 | ecified.and.must.already.exist.. |
2ec40 | 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 28 45 | Authentication.Authentication.(E |
2ec60 | 41 50 6f 4c 29 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 41 64 76 61 6e 63 65 64 20 4f 70 | APoL).Authentication.Advanced.Op |
2ec80 | 74 69 6f 6e 73 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e | tions.Authentication.application |
2eca0 | 20 63 6c 69 65 6e 74 2d 69 64 2e 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 70 70 6c 69 | .client-id..Authentication.appli |
2ecc0 | 63 61 74 69 6f 6e 20 63 6c 69 65 6e 74 2d 73 65 63 72 65 74 2e 00 41 75 74 68 65 6e 74 69 63 61 | cation.client-secret..Authentica |
2ece0 | 74 69 6f 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 74 65 6e 61 6e 74 2d 69 64 00 41 75 74 68 65 | tion.application.tenant-id.Authe |
2ed00 | 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 64 6f 6e 65 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 60 | ntication.is.done.by.using.the.` |
2ed20 | 60 6f 70 65 6e 76 70 6e 2d 61 75 74 68 2d 6c 64 61 70 2e 73 6f 60 60 20 70 6c 75 67 69 6e 20 77 | `openvpn-auth-ldap.so``.plugin.w |
2ed40 | 68 69 63 68 20 69 73 20 73 68 69 70 70 65 64 20 77 69 74 68 20 65 76 65 72 79 20 56 79 4f 53 20 | hich.is.shipped.with.every.VyOS. |
2ed60 | 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 2e 20 41 20 64 65 64 69 63 61 74 65 64 20 63 6f 6e 66 69 67 | installation..A.dedicated.config |
2ed80 | 75 72 61 74 69 6f 6e 20 66 69 6c 65 20 69 73 20 72 65 71 75 69 72 65 64 2e 20 49 74 20 69 73 20 | uration.file.is.required..It.is. |
2eda0 | 62 65 73 74 20 70 72 61 63 74 69 73 65 20 74 6f 20 73 74 6f 72 65 20 69 74 20 69 6e 20 60 60 2f | best.practise.to.store.it.in.``/ |
2edc0 | 63 6f 6e 66 69 67 60 60 20 74 6f 20 73 75 72 76 69 76 65 20 69 6d 61 67 65 20 75 70 64 61 74 65 | config``.to.survive.image.update |
2ede0 | 73 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 6e 61 | s.Authentication.organization.na |
2ee00 | 6d 65 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 74 6f 6b 65 6e 00 41 75 74 68 65 6e 74 69 | me.Authentication.token.Authenti |
2ee20 | 63 61 74 69 6f 6e 20 e2 80 93 20 74 6f 20 76 65 72 69 66 79 20 74 68 61 74 20 74 68 65 20 6d 65 | cation.....to.verify.that.the.me |
2ee40 | 73 73 61 67 65 20 69 73 20 66 72 6f 6d 20 61 20 76 61 6c 69 64 20 73 6f 75 72 63 65 2e 00 41 75 | ssage.is.from.a.valid.source..Au |
2ee60 | 74 68 6f 72 69 7a 61 74 69 6f 6e 20 74 6f 6b 65 6e 00 41 75 74 6f 6d 61 74 69 63 20 56 4c 41 4e | thorization.token.Automatic.VLAN |
2ee80 | 20 43 72 65 61 74 69 6f 6e 00 41 75 74 6f 6d 61 74 69 63 20 56 4c 41 4e 20 63 72 65 61 74 69 6f | .Creation.Automatic.VLAN.creatio |
2eea0 | 6e 00 41 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 63 72 65 61 74 65 20 42 46 44 20 73 65 73 73 69 | n.Automatically.create.BFD.sessi |
2eec0 | 6f 6e 20 66 6f 72 20 65 61 63 68 20 52 49 50 20 70 65 65 72 20 64 69 73 63 6f 76 65 72 65 64 20 | on.for.each.RIP.peer.discovered. |
2eee0 | 69 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 20 57 68 65 6e 20 74 68 65 20 42 46 44 20 | in.this.interface..When.the.BFD. |
2ef00 | 73 65 73 73 69 6f 6e 20 6d 6f 6e 69 74 6f 72 20 73 69 67 6e 61 6c 69 7a 65 20 74 68 61 74 20 74 | session.monitor.signalize.that.t |
2ef20 | 68 65 20 6c 69 6e 6b 20 69 73 20 64 6f 77 6e 20 74 68 65 20 52 49 50 20 70 65 65 72 20 69 73 20 | he.link.is.down.the.RIP.peer.is. |
2ef40 | 72 65 6d 6f 76 65 64 20 61 6e 64 20 61 6c 6c 20 74 68 65 20 6c 65 61 72 6e 65 64 20 72 6f 75 74 | removed.and.all.the.learned.rout |
2ef60 | 65 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 61 74 20 70 65 65 72 20 61 72 65 | es.associated.with.that.peer.are |
2ef80 | 20 72 65 6d 6f 76 65 64 2e 00 41 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 72 65 62 6f 6f 74 20 73 | .removed..Automatically.reboot.s |
2efa0 | 79 73 74 65 6d 20 6f 6e 20 6b 65 72 6e 65 6c 20 70 61 6e 69 63 20 61 66 74 65 72 20 36 30 20 73 | ystem.on.kernel.panic.after.60.s |
2efc0 | 65 63 6f 6e 64 73 2e 00 41 75 74 6f 6e 6f 6d 6f 75 73 20 53 79 73 74 65 6d 73 00 41 76 6f 69 64 | econds..Autonomous.Systems.Avoid |
2efe0 | 69 6e 67 20 22 6c 65 61 6b 79 22 20 4e 41 54 00 41 7a 75 72 65 2d 64 61 74 61 2d 65 78 70 6c 6f | ing."leaky".NAT.Azure-data-explo |
2f000 | 72 65 72 00 42 46 44 00 42 46 44 20 53 74 61 74 69 63 20 52 6f 75 74 65 20 4d 6f 6e 69 74 6f 72 | rer.BFD.BFD.Static.Route.Monitor |
2f020 | 69 6e 67 00 42 46 44 20 73 65 6e 64 73 20 6c 6f 74 73 20 6f 66 20 73 6d 61 6c 6c 20 55 44 50 20 | ing.BFD.sends.lots.of.small.UDP. |
2f040 | 70 61 63 6b 65 74 73 20 76 65 72 79 20 71 75 69 63 6b 6c 79 20 74 6f 20 65 6e 73 75 72 65 73 20 | packets.very.quickly.to.ensures. |
2f060 | 74 68 61 74 20 74 68 65 20 70 65 65 72 20 69 73 20 73 74 69 6c 6c 20 61 6c 69 76 65 2e 00 42 47 | that.the.peer.is.still.alive..BG |
2f080 | 50 00 42 47 50 20 2d 20 41 53 20 50 61 74 68 20 50 6f 6c 69 63 79 00 42 47 50 20 2d 20 43 6f 6d | P.BGP.-.AS.Path.Policy.BGP.-.Com |
2f0a0 | 6d 75 6e 69 74 79 20 4c 69 73 74 00 42 47 50 20 2d 20 45 78 74 65 6e 64 65 64 20 43 6f 6d 6d 75 | munity.List.BGP.-.Extended.Commu |
2f0c0 | 6e 69 74 79 20 4c 69 73 74 00 42 47 50 20 2d 20 4c 61 72 67 65 20 43 6f 6d 6d 75 6e 69 74 79 20 | nity.List.BGP.-.Large.Community. |
2f0e0 | 4c 69 73 74 00 42 47 50 20 45 78 61 6d 70 6c 65 00 42 47 50 20 52 6f 75 74 65 72 20 43 6f 6e 66 | List.BGP.Example.BGP.Router.Conf |
2f100 | 69 67 75 72 61 74 69 6f 6e 00 42 47 50 20 53 63 61 6c 69 6e 67 20 43 6f 6e 66 69 67 75 72 61 74 | iguration.BGP.Scaling.Configurat |
2f120 | 69 6f 6e 00 42 47 50 20 61 67 67 72 65 67 61 74 6f 72 20 61 74 74 72 69 62 75 74 65 3a 20 41 53 | ion.BGP.aggregator.attribute:.AS |
2f140 | 20 6e 75 6d 62 65 72 20 6f 72 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 6e 20 61 67 67 72 | .number.or.IP.address.of.an.aggr |
2f160 | 65 67 61 74 69 6f 6e 2e 00 42 47 50 20 61 73 2d 70 61 74 68 20 6c 69 73 74 20 74 6f 20 6d 61 74 | egation..BGP.as-path.list.to.mat |
2f180 | 63 68 2e 00 42 47 50 20 61 74 6f 6d 69 63 20 61 67 67 72 65 67 61 74 65 20 61 74 74 72 69 62 75 | ch..BGP.atomic.aggregate.attribu |
2f1a0 | 74 65 2e 00 42 47 50 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 74 6f 20 6d 61 74 63 68 2e | te..BGP.community-list.to.match. |
2f1c0 | 00 42 47 50 20 65 78 74 65 6e 64 65 64 20 63 6f 6d 6d 75 6e 69 74 79 20 74 6f 20 6d 61 74 63 68 | .BGP.extended.community.to.match |
2f1e0 | 2e 00 42 47 50 20 72 6f 6c 65 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 52 46 43 20 3a | ..BGP.roles.are.defined.in.RFC.: |
2f200 | 72 66 63 3a 60 39 32 33 34 60 20 61 6e 64 20 70 72 6f 76 69 64 65 20 61 6e 20 65 61 73 79 20 77 | rfc:`9234`.and.provide.an.easy.w |
2f220 | 61 79 20 74 6f 20 61 64 64 20 72 6f 75 74 65 20 6c 65 61 6b 20 70 72 65 76 65 6e 74 69 6f 6e 2c | ay.to.add.route.leak.prevention, |
2f240 | 20 64 65 74 65 63 74 69 6f 6e 20 61 6e 64 20 6d 69 74 69 67 61 74 69 6f 6e 2e 20 54 68 65 20 6c | .detection.and.mitigation..The.l |
2f260 | 6f 63 61 6c 20 52 6f 6c 65 20 76 61 6c 75 65 20 69 73 20 6e 65 67 6f 74 69 61 74 65 64 20 77 69 | ocal.Role.value.is.negotiated.wi |
2f280 | 74 68 20 74 68 65 20 6e 65 77 20 42 47 50 20 52 6f 6c 65 20 63 61 70 61 62 69 6c 69 74 79 20 77 | th.the.new.BGP.Role.capability.w |
2f2a0 | 68 69 63 68 20 68 61 73 20 61 20 62 75 69 6c 74 2d 69 6e 20 63 68 65 63 6b 20 6f 66 20 74 68 65 | hich.has.a.built-in.check.of.the |
2f2c0 | 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 76 61 6c 75 65 2e 20 49 6e 20 63 61 73 65 20 6f 66 | .corresponding.value..In.case.of |
2f2e0 | 20 61 20 6d 69 73 6d 61 74 63 68 20 74 68 65 20 6e 65 77 20 4f 50 45 4e 20 52 6f 6c 65 73 20 4d | .a.mismatch.the.new.OPEN.Roles.M |
2f300 | 69 73 6d 61 74 63 68 20 4e 6f 74 69 66 69 63 61 74 69 6f 6e 20 3c 32 2c 20 31 31 3e 20 77 6f 75 | ismatch.Notification.<2,.11>.wou |
2f320 | 6c 64 20 62 65 20 73 65 6e 74 2e 20 54 68 65 20 63 6f 72 72 65 63 74 20 52 6f 6c 65 20 70 61 69 | ld.be.sent..The.correct.Role.pai |
2f340 | 72 73 20 61 72 65 3a 00 42 47 50 20 72 6f 75 74 65 72 73 20 63 6f 6e 6e 65 63 74 65 64 20 69 6e | rs.are:.BGP.routers.connected.in |
2f360 | 73 69 64 65 20 74 68 65 20 73 61 6d 65 20 41 53 20 74 68 72 6f 75 67 68 20 42 47 50 20 62 65 6c | side.the.same.AS.through.BGP.bel |
2f380 | 6f 6e 67 20 74 6f 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 42 47 50 20 73 65 73 73 69 6f 6e 2c 20 | ong.to.an.internal.BGP.session,. |
2f3a0 | 6f 72 20 49 42 47 50 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 70 72 65 76 65 6e 74 20 72 6f 75 | or.IBGP..In.order.to.prevent.rou |
2f3c0 | 74 69 6e 67 20 74 61 62 6c 65 20 6c 6f 6f 70 73 2c 20 49 42 47 50 20 73 70 65 61 6b 65 72 20 64 | ting.table.loops,.IBGP.speaker.d |
2f3e0 | 6f 65 73 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 20 49 42 47 50 2d 6c 65 61 72 6e 65 64 20 72 | oes.not.advertise.IBGP-learned.r |
2f400 | 6f 75 74 65 73 20 74 6f 20 6f 74 68 65 72 20 49 42 47 50 20 73 70 65 61 6b 65 72 20 28 53 70 6c | outes.to.other.IBGP.speaker.(Spl |
2f420 | 69 74 20 48 6f 72 69 7a 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 29 2e 20 41 73 20 73 75 63 68 2c 20 | it.Horizon.mechanism)..As.such,. |
2f440 | 49 42 47 50 20 72 65 71 75 69 72 65 73 20 61 20 66 75 6c 6c 20 6d 65 73 68 20 6f 66 20 61 6c 6c | IBGP.requires.a.full.mesh.of.all |
2f460 | 20 70 65 65 72 73 2e 20 46 6f 72 20 6c 61 72 67 65 20 6e 65 74 77 6f 72 6b 73 2c 20 74 68 69 73 | .peers..For.large.networks,.this |
2f480 | 20 71 75 69 63 6b 6c 79 20 62 65 63 6f 6d 65 73 20 75 6e 73 63 61 6c 61 62 6c 65 2e 00 42 47 50 | .quickly.becomes.unscalable..BGP |
2f4a0 | 20 72 6f 75 74 65 73 20 6d 61 79 20 62 65 20 6c 65 61 6b 65 64 20 28 69 2e 65 2e 20 63 6f 70 69 | .routes.may.be.leaked.(i.e..copi |
2f4c0 | 65 64 29 20 62 65 74 77 65 65 6e 20 61 20 75 6e 69 63 61 73 74 20 56 52 46 20 52 49 42 20 61 6e | ed).between.a.unicast.VRF.RIB.an |
2f4e0 | 64 20 74 68 65 20 56 50 4e 20 53 41 46 49 20 52 49 42 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c | d.the.VPN.SAFI.RIB.of.the.defaul |
2f500 | 74 20 56 52 46 20 66 6f 72 20 75 73 65 20 69 6e 20 4d 50 4c 53 2d 62 61 73 65 64 20 4c 33 56 50 | t.VRF.for.use.in.MPLS-based.L3VP |
2f520 | 4e 73 2e 20 55 6e 69 63 61 73 74 20 72 6f 75 74 65 73 20 6d 61 79 20 61 6c 73 6f 20 62 65 20 6c | Ns..Unicast.routes.may.also.be.l |
2f540 | 65 61 6b 65 64 20 62 65 74 77 65 65 6e 20 61 6e 79 20 56 52 46 73 20 28 69 6e 63 6c 75 64 69 6e | eaked.between.any.VRFs.(includin |
2f560 | 67 20 74 68 65 20 75 6e 69 63 61 73 74 20 52 49 42 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 | g.the.unicast.RIB.of.the.default |
2f580 | 20 42 47 50 20 69 6e 73 74 61 6e 63 65 29 2e 20 41 20 73 68 6f 72 74 63 75 74 20 73 79 6e 74 61 | .BGP.instance)..A.shortcut.synta |
2f5a0 | 78 20 69 73 20 61 6c 73 6f 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 73 70 65 63 69 66 79 69 | x.is.also.available.for.specifyi |
2f5c0 | 6e 67 20 6c 65 61 6b 69 6e 67 20 66 72 6f 6d 20 6f 6e 65 20 56 52 46 20 74 6f 20 61 6e 6f 74 68 | ng.leaking.from.one.VRF.to.anoth |
2f5e0 | 65 72 20 56 52 46 20 75 73 69 6e 67 20 74 68 65 20 64 65 66 61 75 6c 74 20 69 6e 73 74 61 6e 63 | er.VRF.using.the.default.instanc |
2f600 | 65 e2 80 99 73 20 56 50 4e 20 52 49 42 20 61 73 20 74 68 65 20 69 6e 74 65 6d 65 64 69 61 72 79 | e...s.VPN.RIB.as.the.intemediary |
2f620 | 20 2e 20 41 20 63 6f 6d 6d 6f 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 56 | ...A.common.application.of.the.V |
2f640 | 52 46 2d 56 52 46 20 66 65 61 74 75 72 65 20 69 73 20 74 6f 20 63 6f 6e 6e 65 63 74 20 61 20 63 | RF-VRF.feature.is.to.connect.a.c |
2f660 | 75 73 74 6f 6d 65 72 e2 80 99 73 20 70 72 69 76 61 74 65 20 72 6f 75 74 69 6e 67 20 64 6f 6d 61 | ustomer...s.private.routing.doma |
2f680 | 69 6e 20 74 6f 20 61 20 70 72 6f 76 69 64 65 72 e2 80 99 73 20 56 50 4e 20 73 65 72 76 69 63 65 | in.to.a.provider...s.VPN.service |
2f6a0 | 2e 20 4c 65 61 6b 69 6e 67 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 66 72 6f 6d 20 74 68 65 | ..Leaking.is.configured.from.the |
2f6c0 | 20 70 6f 69 6e 74 20 6f 66 20 76 69 65 77 20 6f 66 20 61 6e 20 69 6e 64 69 76 69 64 75 61 6c 20 | .point.of.view.of.an.individual. |
2f6e0 | 56 52 46 3a 20 69 6d 70 6f 72 74 20 72 65 66 65 72 73 20 74 6f 20 72 6f 75 74 65 73 20 6c 65 61 | VRF:.import.refers.to.routes.lea |
2f700 | 6b 65 64 20 66 72 6f 6d 20 56 50 4e 20 74 6f 20 61 20 75 6e 69 63 61 73 74 20 56 52 46 2c 20 77 | ked.from.VPN.to.a.unicast.VRF,.w |
2f720 | 68 65 72 65 61 73 20 65 78 70 6f 72 74 20 72 65 66 65 72 73 20 74 6f 20 72 6f 75 74 65 73 20 6c | hereas.export.refers.to.routes.l |
2f740 | 65 61 6b 65 64 20 66 72 6f 6d 20 61 20 75 6e 69 63 61 73 74 20 56 52 46 20 74 6f 20 56 50 4e 2e | eaked.from.a.unicast.VRF.to.VPN. |
2f760 | 00 42 61 62 65 6c 00 42 61 62 65 6c 20 61 20 64 75 61 6c 20 73 74 61 63 6b 20 70 72 6f 74 6f 63 | .Babel.Babel.a.dual.stack.protoc |
2f780 | 6f 6c 2e 20 41 20 73 69 6e 67 6c 65 20 42 61 62 65 6c 20 69 6e 73 74 61 6e 63 65 20 69 73 20 61 | ol..A.single.Babel.instance.is.a |
2f7a0 | 62 6c 65 20 74 6f 20 70 65 72 66 6f 72 6d 20 72 6f 75 74 69 6e 67 20 66 6f 72 20 62 6f 74 68 20 | ble.to.perform.routing.for.both. |
2f7c0 | 49 50 76 34 20 61 6e 64 20 49 50 76 36 2e 00 42 61 62 65 6c 20 69 73 20 61 20 6d 6f 64 65 72 6e | IPv4.and.IPv6..Babel.is.a.modern |
2f7e0 | 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 64 65 73 69 67 6e 65 64 20 74 6f 20 62 65 | .routing.protocol.designed.to.be |
2f800 | 20 72 6f 62 75 73 74 20 61 6e 64 20 65 66 66 69 63 69 65 6e 74 20 62 6f 74 68 20 69 6e 20 6f 72 | .robust.and.efficient.both.in.or |
2f820 | 64 69 6e 61 72 79 20 77 69 72 65 64 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 69 6e 20 77 69 72 | dinary.wired.networks.and.in.wir |
2f840 | 65 6c 65 73 73 20 6d 65 73 68 20 6e 65 74 77 6f 72 6b 73 2e 20 42 79 20 64 65 66 61 75 6c 74 2c | eless.mesh.networks..By.default, |
2f860 | 20 69 74 20 75 73 65 73 20 68 6f 70 2d 63 6f 75 6e 74 20 6f 6e 20 77 69 72 65 64 20 6e 65 74 77 | .it.uses.hop-count.on.wired.netw |
2f880 | 6f 72 6b 73 20 61 6e 64 20 61 20 76 61 72 69 61 6e 74 20 6f 66 20 45 54 58 20 6f 6e 20 77 69 72 | orks.and.a.variant.of.ETX.on.wir |
2f8a0 | 65 6c 65 73 73 20 6c 69 6e 6b 73 2c 20 49 74 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 | eless.links,.It.can.be.configure |
2f8c0 | 64 20 74 6f 20 74 61 6b 65 20 72 61 64 69 6f 20 64 69 76 65 72 73 69 74 79 20 69 6e 74 6f 20 61 | d.to.take.radio.diversity.into.a |
2f8e0 | 63 63 6f 75 6e 74 20 61 6e 64 20 74 6f 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 63 6f 6d 70 | ccount.and.to.automatically.comp |
2f900 | 75 74 65 20 61 20 6c 69 6e 6b 27 73 20 6c 61 74 65 6e 63 79 20 61 6e 64 20 69 6e 63 6c 75 64 65 | ute.a.link's.latency.and.include |
2f920 | 20 69 74 20 69 6e 20 74 68 65 20 6d 65 74 72 69 63 2e 20 49 74 20 69 73 20 64 65 66 69 6e 65 64 | .it.in.the.metric..It.is.defined |
2f940 | 20 69 6e 20 3a 72 66 63 3a 60 38 39 36 36 60 2e 00 42 61 63 6b 65 6e 64 00 42 61 6c 61 6e 63 65 | .in.:rfc:`8966`..Backend.Balance |
2f960 | 20 61 6c 67 6f 72 69 74 68 6d 73 3a 00 42 61 6c 61 6e 63 69 6e 67 20 52 75 6c 65 73 00 42 61 6c | .algorithms:.Balancing.Rules.Bal |
2f980 | 61 6e 63 69 6e 67 20 62 61 73 65 64 20 6f 6e 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 00 42 61 6e 64 | ancing.based.on.domain.name.Band |
2f9a0 | 77 69 64 74 68 20 53 68 61 70 69 6e 67 00 42 61 6e 64 77 69 64 74 68 20 53 68 61 70 69 6e 67 20 | width.Shaping.Bandwidth.Shaping. |
2f9c0 | 66 6f 72 20 6c 6f 63 61 6c 20 75 73 65 72 73 00 42 61 6e 64 77 69 64 74 68 20 72 61 74 65 20 6c | for.local.users.Bandwidth.rate.l |
2f9e0 | 69 6d 69 74 73 20 63 61 6e 20 62 65 20 73 65 74 20 66 6f 72 20 6c 6f 63 61 6c 20 75 73 65 72 73 | imits.can.be.set.for.local.users |
2fa00 | 20 6f 72 20 52 41 44 49 55 53 20 62 61 73 65 64 20 61 74 74 72 69 62 75 74 65 73 2e 00 42 61 6e | .or.RADIUS.based.attributes..Ban |
2fa20 | 64 77 69 64 74 68 20 72 61 74 65 20 6c 69 6d 69 74 73 20 63 61 6e 20 62 65 20 73 65 74 20 66 6f | dwidth.rate.limits.can.be.set.fo |
2fa40 | 72 20 6c 6f 63 61 6c 20 75 73 65 72 73 20 6f 72 20 76 69 61 20 52 41 44 49 55 53 20 62 61 73 65 | r.local.users.or.via.RADIUS.base |
2fa60 | 64 20 61 74 74 72 69 62 75 74 65 73 2e 00 42 61 6e 64 77 69 64 74 68 20 72 61 74 65 20 6c 69 6d | d.attributes..Bandwidth.rate.lim |
2fa80 | 69 74 73 20 63 61 6e 20 62 65 20 73 65 74 20 66 6f 72 20 6c 6f 63 61 6c 20 75 73 65 72 73 20 77 | its.can.be.set.for.local.users.w |
2faa0 | 69 74 68 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 72 20 76 69 61 20 52 | ithin.the.configuration.or.via.R |
2fac0 | 41 44 49 55 53 20 62 61 73 65 64 20 61 74 74 72 69 62 75 74 65 73 2e 00 42 61 73 65 20 63 68 61 | ADIUS.based.attributes..Base.cha |
2fae0 | 69 6e 20 69 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 74 6f 77 61 72 64 20 74 68 65 20 72 6f 75 | in.is.for.traffic.toward.the.rou |
2fb00 | 74 65 72 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 69 6e 70 75 74 | ter.is.``set.firewall.ipv4.input |
2fb20 | 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 42 61 73 65 20 63 68 61 69 6e 20 69 73 20 66 6f 72 20 | .filter....``.Base.chain.is.for. |
2fb40 | 74 72 61 66 66 69 63 20 74 6f 77 61 72 64 20 74 68 65 20 72 6f 75 74 65 72 20 69 73 20 60 60 73 | traffic.toward.the.router.is.``s |
2fb60 | 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 69 6e 70 75 74 20 66 69 6c 74 65 72 20 2e 2e | et.firewall.ipv6.input.filter... |
2fb80 | 2e 60 60 00 42 61 73 65 6c 69 6e 65 20 44 4d 56 50 4e 20 74 6f 70 6f 6c 6f 67 79 00 42 61 73 69 | .``.Baseline.DMVPN.topology.Basi |
2fba0 | 63 20 43 6f 6e 63 65 70 74 73 00 42 61 73 69 63 20 63 6f 6d 6d 61 6e 64 73 00 42 61 73 69 63 20 | c.Concepts.Basic.commands.Basic. |
2fbc0 | 66 69 6c 74 65 72 69 6e 67 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 75 73 69 6e 67 20 61 63 63 65 | filtering.can.be.done.using.acce |
2fbe0 | 73 73 2d 6c 69 73 74 20 61 6e 64 20 61 63 63 65 73 73 2d 6c 69 73 74 36 2e 00 42 61 73 69 63 20 | ss-list.and.access-list6..Basic. |
2fc00 | 66 69 6c 74 65 72 69 6e 67 20 63 6f 75 6c 64 20 61 6c 73 6f 20 62 65 20 61 70 70 6c 69 65 64 20 | filtering.could.also.be.applied. |
2fc20 | 74 6f 20 49 50 76 36 20 74 72 61 66 66 69 63 2e 00 42 61 73 69 63 20 73 65 74 75 70 00 42 65 20 | to.IPv6.traffic..Basic.setup.Be. |
2fc40 | 73 75 72 65 20 74 6f 20 73 65 74 20 61 20 73 61 6e 65 20 64 65 66 61 75 6c 74 20 63 6f 6e 66 69 | sure.to.set.a.sane.default.confi |
2fc60 | 67 20 69 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 63 6f 6e 66 69 67 20 66 69 6c 65 2c 20 74 68 | g.in.the.default.config.file,.th |
2fc80 | 69 73 20 77 69 6c 6c 20 62 65 20 6c 6f 61 64 65 64 20 69 6e 20 74 68 65 20 63 61 73 65 20 74 68 | is.will.be.loaded.in.the.case.th |
2fca0 | 61 74 20 61 20 75 73 65 72 20 69 73 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 61 6e 64 20 6e | at.a.user.is.authenticated.and.n |
2fcc0 | 6f 20 66 69 6c 65 20 69 73 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 | o.file.is.found.in.the.configure |
2fce0 | 64 20 64 69 72 65 63 74 6f 72 79 20 6d 61 74 63 68 69 6e 67 20 74 68 65 20 75 73 65 72 73 20 75 | d.directory.matching.the.users.u |
2fd00 | 73 65 72 6e 61 6d 65 2f 67 72 6f 75 70 2e 00 42 65 61 6d 66 6f 72 6d 69 6e 67 20 63 61 70 61 62 | sername/group..Beamforming.capab |
2fd20 | 69 6c 69 74 69 65 73 3a 00 42 65 63 61 75 73 65 20 61 6e 20 61 67 67 72 65 67 61 74 6f 72 20 63 | ilities:.Because.an.aggregator.c |
2fd40 | 61 6e 6e 6f 74 20 62 65 20 61 63 74 69 76 65 20 77 69 74 68 6f 75 74 20 61 74 20 6c 65 61 73 74 | annot.be.active.without.at.least |
2fd60 | 20 6f 6e 65 20 61 76 61 69 6c 61 62 6c 65 20 6c 69 6e 6b 2c 20 73 65 74 74 69 6e 67 20 74 68 69 | .one.available.link,.setting.thi |
2fd80 | 73 20 6f 70 74 69 6f 6e 20 74 6f 20 30 20 6f 72 20 74 6f 20 31 20 68 61 73 20 74 68 65 20 65 78 | s.option.to.0.or.to.1.has.the.ex |
2fda0 | 61 63 74 20 73 61 6d 65 20 65 66 66 65 63 74 2e 00 42 65 63 61 75 73 65 20 65 78 69 73 74 69 6e | act.same.effect..Because.existin |
2fdc0 | 67 20 73 65 73 73 69 6f 6e 73 20 64 6f 20 6e 6f 74 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 | g.sessions.do.not.automatically. |
2fde0 | 66 61 69 6c 20 6f 76 65 72 20 74 6f 20 61 20 6e 65 77 20 70 61 74 68 2c 20 74 68 65 20 73 65 73 | fail.over.to.a.new.path,.the.ses |
2fe00 | 73 69 6f 6e 20 74 61 62 6c 65 20 63 61 6e 20 62 65 20 66 6c 75 73 68 65 64 20 6f 6e 20 65 61 63 | sion.table.can.be.flushed.on.eac |
2fe20 | 68 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 65 20 63 68 61 6e 67 65 3a 00 42 65 66 6f 72 | h.connection.state.change:.Befor |
2fe40 | 65 20 65 6e 61 62 6c 69 6e 67 20 61 6e 79 20 68 61 72 64 77 61 72 65 20 73 65 67 6d 65 6e 74 61 | e.enabling.any.hardware.segmenta |
2fe60 | 74 69 6f 6e 20 6f 66 66 6c 6f 61 64 20 61 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 73 6f 66 | tion.offload.a.corresponding.sof |
2fe80 | 74 77 61 72 65 20 6f 66 66 6c 6f 61 64 20 69 73 20 72 65 71 75 69 72 65 64 20 69 6e 20 47 53 4f | tware.offload.is.required.in.GSO |
2fea0 | 2e 20 4f 74 68 65 72 77 69 73 65 20 69 74 20 62 65 63 6f 6d 65 73 20 70 6f 73 73 69 62 6c 65 20 | ..Otherwise.it.becomes.possible. |
2fec0 | 66 6f 72 20 61 20 66 72 61 6d 65 20 74 6f 20 62 65 20 72 65 2d 72 6f 75 74 65 64 20 62 65 74 77 | for.a.frame.to.be.re-routed.betw |
2fee0 | 65 65 6e 20 64 65 76 69 63 65 73 20 61 6e 64 20 65 6e 64 20 75 70 20 62 65 69 6e 67 20 75 6e 61 | een.devices.and.end.up.being.una |
2ff00 | 62 6c 65 20 74 6f 20 62 65 20 74 72 61 6e 73 6d 69 74 74 65 64 2e 00 42 65 66 6f 72 65 20 79 6f | ble.to.be.transmitted..Before.yo |
2ff20 | 75 20 61 72 65 20 61 62 6c 65 20 74 6f 20 61 70 70 6c 79 20 61 20 72 75 6c 65 2d 73 65 74 20 74 | u.are.able.to.apply.a.rule-set.t |
2ff40 | 6f 20 61 20 7a 6f 6e 65 20 79 6f 75 20 68 61 76 65 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 | o.a.zone.you.have.to.create.the. |
2ff60 | 7a 6f 6e 65 73 20 66 69 72 73 74 2e 00 42 65 6c 6f 77 20 66 6c 6f 77 2d 63 68 61 72 74 20 63 6f | zones.first..Below.flow-chart.co |
2ff80 | 75 6c 64 20 62 65 20 61 20 71 75 69 63 6b 20 72 65 66 65 72 65 6e 63 65 20 66 6f 72 20 74 68 65 | uld.be.a.quick.reference.for.the |
2ffa0 | 20 63 6c 6f 73 65 2d 61 63 74 69 6f 6e 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 20 64 65 70 65 6e 64 | .close-action.combination.depend |
2ffc0 | 69 6e 67 20 6f 6e 20 68 6f 77 20 74 68 65 20 70 65 65 72 20 69 73 20 63 6f 6e 66 69 67 75 72 65 | ing.on.how.the.peer.is.configure |
2ffe0 | 64 2e 00 42 65 6c 6f 77 20 69 73 20 61 6e 20 65 78 61 6d 70 6c 65 20 74 6f 20 63 6f 6e 66 69 67 | d..Below.is.an.example.to.config |
30000 | 75 72 65 20 61 20 4c 4e 53 3a 00 42 65 73 74 20 65 66 66 6f 72 74 20 74 72 61 66 66 69 63 2c 20 | ure.a.LNS:.Best.effort.traffic,. |
30020 | 64 65 66 61 75 6c 74 00 42 65 74 77 65 65 6e 20 63 6f 6d 70 75 74 65 72 73 2c 20 74 68 65 20 6d | default.Between.computers,.the.m |
30040 | 6f 73 74 20 63 6f 6d 6d 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 75 73 65 64 20 77 61 | ost.common.configuration.used.wa |
30060 | 73 20 22 38 4e 31 22 3a 20 65 69 67 68 74 20 62 69 74 20 63 68 61 72 61 63 74 65 72 73 2c 20 77 | s."8N1":.eight.bit.characters,.w |
30080 | 69 74 68 20 6f 6e 65 20 73 74 61 72 74 20 62 69 74 2c 20 6f 6e 65 20 73 74 6f 70 20 62 69 74 2c | ith.one.start.bit,.one.stop.bit, |
300a0 | 20 61 6e 64 20 6e 6f 20 70 61 72 69 74 79 20 62 69 74 2e 20 54 68 75 73 20 31 30 20 42 61 75 64 | .and.no.parity.bit..Thus.10.Baud |
300c0 | 20 74 69 6d 65 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 73 65 6e 64 20 61 20 73 69 6e 67 6c 65 | .times.are.used.to.send.a.single |
300e0 | 20 63 68 61 72 61 63 74 65 72 2c 20 61 6e 64 20 73 6f 20 64 69 76 69 64 69 6e 67 20 74 68 65 20 | .character,.and.so.dividing.the. |
30100 | 73 69 67 6e 61 6c 6c 69 6e 67 20 62 69 74 2d 72 61 74 65 20 62 79 20 74 65 6e 20 72 65 73 75 6c | signalling.bit-rate.by.ten.resul |
30120 | 74 73 20 69 6e 20 74 68 65 20 6f 76 65 72 61 6c 6c 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 73 | ts.in.the.overall.transmission.s |
30140 | 70 65 65 64 20 69 6e 20 63 68 61 72 61 63 74 65 72 73 20 70 65 72 20 73 65 63 6f 6e 64 2e 20 54 | peed.in.characters.per.second..T |
30160 | 68 69 73 20 69 73 20 61 6c 73 6f 20 74 68 65 20 64 65 66 61 75 6c 74 20 73 65 74 74 69 6e 67 20 | his.is.also.the.default.setting. |
30180 | 69 66 20 6e 6f 6e 65 20 6f 66 20 74 68 6f 73 65 20 6f 70 74 69 6f 6e 73 20 61 72 65 20 64 65 66 | if.none.of.those.options.are.def |
301a0 | 69 6e 65 64 2e 00 42 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 4e 41 54 00 42 69 6e 61 72 79 20 76 | ined..Bidirectional.NAT.Binary.v |
301c0 | 61 6c 75 65 00 42 69 6e 64 20 63 6f 6e 74 61 69 6e 65 72 20 6e 65 74 77 6f 72 6b 20 74 6f 20 61 | alue.Bind.container.network.to.a |
301e0 | 20 67 69 76 65 6e 20 56 52 46 20 69 6e 73 74 61 6e 63 65 2e 00 42 69 6e 64 20 6c 69 73 74 65 6e | .given.VRF.instance..Bind.listen |
30200 | 65 72 20 74 6f 20 73 70 65 63 69 66 69 63 20 69 6e 74 65 72 66 61 63 65 2f 61 64 64 72 65 73 73 | er.to.specific.interface/address |
30220 | 2c 20 6d 61 6e 64 61 74 6f 72 79 20 66 6f 72 20 49 50 76 36 00 42 69 6e 64 73 20 65 74 68 31 2e | ,.mandatory.for.IPv6.Binds.eth1. |
30240 | 32 34 31 20 61 6e 64 20 76 78 6c 61 6e 32 34 31 20 74 6f 20 65 61 63 68 20 6f 74 68 65 72 20 62 | 241.and.vxlan241.to.each.other.b |
30260 | 79 20 6d 61 6b 69 6e 67 20 74 68 65 6d 20 62 6f 74 68 20 6d 65 6d 62 65 72 20 69 6e 74 65 72 66 | y.making.them.both.member.interf |
30280 | 61 63 65 73 20 6f 66 20 74 68 65 20 73 61 6d 65 20 62 72 69 64 67 65 2e 00 42 6c 61 63 6b 68 6f | aces.of.the.same.bridge..Blackho |
302a0 | 6c 65 00 42 6c 6f 63 6b 20 73 6f 75 72 63 65 20 49 50 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 53 | le.Block.source.IP.in.seconds..S |
302c0 | 75 62 73 65 71 75 65 6e 74 20 62 6c 6f 63 6b 73 20 69 6e 63 72 65 61 73 65 20 62 79 20 61 20 66 | ubsequent.blocks.increase.by.a.f |
302e0 | 61 63 74 6f 72 20 6f 66 20 31 2e 35 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 32 30 2e | actor.of.1.5.The.default.is.120. |
30300 | 00 42 6c 6f 63 6b 20 73 6f 75 72 63 65 20 49 50 20 77 68 65 6e 20 74 68 65 69 72 20 63 75 6d 75 | .Block.source.IP.when.their.cumu |
30320 | 6c 61 74 69 76 65 20 61 74 74 61 63 6b 20 73 63 6f 72 65 20 65 78 63 65 65 64 73 20 74 68 72 65 | lative.attack.score.exceeds.thre |
30340 | 73 68 6f 6c 64 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 33 30 2e 00 42 6c 6f 63 6b 69 | shold..The.default.is.30..Blocki |
30360 | 6e 67 20 63 61 6c 6c 20 77 69 74 68 20 6e 6f 20 74 69 6d 65 6f 75 74 2e 20 53 79 73 74 65 6d 20 | ng.call.with.no.timeout..System. |
30380 | 77 69 6c 6c 20 62 65 63 6f 6d 65 20 75 6e 72 65 73 70 6f 6e 73 69 76 65 20 69 66 20 73 63 72 69 | will.become.unresponsive.if.scri |
303a0 | 70 74 20 64 6f 65 73 20 6e 6f 74 20 72 65 74 75 72 6e 21 00 42 6f 61 72 64 65 72 20 47 61 74 65 | pt.does.not.return!.Boarder.Gate |
303c0 | 77 61 79 20 50 72 6f 74 6f 63 6f 6c 20 28 42 47 50 29 20 6f 72 69 67 69 6e 20 63 6f 64 65 20 74 | way.Protocol.(BGP).origin.code.t |
303e0 | 6f 20 6d 61 74 63 68 2e 00 42 6f 6e 64 20 2f 20 4c 69 6e 6b 20 41 67 67 72 65 67 61 74 69 6f 6e | o.match..Bond./.Link.Aggregation |
30400 | 00 42 6f 6e 64 20 6f 70 74 69 6f 6e 73 00 42 6f 6f 74 20 69 6d 61 67 65 20 6c 65 6e 67 74 68 20 | .Bond.options.Boot.image.length. |
30420 | 69 6e 20 35 31 32 2d 6f 63 74 65 74 20 62 6c 6f 63 6b 73 00 42 6f 6f 74 73 74 72 61 70 20 66 69 | in.512-octet.blocks.Bootstrap.fi |
30440 | 6c 65 20 6e 61 6d 65 00 42 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 6d 75 6c 74 69 | le.name.Both.IPv4.and.IPv6.multi |
30460 | 63 61 73 74 20 69 73 20 70 6f 73 73 69 62 6c 65 2e 00 42 6f 74 68 20 6c 6f 63 61 6c 20 61 64 6d | cast.is.possible..Both.local.adm |
30480 | 69 6e 69 73 74 65 72 65 64 20 61 6e 64 20 72 65 6d 6f 74 65 20 61 64 6d 69 6e 69 73 74 65 72 65 | inistered.and.remote.administere |
304a0 | 64 20 3a 61 62 62 72 3a 60 52 41 44 49 55 53 20 28 52 65 6d 6f 74 65 20 41 75 74 68 65 6e 74 69 | d.:abbr:`RADIUS.(Remote.Authenti |
304c0 | 63 61 74 69 6f 6e 20 44 69 61 6c 2d 49 6e 20 55 73 65 72 20 53 65 72 76 69 63 65 29 60 20 61 63 | cation.Dial-In.User.Service)`.ac |
304e0 | 63 6f 75 6e 74 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 42 6f 74 68 20 72 65 70 6c 69 | counts.are.supported..Both.repli |
30500 | 65 73 20 61 6e 64 20 72 65 71 75 65 73 74 73 20 74 79 70 65 20 67 72 61 74 75 69 74 6f 75 73 20 | es.and.requests.type.gratuitous. |
30520 | 61 72 70 20 77 69 6c 6c 20 74 72 69 67 67 65 72 20 74 68 65 20 41 52 50 20 74 61 62 6c 65 20 74 | arp.will.trigger.the.ARP.table.t |
30540 | 6f 20 62 65 20 75 70 64 61 74 65 64 2c 20 69 66 20 74 68 69 73 20 73 65 74 74 69 6e 67 20 69 73 | o.be.updated,.if.this.setting.is |
30560 | 20 6f 6e 2e 00 42 72 61 6e 63 68 20 31 27 73 20 72 6f 75 74 65 72 20 6d 69 67 68 74 20 68 61 76 | .on..Branch.1's.router.might.hav |
30580 | 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6c 69 6e 65 73 3a 00 42 72 69 64 67 65 00 42 72 | e.the.following.lines:.Bridge.Br |
305a0 | 69 64 67 65 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 42 72 69 64 | idge.Firewall.Configuration.Brid |
305c0 | 67 65 20 4f 70 74 69 6f 6e 73 00 42 72 69 64 67 65 20 52 75 6c 65 73 00 42 72 69 64 67 65 20 61 | ge.Options.Bridge.Rules.Bridge.a |
305e0 | 6e 73 77 65 72 73 20 6f 6e 20 49 50 20 61 64 64 72 65 73 73 20 31 39 32 2e 30 2e 32 2e 31 2f 32 | nswers.on.IP.address.192.0.2.1/2 |
30600 | 34 20 61 6e 64 20 32 30 30 31 3a 64 62 38 3a 3a 66 66 66 66 2f 36 34 00 42 72 69 64 67 65 20 6d | 4.and.2001:db8::ffff/64.Bridge.m |
30620 | 61 78 69 6d 75 6d 20 61 67 69 6e 67 20 60 3c 74 69 6d 65 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 | aximum.aging.`<time>`.in.seconds |
30640 | 20 28 64 65 66 61 75 6c 74 3a 20 32 30 29 2e 00 42 72 69 64 67 65 3a 00 42 75 72 73 74 20 63 6f | .(default:.20)..Bridge:.Burst.co |
30660 | 75 6e 74 00 42 75 73 69 6e 65 73 73 20 55 73 65 72 73 00 42 75 74 20 62 65 66 6f 72 65 20 6c 65 | unt.Business.Users.But.before.le |
30680 | 61 72 6e 69 6e 67 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 70 6f 6c 69 63 79 2c | arning.to.configure.your.policy, |
306a0 | 20 77 65 20 77 69 6c 6c 20 77 61 72 6e 20 79 6f 75 20 61 62 6f 75 74 20 74 68 65 20 64 69 66 66 | .we.will.warn.you.about.the.diff |
306c0 | 65 72 65 6e 74 20 75 6e 69 74 73 20 79 6f 75 20 63 61 6e 20 75 73 65 20 61 6e 64 20 61 6c 73 6f | erent.units.you.can.use.and.also |
306e0 | 20 73 68 6f 77 20 79 6f 75 20 77 68 61 74 20 2a 63 6c 61 73 73 65 73 2a 20 61 72 65 20 61 6e 64 | .show.you.what.*classes*.are.and |
30700 | 20 68 6f 77 20 74 68 65 79 20 77 6f 72 6b 2c 20 61 73 20 73 6f 6d 65 20 70 6f 6c 69 63 69 65 73 | .how.they.work,.as.some.policies |
30720 | 20 6d 61 79 20 72 65 71 75 69 72 65 20 79 6f 75 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 | .may.require.you.to.configure.th |
30740 | 65 6d 2e 00 42 79 20 64 65 66 61 75 6c 74 20 56 52 52 50 20 75 73 65 73 20 6d 75 6c 74 69 63 61 | em..By.default.VRRP.uses.multica |
30760 | 73 74 20 70 61 63 6b 65 74 73 2e 20 49 66 20 79 6f 75 72 20 6e 65 74 77 6f 72 6b 20 64 6f 65 73 | st.packets..If.your.network.does |
30780 | 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 6d 75 6c 74 69 63 61 73 74 20 66 6f 72 20 77 68 61 74 65 | .not.support.multicast.for.whate |
307a0 | 76 65 72 20 72 65 61 73 6f 6e 2c 20 79 6f 75 20 63 61 6e 20 6d 61 6b 65 20 56 52 52 50 20 75 73 | ver.reason,.you.can.make.VRRP.us |
307c0 | 65 20 75 6e 69 63 61 73 74 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 69 6e 73 74 65 61 64 2e | e.unicast.communication.instead. |
307e0 | 00 42 79 20 64 65 66 61 75 6c 74 20 56 52 52 50 20 75 73 65 73 20 70 72 65 65 6d 70 74 69 6f 6e | .By.default.VRRP.uses.preemption |
30800 | 2e 20 59 6f 75 20 63 61 6e 20 64 69 73 61 62 6c 65 20 69 74 20 77 69 74 68 20 74 68 65 20 22 6e | ..You.can.disable.it.with.the."n |
30820 | 6f 2d 70 72 65 65 6d 70 74 22 20 6f 70 74 69 6f 6e 3a 00 42 79 20 64 65 66 61 75 6c 74 20 60 73 | o-preempt".option:.By.default.`s |
30840 | 74 72 69 63 74 2d 6c 73 61 2d 63 68 65 63 6b 69 6e 67 60 20 69 73 20 63 6f 6e 66 69 67 75 72 65 | trict-lsa-checking`.is.configure |
30860 | 64 20 74 68 65 6e 20 74 68 65 20 68 65 6c 70 65 72 20 77 69 6c 6c 20 61 62 6f 72 74 20 74 68 65 | d.then.the.helper.will.abort.the |
30880 | 20 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 20 77 68 65 6e 20 61 20 4c 53 41 20 63 68 61 | .Graceful.Restart.when.a.LSA.cha |
308a0 | 6e 67 65 20 6f 63 63 75 72 73 20 77 68 69 63 68 20 61 66 66 65 63 74 73 20 74 68 65 20 72 65 73 | nge.occurs.which.affects.the.res |
308c0 | 74 61 72 74 69 6e 67 20 72 6f 75 74 65 72 2e 00 42 79 20 64 65 66 61 75 6c 74 20 74 68 65 20 73 | tarting.router..By.default.the.s |
308e0 | 63 6f 70 65 20 6f 66 20 74 68 65 20 70 6f 72 74 20 62 69 6e 64 69 6e 67 73 20 66 6f 72 20 75 6e | cope.of.the.port.bindings.for.un |
30900 | 62 6f 75 6e 64 20 73 6f 63 6b 65 74 73 20 69 73 20 6c 69 6d 69 74 65 64 20 74 6f 20 74 68 65 20 | bound.sockets.is.limited.to.the. |
30920 | 64 65 66 61 75 6c 74 20 56 52 46 2e 20 54 68 61 74 20 69 73 2c 20 69 74 20 77 69 6c 6c 20 6e 6f | default.VRF..That.is,.it.will.no |
30940 | 74 20 62 65 20 6d 61 74 63 68 65 64 20 62 79 20 70 61 63 6b 65 74 73 20 61 72 72 69 76 69 6e 67 | t.be.matched.by.packets.arriving |
30960 | 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 73 20 65 6e 73 6c 61 76 65 64 20 74 6f 20 61 20 56 52 46 | .on.interfaces.enslaved.to.a.VRF |
30980 | 20 61 6e 64 20 70 72 6f 63 65 73 73 65 73 20 6d 61 79 20 62 69 6e 64 20 74 6f 20 74 68 65 20 73 | .and.processes.may.bind.to.the.s |
309a0 | 61 6d 65 20 70 6f 72 74 20 69 66 20 74 68 65 79 20 62 69 6e 64 20 74 6f 20 61 20 56 52 46 2e 00 | ame.port.if.they.bind.to.a.VRF.. |
309c0 | 42 79 20 64 65 66 61 75 6c 74 2c 20 46 52 52 20 77 69 6c 6c 20 62 72 69 6e 67 20 75 70 20 70 65 | By.default,.FRR.will.bring.up.pe |
309e0 | 65 72 69 6e 67 20 77 69 74 68 20 6d 69 6e 69 6d 61 6c 20 63 6f 6d 6d 6f 6e 20 63 61 70 61 62 69 | ering.with.minimal.common.capabi |
30a00 | 6c 69 74 79 20 66 6f 72 20 74 68 65 20 62 6f 74 68 20 73 69 64 65 73 2e 20 46 6f 72 20 65 78 61 | lity.for.the.both.sides..For.exa |
30a20 | 6d 70 6c 65 2c 20 69 66 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 68 61 73 20 75 6e | mple,.if.the.local.router.has.un |
30a40 | 69 63 61 73 74 20 61 6e 64 20 6d 75 6c 74 69 63 61 73 74 20 63 61 70 61 62 69 6c 69 74 69 65 73 | icast.and.multicast.capabilities |
30a60 | 20 61 6e 64 20 74 68 65 20 72 65 6d 6f 74 65 20 72 6f 75 74 65 72 20 6f 6e 6c 79 20 68 61 73 20 | .and.the.remote.router.only.has. |
30a80 | 75 6e 69 63 61 73 74 20 63 61 70 61 62 69 6c 69 74 79 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 | unicast.capability.the.local.rou |
30aa0 | 74 65 72 20 77 69 6c 6c 20 65 73 74 61 62 6c 69 73 68 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f | ter.will.establish.the.connectio |
30ac0 | 6e 20 77 69 74 68 20 75 6e 69 63 61 73 74 20 6f 6e 6c 79 20 63 61 70 61 62 69 6c 69 74 79 2e 20 | n.with.unicast.only.capability.. |
30ae0 | 57 68 65 6e 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 63 6f 6d 6d 6f 6e 20 63 61 70 61 62 69 6c | When.there.are.no.common.capabil |
30b00 | 69 74 69 65 73 2c 20 46 52 52 20 73 65 6e 64 73 20 55 6e 73 75 70 70 6f 72 74 65 64 20 43 61 70 | ities,.FRR.sends.Unsupported.Cap |
30b20 | 61 62 69 6c 69 74 79 20 65 72 72 6f 72 20 61 6e 64 20 74 68 65 6e 20 72 65 73 65 74 73 20 74 68 | ability.error.and.then.resets.th |
30b40 | 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 56 79 4f 53 20 64 | e.connection..By.default,.VyOS.d |
30b60 | 6f 65 73 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 20 61 20 64 65 66 61 75 6c 74 20 72 6f 75 74 | oes.not.advertise.a.default.rout |
30b80 | 65 20 28 30 2e 30 2e 30 2e 30 2f 30 29 20 65 76 65 6e 20 69 66 20 69 74 20 69 73 20 69 6e 20 72 | e.(0.0.0.0/0).even.if.it.is.in.r |
30ba0 | 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 57 68 65 6e 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 | outing.table..When.you.want.to.a |
30bc0 | 6e 6e 6f 75 6e 63 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 73 20 74 6f 20 74 68 65 20 70 65 | nnounce.default.routes.to.the.pe |
30be0 | 65 72 2c 20 75 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2e 20 55 73 69 6e 67 20 6f 70 74 69 | er,.use.this.command..Using.opti |
30c00 | 6f 6e 61 6c 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d 64 3a 60 72 6f 75 74 65 2d 6d 61 70 | onal.argument.:cfgcmd:`route-map |
30c20 | 60 20 79 6f 75 20 63 61 6e 20 69 6e 6a 65 63 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 | `.you.can.inject.the.default.rou |
30c40 | 74 65 20 74 6f 20 67 69 76 65 6e 20 6e 65 69 67 68 62 6f 72 20 6f 6e 6c 79 20 69 66 20 74 68 65 | te.to.given.neighbor.only.if.the |
30c60 | 20 63 6f 6e 64 69 74 69 6f 6e 73 20 69 6e 20 74 68 65 20 72 6f 75 74 65 20 6d 61 70 20 61 72 65 | .conditions.in.the.route.map.are |
30c80 | 20 6d 65 74 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 61 20 6e 65 77 20 74 6f 6b 65 6e 20 69 73 | .met..By.default,.a.new.token.is |
30ca0 | 20 67 65 6e 65 72 61 74 65 64 20 65 76 65 72 79 20 33 30 20 73 65 63 6f 6e 64 73 20 62 79 20 74 | .generated.every.30.seconds.by.t |
30cc0 | 68 65 20 6d 6f 62 69 6c 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 2e 20 49 6e 20 6f 72 64 65 72 20 | he.mobile.application..In.order. |
30ce0 | 74 6f 20 63 6f 6d 70 65 6e 73 61 74 65 20 66 6f 72 20 70 6f 73 73 69 62 6c 65 20 74 69 6d 65 2d | to.compensate.for.possible.time- |
30d00 | 73 6b 65 77 20 62 65 74 77 65 65 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 61 6e 64 20 74 68 65 20 | skew.between.the.client.and.the. |
30d20 | 73 65 72 76 65 72 2c 20 61 6e 20 65 78 74 72 61 20 74 6f 6b 65 6e 20 62 65 66 6f 72 65 20 61 6e | server,.an.extra.token.before.an |
30d40 | 64 20 61 66 74 65 72 20 74 68 65 20 63 75 72 72 65 6e 74 20 74 69 6d 65 20 69 73 20 61 6c 6c 6f | d.after.the.current.time.is.allo |
30d60 | 77 65 64 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 66 6f 72 20 61 20 74 69 6d 65 20 73 6b 65 77 | wed..This.allows.for.a.time.skew |
30d80 | 20 6f 66 20 75 70 20 74 6f 20 33 30 20 73 65 63 6f 6e 64 73 20 62 65 74 77 65 65 6e 20 61 75 74 | .of.up.to.30.seconds.between.aut |
30da0 | 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 65 72 76 65 72 20 61 6e 64 20 63 6c 69 65 6e 74 2e 00 42 | hentication.server.and.client..B |
30dc0 | 79 20 64 65 66 61 75 6c 74 2c 20 64 64 63 6c 69 65 6e 74 5f 20 77 69 6c 6c 20 75 70 64 61 74 65 | y.default,.ddclient_.will.update |
30de0 | 20 61 20 64 79 6e 61 6d 69 63 20 64 6e 73 20 72 65 63 6f 72 64 20 75 73 69 6e 67 20 74 68 65 20 | .a.dynamic.dns.record.using.the. |
30e00 | 49 50 20 61 64 64 72 65 73 73 20 64 69 72 65 63 74 6c 79 20 61 74 74 61 63 68 65 64 20 74 6f 20 | IP.address.directly.attached.to. |
30e20 | 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 49 66 20 79 6f 75 72 20 56 79 4f 53 20 69 6e 73 74 | the.interface..If.your.VyOS.inst |
30e40 | 61 6e 63 65 20 69 73 20 62 65 68 69 6e 64 20 4e 41 54 2c 20 79 6f 75 72 20 72 65 63 6f 72 64 20 | ance.is.behind.NAT,.your.record. |
30e60 | 77 69 6c 6c 20 62 65 20 75 70 64 61 74 65 64 20 74 6f 20 70 6f 69 6e 74 20 74 6f 20 79 6f 75 72 | will.be.updated.to.point.to.your |
30e80 | 20 69 6e 74 65 72 6e 61 6c 20 49 50 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 65 6e 61 62 6c 69 | .internal.IP..By.default,.enabli |
30ea0 | 6e 67 20 52 50 4b 49 20 64 6f 65 73 20 6e 6f 74 20 63 68 61 6e 67 65 20 62 65 73 74 20 70 61 74 | ng.RPKI.does.not.change.best.pat |
30ec0 | 68 20 73 65 6c 65 63 74 69 6f 6e 2e 20 49 6e 20 70 61 72 74 69 63 75 6c 61 72 2c 20 69 6e 76 61 | h.selection..In.particular,.inva |
30ee0 | 6c 69 64 20 70 72 65 66 69 78 65 73 20 77 69 6c 6c 20 73 74 69 6c 6c 20 62 65 20 63 6f 6e 73 69 | lid.prefixes.will.still.be.consi |
30f00 | 64 65 72 65 64 20 64 75 72 69 6e 67 20 62 65 73 74 20 70 61 74 68 20 73 65 6c 65 63 74 69 6f 6e | dered.during.best.path.selection |
30f20 | 2e 20 48 6f 77 65 76 65 72 2c 20 74 68 65 20 72 6f 75 74 65 72 20 63 61 6e 20 62 65 20 63 6f 6e | ..However,.the.router.can.be.con |
30f40 | 66 69 67 75 72 65 64 20 74 6f 20 69 67 6e 6f 72 65 20 61 6c 6c 20 69 6e 76 61 6c 69 64 20 70 72 | figured.to.ignore.all.invalid.pr |
30f60 | 65 66 69 78 65 73 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 69 74 20 73 75 70 70 6f 72 74 73 20 | efixes..By.default,.it.supports. |
30f80 | 62 6f 74 68 20 70 6c 61 6e 6e 65 64 20 61 6e 64 20 75 6e 70 6c 61 6e 6e 65 64 20 6f 75 74 61 67 | both.planned.and.unplanned.outag |
30fa0 | 65 73 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 6c 6f 63 61 6c 6c 79 20 61 64 76 65 72 74 69 73 | es..By.default,.locally.advertis |
30fc0 | 65 64 20 70 72 65 66 69 78 65 73 20 75 73 65 20 74 68 65 20 69 6d 70 6c 69 63 69 74 2d 6e 75 6c | ed.prefixes.use.the.implicit-nul |
30fe0 | 6c 20 6c 61 62 65 6c 20 74 6f 20 65 6e 63 6f 64 65 20 69 6e 20 74 68 65 20 6f 75 74 67 6f 69 6e | l.label.to.encode.in.the.outgoin |
31000 | 67 20 4e 4c 52 49 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 6e 67 69 6e 78 20 65 78 70 6f 73 65 | g.NLRI..By.default,.nginx.expose |
31020 | 73 20 74 68 65 20 6c 6f 63 61 6c 20 41 50 49 20 6f 6e 20 61 6c 6c 20 76 69 72 74 75 61 6c 20 73 | s.the.local.API.on.all.virtual.s |
31040 | 65 72 76 65 72 73 2e 20 55 73 65 20 74 68 69 73 20 74 6f 20 72 65 73 74 72 69 63 74 20 6e 67 69 | ervers..Use.this.to.restrict.ngi |
31060 | 6e 78 20 74 6f 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 76 69 72 74 75 61 6c 20 68 6f 73 74 73 2e | nx.to.one.or.more.virtual.hosts. |
31080 | 00 42 79 20 64 65 66 61 75 6c 74 2c 20 72 65 63 6f 72 64 65 64 20 66 6c 6f 77 73 20 77 69 6c 6c | .By.default,.recorded.flows.will |
310a0 | 20 62 65 20 73 61 76 65 64 20 69 6e 74 65 72 6e 61 6c 6c 79 20 61 6e 64 20 63 61 6e 20 62 65 20 | .be.saved.internally.and.can.be. |
310c0 | 6c 69 73 74 65 64 20 77 69 74 68 20 74 68 65 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 2e 20 59 6f 75 | listed.with.the.CLI.command..You |
310e0 | 20 6d 61 79 20 64 69 73 61 62 6c 65 20 75 73 69 6e 67 20 74 68 65 20 6c 6f 63 61 6c 20 69 6e 2d | .may.disable.using.the.local.in- |
31100 | 6d 65 6d 6f 72 79 20 74 61 62 6c 65 20 77 69 74 68 20 74 68 65 20 63 6f 6d 6d 61 6e 64 3a 00 42 | memory.table.with.the.command:.B |
31120 | 79 20 64 65 66 61 75 6c 74 2c 20 74 68 65 20 42 47 50 20 70 72 65 66 69 78 20 69 73 20 61 64 76 | y.default,.the.BGP.prefix.is.adv |
31140 | 65 72 74 69 73 65 64 20 65 76 65 6e 20 69 66 20 69 74 27 73 20 6e 6f 74 20 70 72 65 73 65 6e 74 | ertised.even.if.it's.not.present |
31160 | 20 69 6e 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 54 68 69 73 20 62 65 68 61 | .in.the.routing.table..This.beha |
31180 | 76 69 6f 75 72 20 64 69 66 66 65 72 73 20 66 72 6f 6d 20 74 68 65 20 69 6d 70 6c 65 6d 65 6e 74 | viour.differs.from.the.implement |
311a0 | 61 74 69 6f 6e 20 6f 66 20 73 6f 6d 65 20 76 65 6e 64 6f 72 73 2e 00 42 79 20 64 65 66 61 75 6c | ation.of.some.vendors..By.defaul |
311c0 | 74 2c 20 74 68 69 73 20 62 72 69 64 67 69 6e 67 20 69 73 20 61 6c 6c 6f 77 65 64 2e 00 42 79 20 | t,.this.bridging.is.allowed..By. |
311e0 | 64 65 66 61 75 6c 74 2c 20 77 68 65 6e 20 56 79 4f 53 20 72 65 63 65 69 76 65 73 20 61 6e 20 49 | default,.when.VyOS.receives.an.I |
31200 | 43 4d 50 20 65 63 68 6f 20 72 65 71 75 65 73 74 20 70 61 63 6b 65 74 20 64 65 73 74 69 6e 65 64 | CMP.echo.request.packet.destined |
31220 | 20 66 6f 72 20 69 74 73 65 6c 66 2c 20 69 74 20 77 69 6c 6c 20 61 6e 73 77 65 72 20 77 69 74 68 | .for.itself,.it.will.answer.with |
31240 | 20 61 6e 20 49 43 4d 50 20 65 63 68 6f 20 72 65 70 6c 79 2c 20 75 6e 6c 65 73 73 20 79 6f 75 20 | .an.ICMP.echo.reply,.unless.you. |
31260 | 61 76 6f 69 64 20 69 74 20 74 68 72 6f 75 67 68 20 69 74 73 20 66 69 72 65 77 61 6c 6c 2e 00 42 | avoid.it.through.its.firewall..B |
31280 | 79 20 75 73 69 6e 67 20 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 | y.using.Pseudo-Ethernet.interfac |
312a0 | 65 73 20 74 68 65 72 65 20 77 69 6c 6c 20 62 65 20 6c 65 73 73 20 73 79 73 74 65 6d 20 6f 76 65 | es.there.will.be.less.system.ove |
312c0 | 72 68 65 61 64 20 63 6f 6d 70 61 72 65 64 20 74 6f 20 72 75 6e 6e 69 6e 67 20 61 20 74 72 61 64 | rhead.compared.to.running.a.trad |
312e0 | 69 74 69 6f 6e 61 6c 20 62 72 69 64 67 69 6e 67 20 61 70 70 72 6f 61 63 68 2e 20 50 73 65 75 64 | itional.bridging.approach..Pseud |
31300 | 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 61 6c 73 6f 20 62 | o-Ethernet.interfaces.can.also.b |
31320 | 65 20 75 73 65 64 20 74 6f 20 77 6f 72 6b 61 72 6f 75 6e 64 20 74 68 65 20 67 65 6e 65 72 61 6c | e.used.to.workaround.the.general |
31340 | 20 6c 69 6d 69 74 20 6f 66 20 34 30 39 36 20 76 69 72 74 75 61 6c 20 4c 41 4e 73 20 28 56 4c 41 | .limit.of.4096.virtual.LANs.(VLA |
31360 | 4e 73 29 20 70 65 72 20 70 68 79 73 69 63 61 6c 20 45 74 68 65 72 6e 65 74 20 70 6f 72 74 2c 20 | Ns).per.physical.Ethernet.port,. |
31380 | 73 69 6e 63 65 20 74 68 61 74 20 6c 69 6d 69 74 20 69 73 20 77 69 74 68 20 72 65 73 70 65 63 74 | since.that.limit.is.with.respect |
313a0 | 20 74 6f 20 61 20 73 69 6e 67 6c 65 20 4d 41 43 20 61 64 64 72 65 73 73 2e 00 42 79 70 61 73 73 | .to.a.single.MAC.address..Bypass |
313c0 | 69 6e 67 20 74 68 65 20 77 65 62 70 72 6f 78 79 00 43 41 20 28 43 65 72 74 69 66 69 63 61 74 65 | ing.the.webproxy.CA.(Certificate |
313e0 | 20 41 75 74 68 6f 72 69 74 79 29 00 43 52 49 54 49 43 2f 45 43 50 00 43 61 6c 6c 20 61 6e 6f 74 | .Authority).CRITIC/ECP.Call.anot |
31400 | 68 65 72 20 72 6f 75 74 65 2d 6d 61 70 20 70 6f 6c 69 63 79 20 6f 6e 20 6d 61 74 63 68 2e 00 43 | her.route-map.policy.on.match..C |
31420 | 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 00 43 65 72 74 61 69 6e 20 76 65 | apability.Negotiation.Certain.ve |
31440 | 6e 64 6f 72 73 20 75 73 65 20 62 72 6f 61 64 63 61 73 74 73 20 74 6f 20 69 64 65 6e 74 69 66 79 | ndors.use.broadcasts.to.identify |
31460 | 20 74 68 65 69 72 20 65 71 75 69 70 6d 65 6e 74 20 77 69 74 68 69 6e 20 6f 6e 65 20 65 74 68 65 | .their.equipment.within.one.ethe |
31480 | 72 6e 65 74 20 73 65 67 6d 65 6e 74 2e 20 55 6e 66 6f 72 74 75 6e 61 74 65 6c 79 20 69 66 20 79 | rnet.segment..Unfortunately.if.y |
314a0 | 6f 75 20 73 70 6c 69 74 20 79 6f 75 72 20 6e 65 74 77 6f 72 6b 20 77 69 74 68 20 6d 75 6c 74 69 | ou.split.your.network.with.multi |
314c0 | 70 6c 65 20 56 4c 41 4e 73 20 79 6f 75 20 6c 6f 6f 73 65 20 74 68 65 20 61 62 69 6c 69 74 79 20 | ple.VLANs.you.loose.the.ability. |
314e0 | 6f 66 20 69 64 65 6e 74 69 66 79 69 6e 67 20 79 6f 75 72 20 65 71 75 69 70 6d 65 6e 74 2e 00 43 | of.identifying.your.equipment..C |
31500 | 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 28 43 41 29 00 43 65 72 74 69 66 | ertificate.Authority.(CA).Certif |
31520 | 69 63 61 74 65 20 72 65 76 6f 63 61 74 69 6f 6e 20 6c 69 73 74 20 69 6e 20 50 45 4d 20 66 6f 72 | icate.revocation.list.in.PEM.for |
31540 | 6d 61 74 2e 00 43 65 72 74 69 66 69 63 61 74 65 73 00 43 68 61 6e 67 65 20 73 79 73 74 65 6d 20 | mat..Certificates.Change.system. |
31560 | 6b 65 79 62 6f 61 72 64 20 6c 61 79 6f 75 74 20 74 6f 20 67 69 76 65 6e 20 6c 61 6e 67 75 61 67 | keyboard.layout.to.given.languag |
31580 | 65 2e 00 43 68 61 6e 67 65 20 74 68 65 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 20 77 69 74 | e..Change.the.default-action.wit |
315a0 | 68 20 74 68 69 73 20 73 65 74 74 69 6e 67 2e 00 43 68 61 6e 67 65 73 20 69 6e 20 42 47 50 20 70 | h.this.setting..Changes.in.BGP.p |
315c0 | 6f 6c 69 63 69 65 73 20 72 65 71 75 69 72 65 20 74 68 65 20 42 47 50 20 73 65 73 73 69 6f 6e 20 | olicies.require.the.BGP.session. |
315e0 | 74 6f 20 62 65 20 63 6c 65 61 72 65 64 2e 20 43 6c 65 61 72 69 6e 67 20 68 61 73 20 61 20 6c 61 | to.be.cleared..Clearing.has.a.la |
31600 | 72 67 65 20 6e 65 67 61 74 69 76 65 20 69 6d 70 61 63 74 20 6f 6e 20 6e 65 74 77 6f 72 6b 20 6f | rge.negative.impact.on.network.o |
31620 | 70 65 72 61 74 69 6f 6e 73 2e 20 53 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | perations..Soft.reconfiguration. |
31640 | 65 6e 61 62 6c 65 73 20 79 6f 75 20 74 6f 20 67 65 6e 65 72 61 74 65 20 69 6e 62 6f 75 6e 64 20 | enables.you.to.generate.inbound. |
31660 | 75 70 64 61 74 65 73 20 66 72 6f 6d 20 61 20 6e 65 69 67 68 62 6f 72 2c 20 63 68 61 6e 67 65 20 | updates.from.a.neighbor,.change. |
31680 | 61 6e 64 20 61 63 74 69 76 61 74 65 20 42 47 50 20 70 6f 6c 69 63 69 65 73 20 77 69 74 68 6f 75 | and.activate.BGP.policies.withou |
316a0 | 74 20 63 6c 65 61 72 69 6e 67 20 74 68 65 20 42 47 50 20 73 65 73 73 69 6f 6e 2e 00 43 68 61 6e | t.clearing.the.BGP.session..Chan |
316c0 | 67 65 73 20 74 6f 20 74 68 65 20 4e 41 54 20 73 79 73 74 65 6d 20 6f 6e 6c 79 20 61 66 66 65 63 | ges.to.the.NAT.system.only.affec |
316e0 | 74 20 6e 65 77 6c 79 20 65 73 74 61 62 6c 69 73 68 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e | t.newly.established.connections. |
31700 | 20 41 6c 72 65 61 64 79 20 65 73 74 61 62 6c 69 73 68 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 | .Already.established.connections |
31720 | 20 61 72 65 20 6e 6f 74 20 61 66 66 65 63 74 65 64 2e 00 43 68 61 6e 67 69 6e 67 20 74 68 65 20 | .are.not.affected..Changing.the. |
31740 | 6b 65 79 6d 61 70 20 6f 6e 6c 79 20 68 61 73 20 61 6e 20 65 66 66 65 63 74 20 6f 6e 20 74 68 65 | keymap.only.has.an.effect.on.the |
31760 | 20 73 79 73 74 65 6d 20 63 6f 6e 73 6f 6c 65 2c 20 75 73 69 6e 67 20 53 53 48 20 6f 72 20 53 65 | .system.console,.using.SSH.or.Se |
31780 | 72 69 61 6c 20 72 65 6d 6f 74 65 20 61 63 63 65 73 73 20 74 6f 20 74 68 65 20 64 65 76 69 63 65 | rial.remote.access.to.the.device |
317a0 | 20 69 73 20 6e 6f 74 20 61 66 66 65 63 74 65 64 20 61 73 20 74 68 65 20 6b 65 79 62 6f 61 72 64 | .is.not.affected.as.the.keyboard |
317c0 | 20 6c 61 79 6f 75 74 20 68 65 72 65 20 63 6f 72 72 65 73 70 6f 6e 64 73 20 74 6f 20 79 6f 75 72 | .layout.here.corresponds.to.your |
317e0 | 20 61 63 63 65 73 73 20 73 79 73 74 65 6d 2e 00 43 68 61 6e 6e 65 6c 20 6e 75 6d 62 65 72 20 28 | .access.system..Channel.number.( |
31800 | 49 45 45 45 20 38 30 32 2e 31 31 29 2c 20 66 6f 72 20 32 2e 34 47 68 7a 20 28 38 30 32 2e 31 31 | IEEE.802.11),.for.2.4Ghz.(802.11 |
31820 | 20 62 2f 67 2f 6e 29 20 63 68 61 6e 6e 65 6c 73 20 72 61 6e 67 65 20 66 72 6f 6d 20 31 2d 31 34 | .b/g/n).channels.range.from.1-14 |
31840 | 2e 20 4f 6e 20 35 47 68 7a 20 28 38 30 32 2e 31 31 20 61 2f 68 2f 6a 2f 6e 2f 61 63 29 20 63 68 | ..On.5Ghz.(802.11.a/h/j/n/ac).ch |
31860 | 61 6e 6e 65 6c 73 20 61 76 61 69 6c 61 62 6c 65 20 61 72 65 20 30 2c 20 33 34 20 74 6f 20 31 37 | annels.available.are.0,.34.to.17 |
31880 | 33 00 43 68 65 63 6b 20 69 66 20 74 68 65 20 49 6e 74 65 6c c2 ae 20 51 41 54 20 64 65 76 69 63 | 3.Check.if.the.Intel...QAT.devic |
318a0 | 65 20 69 73 20 75 70 20 61 6e 64 20 72 65 61 64 79 20 74 6f 20 64 6f 20 74 68 65 20 6a 6f 62 2e | e.is.up.and.ready.to.do.the.job. |
318c0 | 00 43 68 65 63 6b 20 73 74 61 74 75 73 00 43 68 65 63 6b 20 74 68 65 20 6d 61 6e 79 20 70 61 72 | .Check.status.Check.the.many.par |
318e0 | 61 6d 65 74 65 72 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 74 68 65 20 60 73 68 6f 77 20 | ameters.available.for.the.`show. |
31900 | 69 70 76 36 20 72 6f 75 74 65 60 20 63 6f 6d 6d 61 6e 64 3a 00 43 68 65 63 6b 3a 00 43 68 65 63 | ipv6.route`.command:.Check:.Chec |
31920 | 6b 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 43 68 65 63 6b 73 00 43 68 6f 6f 73 65 20 79 | king.connections.Checks.Choose.y |
31940 | 6f 75 72 20 60 60 64 69 72 65 63 74 6f 72 79 60 60 20 6c 6f 63 61 74 69 6f 6e 20 63 61 72 65 66 | our.``directory``.location.caref |
31960 | 75 6c 6c 79 20 6f 72 20 79 6f 75 20 77 69 6c 6c 20 6c 6f 6f 73 65 20 74 68 65 20 63 6f 6e 74 65 | ully.or.you.will.loose.the.conte |
31980 | 6e 74 20 6f 6e 20 69 6d 61 67 65 20 75 70 67 72 61 64 65 73 2e 20 41 6e 79 20 64 69 72 65 63 74 | nt.on.image.upgrades..Any.direct |
319a0 | 6f 72 79 20 75 6e 64 65 72 20 60 60 2f 63 6f 6e 66 69 67 60 60 20 69 73 20 73 61 76 65 20 61 74 | ory.under.``/config``.is.save.at |
319c0 | 20 74 68 69 73 20 77 69 6c 6c 20 62 65 20 6d 69 67 72 61 74 65 64 2e 00 43 69 73 63 6f 20 43 61 | .this.will.be.migrated..Cisco.Ca |
319e0 | 74 61 6c 79 73 74 00 43 69 73 63 6f 20 61 6e 64 20 41 6c 6c 69 65 64 20 54 65 6c 65 73 79 6e 20 | talyst.Cisco.and.Allied.Telesyn. |
31a00 | 63 61 6c 6c 20 69 74 20 50 72 69 76 61 74 65 20 56 4c 41 4e 00 43 6c 61 6d 70 20 4d 53 53 20 66 | call.it.Private.VLAN.Clamp.MSS.f |
31a20 | 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 49 50 00 43 6c 61 73 73 20 74 72 65 61 74 6d 65 6e 74 | or.a.specific.IP.Class.treatment |
31a40 | 00 43 6c 61 73 73 65 73 00 43 6c 61 73 73 6c 65 73 73 20 73 74 61 74 69 63 20 72 6f 75 74 65 00 | .Classes.Classless.static.route. |
31a60 | 43 6c 65 61 72 20 61 6c 6c 20 42 47 50 20 65 78 74 63 6f 6d 6d 75 6e 69 74 69 65 73 2e 00 43 6c | Clear.all.BGP.extcommunities..Cl |
31a80 | 69 65 6e 74 00 43 6c 69 65 6e 74 20 41 64 64 72 65 73 73 20 50 6f 6f 6c 73 00 43 6c 69 65 6e 74 | ient.Client.Address.Pools.Client |
31aa0 | 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 00 43 6c 69 65 6e 74 20 43 6f 6e 66 69 67 75 72 61 | .Authentication.Client.Configura |
31ac0 | 74 69 6f 6e 00 43 6c 69 65 6e 74 20 49 50 20 50 6f 6f 6c 20 41 64 76 61 6e 63 65 64 20 4f 70 74 | tion.Client.IP.Pool.Advanced.Opt |
31ae0 | 69 6f 6e 73 00 43 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 77 69 6c 6c 20 62 65 | ions.Client.IP.addresses.will.be |
31b00 | 20 70 72 6f 76 69 64 65 64 20 66 72 6f 6d 20 70 6f 6f 6c 20 60 31 39 32 2e 30 2e 32 2e 30 2f 32 | .provided.from.pool.`192.0.2.0/2 |
31b20 | 35 60 00 43 6c 69 65 6e 74 20 53 69 64 65 00 43 6c 69 65 6e 74 20 63 6f 6e 66 69 67 75 72 61 74 | 5`.Client.Side.Client.configurat |
31b40 | 69 6f 6e 00 43 6c 69 65 6e 74 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 00 43 6c 69 65 6e 74 20 64 6f | ion.Client.domain.name.Client.do |
31b60 | 6d 61 69 6e 20 73 65 61 72 63 68 00 43 6c 69 65 6e 74 20 69 73 6f 6c 61 74 69 6f 6e 20 63 61 6e | main.search.Client.isolation.can |
31b80 | 20 62 65 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 6c 6f 77 2d 6c 65 76 65 6c 20 62 72 | .be.used.to.prevent.low-level.br |
31ba0 | 69 64 67 69 6e 67 20 6f 66 20 66 72 61 6d 65 73 20 62 65 74 77 65 65 6e 20 61 73 73 6f 63 69 61 | idging.of.frames.between.associa |
31bc0 | 74 65 64 20 73 74 61 74 69 6f 6e 73 20 69 6e 20 74 68 65 20 42 53 53 2e 00 43 6c 69 65 6e 74 3a | ted.stations.in.the.BSS..Client: |
31be0 | 00 43 6c 69 65 6e 74 73 20 61 72 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 74 68 65 20 43 | .Clients.are.identified.by.the.C |
31c00 | 4e 20 66 69 65 6c 64 20 6f 66 20 74 68 65 69 72 20 78 2e 35 30 39 20 63 65 72 74 69 66 69 63 61 | N.field.of.their.x.509.certifica |
31c20 | 74 65 73 2c 20 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 74 68 65 20 43 4e 20 69 73 20 60 | tes,.in.this.example.the.CN.is.` |
31c40 | 60 63 6c 69 65 6e 74 30 60 60 3a 00 43 6c 69 65 6e 74 73 20 72 65 63 65 69 76 69 6e 67 20 61 64 | `client0``:.Clients.receiving.ad |
31c60 | 76 65 72 74 69 73 65 20 6d 65 73 73 61 67 65 73 20 66 72 6f 6d 20 6d 75 6c 74 69 70 6c 65 20 73 | vertise.messages.from.multiple.s |
31c80 | 65 72 76 65 72 73 20 63 68 6f 6f 73 65 20 74 68 65 20 73 65 72 76 65 72 20 77 69 74 68 20 74 68 | ervers.choose.the.server.with.th |
31ca0 | 65 20 68 69 67 68 65 73 74 20 70 72 65 66 65 72 65 6e 63 65 20 76 61 6c 75 65 2e 20 54 68 65 20 | e.highest.preference.value..The. |
31cc0 | 72 61 6e 67 65 20 66 6f 72 20 74 68 69 73 20 76 61 6c 75 65 20 69 73 20 60 60 30 2e 2e 2e 32 35 | range.for.this.value.is.``0...25 |
31ce0 | 35 60 60 2e 00 43 6c 6f 63 6b 20 64 61 65 6d 6f 6e 00 43 6f 6d 6d 61 6e 64 20 63 6f 6d 70 6c 65 | 5``..Clock.daemon.Command.comple |
31d00 | 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 6c 69 73 74 20 61 76 61 69 6c 61 62 | tion.can.be.used.to.list.availab |
31d20 | 6c 65 20 74 69 6d 65 20 7a 6f 6e 65 73 2e 20 54 68 65 20 61 64 6a 75 73 74 6d 65 6e 74 20 66 6f | le.time.zones..The.adjustment.fo |
31d40 | 72 20 64 61 79 6c 69 67 68 74 20 74 69 6d 65 20 77 69 6c 6c 20 74 61 6b 65 20 70 6c 61 63 65 20 | r.daylight.time.will.take.place. |
31d60 | 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 74 69 6d 65 20 | automatically.based.on.the.time. |
31d80 | 6f 66 20 79 65 61 72 2e 00 43 6f 6d 6d 61 6e 64 20 66 6f 72 20 64 69 73 61 62 6c 69 6e 67 20 61 | of.year..Command.for.disabling.a |
31da0 | 20 72 75 6c 65 20 62 75 74 20 6b 65 65 70 20 69 74 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 | .rule.but.keep.it.in.the.configu |
31dc0 | 72 61 74 69 6f 6e 2e 00 43 6f 6d 6d 61 6e 64 20 73 68 6f 75 6c 64 20 70 72 6f 62 61 62 6c 79 20 | ration..Command.should.probably. |
31de0 | 62 65 20 65 78 74 65 6e 64 65 64 20 74 6f 20 6c 69 73 74 20 61 6c 73 6f 20 74 68 65 20 72 65 61 | be.extended.to.list.also.the.rea |
31e00 | 6c 20 69 6e 74 65 72 66 61 63 65 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 74 68 69 73 20 6f 6e | l.interfaces.assigned.to.this.on |
31e20 | 65 20 56 52 46 20 74 6f 20 67 65 74 20 61 20 62 65 74 74 65 72 20 6f 76 65 72 76 69 65 77 2e 00 | e.VRF.to.get.a.better.overview.. |
31e40 | 43 6f 6d 6d 61 6e 64 20 75 73 65 64 20 74 6f 20 75 70 64 61 74 65 20 47 65 6f 49 50 20 64 61 74 | Command.used.to.update.GeoIP.dat |
31e60 | 61 62 61 73 65 20 61 6e 64 20 66 69 72 65 77 61 6c 6c 20 73 65 74 73 2e 00 43 6f 6d 6d 61 6e 64 | abase.and.firewall.sets..Command |
31e80 | 73 00 43 6f 6d 6d 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 76 61 6c 69 64 20 66 6f | s.Common.configuration,.valid.fo |
31ea0 | 72 20 62 6f 74 68 20 70 72 69 6d 61 72 79 20 61 6e 64 20 73 65 63 6f 6e 64 61 72 79 20 6e 6f 64 | r.both.primary.and.secondary.nod |
31ec0 | 65 2e 00 43 6f 6d 6d 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | e..Common.interface.configuratio |
31ee0 | 6e 00 43 6f 6d 6d 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 00 43 6f 6e 66 65 64 65 72 61 74 69 6f | n.Common.parameters.Confederatio |
31f00 | 6e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 43 6f 6e 66 69 64 65 6e 74 69 61 6c 69 74 79 20 | n.Configuration.Confidentiality. |
31f20 | e2 80 93 20 45 6e 63 72 79 70 74 69 6f 6e 20 6f 66 20 70 61 63 6b 65 74 73 20 74 6f 20 70 72 65 | ....Encryption.of.packets.to.pre |
31f40 | 76 65 6e 74 20 73 6e 6f 6f 70 69 6e 67 20 62 79 20 61 6e 20 75 6e 61 75 74 68 6f 72 69 7a 65 64 | vent.snooping.by.an.unauthorized |
31f60 | 20 73 6f 75 72 63 65 2e 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 43 6f 6e 66 69 67 75 72 61 | .source..Configuration.Configura |
31f80 | 74 69 6f 6e 20 45 78 61 6d 70 6c 65 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 45 78 61 6d 70 | tion.Example.Configuration.Examp |
31fa0 | 6c 65 73 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 75 69 64 65 00 43 6f 6e 66 69 67 75 72 | les.Configuration.Guide.Configur |
31fc0 | 61 74 69 6f 6e 20 4f 70 74 69 6f 6e 73 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d | ation.Options.Configuration.comm |
31fe0 | 61 6e 64 73 20 63 6f 76 65 72 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 3a 00 43 6f | ands.covered.in.this.section:.Co |
32000 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 66 6f 72 20 74 68 65 20 70 72 69 | nfiguration.commands.for.the.pri |
32020 | 76 61 74 65 20 61 6e 64 20 70 75 62 6c 69 63 20 6b 65 79 20 77 69 6c 6c 20 62 65 20 64 69 73 70 | vate.and.public.key.will.be.disp |
32040 | 6c 61 79 65 64 20 6f 6e 20 74 68 65 20 73 63 72 65 65 6e 20 77 68 69 63 68 20 6e 65 65 64 73 20 | layed.on.the.screen.which.needs. |
32060 | 74 6f 20 62 65 20 73 65 74 20 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 20 66 69 72 73 74 2e 20 4e | to.be.set.on.the.router.first..N |
32080 | 6f 74 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 77 69 74 68 20 74 68 65 20 70 75 62 6c 69 63 20 | ote.the.command.with.the.public. |
320a0 | 6b 65 79 20 28 73 65 74 20 70 6b 69 20 6b 65 79 2d 70 61 69 72 20 69 70 73 65 63 2d 4c 45 46 54 | key.(set.pki.key-pair.ipsec-LEFT |
320c0 | 20 70 75 62 6c 69 63 20 6b 65 79 20 27 4d 49 49 42 49 6a 41 4e 42 67 6b 71 68 2e 2e 2e 27 29 2e | .public.key.'MIIBIjANBgkqh...'). |
320e0 | 20 54 68 65 6e 20 64 6f 20 74 68 65 20 73 61 6d 65 20 6f 6e 20 74 68 65 20 6f 70 70 6f 73 69 74 | .Then.do.the.same.on.the.opposit |
32100 | 65 20 72 6f 75 74 65 72 3a 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 | e.router:.Configuration.commands |
32120 | 20 77 69 6c 6c 20 64 69 73 70 6c 61 79 2e 20 4e 6f 74 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 | .will.display..Note.the.command. |
32140 | 77 69 74 68 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 28 73 65 74 20 70 6b 69 20 6b 65 79 | with.the.public.key.(set.pki.key |
32160 | 2d 70 61 69 72 20 69 70 73 65 63 2d 4c 45 46 54 20 70 75 62 6c 69 63 20 6b 65 79 20 27 4d 49 49 | -pair.ipsec-LEFT.public.key.'MII |
32180 | 42 49 6a 41 4e 42 67 6b 71 68 2e 2e 2e 27 29 2e 20 54 68 65 6e 20 64 6f 20 74 68 65 20 73 61 6d | BIjANBgkqh...')..Then.do.the.sam |
321a0 | 65 20 6f 6e 20 74 68 65 20 6f 70 70 6f 73 69 74 65 20 72 6f 75 74 65 72 3a 00 43 6f 6e 66 69 67 | e.on.the.opposite.router:.Config |
321c0 | 75 72 61 74 69 6f 6e 20 65 78 61 6d 70 6c 65 3a 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 | uration.example:.Configuration.f |
321e0 | 6f 72 20 74 68 65 73 65 20 65 78 70 6f 72 74 65 64 20 72 6f 75 74 65 73 20 6d 75 73 74 2c 20 61 | or.these.exported.routes.must,.a |
32200 | 74 20 61 20 6d 69 6e 69 6d 75 6d 2c 20 73 70 65 63 69 66 79 20 74 68 65 73 65 20 74 77 6f 20 70 | t.a.minimum,.specify.these.two.p |
32220 | 61 72 61 6d 65 74 65 72 73 2e 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 3a 72 65 66 | arameters..Configuration.of.:ref |
32240 | 3a 60 72 6f 75 74 69 6e 67 2d 73 74 61 74 69 63 60 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | :`routing-static`.Configuration. |
32260 | 6f 66 20 61 20 44 48 43 50 20 48 41 20 70 61 69 72 3a 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e | of.a.DHCP.HA.pair:.Configuration |
32280 | 20 6f 66 20 61 20 44 48 43 50 20 66 61 69 6c 6f 76 65 72 20 70 61 69 72 00 43 6f 6e 66 69 67 75 | .of.a.DHCP.failover.pair.Configu |
322a0 | 72 61 74 69 6f 6e 20 6f 66 20 72 6f 75 74 65 20 6c 65 61 6b 69 6e 67 20 62 65 74 77 65 65 6e 20 | ration.of.route.leaking.between. |
322c0 | 61 20 75 6e 69 63 61 73 74 20 56 52 46 20 52 49 42 20 61 6e 64 20 74 68 65 20 56 50 4e 20 53 41 | a.unicast.VRF.RIB.and.the.VPN.SA |
322e0 | 46 49 20 52 49 42 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 52 46 20 69 73 20 61 63 63 | FI.RIB.of.the.default.VRF.is.acc |
32300 | 6f 6d 70 6c 69 73 68 65 64 20 76 69 61 20 63 6f 6d 6d 61 6e 64 73 20 69 6e 20 74 68 65 20 63 6f | omplished.via.commands.in.the.co |
32320 | 6e 74 65 78 74 20 6f 66 20 61 20 56 52 46 20 61 64 64 72 65 73 73 2d 66 61 6d 69 6c 79 2e 00 43 | ntext.of.a.VRF.address-family..C |
32340 | 6f 6e 66 69 67 75 72 65 00 43 6f 6e 66 69 67 75 72 65 20 3a 61 62 62 72 3a 60 4d 54 55 20 28 4d | onfigure.Configure.:abbr:`MTU.(M |
32360 | 61 78 69 6d 75 6d 20 54 72 61 6e 73 6d 69 73 73 69 6f 6e 20 55 6e 69 74 29 60 20 6f 6e 20 67 69 | aximum.Transmission.Unit)`.on.gi |
32380 | 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 20 49 74 20 69 73 20 74 68 65 20 73 69 7a | ven.`<interface>`..It.is.the.siz |
323a0 | 65 20 28 69 6e 20 62 79 74 65 73 29 20 6f 66 20 74 68 65 20 6c 61 72 67 65 73 74 20 65 74 68 65 | e.(in.bytes).of.the.largest.ethe |
323c0 | 72 6e 65 74 20 66 72 61 6d 65 20 73 65 6e 74 20 6f 6e 20 74 68 69 73 20 6c 69 6e 6b 2e 00 43 6f | rnet.frame.sent.on.this.link..Co |
323e0 | 6e 66 69 67 75 72 65 20 42 46 44 00 43 6f 6e 66 69 67 75 72 65 20 44 4e 53 20 60 3c 72 65 63 6f | nfigure.BFD.Configure.DNS.`<reco |
32400 | 72 64 3e 60 20 77 68 69 63 68 20 73 68 6f 75 6c 64 20 62 65 20 75 70 64 61 74 65 64 2e 20 54 68 | rd>`.which.should.be.updated..Th |
32420 | 69 73 20 63 61 6e 20 62 65 20 73 65 74 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e 00 43 6f | is.can.be.set.multiple.times..Co |
32440 | 6e 66 69 67 75 72 65 20 44 4e 53 20 60 3c 7a 6f 6e 65 3e 60 20 74 6f 20 62 65 20 75 70 64 61 74 | nfigure.DNS.`<zone>`.to.be.updat |
32460 | 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 47 45 4e 45 56 45 20 74 75 6e 6e 65 6c 20 66 61 72 20 | ed..Configure.GENEVE.tunnel.far. |
32480 | 65 6e 64 2f 72 65 6d 6f 74 65 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 2e 00 43 6f 6e 66 | end/remote.tunnel.endpoint..Conf |
324a0 | 69 67 75 72 65 20 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 20 3a 72 66 63 3a 60 33 36 32 | igure.Graceful.Restart.:rfc:`362 |
324c0 | 33 60 20 68 65 6c 70 65 72 20 73 75 70 70 6f 72 74 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 68 | 3`.helper.support..By.default,.h |
324e0 | 65 6c 70 65 72 20 73 75 70 70 6f 72 74 20 69 73 20 64 69 73 61 62 6c 65 64 20 66 6f 72 20 61 6c | elper.support.is.disabled.for.al |
32500 | 6c 20 6e 65 69 67 68 62 6f 75 72 73 2e 20 54 68 69 73 20 63 6f 6e 66 69 67 20 65 6e 61 62 6c 65 | l.neighbours..This.config.enable |
32520 | 73 2f 64 69 73 61 62 6c 65 73 20 68 65 6c 70 65 72 20 73 75 70 70 6f 72 74 20 6f 6e 20 74 68 69 | s/disables.helper.support.on.thi |
32540 | 73 20 72 6f 75 74 65 72 20 66 6f 72 20 61 6c 6c 20 6e 65 69 67 68 62 6f 75 72 73 2e 00 43 6f 6e | s.router.for.all.neighbours..Con |
32560 | 66 69 67 75 72 65 20 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 20 3a 72 66 63 3a 60 33 36 | figure.Graceful.Restart.:rfc:`36 |
32580 | 32 33 60 20 72 65 73 74 61 72 74 69 6e 67 20 73 75 70 70 6f 72 74 2e 20 57 68 65 6e 20 65 6e 61 | 23`.restarting.support..When.ena |
325a0 | 62 6c 65 64 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 67 72 61 63 65 20 70 65 72 69 6f 64 20 69 | bled,.the.default.grace.period.i |
325c0 | 73 20 31 32 30 20 73 65 63 6f 6e 64 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 49 43 4d 50 20 74 68 | s.120.seconds..Configure.ICMP.th |
325e0 | 72 65 73 68 6f 6c 64 20 70 61 72 61 6d 65 74 65 72 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 49 50 | reshold.parameters..Configure.IP |
32600 | 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 44 48 43 50 20 60 3c 73 65 72 76 65 72 3e 60 20 | .address.of.the.DHCP.`<server>`. |
32620 | 77 68 69 63 68 20 77 69 6c 6c 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 6c 61 79 65 64 20 70 61 | which.will.handle.the.relayed.pa |
32640 | 63 6b 65 74 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 52 41 44 49 55 53 20 60 3c 73 65 72 76 65 72 | ckets..Configure.RADIUS.`<server |
32660 | 3e 60 20 61 6e 64 20 69 74 73 20 72 65 71 75 69 72 65 64 20 70 6f 72 74 20 66 6f 72 20 61 75 74 | >`.and.its.required.port.for.aut |
32680 | 68 65 6e 74 69 63 61 74 69 6f 6e 20 72 65 71 75 65 73 74 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 | hentication.requests..Configure. |
326a0 | 52 41 44 49 55 53 20 60 3c 73 65 72 76 65 72 3e 60 20 61 6e 64 20 69 74 73 20 72 65 71 75 69 72 | RADIUS.`<server>`.and.its.requir |
326c0 | 65 64 20 73 68 61 72 65 64 20 60 3c 73 65 63 72 65 74 3e 60 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 | ed.shared.`<secret>`.for.communi |
326e0 | 63 61 74 69 6e 67 20 77 69 74 68 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 43 | cating.with.the.RADIUS.server..C |
32700 | 6f 6e 66 69 67 75 72 65 20 53 4e 41 54 20 72 75 6c 65 20 28 34 30 29 20 74 6f 20 6f 6e 6c 79 20 | onfigure.SNAT.rule.(40).to.only. |
32720 | 4e 41 54 20 70 61 63 6b 65 74 73 20 77 69 74 68 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 | NAT.packets.with.a.destination.a |
32740 | 64 64 72 65 73 73 20 6f 66 20 31 39 32 2e 30 2e 32 2e 31 2e 00 43 6f 6e 66 69 67 75 72 65 20 54 | ddress.of.192.0.2.1..Configure.T |
32760 | 43 50 20 74 68 72 65 73 68 6f 6c 64 20 70 61 72 61 6d 65 74 65 72 73 00 43 6f 6e 66 69 67 75 72 | CP.threshold.parameters.Configur |
32780 | 65 20 55 44 50 20 74 68 72 65 73 68 6f 6c 64 20 70 61 72 61 6d 65 74 65 72 73 00 43 6f 6e 66 69 | e.UDP.threshold.parameters.Confi |
327a0 | 67 75 72 65 20 60 3c 6d 65 73 73 61 67 65 3e 60 20 77 68 69 63 68 20 69 73 20 73 68 6f 77 6e 20 | gure.`<message>`.which.is.shown. |
327c0 | 61 66 74 65 72 20 75 73 65 72 20 68 61 73 20 6c 6f 67 67 65 64 20 69 6e 20 74 6f 20 74 68 65 20 | after.user.has.logged.in.to.the. |
327e0 | 73 79 73 74 65 6d 2e 00 43 6f 6e 66 69 67 75 72 65 20 60 3c 6d 65 73 73 61 67 65 3e 60 20 77 68 | system..Configure.`<message>`.wh |
32800 | 69 63 68 20 69 73 20 73 68 6f 77 6e 20 64 75 72 69 6e 67 20 53 53 48 20 63 6f 6e 6e 65 63 74 20 | ich.is.shown.during.SSH.connect. |
32820 | 61 6e 64 20 62 65 66 6f 72 65 20 61 20 75 73 65 72 20 69 73 20 6c 6f 67 67 65 64 20 69 6e 2e 00 | and.before.a.user.is.logged.in.. |
32840 | 43 6f 6e 66 69 67 75 72 65 20 60 3c 70 61 73 73 77 6f 72 64 3e 60 20 75 73 65 64 20 77 68 65 6e | Configure.`<password>`.used.when |
32860 | 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 70 64 61 74 65 20 72 65 71 75 65 | .authenticating.the.update.reque |
32880 | 73 74 20 66 6f 72 20 44 79 6e 44 4e 53 20 73 65 72 76 69 63 65 20 69 64 65 6e 74 69 66 69 65 64 | st.for.DynDNS.service.identified |
328a0 | 20 62 79 20 60 3c 73 65 72 76 69 63 65 2d 6e 61 6d 65 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 | .by.`<service-name>`..Configure. |
328c0 | 60 3c 70 61 73 73 77 6f 72 64 3e 60 20 75 73 65 64 20 77 68 65 6e 20 61 75 74 68 65 6e 74 69 63 | `<password>`.used.when.authentic |
328e0 | 61 74 69 6e 67 20 74 68 65 20 75 70 64 61 74 65 20 72 65 71 75 65 73 74 20 66 6f 72 20 44 79 6e | ating.the.update.request.for.Dyn |
32900 | 44 4e 53 20 73 65 72 76 69 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 | DNS.service.identified.by.`<serv |
32920 | 69 63 65 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 60 3c 75 73 65 72 6e 61 6d 65 3e 60 20 75 73 | ice>`..Configure.`<username>`.us |
32940 | 65 64 20 77 68 65 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 70 64 61 74 | ed.when.authenticating.the.updat |
32960 | 65 20 72 65 71 75 65 73 74 20 66 6f 72 20 44 79 6e 44 4e 53 20 73 65 72 76 69 63 65 20 69 64 65 | e.request.for.DynDNS.service.ide |
32980 | 6e 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 2d 6e 61 6d 65 3e 60 2e 00 43 6f 6e | ntified.by.`<service-name>`..Con |
329a0 | 66 69 67 75 72 65 20 60 3c 75 73 65 72 6e 61 6d 65 3e 60 20 75 73 65 64 20 77 68 65 6e 20 61 75 | figure.`<username>`.used.when.au |
329c0 | 74 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 70 64 61 74 65 20 72 65 71 75 65 73 74 20 | thenticating.the.update.request. |
329e0 | 66 6f 72 20 44 79 6e 44 4e 53 20 73 65 72 76 69 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 | for.DynDNS.service.identified.by |
32a00 | 20 60 3c 73 65 72 76 69 63 65 3e 60 2e 20 46 6f 72 20 4e 61 6d 65 63 68 65 61 70 2c 20 73 65 74 | .`<service>`..For.Namecheap,.set |
32a20 | 20 74 68 65 20 3c 64 6f 6d 61 69 6e 3e 20 79 6f 75 20 77 69 73 68 20 74 6f 20 75 70 64 61 74 65 | .the.<domain>.you.wish.to.update |
32a40 | 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 20 55 52 4c 20 74 68 61 74 20 63 6f 6e 74 61 69 6e 73 20 | ..Configure.a.URL.that.contains. |
32a60 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 69 6d 61 67 65 73 2e 00 43 6f 6e 66 69 67 | information.about.images..Config |
32a80 | 75 72 65 20 61 20 73 46 6c 6f 77 20 61 67 65 6e 74 20 61 64 64 72 65 73 73 2e 20 49 74 20 63 61 | ure.a.sFlow.agent.address..It.ca |
32aa0 | 6e 20 62 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 2c 20 62 75 74 20 79 | n.be.IPv4.or.IPv6.address,.but.y |
32ac0 | 6f 75 20 6d 75 73 74 20 73 65 74 20 74 68 65 20 73 61 6d 65 20 70 72 6f 74 6f 63 6f 6c 2c 20 77 | ou.must.set.the.same.protocol,.w |
32ae0 | 68 69 63 68 20 69 73 20 75 73 65 64 20 66 6f 72 20 73 46 6c 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 | hich.is.used.for.sFlow.collector |
32b00 | 20 61 64 64 72 65 73 73 65 73 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 75 73 69 6e 67 20 72 6f | .addresses..By.default,.using.ro |
32b20 | 75 74 65 72 2d 69 64 20 66 72 6f 6d 20 42 47 50 20 6f 72 20 4f 53 50 46 20 70 72 6f 74 6f 63 6f | uter-id.from.BGP.or.OSPF.protoco |
32b40 | 6c 2c 20 6f 72 20 74 68 65 20 70 72 69 6d 61 72 79 20 49 50 20 61 64 64 72 65 73 73 20 66 72 6f | l,.or.the.primary.IP.address.fro |
32b60 | 6d 20 74 68 65 20 66 69 72 73 74 20 69 6e 74 65 72 66 61 63 65 2e 00 43 6f 6e 66 69 67 75 72 65 | m.the.first.interface..Configure |
32b80 | 20 61 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 66 6f 72 20 3c 73 75 62 6e 65 74 3e 20 75 73 69 | .a.static.route.for.<subnet>.usi |
32ba0 | 6e 67 20 67 61 74 65 77 61 79 20 3c 61 64 64 72 65 73 73 3e 20 2c 20 75 73 65 20 73 6f 75 72 63 | ng.gateway.<address>.,.use.sourc |
32bc0 | 65 20 61 64 64 72 65 73 73 20 74 6f 20 69 6e 64 65 6e 74 69 66 79 20 74 68 65 20 70 65 65 72 20 | e.address.to.indentify.the.peer. |
32be0 | 77 68 65 6e 20 69 73 20 6d 75 6c 74 69 2d 68 6f 70 20 73 65 73 73 69 6f 6e 20 61 6e 64 20 74 68 | when.is.multi-hop.session.and.th |
32c00 | 65 20 67 61 74 65 77 61 79 20 61 64 64 72 65 73 73 20 61 73 20 42 46 44 20 70 65 65 72 20 64 65 | e.gateway.address.as.BFD.peer.de |
32c20 | 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 20 73 | stination.address..Configure.a.s |
32c40 | 74 61 74 69 63 20 72 6f 75 74 65 20 66 6f 72 20 3c 73 75 62 6e 65 74 3e 20 75 73 69 6e 67 20 67 | tatic.route.for.<subnet>.using.g |
32c60 | 61 74 65 77 61 79 20 3c 61 64 64 72 65 73 73 3e 20 61 6e 64 20 75 73 65 20 74 68 65 20 67 61 74 | ateway.<address>.and.use.the.gat |
32c80 | 65 77 61 79 20 61 64 64 72 65 73 73 20 61 73 20 42 46 44 20 70 65 65 72 20 64 65 73 74 69 6e 61 | eway.address.as.BFD.peer.destina |
32ca0 | 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 64 64 72 65 73 73 20 | tion.address..Configure.address. |
32cc0 | 6f 66 20 4e 65 74 46 6c 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 2e 20 4e 65 74 46 6c 6f 77 20 73 65 | of.NetFlow.collector..NetFlow.se |
32ce0 | 72 76 65 72 20 61 74 20 60 3c 61 64 64 72 65 73 73 3e 60 20 63 61 6e 20 62 65 20 62 6f 74 68 20 | rver.at.`<address>`.can.be.both. |
32d00 | 6c 69 73 74 65 6e 69 6e 67 20 6f 6e 20 61 6e 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 | listening.on.an.IPv4.or.IPv6.add |
32d20 | 72 65 73 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 64 64 72 65 73 73 20 6f 66 20 73 46 6c 6f 77 | ress..Configure.address.of.sFlow |
32d40 | 20 63 6f 6c 6c 65 63 74 6f 72 2e 20 73 46 6c 6f 77 20 73 65 72 76 65 72 20 61 74 20 3c 61 64 64 | .collector..sFlow.server.at.<add |
32d60 | 72 65 73 73 3e 20 63 61 6e 20 62 65 20 62 6f 74 68 20 6c 69 73 74 65 6e 69 6e 67 20 6f 6e 20 61 | ress>.can.be.both.listening.on.a |
32d80 | 6e 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 00 43 6f 6e 66 69 67 75 72 | n.IPv4.or.IPv6.address..Configur |
32da0 | 65 20 61 64 64 72 65 73 73 20 6f 66 20 73 46 6c 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 2e 20 73 46 | e.address.of.sFlow.collector..sF |
32dc0 | 6c 6f 77 20 73 65 72 76 65 72 20 61 74 20 60 3c 61 64 64 72 65 73 73 3e 60 20 63 61 6e 20 62 65 | low.server.at.`<address>`.can.be |
32de0 | 20 61 6e 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 20 42 75 74 20 79 6f | .an.IPv4.or.IPv6.address..But.yo |
32e00 | 75 20 63 61 6e 6e 6f 74 20 65 78 70 6f 72 74 20 74 6f 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 | u.cannot.export.to.both.IPv4.and |
32e20 | 20 49 50 76 36 20 63 6f 6c 6c 65 63 74 6f 72 73 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d | .IPv6.collectors.at.the.same.tim |
32e40 | 65 21 00 43 6f 6e 66 69 67 75 72 65 20 61 67 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 20 61 73 | e!.Configure.agent.IP.address.as |
32e60 | 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 43 6f | sociated.with.this.interface..Co |
32e80 | 6e 66 69 67 75 72 65 20 61 67 67 72 65 67 61 74 69 6f 6e 20 64 65 6c 61 79 20 74 69 6d 65 72 20 | nfigure.aggregation.delay.timer. |
32ea0 | 69 6e 74 65 72 76 61 6c 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 6c 65 72 74 20 73 63 72 69 70 74 | interval..Configure.alert.script |
32ec0 | 20 74 68 61 74 20 77 69 6c 6c 20 62 65 20 65 78 65 63 75 74 65 64 20 77 68 65 6e 20 61 6e 20 61 | .that.will.be.executed.when.an.a |
32ee0 | 74 74 61 63 6b 20 69 73 20 64 65 74 65 63 74 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 6e 20 | ttack.is.detected..Configure.an. |
32f00 | 61 63 63 6f 75 6e 74 69 6e 67 20 73 65 72 76 65 72 20 61 6e 64 20 65 6e 61 62 6c 65 20 61 63 63 | accounting.server.and.enable.acc |
32f20 | 6f 75 6e 74 69 6e 67 20 77 69 74 68 3a 00 43 6f 6e 66 69 67 75 72 65 20 61 6e 64 20 65 6e 61 62 | ounting.with:.Configure.and.enab |
32f40 | 6c 65 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 66 6c 6f 77 20 69 6e 66 6f 72 6d 61 74 69 6f | le.collection.of.flow.informatio |
32f60 | 6e 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 | n.for.the.interface.identified.b |
32f80 | 79 20 3c 69 6e 74 65 72 66 61 63 65 3e 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 6e 64 20 65 6e 61 | y.<interface>..Configure.and.ena |
32fa0 | 62 6c 65 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 66 6c 6f 77 20 69 6e 66 6f 72 6d 61 74 69 | ble.collection.of.flow.informati |
32fc0 | 6f 6e 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 | on.for.the.interface.identified. |
32fe0 | 62 79 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 75 74 6f | by.`<interface>`..Configure.auto |
33000 | 2d 63 68 65 63 6b 69 6e 67 20 66 6f 72 20 6e 65 77 20 69 6d 61 67 65 73 00 43 6f 6e 66 69 67 75 | -checking.for.new.images.Configu |
33020 | 72 65 20 62 61 63 6b 65 6e 64 20 60 3c 6e 61 6d 65 3e 60 20 6d 6f 64 65 20 54 43 50 20 6f 72 20 | re.backend.`<name>`.mode.TCP.or. |
33040 | 48 54 54 50 00 43 6f 6e 66 69 67 75 72 65 20 62 6f 74 68 20 72 6f 75 74 65 72 73 20 28 61 20 61 | HTTP.Configure.both.routers.(a.a |
33060 | 6e 64 20 62 29 20 66 6f 72 20 44 48 43 50 76 36 2d 50 44 20 76 69 61 20 64 75 6d 6d 79 20 69 6e | nd.b).for.DHCPv6-PD.via.dummy.in |
33080 | 74 65 72 66 61 63 65 3a 00 43 6f 6e 66 69 67 75 72 65 20 64 69 72 65 63 74 69 6f 6e 20 66 6f 72 | terface:.Configure.direction.for |
330a0 | 20 70 72 6f 63 65 73 73 69 6e 67 20 74 72 61 66 66 69 63 2e 00 43 6f 6e 66 69 67 75 72 65 20 65 | .processing.traffic..Configure.e |
330c0 | 69 74 68 65 72 20 6f 6e 65 20 6f 72 20 74 77 6f 20 73 74 6f 70 20 62 69 74 73 2e 20 54 68 69 73 | ither.one.or.two.stop.bits..This |
330e0 | 20 64 65 66 61 75 6c 74 73 20 74 6f 20 6f 6e 65 20 73 74 6f 70 20 62 69 74 73 20 69 66 20 6c 65 | .defaults.to.one.stop.bits.if.le |
33100 | 66 74 20 75 6e 63 6f 6e 66 69 67 75 72 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 65 69 74 68 65 | ft.unconfigured..Configure.eithe |
33120 | 72 20 73 65 76 65 6e 20 6f 72 20 65 69 67 68 74 20 64 61 74 61 20 62 69 74 73 2e 20 54 68 69 73 | r.seven.or.eight.data.bits..This |
33140 | 20 64 65 66 61 75 6c 74 73 20 74 6f 20 65 69 67 68 74 20 64 61 74 61 20 62 69 74 73 20 69 66 20 | .defaults.to.eight.data.bits.if. |
33160 | 6c 65 66 74 20 75 6e 63 6f 6e 66 69 67 75 72 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 67 65 6e | left.unconfigured..Configure.gen |
33180 | 65 72 61 6c 20 74 68 72 65 73 68 6f 6c 64 20 70 61 72 61 6d 65 74 65 72 73 2e 00 43 6f 6e 66 69 | eral.threshold.parameters..Confi |
331a0 | 67 75 72 65 20 68 6f 77 20 6c 6f 6e 67 20 61 6e 20 49 50 20 28 61 74 74 61 63 6b 65 72 29 20 73 | gure.how.long.an.IP.(attacker).s |
331c0 | 68 6f 75 6c 64 20 62 65 20 6b 65 70 74 20 69 6e 20 62 6c 6f 63 6b 65 64 20 73 74 61 74 65 2e 20 | hould.be.kept.in.blocked.state.. |
331e0 | 44 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 39 30 30 2e 00 43 6f 6e 66 69 67 75 72 65 | Default.value.is.1900..Configure |
33200 | 20 69 6e 64 69 76 69 64 75 61 6c 20 62 72 69 64 67 65 20 70 6f 72 74 20 60 3c 70 72 69 6f 72 69 | .individual.bridge.port.`<priori |
33220 | 74 79 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 | ty>`..Configure.interface.`<inte |
33240 | 72 66 61 63 65 3e 60 20 77 69 74 68 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 69 6e 74 65 72 66 61 | rface>`.with.one.or.more.interfa |
33260 | 63 65 20 61 64 64 72 65 73 73 65 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 69 6e 74 65 72 66 61 63 | ce.addresses..Configure.interfac |
33280 | 65 2d 73 70 65 63 69 66 69 63 20 48 6f 73 74 2f 52 6f 75 74 65 72 20 62 65 68 61 76 69 6f 75 72 | e-specific.Host/Router.behaviour |
332a0 | 2e 20 49 66 20 73 65 74 2c 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 69 6c 6c 20 73 77 69 | ..If.set,.the.interface.will.swi |
332c0 | 74 63 68 20 74 6f 20 68 6f 73 74 20 6d 6f 64 65 20 61 6e 64 20 49 50 76 36 20 66 6f 72 77 61 72 | tch.to.host.mode.and.IPv6.forwar |
332e0 | 64 69 6e 67 20 77 69 6c 6c 20 62 65 20 64 69 73 61 62 6c 65 64 20 6f 6e 20 74 68 69 73 20 69 6e | ding.will.be.disabled.on.this.in |
33300 | 74 65 72 66 61 63 65 2e 00 43 6f 6e 66 69 67 75 72 65 20 6c 69 73 74 65 6e 20 69 6e 74 65 72 66 | terface..Configure.listen.interf |
33320 | 61 63 65 20 66 6f 72 20 6d 69 72 72 6f 72 69 6e 67 20 74 72 61 66 66 69 63 2e 00 43 6f 6e 66 69 | ace.for.mirroring.traffic..Confi |
33340 | 67 75 72 65 20 6c 6f 63 61 6c 20 49 50 76 34 20 61 64 64 72 65 73 73 20 74 6f 20 6c 69 73 74 65 | gure.local.IPv4.address.to.liste |
33360 | 6e 20 66 6f 72 20 73 66 6c 6f 77 2e 00 43 6f 6e 66 69 67 75 72 65 20 6e 65 77 20 53 4e 4d 50 20 | n.for.sflow..Configure.new.SNMP. |
33380 | 75 73 65 72 20 6e 61 6d 65 64 20 22 76 79 6f 73 22 20 77 69 74 68 20 70 61 73 73 77 6f 72 64 20 | user.named."vyos".with.password. |
333a0 | 22 76 79 6f 73 31 32 33 34 35 36 37 38 22 00 43 6f 6e 66 69 67 75 72 65 20 6e 65 78 74 2d 68 6f | "vyos12345678".Configure.next-ho |
333c0 | 70 20 60 3c 61 64 64 72 65 73 73 3e 60 20 61 6e 64 20 60 3c 74 61 72 67 65 74 2d 61 64 64 72 65 | p.`<address>`.and.`<target-addre |
333e0 | 73 73 3e 60 20 66 6f 72 20 61 6e 20 49 50 76 34 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 20 53 | ss>`.for.an.IPv4.static.route..S |
33400 | 70 65 63 69 66 79 20 74 68 65 20 74 61 72 67 65 74 20 49 50 76 34 20 61 64 64 72 65 73 73 20 66 | pecify.the.target.IPv4.address.f |
33420 | 6f 72 20 68 65 61 6c 74 68 20 63 68 65 63 6b 69 6e 67 2e 00 43 6f 6e 66 69 67 75 72 65 20 6e 65 | or.health.checking..Configure.ne |
33440 | 78 74 2d 68 6f 70 20 60 3c 61 64 64 72 65 73 73 3e 60 20 66 6f 72 20 61 6e 20 49 50 76 34 20 73 | xt-hop.`<address>`.for.an.IPv4.s |
33460 | 74 61 74 69 63 20 72 6f 75 74 65 2e 20 4d 75 6c 74 69 70 6c 65 20 73 74 61 74 69 63 20 72 6f 75 | tatic.route..Multiple.static.rou |
33480 | 74 65 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 6e 65 | tes.can.be.created..Configure.ne |
334a0 | 78 74 2d 68 6f 70 20 60 3c 61 64 64 72 65 73 73 3e 60 20 66 6f 72 20 61 6e 20 49 50 76 36 20 73 | xt-hop.`<address>`.for.an.IPv6.s |
334c0 | 74 61 74 69 63 20 72 6f 75 74 65 2e 20 4d 75 6c 74 69 70 6c 65 20 73 74 61 74 69 63 20 72 6f 75 | tatic.route..Multiple.static.rou |
334e0 | 74 65 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 6f 6e | tes.can.be.created..Configure.on |
33500 | 65 20 6f 66 20 74 68 65 20 70 72 65 64 65 66 69 6e 65 64 20 73 79 73 74 65 6d 20 70 65 72 66 6f | e.of.the.predefined.system.perfo |
33520 | 72 6d 61 6e 63 65 20 70 72 6f 66 69 6c 65 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 6f 6e 65 20 6f | rmance.profiles..Configure.one.o |
33540 | 72 20 6d 6f 72 65 20 61 74 74 72 69 62 75 74 65 73 20 74 6f 20 74 68 65 20 67 69 76 65 6e 20 4e | r.more.attributes.to.the.given.N |
33560 | 54 50 20 73 65 72 76 65 72 2e 00 43 6f 6e 66 69 67 75 72 65 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 | TP.server..Configure.one.or.more |
33580 | 20 73 65 72 76 65 72 73 20 66 6f 72 20 73 79 6e 63 68 72 6f 6e 69 73 61 74 69 6f 6e 2e 20 53 65 | .servers.for.synchronisation..Se |
335a0 | 72 76 65 72 20 6e 61 6d 65 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 20 61 6e 20 49 50 20 61 64 | rver.name.can.be.either.an.IP.ad |
335c0 | 64 72 65 73 73 20 6f 72 20 3a 61 62 62 72 3a 60 46 51 44 4e 20 28 46 75 6c 6c 79 20 51 75 61 6c | dress.or.:abbr:`FQDN.(Fully.Qual |
335e0 | 69 66 69 65 64 20 44 6f 6d 61 69 6e 20 4e 61 6d 65 29 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 6f | ified.Domain.Name)`..Configure.o |
33600 | 70 74 69 6f 6e 61 6c 20 54 54 4c 20 76 61 6c 75 65 20 6f 6e 20 74 68 65 20 67 69 76 65 6e 20 72 | ptional.TTL.value.on.the.given.r |
33620 | 65 73 6f 75 72 63 65 20 72 65 63 6f 72 64 2e 20 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f | esource.record..This.defaults.to |
33640 | 20 36 30 30 20 73 65 63 6f 6e 64 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 68 79 73 69 63 61 6c | .600.seconds..Configure.physical |
33660 | 20 69 6e 74 65 72 66 61 63 65 20 64 75 70 6c 65 78 20 73 65 74 74 69 6e 67 2e 00 43 6f 6e 66 69 | .interface.duplex.setting..Confi |
33680 | 67 75 72 65 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 20 73 70 65 65 64 20 73 65 | gure.physical.interface.speed.se |
336a0 | 74 74 69 6e 67 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 6f 72 74 20 6d 69 72 72 6f 72 69 6e 67 20 | tting..Configure.port.mirroring. |
336c0 | 66 6f 72 20 60 69 6e 74 65 72 66 61 63 65 60 20 69 6e 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 | for.`interface`.inbound.traffic. |
336e0 | 61 6e 64 20 63 6f 70 79 20 74 68 65 20 74 72 61 66 66 69 63 20 74 6f 20 60 6d 6f 6e 69 74 6f 72 | and.copy.the.traffic.to.`monitor |
33700 | 2d 69 6e 74 65 72 66 61 63 65 60 00 43 6f 6e 66 69 67 75 72 65 20 70 6f 72 74 20 6d 69 72 72 6f | -interface`.Configure.port.mirro |
33720 | 72 69 6e 67 20 66 6f 72 20 60 69 6e 74 65 72 66 61 63 65 60 20 6f 75 74 62 6f 75 6e 64 20 74 72 | ring.for.`interface`.outbound.tr |
33740 | 61 66 66 69 63 20 61 6e 64 20 63 6f 70 79 20 74 68 65 20 74 72 61 66 66 69 63 20 74 6f 20 60 6d | affic.and.copy.the.traffic.to.`m |
33760 | 6f 6e 69 74 6f 72 2d 69 6e 74 65 72 66 61 63 65 60 00 43 6f 6e 66 69 67 75 72 65 20 70 6f 72 74 | onitor-interface`.Configure.port |
33780 | 20 6e 75 6d 62 65 72 20 6f 66 20 72 65 6d 6f 74 65 20 56 58 4c 41 4e 20 65 6e 64 70 6f 69 6e 74 | .number.of.remote.VXLAN.endpoint |
337a0 | 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 74 6f 20 62 65 20 75 73 | ..Configure.port.number.to.be.us |
337c0 | 65 64 20 66 6f 72 20 73 66 6c 6f 77 20 63 6f 6e 65 63 74 69 6f 6e 2e 20 44 65 66 61 75 6c 74 20 | ed.for.sflow.conection..Default. |
337e0 | 70 6f 72 74 20 69 73 20 36 33 34 33 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 72 6f 74 6f 63 6f 6c | port.is.6343..Configure.protocol |
33800 | 20 75 73 65 64 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 74 6f 20 72 65 6d 6f 74 | .used.for.communication.to.remot |
33820 | 65 20 73 79 73 6c 6f 67 20 68 6f 73 74 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 65 69 74 68 65 | e.syslog.host..This.can.be.eithe |
33840 | 72 20 55 44 50 20 6f 72 20 54 43 50 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 72 6f 78 79 20 70 6f | r.UDP.or.TCP..Configure.proxy.po |
33860 | 72 74 20 69 66 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 6c 69 73 74 65 6e 20 74 6f 20 74 68 65 20 | rt.if.it.does.not.listen.to.the. |
33880 | 64 65 66 61 75 6c 74 20 70 6f 72 74 20 38 30 2e 00 43 6f 6e 66 69 67 75 72 65 20 73 46 6c 6f 77 | default.port.80..Configure.sFlow |
338a0 | 20 61 67 65 6e 74 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 00 43 6f 6e 66 | .agent.IPv4.or.IPv6.address.Conf |
338c0 | 69 67 75 72 65 20 73 63 68 65 64 75 6c 65 20 63 6f 75 6e 74 65 72 2d 70 6f 6c 6c 69 6e 67 20 69 | igure.schedule.counter-polling.i |
338e0 | 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 33 30 29 00 43 6f 6e 66 69 67 75 72 | n.seconds.(default:.30).Configur |
33900 | 65 20 73 65 72 76 69 63 65 20 60 3c 6e 61 6d 65 3e 60 20 6d 6f 64 65 20 54 43 50 20 6f 72 20 48 | e.service.`<name>`.mode.TCP.or.H |
33920 | 54 54 50 00 43 6f 6e 66 69 67 75 72 65 20 73 65 72 76 69 63 65 20 60 3c 6e 61 6d 65 3e 60 20 74 | TTP.Configure.service.`<name>`.t |
33940 | 6f 20 75 73 65 20 74 68 65 20 62 61 63 6b 65 6e 64 20 3c 6e 61 6d 65 3e 00 43 6f 6e 66 69 67 75 | o.use.the.backend.<name>.Configu |
33960 | 72 65 20 73 65 73 73 69 6f 6e 20 74 69 6d 65 6f 75 74 20 61 66 74 65 72 20 77 68 69 63 68 20 74 | re.session.timeout.after.which.t |
33980 | 68 65 20 75 73 65 72 20 77 69 6c 6c 20 62 65 20 6c 6f 67 67 65 64 20 6f 75 74 2e 00 43 6f 6e 66 | he.user.will.be.logged.out..Conf |
339a0 | 69 67 75 72 65 20 73 79 73 74 65 6d 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 2e 20 41 20 64 6f 6d 61 | igure.system.domain.name..A.doma |
339c0 | 69 6e 20 6e 61 6d 65 20 6d 75 73 74 20 73 74 61 72 74 20 61 6e 64 20 65 6e 64 20 77 69 74 68 20 | in.name.must.start.and.end.with. |
339e0 | 61 20 6c 65 74 74 65 72 20 6f 72 20 64 69 67 69 74 2c 20 61 6e 64 20 68 61 76 65 20 61 73 20 69 | a.letter.or.digit,.and.have.as.i |
33a00 | 6e 74 65 72 69 6f 72 20 63 68 61 72 61 63 74 65 72 73 20 6f 6e 6c 79 20 6c 65 74 74 65 72 73 2c | nterior.characters.only.letters, |
33a20 | 20 64 69 67 69 74 73 2c 20 6f 72 20 61 20 68 79 70 68 65 6e 2e 00 43 6f 6e 66 69 67 75 72 65 20 | .digits,.or.a.hyphen..Configure. |
33a40 | 74 68 65 20 41 2d 73 69 64 65 20 72 6f 75 74 65 72 20 66 6f 72 20 4e 50 54 76 36 20 75 73 69 6e | the.A-side.router.for.NPTv6.usin |
33a60 | 67 20 74 68 65 20 70 72 65 66 69 78 65 73 20 61 62 6f 76 65 3a 00 43 6f 6e 66 69 67 75 72 65 20 | g.the.prefixes.above:.Configure. |
33a80 | 74 68 65 20 42 2d 73 69 64 65 20 72 6f 75 74 65 72 20 66 6f 72 20 4e 50 54 76 36 20 75 73 69 6e | the.B-side.router.for.NPTv6.usin |
33aa0 | 67 20 74 68 65 20 70 72 65 66 69 78 65 73 20 61 62 6f 76 65 3a 00 43 6f 6e 66 69 67 75 72 65 20 | g.the.prefixes.above:.Configure. |
33ac0 | 74 68 65 20 44 4e 53 20 60 3c 73 65 72 76 65 72 3e 60 20 49 50 2f 46 51 44 4e 20 75 73 65 64 20 | the.DNS.`<server>`.IP/FQDN.used. |
33ae0 | 77 68 65 6e 20 75 70 64 61 74 69 6e 67 20 74 68 69 73 20 64 79 6e 61 6d 69 63 20 61 73 73 69 67 | when.updating.this.dynamic.assig |
33b00 | 6e 6d 65 6e 74 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 49 50 76 34 20 6f 72 20 49 50 76 | nment..Configure.the.IPv4.or.IPv |
33b20 | 36 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 54 46 54 50 20 73 65 72 | 6.listen.address.of.the.TFTP.ser |
33b40 | 76 65 72 2e 20 4d 75 6c 74 69 70 6c 65 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 | ver..Multiple.IPv4.and.IPv6.addr |
33b60 | 65 73 73 65 73 20 63 61 6e 20 62 65 20 67 69 76 65 6e 2e 20 54 68 65 72 65 20 77 69 6c 6c 20 62 | esses.can.be.given..There.will.b |
33b80 | 65 20 6f 6e 65 20 54 46 54 50 20 73 65 72 76 65 72 20 69 6e 73 74 61 6e 63 65 73 20 6c 69 73 74 | e.one.TFTP.server.instances.list |
33ba0 | 65 6e 69 6e 67 20 6f 6e 20 65 61 63 68 20 49 50 20 61 64 64 72 65 73 73 2e 00 43 6f 6e 66 69 67 | ening.on.each.IP.address..Config |
33bc0 | 75 72 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 70 72 6f 74 | ure.the.connection.tracking.prot |
33be0 | 6f 63 6f 6c 20 68 65 6c 70 65 72 20 6d 6f 64 75 6c 65 73 2e 20 41 6c 6c 20 6d 6f 64 75 6c 65 73 | ocol.helper.modules..All.modules |
33c00 | 20 61 72 65 20 65 6e 61 62 6c 65 20 62 79 20 64 65 66 61 75 6c 74 2e 00 43 6f 6e 66 69 67 75 72 | .are.enable.by.default..Configur |
33c20 | 65 20 74 68 65 20 64 69 73 63 72 65 74 65 20 70 6f 72 74 20 75 6e 64 65 72 20 77 68 69 63 68 20 | e.the.discrete.port.under.which. |
33c40 | 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 72 65 61 63 68 65 64 | the.RADIUS.server.can.be.reached |
33c60 | 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 64 69 73 63 72 65 74 65 20 70 6f 72 74 20 75 6e | ..Configure.the.discrete.port.un |
33c80 | 64 65 72 20 77 68 69 63 68 20 74 68 65 20 54 41 43 41 43 53 20 73 65 72 76 65 72 20 63 61 6e 20 | der.which.the.TACACS.server.can. |
33ca0 | 62 65 20 72 65 61 63 68 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6c 6f 61 64 2d 62 | be.reached..Configure.the.load-b |
33cc0 | 61 6c 61 6e 63 69 6e 67 20 72 65 76 65 72 73 65 2d 70 72 6f 78 79 20 73 65 72 76 69 63 65 20 66 | alancing.reverse-proxy.service.f |
33ce0 | 6f 72 20 48 54 54 50 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 72 61 66 66 69 63 20 63 61 70 74 75 | or.HTTP..Configure.traffic.captu |
33d00 | 72 65 20 6d 6f 64 65 2e 00 43 6f 6e 66 69 67 75 72 65 20 75 73 65 72 20 64 65 66 69 6e 65 64 20 | re.mode..Configure.user.defined. |
33d20 | 3a 61 62 62 72 3a 60 4d 41 43 20 28 4d 65 64 69 61 20 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c | :abbr:`MAC.(Media.Access.Control |
33d40 | 29 60 20 61 64 64 72 65 73 73 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e | )`.address.on.given.`<interface> |
33d60 | 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 77 61 74 65 72 6d 61 72 6b 20 77 61 72 6e 69 6e 67 20 67 | `..Configure.watermark.warning.g |
33d80 | 65 6e 65 72 61 74 69 6f 6e 20 66 6f 72 20 61 6e 20 49 47 4d 50 20 67 72 6f 75 70 20 6c 69 6d 69 | eneration.for.an.IGMP.group.limi |
33da0 | 74 2e 20 47 65 6e 65 72 61 74 65 73 20 77 61 72 6e 69 6e 67 20 6f 6e 63 65 20 74 68 65 20 63 6f | t..Generates.warning.once.the.co |
33dc0 | 6e 66 69 67 75 72 65 64 20 67 72 6f 75 70 20 6c 69 6d 69 74 20 69 73 20 72 65 61 63 68 65 64 20 | nfigured.group.limit.is.reached. |
33de0 | 77 68 69 6c 65 20 61 64 64 69 6e 67 20 6e 65 77 20 67 72 6f 75 70 73 2e 00 43 6f 6e 66 69 67 75 | while.adding.new.groups..Configu |
33e00 | 72 65 64 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 60 3c 69 64 3e 60 20 69 73 20 75 73 65 64 | red.routing.table.`<id>`.is.used |
33e20 | 20 62 79 20 56 52 46 20 60 3c 6e 61 6d 65 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 64 20 76 61 6c | .by.VRF.`<name>`..Configured.val |
33e40 | 75 65 00 43 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 42 47 50 20 73 70 65 61 6b 65 72 20 73 6f | ue.Configures.the.BGP.speaker.so |
33e60 | 20 74 68 61 74 20 69 74 20 6f 6e 6c 79 20 61 63 63 65 70 74 73 20 69 6e 62 6f 75 6e 64 20 63 6f | .that.it.only.accepts.inbound.co |
33e80 | 6e 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 2c 20 62 75 74 20 64 6f 65 73 20 6e 6f 74 20 69 6e 69 | nnections.from,.but.does.not.ini |
33ea0 | 74 69 61 74 65 20 6f 75 74 62 6f 75 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 | tiate.outbound.connections.to.th |
33ec0 | 65 20 70 65 65 72 20 6f 72 20 70 65 65 72 20 67 72 6f 75 70 2e 00 43 6f 6e 66 69 67 75 72 69 6e | e.peer.or.peer.group..Configurin |
33ee0 | 67 20 49 50 6f 45 20 53 65 72 76 65 72 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 49 50 73 65 63 00 | g.IPoE.Server.Configuring.IPsec. |
33f00 | 43 6f 6e 66 69 67 75 72 69 6e 67 20 4c 32 54 50 20 53 65 72 76 65 72 00 43 6f 6e 66 69 67 75 72 | Configuring.L2TP.Server.Configur |
33f20 | 69 6e 67 20 4c 4e 53 20 28 4c 32 54 50 20 4e 65 74 77 6f 72 6b 20 53 65 72 76 65 72 29 00 43 6f | ing.LNS.(L2TP.Network.Server).Co |
33f40 | 6e 66 69 67 75 72 69 6e 67 20 50 50 50 6f 45 20 53 65 72 76 65 72 00 43 6f 6e 66 69 67 75 72 69 | nfiguring.PPPoE.Server.Configuri |
33f60 | 6e 67 20 50 50 54 50 20 53 65 72 76 65 72 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 52 41 44 49 55 | ng.PPTP.Server.Configuring.RADIU |
33f80 | 53 20 61 63 63 6f 75 6e 74 69 6e 67 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 52 41 44 49 55 53 20 | S.accounting.Configuring.RADIUS. |
33fa0 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 53 53 54 50 20 | authentication.Configuring.SSTP. |
33fc0 | 53 65 72 76 65 72 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 53 53 54 50 20 63 6c 69 65 6e 74 00 43 | Server.Configuring.SSTP.client.C |
33fe0 | 6f 6e 66 69 67 75 72 69 6e 67 20 56 79 4f 53 20 74 6f 20 61 63 74 20 61 73 20 79 6f 75 72 20 49 | onfiguring.VyOS.to.act.as.your.I |
34000 | 50 53 65 63 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 20 69 73 20 6f 6e 65 20 | PSec.access.concentrator.is.one. |
34020 | 74 68 69 6e 67 2c 20 62 75 74 20 79 6f 75 20 70 72 6f 62 61 62 6c 79 20 6e 65 65 64 20 74 6f 20 | thing,.but.you.probably.need.to. |
34040 | 73 65 74 75 70 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 | setup.your.client.connecting.to. |
34060 | 74 68 65 20 73 65 72 76 65 72 20 73 6f 20 74 68 65 79 20 63 61 6e 20 74 61 6c 6b 20 74 6f 20 74 | the.server.so.they.can.talk.to.t |
34080 | 68 65 20 49 50 53 65 63 20 67 61 74 65 77 61 79 2e 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 61 20 | he.IPSec.gateway..Configuring.a. |
340a0 | 6c 69 73 74 65 6e 2d 61 64 64 72 65 73 73 20 69 73 20 65 73 73 65 6e 74 69 61 6c 20 66 6f 72 20 | listen-address.is.essential.for. |
340c0 | 74 68 65 20 73 65 72 76 69 63 65 20 74 6f 20 77 6f 72 6b 2e 00 43 6f 6e 6e 65 63 74 2f 44 69 73 | the.service.to.work..Connect/Dis |
340e0 | 63 6f 6e 6e 65 63 74 00 43 6f 6e 6e 65 63 74 65 64 20 63 6c 69 65 6e 74 20 73 68 6f 75 6c 64 20 | connect.Connected.client.should. |
34100 | 75 73 65 20 60 3c 61 64 64 72 65 73 73 3e 60 20 61 73 20 74 68 65 69 72 20 44 4e 53 20 73 65 72 | use.`<address>`.as.their.DNS.ser |
34120 | 76 65 72 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 63 63 65 70 74 73 20 62 6f 74 68 20 49 | ver..This.command.accepts.both.I |
34140 | 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 2e 20 55 70 20 74 6f 20 74 77 | Pv4.and.IPv6.addresses..Up.to.tw |
34160 | 6f 20 6e 61 6d 65 73 65 72 76 65 72 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 | o.nameservers.can.be.configured. |
34180 | 66 6f 72 20 49 50 76 34 2c 20 75 70 20 74 6f 20 74 68 72 65 65 20 66 6f 72 20 49 50 76 36 2e 00 | for.IPv4,.up.to.three.for.IPv6.. |
341a0 | 43 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 52 50 4b 49 20 63 61 63 68 69 6e 67 20 | Connections.to.the.RPKI.caching. |
341c0 | 73 65 72 76 65 72 20 63 61 6e 20 6e 6f 74 20 6f 6e 6c 79 20 62 65 20 65 73 74 61 62 6c 69 73 68 | server.can.not.only.be.establish |
341e0 | 65 64 20 62 79 20 48 54 54 50 2f 54 4c 53 20 62 75 74 20 79 6f 75 20 63 61 6e 20 61 6c 73 6f 20 | ed.by.HTTP/TLS.but.you.can.also. |
34200 | 72 65 6c 79 20 6f 6e 20 61 20 73 65 63 75 72 65 20 53 53 48 20 73 65 73 73 69 6f 6e 20 74 6f 20 | rely.on.a.secure.SSH.session.to. |
34220 | 74 68 65 20 73 65 72 76 65 72 2e 20 54 6f 20 65 6e 61 62 6c 65 20 53 53 48 20 79 6f 75 20 66 69 | the.server..To.enable.SSH.you.fi |
34240 | 72 73 74 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 79 6f 75 72 73 65 6c 73 20 61 6e 20 53 | rst.need.to.create.yoursels.an.S |
34260 | 53 48 20 63 6c 69 65 6e 74 20 6b 65 79 70 61 69 72 20 75 73 69 6e 67 20 60 60 67 65 6e 65 72 61 | SH.client.keypair.using.``genera |
34280 | 74 65 20 73 73 68 20 63 6c 69 65 6e 74 2d 6b 65 79 20 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2f 69 | te.ssh.client-key./config/auth/i |
342a0 | 64 5f 72 73 61 5f 72 70 6b 69 60 60 2e 20 4f 6e 63 65 20 79 6f 75 72 20 6b 65 79 20 69 73 20 63 | d_rsa_rpki``..Once.your.key.is.c |
342c0 | 72 65 61 74 65 64 20 79 6f 75 20 63 61 6e 20 73 65 74 75 70 20 74 68 65 20 63 6f 6e 6e 65 63 74 | reated.you.can.setup.the.connect |
342e0 | 69 6f 6e 2e 00 43 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 52 50 4b 49 20 63 61 63 | ion..Connections.to.the.RPKI.cac |
34300 | 68 69 6e 67 20 73 65 72 76 65 72 20 63 61 6e 20 6e 6f 74 20 6f 6e 6c 79 20 62 65 20 65 73 74 61 | hing.server.can.not.only.be.esta |
34320 | 62 6c 69 73 68 65 64 20 62 79 20 48 54 54 50 2f 54 4c 53 20 62 75 74 20 79 6f 75 20 63 61 6e 20 | blished.by.HTTP/TLS.but.you.can. |
34340 | 61 6c 73 6f 20 72 65 6c 79 20 6f 6e 20 61 20 73 65 63 75 72 65 20 53 53 48 20 73 65 73 73 69 6f | also.rely.on.a.secure.SSH.sessio |
34360 | 6e 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 2e 20 54 6f 20 65 6e 61 62 6c 65 20 53 53 48 2c 20 | n.to.the.server..To.enable.SSH,. |
34380 | 66 69 72 73 74 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 6e 20 53 53 48 20 | first.you.need.to.create.an.SSH. |
343a0 | 63 6c 69 65 6e 74 20 6b 65 79 70 61 69 72 20 75 73 69 6e 67 20 60 60 67 65 6e 65 72 61 74 65 20 | client.keypair.using.``generate. |
343c0 | 73 73 68 20 63 6c 69 65 6e 74 2d 6b 65 79 20 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2f 69 64 5f 72 | ssh.client-key./config/auth/id_r |
343e0 | 73 61 5f 72 70 6b 69 60 60 2e 20 4f 6e 63 65 20 79 6f 75 72 20 6b 65 79 20 69 73 20 63 72 65 61 | sa_rpki``..Once.your.key.is.crea |
34400 | 74 65 64 20 79 6f 75 20 63 61 6e 20 73 65 74 75 70 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e | ted.you.can.setup.the.connection |
34420 | 2e 00 43 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 52 50 4b 49 20 63 61 63 68 69 6e | ..Connections.to.the.RPKI.cachin |
34440 | 67 20 73 65 72 76 65 72 20 63 61 6e 20 6e 6f 74 20 6f 6e 6c 79 20 62 65 20 65 73 74 61 62 6c 69 | g.server.can.not.only.be.establi |
34460 | 73 68 65 64 20 62 79 20 54 43 50 20 75 73 69 6e 67 20 74 68 65 20 52 54 52 20 70 72 6f 74 6f 63 | shed.by.TCP.using.the.RTR.protoc |
34480 | 6f 6c 20 62 75 74 20 79 6f 75 20 63 61 6e 20 61 6c 73 6f 20 72 65 6c 79 20 6f 6e 20 61 20 73 65 | ol.but.you.can.also.rely.on.a.se |
344a0 | 63 75 72 65 20 53 53 48 20 73 65 73 73 69 6f 6e 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 2e 20 | cure.SSH.session.to.the.server.. |
344c0 | 54 68 69 73 20 70 72 6f 76 69 64 65 73 20 74 72 61 6e 73 70 6f 72 74 20 69 6e 74 65 67 72 69 74 | This.provides.transport.integrit |
344e0 | 79 20 61 6e 64 20 63 6f 6e 66 69 64 65 6e 74 69 61 6c 69 74 79 20 61 6e 64 20 69 74 20 69 73 20 | y.and.confidentiality.and.it.is. |
34500 | 61 20 67 6f 6f 64 20 69 64 65 61 20 69 66 20 79 6f 75 72 20 76 61 6c 69 64 61 74 69 6f 6e 20 73 | a.good.idea.if.your.validation.s |
34520 | 6f 66 74 77 61 72 65 20 73 75 70 70 6f 72 74 73 20 69 74 2e 20 20 54 6f 20 65 6e 61 62 6c 65 20 | oftware.supports.it...To.enable. |
34540 | 53 53 48 2c 20 66 69 72 73 74 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 6e | SSH,.first.you.need.to.create.an |
34560 | 20 53 53 48 20 63 6c 69 65 6e 74 20 6b 65 79 70 61 69 72 20 75 73 69 6e 67 20 60 60 67 65 6e 65 | .SSH.client.keypair.using.``gene |
34580 | 72 61 74 65 20 73 73 68 20 63 6c 69 65 6e 74 2d 6b 65 79 20 2f 63 6f 6e 66 69 67 2f 61 75 74 68 | rate.ssh.client-key./config/auth |
345a0 | 2f 69 64 5f 72 73 61 5f 72 70 6b 69 60 60 2e 20 4f 6e 63 65 20 79 6f 75 72 20 6b 65 79 20 69 73 | /id_rsa_rpki``..Once.your.key.is |
345c0 | 20 63 72 65 61 74 65 64 20 79 6f 75 20 63 61 6e 20 73 65 74 75 70 20 74 68 65 20 63 6f 6e 6e 65 | .created.you.can.setup.the.conne |
345e0 | 63 74 69 6f 6e 2e 00 43 6f 6e 6e 74 72 61 63 6b 00 43 6f 6e 6e 74 72 61 63 6b 20 53 79 6e 63 00 | ction..Conntrack.Conntrack.Sync. |
34600 | 43 6f 6e 6e 74 72 61 63 6b 20 53 79 6e 63 20 45 78 61 6d 70 6c 65 00 43 6f 6e 6e 74 72 61 63 6b | Conntrack.Sync.Example.Conntrack |
34620 | 20 69 67 6e 6f 72 65 20 72 75 6c 65 73 00 43 6f 6e 6e 74 72 61 63 6b 20 6c 6f 67 00 43 6f 6e 73 | .ignore.rules.Conntrack.log.Cons |
34640 | 6f 6c 65 00 43 6f 6e 73 6f 6c 65 20 53 65 72 76 65 72 00 43 6f 6e 73 74 72 61 69 6e 20 74 68 65 | ole.Console.Server.Constrain.the |
34660 | 20 6d 65 6d 6f 72 79 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 74 68 65 20 63 6f 6e 74 61 69 6e | .memory.available.to.the.contain |
34680 | 65 72 2e 00 43 6f 6e 74 61 69 6e 65 72 00 43 6f 6e 74 61 69 6e 65 72 20 4e 65 74 77 6f 72 6b 73 | er..Container.Container.Networks |
346a0 | 00 43 6f 6e 74 61 69 6e 65 72 20 52 65 67 69 73 74 72 79 00 43 6f 6e 74 72 61 63 6b 20 54 69 6d | .Container.Registry.Contrack.Tim |
346c0 | 65 6f 75 74 73 00 43 6f 6e 76 65 72 74 20 74 68 65 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 | eouts.Convert.the.address.prefix |
346e0 | 20 6f 66 20 61 20 73 69 6e 67 6c 65 20 60 66 63 30 30 3a 3a 2f 36 34 60 20 6e 65 74 77 6f 72 6b | .of.a.single.`fc00::/64`.network |
34700 | 20 74 6f 20 60 66 63 30 31 3a 3a 2f 36 34 60 00 43 6f 6e 76 65 72 74 20 74 68 65 20 61 64 64 72 | .to.`fc01::/64`.Convert.the.addr |
34720 | 65 73 73 20 70 72 65 66 69 78 20 6f 66 20 61 20 73 69 6e 67 6c 65 20 60 66 63 30 31 3a 3a 2f 36 | ess.prefix.of.a.single.`fc01::/6 |
34740 | 34 60 20 6e 65 74 77 6f 72 6b 20 74 6f 20 60 66 63 30 30 3a 3a 2f 36 34 60 00 43 6f 70 79 20 74 | 4`.network.to.`fc00::/64`.Copy.t |
34760 | 68 65 20 6b 65 79 2c 20 61 73 20 69 74 20 69 73 20 6e 6f 74 20 73 74 6f 72 65 64 20 6f 6e 20 74 | he.key,.as.it.is.not.stored.on.t |
34780 | 68 65 20 6c 6f 63 61 6c 20 66 69 6c 65 73 79 73 74 65 6d 2e 20 42 65 63 61 75 73 65 20 69 74 20 | he.local.filesystem..Because.it. |
347a0 | 69 73 20 61 20 73 79 6d 6d 65 74 72 69 63 20 6b 65 79 2c 20 6f 6e 6c 79 20 79 6f 75 20 61 6e 64 | is.a.symmetric.key,.only.you.and |
347c0 | 20 79 6f 75 72 20 70 65 65 72 20 73 68 6f 75 6c 64 20 68 61 76 65 20 6b 6e 6f 77 6c 65 64 67 65 | .your.peer.should.have.knowledge |
347e0 | 20 6f 66 20 69 74 73 20 63 6f 6e 74 65 6e 74 2e 20 4d 61 6b 65 20 73 75 72 65 20 79 6f 75 20 64 | .of.its.content..Make.sure.you.d |
34800 | 69 73 74 72 69 62 75 74 65 20 74 68 65 20 6b 65 79 20 69 6e 20 61 20 73 61 66 65 20 6d 61 6e 6e | istribute.the.key.in.a.safe.mann |
34820 | 65 72 2c 00 43 6f 75 6e 74 72 79 20 63 6f 64 65 20 28 49 53 4f 2f 49 45 43 20 33 31 36 36 2d 31 | er,.Country.code.(ISO/IEC.3166-1 |
34840 | 29 2e 20 55 73 65 64 20 74 6f 20 73 65 74 20 72 65 67 75 6c 61 74 6f 72 79 20 64 6f 6d 61 69 6e | )..Used.to.set.regulatory.domain |
34860 | 2e 20 53 65 74 20 61 73 20 6e 65 65 64 65 64 20 74 6f 20 69 6e 64 69 63 61 74 65 20 63 6f 75 6e | ..Set.as.needed.to.indicate.coun |
34880 | 74 72 79 20 69 6e 20 77 68 69 63 68 20 64 65 76 69 63 65 20 69 73 20 6f 70 65 72 61 74 69 6e 67 | try.in.which.device.is.operating |
348a0 | 2e 20 54 68 69 73 20 63 61 6e 20 6c 69 6d 69 74 20 61 76 61 69 6c 61 62 6c 65 20 63 68 61 6e 6e | ..This.can.limit.available.chann |
348c0 | 65 6c 73 20 61 6e 64 20 74 72 61 6e 73 6d 69 74 20 70 6f 77 65 72 2e 00 43 72 65 61 74 20 63 6f | els.and.transmit.power..Creat.co |
348e0 | 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 70 6f 6c 69 63 79 20 69 64 65 6e 74 69 66 69 65 64 20 62 | mmunity-list.policy.identified.b |
34900 | 79 20 6e 61 6d 65 20 3c 74 65 78 74 3e 2e 00 43 72 65 61 74 20 65 78 74 63 6f 6d 6d 75 6e 69 74 | y.name.<text>..Creat.extcommunit |
34920 | 79 2d 6c 69 73 74 20 70 6f 6c 69 63 79 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 6e 61 6d 65 | y-list.policy.identified.by.name |
34940 | 20 3c 74 65 78 74 3e 2e 00 43 72 65 61 74 65 20 44 48 43 50 20 61 64 64 72 65 73 73 20 72 61 6e | .<text>..Create.DHCP.address.ran |
34960 | 67 65 20 77 69 74 68 20 61 20 72 61 6e 67 65 20 69 64 20 6f 66 20 60 3c 6e 3e 60 2e 20 44 48 43 | ge.with.a.range.id.of.`<n>`..DHC |
34980 | 50 20 6c 65 61 73 65 73 20 61 72 65 20 74 61 6b 65 6e 20 66 72 6f 6d 20 74 68 69 73 20 70 6f 6f | P.leases.are.taken.from.this.poo |
349a0 | 6c 2e 20 54 68 65 20 70 6f 6f 6c 20 73 74 61 72 74 73 20 61 74 20 61 64 64 72 65 73 73 20 60 3c | l..The.pool.starts.at.address.`< |
349c0 | 61 64 64 72 65 73 73 3e 60 2e 00 43 72 65 61 74 65 20 44 48 43 50 20 61 64 64 72 65 73 73 20 72 | address>`..Create.DHCP.address.r |
349e0 | 61 6e 67 65 20 77 69 74 68 20 61 20 72 61 6e 67 65 20 69 64 20 6f 66 20 60 3c 6e 3e 60 2e 20 44 | ange.with.a.range.id.of.`<n>`..D |
34a00 | 48 43 50 20 6c 65 61 73 65 73 20 61 72 65 20 74 61 6b 65 6e 20 66 72 6f 6d 20 74 68 69 73 20 70 | HCP.leases.are.taken.from.this.p |
34a20 | 6f 6f 6c 2e 20 54 68 65 20 70 6f 6f 6c 20 73 74 6f 70 73 20 77 69 74 68 20 61 64 64 72 65 73 73 | ool..The.pool.stops.with.address |
34a40 | 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 43 72 65 61 74 65 20 44 4e 53 20 72 65 63 6f 72 64 20 | .`<address>`..Create.DNS.record. |
34a60 | 70 65 72 20 63 6c 69 65 6e 74 20 6c 65 61 73 65 2c 20 62 79 20 61 64 64 69 6e 67 20 63 6c 69 65 | per.client.lease,.by.adding.clie |
34a80 | 6e 74 73 20 74 6f 20 2f 65 74 63 2f 68 6f 73 74 73 20 66 69 6c 65 2e 20 45 6e 74 72 79 20 77 69 | nts.to./etc/hosts.file..Entry.wi |
34aa0 | 6c 6c 20 68 61 76 65 20 66 6f 72 6d 61 74 3a 20 60 3c 73 68 61 72 65 64 2d 6e 65 74 77 6f 72 6b | ll.have.format:.`<shared-network |
34ac0 | 2d 6e 61 6d 65 3e 5f 3c 68 6f 73 74 6e 61 6d 65 3e 2e 3c 64 6f 6d 61 69 6e 2d 6e 61 6d 65 3e 60 | -name>_<hostname>.<domain-name>` |
34ae0 | 00 43 72 65 61 74 65 20 60 3c 75 73 65 72 3e 60 20 66 6f 72 20 6c 6f 63 61 6c 20 61 75 74 68 65 | .Create.`<user>`.for.local.authe |
34b00 | 6e 74 69 63 61 74 69 6f 6e 20 6f 6e 20 74 68 69 73 20 73 79 73 74 65 6d 2e 20 54 68 65 20 75 73 | ntication.on.this.system..The.us |
34b20 | 65 72 73 20 70 61 73 73 77 6f 72 64 20 77 69 6c 6c 20 62 65 20 73 65 74 20 74 6f 20 60 3c 70 61 | ers.password.will.be.set.to.`<pa |
34b40 | 73 73 3e 60 2e 00 43 72 65 61 74 65 20 60 60 31 37 32 2e 31 38 2e 32 30 31 2e 30 2f 32 34 60 60 | ss>`..Create.``172.18.201.0/24`` |
34b60 | 20 61 73 20 61 20 73 75 62 6e 65 74 20 77 69 74 68 69 6e 20 60 60 4e 45 54 31 60 60 20 61 6e 64 | .as.a.subnet.within.``NET1``.and |
34b80 | 20 70 61 73 73 20 61 64 64 72 65 73 73 20 6f 66 20 55 6e 69 66 69 20 63 6f 6e 74 72 6f 6c 6c 65 | .pass.address.of.Unifi.controlle |
34ba0 | 72 20 61 74 20 60 60 31 37 32 2e 31 36 2e 31 30 30 2e 31 60 60 20 74 6f 20 63 6c 69 65 6e 74 73 | r.at.``172.16.100.1``.to.clients |
34bc0 | 20 6f 66 20 74 68 61 74 20 73 75 62 6e 65 74 2e 00 43 72 65 61 74 65 20 61 20 62 61 73 69 63 20 | .of.that.subnet..Create.a.basic. |
34be0 | 62 72 69 64 67 65 00 43 72 65 61 74 65 20 61 20 66 69 6c 65 20 6e 61 6d 65 64 20 60 60 56 79 4f | bridge.Create.a.file.named.``VyO |
34c00 | 53 2d 31 2e 33 2e 36 2e 31 2e 34 2e 31 2e 34 34 36 34 31 2e 43 6f 6e 66 69 67 4d 67 6d 74 2d 43 | S-1.3.6.1.4.1.44641.ConfigMgmt-C |
34c20 | 6f 6d 6d 61 6e 64 73 60 60 20 75 73 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f | ommands``.using.the.following.co |
34c40 | 6e 74 65 6e 74 3a 00 43 72 65 61 74 65 20 61 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 72 | ntent:.Create.a.load.balancing.r |
34c60 | 75 6c 65 2c 20 69 74 20 63 61 6e 20 62 65 20 61 20 6e 75 6d 62 65 72 20 62 65 74 77 65 65 6e 20 | ule,.it.can.be.a.number.between. |
34c80 | 31 20 61 6e 64 20 39 39 39 39 3a 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 3a 61 62 62 72 3a 60 | 1.and.9999:.Create.a.new.:abbr:` |
34ca0 | 43 41 20 28 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 29 60 20 61 6e 64 20 | CA.(Certificate.Authority)`.and. |
34cc0 | 6f 75 74 70 75 74 20 74 68 65 20 43 41 73 20 70 75 62 6c 69 63 20 61 6e 64 20 70 72 69 76 61 74 | output.the.CAs.public.and.privat |
34ce0 | 65 20 6b 65 79 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 43 72 65 61 74 65 20 61 20 6e | e.key.on.the.console..Create.a.n |
34d00 | 65 77 20 44 48 43 50 20 73 74 61 74 69 63 20 6d 61 70 70 69 6e 67 20 6e 61 6d 65 64 20 60 3c 64 | ew.DHCP.static.mapping.named.`<d |
34d20 | 65 73 63 72 69 70 74 69 6f 6e 3e 60 20 77 68 69 63 68 20 69 73 20 76 61 6c 69 64 20 66 6f 72 20 | escription>`.which.is.valid.for. |
34d40 | 74 68 65 20 68 6f 73 74 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 69 74 73 20 44 48 43 50 20 | the.host.identified.by.its.DHCP. |
34d60 | 75 6e 69 71 75 65 20 69 64 65 6e 74 69 66 69 65 72 20 28 44 55 49 44 29 20 60 3c 69 64 65 6e 74 | unique.identifier.(DUID).`<ident |
34d80 | 69 66 69 65 72 3e 60 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 44 48 43 50 20 73 74 61 74 69 | ifier>`..Create.a.new.DHCP.stati |
34da0 | 63 20 6d 61 70 70 69 6e 67 20 6e 61 6d 65 64 20 60 3c 64 65 73 63 72 69 70 74 69 6f 6e 3e 60 20 | c.mapping.named.`<description>`. |
34dc0 | 77 68 69 63 68 20 69 73 20 76 61 6c 69 64 20 66 6f 72 20 74 68 65 20 68 6f 73 74 20 69 64 65 6e | which.is.valid.for.the.host.iden |
34de0 | 74 69 66 69 65 64 20 62 79 20 69 74 73 20 4d 41 43 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 43 | tified.by.its.MAC.`<address>`..C |
34e00 | 72 65 61 74 65 20 61 20 6e 65 77 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 69 6e | reate.a.new.VLAN.interface.on.in |
34e20 | 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 75 73 69 6e 67 20 74 68 65 20 | terface.`<interface>`.using.the. |
34e40 | 56 4c 41 4e 20 6e 75 6d 62 65 72 20 70 72 6f 76 69 64 65 64 20 76 69 61 20 60 3c 76 6c 61 6e 2d | VLAN.number.provided.via.`<vlan- |
34e60 | 69 64 3e 60 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 70 75 62 6c 69 63 2f 70 72 69 76 61 74 | id>`..Create.a.new.public/privat |
34e80 | 65 20 6b 65 79 70 61 69 72 20 61 6e 64 20 6f 75 74 70 75 74 20 74 68 65 20 63 65 72 74 69 66 69 | e.keypair.and.output.the.certifi |
34ea0 | 63 61 74 65 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 43 72 65 61 74 65 20 61 20 6e 65 | cate.on.the.console..Create.a.ne |
34ec0 | 77 20 70 75 62 6c 69 63 2f 70 72 69 76 61 74 65 20 6b 65 79 70 61 69 72 20 77 68 69 63 68 20 69 | w.public/private.keypair.which.i |
34ee0 | 73 20 73 69 67 6e 65 64 20 62 79 20 74 68 65 20 43 41 20 72 65 66 65 72 65 6e 63 65 64 20 62 79 | s.signed.by.the.CA.referenced.by |
34f00 | 20 60 63 61 2d 6e 61 6d 65 60 2e 20 54 68 65 20 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 | .`ca-name`..The.signed.certifica |
34f20 | 74 65 20 69 73 20 74 68 65 6e 20 6f 75 74 70 75 74 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 | te.is.then.output.to.the.console |
34f40 | 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 63 65 72 74 69 | ..Create.a.new.self-signed.certi |
34f60 | 66 69 63 61 74 65 2e 20 54 68 65 20 70 75 62 6c 69 63 2f 70 72 69 76 61 74 65 20 69 73 20 74 68 | ficate..The.public/private.is.th |
34f80 | 65 6e 20 73 68 6f 77 6e 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 43 72 65 61 74 65 20 | en.shown.on.the.console..Create. |
34fa0 | 61 20 6e 65 77 20 73 75 62 6f 72 64 69 6e 61 74 65 20 3a 61 62 62 72 3a 60 43 41 20 28 43 65 72 | a.new.subordinate.:abbr:`CA.(Cer |
34fc0 | 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 29 60 20 61 6e 64 20 73 69 67 6e 20 69 74 | tificate.Authority)`.and.sign.it |
34fe0 | 20 75 73 69 6e 67 20 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 72 65 66 65 72 65 6e 63 65 | .using.the.private.key.reference |
35000 | 64 20 62 79 20 60 63 61 2d 6e 61 6d 65 60 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 73 75 62 | d.by.`ca-name`..Create.a.new.sub |
35020 | 6f 72 64 69 6e 61 74 65 20 3a 61 62 62 72 3a 60 43 41 20 28 43 65 72 74 69 66 69 63 61 74 65 20 | ordinate.:abbr:`CA.(Certificate. |
35040 | 41 75 74 68 6f 72 69 74 79 29 60 20 61 6e 64 20 73 69 67 6e 20 69 74 20 75 73 69 6e 67 20 74 68 | Authority)`.and.sign.it.using.th |
35060 | 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 72 65 66 65 72 65 6e 63 65 64 20 62 79 20 60 6e 61 6d | e.private.key.referenced.by.`nam |
35080 | 65 60 2e 00 43 72 65 61 74 65 20 61 20 70 65 65 72 20 61 73 20 79 6f 75 20 77 6f 75 6c 64 20 77 | e`..Create.a.peer.as.you.would.w |
350a0 | 68 65 6e 20 79 6f 75 20 73 70 65 63 69 66 79 20 61 6e 20 41 53 4e 2c 20 65 78 63 65 70 74 20 74 | hen.you.specify.an.ASN,.except.t |
350c0 | 68 61 74 20 69 66 20 74 68 65 20 70 65 65 72 73 20 41 53 4e 20 69 73 20 64 69 66 66 65 72 65 6e | hat.if.the.peers.ASN.is.differen |
350e0 | 74 20 74 68 61 6e 20 6d 69 6e 65 20 61 73 20 73 70 65 63 69 66 69 65 64 20 75 6e 64 65 72 20 74 | t.than.mine.as.specified.under.t |
35100 | 68 65 20 3a 63 66 67 63 6d 64 3a 60 70 72 6f 74 6f 63 6f 6c 73 20 62 67 70 20 3c 61 73 6e 3e 60 | he.:cfgcmd:`protocols.bgp.<asn>` |
35120 | 20 63 6f 6d 6d 61 6e 64 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 | .command.the.connection.will.be. |
35140 | 64 65 6e 69 65 64 2e 00 43 72 65 61 74 65 20 61 20 70 65 65 72 20 61 73 20 79 6f 75 20 77 6f 75 | denied..Create.a.peer.as.you.wou |
35160 | 6c 64 20 77 68 65 6e 20 79 6f 75 20 73 70 65 63 69 66 79 20 61 6e 20 41 53 4e 2c 20 65 78 63 65 | ld.when.you.specify.an.ASN,.exce |
35180 | 70 74 20 74 68 61 74 20 69 66 20 74 68 65 20 70 65 65 72 73 20 41 53 4e 20 69 73 20 74 68 65 20 | pt.that.if.the.peers.ASN.is.the. |
351a0 | 73 61 6d 65 20 61 73 20 6d 69 6e 65 20 61 73 20 73 70 65 63 69 66 69 65 64 20 75 6e 64 65 72 20 | same.as.mine.as.specified.under. |
351c0 | 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 70 72 6f 74 6f 63 6f 6c 73 20 62 67 70 20 3c 61 73 6e 3e | the.:cfgcmd:`protocols.bgp.<asn> |
351e0 | 60 20 63 6f 6d 6d 61 6e 64 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 6c 6c 20 62 65 | `.command.the.connection.will.be |
35200 | 20 64 65 6e 69 65 64 2e 00 43 72 65 61 74 65 20 61 20 73 74 61 74 69 63 20 68 6f 73 74 6e 61 6d | .denied..Create.a.static.hostnam |
35220 | 65 20 6d 61 70 70 69 6e 67 20 77 68 69 63 68 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 72 65 73 6f | e.mapping.which.will.always.reso |
35240 | 6c 76 65 20 74 68 65 20 6e 61 6d 65 20 60 3c 68 6f 73 74 6e 61 6d 65 3e 60 20 74 6f 20 49 50 20 | lve.the.name.`<hostname>`.to.IP. |
35260 | 61 64 64 72 65 73 73 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 43 72 65 61 74 65 20 61 73 2d 70 | address.`<address>`..Create.as-p |
35280 | 61 74 68 2d 70 6f 6c 69 63 79 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 6e 61 6d 65 20 3c 74 | ath-policy.identified.by.name.<t |
352a0 | 65 78 74 3e 2e 00 43 72 65 61 74 65 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 20 69 6e 20 66 6f | ext>..Create.firewall.rule.in.fo |
352c0 | 72 77 61 72 64 20 63 68 61 69 6e 2c 20 61 6e 64 20 64 65 66 69 6e 65 20 77 68 69 63 68 20 66 6c | rward.chain,.and.define.which.fl |
352e0 | 6f 77 74 62 61 6c 65 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 2e 20 4f 6e 6c 79 20 61 70 70 | owtbale.should.be.used..Only.app |
35300 | 6c 69 63 61 62 6c 65 20 69 66 20 61 63 74 69 6f 6e 20 69 73 20 60 60 6f 66 66 6c 6f 61 64 60 60 | licable.if.action.is.``offload`` |
35320 | 2e 00 43 72 65 61 74 65 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 20 69 6e 20 66 6f 72 77 61 72 | ..Create.firewall.rule.in.forwar |
35340 | 64 20 63 68 61 69 6e 2c 20 61 6e 64 20 73 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 60 60 6f 66 66 | d.chain,.and.set.action.to.``off |
35360 | 6c 6f 61 64 60 60 2e 00 43 72 65 61 74 65 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 3a 20 63 72 | load``..Create.firewall.rule:.cr |
35380 | 65 61 74 65 20 61 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 2c 20 73 65 74 74 69 6e 67 20 61 63 | eate.a.firewall.rule,.setting.ac |
353a0 | 74 69 6f 6e 20 74 6f 20 60 60 6f 66 66 6c 6f 61 64 60 60 20 61 6e 64 20 75 73 69 6e 67 20 64 65 | tion.to.``offload``.and.using.de |
353c0 | 73 69 72 65 64 20 66 6c 6f 77 74 61 62 6c 65 20 66 6f 72 20 60 60 6f 66 66 6c 6f 61 64 2d 74 61 | sired.flowtable.for.``offload-ta |
353e0 | 72 67 65 74 60 60 2e 00 43 72 65 61 74 65 20 66 6c 6f 77 74 61 62 6c 65 3a 20 63 72 65 61 74 65 | rget``..Create.flowtable:.create |
35400 | 20 66 6c 6f 77 74 61 62 6c 65 2c 20 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 69 | .flowtable,.which.includes.the.i |
35420 | 6e 74 65 72 66 61 63 65 73 20 74 68 61 74 20 61 72 65 20 67 6f 69 6e 67 20 74 6f 20 62 65 20 75 | nterfaces.that.are.going.to.be.u |
35440 | 73 65 64 20 62 79 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 2e 00 43 72 65 61 74 65 20 6c 61 72 | sed.by.the.flowtable..Create.lar |
35460 | 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 70 6f 6c 69 63 79 20 69 64 65 6e 74 69 66 | ge-community-list.policy.identif |
35480 | 69 65 64 20 62 79 20 6e 61 6d 65 20 3c 74 65 78 74 3e 2e 00 43 72 65 61 74 65 20 6e 61 6d 65 64 | ied.by.name.<text>..Create.named |
354a0 | 20 60 3c 61 6c 69 61 73 3e 60 20 66 6f 72 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 73 74 | .`<alias>`.for.the.configured.st |
354c0 | 61 74 69 63 20 6d 61 70 70 69 6e 67 20 66 6f 72 20 60 3c 68 6f 73 74 6e 61 6d 65 3e 60 2e 20 54 | atic.mapping.for.`<hostname>`..T |
354e0 | 68 75 73 20 74 68 65 20 61 64 64 72 65 73 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 3a 63 | hus.the.address.configured.as.:c |
35500 | 66 67 63 6d 64 3a 60 73 65 74 20 73 79 73 74 65 6d 20 73 74 61 74 69 63 2d 68 6f 73 74 2d 6d 61 | fgcmd:`set.system.static-host-ma |
35520 | 70 70 69 6e 67 20 68 6f 73 74 2d 6e 61 6d 65 20 3c 68 6f 73 74 6e 61 6d 65 3e 20 69 6e 65 74 20 | pping.host-name.<hostname>.inet. |
35540 | 3c 61 64 64 72 65 73 73 3e 60 20 63 61 6e 20 62 65 20 72 65 61 63 68 65 64 20 76 69 61 20 6d 75 | <address>`.can.be.reached.via.mu |
35560 | 6c 74 69 70 6c 65 20 6e 61 6d 65 73 2e 00 43 72 65 61 74 65 20 6e 65 77 20 3a 72 66 63 3a 60 32 | ltiple.names..Create.new.:rfc:`2 |
35580 | 31 33 36 60 20 44 4e 53 20 75 70 64 61 74 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 68 | 136`.DNS.update.configuration.wh |
355a0 | 69 63 68 20 77 69 6c 6c 20 75 70 64 61 74 65 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 61 | ich.will.update.the.IP.address.a |
355c0 | 73 73 69 67 6e 65 64 20 74 6f 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 6f 6e 20 74 68 65 20 | ssigned.to.`<interface>`.on.the. |
355e0 | 73 65 72 76 69 63 65 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 64 20 75 6e 64 65 72 20 60 3c 73 | service.you.configured.under.`<s |
35600 | 65 72 76 69 63 65 2d 6e 61 6d 65 3e 60 2e 00 43 72 65 61 74 65 20 6e 65 77 20 56 52 46 20 69 6e | ervice-name>`..Create.new.VRF.in |
35620 | 73 74 61 6e 63 65 20 77 69 74 68 20 60 3c 6e 61 6d 65 3e 60 2e 20 54 68 65 20 6e 61 6d 65 20 69 | stance.with.`<name>`..The.name.i |
35640 | 73 20 75 73 65 64 20 77 68 65 6e 20 70 6c 61 63 69 6e 67 20 69 6e 64 69 76 69 64 75 61 6c 20 69 | s.used.when.placing.individual.i |
35660 | 6e 74 65 72 66 61 63 65 73 20 69 6e 74 6f 20 74 68 65 20 56 52 46 2e 00 43 72 65 61 74 65 20 6e | nterfaces.into.the.VRF..Create.n |
35680 | 65 77 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 75 70 64 61 74 65 20 63 6f 6e 66 69 67 75 72 61 74 | ew.dynamic.DNS.update.configurat |
356a0 | 69 6f 6e 20 77 68 69 63 68 20 77 69 6c 6c 20 75 70 64 61 74 65 20 74 68 65 20 49 50 20 61 64 64 | ion.which.will.update.the.IP.add |
356c0 | 72 65 73 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 6f | ress.assigned.to.`<interface>`.o |
356e0 | 6e 20 74 68 65 20 73 65 72 76 69 63 65 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 64 20 75 6e 64 | n.the.service.you.configured.und |
35700 | 65 72 20 60 3c 73 65 72 76 69 63 65 2d 6e 61 6d 65 3e 60 2e 00 43 72 65 61 74 65 20 6e 65 77 20 | er.`<service-name>`..Create.new. |
35720 | 73 79 73 74 65 6d 20 75 73 65 72 20 77 69 74 68 20 75 73 65 72 6e 61 6d 65 20 60 3c 6e 61 6d 65 | system.user.with.username.`<name |
35740 | 3e 60 20 61 6e 64 20 72 65 61 6c 2d 6e 61 6d 65 20 73 70 65 63 69 66 69 65 64 20 62 79 20 60 3c | >`.and.real-name.specified.by.`< |
35760 | 73 74 72 69 6e 67 3e 60 2e 00 43 72 65 61 74 65 20 73 65 72 76 69 63 65 20 60 3c 6e 61 6d 65 3e | string>`..Create.service.`<name> |
35780 | 60 20 74 6f 20 6c 69 73 74 65 6e 20 6f 6e 20 3c 70 6f 72 74 3e 00 43 72 65 61 74 65 73 20 61 20 | `.to.listen.on.<port>.Creates.a. |
357a0 | 6e 61 6d 65 64 20 63 6f 6e 74 61 69 6e 65 72 20 6e 65 74 77 6f 72 6b 00 43 72 65 61 74 65 73 20 | named.container.network.Creates. |
357c0 | 6c 6f 63 61 6c 20 49 50 6f 45 20 75 73 65 72 20 77 69 74 68 20 75 73 65 72 6e 61 6d 65 3d 2a 2a | local.IPoE.user.with.username=** |
357e0 | 3c 69 6e 74 65 72 66 61 63 65 3e 2a 2a 20 61 6e 64 20 70 61 73 73 77 6f 72 64 3d 2a 2a 3c 4d 41 | <interface>**.and.password=**<MA |
35800 | 43 3e 2a 2a 20 28 6d 61 63 2d 61 64 64 72 65 73 73 29 00 43 72 65 61 74 65 73 20 73 74 61 74 69 | C>**.(mac-address).Creates.stati |
35820 | 63 20 70 65 65 72 20 6d 61 70 70 69 6e 67 20 6f 66 20 70 72 6f 74 6f 63 6f 6c 2d 61 64 64 72 65 | c.peer.mapping.of.protocol-addre |
35840 | 73 73 20 74 6f 20 3a 61 62 62 72 3a 60 4e 42 4d 41 20 28 4e 6f 6e 2d 62 72 6f 61 64 63 61 73 74 | ss.to.:abbr:`NBMA.(Non-broadcast |
35860 | 20 6d 75 6c 74 69 70 6c 65 2d 61 63 63 65 73 73 20 6e 65 74 77 6f 72 6b 29 60 20 61 64 64 72 65 | .multiple-access.network)`.addre |
35880 | 73 73 2e 00 43 72 65 61 74 69 6e 67 20 61 20 62 72 69 64 67 65 20 69 6e 74 65 72 66 61 63 65 20 | ss..Creating.a.bridge.interface. |
358a0 | 69 73 20 76 65 72 79 20 73 69 6d 70 6c 65 2e 20 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 2c | is.very.simple..In.this.example, |
358c0 | 20 77 65 20 77 69 6c 6c 20 68 61 76 65 3a 00 43 72 65 61 74 69 6e 67 20 61 20 66 6c 6f 77 20 74 | .we.will.have:.Creating.a.flow.t |
358e0 | 61 62 6c 65 3a 00 43 72 65 61 74 69 6e 67 20 61 20 74 72 61 66 66 69 63 20 70 6f 6c 69 63 79 00 | able:.Creating.a.traffic.policy. |
35900 | 43 72 65 61 74 69 6e 67 20 72 75 6c 65 73 20 66 6f 72 20 75 73 69 6e 67 20 66 6c 6f 77 20 74 61 | Creating.rules.for.using.flow.ta |
35920 | 62 6c 65 73 3a 00 43 72 65 64 65 6e 74 69 61 6c 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 | bles:.Credentials.can.be.defined |
35940 | 20 68 65 72 65 20 61 6e 64 20 77 69 6c 6c 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 77 68 65 6e | .here.and.will.only.be.used.when |
35960 | 20 61 64 64 69 6e 67 20 61 20 63 6f 6e 74 61 69 6e 65 72 20 69 6d 61 67 65 20 74 6f 20 74 68 65 | .adding.a.container.image.to.the |
35980 | 20 73 79 73 74 65 6d 2e 00 43 72 69 74 69 63 61 6c 00 43 72 69 74 69 63 61 6c 20 63 6f 6e 64 69 | .system..Critical.Critical.condi |
359a0 | 74 69 6f 6e 73 20 2d 20 65 2e 67 2e 20 68 61 72 64 20 64 72 69 76 65 20 65 72 72 6f 72 73 2e 00 | tions.-.e.g..hard.drive.errors.. |
359c0 | 43 72 79 73 74 61 6c 66 6f 6e 74 7a 20 43 46 41 2d 35 33 33 00 43 72 79 73 74 61 6c 66 6f 6e 74 | Crystalfontz.CFA-533.Crystalfont |
359e0 | 7a 20 43 46 41 2d 36 33 31 00 43 72 79 73 74 61 6c 66 6f 6e 74 7a 20 43 46 41 2d 36 33 33 00 43 | z.CFA-631.Crystalfontz.CFA-633.C |
35a00 | 72 79 73 74 61 6c 66 6f 6e 74 7a 20 43 46 41 2d 36 33 35 00 43 75 72 20 48 6f 70 20 4c 69 6d 69 | rystalfontz.CFA-635.Cur.Hop.Limi |
35a20 | 74 00 43 75 72 72 65 6e 74 6c 79 20 64 6f 65 73 20 6e 6f 74 20 64 6f 20 6d 75 63 68 20 61 73 20 | t.Currently.does.not.do.much.as. |
35a40 | 63 61 63 68 69 6e 67 20 69 73 20 6e 6f 74 20 69 6d 70 6c 65 6d 65 6e 74 65 64 2e 00 43 75 72 72 | caching.is.not.implemented..Curr |
35a60 | 65 6e 74 6c 79 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 69 73 20 73 75 70 70 6f 72 74 | ently.dynamic.routing.is.support |
35a80 | 65 64 20 66 6f 72 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 3a 00 | ed.for.the.following.protocols:. |
35aa0 | 43 75 73 74 6f 6d 20 46 69 6c 65 00 43 75 73 74 6f 6d 20 62 72 69 64 67 65 20 66 69 72 65 77 61 | Custom.File.Custom.bridge.firewa |
35ac0 | 6c 6c 20 63 68 61 69 6e 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 20 77 69 74 68 20 63 6f 6d | ll.chains.can.be.create.with.com |
35ae0 | 6d 61 6e 64 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 62 72 69 64 67 65 20 6e 61 6d 65 20 | mand.``set.firewall.bridge.name. |
35b00 | 3c 6e 61 6d 65 3e 20 2e 2e 2e 60 60 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 73 75 | <name>....``..In.order.to.use.su |
35b20 | 63 68 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2c 20 61 20 72 75 6c 65 20 77 69 74 68 20 61 63 74 | ch.custom.chain,.a.rule.with.act |
35b40 | 69 6f 6e 20 6a 75 6d 70 2c 20 61 6e 64 20 74 68 65 20 61 70 70 72 6f 70 69 61 74 65 20 74 61 72 | ion.jump,.and.the.appropiate.tar |
35b60 | 67 65 74 20 73 68 6f 75 6c 64 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 61 20 62 61 73 65 20 | get.should.be.defined.in.a.base. |
35b80 | 63 68 61 69 6e 2e 00 43 75 73 74 6f 6d 20 66 69 72 65 77 61 6c 6c 20 63 68 61 69 6e 73 20 63 61 | chain..Custom.firewall.chains.ca |
35ba0 | 6e 20 62 65 20 63 72 65 61 74 65 64 2c 20 77 69 74 68 20 63 6f 6d 6d 61 6e 64 73 20 60 60 73 65 | n.be.created,.with.commands.``se |
35bc0 | 74 20 66 69 72 65 77 61 6c 6c 20 5b 69 70 76 34 20 7c 20 69 70 76 36 5d 20 5b 6e 61 6d 65 20 7c | t.firewall.[ipv4.|.ipv6].[name.| |
35be0 | 20 69 70 76 36 2d 6e 61 6d 65 5d 20 3c 6e 61 6d 65 3e 20 2e 2e 2e 60 60 2e 20 49 6e 20 6f 72 64 | .ipv6-name].<name>....``..In.ord |
35c00 | 65 72 20 74 6f 20 75 73 65 20 73 75 63 68 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2c 20 61 20 72 | er.to.use.such.custom.chain,.a.r |
35c20 | 75 6c 65 20 77 69 74 68 20 2a 2a 61 63 74 69 6f 6e 20 6a 75 6d 70 2a 2a 2c 20 61 6e 64 20 74 68 | ule.with.**action.jump**,.and.th |
35c40 | 65 20 61 70 70 72 6f 70 69 61 74 65 20 2a 2a 74 61 72 67 65 74 2a 2a 20 73 68 6f 75 6c 64 20 62 | e.appropiate.**target**.should.b |
35c60 | 65 20 64 65 66 69 6e 65 64 20 69 6e 20 61 20 62 61 73 65 20 63 68 61 69 6e 2e 00 43 75 73 74 6f | e.defined.in.a.base.chain..Custo |
35c80 | 6d 20 66 69 72 65 77 61 6c 6c 20 63 68 61 69 6e 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 | m.firewall.chains.can.be.created |
35ca0 | 2c 20 77 69 74 68 20 63 6f 6d 6d 61 6e 64 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 | ,.with.commands.``set.firewall.i |
35cc0 | 70 76 34 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 2e 2e 2e 60 60 2e 20 49 6e 20 6f 72 64 65 72 20 | pv4.name.<name>....``..In.order. |
35ce0 | 74 6f 20 75 73 65 20 73 75 63 68 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2c 20 61 20 72 75 6c 65 | to.use.such.custom.chain,.a.rule |
35d00 | 20 77 69 74 68 20 2a 2a 61 63 74 69 6f 6e 20 6a 75 6d 70 2a 2a 2c 20 61 6e 64 20 74 68 65 20 61 | .with.**action.jump**,.and.the.a |
35d20 | 70 70 72 6f 70 69 61 74 65 20 2a 2a 74 61 72 67 65 74 2a 2a 20 73 68 6f 75 6c 64 20 62 65 20 64 | ppropiate.**target**.should.be.d |
35d40 | 65 66 69 6e 65 64 20 69 6e 20 61 20 62 61 73 65 20 63 68 61 69 6e 2e 00 43 75 73 74 6f 6d 20 66 | efined.in.a.base.chain..Custom.f |
35d60 | 69 72 65 77 61 6c 6c 20 63 68 61 69 6e 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 2c 20 77 | irewall.chains.can.be.created,.w |
35d80 | 69 74 68 20 63 6f 6d 6d 61 6e 64 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 | ith.commands.``set.firewall.ipv6 |
35da0 | 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 2e 2e 2e 60 60 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 | .name.<name>....``..In.order.to. |
35dc0 | 75 73 65 20 73 75 63 68 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2c 20 61 20 72 75 6c 65 20 77 69 | use.such.custom.chain,.a.rule.wi |
35de0 | 74 68 20 2a 2a 61 63 74 69 6f 6e 20 6a 75 6d 70 2a 2a 2c 20 61 6e 64 20 74 68 65 20 61 70 70 72 | th.**action.jump**,.and.the.appr |
35e00 | 6f 70 69 61 74 65 20 2a 2a 74 61 72 67 65 74 2a 2a 20 73 68 6f 75 6c 64 20 62 65 20 64 65 66 69 | opiate.**target**.should.be.defi |
35e20 | 6e 65 64 20 69 6e 20 61 20 62 61 73 65 20 63 68 61 69 6e 2e 00 43 75 73 74 6f 6d 20 68 65 61 6c | ned.in.a.base.chain..Custom.heal |
35e40 | 74 68 2d 63 68 65 63 6b 20 73 63 72 69 70 74 20 61 6c 6c 6f 77 73 20 63 68 65 63 6b 69 6e 67 20 | th-check.script.allows.checking. |
35e60 | 72 65 61 6c 2d 73 65 72 76 65 72 20 61 76 61 69 6c 61 62 69 6c 69 74 79 00 43 75 73 74 6f 6d 69 | real-server.availability.Customi |
35e80 | 7a 65 64 20 69 67 6e 6f 72 65 20 72 75 6c 65 73 2c 20 62 61 73 65 64 20 6f 6e 20 61 20 70 61 63 | zed.ignore.rules,.based.on.a.pac |
35ea0 | 6b 65 74 20 61 6e 64 20 66 6c 6f 77 20 73 65 6c 65 63 74 6f 72 2e 00 44 43 4f 20 63 61 6e 20 62 | ket.and.flow.selector..DCO.can.b |
35ec0 | 65 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 62 6f 74 68 20 6e 65 77 20 61 6e 64 20 65 78 69 73 74 | e.enabled.for.both.new.and.exist |
35ee0 | 69 6e 67 20 74 75 6e 6e 65 6c 73 2c 56 79 4f 53 20 61 64 64 73 20 61 6e 20 6f 70 74 69 6f 6e 20 | ing.tunnels,VyOS.adds.an.option. |
35f00 | 69 6e 20 65 61 63 68 20 74 75 6e 6e 65 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 68 65 | in.each.tunnel.configuration.whe |
35f20 | 72 65 20 77 65 20 63 61 6e 20 65 6e 61 62 6c 65 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 20 | re.we.can.enable.this.function.. |
35f40 | 2e 54 68 65 20 63 75 72 72 65 6e 74 20 62 65 73 74 20 70 72 61 63 74 69 63 65 20 69 73 20 74 6f | .The.current.best.practice.is.to |
35f60 | 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 74 75 6e 6e 65 6c 20 77 69 74 68 20 44 43 4f 20 74 6f | .create.a.new.tunnel.with.DCO.to |
35f80 | 20 6d 69 6e 69 6d 69 7a 65 20 74 68 65 20 63 68 61 6e 63 65 20 6f 66 20 70 72 6f 62 6c 65 6d 73 | .minimize.the.chance.of.problems |
35fa0 | 20 77 69 74 68 20 65 78 69 73 74 69 6e 67 20 63 6c 69 65 6e 74 73 2e 00 44 43 4f 20 73 75 70 70 | .with.existing.clients..DCO.supp |
35fc0 | 6f 72 74 20 69 73 20 61 20 70 65 72 2d 74 75 6e 6e 65 6c 20 6f 70 74 69 6f 6e 20 61 6e 64 20 69 | ort.is.a.per-tunnel.option.and.i |
35fe0 | 74 20 69 73 20 6e 6f 74 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 65 6e 61 62 6c 65 64 20 62 | t.is.not.automatically.enabled.b |
36000 | 79 20 64 65 66 61 75 6c 74 20 66 6f 72 20 6e 65 77 20 6f 72 20 75 70 67 72 61 64 65 64 20 74 75 | y.default.for.new.or.upgraded.tu |
36020 | 6e 6e 65 6c 73 2e 20 45 78 69 73 74 69 6e 67 20 74 75 6e 6e 65 6c 73 20 77 69 6c 6c 20 63 6f 6e | nnels..Existing.tunnels.will.con |
36040 | 74 69 6e 75 65 20 74 6f 20 66 75 6e 63 74 69 6f 6e 20 61 73 20 74 68 65 79 20 68 61 76 65 20 69 | tinue.to.function.as.they.have.i |
36060 | 6e 20 74 68 65 20 70 61 73 74 2e 00 44 44 6f 53 20 50 72 6f 74 65 63 74 69 6f 6e 00 44 48 20 47 | n.the.past..DDoS.Protection.DH.G |
36080 | 72 6f 75 70 20 31 34 00 44 48 43 50 20 48 69 67 68 20 41 76 61 69 6c 61 62 69 6c 69 74 79 20 6d | roup.14.DHCP.High.Availability.m |
360a0 | 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 65 78 70 6c 69 63 69 74 6c 79 20 62 79 20 | ust.be.configured.explicitly.by. |
360c0 | 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 74 61 74 65 6d 65 6e 74 73 20 6f 6e 20 62 6f 74 68 | the.following.statements.on.both |
360e0 | 20 73 65 72 76 65 72 73 3a 00 44 48 43 50 20 52 65 6c 61 79 00 44 48 43 50 20 53 65 72 76 65 72 | .servers:.DHCP.Relay.DHCP.Server |
36100 | 00 44 48 43 50 20 66 61 69 6c 6f 76 65 72 20 70 61 72 61 6d 65 74 65 72 73 00 44 48 43 50 20 6c | .DHCP.failover.parameters.DHCP.l |
36120 | 65 61 73 65 20 72 61 6e 67 65 00 44 48 43 50 20 72 61 6e 67 65 20 73 70 61 6e 73 20 66 72 6f 6d | ease.range.DHCP.range.spans.from |
36140 | 20 60 31 39 32 2e 31 36 38 2e 31 38 39 2e 31 30 60 20 2d 20 60 31 39 32 2e 31 36 38 2e 31 38 39 | .`192.168.189.10`.-.`192.168.189 |
36160 | 2e 32 35 30 60 00 44 48 43 50 20 72 65 6c 61 79 20 65 78 61 6d 70 6c 65 00 44 48 43 50 20 73 65 | .250`.DHCP.relay.example.DHCP.se |
36180 | 72 76 65 72 20 69 73 20 6c 6f 63 61 74 65 64 20 61 74 20 49 50 76 34 20 61 64 64 72 65 73 73 20 | rver.is.located.at.IPv4.address. |
361a0 | 31 30 2e 30 2e 31 2e 34 20 6f 6e 20 60 60 65 74 68 32 60 60 2e 00 44 48 43 50 76 36 20 61 64 64 | 10.0.1.4.on.``eth2``..DHCPv6.add |
361c0 | 72 65 73 73 20 70 6f 6f 6c 73 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f | ress.pools.must.be.configured.fo |
361e0 | 72 20 74 68 65 20 73 79 73 74 65 6d 20 74 6f 20 61 63 74 20 61 73 20 61 20 44 48 43 50 76 36 20 | r.the.system.to.act.as.a.DHCPv6. |
36200 | 73 65 72 76 65 72 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 64 65 | server..The.following.example.de |
36220 | 73 63 72 69 62 65 73 20 61 20 63 6f 6d 6d 6f 6e 20 73 63 65 6e 61 72 69 6f 2e 00 44 48 43 50 76 | scribes.a.common.scenario..DHCPv |
36240 | 36 20 72 65 6c 61 79 20 65 78 61 6d 70 6c 65 00 44 48 43 50 76 36 20 72 65 71 75 65 73 74 73 20 | 6.relay.example.DHCPv6.requests. |
36260 | 61 72 65 20 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 6f 6e 20 60 6c | are.received.by.the.router.on.`l |
36280 | 69 73 74 65 6e 69 6e 67 20 69 6e 74 65 72 66 61 63 65 60 20 60 60 65 74 68 31 60 60 00 44 4d 56 | istening.interface`.``eth1``.DMV |
362a0 | 50 4e 00 44 4d 56 50 4e 20 65 78 61 6d 70 6c 65 20 6e 65 74 77 6f 72 6b 00 44 4d 56 50 4e 20 6e | PN.DMVPN.example.network.DMVPN.n |
362c0 | 65 74 77 6f 72 6b 00 44 4d 56 50 4e 20 6f 6e 6c 79 20 61 75 74 6f 6d 61 74 65 73 20 74 68 65 20 | etwork.DMVPN.only.automates.the. |
362e0 | 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 20 64 69 73 63 6f 76 65 72 79 20 61 6e 64 20 73 65 | tunnel.endpoint.discovery.and.se |
36300 | 74 75 70 2e 20 41 20 63 6f 6d 70 6c 65 74 65 20 73 6f 6c 75 74 69 6f 6e 20 61 6c 73 6f 20 69 6e | tup..A.complete.solution.also.in |
36320 | 63 6f 72 70 6f 72 61 74 65 73 20 74 68 65 20 75 73 65 20 6f 66 20 61 20 72 6f 75 74 69 6e 67 20 | corporates.the.use.of.a.routing. |
36340 | 70 72 6f 74 6f 63 6f 6c 2e 20 42 47 50 20 69 73 20 70 61 72 74 69 63 75 6c 61 72 6c 79 20 77 65 | protocol..BGP.is.particularly.we |
36360 | 6c 6c 20 73 75 69 74 65 64 20 66 6f 72 20 75 73 65 20 77 69 74 68 20 44 4d 56 50 4e 2e 00 44 4e | ll.suited.for.use.with.DMVPN..DN |
36380 | 41 54 00 44 4e 41 54 20 69 73 20 74 79 70 69 63 61 6c 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f | AT.DNAT.is.typically.referred.to |
363a0 | 20 61 73 20 61 20 2a 2a 50 6f 72 74 20 46 6f 72 77 61 72 64 2a 2a 2e 20 57 68 65 6e 20 75 73 69 | .as.a.**Port.Forward**..When.usi |
363c0 | 6e 67 20 56 79 4f 53 20 61 73 20 61 20 4e 41 54 20 72 6f 75 74 65 72 20 61 6e 64 20 66 69 72 65 | ng.VyOS.as.a.NAT.router.and.fire |
363e0 | 77 61 6c 6c 2c 20 61 20 63 6f 6d 6d 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 61 73 | wall,.a.common.configuration.tas |
36400 | 6b 20 69 73 20 74 6f 20 72 65 64 69 72 65 63 74 20 69 6e 63 6f 6d 69 6e 67 20 74 72 61 66 66 69 | k.is.to.redirect.incoming.traffi |
36420 | 63 20 74 6f 20 61 20 73 79 73 74 65 6d 20 62 65 68 69 6e 64 20 74 68 65 20 66 69 72 65 77 61 6c | c.to.a.system.behind.the.firewal |
36440 | 6c 2e 00 44 4e 41 54 20 72 75 6c 65 20 31 30 20 72 65 70 6c 61 63 65 73 20 74 68 65 20 64 65 73 | l..DNAT.rule.10.replaces.the.des |
36460 | 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6f 66 20 61 6e 20 69 6e 62 6f 75 6e 64 20 70 | tination.address.of.an.inbound.p |
36480 | 61 63 6b 65 74 20 77 69 74 68 20 31 39 32 2e 30 2e 32 2e 31 30 00 44 4e 41 54 36 36 00 44 4e 53 | acket.with.192.0.2.10.DNAT66.DNS |
364a0 | 20 46 6f 72 77 61 72 64 69 6e 67 00 44 4e 53 20 6e 61 6d 65 20 73 65 72 76 65 72 73 00 44 4e 53 | .Forwarding.DNS.name.servers.DNS |
364c0 | 20 73 65 61 72 63 68 20 6c 69 73 74 20 74 6f 20 61 64 76 65 72 74 69 73 65 00 44 4e 53 20 73 65 | .search.list.to.advertise.DNS.se |
364e0 | 72 76 65 72 20 49 50 76 34 20 61 64 64 72 65 73 73 00 44 4e 53 20 73 65 72 76 65 72 20 69 73 20 | rver.IPv4.address.DNS.server.is. |
36500 | 6c 6f 63 61 74 65 64 20 61 74 20 60 60 32 30 30 31 3a 64 62 38 3a 3a 66 66 66 66 60 60 00 44 4e | located.at.``2001:db8::ffff``.DN |
36520 | 53 53 4c 00 44 53 43 50 20 76 61 6c 75 65 73 20 61 73 20 70 65 72 20 3a 72 66 63 3a 60 32 34 37 | SSL.DSCP.values.as.per.:rfc:`247 |
36540 | 34 60 20 61 6e 64 20 3a 72 66 63 3a 60 34 35 39 35 60 3a 00 44 53 53 53 2f 43 43 4b 20 4d 6f 64 | 4`.and.:rfc:`4595`:.DSSS/CCK.Mod |
36560 | 65 20 69 6e 20 34 30 20 4d 48 7a 2c 20 74 68 69 73 20 73 65 74 73 20 60 60 5b 44 53 53 53 5f 43 | e.in.40.MHz,.this.sets.``[DSSS_C |
36580 | 43 4b 2d 34 30 5d 60 60 00 44 61 74 61 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 44 42 2d | CK-40]``.Data.is.provided.by.DB- |
365a0 | 49 50 2e 63 6f 6d 20 75 6e 64 65 72 20 43 43 2d 42 59 2d 34 2e 30 20 6c 69 63 65 6e 73 65 2e 20 | IP.com.under.CC-BY-4.0.license.. |
365c0 | 41 74 74 72 69 62 75 74 69 6f 6e 20 72 65 71 75 69 72 65 64 2c 20 70 65 72 6d 69 74 73 20 72 65 | Attribution.required,.permits.re |
365e0 | 64 69 73 74 72 69 62 75 74 69 6f 6e 20 73 6f 20 77 65 20 63 61 6e 20 69 6e 63 6c 75 64 65 20 61 | distribution.so.we.can.include.a |
36600 | 20 64 61 74 61 62 61 73 65 20 69 6e 20 69 6d 61 67 65 73 28 7e 33 4d 42 20 63 6f 6d 70 72 65 73 | .database.in.images(~3MB.compres |
36620 | 73 65 64 29 2e 20 49 6e 63 6c 75 64 65 73 20 63 72 6f 6e 20 73 63 72 69 70 74 20 28 6d 61 6e 75 | sed)..Includes.cron.script.(manu |
36640 | 61 6c 6c 79 20 63 61 6c 6c 61 62 6c 65 20 62 79 20 6f 70 2d 6d 6f 64 65 20 75 70 64 61 74 65 20 | ally.callable.by.op-mode.update. |
36660 | 67 65 6f 69 70 29 20 74 6f 20 6b 65 65 70 20 64 61 74 61 62 61 73 65 20 61 6e 64 20 72 75 6c 65 | geoip).to.keep.database.and.rule |
36680 | 73 20 75 70 64 61 74 65 64 2e 00 44 65 62 75 67 00 44 65 62 75 67 2d 6c 65 76 65 6c 20 6d 65 73 | s.updated..Debug.Debug-level.mes |
366a0 | 73 61 67 65 73 20 2d 20 4d 65 73 73 61 67 65 73 20 74 68 61 74 20 63 6f 6e 74 61 69 6e 20 69 6e | sages.-.Messages.that.contain.in |
366c0 | 66 6f 72 6d 61 74 69 6f 6e 20 6e 6f 72 6d 61 6c 6c 79 20 6f 66 20 75 73 65 20 6f 6e 6c 79 20 77 | formation.normally.of.use.only.w |
366e0 | 68 65 6e 20 64 65 62 75 67 67 69 6e 67 20 61 20 70 72 6f 67 72 61 6d 2e 00 44 65 66 61 75 6c 74 | hen.debugging.a.program..Default |
36700 | 00 44 65 66 61 75 6c 74 20 31 2e 00 44 65 66 61 75 6c 74 20 47 61 74 65 77 61 79 2f 52 6f 75 74 | .Default.1..Default.Gateway/Rout |
36720 | 65 00 44 65 66 61 75 6c 74 20 52 6f 75 74 65 72 20 50 72 65 66 65 72 65 6e 63 65 00 44 65 66 61 | e.Default.Router.Preference.Defa |
36740 | 75 6c 74 20 62 65 68 61 76 69 6f 72 20 2d 20 64 6f 6e 27 74 20 61 73 6b 20 63 6c 69 65 6e 74 20 | ult.behavior.-.don't.ask.client. |
36760 | 66 6f 72 20 6d 70 70 65 2c 20 62 75 74 20 61 6c 6c 6f 77 20 69 74 20 69 66 20 63 6c 69 65 6e 74 | for.mppe,.but.allow.it.if.client |
36780 | 20 77 61 6e 74 73 2e 20 50 6c 65 61 73 65 20 6e 6f 74 65 20 74 68 61 74 20 52 41 44 49 55 53 20 | .wants..Please.note.that.RADIUS. |
367a0 | 6d 61 79 20 6f 76 65 72 72 69 64 65 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 62 79 20 4d 53 2d 4d | may.override.this.option.by.MS-M |
367c0 | 50 50 45 2d 45 6e 63 72 79 70 74 69 6f 6e 2d 50 6f 6c 69 63 79 20 61 74 74 72 69 62 75 74 65 2e | PPE-Encryption-Policy.attribute. |
367e0 | 00 44 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 61 6e 64 20 44 4e 53 20 73 65 72 76 65 72 20 | .Default.gateway.and.DNS.server. |
36800 | 69 73 20 61 74 20 60 31 39 32 2e 30 2e 32 2e 32 35 34 60 00 44 65 66 61 75 6c 74 20 69 73 20 35 | is.at.`192.0.2.254`.Default.is.5 |
36820 | 31 32 20 4d 42 2e 20 55 73 65 20 30 20 4d 42 20 66 6f 72 20 75 6e 6c 69 6d 69 74 65 64 20 6d 65 | 12.MB..Use.0.MB.for.unlimited.me |
36840 | 6d 6f 72 79 2e 00 44 65 66 61 75 6c 74 20 69 73 20 60 60 61 6e 79 2d 61 76 61 69 6c 61 62 6c 65 | mory..Default.is.``any-available |
36860 | 60 60 2e 00 44 65 66 61 75 6c 74 20 69 73 20 60 60 69 63 6d 70 60 60 2e 00 44 65 66 61 75 6c 74 | ``..Default.is.``icmp``..Default |
36880 | 20 69 73 20 74 6f 20 64 65 74 65 63 74 73 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 20 73 74 61 | .is.to.detects.physical.link.sta |
368a0 | 74 65 20 63 68 61 6e 67 65 73 2e 00 44 65 66 61 75 6c 74 20 70 6f 72 74 20 69 73 20 33 31 32 38 | te.changes..Default.port.is.3128 |
368c0 | 2e 00 44 65 66 61 75 6c 74 3a 20 31 00 44 65 66 61 75 6c 74 3a 20 34 34 33 00 44 65 66 61 75 6c | ..Default:.1.Default:.443.Defaul |
368e0 | 74 73 20 74 6f 20 27 75 69 64 27 00 44 65 66 61 75 6c 74 73 20 74 6f 20 32 32 35 2e 30 2e 30 2e | ts.to.'uid'.Defaults.to.225.0.0. |
36900 | 35 30 2e 00 44 65 66 61 75 6c 74 73 20 74 6f 20 60 60 75 73 60 60 2e 00 44 65 66 69 6e 65 20 43 | 50..Defaults.to.``us``..Define.C |
36920 | 6f 6e 65 63 74 69 6f 6e 20 54 69 6d 65 6f 75 74 73 00 44 65 66 69 6e 65 20 49 50 76 34 20 6f 72 | onection.Timeouts.Define.IPv4.or |
36940 | 20 49 50 76 36 20 70 72 65 66 69 78 20 66 6f 72 20 61 20 67 69 76 65 6e 20 6e 65 74 77 6f 72 6b | .IPv6.prefix.for.a.given.network |
36960 | 20 6e 61 6d 65 2e 20 4f 6e 6c 79 20 6f 6e 65 20 49 50 76 34 20 61 6e 64 20 6f 6e 65 20 49 50 76 | .name..Only.one.IPv4.and.one.IPv |
36980 | 36 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 75 73 65 64 20 70 65 72 20 6e 65 74 77 6f 72 6b | 6.prefix.can.be.used.per.network |
369a0 | 20 6e 61 6d 65 2e 00 44 65 66 69 6e 65 20 49 50 76 34 2f 49 50 76 36 20 6d 61 6e 61 67 65 6d 65 | .name..Define.IPv4/IPv6.manageme |
369c0 | 6e 74 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6d 69 74 74 65 64 20 76 69 61 20 4c 4c 44 50 2e | nt.address.transmitted.via.LLDP. |
369e0 | 20 4d 75 6c 74 69 70 6c 65 20 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e | .Multiple.addresses.can.be.defin |
36a00 | 65 64 2e 20 4f 6e 6c 79 20 61 64 64 72 65 73 73 65 73 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 | ed..Only.addresses.connected.to. |
36a20 | 74 68 65 20 73 79 73 74 65 6d 20 77 69 6c 6c 20 62 65 20 74 72 61 6e 73 6d 69 74 74 65 64 2e 00 | the.system.will.be.transmitted.. |
36a40 | 44 65 66 69 6e 65 20 61 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 4e 65 74 77 6f 72 6b 20 67 72 | Define.a.IPv4.or.IPv6.Network.gr |
36a60 | 6f 75 70 2e 00 44 65 66 69 6e 65 20 61 20 49 50 76 34 20 6f 72 20 61 20 49 50 76 36 20 61 64 64 | oup..Define.a.IPv4.or.a.IPv6.add |
36a80 | 72 65 73 73 20 67 72 6f 75 70 00 44 65 66 69 6e 65 20 61 20 5a 6f 6e 65 00 44 65 66 69 6e 65 20 | ress.group.Define.a.Zone.Define. |
36aa0 | 61 20 64 69 73 63 72 65 74 65 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 | a.discrete.source.IP.address.of. |
36ac0 | 31 30 30 2e 36 34 2e 30 2e 31 20 66 6f 72 20 53 4e 41 54 20 72 75 6c 65 20 32 30 00 44 65 66 69 | 100.64.0.1.for.SNAT.rule.20.Defi |
36ae0 | 6e 65 20 61 20 64 6f 6d 61 69 6e 20 67 72 6f 75 70 2e 00 44 65 66 69 6e 65 20 61 20 6d 61 63 20 | ne.a.domain.group..Define.a.mac. |
36b00 | 67 72 6f 75 70 2e 00 44 65 66 69 6e 65 20 61 20 70 6f 72 74 20 67 72 6f 75 70 2e 20 41 20 70 6f | group..Define.a.port.group..A.po |
36b20 | 72 74 20 6e 61 6d 65 20 63 61 6e 20 62 65 20 61 6e 79 20 6e 61 6d 65 20 64 65 66 69 6e 65 64 20 | rt.name.can.be.any.name.defined. |
36b40 | 69 6e 20 2f 65 74 63 2f 73 65 72 76 69 63 65 73 2e 20 65 2e 67 2e 3a 20 68 74 74 70 00 44 65 66 | in./etc/services..e.g.:.http.Def |
36b60 | 69 6e 65 20 61 6c 6c 6f 77 65 64 20 63 69 70 68 65 72 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 | ine.allowed.ciphers.used.for.the |
36b80 | 20 53 53 48 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 41 20 6e 75 6d 62 65 72 20 6f 66 20 61 6c 6c | .SSH.connection..A.number.of.all |
36ba0 | 6f 77 65 64 20 63 69 70 68 65 72 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 2c 20 75 | owed.ciphers.can.be.specified,.u |
36bc0 | 73 65 20 6d 75 6c 74 69 70 6c 65 20 6f 63 63 75 72 72 65 6e 63 65 73 20 74 6f 20 61 6c 6c 6f 77 | se.multiple.occurrences.to.allow |
36be0 | 20 6d 75 6c 74 69 70 6c 65 20 63 69 70 68 65 72 73 2e 00 44 65 66 69 6e 65 20 61 6e 20 69 6e 74 | .multiple.ciphers..Define.an.int |
36c00 | 65 72 66 61 63 65 20 67 72 6f 75 70 2e 20 57 69 6c 64 63 61 72 64 20 61 72 65 20 61 63 63 65 70 | erface.group..Wildcard.are.accep |
36c20 | 74 65 64 20 74 6f 6f 2e 00 44 65 66 69 6e 65 20 62 65 68 61 76 69 6f 72 20 66 6f 72 20 67 72 61 | ted.too..Define.behavior.for.gra |
36c40 | 74 75 69 74 6f 75 73 20 41 52 50 20 66 72 61 6d 65 73 20 77 68 6f 27 73 20 49 50 20 69 73 20 6e | tuitous.ARP.frames.who's.IP.is.n |
36c60 | 6f 74 20 61 6c 72 65 61 64 79 20 70 72 65 73 65 6e 74 20 69 6e 20 74 68 65 20 41 52 50 20 74 61 | ot.already.present.in.the.ARP.ta |
36c80 | 62 6c 65 2e 20 49 66 20 63 6f 6e 66 69 67 75 72 65 64 20 63 72 65 61 74 65 20 6e 65 77 20 65 6e | ble..If.configured.create.new.en |
36ca0 | 74 72 69 65 73 20 69 6e 20 74 68 65 20 41 52 50 20 74 61 62 6c 65 2e 00 44 65 66 69 6e 65 20 64 | tries.in.the.ARP.table..Define.d |
36cc0 | 69 66 66 65 72 65 6e 74 20 6d 6f 64 65 73 20 66 6f 72 20 49 50 20 64 69 72 65 63 74 65 64 20 62 | ifferent.modes.for.IP.directed.b |
36ce0 | 72 6f 61 64 63 61 73 74 20 66 6f 72 77 61 72 64 69 6e 67 20 61 73 20 64 65 73 63 72 69 62 65 64 | roadcast.forwarding.as.described |
36d00 | 20 69 6e 20 3a 72 66 63 3a 60 31 38 31 32 60 20 61 6e 64 20 3a 72 66 63 3a 60 32 36 34 34 60 2e | .in.:rfc:`1812`.and.:rfc:`2644`. |
36d20 | 00 44 65 66 69 6e 65 20 64 69 66 66 65 72 65 6e 74 20 6d 6f 64 65 73 20 66 6f 72 20 73 65 6e 64 | .Define.different.modes.for.send |
36d40 | 69 6e 67 20 72 65 70 6c 69 65 73 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 72 65 63 65 69 | ing.replies.in.response.to.recei |
36d60 | 76 65 64 20 41 52 50 20 72 65 71 75 65 73 74 73 20 74 68 61 74 20 72 65 73 6f 6c 76 65 20 6c 6f | ved.ARP.requests.that.resolve.lo |
36d80 | 63 61 6c 20 74 61 72 67 65 74 20 49 50 20 61 64 64 72 65 73 73 65 73 3a 00 44 65 66 69 6e 65 20 | cal.target.IP.addresses:.Define. |
36da0 | 64 69 66 66 65 72 65 6e 74 20 72 65 73 74 72 69 63 74 69 6f 6e 20 6c 65 76 65 6c 73 20 66 6f 72 | different.restriction.levels.for |
36dc0 | 20 61 6e 6e 6f 75 6e 63 69 6e 67 20 74 68 65 20 6c 6f 63 61 6c 20 73 6f 75 72 63 65 20 49 50 20 | .announcing.the.local.source.IP. |
36de0 | 61 64 64 72 65 73 73 20 66 72 6f 6d 20 49 50 20 70 61 63 6b 65 74 73 20 69 6e 20 41 52 50 20 72 | address.from.IP.packets.in.ARP.r |
36e00 | 65 71 75 65 73 74 73 20 73 65 6e 74 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 2e 00 44 65 66 69 6e | equests.sent.on.interface..Defin |
36e20 | 65 20 68 6f 77 20 74 6f 20 68 61 6e 64 6c 65 20 6c 65 61 66 2d 73 65 6f 6e 64 73 2e 00 44 65 66 | e.how.to.handle.leaf-seonds..Def |
36e40 | 69 6e 65 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 62 65 20 75 73 65 64 20 69 6e 20 74 68 65 | ine.interfaces.to.be.used.in.the |
36e60 | 20 66 6c 6f 77 74 61 62 6c 65 2e 00 44 65 66 69 6e 65 20 6c 65 6e 67 74 68 20 6f 66 20 70 61 63 | .flowtable..Define.length.of.pac |
36e80 | 6b 65 74 20 70 61 79 6c 6f 61 64 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 6e 20 6e 65 74 6c 69 6e | ket.payload.to.include.in.netlin |
36ea0 | 6b 20 6d 65 73 73 61 67 65 2e 20 4f 6e 6c 79 20 61 70 70 6c 69 63 61 62 6c 65 20 69 66 20 72 75 | k.message..Only.applicable.if.ru |
36ec0 | 6c 65 20 6c 6f 67 20 69 73 20 65 6e 61 62 6c 65 20 61 6e 64 20 6c 6f 67 20 67 72 6f 75 70 20 69 | le.log.is.enable.and.log.group.i |
36ee0 | 73 20 64 65 66 69 6e 65 64 2e 00 44 65 66 69 6e 65 20 6c 6f 67 20 67 72 6f 75 70 20 74 6f 20 73 | s.defined..Define.log.group.to.s |
36f00 | 65 6e 64 20 6d 65 73 73 61 67 65 20 74 6f 2e 20 4f 6e 6c 79 20 61 70 70 6c 69 63 61 62 6c 65 20 | end.message.to..Only.applicable. |
36f20 | 69 66 20 72 75 6c 65 20 6c 6f 67 20 69 73 20 65 6e 61 62 6c 65 2e 00 44 65 66 69 6e 65 20 6c 6f | if.rule.log.is.enable..Define.lo |
36f40 | 67 2d 6c 65 76 65 6c 2e 20 4f 6e 6c 79 20 61 70 70 6c 69 63 61 62 6c 65 20 69 66 20 72 75 6c 65 | g-level..Only.applicable.if.rule |
36f60 | 20 6c 6f 67 20 69 73 20 65 6e 61 62 6c 65 2e 00 44 65 66 69 6e 65 20 6e 75 6d 62 65 72 20 6f 66 | .log.is.enable..Define.number.of |
36f80 | 20 70 61 63 6b 65 74 73 20 74 6f 20 71 75 65 75 65 20 69 6e 73 69 64 65 20 74 68 65 20 6b 65 72 | .packets.to.queue.inside.the.ker |
36fa0 | 6e 65 6c 20 62 65 66 6f 72 65 20 73 65 6e 64 69 6e 67 20 74 68 65 6d 20 74 6f 20 75 73 65 72 73 | nel.before.sending.them.to.users |
36fc0 | 70 61 63 65 2e 20 4f 6e 6c 79 20 61 70 70 6c 69 63 61 62 6c 65 20 69 66 20 72 75 6c 65 20 6c 6f | pace..Only.applicable.if.rule.lo |
36fe0 | 67 20 69 73 20 65 6e 61 62 6c 65 20 61 6e 64 20 6c 6f 67 20 67 72 6f 75 70 20 69 73 20 64 65 66 | g.is.enable.and.log.group.is.def |
37000 | 69 6e 65 64 2e 00 44 65 66 69 6e 65 20 6f 70 65 72 61 74 69 6f 6e 20 6d 6f 64 65 20 6f 66 20 48 | ined..Define.operation.mode.of.H |
37020 | 69 67 68 20 41 76 61 69 6c 61 62 69 6c 69 74 79 20 66 65 61 74 75 72 65 2e 20 44 65 66 61 75 6c | igh.Availability.feature..Defaul |
37040 | 74 20 76 61 6c 75 65 20 69 66 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6e 6f 74 20 73 70 65 63 69 66 | t.value.if.command.is.not.specif |
37060 | 69 65 64 20 69 73 20 60 61 63 74 69 76 65 2d 61 63 74 69 76 65 60 00 44 65 66 69 6e 65 20 74 68 | ied.is.`active-active`.Define.th |
37080 | 65 20 74 69 6d 65 20 69 6e 74 65 72 76 61 6c 20 74 6f 20 75 70 64 61 74 65 20 74 68 65 20 6c 6f | e.time.interval.to.update.the.lo |
370a0 | 63 61 6c 20 63 61 63 68 65 00 44 65 66 69 6e 65 20 74 68 65 20 7a 6f 6e 65 20 61 73 20 61 20 6c | cal.cache.Define.the.zone.as.a.l |
370c0 | 6f 63 61 6c 20 7a 6f 6e 65 2e 20 41 20 6c 6f 63 61 6c 20 7a 6f 6e 65 20 68 61 73 20 6e 6f 20 69 | ocal.zone..A.local.zone.has.no.i |
370e0 | 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f | nterfaces.and.will.be.applied.to |
37100 | 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2e 00 44 65 66 69 6e 65 20 74 79 70 65 20 | .the.router.itself..Define.type. |
37120 | 6f 66 20 6f 66 66 6c 6f 61 64 20 74 6f 20 62 65 20 75 73 65 64 20 62 79 20 74 68 65 20 66 6c 6f | of.offload.to.be.used.by.the.flo |
37140 | 77 74 61 62 6c 65 3a 20 60 60 68 61 72 64 77 61 72 65 60 60 20 6f 72 20 60 60 73 6f 66 74 77 61 | wtable:.``hardware``.or.``softwa |
37160 | 72 65 60 60 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 60 60 73 6f 66 74 77 61 72 65 60 60 20 6f | re``..By.default,.``software``.o |
37180 | 66 66 6c 6f 61 64 20 69 73 20 75 73 65 64 2e 00 44 65 66 69 6e 65 20 75 73 65 64 20 65 74 68 65 | ffload.is.used..Define.used.ethe |
371a0 | 72 74 79 70 65 20 6f 66 20 62 72 69 64 67 65 20 69 6e 74 65 72 66 61 63 65 2e 00 44 65 66 69 6e | rtype.of.bridge.interface..Defin |
371c0 | 65 64 20 74 68 65 20 49 50 76 34 2c 20 49 50 76 36 20 6f 72 20 46 51 44 4e 20 61 6e 64 20 70 6f | ed.the.IPv4,.IPv6.or.FQDN.and.po |
371e0 | 72 74 20 6e 75 6d 62 65 72 20 6f 66 20 74 68 65 20 63 61 63 68 69 6e 67 20 52 50 4b 49 20 63 61 | rt.number.of.the.caching.RPKI.ca |
37200 | 63 68 69 6e 67 20 69 6e 73 74 61 6e 63 65 20 77 68 69 63 68 20 69 73 20 75 73 65 64 2e 00 44 65 | ching.instance.which.is.used..De |
37220 | 66 69 6e 65 73 20 61 6c 74 65 72 6e 61 74 65 20 73 6f 75 72 63 65 73 20 66 6f 72 20 6d 75 6c 74 | fines.alternate.sources.for.mult |
37240 | 69 63 61 73 74 69 6e 67 20 61 6e 64 20 49 47 4d 50 20 64 61 74 61 2e 20 54 68 65 20 6e 65 74 77 | icasting.and.IGMP.data..The.netw |
37260 | 6f 72 6b 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 6f 6e 20 74 68 65 20 66 6f 6c 6c 6f | ork.address.must.be.on.the.follo |
37280 | 77 69 6e 67 20 66 6f 72 6d 61 74 20 27 61 2e 62 2e 63 2e 64 2f 6e 27 2e 20 42 79 20 64 65 66 61 | wing.format.'a.b.c.d/n'..By.defa |
372a0 | 75 6c 74 2c 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 61 63 63 65 70 74 20 64 61 74 61 | ult,.the.router.will.accept.data |
372c0 | 20 66 72 6f 6d 20 73 6f 75 72 63 65 73 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 6e 65 74 77 6f 72 | .from.sources.on.the.same.networ |
372e0 | 6b 20 61 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e | k.as.configured.on.an.interface. |
37300 | 20 49 66 20 74 68 65 20 6d 75 6c 74 69 63 61 73 74 20 73 6f 75 72 63 65 20 6c 69 65 73 20 6f 6e | .If.the.multicast.source.lies.on |
37320 | 20 61 20 72 65 6d 6f 74 65 20 6e 65 74 77 6f 72 6b 2c 20 6f 6e 65 20 6d 75 73 74 20 64 65 66 69 | .a.remote.network,.one.must.defi |
37340 | 6e 65 20 66 72 6f 6d 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 73 68 6f 75 6c 64 20 62 65 20 | ne.from.where.traffic.should.be. |
37360 | 61 63 63 65 70 74 65 64 2e 00 44 65 66 69 6e 65 73 20 61 6e 20 6f 66 66 2d 4e 42 4d 41 20 6e 65 | accepted..Defines.an.off-NBMA.ne |
37380 | 74 77 6f 72 6b 20 70 72 65 66 69 78 20 66 6f 72 20 77 68 69 63 68 20 74 68 65 20 47 52 45 20 69 | twork.prefix.for.which.the.GRE.i |
373a0 | 6e 74 65 72 66 61 63 65 20 77 69 6c 6c 20 61 63 74 20 61 73 20 61 20 67 61 74 65 77 61 79 2e 20 | nterface.will.act.as.a.gateway.. |
373c0 | 54 68 69 73 20 61 6e 20 61 6c 74 65 72 6e 61 74 69 76 65 20 74 6f 20 64 65 66 69 6e 69 6e 67 20 | This.an.alternative.to.defining. |
373e0 | 6c 6f 63 61 6c 20 69 6e 74 65 72 66 61 63 65 73 20 77 69 74 68 20 73 68 6f 72 74 63 75 74 2d 64 | local.interfaces.with.shortcut-d |
37400 | 65 73 74 69 6e 61 74 69 6f 6e 20 66 6c 61 67 2e 00 44 65 66 69 6e 65 73 20 62 6c 61 63 6b 68 6f | estination.flag..Defines.blackho |
37420 | 6c 65 20 64 69 73 74 61 6e 63 65 20 66 6f 72 20 74 68 69 73 20 72 6f 75 74 65 2c 20 72 6f 75 74 | le.distance.for.this.route,.rout |
37440 | 65 73 20 77 69 74 68 20 73 6d 61 6c 6c 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 64 | es.with.smaller.administrative.d |
37460 | 69 73 74 61 6e 63 65 20 61 72 65 20 65 6c 65 63 74 65 64 20 70 72 69 6f 72 20 74 6f 20 74 68 6f | istance.are.elected.prior.to.tho |
37480 | 73 65 20 77 69 74 68 20 61 20 68 69 67 68 65 72 20 64 69 73 74 61 6e 63 65 2e 00 44 65 66 69 6e | se.with.a.higher.distance..Defin |
374a0 | 65 73 20 6d 69 6e 69 6d 75 6d 20 61 63 63 65 70 74 61 62 6c 65 20 4d 54 55 2e 20 49 66 20 63 6c | es.minimum.acceptable.MTU..If.cl |
374c0 | 69 65 6e 74 20 77 69 6c 6c 20 74 72 79 20 74 6f 20 6e 65 67 6f 74 69 61 74 65 20 6c 65 73 73 20 | ient.will.try.to.negotiate.less. |
374e0 | 74 68 65 6e 20 73 70 65 63 69 66 69 65 64 20 4d 54 55 20 74 68 65 6e 20 69 74 20 77 69 6c 6c 20 | then.specified.MTU.then.it.will. |
37500 | 62 65 20 4e 41 4b 65 64 20 6f 72 20 64 69 73 63 6f 6e 6e 65 63 74 65 64 20 69 66 20 72 65 6a 65 | be.NAKed.or.disconnected.if.reje |
37520 | 63 74 73 20 67 72 65 61 74 65 72 20 4d 54 55 2e 20 44 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 | cts.greater.MTU..Default.value.i |
37540 | 73 20 2a 2a 31 30 30 2a 2a 2e 00 44 65 66 69 6e 65 73 20 6e 65 78 74 2d 68 6f 70 20 64 69 73 74 | s.**100**..Defines.next-hop.dist |
37560 | 61 6e 63 65 20 66 6f 72 20 74 68 69 73 20 72 6f 75 74 65 2c 20 72 6f 75 74 65 73 20 77 69 74 68 | ance.for.this.route,.routes.with |
37580 | 20 73 6d 61 6c 6c 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 64 69 73 74 61 6e 63 65 | .smaller.administrative.distance |
375a0 | 20 61 72 65 20 65 6c 65 63 74 65 64 20 70 72 69 6f 72 20 74 6f 20 74 68 6f 73 65 20 77 69 74 68 | .are.elected.prior.to.those.with |
375c0 | 20 61 20 68 69 67 68 65 72 20 64 69 73 74 61 6e 63 65 2e 00 44 65 66 69 6e 65 73 20 70 72 65 66 | .a.higher.distance..Defines.pref |
375e0 | 65 72 72 65 64 20 4d 52 55 2e 20 42 79 20 64 65 66 61 75 6c 74 20 69 73 20 6e 6f 74 20 64 65 66 | erred.MRU..By.default.is.not.def |
37600 | 69 6e 65 64 2e 00 44 65 66 69 6e 65 73 20 70 72 6f 74 6f 63 6f 6c 73 20 66 6f 72 20 63 68 65 63 | ined..Defines.protocols.for.chec |
37620 | 6b 69 6e 67 20 41 52 50 2c 20 49 43 4d 50 2c 20 54 43 50 00 44 65 66 69 6e 65 73 20 74 68 65 20 | king.ARP,.ICMP,.TCP.Defines.the. |
37640 | 6d 61 78 69 6d 75 6d 20 60 3c 6e 75 6d 62 65 72 3e 60 20 6f 66 20 75 6e 61 6e 73 77 65 72 65 64 | maximum.`<number>`.of.unanswered |
37660 | 20 65 63 68 6f 20 72 65 71 75 65 73 74 73 2e 20 55 70 6f 6e 20 72 65 61 63 68 69 6e 67 20 74 68 | .echo.requests..Upon.reaching.th |
37680 | 65 20 76 61 6c 75 65 20 60 3c 6e 75 6d 62 65 72 3e 60 2c 20 74 68 65 20 73 65 73 73 69 6f 6e 20 | e.value.`<number>`,.the.session. |
376a0 | 77 69 6c 6c 20 62 65 20 72 65 73 65 74 2e 00 44 65 66 69 6e 65 73 20 74 68 65 20 6d 61 78 69 6d | will.be.reset..Defines.the.maxim |
376c0 | 75 6d 20 60 3c 6e 75 6d 62 65 72 3e 60 20 6f 66 20 75 6e 61 6e 73 77 65 72 65 64 20 65 63 68 6f | um.`<number>`.of.unanswered.echo |
376e0 | 20 72 65 71 75 65 73 74 73 2e 20 55 70 6f 6e 20 72 65 61 63 68 69 6e 67 20 74 68 65 20 76 61 6c | .requests..Upon.reaching.the.val |
37700 | 75 65 20 60 3c 6e 75 6d 62 65 72 3e 60 2c 20 74 68 65 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 | ue.`<number>`,.the.session.will. |
37720 | 62 65 20 72 65 73 65 74 2e 20 44 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 2a 2a 33 2a 2a | be.reset..Default.value.is.**3** |
37740 | 2e 00 44 65 66 69 6e 65 73 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 64 65 76 69 63 65 20 61 | ..Defines.the.specified.device.a |
37760 | 73 20 61 20 73 79 73 74 65 6d 20 63 6f 6e 73 6f 6c 65 2e 20 41 76 61 69 6c 61 62 6c 65 20 63 6f | s.a.system.console..Available.co |
37780 | 6e 73 6f 6c 65 20 64 65 76 69 63 65 73 20 63 61 6e 20 62 65 20 28 73 65 65 20 63 6f 6d 70 6c 65 | nsole.devices.can.be.(see.comple |
377a0 | 74 69 6f 6e 20 68 65 6c 70 65 72 29 3a 00 44 65 66 69 6e 69 6e 67 20 50 65 65 72 73 00 44 65 6c | tion.helper):.Defining.Peers.Del |
377c0 | 65 67 61 74 65 20 70 72 65 66 69 78 65 73 20 66 72 6f 6d 20 74 68 65 20 72 61 6e 67 65 20 69 6e | egate.prefixes.from.the.range.in |
377e0 | 64 69 63 61 74 65 64 20 62 79 20 74 68 65 20 73 74 61 72 74 20 61 6e 64 20 73 74 6f 70 20 71 75 | dicated.by.the.start.and.stop.qu |
37800 | 61 6c 69 66 69 65 72 2e 00 44 65 6c 65 74 65 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 | alifier..Delete.BGP.communities. |
37820 | 6d 61 74 63 68 69 6e 67 20 74 68 65 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 2e 00 44 65 6c | matching.the.community-list..Del |
37840 | 65 74 65 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 6d 61 74 63 68 69 6e 67 20 74 68 65 | ete.BGP.communities.matching.the |
37860 | 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 2e 00 44 65 6c 65 74 65 20 4c 6f | .large-community-list..Delete.Lo |
37880 | 67 73 00 44 65 6c 65 74 65 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 63 6f 6e 74 61 69 6e 65 72 | gs.Delete.a.particular.container |
378a0 | 20 69 6d 61 67 65 20 62 61 73 65 64 20 6f 6e 20 69 74 27 73 20 69 6d 61 67 65 20 49 44 2e 20 59 | .image.based.on.it's.image.ID..Y |
378c0 | 6f 75 20 63 61 6e 20 61 6c 73 6f 20 64 65 6c 65 74 65 20 61 6c 6c 20 63 6f 6e 74 61 69 6e 65 72 | ou.can.also.delete.all.container |
378e0 | 20 69 6d 61 67 65 73 20 61 74 20 6f 6e 63 65 2e 00 44 65 6c 65 74 65 20 61 6c 6c 20 42 47 50 20 | .images.at.once..Delete.all.BGP. |
37900 | 63 6f 6d 6d 75 6e 69 74 69 65 73 00 44 65 6c 65 74 65 20 61 6c 6c 20 42 47 50 20 6c 61 72 67 65 | communities.Delete.all.BGP.large |
37920 | 2d 63 6f 6d 6d 75 6e 69 74 69 65 73 00 44 65 6c 65 74 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 | -communities.Delete.default.rout |
37940 | 65 20 66 72 6f 6d 20 74 68 65 20 73 79 73 74 65 6d 2e 00 44 65 6c 65 74 65 73 20 74 68 65 20 73 | e.from.the.system..Deletes.the.s |
37960 | 70 65 63 69 66 69 65 64 20 75 73 65 72 2d 64 65 66 69 6e 65 64 20 66 69 6c 65 20 3c 74 65 78 74 | pecified.user-defined.file.<text |
37980 | 3e 20 69 6e 20 74 68 65 20 2f 76 61 72 2f 6c 6f 67 2f 75 73 65 72 20 64 69 72 65 63 74 6f 72 79 | >.in.the./var/log/user.directory |
379a0 | 00 44 65 70 65 6e 64 69 6e 67 20 6f 6e 20 74 68 65 20 6c 6f 63 61 74 69 6f 6e 2c 20 6e 6f 74 20 | .Depending.on.the.location,.not. |
379c0 | 61 6c 6c 20 6f 66 20 74 68 65 73 65 20 63 68 61 6e 6e 65 6c 73 20 6d 61 79 20 62 65 20 61 76 61 | all.of.these.channels.may.be.ava |
379e0 | 69 6c 61 62 6c 65 20 66 6f 72 20 75 73 65 21 00 44 65 73 63 72 69 70 74 69 6f 6e 00 44 65 73 70 | ilable.for.use!.Description.Desp |
37a00 | 69 74 65 20 74 68 65 20 44 72 6f 70 2d 54 61 69 6c 20 70 6f 6c 69 63 79 20 64 6f 65 73 20 6e 6f | ite.the.Drop-Tail.policy.does.no |
37a20 | 74 20 73 6c 6f 77 20 64 6f 77 6e 20 70 61 63 6b 65 74 73 2c 20 69 66 20 6d 61 6e 79 20 70 61 63 | t.slow.down.packets,.if.many.pac |
37a40 | 6b 65 74 73 20 61 72 65 20 74 6f 20 62 65 20 73 65 6e 74 2c 20 74 68 65 79 20 63 6f 75 6c 64 20 | kets.are.to.be.sent,.they.could. |
37a60 | 67 65 74 20 64 72 6f 70 70 65 64 20 77 68 65 6e 20 74 72 79 69 6e 67 20 74 6f 20 67 65 74 20 65 | get.dropped.when.trying.to.get.e |
37a80 | 6e 71 75 65 75 65 64 20 61 74 20 74 68 65 20 74 61 69 6c 2e 20 54 68 69 73 20 63 61 6e 20 68 61 | nqueued.at.the.tail..This.can.ha |
37aa0 | 70 70 65 6e 20 69 66 20 74 68 65 20 71 75 65 75 65 20 68 61 73 20 73 74 69 6c 6c 20 6e 6f 74 20 | ppen.if.the.queue.has.still.not. |
37ac0 | 62 65 65 6e 20 61 62 6c 65 20 74 6f 20 72 65 6c 65 61 73 65 20 65 6e 6f 75 67 68 20 70 61 63 6b | been.able.to.release.enough.pack |
37ae0 | 65 74 73 20 66 72 6f 6d 20 69 74 73 20 68 65 61 64 2e 00 44 65 73 70 69 74 65 20 74 68 65 20 66 | ets.from.its.head..Despite.the.f |
37b00 | 61 63 74 20 74 68 61 74 20 41 44 20 69 73 20 61 20 73 75 70 65 72 73 65 74 20 6f 66 20 4c 44 41 | act.that.AD.is.a.superset.of.LDA |
37b20 | 50 00 44 65 73 74 69 6e 61 74 69 6f 6e 20 41 64 64 72 65 73 73 00 44 65 73 74 69 6e 61 74 69 6f | P.Destination.Address.Destinatio |
37b40 | 6e 20 4e 41 54 00 44 65 73 74 69 6e 61 74 69 6f 6e 20 50 72 65 66 69 78 00 44 65 74 61 69 6c 65 | n.NAT.Destination.Prefix.Detaile |
37b60 | 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 22 63 69 73 63 6f 22 20 61 6e 64 20 | d.information.about."cisco".and. |
37b80 | 22 69 62 6d 22 20 6d 6f 64 65 6c 73 20 64 69 66 66 65 72 65 6e 63 65 73 20 63 61 6e 20 62 65 20 | "ibm".models.differences.can.be. |
37ba0 | 66 6f 75 6e 64 20 69 6e 20 3a 72 66 63 3a 60 33 35 30 39 60 2e 20 41 20 22 73 68 6f 72 74 63 75 | found.in.:rfc:`3509`..A."shortcu |
37bc0 | 74 22 20 6d 6f 64 65 6c 20 61 6c 6c 6f 77 73 20 41 42 52 20 74 6f 20 63 72 65 61 74 65 20 72 6f | t".model.allows.ABR.to.create.ro |
37be0 | 75 74 65 73 20 62 65 74 77 65 65 6e 20 61 72 65 61 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 | utes.between.areas.based.on.the. |
37c00 | 74 6f 70 6f 6c 6f 67 79 20 6f 66 20 74 68 65 20 61 72 65 61 73 20 63 6f 6e 6e 65 63 74 65 64 20 | topology.of.the.areas.connected. |
37c20 | 74 6f 20 74 68 69 73 20 72 6f 75 74 65 72 20 62 75 74 20 6e 6f 74 20 75 73 69 6e 67 20 61 20 62 | to.this.router.but.not.using.a.b |
37c40 | 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 69 6e 20 63 61 73 65 20 69 66 20 6e 6f 6e 2d 62 61 63 6b | ackbone.area.in.case.if.non-back |
37c60 | 62 6f 6e 65 20 72 6f 75 74 65 20 77 69 6c 6c 20 62 65 20 63 68 65 61 70 65 72 2e 20 46 6f 72 20 | bone.route.will.be.cheaper..For. |
37c80 | 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 22 73 68 6f 72 74 63 75 74 | more.information.about."shortcut |
37ca0 | 22 20 6d 6f 64 65 6c 2c 20 73 65 65 20 3a 74 3a 60 6f 73 70 66 2d 73 68 6f 72 74 63 75 74 2d 61 | ".model,.see.:t:`ospf-shortcut-a |
37cc0 | 62 72 2d 30 32 2e 74 78 74 60 00 44 65 74 65 72 6d 69 6e 65 73 20 68 6f 77 20 6f 70 65 6e 6e 68 | br-02.txt`.Determines.how.opennh |
37ce0 | 72 70 20 64 61 65 6d 6f 6e 20 73 68 6f 75 6c 64 20 73 6f 66 74 20 73 77 69 74 63 68 20 74 68 65 | rp.daemon.should.soft.switch.the |
37d00 | 20 6d 75 6c 74 69 63 61 73 74 20 74 72 61 66 66 69 63 2e 20 43 75 72 72 65 6e 74 6c 79 2c 20 6d | .multicast.traffic..Currently,.m |
37d20 | 75 6c 74 69 63 61 73 74 20 74 72 61 66 66 69 63 20 69 73 20 63 61 70 74 75 72 65 64 20 62 79 20 | ulticast.traffic.is.captured.by. |
37d40 | 6f 70 65 6e 6e 68 72 70 20 64 61 65 6d 6f 6e 20 75 73 69 6e 67 20 61 20 70 61 63 6b 65 74 20 73 | opennhrp.daemon.using.a.packet.s |
37d60 | 6f 63 6b 65 74 2c 20 61 6e 64 20 72 65 73 65 6e 74 20 62 61 63 6b 20 74 6f 20 70 72 6f 70 65 72 | ocket,.and.resent.back.to.proper |
37d80 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 73 2e 20 54 68 69 73 20 6d 65 61 6e 73 20 74 68 61 74 20 6d | .destinations..This.means.that.m |
37da0 | 75 6c 74 69 63 61 73 74 20 70 61 63 6b 65 74 20 73 65 6e 64 69 6e 67 20 69 73 20 43 50 55 20 69 | ulticast.packet.sending.is.CPU.i |
37dc0 | 6e 74 65 6e 73 69 76 65 2e 00 44 65 76 69 63 65 20 69 73 20 69 6e 63 61 70 61 62 6c 65 20 6f 66 | ntensive..Device.is.incapable.of |
37de0 | 20 34 30 20 4d 48 7a 2c 20 64 6f 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 2e 20 54 68 69 73 20 | .40.MHz,.do.not.advertise..This. |
37e00 | 73 65 74 73 20 60 60 5b 34 30 2d 49 4e 54 4f 4c 45 52 41 4e 54 5d 60 60 00 44 65 76 69 63 65 73 | sets.``[40-INTOLERANT]``.Devices |
37e20 | 20 65 76 61 6c 75 61 74 69 6e 67 20 77 68 65 74 68 65 72 20 61 6e 20 49 50 76 34 20 61 64 64 72 | .evaluating.whether.an.IPv4.addr |
37e40 | 65 73 73 20 69 73 20 70 75 62 6c 69 63 20 6d 75 73 74 20 62 65 20 75 70 64 61 74 65 64 20 74 6f | ess.is.public.must.be.updated.to |
37e60 | 20 72 65 63 6f 67 6e 69 7a 65 20 74 68 65 20 6e 65 77 20 61 64 64 72 65 73 73 20 73 70 61 63 65 | .recognize.the.new.address.space |
37e80 | 2e 20 41 6c 6c 6f 63 61 74 69 6e 67 20 6d 6f 72 65 20 70 72 69 76 61 74 65 20 49 50 76 34 20 61 | ..Allocating.more.private.IPv4.a |
37ea0 | 64 64 72 65 73 73 20 73 70 61 63 65 20 66 6f 72 20 4e 41 54 20 64 65 76 69 63 65 73 20 6d 69 67 | ddress.space.for.NAT.devices.mig |
37ec0 | 68 74 20 70 72 6f 6c 6f 6e 67 20 74 68 65 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 6f 20 49 50 76 | ht.prolong.the.transition.to.IPv |
37ee0 | 36 2e 00 44 69 66 66 65 72 65 6e 74 20 4e 41 54 20 54 79 70 65 73 00 44 69 66 66 69 65 2d 48 65 | 6..Different.NAT.Types.Diffie-He |
37f00 | 6c 6c 6d 61 6e 20 70 61 72 61 6d 65 74 65 72 73 00 44 69 72 65 63 74 69 6f 6e 3a 20 2a 2a 69 6e | llman.parameters.Direction:.**in |
37f20 | 2a 2a 20 61 6e 64 20 2a 2a 6f 75 74 2a 2a 2e 20 50 72 6f 74 65 63 74 20 70 75 62 6c 69 63 20 6e | **.and.**out**..Protect.public.n |
37f40 | 65 74 77 6f 72 6b 20 66 72 6f 6d 20 65 78 74 65 72 6e 61 6c 20 61 74 74 61 63 6b 73 2c 20 61 6e | etwork.from.external.attacks,.an |
37f60 | 64 20 69 64 65 6e 74 69 66 79 20 69 6e 74 65 72 6e 61 6c 20 61 74 74 61 63 6b 73 20 74 6f 77 61 | d.identify.internal.attacks.towa |
37f80 | 72 64 73 20 69 6e 74 65 72 6e 65 74 2e 00 44 69 73 61 62 6c 65 20 28 6c 6f 63 6b 29 20 61 63 63 | rds.internet..Disable.(lock).acc |
37fa0 | 6f 75 6e 74 2e 20 55 73 65 72 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 61 62 6c 65 20 74 6f 20 6c | ount..User.will.not.be.able.to.l |
37fc0 | 6f 67 20 69 6e 2e 00 44 69 73 61 62 6c 65 20 43 50 55 20 70 6f 77 65 72 20 73 61 76 69 6e 67 20 | og.in..Disable.CPU.power.saving. |
37fe0 | 6d 65 63 68 61 6e 69 73 6d 73 20 61 6c 73 6f 20 6b 6e 6f 77 6e 20 61 73 20 43 20 73 74 61 74 65 | mechanisms.also.known.as.C.state |
38000 | 73 2e 00 44 69 73 61 62 6c 65 20 43 6f 6d 70 72 65 73 73 69 6f 6e 20 43 6f 6e 74 72 6f 6c 20 50 | s..Disable.Compression.Control.P |
38020 | 72 6f 74 6f 63 6f 6c 20 28 43 43 50 29 2e 20 43 43 50 20 69 73 20 65 6e 61 62 6c 65 64 20 62 79 | rotocol.(CCP)..CCP.is.enabled.by |
38040 | 20 64 65 66 61 75 6c 74 2e 00 44 69 73 61 62 6c 65 20 4d 4c 44 20 72 65 70 6f 72 74 73 20 61 6e | .default..Disable.MLD.reports.an |
38060 | 64 20 71 75 65 72 79 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 00 44 69 73 61 62 6c | d.query.on.the.interface..Disabl |
38080 | 65 20 60 3c 75 73 65 72 3e 60 20 61 63 63 6f 75 6e 74 2e 00 44 69 73 61 62 6c 65 20 61 20 42 46 | e.`<user>`.account..Disable.a.BF |
380a0 | 44 20 70 65 65 72 00 44 69 73 61 62 6c 65 20 61 20 63 6f 6e 74 61 69 6e 65 72 2e 00 44 69 73 61 | D.peer.Disable.a.container..Disa |
380c0 | 62 6c 65 20 61 20 67 69 76 65 6e 20 63 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 73 74 72 79 00 44 | ble.a.given.container.registry.D |
380e0 | 69 73 61 62 6c 65 20 61 6c 6c 20 6f 70 74 69 6f 6e 61 6c 20 43 50 55 20 6d 69 74 69 67 61 74 69 | isable.all.optional.CPU.mitigati |
38100 | 6f 6e 73 2e 20 54 68 69 73 20 69 6d 70 72 6f 76 65 73 20 73 79 73 74 65 6d 20 70 65 72 66 6f 72 | ons..This.improves.system.perfor |
38120 | 6d 61 6e 63 65 2c 20 62 75 74 20 69 74 20 6d 61 79 20 61 6c 73 6f 20 65 78 70 6f 73 65 20 75 73 | mance,.but.it.may.also.expose.us |
38140 | 65 72 73 20 74 6f 20 73 65 76 65 72 61 6c 20 43 50 55 20 76 75 6c 6e 65 72 61 62 69 6c 69 74 69 | ers.to.several.CPU.vulnerabiliti |
38160 | 65 73 2e 00 44 69 73 61 62 6c 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6c 6f 67 67 69 6e 67 20 76 | es..Disable.connection.logging.v |
38180 | 69 61 20 53 79 73 6c 6f 67 2e 00 44 69 73 61 62 6c 65 20 63 6f 6e 6e 74 72 61 63 6b 20 6c 6f 6f | ia.Syslog..Disable.conntrack.loo |
381a0 | 73 65 20 74 72 61 63 6b 20 6f 70 74 69 6f 6e 00 44 69 73 61 62 6c 65 20 64 68 63 70 2d 72 65 6c | se.track.option.Disable.dhcp-rel |
381c0 | 61 79 20 73 65 72 76 69 63 65 2e 00 44 69 73 61 62 6c 65 20 64 68 63 70 76 36 2d 72 65 6c 61 79 | ay.service..Disable.dhcpv6-relay |
381e0 | 20 73 65 72 76 69 63 65 2e 00 44 69 73 61 62 6c 65 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 | .service..Disable.given.`<interf |
38200 | 61 63 65 3e 60 2e 20 49 74 20 77 69 6c 6c 20 62 65 20 70 6c 61 63 65 64 20 69 6e 20 61 64 6d 69 | ace>`..It.will.be.placed.in.admi |
38220 | 6e 69 73 74 72 61 74 69 76 65 6c 79 20 64 6f 77 6e 20 28 60 60 41 2f 44 60 60 29 20 73 74 61 74 | nistratively.down.(``A/D``).stat |
38240 | 65 2e 00 44 69 73 61 62 6c 65 20 69 6d 6d 65 64 69 61 74 65 20 73 65 73 73 69 6f 6e 20 72 65 73 | e..Disable.immediate.session.res |
38260 | 65 74 20 69 66 20 70 65 65 72 27 73 20 63 6f 6e 6e 65 63 74 65 64 20 6c 69 6e 6b 20 67 6f 65 73 | et.if.peer's.connected.link.goes |
38280 | 20 64 6f 77 6e 2e 00 44 69 73 61 62 6c 65 20 70 61 73 73 77 6f 72 64 20 62 61 73 65 64 20 61 75 | .down..Disable.password.based.au |
382a0 | 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 4c 6f 67 69 6e 20 76 69 61 20 53 53 48 20 6b 65 79 73 | thentication..Login.via.SSH.keys |
382c0 | 20 6f 6e 6c 79 2e 20 54 68 69 73 20 68 61 72 64 65 6e 73 20 73 65 63 75 72 69 74 79 21 00 44 69 | .only..This.hardens.security!.Di |
382e0 | 73 61 62 6c 65 20 73 65 6e 64 69 6e 67 20 61 6e 64 20 72 65 63 65 69 76 69 6e 67 20 50 49 4d 20 | sable.sending.and.receiving.PIM. |
38300 | 63 6f 6e 74 72 6f 6c 20 70 61 63 6b 65 74 73 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 | control.packets.on.the.interface |
38320 | 2e 00 44 69 73 61 62 6c 65 20 74 68 65 20 68 6f 73 74 20 76 61 6c 69 64 61 74 69 6f 6e 20 74 68 | ..Disable.the.host.validation.th |
38340 | 72 6f 75 67 68 20 72 65 76 65 72 73 65 20 44 4e 53 20 6c 6f 6f 6b 75 70 73 20 2d 20 63 61 6e 20 | rough.reverse.DNS.lookups.-.can. |
38360 | 73 70 65 65 64 75 70 20 6c 6f 67 69 6e 20 74 69 6d 65 20 77 68 65 6e 20 72 65 76 65 72 73 65 20 | speedup.login.time.when.reverse. |
38380 | 6c 6f 6f 6b 75 70 20 69 73 20 6e 6f 74 20 70 6f 73 73 69 62 6c 65 2e 00 44 69 73 61 62 6c 65 20 | lookup.is.not.possible..Disable. |
383a0 | 74 68 65 20 70 65 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 44 69 73 61 62 6c 65 20 74 | the.peer.configuration.Disable.t |
383c0 | 68 69 73 20 49 50 76 34 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 65 6e 74 72 79 2e 00 44 69 73 | his.IPv4.static.route.entry..Dis |
383e0 | 61 62 6c 65 20 74 68 69 73 20 49 50 76 36 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 65 6e 74 72 | able.this.IPv6.static.route.entr |
38400 | 79 2e 00 44 69 73 61 62 6c 65 20 74 68 69 73 20 73 65 72 76 69 63 65 2e 00 44 69 73 61 62 6c 65 | y..Disable.this.service..Disable |
38420 | 20 74 72 61 6e 73 6d 69 74 20 6f 66 20 4c 4c 44 50 20 66 72 61 6d 65 73 20 6f 6e 20 67 69 76 65 | .transmit.of.LLDP.frames.on.give |
38440 | 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 20 55 73 65 66 75 6c 20 74 6f 20 65 78 63 6c 75 | n.`<interface>`..Useful.to.exclu |
38460 | 64 65 20 63 65 72 74 61 69 6e 20 69 6e 74 65 72 66 61 63 65 73 20 66 72 6f 6d 20 4c 4c 44 50 20 | de.certain.interfaces.from.LLDP. |
38480 | 77 68 65 6e 20 60 60 61 6c 6c 60 60 20 68 61 76 65 20 62 65 65 6e 20 65 6e 61 62 6c 65 64 2e 00 | when.``all``.have.been.enabled.. |
384a0 | 44 69 73 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 2d 20 6e 6f 20 6b 65 72 6e 65 6c 20 | Disabled.by.default.-.no.kernel. |
384c0 | 6d 6f 64 75 6c 65 20 6c 6f 61 64 65 64 2e 00 44 69 73 61 62 6c 65 73 20 63 61 63 68 69 6e 67 20 | module.loaded..Disables.caching. |
384e0 | 6f 66 20 70 65 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 66 6f 72 77 61 72 64 | of.peer.information.from.forward |
38500 | 65 64 20 4e 48 52 50 20 52 65 73 6f 6c 75 74 69 6f 6e 20 52 65 70 6c 79 20 70 61 63 6b 65 74 73 | ed.NHRP.Resolution.Reply.packets |
38520 | 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 72 65 64 75 63 65 20 6d 65 6d | ..This.can.be.used.to.reduce.mem |
38540 | 6f 72 79 20 63 6f 6e 73 75 6d 70 74 69 6f 6e 20 6f 6e 20 62 69 67 20 4e 42 4d 41 20 73 75 62 6e | ory.consumption.on.big.NBMA.subn |
38560 | 65 74 73 2e 00 44 69 73 61 62 6c 65 73 20 69 6e 74 65 72 66 61 63 65 2d 62 61 73 65 64 20 49 50 | ets..Disables.interface-based.IP |
38580 | 76 34 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 00 44 69 73 61 62 6c 65 73 20 69 6e 74 65 72 66 | v4.static.route..Disables.interf |
385a0 | 61 63 65 2d 62 61 73 65 64 20 49 50 76 36 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 00 44 69 73 | ace-based.IPv6.static.route..Dis |
385c0 | 61 62 6c 65 73 20 71 75 69 63 6b 6c 65 61 76 65 20 6d 6f 64 65 2e 20 49 6e 20 74 68 69 73 20 6d | ables.quickleave.mode..In.this.m |
385e0 | 6f 64 65 20 74 68 65 20 64 61 65 6d 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 73 65 6e 64 20 61 20 4c | ode.the.daemon.will.not.send.a.L |
38600 | 65 61 76 65 20 49 47 4d 50 20 6d 65 73 73 61 67 65 20 75 70 73 74 72 65 61 6d 20 61 73 20 73 6f | eave.IGMP.message.upstream.as.so |
38620 | 6f 6e 20 61 73 20 69 74 20 72 65 63 65 69 76 65 73 20 61 20 4c 65 61 76 65 20 6d 65 73 73 61 67 | on.as.it.receives.a.Leave.messag |
38640 | 65 20 66 6f 72 20 61 6e 79 20 64 6f 77 6e 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 2e 20 | e.for.any.downstream.interface.. |
38660 | 54 68 65 20 64 61 65 6d 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 61 73 6b 20 66 6f 72 20 4d 65 6d 62 | The.daemon.will.not.ask.for.Memb |
38680 | 65 72 73 68 69 70 20 72 65 70 6f 72 74 73 20 6f 6e 20 74 68 65 20 64 6f 77 6e 73 74 72 65 61 6d | ership.reports.on.the.downstream |
386a0 | 20 69 6e 74 65 72 66 61 63 65 73 2c 20 61 6e 64 20 69 66 20 61 20 72 65 70 6f 72 74 20 69 73 20 | .interfaces,.and.if.a.report.is. |
386c0 | 72 65 63 65 69 76 65 64 20 74 68 65 20 67 72 6f 75 70 20 69 73 20 6e 6f 74 20 6a 6f 69 6e 65 64 | received.the.group.is.not.joined |
386e0 | 20 61 67 61 69 6e 20 74 68 65 20 75 70 73 74 72 65 61 6d 2e 00 44 69 73 61 62 6c 65 73 20 77 65 | .again.the.upstream..Disables.we |
38700 | 62 20 66 69 6c 74 65 72 69 6e 67 20 77 69 74 68 6f 75 74 20 64 69 73 63 61 72 64 69 6e 67 20 63 | b.filtering.without.discarding.c |
38720 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 44 69 73 61 62 6c 65 73 20 77 65 62 20 70 72 6f 78 79 | onfiguration..Disables.web.proxy |
38740 | 20 74 72 61 6e 73 70 61 72 65 6e 74 20 6d 6f 64 65 20 61 74 20 61 20 6c 69 73 74 65 6e 69 6e 67 | .transparent.mode.at.a.listening |
38760 | 20 61 64 64 72 65 73 73 2e 00 44 69 73 61 62 6c 69 6e 67 20 41 64 76 65 72 74 69 73 65 6d 65 6e | .address..Disabling.Advertisemen |
38780 | 74 73 00 44 69 73 61 62 6c 69 6e 67 20 61 20 56 52 52 50 20 67 72 6f 75 70 00 44 69 73 61 62 6c | ts.Disabling.a.VRRP.group.Disabl |
387a0 | 69 6e 67 20 74 68 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 6f 6e 20 74 68 65 20 6c 69 6e 6b 20 62 | ing.the.encryption.on.the.link.b |
387c0 | 79 20 72 65 6d 6f 76 69 6e 67 20 60 60 73 65 63 75 72 69 74 79 20 65 6e 63 72 79 70 74 60 60 20 | y.removing.``security.encrypt``. |
387e0 | 77 69 6c 6c 20 73 68 6f 77 20 74 68 65 20 75 6e 65 6e 63 72 79 70 74 65 64 20 62 75 74 20 61 75 | will.show.the.unencrypted.but.au |
38800 | 74 68 65 6e 74 69 63 61 74 65 64 20 63 6f 6e 74 65 6e 74 2e 00 44 69 73 61 64 76 61 6e 74 61 67 | thenticated.content..Disadvantag |
38820 | 65 73 20 61 72 65 3a 00 44 69 73 61 73 73 6f 63 69 61 74 65 20 73 74 61 74 69 6f 6e 73 20 62 61 | es.are:.Disassociate.stations.ba |
38840 | 73 65 64 20 6f 6e 20 65 78 63 65 73 73 69 76 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 66 61 | sed.on.excessive.transmission.fa |
38860 | 69 6c 75 72 65 73 20 6f 72 20 6f 74 68 65 72 20 69 6e 64 69 63 61 74 69 6f 6e 73 20 6f 66 20 63 | ilures.or.other.indications.of.c |
38880 | 6f 6e 6e 65 63 74 69 6f 6e 20 6c 6f 73 73 2e 00 44 69 73 70 6c 61 79 20 49 50 76 34 20 72 6f 75 | onnection.loss..Display.IPv4.rou |
388a0 | 74 69 6e 67 20 74 61 62 6c 65 20 66 6f 72 20 56 52 46 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 | ting.table.for.VRF.identified.by |
388c0 | 20 60 3c 6e 61 6d 65 3e 60 2e 00 44 69 73 70 6c 61 79 20 49 50 76 36 20 72 6f 75 74 69 6e 67 20 | .`<name>`..Display.IPv6.routing. |
388e0 | 74 61 62 6c 65 20 66 6f 72 20 56 52 46 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 6e 61 | table.for.VRF.identified.by.`<na |
38900 | 6d 65 3e 60 2e 00 44 69 73 70 6c 61 79 20 4c 6f 67 73 00 44 69 73 70 6c 61 79 20 4f 54 50 20 6b | me>`..Display.Logs.Display.OTP.k |
38920 | 65 79 20 66 6f 72 20 75 73 65 72 00 44 69 73 70 6c 61 79 20 61 6c 6c 20 61 75 74 68 6f 72 69 7a | ey.for.user.Display.all.authoriz |
38940 | 61 74 69 6f 6e 20 61 74 74 65 6d 70 74 73 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 | ation.attempts.of.the.specified. |
38960 | 69 6d 61 67 65 00 44 69 73 70 6c 61 79 20 61 6c 6c 20 6b 6e 6f 77 6e 20 41 52 50 20 74 61 62 6c | image.Display.all.known.ARP.tabl |
38980 | 65 20 65 6e 74 72 69 65 73 20 6f 6e 20 61 20 67 69 76 65 6e 20 69 6e 74 65 72 66 61 63 65 20 6f | e.entries.on.a.given.interface.o |
389a0 | 6e 6c 79 20 28 60 65 74 68 31 60 29 3a 00 44 69 73 70 6c 61 79 20 61 6c 6c 20 6b 6e 6f 77 6e 20 | nly.(`eth1`):.Display.all.known. |
389c0 | 41 52 50 20 74 61 62 6c 65 20 65 6e 74 72 69 65 73 20 73 70 61 6e 6e 69 6e 67 20 61 63 72 6f 73 | ARP.table.entries.spanning.acros |
389e0 | 73 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 00 44 69 73 70 6c 61 79 20 63 6f 6e 74 65 6e 74 | s.all.interfaces.Display.content |
38a00 | 73 20 6f 66 20 61 20 73 70 65 63 69 66 69 65 64 20 75 73 65 72 2d 64 65 66 69 6e 65 64 20 6c 6f | s.of.a.specified.user-defined.lo |
38a20 | 67 20 66 69 6c 65 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6d 61 67 65 00 44 69 | g.file.of.the.specified.image.Di |
38a40 | 73 70 6c 61 79 20 63 6f 6e 74 65 6e 74 73 20 6f 66 20 61 6c 6c 20 6d 61 73 74 65 72 20 6c 6f 67 | splay.contents.of.all.master.log |
38a60 | 20 66 69 6c 65 73 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6d 61 67 65 00 44 69 | .files.of.the.specified.image.Di |
38a80 | 73 70 6c 61 79 20 6c 61 73 74 20 6c 69 6e 65 73 20 6f 66 20 74 68 65 20 73 79 73 74 65 6d 20 6c | splay.last.lines.of.the.system.l |
38aa0 | 6f 67 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6d 61 67 65 00 44 69 73 70 6c 61 | og.of.the.specified.image.Displa |
38ac0 | 79 20 6c 69 73 74 20 6f 66 20 61 6c 6c 20 75 73 65 72 2d 64 65 66 69 6e 65 64 20 6c 6f 67 20 66 | y.list.of.all.user-defined.log.f |
38ae0 | 69 6c 65 73 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6d 61 67 65 00 44 69 73 70 | iles.of.the.specified.image.Disp |
38b00 | 6c 61 79 20 6c 6f 67 20 66 69 6c 65 73 20 6f 66 20 67 69 76 65 6e 20 63 61 74 65 67 6f 72 79 20 | lay.log.files.of.given.category. |
38b20 | 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 20 55 73 65 20 74 61 62 20 63 6f 6d 70 6c 65 74 69 | on.the.console..Use.tab.completi |
38b40 | 6f 6e 20 74 6f 20 67 65 74 20 61 20 6c 69 73 74 20 6f 66 20 61 76 61 69 6c 61 62 6c 65 20 63 61 | on.to.get.a.list.of.available.ca |
38b60 | 74 65 67 6f 72 69 65 73 2e 20 54 68 6f 73 20 63 61 74 65 67 6f 72 69 65 73 20 63 6f 75 6c 64 20 | tegories..Thos.categories.could. |
38b80 | 62 65 3a 20 61 6c 6c 2c 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 2c 20 63 6c 75 73 74 65 72 2c | be:.all,.authorization,.cluster, |
38ba0 | 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 2c 20 64 68 63 70 2c 20 64 69 72 65 63 74 6f 72 79 | .conntrack-sync,.dhcp,.directory |
38bc0 | 2c 20 64 6e 73 2c 20 66 69 6c 65 2c 20 66 69 72 65 77 61 6c 6c 2c 20 68 74 74 70 73 2c 20 69 6d | ,.dns,.file,.firewall,.https,.im |
38be0 | 61 67 65 20 6c 6c 64 70 2c 20 6e 61 74 2c 20 6f 70 65 6e 76 70 6e 2c 20 73 6e 6d 70 2c 20 74 61 | age.lldp,.nat,.openvpn,.snmp,.ta |
38c00 | 69 6c 2c 20 76 70 6e 2c 20 76 72 72 70 00 44 69 73 70 6c 61 79 73 20 69 6e 66 6f 72 6d 61 74 69 | il,.vpn,.vrrp.Displays.informati |
38c20 | 6f 6e 20 61 62 6f 75 74 20 61 6c 6c 20 6e 65 69 67 68 62 6f 72 73 20 64 69 73 63 6f 76 65 72 65 | on.about.all.neighbors.discovere |
38c40 | 64 20 76 69 61 20 4c 4c 44 50 2e 00 44 69 73 70 6c 61 79 73 20 71 75 65 75 65 20 69 6e 66 6f 72 | d.via.LLDP..Displays.queue.infor |
38c60 | 6d 61 74 69 6f 6e 20 66 6f 72 20 61 20 50 50 50 6f 45 20 69 6e 74 65 72 66 61 63 65 2e 00 44 69 | mation.for.a.PPPoE.interface..Di |
38c80 | 73 70 6c 61 79 73 20 74 68 65 20 72 6f 75 74 65 20 70 61 63 6b 65 74 73 20 74 61 6b 65 6e 20 74 | splays.the.route.packets.taken.t |
38ca0 | 6f 20 61 20 6e 65 74 77 6f 72 6b 20 68 6f 73 74 20 75 74 69 6c 69 7a 69 6e 67 20 56 52 46 20 69 | o.a.network.host.utilizing.VRF.i |
38cc0 | 6e 73 74 61 6e 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 6e 61 6d 65 3e 60 2e 20 | nstance.identified.by.`<name>`.. |
38ce0 | 57 68 65 6e 20 75 73 69 6e 67 20 74 68 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 6f 70 74 69 | When.using.the.IPv4.or.IPv6.opti |
38d00 | 6f 6e 2c 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 72 6f 75 74 65 20 70 61 63 6b 65 74 73 20 74 | on,.displays.the.route.packets.t |
38d20 | 61 6b 65 6e 20 74 6f 20 74 68 65 20 67 69 76 65 6e 20 68 6f 73 74 73 20 49 50 20 61 64 64 72 65 | aken.to.the.given.hosts.IP.addre |
38d40 | 73 73 20 66 61 6d 69 6c 79 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 75 73 65 66 75 6c | ss.family..This.option.is.useful |
38d60 | 20 77 68 65 6e 20 74 68 65 20 68 6f 73 74 20 69 73 20 73 70 65 63 69 66 69 65 64 20 61 73 20 61 | .when.the.host.is.specified.as.a |
38d80 | 20 68 6f 73 74 6e 61 6d 65 20 72 61 74 68 65 72 20 74 68 61 6e 20 61 6e 20 49 50 20 61 64 64 72 | .hostname.rather.than.an.IP.addr |
38da0 | 65 73 73 2e 00 44 6f 20 2a 6e 6f 74 2a 20 6d 61 6e 75 61 6c 6c 79 20 65 64 69 74 20 60 2f 65 74 | ess..Do.*not*.manually.edit.`/et |
38dc0 | 63 2f 68 6f 73 74 73 60 2e 20 54 68 69 73 20 66 69 6c 65 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 | c/hosts`..This.file.will.automat |
38de0 | 69 63 61 6c 6c 79 20 62 65 20 72 65 67 65 6e 65 72 61 74 65 64 20 6f 6e 20 62 6f 6f 74 20 62 61 | ically.be.regenerated.on.boot.ba |
38e00 | 73 65 64 20 6f 6e 20 74 68 65 20 73 65 74 74 69 6e 67 73 20 69 6e 20 74 68 69 73 20 73 65 63 74 | sed.on.the.settings.in.this.sect |
38e20 | 69 6f 6e 2c 20 77 68 69 63 68 20 6d 65 61 6e 73 20 79 6f 75 27 6c 6c 20 6c 6f 73 65 20 61 6c 6c | ion,.which.means.you'll.lose.all |
38e40 | 20 79 6f 75 72 20 6d 61 6e 75 61 6c 20 65 64 69 74 73 2e 20 49 6e 73 74 65 61 64 2c 20 63 6f 6e | .your.manual.edits..Instead,.con |
38e60 | 66 69 67 75 72 65 20 73 74 61 74 69 63 20 68 6f 73 74 20 6d 61 70 70 69 6e 67 73 20 61 73 20 66 | figure.static.host.mappings.as.f |
38e80 | 6f 6c 6c 6f 77 73 2e 00 44 6f 20 6e 6f 74 20 61 6c 6c 6f 77 20 49 50 76 34 20 6e 65 78 74 68 6f | ollows..Do.not.allow.IPv4.nextho |
38ea0 | 70 20 74 72 61 63 6b 69 6e 67 20 74 6f 20 72 65 73 6f 6c 76 65 20 76 69 61 20 74 68 65 20 64 65 | p.tracking.to.resolve.via.the.de |
38ec0 | 66 61 75 6c 74 20 72 6f 75 74 65 2e 20 54 68 69 73 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 63 | fault.route..This.parameter.is.c |
38ee0 | 6f 6e 66 69 67 75 72 65 64 20 70 65 72 2d 56 52 46 2c 20 73 6f 20 74 68 65 20 63 6f 6d 6d 61 6e | onfigured.per-VRF,.so.the.comman |
38f00 | 64 20 69 73 20 61 6c 73 6f 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 20 74 68 65 20 56 52 46 20 73 | d.is.also.available.in.the.VRF.s |
38f20 | 75 62 6e 6f 64 65 2e 00 44 6f 20 6e 6f 74 20 61 6c 6c 6f 77 20 49 50 76 36 20 6e 65 78 74 68 6f | ubnode..Do.not.allow.IPv6.nextho |
38f40 | 70 20 74 72 61 63 6b 69 6e 67 20 74 6f 20 72 65 73 6f 6c 76 65 20 76 69 61 20 74 68 65 20 64 65 | p.tracking.to.resolve.via.the.de |
38f60 | 66 61 75 6c 74 20 72 6f 75 74 65 2e 20 54 68 69 73 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 63 | fault.route..This.parameter.is.c |
38f80 | 6f 6e 66 69 67 75 72 65 64 20 70 65 72 2d 56 52 46 2c 20 73 6f 20 74 68 65 20 63 6f 6d 6d 61 6e | onfigured.per-VRF,.so.the.comman |
38fa0 | 64 20 69 73 20 61 6c 73 6f 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 20 74 68 65 20 56 52 46 20 73 | d.is.also.available.in.the.VRF.s |
38fc0 | 75 62 6e 6f 64 65 2e 00 44 6f 20 6e 6f 74 20 61 73 73 69 67 6e 20 61 20 6c 69 6e 6b 2d 6c 6f 63 | ubnode..Do.not.assign.a.link-loc |
38fe0 | 61 6c 20 49 50 76 36 20 61 64 64 72 65 73 73 20 74 6f 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 | al.IPv6.address.to.this.interfac |
39000 | 65 2e 00 44 6f 20 6e 6f 74 20 63 6f 6e 66 69 67 75 72 65 20 49 46 42 20 61 73 20 74 68 65 20 66 | e..Do.not.configure.IFB.as.the.f |
39020 | 69 72 73 74 20 73 74 65 70 2e 20 46 69 72 73 74 20 63 72 65 61 74 65 20 65 76 65 72 79 74 68 69 | irst.step..First.create.everythi |
39040 | 6e 67 20 65 6c 73 65 20 6f 66 20 79 6f 75 72 20 74 72 61 66 66 69 63 2d 70 6f 6c 69 63 79 2c 20 | ng.else.of.your.traffic-policy,. |
39060 | 61 6e 64 20 74 68 65 6e 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 49 46 42 2e 20 | and.then.you.can.configure.IFB.. |
39080 | 4f 74 68 65 72 77 69 73 65 20 79 6f 75 20 6d 69 67 68 74 20 67 65 74 20 74 68 65 20 60 60 52 54 | Otherwise.you.might.get.the.``RT |
390a0 | 4e 45 54 4c 49 4e 4b 20 61 6e 73 77 65 72 3a 20 46 69 6c 65 20 65 78 69 73 74 73 60 60 20 65 72 | NETLINK.answer:.File.exists``.er |
390c0 | 72 6f 72 2c 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 73 6f 6c 76 65 64 20 77 69 74 68 20 60 60 | ror,.which.can.be.solved.with.`` |
390e0 | 73 75 64 6f 20 69 70 20 6c 69 6e 6b 20 64 65 6c 65 74 65 20 69 66 62 30 60 60 2e 00 44 6f 20 6e | sudo.ip.link.delete.ifb0``..Do.n |
39100 | 6f 74 20 73 65 6e 64 20 48 61 72 64 20 52 65 73 65 74 20 43 45 41 53 45 20 4e 6f 74 69 66 69 63 | ot.send.Hard.Reset.CEASE.Notific |
39120 | 61 74 69 6f 6e 20 66 6f 72 20 22 41 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 52 65 73 65 74 22 | ation.for."Administrative.Reset" |
39140 | 20 65 76 65 6e 74 73 2e 20 57 68 65 6e 20 73 65 74 20 61 6e 64 20 47 72 61 63 65 66 75 6c 20 52 | .events..When.set.and.Graceful.R |
39160 | 65 73 74 61 72 74 20 4e 6f 74 69 66 69 63 61 74 69 6f 6e 20 63 61 70 61 62 69 6c 69 74 79 20 69 | estart.Notification.capability.i |
39180 | 73 20 65 78 63 68 61 6e 67 65 64 20 62 65 74 77 65 65 6e 20 74 68 65 20 70 65 65 72 73 2c 20 47 | s.exchanged.between.the.peers,.G |
391a0 | 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 20 70 72 6f 63 65 64 75 72 65 73 20 61 70 70 6c 79 | raceful.Restart.procedures.apply |
391c0 | 2c 20 61 6e 64 20 72 6f 75 74 65 73 20 77 69 6c 6c 20 62 65 20 72 65 74 61 69 6e 65 64 2e 00 44 | ,.and.routes.will.be.retained..D |
391e0 | 6f 20 6e 6f 74 20 75 73 65 20 74 68 65 20 6c 6f 63 61 6c 20 60 60 2f 65 74 63 2f 68 6f 73 74 73 | o.not.use.the.local.``/etc/hosts |
39200 | 60 60 20 66 69 6c 65 20 69 6e 20 6e 61 6d 65 20 72 65 73 6f 6c 75 74 69 6f 6e 2e 20 56 79 4f 53 | ``.file.in.name.resolution..VyOS |
39220 | 20 44 48 43 50 20 73 65 72 76 65 72 20 77 69 6c 6c 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 | .DHCP.server.will.use.this.file. |
39240 | 74 6f 20 61 64 64 20 72 65 73 6f 6c 76 65 72 73 20 74 6f 20 61 73 73 69 67 6e 65 64 20 61 64 64 | to.add.resolvers.to.assigned.add |
39260 | 72 65 73 73 65 73 2e 00 44 6f 65 73 20 6e 6f 74 20 6e 65 65 64 20 74 6f 20 62 65 20 75 73 65 64 | resses..Does.not.need.to.be.used |
39280 | 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 70 72 6f 78 79 5f 61 72 70 2e 00 44 6f 6d 61 69 6e | .together.with.proxy_arp..Domain |
392a0 | 00 44 6f 6d 61 69 6e 20 47 72 6f 75 70 73 00 44 6f 6d 61 69 6e 20 4e 61 6d 65 00 44 6f 6d 61 69 | .Domain.Groups.Domain.Name.Domai |
392c0 | 6e 20 6e 61 6d 65 28 73 29 20 66 6f 72 20 77 68 69 63 68 20 74 6f 20 6f 62 74 61 69 6e 20 63 65 | n.name(s).for.which.to.obtain.ce |
392e0 | 72 74 69 66 69 63 61 74 65 00 44 6f 6d 61 69 6e 20 6e 61 6d 65 73 20 63 61 6e 20 69 6e 63 6c 75 | rtificate.Domain.names.can.inclu |
39300 | 64 65 20 6c 65 74 74 65 72 73 2c 20 6e 75 6d 62 65 72 73 2c 20 68 79 70 68 65 6e 73 20 61 6e 64 | de.letters,.numbers,.hyphens.and |
39320 | 20 70 65 72 69 6f 64 73 20 77 69 74 68 20 61 20 6d 61 78 69 6d 75 6d 20 6c 65 6e 67 74 68 20 6f | .periods.with.a.maximum.length.o |
39340 | 66 20 32 35 33 20 63 68 61 72 61 63 74 65 72 73 2e 00 44 6f 6d 61 69 6e 20 6e 61 6d 65 73 20 74 | f.253.characters..Domain.names.t |
39360 | 6f 20 61 70 70 6c 79 2c 20 6d 75 6c 74 69 70 6c 65 20 64 6f 6d 61 69 6e 2d 6e 61 6d 65 73 20 63 | o.apply,.multiple.domain-names.c |
39380 | 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 00 44 6f 6d 61 69 6e 20 73 65 61 72 63 68 20 6f | an.be.specified..Domain.search.o |
393a0 | 72 64 65 72 00 44 6f 6e 27 74 20 62 65 20 61 66 72 61 69 64 20 74 68 61 74 20 79 6f 75 20 6e 65 | rder.Don't.be.afraid.that.you.ne |
393c0 | 65 64 20 74 6f 20 72 65 2d 64 6f 20 79 6f 75 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 | ed.to.re-do.your.configuration.. |
393e0 | 4b 65 79 20 74 72 61 6e 73 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 68 61 6e 64 6c 65 64 2c 20 61 | Key.transformation.is.handled,.a |
39400 | 73 20 61 6c 77 61 79 73 2c 20 62 79 20 6f 75 72 20 6d 69 67 72 61 74 69 6f 6e 20 73 63 72 69 70 | s.always,.by.our.migration.scrip |
39420 | 74 73 2c 20 73 6f 20 74 68 69 73 20 77 69 6c 6c 20 62 65 20 61 20 73 6d 6f 6f 74 68 20 74 72 61 | ts,.so.this.will.be.a.smooth.tra |
39440 | 6e 73 69 74 69 6f 6e 20 66 6f 72 20 79 6f 75 21 00 44 6f 6e 27 74 20 66 6f 72 67 65 74 2c 20 74 | nsition.for.you!.Don't.forget,.t |
39460 | 68 65 20 43 49 44 52 20 64 65 63 6c 61 72 65 64 20 69 6e 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 | he.CIDR.declared.in.the.network. |
39480 | 73 74 61 74 65 6d 65 6e 74 20 2a 2a 4d 55 53 54 20 65 78 69 73 74 20 69 6e 20 79 6f 75 72 20 72 | statement.**MUST.exist.in.your.r |
394a0 | 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 28 64 79 6e 61 6d 69 63 20 6f 72 20 73 74 61 74 69 63 29 | outing.table.(dynamic.or.static) |
394c0 | 2c 20 74 68 65 20 62 65 73 74 20 77 61 79 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 74 68 61 74 | ,.the.best.way.to.make.sure.that |
394e0 | 20 69 73 20 74 72 75 65 20 69 73 20 63 72 65 61 74 69 6e 67 20 61 20 73 74 61 74 69 63 20 72 6f | .is.true.is.creating.a.static.ro |
39500 | 75 74 65 3a 2a 2a 00 44 6f 6e 27 74 20 66 6f 72 67 65 74 2c 20 74 68 65 20 43 49 44 52 20 64 65 | ute:**.Don't.forget,.the.CIDR.de |
39520 | 63 6c 61 72 65 64 20 69 6e 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 73 74 61 74 65 6d 65 6e 74 20 | clared.in.the.network.statement. |
39540 | 4d 55 53 54 20 2a 2a 65 78 69 73 74 20 69 6e 20 79 6f 75 72 20 72 6f 75 74 69 6e 67 20 74 61 62 | MUST.**exist.in.your.routing.tab |
39560 | 6c 65 20 28 64 79 6e 61 6d 69 63 20 6f 72 20 73 74 61 74 69 63 29 2c 20 74 68 65 20 62 65 73 74 | le.(dynamic.or.static),.the.best |
39580 | 20 77 61 79 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 74 68 61 74 20 69 73 20 74 72 75 65 20 69 | .way.to.make.sure.that.is.true.i |
395a0 | 73 20 63 72 65 61 74 69 6e 67 20 61 20 73 74 61 74 69 63 20 72 6f 75 74 65 3a 2a 2a 00 44 6f 6e | s.creating.a.static.route:**.Don |
395c0 | 27 74 20 67 65 74 20 63 6f 6e 66 75 73 65 64 20 61 62 6f 75 74 20 74 68 65 20 75 73 65 64 20 2f | 't.get.confused.about.the.used./ |
395e0 | 33 31 20 74 75 6e 6e 65 6c 20 73 75 62 6e 65 74 2e 20 3a 72 66 63 3a 60 33 30 32 31 60 20 67 69 | 31.tunnel.subnet..:rfc:`3021`.gi |
39600 | 76 65 73 20 79 6f 75 20 61 64 64 69 74 69 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 | ves.you.additional.information.f |
39620 | 6f 72 20 75 73 69 6e 67 20 2f 33 31 20 73 75 62 6e 65 74 73 20 6f 6e 20 70 6f 69 6e 74 2d 74 6f | or.using./31.subnets.on.point-to |
39640 | 2d 70 6f 69 6e 74 20 6c 69 6e 6b 73 2e 00 44 6f 77 6e 6c 6f 61 64 20 62 61 6e 64 77 69 64 74 68 | -point.links..Download.bandwidth |
39660 | 20 6c 69 6d 69 74 20 69 6e 20 6b 62 69 74 2f 73 20 66 6f 72 20 60 3c 75 73 65 72 3e 60 2e 00 44 | .limit.in.kbit/s.for.`<user>`..D |
39680 | 6f 77 6e 6c 6f 61 64 20 62 61 6e 64 77 69 64 74 68 20 6c 69 6d 69 74 20 69 6e 20 6b 62 69 74 2f | ownload.bandwidth.limit.in.kbit/ |
396a0 | 73 20 66 6f 72 20 75 73 65 72 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 | s.for.user.on.interface.`<interf |
396c0 | 61 63 65 3e 60 2e 00 44 6f 77 6e 6c 6f 61 64 2f 55 70 64 61 74 65 20 63 6f 6d 70 6c 65 74 65 20 | ace>`..Download/Update.complete. |
396e0 | 62 6c 61 63 6b 6c 69 73 74 00 44 6f 77 6e 6c 6f 61 64 2f 55 70 64 61 74 65 20 70 61 72 74 69 61 | blacklist.Download/Update.partia |
39700 | 6c 20 62 6c 61 63 6b 6c 69 73 74 2e 00 44 72 6f 70 20 41 53 2d 4e 55 4d 42 45 52 20 66 72 6f 6d | l.blacklist..Drop.AS-NUMBER.from |
39720 | 20 74 68 65 20 42 47 50 20 41 53 20 70 61 74 68 2e 00 44 72 6f 70 20 54 61 69 6c 00 44 72 6f 70 | .the.BGP.AS.path..Drop.Tail.Drop |
39740 | 20 72 61 74 65 00 44 72 6f 70 70 65 64 20 70 61 63 6b 65 74 73 20 72 65 70 6f 72 74 65 64 20 6f | .rate.Dropped.packets.reported.o |
39760 | 6e 20 44 52 4f 50 4d 4f 4e 20 4e 65 74 6c 69 6e 6b 20 63 68 61 6e 6e 65 6c 20 62 79 20 4c 69 6e | n.DROPMON.Netlink.channel.by.Lin |
39780 | 75 78 20 6b 65 72 6e 65 6c 20 61 72 65 20 65 78 70 6f 72 74 65 64 20 76 69 61 20 74 68 65 20 73 | ux.kernel.are.exported.via.the.s |
397a0 | 74 61 6e 64 61 72 64 20 73 46 6c 6f 77 20 76 35 20 65 78 74 65 6e 73 69 6f 6e 20 66 6f 72 20 72 | tandard.sFlow.v5.extension.for.r |
397c0 | 65 70 6f 72 74 69 6e 67 20 64 72 6f 70 70 65 64 20 70 61 63 6b 65 74 73 00 44 75 61 6c 2d 53 74 | eporting.dropped.packets.Dual-St |
397e0 | 61 63 6b 20 49 50 76 34 2f 49 50 76 36 20 70 72 6f 76 69 73 69 6f 6e 69 6e 67 20 77 69 74 68 20 | ack.IPv4/IPv6.provisioning.with. |
39800 | 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 00 44 75 6d 6d 79 00 44 75 6d 6d 79 20 69 6e | Prefix.Delegation.Dummy.Dummy.in |
39820 | 74 65 72 66 61 63 65 00 44 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 62 65 20 | terface.Dummy.interfaces.can.be. |
39840 | 75 73 65 64 20 61 73 20 69 6e 74 65 72 66 61 63 65 73 20 74 68 61 74 20 61 6c 77 61 79 73 20 73 | used.as.interfaces.that.always.s |
39860 | 74 61 79 20 75 70 20 28 69 6e 20 74 68 65 20 73 61 6d 65 20 66 61 73 68 69 6f 6e 20 74 6f 20 6c | tay.up.(in.the.same.fashion.to.l |
39880 | 6f 6f 70 62 61 63 6b 73 20 69 6e 20 43 69 73 63 6f 20 49 4f 53 29 2c 20 6f 72 20 66 6f 72 20 74 | oopbacks.in.Cisco.IOS),.or.for.t |
398a0 | 65 73 74 69 6e 67 20 70 75 72 70 6f 73 65 73 2e 00 44 75 70 6c 69 63 61 74 65 20 70 61 63 6b 65 | esting.purposes..Duplicate.packe |
398c0 | 74 73 20 61 72 65 20 6e 6f 74 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 74 68 65 20 70 61 63 6b 65 | ts.are.not.included.in.the.packe |
398e0 | 74 20 6c 6f 73 73 20 63 61 6c 63 75 6c 61 74 69 6f 6e 2c 20 61 6c 74 68 6f 75 67 68 20 74 68 65 | t.loss.calculation,.although.the |
39900 | 20 72 6f 75 6e 64 2d 74 72 69 70 20 74 69 6d 65 20 6f 66 20 74 68 65 73 65 20 70 61 63 6b 65 74 | .round-trip.time.of.these.packet |
39920 | 73 20 69 73 20 75 73 65 64 20 69 6e 20 63 61 6c 63 75 6c 61 74 69 6e 67 20 74 68 65 20 6d 69 6e | s.is.used.in.calculating.the.min |
39940 | 69 6d 75 6d 2f 20 61 76 65 72 61 67 65 2f 6d 61 78 69 6d 75 6d 20 72 6f 75 6e 64 2d 74 72 69 70 | imum/.average/maximum.round-trip |
39960 | 20 74 69 6d 65 20 6e 75 6d 62 65 72 73 2e 00 44 75 72 69 6e 67 20 69 6e 69 74 69 61 6c 20 64 65 | .time.numbers..During.initial.de |
39980 | 70 6c 6f 79 6d 65 6e 74 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 75 73 69 6e 67 20 74 68 65 20 | ployment.we.recommend.using.the. |
399a0 | 73 74 61 67 69 6e 67 20 41 50 49 20 6f 66 20 4c 65 74 73 45 6e 63 72 79 70 74 20 74 6f 20 70 72 | staging.API.of.LetsEncrypt.to.pr |
399c0 | 65 76 65 6e 74 20 61 6e 64 20 62 6c 61 63 6b 6c 69 73 74 69 6e 67 20 6f 66 20 79 6f 75 72 20 73 | event.and.blacklisting.of.your.s |
399e0 | 79 73 74 65 6d 2e 20 54 68 65 20 41 50 49 20 65 6e 64 70 6f 69 6e 74 20 69 73 20 68 74 74 70 73 | ystem..The.API.endpoint.is.https |
39a00 | 3a 2f 2f 61 63 6d 65 2d 73 74 61 67 69 6e 67 2d 76 30 32 2e 61 70 69 2e 6c 65 74 73 65 6e 63 72 | ://acme-staging-v02.api.letsencr |
39a20 | 79 70 74 2e 6f 72 67 2f 64 69 72 65 63 74 6f 72 79 00 44 75 72 69 6e 67 20 70 72 6f 66 69 6c 65 | ypt.org/directory.During.profile |
39a40 | 20 69 6d 70 6f 72 74 2c 20 74 68 65 20 75 73 65 72 20 69 73 20 61 73 6b 65 64 20 74 6f 20 65 6e | .import,.the.user.is.asked.to.en |
39a60 | 74 65 72 20 69 74 73 20 49 50 53 65 63 20 63 72 65 64 65 6e 74 69 61 6c 73 20 28 75 73 65 72 6e | ter.its.IPSec.credentials.(usern |
39a80 | 61 6d 65 20 61 6e 64 20 70 61 73 73 77 6f 72 64 29 20 77 68 69 63 68 20 69 73 20 73 74 6f 72 65 | ame.and.password).which.is.store |
39aa0 | 64 20 6f 6e 20 74 68 65 20 6d 6f 62 69 6c 65 2e 00 44 79 6e 61 6d 69 63 20 44 4e 53 00 44 79 6e | d.on.the.mobile..Dynamic.DNS.Dyn |
39ac0 | 61 6d 69 63 2d 70 72 6f 74 65 63 74 69 6f 6e 00 45 41 50 6f 4c 20 63 6f 6d 65 73 20 77 69 74 68 | amic-protection.EAPoL.comes.with |
39ae0 | 20 61 6e 20 69 64 65 6e 74 69 66 79 20 6f 70 74 69 6f 6e 2e 20 57 65 20 61 75 74 6f 6d 61 74 69 | .an.identify.option..We.automati |
39b00 | 63 61 6c 6c 79 20 75 73 65 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 4d 41 43 20 61 64 64 72 | cally.use.the.interface.MAC.addr |
39b20 | 65 73 73 20 61 73 20 69 64 65 6e 74 69 74 79 20 70 61 72 61 6d 65 74 65 72 2e 00 45 53 50 20 28 | ess.as.identity.parameter..ESP.( |
39b40 | 45 6e 63 61 70 73 75 6c 61 74 69 6e 67 20 53 65 63 75 72 69 74 79 20 50 61 79 6c 6f 61 64 29 20 | Encapsulating.Security.Payload). |
39b60 | 41 74 74 72 69 62 75 74 65 73 00 45 53 50 20 50 68 61 73 65 3a 00 45 53 50 20 69 73 20 75 73 65 | Attributes.ESP.Phase:.ESP.is.use |
39b80 | 64 20 74 6f 20 70 72 6f 76 69 64 65 20 63 6f 6e 66 69 64 65 6e 74 69 61 6c 69 74 79 2c 20 64 61 | d.to.provide.confidentiality,.da |
39ba0 | 74 61 20 6f 72 69 67 69 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2c 20 63 6f 6e 6e 65 63 | ta.origin.authentication,.connec |
39bc0 | 74 69 6f 6e 6c 65 73 73 20 69 6e 74 65 67 72 69 74 79 2c 20 61 6e 20 61 6e 74 69 2d 72 65 70 6c | tionless.integrity,.an.anti-repl |
39be0 | 61 79 20 73 65 72 76 69 63 65 20 28 61 20 66 6f 72 6d 20 6f 66 20 70 61 72 74 69 61 6c 20 73 65 | ay.service.(a.form.of.partial.se |
39c00 | 71 75 65 6e 63 65 20 69 6e 74 65 67 72 69 74 79 29 2c 20 61 6e 64 20 6c 69 6d 69 74 65 64 20 74 | quence.integrity),.and.limited.t |
39c20 | 72 61 66 66 69 63 20 66 6c 6f 77 20 63 6f 6e 66 69 64 65 6e 74 69 61 6c 69 74 79 2e 20 68 74 74 | raffic.flow.confidentiality..htt |
39c40 | 70 73 3a 2f 2f 64 61 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 68 74 | ps://datatracker.ietf.org/doc/ht |
39c60 | 6d 6c 2f 72 66 63 34 33 30 33 00 45 61 63 68 20 3a 61 62 62 72 3a 60 41 53 20 28 41 75 74 6f 6e | ml/rfc4303.Each.:abbr:`AS.(Auton |
39c80 | 6f 6d 6f 75 73 20 53 79 73 74 65 6d 29 60 20 68 61 73 20 61 6e 20 69 64 65 6e 74 69 66 79 69 6e | omous.System)`.has.an.identifyin |
39ca0 | 67 20 6e 75 6d 62 65 72 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 69 74 20 63 61 6c 6c | g.number.associated.with.it.call |
39cc0 | 65 64 20 61 6e 20 3a 61 62 62 72 3a 60 41 53 4e 20 28 41 75 74 6f 6e 6f 6d 6f 75 73 20 53 79 73 | ed.an.:abbr:`ASN.(Autonomous.Sys |
39ce0 | 74 65 6d 20 4e 75 6d 62 65 72 29 60 2e 20 54 68 69 73 20 69 73 20 61 20 74 77 6f 20 6f 63 74 65 | tem.Number)`..This.is.a.two.octe |
39d00 | 74 20 76 61 6c 75 65 20 72 61 6e 67 69 6e 67 20 69 6e 20 76 61 6c 75 65 20 66 72 6f 6d 20 31 20 | t.value.ranging.in.value.from.1. |
39d20 | 74 6f 20 36 35 35 33 35 2e 20 54 68 65 20 41 53 20 6e 75 6d 62 65 72 73 20 36 34 35 31 32 20 74 | to.65535..The.AS.numbers.64512.t |
39d40 | 68 72 6f 75 67 68 20 36 35 35 33 35 20 61 72 65 20 64 65 66 69 6e 65 64 20 61 73 20 70 72 69 76 | hrough.65535.are.defined.as.priv |
39d60 | 61 74 65 20 41 53 20 6e 75 6d 62 65 72 73 2e 20 50 72 69 76 61 74 65 20 41 53 20 6e 75 6d 62 65 | ate.AS.numbers..Private.AS.numbe |
39d80 | 72 73 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 64 76 65 72 74 69 73 65 64 20 6f 6e 20 74 68 65 | rs.must.not.be.advertised.on.the |
39da0 | 20 67 6c 6f 62 61 6c 20 49 6e 74 65 72 6e 65 74 2e 20 54 68 65 20 32 2d 62 79 74 65 20 41 53 20 | .global.Internet..The.2-byte.AS. |
39dc0 | 6e 75 6d 62 65 72 20 72 61 6e 67 65 20 68 61 73 20 62 65 65 6e 20 65 78 68 61 75 73 74 65 64 2e | number.range.has.been.exhausted. |
39de0 | 20 34 2d 62 79 74 65 20 41 53 20 6e 75 6d 62 65 72 73 20 61 72 65 20 73 70 65 63 69 66 69 65 64 | .4-byte.AS.numbers.are.specified |
39e00 | 20 69 6e 20 3a 72 66 63 3a 60 36 37 39 33 60 2c 20 61 6e 64 20 70 72 6f 76 69 64 65 20 61 20 70 | .in.:rfc:`6793`,.and.provide.a.p |
39e20 | 6f 6f 6c 20 6f 66 20 34 32 39 34 39 36 37 32 39 36 20 41 53 20 6e 75 6d 62 65 72 73 2e 00 45 61 | ool.of.4294967296.AS.numbers..Ea |
39e40 | 63 68 20 4e 65 74 66 69 6c 74 65 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 75 6e 69 71 75 | ch.Netfilter.connection.is.uniqu |
39e60 | 65 6c 79 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 61 20 28 6c 61 79 65 72 2d 33 20 70 72 6f | ely.identified.by.a.(layer-3.pro |
39e80 | 74 6f 63 6f 6c 2c 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2c 20 64 65 73 74 69 6e 61 74 69 | tocol,.source.address,.destinati |
39ea0 | 6f 6e 20 61 64 64 72 65 73 73 2c 20 6c 61 79 65 72 2d 34 20 70 72 6f 74 6f 63 6f 6c 2c 20 6c 61 | on.address,.layer-4.protocol,.la |
39ec0 | 79 65 72 2d 34 20 6b 65 79 29 20 74 75 70 6c 65 2e 20 54 68 65 20 6c 61 79 65 72 2d 34 20 6b 65 | yer-4.key).tuple..The.layer-4.ke |
39ee0 | 79 20 64 65 70 65 6e 64 73 20 6f 6e 20 74 68 65 20 74 72 61 6e 73 70 6f 72 74 20 70 72 6f 74 6f | y.depends.on.the.transport.proto |
39f00 | 63 6f 6c 3b 20 66 6f 72 20 54 43 50 2f 55 44 50 20 69 74 20 69 73 20 74 68 65 20 70 6f 72 74 20 | col;.for.TCP/UDP.it.is.the.port. |
39f20 | 6e 75 6d 62 65 72 73 2c 20 66 6f 72 20 74 75 6e 6e 65 6c 73 20 69 74 20 63 61 6e 20 62 65 20 74 | numbers,.for.tunnels.it.can.be.t |
39f40 | 68 65 69 72 20 74 75 6e 6e 65 6c 20 49 44 2c 20 62 75 74 20 6f 74 68 65 72 77 69 73 65 20 69 73 | heir.tunnel.ID,.but.otherwise.is |
39f60 | 20 6a 75 73 74 20 7a 65 72 6f 2c 20 61 73 20 69 66 20 69 74 20 77 65 72 65 20 6e 6f 74 20 70 61 | .just.zero,.as.if.it.were.not.pa |
39f80 | 72 74 20 6f 66 20 74 68 65 20 74 75 70 6c 65 2e 20 54 6f 20 62 65 20 61 62 6c 65 20 74 6f 20 69 | rt.of.the.tuple..To.be.able.to.i |
39fa0 | 6e 73 70 65 63 74 20 74 68 65 20 54 43 50 20 70 6f 72 74 20 69 6e 20 61 6c 6c 20 63 61 73 65 73 | nspect.the.TCP.port.in.all.cases |
39fc0 | 2c 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 62 65 20 6d 61 6e 64 61 74 6f 72 69 6c 79 20 64 65 | ,.packets.will.be.mandatorily.de |
39fe0 | 66 72 61 67 6d 65 6e 74 65 64 2e 00 45 61 63 68 20 56 58 4c 41 4e 20 73 65 67 6d 65 6e 74 20 69 | fragmented..Each.VXLAN.segment.i |
3a000 | 73 20 69 64 65 6e 74 69 66 69 65 64 20 74 68 72 6f 75 67 68 20 61 20 32 34 2d 62 69 74 20 73 65 | s.identified.through.a.24-bit.se |
3a020 | 67 6d 65 6e 74 20 49 44 2c 20 74 65 72 6d 65 64 20 74 68 65 20 3a 61 62 62 72 3a 60 56 4e 49 20 | gment.ID,.termed.the.:abbr:`VNI. |
3a040 | 28 56 58 4c 41 4e 20 4e 65 74 77 6f 72 6b 20 49 64 65 6e 74 69 66 69 65 72 20 28 6f 72 20 56 58 | (VXLAN.Network.Identifier.(or.VX |
3a060 | 4c 41 4e 20 53 65 67 6d 65 6e 74 20 49 44 29 29 60 2c 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 75 | LAN.Segment.ID))`,.This.allows.u |
3a080 | 70 20 74 6f 20 31 36 4d 20 56 58 4c 41 4e 20 73 65 67 6d 65 6e 74 73 20 74 6f 20 63 6f 65 78 69 | p.to.16M.VXLAN.segments.to.coexi |
3a0a0 | 73 74 20 77 69 74 68 69 6e 20 74 68 65 20 73 61 6d 65 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 | st.within.the.same.administrativ |
3a0c0 | 65 20 64 6f 6d 61 69 6e 2e 00 45 61 63 68 20 62 72 69 64 67 65 20 68 61 73 20 61 20 72 65 6c 61 | e.domain..Each.bridge.has.a.rela |
3a0e0 | 74 69 76 65 20 70 72 69 6f 72 69 74 79 20 61 6e 64 20 63 6f 73 74 2e 20 45 61 63 68 20 69 6e 74 | tive.priority.and.cost..Each.int |
3a100 | 65 72 66 61 63 65 20 69 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 61 20 70 6f 72 74 | erface.is.associated.with.a.port |
3a120 | 20 28 6e 75 6d 62 65 72 29 20 69 6e 20 74 68 65 20 53 54 50 20 63 6f 64 65 2e 20 45 61 63 68 20 | .(number).in.the.STP.code..Each. |
3a140 | 68 61 73 20 61 20 70 72 69 6f 72 69 74 79 20 61 6e 64 20 61 20 63 6f 73 74 2c 20 74 68 61 74 20 | has.a.priority.and.a.cost,.that. |
3a160 | 69 73 20 75 73 65 64 20 74 6f 20 64 65 63 69 64 65 20 77 68 69 63 68 20 69 73 20 74 68 65 20 73 | is.used.to.decide.which.is.the.s |
3a180 | 68 6f 72 74 65 73 74 20 70 61 74 68 20 74 6f 20 66 6f 72 77 61 72 64 20 61 20 70 61 63 6b 65 74 | hortest.path.to.forward.a.packet |
3a1a0 | 2e 20 54 68 65 20 6c 6f 77 65 73 74 20 63 6f 73 74 20 70 61 74 68 20 69 73 20 61 6c 77 61 79 73 | ..The.lowest.cost.path.is.always |
3a1c0 | 20 75 73 65 64 20 75 6e 6c 65 73 73 20 74 68 65 20 6f 74 68 65 72 20 70 61 74 68 20 69 73 20 64 | .used.unless.the.other.path.is.d |
3a1e0 | 6f 77 6e 2e 20 49 66 20 79 6f 75 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 62 72 69 64 67 65 | own..If.you.have.multiple.bridge |
3a200 | 73 20 61 6e 64 20 69 6e 74 65 72 66 61 63 65 73 20 74 68 65 6e 20 79 6f 75 20 6d 61 79 20 6e 65 | s.and.interfaces.then.you.may.ne |
3a220 | 65 64 20 74 6f 20 61 64 6a 75 73 74 20 74 68 65 20 70 72 69 6f 72 69 74 69 65 73 20 74 6f 20 61 | ed.to.adjust.the.priorities.to.a |
3a240 | 63 68 69 65 76 65 20 6f 70 74 69 6d 75 6d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 00 45 61 63 68 | chieve.optimum.performance..Each |
3a260 | 20 62 72 6f 61 64 63 61 73 74 20 72 65 6c 61 79 20 69 6e 73 74 61 6e 63 65 20 63 61 6e 20 62 65 | .broadcast.relay.instance.can.be |
3a280 | 20 69 6e 64 69 76 69 64 75 61 6c 6c 79 20 64 69 73 61 62 6c 65 64 20 77 69 74 68 6f 75 74 20 64 | .individually.disabled.without.d |
3a2a0 | 65 6c 65 74 69 6e 67 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6e 6f 64 65 20 62 79 20 75 | eleting.the.configured.node.by.u |
3a2c0 | 73 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 45 61 63 68 | sing.the.following.command:.Each |
3a2e0 | 20 63 6c 61 73 73 20 63 61 6e 20 68 61 76 65 20 61 20 67 75 61 72 61 6e 74 65 65 64 20 70 61 72 | .class.can.have.a.guaranteed.par |
3a300 | 74 20 6f 66 20 74 68 65 20 74 6f 74 61 6c 20 62 61 6e 64 77 69 64 74 68 20 64 65 66 69 6e 65 64 | t.of.the.total.bandwidth.defined |
3a320 | 20 66 6f 72 20 74 68 65 20 77 68 6f 6c 65 20 70 6f 6c 69 63 79 2c 20 73 6f 20 61 6c 6c 20 74 68 | .for.the.whole.policy,.so.all.th |
3a340 | 6f 73 65 20 73 68 61 72 65 73 20 74 6f 67 65 74 68 65 72 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 | ose.shares.together.should.not.b |
3a360 | 65 20 68 69 67 68 65 72 20 74 68 61 6e 20 74 68 65 20 70 6f 6c 69 63 79 27 73 20 77 68 6f 6c 65 | e.higher.than.the.policy's.whole |
3a380 | 20 62 61 6e 64 77 69 64 74 68 2e 00 45 61 63 68 20 63 6c 61 73 73 20 69 73 20 61 73 73 69 67 6e | .bandwidth..Each.class.is.assign |
3a3a0 | 65 64 20 61 20 64 65 66 69 63 69 74 20 63 6f 75 6e 74 65 72 20 28 74 68 65 20 6e 75 6d 62 65 72 | ed.a.deficit.counter.(the.number |
3a3c0 | 20 6f 66 20 62 79 74 65 73 20 74 68 61 74 20 61 20 66 6c 6f 77 20 69 73 20 61 6c 6c 6f 77 65 64 | .of.bytes.that.a.flow.is.allowed |
3a3e0 | 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 77 68 65 6e 20 69 74 20 69 73 20 69 74 73 20 74 75 72 6e | .to.transmit.when.it.is.its.turn |
3a400 | 29 20 69 6e 69 74 69 61 6c 69 7a 65 64 20 74 6f 20 71 75 61 6e 74 75 6d 2e 20 51 75 61 6e 74 75 | ).initialized.to.quantum..Quantu |
3a420 | 6d 20 69 73 20 61 20 70 61 72 61 6d 65 74 65 72 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 20 77 | m.is.a.parameter.you.configure.w |
3a440 | 68 69 63 68 20 61 63 74 73 20 6c 69 6b 65 20 61 20 63 72 65 64 69 74 20 6f 66 20 66 69 78 20 62 | hich.acts.like.a.credit.of.fix.b |
3a460 | 79 74 65 73 20 74 68 65 20 63 6f 75 6e 74 65 72 20 72 65 63 65 69 76 65 73 20 6f 6e 20 65 61 63 | ytes.the.counter.receives.on.eac |
3a480 | 68 20 72 6f 75 6e 64 2e 20 54 68 65 6e 20 74 68 65 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 70 6f | h.round..Then.the.Round-Robin.po |
3a4a0 | 6c 69 63 79 20 73 74 61 72 74 73 20 6d 6f 76 69 6e 67 20 69 74 73 20 52 6f 75 6e 64 20 52 6f 62 | licy.starts.moving.its.Round.Rob |
3a4c0 | 69 6e 20 70 6f 69 6e 74 65 72 20 74 68 72 6f 75 67 68 20 74 68 65 20 71 75 65 75 65 73 2e 20 49 | in.pointer.through.the.queues..I |
3a4e0 | 66 20 74 68 65 20 64 65 66 69 63 69 74 20 63 6f 75 6e 74 65 72 20 69 73 20 67 72 65 61 74 65 72 | f.the.deficit.counter.is.greater |
3a500 | 20 74 68 61 6e 20 74 68 65 20 70 61 63 6b 65 74 27 73 20 73 69 7a 65 20 61 74 20 74 68 65 20 68 | .than.the.packet's.size.at.the.h |
3a520 | 65 61 64 20 6f 66 20 74 68 65 20 71 75 65 75 65 2c 20 74 68 69 73 20 70 61 63 6b 65 74 20 77 69 | ead.of.the.queue,.this.packet.wi |
3a540 | 6c 6c 20 62 65 20 73 65 6e 74 20 61 6e 64 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 | ll.be.sent.and.the.value.of.the. |
3a560 | 63 6f 75 6e 74 65 72 20 77 69 6c 6c 20 62 65 20 64 65 63 72 65 6d 65 6e 74 65 64 20 62 79 20 74 | counter.will.be.decremented.by.t |
3a580 | 68 65 20 70 61 63 6b 65 74 20 73 69 7a 65 2e 20 54 68 65 6e 2c 20 74 68 65 20 73 69 7a 65 20 6f | he.packet.size..Then,.the.size.o |
3a5a0 | 66 20 74 68 65 20 6e 65 78 74 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 63 6f 6d 70 61 72 | f.the.next.packet.will.be.compar |
3a5c0 | 65 64 20 74 6f 20 74 68 65 20 63 6f 75 6e 74 65 72 20 76 61 6c 75 65 20 61 67 61 69 6e 2c 20 72 | ed.to.the.counter.value.again,.r |
3a5e0 | 65 70 65 61 74 69 6e 67 20 74 68 65 20 70 72 6f 63 65 73 73 2e 20 4f 6e 63 65 20 74 68 65 20 71 | epeating.the.process..Once.the.q |
3a600 | 75 65 75 65 20 69 73 20 65 6d 70 74 79 20 6f 72 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 | ueue.is.empty.or.the.value.of.th |
3a620 | 65 20 63 6f 75 6e 74 65 72 20 69 73 20 69 6e 73 75 66 66 69 63 69 65 6e 74 2c 20 74 68 65 20 52 | e.counter.is.insufficient,.the.R |
3a640 | 6f 75 6e 64 2d 52 6f 62 69 6e 20 70 6f 69 6e 74 65 72 20 77 69 6c 6c 20 6d 6f 76 65 20 74 6f 20 | ound-Robin.pointer.will.move.to. |
3a660 | 74 68 65 20 6e 65 78 74 20 71 75 65 75 65 2e 20 49 66 20 74 68 65 20 71 75 65 75 65 20 69 73 20 | the.next.queue..If.the.queue.is. |
3a680 | 65 6d 70 74 79 2c 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 64 65 66 69 63 69 74 20 | empty,.the.value.of.the.deficit. |
3a6a0 | 63 6f 75 6e 74 65 72 20 69 73 20 72 65 73 65 74 20 74 6f 20 30 2e 00 45 61 63 68 20 64 79 6e 61 | counter.is.reset.to.0..Each.dyna |
3a6c0 | 6d 69 63 20 4e 48 53 20 77 69 6c 6c 20 67 65 74 20 61 20 70 65 65 72 20 65 6e 74 72 79 20 77 69 | mic.NHS.will.get.a.peer.entry.wi |
3a6e0 | 74 68 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 | th.the.configured.network.addres |
3a700 | 73 20 61 6e 64 20 74 68 65 20 64 69 73 63 6f 76 65 72 65 64 20 4e 42 4d 41 20 61 64 64 72 65 73 | s.and.the.discovered.NBMA.addres |
3a720 | 73 2e 00 45 61 63 68 20 68 65 61 6c 74 68 20 63 68 65 63 6b 20 69 73 20 63 6f 6e 66 69 67 75 72 | s..Each.health.check.is.configur |
3a740 | 65 64 20 69 6e 20 69 74 73 20 6f 77 6e 20 74 65 73 74 2c 20 74 65 73 74 73 20 61 72 65 20 6e 75 | ed.in.its.own.test,.tests.are.nu |
3a760 | 6d 62 65 72 65 64 20 61 6e 64 20 70 72 6f 63 65 73 73 65 64 20 69 6e 20 6e 75 6d 65 72 69 63 20 | mbered.and.processed.in.numeric. |
3a780 | 6f 72 64 65 72 2e 20 46 6f 72 20 6d 75 6c 74 69 20 74 61 72 67 65 74 20 68 65 61 6c 74 68 20 63 | order..For.multi.target.health.c |
3a7a0 | 68 65 63 6b 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 74 65 73 74 73 20 63 61 6e 20 62 65 20 64 65 | hecking.multiple.tests.can.be.de |
3a7c0 | 66 69 6e 65 64 3a 00 45 61 63 68 20 69 6e 64 69 76 69 64 75 61 6c 20 63 6f 6e 66 69 67 75 72 65 | fined:.Each.individual.configure |
3a7e0 | 64 20 63 6f 6e 73 6f 6c 65 2d 73 65 72 76 65 72 20 64 65 76 69 63 65 20 63 61 6e 20 62 65 20 64 | d.console-server.device.can.be.d |
3a800 | 69 72 65 63 74 6c 79 20 65 78 70 6f 73 65 64 20 74 6f 20 74 68 65 20 6f 75 74 73 69 64 65 20 77 | irectly.exposed.to.the.outside.w |
3a820 | 6f 72 6c 64 2e 20 41 20 75 73 65 72 20 63 61 6e 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 | orld..A.user.can.directly.connec |
3a840 | 74 20 76 69 61 20 53 53 48 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 70 6f 72 74 | t.via.SSH.to.the.configured.port |
3a860 | 2e 00 45 61 63 68 20 6e 6f 64 65 20 28 48 75 62 20 61 6e 64 20 53 70 6f 6b 65 29 20 75 73 65 73 | ..Each.node.(Hub.and.Spoke).uses |
3a880 | 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 | .an.IP.address.from.the.network. |
3a8a0 | 31 37 32 2e 31 36 2e 32 35 33 2e 31 32 38 2f 32 39 2e 00 45 61 63 68 20 6f 66 20 74 68 65 20 69 | 172.16.253.128/29..Each.of.the.i |
3a8c0 | 6e 73 74 61 6c 6c 20 63 6f 6d 6d 61 6e 64 20 73 68 6f 75 6c 64 20 62 65 20 61 70 70 6c 69 65 64 | nstall.command.should.be.applied |
3a8e0 | 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6d 6d 69 74 | .to.the.configuration.and.commit |
3a900 | 65 64 20 62 65 66 6f 72 65 20 75 73 69 6e 67 20 75 6e 64 65 72 20 74 68 65 20 6f 70 65 6e 63 6f | ed.before.using.under.the.openco |
3a920 | 6e 6e 65 63 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 45 61 63 68 20 73 69 74 65 2d 74 | nnect.configuration:.Each.site-t |
3a940 | 6f 2d 73 69 74 65 20 70 65 65 72 20 68 61 73 20 74 68 65 20 6e 65 78 74 20 6f 70 74 69 6f 6e 73 | o-site.peer.has.the.next.options |
3a960 | 3a 00 45 65 6e 61 62 6c 65 73 20 74 68 65 20 47 65 6e 65 72 69 63 20 50 72 6f 74 6f 63 6f 6c 20 | :.Eenables.the.Generic.Protocol. |
3a980 | 65 78 74 65 6e 73 69 6f 6e 20 28 56 58 4c 41 4e 2d 47 50 45 29 2e 20 43 75 72 72 65 6e 74 6c 79 | extension.(VXLAN-GPE)..Currently |
3a9a0 | 2c 20 74 68 69 73 20 69 73 20 6f 6e 6c 79 20 73 75 70 70 6f 72 74 65 64 20 74 6f 67 65 74 68 65 | ,.this.is.only.supported.togethe |
3a9c0 | 72 20 77 69 74 68 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6b 65 79 77 6f 72 64 2e 00 45 6d 61 | r.with.the.external.keyword..Ema |
3a9e0 | 69 6c 20 61 64 64 72 65 73 73 20 74 6f 20 61 73 73 6f 63 69 61 74 65 20 77 69 74 68 20 63 65 72 | il.address.to.associate.with.cer |
3aa00 | 74 69 66 69 63 61 74 65 00 45 6d 61 69 6c 20 75 73 65 64 20 66 6f 72 20 72 65 67 69 73 74 72 61 | tificate.Email.used.for.registra |
3aa20 | 74 69 6f 6e 20 61 6e 64 20 72 65 63 6f 76 65 72 79 20 63 6f 6e 74 61 63 74 2e 00 45 6d 62 65 64 | tion.and.recovery.contact..Embed |
3aa40 | 64 69 6e 67 20 6f 6e 65 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 6e 6f 74 68 65 72 20 6f 6e 65 | ding.one.policy.into.another.one |
3aa60 | 00 45 6d 65 72 67 65 6e 63 79 00 45 6e 61 62 6c 65 20 3a 61 62 62 72 3a 60 42 4d 50 20 28 42 47 | .Emergency.Enable.:abbr:`BMP.(BG |
3aa80 | 50 20 4d 6f 6e 69 74 6f 72 69 6e 67 20 50 72 6f 74 6f 63 6f 6c 29 60 20 73 75 70 70 6f 72 74 00 | P.Monitoring.Protocol)`.support. |
3aaa0 | 45 6e 61 62 6c 65 20 42 46 44 20 66 6f 72 20 49 53 49 53 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 | Enable.BFD.for.ISIS.on.an.interf |
3aac0 | 61 63 65 00 45 6e 61 62 6c 65 20 42 46 44 20 66 6f 72 20 4f 53 50 46 20 6f 6e 20 61 6e 20 69 6e | ace.Enable.BFD.for.OSPF.on.an.in |
3aae0 | 74 65 72 66 61 63 65 00 45 6e 61 62 6c 65 20 42 46 44 20 66 6f 72 20 4f 53 50 46 76 33 20 6f 6e | terface.Enable.BFD.for.OSPFv3.on |
3ab00 | 20 61 6e 20 69 6e 74 65 72 66 61 63 65 00 45 6e 61 62 6c 65 20 42 46 44 20 69 6e 20 42 47 50 00 | .an.interface.Enable.BFD.in.BGP. |
3ab20 | 45 6e 61 62 6c 65 20 42 46 44 20 69 6e 20 49 53 49 53 00 45 6e 61 62 6c 65 20 42 46 44 20 69 6e | Enable.BFD.in.ISIS.Enable.BFD.in |
3ab40 | 20 4f 53 50 46 00 45 6e 61 62 6c 65 20 42 46 44 20 6f 6e 20 61 20 42 47 50 20 70 65 65 72 20 67 | .OSPF.Enable.BFD.on.a.BGP.peer.g |
3ab60 | 72 6f 75 70 00 45 6e 61 62 6c 65 20 42 46 44 20 6f 6e 20 61 20 73 69 6e 67 6c 65 20 42 47 50 20 | roup.Enable.BFD.on.a.single.BGP. |
3ab80 | 6e 65 69 67 68 62 6f 72 00 45 6e 61 62 6c 65 20 44 48 43 50 20 66 61 69 6c 6f 76 65 72 20 63 6f | neighbor.Enable.DHCP.failover.co |
3aba0 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 74 68 69 73 20 61 64 64 72 65 73 73 20 70 6f 6f | nfiguration.for.this.address.poo |
3abc0 | 6c 2e 00 45 6e 61 62 6c 65 20 48 54 2d 64 65 6c 61 79 65 64 20 42 6c 6f 63 6b 20 41 63 6b 20 60 | l..Enable.HT-delayed.Block.Ack.` |
3abe0 | 60 5b 44 45 4c 41 59 45 44 2d 42 41 5d 60 60 00 45 6e 61 62 6c 65 20 49 43 4d 50 20 52 6f 75 74 | `[DELAYED-BA]``.Enable.ICMP.Rout |
3ac00 | 65 72 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 20 73 75 70 70 6f 72 74 00 45 6e | er.Discovery.Protocol.support.En |
3ac20 | 61 62 6c 65 20 49 47 4d 50 20 61 6e 64 20 4d 4c 44 20 71 75 65 72 69 65 72 2e 00 45 6e 61 62 6c | able.IGMP.and.MLD.querier..Enabl |
3ac40 | 65 20 49 47 4d 50 20 61 6e 64 20 4d 4c 44 20 73 6e 6f 6f 70 69 6e 67 2e 00 45 6e 61 62 6c 65 20 | e.IGMP.and.MLD.snooping..Enable. |
3ac60 | 49 50 20 66 6f 72 77 61 72 64 69 6e 67 20 6f 6e 20 63 6c 69 65 6e 74 00 45 6e 61 62 6c 65 20 49 | IP.forwarding.on.client.Enable.I |
3ac80 | 53 2d 49 53 00 45 6e 61 62 6c 65 20 49 53 2d 49 53 20 61 6e 64 20 49 47 50 2d 4c 44 50 20 73 79 | S-IS.Enable.IS-IS.and.IGP-LDP.sy |
3aca0 | 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 00 45 6e 61 62 6c 65 20 49 53 2d 49 53 20 61 6e 64 20 72 | nchronization.Enable.IS-IS.and.r |
3acc0 | 65 64 69 73 74 72 69 62 75 74 65 20 72 6f 75 74 65 73 20 6e 6f 74 20 6e 61 74 69 76 65 6c 79 20 | edistribute.routes.not.natively. |
3ace0 | 69 6e 20 49 53 2d 49 53 00 45 6e 61 62 6c 65 20 49 53 2d 49 53 20 77 69 74 68 20 53 65 67 6d 65 | in.IS-IS.Enable.IS-IS.with.Segme |
3ad00 | 6e 74 20 52 6f 75 74 69 6e 67 20 28 45 78 70 65 72 69 6d 65 6e 74 61 6c 29 00 45 6e 61 62 6c 65 | nt.Routing.(Experimental).Enable |
3ad20 | 20 4c 2d 53 49 47 20 54 58 4f 50 20 70 72 6f 74 65 63 74 69 6f 6e 20 63 61 70 61 62 69 6c 69 74 | .L-SIG.TXOP.protection.capabilit |
3ad40 | 79 00 45 6e 61 62 6c 65 20 4c 44 50 43 20 28 4c 6f 77 20 44 65 6e 73 69 74 79 20 50 61 72 69 74 | y.Enable.LDPC.(Low.Density.Parit |
3ad60 | 79 20 43 68 65 63 6b 29 20 63 6f 64 69 6e 67 20 63 61 70 61 62 69 6c 69 74 79 00 45 6e 61 62 6c | y.Check).coding.capability.Enabl |
3ad80 | 65 20 4c 44 50 43 20 63 6f 64 69 6e 67 20 63 61 70 61 62 69 6c 69 74 79 00 45 6e 61 62 6c 65 20 | e.LDPC.coding.capability.Enable. |
3ada0 | 4c 4c 44 50 20 73 65 72 76 69 63 65 00 45 6e 61 62 6c 65 20 4f 53 50 46 00 45 6e 61 62 6c 65 20 | LLDP.service.Enable.OSPF.Enable. |
3adc0 | 4f 53 50 46 20 61 6e 64 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e | OSPF.and.IGP-LDP.synchronization |
3ade0 | 3a 00 45 6e 61 62 6c 65 20 4f 53 50 46 20 77 69 74 68 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 | :.Enable.OSPF.with.Segment.Routi |
3ae00 | 6e 67 20 28 45 78 70 65 72 69 6d 65 6e 74 61 6c 29 3a 00 45 6e 61 62 6c 65 20 4f 53 50 46 20 77 | ng.(Experimental):.Enable.OSPF.w |
3ae20 | 69 74 68 20 72 6f 75 74 65 20 72 65 64 69 73 74 72 69 62 75 74 69 6f 6e 20 6f 66 20 74 68 65 20 | ith.route.redistribution.of.the. |
3ae40 | 6c 6f 6f 70 62 61 63 6b 20 61 6e 64 20 64 65 66 61 75 6c 74 20 6f 72 69 67 69 6e 61 74 65 3a 00 | loopback.and.default.originate:. |
3ae60 | 45 6e 61 62 6c 65 20 4f 54 50 20 32 46 41 20 66 6f 72 20 75 73 65 72 20 60 75 73 65 72 6e 61 6d | Enable.OTP.2FA.for.user.`usernam |
3ae80 | 65 60 20 77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74 69 6e 67 73 2c 20 75 73 69 6e 67 20 | e`.with.default.settings,.using. |
3aea0 | 74 68 65 20 42 41 53 45 33 32 20 65 6e 63 6f 64 65 64 20 32 46 41 2f 4d 46 41 20 6b 65 79 20 73 | the.BASE32.encoded.2FA/MFA.key.s |
3aec0 | 70 65 63 69 66 69 65 64 20 62 79 20 60 3c 6b 65 79 3e 60 2e 00 45 6e 61 62 6c 65 20 4f 70 65 6e | pecified.by.`<key>`..Enable.Open |
3aee0 | 56 50 4e 20 44 61 74 61 20 43 68 61 6e 6e 65 6c 20 4f 66 66 6c 6f 61 64 20 66 65 61 74 75 72 65 | VPN.Data.Channel.Offload.feature |
3af00 | 20 62 79 20 6c 6f 61 64 69 6e 67 20 74 68 65 20 61 70 70 72 6f 70 72 69 61 74 65 20 6b 65 72 6e | .by.loading.the.appropriate.kern |
3af20 | 65 6c 20 6d 6f 64 75 6c 65 2e 00 45 6e 61 62 6c 65 20 50 52 45 46 36 34 20 6f 70 74 69 6f 6e 20 | el.module..Enable.PREF64.option. |
3af40 | 61 73 20 6f 75 74 6c 69 6e 65 64 20 69 6e 20 3a 72 66 63 3a 60 38 37 38 31 60 2e 00 45 6e 61 62 | as.outlined.in.:rfc:`8781`..Enab |
3af60 | 6c 65 20 53 4e 4d 50 00 45 6e 61 62 6c 65 20 53 4e 4d 50 20 71 75 65 72 69 65 73 20 6f 66 20 74 | le.SNMP.Enable.SNMP.queries.of.t |
3af80 | 68 65 20 4c 4c 44 50 20 64 61 74 61 62 61 73 65 00 45 6e 61 62 6c 65 20 53 4e 4d 50 20 73 75 70 | he.LLDP.database.Enable.SNMP.sup |
3afa0 | 70 6f 72 74 20 66 6f 72 20 61 6e 20 69 6e 64 69 76 69 64 75 61 6c 20 72 6f 75 74 69 6e 67 20 64 | port.for.an.individual.routing.d |
3afc0 | 61 65 6d 6f 6e 2e 00 45 6e 61 62 6c 65 20 53 54 50 00 45 6e 61 62 6c 65 20 54 46 54 50 20 73 65 | aemon..Enable.STP.Enable.TFTP.se |
3afe0 | 72 76 69 63 65 20 62 79 20 73 70 65 63 69 66 79 69 6e 67 20 74 68 65 20 60 3c 64 69 72 65 63 74 | rvice.by.specifying.the.`<direct |
3b000 | 6f 72 79 3e 60 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 74 6f 20 73 65 72 76 | ory>`.which.will.be.used.to.serv |
3b020 | 65 20 66 69 6c 65 73 2e 00 45 6e 61 62 6c 65 20 56 48 54 20 54 58 4f 50 20 50 6f 77 65 72 20 53 | e.files..Enable.VHT.TXOP.Power.S |
3b040 | 61 76 65 20 4d 6f 64 65 00 45 6e 61 62 6c 65 20 56 4c 41 4e 2d 41 77 61 72 65 20 42 72 69 64 67 | ave.Mode.Enable.VLAN-Aware.Bridg |
3b060 | 65 00 45 6e 61 62 6c 65 20 61 75 74 6f 6d 61 74 69 63 20 72 65 64 69 72 65 63 74 20 66 72 6f 6d | e.Enable.automatic.redirect.from |
3b080 | 20 68 74 74 70 20 74 6f 20 68 74 74 70 73 2e 00 45 6e 61 62 6c 65 20 63 72 65 61 74 69 6f 6e 20 | .http.to.https..Enable.creation. |
3b0a0 | 6f 66 20 73 68 6f 72 74 63 75 74 20 72 6f 75 74 65 73 2e 00 45 6e 61 62 6c 65 20 64 69 66 66 65 | of.shortcut.routes..Enable.diffe |
3b0c0 | 72 65 6e 74 20 74 79 70 65 73 20 6f 66 20 68 61 72 64 77 61 72 65 20 6f 66 66 6c 6f 61 64 69 6e | rent.types.of.hardware.offloadin |
3b0e0 | 67 20 6f 6e 20 74 68 65 20 67 69 76 65 6e 20 4e 49 43 2e 00 45 6e 61 62 6c 65 20 67 69 76 65 6e | g.on.the.given.NIC..Enable.given |
3b100 | 20 6c 65 67 61 63 79 20 70 72 6f 74 6f 63 6f 6c 20 6f 6e 20 74 68 69 73 20 4c 4c 44 50 20 69 6e | .legacy.protocol.on.this.LLDP.in |
3b120 | 73 74 61 6e 63 65 2e 20 4c 65 67 61 63 79 20 70 72 6f 74 6f 63 6f 6c 73 20 69 6e 63 6c 75 64 65 | stance..Legacy.protocols.include |
3b140 | 3a 00 45 6e 61 62 6c 65 20 6c 61 79 65 72 20 37 20 48 54 54 50 20 68 65 61 6c 74 68 20 63 68 65 | :.Enable.layer.7.HTTP.health.che |
3b160 | 63 6b 00 45 6e 61 62 6c 65 20 6c 6f 67 67 69 6e 67 20 66 6f 72 20 74 68 65 20 6d 61 74 63 68 65 | ck.Enable.logging.for.the.matche |
3b180 | 64 20 70 61 63 6b 65 74 2e 20 49 66 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | d.packet..If.this.configuration. |
3b1a0 | 63 6f 6d 6d 61 6e 64 20 69 73 20 6e 6f 74 20 70 72 65 73 65 6e 74 2c 20 74 68 65 6e 20 6c 6f 67 | command.is.not.present,.then.log |
3b1c0 | 20 69 73 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 00 45 6e 61 62 6c 65 20 6f 72 20 44 69 73 61 62 | .is.not.enabled..Enable.or.Disab |
3b1e0 | 6c 65 20 56 79 4f 53 20 74 6f 20 62 65 20 3a 72 66 63 3a 60 31 33 33 37 60 20 63 6f 6e 66 6f 72 | le.VyOS.to.be.:rfc:`1337`.confor |
3b200 | 6d 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 | m..The.following.system.paramete |
3b220 | 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 45 6e 61 62 6c 65 20 6f 72 20 44 69 73 | r.will.be.altered:.Enable.or.Dis |
3b240 | 61 62 6c 65 20 69 66 20 56 79 4f 53 20 75 73 65 20 49 50 76 34 20 54 43 50 20 53 59 4e 20 43 6f | able.if.VyOS.use.IPv4.TCP.SYN.Co |
3b260 | 6f 6b 69 65 73 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 | okies..The.following.system.para |
3b280 | 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 45 6e 61 62 6c 65 20 6f 72 | meter.will.be.altered:.Enable.or |
3b2a0 | 20 64 69 73 61 62 6c 65 20 6c 6f 67 67 69 6e 67 20 66 6f 72 20 74 68 65 20 6d 61 74 63 68 65 64 | .disable.logging.for.the.matched |
3b2c0 | 20 70 61 63 6b 65 74 2e 00 45 6e 61 62 6c 65 20 6f 73 70 66 20 6f 6e 20 61 6e 20 69 6e 74 65 72 | .packet..Enable.ospf.on.an.inter |
3b2e0 | 66 61 63 65 20 61 6e 64 20 73 65 74 20 61 73 73 6f 63 69 61 74 65 64 20 61 72 65 61 2e 00 45 6e | face.and.set.associated.area..En |
3b300 | 61 62 6c 65 20 70 6f 6c 69 63 79 20 66 6f 72 20 73 6f 75 72 63 65 20 76 61 6c 69 64 61 74 69 6f | able.policy.for.source.validatio |
3b320 | 6e 20 62 79 20 72 65 76 65 72 73 65 64 20 70 61 74 68 2c 20 61 73 20 73 70 65 63 69 66 69 65 64 | n.by.reversed.path,.as.specified |
3b340 | 20 69 6e 20 3a 72 66 63 3a 60 33 37 30 34 60 2e 20 43 75 72 72 65 6e 74 20 72 65 63 6f 6d 6d 65 | .in.:rfc:`3704`..Current.recomme |
3b360 | 6e 64 65 64 20 70 72 61 63 74 69 63 65 20 69 6e 20 3a 72 66 63 3a 60 33 37 30 34 60 20 69 73 20 | nded.practice.in.:rfc:`3704`.is. |
3b380 | 74 6f 20 65 6e 61 62 6c 65 20 73 74 72 69 63 74 20 6d 6f 64 65 20 74 6f 20 70 72 65 76 65 6e 74 | to.enable.strict.mode.to.prevent |
3b3a0 | 20 49 50 20 73 70 6f 6f 66 69 6e 67 20 66 72 6f 6d 20 44 44 6f 73 20 61 74 74 61 63 6b 73 2e 20 | .IP.spoofing.from.DDos.attacks.. |
3b3c0 | 49 66 20 75 73 69 6e 67 20 61 73 79 6d 6d 65 74 72 69 63 20 72 6f 75 74 69 6e 67 20 6f 72 20 6f | If.using.asymmetric.routing.or.o |
3b3e0 | 74 68 65 72 20 63 6f 6d 70 6c 69 63 61 74 65 64 20 72 6f 75 74 69 6e 67 2c 20 74 68 65 6e 20 6c | ther.complicated.routing,.then.l |
3b400 | 6f 6f 73 65 20 6d 6f 64 65 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 2e 00 45 6e 61 62 6c 65 | oose.mode.is.recommended..Enable |
3b420 | 20 72 65 63 65 69 76 69 6e 67 20 50 50 44 55 20 75 73 69 6e 67 20 53 54 42 43 20 28 53 70 61 63 | .receiving.PPDU.using.STBC.(Spac |
3b440 | 65 20 54 69 6d 65 20 42 6c 6f 63 6b 20 43 6f 64 69 6e 67 29 00 45 6e 61 62 6c 65 20 73 61 6d 70 | e.Time.Block.Coding).Enable.samp |
3b460 | 6c 69 6e 67 20 6f 66 20 70 61 63 6b 65 74 73 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 74 | ling.of.packets,.which.will.be.t |
3b480 | 72 61 6e 73 6d 69 74 74 65 64 20 74 6f 20 73 46 6c 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 73 2e 00 | ransmitted.to.sFlow.collectors.. |
3b4a0 | 45 6e 61 62 6c 65 20 73 65 6e 64 69 6e 67 20 50 50 44 55 20 75 73 69 6e 67 20 53 54 42 43 20 28 | Enable.sending.PPDU.using.STBC.( |
3b4c0 | 53 70 61 63 65 20 54 69 6d 65 20 42 6c 6f 63 6b 20 43 6f 64 69 6e 67 29 00 45 6e 61 62 6c 65 20 | Space.Time.Block.Coding).Enable. |
3b4e0 | 73 65 6e 64 69 6e 67 20 6f 66 20 43 69 73 63 6f 20 73 74 79 6c 65 20 4e 48 52 50 20 54 72 61 66 | sending.of.Cisco.style.NHRP.Traf |
3b500 | 66 69 63 20 49 6e 64 69 63 61 74 69 6f 6e 20 70 61 63 6b 65 74 73 2e 20 49 66 20 74 68 69 73 20 | fic.Indication.packets..If.this. |
3b520 | 69 73 20 65 6e 61 62 6c 65 64 20 61 6e 64 20 6f 70 65 6e 6e 68 72 70 20 64 65 74 65 63 74 73 20 | is.enabled.and.opennhrp.detects. |
3b540 | 61 20 66 6f 72 77 61 72 64 65 64 20 20 70 61 63 6b 65 74 2c 20 69 74 20 77 69 6c 6c 20 73 65 6e | a.forwarded..packet,.it.will.sen |
3b560 | 64 20 61 20 6d 65 73 73 61 67 65 20 74 6f 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 73 65 6e 64 | d.a.message.to.the.original.send |
3b580 | 65 72 20 6f 66 20 74 68 65 20 70 61 63 6b 65 74 20 69 6e 73 74 72 75 63 74 69 6e 67 20 69 74 20 | er.of.the.packet.instructing.it. |
3b5a0 | 74 6f 20 63 72 65 61 74 65 20 61 20 64 69 72 65 63 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 | to.create.a.direct.connection.wi |
3b5c0 | 74 68 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 20 54 68 69 73 20 69 73 20 62 61 73 69 | th.the.destination..This.is.basi |
3b5e0 | 63 61 6c 6c 79 20 61 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 65 71 75 | cally.a.protocol.independent.equ |
3b600 | 69 76 61 6c 65 6e 74 20 6f 66 20 49 43 4d 50 20 72 65 64 69 72 65 63 74 2e 00 45 6e 61 62 6c 65 | ivalent.of.ICMP.redirect..Enable |
3b620 | 20 73 70 61 6e 6e 69 6e 67 20 74 72 65 65 20 70 72 6f 74 6f 63 6f 6c 2e 20 53 54 50 20 69 73 20 | .spanning.tree.protocol..STP.is. |
3b640 | 64 69 73 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 2e 00 45 6e 61 62 6c 65 20 74 68 65 20 | disabled.by.default..Enable.the. |
3b660 | 4f 70 61 71 75 65 2d 4c 53 41 20 63 61 70 61 62 69 6c 69 74 79 20 28 72 66 63 32 33 37 30 29 2c | Opaque-LSA.capability.(rfc2370), |
3b680 | 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 74 72 61 6e 73 70 6f 72 74 20 6c 61 62 65 6c 20 6f 6e | .necessary.to.transport.label.on |
3b6a0 | 20 49 47 50 00 45 6e 61 62 6c 65 20 74 68 69 73 20 66 65 61 74 75 72 65 20 63 61 75 73 65 73 20 | .IGP.Enable.this.feature.causes. |
3b6c0 | 61 6e 20 69 6e 74 65 72 66 61 63 65 20 72 65 73 65 74 2e 00 45 6e 61 62 6c 65 20 74 72 61 6e 73 | an.interface.reset..Enable.trans |
3b6e0 | 6d 69 73 73 69 6f 6e 20 6f 66 20 4c 4c 44 50 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 67 | mission.of.LLDP.information.on.g |
3b700 | 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 20 59 6f 75 20 63 61 6e 20 61 6c 73 6f | iven.`<interface>`..You.can.also |
3b720 | 20 73 61 79 20 60 60 61 6c 6c 60 60 20 68 65 72 65 20 73 6f 20 4c 4c 44 50 20 69 73 20 74 75 72 | .say.``all``.here.so.LLDP.is.tur |
3b740 | 6e 65 64 20 6f 6e 20 6f 6e 20 65 76 65 72 79 20 69 6e 74 65 72 66 61 63 65 2e 00 45 6e 61 62 6c | ned.on.on.every.interface..Enabl |
3b760 | 65 64 20 6f 6e 2d 64 65 6d 61 6e 64 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 62 | ed.on-demand.PPPoE.connections.b |
3b780 | 72 69 6e 67 20 75 70 20 74 68 65 20 6c 69 6e 6b 20 6f 6e 6c 79 20 77 68 65 6e 20 74 72 61 66 66 | ring.up.the.link.only.when.traff |
3b7a0 | 69 63 20 6e 65 65 64 73 20 74 6f 20 70 61 73 73 20 74 68 69 73 20 6c 69 6e 6b 2e 20 20 49 66 20 | ic.needs.to.pass.this.link...If. |
3b7c0 | 74 68 65 20 6c 69 6e 6b 20 66 61 69 6c 73 20 66 6f 72 20 61 6e 79 20 72 65 61 73 6f 6e 2c 20 74 | the.link.fails.for.any.reason,.t |
3b7e0 | 68 65 20 6c 69 6e 6b 20 69 73 20 62 72 6f 75 67 68 74 20 62 61 63 6b 20 75 70 20 61 75 74 6f 6d | he.link.is.brought.back.up.autom |
3b800 | 61 74 69 63 61 6c 6c 79 20 6f 6e 63 65 20 74 72 61 66 66 69 63 20 70 61 73 73 65 73 20 74 68 65 | atically.once.traffic.passes.the |
3b820 | 20 69 6e 74 65 72 66 61 63 65 20 61 67 61 69 6e 2e 20 49 66 20 79 6f 75 20 63 6f 6e 66 69 67 75 | .interface.again..If.you.configu |
3b840 | 72 65 20 61 6e 20 6f 6e 2d 64 65 6d 61 6e 64 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e | re.an.on-demand.PPPoE.connection |
3b860 | 2c 20 79 6f 75 20 6d 75 73 74 20 61 6c 73 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 69 64 | ,.you.must.also.configure.the.id |
3b880 | 6c 65 20 74 69 6d 65 6f 75 74 20 70 65 72 69 6f 64 2c 20 61 66 74 65 72 20 77 68 69 63 68 20 61 | le.timeout.period,.after.which.a |
3b8a0 | 6e 20 69 64 6c 65 20 50 50 50 6f 45 20 6c 69 6e 6b 20 77 69 6c 6c 20 62 65 20 64 69 73 63 6f 6e | n.idle.PPPoE.link.will.be.discon |
3b8c0 | 6e 65 63 74 65 64 2e 20 41 20 6e 6f 6e 2d 7a 65 72 6f 20 69 64 6c 65 20 74 69 6d 65 6f 75 74 20 | nected..A.non-zero.idle.timeout. |
3b8e0 | 77 69 6c 6c 20 6e 65 76 65 72 20 64 69 73 63 6f 6e 6e 65 63 74 20 74 68 65 20 6c 69 6e 6b 20 61 | will.never.disconnect.the.link.a |
3b900 | 66 74 65 72 20 69 74 20 66 69 72 73 74 20 63 61 6d 65 20 75 70 2e 00 45 6e 61 62 6c 65 73 20 43 | fter.it.first.came.up..Enables.C |
3b920 | 69 73 63 6f 20 73 74 79 6c 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 6e 20 4e 48 52 | isco.style.authentication.on.NHR |
3b940 | 50 20 70 61 63 6b 65 74 73 2e 20 54 68 69 73 20 65 6d 62 65 64 73 20 74 68 65 20 73 65 63 72 65 | P.packets..This.embeds.the.secre |
3b960 | 74 20 70 6c 61 69 6e 74 65 78 74 20 70 61 73 73 77 6f 72 64 20 74 6f 20 74 68 65 20 6f 75 74 67 | t.plaintext.password.to.the.outg |
3b980 | 6f 69 6e 67 20 4e 48 52 50 20 70 61 63 6b 65 74 73 2e 20 49 6e 63 6f 6d 69 6e 67 20 4e 48 52 50 | oing.NHRP.packets..Incoming.NHRP |
3b9a0 | 20 70 61 63 6b 65 74 73 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 61 72 65 20 64 | .packets.on.this.interface.are.d |
3b9c0 | 69 73 63 61 72 64 65 64 20 75 6e 6c 65 73 73 20 74 68 65 20 73 65 63 72 65 74 20 70 61 73 73 77 | iscarded.unless.the.secret.passw |
3b9e0 | 6f 72 64 20 69 73 20 70 72 65 73 65 6e 74 2e 20 4d 61 78 69 6d 75 6d 20 6c 65 6e 67 74 68 20 6f | ord.is.present..Maximum.length.o |
3ba00 | 66 20 74 68 65 20 73 65 63 72 65 74 20 69 73 20 38 20 63 68 61 72 61 63 74 65 72 73 2e 00 45 6e | f.the.secret.is.8.characters..En |
3ba20 | 61 62 6c 65 73 20 61 6e 20 4d 50 4c 53 20 6c 61 62 65 6c 20 74 6f 20 62 65 20 61 74 74 61 63 68 | ables.an.MPLS.label.to.be.attach |
3ba40 | 65 64 20 74 6f 20 61 20 72 6f 75 74 65 20 65 78 70 6f 72 74 65 64 20 66 72 6f 6d 20 74 68 65 20 | ed.to.a.route.exported.from.the. |
3ba60 | 63 75 72 72 65 6e 74 20 75 6e 69 63 61 73 74 20 56 52 46 20 74 6f 20 56 50 4e 2e 20 49 66 20 74 | current.unicast.VRF.to.VPN..If.t |
3ba80 | 68 65 20 76 61 6c 75 65 20 73 70 65 63 69 66 69 65 64 20 69 73 20 61 75 74 6f 2c 20 74 68 65 20 | he.value.specified.is.auto,.the. |
3baa0 | 6c 61 62 65 6c 20 76 61 6c 75 65 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 73 73 | label.value.is.automatically.ass |
3bac0 | 69 67 6e 65 64 20 66 72 6f 6d 20 61 20 70 6f 6f 6c 20 6d 61 69 6e 74 61 69 6e 65 64 2e 00 45 6e | igned.from.a.pool.maintained..En |
3bae0 | 61 62 6c 65 73 20 62 61 6e 64 77 69 64 74 68 20 73 68 61 70 69 6e 67 20 76 69 61 20 52 41 44 49 | ables.bandwidth.shaping.via.RADI |
3bb00 | 55 53 2e 00 45 6e 61 62 6c 65 73 20 69 6d 70 6f 72 74 20 6f 72 20 65 78 70 6f 72 74 20 6f 66 20 | US..Enables.import.or.export.of. |
3bb20 | 72 6f 75 74 65 73 20 62 65 74 77 65 65 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 75 6e 69 63 61 | routes.between.the.current.unica |
3bb40 | 73 74 20 56 52 46 20 61 6e 64 20 56 50 4e 2e 00 45 6e 61 62 6c 65 73 20 74 68 65 20 47 65 6e 65 | st.VRF.and.VPN..Enables.the.Gene |
3bb60 | 72 69 63 20 50 72 6f 74 6f 63 6f 6c 20 65 78 74 65 6e 73 69 6f 6e 20 28 56 58 4c 41 4e 2d 47 50 | ric.Protocol.extension.(VXLAN-GP |
3bb80 | 45 29 2e 20 43 75 72 72 65 6e 74 6c 79 2c 20 74 68 69 73 20 69 73 20 6f 6e 6c 79 20 73 75 70 70 | E)..Currently,.this.is.only.supp |
3bba0 | 6f 72 74 65 64 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 74 68 65 20 65 78 74 65 72 6e 61 6c | orted.together.with.the.external |
3bbc0 | 20 6b 65 79 77 6f 72 64 2e 00 45 6e 61 62 6c 65 73 20 74 68 65 20 65 63 68 6f 20 74 72 61 6e 73 | .keyword..Enables.the.echo.trans |
3bbe0 | 6d 69 73 73 69 6f 6e 20 6d 6f 64 65 00 45 6e 61 62 6c 65 73 20 74 68 65 20 72 6f 6f 74 20 70 61 | mission.mode.Enables.the.root.pa |
3bc00 | 72 74 69 74 69 6f 6e 20 61 75 74 6f 2d 65 78 74 65 6e 73 69 6f 6e 20 61 6e 64 20 72 65 73 69 7a | rtition.auto-extension.and.resiz |
3bc20 | 65 73 20 74 6f 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 61 76 61 69 6c 61 62 6c 65 20 73 70 61 63 | es.to.the.maximum.available.spac |
3bc40 | 65 20 6f 6e 20 73 79 73 74 65 6d 20 62 6f 6f 74 2e 00 45 6e 61 62 6c 69 6e 67 20 41 64 76 65 72 | e.on.system.boot..Enabling.Adver |
3bc60 | 74 69 73 6d 65 6e 74 73 00 45 6e 61 62 6c 69 6e 67 20 4f 70 65 6e 56 50 4e 20 44 43 4f 00 45 6e | tisments.Enabling.OpenVPN.DCO.En |
3bc80 | 61 62 6c 69 6e 67 20 53 53 48 20 6f 6e 6c 79 20 72 65 71 75 69 72 65 73 20 79 6f 75 20 74 6f 20 | abling.SSH.only.requires.you.to. |
3bca0 | 73 70 65 63 69 66 79 20 74 68 65 20 70 6f 72 74 20 60 60 3c 70 6f 72 74 3e 60 60 20 79 6f 75 20 | specify.the.port.``<port>``.you. |
3bcc0 | 77 61 6e 74 20 53 53 48 20 74 6f 20 6c 69 73 74 65 6e 20 6f 6e 2e 20 42 79 20 64 65 66 61 75 6c | want.SSH.to.listen.on..By.defaul |
3bce0 | 74 2c 20 53 53 48 20 72 75 6e 73 20 6f 6e 20 70 6f 72 74 20 32 32 2e 00 45 6e 61 62 6c 69 6e 67 | t,.SSH.runs.on.port.22..Enabling |
3bd00 | 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 69 6e 63 72 65 61 73 65 73 20 74 68 65 20 72 69 73 | .this.function.increases.the.ris |
3bd20 | 6b 20 6f 66 20 62 61 6e 64 77 69 64 74 68 20 73 61 74 75 72 61 74 69 6f 6e 2e 00 45 6e 66 6f 72 | k.of.bandwidth.saturation..Enfor |
3bd40 | 63 65 20 73 74 72 69 63 74 20 70 61 74 68 20 63 68 65 63 6b 69 6e 67 00 45 6e 73 6c 61 76 65 20 | ce.strict.path.checking.Enslave. |
3bd60 | 60 3c 6d 65 6d 62 65 72 3e 60 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 62 6f 6e 64 20 60 3c 69 | `<member>`.interface.to.bond.`<i |
3bd80 | 6e 74 65 72 66 61 63 65 3e 60 2e 00 45 6e 73 75 72 65 20 74 68 61 74 20 77 68 65 6e 20 63 6f 6d | nterface>`..Ensure.that.when.com |
3bda0 | 70 61 72 69 6e 67 20 72 6f 75 74 65 73 20 77 68 65 72 65 20 62 6f 74 68 20 61 72 65 20 65 71 75 | paring.routes.where.both.are.equ |
3bdc0 | 61 6c 20 6f 6e 20 6d 6f 73 74 20 6d 65 74 72 69 63 73 2c 20 69 6e 63 6c 75 64 69 6e 67 20 6c 6f | al.on.most.metrics,.including.lo |
3bde0 | 63 61 6c 2d 70 72 65 66 2c 20 41 53 5f 50 41 54 48 20 6c 65 6e 67 74 68 2c 20 49 47 50 20 63 6f | cal-pref,.AS_PATH.length,.IGP.co |
3be00 | 73 74 2c 20 4d 45 44 2c 20 74 68 61 74 20 74 68 65 20 74 69 65 20 69 73 20 62 72 6f 6b 65 6e 20 | st,.MED,.that.the.tie.is.broken. |
3be20 | 62 61 73 65 64 20 6f 6e 20 72 6f 75 74 65 72 2d 49 44 2e 00 45 6e 74 65 72 70 72 69 73 65 20 69 | based.on.router-ID..Enterprise.i |
3be40 | 6e 73 74 61 6c 6c 61 74 69 6f 6e 73 20 75 73 75 61 6c 6c 79 20 73 68 69 70 20 61 20 6b 69 6e 64 | nstallations.usually.ship.a.kind |
3be60 | 20 6f 66 20 64 69 72 65 63 74 6f 72 79 20 73 65 72 76 69 63 65 20 77 68 69 63 68 20 69 73 20 75 | .of.directory.service.which.is.u |
3be80 | 73 65 64 20 74 6f 20 68 61 76 65 20 61 20 73 69 6e 67 6c 65 20 70 61 73 73 77 6f 72 64 20 73 74 | sed.to.have.a.single.password.st |
3bea0 | 6f 72 65 20 66 6f 72 20 61 6c 6c 20 65 6d 70 6c 6f 79 65 65 73 2e 20 56 79 4f 53 20 61 6e 64 20 | ore.for.all.employees..VyOS.and. |
3bec0 | 4f 70 65 6e 56 50 4e 20 73 75 70 70 6f 72 74 20 75 73 69 6e 67 20 4c 44 41 50 2f 41 44 20 61 73 | OpenVPN.support.using.LDAP/AD.as |
3bee0 | 20 73 69 6e 67 6c 65 20 75 73 65 72 20 62 61 63 6b 65 6e 64 2e 00 45 72 69 63 73 73 6f 6e 20 63 | .single.user.backend..Ericsson.c |
3bf00 | 61 6c 6c 20 69 74 20 4d 41 43 2d 46 6f 72 63 65 64 20 46 6f 72 77 61 72 64 69 6e 67 20 28 52 46 | all.it.MAC-Forced.Forwarding.(RF |
3bf20 | 43 20 44 72 61 66 74 29 00 45 72 72 6f 72 00 45 72 72 6f 72 20 63 6f 6e 64 69 74 69 6f 6e 73 00 | C.Draft).Error.Error.conditions. |
3bf40 | 45 73 74 61 62 6c 69 73 68 65 64 20 73 65 73 73 69 6f 6e 73 20 63 61 6e 20 62 65 20 76 69 65 77 | Established.sessions.can.be.view |
3bf60 | 65 64 20 75 73 69 6e 67 20 74 68 65 20 2a 2a 73 68 6f 77 20 6c 32 74 70 2d 73 65 72 76 65 72 20 | ed.using.the.**show.l2tp-server. |
3bf80 | 73 65 73 73 69 6f 6e 73 2a 2a 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 00 45 | sessions**.operational.command.E |
3bfa0 | 74 68 65 72 6e 65 74 00 45 74 68 65 72 6e 65 74 20 66 6c 6f 77 20 63 6f 6e 74 72 6f 6c 20 69 73 | thernet.Ethernet.flow.control.is |
3bfc0 | 20 61 20 6d 65 63 68 61 6e 69 73 6d 20 66 6f 72 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 73 74 6f | .a.mechanism.for.temporarily.sto |
3bfe0 | 70 70 69 6e 67 20 74 68 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 6f 66 20 64 61 74 61 20 6f | pping.the.transmission.of.data.o |
3c000 | 6e 20 45 74 68 65 72 6e 65 74 20 66 61 6d 69 6c 79 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f | n.Ethernet.family.computer.netwo |
3c020 | 72 6b 73 2e 20 54 68 65 20 67 6f 61 6c 20 6f 66 20 74 68 69 73 20 6d 65 63 68 61 6e 69 73 6d 20 | rks..The.goal.of.this.mechanism. |
3c040 | 69 73 20 74 6f 20 65 6e 73 75 72 65 20 7a 65 72 6f 20 70 61 63 6b 65 74 20 6c 6f 73 73 20 69 6e | is.to.ensure.zero.packet.loss.in |
3c060 | 20 74 68 65 20 70 72 65 73 65 6e 63 65 20 6f 66 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 67 65 73 74 | .the.presence.of.network.congest |
3c080 | 69 6f 6e 2e 00 45 74 68 65 72 6e 65 74 20 6f 70 74 69 6f 6e 73 00 45 74 68 65 72 74 79 70 65 20 | ion..Ethernet.options.Ethertype. |
3c0a0 | 60 60 30 78 38 31 30 30 60 60 20 69 73 20 75 73 65 64 20 66 6f 72 20 60 60 38 30 32 2e 31 71 60 | ``0x8100``.is.used.for.``802.1q` |
3c0c0 | 60 20 61 6e 64 20 65 74 68 65 72 74 79 70 65 20 60 60 30 78 38 38 61 38 60 60 20 69 73 20 75 73 | `.and.ethertype.``0x88a8``.is.us |
3c0e0 | 65 64 20 66 6f 72 20 60 60 38 30 32 2e 31 61 64 60 60 2e 00 45 76 65 6e 74 20 48 61 6e 64 6c 65 | ed.for.``802.1ad``..Event.Handle |
3c100 | 72 00 45 76 65 6e 74 20 48 61 6e 64 6c 65 72 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 53 74 | r.Event.Handler.Configuration.St |
3c120 | 65 70 73 00 45 76 65 6e 74 20 48 61 6e 64 6c 65 72 20 54 65 63 68 6e 6f 6c 6f 67 79 20 4f 76 65 | eps.Event.Handler.Technology.Ove |
3c140 | 72 76 69 65 77 00 45 76 65 6e 74 20 68 61 6e 64 6c 65 72 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 | rview.Event.handler.allows.you.t |
3c160 | 6f 20 65 78 65 63 75 74 65 20 73 63 72 69 70 74 73 20 77 68 65 6e 20 61 20 73 74 72 69 6e 67 20 | o.execute.scripts.when.a.string. |
3c180 | 74 68 61 74 20 6d 61 74 63 68 65 73 20 61 20 72 65 67 65 78 20 6f 72 20 61 20 72 65 67 65 78 20 | that.matches.a.regex.or.a.regex. |
3c1a0 | 77 69 74 68 20 61 20 73 65 72 76 69 63 65 20 6e 61 6d 65 20 61 70 70 65 61 72 73 20 69 6e 20 6a | with.a.service.name.appears.in.j |
3c1c0 | 6f 75 72 6e 61 6c 64 20 6c 6f 67 73 2e 20 59 6f 75 20 63 61 6e 20 70 61 73 73 20 76 61 72 69 61 | ournald.logs..You.can.pass.varia |
3c1e0 | 62 6c 65 73 2c 20 61 72 67 75 6d 65 6e 74 73 2c 20 61 6e 64 20 61 20 66 75 6c 6c 20 6d 61 74 63 | bles,.arguments,.and.a.full.matc |
3c200 | 68 69 6e 67 20 73 74 72 69 6e 67 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 2e 00 45 76 65 6e 74 | hing.string.to.the.script..Event |
3c220 | 20 68 61 6e 64 6c 65 72 20 73 63 72 69 70 74 00 45 76 65 6e 74 20 68 61 6e 64 6c 65 72 20 74 68 | .handler.script.Event.handler.th |
3c240 | 61 74 20 6d 6f 6e 69 74 6f 72 73 20 74 68 65 20 73 74 61 74 65 20 6f 66 20 69 6e 74 65 72 66 61 | at.monitors.the.state.of.interfa |
3c260 | 63 65 20 65 74 68 30 2e 00 45 76 65 72 79 20 4e 41 54 20 72 75 6c 65 20 68 61 73 20 61 20 74 72 | ce.eth0..Every.NAT.rule.has.a.tr |
3c280 | 61 6e 73 6c 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 64 2e 20 54 68 65 20 61 | anslation.command.defined..The.a |
3c2a0 | 64 64 72 65 73 73 20 64 65 66 69 6e 65 64 20 66 6f 72 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 | ddress.defined.for.the.translati |
3c2c0 | 6f 6e 20 69 73 20 74 68 65 20 61 64 64 72 65 73 73 20 75 73 65 64 20 77 68 65 6e 20 74 68 65 20 | on.is.the.address.used.when.the. |
3c2e0 | 61 64 64 72 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 61 20 70 61 63 6b 65 74 20 | address.information.in.a.packet. |
3c300 | 69 73 20 72 65 70 6c 61 63 65 64 2e 00 45 76 65 72 79 20 53 4e 41 54 36 36 20 72 75 6c 65 20 68 | is.replaced..Every.SNAT66.rule.h |
3c320 | 61 73 20 61 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 64 | as.a.translation.command.defined |
3c340 | 2e 20 54 68 65 20 70 72 65 66 69 78 20 64 65 66 69 6e 65 64 20 66 6f 72 20 74 68 65 20 74 72 61 | ..The.prefix.defined.for.the.tra |
3c360 | 6e 73 6c 61 74 69 6f 6e 20 69 73 20 74 68 65 20 70 72 65 66 69 78 20 75 73 65 64 20 77 68 65 6e | nslation.is.the.prefix.used.when |
3c380 | 20 74 68 65 20 61 64 64 72 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 61 20 70 61 | .the.address.information.in.a.pa |
3c3a0 | 63 6b 65 74 20 69 73 20 72 65 70 6c 61 63 65 64 2e e3 80 81 00 45 76 65 72 79 20 53 53 48 20 6b | cket.is.replaced.....Every.SSH.k |
3c3c0 | 65 79 20 63 6f 6d 65 73 20 69 6e 20 74 68 72 65 65 20 70 61 72 74 73 3a 00 45 76 65 72 79 20 53 | ey.comes.in.three.parts:.Every.S |
3c3e0 | 53 48 20 70 75 62 6c 69 63 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 72 65 66 65 72 65 6e 63 65 64 | SH.public.key.portion.referenced |
3c400 | 20 62 79 20 60 3c 69 64 65 6e 74 69 66 69 65 72 3e 60 20 72 65 71 75 69 72 65 73 20 74 68 65 20 | .by.`<identifier>`.requires.the. |
3c420 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 60 3c 74 79 70 65 3e 60 20 6f 66 | configuration.of.the.`<type>`.of |
3c440 | 20 70 75 62 6c 69 63 2d 6b 65 79 20 75 73 65 64 2e 20 54 68 69 73 20 74 79 70 65 20 63 61 6e 20 | .public-key.used..This.type.can. |
3c460 | 62 65 20 61 6e 79 20 6f 66 3a 00 45 76 65 72 79 20 55 44 50 20 70 6f 72 74 20 77 68 69 63 68 20 | be.any.of:.Every.UDP.port.which. |
3c480 | 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 64 20 72 65 71 75 69 72 65 73 20 6f 6e 65 20 75 6e 69 | will.be.forward.requires.one.uni |
3c4a0 | 71 75 65 20 49 44 2e 20 43 75 72 72 65 6e 74 6c 79 20 77 65 20 73 75 70 70 6f 72 74 20 39 39 20 | que.ID..Currently.we.support.99. |
3c4c0 | 49 44 73 21 00 45 76 65 72 79 20 56 69 72 74 75 61 6c 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 | IDs!.Every.Virtual.Ethernet.inte |
3c4e0 | 72 66 61 63 65 73 20 62 65 68 61 76 65 73 20 6c 69 6b 65 20 61 20 72 65 61 6c 20 45 74 68 65 72 | rfaces.behaves.like.a.real.Ether |
3c500 | 6e 65 74 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 79 20 63 61 6e 20 68 61 76 65 20 49 50 76 | net.interface..They.can.have.IPv |
3c520 | 34 2f 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 6f 72 20 | 4/IPv6.addresses.configured,.or. |
3c540 | 63 61 6e 20 72 65 71 75 65 73 74 20 61 64 64 72 65 73 73 65 73 20 62 79 20 44 48 43 50 2f 20 44 | can.request.addresses.by.DHCP/.D |
3c560 | 48 43 50 76 36 20 61 6e 64 20 61 72 65 20 61 73 73 6f 63 69 61 74 65 64 2f 6d 61 70 70 65 64 20 | HCPv6.and.are.associated/mapped. |
3c580 | 77 69 74 68 20 61 20 72 65 61 6c 20 65 74 68 65 72 6e 65 74 20 70 6f 72 74 2e 20 54 68 69 73 20 | with.a.real.ethernet.port..This. |
3c5a0 | 61 6c 73 6f 20 6d 61 6b 65 73 20 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 | also.makes.Pseudo-Ethernet.inter |
3c5c0 | 66 61 63 65 73 20 69 6e 74 65 72 65 73 74 69 6e 67 20 66 6f 72 20 74 65 73 74 69 6e 67 20 70 75 | faces.interesting.for.testing.pu |
3c5e0 | 72 70 6f 73 65 73 2e 20 41 20 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 64 65 76 69 63 65 | rposes..A.Pseudo-Ethernet.device |
3c600 | 20 77 69 6c 6c 20 69 6e 68 65 72 69 74 20 63 68 61 72 61 63 74 65 72 69 73 74 69 63 73 20 28 73 | .will.inherit.characteristics.(s |
3c620 | 70 65 65 64 2c 20 64 75 70 6c 65 78 2c 20 2e 2e 2e 29 20 66 72 6f 6d 20 69 74 73 20 70 68 79 73 | peed,.duplex,....).from.its.phys |
3c640 | 69 63 61 6c 20 70 61 72 65 6e 74 20 28 74 68 65 20 73 6f 20 63 61 6c 6c 65 64 20 6c 69 6e 6b 29 | ical.parent.(the.so.called.link) |
3c660 | 20 69 6e 74 65 72 66 61 63 65 2e 00 45 76 65 72 79 20 57 57 41 4e 20 63 6f 6e 6e 65 63 74 69 6f | .interface..Every.WWAN.connectio |
3c680 | 6e 20 72 65 71 75 69 72 65 73 20 61 6e 20 3a 61 62 62 72 3a 60 41 50 4e 20 28 41 63 63 65 73 73 | n.requires.an.:abbr:`APN.(Access |
3c6a0 | 20 50 6f 69 6e 74 20 4e 61 6d 65 29 60 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 62 79 20 74 | .Point.Name)`.which.is.used.by.t |
3c6c0 | 68 65 20 63 6c 69 65 6e 74 20 74 6f 20 64 69 61 6c 20 69 6e 74 6f 20 74 68 65 20 49 53 50 73 20 | he.client.to.dial.into.the.ISPs. |
3c6e0 | 6e 65 74 77 6f 72 6b 2e 20 54 68 69 73 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 70 61 72 | network..This.is.a.mandatory.par |
3c700 | 61 6d 65 74 65 72 2e 20 43 6f 6e 74 61 63 74 20 79 6f 75 72 20 53 65 72 76 69 63 65 20 50 72 6f | ameter..Contact.your.Service.Pro |
3c720 | 76 69 64 65 72 20 66 6f 72 20 63 6f 72 72 65 63 74 20 41 50 4e 2e 00 45 76 65 72 79 20 63 6f 6e | vider.for.correct.APN..Every.con |
3c740 | 6e 65 63 74 69 6f 6e 2f 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 20 70 6f 6f 6c 20 77 65 20 63 6f | nection/remote-access.pool.we.co |
3c760 | 6e 66 69 67 75 72 65 20 61 6c 73 6f 20 6e 65 65 64 73 20 61 20 70 6f 6f 6c 20 77 68 65 72 65 20 | nfigure.also.needs.a.pool.where. |
3c780 | 77 65 20 63 61 6e 20 64 72 61 77 20 6f 75 72 20 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 | we.can.draw.our.client.IP.addres |
3c7a0 | 73 65 73 20 66 72 6f 6d 2e 20 57 65 20 70 72 6f 76 69 64 65 20 6f 6e 65 20 49 50 76 34 20 61 6e | ses.from..We.provide.one.IPv4.an |
3c7c0 | 64 20 49 50 76 36 20 70 6f 6f 6c 2e 20 41 75 74 68 6f 72 69 7a 65 64 20 63 6c 69 65 6e 74 73 20 | d.IPv6.pool..Authorized.clients. |
3c7e0 | 77 69 6c 6c 20 72 65 63 65 69 76 65 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 66 72 6f | will.receive.an.IPv4.address.fro |
3c800 | 6d 20 74 68 65 20 31 39 32 2e 30 2e 32 2e 31 32 38 2f 32 35 20 70 72 65 66 69 78 20 61 6e 64 20 | m.the.192.0.2.128/25.prefix.and. |
3c820 | 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 32 30 30 31 3a 64 62 | an.IPv6.address.from.the.2001:db |
3c840 | 38 3a 32 30 30 30 3a 3a 2f 36 34 20 70 72 65 66 69 78 2e 20 57 65 20 63 61 6e 20 61 6c 73 6f 20 | 8:2000::/64.prefix..We.can.also. |
3c860 | 73 65 6e 64 20 73 6f 6d 65 20 44 4e 53 20 6e 61 6d 65 73 65 72 76 65 72 73 20 64 6f 77 6e 20 74 | send.some.DNS.nameservers.down.t |
3c880 | 6f 20 6f 75 72 20 63 6c 69 65 6e 74 73 20 75 73 65 64 20 6f 6e 20 74 68 65 69 72 20 63 6f 6e 6e | o.our.clients.used.on.their.conn |
3c8a0 | 65 63 74 69 6f 6e 2e 00 45 76 65 72 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 2f 72 65 6d 6f 74 65 2d | ection..Every.connection/remote- |
3c8c0 | 61 63 63 65 73 73 20 70 6f 6f 6c 20 77 65 20 63 6f 6e 66 69 67 75 72 65 20 61 6c 73 6f 20 6e 65 | access.pool.we.configure.also.ne |
3c8e0 | 65 64 73 20 61 20 70 6f 6f 6c 20 77 68 65 72 65 20 77 65 20 63 61 6e 20 64 72 61 77 20 6f 75 72 | eds.a.pool.where.we.can.draw.our |
3c900 | 20 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 66 72 6f 6d 2e 20 57 65 20 70 72 | .client.IP.addresses.from..We.pr |
3c920 | 6f 76 69 64 65 20 6f 6e 65 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 70 6f 6f 6c 2e 20 41 75 | ovide.one.IPv4.and.IPv6.pool..Au |
3c940 | 74 68 6f 72 69 7a 65 64 20 63 6c 69 65 6e 74 73 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 61 6e | thorized.clients.will.receive.an |
3c960 | 20 49 50 76 34 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 | .IPv4.address.from.the.configure |
3c980 | 64 20 49 50 76 34 20 70 72 65 66 69 78 20 61 6e 64 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 | d.IPv4.prefix.and.an.IPv6.addres |
3c9a0 | 73 20 66 72 6f 6d 20 74 68 65 20 49 50 76 36 20 70 72 65 66 69 78 2e 20 57 65 20 63 61 6e 20 61 | s.from.the.IPv6.prefix..We.can.a |
3c9c0 | 6c 73 6f 20 73 65 6e 64 20 73 6f 6d 65 20 44 4e 53 20 6e 61 6d 65 73 65 72 76 65 72 73 20 64 6f | lso.send.some.DNS.nameservers.do |
3c9e0 | 77 6e 20 74 6f 20 6f 75 72 20 63 6c 69 65 6e 74 73 20 75 73 65 64 20 6f 6e 20 74 68 65 69 72 20 | wn.to.our.clients.used.on.their. |
3ca00 | 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 45 78 61 6d 70 6c 65 00 45 78 61 6d 70 6c 65 20 43 6f 6e 66 | connection..Example.Example.Conf |
3ca20 | 69 67 75 72 61 74 69 6f 6e 00 45 78 61 6d 70 6c 65 20 49 50 76 36 20 6f 6e 6c 79 3a 00 45 78 61 | iguration.Example.IPv6.only:.Exa |
3ca40 | 6d 70 6c 65 20 4e 65 74 77 6f 72 6b 00 45 78 61 6d 70 6c 65 20 50 61 72 74 69 61 6c 20 43 6f 6e | mple.Network.Example.Partial.Con |
3ca60 | 66 69 67 00 45 78 61 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 57 69 | fig.Example.configuration.for.Wi |
3ca80 | 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 73 3a 00 45 78 61 6d 70 6c 65 20 66 6f 72 20 | reGuard.interfaces:.Example.for. |
3caa0 | 63 68 61 6e 67 69 6e 67 20 72 61 74 65 2d 6c 69 6d 69 74 20 76 69 61 20 52 41 44 49 55 53 20 43 | changing.rate-limit.via.RADIUS.C |
3cac0 | 6f 41 2e 00 45 78 61 6d 70 6c 65 20 66 6f 72 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 20 73 69 | oA..Example.for.configuring.a.si |
3cae0 | 6d 70 6c 65 20 4c 32 54 50 20 6f 76 65 72 20 49 50 73 65 63 20 56 50 4e 20 66 6f 72 20 72 65 6d | mple.L2TP.over.IPsec.VPN.for.rem |
3cb00 | 6f 74 65 20 61 63 63 65 73 73 20 28 77 6f 72 6b 73 20 77 69 74 68 20 6e 61 74 69 76 65 20 57 69 | ote.access.(works.with.native.Wi |
3cb20 | 6e 64 6f 77 73 20 61 6e 64 20 4d 61 63 20 56 50 4e 20 63 6c 69 65 6e 74 73 29 3a 00 45 78 61 6d | ndows.and.Mac.VPN.clients):.Exam |
3cb40 | 70 6c 65 20 6f 66 20 72 65 64 69 72 65 63 74 69 6f 6e 3a 00 45 78 61 6d 70 6c 65 20 73 79 6e 70 | ple.of.redirection:.Example.synp |
3cb60 | 72 6f 78 79 00 45 78 61 6d 70 6c 65 2c 20 66 72 6f 6d 20 72 61 64 69 75 73 2d 73 65 72 76 65 72 | roxy.Example,.from.radius-server |
3cb80 | 20 73 65 6e 64 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 20 64 69 73 63 6f 6e 6e 65 63 74 20 63 6c 69 | .send.command.for.disconnect.cli |
3cba0 | 65 6e 74 20 77 69 74 68 20 75 73 65 72 6e 61 6d 65 20 74 65 73 74 00 45 78 61 6d 70 6c 65 3a 00 | ent.with.username.test.Example:. |
3cbc0 | 45 78 61 6d 70 6c 65 3a 20 44 65 6c 65 67 61 74 65 20 61 20 2f 36 34 20 70 72 65 66 69 78 20 74 | Example:.Delegate.a./64.prefix.t |
3cbe0 | 6f 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 38 20 77 68 69 63 68 20 77 69 6c 6c 20 75 73 65 20 | o.interface.eth8.which.will.use. |
3cc00 | 61 20 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 20 6f 6e 20 74 68 69 73 20 72 6f 75 74 65 72 20 6f | a.local.address.on.this.router.o |
3cc20 | 66 20 60 60 3c 70 72 65 66 69 78 3e 3a 3a 66 66 66 66 60 60 2c 20 61 73 20 74 68 65 20 61 64 64 | f.``<prefix>::ffff``,.as.the.add |
3cc40 | 72 65 73 73 20 36 35 35 33 34 20 77 69 6c 6c 20 63 6f 72 72 65 73 70 6f 6e 64 20 74 6f 20 60 60 | ress.65534.will.correspond.to.`` |
3cc60 | 66 66 66 66 60 60 20 69 6e 20 68 65 78 61 64 65 63 69 6d 61 6c 20 6e 6f 74 61 74 69 6f 6e 2e 00 | ffff``.in.hexadecimal.notation.. |
3cc80 | 45 78 61 6d 70 6c 65 3a 20 46 6f 72 20 61 6e 20 7e 38 2c 30 30 30 20 68 6f 73 74 20 6e 65 74 77 | Example:.For.an.~8,000.host.netw |
3cca0 | 6f 72 6b 20 61 20 73 6f 75 72 63 65 20 4e 41 54 20 70 6f 6f 6c 20 6f 66 20 33 32 20 49 50 20 61 | ork.a.source.NAT.pool.of.32.IP.a |
3ccc0 | 64 64 72 65 73 73 65 73 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 2e 00 45 78 61 6d 70 6c 65 | ddresses.is.recommended..Example |
3cce0 | 3a 20 49 66 20 49 44 20 69 73 20 31 20 61 6e 64 20 74 68 65 20 63 6c 69 65 6e 74 20 69 73 20 64 | :.If.ID.is.1.and.the.client.is.d |
3cd00 | 65 6c 65 67 61 74 65 64 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 32 30 30 31 3a 64 62 38 | elegated.an.IPv6.prefix.2001:db8 |
3cd20 | 3a 66 66 66 66 3a 3a 2f 34 38 2c 20 64 68 63 70 36 63 20 77 69 6c 6c 20 63 6f 6d 62 69 6e 65 20 | :ffff::/48,.dhcp6c.will.combine. |
3cd40 | 74 68 65 20 74 77 6f 20 76 61 6c 75 65 73 20 69 6e 74 6f 20 61 20 73 69 6e 67 6c 65 20 49 50 76 | the.two.values.into.a.single.IPv |
3cd60 | 36 20 70 72 65 66 69 78 2c 20 32 30 30 31 3a 64 62 38 3a 66 66 66 66 3a 31 3a 3a 2f 36 34 2c 20 | 6.prefix,.2001:db8:ffff:1::/64,. |
3cd80 | 61 6e 64 20 77 69 6c 6c 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 70 72 65 66 69 78 20 6f 6e | and.will.configure.the.prefix.on |
3cda0 | 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2e 00 45 78 61 6d 70 6c | .the.specified.interface..Exampl |
3cdc0 | 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 20 69 6e 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 | e:.Mirror.the.inbound.traffic.of |
3cde0 | 20 60 62 6f 6e 64 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 78 61 6d 70 6c 65 3a | .`bond1`.port.to.`eth3`.Example: |
3ce00 | 20 4d 69 72 72 6f 72 20 74 68 65 20 69 6e 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 20 60 | .Mirror.the.inbound.traffic.of.` |
3ce20 | 62 72 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 78 61 6d 70 6c 65 3a 20 4d 69 72 | br1`.port.to.`eth3`.Example:.Mir |
3ce40 | 72 6f 72 20 74 68 65 20 69 6e 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 20 60 65 74 68 31 | ror.the.inbound.traffic.of.`eth1 |
3ce60 | 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 78 61 6d 70 6c 65 3a 20 4d 69 72 72 6f 72 | `.port.to.`eth3`.Example:.Mirror |
3ce80 | 20 74 68 65 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 20 60 62 6f 6e 64 31 60 | .the.outbound.traffic.of.`bond1` |
3cea0 | 20 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 78 61 6d 70 6c 65 3a 20 4d 69 72 72 6f 72 20 | .port.to.`eth3`.Example:.Mirror. |
3cec0 | 74 68 65 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 20 60 62 72 31 60 20 70 6f | the.outbound.traffic.of.`br1`.po |
3cee0 | 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 78 61 6d 70 6c 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 | rt.to.`eth3`.Example:.Mirror.the |
3cf00 | 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 20 60 65 74 68 31 60 20 70 6f 72 74 | .outbound.traffic.of.`eth1`.port |
3cf20 | 20 74 6f 20 60 65 74 68 33 60 00 45 78 61 6d 70 6c 65 3a 20 53 65 74 20 60 65 74 68 30 60 20 6d | .to.`eth3`.Example:.Set.`eth0`.m |
3cf40 | 65 6d 62 65 72 20 70 6f 72 74 20 74 6f 20 62 65 20 61 6c 6c 6f 77 65 64 20 56 4c 41 4e 20 34 00 | ember.port.to.be.allowed.VLAN.4. |
3cf60 | 45 78 61 6d 70 6c 65 3a 20 53 65 74 20 60 65 74 68 30 60 20 6d 65 6d 62 65 72 20 70 6f 72 74 20 | Example:.Set.`eth0`.member.port. |
3cf80 | 74 6f 20 62 65 20 61 6c 6c 6f 77 65 64 20 56 4c 41 4e 20 36 2d 38 00 45 78 61 6d 70 6c 65 3a 20 | to.be.allowed.VLAN.6-8.Example:. |
3cfa0 | 53 65 74 20 60 65 74 68 30 60 20 6d 65 6d 62 65 72 20 70 6f 72 74 20 74 6f 20 62 65 20 6e 61 74 | Set.`eth0`.member.port.to.be.nat |
3cfc0 | 69 76 65 20 56 4c 41 4e 20 32 00 45 78 61 6d 70 6c 65 3a 20 74 6f 20 62 65 20 61 70 70 65 6e 64 | ive.VLAN.2.Example:.to.be.append |
3cfe0 | 65 64 20 69 73 20 73 65 74 20 74 6f 20 60 60 76 79 6f 73 2e 6e 65 74 60 60 20 61 6e 64 20 74 68 | ed.is.set.to.``vyos.net``.and.th |
3d000 | 65 20 55 52 4c 20 72 65 63 65 69 76 65 64 20 69 73 20 60 60 77 77 77 2f 66 6f 6f 2e 68 74 6d 6c | e.URL.received.is.``www/foo.html |
3d020 | 60 60 2c 20 74 68 65 20 73 79 73 74 65 6d 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 67 65 6e 65 | ``,.the.system.will.use.the.gene |
3d040 | 72 61 74 65 64 2c 20 66 69 6e 61 6c 20 55 52 4c 20 6f 66 20 60 60 77 77 77 2e 76 79 6f 73 2e 6e | rated,.final.URL.of.``www.vyos.n |
3d060 | 65 74 2f 66 6f 6f 2e 68 74 6d 6c 60 60 2e 00 45 78 61 6d 70 6c 65 73 00 45 78 61 6d 70 6c 65 73 | et/foo.html``..Examples.Examples |
3d080 | 20 6f 66 20 70 6f 6c 69 63 69 65 73 20 75 73 61 67 65 3a 00 45 78 61 6d 70 6c 65 73 3a 00 45 78 | .of.policies.usage:.Examples:.Ex |
3d0a0 | 63 6c 75 64 65 20 49 50 20 61 64 64 72 65 73 73 65 73 20 66 72 6f 6d 20 60 60 56 52 52 50 20 70 | clude.IP.addresses.from.``VRRP.p |
3d0c0 | 61 63 6b 65 74 73 60 60 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 60 60 65 78 63 6c 75 64 65 64 | ackets``..This.option.``excluded |
3d0e0 | 2d 61 64 64 72 65 73 73 60 60 20 69 73 20 75 73 65 64 20 77 68 65 6e 20 79 6f 75 20 77 61 6e 74 | -address``.is.used.when.you.want |
3d100 | 20 74 6f 20 73 65 74 20 49 50 76 34 20 2b 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 6f 6e | .to.set.IPv4.+.IPv6.addresses.on |
3d120 | 20 74 68 65 20 73 61 6d 65 20 76 69 72 74 75 61 6c 20 69 6e 74 65 72 66 61 63 65 20 6f 72 20 77 | .the.same.virtual.interface.or.w |
3d140 | 68 65 6e 20 75 73 65 64 20 6d 6f 72 65 20 74 68 61 6e 20 32 30 20 49 50 20 61 64 64 72 65 73 73 | hen.used.more.than.20.IP.address |
3d160 | 65 73 2e 00 45 78 63 6c 75 64 65 20 61 64 64 72 65 73 73 00 45 78 63 6c 75 64 65 20 74 72 61 66 | es..Exclude.address.Exclude.traf |
3d180 | 66 69 63 00 45 78 69 74 20 70 6f 6c 69 63 79 20 6f 6e 20 6d 61 74 63 68 3a 20 67 6f 20 74 6f 20 | fic.Exit.policy.on.match:.go.to. |
3d1a0 | 6e 65 78 74 20 73 65 71 75 65 6e 63 65 20 6e 75 6d 62 65 72 2e 00 45 78 69 74 20 70 6f 6c 69 63 | next.sequence.number..Exit.polic |
3d1c0 | 79 20 6f 6e 20 6d 61 74 63 68 3a 20 67 6f 20 74 6f 20 72 75 6c 65 20 3c 31 2d 36 35 35 33 35 3e | y.on.match:.go.to.rule.<1-65535> |
3d1e0 | 00 45 78 70 65 64 69 74 65 64 20 66 6f 72 77 61 72 64 69 6e 67 20 28 45 46 29 00 45 78 70 6c 61 | .Expedited.forwarding.(EF).Expla |
3d200 | 6e 61 74 69 6f 6e 00 45 78 70 6c 69 63 69 74 6c 79 20 64 65 63 6c 61 72 65 20 49 44 20 66 6f 72 | nation.Explicitly.declare.ID.for |
3d220 | 20 74 68 69 73 20 6d 69 6e 69 6f 6e 20 74 6f 20 75 73 65 20 28 64 65 66 61 75 6c 74 3a 20 68 6f | .this.minion.to.use.(default:.ho |
3d240 | 73 74 6e 61 6d 65 29 00 45 78 74 65 72 6e 61 6c 20 44 48 43 50 76 36 20 73 65 72 76 65 72 20 69 | stname).External.DHCPv6.server.i |
3d260 | 73 20 61 74 20 32 30 30 31 3a 64 62 38 3a 3a 34 00 45 78 74 65 72 6e 61 6c 20 52 6f 75 74 65 20 | s.at.2001:db8::4.External.Route. |
3d280 | 53 75 6d 6d 61 72 69 73 61 74 69 6f 6e 00 45 78 74 65 72 6e 61 6c 20 61 74 74 61 63 6b 3a 20 61 | Summarisation.External.attack:.a |
3d2a0 | 6e 20 61 74 74 61 63 6b 20 66 72 6f 6d 20 74 68 65 20 69 6e 74 65 72 6e 65 74 20 74 6f 77 61 72 | n.attack.from.the.internet.towar |
3d2c0 | 64 73 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 49 50 20 69 73 20 69 64 65 6e 74 69 66 79 2e 20 49 | ds.an.internal.IP.is.identify..I |
3d2e0 | 6e 20 74 68 69 73 20 63 61 73 65 2c 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 77 | n.this.case,.all.connections.tow |
3d300 | 61 72 64 73 20 73 75 63 68 20 49 50 20 77 69 6c 6c 20 62 65 20 62 6c 6f 63 6b 65 64 00 46 51 2d | ards.such.IP.will.be.blocked.FQ- |
3d320 | 43 6f 44 65 6c 00 46 51 2d 43 6f 44 65 6c 20 66 69 67 68 74 73 20 62 75 66 66 65 72 62 6c 6f 61 | CoDel.FQ-CoDel.fights.bufferbloa |
3d340 | 74 20 61 6e 64 20 72 65 64 75 63 65 73 20 6c 61 74 65 6e 63 79 20 77 69 74 68 6f 75 74 20 74 68 | t.and.reduces.latency.without.th |
3d360 | 65 20 6e 65 65 64 20 6f 66 20 63 6f 6d 70 6c 65 78 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 | e.need.of.complex.configurations |
3d380 | 2e 20 49 74 20 68 61 73 20 62 65 63 6f 6d 65 20 74 68 65 20 6e 65 77 20 64 65 66 61 75 6c 74 20 | ..It.has.become.the.new.default. |
3d3a0 | 51 75 65 75 65 69 6e 67 20 44 69 73 63 69 70 6c 69 6e 65 20 66 6f 72 20 74 68 65 20 69 6e 74 65 | Queueing.Discipline.for.the.inte |
3d3c0 | 72 66 61 63 65 73 20 6f 66 20 73 6f 6d 65 20 47 4e 55 2f 4c 69 6e 75 78 20 64 69 73 74 72 69 62 | rfaces.of.some.GNU/Linux.distrib |
3d3e0 | 75 74 69 6f 6e 73 2e 00 46 51 2d 43 6f 44 65 6c 20 69 73 20 62 61 73 65 64 20 6f 6e 20 61 20 6d | utions..FQ-CoDel.is.based.on.a.m |
3d400 | 6f 64 69 66 69 65 64 20 44 65 66 69 63 69 74 20 52 6f 75 6e 64 20 52 6f 62 69 6e 20 28 44 52 52 | odified.Deficit.Round.Robin.(DRR |
3d420 | 5f 29 20 71 75 65 75 65 20 73 63 68 65 64 75 6c 65 72 20 77 69 74 68 20 74 68 65 20 43 6f 44 65 | _).queue.scheduler.with.the.CoDe |
3d440 | 6c 20 41 63 74 69 76 65 20 51 75 65 75 65 20 4d 61 6e 61 67 65 6d 65 6e 74 20 28 41 51 4d 29 20 | l.Active.Queue.Management.(AQM). |
3d460 | 61 6c 67 6f 72 69 74 68 6d 20 6f 70 65 72 61 74 69 6e 67 20 6f 6e 20 65 61 63 68 20 71 75 65 75 | algorithm.operating.on.each.queu |
3d480 | 65 2e 00 46 51 2d 43 6f 44 65 6c 20 69 73 20 74 75 6e 65 64 20 74 6f 20 72 75 6e 20 6f 6b 20 77 | e..FQ-CoDel.is.tuned.to.run.ok.w |
3d4a0 | 69 74 68 20 69 74 73 20 64 65 66 61 75 6c 74 20 70 61 72 61 6d 65 74 65 72 73 20 61 74 20 31 30 | ith.its.default.parameters.at.10 |
3d4c0 | 47 62 69 74 20 73 70 65 65 64 73 2e 20 49 74 20 6d 69 67 68 74 20 77 6f 72 6b 20 6f 6b 20 74 6f | Gbit.speeds..It.might.work.ok.to |
3d4e0 | 6f 20 61 74 20 6f 74 68 65 72 20 73 70 65 65 64 73 20 77 69 74 68 6f 75 74 20 63 6f 6e 66 69 67 | o.at.other.speeds.without.config |
3d500 | 75 72 69 6e 67 20 61 6e 79 74 68 69 6e 67 2c 20 62 75 74 20 68 65 72 65 20 77 65 20 77 69 6c 6c | uring.anything,.but.here.we.will |
3d520 | 20 65 78 70 6c 61 69 6e 20 73 6f 6d 65 20 63 61 73 65 73 20 77 68 65 6e 20 79 6f 75 20 6d 69 67 | .explain.some.cases.when.you.mig |
3d540 | 68 74 20 77 61 6e 74 20 74 6f 20 74 75 6e 65 20 69 74 73 20 70 61 72 61 6d 65 74 65 72 73 2e 00 | ht.want.to.tune.its.parameters.. |
3d560 | 46 51 2d 43 6f 64 65 6c 20 69 73 20 61 20 6e 6f 6e 2d 73 68 61 70 69 6e 67 20 28 77 6f 72 6b 2d | FQ-Codel.is.a.non-shaping.(work- |
3d580 | 63 6f 6e 73 65 72 76 69 6e 67 29 20 70 6f 6c 69 63 79 2c 20 73 6f 20 69 74 20 77 69 6c 6c 20 6f | conserving).policy,.so.it.will.o |
3d5a0 | 6e 6c 79 20 62 65 20 75 73 65 66 75 6c 20 69 66 20 79 6f 75 72 20 6f 75 74 67 6f 69 6e 67 20 69 | nly.be.useful.if.your.outgoing.i |
3d5c0 | 6e 74 65 72 66 61 63 65 20 69 73 20 72 65 61 6c 6c 79 20 66 75 6c 6c 2e 20 49 66 20 69 74 20 69 | nterface.is.really.full..If.it.i |
3d5e0 | 73 20 6e 6f 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 6e 6f 74 20 6f 77 6e 20 74 68 65 20 71 75 65 | s.not,.VyOS.will.not.own.the.que |
3d600 | 75 65 20 61 6e 64 20 46 51 2d 43 6f 64 65 6c 20 77 69 6c 6c 20 68 61 76 65 20 6e 6f 20 65 66 66 | ue.and.FQ-Codel.will.have.no.eff |
3d620 | 65 63 74 2e 20 49 66 20 74 68 65 72 65 20 69 73 20 62 61 6e 64 77 69 64 74 68 20 61 76 61 69 6c | ect..If.there.is.bandwidth.avail |
3d640 | 61 62 6c 65 20 6f 6e 20 74 68 65 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 2c 20 79 6f 75 20 63 | able.on.the.physical.link,.you.c |
3d660 | 61 6e 20 65 6d 62 65 64 5f 20 46 51 2d 43 6f 64 65 6c 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 66 | an.embed_.FQ-Codel.into.a.classf |
3d680 | 75 6c 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 69 | ul.shaping.policy.to.make.sure.i |
3d6a0 | 74 20 6f 77 6e 73 20 74 68 65 20 71 75 65 75 65 2e 20 49 66 20 79 6f 75 20 61 72 65 20 6e 6f 74 | t.owns.the.queue..If.you.are.not |
3d6c0 | 20 73 75 72 65 20 69 66 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 65 6d 62 65 64 20 79 6f 75 72 20 | .sure.if.you.need.to.embed.your. |
3d6e0 | 46 51 2d 43 6f 44 65 6c 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 20 53 68 61 70 65 72 2c 20 64 | FQ-CoDel.policy.into.a.Shaper,.d |
3d700 | 6f 20 69 74 2e 00 46 52 52 00 46 52 52 20 6f 66 66 65 72 73 20 6f 6e 6c 79 20 70 61 72 74 69 61 | o.it..FRR.FRR.offers.only.partia |
3d720 | 6c 20 73 75 70 70 6f 72 74 20 66 6f 72 20 73 6f 6d 65 20 6f 66 20 74 68 65 20 72 6f 75 74 69 6e | l.support.for.some.of.the.routin |
3d740 | 67 20 70 72 6f 74 6f 63 6f 6c 20 65 78 74 65 6e 73 69 6f 6e 73 20 74 68 61 74 20 61 72 65 20 75 | g.protocol.extensions.that.are.u |
3d760 | 73 65 64 20 77 69 74 68 20 4d 50 4c 53 2d 54 45 3b 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 73 75 | sed.with.MPLS-TE;.it.does.not.su |
3d780 | 70 70 6f 72 74 20 61 20 63 6f 6d 70 6c 65 74 65 20 52 53 56 50 2d 54 45 20 73 6f 6c 75 74 69 6f | pport.a.complete.RSVP-TE.solutio |
3d7a0 | 6e 2e 00 46 52 52 20 73 75 70 70 6f 72 74 73 20 61 20 6e 65 77 20 77 61 79 20 6f 66 20 63 6f 6e | n..FRR.supports.a.new.way.of.con |
3d7c0 | 66 69 67 75 72 69 6e 67 20 56 4c 41 4e 2d 74 6f 2d 56 4e 49 20 6d 61 70 70 69 6e 67 73 20 66 6f | figuring.VLAN-to-VNI.mappings.fo |
3d7e0 | 72 20 45 56 50 4e 2d 56 58 4c 41 4e 2c 20 77 68 65 6e 20 77 6f 72 6b 69 6e 67 20 77 69 74 68 20 | r.EVPN-VXLAN,.when.working.with. |
3d800 | 74 68 65 20 4c 69 6e 75 78 20 6b 65 72 6e 65 6c 2e 20 49 6e 20 74 68 69 73 20 6e 65 77 20 77 61 | the.Linux.kernel..In.this.new.wa |
3d820 | 79 2c 20 74 68 65 20 6d 61 70 70 69 6e 67 20 6f 66 20 61 20 56 4c 41 4e 20 74 6f 20 61 20 3a 61 | y,.the.mapping.of.a.VLAN.to.a.:a |
3d840 | 62 62 72 3a 60 56 4e 49 20 28 56 58 4c 41 4e 20 4e 65 74 77 6f 72 6b 20 49 64 65 6e 74 69 66 69 | bbr:`VNI.(VXLAN.Network.Identifi |
3d860 | 65 72 20 28 6f 72 20 56 58 4c 41 4e 20 53 65 67 6d 65 6e 74 20 49 44 29 29 60 20 69 73 20 63 6f | er.(or.VXLAN.Segment.ID))`.is.co |
3d880 | 6e 66 69 67 75 72 65 64 20 61 67 61 69 6e 73 74 20 61 20 63 6f 6e 74 61 69 6e 65 72 20 56 58 4c | nfigured.against.a.container.VXL |
3d8a0 | 41 4e 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 72 65 66 65 72 72 65 64 20 74 | AN.interface.which.is.referred.t |
3d8c0 | 6f 20 61 73 20 61 20 3a 61 62 62 72 3a 60 53 56 44 20 28 53 69 6e 67 6c 65 20 56 58 4c 41 4e 20 | o.as.a.:abbr:`SVD.(Single.VXLAN. |
3d8e0 | 64 65 76 69 63 65 29 60 2e 00 46 54 50 20 64 61 65 6d 6f 6e 00 46 61 63 69 6c 69 74 69 65 73 00 | device)`..FTP.daemon.Facilities. |
3d900 | 46 61 63 69 6c 69 74 69 65 73 20 63 61 6e 20 62 65 20 61 64 6a 75 73 74 65 64 20 74 6f 20 6d 65 | Facilities.can.be.adjusted.to.me |
3d920 | 65 74 20 74 68 65 20 6e 65 65 64 73 20 6f 66 20 74 68 65 20 75 73 65 72 3a 00 46 61 63 69 6c 69 | et.the.needs.of.the.user:.Facili |
3d940 | 74 79 20 43 6f 64 65 00 46 61 69 6c 6f 76 65 72 00 46 61 69 6c 6f 76 65 72 20 52 6f 75 74 65 73 | ty.Code.Failover.Failover.Routes |
3d960 | 00 46 61 69 6c 6f 76 65 72 20 6d 65 63 68 61 6e 69 73 6d 20 74 6f 20 75 73 65 20 66 6f 72 20 63 | .Failover.mechanism.to.use.for.c |
3d980 | 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 2e 00 46 61 69 6c 6f 76 65 72 20 72 6f 75 74 65 73 20 61 | onntrack-sync..Failover.routes.a |
3d9a0 | 72 65 20 6d 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 72 6f 75 74 65 73 2c 20 62 | re.manually.configured.routes,.b |
3d9c0 | 75 74 20 74 68 65 79 20 69 6e 73 74 61 6c 6c 20 74 6f 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 | ut.they.install.to.the.routing.t |
3d9e0 | 61 62 6c 65 20 69 66 20 74 68 65 20 68 65 61 6c 74 68 2d 63 68 65 63 6b 20 74 61 72 67 65 74 20 | able.if.the.health-check.target. |
3da00 | 69 73 20 61 6c 69 76 65 2e 20 49 66 20 74 68 65 20 74 61 72 67 65 74 20 69 73 20 6e 6f 74 20 61 | is.alive..If.the.target.is.not.a |
3da20 | 6c 69 76 65 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 | live.the.route.is.removed.from.t |
3da40 | 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 75 6e 74 69 6c 20 74 68 65 20 74 61 72 67 65 | he.routing.table.until.the.targe |
3da60 | 74 20 77 69 6c 6c 20 62 65 20 61 76 61 69 6c 61 62 6c 65 2e 00 46 61 69 72 20 51 75 65 75 65 00 | t.will.be.available..Fair.Queue. |
3da80 | 46 61 69 72 20 51 75 65 75 65 20 69 73 20 61 20 6e 6f 6e 2d 73 68 61 70 69 6e 67 20 28 77 6f 72 | Fair.Queue.is.a.non-shaping.(wor |
3daa0 | 6b 2d 63 6f 6e 73 65 72 76 69 6e 67 29 20 70 6f 6c 69 63 79 2c 20 73 6f 20 69 74 20 77 69 6c 6c | k-conserving).policy,.so.it.will |
3dac0 | 20 6f 6e 6c 79 20 62 65 20 75 73 65 66 75 6c 20 69 66 20 79 6f 75 72 20 6f 75 74 67 6f 69 6e 67 | .only.be.useful.if.your.outgoing |
3dae0 | 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 72 65 61 6c 6c 79 20 66 75 6c 6c 2e 20 49 66 20 69 74 | .interface.is.really.full..If.it |
3db00 | 20 69 73 20 6e 6f 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 6e 6f 74 20 6f 77 6e 20 74 68 65 20 71 | .is.not,.VyOS.will.not.own.the.q |
3db20 | 75 65 75 65 20 61 6e 64 20 46 61 69 72 20 51 75 65 75 65 20 77 69 6c 6c 20 68 61 76 65 20 6e 6f | ueue.and.Fair.Queue.will.have.no |
3db40 | 20 65 66 66 65 63 74 2e 20 49 66 20 74 68 65 72 65 20 69 73 20 62 61 6e 64 77 69 64 74 68 20 61 | .effect..If.there.is.bandwidth.a |
3db60 | 76 61 69 6c 61 62 6c 65 20 6f 6e 20 74 68 65 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 2c 20 79 | vailable.on.the.physical.link,.y |
3db80 | 6f 75 20 63 61 6e 20 65 6d 62 65 64 5f 20 46 61 69 72 2d 51 75 65 75 65 20 69 6e 74 6f 20 61 20 | ou.can.embed_.Fair-Queue.into.a. |
3dba0 | 63 6c 61 73 73 66 75 6c 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 6d 61 6b 65 20 | classful.shaping.policy.to.make. |
3dbc0 | 73 75 72 65 20 69 74 20 6f 77 6e 73 20 74 68 65 20 71 75 65 75 65 2e 00 46 61 69 72 20 51 75 65 | sure.it.owns.the.queue..Fair.Que |
3dbe0 | 75 65 20 69 73 20 61 20 77 6f 72 6b 2d 63 6f 6e 73 65 72 76 69 6e 67 20 73 63 68 65 64 75 6c 65 | ue.is.a.work-conserving.schedule |
3dc00 | 72 20 77 68 69 63 68 20 73 63 68 65 64 75 6c 65 73 20 74 68 65 20 74 72 61 6e 73 6d 69 73 73 69 | r.which.schedules.the.transmissi |
3dc20 | 6f 6e 20 6f 66 20 70 61 63 6b 65 74 73 20 62 61 73 65 64 20 6f 6e 20 66 6c 6f 77 73 2c 20 74 68 | on.of.packets.based.on.flows,.th |
3dc40 | 61 74 20 69 73 2c 20 69 74 20 62 61 6c 61 6e 63 65 73 20 74 72 61 66 66 69 63 20 64 69 73 74 72 | at.is,.it.balances.traffic.distr |
3dc60 | 69 62 75 74 69 6e 67 20 69 74 20 74 68 72 6f 75 67 68 20 64 69 66 66 65 72 65 6e 74 20 73 75 62 | ibuting.it.through.different.sub |
3dc80 | 2d 71 75 65 75 65 73 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 65 6e 73 75 72 65 20 66 61 69 72 6e | -queues.in.order.to.ensure.fairn |
3dca0 | 65 73 73 20 73 6f 20 74 68 61 74 20 65 61 63 68 20 66 6c 6f 77 20 69 73 20 61 62 6c 65 20 74 6f | ess.so.that.each.flow.is.able.to |
3dcc0 | 20 73 65 6e 64 20 64 61 74 61 20 69 6e 20 74 75 72 6e 2c 20 70 72 65 76 65 6e 74 69 6e 67 20 61 | .send.data.in.turn,.preventing.a |
3dce0 | 6e 79 20 73 69 6e 67 6c 65 20 6f 6e 65 20 66 72 6f 6d 20 64 72 6f 77 6e 69 6e 67 20 6f 75 74 20 | ny.single.one.from.drowning.out. |
3dd00 | 74 68 65 20 72 65 73 74 2e 00 46 61 73 74 4e 65 74 4d 6f 6e 00 46 61 73 74 4e 65 74 4d 6f 6e 20 | the.rest..FastNetMon.FastNetMon. |
3dd20 | 69 73 20 61 20 68 69 67 68 2d 70 65 72 66 6f 72 6d 61 6e 63 65 20 44 44 6f 53 20 64 65 74 65 63 | is.a.high-performance.DDoS.detec |
3dd40 | 74 6f 72 2f 73 65 6e 73 6f 72 20 62 75 69 6c 74 20 6f 6e 20 74 6f 70 20 6f 66 20 6d 75 6c 74 69 | tor/sensor.built.on.top.of.multi |
3dd60 | 70 6c 65 20 70 61 63 6b 65 74 20 63 61 70 74 75 72 65 20 65 6e 67 69 6e 65 73 3a 20 4e 65 74 46 | ple.packet.capture.engines:.NetF |
3dd80 | 6c 6f 77 2c 20 49 50 46 49 58 2c 20 73 46 6c 6f 77 2c 20 41 46 5f 50 41 43 4b 45 54 20 28 70 6f | low,.IPFIX,.sFlow,.AF_PACKET.(po |
3dda0 | 72 74 20 6d 69 72 72 6f 72 29 2e 20 49 74 20 63 61 6e 20 64 65 74 65 63 74 20 68 6f 73 74 73 20 | rt.mirror)..It.can.detect.hosts. |
3ddc0 | 69 6e 20 74 68 65 20 64 65 70 6c 6f 79 65 64 20 6e 65 74 77 6f 72 6b 20 73 65 6e 64 69 6e 67 20 | in.the.deployed.network.sending. |
3dde0 | 6f 72 20 72 65 63 65 69 76 69 6e 67 20 6c 61 72 67 65 20 76 6f 6c 75 6d 65 73 20 6f 66 20 74 72 | or.receiving.large.volumes.of.tr |
3de00 | 61 66 66 69 63 2c 20 70 61 63 6b 65 74 73 2f 62 79 74 65 73 2f 66 6c 6f 77 73 20 70 65 72 20 73 | affic,.packets/bytes/flows.per.s |
3de20 | 65 63 6f 6e 64 20 61 6e 64 20 70 65 72 66 6f 72 6d 20 61 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 | econd.and.perform.a.configurable |
3de40 | 20 61 63 74 69 6f 6e 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 61 74 20 65 76 65 6e 74 2c 20 73 75 | .action.to.handle.that.event,.su |
3de60 | 63 68 20 61 73 20 63 61 6c 6c 69 6e 67 20 61 20 63 75 73 74 6f 6d 20 73 63 72 69 70 74 2e 00 46 | ch.as.calling.a.custom.script..F |
3de80 | 65 61 74 75 72 65 73 20 6f 66 20 74 68 65 20 43 75 72 72 65 6e 74 20 49 6d 70 6c 65 6d 65 6e 74 | eatures.of.the.Current.Implement |
3dea0 | 61 74 69 6f 6e 00 46 69 65 6c 64 00 46 69 6c 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 | ation.Field.File.identified.by.` |
3dec0 | 3c 66 69 6c 65 6e 61 6d 65 3e 60 20 63 6f 6e 74 61 69 6e 69 6e 67 20 74 68 65 20 54 53 49 47 20 | <filename>`.containing.the.TSIG. |
3dee0 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6b 65 79 20 66 6f 72 20 52 46 43 32 31 33 36 20 6e | authentication.key.for.RFC2136.n |
3df00 | 73 75 70 64 61 74 65 20 6f 6e 20 72 65 6d 6f 74 65 20 44 4e 53 20 73 65 72 76 65 72 2e 00 46 69 | supdate.on.remote.DNS.server..Fi |
3df20 | 6c 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 6b 65 79 66 69 6c 65 3e 60 20 63 6f 6e | le.identified.by.`<keyfile>`.con |
3df40 | 74 61 69 6e 69 6e 67 20 74 68 65 20 73 65 63 72 65 74 20 52 4e 44 43 20 6b 65 79 20 73 68 61 72 | taining.the.secret.RNDC.key.shar |
3df60 | 65 64 20 77 69 74 68 20 72 65 6d 6f 74 65 20 44 4e 53 20 73 65 72 76 65 72 2e 00 46 69 6c 74 65 | ed.with.remote.DNS.server..Filte |
3df80 | 72 20 54 79 70 65 2d 33 20 73 75 6d 6d 61 72 79 2d 4c 53 41 73 20 61 6e 6e 6f 75 6e 63 65 64 20 | r.Type-3.summary-LSAs.announced. |
3dfa0 | 74 6f 20 6f 74 68 65 72 20 61 72 65 61 73 20 6f 72 69 67 69 6e 61 74 65 64 20 66 72 6f 6d 20 69 | to.other.areas.originated.from.i |
3dfc0 | 6e 74 72 61 2d 20 61 72 65 61 20 70 61 74 68 73 20 66 72 6f 6d 20 73 70 65 63 69 66 69 65 64 20 | ntra-.area.paths.from.specified. |
3dfe0 | 61 72 65 61 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6d 61 6b 65 73 20 73 65 6e 73 65 20 69 | area..This.command.makes.sense.i |
3e000 | 6e 20 41 42 52 20 6f 6e 6c 79 2e 00 46 69 6c 74 65 72 20 74 72 61 66 66 69 63 20 62 61 73 65 64 | n.ABR.only..Filter.traffic.based |
3e020 | 20 6f 6e 20 73 6f 75 72 63 65 2f 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 00 | .on.source/destination.address.. |
3e040 | 46 69 6c 74 65 72 2d 49 64 3d 32 30 30 30 2f 33 30 30 30 20 28 6d 65 61 6e 73 20 32 30 30 30 4b | Filter-Id=2000/3000.(means.2000K |
3e060 | 62 69 74 20 64 6f 77 6e 2d 73 74 72 65 61 6d 20 72 61 74 65 20 61 6e 64 20 33 30 30 30 4b 62 69 | bit.down-stream.rate.and.3000Kbi |
3e080 | 74 20 75 70 2d 73 74 72 65 61 6d 20 72 61 74 65 29 00 46 69 6c 74 65 72 2d 49 64 3d 35 30 30 30 | t.up-stream.rate).Filter-Id=5000 |
3e0a0 | 2f 34 30 30 30 20 28 6d 65 61 6e 73 20 35 30 30 30 4b 62 69 74 20 64 6f 77 6e 2d 73 74 72 65 61 | /4000.(means.5000Kbit.down-strea |
3e0c0 | 6d 20 72 61 74 65 20 61 6e 64 20 34 30 30 30 4b 62 69 74 20 75 70 2d 73 74 72 65 61 6d 20 72 61 | m.rate.and.4000Kbit.up-stream.ra |
3e0e0 | 74 65 29 20 49 66 20 61 74 74 72 69 62 75 74 65 20 46 69 6c 74 65 72 2d 49 64 20 72 65 64 65 66 | te).If.attribute.Filter-Id.redef |
3e100 | 69 6e 65 64 2c 20 72 65 70 6c 61 63 65 20 69 74 20 69 6e 20 52 41 44 49 55 53 20 43 6f 41 20 72 | ined,.replace.it.in.RADIUS.CoA.r |
3e120 | 65 71 75 65 73 74 2e 00 46 69 6c 74 65 72 69 6e 67 00 46 69 6c 74 65 72 69 6e 67 20 69 73 20 75 | equest..Filtering.Filtering.is.u |
3e140 | 73 65 64 20 66 6f 72 20 62 6f 74 68 20 69 6e 70 75 74 20 61 6e 64 20 6f 75 74 70 75 74 20 6f 66 | sed.for.both.input.and.output.of |
3e160 | 20 74 68 65 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 4f 6e 63 65 20 66 | .the.routing.information..Once.f |
3e180 | 69 6c 74 65 72 69 6e 67 20 69 73 20 64 65 66 69 6e 65 64 2c 20 69 74 20 63 61 6e 20 62 65 20 61 | iltering.is.defined,.it.can.be.a |
3e1a0 | 70 70 6c 69 65 64 20 69 6e 20 61 6e 79 20 64 69 72 65 63 74 69 6f 6e 2e 20 56 79 4f 53 20 6d 61 | pplied.in.any.direction..VyOS.ma |
3e1c0 | 6b 65 73 20 66 69 6c 74 65 72 69 6e 67 20 70 6f 73 73 69 62 6c 65 20 75 73 69 6e 67 20 61 63 6c | kes.filtering.possible.using.acl |
3e1e0 | 73 20 61 6e 64 20 70 72 65 66 69 78 20 6c 69 73 74 73 2e 00 46 69 6e 61 6c 6c 79 2c 20 74 6f 20 | s.and.prefix.lists..Finally,.to. |
3e200 | 61 70 70 6c 79 20 74 68 65 20 70 6f 6c 69 63 79 20 72 6f 75 74 65 20 74 6f 20 69 6e 67 72 65 73 | apply.the.policy.route.to.ingres |
3e220 | 73 20 74 72 61 66 66 69 63 20 6f 6e 20 6f 75 72 20 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 2c 20 | s.traffic.on.our.LAN.interface,. |
3e240 | 77 65 20 75 73 65 3a 00 46 69 72 65 77 61 6c 6c 00 46 69 72 65 77 61 6c 6c 20 2d 20 49 50 76 34 | we.use:.Firewall.Firewall.-.IPv4 |
3e260 | 20 52 75 6c 65 73 00 46 69 72 65 77 61 6c 6c 20 2d 20 49 50 76 36 20 52 75 6c 65 73 00 46 69 72 | .Rules.Firewall.-.IPv6.Rules.Fir |
3e280 | 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 46 69 72 65 77 61 6c 6c 20 43 6f 6e | ewall.Configuration.Firewall.Con |
3e2a0 | 66 69 67 75 72 61 74 69 6f 6e 20 28 44 65 70 72 65 63 61 74 65 64 29 00 46 69 72 65 77 61 6c 6c | figuration.(Deprecated).Firewall |
3e2c0 | 20 44 65 73 63 72 69 70 74 69 6f 6e 00 46 69 72 65 77 61 6c 6c 20 45 78 63 65 70 74 69 6f 6e 73 | .Description.Firewall.Exceptions |
3e2e0 | 00 46 69 72 65 77 61 6c 6c 20 4c 6f 67 73 00 46 69 72 65 77 61 6c 6c 20 52 75 6c 65 73 00 46 69 | .Firewall.Logs.Firewall.Rules.Fi |
3e300 | 72 65 77 61 6c 6c 20 67 72 6f 75 70 73 00 46 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 73 20 72 65 | rewall.groups.Firewall.groups.re |
3e320 | 70 72 65 73 65 6e 74 20 63 6f 6c 6c 65 63 74 69 6f 6e 73 20 6f 66 20 49 50 20 61 64 64 72 65 73 | present.collections.of.IP.addres |
3e340 | 73 65 73 2c 20 6e 65 74 77 6f 72 6b 73 2c 20 70 6f 72 74 73 2c 20 6d 61 63 20 61 64 64 72 65 73 | ses,.networks,.ports,.mac.addres |
3e360 | 73 65 73 20 6f 72 20 64 6f 6d 61 69 6e 73 2e 20 4f 6e 63 65 20 63 72 65 61 74 65 64 2c 20 61 20 | ses.or.domains..Once.created,.a. |
3e380 | 67 72 6f 75 70 20 63 61 6e 20 62 65 20 72 65 66 65 72 65 6e 63 65 64 20 62 79 20 66 69 72 65 77 | group.can.be.referenced.by.firew |
3e3a0 | 61 6c 6c 2c 20 6e 61 74 20 61 6e 64 20 70 6f 6c 69 63 79 20 72 6f 75 74 65 20 72 75 6c 65 73 20 | all,.nat.and.policy.route.rules. |
3e3c0 | 61 73 20 65 69 74 68 65 72 20 61 20 73 6f 75 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f | as.either.a.source.or.destinatio |
3e3e0 | 6e 20 6d 61 74 63 68 65 72 2e 20 4d 65 6d 62 65 72 73 20 63 61 6e 20 62 65 20 61 64 64 65 64 20 | n.matcher..Members.can.be.added. |
3e400 | 6f 72 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 61 20 67 72 6f 75 70 20 77 69 74 68 6f 75 74 20 | or.removed.from.a.group.without. |
3e420 | 63 68 61 6e 67 65 73 20 74 6f 2c 20 6f 72 20 74 68 65 20 6e 65 65 64 20 74 6f 20 72 65 6c 6f 61 | changes.to,.or.the.need.to.reloa |
3e440 | 64 2c 20 69 6e 64 69 76 69 64 75 61 6c 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 2e 00 46 69 | d,.individual.firewall.rules..Fi |
3e460 | 72 65 77 61 6c 6c 20 67 72 6f 75 70 73 20 72 65 70 72 65 73 65 6e 74 20 63 6f 6c 6c 65 63 74 69 | rewall.groups.represent.collecti |
3e480 | 6f 6e 73 20 6f 66 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 6e 65 74 77 6f 72 6b 73 2c 20 70 | ons.of.IP.addresses,.networks,.p |
3e4a0 | 6f 72 74 73 2c 20 6d 61 63 20 61 64 64 72 65 73 73 65 73 2c 20 64 6f 6d 61 69 6e 73 20 6f 72 20 | orts,.mac.addresses,.domains.or. |
3e4c0 | 69 6e 74 65 72 66 61 63 65 73 2e 20 4f 6e 63 65 20 63 72 65 61 74 65 64 2c 20 61 20 67 72 6f 75 | interfaces..Once.created,.a.grou |
3e4e0 | 70 20 63 61 6e 20 62 65 20 72 65 66 65 72 65 6e 63 65 64 20 62 79 20 66 69 72 65 77 61 6c 6c 2c | p.can.be.referenced.by.firewall, |
3e500 | 20 6e 61 74 20 61 6e 64 20 70 6f 6c 69 63 79 20 72 6f 75 74 65 20 72 75 6c 65 73 20 61 73 20 65 | .nat.and.policy.route.rules.as.e |
3e520 | 69 74 68 65 72 20 61 20 73 6f 75 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6d 61 | ither.a.source.or.destination.ma |
3e540 | 74 63 68 65 72 2c 20 61 6e 64 20 61 73 20 69 6e 62 70 75 6e 64 2f 6f 75 74 62 6f 75 6e 64 20 69 | tcher,.and.as.inbpund/outbound.i |
3e560 | 6e 20 74 68 65 20 63 61 73 65 20 6f 66 20 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 2e 00 46 | n.the.case.of.interface.group..F |
3e580 | 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 73 20 72 65 70 72 65 73 65 6e 74 20 63 6f 6c 6c 65 63 74 | irewall.groups.represent.collect |
3e5a0 | 69 6f 6e 73 20 6f 66 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 6e 65 74 77 6f 72 6b 73 2c 20 | ions.of.IP.addresses,.networks,. |
3e5c0 | 70 6f 72 74 73 2c 20 6d 61 63 20 61 64 64 72 65 73 73 65 73 2c 20 64 6f 6d 61 69 6e 73 20 6f 72 | ports,.mac.addresses,.domains.or |
3e5e0 | 20 69 6e 74 65 72 66 61 63 65 73 2e 20 4f 6e 63 65 20 63 72 65 61 74 65 64 2c 20 61 20 67 72 6f | .interfaces..Once.created,.a.gro |
3e600 | 75 70 20 63 61 6e 20 62 65 20 72 65 66 65 72 65 6e 63 65 64 20 62 79 20 66 69 72 65 77 61 6c 6c | up.can.be.referenced.by.firewall |
3e620 | 2c 20 6e 61 74 20 61 6e 64 20 70 6f 6c 69 63 79 20 72 6f 75 74 65 20 72 75 6c 65 73 20 61 73 20 | ,.nat.and.policy.route.rules.as. |
3e640 | 65 69 74 68 65 72 20 61 20 73 6f 75 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6d | either.a.source.or.destination.m |
3e660 | 61 74 63 68 65 72 2c 20 61 6e 64 2f 6f 72 20 61 73 20 69 6e 62 6f 75 6e 64 2f 6f 75 74 62 6f 75 | atcher,.and/or.as.inbound/outbou |
3e680 | 6e 64 20 69 6e 20 74 68 65 20 63 61 73 65 20 6f 66 20 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 | nd.in.the.case.of.interface.grou |
3e6a0 | 70 2e 00 46 69 72 65 77 61 6c 6c 20 6d 61 72 6b 2e 20 49 74 20 70 6f 73 73 69 62 6c 65 20 74 6f | p..Firewall.mark..It.possible.to |
3e6c0 | 20 6c 6f 61 64 62 61 6c 61 6e 63 69 6e 67 20 74 72 61 66 66 69 63 20 62 61 73 65 64 20 6f 6e 20 | .loadbalancing.traffic.based.on. |
3e6e0 | 60 60 66 77 6d 61 72 6b 60 60 20 76 61 6c 75 65 00 46 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 | ``fwmark``.value.Firewall.policy |
3e700 | 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 74 75 6e 6e | .can.also.be.applied.to.the.tunn |
3e720 | 65 6c 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 60 6c 6f 63 61 6c 60 2c 20 60 69 6e 60 2c 20 | el.interface.for.`local`,.`in`,. |
3e740 | 61 6e 64 20 60 6f 75 74 60 20 64 69 72 65 63 74 69 6f 6e 73 20 61 6e 64 20 66 75 6e 63 74 69 6f | and.`out`.directions.and.functio |
3e760 | 6e 73 20 69 64 65 6e 74 69 63 61 6c 6c 79 20 74 6f 20 65 74 68 65 72 6e 65 74 20 69 6e 74 65 72 | ns.identically.to.ethernet.inter |
3e780 | 66 61 63 65 73 2e 00 46 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 61 72 65 20 77 72 69 74 74 65 | faces..Firewall.rules.are.writte |
3e7a0 | 6e 20 61 73 20 6e 6f 72 6d 61 6c 2c 20 75 73 69 6e 67 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 | n.as.normal,.using.the.internal. |
3e7c0 | 49 50 20 61 64 64 72 65 73 73 20 61 73 20 74 68 65 20 73 6f 75 72 63 65 20 6f 66 20 6f 75 74 62 | IP.address.as.the.source.of.outb |
3e7e0 | 6f 75 6e 64 20 72 75 6c 65 73 20 61 6e 64 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6f | ound.rules.and.the.destination.o |
3e800 | 66 20 69 6e 62 6f 75 6e 64 20 72 75 6c 65 73 2e 00 46 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 | f.inbound.rules..Firewall.rules. |
3e820 | 66 6f 72 20 44 65 73 74 69 6e 61 74 69 6f 6e 20 4e 41 54 00 46 69 72 65 77 61 6c 6c 2d 4c 65 67 | for.Destination.NAT.Firewall-Leg |
3e840 | 61 63 79 00 46 69 72 6d 77 61 72 65 20 55 70 64 61 74 65 00 46 69 72 73 74 20 68 6f 70 20 69 6e | acy.Firmware.Update.First.hop.in |
3e860 | 74 65 72 66 61 63 65 20 6f 66 20 61 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2e 00 46 69 72 | terface.of.a.route.to.match..Fir |
3e880 | 73 74 20 6f 66 20 61 6c 6c 20 79 6f 75 20 6d 75 73 74 20 63 6f 6e 66 69 67 75 72 65 20 42 47 50 | st.of.all.you.must.configure.BGP |
3e8a0 | 20 72 6f 75 74 65 72 20 77 69 74 68 20 74 68 65 20 3a 61 62 62 72 3a 60 41 53 4e 20 28 41 75 74 | .router.with.the.:abbr:`ASN.(Aut |
3e8c0 | 6f 6e 6f 6d 6f 75 73 20 53 79 73 74 65 6d 20 4e 75 6d 62 65 72 29 60 2e 20 54 68 65 20 41 53 20 | onomous.System.Number)`..The.AS. |
3e8e0 | 6e 75 6d 62 65 72 20 69 73 20 61 6e 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 74 68 65 20 | number.is.an.identifier.for.the. |
3e900 | 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 2e 20 54 68 65 20 42 47 50 20 70 72 6f 74 6f | autonomous.system..The.BGP.proto |
3e920 | 63 6f 6c 20 75 73 65 73 20 74 68 65 20 41 53 20 6e 75 6d 62 65 72 20 66 6f 72 20 64 65 74 65 63 | col.uses.the.AS.number.for.detec |
3e940 | 74 69 6e 67 20 77 68 65 74 68 65 72 20 74 68 65 20 42 47 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 | ting.whether.the.BGP.connection. |
3e960 | 69 73 20 69 6e 74 65 72 6e 61 6c 20 6f 72 20 65 78 74 65 72 6e 61 6c 2e 20 56 79 4f 53 20 64 6f | is.internal.or.external..VyOS.do |
3e980 | 65 73 20 6e 6f 74 20 68 61 76 65 20 61 20 73 70 65 63 69 61 6c 20 63 6f 6d 6d 61 6e 64 20 74 6f | es.not.have.a.special.command.to |
3e9a0 | 20 73 74 61 72 74 20 74 68 65 20 42 47 50 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 42 47 50 20 | .start.the.BGP.process..The.BGP. |
3e9c0 | 70 72 6f 63 65 73 73 20 73 74 61 72 74 73 20 77 68 65 6e 20 74 68 65 20 66 69 72 73 74 20 6e 65 | process.starts.when.the.first.ne |
3e9e0 | 69 67 68 62 6f 72 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 46 69 72 73 74 20 6f 66 20 61 | ighbor.is.configured..First.of.a |
3ea00 | 6c 6c 2c 20 77 65 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 20 43 41 20 72 6f 6f 74 20 | ll,.we.need.to.create.a.CA.root. |
3ea20 | 63 65 72 74 69 66 69 63 61 74 65 20 61 6e 64 20 73 65 72 76 65 72 20 63 65 72 74 69 66 69 63 61 | certificate.and.server.certifica |
3ea40 | 74 65 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 20 73 69 64 65 2e 00 46 69 72 73 74 20 73 63 65 | te.on.the.server.side..First.sce |
3ea60 | 6e 61 72 69 6f 3a 20 61 70 70 6c 79 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 4e 41 54 20 66 6f 72 | nario:.apply.destination.NAT.for |
3ea80 | 20 61 6c 6c 20 48 54 54 50 20 74 72 61 66 66 69 63 20 63 6f 6d 6d 69 6e 67 20 74 68 72 6f 75 67 | .all.HTTP.traffic.comming.throug |
3eaa0 | 68 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 30 2c 20 61 6e 64 20 75 73 65 72 20 34 20 62 61 63 | h.interface.eth0,.and.user.4.bac |
3eac0 | 6b 65 6e 64 73 2e 20 46 69 72 73 74 20 62 61 63 6b 65 6e 64 20 73 68 6f 75 6c 64 20 72 65 63 65 | kends..First.backend.should.rece |
3eae0 | 69 76 65 64 20 33 30 25 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 2c 20 73 65 63 6f 6e 64 20 | ived.30%.of.the.request,.second. |
3eb00 | 62 61 63 6b 65 6e 64 20 73 68 6f 75 6c 64 20 67 65 74 20 32 30 25 2c 20 74 68 69 72 64 20 31 35 | backend.should.get.20%,.third.15 |
3eb20 | 25 20 61 6e 64 20 74 68 65 20 66 6f 75 72 74 68 20 33 35 25 20 57 65 20 77 69 6c 6c 20 75 73 65 | %.and.the.fourth.35%.We.will.use |
3eb40 | 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 | .source.and.destination.address. |
3eb60 | 66 6f 72 20 68 61 73 68 20 67 65 6e 65 72 61 74 69 6f 6e 2e 00 46 69 72 73 74 20 73 74 65 70 73 | for.hash.generation..First.steps |
3eb80 | 00 46 69 72 73 74 20 74 68 65 20 4f 54 50 20 6b 65 79 73 20 6d 75 73 74 20 62 65 20 67 65 6e 65 | .First.the.OTP.keys.must.be.gene |
3eba0 | 72 61 74 65 64 20 61 6e 64 20 73 65 6e 74 20 74 6f 20 74 68 65 20 75 73 65 72 20 61 6e 64 20 74 | rated.and.sent.to.the.user.and.t |
3ebc0 | 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 46 69 72 73 74 20 77 65 20 6e 65 | o.the.configuration:.First.we.ne |
3ebe0 | 65 64 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 62 61 73 69 63 20 73 65 74 74 69 6e 67 73 | ed.to.specify.the.basic.settings |
3ec00 | 2e 20 31 31 39 34 2f 55 44 50 20 69 73 20 74 68 65 20 64 65 66 61 75 6c 74 2e 20 54 68 65 20 60 | ..1194/UDP.is.the.default..The.` |
3ec20 | 60 70 65 72 73 69 73 74 65 6e 74 2d 74 75 6e 6e 65 6c 60 60 20 6f 70 74 69 6f 6e 20 69 73 20 72 | `persistent-tunnel``.option.is.r |
3ec40 | 65 63 6f 6d 6d 65 6e 64 65 64 2c 20 69 74 20 70 72 65 76 65 6e 74 73 20 74 68 65 20 54 55 4e 2f | ecommended,.it.prevents.the.TUN/ |
3ec60 | 54 41 50 20 64 65 76 69 63 65 20 66 72 6f 6d 20 63 6c 6f 73 69 6e 67 20 6f 6e 20 63 6f 6e 6e 65 | TAP.device.from.closing.on.conne |
3ec80 | 63 74 69 6f 6e 20 72 65 73 65 74 73 20 6f 72 20 64 61 65 6d 6f 6e 20 72 65 6c 6f 61 64 73 2e 00 | ction.resets.or.daemon.reloads.. |
3eca0 | 46 69 72 73 74 20 79 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 64 65 70 6c 6f 79 20 61 6e | First.you.will.need.to.deploy.an |
3ecc0 | 20 52 50 4b 49 20 76 61 6c 69 64 61 74 6f 72 20 66 6f 72 20 79 6f 75 72 20 72 6f 75 74 65 72 73 | .RPKI.validator.for.your.routers |
3ece0 | 20 74 6f 20 75 73 65 2e 20 54 68 65 20 52 49 50 45 20 4e 43 43 20 68 65 6c 70 66 75 6c 6c 79 20 | .to.use..The.RIPE.NCC.helpfully. |
3ed00 | 70 72 6f 76 69 64 65 20 60 73 6f 6d 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 60 5f 20 74 6f 20 | provide.`some.instructions`_.to. |
3ed20 | 67 65 74 20 79 6f 75 20 73 74 61 72 74 65 64 20 77 69 74 68 20 73 65 76 65 72 61 6c 20 64 69 66 | get.you.started.with.several.dif |
3ed40 | 66 65 72 65 6e 74 20 6f 70 74 69 6f 6e 73 2e 20 20 4f 6e 63 65 20 79 6f 75 72 20 73 65 72 76 65 | ferent.options...Once.your.serve |
3ed60 | 72 20 69 73 20 72 75 6e 6e 69 6e 67 20 79 6f 75 20 63 61 6e 20 73 74 61 72 74 20 76 61 6c 69 64 | r.is.running.you.can.start.valid |
3ed80 | 61 74 69 6e 67 20 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 2e 00 46 69 72 73 74 2c 20 6f 6e 20 62 | ating.announcements..First,.on.b |
3eda0 | 6f 74 68 20 72 6f 75 74 65 72 73 20 72 75 6e 20 74 68 65 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 | oth.routers.run.the.operational. |
3edc0 | 63 6f 6d 6d 61 6e 64 20 22 67 65 6e 65 72 61 74 65 20 70 6b 69 20 6b 65 79 2d 70 61 69 72 20 69 | command."generate.pki.key-pair.i |
3ede0 | 6e 73 74 61 6c 6c 20 3c 6b 65 79 2d 70 61 69 72 20 6e 61 6d 3e 3e 22 2e 20 59 6f 75 20 6d 61 79 | nstall.<key-pair.nam>>"..You.may |
3ee00 | 20 63 68 6f 6f 73 65 20 64 69 66 66 65 72 65 6e 74 20 6c 65 6e 67 74 68 20 74 68 61 6e 20 32 30 | .choose.different.length.than.20 |
3ee20 | 34 38 20 6f 66 20 63 6f 75 72 73 65 2e 00 46 69 72 73 74 2c 20 6f 6e 20 62 6f 74 68 20 72 6f 75 | 48.of.course..First,.on.both.rou |
3ee40 | 74 65 72 73 20 72 75 6e 20 74 68 65 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 | ters.run.the.operational.command |
3ee60 | 20 22 67 65 6e 65 72 61 74 65 20 70 6b 69 20 6b 65 79 2d 70 61 69 72 20 69 6e 73 74 61 6c 6c 20 | ."generate.pki.key-pair.install. |
3ee80 | 3c 6b 65 79 2d 70 61 69 72 20 6e 61 6d 65 3e 22 2e 20 59 6f 75 20 6d 61 79 20 63 68 6f 6f 73 65 | <key-pair.name>"..You.may.choose |
3eea0 | 20 64 69 66 66 65 72 65 6e 74 20 6c 65 6e 67 74 68 20 74 68 61 6e 20 32 30 34 38 20 6f 66 20 63 | .different.length.than.2048.of.c |
3eec0 | 6f 75 72 73 65 2e 00 46 69 72 73 74 2c 20 6f 6e 65 20 6f 66 20 74 68 65 20 73 79 73 74 65 6d 73 | ourse..First,.one.of.the.systems |
3eee0 | 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 6b 65 79 20 75 73 69 6e 67 20 74 68 65 20 3a 72 65 66 | .generate.the.key.using.the.:ref |
3ef00 | 3a 60 67 65 6e 65 72 61 74 65 20 70 6b 69 20 6f 70 65 6e 76 70 6e 20 73 68 61 72 65 64 2d 73 65 | :`generate.pki.openvpn.shared-se |
3ef20 | 63 72 65 74 3c 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 70 6b 69 2f 69 6e 64 65 78 3a 70 6b 69 | cret<configuration/pki/index:pki |
3ef40 | 3e 60 20 63 6f 6d 6d 61 6e 64 2e 20 4f 6e 63 65 20 67 65 6e 65 72 61 74 65 64 2c 20 79 6f 75 20 | >`.command..Once.generated,.you. |
3ef60 | 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 69 6e 73 74 61 6c 6c 20 74 68 69 73 20 6b 65 79 20 6f 6e | will.need.to.install.this.key.on |
3ef80 | 20 74 68 65 20 6c 6f 63 61 6c 20 73 79 73 74 65 6d 2c 20 74 68 65 6e 20 63 6f 70 79 20 61 6e 64 | .the.local.system,.then.copy.and |
3efa0 | 20 69 6e 73 74 61 6c 6c 20 74 68 69 73 20 6b 65 79 20 74 6f 20 74 68 65 20 72 65 6d 6f 74 65 20 | .install.this.key.to.the.remote. |
3efc0 | 72 6f 75 74 65 72 2e 00 46 69 72 73 74 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 67 65 6e 65 72 | router..First,.you.need.to.gener |
3efe0 | 61 74 65 20 61 20 6b 65 79 20 62 79 20 72 75 6e 6e 69 6e 67 20 60 60 72 75 6e 20 67 65 6e 65 72 | ate.a.key.by.running.``run.gener |
3f000 | 61 74 65 20 70 6b 69 20 6f 70 65 6e 76 70 6e 20 73 68 61 72 65 64 2d 73 65 63 72 65 74 20 69 6e | ate.pki.openvpn.shared-secret.in |
3f020 | 73 74 61 6c 6c 20 3c 6e 61 6d 65 3e 60 60 20 66 72 6f 6d 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | stall.<name>``.from.configuratio |
3f040 | 6e 20 6d 6f 64 65 2e 20 59 6f 75 20 63 61 6e 20 75 73 65 20 61 6e 79 20 6e 61 6d 65 2c 20 77 65 | n.mode..You.can.use.any.name,.we |
3f060 | 20 77 69 6c 6c 20 75 73 65 20 60 60 73 32 73 60 60 2e 00 46 6c 61 73 68 00 46 6c 61 73 68 20 4f | .will.use.``s2s``..Flash.Flash.O |
3f080 | 76 65 72 72 69 64 65 00 46 6c 6f 77 20 41 63 63 6f 75 6e 74 69 6e 67 00 46 6c 6f 77 20 45 78 70 | verride.Flow.Accounting.Flow.Exp |
3f0a0 | 6f 72 74 00 46 6c 6f 77 20 61 6e 64 20 70 61 63 6b 65 74 2d 62 61 73 65 64 20 62 61 6c 61 6e 63 | ort.Flow.and.packet-based.balanc |
3f0c0 | 69 6e 67 00 46 6c 6f 77 73 20 63 61 6e 20 62 65 20 65 78 70 6f 72 74 65 64 20 76 69 61 20 74 77 | ing.Flows.can.be.exported.via.tw |
3f0e0 | 6f 20 64 69 66 66 65 72 65 6e 74 20 70 72 6f 74 6f 63 6f 6c 73 3a 20 4e 65 74 46 6c 6f 77 20 28 | o.different.protocols:.NetFlow.( |
3f100 | 76 65 72 73 69 6f 6e 73 20 35 2c 20 39 20 61 6e 64 20 31 30 2f 49 50 46 49 58 29 20 61 6e 64 20 | versions.5,.9.and.10/IPFIX).and. |
3f120 | 73 46 6c 6f 77 2e 20 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 79 6f 75 20 6d 61 79 20 73 61 76 | sFlow..Additionally,.you.may.sav |
3f140 | 65 20 66 6c 6f 77 73 20 74 6f 20 61 6e 20 69 6e 2d 6d 65 6d 6f 72 79 20 74 61 62 6c 65 20 69 6e | e.flows.to.an.in-memory.table.in |
3f160 | 74 65 72 6e 61 6c 6c 79 20 69 6e 20 61 20 72 6f 75 74 65 72 2e 00 46 6c 6f 77 74 61 62 6c 65 20 | ternally.in.a.router..Flowtable. |
3f180 | 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 46 6c 6f 77 74 61 62 6c 65 73 20 20 61 6c 6c 6f 77 73 | Configuration.Flowtables..allows |
3f1a0 | 20 79 6f 75 20 74 6f 20 64 65 66 69 6e 65 20 61 20 66 61 73 74 70 61 74 68 20 74 68 72 6f 75 67 | .you.to.define.a.fastpath.throug |
3f1c0 | 68 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 64 61 74 61 70 61 74 68 2e 20 54 68 65 20 66 6c | h.the.flowtable.datapath..The.fl |
3f1e0 | 6f 77 74 61 62 6c 65 20 73 75 70 70 6f 72 74 73 20 66 6f 72 20 74 68 65 20 6c 61 79 65 72 20 33 | owtable.supports.for.the.layer.3 |
3f200 | 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 6e 64 20 74 68 65 20 6c 61 79 65 72 20 34 20 54 | .IPv4.and.IPv6.and.the.layer.4.T |
3f220 | 43 50 20 61 6e 64 20 55 44 50 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 46 6c 6f 77 74 61 62 6c 65 73 | CP.and.UDP.protocols..Flowtables |
3f240 | 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 46 6c 75 73 68 69 6e 67 | .Firewall.Configuration.Flushing |
3f260 | 20 74 68 65 20 73 65 73 73 69 6f 6e 20 74 61 62 6c 65 20 77 69 6c 6c 20 63 61 75 73 65 20 6f 74 | .the.session.table.will.cause.ot |
3f280 | 68 65 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 66 61 6c 6c 20 62 61 63 6b 20 66 72 6f | her.connections.to.fall.back.fro |
3f2a0 | 6d 20 66 6c 6f 77 2d 62 61 73 65 64 20 74 6f 20 70 61 63 6b 65 74 2d 62 61 73 65 64 20 62 61 6c | m.flow-based.to.packet-based.bal |
3f2c0 | 61 6e 63 69 6e 67 20 75 6e 74 69 6c 20 65 61 63 68 20 66 6c 6f 77 20 69 73 20 72 65 65 73 74 61 | ancing.until.each.flow.is.reesta |
3f2e0 | 62 6c 69 73 68 65 64 2e 00 46 6f 6c 6c 6f 77 20 74 68 65 20 53 53 48 20 64 79 6e 61 6d 69 63 2d | blished..Follow.the.SSH.dynamic- |
3f300 | 70 72 6f 74 65 63 74 69 6f 6e 20 6c 6f 67 2e 00 46 6f 6c 6c 6f 77 20 74 68 65 20 53 53 48 20 73 | protection.log..Follow.the.SSH.s |
3f320 | 65 72 76 65 72 20 6c 6f 67 2e 00 46 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f | erver.log..Follow.the.instructio |
3f340 | 6e 73 20 74 6f 20 67 65 6e 65 72 61 74 65 20 43 41 20 63 65 72 74 20 28 69 6e 20 63 6f 6e 66 69 | ns.to.generate.CA.cert.(in.confi |
3f360 | 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 29 3a 00 46 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 | guration.mode):.Follow.the.instr |
3f380 | 75 63 74 69 6f 6e 73 20 74 6f 20 67 65 6e 65 72 61 74 65 20 73 65 72 76 65 72 20 63 65 72 74 20 | uctions.to.generate.server.cert. |
3f3a0 | 28 69 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 29 3a 00 46 6f 6c 6c 6f 77 20 | (in.configuration.mode):.Follow. |
3f3c0 | 74 68 65 20 6c 6f 67 73 20 66 6f 72 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 73 65 72 76 69 | the.logs.for.mDNS.repeater.servi |
3f3e0 | 63 65 2e 00 46 6f 72 20 3a 72 65 66 3a 60 62 69 64 69 72 65 63 74 69 6f 6e 61 6c 2d 6e 61 74 60 | ce..For.:ref:`bidirectional-nat` |
3f400 | 20 61 20 72 75 6c 65 20 66 6f 72 20 62 6f 74 68 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 | .a.rule.for.both.:ref:`source-na |
3f420 | 74 60 20 61 6e 64 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 20 6e 65 | t`.and.:ref:`destination-nat`.ne |
3f440 | 65 64 73 20 74 6f 20 62 65 20 63 72 65 61 74 65 64 2e 00 46 6f 72 20 3a 72 65 66 3a 60 64 65 73 | eds.to.be.created..For.:ref:`des |
3f460 | 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 20 72 75 6c 65 73 20 74 68 65 20 70 61 63 6b 65 74 73 20 | tination-nat`.rules.the.packets. |
3f480 | 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 20 72 65 70 6c | destination.address.will.be.repl |
3f4a0 | 61 63 65 64 20 62 79 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 20 69 6e | aced.by.the.specified.address.in |
3f4c0 | 20 74 68 65 20 60 74 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 60 20 63 6f 6d 6d 61 | .the.`translation.address`.comma |
3f4e0 | 6e 64 2e 00 46 6f 72 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 72 75 6c 65 73 20 | nd..For.:ref:`source-nat`.rules. |
3f500 | 74 68 65 20 70 61 63 6b 65 74 73 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 | the.packets.source.address.will. |
3f520 | 62 65 20 72 65 70 6c 61 63 65 64 20 77 69 74 68 20 74 68 65 20 61 64 64 72 65 73 73 20 73 70 65 | be.replaced.with.the.address.spe |
3f540 | 63 69 66 69 65 64 20 69 6e 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e | cified.in.the.translation.comman |
3f560 | 64 2e 20 41 20 70 6f 72 74 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 63 61 6e 20 61 6c 73 6f 20 62 | d..A.port.translation.can.also.b |
3f580 | 65 20 73 70 65 63 69 66 69 65 64 20 61 6e 64 20 69 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 74 | e.specified.and.is.part.of.the.t |
3f5a0 | 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 00 46 6f 72 20 45 6e 63 72 79 70 74 69 | ranslation.address..For.Encrypti |
3f5c0 | 6f 6e 3a 00 46 6f 72 20 48 61 73 68 69 6e 67 3a 00 46 6f 72 20 49 53 2d 49 53 20 74 6f 70 20 6f | on:.For.Hashing:.For.IS-IS.top.o |
3f5e0 | 70 65 72 61 74 65 20 63 6f 72 72 65 63 74 6c 79 2c 20 6f 6e 65 20 6d 75 73 74 20 64 6f 20 74 68 | perate.correctly,.one.must.do.th |
3f600 | 65 20 65 71 75 69 76 61 6c 65 6e 74 20 6f 66 20 61 20 52 6f 75 74 65 72 20 49 44 20 69 6e 20 43 | e.equivalent.of.a.Router.ID.in.C |
3f620 | 4c 4e 53 2e 20 54 68 69 73 20 52 6f 75 74 65 72 20 49 44 20 69 73 20 63 61 6c 6c 65 64 20 74 68 | LNS..This.Router.ID.is.called.th |
3f640 | 65 20 3a 61 62 62 72 3a 60 4e 45 54 20 28 4e 65 74 77 6f 72 6b 20 45 6e 74 69 74 79 20 54 69 74 | e.:abbr:`NET.(Network.Entity.Tit |
3f660 | 6c 65 29 60 2e 20 54 68 69 73 20 6d 75 73 74 20 62 65 20 75 6e 69 71 75 65 20 66 6f 72 20 65 61 | le)`..This.must.be.unique.for.ea |
3f680 | 63 68 20 61 6e 64 20 65 76 65 72 79 20 72 6f 75 74 65 72 20 74 68 61 74 20 69 73 20 6f 70 65 72 | ch.and.every.router.that.is.oper |
3f6a0 | 61 74 69 6e 67 20 69 6e 20 49 53 2d 49 53 2e 20 49 74 20 61 6c 73 6f 20 6d 75 73 74 20 6e 6f 74 | ating.in.IS-IS..It.also.must.not |
3f6c0 | 20 62 65 20 64 75 70 6c 69 63 61 74 65 64 20 6f 74 68 65 72 77 69 73 65 20 74 68 65 20 73 61 6d | .be.duplicated.otherwise.the.sam |
3f6e0 | 65 20 69 73 73 75 65 73 20 74 68 61 74 20 6f 63 63 75 72 20 77 69 74 68 69 6e 20 4f 53 50 46 20 | e.issues.that.occur.within.OSPF. |
3f700 | 77 69 6c 6c 20 6f 63 63 75 72 20 77 69 74 68 69 6e 20 49 53 2d 49 53 20 77 68 65 6e 20 69 74 20 | will.occur.within.IS-IS.when.it. |
3f720 | 63 6f 6d 65 73 20 74 6f 20 73 61 69 64 20 64 75 70 6c 69 63 61 74 69 6f 6e 2e 00 46 6f 72 20 49 | comes.to.said.duplication..For.I |
3f740 | 6e 63 6f 6d 69 6e 67 20 61 6e 64 20 49 6d 70 6f 72 74 20 52 6f 75 74 65 2d 6d 61 70 73 20 69 66 | ncoming.and.Import.Route-maps.if |
3f760 | 20 77 65 20 72 65 63 65 69 76 65 20 61 20 76 36 20 67 6c 6f 62 61 6c 20 61 6e 64 20 76 36 20 4c | .we.receive.a.v6.global.and.v6.L |
3f780 | 4c 20 61 64 64 72 65 73 73 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 2c 20 74 68 65 6e 20 70 72 | L.address.for.the.route,.then.pr |
3f7a0 | 65 66 65 72 20 74 6f 20 75 73 65 20 74 68 65 20 67 6c 6f 62 61 6c 20 61 64 64 72 65 73 73 20 61 | efer.to.use.the.global.address.a |
3f7c0 | 73 20 74 68 65 20 6e 65 78 74 68 6f 70 2e 00 46 6f 72 20 4c 6f 63 61 6c 20 55 73 65 72 73 00 46 | s.the.nexthop..For.Local.Users.F |
3f7e0 | 6f 72 20 52 41 44 49 55 53 20 75 73 65 72 73 00 46 6f 72 20 55 53 42 20 70 6f 72 74 20 69 6e 66 | or.RADIUS.users.For.USB.port.inf |
3f800 | 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 72 65 66 6f 72 20 74 6f 3a 20 3a 72 65 66 3a 60 | ormation.please.refor.to:.:ref:` |
3f820 | 68 61 72 64 77 61 72 65 5f 75 73 62 60 2e 00 46 6f 72 20 61 20 68 65 61 64 73 74 61 72 74 20 79 | hardware_usb`..For.a.headstart.y |
3f840 | 6f 75 20 63 61 6e 20 75 73 65 20 74 68 65 20 62 65 6c 6f 77 20 65 78 61 6d 70 6c 65 20 6f 6e 20 | ou.can.use.the.below.example.on. |
3f860 | 68 6f 77 20 74 6f 20 62 75 69 6c 64 20 61 20 62 6f 6e 64 20 77 69 74 68 20 74 77 6f 20 69 6e 74 | how.to.build.a.bond.with.two.int |
3f880 | 65 72 66 61 63 65 73 20 66 72 6f 6d 20 56 79 4f 53 20 74 6f 20 61 20 4a 75 6e 69 70 65 72 20 45 | erfaces.from.VyOS.to.a.Juniper.E |
3f8a0 | 58 20 53 77 69 74 63 68 20 73 79 73 74 65 6d 2e 00 46 6f 72 20 61 20 68 65 61 64 73 74 61 72 74 | X.Switch.system..For.a.headstart |
3f8c0 | 20 79 6f 75 20 63 61 6e 20 75 73 65 20 74 68 65 20 62 65 6c 6f 77 20 65 78 61 6d 70 6c 65 20 6f | .you.can.use.the.below.example.o |
3f8e0 | 6e 20 68 6f 77 20 74 6f 20 62 75 69 6c 64 20 61 20 62 6f 6e 64 2c 70 6f 72 74 2d 63 68 61 6e 6e | n.how.to.build.a.bond,port-chann |
3f900 | 65 6c 20 77 69 74 68 20 74 77 6f 20 69 6e 74 65 72 66 61 63 65 73 20 66 72 6f 6d 20 56 79 4f 53 | el.with.two.interfaces.from.VyOS |
3f920 | 20 74 6f 20 61 20 41 72 75 62 61 2f 48 50 20 32 35 31 30 47 20 73 77 69 74 63 68 2e 00 46 6f 72 | .to.a.Aruba/HP.2510G.switch..For |
3f940 | 20 61 20 6c 61 72 67 65 20 61 6d 6f 75 6e 74 20 6f 66 20 70 72 69 76 61 74 65 20 6d 61 63 68 69 | .a.large.amount.of.private.machi |
3f960 | 6e 65 73 20 62 65 68 69 6e 64 20 74 68 65 20 4e 41 54 20 79 6f 75 72 20 61 64 64 72 65 73 73 20 | nes.behind.the.NAT.your.address. |
3f980 | 70 6f 6f 6c 20 6d 69 67 68 74 20 74 6f 20 62 65 20 62 69 67 67 65 72 2e 20 55 73 65 20 61 6e 79 | pool.might.to.be.bigger..Use.any |
3f9a0 | 20 61 64 64 72 65 73 73 20 69 6e 20 74 68 65 20 72 61 6e 67 65 20 31 30 30 2e 36 34 2e 30 2e 31 | .address.in.the.range.100.64.0.1 |
3f9c0 | 30 20 2d 20 31 30 30 2e 36 34 2e 30 2e 32 30 20 6f 6e 20 53 4e 41 54 20 72 75 6c 65 20 34 30 20 | 0.-.100.64.0.20.on.SNAT.rule.40. |
3f9e0 | 77 68 65 6e 20 64 6f 69 6e 67 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 00 46 6f 72 20 61 | when.doing.the.translation.For.a |
3fa00 | 20 73 69 6d 70 6c 65 20 68 6f 6d 65 20 6e 65 74 77 6f 72 6b 20 75 73 69 6e 67 20 6a 75 73 74 20 | .simple.home.network.using.just. |
3fa20 | 74 68 65 20 49 53 50 27 73 20 65 71 75 69 70 6d 65 6e 74 2c 20 74 68 69 73 20 69 73 20 75 73 75 | the.ISP's.equipment,.this.is.usu |
3fa40 | 61 6c 6c 79 20 64 65 73 69 72 61 62 6c 65 2e 20 42 75 74 20 69 66 20 79 6f 75 20 77 61 6e 74 20 | ally.desirable..But.if.you.want. |
3fa60 | 74 6f 20 72 75 6e 20 56 79 4f 53 20 61 73 20 79 6f 75 72 20 66 69 72 65 77 61 6c 6c 20 61 6e 64 | to.run.VyOS.as.your.firewall.and |
3fa80 | 20 72 6f 75 74 65 72 2c 20 74 68 69 73 20 77 69 6c 6c 20 72 65 73 75 6c 74 20 69 6e 20 68 61 76 | .router,.this.will.result.in.hav |
3faa0 | 69 6e 67 20 61 20 64 6f 75 62 6c 65 20 4e 41 54 20 61 6e 64 20 66 69 72 65 77 61 6c 6c 20 73 65 | ing.a.double.NAT.and.firewall.se |
3fac0 | 74 75 70 2e 20 54 68 69 73 20 72 65 73 75 6c 74 73 20 69 6e 20 61 20 66 65 77 20 65 78 74 72 61 | tup..This.results.in.a.few.extra |
3fae0 | 20 6c 61 79 65 72 73 20 6f 66 20 63 6f 6d 70 6c 65 78 69 74 79 2c 20 70 61 72 74 69 63 75 6c 61 | .layers.of.complexity,.particula |
3fb00 | 72 6c 79 20 69 66 20 79 6f 75 20 75 73 65 20 73 6f 6d 65 20 4e 41 54 20 6f 72 20 74 75 6e 6e 65 | rly.if.you.use.some.NAT.or.tunne |
3fb20 | 6c 20 66 65 61 74 75 72 65 73 2e 00 46 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 6c 65 73 73 20 70 | l.features..For.connectionless.p |
3fb40 | 72 6f 74 6f 63 6f 6c 73 20 61 73 20 6c 69 6b 65 20 49 43 4d 50 20 61 6e 64 20 55 44 50 2c 20 61 | rotocols.as.like.ICMP.and.UDP,.a |
3fb60 | 20 66 6c 6f 77 20 69 73 20 63 6f 6e 73 69 64 65 72 65 64 20 63 6f 6d 70 6c 65 74 65 20 6f 6e 63 | .flow.is.considered.complete.onc |
3fb80 | 65 20 6e 6f 20 6d 6f 72 65 20 70 61 63 6b 65 74 73 20 66 6f 72 20 74 68 69 73 20 66 6c 6f 77 20 | e.no.more.packets.for.this.flow. |
3fba0 | 61 70 70 65 61 72 20 61 66 74 65 72 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 74 69 6d 65 6f 75 | appear.after.configurable.timeou |
3fbc0 | 74 2e 00 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 66 20 70 72 6f 62 6c 65 6d 73 20 77 69 74 68 | t..For.example,.if.problems.with |
3fbe0 | 20 70 6f 6f 72 20 74 69 6d 65 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 61 72 65 20 65 | .poor.time.synchronization.are.e |
3fc00 | 78 70 65 72 69 65 6e 63 65 64 2c 20 74 68 65 20 77 69 6e 64 6f 77 20 63 61 6e 20 62 65 20 69 6e | xperienced,.the.window.can.be.in |
3fc20 | 63 72 65 61 73 65 64 20 66 72 6f 6d 20 69 74 73 20 64 65 66 61 75 6c 74 20 73 69 7a 65 20 6f 66 | creased.from.its.default.size.of |
3fc40 | 20 33 20 70 65 72 6d 69 74 74 65 64 20 63 6f 64 65 73 20 28 6f 6e 65 20 70 72 65 76 69 6f 75 73 | .3.permitted.codes.(one.previous |
3fc60 | 20 63 6f 64 65 2c 20 74 68 65 20 63 75 72 72 65 6e 74 20 63 6f 64 65 2c 20 74 68 65 20 6e 65 78 | .code,.the.current.code,.the.nex |
3fc80 | 74 20 63 6f 64 65 29 20 74 6f 20 31 37 20 70 65 72 6d 69 74 74 65 64 20 63 6f 64 65 73 20 28 74 | t.code).to.17.permitted.codes.(t |
3fca0 | 68 65 20 38 20 70 72 65 76 69 6f 75 73 20 63 6f 64 65 73 2c 20 74 68 65 20 63 75 72 72 65 6e 74 | he.8.previous.codes,.the.current |
3fcc0 | 20 63 6f 64 65 2c 20 61 6e 64 20 74 68 65 20 38 20 6e 65 78 74 20 63 6f 64 65 73 29 2e 20 54 68 | .code,.and.the.8.next.codes)..Th |
3fce0 | 69 73 20 77 69 6c 6c 20 70 65 72 6d 69 74 20 66 6f 72 20 61 20 74 69 6d 65 20 73 6b 65 77 20 6f | is.will.permit.for.a.time.skew.o |
3fd00 | 66 20 75 70 20 74 6f 20 34 20 6d 69 6e 75 74 65 73 20 62 65 74 77 65 65 6e 20 63 6c 69 65 6e 74 | f.up.to.4.minutes.between.client |
3fd20 | 20 61 6e 64 20 73 65 72 76 65 72 2e 00 46 6f 72 20 65 78 61 6d 70 6c 65 3a 00 46 6f 72 20 66 69 | .and.server..For.example:.For.fi |
3fd40 | 72 65 77 61 6c 6c 20 66 69 6c 74 65 72 69 6e 67 2c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | rewall.filtering,.configuration. |
3fd60 | 73 68 6f 75 6c 64 20 62 65 20 64 6f 6e 65 20 69 6e 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c | should.be.done.in.``set.firewall |
3fd80 | 20 5b 69 70 76 34 20 7c 20 69 70 76 36 5d 20 2e 2e 2e 60 60 00 46 6f 72 20 66 69 72 65 77 61 6c | .[ipv4.|.ipv6]....``.For.firewal |
3fda0 | 6c 20 66 69 6c 74 65 72 69 6e 67 2c 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 6e 65 65 64 | l.filtering,.firewall.rules.need |
3fdc0 | 73 20 74 6f 20 62 65 20 63 72 65 61 74 65 64 2e 20 45 61 63 68 20 72 75 6c 65 20 69 73 20 6e 75 | s.to.be.created..Each.rule.is.nu |
3fde0 | 6d 62 65 72 65 64 2c 20 68 61 73 20 61 6e 20 61 63 74 69 6f 6e 20 74 6f 20 61 70 70 6c 79 20 69 | mbered,.has.an.action.to.apply.i |
3fe00 | 66 20 74 68 65 20 72 75 6c 65 20 69 73 20 6d 61 74 63 68 65 64 2c 20 61 6e 64 20 74 68 65 20 61 | f.the.rule.is.matched,.and.the.a |
3fe20 | 62 69 6c 69 74 79 20 74 6f 20 73 70 65 63 69 66 79 20 6d 75 6c 74 69 70 6c 65 20 63 72 69 74 65 | bility.to.specify.multiple.crite |
3fe40 | 72 69 61 20 6d 61 74 63 68 65 72 73 2e 20 44 61 74 61 20 70 61 63 6b 65 74 73 20 67 6f 20 74 68 | ria.matchers..Data.packets.go.th |
3fe60 | 72 6f 75 67 68 20 74 68 65 20 72 75 6c 65 73 20 66 72 6f 6d 20 31 20 2d 20 39 39 39 39 39 39 2c | rough.the.rules.from.1.-.999999, |
3fe80 | 20 73 6f 20 6f 72 64 65 72 20 69 73 20 63 72 75 63 69 61 6c 2e 20 41 74 20 74 68 65 20 66 69 72 | .so.order.is.crucial..At.the.fir |
3fea0 | 73 74 20 6d 61 74 63 68 20 74 68 65 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 75 6c 65 20 | st.match.the.action.of.the.rule. |
3fec0 | 77 69 6c 6c 20 62 65 20 65 78 65 63 75 74 65 64 2e 00 46 6f 72 20 66 72 61 67 6d 65 6e 74 65 64 | will.be.executed..For.fragmented |
3fee0 | 20 54 43 50 20 6f 72 20 55 44 50 20 70 61 63 6b 65 74 73 20 61 6e 64 20 61 6c 6c 20 6f 74 68 65 | .TCP.or.UDP.packets.and.all.othe |
3ff00 | 72 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 70 72 6f 74 6f 63 6f 6c 20 74 72 61 66 66 69 63 | r.IPv4.and.IPv6.protocol.traffic |
3ff20 | 2c 20 74 68 65 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 | ,.the.source.and.destination.por |
3ff40 | 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 6f 6d 69 74 74 65 64 2e 20 46 6f 72 20 6e 6f | t.information.is.omitted..For.no |
3ff60 | 6e 2d 49 50 20 74 72 61 66 66 69 63 2c 20 74 68 65 20 66 6f 72 6d 75 6c 61 20 69 73 20 74 68 65 | n-IP.traffic,.the.formula.is.the |
3ff80 | 20 73 61 6d 65 20 61 73 20 66 6f 72 20 74 68 65 20 6c 61 79 65 72 32 20 74 72 61 6e 73 6d 69 74 | .same.as.for.the.layer2.transmit |
3ffa0 | 20 68 61 73 68 20 70 6f 6c 69 63 79 2e 00 46 6f 72 20 67 65 6e 65 72 61 74 69 6e 67 20 61 6e 20 | .hash.policy..For.generating.an. |
3ffc0 | 4f 54 50 20 6b 65 79 20 69 6e 20 56 79 4f 53 2c 20 79 6f 75 20 63 61 6e 20 75 73 65 20 74 68 65 | OTP.key.in.VyOS,.you.can.use.the |
3ffe0 | 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 28 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6d 6f 64 65 29 3a | .CLI.command.(operational.mode): |
40000 | 00 46 6f 72 20 69 6e 62 6f 75 6e 64 20 75 70 64 61 74 65 73 20 74 68 65 20 6f 72 64 65 72 20 6f | .For.inbound.updates.the.order.o |
40020 | 66 20 70 72 65 66 65 72 65 6e 63 65 20 69 73 3a 00 46 6f 72 20 69 6e 73 74 61 6e 63 65 2c 20 77 | f.preference.is:.For.instance,.w |
40040 | 69 74 68 20 3a 63 6f 64 65 3a 60 73 65 74 20 71 6f 73 20 70 6f 6c 69 63 79 20 73 68 61 70 65 72 | ith.:code:`set.qos.policy.shaper |
40060 | 20 4d 59 2d 53 48 41 50 45 52 20 63 6c 61 73 73 20 33 30 20 73 65 74 2d 64 73 63 70 20 45 46 60 | .MY-SHAPER.class.30.set-dscp.EF` |
40080 | 20 79 6f 75 20 77 6f 75 6c 64 20 62 65 20 6d 6f 64 69 66 79 69 6e 67 20 74 68 65 20 44 53 43 50 | .you.would.be.modifying.the.DSCP |
400a0 | 20 66 69 65 6c 64 20 76 61 6c 75 65 20 6f 66 20 70 61 63 6b 65 74 73 20 69 6e 20 74 68 61 74 20 | .field.value.of.packets.in.that. |
400c0 | 63 6c 61 73 73 20 74 6f 20 45 78 70 65 64 69 74 65 20 46 6f 72 77 61 72 64 69 6e 67 2e 00 46 6f | class.to.Expedite.Forwarding..Fo |
400e0 | 72 20 69 70 76 34 3a 00 46 6f 72 20 6c 61 74 65 73 74 20 72 65 6c 65 61 73 65 73 2c 20 72 65 66 | r.ipv4:.For.latest.releases,.ref |
40100 | 65 72 20 74 68 65 20 60 66 69 72 65 77 61 6c 6c 20 28 69 6e 74 65 72 66 61 63 65 2d 67 72 6f 75 | er.the.`firewall.(interface-grou |
40120 | 70 73 29 20 3c 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 76 79 6f 73 2e 69 6f 2f 65 6e 2f 6c 61 74 | ps).<https://docs.vyos.io/en/lat |
40140 | 65 73 74 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 | est/configuration/firewall/gener |
40160 | 61 6c 2e 68 74 6d 6c 23 69 6e 74 65 72 66 61 63 65 2d 67 72 6f 75 70 73 3e 60 5f 20 6d 61 69 6e | al.html#interface-groups>`_.main |
40180 | 20 70 61 67 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 7a 6f 6e 65 20 62 61 73 65 64 20 72 75 | .page.to.configure.zone.based.ru |
401a0 | 6c 65 73 2e 20 4e 65 77 20 73 79 6e 74 61 78 20 77 61 73 20 69 6e 74 72 6f 64 75 63 65 64 20 68 | les..New.syntax.was.introduced.h |
401c0 | 65 72 65 20 3a 76 79 74 61 73 6b 3a 60 54 35 31 36 30 60 00 46 6f 72 20 6c 61 74 65 73 74 20 72 | ere.:vytask:`T5160`.For.latest.r |
401e0 | 65 6c 65 61 73 65 73 2c 20 72 65 66 65 72 20 74 68 65 20 60 66 69 72 65 77 61 6c 6c 20 3c 68 74 | eleases,.refer.the.`firewall.<ht |
40200 | 74 70 73 3a 2f 2f 64 6f 63 73 2e 76 79 6f 73 2e 69 6f 2f 65 6e 2f 6c 61 74 65 73 74 2f 63 6f 6e | tps://docs.vyos.io/en/latest/con |
40220 | 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 61 6c 2e 68 74 6d 6c | figuration/firewall/general.html |
40240 | 23 69 6e 74 65 72 66 61 63 65 2d 67 72 6f 75 70 73 3e 60 5f 20 6d 61 69 6e 20 70 61 67 65 20 74 | #interface-groups>`_.main.page.t |
40260 | 6f 20 63 6f 6e 66 69 67 75 72 65 20 7a 6f 6e 65 20 62 61 73 65 64 20 72 75 6c 65 73 2e 20 4e 65 | o.configure.zone.based.rules..Ne |
40280 | 77 20 73 79 6e 74 61 78 20 77 61 73 20 69 6e 74 72 6f 64 75 63 65 64 20 68 65 72 65 20 3a 76 79 | w.syntax.was.introduced.here.:vy |
402a0 | 74 61 73 6b 3a 60 54 35 31 36 30 60 00 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f | task:`T5160`.For.more.informatio |
402c0 | 6e 20 6f 6e 20 68 6f 77 20 4d 50 4c 53 20 6c 61 62 65 6c 20 73 77 69 74 63 68 69 6e 67 20 77 6f | n.on.how.MPLS.label.switching.wo |
402e0 | 72 6b 73 2c 20 70 6c 65 61 73 65 20 67 6f 20 76 69 73 69 74 20 60 57 69 6b 69 70 65 64 69 61 20 | rks,.please.go.visit.`Wikipedia. |
40300 | 28 4d 50 4c 53 29 60 5f 2e 00 46 6f 72 20 6d 75 6c 74 69 20 68 6f 70 20 73 65 73 73 69 6f 6e 73 | (MPLS)`_..For.multi.hop.sessions |
40320 | 20 6f 6e 6c 79 2e 20 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 65 78 70 | .only..Configure.the.minimum.exp |
40340 | 65 63 74 65 64 20 54 54 4c 20 66 6f 72 20 61 6e 20 69 6e 63 6f 6d 69 6e 67 20 42 46 44 20 63 6f | ected.TTL.for.an.incoming.BFD.co |
40360 | 6e 74 72 6f 6c 20 70 61 63 6b 65 74 2e 00 46 6f 72 20 6e 65 74 77 6f 72 6b 20 6d 61 69 6e 74 65 | ntrol.packet..For.network.mainte |
40380 | 6e 61 6e 63 65 2c 20 69 74 27 73 20 61 20 67 6f 6f 64 20 69 64 65 61 20 74 6f 20 64 69 72 65 63 | nance,.it's.a.good.idea.to.direc |
403a0 | 74 20 75 73 65 72 73 20 74 6f 20 61 20 62 61 63 6b 75 70 20 73 65 72 76 65 72 20 73 6f 20 74 68 | t.users.to.a.backup.server.so.th |
403c0 | 61 74 20 74 68 65 20 70 72 69 6d 61 72 79 20 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 73 61 66 | at.the.primary.server.can.be.saf |
403e0 | 65 6c 79 20 74 61 6b 65 6e 20 6f 75 74 20 6f 66 20 73 65 72 76 69 63 65 2e 20 49 74 27 73 20 70 | ely.taken.out.of.service..It's.p |
40400 | 6f 73 73 69 62 6c 65 20 74 6f 20 73 77 69 74 63 68 20 79 6f 75 72 20 50 50 50 6f 45 20 73 65 72 | ossible.to.switch.your.PPPoE.ser |
40420 | 76 65 72 20 74 6f 20 6d 61 69 6e 74 65 6e 61 6e 63 65 20 6d 6f 64 65 20 77 68 65 72 65 20 69 74 | ver.to.maintenance.mode.where.it |
40440 | 20 6d 61 69 6e 74 61 69 6e 73 20 61 6c 72 65 61 64 79 20 65 73 74 61 62 6c 69 73 68 65 64 20 63 | .maintains.already.established.c |
40460 | 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 62 75 74 20 72 65 66 75 73 65 73 20 6e 65 77 20 63 6f 6e 6e | onnections,.but.refuses.new.conn |
40480 | 65 63 74 69 6f 6e 20 61 74 74 65 6d 70 74 73 2e 00 46 6f 72 20 6f 70 74 69 6d 61 6c 20 73 63 61 | ection.attempts..For.optimal.sca |
404a0 | 6c 61 62 69 6c 69 74 79 2c 20 4d 75 6c 74 69 63 61 73 74 20 73 68 6f 75 6c 64 6e 27 74 20 62 65 | lability,.Multicast.shouldn't.be |
404c0 | 20 75 73 65 64 20 61 74 20 61 6c 6c 2c 20 62 75 74 20 69 6e 73 74 65 61 64 20 75 73 65 20 42 47 | .used.at.all,.but.instead.use.BG |
404e0 | 50 20 74 6f 20 73 69 67 6e 61 6c 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 65 64 20 64 65 76 69 63 65 | P.to.signal.all.connected.device |
40500 | 73 20 62 65 74 77 65 65 6e 20 6c 65 61 76 65 73 2e 20 55 6e 66 6f 72 74 75 6e 61 74 65 6c 79 2c | s.between.leaves..Unfortunately, |
40520 | 20 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 79 65 74 20 73 75 70 70 6f 72 74 20 74 68 69 73 2e | .VyOS.does.not.yet.support.this. |
40540 | 00 46 6f 72 20 6f 75 74 62 6f 75 6e 64 20 75 70 64 61 74 65 73 20 74 68 65 20 6f 72 64 65 72 20 | .For.outbound.updates.the.order. |
40560 | 6f 66 20 70 72 65 66 65 72 65 6e 63 65 20 69 73 3a 00 46 6f 72 20 72 65 66 65 72 65 6e 63 65 2c | of.preference.is:.For.reference, |
40580 | 20 61 20 64 65 73 63 72 69 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 66 6f | .a.description.can.be.defined.fo |
405a0 | 72 20 65 76 65 72 79 20 64 65 66 69 6e 65 64 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2e 00 46 6f | r.every.defined.custom.chain..Fo |
405c0 | 72 20 72 65 66 65 72 65 6e 63 65 2c 20 61 20 64 65 73 63 72 69 70 74 69 6f 6e 20 63 61 6e 20 62 | r.reference,.a.description.can.b |
405e0 | 65 20 64 65 66 69 6e 65 64 20 66 6f 72 20 65 76 65 72 79 20 73 69 6e 67 6c 65 20 72 75 6c 65 2c | e.defined.for.every.single.rule, |
40600 | 20 61 6e 64 20 66 6f 72 20 65 76 65 72 79 20 64 65 66 69 6e 65 64 20 63 75 73 74 6f 6d 20 63 68 | .and.for.every.defined.custom.ch |
40620 | 61 69 6e 2e 00 46 6f 72 20 73 65 63 75 72 69 74 79 2c 20 74 68 65 20 6c 69 73 74 65 6e 20 61 64 | ain..For.security,.the.listen.ad |
40640 | 64 72 65 73 73 20 73 68 6f 75 6c 64 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 6f 6e 20 69 6e 74 | dress.should.only.be.used.on.int |
40660 | 65 72 6e 61 6c 2f 74 72 75 73 74 65 64 20 6e 65 74 77 6f 72 6b 73 21 00 46 6f 72 20 73 65 72 69 | ernal/trusted.networks!.For.seri |
40680 | 61 6c 20 76 69 61 20 55 53 42 20 70 6f 72 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 | al.via.USB.port.information.plea |
406a0 | 73 65 20 72 65 66 6f 72 20 74 6f 3a 20 3a 72 65 66 3a 60 68 61 72 64 77 61 72 65 5f 75 73 62 60 | se.refor.to:.:ref:`hardware_usb` |
406c0 | 2e 00 46 6f 72 20 73 69 6d 70 6c 69 63 69 74 79 20 77 65 27 6c 6c 20 61 73 73 75 6d 65 20 74 68 | ..For.simplicity.we'll.assume.th |
406e0 | 61 74 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 47 52 45 2c 20 69 74 27 73 20 6e 6f 74 | at.the.protocol.is.GRE,.it's.not |
40700 | 20 68 61 72 64 20 74 6f 20 67 75 65 73 73 20 77 68 61 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 | .hard.to.guess.what.needs.to.be. |
40720 | 63 68 61 6e 67 65 64 20 74 6f 20 6d 61 6b 65 20 69 74 20 77 6f 72 6b 20 77 69 74 68 20 61 20 64 | changed.to.make.it.work.with.a.d |
40740 | 69 66 66 65 72 65 6e 74 20 70 72 6f 74 6f 63 6f 6c 2e 20 57 65 20 61 73 73 75 6d 65 20 74 68 61 | ifferent.protocol..We.assume.tha |
40760 | 74 20 49 50 73 65 63 20 77 69 6c 6c 20 75 73 65 20 70 72 65 2d 73 68 61 72 65 64 20 73 65 63 72 | t.IPsec.will.use.pre-shared.secr |
40780 | 65 74 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 6e 64 20 77 69 6c 6c 20 75 73 65 20 41 | et.authentication.and.will.use.A |
407a0 | 45 53 31 32 38 2f 53 48 41 31 20 66 6f 72 20 74 68 65 20 63 69 70 68 65 72 20 61 6e 64 20 68 61 | ES128/SHA1.for.the.cipher.and.ha |
407c0 | 73 68 2e 20 41 64 6a 75 73 74 20 74 68 69 73 20 61 73 20 6e 65 63 65 73 73 61 72 79 2e 00 46 6f | sh..Adjust.this.as.necessary..Fo |
407e0 | 72 20 74 68 65 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 36 36 60 20 72 | r.the.:ref:`destination-nat66`.r |
40800 | 75 6c 65 2c 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6f 66 20 | ule,.the.destination.address.of. |
40820 | 74 68 65 20 70 61 63 6b 65 74 20 69 73 72 65 70 6c 61 63 65 64 20 62 79 20 74 68 65 20 61 64 64 | the.packet.isreplaced.by.the.add |
40840 | 72 65 73 73 20 63 61 6c 63 75 6c 61 74 65 64 20 66 72 6f 6d 20 74 68 65 20 73 70 65 63 69 66 69 | ress.calculated.from.the.specifi |
40860 | 65 64 20 61 64 64 72 65 73 73 20 6f 72 20 70 72 65 66 69 78 20 69 6e 20 74 68 65 20 60 74 72 61 | ed.address.or.prefix.in.the.`tra |
40880 | 6e 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 60 20 63 6f 6d 6d 61 6e 64 00 46 6f 72 20 74 68 | nslation.address`.command.For.th |
408a0 | 65 20 4f 70 65 6e 56 50 4e 20 74 72 61 66 66 69 63 20 74 6f 20 70 61 73 73 20 74 68 72 6f 75 67 | e.OpenVPN.traffic.to.pass.throug |
408c0 | 68 20 74 68 65 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 2c 20 79 6f 75 20 6d 75 73 74 20 63 72 | h.the.WAN.interface,.you.must.cr |
408e0 | 65 61 74 65 20 61 20 66 69 72 65 77 61 6c 6c 20 65 78 63 65 70 74 69 6f 6e 2e 00 46 6f 72 20 74 | eate.a.firewall.exception..For.t |
40900 | 68 65 20 57 69 72 65 47 75 61 72 64 20 74 72 61 66 66 69 63 20 74 6f 20 70 61 73 73 20 74 68 72 | he.WireGuard.traffic.to.pass.thr |
40920 | 6f 75 67 68 20 74 68 65 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 2c 20 79 6f 75 20 6d 75 73 74 | ough.the.WAN.interface,.you.must |
40940 | 20 63 72 65 61 74 65 20 61 20 66 69 72 65 77 61 6c 6c 20 65 78 63 65 70 74 69 6f 6e 2e 00 46 6f | .create.a.firewall.exception..Fo |
40960 | 72 20 74 68 65 20 61 76 65 72 61 67 65 20 75 73 65 72 20 61 20 73 65 72 69 61 6c 20 63 6f 6e 73 | r.the.average.user.a.serial.cons |
40980 | 6f 6c 65 20 68 61 73 20 6e 6f 20 61 64 76 61 6e 74 61 67 65 20 6f 76 65 72 20 61 20 63 6f 6e 73 | ole.has.no.advantage.over.a.cons |
409a0 | 6f 6c 65 20 6f 66 66 65 72 65 64 20 62 79 20 61 20 64 69 72 65 63 74 6c 79 20 61 74 74 61 63 68 | ole.offered.by.a.directly.attach |
409c0 | 65 64 20 6b 65 79 62 6f 61 72 64 20 61 6e 64 20 73 63 72 65 65 6e 2e 20 53 65 72 69 61 6c 20 63 | ed.keyboard.and.screen..Serial.c |
409e0 | 6f 6e 73 6f 6c 65 73 20 61 72 65 20 6d 75 63 68 20 73 6c 6f 77 65 72 2c 20 74 61 6b 69 6e 67 20 | onsoles.are.much.slower,.taking. |
40a00 | 75 70 20 74 6f 20 61 20 73 65 63 6f 6e 64 20 74 6f 20 66 69 6c 6c 20 61 20 38 30 20 63 6f 6c 75 | up.to.a.second.to.fill.a.80.colu |
40a20 | 6d 6e 20 62 79 20 32 34 20 6c 69 6e 65 20 73 63 72 65 65 6e 2e 20 53 65 72 69 61 6c 20 63 6f 6e | mn.by.24.line.screen..Serial.con |
40a40 | 73 6f 6c 65 73 20 67 65 6e 65 72 61 6c 6c 79 20 6f 6e 6c 79 20 73 75 70 70 6f 72 74 20 6e 6f 6e | soles.generally.only.support.non |
40a60 | 2d 70 72 6f 70 6f 72 74 69 6f 6e 61 6c 20 41 53 43 49 49 20 74 65 78 74 2c 20 77 69 74 68 20 6c | -proportional.ASCII.text,.with.l |
40a80 | 69 6d 69 74 65 64 20 73 75 70 70 6f 72 74 20 66 6f 72 20 6c 61 6e 67 75 61 67 65 73 20 6f 74 68 | imited.support.for.languages.oth |
40aa0 | 65 72 20 74 68 61 6e 20 45 6e 67 6c 69 73 68 2e 00 46 6f 72 20 74 68 65 20 69 6e 67 72 65 73 73 | er.than.English..For.the.ingress |
40ac0 | 20 74 72 61 66 66 69 63 20 6f 66 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2c 20 74 68 65 72 65 20 | .traffic.of.an.interface,.there. |
40ae0 | 69 73 20 6f 6e 6c 79 20 6f 6e 65 20 70 6f 6c 69 63 79 20 79 6f 75 20 63 61 6e 20 64 69 72 65 63 | is.only.one.policy.you.can.direc |
40b00 | 74 6c 79 20 61 70 70 6c 79 2c 20 61 20 2a 2a 4c 69 6d 69 74 65 72 2a 2a 20 70 6f 6c 69 63 79 2e | tly.apply,.a.**Limiter**.policy. |
40b20 | 20 59 6f 75 20 63 61 6e 6e 6f 74 20 61 70 70 6c 79 20 61 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 | .You.cannot.apply.a.shaping.poli |
40b40 | 63 79 20 64 69 72 65 63 74 6c 79 20 74 6f 20 74 68 65 20 69 6e 67 72 65 73 73 20 74 72 61 66 66 | cy.directly.to.the.ingress.traff |
40b60 | 69 63 20 6f 66 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 20 62 65 63 61 75 73 65 20 73 68 61 70 | ic.of.any.interface.because.shap |
40b80 | 69 6e 67 20 6f 6e 6c 79 20 77 6f 72 6b 73 20 66 6f 72 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 | ing.only.works.for.outbound.traf |
40ba0 | 66 69 63 2e 00 46 6f 72 20 74 68 65 20 73 61 6b 65 20 6f 66 20 64 65 6d 6f 6e 73 74 72 61 74 69 | fic..For.the.sake.of.demonstrati |
40bc0 | 6f 6e 2c 20 60 65 78 61 6d 70 6c 65 20 23 31 20 69 6e 20 74 68 65 20 6f 66 66 69 63 69 61 6c 20 | on,.`example.#1.in.the.official. |
40be0 | 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 7a 61 62 62 69 | documentation.<https://www.zabbi |
40c00 | 78 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2f 63 75 72 72 65 6e 74 2f 6d 61 6e 75 | x.com/documentation/current/manu |
40c20 | 61 6c 2f 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 2f 63 6f 6e 74 61 69 6e 65 72 73 3e 60 5f 20 74 6f | al/installation/containers>`_.to |
40c40 | 20 74 68 65 20 64 65 63 6c 61 72 61 74 69 76 65 20 56 79 4f 53 20 43 4c 49 20 73 79 6e 74 61 78 | .the.declarative.VyOS.CLI.syntax |
40c60 | 2e 00 46 6f 72 20 74 72 61 66 66 69 63 20 6f 72 69 67 69 6e 61 74 65 64 20 62 79 20 74 68 65 20 | ..For.traffic.originated.by.the. |
40c80 | 72 6f 75 74 65 72 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 2a 2a 6f 75 74 70 75 74 20 66 | router,.base.chain.is.**output.f |
40ca0 | 69 6c 74 65 72 2a 2a 3a 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 5b 69 70 76 34 20 7c 20 | ilter**:.``set.firewall.[ipv4.|. |
40cc0 | 69 70 76 36 5d 20 6f 75 74 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 46 6f 72 20 74 72 | ipv6].output.filter....``.For.tr |
40ce0 | 61 66 66 69 63 20 74 68 61 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 66 6f 72 77 61 72 65 64 20 | affic.that.needs.to.be.forwared. |
40d00 | 69 6e 74 65 72 6e 61 6c 6c 79 20 62 79 20 74 68 65 20 62 72 69 64 67 65 2c 20 62 61 73 65 20 63 | internally.by.the.bridge,.base.c |
40d20 | 68 61 69 6e 20 69 73 20 69 73 20 2a 2a 66 6f 72 77 61 72 64 2a 2a 2c 20 61 6e 64 20 69 74 27 73 | hain.is.is.**forward**,.and.it's |
40d40 | 20 62 61 73 65 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 20 66 69 6c 74 65 72 69 6e 67 20 69 73 20 60 | .base.command.for.filtering.is.` |
40d60 | 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 62 72 69 64 67 65 20 66 6f 72 77 61 72 64 20 66 69 6c | `set.firewall.bridge.forward.fil |
40d80 | 74 65 72 20 2e 2e 2e 60 60 00 46 6f 72 20 74 72 61 66 66 69 63 20 74 68 61 74 20 6e 65 65 64 73 | ter....``.For.traffic.that.needs |
40da0 | 20 74 6f 20 62 65 20 66 6f 72 77 61 72 65 64 20 69 6e 74 65 72 6e 61 6c 6c 79 20 62 79 20 74 68 | .to.be.forwared.internally.by.th |
40dc0 | 65 20 62 72 69 64 67 65 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 69 73 20 2a 2a 66 6f 72 | e.bridge,.base.chain.is.is.**for |
40de0 | 77 61 72 64 2a 2a 2c 20 61 6e 64 20 69 74 27 73 20 62 61 73 65 20 63 6f 6d 6d 61 6e 64 20 66 6f | ward**,.and.it's.base.command.fo |
40e00 | 72 20 66 69 6c 74 65 72 69 6e 67 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 62 72 | r.filtering.is.``set.firewall.br |
40e20 | 69 64 67 65 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2c 20 77 68 69 63 68 | idge.forward.filter....``,.which |
40e40 | 20 68 61 70 70 65 6e 73 20 69 6e 20 73 74 61 67 65 20 34 2c 20 68 69 67 68 6c 69 67 68 74 65 6e | .happens.in.stage.4,.highlighten |
40e60 | 65 64 20 77 69 74 68 20 72 65 64 20 63 6f 6c 6f 72 2e 00 46 6f 72 20 74 72 61 66 66 69 63 20 74 | ed.with.red.color..For.traffic.t |
40e80 | 6f 77 61 72 64 73 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2c 20 62 61 73 65 20 63 | owards.the.router.itself,.base.c |
40ea0 | 68 61 69 6e 20 69 73 20 2a 2a 69 6e 70 75 74 20 66 69 6c 74 65 72 2a 2a 3a 20 60 60 73 65 74 20 | hain.is.**input.filter**:.``set. |
40ec0 | 66 69 72 65 77 61 6c 6c 20 5b 69 70 76 34 20 7c 20 69 70 76 36 5d 20 69 6e 70 75 74 20 66 69 6c | firewall.[ipv4.|.ipv6].input.fil |
40ee0 | 74 65 72 20 2e 2e 2e 60 60 00 46 6f 72 20 74 72 61 66 66 69 63 20 74 6f 77 61 72 64 73 20 74 68 | ter....``.For.traffic.towards.th |
40f00 | 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 2a | e.router.itself,.base.chain.is.* |
40f20 | 2a 69 6e 70 75 74 2a 2a 2c 20 77 68 69 6c 65 20 74 72 61 66 66 69 63 20 6f 72 69 67 69 6e 61 74 | *input**,.while.traffic.originat |
40f40 | 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 | ed.by.the.router,.base.chain.is. |
40f60 | 2a 2a 6f 75 74 70 75 74 2a 2a 2e 20 41 20 6e 65 77 20 73 69 6d 70 6c 69 66 69 65 64 20 70 61 63 | **output**..A.new.simplified.pac |
40f80 | 6b 65 74 20 66 6c 6f 77 20 64 69 61 67 72 61 6d 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 2c 20 | ket.flow.diagram.is.shown.next,. |
40fa0 | 77 68 69 63 68 20 73 68 6f 77 73 20 74 68 65 20 70 61 74 68 20 66 6f 72 20 74 72 61 66 66 69 63 | which.shows.the.path.for.traffic |
40fc0 | 20 64 65 73 74 69 6e 61 74 65 64 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 | .destinated.to.the.router.itself |
40fe0 | 2c 20 61 6e 64 20 74 72 61 66 66 69 63 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 74 68 65 20 72 | ,.and.traffic.generated.by.the.r |
41000 | 6f 75 74 65 72 20 28 73 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 63 69 72 63 6c 65 20 6e 75 6d 62 | outer.(starting.from.circle.numb |
41020 | 65 72 20 36 29 3a 00 46 6f 72 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 | er.6):.For.transit.traffic,.whic |
41040 | 68 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 61 6e 64 20 | h.is.received.by.the.router.and. |
41060 | 66 6f 72 77 61 72 64 65 64 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 2a 2a 66 6f 72 77 61 | forwarded,.base.chain.is.**forwa |
41080 | 72 64 20 66 69 6c 74 65 72 2a 2a 3a 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 5b 69 70 76 | rd.filter**:.``set.firewall.[ipv |
410a0 | 34 20 7c 20 69 70 76 36 5d 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 46 | 4.|.ipv6].forward.filter....``.F |
410c0 | 6f 72 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 69 73 20 72 65 63 | or.transit.traffic,.which.is.rec |
410e0 | 65 69 76 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 61 6e 64 20 66 6f 72 77 61 72 64 65 | eived.by.the.router.and.forwarde |
41100 | 64 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 2a 2a 66 6f 72 77 61 72 64 2a 2a 2e 20 41 20 | d,.base.chain.is.**forward**..A. |
41120 | 73 69 6d 70 6c 69 66 69 65 64 20 70 61 63 6b 65 74 20 66 6c 6f 77 20 64 69 61 67 72 61 6d 20 66 | simplified.packet.flow.diagram.f |
41140 | 6f 72 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 | or.transit.traffic.is.shown.next |
41160 | 3a 00 46 6f 72 6d 61 6c 6c 79 2c 20 61 20 76 69 72 74 75 61 6c 20 6c 69 6e 6b 20 6c 6f 6f 6b 73 | :.Formally,.a.virtual.link.looks |
41180 | 20 6c 69 6b 65 20 61 20 70 6f 69 6e 74 2d 74 6f 2d 70 6f 69 6e 74 20 6e 65 74 77 6f 72 6b 20 63 | .like.a.point-to-point.network.c |
411a0 | 6f 6e 6e 65 63 74 69 6e 67 20 74 77 6f 20 41 42 52 20 66 72 6f 6d 20 6f 6e 65 20 61 72 65 61 20 | onnecting.two.ABR.from.one.area. |
411c0 | 6f 6e 65 20 6f 66 20 77 68 69 63 68 20 70 68 79 73 69 63 61 6c 6c 79 20 63 6f 6e 6e 65 63 74 65 | one.of.which.physically.connecte |
411e0 | 64 20 74 6f 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 2e 20 54 68 69 73 20 70 73 65 75 64 | d.to.a.backbone.area..This.pseud |
41200 | 6f 2d 6e 65 74 77 6f 72 6b 20 69 73 20 63 6f 6e 73 69 64 65 72 65 64 20 74 6f 20 62 65 6c 6f 6e | o-network.is.considered.to.belon |
41220 | 67 20 74 6f 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 2e 00 46 6f 72 77 61 72 64 20 69 6e | g.to.a.backbone.area..Forward.in |
41240 | 63 6f 6d 69 6e 67 20 44 4e 53 20 71 75 65 72 69 65 73 20 74 6f 20 74 68 65 20 44 4e 53 20 73 65 | coming.DNS.queries.to.the.DNS.se |
41260 | 72 76 65 72 73 20 63 6f 6e 66 69 67 75 72 65 64 20 75 6e 64 65 72 20 74 68 65 20 60 60 73 79 73 | rvers.configured.under.the.``sys |
41280 | 74 65 6d 20 6e 61 6d 65 2d 73 65 72 76 65 72 60 60 20 6e 6f 64 65 73 2e 00 46 6f 72 77 61 72 64 | tem.name-server``.nodes..Forward |
412a0 | 20 6d 65 74 68 6f 64 00 46 6f 72 77 61 72 64 20 72 65 63 65 69 76 65 64 20 71 75 65 72 69 65 73 | .method.Forward.received.queries |
412c0 | 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 64 6f 6d 61 69 6e 20 28 73 70 65 63 69 66 | .for.a.particular.domain.(specif |
412e0 | 69 65 64 20 76 69 61 20 60 64 6f 6d 61 69 6e 2d 6e 61 6d 65 60 29 20 74 6f 20 61 20 67 69 76 65 | ied.via.`domain-name`).to.a.give |
41300 | 6e 20 6e 61 6d 65 73 65 72 76 65 72 2e 20 4d 75 6c 74 69 70 6c 65 20 6e 61 6d 65 73 65 72 76 65 | n.nameserver..Multiple.nameserve |
41320 | 72 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 20 59 6f 75 20 63 61 6e 20 75 73 65 | rs.can.be.specified..You.can.use |
41340 | 20 74 68 69 73 20 66 65 61 74 75 72 65 20 66 6f 72 20 61 20 44 4e 53 20 73 70 6c 69 74 2d 68 6f | .this.feature.for.a.DNS.split-ho |
41360 | 72 69 7a 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 46 6f 75 72 20 70 6f 6c 69 63 69 | rizon.configuration..Four.polici |
41380 | 65 73 20 66 6f 72 20 72 65 66 6f 72 77 61 72 64 69 6e 67 20 44 48 43 50 20 70 61 63 6b 65 74 73 | es.for.reforwarding.DHCP.packets |
413a0 | 20 65 78 69 73 74 3a 00 46 72 6f 6d 20 3a 72 66 63 3a 60 31 39 33 30 60 3a 00 46 72 6f 6d 20 61 | .exist:.From.:rfc:`1930`:.From.a |
413c0 | 20 73 65 63 75 72 69 74 79 20 70 65 72 73 70 65 63 74 69 76 65 2c 20 69 74 20 69 73 20 6e 6f 74 | .security.perspective,.it.is.not |
413e0 | 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 6c 65 74 20 61 20 74 68 69 72 64 20 70 61 72 74 | .recommended.to.let.a.third.part |
41400 | 79 20 63 72 65 61 74 65 20 61 6e 64 20 73 68 61 72 65 20 74 68 65 20 70 72 69 76 61 74 65 20 6b | y.create.and.share.the.private.k |
41420 | 65 79 20 66 6f 72 20 61 20 73 65 63 75 72 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 59 6f 75 | ey.for.a.secured.connection..You |
41440 | 20 73 68 6f 75 6c 64 20 63 72 65 61 74 65 20 74 68 65 20 70 72 69 76 61 74 65 20 70 6f 72 74 69 | .should.create.the.private.porti |
41460 | 6f 6e 20 6f 6e 20 79 6f 75 72 20 6f 77 6e 20 61 6e 64 20 6f 6e 6c 79 20 68 61 6e 64 20 6f 75 74 | on.on.your.own.and.only.hand.out |
41480 | 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 2e 20 50 6c 65 61 73 65 20 6b 65 65 70 20 74 68 69 | .the.public.key..Please.keep.thi |
414a0 | 73 20 69 6e 20 6d 69 6e 64 20 77 68 65 6e 20 75 73 69 6e 67 20 74 68 69 73 20 63 6f 6e 76 65 6e | s.in.mind.when.using.this.conven |
414c0 | 69 65 6e 63 65 20 66 65 61 74 75 72 65 2e 00 46 72 6f 6d 20 6d 61 69 6e 20 73 74 72 75 63 74 75 | ience.feature..From.main.structu |
414e0 | 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 3a 64 6f 63 3a 60 46 69 72 65 77 61 6c 6c 20 4f 76 65 | re.defined.in.:doc:`Firewall.Ove |
41500 | 72 76 69 65 77 3c 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 69 6e | rview</configuration/firewall/in |
41520 | 64 65 78 3e 60 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 79 6f 75 20 63 61 6e 20 66 69 | dex>`.in.this.section.you.can.fi |
41540 | 6e 64 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 6c 79 20 66 6f 72 | nd.detailed.information.only.for |
41560 | 20 74 68 65 20 6e 65 78 74 20 70 61 72 74 20 6f 66 20 74 68 65 20 67 65 6e 65 72 61 6c 20 73 74 | .the.next.part.of.the.general.st |
41580 | 72 75 63 74 75 72 65 3a 00 46 77 6d 61 72 6b 00 47 45 4e 45 56 45 00 47 45 4e 45 56 45 20 69 73 | ructure:.Fwmark.GENEVE.GENEVE.is |
415a0 | 20 64 65 73 69 67 6e 65 64 20 74 6f 20 73 75 70 70 6f 72 74 20 6e 65 74 77 6f 72 6b 20 76 69 72 | .designed.to.support.network.vir |
415c0 | 74 75 61 6c 69 7a 61 74 69 6f 6e 20 75 73 65 20 63 61 73 65 73 2c 20 77 68 65 72 65 20 74 75 6e | tualization.use.cases,.where.tun |
415e0 | 6e 65 6c 73 20 61 72 65 20 74 79 70 69 63 61 6c 6c 79 20 65 73 74 61 62 6c 69 73 68 65 64 20 74 | nels.are.typically.established.t |
41600 | 6f 20 61 63 74 20 61 73 20 61 20 62 61 63 6b 70 6c 61 6e 65 20 62 65 74 77 65 65 6e 20 74 68 65 | o.act.as.a.backplane.between.the |
41620 | 20 76 69 72 74 75 61 6c 20 73 77 69 74 63 68 65 73 20 72 65 73 69 64 69 6e 67 20 69 6e 20 68 79 | .virtual.switches.residing.in.hy |
41640 | 70 65 72 76 69 73 6f 72 73 2c 20 70 68 79 73 69 63 61 6c 20 73 77 69 74 63 68 65 73 2c 20 6f 72 | pervisors,.physical.switches,.or |
41660 | 20 6d 69 64 64 6c 65 62 6f 78 65 73 20 6f 72 20 6f 74 68 65 72 20 61 70 70 6c 69 61 6e 63 65 73 | .middleboxes.or.other.appliances |
41680 | 2e 20 41 6e 20 61 72 62 69 74 72 61 72 79 20 49 50 20 6e 65 74 77 6f 72 6b 20 63 61 6e 20 62 65 | ..An.arbitrary.IP.network.can.be |
416a0 | 20 75 73 65 64 20 61 73 20 61 6e 20 75 6e 64 65 72 6c 61 79 20 61 6c 74 68 6f 75 67 68 20 43 6c | .used.as.an.underlay.although.Cl |
416c0 | 6f 73 20 6e 65 74 77 6f 72 6b 73 20 2d 20 41 20 74 65 63 68 6e 69 71 75 65 20 66 6f 72 20 63 6f | os.networks.-.A.technique.for.co |
416e0 | 6d 70 6f 73 69 6e 67 20 6e 65 74 77 6f 72 6b 20 66 61 62 72 69 63 73 20 6c 61 72 67 65 72 20 74 | mposing.network.fabrics.larger.t |
41700 | 68 61 6e 20 61 20 73 69 6e 67 6c 65 20 73 77 69 74 63 68 20 77 68 69 6c 65 20 6d 61 69 6e 74 61 | han.a.single.switch.while.mainta |
41720 | 69 6e 69 6e 67 20 6e 6f 6e 2d 62 6c 6f 63 6b 69 6e 67 20 62 61 6e 64 77 69 64 74 68 20 61 63 72 | ining.non-blocking.bandwidth.acr |
41740 | 6f 73 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 70 6f 69 6e 74 73 2e 20 45 43 4d 50 20 69 73 20 75 | oss.connection.points..ECMP.is.u |
41760 | 73 65 64 20 74 6f 20 64 69 76 69 64 65 20 74 72 61 66 66 69 63 20 61 63 72 6f 73 73 20 74 68 65 | sed.to.divide.traffic.across.the |
41780 | 20 6d 75 6c 74 69 70 6c 65 20 6c 69 6e 6b 73 20 61 6e 64 20 73 77 69 74 63 68 65 73 20 74 68 61 | .multiple.links.and.switches.tha |
417a0 | 74 20 63 6f 6e 73 74 69 74 75 74 65 20 74 68 65 20 66 61 62 72 69 63 2e 20 53 6f 6d 65 74 69 6d | t.constitute.the.fabric..Sometim |
417c0 | 65 73 20 74 65 72 6d 65 64 20 22 6c 65 61 66 20 61 6e 64 20 73 70 69 6e 65 22 20 6f 72 20 22 66 | es.termed."leaf.and.spine".or."f |
417e0 | 61 74 20 74 72 65 65 22 20 74 6f 70 6f 6c 6f 67 69 65 73 2e 00 47 45 4e 45 56 45 20 6f 70 74 69 | at.tree".topologies..GENEVE.opti |
41800 | 6f 6e 73 00 47 52 45 20 69 73 20 61 20 77 65 6c 6c 20 64 65 66 69 6e 65 64 20 73 74 61 6e 64 61 | ons.GRE.is.a.well.defined.standa |
41820 | 72 64 20 74 68 61 74 20 69 73 20 63 6f 6d 6d 6f 6e 20 69 6e 20 6d 6f 73 74 20 6e 65 74 77 6f 72 | rd.that.is.common.in.most.networ |
41840 | 6b 73 2e 20 57 68 69 6c 65 20 6e 6f 74 20 69 6e 68 65 72 65 6e 74 6c 79 20 64 69 66 66 69 63 75 | ks..While.not.inherently.difficu |
41860 | 6c 74 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 72 65 20 61 72 65 20 61 20 63 6f 75 70 | lt.to.configure.there.are.a.coup |
41880 | 6c 65 20 6f 66 20 74 68 69 6e 67 73 20 74 6f 20 6b 65 65 70 20 69 6e 20 6d 69 6e 64 20 74 6f 20 | le.of.things.to.keep.in.mind.to. |
418a0 | 6d 61 6b 65 20 73 75 72 65 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 65 72 66 | make.sure.the.configuration.perf |
418c0 | 6f 72 6d 73 20 61 73 20 65 78 70 65 63 74 65 64 2e 20 41 20 63 6f 6d 6d 6f 6e 20 63 61 75 73 65 | orms.as.expected..A.common.cause |
418e0 | 20 66 6f 72 20 47 52 45 20 74 75 6e 6e 65 6c 73 20 74 6f 20 66 61 69 6c 20 74 6f 20 63 6f 6d 65 | .for.GRE.tunnels.to.fail.to.come |
41900 | 20 75 70 20 63 6f 72 72 65 63 74 6c 79 20 69 6e 63 6c 75 64 65 20 41 43 4c 20 6f 72 20 46 69 72 | .up.correctly.include.ACL.or.Fir |
41920 | 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 20 74 68 61 74 20 61 72 65 20 64 69 | ewall.configurations.that.are.di |
41940 | 73 63 61 72 64 69 6e 67 20 49 50 20 70 72 6f 74 6f 63 6f 6c 20 34 37 20 6f 72 20 62 6c 6f 63 6b | scarding.IP.protocol.47.or.block |
41960 | 69 6e 67 20 79 6f 75 72 20 73 6f 75 72 63 65 2f 64 65 73 74 69 6e 61 74 69 6f 6e 20 74 72 61 66 | ing.your.source/destination.traf |
41980 | 66 69 63 2e 00 47 52 45 20 69 73 20 61 6c 73 6f 20 74 68 65 20 6f 6e 6c 79 20 63 6c 61 73 73 69 | fic..GRE.is.also.the.only.classi |
419a0 | 63 20 70 72 6f 74 6f 63 6f 6c 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 63 72 65 61 74 69 6e 67 20 | c.protocol.that.allows.creating. |
419c0 | 6d 75 6c 74 69 70 6c 65 20 74 75 6e 6e 65 6c 73 20 77 69 74 68 20 74 68 65 20 73 61 6d 65 20 73 | multiple.tunnels.with.the.same.s |
419e0 | 6f 75 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 64 75 65 20 74 6f 20 69 74 73 | ource.and.destination.due.to.its |
41a00 | 20 73 75 70 70 6f 72 74 20 66 6f 72 20 74 75 6e 6e 65 6c 20 6b 65 79 73 2e 20 44 65 73 70 69 74 | .support.for.tunnel.keys..Despit |
41a20 | 65 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 69 73 20 66 65 61 74 75 72 65 20 68 61 73 20 6e 6f 74 | e.its.name,.this.feature.has.not |
41a40 | 68 69 6e 67 20 74 6f 20 64 6f 20 77 69 74 68 20 73 65 63 75 72 69 74 79 3a 20 69 74 27 73 20 73 | hing.to.do.with.security:.it's.s |
41a60 | 69 6d 70 6c 79 20 61 6e 20 69 64 65 6e 74 69 66 69 65 72 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 | imply.an.identifier.that.allows. |
41a80 | 72 6f 75 74 65 72 73 20 74 6f 20 74 65 6c 6c 20 6f 6e 65 20 74 75 6e 6e 65 6c 20 66 72 6f 6d 20 | routers.to.tell.one.tunnel.from. |
41aa0 | 61 6e 6f 74 68 65 72 2e 00 47 52 45 20 69 73 20 6f 66 74 65 6e 20 73 65 65 6e 20 61 73 20 61 20 | another..GRE.is.often.seen.as.a. |
41ac0 | 6f 6e 65 20 73 69 7a 65 20 66 69 74 73 20 61 6c 6c 20 73 6f 6c 75 74 69 6f 6e 20 77 68 65 6e 20 | one.size.fits.all.solution.when. |
41ae0 | 69 74 20 63 6f 6d 65 73 20 74 6f 20 63 6c 61 73 73 69 63 20 49 50 20 74 75 6e 6e 65 6c 69 6e 67 | it.comes.to.classic.IP.tunneling |
41b00 | 20 70 72 6f 74 6f 63 6f 6c 73 2c 20 61 6e 64 20 66 6f 72 20 61 20 67 6f 6f 64 20 72 65 61 73 6f | .protocols,.and.for.a.good.reaso |
41b20 | 6e 2e 20 48 6f 77 65 76 65 72 2c 20 74 68 65 72 65 20 61 72 65 20 6d 6f 72 65 20 73 70 65 63 69 | n..However,.there.are.more.speci |
41b40 | 61 6c 69 7a 65 64 20 6f 70 74 69 6f 6e 73 2c 20 61 6e 64 20 6d 61 6e 79 20 6f 66 20 74 68 65 6d | alized.options,.and.many.of.them |
41b60 | 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 56 79 4f 53 2e 20 54 68 65 72 65 20 61 72 | .are.supported.by.VyOS..There.ar |
41b80 | 65 20 61 6c 73 6f 20 72 61 74 68 65 72 20 6f 62 73 63 75 72 65 20 47 52 45 20 6f 70 74 69 6f 6e | e.also.rather.obscure.GRE.option |
41ba0 | 73 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 66 75 6c 2e 00 47 52 45 2f 49 50 49 50 2f 53 | s.that.can.be.useful..GRE/IPIP/S |
41bc0 | 49 54 20 61 6e 64 20 49 50 73 65 63 20 61 72 65 20 77 69 64 65 6c 79 20 61 63 63 65 70 74 65 64 | IT.and.IPsec.are.widely.accepted |
41be0 | 20 73 74 61 6e 64 61 72 64 73 2c 20 77 68 69 63 68 20 6d 61 6b 65 20 74 68 69 73 20 73 63 68 65 | .standards,.which.make.this.sche |
41c00 | 6d 65 20 65 61 73 79 20 74 6f 20 69 6d 70 6c 65 6d 65 6e 74 20 62 65 74 77 65 65 6e 20 56 79 4f | me.easy.to.implement.between.VyO |
41c20 | 53 20 61 6e 64 20 76 69 72 74 75 61 6c 6c 79 20 61 6e 79 20 6f 74 68 65 72 20 72 6f 75 74 65 72 | S.and.virtually.any.other.router |
41c40 | 2e 00 47 52 45 54 41 50 00 47 65 6e 65 61 72 61 74 65 20 61 20 6e 65 77 20 4f 70 65 6e 56 50 4e | ..GRETAP.Genearate.a.new.OpenVPN |
41c60 | 20 73 68 61 72 65 64 20 73 65 63 72 65 74 2e 20 54 68 65 20 67 65 6e 65 72 61 74 65 64 20 73 65 | .shared.secret..The.generated.se |
41c80 | 63 72 65 64 20 69 73 20 74 68 65 20 6f 75 74 70 75 74 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c | cred.is.the.output.to.the.consol |
41ca0 | 65 2e 00 47 65 6e 65 61 72 61 74 65 20 61 20 6e 65 77 20 4f 70 65 6e 56 50 4e 20 73 68 61 72 65 | e..Genearate.a.new.OpenVPN.share |
41cc0 | 64 20 73 65 63 72 65 74 2e 20 54 68 65 20 67 65 6e 65 72 61 74 65 64 20 73 65 63 72 65 74 20 69 | d.secret..The.generated.secret.i |
41ce0 | 73 20 74 68 65 20 6f 75 74 70 75 74 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 47 65 6e | s.the.output.to.the.console..Gen |
41d00 | 65 72 61 6c 00 47 65 6e 65 72 61 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 47 65 6e 65 72 | eral.General.Configuration.Gener |
41d20 | 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 66 6f 72 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 | al.commands.for.firewall.configu |
41d40 | 72 61 74 69 6f 6e 2c 20 63 6f 75 6e 74 65 72 20 61 6e 64 20 73 74 61 74 69 73 63 69 74 73 3a 00 | ration,.counter.and.statiscits:. |
41d60 | 47 65 6e 65 72 61 74 65 20 3a 61 62 62 72 3a 60 4d 4b 41 20 28 4d 41 43 73 65 63 20 4b 65 79 20 | Generate.:abbr:`MKA.(MACsec.Key. |
41d80 | 41 67 72 65 65 6d 65 6e 74 20 70 72 6f 74 6f 63 6f 6c 29 60 20 43 41 4b 20 6b 65 79 20 31 32 38 | Agreement.protocol)`.CAK.key.128 |
41da0 | 20 6f 72 20 32 35 36 20 62 69 74 73 2e 00 47 65 6e 65 72 61 74 65 20 3a 61 62 62 72 3a 60 4d 4b | .or.256.bits..Generate.:abbr:`MK |
41dc0 | 41 20 28 4d 41 43 73 65 63 20 4b 65 79 20 41 67 72 65 65 6d 65 6e 74 20 70 72 6f 74 6f 63 6f 6c | A.(MACsec.Key.Agreement.protocol |
41de0 | 29 60 20 43 41 4b 20 6b 65 79 2e 00 47 65 6e 65 72 61 74 65 20 4b 65 79 70 61 69 72 00 47 65 6e | )`.CAK.key..Generate.Keypair.Gen |
41e00 | 65 72 61 74 65 20 61 20 57 69 72 65 47 75 61 72 64 20 70 72 65 2d 73 68 61 72 65 64 20 73 65 63 | erate.a.WireGuard.pre-shared.sec |
41e20 | 72 65 74 20 75 73 65 64 20 66 6f 72 20 70 65 65 72 73 20 74 6f 20 63 6f 6d 6d 75 6e 69 63 61 74 | ret.used.for.peers.to.communicat |
41e40 | 65 2e 00 47 65 6e 65 72 61 74 65 20 61 20 6e 65 77 20 57 69 72 65 47 75 61 72 64 20 70 75 62 6c | e..Generate.a.new.WireGuard.publ |
41e60 | 69 63 2f 70 72 69 76 61 74 65 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 61 6e 64 20 6f 75 74 70 75 | ic/private.key.portion.and.outpu |
41e80 | 74 20 74 68 65 20 72 65 73 75 6c 74 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 47 65 6e | t.the.result.to.the.console..Gen |
41ea0 | 65 72 61 74 65 20 61 20 6e 65 77 20 73 65 74 20 6f 66 20 3a 61 62 62 72 3a 60 44 48 20 28 44 69 | erate.a.new.set.of.:abbr:`DH.(Di |
41ec0 | 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 29 60 20 70 61 72 61 6d 65 74 65 72 73 2e 20 54 68 65 20 6b | ffie-Hellman)`.parameters..The.k |
41ee0 | 65 79 20 73 69 7a 65 20 69 73 20 72 65 71 75 65 73 74 65 64 20 62 79 20 74 68 65 20 43 4c 49 20 | ey.size.is.requested.by.the.CLI. |
41f00 | 61 6e 64 20 64 65 66 61 75 6c 74 73 20 74 6f 20 32 30 34 38 20 62 69 74 2e 00 47 65 6e 65 72 61 | and.defaults.to.2048.bit..Genera |
41f20 | 74 65 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 20 63 6f 6d 6d 61 6e | te.the.configuration.mode.comman |
41f40 | 64 73 20 74 6f 20 61 64 64 20 61 20 70 75 62 6c 69 63 20 6b 65 79 20 66 6f 72 20 3a 72 65 66 3a | ds.to.add.a.public.key.for.:ref: |
41f60 | 60 73 73 68 5f 6b 65 79 5f 62 61 73 65 64 5f 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 60 2e 20 | `ssh_key_based_authentication`.. |
41f80 | 60 60 3c 6c 6f 63 61 74 69 6f 6e 3e 60 60 20 63 61 6e 20 62 65 20 61 20 6c 6f 63 61 6c 20 70 61 | ``<location>``.can.be.a.local.pa |
41fa0 | 74 68 20 6f 72 20 61 20 55 52 4c 20 70 6f 69 6e 74 69 6e 67 20 61 74 20 61 20 72 65 6d 6f 74 65 | th.or.a.URL.pointing.at.a.remote |
41fc0 | 20 66 69 6c 65 2e 00 47 65 6e 65 72 61 74 65 73 20 61 20 6b 65 79 70 61 69 72 2c 20 77 68 69 63 | .file..Generates.a.keypair,.whic |
41fe0 | 68 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 70 75 62 6c 69 63 20 61 6e 64 20 70 72 69 76 61 74 | h.includes.the.public.and.privat |
42000 | 65 20 70 61 72 74 73 2c 20 61 6e 64 20 62 75 69 6c 64 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 | e.parts,.and.build.a.configurati |
42020 | 6f 6e 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 6e 73 74 61 6c 6c 20 74 68 69 73 20 6b 65 79 20 74 | on.command.to.install.this.key.t |
42040 | 6f 20 60 60 69 6e 74 65 72 66 61 63 65 60 60 2e 00 47 65 6e 65 72 69 63 20 52 6f 75 74 69 6e 67 | o.``interface``..Generic.Routing |
42060 | 20 45 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 28 47 52 45 29 00 47 65 6e 65 76 65 20 48 65 61 64 | .Encapsulation.(GRE).Geneve.Head |
42080 | 65 72 3a 00 47 65 74 20 61 20 6c 69 73 74 20 6f 66 20 61 6c 6c 20 77 69 72 65 67 75 61 72 64 20 | er:.Get.a.list.of.all.wireguard. |
420a0 | 69 6e 74 65 72 66 61 63 65 73 00 47 65 74 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 76 65 72 20 | interfaces.Get.an.overview.over. |
420c0 | 74 68 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 6f 75 6e 74 65 72 73 2e 00 47 65 74 20 64 65 74 | the.encryption.counters..Get.det |
420e0 | 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 4c 4c 44 50 20 6e 65 69 | ailed.information.about.LLDP.nei |
42100 | 67 68 62 6f 72 73 2e 00 47 65 74 20 74 68 65 20 44 48 43 50 76 36 2d 50 44 20 70 72 65 66 69 78 | ghbors..Get.the.DHCPv6-PD.prefix |
42120 | 65 73 20 66 72 6f 6d 20 62 6f 74 68 20 72 6f 75 74 65 72 73 3a 00 47 65 74 74 69 6e 67 20 73 74 | es.from.both.routers:.Getting.st |
42140 | 61 72 74 65 64 00 47 69 76 65 6e 20 74 68 65 20 66 61 63 74 20 74 68 61 74 20 6f 70 65 6e 20 44 | arted.Given.the.fact.that.open.D |
42160 | 4e 53 20 72 65 63 75 72 73 6f 72 73 20 63 6f 75 6c 64 20 62 65 20 75 73 65 64 20 6f 6e 20 44 44 | NS.recursors.could.be.used.on.DD |
42180 | 6f 53 20 61 6d 70 6c 69 66 69 63 61 74 69 6f 6e 20 61 74 74 61 63 6b 73 2c 20 79 6f 75 20 6d 75 | oS.amplification.attacks,.you.mu |
421a0 | 73 74 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6e 65 74 77 6f 72 6b 73 20 77 68 69 63 68 20 | st.configure.the.networks.which. |
421c0 | 61 72 65 20 61 6c 6c 6f 77 65 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 72 65 63 75 72 73 6f 72 | are.allowed.to.use.this.recursor |
421e0 | 2e 20 41 20 6e 65 74 77 6f 72 6b 20 6f 66 20 60 60 30 2e 30 2e 30 2e 30 2f 30 60 60 20 6f 72 20 | ..A.network.of.``0.0.0.0/0``.or. |
42200 | 60 60 3a 3a 2f 30 60 60 20 77 6f 75 6c 64 20 61 6c 6c 6f 77 20 61 6c 6c 20 49 50 76 34 20 61 6e | ``::/0``.would.allow.all.IPv4.an |
42220 | 64 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 73 20 74 6f 20 71 75 65 72 79 20 74 68 69 73 20 73 65 | d.IPv6.networks.to.query.this.se |
42240 | 72 76 65 72 2e 20 54 68 69 73 20 69 73 20 67 65 6e 65 72 61 6c 6c 79 20 61 20 62 61 64 20 69 64 | rver..This.is.generally.a.bad.id |
42260 | 65 61 2e 00 47 69 76 65 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 | ea..Given.the.following.example. |
42280 | 77 65 20 68 61 76 65 20 6f 6e 65 20 56 79 4f 53 20 72 6f 75 74 65 72 20 61 63 74 69 6e 67 20 61 | we.have.one.VyOS.router.acting.a |
422a0 | 73 20 4f 70 65 6e 56 50 4e 20 73 65 72 76 65 72 20 61 6e 64 20 61 6e 6f 74 68 65 72 20 56 79 4f | s.OpenVPN.server.and.another.VyO |
422c0 | 53 20 72 6f 75 74 65 72 20 61 63 74 69 6e 67 20 61 73 20 4f 70 65 6e 56 50 4e 20 63 6c 69 65 6e | S.router.acting.as.OpenVPN.clien |
422e0 | 74 2e 20 54 68 65 20 73 65 72 76 65 72 20 61 6c 73 6f 20 70 75 73 68 65 73 20 61 20 73 74 61 74 | t..The.server.also.pushes.a.stat |
42300 | 69 63 20 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 74 68 65 20 4f 70 65 6e | ic.client.IP.address.to.the.Open |
42320 | 56 50 4e 20 63 6c 69 65 6e 74 2e 20 52 65 6d 65 6d 62 65 72 2c 20 63 6c 69 65 6e 74 73 20 61 72 | VPN.client..Remember,.clients.ar |
42340 | 65 20 69 64 65 6e 74 69 66 69 65 64 20 75 73 69 6e 67 20 74 68 65 69 72 20 43 4e 20 61 74 74 72 | e.identified.using.their.CN.attr |
42360 | 69 62 75 74 65 20 69 6e 20 74 68 65 20 53 53 4c 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 47 6c | ibute.in.the.SSL.certificate..Gl |
42380 | 6f 61 62 61 6c 00 47 6c 6f 62 61 6c 20 41 64 76 61 6e 63 65 64 20 6f 70 74 69 6f 6e 73 00 47 6c | oabal.Global.Advanced.options.Gl |
423a0 | 6f 62 61 6c 20 4f 70 74 69 6f 6e 73 00 47 6c 6f 62 61 6c 20 4f 70 74 69 6f 6e 73 20 46 69 72 65 | obal.Options.Global.Options.Fire |
423c0 | 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 47 6c 6f 62 61 6c 20 6f 70 74 69 6f 6e | wall.Configuration.Global.option |
423e0 | 73 00 47 6c 6f 62 61 6c 20 70 61 72 61 6d 65 74 65 72 73 00 47 6c 6f 62 61 6c 20 73 65 74 74 69 | s.Global.parameters.Global.setti |
42400 | 6e 67 73 00 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 00 47 72 61 74 75 69 74 6f 75 73 20 | ngs.Graceful.Restart.Gratuitous. |
42420 | 41 52 50 00 47 72 6f 75 70 73 00 47 72 6f 75 70 73 20 6e 65 65 64 20 74 6f 20 68 61 76 65 20 75 | ARP.Groups.Groups.need.to.have.u |
42440 | 6e 69 71 75 65 20 6e 61 6d 65 73 2e 20 45 76 65 6e 20 74 68 6f 75 67 68 20 73 6f 6d 65 20 63 6f | nique.names..Even.though.some.co |
42460 | 6e 74 61 69 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 6f 74 68 65 72 73 20 | ntain.IPv4.addresses.and.others. |
42480 | 63 6f 6e 74 61 69 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 2c 20 74 68 65 79 20 73 74 69 | contain.IPv6.addresses,.they.sti |
424a0 | 6c 6c 20 6e 65 65 64 20 74 6f 20 68 61 76 65 20 75 6e 69 71 75 65 20 6e 61 6d 65 73 2c 20 73 6f | ll.need.to.have.unique.names,.so |
424c0 | 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 61 70 70 65 6e 64 20 22 2d 76 34 22 20 6f 72 | .you.may.want.to.append."-v4".or |
424e0 | 20 22 2d 76 36 22 20 74 6f 20 79 6f 75 72 20 67 72 6f 75 70 20 6e 61 6d 65 73 2e 00 48 51 27 73 | ."-v6".to.your.group.names..HQ's |
42500 | 20 72 6f 75 74 65 72 20 72 65 71 75 69 72 65 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 | .router.requires.the.following.s |
42520 | 74 65 70 73 20 74 6f 20 67 65 6e 65 72 61 74 65 20 63 72 79 70 74 6f 20 6d 61 74 65 72 69 61 6c | teps.to.generate.crypto.material |
42540 | 73 20 66 6f 72 20 74 68 65 20 42 72 61 6e 63 68 20 31 3a 00 48 54 20 28 48 69 67 68 20 54 68 72 | s.for.the.Branch.1:.HT.(High.Thr |
42560 | 6f 75 67 68 70 75 74 29 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 28 38 30 32 2e 31 31 6e 29 00 | oughput).capabilities.(802.11n). |
42580 | 48 54 54 50 20 41 50 49 00 48 54 54 50 20 62 61 73 65 64 20 73 65 72 76 69 63 65 73 00 48 54 54 | HTTP.API.HTTP.based.services.HTT |
425a0 | 50 20 62 61 73 69 63 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 75 73 65 72 6e 61 6d 65 00 | P.basic.authentication.username. |
425c0 | 48 54 54 50 20 63 6c 69 65 6e 74 00 48 54 54 50 2d 41 50 49 00 48 61 69 72 70 69 6e 20 4e 41 54 | HTTP.client.HTTP-API.Hairpin.NAT |
425e0 | 2f 4e 41 54 20 52 65 66 6c 65 63 74 69 6f 6e 00 48 61 6e 64 20 6f 75 74 20 70 72 65 66 69 78 65 | /NAT.Reflection.Hand.out.prefixe |
42600 | 73 20 6f 66 20 73 69 7a 65 20 60 3c 6c 65 6e 67 74 68 3e 60 20 74 6f 20 63 6c 69 65 6e 74 73 20 | s.of.size.`<length>`.to.clients. |
42620 | 69 6e 20 73 75 62 6e 65 74 20 60 3c 70 72 65 66 69 78 3e 60 20 77 68 65 6e 20 74 68 65 79 20 72 | in.subnet.`<prefix>`.when.they.r |
42640 | 65 71 75 65 73 74 20 66 6f 72 20 70 72 65 66 69 78 20 64 65 6c 65 67 61 74 69 6f 6e 2e 00 48 61 | equest.for.prefix.delegation..Ha |
42660 | 6e 64 6c 69 6e 67 20 61 6e 64 20 6d 6f 6e 69 74 6f 72 69 6e 67 00 48 61 76 69 6e 67 20 63 6f 6e | ndling.and.monitoring.Having.con |
42680 | 74 72 6f 6c 20 6f 76 65 72 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 6f 66 20 49 4e 56 41 4c 49 | trol.over.the.matching.of.INVALI |
426a0 | 44 20 73 74 61 74 65 20 74 72 61 66 66 69 63 2c 20 65 2e 67 2e 20 74 68 65 20 61 62 69 6c 69 74 | D.state.traffic,.e.g..the.abilit |
426c0 | 79 20 74 6f 20 73 65 6c 65 63 74 69 76 65 6c 79 20 6c 6f 67 2c 20 69 73 20 61 6e 20 69 6d 70 6f | y.to.selectively.log,.is.an.impo |
426e0 | 72 74 61 6e 74 20 74 72 6f 75 62 6c 65 73 68 6f 6f 74 69 6e 67 20 74 6f 6f 6c 20 66 6f 72 20 6f | rtant.troubleshooting.tool.for.o |
42700 | 62 73 65 72 76 69 6e 67 20 62 72 6f 6b 65 6e 20 70 72 6f 74 6f 63 6f 6c 20 62 65 68 61 76 69 6f | bserving.broken.protocol.behavio |
42720 | 72 2e 20 46 6f 72 20 74 68 69 73 20 72 65 61 73 6f 6e 2c 20 56 79 4f 53 20 64 6f 65 73 20 6e 6f | r..For.this.reason,.VyOS.does.no |
42740 | 74 20 67 6c 6f 62 61 6c 6c 79 20 64 72 6f 70 20 69 6e 76 61 6c 69 64 20 73 74 61 74 65 20 74 72 | t.globally.drop.invalid.state.tr |
42760 | 61 66 66 69 63 2c 20 69 6e 73 74 65 61 64 20 61 6c 6c 6f 77 69 6e 67 20 74 68 65 20 6f 70 65 72 | affic,.instead.allowing.the.oper |
42780 | 61 74 6f 72 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 64 65 74 65 72 6d 69 6e 61 74 69 6f 6e 20 6f | ator.to.make.the.determination.o |
427a0 | 6e 20 68 6f 77 20 74 68 65 20 74 72 61 66 66 69 63 20 69 73 20 68 61 6e 64 6c 65 64 2e 00 48 65 | n.how.the.traffic.is.handled..He |
427c0 | 61 6c 74 68 20 63 68 65 63 6b 20 73 63 72 69 70 74 73 00 48 65 61 6c 74 68 20 63 68 65 63 6b 73 | alth.check.scripts.Health.checks |
427e0 | 00 48 65 61 6c 74 68 2d 63 68 65 63 6b 00 48 65 72 65 20 61 72 65 20 73 6f 6d 65 20 65 78 61 6d | .Health-check.Here.are.some.exam |
42800 | 70 6c 65 73 20 66 6f 72 20 61 70 70 6c 79 69 6e 67 20 61 20 72 75 6c 65 2d 73 65 74 20 74 6f 20 | ples.for.applying.a.rule-set.to. |
42820 | 61 6e 20 69 6e 74 65 72 66 61 63 65 00 48 65 72 65 20 69 73 20 61 20 73 65 63 6f 6e 64 20 65 78 | an.interface.Here.is.a.second.ex |
42840 | 61 6d 70 6c 65 20 6f 66 20 61 20 64 75 61 6c 2d 73 74 61 63 6b 20 74 75 6e 6e 65 6c 20 6f 76 65 | ample.of.a.dual-stack.tunnel.ove |
42860 | 72 20 49 50 76 36 20 62 65 74 77 65 65 6e 20 61 20 56 79 4f 53 20 72 6f 75 74 65 72 20 61 6e 64 | r.IPv6.between.a.VyOS.router.and |
42880 | 20 61 20 4c 69 6e 75 78 20 68 6f 73 74 20 75 73 69 6e 67 20 73 79 73 74 65 6d 64 2d 6e 65 74 77 | .a.Linux.host.using.systemd-netw |
428a0 | 6f 72 6b 64 2e 00 48 65 72 65 20 69 73 20 61 6e 20 65 78 61 6d 70 6c 65 20 3a 61 62 62 72 3a 60 | orkd..Here.is.an.example.:abbr:` |
428c0 | 4e 45 54 20 28 4e 65 74 77 6f 72 6b 20 45 6e 74 69 74 79 20 54 69 74 6c 65 29 60 20 76 61 6c 75 | NET.(Network.Entity.Title)`.valu |
428e0 | 65 3a 00 48 65 72 65 20 69 73 20 61 6e 20 65 78 61 6d 70 6c 65 20 72 6f 75 74 65 2d 6d 61 70 20 | e:.Here.is.an.example.route-map. |
42900 | 74 6f 20 61 70 70 6c 79 20 74 6f 20 72 6f 75 74 65 73 20 6c 65 61 72 6e 65 64 20 61 74 20 69 6d | to.apply.to.routes.learned.at.im |
42920 | 70 6f 72 74 2e 20 49 6e 20 74 68 69 73 20 66 69 6c 74 65 72 20 77 65 20 72 65 6a 65 63 74 20 70 | port..In.this.filter.we.reject.p |
42940 | 72 65 66 69 78 65 73 20 77 69 74 68 20 74 68 65 20 73 74 61 74 65 20 60 69 6e 76 61 6c 69 64 60 | refixes.with.the.state.`invalid` |
42960 | 2c 20 61 6e 64 20 73 65 74 20 61 20 68 69 67 68 65 72 20 60 6c 6f 63 61 6c 2d 70 72 65 66 65 72 | ,.and.set.a.higher.`local-prefer |
42980 | 65 6e 63 65 60 20 69 66 20 74 68 65 20 70 72 65 66 69 78 20 69 73 20 52 50 4b 49 20 60 76 61 6c | ence`.if.the.prefix.is.RPKI.`val |
429a0 | 69 64 60 20 72 61 74 68 65 72 20 74 68 61 6e 20 6d 65 72 65 6c 79 20 60 6e 6f 74 66 6f 75 6e 64 | id`.rather.than.merely.`notfound |
429c0 | 60 2e 00 48 65 72 65 20 69 73 20 61 6e 20 65 78 61 6d 70 6c 65 20 77 65 72 65 20 6d 75 6c 74 69 | `..Here.is.an.example.were.multi |
429e0 | 70 6c 65 20 67 72 6f 75 70 73 20 61 72 65 20 63 72 65 61 74 65 64 3a 00 48 65 72 65 20 69 73 20 | ple.groups.are.created:.Here.is. |
42a00 | 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 20 73 68 6f 77 69 6e 67 20 74 68 65 20 4d | the.routing.tables.showing.the.M |
42a20 | 50 4c 53 20 73 65 67 6d 65 6e 74 20 72 6f 75 74 69 6e 67 20 6c 61 62 65 6c 20 6f 70 65 72 61 74 | PLS.segment.routing.label.operat |
42a40 | 69 6f 6e 73 3a 00 48 65 72 65 20 77 65 20 70 72 6f 76 69 64 65 20 74 77 6f 20 65 78 61 6d 70 6c | ions:.Here.we.provide.two.exampl |
42a60 | 65 73 20 6f 6e 20 68 6f 77 20 74 6f 20 61 70 70 6c 79 20 4e 41 54 20 4c 6f 61 64 20 42 61 6c 61 | es.on.how.to.apply.NAT.Load.Bala |
42a80 | 6e 63 65 2e 00 48 65 72 65 27 73 20 61 6e 20 65 78 74 72 61 63 74 20 6f 66 20 61 20 73 69 6d 70 | nce..Here's.an.extract.of.a.simp |
42aa0 | 6c 65 20 31 2d 74 6f 2d 31 20 4e 41 54 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 74 68 | le.1-to-1.NAT.configuration.with |
42ac0 | 20 6f 6e 65 20 69 6e 74 65 72 6e 61 6c 20 61 6e 64 20 6f 6e 65 20 65 78 74 65 72 6e 61 6c 20 69 | .one.internal.and.one.external.i |
42ae0 | 6e 74 65 72 66 61 63 65 3a 00 48 65 72 65 27 73 20 6f 6e 65 20 65 78 61 6d 70 6c 65 20 6f 66 20 | nterface:.Here's.one.example.of. |
42b00 | 61 20 6e 65 74 77 6f 72 6b 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 66 6f 72 20 61 6e 20 41 53 50 | a.network.environment.for.an.ASP |
42b20 | 2e 20 54 68 65 20 41 53 50 20 72 65 71 75 65 73 74 73 20 74 68 61 74 20 61 6c 6c 20 63 6f 6e 6e | ..The.ASP.requests.that.all.conn |
42b40 | 65 63 74 69 6f 6e 73 20 66 72 6f 6d 20 74 68 69 73 20 63 6f 6d 70 61 6e 79 20 73 68 6f 75 6c 64 | ections.from.this.company.should |
42b60 | 20 63 6f 6d 65 20 66 72 6f 6d 20 31 37 32 2e 32 39 2e 34 31 2e 38 39 20 2d 20 61 6e 20 61 64 64 | .come.from.172.29.41.89.-.an.add |
42b80 | 72 65 73 73 20 74 68 61 74 20 69 73 20 61 73 73 69 67 6e 65 64 20 62 79 20 74 68 65 20 41 53 50 | ress.that.is.assigned.by.the.ASP |
42ba0 | 20 61 6e 64 20 6e 6f 74 20 69 6e 20 75 73 65 20 61 74 20 74 68 65 20 63 75 73 74 6f 6d 65 72 20 | .and.not.in.use.at.the.customer. |
42bc0 | 73 69 74 65 2e 00 48 65 72 65 27 73 20 74 68 65 20 49 50 20 72 6f 75 74 65 73 20 74 68 61 74 20 | site..Here's.the.IP.routes.that. |
42be0 | 61 72 65 20 70 6f 70 75 6c 61 74 65 64 2e 20 4a 75 73 74 20 74 68 65 20 6c 6f 6f 70 62 61 63 6b | are.populated..Just.the.loopback |
42c00 | 3a 00 48 65 72 65 27 73 20 74 68 65 20 6e 65 69 67 68 62 6f 72 73 20 75 70 3a 00 48 65 72 65 27 | :.Here's.the.neighbors.up:.Here' |
42c20 | 73 20 74 68 65 20 72 6f 75 74 65 73 3a 00 48 65 77 6c 65 74 74 2d 50 61 63 6b 61 72 64 20 63 61 | s.the.routes:.Hewlett-Packard.ca |
42c40 | 6c 6c 20 69 74 20 53 6f 75 72 63 65 2d 50 6f 72 74 20 66 69 6c 74 65 72 69 6e 67 20 6f 72 20 70 | ll.it.Source-Port.filtering.or.p |
42c60 | 6f 72 74 2d 69 73 6f 6c 61 74 69 6f 6e 00 48 69 67 68 00 48 69 67 68 20 41 76 61 69 6c 61 62 69 | ort-isolation.High.High.Availabi |
42c80 | 6c 69 74 79 00 48 69 67 68 20 61 76 61 69 6c 61 62 69 6c 69 74 79 00 48 6f 6d 65 20 55 73 65 72 | lity.High.availability.Home.User |
42ca0 | 73 00 48 6f 70 20 63 6f 75 6e 74 20 66 69 65 6c 64 20 6f 66 20 74 68 65 20 6f 75 74 67 6f 69 6e | s.Hop.count.field.of.the.outgoin |
42cc0 | 67 20 52 41 20 70 61 63 6b 65 74 73 00 48 6f 73 74 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 48 6f | g.RA.packets.Host.Information.Ho |
42ce0 | 73 74 20 6e 61 6d 65 00 48 6f 73 74 20 73 70 65 63 69 66 69 63 20 6d 61 70 70 69 6e 67 20 73 68 | st.name.Host.specific.mapping.sh |
42d00 | 61 6c 6c 20 62 65 20 6e 61 6d 65 64 20 60 60 63 6c 69 65 6e 74 31 60 60 00 48 6f 73 74 6e 61 6d | all.be.named.``client1``.Hostnam |
42d20 | 65 00 48 6f 77 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 61 73 73 69 67 6e 65 64 20 | e.How.an.IP.address.is.assigned. |
42d40 | 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 3a 72 65 66 3a 60 65 74 68 65 72 6e 65 | to.an.interface.in.:ref:`etherne |
42d60 | 74 2d 69 6e 74 65 72 66 61 63 65 60 2e 20 54 68 69 73 20 73 65 63 74 69 6f 6e 20 73 68 6f 77 73 | t-interface`..This.section.shows |
42d80 | 20 68 6f 77 20 74 6f 20 73 74 61 74 69 63 61 6c 6c 79 20 6d 61 70 20 61 6e 20 49 50 20 61 64 64 | .how.to.statically.map.an.IP.add |
42da0 | 72 65 73 73 20 74 6f 20 61 20 68 6f 73 74 6e 61 6d 65 20 66 6f 72 20 6c 6f 63 61 6c 20 28 6d 65 | ress.to.a.hostname.for.local.(me |
42dc0 | 61 6e 69 6e 67 20 6f 6e 20 74 68 69 73 20 56 79 4f 53 20 69 6e 73 74 61 6e 63 65 29 20 6e 61 6d | aning.on.this.VyOS.instance).nam |
42de0 | 65 20 72 65 73 6f 6c 75 74 69 6f 6e 2e 20 54 68 69 73 20 69 73 20 74 68 65 20 56 79 4f 53 20 65 | e.resolution..This.is.the.VyOS.e |
42e00 | 71 75 69 76 61 6c 65 6e 74 20 74 6f 20 60 2f 65 74 63 2f 68 6f 73 74 73 60 20 66 69 6c 65 20 65 | quivalent.to.`/etc/hosts`.file.e |
42e20 | 6e 74 72 69 65 73 2e 00 48 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 45 76 65 6e 74 20 48 | ntries..How.to.configure.Event.H |
42e40 | 61 6e 64 6c 65 72 00 48 6f 77 20 74 6f 20 6d 61 6b 65 20 69 74 20 77 6f 72 6b 00 48 6f 77 65 76 | andler.How.to.make.it.work.Howev |
42e60 | 65 72 2c 20 6e 6f 77 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 6d 61 6b 65 20 49 50 73 65 63 20 77 | er,.now.you.need.to.make.IPsec.w |
42e80 | 6f 72 6b 20 77 69 74 68 20 64 79 6e 61 6d 69 63 20 61 64 64 72 65 73 73 20 6f 6e 20 6f 6e 65 20 | ork.with.dynamic.address.on.one. |
42ea0 | 73 69 64 65 2e 20 54 68 65 20 74 72 69 63 6b 79 20 70 61 72 74 20 69 73 20 74 68 61 74 20 70 72 | side..The.tricky.part.is.that.pr |
42ec0 | 65 2d 73 68 61 72 65 64 20 73 65 63 72 65 74 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 | e-shared.secret.authentication.d |
42ee0 | 6f 65 73 6e 27 74 20 77 6f 72 6b 20 77 69 74 68 20 64 79 6e 61 6d 69 63 20 61 64 64 72 65 73 73 | oesn't.work.with.dynamic.address |
42f00 | 2c 20 73 6f 20 77 65 27 6c 6c 20 68 61 76 65 20 74 6f 20 75 73 65 20 52 53 41 20 6b 65 79 73 2e | ,.so.we'll.have.to.use.RSA.keys. |
42f20 | 00 48 6f 77 65 76 65 72 2c 20 73 69 6e 63 65 20 56 79 4f 53 20 31 2e 34 2c 20 69 74 20 69 73 20 | .However,.since.VyOS.1.4,.it.is. |
42f40 | 70 6f 73 73 69 62 6c 65 20 74 6f 20 76 65 72 69 66 79 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 63 | possible.to.verify.self-signed.c |
42f60 | 65 72 74 69 66 69 63 61 74 65 73 20 75 73 69 6e 67 20 63 65 72 74 69 66 69 63 61 74 65 20 66 69 | ertificates.using.certificate.fi |
42f80 | 6e 67 65 72 70 72 69 6e 74 73 2e 00 48 6f 77 65 76 65 72 2c 20 73 70 6c 69 74 2d 74 75 6e 6e 65 | ngerprints..However,.split-tunne |
42fa0 | 6c 69 6e 67 20 63 61 6e 20 62 65 20 61 63 68 69 65 76 65 64 20 62 79 20 73 70 65 63 69 66 79 69 | ling.can.be.achieved.by.specifyi |
42fc0 | 6e 67 20 74 68 65 20 72 65 6d 6f 74 65 20 73 75 62 6e 65 74 73 2e 20 54 68 69 73 20 65 6e 73 75 | ng.the.remote.subnets..This.ensu |
42fe0 | 72 65 73 20 74 68 61 74 20 6f 6e 6c 79 20 74 72 61 66 66 69 63 20 64 65 73 74 69 6e 65 64 20 66 | res.that.only.traffic.destined.f |
43000 | 6f 72 20 74 68 65 20 72 65 6d 6f 74 65 20 73 69 74 65 20 69 73 20 73 65 6e 74 20 6f 76 65 72 20 | or.the.remote.site.is.sent.over. |
43020 | 74 68 65 20 74 75 6e 6e 65 6c 2e 20 41 6c 6c 20 6f 74 68 65 72 20 74 72 61 66 66 69 63 20 69 73 | the.tunnel..All.other.traffic.is |
43040 | 20 75 6e 61 66 66 65 63 74 65 64 2e 00 48 75 61 77 65 69 20 4d 45 39 30 39 73 2d 31 32 30 20 6d | .unaffected..Huawei.ME909s-120.m |
43060 | 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c 54 45 29 00 48 75 61 77 65 69 20 4d 45 39 30 39 75 | iniPCIe.card.(LTE).Huawei.ME909u |
43080 | 2d 35 32 31 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c 54 45 29 00 48 75 62 00 49 45 45 | -521.miniPCIe.card.(LTE).Hub.IEE |
430a0 | 45 20 38 30 32 2e 31 58 2f 4d 41 43 73 65 63 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 20 6d | E.802.1X/MACsec.pre-shared.key.m |
430c0 | 6f 64 65 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 4d 41 43 | ode..This.allows.configuring.MAC |
430e0 | 73 65 63 20 77 69 74 68 20 61 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 20 75 73 69 6e 67 20 | sec.with.a.pre-shared.key.using. |
43100 | 61 20 3a 61 62 62 72 3a 60 43 41 4b 20 28 4d 41 43 73 65 63 20 63 6f 6e 6e 65 63 74 69 76 69 74 | a.:abbr:`CAK.(MACsec.connectivit |
43120 | 79 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 6b 65 79 29 60 20 61 6e 64 20 3a 61 62 62 72 3a 60 43 | y.association.key)`.and.:abbr:`C |
43140 | 4b 4e 20 28 4d 41 43 73 65 63 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 61 73 73 6f 63 69 61 74 | KN.(MACsec.connectivity.associat |
43160 | 69 6f 6e 20 6e 61 6d 65 29 60 20 70 61 69 72 2e 00 49 45 45 45 20 38 30 32 2e 31 58 2f 4d 41 43 | ion.name)`.pair..IEEE.802.1X/MAC |
43180 | 73 65 63 20 72 65 70 6c 61 79 20 70 72 6f 74 65 63 74 69 6f 6e 20 77 69 6e 64 6f 77 2e 20 54 68 | sec.replay.protection.window..Th |
431a0 | 69 73 20 64 65 74 65 72 6d 69 6e 65 73 20 61 20 77 69 6e 64 6f 77 20 69 6e 20 77 68 69 63 68 20 | is.determines.a.window.in.which. |
431c0 | 72 65 70 6c 61 79 20 69 73 20 74 6f 6c 65 72 61 74 65 64 2c 20 74 6f 20 61 6c 6c 6f 77 20 72 65 | replay.is.tolerated,.to.allow.re |
431e0 | 63 65 69 70 74 20 6f 66 20 66 72 61 6d 65 73 20 74 68 61 74 20 68 61 76 65 20 62 65 65 6e 20 6d | ceipt.of.frames.that.have.been.m |
43200 | 69 73 6f 72 64 65 72 65 64 20 62 79 20 74 68 65 20 6e 65 74 77 6f 72 6b 2e 00 49 45 45 45 20 38 | isordered.by.the.network..IEEE.8 |
43220 | 30 32 2e 31 61 64 5f 20 77 61 73 20 61 6e 20 45 74 68 65 72 6e 65 74 20 6e 65 74 77 6f 72 6b 69 | 02.1ad_.was.an.Ethernet.networki |
43240 | 6e 67 20 73 74 61 6e 64 61 72 64 20 69 6e 66 6f 72 6d 61 6c 6c 79 20 6b 6e 6f 77 6e 20 61 73 20 | ng.standard.informally.known.as. |
43260 | 51 69 6e 51 20 61 73 20 61 6e 20 61 6d 65 6e 64 6d 65 6e 74 20 74 6f 20 49 45 45 45 20 73 74 61 | QinQ.as.an.amendment.to.IEEE.sta |
43280 | 6e 64 61 72 64 20 38 30 32 2e 31 71 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 61 73 20 | ndard.802.1q.VLAN.interfaces.as. |
432a0 | 64 65 73 63 72 69 62 65 64 20 61 62 6f 76 65 2e 20 38 30 32 2e 31 61 64 20 77 61 73 20 69 6e 63 | described.above..802.1ad.was.inc |
432c0 | 6f 72 70 6f 72 61 74 65 64 20 69 6e 74 6f 20 74 68 65 20 62 61 73 65 20 38 30 32 2e 31 71 5f 20 | orporated.into.the.base.802.1q_. |
432e0 | 73 74 61 6e 64 61 72 64 20 69 6e 20 32 30 31 31 2e 20 54 68 65 20 74 65 63 68 6e 69 71 75 65 20 | standard.in.2011..The.technique. |
43300 | 69 73 20 61 6c 73 6f 20 6b 6e 6f 77 6e 20 61 73 20 70 72 6f 76 69 64 65 72 20 62 72 69 64 67 69 | is.also.known.as.provider.bridgi |
43320 | 6e 67 2c 20 53 74 61 63 6b 65 64 20 56 4c 41 4e 73 2c 20 6f 72 20 73 69 6d 70 6c 79 20 51 69 6e | ng,.Stacked.VLANs,.or.simply.Qin |
43340 | 51 20 6f 72 20 51 2d 69 6e 2d 51 2e 20 22 51 2d 69 6e 2d 51 22 20 63 61 6e 20 66 6f 72 20 73 75 | Q.or.Q-in-Q.."Q-in-Q".can.for.su |
43360 | 70 70 6f 72 74 65 64 20 64 65 76 69 63 65 73 20 61 70 70 6c 79 20 74 6f 20 43 2d 74 61 67 20 73 | pported.devices.apply.to.C-tag.s |
43380 | 74 61 63 6b 69 6e 67 20 6f 6e 20 43 2d 74 61 67 20 28 45 74 68 65 72 6e 65 74 20 54 79 70 65 20 | tacking.on.C-tag.(Ethernet.Type. |
433a0 | 3d 20 30 78 38 31 30 30 29 2e 00 49 45 45 45 20 38 30 32 2e 31 71 5f 2c 20 6f 66 74 65 6e 20 72 | =.0x8100)..IEEE.802.1q_,.often.r |
433c0 | 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 44 6f 74 31 71 2c 20 69 73 20 74 68 65 20 6e 65 74 77 | eferred.to.as.Dot1q,.is.the.netw |
433e0 | 6f 72 6b 69 6e 67 20 73 74 61 6e 64 61 72 64 20 74 68 61 74 20 73 75 70 70 6f 72 74 73 20 76 69 | orking.standard.that.supports.vi |
43400 | 72 74 75 61 6c 20 4c 41 4e 73 20 28 56 4c 41 4e 73 29 20 6f 6e 20 61 6e 20 49 45 45 45 20 38 30 | rtual.LANs.(VLANs).on.an.IEEE.80 |
43420 | 32 2e 33 20 45 74 68 65 72 6e 65 74 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 20 73 74 61 6e 64 61 | 2.3.Ethernet.network..The.standa |
43440 | 72 64 20 64 65 66 69 6e 65 73 20 61 20 73 79 73 74 65 6d 20 6f 66 20 56 4c 41 4e 20 74 61 67 67 | rd.defines.a.system.of.VLAN.tagg |
43460 | 69 6e 67 20 66 6f 72 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 73 20 61 6e 64 20 74 68 65 20 | ing.for.Ethernet.frames.and.the. |
43480 | 61 63 63 6f 6d 70 61 6e 79 69 6e 67 20 70 72 6f 63 65 64 75 72 65 73 20 74 6f 20 62 65 20 75 73 | accompanying.procedures.to.be.us |
434a0 | 65 64 20 62 79 20 62 72 69 64 67 65 73 20 61 6e 64 20 73 77 69 74 63 68 65 73 20 69 6e 20 68 61 | ed.by.bridges.and.switches.in.ha |
434c0 | 6e 64 6c 69 6e 67 20 73 75 63 68 20 66 72 61 6d 65 73 2e 20 54 68 65 20 73 74 61 6e 64 61 72 64 | ndling.such.frames..The.standard |
434e0 | 20 61 6c 73 6f 20 63 6f 6e 74 61 69 6e 73 20 70 72 6f 76 69 73 69 6f 6e 73 20 66 6f 72 20 61 20 | .also.contains.provisions.for.a. |
43500 | 71 75 61 6c 69 74 79 2d 6f 66 2d 73 65 72 76 69 63 65 20 70 72 69 6f 72 69 74 69 7a 61 74 69 6f | quality-of-service.prioritizatio |
43520 | 6e 20 73 63 68 65 6d 65 20 63 6f 6d 6d 6f 6e 6c 79 20 6b 6e 6f 77 6e 20 61 73 20 49 45 45 45 20 | n.scheme.commonly.known.as.IEEE. |
43540 | 38 30 32 2e 31 70 20 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 47 65 6e 65 72 69 63 20 41 | 802.1p.and.defines.the.Generic.A |
43560 | 74 74 72 69 62 75 74 65 20 52 65 67 69 73 74 72 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 2e 00 | ttribute.Registration.Protocol.. |
43580 | 49 45 54 46 20 70 75 62 6c 69 73 68 65 64 20 3a 72 66 63 3a 60 36 35 39 38 60 2c 20 64 65 74 61 | IETF.published.:rfc:`6598`,.deta |
435a0 | 69 6c 69 6e 67 20 61 20 73 68 61 72 65 64 20 61 64 64 72 65 73 73 20 73 70 61 63 65 20 66 6f 72 | iling.a.shared.address.space.for |
435c0 | 20 75 73 65 20 69 6e 20 49 53 50 20 43 47 4e 20 64 65 70 6c 6f 79 6d 65 6e 74 73 20 74 68 61 74 | .use.in.ISP.CGN.deployments.that |
435e0 | 20 63 61 6e 20 68 61 6e 64 6c 65 20 74 68 65 20 73 61 6d 65 20 6e 65 74 77 6f 72 6b 20 70 72 65 | .can.handle.the.same.network.pre |
43600 | 66 69 78 65 73 20 6f 63 63 75 72 72 69 6e 67 20 62 6f 74 68 20 6f 6e 20 69 6e 62 6f 75 6e 64 20 | fixes.occurring.both.on.inbound. |
43620 | 61 6e 64 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 73 2e 20 41 52 49 4e 20 72 65 | and.outbound.interfaces..ARIN.re |
43640 | 74 75 72 6e 65 64 20 61 64 64 72 65 73 73 20 73 70 61 63 65 20 74 6f 20 74 68 65 20 3a 61 62 62 | turned.address.space.to.the.:abb |
43660 | 72 3a 60 49 41 4e 41 20 28 49 6e 74 65 72 6e 65 74 20 41 73 73 69 67 6e 65 64 20 4e 75 6d 62 65 | r:`IANA.(Internet.Assigned.Numbe |
43680 | 72 73 20 41 75 74 68 6f 72 69 74 79 29 60 20 66 6f 72 20 74 68 69 73 20 61 6c 6c 6f 63 61 74 69 | rs.Authority)`.for.this.allocati |
436a0 | 6f 6e 2e 00 49 47 4d 50 20 2d 20 49 6e 74 65 72 6e 65 74 20 47 72 6f 75 70 20 4d 61 6e 61 67 65 | on..IGMP.-.Internet.Group.Manage |
436c0 | 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 00 49 47 4d 50 20 50 72 6f 78 79 00 49 4b 45 20 28 49 | ment.Protocol).IGMP.Proxy.IKE.(I |
436e0 | 6e 74 65 72 6e 65 74 20 4b 65 79 20 45 78 63 68 61 6e 67 65 29 20 41 74 74 72 69 62 75 74 65 73 | nternet.Key.Exchange).Attributes |
43700 | 00 49 4b 45 20 50 68 61 73 65 3a 00 49 4b 45 20 70 65 72 66 6f 72 6d 73 20 6d 75 74 75 61 6c 20 | .IKE.Phase:.IKE.performs.mutual. |
43720 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 74 77 6f 20 70 61 72 74 69 | authentication.between.two.parti |
43740 | 65 73 20 61 6e 64 20 65 73 74 61 62 6c 69 73 68 65 73 20 61 6e 20 49 4b 45 20 73 65 63 75 72 69 | es.and.establishes.an.IKE.securi |
43760 | 74 79 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 28 53 41 29 20 74 68 61 74 20 69 6e 63 6c 75 64 65 | ty.association.(SA).that.include |
43780 | 73 20 73 68 61 72 65 64 20 73 65 63 72 65 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 | s.shared.secret.information.that |
437a0 | 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 65 66 66 69 63 69 65 6e 74 6c 79 20 65 73 74 61 | .can.be.used.to.efficiently.esta |
437c0 | 62 6c 69 73 68 20 53 41 73 20 66 6f 72 20 45 6e 63 61 70 73 75 6c 61 74 69 6e 67 20 53 65 63 75 | blish.SAs.for.Encapsulating.Secu |
437e0 | 72 69 74 79 20 50 61 79 6c 6f 61 64 20 28 45 53 50 29 20 6f 72 20 41 75 74 68 65 6e 74 69 63 61 | rity.Payload.(ESP).or.Authentica |
43800 | 74 69 6f 6e 20 48 65 61 64 65 72 20 28 41 48 29 20 61 6e 64 20 61 20 73 65 74 20 6f 66 20 63 72 | tion.Header.(AH).and.a.set.of.cr |
43820 | 79 70 74 6f 67 72 61 70 68 69 63 20 61 6c 67 6f 72 69 74 68 6d 73 20 74 6f 20 62 65 20 75 73 65 | yptographic.algorithms.to.be.use |
43840 | 64 20 62 79 20 74 68 65 20 53 41 73 20 74 6f 20 70 72 6f 74 65 63 74 20 74 68 65 20 74 72 61 66 | d.by.the.SAs.to.protect.the.traf |
43860 | 66 69 63 20 74 68 61 74 20 74 68 65 79 20 63 61 72 72 79 2e 20 68 74 74 70 73 3a 2f 2f 64 61 74 | fic.that.they.carry..https://dat |
43880 | 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 68 74 6d 6c 2f 72 66 63 35 39 | atracker.ietf.org/doc/html/rfc59 |
438a0 | 39 36 00 49 4b 45 76 31 00 49 4b 45 76 32 00 49 4b 45 76 32 20 49 50 53 65 63 20 72 6f 61 64 2d | 96.IKEv1.IKEv2.IKEv2.IPSec.road- |
438c0 | 77 61 72 72 69 6f 72 73 20 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 20 56 50 4e 00 49 50 00 49 50 | warriors.remote-access.VPN.IP.IP |
438e0 | 20 61 64 64 72 65 73 73 00 49 50 20 61 64 64 72 65 73 73 20 60 60 31 39 32 2e 31 36 38 2e 31 2e | .address.IP.address.``192.168.1. |
43900 | 31 30 30 60 60 20 73 68 61 6c 6c 20 62 65 20 73 74 61 74 69 63 61 6c 6c 79 20 6d 61 70 70 65 64 | 100``.shall.be.statically.mapped |
43920 | 20 74 6f 20 63 6c 69 65 6e 74 20 6e 61 6d 65 64 20 60 60 63 6c 69 65 6e 74 31 60 60 00 49 50 20 | .to.client.named.``client1``.IP. |
43940 | 61 64 64 72 65 73 73 20 60 60 31 39 32 2e 31 36 38 2e 32 2e 31 2f 32 34 60 60 00 49 50 20 61 64 | address.``192.168.2.1/24``.IP.ad |
43960 | 64 72 65 73 73 20 66 6f 72 20 44 48 43 50 20 73 65 72 76 65 72 20 69 64 65 6e 74 69 66 69 65 72 | dress.for.DHCP.server.identifier |
43980 | 00 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 4e 54 50 20 73 65 72 76 65 72 00 49 50 20 61 64 64 | .IP.address.of.NTP.server.IP.add |
439a0 | 72 65 73 73 20 6f 66 20 50 4f 50 33 20 73 65 72 76 65 72 00 49 50 20 61 64 64 72 65 73 73 20 6f | ress.of.POP3.server.IP.address.o |
439c0 | 66 20 53 4d 54 50 20 73 65 72 76 65 72 00 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 | f.SMTP.server.IP.address.of.rout |
439e0 | 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 61 63 63 65 73 73 2d 6c 69 73 74 | e.to.match,.based.on.access-list |
43a00 | 2e 00 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 | ..IP.address.of.route.to.match,. |
43a20 | 62 61 73 65 64 20 6f 6e 20 70 72 65 66 69 78 2d 6c 69 73 74 2e 00 49 50 20 61 64 64 72 65 73 73 | based.on.prefix-list..IP.address |
43a40 | 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 73 70 65 | .of.route.to.match,.based.on.spe |
43a60 | 63 69 66 69 65 64 20 70 72 65 66 69 78 2d 6c 65 6e 67 74 68 2e 20 4e 6f 74 65 20 74 68 61 74 20 | cified.prefix-length..Note.that. |
43a80 | 74 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 66 6f 72 20 6b 65 72 6e 65 6c 20 72 6f 75 74 | this.can.be.used.for.kernel.rout |
43aa0 | 65 73 20 6f 6e 6c 79 2e 20 44 6f 20 6e 6f 74 20 61 70 70 6c 79 20 74 6f 20 74 68 65 20 72 6f 75 | es.only..Do.not.apply.to.the.rou |
43ac0 | 74 65 73 20 6f 66 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 | tes.of.dynamic.routing.protocols |
43ae0 | 20 28 65 2e 67 2e 20 42 47 50 2c 20 52 49 50 2c 20 4f 53 46 50 29 2c 20 61 73 20 74 68 69 73 20 | .(e.g..BGP,.RIP,.OSFP),.as.this. |
43b00 | 63 61 6e 20 6c 65 61 64 20 74 6f 20 75 6e 65 78 70 65 63 74 65 64 20 72 65 73 75 6c 74 73 2e 2e | can.lead.to.unexpected.results.. |
43b20 | 00 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 65 78 63 6c 75 64 65 20 66 72 6f 6d 20 44 48 43 50 | .IP.address.to.exclude.from.DHCP |
43b40 | 20 6c 65 61 73 65 20 72 61 6e 67 65 00 49 50 20 61 64 64 72 65 73 73 65 73 20 6f 72 20 6e 65 74 | .lease.range.IP.addresses.or.net |
43b60 | 77 6f 72 6b 73 20 66 6f 72 20 77 68 69 63 68 20 6c 6f 63 61 6c 20 63 6f 6e 6e 74 72 61 63 6b 20 | works.for.which.local.conntrack. |
43b80 | 65 6e 74 72 69 65 73 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 73 79 6e 63 65 64 00 49 50 20 6d 61 | entries.will.not.be.synced.IP.ma |
43ba0 | 6e 61 67 65 6d 65 6e 74 20 61 64 64 72 65 73 73 00 49 50 20 6d 61 73 71 75 65 72 61 64 69 6e 67 | nagement.address.IP.masquerading |
43bc0 | 20 69 73 20 61 20 74 65 63 68 6e 69 71 75 65 20 74 68 61 74 20 68 69 64 65 73 20 61 6e 20 65 6e | .is.a.technique.that.hides.an.en |
43be0 | 74 69 72 65 20 49 50 20 61 64 64 72 65 73 73 20 73 70 61 63 65 2c 20 75 73 75 61 6c 6c 79 20 63 | tire.IP.address.space,.usually.c |
43c00 | 6f 6e 73 69 73 74 69 6e 67 20 6f 66 20 70 72 69 76 61 74 65 20 49 50 20 61 64 64 72 65 73 73 65 | onsisting.of.private.IP.addresse |
43c20 | 73 2c 20 62 65 68 69 6e 64 20 61 20 73 69 6e 67 6c 65 20 49 50 20 61 64 64 72 65 73 73 20 69 6e | s,.behind.a.single.IP.address.in |
43c40 | 20 61 6e 6f 74 68 65 72 2c 20 75 73 75 61 6c 6c 79 20 70 75 62 6c 69 63 20 61 64 64 72 65 73 73 | .another,.usually.public.address |
43c60 | 20 73 70 61 63 65 2e 20 54 68 65 20 68 69 64 64 65 6e 20 61 64 64 72 65 73 73 65 73 20 61 72 65 | .space..The.hidden.addresses.are |
43c80 | 20 63 68 61 6e 67 65 64 20 69 6e 74 6f 20 61 20 73 69 6e 67 6c 65 20 28 70 75 62 6c 69 63 29 20 | .changed.into.a.single.(public). |
43ca0 | 49 50 20 61 64 64 72 65 73 73 20 61 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 | IP.address.as.the.source.address |
43cc0 | 20 6f 66 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 49 50 20 70 61 63 6b 65 74 73 20 73 6f 20 74 | .of.the.outgoing.IP.packets.so.t |
43ce0 | 68 65 79 20 61 70 70 65 61 72 20 61 73 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 6e 6f 74 20 66 72 | hey.appear.as.originating.not.fr |
43d00 | 6f 6d 20 74 68 65 20 68 69 64 64 65 6e 20 68 6f 73 74 20 62 75 74 20 66 72 6f 6d 20 74 68 65 20 | om.the.hidden.host.but.from.the. |
43d20 | 72 6f 75 74 69 6e 67 20 64 65 76 69 63 65 20 69 74 73 65 6c 66 2e 20 42 65 63 61 75 73 65 20 6f | routing.device.itself..Because.o |
43d40 | 66 20 74 68 65 20 70 6f 70 75 6c 61 72 69 74 79 20 6f 66 20 74 68 69 73 20 74 65 63 68 6e 69 71 | f.the.popularity.of.this.techniq |
43d60 | 75 65 20 74 6f 20 63 6f 6e 73 65 72 76 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 73 70 61 63 | ue.to.conserve.IPv4.address.spac |
43d80 | 65 2c 20 74 68 65 20 74 65 72 6d 20 4e 41 54 20 68 61 73 20 62 65 63 6f 6d 65 20 76 69 72 74 75 | e,.the.term.NAT.has.become.virtu |
43da0 | 61 6c 6c 79 20 73 79 6e 6f 6e 79 6d 6f 75 73 20 77 69 74 68 20 49 50 20 6d 61 73 71 75 65 72 61 | ally.synonymous.with.IP.masquera |
43dc0 | 64 69 6e 67 2e 00 49 50 20 6e 65 78 74 2d 68 6f 70 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 | ding..IP.next-hop.of.route.to.ma |
43de0 | 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 61 63 63 65 73 73 2d 6c 69 73 74 2e 00 49 50 20 6e 65 | tch,.based.on.access-list..IP.ne |
43e00 | 78 74 2d 68 6f 70 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 | xt-hop.of.route.to.match,.based. |
43e20 | 6f 6e 20 69 70 20 61 64 64 72 65 73 73 2e 00 49 50 20 6e 65 78 74 2d 68 6f 70 20 6f 66 20 72 6f | on.ip.address..IP.next-hop.of.ro |
43e40 | 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 70 72 65 66 69 78 20 6c 65 | ute.to.match,.based.on.prefix.le |
43e60 | 6e 67 74 68 2e 00 49 50 20 6e 65 78 74 2d 68 6f 70 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 | ngth..IP.next-hop.of.route.to.ma |
43e80 | 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 70 72 65 66 69 78 2d 6c 69 73 74 2e 00 49 50 20 6e 65 | tch,.based.on.prefix-list..IP.ne |
43ea0 | 78 74 2d 68 6f 70 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 | xt-hop.of.route.to.match,.based. |
43ec0 | 6f 6e 20 74 79 70 65 2e 00 49 50 20 70 72 65 63 65 64 65 6e 63 65 20 61 73 20 64 65 66 69 6e 65 | on.type..IP.precedence.as.define |
43ee0 | 64 20 69 6e 20 3a 72 66 63 3a 60 37 39 31 60 3a 00 49 50 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 6d | d.in.:rfc:`791`:.IP.protocol.num |
43f00 | 62 65 72 20 35 30 20 28 45 53 50 29 00 49 50 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 6f 66 20 | ber.50.(ESP).IP.route.source.of. |
43f20 | 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 61 63 63 65 73 73 2d | route.to.match,.based.on.access- |
43f40 | 6c 69 73 74 2e 00 49 50 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 6f 66 20 72 6f 75 74 65 20 74 | list..IP.route.source.of.route.t |
43f60 | 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 70 72 65 66 69 78 2d 6c 69 73 74 2e 00 49 | o.match,.based.on.prefix-list..I |
43f80 | 50 36 49 50 36 00 49 50 49 50 00 49 50 49 50 36 00 49 50 53 65 63 20 49 4b 45 20 61 6e 64 20 45 | P6IP6.IPIP.IPIP6.IPSec.IKE.and.E |
43fa0 | 53 50 00 49 50 53 65 63 20 49 4b 45 20 61 6e 64 20 45 53 50 20 47 72 6f 75 70 73 3b 00 49 50 53 | SP.IPSec.IKE.and.ESP.Groups;.IPS |
43fc0 | 65 63 20 49 4b 45 76 32 20 52 65 6d 6f 74 65 20 41 63 63 65 73 73 20 56 50 4e 00 49 50 53 65 63 | ec.IKEv2.Remote.Access.VPN.IPSec |
43fe0 | 20 49 4b 45 76 32 20 73 69 74 65 32 73 69 74 65 20 56 50 4e 00 49 50 53 65 63 20 49 4b 45 76 32 | .IKEv2.site2site.VPN.IPSec.IKEv2 |
44000 | 20 73 69 74 65 32 73 69 74 65 20 56 50 4e 20 28 73 6f 75 72 63 65 20 2e 2f 64 72 61 77 2e 69 6f | .site2site.VPN.(source../draw.io |
44020 | 2f 76 70 6e 5f 73 32 73 5f 69 6b 65 76 32 2e 64 72 61 77 69 6f 29 00 49 50 53 65 63 20 56 50 4e | /vpn_s2s_ikev2.drawio).IPSec.VPN |
44040 | 20 54 75 6e 6e 65 6c 73 00 49 50 53 65 63 20 56 50 4e 20 74 75 6e 6e 65 6c 73 2e 00 49 50 53 65 | .Tunnels.IPSec.VPN.tunnels..IPSe |
44060 | 63 3a 00 49 50 6f 45 20 53 65 72 76 65 72 00 49 50 6f 45 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 | c:.IPoE.Server.IPoE.can.be.confi |
44080 | 67 75 72 65 20 6f 6e 20 64 69 66 66 65 72 65 6e 74 20 69 6e 74 65 72 66 61 63 65 73 2c 20 69 74 | gure.on.different.interfaces,.it |
440a0 | 20 77 69 6c 6c 20 64 65 70 65 6e 64 20 6f 6e 20 65 61 63 68 20 73 70 65 63 69 66 69 63 20 73 69 | .will.depend.on.each.specific.si |
440c0 | 74 75 61 74 69 6f 6e 20 77 68 69 63 68 20 69 6e 74 65 72 66 61 63 65 20 77 69 6c 6c 20 70 72 6f | tuation.which.interface.will.pro |
440e0 | 76 69 64 65 20 49 50 6f 45 20 74 6f 20 63 6c 69 65 6e 74 73 2e 20 54 68 65 20 63 6c 69 65 6e 74 | vide.IPoE.to.clients..The.client |
44100 | 73 20 6d 61 63 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 69 6e 63 6f 6d 69 6e 67 20 69 | s.mac.address.and.the.incoming.i |
44120 | 6e 74 65 72 66 61 63 65 20 69 73 20 62 65 69 6e 67 20 75 73 65 64 20 61 73 20 63 6f 6e 74 72 6f | nterface.is.being.used.as.contro |
44140 | 6c 20 70 61 72 61 6d 65 74 65 72 2c 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 61 20 63 | l.parameter,.to.authenticate.a.c |
44160 | 6c 69 65 6e 74 2e 00 49 50 6f 45 20 69 73 20 61 20 6d 65 74 68 6f 64 20 6f 66 20 64 65 6c 69 76 | lient..IPoE.is.a.method.of.deliv |
44180 | 65 72 69 6e 67 20 61 6e 20 49 50 20 70 61 79 6c 6f 61 64 20 6f 76 65 72 20 61 6e 20 45 74 68 65 | ering.an.IP.payload.over.an.Ethe |
441a0 | 72 6e 65 74 2d 62 61 73 65 64 20 61 63 63 65 73 73 20 6e 65 74 77 6f 72 6b 20 6f 72 20 61 6e 20 | rnet-based.access.network.or.an. |
441c0 | 61 63 63 65 73 73 20 6e 65 74 77 6f 72 6b 20 75 73 69 6e 67 20 62 72 69 64 67 65 64 20 45 74 68 | access.network.using.bridged.Eth |
441e0 | 65 72 6e 65 74 20 6f 76 65 72 20 41 73 79 6e 63 68 72 6f 6e 6f 75 73 20 54 72 61 6e 73 66 65 72 | ernet.over.Asynchronous.Transfer |
44200 | 20 4d 6f 64 65 20 28 41 54 4d 29 20 77 69 74 68 6f 75 74 20 75 73 69 6e 67 20 50 50 50 6f 45 2e | .Mode.(ATM).without.using.PPPoE. |
44220 | 20 49 74 20 64 69 72 65 63 74 6c 79 20 65 6e 63 61 70 73 75 6c 61 74 65 73 20 74 68 65 20 49 50 | .It.directly.encapsulates.the.IP |
44240 | 20 64 61 74 61 67 72 61 6d 73 20 69 6e 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 73 2c 20 75 | .datagrams.in.Ethernet.frames,.u |
44260 | 73 69 6e 67 20 74 68 65 20 73 74 61 6e 64 61 72 64 20 3a 72 66 63 3a 60 38 39 34 60 20 65 6e 63 | sing.the.standard.:rfc:`894`.enc |
44280 | 61 70 73 75 6c 61 74 69 6f 6e 2e 00 49 50 6f 45 20 73 65 72 76 65 72 20 77 69 6c 6c 20 6c 69 73 | apsulation..IPoE.server.will.lis |
442a0 | 74 65 6e 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 73 20 65 74 68 31 2e 35 30 20 61 6e 64 20 65 74 | ten.on.interfaces.eth1.50.and.et |
442c0 | 68 31 2e 35 31 00 49 50 73 65 63 00 49 50 73 65 63 20 70 6f 6c 69 63 79 20 6d 61 74 63 68 69 6e | h1.51.IPsec.IPsec.policy.matchin |
442e0 | 67 20 47 52 45 00 49 50 76 34 00 49 50 76 34 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 | g.GRE.IPv4.IPv4.Firewall.Configu |
44300 | 72 61 74 69 6f 6e 00 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 66 20 6e 65 78 74 20 62 6f 6f 74 | ration.IPv4.address.of.next.boot |
44320 | 73 74 72 61 70 20 73 65 72 76 65 72 00 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 | strap.server.IPv4.address.of.rou |
44340 | 74 65 72 20 6f 6e 20 74 68 65 20 63 6c 69 65 6e 74 27 73 20 73 75 62 6e 65 74 00 49 50 76 34 20 | ter.on.the.client's.subnet.IPv4. |
44360 | 6f 72 20 49 50 76 36 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 4e 65 74 46 6c 6f | or.IPv6.source.address.of.NetFlo |
44380 | 77 20 70 61 63 6b 65 74 73 00 49 50 76 34 20 70 65 65 72 69 6e 67 00 49 50 76 34 20 72 65 6c 61 | w.packets.IPv4.peering.IPv4.rela |
443a0 | 79 00 49 50 76 34 20 72 6f 75 74 65 20 61 6e 64 20 49 50 76 36 20 72 6f 75 74 65 20 70 6f 6c 69 | y.IPv4.route.and.IPv6.route.poli |
443c0 | 63 69 65 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e | cies.are.defined.in.this.section |
443e0 | 2e 20 54 68 65 73 65 20 72 6f 75 74 65 20 70 6f 6c 69 63 69 65 73 20 63 61 6e 20 74 68 65 6e 20 | ..These.route.policies.can.then. |
44400 | 62 65 20 61 73 73 6f 63 69 61 74 65 64 20 74 6f 20 69 6e 74 65 72 66 61 63 65 73 2e 00 49 50 76 | be.associated.to.interfaces..IPv |
44420 | 34 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 | 4.route.source:.bgp,.connected,. |
44440 | 65 69 67 72 70 2c 20 69 73 69 73 2c 20 6b 65 72 6e 65 6c 2c 20 6e 68 72 70 2c 20 6f 73 70 66 2c | eigrp,.isis,.kernel,.nhrp,.ospf, |
44460 | 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 49 50 76 34 20 73 65 72 76 65 72 00 49 50 76 34 2f 49 | .rip,.static..IPv4.server.IPv4/I |
44480 | 50 76 36 20 72 65 6d 6f 74 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 56 58 4c 41 4e 20 | Pv6.remote.address.of.the.VXLAN. |
444a0 | 74 75 6e 6e 65 6c 2e 20 41 6c 74 65 72 6e 61 74 69 76 65 20 74 6f 20 6d 75 6c 74 69 63 61 73 74 | tunnel..Alternative.to.multicast |
444c0 | 2c 20 74 68 65 20 72 65 6d 6f 74 65 20 49 50 76 34 2f 49 50 76 36 20 61 64 64 72 65 73 73 20 63 | ,.the.remote.IPv4/IPv6.address.c |
444e0 | 61 6e 20 73 65 74 20 64 69 72 65 63 74 6c 79 2e 00 49 50 76 36 00 49 50 76 36 20 41 63 63 65 73 | an.set.directly..IPv6.IPv6.Acces |
44500 | 73 20 4c 69 73 74 00 49 50 76 36 20 41 64 76 61 6e 63 65 64 20 4f 70 74 69 6f 6e 73 00 49 50 76 | s.List.IPv6.Advanced.Options.IPv |
44520 | 36 20 44 48 43 50 76 36 2d 50 44 20 45 78 61 6d 70 6c 65 00 49 50 76 36 20 44 4e 53 20 61 64 64 | 6.DHCPv6-PD.Example.IPv6.DNS.add |
44540 | 72 65 73 73 65 73 20 61 72 65 20 6f 70 74 69 6f 6e 61 6c 2e 00 49 50 76 36 20 46 69 72 65 77 61 | resses.are.optional..IPv6.Firewa |
44560 | 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 50 76 36 20 4d 75 6c 74 69 63 61 73 74 00 | ll.Configuration.IPv6.Multicast. |
44580 | 49 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 00 49 50 76 36 20 50 72 65 66 | IPv6.Prefix.Delegation.IPv6.Pref |
445a0 | 69 78 20 4c 69 73 74 73 00 49 50 76 36 20 53 4c 41 41 43 20 61 6e 64 20 49 41 2d 50 44 00 49 50 | ix.Lists.IPv6.SLAAC.and.IA-PD.IP |
445c0 | 76 36 20 54 43 50 20 66 69 6c 74 65 72 73 20 77 69 6c 6c 20 6f 6e 6c 79 20 6d 61 74 63 68 20 49 | v6.TCP.filters.will.only.match.I |
445e0 | 50 76 36 20 70 61 63 6b 65 74 73 20 77 69 74 68 20 6e 6f 20 68 65 61 64 65 72 20 65 78 74 65 6e | Pv6.packets.with.no.header.exten |
44600 | 73 69 6f 6e 2c 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 65 6e 2e 77 69 6b 69 70 65 64 69 61 2e 6f | sion,.see.https://en.wikipedia.o |
44620 | 72 67 2f 77 69 6b 69 2f 49 50 76 36 5f 70 61 63 6b 65 74 23 45 78 74 65 6e 73 69 6f 6e 5f 68 65 | rg/wiki/IPv6_packet#Extension_he |
44640 | 61 64 65 72 73 00 49 50 76 36 20 61 64 64 72 65 73 73 20 60 60 32 30 30 31 3a 64 62 38 3a 3a 31 | aders.IPv6.address.``2001:db8::1 |
44660 | 30 31 60 60 20 73 68 61 6c 6c 20 62 65 20 73 74 61 74 69 63 61 6c 6c 79 20 6d 61 70 70 65 64 00 | 01``.shall.be.statically.mapped. |
44680 | 49 50 76 36 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 | IPv6.address.of.route.to.match,. |
446a0 | 62 61 73 65 64 20 6f 6e 20 49 50 76 36 20 61 63 63 65 73 73 2d 6c 69 73 74 2e 00 49 50 76 36 20 | based.on.IPv6.access-list..IPv6. |
446c0 | 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 | address.of.route.to.match,.based |
446e0 | 20 6f 6e 20 49 50 76 36 20 70 72 65 66 69 78 2d 6c 69 73 74 2e 00 49 50 76 36 20 61 64 64 72 65 | .on.IPv6.prefix-list..IPv6.addre |
44700 | 73 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 73 | ss.of.route.to.match,.based.on.s |
44720 | 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 2d 6c 65 6e 67 74 68 2e 20 4e 6f 74 65 20 74 68 61 | pecified.prefix-length..Note.tha |
44740 | 74 20 74 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 66 6f 72 20 6b 65 72 6e 65 6c 20 72 6f | t.this.can.be.used.for.kernel.ro |
44760 | 75 74 65 73 20 6f 6e 6c 79 2e 20 44 6f 20 6e 6f 74 20 61 70 70 6c 79 20 74 6f 20 74 68 65 20 72 | utes.only..Do.not.apply.to.the.r |
44780 | 6f 75 74 65 73 20 6f 66 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f | outes.of.dynamic.routing.protoco |
447a0 | 6c 73 20 28 65 2e 67 2e 20 42 47 50 2c 20 52 49 50 2c 20 4f 53 46 50 29 2c 20 61 73 20 74 68 69 | ls.(e.g..BGP,.RIP,.OSFP),.as.thi |
447c0 | 73 20 63 61 6e 20 6c 65 61 64 20 74 6f 20 75 6e 65 78 70 65 63 74 65 64 20 72 65 73 75 6c 74 73 | s.can.lead.to.unexpected.results |
447e0 | 2e 2e 00 49 50 76 36 20 63 6c 69 65 6e 74 27 73 20 70 72 65 66 69 78 00 49 50 76 36 20 63 6c 69 | ...IPv6.client's.prefix.IPv6.cli |
44800 | 65 6e 74 27 73 20 70 72 65 66 69 78 20 61 73 73 69 67 6e 6d 65 6e 74 00 49 50 76 36 20 64 65 66 | ent's.prefix.assignment.IPv6.def |
44820 | 61 75 6c 74 20 63 6c 69 65 6e 74 27 73 20 70 6f 6f 6c 20 61 73 73 69 67 6e 6d 65 6e 74 00 49 50 | ault.client's.pool.assignment.IP |
44840 | 76 36 20 70 65 65 72 69 6e 67 00 49 50 76 36 20 70 72 65 66 69 78 20 60 60 32 30 30 31 3a 64 62 | v6.peering.IPv6.prefix.``2001:db |
44860 | 38 3a 30 3a 31 30 31 3a 3a 2f 36 34 60 60 20 73 68 61 6c 6c 20 62 65 20 73 74 61 74 69 63 61 6c | 8:0:101::/64``.shall.be.statical |
44880 | 6c 79 20 6d 61 70 70 65 64 00 49 50 76 36 20 70 72 65 66 69 78 2e 00 49 50 76 36 20 72 65 6c 61 | ly.mapped.IPv6.prefix..IPv6.rela |
448a0 | 79 00 49 50 76 36 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 | y.IPv6.route.source:.bgp,.connec |
448c0 | 74 65 64 2c 20 65 69 67 72 70 2c 20 69 73 69 73 2c 20 6b 65 72 6e 65 6c 2c 20 6e 68 72 70 2c 20 | ted,.eigrp,.isis,.kernel,.nhrp,. |
448e0 | 6f 73 70 66 76 33 2c 20 72 69 70 6e 67 2c 20 73 74 61 74 69 63 2e 00 49 50 76 36 20 73 65 72 76 | ospfv3,.ripng,.static..IPv6.serv |
44900 | 65 72 00 49 50 76 36 20 73 75 70 70 6f 72 74 00 49 53 2d 49 53 00 49 53 2d 49 53 20 47 6c 6f 62 | er.IPv6.support.IS-IS.IS-IS.Glob |
44920 | 61 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 53 2d 49 53 20 53 52 20 43 6f 6e 66 69 67 | al.Configuration.IS-IS.SR.Config |
44940 | 75 72 61 74 69 6f 6e 00 49 53 43 2d 44 48 43 50 20 4f 70 74 69 6f 6e 20 6e 61 6d 65 00 49 64 65 | uration.ISC-DHCP.Option.name.Ide |
44960 | 6e 74 69 74 79 20 42 61 73 65 64 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 66 20 2a 2a 6d | ntity.Based.Configuration.If.**m |
44980 | 61 78 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 20 69 73 20 73 65 74 20 62 75 74 20 2a 2a 6d 69 6e 2d | ax-threshold**.is.set.but.**min- |
449a0 | 74 68 72 65 73 68 6f 6c 64 20 69 73 20 6e 6f 74 2c 20 74 68 65 6e 20 2a 2a 6d 69 6e 2d 74 68 72 | threshold.is.not,.then.**min-thr |
449c0 | 65 73 68 6f 6c 64 2a 2a 20 69 73 20 73 63 61 6c 65 64 20 74 6f 20 35 30 25 20 6f 66 20 2a 2a 6d | eshold**.is.scaled.to.50%.of.**m |
449e0 | 61 78 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 2e 00 49 66 20 3a 63 66 67 63 6d 64 3a 60 73 74 72 69 | ax-threshold**..If.:cfgcmd:`stri |
44a00 | 63 74 60 20 69 73 20 73 65 74 20 74 68 65 20 42 47 50 20 73 65 73 73 69 6f 6e 20 77 6f 6e e2 80 | ct`.is.set.the.BGP.session.won.. |
44a20 | 99 74 20 62 65 63 6f 6d 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 75 6e 74 69 6c 20 74 68 65 20 | .t.become.established.until.the. |
44a40 | 42 47 50 20 6e 65 69 67 68 62 6f 72 20 73 65 74 73 20 6c 6f 63 61 6c 20 52 6f 6c 65 20 6f 6e 20 | BGP.neighbor.sets.local.Role.on. |
44a60 | 69 74 73 20 73 69 64 65 2e 20 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 | its.side..This.configuration.par |
44a80 | 61 6d 65 74 65 72 20 69 73 20 64 65 66 69 6e 65 64 20 69 6e 20 52 46 43 20 3a 72 66 63 3a 60 39 | ameter.is.defined.in.RFC.:rfc:`9 |
44aa0 | 32 33 34 60 20 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 65 6e 66 6f 72 63 65 20 74 68 65 20 | 234`.and.is.used.to.enforce.the. |
44ac0 | 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 74 20 79 | corresponding.configuration.at.y |
44ae0 | 6f 75 72 20 63 6f 75 6e 74 65 72 2d 70 61 72 74 73 20 73 69 64 65 2e 00 49 66 20 41 52 50 20 6d | our.counter-parts.side..If.ARP.m |
44b00 | 6f 6e 69 74 6f 72 69 6e 67 20 69 73 20 75 73 65 64 20 69 6e 20 61 6e 20 65 74 68 65 72 63 68 61 | onitoring.is.used.in.an.ethercha |
44b20 | 6e 6e 65 6c 20 63 6f 6d 70 61 74 69 62 6c 65 20 6d 6f 64 65 20 28 6d 6f 64 65 73 20 72 6f 75 6e | nnel.compatible.mode.(modes.roun |
44b40 | 64 2d 72 6f 62 69 6e 20 61 6e 64 20 78 6f 72 2d 68 61 73 68 29 2c 20 74 68 65 20 73 77 69 74 63 | d-robin.and.xor-hash),.the.switc |
44b60 | 68 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 61 20 6d 6f 64 65 | h.should.be.configured.in.a.mode |
44b80 | 20 74 68 61 74 20 65 76 65 6e 6c 79 20 64 69 73 74 72 69 62 75 74 65 73 20 70 61 63 6b 65 74 73 | .that.evenly.distributes.packets |
44ba0 | 20 61 63 72 6f 73 73 20 61 6c 6c 20 6c 69 6e 6b 73 2e 20 49 66 20 74 68 65 20 73 77 69 74 63 68 | .across.all.links..If.the.switch |
44bc0 | 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 64 69 73 74 72 69 62 75 74 65 20 74 68 65 | .is.configured.to.distribute.the |
44be0 | 20 70 61 63 6b 65 74 73 20 69 6e 20 61 6e 20 58 4f 52 20 66 61 73 68 69 6f 6e 2c 20 61 6c 6c 20 | .packets.in.an.XOR.fashion,.all. |
44c00 | 72 65 70 6c 69 65 73 20 66 72 6f 6d 20 74 68 65 20 41 52 50 20 74 61 72 67 65 74 73 20 77 69 6c | replies.from.the.ARP.targets.wil |
44c20 | 6c 20 62 65 20 72 65 63 65 69 76 65 64 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 6c 69 6e 6b 20 77 | l.be.received.on.the.same.link.w |
44c40 | 68 69 63 68 20 63 6f 75 6c 64 20 63 61 75 73 65 20 74 68 65 20 6f 74 68 65 72 20 74 65 61 6d 20 | hich.could.cause.the.other.team. |
44c60 | 6d 65 6d 62 65 72 73 20 74 6f 20 66 61 69 6c 2e 00 49 66 20 43 41 20 69 73 20 70 72 65 73 65 6e | members.to.fail..If.CA.is.presen |
44c80 | 74 2c 20 74 68 69 73 20 63 65 72 74 69 66 69 63 61 74 65 20 77 69 6c 6c 20 62 65 20 69 6e 63 6c | t,.this.certificate.will.be.incl |
44ca0 | 75 64 65 64 20 69 6e 20 67 65 6e 65 72 61 74 65 64 20 43 52 4c 73 00 49 66 20 43 4c 49 20 6f 70 | uded.in.generated.CRLs.If.CLI.op |
44cc0 | 74 69 6f 6e 20 69 73 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 2c 20 74 68 69 73 20 66 65 61 74 | tion.is.not.specified,.this.feat |
44ce0 | 75 72 65 20 69 73 20 64 69 73 61 62 6c 65 64 2e 00 49 66 20 50 49 4d 20 68 61 73 20 74 68 65 20 | ure.is.disabled..If.PIM.has.the. |
44d00 | 61 20 63 68 6f 69 63 65 20 6f 66 20 45 43 4d 50 20 6e 65 78 74 68 6f 70 73 20 66 6f 72 20 61 20 | a.choice.of.ECMP.nexthops.for.a. |
44d20 | 70 61 72 74 69 63 75 6c 61 72 20 3a 61 62 62 72 3a 60 52 50 46 20 28 52 65 76 65 72 73 65 20 50 | particular.:abbr:`RPF.(Reverse.P |
44d40 | 61 74 68 20 46 6f 72 77 61 72 64 69 6e 67 29 60 2c 20 50 49 4d 20 77 69 6c 6c 20 63 61 75 73 65 | ath.Forwarding)`,.PIM.will.cause |
44d60 | 20 53 2c 47 20 66 6c 6f 77 73 20 74 6f 20 62 65 20 73 70 72 65 61 64 20 6f 75 74 20 61 6d 6f 6e | .S,G.flows.to.be.spread.out.amon |
44d80 | 67 73 74 20 74 68 65 20 6e 65 78 74 68 6f 70 73 2e 20 49 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e | gst.the.nexthops..If.this.comman |
44da0 | 64 20 69 73 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 74 68 65 6e 20 74 68 65 20 66 69 72 73 | d.is.not.specified.then.the.firs |
44dc0 | 74 20 6e 65 78 74 68 6f 70 20 66 6f 75 6e 64 20 77 69 6c 6c 20 62 65 20 75 73 65 64 2e 00 49 66 | t.nexthop.found.will.be.used..If |
44de0 | 20 50 49 4d 20 69 73 20 75 73 69 6e 67 20 45 43 4d 50 20 61 6e 64 20 61 6e 20 69 6e 74 65 72 66 | .PIM.is.using.ECMP.and.an.interf |
44e00 | 61 63 65 20 67 6f 65 73 20 64 6f 77 6e 2c 20 63 61 75 73 65 20 50 49 4d 20 74 6f 20 72 65 62 61 | ace.goes.down,.cause.PIM.to.reba |
44e20 | 6c 61 6e 63 65 20 61 6c 6c 20 53 2c 47 20 66 6c 6f 77 73 20 61 63 72 6f 73 73 20 74 68 65 20 72 | lance.all.S,G.flows.across.the.r |
44e40 | 65 6d 61 69 6e 69 6e 67 20 6e 65 78 74 68 6f 70 73 2e 20 49 66 20 74 68 69 73 20 63 6f 6d 6d 61 | emaining.nexthops..If.this.comma |
44e60 | 6e 64 20 69 73 20 6e 6f 74 20 63 6f 6e 66 69 67 75 72 65 64 20 50 49 4d 20 6f 6e 6c 79 20 6d 6f | nd.is.not.configured.PIM.only.mo |
44e80 | 64 69 66 69 65 73 20 74 68 6f 73 65 20 53 2c 47 20 66 6c 6f 77 73 20 74 68 61 74 20 77 65 72 65 | difies.those.S,G.flows.that.were |
44ea0 | 20 75 73 69 6e 67 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 77 65 6e 74 20 64 | .using.the.interface.that.went.d |
44ec0 | 6f 77 6e 2e 00 49 66 20 60 60 61 6c 69 61 73 60 60 20 69 73 20 73 65 74 2c 20 69 74 20 63 61 6e | own..If.``alias``.is.set,.it.can |
44ee0 | 20 62 65 20 75 73 65 64 20 69 6e 73 74 65 61 64 20 6f 66 20 74 68 65 20 64 65 76 69 63 65 20 77 | .be.used.instead.of.the.device.w |
44f00 | 68 65 6e 20 63 6f 6e 6e 65 63 74 69 6e 67 2e 00 49 66 20 60 60 61 6c 6c 60 60 20 69 73 20 73 70 | hen.connecting..If.``all``.is.sp |
44f20 | 65 63 69 66 69 65 64 2c 20 72 65 6d 6f 76 65 20 61 6c 6c 20 41 53 20 6e 75 6d 62 65 72 73 20 66 | ecified,.remove.all.AS.numbers.f |
44f40 | 72 6f 6d 20 74 68 65 20 41 53 5f 50 41 54 48 20 6f 66 20 74 68 65 20 42 47 50 20 70 61 74 68 27 | rom.the.AS_PATH.of.the.BGP.path' |
44f60 | 73 20 4e 4c 52 49 2e 00 49 66 20 61 20 6c 6f 63 61 6c 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 | s.NLRI..If.a.local.firewall.poli |
44f80 | 63 79 20 69 73 20 69 6e 20 70 6c 61 63 65 20 6f 6e 20 79 6f 75 72 20 65 78 74 65 72 6e 61 6c 20 | cy.is.in.place.on.your.external. |
44fa0 | 69 6e 74 65 72 66 61 63 65 20 79 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 61 6c 6c 6f 77 | interface.you.will.need.to.allow |
44fc0 | 20 74 68 65 20 70 6f 72 74 73 20 62 65 6c 6f 77 3a 00 49 66 20 61 20 72 65 67 69 73 74 72 79 20 | .the.ports.below:.If.a.registry. |
44fe0 | 69 73 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 2c 20 44 6f 63 6b 65 72 2e 69 6f 20 77 69 6c 6c | is.not.specified,.Docker.io.will |
45000 | 20 62 65 20 75 73 65 64 20 61 73 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 73 74 | .be.used.as.the.container.regist |
45020 | 72 79 20 75 6e 6c 65 73 73 20 61 6e 20 61 6c 74 65 72 6e 61 74 69 76 65 20 72 65 67 69 73 74 72 | ry.unless.an.alternative.registr |
45040 | 79 20 69 73 20 73 70 65 63 69 66 69 65 64 20 75 73 69 6e 67 20 2a 2a 73 65 74 20 63 6f 6e 74 61 | y.is.specified.using.**set.conta |
45060 | 69 6e 65 72 20 72 65 67 69 73 74 72 79 20 3c 6e 61 6d 65 3e 2a 2a 20 6f 72 20 74 68 65 20 72 65 | iner.registry.<name>**.or.the.re |
45080 | 67 69 73 74 72 79 20 69 73 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 74 68 65 20 69 6d 61 67 65 20 | gistry.is.included.in.the.image. |
450a0 | 6e 61 6d 65 00 49 66 20 61 20 72 65 73 70 6f 6e 73 65 20 69 73 20 68 65 61 72 64 2c 20 74 68 65 | name.If.a.response.is.heard,.the |
450c0 | 20 6c 65 61 73 65 20 69 73 20 61 62 61 6e 64 6f 6e 65 64 2c 20 61 6e 64 20 74 68 65 20 73 65 72 | .lease.is.abandoned,.and.the.ser |
450e0 | 76 65 72 20 64 6f 65 73 20 6e 6f 74 20 72 65 73 70 6f 6e 64 20 74 6f 20 74 68 65 20 63 6c 69 65 | ver.does.not.respond.to.the.clie |
45100 | 6e 74 2e 20 54 68 65 20 6c 65 61 73 65 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 61 62 61 6e 64 6f | nt..The.lease.will.remain.abando |
45120 | 6e 65 64 20 66 6f 72 20 61 20 6d 69 6e 69 6d 75 6d 20 6f 66 20 61 62 61 6e 64 6f 6e 2d 6c 65 61 | ned.for.a.minimum.of.abandon-lea |
45140 | 73 65 2d 74 69 6d 65 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 73 20 74 6f 20 32 34 20 | se-time.seconds.(defaults.to.24. |
45160 | 68 6f 75 72 73 29 2e 00 49 66 20 61 20 72 6f 75 74 65 20 68 61 73 20 61 6e 20 4f 52 49 47 49 4e | hours)..If.a.route.has.an.ORIGIN |
45180 | 41 54 4f 52 5f 49 44 20 61 74 74 72 69 62 75 74 65 20 62 65 63 61 75 73 65 20 69 74 20 68 61 73 | ATOR_ID.attribute.because.it.has |
451a0 | 20 62 65 65 6e 20 72 65 66 6c 65 63 74 65 64 2c 20 74 68 61 74 20 4f 52 49 47 49 4e 41 54 4f 52 | .been.reflected,.that.ORIGINATOR |
451c0 | 5f 49 44 20 77 69 6c 6c 20 62 65 20 75 73 65 64 2e 20 4f 74 68 65 72 77 69 73 65 2c 20 74 68 65 | _ID.will.be.used..Otherwise,.the |
451e0 | 20 72 6f 75 74 65 72 2d 49 44 20 6f 66 20 74 68 65 20 70 65 65 72 20 74 68 65 20 72 6f 75 74 65 | .router-ID.of.the.peer.the.route |
45200 | 20 77 61 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 77 69 6c 6c 20 62 65 20 75 73 65 64 2e | .was.received.from.will.be.used. |
45220 | 00 49 66 20 61 20 72 75 6c 65 20 69 73 20 64 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 61 6e 20 61 | .If.a.rule.is.defined,.then.an.a |
45240 | 63 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 66 6f 72 20 69 74 2e 20 54 68 | ction.must.be.defined.for.it..Th |
45260 | 69 73 20 74 65 6c 6c 73 20 74 68 65 20 66 69 72 65 77 61 6c 6c 20 77 68 61 74 20 74 6f 20 64 6f | is.tells.the.firewall.what.to.do |
45280 | 20 69 66 20 61 6c 6c 20 63 72 69 74 65 72 69 61 20 6d 61 74 63 68 65 72 73 20 64 65 66 69 6e 65 | .if.all.criteria.matchers.define |
452a0 | 64 20 66 6f 72 20 73 75 63 68 20 72 75 6c 65 20 64 6f 20 6d 61 74 63 68 2e 00 49 66 20 61 20 74 | d.for.such.rule.do.match..If.a.t |
452c0 | 68 65 72 65 20 61 72 65 20 6e 6f 20 66 72 65 65 20 61 64 64 72 65 73 73 65 73 20 62 75 74 20 74 | here.are.no.free.addresses.but.t |
452e0 | 68 65 72 65 20 61 72 65 20 61 62 61 6e 64 6f 6e 65 64 20 49 50 20 61 64 64 72 65 73 73 65 73 2c | here.are.abandoned.IP.addresses, |
45300 | 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 20 77 69 6c 6c 20 61 74 74 65 6d 70 74 20 74 6f | .the.DHCP.server.will.attempt.to |
45320 | 20 72 65 63 6c 61 69 6d 20 61 6e 20 61 62 61 6e 64 6f 6e 65 64 20 49 50 20 61 64 64 72 65 73 73 | .reclaim.an.abandoned.IP.address |
45340 | 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 61 62 61 6e | .regardless.of.the.value.of.aban |
45360 | 64 6f 6e 2d 6c 65 61 73 65 2d 74 69 6d 65 2e 00 49 66 20 61 6e 20 49 53 50 20 64 65 70 6c 6f 79 | don-lease-time..If.an.ISP.deploy |
45380 | 73 20 61 20 3a 61 62 62 72 3a 60 43 47 4e 20 28 43 61 72 72 69 65 72 2d 67 72 61 64 65 20 4e 41 | s.a.:abbr:`CGN.(Carrier-grade.NA |
453a0 | 54 29 60 2c 20 61 6e 64 20 75 73 65 73 20 3a 72 66 63 3a 60 31 39 31 38 60 20 61 64 64 72 65 73 | T)`,.and.uses.:rfc:`1918`.addres |
453c0 | 73 20 73 70 61 63 65 20 74 6f 20 6e 75 6d 62 65 72 20 63 75 73 74 6f 6d 65 72 20 67 61 74 65 77 | s.space.to.number.customer.gatew |
453e0 | 61 79 73 2c 20 74 68 65 20 72 69 73 6b 20 6f 66 20 61 64 64 72 65 73 73 20 63 6f 6c 6c 69 73 69 | ays,.the.risk.of.address.collisi |
45400 | 6f 6e 2c 20 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 72 6f 75 74 69 6e 67 20 66 61 69 6c 75 72 | on,.and.therefore.routing.failur |
45420 | 65 73 2c 20 61 72 69 73 65 73 20 77 68 65 6e 20 74 68 65 20 63 75 73 74 6f 6d 65 72 20 6e 65 74 | es,.arises.when.the.customer.net |
45440 | 77 6f 72 6b 20 61 6c 72 65 61 64 79 20 75 73 65 73 20 61 6e 20 3a 72 66 63 3a 60 31 39 31 38 60 | work.already.uses.an.:rfc:`1918` |
45460 | 20 61 64 64 72 65 73 73 20 73 70 61 63 65 2e 00 49 66 20 61 6e 20 61 6e 6f 74 68 65 72 20 62 72 | .address.space..If.an.another.br |
45480 | 69 64 67 65 20 69 6e 20 74 68 65 20 73 70 61 6e 6e 69 6e 67 20 74 72 65 65 20 64 6f 65 73 20 6e | idge.in.the.spanning.tree.does.n |
454a0 | 6f 74 20 73 65 6e 64 20 6f 75 74 20 61 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 20 66 6f 72 20 61 | ot.send.out.a.hello.packet.for.a |
454c0 | 20 6c 6f 6e 67 20 70 65 72 69 6f 64 20 6f 66 20 74 69 6d 65 2c 20 69 74 20 69 73 20 61 73 73 75 | .long.period.of.time,.it.is.assu |
454e0 | 6d 65 64 20 74 6f 20 62 65 20 64 65 61 64 2e 00 49 66 20 63 68 6f 6f 73 69 6e 67 20 61 20 76 61 | med.to.be.dead..If.choosing.a.va |
45500 | 6c 75 65 20 62 65 6c 6f 77 20 33 31 20 73 65 63 6f 6e 64 73 20 62 65 20 61 77 61 72 65 20 74 68 | lue.below.31.seconds.be.aware.th |
45520 | 61 74 20 73 6f 6d 65 20 68 61 72 64 77 61 72 65 20 70 6c 61 74 66 6f 72 6d 73 20 63 61 6e 6e 6f | at.some.hardware.platforms.canno |
45540 | 74 20 73 65 65 20 64 61 74 61 20 66 6c 6f 77 69 6e 67 20 69 6e 20 62 65 74 74 65 72 20 74 68 61 | t.see.data.flowing.in.better.tha |
45560 | 6e 20 33 30 20 73 65 63 6f 6e 64 20 63 68 75 6e 6b 73 2e 00 49 66 20 63 6f 6e 66 69 67 75 72 65 | n.30.second.chunks..If.configure |
45580 | 64 2c 20 69 6e 63 6f 6d 69 6e 67 20 49 50 20 64 69 72 65 63 74 65 64 20 62 72 6f 61 64 63 61 73 | d,.incoming.IP.directed.broadcas |
455a0 | 74 20 70 61 63 6b 65 74 73 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 77 69 6c 6c | t.packets.on.this.interface.will |
455c0 | 20 62 65 20 66 6f 72 77 61 72 64 65 64 2e 00 49 66 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 72 65 | .be.forwarded..If.configured,.re |
455e0 | 70 6c 79 20 6f 6e 6c 79 20 69 66 20 74 68 65 20 74 61 72 67 65 74 20 49 50 20 61 64 64 72 65 73 | ply.only.if.the.target.IP.addres |
45600 | 73 20 69 73 20 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e | s.is.local.address.configured.on |
45620 | 20 74 68 65 20 69 6e 63 6f 6d 69 6e 67 20 69 6e 74 65 72 66 61 63 65 2e 00 49 66 20 63 6f 6e 66 | .the.incoming.interface..If.conf |
45640 | 69 67 75 72 65 64 2c 20 74 72 79 20 74 6f 20 61 76 6f 69 64 20 6c 6f 63 61 6c 20 61 64 64 72 65 | igured,.try.to.avoid.local.addre |
45660 | 73 73 65 73 20 74 68 61 74 20 61 72 65 20 6e 6f 74 20 69 6e 20 74 68 65 20 74 61 72 67 65 74 27 | sses.that.are.not.in.the.target' |
45680 | 73 20 73 75 62 6e 65 74 20 66 6f 72 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 | s.subnet.for.this.interface..Thi |
456a0 | 73 20 6d 6f 64 65 20 69 73 20 75 73 65 66 75 6c 20 77 68 65 6e 20 74 61 72 67 65 74 20 68 6f 73 | s.mode.is.useful.when.target.hos |
456c0 | 74 73 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 | ts.reachable.via.this.interface. |
456e0 | 72 65 71 75 69 72 65 20 74 68 65 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 69 6e | require.the.source.IP.address.in |
45700 | 20 41 52 50 20 72 65 71 75 65 73 74 73 20 74 6f 20 62 65 20 70 61 72 74 20 6f 66 20 74 68 65 69 | .ARP.requests.to.be.part.of.thei |
45720 | 72 20 6c 6f 67 69 63 61 6c 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 | r.logical.network.configured.on. |
45740 | 74 68 65 20 72 65 63 65 69 76 69 6e 67 20 69 6e 74 65 72 66 61 63 65 2e 20 57 68 65 6e 20 77 65 | the.receiving.interface..When.we |
45760 | 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 72 65 71 75 65 73 74 20 77 65 20 77 69 6c 6c 20 63 68 | .generate.the.request.we.will.ch |
45780 | 65 63 6b 20 61 6c 6c 20 6f 75 72 20 73 75 62 6e 65 74 73 20 74 68 61 74 20 69 6e 63 6c 75 64 65 | eck.all.our.subnets.that.include |
457a0 | 20 74 68 65 20 74 61 72 67 65 74 20 49 50 20 61 6e 64 20 77 69 6c 6c 20 70 72 65 73 65 72 76 65 | .the.target.IP.and.will.preserve |
457c0 | 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 69 66 20 69 74 20 69 73 20 66 72 6f | .the.source.address.if.it.is.fro |
457e0 | 6d 20 73 75 63 68 20 73 75 62 6e 65 74 2e 20 49 66 20 74 68 65 72 65 20 69 73 20 6e 6f 20 73 75 | m.such.subnet..If.there.is.no.su |
45800 | 63 68 20 73 75 62 6e 65 74 20 77 65 20 73 65 6c 65 63 74 20 73 6f 75 72 63 65 20 61 64 64 72 65 | ch.subnet.we.select.source.addre |
45820 | 73 73 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 20 72 75 6c 65 73 20 66 6f 72 20 6c 65 | ss.according.to.the.rules.for.le |
45840 | 76 65 6c 20 32 2e 00 49 66 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 56 58 4c 41 4e 20 69 6e 20 61 | vel.2..If.configuring.VXLAN.in.a |
45860 | 20 56 79 4f 53 20 76 69 72 74 75 61 6c 20 6d 61 63 68 69 6e 65 2c 20 65 6e 73 75 72 65 20 74 68 | .VyOS.virtual.machine,.ensure.th |
45880 | 61 74 20 4d 41 43 20 73 70 6f 6f 66 69 6e 67 20 28 48 79 70 65 72 2d 56 29 20 6f 72 20 46 6f 72 | at.MAC.spoofing.(Hyper-V).or.For |
458a0 | 67 65 64 20 54 72 61 6e 73 6d 69 74 73 20 28 45 53 58 29 20 61 72 65 20 70 65 72 6d 69 74 74 65 | ged.Transmits.(ESX).are.permitte |
458c0 | 64 2c 20 6f 74 68 65 72 77 69 73 65 20 66 6f 72 77 61 72 64 65 64 20 66 72 61 6d 65 73 20 6d 61 | d,.otherwise.forwarded.frames.ma |
458e0 | 79 20 62 65 20 62 6c 6f 63 6b 65 64 20 62 79 20 74 68 65 20 68 79 70 65 72 76 69 73 6f 72 2e 00 | y.be.blocked.by.the.hypervisor.. |
45900 | 49 66 20 66 6f 72 77 61 72 64 69 6e 67 20 74 72 61 66 66 69 63 20 74 6f 20 61 20 64 69 66 66 65 | If.forwarding.traffic.to.a.diffe |
45920 | 72 65 6e 74 20 70 6f 72 74 20 74 68 61 6e 20 69 74 20 69 73 20 61 72 72 69 76 69 6e 67 20 6f 6e | rent.port.than.it.is.arriving.on |
45940 | 2c 20 79 6f 75 20 6d 61 79 20 61 6c 73 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 74 72 61 | ,.you.may.also.configure.the.tra |
45960 | 6e 73 6c 61 74 69 6f 6e 20 70 6f 72 74 20 75 73 69 6e 67 20 60 73 65 74 20 6e 61 74 20 64 65 73 | nslation.port.using.`set.nat.des |
45980 | 74 69 6e 61 74 69 6f 6e 20 72 75 6c 65 20 5b 6e 5d 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 70 6f | tination.rule.[n].translation.po |
459a0 | 72 74 60 2e 00 49 66 20 67 75 61 72 61 6e 74 65 65 64 20 74 72 61 66 66 69 63 20 66 6f 72 20 61 | rt`..If.guaranteed.traffic.for.a |
459c0 | 20 63 6c 61 73 73 20 69 73 20 6d 65 74 20 61 6e 64 20 74 68 65 72 65 20 69 73 20 72 6f 6f 6d 20 | .class.is.met.and.there.is.room. |
459e0 | 66 6f 72 20 6d 6f 72 65 20 74 72 61 66 66 69 63 2c 20 74 68 65 20 63 65 69 6c 69 6e 67 20 70 61 | for.more.traffic,.the.ceiling.pa |
45a00 | 72 61 6d 65 74 65 72 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 73 65 74 20 68 6f 77 20 6d | rameter.can.be.used.to.set.how.m |
45a20 | 75 63 68 20 6d 6f 72 65 20 62 61 6e 64 77 69 64 74 68 20 63 6f 75 6c 64 20 62 65 20 75 73 65 64 | uch.more.bandwidth.could.be.used |
45a40 | 2e 20 49 66 20 67 75 61 72 61 6e 74 65 65 64 20 74 72 61 66 66 69 63 20 69 73 20 6d 65 74 20 61 | ..If.guaranteed.traffic.is.met.a |
45a60 | 6e 64 20 74 68 65 72 65 20 61 72 65 20 73 65 76 65 72 61 6c 20 63 6c 61 73 73 65 73 20 77 69 6c | nd.there.are.several.classes.wil |
45a80 | 6c 69 6e 67 20 74 6f 20 75 73 65 20 74 68 65 69 72 20 63 65 69 6c 69 6e 67 73 2c 20 74 68 65 20 | ling.to.use.their.ceilings,.the. |
45aa0 | 70 72 69 6f 72 69 74 79 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 65 73 74 61 62 6c 69 73 | priority.parameter.will.establis |
45ac0 | 68 20 74 68 65 20 6f 72 64 65 72 20 69 6e 20 77 68 69 63 68 20 74 68 61 74 20 61 64 64 69 74 69 | h.the.order.in.which.that.additi |
45ae0 | 6f 6e 61 6c 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 2e 20 | onal.traffic.will.be.allocated.. |
45b00 | 50 72 69 6f 72 69 74 79 20 63 61 6e 20 62 65 20 61 6e 79 20 6e 75 6d 62 65 72 20 66 72 6f 6d 20 | Priority.can.be.any.number.from. |
45b20 | 30 20 74 6f 20 37 2e 20 54 68 65 20 6c 6f 77 65 72 20 74 68 65 20 6e 75 6d 62 65 72 2c 20 74 68 | 0.to.7..The.lower.the.number,.th |
45b40 | 65 20 68 69 67 68 65 72 20 74 68 65 20 70 72 69 6f 72 69 74 79 2e 00 49 66 20 69 6e 74 65 72 66 | e.higher.the.priority..If.interf |
45b60 | 61 63 65 20 77 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 | ace.were.the.packet.was.received |
45b80 | 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c 20 74 68 65 6e 20 70 61 63 6b 65 | .is.part.of.a.bridge,.then.packe |
45ba0 | 74 20 69 73 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 2a 2a 42 72 69 64 67 65 20 4c | t.is.processed.at.the.**Bridge.L |
45bc0 | 61 79 65 72 2a 2a 2c 20 77 68 69 63 68 20 63 6f 6e 74 61 69 6e 73 20 61 20 76 65 72 20 62 61 73 | ayer**,.which.contains.a.ver.bas |
45be0 | 69 63 20 73 65 74 75 70 20 77 68 65 72 65 20 66 6f 72 20 62 72 69 64 67 65 20 66 69 6c 74 65 72 | ic.setup.where.for.bridge.filter |
45c00 | 69 6e 67 3a 00 49 66 20 69 6e 74 65 72 66 61 63 65 20 77 65 72 65 20 74 68 65 20 70 61 63 6b 65 | ing:.If.interface.were.the.packe |
45c20 | 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 69 73 6e 27 74 20 70 61 72 74 20 6f 66 20 61 20 62 | t.was.received.isn't.part.of.a.b |
45c40 | 72 69 64 67 65 2c 20 74 68 65 6e 20 70 61 63 6b 65 74 20 69 73 20 70 72 6f 63 65 73 73 65 64 20 | ridge,.then.packet.is.processed. |
45c60 | 61 74 20 74 68 65 20 2a 2a 49 50 20 4c 61 79 65 72 2a 2a 3a 00 49 66 20 69 74 27 73 20 76 69 74 | at.the.**IP.Layer**:.If.it's.vit |
45c80 | 61 6c 20 74 68 61 74 20 74 68 65 20 64 61 65 6d 6f 6e 20 73 68 6f 75 6c 64 20 61 63 74 20 65 78 | al.that.the.daemon.should.act.ex |
45ca0 | 61 63 74 6c 79 20 6c 69 6b 65 20 61 20 72 65 61 6c 20 6d 75 6c 74 69 63 61 73 74 20 63 6c 69 65 | actly.like.a.real.multicast.clie |
45cc0 | 6e 74 20 6f 6e 20 74 68 65 20 75 70 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 2c 20 74 68 | nt.on.the.upstream.interface,.th |
45ce0 | 69 73 20 66 75 6e 63 74 69 6f 6e 20 73 68 6f 75 6c 64 20 62 65 20 65 6e 61 62 6c 65 64 2e 00 49 | is.function.should.be.enabled..I |
45d00 | 66 20 6b 6e 6f 77 6e 2c 20 74 68 65 20 49 50 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 20 72 6f | f.known,.the.IP.of.the.remote.ro |
45d20 | 75 74 65 72 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 75 73 69 6e 67 20 74 68 65 | uter.can.be.configured.using.the |
45d40 | 20 60 60 72 65 6d 6f 74 65 2d 68 6f 73 74 60 60 20 64 69 72 65 63 74 69 76 65 3b 20 69 66 20 75 | .``remote-host``.directive;.if.u |
45d60 | 6e 6b 6e 6f 77 6e 2c 20 69 74 20 63 61 6e 20 62 65 20 6f 6d 69 74 74 65 64 2e 20 57 65 20 77 69 | nknown,.it.can.be.omitted..We.wi |
45d80 | 6c 6c 20 61 73 73 75 6d 65 20 61 20 64 79 6e 61 6d 69 63 20 49 50 20 66 6f 72 20 6f 75 72 20 72 | ll.assume.a.dynamic.IP.for.our.r |
45da0 | 65 6d 6f 74 65 20 72 6f 75 74 65 72 2e 00 49 66 20 6c 6f 67 67 69 6e 67 20 74 6f 20 61 20 6c 6f | emote.router..If.logging.to.a.lo |
45dc0 | 63 61 6c 20 75 73 65 72 20 61 63 63 6f 75 6e 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 | cal.user.account.is.configured,. |
45de0 | 61 6c 6c 20 64 65 66 69 6e 65 64 20 6c 6f 67 20 6d 65 73 73 61 67 65 73 20 61 72 65 20 64 69 73 | all.defined.log.messages.are.dis |
45e00 | 70 6c 61 79 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 20 69 66 20 74 68 65 20 6c 6f 63 61 6c | play.on.the.console.if.the.local |
45e20 | 20 75 73 65 72 20 69 73 20 6c 6f 67 67 65 64 20 69 6e 2c 20 69 66 20 74 68 65 20 75 73 65 72 20 | .user.is.logged.in,.if.the.user. |
45e40 | 69 73 20 6e 6f 74 20 6c 6f 67 67 65 64 20 69 6e 2c 20 6e 6f 20 6d 65 73 73 61 67 65 73 20 61 72 | is.not.logged.in,.no.messages.ar |
45e60 | 65 20 62 65 69 6e 67 20 64 69 73 70 6c 61 79 65 64 2e 20 46 6f 72 20 61 6e 20 65 78 70 6c 61 6e | e.being.displayed..For.an.explan |
45e80 | 61 74 69 6f 6e 20 6f 6e 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 66 61 63 69 6c 69 74 69 65 73 | ation.on.:ref:`syslog_facilities |
45ea0 | 60 20 6b 65 79 77 6f 72 64 73 20 61 6e 64 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 73 65 76 65 | `.keywords.and.:ref:`syslog_seve |
45ec0 | 72 69 74 79 5f 6c 65 76 65 6c 60 20 6b 65 79 77 6f 72 64 73 20 73 65 65 20 74 61 62 6c 65 73 20 | rity_level`.keywords.see.tables. |
45ee0 | 62 65 6c 6f 77 2e 00 49 66 20 6d 61 6b 69 6e 67 20 75 73 65 20 6f 66 20 6d 75 6c 74 69 70 6c 65 | below..If.making.use.of.multiple |
45f00 | 20 74 75 6e 6e 65 6c 73 2c 20 4f 70 65 6e 56 50 4e 20 6d 75 73 74 20 68 61 76 65 20 61 20 77 61 | .tunnels,.OpenVPN.must.have.a.wa |
45f20 | 79 20 74 6f 20 64 69 73 74 69 6e 67 75 69 73 68 20 62 65 74 77 65 65 6e 20 64 69 66 66 65 72 65 | y.to.distinguish.between.differe |
45f40 | 6e 74 20 74 75 6e 6e 65 6c 73 20 61 73 69 64 65 20 66 72 6f 6d 20 74 68 65 20 70 72 65 2d 73 68 | nt.tunnels.aside.from.the.pre-sh |
45f60 | 61 72 65 64 2d 6b 65 79 2e 20 54 68 69 73 20 69 73 20 65 69 74 68 65 72 20 62 79 20 72 65 66 65 | ared-key..This.is.either.by.refe |
45f80 | 72 65 6e 63 69 6e 67 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 70 6f 72 74 20 6e 75 6d 62 65 | rencing.IP.address.or.port.numbe |
45fa0 | 72 2e 20 4f 6e 65 20 6f 70 74 69 6f 6e 20 69 73 20 74 6f 20 64 65 64 69 63 61 74 65 20 61 20 70 | r..One.option.is.to.dedicate.a.p |
45fc0 | 75 62 6c 69 63 20 49 50 20 74 6f 20 65 61 63 68 20 74 75 6e 6e 65 6c 2e 20 41 6e 6f 74 68 65 72 | ublic.IP.to.each.tunnel..Another |
45fe0 | 20 6f 70 74 69 6f 6e 20 69 73 20 74 6f 20 64 65 64 69 63 61 74 65 20 61 20 70 6f 72 74 20 6e 75 | .option.is.to.dedicate.a.port.nu |
46000 | 6d 62 65 72 20 74 6f 20 65 61 63 68 20 74 75 6e 6e 65 6c 20 28 65 2e 67 2e 20 31 31 39 35 2c 31 | mber.to.each.tunnel.(e.g..1195,1 |
46020 | 31 39 36 2c 31 31 39 37 2e 2e 2e 29 2e 00 49 66 20 6d 75 6c 74 69 2d 70 61 74 68 69 6e 67 20 69 | 196,1197...)..If.multi-pathing.i |
46040 | 73 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 6e 20 63 68 65 63 6b 20 77 68 65 74 68 65 72 20 74 68 | s.enabled,.then.check.whether.th |
46060 | 65 20 72 6f 75 74 65 73 20 6e 6f 74 20 79 65 74 20 64 69 73 74 69 6e 67 75 69 73 68 65 64 20 69 | e.routes.not.yet.distinguished.i |
46080 | 6e 20 70 72 65 66 65 72 65 6e 63 65 20 6d 61 79 20 62 65 20 63 6f 6e 73 69 64 65 72 65 64 20 65 | n.preference.may.be.considered.e |
460a0 | 71 75 61 6c 2e 20 49 66 20 3a 63 66 67 63 6d 64 3a 60 62 67 70 20 62 65 73 74 70 61 74 68 20 61 | qual..If.:cfgcmd:`bgp.bestpath.a |
460c0 | 73 2d 70 61 74 68 20 6d 75 6c 74 69 70 61 74 68 2d 72 65 6c 61 78 60 20 69 73 20 73 65 74 2c 20 | s-path.multipath-relax`.is.set,. |
460e0 | 61 6c 6c 20 73 75 63 68 20 72 6f 75 74 65 73 20 61 72 65 20 63 6f 6e 73 69 64 65 72 65 64 20 65 | all.such.routes.are.considered.e |
46100 | 71 75 61 6c 2c 20 6f 74 68 65 72 77 69 73 65 20 72 6f 75 74 65 73 20 72 65 63 65 69 76 65 64 20 | qual,.otherwise.routes.received. |
46120 | 76 69 61 20 69 42 47 50 20 77 69 74 68 20 69 64 65 6e 74 69 63 61 6c 20 41 53 5f 50 41 54 48 73 | via.iBGP.with.identical.AS_PATHs |
46140 | 20 6f 72 20 72 6f 75 74 65 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 65 42 47 50 20 6e 65 | .or.routes.received.from.eBGP.ne |
46160 | 69 67 68 62 6f 75 72 73 20 69 6e 20 74 68 65 20 73 61 6d 65 20 41 53 20 61 72 65 20 63 6f 6e 73 | ighbours.in.the.same.AS.are.cons |
46180 | 69 64 65 72 65 64 20 65 71 75 61 6c 2e 00 49 66 20 6e 6f 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 | idered.equal..If.no.connection.t |
461a0 | 6f 20 61 6e 20 52 50 4b 49 20 63 61 63 68 65 20 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 65 73 | o.an.RPKI.cache.server.can.be.es |
461c0 | 74 61 62 6c 69 73 68 65 64 20 61 66 74 65 72 20 61 20 70 72 65 2d 64 65 66 69 6e 65 64 20 74 69 | tablished.after.a.pre-defined.ti |
461e0 | 6d 65 6f 75 74 2c 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 70 72 6f 63 65 73 73 20 72 | meout,.the.router.will.process.r |
46200 | 6f 75 74 65 73 20 77 69 74 68 6f 75 74 20 70 72 65 66 69 78 20 6f 72 69 67 69 6e 20 76 61 6c 69 | outes.without.prefix.origin.vali |
46220 | 64 61 74 69 6f 6e 2e 20 49 74 20 73 74 69 6c 6c 20 77 69 6c 6c 20 74 72 79 20 74 6f 20 65 73 74 | dation..It.still.will.try.to.est |
46240 | 61 62 6c 69 73 68 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 61 6e 20 52 50 4b 49 20 63 | ablish.a.connection.to.an.RPKI.c |
46260 | 61 63 68 65 20 73 65 72 76 65 72 20 69 6e 20 74 68 65 20 62 61 63 6b 67 72 6f 75 6e 64 2e 00 49 | ache.server.in.the.background..I |
46280 | 66 20 6e 6f 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 69 73 20 73 70 65 63 69 66 69 65 64 20 74 68 | f.no.destination.is.specified.th |
462a0 | 65 20 72 75 6c 65 20 77 69 6c 6c 20 6d 61 74 63 68 20 6f 6e 20 61 6e 79 20 64 65 73 74 69 6e 61 | e.rule.will.match.on.any.destina |
462c0 | 74 69 6f 6e 20 61 64 64 72 65 73 73 20 61 6e 64 20 70 6f 72 74 2e 00 49 66 20 6e 6f 20 69 70 20 | tion.address.and.port..If.no.ip. |
462e0 | 70 72 65 66 69 78 20 6c 69 73 74 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 69 74 20 61 63 74 | prefix.list.is.specified,.it.act |
46300 | 73 20 61 73 20 70 65 72 6d 69 74 2e 20 49 66 20 69 70 20 70 72 65 66 69 78 20 6c 69 73 74 20 69 | s.as.permit..If.ip.prefix.list.i |
46320 | 73 20 64 65 66 69 6e 65 64 2c 20 61 6e 64 20 6e 6f 20 6d 61 74 63 68 20 69 73 20 66 6f 75 6e 64 | s.defined,.and.no.match.is.found |
46340 | 2c 20 64 65 66 61 75 6c 74 20 64 65 6e 79 20 69 73 20 61 70 70 6c 69 65 64 2e 00 49 66 20 6e 6f | ,.default.deny.is.applied..If.no |
46360 | 20 6f 70 74 69 6f 6e 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 74 68 69 73 20 64 65 66 61 75 | .option.is.specified,.this.defau |
46380 | 6c 74 73 20 74 6f 20 60 61 6c 6c 60 2e 00 49 66 20 6e 6f 74 20 73 65 74 20 28 64 65 66 61 75 6c | lts.to.`all`..If.not.set.(defaul |
463a0 | 74 29 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 6e | t).allows.you.to.have.multiple.n |
463c0 | 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 73 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 73 75 | etwork.interfaces.on.the.same.su |
463e0 | 62 6e 65 74 2c 20 61 6e 64 20 68 61 76 65 20 74 68 65 20 41 52 50 73 20 66 6f 72 20 65 61 63 68 | bnet,.and.have.the.ARPs.for.each |
46400 | 20 69 6e 74 65 72 66 61 63 65 20 62 65 20 61 6e 73 77 65 72 65 64 20 62 61 73 65 64 20 6f 6e 20 | .interface.be.answered.based.on. |
46420 | 77 68 65 74 68 65 72 20 6f 72 20 6e 6f 74 20 74 68 65 20 6b 65 72 6e 65 6c 20 77 6f 75 6c 64 20 | whether.or.not.the.kernel.would. |
46440 | 72 6f 75 74 65 20 61 20 70 61 63 6b 65 74 20 66 72 6f 6d 20 74 68 65 20 41 52 50 27 64 20 49 50 | route.a.packet.from.the.ARP'd.IP |
46460 | 20 6f 75 74 20 74 68 61 74 20 69 6e 74 65 72 66 61 63 65 20 28 74 68 65 72 65 66 6f 72 65 20 79 | .out.that.interface.(therefore.y |
46480 | 6f 75 20 6d 75 73 74 20 75 73 65 20 73 6f 75 72 63 65 20 62 61 73 65 64 20 72 6f 75 74 69 6e 67 | ou.must.use.source.based.routing |
464a0 | 20 66 6f 72 20 74 68 69 73 20 74 6f 20 77 6f 72 6b 29 2e 00 49 66 20 6f 70 74 69 6f 6e 61 6c 20 | .for.this.to.work)..If.optional. |
464c0 | 70 72 6f 66 69 6c 65 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 75 73 65 64 2c 20 73 65 6c 65 63 | profile.parameter.is.used,.selec |
464e0 | 74 20 61 20 42 46 44 20 70 72 6f 66 69 6c 65 20 66 6f 72 20 74 68 65 20 42 46 44 20 73 65 73 73 | t.a.BFD.profile.for.the.BFD.sess |
46500 | 69 6f 6e 73 20 63 72 65 61 74 65 64 20 76 69 61 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e | ions.created.via.this.interface. |
46520 | 00 49 66 20 73 65 74 20 74 68 65 20 6b 65 72 6e 65 6c 20 63 61 6e 20 72 65 73 70 6f 6e 64 20 74 | .If.set.the.kernel.can.respond.t |
46540 | 6f 20 61 72 70 20 72 65 71 75 65 73 74 73 20 77 69 74 68 20 61 64 64 72 65 73 73 65 73 20 66 72 | o.arp.requests.with.addresses.fr |
46560 | 6f 6d 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 68 69 73 20 6d 61 79 20 73 65 | om.other.interfaces..This.may.se |
46580 | 65 6d 20 77 72 6f 6e 67 20 62 75 74 20 69 74 20 75 73 75 61 6c 6c 79 20 6d 61 6b 65 73 20 73 65 | em.wrong.but.it.usually.makes.se |
465a0 | 6e 73 65 2c 20 62 65 63 61 75 73 65 20 69 74 20 69 6e 63 72 65 61 73 65 73 20 74 68 65 20 63 68 | nse,.because.it.increases.the.ch |
465c0 | 61 6e 63 65 20 6f 66 20 73 75 63 63 65 73 73 66 75 6c 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e | ance.of.successful.communication |
465e0 | 2e 20 49 50 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 6f 77 6e 65 64 20 62 79 20 74 68 65 20 | ..IP.addresses.are.owned.by.the. |
46600 | 63 6f 6d 70 6c 65 74 65 20 68 6f 73 74 20 6f 6e 20 4c 69 6e 75 78 2c 20 6e 6f 74 20 62 79 20 70 | complete.host.on.Linux,.not.by.p |
46620 | 61 72 74 69 63 75 6c 61 72 20 69 6e 74 65 72 66 61 63 65 73 2e 20 4f 6e 6c 79 20 66 6f 72 20 6d | articular.interfaces..Only.for.m |
46640 | 6f 72 65 20 63 6f 6d 70 6c 65 78 20 73 65 74 75 70 73 20 6c 69 6b 65 20 6c 6f 61 64 2d 62 61 6c | ore.complex.setups.like.load-bal |
46660 | 61 6e 63 69 6e 67 2c 20 64 6f 65 73 20 74 68 69 73 20 62 65 68 61 76 69 6f 75 72 20 63 61 75 73 | ancing,.does.this.behaviour.caus |
46680 | 65 20 70 72 6f 62 6c 65 6d 73 2e 00 49 66 20 73 65 74 2c 20 49 50 76 34 20 64 69 72 65 63 74 65 | e.problems..If.set,.IPv4.directe |
466a0 | 64 20 62 72 6f 61 64 63 61 73 74 20 66 6f 72 77 61 72 64 69 6e 67 20 77 69 6c 6c 20 62 65 20 63 | d.broadcast.forwarding.will.be.c |
466c0 | 6f 6d 70 6c 65 74 65 6c 79 20 64 69 73 61 62 6c 65 64 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 | ompletely.disabled.regardless.of |
466e0 | 20 77 68 65 74 68 65 72 20 70 65 72 2d 69 6e 74 65 72 66 61 63 65 20 64 69 72 65 63 74 65 64 20 | .whether.per-interface.directed. |
46700 | 62 72 6f 61 64 63 61 73 74 20 66 6f 72 77 61 72 64 69 6e 67 20 69 73 20 65 6e 61 62 6c 65 64 20 | broadcast.forwarding.is.enabled. |
46720 | 6f 72 20 6e 6f 74 2e 00 49 66 20 73 75 66 66 69 78 20 69 73 20 6f 6d 69 74 74 65 64 2c 20 6d 69 | or.not..If.suffix.is.omitted,.mi |
46740 | 6e 75 74 65 73 20 61 72 65 20 69 6d 70 6c 69 65 64 2e 00 49 66 20 74 68 65 20 3a 63 66 67 63 6d | nutes.are.implied..If.the.:cfgcm |
46760 | 64 3a 60 6e 6f 2d 70 72 65 70 65 6e 64 60 20 61 74 74 72 69 62 75 74 65 20 69 73 20 73 70 65 63 | d:`no-prepend`.attribute.is.spec |
46780 | 69 66 69 65 64 2c 20 74 68 65 6e 20 74 68 65 20 73 75 70 70 6c 69 65 64 20 6c 6f 63 61 6c 2d 61 | ified,.then.the.supplied.local-a |
467a0 | 73 20 69 73 20 6e 6f 74 20 70 72 65 70 65 6e 64 65 64 20 74 6f 20 74 68 65 20 72 65 63 65 69 76 | s.is.not.prepended.to.the.receiv |
467c0 | 65 64 20 41 53 5f 50 41 54 48 2e 00 49 66 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 72 65 70 6c | ed.AS_PATH..If.the.:cfgcmd:`repl |
467e0 | 61 63 65 2d 61 73 60 20 61 74 74 72 69 62 75 74 65 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 | ace-as`.attribute.is.specified,. |
46800 | 74 68 65 6e 20 6f 6e 6c 79 20 74 68 65 20 73 75 70 70 6c 69 65 64 20 6c 6f 63 61 6c 2d 61 73 20 | then.only.the.supplied.local-as. |
46820 | 69 73 20 70 72 65 70 65 6e 64 65 64 20 74 6f 20 74 68 65 20 41 53 5f 50 41 54 48 20 77 68 65 6e | is.prepended.to.the.AS_PATH.when |
46840 | 20 74 72 61 6e 73 6d 69 74 74 69 6e 67 20 6c 6f 63 61 6c 2d 72 6f 75 74 65 20 75 70 64 61 74 65 | .transmitting.local-route.update |
46860 | 73 20 74 6f 20 74 68 69 73 20 70 65 65 72 2e 00 49 66 20 74 68 65 20 41 52 50 20 74 61 62 6c 65 | s.to.this.peer..If.the.ARP.table |
46880 | 20 61 6c 72 65 61 64 79 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 | .already.contains.the.IP.address |
468a0 | 20 6f 66 20 74 68 65 20 67 72 61 74 75 69 74 6f 75 73 20 61 72 70 20 66 72 61 6d 65 2c 20 74 68 | .of.the.gratuitous.arp.frame,.th |
468c0 | 65 20 61 72 70 20 74 61 62 6c 65 20 77 69 6c 6c 20 62 65 20 75 70 64 61 74 65 64 20 72 65 67 61 | e.arp.table.will.be.updated.rega |
468e0 | 72 64 6c 65 73 73 20 69 66 20 74 68 69 73 20 73 65 74 74 69 6e 67 20 69 73 20 6f 6e 20 6f 72 20 | rdless.if.this.setting.is.on.or. |
46900 | 6f 66 66 2e 00 49 66 20 74 68 65 20 41 53 2d 50 61 74 68 20 66 6f 72 20 74 68 65 20 72 6f 75 74 | off..If.the.AS-Path.for.the.rout |
46920 | 65 20 68 61 73 20 61 20 70 72 69 76 61 74 65 20 41 53 4e 20 62 65 74 77 65 65 6e 20 70 75 62 6c | e.has.a.private.ASN.between.publ |
46940 | 69 63 20 41 53 4e 73 2c 20 69 74 20 69 73 20 61 73 73 75 6d 65 64 20 74 68 61 74 20 74 68 69 73 | ic.ASNs,.it.is.assumed.that.this |
46960 | 20 69 73 20 61 20 64 65 73 69 67 6e 20 63 68 6f 69 63 65 2c 20 61 6e 64 20 74 68 65 20 70 72 69 | .is.a.design.choice,.and.the.pri |
46980 | 76 61 74 65 20 41 53 4e 20 69 73 20 6e 6f 74 20 72 65 6d 6f 76 65 64 2e 00 49 66 20 74 68 65 20 | vate.ASN.is.not.removed..If.the. |
469a0 | 41 53 2d 50 61 74 68 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 20 68 61 73 20 6f 6e 6c 79 20 70 | AS-Path.for.the.route.has.only.p |
469c0 | 72 69 76 61 74 65 20 41 53 4e 73 2c 20 74 68 65 20 70 72 69 76 61 74 65 20 41 53 4e 73 20 61 72 | rivate.ASNs,.the.private.ASNs.ar |
469e0 | 65 20 72 65 6d 6f 76 65 64 2e 00 49 66 20 74 68 65 20 49 50 20 70 72 65 66 69 78 20 6d 61 73 6b | e.removed..If.the.IP.prefix.mask |
46a00 | 20 69 73 20 70 72 65 73 65 6e 74 2c 20 69 74 20 64 69 72 65 63 74 73 20 6f 70 65 6e 6e 68 72 70 | .is.present,.it.directs.opennhrp |
46a20 | 20 74 6f 20 75 73 65 20 74 68 69 73 20 70 65 65 72 20 61 73 20 61 20 6e 65 78 74 20 68 6f 70 20 | .to.use.this.peer.as.a.next.hop. |
46a40 | 73 65 72 76 65 72 20 77 68 65 6e 20 73 65 6e 64 69 6e 67 20 52 65 73 6f 6c 75 74 69 6f 6e 20 52 | server.when.sending.Resolution.R |
46a60 | 65 71 75 65 73 74 73 20 6d 61 74 63 68 69 6e 67 20 74 68 69 73 20 73 75 62 6e 65 74 2e 00 49 66 | equests.matching.this.subnet..If |
46a80 | 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 73 65 6e 64 73 20 74 68 65 20 61 74 74 | .the.RADIUS.server.sends.the.att |
46aa0 | 72 69 62 75 74 65 20 60 60 44 65 6c 65 67 61 74 65 64 2d 49 50 76 36 2d 50 72 65 66 69 78 2d 50 | ribute.``Delegated-IPv6-Prefix-P |
46ac0 | 6f 6f 6c 60 60 2c 20 49 50 76 36 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 65 66 69 78 20 77 69 6c | ool``,.IPv6.delegation.pefix.wil |
46ae0 | 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 20 66 72 6f 6d 20 61 20 70 72 65 64 65 66 69 6e 65 64 | l.be.allocated.from.a.predefined |
46b00 | 20 49 50 76 36 20 70 6f 6f 6c 20 60 60 64 65 6c 65 67 61 74 65 60 60 20 77 68 6f 73 65 20 6e 61 | .IPv6.pool.``delegate``.whose.na |
46b20 | 6d 65 20 65 71 75 61 6c 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 76 61 6c 75 65 2e 00 49 | me.equals.the.attribute.value..I |
46b40 | 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 73 65 6e 64 73 20 74 68 65 20 61 74 | f.the.RADIUS.server.sends.the.at |
46b60 | 74 72 69 62 75 74 65 20 60 60 46 72 61 6d 65 64 2d 49 50 2d 41 64 64 72 65 73 73 60 60 20 74 68 | tribute.``Framed-IP-Address``.th |
46b80 | 65 6e 20 74 68 69 73 20 49 50 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 | en.this.IP.address.will.be.alloc |
46ba0 | 61 74 65 64 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 20 61 6e 64 20 74 68 65 20 6f 70 74 69 6f | ated.to.the.client.and.the.optio |
46bc0 | 6e 20 60 60 64 65 66 61 75 6c 74 2d 70 6f 6f 6c 60 60 20 77 69 74 68 69 6e 20 74 68 65 20 43 4c | n.``default-pool``.within.the.CL |
46be0 | 49 20 63 6f 6e 66 69 67 20 69 73 20 62 65 69 6e 67 20 69 67 6e 6f 72 65 64 2e 00 49 66 20 74 68 | I.config.is.being.ignored..If.th |
46c00 | 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 73 65 6e 64 73 20 74 68 65 20 61 74 74 72 69 62 | e.RADIUS.server.sends.the.attrib |
46c20 | 75 74 65 20 60 60 46 72 61 6d 65 64 2d 49 50 2d 41 64 64 72 65 73 73 60 60 20 74 68 65 6e 20 74 | ute.``Framed-IP-Address``.then.t |
46c40 | 68 69 73 20 49 50 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 | his.IP.address.will.be.allocated |
46c60 | 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 20 61 6e 64 20 74 68 65 20 6f 70 74 69 6f 6e 20 69 70 | .to.the.client.and.the.option.ip |
46c80 | 2d 70 6f 6f 6c 20 77 69 74 68 69 6e 20 74 68 65 20 43 4c 49 20 63 6f 6e 66 69 67 20 69 73 20 62 | -pool.within.the.CLI.config.is.b |
46ca0 | 65 69 6e 67 20 69 67 6e 6f 72 65 64 2e 00 49 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 | eing.ignored..If.the.RADIUS.serv |
46cc0 | 65 72 20 73 65 6e 64 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 60 60 46 72 61 6d 65 64 2d | er.sends.the.attribute.``Framed- |
46ce0 | 50 6f 6f 6c 60 60 2c 20 49 50 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 | Pool``,.IP.address.will.be.alloc |
46d00 | 61 74 65 64 20 66 72 6f 6d 20 61 20 70 72 65 64 65 66 69 6e 65 64 20 49 50 20 70 6f 6f 6c 20 77 | ated.from.a.predefined.IP.pool.w |
46d20 | 68 6f 73 65 20 6e 61 6d 65 20 65 71 75 61 6c 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 76 | hose.name.equals.the.attribute.v |
46d40 | 61 6c 75 65 2e 00 49 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 73 65 6e 64 73 | alue..If.the.RADIUS.server.sends |
46d60 | 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 60 60 53 74 61 74 65 66 75 6c 2d 49 50 76 36 2d 41 | .the.attribute.``Stateful-IPv6-A |
46d80 | 64 64 72 65 73 73 2d 50 6f 6f 6c 60 60 2c 20 49 50 76 36 20 61 64 64 72 65 73 73 20 77 69 6c 6c | ddress-Pool``,.IPv6.address.will |
46da0 | 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 20 66 72 6f 6d 20 61 20 70 72 65 64 65 66 69 6e 65 64 20 | .be.allocated.from.a.predefined. |
46dc0 | 49 50 76 36 20 70 6f 6f 6c 20 60 60 70 72 65 66 69 78 60 60 20 77 68 6f 73 65 20 6e 61 6d 65 20 | IPv6.pool.``prefix``.whose.name. |
46de0 | 65 71 75 61 6c 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 76 61 6c 75 65 2e 00 49 66 20 74 | equals.the.attribute.value..If.t |
46e00 | 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 75 73 65 73 20 74 68 65 20 61 74 74 72 69 62 | he.RADIUS.server.uses.the.attrib |
46e20 | 75 74 65 20 60 60 4e 41 53 2d 50 6f 72 74 2d 49 64 60 60 2c 20 70 70 70 20 74 75 6e 6e 65 6c 73 | ute.``NAS-Port-Id``,.ppp.tunnels |
46e40 | 20 77 69 6c 6c 20 62 65 20 72 65 6e 61 6d 65 64 2e 00 49 66 20 74 68 65 20 61 76 65 72 61 67 65 | .will.be.renamed..If.the.average |
46e60 | 20 71 75 65 75 65 20 73 69 7a 65 20 69 73 20 6c 6f 77 65 72 20 74 68 61 6e 20 74 68 65 20 2a 2a | .queue.size.is.lower.than.the.** |
46e80 | 6d 69 6e 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 2c 20 61 6e 20 61 72 72 69 76 69 6e 67 20 70 61 63 | min-threshold**,.an.arriving.pac |
46ea0 | 6b 65 74 20 77 69 6c 6c 20 62 65 20 70 6c 61 63 65 64 20 69 6e 20 74 68 65 20 71 75 65 75 65 2e | ket.will.be.placed.in.the.queue. |
46ec0 | 00 49 66 20 74 68 65 20 63 75 72 72 65 6e 74 20 71 75 65 75 65 20 73 69 7a 65 20 69 73 20 6c 61 | .If.the.current.queue.size.is.la |
46ee0 | 72 67 65 72 20 74 68 61 6e 20 2a 2a 71 75 65 75 65 2d 6c 69 6d 69 74 2a 2a 2c 20 74 68 65 6e 20 | rger.than.**queue-limit**,.then. |
46f00 | 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 62 65 20 64 72 6f 70 70 65 64 2e 20 54 68 65 20 61 76 65 | packets.will.be.dropped..The.ave |
46f20 | 72 61 67 65 20 71 75 65 75 65 20 73 69 7a 65 20 64 65 70 65 6e 64 73 20 6f 6e 20 69 74 73 20 66 | rage.queue.size.depends.on.its.f |
46f40 | 6f 72 6d 65 72 20 61 76 65 72 61 67 65 20 73 69 7a 65 20 61 6e 64 20 69 74 73 20 63 75 72 72 65 | ormer.average.size.and.its.curre |
46f60 | 6e 74 20 6f 6e 65 2e 00 49 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 | nt.one..If.the.interface.where.t |
46f80 | 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 69 73 20 70 61 72 74 20 6f | he.packet.was.received.is.part.o |
46fa0 | 66 20 61 20 62 72 69 64 67 65 2c 20 74 68 65 6e 20 70 61 63 6b 65 74 69 73 20 70 72 6f 63 65 73 | f.a.bridge,.then.packetis.proces |
46fc0 | 73 65 64 20 61 74 20 74 68 65 20 2a 2a 42 72 69 64 67 65 20 4c 61 79 65 72 2a 2a 2c 20 77 68 69 | sed.at.the.**Bridge.Layer**,.whi |
46fe0 | 63 68 20 63 6f 6e 74 61 69 6e 73 20 61 20 62 61 73 69 63 20 73 65 74 75 70 20 66 6f 72 20 62 72 | ch.contains.a.basic.setup.for.br |
47000 | 69 64 67 65 20 66 69 6c 74 65 72 69 6e 67 3a 00 49 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 | idge.filtering:.If.the.interface |
47020 | 20 77 68 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 69 | .where.the.packet.was.received.i |
47040 | 73 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c 20 74 68 65 6e 20 74 68 65 20 70 61 63 | s.part.of.a.bridge,.then.the.pac |
47060 | 6b 65 74 20 69 73 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 2a 2a 42 72 69 64 67 65 | ket.is.processed.at.the.**Bridge |
47080 | 20 4c 61 79 65 72 2a 2a 2c 20 77 68 69 63 68 20 63 6f 6e 74 61 69 6e 73 20 61 20 62 61 73 69 63 | .Layer**,.which.contains.a.basic |
470a0 | 20 73 65 74 75 70 20 66 6f 72 20 62 72 69 64 67 65 20 66 69 6c 74 65 72 69 6e 67 3a 00 49 66 20 | .setup.for.bridge.filtering:.If. |
470c0 | 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 | the.interface.where.the.packet.w |
470e0 | 61 73 20 72 65 63 65 69 76 65 64 20 69 73 6e 27 74 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 | as.received.isn't.part.of.a.brid |
47100 | 67 65 2c 20 74 68 65 6e 20 70 61 63 6b 65 74 69 73 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 | ge,.then.packetis.processed.at.t |
47120 | 68 65 20 2a 2a 49 50 20 4c 61 79 65 72 2a 2a 3a 00 49 66 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c | he.**IP.Layer**:.If.the.protocol |
47140 | 20 69 73 20 49 50 76 36 20 74 68 65 6e 20 74 68 65 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 | .is.IPv6.then.the.source.and.des |
47160 | 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 66 69 72 73 74 20 68 61 73 | tination.addresses.are.first.has |
47180 | 68 65 64 20 75 73 69 6e 67 20 69 70 76 36 5f 61 64 64 72 5f 68 61 73 68 2e 00 49 66 20 74 68 65 | hed.using.ipv6_addr_hash..If.the |
471a0 | 20 73 74 61 74 69 63 61 6c 6c 79 20 6d 61 70 70 65 64 20 70 65 65 72 20 69 73 20 72 75 6e 6e 69 | .statically.mapped.peer.is.runni |
471c0 | 6e 67 20 43 69 73 63 6f 20 49 4f 53 2c 20 73 70 65 63 69 66 79 20 74 68 65 20 63 69 73 63 6f 20 | ng.Cisco.IOS,.specify.the.cisco. |
471e0 | 6b 65 79 77 6f 72 64 2e 20 49 74 20 69 73 20 75 73 65 64 20 74 6f 20 66 69 78 20 73 74 61 74 69 | keyword..It.is.used.to.fix.stati |
47200 | 63 61 6c 6c 79 20 74 68 65 20 52 65 67 69 73 74 72 61 74 69 6f 6e 20 52 65 71 75 65 73 74 20 49 | cally.the.Registration.Request.I |
47220 | 44 20 73 6f 20 74 68 61 74 20 61 20 6d 61 74 63 68 69 6e 67 20 50 75 72 67 65 20 52 65 71 75 65 | D.so.that.a.matching.Purge.Reque |
47240 | 73 74 20 63 61 6e 20 62 65 20 73 65 6e 74 20 69 66 20 4e 42 4d 41 20 61 64 64 72 65 73 73 20 68 | st.can.be.sent.if.NBMA.address.h |
47260 | 61 73 20 63 68 61 6e 67 65 64 2e 20 54 68 69 73 20 69 73 20 74 6f 20 77 6f 72 6b 20 61 72 6f 75 | as.changed..This.is.to.work.arou |
47280 | 6e 64 20 62 72 6f 6b 65 6e 20 49 4f 53 20 77 68 69 63 68 20 72 65 71 75 69 72 65 73 20 50 75 72 | nd.broken.IOS.which.requires.Pur |
472a0 | 67 65 20 52 65 71 75 65 73 74 20 49 44 20 74 6f 20 6d 61 74 63 68 20 74 68 65 20 6f 72 69 67 69 | ge.Request.ID.to.match.the.origi |
472c0 | 6e 61 6c 20 52 65 67 69 73 74 72 61 74 69 6f 6e 20 52 65 71 75 65 73 74 20 49 44 2e 00 49 66 20 | nal.Registration.Request.ID..If. |
472e0 | 74 68 65 20 73 79 73 74 65 6d 20 64 65 74 65 63 74 73 20 61 6e 20 75 6e 63 6f 6e 66 69 67 75 72 | the.system.detects.an.unconfigur |
47300 | 65 64 20 77 69 72 65 6c 65 73 73 20 64 65 76 69 63 65 2c 20 69 74 20 77 69 6c 6c 20 62 65 20 61 | ed.wireless.device,.it.will.be.a |
47320 | 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 64 64 65 64 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 | utomatically.added.the.configura |
47340 | 74 69 6f 6e 20 74 72 65 65 2c 20 73 70 65 63 69 66 79 69 6e 67 20 61 6e 79 20 64 65 74 65 63 74 | tion.tree,.specifying.any.detect |
47360 | 65 64 20 73 65 74 74 69 6e 67 73 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 74 73 20 4d 41 | ed.settings.(for.example,.its.MA |
47380 | 43 20 61 64 64 72 65 73 73 29 20 61 6e 64 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 72 75 6e | C.address).and.configured.to.run |
473a0 | 20 69 6e 20 6d 6f 6e 69 74 6f 72 20 6d 6f 64 65 2e 00 49 66 20 74 68 65 20 74 61 62 6c 65 20 69 | .in.monitor.mode..If.the.table.i |
473c0 | 73 20 65 6d 70 74 79 20 61 6e 64 20 79 6f 75 20 68 61 76 65 20 61 20 77 61 72 6e 69 6e 67 20 6d | s.empty.and.you.have.a.warning.m |
473e0 | 65 73 73 61 67 65 2c 20 69 74 20 6d 65 61 6e 73 20 63 6f 6e 6e 74 72 61 63 6b 20 69 73 20 6e 6f | essage,.it.means.conntrack.is.no |
47400 | 74 20 65 6e 61 62 6c 65 64 2e 20 54 6f 20 65 6e 61 62 6c 65 20 63 6f 6e 6e 74 72 61 63 6b 2c 20 | t.enabled..To.enable.conntrack,. |
47420 | 6a 75 73 74 20 63 72 65 61 74 65 20 61 20 4e 41 54 20 6f 72 20 61 20 66 69 72 65 77 61 6c 6c 20 | just.create.a.NAT.or.a.firewall. |
47440 | 72 75 6c 65 2e 20 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 73 74 61 74 | rule..:cfgcmd:`set.firewall.stat |
47460 | 65 2d 70 6f 6c 69 63 79 20 65 73 74 61 62 6c 69 73 68 65 64 20 61 63 74 69 6f 6e 20 61 63 63 65 | e-policy.established.action.acce |
47480 | 70 74 60 00 49 66 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 66 72 65 65 20 61 64 64 72 65 73 73 | pt`.If.there.are.no.free.address |
474a0 | 65 73 20 62 75 74 20 74 68 65 72 65 20 61 72 65 20 61 62 61 6e 64 6f 6e 65 64 20 49 50 20 61 64 | es.but.there.are.abandoned.IP.ad |
474c0 | 64 72 65 73 73 65 73 2c 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 20 77 69 6c 6c 20 61 74 | dresses,.the.DHCP.server.will.at |
474e0 | 74 65 6d 70 74 20 74 6f 20 72 65 63 6c 61 69 6d 20 61 6e 20 61 62 61 6e 64 6f 6e 65 64 20 49 50 | tempt.to.reclaim.an.abandoned.IP |
47500 | 20 61 64 64 72 65 73 73 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 76 61 6c 75 65 | .address.regardless.of.the.value |
47520 | 20 6f 66 20 61 62 61 6e 64 6f 6e 2d 6c 65 61 73 65 2d 74 69 6d 65 2e 00 49 66 20 74 68 65 72 65 | .of.abandon-lease-time..If.there |
47540 | 20 69 73 20 53 4e 41 54 20 72 75 6c 65 73 20 6f 6e 20 65 74 68 31 2c 20 6e 65 65 64 20 74 6f 20 | .is.SNAT.rules.on.eth1,.need.to. |
47560 | 61 64 64 20 65 78 63 6c 75 64 65 20 72 75 6c 65 00 49 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | add.exclude.rule.If.this.command |
47580 | 20 69 73 20 69 6e 76 6f 6b 65 64 20 66 72 6f 6d 20 63 6f 6e 66 69 67 75 72 65 20 6d 6f 64 65 20 | .is.invoked.from.configure.mode. |
475a0 | 77 69 74 68 20 74 68 65 20 60 60 72 75 6e 60 60 20 70 72 65 66 69 78 20 74 68 65 20 6b 65 79 20 | with.the.``run``.prefix.the.key. |
475c0 | 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 69 6e 73 74 61 6c 6c 65 64 20 74 6f 20 74 68 | is.automatically.installed.to.th |
475e0 | 65 20 61 70 70 72 6f 70 72 69 61 74 65 20 69 6e 74 65 72 66 61 63 65 3a 00 49 66 20 74 68 69 73 | e.appropriate.interface:.If.this |
47600 | 20 69 73 20 73 65 74 20 74 68 65 20 72 65 6c 61 79 20 61 67 65 6e 74 20 77 69 6c 6c 20 69 6e 73 | .is.set.the.relay.agent.will.ins |
47620 | 65 72 74 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 49 44 2e 20 54 68 69 73 20 6f 70 74 69 6f | ert.the.interface.ID..This.optio |
47640 | 6e 20 69 73 20 73 65 74 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 69 66 20 6d 6f 72 65 20 74 | n.is.set.automatically.if.more.t |
47660 | 68 61 6e 20 6f 6e 65 20 6c 69 73 74 65 6e 69 6e 67 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 | han.one.listening.interfaces.are |
47680 | 20 69 6e 20 75 73 65 2e 00 49 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 65 6e 61 62 6c | .in.use..If.this.option.is.enabl |
476a0 | 65 64 2c 20 74 68 65 6e 20 74 68 65 20 61 6c 72 65 61 64 79 2d 73 65 6c 65 63 74 65 64 20 63 68 | ed,.then.the.already-selected.ch |
476c0 | 65 63 6b 2c 20 77 68 65 72 65 20 61 6c 72 65 61 64 79 20 73 65 6c 65 63 74 65 64 20 65 42 47 50 | eck,.where.already.selected.eBGP |
476e0 | 20 72 6f 75 74 65 73 20 61 72 65 20 70 72 65 66 65 72 72 65 64 2c 20 69 73 20 73 6b 69 70 70 65 | .routes.are.preferred,.is.skippe |
47700 | 64 2e 00 49 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 73 70 65 63 69 66 69 65 64 20 61 | d..If.this.option.is.specified.a |
47720 | 6e 64 20 69 73 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 30 2c 20 74 68 65 6e 20 74 68 65 20 50 | nd.is.greater.than.0,.then.the.P |
47740 | 50 50 20 6d 6f 64 75 6c 65 20 77 69 6c 6c 20 73 65 6e 64 20 4c 43 50 20 70 69 6e 67 73 20 6f 66 | PP.module.will.send.LCP.pings.of |
47760 | 20 74 68 65 20 65 63 68 6f 20 72 65 71 75 65 73 74 20 65 76 65 72 79 20 60 3c 69 6e 74 65 72 76 | .the.echo.request.every.`<interv |
47780 | 61 6c 3e 60 20 73 65 63 6f 6e 64 73 2e 00 49 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 | al>`.seconds..If.this.option.is. |
477a0 | 73 70 65 63 69 66 69 65 64 20 61 6e 64 20 69 73 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 30 2c | specified.and.is.greater.than.0, |
477c0 | 20 74 68 65 6e 20 74 68 65 20 50 50 50 20 6d 6f 64 75 6c 65 20 77 69 6c 6c 20 73 65 6e 64 20 4c | .then.the.PPP.module.will.send.L |
477e0 | 43 50 20 70 69 6e 67 73 20 6f 66 20 74 68 65 20 65 63 68 6f 20 72 65 71 75 65 73 74 20 65 76 65 | CP.pings.of.the.echo.request.eve |
47800 | 72 79 20 60 3c 69 6e 74 65 72 76 61 6c 3e 60 20 73 65 63 6f 6e 64 73 2e 20 44 65 66 61 75 6c 74 | ry.`<interval>`.seconds..Default |
47820 | 20 76 61 6c 75 65 20 69 73 20 2a 2a 33 30 2a 2a 2e 00 49 66 20 74 68 69 73 20 6f 70 74 69 6f 6e | .value.is.**30**..If.this.option |
47840 | 20 69 73 20 75 6e 73 65 74 20 28 64 65 66 61 75 6c 74 29 2c 20 69 6e 63 6f 6d 69 6e 67 20 49 50 | .is.unset.(default),.incoming.IP |
47860 | 20 64 69 72 65 63 74 65 64 20 62 72 6f 61 64 63 61 73 74 20 70 61 63 6b 65 74 73 20 77 69 6c 6c | .directed.broadcast.packets.will |
47880 | 20 6e 6f 74 20 62 65 20 66 6f 72 77 61 72 64 65 64 2e 00 49 66 20 74 68 69 73 20 6f 70 74 69 6f | .not.be.forwarded..If.this.optio |
478a0 | 6e 20 69 73 20 75 6e 73 65 74 20 28 64 65 66 61 75 6c 74 29 2c 20 72 65 70 6c 79 20 66 6f 72 20 | n.is.unset.(default),.reply.for. |
478c0 | 61 6e 79 20 6c 6f 63 61 6c 20 74 61 72 67 65 74 20 49 50 20 61 64 64 72 65 73 73 2c 20 63 6f 6e | any.local.target.IP.address,.con |
478e0 | 66 69 67 75 72 65 64 20 6f 6e 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 2e 00 49 66 20 74 68 69 | figured.on.any.interface..If.thi |
47900 | 73 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 6e 6f 74 20 73 65 74 20 6f 72 20 30 2c 20 61 6e 20 | s.parameter.is.not.set.or.0,.an. |
47920 | 6f 6e 2d 64 65 6d 61 6e 64 20 6c 69 6e 6b 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 74 61 6b 65 6e | on-demand.link.will.not.be.taken |
47940 | 20 64 6f 77 6e 20 77 68 65 6e 20 69 74 20 69 73 20 69 64 6c 65 20 61 6e 64 20 61 66 74 65 72 20 | .down.when.it.is.idle.and.after. |
47960 | 74 68 65 20 69 6e 69 74 69 61 6c 20 65 73 74 61 62 6c 69 73 68 6d 65 6e 74 20 6f 66 20 74 68 65 | the.initial.establishment.of.the |
47980 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 49 74 20 77 69 6c 6c 20 73 74 61 79 20 75 70 20 66 6f 72 | .connection..It.will.stay.up.for |
479a0 | 65 76 65 72 2e 00 49 66 20 74 68 69 73 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 6e 6f 74 20 73 | ever..If.this.parameter.is.not.s |
479c0 | 65 74 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 68 6f 6c 64 6f 66 66 20 74 69 6d 65 20 69 73 20 | et,.the.default.holdoff.time.is. |
479e0 | 33 30 20 73 65 63 6f 6e 64 73 2e 00 49 66 20 75 6e 73 65 74 2c 20 69 6e 63 6f 6d 69 6e 67 20 63 | 30.seconds..If.unset,.incoming.c |
47a00 | 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 | onnections.to.the.RADIUS.server. |
47a20 | 77 69 6c 6c 20 75 73 65 20 74 68 65 20 6e 65 61 72 65 73 74 20 69 6e 74 65 72 66 61 63 65 20 61 | will.use.the.nearest.interface.a |
47a40 | 64 64 72 65 73 73 20 70 6f 69 6e 74 69 6e 67 20 74 6f 77 61 72 64 73 20 74 68 65 20 73 65 72 76 | ddress.pointing.towards.the.serv |
47a60 | 65 72 20 2d 20 6d 61 6b 69 6e 67 20 69 74 20 65 72 72 6f 72 20 70 72 6f 6e 65 20 6f 6e 20 65 2e | er.-.making.it.error.prone.on.e. |
47a80 | 67 2e 20 4f 53 50 46 20 6e 65 74 77 6f 72 6b 73 20 77 68 65 6e 20 61 20 6c 69 6e 6b 20 66 61 69 | g..OSPF.networks.when.a.link.fai |
47aa0 | 6c 73 20 61 6e 64 20 61 20 62 61 63 6b 75 70 20 72 6f 75 74 65 20 69 73 20 74 61 6b 65 6e 2e 00 | ls.and.a.backup.route.is.taken.. |
47ac0 | 49 66 20 75 6e 73 65 74 2c 20 69 6e 63 6f 6d 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 | If.unset,.incoming.connections.t |
47ae0 | 6f 20 74 68 65 20 54 41 43 41 43 53 20 73 65 72 76 65 72 20 77 69 6c 6c 20 75 73 65 20 74 68 65 | o.the.TACACS.server.will.use.the |
47b00 | 20 6e 65 61 72 65 73 74 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 65 73 73 20 70 6f 69 6e 74 | .nearest.interface.address.point |
47b20 | 69 6e 67 20 74 6f 77 61 72 64 73 20 74 68 65 20 73 65 72 76 65 72 20 2d 20 6d 61 6b 69 6e 67 20 | ing.towards.the.server.-.making. |
47b40 | 69 74 20 65 72 72 6f 72 20 70 72 6f 6e 65 20 6f 6e 20 65 2e 67 2e 20 4f 53 50 46 20 6e 65 74 77 | it.error.prone.on.e.g..OSPF.netw |
47b60 | 6f 72 6b 73 20 77 68 65 6e 20 61 20 6c 69 6e 6b 20 66 61 69 6c 73 20 61 6e 64 20 61 20 62 61 63 | orks.when.a.link.fails.and.a.bac |
47b80 | 6b 75 70 20 72 6f 75 74 65 20 69 73 20 74 61 6b 65 6e 2e 00 49 66 20 79 6f 75 20 61 70 70 6c 79 | kup.route.is.taken..If.you.apply |
47ba0 | 20 61 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 61 6e 20 69 6e 64 69 76 69 64 75 61 6c 20 6e 65 | .a.parameter.to.an.individual.ne |
47bc0 | 69 67 68 62 6f 72 20 49 50 20 61 64 64 72 65 73 73 2c 20 79 6f 75 20 6f 76 65 72 72 69 64 65 20 | ighbor.IP.address,.you.override. |
47be0 | 74 68 65 20 61 63 74 69 6f 6e 20 64 65 66 69 6e 65 64 20 66 6f 72 20 61 20 70 65 65 72 20 67 72 | the.action.defined.for.a.peer.gr |
47c00 | 6f 75 70 20 74 68 61 74 20 69 6e 63 6c 75 64 65 73 20 74 68 61 74 20 49 50 20 61 64 64 72 65 73 | oup.that.includes.that.IP.addres |
47c20 | 73 2e 00 49 66 20 79 6f 75 20 61 72 65 20 61 20 68 61 63 6b 65 72 20 6f 72 20 77 61 6e 74 20 74 | s..If.you.are.a.hacker.or.want.t |
47c40 | 6f 20 74 72 79 20 6f 6e 20 79 6f 75 72 20 6f 77 6e 20 77 65 20 73 75 70 70 6f 72 74 20 70 61 73 | o.try.on.your.own.we.support.pas |
47c60 | 73 69 6e 67 20 72 61 77 20 4f 70 65 6e 56 50 4e 20 6f 70 74 69 6f 6e 73 20 74 6f 20 4f 70 65 6e | sing.raw.OpenVPN.options.to.Open |
47c80 | 56 50 4e 2e 00 49 66 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 20 56 52 | VPN..If.you.are.configuring.a.VR |
47ca0 | 46 20 66 6f 72 20 6d 61 6e 61 67 65 6d 65 6e 74 20 70 75 72 70 6f 73 65 73 2c 20 74 68 65 72 65 | F.for.management.purposes,.there |
47cc0 | 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 6e 6f 20 77 61 79 20 74 6f 20 66 6f 72 63 65 20 73 79 | .is.currently.no.way.to.force.sy |
47ce0 | 73 74 65 6d 20 44 4e 53 20 74 72 61 66 66 69 63 20 76 69 61 20 61 20 73 70 65 63 69 66 69 63 20 | stem.DNS.traffic.via.a.specific. |
47d00 | 56 52 46 2e 00 49 66 20 79 6f 75 20 61 72 65 20 6e 65 77 20 74 6f 20 74 68 65 73 65 20 72 6f 75 | VRF..If.you.are.new.to.these.rou |
47d20 | 74 69 6e 67 20 73 65 63 75 72 69 74 79 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 74 68 65 6e 20 | ting.security.technologies.then. |
47d40 | 74 68 65 72 65 20 69 73 20 61 6e 20 60 65 78 63 65 6c 6c 65 6e 74 20 67 75 69 64 65 20 74 6f 20 | there.is.an.`excellent.guide.to. |
47d60 | 52 50 4b 49 60 5f 20 62 79 20 4e 4c 6e 65 74 20 4c 61 62 73 20 77 68 69 63 68 20 77 69 6c 6c 20 | RPKI`_.by.NLnet.Labs.which.will. |
47d80 | 67 65 74 20 79 6f 75 20 75 70 20 74 6f 20 73 70 65 65 64 20 76 65 72 79 20 71 75 69 63 6b 6c 79 | get.you.up.to.speed.very.quickly |
47da0 | 2e 20 54 68 65 69 72 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 65 78 70 6c 61 69 6e 73 20 65 | ..Their.documentation.explains.e |
47dc0 | 76 65 72 79 74 68 69 6e 67 20 66 72 6f 6d 20 77 68 61 74 20 52 50 4b 49 20 69 73 20 74 6f 20 64 | verything.from.what.RPKI.is.to.d |
47de0 | 65 70 6c 6f 79 69 6e 67 20 69 74 20 69 6e 20 70 72 6f 64 75 63 74 69 6f 6e 2e 20 49 74 20 61 6c | eploying.it.in.production..It.al |
47e00 | 73 6f 20 68 61 73 20 73 6f 6d 65 20 60 68 65 6c 70 20 61 6e 64 20 6f 70 65 72 61 74 69 6f 6e 61 | so.has.some.`help.and.operationa |
47e20 | 6c 20 67 75 69 64 61 6e 63 65 60 5f 20 69 6e 63 6c 75 64 69 6e 67 20 22 57 68 61 74 20 63 61 6e | l.guidance`_.including."What.can |
47e40 | 20 49 20 64 6f 20 61 62 6f 75 74 20 6d 79 20 72 6f 75 74 65 20 68 61 76 69 6e 67 20 61 6e 20 49 | .I.do.about.my.route.having.an.I |
47e60 | 6e 76 61 6c 69 64 20 73 74 61 74 65 3f 22 00 49 66 20 79 6f 75 20 61 72 65 20 72 65 73 70 6f 6e | nvalid.state?".If.you.are.respon |
47e80 | 73 69 62 6c 65 20 66 6f 72 20 74 68 65 20 67 6c 6f 62 61 6c 20 61 64 64 72 65 73 73 65 73 20 61 | sible.for.the.global.addresses.a |
47ea0 | 73 73 69 67 6e 65 64 20 74 6f 20 79 6f 75 72 20 6e 65 74 77 6f 72 6b 2c 20 70 6c 65 61 73 65 20 | ssigned.to.your.network,.please. |
47ec0 | 6d 61 6b 65 20 73 75 72 65 20 74 68 61 74 20 79 6f 75 72 20 70 72 65 66 69 78 65 73 20 68 61 76 | make.sure.that.your.prefixes.hav |
47ee0 | 65 20 52 4f 41 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 6d 20 74 6f 20 61 | e.ROAs.associated.with.them.to.a |
47f00 | 76 6f 69 64 20 62 65 69 6e 67 20 60 6e 6f 74 66 6f 75 6e 64 60 20 62 79 20 52 50 4b 49 2e 20 46 | void.being.`notfound`.by.RPKI..F |
47f20 | 6f 72 20 6d 6f 73 74 20 41 53 4e 73 20 74 68 69 73 20 77 69 6c 6c 20 69 6e 76 6f 6c 76 65 20 70 | or.most.ASNs.this.will.involve.p |
47f40 | 75 62 6c 69 73 68 69 6e 67 20 52 4f 41 73 20 76 69 61 20 79 6f 75 72 20 3a 61 62 62 72 3a 60 52 | ublishing.ROAs.via.your.:abbr:`R |
47f60 | 49 52 20 28 52 65 67 69 6f 6e 61 6c 20 49 6e 74 65 72 6e 65 74 20 52 65 67 69 73 74 72 79 29 60 | IR.(Regional.Internet.Registry)` |
47f80 | 20 28 52 49 50 45 20 4e 43 43 2c 20 41 50 4e 49 43 2c 20 41 52 49 4e 2c 20 4c 41 43 4e 49 43 20 | .(RIPE.NCC,.APNIC,.ARIN,.LACNIC. |
47fa0 | 6f 72 20 41 46 52 49 4e 49 43 29 2c 20 61 6e 64 20 69 73 20 73 6f 6d 65 74 68 69 6e 67 20 79 6f | or.AFRINIC),.and.is.something.yo |
47fc0 | 75 20 61 72 65 20 65 6e 63 6f 75 72 61 67 65 64 20 74 6f 20 64 6f 20 77 68 65 6e 65 76 65 72 20 | u.are.encouraged.to.do.whenever. |
47fe0 | 79 6f 75 20 70 6c 61 6e 20 74 6f 20 61 6e 6e 6f 75 6e 63 65 20 61 64 64 72 65 73 73 65 73 20 69 | you.plan.to.announce.addresses.i |
48000 | 6e 74 6f 20 74 68 65 20 44 46 5a 2e 00 49 66 20 79 6f 75 20 61 72 65 20 75 73 69 6e 67 20 46 51 | nto.the.DFZ..If.you.are.using.FQ |
48020 | 2d 43 6f 44 65 6c 20 65 6d 62 65 64 64 65 64 20 69 6e 74 6f 20 53 68 61 70 65 72 5f 20 61 6e 64 | -CoDel.embedded.into.Shaper_.and |
48040 | 20 79 6f 75 20 68 61 76 65 20 6c 61 72 67 65 20 72 61 74 65 73 20 28 31 30 30 4d 62 69 74 20 61 | .you.have.large.rates.(100Mbit.a |
48060 | 6e 64 20 61 62 6f 76 65 29 2c 20 79 6f 75 20 6d 61 79 20 63 6f 6e 73 69 64 65 72 20 69 6e 63 72 | nd.above),.you.may.consider.incr |
48080 | 65 61 73 69 6e 67 20 60 71 75 61 6e 74 75 6d 60 20 74 6f 20 38 30 30 30 20 6f 72 20 68 69 67 68 | easing.`quantum`.to.8000.or.high |
480a0 | 65 72 20 73 6f 20 74 68 61 74 20 74 68 65 20 73 63 68 65 64 75 6c 65 72 20 73 61 76 65 73 20 43 | er.so.that.the.scheduler.saves.C |
480c0 | 50 55 2e 00 49 66 20 79 6f 75 20 61 72 65 20 75 73 69 6e 67 20 4f 53 50 46 20 61 73 20 49 47 50 | PU..If.you.are.using.OSPF.as.IGP |
480e0 | 2c 20 61 6c 77 61 79 73 20 74 68 65 20 63 6c 6f 73 65 73 74 20 69 6e 74 65 72 66 61 63 65 20 63 | ,.always.the.closest.interface.c |
48100 | 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 69 73 | onnected.to.the.RADIUS.server.is |
48120 | 20 75 73 65 64 2e 20 57 69 74 68 20 56 79 4f 53 20 31 2e 32 20 79 6f 75 20 63 61 6e 20 62 69 6e | .used..With.VyOS.1.2.you.can.bin |
48140 | 64 20 61 6c 6c 20 6f 75 74 67 6f 69 6e 67 20 52 41 44 49 55 53 20 72 65 71 75 65 73 74 73 20 74 | d.all.outgoing.RADIUS.requests.t |
48160 | 6f 20 61 20 73 69 6e 67 6c 65 20 73 6f 75 72 63 65 20 49 50 20 65 2e 67 2e 20 74 68 65 20 6c 6f | o.a.single.source.IP.e.g..the.lo |
48180 | 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 2e 00 49 66 20 79 6f 75 20 61 72 65 20 75 73 69 | opback.interface..If.you.are.usi |
481a0 | 6e 67 20 4f 53 50 46 20 61 73 20 49 47 50 2c 20 61 6c 77 61 79 73 20 74 68 65 20 63 6c 6f 73 65 | ng.OSPF.as.IGP,.always.the.close |
481c0 | 73 74 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 52 41 | st.interface.connected.to.the.RA |
481e0 | 44 49 55 53 20 73 65 72 76 65 72 20 69 73 20 75 73 65 64 2e 20 59 6f 75 20 63 61 6e 20 62 69 6e | DIUS.server.is.used..You.can.bin |
48200 | 64 20 61 6c 6c 20 6f 75 74 67 6f 69 6e 67 20 52 41 44 49 55 53 20 72 65 71 75 65 73 74 73 20 74 | d.all.outgoing.RADIUS.requests.t |
48220 | 6f 20 61 20 73 69 6e 67 6c 65 20 73 6f 75 72 63 65 20 49 50 20 65 2e 67 2e 20 74 68 65 20 6c 6f | o.a.single.source.IP.e.g..the.lo |
48240 | 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 2e 00 49 66 20 79 6f 75 20 63 68 61 6e 67 65 20 | opback.interface..If.you.change. |
48260 | 74 68 65 20 64 65 66 61 75 6c 74 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6e 64 20 68 61 73 68 69 | the.default.encryption.and.hashi |
48280 | 6e 67 20 61 6c 67 6f 72 69 74 68 6d 73 2c 20 62 65 20 73 75 72 65 20 74 68 61 74 20 74 68 65 20 | ng.algorithms,.be.sure.that.the. |
482a0 | 6c 6f 63 61 6c 20 61 6e 64 20 72 65 6d 6f 74 65 20 65 6e 64 73 20 68 61 76 65 20 6d 61 74 63 68 | local.and.remote.ends.have.match |
482c0 | 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 2c 20 6f 74 68 65 72 77 69 73 65 20 74 68 | ing.configurations,.otherwise.th |
482e0 | 65 20 74 75 6e 6e 65 6c 20 77 69 6c 6c 20 6e 6f 74 20 63 6f 6d 65 20 75 70 2e 00 49 66 20 79 6f | e.tunnel.will.not.come.up..If.yo |
48300 | 75 20 63 68 6f 6f 73 65 20 61 6e 79 20 61 73 20 74 68 65 20 6f 70 74 69 6f 6e 20 74 68 61 74 20 | u.choose.any.as.the.option.that. |
48320 | 77 69 6c 6c 20 63 61 75 73 65 20 61 6c 6c 20 70 72 6f 74 6f 63 6f 6c 73 20 74 68 61 74 20 61 72 | will.cause.all.protocols.that.ar |
48340 | 65 20 73 65 6e 64 69 6e 67 20 72 6f 75 74 65 73 20 74 6f 20 7a 65 62 72 61 2e 00 49 66 20 79 6f | e.sending.routes.to.zebra..If.yo |
48360 | 75 20 63 6f 6e 66 69 67 75 72 65 20 61 20 63 6c 61 73 73 20 66 6f 72 20 2a 2a 56 6f 49 50 20 74 | u.configure.a.class.for.**VoIP.t |
48380 | 72 61 66 66 69 63 2a 2a 2c 20 64 6f 6e 27 74 20 67 69 76 65 20 69 74 20 61 6e 79 20 2a 63 65 69 | raffic**,.don't.give.it.any.*cei |
483a0 | 6c 69 6e 67 2a 2c 20 6f 74 68 65 72 77 69 73 65 20 6e 65 77 20 56 6f 49 50 20 63 61 6c 6c 73 20 | ling*,.otherwise.new.VoIP.calls. |
483c0 | 63 6f 75 6c 64 20 73 74 61 72 74 20 77 68 65 6e 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 61 76 61 | could.start.when.the.link.is.ava |
483e0 | 69 6c 61 62 6c 65 20 61 6e 64 20 67 65 74 20 73 75 64 64 65 6e 6c 79 20 64 72 6f 70 70 65 64 20 | ilable.and.get.suddenly.dropped. |
48400 | 77 68 65 6e 20 6f 74 68 65 72 20 63 6c 61 73 73 65 73 20 73 74 61 72 74 20 75 73 69 6e 67 20 74 | when.other.classes.start.using.t |
48420 | 68 65 69 72 20 61 73 73 69 67 6e 65 64 20 2a 62 61 6e 64 77 69 64 74 68 2a 20 73 68 61 72 65 2e | heir.assigned.*bandwidth*.share. |
48440 | 00 49 66 20 79 6f 75 20 65 6e 61 62 6c 65 20 74 68 69 73 2c 20 79 6f 75 20 77 69 6c 6c 20 70 72 | .If.you.enable.this,.you.will.pr |
48460 | 6f 62 61 62 6c 79 20 77 61 6e 74 20 74 6f 20 73 65 74 20 64 69 76 65 72 73 69 74 79 2d 66 61 63 | obably.want.to.set.diversity-fac |
48480 | 74 6f 72 20 61 6e 64 20 63 68 61 6e 6e 65 6c 20 62 65 6c 6f 77 2e 00 49 66 20 79 6f 75 20 65 6e | tor.and.channel.below..If.you.en |
484a0 | 74 65 72 20 61 20 76 61 6c 75 65 20 73 6d 61 6c 6c 65 72 20 74 68 61 6e 20 36 30 20 73 65 63 6f | ter.a.value.smaller.than.60.seco |
484c0 | 6e 64 73 20 62 65 20 61 77 61 72 65 20 74 68 61 74 20 74 68 69 73 20 63 61 6e 20 61 6e 64 20 77 | nds.be.aware.that.this.can.and.w |
484e0 | 69 6c 6c 20 61 66 66 65 63 74 20 63 6f 6e 76 65 72 67 65 6e 63 65 20 61 74 20 73 63 61 6c 65 2e | ill.affect.convergence.at.scale. |
48500 | 00 49 66 20 79 6f 75 20 66 65 65 6c 20 62 65 74 74 65 72 20 66 6f 72 77 61 72 64 69 6e 67 20 61 | .If.you.feel.better.forwarding.a |
48520 | 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 72 65 71 75 65 73 74 73 20 74 6f 20 79 6f | ll.authentication.requests.to.yo |
48540 | 75 72 20 65 6e 74 65 72 70 72 69 73 65 73 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2c 20 75 73 | ur.enterprises.RADIUS.server,.us |
48560 | 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 73 20 62 65 6c 6f 77 2e 00 49 66 20 79 6f 75 20 68 61 70 | e.the.commands.below..If.you.hap |
48580 | 70 65 6e 20 74 6f 20 72 75 6e 20 74 68 69 73 20 69 6e 20 61 20 76 69 72 74 75 61 6c 20 65 6e 76 | pen.to.run.this.in.a.virtual.env |
485a0 | 69 72 6f 6e 6d 65 6e 74 20 6c 69 6b 65 20 62 79 20 45 56 45 2d 4e 47 20 79 6f 75 20 6e 65 65 64 | ironment.like.by.EVE-NG.you.need |
485c0 | 20 74 6f 20 65 6e 73 75 72 65 20 79 6f 75 72 20 56 79 4f 53 20 4e 49 43 20 69 73 20 73 65 74 20 | .to.ensure.your.VyOS.NIC.is.set. |
485e0 | 74 6f 20 75 73 65 20 74 68 65 20 65 31 30 30 30 20 64 72 69 76 65 72 2e 20 55 73 69 6e 67 20 74 | to.use.the.e1000.driver..Using.t |
48600 | 68 65 20 64 65 66 61 75 6c 74 20 60 60 76 69 72 74 69 6f 2d 6e 65 74 2d 70 63 69 60 60 20 6f 72 | he.default.``virtio-net-pci``.or |
48620 | 20 74 68 65 20 60 60 76 6d 78 6e 65 74 33 60 60 20 64 72 69 76 65 72 20 77 69 6c 6c 20 6e 6f 74 | .the.``vmxnet3``.driver.will.not |
48640 | 20 77 6f 72 6b 2e 20 49 43 4d 50 20 6d 65 73 73 61 67 65 73 20 77 69 6c 6c 20 6e 6f 74 20 62 65 | .work..ICMP.messages.will.not.be |
48660 | 20 70 72 6f 70 65 72 6c 79 20 70 72 6f 63 65 73 73 65 64 2e 20 54 68 65 79 20 61 72 65 20 76 69 | .properly.processed..They.are.vi |
48680 | 73 69 62 6c 65 20 6f 6e 20 74 68 65 20 76 69 72 74 75 61 6c 20 77 69 72 65 20 62 75 74 20 77 69 | sible.on.the.virtual.wire.but.wi |
486a0 | 6c 6c 20 6e 6f 74 20 6d 61 6b 65 20 69 74 20 66 75 6c 6c 79 20 75 70 20 74 68 65 20 6e 65 74 77 | ll.not.make.it.fully.up.the.netw |
486c0 | 6f 72 6b 69 6e 67 20 73 74 61 63 6b 2e 00 49 66 20 79 6f 75 20 68 61 70 70 65 6e 20 74 6f 20 75 | orking.stack..If.you.happen.to.u |
486e0 | 73 65 20 53 6f 6c 61 72 57 69 6e 64 73 20 4f 72 69 6f 6e 20 61 73 20 4e 4d 53 20 79 6f 75 20 63 | se.SolarWinds.Orion.as.NMS.you.c |
48700 | 61 6e 20 61 6c 73 6f 20 75 73 65 20 74 68 65 20 44 65 76 69 63 65 20 54 65 6d 70 6c 61 74 65 73 | an.also.use.the.Device.Templates |
48720 | 20 4d 61 6e 61 67 65 6d 65 6e 74 2e 20 41 20 74 65 6d 70 6c 61 74 65 20 66 6f 72 20 56 79 4f 53 | .Management..A.template.for.VyOS |
48740 | 20 63 61 6e 20 62 65 20 65 61 73 69 6c 79 20 69 6d 70 6f 72 74 65 64 2e 00 49 66 20 79 6f 75 20 | .can.be.easily.imported..If.you. |
48760 | 68 61 70 70 65 6e 65 64 20 74 6f 20 75 73 65 20 61 20 43 69 73 63 6f 20 4e 4d 2d 31 36 41 20 2d | happened.to.use.a.Cisco.NM-16A.- |
48780 | 20 53 69 78 74 65 65 6e 20 50 6f 72 74 20 41 73 79 6e 63 20 4e 65 74 77 6f 72 6b 20 4d 6f 64 75 | .Sixteen.Port.Async.Network.Modu |
487a0 | 6c 65 20 6f 72 20 4e 4d 2d 33 32 41 20 2d 20 54 68 69 72 74 79 2d 74 77 6f 20 50 6f 72 74 20 41 | le.or.NM-32A.-.Thirty-two.Port.A |
487c0 | 73 79 6e 63 20 4e 65 74 77 6f 72 6b 20 4d 6f 64 75 6c 65 20 2d 20 74 68 69 73 20 69 73 20 79 6f | sync.Network.Module.-.this.is.yo |
487e0 | 75 72 20 56 79 4f 53 20 72 65 70 6c 61 63 65 6d 65 6e 74 2e 00 49 66 20 79 6f 75 20 68 61 76 65 | ur.VyOS.replacement..If.you.have |
48800 | 20 61 20 6c 6f 74 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 2c 20 61 6e 64 2f 6f 72 20 61 20 6c | .a.lot.of.interfaces,.and/or.a.l |
48820 | 6f 74 20 6f 66 20 73 75 62 6e 65 74 73 2c 20 74 68 65 6e 20 65 6e 61 62 6c 69 6e 67 20 4f 53 50 | ot.of.subnets,.then.enabling.OSP |
48840 | 46 20 76 69 61 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6d 61 79 20 72 65 73 75 6c 74 20 69 6e | F.via.this.command.may.result.in |
48860 | 20 61 20 73 6c 69 67 68 74 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 69 6d 70 72 6f 76 65 6d 65 6e | .a.slight.performance.improvemen |
48880 | 74 2e 00 49 66 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 68 65 20 60 49 | t..If.you.have.configured.the.`I |
488a0 | 4e 53 49 44 45 2d 4f 55 54 60 20 70 6f 6c 69 63 79 2c 20 79 6f 75 20 77 69 6c 6c 20 6e 65 65 64 | NSIDE-OUT`.policy,.you.will.need |
488c0 | 20 74 6f 20 61 64 64 20 61 64 64 69 74 69 6f 6e 61 6c 20 72 75 6c 65 73 20 74 6f 20 70 65 72 6d | .to.add.additional.rules.to.perm |
488e0 | 69 74 20 69 6e 62 6f 75 6e 64 20 4e 41 54 20 74 72 61 66 66 69 63 2e 00 49 66 20 79 6f 75 20 68 | it.inbound.NAT.traffic..If.you.h |
48900 | 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 61 64 64 72 65 73 73 65 73 20 63 6f 6e 66 69 67 75 72 65 | ave.multiple.addresses.configure |
48920 | 64 20 6f 6e 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 | d.on.a.particular.interface.and. |
48940 | 77 6f 75 6c 64 20 6c 69 6b 65 20 50 49 4d 20 74 6f 20 75 73 65 20 61 20 73 70 65 63 69 66 69 63 | would.like.PIM.to.use.a.specific |
48960 | 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 | .source.address.associated.with. |
48980 | 74 68 61 74 20 69 6e 74 65 72 66 61 63 65 2e 00 49 66 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 | that.interface..If.you.need.to.s |
489a0 | 61 6d 70 6c 65 20 61 6c 73 6f 20 65 67 72 65 73 73 20 74 72 61 66 66 69 63 2c 20 79 6f 75 20 6d | ample.also.egress.traffic,.you.m |
489c0 | 61 79 20 77 61 6e 74 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 65 67 72 65 73 73 20 66 6c 6f 77 | ay.want.to.configure.egress.flow |
489e0 | 2d 61 63 63 6f 75 6e 74 69 6e 67 3a 00 49 66 20 79 6f 75 20 6f 6e 6c 79 20 77 61 6e 74 20 74 6f | -accounting:.If.you.only.want.to |
48a00 | 20 63 68 65 63 6b 20 69 66 20 74 68 65 20 75 73 65 72 20 61 63 63 6f 75 6e 74 20 69 73 20 65 6e | .check.if.the.user.account.is.en |
48a20 | 61 62 6c 65 64 20 61 6e 64 20 63 61 6e 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 28 61 67 61 69 | abled.and.can.authenticate.(agai |
48a40 | 6e 73 74 20 74 68 65 20 70 72 69 6d 61 72 79 20 67 72 6f 75 70 29 20 74 68 65 20 66 6f 6c 6c 6f | nst.the.primary.group).the.follo |
48a60 | 77 69 6e 67 20 73 6e 69 70 70 65 64 20 69 73 20 73 75 66 66 69 63 69 65 6e 74 3a 00 49 66 20 79 | wing.snipped.is.sufficient:.If.y |
48a80 | 6f 75 20 73 65 74 20 61 20 63 75 73 74 6f 6d 20 52 41 44 49 55 53 20 61 74 74 72 69 62 75 74 65 | ou.set.a.custom.RADIUS.attribute |
48aa0 | 20 79 6f 75 20 6d 75 73 74 20 64 65 66 69 6e 65 20 69 74 20 6f 6e 20 62 6f 74 68 20 64 69 63 74 | .you.must.define.it.on.both.dict |
48ac0 | 69 6f 6e 61 72 69 65 73 20 61 74 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 61 6e 64 20 63 6c | ionaries.at.RADIUS.server.and.cl |
48ae0 | 69 65 6e 74 2c 20 77 68 69 63 68 20 69 73 20 74 68 65 20 76 79 6f 73 20 72 6f 75 74 65 72 20 69 | ient,.which.is.the.vyos.router.i |
48b00 | 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 2e 00 49 66 20 79 6f 75 20 73 65 74 20 61 20 63 75 73 74 | n.our.example..If.you.set.a.cust |
48b20 | 6f 6d 20 52 41 44 49 55 53 20 61 74 74 72 69 62 75 74 65 20 79 6f 75 20 6d 75 73 74 20 64 65 66 | om.RADIUS.attribute.you.must.def |
48b40 | 69 6e 65 20 69 74 20 6f 6e 20 62 6f 74 68 20 64 69 63 74 69 6f 6e 61 72 69 65 73 20 61 74 20 52 | ine.it.on.both.dictionaries.at.R |
48b60 | 41 44 49 55 53 20 73 65 72 76 65 72 20 61 6e 64 20 63 6c 69 65 6e 74 2e 00 49 66 20 79 6f 75 20 | ADIUS.server.and.client..If.you. |
48b80 | 75 73 65 20 55 53 42 20 74 6f 20 73 65 72 69 61 6c 20 63 6f 6e 76 65 72 74 65 72 73 20 66 6f 72 | use.USB.to.serial.converters.for |
48ba0 | 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 79 6f 75 72 20 56 79 4f 53 20 61 70 70 6c 69 61 6e | .connecting.to.your.VyOS.applian |
48bc0 | 63 65 20 70 6c 65 61 73 65 20 6e 6f 74 65 20 74 68 61 74 20 6d 6f 73 74 20 6f 66 20 74 68 65 6d | ce.please.note.that.most.of.them |
48be0 | 20 75 73 65 20 73 6f 66 74 77 61 72 65 20 65 6d 75 6c 61 74 69 6f 6e 20 77 69 74 68 6f 75 74 20 | .use.software.emulation.without. |
48c00 | 66 6c 6f 77 20 63 6f 6e 74 72 6f 6c 2e 20 54 68 69 73 20 6d 65 61 6e 73 20 79 6f 75 20 73 68 6f | flow.control..This.means.you.sho |
48c20 | 75 6c 64 20 73 74 61 72 74 20 77 69 74 68 20 61 20 63 6f 6d 6d 6f 6e 20 62 61 75 64 20 72 61 74 | uld.start.with.a.common.baud.rat |
48c40 | 65 20 28 6d 6f 73 74 20 6c 69 6b 65 6c 79 20 39 36 30 30 20 62 61 75 64 29 20 61 73 20 6f 74 68 | e.(most.likely.9600.baud).as.oth |
48c60 | 65 72 77 69 73 65 20 79 6f 75 20 70 72 6f 62 61 62 6c 79 20 63 61 6e 20 6e 6f 74 20 63 6f 6e 6e | erwise.you.probably.can.not.conn |
48c80 | 65 63 74 20 74 6f 20 74 68 65 20 64 65 76 69 63 65 20 75 73 69 6e 67 20 68 69 67 68 20 73 70 65 | ect.to.the.device.using.high.spe |
48ca0 | 65 64 20 62 61 75 64 20 72 61 74 65 73 20 61 73 20 79 6f 75 72 20 73 65 72 69 61 6c 20 63 6f 6e | ed.baud.rates.as.your.serial.con |
48cc0 | 76 65 72 74 65 72 20 73 69 6d 70 6c 79 20 63 61 6e 20 6e 6f 74 20 70 72 6f 63 65 73 73 20 74 68 | verter.simply.can.not.process.th |
48ce0 | 69 73 20 64 61 74 61 20 72 61 74 65 2e 00 49 66 20 79 6f 75 20 75 73 65 20 61 20 73 65 6c 66 2d | is.data.rate..If.you.use.a.self- |
48d00 | 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 2c 20 64 6f 20 6e 6f 74 20 66 6f 72 67 65 | signed.certificate,.do.not.forge |
48d20 | 74 20 74 6f 20 69 6e 73 74 61 6c 6c 20 43 41 20 6f 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 73 69 | t.to.install.CA.on.the.client.si |
48d40 | 64 65 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 63 68 61 6e 67 65 20 74 68 65 20 6d 61 | de..If.you.want.to.change.the.ma |
48d60 | 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 66 6c 6f 77 73 2c 20 77 68 69 63 68 20 61 72 65 | ximum.number.of.flows,.which.are |
48d80 | 20 74 72 61 63 6b 69 6e 67 20 73 69 6d 75 6c 74 61 6e 65 6f 75 73 6c 79 2c 20 79 6f 75 20 6d 61 | .tracking.simultaneously,.you.ma |
48da0 | 79 20 64 6f 20 74 68 69 73 20 77 69 74 68 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 28 64 65 66 | y.do.this.with.this.command.(def |
48dc0 | 61 75 6c 74 20 38 31 39 32 29 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 69 73 61 62 | ault.8192)..If.you.want.to.disab |
48de0 | 6c 65 20 61 20 72 75 6c 65 20 62 75 74 20 6c 65 74 20 69 74 20 69 6e 20 74 68 65 20 63 6f 6e 66 | le.a.rule.but.let.it.in.the.conf |
48e00 | 69 67 75 72 61 74 69 6f 6e 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 68 61 76 65 20 61 | iguration..If.you.want.to.have.a |
48e20 | 64 6d 69 6e 20 75 73 65 72 73 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 76 69 61 20 52 | dmin.users.to.authenticate.via.R |
48e40 | 41 44 49 55 53 20 69 74 20 69 73 20 65 73 73 65 6e 74 69 61 6c 20 74 6f 20 73 65 6e 74 20 74 68 | ADIUS.it.is.essential.to.sent.th |
48e60 | 65 20 60 60 43 69 73 63 6f 2d 41 56 2d 50 61 69 72 20 73 68 65 6c 6c 3a 70 72 69 76 2d 6c 76 6c | e.``Cisco-AV-Pair.shell:priv-lvl |
48e80 | 3d 31 35 60 60 20 61 74 74 72 69 62 75 74 65 2e 20 57 69 74 68 6f 75 74 20 74 68 65 20 61 74 74 | =15``.attribute..Without.the.att |
48ea0 | 72 69 62 75 74 65 20 79 6f 75 20 77 69 6c 6c 20 6f 6e 6c 79 20 67 65 74 20 72 65 67 75 6c 61 72 | ribute.you.will.only.get.regular |
48ec0 | 2c 20 6e 6f 6e 20 70 72 69 76 69 6c 65 67 75 65 64 2c 20 73 79 73 74 65 6d 20 75 73 65 72 73 2e | ,.non.privilegued,.system.users. |
48ee0 | 00 49 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 75 73 65 20 65 78 69 73 74 69 6e 67 20 62 6c 61 | .If.you.want.to.use.existing.bla |
48f00 | 63 6b 6c 69 73 74 73 20 79 6f 75 20 68 61 76 65 20 74 6f 20 63 72 65 61 74 65 2f 64 6f 77 6e 6c | cklists.you.have.to.create/downl |
48f20 | 6f 61 64 20 61 20 64 61 74 61 62 61 73 65 20 66 69 72 73 74 2e 20 4f 74 68 65 72 77 69 73 65 20 | oad.a.database.first..Otherwise. |
48f40 | 79 6f 75 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 61 62 6c 65 20 74 6f 20 63 6f 6d 6d 69 74 20 74 | you.will.not.be.able.to.commit.t |
48f60 | 68 65 20 63 6f 6e 66 69 67 20 63 68 61 6e 67 65 73 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 20 79 | he.config.changes..If.you.want.y |
48f80 | 6f 75 72 20 72 6f 75 74 65 72 20 74 6f 20 66 6f 72 77 61 72 64 20 44 48 43 50 20 72 65 71 75 65 | our.router.to.forward.DHCP.reque |
48fa0 | 73 74 73 20 74 6f 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 44 48 43 50 20 73 65 72 76 65 72 20 79 | sts.to.an.external.DHCP.server.y |
48fc0 | 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 73 79 73 74 65 6d 20 74 6f 20 61 | ou.can.configure.the.system.to.a |
48fe0 | 63 74 20 61 73 20 61 20 44 48 43 50 20 72 65 6c 61 79 20 61 67 65 6e 74 2e 20 54 68 65 20 44 48 | ct.as.a.DHCP.relay.agent..The.DH |
49000 | 43 50 20 72 65 6c 61 79 20 61 67 65 6e 74 20 77 6f 72 6b 73 20 77 69 74 68 20 49 50 76 34 20 61 | CP.relay.agent.works.with.IPv4.a |
49020 | 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 2c 20 | nd.IPv6.addresses..If.you.want,. |
49040 | 6e 65 65 64 2c 20 61 6e 64 20 73 68 6f 75 6c 64 20 75 73 65 20 6d 6f 72 65 20 61 64 76 61 6e 63 | need,.and.should.use.more.advanc |
49060 | 65 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 69 70 68 65 72 73 20 28 64 65 66 61 75 6c 74 20 69 | ed.encryption.ciphers.(default.i |
49080 | 73 20 73 74 69 6c 6c 20 33 44 45 53 29 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 70 72 6f 76 69 73 | s.still.3DES).you.need.to.provis |
490a0 | 69 6f 6e 20 79 6f 75 72 20 64 65 76 69 63 65 20 75 73 69 6e 67 20 61 20 73 6f 2d 63 61 6c 6c 65 | ion.your.device.using.a.so-calle |
490c0 | 64 20 22 44 65 76 69 63 65 20 50 72 6f 66 69 6c 65 22 2e 20 41 20 70 72 6f 66 69 6c 65 20 69 73 | d."Device.Profile"..A.profile.is |
490e0 | 20 61 20 73 69 6d 70 6c 65 20 74 65 78 74 20 66 69 6c 65 20 63 6f 6e 74 61 69 6e 69 6e 67 20 58 | .a.simple.text.file.containing.X |
49100 | 4d 4c 20 6e 6f 64 65 73 20 77 69 74 68 20 61 20 60 60 2e 6d 6f 62 69 6c 65 63 6f 6e 66 69 67 60 | ML.nodes.with.a.``.mobileconfig` |
49120 | 60 20 66 69 6c 65 20 65 78 74 65 6e 73 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 62 65 20 73 65 6e | `.file.extension.that.can.be.sen |
49140 | 74 20 61 6e 64 20 6f 70 65 6e 65 64 20 6f 6e 20 61 6e 79 20 64 65 76 69 63 65 20 66 72 6f 6d 20 | t.and.opened.on.any.device.from. |
49160 | 61 6e 20 45 2d 4d 61 69 6c 2e 00 49 66 20 79 6f 75 27 76 65 20 63 6f 6d 70 6c 65 74 65 64 20 61 | an.E-Mail..If.you've.completed.a |
49180 | 6c 6c 20 74 68 65 20 61 62 6f 76 65 20 73 74 65 70 73 20 79 6f 75 20 6e 6f 20 64 6f 75 62 74 20 | ll.the.above.steps.you.no.doubt. |
491a0 | 77 61 6e 74 20 74 6f 20 73 65 65 20 69 66 20 69 74 27 73 20 61 6c 6c 20 77 6f 72 6b 69 6e 67 2e | want.to.see.if.it's.all.working. |
491c0 | 00 49 67 6e 6f 72 65 20 41 53 5f 50 41 54 48 20 6c 65 6e 67 74 68 20 77 68 65 6e 20 73 65 6c 65 | .Ignore.AS_PATH.length.when.sele |
491e0 | 63 74 69 6e 67 20 61 20 72 6f 75 74 65 00 49 67 6e 6f 72 65 20 56 52 52 50 20 6d 61 69 6e 20 69 | cting.a.route.Ignore.VRRP.main.i |
49200 | 6e 74 65 72 66 61 63 65 20 66 61 75 6c 74 73 00 49 6d 61 67 65 20 74 68 61 6e 6b 66 75 6c 6c 79 | nterface.faults.Image.thankfully |
49220 | 20 62 6f 72 72 6f 77 65 64 20 66 72 6f 6d 20 68 74 74 70 73 3a 2f 2f 65 6e 2e 77 69 6b 69 70 65 | .borrowed.from.https://en.wikipe |
49240 | 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 46 69 6c 65 3a 53 4e 4d 50 5f 63 6f 6d 6d 75 6e 69 63 61 | dia.org/wiki/File:SNMP_communica |
49260 | 74 69 6f 6e 5f 70 72 69 6e 63 69 70 6c 65 73 5f 64 69 61 67 72 61 6d 2e 50 4e 47 20 77 68 69 63 | tion_principles_diagram.PNG.whic |
49280 | 68 20 69 73 20 75 6e 64 65 72 20 74 68 65 20 47 4e 55 20 46 72 65 65 20 44 6f 63 75 6d 65 6e 74 | h.is.under.the.GNU.Free.Document |
492a0 | 61 74 69 6f 6e 20 4c 69 63 65 6e 73 65 00 49 6d 61 67 69 6e 65 20 74 68 65 20 66 6f 6c 6c 6f 77 | ation.License.Imagine.the.follow |
492c0 | 69 6e 67 20 74 6f 70 6f 6c 6f 67 79 00 49 6d 6d 65 64 69 61 74 65 00 49 6d 70 6f 72 74 20 66 69 | ing.topology.Immediate.Import.fi |
492e0 | 6c 65 73 20 74 6f 20 50 4b 49 20 66 6f 72 6d 61 74 00 49 6d 70 6f 72 74 20 74 68 65 20 43 41 73 | les.to.PKI.format.Import.the.CAs |
49300 | 20 70 72 69 76 61 74 65 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 74 6f 20 74 68 65 20 43 4c 49 2e | .private.key.portion.to.the.CLI. |
49320 | 20 54 68 69 73 20 73 68 6f 75 6c 64 20 6e 65 76 65 72 20 6c 65 61 76 65 20 74 68 65 20 73 79 73 | .This.should.never.leave.the.sys |
49340 | 74 65 6d 20 61 73 20 69 74 20 69 73 20 75 73 65 64 20 74 6f 20 64 65 63 72 79 70 74 20 74 68 65 | tem.as.it.is.used.to.decrypt.the |
49360 | 20 64 61 74 61 2e 20 54 68 65 20 6b 65 79 20 69 73 20 72 65 71 75 69 72 65 64 20 69 66 20 79 6f | .data..The.key.is.required.if.yo |
49380 | 75 20 75 73 65 20 56 79 4f 53 20 61 73 20 79 6f 75 72 20 63 65 72 74 69 66 69 63 61 74 65 20 67 | u.use.VyOS.as.your.certificate.g |
493a0 | 65 6e 65 72 61 74 6f 72 2e 00 49 6d 70 6f 72 74 20 74 68 65 20 4f 70 65 6e 56 50 4e 20 73 68 61 | enerator..Import.the.OpenVPN.sha |
493c0 | 72 65 64 20 73 65 63 72 65 74 20 73 74 6f 72 65 64 20 69 6e 20 66 69 6c 65 20 74 6f 20 74 68 65 | red.secret.stored.in.file.to.the |
493e0 | 20 56 79 4f 53 20 43 4c 49 2e 00 49 6d 70 6f 72 74 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 | .VyOS.CLI..Import.the.certificat |
49400 | 65 20 66 72 6f 6d 20 74 68 65 20 66 69 6c 65 20 74 6f 20 56 79 4f 53 20 43 4c 49 2e 00 49 6d 70 | e.from.the.file.to.VyOS.CLI..Imp |
49420 | 6f 72 74 20 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 6f 66 20 74 68 65 20 63 65 72 74 69 | ort.the.private.key.of.the.certi |
49440 | 66 69 63 61 74 65 20 74 6f 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2e 20 54 68 69 73 20 73 68 6f | ficate.to.the.VyOS.CLI..This.sho |
49460 | 75 6c 64 20 6e 65 76 65 72 20 6c 65 61 76 65 20 74 68 65 20 73 79 73 74 65 6d 20 61 73 20 69 74 | uld.never.leave.the.system.as.it |
49480 | 20 69 73 20 75 73 65 64 20 74 6f 20 64 65 63 72 79 70 74 20 74 68 65 20 64 61 74 61 2e 00 49 6d | .is.used.to.decrypt.the.data..Im |
494a0 | 70 6f 72 74 20 74 68 65 20 70 75 62 6c 69 63 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 66 | port.the.public.CA.certificate.f |
494c0 | 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 66 69 6c 65 20 74 6f 20 56 79 4f 53 20 43 4c 49 | rom.the.defined.file.to.VyOS.CLI |
494e0 | 2e 00 49 6d 70 6f 72 74 65 64 20 70 72 65 66 69 78 65 73 20 64 75 72 69 6e 67 20 74 68 65 20 76 | ..Imported.prefixes.during.the.v |
49500 | 61 6c 69 64 61 74 69 6f 6e 20 6d 61 79 20 68 61 76 65 20 76 61 6c 75 65 73 3a 00 49 6e 20 3a 72 | alidation.may.have.values:.In.:r |
49520 | 66 63 3a 60 33 30 36 39 60 20 69 74 20 69 73 20 63 61 6c 6c 65 64 20 56 4c 41 4e 20 41 67 67 72 | fc:`3069`.it.is.called.VLAN.Aggr |
49540 | 65 67 61 74 69 6f 6e 00 49 6e 20 3a 76 79 74 61 73 6b 3a 60 54 32 31 39 39 60 20 74 68 65 20 73 | egation.In.:vytask:`T2199`.the.s |
49560 | 79 6e 74 61 78 20 6f 66 20 74 68 65 20 7a 6f 6e 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | yntax.of.the.zone.configuration. |
49580 | 77 61 73 20 63 68 61 6e 67 65 64 2e 20 54 68 65 20 7a 6f 6e 65 20 63 6f 6e 66 69 67 75 72 61 74 | was.changed..The.zone.configurat |
495a0 | 69 6f 6e 20 6d 6f 76 65 64 20 66 72 6f 6d 20 60 60 7a 6f 6e 65 2d 70 6f 6c 69 63 79 20 7a 6f 6e | ion.moved.from.``zone-policy.zon |
495c0 | 65 20 3c 6e 61 6d 65 3e 60 60 20 74 6f 20 60 60 66 69 72 65 77 61 6c 6c 20 7a 6f 6e 65 20 3c 6e | e.<name>``.to.``firewall.zone.<n |
495e0 | 61 6d 65 3e 60 60 2e 00 49 6e 20 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 6f 6c 20 56 65 72 | ame>``..In.Internet.Protocol.Ver |
49600 | 73 69 6f 6e 20 36 20 28 49 50 76 36 29 20 6e 65 74 77 6f 72 6b 73 2c 20 74 68 65 20 66 75 6e 63 | sion.6.(IPv6).networks,.the.func |
49620 | 74 69 6f 6e 61 6c 69 74 79 20 6f 66 20 41 52 50 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 | tionality.of.ARP.is.provided.by. |
49640 | 74 68 65 20 4e 65 69 67 68 62 6f 72 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 20 | the.Neighbor.Discovery.Protocol. |
49660 | 28 4e 44 50 29 2e 00 49 6e 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 77 65 20 64 6f 20 6e | (NDP)..In.Priority.Queue.we.do.n |
49680 | 6f 74 20 64 65 66 69 6e 65 20 63 6c 61 73 65 73 20 77 69 74 68 20 61 20 6d 65 61 6e 69 6e 67 6c | ot.define.clases.with.a.meaningl |
496a0 | 65 73 73 20 63 6c 61 73 73 20 49 44 20 6e 75 6d 62 65 72 20 62 75 74 20 77 69 74 68 20 61 20 63 | ess.class.ID.number.but.with.a.c |
496c0 | 6c 61 73 73 20 70 72 69 6f 72 69 74 79 20 6e 75 6d 62 65 72 20 28 31 2d 37 29 2e 20 54 68 65 20 | lass.priority.number.(1-7)..The. |
496e0 | 6c 6f 77 65 72 20 74 68 65 20 6e 75 6d 62 65 72 2c 20 74 68 65 20 68 69 67 68 65 72 20 74 68 65 | lower.the.number,.the.higher.the |
49700 | 20 70 72 69 6f 72 69 74 79 2e 00 49 6e 20 56 79 4f 53 20 74 68 65 20 74 65 72 6d 73 20 60 60 76 | .priority..In.VyOS.the.terms.``v |
49720 | 69 66 2d 73 60 60 20 61 6e 64 20 60 60 76 69 66 2d 63 60 60 20 73 74 61 6e 64 20 66 6f 72 20 74 | if-s``.and.``vif-c``.stand.for.t |
49740 | 68 65 20 65 74 68 65 72 74 79 70 65 20 74 61 67 73 20 74 68 61 74 20 61 72 65 20 75 73 65 64 2e | he.ethertype.tags.that.are.used. |
49760 | 00 49 6e 20 56 79 4f 53 2c 20 45 53 50 20 61 74 74 72 69 62 75 74 65 73 20 61 72 65 20 73 70 65 | .In.VyOS,.ESP.attributes.are.spe |
49780 | 63 69 66 69 65 64 20 74 68 72 6f 75 67 68 20 45 53 50 20 67 72 6f 75 70 73 2e 20 4d 75 6c 74 69 | cified.through.ESP.groups..Multi |
497a0 | 70 6c 65 20 70 72 6f 70 6f 73 61 6c 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 | ple.proposals.can.be.specified.i |
497c0 | 6e 20 61 20 73 69 6e 67 6c 65 20 67 72 6f 75 70 2e 00 49 6e 20 56 79 4f 53 2c 20 49 4b 45 20 61 | n.a.single.group..In.VyOS,.IKE.a |
497e0 | 74 74 72 69 62 75 74 65 73 20 61 72 65 20 73 70 65 63 69 66 69 65 64 20 74 68 72 6f 75 67 68 20 | ttributes.are.specified.through. |
49800 | 49 4b 45 20 67 72 6f 75 70 73 2e 20 4d 75 6c 74 69 70 6c 65 20 70 72 6f 70 6f 73 61 6c 73 20 63 | IKE.groups..Multiple.proposals.c |
49820 | 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 67 72 6f 75 | an.be.specified.in.a.single.grou |
49840 | 70 2e 00 49 6e 20 56 79 4f 53 2c 20 61 20 63 6c 61 73 73 20 69 73 20 69 64 65 6e 74 69 66 69 65 | p..In.VyOS,.a.class.is.identifie |
49860 | 64 20 62 79 20 61 20 6e 75 6d 62 65 72 20 79 6f 75 20 63 61 6e 20 63 68 6f 6f 73 65 20 77 68 65 | d.by.a.number.you.can.choose.whe |
49880 | 6e 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 69 74 2e 00 49 6e 20 61 20 6d 69 6e 69 6d 61 6c 20 63 | n.configuring.it..In.a.minimal.c |
498a0 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6d 75 73 74 | onfiguration,.the.following.must |
498c0 | 20 62 65 20 70 72 6f 76 69 64 65 64 3a 00 49 6e 20 61 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e | .be.provided:.In.a.multiple.VLAN |
498e0 | 20 68 65 61 64 65 72 20 63 6f 6e 74 65 78 74 2c 20 6f 75 74 20 6f 66 20 63 6f 6e 76 65 6e 69 65 | .header.context,.out.of.convenie |
49900 | 6e 63 65 20 74 68 65 20 74 65 72 6d 20 22 56 4c 41 4e 20 74 61 67 22 20 6f 72 20 6a 75 73 74 20 | nce.the.term."VLAN.tag".or.just. |
49920 | 22 74 61 67 22 20 66 6f 72 20 73 68 6f 72 74 20 69 73 20 6f 66 74 65 6e 20 75 73 65 64 20 69 6e | "tag".for.short.is.often.used.in |
49940 | 20 70 6c 61 63 65 20 6f 66 20 22 38 30 32 2e 31 71 5f 20 56 4c 41 4e 20 68 65 61 64 65 72 22 2e | .place.of."802.1q_.VLAN.header". |
49960 | 20 51 69 6e 51 20 61 6c 6c 6f 77 73 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 20 74 61 67 73 20 | .QinQ.allows.multiple.VLAN.tags. |
49980 | 69 6e 20 61 6e 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 3b 20 74 6f 67 65 74 68 65 72 20 74 | in.an.Ethernet.frame;.together.t |
499a0 | 68 65 73 65 20 74 61 67 73 20 63 6f 6e 73 74 69 74 75 74 65 20 61 20 74 61 67 20 73 74 61 63 6b | hese.tags.constitute.a.tag.stack |
499c0 | 2e 20 57 68 65 6e 20 75 73 65 64 20 69 6e 20 74 68 65 20 63 6f 6e 74 65 78 74 20 6f 66 20 61 6e | ..When.used.in.the.context.of.an |
499e0 | 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 2c 20 61 20 51 69 6e 51 20 66 72 61 6d 65 20 69 73 | .Ethernet.frame,.a.QinQ.frame.is |
49a00 | 20 61 20 66 72 61 6d 65 20 74 68 61 74 20 68 61 73 20 32 20 56 4c 41 4e 20 38 30 32 2e 31 71 5f | .a.frame.that.has.2.VLAN.802.1q_ |
49a20 | 20 68 65 61 64 65 72 73 20 28 64 6f 75 62 6c 65 2d 74 61 67 67 65 64 29 2e 00 49 6e 20 61 20 6e | .headers.(double-tagged)..In.a.n |
49a40 | 75 74 73 68 65 6c 6c 2c 20 74 68 65 20 63 75 72 72 65 6e 74 20 69 6d 70 6c 65 6d 65 6e 74 61 74 | utshell,.the.current.implementat |
49a60 | 69 6f 6e 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 65 61 74 75 | ion.provides.the.following.featu |
49a80 | 72 65 73 3a 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 3a 61 62 62 72 3a 60 52 41 44 49 55 | res:.In.addition.to.:abbr:`RADIU |
49aa0 | 53 20 28 52 65 6d 6f 74 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 44 69 61 6c 2d 49 6e | S.(Remote.Authentication.Dial-In |
49ac0 | 20 55 73 65 72 20 53 65 72 76 69 63 65 29 60 2c 20 3a 61 62 62 72 3a 60 54 41 43 41 43 53 20 28 | .User.Service)`,.:abbr:`TACACS.( |
49ae0 | 54 65 72 6d 69 6e 61 6c 20 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c 6c 65 72 20 41 63 63 65 73 | Terminal.Access.Controller.Acces |
49b00 | 73 20 43 6f 6e 74 72 6f 6c 20 53 79 73 74 65 6d 29 60 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 66 | s.Control.System)`.can.also.be.f |
49b20 | 6f 75 6e 64 20 69 6e 20 6c 61 72 67 65 20 64 65 70 6c 6f 79 6d 65 6e 74 73 2e 00 49 6e 20 61 64 | ound.in.large.deployments..In.ad |
49b40 | 64 69 74 69 6f 6e 20 74 6f 20 64 69 73 70 6c 61 79 69 6e 67 20 66 6c 6f 77 20 61 63 63 6f 75 6e | dition.to.displaying.flow.accoun |
49b60 | 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6c 6f 63 61 6c 6c 79 2c 20 6f 6e 65 20 63 61 | ting.information.locally,.one.ca |
49b80 | 6e 20 61 6c 73 6f 20 65 78 70 6f 72 74 65 64 20 74 68 65 6d 20 74 6f 20 61 20 63 6f 6c 6c 65 63 | n.also.exported.them.to.a.collec |
49ba0 | 74 69 6f 6e 20 73 65 72 76 65 72 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 | tion.server..In.addition.to.the. |
49bc0 | 63 6f 6d 6d 61 6e 64 20 61 62 6f 76 65 2c 20 74 68 65 20 6f 75 74 70 75 74 20 69 73 20 69 6e 20 | command.above,.the.output.is.in. |
49be0 | 61 20 66 6f 72 6d 61 74 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 64 69 | a.format.which.can.be.used.to.di |
49c00 | 72 65 63 74 6c 79 20 69 6d 70 6f 72 74 20 74 68 65 20 6b 65 79 20 69 6e 74 6f 20 74 68 65 20 56 | rectly.import.the.key.into.the.V |
49c20 | 79 4f 53 20 43 4c 49 20 62 79 20 73 69 6d 70 6c 79 20 63 6f 70 79 2d 70 61 73 74 69 6e 67 20 74 | yOS.CLI.by.simply.copy-pasting.t |
49c40 | 68 65 20 6f 75 74 70 75 74 20 66 72 6f 6d 20 6f 70 2d 6d 6f 64 65 20 69 6e 74 6f 20 63 6f 6e 66 | he.output.from.op-mode.into.conf |
49c60 | 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 77 65 20 73 | iguration.mode..In.addition.we.s |
49c80 | 65 74 75 70 20 49 50 76 36 20 3a 61 62 62 72 3a 60 52 41 20 28 52 6f 75 74 65 72 20 41 64 76 65 | etup.IPv6.:abbr:`RA.(Router.Adve |
49ca0 | 72 74 69 73 65 6d 65 6e 74 73 29 60 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 70 72 65 66 69 78 20 | rtisements)`.to.make.the.prefix. |
49cc0 | 6b 6e 6f 77 6e 20 6f 6e 20 74 68 65 20 65 74 68 30 20 6c 69 6e 6b 2e 00 49 6e 20 61 64 64 69 74 | known.on.the.eth0.link..In.addit |
49ce0 | 69 6f 6e 20 79 6f 75 20 63 61 6e 20 61 6c 73 6f 20 64 69 73 61 62 6c 65 20 74 68 65 20 77 68 6f | ion.you.can.also.disable.the.who |
49d00 | 6c 65 20 73 65 72 76 69 63 65 20 77 69 74 68 6f 75 74 20 74 68 65 20 6e 65 65 64 20 74 6f 20 72 | le.service.without.the.need.to.r |
49d20 | 65 6d 6f 76 65 20 69 74 20 66 72 6f 6d 20 74 68 65 20 63 75 72 72 65 6e 74 20 63 6f 6e 66 69 67 | emove.it.from.the.current.config |
49d40 | 75 72 61 74 69 6f 6e 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 79 6f 75 20 77 69 6c 6c 20 73 70 | uration..In.addition.you.will.sp |
49d60 | 65 63 69 66 69 79 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 46 51 44 4e 20 66 6f | ecifiy.the.IP.address.or.FQDN.fo |
49d80 | 72 20 74 68 65 20 63 6c 69 65 6e 74 20 77 68 65 72 65 20 69 74 20 77 69 6c 6c 20 63 6f 6e 6e 65 | r.the.client.where.it.will.conne |
49da0 | 63 74 20 74 6f 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 70 61 72 61 6d 65 74 65 72 20 63 61 6e | ct.to..The.address.parameter.can |
49dc0 | 20 62 65 20 75 73 65 64 20 75 70 20 74 6f 20 74 77 6f 20 74 69 6d 65 73 20 61 6e 64 20 69 73 20 | .be.used.up.to.two.times.and.is. |
49de0 | 75 73 65 64 20 74 6f 20 61 73 73 69 67 6e 20 74 68 65 20 63 6c 69 65 6e 74 73 20 73 70 65 63 69 | used.to.assign.the.clients.speci |
49e00 | 66 69 63 20 49 50 76 34 20 28 2f 33 32 29 20 6f 72 20 49 50 76 36 20 28 2f 31 32 38 29 20 61 64 | fic.IPv4.(/32).or.IPv6.(/128).ad |
49e20 | 64 72 65 73 73 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 79 6f 75 20 77 69 6c 6c 20 73 70 65 63 | dress..In.addition.you.will.spec |
49e40 | 69 66 79 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 46 51 44 4e 20 66 6f 72 20 74 | ify.the.IP.address.or.FQDN.for.t |
49e60 | 68 65 20 63 6c 69 65 6e 74 20 77 68 65 72 65 20 69 74 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 | he.client.where.it.will.connect. |
49e80 | 74 6f 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 70 61 72 61 6d 65 74 65 72 20 63 61 6e 20 62 65 | to..The.address.parameter.can.be |
49ea0 | 20 75 73 65 64 20 75 70 20 74 6f 20 74 77 6f 20 74 69 6d 65 73 20 61 6e 64 20 69 73 20 75 73 65 | .used.up.to.two.times.and.is.use |
49ec0 | 64 20 74 6f 20 61 73 73 69 67 6e 20 74 68 65 20 63 6c 69 65 6e 74 73 20 73 70 65 63 69 66 69 63 | d.to.assign.the.clients.specific |
49ee0 | 20 49 50 76 34 20 28 2f 33 32 29 20 6f 72 20 49 50 76 36 20 28 2f 31 32 38 29 20 61 64 64 72 65 | .IPv4.(/32).or.IPv6.(/128).addre |
49f00 | 73 73 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 2c 20 79 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 | ss..In.addition,.you.can.specify |
49f20 | 20 6d 61 6e 79 20 6f 74 68 65 72 20 70 61 72 61 6d 65 74 65 72 73 20 74 6f 20 67 65 74 20 42 47 | .many.other.parameters.to.get.BG |
49f40 | 50 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 00 49 6e 20 61 6e 20 2a 2a 61 64 64 72 65 73 73 20 67 | P.information:.In.an.**address.g |
49f60 | 72 6f 75 70 2a 2a 20 61 20 73 69 6e 67 6c 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 49 50 | roup**.a.single.IP.address.or.IP |
49f80 | 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 73 20 61 72 65 20 64 65 66 69 6e 65 64 2e 00 49 6e 20 | .address.ranges.are.defined..In. |
49fa0 | 62 6f 74 68 20 63 61 73 65 73 2c 20 77 65 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 66 6f 6c 6c | both.cases,.we.will.use.the.foll |
49fc0 | 6f 77 69 6e 67 20 73 65 74 74 69 6e 67 73 3a 00 49 6e 20 63 61 73 65 20 6f 66 20 70 65 65 72 2d | owing.settings:.In.case.of.peer- |
49fe0 | 70 65 65 72 20 72 65 6c 61 74 69 6f 6e 73 68 69 70 20 72 6f 75 74 65 73 20 63 61 6e 20 62 65 20 | peer.relationship.routes.can.be. |
4a000 | 72 65 63 65 69 76 65 64 20 6f 6e 6c 79 20 69 66 20 4f 54 43 20 76 61 6c 75 65 20 69 73 20 65 71 | received.only.if.OTC.value.is.eq |
4a020 | 75 61 6c 20 74 6f 20 79 6f 75 72 20 6e 65 69 67 68 62 6f 72 20 41 53 20 6e 75 6d 62 65 72 2e 00 | ual.to.your.neighbor.AS.number.. |
4a040 | 49 6e 20 63 61 73 65 2c 20 69 66 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 61 74 63 68 20 73 6f | In.case,.if.you.need.to.catch.so |
4a060 | 6d 65 20 6c 6f 67 73 20 66 72 6f 6d 20 66 6c 6f 77 2d 61 63 63 6f 75 6e 74 69 6e 67 20 64 61 65 | me.logs.from.flow-accounting.dae |
4a080 | 6d 6f 6e 2c 20 79 6f 75 20 6d 61 79 20 63 6f 6e 66 69 67 75 72 65 20 6c 6f 67 67 69 6e 67 20 66 | mon,.you.may.configure.logging.f |
4a0a0 | 61 63 69 6c 69 74 79 3a 00 49 6e 20 63 6f 6e 74 72 61 73 74 20 74 6f 20 73 69 6d 70 6c 65 20 52 | acility:.In.contrast.to.simple.R |
4a0c0 | 45 44 2c 20 56 79 4f 53 27 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 75 73 65 73 20 61 20 47 | ED,.VyOS'.Random-Detect.uses.a.G |
4a0e0 | 65 6e 65 72 61 6c 69 7a 65 64 20 52 61 6e 64 6f 6d 20 45 61 72 6c 79 20 44 65 74 65 63 74 20 70 | eneralized.Random.Early.Detect.p |
4a100 | 6f 6c 69 63 79 20 74 68 61 74 20 70 72 6f 76 69 64 65 73 20 64 69 66 66 65 72 65 6e 74 20 76 69 | olicy.that.provides.different.vi |
4a120 | 72 74 75 61 6c 20 71 75 65 75 65 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 49 50 20 50 72 65 | rtual.queues.based.on.the.IP.Pre |
4a140 | 63 65 64 65 6e 63 65 20 76 61 6c 75 65 20 73 6f 20 74 68 61 74 20 73 6f 6d 65 20 76 69 72 74 75 | cedence.value.so.that.some.virtu |
4a160 | 61 6c 20 71 75 65 75 65 73 20 63 61 6e 20 64 72 6f 70 20 6d 6f 72 65 20 70 61 63 6b 65 74 73 20 | al.queues.can.drop.more.packets. |
4a180 | 74 68 61 6e 20 6f 74 68 65 72 73 2e 00 49 6e 20 66 61 69 6c 6f 76 65 72 20 6d 6f 64 65 2c 20 6f | than.others..In.failover.mode,.o |
4a1a0 | 6e 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 73 65 74 20 74 6f 20 62 65 20 74 68 65 20 70 72 | ne.interface.is.set.to.be.the.pr |
4a1c0 | 69 6d 61 72 79 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 6f 74 68 65 72 20 69 6e 74 65 72 66 | imary.interface.and.other.interf |
4a1e0 | 61 63 65 73 20 61 72 65 20 73 65 63 6f 6e 64 61 72 79 20 6f 72 20 73 70 61 72 65 2e 20 49 6e 73 | aces.are.secondary.or.spare..Ins |
4a200 | 74 65 61 64 20 6f 66 20 62 61 6c 61 6e 63 69 6e 67 20 74 72 61 66 66 69 63 20 61 63 72 6f 73 73 | tead.of.balancing.traffic.across |
4a220 | 20 61 6c 6c 20 68 65 61 6c 74 68 79 20 69 6e 74 65 72 66 61 63 65 73 2c 20 6f 6e 6c 79 20 74 68 | .all.healthy.interfaces,.only.th |
4a240 | 65 20 70 72 69 6d 61 72 79 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 75 73 65 64 20 61 6e 64 20 | e.primary.interface.is.used.and. |
4a260 | 69 6e 20 63 61 73 65 20 6f 66 20 66 61 69 6c 75 72 65 2c 20 61 20 73 65 63 6f 6e 64 61 72 79 20 | in.case.of.failure,.a.secondary. |
4a280 | 69 6e 74 65 72 66 61 63 65 20 73 65 6c 65 63 74 65 64 20 66 72 6f 6d 20 74 68 65 20 70 6f 6f 6c | interface.selected.from.the.pool |
4a2a0 | 20 6f 66 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 74 65 72 66 61 63 65 73 20 74 61 6b 65 73 20 6f | .of.available.interfaces.takes.o |
4a2c0 | 76 65 72 2e 20 54 68 65 20 70 72 69 6d 61 72 79 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 73 65 | ver..The.primary.interface.is.se |
4a2e0 | 6c 65 63 74 65 64 20 62 61 73 65 64 20 6f 6e 20 69 74 73 20 77 65 69 67 68 74 20 61 6e 64 20 68 | lected.based.on.its.weight.and.h |
4a300 | 65 61 6c 74 68 2c 20 6f 74 68 65 72 73 20 62 65 63 6f 6d 65 20 73 65 63 6f 6e 64 61 72 79 20 69 | ealth,.others.become.secondary.i |
4a320 | 6e 74 65 72 66 61 63 65 73 2e 20 53 65 63 6f 6e 64 61 72 79 20 69 6e 74 65 72 66 61 63 65 73 20 | nterfaces..Secondary.interfaces. |
4a340 | 74 6f 20 74 61 6b 65 20 6f 76 65 72 20 61 20 66 61 69 6c 65 64 20 70 72 69 6d 61 72 79 20 69 6e | to.take.over.a.failed.primary.in |
4a360 | 74 65 72 66 61 63 65 20 61 72 65 20 63 68 6f 73 65 6e 20 66 72 6f 6d 20 74 68 65 20 6c 6f 61 64 | terface.are.chosen.from.the.load |
4a380 | 20 62 61 6c 61 6e 63 65 72 27 73 20 69 6e 74 65 72 66 61 63 65 20 70 6f 6f 6c 2c 20 64 65 70 65 | .balancer's.interface.pool,.depe |
4a3a0 | 6e 64 69 6e 67 20 6f 6e 20 74 68 65 69 72 20 77 65 69 67 68 74 20 61 6e 64 20 68 65 61 6c 74 68 | nding.on.their.weight.and.health |
4a3c0 | 2e 20 49 6e 74 65 72 66 61 63 65 20 72 6f 6c 65 73 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 73 65 | ..Interface.roles.can.also.be.se |
4a3e0 | 6c 65 63 74 65 64 20 62 61 73 65 64 20 6f 6e 20 72 75 6c 65 20 6f 72 64 65 72 20 62 79 20 69 6e | lected.based.on.rule.order.by.in |
4a400 | 63 6c 75 64 69 6e 67 20 69 6e 74 65 72 66 61 63 65 73 20 69 6e 20 62 61 6c 61 6e 63 69 6e 67 20 | cluding.interfaces.in.balancing. |
4a420 | 72 75 6c 65 73 20 61 6e 64 20 6f 72 64 65 72 69 6e 67 20 74 68 6f 73 65 20 72 75 6c 65 73 20 61 | rules.and.ordering.those.rules.a |
4a440 | 63 63 6f 72 64 69 6e 67 6c 79 2e 20 54 6f 20 70 75 74 20 74 68 65 20 6c 6f 61 64 20 62 61 6c 61 | ccordingly..To.put.the.load.bala |
4a460 | 6e 63 65 72 20 69 6e 20 66 61 69 6c 6f 76 65 72 20 6d 6f 64 65 2c 20 63 72 65 61 74 65 20 61 20 | ncer.in.failover.mode,.create.a. |
4a480 | 66 61 69 6c 6f 76 65 72 20 72 75 6c 65 3a 00 49 6e 20 66 69 72 65 77 61 6c 6c 20 62 72 69 64 67 | failover.rule:.In.firewall.bridg |
4a4a0 | 65 20 72 75 6c 65 73 2c 20 74 68 65 20 61 63 74 69 6f 6e 20 63 61 6e 20 62 65 3a 00 49 6e 20 67 | e.rules,.the.action.can.be:.In.g |
4a4c0 | 65 6e 65 72 61 6c 2c 20 4f 53 50 46 20 70 72 6f 74 6f 63 6f 6c 20 72 65 71 75 69 72 65 73 20 61 | eneral,.OSPF.protocol.requires.a |
4a4e0 | 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 28 61 72 65 61 20 30 29 20 74 6f 20 62 65 20 63 6f | .backbone.area.(area.0).to.be.co |
4a500 | 68 65 72 65 6e 74 20 61 6e 64 20 66 75 6c 6c 79 20 63 6f 6e 6e 65 63 74 65 64 2e 20 49 2e 65 2e | herent.and.fully.connected..I.e. |
4a520 | 20 61 6e 79 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 72 6f 75 74 65 72 20 6d 75 73 74 20 68 | .any.backbone.area.router.must.h |
4a540 | 61 76 65 20 61 20 72 6f 75 74 65 20 74 6f 20 61 6e 79 20 6f 74 68 65 72 20 62 61 63 6b 62 6f 6e | ave.a.route.to.any.other.backbon |
4a560 | 65 20 61 72 65 61 20 72 6f 75 74 65 72 2e 20 4d 6f 72 65 6f 76 65 72 2c 20 65 76 65 72 79 20 41 | e.area.router..Moreover,.every.A |
4a580 | 42 52 20 6d 75 73 74 20 68 61 76 65 20 61 20 6c 69 6e 6b 20 74 6f 20 62 61 63 6b 62 6f 6e 65 20 | BR.must.have.a.link.to.backbone. |
4a5a0 | 61 72 65 61 2e 20 48 6f 77 65 76 65 72 2c 20 69 74 20 69 73 20 6e 6f 74 20 61 6c 77 61 79 73 20 | area..However,.it.is.not.always. |
4a5c0 | 70 6f 73 73 69 62 6c 65 20 74 6f 20 68 61 76 65 20 61 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b | possible.to.have.a.physical.link |
4a5e0 | 20 74 6f 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 2e 20 49 6e 20 74 68 69 73 20 63 61 73 | .to.a.backbone.area..In.this.cas |
4a600 | 65 20 62 65 74 77 65 65 6e 20 74 77 6f 20 41 42 52 20 28 6f 6e 65 20 6f 66 20 74 68 65 6d 20 68 | e.between.two.ABR.(one.of.them.h |
4a620 | 61 73 20 61 20 6c 69 6e 6b 20 74 6f 20 74 68 65 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 29 20 | as.a.link.to.the.backbone.area). |
4a640 | 69 6e 20 74 68 65 20 61 72 65 61 20 28 6e 6f 74 20 73 74 75 62 20 61 72 65 61 29 20 61 20 76 69 | in.the.area.(not.stub.area).a.vi |
4a660 | 72 74 75 61 6c 20 6c 69 6e 6b 20 69 73 20 6f 72 67 61 6e 69 7a 65 64 2e 00 49 6e 20 6c 61 72 67 | rtual.link.is.organized..In.larg |
4a680 | 65 20 64 65 70 6c 6f 79 6d 65 6e 74 73 20 69 74 20 69 73 20 6e 6f 74 20 72 65 61 73 6f 6e 61 62 | e.deployments.it.is.not.reasonab |
4a6a0 | 6c 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 65 61 63 68 20 75 73 65 72 20 69 6e 64 69 76 69 | le.to.configure.each.user.indivi |
4a6c0 | 64 75 61 6c 6c 79 20 6f 6e 20 65 76 65 72 79 20 73 79 73 74 65 6d 2e 20 56 79 4f 53 20 73 75 70 | dually.on.every.system..VyOS.sup |
4a6e0 | 70 6f 72 74 73 20 75 73 69 6e 67 20 3a 61 62 62 72 3a 60 52 41 44 49 55 53 20 28 52 65 6d 6f 74 | ports.using.:abbr:`RADIUS.(Remot |
4a700 | 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 44 69 61 6c 2d 49 6e 20 55 73 65 72 20 53 65 | e.Authentication.Dial-In.User.Se |
4a720 | 72 76 69 63 65 29 60 20 73 65 72 76 65 72 73 20 61 73 20 62 61 63 6b 65 6e 64 20 66 6f 72 20 75 | rvice)`.servers.as.backend.for.u |
4a740 | 73 65 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 00 49 6e 20 6f 72 64 65 72 20 66 6f 72 | ser.authentication..In.order.for |
4a760 | 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 | .flow.accounting.information.to. |
4a780 | 62 65 20 63 6f 6c 6c 65 63 74 65 64 20 61 6e 64 20 64 69 73 70 6c 61 79 65 64 20 66 6f 72 20 61 | be.collected.and.displayed.for.a |
4a7a0 | 6e 20 69 6e 74 65 72 66 61 63 65 2c 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 6d 75 73 74 20 | n.interface,.the.interface.must. |
4a7c0 | 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e | be.configured.for.flow.accountin |
4a7e0 | 67 2e 00 49 6e 20 6f 72 64 65 72 20 66 6f 72 20 74 68 65 20 70 72 69 6d 61 72 79 20 61 6e 64 20 | g..In.order.for.the.primary.and. |
4a800 | 74 68 65 20 73 65 63 6f 6e 64 61 72 79 20 44 48 43 50 20 73 65 72 76 65 72 20 74 6f 20 6b 65 65 | the.secondary.DHCP.server.to.kee |
4a820 | 70 20 74 68 65 69 72 20 6c 65 61 73 65 20 74 61 62 6c 65 73 20 69 6e 20 73 79 6e 63 2c 20 74 68 | p.their.lease.tables.in.sync,.th |
4a840 | 65 79 20 6d 75 73 74 20 62 65 20 61 62 6c 65 20 74 6f 20 72 65 61 63 68 20 65 61 63 68 20 6f 74 | ey.must.be.able.to.reach.each.ot |
4a860 | 68 65 72 20 6f 6e 20 54 43 50 20 70 6f 72 74 20 36 34 37 2e 20 49 66 20 79 6f 75 20 68 61 76 65 | her.on.TCP.port.647..If.you.have |
4a880 | 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 69 6e 20 65 66 66 65 63 74 2c 20 61 64 6a 75 73 | .firewall.rules.in.effect,.adjus |
4a8a0 | 74 20 74 68 65 6d 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 00 49 6e 20 6f 72 64 65 72 20 66 6f 72 | t.them.accordingly..In.order.for |
4a8c0 | 20 74 68 65 20 73 79 73 74 65 6d 20 74 6f 20 75 73 65 20 61 6e 64 20 63 6f 6d 70 6c 65 74 65 20 | .the.system.to.use.and.complete. |
4a8e0 | 75 6e 71 75 61 6c 69 66 69 65 64 20 68 6f 73 74 20 6e 61 6d 65 73 2c 20 61 20 6c 69 73 74 20 63 | unqualified.host.names,.a.list.c |
4a900 | 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 75 73 65 64 | an.be.defined.which.will.be.used |
4a920 | 20 66 6f 72 20 64 6f 6d 61 69 6e 20 73 65 61 72 63 68 65 73 2e 00 49 6e 20 6f 72 64 65 72 20 74 | .for.domain.searches..In.order.t |
4a940 | 6f 20 61 6c 6c 6f 77 20 66 6f 72 20 4c 44 50 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 | o.allow.for.LDP.on.the.local.rou |
4a960 | 74 65 72 20 74 6f 20 65 78 63 68 61 6e 67 65 20 6c 61 62 65 6c 20 61 64 76 65 72 74 69 73 65 6d | ter.to.exchange.label.advertisem |
4a980 | 65 6e 74 73 20 77 69 74 68 20 6f 74 68 65 72 20 72 6f 75 74 65 72 73 2c 20 61 20 54 43 50 20 73 | ents.with.other.routers,.a.TCP.s |
4a9a0 | 65 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 62 65 74 77 65 | ession.will.be.established.betwe |
4a9c0 | 65 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 69 73 63 6f 76 65 72 65 64 20 61 6e 64 20 | en.automatically.discovered.and. |
4a9e0 | 73 74 61 74 69 63 61 6c 6c 79 20 61 73 73 69 67 6e 65 64 20 72 6f 75 74 65 72 73 2e 20 4c 44 50 | statically.assigned.routers..LDP |
4aa00 | 20 77 69 6c 6c 20 74 72 79 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 20 54 43 50 20 73 65 73 | .will.try.to.establish.a.TCP.ses |
4aa20 | 73 69 6f 6e 20 74 6f 20 74 68 65 20 2a 2a 74 72 61 6e 73 70 6f 72 74 20 61 64 64 72 65 73 73 2a | sion.to.the.**transport.address* |
4aa40 | 2a 20 6f 66 20 6f 74 68 65 72 20 72 6f 75 74 65 72 73 2e 20 54 68 65 72 65 66 6f 72 65 20 66 6f | *.of.other.routers..Therefore.fo |
4aa60 | 72 20 4c 44 50 20 74 6f 20 66 75 6e 63 74 69 6f 6e 20 70 72 6f 70 65 72 6c 79 20 70 6c 65 61 73 | r.LDP.to.function.properly.pleas |
4aa80 | 65 20 6d 61 6b 65 20 73 75 72 65 20 74 68 65 20 74 72 61 6e 73 70 6f 72 74 20 61 64 64 72 65 73 | e.make.sure.the.transport.addres |
4aaa0 | 73 20 69 73 20 73 68 6f 77 6e 20 69 6e 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 | s.is.shown.in.the.routing.table. |
4aac0 | 61 6e 64 20 72 65 61 63 68 61 62 6c 65 20 74 6f 20 74 72 61 66 66 69 63 20 61 74 20 61 6c 6c 20 | and.reachable.to.traffic.at.all. |
4aae0 | 74 69 6d 65 73 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 61 6e 64 20 6d | times..In.order.to.control.and.m |
4ab00 | 6f 64 69 66 79 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 69 | odify.routing.information.that.i |
4ab20 | 73 20 65 78 63 68 61 6e 67 65 64 20 62 65 74 77 65 65 6e 20 70 65 65 72 73 20 79 6f 75 20 63 61 | s.exchanged.between.peers.you.ca |
4ab40 | 6e 20 75 73 65 20 72 6f 75 74 65 2d 6d 61 70 2c 20 66 69 6c 74 65 72 2d 6c 69 73 74 2c 20 70 72 | n.use.route-map,.filter-list,.pr |
4ab60 | 65 66 69 78 2d 6c 69 73 74 2c 20 64 69 73 74 72 69 62 75 74 65 2d 6c 69 73 74 2e 00 49 6e 20 6f | efix-list,.distribute-list..In.o |
4ab80 | 72 64 65 72 20 74 6f 20 64 65 66 69 6e 65 20 77 68 69 63 68 20 74 72 61 66 66 69 63 20 67 6f 65 | rder.to.define.which.traffic.goe |
4aba0 | 73 20 69 6e 74 6f 20 77 68 69 63 68 20 63 6c 61 73 73 2c 20 79 6f 75 20 64 65 66 69 6e 65 20 66 | s.into.which.class,.you.define.f |
4abc0 | 69 6c 74 65 72 73 20 28 74 68 61 74 20 69 73 2c 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 63 72 | ilters.(that.is,.the.matching.cr |
4abe0 | 69 74 65 72 69 61 29 2e 20 50 61 63 6b 65 74 73 20 67 6f 20 74 68 72 6f 75 67 68 20 74 68 65 73 | iteria)..Packets.go.through.thes |
4ac00 | 65 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 73 20 28 61 73 20 69 6e 20 74 68 65 20 72 75 6c 65 | e.matching.rules.(as.in.the.rule |
4ac20 | 73 20 6f 66 20 61 20 66 69 72 65 77 61 6c 6c 29 20 61 6e 64 2c 20 69 66 20 61 20 70 61 63 6b 65 | s.of.a.firewall).and,.if.a.packe |
4ac40 | 74 20 6d 61 74 63 68 65 73 20 74 68 65 20 66 69 6c 74 65 72 2c 20 69 74 20 69 73 20 61 73 73 69 | t.matches.the.filter,.it.is.assi |
4ac60 | 67 6e 65 64 20 74 6f 20 74 68 61 74 20 63 6c 61 73 73 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 | gned.to.that.class..In.order.to. |
4ac80 | 68 61 76 65 20 56 79 4f 53 20 54 72 61 66 66 69 63 20 43 6f 6e 74 72 6f 6c 20 77 6f 72 6b 69 6e | have.VyOS.Traffic.Control.workin |
4aca0 | 67 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 66 6f 6c 6c 6f 77 20 32 20 73 74 65 70 73 3a 00 49 6e | g.you.need.to.follow.2.steps:.In |
4acc0 | 20 6f 72 64 65 72 20 74 6f 20 68 61 76 65 20 66 75 6c 6c 20 63 6f 6e 74 72 6f 6c 20 61 6e 64 20 | .order.to.have.full.control.and. |
4ace0 | 6d 61 6b 65 20 75 73 65 20 6f 66 20 6d 75 6c 74 69 70 6c 65 20 73 74 61 74 69 63 20 70 75 62 6c | make.use.of.multiple.static.publ |
4ad00 | 69 63 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 79 6f 75 72 20 56 79 4f 53 20 77 69 6c 6c 20 | ic.IP.addresses,.your.VyOS.will. |
4ad20 | 68 61 76 65 20 74 6f 20 69 6e 69 74 69 61 74 65 20 74 68 65 20 50 50 50 6f 45 20 63 6f 6e 6e 65 | have.to.initiate.the.PPPoE.conne |
4ad40 | 63 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 20 69 74 2e 20 49 6e 20 6f 72 64 65 72 20 66 | ction.and.control.it..In.order.f |
4ad60 | 6f 72 20 74 68 69 73 20 6d 65 74 68 6f 64 20 74 6f 20 77 6f 72 6b 2c 20 79 6f 75 20 77 69 6c 6c | or.this.method.to.work,.you.will |
4ad80 | 20 68 61 76 65 20 74 6f 20 66 69 67 75 72 65 20 6f 75 74 20 68 6f 77 20 74 6f 20 6d 61 6b 65 20 | .have.to.figure.out.how.to.make. |
4ada0 | 79 6f 75 72 20 44 53 4c 20 4d 6f 64 65 6d 2f 52 6f 75 74 65 72 20 73 77 69 74 63 68 20 69 6e 74 | your.DSL.Modem/Router.switch.int |
4adc0 | 6f 20 61 20 42 72 69 64 67 65 64 20 4d 6f 64 65 20 73 6f 20 69 74 20 6f 6e 6c 79 20 61 63 74 73 | o.a.Bridged.Mode.so.it.only.acts |
4ade0 | 20 61 73 20 61 20 44 53 4c 20 54 72 61 6e 73 63 65 69 76 65 72 20 64 65 76 69 63 65 20 74 6f 20 | .as.a.DSL.Transceiver.device.to. |
4ae00 | 63 6f 6e 6e 65 63 74 20 62 65 74 77 65 65 6e 20 74 68 65 20 45 74 68 65 72 6e 65 74 20 6c 69 6e | connect.between.the.Ethernet.lin |
4ae20 | 6b 20 6f 66 20 79 6f 75 72 20 56 79 4f 53 20 61 6e 64 20 74 68 65 20 70 68 6f 6e 65 20 63 61 62 | k.of.your.VyOS.and.the.phone.cab |
4ae40 | 6c 65 2e 20 4f 6e 63 65 20 79 6f 75 72 20 44 53 4c 20 54 72 61 6e 73 63 65 69 76 65 72 20 69 73 | le..Once.your.DSL.Transceiver.is |
4ae60 | 20 69 6e 20 42 72 69 64 67 65 20 4d 6f 64 65 2c 20 79 6f 75 20 73 68 6f 75 6c 64 20 67 65 74 20 | .in.Bridge.Mode,.you.should.get. |
4ae80 | 6e 6f 20 49 50 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 69 74 2e 20 50 6c 65 61 73 65 20 6d 61 | no.IP.address.from.it..Please.ma |
4aea0 | 6b 65 20 73 75 72 65 20 79 6f 75 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 45 74 68 65 72 | ke.sure.you.connect.to.the.Ether |
4aec0 | 6e 65 74 20 50 6f 72 74 20 31 20 69 66 20 79 6f 75 72 20 44 53 4c 20 54 72 61 6e 73 63 65 69 76 | net.Port.1.if.your.DSL.Transceiv |
4aee0 | 65 72 20 68 61 73 20 61 20 73 77 69 74 63 68 2c 20 61 73 20 73 6f 6d 65 20 6f 66 20 74 68 65 6d | er.has.a.switch,.as.some.of.them |
4af00 | 20 6f 6e 6c 79 20 77 6f 72 6b 20 74 68 69 73 20 77 61 79 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f | .only.work.this.way..In.order.to |
4af20 | 20 6d 61 70 20 73 70 65 63 69 66 69 63 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 | .map.specific.IPv6.addresses.to. |
4af40 | 73 70 65 63 69 66 69 63 20 68 6f 73 74 73 20 73 74 61 74 69 63 20 6d 61 70 70 69 6e 67 73 20 63 | specific.hosts.static.mappings.c |
4af60 | 61 6e 20 62 65 20 63 72 65 61 74 65 64 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 | an.be.created..The.following.exa |
4af80 | 6d 70 6c 65 20 65 78 70 6c 61 69 6e 73 20 74 68 65 20 70 72 6f 63 65 73 73 2e 00 49 6e 20 6f 72 | mple.explains.the.process..In.or |
4afa0 | 64 65 72 20 74 6f 20 6d 69 6e 69 6d 69 7a 65 20 74 68 65 20 66 6c 6f 6f 64 69 6e 67 20 6f 66 20 | der.to.minimize.the.flooding.of. |
4afc0 | 41 52 50 20 61 6e 64 20 4e 44 20 6d 65 73 73 61 67 65 73 20 69 6e 20 74 68 65 20 56 58 4c 41 4e | ARP.and.ND.messages.in.the.VXLAN |
4afe0 | 20 6e 65 74 77 6f 72 6b 2c 20 45 56 50 4e 20 69 6e 63 6c 75 64 65 73 20 70 72 6f 76 69 73 69 6f | .network,.EVPN.includes.provisio |
4b000 | 6e 73 20 3a 72 66 63 3a 60 37 34 33 32 23 73 65 63 74 69 6f 6e 2d 31 30 60 20 74 68 61 74 20 61 | ns.:rfc:`7432#section-10`.that.a |
4b020 | 6c 6c 6f 77 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 56 54 45 50 73 20 74 6f 20 73 75 70 70 | llow.participating.VTEPs.to.supp |
4b040 | 72 65 73 73 20 73 75 63 68 20 6d 65 73 73 61 67 65 73 20 69 6e 20 63 61 73 65 20 74 68 65 79 20 | ress.such.messages.in.case.they. |
4b060 | 6b 6e 6f 77 20 74 68 65 20 4d 41 43 2d 49 50 20 62 69 6e 64 69 6e 67 20 61 6e 64 20 63 61 6e 20 | know.the.MAC-IP.binding.and.can. |
4b080 | 72 65 70 6c 79 20 6f 6e 20 62 65 68 61 6c 66 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 20 68 6f | reply.on.behalf.of.the.remote.ho |
4b0a0 | 73 74 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 73 65 70 61 72 61 74 65 20 74 72 61 66 66 69 63 | st..In.order.to.separate.traffic |
4b0c0 | 2c 20 46 61 69 72 20 51 75 65 75 65 20 75 73 65 73 20 61 20 63 6c 61 73 73 69 66 69 65 72 20 62 | ,.Fair.Queue.uses.a.classifier.b |
4b0e0 | 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2c 20 64 65 73 74 69 6e 61 74 | ased.on.source.address,.destinat |
4b100 | 69 6f 6e 20 61 64 64 72 65 73 73 20 61 6e 64 20 73 6f 75 72 63 65 20 70 6f 72 74 2e 20 54 68 65 | ion.address.and.source.port..The |
4b120 | 20 61 6c 67 6f 72 69 74 68 6d 20 65 6e 71 75 65 75 65 73 20 70 61 63 6b 65 74 73 20 74 6f 20 68 | .algorithm.enqueues.packets.to.h |
4b140 | 61 73 68 20 62 75 63 6b 65 74 73 20 62 61 73 65 64 20 6f 6e 20 74 68 6f 73 65 20 74 72 65 65 20 | ash.buckets.based.on.those.tree. |
4b160 | 70 61 72 61 6d 65 74 65 72 73 2e 20 45 61 63 68 20 6f 66 20 74 68 65 73 65 20 62 75 63 6b 65 74 | parameters..Each.of.these.bucket |
4b180 | 73 20 73 68 6f 75 6c 64 20 72 65 70 72 65 73 65 6e 74 20 61 20 75 6e 69 71 75 65 20 66 6c 6f 77 | s.should.represent.a.unique.flow |
4b1a0 | 2e 20 42 65 63 61 75 73 65 20 6d 75 6c 74 69 70 6c 65 20 66 6c 6f 77 73 20 6d 61 79 20 67 65 74 | ..Because.multiple.flows.may.get |
4b1c0 | 20 68 61 73 68 65 64 20 74 6f 20 74 68 65 20 73 61 6d 65 20 62 75 63 6b 65 74 2c 20 74 68 65 20 | .hashed.to.the.same.bucket,.the. |
4b1e0 | 68 61 73 68 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 20 69 73 20 70 65 72 74 75 72 62 65 64 20 61 | hashing.algorithm.is.perturbed.a |
4b200 | 74 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 69 6e 74 65 72 76 61 6c 73 20 73 6f 20 74 68 61 74 | t.configurable.intervals.so.that |
4b220 | 20 74 68 65 20 75 6e 66 61 69 72 6e 65 73 73 20 6c 61 73 74 73 20 6f 6e 6c 79 20 66 6f 72 20 61 | .the.unfairness.lasts.only.for.a |
4b240 | 20 73 68 6f 72 74 20 77 68 69 6c 65 2e 20 50 65 72 74 75 72 62 61 74 69 6f 6e 20 6d 61 79 20 68 | .short.while..Perturbation.may.h |
4b260 | 6f 77 65 76 65 72 20 63 61 75 73 65 20 73 6f 6d 65 20 69 6e 61 64 76 65 72 74 65 6e 74 20 70 61 | owever.cause.some.inadvertent.pa |
4b280 | 63 6b 65 74 20 72 65 6f 72 64 65 72 69 6e 67 20 74 6f 20 6f 63 63 75 72 2e 20 41 6e 20 61 64 76 | cket.reordering.to.occur..An.adv |
4b2a0 | 69 73 61 62 6c 65 20 76 61 6c 75 65 20 63 6f 75 6c 64 20 62 65 20 31 30 20 73 65 63 6f 6e 64 73 | isable.value.could.be.10.seconds |
4b2c0 | 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 50 49 4d 2c 20 69 74 20 69 73 20 6e 65 63 | ..In.order.to.use.PIM,.it.is.nec |
4b2e0 | 65 73 73 61 72 79 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 3a 61 62 62 72 3a 60 52 50 20 | essary.to.configure.a.:abbr:`RP. |
4b300 | 28 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 29 60 20 66 6f 72 20 6a 6f 69 6e 20 6d 65 73 | (Rendezvous.Point)`.for.join.mes |
4b320 | 73 61 67 65 73 20 74 6f 20 62 65 20 73 65 6e 74 20 74 6f 2e 20 43 75 72 72 65 6e 74 6c 79 20 74 | sages.to.be.sent.to..Currently.t |
4b340 | 68 65 20 6f 6e 6c 79 20 6d 65 74 68 6f 64 6f 6c 6f 67 79 20 74 6f 20 64 6f 20 74 68 69 73 20 69 | he.only.methodology.to.do.this.i |
4b360 | 73 20 76 69 61 20 73 74 61 74 69 63 20 72 65 6e 64 65 7a 76 6f 75 73 20 70 6f 69 6e 74 20 63 6f | s.via.static.rendezvous.point.co |
4b380 | 6d 6d 61 6e 64 73 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 54 53 4f 2f 4c 52 4f 20 | mmands..In.order.to.use.TSO/LRO. |
4b3a0 | 77 69 74 68 20 56 4d 58 4e 45 54 33 20 61 64 61 74 65 72 73 20 6f 6e 65 20 6d 75 73 74 20 61 6c | with.VMXNET3.adaters.one.must.al |
4b3c0 | 73 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 53 47 20 6f 66 66 6c 6f 61 64 69 6e 67 20 6f 70 74 69 | so.enable.the.SG.offloading.opti |
4b3e0 | 6f 6e 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 66 6c 6f 77 74 61 62 6c 65 73 2c 20 | on..In.order.to.use.flowtables,. |
4b400 | 74 68 65 20 6d 69 6e 69 6d 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6e 65 65 64 65 64 | the.minimal.configuration.needed |
4b420 | 20 69 6e 63 6c 75 64 65 73 3a 00 49 6e 20 6f 74 68 65 72 20 77 6f 72 64 73 20 69 74 20 61 6c 6c | .includes:.In.other.words.it.all |
4b440 | 6f 77 73 20 63 6f 6e 74 72 6f 6c 20 6f 66 20 77 68 69 63 68 20 63 61 72 64 73 20 28 75 73 75 61 | ows.control.of.which.cards.(usua |
4b460 | 6c 6c 79 20 31 29 20 77 69 6c 6c 20 72 65 73 70 6f 6e 64 20 74 6f 20 61 6e 20 61 72 70 20 72 65 | lly.1).will.respond.to.an.arp.re |
4b480 | 71 75 65 73 74 2e 00 49 6e 20 6f 74 68 65 72 20 77 6f 72 64 73 2c 20 63 6f 6e 6e 65 63 74 69 6f | quest..In.other.words,.connectio |
4b4a0 | 6e 20 74 72 61 63 6b 69 6e 67 20 68 61 73 20 61 6c 72 65 61 64 79 20 6f 62 73 65 72 76 65 64 20 | n.tracking.has.already.observed. |
4b4c0 | 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 62 65 20 63 6c 6f 73 65 64 20 61 6e 64 20 68 61 73 | the.connection.be.closed.and.has |
4b4e0 | 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 68 65 20 66 6c 6f 77 20 74 6f 20 49 4e 56 41 4c 49 44 20 | .transition.the.flow.to.INVALID. |
4b500 | 74 6f 20 70 72 65 76 65 6e 74 20 61 74 74 61 63 6b 73 20 66 72 6f 6d 20 61 74 74 65 6d 70 74 69 | to.prevent.attacks.from.attempti |
4b520 | 6e 67 20 74 6f 20 72 65 75 73 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 49 6e 20 6f | ng.to.reuse.the.connection..In.o |
4b540 | 75 72 20 65 78 61 6d 70 6c 65 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 6e 61 6d 65 20 | ur.example.the.certificate.name. |
4b560 | 69 73 20 63 61 6c 6c 65 64 20 76 79 6f 73 3a 00 49 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 2c 20 | is.called.vyos:.In.our.example,. |
4b580 | 77 65 20 75 73 65 64 20 74 68 65 20 6b 65 79 20 6e 61 6d 65 20 60 60 6f 70 65 6e 76 70 6e 2d 31 | we.used.the.key.name.``openvpn-1 |
4b5a0 | 60 60 20 77 68 69 63 68 20 77 65 20 77 69 6c 6c 20 72 65 66 65 72 65 6e 63 65 20 69 6e 20 6f 75 | ``.which.we.will.reference.in.ou |
4b5c0 | 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 49 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 2c | r.configuration..In.our.example, |
4b5e0 | 20 77 65 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 64 69 6e 67 20 77 65 62 20 73 65 72 76 65 | .we.will.be.forwarding.web.serve |
4b600 | 72 20 74 72 61 66 66 69 63 20 74 6f 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 77 65 62 20 73 65 72 | r.traffic.to.an.internal.web.ser |
4b620 | 76 65 72 20 6f 6e 20 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 2e 20 48 54 54 50 20 74 72 61 66 66 | ver.on.192.168.0.100..HTTP.traff |
4b640 | 69 63 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 74 68 65 20 54 43 50 20 70 72 6f 74 6f 63 6f 6c | ic.makes.use.of.the.TCP.protocol |
4b660 | 20 6f 6e 20 70 6f 72 74 20 38 30 2e 20 46 6f 72 20 6f 74 68 65 72 20 63 6f 6d 6d 6f 6e 20 70 6f | .on.port.80..For.other.common.po |
4b680 | 72 74 20 6e 75 6d 62 65 72 73 2c 20 73 65 65 3a 20 68 74 74 70 73 3a 2f 2f 65 6e 2e 77 69 6b 69 | rt.numbers,.see:.https://en.wiki |
4b6a0 | 70 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 4c 69 73 74 5f 6f 66 5f 54 43 50 5f 61 6e 64 5f 55 | pedia.org/wiki/List_of_TCP_and_U |
4b6c0 | 44 50 5f 70 6f 72 74 5f 6e 75 6d 62 65 72 73 00 49 6e 20 70 72 69 6e 63 69 70 6c 65 2c 20 76 61 | DP_port_numbers.In.principle,.va |
4b6e0 | 6c 75 65 73 20 6d 75 73 74 20 62 65 20 3a 63 6f 64 65 3a 60 6d 69 6e 2d 74 68 72 65 73 68 6f 6c | lues.must.be.:code:`min-threshol |
4b700 | 64 60 20 3c 20 3a 63 6f 64 65 3a 60 6d 61 78 2d 74 68 72 65 73 68 6f 6c 64 60 20 3c 20 3a 63 6f | d`.<.:code:`max-threshold`.<.:co |
4b720 | 64 65 3a 60 71 75 65 75 65 2d 6c 69 6d 69 74 60 2e 00 49 6e 20 73 68 6f 72 74 2c 20 44 4d 56 50 | de:`queue-limit`..In.short,.DMVP |
4b740 | 4e 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 63 61 70 61 62 69 6c 69 74 79 20 66 6f 72 20 63 72 | N.provides.the.capability.for.cr |
4b760 | 65 61 74 69 6e 67 20 61 20 64 79 6e 61 6d 69 63 2d 6d 65 73 68 20 56 50 4e 20 6e 65 74 77 6f 72 | eating.a.dynamic-mesh.VPN.networ |
4b780 | 6b 20 77 69 74 68 6f 75 74 20 68 61 76 69 6e 67 20 74 6f 20 70 72 65 2d 63 6f 6e 66 69 67 75 72 | k.without.having.to.pre-configur |
4b7a0 | 65 20 28 73 74 61 74 69 63 29 20 61 6c 6c 20 70 6f 73 73 69 62 6c 65 20 74 75 6e 6e 65 6c 20 65 | e.(static).all.possible.tunnel.e |
4b7c0 | 6e 64 2d 70 6f 69 6e 74 20 70 65 65 72 73 2e 00 49 6e 20 73 6f 6d 65 20 63 61 73 65 73 20 69 74 | nd-point.peers..In.some.cases.it |
4b7e0 | 20 6d 61 79 20 62 65 20 6d 6f 72 65 20 63 6f 6e 76 65 6e 69 65 6e 74 20 74 6f 20 65 6e 61 62 6c | .may.be.more.convenient.to.enabl |
4b800 | 65 20 4f 53 50 46 20 6f 6e 20 61 20 70 65 72 20 69 6e 74 65 72 66 61 63 65 2f 73 75 62 6e 65 74 | e.OSPF.on.a.per.interface/subnet |
4b820 | 20 62 61 73 69 73 20 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 70 72 6f 74 6f 63 6f 6c 73 20 6f 73 | .basis.:cfgcmd:`set.protocols.os |
4b840 | 70 66 20 69 6e 74 65 72 66 61 63 65 20 3c 69 6e 74 65 72 66 61 63 65 3e 20 61 72 65 61 20 3c 78 | pf.interface.<interface>.area.<x |
4b860 | 2e 78 2e 78 2e 78 20 7c 20 78 3e 60 00 49 6e 20 74 68 65 20 3a 72 65 66 3a 60 63 72 65 61 74 69 | .x.x.x.|.x>`.In.the.:ref:`creati |
4b880 | 6e 67 5f 61 5f 74 72 61 66 66 69 63 5f 70 6f 6c 69 63 79 60 20 73 65 63 74 69 6f 6e 20 79 6f 75 | ng_a_traffic_policy`.section.you |
4b8a0 | 20 77 69 6c 6c 20 73 65 65 20 74 68 61 74 20 73 6f 6d 65 20 6f 66 20 74 68 65 20 70 6f 6c 69 63 | .will.see.that.some.of.the.polic |
4b8c0 | 69 65 73 20 75 73 65 20 2a 63 6c 61 73 73 65 73 2a 2e 20 54 68 6f 73 65 20 70 6f 6c 69 63 69 65 | ies.use.*classes*..Those.policie |
4b8e0 | 73 20 6c 65 74 20 79 6f 75 20 64 69 73 74 72 69 62 75 74 65 20 74 72 61 66 66 69 63 20 69 6e 74 | s.let.you.distribute.traffic.int |
4b900 | 6f 20 64 69 66 66 65 72 65 6e 74 20 63 6c 61 73 73 65 73 20 61 63 63 6f 72 64 69 6e 67 20 74 6f | o.different.classes.according.to |
4b920 | 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 61 6d 65 74 65 72 73 20 79 6f 75 20 63 61 6e 20 63 68 | .different.parameters.you.can.ch |
4b940 | 6f 6f 73 65 2e 20 53 6f 2c 20 61 20 63 6c 61 73 73 20 69 73 20 6a 75 73 74 20 61 20 73 70 65 63 | oose..So,.a.class.is.just.a.spec |
4b960 | 69 66 69 63 20 74 79 70 65 20 6f 66 20 74 72 61 66 66 69 63 20 79 6f 75 20 73 65 6c 65 63 74 2e | ific.type.of.traffic.you.select. |
4b980 | 00 49 6e 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2c 20 61 20 6b 65 79 20 70 6f 69 6e 74 20 6f 66 | .In.the.VyOS.CLI,.a.key.point.of |
4b9a0 | 74 65 6e 20 6f 76 65 72 6c 6f 6f 6b 65 64 20 69 73 20 74 68 61 74 20 72 61 74 68 65 72 20 74 68 | ten.overlooked.is.that.rather.th |
4b9c0 | 61 6e 20 62 65 69 6e 67 20 63 6f 6e 66 69 67 75 72 65 64 20 75 73 69 6e 67 20 74 68 65 20 60 73 | an.being.configured.using.the.`s |
4b9e0 | 65 74 20 76 70 6e 60 20 73 74 61 6e 7a 61 2c 20 4f 70 65 6e 56 50 4e 20 69 73 20 63 6f 6e 66 69 | et.vpn`.stanza,.OpenVPN.is.confi |
4ba00 | 67 75 72 65 64 20 61 73 20 61 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 20 75 73 69 | gured.as.a.network.interface.usi |
4ba20 | 6e 67 20 60 73 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 6f 70 65 6e 76 70 6e 60 2e 00 49 6e 20 | ng.`set.interfaces.openvpn`..In. |
4ba40 | 74 68 65 20 61 62 6f 76 65 20 65 78 61 6d 70 6c 65 2c 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 49 | the.above.example,.an.external.I |
4ba60 | 50 20 6f 66 20 31 39 32 2e 30 2e 32 2e 32 20 69 73 20 61 73 73 75 6d 65 64 2e 00 49 6e 20 74 68 | P.of.192.0.2.2.is.assumed..In.th |
4ba80 | 65 20 61 67 65 20 6f 66 20 76 65 72 79 20 66 61 73 74 20 6e 65 74 77 6f 72 6b 73 2c 20 61 20 73 | e.age.of.very.fast.networks,.a.s |
4baa0 | 65 63 6f 6e 64 20 6f 66 20 75 6e 72 65 61 63 68 61 62 69 6c 69 74 79 20 6d 61 79 20 65 71 75 61 | econd.of.unreachability.may.equa |
4bac0 | 6c 20 6d 69 6c 6c 69 6f 6e 73 20 6f 66 20 6c 6f 73 74 20 70 61 63 6b 65 74 73 2e 20 54 68 65 20 | l.millions.of.lost.packets..The. |
4bae0 | 69 64 65 61 20 62 65 68 69 6e 64 20 42 46 44 20 69 73 20 74 6f 20 64 65 74 65 63 74 20 76 65 72 | idea.behind.BFD.is.to.detect.ver |
4bb00 | 79 20 71 75 69 63 6b 6c 79 20 77 68 65 6e 20 61 20 70 65 65 72 20 69 73 20 64 6f 77 6e 20 61 6e | y.quickly.when.a.peer.is.down.an |
4bb20 | 64 20 74 61 6b 65 20 61 63 74 69 6f 6e 20 65 78 74 72 65 6d 65 6c 79 20 66 61 73 74 2e 00 49 6e | d.take.action.extremely.fast..In |
4bb40 | 20 74 68 65 20 63 61 73 65 20 6f 66 20 4c 32 54 50 76 33 2c 20 74 68 65 20 66 65 61 74 75 72 65 | .the.case.of.L2TPv3,.the.feature |
4bb60 | 73 20 6c 6f 73 74 20 61 72 65 20 74 65 6c 65 74 72 61 66 66 69 63 20 65 6e 67 69 6e 65 65 72 69 | s.lost.are.teletraffic.engineeri |
4bb80 | 6e 67 20 66 65 61 74 75 72 65 73 20 63 6f 6e 73 69 64 65 72 65 64 20 69 6d 70 6f 72 74 61 6e 74 | ng.features.considered.important |
4bba0 | 20 69 6e 20 4d 50 4c 53 2e 20 48 6f 77 65 76 65 72 2c 20 74 68 65 72 65 20 69 73 20 6e 6f 20 72 | .in.MPLS..However,.there.is.no.r |
4bbc0 | 65 61 73 6f 6e 20 74 68 65 73 65 20 66 65 61 74 75 72 65 73 20 63 6f 75 6c 64 20 6e 6f 74 20 62 | eason.these.features.could.not.b |
4bbe0 | 65 20 72 65 2d 65 6e 67 69 6e 65 65 72 65 64 20 69 6e 20 6f 72 20 6f 6e 20 74 6f 70 20 6f 66 20 | e.re-engineered.in.or.on.top.of. |
4bc00 | 4c 32 54 50 76 33 20 69 6e 20 6c 61 74 65 72 20 70 72 6f 64 75 63 74 73 2e 00 49 6e 20 74 68 65 | L2TPv3.in.later.products..In.the |
4bc20 | 20 63 61 73 65 20 74 68 65 20 61 76 65 72 61 67 65 20 71 75 65 75 65 20 73 69 7a 65 20 69 73 20 | .case.the.average.queue.size.is. |
4bc40 | 62 65 74 77 65 65 6e 20 2a 2a 6d 69 6e 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 20 61 6e 64 20 2a 2a | between.**min-threshold**.and.** |
4bc60 | 6d 61 78 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 2c 20 74 68 65 6e 20 61 6e 20 61 72 72 69 76 69 6e | max-threshold**,.then.an.arrivin |
4bc80 | 67 20 70 61 63 6b 65 74 20 77 6f 75 6c 64 20 62 65 20 65 69 74 68 65 72 20 64 72 6f 70 70 65 64 | g.packet.would.be.either.dropped |
4bca0 | 20 6f 72 20 70 6c 61 63 65 64 20 69 6e 20 74 68 65 20 71 75 65 75 65 2c 20 69 74 20 77 69 6c 6c | .or.placed.in.the.queue,.it.will |
4bcc0 | 20 64 65 70 65 6e 64 20 6f 6e 20 74 68 65 20 64 65 66 69 6e 65 64 20 2a 2a 6d 61 72 6b 2d 70 72 | .depend.on.the.defined.**mark-pr |
4bce0 | 6f 62 61 62 69 6c 69 74 79 2a 2a 2e 00 49 6e 20 74 68 65 20 63 61 73 65 20 79 6f 75 20 77 61 6e | obability**..In.the.case.you.wan |
4bd00 | 74 20 74 6f 20 61 70 70 6c 79 20 73 6f 6d 65 20 6b 69 6e 64 20 6f 66 20 2a 2a 73 68 61 70 69 6e | t.to.apply.some.kind.of.**shapin |
4bd20 | 67 2a 2a 20 74 6f 20 79 6f 75 72 20 2a 2a 69 6e 62 6f 75 6e 64 2a 2a 20 74 72 61 66 66 69 63 2c | g**.to.your.**inbound**.traffic, |
4bd40 | 20 63 68 65 63 6b 20 74 68 65 20 69 6e 67 72 65 73 73 2d 73 68 61 70 69 6e 67 5f 20 73 65 63 74 | .check.the.ingress-shaping_.sect |
4bd60 | 69 6f 6e 2e 00 49 6e 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 61 62 6f 76 65 2c 20 77 65 20 73 65 | ion..In.the.command.above,.we.se |
4bd80 | 74 20 74 68 65 20 74 79 70 65 20 6f 66 20 70 6f 6c 69 63 79 20 77 65 20 61 72 65 20 67 6f 69 6e | t.the.type.of.policy.we.are.goin |
4bda0 | 67 20 74 6f 20 77 6f 72 6b 20 77 69 74 68 20 61 6e 64 20 74 68 65 20 6e 61 6d 65 20 77 65 20 63 | g.to.work.with.and.the.name.we.c |
4bdc0 | 68 6f 6f 73 65 20 66 6f 72 20 69 74 3b 20 61 20 63 6c 61 73 73 20 28 73 6f 20 74 68 61 74 20 77 | hoose.for.it;.a.class.(so.that.w |
4bde0 | 65 20 63 61 6e 20 64 69 66 66 65 72 65 6e 74 69 61 74 65 20 73 6f 6d 65 20 74 72 61 66 66 69 63 | e.can.differentiate.some.traffic |
4be00 | 29 20 61 6e 64 20 61 6e 20 69 64 65 6e 74 69 66 69 61 62 6c 65 20 6e 75 6d 62 65 72 20 66 6f 72 | ).and.an.identifiable.number.for |
4be20 | 20 74 68 61 74 20 63 6c 61 73 73 3b 20 74 68 65 6e 20 77 65 20 63 6f 6e 66 69 67 75 72 65 20 61 | .that.class;.then.we.configure.a |
4be40 | 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 20 28 6f 72 20 66 69 6c 74 65 72 29 20 61 6e 64 20 61 | .matching.rule.(or.filter).and.a |
4be60 | 20 6e 61 6d 65 20 66 6f 72 20 69 74 2e 00 49 6e 20 74 68 65 20 65 6e 64 2c 20 61 6e 20 58 4d 4c | .name.for.it..In.the.end,.an.XML |
4be80 | 20 73 74 72 75 63 74 75 72 65 20 69 73 20 67 65 6e 65 72 61 74 65 64 20 77 68 69 63 68 20 63 61 | .structure.is.generated.which.ca |
4bea0 | 6e 20 62 65 20 73 61 76 65 64 20 61 73 20 60 60 76 79 6f 73 2e 6d 6f 62 69 6c 65 63 6f 6e 66 69 | n.be.saved.as.``vyos.mobileconfi |
4bec0 | 67 60 60 20 61 6e 64 20 73 65 6e 74 20 74 6f 20 74 68 65 20 64 65 76 69 63 65 20 62 79 20 45 2d | g``.and.sent.to.the.device.by.E- |
4bee0 | 4d 61 69 6c 20 77 68 65 72 65 20 69 74 20 6c 61 74 65 72 20 63 61 6e 20 62 65 20 69 6d 70 6f 72 | Mail.where.it.later.can.be.impor |
4bf00 | 74 65 64 2e 00 49 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 61 62 6f 76 65 2c 20 74 68 65 20 66 | ted..In.the.example.above,.the.f |
4bf20 | 69 72 73 74 20 34 39 39 20 73 65 73 73 69 6f 6e 73 20 63 6f 6e 6e 65 63 74 20 77 69 74 68 6f 75 | irst.499.sessions.connect.withou |
4bf40 | 74 20 64 65 6c 61 79 2e 20 50 41 44 4f 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 62 65 20 64 65 | t.delay..PADO.packets.will.be.de |
4bf60 | 6c 61 79 65 64 20 35 30 20 6d 73 20 66 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 72 6f 6d 20 | layed.50.ms.for.connection.from. |
4bf80 | 35 30 30 20 74 6f 20 39 39 39 2c 20 74 68 69 73 20 74 72 69 63 6b 20 61 6c 6c 6f 77 73 20 6f 74 | 500.to.999,.this.trick.allows.ot |
4bfa0 | 68 65 72 20 50 50 50 6f 45 20 73 65 72 76 65 72 73 20 73 65 6e 64 20 50 41 44 4f 20 66 61 73 74 | her.PPPoE.servers.send.PADO.fast |
4bfc0 | 65 72 20 61 6e 64 20 63 6c 69 65 6e 74 73 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 20 6f | er.and.clients.will.connect.to.o |
4bfe0 | 74 68 65 72 20 73 65 72 76 65 72 73 2e 20 4c 61 73 74 20 63 6f 6d 6d 61 6e 64 20 73 61 79 73 20 | ther.servers..Last.command.says. |
4c000 | 74 68 61 74 20 74 68 69 73 20 50 50 50 6f 45 20 73 65 72 76 65 72 20 63 61 6e 20 73 65 72 76 65 | that.this.PPPoE.server.can.serve |
4c020 | 20 6f 6e 6c 79 20 33 30 30 30 20 63 6c 69 65 6e 74 73 2e 00 49 6e 20 74 68 65 20 65 78 61 6d 70 | .only.3000.clients..In.the.examp |
4c040 | 6c 65 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 51 75 69 63 6b 20 53 74 61 72 74 20 63 6f 6e 66 | le.used.for.the.Quick.Start.conf |
4c060 | 69 67 75 72 61 74 69 6f 6e 20 61 62 6f 76 65 2c 20 77 65 20 64 65 6d 6f 6e 73 74 72 61 74 65 20 | iguration.above,.we.demonstrate. |
4c080 | 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 49 6e 20 | the.following.configuration:.In. |
4c0a0 | 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 77 65 20 63 61 6e 20 73 65 65 | the.following.example.we.can.see |
4c0c0 | 20 61 20 62 61 73 69 63 20 6d 75 6c 74 69 63 61 73 74 20 73 65 74 75 70 3a 00 49 6e 20 74 68 65 | .a.basic.multicast.setup:.In.the |
4c0e0 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 2c 20 62 6f 74 68 20 60 55 73 65 72 31 60 | .following.example,.both.`User1` |
4c100 | 20 61 6e 64 20 60 55 73 65 72 32 60 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 53 53 48 | .and.`User2`.will.be.able.to.SSH |
4c120 | 20 69 6e 74 6f 20 56 79 4f 53 20 61 73 20 75 73 65 72 20 60 60 76 79 6f 73 60 60 20 75 73 69 6e | .into.VyOS.as.user.``vyos``.usin |
4c140 | 67 20 74 68 65 69 72 20 76 65 72 79 20 6f 77 6e 20 6b 65 79 73 2e 20 60 55 73 65 72 31 60 20 69 | g.their.very.own.keys..`User1`.i |
4c160 | 73 20 72 65 73 74 72 69 63 74 65 64 20 74 6f 20 6f 6e 6c 79 20 62 65 20 61 62 6c 65 20 74 6f 20 | s.restricted.to.only.be.able.to. |
4c180 | 63 6f 6e 6e 65 63 74 20 66 72 6f 6d 20 61 20 73 69 6e 67 6c 65 20 49 50 20 61 64 64 72 65 73 73 | connect.from.a.single.IP.address |
4c1a0 | 2e 20 49 6e 20 61 64 64 69 74 69 6f 6e 20 69 66 20 70 61 73 73 77 6f 72 64 20 62 61 73 65 20 6c | ..In.addition.if.password.base.l |
4c1c0 | 6f 67 69 6e 20 69 73 20 77 61 6e 74 65 64 20 66 6f 72 20 74 68 65 20 60 60 76 79 6f 73 60 60 20 | ogin.is.wanted.for.the.``vyos``. |
4c1e0 | 75 73 65 72 20 61 20 32 46 41 2f 4d 46 41 20 6b 65 79 63 6f 64 65 20 69 73 20 72 65 71 75 69 72 | user.a.2FA/MFA.keycode.is.requir |
4c200 | 65 64 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 70 61 73 73 77 6f 72 64 2e 00 | ed.in.addition.to.the.password.. |
4c220 | 49 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 2c 20 74 68 65 20 49 50 | In.the.following.example,.the.IP |
4c240 | 73 20 66 6f 72 20 74 68 65 20 72 65 6d 6f 74 65 20 63 6c 69 65 6e 74 73 20 61 72 65 20 64 65 66 | s.for.the.remote.clients.are.def |
4c260 | 69 6e 65 64 20 69 6e 20 74 68 65 20 70 65 65 72 73 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 74 | ined.in.the.peers..This.allows.t |
4c280 | 68 65 20 70 65 65 72 73 20 74 6f 20 69 6e 74 65 72 61 63 74 20 77 69 74 68 20 6f 6e 65 20 61 6e | he.peers.to.interact.with.one.an |
4c2a0 | 6f 74 68 65 72 2e 20 49 6e 20 63 6f 6d 70 61 72 69 73 6f 6e 20 74 6f 20 74 68 65 20 73 69 74 65 | other..In.comparison.to.the.site |
4c2c0 | 2d 74 6f 2d 73 69 74 65 20 65 78 61 6d 70 6c 65 20 74 68 65 20 60 60 70 65 72 73 69 73 74 65 6e | -to-site.example.the.``persisten |
4c2e0 | 74 2d 6b 65 65 70 61 6c 69 76 65 60 60 20 66 6c 61 67 20 69 73 20 73 65 74 20 74 6f 20 31 35 20 | t-keepalive``.flag.is.set.to.15. |
4c300 | 73 65 63 6f 6e 64 73 20 74 6f 20 61 73 73 75 72 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e | seconds.to.assure.the.connection |
4c320 | 20 69 73 20 6b 65 70 74 20 61 6c 69 76 65 2e 20 54 68 69 73 20 69 73 20 6d 61 69 6e 6c 79 20 72 | .is.kept.alive..This.is.mainly.r |
4c340 | 65 6c 65 76 61 6e 74 20 69 66 20 6f 6e 65 20 6f 66 20 74 68 65 20 70 65 65 72 73 20 69 73 20 62 | elevant.if.one.of.the.peers.is.b |
4c360 | 65 68 69 6e 64 20 4e 41 54 20 61 6e 64 20 63 61 6e 27 74 20 62 65 20 63 6f 6e 6e 65 63 74 65 64 | ehind.NAT.and.can't.be.connected |
4c380 | 20 74 6f 20 69 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 6c 6f 73 74 2e 20 54 | .to.if.the.connection.is.lost..T |
4c3a0 | 6f 20 62 65 20 65 66 66 65 63 74 69 76 65 20 74 68 69 73 20 76 61 6c 75 65 20 6e 65 65 64 73 20 | o.be.effective.this.value.needs. |
4c3c0 | 74 6f 20 62 65 20 6c 6f 77 65 72 20 74 68 61 6e 20 74 68 65 20 55 44 50 20 74 69 6d 65 6f 75 74 | to.be.lower.than.the.UDP.timeout |
4c3e0 | 2e 00 49 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 2c 20 77 68 65 6e | ..In.the.following.example,.when |
4c400 | 20 56 4c 41 4e 39 20 74 72 61 6e 73 69 74 69 6f 6e 73 2c 20 56 4c 41 4e 32 30 20 77 69 6c 6c 20 | .VLAN9.transitions,.VLAN20.will. |
4c420 | 61 6c 73 6f 20 74 72 61 6e 73 69 74 69 6f 6e 3a 00 49 6e 20 74 68 65 20 66 75 74 75 72 65 20 74 | also.transition:.In.the.future.t |
4c440 | 68 69 73 20 69 73 20 65 78 70 65 63 74 65 64 20 74 6f 20 62 65 20 61 20 76 65 72 79 20 75 73 65 | his.is.expected.to.be.a.very.use |
4c460 | 66 75 6c 20 70 72 6f 74 6f 63 6f 6c 20 28 74 68 6f 75 67 68 20 74 68 65 72 65 20 61 72 65 20 60 | ful.protocol.(though.there.are.` |
4c480 | 6f 74 68 65 72 20 70 72 6f 70 6f 73 61 6c 73 60 5f 29 2e 00 49 6e 20 74 68 65 20 6e 65 78 74 20 | other.proposals`_)..In.the.next. |
4c4a0 | 65 78 61 6d 70 6c 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 64 65 73 74 69 6e 65 64 20 74 6f 20 | example.all.traffic.destined.to. |
4c4c0 | 60 60 32 30 33 2e 30 2e 31 31 33 2e 31 60 60 20 61 6e 64 20 70 6f 72 74 20 60 60 38 32 38 30 60 | ``203.0.113.1``.and.port.``8280` |
4c4e0 | 60 20 70 72 6f 74 6f 63 6f 6c 20 54 43 50 20 69 73 20 62 61 6c 61 6e 63 65 64 20 62 65 74 77 65 | `.protocol.TCP.is.balanced.betwe |
4c500 | 65 6e 20 32 20 72 65 61 6c 20 73 65 72 76 65 72 73 20 60 60 31 39 32 2e 30 2e 32 2e 31 31 60 60 | en.2.real.servers.``192.0.2.11`` |
4c520 | 20 61 6e 64 20 60 60 31 39 32 2e 30 2e 32 2e 31 32 60 60 20 74 6f 20 70 6f 72 74 20 60 60 38 30 | .and.``192.0.2.12``.to.port.``80 |
4c540 | 60 60 00 49 6e 20 74 68 65 20 70 61 73 74 20 28 56 79 4f 53 20 31 2e 31 29 20 75 73 65 64 20 61 | ``.In.the.past.(VyOS.1.1).used.a |
4c560 | 20 67 61 74 65 77 61 79 2d 61 64 64 72 65 73 73 20 63 6f 6e 66 69 67 75 72 65 64 20 75 6e 64 65 | .gateway-address.configured.unde |
4c580 | 72 20 74 68 65 20 73 79 73 74 65 6d 20 74 72 65 65 20 28 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 | r.the.system.tree.(:cfgcmd:`set. |
4c5a0 | 73 79 73 74 65 6d 20 67 61 74 65 77 61 79 2d 61 64 64 72 65 73 73 20 3c 61 64 64 72 65 73 73 3e | system.gateway-address.<address> |
4c5c0 | 60 29 2c 20 74 68 69 73 20 69 73 20 6e 6f 20 6c 6f 6e 67 65 72 20 73 75 70 70 6f 72 74 65 64 20 | `),.this.is.no.longer.supported. |
4c5e0 | 61 6e 64 20 65 78 69 73 74 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 20 61 72 65 20 | and.existing.configurations.are. |
4c600 | 6d 69 67 72 61 74 65 64 20 74 6f 20 74 68 65 20 6e 65 77 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 2e | migrated.to.the.new.CLI.command. |
4c620 | 00 49 6e 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 72 65 65 2c 20 61 6c 6c 20 68 61 72 64 77 | .In.this.command.tree,.all.hardw |
4c640 | 61 72 65 20 61 63 63 65 6c 65 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 77 69 6c 6c 20 62 65 | are.acceleration.options.will.be |
4c660 | 20 68 61 6e 64 6c 65 64 2e 20 41 74 20 74 68 65 20 6d 6f 6d 65 6e 74 20 6f 6e 6c 79 20 60 49 6e | .handled..At.the.moment.only.`In |
4c680 | 74 65 6c c2 ae 20 51 41 54 60 5f 20 69 73 20 73 75 70 70 6f 72 74 65 64 00 49 6e 20 74 68 69 73 | tel...QAT`_.is.supported.In.this |
4c6a0 | 20 65 78 61 6d 70 6c 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 64 65 73 74 69 6e 65 64 20 74 6f | .example.all.traffic.destined.to |
4c6c0 | 20 70 6f 72 74 73 20 22 38 30 2c 20 32 32 32 32 2c 20 38 38 38 38 22 20 70 72 6f 74 6f 63 6f 6c | .ports."80,.2222,.8888".protocol |
4c6e0 | 20 54 43 50 20 6d 61 72 6b 73 20 74 6f 20 66 77 6d 61 72 6b 20 22 31 31 31 22 20 61 6e 64 20 62 | .TCP.marks.to.fwmark."111".and.b |
4c700 | 61 6c 61 6e 63 65 64 20 62 65 74 77 65 65 6e 20 32 20 72 65 61 6c 20 73 65 72 76 65 72 73 2e 20 | alanced.between.2.real.servers.. |
4c720 | 50 6f 72 74 20 22 30 22 20 69 73 20 72 65 71 75 69 72 65 64 20 69 66 20 6d 75 6c 74 69 70 6c 65 | Port."0".is.required.if.multiple |
4c740 | 20 70 6f 72 74 73 20 61 72 65 20 75 73 65 64 2e 00 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 | .ports.are.used..In.this.example |
4c760 | 20 69 6d 61 67 65 2c 20 61 20 73 69 6d 70 6c 69 66 65 64 20 74 72 61 66 66 69 63 20 66 6c 6f 77 | .image,.a.simplifed.traffic.flow |
4c780 | 20 69 73 20 73 68 6f 77 6e 20 74 6f 20 68 65 6c 70 20 70 72 6f 76 69 64 65 20 63 6f 6e 74 65 78 | .is.shown.to.help.provide.contex |
4c7a0 | 74 20 74 6f 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 60 66 6f 72 77 61 72 64 60 2c 20 60 69 6e | t.to.the.terms.of.`forward`,.`in |
4c7c0 | 70 75 74 60 2c 20 61 6e 64 20 60 6f 75 74 70 75 74 60 20 66 6f 72 20 74 68 65 20 6e 65 77 20 66 | put`,.and.`output`.for.the.new.f |
4c7e0 | 69 72 65 77 61 6c 6c 20 43 4c 49 20 66 6f 72 6d 61 74 2e 00 49 6e 20 74 68 69 73 20 65 78 61 6d | irewall.CLI.format..In.this.exam |
4c800 | 70 6c 65 20 77 65 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 6d 6f 73 74 20 63 6f 6d 70 6c 69 63 | ple.we.will.use.the.most.complic |
4c820 | 61 74 65 64 20 63 61 73 65 3a 20 61 20 73 65 74 75 70 20 77 68 65 72 65 20 65 61 63 68 20 63 6c | ated.case:.a.setup.where.each.cl |
4c840 | 69 65 6e 74 20 69 73 20 61 20 72 6f 75 74 65 72 20 74 68 61 74 20 68 61 73 20 69 74 73 20 6f 77 | ient.is.a.router.that.has.its.ow |
4c860 | 6e 20 73 75 62 6e 65 74 20 28 74 68 69 6e 6b 20 48 51 20 61 6e 64 20 62 72 61 6e 63 68 20 6f 66 | n.subnet.(think.HQ.and.branch.of |
4c880 | 66 69 63 65 73 29 2c 20 73 69 6e 63 65 20 73 69 6d 70 6c 65 72 20 73 65 74 75 70 73 20 61 72 65 | fices),.since.simpler.setups.are |
4c8a0 | 20 73 75 62 73 65 74 73 20 6f 66 20 69 74 2e 00 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 2c | .subsets.of.it..In.this.example, |
4c8c0 | 20 73 6f 6d 65 20 2a 4f 70 65 6e 4e 49 43 2a 20 73 65 72 76 65 72 73 20 61 72 65 20 75 73 65 64 | .some.*OpenNIC*.servers.are.used |
4c8e0 | 2c 20 74 77 6f 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 74 77 6f 20 49 50 76 | ,.two.IPv4.addresses.and.two.IPv |
4c900 | 36 20 61 64 64 72 65 73 73 65 73 3a 00 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 2c 20 77 65 | 6.addresses:.In.this.example,.we |
4c920 | 20 75 73 65 20 2a 2a 6d 61 73 71 75 65 72 61 64 65 2a 2a 20 61 73 20 74 68 65 20 74 72 61 6e 73 | .use.**masquerade**.as.the.trans |
4c940 | 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 69 6e 73 74 65 61 64 20 6f 66 20 61 6e 20 49 50 20 | lation.address.instead.of.an.IP. |
4c960 | 61 64 64 72 65 73 73 2e 20 54 68 65 20 2a 2a 6d 61 73 71 75 65 72 61 64 65 2a 2a 20 74 61 72 67 | address..The.**masquerade**.targ |
4c980 | 65 74 20 69 73 20 65 66 66 65 63 74 69 76 65 6c 79 20 61 6e 20 61 6c 69 61 73 20 74 6f 20 73 61 | et.is.effectively.an.alias.to.sa |
4c9a0 | 79 20 22 75 73 65 20 77 68 61 74 65 76 65 72 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 6f 6e | y."use.whatever.IP.address.is.on |
4c9c0 | 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 22 2c 20 72 61 74 68 65 72 | .the.outgoing.interface",.rather |
4c9e0 | 20 74 68 61 6e 20 61 20 73 74 61 74 69 63 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 49 50 | .than.a.statically.configured.IP |
4ca00 | 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 69 66 20 79 6f 75 20 | .address..This.is.useful.if.you. |
4ca20 | 75 73 65 20 44 48 43 50 20 66 6f 72 20 79 6f 75 72 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 | use.DHCP.for.your.outgoing.inter |
4ca40 | 66 61 63 65 20 61 6e 64 20 64 6f 20 6e 6f 74 20 6b 6e 6f 77 20 77 68 61 74 20 74 68 65 20 65 78 | face.and.do.not.know.what.the.ex |
4ca60 | 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 2e 00 49 6e 20 74 68 69 73 20 | ternal.address.will.be..In.this. |
4ca80 | 65 78 61 6d 70 6c 65 2c 20 77 65 20 77 69 6c 6c 20 62 65 20 75 73 69 6e 67 20 74 68 65 20 65 78 | example,.we.will.be.using.the.ex |
4caa0 | 61 6d 70 6c 65 20 51 75 69 63 6b 20 53 74 61 72 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | ample.Quick.Start.configuration. |
4cac0 | 61 62 6f 76 65 20 61 73 20 61 20 73 74 61 72 74 69 6e 67 20 70 6f 69 6e 74 2e 00 49 6e 20 74 68 | above.as.a.starting.point..In.th |
4cae0 | 69 73 20 6d 65 74 68 6f 64 2c 20 74 68 65 20 44 53 4c 20 4d 6f 64 65 6d 2f 52 6f 75 74 65 72 20 | is.method,.the.DSL.Modem/Router. |
4cb00 | 63 6f 6e 6e 65 63 74 73 20 74 6f 20 74 68 65 20 49 53 50 20 66 6f 72 20 79 6f 75 20 77 69 74 68 | connects.to.the.ISP.for.you.with |
4cb20 | 20 79 6f 75 72 20 63 72 65 64 65 6e 74 69 61 6c 73 20 70 72 65 70 72 6f 67 72 61 6d 6d 65 64 20 | .your.credentials.preprogrammed. |
4cb40 | 69 6e 74 6f 20 74 68 65 20 64 65 76 69 63 65 2e 20 54 68 69 73 20 67 69 76 65 73 20 79 6f 75 20 | into.the.device..This.gives.you. |
4cb60 | 61 6e 20 3a 72 66 63 3a 60 31 39 31 38 60 20 61 64 64 72 65 73 73 2c 20 73 75 63 68 20 61 73 20 | an.:rfc:`1918`.address,.such.as. |
4cb80 | 60 60 31 39 32 2e 31 36 38 2e 31 2e 30 2f 32 34 60 60 20 62 79 20 64 65 66 61 75 6c 74 2e 00 49 | ``192.168.1.0/24``.by.default..I |
4cba0 | 6e 20 74 68 69 73 20 73 63 65 6e 61 72 69 6f 3a 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e | n.this.scenario:.In.this.section |
4cbc0 | 20 74 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 61 | .there's.useful.information.of.a |
4cbe0 | 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 63 | ll.firewall.configuration.that.c |
4cc00 | 61 6e 20 62 65 20 64 6f 6e 65 20 72 65 67 61 72 64 69 6e 67 20 49 50 76 34 2c 20 61 6e 64 20 61 | an.be.done.regarding.IPv4,.and.a |
4cc20 | 70 70 72 6f 70 69 61 74 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 2e 20 43 6f 6e 66 | ppropiate.op-mode.commands..Conf |
4cc40 | 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f 76 65 72 65 64 20 69 6e 20 74 68 | iguration.commands.covered.in.th |
4cc60 | 69 73 20 73 65 63 74 69 6f 6e 3a 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 65 72 | is.section:.In.this.section.ther |
4cc80 | 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 66 69 | e's.useful.information.of.all.fi |
4cca0 | 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 62 65 | rewall.configuration.that.can.be |
4ccc0 | 20 64 6f 6e 65 20 72 65 67 61 72 64 69 6e 67 20 49 50 76 36 2c 20 61 6e 64 20 61 70 70 72 6f 70 | .done.regarding.IPv6,.and.approp |
4cce0 | 69 61 74 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 2e 20 43 6f 6e 66 69 67 75 72 61 | iate.op-mode.commands..Configura |
4cd00 | 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f 76 65 72 65 64 20 69 6e 20 74 68 69 73 20 73 65 | tion.commands.covered.in.this.se |
4cd20 | 63 74 69 6f 6e 3a 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 65 72 65 27 73 20 75 | ction:.In.this.section.there's.u |
4cd40 | 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c | seful.information.of.all.firewal |
4cd60 | 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 62 65 20 64 6f 6e 65 | l.configuration.that.can.be.done |
4cd80 | 20 72 65 67 61 72 64 69 6e 67 20 62 72 69 64 67 65 2c 20 61 6e 64 20 61 70 70 72 6f 70 69 61 74 | .regarding.bridge,.and.appropiat |
4cda0 | 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 2e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f | e.op-mode.commands..Configuratio |
4cdc0 | 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f 76 65 72 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 | n.commands.covered.in.this.secti |
4cde0 | 6f 6e 3a 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 | on:.In.this.section.there's.usef |
4ce00 | 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 | ul.information.of.all.firewall.c |
4ce20 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 72 65 | onfiguration.that.can.be.done.re |
4ce40 | 67 61 72 64 69 6e 67 20 66 6c 6f 77 74 61 62 6c 65 73 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 | garding.flowtables.In.this.secti |
4ce60 | 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 | on.there's.useful.information.of |
4ce80 | 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 | .all.firewall.configuration.that |
4cea0 | 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 72 65 67 61 72 64 69 6e 67 20 66 6c 6f 77 74 61 62 6c 65 | .can.be.done.regarding.flowtable |
4cec0 | 73 2e 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 | s..In.this.section.there's.usefu |
4cee0 | 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 6f | l.information.of.all.firewall.co |
4cf00 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 69 73 20 6e 65 65 64 65 64 20 66 6f 72 20 7a | nfiguration.that.is.needed.for.z |
4cf20 | 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 2e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f | one-based.firewall..Configuratio |
4cf40 | 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f 76 65 72 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 | n.commands.covered.in.this.secti |
4cf60 | 6f 6e 3a 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 79 6f 75 20 63 61 6e 20 66 69 6e 64 | on:.In.this.section.you.can.find |
4cf80 | 20 61 6c 6c 20 75 73 65 66 75 6c 20 66 69 72 65 77 61 6c 6c 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d | .all.useful.firewall.op-mode.com |
4cfa0 | 6d 61 6e 64 73 2e 00 49 6e 20 74 72 61 6e 73 70 61 72 65 6e 74 20 70 72 6f 78 79 20 6d 6f 64 65 | mands..In.transparent.proxy.mode |
4cfc0 | 2c 20 61 6c 6c 20 74 72 61 66 66 69 63 20 61 72 72 69 76 69 6e 67 20 6f 6e 20 70 6f 72 74 20 38 | ,.all.traffic.arriving.on.port.8 |
4cfe0 | 30 20 61 6e 64 20 64 65 73 74 69 6e 65 64 20 66 6f 72 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 | 0.and.destined.for.the.Internet. |
4d000 | 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 66 6f 72 77 61 72 64 65 64 20 74 68 72 6f 75 | is.automatically.forwarded.throu |
4d020 | 67 68 20 74 68 65 20 70 72 6f 78 79 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 69 6d 6d 65 64 69 | gh.the.proxy..This.allows.immedi |
4d040 | 61 74 65 20 70 72 6f 78 79 20 66 6f 72 77 61 72 64 69 6e 67 20 77 69 74 68 6f 75 74 20 63 6f 6e | ate.proxy.forwarding.without.con |
4d060 | 66 69 67 75 72 69 6e 67 20 63 6c 69 65 6e 74 20 62 72 6f 77 73 65 72 73 2e 00 49 6e 20 74 79 70 | figuring.client.browsers..In.typ |
4d080 | 69 63 61 6c 20 75 73 65 73 20 6f 66 20 53 4e 4d 50 2c 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 61 | ical.uses.of.SNMP,.one.or.more.a |
4d0a0 | 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 63 6f 6d 70 75 74 65 72 73 20 63 61 6c 6c 65 64 20 6d | dministrative.computers.called.m |
4d0c0 | 61 6e 61 67 65 72 73 20 68 61 76 65 20 74 68 65 20 74 61 73 6b 20 6f 66 20 6d 6f 6e 69 74 6f 72 | anagers.have.the.task.of.monitor |
4d0e0 | 69 6e 67 20 6f 72 20 6d 61 6e 61 67 69 6e 67 20 61 20 67 72 6f 75 70 20 6f 66 20 68 6f 73 74 73 | ing.or.managing.a.group.of.hosts |
4d100 | 20 6f 72 20 64 65 76 69 63 65 73 20 6f 6e 20 61 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 | .or.devices.on.a.computer.networ |
4d120 | 6b 2e 20 45 61 63 68 20 6d 61 6e 61 67 65 64 20 73 79 73 74 65 6d 20 65 78 65 63 75 74 65 73 20 | k..Each.managed.system.executes. |
4d140 | 61 20 73 6f 66 74 77 61 72 65 20 63 6f 6d 70 6f 6e 65 6e 74 20 63 61 6c 6c 65 64 20 61 6e 20 61 | a.software.component.called.an.a |
4d160 | 67 65 6e 74 20 77 68 69 63 68 20 72 65 70 6f 72 74 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 76 | gent.which.reports.information.v |
4d180 | 69 61 20 53 4e 4d 50 20 74 6f 20 74 68 65 20 6d 61 6e 61 67 65 72 2e 00 49 6e 20 7a 6f 6e 65 2d | ia.SNMP.to.the.manager..In.zone- |
4d1a0 | 62 61 73 65 64 20 70 6f 6c 69 63 79 2c 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 61 73 73 | based.policy,.interfaces.are.ass |
4d1c0 | 69 67 6e 65 64 20 74 6f 20 7a 6f 6e 65 73 2c 20 61 6e 64 20 69 6e 73 70 65 63 74 69 6f 6e 20 70 | igned.to.zones,.and.inspection.p |
4d1e0 | 6f 6c 69 63 79 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 74 72 61 66 66 69 63 20 6d 6f 76 69 | olicy.is.applied.to.traffic.movi |
4d200 | 6e 67 20 62 65 74 77 65 65 6e 20 74 68 65 20 7a 6f 6e 65 73 20 61 6e 64 20 61 63 74 65 64 20 6f | ng.between.the.zones.and.acted.o |
4d220 | 6e 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 2e 20 41 | n.according.to.firewall.rules..A |
4d240 | 20 5a 6f 6e 65 20 69 73 20 61 20 67 72 6f 75 70 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 20 74 | .Zone.is.a.group.of.interfaces.t |
4d260 | 68 61 74 20 68 61 76 65 20 73 69 6d 69 6c 61 72 20 66 75 6e 63 74 69 6f 6e 73 20 6f 72 20 66 65 | hat.have.similar.functions.or.fe |
4d280 | 61 74 75 72 65 73 2e 20 49 74 20 65 73 74 61 62 6c 69 73 68 65 73 20 74 68 65 20 73 65 63 75 72 | atures..It.establishes.the.secur |
4d2a0 | 69 74 79 20 62 6f 72 64 65 72 73 20 6f 66 20 61 20 6e 65 74 77 6f 72 6b 2e 20 41 20 7a 6f 6e 65 | ity.borders.of.a.network..A.zone |
4d2c0 | 20 64 65 66 69 6e 65 73 20 61 20 62 6f 75 6e 64 61 72 79 20 77 68 65 72 65 20 74 72 61 66 66 69 | .defines.a.boundary.where.traffi |
4d2e0 | 63 20 69 73 20 73 75 62 6a 65 63 74 65 64 20 74 6f 20 70 6f 6c 69 63 79 20 72 65 73 74 72 69 63 | c.is.subjected.to.policy.restric |
4d300 | 74 69 6f 6e 73 20 61 73 20 69 74 20 63 72 6f 73 73 65 73 20 74 6f 20 61 6e 6f 74 68 65 72 20 72 | tions.as.it.crosses.to.another.r |
4d320 | 65 67 69 6f 6e 20 6f 66 20 61 20 6e 65 74 77 6f 72 6b 2e 00 49 6e 20 7a 6f 6e 65 2d 62 61 73 65 | egion.of.a.network..In.zone-base |
4d340 | 64 20 70 6f 6c 69 63 79 2c 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 61 73 73 69 67 6e 65 | d.policy,.interfaces.are.assigne |
4d360 | 64 20 74 6f 20 7a 6f 6e 65 73 2c 20 61 6e 64 20 69 6e 73 70 65 63 74 69 6f 6e 20 70 6f 6c 69 63 | d.to.zones,.and.inspection.polic |
4d380 | 79 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 74 72 61 66 66 69 63 20 6d 6f 76 69 6e 67 20 62 | y.is.applied.to.traffic.moving.b |
4d3a0 | 65 74 77 65 65 6e 20 74 68 65 20 7a 6f 6e 65 73 20 61 6e 64 20 61 63 74 65 64 20 6f 6e 20 61 63 | etween.the.zones.and.acted.on.ac |
4d3c0 | 63 6f 72 64 69 6e 67 20 74 6f 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 2e 20 41 20 7a 6f 6e | cording.to.firewall.rules..A.zon |
4d3e0 | 65 20 69 73 20 61 20 67 72 6f 75 70 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 20 74 68 61 74 20 | e.is.a.group.of.interfaces.that. |
4d400 | 68 61 76 65 20 73 69 6d 69 6c 61 72 20 66 75 6e 63 74 69 6f 6e 73 20 6f 72 20 66 65 61 74 75 72 | have.similar.functions.or.featur |
4d420 | 65 73 2e 20 49 74 20 65 73 74 61 62 6c 69 73 68 65 73 20 74 68 65 20 73 65 63 75 72 69 74 79 20 | es..It.establishes.the.security. |
4d440 | 62 6f 72 64 65 72 73 20 6f 66 20 61 20 6e 65 74 77 6f 72 6b 2e 20 41 20 7a 6f 6e 65 20 64 65 66 | borders.of.a.network..A.zone.def |
4d460 | 69 6e 65 73 20 61 20 62 6f 75 6e 64 61 72 79 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 69 73 | ines.a.boundary.where.traffic.is |
4d480 | 20 73 75 62 6a 65 63 74 65 64 20 74 6f 20 70 6f 6c 69 63 79 20 72 65 73 74 72 69 63 74 69 6f 6e | .subjected.to.policy.restriction |
4d4a0 | 73 20 61 73 20 69 74 20 63 72 6f 73 73 65 73 20 74 6f 20 61 6e 6f 74 68 65 72 20 72 65 67 69 6f | s.as.it.crosses.to.another.regio |
4d4c0 | 6e 20 6f 66 20 61 20 6e 65 74 77 6f 72 6b 2e 00 49 6e 62 6f 75 6e 64 20 63 6f 6e 6e 65 63 74 69 | n.of.a.network..Inbound.connecti |
4d4e0 | 6f 6e 73 20 74 6f 20 61 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 62 65 20 69 6d | ons.to.a.WAN.interface.can.be.im |
4d500 | 70 72 6f 70 65 72 6c 79 20 68 61 6e 64 6c 65 64 20 77 68 65 6e 20 74 68 65 20 72 65 70 6c 79 20 | properly.handled.when.the.reply. |
4d520 | 69 73 20 73 65 6e 74 20 62 61 63 6b 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 2e 00 49 6e 63 6f | is.sent.back.to.the.client..Inco |
4d540 | 6d 69 6e 67 20 74 72 61 66 66 69 63 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 20 | ming.traffic.is.received.by.the. |
4d560 | 63 75 72 72 65 6e 74 20 73 6c 61 76 65 2e 20 49 66 20 74 68 65 20 72 65 63 65 69 76 69 6e 67 20 | current.slave..If.the.receiving. |
4d580 | 73 6c 61 76 65 20 66 61 69 6c 73 2c 20 61 6e 6f 74 68 65 72 20 73 6c 61 76 65 20 74 61 6b 65 73 | slave.fails,.another.slave.takes |
4d5a0 | 20 6f 76 65 72 20 74 68 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 66 61 69 | .over.the.MAC.address.of.the.fai |
4d5c0 | 6c 65 64 20 72 65 63 65 69 76 69 6e 67 20 73 6c 61 76 65 2e 00 49 6e 63 72 65 61 73 65 20 4d 61 | led.receiving.slave..Increase.Ma |
4d5e0 | 78 69 6d 75 6d 20 4d 50 44 55 20 6c 65 6e 67 74 68 20 74 6f 20 37 39 39 31 20 6f 72 20 31 31 34 | ximum.MPDU.length.to.7991.or.114 |
4d600 | 35 34 20 6f 63 74 65 74 73 20 28 64 65 66 61 75 6c 74 20 33 38 39 35 20 6f 63 74 65 74 73 29 00 | 54.octets.(default.3895.octets). |
4d620 | 49 6e 64 69 63 61 74 69 6f 6e 00 49 6e 64 69 76 69 64 75 61 6c 20 43 6c 69 65 6e 74 20 53 75 62 | Indication.Individual.Client.Sub |
4d640 | 6e 65 74 00 49 6e 66 6f 72 6d 20 63 6c 69 65 6e 74 20 74 68 61 74 20 74 68 65 20 44 4e 53 20 73 | net.Inform.client.that.the.DNS.s |
4d660 | 65 72 76 65 72 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 61 74 20 60 3c 61 64 64 72 65 73 73 3e | erver.can.be.found.at.`<address> |
4d680 | 60 2e 00 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 67 61 74 68 65 72 65 64 20 77 69 74 68 20 4c 4c 44 | `..Information.gathered.with.LLD |
4d6a0 | 50 20 69 73 20 73 74 6f 72 65 64 20 69 6e 20 74 68 65 20 64 65 76 69 63 65 20 61 73 20 61 20 3a | P.is.stored.in.the.device.as.a.: |
4d6c0 | 61 62 62 72 3a 60 4d 49 42 20 28 4d 61 6e 61 67 65 6d 65 6e 74 20 49 6e 66 6f 72 6d 61 74 69 6f | abbr:`MIB.(Management.Informatio |
4d6e0 | 6e 20 44 61 74 61 62 61 73 65 29 60 20 61 6e 64 20 63 61 6e 20 62 65 20 71 75 65 72 69 65 64 20 | n.Database)`.and.can.be.queried. |
4d700 | 77 69 74 68 20 3a 61 62 62 72 3a 60 53 4e 4d 50 20 28 53 69 6d 70 6c 65 20 4e 65 74 77 6f 72 6b | with.:abbr:`SNMP.(Simple.Network |
4d720 | 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 60 20 61 73 20 73 70 65 63 69 66 | .Management.Protocol)`.as.specif |
4d740 | 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 32 39 32 32 60 2e 20 54 68 65 20 74 6f 70 6f 6c 6f 67 79 | ied.in.:rfc:`2922`..The.topology |
4d760 | 20 6f 66 20 61 6e 20 4c 4c 44 50 2d 65 6e 61 62 6c 65 64 20 6e 65 74 77 6f 72 6b 20 63 61 6e 20 | .of.an.LLDP-enabled.network.can. |
4d780 | 62 65 20 64 69 73 63 6f 76 65 72 65 64 20 62 79 20 63 72 61 77 6c 69 6e 67 20 74 68 65 20 68 6f | be.discovered.by.crawling.the.ho |
4d7a0 | 73 74 73 20 61 6e 64 20 71 75 65 72 79 69 6e 67 20 74 68 69 73 20 64 61 74 61 62 61 73 65 2e 20 | sts.and.querying.this.database.. |
4d7c0 | 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 6d 61 79 20 62 65 20 72 65 74 72 69 65 76 65 | Information.that.may.be.retrieve |
4d7e0 | 64 20 69 6e 63 6c 75 64 65 3a 00 49 6e 66 6f 72 6d 61 74 69 6f 6e 61 6c 00 49 6e 66 6f 72 6d 61 | d.include:.Informational.Informa |
4d800 | 74 69 6f 6e 61 6c 20 6d 65 73 73 61 67 65 73 00 49 6e 70 75 74 20 66 72 6f 6d 20 60 65 74 68 30 | tional.messages.Input.from.`eth0 |
4d820 | 60 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 00 49 6e 73 70 65 63 74 20 6c 6f 67 73 | `.network.interface.Inspect.logs |
4d840 | 3a 00 49 6e 73 74 61 6c 6c 20 74 68 65 20 63 6c 69 65 6e 74 20 73 6f 66 74 77 61 72 65 20 76 69 | :.Install.the.client.software.vi |
4d860 | 61 20 61 70 74 20 61 6e 64 20 65 78 65 63 75 74 65 20 70 70 74 70 73 65 74 75 70 20 74 6f 20 67 | a.apt.and.execute.pptpsetup.to.g |
4d880 | 65 6e 65 72 61 74 65 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 49 6e 73 74 65 | enerate.the.configuration..Inste |
4d8a0 | 61 64 20 6f 66 20 61 20 6e 75 6d 65 72 69 63 61 6c 20 4d 53 53 20 76 61 6c 75 65 20 60 63 6c 61 | ad.of.a.numerical.MSS.value.`cla |
4d8c0 | 6d 70 2d 6d 73 73 2d 74 6f 2d 70 6d 74 75 60 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 61 | mp-mss-to-pmtu`.can.be.used.to.a |
4d8e0 | 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 73 65 74 20 74 68 65 20 70 72 6f 70 65 72 20 76 61 6c 75 | utomatically.set.the.proper.valu |
4d900 | 65 2e 00 49 6e 73 74 65 61 64 20 6f 66 20 70 61 73 73 77 6f 72 64 20 6f 6e 6c 79 20 61 75 74 68 | e..Instead.of.password.only.auth |
4d920 | 65 6e 74 69 63 61 74 69 6f 6e 2c 20 32 46 41 20 70 61 73 73 77 6f 72 64 20 61 75 74 68 65 6e 74 | entication,.2FA.password.authent |
4d940 | 69 63 61 74 69 6f 6e 20 2b 20 4f 54 50 20 6b 65 79 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 41 | ication.+.OTP.key.can.be.used..A |
4d960 | 6c 74 65 72 6e 61 74 69 76 65 6c 79 2c 20 4f 54 50 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | lternatively,.OTP.authentication |
4d980 | 20 6f 6e 6c 79 2c 20 77 69 74 68 6f 75 74 20 61 20 70 61 73 73 77 6f 72 64 2c 20 63 61 6e 20 62 | .only,.without.a.password,.can.b |
4d9a0 | 65 20 75 73 65 64 2e 20 54 6f 20 64 6f 20 74 68 69 73 2c 20 61 6e 20 4f 54 50 20 63 6f 6e 66 69 | e.used..To.do.this,.an.OTP.confi |
4d9c0 | 67 75 72 61 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 61 64 64 65 64 20 74 6f 20 74 68 65 20 63 6f | guration.must.be.added.to.the.co |
4d9e0 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 62 6f 76 65 3a 00 49 6e 73 74 65 61 64 20 6f 66 20 73 65 | nfiguration.above:.Instead.of.se |
4da00 | 6e 64 69 6e 67 20 74 68 65 20 72 65 61 6c 20 73 79 73 74 65 6d 20 68 6f 73 74 6e 61 6d 65 20 74 | nding.the.real.system.hostname.t |
4da20 | 6f 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 2c 20 6f 76 65 72 77 72 69 74 65 20 74 68 65 | o.the.DHCP.server,.overwrite.the |
4da40 | 20 68 6f 73 74 2d 6e 61 6d 65 20 77 69 74 68 20 74 68 69 73 20 67 69 76 65 6e 2d 76 61 6c 75 65 | .host-name.with.this.given-value |
4da60 | 2e 00 49 6e 74 65 67 72 69 74 79 20 e2 80 93 20 4d 65 73 73 61 67 65 20 69 6e 74 65 67 72 69 74 | ..Integrity.....Message.integrit |
4da80 | 79 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 61 20 70 61 63 6b 65 74 20 68 61 73 20 6e 6f | y.to.ensure.that.a.packet.has.no |
4daa0 | 74 20 62 65 65 6e 20 74 61 6d 70 65 72 65 64 20 77 68 69 6c 65 20 69 6e 20 74 72 61 6e 73 69 74 | t.been.tampered.while.in.transit |
4dac0 | 20 69 6e 63 6c 75 64 69 6e 67 20 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 70 61 63 6b 65 74 20 72 65 | .including.an.optional.packet.re |
4dae0 | 70 6c 61 79 20 70 72 6f 74 65 63 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 2e 00 49 6e 74 65 6c | play.protection.mechanism..Intel |
4db00 | 20 41 58 32 30 30 00 49 6e 74 65 6c c2 ae 20 51 41 54 00 49 6e 74 65 72 63 6f 6e 6e 65 63 74 20 | .AX200.Intel...QAT.Interconnect. |
4db20 | 74 68 65 20 67 6c 6f 62 61 6c 20 56 52 46 20 77 69 74 68 20 76 72 66 20 22 72 65 64 22 20 75 73 | the.global.VRF.with.vrf."red".us |
4db40 | 69 6e 67 20 74 68 65 20 76 65 74 68 31 30 20 3c 2d 3e 20 76 65 74 68 20 31 31 20 70 61 69 72 00 | ing.the.veth10.<->.veth.11.pair. |
4db60 | 49 6e 74 65 72 66 61 63 65 20 2a 2a 65 74 68 30 2a 2a 20 75 73 65 64 20 74 6f 20 63 6f 6e 6e 65 | Interface.**eth0**.used.to.conne |
4db80 | 63 74 20 74 6f 20 75 70 73 74 72 65 61 6d 2e 00 49 6e 74 65 72 66 61 63 65 20 43 6f 6e 66 69 67 | ct.to.upstream..Interface.Config |
4dba0 | 75 72 61 74 69 6f 6e 00 49 6e 74 65 72 66 61 63 65 20 47 72 6f 75 70 73 00 49 6e 74 65 72 66 61 | uration.Interface.Groups.Interfa |
4dbc0 | 63 65 20 52 6f 75 74 65 73 00 49 6e 74 65 72 66 61 63 65 20 60 65 74 68 31 60 20 4c 41 4e 20 69 | ce.Routes.Interface.`eth1`.LAN.i |
4dbe0 | 73 20 62 65 68 69 6e 64 20 4e 41 54 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 73 75 62 73 63 72 | s.behind.NAT..In.order.to.subscr |
4dc00 | 69 62 65 20 60 31 30 2e 30 2e 30 2e 30 2f 32 33 60 20 73 75 62 6e 65 74 20 6d 75 6c 74 69 63 61 | ibe.`10.0.0.0/23`.subnet.multica |
4dc20 | 73 74 20 77 68 69 63 68 20 69 73 20 69 6e 20 60 65 74 68 30 60 20 57 41 4e 20 77 65 20 6e 65 65 | st.which.is.in.`eth0`.WAN.we.nee |
4dc40 | 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 67 6d 70 2d 70 72 6f 78 79 2e 00 49 6e 74 65 72 | d.to.configure.igmp-proxy..Inter |
4dc60 | 66 61 63 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 6e 74 65 72 66 61 63 65 20 66 6f 72 | face.configuration.Interface.for |
4dc80 | 20 44 48 43 50 20 52 65 6c 61 79 20 41 67 65 6e 74 20 74 6f 20 66 6f 72 77 61 72 64 20 72 65 71 | .DHCP.Relay.Agent.to.forward.req |
4dca0 | 75 65 73 74 73 20 6f 75 74 2e 00 49 6e 74 65 72 66 61 63 65 20 66 6f 72 20 44 48 43 50 20 52 65 | uests.out..Interface.for.DHCP.Re |
4dcc0 | 6c 61 79 20 41 67 65 6e 74 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f 72 20 72 65 71 75 65 73 74 73 | lay.Agent.to.listen.for.requests |
4dce0 | 2e 00 49 6e 74 65 72 66 61 63 65 20 73 70 65 63 69 66 69 63 20 63 6f 6d 6d 61 6e 64 73 00 49 6e | ..Interface.specific.commands.In |
4dd00 | 74 65 72 66 61 63 65 20 74 6f 20 75 73 65 20 66 6f 72 20 73 79 6e 63 69 6e 67 20 63 6f 6e 6e 74 | terface.to.use.for.syncing.connt |
4dd20 | 72 61 63 6b 20 65 6e 74 72 69 65 73 2e 00 49 6e 74 65 72 66 61 63 65 20 75 73 65 64 20 66 6f 72 | rack.entries..Interface.used.for |
4dd40 | 20 56 58 4c 41 4e 20 75 6e 64 65 72 6c 61 79 2e 20 54 68 69 73 20 69 73 20 6d 61 6e 64 61 74 6f | .VXLAN.underlay..This.is.mandato |
4dd60 | 72 79 20 77 68 65 6e 20 75 73 69 6e 67 20 56 58 4c 41 4e 20 76 69 61 20 61 20 6d 75 6c 74 69 63 | ry.when.using.VXLAN.via.a.multic |
4dd80 | 61 73 74 20 6e 65 74 77 6f 72 6b 2e 20 56 58 4c 41 4e 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 | ast.network..VXLAN.traffic.will. |
4dda0 | 61 6c 77 61 79 73 20 65 6e 74 65 72 20 61 6e 64 20 65 78 69 74 20 74 68 69 73 20 69 6e 74 65 72 | always.enter.and.exit.this.inter |
4ddc0 | 66 61 63 65 2e 00 49 6e 74 65 72 66 61 63 65 20 77 65 69 67 68 74 00 49 6e 74 65 72 66 61 63 65 | face..Interface.weight.Interface |
4dde0 | 73 00 49 6e 74 65 72 66 61 63 65 73 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 6e 74 65 72 | s.Interfaces.Configuration.Inter |
4de00 | 66 61 63 65 73 20 74 68 61 74 20 70 61 72 74 69 63 69 70 61 74 65 20 69 6e 20 74 68 65 20 44 48 | faces.that.participate.in.the.DH |
4de20 | 43 50 20 72 65 6c 61 79 20 70 72 6f 63 65 73 73 2e 20 49 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e | CP.relay.process..If.this.comman |
4de40 | 64 20 69 73 20 75 73 65 64 2c 20 61 74 20 6c 65 61 73 74 20 74 77 6f 20 65 6e 74 72 69 65 73 20 | d.is.used,.at.least.two.entries. |
4de60 | 6f 66 20 69 74 20 61 72 65 20 72 65 71 75 69 72 65 64 3a 20 6f 6e 65 20 66 6f 72 20 74 68 65 20 | of.it.are.required:.one.for.the. |
4de80 | 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 63 61 70 74 75 72 65 73 20 74 68 65 20 64 68 63 70 | interface.that.captures.the.dhcp |
4dea0 | 2d 72 65 71 75 65 73 74 73 2c 20 61 6e 64 20 6f 6e 65 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 | -requests,.and.one.for.the.inter |
4dec0 | 66 61 63 65 20 74 6f 20 66 6f 72 77 61 72 64 20 73 75 63 68 20 72 65 71 75 65 73 74 73 2e 20 41 | face.to.forward.such.requests..A |
4dee0 | 20 77 61 72 6e 69 6e 67 20 6d 65 73 73 61 67 65 20 77 69 6c 6c 20 62 65 20 73 68 6f 77 6e 20 69 | .warning.message.will.be.shown.i |
4df00 | 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 2c 20 73 69 6e 63 65 20 6e 65 | f.this.command.is.used,.since.ne |
4df20 | 77 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 73 68 6f 75 6c 64 20 75 73 65 20 60 60 6c | w.implementations.should.use.``l |
4df40 | 69 73 74 65 6e 2d 69 6e 74 65 72 66 61 63 65 60 60 20 61 6e 64 20 60 60 75 70 73 74 72 65 61 6d | isten-interface``.and.``upstream |
4df60 | 2d 69 6e 74 65 72 66 61 63 65 60 60 2e 00 49 6e 74 65 72 66 61 63 65 73 20 77 68 6f 73 65 20 44 | -interface``..Interfaces.whose.D |
4df80 | 48 43 50 20 63 6c 69 65 6e 74 20 6e 61 6d 65 73 65 72 76 65 72 73 20 74 6f 20 66 6f 72 77 61 72 | HCP.client.nameservers.to.forwar |
4dfa0 | 64 20 72 65 71 75 65 73 74 73 20 74 6f 2e 00 49 6e 74 65 72 66 61 63 65 73 2c 20 74 68 65 69 72 | d.requests.to..Interfaces,.their |
4dfc0 | 20 77 65 69 67 68 74 20 61 6e 64 20 74 68 65 20 74 79 70 65 20 6f 66 20 74 72 61 66 66 69 63 20 | .weight.and.the.type.of.traffic. |
4dfe0 | 74 6f 20 62 65 20 62 61 6c 61 6e 63 65 64 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 6e 75 | to.be.balanced.are.defined.in.nu |
4e000 | 6d 62 65 72 65 64 20 62 61 6c 61 6e 63 69 6e 67 20 72 75 6c 65 20 73 65 74 73 2e 20 54 68 65 20 | mbered.balancing.rule.sets..The. |
4e020 | 72 75 6c 65 20 73 65 74 73 20 61 72 65 20 65 78 65 63 75 74 65 64 20 69 6e 20 6e 75 6d 65 72 69 | rule.sets.are.executed.in.numeri |
4e040 | 63 61 6c 20 6f 72 64 65 72 20 61 67 61 69 6e 73 74 20 6f 75 74 67 6f 69 6e 67 20 70 61 63 6b 65 | cal.order.against.outgoing.packe |
4e060 | 74 73 2e 20 49 6e 20 63 61 73 65 20 6f 66 20 61 20 6d 61 74 63 68 20 74 68 65 20 70 61 63 6b 65 | ts..In.case.of.a.match.the.packe |
4e080 | 74 20 69 73 20 73 65 6e 74 20 74 68 72 6f 75 67 68 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 73 | t.is.sent.through.an.interface.s |
4e0a0 | 70 65 63 69 66 69 65 64 20 69 6e 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 2e 20 49 | pecified.in.the.matching.rule..I |
4e0c0 | 66 20 61 20 70 61 63 6b 65 74 20 64 6f 65 73 6e 27 74 20 6d 61 74 63 68 20 61 6e 79 20 72 75 6c | f.a.packet.doesn't.match.any.rul |
4e0e0 | 65 20 69 74 20 69 73 20 73 65 6e 74 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 73 79 73 74 65 6d | e.it.is.sent.by.using.the.system |
4e100 | 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 52 75 6c 65 20 6e 75 6d 62 65 72 73 20 63 61 6e | .routing.table..Rule.numbers.can |
4e120 | 27 74 20 62 65 20 63 68 61 6e 67 65 64 2e 00 49 6e 74 65 72 6e 61 6c 20 61 74 74 61 63 6b 3a 20 | 't.be.changed..Internal.attack:. |
4e140 | 61 6e 20 61 74 74 61 63 6b 20 66 72 6f 6d 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 | an.attack.from.the.internal.netw |
4e160 | 6f 72 6b 20 28 67 65 6e 65 72 61 74 65 64 20 62 79 20 61 20 63 75 73 74 6f 6d 65 72 29 20 74 6f | ork.(generated.by.a.customer).to |
4e180 | 77 61 72 64 73 20 74 68 65 20 69 6e 74 65 72 6e 65 74 20 69 73 20 69 64 65 6e 74 69 66 79 2e 20 | wards.the.internet.is.identify.. |
4e1a0 | 49 6e 20 74 68 69 73 20 63 61 73 65 2c 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 72 | In.this.case,.all.connections.fr |
4e1c0 | 6f 6d 20 74 68 69 73 20 70 61 72 74 69 63 75 6c 61 72 20 49 50 2f 43 75 73 74 6f 6d 65 72 20 77 | om.this.particular.IP/Customer.w |
4e1e0 | 69 6c 6c 20 62 65 20 62 6c 6f 63 6b 65 64 2e 00 49 6e 74 65 72 6e 61 6c 6c 79 2c 20 69 6e 20 66 | ill.be.blocked..Internally,.in.f |
4e200 | 6c 6f 77 2d 61 63 63 6f 75 6e 74 69 6e 67 20 70 72 6f 63 65 73 73 65 73 20 65 78 69 73 74 20 61 | low-accounting.processes.exist.a |
4e220 | 20 62 75 66 66 65 72 20 66 6f 72 20 64 61 74 61 20 65 78 63 68 61 6e 67 69 6e 67 20 62 65 74 77 | .buffer.for.data.exchanging.betw |
4e240 | 65 65 6e 20 63 6f 72 65 20 70 72 6f 63 65 73 73 20 61 6e 64 20 70 6c 75 67 69 6e 73 20 28 65 61 | een.core.process.and.plugins.(ea |
4e260 | 63 68 20 65 78 70 6f 72 74 20 74 61 72 67 65 74 20 69 73 20 61 20 73 65 70 61 72 61 74 65 64 20 | ch.export.target.is.a.separated. |
4e280 | 70 6c 75 67 69 6e 29 2e 20 49 66 20 79 6f 75 20 68 61 76 65 20 68 69 67 68 20 74 72 61 66 66 69 | plugin)..If.you.have.high.traffi |
4e2a0 | 63 20 6c 65 76 65 6c 73 20 6f 72 20 6e 6f 74 65 64 20 73 6f 6d 65 20 70 72 6f 62 6c 65 6d 73 20 | c.levels.or.noted.some.problems. |
4e2c0 | 77 69 74 68 20 6d 69 73 73 65 64 20 72 65 63 6f 72 64 73 20 6f 72 20 73 74 6f 70 70 69 6e 67 20 | with.missed.records.or.stopping. |
4e2e0 | 65 78 70 6f 72 74 69 6e 67 2c 20 79 6f 75 20 6d 61 79 20 74 72 79 20 74 6f 20 69 6e 63 72 65 61 | exporting,.you.may.try.to.increa |
4e300 | 73 65 20 61 20 64 65 66 61 75 6c 74 20 62 75 66 66 65 72 20 73 69 7a 65 20 28 31 30 20 4d 69 42 | se.a.default.buffer.size.(10.MiB |
4e320 | 29 20 77 69 74 68 20 74 68 65 20 6e 65 78 74 20 63 6f 6d 6d 61 6e 64 3a 00 49 6e 74 65 72 6e 65 | ).with.the.next.command:.Interne |
4e340 | 74 20 4b 65 79 20 45 78 63 68 61 6e 67 65 20 76 65 72 73 69 6f 6e 20 32 20 28 49 4b 45 76 32 29 | t.Key.Exchange.version.2.(IKEv2) |
4e360 | 20 69 73 20 61 20 74 75 6e 6e 65 6c 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2c 20 62 61 73 65 64 20 | .is.a.tunneling.protocol,.based. |
4e380 | 6f 6e 20 49 50 73 65 63 2c 20 74 68 61 74 20 65 73 74 61 62 6c 69 73 68 65 73 20 61 20 73 65 63 | on.IPsec,.that.establishes.a.sec |
4e3a0 | 75 72 65 20 56 50 4e 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 56 50 | ure.VPN.communication.between.VP |
4e3c0 | 4e 20 64 65 76 69 63 65 73 2c 20 20 61 6e 64 20 64 65 66 69 6e 65 73 20 6e 65 67 6f 74 69 61 74 | N.devices,..and.defines.negotiat |
4e3e0 | 69 6f 6e 20 61 6e 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 70 72 6f 63 65 73 73 65 73 | ion.and.authentication.processes |
4e400 | 20 66 6f 72 20 49 50 73 65 63 20 73 65 63 75 72 69 74 79 20 61 73 73 6f 63 69 61 74 69 6f 6e 73 | .for.IPsec.security.associations |
4e420 | 20 28 53 41 73 29 2e 20 49 74 20 69 73 20 6f 66 74 65 6e 20 6b 6e 6f 77 6e 20 61 73 20 49 4b 45 | .(SAs)..It.is.often.known.as.IKE |
4e440 | 76 32 2f 49 50 53 65 63 20 6f 72 20 49 50 53 65 63 20 49 4b 45 76 32 20 72 65 6d 6f 74 65 2d 61 | v2/IPSec.or.IPSec.IKEv2.remote-a |
4e460 | 63 63 65 73 73 20 e2 80 94 20 6f 72 20 72 6f 61 64 2d 77 61 72 72 69 6f 72 73 20 61 73 20 6f 74 | ccess.....or.road-warriors.as.ot |
4e480 | 68 65 72 73 20 63 61 6c 6c 20 69 74 2e 00 49 6e 74 65 72 6e 65 74 20 4b 65 79 20 45 78 63 68 61 | hers.call.it..Internet.Key.Excha |
4e4a0 | 6e 67 65 20 76 65 72 73 69 6f 6e 20 32 2c 20 49 4b 45 76 32 20 66 6f 72 20 73 68 6f 72 74 2c 20 | nge.version.2,.IKEv2.for.short,. |
4e4c0 | 69 73 20 61 20 72 65 71 75 65 73 74 2f 72 65 73 70 6f 6e 73 65 20 70 72 6f 74 6f 63 6f 6c 20 64 | is.a.request/response.protocol.d |
4e4e0 | 65 76 65 6c 6f 70 65 64 20 62 79 20 62 6f 74 68 20 43 69 73 63 6f 20 61 6e 64 20 4d 69 63 72 6f | eveloped.by.both.Cisco.and.Micro |
4e500 | 73 6f 66 74 2e 20 49 74 20 69 73 20 75 73 65 64 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 6e | soft..It.is.used.to.establish.an |
4e520 | 64 20 73 65 63 75 72 65 20 49 50 76 34 2f 49 50 76 36 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 | d.secure.IPv4/IPv6.connections,. |
4e540 | 62 65 20 69 74 20 61 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 56 50 4e 20 6f 72 20 66 72 6f 6d | be.it.a.site-to-site.VPN.or.from |
4e560 | 20 61 20 72 6f 61 64 2d 77 61 72 72 69 6f 72 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 61 20 | .a.road-warrior.connecting.to.a. |
4e580 | 68 75 62 20 73 69 74 65 2e 20 49 4b 45 76 32 2c 20 77 68 65 6e 20 72 75 6e 20 69 6e 20 70 6f 69 | hub.site..IKEv2,.when.run.in.poi |
4e5a0 | 6e 74 2d 74 6f 2d 6d 75 6c 74 69 70 6f 69 6e 74 2c 20 6f 72 20 72 65 6d 6f 74 65 2d 61 63 63 65 | nt-to-multipoint,.or.remote-acce |
4e5c0 | 73 73 2f 72 6f 61 64 2d 77 61 72 72 69 6f 72 20 6d 6f 64 65 2c 20 73 65 63 75 72 65 73 20 74 68 | ss/road-warrior.mode,.secures.th |
4e5e0 | 65 20 73 65 72 76 65 72 2d 73 69 64 65 20 77 69 74 68 20 61 6e 6f 74 68 65 72 20 6c 61 79 65 72 | e.server-side.with.another.layer |
4e600 | 20 62 79 20 75 73 69 6e 67 20 61 6e 20 78 35 30 39 20 73 69 67 6e 65 64 20 73 65 72 76 65 72 20 | .by.using.an.x509.signed.server. |
4e620 | 63 65 72 74 69 66 69 63 61 74 65 2e 00 49 6e 74 65 72 6e 65 74 77 6f 72 6b 20 43 6f 6e 74 72 6f | certificate..Internetwork.Contro |
4e640 | 6c 00 49 6e 74 65 72 76 61 6c 00 49 6e 74 65 72 76 61 6c 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f | l.Interval.Interval.in.milliseco |
4e660 | 6e 64 73 00 49 6e 74 65 72 76 61 6c 20 69 6e 20 6d 69 6e 75 74 65 73 20 62 65 74 77 65 65 6e 20 | nds.Interval.in.minutes.between. |
4e680 | 75 70 64 61 74 65 73 20 28 64 65 66 61 75 6c 74 3a 20 36 30 29 00 49 6e 74 72 6f 64 75 63 69 6e | updates.(default:.60).Introducin |
4e6a0 | 67 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 73 20 72 65 6d 6f 76 65 73 20 74 68 65 20 6e | g.route.reflectors.removes.the.n |
4e6c0 | 65 65 64 20 66 6f 72 20 74 68 65 20 66 75 6c 6c 2d 6d 65 73 68 2e 20 57 68 65 6e 20 79 6f 75 20 | eed.for.the.full-mesh..When.you. |
4e6e0 | 63 6f 6e 66 69 67 75 72 65 20 61 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 20 79 6f 75 20 | configure.a.route.reflector.you. |
4e700 | 68 61 76 65 20 74 6f 20 74 65 6c 6c 20 74 68 65 20 72 6f 75 74 65 72 20 77 68 65 74 68 65 72 20 | have.to.tell.the.router.whether. |
4e720 | 74 68 65 20 6f 74 68 65 72 20 49 42 47 50 20 72 6f 75 74 65 72 20 69 73 20 61 20 63 6c 69 65 6e | the.other.IBGP.router.is.a.clien |
4e740 | 74 20 6f 72 20 6e 6f 6e 2d 63 6c 69 65 6e 74 2e 20 41 20 63 6c 69 65 6e 74 20 69 73 20 61 6e 20 | t.or.non-client..A.client.is.an. |
4e760 | 49 42 47 50 20 72 6f 75 74 65 72 20 74 68 61 74 20 74 68 65 20 72 6f 75 74 65 20 72 65 66 6c 65 | IBGP.router.that.the.route.refle |
4e780 | 63 74 6f 72 20 77 69 6c 6c 20 e2 80 9c 72 65 66 6c 65 63 74 e2 80 9d 20 72 6f 75 74 65 73 20 74 | ctor.will....reflect....routes.t |
4e7a0 | 6f 2c 20 74 68 65 20 6e 6f 6e 2d 63 6c 69 65 6e 74 20 69 73 20 6a 75 73 74 20 61 20 72 65 67 75 | o,.the.non-client.is.just.a.regu |
4e7c0 | 6c 61 72 20 49 42 47 50 20 6e 65 69 67 68 62 6f 72 2e 20 52 6f 75 74 65 20 72 65 66 6c 65 63 74 | lar.IBGP.neighbor..Route.reflect |
4e7e0 | 6f 72 73 20 6d 65 63 68 61 6e 69 73 6d 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 | ors.mechanism.is.described.in.:r |
4e800 | 66 63 3a 60 34 34 35 36 60 20 61 6e 64 20 75 70 64 61 74 65 64 20 62 79 20 3a 72 66 63 3a 60 37 | fc:`4456`.and.updated.by.:rfc:`7 |
4e820 | 36 30 36 60 2e 00 49 74 20 64 69 73 61 62 6c 65 73 20 74 72 61 6e 73 70 61 72 65 6e 74 20 68 75 | 606`..It.disables.transparent.hu |
4e840 | 67 65 20 70 61 67 65 73 2c 20 61 6e 64 20 61 75 74 6f 6d 61 74 69 63 20 4e 55 4d 41 20 62 61 6c | ge.pages,.and.automatic.NUMA.bal |
4e860 | 61 6e 63 69 6e 67 2e 20 49 74 20 61 6c 73 6f 20 75 73 65 73 20 63 70 75 70 6f 77 65 72 20 74 6f | ancing..It.also.uses.cpupower.to |
4e880 | 20 73 65 74 20 74 68 65 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 63 70 75 66 72 65 71 20 67 6f 76 | .set.the.performance.cpufreq.gov |
4e8a0 | 65 72 6e 6f 72 2c 20 61 6e 64 20 72 65 71 75 65 73 74 73 20 61 20 63 70 75 5f 64 6d 61 5f 6c 61 | ernor,.and.requests.a.cpu_dma_la |
4e8c0 | 74 65 6e 63 79 20 76 61 6c 75 65 20 6f 66 20 31 2e 20 49 74 20 61 6c 73 6f 20 73 65 74 73 20 62 | tency.value.of.1..It.also.sets.b |
4e8e0 | 75 73 79 5f 72 65 61 64 20 61 6e 64 20 62 75 73 79 5f 70 6f 6c 6c 20 74 69 6d 65 73 20 74 6f 20 | usy_read.and.busy_poll.times.to. |
4e900 | 35 30 20 75 73 2c 20 61 6e 64 20 74 63 70 5f 66 61 73 74 6f 70 65 6e 20 74 6f 20 33 2e 00 49 74 | 50.us,.and.tcp_fastopen.to.3..It |
4e920 | 20 65 6e 61 62 6c 65 73 20 74 72 61 6e 73 70 61 72 65 6e 74 20 68 75 67 65 20 70 61 67 65 73 2c | .enables.transparent.huge.pages, |
4e940 | 20 61 6e 64 20 75 73 65 73 20 63 70 75 70 6f 77 65 72 20 74 6f 20 73 65 74 20 74 68 65 20 70 65 | .and.uses.cpupower.to.set.the.pe |
4e960 | 72 66 6f 72 6d 61 6e 63 65 20 63 70 75 66 72 65 71 20 67 6f 76 65 72 6e 6f 72 2e 20 49 74 20 61 | rformance.cpufreq.governor..It.a |
4e980 | 6c 73 6f 20 73 65 74 73 20 60 60 6b 65 72 6e 65 6c 2e 73 63 68 65 64 5f 6d 69 6e 5f 67 72 61 6e | lso.sets.``kernel.sched_min_gran |
4e9a0 | 75 6c 61 72 69 74 79 5f 6e 73 60 60 20 74 6f 20 31 30 20 75 73 2c 20 60 60 6b 65 72 6e 65 6c 2e | ularity_ns``.to.10.us,.``kernel. |
4e9c0 | 73 63 68 65 64 5f 77 61 6b 65 75 70 5f 67 72 61 6e 75 6c 61 72 69 74 79 5f 6e 73 60 60 20 74 6f | sched_wakeup_granularity_ns``.to |
4e9e0 | 20 31 35 20 75 73 73 2c 20 61 6e 64 20 60 60 76 6d 2e 64 69 72 74 79 5f 72 61 74 69 6f 60 60 20 | .15.uss,.and.``vm.dirty_ratio``. |
4ea00 | 74 6f 20 34 30 25 2e 00 49 74 20 67 65 6e 65 72 61 74 65 73 20 74 68 65 20 6b 65 79 70 61 69 72 | to.40%..It.generates.the.keypair |
4ea20 | 2c 20 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 70 75 62 6c 69 63 20 61 6e 64 20 | ,.which.includes.the.public.and. |
4ea40 | 70 72 69 76 61 74 65 20 70 61 72 74 73 2e 20 54 68 65 20 6b 65 79 20 69 73 20 6e 6f 74 20 73 74 | private.parts..The.key.is.not.st |
4ea60 | 6f 72 65 64 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 20 2d 20 6f 6e 6c 79 20 61 20 6b 65 79 70 | ored.on.the.system.-.only.a.keyp |
4ea80 | 61 69 72 20 69 73 20 67 65 6e 65 72 61 74 65 64 2e 00 49 74 20 68 65 6c 70 73 20 74 6f 20 73 75 | air.is.generated..It.helps.to.su |
4eaa0 | 70 70 6f 72 74 20 61 73 20 48 45 4c 50 45 52 20 6f 6e 6c 79 20 66 6f 72 20 70 6c 61 6e 6e 65 64 | pport.as.HELPER.only.for.planned |
4eac0 | 20 72 65 73 74 61 72 74 73 2e 00 49 74 20 68 65 6c 70 73 20 74 6f 20 74 68 69 6e 6b 20 6f 66 20 | .restarts..It.helps.to.think.of. |
4eae0 | 74 68 65 20 73 79 6e 74 61 78 20 61 73 3a 20 28 73 65 65 20 62 65 6c 6f 77 29 2e 20 54 68 65 20 | the.syntax.as:.(see.below)..The. |
4eb00 | 27 72 75 6c 65 2d 73 65 74 27 20 73 68 6f 75 6c 64 20 62 65 20 77 72 69 74 74 65 6e 20 66 72 6f | 'rule-set'.should.be.written.fro |
4eb20 | 6d 20 74 68 65 20 70 65 72 73 70 65 63 74 69 76 65 20 6f 66 3a 20 2a 53 6f 75 72 63 65 20 5a 6f | m.the.perspective.of:.*Source.Zo |
4eb40 | 6e 65 2a 2d 74 6f 2d 3e 2a 44 65 73 74 69 6e 61 74 69 6f 6e 20 5a 6f 6e 65 2a 00 49 74 20 69 73 | ne*-to->*Destination.Zone*.It.is |
4eb60 | 20 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 43 69 73 63 6f 20 28 52 29 20 41 6e 79 43 6f | .compatible.with.Cisco.(R).AnyCo |
4eb80 | 6e 6e 65 63 74 20 28 52 29 20 63 6c 69 65 6e 74 73 2e 00 49 74 20 69 73 20 63 6f 6e 6e 65 63 74 | nnect.(R).clients..It.is.connect |
4eba0 | 65 64 20 74 6f 20 60 60 65 74 68 31 60 60 00 49 74 20 69 73 20 68 69 67 68 6c 79 20 72 65 63 6f | ed.to.``eth1``.It.is.highly.reco |
4ebc0 | 6d 6d 65 6e 64 65 64 20 74 6f 20 75 73 65 20 53 53 48 20 6b 65 79 20 61 75 74 68 65 6e 74 69 63 | mmended.to.use.SSH.key.authentic |
4ebe0 | 61 74 69 6f 6e 2e 20 42 79 20 64 65 66 61 75 6c 74 20 74 68 65 72 65 20 69 73 20 6f 6e 6c 79 20 | ation..By.default.there.is.only. |
4ec00 | 6f 6e 65 20 75 73 65 72 20 28 60 60 76 79 6f 73 60 60 29 2c 20 61 6e 64 20 79 6f 75 20 63 61 6e | one.user.(``vyos``),.and.you.can |
4ec20 | 20 61 73 73 69 67 6e 20 61 6e 79 20 6e 75 6d 62 65 72 20 6f 66 20 6b 65 79 73 20 74 6f 20 74 68 | .assign.any.number.of.keys.to.th |
4ec40 | 61 74 20 75 73 65 72 2e 20 59 6f 75 20 63 61 6e 20 67 65 6e 65 72 61 74 65 20 61 20 73 73 68 20 | at.user..You.can.generate.a.ssh. |
4ec60 | 6b 65 79 20 77 69 74 68 20 74 68 65 20 60 60 73 73 68 2d 6b 65 79 67 65 6e 60 60 20 63 6f 6d 6d | key.with.the.``ssh-keygen``.comm |
4ec80 | 61 6e 64 20 6f 6e 20 79 6f 75 72 20 6c 6f 63 61 6c 20 6d 61 63 68 69 6e 65 2c 20 77 68 69 63 68 | and.on.your.local.machine,.which |
4eca0 | 20 77 69 6c 6c 20 28 62 79 20 64 65 66 61 75 6c 74 29 20 73 61 76 65 20 69 74 20 61 73 20 60 60 | .will.(by.default).save.it.as.`` |
4ecc0 | 7e 2f 2e 73 73 68 2f 69 64 5f 72 73 61 2e 70 75 62 60 60 2e 00 49 74 20 69 73 20 68 69 67 68 6c | ~/.ssh/id_rsa.pub``..It.is.highl |
4ece0 | 79 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 61 64 | y.recommended.to.use.the.same.ad |
4ed00 | 64 72 65 73 73 20 66 6f 72 20 62 6f 74 68 20 74 68 65 20 4c 44 50 20 72 6f 75 74 65 72 2d 69 64 | dress.for.both.the.LDP.router-id |
4ed20 | 20 61 6e 64 20 74 68 65 20 64 69 73 63 6f 76 65 72 79 20 74 72 61 6e 73 70 6f 72 74 20 61 64 64 | .and.the.discovery.transport.add |
4ed40 | 72 65 73 73 2c 20 62 75 74 20 66 6f 72 20 56 79 4f 53 20 4d 50 4c 53 20 4c 44 50 20 74 6f 20 77 | ress,.but.for.VyOS.MPLS.LDP.to.w |
4ed60 | 6f 72 6b 20 62 6f 74 68 20 70 61 72 61 6d 65 74 65 72 73 20 6d 75 73 74 20 62 65 20 65 78 70 6c | ork.both.parameters.must.be.expl |
4ed80 | 69 63 69 74 6c 79 20 73 65 74 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e | icitly.set.in.the.configuration. |
4eda0 | 00 49 74 20 69 73 20 69 6d 70 6f 72 74 61 6e 74 20 74 6f 20 6e 6f 74 65 20 74 68 61 74 20 77 68 | .It.is.important.to.note.that.wh |
4edc0 | 65 6e 20 63 72 65 61 74 69 6e 67 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 74 68 61 74 20 | en.creating.firewall.rules.that. |
4ede0 | 74 68 65 20 44 4e 41 54 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6f 63 63 75 72 73 20 2a 2a 62 65 | the.DNAT.translation.occurs.**be |
4ee00 | 66 6f 72 65 2a 2a 20 74 72 61 66 66 69 63 20 74 72 61 76 65 72 73 65 73 20 74 68 65 20 66 69 72 | fore**.traffic.traverses.the.fir |
4ee20 | 65 77 61 6c 6c 2e 20 49 6e 20 6f 74 68 65 72 20 77 6f 72 64 73 2c 20 74 68 65 20 64 65 73 74 69 | ewall..In.other.words,.the.desti |
4ee40 | 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 68 61 73 20 61 6c 72 65 61 64 79 20 62 65 65 6e 20 | nation.address.has.already.been. |
4ee60 | 74 72 61 6e 73 6c 61 74 65 64 20 74 6f 20 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 2e 00 49 74 20 | translated.to.192.168.0.100..It. |
4ee80 | 69 73 20 69 6d 70 6f 72 74 61 6e 74 20 74 6f 20 6e 6f 74 65 20 74 68 61 74 20 77 68 65 6e 20 63 | is.important.to.note.that.when.c |
4eea0 | 72 65 61 74 69 6e 67 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 2c 20 74 68 65 20 44 4e 41 54 | reating.firewall.rules,.the.DNAT |
4eec0 | 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6f 63 63 75 72 73 20 2a 2a 62 65 66 6f 72 65 2a 2a 20 74 | .translation.occurs.**before**.t |
4eee0 | 72 61 66 66 69 63 20 74 72 61 76 65 72 73 65 73 20 74 68 65 20 66 69 72 65 77 61 6c 6c 2e 20 49 | raffic.traverses.the.firewall..I |
4ef00 | 6e 20 6f 74 68 65 72 20 77 6f 72 64 73 2c 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 | n.other.words,.the.destination.a |
4ef20 | 64 64 72 65 73 73 20 68 61 73 20 61 6c 72 65 61 64 79 20 62 65 65 6e 20 74 72 61 6e 73 6c 61 74 | ddress.has.already.been.translat |
4ef40 | 65 64 20 74 6f 20 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 2e 00 49 74 20 69 73 20 6e 6f 74 20 73 | ed.to.192.168.0.100..It.is.not.s |
4ef60 | 75 66 66 69 63 69 65 6e 74 20 74 6f 20 6f 6e 6c 79 20 63 6f 6e 66 69 67 75 72 65 20 61 20 4c 33 | ufficient.to.only.configure.a.L3 |
4ef80 | 56 50 4e 20 56 52 46 73 20 62 75 74 20 4c 33 56 50 4e 20 56 52 46 73 20 6d 75 73 74 20 62 65 20 | VPN.VRFs.but.L3VPN.VRFs.must.be. |
4efa0 | 6d 61 69 6e 74 61 69 6e 65 64 2c 20 74 6f 6f 2e 46 6f 72 20 4c 33 56 50 4e 20 56 52 46 20 6d 61 | maintained,.too.For.L3VPN.VRF.ma |
4efc0 | 69 6e 74 65 6e 61 6e 63 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 70 65 72 61 74 69 6f | intenance.the.following.operatio |
4efe0 | 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 61 72 65 20 69 6e 20 70 6c 61 63 65 2e 00 49 74 20 69 73 | nal.commands.are.in.place..It.is |
4f000 | 20 6e 6f 74 20 73 75 66 66 69 63 69 65 6e 74 20 74 6f 20 6f 6e 6c 79 20 63 6f 6e 66 69 67 75 72 | .not.sufficient.to.only.configur |
4f020 | 65 20 61 20 56 52 46 20 62 75 74 20 56 52 46 73 20 6d 75 73 74 20 62 65 20 6d 61 69 6e 74 61 69 | e.a.VRF.but.VRFs.must.be.maintai |
4f040 | 6e 65 64 2c 20 74 6f 6f 2e 20 46 6f 72 20 56 52 46 20 6d 61 69 6e 74 65 6e 61 6e 63 65 20 74 68 | ned,.too..For.VRF.maintenance.th |
4f060 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 | e.following.operational.commands |
4f080 | 20 61 72 65 20 69 6e 20 70 6c 61 63 65 2e 00 49 74 20 69 73 20 6e 6f 74 20 76 61 6c 69 64 20 74 | .are.in.place..It.is.not.valid.t |
4f0a0 | 6f 20 75 73 65 20 74 68 65 20 60 76 69 66 20 31 60 20 6f 70 74 69 6f 6e 20 66 6f 72 20 56 4c 41 | o.use.the.`vif.1`.option.for.VLA |
4f0c0 | 4e 20 61 77 61 72 65 20 62 72 69 64 67 65 73 20 62 65 63 61 75 73 65 20 56 4c 41 4e 20 61 77 61 | N.aware.bridges.because.VLAN.awa |
4f0e0 | 72 65 20 62 72 69 64 67 65 73 20 61 73 73 75 6d 65 20 74 68 61 74 20 61 6c 6c 20 75 6e 6c 61 62 | re.bridges.assume.that.all.unlab |
4f100 | 65 6c 65 64 20 70 61 63 6b 65 74 73 20 62 65 6c 6f 6e 67 20 74 6f 20 74 68 65 20 64 65 66 61 75 | eled.packets.belong.to.the.defau |
4f120 | 6c 74 20 56 4c 41 4e 20 31 20 6d 65 6d 62 65 72 20 61 6e 64 20 74 68 61 74 20 74 68 65 20 56 4c | lt.VLAN.1.member.and.that.the.VL |
4f140 | 41 4e 20 49 44 20 6f 66 20 74 68 65 20 62 72 69 64 67 65 27 73 20 70 61 72 65 6e 74 20 69 6e 74 | AN.ID.of.the.bridge's.parent.int |
4f160 | 65 72 66 61 63 65 20 69 73 20 61 6c 77 61 79 73 20 31 00 49 74 20 69 73 20 70 6f 73 73 69 62 6c | erface.is.always.1.It.is.possibl |
4f180 | 65 20 74 6f 20 65 6e 68 61 6e 63 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 65 63 75 | e.to.enhance.authentication.secu |
4f1a0 | 72 69 74 79 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 3a 61 62 62 72 3a 60 32 46 41 20 28 54 77 | rity.by.using.the.:abbr:`2FA.(Tw |
4f1c0 | 6f 2d 66 61 63 74 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 29 60 2f 3a 61 62 62 72 3a | o-factor.authentication)`/:abbr: |
4f1e0 | 60 4d 46 41 20 28 4d 75 6c 74 69 2d 66 61 63 74 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | `MFA.(Multi-factor.authenticatio |
4f200 | 6e 29 60 20 66 65 61 74 75 72 65 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 3a 61 62 62 72 3a | n)`.feature.together.with.:abbr: |
4f220 | 60 4f 54 50 20 28 4f 6e 65 2d 54 69 6d 65 2d 50 61 64 29 60 20 6f 6e 20 56 79 4f 53 2e 20 3a 61 | `OTP.(One-Time-Pad)`.on.VyOS..:a |
4f240 | 62 62 72 3a 60 32 46 41 20 28 54 77 6f 2d 66 61 63 74 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 | bbr:`2FA.(Two-factor.authenticat |
4f260 | 69 6f 6e 29 60 2f 3a 61 62 62 72 3a 60 4d 46 41 20 28 4d 75 6c 74 69 2d 66 61 63 74 6f 72 20 61 | ion)`/:abbr:`MFA.(Multi-factor.a |
4f280 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 29 60 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e | uthentication)`.is.configured.in |
4f2a0 | 64 65 70 65 6e 64 65 6e 74 6c 79 20 70 65 72 20 65 61 63 68 20 75 73 65 72 2e 20 49 66 20 61 6e | dependently.per.each.user..If.an |
4f2c0 | 20 4f 54 50 20 6b 65 79 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 61 20 75 73 65 | .OTP.key.is.configured.for.a.use |
4f2e0 | 72 2c 20 32 46 41 2f 4d 46 41 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 65 6e 61 62 | r,.2FA/MFA.is.automatically.enab |
4f300 | 6c 65 64 20 66 6f 72 20 74 68 61 74 20 70 61 72 74 69 63 75 6c 61 72 20 75 73 65 72 2e 20 49 66 | led.for.that.particular.user..If |
4f320 | 20 61 20 75 73 65 72 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 6e 20 4f 54 50 20 6b 65 79 | .a.user.does.not.have.an.OTP.key |
4f340 | 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 74 68 65 72 65 20 69 73 20 6e 6f 20 32 46 41 2f 4d 46 41 | .configured,.there.is.no.2FA/MFA |
4f360 | 20 63 68 65 63 6b 20 66 6f 72 20 74 68 61 74 20 75 73 65 72 2e 00 49 74 20 69 73 20 70 6f 73 73 | .check.for.that.user..It.is.poss |
4f380 | 69 62 6c 65 20 74 6f 20 70 65 72 6d 69 74 20 42 47 50 20 69 6e 73 74 61 6c 6c 20 56 50 4e 20 70 | ible.to.permit.BGP.install.VPN.p |
4f3a0 | 72 65 66 69 78 65 73 20 77 69 74 68 6f 75 74 20 74 72 61 6e 73 70 6f 72 74 20 6c 61 62 65 6c 73 | refixes.without.transport.labels |
4f3c0 | 2e 20 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 69 6e 73 74 61 6c | ..This.configuration.will.instal |
4f3e0 | 6c 20 56 50 4e 20 70 72 65 66 69 78 65 73 20 6f 72 69 67 69 6e 61 74 65 64 20 66 72 6f 6d 20 61 | l.VPN.prefixes.originated.from.a |
4f400 | 6e 20 65 2d 62 67 70 20 73 65 73 73 69 6f 6e 2c 20 61 6e 64 20 77 69 74 68 20 74 68 65 20 6e 65 | n.e-bgp.session,.and.with.the.ne |
4f420 | 78 74 2d 68 6f 70 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 2e 00 49 74 20 69 73 | xt-hop.directly.connected..It.is |
4f440 | 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 73 70 65 63 69 66 79 20 61 20 73 74 61 74 69 63 20 72 6f | .possible.to.specify.a.static.ro |
4f460 | 75 74 65 20 66 6f 72 20 69 70 76 36 20 70 72 65 66 69 78 65 73 20 75 73 69 6e 67 20 61 6e 20 53 | ute.for.ipv6.prefixes.using.an.S |
4f480 | 52 76 36 20 73 65 67 6d 65 6e 74 73 20 69 6e 73 74 72 75 63 74 69 6f 6e 2e 20 54 68 65 20 60 2f | Rv6.segments.instruction..The.`/ |
4f4a0 | 60 20 73 65 70 61 72 61 74 6f 72 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 73 70 65 63 69 | `.separator.can.be.used.to.speci |
4f4c0 | 66 79 20 6d 75 6c 74 69 70 6c 65 20 73 65 67 6d 65 6e 74 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 | fy.multiple.segment.instructions |
4f4e0 | 2e 00 49 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 75 73 65 20 65 69 74 68 65 72 20 4d | ..It.is.possible.to.use.either.M |
4f500 | 75 6c 74 69 63 61 73 74 20 6f 72 20 55 6e 69 63 61 73 74 20 74 6f 20 73 79 6e 63 20 63 6f 6e 6e | ulticast.or.Unicast.to.sync.conn |
4f520 | 74 72 61 63 6b 20 74 72 61 66 66 69 63 2e 20 4d 6f 73 74 20 65 78 61 6d 70 6c 65 73 20 62 65 6c | track.traffic..Most.examples.bel |
4f540 | 6f 77 20 73 68 6f 77 20 4d 75 6c 74 69 63 61 73 74 2c 20 62 75 74 20 75 6e 69 63 61 73 74 20 63 | ow.show.Multicast,.but.unicast.c |
4f560 | 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 22 70 65 | an.be.specified.by.using.the."pe |
4f580 | 65 72 22 20 6b 65 79 77 6f 72 6b 20 61 66 74 65 72 20 74 68 65 20 73 70 65 63 69 66 69 63 65 64 | er".keywork.after.the.specificed |
4f5a0 | 20 69 6e 74 65 72 66 61 63 65 2c 20 61 73 20 69 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 | .interface,.as.in.the.following. |
4f5c0 | 65 78 61 6d 70 6c 65 3a 00 49 74 20 69 73 20 76 65 72 79 20 65 61 73 79 20 74 6f 20 6d 69 73 63 | example:.It.is.very.easy.to.misc |
4f5e0 | 6f 6e 66 69 67 75 72 65 20 6d 75 6c 74 69 63 61 73 74 20 72 65 70 65 61 74 69 6e 67 20 69 66 20 | onfigure.multicast.repeating.if. |
4f600 | 79 6f 75 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 4e 48 53 65 73 2e 00 49 74 20 75 73 65 73 | you.have.multiple.NHSes..It.uses |
4f620 | 20 61 20 73 69 6e 67 6c 65 20 54 43 50 20 6f 72 20 55 44 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 | .a.single.TCP.or.UDP.connection. |
4f640 | 61 6e 64 20 64 6f 65 73 20 6e 6f 74 20 72 65 6c 79 20 6f 6e 20 70 61 63 6b 65 74 20 73 6f 75 72 | and.does.not.rely.on.packet.sour |
4f660 | 63 65 20 61 64 64 72 65 73 73 65 73 2c 20 73 6f 20 69 74 20 77 69 6c 6c 20 77 6f 72 6b 20 65 76 | ce.addresses,.so.it.will.work.ev |
4f680 | 65 6e 20 74 68 72 6f 75 67 68 20 61 20 64 6f 75 62 6c 65 20 4e 41 54 3a 20 70 65 72 66 65 63 74 | en.through.a.double.NAT:.perfect |
4f6a0 | 20 66 6f 72 20 70 75 62 6c 69 63 20 68 6f 74 73 70 6f 74 73 20 61 6e 64 20 73 75 63 68 00 49 74 | .for.public.hotspots.and.such.It |
4f6c0 | 20 75 73 65 73 20 61 20 73 74 6f 63 68 61 73 74 69 63 20 6d 6f 64 65 6c 20 74 6f 20 63 6c 61 73 | .uses.a.stochastic.model.to.clas |
4f6e0 | 73 69 66 79 20 69 6e 63 6f 6d 69 6e 67 20 70 61 63 6b 65 74 73 20 69 6e 74 6f 20 64 69 66 66 65 | sify.incoming.packets.into.diffe |
4f700 | 72 65 6e 74 20 66 6c 6f 77 73 20 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 70 72 6f 76 69 64 | rent.flows.and.is.used.to.provid |
4f720 | 65 20 61 20 66 61 69 72 20 73 68 61 72 65 20 6f 66 20 74 68 65 20 62 61 6e 64 77 69 64 74 68 20 | e.a.fair.share.of.the.bandwidth. |
4f740 | 74 6f 20 61 6c 6c 20 74 68 65 20 66 6c 6f 77 73 20 75 73 69 6e 67 20 74 68 65 20 71 75 65 75 65 | to.all.the.flows.using.the.queue |
4f760 | 2e 20 45 61 63 68 20 66 6c 6f 77 20 69 73 20 6d 61 6e 61 67 65 64 20 62 79 20 74 68 65 20 43 6f | ..Each.flow.is.managed.by.the.Co |
4f780 | 44 65 6c 20 71 75 65 75 69 6e 67 20 20 64 69 73 63 69 70 6c 69 6e 65 2e 20 52 65 6f 72 64 65 72 | Del.queuing..discipline..Reorder |
4f7a0 | 69 6e 67 20 77 69 74 68 69 6e 20 61 20 66 6c 6f 77 20 69 73 20 61 76 6f 69 64 65 64 20 73 69 6e | ing.within.a.flow.is.avoided.sin |
4f7c0 | 63 65 20 43 6f 64 65 6c 20 69 6e 74 65 72 6e 61 6c 6c 79 20 75 73 65 73 20 61 20 46 49 46 4f 20 | ce.Codel.internally.uses.a.FIFO. |
4f7e0 | 71 75 65 75 65 2e 00 49 74 20 77 69 6c 6c 20 62 65 20 63 6f 6d 62 69 6e 65 64 20 77 69 74 68 20 | queue..It.will.be.combined.with. |
4f800 | 74 68 65 20 64 65 6c 65 67 61 74 65 64 20 70 72 65 66 69 78 20 61 6e 64 20 74 68 65 20 73 6c 61 | the.delegated.prefix.and.the.sla |
4f820 | 2d 69 64 20 74 6f 20 66 6f 72 6d 20 61 20 63 6f 6d 70 6c 65 74 65 20 69 6e 74 65 72 66 61 63 65 | -id.to.form.a.complete.interface |
4f840 | 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 74 6f 20 75 73 65 20 | .address..The.default.is.to.use. |
4f860 | 74 68 65 20 45 55 49 2d 36 34 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 | the.EUI-64.address.of.the.interf |
4f880 | 61 63 65 2e 00 49 74 27 73 20 65 61 73 79 20 74 6f 20 73 65 74 75 70 20 61 6e 64 20 6f 66 66 65 | ace..It's.easy.to.setup.and.offe |
4f8a0 | 72 73 20 76 65 72 79 20 66 6c 65 78 69 62 6c 65 20 73 70 6c 69 74 20 74 75 6e 6e 65 6c 69 6e 67 | rs.very.flexible.split.tunneling |
4f8c0 | 00 49 74 27 73 20 6e 6f 74 20 6c 69 6b 65 6c 79 20 74 68 61 74 20 61 6e 79 6f 6e 65 20 77 69 6c | .It's.not.likely.that.anyone.wil |
4f8e0 | 6c 20 6e 65 65 64 20 69 74 20 61 6e 79 20 74 69 6d 65 20 73 6f 6f 6e 2c 20 62 75 74 20 69 74 20 | l.need.it.any.time.soon,.but.it. |
4f900 | 64 6f 65 73 20 65 78 69 73 74 2e 00 49 74 27 73 20 73 6c 6f 77 65 72 20 74 68 61 6e 20 49 50 73 | does.exist..It's.slower.than.IPs |
4f920 | 65 63 20 64 75 65 20 74 6f 20 68 69 67 68 65 72 20 70 72 6f 74 6f 63 6f 6c 20 6f 76 65 72 68 65 | ec.due.to.higher.protocol.overhe |
4f940 | 61 64 20 61 6e 64 20 74 68 65 20 66 61 63 74 20 69 74 20 72 75 6e 73 20 69 6e 20 75 73 65 72 20 | ad.and.the.fact.it.runs.in.user. |
4f960 | 6d 6f 64 65 20 77 68 69 6c 65 20 49 50 73 65 63 2c 20 6f 6e 20 4c 69 6e 75 78 2c 20 69 73 20 69 | mode.while.IPsec,.on.Linux,.is.i |
4f980 | 6e 20 6b 65 72 6e 65 6c 20 6d 6f 64 65 00 49 74 27 73 20 74 69 6d 65 20 74 6f 20 63 68 65 63 6b | n.kernel.mode.It's.time.to.check |
4f9a0 | 20 63 6f 6e 6e 74 72 61 63 6b 20 74 61 62 6c 65 2c 20 74 6f 20 73 65 65 20 69 66 20 61 6e 79 20 | .conntrack.table,.to.see.if.any. |
4f9c0 | 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 61 73 20 61 63 63 65 70 74 65 64 2c 20 61 6e 64 20 69 66 20 | connection.was.accepted,.and.if. |
4f9e0 | 77 61 73 20 70 72 6f 70 65 72 6c 79 20 6f 66 66 6c 6f 61 64 65 64 00 4a 6f 69 6e 20 61 20 67 69 | was.properly.offloaded.Join.a.gi |
4fa00 | 76 65 6e 20 56 52 46 2e 20 54 68 69 73 20 77 69 6c 6c 20 6f 70 65 6e 20 61 20 6e 65 77 20 73 75 | ven.VRF..This.will.open.a.new.su |
4fa20 | 62 73 68 65 6c 6c 20 77 69 74 68 69 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 56 52 46 2e | bshell.within.the.specified.VRF. |
4fa40 | 00 4a 75 6d 70 20 74 6f 20 61 20 64 69 66 66 65 72 65 6e 74 20 72 75 6c 65 20 69 6e 20 74 68 69 | .Jump.to.a.different.rule.in.thi |
4fa60 | 73 20 72 6f 75 74 65 2d 6d 61 70 20 6f 6e 20 61 20 6d 61 74 63 68 2e 00 4a 75 6e 69 70 65 72 20 | s.route-map.on.a.match..Juniper. |
4fa80 | 45 58 20 53 77 69 74 63 68 00 4b 65 72 6e 65 6c 00 4b 65 72 6e 65 6c 20 6d 65 73 73 61 67 65 73 | EX.Switch.Kernel.Kernel.messages |
4faa0 | 00 4b 65 79 20 42 61 73 65 64 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 00 4b 65 79 20 47 65 | .Key.Based.Authentication.Key.Ge |
4fac0 | 6e 65 72 61 74 69 6f 6e 00 4b 65 79 20 4d 61 6e 61 67 65 6d 65 6e 74 00 4b 65 79 20 50 61 72 61 | neration.Key.Management.Key.Para |
4fae0 | 6d 65 74 65 72 73 3a 00 4b 65 79 20 50 6f 69 6e 74 73 3a 00 4b 65 79 20 65 78 63 68 61 6e 67 65 | meters:.Key.Points:.Key.exchange |
4fb00 | 20 61 6e 64 20 70 61 79 6c 6f 61 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 69 73 20 64 6f 6e 65 20 | .and.payload.encryption.is.done. |
4fb20 | 75 73 69 6e 67 20 49 4b 45 20 61 6e 64 20 45 53 50 20 70 72 6f 70 6f 73 61 6c 73 20 61 73 20 6b | using.IKE.and.ESP.proposals.as.k |
4fb40 | 6e 6f 77 6e 20 66 72 6f 6d 20 49 4b 45 76 31 20 62 75 74 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 | nown.from.IKEv1.but.the.connecti |
4fb60 | 6f 6e 73 20 61 72 65 20 66 61 73 74 65 72 20 74 6f 20 65 73 74 61 62 6c 69 73 68 2c 20 6d 6f 72 | ons.are.faster.to.establish,.mor |
4fb80 | 65 20 72 65 6c 69 61 62 6c 65 2c 20 61 6e 64 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 20 72 6f 61 | e.reliable,.and.also.support.roa |
4fba0 | 6d 69 6e 67 20 66 72 6f 6d 20 49 50 20 74 6f 20 49 50 20 28 63 61 6c 6c 65 64 20 4d 4f 42 49 4b | ming.from.IP.to.IP.(called.MOBIK |
4fbc0 | 45 20 77 68 69 63 68 20 6d 61 6b 65 73 20 73 75 72 65 20 79 6f 75 72 20 63 6f 6e 6e 65 63 74 69 | E.which.makes.sure.your.connecti |
4fbe0 | 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 64 72 6f 70 20 77 68 65 6e 20 63 68 61 6e 67 69 6e 67 20 6e | on.does.not.drop.when.changing.n |
4fc00 | 65 74 77 6f 72 6b 73 20 66 72 6f 6d 20 65 2e 67 2e 20 57 49 46 49 20 74 6f 20 4c 54 45 20 61 6e | etworks.from.e.g..WIFI.to.LTE.an |
4fc20 | 64 20 62 61 63 6b 29 2e 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 61 | d.back)..Authentication.can.be.a |
4fc40 | 63 68 69 65 76 65 64 20 77 69 74 68 20 58 2e 35 30 39 20 63 65 72 74 69 66 69 63 61 74 65 73 2e | chieved.with.X.509.certificates. |
4fc60 | 00 4b 65 79 20 65 78 63 68 61 6e 67 65 20 61 6e 64 20 70 61 79 6c 6f 61 64 20 65 6e 63 72 79 70 | .Key.exchange.and.payload.encryp |
4fc80 | 74 69 6f 6e 20 69 73 20 73 74 69 6c 6c 20 64 6f 6e 65 20 75 73 69 6e 67 20 49 4b 45 20 61 6e 64 | tion.is.still.done.using.IKE.and |
4fca0 | 20 45 53 50 20 70 72 6f 70 6f 73 61 6c 73 20 61 73 20 6b 6e 6f 77 6e 20 66 72 6f 6d 20 49 4b 45 | .ESP.proposals.as.known.from.IKE |
4fcc0 | 76 31 20 62 75 74 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 72 65 20 66 61 73 74 65 | v1.but.the.connections.are.faste |
4fce0 | 72 20 74 6f 20 65 73 74 61 62 6c 69 73 68 2c 20 6d 6f 72 65 20 72 65 6c 69 61 62 6c 65 2c 20 61 | r.to.establish,.more.reliable,.a |
4fd00 | 6e 64 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 20 72 6f 61 6d 69 6e 67 20 66 72 6f 6d 20 49 50 20 | nd.also.support.roaming.from.IP. |
4fd20 | 74 6f 20 49 50 20 28 63 61 6c 6c 65 64 20 4d 4f 42 49 4b 45 20 77 68 69 63 68 20 6d 61 6b 65 73 | to.IP.(called.MOBIKE.which.makes |
4fd40 | 20 73 75 72 65 20 79 6f 75 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 64 | .sure.your.connection.does.not.d |
4fd60 | 72 6f 70 20 77 68 65 6e 20 63 68 61 6e 67 69 6e 67 20 6e 65 74 77 6f 72 6b 73 20 66 72 6f 6d 20 | rop.when.changing.networks.from. |
4fd80 | 65 2e 67 2e 20 57 49 46 49 20 74 6f 20 4c 54 45 20 61 6e 64 20 62 61 63 6b 29 2e 00 4b 65 79 20 | e.g..WIFI.to.LTE.and.back)..Key. |
4fda0 | 75 73 61 67 65 20 28 43 4c 49 29 00 4b 65 79 62 6f 61 72 64 20 4c 61 79 6f 75 74 00 4b 65 79 70 | usage.(CLI).Keyboard.Layout.Keyp |
4fdc0 | 61 69 72 73 00 4b 65 79 77 6f 72 64 00 4c 32 54 50 00 4c 32 54 50 20 6f 76 65 72 20 49 50 73 65 | airs.Keyword.L2TP.L2TP.over.IPse |
4fde0 | 63 00 4c 32 54 50 76 33 00 4c 32 54 50 76 33 20 63 61 6e 20 62 65 20 72 65 67 61 72 64 65 64 20 | c.L2TPv3.L2TPv3.can.be.regarded. |
4fe00 | 61 73 20 62 65 69 6e 67 20 74 6f 20 4d 50 4c 53 20 77 68 61 74 20 49 50 20 69 73 20 74 6f 20 41 | as.being.to.MPLS.what.IP.is.to.A |
4fe20 | 54 4d 3a 20 61 20 73 69 6d 70 6c 69 66 69 65 64 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 68 65 20 | TM:.a.simplified.version.of.the. |
4fe40 | 73 61 6d 65 20 63 6f 6e 63 65 70 74 2c 20 77 69 74 68 20 6d 75 63 68 20 6f 66 20 74 68 65 20 73 | same.concept,.with.much.of.the.s |
4fe60 | 61 6d 65 20 62 65 6e 65 66 69 74 20 61 63 68 69 65 76 65 64 20 61 74 20 61 20 66 72 61 63 74 69 | ame.benefit.achieved.at.a.fracti |
4fe80 | 6f 6e 20 6f 66 20 74 68 65 20 65 66 66 6f 72 74 2c 20 61 74 20 74 68 65 20 63 6f 73 74 20 6f 66 | on.of.the.effort,.at.the.cost.of |
4fea0 | 20 6c 6f 73 69 6e 67 20 73 6f 6d 65 20 74 65 63 68 6e 69 63 61 6c 20 66 65 61 74 75 72 65 73 20 | .losing.some.technical.features. |
4fec0 | 63 6f 6e 73 69 64 65 72 65 64 20 6c 65 73 73 20 69 6d 70 6f 72 74 61 6e 74 20 69 6e 20 74 68 65 | considered.less.important.in.the |
4fee0 | 20 6d 61 72 6b 65 74 2e 00 4c 32 54 50 76 33 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 | .market..L2TPv3.is.described.in. |
4ff00 | 3a 72 66 63 3a 60 33 39 32 31 60 2e 00 4c 32 54 50 76 33 20 69 73 20 64 65 73 63 72 69 62 65 64 | :rfc:`3921`..L2TPv3.is.described |
4ff20 | 20 69 6e 20 3a 72 66 63 3a 60 33 39 33 31 60 2e 00 4c 32 54 50 76 33 20 6f 70 74 69 6f 6e 73 00 | .in.:rfc:`3931`..L2TPv3.options. |
4ff40 | 4c 32 54 50 76 33 3a 00 4c 33 56 50 4e 20 56 52 46 73 00 4c 44 41 50 00 4c 44 41 50 20 70 72 6f | L2TPv3:.L3VPN.VRFs.LDAP.LDAP.pro |
4ff60 | 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e 2e 20 44 65 66 61 75 6c 74 73 20 74 6f 20 33 20 69 66 20 | tocol.version..Defaults.to.3.if. |
4ff80 | 6e 6f 74 20 73 70 65 63 69 66 69 65 64 2e 00 4c 44 41 50 20 73 65 61 72 63 68 20 66 69 6c 74 65 | not.specified..LDAP.search.filte |
4ffa0 | 72 20 74 6f 20 6c 6f 63 61 74 65 20 74 68 65 20 75 73 65 72 20 44 4e 2e 20 52 65 71 75 69 72 65 | r.to.locate.the.user.DN..Require |
4ffc0 | 64 20 69 66 20 74 68 65 20 75 73 65 72 73 20 61 72 65 20 69 6e 20 61 20 68 69 65 72 61 72 63 68 | d.if.the.users.are.in.a.hierarch |
4ffe0 | 79 20 62 65 6c 6f 77 20 74 68 65 20 62 61 73 65 20 44 4e 2c 20 6f 72 20 69 66 20 74 68 65 20 6c | y.below.the.base.DN,.or.if.the.l |
50000 | 6f 67 69 6e 20 6e 61 6d 65 20 69 73 20 6e 6f 74 20 77 68 61 74 20 62 75 69 6c 64 73 20 74 68 65 | ogin.name.is.not.what.builds.the |
50020 | 20 75 73 65 72 20 73 70 65 63 69 66 69 63 20 70 61 72 74 20 6f 66 20 74 68 65 20 75 73 65 72 73 | .user.specific.part.of.the.users |
50040 | 20 44 4e 2e 00 4c 4c 44 50 00 4c 4c 44 50 20 70 65 72 66 6f 72 6d 73 20 66 75 6e 63 74 69 6f 6e | .DN..LLDP.LLDP.performs.function |
50060 | 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 73 65 76 65 72 61 6c 20 70 72 6f 70 72 69 65 74 61 72 79 | s.similar.to.several.proprietary |
50080 | 20 70 72 6f 74 6f 63 6f 6c 73 2c 20 73 75 63 68 20 61 73 20 3a 61 62 62 72 3a 60 43 44 50 20 28 | .protocols,.such.as.:abbr:`CDP.( |
500a0 | 43 69 73 63 6f 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 29 60 2c 20 3a 61 62 62 | Cisco.Discovery.Protocol)`,.:abb |
500c0 | 72 3a 60 46 44 50 20 28 46 6f 75 6e 64 72 79 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 | r:`FDP.(Foundry.Discovery.Protoc |
500e0 | 6f 6c 29 60 2c 20 3a 61 62 62 72 3a 60 4e 44 50 20 28 4e 6f 72 74 65 6c 20 44 69 73 63 6f 76 65 | ol)`,.:abbr:`NDP.(Nortel.Discove |
50100 | 72 79 20 50 72 6f 74 6f 63 6f 6c 29 60 20 61 6e 64 20 3a 61 62 62 72 3a 60 4c 4c 54 44 20 28 4c | ry.Protocol)`.and.:abbr:`LLTD.(L |
50120 | 69 6e 6b 20 4c 61 79 65 72 20 54 6f 70 6f 6c 6f 67 79 20 44 69 73 63 6f 76 65 72 79 29 60 2e 00 | ink.Layer.Topology.Discovery)`.. |
50140 | 4c 4e 53 20 28 4c 32 54 50 20 4e 65 74 77 6f 72 6b 20 53 65 72 76 65 72 29 00 4c 4e 53 20 61 72 | LNS.(L2TP.Network.Server).LNS.ar |
50160 | 65 20 6f 66 74 65 6e 20 75 73 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 61 20 4c 41 43 | e.often.used.to.connect.to.a.LAC |
50180 | 20 28 4c 32 54 50 20 41 63 63 65 73 73 20 43 6f 6e 63 65 6e 74 72 61 74 6f 72 29 2e 00 4c 61 62 | .(L2TP.Access.Concentrator)..Lab |
501a0 | 65 6c 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 00 4c 61 79 65 72 20 32 | el.Distribution.Protocol.Layer.2 |
501c0 | 20 54 75 6e 6e 65 6c 6c 69 6e 67 20 50 72 6f 74 6f 63 6f 6c 20 56 65 72 73 69 6f 6e 20 33 20 69 | .Tunnelling.Protocol.Version.3.i |
501e0 | 73 20 61 6e 20 49 45 54 46 20 73 74 61 6e 64 61 72 64 20 72 65 6c 61 74 65 64 20 74 6f 20 4c 32 | s.an.IETF.standard.related.to.L2 |
50200 | 54 50 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 61 73 20 61 6e 20 61 6c 74 65 72 6e | TP.that.can.be.used.as.an.altern |
50220 | 61 74 69 76 65 20 70 72 6f 74 6f 63 6f 6c 20 74 6f 20 3a 72 65 66 3a 60 6d 70 6c 73 60 20 66 6f | ative.protocol.to.:ref:`mpls`.fo |
50240 | 72 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 6f 66 20 6d 75 6c 74 69 70 72 6f 74 6f 63 6f 6c | r.encapsulation.of.multiprotocol |
50260 | 20 4c 61 79 65 72 20 32 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 20 74 72 61 66 66 69 63 20 | .Layer.2.communications.traffic. |
50280 | 6f 76 65 72 20 49 50 20 6e 65 74 77 6f 72 6b 73 2e 20 4c 69 6b 65 20 4c 32 54 50 2c 20 4c 32 54 | over.IP.networks..Like.L2TP,.L2T |
502a0 | 50 76 33 20 70 72 6f 76 69 64 65 73 20 61 20 70 73 65 75 64 6f 2d 77 69 72 65 20 73 65 72 76 69 | Pv3.provides.a.pseudo-wire.servi |
502c0 | 63 65 20 62 75 74 20 69 73 20 73 63 61 6c 65 64 20 74 6f 20 66 69 74 20 63 61 72 72 69 65 72 20 | ce.but.is.scaled.to.fit.carrier. |
502e0 | 72 65 71 75 69 72 65 6d 65 6e 74 73 2e 00 4c 65 61 73 65 20 74 69 6d 65 20 77 69 6c 6c 20 62 65 | requirements..Lease.time.will.be |
50300 | 20 6c 65 66 74 20 61 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 77 68 69 63 68 | .left.at.the.default.value.which |
50320 | 20 69 73 20 32 34 20 68 6f 75 72 73 00 4c 65 61 73 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 73 65 | .is.24.hours.Lease.timeout.in.se |
50340 | 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 38 36 34 30 30 29 00 4c 65 67 61 63 79 20 46 69 | conds.(default:.86400).Legacy.Fi |
50360 | 72 65 77 61 6c 6c 00 4c 65 74 20 53 4e 4d 50 20 64 61 65 6d 6f 6e 20 6c 69 73 74 65 6e 20 6f 6e | rewall.Let.SNMP.daemon.listen.on |
50380 | 6c 79 20 6f 6e 20 49 50 20 61 64 64 72 65 73 73 20 31 39 32 2e 30 2e 32 2e 31 00 4c 65 74 27 73 | ly.on.IP.address.192.0.2.1.Let's |
503a0 | 20 61 73 73 75 6d 65 20 50 43 34 20 6f 6e 20 4c 65 61 66 32 20 77 61 6e 74 73 20 74 6f 20 70 69 | .assume.PC4.on.Leaf2.wants.to.pi |
503c0 | 6e 67 20 50 43 35 20 6f 6e 20 4c 65 61 66 33 2e 20 49 6e 73 74 65 61 64 20 6f 66 20 73 65 74 74 | ng.PC5.on.Leaf3..Instead.of.sett |
503e0 | 69 6e 67 20 4c 65 61 66 33 20 61 73 20 6f 75 72 20 72 65 6d 6f 74 65 20 65 6e 64 20 6d 61 6e 75 | ing.Leaf3.as.our.remote.end.manu |
50400 | 61 6c 6c 79 2c 20 4c 65 61 66 32 20 65 6e 63 61 70 73 75 6c 61 74 65 73 20 74 68 65 20 70 61 63 | ally,.Leaf2.encapsulates.the.pac |
50420 | 6b 65 74 20 69 6e 74 6f 20 61 20 55 44 50 2d 70 61 63 6b 65 74 20 61 6e 64 20 73 65 6e 64 73 20 | ket.into.a.UDP-packet.and.sends. |
50440 | 69 74 20 74 6f 20 69 74 73 20 64 65 73 69 67 6e 61 74 65 64 20 6d 75 6c 74 69 63 61 73 74 2d 61 | it.to.its.designated.multicast-a |
50460 | 64 64 72 65 73 73 20 76 69 61 20 53 70 69 6e 65 31 2e 20 57 68 65 6e 20 53 70 69 6e 65 31 20 72 | ddress.via.Spine1..When.Spine1.r |
50480 | 65 63 65 69 76 65 73 20 74 68 69 73 20 70 61 63 6b 65 74 20 69 74 20 66 6f 72 77 61 72 64 73 20 | eceives.this.packet.it.forwards. |
504a0 | 69 74 20 74 6f 20 61 6c 6c 20 6f 74 68 65 72 20 6c 65 61 76 65 73 20 77 68 6f 20 68 61 73 20 6a | it.to.all.other.leaves.who.has.j |
504c0 | 6f 69 6e 65 64 20 74 68 65 20 73 61 6d 65 20 6d 75 6c 74 69 63 61 73 74 2d 67 72 6f 75 70 2c 20 | oined.the.same.multicast-group,. |
504e0 | 69 6e 20 74 68 69 73 20 63 61 73 65 20 4c 65 61 66 33 2e 20 57 68 65 6e 20 4c 65 61 66 33 20 72 | in.this.case.Leaf3..When.Leaf3.r |
50500 | 65 63 65 69 76 65 73 20 74 68 65 20 70 61 63 6b 65 74 20 69 74 20 66 6f 72 77 61 72 64 73 20 69 | eceives.the.packet.it.forwards.i |
50520 | 74 2c 20 77 68 69 6c 65 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 20 6c 65 61 72 6e 69 | t,.while.at.the.same.time.learni |
50540 | 6e 67 20 74 68 61 74 20 50 43 34 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 62 65 68 69 6e 64 20 | ng.that.PC4.is.reachable.behind. |
50560 | 4c 65 61 66 32 2c 20 62 65 63 61 75 73 65 20 74 68 65 20 65 6e 63 61 70 73 75 6c 61 74 65 64 20 | Leaf2,.because.the.encapsulated. |
50580 | 70 61 63 6b 65 74 20 68 61 64 20 4c 65 61 66 32 27 73 20 49 50 20 61 64 64 72 65 73 73 20 73 65 | packet.had.Leaf2's.IP.address.se |
505a0 | 74 20 61 73 20 73 6f 75 72 63 65 20 49 50 2e 00 4c 65 74 27 73 20 61 73 73 75 6d 65 20 77 65 20 | t.as.source.IP..Let's.assume.we. |
505c0 | 68 61 76 65 20 74 77 6f 20 44 48 43 50 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 | have.two.DHCP.WAN.interfaces.and |
505e0 | 20 6f 6e 65 20 4c 41 4e 20 28 65 74 68 32 29 3a 00 4c 65 74 27 73 20 62 75 69 6c 64 20 61 20 73 | .one.LAN.(eth2):.Let's.build.a.s |
50600 | 69 6d 70 6c 65 20 56 50 4e 20 62 65 74 77 65 65 6e 20 32 20 49 6e 74 65 6c c2 ae 20 51 41 54 20 | imple.VPN.between.2.Intel...QAT. |
50620 | 72 65 61 64 79 20 64 65 76 69 63 65 73 2e 00 4c 65 74 27 73 20 65 78 70 61 6e 64 20 74 68 65 20 | ready.devices..Let's.expand.the. |
50640 | 65 78 61 6d 70 6c 65 20 66 72 6f 6d 20 61 62 6f 76 65 20 61 6e 64 20 61 64 64 20 77 65 69 67 68 | example.from.above.and.add.weigh |
50660 | 74 20 74 6f 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 68 65 20 62 61 6e 64 77 69 64 | t.to.the.interfaces..The.bandwid |
50680 | 74 68 20 66 72 6f 6d 20 65 74 68 30 20 69 73 20 6c 61 72 67 65 72 20 74 68 61 6e 20 65 74 68 31 | th.from.eth0.is.larger.than.eth1 |
506a0 | 2e 20 50 65 72 20 64 65 66 61 75 6c 74 2c 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 | ..Per.default,.outbound.traffic. |
506c0 | 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 72 61 6e 64 6f 6d 6c 79 20 61 63 72 6f 73 73 20 61 | is.distributed.randomly.across.a |
506e0 | 76 61 69 6c 61 62 6c 65 20 69 6e 74 65 72 66 61 63 65 73 2e 20 57 65 69 67 68 74 73 20 63 61 6e | vailable.interfaces..Weights.can |
50700 | 20 62 65 20 61 73 73 69 67 6e 65 64 20 74 6f 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 69 6e | .be.assigned.to.interfaces.to.in |
50720 | 66 6c 75 65 6e 63 65 20 74 68 65 20 62 61 6c 61 6e 63 69 6e 67 2e 00 4c 65 74 73 20 61 73 73 75 | fluence.the.balancing..Lets.assu |
50740 | 6d 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 70 6f 6c 6f 67 79 3a 00 4c 65 76 65 6c | me.the.following.topology:.Level |
50760 | 20 34 20 62 61 6c 61 6e 63 69 6e 67 00 4c 69 66 65 74 69 6d 65 20 61 73 73 6f 63 69 61 74 65 64 | .4.balancing.Lifetime.associated |
50780 | 20 77 69 74 68 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 72 20 69 6e 20 75 6e 69 74 | .with.the.default.router.in.unit |
507a0 | 73 20 6f 66 20 73 65 63 6f 6e 64 73 00 4c 69 66 65 74 69 6d 65 20 69 6e 20 64 61 79 73 3b 20 64 | s.of.seconds.Lifetime.in.days;.d |
507c0 | 65 66 61 75 6c 74 20 69 73 20 33 36 35 00 4c 69 66 65 74 69 6d 65 20 69 73 20 64 65 63 72 65 6d | efault.is.365.Lifetime.is.decrem |
507e0 | 65 6e 74 65 64 20 62 79 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 73 | ented.by.the.number.of.seconds.s |
50800 | 69 6e 63 65 20 74 68 65 20 6c 61 73 74 20 52 41 20 2d 20 75 73 65 20 69 6e 20 63 6f 6e 6a 75 6e | ince.the.last.RA.-.use.in.conjun |
50820 | 63 74 69 6f 6e 20 77 69 74 68 20 61 20 44 48 43 50 76 36 2d 50 44 20 70 72 65 66 69 78 00 4c 69 | ction.with.a.DHCPv6-PD.prefix.Li |
50840 | 6b 65 20 6f 6e 20 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 2c 20 41 70 70 6c 65 20 69 | ke.on.Microsoft.Windows,.Apple.i |
50860 | 4f 53 2f 69 50 61 64 4f 53 20 6f 75 74 20 6f 66 20 74 68 65 20 62 6f 78 20 64 6f 65 73 20 6e 6f | OS/iPadOS.out.of.the.box.does.no |
50880 | 74 20 65 78 70 6f 73 65 20 61 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 56 50 4e 20 6f 70 74 69 6f | t.expose.all.available.VPN.optio |
508a0 | 6e 73 20 76 69 61 20 74 68 65 20 64 65 76 69 63 65 20 47 55 49 2e 00 4c 69 6d 69 74 20 61 6c 6c | ns.via.the.device.GUI..Limit.all |
508c0 | 6f 77 65 64 20 63 69 70 68 65 72 20 61 6c 67 6f 72 69 74 68 6d 73 20 75 73 65 64 20 64 75 72 69 | owed.cipher.algorithms.used.duri |
508e0 | 6e 67 20 53 53 4c 2f 54 4c 53 20 68 61 6e 64 73 68 61 6b 65 00 4c 69 6d 69 74 20 6c 6f 67 69 6e | ng.SSL/TLS.handshake.Limit.login |
50900 | 73 20 74 6f 20 60 3c 6c 69 6d 69 74 3e 60 20 70 65 72 20 65 76 65 72 79 20 60 60 72 61 74 65 2d | s.to.`<limit>`.per.every.``rate- |
50920 | 74 69 6d 65 60 60 20 73 65 63 6f 6e 64 73 2e 20 52 61 74 65 20 6c 69 6d 69 74 20 6d 75 73 74 20 | time``.seconds..Rate.limit.must. |
50940 | 62 65 20 62 65 74 77 65 65 6e 20 31 20 61 6e 64 20 31 30 20 61 74 74 65 6d 70 74 73 2e 00 4c 69 | be.between.1.and.10.attempts..Li |
50960 | 6d 69 74 20 6c 6f 67 69 6e 73 20 74 6f 20 60 60 72 61 74 65 2d 6c 69 6d 69 74 60 60 20 61 74 74 | mit.logins.to.``rate-limit``.att |
50980 | 65 6d 70 73 20 70 65 72 20 65 76 65 72 79 20 60 3c 73 65 63 6f 6e 64 73 3e 60 2e 20 52 61 74 65 | emps.per.every.`<seconds>`..Rate |
509a0 | 20 74 69 6d 65 20 6d 75 73 74 20 62 65 20 62 65 74 77 65 65 6e 20 31 35 20 61 6e 64 20 36 30 30 | .time.must.be.between.15.and.600 |
509c0 | 20 73 65 63 6f 6e 64 73 2e 00 4c 69 6d 69 74 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f | .seconds..Limit.maximum.number.o |
509e0 | 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 4c 69 6d 69 74 65 72 00 4c 69 6d 69 74 65 72 20 69 73 | f.connections.Limiter.Limiter.is |
50a00 | 20 6f 6e 65 20 6f 66 20 74 68 6f 73 65 20 70 6f 6c 69 63 69 65 73 20 74 68 61 74 20 75 73 65 73 | .one.of.those.policies.that.uses |
50a20 | 20 63 6c 61 73 73 65 73 5f 20 28 49 6e 67 72 65 73 73 20 71 64 69 73 63 20 69 73 20 61 63 74 75 | .classes_.(Ingress.qdisc.is.actu |
50a40 | 61 6c 6c 79 20 61 20 63 6c 61 73 73 6c 65 73 73 20 70 6f 6c 69 63 79 20 62 75 74 20 66 69 6c 74 | ally.a.classless.policy.but.filt |
50a60 | 65 72 73 20 64 6f 20 77 6f 72 6b 20 69 6e 20 69 74 29 2e 00 4c 69 6d 69 74 73 00 4c 69 6e 65 20 | ers.do.work.in.it)..Limits.Line. |
50a80 | 70 72 69 6e 74 65 72 20 73 75 62 73 79 73 74 65 6d 00 4c 69 6e 6b 20 4d 54 55 20 76 61 6c 75 65 | printer.subsystem.Link.MTU.value |
50aa0 | 20 70 6c 61 63 65 64 20 69 6e 20 52 41 73 2c 20 65 78 6c 75 64 65 64 20 69 6e 20 52 41 73 20 69 | .placed.in.RAs,.exluded.in.RAs.i |
50ac0 | 66 20 75 6e 73 65 74 00 4c 69 6e 6b 20 61 67 67 72 65 67 61 74 69 6f 6e 00 4c 69 6e 75 78 20 6e | f.unset.Link.aggregation.Linux.n |
50ae0 | 65 74 66 69 6c 74 65 72 20 77 69 6c 6c 20 6e 6f 74 20 4e 41 54 20 74 72 61 66 66 69 63 20 6d 61 | etfilter.will.not.NAT.traffic.ma |
50b00 | 72 6b 65 64 20 61 73 20 49 4e 56 41 4c 49 44 2e 20 54 68 69 73 20 6f 66 74 65 6e 20 63 6f 6e 66 | rked.as.INVALID..This.often.conf |
50b20 | 75 73 65 73 20 70 65 6f 70 6c 65 20 69 6e 74 6f 20 74 68 69 6e 6b 69 6e 67 20 74 68 61 74 20 4c | uses.people.into.thinking.that.L |
50b40 | 69 6e 75 78 20 28 6f 72 20 73 70 65 63 69 66 69 63 61 6c 6c 79 20 56 79 4f 53 29 20 68 61 73 20 | inux.(or.specifically.VyOS).has. |
50b60 | 61 20 62 72 6f 6b 65 6e 20 4e 41 54 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 62 65 63 61 | a.broken.NAT.implementation.beca |
50b80 | 75 73 65 20 6e 6f 6e 2d 4e 41 54 65 64 20 74 72 61 66 66 69 63 20 69 73 20 73 65 65 6e 20 6c 65 | use.non-NATed.traffic.is.seen.le |
50ba0 | 61 76 69 6e 67 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 | aving.an.external.interface..Thi |
50bc0 | 73 20 69 73 20 61 63 74 75 61 6c 6c 79 20 77 6f 72 6b 69 6e 67 20 61 73 20 69 6e 74 65 6e 64 65 | s.is.actually.working.as.intende |
50be0 | 64 2c 20 61 6e 64 20 61 20 70 61 63 6b 65 74 20 63 61 70 74 75 72 65 20 6f 66 20 74 68 65 20 22 | d,.and.a.packet.capture.of.the." |
50c00 | 6c 65 61 6b 79 22 20 74 72 61 66 66 69 63 20 73 68 6f 75 6c 64 20 72 65 76 65 61 6c 20 74 68 61 | leaky".traffic.should.reveal.tha |
50c20 | 74 20 74 68 65 20 74 72 61 66 66 69 63 20 69 73 20 65 69 74 68 65 72 20 61 6e 20 61 64 64 69 74 | t.the.traffic.is.either.an.addit |
50c40 | 69 6f 6e 61 6c 20 54 43 50 20 22 52 53 54 22 2c 20 22 46 49 4e 2c 41 43 4b 22 2c 20 6f 72 20 22 | ional.TCP."RST",."FIN,ACK",.or." |
50c60 | 52 53 54 2c 41 43 4b 22 20 73 65 6e 74 20 62 79 20 63 6c 69 65 6e 74 20 73 79 73 74 65 6d 73 20 | RST,ACK".sent.by.client.systems. |
50c80 | 61 66 74 65 72 20 4c 69 6e 75 78 20 6e 65 74 66 69 6c 74 65 72 20 63 6f 6e 73 69 64 65 72 73 20 | after.Linux.netfilter.considers. |
50ca0 | 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 63 6c 6f 73 65 64 2e 20 54 68 65 20 6d 6f 73 74 20 | the.connection.closed..The.most. |
50cc0 | 63 6f 6d 6d 6f 6e 20 69 73 20 74 68 65 20 61 64 64 69 74 69 6f 6e 61 6c 20 54 43 50 20 52 53 54 | common.is.the.additional.TCP.RST |
50ce0 | 20 73 6f 6d 65 20 68 6f 73 74 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 73 65 6e 64 20 | .some.host.implementations.send. |
50d00 | 61 66 74 65 72 20 74 65 72 6d 69 6e 61 74 69 6e 67 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 28 | after.terminating.a.connection.( |
50d20 | 77 68 69 63 68 20 69 73 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2d 73 70 65 63 69 66 69 63 | which.is.implementation-specific |
50d40 | 29 2e 00 4c 69 73 74 20 61 6c 6c 20 4d 41 43 73 65 63 20 69 6e 74 65 72 66 61 63 65 73 2e 00 4c | )..List.all.MACsec.interfaces..L |
50d60 | 69 73 74 20 6f 66 20 66 61 63 69 6c 69 74 69 65 73 20 75 73 65 64 20 62 79 20 73 79 73 6c 6f 67 | ist.of.facilities.used.by.syslog |
50d80 | 2e 20 4d 6f 73 74 20 66 61 63 69 6c 69 74 69 65 73 20 6e 61 6d 65 73 20 61 72 65 20 73 65 6c 66 | ..Most.facilities.names.are.self |
50da0 | 20 65 78 70 6c 61 6e 61 74 6f 72 79 2e 20 46 61 63 69 6c 69 74 69 65 73 20 6c 6f 63 61 6c 30 20 | .explanatory..Facilities.local0. |
50dc0 | 2d 20 6c 6f 63 61 6c 37 20 63 6f 6d 6d 6f 6e 20 75 73 61 67 65 20 69 73 20 66 2e 65 2e 20 61 73 | -.local7.common.usage.is.f.e..as |
50de0 | 20 6e 65 74 77 6f 72 6b 20 6c 6f 67 73 20 66 61 63 69 6c 69 74 69 65 73 20 66 6f 72 20 6e 6f 64 | .network.logs.facilities.for.nod |
50e00 | 65 73 20 61 6e 64 20 6e 65 74 77 6f 72 6b 20 65 71 75 69 70 6d 65 6e 74 2e 20 47 65 6e 65 72 61 | es.and.network.equipment..Genera |
50e20 | 6c 6c 79 20 69 74 20 64 65 70 65 6e 64 73 20 6f 6e 20 74 68 65 20 73 69 74 75 61 74 69 6f 6e 20 | lly.it.depends.on.the.situation. |
50e40 | 68 6f 77 20 74 6f 20 63 6c 61 73 73 69 66 79 20 6c 6f 67 73 20 61 6e 64 20 70 75 74 20 74 68 65 | how.to.classify.logs.and.put.the |
50e60 | 6d 20 74 6f 20 66 61 63 69 6c 69 74 69 65 73 2e 20 53 65 65 20 66 61 63 69 6c 69 74 69 65 73 20 | m.to.facilities..See.facilities. |
50e80 | 6d 6f 72 65 20 61 73 20 61 20 74 6f 6f 6c 20 72 61 74 68 65 72 20 74 68 61 6e 20 61 20 64 69 72 | more.as.a.tool.rather.than.a.dir |
50ea0 | 65 63 74 69 76 65 20 74 6f 20 66 6f 6c 6c 6f 77 2e 00 4c 69 73 74 20 6f 66 20 6e 65 74 77 6f 72 | ective.to.follow..List.of.networ |
50ec0 | 6b 73 20 6f 72 20 63 6c 69 65 6e 74 20 61 64 64 72 65 73 73 65 73 20 70 65 72 6d 69 74 74 65 64 | ks.or.client.addresses.permitted |
50ee0 | 20 74 6f 20 63 6f 6e 74 61 63 74 20 74 68 69 73 20 4e 54 50 20 73 65 72 76 65 72 2e 00 4c 69 73 | .to.contact.this.NTP.server..Lis |
50f00 | 74 20 6f 66 20 73 75 70 70 6f 72 74 65 64 20 4d 41 43 73 3a 20 60 60 68 6d 61 63 2d 6d 64 35 60 | t.of.supported.MACs:.``hmac-md5` |
50f20 | 60 2c 20 60 60 68 6d 61 63 2d 6d 64 35 2d 39 36 60 60 2c 20 60 60 68 6d 61 63 2d 72 69 70 65 6d | `,.``hmac-md5-96``,.``hmac-ripem |
50f40 | 64 31 36 30 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 31 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 | d160``,.``hmac-sha1``,.``hmac-sh |
50f60 | 61 31 2d 39 36 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 32 2d 32 35 36 60 60 2c 20 60 60 68 6d | a1-96``,.``hmac-sha2-256``,.``hm |
50f80 | 61 63 2d 73 68 61 32 2d 35 31 32 60 60 2c 20 60 60 75 6d 61 63 2d 36 34 40 6f 70 65 6e 73 73 68 | ac-sha2-512``,.``umac-64@openssh |
50fa0 | 2e 63 6f 6d 60 60 2c 20 60 60 75 6d 61 63 2d 31 32 38 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 | .com``,.``umac-128@openssh.com`` |
50fc0 | 2c 20 60 60 68 6d 61 63 2d 6d 64 35 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 | ,.``hmac-md5-etm@openssh.com``,. |
50fe0 | 60 60 68 6d 61 63 2d 6d 64 35 2d 39 36 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c | ``hmac-md5-96-etm@openssh.com``, |
51000 | 20 60 60 68 6d 61 63 2d 72 69 70 65 6d 64 31 36 30 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f | .``hmac-ripemd160-etm@openssh.co |
51020 | 6d 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 31 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d | m``,.``hmac-sha1-etm@openssh.com |
51040 | 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 31 2d 39 36 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 | ``,.``hmac-sha1-96-etm@openssh.c |
51060 | 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 32 2d 32 35 36 2d 65 74 6d 40 6f 70 65 6e 73 73 | om``,.``hmac-sha2-256-etm@openss |
51080 | 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 32 2d 35 31 32 2d 65 74 6d 40 6f 70 65 | h.com``,.``hmac-sha2-512-etm@ope |
510a0 | 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 75 6d 61 63 2d 36 34 2d 65 74 6d 40 6f 70 65 6e 73 73 | nssh.com``,.``umac-64-etm@openss |
510c0 | 68 2e 63 6f 6d 60 60 2c 20 60 60 75 6d 61 63 2d 31 32 38 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e | h.com``,.``umac-128-etm@openssh. |
510e0 | 63 6f 6d 60 60 00 4c 69 73 74 20 6f 66 20 73 75 70 70 6f 72 74 65 64 20 61 6c 67 6f 72 69 74 68 | com``.List.of.supported.algorith |
51100 | 6d 73 3a 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 31 2d 73 68 61 31 | ms:.``diffie-hellman-group1-sha1 |
51120 | 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 31 34 2d 73 68 61 | ``,.``diffie-hellman-group14-sha |
51140 | 31 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 31 34 2d 73 68 | 1``,.``diffie-hellman-group14-sh |
51160 | 61 32 35 36 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 31 36 | a256``,.``diffie-hellman-group16 |
51180 | 2d 73 68 61 35 31 32 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 | -sha512``,.``diffie-hellman-grou |
511a0 | 70 31 38 2d 73 68 61 35 31 32 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 | p18-sha512``,.``diffie-hellman-g |
511c0 | 72 6f 75 70 2d 65 78 63 68 61 6e 67 65 2d 73 68 61 31 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 | roup-exchange-sha1``,.``diffie-h |
511e0 | 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 2d 65 78 63 68 61 6e 67 65 2d 73 68 61 32 35 36 60 60 2c 20 | ellman-group-exchange-sha256``,. |
51200 | 60 60 65 63 64 68 2d 73 68 61 32 2d 6e 69 73 74 70 32 35 36 60 60 2c 20 60 60 65 63 64 68 2d 73 | ``ecdh-sha2-nistp256``,.``ecdh-s |
51220 | 68 61 32 2d 6e 69 73 74 70 33 38 34 60 60 2c 20 60 60 65 63 64 68 2d 73 68 61 32 2d 6e 69 73 74 | ha2-nistp384``,.``ecdh-sha2-nist |
51240 | 70 35 32 31 60 60 2c 20 60 60 63 75 72 76 65 32 35 35 31 39 2d 73 68 61 32 35 36 60 60 20 61 6e | p521``,.``curve25519-sha256``.an |
51260 | 64 20 60 60 63 75 72 76 65 32 35 35 31 39 2d 73 68 61 32 35 36 40 6c 69 62 73 73 68 2e 6f 72 67 | d.``curve25519-sha256@libssh.org |
51280 | 60 60 2e 00 4c 69 73 74 20 6f 66 20 73 75 70 70 6f 72 74 65 64 20 63 69 70 68 65 72 73 3a 20 60 | ``..List.of.supported.ciphers:.` |
512a0 | 60 33 64 65 73 2d 63 62 63 60 60 2c 20 60 60 61 65 73 31 32 38 2d 63 62 63 60 60 2c 20 60 60 61 | `3des-cbc``,.``aes128-cbc``,.``a |
512c0 | 65 73 31 39 32 2d 63 62 63 60 60 2c 20 60 60 61 65 73 32 35 36 2d 63 62 63 60 60 2c 20 60 60 61 | es192-cbc``,.``aes256-cbc``,.``a |
512e0 | 65 73 31 32 38 2d 63 74 72 60 60 2c 20 60 60 61 65 73 31 39 32 2d 63 74 72 60 60 2c 20 60 60 61 | es128-ctr``,.``aes192-ctr``,.``a |
51300 | 65 73 32 35 36 2d 63 74 72 60 60 2c 20 60 60 61 72 63 66 6f 75 72 31 32 38 60 60 2c 20 60 60 61 | es256-ctr``,.``arcfour128``,.``a |
51320 | 72 63 66 6f 75 72 32 35 36 60 60 2c 20 60 60 61 72 63 66 6f 75 72 60 60 2c 20 60 60 62 6c 6f 77 | rcfour256``,.``arcfour``,.``blow |
51340 | 66 69 73 68 2d 63 62 63 60 60 2c 20 60 60 63 61 73 74 31 32 38 2d 63 62 63 60 60 00 4c 69 73 74 | fish-cbc``,.``cast128-cbc``.List |
51360 | 20 6f 66 20 77 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 00 4c 69 73 74 65 | .of.well-known.communities.Liste |
51380 | 6e 20 66 6f 72 20 44 48 43 50 20 72 65 71 75 65 73 74 73 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 | n.for.DHCP.requests.on.interface |
513a0 | 20 60 60 65 74 68 31 60 60 2e 00 4c 69 73 74 73 20 56 52 46 73 20 74 68 61 74 20 68 61 76 65 20 | .``eth1``..Lists.VRFs.that.have. |
513c0 | 62 65 65 6e 20 63 72 65 61 74 65 64 00 4c 6f 61 64 20 42 61 6c 61 6e 63 65 00 4c 6f 61 64 20 42 | been.created.Load.Balance.Load.B |
513e0 | 61 6c 61 6e 63 69 6e 67 00 4c 6f 61 64 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 69 6d 61 67 | alancing.Load.the.container.imag |
51400 | 65 20 69 6e 20 6f 70 2d 6d 6f 64 65 2e 00 4c 6f 61 64 2d 62 61 6c 61 6e 63 69 6e 67 00 4c 6f 61 | e.in.op-mode..Load-balancing.Loa |
51420 | 64 2d 62 61 6c 61 6e 63 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 73 20 74 6f 20 62 65 20 75 73 65 | d-balancing.algorithms.to.be.use |
51440 | 64 20 66 6f 72 20 64 69 73 74 72 69 62 75 74 69 6e 64 20 72 65 71 75 65 73 74 73 20 61 6d 6f 6e | d.for.distributind.requests.amon |
51460 | 67 20 74 68 65 20 76 61 69 6c 61 62 6c 65 20 73 65 72 76 65 72 73 00 4c 6f 61 64 2d 62 61 6c 61 | g.the.vailable.servers.Load-bala |
51480 | 6e 63 69 6e 67 20 73 63 68 65 64 75 6c 65 20 61 6c 67 6f 72 69 74 68 6d 3a 00 4c 6f 63 61 6c 00 | ncing.schedule.algorithm:.Local. |
514a0 | 4c 6f 63 61 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 2d 20 41 6e 6e 6f 74 61 74 65 64 3a | Local.Configuration.-.Annotated: |
514c0 | 00 4c 6f 63 61 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 4c 6f 63 61 6c 20 49 50 20 60 | .Local.Configuration:.Local.IP.` |
514e0 | 3c 61 64 64 72 65 73 73 3e 60 20 75 73 65 64 20 77 68 65 6e 20 63 6f 6d 6d 75 6e 69 63 61 74 69 | <address>`.used.when.communicati |
51500 | 6e 67 20 74 6f 20 74 68 65 20 48 41 20 70 65 65 72 2e 00 4c 6f 63 61 6c 20 49 50 20 60 3c 61 64 | ng.to.the.HA.peer..Local.IP.`<ad |
51520 | 64 72 65 73 73 3e 60 20 75 73 65 64 20 77 68 65 6e 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6e 67 20 | dress>`.used.when.communicating. |
51540 | 74 6f 20 74 68 65 20 66 61 69 6c 6f 76 65 72 20 70 65 65 72 2e 00 4c 6f 63 61 6c 20 49 50 20 61 | to.the.failover.peer..Local.IP.a |
51560 | 64 64 72 65 73 73 65 73 20 74 6f 20 6c 69 73 74 65 6e 20 6f 6e 00 4c 6f 63 61 6c 20 49 50 76 34 | ddresses.to.listen.on.Local.IPv4 |
51580 | 20 61 64 64 72 65 73 73 65 73 20 66 6f 72 20 73 65 72 76 69 63 65 20 74 6f 20 6c 69 73 74 65 6e | .addresses.for.service.to.listen |
515a0 | 20 6f 6e 2e 00 4c 6f 63 61 6c 20 52 6f 75 74 65 20 49 50 76 34 00 4c 6f 63 61 6c 20 52 6f 75 74 | .on..Local.Route.IPv4.Local.Rout |
515c0 | 65 20 49 50 76 36 00 4c 6f 63 61 6c 20 52 6f 75 74 65 20 50 6f 6c 69 63 79 00 4c 6f 63 61 6c 20 | e.IPv6.Local.Route.Policy.Local. |
515e0 | 55 73 65 72 20 41 63 63 6f 75 6e 74 00 4c 6f 63 61 6c 20 70 61 74 68 20 74 68 61 74 20 69 6e 63 | User.Account.Local.path.that.inc |
51600 | 6c 75 64 65 73 20 74 68 65 20 6b 6e 6f 77 6e 20 68 6f 73 74 73 20 66 69 6c 65 2e 00 4c 6f 63 61 | ludes.the.known.hosts.file..Loca |
51620 | 6c 20 70 61 74 68 20 74 68 61 74 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 70 72 69 76 61 74 65 | l.path.that.includes.the.private |
51640 | 20 6b 65 79 20 66 69 6c 65 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 2e 00 4c 6f 63 61 6c 20 70 | .key.file.of.the.router..Local.p |
51660 | 61 74 68 20 74 68 61 74 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 | ath.that.includes.the.public.key |
51680 | 20 66 69 6c 65 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 2e 00 4c 6f 63 61 6c 20 72 6f 75 74 65 | .file.of.the.router..Local.route |
516a0 | 00 4c 6f 63 61 6c 6c 79 20 63 6f 6e 6e 65 63 74 20 74 6f 20 73 65 72 69 61 6c 20 70 6f 72 74 20 | .Locally.connect.to.serial.port. |
516c0 | 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 64 65 76 69 63 65 3e 60 2e 00 4c 6f 63 61 6c 6c | identified.by.`<device>`..Locall |
516e0 | 79 20 73 69 67 6e 69 66 69 63 61 6e 74 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 64 69 73 | y.significant.administrative.dis |
51700 | 74 61 6e 63 65 2e 00 4c 6f 67 20 61 6c 65 72 74 00 4c 6f 67 20 61 75 64 69 74 00 4c 6f 67 20 65 | tance..Log.alert.Log.audit.Log.e |
51720 | 76 65 72 79 74 68 69 6e 67 00 4c 6f 67 20 6d 65 73 73 61 67 65 73 20 66 72 6f 6d 20 61 20 73 70 | verything.Log.messages.from.a.sp |
51740 | 65 63 69 66 69 65 64 20 69 6d 61 67 65 20 63 61 6e 20 62 65 20 64 69 73 70 6c 61 79 65 64 20 6f | ecified.image.can.be.displayed.o |
51760 | 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 20 44 65 74 61 69 6c 73 20 6f 66 20 61 6c 6c 6f 77 65 | n.the.console..Details.of.allowe |
51780 | 64 20 70 61 72 61 6d 65 74 65 72 73 3a 00 4c 6f 67 20 73 79 73 6c 6f 67 20 6d 65 73 73 61 67 65 | d.parameters:.Log.syslog.message |
517a0 | 73 20 74 6f 20 60 60 2f 64 65 76 2f 63 6f 6e 73 6f 6c 65 60 60 2c 20 66 6f 72 20 61 6e 20 65 78 | s.to.``/dev/console``,.for.an.ex |
517c0 | 70 6c 61 6e 61 74 69 6f 6e 20 6f 6e 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 66 61 63 69 6c 69 | planation.on.:ref:`syslog_facili |
517e0 | 74 69 65 73 60 20 6b 65 79 77 6f 72 64 73 20 61 6e 64 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f | ties`.keywords.and.:ref:`syslog_ |
51800 | 73 65 76 65 72 69 74 79 5f 6c 65 76 65 6c 60 20 6b 65 79 77 6f 72 64 73 20 73 65 65 20 74 61 62 | severity_level`.keywords.see.tab |
51820 | 6c 65 73 20 62 65 6c 6f 77 2e 00 4c 6f 67 20 73 79 73 6c 6f 67 20 6d 65 73 73 61 67 65 73 20 74 | les.below..Log.syslog.messages.t |
51840 | 6f 20 66 69 6c 65 20 73 70 65 63 69 66 69 65 64 20 76 69 61 20 60 3c 66 69 6c 65 6e 61 6d 65 3e | o.file.specified.via.`<filename> |
51860 | 60 2c 20 66 6f 72 20 61 6e 20 65 78 70 6c 61 6e 61 74 69 6f 6e 20 6f 6e 20 3a 72 65 66 3a 60 73 | `,.for.an.explanation.on.:ref:`s |
51880 | 79 73 6c 6f 67 5f 66 61 63 69 6c 69 74 69 65 73 60 20 6b 65 79 77 6f 72 64 73 20 61 6e 64 20 3a | yslog_facilities`.keywords.and.: |
518a0 | 72 65 66 3a 60 73 79 73 6c 6f 67 5f 73 65 76 65 72 69 74 79 5f 6c 65 76 65 6c 60 20 6b 65 79 77 | ref:`syslog_severity_level`.keyw |
518c0 | 6f 72 64 73 20 73 65 65 20 74 61 62 6c 65 73 20 62 65 6c 6f 77 2e 00 4c 6f 67 20 73 79 73 6c 6f | ords.see.tables.below..Log.syslo |
518e0 | 67 20 6d 65 73 73 61 67 65 73 20 74 6f 20 72 65 6d 6f 74 65 20 68 6f 73 74 20 73 70 65 63 69 66 | g.messages.to.remote.host.specif |
51900 | 69 65 64 20 62 79 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 | ied.by.`<address>`..The.address. |
51920 | 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 62 79 20 65 69 74 68 65 72 20 46 51 44 4e 20 | can.be.specified.by.either.FQDN. |
51940 | 6f 72 20 49 50 20 61 64 64 72 65 73 73 2e 20 46 6f 72 20 61 6e 20 65 78 70 6c 61 6e 61 74 69 6f | or.IP.address..For.an.explanatio |
51960 | 6e 20 6f 6e 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 66 61 63 69 6c 69 74 69 65 73 60 20 6b 65 | n.on.:ref:`syslog_facilities`.ke |
51980 | 79 77 6f 72 64 73 20 61 6e 64 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 73 65 76 65 72 69 74 79 | ywords.and.:ref:`syslog_severity |
519a0 | 5f 6c 65 76 65 6c 60 20 6b 65 79 77 6f 72 64 73 20 73 65 65 20 74 61 62 6c 65 73 20 62 65 6c 6f | _level`.keywords.see.tables.belo |
519c0 | 77 2e 00 4c 6f 67 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 65 | w..Log.the.connection.tracking.e |
519e0 | 76 65 6e 74 73 20 70 65 72 20 70 72 6f 74 6f 63 6f 6c 2e 00 4c 6f 67 67 69 6e 67 00 4c 6f 67 67 | vents.per.protocol..Logging.Logg |
51a00 | 69 6e 67 20 63 61 6e 20 62 65 20 65 6e 61 62 6c 65 20 66 6f 72 20 65 76 65 72 79 20 73 69 6e 67 | ing.can.be.enable.for.every.sing |
51a20 | 6c 65 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 2e 20 49 66 20 65 6e 61 62 6c 65 64 2c 20 6f 74 | le.firewall.rule..If.enabled,.ot |
51a40 | 68 65 72 20 6c 6f 67 20 6f 70 74 69 6f 6e 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 2e 00 | her.log.options.can.be.defined.. |
51a60 | 4c 6f 67 67 69 6e 67 20 74 6f 20 61 20 72 65 6d 6f 74 65 20 68 6f 73 74 20 6c 65 61 76 65 73 20 | Logging.to.a.remote.host.leaves. |
51a80 | 74 68 65 20 6c 6f 63 61 6c 20 6c 6f 67 67 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | the.local.logging.configuration. |
51aa0 | 69 6e 74 61 63 74 2c 20 69 74 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 | intact,.it.can.be.configured.in. |
51ac0 | 70 61 72 61 6c 6c 65 6c 20 74 6f 20 61 20 63 75 73 74 6f 6d 20 66 69 6c 65 20 6f 72 20 63 6f 6e | parallel.to.a.custom.file.or.con |
51ae0 | 73 6f 6c 65 20 6c 6f 67 67 69 6e 67 2e 20 59 6f 75 20 63 61 6e 20 6c 6f 67 20 74 6f 20 6d 75 6c | sole.logging..You.can.log.to.mul |
51b00 | 74 69 70 6c 65 20 68 6f 73 74 73 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 2c 20 75 73 | tiple.hosts.at.the.same.time,.us |
51b20 | 69 6e 67 20 65 69 74 68 65 72 20 54 43 50 20 6f 72 20 55 44 50 2e 20 54 68 65 20 64 65 66 61 75 | ing.either.TCP.or.UDP..The.defau |
51b40 | 6c 74 20 69 73 20 73 65 6e 64 69 6e 67 20 74 68 65 20 6d 65 73 73 61 67 65 73 20 76 69 61 20 70 | lt.is.sending.the.messages.via.p |
51b60 | 6f 72 74 20 35 31 34 2f 55 44 50 2e 00 4c 6f 67 69 6e 20 42 61 6e 6e 65 72 00 4c 6f 67 69 6e 20 | ort.514/UDP..Login.Banner.Login. |
51b80 | 6c 69 6d 69 74 73 00 4c 6f 67 69 6e 2f 55 73 65 72 20 4d 61 6e 61 67 65 6d 65 6e 74 00 4c 6f 6f | limits.Login/User.Management.Loo |
51ba0 | 70 20 46 72 65 65 20 41 6c 74 65 72 6e 61 74 65 20 28 4c 46 41 29 00 4c 6f 6f 70 62 61 63 6b 00 | p.Free.Alternate.(LFA).Loopback. |
51bc0 | 4c 6f 6f 70 62 61 63 6b 73 20 6f 63 63 75 72 73 20 61 74 20 74 68 65 20 49 50 20 6c 65 76 65 6c | Loopbacks.occurs.at.the.IP.level |
51be0 | 20 74 68 65 20 73 61 6d 65 20 77 61 79 20 61 73 20 66 6f 72 20 6f 74 68 65 72 20 69 6e 74 65 72 | .the.same.way.as.for.other.inter |
51c00 | 66 61 63 65 73 2c 20 65 74 68 65 72 6e 65 74 20 66 72 61 6d 65 73 20 61 72 65 20 6e 6f 74 20 66 | faces,.ethernet.frames.are.not.f |
51c20 | 6f 72 77 61 72 64 65 64 20 62 65 74 77 65 65 6e 20 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 | orwarded.between.Pseudo-Ethernet |
51c40 | 20 69 6e 74 65 72 66 61 63 65 73 2e 00 4c 6f 77 00 4d 41 43 20 47 72 6f 75 70 73 00 4d 41 43 20 | .interfaces..Low.MAC.Groups.MAC. |
51c60 | 61 64 64 72 65 73 73 20 61 67 69 6e 67 20 60 3c 74 69 6d 65 60 3e 20 69 6e 20 73 65 63 6f 6e 64 | address.aging.`<time`>.in.second |
51c80 | 73 20 28 64 65 66 61 75 6c 74 3a 20 33 30 30 29 2e 00 4d 41 43 2f 50 48 59 20 69 6e 66 6f 72 6d | s.(default:.300)..MAC/PHY.inform |
51ca0 | 61 74 69 6f 6e 00 4d 41 43 56 4c 41 4e 20 2d 20 50 73 65 75 64 6f 20 45 74 68 65 72 6e 65 74 00 | ation.MACVLAN.-.Pseudo.Ethernet. |
51cc0 | 4d 41 43 73 65 63 00 4d 41 43 73 65 63 20 69 73 20 61 6e 20 49 45 45 45 20 73 74 61 6e 64 61 72 | MACsec.MACsec.is.an.IEEE.standar |
51ce0 | 64 20 28 49 45 45 45 20 38 30 32 2e 31 41 45 29 20 66 6f 72 20 4d 41 43 20 73 65 63 75 72 69 74 | d.(IEEE.802.1AE).for.MAC.securit |
51d00 | 79 2c 20 69 6e 74 72 6f 64 75 63 65 64 20 69 6e 20 32 30 30 36 2e 20 49 74 20 64 65 66 69 6e 65 | y,.introduced.in.2006..It.define |
51d20 | 73 20 61 20 77 61 79 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 20 70 72 6f 74 6f 63 6f 6c 20 | s.a.way.to.establish.a.protocol. |
51d40 | 69 6e 64 65 70 65 6e 64 65 6e 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 74 | independent.connection.between.t |
51d60 | 77 6f 20 68 6f 73 74 73 20 77 69 74 68 20 64 61 74 61 20 63 6f 6e 66 69 64 65 6e 74 69 61 6c 69 | wo.hosts.with.data.confidentiali |
51d80 | 74 79 2c 20 61 75 74 68 65 6e 74 69 63 69 74 79 20 61 6e 64 2f 6f 72 20 69 6e 74 65 67 72 69 74 | ty,.authenticity.and/or.integrit |
51da0 | 79 2c 20 75 73 69 6e 67 20 47 43 4d 2d 41 45 53 2d 31 32 38 2e 20 4d 41 43 73 65 63 20 6f 70 65 | y,.using.GCM-AES-128..MACsec.ope |
51dc0 | 72 61 74 65 73 20 6f 6e 20 74 68 65 20 45 74 68 65 72 6e 65 74 20 6c 61 79 65 72 20 61 6e 64 20 | rates.on.the.Ethernet.layer.and. |
51de0 | 61 73 20 73 75 63 68 20 69 73 20 61 20 6c 61 79 65 72 20 32 20 70 72 6f 74 6f 63 6f 6c 2c 20 77 | as.such.is.a.layer.2.protocol,.w |
51e00 | 68 69 63 68 20 6d 65 61 6e 73 20 69 74 27 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 73 65 63 75 | hich.means.it's.designed.to.secu |
51e20 | 72 65 20 74 72 61 66 66 69 63 20 77 69 74 68 69 6e 20 61 20 6c 61 79 65 72 20 32 20 6e 65 74 77 | re.traffic.within.a.layer.2.netw |
51e40 | 6f 72 6b 2c 20 69 6e 63 6c 75 64 69 6e 67 20 44 48 43 50 20 6f 72 20 41 52 50 20 72 65 71 75 65 | ork,.including.DHCP.or.ARP.reque |
51e60 | 73 74 73 2e 20 49 74 20 64 6f 65 73 20 6e 6f 74 20 63 6f 6d 70 65 74 65 20 77 69 74 68 20 6f 74 | sts..It.does.not.compete.with.ot |
51e80 | 68 65 72 20 73 65 63 75 72 69 74 79 20 73 6f 6c 75 74 69 6f 6e 73 20 73 75 63 68 20 61 73 20 49 | her.security.solutions.such.as.I |
51ea0 | 50 73 65 63 20 28 6c 61 79 65 72 20 33 29 20 6f 72 20 54 4c 53 20 28 6c 61 79 65 72 20 34 29 2c | Psec.(layer.3).or.TLS.(layer.4), |
51ec0 | 20 61 73 20 61 6c 6c 20 74 68 6f 73 65 20 73 6f 6c 75 74 69 6f 6e 73 20 61 72 65 20 75 73 65 64 | .as.all.those.solutions.are.used |
51ee0 | 20 66 6f 72 20 74 68 65 69 72 20 6f 77 6e 20 73 70 65 63 69 66 69 63 20 75 73 65 20 63 61 73 65 | .for.their.own.specific.use.case |
51f00 | 73 2e 00 4d 41 43 73 65 63 20 6f 6e 6c 79 20 70 72 6f 76 69 64 65 73 20 61 75 74 68 65 6e 74 69 | s..MACsec.only.provides.authenti |
51f20 | 63 61 74 69 6f 6e 20 62 79 20 64 65 66 61 75 6c 74 2c 20 65 6e 63 72 79 70 74 69 6f 6e 20 69 73 | cation.by.default,.encryption.is |
51f40 | 20 6f 70 74 69 6f 6e 61 6c 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 65 6e 61 | .optional..This.command.will.ena |
51f60 | 62 6c 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 66 6f 72 20 61 6c 6c 20 6f 75 74 67 6f 69 6e 67 20 | ble.encryption.for.all.outgoing. |
51f80 | 70 61 63 6b 65 74 73 2e 00 4d 41 43 73 65 63 20 6f 70 74 69 6f 6e 73 00 4d 44 49 20 70 6f 77 65 | packets..MACsec.options.MDI.powe |
51fa0 | 72 00 4d 46 41 2f 32 46 41 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 75 73 69 6e 67 20 4f | r.MFA/2FA.authentication.using.O |
51fc0 | 54 50 20 28 6f 6e 65 20 74 69 6d 65 20 70 61 73 73 77 6f 72 64 73 29 00 4d 50 4c 53 00 4d 50 4c | TP.(one.time.passwords).MPLS.MPL |
51fe0 | 53 20 73 75 70 70 6f 72 74 20 69 6e 20 56 79 4f 53 20 69 73 20 6e 6f 74 20 66 69 6e 69 73 68 65 | S.support.in.VyOS.is.not.finishe |
52000 | 64 20 79 65 74 2c 20 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 69 74 73 20 66 75 6e 63 74 69 6f | d.yet,.and.therefore.its.functio |
52020 | 6e 61 6c 69 74 79 20 69 73 20 6c 69 6d 69 74 65 64 2e 20 43 75 72 72 65 6e 74 6c 79 20 74 68 65 | nality.is.limited..Currently.the |
52040 | 72 65 20 69 73 20 6e 6f 20 73 75 70 70 6f 72 74 20 66 6f 72 20 4d 50 4c 53 20 65 6e 61 62 6c 65 | re.is.no.support.for.MPLS.enable |
52060 | 64 20 56 50 4e 20 73 65 72 76 69 63 65 73 20 73 75 63 68 20 61 73 20 4c 32 56 50 4e 73 20 61 6e | d.VPN.services.such.as.L2VPNs.an |
52080 | 64 20 6d 56 50 4e 73 2e 20 52 53 56 50 20 73 75 70 70 6f 72 74 20 69 73 20 61 6c 73 6f 20 6e 6f | d.mVPNs..RSVP.support.is.also.no |
520a0 | 74 20 70 72 65 73 65 6e 74 20 61 73 20 74 68 65 20 75 6e 64 65 72 6c 79 69 6e 67 20 72 6f 75 74 | t.present.as.the.underlying.rout |
520c0 | 69 6e 67 20 73 74 61 63 6b 20 28 46 52 52 29 20 64 6f 65 73 20 6e 6f 74 20 69 6d 70 6c 65 6d 65 | ing.stack.(FRR).does.not.impleme |
520e0 | 6e 74 20 69 74 2e 20 43 75 72 72 65 6e 74 6c 79 20 56 79 4f 53 20 69 6d 70 6c 65 6d 65 6e 74 73 | nt.it..Currently.VyOS.implements |
52100 | 20 4c 44 50 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 52 46 43 20 35 30 33 36 3b 20 6f | .LDP.as.described.in.RFC.5036;.o |
52120 | 74 68 65 72 20 4c 44 50 20 73 74 61 6e 64 61 72 64 20 61 72 65 20 74 68 65 20 66 6f 6c 6c 6f 77 | ther.LDP.standard.are.the.follow |
52140 | 69 6e 67 20 6f 6e 65 73 3a 20 52 46 43 20 36 37 32 30 2c 20 52 46 43 20 36 36 36 37 2c 20 52 46 | ing.ones:.RFC.6720,.RFC.6667,.RF |
52160 | 43 20 35 39 31 39 2c 20 52 46 43 20 35 35 36 31 2c 20 52 46 43 20 37 35 35 32 2c 20 52 46 43 20 | C.5919,.RFC.5561,.RFC.7552,.RFC. |
52180 | 34 34 34 37 2e 20 42 65 63 61 75 73 65 20 4d 50 4c 53 20 69 73 20 61 6c 72 65 61 64 79 20 61 76 | 4447..Because.MPLS.is.already.av |
521a0 | 61 69 6c 61 62 6c 65 20 28 46 52 52 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 73 20 52 46 43 20 33 | ailable.(FRR.also.supports.RFC.3 |
521c0 | 30 33 31 29 2e 00 4d 53 53 20 76 61 6c 75 65 20 3d 20 4d 54 55 20 2d 20 32 30 20 28 49 50 20 68 | 031)..MSS.value.=.MTU.-.20.(IP.h |
521e0 | 65 61 64 65 72 29 20 2d 20 32 30 20 28 54 43 50 20 68 65 61 64 65 72 29 2c 20 72 65 73 75 6c 74 | eader).-.20.(TCP.header),.result |
52200 | 69 6e 67 20 69 6e 20 31 34 35 32 20 62 79 74 65 73 20 6f 6e 20 61 20 31 34 39 32 20 62 79 74 65 | ing.in.1452.bytes.on.a.1492.byte |
52220 | 20 4d 54 55 2e 00 4d 53 53 20 76 61 6c 75 65 20 3d 20 4d 54 55 20 2d 20 34 30 20 28 49 50 76 36 | .MTU..MSS.value.=.MTU.-.40.(IPv6 |
52240 | 20 68 65 61 64 65 72 29 20 2d 20 32 30 20 28 54 43 50 20 68 65 61 64 65 72 29 2c 20 72 65 73 75 | .header).-.20.(TCP.header),.resu |
52260 | 6c 74 69 6e 67 20 69 6e 20 31 34 33 32 20 62 79 74 65 73 20 6f 6e 20 61 20 31 34 39 32 20 62 79 | lting.in.1432.bytes.on.a.1492.by |
52280 | 74 65 20 4d 54 55 2e 00 4d 54 55 00 4d 61 69 6c 20 73 79 73 74 65 6d 00 4d 61 69 6e 20 6e 6f 74 | te.MTU..MTU.Mail.system.Main.not |
522a0 | 65 73 20 72 65 67 61 72 64 69 6e 67 20 74 68 69 73 20 70 61 63 6b 65 74 20 66 6c 6f 77 20 61 6e | es.regarding.this.packet.flow.an |
522c0 | 64 20 74 65 72 6d 69 6e 6f 6c 6f 67 79 20 75 73 65 64 20 69 6e 20 56 79 4f 53 20 66 69 72 65 77 | d.terminology.used.in.VyOS.firew |
522e0 | 61 6c 6c 3a 00 4d 61 69 6e 20 73 74 72 75 63 74 75 72 65 20 56 79 4f 53 20 66 69 72 65 77 61 6c | all:.Main.structure.VyOS.firewal |
52300 | 6c 20 63 6c 69 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 4d 61 69 6e 20 73 74 72 75 63 74 | l.cli.is.shown.next:.Main.struct |
52320 | 75 72 65 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 4d 61 69 6e 74 65 6e 61 6e 63 65 20 6d | ure.is.shown.next:.Maintenance.m |
52340 | 6f 64 65 00 4d 61 6b 65 20 73 75 72 65 20 63 6f 6e 6e 74 72 61 63 6b 20 69 73 20 65 6e 61 62 6c | ode.Make.sure.conntrack.is.enabl |
52360 | 65 64 20 62 79 20 72 75 6e 6e 69 6e 67 20 61 6e 64 20 73 68 6f 77 20 63 6f 6e 6e 65 63 74 69 6f | ed.by.running.and.show.connectio |
52380 | 6e 20 74 72 61 63 6b 69 6e 67 20 74 61 62 6c 65 2e 00 4d 61 6e 61 67 65 64 20 64 65 76 69 63 65 | n.tracking.table..Managed.device |
523a0 | 73 00 4d 61 6e 61 67 65 6d 65 6e 74 20 46 72 61 6d 65 20 50 72 6f 74 65 63 74 69 6f 6e 20 28 4d | s.Management.Frame.Protection.(M |
523c0 | 46 50 29 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 49 45 45 45 20 38 30 32 2e 31 31 77 00 4d 61 | FP).according.to.IEEE.802.11w.Ma |
523e0 | 6e 64 61 74 6f 72 79 20 53 65 74 74 69 6e 67 73 00 4d 61 6e 75 61 6c 20 4e 65 69 67 68 62 6f 72 | ndatory.Settings.Manual.Neighbor |
52400 | 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 4d 61 6e 75 61 6c 6c 79 20 74 72 69 67 67 65 72 20 | .Configuration.Manually.trigger. |
52420 | 63 65 72 74 69 66 69 63 61 74 65 20 72 65 6e 65 77 61 6c 2e 20 54 68 69 73 20 77 69 6c 6c 20 62 | certificate.renewal..This.will.b |
52440 | 65 20 64 6f 6e 65 20 74 77 69 63 65 20 61 20 64 61 79 2e 00 4d 61 70 73 20 74 68 65 20 56 4e 49 | e.done.twice.a.day..Maps.the.VNI |
52460 | 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 56 4c 41 4e 20 69 64 2e 20 54 68 65 20 56 | .to.the.specified.VLAN.id..The.V |
52480 | 4c 41 4e 20 63 61 6e 20 74 68 65 6e 20 62 65 20 63 6f 6e 73 75 6d 65 64 20 62 79 20 61 20 62 72 | LAN.can.then.be.consumed.by.a.br |
524a0 | 69 64 67 65 2e 00 4d 61 72 6b 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 61 73 20 6f 66 66 6c | idge..Mark.RADIUS.server.as.offl |
524c0 | 69 6e 65 20 66 6f 72 20 74 68 69 73 20 67 69 76 65 6e 20 60 3c 74 69 6d 65 3e 60 20 69 6e 20 73 | ine.for.this.given.`<time>`.in.s |
524e0 | 65 63 6f 6e 64 73 2e 00 4d 61 72 6b 20 74 68 65 20 43 41 73 20 70 72 69 76 61 74 65 20 6b 65 79 | econds..Mark.the.CAs.private.key |
52500 | 20 61 73 20 70 61 73 73 77 6f 72 64 20 70 72 6f 74 65 63 74 65 64 2e 20 55 73 65 72 20 69 73 20 | .as.password.protected..User.is. |
52520 | 61 73 6b 65 64 20 66 6f 72 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 77 68 65 6e 20 74 68 65 20 | asked.for.the.password.when.the. |
52540 | 6b 65 79 20 69 73 20 72 65 66 65 72 65 6e 63 65 64 2e 00 4d 61 72 6b 20 74 68 65 20 70 72 69 76 | key.is.referenced..Mark.the.priv |
52560 | 61 74 65 20 6b 65 79 20 61 73 20 70 61 73 73 77 6f 72 64 20 70 72 6f 74 65 63 74 65 64 2e 20 55 | ate.key.as.password.protected..U |
52580 | 73 65 72 20 69 73 20 61 73 6b 65 64 20 66 6f 72 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 77 68 | ser.is.asked.for.the.password.wh |
525a0 | 65 6e 20 74 68 65 20 6b 65 79 20 69 73 20 72 65 66 65 72 65 6e 63 65 64 2e 00 4d 61 74 63 68 20 | en.the.key.is.referenced..Match. |
525c0 | 42 47 50 20 6c 61 72 67 65 20 63 6f 6d 6d 75 6e 69 74 69 65 73 2e 00 4d 61 74 63 68 20 49 50 20 | BGP.large.communities..Match.IP. |
525e0 | 61 64 64 72 65 73 73 65 73 20 62 61 73 65 64 20 6f 6e 20 69 74 73 20 67 65 6f 6c 6f 63 61 74 69 | addresses.based.on.its.geolocati |
52600 | 6f 6e 2e 20 4d 6f 72 65 20 69 6e 66 6f 3a 20 60 67 65 6f 69 70 20 6d 61 74 63 68 69 6e 67 20 3c | on..More.info:.`geoip.matching.< |
52620 | 68 74 74 70 73 3a 2f 2f 77 69 6b 69 2e 6e 66 74 61 62 6c 65 73 2e 6f 72 67 2f 77 69 6b 69 2d 6e | https://wiki.nftables.org/wiki-n |
52640 | 66 74 61 62 6c 65 73 2f 69 6e 64 65 78 2e 70 68 70 2f 47 65 6f 49 50 5f 6d 61 74 63 68 69 6e 67 | ftables/index.php/GeoIP_matching |
52660 | 3e 60 5f 2e 00 4d 61 74 63 68 20 49 50 20 61 64 64 72 65 73 73 65 73 20 62 61 73 65 64 20 6f 6e | >`_..Match.IP.addresses.based.on |
52680 | 20 69 74 73 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 2e 20 4d 6f 72 65 20 69 6e 66 6f 3a 20 60 67 65 | .its.geolocation..More.info:.`ge |
526a0 | 6f 69 70 20 6d 61 74 63 68 69 6e 67 20 3c 68 74 74 70 73 3a 2f 2f 77 69 6b 69 2e 6e 66 74 61 62 | oip.matching.<https://wiki.nftab |
526c0 | 6c 65 73 2e 6f 72 67 2f 77 69 6b 69 2d 6e 66 74 61 62 6c 65 73 2f 69 6e 64 65 78 2e 70 68 70 2f | les.org/wiki-nftables/index.php/ |
526e0 | 47 65 6f 49 50 5f 6d 61 74 63 68 69 6e 67 3e 60 5f 2e 20 55 73 65 20 69 6e 76 65 72 73 65 2d 6d | GeoIP_matching>`_..Use.inverse-m |
52700 | 61 74 63 68 20 74 6f 20 6d 61 74 63 68 20 61 6e 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 | atch.to.match.anything.except.th |
52720 | 65 20 67 69 76 65 6e 20 63 6f 75 6e 74 72 79 2d 63 6f 64 65 73 2e 00 4d 61 74 63 68 20 52 50 4b | e.given.country-codes..Match.RPK |
52740 | 49 20 76 61 6c 69 64 61 74 69 6f 6e 20 72 65 73 75 6c 74 2e 00 4d 61 74 63 68 20 61 20 70 72 6f | I.validation.result..Match.a.pro |
52760 | 74 6f 63 6f 6c 20 63 72 69 74 65 72 69 61 2e 20 41 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 6d 62 65 | tocol.criteria..A.protocol.numbe |
52780 | 72 20 6f 72 20 61 20 6e 61 6d 65 20 77 68 69 63 68 20 69 73 20 64 65 66 69 6e 65 64 20 69 6e 3a | r.or.a.name.which.is.defined.in: |
527a0 | 20 60 60 2f 65 74 63 2f 70 72 6f 74 6f 63 6f 6c 73 60 60 2e 20 53 70 65 63 69 61 6c 20 6e 61 6d | .``/etc/protocols``..Special.nam |
527c0 | 65 73 20 61 72 65 20 60 60 61 6c 6c 60 60 20 66 6f 72 20 61 6c 6c 20 70 72 6f 74 6f 63 6f 6c 73 | es.are.``all``.for.all.protocols |
527e0 | 20 61 6e 64 20 60 60 74 63 70 5f 75 64 70 60 60 20 66 6f 72 20 74 63 70 20 61 6e 64 20 75 64 70 | .and.``tcp_udp``.for.tcp.and.udp |
52800 | 20 62 61 73 65 64 20 70 61 63 6b 65 74 73 2e 20 54 68 65 20 60 60 21 60 60 20 6e 65 67 61 74 65 | .based.packets..The.``!``.negate |
52820 | 73 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 70 72 6f 74 6f 63 6f 6c 2e 00 4d 61 74 63 68 20 61 | s.the.selected.protocol..Match.a |
52840 | 20 70 72 6f 74 6f 63 6f 6c 20 63 72 69 74 65 72 69 61 2e 20 41 20 70 72 6f 74 6f 63 6f 6c 20 6e | .protocol.criteria..A.protocol.n |
52860 | 75 6d 62 65 72 20 6f 72 20 61 20 6e 61 6d 65 20 77 68 69 63 68 20 69 73 20 68 65 72 65 20 64 65 | umber.or.a.name.which.is.here.de |
52880 | 66 69 6e 65 64 3a 20 60 60 2f 65 74 63 2f 70 72 6f 74 6f 63 6f 6c 73 60 60 2e 20 53 70 65 63 69 | fined:.``/etc/protocols``..Speci |
528a0 | 61 6c 20 6e 61 6d 65 73 20 61 72 65 20 60 60 61 6c 6c 60 60 20 66 6f 72 20 61 6c 6c 20 70 72 6f | al.names.are.``all``.for.all.pro |
528c0 | 74 6f 63 6f 6c 73 20 61 6e 64 20 60 60 74 63 70 5f 75 64 70 60 60 20 66 6f 72 20 74 63 70 20 61 | tocols.and.``tcp_udp``.for.tcp.a |
528e0 | 6e 64 20 75 64 70 20 62 61 73 65 64 20 70 61 63 6b 65 74 73 2e 20 54 68 65 20 60 60 21 60 60 20 | nd.udp.based.packets..The.``!``. |
52900 | 6e 65 67 61 74 65 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 70 72 6f 74 6f 63 6f 6c 2e 00 4d 61 | negate.the.selected.protocol..Ma |
52920 | 74 63 68 20 61 67 61 69 6e 73 74 20 74 68 65 20 73 74 61 74 65 20 6f 66 20 61 20 70 61 63 6b 65 | tch.against.the.state.of.a.packe |
52940 | 74 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 | t..Match.based.on.connection.tra |
52960 | 63 6b 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 68 65 6c 70 65 72 20 6d 6f 64 75 6c 65 20 74 6f 20 | cking.protocol.helper.module.to. |
52980 | 73 65 63 75 72 65 20 75 73 65 20 6f 66 20 74 68 61 74 20 68 65 6c 70 65 72 20 6d 6f 64 75 6c 65 | secure.use.of.that.helper.module |
529a0 | 2e 20 53 65 65 20 62 65 6c 6f 77 20 66 6f 72 20 70 6f 73 73 69 62 6c 65 20 63 6f 6d 70 6c 65 74 | ..See.below.for.possible.complet |
529c0 | 69 6f 6e 73 20 60 3c 6d 6f 64 75 6c 65 3e 60 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 | ions.`<module>`..Match.based.on. |
529e0 | 64 73 63 70 20 76 61 6c 75 65 20 63 72 69 74 65 72 69 61 2e 20 4d 75 6c 74 69 70 6c 65 20 76 61 | dscp.value.criteria..Multiple.va |
52a00 | 6c 75 65 73 20 66 72 6f 6d 20 30 20 74 6f 20 36 33 20 61 6e 64 20 72 61 6e 67 65 73 20 61 72 65 | lues.from.0.to.63.and.ranges.are |
52a20 | 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 64 73 63 70 20 | .supported..Match.based.on.dscp. |
52a40 | 76 61 6c 75 65 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 66 72 61 67 6d 65 6e 74 20 63 | value..Match.based.on.fragment.c |
52a60 | 72 69 74 65 72 69 61 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 63 6d 70 20 63 6f 64 | riteria..Match.based.on.icmp.cod |
52a80 | 65 20 61 6e 64 20 74 79 70 65 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 63 6d 70 20 | e.and.type..Match.based.on.icmp. |
52aa0 | 74 79 70 65 2d 6e 61 6d 65 20 63 72 69 74 65 72 69 61 2e 20 55 73 65 20 74 61 62 20 66 6f 72 20 | type-name.criteria..Use.tab.for. |
52ac0 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 77 68 61 74 20 2a 2a 74 79 70 65 2d 6e 61 | information.about.what.**type-na |
52ae0 | 6d 65 2a 2a 20 63 72 69 74 65 72 69 61 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 | me**.criteria.are.supported..Mat |
52b00 | 63 68 20 62 61 73 65 64 20 6f 6e 20 69 63 6d 70 76 36 20 74 79 70 65 2d 6e 61 6d 65 20 63 72 69 | ch.based.on.icmpv6.type-name.cri |
52b20 | 74 65 72 69 61 2e 20 55 73 65 20 74 61 62 20 66 6f 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 | teria..Use.tab.for.information.a |
52b40 | 62 6f 75 74 20 77 68 61 74 20 2a 2a 74 79 70 65 2d 6e 61 6d 65 2a 2a 20 63 72 69 74 65 72 69 61 | bout.what.**type-name**.criteria |
52b60 | 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 | .are.supported..Match.based.on.i |
52b80 | 63 6d 70 7c 69 63 6d 70 76 36 20 63 6f 64 65 20 61 6e 64 20 74 79 70 65 2e 00 4d 61 74 63 68 20 | cmp|icmpv6.code.and.type..Match. |
52ba0 | 62 61 73 65 64 20 6f 6e 20 69 63 6d 70 7c 69 63 6d 70 76 36 20 74 79 70 65 2d 6e 61 6d 65 20 63 | based.on.icmp|icmpv6.type-name.c |
52bc0 | 72 69 74 65 72 69 61 2e 20 55 73 65 20 74 61 62 20 66 6f 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | riteria..Use.tab.for.information |
52be0 | 20 61 62 6f 75 74 20 77 68 61 74 20 2a 2a 74 79 70 65 2d 6e 61 6d 65 2a 2a 20 63 72 69 74 65 72 | .about.what.**type-name**.criter |
52c00 | 69 61 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e | ia.are.supported..Match.based.on |
52c20 | 20 69 63 6d 70 7c 69 63 6d 70 76 36 20 74 79 70 65 2d 6e 61 6d 65 20 63 72 69 74 65 72 69 61 2e | .icmp|icmpv6.type-name.criteria. |
52c40 | 20 55 73 65 20 74 61 62 20 66 6f 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 77 | .Use.tab.for.information.about.w |
52c60 | 68 61 74 20 74 79 70 65 2d 6e 61 6d 65 20 63 72 69 74 65 72 69 61 20 61 72 65 20 73 75 70 70 6f | hat.type-name.criteria.are.suppo |
52c80 | 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 6e 62 6f 75 6e 64 20 69 6e 74 | rted..Match.based.on.inbound.int |
52ca0 | 65 72 66 61 63 65 20 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 69 6e 67 20 63 68 61 72 61 63 74 | erface.group..Prepending.charact |
52cc0 | 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 | er.``!``.for.inverted.matching.c |
52ce0 | 72 69 74 65 72 69 61 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 64 2e 20 46 6f 72 20 65 78 | riteria.is.also.supportd..For.ex |
52d00 | 61 6d 70 6c 65 20 60 60 21 49 46 41 43 45 5f 47 52 4f 55 50 60 60 00 4d 61 74 63 68 20 62 61 73 | ample.``!IFACE_GROUP``.Match.bas |
52d20 | 65 64 20 6f 6e 20 69 6e 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 2e 20 57 69 6c 63 61 72 64 | ed.on.inbound.interface..Wilcard |
52d40 | 20 60 60 2a 60 60 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a | .``*``.can.be.used..For.example: |
52d60 | 20 60 60 65 74 68 32 2a 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 6e 62 6f 75 6e | .``eth2*``.Match.based.on.inboun |
52d80 | 64 20 69 6e 74 65 72 66 61 63 65 2e 20 57 69 6c 63 61 72 64 20 60 60 2a 60 60 20 63 61 6e 20 62 | d.interface..Wilcard.``*``.can.b |
52da0 | 65 20 75 73 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 65 74 68 32 2a 60 60 2e 20 | e.used..For.example:.``eth2*``.. |
52dc0 | 50 72 65 70 65 6e 64 69 6e 67 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 | Prepending.character.``!``.for.i |
52de0 | 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 69 73 20 61 6c 73 | nverted.matching.criteria.is.als |
52e00 | 6f 20 73 75 70 70 6f 72 74 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 21 65 74 68 32 60 | o.supportd..For.example.``!eth2` |
52e20 | 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 6e 62 6f 75 6e 64 2f 6f 75 74 62 6f 75 6e | `.Match.based.on.inbound/outboun |
52e40 | 64 20 69 6e 74 65 72 66 61 63 65 2e 20 57 69 6c 63 61 72 64 20 60 60 2a 60 60 20 63 61 6e 20 62 | d.interface..Wilcard.``*``.can.b |
52e60 | 65 20 75 73 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 65 74 68 32 2a 60 60 00 4d | e.used..For.example:.``eth2*``.M |
52e80 | 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 70 73 65 63 20 63 72 69 74 65 72 69 61 2e 00 4d 61 | atch.based.on.ipsec.criteria..Ma |
52ea0 | 74 63 68 20 62 61 73 65 64 20 6f 6e 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 20 | tch.based.on.outbound.interface. |
52ec0 | 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 69 6e 67 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 | group..Prepending.character.``!` |
52ee0 | 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 | `.for.inverted.matching.criteria |
52f00 | 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 60 | .is.also.supportd..For.example.` |
52f20 | 60 21 49 46 41 43 45 5f 47 52 4f 55 50 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 6f | `!IFACE_GROUP``.Match.based.on.o |
52f40 | 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 2e 20 57 69 6c 63 61 72 64 20 60 60 2a 60 60 | utbound.interface..Wilcard.``*`` |
52f60 | 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 65 74 68 | .can.be.used..For.example:.``eth |
52f80 | 32 2a 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 | 2*``.Match.based.on.outbound.int |
52fa0 | 65 72 66 61 63 65 2e 20 57 69 6c 63 61 72 64 20 60 60 2a 60 60 20 63 61 6e 20 62 65 20 75 73 65 | erface..Wilcard.``*``.can.be.use |
52fc0 | 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 65 74 68 32 2a 60 60 2e 20 50 72 65 70 65 | d..For.example:.``eth2*``..Prepe |
52fe0 | 6e 64 69 6e 67 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 | nding.character.``!``.for.invert |
53000 | 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 69 73 20 61 6c 73 6f 20 73 75 70 | ed.matching.criteria.is.also.sup |
53020 | 70 6f 72 74 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 21 65 74 68 32 60 60 00 4d 61 74 | portd..For.example.``!eth2``.Mat |
53040 | 63 68 20 62 61 73 65 64 20 6f 6e 20 70 61 63 6b 65 74 20 6c 65 6e 67 74 68 20 63 72 69 74 65 72 | ch.based.on.packet.length.criter |
53060 | 69 61 2e 20 4d 75 6c 74 69 70 6c 65 20 76 61 6c 75 65 73 20 66 72 6f 6d 20 31 20 74 6f 20 36 35 | ia..Multiple.values.from.1.to.65 |
53080 | 35 33 35 20 61 6e 64 20 72 61 6e 67 65 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 | 535.and.ranges.are.supported..Ma |
530a0 | 74 63 68 20 62 61 73 65 64 20 6f 6e 20 70 61 63 6b 65 74 20 74 79 70 65 20 63 72 69 74 65 72 69 | tch.based.on.packet.type.criteri |
530c0 | 61 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 61 76 | a..Match.based.on.the.maximum.av |
530e0 | 65 72 61 67 65 20 72 61 74 65 2c 20 73 70 65 63 69 66 69 65 64 20 61 73 20 2a 2a 69 6e 74 65 67 | erage.rate,.specified.as.**integ |
53100 | 65 72 2f 75 6e 69 74 2a 2a 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 2a 2a 35 2f 6d 69 6e 75 74 | er/unit**..For.example.**5/minut |
53120 | 65 73 2a 2a 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 | es**.Match.based.on.the.maximum. |
53140 | 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 74 6f 20 61 6c 6c 6f 77 20 69 6e 20 65 78 | number.of.packets.to.allow.in.ex |
53160 | 63 65 73 73 20 6f 66 20 72 61 74 65 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 76 6c 61 | cess.of.rate..Match.based.on.vla |
53180 | 6e 20 49 44 2e 20 52 61 6e 67 65 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 65 64 2e 00 4d | n.ID..Range.is.also.supported..M |
531a0 | 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 76 6c 61 6e 20 70 72 69 6f 72 69 74 79 28 70 63 70 29 | atch.based.on.vlan.priority(pcp) |
531c0 | 2e 20 52 61 6e 67 65 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 | ..Range.is.also.supported..Match |
531e0 | 20 62 61 73 65 73 20 6f 6e 20 72 65 63 65 6e 74 6c 79 20 73 65 65 6e 20 73 6f 75 72 63 65 73 2e | .bases.on.recently.seen.sources. |
53200 | 00 4d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 63 6f 6e 6e 65 63 74 | .Match.criteria.based.on.connect |
53220 | 69 6f 6e 20 6d 61 72 6b 2e 00 4d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f | ion.mark..Match.criteria.based.o |
53240 | 6e 20 6e 61 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 75 73 2e 00 4d 61 74 63 68 20 63 | n.nat.connection.status..Match.c |
53260 | 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 65 20 61 6e 64 2f 6f 72 20 64 | riteria.based.on.source.and/or.d |
53280 | 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 69 73 20 73 69 6d 69 | estination.address..This.is.simi |
532a0 | 6c 61 72 20 74 6f 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 67 72 6f 75 70 73 20 70 61 72 74 2c 20 | lar.to.the.network.groups.part,. |
532c0 | 62 75 74 20 68 65 72 65 20 79 6f 75 20 61 72 65 20 61 62 6c 65 20 74 6f 20 6e 65 67 61 74 65 20 | but.here.you.are.able.to.negate. |
532e0 | 74 68 65 20 6d 61 74 63 68 69 6e 67 20 61 64 64 72 65 73 73 65 73 2e 00 4d 61 74 63 68 20 63 72 | the.matching.addresses..Match.cr |
53300 | 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 65 20 61 6e 64 2f 6f 72 20 64 65 | iteria.based.on.source.and/or.de |
53320 | 73 74 69 6e 61 74 69 6f 6e 20 6d 61 63 2d 61 64 64 72 65 73 73 2e 00 4d 61 74 63 68 20 64 6f 6d | stination.mac-address..Match.dom |
53340 | 61 69 6e 20 6e 61 6d 65 00 4d 61 74 63 68 20 66 69 72 65 77 61 6c 6c 20 6d 61 72 6b 20 76 61 6c | ain.name.Match.firewall.mark.val |
53360 | 75 65 00 4d 61 74 63 68 20 68 6f 70 2d 6c 69 6d 69 74 20 70 61 72 61 6d 65 74 65 72 2c 20 77 68 | ue.Match.hop-limit.parameter,.wh |
53380 | 65 72 65 20 27 65 71 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 65 71 75 61 6c 27 3b 20 27 67 74 | ere.'eq'.stands.for.'equal';.'gt |
533a0 | 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 67 72 65 61 74 65 72 20 74 68 61 6e 27 2c 20 61 6e 64 | '.stands.for.'greater.than',.and |
533c0 | 20 27 6c 74 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 6c 65 73 73 20 74 68 61 6e 27 2e 00 4d 61 | .'lt'.stands.for.'less.than'..Ma |
533e0 | 74 63 68 20 6c 6f 63 61 6c 20 70 72 65 66 65 72 65 6e 63 65 2e 00 4d 61 74 63 68 20 72 6f 75 74 | tch.local.preference..Match.rout |
53400 | 65 20 6d 65 74 72 69 63 2e 00 4d 61 74 63 68 20 74 69 6d 65 20 74 6f 20 6c 69 76 65 20 70 61 72 | e.metric..Match.time.to.live.par |
53420 | 61 6d 65 74 65 72 2c 20 77 68 65 72 65 20 27 65 71 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 65 | ameter,.where.'eq'.stands.for.'e |
53440 | 71 75 61 6c 27 3b 20 27 67 74 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 67 72 65 61 74 65 72 20 | qual';.'gt'.stands.for.'greater. |
53460 | 74 68 61 6e 27 2c 20 61 6e 64 20 27 6c 74 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 6c 65 73 73 | than',.and.'lt'.stands.for.'less |
53480 | 20 74 68 61 6e 27 2e 00 4d 61 74 63 68 20 77 68 65 6e 20 27 63 6f 75 6e 74 27 20 61 6d 6f 75 6e | .than'..Match.when.'count'.amoun |
534a0 | 74 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 72 65 20 73 65 65 6e 20 77 69 74 68 69 6e | t.of.connections.are.seen.within |
534c0 | 20 27 74 69 6d 65 27 2e 20 54 68 65 73 65 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 | .'time'..These.matching.criteria |
534e0 | 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 62 6c 6f 63 6b 20 62 72 75 74 65 2d 66 6f 72 63 | .can.be.used.to.block.brute-forc |
53500 | 65 20 61 74 74 65 6d 70 74 73 2e 00 4d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 00 4d 61 | e.attempts..Matching.criteria.Ma |
53520 | 74 63 68 69 6e 67 20 74 72 61 66 66 69 63 00 4d 61 78 69 6d 75 6d 20 41 2d 4d 53 44 55 20 6c 65 | tching.traffic.Maximum.A-MSDU.le |
53540 | 6e 67 74 68 20 33 38 33 39 20 28 64 65 66 61 75 6c 74 29 20 6f 72 20 37 39 33 35 20 6f 63 74 65 | ngth.3839.(default).or.7935.octe |
53560 | 74 73 00 4d 61 78 69 6d 75 6d 20 54 72 61 6e 73 6d 69 73 73 69 6f 6e 20 55 6e 69 74 20 28 4d 54 | ts.Maximum.Transmission.Unit.(MT |
53580 | 55 29 20 28 64 65 66 61 75 6c 74 3a 20 2a 2a 31 34 33 36 2a 2a 29 00 4d 61 78 69 6d 75 6d 20 54 | U).(default:.**1436**).Maximum.T |
535a0 | 72 61 6e 73 6d 69 73 73 69 6f 6e 20 55 6e 69 74 20 28 4d 54 55 29 20 28 64 65 66 61 75 6c 74 3a | ransmission.Unit.(MTU).(default: |
535c0 | 20 2a 2a 31 34 39 32 2a 2a 29 00 4d 61 78 69 6d 75 6d 20 54 72 61 6e 73 6d 69 73 73 69 6f 6e 20 | .**1492**).Maximum.Transmission. |
535e0 | 55 6e 69 74 20 28 4d 54 55 29 20 28 64 65 66 61 75 6c 74 3a 20 2a 2a 31 35 30 30 2a 2a 29 00 4d | Unit.(MTU).(default:.**1500**).M |
53600 | 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 44 4e 53 20 63 61 63 68 65 20 65 6e 74 72 69 | aximum.number.of.DNS.cache.entri |
53620 | 65 73 2e 20 31 20 6d 69 6c 6c 69 6f 6e 20 70 65 72 20 43 50 55 20 63 6f 72 65 20 77 69 6c 6c 20 | es..1.million.per.CPU.core.will. |
53640 | 67 65 6e 65 72 61 6c 6c 79 20 73 75 66 66 69 63 65 20 66 6f 72 20 6d 6f 73 74 20 69 6e 73 74 61 | generally.suffice.for.most.insta |
53660 | 6c 6c 61 74 69 6f 6e 73 2e 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 49 50 76 34 | llations..Maximum.number.of.IPv4 |
53680 | 20 6e 61 6d 65 73 65 72 76 65 72 73 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 61 | .nameservers.Maximum.number.of.a |
536a0 | 75 74 68 65 6e 74 69 63 61 74 6f 72 20 70 72 6f 63 65 73 73 65 73 20 74 6f 20 73 70 61 77 6e 2e | uthenticator.processes.to.spawn. |
536c0 | 20 49 66 20 79 6f 75 20 73 74 61 72 74 20 74 6f 6f 20 66 65 77 20 53 71 75 69 64 20 77 69 6c 6c | .If.you.start.too.few.Squid.will |
536e0 | 20 68 61 76 65 20 74 6f 20 77 61 69 74 20 66 6f 72 20 74 68 65 6d 20 74 6f 20 70 72 6f 63 65 73 | .have.to.wait.for.them.to.proces |
53700 | 73 20 61 20 62 61 63 6b 6c 6f 67 20 6f 66 20 63 72 65 64 65 6e 74 69 61 6c 20 76 65 72 69 66 69 | s.a.backlog.of.credential.verifi |
53720 | 63 61 74 69 6f 6e 73 2c 20 73 6c 6f 77 69 6e 67 20 69 74 20 64 6f 77 6e 2e 20 57 68 65 6e 20 70 | cations,.slowing.it.down..When.p |
53740 | 61 73 73 77 6f 72 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 73 20 61 72 65 20 64 6f 6e 65 20 76 | assword.verifications.are.done.v |
53760 | 69 61 20 61 20 28 73 6c 6f 77 29 20 6e 65 74 77 6f 72 6b 20 79 6f 75 20 61 72 65 20 6c 69 6b 65 | ia.a.(slow).network.you.are.like |
53780 | 6c 79 20 74 6f 20 6e 65 65 64 20 6c 6f 74 73 20 6f 66 20 61 75 74 68 65 6e 74 69 63 61 74 6f 72 | ly.to.need.lots.of.authenticator |
537a0 | 20 70 72 6f 63 65 73 73 65 73 2e 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 63 6f | .processes..Maximum.number.of.co |
537c0 | 6e 63 75 72 72 65 6e 74 20 73 65 73 73 69 6f 6e 20 73 74 61 72 74 20 61 74 74 65 6d 70 74 73 00 | ncurrent.session.start.attempts. |
537e0 | 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 73 74 61 74 69 6f 6e 73 20 61 6c 6c 6f 77 | Maximum.number.of.stations.allow |
53800 | 65 64 20 69 6e 20 73 74 61 74 69 6f 6e 20 74 61 62 6c 65 2e 20 4e 65 77 20 73 74 61 74 69 6f 6e | ed.in.station.table..New.station |
53820 | 73 20 77 69 6c 6c 20 62 65 20 72 65 6a 65 63 74 65 64 20 61 66 74 65 72 20 74 68 65 20 73 74 61 | s.will.be.rejected.after.the.sta |
53840 | 74 69 6f 6e 20 74 61 62 6c 65 20 69 73 20 66 75 6c 6c 2e 20 49 45 45 45 20 38 30 32 2e 31 31 20 | tion.table.is.full..IEEE.802.11. |
53860 | 68 61 73 20 61 20 6c 69 6d 69 74 20 6f 66 20 32 30 30 37 20 64 69 66 66 65 72 65 6e 74 20 61 73 | has.a.limit.of.2007.different.as |
53880 | 73 6f 63 69 61 74 69 6f 6e 20 49 44 73 2c 20 73 6f 20 74 68 69 73 20 6e 75 6d 62 65 72 20 73 68 | sociation.IDs,.so.this.number.sh |
538a0 | 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 61 72 67 65 72 20 74 68 61 6e 20 74 68 61 74 2e 00 4d 61 | ould.not.be.larger.than.that..Ma |
538c0 | 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 74 69 6d 65 73 20 61 6e 20 65 78 70 69 72 65 64 | ximum.number.of.times.an.expired |
538e0 | 20 72 65 63 6f 72 64 e2 80 99 73 20 54 54 4c 20 69 73 20 65 78 74 65 6e 64 65 64 20 62 79 20 33 | .record...s.TTL.is.extended.by.3 |
53900 | 30 73 20 77 68 65 6e 20 73 65 72 76 69 6e 67 20 73 74 61 6c 65 2e 20 45 78 74 65 6e 73 69 6f 6e | 0s.when.serving.stale..Extension |
53920 | 20 6f 6e 6c 79 20 6f 63 63 75 72 73 20 69 66 20 61 20 72 65 63 6f 72 64 20 63 61 6e 6e 6f 74 20 | .only.occurs.if.a.record.cannot. |
53940 | 62 65 20 72 65 66 72 65 73 68 65 64 2e 20 41 20 76 61 6c 75 65 20 6f 66 20 30 20 6d 65 61 6e 73 | be.refreshed..A.value.of.0.means |
53960 | 20 74 68 65 20 53 65 72 76 65 20 53 74 61 6c 65 20 6d 65 63 68 61 6e 69 73 6d 20 69 73 20 6e 6f | .the.Serve.Stale.mechanism.is.no |
53980 | 74 20 75 73 65 64 2e 20 54 6f 20 61 6c 6c 6f 77 20 72 65 63 6f 72 64 73 20 62 65 63 6f 6d 69 6e | t.used..To.allow.records.becomin |
539a0 | 67 20 73 74 61 6c 65 20 74 6f 20 62 65 20 73 65 72 76 65 64 20 66 6f 72 20 61 6e 20 68 6f 75 72 | g.stale.to.be.served.for.an.hour |
539c0 | 2c 20 75 73 65 20 61 20 76 61 6c 75 65 20 6f 66 20 31 32 30 2e 00 4d 61 78 69 6d 75 6d 20 6e 75 | ,.use.a.value.of.120..Maximum.nu |
539e0 | 6d 62 65 72 20 6f 66 20 74 72 69 65 73 20 74 6f 20 73 65 6e 64 20 41 63 63 65 73 73 2d 52 65 71 | mber.of.tries.to.send.Access-Req |
53a00 | 75 65 73 74 2f 41 63 63 6f 75 6e 74 69 6e 67 2d 52 65 71 75 65 73 74 20 71 75 65 72 69 65 73 00 | uest/Accounting-Request.queries. |
53a20 | 4d 65 64 69 75 6d 00 4d 65 6d 62 65 72 20 49 6e 74 65 72 66 61 63 65 73 00 4d 65 6d 62 65 72 20 | Medium.Member.Interfaces.Member. |
53a40 | 69 6e 74 65 72 66 61 63 65 73 20 60 65 74 68 31 60 20 61 6e 64 20 56 4c 41 4e 20 31 30 20 6f 6e | interfaces.`eth1`.and.VLAN.10.on |
53a60 | 20 69 6e 74 65 72 66 61 63 65 20 60 65 74 68 32 60 00 4d 65 73 73 61 67 65 73 20 67 65 6e 65 72 | .interface.`eth2`.Messages.gener |
53a80 | 61 74 65 64 20 69 6e 74 65 72 6e 61 6c 6c 79 20 62 79 20 73 79 73 6c 6f 67 64 00 4d 65 74 72 69 | ated.internally.by.syslogd.Metri |
53aa0 | 73 20 76 65 72 73 69 6f 6e 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 60 60 32 60 60 00 | s.version,.the.default.is.``2``. |
53ac0 | 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 65 78 70 65 63 74 73 20 74 68 65 20 73 65 | Microsoft.Windows.expects.the.se |
53ae0 | 72 76 65 72 20 6e 61 6d 65 20 74 6f 20 62 65 20 61 6c 73 6f 20 75 73 65 64 20 69 6e 20 74 68 65 | rver.name.to.be.also.used.in.the |
53b00 | 20 73 65 72 76 65 72 27 73 20 63 65 72 74 69 66 69 63 61 74 65 20 63 6f 6d 6d 6f 6e 20 6e 61 6d | .server's.certificate.common.nam |
53b20 | 65 2c 20 73 6f 20 69 74 27 73 20 62 65 73 74 20 74 6f 20 75 73 65 20 74 68 69 73 20 44 4e 53 20 | e,.so.it's.best.to.use.this.DNS. |
53b40 | 6e 61 6d 65 20 66 6f 72 20 79 6f 75 72 20 56 50 4e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 4d 69 | name.for.your.VPN.connection..Mi |
53b60 | 6e 20 61 6e 64 20 6d 61 78 20 69 6e 74 65 72 76 61 6c 73 20 62 65 74 77 65 65 6e 20 75 6e 73 6f | n.and.max.intervals.between.unso |
53b80 | 6c 69 63 69 74 65 64 20 6d 75 6c 74 69 63 61 73 74 20 52 41 73 00 4d 69 6e 75 6d 75 6d 20 66 69 | licited.multicast.RAs.Minumum.fi |
53ba0 | 72 65 77 61 6c 6c 20 72 75 6c 65 73 65 74 20 69 73 20 70 72 6f 76 69 64 65 64 2c 20 77 68 69 63 | rewall.ruleset.is.provided,.whic |
53bc0 | 68 20 69 6e 63 6c 75 64 65 73 20 73 6f 6d 65 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c | h.includes.some.filtering.rules, |
53be0 | 20 61 6e 64 20 61 70 70 72 6f 70 69 61 74 65 20 72 75 6c 65 73 20 66 6f 72 20 75 73 69 6e 67 20 | .and.appropiate.rules.for.using. |
53c00 | 66 6c 6f 77 74 61 62 6c 65 20 6f 66 66 6c 6f 61 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 00 | flowtable.offload.capabilities.. |
53c20 | 4d 6f 64 69 66 79 20 74 68 65 20 6a 6f 69 6e 2f 70 72 75 6e 65 20 69 6e 74 65 72 76 61 6c 20 74 | Modify.the.join/prune.interval.t |
53c40 | 68 61 74 20 50 49 4d 20 75 73 65 73 20 74 6f 20 74 68 65 20 6e 65 77 20 76 61 6c 75 65 2e 20 54 | hat.PIM.uses.to.the.new.value..T |
53c60 | 69 6d 65 20 69 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 73 65 63 6f 6e 64 73 2e 00 4d 6f 64 | ime.is.specified.in.seconds..Mod |
53c80 | 69 66 79 20 74 68 65 20 74 69 6d 65 20 6f 75 74 20 76 61 6c 75 65 20 66 6f 72 20 61 20 53 2c 47 | ify.the.time.out.value.for.a.S,G |
53ca0 | 20 66 6c 6f 77 20 66 72 6f 6d 20 31 2d 36 35 35 33 35 20 73 65 63 6f 6e 64 73 20 61 74 20 3a 61 | .flow.from.1-65535.seconds.at.:a |
53cc0 | 62 62 72 3a 60 52 50 20 28 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 29 60 2e 20 54 68 65 | bbr:`RP.(Rendezvous.Point)`..The |
53ce0 | 20 6e 6f 72 6d 61 6c 20 6b 65 65 70 61 6c 69 76 65 20 70 65 72 69 6f 64 20 66 6f 72 20 74 68 65 | .normal.keepalive.period.for.the |
53d00 | 20 4b 41 54 28 53 2c 47 29 20 64 65 66 61 75 6c 74 73 20 74 6f 20 32 31 30 20 73 65 63 6f 6e 64 | .KAT(S,G).defaults.to.210.second |
53d20 | 73 2e 20 48 6f 77 65 76 65 72 2c 20 61 74 20 74 68 65 20 3a 61 62 62 72 3a 60 52 50 20 28 52 65 | s..However,.at.the.:abbr:`RP.(Re |
53d40 | 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 29 60 2c 20 74 68 65 20 6b 65 65 70 61 6c 69 76 65 20 | ndezvous.Point)`,.the.keepalive. |
53d60 | 70 65 72 69 6f 64 20 6d 75 73 74 20 62 65 20 61 74 20 6c 65 61 73 74 20 74 68 65 20 52 65 67 69 | period.must.be.at.least.the.Regi |
53d80 | 73 74 65 72 5f 53 75 70 70 72 65 73 73 69 6f 6e 5f 54 69 6d 65 2c 20 6f 72 20 74 68 65 20 52 50 | ster_Suppression_Time,.or.the.RP |
53da0 | 20 6d 61 79 20 74 69 6d 65 20 6f 75 74 20 74 68 65 20 28 53 2c 47 29 20 73 74 61 74 65 20 62 65 | .may.time.out.the.(S,G).state.be |
53dc0 | 66 6f 72 65 20 74 68 65 20 6e 65 78 74 20 4e 75 6c 6c 2d 52 65 67 69 73 74 65 72 20 61 72 72 69 | fore.the.next.Null-Register.arri |
53de0 | 76 65 73 2e 20 54 68 75 73 2c 20 74 68 65 20 4b 41 54 28 53 2c 47 29 20 69 73 20 73 65 74 20 74 | ves..Thus,.the.KAT(S,G).is.set.t |
53e00 | 6f 20 6d 61 78 28 4b 65 65 70 61 6c 69 76 65 5f 50 65 72 69 6f 64 2c 20 52 50 5f 4b 65 65 70 61 | o.max(Keepalive_Period,.RP_Keepa |
53e20 | 6c 69 76 65 5f 50 65 72 69 6f 64 29 20 77 68 65 6e 20 61 20 52 65 67 69 73 74 65 72 2d 53 74 6f | live_Period).when.a.Register-Sto |
53e40 | 70 20 69 73 20 73 65 6e 74 2e 00 4d 6f 64 69 66 79 20 74 68 65 20 74 69 6d 65 20 6f 75 74 20 76 | p.is.sent..Modify.the.time.out.v |
53e60 | 61 6c 75 65 20 66 6f 72 20 61 20 53 2c 47 20 66 6c 6f 77 20 66 72 6f 6d 20 31 2d 36 35 35 33 35 | alue.for.a.S,G.flow.from.1-65535 |
53e80 | 20 73 65 63 6f 6e 64 73 2e 20 49 66 20 63 68 6f 6f 73 69 6e 67 20 61 20 76 61 6c 75 65 20 62 65 | .seconds..If.choosing.a.value.be |
53ea0 | 6c 6f 77 20 33 31 20 73 65 63 6f 6e 64 73 20 62 65 20 61 77 61 72 65 20 74 68 61 74 20 73 6f 6d | low.31.seconds.be.aware.that.som |
53ec0 | 65 20 68 61 72 64 77 61 72 65 20 70 6c 61 74 66 6f 72 6d 73 20 63 61 6e 6e 6f 74 20 73 65 65 20 | e.hardware.platforms.cannot.see. |
53ee0 | 64 61 74 61 20 66 6c 6f 77 69 6e 67 20 69 6e 20 62 65 74 74 65 72 20 74 68 61 6e 20 33 30 20 73 | data.flowing.in.better.than.30.s |
53f00 | 65 63 6f 6e 64 20 63 68 75 6e 6b 73 2e 00 4d 6f 64 69 66 79 20 74 68 65 20 74 69 6d 65 20 74 68 | econd.chunks..Modify.the.time.th |
53f20 | 61 74 20 70 69 6d 20 77 69 6c 6c 20 72 65 67 69 73 74 65 72 20 73 75 70 70 72 65 73 73 20 61 20 | at.pim.will.register.suppress.a. |
53f40 | 46 48 52 20 77 69 6c 6c 20 73 65 6e 64 20 72 65 67 69 73 74 65 72 20 6e 6f 74 69 66 69 63 61 74 | FHR.will.send.register.notificat |
53f60 | 69 6f 6e 73 20 74 6f 20 74 68 65 20 6b 65 72 6e 65 6c 2e 00 4d 6f 6e 69 74 6f 72 2c 20 74 68 65 | ions.to.the.kernel..Monitor,.the |
53f80 | 20 73 79 73 74 65 6d 20 70 61 73 73 69 76 65 6c 79 20 6d 6f 6e 69 74 6f 72 73 20 61 6e 79 20 6b | .system.passively.monitors.any.k |
53fa0 | 69 6e 64 20 6f 66 20 77 69 72 65 6c 65 73 73 20 74 72 61 66 66 69 63 00 4d 6f 6e 69 74 6f 72 69 | ind.of.wireless.traffic.Monitori |
53fc0 | 6e 67 00 4d 6f 6e 69 74 6f 72 69 6e 67 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 77 69 74 68 | ng.Monitoring.functionality.with |
53fe0 | 20 60 60 74 65 6c 65 67 72 61 66 60 60 20 61 6e 64 20 60 60 49 6e 66 6c 75 78 44 42 20 32 60 60 | .``telegraf``.and.``InfluxDB.2`` |
54000 | 20 69 73 20 70 72 6f 76 69 64 65 64 2e 20 54 65 6c 65 67 72 61 66 20 69 73 20 74 68 65 20 6f 70 | .is.provided..Telegraf.is.the.op |
54020 | 65 6e 20 73 6f 75 72 63 65 20 73 65 72 76 65 72 20 61 67 65 6e 74 20 74 6f 20 68 65 6c 70 20 79 | en.source.server.agent.to.help.y |
54040 | 6f 75 20 63 6f 6c 6c 65 63 74 20 6d 65 74 72 69 63 73 2c 20 65 76 65 6e 74 73 20 61 6e 64 20 6c | ou.collect.metrics,.events.and.l |
54060 | 6f 67 73 20 66 72 6f 6d 20 79 6f 75 72 20 72 6f 75 74 65 72 73 2e 00 4d 6f 72 65 20 64 65 74 61 | ogs.from.your.routers..More.deta |
54080 | 69 6c 73 20 61 62 6f 75 74 20 74 68 65 20 49 50 73 65 63 20 61 6e 64 20 56 54 49 20 69 73 73 75 | ils.about.the.IPsec.and.VTI.issu |
540a0 | 65 20 61 6e 64 20 6f 70 74 69 6f 6e 20 64 69 73 61 62 6c 65 2d 72 6f 75 74 65 2d 61 75 74 6f 69 | e.and.option.disable-route-autoi |
540c0 | 6e 73 74 61 6c 6c 20 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 2e 76 79 6f 73 2e 69 6f 2f 76 79 6f 73 | nstall.https://blog.vyos.io/vyos |
540e0 | 2d 31 2d 64 6f 74 2d 32 2d 30 2d 64 65 76 65 6c 6f 70 6d 65 6e 74 2d 6e 65 77 73 2d 69 6e 2d 6a | -1-dot-2-0-development-news-in-j |
54100 | 75 6c 79 00 4d 6f 73 74 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d 73 20 69 6e 63 6c 75 | uly.Most.operating.systems.inclu |
54120 | 64 65 20 6e 61 74 69 76 65 20 63 6c 69 65 6e 74 20 73 75 70 70 6f 72 74 20 66 6f 72 20 49 50 73 | de.native.client.support.for.IPs |
54140 | 65 63 20 49 4b 45 76 32 20 56 50 4e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 61 6e 64 20 6f 74 | ec.IKEv2.VPN.connections,.and.ot |
54160 | 68 65 72 73 20 74 79 70 69 63 61 6c 6c 79 20 68 61 76 65 20 61 6e 20 61 70 70 20 6f 72 20 61 64 | hers.typically.have.an.app.or.ad |
54180 | 64 2d 6f 6e 20 70 61 63 6b 61 67 65 20 77 68 69 63 68 20 61 64 64 73 20 74 68 65 20 63 61 70 61 | d-on.package.which.adds.the.capa |
541a0 | 62 69 6c 69 74 79 2e 20 54 68 69 73 20 73 65 63 74 69 6f 6e 20 63 6f 76 65 72 73 20 49 50 73 65 | bility..This.section.covers.IPse |
541c0 | 63 20 49 4b 45 76 32 20 63 6c 69 65 6e 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 | c.IKEv2.client.configuration.for |
541e0 | 20 57 69 6e 64 6f 77 73 20 31 30 2e 00 4d 6f 75 6e 74 20 61 20 76 6f 6c 75 6d 65 20 69 6e 74 6f | .Windows.10..Mount.a.volume.into |
54200 | 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 00 4d 75 6c 74 69 00 4d 75 6c 74 69 2d 63 6c 69 65 6e | .the.container.Multi.Multi-clien |
54220 | 74 20 73 65 72 76 65 72 20 69 73 20 74 68 65 20 6d 6f 73 74 20 70 6f 70 75 6c 61 72 20 4f 70 65 | t.server.is.the.most.popular.Ope |
54240 | 6e 56 50 4e 20 6d 6f 64 65 20 6f 6e 20 72 6f 75 74 65 72 73 2e 20 49 74 20 61 6c 77 61 79 73 20 | nVPN.mode.on.routers..It.always. |
54260 | 75 73 65 73 20 78 2e 35 30 39 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 6e 64 20 74 68 | uses.x.509.authentication.and.th |
54280 | 65 72 65 66 6f 72 65 20 72 65 71 75 69 72 65 73 20 61 20 50 4b 49 20 73 65 74 75 70 2e 20 52 65 | erefore.requires.a.PKI.setup..Re |
542a0 | 66 65 72 20 74 68 69 73 20 74 6f 70 69 63 20 3a 72 65 66 3a 60 63 6f 6e 66 69 67 75 72 61 74 69 | fer.this.topic.:ref:`configurati |
542c0 | 6f 6e 2f 70 6b 69 2f 69 6e 64 65 78 3a 70 6b 69 60 20 74 6f 20 67 65 6e 65 72 61 74 65 20 61 20 | on/pki/index:pki`.to.generate.a. |
542e0 | 43 41 20 63 65 72 74 69 66 69 63 61 74 65 2c 20 61 20 73 65 72 76 65 72 20 63 65 72 74 69 66 69 | CA.certificate,.a.server.certifi |
54300 | 63 61 74 65 20 61 6e 64 20 6b 65 79 2c 20 61 20 63 65 72 74 69 66 69 63 61 74 65 20 72 65 76 6f | cate.and.key,.a.certificate.revo |
54320 | 63 61 74 69 6f 6e 20 6c 69 73 74 2c 20 61 20 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 6b 65 | cation.list,.a.Diffie-Hellman.ke |
54340 | 79 20 65 78 63 68 61 6e 67 65 20 70 61 72 61 6d 65 74 65 72 73 20 66 69 6c 65 2e 20 59 6f 75 20 | y.exchange.parameters.file..You. |
54360 | 64 6f 20 6e 6f 74 20 6e 65 65 64 20 63 6c 69 65 6e 74 20 63 65 72 74 69 66 69 63 61 74 65 73 20 | do.not.need.client.certificates. |
54380 | 61 6e 64 20 6b 65 79 73 20 66 6f 72 20 74 68 65 20 73 65 72 76 65 72 20 73 65 74 75 70 2e 00 4d | and.keys.for.the.server.setup..M |
543a0 | 75 6c 74 69 2d 68 6f 6d 65 64 2e 20 49 6e 20 61 20 6d 75 6c 74 69 2d 68 6f 6d 65 64 20 6e 65 74 | ulti-homed..In.a.multi-homed.net |
543c0 | 77 6f 72 6b 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 2c 20 74 68 65 20 4e 41 54 36 36 20 64 65 76 69 | work.environment,.the.NAT66.devi |
543e0 | 63 65 20 63 6f 6e 6e 65 63 74 73 20 74 6f 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f | ce.connects.to.an.internal.netwo |
54400 | 72 6b 20 61 6e 64 20 73 69 6d 75 6c 74 61 6e 65 6f 75 73 6c 79 20 63 6f 6e 6e 65 63 74 73 20 74 | rk.and.simultaneously.connects.t |
54420 | 6f 20 64 69 66 66 65 72 65 6e 74 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 73 2e 20 41 | o.different.external.networks..A |
54440 | 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 | ddress.translation.can.be.config |
54460 | 75 72 65 64 20 6f 6e 20 65 61 63 68 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 73 69 | ured.on.each.external.network.si |
54480 | 64 65 20 69 6e 74 65 72 66 61 63 65 20 6f 66 20 74 68 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 | de.interface.of.the.NAT66.device |
544a0 | 20 74 6f 20 63 6f 6e 76 65 72 74 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 | .to.convert.the.same.internal.ne |
544c0 | 74 77 6f 72 6b 20 61 64 64 72 65 73 73 20 69 6e 74 6f 20 64 69 66 66 65 72 65 6e 74 20 65 78 74 | twork.address.into.different.ext |
544e0 | 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 65 73 2c 20 61 6e 64 20 72 65 61 | ernal.network.addresses,.and.rea |
54500 | 6c 69 7a 65 20 74 68 65 20 6d 61 70 70 69 6e 67 20 6f 66 20 74 68 65 20 73 61 6d 65 20 69 6e 74 | lize.the.mapping.of.the.same.int |
54520 | 65 72 6e 61 6c 20 61 64 64 72 65 73 73 20 74 6f 20 6d 75 6c 74 69 70 6c 65 20 65 78 74 65 72 6e | ernal.address.to.multiple.extern |
54540 | 61 6c 20 61 64 64 72 65 73 73 65 73 2e 00 4d 75 6c 74 69 3a 20 63 61 6e 20 62 65 20 73 70 65 63 | al.addresses..Multi:.can.be.spec |
54560 | 69 66 69 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e 00 4d 75 6c 74 69 63 61 73 74 00 | ified.multiple.times..Multicast. |
54580 | 4d 75 6c 74 69 63 61 73 74 20 44 4e 53 20 75 73 65 73 20 74 68 65 20 32 32 34 2e 30 2e 30 2e 32 | Multicast.DNS.uses.the.224.0.0.2 |
545a0 | 35 31 20 61 64 64 72 65 73 73 2c 20 77 68 69 63 68 20 69 73 20 22 61 64 6d 69 6e 69 73 74 72 61 | 51.address,.which.is."administra |
545c0 | 74 69 76 65 6c 79 20 73 63 6f 70 65 64 22 20 61 6e 64 20 64 6f 65 73 20 6e 6f 74 20 6c 65 61 76 | tively.scoped".and.does.not.leav |
545e0 | 65 20 74 68 65 20 73 75 62 6e 65 74 2e 20 49 74 20 72 65 74 72 61 6e 73 6d 69 74 73 20 6d 44 4e | e.the.subnet..It.retransmits.mDN |
54600 | 53 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 6f 6e 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 | S.packets.from.one.interface.to. |
54620 | 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 68 69 73 20 65 6e 61 62 6c 65 73 20 73 | other.interfaces..This.enables.s |
54640 | 75 70 70 6f 72 74 20 66 6f 72 20 65 2e 67 2e 20 41 70 70 6c 65 20 41 69 72 70 6c 61 79 20 64 65 | upport.for.e.g..Apple.Airplay.de |
54660 | 76 69 63 65 73 20 61 63 72 6f 73 73 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 73 2e 00 4d 75 6c | vices.across.multiple.VLANs..Mul |
54680 | 74 69 63 61 73 74 20 44 4e 53 20 75 73 65 73 20 74 68 65 20 72 65 73 65 72 76 65 64 20 61 64 64 | ticast.DNS.uses.the.reserved.add |
546a0 | 72 65 73 73 20 60 60 32 32 34 2e 30 2e 30 2e 32 35 31 60 60 2c 20 77 68 69 63 68 20 69 73 20 60 | ress.``224.0.0.251``,.which.is.` |
546c0 | 22 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 6c 79 20 73 63 6f 70 65 64 22 60 20 61 6e 64 20 64 | "administratively.scoped"`.and.d |
546e0 | 6f 65 73 20 6e 6f 74 20 6c 65 61 76 65 20 74 68 65 20 73 75 62 6e 65 74 2e 20 6d 44 4e 53 20 72 | oes.not.leave.the.subnet..mDNS.r |
54700 | 65 70 65 61 74 65 72 20 72 65 74 72 61 6e 73 6d 69 74 73 20 6d 44 4e 53 20 70 61 63 6b 65 74 73 | epeater.retransmits.mDNS.packets |
54720 | 20 66 72 6f 6d 20 6f 6e 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6f 74 68 65 72 20 69 6e 74 | .from.one.interface.to.other.int |
54740 | 65 72 66 61 63 65 73 2e 20 54 68 69 73 20 65 6e 61 62 6c 65 73 20 73 75 70 70 6f 72 74 20 66 6f | erfaces..This.enables.support.fo |
54760 | 72 20 64 65 76 69 63 65 73 20 75 73 69 6e 67 20 6d 44 4e 53 20 64 69 73 63 6f 76 65 72 79 20 28 | r.devices.using.mDNS.discovery.( |
54780 | 6c 69 6b 65 20 6e 65 74 77 6f 72 6b 20 70 72 69 6e 74 65 72 73 2c 20 41 70 70 6c 65 20 41 69 72 | like.network.printers,.Apple.Air |
547a0 | 70 6c 61 79 2c 20 43 68 72 6f 6d 65 63 61 73 74 2c 20 76 61 72 69 6f 75 73 20 49 50 20 62 61 73 | play,.Chromecast,.various.IP.bas |
547c0 | 65 64 20 68 6f 6d 65 2d 61 75 74 6f 6d 61 74 69 6f 6e 20 64 65 76 69 63 65 73 20 65 74 63 29 20 | ed.home-automation.devices.etc). |
547e0 | 61 63 72 6f 73 73 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 73 2e 00 4d 75 6c 74 69 63 61 73 74 | across.multiple.VLANs..Multicast |
54800 | 20 56 58 4c 41 4e 00 4d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 61 64 64 72 65 73 73 20 66 | .VXLAN.Multicast.group.address.f |
54820 | 6f 72 20 56 58 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 2e 20 56 58 4c 41 4e 20 74 75 6e 6e 65 6c | or.VXLAN.interface..VXLAN.tunnel |
54840 | 73 20 63 61 6e 20 62 65 20 62 75 69 6c 74 20 65 69 74 68 65 72 20 76 69 61 20 4d 75 6c 74 69 63 | s.can.be.built.either.via.Multic |
54860 | 61 73 74 20 6f 72 20 76 69 61 20 55 6e 69 63 61 73 74 2e 00 4d 75 6c 74 69 63 61 73 74 20 67 72 | ast.or.via.Unicast..Multicast.gr |
54880 | 6f 75 70 20 74 6f 20 75 73 65 20 66 6f 72 20 73 79 6e 63 69 6e 67 20 63 6f 6e 6e 74 72 61 63 6b | oup.to.use.for.syncing.conntrack |
548a0 | 20 65 6e 74 72 69 65 73 2e 00 4d 75 6c 74 69 63 61 73 74 20 72 65 63 65 69 76 65 72 73 20 77 69 | .entries..Multicast.receivers.wi |
548c0 | 6c 6c 20 74 61 6c 6b 20 49 47 4d 50 20 74 6f 20 74 68 65 69 72 20 6c 6f 63 61 6c 20 72 6f 75 74 | ll.talk.IGMP.to.their.local.rout |
548e0 | 65 72 2c 20 73 6f 2c 20 62 65 73 69 64 65 73 20 68 61 76 69 6e 67 20 50 49 4d 20 63 6f 6e 66 69 | er,.so,.besides.having.PIM.confi |
54900 | 67 75 72 65 64 20 69 6e 20 65 76 65 72 79 20 72 6f 75 74 65 72 2c 20 49 47 4d 50 20 6d 75 73 74 | gured.in.every.router,.IGMP.must |
54920 | 20 61 6c 73 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 61 6e 79 20 72 6f 75 74 65 | .also.be.configured.in.any.route |
54940 | 72 20 77 68 65 72 65 20 74 68 65 72 65 20 63 6f 75 6c 64 20 62 65 20 61 20 6d 75 6c 74 69 63 61 | r.where.there.could.be.a.multica |
54960 | 73 74 20 72 65 63 65 69 76 65 72 20 6c 6f 63 61 6c 6c 79 20 63 6f 6e 6e 65 63 74 65 64 2e 00 4d | st.receiver.locally.connected..M |
54980 | 75 6c 74 69 63 61 73 74 20 72 65 63 65 69 76 65 72 73 20 77 69 6c 6c 20 74 61 6c 6b 20 4d 4c 44 | ulticast.receivers.will.talk.MLD |
549a0 | 20 74 6f 20 74 68 65 69 72 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2c 20 73 6f 2c 20 62 65 73 69 | .to.their.local.router,.so,.besi |
549c0 | 64 65 73 20 68 61 76 69 6e 67 20 50 49 4d 76 36 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 65 | des.having.PIMv6.configured.in.e |
549e0 | 76 65 72 79 20 72 6f 75 74 65 72 2c 20 4d 4c 44 20 6d 75 73 74 20 61 6c 73 6f 20 62 65 20 63 6f | very.router,.MLD.must.also.be.co |
54a00 | 6e 66 69 67 75 72 65 64 20 69 6e 20 61 6e 79 20 72 6f 75 74 65 72 20 77 68 65 72 65 20 74 68 65 | nfigured.in.any.router.where.the |
54a20 | 72 65 20 63 6f 75 6c 64 20 62 65 20 61 20 6d 75 6c 74 69 63 61 73 74 20 72 65 63 65 69 76 65 72 | re.could.be.a.multicast.receiver |
54a40 | 20 6c 6f 63 61 6c 6c 79 20 63 6f 6e 6e 65 63 74 65 64 2e 00 4d 75 6c 74 69 63 61 73 74 2d 72 6f | .locally.connected..Multicast-ro |
54a60 | 75 74 69 6e 67 20 69 73 20 72 65 71 75 69 72 65 64 20 66 6f 72 20 74 68 65 20 6c 65 61 76 65 73 | uting.is.required.for.the.leaves |
54a80 | 20 74 6f 20 66 6f 72 77 61 72 64 20 74 72 61 66 66 69 63 20 62 65 74 77 65 65 6e 20 65 61 63 68 | .to.forward.traffic.between.each |
54aa0 | 20 6f 74 68 65 72 20 69 6e 20 61 20 6d 6f 72 65 20 73 63 61 6c 61 62 6c 65 20 77 61 79 2e 20 54 | .other.in.a.more.scalable.way..T |
54ac0 | 68 69 73 20 61 6c 73 6f 20 72 65 71 75 69 72 65 73 20 50 49 4d 20 74 6f 20 62 65 20 65 6e 61 62 | his.also.requires.PIM.to.be.enab |
54ae0 | 6c 65 64 20 74 6f 77 61 72 64 73 20 74 68 65 20 6c 65 61 76 65 73 20 73 6f 20 74 68 61 74 20 74 | led.towards.the.leaves.so.that.t |
54b00 | 68 65 20 53 70 69 6e 65 20 63 61 6e 20 6c 65 61 72 6e 20 77 68 61 74 20 6d 75 6c 74 69 63 61 73 | he.Spine.can.learn.what.multicas |
54b20 | 74 20 67 72 6f 75 70 73 20 65 61 63 68 20 4c 65 61 66 20 65 78 70 65 63 74 73 20 74 72 61 66 66 | t.groups.each.Leaf.expects.traff |
54b40 | 69 63 20 66 72 6f 6d 2e 00 4d 75 6c 74 69 70 6c 65 20 44 4e 53 20 73 65 72 76 65 72 73 20 63 61 | ic.from..Multiple.DNS.servers.ca |
54b60 | 6e 20 62 65 20 64 65 66 69 6e 65 64 2e 00 4d 75 6c 74 69 70 6c 65 20 52 50 4b 49 20 63 61 63 68 | n.be.defined..Multiple.RPKI.cach |
54b80 | 69 6e 67 20 69 6e 73 74 61 6e 63 65 73 20 63 61 6e 20 62 65 20 73 75 70 70 6c 69 65 64 20 61 6e | ing.instances.can.be.supplied.an |
54ba0 | 64 20 74 68 65 79 20 6e 65 65 64 20 61 20 70 72 65 66 65 72 65 6e 63 65 20 69 6e 20 77 68 69 63 | d.they.need.a.preference.in.whic |
54bc0 | 68 20 74 68 65 69 72 20 72 65 73 75 6c 74 20 73 65 74 73 20 61 72 65 20 75 73 65 64 2e 00 4d 75 | h.their.result.sets.are.used..Mu |
54be0 | 6c 74 69 70 6c 65 20 55 70 6c 69 6e 6b 73 00 4d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 20 74 6f 20 | ltiple.Uplinks.Multiple.VLAN.to. |
54c00 | 56 4e 49 20 6d 61 70 70 69 6e 67 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 61 | VNI.mappings.can.be.configured.a |
54c20 | 67 61 69 6e 73 74 20 74 68 65 20 73 61 6d 65 20 53 56 44 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 | gainst.the.same.SVD..This.allows |
54c40 | 20 66 6f 72 20 61 20 73 69 67 6e 69 66 69 63 61 6e 74 20 73 63 61 6c 69 6e 67 20 6f 66 20 74 68 | .for.a.significant.scaling.of.th |
54c60 | 65 20 6e 75 6d 62 65 72 20 6f 66 20 56 4e 49 73 20 73 69 6e 63 65 20 61 20 73 65 70 61 72 61 74 | e.number.of.VNIs.since.a.separat |
54c80 | 65 20 56 58 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 6e 6f 20 6c 6f 6e 67 65 72 20 72 | e.VXLAN.interface.is.no.longer.r |
54ca0 | 65 71 75 69 72 65 64 20 66 6f 72 20 65 61 63 68 20 56 4e 49 2e 00 4d 75 6c 74 69 70 6c 65 20 61 | equired.for.each.VNI..Multiple.a |
54cc0 | 6c 69 61 73 65 73 20 63 61 6e 20 70 65 20 73 70 65 63 69 66 69 65 64 20 70 65 72 20 68 6f 73 74 | liases.can.pe.specified.per.host |
54ce0 | 2d 6e 61 6d 65 2e 00 4d 75 6c 74 69 70 6c 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 | -name..Multiple.destination.port |
54d00 | 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 73 20 61 20 63 6f 6d 6d 61 2d 73 65 | s.can.be.specified.as.a.comma-se |
54d20 | 70 61 72 61 74 65 64 20 6c 69 73 74 2e 20 54 68 65 20 77 68 6f 6c 65 20 6c 69 73 74 20 63 61 6e | parated.list..The.whole.list.can |
54d40 | 20 61 6c 73 6f 20 62 65 20 22 6e 65 67 61 74 65 64 22 20 75 73 69 6e 67 20 27 21 27 2e 20 46 6f | .also.be."negated".using.'!'..Fo |
54d60 | 72 20 65 78 61 6d 70 6c 65 3a 20 27 21 32 32 2c 74 65 6c 6e 65 74 2c 68 74 74 70 2c 31 32 33 2c | r.example:.'!22,telnet,http,123, |
54d80 | 31 30 30 31 2d 31 30 30 35 27 00 4d 75 6c 74 69 70 6c 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 | 1001-1005'.Multiple.destination. |
54da0 | 70 6f 72 74 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 73 20 61 20 63 6f 6d 6d | ports.can.be.specified.as.a.comm |
54dc0 | 61 2d 73 65 70 61 72 61 74 65 64 20 6c 69 73 74 2e 20 54 68 65 20 77 68 6f 6c 65 20 6c 69 73 74 | a-separated.list..The.whole.list |
54de0 | 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 22 6e 65 67 61 74 65 64 22 20 75 73 69 6e 67 20 27 21 27 | .can.also.be."negated".using.'!' |
54e00 | 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 21 32 32 2c 74 65 6c 6e 65 74 2c 68 74 74 70 2c | ..For.example:.`!22,telnet,http, |
54e20 | 31 32 33 2c 31 30 30 31 2d 31 30 30 35 60 60 00 4d 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 66 61 | 123,1001-1005``.Multiple.interfa |
54e40 | 63 65 73 20 6d 61 79 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 00 4d 75 6c 74 69 70 6c 65 20 6e | ces.may.be.specified..Multiple.n |
54e60 | 65 74 77 6f 72 6b 73 2f 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 | etworks/client.IP.addresses.can. |
54e80 | 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 4d 75 6c 74 69 70 6c 65 20 73 65 72 76 65 72 73 20 | be.configured..Multiple.servers. |
54ea0 | 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 00 4d 75 6c 74 69 70 6c 65 20 73 65 72 76 69 | can.be.specified..Multiple.servi |
54ec0 | 63 65 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 70 65 72 20 69 6e 74 65 72 66 61 63 65 2e 20 4a | ces.can.be.used.per.interface..J |
54ee0 | 75 73 74 20 73 70 65 63 69 66 79 20 61 73 20 6d 61 6e 79 20 73 65 72 76 69 63 65 73 20 70 65 72 | ust.specify.as.many.services.per |
54f00 | 20 69 6e 74 65 72 66 61 63 65 20 61 73 20 79 6f 75 20 6c 69 6b 65 21 00 4d 75 6c 74 69 70 6c 65 | .interface.as.you.like!.Multiple |
54f20 | 20 73 6f 75 72 63 65 20 70 6f 72 74 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 | .source.ports.can.be.specified.a |
54f40 | 73 20 61 20 63 6f 6d 6d 61 2d 73 65 70 61 72 61 74 65 64 20 6c 69 73 74 2e 20 54 68 65 20 77 68 | s.a.comma-separated.list..The.wh |
54f60 | 6f 6c 65 20 6c 69 73 74 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 22 6e 65 67 61 74 65 64 22 20 75 | ole.list.can.also.be."negated".u |
54f80 | 73 69 6e 67 20 60 60 21 60 60 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 00 4d 75 6c 74 69 70 6c | sing.``!``..For.example:.Multipl |
54fa0 | 65 20 74 61 72 67 65 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 73 70 65 | e.target.IP.addresses.can.be.spe |
54fc0 | 63 69 66 69 65 64 2e 20 41 74 20 6c 65 61 73 74 20 6f 6e 65 20 49 50 20 61 64 64 72 65 73 73 20 | cified..At.least.one.IP.address. |
54fe0 | 6d 75 73 74 20 62 65 20 67 69 76 65 6e 20 66 6f 72 20 41 52 50 20 6d 6f 6e 69 74 6f 72 69 6e 67 | must.be.given.for.ARP.monitoring |
55000 | 20 74 6f 20 66 75 6e 63 74 69 6f 6e 2e 00 4d 75 6c 74 69 70 6c 65 20 75 73 65 72 73 20 63 61 6e | .to.function..Multiple.users.can |
55020 | 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 73 61 6d 65 20 73 65 72 69 61 6c 20 64 65 76 69 | .connect.to.the.same.serial.devi |
55040 | 63 65 20 62 75 74 20 6f 6e 6c 79 20 6f 6e 65 20 69 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 77 72 | ce.but.only.one.is.allowed.to.wr |
55060 | 69 74 65 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 20 70 6f 72 74 2e 00 4d 75 6c 74 69 70 72 | ite.to.the.console.port..Multipr |
55080 | 6f 74 6f 63 6f 6c 20 65 78 74 65 6e 73 69 6f 6e 73 20 65 6e 61 62 6c 65 20 42 47 50 20 74 6f 20 | otocol.extensions.enable.BGP.to. |
550a0 | 63 61 72 72 79 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 6d 75 | carry.routing.information.for.mu |
550c0 | 6c 74 69 70 6c 65 20 6e 65 74 77 6f 72 6b 20 6c 61 79 65 72 20 70 72 6f 74 6f 63 6f 6c 73 2e 20 | ltiple.network.layer.protocols.. |
550e0 | 42 47 50 20 73 75 70 70 6f 72 74 73 20 61 6e 20 41 64 64 72 65 73 73 20 46 61 6d 69 6c 79 20 49 | BGP.supports.an.Address.Family.I |
55100 | 64 65 6e 74 69 66 69 65 72 20 28 41 46 49 29 20 66 6f 72 20 49 50 76 34 20 61 6e 64 20 49 50 76 | dentifier.(AFI).for.IPv4.and.IPv |
55120 | 36 2e 00 4e 00 4e 41 54 00 4e 41 54 20 28 73 70 65 63 69 66 69 63 61 6c 6c 79 2c 20 53 6f 75 72 | 6..N.NAT.NAT.(specifically,.Sour |
55140 | 63 65 20 4e 41 54 29 3b 00 4e 41 54 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 4e 41 54 20 4c | ce.NAT);.NAT.Configuration.NAT.L |
55160 | 6f 61 64 20 42 61 6c 61 6e 63 65 00 4e 41 54 20 4c 6f 61 64 20 42 61 6c 61 6e 63 65 20 75 73 65 | oad.Balance.NAT.Load.Balance.use |
55180 | 73 20 61 6e 20 61 6c 67 6f 72 69 74 68 6d 20 74 68 61 74 20 67 65 6e 65 72 61 74 65 73 20 61 20 | s.an.algorithm.that.generates.a. |
551a0 | 68 61 73 68 20 61 6e 64 20 62 61 73 65 64 20 6f 6e 20 69 74 2c 20 74 68 65 6e 20 69 74 20 61 70 | hash.and.based.on.it,.then.it.ap |
551c0 | 70 6c 69 65 73 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2e | plies.corresponding.translation. |
551e0 | 20 54 68 69 73 20 68 61 73 68 20 63 61 6e 20 62 65 20 67 65 6e 65 72 61 74 65 64 20 72 61 6e 64 | .This.hash.can.be.generated.rand |
55200 | 6f 6d 6c 79 2c 20 6f 72 20 63 61 6e 20 75 73 65 20 64 61 74 61 20 66 72 6f 6d 20 74 68 65 20 69 | omly,.or.can.use.data.from.the.i |
55220 | 70 20 68 65 61 64 65 72 3a 20 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 2c 20 64 65 73 74 69 6e | p.header:.source-address,.destin |
55240 | 61 74 69 6f 6e 2d 61 64 64 72 65 73 73 2c 20 73 6f 75 72 63 65 2d 70 6f 72 74 20 61 6e 64 2f 6f | ation-address,.source-port.and/o |
55260 | 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 2d 70 6f 72 74 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 | r.destination-port..By.default,. |
55280 | 69 74 20 77 69 6c 6c 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 73 68 20 72 61 6e 64 6f 6d | it.will.generate.the.hash.random |
552a0 | 6c 79 2e 00 4e 41 54 20 52 75 6c 65 73 65 74 00 4e 41 54 20 62 65 66 6f 72 65 20 56 50 4e 00 4e | ly..NAT.Ruleset.NAT.before.VPN.N |
552c0 | 41 54 20 62 65 66 6f 72 65 20 56 50 4e 20 54 6f 70 6f 6c 6f 67 79 00 4e 41 54 2c 20 52 6f 75 74 | AT.before.VPN.Topology.NAT,.Rout |
552e0 | 69 6e 67 2c 20 46 69 72 65 77 61 6c 6c 20 49 6e 74 65 72 61 63 74 69 6f 6e 00 4e 41 54 34 34 00 | ing,.Firewall.Interaction.NAT44. |
55300 | 4e 41 54 36 34 00 4e 41 54 36 34 20 63 6c 69 65 6e 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | NAT64.NAT64.client.configuration |
55320 | 3a 00 4e 41 54 36 34 20 70 72 65 66 69 78 20 6d 61 73 6b 20 6d 75 73 74 20 62 65 20 6f 6e 65 20 | :.NAT64.prefix.mask.must.be.one. |
55340 | 6f 66 3a 20 2f 33 32 2c 20 2f 34 30 2c 20 2f 34 38 2c 20 2f 35 36 2c 20 2f 36 34 20 6f 72 20 39 | of:./32,./40,./48,./56,./64.or.9 |
55360 | 36 2e 00 4e 41 54 36 34 20 73 65 72 76 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 4e | 6..NAT64.server.configuration:.N |
55380 | 41 54 36 36 28 4e 50 54 76 36 29 00 4e 48 52 50 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 64 79 | AT66(NPTv6).NHRP.provides.the.dy |
553a0 | 6e 61 6d 69 63 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 20 64 69 73 63 6f 76 65 72 79 20 | namic.tunnel.endpoint.discovery. |
553c0 | 6d 65 63 68 61 6e 69 73 6d 20 28 65 6e 64 70 6f 69 6e 74 20 72 65 67 69 73 74 72 61 74 69 6f 6e | mechanism.(endpoint.registration |
553e0 | 2c 20 61 6e 64 20 65 6e 64 70 6f 69 6e 74 20 64 69 73 63 6f 76 65 72 79 2f 6c 6f 6f 6b 75 70 29 | ,.and.endpoint.discovery/lookup) |
55400 | 2c 20 6d 47 52 45 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 74 75 6e 6e 65 6c 20 65 6e 63 61 70 | ,.mGRE.provides.the.tunnel.encap |
55420 | 73 75 6c 61 74 69 6f 6e 20 69 74 73 65 6c 66 2c 20 61 6e 64 20 74 68 65 20 49 50 53 65 63 20 70 | sulation.itself,.and.the.IPSec.p |
55440 | 72 6f 74 6f 63 6f 6c 73 20 68 61 6e 64 6c 65 20 74 68 65 20 6b 65 79 20 65 78 63 68 61 6e 67 65 | rotocols.handle.the.key.exchange |
55460 | 2c 20 61 6e 64 20 63 72 79 70 74 6f 20 6d 65 63 68 61 6e 69 73 6d 2e 00 4e 54 50 00 4e 54 50 20 | ,.and.crypto.mechanism..NTP.NTP. |
55480 | 69 73 20 69 6e 74 65 6e 64 65 64 20 74 6f 20 73 79 6e 63 68 72 6f 6e 69 7a 65 20 61 6c 6c 20 70 | is.intended.to.synchronize.all.p |
554a0 | 61 72 74 69 63 69 70 61 74 69 6e 67 20 63 6f 6d 70 75 74 65 72 73 20 74 6f 20 77 69 74 68 69 6e | articipating.computers.to.within |
554c0 | 20 61 20 66 65 77 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 6f 66 20 3a 61 62 62 72 3a 60 55 54 | .a.few.milliseconds.of.:abbr:`UT |
554e0 | 43 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 60 2e | C.(Coordinated.Universal.Time)`. |
55500 | 20 49 74 20 75 73 65 73 20 74 68 65 20 69 6e 74 65 72 73 65 63 74 69 6f 6e 20 61 6c 67 6f 72 69 | .It.uses.the.intersection.algori |
55520 | 74 68 6d 2c 20 61 20 6d 6f 64 69 66 69 65 64 20 76 65 72 73 69 6f 6e 20 6f 66 20 4d 61 72 7a 75 | thm,.a.modified.version.of.Marzu |
55540 | 6c 6c 6f 27 73 20 61 6c 67 6f 72 69 74 68 6d 2c 20 74 6f 20 73 65 6c 65 63 74 20 61 63 63 75 72 | llo's.algorithm,.to.select.accur |
55560 | 61 74 65 20 74 69 6d 65 20 73 65 72 76 65 72 73 20 61 6e 64 20 69 73 20 64 65 73 69 67 6e 65 64 | ate.time.servers.and.is.designed |
55580 | 20 74 6f 20 6d 69 74 69 67 61 74 65 20 74 68 65 20 65 66 66 65 63 74 73 20 6f 66 20 76 61 72 69 | .to.mitigate.the.effects.of.vari |
555a0 | 61 62 6c 65 20 6e 65 74 77 6f 72 6b 20 6c 61 74 65 6e 63 79 2e 20 4e 54 50 20 63 61 6e 20 75 73 | able.network.latency..NTP.can.us |
555c0 | 75 61 6c 6c 79 20 6d 61 69 6e 74 61 69 6e 20 74 69 6d 65 20 74 6f 20 77 69 74 68 69 6e 20 74 65 | ually.maintain.time.to.within.te |
555e0 | 6e 73 20 6f 66 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 6f 76 65 72 20 74 68 65 20 70 75 62 6c | ns.of.milliseconds.over.the.publ |
55600 | 69 63 20 49 6e 74 65 72 6e 65 74 2c 20 61 6e 64 20 63 61 6e 20 61 63 68 69 65 76 65 20 62 65 74 | ic.Internet,.and.can.achieve.bet |
55620 | 74 65 72 20 74 68 61 6e 20 6f 6e 65 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 20 61 63 63 75 72 61 63 | ter.than.one.millisecond.accurac |
55640 | 79 20 69 6e 20 6c 6f 63 61 6c 20 61 72 65 61 20 6e 65 74 77 6f 72 6b 73 20 75 6e 64 65 72 20 69 | y.in.local.area.networks.under.i |
55660 | 64 65 61 6c 20 63 6f 6e 64 69 74 69 6f 6e 73 2e 20 41 73 79 6d 6d 65 74 72 69 63 20 72 6f 75 74 | deal.conditions..Asymmetric.rout |
55680 | 65 73 20 61 6e 64 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 67 65 73 74 69 6f 6e 20 63 61 6e 20 63 61 | es.and.network.congestion.can.ca |
556a0 | 75 73 65 20 65 72 72 6f 72 73 20 6f 66 20 31 30 30 20 6d 73 20 6f 72 20 6d 6f 72 65 2e 00 4e 54 | use.errors.of.100.ms.or.more..NT |
556c0 | 50 20 70 72 6f 63 65 73 73 20 77 69 6c 6c 20 6f 6e 6c 79 20 6c 69 73 74 65 6e 20 6f 6e 20 74 68 | P.process.will.only.listen.on.th |
556e0 | 65 20 73 70 65 63 69 66 69 65 64 20 49 50 20 61 64 64 72 65 73 73 2e 20 59 6f 75 20 6d 75 73 74 | e.specified.IP.address..You.must |
55700 | 20 73 70 65 63 69 66 79 20 74 68 65 20 60 3c 61 64 64 72 65 73 73 3e 60 20 61 6e 64 20 6f 70 74 | .specify.the.`<address>`.and.opt |
55720 | 69 6f 6e 61 6c 6c 79 20 74 68 65 20 70 65 72 6d 69 74 74 65 64 20 63 6c 69 65 6e 74 73 2e 20 4d | ionally.the.permitted.clients..M |
55740 | 75 6c 74 69 70 6c 65 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 | ultiple.listen.addresses.can.be. |
55760 | 63 6f 6e 66 69 67 75 72 65 64 2e 00 4e 54 50 20 73 75 62 73 79 73 74 65 6d 00 4e 54 50 20 73 75 | configured..NTP.subsystem.NTP.su |
55780 | 70 70 6c 69 65 73 20 61 20 77 61 72 6e 69 6e 67 20 6f 66 20 61 6e 79 20 69 6d 70 65 6e 64 69 6e | pplies.a.warning.of.any.impendin |
557a0 | 67 20 6c 65 61 70 20 73 65 63 6f 6e 64 20 61 64 6a 75 73 74 6d 65 6e 74 2c 20 62 75 74 20 6e 6f | g.leap.second.adjustment,.but.no |
557c0 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 6c 6f 63 61 6c 20 74 69 6d 65 20 7a 6f | .information.about.local.time.zo |
557e0 | 6e 65 73 20 6f 72 20 64 61 79 6c 69 67 68 74 20 73 61 76 69 6e 67 20 74 69 6d 65 20 69 73 20 74 | nes.or.daylight.saving.time.is.t |
55800 | 72 61 6e 73 6d 69 74 74 65 64 2e 00 4e 61 6d 65 20 53 65 72 76 65 72 00 4e 61 6d 65 20 6f 66 20 | ransmitted..Name.Server.Name.of. |
55820 | 69 6e 73 74 61 6c 6c 65 64 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 20 | installed.certificate.authority. |
55840 | 63 65 72 74 69 66 69 63 61 74 65 2e 00 4e 61 6d 65 20 6f 66 20 69 6e 73 74 61 6c 6c 65 64 20 73 | certificate..Name.of.installed.s |
55860 | 65 72 76 65 72 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 4e 61 6d 65 20 6f 66 20 73 74 61 74 69 | erver.certificate..Name.of.stati |
55880 | 63 20 6d 61 70 70 69 6e 67 00 4e 61 6d 65 20 6f 66 20 74 68 65 20 73 69 6e 67 6c 65 20 74 61 62 | c.mapping.Name.of.the.single.tab |
558a0 | 6c 65 20 4f 6e 6c 79 20 69 66 20 73 65 74 20 67 72 6f 75 70 2d 6d 65 74 72 69 63 73 20 73 69 6e | le.Only.if.set.group-metrics.sin |
558c0 | 67 6c 65 2d 74 61 62 6c 65 2e 00 4e 61 6d 65 20 6f 72 20 49 50 76 34 20 61 64 64 72 65 73 73 20 | gle-table..Name.or.IPv4.address. |
558e0 | 6f 66 20 54 46 54 50 20 73 65 72 76 65 72 00 4e 65 74 42 49 4f 53 20 6f 76 65 72 20 54 43 50 2f | of.TFTP.server.NetBIOS.over.TCP/ |
55900 | 49 50 20 6e 61 6d 65 20 73 65 72 76 65 72 00 4e 65 74 46 6c 6f 77 00 4e 65 74 46 6c 6f 77 20 2f | IP.name.server.NetFlow.NetFlow./ |
55920 | 20 49 50 46 49 58 00 4e 65 74 46 6c 6f 77 20 65 6e 67 69 6e 65 2d 69 64 20 77 68 69 63 68 20 77 | .IPFIX.NetFlow.engine-id.which.w |
55940 | 69 6c 6c 20 61 70 70 65 61 72 20 69 6e 20 4e 65 74 46 6c 6f 77 20 64 61 74 61 2e 20 54 68 65 20 | ill.appear.in.NetFlow.data..The. |
55960 | 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 32 35 35 2e 00 4e 65 74 46 6c 6f 77 20 69 73 20 61 20 | range.is.0.to.255..NetFlow.is.a. |
55980 | 66 65 61 74 75 72 65 20 74 68 61 74 20 77 61 73 20 69 6e 74 72 6f 64 75 63 65 64 20 6f 6e 20 43 | feature.that.was.introduced.on.C |
559a0 | 69 73 63 6f 20 72 6f 75 74 65 72 73 20 61 72 6f 75 6e 64 20 31 39 39 36 20 74 68 61 74 20 70 72 | isco.routers.around.1996.that.pr |
559c0 | 6f 76 69 64 65 73 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 63 6f 6c 6c 65 63 74 20 49 50 | ovides.the.ability.to.collect.IP |
559e0 | 20 6e 65 74 77 6f 72 6b 20 74 72 61 66 66 69 63 20 61 73 20 69 74 20 65 6e 74 65 72 73 20 6f 72 | .network.traffic.as.it.enters.or |
55a00 | 20 65 78 69 74 73 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 42 79 20 61 6e 61 6c 79 7a 69 6e | .exits.an.interface..By.analyzin |
55a20 | 67 20 74 68 65 20 64 61 74 61 20 70 72 6f 76 69 64 65 64 20 62 79 20 4e 65 74 46 6c 6f 77 2c 20 | g.the.data.provided.by.NetFlow,. |
55a40 | 61 20 6e 65 74 77 6f 72 6b 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 63 61 6e 20 64 65 74 65 | a.network.administrator.can.dete |
55a60 | 72 6d 69 6e 65 20 74 68 69 6e 67 73 20 73 75 63 68 20 61 73 20 74 68 65 20 73 6f 75 72 63 65 20 | rmine.things.such.as.the.source. |
55a80 | 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6f 66 20 74 72 61 66 66 69 63 2c 20 63 6c 61 73 | and.destination.of.traffic,.clas |
55aa0 | 73 20 6f 66 20 73 65 72 76 69 63 65 2c 20 61 6e 64 20 74 68 65 20 63 61 75 73 65 73 20 6f 66 20 | s.of.service,.and.the.causes.of. |
55ac0 | 63 6f 6e 67 65 73 74 69 6f 6e 2e 20 41 20 74 79 70 69 63 61 6c 20 66 6c 6f 77 20 6d 6f 6e 69 74 | congestion..A.typical.flow.monit |
55ae0 | 6f 72 69 6e 67 20 73 65 74 75 70 20 28 75 73 69 6e 67 20 4e 65 74 46 6c 6f 77 29 20 63 6f 6e 73 | oring.setup.(using.NetFlow).cons |
55b00 | 69 73 74 73 20 6f 66 20 74 68 72 65 65 20 6d 61 69 6e 20 63 6f 6d 70 6f 6e 65 6e 74 73 3a 00 4e | ists.of.three.main.components:.N |
55b20 | 65 74 46 6c 6f 77 20 69 73 20 75 73 75 61 6c 6c 79 20 65 6e 61 62 6c 65 64 20 6f 6e 20 61 20 70 | etFlow.is.usually.enabled.on.a.p |
55b40 | 65 72 2d 69 6e 74 65 72 66 61 63 65 20 62 61 73 69 73 20 74 6f 20 6c 69 6d 69 74 20 6c 6f 61 64 | er-interface.basis.to.limit.load |
55b60 | 20 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 20 63 6f 6d 70 6f 6e 65 6e 74 73 20 69 6e 76 6f 6c 76 | .on.the.router.components.involv |
55b80 | 65 64 20 69 6e 20 4e 65 74 46 6c 6f 77 2c 20 6f 72 20 74 6f 20 6c 69 6d 69 74 20 74 68 65 20 61 | ed.in.NetFlow,.or.to.limit.the.a |
55ba0 | 6d 6f 75 6e 74 20 6f 66 20 4e 65 74 46 6c 6f 77 20 72 65 63 6f 72 64 73 20 65 78 70 6f 72 74 65 | mount.of.NetFlow.records.exporte |
55bc0 | 64 2e 00 4e 65 74 46 6c 6f 77 20 76 35 20 65 78 61 6d 70 6c 65 3a 00 4e 65 74 66 69 6c 74 65 72 | d..NetFlow.v5.example:.Netfilter |
55be0 | 20 62 61 73 65 64 00 4e 65 74 6d 61 73 6b 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 6c 65 6e 67 | .based.Netmask.greater.than.leng |
55c00 | 74 68 2e 00 4e 65 74 6d 61 73 6b 20 6c 65 73 73 20 74 68 61 6e 20 6c 65 6e 67 74 68 00 4e 65 74 | th..Netmask.less.than.length.Net |
55c20 | 77 6f 72 6b 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e | work.Advertisement.Configuration |
55c40 | 00 4e 65 74 77 6f 72 6b 20 43 6f 6e 74 72 6f 6c 00 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f | .Network.Control.Network.Emulato |
55c60 | 72 00 4e 65 74 77 6f 72 6b 20 47 72 6f 75 70 73 00 4e 65 74 77 6f 72 6b 20 49 44 20 28 53 53 49 | r.Network.Groups.Network.ID.(SSI |
55c80 | 44 29 20 60 60 45 6e 74 65 72 70 72 69 73 65 2d 54 45 53 54 60 60 00 4e 65 74 77 6f 72 6b 20 49 | D).``Enterprise-TEST``.Network.I |
55ca0 | 44 20 28 53 53 49 44 29 20 60 60 54 45 53 54 60 60 00 4e 65 74 77 6f 72 6b 20 54 6f 70 6f 6c 6f | D.(SSID).``TEST``.Network.Topolo |
55cc0 | 67 79 20 44 69 61 67 72 61 6d 00 4e 65 74 77 6f 72 6b 20 6d 61 6e 61 67 65 6d 65 6e 74 20 73 74 | gy.Diagram.Network.management.st |
55ce0 | 61 74 69 6f 6e 20 28 4e 4d 53 29 20 2d 20 73 6f 66 74 77 61 72 65 20 77 68 69 63 68 20 72 75 6e | ation.(NMS).-.software.which.run |
55d00 | 73 20 6f 6e 20 74 68 65 20 6d 61 6e 61 67 65 72 00 4e 65 74 77 6f 72 6b 20 6e 65 77 73 20 73 75 | s.on.the.manager.Network.news.su |
55d20 | 62 73 79 73 74 65 6d 00 4e 65 74 77 6f 72 6b 20 74 6f 20 62 65 20 70 72 6f 74 65 63 74 65 64 3a | bsystem.Network.to.be.protected: |
55d40 | 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 20 28 70 75 62 6c 69 63 20 49 50 73 20 75 73 65 20 62 79 | .192.0.2.0/24.(public.IPs.use.by |
55d60 | 20 63 75 73 74 6f 6d 65 72 73 29 00 4e 65 74 77 6f 72 6b 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 | .customers).Networks.allowed.to. |
55d80 | 71 75 65 72 79 20 74 68 69 73 20 73 65 72 76 65 72 00 4e 65 77 20 75 73 65 72 20 77 69 6c 6c 20 | query.this.server.New.user.will. |
55da0 | 75 73 65 20 53 48 41 2f 41 45 53 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 | use.SHA/AES.for.authentication.a |
55dc0 | 6e 64 20 70 72 69 76 61 63 79 00 4e 65 78 74 20 69 74 20 69 73 20 6e 65 63 65 73 73 61 72 79 20 | nd.privacy.Next.it.is.necessary. |
55de0 | 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 32 46 41 20 66 6f 72 20 4f 70 65 6e 43 6f 6e 6e 65 63 74 | to.configure.2FA.for.OpenConnect |
55e00 | 3a 00 4e 65 78 74 2d 68 6f 70 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 74 68 65 20 72 6f 75 | :.Next-hop.interface.for.the.rou |
55e20 | 74 65 00 4e 65 78 74 68 6f 70 20 49 50 20 61 64 64 72 65 73 73 2e 00 4e 65 78 74 68 6f 70 20 49 | te.Nexthop.IP.address..Nexthop.I |
55e40 | 50 76 36 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 4e 65 78 74 68 6f 70 20 49 50 | Pv6.address.to.match..Nexthop.IP |
55e60 | 76 36 20 61 64 64 72 65 73 73 2e 00 4e 65 78 74 68 6f 70 20 54 72 61 63 6b 69 6e 67 00 4e 65 78 | v6.address..Nexthop.Tracking.Nex |
55e80 | 74 68 6f 70 20 74 72 61 63 6b 69 6e 67 20 72 65 73 6f 6c 76 65 20 6e 65 78 74 68 6f 70 73 20 76 | thop.tracking.resolve.nexthops.v |
55ea0 | 69 61 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 62 79 20 64 65 66 61 75 6c 74 2e | ia.the.default.route.by.default. |
55ec0 | 20 54 68 69 73 20 69 73 20 65 6e 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 66 6f 72 20 | .This.is.enabled.by.default.for. |
55ee0 | 61 20 74 72 61 64 69 74 69 6f 6e 61 6c 20 70 72 6f 66 69 6c 65 20 6f 66 20 46 52 52 20 77 68 69 | a.traditional.profile.of.FRR.whi |
55f00 | 63 68 20 77 65 20 75 73 65 2e 20 49 74 20 61 6e 64 20 63 61 6e 20 62 65 20 64 69 73 61 62 6c 65 | ch.we.use..It.and.can.be.disable |
55f20 | 64 20 69 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 77 61 6e 27 74 20 74 6f 20 65 2e 67 2e 20 61 6c | d.if.you.do.not.wan't.to.e.g..al |
55f40 | 6c 6f 77 20 42 47 50 20 74 6f 20 70 65 65 72 20 61 63 72 6f 73 73 20 74 68 65 20 64 65 66 61 75 | low.BGP.to.peer.across.the.defau |
55f60 | 6c 74 20 72 6f 75 74 65 2e 00 4e 6f 20 52 4f 41 20 65 78 69 73 74 73 20 77 68 69 63 68 20 63 6f | lt.route..No.ROA.exists.which.co |
55f80 | 76 65 72 73 20 74 68 61 74 20 70 72 65 66 69 78 2e 20 55 6e 66 6f 72 74 75 6e 61 74 65 6c 79 20 | vers.that.prefix..Unfortunately. |
55fa0 | 74 68 69 73 20 69 73 20 74 68 65 20 63 61 73 65 20 66 6f 72 20 61 62 6f 75 74 20 38 30 25 20 6f | this.is.the.case.for.about.80%.o |
55fc0 | 66 20 74 68 65 20 49 50 76 34 20 70 72 65 66 69 78 65 73 20 77 68 69 63 68 20 77 65 72 65 20 61 | f.the.IPv4.prefixes.which.were.a |
55fe0 | 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 74 68 65 20 3a 61 62 62 72 3a 60 44 46 5a 20 28 64 65 66 61 | nnounced.to.the.:abbr:`DFZ.(defa |
56000 | 75 6c 74 2d 66 72 65 65 20 7a 6f 6e 65 29 60 20 61 74 20 74 68 65 20 73 74 61 72 74 20 6f 66 20 | ult-free.zone)`.at.the.start.of. |
56020 | 32 30 32 30 00 4e 6f 20 56 4c 41 4e 20 74 61 67 67 69 6e 67 20 72 65 71 75 69 72 65 64 20 62 79 | 2020.No.VLAN.tagging.required.by |
56040 | 20 79 6f 75 72 20 49 53 50 2e 00 4e 6f 20 72 6f 75 74 65 20 69 73 20 73 75 70 70 72 65 73 73 65 | .your.ISP..No.route.is.suppresse |
56060 | 64 20 69 6e 64 65 66 69 6e 69 74 65 6c 79 2e 20 4d 61 78 69 6d 75 6d 2d 73 75 70 70 72 65 73 73 | d.indefinitely..Maximum-suppress |
56080 | 2d 74 69 6d 65 20 64 65 66 69 6e 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 74 69 6d 65 20 61 | -time.defines.the.maximum.time.a |
560a0 | 20 72 6f 75 74 65 20 63 61 6e 20 62 65 20 73 75 70 70 72 65 73 73 65 64 20 62 65 66 6f 72 65 20 | .route.can.be.suppressed.before. |
560c0 | 69 74 20 69 73 20 72 65 2d 61 64 76 65 72 74 69 73 65 64 2e 00 4e 6f 20 73 75 70 70 6f 72 74 20 | it.is.re-advertised..No.support. |
560e0 | 66 6f 72 20 53 52 4c 42 00 4e 6f 20 73 75 70 70 6f 72 74 20 66 6f 72 20 62 69 6e 64 69 6e 67 20 | for.SRLB.No.support.for.binding. |
56100 | 53 49 44 00 4e 6f 20 73 75 70 70 6f 72 74 20 66 6f 72 20 6c 65 76 65 6c 20 72 65 64 69 73 74 72 | SID.No.support.for.level.redistr |
56120 | 69 62 75 74 69 6f 6e 20 28 4c 31 20 74 6f 20 4c 32 20 6f 72 20 4c 32 20 74 6f 20 4c 31 29 00 4e | ibution.(L1.to.L2.or.L2.to.L1).N |
56140 | 6f 6e 2d 74 72 61 6e 73 70 61 72 65 6e 74 20 70 72 6f 78 79 69 6e 67 20 72 65 71 75 69 72 65 73 | on-transparent.proxying.requires |
56160 | 20 74 68 61 74 20 74 68 65 20 63 6c 69 65 6e 74 20 62 72 6f 77 73 65 72 73 20 62 65 20 63 6f 6e | .that.the.client.browsers.be.con |
56180 | 66 69 67 75 72 65 64 20 77 69 74 68 20 74 68 65 20 70 72 6f 78 79 20 73 65 74 74 69 6e 67 73 20 | figured.with.the.proxy.settings. |
561a0 | 62 65 66 6f 72 65 20 72 65 71 75 65 73 74 73 20 61 72 65 20 72 65 64 69 72 65 63 74 65 64 2e 20 | before.requests.are.redirected.. |
561c0 | 54 68 65 20 61 64 76 61 6e 74 61 67 65 20 6f 66 20 74 68 69 73 20 69 73 20 74 68 61 74 20 74 68 | The.advantage.of.this.is.that.th |
561e0 | 65 20 63 6c 69 65 6e 74 20 77 65 62 20 62 72 6f 77 73 65 72 20 63 61 6e 20 64 65 74 65 63 74 20 | e.client.web.browser.can.detect. |
56200 | 74 68 61 74 20 61 20 70 72 6f 78 79 20 69 73 20 69 6e 20 75 73 65 20 61 6e 64 20 63 61 6e 20 62 | that.a.proxy.is.in.use.and.can.b |
56220 | 65 68 61 76 65 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 20 49 6e 20 61 64 64 69 74 69 6f 6e 2c 20 | ehave.accordingly..In.addition,. |
56240 | 77 65 62 2d 74 72 61 6e 73 6d 69 74 74 65 64 20 6d 61 6c 77 61 72 65 20 63 61 6e 20 73 6f 6d 65 | web-transmitted.malware.can.some |
56260 | 74 69 6d 65 73 20 62 65 20 62 6c 6f 63 6b 65 64 20 62 79 20 61 20 6e 6f 6e 2d 74 72 61 6e 73 70 | times.be.blocked.by.a.non-transp |
56280 | 61 72 65 6e 74 20 77 65 62 20 70 72 6f 78 79 2c 20 73 69 6e 63 65 20 74 68 65 79 20 61 72 65 20 | arent.web.proxy,.since.they.are. |
562a0 | 6e 6f 74 20 61 77 61 72 65 20 6f 66 20 74 68 65 20 70 72 6f 78 79 20 73 65 74 74 69 6e 67 73 2e | not.aware.of.the.proxy.settings. |
562c0 | 00 4e 6f 6e 65 20 6f 66 20 74 68 65 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d 73 20 68 | .None.of.the.operating.systems.h |
562e0 | 61 76 65 20 63 6c 69 65 6e 74 20 73 6f 66 74 77 61 72 65 20 69 6e 73 74 61 6c 6c 65 64 20 62 79 | ave.client.software.installed.by |
56300 | 20 64 65 66 61 75 6c 74 00 4e 6f 72 6d 61 6c 20 62 75 74 20 73 69 67 6e 69 66 69 63 61 6e 74 20 | .default.Normal.but.significant. |
56320 | 63 6f 6e 64 69 74 69 6f 6e 73 20 2d 20 63 6f 6e 64 69 74 69 6f 6e 73 20 74 68 61 74 20 61 72 65 | conditions.-.conditions.that.are |
56340 | 20 6e 6f 74 20 65 72 72 6f 72 20 63 6f 6e 64 69 74 69 6f 6e 73 2c 20 62 75 74 20 74 68 61 74 20 | .not.error.conditions,.but.that. |
56360 | 6d 61 79 20 72 65 71 75 69 72 65 20 73 70 65 63 69 61 6c 20 68 61 6e 64 6c 69 6e 67 2e 00 4e 6f | may.require.special.handling..No |
56380 | 74 20 61 6c 6c 20 74 72 61 6e 73 6d 69 74 20 70 6f 6c 69 63 69 65 73 20 6d 61 79 20 62 65 20 38 | t.all.transmit.policies.may.be.8 |
563a0 | 30 32 2e 33 61 64 20 63 6f 6d 70 6c 69 61 6e 74 2c 20 70 61 72 74 69 63 75 6c 61 72 6c 79 20 69 | 02.3ad.compliant,.particularly.i |
563c0 | 6e 20 72 65 67 61 72 64 73 20 74 6f 20 74 68 65 20 70 61 63 6b 65 74 20 6d 69 73 6f 72 64 65 72 | n.regards.to.the.packet.misorder |
563e0 | 69 6e 67 20 72 65 71 75 69 72 65 6d 65 6e 74 73 20 6f 66 20 73 65 63 74 69 6f 6e 20 34 33 2e 32 | ing.requirements.of.section.43.2 |
56400 | 2e 34 20 6f 66 20 74 68 65 20 38 30 32 2e 33 61 64 20 73 74 61 6e 64 61 72 64 2e 00 4e 6f 74 65 | .4.of.the.802.3ad.standard..Note |
56420 | 20 74 68 61 74 20 64 65 6c 65 74 69 6e 67 20 74 68 65 20 6c 6f 67 20 66 69 6c 65 20 64 6f 65 73 | .that.deleting.the.log.file.does |
56440 | 20 6e 6f 74 20 73 74 6f 70 20 74 68 65 20 73 79 73 74 65 6d 20 66 72 6f 6d 20 6c 6f 67 67 69 6e | .not.stop.the.system.from.loggin |
56460 | 67 20 65 76 65 6e 74 73 2e 20 49 66 20 79 6f 75 20 75 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | g.events..If.you.use.this.comman |
56480 | 64 20 77 68 69 6c 65 20 74 68 65 20 73 79 73 74 65 6d 20 69 73 20 6c 6f 67 67 69 6e 67 20 65 76 | d.while.the.system.is.logging.ev |
564a0 | 65 6e 74 73 2c 20 6f 6c 64 20 6c 6f 67 20 65 76 65 6e 74 73 20 77 69 6c 6c 20 62 65 20 64 65 6c | ents,.old.log.events.will.be.del |
564c0 | 65 74 65 64 2c 20 62 75 74 20 65 76 65 6e 74 73 20 61 66 74 65 72 20 74 68 65 20 64 65 6c 65 74 | eted,.but.events.after.the.delet |
564e0 | 65 20 6f 70 65 72 61 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 72 65 63 6f 72 64 65 64 20 69 6e 20 | e.operation.will.be.recorded.in. |
56500 | 74 68 65 20 6e 65 77 20 66 69 6c 65 2e 20 54 6f 20 64 65 6c 65 74 65 20 74 68 65 20 66 69 6c 65 | the.new.file..To.delete.the.file |
56520 | 20 61 6c 74 6f 67 65 74 68 65 72 2c 20 66 69 72 73 74 20 64 65 6c 65 74 65 20 6c 6f 67 67 69 6e | .altogether,.first.delete.loggin |
56540 | 67 20 74 6f 20 74 68 65 20 66 69 6c 65 20 75 73 69 6e 67 20 73 79 73 74 65 6d 20 73 79 73 6c 6f | g.to.the.file.using.system.syslo |
56560 | 67 20 3a 72 65 66 3a 60 63 75 73 74 6f 6d 2d 66 69 6c 65 60 20 63 6f 6d 6d 61 6e 64 2c 20 61 6e | g.:ref:`custom-file`.command,.an |
56580 | 64 20 74 68 65 6e 20 64 65 6c 65 74 65 20 74 68 65 20 66 69 6c 65 2e 00 4e 6f 74 65 20 74 68 65 | d.then.delete.the.file..Note.the |
565a0 | 20 63 6f 6d 6d 61 6e 64 20 77 69 74 68 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 28 73 65 | .command.with.the.public.key.(se |
565c0 | 74 20 70 6b 69 20 6b 65 79 2d 70 61 69 72 20 69 70 73 65 63 2d 52 49 47 48 54 20 70 75 62 6c 69 | t.pki.key-pair.ipsec-RIGHT.publi |
565e0 | 63 20 6b 65 79 20 27 46 41 41 4f 43 41 51 38 41 4d 49 49 2e 2e 2e 27 29 2e 00 4e 6f 74 65 3a 20 | c.key.'FAAOCAQ8AMII...')..Note:. |
56600 | 63 65 72 74 69 66 69 63 61 74 65 20 6e 61 6d 65 73 20 64 6f 6e 27 74 20 6d 61 74 74 65 72 2c 20 | certificate.names.don't.matter,. |
56620 | 77 65 20 75 73 65 20 27 6f 70 65 6e 76 70 6e 2d 6c 6f 63 61 6c 27 20 61 6e 64 20 27 6f 70 65 6e | we.use.'openvpn-local'.and.'open |
56640 | 76 70 6e 2d 72 65 6d 6f 74 65 27 20 62 75 74 20 74 68 65 79 20 63 61 6e 20 62 65 20 61 72 62 69 | vpn-remote'.but.they.can.be.arbi |
56660 | 74 72 61 72 79 2e 00 4e 6f 74 69 63 65 00 4e 6f 77 20 63 6f 6e 66 69 67 75 72 65 20 63 6f 6e 6e | trary..Notice.Now.configure.conn |
56680 | 74 72 61 63 6b 2d 73 79 6e 63 20 73 65 72 76 69 63 65 20 6f 6e 20 60 60 72 6f 75 74 65 72 31 60 | track-sync.service.on.``router1` |
566a0 | 60 20 2a 2a 61 6e 64 2a 2a 20 60 60 72 6f 75 74 65 72 32 60 60 00 4e 6f 77 20 74 68 65 20 6e 6f | `.**and**.``router2``.Now.the.no |
566c0 | 74 65 64 20 70 75 62 6c 69 63 20 6b 65 79 73 20 73 68 6f 75 6c 64 20 62 65 20 65 6e 74 65 72 65 | ted.public.keys.should.be.entere |
566e0 | 64 20 6f 6e 20 74 68 65 20 6f 70 70 6f 73 69 74 65 20 72 6f 75 74 65 72 73 2e 00 4e 6f 77 20 77 | d.on.the.opposite.routers..Now.w |
56700 | 65 20 61 64 64 20 74 68 65 20 6f 70 74 69 6f 6e 20 74 6f 20 74 68 65 20 73 63 6f 70 65 2c 20 61 | e.add.the.option.to.the.scope,.a |
56720 | 64 61 70 74 20 74 6f 20 79 6f 75 72 20 73 65 74 75 70 00 4e 6f 77 20 77 65 20 6e 65 65 64 20 74 | dapt.to.your.setup.Now.we.need.t |
56740 | 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 73 65 72 76 65 72 20 6e 65 74 77 6f 72 6b 20 73 65 74 | o.specify.the.server.network.set |
56760 | 74 69 6e 67 73 2e 20 49 6e 20 61 6c 6c 20 63 61 73 65 73 20 77 65 20 6e 65 65 64 20 74 6f 20 73 | tings..In.all.cases.we.need.to.s |
56780 | 70 65 63 69 66 79 20 74 68 65 20 73 75 62 6e 65 74 20 66 6f 72 20 63 6c 69 65 6e 74 20 74 75 6e | pecify.the.subnet.for.client.tun |
567a0 | 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 73 2e 20 53 69 6e 63 65 20 77 65 20 77 61 6e 74 20 63 6c 69 | nel.endpoints..Since.we.want.cli |
567c0 | 65 6e 74 73 20 74 6f 20 61 63 63 65 73 73 20 61 20 73 70 65 63 69 66 69 63 20 6e 65 74 77 6f 72 | ents.to.access.a.specific.networ |
567e0 | 6b 20 62 65 68 69 6e 64 20 6f 75 72 20 72 6f 75 74 65 72 2c 20 77 65 20 77 69 6c 6c 20 75 73 65 | k.behind.our.router,.we.will.use |
56800 | 20 61 20 70 75 73 68 2d 72 6f 75 74 65 20 6f 70 74 69 6f 6e 20 66 6f 72 20 69 6e 73 74 61 6c 6c | .a.push-route.option.for.install |
56820 | 69 6e 67 20 74 68 61 74 20 72 6f 75 74 65 20 6f 6e 20 63 6c 69 65 6e 74 73 2e 00 4e 6f 77 20 77 | ing.that.route.on.clients..Now.w |
56840 | 68 65 6e 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 68 65 20 75 73 65 72 20 77 69 6c 6c 20 66 69 72 | hen.connecting.the.user.will.fir |
56860 | 73 74 20 62 65 20 61 73 6b 65 64 20 66 6f 72 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 61 6e 64 | st.be.asked.for.the.password.and |
56880 | 20 74 68 65 6e 20 74 68 65 20 4f 54 50 20 6b 65 79 2e 00 4e 6f 77 20 79 6f 75 20 61 72 65 20 72 | .then.the.OTP.key..Now.you.are.r |
568a0 | 65 61 64 79 20 74 6f 20 73 65 74 75 70 20 49 50 73 65 63 2e 20 54 68 65 20 6b 65 79 20 70 6f 69 | eady.to.setup.IPsec..The.key.poi |
568c0 | 6e 74 73 3a 00 4e 6f 77 20 79 6f 75 20 61 72 65 20 72 65 61 64 79 20 74 6f 20 73 65 74 75 70 20 | nts:.Now.you.are.ready.to.setup. |
568e0 | 49 50 73 65 63 2e 20 59 6f 75 27 6c 6c 20 6e 65 65 64 20 74 6f 20 75 73 65 20 61 6e 20 49 44 20 | IPsec..You'll.need.to.use.an.ID. |
56900 | 69 6e 73 74 65 61 64 20 6f 66 20 61 64 64 72 65 73 73 20 66 6f 72 20 74 68 65 20 70 65 65 72 2e | instead.of.address.for.the.peer. |
56920 | 00 4e 75 6d 62 65 72 20 6f 66 20 61 6e 74 65 6e 6e 61 73 20 6f 6e 20 74 68 69 73 20 63 61 72 64 | .Number.of.antennas.on.this.card |
56940 | 00 4e 75 6d 62 65 72 20 6f 66 20 62 69 74 73 20 6f 66 20 63 6c 69 65 6e 74 20 49 50 76 34 20 61 | .Number.of.bits.of.client.IPv4.a |
56960 | 64 64 72 65 73 73 20 74 6f 20 70 61 73 73 20 77 68 65 6e 20 73 65 6e 64 69 6e 67 20 45 44 4e 53 | ddress.to.pass.when.sending.EDNS |
56980 | 20 43 6c 69 65 6e 74 20 53 75 62 6e 65 74 20 61 64 64 72 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 | .Client.Subnet.address.informati |
569a0 | 6f 6e 2e 00 4e 75 6d 62 65 72 20 6f 66 20 6c 69 6e 65 73 20 74 6f 20 62 65 20 64 69 73 70 6c 61 | on..Number.of.lines.to.be.displa |
569c0 | 79 65 64 2c 20 64 65 66 61 75 6c 74 20 31 30 00 4f 53 50 46 00 4f 53 50 46 20 53 52 20 20 43 6f | yed,.default.10.OSPF.OSPF.SR..Co |
569e0 | 6e 66 69 67 75 72 61 74 69 6f 6e 00 4f 53 50 46 20 69 73 20 61 20 77 69 64 65 6c 79 20 75 73 65 | nfiguration.OSPF.is.a.widely.use |
56a00 | 64 20 49 47 50 20 69 6e 20 6c 61 72 67 65 20 65 6e 74 65 72 70 72 69 73 65 20 6e 65 74 77 6f 72 | d.IGP.in.large.enterprise.networ |
56a20 | 6b 73 2e 00 4f 53 50 46 20 72 6f 75 74 69 6e 67 20 64 65 76 69 63 65 73 20 6e 6f 72 6d 61 6c 6c | ks..OSPF.routing.devices.normall |
56a40 | 79 20 64 69 73 63 6f 76 65 72 20 74 68 65 69 72 20 6e 65 69 67 68 62 6f 72 73 20 64 79 6e 61 6d | y.discover.their.neighbors.dynam |
56a60 | 69 63 61 6c 6c 79 20 62 79 20 6c 69 73 74 65 6e 69 6e 67 20 74 6f 20 74 68 65 20 62 72 6f 61 64 | ically.by.listening.to.the.broad |
56a80 | 63 61 73 74 20 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 | cast.or.multicast.hello.packets. |
56aa0 | 6f 6e 20 74 68 65 20 6e 65 74 77 6f 72 6b 2e 20 42 65 63 61 75 73 65 20 61 6e 20 4e 42 4d 41 20 | on.the.network..Because.an.NBMA. |
56ac0 | 6e 65 74 77 6f 72 6b 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 62 72 6f 61 64 63 61 | network.does.not.support.broadca |
56ae0 | 73 74 20 28 6f 72 20 6d 75 6c 74 69 63 61 73 74 29 2c 20 74 68 65 20 64 65 76 69 63 65 20 63 61 | st.(or.multicast),.the.device.ca |
56b00 | 6e 6e 6f 74 20 64 69 73 63 6f 76 65 72 20 69 74 73 20 6e 65 69 67 68 62 6f 72 73 20 64 79 6e 61 | nnot.discover.its.neighbors.dyna |
56b20 | 6d 69 63 61 6c 6c 79 2c 20 73 6f 20 79 6f 75 20 6d 75 73 74 20 63 6f 6e 66 69 67 75 72 65 20 61 | mically,.so.you.must.configure.a |
56b40 | 6c 6c 20 74 68 65 20 6e 65 69 67 68 62 6f 72 73 20 73 74 61 74 69 63 61 6c 6c 79 2e 00 4f 53 50 | ll.the.neighbors.statically..OSP |
56b60 | 46 76 32 20 28 49 50 76 34 29 00 4f 53 50 46 76 33 20 28 49 50 76 36 29 00 4f 54 50 2d 6b 65 79 | Fv2.(IPv4).OSPFv3.(IPv6).OTP-key |
56b80 | 20 67 65 6e 65 72 61 74 69 6f 6e 00 4f 66 66 6c 6f 61 64 69 6e 67 00 4f 66 66 73 65 74 20 6f 66 | .generation.Offloading.Offset.of |
56ba0 | 20 74 68 65 20 63 6c 69 65 6e 74 27 73 20 73 75 62 6e 65 74 20 69 6e 20 73 65 63 6f 6e 64 73 20 | .the.client's.subnet.in.seconds. |
56bc0 | 66 72 6f 6d 20 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 20 | from.Coordinated.Universal.Time. |
56be0 | 28 55 54 43 29 00 4f 66 74 65 6e 20 77 65 20 6e 65 65 64 20 74 6f 20 65 6d 62 65 64 20 6f 6e 65 | (UTC).Often.we.need.to.embed.one |
56c00 | 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 6e 6f 74 68 65 72 20 6f 6e 65 2e 20 49 74 20 69 73 20 | .policy.into.another.one..It.is. |
56c20 | 70 6f 73 73 69 62 6c 65 20 74 6f 20 64 6f 20 73 6f 20 6f 6e 20 63 6c 61 73 73 66 75 6c 20 70 6f | possible.to.do.so.on.classful.po |
56c40 | 6c 69 63 69 65 73 2c 20 62 79 20 61 74 74 61 63 68 69 6e 67 20 61 20 6e 65 77 20 70 6f 6c 69 63 | licies,.by.attaching.a.new.polic |
56c60 | 79 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 2e 20 46 6f 72 20 69 6e 73 74 61 6e 63 65 2c 20 79 6f | y.into.a.class..For.instance,.yo |
56c80 | 75 20 6d 69 67 68 74 20 77 61 6e 74 20 74 6f 20 61 70 70 6c 79 20 64 69 66 66 65 72 65 6e 74 20 | u.might.want.to.apply.different. |
56ca0 | 70 6f 6c 69 63 69 65 73 20 74 6f 20 74 68 65 20 64 69 66 66 65 72 65 6e 74 20 63 6c 61 73 73 65 | policies.to.the.different.classe |
56cc0 | 73 20 6f 66 20 61 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 70 6f 6c 69 63 79 20 79 6f 75 20 68 61 | s.of.a.Round-Robin.policy.you.ha |
56ce0 | 76 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 4f 66 74 65 6e 20 79 6f 75 20 77 69 6c 6c 20 61 6c | ve.configured..Often.you.will.al |
56d00 | 73 6f 20 68 61 76 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 2a 64 65 66 61 75 | so.have.to.configure.your.*defau |
56d20 | 6c 74 2a 20 74 72 61 66 66 69 63 20 69 6e 20 74 68 65 20 73 61 6d 65 20 77 61 79 20 79 6f 75 20 | lt*.traffic.in.the.same.way.you. |
56d40 | 64 6f 20 77 69 74 68 20 61 20 63 6c 61 73 73 2e 20 2a 44 65 66 61 75 6c 74 2a 20 63 61 6e 20 62 | do.with.a.class..*Default*.can.b |
56d60 | 65 20 63 6f 6e 73 69 64 65 72 65 64 20 61 20 63 6c 61 73 73 20 61 73 20 69 74 20 62 65 68 61 76 | e.considered.a.class.as.it.behav |
56d80 | 65 73 20 6c 69 6b 65 20 74 68 61 74 2e 20 49 74 20 63 6f 6e 74 61 69 6e 73 20 61 6e 79 20 74 72 | es.like.that..It.contains.any.tr |
56da0 | 61 66 66 69 63 20 74 68 61 74 20 64 69 64 20 6e 6f 74 20 6d 61 74 63 68 20 61 6e 79 20 6f 66 20 | affic.that.did.not.match.any.of. |
56dc0 | 74 68 65 20 64 65 66 69 6e 65 64 20 63 6c 61 73 73 65 73 2c 20 73 6f 20 69 74 20 69 73 20 6c 69 | the.defined.classes,.so.it.is.li |
56de0 | 6b 65 20 61 6e 20 6f 70 65 6e 20 63 6c 61 73 73 2c 20 61 20 63 6c 61 73 73 20 77 69 74 68 6f 75 | ke.an.open.class,.a.class.withou |
56e00 | 74 20 6d 61 74 63 68 69 6e 67 20 66 69 6c 74 65 72 73 2e 00 4f 6e 20 61 63 74 69 76 65 20 72 6f | t.matching.filters..On.active.ro |
56e20 | 75 74 65 72 20 72 75 6e 3a 00 4f 6e 20 62 6f 74 68 20 73 69 64 65 73 2c 20 79 6f 75 20 6e 65 65 | uter.run:.On.both.sides,.you.nee |
56e40 | 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 61 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 63 65 72 74 | d.to.generate.a.self-signed.cert |
56e60 | 69 66 69 63 61 74 65 2c 20 70 72 65 66 65 72 72 61 62 6c 79 20 75 73 69 6e 67 20 74 68 65 20 22 | ificate,.preferrably.using.the." |
56e80 | 65 63 22 20 28 65 6c 6c 69 70 74 69 63 20 63 75 72 76 65 29 20 74 79 70 65 2e 20 59 6f 75 20 63 | ec".(elliptic.curve).type..You.c |
56ea0 | 61 6e 20 67 65 6e 65 72 61 74 65 20 74 68 65 6d 20 62 79 20 65 78 65 63 75 74 69 6e 67 20 63 6f | an.generate.them.by.executing.co |
56ec0 | 6d 6d 61 6e 64 20 60 60 72 75 6e 20 67 65 6e 65 72 61 74 65 20 70 6b 69 20 63 65 72 74 69 66 69 | mmand.``run.generate.pki.certifi |
56ee0 | 63 61 74 65 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 69 6e 73 74 61 6c 6c 20 3c 6e 61 6d 65 3e 60 | cate.self-signed.install.<name>` |
56f00 | 60 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 2e 20 4f 6e 63 | `.in.the.configuration.mode..Onc |
56f20 | 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 69 73 20 63 6f 6d 70 6c 65 74 65 2c 20 69 74 20 77 69 | e.the.command.is.complete,.it.wi |
56f40 | 6c 6c 20 61 64 64 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 74 6f 20 74 68 65 20 63 6f | ll.add.the.certificate.to.the.co |
56f60 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 65 73 73 69 6f 6e 2c 20 74 6f 20 74 68 65 20 60 60 70 6b | nfiguration.session,.to.the.``pk |
56f80 | 69 60 60 20 73 75 62 74 72 65 65 2e 20 59 6f 75 20 63 61 6e 20 74 68 65 6e 20 72 65 76 69 65 77 | i``.subtree..You.can.then.review |
56fa0 | 20 74 68 65 20 70 72 6f 70 6f 73 65 64 20 63 68 61 6e 67 65 73 20 61 6e 64 20 63 6f 6d 6d 69 74 | .the.proposed.changes.and.commit |
56fc0 | 20 74 68 65 6d 2e 00 4f 6e 20 6c 6f 77 20 72 61 74 65 73 20 28 62 65 6c 6f 77 20 34 30 4d 62 69 | .them..On.low.rates.(below.40Mbi |
56fe0 | 74 29 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 74 75 6e 65 20 60 71 75 61 6e 74 75 6d | t).you.may.want.to.tune.`quantum |
57000 | 60 20 64 6f 77 6e 20 74 6f 20 73 6f 6d 65 74 68 69 6e 67 20 6c 69 6b 65 20 33 30 30 20 62 79 74 | `.down.to.something.like.300.byt |
57020 | 65 73 2e 00 4f 6e 20 6d 6f 73 74 20 73 63 65 6e 61 72 69 6f 73 2c 20 74 68 65 72 65 27 73 20 6e | es..On.most.scenarios,.there's.n |
57040 | 6f 20 6e 65 65 64 20 74 6f 20 63 68 61 6e 67 65 20 73 70 65 63 69 66 69 63 20 70 61 72 61 6d 65 | o.need.to.change.specific.parame |
57060 | 74 65 72 73 2c 20 61 6e 64 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 63 6f 6e 66 69 67 75 72 | ters,.and.using.default.configur |
57080 | 61 74 69 6f 6e 20 69 73 20 65 6e 6f 75 67 68 2e 20 42 75 74 20 74 68 65 72 65 20 61 72 65 20 63 | ation.is.enough..But.there.are.c |
570a0 | 61 73 65 73 20 77 65 72 65 20 65 78 74 72 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 | ases.were.extra.configuration.is |
570c0 | 20 6e 65 65 64 65 64 2e 00 4f 6e 20 73 74 61 6e 64 62 79 20 72 6f 75 74 65 72 20 72 75 6e 3a 00 | .needed..On.standby.router.run:. |
570e0 | 4f 6e 20 73 79 73 74 65 6d 73 20 77 69 74 68 20 6d 75 6c 74 69 70 6c 65 20 72 65 64 75 6e 64 61 | On.systems.with.multiple.redunda |
57100 | 6e 74 20 75 70 6c 69 6e 6b 73 20 61 6e 64 20 72 6f 75 74 65 73 2c 20 69 74 27 73 20 61 20 67 6f | nt.uplinks.and.routes,.it's.a.go |
57120 | 6f 64 20 69 64 65 61 20 74 6f 20 75 73 65 20 61 20 64 65 64 69 63 61 74 65 64 20 61 64 64 72 65 | od.idea.to.use.a.dedicated.addre |
57140 | 73 73 20 66 6f 72 20 6d 61 6e 61 67 65 6d 65 6e 74 20 61 6e 64 20 64 79 6e 61 6d 69 63 20 72 6f | ss.for.management.and.dynamic.ro |
57160 | 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 2e 20 48 6f 77 65 76 65 72 2c 20 61 73 73 69 67 6e | uting.protocols..However,.assign |
57180 | 69 6e 67 20 74 68 61 74 20 61 64 64 72 65 73 73 20 74 6f 20 61 20 70 68 79 73 69 63 61 6c 20 6c | ing.that.address.to.a.physical.l |
571a0 | 69 6e 6b 20 69 73 20 72 69 73 6b 79 3a 20 69 66 20 74 68 61 74 20 6c 69 6e 6b 20 67 6f 65 73 20 | ink.is.risky:.if.that.link.goes. |
571c0 | 64 6f 77 6e 2c 20 74 68 61 74 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 63 6f 6d 65 20 69 | down,.that.address.will.become.i |
571e0 | 6e 61 63 63 65 73 73 69 62 6c 65 2e 20 41 20 63 6f 6d 6d 6f 6e 20 73 6f 6c 75 74 69 6f 6e 20 69 | naccessible..A.common.solution.i |
57200 | 73 20 74 6f 20 61 73 73 69 67 6e 20 74 68 65 20 6d 61 6e 61 67 65 6d 65 6e 74 20 61 64 64 72 65 | s.to.assign.the.management.addre |
57220 | 73 73 20 74 6f 20 61 20 6c 6f 6f 70 62 61 63 6b 20 6f 72 20 61 20 64 75 6d 6d 79 20 69 6e 74 65 | ss.to.a.loopback.or.a.dummy.inte |
57240 | 72 66 61 63 65 20 61 6e 64 20 61 64 76 65 72 74 69 73 65 20 74 68 61 74 20 61 64 64 72 65 73 73 | rface.and.advertise.that.address |
57260 | 20 76 69 61 20 61 6c 6c 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 73 2c 20 73 6f 20 74 68 61 74 | .via.all.physical.links,.so.that |
57280 | 20 69 74 27 73 20 72 65 61 63 68 61 62 6c 65 20 74 68 72 6f 75 67 68 20 61 6e 79 20 6f 66 20 74 | .it's.reachable.through.any.of.t |
572a0 | 68 65 6d 2e 20 53 69 6e 63 65 20 69 6e 20 4c 69 6e 75 78 2d 62 61 73 65 64 20 73 79 73 74 65 6d | hem..Since.in.Linux-based.system |
572c0 | 73 2c 20 74 68 65 72 65 20 63 61 6e 20 62 65 20 6f 6e 6c 79 20 6f 6e 65 20 6c 6f 6f 70 62 61 63 | s,.there.can.be.only.one.loopbac |
572e0 | 6b 20 69 6e 74 65 72 66 61 63 65 2c 20 69 74 27 73 20 62 65 74 74 65 72 20 74 6f 20 75 73 65 20 | k.interface,.it's.better.to.use. |
57300 | 61 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 74 68 61 74 20 70 75 72 70 6f | a.dummy.interface.for.that.purpo |
57320 | 73 65 2c 20 73 69 6e 63 65 20 74 68 65 79 20 63 61 6e 20 62 65 20 61 64 64 65 64 2c 20 72 65 6d | se,.since.they.can.be.added,.rem |
57340 | 6f 76 65 64 2c 20 61 6e 64 20 74 61 6b 65 6e 20 75 70 20 61 6e 64 20 64 6f 77 6e 20 69 6e 64 65 | oved,.and.taken.up.and.down.inde |
57360 | 70 65 6e 64 65 6e 74 6c 79 2e 00 4f 6e 20 74 68 65 20 4c 45 46 54 20 28 73 74 61 74 69 63 20 61 | pendently..On.the.LEFT.(static.a |
57380 | 64 64 72 65 73 73 29 3a 00 4f 6e 20 74 68 65 20 4c 45 46 54 3a 00 4f 6e 20 74 68 65 20 52 49 47 | ddress):.On.the.LEFT:.On.the.RIG |
573a0 | 48 54 20 28 64 79 6e 61 6d 69 63 20 61 64 64 72 65 73 73 29 3a 00 4f 6e 20 74 68 65 20 52 49 47 | HT.(dynamic.address):.On.the.RIG |
573c0 | 48 54 2c 20 73 65 74 75 70 20 62 79 20 61 6e 61 6c 6f 67 79 20 61 6e 64 20 73 77 61 70 20 6c 6f | HT,.setup.by.analogy.and.swap.lo |
573e0 | 63 61 6c 20 61 6e 64 20 72 65 6d 6f 74 65 20 61 64 64 72 65 73 73 65 73 2e 00 4f 6e 20 74 68 65 | cal.and.remote.addresses..On.the |
57400 | 20 52 49 47 48 54 3a 00 4f 6e 20 74 68 65 20 61 63 74 69 76 65 20 72 6f 75 74 65 72 2c 20 79 6f | .RIGHT:.On.the.active.router,.yo |
57420 | 75 20 73 68 6f 75 6c 64 20 68 61 76 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 74 68 65 | u.should.have.information.in.the |
57440 | 20 69 6e 74 65 72 6e 61 6c 2d 63 61 63 68 65 20 6f 66 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e | .internal-cache.of.conntrack-syn |
57460 | 63 2e 20 54 68 65 20 73 61 6d 65 20 63 75 72 72 65 6e 74 20 61 63 74 69 76 65 20 63 6f 6e 6e 65 | c..The.same.current.active.conne |
57480 | 63 74 69 6f 6e 73 20 6e 75 6d 62 65 72 20 73 68 6f 75 6c 64 20 62 65 20 73 68 6f 77 6e 20 69 6e | ctions.number.should.be.shown.in |
574a0 | 20 74 68 65 20 65 78 74 65 72 6e 61 6c 2d 63 61 63 68 65 20 6f 66 20 74 68 65 20 73 74 61 6e 64 | .the.external-cache.of.the.stand |
574c0 | 62 79 20 72 6f 75 74 65 72 00 4f 6e 20 74 68 65 20 69 6e 69 74 69 61 74 6f 72 2c 20 77 65 20 6e | by.router.On.the.initiator,.we.n |
574e0 | 65 65 64 20 74 6f 20 73 65 74 20 74 68 65 20 72 65 6d 6f 74 65 2d 69 64 20 6f 70 74 69 6f 6e 20 | eed.to.set.the.remote-id.option. |
57500 | 73 6f 20 74 68 61 74 20 69 74 20 63 61 6e 20 69 64 65 6e 74 69 66 79 20 49 4b 45 20 74 72 61 66 | so.that.it.can.identify.IKE.traf |
57520 | 66 69 63 20 66 72 6f 6d 20 74 68 65 20 72 65 73 70 6f 6e 64 65 72 20 63 6f 72 72 65 63 74 6c 79 | fic.from.the.responder.correctly |
57540 | 2e 00 4f 6e 20 74 68 65 20 69 6e 69 74 69 61 74 6f 72 2c 20 77 65 20 73 65 74 20 74 68 65 20 70 | ..On.the.initiator,.we.set.the.p |
57560 | 65 65 72 20 61 64 64 72 65 73 73 20 74 6f 20 69 74 73 20 70 75 62 6c 69 63 20 61 64 64 72 65 73 | eer.address.to.its.public.addres |
57580 | 73 2c 20 62 75 74 20 6f 6e 20 74 68 65 20 72 65 73 70 6f 6e 64 65 72 20 77 65 20 6f 6e 6c 79 20 | s,.but.on.the.responder.we.only. |
575a0 | 73 65 74 20 74 68 65 20 69 64 2e 00 4f 6e 20 74 68 65 20 6c 61 73 74 20 68 6f 70 20 72 6f 75 74 | set.the.id..On.the.last.hop.rout |
575c0 | 65 72 20 69 66 20 69 74 20 69 73 20 64 65 73 69 72 65 64 20 74 6f 20 6e 6f 74 20 73 77 69 74 63 | er.if.it.is.desired.to.not.switc |
575e0 | 68 20 6f 76 65 72 20 74 6f 20 74 68 65 20 53 50 54 20 74 72 65 65 20 63 6f 6e 66 69 67 75 72 65 | h.over.to.the.SPT.tree.configure |
57600 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2e 00 4f 6e 20 74 68 65 20 72 65 73 70 6f 6e 64 65 72 2c | .this.command..On.the.responder, |
57620 | 20 77 65 20 6e 65 65 64 20 74 6f 20 73 65 74 20 74 68 65 20 6c 6f 63 61 6c 20 69 64 20 73 6f 20 | .we.need.to.set.the.local.id.so. |
57640 | 74 68 61 74 20 69 6e 69 74 69 61 74 6f 72 20 63 61 6e 20 6b 6e 6f 77 20 77 68 6f 27 73 20 74 61 | that.initiator.can.know.who's.ta |
57660 | 6c 6b 69 6e 67 20 74 6f 20 69 74 20 66 6f 72 20 74 68 65 20 70 6f 69 6e 74 20 23 33 20 74 6f 20 | lking.to.it.for.the.point.#3.to. |
57680 | 77 6f 72 6b 2e 00 4f 6e 63 65 20 61 20 63 6c 61 73 73 20 68 61 73 20 61 20 66 69 6c 74 65 72 20 | work..Once.a.class.has.a.filter. |
576a0 | 63 6f 6e 66 69 67 75 72 65 64 2c 20 79 6f 75 20 77 69 6c 6c 20 61 6c 73 6f 20 68 61 76 65 20 74 | configured,.you.will.also.have.t |
576c0 | 6f 20 64 65 66 69 6e 65 20 77 68 61 74 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 6f 20 77 69 74 | o.define.what.you.want.to.do.wit |
576e0 | 68 20 74 68 65 20 74 72 61 66 66 69 63 20 6f 66 20 74 68 61 74 20 63 6c 61 73 73 2c 20 77 68 61 | h.the.traffic.of.that.class,.wha |
57700 | 74 20 73 70 65 63 69 66 69 63 20 54 72 61 66 66 69 63 2d 43 6f 6e 74 72 6f 6c 20 74 72 65 61 74 | t.specific.Traffic-Control.treat |
57720 | 6d 65 6e 74 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 67 69 76 65 20 69 74 2e 20 59 6f 75 20 77 69 | ment.you.want.to.give.it..You.wi |
57740 | 6c 6c 20 68 61 76 65 20 64 69 66 66 65 72 65 6e 74 20 70 6f 73 73 69 62 69 6c 69 74 69 65 73 20 | ll.have.different.possibilities. |
57760 | 64 65 70 65 6e 64 69 6e 67 20 6f 6e 20 74 68 65 20 54 72 61 66 66 69 63 20 50 6f 6c 69 63 79 20 | depending.on.the.Traffic.Policy. |
57780 | 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 2e 00 4f 6e 63 65 20 61 20 6e 65 69 67 | you.are.configuring..Once.a.neig |
577a0 | 68 62 6f 72 20 68 61 73 20 62 65 65 6e 20 66 6f 75 6e 64 2c 20 74 68 65 20 65 6e 74 72 79 20 69 | hbor.has.been.found,.the.entry.i |
577c0 | 73 20 63 6f 6e 73 69 64 65 72 65 64 20 74 6f 20 62 65 20 76 61 6c 69 64 20 66 6f 72 20 61 74 20 | s.considered.to.be.valid.for.at. |
577e0 | 6c 65 61 73 74 20 66 6f 72 20 74 68 69 73 20 73 70 65 63 69 66 69 63 20 74 69 6d 65 2e 20 41 6e | least.for.this.specific.time..An |
57800 | 20 65 6e 74 72 79 27 73 20 76 61 6c 69 64 69 74 79 20 77 69 6c 6c 20 62 65 20 65 78 74 65 6e 64 | .entry's.validity.will.be.extend |
57820 | 65 64 20 69 66 20 69 74 20 72 65 63 65 69 76 65 73 20 70 6f 73 69 74 69 76 65 20 66 65 65 64 62 | ed.if.it.receives.positive.feedb |
57840 | 61 63 6b 20 66 72 6f 6d 20 68 69 67 68 65 72 20 6c 65 76 65 6c 20 70 72 6f 74 6f 63 6f 6c 73 2e | ack.from.higher.level.protocols. |
57860 | 00 4f 6e 63 65 20 61 20 72 6f 75 74 65 20 69 73 20 61 73 73 65 73 73 65 64 20 61 20 70 65 6e 61 | .Once.a.route.is.assessed.a.pena |
57880 | 6c 74 79 2c 20 74 68 65 20 70 65 6e 61 6c 74 79 20 69 73 20 64 65 63 72 65 61 73 65 64 20 62 79 | lty,.the.penalty.is.decreased.by |
578a0 | 20 68 61 6c 66 20 65 61 63 68 20 74 69 6d 65 20 61 20 70 72 65 64 65 66 69 6e 65 64 20 61 6d 6f | .half.each.time.a.predefined.amo |
578c0 | 75 6e 74 20 6f 66 20 74 69 6d 65 20 65 6c 61 70 73 65 73 20 28 68 61 6c 66 2d 6c 69 66 65 2d 74 | unt.of.time.elapses.(half-life-t |
578e0 | 69 6d 65 29 2e 20 57 68 65 6e 20 74 68 65 20 61 63 63 75 6d 75 6c 61 74 65 64 20 70 65 6e 61 6c | ime)..When.the.accumulated.penal |
57900 | 74 69 65 73 20 66 61 6c 6c 20 62 65 6c 6f 77 20 61 20 70 72 65 64 65 66 69 6e 65 64 20 74 68 72 | ties.fall.below.a.predefined.thr |
57920 | 65 73 68 6f 6c 64 20 28 72 65 75 73 65 2d 76 61 6c 75 65 29 2c 20 74 68 65 20 72 6f 75 74 65 20 | eshold.(reuse-value),.the.route. |
57940 | 69 73 20 75 6e 73 75 70 70 72 65 73 73 65 64 20 61 6e 64 20 61 64 64 65 64 20 62 61 63 6b 20 69 | is.unsuppressed.and.added.back.i |
57960 | 6e 74 6f 20 74 68 65 20 42 47 50 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 4f 6e 63 65 20 | nto.the.BGP.routing.table..Once. |
57980 | 61 20 74 72 61 66 66 69 63 2d 70 6f 6c 69 63 79 20 69 73 20 63 72 65 61 74 65 64 2c 20 79 6f 75 | a.traffic-policy.is.created,.you |
579a0 | 20 63 61 6e 20 61 70 70 6c 79 20 69 74 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 3a 00 4f | .can.apply.it.to.an.interface:.O |
579c0 | 6e 63 65 20 63 72 65 61 74 65 64 20 69 6e 20 74 68 65 20 73 79 73 74 65 6d 2c 20 50 73 65 75 64 | nce.created.in.the.system,.Pseud |
579e0 | 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 62 65 20 72 65 66 | o-Ethernet.interfaces.can.be.ref |
57a00 | 65 72 65 6e 63 65 64 20 69 6e 20 74 68 65 20 65 78 61 63 74 20 73 61 6d 65 20 77 61 79 20 61 73 | erenced.in.the.exact.same.way.as |
57a20 | 20 6f 74 68 65 72 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 2e 20 4e 6f 74 65 | .other.Ethernet.interfaces..Note |
57a40 | 73 20 61 62 6f 75 74 20 75 73 69 6e 67 20 50 73 65 75 64 6f 2d 20 45 74 68 65 72 6e 65 74 20 69 | s.about.using.Pseudo-.Ethernet.i |
57a60 | 6e 74 65 72 66 61 63 65 73 3a 00 4f 6e 63 65 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 | nterfaces:.Once.flow.accounting. |
57a80 | 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 73 20 69 | is.configured.on.an.interfaces.i |
57aa0 | 74 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 64 69 73 70 6c 61 | t.provides.the.ability.to.displa |
57ac0 | 79 20 63 61 70 74 75 72 65 64 20 6e 65 74 77 6f 72 6b 20 74 72 61 66 66 69 63 20 69 6e 66 6f 72 | y.captured.network.traffic.infor |
57ae0 | 6d 61 74 69 6f 6e 20 66 6f 72 20 61 6c 6c 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 74 65 72 66 | mation.for.all.configured.interf |
57b00 | 61 63 65 73 2e 00 4f 6e 63 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 69 73 20 63 6f 6d 70 6c 65 | aces..Once.the.command.is.comple |
57b20 | 74 65 64 2c 20 69 74 20 77 69 6c 6c 20 61 64 64 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 | ted,.it.will.add.the.certificate |
57b40 | 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 65 73 73 69 6f 6e 2c 20 74 | .to.the.configuration.session,.t |
57b60 | 6f 20 74 68 65 20 70 6b 69 20 73 75 62 74 72 65 65 2e 20 59 6f 75 20 63 61 6e 20 74 68 65 6e 20 | o.the.pki.subtree..You.can.then. |
57b80 | 72 65 76 69 65 77 20 74 68 65 20 70 72 6f 70 6f 73 65 64 20 63 68 61 6e 67 65 73 20 61 6e 64 20 | review.the.proposed.changes.and. |
57ba0 | 63 6f 6d 6d 69 74 20 74 68 65 6d 2e 00 4f 6e 63 65 20 74 68 65 20 66 69 72 73 74 20 70 61 63 6b | commit.them..Once.the.first.pack |
57bc0 | 65 74 20 6f 66 20 74 68 65 20 66 6c 6f 77 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 67 6f 65 73 | et.of.the.flow.successfully.goes |
57be0 | 20 74 68 72 6f 75 67 68 20 74 68 65 20 49 50 20 66 6f 72 77 61 72 64 69 6e 67 20 70 61 74 68 20 | .through.the.IP.forwarding.path. |
57c00 | 28 62 6c 61 63 6b 20 63 69 72 63 6c 65 73 20 70 61 74 68 29 2c 20 66 72 6f 6d 20 74 68 65 20 73 | (black.circles.path),.from.the.s |
57c20 | 65 63 6f 6e 64 20 70 61 63 6b 65 74 20 6f 6e 2c 20 79 6f 75 20 6d 69 67 68 74 20 64 65 63 69 64 | econd.packet.on,.you.might.decid |
57c40 | 65 20 74 6f 20 6f 66 66 6c 6f 61 64 20 74 68 65 20 66 6c 6f 77 20 74 6f 20 74 68 65 20 66 6c 6f | e.to.offload.the.flow.to.the.flo |
57c60 | 77 74 61 62 6c 65 20 74 68 72 6f 75 67 68 20 79 6f 75 72 20 72 75 6c 65 73 65 74 2e 20 54 68 65 | wtable.through.your.ruleset..The |
57c80 | 20 66 6c 6f 77 74 61 62 6c 65 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 70 72 6f 76 69 64 | .flowtable.infrastructure.provid |
57ca0 | 65 73 20 61 20 72 75 6c 65 20 61 63 74 69 6f 6e 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 79 6f 75 | es.a.rule.action.that.allows.you |
57cc0 | 20 74 6f 20 73 70 65 63 69 66 79 20 77 68 65 6e 20 74 6f 20 61 64 64 20 61 20 66 6c 6f 77 20 74 | .to.specify.when.to.add.a.flow.t |
57ce0 | 6f 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 28 4f 6e 20 66 6f 72 77 61 72 64 20 66 69 6c 74 | o.the.flowtable.(On.forward.filt |
57d00 | 65 72 69 6e 67 2c 20 72 65 64 20 63 69 72 63 6c 65 20 6e 75 6d 62 65 72 20 36 29 00 4f 6e 63 65 | ering,.red.circle.number.6).Once |
57d20 | 20 74 68 65 20 6c 6f 63 61 6c 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 20 60 60 73 65 74 | .the.local.tunnel.endpoint.``set |
57d40 | 20 73 65 72 76 69 63 65 20 70 70 70 6f 65 2d 73 65 72 76 65 72 20 67 61 74 65 77 61 79 2d 61 64 | .service.pppoe-server.gateway-ad |
57d60 | 64 72 65 73 73 20 27 31 30 2e 31 2e 31 2e 32 27 60 60 20 68 61 73 20 62 65 65 6e 20 64 65 66 69 | dress.'10.1.1.2'``.has.been.defi |
57d80 | 6e 65 64 2c 20 74 68 65 20 63 6c 69 65 6e 74 20 49 50 20 70 6f 6f 6c 20 63 61 6e 20 62 65 20 65 | ned,.the.client.IP.pool.can.be.e |
57da0 | 69 74 68 65 72 20 64 65 66 69 6e 65 64 20 61 73 20 61 20 72 61 6e 67 65 20 6f 72 20 61 73 20 73 | ither.defined.as.a.range.or.as.s |
57dc0 | 75 62 6e 65 74 20 75 73 69 6e 67 20 43 49 44 52 20 6e 6f 74 61 74 69 6f 6e 2e 20 49 66 20 74 68 | ubnet.using.CIDR.notation..If.th |
57de0 | 65 20 43 49 44 52 20 6e 6f 74 61 74 69 6f 6e 20 69 73 20 75 73 65 64 2c 20 6d 75 6c 74 69 70 6c | e.CIDR.notation.is.used,.multipl |
57e00 | 65 20 73 75 62 6e 65 74 73 20 63 61 6e 20 62 65 20 73 65 74 75 70 20 77 68 69 63 68 20 61 72 65 | e.subnets.can.be.setup.which.are |
57e20 | 20 75 73 65 64 20 73 65 71 75 65 6e 74 69 61 6c 6c 79 2e 00 4f 6e 63 65 20 74 68 65 20 6d 61 74 | .used.sequentially..Once.the.mat |
57e40 | 63 68 69 6e 67 20 72 75 6c 65 73 20 61 72 65 20 73 65 74 20 66 6f 72 20 61 20 63 6c 61 73 73 2c | ching.rules.are.set.for.a.class, |
57e60 | 20 79 6f 75 20 63 61 6e 20 73 74 61 72 74 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 68 6f 77 20 79 | .you.can.start.configuring.how.y |
57e80 | 6f 75 20 77 61 6e 74 20 6d 61 74 63 68 69 6e 67 20 74 72 61 66 66 69 63 20 74 6f 20 62 65 68 61 | ou.want.matching.traffic.to.beha |
57ea0 | 76 65 2e 00 4f 6e 63 65 20 74 68 65 20 75 73 65 72 20 69 73 20 63 6f 6e 6e 65 63 74 65 64 2c 20 | ve..Once.the.user.is.connected,. |
57ec0 | 74 68 65 20 75 73 65 72 20 73 65 73 73 69 6f 6e 20 69 73 20 75 73 69 6e 67 20 74 68 65 20 73 65 | the.user.session.is.using.the.se |
57ee0 | 74 20 6c 69 6d 69 74 73 20 61 6e 64 20 63 61 6e 20 62 65 20 64 69 73 70 6c 61 79 65 64 20 76 69 | t.limits.and.can.be.displayed.vi |
57f00 | 61 20 27 73 68 6f 77 20 70 70 70 6f 65 2d 73 65 72 76 65 72 20 73 65 73 73 69 6f 6e 73 27 2e 00 | a.'show.pppoe-server.sessions'.. |
57f20 | 4f 6e 63 65 20 74 68 65 20 75 73 65 72 20 69 73 20 63 6f 6e 6e 65 63 74 65 64 2c 20 74 68 65 20 | Once.the.user.is.connected,.the. |
57f40 | 75 73 65 72 20 73 65 73 73 69 6f 6e 20 69 73 20 75 73 69 6e 67 20 74 68 65 20 73 65 74 20 6c 69 | user.session.is.using.the.set.li |
57f60 | 6d 69 74 73 20 61 6e 64 20 63 61 6e 20 62 65 20 64 69 73 70 6c 61 79 65 64 20 76 69 61 20 60 60 | mits.and.can.be.displayed.via.`` |
57f80 | 73 68 6f 77 20 70 70 70 6f 65 2d 73 65 72 76 65 72 20 73 65 73 73 69 6f 6e 73 60 60 2e 00 4f 6e | show.pppoe-server.sessions``..On |
57fa0 | 63 65 20 79 6f 75 20 63 6f 6d 6d 69 74 20 74 68 65 20 61 62 6f 76 65 20 63 68 61 6e 67 65 73 20 | ce.you.commit.the.above.changes. |
57fc0 | 79 6f 75 20 63 61 6e 20 63 72 65 61 74 65 20 61 20 63 6f 6e 66 69 67 20 66 69 6c 65 20 69 6e 20 | you.can.create.a.config.file.in. |
57fe0 | 74 68 65 20 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2f 6f 63 73 65 72 76 2f 63 6f 6e 66 69 67 2d 70 | the./config/auth/ocserv/config-p |
58000 | 65 72 2d 75 73 65 72 20 64 69 72 65 63 74 6f 72 79 20 74 68 61 74 20 6d 61 74 63 68 65 73 20 61 | er-user.directory.that.matches.a |
58020 | 20 75 73 65 72 6e 61 6d 65 20 6f 66 20 61 20 75 73 65 72 20 79 6f 75 20 68 61 76 65 20 63 72 65 | .username.of.a.user.you.have.cre |
58040 | 61 74 65 64 20 65 2e 67 2e 20 22 74 73 74 22 2e 20 4e 6f 77 20 77 68 65 6e 20 6c 6f 67 67 69 6e | ated.e.g.."tst"..Now.when.loggin |
58060 | 67 20 69 6e 20 77 69 74 68 20 74 68 65 20 22 74 73 74 22 20 75 73 65 72 20 74 68 65 20 63 6f 6e | g.in.with.the."tst".user.the.con |
58080 | 66 69 67 20 6f 70 74 69 6f 6e 73 20 79 6f 75 20 73 65 74 20 69 6e 20 74 68 69 73 20 66 69 6c 65 | fig.options.you.set.in.this.file |
580a0 | 20 77 69 6c 6c 20 62 65 20 6c 6f 61 64 65 64 2e 00 4f 6e 63 65 20 79 6f 75 20 68 61 76 65 20 61 | .will.be.loaded..Once.you.have.a |
580c0 | 6e 20 45 74 68 65 72 6e 65 74 20 64 65 76 69 63 65 20 63 6f 6e 6e 65 63 74 65 64 2c 20 69 2e 65 | n.Ethernet.device.connected,.i.e |
580e0 | 2e 20 60 65 74 68 30 60 2c 20 74 68 65 6e 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 | ..`eth0`,.then.you.can.configure |
58100 | 20 69 74 20 74 6f 20 6f 70 65 6e 20 74 68 65 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 20 66 6f | .it.to.open.the.PPPoE.session.fo |
58120 | 72 20 79 6f 75 20 61 6e 64 20 79 6f 75 72 20 44 53 4c 20 54 72 61 6e 73 63 65 69 76 65 72 20 28 | r.you.and.your.DSL.Transceiver.( |
58140 | 4d 6f 64 65 6d 2f 52 6f 75 74 65 72 29 20 6a 75 73 74 20 61 63 74 73 20 74 6f 20 74 72 61 6e 73 | Modem/Router).just.acts.to.trans |
58160 | 6c 61 74 65 20 79 6f 75 72 20 6d 65 73 73 61 67 65 73 20 69 6e 20 61 20 77 61 79 20 74 68 61 74 | late.your.messages.in.a.way.that |
58180 | 20 76 44 53 4c 2f 61 44 53 4c 20 75 6e 64 65 72 73 74 61 6e 64 73 2e 00 4f 6e 63 65 20 79 6f 75 | .vDSL/aDSL.understands..Once.you |
581a0 | 20 68 61 76 65 20 73 65 74 75 70 20 79 6f 75 72 20 53 53 54 50 20 73 65 72 76 65 72 20 74 68 65 | .have.setup.your.SSTP.server.the |
581c0 | 72 65 20 63 6f 6d 65 73 20 74 68 65 20 74 69 6d 65 20 74 6f 20 64 6f 20 73 6f 6d 65 20 62 61 73 | re.comes.the.time.to.do.some.bas |
581e0 | 69 63 20 74 65 73 74 69 6e 67 2e 20 54 68 65 20 4c 69 6e 75 78 20 63 6c 69 65 6e 74 20 75 73 65 | ic.testing..The.Linux.client.use |
58200 | 64 20 66 6f 72 20 74 65 73 74 69 6e 67 20 69 73 20 63 61 6c 6c 65 64 20 73 73 74 70 63 5f 2e 20 | d.for.testing.is.called.sstpc_.. |
58220 | 73 73 74 70 63 5f 20 72 65 71 75 69 72 65 73 20 61 20 50 50 50 20 63 6f 6e 66 69 67 75 72 61 74 | sstpc_.requires.a.PPP.configurat |
58240 | 69 6f 6e 2f 70 65 65 72 20 66 69 6c 65 2e 00 4f 6e 63 65 20 79 6f 75 72 20 72 6f 75 74 65 72 73 | ion/peer.file..Once.your.routers |
58260 | 20 61 72 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 72 65 6a 65 63 74 20 52 50 4b 49 2d 69 | .are.configured.to.reject.RPKI-i |
58280 | 6e 76 61 6c 69 64 20 70 72 65 66 69 78 65 73 2c 20 79 6f 75 20 63 61 6e 20 74 65 73 74 20 77 68 | nvalid.prefixes,.you.can.test.wh |
582a0 | 65 74 68 65 72 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 77 6f 72 6b 69 | ether.the.configuration.is.worki |
582c0 | 6e 67 20 63 6f 72 72 65 63 74 6c 79 20 75 73 69 6e 67 20 74 68 65 20 60 52 49 50 45 20 4c 61 62 | ng.correctly.using.the.`RIPE.Lab |
582e0 | 73 20 52 50 4b 49 20 54 65 73 74 60 5f 20 65 78 70 65 72 69 6d 65 6e 74 61 6c 20 74 6f 6f 6c 2e | s.RPKI.Test`_.experimental.tool. |
58300 | 00 4f 6e 65 20 54 79 70 65 2d 33 20 73 75 6d 6d 61 72 79 2d 4c 53 41 20 77 69 74 68 20 72 6f 75 | .One.Type-3.summary-LSA.with.rou |
58320 | 74 69 6e 67 20 69 6e 66 6f 20 3c 45 2e 46 2e 47 2e 48 2f 4d 3e 20 69 73 20 61 6e 6e 6f 75 6e 63 | ting.info.<E.F.G.H/M>.is.announc |
58340 | 65 64 20 69 6e 74 6f 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 69 66 20 64 65 66 69 6e 65 64 | ed.into.backbone.area.if.defined |
58360 | 20 61 72 65 61 20 63 6f 6e 74 61 69 6e 73 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 69 6e 74 72 | .area.contains.at.least.one.intr |
58380 | 61 2d 61 72 65 61 20 6e 65 74 77 6f 72 6b 20 28 69 2e 65 2e 20 64 65 73 63 72 69 62 65 64 20 77 | a-area.network.(i.e..described.w |
583a0 | 69 74 68 20 72 6f 75 74 65 72 2d 4c 53 41 20 6f 72 20 6e 65 74 77 6f 72 6b 2d 4c 53 41 29 20 66 | ith.router-LSA.or.network-LSA).f |
583c0 | 72 6f 6d 20 72 61 6e 67 65 20 3c 41 2e 42 2e 43 2e 44 2f 4d 3e 2e 20 54 68 69 73 20 63 6f 6d 6d | rom.range.<A.B.C.D/M>..This.comm |
583e0 | 61 6e 64 20 6d 61 6b 65 73 20 73 65 6e 73 65 20 69 6e 20 41 42 52 20 6f 6e 6c 79 2e 00 4f 6e 65 | and.makes.sense.in.ABR.only..One |
58400 | 20 69 6d 70 6c 69 63 69 74 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 65 78 69 73 74 73 2e 00 4f 6e | .implicit.environment.exists..On |
58420 | 65 20 6f 66 20 74 68 65 20 69 6d 70 6f 72 74 61 6e 74 20 66 65 61 74 75 72 65 73 20 62 75 69 6c | e.of.the.important.features.buil |
58440 | 74 20 6f 6e 20 74 6f 70 20 6f 66 20 74 68 65 20 4e 65 74 66 69 6c 74 65 72 20 66 72 61 6d 65 77 | t.on.top.of.the.Netfilter.framew |
58460 | 6f 72 6b 20 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 2e 20 43 6f 6e 6e | ork.is.connection.tracking..Conn |
58480 | 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 61 6c 6c 6f 77 73 20 74 68 65 20 6b 65 72 6e 65 | ection.tracking.allows.the.kerne |
584a0 | 6c 20 74 6f 20 6b 65 65 70 20 74 72 61 63 6b 20 6f 66 20 61 6c 6c 20 6c 6f 67 69 63 61 6c 20 6e | l.to.keep.track.of.all.logical.n |
584c0 | 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 6f 72 20 73 65 73 73 69 6f 6e 73 2c 20 | etwork.connections.or.sessions,. |
584e0 | 61 6e 64 20 74 68 65 72 65 62 79 20 72 65 6c 61 74 65 20 61 6c 6c 20 6f 66 20 74 68 65 20 70 61 | and.thereby.relate.all.of.the.pa |
58500 | 63 6b 65 74 73 20 77 68 69 63 68 20 6d 61 79 20 6d 61 6b 65 20 75 70 20 74 68 61 74 20 63 6f 6e | ckets.which.may.make.up.that.con |
58520 | 6e 65 63 74 69 6f 6e 2e 20 4e 41 54 20 72 65 6c 69 65 73 20 6f 6e 20 74 68 69 73 20 69 6e 66 6f | nection..NAT.relies.on.this.info |
58540 | 72 6d 61 74 69 6f 6e 20 74 6f 20 74 72 61 6e 73 6c 61 74 65 20 61 6c 6c 20 72 65 6c 61 74 65 64 | rmation.to.translate.all.related |
58560 | 20 70 61 63 6b 65 74 73 20 69 6e 20 74 68 65 20 73 61 6d 65 20 77 61 79 2c 20 61 6e 64 20 69 70 | .packets.in.the.same.way,.and.ip |
58580 | 74 61 62 6c 65 73 20 63 61 6e 20 75 73 65 20 74 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | tables.can.use.this.information. |
585a0 | 74 6f 20 61 63 74 20 61 73 20 61 20 73 74 61 74 65 66 75 6c 20 66 69 72 65 77 61 6c 6c 2e 00 4f | to.act.as.a.stateful.firewall..O |
585c0 | 6e 65 20 6f 66 20 74 68 65 20 75 73 65 73 20 6f 66 20 46 61 69 72 20 51 75 65 75 65 20 6d 69 67 | ne.of.the.uses.of.Fair.Queue.mig |
585e0 | 68 74 20 62 65 20 74 68 65 20 6d 69 74 69 67 61 74 69 6f 6e 20 6f 66 20 44 65 6e 69 61 6c 20 6f | ht.be.the.mitigation.of.Denial.o |
58600 | 66 20 53 65 72 76 69 63 65 20 61 74 74 61 63 6b 73 2e 00 4f 6e 6c 79 20 38 30 32 2e 31 51 2d 74 | f.Service.attacks..Only.802.1Q-t |
58620 | 61 67 67 65 64 20 70 61 63 6b 65 74 73 20 61 72 65 20 61 63 63 65 70 74 65 64 20 6f 6e 20 45 74 | agged.packets.are.accepted.on.Et |
58640 | 68 65 72 6e 65 74 20 76 69 66 73 2e 00 4f 6e 6c 79 20 56 52 52 50 20 69 73 20 73 75 70 70 6f 72 | hernet.vifs..Only.VRRP.is.suppor |
58660 | 74 65 64 2e 20 52 65 71 75 69 72 65 64 20 6f 70 74 69 6f 6e 2e 00 4f 6e 6c 79 20 61 6c 6c 6f 77 | ted..Required.option..Only.allow |
58680 | 20 63 65 72 74 61 69 6e 20 49 50 20 61 64 64 72 65 73 73 65 73 20 6f 72 20 70 72 65 66 69 78 65 | .certain.IP.addresses.or.prefixe |
586a0 | 73 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 68 74 74 70 73 20 77 65 62 73 65 72 76 65 72 2e | s.to.access.the.https.webserver. |
586c0 | 00 4f 6e 6c 79 20 69 6e 20 74 68 65 20 73 6f 75 72 63 65 20 63 72 69 74 65 72 69 61 2c 20 79 6f | .Only.in.the.source.criteria,.yo |
586e0 | 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 61 20 6d 61 63 2d 61 64 64 72 65 73 73 2e 00 4f 6e 6c | u.can.specify.a.mac-address..Onl |
58700 | 79 20 6f 6e 65 20 53 52 47 42 20 61 6e 64 20 64 65 66 61 75 6c 74 20 53 50 46 20 41 6c 67 6f 72 | y.one.SRGB.and.default.SPF.Algor |
58720 | 69 74 68 6d 20 69 73 20 73 75 70 70 6f 72 74 65 64 00 4f 6e 6c 79 20 72 65 71 75 65 73 74 20 61 | ithm.is.supported.Only.request.a |
58740 | 6e 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 20 62 | n.address.from.the.DHCP.server.b |
58760 | 75 74 20 64 6f 20 6e 6f 74 20 72 65 71 75 65 73 74 20 61 20 64 65 66 61 75 6c 74 20 67 61 74 65 | ut.do.not.request.a.default.gate |
58780 | 77 61 79 2e 00 4f 6e 6c 79 20 72 65 71 75 65 73 74 20 61 6e 20 61 64 64 72 65 73 73 20 66 72 6f | way..Only.request.an.address.fro |
587a0 | 6d 20 74 68 65 20 50 50 50 6f 45 20 73 65 72 76 65 72 20 62 75 74 20 64 6f 20 6e 6f 74 20 69 6e | m.the.PPPoE.server.but.do.not.in |
587c0 | 73 74 61 6c 6c 20 61 6e 79 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 2e 00 4f 6e 6c 79 20 72 65 | stall.any.default.route..Only.re |
587e0 | 71 75 65 73 74 20 61 6e 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 53 53 54 50 20 73 | quest.an.address.from.the.SSTP.s |
58800 | 65 72 76 65 72 20 62 75 74 20 64 6f 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 20 61 6e 79 20 64 65 66 | erver.but.do.not.install.any.def |
58820 | 61 75 6c 74 20 72 6f 75 74 65 2e 00 4f 6e 6c 79 20 74 68 65 20 74 79 70 65 20 28 60 60 73 73 68 | ault.route..Only.the.type.(``ssh |
58840 | 2d 72 73 61 60 60 29 20 61 6e 64 20 74 68 65 20 6b 65 79 20 28 60 60 41 41 41 42 33 4e 2e 2e 2e | -rsa``).and.the.key.(``AAAB3N... |
58860 | 60 60 29 20 61 72 65 20 75 73 65 64 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 20 6b 65 79 20 | ``).are.used..Note.that.the.key. |
58880 | 77 69 6c 6c 20 75 73 75 61 6c 6c 79 20 62 65 20 73 65 76 65 72 61 6c 20 68 75 6e 64 72 65 64 20 | will.usually.be.several.hundred. |
588a0 | 63 68 61 72 61 63 74 65 72 73 20 6c 6f 6e 67 2c 20 61 6e 64 20 79 6f 75 20 77 69 6c 6c 20 6e 65 | characters.long,.and.you.will.ne |
588c0 | 65 64 20 74 6f 20 63 6f 70 79 20 61 6e 64 20 70 61 73 74 65 20 69 74 2e 20 53 6f 6d 65 20 74 65 | ed.to.copy.and.paste.it..Some.te |
588e0 | 72 6d 69 6e 61 6c 20 65 6d 75 6c 61 74 6f 72 73 20 6d 61 79 20 61 63 63 69 64 65 6e 74 61 6c 6c | rminal.emulators.may.accidentall |
58900 | 79 20 73 70 6c 69 74 20 74 68 69 73 20 6f 76 65 72 20 73 65 76 65 72 61 6c 20 6c 69 6e 65 73 2e | y.split.this.over.several.lines. |
58920 | 20 42 65 20 61 74 74 65 6e 74 69 76 65 20 77 68 65 6e 20 79 6f 75 20 70 61 73 74 65 20 69 74 20 | .Be.attentive.when.you.paste.it. |
58940 | 74 68 61 74 20 69 74 20 6f 6e 6c 79 20 70 61 73 74 65 73 20 61 73 20 61 20 73 69 6e 67 6c 65 20 | that.it.only.pastes.as.a.single. |
58960 | 6c 69 6e 65 2e 20 54 68 65 20 74 68 69 72 64 20 70 61 72 74 20 69 73 20 73 69 6d 70 6c 79 20 61 | line..The.third.part.is.simply.a |
58980 | 6e 20 69 64 65 6e 74 69 66 69 65 72 2c 20 61 6e 64 20 69 73 20 66 6f 72 20 79 6f 75 72 20 6f 77 | n.identifier,.and.is.for.your.ow |
589a0 | 6e 20 72 65 66 65 72 65 6e 63 65 2e 00 4f 6e 6c 79 20 77 6f 72 6b 73 20 77 69 74 68 20 61 20 56 | n.reference..Only.works.with.a.V |
589c0 | 58 4c 41 4e 20 64 65 76 69 63 65 20 77 69 74 68 20 65 78 74 65 72 6e 61 6c 20 66 6c 61 67 20 73 | XLAN.device.with.external.flag.s |
589e0 | 65 74 2e 00 4f 70 2d 6d 6f 64 65 20 63 68 65 63 6b 20 76 69 72 74 75 61 6c 2d 73 65 72 76 65 72 | et..Op-mode.check.virtual-server |
58a00 | 20 73 74 61 74 75 73 00 4f 70 65 6e 43 6f 6e 6e 65 63 74 00 4f 70 65 6e 43 6f 6e 6e 65 63 74 20 | .status.OpenConnect.OpenConnect. |
58a20 | 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 73 65 6e 64 20 61 63 63 6f 75 6e | can.be.configured.to.send.accoun |
58a40 | 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 61 20 52 41 44 49 55 53 20 73 65 72 | ting.information.to.a.RADIUS.ser |
58a60 | 76 65 72 20 74 6f 20 63 61 70 74 75 72 65 20 75 73 65 72 20 73 65 73 73 69 6f 6e 20 64 61 74 61 | ver.to.capture.user.session.data |
58a80 | 20 73 75 63 68 20 61 73 20 74 69 6d 65 20 6f 66 20 63 6f 6e 6e 65 63 74 2f 64 69 73 63 6f 6e 6e | .such.as.time.of.connect/disconn |
58aa0 | 65 63 74 2c 20 64 61 74 61 20 74 72 61 6e 73 66 65 72 72 65 64 2c 20 61 6e 64 20 73 6f 20 6f 6e | ect,.data.transferred,.and.so.on |
58ac0 | 2e 00 4f 70 65 6e 43 6f 6e 6e 65 63 74 20 73 65 72 76 65 72 20 6d 61 74 63 68 65 73 20 74 68 65 | ..OpenConnect.server.matches.the |
58ae0 | 20 66 69 6c 65 6e 61 6d 65 20 69 6e 20 61 20 63 61 73 65 20 73 65 6e 73 69 74 69 76 65 20 6d 61 | .filename.in.a.case.sensitive.ma |
58b00 | 6e 6e 65 72 2c 20 6d 61 6b 65 20 73 75 72 65 20 74 68 65 20 75 73 65 72 6e 61 6d 65 2f 67 72 6f | nner,.make.sure.the.username/gro |
58b20 | 75 70 20 6e 61 6d 65 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 20 6d 61 74 63 68 65 73 20 74 68 | up.name.you.configure.matches.th |
58b40 | 65 20 66 69 6c 65 6e 61 6d 65 20 65 78 61 63 74 6c 79 2e 00 4f 70 65 6e 43 6f 6e 6e 65 63 74 20 | e.filename.exactly..OpenConnect. |
58b60 | 73 75 70 70 6f 72 74 73 20 61 20 73 75 62 73 65 74 20 6f 66 20 69 74 27 73 20 63 6f 6e 66 69 67 | supports.a.subset.of.it's.config |
58b80 | 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 74 6f 20 62 65 20 61 70 70 6c 69 65 64 20 6f 6e | uration.options.to.be.applied.on |
58ba0 | 20 61 20 70 65 72 20 75 73 65 72 2f 67 72 6f 75 70 20 62 61 73 69 73 2c 20 66 6f 72 20 63 6f 6e | .a.per.user/group.basis,.for.con |
58bc0 | 66 69 67 75 72 61 74 69 6f 6e 20 70 75 72 70 6f 73 65 73 20 77 65 20 72 65 66 65 72 20 74 6f 20 | figuration.purposes.we.refer.to. |
58be0 | 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 73 20 22 49 64 65 6e 74 69 74 79 20 | this.functionality.as."Identity. |
58c00 | 62 61 73 65 64 20 63 6f 6e 66 69 67 22 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 60 4f 70 | based.config"..The.following.`Op |
58c20 | 65 6e 43 6f 6e 6e 65 63 74 20 53 65 72 76 65 72 20 4d 61 6e 75 61 6c 20 3c 68 74 74 70 73 3a 2f | enConnect.Server.Manual.<https:/ |
58c40 | 2f 6f 63 73 65 72 76 2e 67 69 74 6c 61 62 2e 69 6f 2f 77 77 77 2f 6d 61 6e 75 61 6c 2e 68 74 6d | /ocserv.gitlab.io/www/manual.htm |
58c60 | 6c 23 3a 7e 3a 74 65 78 74 3d 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 25 32 30 66 69 6c 65 73 25 | l#:~:text=Configuration%20files% |
58c80 | 32 30 74 68 61 74 25 20 32 30 77 69 6c 6c 25 32 30 62 65 25 32 30 61 70 70 6c 69 65 64 25 32 30 | 20that%.20will%20be%20applied%20 |
58ca0 | 70 65 72 25 32 30 75 73 65 72 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 6f 72 25 30 41 25 | per%20user%20connection%20or%0A% |
58cc0 | 32 33 25 32 30 70 65 72 25 32 30 67 72 6f 75 70 3e 60 5f 20 6f 75 74 6c 69 6e 65 73 20 74 68 65 | 23%20per%20group>`_.outlines.the |
58ce0 | 20 73 65 74 20 6f 66 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 74 68 | .set.of.configuration.options.th |
58d00 | 61 74 20 61 72 65 20 61 6c 6c 6f 77 65 64 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 6c 65 76 65 | at.are.allowed..This.can.be.leve |
58d20 | 72 61 67 65 64 20 74 6f 20 61 70 70 6c 79 20 64 69 66 66 65 72 65 6e 74 20 73 65 74 73 20 6f 66 | raged.to.apply.different.sets.of |
58d40 | 20 63 6f 6e 66 69 67 73 20 74 6f 20 64 69 66 66 65 72 65 6e 74 20 75 73 65 72 73 20 6f 72 20 67 | .configs.to.different.users.or.g |
58d60 | 72 6f 75 70 73 20 6f 66 20 75 73 65 72 73 2e 00 4f 70 65 6e 43 6f 6e 6e 65 63 74 2d 63 6f 6d 70 | roups.of.users..OpenConnect-comp |
58d80 | 61 74 69 62 6c 65 20 73 65 72 76 65 72 20 66 65 61 74 75 72 65 20 69 73 20 61 76 61 69 6c 61 62 | atible.server.feature.is.availab |
58da0 | 6c 65 20 66 72 6f 6d 20 74 68 69 73 20 72 65 6c 65 61 73 65 2e 20 4f 70 65 6e 63 6f 6e 6e 65 63 | le.from.this.release..Openconnec |
58dc0 | 74 20 56 50 4e 20 73 75 70 70 6f 72 74 73 20 53 53 4c 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 61 6e | t.VPN.supports.SSL.connection.an |
58de0 | 64 20 6f 66 66 65 72 73 20 66 75 6c 6c 20 6e 65 74 77 6f 72 6b 20 61 63 63 65 73 73 2e 20 53 53 | d.offers.full.network.access..SS |
58e00 | 4c 20 56 50 4e 20 6e 65 74 77 6f 72 6b 20 65 78 74 65 6e 73 69 6f 6e 20 63 6f 6e 6e 65 63 74 73 | L.VPN.network.extension.connects |
58e20 | 20 74 68 65 20 65 6e 64 2d 75 73 65 72 20 73 79 73 74 65 6d 20 74 6f 20 74 68 65 20 63 6f 72 70 | .the.end-user.system.to.the.corp |
58e40 | 6f 72 61 74 65 20 6e 65 74 77 6f 72 6b 20 77 69 74 68 20 61 63 63 65 73 73 20 63 6f 6e 74 72 6f | orate.network.with.access.contro |
58e60 | 6c 73 20 62 61 73 65 64 20 6f 6e 6c 79 20 6f 6e 20 6e 65 74 77 6f 72 6b 20 6c 61 79 65 72 20 69 | ls.based.only.on.network.layer.i |
58e80 | 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 75 63 68 20 61 73 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 | nformation,.such.as.destination. |
58ea0 | 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 20 70 6f 72 74 20 6e 75 6d 62 65 72 2e 20 53 6f 2c 20 | IP.address.and.port.number..So,. |
58ec0 | 69 74 20 70 72 6f 76 69 64 65 73 20 73 61 66 65 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 66 | it.provides.safe.communication.f |
58ee0 | 6f 72 20 61 6c 6c 20 74 79 70 65 73 20 6f 66 20 64 65 76 69 63 65 20 74 72 61 66 66 69 63 20 61 | or.all.types.of.device.traffic.a |
58f00 | 63 72 6f 73 73 20 70 75 62 6c 69 63 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 70 72 69 76 61 74 | cross.public.networks.and.privat |
58f20 | 65 20 6e 65 74 77 6f 72 6b 73 2c 20 61 6c 73 6f 20 65 6e 63 72 79 70 74 73 20 74 68 65 20 74 72 | e.networks,.also.encrypts.the.tr |
58f40 | 61 66 66 69 63 20 77 69 74 68 20 53 53 4c 20 70 72 6f 74 6f 63 6f 6c 2e 00 4f 70 65 6e 56 50 4e | affic.with.SSL.protocol..OpenVPN |
58f60 | 00 4f 70 65 6e 56 50 4e 20 2a 2a 77 69 6c 6c 20 6e 6f 74 2a 2a 20 61 75 74 6f 6d 61 74 69 63 61 | .OpenVPN.**will.not**.automatica |
58f80 | 6c 6c 79 20 63 72 65 61 74 65 20 72 6f 75 74 65 73 20 69 6e 20 74 68 65 20 6b 65 72 6e 65 6c 20 | lly.create.routes.in.the.kernel. |
58fa0 | 66 6f 72 20 63 6c 69 65 6e 74 20 73 75 62 6e 65 74 73 20 77 68 65 6e 20 74 68 65 79 20 63 6f 6e | for.client.subnets.when.they.con |
58fc0 | 6e 65 63 74 20 61 6e 64 20 77 69 6c 6c 20 6f 6e 6c 79 20 75 73 65 20 63 6c 69 65 6e 74 2d 73 75 | nect.and.will.only.use.client-su |
58fe0 | 62 6e 65 74 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 69 6e 74 65 72 6e 61 6c 6c 79 2c 20 73 6f 20 | bnet.association.internally,.so. |
59000 | 77 65 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 20 72 6f 75 74 65 20 74 6f 20 74 68 65 | we.need.to.create.a.route.to.the |
59020 | 20 31 30 2e 32 33 2e 30 2e 30 2f 32 30 20 6e 65 74 77 6f 72 6b 20 6f 75 72 73 65 6c 76 65 73 3a | .10.23.0.0/20.network.ourselves: |
59040 | 00 4f 70 65 6e 56 50 4e 20 44 43 4f 20 69 73 20 6e 6f 74 20 66 75 6c 6c 20 4f 70 65 6e 56 50 4e | .OpenVPN.DCO.is.not.full.OpenVPN |
59060 | 20 66 65 61 74 75 72 65 73 20 73 75 70 70 6f 72 74 65 64 20 2c 20 69 73 20 63 75 72 72 65 6e 74 | .features.supported.,.is.current |
59080 | 6c 79 20 63 6f 6e 73 69 64 65 72 65 64 20 65 78 70 65 72 69 6d 65 6e 74 61 6c 2e 20 46 75 72 74 | ly.considered.experimental..Furt |
590a0 | 68 65 72 6d 6f 72 65 2c 20 74 68 65 72 65 20 61 72 65 20 63 65 72 74 61 69 6e 20 4f 70 65 6e 56 | hermore,.there.are.certain.OpenV |
590c0 | 50 4e 20 66 65 61 74 75 72 65 73 20 61 6e 64 20 75 73 65 20 63 61 73 65 73 20 74 68 61 74 20 72 | PN.features.and.use.cases.that.r |
590e0 | 65 6d 61 69 6e 20 69 6e 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 44 43 4f 2e 20 54 6f 20 | emain.incompatible.with.DCO..To. |
59100 | 67 65 74 20 61 20 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 20 75 6e 64 65 72 73 74 61 6e 64 69 6e | get.a.comprehensive.understandin |
59120 | 67 20 6f 66 20 74 68 65 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 61 73 73 6f 63 69 61 74 65 64 20 | g.of.the.limitations.associated. |
59140 | 77 69 74 68 20 44 43 4f 2c 20 72 65 66 65 72 20 74 6f 20 74 68 65 20 6c 69 73 74 20 6f 66 20 6b | with.DCO,.refer.to.the.list.of.k |
59160 | 6e 6f 77 6e 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 69 6e 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 | nown.limitations.in.the.document |
59180 | 61 74 69 6f 6e 2e 00 4f 70 65 6e 56 50 4e 20 44 61 74 61 20 43 68 61 6e 6e 65 6c 20 4f 66 66 6c | ation..OpenVPN.Data.Channel.Offl |
591a0 | 6f 61 64 20 28 44 43 4f 29 00 4f 70 65 6e 56 50 4e 20 44 61 74 61 20 43 68 61 6e 6e 65 6c 20 4f | oad.(DCO).OpenVPN.Data.Channel.O |
591c0 | 66 66 6c 6f 61 64 20 28 44 43 4f 29 20 65 6e 61 62 6c 65 73 20 73 69 67 6e 69 66 69 63 61 6e 74 | ffload.(DCO).enables.significant |
591e0 | 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 65 6e 68 61 6e 63 65 6d 65 6e 74 20 69 6e 20 65 6e 63 72 | .performance.enhancement.in.encr |
59200 | 79 70 74 65 64 20 4f 70 65 6e 56 50 4e 20 64 61 74 61 20 70 72 6f 63 65 73 73 69 6e 67 2e 20 42 | ypted.OpenVPN.data.processing..B |
59220 | 79 20 6d 69 6e 69 6d 69 7a 69 6e 67 20 63 6f 6e 74 65 78 74 20 73 77 69 74 63 68 69 6e 67 20 66 | y.minimizing.context.switching.f |
59240 | 6f 72 20 65 61 63 68 20 70 61 63 6b 65 74 2c 20 44 43 4f 20 65 66 66 65 63 74 69 76 65 6c 79 20 | or.each.packet,.DCO.effectively. |
59260 | 72 65 64 75 63 65 73 20 6f 76 65 72 68 65 61 64 2e 20 54 68 69 73 20 6f 70 74 69 6d 69 7a 61 74 | reduces.overhead..This.optimizat |
59280 | 69 6f 6e 20 69 73 20 61 63 68 69 65 76 65 64 20 62 79 20 6b 65 65 70 69 6e 67 20 6d 6f 73 74 20 | ion.is.achieved.by.keeping.most. |
592a0 | 64 61 74 61 20 68 61 6e 64 6c 69 6e 67 20 74 61 73 6b 73 20 77 69 74 68 69 6e 20 74 68 65 20 6b | data.handling.tasks.within.the.k |
592c0 | 65 72 6e 65 6c 2c 20 61 76 6f 69 64 69 6e 67 20 66 72 65 71 75 65 6e 74 20 73 77 69 74 63 68 65 | ernel,.avoiding.frequent.switche |
592e0 | 73 20 62 65 74 77 65 65 6e 20 6b 65 72 6e 65 6c 20 61 6e 64 20 75 73 65 72 20 73 70 61 63 65 20 | s.between.kernel.and.user.space. |
59300 | 66 6f 72 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6e 64 20 70 61 63 6b 65 74 20 68 61 6e 64 6c 69 | for.encryption.and.packet.handli |
59320 | 6e 67 2e 00 4f 70 65 6e 56 50 4e 20 61 6c 6c 6f 77 73 20 66 6f 72 20 65 69 74 68 65 72 20 54 43 | ng..OpenVPN.allows.for.either.TC |
59340 | 50 20 6f 72 20 55 44 50 2e 20 55 44 50 20 77 69 6c 6c 20 70 72 6f 76 69 64 65 20 74 68 65 20 6c | P.or.UDP..UDP.will.provide.the.l |
59360 | 6f 77 65 73 74 20 6c 61 74 65 6e 63 79 2c 20 77 68 69 6c 65 20 54 43 50 20 77 69 6c 6c 20 77 6f | owest.latency,.while.TCP.will.wo |
59380 | 72 6b 20 62 65 74 74 65 72 20 66 6f 72 20 6c 6f 73 73 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 3b | rk.better.for.lossy.connections; |
593a0 | 20 67 65 6e 65 72 61 6c 6c 79 20 55 44 50 20 69 73 20 70 72 65 66 65 72 72 65 64 20 77 68 65 6e | .generally.UDP.is.preferred.when |
593c0 | 20 70 6f 73 73 69 62 6c 65 2e 00 4f 70 65 6e 56 50 4e 20 69 73 20 70 6f 70 75 6c 61 72 20 66 6f | .possible..OpenVPN.is.popular.fo |
593e0 | 72 20 63 6c 69 65 6e 74 2d 73 65 72 76 65 72 20 73 65 74 75 70 73 2c 20 62 75 74 20 69 74 73 20 | r.client-server.setups,.but.its. |
59400 | 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 6d 6f 64 65 20 72 65 6d 61 69 6e 73 20 61 20 72 65 6c 61 | site-to-site.mode.remains.a.rela |
59420 | 74 69 76 65 6c 79 20 6f 62 73 63 75 72 65 20 66 65 61 74 75 72 65 2c 20 61 6e 64 20 6d 61 6e 79 | tively.obscure.feature,.and.many |
59440 | 20 72 6f 75 74 65 72 20 61 70 70 6c 69 61 6e 63 65 73 20 73 74 69 6c 6c 20 64 6f 6e 27 74 20 73 | .router.appliances.still.don't.s |
59460 | 75 70 70 6f 72 74 20 69 74 2e 20 48 6f 77 65 76 65 72 2c 20 69 74 27 73 20 76 65 72 79 20 75 73 | upport.it..However,.it's.very.us |
59480 | 65 66 75 6c 20 66 6f 72 20 71 75 69 63 6b 6c 79 20 73 65 74 74 69 6e 67 20 75 70 20 74 75 6e 6e | eful.for.quickly.setting.up.tunn |
594a0 | 65 6c 73 20 62 65 74 77 65 65 6e 20 72 6f 75 74 65 72 73 2e 00 4f 70 65 6e 56 50 4e 20 73 74 61 | els.between.routers..OpenVPN.sta |
594c0 | 74 75 73 20 63 61 6e 20 62 65 20 76 65 72 69 66 69 65 64 20 75 73 69 6e 67 20 74 68 65 20 60 73 | tus.can.be.verified.using.the.`s |
594e0 | 68 6f 77 20 6f 70 65 6e 76 70 6e 60 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 | how.openvpn`.operational.command |
59500 | 73 2e 20 53 65 65 20 74 68 65 20 62 75 69 6c 74 2d 69 6e 20 68 65 6c 70 20 66 6f 72 20 61 20 63 | s..See.the.built-in.help.for.a.c |
59520 | 6f 6d 70 6c 65 74 65 20 6c 69 73 74 20 6f 66 20 6f 70 74 69 6f 6e 73 2e 00 4f 70 65 6e 63 6f 6e | omplete.list.of.options..Opencon |
59540 | 6e 65 63 74 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 4f 70 65 72 61 74 69 6e 67 20 4d 6f 64 | nect.Configuration.Operating.Mod |
59560 | 65 73 00 4f 70 65 72 61 74 69 6f 6e 00 4f 70 65 72 61 74 69 6f 6e 20 43 6f 6d 6d 61 6e 64 73 00 | es.Operation.Operation.Commands. |
59580 | 4f 70 65 72 61 74 69 6f 6e 20 4d 6f 64 65 00 4f 70 65 72 61 74 69 6f 6e 20 6d 6f 64 65 20 6f 66 | Operation.Mode.Operation.mode.of |
595a0 | 20 77 69 72 65 6c 65 73 73 20 72 61 64 69 6f 2e 00 4f 70 65 72 61 74 69 6f 6e 2d 6d 6f 64 65 00 | .wireless.radio..Operation-mode. |
595c0 | 4f 70 65 72 61 74 69 6f 6e 2d 6d 6f 64 65 20 46 69 72 65 77 61 6c 6c 00 4f 70 65 72 61 74 69 6f | Operation-mode.Firewall.Operatio |
595e0 | 6e 61 6c 20 43 6f 6d 6d 61 6e 64 73 00 4f 70 65 72 61 74 69 6f 6e 61 6c 20 4d 6f 64 65 20 43 6f | nal.Commands.Operational.Mode.Co |
59600 | 6d 6d 61 6e 64 73 00 4f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 00 4f 70 74 69 | mmands.Operational.commands.Opti |
59620 | 6f 6e 00 4f 70 74 69 6f 6e 20 34 33 20 66 6f 72 20 55 6e 69 46 49 00 4f 70 74 69 6f 6e 20 64 65 | on.Option.43.for.UniFI.Option.de |
59640 | 73 63 72 69 70 74 69 6f 6e 00 4f 70 74 69 6f 6e 20 6e 75 6d 62 65 72 00 4f 70 74 69 6f 6e 20 73 | scription.Option.number.Option.s |
59660 | 70 65 63 69 66 79 69 6e 67 20 74 68 65 20 72 61 74 65 20 69 6e 20 77 68 69 63 68 20 77 65 27 6c | pecifying.the.rate.in.which.we'l |
59680 | 6c 20 61 73 6b 20 6f 75 72 20 6c 69 6e 6b 20 70 61 72 74 6e 65 72 20 74 6f 20 74 72 61 6e 73 6d | l.ask.our.link.partner.to.transm |
596a0 | 69 74 20 4c 41 43 50 44 55 20 70 61 63 6b 65 74 73 20 69 6e 20 38 30 32 2e 33 61 64 20 6d 6f 64 | it.LACPDU.packets.in.802.3ad.mod |
596c0 | 65 2e 00 4f 70 74 69 6f 6e 20 74 6f 20 64 69 73 61 62 6c 65 20 72 75 6c 65 2e 00 4f 70 74 69 6f | e..Option.to.disable.rule..Optio |
596e0 | 6e 20 74 6f 20 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 6c 6f 67 20 6d 61 74 63 68 | n.to.enable.or.disable.log.match |
59700 | 69 6e 67 20 72 75 6c 65 2e 00 4f 70 74 69 6f 6e 20 74 6f 20 6c 6f 67 20 70 61 63 6b 65 74 73 20 | ing.rule..Option.to.log.packets. |
59720 | 68 69 74 74 69 6e 67 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 2e 00 4f 70 74 69 6f 6e 61 6c | hitting.default-action..Optional |
59740 | 00 4f 70 74 69 6f 6e 61 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 4f 70 74 69 6f 6e 61 6c | .Optional.Configuration.Optional |
59760 | 20 70 61 72 61 6d 65 74 65 72 20 70 72 65 66 69 78 2d 6c 69 73 74 20 63 61 6e 20 62 65 20 75 73 | .parameter.prefix-list.can.be.us |
59780 | 65 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 77 68 69 63 68 20 67 72 6f 75 70 73 20 74 6f 20 73 77 69 | e.to.control.which.groups.to.swi |
597a0 | 74 63 68 20 6f 72 20 6e 6f 74 20 73 77 69 74 63 68 2e 20 49 66 20 61 20 67 72 6f 75 70 20 69 73 | tch.or.not.switch..If.a.group.is |
597c0 | 20 50 45 52 4d 49 54 20 61 73 20 70 65 72 20 74 68 65 20 70 72 65 66 69 78 2d 6c 69 73 74 2c 20 | .PERMIT.as.per.the.prefix-list,. |
597e0 | 74 68 65 6e 20 74 68 65 20 53 50 54 20 73 77 69 74 63 68 6f 76 65 72 20 64 6f 65 73 20 6e 6f 74 | then.the.SPT.switchover.does.not |
59800 | 20 68 61 70 70 65 6e 20 66 6f 72 20 69 74 20 61 6e 64 20 69 66 20 69 74 20 69 73 20 44 45 4e 59 | .happen.for.it.and.if.it.is.DENY |
59820 | 2c 20 74 68 65 6e 20 74 68 65 20 53 50 54 20 73 77 69 74 63 68 6f 76 65 72 20 68 61 70 70 65 6e | ,.then.the.SPT.switchover.happen |
59840 | 73 2e 00 4f 70 74 69 6f 6e 61 6c 2c 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 65 6e 61 62 | s..Optional,.if.you.want.to.enab |
59860 | 6c 65 20 75 70 6c 6f 61 64 73 2c 20 65 6c 73 65 20 54 46 54 50 20 73 65 72 76 65 72 20 77 69 6c | le.uploads,.else.TFTP.server.wil |
59880 | 6c 20 61 63 74 20 61 73 20 61 20 72 65 61 64 2d 6f 6e 6c 79 20 73 65 72 76 65 72 2e 00 4f 70 74 | l.act.as.a.read-only.server..Opt |
598a0 | 69 6f 6e 61 6c 2f 64 65 66 61 75 6c 74 20 73 65 74 74 69 6e 67 73 00 4f 70 74 69 6f 6e 61 6c 6c | ional/default.settings.Optionall |
598c0 | 79 20 73 65 74 20 61 20 73 70 65 63 69 66 69 63 20 73 74 61 74 69 63 20 49 50 76 34 20 6f 72 20 | y.set.a.specific.static.IPv4.or. |
598e0 | 49 50 76 36 20 61 64 64 72 65 73 73 20 66 6f 72 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 2e 20 | IPv6.address.for.the.container.. |
59900 | 54 68 69 73 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 74 68 65 20 | This.address.must.be.within.the. |
59920 | 6e 61 6d 65 64 20 6e 65 74 77 6f 72 6b 20 70 72 65 66 69 78 2e 00 4f 70 74 69 6f 6e 73 00 4f 70 | named.network.prefix..Options.Op |
59940 | 74 69 6f 6e 73 20 28 47 6c 6f 62 61 6c 20 49 50 73 65 63 20 73 65 74 74 69 6e 67 73 29 20 41 74 | tions.(Global.IPsec.settings).At |
59960 | 74 72 69 62 75 74 65 73 00 4f 70 74 69 6f 6e 73 20 75 73 65 64 20 66 6f 72 20 71 75 65 75 65 20 | tributes.Options.used.for.queue. |
59980 | 74 61 72 67 65 74 2e 20 41 63 74 69 6f 6e 20 71 75 65 75 65 20 6d 75 73 74 20 62 65 20 64 65 66 | target..Action.queue.must.be.def |
599a0 | 69 6e 65 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 73 65 74 74 69 6e 67 00 4f 72 20 2a 2a 62 69 | ined.to.use.this.setting.Or.**bi |
599c0 | 6e 61 72 79 2a 2a 20 70 72 65 66 69 78 65 73 2e 00 4f 72 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 | nary**.prefixes..Or,.for.example |
599e0 | 20 66 74 70 2c 20 60 64 65 6c 65 74 65 20 73 79 73 74 65 6d 20 63 6f 6e 6e 74 72 61 63 6b 20 6d | .ftp,.`delete.system.conntrack.m |
59a00 | 6f 64 75 6c 65 73 20 66 74 70 60 2e 00 4f 72 64 65 72 20 63 6f 6e 6e 74 72 61 63 6b 64 20 74 6f | odules.ftp`..Order.conntrackd.to |
59a20 | 20 72 65 71 75 65 73 74 20 61 20 63 6f 6d 70 6c 65 74 65 20 63 6f 6e 6e 74 72 61 63 6b 20 74 61 | .request.a.complete.conntrack.ta |
59a40 | 62 6c 65 20 72 65 73 79 6e 63 20 61 67 61 69 6e 73 74 20 74 68 65 20 6f 74 68 65 72 20 6e 6f 64 | ble.resync.against.the.other.nod |
59a60 | 65 20 61 74 20 73 74 61 72 74 75 70 2e 00 4f 72 69 67 69 6e 61 74 65 20 61 6e 20 41 53 2d 45 78 | e.at.startup..Originate.an.AS-Ex |
59a80 | 74 65 72 6e 61 6c 20 28 74 79 70 65 2d 35 29 20 4c 53 41 20 64 65 73 63 72 69 62 69 6e 67 20 61 | ternal.(type-5).LSA.describing.a |
59aa0 | 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 69 6e 74 6f 20 61 6c 6c 20 65 78 74 65 72 6e 61 6c | .default.route.into.all.external |
59ac0 | 2d 72 6f 75 74 69 6e 67 20 63 61 70 61 62 6c 65 20 61 72 65 61 73 2c 20 6f 66 20 74 68 65 20 73 | -routing.capable.areas,.of.the.s |
59ae0 | 70 65 63 69 66 69 65 64 20 6d 65 74 72 69 63 20 61 6e 64 20 6d 65 74 72 69 63 20 74 79 70 65 2e | pecified.metric.and.metric.type. |
59b00 | 20 49 66 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 61 6c 77 61 79 73 60 20 6b 65 79 77 6f 72 64 | .If.the.:cfgcmd:`always`.keyword |
59b20 | 20 69 73 20 67 69 76 65 6e 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 61 6c | .is.given.then.the.default.is.al |
59b40 | 77 61 79 73 20 61 64 76 65 72 74 69 73 65 64 2c 20 65 76 65 6e 20 77 68 65 6e 20 74 68 65 72 65 | ways.advertised,.even.when.there |
59b60 | 20 69 73 20 6e 6f 20 64 65 66 61 75 6c 74 20 70 72 65 73 65 6e 74 20 69 6e 20 74 68 65 20 72 6f | .is.no.default.present.in.the.ro |
59b80 | 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d | uting.table..The.argument.:cfgcm |
59ba0 | 64 3a 60 72 6f 75 74 65 2d 6d 61 70 60 20 73 70 65 63 69 66 69 65 73 20 74 6f 20 61 64 76 65 72 | d:`route-map`.specifies.to.adver |
59bc0 | 74 69 73 65 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 69 66 20 74 68 65 20 72 6f | tise.the.default.route.if.the.ro |
59be0 | 75 74 65 20 6d 61 70 20 69 73 20 73 61 74 69 73 66 69 65 64 2e 00 4f 74 68 65 72 20 61 74 74 72 | ute.map.is.satisfied..Other.attr |
59c00 | 69 62 75 74 65 73 20 63 61 6e 20 62 65 20 75 73 65 64 2c 20 62 75 74 20 74 68 65 79 20 68 61 76 | ibutes.can.be.used,.but.they.hav |
59c20 | 65 20 74 6f 20 62 65 20 69 6e 20 6f 6e 65 20 6f 66 20 74 68 65 20 64 69 63 74 69 6f 6e 61 72 69 | e.to.be.in.one.of.the.dictionari |
59c40 | 65 73 20 69 6e 20 2a 2f 75 73 72 2f 73 68 61 72 65 2f 61 63 63 65 6c 2d 70 70 70 2f 72 61 64 69 | es.in.*/usr/share/accel-ppp/radi |
59c60 | 75 73 2a 2e 00 4f 75 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 | us*..Our.configuration.commands. |
59c80 | 77 6f 75 6c 64 20 62 65 3a 00 4f 75 72 20 72 65 6d 6f 74 65 20 65 6e 64 20 6f 66 20 74 68 65 20 | would.be:.Our.remote.end.of.the. |
59ca0 | 74 75 6e 6e 65 6c 20 66 6f 72 20 70 65 65 72 20 60 74 6f 2d 77 67 30 32 60 20 69 73 20 72 65 61 | tunnel.for.peer.`to-wg02`.is.rea |
59cc0 | 63 68 61 62 6c 65 20 61 74 20 31 39 32 2e 30 2e 32 2e 31 20 70 6f 72 74 20 35 31 38 32 30 00 4f | chable.at.192.0.2.1.port.51820.O |
59ce0 | 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 62 61 6c 61 6e 63 65 64 20 | utbound.traffic.can.be.balanced. |
59d00 | 62 65 74 77 65 65 6e 20 74 77 6f 20 6f 72 20 6d 6f 72 65 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 | between.two.or.more.outbound.int |
59d20 | 65 72 66 61 63 65 73 2e 20 49 66 20 61 20 70 61 74 68 20 66 61 69 6c 73 2c 20 74 72 61 66 66 69 | erfaces..If.a.path.fails,.traffi |
59d40 | 63 20 69 73 20 62 61 6c 61 6e 63 65 64 20 61 63 72 6f 73 73 20 74 68 65 20 72 65 6d 61 69 6e 69 | c.is.balanced.across.the.remaini |
59d60 | 6e 67 20 68 65 61 6c 74 68 79 20 70 61 74 68 73 2c 20 61 20 72 65 63 6f 76 65 72 65 64 20 70 61 | ng.healthy.paths,.a.recovered.pa |
59d80 | 74 68 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 64 64 65 64 20 62 61 63 6b 20 74 | th.is.automatically.added.back.t |
59da0 | 6f 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 61 6e 64 20 75 73 65 64 20 62 79 20 | o.the.routing.table.and.used.by. |
59dc0 | 74 68 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 2e 20 54 68 65 20 6c 6f 61 64 20 62 61 6c 61 | the.load.balancer..The.load.bala |
59de0 | 6e 63 65 72 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 64 64 73 20 72 6f 75 74 65 73 20 66 | ncer.automatically.adds.routes.f |
59e00 | 6f 72 20 65 61 63 68 20 70 61 74 68 20 74 6f 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c | or.each.path.to.the.routing.tabl |
59e20 | 65 20 61 6e 64 20 62 61 6c 61 6e 63 65 73 20 74 72 61 66 66 69 63 20 61 63 72 6f 73 73 20 74 68 | e.and.balances.traffic.across.th |
59e40 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 2c 20 64 65 74 65 72 6d 69 | e.configured.interfaces,.determi |
59e60 | 6e 65 64 20 62 79 20 69 6e 74 65 72 66 61 63 65 20 68 65 61 6c 74 68 20 61 6e 64 20 77 65 69 67 | ned.by.interface.health.and.weig |
59e80 | 68 74 2e 00 4f 75 74 67 6f 69 6e 67 20 74 72 61 66 66 69 63 20 69 73 20 62 61 6c 61 6e 63 65 64 | ht..Outgoing.traffic.is.balanced |
59ea0 | 20 69 6e 20 61 20 66 6c 6f 77 2d 62 61 73 65 64 20 6d 61 6e 6e 65 72 2e 20 41 20 63 6f 6e 6e 65 | .in.a.flow-based.manner..A.conne |
59ec0 | 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 74 61 62 6c 65 20 69 73 20 75 73 65 64 20 74 6f 20 | ction.tracking.table.is.used.to. |
59ee0 | 74 72 61 63 6b 20 66 6c 6f 77 73 20 62 79 20 74 68 65 69 72 20 73 6f 75 72 63 65 20 61 64 64 72 | track.flows.by.their.source.addr |
59f00 | 65 73 73 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 61 6e 64 20 70 6f 72 | ess,.destination.address.and.por |
59f20 | 74 2e 20 45 61 63 68 20 66 6c 6f 77 20 69 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 61 6e 20 69 | t..Each.flow.is.assigned.to.an.i |
59f40 | 6e 74 65 72 66 61 63 65 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 20 64 65 66 69 6e 65 | nterface.according.to.the.define |
59f60 | 64 20 62 61 6c 61 6e 63 69 6e 67 20 72 75 6c 65 73 20 61 6e 64 20 73 75 62 73 65 71 75 65 6e 74 | d.balancing.rules.and.subsequent |
59f80 | 20 70 61 63 6b 65 74 73 20 61 72 65 20 73 65 6e 74 20 74 68 72 6f 75 67 68 20 74 68 65 20 73 61 | .packets.are.sent.through.the.sa |
59fa0 | 6d 65 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 68 61 73 20 74 68 65 20 61 64 76 61 6e | me.interface..This.has.the.advan |
59fc0 | 74 61 67 65 20 74 68 61 74 20 70 61 63 6b 65 74 73 20 61 6c 77 61 79 73 20 61 72 72 69 76 65 20 | tage.that.packets.always.arrive. |
59fe0 | 69 6e 20 6f 72 64 65 72 20 69 66 20 6c 69 6e 6b 73 20 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 | in.order.if.links.with.different |
5a000 | 20 73 70 65 65 64 73 20 61 72 65 20 69 6e 20 75 73 65 2e 00 4f 75 74 70 75 74 20 66 72 6f 6d 20 | .speeds.are.in.use..Output.from. |
5a020 | 60 65 74 68 30 60 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 00 4f 75 74 70 75 74 20 | `eth0`.network.interface.Output. |
5a040 | 70 6c 75 67 69 6e 20 50 72 6f 6d 65 74 68 65 75 73 20 63 6c 69 65 6e 74 00 4f 76 65 72 20 49 50 | plugin.Prometheus.client.Over.IP |
5a060 | 00 4f 76 65 72 20 49 50 53 65 63 2c 20 4c 32 20 56 50 4e 20 28 62 72 69 64 67 65 29 00 4f 76 65 | .Over.IPSec,.L2.VPN.(bridge).Ove |
5a080 | 72 20 55 44 50 00 4f 76 65 72 72 69 64 65 20 73 74 61 74 69 63 2d 6d 61 70 70 69 6e 67 27 73 20 | r.UDP.Override.static-mapping's. |
5a0a0 | 6e 61 6d 65 2d 73 65 72 76 65 72 20 77 69 74 68 20 61 20 63 75 73 74 6f 6d 20 6f 6e 65 20 74 68 | name-server.with.a.custom.one.th |
5a0c0 | 61 74 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 6f 6e 6c 79 20 74 6f 20 74 68 69 73 20 68 6f 73 | at.will.be.sent.only.to.this.hos |
5a0e0 | 74 2e 00 4f 76 65 72 76 69 65 77 00 4f 76 65 72 76 69 65 77 20 61 6e 64 20 62 61 73 69 63 20 63 | t..Overview.Overview.and.basic.c |
5a100 | 6f 6e 63 65 70 74 73 00 4f 76 65 72 76 69 65 77 20 6f 66 20 64 65 66 69 6e 65 64 20 67 72 6f 75 | oncepts.Overview.of.defined.grou |
5a120 | 70 73 2e 20 59 6f 75 20 73 65 65 20 74 68 65 20 74 79 70 65 2c 20 74 68 65 20 6d 65 6d 62 65 72 | ps..You.see.the.type,.the.member |
5a140 | 73 2c 20 61 6e 64 20 77 68 65 72 65 20 74 68 65 20 67 72 6f 75 70 20 69 73 20 75 73 65 64 2e 00 | s,.and.where.the.group.is.used.. |
5a160 | 50 42 52 20 6d 75 6c 74 69 70 6c 65 20 75 70 6c 69 6e 6b 73 00 50 43 31 20 69 73 20 69 6e 20 74 | PBR.multiple.uplinks.PC1.is.in.t |
5a180 | 68 65 20 60 60 64 65 66 61 75 6c 74 60 60 20 56 52 46 20 61 6e 64 20 61 63 74 69 6e 67 20 61 73 | he.``default``.VRF.and.acting.as |
5a1a0 | 20 65 2e 67 2e 20 61 20 22 66 69 6c 65 73 65 72 76 65 72 22 00 50 43 32 20 69 73 20 69 6e 20 56 | .e.g..a."fileserver".PC2.is.in.V |
5a1c0 | 52 46 20 60 60 62 6c 75 65 60 60 20 77 68 69 63 68 20 69 73 20 74 68 65 20 64 65 76 65 6c 6f 70 | RF.``blue``.which.is.the.develop |
5a1e0 | 6d 65 6e 74 20 64 65 70 61 72 74 6d 65 6e 74 00 50 43 33 20 61 6e 64 20 50 43 34 20 61 72 65 20 | ment.department.PC3.and.PC4.are. |
5a200 | 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 20 62 72 69 64 67 65 20 64 65 76 69 63 65 20 6f 6e 20 | connected.to.a.bridge.device.on. |
5a220 | 72 6f 75 74 65 72 20 60 60 52 31 60 60 20 77 68 69 63 68 20 69 73 20 69 6e 20 56 52 46 20 60 60 | router.``R1``.which.is.in.VRF.`` |
5a240 | 72 65 64 60 60 2e 20 53 61 79 20 74 68 69 73 20 69 73 20 74 68 65 20 48 52 20 64 65 70 61 72 74 | red``..Say.this.is.the.HR.depart |
5a260 | 6d 65 6e 74 2e 00 50 43 34 20 68 61 73 20 49 50 20 31 30 2e 30 2e 30 2e 34 2f 32 34 20 61 6e 64 | ment..PC4.has.IP.10.0.0.4/24.and |
5a280 | 20 50 43 35 20 68 61 73 20 49 50 20 31 30 2e 30 2e 30 2e 35 2f 32 34 2c 20 73 6f 20 74 68 65 79 | .PC5.has.IP.10.0.0.5/24,.so.they |
5a2a0 | 20 62 65 6c 69 65 76 65 20 74 68 65 79 20 61 72 65 20 69 6e 20 74 68 65 20 73 61 6d 65 20 62 72 | .believe.they.are.in.the.same.br |
5a2c0 | 6f 61 64 63 61 73 74 20 64 6f 6d 61 69 6e 2e 00 50 43 35 20 72 65 63 65 69 76 65 73 20 74 68 65 | oadcast.domain..PC5.receives.the |
5a2e0 | 20 70 69 6e 67 20 65 63 68 6f 2c 20 72 65 73 70 6f 6e 64 73 20 77 69 74 68 20 61 6e 20 65 63 68 | .ping.echo,.responds.with.an.ech |
5a300 | 6f 20 72 65 70 6c 79 20 74 68 61 74 20 4c 65 61 66 33 20 72 65 63 65 69 76 65 73 20 61 6e 64 20 | o.reply.that.Leaf3.receives.and. |
5a320 | 74 68 69 73 20 74 69 6d 65 20 66 6f 72 77 61 72 64 73 20 74 6f 20 4c 65 61 66 32 27 73 20 75 6e | this.time.forwards.to.Leaf2's.un |
5a340 | 69 63 61 73 74 20 61 64 64 72 65 73 73 20 64 69 72 65 63 74 6c 79 20 62 65 63 61 75 73 65 20 69 | icast.address.directly.because.i |
5a360 | 74 20 6c 65 61 72 6e 65 64 20 74 68 65 20 6c 6f 63 61 74 69 6f 6e 20 6f 66 20 50 43 34 20 61 62 | t.learned.the.location.of.PC4.ab |
5a380 | 6f 76 65 2e 20 57 68 65 6e 20 4c 65 61 66 32 20 72 65 63 65 69 76 65 73 20 74 68 65 20 65 63 68 | ove..When.Leaf2.receives.the.ech |
5a3a0 | 6f 20 72 65 70 6c 79 20 66 72 6f 6d 20 50 43 35 20 69 74 20 73 65 65 73 20 74 68 61 74 20 69 74 | o.reply.from.PC5.it.sees.that.it |
5a3c0 | 20 63 61 6d 65 20 66 72 6f 6d 20 4c 65 61 66 33 20 61 6e 64 20 73 6f 20 72 65 6d 65 6d 62 65 72 | .came.from.Leaf3.and.so.remember |
5a3e0 | 73 20 74 68 61 74 20 50 43 35 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 4c 65 61 66 | s.that.PC5.is.reachable.via.Leaf |
5a400 | 33 2e 00 50 49 4d 20 28 50 72 6f 74 6f 63 6f 6c 20 49 6e 64 65 70 65 6e 64 65 6e 74 20 4d 75 6c | 3..PIM.(Protocol.Independent.Mul |
5a420 | 74 69 63 61 73 74 29 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 65 76 | ticast).must.be.configured.in.ev |
5a440 | 65 72 79 20 69 6e 74 65 72 66 61 63 65 20 6f 66 20 65 76 65 72 79 20 70 61 72 74 69 63 69 70 61 | ery.interface.of.every.participa |
5a460 | 74 69 6e 67 20 72 6f 75 74 65 72 2e 20 45 76 65 72 79 20 72 6f 75 74 65 72 20 6d 75 73 74 20 61 | ting.router..Every.router.must.a |
5a480 | 6c 73 6f 20 68 61 76 65 20 74 68 65 20 6c 6f 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 52 65 6e | lso.have.the.location.of.the.Ren |
5a4a0 | 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 6d 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 | devouz.Point.manually.configured |
5a4c0 | 2e 20 54 68 65 6e 2c 20 75 6e 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 73 68 61 72 65 64 20 74 72 | ..Then,.unidirectional.shared.tr |
5a4e0 | 65 65 73 20 72 6f 6f 74 65 64 20 61 74 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e | ees.rooted.at.the.Rendevouz.Poin |
5a500 | 74 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 62 65 20 62 75 69 6c 74 20 66 6f | t.will.automatically.be.built.fo |
5a520 | 72 20 6d 75 6c 74 69 63 61 73 74 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 00 50 49 4d 20 61 6e | r.multicast.distribution..PIM.an |
5a540 | 64 20 49 47 4d 50 00 50 49 4d 20 e2 80 93 20 50 72 6f 74 6f 63 6f 6c 20 49 6e 64 65 70 65 6e 64 | d.IGMP.PIM.....Protocol.Independ |
5a560 | 65 6e 74 20 4d 75 6c 74 69 63 61 73 74 00 50 49 4d 2d 53 4d 20 2d 20 50 49 4d 20 53 70 61 72 73 | ent.Multicast.PIM-SM.-.PIM.Spars |
5a580 | 65 20 4d 6f 64 65 00 50 49 4d 36 20 2d 20 50 72 6f 74 6f 63 6f 6c 20 49 6e 64 65 70 65 6e 64 65 | e.Mode.PIM6.-.Protocol.Independe |
5a5a0 | 6e 74 20 4d 75 6c 74 69 63 61 73 74 20 66 6f 72 20 49 50 76 36 00 50 49 4d 76 36 20 28 50 72 6f | nt.Multicast.for.IPv6.PIMv6.(Pro |
5a5c0 | 74 6f 63 6f 6c 20 49 6e 64 65 70 65 6e 64 65 6e 74 20 4d 75 6c 74 69 63 61 73 74 20 66 6f 72 20 | tocol.Independent.Multicast.for. |
5a5e0 | 49 50 76 36 29 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 65 76 65 72 | IPv6).must.be.configured.in.ever |
5a600 | 79 20 69 6e 74 65 72 66 61 63 65 20 6f 66 20 65 76 65 72 79 20 70 61 72 74 69 63 69 70 61 74 69 | y.interface.of.every.participati |
5a620 | 6e 67 20 72 6f 75 74 65 72 2e 20 45 76 65 72 79 20 72 6f 75 74 65 72 20 6d 75 73 74 20 61 6c 73 | ng.router..Every.router.must.als |
5a640 | 6f 20 68 61 76 65 20 74 68 65 20 6c 6f 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 52 65 6e 64 65 | o.have.the.location.of.the.Rende |
5a660 | 76 6f 75 7a 20 50 6f 69 6e 74 20 6d 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 | vouz.Point.manually.configured.. |
5a680 | 54 68 65 6e 2c 20 75 6e 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 73 68 61 72 65 64 20 74 72 65 65 | Then,.unidirectional.shared.tree |
5a6a0 | 73 20 72 6f 6f 74 65 64 20 61 74 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 | s.rooted.at.the.Rendevouz.Point. |
5a6c0 | 77 69 6c 6c 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 62 65 20 62 75 69 6c 74 20 66 6f 72 20 | will.automatically.be.built.for. |
5a6e0 | 6d 75 6c 74 69 63 61 73 74 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 00 50 4b 49 00 50 50 44 55 | multicast.distribution..PKI.PPDU |
5a700 | 00 50 50 50 20 41 64 76 61 6e 63 65 64 20 4f 70 74 69 6f 6e 73 00 50 50 50 20 53 65 74 74 69 6e | .PPP.Advanced.Options.PPP.Settin |
5a720 | 67 73 00 50 50 50 6f 45 00 50 50 50 6f 45 20 53 65 72 76 65 72 00 50 50 50 6f 45 20 6f 70 74 69 | gs.PPPoE.PPPoE.Server.PPPoE.opti |
5a740 | 6f 6e 73 00 50 50 54 50 2d 53 65 72 76 65 72 00 50 61 63 6b 65 74 2d 62 61 73 65 64 20 62 61 6c | ons.PPTP-Server.Packet-based.bal |
5a760 | 61 6e 63 69 6e 67 20 63 61 6e 20 6c 65 61 64 20 74 6f 20 61 20 62 65 74 74 65 72 20 62 61 6c 61 | ancing.can.lead.to.a.better.bala |
5a780 | 6e 63 65 20 61 63 72 6f 73 73 20 69 6e 74 65 72 66 61 63 65 73 20 77 68 65 6e 20 6f 75 74 20 6f | nce.across.interfaces.when.out.o |
5a7a0 | 66 20 6f 72 64 65 72 20 70 61 63 6b 65 74 73 20 61 72 65 20 6e 6f 20 69 73 73 75 65 2e 20 50 65 | f.order.packets.are.no.issue..Pe |
5a7c0 | 72 2d 70 61 63 6b 65 74 2d 62 61 73 65 64 20 62 61 6c 61 6e 63 69 6e 67 20 63 61 6e 20 62 65 20 | r-packet-based.balancing.can.be. |
5a7e0 | 73 65 74 20 66 6f 72 20 61 20 62 61 6c 61 6e 63 69 6e 67 20 72 75 6c 65 20 77 69 74 68 3a 00 50 | set.for.a.balancing.rule.with:.P |
5a800 | 61 72 74 69 63 75 6c 61 72 6c 79 20 6c 61 72 67 65 20 6e 65 74 77 6f 72 6b 73 20 6d 61 79 20 77 | articularly.large.networks.may.w |
5a820 | 69 73 68 20 74 6f 20 72 75 6e 20 74 68 65 69 72 20 6f 77 6e 20 52 50 4b 49 20 63 65 72 74 69 66 | ish.to.run.their.own.RPKI.certif |
5a840 | 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 20 61 6e 64 20 70 75 62 6c 69 63 61 74 69 6f 6e 20 | icate.authority.and.publication. |
5a860 | 73 65 72 76 65 72 20 69 6e 73 74 65 61 64 20 6f 66 20 70 75 62 6c 69 73 68 69 6e 67 20 52 4f 41 | server.instead.of.publishing.ROA |
5a880 | 73 20 76 69 61 20 74 68 65 69 72 20 52 49 52 2e 20 54 68 69 73 20 69 73 20 61 20 73 75 62 6a 65 | s.via.their.RIR..This.is.a.subje |
5a8a0 | 63 74 20 66 61 72 20 62 65 79 6f 6e 64 20 74 68 65 20 73 63 6f 70 65 20 6f 66 20 56 79 4f 53 27 | ct.far.beyond.the.scope.of.VyOS' |
5a8c0 | 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 20 43 6f 6e 73 69 64 65 72 20 72 65 61 64 69 6e 67 | .documentation..Consider.reading |
5a8e0 | 20 61 62 6f 75 74 20 4b 72 69 6c 6c 5f 20 69 66 20 74 68 69 73 20 69 73 20 61 20 72 61 62 62 69 | .about.Krill_.if.this.is.a.rabbi |
5a900 | 74 20 68 6f 6c 65 20 79 6f 75 20 6e 65 65 64 20 6f 72 20 65 73 70 65 63 69 61 6c 6c 79 20 77 61 | t.hole.you.need.or.especially.wa |
5a920 | 6e 74 20 74 6f 20 64 69 76 65 20 64 6f 77 6e 2e 00 50 61 73 73 20 61 64 64 72 65 73 73 20 6f 66 | nt.to.dive.down..Pass.address.of |
5a940 | 20 55 6e 69 66 69 20 63 6f 6e 74 72 6f 6c 6c 65 72 20 61 74 20 60 60 31 37 32 2e 31 36 2e 31 30 | .Unifi.controller.at.``172.16.10 |
5a960 | 30 2e 31 60 60 20 74 6f 20 61 6c 6c 20 63 6c 69 65 6e 74 73 20 6f 66 20 60 60 4e 45 54 31 60 60 | 0.1``.to.all.clients.of.``NET1`` |
5a980 | 00 50 61 74 68 20 60 3c 63 6f 73 74 3e 60 20 76 61 6c 75 65 20 66 6f 72 20 53 70 61 6e 6e 69 6e | .Path.`<cost>`.value.for.Spannin |
5a9a0 | 67 20 54 72 65 65 20 50 72 6f 74 6f 63 6f 6c 2e 20 45 61 63 68 20 69 6e 74 65 72 66 61 63 65 20 | g.Tree.Protocol..Each.interface. |
5a9c0 | 69 6e 20 61 20 62 72 69 64 67 65 20 63 6f 75 6c 64 20 68 61 76 65 20 61 20 64 69 66 66 65 72 65 | in.a.bridge.could.have.a.differe |
5a9e0 | 6e 74 20 73 70 65 65 64 20 61 6e 64 20 74 68 69 73 20 76 61 6c 75 65 20 69 73 20 75 73 65 64 20 | nt.speed.and.this.value.is.used. |
5aa00 | 77 68 65 6e 20 64 65 63 69 64 69 6e 67 20 77 68 69 63 68 20 6c 69 6e 6b 20 74 6f 20 75 73 65 2e | when.deciding.which.link.to.use. |
5aa20 | 20 46 61 73 74 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 73 68 6f 75 6c 64 20 68 61 76 65 20 6c | .Faster.interfaces.should.have.l |
5aa40 | 6f 77 65 72 20 63 6f 73 74 73 2e 00 50 61 74 68 20 74 6f 20 60 3c 66 69 6c 65 3e 60 20 70 6f 69 | ower.costs..Path.to.`<file>`.poi |
5aa60 | 6e 74 69 6e 67 20 74 6f 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 | nting.to.the.certificate.authori |
5aa80 | 74 79 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 50 61 74 68 20 74 6f 20 60 3c 66 69 6c 65 3e 60 | ty.certificate..Path.to.`<file>` |
5aaa0 | 20 70 6f 69 6e 74 69 6e 67 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 73 20 63 65 72 74 69 66 69 | .pointing.to.the.servers.certifi |
5aac0 | 63 61 74 65 20 28 70 75 62 6c 69 63 20 70 6f 72 74 69 6f 6e 29 2e 00 50 65 65 72 20 2d 20 50 65 | cate.(public.portion)..Peer.-.Pe |
5aae0 | 65 72 00 50 65 65 72 20 47 72 6f 75 70 73 00 50 65 65 72 20 49 50 20 61 64 64 72 65 73 73 20 74 | er.Peer.Groups.Peer.IP.address.t |
5ab00 | 6f 20 6d 61 74 63 68 2e 00 50 65 65 72 20 50 61 72 61 6d 65 74 65 72 73 00 50 65 65 72 20 67 72 | o.match..Peer.Parameters.Peer.gr |
5ab20 | 6f 75 70 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 68 65 6c 70 20 69 6d 70 72 6f 76 65 20 73 63 | oups.are.used.to.help.improve.sc |
5ab40 | 61 6c 69 6e 67 20 62 79 20 67 65 6e 65 72 61 74 69 6e 67 20 74 68 65 20 73 61 6d 65 20 75 70 64 | aling.by.generating.the.same.upd |
5ab60 | 61 74 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 61 6c 6c 20 6d 65 6d 62 65 72 73 20 6f | ate.information.to.all.members.o |
5ab80 | 66 20 61 20 70 65 65 72 20 67 72 6f 75 70 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 69 73 20 6d | f.a.peer.group..Note.that.this.m |
5aba0 | 65 61 6e 73 20 74 68 61 74 20 74 68 65 20 72 6f 75 74 65 73 20 67 65 6e 65 72 61 74 65 64 20 62 | eans.that.the.routes.generated.b |
5abc0 | 79 20 61 20 6d 65 6d 62 65 72 20 6f 66 20 61 20 70 65 65 72 20 67 72 6f 75 70 20 77 69 6c 6c 20 | y.a.member.of.a.peer.group.will. |
5abe0 | 62 65 20 73 65 6e 74 20 62 61 63 6b 20 74 6f 20 74 68 61 74 20 6f 72 69 67 69 6e 61 74 69 6e 67 | be.sent.back.to.that.originating |
5ac00 | 20 70 65 65 72 20 77 69 74 68 20 74 68 65 20 6f 72 69 67 69 6e 61 74 6f 72 20 69 64 65 6e 74 69 | .peer.with.the.originator.identi |
5ac20 | 66 69 65 72 20 61 74 74 72 69 62 75 74 65 20 73 65 74 20 74 6f 20 69 6e 64 69 63 61 74 65 64 20 | fier.attribute.set.to.indicated. |
5ac40 | 74 68 65 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 70 65 65 72 2e 20 41 6c 6c 20 70 65 65 72 73 20 | the.originating.peer..All.peers. |
5ac60 | 6e 6f 74 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 61 20 73 70 65 63 69 66 69 63 20 70 | not.associated.with.a.specific.p |
5ac80 | 65 65 72 20 67 72 6f 75 70 20 61 72 65 20 74 72 65 61 74 65 64 20 61 73 20 62 65 6c 6f 6e 67 69 | eer.group.are.treated.as.belongi |
5aca0 | 6e 67 20 74 6f 20 61 20 64 65 66 61 75 6c 74 20 70 65 65 72 20 67 72 6f 75 70 2c 20 61 6e 64 20 | ng.to.a.default.peer.group,.and. |
5acc0 | 77 69 6c 6c 20 73 68 61 72 65 20 75 70 64 61 74 65 73 2e 00 50 65 65 72 20 74 6f 20 73 65 6e 64 | will.share.updates..Peer.to.send |
5ace0 | 20 75 6e 69 63 61 73 74 20 55 44 50 20 63 6f 6e 6e 74 72 61 63 6b 20 73 79 6e 63 20 65 6e 74 69 | .unicast.UDP.conntrack.sync.enti |
5ad00 | 72 65 73 20 74 6f 2c 20 69 66 20 6e 6f 74 20 75 73 69 6e 67 20 4d 75 6c 74 69 63 61 73 74 20 63 | res.to,.if.not.using.Multicast.c |
5ad20 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 72 6f 6d 20 61 62 6f 76 65 20 61 62 6f 76 65 2e 00 50 | onfiguration.from.above.above..P |
5ad40 | 65 65 72 73 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 50 65 72 20 64 65 66 61 75 6c 74 20 56 | eers.Configuration.Per.default.V |
5ad60 | 79 4f 53 73 20 68 61 73 20 6d 69 6e 69 6d 61 6c 20 73 79 73 6c 6f 67 20 6c 6f 67 67 69 6e 67 20 | yOSs.has.minimal.syslog.logging. |
5ad80 | 65 6e 61 62 6c 65 64 20 77 68 69 63 68 20 69 73 20 73 74 6f 72 65 64 20 61 6e 64 20 72 6f 74 61 | enabled.which.is.stored.and.rota |
5ada0 | 74 65 64 20 6c 6f 63 61 6c 6c 79 2e 20 45 72 72 6f 72 73 20 77 69 6c 6c 20 62 65 20 61 6c 77 61 | ted.locally..Errors.will.be.alwa |
5adc0 | 79 73 20 6c 6f 67 67 65 64 20 74 6f 20 61 20 6c 6f 63 61 6c 20 66 69 6c 65 2c 20 77 68 69 63 68 | ys.logged.to.a.local.file,.which |
5ade0 | 20 69 6e 63 6c 75 64 65 73 20 60 6c 6f 63 61 6c 37 60 20 65 72 72 6f 72 20 6d 65 73 73 61 67 65 | .includes.`local7`.error.message |
5ae00 | 73 2c 20 65 6d 65 72 67 65 6e 63 79 20 6d 65 73 73 61 67 65 73 20 77 69 6c 6c 20 62 65 20 73 65 | s,.emergency.messages.will.be.se |
5ae20 | 6e 74 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2c 20 74 6f 6f 2e 00 50 65 72 20 64 65 66 61 | nt.to.the.console,.too..Per.defa |
5ae40 | 75 6c 74 20 65 76 65 72 79 20 70 61 63 6b 65 74 20 69 73 20 73 61 6d 70 6c 65 64 20 28 74 68 61 | ult.every.packet.is.sampled.(tha |
5ae60 | 74 20 69 73 2c 20 74 68 65 20 73 61 6d 70 6c 69 6e 67 20 72 61 74 65 20 69 73 20 31 29 2e 00 50 | t.is,.the.sampling.rate.is.1)..P |
5ae80 | 65 72 20 64 65 66 61 75 6c 74 20 74 68 65 20 75 73 65 72 20 73 65 73 73 69 6f 6e 20 69 73 20 62 | er.default.the.user.session.is.b |
5aea0 | 65 69 6e 67 20 72 65 70 6c 61 63 65 64 20 69 66 20 61 20 73 65 63 6f 6e 64 20 61 75 74 68 65 6e | eing.replaced.if.a.second.authen |
5aec0 | 74 69 63 61 74 69 6f 6e 20 72 65 71 75 65 73 74 20 73 75 63 63 65 65 64 73 2e 20 53 75 63 68 20 | tication.request.succeeds..Such. |
5aee0 | 73 65 73 73 69 6f 6e 20 72 65 71 75 65 73 74 73 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 20 64 | session.requests.can.be.either.d |
5af00 | 65 6e 69 65 64 20 6f 72 20 61 6c 6c 6f 77 65 64 20 65 6e 74 69 72 65 6c 79 2c 20 77 68 69 63 68 | enied.or.allowed.entirely,.which |
5af20 | 20 77 6f 75 6c 64 20 61 6c 6c 6f 77 20 6d 75 6c 74 69 70 6c 65 20 73 65 73 73 69 6f 6e 73 20 66 | .would.allow.multiple.sessions.f |
5af40 | 6f 72 20 61 20 75 73 65 72 20 69 6e 20 74 68 65 20 6c 61 74 74 65 72 20 63 61 73 65 2e 20 49 66 | or.a.user.in.the.latter.case..If |
5af60 | 20 69 74 20 69 73 20 64 65 6e 69 65 64 2c 20 74 68 65 20 73 65 63 6f 6e 64 20 73 65 73 73 69 6f | .it.is.denied,.the.second.sessio |
5af80 | 6e 20 69 73 20 62 65 69 6e 67 20 72 65 6a 65 63 74 65 64 20 65 76 65 6e 20 69 66 20 74 68 65 20 | n.is.being.rejected.even.if.the. |
5afa0 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 75 63 63 65 65 64 73 2c 20 74 68 65 20 75 73 65 | authentication.succeeds,.the.use |
5afc0 | 72 20 68 61 73 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 69 74 73 20 66 69 72 73 74 20 73 65 73 | r.has.to.terminate.its.first.ses |
5afe0 | 73 69 6f 6e 20 61 6e 64 20 63 61 6e 20 74 68 65 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | sion.and.can.then.authentication |
5b000 | 20 61 67 61 69 6e 2e 00 50 65 72 20 64 65 66 61 75 6c 74 2c 20 69 6e 74 65 72 66 61 63 65 73 20 | .again..Per.default,.interfaces. |
5b020 | 75 73 65 64 20 69 6e 20 61 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 70 6f 6f 6c 20 72 65 | used.in.a.load.balancing.pool.re |
5b040 | 70 6c 61 63 65 20 74 68 65 20 73 6f 75 72 63 65 20 49 50 20 6f 66 20 65 61 63 68 20 6f 75 74 67 | place.the.source.IP.of.each.outg |
5b060 | 6f 69 6e 67 20 70 61 63 6b 65 74 20 77 69 74 68 20 69 74 73 20 6f 77 6e 20 61 64 64 72 65 73 73 | oing.packet.with.its.own.address |
5b080 | 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 72 65 70 6c 69 65 73 20 61 72 72 69 76 65 20 6f | .to.ensure.that.replies.arrive.o |
5b0a0 | 6e 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 77 6f 72 6b 73 | n.the.same.interface..This.works |
5b0c0 | 20 74 68 72 6f 75 67 68 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 67 65 6e 65 72 61 74 65 64 | .through.automatically.generated |
5b0e0 | 20 73 6f 75 72 63 65 20 4e 41 54 20 28 53 4e 41 54 29 20 72 75 6c 65 73 2c 20 74 68 65 73 65 20 | .source.NAT.(SNAT).rules,.these. |
5b100 | 72 75 6c 65 73 20 61 72 65 20 6f 6e 6c 79 20 61 70 70 6c 69 65 64 20 74 6f 20 62 61 6c 61 6e 63 | rules.are.only.applied.to.balanc |
5b120 | 65 64 20 74 72 61 66 66 69 63 2e 20 49 6e 20 63 61 73 65 73 20 77 68 65 72 65 20 74 68 69 73 20 | ed.traffic..In.cases.where.this. |
5b140 | 62 65 68 61 76 69 6f 75 72 20 69 73 20 6e 6f 74 20 64 65 73 69 72 65 64 2c 20 74 68 65 20 61 75 | behaviour.is.not.desired,.the.au |
5b160 | 74 6f 6d 61 74 69 63 20 67 65 6e 65 72 61 74 69 6f 6e 20 6f 66 20 53 4e 41 54 20 72 75 6c 65 73 | tomatic.generation.of.SNAT.rules |
5b180 | 20 63 61 6e 20 62 65 20 64 69 73 61 62 6c 65 64 3a 00 50 65 72 66 6f 72 6d 61 6e 63 65 00 50 65 | .can.be.disabled:.Performance.Pe |
5b1a0 | 72 69 6f 64 69 63 61 6c 6c 79 2c 20 61 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 20 69 73 20 73 65 | riodically,.a.hello.packet.is.se |
5b1c0 | 6e 74 20 6f 75 74 20 62 79 20 74 68 65 20 52 6f 6f 74 20 42 72 69 64 67 65 20 61 6e 64 20 74 68 | nt.out.by.the.Root.Bridge.and.th |
5b1e0 | 65 20 44 65 73 69 67 6e 61 74 65 64 20 42 72 69 64 67 65 73 2e 20 48 65 6c 6c 6f 20 70 61 63 6b | e.Designated.Bridges..Hello.pack |
5b200 | 65 74 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 69 6e 66 6f | ets.are.used.to.communicate.info |
5b220 | 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 74 6f 70 6f 6c 6f 67 79 20 74 68 72 6f 75 | rmation.about.the.topology.throu |
5b240 | 67 68 6f 75 74 20 74 68 65 20 65 6e 74 69 72 65 20 42 72 69 64 67 65 64 20 4c 6f 63 61 6c 20 41 | ghout.the.entire.Bridged.Local.A |
5b260 | 72 65 61 20 4e 65 74 77 6f 72 6b 2e 00 50 69 6e 67 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 | rea.Network..Ping.command.can.be |
5b280 | 20 69 6e 74 65 72 72 75 70 74 65 64 20 61 74 20 61 6e 79 20 67 69 76 65 6e 20 74 69 6d 65 20 75 | .interrupted.at.any.given.time.u |
5b2a0 | 73 69 6e 67 20 60 60 3c 43 74 72 6c 3e 2b 63 60 60 2e 20 41 20 62 72 69 65 66 20 73 74 61 74 69 | sing.``<Ctrl>+c``..A.brief.stati |
5b2c0 | 73 74 69 63 20 69 73 20 73 68 6f 77 6e 20 61 66 74 65 72 77 61 72 64 73 2e 00 50 69 6e 67 20 75 | stic.is.shown.afterwards..Ping.u |
5b2e0 | 73 65 73 20 49 43 4d 50 20 70 72 6f 74 6f 63 6f 6c 27 73 20 6d 61 6e 64 61 74 6f 72 79 20 45 43 | ses.ICMP.protocol's.mandatory.EC |
5b300 | 48 4f 5f 52 45 51 55 45 53 54 20 64 61 74 61 67 72 61 6d 20 74 6f 20 65 6c 69 63 69 74 20 61 6e | HO_REQUEST.datagram.to.elicit.an |
5b320 | 20 49 43 4d 50 20 45 43 48 4f 5f 52 45 53 50 4f 4e 53 45 20 66 72 6f 6d 20 61 20 68 6f 73 74 20 | .ICMP.ECHO_RESPONSE.from.a.host. |
5b340 | 6f 72 20 67 61 74 65 77 61 79 2e 20 45 43 48 4f 5f 52 45 51 55 45 53 54 20 64 61 74 61 67 72 61 | or.gateway..ECHO_REQUEST.datagra |
5b360 | 6d 73 20 28 70 69 6e 67 73 29 20 77 69 6c 6c 20 68 61 76 65 20 61 6e 20 49 50 20 61 6e 64 20 49 | ms.(pings).will.have.an.IP.and.I |
5b380 | 43 4d 50 20 68 65 61 64 65 72 2c 20 66 6f 6c 6c 6f 77 65 64 20 62 79 20 22 73 74 72 75 63 74 20 | CMP.header,.followed.by."struct. |
5b3a0 | 74 69 6d 65 76 61 6c 22 20 61 6e 64 20 61 6e 20 61 72 62 69 74 72 61 72 79 20 6e 75 6d 62 65 72 | timeval".and.an.arbitrary.number |
5b3c0 | 20 6f 66 20 70 61 64 20 62 79 74 65 73 20 75 73 65 64 20 74 6f 20 66 69 6c 6c 20 6f 75 74 20 74 | .of.pad.bytes.used.to.fill.out.t |
5b3e0 | 68 65 20 70 61 63 6b 65 74 2e 00 50 69 6e 67 69 6e 67 20 28 49 50 76 36 29 20 74 68 65 20 6f 74 | he.packet..Pinging.(IPv6).the.ot |
5b400 | 68 65 72 20 68 6f 73 74 20 61 6e 64 20 69 6e 74 65 72 63 65 70 74 69 6e 67 20 74 68 65 20 74 72 | her.host.and.intercepting.the.tr |
5b420 | 61 66 66 69 63 20 69 6e 20 60 60 65 74 68 31 60 60 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 | affic.in.``eth1``.will.show.you. |
5b440 | 74 68 65 20 63 6f 6e 74 65 6e 74 20 69 73 20 65 6e 63 72 79 70 74 65 64 2e 00 50 6c 61 63 65 20 | the.content.is.encrypted..Place. |
5b460 | 69 6e 74 65 72 66 61 63 65 20 69 6e 20 67 69 76 65 6e 20 56 52 46 20 69 6e 73 74 61 6e 63 65 2e | interface.in.given.VRF.instance. |
5b480 | 00 50 6c 61 79 20 61 6e 20 61 75 64 69 62 6c 65 20 62 65 65 70 20 74 6f 20 74 68 65 20 73 79 73 | .Play.an.audible.beep.to.the.sys |
5b4a0 | 74 65 6d 20 73 70 65 61 6b 65 72 20 77 68 65 6e 20 73 79 73 74 65 6d 20 69 73 20 72 65 61 64 79 | tem.speaker.when.system.is.ready |
5b4c0 | 2e 00 50 6c 65 61 73 65 20 62 65 20 61 77 61 72 65 2c 20 64 75 65 20 74 6f 20 61 6e 20 75 70 73 | ..Please.be.aware,.due.to.an.ups |
5b4e0 | 74 72 65 61 6d 20 62 75 67 2c 20 63 6f 6e 66 69 67 20 63 68 61 6e 67 65 73 2f 63 6f 6d 6d 69 74 | tream.bug,.config.changes/commit |
5b500 | 73 20 77 69 6c 6c 20 72 65 73 74 61 72 74 20 74 68 65 20 70 70 70 20 64 61 65 6d 6f 6e 20 61 6e | s.will.restart.the.ppp.daemon.an |
5b520 | 64 20 77 69 6c 6c 20 72 65 73 65 74 20 65 78 69 73 74 69 6e 67 20 49 50 6f 45 20 73 65 73 73 69 | d.will.reset.existing.IPoE.sessi |
5b540 | 6f 6e 73 2c 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 63 6f 6d 65 20 65 66 66 65 63 74 69 76 | ons,.in.order.to.become.effectiv |
5b560 | 65 2e 00 50 6c 65 61 73 65 20 62 65 20 61 77 61 72 65 2c 20 64 75 65 20 74 6f 20 61 6e 20 75 70 | e..Please.be.aware,.due.to.an.up |
5b580 | 73 74 72 65 61 6d 20 62 75 67 2c 20 63 6f 6e 66 69 67 20 63 68 61 6e 67 65 73 2f 63 6f 6d 6d 69 | stream.bug,.config.changes/commi |
5b5a0 | 74 73 20 77 69 6c 6c 20 72 65 73 74 61 72 74 20 74 68 65 20 70 70 70 20 64 61 65 6d 6f 6e 20 61 | ts.will.restart.the.ppp.daemon.a |
5b5c0 | 6e 64 20 77 69 6c 6c 20 72 65 73 65 74 20 65 78 69 73 74 69 6e 67 20 50 50 50 6f 45 20 63 6f 6e | nd.will.reset.existing.PPPoE.con |
5b5e0 | 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 20 63 6f 6e 6e 65 63 74 65 64 20 75 73 65 72 73 2c 20 69 | nections.from.connected.users,.i |
5b600 | 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 63 6f 6d 65 20 65 66 66 65 63 74 69 76 65 2e 00 50 6c 65 | n.order.to.become.effective..Ple |
5b620 | 61 73 65 20 72 65 66 65 72 20 74 6f 20 74 68 65 20 3a 72 65 66 3a 60 69 70 73 65 63 60 20 64 6f | ase.refer.to.the.:ref:`ipsec`.do |
5b640 | 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 69 6e 64 69 76 69 64 75 61 6c 20 49 | cumentation.for.the.individual.I |
5b660 | 50 53 65 63 20 72 65 6c 61 74 65 64 20 6f 70 74 69 6f 6e 73 2e 00 50 6c 65 61 73 65 20 72 65 66 | PSec.related.options..Please.ref |
5b680 | 65 72 20 74 6f 20 74 68 65 20 3a 72 65 66 3a 60 74 75 6e 6e 65 6c 2d 69 6e 74 65 72 66 61 63 65 | er.to.the.:ref:`tunnel-interface |
5b6a0 | 60 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 69 6e 64 69 76 69 64 75 | `.documentation.for.the.individu |
5b6c0 | 61 6c 20 74 75 6e 6e 65 6c 20 72 65 6c 61 74 65 64 20 6f 70 74 69 6f 6e 73 2e 00 50 6c 65 61 73 | al.tunnel.related.options..Pleas |
5b6e0 | 65 20 73 65 65 20 74 68 65 20 3a 72 65 66 3a 60 64 68 63 70 2d 64 6e 73 2d 71 75 69 63 6b 2d 73 | e.see.the.:ref:`dhcp-dns-quick-s |
5b700 | 74 61 72 74 60 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 50 6c 65 61 73 65 20 74 61 6b 65 | tart`.configuration..Please.take |
5b720 | 20 61 20 6c 6f 6f 6b 20 61 74 20 74 68 65 20 3a 72 65 66 3a 60 76 79 6f 73 61 70 69 60 20 70 61 | .a.look.at.the.:ref:`vyosapi`.pa |
5b740 | 67 65 20 66 6f 72 20 61 6e 20 64 65 74 61 69 6c 65 64 20 68 6f 77 2d 74 6f 2e 00 50 6c 65 61 73 | ge.for.an.detailed.how-to..Pleas |
5b760 | 65 20 74 61 6b 65 20 61 20 6c 6f 6f 6b 20 61 74 20 74 68 65 20 43 6f 6e 74 72 69 62 75 74 69 6e | e.take.a.look.at.the.Contributin |
5b780 | 67 20 47 75 69 64 65 20 66 6f 72 20 6f 75 72 20 3a 72 65 66 3a 60 64 6f 63 75 6d 65 6e 74 61 74 | g.Guide.for.our.:ref:`documentat |
5b7a0 | 69 6f 6e 60 2e 00 50 6c 65 61 73 65 20 74 61 6b 65 20 61 20 6c 6f 6f 6b 20 69 6e 20 74 68 65 20 | ion`..Please.take.a.look.in.the. |
5b7c0 | 41 75 74 6f 6d 61 74 69 6f 6e 20 73 65 63 74 69 6f 6e 20 74 6f 20 66 69 6e 64 20 73 6f 6d 65 20 | Automation.section.to.find.some. |
5b7e0 | 75 73 65 66 75 6c 6c 20 45 78 61 6d 70 6c 65 73 2e 00 50 6c 65 61 73 65 2c 20 72 65 66 65 72 20 | usefull.Examples..Please,.refer. |
5b800 | 74 6f 20 61 70 70 72 6f 70 69 61 74 65 20 73 65 63 74 69 6f 6e 20 66 6f 72 20 6d 6f 72 65 20 69 | to.appropiate.section.for.more.i |
5b820 | 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 | nformation.about.firewall.config |
5b840 | 75 72 61 74 69 6f 6e 3a 00 50 6c 65 61 73 65 2c 20 72 65 66 65 72 20 74 6f 20 61 70 70 72 6f 70 | uration:.Please,.refer.to.approp |
5b860 | 72 69 61 74 65 20 73 65 63 74 69 6f 6e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 | riate.section.for.more.informati |
5b880 | 6f 6e 20 61 62 6f 75 74 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a | on.about.firewall.configuration: |
5b8a0 | 00 50 6f 6c 69 63 69 65 73 20 61 72 65 20 75 73 65 64 20 66 6f 72 20 66 69 6c 74 65 72 69 6e 67 | .Policies.are.used.for.filtering |
5b8c0 | 20 61 6e 64 20 74 72 61 66 66 69 63 20 6d 61 6e 61 67 65 6d 65 6e 74 2e 20 57 69 74 68 20 70 6f | .and.traffic.management..With.po |
5b8e0 | 6c 69 63 69 65 73 2c 20 6e 65 74 77 6f 72 6b 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 73 20 63 | licies,.network.administrators.c |
5b900 | 6f 75 6c 64 20 66 69 6c 74 65 72 20 61 6e 64 20 74 72 65 61 74 20 74 72 61 66 66 69 63 20 61 63 | ould.filter.and.treat.traffic.ac |
5b920 | 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 69 72 20 6e 65 65 64 73 2e 00 50 6f 6c 69 63 69 65 73 | cording.to.their.needs..Policies |
5b940 | 20 66 6f 72 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 | .for.local.traffic.are.defined.i |
5b960 | 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 00 50 6f 6c 69 63 69 65 73 2c 20 69 6e 20 56 79 4f | n.this.section..Policies,.in.VyO |
5b980 | 53 2c 20 61 72 65 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 75 73 69 6e 67 20 46 52 52 20 66 69 6c | S,.are.implemented.using.FRR.fil |
5b9a0 | 74 65 72 69 6e 67 20 61 6e 64 20 72 6f 75 74 65 20 6d 61 70 73 2e 20 44 65 74 61 69 6c 65 64 20 | tering.and.route.maps..Detailed. |
5b9c0 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 46 52 52 20 63 6f 75 6c 64 20 62 65 20 66 6f 75 6e | information.of.FRR.could.be.foun |
5b9e0 | 64 20 69 6e 20 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 66 72 72 6f 75 74 69 6e 67 2e 6f 72 67 2f 00 | d.in.http://docs.frrouting.org/. |
5ba00 | 50 6f 6c 69 63 79 00 50 6f 6c 69 63 79 20 53 65 63 74 69 6f 6e 73 00 50 6f 6c 69 63 79 20 66 6f | Policy.Policy.Sections.Policy.fo |
5ba20 | 72 20 63 68 65 63 6b 69 6e 67 20 74 61 72 67 65 74 73 00 50 6f 6c 69 63 79 20 74 6f 20 74 72 61 | r.checking.targets.Policy.to.tra |
5ba40 | 63 6b 20 70 72 65 76 69 6f 75 73 6c 79 20 65 73 74 61 62 6c 69 73 68 65 64 20 63 6f 6e 6e 65 63 | ck.previously.established.connec |
5ba60 | 74 69 6f 6e 73 2e 00 50 6f 6c 69 63 79 2d 42 61 73 65 64 20 52 6f 75 74 69 6e 67 20 77 69 74 68 | tions..Policy-Based.Routing.with |
5ba80 | 20 6d 75 6c 74 69 70 6c 65 20 49 53 50 20 75 70 6c 69 6e 6b 73 20 28 73 6f 75 72 63 65 20 2e 2f | .multiple.ISP.uplinks.(source../ |
5baa0 | 64 72 61 77 2e 69 6f 2f 70 62 72 5f 65 78 61 6d 70 6c 65 5f 31 2e 64 72 61 77 69 6f 29 00 50 6f | draw.io/pbr_example_1.drawio).Po |
5bac0 | 72 74 20 47 72 6f 75 70 73 00 50 6f 72 74 20 4d 69 72 72 6f 72 20 28 53 50 41 4e 29 00 50 6f 72 | rt.Groups.Port.Mirror.(SPAN).Por |
5bae0 | 74 20 66 6f 72 20 44 79 6e 61 6d 69 63 20 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 45 78 74 65 | t.for.Dynamic.Authorization.Exte |
5bb00 | 6e 73 69 6f 6e 20 73 65 72 76 65 72 20 28 44 4d 2f 43 6f 41 29 00 50 6f 72 74 20 6e 61 6d 65 20 | nsion.server.(DM/CoA).Port.name. |
5bb20 | 61 6e 64 20 64 65 73 63 72 69 70 74 69 6f 6e 00 50 6f 72 74 20 6e 75 6d 62 65 72 20 75 73 65 64 | and.description.Port.number.used |
5bb40 | 20 62 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 2c 20 64 65 66 61 75 6c 74 20 69 73 20 60 60 39 32 37 | .by.connection,.default.is.``927 |
5bb60 | 33 60 60 00 50 6f 72 74 20 6e 75 6d 62 65 72 20 75 73 65 64 20 62 79 20 63 6f 6e 6e 65 63 74 69 | 3``.Port.number.used.by.connecti |
5bb80 | 6f 6e 2e 00 50 6f 72 74 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f 72 20 48 54 54 50 53 20 72 65 71 | on..Port.to.listen.for.HTTPS.req |
5bba0 | 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 20 34 34 33 00 50 6f 72 74 69 6f 6e 73 20 6f 66 20 74 | uests;.default.443.Portions.of.t |
5bbc0 | 68 65 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 72 65 20 56 4c 41 4e 2d 61 77 61 72 65 20 | he.network.which.are.VLAN-aware. |
5bbe0 | 28 69 2e 65 2e 2c 20 49 45 45 45 20 38 30 32 2e 31 71 5f 20 63 6f 6e 66 6f 72 6d 61 6e 74 29 20 | (i.e.,.IEEE.802.1q_.conformant). |
5bc00 | 63 61 6e 20 69 6e 63 6c 75 64 65 20 56 4c 41 4e 20 74 61 67 73 2e 20 57 68 65 6e 20 61 20 66 72 | can.include.VLAN.tags..When.a.fr |
5bc20 | 61 6d 65 20 65 6e 74 65 72 73 20 74 68 65 20 56 4c 41 4e 2d 61 77 61 72 65 20 70 6f 72 74 69 6f | ame.enters.the.VLAN-aware.portio |
5bc40 | 6e 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 2c 20 61 20 74 61 67 20 69 73 20 61 64 64 65 64 | n.of.the.network,.a.tag.is.added |
5bc60 | 20 74 6f 20 72 65 70 72 65 73 65 6e 74 20 74 68 65 20 56 4c 41 4e 20 6d 65 6d 62 65 72 73 68 69 | .to.represent.the.VLAN.membershi |
5bc80 | 70 2e 20 45 61 63 68 20 66 72 61 6d 65 20 6d 75 73 74 20 62 65 20 64 69 73 74 69 6e 67 75 69 73 | p..Each.frame.must.be.distinguis |
5bca0 | 68 61 62 6c 65 20 61 73 20 62 65 69 6e 67 20 77 69 74 68 69 6e 20 65 78 61 63 74 6c 79 20 6f 6e | hable.as.being.within.exactly.on |
5bcc0 | 65 20 56 4c 41 4e 2e 20 41 20 66 72 61 6d 65 20 69 6e 20 74 68 65 20 56 4c 41 4e 2d 61 77 61 72 | e.VLAN..A.frame.in.the.VLAN-awar |
5bce0 | 65 20 70 6f 72 74 69 6f 6e 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 74 68 61 74 20 64 6f | e.portion.of.the.network.that.do |
5bd00 | 65 73 20 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 61 20 56 4c 41 4e 20 74 61 67 20 69 73 20 61 73 73 | es.not.contain.a.VLAN.tag.is.ass |
5bd20 | 75 6d 65 64 20 74 6f 20 62 65 20 66 6c 6f 77 69 6e 67 20 6f 6e 20 74 68 65 20 6e 61 74 69 76 65 | umed.to.be.flowing.on.the.native |
5bd40 | 20 56 4c 41 4e 2e 00 50 72 65 2d 73 68 61 72 65 64 20 6b 65 79 73 00 50 72 65 63 65 64 65 6e 63 | .VLAN..Pre-shared.keys.Precedenc |
5bd60 | 65 00 50 72 65 65 6d 70 74 69 6f 6e 00 50 72 65 66 65 72 20 61 20 73 70 65 63 69 66 69 63 20 72 | e.Preemption.Prefer.a.specific.r |
5bd80 | 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 72 6f 75 74 65 73 20 6f 76 65 72 20 61 6e 6f 74 | outing.protocol.routes.over.anot |
5bda0 | 68 65 72 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 72 75 6e 6e 69 6e 67 20 6f 6e 20 | her.routing.protocol.running.on. |
5bdc0 | 74 68 65 20 73 61 6d 65 20 72 6f 75 74 65 72 2e 00 50 72 65 66 65 72 20 68 69 67 68 65 72 20 6c | the.same.router..Prefer.higher.l |
5bde0 | 6f 63 61 6c 20 70 72 65 66 65 72 65 6e 63 65 20 72 6f 75 74 65 73 20 74 6f 20 6c 6f 77 65 72 2e | ocal.preference.routes.to.lower. |
5be00 | 00 50 72 65 66 65 72 20 68 69 67 68 65 72 20 6c 6f 63 61 6c 20 77 65 69 67 68 74 20 72 6f 75 74 | .Prefer.higher.local.weight.rout |
5be20 | 65 73 20 74 6f 20 6c 6f 77 65 72 20 72 6f 75 74 65 73 2e 00 50 72 65 66 65 72 20 6c 6f 63 61 6c | es.to.lower.routes..Prefer.local |
5be40 | 20 72 6f 75 74 65 73 20 28 73 74 61 74 69 63 73 2c 20 61 67 67 72 65 67 61 74 65 73 2c 20 72 65 | .routes.(statics,.aggregates,.re |
5be60 | 64 69 73 74 72 69 62 75 74 65 64 29 20 74 6f 20 72 65 63 65 69 76 65 64 20 72 6f 75 74 65 73 2e | distributed).to.received.routes. |
5be80 | 00 50 72 65 66 65 72 20 73 68 6f 72 74 65 73 74 20 68 6f 70 2d 63 6f 75 6e 74 20 41 53 5f 50 41 | .Prefer.shortest.hop-count.AS_PA |
5bea0 | 54 48 73 2e 00 50 72 65 66 65 72 20 74 68 65 20 6c 6f 77 65 73 74 20 6f 72 69 67 69 6e 20 74 79 | THs..Prefer.the.lowest.origin.ty |
5bec0 | 70 65 20 72 6f 75 74 65 2e 20 54 68 61 74 20 69 73 2c 20 70 72 65 66 65 72 20 49 47 50 20 6f 72 | pe.route..That.is,.prefer.IGP.or |
5bee0 | 69 67 69 6e 20 72 6f 75 74 65 73 20 74 6f 20 45 47 50 2c 20 74 6f 20 49 6e 63 6f 6d 70 6c 65 74 | igin.routes.to.EGP,.to.Incomplet |
5bf00 | 65 20 72 6f 75 74 65 73 2e 00 50 72 65 66 65 72 20 74 68 65 20 72 6f 75 74 65 20 72 65 63 65 69 | e.routes..Prefer.the.route.recei |
5bf20 | 76 65 64 20 66 72 6f 6d 20 61 6e 20 65 78 74 65 72 6e 61 6c 2c 20 65 42 47 50 20 70 65 65 72 20 | ved.from.an.external,.eBGP.peer. |
5bf40 | 6f 76 65 72 20 72 6f 75 74 65 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 6f 74 68 65 72 20 | over.routes.received.from.other. |
5bf60 | 74 79 70 65 73 20 6f 66 20 70 65 65 72 73 2e 00 50 72 65 66 65 72 20 74 68 65 20 72 6f 75 74 65 | types.of.peers..Prefer.the.route |
5bf80 | 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 74 68 65 20 70 65 65 72 20 77 69 74 68 20 74 68 65 | .received.from.the.peer.with.the |
5bfa0 | 20 68 69 67 68 65 72 20 74 72 61 6e 73 70 6f 72 74 20 6c 61 79 65 72 20 61 64 64 72 65 73 73 2c | .higher.transport.layer.address, |
5bfc0 | 20 61 73 20 61 20 6c 61 73 74 2d 72 65 73 6f 72 74 20 74 69 65 2d 62 72 65 61 6b 65 72 2e 00 50 | .as.a.last-resort.tie-breaker..P |
5bfe0 | 72 65 66 65 72 20 74 68 65 20 72 6f 75 74 65 20 77 69 74 68 20 74 68 65 20 6c 6f 77 65 72 20 49 | refer.the.route.with.the.lower.I |
5c000 | 47 50 20 63 6f 73 74 2e 00 50 72 65 66 65 72 20 74 68 65 20 72 6f 75 74 65 20 77 69 74 68 20 74 | GP.cost..Prefer.the.route.with.t |
5c020 | 68 65 20 6c 6f 77 65 73 74 20 60 72 6f 75 74 65 72 2d 49 44 60 2e 20 49 66 20 74 68 65 20 72 6f | he.lowest.`router-ID`..If.the.ro |
5c040 | 75 74 65 20 68 61 73 20 61 6e 20 60 4f 52 49 47 49 4e 41 54 4f 52 5f 49 44 60 20 61 74 74 72 69 | ute.has.an.`ORIGINATOR_ID`.attri |
5c060 | 62 75 74 65 2c 20 74 68 72 6f 75 67 68 20 69 42 47 50 20 72 65 66 6c 65 63 74 69 6f 6e 2c 20 74 | bute,.through.iBGP.reflection,.t |
5c080 | 68 65 6e 20 74 68 61 74 20 72 6f 75 74 65 72 20 49 44 20 69 73 20 75 73 65 64 2c 20 6f 74 68 65 | hen.that.router.ID.is.used,.othe |
5c0a0 | 72 77 69 73 65 20 74 68 65 20 60 72 6f 75 74 65 72 2d 49 44 60 20 6f 66 20 74 68 65 20 70 65 65 | rwise.the.`router-ID`.of.the.pee |
5c0c0 | 72 20 74 68 65 20 72 6f 75 74 65 20 77 61 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 69 73 | r.the.route.was.received.from.is |
5c0e0 | 20 75 73 65 64 2e 00 50 72 65 66 65 72 65 6e 63 65 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 | .used..Preference.associated.wit |
5c100 | 68 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 72 00 50 72 65 66 69 78 20 43 6f 6e 76 | h.the.default.router.Prefix.Conv |
5c120 | 65 72 73 69 6f 6e 00 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 00 50 72 65 66 69 78 20 | ersion.Prefix.Delegation.Prefix. |
5c140 | 4c 69 73 74 20 50 6f 6c 69 63 79 00 50 72 65 66 69 78 20 4c 69 73 74 73 00 50 72 65 66 69 78 20 | List.Policy.Prefix.Lists.Prefix. |
5c160 | 63 61 6e 20 6e 6f 74 20 62 65 20 75 73 65 64 20 66 6f 72 20 6f 6e 2d 6c 69 6e 6b 20 64 65 74 65 | can.not.be.used.for.on-link.dete |
5c180 | 72 6d 69 6e 61 74 69 6f 6e 00 50 72 65 66 69 78 20 63 61 6e 20 6e 6f 74 20 62 65 20 75 73 65 64 | rmination.Prefix.can.not.be.used |
5c1a0 | 20 66 6f 72 20 73 74 61 74 65 6c 65 73 73 20 61 64 64 72 65 73 73 20 61 75 74 6f 2d 63 6f 6e 66 | .for.stateless.address.auto-conf |
5c1c0 | 69 67 75 72 61 74 69 6f 6e 00 50 72 65 66 69 78 20 66 69 6c 74 65 72 69 6e 67 20 63 61 6e 20 62 | iguration.Prefix.filtering.can.b |
5c1e0 | 65 20 64 6f 6e 65 20 75 73 69 6e 67 20 70 72 65 66 69 78 2d 6c 69 73 74 20 61 6e 64 20 70 72 65 | e.done.using.prefix-list.and.pre |
5c200 | 66 69 78 2d 6c 69 73 74 36 2e 00 50 72 65 66 69 78 20 6c 65 6e 67 74 68 20 69 6e 20 69 6e 74 65 | fix-list6..Prefix.length.in.inte |
5c220 | 72 66 61 63 65 20 6d 75 73 74 20 62 65 20 65 71 75 61 6c 20 6f 72 20 62 69 67 67 65 72 20 28 69 | rface.must.be.equal.or.bigger.(i |
5c240 | 2e 65 2e 20 73 6d 61 6c 6c 65 72 20 6e 65 74 77 6f 72 6b 29 20 74 68 61 6e 20 70 72 65 66 69 78 | .e..smaller.network).than.prefix |
5c260 | 20 6c 65 6e 67 74 68 20 69 6e 20 6e 65 74 77 6f 72 6b 20 73 74 61 74 65 6d 65 6e 74 2e 20 46 6f | .length.in.network.statement..Fo |
5c280 | 72 20 65 78 61 6d 70 6c 65 20 73 74 61 74 65 6d 65 6e 74 20 61 62 6f 76 65 20 64 6f 65 73 6e 27 | r.example.statement.above.doesn' |
5c2a0 | 74 20 65 6e 61 62 6c 65 20 6f 73 70 66 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 | t.enable.ospf.on.interface.with. |
5c2c0 | 61 64 64 72 65 73 73 20 31 39 32 2e 31 36 38 2e 31 2e 31 2f 32 33 2c 20 62 75 74 20 69 74 20 64 | address.192.168.1.1/23,.but.it.d |
5c2e0 | 6f 65 73 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 61 64 64 72 65 73 73 20 31 39 | oes.on.interface.with.address.19 |
5c300 | 32 2e 31 36 38 2e 31 2e 31 32 39 2f 32 35 2e 00 50 72 65 66 69 78 20 6c 69 73 74 73 20 70 72 6f | 2.168.1.129/25..Prefix.lists.pro |
5c320 | 76 69 64 65 73 20 74 68 65 20 6d 6f 73 74 20 70 6f 77 65 72 66 75 6c 20 70 72 65 66 69 78 20 62 | vides.the.most.powerful.prefix.b |
5c340 | 61 73 65 64 20 66 69 6c 74 65 72 69 6e 67 20 6d 65 63 68 61 6e 69 73 6d 2e 20 49 6e 20 61 64 64 | ased.filtering.mechanism..In.add |
5c360 | 69 74 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 2d 6c 69 73 74 20 66 75 6e 63 74 69 6f 6e 61 6c 69 | ition.to.access-list.functionali |
5c380 | 74 79 2c 20 69 70 20 70 72 65 66 69 78 2d 6c 69 73 74 20 68 61 73 20 70 72 65 66 69 78 20 6c 65 | ty,.ip.prefix-list.has.prefix.le |
5c3a0 | 6e 67 74 68 20 72 61 6e 67 65 20 73 70 65 63 69 66 69 63 61 74 69 6f 6e 2e 00 50 72 65 66 69 78 | ngth.range.specification..Prefix |
5c3c0 | 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 2e 00 50 72 65 66 69 78 65 73 00 50 72 65 70 | .to.match.against..Prefixes.Prep |
5c3e0 | 65 6e 64 20 74 68 65 20 65 78 69 73 74 69 6e 67 20 6c 61 73 74 20 41 53 20 6e 75 6d 62 65 72 20 | end.the.existing.last.AS.number. |
5c400 | 28 74 68 65 20 6c 65 66 74 6d 6f 73 74 20 41 53 4e 29 20 74 6f 20 74 68 65 20 41 53 5f 50 41 54 | (the.leftmost.ASN).to.the.AS_PAT |
5c420 | 48 2e 00 50 72 65 70 65 6e 64 20 74 68 65 20 67 69 76 65 6e 20 73 74 72 69 6e 67 20 6f 66 20 41 | H..Prepend.the.given.string.of.A |
5c440 | 53 20 6e 75 6d 62 65 72 73 20 74 6f 20 74 68 65 20 41 53 5f 50 41 54 48 20 6f 66 20 74 68 65 20 | S.numbers.to.the.AS_PATH.of.the. |
5c460 | 42 47 50 20 70 61 74 68 27 73 20 4e 4c 52 49 2e 00 50 72 69 6e 63 69 70 6c 65 20 6f 66 20 53 4e | BGP.path's.NLRI..Principle.of.SN |
5c480 | 4d 50 20 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 00 50 72 69 6e 74 20 61 20 73 75 6d 6d 61 72 79 | MP.Communication.Print.a.summary |
5c4a0 | 20 6f 66 20 6e 65 69 67 68 62 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 6f 72 20 74 68 65 | .of.neighbor.connections.for.the |
5c4c0 | 20 73 70 65 63 69 66 69 65 64 20 41 46 49 2f 53 41 46 49 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 2e | .specified.AFI/SAFI.combination. |
5c4e0 | 00 50 72 69 6e 74 20 61 63 74 69 76 65 20 49 50 56 34 20 6f 72 20 49 50 56 36 20 72 6f 75 74 65 | .Print.active.IPV4.or.IPV6.route |
5c500 | 73 20 61 64 76 65 72 74 69 73 65 64 20 76 69 61 20 74 68 65 20 56 50 4e 20 53 41 46 49 2e 00 50 | s.advertised.via.the.VPN.SAFI..P |
5c520 | 72 69 6f 72 69 74 79 00 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 00 50 72 69 6f 72 69 74 79 20 | riority.Priority.Queue.Priority. |
5c540 | 51 75 65 75 65 2c 20 61 73 20 6f 74 68 65 72 20 6e 6f 6e 2d 73 68 61 70 69 6e 67 20 70 6f 6c 69 | Queue,.as.other.non-shaping.poli |
5c560 | 63 69 65 73 2c 20 69 73 20 6f 6e 6c 79 20 75 73 65 66 75 6c 20 69 66 20 79 6f 75 72 20 6f 75 74 | cies,.is.only.useful.if.your.out |
5c580 | 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 72 65 61 6c 6c 79 20 66 75 6c 6c 2e 20 | going.interface.is.really.full.. |
5c5a0 | 49 66 20 69 74 20 69 73 20 6e 6f 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 6e 6f 74 20 6f 77 6e 20 | If.it.is.not,.VyOS.will.not.own. |
5c5c0 | 74 68 65 20 71 75 65 75 65 20 61 6e 64 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 77 69 6c | the.queue.and.Priority.Queue.wil |
5c5e0 | 6c 20 68 61 76 65 20 6e 6f 20 65 66 66 65 63 74 2e 20 49 66 20 74 68 65 72 65 20 69 73 20 62 61 | l.have.no.effect..If.there.is.ba |
5c600 | 6e 64 77 69 64 74 68 20 61 76 61 69 6c 61 62 6c 65 20 6f 6e 20 74 68 65 20 70 68 79 73 69 63 61 | ndwidth.available.on.the.physica |
5c620 | 6c 20 6c 69 6e 6b 2c 20 79 6f 75 20 63 61 6e 20 65 6d 62 65 64 5f 20 50 72 69 6f 72 69 74 79 20 | l.link,.you.can.embed_.Priority. |
5c640 | 51 75 65 75 65 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 66 75 6c 20 73 68 61 70 69 6e 67 20 70 6f | Queue.into.a.classful.shaping.po |
5c660 | 6c 69 63 79 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 69 74 20 6f 77 6e 73 20 74 68 65 20 71 75 | licy.to.make.sure.it.owns.the.qu |
5c680 | 65 75 65 2e 20 49 6e 20 74 68 61 74 20 63 61 73 65 20 70 61 63 6b 65 74 73 20 63 61 6e 20 62 65 | eue..In.that.case.packets.can.be |
5c6a0 | 20 70 72 69 6f 72 69 74 69 7a 65 64 20 62 61 73 65 64 20 6f 6e 20 44 53 43 50 2e 00 50 72 69 76 | .prioritized.based.on.DSCP..Priv |
5c6c0 | 61 74 65 20 56 4c 41 4e 20 70 72 6f 78 79 20 61 72 70 2e 20 42 61 73 69 63 61 6c 6c 79 20 61 6c | ate.VLAN.proxy.arp..Basically.al |
5c6e0 | 6c 6f 77 20 70 72 6f 78 79 20 61 72 70 20 72 65 70 6c 69 65 73 20 62 61 63 6b 20 74 6f 20 74 68 | low.proxy.arp.replies.back.to.th |
5c700 | 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 20 28 66 72 6f 6d 20 77 68 69 63 68 20 74 68 65 | e.same.interface.(from.which.the |
5c720 | 20 41 52 50 20 72 65 71 75 65 73 74 2f 73 6f 6c 69 63 69 74 61 74 69 6f 6e 20 77 61 73 20 72 65 | .ARP.request/solicitation.was.re |
5c740 | 63 65 69 76 65 64 29 2e 00 50 72 6f 66 69 6c 65 20 67 65 6e 65 72 61 74 69 6f 6e 20 68 61 70 70 | ceived)..Profile.generation.happ |
5c760 | 65 6e 73 20 66 72 6f 6d 20 74 68 65 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6c 65 76 65 6c 20 61 | ens.from.the.operational.level.a |
5c780 | 6e 64 20 69 73 20 61 73 20 73 69 6d 70 6c 65 20 61 73 20 69 73 73 75 69 6e 67 20 74 68 65 20 66 | nd.is.as.simple.as.issuing.the.f |
5c7a0 | 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 72 65 61 74 65 20 61 20 70 72 6f | ollowing.command.to.create.a.pro |
5c7c0 | 66 69 6c 65 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 49 4b 45 76 32 20 61 63 63 | file.to.connect.to.the.IKEv2.acc |
5c7e0 | 65 73 73 20 73 65 72 76 65 72 20 61 74 20 60 60 76 70 6e 2e 76 79 6f 73 2e 6e 65 74 60 60 20 77 | ess.server.at.``vpn.vyos.net``.w |
5c800 | 69 74 68 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 60 60 | ith.the.configuration.for.the.`` |
5c820 | 72 77 60 60 20 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 67 72 | rw``.remote-access.connection.gr |
5c840 | 6f 75 70 2e 00 50 72 6f 6d 65 74 68 65 75 73 2d 63 6c 69 65 6e 74 00 50 72 6f 74 65 63 74 73 20 | oup..Prometheus-client.Protects. |
5c860 | 68 6f 73 74 20 66 72 6f 6d 20 62 72 75 74 65 2d 66 6f 72 63 65 20 61 74 74 61 63 6b 73 20 61 67 | host.from.brute-force.attacks.ag |
5c880 | 61 69 6e 73 74 20 53 53 48 2e 20 4c 6f 67 20 6d 65 73 73 61 67 65 73 20 61 72 65 20 70 61 72 73 | ainst.SSH..Log.messages.are.pars |
5c8a0 | 65 64 2c 20 6c 69 6e 65 2d 62 79 2d 6c 69 6e 65 2c 20 66 6f 72 20 72 65 63 6f 67 6e 69 7a 65 64 | ed,.line-by-line,.for.recognized |
5c8c0 | 20 70 61 74 74 65 72 6e 73 2e 20 49 66 20 61 6e 20 61 74 74 61 63 6b 2c 20 73 75 63 68 20 61 73 | .patterns..If.an.attack,.such.as |
5c8e0 | 20 73 65 76 65 72 61 6c 20 6c 6f 67 69 6e 20 66 61 69 6c 75 72 65 73 20 77 69 74 68 69 6e 20 61 | .several.login.failures.within.a |
5c900 | 20 66 65 77 20 73 65 63 6f 6e 64 73 2c 20 69 73 20 64 65 74 65 63 74 65 64 2c 20 74 68 65 20 6f | .few.seconds,.is.detected,.the.o |
5c920 | 66 66 65 6e 64 69 6e 67 20 49 50 20 69 73 20 62 6c 6f 63 6b 65 64 2e 20 4f 66 66 65 6e 64 65 72 | ffending.IP.is.blocked..Offender |
5c940 | 73 20 61 72 65 20 75 6e 62 6c 6f 63 6b 65 64 20 61 66 74 65 72 20 61 20 73 65 74 20 69 6e 74 65 | s.are.unblocked.after.a.set.inte |
5c960 | 72 76 61 6c 2e 00 50 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 77 68 69 63 68 20 65 78 70 65 63 74 20 | rval..Protocol.for.which.expect. |
5c980 | 65 6e 74 72 69 65 73 20 6e 65 65 64 20 74 6f 20 62 65 20 73 79 6e 63 68 72 6f 6e 69 7a 65 64 2e | entries.need.to.be.synchronized. |
5c9a0 | 00 50 72 6f 74 6f 63 6f 6c 73 00 50 72 6f 74 6f 63 6f 6c 73 20 61 72 65 3a 20 74 63 70 2c 20 73 | .Protocols.Protocols.are:.tcp,.s |
5c9c0 | 63 74 70 2c 20 64 63 63 70 2c 20 75 64 70 2c 20 69 63 6d 70 20 61 6e 64 20 69 70 76 36 2d 69 63 | ctp,.dccp,.udp,.icmp.and.ipv6-ic |
5c9e0 | 6d 70 2e 00 50 72 6f 76 69 64 65 20 54 46 54 50 20 73 65 72 76 65 72 20 6c 69 73 74 65 6e 69 6e | mp..Provide.TFTP.server.listenin |
5ca00 | 67 20 6f 6e 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 | g.on.both.IPv4.and.IPv6.addresse |
5ca20 | 73 20 60 60 31 39 32 2e 30 2e 32 2e 31 60 60 20 61 6e 64 20 60 60 32 30 30 31 3a 64 62 38 3a 3a | s.``192.0.2.1``.and.``2001:db8:: |
5ca40 | 31 60 60 20 73 65 72 76 69 6e 67 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 66 72 6f 6d 20 60 60 2f | 1``.serving.the.content.from.``/ |
5ca60 | 63 6f 6e 66 69 67 2f 74 66 74 70 62 6f 6f 74 60 60 2e 20 55 70 6c 6f 61 64 69 6e 67 20 76 69 61 | config/tftpboot``..Uploading.via |
5ca80 | 20 54 46 54 50 20 74 6f 20 74 68 69 73 20 73 65 72 76 65 72 20 69 73 20 64 69 73 61 62 6c 65 64 | .TFTP.to.this.server.is.disabled |
5caa0 | 2e 00 50 72 6f 76 69 64 65 20 61 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 | ..Provide.a.IPv4.or.IPv6.address |
5cac0 | 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 00 50 72 6f 76 69 64 65 20 61 20 49 50 76 | .group.description.Provide.a.IPv |
5cae0 | 34 20 6f 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 | 4.or.IPv6.network.group.descript |
5cb00 | 69 6f 6e 2e 00 50 72 6f 76 69 64 65 20 61 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 65 | ion..Provide.a.description.for.e |
5cb20 | 61 63 68 20 72 75 6c 65 2e 00 50 72 6f 76 69 64 65 20 61 20 64 65 73 63 72 69 70 74 69 6f 6e 20 | ach.rule..Provide.a.description. |
5cb40 | 74 6f 20 74 68 65 20 66 6c 6f 77 20 74 61 62 6c 65 2e 00 50 72 6f 76 69 64 65 20 61 20 64 6f 6d | to.the.flow.table..Provide.a.dom |
5cb60 | 61 69 6e 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 50 72 6f 76 69 64 65 20 61 | ain.group.description..Provide.a |
5cb80 | 20 6d 61 63 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 50 72 6f 76 69 64 65 20 | .mac.group.description..Provide. |
5cba0 | 61 20 70 6f 72 74 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 50 72 6f 76 69 64 | a.port.group.description..Provid |
5cbc0 | 65 20 61 20 72 75 6c 65 2d 73 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 74 6f 20 61 20 63 75 | e.a.rule-set.description.to.a.cu |
5cbe0 | 73 74 6f 6d 20 66 69 72 65 77 61 6c 6c 20 63 68 61 69 6e 2e 00 50 72 6f 76 69 64 65 20 61 20 72 | stom.firewall.chain..Provide.a.r |
5cc00 | 75 6c 65 2d 73 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 50 72 6f 76 69 64 65 20 61 6e 20 | ule-set.description..Provide.an. |
5cc20 | 49 50 76 34 20 6f 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 20 67 72 6f 75 70 20 64 65 73 63 72 | IPv4.or.IPv6.network.group.descr |
5cc40 | 69 70 74 69 6f 6e 2e 00 50 72 6f 76 69 64 65 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 67 72 6f | iption..Provide.an.interface.gro |
5cc60 | 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 00 50 72 6f 76 69 64 65 72 20 2d 20 43 75 73 74 6f 6d | up.description.Provider.-.Custom |
5cc80 | 65 72 00 50 72 6f 76 69 64 65 73 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 63 6f 68 65 | er.Provides.a.backbone.area.cohe |
5cca0 | 72 65 6e 63 65 20 62 79 20 76 69 72 74 75 61 6c 20 6c 69 6e 6b 20 65 73 74 61 62 6c 69 73 68 6d | rence.by.virtual.link.establishm |
5ccc0 | 65 6e 74 2e 00 50 72 6f 76 69 64 65 73 20 61 20 70 65 72 2d 64 65 76 69 63 65 20 63 6f 6e 74 72 | ent..Provides.a.per-device.contr |
5cce0 | 6f 6c 20 74 6f 20 65 6e 61 62 6c 65 2f 64 69 73 61 62 6c 65 20 74 68 65 20 74 68 72 65 61 64 65 | ol.to.enable/disable.the.threade |
5cd00 | 64 20 6d 6f 64 65 20 66 6f 72 20 61 6c 6c 20 74 68 65 20 4e 41 50 49 20 69 6e 73 74 61 6e 63 65 | d.mode.for.all.the.NAPI.instance |
5cd20 | 73 20 6f 66 20 74 68 65 20 67 69 76 65 6e 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 2c 20 77 | s.of.the.given.network.device,.w |
5cd40 | 69 74 68 6f 75 74 20 74 68 65 20 6e 65 65 64 20 66 6f 72 20 61 20 64 65 76 69 63 65 20 75 70 2f | ithout.the.need.for.a.device.up/ |
5cd60 | 64 6f 77 6e 2e 00 50 72 6f 78 79 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 65 74 68 6f | down..Proxy.authentication.metho |
5cd80 | 64 2c 20 63 75 72 72 65 6e 74 6c 79 20 6f 6e 6c 79 20 4c 44 41 50 20 69 73 20 73 75 70 70 6f 72 | d,.currently.only.LDAP.is.suppor |
5cda0 | 74 65 64 2e 00 50 73 65 75 64 6f 20 45 74 68 65 72 6e 65 74 2f 4d 41 43 56 4c 41 4e 20 6f 70 74 | ted..Pseudo.Ethernet/MACVLAN.opt |
5cdc0 | 69 6f 6e 73 00 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 | ions.Pseudo-Ethernet.interfaces. |
5cde0 | 63 61 6e 20 6e 6f 74 20 62 65 20 72 65 61 63 68 65 64 20 66 72 6f 6d 20 79 6f 75 72 20 69 6e 74 | can.not.be.reached.from.your.int |
5ce00 | 65 72 6e 61 6c 20 68 6f 73 74 2e 20 54 68 69 73 20 6d 65 61 6e 73 20 74 68 61 74 20 79 6f 75 20 | ernal.host..This.means.that.you. |
5ce20 | 63 61 6e 20 6e 6f 74 20 74 72 79 20 74 6f 20 70 69 6e 67 20 61 20 50 73 65 75 64 6f 2d 45 74 68 | can.not.try.to.ping.a.Pseudo-Eth |
5ce40 | 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 20 66 72 6f 6d 20 74 68 65 20 68 6f 73 74 20 73 79 | ernet.interface.from.the.host.sy |
5ce60 | 73 74 65 6d 20 6f 6e 20 77 68 69 63 68 20 69 74 20 69 73 20 64 65 66 69 6e 65 64 2e 20 54 68 65 | stem.on.which.it.is.defined..The |
5ce80 | 20 70 69 6e 67 20 77 69 6c 6c 20 62 65 20 6c 6f 73 74 2e 00 50 73 65 75 64 6f 2d 45 74 68 65 72 | .ping.will.be.lost..Pseudo-Ether |
5cea0 | 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 6d 61 79 20 6e 6f 74 20 77 6f 72 6b 20 69 6e 20 65 | net.interfaces.may.not.work.in.e |
5cec0 | 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 77 68 69 63 68 20 65 78 70 65 63 74 20 61 20 3a 61 62 62 72 | nvironments.which.expect.a.:abbr |
5cee0 | 3a 60 4e 49 43 20 28 4e 65 74 77 6f 72 6b 20 49 6e 74 65 72 66 61 63 65 20 43 61 72 64 29 60 20 | :`NIC.(Network.Interface.Card)`. |
5cf00 | 74 6f 20 6f 6e 6c 79 20 68 61 76 65 20 61 20 73 69 6e 67 6c 65 20 61 64 64 72 65 73 73 2e 20 54 | to.only.have.a.single.address..T |
5cf20 | 68 69 73 20 61 70 70 6c 69 65 73 20 74 6f 3a 20 2d 20 56 4d 77 61 72 65 20 6d 61 63 68 69 6e 65 | his.applies.to:.-.VMware.machine |
5cf40 | 73 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 73 65 74 74 69 6e 67 73 20 2d 20 4e 65 74 77 6f | s.using.default.settings.-.Netwo |
5cf60 | 72 6b 20 73 77 69 74 63 68 65 73 20 77 69 74 68 20 73 65 63 75 72 69 74 79 20 73 65 74 74 69 6e | rk.switches.with.security.settin |
5cf80 | 67 73 20 61 6c 6c 6f 77 69 6e 67 20 6f 6e 6c 79 20 61 20 73 69 6e 67 6c 65 20 4d 41 43 20 61 64 | gs.allowing.only.a.single.MAC.ad |
5cfa0 | 64 72 65 73 73 20 2d 20 78 44 53 4c 20 6d 6f 64 65 6d 73 20 74 68 61 74 20 74 72 79 20 74 6f 20 | dress.-.xDSL.modems.that.try.to. |
5cfc0 | 6c 65 61 72 6e 20 74 68 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 4e 49 43 | learn.the.MAC.address.of.the.NIC |
5cfe0 | 00 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 6f 72 20 4d 41 43 56 4c 41 4e 20 69 6e 74 65 | .Pseudo-Ethernet.or.MACVLAN.inte |
5d000 | 72 66 61 63 65 73 20 63 61 6e 20 62 65 20 73 65 65 6e 20 61 73 20 73 75 62 69 6e 74 65 72 66 61 | rfaces.can.be.seen.as.subinterfa |
5d020 | 63 65 73 20 74 6f 20 72 65 67 75 6c 61 72 20 65 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 | ces.to.regular.ethernet.interfac |
5d040 | 65 73 2e 20 45 61 63 68 20 61 6e 64 20 65 76 65 72 79 20 73 75 62 69 6e 74 65 72 66 61 63 65 20 | es..Each.and.every.subinterface. |
5d060 | 69 73 20 63 72 65 61 74 65 64 20 61 20 64 69 66 66 65 72 65 6e 74 20 6d 65 64 69 61 20 61 63 63 | is.created.a.different.media.acc |
5d080 | 65 73 73 20 63 6f 6e 74 72 6f 6c 20 28 4d 41 43 29 20 61 64 64 72 65 73 73 2c 20 66 6f 72 20 61 | ess.control.(MAC).address,.for.a |
5d0a0 | 20 73 69 6e 67 6c 65 20 70 68 79 73 69 63 61 6c 20 45 74 68 65 72 6e 65 74 20 70 6f 72 74 2e 20 | .single.physical.Ethernet.port.. |
5d0c0 | 50 73 65 75 64 6f 2d 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 68 61 76 65 | Pseudo-.Ethernet.interfaces.have |
5d0e0 | 20 6d 6f 73 74 20 6f 66 20 74 68 65 69 72 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 69 6e 20 76 69 | .most.of.their.application.in.vi |
5d100 | 72 74 75 61 6c 69 7a 65 64 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 2c 00 50 75 62 6c 69 73 68 20 | rtualized.environments,.Publish. |
5d120 | 61 20 70 6f 72 74 20 66 6f 72 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 2e 00 50 75 6c 6c 20 61 | a.port.for.the.container..Pull.a |
5d140 | 20 6e 65 77 20 69 6d 61 67 65 20 66 6f 72 20 63 6f 6e 74 61 69 6e 65 72 00 51 69 6e 51 20 28 38 | .new.image.for.container.QinQ.(8 |
5d160 | 30 32 2e 31 61 64 29 00 51 6f 53 00 51 75 65 75 65 20 73 69 7a 65 20 66 6f 72 20 6c 69 73 74 65 | 02.1ad).QoS.Queue.size.for.liste |
5d180 | 6e 69 6e 67 20 74 6f 20 6c 6f 63 61 6c 20 63 6f 6e 6e 74 72 61 63 6b 20 65 76 65 6e 74 73 20 69 | ning.to.local.conntrack.events.i |
5d1a0 | 6e 20 4d 42 2e 00 51 75 65 75 65 20 73 69 7a 65 20 66 6f 72 20 73 79 6e 63 69 6e 67 20 63 6f 6e | n.MB..Queue.size.for.syncing.con |
5d1c0 | 6e 74 72 61 63 6b 20 65 6e 74 72 69 65 73 20 69 6e 20 4d 42 2e 00 51 75 6f 74 65 73 20 63 61 6e | ntrack.entries.in.MB..Quotes.can |
5d1e0 | 20 62 65 20 75 73 65 64 20 69 6e 73 69 64 65 20 70 61 72 61 6d 65 74 65 72 20 76 61 6c 75 65 73 | .be.used.inside.parameter.values |
5d200 | 20 62 79 20 72 65 70 6c 61 63 69 6e 67 20 61 6c 6c 20 71 75 6f 74 65 20 63 68 61 72 61 63 74 65 | .by.replacing.all.quote.characte |
5d220 | 72 73 20 77 69 74 68 20 74 68 65 20 73 74 72 69 6e 67 20 60 60 26 71 75 6f 74 3b 60 60 2e 20 54 | rs.with.the.string.``"``..T |
5d240 | 68 65 79 20 77 69 6c 6c 20 62 65 20 72 65 70 6c 61 63 65 64 20 77 69 74 68 20 6c 69 74 65 72 61 | hey.will.be.replaced.with.litera |
5d260 | 6c 20 71 75 6f 74 65 20 63 68 61 72 61 63 74 65 72 73 20 77 68 65 6e 20 67 65 6e 65 72 61 74 69 | l.quote.characters.when.generati |
5d280 | 6e 67 20 64 68 63 70 64 2e 63 6f 6e 66 2e 00 52 31 20 68 61 73 20 31 39 32 2e 30 2e 32 2e 31 2f | ng.dhcpd.conf..R1.has.192.0.2.1/ |
5d2a0 | 32 34 20 26 20 32 30 30 31 3a 64 62 38 3a 3a 31 2f 36 34 00 52 31 20 69 73 20 6d 61 6e 61 67 65 | 24.&.2001:db8::1/64.R1.is.manage |
5d2c0 | 64 20 74 68 72 6f 75 67 68 20 61 6e 20 6f 75 74 2d 6f 66 2d 62 61 6e 64 20 6e 65 74 77 6f 72 6b | d.through.an.out-of-band.network |
5d2e0 | 20 74 68 61 74 20 72 65 73 69 64 65 73 20 69 6e 20 56 52 46 20 60 60 6d 67 6d 74 60 60 00 52 31 | .that.resides.in.VRF.``mgmt``.R1 |
5d300 | 3a 00 52 32 20 68 61 73 20 31 39 32 2e 30 2e 32 2e 32 2f 32 34 20 26 20 32 30 30 31 3a 64 62 38 | :.R2.has.192.0.2.2/24.&.2001:db8 |
5d320 | 3a 3a 32 2f 36 34 00 52 32 3a 00 52 41 44 49 55 53 00 52 41 44 49 55 53 20 53 65 74 75 70 00 52 | ::2/64.R2:.RADIUS.RADIUS.Setup.R |
5d340 | 41 44 49 55 53 20 61 64 76 61 6e 63 65 64 20 66 65 61 74 75 72 65 73 00 52 41 44 49 55 53 20 61 | ADIUS.advanced.features.RADIUS.a |
5d360 | 64 76 61 6e 63 65 64 20 6f 70 74 69 6f 6e 73 00 52 41 44 49 55 53 20 61 75 74 68 65 6e 74 69 63 | dvanced.options.RADIUS.authentic |
5d380 | 61 74 69 6f 6e 00 52 41 44 49 55 53 20 62 61 6e 64 77 69 64 74 68 20 73 68 61 70 69 6e 67 20 61 | ation.RADIUS.bandwidth.shaping.a |
5d3a0 | 74 74 72 69 62 75 74 65 00 52 41 44 49 55 53 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 49 50 20 | ttribute.RADIUS.provides.the.IP. |
5d3c0 | 61 64 64 72 65 73 73 65 73 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 61 62 6f 76 65 20 76 | addresses.in.the.example.above.v |
5d3e0 | 69 61 20 46 72 61 6d 65 64 2d 49 50 2d 41 64 64 72 65 73 73 2e 00 52 41 44 49 55 53 20 73 65 72 | ia.Framed-IP-Address..RADIUS.ser |
5d400 | 76 65 72 20 61 74 20 60 60 31 39 32 2e 31 36 38 2e 33 2e 31 30 60 60 20 77 69 74 68 20 73 68 61 | ver.at.``192.168.3.10``.with.sha |
5d420 | 72 65 64 2d 73 65 63 72 65 74 20 60 60 56 79 4f 53 50 61 73 73 77 6f 72 64 60 60 00 52 41 44 49 | red-secret.``VyOSPassword``.RADI |
5d440 | 55 53 20 73 65 72 76 65 72 73 20 63 6f 75 6c 64 20 62 65 20 68 61 72 64 65 6e 65 64 20 62 79 20 | US.servers.could.be.hardened.by. |
5d460 | 6f 6e 6c 79 20 61 6c 6c 6f 77 69 6e 67 20 63 65 72 74 61 69 6e 20 49 50 20 61 64 64 72 65 73 73 | only.allowing.certain.IP.address |
5d480 | 65 73 20 74 6f 20 63 6f 6e 6e 65 63 74 2e 20 41 73 20 6f 66 20 74 68 69 73 20 74 68 65 20 73 6f | es.to.connect..As.of.this.the.so |
5d4a0 | 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 65 61 63 68 20 52 41 44 49 55 53 20 71 75 65 72 | urce.address.of.each.RADIUS.quer |
5d4c0 | 79 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 52 41 44 49 55 53 20 73 6f 75 72 | y.can.be.configured..RADIUS.sour |
5d4e0 | 63 65 20 61 64 64 72 65 73 73 00 52 46 43 20 33 37 36 38 20 64 65 66 69 6e 65 73 20 61 20 76 69 | ce.address.RFC.3768.defines.a.vi |
5d500 | 72 74 75 61 6c 20 4d 41 43 20 61 64 64 72 65 73 73 20 74 6f 20 65 61 63 68 20 56 52 52 50 20 76 | rtual.MAC.address.to.each.VRRP.v |
5d520 | 69 72 74 75 61 6c 20 72 6f 75 74 65 72 2e 20 54 68 69 73 20 76 69 72 74 75 61 6c 20 72 6f 75 74 | irtual.router..This.virtual.rout |
5d540 | 65 72 20 4d 41 43 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 61 73 20 74 | er.MAC.address.will.be.used.as.t |
5d560 | 68 65 20 73 6f 75 72 63 65 20 69 6e 20 61 6c 6c 20 70 65 72 69 6f 64 69 63 20 56 52 52 50 20 6d | he.source.in.all.periodic.VRRP.m |
5d580 | 65 73 73 61 67 65 73 20 73 65 6e 74 20 62 79 20 74 68 65 20 61 63 74 69 76 65 20 6e 6f 64 65 2e | essages.sent.by.the.active.node. |
5d5a0 | 20 57 68 65 6e 20 74 68 65 20 72 66 63 33 37 36 38 2d 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 20 | .When.the.rfc3768-compatibility. |
5d5c0 | 6f 70 74 69 6f 6e 20 69 73 20 73 65 74 2c 20 61 20 6e 65 77 20 56 52 52 50 20 69 6e 74 65 72 66 | option.is.set,.a.new.VRRP.interf |
5d5e0 | 61 63 65 20 69 73 20 63 72 65 61 74 65 64 2c 20 74 6f 20 77 68 69 63 68 20 74 68 65 20 4d 41 43 | ace.is.created,.to.which.the.MAC |
5d600 | 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 76 69 72 74 75 61 6c 20 49 50 20 61 64 64 72 | .address.and.the.virtual.IP.addr |
5d620 | 65 73 73 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 73 73 69 67 6e 65 64 2e 00 52 | ess.is.automatically.assigned..R |
5d640 | 46 43 20 38 36 38 20 74 69 6d 65 20 73 65 72 76 65 72 20 49 50 76 34 20 61 64 64 72 65 73 73 00 | FC.868.time.server.IPv4.address. |
5d660 | 52 49 50 00 52 49 50 76 31 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 | RIP.RIPv1.as.described.in.:rfc:` |
5d680 | 31 30 35 38 60 00 52 49 50 76 32 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 | 1058`.RIPv2.as.described.in.:rfc |
5d6a0 | 3a 60 32 34 35 33 60 00 52 50 4b 49 00 52 53 2d 53 65 72 76 65 72 20 2d 20 52 53 2d 43 6c 69 65 | :`2453`.RPKI.RS-Server.-.RS-Clie |
5d6c0 | 6e 74 00 52 53 41 20 63 61 6e 20 62 65 20 75 73 65 64 20 66 6f 72 20 73 65 72 76 69 63 65 73 20 | nt.RSA.can.be.used.for.services. |
5d6e0 | 73 75 63 68 20 61 73 20 6b 65 79 20 65 78 63 68 61 6e 67 65 73 20 61 6e 64 20 66 6f 72 20 65 6e | such.as.key.exchanges.and.for.en |
5d700 | 63 72 79 70 74 69 6f 6e 20 70 75 72 70 6f 73 65 73 2e 20 54 6f 20 6d 61 6b 65 20 49 50 53 65 63 | cryption.purposes..To.make.IPSec |
5d720 | 20 77 6f 72 6b 20 77 69 74 68 20 64 79 6e 61 6d 69 63 20 61 64 64 72 65 73 73 20 6f 6e 20 6f 6e | .work.with.dynamic.address.on.on |
5d740 | 65 2f 62 6f 74 68 20 73 69 64 65 73 2c 20 77 65 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 75 73 | e/both.sides,.we.will.have.to.us |
5d760 | 65 20 52 53 41 20 6b 65 79 73 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 54 | e.RSA.keys.for.authentication..T |
5d780 | 68 65 79 20 61 72 65 20 76 65 72 79 20 66 61 73 74 20 61 6e 64 20 65 61 73 79 20 74 6f 20 73 65 | hey.are.very.fast.and.easy.to.se |
5d7a0 | 74 75 70 2e 00 52 53 41 2d 4b 65 79 73 00 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 00 52 61 6e 64 | tup..RSA-Keys.Random-Detect.Rand |
5d7c0 | 6f 6d 2d 44 65 74 65 63 74 20 63 6f 75 6c 64 20 62 65 20 75 73 65 66 75 6c 20 66 6f 72 20 68 65 | om-Detect.could.be.useful.for.he |
5d7e0 | 61 76 79 20 74 72 61 66 66 69 63 2e 20 4f 6e 65 20 75 73 65 20 6f 66 20 74 68 69 73 20 61 6c 67 | avy.traffic..One.use.of.this.alg |
5d800 | 6f 72 69 74 68 6d 20 6d 69 67 68 74 20 62 65 20 74 6f 20 70 72 65 76 65 6e 74 20 61 20 62 61 63 | orithm.might.be.to.prevent.a.bac |
5d820 | 6b 62 6f 6e 65 20 6f 76 65 72 6c 6f 61 64 2e 20 42 75 74 20 6f 6e 6c 79 20 66 6f 72 20 54 43 50 | kbone.overload..But.only.for.TCP |
5d840 | 20 28 62 65 63 61 75 73 65 20 64 72 6f 70 70 65 64 20 70 61 63 6b 65 74 73 20 63 6f 75 6c 64 20 | .(because.dropped.packets.could. |
5d860 | 62 65 20 72 65 74 72 61 6e 73 6d 69 74 74 65 64 29 2c 20 6e 6f 74 20 66 6f 72 20 55 44 50 2e 00 | be.retransmitted),.not.for.UDP.. |
5d880 | 52 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2c 20 64 65 66 61 75 6c 74 20 69 73 20 31 2e | Range.is.1.to.255,.default.is.1. |
5d8a0 | 00 52 61 6e 67 65 20 69 73 20 31 20 74 6f 20 33 30 30 2c 20 64 65 66 61 75 6c 74 20 69 73 20 31 | .Range.is.1.to.300,.default.is.1 |
5d8c0 | 30 2e 00 52 61 74 65 20 43 6f 6e 74 72 6f 6c 00 52 61 74 65 20 6c 69 6d 69 74 00 52 61 74 65 2d | 0..Rate.Control.Rate.limit.Rate- |
5d8e0 | 43 6f 6e 74 72 6f 6c 20 69 73 20 61 20 43 50 55 2d 66 72 69 65 6e 64 6c 79 20 70 6f 6c 69 63 79 | Control.is.a.CPU-friendly.policy |
5d900 | 2e 20 59 6f 75 20 6d 69 67 68 74 20 63 6f 6e 73 69 64 65 72 20 75 73 69 6e 67 20 69 74 20 77 68 | ..You.might.consider.using.it.wh |
5d920 | 65 6e 20 79 6f 75 20 6a 75 73 74 20 73 69 6d 70 6c 79 20 77 61 6e 74 20 74 6f 20 73 6c 6f 77 20 | en.you.just.simply.want.to.slow. |
5d940 | 74 72 61 66 66 69 63 20 64 6f 77 6e 2e 00 52 61 74 65 2d 43 6f 6e 74 72 6f 6c 20 69 73 20 61 20 | traffic.down..Rate-Control.is.a. |
5d960 | 63 6c 61 73 73 6c 65 73 73 20 70 6f 6c 69 63 79 20 74 68 61 74 20 6c 69 6d 69 74 73 20 74 68 65 | classless.policy.that.limits.the |
5d980 | 20 70 61 63 6b 65 74 20 66 6c 6f 77 20 74 6f 20 61 20 73 65 74 20 72 61 74 65 2e 20 49 74 20 69 | .packet.flow.to.a.set.rate..It.i |
5d9a0 | 73 20 61 20 70 75 72 65 20 73 68 61 70 65 72 2c 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 73 63 68 | s.a.pure.shaper,.it.does.not.sch |
5d9c0 | 65 64 75 6c 65 20 74 72 61 66 66 69 63 2e 20 54 72 61 66 66 69 63 20 69 73 20 66 69 6c 74 65 72 | edule.traffic..Traffic.is.filter |
5d9e0 | 65 64 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 65 78 70 65 6e 64 69 74 75 72 65 20 6f 66 20 74 | ed.based.on.the.expenditure.of.t |
5da00 | 6f 6b 65 6e 73 2e 20 54 6f 6b 65 6e 73 20 72 6f 75 67 68 6c 79 20 63 6f 72 72 65 73 70 6f 6e 64 | okens..Tokens.roughly.correspond |
5da20 | 20 74 6f 20 62 79 74 65 73 2e 00 52 61 77 20 50 61 72 61 6d 65 74 65 72 73 00 52 61 77 20 70 61 | .to.bytes..Raw.Parameters.Raw.pa |
5da40 | 72 61 6d 65 74 65 72 73 20 63 61 6e 20 62 65 20 70 61 73 73 65 64 20 74 6f 20 73 68 61 72 65 64 | rameters.can.be.passed.to.shared |
5da60 | 2d 6e 65 74 77 6f 72 6b 2d 6e 61 6d 65 2c 20 73 75 62 6e 65 74 20 61 6e 64 20 73 74 61 74 69 63 | -network-name,.subnet.and.static |
5da80 | 2d 6d 61 70 70 69 6e 67 3a 00 52 65 2d 67 65 6e 65 72 61 74 65 64 20 61 20 6b 6e 6f 77 6e 20 70 | -mapping:.Re-generated.a.known.p |
5daa0 | 75 62 2f 70 72 69 76 61 74 65 20 6b 65 79 66 69 6c 65 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 | ub/private.keyfile.which.can.be. |
5dac0 | 75 73 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 6f 74 68 65 72 20 73 65 72 76 69 63 65 | used.to.connect.to.other.service |
5dae0 | 73 20 28 65 2e 67 2e 20 52 50 4b 49 20 63 61 63 68 65 29 2e 00 52 65 2d 67 65 6e 65 72 61 74 65 | s.(e.g..RPKI.cache)..Re-generate |
5db00 | 64 20 74 68 65 20 70 75 62 6c 69 63 2f 70 72 69 76 61 74 65 20 6b 65 79 70 6f 72 74 69 6f 6e 20 | d.the.public/private.keyportion. |
5db20 | 77 68 69 63 68 20 53 53 48 20 75 73 65 73 20 74 6f 20 73 65 63 75 72 65 20 63 6f 6e 6e 65 63 74 | which.SSH.uses.to.secure.connect |
5db40 | 69 6f 6e 73 2e 00 52 65 61 63 68 61 62 6c 65 20 54 69 6d 65 00 52 65 61 6c 20 73 65 72 76 65 72 | ions..Reachable.Time.Real.server |
5db60 | 00 52 65 61 6c 20 73 65 72 76 65 72 20 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 20 70 6f 72 74 | .Real.server.IP.address.and.port |
5db80 | 00 52 65 61 6c 20 73 65 72 76 65 72 20 69 73 20 61 75 74 6f 2d 65 78 63 6c 75 64 65 64 20 69 66 | .Real.server.is.auto-excluded.if |
5dba0 | 20 70 6f 72 74 20 63 68 65 63 6b 20 77 69 74 68 20 74 68 69 73 20 73 65 72 76 65 72 20 66 61 69 | .port.check.with.this.server.fai |
5dbc0 | 6c 2e 00 52 65 63 65 69 76 65 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 63 6f 6e 6e 65 63 74 69 | l..Receive.traffic.from.connecti |
5dbe0 | 6f 6e 73 20 63 72 65 61 74 65 64 20 62 79 20 74 68 65 20 73 65 72 76 65 72 20 69 73 20 61 6c 73 | ons.created.by.the.server.is.als |
5dc00 | 6f 20 62 61 6c 61 6e 63 65 64 2e 20 57 68 65 6e 20 74 68 65 20 6c 6f 63 61 6c 20 73 79 73 74 65 | o.balanced..When.the.local.syste |
5dc20 | 6d 20 73 65 6e 64 73 20 61 6e 20 41 52 50 20 52 65 71 75 65 73 74 20 74 68 65 20 62 6f 6e 64 69 | m.sends.an.ARP.Request.the.bondi |
5dc40 | 6e 67 20 64 72 69 76 65 72 20 63 6f 70 69 65 73 20 61 6e 64 20 73 61 76 65 73 20 74 68 65 20 70 | ng.driver.copies.and.saves.the.p |
5dc60 | 65 65 72 27 73 20 49 50 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 41 52 | eer's.IP.information.from.the.AR |
5dc80 | 50 20 70 61 63 6b 65 74 2e 20 57 68 65 6e 20 74 68 65 20 41 52 50 20 52 65 70 6c 79 20 61 72 72 | P.packet..When.the.ARP.Reply.arr |
5dca0 | 69 76 65 73 20 66 72 6f 6d 20 74 68 65 20 70 65 65 72 2c 20 69 74 73 20 68 61 72 64 77 61 72 65 | ives.from.the.peer,.its.hardware |
5dcc0 | 20 61 64 64 72 65 73 73 20 69 73 20 72 65 74 72 69 65 76 65 64 20 61 6e 64 20 74 68 65 20 62 6f | .address.is.retrieved.and.the.bo |
5dce0 | 6e 64 69 6e 67 20 64 72 69 76 65 72 20 69 6e 69 74 69 61 74 65 73 20 61 6e 20 41 52 50 20 72 65 | nding.driver.initiates.an.ARP.re |
5dd00 | 70 6c 79 20 74 6f 20 74 68 69 73 20 70 65 65 72 20 61 73 73 69 67 6e 69 6e 67 20 69 74 20 74 6f | ply.to.this.peer.assigning.it.to |
5dd20 | 20 6f 6e 65 20 6f 66 20 74 68 65 20 73 6c 61 76 65 73 20 69 6e 20 74 68 65 20 62 6f 6e 64 2e 20 | .one.of.the.slaves.in.the.bond.. |
5dd40 | 41 20 70 72 6f 62 6c 65 6d 61 74 69 63 20 6f 75 74 63 6f 6d 65 20 6f 66 20 75 73 69 6e 67 20 41 | A.problematic.outcome.of.using.A |
5dd60 | 52 50 20 6e 65 67 6f 74 69 61 74 69 6f 6e 20 66 6f 72 20 62 61 6c 61 6e 63 69 6e 67 20 69 73 20 | RP.negotiation.for.balancing.is. |
5dd80 | 74 68 61 74 20 65 61 63 68 20 74 69 6d 65 20 74 68 61 74 20 61 6e 20 41 52 50 20 72 65 71 75 65 | that.each.time.that.an.ARP.reque |
5dda0 | 73 74 20 69 73 20 62 72 6f 61 64 63 61 73 74 20 69 74 20 75 73 65 73 20 74 68 65 20 68 61 72 64 | st.is.broadcast.it.uses.the.hard |
5ddc0 | 77 61 72 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 62 6f 6e 64 2e 20 48 65 6e 63 65 2c | ware.address.of.the.bond..Hence, |
5dde0 | 20 70 65 65 72 73 20 6c 65 61 72 6e 20 74 68 65 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 73 | .peers.learn.the.hardware.addres |
5de00 | 73 20 6f 66 20 74 68 65 20 62 6f 6e 64 20 61 6e 64 20 74 68 65 20 62 61 6c 61 6e 63 69 6e 67 20 | s.of.the.bond.and.the.balancing. |
5de20 | 6f 66 20 72 65 63 65 69 76 65 20 74 72 61 66 66 69 63 20 63 6f 6c 6c 61 70 73 65 73 20 74 6f 20 | of.receive.traffic.collapses.to. |
5de40 | 74 68 65 20 63 75 72 72 65 6e 74 20 73 6c 61 76 65 2e 20 54 68 69 73 20 69 73 20 68 61 6e 64 6c | the.current.slave..This.is.handl |
5de60 | 65 64 20 62 79 20 73 65 6e 64 69 6e 67 20 75 70 64 61 74 65 73 20 28 41 52 50 20 52 65 70 6c 69 | ed.by.sending.updates.(ARP.Repli |
5de80 | 65 73 29 20 74 6f 20 61 6c 6c 20 74 68 65 20 70 65 65 72 73 20 77 69 74 68 20 74 68 65 69 72 20 | es).to.all.the.peers.with.their. |
5dea0 | 69 6e 64 69 76 69 64 75 61 6c 6c 79 20 61 73 73 69 67 6e 65 64 20 68 61 72 64 77 61 72 65 20 61 | individually.assigned.hardware.a |
5dec0 | 64 64 72 65 73 73 20 73 75 63 68 20 74 68 61 74 20 74 68 65 20 74 72 61 66 66 69 63 20 69 73 20 | ddress.such.that.the.traffic.is. |
5dee0 | 72 65 64 69 73 74 72 69 62 75 74 65 64 2e 20 52 65 63 65 69 76 65 20 74 72 61 66 66 69 63 20 69 | redistributed..Receive.traffic.i |
5df00 | 73 20 61 6c 73 6f 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 77 68 65 6e 20 61 20 6e 65 77 20 | s.also.redistributed.when.a.new. |
5df20 | 73 6c 61 76 65 20 69 73 20 61 64 64 65 64 20 74 6f 20 74 68 65 20 62 6f 6e 64 20 61 6e 64 20 77 | slave.is.added.to.the.bond.and.w |
5df40 | 68 65 6e 20 61 6e 20 69 6e 61 63 74 69 76 65 20 73 6c 61 76 65 20 69 73 20 72 65 2d 61 63 74 69 | hen.an.inactive.slave.is.re-acti |
5df60 | 76 61 74 65 64 2e 20 54 68 65 20 72 65 63 65 69 76 65 20 6c 6f 61 64 20 69 73 20 64 69 73 74 72 | vated..The.receive.load.is.distr |
5df80 | 69 62 75 74 65 64 20 73 65 71 75 65 6e 74 69 61 6c 6c 79 20 28 72 6f 75 6e 64 20 72 6f 62 69 6e | ibuted.sequentially.(round.robin |
5dfa0 | 29 20 61 6d 6f 6e 67 20 74 68 65 20 67 72 6f 75 70 20 6f 66 20 68 69 67 68 65 73 74 20 73 70 65 | ).among.the.group.of.highest.spe |
5dfc0 | 65 64 20 73 6c 61 76 65 73 20 69 6e 20 74 68 65 20 62 6f 6e 64 2e 00 52 65 63 65 69 76 65 64 20 | ed.slaves.in.the.bond..Received. |
5dfe0 | 52 41 44 49 55 53 20 61 74 74 72 69 62 75 74 65 73 20 68 61 76 65 20 61 20 68 69 67 68 65 72 20 | RADIUS.attributes.have.a.higher. |
5e000 | 70 72 69 6f 72 69 74 79 20 74 68 61 6e 20 70 61 72 61 6d 65 74 65 72 73 20 64 65 66 69 6e 65 64 | priority.than.parameters.defined |
5e020 | 20 77 69 74 68 69 6e 20 74 68 65 20 43 4c 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 72 | .within.the.CLI.configuration,.r |
5e040 | 65 66 65 72 20 74 6f 20 74 68 65 20 65 78 70 6c 61 6e 61 74 69 6f 6e 20 62 65 6c 6f 77 2e 00 52 | efer.to.the.explanation.below..R |
5e060 | 65 63 6f 6d 6d 65 6e 64 65 64 20 66 6f 72 20 6c 61 72 67 65 72 20 69 6e 73 74 61 6c 6c 61 74 69 | ecommended.for.larger.installati |
5e080 | 6f 6e 73 2e 00 52 65 64 69 72 65 63 74 20 48 54 54 50 20 74 6f 20 48 54 54 50 53 00 52 65 64 69 | ons..Redirect.HTTP.to.HTTPS.Redi |
5e0a0 | 72 65 63 74 20 4d 69 63 72 6f 73 6f 66 74 20 52 44 50 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 | rect.Microsoft.RDP.traffic.from. |
5e0c0 | 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 28 4c 41 4e 2c 20 70 72 69 76 61 74 65 29 20 6e 65 74 77 | the.internal.(LAN,.private).netw |
5e0e0 | 6f 72 6b 20 76 69 61 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 20 69 | ork.via.:ref:`destination-nat`.i |
5e100 | 6e 20 72 75 6c 65 20 31 31 30 20 74 6f 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 2c 20 70 72 69 76 | n.rule.110.to.the.internal,.priv |
5e120 | 61 74 65 20 68 6f 73 74 20 31 39 32 2e 30 2e 32 2e 34 30 2e 20 57 65 20 61 6c 73 6f 20 6e 65 65 | ate.host.192.0.2.40..We.also.nee |
5e140 | 64 20 61 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 72 75 6c 65 20 31 31 30 20 66 | d.a.:ref:`source-nat`.rule.110.f |
5e160 | 6f 72 20 74 68 65 20 72 65 76 65 72 73 65 20 70 61 74 68 20 6f 66 20 74 68 65 20 74 72 61 66 66 | or.the.reverse.path.of.the.traff |
5e180 | 69 63 2e 20 54 68 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 31 39 32 2e 30 2e 32 | ic..The.internal.network.192.0.2 |
5e1a0 | 2e 30 2f 32 34 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 69 6e 74 65 72 66 61 63 65 | .0/24.is.reachable.via.interface |
5e1c0 | 20 60 65 74 68 30 2e 31 30 60 2e 00 52 65 64 69 72 65 63 74 20 4d 69 63 72 6f 73 6f 66 74 20 52 | .`eth0.10`..Redirect.Microsoft.R |
5e1e0 | 44 50 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 74 68 65 20 6f 75 74 73 69 64 65 20 28 57 41 4e | DP.traffic.from.the.outside.(WAN |
5e200 | 2c 20 65 78 74 65 72 6e 61 6c 29 20 77 6f 72 6c 64 20 76 69 61 20 3a 72 65 66 3a 60 64 65 73 74 | ,.external).world.via.:ref:`dest |
5e220 | 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 20 69 6e 20 72 75 6c 65 20 31 30 30 20 74 6f 20 74 68 65 20 | ination-nat`.in.rule.100.to.the. |
5e240 | 69 6e 74 65 72 6e 61 6c 2c 20 70 72 69 76 61 74 65 20 68 6f 73 74 20 31 39 32 2e 30 2e 32 2e 34 | internal,.private.host.192.0.2.4 |
5e260 | 30 2e 00 52 65 64 69 72 65 63 74 20 55 52 4c 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 69 6f | 0..Redirect.URL.to.a.new.locatio |
5e280 | 6e 00 52 65 64 69 73 74 72 69 62 75 74 69 6f 6e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 52 | n.Redistribution.Configuration.R |
5e2a0 | 65 64 75 6e 64 61 6e 63 79 20 61 6e 64 20 6c 6f 61 64 20 73 68 61 72 69 6e 67 2e 20 54 68 65 72 | edundancy.and.load.sharing..Ther |
5e2c0 | 65 20 61 72 65 20 6d 75 6c 74 69 70 6c 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 73 20 61 74 20 | e.are.multiple.NAT66.devices.at. |
5e2e0 | 74 68 65 20 65 64 67 65 20 6f 66 20 61 6e 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 20 74 6f 20 61 | the.edge.of.an.IPv6.network.to.a |
5e300 | 6e 6f 74 68 65 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 20 70 61 74 68 20 74 68 | nother.IPv6.network..The.path.th |
5e320 | 72 6f 75 67 68 20 74 68 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 20 74 6f 20 61 6e 6f 74 68 65 | rough.the.NAT66.device.to.anothe |
5e340 | 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 20 66 6f 72 6d 73 20 61 6e 20 65 71 75 69 76 61 6c 65 | r.IPv6.network.forms.an.equivale |
5e360 | 6e 74 20 72 6f 75 74 65 2c 20 61 6e 64 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 6c 6f 61 | nt.route,.and.traffic.can.be.loa |
5e380 | 64 2d 73 68 61 72 65 64 20 6f 6e 20 74 68 65 73 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 73 2e | d-shared.on.these.NAT66.devices. |
5e3a0 | 20 49 6e 20 74 68 69 73 20 63 61 73 65 2c 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 | .In.this.case,.you.can.configure |
5e3c0 | 20 74 68 65 20 73 61 6d 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 | .the.same.source.address.transla |
5e3e0 | 74 69 6f 6e 20 72 75 6c 65 73 20 6f 6e 20 74 68 65 73 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 | tion.rules.on.these.NAT66.device |
5e400 | 73 2c 20 73 6f 20 74 68 61 74 20 61 6e 79 20 4e 41 54 36 36 20 64 65 76 69 63 65 20 63 61 6e 20 | s,.so.that.any.NAT66.device.can. |
5e420 | 68 61 6e 64 6c 65 20 49 50 76 36 20 74 72 61 66 66 69 63 20 62 65 74 77 65 65 6e 20 64 69 66 66 | handle.IPv6.traffic.between.diff |
5e440 | 65 72 65 6e 74 20 73 69 74 65 73 2e 00 52 65 67 69 73 74 65 72 20 44 4e 53 20 72 65 63 6f 72 64 | erent.sites..Register.DNS.record |
5e460 | 20 60 60 65 78 61 6d 70 6c 65 2e 76 79 6f 73 2e 69 6f 60 60 20 6f 6e 20 44 4e 53 20 73 65 72 76 | .``example.vyos.io``.on.DNS.serv |
5e480 | 65 72 20 60 60 6e 73 31 2e 76 79 6f 73 2e 69 6f 60 60 00 52 65 67 75 6c 61 72 20 56 4c 41 4e 73 | er.``ns1.vyos.io``.Regular.VLANs |
5e4a0 | 20 28 38 30 32 2e 31 71 29 00 52 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 74 6f 20 | .(802.1q).Regular.expression.to. |
5e4c0 | 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 2e 00 | match.against.a.community-list.. |
5e4e0 | 52 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 | Regular.expression.to.match.agai |
5e500 | 6e 73 74 20 61 20 6c 61 72 67 65 20 63 6f 6d 6d 75 6e 69 74 79 20 6c 69 73 74 2e 00 52 65 67 75 | nst.a.large.community.list..Regu |
5e520 | 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 | lar.expression.to.match.against. |
5e540 | 61 6e 20 41 53 20 70 61 74 68 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 22 36 34 35 30 31 20 36 | an.AS.path..For.example."64501.6 |
5e560 | 34 35 30 32 22 2e 00 52 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 74 6f 20 6d 61 74 | 4502"..Regular.expression.to.mat |
5e580 | 63 68 20 61 67 61 69 6e 73 74 20 61 6e 20 65 78 74 65 6e 64 65 64 20 63 6f 6d 6d 75 6e 69 74 79 | ch.against.an.extended.community |
5e5a0 | 20 6c 69 73 74 2c 20 77 68 65 72 65 20 74 65 78 74 20 63 6f 75 6c 64 20 62 65 3a 00 52 65 6a 65 | .list,.where.text.could.be:.Reje |
5e5c0 | 63 74 20 44 48 43 50 20 6c 65 61 73 65 73 20 66 72 6f 6d 20 61 20 67 69 76 65 6e 20 61 64 64 72 | ct.DHCP.leases.from.a.given.addr |
5e5e0 | 65 73 73 20 6f 72 20 72 61 6e 67 65 2e 20 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 77 68 65 | ess.or.range..This.is.useful.whe |
5e600 | 6e 20 61 20 6d 6f 64 65 6d 20 67 69 76 65 73 20 61 20 6c 6f 63 61 6c 20 49 50 20 77 68 65 6e 20 | n.a.modem.gives.a.local.IP.when. |
5e620 | 66 69 72 73 74 20 73 74 61 72 74 69 6e 67 2e 00 52 65 6d 65 6d 62 65 72 20 73 6f 75 72 63 65 20 | first.starting..Remember.source. |
5e640 | 49 50 20 69 6e 20 73 65 63 6f 6e 64 73 20 62 65 66 6f 72 65 20 72 65 73 65 74 20 74 68 65 69 72 | IP.in.seconds.before.reset.their |
5e660 | 20 73 63 6f 72 65 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 38 30 30 2e 00 52 65 6d | .score..The.default.is.1800..Rem |
5e680 | 6f 74 65 20 41 63 63 65 73 73 00 52 65 6d 6f 74 65 20 41 63 63 65 73 73 20 22 52 6f 61 64 57 61 | ote.Access.Remote.Access."RoadWa |
5e6a0 | 72 72 69 6f 72 22 20 45 78 61 6d 70 6c 65 00 52 65 6d 6f 74 65 20 41 63 63 65 73 73 20 22 52 6f | rrior".Example.Remote.Access."Ro |
5e6c0 | 61 64 57 61 72 72 69 6f 72 22 20 63 6c 69 65 6e 74 73 00 52 65 6d 6f 74 65 20 43 6f 6e 66 69 67 | adWarrior".clients.Remote.Config |
5e6e0 | 75 72 61 74 69 6f 6e 20 2d 20 41 6e 6e 6f 74 61 74 65 64 3a 00 52 65 6d 6f 74 65 20 43 6f 6e 66 | uration.-.Annotated:.Remote.Conf |
5e700 | 69 67 75 72 61 74 69 6f 6e 3a 00 52 65 6d 6f 74 65 20 48 6f 73 74 00 52 65 6d 6f 74 65 20 55 52 | iguration:.Remote.Host.Remote.UR |
5e720 | 4c 00 52 65 6d 6f 74 65 20 55 52 4c 20 74 6f 20 53 70 6c 75 6e 6b 20 63 6f 6c 6c 65 63 74 6f 72 | L.Remote.URL.to.Splunk.collector |
5e740 | 00 52 65 6d 6f 74 65 20 55 52 4c 2e 00 52 65 6d 6f 74 65 20 60 60 49 6e 66 6c 75 78 44 42 60 60 | .Remote.URL..Remote.``InfluxDB`` |
5e760 | 20 62 75 63 6b 65 74 20 6e 61 6d 65 00 52 65 6d 6f 74 65 20 64 61 74 61 62 61 73 65 20 6e 61 6d | .bucket.name.Remote.database.nam |
5e780 | 65 2e 00 52 65 6d 6f 74 65 20 70 65 65 72 20 49 50 20 60 3c 61 64 64 72 65 73 73 3e 60 20 6f 66 | e..Remote.peer.IP.`<address>`.of |
5e7a0 | 20 74 68 65 20 73 65 63 6f 6e 64 20 44 48 43 50 20 73 65 72 76 65 72 20 69 6e 20 74 68 69 73 20 | .the.second.DHCP.server.in.this. |
5e7c0 | 48 41 20 63 6c 75 73 74 65 72 2e 00 52 65 6d 6f 74 65 20 70 65 65 72 20 49 50 20 60 3c 61 64 64 | HA.cluster..Remote.peer.IP.`<add |
5e7e0 | 72 65 73 73 3e 60 20 6f 66 20 74 68 65 20 73 65 63 6f 6e 64 20 44 48 43 50 20 73 65 72 76 65 72 | ress>`.of.the.second.DHCP.server |
5e800 | 20 69 6e 20 74 68 69 73 20 66 61 69 6c 6f 76 65 72 20 63 6c 75 73 74 65 72 2e 00 52 65 6d 6f 74 | .in.this.failover.cluster..Remot |
5e820 | 65 20 70 6f 72 74 00 52 65 6d 6f 74 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 69 6e 74 65 72 | e.port.Remote.transmission.inter |
5e840 | 76 61 6c 20 77 69 6c 6c 20 62 65 20 6d 75 6c 74 69 70 6c 69 65 64 20 62 79 20 74 68 69 73 20 76 | val.will.be.multiplied.by.this.v |
5e860 | 61 6c 75 65 00 52 65 6e 61 6d 69 6e 67 20 63 6c 69 65 6e 74 73 20 69 6e 74 65 72 66 61 63 65 73 | alue.Renaming.clients.interfaces |
5e880 | 20 62 79 20 52 41 44 49 55 53 00 52 65 70 65 61 74 20 74 68 65 20 70 72 6f 63 65 64 75 72 65 20 | .by.RADIUS.Repeat.the.procedure. |
5e8a0 | 6f 6e 20 74 68 65 20 6f 74 68 65 72 20 72 6f 75 74 65 72 2e 00 52 65 70 6c 61 79 20 70 72 6f 74 | on.the.other.router..Replay.prot |
5e8c0 | 65 63 74 69 6f 6e 00 52 65 71 75 65 73 74 20 6f 6e 6c 79 20 61 20 74 65 6d 70 6f 72 61 72 79 20 | ection.Request.only.a.temporary. |
5e8e0 | 61 64 64 72 65 73 73 20 61 6e 64 20 6e 6f 74 20 66 6f 72 6d 20 61 6e 20 49 41 5f 4e 41 20 28 49 | address.and.not.form.an.IA_NA.(I |
5e900 | 64 65 6e 74 69 74 79 20 41 73 73 6f 63 69 61 74 69 6f 6e 20 66 6f 72 20 4e 6f 6e 2d 74 65 6d 70 | dentity.Association.for.Non-temp |
5e920 | 6f 72 61 72 79 20 41 64 64 72 65 73 73 65 73 29 20 70 61 72 74 6e 65 72 73 68 69 70 2e 00 52 65 | orary.Addresses).partnership..Re |
5e940 | 71 75 65 73 74 73 20 61 72 65 20 66 6f 72 77 61 72 64 65 64 20 74 68 72 6f 75 67 68 20 60 60 65 | quests.are.forwarded.through.``e |
5e960 | 74 68 32 60 60 20 61 73 20 74 68 65 20 60 75 70 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 | th2``.as.the.`upstream.interface |
5e980 | 60 00 52 65 71 75 69 72 65 20 74 68 65 20 70 65 65 72 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 | `.Require.the.peer.to.authentica |
5e9a0 | 74 65 20 69 74 73 65 6c 66 20 75 73 69 6e 67 20 6f 6e 65 20 6f 66 20 74 68 65 20 66 6f 6c 6c 6f | te.itself.using.one.of.the.follo |
5e9c0 | 77 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 3a 20 70 61 70 2c 20 63 68 61 70 2c 20 6d 73 63 68 61 | wing.protocols:.pap,.chap,.mscha |
5e9e0 | 70 2c 20 6d 73 63 68 61 70 2d 76 32 2e 00 52 65 71 75 69 72 65 6d 65 6e 74 73 00 52 65 71 75 69 | p,.mschap-v2..Requirements.Requi |
5ea00 | 72 65 6d 65 6e 74 73 20 74 6f 20 65 6e 61 62 6c 65 20 73 79 6e 70 72 6f 78 79 3a 00 52 65 71 75 | rements.to.enable.synproxy:.Requ |
5ea20 | 69 72 65 6d 65 6e 74 73 3a 00 52 65 73 65 74 00 52 65 73 65 74 20 4f 70 65 6e 56 50 4e 00 52 65 | irements:.Reset.Reset.OpenVPN.Re |
5ea40 | 73 65 74 20 63 6f 6d 6d 61 6e 64 73 00 52 65 73 65 74 73 20 74 68 65 20 6c 6f 63 61 6c 20 44 4e | set.commands.Resets.the.local.DN |
5ea60 | 53 20 66 6f 72 77 61 72 64 69 6e 67 20 63 61 63 68 65 20 64 61 74 61 62 61 73 65 2e 20 59 6f 75 | S.forwarding.cache.database..You |
5ea80 | 20 63 61 6e 20 72 65 73 65 74 20 74 68 65 20 63 61 63 68 65 20 66 6f 72 20 61 6c 6c 20 65 6e 74 | .can.reset.the.cache.for.all.ent |
5eaa0 | 72 69 65 73 20 6f 72 20 6f 6e 6c 79 20 66 6f 72 20 65 6e 74 72 69 65 73 20 74 6f 20 61 20 73 70 | ries.or.only.for.entries.to.a.sp |
5eac0 | 65 63 69 66 69 63 20 64 6f 6d 61 69 6e 2e 00 52 65 73 74 61 72 74 00 52 65 73 74 61 72 74 20 44 | ecific.domain..Restart.Restart.D |
5eae0 | 48 43 50 20 72 65 6c 61 79 20 73 65 72 76 69 63 65 00 52 65 73 74 61 72 74 20 44 48 43 50 76 36 | HCP.relay.service.Restart.DHCPv6 |
5eb00 | 20 72 65 6c 61 79 20 61 67 65 6e 74 20 69 6d 6d 65 64 69 61 74 65 6c 79 2e 00 52 65 73 74 61 72 | .relay.agent.immediately..Restar |
5eb20 | 74 20 61 20 67 69 76 65 6e 20 63 6f 6e 74 61 69 6e 65 72 00 52 65 73 74 61 72 74 20 6d 44 4e 53 | t.a.given.container.Restart.mDNS |
5eb40 | 20 72 65 70 65 61 74 65 72 20 73 65 72 76 69 63 65 2e 00 52 65 73 74 61 72 74 20 74 68 65 20 44 | .repeater.service..Restart.the.D |
5eb60 | 48 43 50 20 73 65 72 76 65 72 00 52 65 73 74 61 72 74 20 74 68 65 20 49 47 4d 50 20 70 72 6f 78 | HCP.server.Restart.the.IGMP.prox |
5eb80 | 79 20 70 72 6f 63 65 73 73 2e 00 52 65 73 74 61 72 74 20 74 68 65 20 53 53 48 20 64 61 65 6d 6f | y.process..Restart.the.SSH.daemo |
5eba0 | 6e 20 70 72 6f 63 65 73 73 2c 20 74 68 65 20 63 75 72 72 65 6e 74 20 73 65 73 73 69 6f 6e 20 69 | n.process,.the.current.session.i |
5ebc0 | 73 20 6e 6f 74 20 61 66 66 65 63 74 65 64 2c 20 6f 6e 6c 79 20 74 68 65 20 62 61 63 6b 67 72 6f | s.not.affected,.only.the.backgro |
5ebe0 | 75 6e 64 20 64 61 65 6d 6f 6e 20 69 73 20 72 65 73 74 61 72 74 65 64 2e 00 52 65 73 74 61 72 74 | und.daemon.is.restarted..Restart |
5ec00 | 73 20 74 68 65 20 44 4e 53 20 72 65 63 75 72 73 6f 72 20 70 72 6f 63 65 73 73 2e 20 54 68 69 73 | s.the.DNS.recursor.process..This |
5ec20 | 20 61 6c 73 6f 20 69 6e 76 61 6c 69 64 61 74 65 73 20 74 68 65 20 6c 6f 63 61 6c 20 44 4e 53 20 | .also.invalidates.the.local.DNS. |
5ec40 | 66 6f 72 77 61 72 64 69 6e 67 20 63 61 63 68 65 2e 00 52 65 73 75 6c 74 69 6e 67 20 69 6e 00 52 | forwarding.cache..Resulting.in.R |
5ec60 | 65 73 75 6c 74 73 20 69 6e 3a 00 52 65 74 72 61 6e 73 6d 69 74 20 54 69 6d 65 72 00 52 65 74 72 | esults.in:.Retransmit.Timer.Retr |
5ec80 | 69 65 76 65 20 63 75 72 72 65 6e 74 20 73 74 61 74 69 73 74 69 63 73 20 6f 66 20 63 6f 6e 6e 65 | ieve.current.statistics.of.conne |
5eca0 | 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 73 75 62 73 79 73 74 65 6d 2e 00 52 65 74 72 69 65 | ction.tracking.subsystem..Retrie |
5ecc0 | 76 65 20 63 75 72 72 65 6e 74 20 73 74 61 74 75 73 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 | ve.current.status.of.connection. |
5ece0 | 74 72 61 63 6b 69 6e 67 20 73 75 62 73 79 73 74 65 6d 2e 00 52 65 74 72 69 65 76 65 20 70 75 62 | tracking.subsystem..Retrieve.pub |
5ed00 | 6c 69 63 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 66 72 6f 6d 20 63 6f 6e 66 69 67 75 72 65 64 20 | lic.key.portion.from.configured. |
5ed20 | 57 49 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 2e 00 52 65 76 65 72 73 65 2d 70 72 6f | WIreGuard.interface..Reverse-pro |
5ed40 | 78 79 00 52 6f 75 6e 64 20 52 6f 62 69 6e 00 52 6f 75 74 65 20 41 67 67 72 65 67 61 74 69 6f 6e | xy.Round.Robin.Route.Aggregation |
5ed60 | 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 52 6f 75 74 65 20 44 61 6d 70 65 6e 69 6e 67 00 52 | .Configuration.Route.Dampening.R |
5ed80 | 6f 75 74 65 20 46 69 6c 74 65 72 69 6e 67 00 52 6f 75 74 65 20 46 69 6c 74 65 72 69 6e 67 20 43 | oute.Filtering.Route.Filtering.C |
5eda0 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 52 6f 75 74 65 20 4d 61 70 00 52 6f 75 74 65 20 4d 61 70 | onfiguration.Route.Map.Route.Map |
5edc0 | 20 50 6f 6c 69 63 79 00 52 6f 75 74 65 20 52 65 64 69 73 74 72 69 62 75 74 69 6f 6e 00 52 6f 75 | .Policy.Route.Redistribution.Rou |
5ede0 | 74 65 20 52 65 66 6c 65 63 74 6f 72 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 52 6f 75 74 65 | te.Reflector.Configuration.Route |
5ee00 | 20 53 65 6c 65 63 74 69 6f 6e 00 52 6f 75 74 65 20 53 65 6c 65 63 74 69 6f 6e 20 43 6f 6e 66 69 | .Selection.Route.Selection.Confi |
5ee20 | 67 75 72 61 74 69 6f 6e 00 52 6f 75 74 65 20 61 6e 64 20 52 6f 75 74 65 36 20 50 6f 6c 69 63 79 | guration.Route.and.Route6.Policy |
5ee40 | 00 52 6f 75 74 65 20 64 61 6d 70 65 6e 69 6e 67 20 77 69 63 68 20 64 65 73 63 72 69 62 65 64 20 | .Route.dampening.wich.described. |
5ee60 | 69 6e 20 3a 72 66 63 3a 60 32 34 33 39 60 20 65 6e 61 62 6c 65 73 20 79 6f 75 20 74 6f 20 69 64 | in.:rfc:`2439`.enables.you.to.id |
5ee80 | 65 6e 74 69 66 79 20 72 6f 75 74 65 73 20 74 68 61 74 20 72 65 70 65 61 74 65 64 6c 79 20 66 61 | entify.routes.that.repeatedly.fa |
5eea0 | 69 6c 20 61 6e 64 20 72 65 74 75 72 6e 2e 20 49 66 20 72 6f 75 74 65 20 64 61 6d 70 65 6e 69 6e | il.and.return..If.route.dampenin |
5eec0 | 67 20 69 73 20 65 6e 61 62 6c 65 64 2c 20 61 6e 20 75 6e 73 74 61 62 6c 65 20 72 6f 75 74 65 20 | g.is.enabled,.an.unstable.route. |
5eee0 | 61 63 63 75 6d 75 6c 61 74 65 73 20 70 65 6e 61 6c 74 69 65 73 20 65 61 63 68 20 74 69 6d 65 20 | accumulates.penalties.each.time. |
5ef00 | 74 68 65 20 72 6f 75 74 65 20 66 61 69 6c 73 20 61 6e 64 20 72 65 74 75 72 6e 73 2e 20 49 66 20 | the.route.fails.and.returns..If. |
5ef20 | 74 68 65 20 61 63 63 75 6d 75 6c 61 74 65 64 20 70 65 6e 61 6c 74 69 65 73 20 65 78 63 65 65 64 | the.accumulated.penalties.exceed |
5ef40 | 20 61 20 74 68 72 65 73 68 6f 6c 64 2c 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 6e 6f 20 6c 6f | .a.threshold,.the.route.is.no.lo |
5ef60 | 6e 67 65 72 20 61 64 76 65 72 74 69 73 65 64 2e 20 54 68 69 73 20 69 73 20 72 6f 75 74 65 20 73 | nger.advertised..This.is.route.s |
5ef80 | 75 70 70 72 65 73 73 69 6f 6e 2e 20 52 6f 75 74 65 73 20 74 68 61 74 20 68 61 76 65 20 62 65 65 | uppression..Routes.that.have.bee |
5efa0 | 6e 20 73 75 70 70 72 65 73 73 65 64 20 61 72 65 20 72 65 2d 65 6e 74 65 72 65 64 20 69 6e 74 6f | n.suppressed.are.re-entered.into |
5efc0 | 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 6f 6e 6c 79 20 77 68 65 6e 20 74 68 65 | .the.routing.table.only.when.the |
5efe0 | 20 61 6d 6f 75 6e 74 20 6f 66 20 74 68 65 69 72 20 70 65 6e 61 6c 74 79 20 66 61 6c 6c 73 20 62 | .amount.of.their.penalty.falls.b |
5f000 | 65 6c 6f 77 20 61 20 74 68 72 65 73 68 6f 6c 64 2e 00 52 6f 75 74 65 20 66 69 6c 74 65 72 20 63 | elow.a.threshold..Route.filter.c |
5f020 | 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 75 73 69 6e 67 20 61 20 72 6f 75 74 65 2d 6d 61 70 3a | an.be.applied.using.a.route-map: |
5f040 | 00 52 6f 75 74 65 20 6d 61 70 20 69 73 20 61 20 70 6f 77 65 72 66 75 6c 6c 20 63 6f 6d 6d 61 6e | .Route.map.is.a.powerfull.comman |
5f060 | 64 2c 20 74 68 61 74 20 67 69 76 65 73 20 6e 65 74 77 6f 72 6b 20 61 64 6d 69 6e 69 73 74 72 61 | d,.that.gives.network.administra |
5f080 | 74 6f 72 73 20 61 20 76 65 72 79 20 75 73 65 66 75 6c 20 61 6e 64 20 66 6c 65 78 69 62 6c 65 20 | tors.a.very.useful.and.flexible. |
5f0a0 | 74 6f 6f 6c 20 66 6f 72 20 74 72 61 66 66 69 63 20 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2e 00 52 | tool.for.traffic.manipulation..R |
5f0c0 | 6f 75 74 65 20 6d 61 70 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 6d | oute.maps.can.be.configured.to.m |
5f0e0 | 61 74 63 68 20 61 20 73 70 65 63 69 66 69 63 20 52 50 4b 49 20 76 61 6c 69 64 61 74 69 6f 6e 20 | atch.a.specific.RPKI.validation. |
5f100 | 73 74 61 74 65 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 74 68 65 20 63 72 65 61 74 69 6f 6e 20 | state..This.allows.the.creation. |
5f120 | 6f 66 20 6c 6f 63 61 6c 20 70 6f 6c 69 63 69 65 73 2c 20 77 68 69 63 68 20 68 61 6e 64 6c 65 20 | of.local.policies,.which.handle. |
5f140 | 42 47 50 20 72 6f 75 74 65 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 6f 75 74 63 6f 6d 65 20 | BGP.routes.based.on.the.outcome. |
5f160 | 6f 66 20 74 68 65 20 50 72 65 66 69 78 20 4f 72 69 67 69 6e 20 56 61 6c 69 64 61 74 69 6f 6e 2e | of.the.Prefix.Origin.Validation. |
5f180 | 00 52 6f 75 74 65 20 6d 65 74 72 69 63 00 52 6f 75 74 65 20 74 61 67 20 74 6f 20 6d 61 74 63 68 | .Route.metric.Route.tag.to.match |
5f1a0 | 2e 00 52 6f 75 74 65 72 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 73 00 52 6f 75 74 65 72 20 4c | ..Router.Advertisements.Router.L |
5f1c0 | 69 66 65 74 69 6d 65 00 52 6f 75 74 65 72 20 72 65 63 65 69 76 65 73 20 44 48 43 50 20 63 6c 69 | ifetime.Router.receives.DHCP.cli |
5f1e0 | 65 6e 74 20 72 65 71 75 65 73 74 73 20 6f 6e 20 60 60 65 74 68 31 60 60 20 61 6e 64 20 72 65 6c | ent.requests.on.``eth1``.and.rel |
5f200 | 61 79 73 20 74 68 65 6d 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 20 61 74 20 31 30 2e 30 2e 31 | ays.them.to.the.server.at.10.0.1 |
5f220 | 2e 34 20 6f 6e 20 60 60 65 74 68 32 60 60 2e 00 52 6f 75 74 65 73 20 65 78 70 6f 72 74 65 64 20 | .4.on.``eth2``..Routes.exported. |
5f240 | 66 72 6f 6d 20 61 20 75 6e 69 63 61 73 74 20 56 52 46 20 74 6f 20 74 68 65 20 56 50 4e 20 52 49 | from.a.unicast.VRF.to.the.VPN.RI |
5f260 | 42 20 6d 75 73 74 20 62 65 20 61 75 67 6d 65 6e 74 65 64 20 62 79 20 74 77 6f 20 70 61 72 61 6d | B.must.be.augmented.by.two.param |
5f280 | 65 74 65 72 73 3a 00 52 6f 75 74 65 73 20 6f 6e 20 4e 6f 64 65 20 32 3a 00 52 6f 75 74 65 73 20 | eters:.Routes.on.Node.2:.Routes. |
5f2a0 | 74 68 61 74 20 61 72 65 20 73 65 6e 74 20 66 72 6f 6d 20 70 72 6f 76 69 64 65 72 2c 20 72 73 2d | that.are.sent.from.provider,.rs- |
5f2c0 | 73 65 72 76 65 72 2c 20 6f 72 20 74 68 65 20 70 65 65 72 20 6c 6f 63 61 6c 2d 72 6f 6c 65 20 28 | server,.or.the.peer.local-role.( |
5f2e0 | 6f 72 20 69 66 20 72 65 63 65 69 76 65 64 20 62 79 20 63 75 73 74 6f 6d 65 72 2c 20 72 73 2d 63 | or.if.received.by.customer,.rs-c |
5f300 | 6c 69 65 6e 74 2c 20 6f 72 20 74 68 65 20 70 65 65 72 20 6c 6f 63 61 6c 2d 72 6f 6c 65 29 20 77 | lient,.or.the.peer.local-role).w |
5f320 | 69 6c 6c 20 62 65 20 6d 61 72 6b 65 64 20 77 69 74 68 20 61 20 6e 65 77 20 4f 6e 6c 79 20 74 6f | ill.be.marked.with.a.new.Only.to |
5f340 | 20 43 75 73 74 6f 6d 65 72 20 28 4f 54 43 29 20 61 74 74 72 69 62 75 74 65 2e 00 52 6f 75 74 65 | .Customer.(OTC).attribute..Route |
5f360 | 73 20 77 69 74 68 20 61 20 64 69 73 74 61 6e 63 65 20 6f 66 20 32 35 35 20 61 72 65 20 65 66 66 | s.with.a.distance.of.255.are.eff |
5f380 | 65 63 74 69 76 65 6c 79 20 64 69 73 61 62 6c 65 64 20 61 6e 64 20 6e 6f 74 20 69 6e 73 74 61 6c | ectively.disabled.and.not.instal |
5f3a0 | 6c 65 64 20 69 6e 74 6f 20 74 68 65 20 6b 65 72 6e 65 6c 2e 00 52 6f 75 74 65 73 20 77 69 74 68 | led.into.the.kernel..Routes.with |
5f3c0 | 20 74 68 69 73 20 61 74 74 72 69 62 75 74 65 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 73 65 6e 74 | .this.attribute.can.only.be.sent |
5f3e0 | 20 74 6f 20 79 6f 75 72 20 6e 65 69 67 68 62 6f 72 20 69 66 20 79 6f 75 72 20 6c 6f 63 61 6c 2d | .to.your.neighbor.if.your.local- |
5f400 | 72 6f 6c 65 20 69 73 20 70 72 6f 76 69 64 65 72 20 6f 72 20 72 73 2d 73 65 72 76 65 72 2e 20 52 | role.is.provider.or.rs-server..R |
5f420 | 6f 75 74 65 73 20 77 69 74 68 20 74 68 69 73 20 61 74 74 72 69 62 75 74 65 20 63 61 6e 20 62 65 | outes.with.this.attribute.can.be |
5f440 | 20 72 65 63 65 69 76 65 64 20 6f 6e 6c 79 20 69 66 20 79 6f 75 72 20 6c 6f 63 61 6c 2d 72 6f 6c | .received.only.if.your.local-rol |
5f460 | 65 20 69 73 20 63 75 73 74 6f 6d 65 72 20 6f 72 20 72 73 2d 63 6c 69 65 6e 74 2e 00 52 6f 75 74 | e.is.customer.or.rs-client..Rout |
5f480 | 69 6e 65 00 52 6f 75 74 69 6e 67 00 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 20 74 68 61 74 20 | ine.Routing.Routing.tables.that. |
5f4a0 | 77 69 6c 6c 20 62 65 20 75 73 65 64 20 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 61 72 65 | will.be.used.in.this.example.are |
5f4c0 | 3a 00 52 75 6c 65 20 31 30 20 6d 61 74 63 68 65 73 20 72 65 71 75 65 73 74 73 20 77 69 74 68 20 | :.Rule.10.matches.requests.with. |
5f4e0 | 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 60 60 6e 6f 64 65 31 2e 65 78 61 6d 70 6c 65 2e | the.domain.name.``node1.example. |
5f500 | 63 6f 6d 60 60 20 66 6f 72 77 61 72 64 73 20 74 6f 20 74 68 65 20 62 61 63 6b 65 6e 64 20 60 60 | com``.forwards.to.the.backend.`` |
5f520 | 62 6b 2d 61 70 69 2d 30 31 60 60 00 52 75 6c 65 20 31 30 20 6d 61 74 63 68 65 73 20 72 65 71 75 | bk-api-01``.Rule.10.matches.requ |
5f540 | 65 73 74 73 20 77 69 74 68 20 74 68 65 20 65 78 61 63 74 20 55 52 4c 20 70 61 74 68 20 60 60 2f | ests.with.the.exact.URL.path.``/ |
5f560 | 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e 2f 78 78 78 60 60 20 61 6e 64 20 72 65 64 69 72 65 63 74 73 20 | .well-known/xxx``.and.redirects. |
5f580 | 74 6f 20 6c 6f 63 61 74 69 6f 6e 20 60 60 2f 63 65 72 74 73 2f 60 60 2e 00 52 75 6c 65 20 31 31 | to.location.``/certs/``..Rule.11 |
5f5a0 | 30 20 69 73 20 68 69 74 2c 20 73 6f 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 61 63 63 65 70 | 0.is.hit,.so.connection.is.accep |
5f5c0 | 74 65 64 2e 00 52 75 6c 65 20 32 30 20 6d 61 74 63 68 65 73 20 72 65 71 75 65 73 74 73 20 77 69 | ted..Rule.20.matches.requests.wi |
5f5e0 | 74 68 20 55 52 4c 20 70 61 74 68 73 20 65 6e 64 69 6e 67 20 69 6e 20 60 60 2f 6d 61 69 6c 60 60 | th.URL.paths.ending.in.``/mail`` |
5f600 | 20 6f 72 20 65 78 61 63 74 20 70 61 74 68 20 60 60 2f 65 6d 61 69 6c 2f 62 61 72 60 60 20 72 65 | .or.exact.path.``/email/bar``.re |
5f620 | 64 69 72 65 63 74 20 74 6f 20 6c 6f 63 61 74 69 6f 6e 20 60 60 2f 70 6f 73 74 66 69 78 2f 60 60 | direct.to.location.``/postfix/`` |
5f640 | 2e 00 52 75 6c 65 20 32 30 20 6d 61 74 63 68 65 73 20 72 65 71 75 65 73 74 73 20 77 69 74 68 20 | ..Rule.20.matches.requests.with. |
5f660 | 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 60 60 6e 6f 64 65 32 2e 65 78 61 6d 70 6c 65 2e | the.domain.name.``node2.example. |
5f680 | 63 6f 6d 60 60 20 66 6f 72 77 61 72 64 73 20 74 6f 20 74 68 65 20 62 61 63 6b 65 6e 64 20 60 60 | com``.forwards.to.the.backend.`` |
5f6a0 | 62 6b 2d 61 70 69 2d 30 32 60 60 00 52 75 6c 65 20 53 74 61 74 75 73 00 52 75 6c 65 2d 53 65 74 | bk-api-02``.Rule.Status.Rule-Set |
5f6c0 | 73 00 52 75 6c 65 2d 73 65 74 20 6f 76 65 72 76 69 65 77 00 52 75 6c 65 73 00 52 75 6c 65 73 20 | s.Rule-set.overview.Rules.Rules. |
5f6e0 | 61 6c 6c 6f 77 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 61 6e 64 20 72 6f 75 74 65 20 69 6e 63 6f 6d | allow.to.control.and.route.incom |
5f700 | 69 6e 67 20 74 72 61 66 66 69 63 20 74 6f 20 73 70 65 63 69 66 69 63 20 62 61 63 6b 65 6e 64 20 | ing.traffic.to.specific.backend. |
5f720 | 62 61 73 65 64 20 6f 6e 20 70 72 65 64 65 66 69 6e 65 64 20 63 6f 6e 64 69 74 69 6f 6e 73 2e 20 | based.on.predefined.conditions.. |
5f740 | 52 75 6c 65 73 20 61 6c 6c 6f 77 20 74 6f 20 64 65 66 69 6e 65 20 6d 61 74 63 68 69 6e 67 20 63 | Rules.allow.to.define.matching.c |
5f760 | 72 69 74 65 72 69 61 20 61 6e 64 20 70 65 72 66 6f 72 6d 20 61 63 74 69 6f 6e 20 61 63 63 6f 72 | riteria.and.perform.action.accor |
5f780 | 64 69 6e 67 6c 79 2e 00 52 75 6c 65 73 20 77 69 6c 6c 20 62 65 20 63 72 65 61 74 65 64 20 66 6f | dingly..Rules.will.be.created.fo |
5f7a0 | 72 20 62 6f 74 68 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 61 6e 64 20 3a 72 65 | r.both.:ref:`source-nat`.and.:re |
5f7c0 | 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 2e 00 52 75 6e 6e 69 6e 67 20 42 65 68 | f:`destination-nat`..Running.Beh |
5f7e0 | 69 6e 64 20 4e 41 54 00 53 4e 41 54 00 53 4e 41 54 36 34 00 53 4e 41 54 36 36 00 53 4e 4d 50 00 | ind.NAT.SNAT.SNAT64.SNAT66.SNMP. |
5f800 | 53 4e 4d 50 20 45 78 74 65 6e 73 69 6f 6e 73 00 53 4e 4d 50 20 50 72 6f 74 6f 63 6f 6c 20 56 65 | SNMP.Extensions.SNMP.Protocol.Ve |
5f820 | 72 73 69 6f 6e 73 00 53 4e 4d 50 20 63 61 6e 20 77 6f 72 6b 20 73 79 6e 63 68 72 6f 6e 6f 75 73 | rsions.SNMP.can.work.synchronous |
5f840 | 6c 79 20 6f 72 20 61 73 79 6e 63 68 72 6f 6e 6f 75 73 6c 79 2e 20 49 6e 20 73 79 6e 63 68 72 6f | ly.or.asynchronously..In.synchro |
5f860 | 6e 6f 75 73 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 2c 20 74 68 65 20 6d 6f 6e 69 74 6f 72 69 | nous.communication,.the.monitori |
5f880 | 6e 67 20 73 79 73 74 65 6d 20 71 75 65 72 69 65 73 20 74 68 65 20 72 6f 75 74 65 72 20 70 65 72 | ng.system.queries.the.router.per |
5f8a0 | 69 6f 64 69 63 61 6c 6c 79 2e 20 49 6e 20 61 73 79 6e 63 68 72 6f 6e 6f 75 73 2c 20 74 68 65 20 | iodically..In.asynchronous,.the. |
5f8c0 | 72 6f 75 74 65 72 20 73 65 6e 64 73 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 74 6f 20 74 68 65 | router.sends.notification.to.the |
5f8e0 | 20 22 74 72 61 70 22 20 28 74 68 65 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 68 6f 73 74 29 2e 00 53 | ."trap".(the.monitoring.host)..S |
5f900 | 4e 4d 50 20 69 73 20 61 20 63 6f 6d 70 6f 6e 65 6e 74 20 6f 66 20 74 68 65 20 49 6e 74 65 72 6e | NMP.is.a.component.of.the.Intern |
5f920 | 65 74 20 50 72 6f 74 6f 63 6f 6c 20 53 75 69 74 65 20 61 73 20 64 65 66 69 6e 65 64 20 62 79 20 | et.Protocol.Suite.as.defined.by. |
5f940 | 74 68 65 20 49 6e 74 65 72 6e 65 74 20 45 6e 67 69 6e 65 65 72 69 6e 67 20 54 61 73 6b 20 46 6f | the.Internet.Engineering.Task.Fo |
5f960 | 72 63 65 20 28 49 45 54 46 29 2e 20 49 74 20 63 6f 6e 73 69 73 74 73 20 6f 66 20 61 20 73 65 74 | rce.(IETF)..It.consists.of.a.set |
5f980 | 20 6f 66 20 73 74 61 6e 64 61 72 64 73 20 66 6f 72 20 6e 65 74 77 6f 72 6b 20 6d 61 6e 61 67 65 | .of.standards.for.network.manage |
5f9a0 | 6d 65 6e 74 2c 20 69 6e 63 6c 75 64 69 6e 67 20 61 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 6c | ment,.including.an.application.l |
5f9c0 | 61 79 65 72 20 70 72 6f 74 6f 63 6f 6c 2c 20 61 20 64 61 74 61 62 61 73 65 20 73 63 68 65 6d 61 | ayer.protocol,.a.database.schema |
5f9e0 | 2c 20 61 6e 64 20 61 20 73 65 74 20 6f 66 20 64 61 74 61 20 6f 62 6a 65 63 74 73 2e 00 53 4e 4d | ,.and.a.set.of.data.objects..SNM |
5fa00 | 50 20 69 73 20 77 69 64 65 6c 79 20 75 73 65 64 20 69 6e 20 6e 65 74 77 6f 72 6b 20 6d 61 6e 61 | P.is.widely.used.in.network.mana |
5fa20 | 67 65 6d 65 6e 74 20 66 6f 72 20 6e 65 74 77 6f 72 6b 20 6d 6f 6e 69 74 6f 72 69 6e 67 2e 20 53 | gement.for.network.monitoring..S |
5fa40 | 4e 4d 50 20 65 78 70 6f 73 65 73 20 6d 61 6e 61 67 65 6d 65 6e 74 20 64 61 74 61 20 69 6e 20 74 | NMP.exposes.management.data.in.t |
5fa60 | 68 65 20 66 6f 72 6d 20 6f 66 20 76 61 72 69 61 62 6c 65 73 20 6f 6e 20 74 68 65 20 6d 61 6e 61 | he.form.of.variables.on.the.mana |
5fa80 | 67 65 64 20 73 79 73 74 65 6d 73 20 6f 72 67 61 6e 69 7a 65 64 20 69 6e 20 61 20 6d 61 6e 61 67 | ged.systems.organized.in.a.manag |
5faa0 | 65 6d 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 62 61 73 65 20 28 4d 49 42 5f 29 20 77 68 | ement.information.base.(MIB_).wh |
5fac0 | 69 63 68 20 64 65 73 63 72 69 62 65 20 74 68 65 20 73 79 73 74 65 6d 20 73 74 61 74 75 73 20 61 | ich.describe.the.system.status.a |
5fae0 | 6e 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 54 68 65 73 65 20 76 61 72 69 61 62 6c 65 | nd.configuration..These.variable |
5fb00 | 73 20 63 61 6e 20 74 68 65 6e 20 62 65 20 72 65 6d 6f 74 65 6c 79 20 71 75 65 72 69 65 64 20 28 | s.can.then.be.remotely.queried.( |
5fb20 | 61 6e 64 2c 20 69 6e 20 73 6f 6d 65 20 63 69 72 63 75 6d 73 74 61 6e 63 65 73 2c 20 6d 61 6e 69 | and,.in.some.circumstances,.mani |
5fb40 | 70 75 6c 61 74 65 64 29 20 62 79 20 6d 61 6e 61 67 69 6e 67 20 61 70 70 6c 69 63 61 74 69 6f 6e | pulated).by.managing.application |
5fb60 | 73 2e 00 53 4e 4d 50 76 32 00 53 4e 4d 50 76 32 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 | s..SNMPv2.SNMPv2.does.not.suppor |
5fb80 | 74 20 61 6e 79 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 73 2c | t.any.authentication.mechanisms, |
5fba0 | 20 6f 74 68 65 72 20 74 68 61 6e 20 63 6c 69 65 6e 74 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 | .other.than.client.source.addres |
5fbc0 | 73 2c 20 73 6f 20 79 6f 75 20 73 68 6f 75 6c 64 20 73 70 65 63 69 66 79 20 61 64 64 72 65 73 73 | s,.so.you.should.specify.address |
5fbe0 | 65 73 20 6f 66 20 63 6c 69 65 6e 74 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 6d 6f 6e 69 74 6f 72 | es.of.clients.allowed.to.monitor |
5fc00 | 20 74 68 65 20 72 6f 75 74 65 72 2e 20 4e 6f 74 65 20 74 68 61 74 20 53 4e 4d 50 76 32 20 61 6c | .the.router..Note.that.SNMPv2.al |
5fc20 | 73 6f 20 73 75 70 70 6f 72 74 73 20 6e 6f 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6e 64 20 61 6c | so.supports.no.encryption.and.al |
5fc40 | 77 61 79 73 20 73 65 6e 64 73 20 64 61 74 61 20 69 6e 20 70 6c 61 69 6e 20 74 65 78 74 2e 00 53 | ways.sends.data.in.plain.text..S |
5fc60 | 4e 4d 50 76 32 20 69 73 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 61 6e 64 20 6d 6f 73 74 20 63 | NMPv2.is.the.original.and.most.c |
5fc80 | 6f 6d 6d 6f 6e 6c 79 20 75 73 65 64 20 76 65 72 73 69 6f 6e 2e 20 46 6f 72 20 61 75 74 68 6f 72 | ommonly.used.version..For.author |
5fca0 | 69 7a 69 6e 67 20 63 6c 69 65 6e 74 73 2c 20 53 4e 4d 50 20 75 73 65 73 20 74 68 65 20 63 6f 6e | izing.clients,.SNMP.uses.the.con |
5fcc0 | 63 65 70 74 20 6f 66 20 63 6f 6d 6d 75 6e 69 74 69 65 73 2e 20 43 6f 6d 6d 75 6e 69 74 69 65 73 | cept.of.communities..Communities |
5fce0 | 20 6d 61 79 20 68 61 76 65 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 73 65 74 20 74 6f 20 72 | .may.have.authorization.set.to.r |
5fd00 | 65 61 64 20 6f 6e 6c 79 20 28 74 68 69 73 20 69 73 20 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 29 20 6f | ead.only.(this.is.most.common).o |
5fd20 | 72 20 74 6f 20 72 65 61 64 20 61 6e 64 20 77 72 69 74 65 20 28 74 68 69 73 20 6f 70 74 69 6f 6e | r.to.read.and.write.(this.option |
5fd40 | 20 69 73 20 6e 6f 74 20 61 63 74 69 76 65 6c 79 20 75 73 65 64 20 69 6e 20 56 79 4f 53 29 2e 00 | .is.not.actively.used.in.VyOS).. |
5fd60 | 53 4e 4d 50 76 33 00 53 4e 4d 50 76 33 20 28 76 65 72 73 69 6f 6e 20 33 20 6f 66 20 74 68 65 20 | SNMPv3.SNMPv3.(version.3.of.the. |
5fd80 | 53 4e 4d 50 20 70 72 6f 74 6f 63 6f 6c 29 20 69 6e 74 72 6f 64 75 63 65 64 20 61 20 77 68 6f 6c | SNMP.protocol).introduced.a.whol |
5fda0 | 65 20 73 6c 65 77 20 6f 66 20 6e 65 77 20 73 65 63 75 72 69 74 79 20 72 65 6c 61 74 65 64 20 66 | e.slew.of.new.security.related.f |
5fdc0 | 65 61 74 75 72 65 73 20 74 68 61 74 20 68 61 76 65 20 62 65 65 6e 20 6d 69 73 73 69 6e 67 20 66 | eatures.that.have.been.missing.f |
5fde0 | 72 6f 6d 20 74 68 65 20 70 72 65 76 69 6f 75 73 20 76 65 72 73 69 6f 6e 73 2e 20 53 65 63 75 72 | rom.the.previous.versions..Secur |
5fe00 | 69 74 79 20 77 61 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 62 69 67 67 65 73 74 20 77 65 61 6b 6e | ity.was.one.of.the.biggest.weakn |
5fe20 | 65 73 73 20 6f 66 20 53 4e 4d 50 20 75 6e 74 69 6c 20 76 33 2e 20 41 75 74 68 65 6e 74 69 63 61 | ess.of.SNMP.until.v3..Authentica |
5fe40 | 74 69 6f 6e 20 69 6e 20 53 4e 4d 50 20 56 65 72 73 69 6f 6e 73 20 31 20 61 6e 64 20 32 20 61 6d | tion.in.SNMP.Versions.1.and.2.am |
5fe60 | 6f 75 6e 74 73 20 74 6f 20 6e 6f 74 68 69 6e 67 20 6d 6f 72 65 20 74 68 61 6e 20 61 20 70 61 73 | ounts.to.nothing.more.than.a.pas |
5fe80 | 73 77 6f 72 64 20 28 63 6f 6d 6d 75 6e 69 74 79 20 73 74 72 69 6e 67 29 20 73 65 6e 74 20 69 6e | sword.(community.string).sent.in |
5fea0 | 20 63 6c 65 61 72 20 74 65 78 74 20 62 65 74 77 65 65 6e 20 61 20 6d 61 6e 61 67 65 72 20 61 6e | .clear.text.between.a.manager.an |
5fec0 | 64 20 61 67 65 6e 74 2e 20 45 61 63 68 20 53 4e 4d 50 76 33 20 6d 65 73 73 61 67 65 20 63 6f 6e | d.agent..Each.SNMPv3.message.con |
5fee0 | 74 61 69 6e 73 20 73 65 63 75 72 69 74 79 20 70 61 72 61 6d 65 74 65 72 73 20 77 68 69 63 68 20 | tains.security.parameters.which. |
5ff00 | 61 72 65 20 65 6e 63 6f 64 65 64 20 61 73 20 61 6e 20 6f 63 74 65 74 20 73 74 72 69 6e 67 2e 20 | are.encoded.as.an.octet.string.. |
5ff20 | 54 68 65 20 6d 65 61 6e 69 6e 67 20 6f 66 20 74 68 65 73 65 20 73 65 63 75 72 69 74 79 20 70 61 | The.meaning.of.these.security.pa |
5ff40 | 72 61 6d 65 74 65 72 73 20 64 65 70 65 6e 64 73 20 6f 6e 20 74 68 65 20 73 65 63 75 72 69 74 79 | rameters.depends.on.the.security |
5ff60 | 20 6d 6f 64 65 6c 20 62 65 69 6e 67 20 75 73 65 64 2e 00 53 50 41 4e 20 70 6f 72 74 20 6d 69 72 | .model.being.used..SPAN.port.mir |
5ff80 | 72 6f 72 69 6e 67 20 63 61 6e 20 63 6f 70 79 20 74 68 65 20 69 6e 62 6f 75 6e 64 2f 6f 75 74 62 | roring.can.copy.the.inbound/outb |
5ffa0 | 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f | ound.traffic.of.the.interface.to |
5ffc0 | 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2c 20 75 73 75 61 6c 6c | .the.specified.interface,.usuall |
5ffe0 | 79 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 62 65 20 63 6f 6e 6e 65 63 74 65 64 | y.the.interface.can.be.connected |
60000 | 20 74 6f 20 73 6f 6d 65 20 73 70 65 63 69 61 6c 20 65 71 75 69 70 6d 65 6e 74 2c 20 73 75 63 68 | .to.some.special.equipment,.such |
60020 | 20 61 73 20 62 65 68 61 76 69 6f 72 20 63 6f 6e 74 72 6f 6c 20 73 79 73 74 65 6d 2c 20 69 6e 74 | .as.behavior.control.system,.int |
60040 | 72 75 73 69 6f 6e 20 64 65 74 65 63 74 69 6f 6e 20 73 79 73 74 65 6d 20 61 6e 64 20 74 72 61 66 | rusion.detection.system.and.traf |
60060 | 66 69 63 20 63 6f 6c 6c 65 63 74 6f 72 2c 20 61 6e 64 20 63 61 6e 20 63 6f 70 79 20 61 6c 6c 20 | fic.collector,.and.can.copy.all. |
60080 | 72 65 6c 61 74 65 64 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 74 68 69 73 20 70 6f 72 74 2e 20 | related.traffic.from.this.port.. |
600a0 | 54 68 65 20 62 65 6e 65 66 69 74 20 6f 66 20 6d 69 72 72 6f 72 69 6e 67 20 74 68 65 20 74 72 61 | The.benefit.of.mirroring.the.tra |
600c0 | 66 66 69 63 20 69 73 20 74 68 61 74 20 74 68 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 69 73 20 | ffic.is.that.the.application.is. |
600e0 | 69 73 6f 6c 61 74 65 64 20 66 72 6f 6d 20 74 68 65 20 73 6f 75 72 63 65 20 74 72 61 66 66 69 63 | isolated.from.the.source.traffic |
60100 | 20 61 6e 64 20 73 6f 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 70 72 6f 63 65 73 73 69 6e 67 20 64 | .and.so.application.processing.d |
60120 | 6f 65 73 20 6e 6f 74 20 61 66 66 65 63 74 20 74 68 65 20 74 72 61 66 66 69 63 20 6f 72 20 74 68 | oes.not.affect.the.traffic.or.th |
60140 | 65 20 73 79 73 74 65 6d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 00 53 53 48 00 53 53 48 20 3a 72 | e.system.performance..SSH.SSH.:r |
60160 | 65 66 3a 60 73 73 68 5f 6b 65 79 5f 62 61 73 65 64 5f 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | ef:`ssh_key_based_authentication |
60180 | 60 00 53 53 48 20 3a 72 65 66 3a 60 73 73 68 5f 6f 70 65 72 61 74 69 6f 6e 60 00 53 53 48 20 63 | `.SSH.:ref:`ssh_operation`.SSH.c |
601a0 | 6c 69 65 6e 74 00 53 53 48 20 70 72 6f 76 69 64 65 73 20 61 20 73 65 63 75 72 65 20 63 68 61 6e | lient.SSH.provides.a.secure.chan |
601c0 | 6e 65 6c 20 6f 76 65 72 20 61 6e 20 75 6e 73 65 63 75 72 65 64 20 6e 65 74 77 6f 72 6b 20 69 6e | nel.over.an.unsecured.network.in |
601e0 | 20 61 20 63 6c 69 65 6e 74 2d 73 65 72 76 65 72 20 61 72 63 68 69 74 65 63 74 75 72 65 2c 20 63 | .a.client-server.architecture,.c |
60200 | 6f 6e 6e 65 63 74 69 6e 67 20 61 6e 20 53 53 48 20 63 6c 69 65 6e 74 20 61 70 70 6c 69 63 61 74 | onnecting.an.SSH.client.applicat |
60220 | 69 6f 6e 20 77 69 74 68 20 61 6e 20 53 53 48 20 73 65 72 76 65 72 2e 20 43 6f 6d 6d 6f 6e 20 61 | ion.with.an.SSH.server..Common.a |
60240 | 70 70 6c 69 63 61 74 69 6f 6e 73 20 69 6e 63 6c 75 64 65 20 72 65 6d 6f 74 65 20 63 6f 6d 6d 61 | pplications.include.remote.comma |
60260 | 6e 64 2d 6c 69 6e 65 20 6c 6f 67 69 6e 20 61 6e 64 20 72 65 6d 6f 74 65 20 63 6f 6d 6d 61 6e 64 | nd-line.login.and.remote.command |
60280 | 20 65 78 65 63 75 74 69 6f 6e 2c 20 62 75 74 20 61 6e 79 20 6e 65 74 77 6f 72 6b 20 73 65 72 76 | .execution,.but.any.network.serv |
602a0 | 69 63 65 20 63 61 6e 20 62 65 20 73 65 63 75 72 65 64 20 77 69 74 68 20 53 53 48 2e 20 54 68 65 | ice.can.be.secured.with.SSH..The |
602c0 | 20 70 72 6f 74 6f 63 6f 6c 20 73 70 65 63 69 66 69 63 61 74 69 6f 6e 20 64 69 73 74 69 6e 67 75 | .protocol.specification.distingu |
602e0 | 69 73 68 65 73 20 62 65 74 77 65 65 6e 20 74 77 6f 20 6d 61 6a 6f 72 20 76 65 72 73 69 6f 6e 73 | ishes.between.two.major.versions |
60300 | 2c 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 53 53 48 2d 31 20 61 6e 64 20 53 53 48 2d 32 | ,.referred.to.as.SSH-1.and.SSH-2 |
60320 | 2e 00 53 53 48 20 75 73 65 72 6e 61 6d 65 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 6e 20 53 | ..SSH.username.to.establish.an.S |
60340 | 53 48 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 74 68 65 20 63 61 63 68 65 20 73 65 72 76 65 | SH.connection.to.the.cache.serve |
60360 | 72 2e 00 53 53 48 20 77 61 73 20 64 65 73 69 67 6e 65 64 20 61 73 20 61 20 72 65 70 6c 61 63 65 | r..SSH.was.designed.as.a.replace |
60380 | 6d 65 6e 74 20 66 6f 72 20 54 65 6c 6e 65 74 20 61 6e 64 20 66 6f 72 20 75 6e 73 65 63 75 72 65 | ment.for.Telnet.and.for.unsecure |
603a0 | 64 20 72 65 6d 6f 74 65 20 73 68 65 6c 6c 20 70 72 6f 74 6f 63 6f 6c 73 20 73 75 63 68 20 61 73 | d.remote.shell.protocols.such.as |
603c0 | 20 74 68 65 20 42 65 72 6b 65 6c 65 79 20 72 6c 6f 67 69 6e 2c 20 72 73 68 2c 20 61 6e 64 20 72 | .the.Berkeley.rlogin,.rsh,.and.r |
603e0 | 65 78 65 63 20 70 72 6f 74 6f 63 6f 6c 73 2e 20 54 68 6f 73 65 20 70 72 6f 74 6f 63 6f 6c 73 20 | exec.protocols..Those.protocols. |
60400 | 73 65 6e 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 6e 6f 74 61 62 6c 79 20 70 61 73 73 77 6f | send.information,.notably.passwo |
60420 | 72 64 73 2c 20 69 6e 20 70 6c 61 69 6e 74 65 78 74 2c 20 72 65 6e 64 65 72 69 6e 67 20 74 68 65 | rds,.in.plaintext,.rendering.the |
60440 | 6d 20 73 75 73 63 65 70 74 69 62 6c 65 20 74 6f 20 69 6e 74 65 72 63 65 70 74 69 6f 6e 20 61 6e | m.susceptible.to.interception.an |
60460 | 64 20 64 69 73 63 6c 6f 73 75 72 65 20 75 73 69 6e 67 20 70 61 63 6b 65 74 20 61 6e 61 6c 79 73 | d.disclosure.using.packet.analys |
60480 | 69 73 2e 20 54 68 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 75 73 65 64 20 62 79 20 53 53 48 20 69 | is..The.encryption.used.by.SSH.i |
604a0 | 73 20 69 6e 74 65 6e 64 65 64 20 74 6f 20 70 72 6f 76 69 64 65 20 63 6f 6e 66 69 64 65 6e 74 69 | s.intended.to.provide.confidenti |
604c0 | 61 6c 69 74 79 20 61 6e 64 20 69 6e 74 65 67 72 69 74 79 20 6f 66 20 64 61 74 61 20 6f 76 65 72 | ality.and.integrity.of.data.over |
604e0 | 20 61 6e 20 75 6e 73 65 63 75 72 65 64 20 6e 65 74 77 6f 72 6b 2c 20 73 75 63 68 20 61 73 20 74 | .an.unsecured.network,.such.as.t |
60500 | 68 65 20 49 6e 74 65 72 6e 65 74 2e 00 53 53 49 44 20 74 6f 20 62 65 20 75 73 65 64 20 69 6e 20 | he.Internet..SSID.to.be.used.in. |
60520 | 49 45 45 45 20 38 30 32 2e 31 31 20 6d 61 6e 61 67 65 6d 65 6e 74 20 66 72 61 6d 65 73 00 53 53 | IEEE.802.11.management.frames.SS |
60540 | 4c 20 43 65 72 74 69 66 69 63 61 74 65 73 00 53 53 4c 20 43 65 72 74 69 66 69 63 61 74 65 73 20 | L.Certificates.SSL.Certificates. |
60560 | 67 65 6e 65 72 61 74 69 6f 6e 00 53 53 4c 20 6d 61 74 63 68 20 53 65 72 76 65 72 20 4e 61 6d 65 | generation.SSL.match.Server.Name |
60580 | 20 49 6e 64 69 63 61 74 69 6f 6e 20 28 53 4e 49 29 20 6f 70 74 69 6f 6e 3a 00 53 53 54 50 20 43 | .Indication.(SNI).option:.SSTP.C |
605a0 | 6c 69 65 6e 74 00 53 53 54 50 20 43 6c 69 65 6e 74 20 4f 70 74 69 6f 6e 73 00 53 53 54 50 20 53 | lient.SSTP.Client.Options.SSTP.S |
605c0 | 65 72 76 65 72 00 53 53 54 50 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 4c 69 6e 75 | erver.SSTP.is.available.for.Linu |
605e0 | 78 2c 20 42 53 44 2c 20 61 6e 64 20 57 69 6e 64 6f 77 73 2e 00 53 53 54 50 20 72 65 6d 6f 74 65 | x,.BSD,.and.Windows..SSTP.remote |
60600 | 20 73 65 72 76 65 72 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 2e 20 43 61 6e 20 62 65 20 65 69 | .server.to.connect.to..Can.be.ei |
60620 | 74 68 65 72 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 46 51 44 4e 2e 00 53 54 50 20 | ther.an.IP.address.or.FQDN..STP. |
60640 | 50 61 72 61 6d 65 74 65 72 00 53 61 6c 74 2d 4d 69 6e 69 6f 6e 00 53 61 6c 74 53 74 61 63 6b 5f | Parameter.Salt-Minion.SaltStack_ |
60660 | 20 69 73 20 50 79 74 68 6f 6e 2d 62 61 73 65 64 2c 20 6f 70 65 6e 2d 73 6f 75 72 63 65 20 73 6f | .is.Python-based,.open-source.so |
60680 | 66 74 77 61 72 65 20 66 6f 72 20 65 76 65 6e 74 2d 64 72 69 76 65 6e 20 49 54 20 61 75 74 6f 6d | ftware.for.event-driven.IT.autom |
606a0 | 61 74 69 6f 6e 2c 20 72 65 6d 6f 74 65 20 74 61 73 6b 20 65 78 65 63 75 74 69 6f 6e 2c 20 61 6e | ation,.remote.task.execution,.an |
606c0 | 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 61 6e 61 67 65 6d 65 6e 74 2e 20 53 75 70 70 | d.configuration.management..Supp |
606e0 | 6f 72 74 69 6e 67 20 74 68 65 20 22 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 61 73 20 63 6f | orting.the."infrastructure.as.co |
60700 | 64 65 22 20 61 70 70 72 6f 61 63 68 20 74 6f 20 64 61 74 61 20 63 65 6e 74 65 72 20 73 79 73 74 | de".approach.to.data.center.syst |
60720 | 65 6d 20 61 6e 64 20 6e 65 74 77 6f 72 6b 20 64 65 70 6c 6f 79 6d 65 6e 74 20 61 6e 64 20 6d 61 | em.and.network.deployment.and.ma |
60740 | 6e 61 67 65 6d 65 6e 74 2c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 75 74 6f 6d 61 74 69 | nagement,.configuration.automati |
60760 | 6f 6e 2c 20 53 65 63 4f 70 73 20 6f 72 63 68 65 73 74 72 61 74 69 6f 6e 2c 20 76 75 6c 6e 65 72 | on,.SecOps.orchestration,.vulner |
60780 | 61 62 69 6c 69 74 79 20 72 65 6d 65 64 69 61 74 69 6f 6e 2c 20 61 6e 64 20 68 79 62 72 69 64 20 | ability.remediation,.and.hybrid. |
607a0 | 63 6c 6f 75 64 20 63 6f 6e 74 72 6f 6c 2e 00 53 61 6d 65 20 61 73 20 65 78 70 6f 72 74 2d 6c 69 | cloud.control..Same.as.export-li |
607c0 | 73 74 2c 20 62 75 74 20 69 74 20 61 70 70 6c 69 65 73 20 74 6f 20 70 61 74 68 73 20 61 6e 6e 6f | st,.but.it.applies.to.paths.anno |
607e0 | 75 6e 63 65 64 20 69 6e 74 6f 20 73 70 65 63 69 66 69 65 64 20 61 72 65 61 20 61 73 20 54 79 70 | unced.into.specified.area.as.Typ |
60800 | 65 2d 33 20 73 75 6d 6d 61 72 79 2d 4c 53 41 73 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6d | e-3.summary-LSAs..This.command.m |
60820 | 61 6b 65 73 20 73 65 6e 73 65 20 69 6e 20 41 42 52 20 6f 6e 6c 79 2e 00 53 61 6d 70 6c 65 20 63 | akes.sense.in.ABR.only..Sample.c |
60840 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 53 56 44 20 77 69 74 68 20 56 4c 41 4e 20 74 6f | onfiguration.of.SVD.with.VLAN.to |
60860 | 20 56 4e 49 20 6d 61 70 70 69 6e 67 73 20 69 73 20 73 68 6f 77 6e 20 62 65 6c 6f 77 2e 00 53 61 | .VNI.mappings.is.shown.below..Sa |
60880 | 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 6f 20 73 65 74 75 70 20 4c 44 50 20 | mple.configuration.to.setup.LDP. |
608a0 | 6f 6e 20 56 79 4f 53 00 53 63 61 6e 6e 69 6e 67 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 | on.VyOS.Scanning.is.not.supporte |
608c0 | 64 20 6f 6e 20 61 6c 6c 20 77 69 72 65 6c 65 73 73 20 64 72 69 76 65 72 73 20 61 6e 64 20 77 69 | d.on.all.wireless.drivers.and.wi |
608e0 | 72 65 6c 65 73 73 20 68 61 72 64 77 61 72 65 2e 20 52 65 66 65 72 20 74 6f 20 79 6f 75 72 20 64 | reless.hardware..Refer.to.your.d |
60900 | 72 69 76 65 72 20 61 6e 64 20 77 69 72 65 6c 65 73 73 20 68 61 72 64 77 61 72 65 20 64 6f 63 75 | river.and.wireless.hardware.docu |
60920 | 6d 65 6e 74 61 74 69 6f 6e 20 66 6f 72 20 66 75 72 74 68 65 72 20 64 65 74 61 69 6c 73 2e 00 53 | mentation.for.further.details..S |
60940 | 63 72 69 70 74 20 65 78 65 63 75 74 69 6f 6e 00 53 63 72 69 70 74 20 74 6f 20 72 75 6e 20 62 65 | cript.execution.Script.to.run.be |
60960 | 66 6f 72 65 20 73 65 73 73 69 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6d 65 73 20 75 70 00 | fore.session.interface.comes.up. |
60980 | 53 63 72 69 70 74 20 74 6f 20 72 75 6e 20 77 68 65 6e 20 73 65 73 73 69 6f 6e 20 69 6e 74 65 72 | Script.to.run.when.session.inter |
609a0 | 66 61 63 65 20 63 68 61 6e 67 65 64 20 62 79 20 52 41 44 49 55 53 20 43 6f 41 20 68 61 6e 64 6c | face.changed.by.RADIUS.CoA.handl |
609c0 | 69 6e 67 00 53 63 72 69 70 74 20 74 6f 20 72 75 6e 20 77 68 65 6e 20 73 65 73 73 69 6f 6e 20 69 | ing.Script.to.run.when.session.i |
609e0 | 6e 74 65 72 66 61 63 65 20 67 6f 69 6e 67 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 00 53 63 72 69 | nterface.going.to.terminate.Scri |
60a00 | 70 74 20 74 6f 20 72 75 6e 20 77 68 65 6e 20 73 65 73 73 69 6f 6e 20 69 6e 74 65 72 66 61 63 65 | pt.to.run.when.session.interface |
60a20 | 20 69 73 20 63 6f 6d 70 6c 65 74 65 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 61 6e 64 20 73 74 | .is.completely.configured.and.st |
60a40 | 61 72 74 65 64 00 53 63 72 69 70 74 69 6e 67 00 53 65 63 6f 6e 64 20 73 63 65 6e 61 72 69 6f 3a | arted.Scripting.Second.scenario: |
60a60 | 20 61 70 70 6c 79 20 73 6f 75 72 63 65 20 4e 41 54 20 66 6f 72 20 61 6c 6c 20 6f 75 74 67 6f 69 | .apply.source.NAT.for.all.outgoi |
60a80 | 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 20 4c 41 4e 20 31 30 2e 30 2e 30 2e 30 | ng.connections.from.LAN.10.0.0.0 |
60aa0 | 2f 38 2c 20 75 73 69 6e 67 20 33 20 70 75 62 6c 69 63 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 | /8,.using.3.public.addresses.and |
60ac0 | 20 65 71 75 61 6c 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 20 57 65 20 77 69 6c 6c 20 67 65 6e | .equal.distribution..We.will.gen |
60ae0 | 65 72 61 74 65 20 74 68 65 20 68 61 73 68 20 72 61 6e 64 6f 6d 6c 79 2e 00 53 65 63 72 65 74 20 | erate.the.hash.randomly..Secret. |
60b00 | 66 6f 72 20 44 79 6e 61 6d 69 63 20 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 45 78 74 65 6e 73 | for.Dynamic.Authorization.Extens |
60b20 | 69 6f 6e 20 73 65 72 76 65 72 20 28 44 4d 2f 43 6f 41 29 00 53 65 63 75 72 69 74 79 00 53 65 63 | ion.server.(DM/CoA).Security.Sec |
60b40 | 75 72 69 74 79 2f 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 00 53 65 | urity/authentication.messages.Se |
60b60 | 65 20 3a 72 66 63 3a 60 37 37 36 31 23 73 65 63 74 69 6f 6e 2d 34 2e 31 60 20 66 6f 72 20 64 65 | e.:rfc:`7761#section-4.1`.for.de |
60b80 | 74 61 69 6c 73 2e 00 53 65 65 20 62 65 6c 6f 77 20 74 68 65 20 64 69 66 66 65 72 65 6e 74 20 70 | tails..See.below.the.different.p |
60ba0 | 61 72 61 6d 65 74 65 72 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 74 68 65 20 49 50 76 34 | arameters.available.for.the.IPv4 |
60bc0 | 20 2a 2a 73 68 6f 77 2a 2a 20 63 6f 6d 6d 61 6e 64 3a 00 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 | .**show**.command:.Segment.Routi |
60be0 | 6e 67 00 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 28 53 52 29 20 69 73 20 61 20 6e 65 74 | ng.Segment.Routing.(SR).is.a.net |
60c00 | 77 6f 72 6b 20 61 72 63 68 69 74 65 63 74 75 72 65 20 74 68 61 74 20 69 73 20 73 69 6d 69 6c 61 | work.architecture.that.is.simila |
60c20 | 72 20 74 6f 20 73 6f 75 72 63 65 2d 72 6f 75 74 69 6e 67 20 2e 20 49 6e 20 74 68 69 73 20 61 72 | r.to.source-routing...In.this.ar |
60c40 | 63 68 69 74 65 63 74 75 72 65 2c 20 74 68 65 20 69 6e 67 72 65 73 73 20 72 6f 75 74 65 72 20 61 | chitecture,.the.ingress.router.a |
60c60 | 64 64 73 20 61 20 6c 69 73 74 20 6f 66 20 73 65 67 6d 65 6e 74 73 2c 20 6b 6e 6f 77 6e 20 61 73 | dds.a.list.of.segments,.known.as |
60c80 | 20 53 49 44 73 2c 20 74 6f 20 74 68 65 20 70 61 63 6b 65 74 20 61 73 20 69 74 20 65 6e 74 65 72 | .SIDs,.to.the.packet.as.it.enter |
60ca0 | 73 20 74 68 65 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 73 65 20 73 65 67 6d 65 6e 74 73 20 72 65 | s.the.network..These.segments.re |
60cc0 | 70 72 65 73 65 6e 74 20 64 69 66 66 65 72 65 6e 74 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 | present.different.portions.of.th |
60ce0 | 65 20 6e 65 74 77 6f 72 6b 20 70 61 74 68 20 74 68 61 74 20 74 68 65 20 70 61 63 6b 65 74 20 77 | e.network.path.that.the.packet.w |
60d00 | 69 6c 6c 20 74 61 6b 65 2e 00 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 63 61 6e 20 62 65 | ill.take..Segment.Routing.can.be |
60d20 | 20 61 70 70 6c 69 65 64 20 74 6f 20 61 6e 20 65 78 69 73 74 69 6e 67 20 4d 50 4c 53 2d 62 61 73 | .applied.to.an.existing.MPLS-bas |
60d40 | 65 64 20 64 61 74 61 20 70 6c 61 6e 65 20 61 6e 64 20 64 65 66 69 6e 65 73 20 61 20 63 6f 6e 74 | ed.data.plane.and.defines.a.cont |
60d60 | 72 6f 6c 20 70 6c 61 6e 65 20 6e 65 74 77 6f 72 6b 20 61 72 63 68 69 74 65 63 74 75 72 65 2e 20 | rol.plane.network.architecture.. |
60d80 | 49 6e 20 4d 50 4c 53 20 6e 65 74 77 6f 72 6b 73 2c 20 73 65 67 6d 65 6e 74 73 20 61 72 65 20 65 | In.MPLS.networks,.segments.are.e |
60da0 | 6e 63 6f 64 65 64 20 61 73 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 61 6e 64 20 61 72 65 20 61 64 | ncoded.as.MPLS.labels.and.are.ad |
60dc0 | 64 65 64 20 61 74 20 74 68 65 20 69 6e 67 72 65 73 73 20 72 6f 75 74 65 72 2e 20 54 68 65 73 65 | ded.at.the.ingress.router..These |
60de0 | 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 61 72 65 20 74 68 65 6e 20 65 78 63 68 61 6e 67 65 64 20 | .MPLS.labels.are.then.exchanged. |
60e00 | 61 6e 64 20 70 6f 70 75 6c 61 74 65 64 20 62 79 20 49 6e 74 65 72 69 6f 72 20 47 61 74 65 77 61 | and.populated.by.Interior.Gatewa |
60e20 | 79 20 50 72 6f 74 6f 63 6f 6c 73 20 28 49 47 50 73 29 20 6c 69 6b 65 20 49 53 2d 49 53 20 6f 72 | y.Protocols.(IGPs).like.IS-IS.or |
60e40 | 20 4f 53 50 46 20 77 68 69 63 68 20 61 72 65 20 72 75 6e 6e 69 6e 67 20 6f 6e 20 6d 6f 73 74 20 | .OSPF.which.are.running.on.most. |
60e60 | 49 53 50 73 2e 00 53 65 67 6d 65 6e 74 20 72 6f 75 74 69 6e 67 20 28 53 52 29 20 69 73 20 75 73 | ISPs..Segment.routing.(SR).is.us |
60e80 | 65 64 20 62 79 20 74 68 65 20 49 47 50 20 70 72 6f 74 6f 63 6f 6c 73 20 74 6f 20 69 6e 74 65 72 | ed.by.the.IGP.protocols.to.inter |
60ea0 | 63 6f 6e 6e 65 63 74 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 73 2c 20 62 65 6c 6f 77 20 63 | connect.network.devices,.below.c |
60ec0 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 68 6f 77 73 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 | onfiguration.shows.how.to.enable |
60ee0 | 20 53 52 20 6f 6e 20 49 53 2d 49 53 3a 00 53 65 67 6d 65 6e 74 20 72 6f 75 74 69 6e 67 20 28 53 | .SR.on.IS-IS:.Segment.routing.(S |
60f00 | 52 29 20 69 73 20 75 73 65 64 20 62 79 20 74 68 65 20 49 47 50 20 70 72 6f 74 6f 63 6f 6c 73 20 | R).is.used.by.the.IGP.protocols. |
60f20 | 74 6f 20 69 6e 74 65 72 63 6f 6e 6e 65 63 74 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 73 2c | to.interconnect.network.devices, |
60f40 | 20 62 65 6c 6f 77 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 68 6f 77 73 20 68 6f 77 20 74 | .below.configuration.shows.how.t |
60f60 | 6f 20 65 6e 61 62 6c 65 20 53 52 20 6f 6e 20 4f 53 50 46 3a 00 53 65 67 6d 65 6e 74 20 72 6f 75 | o.enable.SR.on.OSPF:.Segment.rou |
60f80 | 74 69 6e 67 20 64 65 66 69 6e 65 73 20 61 20 63 6f 6e 74 72 6f 6c 20 70 6c 61 6e 65 20 6e 65 74 | ting.defines.a.control.plane.net |
60fa0 | 77 6f 72 6b 20 61 72 63 68 69 74 65 63 74 75 72 65 20 61 6e 64 20 63 61 6e 20 62 65 20 61 70 70 | work.architecture.and.can.be.app |
60fc0 | 6c 69 65 64 20 74 6f 20 61 6e 20 65 78 69 73 74 69 6e 67 20 4d 50 4c 53 20 62 61 73 65 64 20 64 | lied.to.an.existing.MPLS.based.d |
60fe0 | 61 74 61 70 6c 61 6e 65 2e 20 49 6e 20 74 68 65 20 4d 50 4c 53 20 6e 65 74 77 6f 72 6b 73 2c 20 | ataplane..In.the.MPLS.networks,. |
61000 | 73 65 67 6d 65 6e 74 73 20 61 72 65 20 65 6e 63 6f 64 65 64 20 61 73 20 4d 50 4c 53 20 6c 61 62 | segments.are.encoded.as.MPLS.lab |
61020 | 65 6c 73 20 61 6e 64 20 61 72 65 20 69 6d 70 6f 73 65 64 20 61 74 20 74 68 65 20 69 6e 67 72 65 | els.and.are.imposed.at.the.ingre |
61040 | 73 73 20 72 6f 75 74 65 72 2e 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 61 72 65 20 65 78 63 68 61 | ss.router..MPLS.labels.are.excha |
61060 | 6e 67 65 64 20 61 6e 64 20 70 6f 70 75 6c 61 74 65 64 20 62 79 20 49 47 50 73 20 6c 69 6b 65 20 | nged.and.populated.by.IGPs.like. |
61080 | 49 53 2d 49 53 2e 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 61 73 20 70 65 72 20 52 46 43 | IS-IS.Segment.Routing.as.per.RFC |
610a0 | 38 36 36 37 20 66 6f 72 20 4d 50 4c 53 20 64 61 74 61 70 6c 61 6e 65 2e 20 49 74 20 73 75 70 70 | 8667.for.MPLS.dataplane..It.supp |
610c0 | 6f 72 74 73 20 49 50 76 34 2c 20 49 50 76 36 20 61 6e 64 20 45 43 4d 50 20 61 6e 64 20 68 61 73 | orts.IPv4,.IPv6.and.ECMP.and.has |
610e0 | 20 62 65 65 6e 20 74 65 73 74 65 64 20 61 67 61 69 6e 73 74 20 43 69 73 63 6f 20 26 20 4a 75 6e | .been.tested.against.Cisco.&.Jun |
61100 | 69 70 65 72 20 72 6f 75 74 65 72 73 2e 68 6f 77 65 76 65 72 2c 74 68 69 73 20 64 65 70 6c 6f 79 | iper.routers.however,this.deploy |
61120 | 6d 65 6e 74 20 69 73 20 73 74 69 6c 6c 20 45 58 50 45 52 49 4d 45 4e 54 41 4c 20 66 6f 72 20 46 | ment.is.still.EXPERIMENTAL.for.F |
61140 | 52 52 2e 00 53 65 6c 65 63 74 20 54 4c 53 20 76 65 72 73 69 6f 6e 20 75 73 65 64 2e 00 53 65 6c | RR..Select.TLS.version.used..Sel |
61160 | 65 63 74 20 63 69 70 68 65 72 20 73 75 69 74 65 20 75 73 65 64 20 66 6f 72 20 63 72 79 70 74 6f | ect.cipher.suite.used.for.crypto |
61180 | 67 72 61 70 68 69 63 20 6f 70 65 72 61 74 69 6f 6e 73 2e 20 54 68 69 73 20 73 65 74 74 69 6e 67 | graphic.operations..This.setting |
611a0 | 20 69 73 20 6d 61 6e 64 61 74 6f 72 79 2e 00 53 65 6c 65 63 74 20 68 6f 77 20 6c 61 62 65 6c 73 | .is.mandatory..Select.how.labels |
611c0 | 20 61 72 65 20 61 6c 6c 6f 63 61 74 65 64 20 69 6e 20 74 68 65 20 67 69 76 65 6e 20 56 52 46 2e | .are.allocated.in.the.given.VRF. |
611e0 | 20 42 79 20 64 65 66 61 75 6c 74 2c 20 74 68 65 20 70 65 72 2d 76 72 66 20 6d 6f 64 65 20 69 73 | .By.default,.the.per-vrf.mode.is |
61200 | 20 73 65 6c 65 63 74 65 64 2c 20 61 6e 64 20 6f 6e 65 20 6c 61 62 65 6c 20 69 73 20 75 73 65 64 | .selected,.and.one.label.is.used |
61220 | 20 66 6f 72 20 61 6c 6c 20 70 72 65 66 69 78 65 73 20 66 72 6f 6d 20 74 68 65 20 56 52 46 2e 20 | .for.all.prefixes.from.the.VRF.. |
61240 | 54 68 65 20 70 65 72 2d 6e 65 78 74 68 6f 70 20 77 69 6c 6c 20 75 73 65 20 61 20 75 6e 69 71 75 | The.per-nexthop.will.use.a.uniqu |
61260 | 65 20 6c 61 62 65 6c 20 66 6f 72 20 61 6c 6c 20 70 72 65 66 69 78 65 73 20 74 68 61 74 20 61 72 | e.label.for.all.prefixes.that.ar |
61280 | 65 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 74 68 65 20 73 61 6d 65 20 6e 65 78 74 68 6f 70 | e.reachable.via.the.same.nexthop |
612a0 | 2e 00 53 65 6c 66 20 53 69 67 6e 65 64 20 43 41 00 53 65 6e 64 20 61 20 50 72 6f 78 79 20 50 72 | ..Self.Signed.CA.Send.a.Proxy.Pr |
612c0 | 6f 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e 20 31 20 68 65 61 64 65 72 20 28 74 65 78 74 20 66 6f | otocol.version.1.header.(text.fo |
612e0 | 72 6d 61 74 29 00 53 65 6e 64 20 61 20 50 72 6f 78 79 20 50 72 6f 74 6f 63 6f 6c 20 76 65 72 73 | rmat).Send.a.Proxy.Protocol.vers |
61300 | 69 6f 6e 20 32 20 68 65 61 64 65 72 20 28 62 69 6e 61 72 79 20 66 6f 72 6d 61 74 29 00 53 65 6e | ion.2.header.(binary.format).Sen |
61320 | 64 20 61 6c 6c 20 44 4e 53 20 71 75 65 72 69 65 73 20 74 6f 20 74 68 65 20 49 50 76 34 2f 49 50 | d.all.DNS.queries.to.the.IPv4/IP |
61340 | 76 36 20 44 4e 53 20 73 65 72 76 65 72 20 73 70 65 63 69 66 69 65 64 20 75 6e 64 65 72 20 60 3c | v6.DNS.server.specified.under.`< |
61360 | 61 64 64 72 65 73 73 3e 60 20 6f 6e 20 6f 70 74 69 6f 6e 61 6c 20 70 6f 72 74 20 73 70 65 63 69 | address>`.on.optional.port.speci |
61380 | 66 69 65 64 20 75 6e 64 65 72 20 60 3c 70 6f 72 74 3e 60 2e 20 54 68 65 20 70 6f 72 74 20 64 65 | fied.under.`<port>`..The.port.de |
613a0 | 66 61 75 6c 74 73 20 74 6f 20 35 33 2e 20 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 | faults.to.53..You.can.configure. |
613c0 | 6d 75 6c 74 69 70 6c 65 20 6e 61 6d 65 73 65 72 76 65 72 73 20 68 65 72 65 2e 00 53 65 6e 64 20 | multiple.nameservers.here..Send. |
613e0 | 65 6d 70 74 79 20 53 53 49 44 20 69 6e 20 62 65 61 63 6f 6e 73 20 61 6e 64 20 69 67 6e 6f 72 65 | empty.SSID.in.beacons.and.ignore |
61400 | 20 70 72 6f 62 65 20 72 65 71 75 65 73 74 20 66 72 61 6d 65 73 20 74 68 61 74 20 64 6f 20 6e 6f | .probe.request.frames.that.do.no |
61420 | 74 20 73 70 65 63 69 66 79 20 66 75 6c 6c 20 53 53 49 44 2c 20 69 2e 65 2e 2c 20 72 65 71 75 69 | t.specify.full.SSID,.i.e.,.requi |
61440 | 72 65 20 73 74 61 74 69 6f 6e 73 20 74 6f 20 6b 6e 6f 77 20 53 53 49 44 2e 00 53 65 6e 74 20 74 | re.stations.to.know.SSID..Sent.t |
61460 | 6f 20 74 68 65 20 63 6c 69 65 6e 74 20 28 4c 41 43 29 20 69 6e 20 74 68 65 20 48 6f 73 74 2d 4e | o.the.client.(LAC).in.the.Host-N |
61480 | 61 6d 65 20 61 74 74 72 69 62 75 74 65 00 53 65 72 69 61 6c 20 43 6f 6e 73 6f 6c 65 00 53 65 72 | ame.attribute.Serial.Console.Ser |
614a0 | 69 61 6c 20 69 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 62 65 20 61 6e 79 20 69 6e 74 65 72 66 | ial.interfaces.can.be.any.interf |
614c0 | 61 63 65 20 77 68 69 63 68 20 69 73 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 | ace.which.is.directly.connected. |
614e0 | 74 6f 20 74 68 65 20 43 50 55 20 6f 72 20 63 68 69 70 73 65 74 20 28 6d 6f 73 74 6c 79 20 6b 6e | to.the.CPU.or.chipset.(mostly.kn |
61500 | 6f 77 6e 20 61 73 20 61 20 74 74 79 53 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 4c 69 6e 75 78 | own.as.a.ttyS.interface.in.Linux |
61520 | 29 20 6f 72 20 61 6e 79 20 6f 74 68 65 72 20 55 53 42 20 74 6f 20 73 65 72 69 61 6c 20 63 6f 6e | ).or.any.other.USB.to.serial.con |
61540 | 76 65 72 74 65 72 20 28 50 72 6f 6c 69 66 69 63 20 50 4c 32 33 30 33 20 6f 72 20 46 54 44 49 20 | verter.(Prolific.PL2303.or.FTDI. |
61560 | 46 54 32 33 32 2f 46 54 34 32 33 32 20 62 61 73 65 64 20 63 68 69 70 73 29 2e 00 53 65 72 76 65 | FT232/FT4232.based.chips)..Serve |
61580 | 72 00 53 65 72 76 65 72 20 43 65 72 74 69 66 69 63 61 74 65 00 53 65 72 76 65 72 20 43 6f 6e 66 | r.Server.Certificate.Server.Conf |
615a0 | 69 67 75 72 61 74 69 6f 6e 00 53 65 72 76 65 72 20 53 69 64 65 00 53 65 72 76 65 72 20 63 6f 6e | iguration.Server.Side.Server.con |
615c0 | 66 69 67 75 72 61 74 69 6f 6e 00 53 65 72 76 65 72 20 6e 61 6d 65 73 20 66 6f 72 20 76 69 72 74 | figuration.Server.names.for.virt |
615e0 | 75 61 6c 20 68 6f 73 74 73 20 69 74 20 63 61 6e 20 62 65 20 65 78 61 63 74 2c 20 77 69 6c 64 63 | ual.hosts.it.can.be.exact,.wildc |
61600 | 61 72 64 20 6f 72 20 72 65 67 65 78 2e 00 53 65 72 76 65 72 3a 00 53 65 72 76 69 63 65 00 53 65 | ard.or.regex..Server:.Service.Se |
61620 | 72 76 69 63 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 72 65 73 70 6f 6e 73 69 62 | rvice.configuration.is.responsib |
61640 | 6c 65 20 66 6f 72 20 62 69 6e 64 69 6e 67 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 70 6f 72 | le.for.binding.to.a.specific.por |
61660 | 74 2c 20 77 68 69 6c 65 20 74 68 65 20 62 61 63 6b 65 6e 64 20 63 6f 6e 66 69 67 75 72 61 74 69 | t,.while.the.backend.configurati |
61680 | 6f 6e 20 64 65 74 65 72 6d 69 6e 65 73 20 74 68 65 20 74 79 70 65 20 6f 66 20 6c 6f 61 64 20 62 | on.determines.the.type.of.load.b |
616a0 | 61 6c 61 6e 63 69 6e 67 20 74 6f 20 62 65 20 61 70 70 6c 69 65 64 20 61 6e 64 20 73 70 65 63 69 | alancing.to.be.applied.and.speci |
616c0 | 66 69 65 73 20 74 68 65 20 72 65 61 6c 20 73 65 72 76 65 72 73 20 74 6f 20 62 65 20 75 74 69 6c | fies.the.real.servers.to.be.util |
616e0 | 69 7a 65 64 2e 00 53 65 74 20 42 46 44 20 70 65 65 72 20 49 50 76 34 20 61 64 64 72 65 73 73 20 | ized..Set.BFD.peer.IPv4.address. |
61700 | 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 00 53 65 74 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 | or.IPv6.address.Set.BGP.communit |
61720 | 79 2d 6c 69 73 74 20 74 6f 20 65 78 61 63 74 6c 79 20 6d 61 74 63 68 2e 00 53 65 74 20 42 47 50 | y-list.to.exactly.match..Set.BGP |
61740 | 20 6c 6f 63 61 6c 20 70 72 65 66 65 72 65 6e 63 65 20 61 74 74 72 69 62 75 74 65 2e 00 53 65 74 | .local.preference.attribute..Set |
61760 | 20 42 47 50 20 6f 72 69 67 69 6e 20 63 6f 64 65 2e 00 53 65 74 20 42 47 50 20 6f 72 69 67 69 6e | .BGP.origin.code..Set.BGP.origin |
61780 | 61 74 6f 72 20 49 44 20 61 74 74 72 69 62 75 74 65 2e 00 53 65 74 20 42 47 50 20 77 65 69 67 68 | ator.ID.attribute..Set.BGP.weigh |
617a0 | 74 20 61 74 74 72 69 62 75 74 65 00 53 65 74 20 44 4e 41 54 20 72 75 6c 65 20 32 30 20 74 6f 20 | t.attribute.Set.DNAT.rule.20.to. |
617c0 | 6f 6e 6c 79 20 4e 41 54 20 55 44 50 20 70 61 63 6b 65 74 73 00 53 65 74 20 49 50 20 66 72 61 67 | only.NAT.UDP.packets.Set.IP.frag |
617e0 | 6d 65 6e 74 20 6d 61 74 63 68 2c 20 77 68 65 72 65 3a 00 53 65 74 20 49 50 53 65 63 20 69 6e 62 | ment.match,.where:.Set.IPSec.inb |
61800 | 6f 75 6e 64 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 73 2c 20 77 68 65 72 65 3a 00 53 65 74 | ound.match.criterias,.where:.Set |
61820 | 20 4f 53 50 46 20 65 78 74 65 72 6e 61 6c 20 6d 65 74 72 69 63 2d 74 79 70 65 2e 00 53 65 74 20 | .OSPF.external.metric-type..Set. |
61840 | 53 4e 41 54 20 72 75 6c 65 20 32 30 20 74 6f 20 6f 6e 6c 79 20 4e 41 54 20 54 43 50 20 61 6e 64 | SNAT.rule.20.to.only.NAT.TCP.and |
61860 | 20 55 44 50 20 70 61 63 6b 65 74 73 00 53 65 74 20 53 4e 41 54 20 72 75 6c 65 20 32 30 20 74 6f | .UDP.packets.Set.SNAT.rule.20.to |
61880 | 20 6f 6e 6c 79 20 4e 41 54 20 70 61 63 6b 65 74 73 20 61 72 72 69 76 69 6e 67 20 66 72 6f 6d 20 | .only.NAT.packets.arriving.from. |
618a0 | 74 68 65 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 20 6e 65 74 77 6f 72 6b 00 53 65 74 20 53 4e 41 | the.192.0.2.0/24.network.Set.SNA |
618c0 | 54 20 72 75 6c 65 20 33 30 20 74 6f 20 6f 6e 6c 79 20 4e 41 54 20 70 61 63 6b 65 74 73 20 61 72 | T.rule.30.to.only.NAT.packets.ar |
618e0 | 72 69 76 69 6e 67 20 66 72 6f 6d 20 74 68 65 20 32 30 33 2e 30 2e 31 31 33 2e 30 2f 32 34 20 6e | riving.from.the.203.0.113.0/24.n |
61900 | 65 74 77 6f 72 6b 20 77 69 74 68 20 61 20 73 6f 75 72 63 65 20 70 6f 72 74 20 6f 66 20 38 30 20 | etwork.with.a.source.port.of.80. |
61920 | 61 6e 64 20 34 34 33 00 53 65 74 20 53 53 4c 20 63 65 72 74 65 66 69 63 61 74 65 20 3c 6e 61 6d | and.443.Set.SSL.certeficate.<nam |
61940 | 65 3e 20 66 6f 72 20 73 65 72 76 69 63 65 20 3c 6e 61 6d 65 3e 00 53 65 74 20 54 43 50 2d 4d 53 | e>.for.service.<name>.Set.TCP-MS |
61960 | 53 20 28 6d 61 78 69 6d 75 6d 20 73 65 67 6d 65 6e 74 20 73 69 7a 65 29 20 66 6f 72 20 74 68 65 | S.(maximum.segment.size).for.the |
61980 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 00 53 65 74 20 54 54 4c 20 74 6f 20 33 30 30 20 73 65 63 6f 6e | .connection.Set.TTL.to.300.secon |
619a0 | 64 73 00 53 65 74 20 56 69 72 74 75 61 6c 20 54 75 6e 6e 65 6c 20 49 6e 74 65 72 66 61 63 65 00 | ds.Set.Virtual.Tunnel.Interface. |
619c0 | 53 65 74 20 61 20 63 6f 6e 74 61 69 6e 65 72 20 64 65 73 63 72 69 70 74 69 6f 6e 00 53 65 74 20 | Set.a.container.description.Set. |
619e0 | 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 6e 64 2f 6f 72 20 73 6f 75 72 63 65 20 61 64 64 72 | a.destination.and/or.source.addr |
61a00 | 65 73 73 2e 20 41 63 63 65 70 74 65 64 20 69 6e 70 75 74 20 66 6f 72 20 69 70 76 34 3a 00 53 65 | ess..Accepted.input.for.ipv4:.Se |
61a20 | 74 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 6e 64 2f 6f 72 20 73 6f 75 72 63 65 20 70 6f | t.a.destination.and/or.source.po |
61a40 | 72 74 2e 20 41 63 63 65 70 74 65 64 20 69 6e 70 75 74 3a 00 53 65 74 20 61 20 68 75 6d 61 6e 20 | rt..Accepted.input:.Set.a.human. |
61a60 | 72 65 61 64 61 62 6c 65 2c 20 64 65 73 63 72 69 70 74 69 76 65 20 61 6c 69 61 73 20 66 6f 72 20 | readable,.descriptive.alias.for. |
61a80 | 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 41 6c 69 61 73 20 69 73 20 75 73 65 64 20 62 | this.connection..Alias.is.used.b |
61aa0 | 79 20 65 2e 67 2e 20 74 68 65 20 3a 6f 70 63 6d 64 3a 60 73 68 6f 77 20 69 6e 74 65 72 66 61 63 | y.e.g..the.:opcmd:`show.interfac |
61ac0 | 65 73 60 20 63 6f 6d 6d 61 6e 64 20 6f 72 20 53 4e 4d 50 20 62 61 73 65 64 20 6d 6f 6e 69 74 6f | es`.command.or.SNMP.based.monito |
61ae0 | 72 69 6e 67 20 74 6f 6f 6c 73 2e 00 53 65 74 20 61 20 6c 69 6d 69 74 20 6f 6e 20 74 68 65 20 6d | ring.tools..Set.a.limit.on.the.m |
61b00 | 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 63 6f 6e 63 75 72 72 65 6e 74 20 6c 6f 67 67 | aximum.number.of.concurrent.logg |
61b20 | 65 64 2d 69 6e 20 75 73 65 72 73 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 00 53 65 74 20 61 | ed-in.users.on.the.system..Set.a |
61b40 | 20 6d 65 61 6e 69 6e 67 66 75 6c 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 53 65 74 20 61 20 6e | .meaningful.description..Set.a.n |
61b60 | 61 6d 65 64 20 61 70 69 20 6b 65 79 2e 20 45 76 65 72 79 20 6b 65 79 20 68 61 73 20 74 68 65 20 | amed.api.key..Every.key.has.the. |
61b80 | 73 61 6d 65 2c 20 66 75 6c 6c 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 6f 6e 20 74 68 65 20 73 79 | same,.full.permissions.on.the.sy |
61ba0 | 73 74 65 6d 2e 00 53 65 74 20 61 20 72 75 6c 65 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 53 65 | stem..Set.a.rule.description..Se |
61bc0 | 74 20 61 20 73 70 65 63 69 66 69 63 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6d 61 72 6b 2e 00 53 65 | t.a.specific.connection.mark..Se |
61be0 | 74 20 61 20 73 70 65 63 69 66 69 63 20 70 61 63 6b 65 74 20 6d 61 72 6b 2e 00 53 65 74 20 61 63 | t.a.specific.packet.mark..Set.ac |
61c00 | 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 2d 6d 61 70 20 70 6f 6c 69 63 79 2e 00 53 | tion.for.the.route-map.policy..S |
61c20 | 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 74 61 6b 65 20 6f 6e 20 65 6e 74 72 69 65 73 20 6d 61 74 | et.action.to.take.on.entries.mat |
61c40 | 63 68 69 6e 67 20 74 68 69 73 20 72 75 6c 65 2e 00 53 65 74 20 61 6e 20 41 50 49 2d 4b 45 59 20 | ching.this.rule..Set.an.API-KEY. |
61c60 | 69 73 20 74 68 65 20 6d 69 6e 69 6d 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 6f 20 | is.the.minimal.configuration.to. |
61c80 | 67 65 74 20 61 20 77 6f 72 6b 69 6e 67 20 41 50 49 20 45 6e 64 70 6f 69 6e 74 2e 00 53 65 74 20 | get.a.working.API.Endpoint..Set. |
61ca0 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 61 63 6b 65 6e 64 2e 20 54 68 65 20 63 6f 6e 66 | authentication.backend..The.conf |
61cc0 | 69 67 75 72 65 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 61 63 6b 65 6e 64 20 69 73 | igured.authentication.backend.is |
61ce0 | 20 75 73 65 64 20 66 6f 72 20 61 6c 6c 20 71 75 65 72 69 65 73 2e 00 53 65 74 20 63 6f 6e 74 61 | .used.for.all.queries..Set.conta |
61d00 | 69 6e 65 72 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 6f 72 20 70 65 72 6d 69 73 73 69 6f 6e 73 | iner.capabilities.or.permissions |
61d20 | 2e 00 53 65 74 20 64 65 6c 61 79 20 62 65 74 77 65 65 6e 20 67 72 61 74 75 69 74 6f 75 73 20 41 | ..Set.delay.between.gratuitous.A |
61d40 | 52 50 20 6d 65 73 73 61 67 65 73 20 73 65 6e 74 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 | RP.messages.sent.on.an.interface |
61d60 | 2e 00 53 65 74 20 64 65 6c 61 79 20 66 6f 72 20 73 65 63 6f 6e 64 20 73 65 74 20 6f 66 20 67 72 | ..Set.delay.for.second.set.of.gr |
61d80 | 61 74 75 69 74 6f 75 73 20 41 52 50 73 20 61 66 74 65 72 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 | atuitous.ARPs.after.transition.t |
61da0 | 6f 20 4d 41 53 54 45 52 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 60 3c 74 65 78 74 | o.MASTER..Set.description.`<text |
61dc0 | 3e 60 20 66 6f 72 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 73 65 72 76 69 63 65 20 62 65 69 6e 67 | >`.for.dynamic.DNS.service.being |
61de0 | 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 | .configured..Set.description.for |
61e00 | 20 61 73 2d 70 61 74 68 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 | .as-path-list.policy..Set.descri |
61e20 | 70 74 69 6f 6e 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e | ption.for.community-list.policy. |
61e40 | 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 65 78 74 63 6f 6d 6d 75 6e 69 74 | .Set.description.for.extcommunit |
61e60 | 79 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 | y-list.policy..Set.description.f |
61e80 | 6f 72 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e 00 | or.large-community-list.policy.. |
61ea0 | 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 72 75 6c 65 20 69 6e 20 49 50 76 36 | Set.description.for.rule.in.IPv6 |
61ec0 | 20 70 72 65 66 69 78 2d 6c 69 73 74 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f | .prefix-list..Set.description.fo |
61ee0 | 72 20 72 75 6c 65 20 69 6e 20 74 68 65 20 70 72 65 66 69 78 2d 6c 69 73 74 2e 00 53 65 74 20 64 | r.rule.in.the.prefix-list..Set.d |
61f00 | 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 72 75 6c 65 2e 00 53 65 74 20 64 65 73 63 72 69 70 | escription.for.rule..Set.descrip |
61f20 | 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 49 50 76 36 20 61 63 63 65 73 73 20 6c 69 73 74 2e 00 53 | tion.for.the.IPv6.access.list..S |
61f40 | 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 49 50 76 36 20 70 72 65 66 | et.description.for.the.IPv6.pref |
61f60 | 69 78 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 | ix-list.policy..Set.description. |
61f80 | 66 6f 72 20 74 68 65 20 61 63 63 65 73 73 20 6c 69 73 74 2e 00 53 65 74 20 64 65 73 63 72 69 70 | for.the.access.list..Set.descrip |
61fa0 | 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 70 72 65 66 69 78 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e | tion.for.the.prefix-list.policy. |
61fc0 | 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 2d 6d | .Set.description.for.the.route-m |
61fe0 | 61 70 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 | ap.policy..Set.description.for.t |
62000 | 68 65 20 72 75 6c 65 20 69 6e 20 74 68 65 20 72 6f 75 74 65 2d 6d 61 70 20 70 6f 6c 69 63 79 2e | he.rule.in.the.route-map.policy. |
62020 | 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 6f 66 20 74 68 65 20 70 65 65 72 20 6f 72 20 | .Set.description.of.the.peer.or. |
62040 | 70 65 65 72 20 67 72 6f 75 70 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 53 65 74 | peer.group..Set.description..Set |
62060 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6f 72 20 70 72 65 66 69 78 20 74 | .destination.address.or.prefix.t |
62080 | 6f 20 6d 61 74 63 68 2e 00 53 65 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 72 6f 75 74 69 6e 67 | o.match..Set.destination.routing |
620a0 | 20 70 72 6f 74 6f 63 6f 6c 20 6d 65 74 72 69 63 2e 20 41 64 64 20 6f 72 20 73 75 62 74 72 61 63 | .protocol.metric..Add.or.subtrac |
620c0 | 74 20 6d 65 74 72 69 63 2c 20 6f 72 20 73 65 74 20 6d 65 74 72 69 63 20 76 61 6c 75 65 2e 00 53 | t.metric,.or.set.metric.value..S |
620e0 | 65 74 20 65 74 68 31 20 74 6f 20 62 65 20 74 68 65 20 6c 69 73 74 65 6e 69 6e 67 20 69 6e 74 65 | et.eth1.to.be.the.listening.inte |
62100 | 72 66 61 63 65 20 66 6f 72 20 74 68 65 20 44 48 43 50 76 36 20 72 65 6c 61 79 2e 00 53 65 74 20 | rface.for.the.DHCPv6.relay..Set. |
62120 | 65 78 65 63 75 74 69 6f 6e 20 74 69 6d 65 20 69 6e 20 63 6f 6d 6d 6f 6e 20 63 72 6f 6e 5f 20 74 | execution.time.in.common.cron_.t |
62140 | 69 6d 65 20 66 6f 72 6d 61 74 2e 20 41 20 63 72 6f 6e 20 60 3c 73 70 65 63 3e 60 20 6f 66 20 60 | ime.format..A.cron.`<spec>`.of.` |
62160 | 60 33 30 20 2a 2f 36 20 2a 20 2a 20 2a 60 60 20 77 6f 75 6c 64 20 65 78 65 63 75 74 65 20 74 68 | `30.*/6.*.*.*``.would.execute.th |
62180 | 65 20 60 3c 74 61 73 6b 3e 60 20 61 74 20 6d 69 6e 75 74 65 20 33 30 20 70 61 73 74 20 65 76 65 | e.`<task>`.at.minute.30.past.eve |
621a0 | 72 79 20 36 74 68 20 68 6f 75 72 2e 00 53 65 74 20 65 78 74 63 6f 6d 6d 75 6e 69 74 79 20 62 61 | ry.6th.hour..Set.extcommunity.ba |
621c0 | 6e 64 77 69 64 74 68 00 53 65 74 20 69 66 20 61 6e 74 65 6e 6e 61 20 70 61 74 74 65 72 6e 20 64 | ndwidth.Set.if.antenna.pattern.d |
621e0 | 6f 65 73 20 6e 6f 74 20 63 68 61 6e 67 65 20 64 75 72 69 6e 67 20 74 68 65 20 6c 69 66 65 74 69 | oes.not.change.during.the.lifeti |
62200 | 6d 65 20 6f 66 20 61 6e 20 61 73 73 6f 63 69 61 74 69 6f 6e 00 53 65 74 20 69 6e 62 6f 75 6e 64 | me.of.an.association.Set.inbound |
62220 | 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6d 61 74 63 68 2e 00 53 65 74 20 69 6e 74 65 72 66 61 | .interface.to.match..Set.interfa |
62240 | 63 65 73 20 74 6f 20 61 20 7a 6f 6e 65 2e 20 41 20 7a 6f 6e 65 20 63 61 6e 20 68 61 76 65 20 6d | ces.to.a.zone..A.zone.can.have.m |
62260 | 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 66 61 63 65 73 2e 20 42 75 74 20 61 6e 20 69 6e 74 65 72 | ultiple.interfaces..But.an.inter |
62280 | 66 61 63 65 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 61 20 6d 65 6d 62 65 72 20 69 6e 20 6f 6e 65 | face.can.only.be.a.member.in.one |
622a0 | 20 7a 6f 6e 65 2e 00 53 65 74 20 6c 6f 63 61 6c 20 3a 61 62 62 72 3a 60 41 53 4e 20 28 41 75 74 | .zone..Set.local.:abbr:`ASN.(Aut |
622c0 | 6f 6e 6f 6d 6f 75 73 20 53 79 73 74 65 6d 20 4e 75 6d 62 65 72 29 60 20 74 68 61 74 20 74 68 69 | onomous.System.Number)`.that.thi |
622e0 | 73 20 72 6f 75 74 65 72 20 72 65 70 72 65 73 65 6e 74 73 2e 20 54 68 69 73 20 69 73 20 61 20 61 | s.router.represents..This.is.a.a |
62300 | 20 6d 61 6e 64 61 74 6f 72 79 20 6f 70 74 69 6f 6e 21 00 53 65 74 20 6c 6f 63 61 6c 20 61 75 74 | .mandatory.option!.Set.local.aut |
62320 | 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 6e 75 6d 62 65 72 20 74 68 61 74 20 74 68 69 73 20 | onomous.system.number.that.this. |
62340 | 72 6f 75 74 65 72 20 72 65 70 72 65 73 65 6e 74 73 2e 20 54 68 69 73 20 69 73 20 61 20 6d 61 6e | router.represents..This.is.a.man |
62360 | 64 61 74 6f 72 79 20 6f 70 74 69 6f 6e 21 00 53 65 74 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 | datory.option!.Set.match.criteri |
62380 | 61 20 62 61 73 65 64 20 6f 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6d 61 72 6b 2e 00 53 65 74 20 | a.based.on.connection.mark..Set. |
623a0 | 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 64 65 73 74 69 6e 61 74 | match.criteria.based.on.destinat |
623c0 | 69 6f 6e 20 70 6f 72 74 2c 20 77 68 65 72 65 20 3c 6d 61 74 63 68 5f 63 72 69 74 65 72 69 61 3e | ion.port,.where.<match_criteria> |
623e0 | 20 63 6f 75 6c 64 20 62 65 3a 00 53 65 74 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 | .could.be:.Set.match.criteria.ba |
62400 | 73 65 64 20 6f 6e 20 73 65 73 73 69 6f 6e 20 73 74 61 74 65 2e 00 53 65 74 20 6d 61 74 63 68 20 | sed.on.session.state..Set.match. |
62420 | 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 65 20 6f 72 20 64 65 73 74 | criteria.based.on.source.or.dest |
62440 | 69 6e 61 74 69 6f 6e 20 67 72 6f 75 70 73 2c 20 77 68 65 72 65 20 3c 74 65 78 74 3e 20 77 6f 75 | ination.groups,.where.<text>.wou |
62460 | 6c 64 20 62 65 20 74 68 65 20 67 72 6f 75 70 20 6e 61 6d 65 2f 69 64 65 6e 74 69 66 69 65 72 2e | ld.be.the.group.name/identifier. |
62480 | 20 50 72 65 70 65 6e 64 20 63 68 61 72 61 63 74 65 72 20 27 21 27 20 66 6f 72 20 69 6e 76 65 72 | .Prepend.character.'!'.for.inver |
624a0 | 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 2e 00 53 65 74 20 6d 61 74 63 68 | ted.matching.criteria..Set.match |
624c0 | 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 65 20 6f 72 20 64 65 73 | .criteria.based.on.source.or.des |
624e0 | 74 69 6e 61 74 69 6f 6e 20 69 70 76 34 7c 69 70 76 36 20 61 64 64 72 65 73 73 2c 20 77 68 65 72 | tination.ipv4|ipv6.address,.wher |
62500 | 65 20 3c 6d 61 74 63 68 5f 63 72 69 74 65 72 69 61 3e 20 63 6f 75 6c 64 20 62 65 3a 00 53 65 74 | e.<match_criteria>.could.be:.Set |
62520 | 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 74 63 70 20 66 6c 61 | .match.criteria.based.on.tcp.fla |
62540 | 67 73 2e 20 41 6c 6c 6f 77 65 64 20 76 61 6c 75 65 73 20 66 6f 72 20 54 43 50 20 66 6c 61 67 73 | gs..Allowed.values.for.TCP.flags |
62560 | 3a 20 53 59 4e 20 41 43 4b 20 46 49 4e 20 52 53 54 20 55 52 47 20 50 53 48 20 41 4c 4c 2e 20 57 | :.SYN.ACK.FIN.RST.URG.PSH.ALL..W |
62580 | 68 65 6e 20 73 70 65 63 69 66 79 69 6e 67 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 66 6c 61 | hen.specifying.more.than.one.fla |
625a0 | 67 2c 20 66 6c 61 67 73 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 61 2d 73 65 70 61 72 61 74 | g,.flags.should.be.comma-separat |
625c0 | 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 3a 20 76 61 6c 75 65 20 6f 66 20 27 53 59 4e 2c | ed..For.example.:.value.of.'SYN, |
625e0 | 21 41 43 4b 2c 21 46 49 4e 2c 21 52 53 54 27 20 77 69 6c 6c 20 6f 6e 6c 79 20 6d 61 74 63 68 20 | !ACK,!FIN,!RST'.will.only.match. |
62600 | 70 61 63 6b 65 74 73 20 77 69 74 68 20 74 68 65 20 53 59 4e 20 66 6c 61 67 20 73 65 74 2c 20 61 | packets.with.the.SYN.flag.set,.a |
62620 | 6e 64 20 74 68 65 20 41 43 4b 2c 20 46 49 4e 20 61 6e 64 20 52 53 54 20 66 6c 61 67 73 20 75 6e | nd.the.ACK,.FIN.and.RST.flags.un |
62640 | 73 65 74 2e 00 53 65 74 20 6d 61 78 69 6d 75 6d 20 60 3c 73 69 7a 65 3e 60 20 6f 66 20 44 48 43 | set..Set.maximum.`<size>`.of.DHC |
62660 | 50 20 70 61 63 6b 65 74 73 20 69 6e 63 6c 75 64 69 6e 67 20 72 65 6c 61 79 20 61 67 65 6e 74 20 | P.packets.including.relay.agent. |
62680 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 49 66 20 61 20 44 48 43 50 20 70 61 63 6b 65 74 20 73 69 | information..If.a.DHCP.packet.si |
626a0 | 7a 65 20 73 75 72 70 61 73 73 65 73 20 74 68 69 73 20 76 61 6c 75 65 20 69 74 20 77 69 6c 6c 20 | ze.surpasses.this.value.it.will. |
626c0 | 62 65 20 66 6f 72 77 61 72 64 65 64 20 77 69 74 68 6f 75 74 20 61 70 70 65 6e 64 69 6e 67 20 72 | be.forwarded.without.appending.r |
626e0 | 65 6c 61 79 20 61 67 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 52 61 6e 67 65 20 36 34 | elay.agent.information..Range.64 |
62700 | 2e 2e 2e 31 34 30 30 2c 20 64 65 66 61 75 6c 74 20 35 37 36 2e 00 53 65 74 20 6d 61 78 69 6d 75 | ...1400,.default.576..Set.maximu |
62720 | 6d 20 61 76 65 72 61 67 65 20 6d 61 74 63 68 69 6e 67 20 72 61 74 65 2e 20 46 6f 72 6d 61 74 20 | m.average.matching.rate..Format. |
62740 | 66 6f 72 20 72 61 74 65 3a 20 69 6e 74 65 67 65 72 2f 74 69 6d 65 5f 75 6e 69 74 2c 20 77 68 65 | for.rate:.integer/time_unit,.whe |
62760 | 72 65 20 74 69 6d 65 5f 75 6e 69 74 20 63 6f 75 6c 64 20 62 65 20 61 6e 79 20 6f 6e 65 20 6f 66 | re.time_unit.could.be.any.one.of |
62780 | 20 73 65 63 6f 6e 64 2c 20 6d 69 6e 75 74 65 2c 20 68 6f 75 72 20 6f 72 20 64 61 79 2e 46 6f 72 | .second,.minute,.hour.or.day.For |
627a0 | 20 65 78 61 6d 70 6c 65 20 31 2f 73 65 63 6f 6e 64 20 69 6d 70 6c 69 65 73 20 72 75 6c 65 20 74 | .example.1/second.implies.rule.t |
627c0 | 6f 20 62 65 20 6d 61 74 63 68 65 64 20 61 74 20 61 6e 20 61 76 65 72 61 67 65 20 6f 66 20 6f 6e | o.be.matched.at.an.average.of.on |
627e0 | 63 65 20 70 65 72 20 73 65 63 6f 6e 64 2e 00 53 65 74 20 6d 61 78 69 6d 75 6d 20 68 6f 70 20 63 | ce.per.second..Set.maximum.hop.c |
62800 | 6f 75 6e 74 20 62 65 66 6f 72 65 20 70 61 63 6b 65 74 73 20 61 72 65 20 64 69 73 63 61 72 64 65 | ount.before.packets.are.discarde |
62820 | 64 2c 20 64 65 66 61 75 6c 74 3a 20 31 30 00 53 65 74 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 | d,.default:.10.Set.maximum.numbe |
62840 | 72 20 6f 66 20 70 61 63 6b 65 74 73 20 74 6f 20 61 6c 6f 77 20 69 6e 20 65 78 63 65 73 73 20 6f | r.of.packets.to.alow.in.excess.o |
62860 | 66 20 72 61 74 65 2e 00 53 65 74 20 6d 69 6e 69 6d 75 6d 20 74 69 6d 65 20 69 6e 74 65 72 76 61 | f.rate..Set.minimum.time.interva |
62880 | 6c 20 66 6f 72 20 72 65 66 72 65 73 68 69 6e 67 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 73 | l.for.refreshing.gratuitous.ARPs |
628a0 | 20 77 68 69 6c 65 20 4d 41 53 54 45 52 2e 00 53 65 74 20 6d 6f 64 65 20 66 6f 72 20 49 50 73 65 | .while.MASTER..Set.mode.for.IPse |
628c0 | 63 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 56 79 4f 53 20 61 6e | c.authentication.between.VyOS.an |
628e0 | 64 20 4c 32 54 50 20 63 6c 69 65 6e 74 73 2e 00 53 65 74 20 6e 75 6d 62 65 72 20 6f 66 20 67 72 | d.L2TP.clients..Set.number.of.gr |
62900 | 61 74 75 69 74 6f 75 73 20 41 52 50 20 6d 65 73 73 61 67 65 73 20 74 6f 20 73 65 6e 64 20 61 74 | atuitous.ARP.messages.to.send.at |
62920 | 20 61 20 74 69 6d 65 20 61 66 74 65 72 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 6f 20 4d 41 53 54 | .a.time.after.transition.to.MAST |
62940 | 45 52 2e 00 53 65 74 20 6e 75 6d 62 65 72 20 6f 66 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 | ER..Set.number.of.gratuitous.ARP |
62960 | 20 6d 65 73 73 61 67 65 73 20 74 6f 20 73 65 6e 64 20 61 74 20 61 20 74 69 6d 65 20 77 68 69 6c | .messages.to.send.at.a.time.whil |
62980 | 65 20 4d 41 53 54 45 52 2e 00 53 65 74 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 | e.MASTER..Set.number.of.seconds. |
629a0 | 66 6f 72 20 48 65 6c 6c 6f 20 49 6e 74 65 72 76 61 6c 20 74 69 6d 65 72 20 76 61 6c 75 65 2e 20 | for.Hello.Interval.timer.value.. |
629c0 | 53 65 74 74 69 6e 67 20 74 68 69 73 20 76 61 6c 75 65 2c 20 48 65 6c 6c 6f 20 70 61 63 6b 65 74 | Setting.this.value,.Hello.packet |
629e0 | 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 65 76 65 72 79 20 74 69 6d 65 72 20 76 61 6c 75 65 20 | .will.be.sent.every.timer.value. |
62a00 | 73 65 63 6f 6e 64 73 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 | seconds.on.the.specified.interfa |
62a20 | 63 65 2e 20 54 68 69 73 20 76 61 6c 75 65 20 6d 75 73 74 20 62 65 20 74 68 65 20 73 61 6d 65 20 | ce..This.value.must.be.the.same. |
62a40 | 66 6f 72 20 61 6c 6c 20 72 6f 75 74 65 72 73 20 61 74 74 61 63 68 65 64 20 74 6f 20 61 20 63 6f | for.all.routers.attached.to.a.co |
62a60 | 6d 6d 6f 6e 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 | mmon.network..The.default.value. |
62a80 | 69 73 20 31 30 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 | is.10.seconds..The.interval.rang |
62aa0 | 65 20 69 73 20 31 20 74 6f 20 36 35 35 33 35 2e 00 53 65 74 20 6e 75 6d 62 65 72 20 6f 66 20 73 | e.is.1.to.65535..Set.number.of.s |
62ac0 | 65 63 6f 6e 64 73 20 66 6f 72 20 72 6f 75 74 65 72 20 44 65 61 64 20 49 6e 74 65 72 76 61 6c 20 | econds.for.router.Dead.Interval. |
62ae0 | 74 69 6d 65 72 20 76 61 6c 75 65 20 75 73 65 64 20 66 6f 72 20 57 61 69 74 20 54 69 6d 65 72 20 | timer.value.used.for.Wait.Timer. |
62b00 | 61 6e 64 20 49 6e 61 63 74 69 76 69 74 79 20 54 69 6d 65 72 2e 20 54 68 69 73 20 76 61 6c 75 65 | and.Inactivity.Timer..This.value |
62b20 | 20 6d 75 73 74 20 62 65 20 74 68 65 20 73 61 6d 65 20 66 6f 72 20 61 6c 6c 20 72 6f 75 74 65 72 | .must.be.the.same.for.all.router |
62b40 | 73 20 61 74 74 61 63 68 65 64 20 74 6f 20 61 20 63 6f 6d 6d 6f 6e 20 6e 65 74 77 6f 72 6b 2e 20 | s.attached.to.a.common.network.. |
62b60 | 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 34 30 20 73 65 63 6f 6e 64 73 2e | The.default.value.is.40.seconds. |
62b80 | 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 36 35 35 33 | .The.interval.range.is.1.to.6553 |
62ba0 | 35 2e 00 53 65 74 20 70 61 63 6b 65 74 20 6d 6f 64 69 66 69 63 61 74 69 6f 6e 73 3a 20 45 78 70 | 5..Set.packet.modifications:.Exp |
62bc0 | 6c 69 63 69 74 6c 79 20 73 65 74 20 54 43 50 20 4d 61 78 69 6d 75 6d 20 73 65 67 6d 65 6e 74 20 | licitly.set.TCP.Maximum.segment. |
62be0 | 73 69 7a 65 20 76 61 6c 75 65 2e 00 53 65 74 20 70 61 63 6b 65 74 20 6d 6f 64 69 66 69 63 61 74 | size.value..Set.packet.modificat |
62c00 | 69 6f 6e 73 3a 20 50 61 63 6b 65 74 20 44 69 66 66 65 72 65 6e 74 69 61 74 65 64 20 53 65 72 76 | ions:.Packet.Differentiated.Serv |
62c20 | 69 63 65 73 20 43 6f 64 65 70 6f 69 6e 74 20 28 44 53 43 50 29 00 53 65 74 20 70 61 72 61 6d 65 | ices.Codepoint.(DSCP).Set.parame |
62c40 | 74 65 72 73 20 66 6f 72 20 6d 61 74 63 68 69 6e 67 20 72 65 63 65 6e 74 6c 79 20 73 65 65 6e 20 | ters.for.matching.recently.seen. |
62c60 | 73 6f 75 72 63 65 73 2e 20 54 68 69 73 20 6d 61 74 63 68 20 63 6f 75 6c 64 20 62 65 20 75 73 65 | sources..This.match.could.be.use |
62c80 | 64 20 62 79 20 73 65 65 74 69 6e 67 20 63 6f 75 6e 74 20 28 73 6f 75 72 63 65 20 61 64 64 72 65 | d.by.seeting.count.(source.addre |
62ca0 | 73 73 20 73 65 65 6e 20 6d 6f 72 65 20 74 68 61 6e 20 3c 31 2d 32 35 35 3e 20 74 69 6d 65 73 29 | ss.seen.more.than.<1-255>.times) |
62cc0 | 20 61 6e 64 2f 6f 72 20 74 69 6d 65 20 28 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 73 65 65 | .and/or.time.(source.address.see |
62ce0 | 6e 20 69 6e 20 74 68 65 20 6c 61 73 74 20 3c 30 2d 34 32 39 34 39 36 37 32 39 35 3e 20 73 65 63 | n.in.the.last.<0-4294967295>.sec |
62d00 | 6f 6e 64 73 29 2e 00 53 65 74 20 70 72 65 64 65 66 69 6e 65 64 20 73 68 61 72 65 64 20 73 65 63 | onds)..Set.predefined.shared.sec |
62d20 | 72 65 74 20 70 68 72 61 73 65 2e 00 53 65 74 20 70 72 65 66 69 78 65 73 20 74 6f 20 74 61 62 6c | ret.phrase..Set.prefixes.to.tabl |
62d40 | 65 2e 00 53 65 74 20 70 72 6f 78 79 20 66 6f 72 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 | e..Set.proxy.for.all.connections |
62d60 | 20 69 6e 69 74 69 61 74 65 64 20 62 79 20 56 79 4f 53 2c 20 69 6e 63 6c 75 64 69 6e 67 20 48 54 | .initiated.by.VyOS,.including.HT |
62d80 | 54 50 2c 20 48 54 54 50 53 2c 20 61 6e 64 20 46 54 50 20 28 61 6e 6f 6e 79 6d 6f 75 73 20 66 74 | TP,.HTTPS,.and.FTP.(anonymous.ft |
62da0 | 70 29 2e 00 53 65 74 20 72 6f 75 74 65 20 74 61 72 67 65 74 20 76 61 6c 75 65 20 69 6e 20 66 6f | p)..Set.route.target.value.in.fo |
62dc0 | 72 6d 61 74 20 60 60 3c 30 2d 36 35 35 33 35 3a 30 2d 34 32 39 34 39 36 37 32 39 35 3e 60 60 20 | rmat.``<0-65535:0-4294967295>``. |
62de0 | 6f 72 20 60 60 3c 49 50 3a 30 2d 36 35 35 33 35 3e 60 60 2e 00 53 65 74 20 72 6f 75 74 69 6e 67 | or.``<IP:0-65535>``..Set.routing |
62e00 | 20 74 61 62 6c 65 20 74 6f 20 66 6f 72 77 61 72 64 20 70 61 63 6b 65 74 20 74 6f 2e 00 53 65 74 | .table.to.forward.packet.to..Set |
62e20 | 20 72 75 6c 65 20 61 63 74 69 6f 6e 20 74 6f 20 64 72 6f 70 2e 00 53 65 74 20 73 65 72 76 69 63 | .rule.action.to.drop..Set.servic |
62e40 | 65 20 74 6f 20 62 69 6e 64 20 6f 6e 20 49 50 20 61 64 64 72 65 73 73 2c 20 62 79 20 64 65 66 61 | e.to.bind.on.IP.address,.by.defa |
62e60 | 75 6c 74 20 6c 69 73 74 65 6e 20 6f 6e 20 61 6e 79 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 00 | ult.listen.on.any.IPv4.and.IPv6. |
62e80 | 53 65 74 20 73 69 74 65 20 6f 66 20 6f 72 69 67 69 6e 20 76 61 6c 75 65 20 69 6e 20 66 6f 72 6d | Set.site.of.origin.value.in.form |
62ea0 | 61 74 20 60 60 3c 30 2d 36 35 35 33 35 3a 30 2d 34 32 39 34 39 36 37 32 39 35 3e 60 60 20 6f 72 | at.``<0-65535:0-4294967295>``.or |
62ec0 | 20 60 60 3c 49 50 3a 30 2d 36 35 35 33 35 3e 60 60 2e 00 53 65 74 20 73 6f 6d 65 20 61 74 74 72 | .``<IP:0-65535>``..Set.some.attr |
62ee0 | 69 62 75 74 65 73 20 28 6c 69 6b 65 20 41 53 20 50 41 54 48 20 6f 72 20 43 6f 6d 6d 75 6e 69 74 | ibutes.(like.AS.PATH.or.Communit |
62f00 | 79 20 76 61 6c 75 65 29 20 74 6f 20 61 64 76 65 72 74 69 73 65 64 20 72 6f 75 74 65 73 20 74 6f | y.value).to.advertised.routes.to |
62f20 | 20 6e 65 69 67 68 62 6f 72 73 2e 00 53 65 74 20 73 6f 6d 65 20 6d 65 74 72 69 63 20 74 6f 20 72 | .neighbors..Set.some.metric.to.r |
62f40 | 6f 75 74 65 73 20 6c 65 61 72 6e 65 64 20 66 72 6f 6d 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 | outes.learned.from.a.particular. |
62f60 | 6e 65 69 67 68 62 6f 72 2e 00 53 65 74 20 73 6f 75 72 63 65 20 49 50 2f 49 50 76 36 20 61 64 64 | neighbor..Set.source.IP/IPv6.add |
62f80 | 72 65 73 73 20 66 6f 72 20 72 6f 75 74 65 2e 00 53 65 74 20 73 6f 75 72 63 65 20 61 64 64 72 65 | ress.for.route..Set.source.addre |
62fa0 | 73 73 20 6f 72 20 70 72 65 66 69 78 20 74 6f 20 6d 61 74 63 68 2e 00 53 65 74 20 73 6f 75 72 63 | ss.or.prefix.to.match..Set.sourc |
62fc0 | 65 2d 61 64 64 72 65 73 73 20 74 6f 20 79 6f 75 72 20 6c 6f 63 61 6c 20 49 50 20 28 4c 41 4e 29 | e-address.to.your.local.IP.(LAN) |
62fe0 | 2e 00 53 65 74 20 74 61 67 20 76 61 6c 75 65 20 66 6f 72 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 | ..Set.tag.value.for.routing.prot |
63000 | 6f 63 6f 6c 2e 00 53 65 74 20 74 68 65 20 22 72 65 63 75 72 73 69 6f 6e 20 64 65 73 69 72 65 64 | ocol..Set.the."recursion.desired |
63020 | 22 20 62 69 74 20 69 6e 20 72 65 71 75 65 73 74 73 20 74 6f 20 74 68 65 20 75 70 73 74 72 65 61 | ".bit.in.requests.to.the.upstrea |
63040 | 6d 20 6e 61 6d 65 73 65 72 76 65 72 2e 00 53 65 74 20 74 68 65 20 3a 61 62 62 72 3a 60 44 52 20 | m.nameserver..Set.the.:abbr:`DR. |
63060 | 28 44 65 73 69 67 6e 61 74 65 64 20 52 6f 75 74 65 72 29 60 20 50 72 69 6f 72 69 74 79 20 66 6f | (Designated.Router)`.Priority.fo |
63080 | 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 | r.the.interface..This.command.is |
630a0 | 20 75 73 65 66 75 6c 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 20 75 73 65 72 20 74 6f 20 69 6e 66 | .useful.to.allow.the.user.to.inf |
630c0 | 6c 75 65 6e 63 65 20 77 68 61 74 20 6e 6f 64 65 20 62 65 63 6f 6d 65 73 20 74 68 65 20 44 52 20 | luence.what.node.becomes.the.DR. |
630e0 | 66 6f 72 20 61 20 4c 41 4e 20 73 65 67 6d 65 6e 74 2e 00 53 65 74 20 74 68 65 20 3a 61 62 62 72 | for.a.LAN.segment..Set.the.:abbr |
63100 | 3a 60 4d 52 55 20 28 4d 61 78 69 6d 75 6d 20 52 65 63 65 69 76 65 20 55 6e 69 74 29 60 20 74 6f | :`MRU.(Maximum.Receive.Unit)`.to |
63120 | 20 60 6d 72 75 60 2e 20 50 50 50 64 20 77 69 6c 6c 20 61 73 6b 20 74 68 65 20 70 65 65 72 20 74 | .`mru`..PPPd.will.ask.the.peer.t |
63140 | 6f 20 73 65 6e 64 20 70 61 63 6b 65 74 73 20 6f 66 20 6e 6f 20 6d 6f 72 65 20 74 68 61 6e 20 60 | o.send.packets.of.no.more.than.` |
63160 | 6d 72 75 60 20 62 79 74 65 73 2e 20 54 68 65 20 76 61 6c 75 65 20 6f 66 20 60 6d 72 75 60 20 6d | mru`.bytes..The.value.of.`mru`.m |
63180 | 75 73 74 20 62 65 20 62 65 74 77 65 65 6e 20 31 32 38 20 61 6e 64 20 31 36 33 38 34 2e 00 53 65 | ust.be.between.128.and.16384..Se |
631a0 | 74 20 74 68 65 20 42 47 50 20 6e 65 78 74 68 6f 70 20 61 64 64 72 65 73 73 20 74 6f 20 74 68 65 | t.the.BGP.nexthop.address.to.the |
631c0 | 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 70 65 65 72 2e 20 46 6f 72 20 61 6e 20 69 6e 63 | .address.of.the.peer..For.an.inc |
631e0 | 6f 6d 69 6e 67 20 72 6f 75 74 65 2d 6d 61 70 20 74 68 69 73 20 6d 65 61 6e 73 20 74 68 65 20 69 | oming.route-map.this.means.the.i |
63200 | 70 20 61 64 64 72 65 73 73 20 6f 66 20 6f 75 72 20 70 65 65 72 20 69 73 20 75 73 65 64 2e 20 46 | p.address.of.our.peer.is.used..F |
63220 | 6f 72 20 61 6e 20 6f 75 74 67 6f 69 6e 67 20 72 6f 75 74 65 2d 6d 61 70 20 74 68 69 73 20 6d 65 | or.an.outgoing.route-map.this.me |
63240 | 61 6e 73 20 74 68 65 20 69 70 20 61 64 64 72 65 73 73 20 6f 66 20 6f 75 72 20 73 65 6c 66 20 69 | ans.the.ip.address.of.our.self.i |
63260 | 73 20 75 73 65 64 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 74 68 65 20 70 65 65 72 69 6e 67 20 | s.used.to.establish.the.peering. |
63280 | 77 69 74 68 20 6f 75 72 20 6e 65 69 67 68 62 6f 72 2e 00 53 65 74 20 74 68 65 20 49 50 20 61 64 | with.our.neighbor..Set.the.IP.ad |
632a0 | 64 72 65 73 73 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 | dress.of.the.local.interface.to. |
632c0 | 62 65 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 74 75 6e 6e 65 6c 2e 00 53 65 74 20 74 68 65 20 | be.used.for.the.tunnel..Set.the. |
632e0 | 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 2e 20 49 | IP.address.of.the.remote.peer..I |
63300 | 74 20 6d 61 79 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 73 20 61 6e 20 49 50 76 34 20 61 64 | t.may.be.specified.as.an.IPv4.ad |
63320 | 64 72 65 73 73 20 6f 72 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 00 53 65 74 20 74 68 | dress.or.an.IPv6.address..Set.th |
63340 | 65 20 49 50 76 34 20 73 6f 75 72 63 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 6d 6f 64 65 2e 20 54 | e.IPv4.source.validation.mode..T |
63360 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 | he.following.system.parameter.wi |
63380 | 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 53 65 74 20 74 68 65 20 4d 4c 44 20 6c 61 73 74 20 | ll.be.altered:.Set.the.MLD.last. |
633a0 | 6d 65 6d 62 65 72 20 71 75 65 72 79 20 63 6f 75 6e 74 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 | member.query.count..The.default. |
633c0 | 76 61 6c 75 65 20 69 73 20 32 2e 00 53 65 74 20 74 68 65 20 4d 4c 44 20 6c 61 73 74 20 6d 65 6d | value.is.2..Set.the.MLD.last.mem |
633e0 | 62 65 72 20 71 75 65 72 79 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e | ber.query.interval.in.millisecon |
63400 | 64 73 20 28 31 30 30 2d 36 35 35 33 35 30 30 29 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 | ds.(100-6553500)..The.default.va |
63420 | 6c 75 65 20 69 73 20 31 30 30 30 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2e 00 53 65 74 20 74 68 | lue.is.1000.milliseconds..Set.th |
63440 | 65 20 4d 4c 44 20 71 75 65 72 79 20 72 65 73 70 6f 6e 73 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 | e.MLD.query.response.timeout.in. |
63460 | 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 28 31 30 30 2d 36 35 35 33 35 30 30 29 2e 20 54 68 65 20 | milliseconds.(100-6553500)..The. |
63480 | 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 30 30 30 30 20 6d 69 6c 6c 69 73 65 63 6f | default.value.is.10000.milliseco |
634a0 | 6e 64 73 2e 00 53 65 74 20 74 68 65 20 4d 4c 44 20 76 65 72 73 69 6f 6e 20 75 73 65 64 20 6f 6e | nds..Set.the.MLD.version.used.on |
634c0 | 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c | .this.interface..The.default.val |
634e0 | 75 65 20 69 73 20 32 2e 00 53 65 74 20 74 68 65 20 4d 61 78 69 6d 75 6d 20 53 74 61 63 6b 20 44 | ue.is.2..Set.the.Maximum.Stack.D |
63500 | 65 70 74 68 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 2e 20 54 68 | epth.supported.by.the.router..Th |
63520 | 65 20 76 61 6c 75 65 20 64 65 70 65 6e 64 20 6f 66 20 74 68 65 20 4d 50 4c 53 20 64 61 74 61 70 | e.value.depend.of.the.MPLS.datap |
63540 | 6c 61 6e 65 2e 00 53 65 74 20 74 68 65 20 50 49 4d 20 68 65 6c 6c 6f 20 61 6e 64 20 68 6f 6c 64 | lane..Set.the.PIM.hello.and.hold |
63560 | 20 69 6e 74 65 72 76 61 6c 20 66 6f 72 20 61 20 69 6e 74 65 72 66 61 63 65 2e 00 53 65 74 20 74 | .interval.for.a.interface..Set.t |
63580 | 68 65 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 47 6c 6f 62 61 6c 20 42 6c 6f 63 6b 20 | he.Segment.Routing.Global.Block. |
635a0 | 69 2e 65 2e 20 74 68 65 20 6c 61 62 65 6c 20 72 61 6e 67 65 20 75 73 65 64 20 62 79 20 4d 50 4c | i.e..the.label.range.used.by.MPL |
635c0 | 53 20 74 6f 20 73 74 6f 72 65 20 6c 61 62 65 6c 20 69 6e 20 74 68 65 20 4d 50 4c 53 20 46 49 42 | S.to.store.label.in.the.MPLS.FIB |
635e0 | 20 66 6f 72 20 50 72 65 66 69 78 20 53 49 44 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 20 62 | .for.Prefix.SID..Note.that.the.b |
63600 | 6c 6f 63 6b 20 73 69 7a 65 20 6d 61 79 20 6e 6f 74 20 65 78 63 65 65 64 20 36 35 35 33 35 2e 00 | lock.size.may.not.exceed.65535.. |
63620 | 53 65 74 20 74 68 65 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 47 6c 6f 62 61 6c 20 42 | Set.the.Segment.Routing.Global.B |
63640 | 6c 6f 63 6b 20 69 2e 65 2e 20 74 68 65 20 6c 6f 77 20 6c 61 62 65 6c 20 72 61 6e 67 65 20 75 73 | lock.i.e..the.low.label.range.us |
63660 | 65 64 20 62 79 20 4d 50 4c 53 20 74 6f 20 73 74 6f 72 65 20 6c 61 62 65 6c 20 69 6e 20 74 68 65 | ed.by.MPLS.to.store.label.in.the |
63680 | 20 4d 50 4c 53 20 46 49 42 20 66 6f 72 20 50 72 65 66 69 78 20 53 49 44 2e 20 4e 6f 74 65 20 74 | .MPLS.FIB.for.Prefix.SID..Note.t |
636a0 | 68 61 74 20 74 68 65 20 62 6c 6f 63 6b 20 73 69 7a 65 20 6d 61 79 20 6e 6f 74 20 65 78 63 65 65 | hat.the.block.size.may.not.excee |
636c0 | 64 20 36 35 35 33 35 2e 00 53 65 74 20 74 68 65 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 | d.65535..Set.the.Segment.Routing |
636e0 | 20 4c 6f 63 61 6c 20 42 6c 6f 63 6b 20 69 2e 65 2e 20 74 68 65 20 6c 61 62 65 6c 20 72 61 6e 67 | .Local.Block.i.e..the.label.rang |
63700 | 65 20 75 73 65 64 20 62 79 20 4d 50 4c 53 20 74 6f 20 73 74 6f 72 65 20 6c 61 62 65 6c 20 69 6e | e.used.by.MPLS.to.store.label.in |
63720 | 20 74 68 65 20 4d 50 4c 53 20 46 49 42 20 66 6f 72 20 50 72 65 66 69 78 20 53 49 44 2e 20 4e 6f | .the.MPLS.FIB.for.Prefix.SID..No |
63740 | 74 65 20 74 68 61 74 20 74 68 65 20 62 6c 6f 63 6b 20 73 69 7a 65 20 6d 61 79 20 6e 6f 74 20 65 | te.that.the.block.size.may.not.e |
63760 | 78 63 65 65 64 20 36 35 35 33 35 2e 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 4c 6f 63 61 | xceed.65535.Segment.Routing.Loca |
63780 | 6c 20 42 6c 6f 63 6b 2c 20 54 68 65 20 6e 65 67 61 74 69 76 65 20 63 6f 6d 6d 61 6e 64 20 61 6c | l.Block,.The.negative.command.al |
637a0 | 77 61 79 73 20 75 6e 73 65 74 73 20 62 6f 74 68 2e 00 53 65 74 20 74 68 65 20 53 65 67 6d 65 6e | ways.unsets.both..Set.the.Segmen |
637c0 | 74 20 52 6f 75 74 69 6e 67 20 4c 6f 63 61 6c 20 42 6c 6f 63 6b 20 69 2e 65 2e 20 74 68 65 20 6c | t.Routing.Local.Block.i.e..the.l |
637e0 | 6f 77 20 6c 61 62 65 6c 20 72 61 6e 67 65 20 75 73 65 64 20 62 79 20 4d 50 4c 53 20 74 6f 20 73 | ow.label.range.used.by.MPLS.to.s |
63800 | 74 6f 72 65 20 6c 61 62 65 6c 20 69 6e 20 74 68 65 20 4d 50 4c 53 20 46 49 42 20 66 6f 72 20 50 | tore.label.in.the.MPLS.FIB.for.P |
63820 | 72 65 66 69 78 20 53 49 44 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 20 62 6c 6f 63 6b 20 73 | refix.SID..Note.that.the.block.s |
63840 | 69 7a 65 20 6d 61 79 20 6e 6f 74 20 65 78 63 65 65 64 20 36 35 35 33 35 2e 53 65 67 6d 65 6e 74 | ize.may.not.exceed.65535.Segment |
63860 | 20 52 6f 75 74 69 6e 67 20 4c 6f 63 61 6c 20 42 6c 6f 63 6b 2c 20 54 68 65 20 6e 65 67 61 74 69 | .Routing.Local.Block,.The.negati |
63880 | 76 65 20 63 6f 6d 6d 61 6e 64 20 61 6c 77 61 79 73 20 75 6e 73 65 74 73 20 62 6f 74 68 2e 00 53 | ve.command.always.unsets.both..S |
638a0 | 65 74 20 74 68 65 20 55 73 65 72 20 49 44 20 6f 72 20 47 72 6f 75 70 20 49 44 20 6f 66 20 74 68 | et.the.User.ID.or.Group.ID.of.th |
638c0 | 65 20 63 6f 6e 74 61 69 6e 65 72 00 53 65 74 20 74 68 65 20 60 60 73 73 68 64 60 60 20 6c 6f 67 | e.container.Set.the.``sshd``.log |
638e0 | 20 6c 65 76 65 6c 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 60 60 69 6e 66 6f 60 60 2e | .level..The.default.is.``info``. |
63900 | 00 53 65 74 20 74 68 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 62 61 63 6b 65 6e 64 20 | .Set.the.address.of.the.backend. |
63920 | 70 6f 72 74 00 53 65 74 20 74 68 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 62 61 63 6b | port.Set.the.address.of.the.back |
63940 | 65 6e 64 20 73 65 72 76 65 72 20 74 6f 20 77 68 69 63 68 20 74 68 65 20 69 6e 63 6f 6d 69 6e 67 | end.server.to.which.the.incoming |
63960 | 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 64 65 64 00 53 65 74 20 74 | .traffic.will.be.forwarded.Set.t |
63980 | 68 65 20 64 65 66 61 75 6c 74 20 56 52 52 50 20 76 65 72 73 69 6f 6e 20 74 6f 20 75 73 65 2e 20 | he.default.VRRP.version.to.use.. |
639a0 | 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 32 2c 20 62 75 74 20 49 50 76 36 20 69 6e 73 | This.defaults.to.2,.but.IPv6.ins |
639c0 | 74 61 6e 63 65 73 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 75 73 65 20 76 65 72 73 69 6f 6e 20 33 | tances.will.always.use.version.3 |
639e0 | 2e 00 53 65 74 20 74 68 65 20 64 65 76 69 63 65 27 73 20 74 72 61 6e 73 6d 69 74 20 28 54 58 29 | ..Set.the.device's.transmit.(TX) |
63a00 | 20 6b 65 79 2e 20 54 68 69 73 20 6b 65 79 20 6d 75 73 74 20 62 65 20 61 20 68 65 78 20 73 74 72 | .key..This.key.must.be.a.hex.str |
63a20 | 69 6e 67 20 74 68 61 74 20 69 73 20 31 36 2d 62 79 74 65 73 20 28 47 43 4d 2d 41 45 53 2d 31 32 | ing.that.is.16-bytes.(GCM-AES-12 |
63a40 | 38 29 20 6f 72 20 33 32 2d 62 79 74 65 73 20 28 47 43 4d 2d 41 45 53 2d 32 35 36 29 2e 00 53 65 | 8).or.32-bytes.(GCM-AES-256)..Se |
63a60 | 74 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 66 6f 72 20 74 68 65 20 64 65 66 61 75 6c 74 20 67 | t.the.distance.for.the.default.g |
63a80 | 61 74 65 77 61 79 20 73 65 6e 74 20 62 79 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 2e 00 | ateway.sent.by.the.DHCP.server.. |
63aa0 | 53 65 74 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 66 6f 72 20 74 68 65 20 64 65 66 61 75 6c 74 | Set.the.distance.for.the.default |
63ac0 | 20 67 61 74 65 77 61 79 20 73 65 6e 74 20 62 79 20 74 68 65 20 50 50 50 6f 45 20 73 65 72 76 65 | .gateway.sent.by.the.PPPoE.serve |
63ae0 | 72 2e 00 53 65 74 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 66 6f 72 20 74 68 65 20 64 65 66 61 | r..Set.the.distance.for.the.defa |
63b00 | 75 6c 74 20 67 61 74 65 77 61 79 20 73 65 6e 74 20 62 79 20 74 68 65 20 53 53 54 50 20 73 65 72 | ult.gateway.sent.by.the.SSTP.ser |
63b20 | 76 65 72 2e 00 53 65 74 20 74 68 65 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 74 79 70 65 20 | ver..Set.the.encapsulation.type. |
63b40 | 6f 66 20 74 68 65 20 74 75 6e 6e 65 6c 2e 20 56 61 6c 69 64 20 76 61 6c 75 65 73 20 66 6f 72 20 | of.the.tunnel..Valid.values.for. |
63b60 | 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 61 72 65 3a 20 75 64 70 2c 20 69 70 2e 00 53 65 74 20 | encapsulation.are:.udp,.ip..Set. |
63b80 | 74 68 65 20 67 6c 6f 62 61 6c 20 73 65 74 74 69 6e 67 20 66 6f 72 20 61 6e 20 65 73 74 61 62 6c | the.global.setting.for.an.establ |
63ba0 | 69 73 68 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 53 65 74 20 74 68 65 20 67 6c 6f 62 61 6c | ished.connection..Set.the.global |
63bc0 | 20 73 65 74 74 69 6e 67 20 66 6f 72 20 69 6e 76 61 6c 69 64 20 70 61 63 6b 65 74 73 2e 00 53 65 | .setting.for.invalid.packets..Se |
63be0 | 74 20 74 68 65 20 67 6c 6f 62 61 6c 20 73 65 74 74 69 6e 67 20 66 6f 72 20 72 65 6c 61 74 65 64 | t.the.global.setting.for.related |
63c00 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 53 65 74 20 74 68 65 20 6c 69 73 74 65 6e 20 70 6f 72 | .connections..Set.the.listen.por |
63c20 | 74 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 41 50 49 2c 20 74 68 69 73 20 68 61 73 20 6e 6f 20 | t.of.the.local.API,.this.has.no. |
63c40 | 65 66 66 65 63 74 20 6f 6e 20 74 68 65 20 77 65 62 73 65 72 76 65 72 2e 20 54 68 65 20 64 65 66 | effect.on.the.webserver..The.def |
63c60 | 61 75 6c 74 20 69 73 20 70 6f 72 74 20 38 30 38 30 00 53 65 74 20 74 68 65 20 6d 61 78 69 6d 75 | ault.is.port.8080.Set.the.maximu |
63c80 | 6d 20 68 6f 70 20 60 3c 63 6f 75 6e 74 3e 60 20 62 65 66 6f 72 65 20 70 61 63 6b 65 74 73 20 61 | m.hop.`<count>`.before.packets.a |
63ca0 | 72 65 20 64 69 73 63 61 72 64 65 64 2e 20 52 61 6e 67 65 20 30 2e 2e 2e 32 35 35 2c 20 64 65 66 | re.discarded..Range.0...255,.def |
63cc0 | 61 75 6c 74 20 31 30 2e 00 53 65 74 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6c 65 6e 67 74 68 20 | ault.10..Set.the.maximum.length. |
63ce0 | 6f 66 20 41 2d 4d 50 44 55 20 70 72 65 2d 45 4f 46 20 70 61 64 64 69 6e 67 20 74 68 61 74 20 74 | of.A-MPDU.pre-EOF.padding.that.t |
63d00 | 68 65 20 73 74 61 74 69 6f 6e 20 63 61 6e 20 72 65 63 65 69 76 65 00 53 65 74 20 74 68 65 20 6d | he.station.can.receive.Set.the.m |
63d20 | 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 54 43 50 20 68 61 6c 66 2d 6f 70 65 6e 20 63 | aximum.number.of.TCP.half-open.c |
63d40 | 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 53 65 74 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 | onnections..Set.the.name.of.the. |
63d60 | 53 53 4c 20 3a 61 62 62 72 3a 60 43 41 20 28 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f | SSL.:abbr:`CA.(Certificate.Autho |
63d80 | 72 69 74 79 29 60 20 50 4b 49 20 65 6e 74 72 79 20 75 73 65 64 20 66 6f 72 20 61 75 74 68 65 6e | rity)`.PKI.entry.used.for.authen |
63da0 | 74 69 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 20 73 69 64 65 2e 20 49 66 20 | tication.of.the.remote.side..If. |
63dc0 | 61 6e 20 69 6e 74 65 72 6d 65 64 69 61 74 65 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 69 | an.intermediate.CA.certificate.i |
63de0 | 73 20 73 70 65 63 69 66 69 65 64 2c 20 74 68 65 6e 20 61 6c 6c 20 70 61 72 65 6e 74 20 43 41 20 | s.specified,.then.all.parent.CA. |
63e00 | 63 65 72 74 69 66 69 63 61 74 65 73 20 74 68 61 74 20 65 78 69 73 74 20 69 6e 20 74 68 65 20 50 | certificates.that.exist.in.the.P |
63e20 | 4b 49 2c 20 73 75 63 68 20 61 73 20 74 68 65 20 72 6f 6f 74 20 43 41 20 6f 72 20 61 64 64 69 74 | KI,.such.as.the.root.CA.or.addit |
63e40 | 69 6f 6e 61 6c 20 69 6e 74 65 72 6d 65 64 69 61 74 65 20 43 41 73 2c 20 77 69 6c 6c 20 61 75 74 | ional.intermediate.CAs,.will.aut |
63e60 | 6f 6d 61 74 69 63 61 6c 6c 79 20 62 65 20 75 73 65 64 20 64 75 72 69 6e 67 20 63 65 72 74 69 66 | omatically.be.used.during.certif |
63e80 | 69 63 61 74 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 | icate.validation.to.ensure.that. |
63ea0 | 74 68 65 20 66 75 6c 6c 20 63 68 61 69 6e 20 6f 66 20 74 72 75 73 74 20 69 73 20 61 76 61 69 6c | the.full.chain.of.trust.is.avail |
63ec0 | 61 62 6c 65 2e 00 53 65 74 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 78 35 30 39 20 63 | able..Set.the.name.of.the.x509.c |
63ee0 | 6c 69 65 6e 74 20 6b 65 79 70 61 69 72 20 75 73 65 64 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 | lient.keypair.used.to.authentica |
63f00 | 74 65 20 61 67 61 69 6e 73 74 20 74 68 65 20 38 30 32 2e 31 78 20 73 79 73 74 65 6d 2e 20 41 6c | te.against.the.802.1x.system..Al |
63f20 | 6c 20 70 61 72 65 6e 74 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 73 20 6f 66 20 74 68 65 20 | l.parent.CA.certificates.of.the. |
63f40 | 63 6c 69 65 6e 74 20 63 65 72 74 69 66 69 63 61 74 65 2c 20 73 75 63 68 20 61 73 20 69 6e 74 65 | client.certificate,.such.as.inte |
63f60 | 72 6d 65 64 69 61 74 65 20 61 6e 64 20 72 6f 6f 74 20 43 41 73 2c 20 77 69 6c 6c 20 62 65 20 73 | rmediate.and.root.CAs,.will.be.s |
63f80 | 65 6e 74 20 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 45 41 50 2d 54 4c 53 20 68 61 6e 64 73 | ent.as.part.of.the.EAP-TLS.hands |
63fa0 | 68 61 6b 65 2e 00 53 65 74 20 74 68 65 20 6e 61 74 69 76 65 20 56 4c 41 4e 20 49 44 20 66 6c 61 | hake..Set.the.native.VLAN.ID.fla |
63fc0 | 67 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 57 68 65 6e 20 61 20 64 61 74 61 20 | g.of.the.interface..When.a.data. |
63fe0 | 70 61 63 6b 65 74 20 77 69 74 68 6f 75 74 20 61 20 56 4c 41 4e 20 74 61 67 20 65 6e 74 65 72 73 | packet.without.a.VLAN.tag.enters |
64000 | 20 74 68 65 20 70 6f 72 74 2c 20 74 68 65 20 64 61 74 61 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 | .the.port,.the.data.packet.will. |
64020 | 62 65 20 66 6f 72 63 65 64 20 74 6f 20 61 64 64 20 61 20 74 61 67 20 6f 66 20 61 20 73 70 65 63 | be.forced.to.add.a.tag.of.a.spec |
64040 | 69 66 69 63 20 76 6c 61 6e 20 69 64 2e 20 57 68 65 6e 20 74 68 65 20 76 6c 61 6e 20 69 64 20 66 | ific.vlan.id..When.the.vlan.id.f |
64060 | 6c 61 67 20 66 6c 6f 77 73 20 6f 75 74 2c 20 74 68 65 20 74 61 67 20 6f 66 20 74 68 65 20 76 6c | lag.flows.out,.the.tag.of.the.vl |
64080 | 61 6e 20 69 64 20 77 69 6c 6c 20 62 65 20 73 74 72 69 70 70 65 64 00 53 65 74 20 74 68 65 20 6e | an.id.will.be.stripped.Set.the.n |
640a0 | 65 78 74 2d 68 6f 70 20 61 73 20 75 6e 63 68 61 6e 67 65 64 2e 20 50 61 73 73 20 74 68 72 6f 75 | ext-hop.as.unchanged..Pass.throu |
640c0 | 67 68 20 74 68 65 20 72 6f 75 74 65 2d 6d 61 70 20 77 69 74 68 6f 75 74 20 63 68 61 6e 67 69 6e | gh.the.route-map.without.changin |
640e0 | 67 20 69 74 73 20 76 61 6c 75 65 00 53 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 54 43 | g.its.value.Set.the.number.of.TC |
64100 | 50 20 6d 61 78 69 6d 75 6d 20 72 65 74 72 61 6e 73 6d 69 74 20 61 74 74 65 6d 70 74 73 2e 00 53 | P.maximum.retransmit.attempts..S |
64120 | 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 68 65 61 6c 74 68 20 63 68 65 63 6b 20 66 61 | et.the.number.of.health.check.fa |
64140 | 69 6c 75 72 65 73 20 62 65 66 6f 72 65 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 6d 61 | ilures.before.an.interface.is.ma |
64160 | 72 6b 65 64 20 61 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 2c 20 72 61 6e 67 65 20 66 6f 72 20 6e | rked.as.unavailable,.range.for.n |
64180 | 75 6d 62 65 72 20 69 73 20 31 20 74 6f 20 31 30 2c 20 64 65 66 61 75 6c 74 20 31 2e 20 4f 72 20 | umber.is.1.to.10,.default.1..Or. |
641a0 | 73 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 75 63 63 65 73 73 66 75 6c 20 68 65 61 | set.the.number.of.successful.hea |
641c0 | 6c 74 68 20 63 68 65 63 6b 73 20 62 65 66 6f 72 65 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 69 | lth.checks.before.an.interface.i |
641e0 | 73 20 61 64 64 65 64 20 62 61 63 6b 20 74 6f 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 70 6f | s.added.back.to.the.interface.po |
64200 | 6f 6c 2c 20 72 61 6e 67 65 20 66 6f 72 20 6e 75 6d 62 65 72 20 69 73 20 31 20 74 6f 20 31 30 2c | ol,.range.for.number.is.1.to.10, |
64220 | 20 64 65 66 61 75 6c 74 20 31 2e 00 53 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 | .default.1..Set.the.number.of.se |
64240 | 63 6f 6e 64 73 20 74 68 65 20 72 6f 75 74 65 72 20 77 61 69 74 73 20 75 6e 74 69 6c 20 72 65 74 | conds.the.router.waits.until.ret |
64260 | 72 79 69 6e 67 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 63 61 63 68 65 20 73 65 | rying.to.connect.to.the.cache.se |
64280 | 72 76 65 72 2e 00 53 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 | rver..Set.the.number.of.seconds. |
642a0 | 74 68 65 20 72 6f 75 74 65 72 20 77 61 69 74 73 20 75 6e 74 69 6c 20 74 68 65 20 72 6f 75 74 65 | the.router.waits.until.the.route |
642c0 | 72 20 65 78 70 69 72 65 73 20 74 68 65 20 63 61 63 68 65 2e 00 53 65 74 20 74 68 65 20 6f 70 74 | r.expires.the.cache..Set.the.opt |
642e0 | 69 6f 6e 73 20 66 6f 72 20 74 68 69 73 20 70 75 62 6c 69 63 20 6b 65 79 2e 20 53 65 65 20 74 68 | ions.for.this.public.key..See.th |
64300 | 65 20 73 73 68 20 60 60 61 75 74 68 6f 72 69 7a 65 64 5f 6b 65 79 73 60 60 20 6d 61 6e 20 70 61 | e.ssh.``authorized_keys``.man.pa |
64320 | 67 65 20 66 6f 72 20 64 65 74 61 69 6c 73 20 6f 66 20 77 68 61 74 20 79 6f 75 20 63 61 6e 20 73 | ge.for.details.of.what.you.can.s |
64340 | 70 65 63 69 66 79 20 68 65 72 65 2e 20 54 6f 20 70 6c 61 63 65 20 61 20 60 60 22 60 60 20 63 68 | pecify.here..To.place.a.``"``.ch |
64360 | 61 72 61 63 74 65 72 20 69 6e 20 74 68 65 20 6f 70 74 69 6f 6e 73 20 66 69 65 6c 64 2c 20 75 73 | aracter.in.the.options.field,.us |
64380 | 65 20 60 60 26 71 75 6f 74 3b 60 60 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 66 72 6f 6d | e.``"``,.for.example.``from |
643a0 | 3d 26 71 75 6f 74 3b 31 30 2e 30 2e 30 2e 30 2f 32 34 26 71 75 6f 74 3b 60 60 20 74 6f 20 72 65 | ="10.0.0.0/24"``.to.re |
643c0 | 73 74 72 69 63 74 20 77 68 65 72 65 20 74 68 65 20 75 73 65 72 20 6d 61 79 20 63 6f 6e 6e 65 63 | strict.where.the.user.may.connec |
643e0 | 74 20 66 72 6f 6d 20 77 68 65 6e 20 75 73 69 6e 67 20 74 68 69 73 20 6b 65 79 2e 00 53 65 74 20 | t.from.when.using.this.key..Set. |
64400 | 74 68 65 20 70 61 72 69 74 79 20 6f 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 63 6f 6e 73 6f 6c | the.parity.option.for.the.consol |
64420 | 65 2e 20 49 66 20 75 6e 73 65 74 20 74 68 69 73 20 77 69 6c 6c 20 64 65 66 61 75 6c 74 20 74 6f | e..If.unset.this.will.default.to |
64440 | 20 6e 6f 6e 65 2e 00 53 65 74 20 74 68 65 20 70 65 65 72 27 73 20 4d 41 43 20 61 64 64 72 65 73 | .none..Set.the.peer's.MAC.addres |
64460 | 73 00 53 65 74 20 74 68 65 20 70 65 65 72 27 73 20 6b 65 79 20 75 73 65 64 20 74 6f 20 72 65 63 | s.Set.the.peer's.key.used.to.rec |
64480 | 65 69 76 65 20 28 52 58 29 20 74 72 61 66 66 69 63 00 53 65 74 20 74 68 65 20 70 65 65 72 2d 73 | eive.(RX).traffic.Set.the.peer-s |
644a0 | 65 73 73 69 6f 6e 2d 69 64 2c 20 77 68 69 63 68 20 69 73 20 61 20 33 32 2d 62 69 74 20 69 6e 74 | ession-id,.which.is.a.32-bit.int |
644c0 | 65 67 65 72 20 76 61 6c 75 65 20 61 73 73 69 67 6e 65 64 20 74 6f 20 74 68 65 20 73 65 73 73 69 | eger.value.assigned.to.the.sessi |
644e0 | 6f 6e 20 62 79 20 74 68 65 20 70 65 65 72 2e 20 54 68 65 20 76 61 6c 75 65 20 75 73 65 64 20 6d | on.by.the.peer..The.value.used.m |
64500 | 75 73 74 20 6d 61 74 63 68 20 74 68 65 20 73 65 73 73 69 6f 6e 5f 69 64 20 76 61 6c 75 65 20 62 | ust.match.the.session_id.value.b |
64520 | 65 69 6e 67 20 75 73 65 64 20 61 74 20 74 68 65 20 70 65 65 72 2e 00 53 65 74 20 74 68 65 20 72 | eing.used.at.the.peer..Set.the.r |
64540 | 65 73 74 61 72 74 20 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 | estart.behavior.of.the.container |
64560 | 2e 00 53 65 74 20 74 68 65 20 72 6f 75 74 65 20 6d 65 74 72 69 63 2e 20 57 68 65 6e 20 75 73 65 | ..Set.the.route.metric..When.use |
64580 | 64 20 77 69 74 68 20 42 47 50 2c 20 73 65 74 20 74 68 65 20 42 47 50 20 61 74 74 72 69 62 75 74 | d.with.BGP,.set.the.BGP.attribut |
645a0 | 65 20 4d 45 44 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 76 61 6c 75 65 2e 20 55 73 65 20 60 | e.MED.to.a.specific.value..Use.` |
645c0 | 60 2b 2f 2d 60 60 20 74 6f 20 61 64 64 20 6f 72 20 73 75 62 74 72 61 63 74 20 74 68 65 20 73 70 | `+/-``.to.add.or.subtract.the.sp |
645e0 | 65 63 69 66 69 65 64 20 76 61 6c 75 65 20 74 6f 2f 66 72 6f 6d 20 74 68 65 20 65 78 69 73 74 69 | ecified.value.to/from.the.existi |
64600 | 6e 67 2f 4d 45 44 2e 20 55 73 65 20 60 60 72 74 74 60 60 20 74 6f 20 73 65 74 20 74 68 65 20 4d | ng/MED..Use.``rtt``.to.set.the.M |
64620 | 45 44 20 74 6f 20 74 68 65 20 72 6f 75 6e 64 20 74 72 69 70 20 74 69 6d 65 20 6f 72 20 60 60 2b | ED.to.the.round.trip.time.or.``+ |
64640 | 72 74 74 2f 2d 72 74 74 60 60 20 74 6f 20 61 64 64 2f 73 75 62 74 72 61 63 74 20 74 68 65 20 72 | rtt/-rtt``.to.add/subtract.the.r |
64660 | 6f 75 6e 64 20 74 72 69 70 20 74 69 6d 65 20 74 6f 2f 66 72 6f 6d 20 74 68 65 20 4d 45 44 2e 00 | ound.trip.time.to/from.the.MED.. |
64680 | 53 65 74 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 74 6f 20 66 6f 72 77 61 72 64 | Set.the.routing.table.to.forward |
646a0 | 20 70 61 63 6b 65 74 20 77 69 74 68 2e 00 53 65 74 20 74 68 65 20 73 65 73 73 69 6f 6e 20 69 64 | .packet.with..Set.the.session.id |
646c0 | 2c 20 77 68 69 63 68 20 69 73 20 61 20 33 32 2d 62 69 74 20 69 6e 74 65 67 65 72 20 76 61 6c 75 | ,.which.is.a.32-bit.integer.valu |
646e0 | 65 2e 20 55 6e 69 71 75 65 6c 79 20 69 64 65 6e 74 69 66 69 65 73 20 74 68 65 20 73 65 73 73 69 | e..Uniquely.identifies.the.sessi |
64700 | 6f 6e 20 62 65 69 6e 67 20 63 72 65 61 74 65 64 2e 20 54 68 65 20 76 61 6c 75 65 20 75 73 65 64 | on.being.created..The.value.used |
64720 | 20 6d 75 73 74 20 6d 61 74 63 68 20 74 68 65 20 70 65 65 72 5f 73 65 73 73 69 6f 6e 5f 69 64 20 | .must.match.the.peer_session_id. |
64740 | 76 61 6c 75 65 20 62 65 69 6e 67 20 75 73 65 64 20 61 74 20 74 68 65 20 70 65 65 72 2e 00 53 65 | value.being.used.at.the.peer..Se |
64760 | 74 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 68 61 73 68 20 74 61 62 6c 65 2e 20 54 68 | t.the.size.of.the.hash.table..Th |
64780 | 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 68 61 73 68 20 74 61 62 6c 65 | e.connection.tracking.hash.table |
647a0 | 20 6d 61 6b 65 73 20 73 65 61 72 63 68 69 6e 67 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 | .makes.searching.the.connection. |
647c0 | 74 72 61 63 6b 69 6e 67 20 74 61 62 6c 65 20 66 61 73 74 65 72 2e 20 54 68 65 20 68 61 73 68 20 | tracking.table.faster..The.hash. |
647e0 | 74 61 62 6c 65 20 75 73 65 73 20 e2 80 9c 62 75 63 6b 65 74 73 e2 80 9d 20 74 6f 20 72 65 63 6f | table.uses....buckets....to.reco |
64800 | 72 64 20 65 6e 74 72 69 65 73 20 69 6e 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 | rd.entries.in.the.connection.tra |
64820 | 63 6b 69 6e 67 20 74 61 62 6c 65 2e 00 53 65 74 20 74 68 65 20 73 6f 75 72 63 65 20 49 50 20 6f | cking.table..Set.the.source.IP.o |
64840 | 66 20 66 6f 72 77 61 72 64 65 64 20 70 61 63 6b 65 74 73 2c 20 6f 74 68 65 72 77 69 73 65 20 6f | f.forwarded.packets,.otherwise.o |
64860 | 72 69 67 69 6e 61 6c 20 73 65 6e 64 65 72 73 20 61 64 64 72 65 73 73 20 69 73 20 75 73 65 64 2e | riginal.senders.address.is.used. |
64880 | 00 53 65 74 20 74 68 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 75 6e 64 73 20 66 6f 72 | .Set.the.timeout.in.secounds.for |
648a0 | 20 61 20 70 72 6f 74 6f 63 6f 6c 20 6f 72 20 73 74 61 74 65 20 69 6e 20 61 20 63 75 73 74 6f 6d | .a.protocol.or.state.in.a.custom |
648c0 | 20 72 75 6c 65 2e 00 53 65 74 20 74 68 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 75 6e | .rule..Set.the.timeout.in.secoun |
648e0 | 64 73 20 66 6f 72 20 61 20 70 72 6f 74 6f 63 6f 6c 20 6f 72 20 73 74 61 74 65 2e 00 53 65 74 20 | ds.for.a.protocol.or.state..Set. |
64900 | 74 68 65 20 74 75 6e 6e 65 6c 20 69 64 2c 20 77 68 69 63 68 20 69 73 20 61 20 33 32 2d 62 69 74 | the.tunnel.id,.which.is.a.32-bit |
64920 | 20 69 6e 74 65 67 65 72 20 76 61 6c 75 65 2e 20 55 6e 69 71 75 65 6c 79 20 69 64 65 6e 74 69 66 | .integer.value..Uniquely.identif |
64940 | 69 65 73 20 74 68 65 20 74 75 6e 6e 65 6c 20 69 6e 74 6f 20 77 68 69 63 68 20 74 68 65 20 73 65 | ies.the.tunnel.into.which.the.se |
64960 | 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 63 72 65 61 74 65 64 2e 00 53 65 74 20 74 68 65 20 77 | ssion.will.be.created..Set.the.w |
64980 | 69 6e 64 6f 77 20 73 63 61 6c 65 20 66 61 63 74 6f 72 20 66 6f 72 20 54 43 50 20 77 69 6e 64 6f | indow.scale.factor.for.TCP.windo |
649a0 | 77 20 73 63 61 6c 69 6e 67 00 53 65 74 20 77 69 6e 64 6f 77 20 6f 66 20 63 6f 6e 63 75 72 72 65 | w.scaling.Set.window.of.concurre |
649c0 | 6e 74 6c 79 20 76 61 6c 69 64 20 63 6f 64 65 73 2e 00 53 65 74 73 20 74 68 65 20 69 6d 61 67 65 | ntly.valid.codes..Sets.the.image |
649e0 | 20 6e 61 6d 65 20 69 6e 20 74 68 65 20 68 75 62 20 72 65 67 69 73 74 72 79 00 53 65 74 73 20 74 | .name.in.the.hub.registry.Sets.t |
64a00 | 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f 72 20 6d 75 6c 74 69 | he.interface.to.listen.for.multi |
64a20 | 63 61 73 74 20 70 61 63 6b 65 74 73 20 6f 6e 2e 20 43 6f 75 6c 64 20 62 65 20 61 20 6c 6f 6f 70 | cast.packets.on..Could.be.a.loop |
64a40 | 62 61 63 6b 2c 20 6e 6f 74 20 79 65 74 20 74 65 73 74 65 64 2e 00 53 65 74 73 20 74 68 65 20 6c | back,.not.yet.tested..Sets.the.l |
64a60 | 69 73 74 65 6e 69 6e 67 20 70 6f 72 74 20 66 6f 72 20 61 20 6c 69 73 74 65 6e 69 6e 67 20 61 64 | istening.port.for.a.listening.ad |
64a80 | 64 72 65 73 73 2e 20 54 68 69 73 20 6f 76 65 72 72 69 64 65 73 20 74 68 65 20 64 65 66 61 75 6c | dress..This.overrides.the.defaul |
64aa0 | 74 20 70 6f 72 74 20 6f 66 20 33 31 32 38 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 63 20 6c | t.port.of.3128.on.the.specific.l |
64ac0 | 69 73 74 65 6e 20 61 64 64 72 65 73 73 2e 00 53 65 74 73 20 74 68 65 20 75 6e 69 71 75 65 20 69 | isten.address..Sets.the.unique.i |
64ae0 | 64 20 66 6f 72 20 74 68 69 73 20 76 78 6c 61 6e 2d 69 6e 74 65 72 66 61 63 65 2e 20 4e 6f 74 20 | d.for.this.vxlan-interface..Not. |
64b00 | 73 75 72 65 20 68 6f 77 20 69 74 20 63 6f 72 72 65 6c 61 74 65 73 20 77 69 74 68 20 6d 75 6c 74 | sure.how.it.correlates.with.mult |
64b20 | 69 63 61 73 74 2d 61 64 64 72 65 73 73 2e 00 53 65 74 74 69 6e 67 20 56 52 52 50 20 67 72 6f 75 | icast-address..Setting.VRRP.grou |
64b40 | 70 20 70 72 69 6f 72 69 74 79 00 53 65 74 74 69 6e 67 20 6e 61 6d 65 00 53 65 74 74 69 6e 67 20 | p.priority.Setting.name.Setting. |
64b60 | 74 68 69 73 20 75 70 20 6f 6e 20 41 57 53 20 77 69 6c 6c 20 72 65 71 75 69 72 65 20 61 20 22 43 | this.up.on.AWS.will.require.a."C |
64b80 | 75 73 74 6f 6d 20 50 72 6f 74 6f 63 6f 6c 20 52 75 6c 65 22 20 66 6f 72 20 70 72 6f 74 6f 63 6f | ustom.Protocol.Rule".for.protoco |
64ba0 | 6c 20 6e 75 6d 62 65 72 20 22 34 37 22 20 28 47 52 45 29 20 41 6c 6c 6f 77 20 52 75 6c 65 20 69 | l.number."47".(GRE).Allow.Rule.i |
64bc0 | 6e 20 54 57 4f 20 70 6c 61 63 65 73 2e 20 46 69 72 73 74 6c 79 20 6f 6e 20 74 68 65 20 56 50 43 | n.TWO.places..Firstly.on.the.VPC |
64be0 | 20 4e 65 74 77 6f 72 6b 20 41 43 4c 2c 20 61 6e 64 20 73 65 63 6f 6e 64 6c 79 20 6f 6e 20 74 68 | .Network.ACL,.and.secondly.on.th |
64c00 | 65 20 73 65 63 75 72 69 74 79 20 67 72 6f 75 70 20 6e 65 74 77 6f 72 6b 20 41 43 4c 20 61 74 74 | e.security.group.network.ACL.att |
64c20 | 61 63 68 65 64 20 74 6f 20 74 68 65 20 45 43 32 20 69 6e 73 74 61 6e 63 65 2e 20 54 68 69 73 20 | ached.to.the.EC2.instance..This. |
64c40 | 68 61 73 20 62 65 65 6e 20 74 65 73 74 65 64 20 61 73 20 77 6f 72 6b 69 6e 67 20 66 6f 72 20 74 | has.been.tested.as.working.for.t |
64c60 | 68 65 20 6f 66 66 69 63 69 61 6c 20 41 4d 49 20 69 6d 61 67 65 20 6f 6e 20 74 68 65 20 41 57 53 | he.official.AMI.image.on.the.AWS |
64c80 | 20 4d 61 72 6b 65 74 70 6c 61 63 65 2e 20 28 4c 6f 63 61 74 65 20 74 68 65 20 63 6f 72 72 65 63 | .Marketplace..(Locate.the.correc |
64ca0 | 74 20 56 50 43 20 61 6e 64 20 73 65 63 75 72 69 74 79 20 67 72 6f 75 70 20 62 79 20 6e 61 76 69 | t.VPC.and.security.group.by.navi |
64cc0 | 67 61 74 69 6e 67 20 74 68 72 6f 75 67 68 20 74 68 65 20 64 65 74 61 69 6c 73 20 70 61 6e 65 20 | gating.through.the.details.pane. |
64ce0 | 62 65 6c 6f 77 20 79 6f 75 72 20 45 43 32 20 69 6e 73 74 61 6e 63 65 20 69 6e 20 74 68 65 20 41 | below.your.EC2.instance.in.the.A |
64d00 | 57 53 20 63 6f 6e 73 6f 6c 65 29 2e 00 53 65 74 74 69 6e 67 20 75 70 20 49 50 53 65 63 3a 00 53 | WS.console)..Setting.up.IPSec:.S |
64d20 | 65 74 74 69 6e 67 20 75 70 20 4f 70 65 6e 56 50 4e 00 53 65 74 74 69 6e 67 20 75 70 20 61 20 66 | etting.up.OpenVPN.Setting.up.a.f |
64d40 | 75 6c 6c 2d 62 6c 6f 77 6e 20 50 4b 49 20 77 69 74 68 20 61 20 43 41 20 63 65 72 74 69 66 69 63 | ull-blown.PKI.with.a.CA.certific |
64d60 | 61 74 65 20 77 6f 75 6c 64 20 61 72 67 75 61 62 6c 79 20 64 65 66 65 61 74 20 74 68 65 20 70 75 | ate.would.arguably.defeat.the.pu |
64d80 | 72 70 6f 73 65 20 6f 66 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 4f 70 65 6e 56 50 4e 2c 20 73 | rpose.of.site-to-site.OpenVPN,.s |
64da0 | 69 6e 63 65 20 69 74 73 20 6d 61 69 6e 20 67 6f 61 6c 20 69 73 20 73 75 70 70 6f 73 65 64 20 74 | ince.its.main.goal.is.supposed.t |
64dc0 | 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 69 6d 70 6c 69 63 69 74 79 2c 20 63 | o.be.configuration.simplicity,.c |
64de0 | 6f 6d 70 61 72 65 64 20 74 6f 20 73 65 72 76 65 72 20 73 65 74 75 70 73 20 74 68 61 74 20 6e 65 | ompared.to.server.setups.that.ne |
64e00 | 65 64 20 74 6f 20 73 75 70 70 6f 72 74 20 6d 75 6c 74 69 70 6c 65 20 63 6c 69 65 6e 74 73 2e 00 | ed.to.support.multiple.clients.. |
64e20 | 53 65 74 74 69 6e 67 20 75 70 20 63 65 72 74 69 66 69 63 61 74 65 73 00 53 65 74 74 69 6e 67 20 | Setting.up.certificates.Setting. |
64e40 | 75 70 20 63 65 72 74 69 66 69 63 61 74 65 73 3a 00 53 65 74 74 69 6e 67 20 75 70 20 74 75 6e 6e | up.certificates:.Setting.up.tunn |
64e60 | 65 6c 3a 00 53 65 74 74 69 6e 67 20 77 69 6c 6c 20 6f 6e 6c 79 20 62 65 63 6f 6d 65 20 61 63 74 | el:.Setting.will.only.become.act |
64e80 | 69 76 65 20 77 69 74 68 20 74 68 65 20 6e 65 78 74 20 72 65 62 6f 6f 74 21 00 53 65 74 75 70 20 | ive.with.the.next.reboot!.Setup. |
64ea0 | 44 48 43 50 20 48 41 20 66 6f 72 20 6e 65 74 77 6f 72 6b 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 | DHCP.HA.for.network.192.0.2.0/24 |
64ec0 | 00 53 65 74 75 70 20 44 48 43 50 20 66 61 69 6c 6f 76 65 72 20 66 6f 72 20 6e 65 74 77 6f 72 6b | .Setup.DHCP.failover.for.network |
64ee0 | 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 00 53 65 74 75 70 20 65 6e 63 72 79 70 74 65 64 20 70 61 | .192.0.2.0/24.Setup.encrypted.pa |
64f00 | 73 73 77 6f 72 64 20 66 6f 72 20 67 69 76 65 6e 20 75 73 65 72 6e 61 6d 65 2e 20 54 68 69 73 20 | ssword.for.given.username..This. |
64f20 | 69 73 20 75 73 65 66 75 6c 20 66 6f 72 20 74 72 61 6e 73 66 65 72 72 69 6e 67 20 61 20 68 61 73 | is.useful.for.transferring.a.has |
64f40 | 68 65 64 20 70 61 73 73 77 6f 72 64 20 66 72 6f 6d 20 73 79 73 74 65 6d 20 74 6f 20 73 79 73 74 | hed.password.from.system.to.syst |
64f60 | 65 6d 2e 00 53 65 74 75 70 20 74 68 65 20 60 3c 74 69 6d 65 6f 75 74 3e 60 20 69 6e 20 73 65 63 | em..Setup.the.`<timeout>`.in.sec |
64f80 | 6f 6e 64 73 20 77 68 65 6e 20 71 75 65 72 79 69 6e 67 20 74 68 65 20 52 41 44 49 55 53 20 73 65 | onds.when.querying.the.RADIUS.se |
64fa0 | 72 76 65 72 2e 00 53 65 74 75 70 20 74 68 65 20 60 3c 74 69 6d 65 6f 75 74 3e 60 20 69 6e 20 73 | rver..Setup.the.`<timeout>`.in.s |
64fc0 | 65 63 6f 6e 64 73 20 77 68 65 6e 20 71 75 65 72 79 69 6e 67 20 74 68 65 20 54 41 43 41 43 53 20 | econds.when.querying.the.TACACS. |
64fe0 | 73 65 72 76 65 72 2e 00 53 65 74 75 70 20 74 68 65 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 68 6f | server..Setup.the.dynamic.DNS.ho |
65000 | 73 74 6e 61 6d 65 20 60 3c 68 6f 73 74 6e 61 6d 65 3e 60 20 61 73 73 6f 63 69 61 74 65 64 20 77 | stname.`<hostname>`.associated.w |
65020 | 69 74 68 20 74 68 65 20 44 79 6e 44 4e 53 20 70 72 6f 76 69 64 65 72 20 69 64 65 6e 74 69 66 69 | ith.the.DynDNS.provider.identifi |
65040 | 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 2d 6e 61 6d 65 3e 60 2e 00 53 65 74 75 70 20 74 68 | ed.by.`<service-name>`..Setup.th |
65060 | 65 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 68 6f 73 74 6e 61 6d 65 20 60 3c 68 6f 73 74 6e 61 6d | e.dynamic.DNS.hostname.`<hostnam |
65080 | 65 3e 60 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 44 79 6e 44 4e 53 20 70 | e>`.associated.with.the.DynDNS.p |
650a0 | 72 6f 76 69 64 65 72 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 3e | rovider.identified.by.`<service> |
650c0 | 60 20 77 68 65 6e 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 6e 20 61 64 64 72 65 73 73 | `.when.the.IP.address.on.address |
650e0 | 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 63 68 61 6e 67 65 73 2e 00 53 65 74 75 70 20 74 68 | .`<interface>`.changes..Setup.th |
65100 | 65 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 68 6f 73 74 6e 61 6d 65 20 60 3c 68 6f 73 74 6e 61 6d | e.dynamic.DNS.hostname.`<hostnam |
65120 | 65 3e 60 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 44 79 6e 44 4e 53 20 70 | e>`.associated.with.the.DynDNS.p |
65140 | 72 6f 76 69 64 65 72 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 3e | rovider.identified.by.`<service> |
65160 | 60 20 77 68 65 6e 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 6e 20 69 6e 74 65 72 66 61 | `.when.the.IP.address.on.interfa |
65180 | 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 63 68 61 6e 67 65 73 2e 00 53 65 76 65 72 61 | ce.`<interface>`.changes..Severa |
651a0 | 6c 20 63 6f 6d 6d 61 6e 64 73 20 75 74 69 6c 69 7a 65 20 63 55 52 4c 20 74 6f 20 69 6e 69 74 69 | l.commands.utilize.cURL.to.initi |
651c0 | 61 74 65 20 74 72 61 6e 73 66 65 72 73 2e 20 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6c 6f 63 | ate.transfers..Configure.the.loc |
651e0 | 61 6c 20 73 6f 75 72 63 65 20 49 50 76 34 2f 49 50 76 36 20 61 64 64 72 65 73 73 20 75 73 65 64 | al.source.IPv4/IPv6.address.used |
65200 | 20 66 6f 72 20 61 6c 6c 20 63 55 52 4c 20 6f 70 65 72 61 74 69 6f 6e 73 2e 00 53 65 76 65 72 61 | .for.all.cURL.operations..Severa |
65220 | 6c 20 63 6f 6d 6d 61 6e 64 73 20 75 74 69 6c 69 7a 65 20 63 75 72 6c 20 74 6f 20 69 6e 69 74 69 | l.commands.utilize.curl.to.initi |
65240 | 61 74 65 20 74 72 61 6e 73 66 65 72 73 2e 20 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6c 6f 63 | ate.transfers..Configure.the.loc |
65260 | 61 6c 20 73 6f 75 72 63 65 20 69 6e 74 65 72 66 61 63 65 20 75 73 65 64 20 66 6f 72 20 61 6c 6c | al.source.interface.used.for.all |
65280 | 20 43 55 52 4c 20 6f 70 65 72 61 74 69 6f 6e 73 2e 00 53 65 76 65 72 69 74 79 00 53 65 76 65 72 | .CURL.operations..Severity.Sever |
652a0 | 69 74 79 20 4c 65 76 65 6c 00 53 68 61 70 65 72 00 53 68 6f 72 74 20 47 49 20 63 61 70 61 62 69 | ity.Level.Shaper.Short.GI.capabi |
652c0 | 6c 69 74 69 65 73 00 53 68 6f 72 74 20 47 49 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 66 6f 72 | lities.Short.GI.capabilities.for |
652e0 | 20 32 30 20 61 6e 64 20 34 30 20 4d 48 7a 00 53 68 6f 72 74 20 62 75 72 73 74 73 20 63 61 6e 20 | .20.and.40.MHz.Short.bursts.can. |
65300 | 62 65 20 61 6c 6c 6f 77 65 64 20 74 6f 20 65 78 63 65 65 64 20 74 68 65 20 6c 69 6d 69 74 2e 20 | be.allowed.to.exceed.the.limit.. |
65320 | 4f 6e 20 63 72 65 61 74 69 6f 6e 2c 20 74 68 65 20 52 61 74 65 2d 43 6f 6e 74 72 6f 6c 20 74 72 | On.creation,.the.Rate-Control.tr |
65340 | 61 66 66 69 63 20 69 73 20 73 74 6f 63 6b 65 64 20 77 69 74 68 20 74 6f 6b 65 6e 73 20 77 68 69 | affic.is.stocked.with.tokens.whi |
65360 | 63 68 20 63 6f 72 72 65 73 70 6f 6e 64 20 74 6f 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 74 | ch.correspond.to.the.amount.of.t |
65380 | 72 61 66 66 69 63 20 74 68 61 74 20 63 61 6e 20 62 65 20 62 75 72 73 74 20 69 6e 20 6f 6e 65 20 | raffic.that.can.be.burst.in.one. |
653a0 | 67 6f 2e 20 54 6f 6b 65 6e 73 20 61 72 72 69 76 65 20 61 74 20 61 20 73 74 65 61 64 79 20 72 61 | go..Tokens.arrive.at.a.steady.ra |
653c0 | 74 65 2c 20 75 6e 74 69 6c 20 74 68 65 20 62 75 63 6b 65 74 20 69 73 20 66 75 6c 6c 2e 00 53 68 | te,.until.the.bucket.is.full..Sh |
653e0 | 6f 72 74 63 75 74 20 73 79 6e 74 61 78 20 66 6f 72 20 73 70 65 63 69 66 79 69 6e 67 20 61 75 74 | ortcut.syntax.for.specifying.aut |
65400 | 6f 6d 61 74 69 63 20 6c 65 61 6b 69 6e 67 20 66 72 6f 6d 20 76 72 66 20 56 52 46 4e 41 4d 45 20 | omatic.leaking.from.vrf.VRFNAME. |
65420 | 74 6f 20 74 68 65 20 63 75 72 72 65 6e 74 20 56 52 46 20 75 73 69 6e 67 20 74 68 65 20 56 50 4e | to.the.current.VRF.using.the.VPN |
65440 | 20 52 49 42 20 61 73 20 69 6e 74 65 72 6d 65 64 69 61 72 79 2e 20 54 68 65 20 52 44 20 61 6e 64 | .RIB.as.intermediary..The.RD.and |
65460 | 20 52 54 20 61 72 65 20 61 75 74 6f 20 64 65 72 69 76 65 64 20 61 6e 64 20 73 68 6f 75 6c 64 20 | .RT.are.auto.derived.and.should. |
65480 | 6e 6f 74 20 62 65 20 73 70 65 63 69 66 69 65 64 20 65 78 70 6c 69 63 69 74 6c 79 20 66 6f 72 20 | not.be.specified.explicitly.for. |
654a0 | 65 69 74 68 65 72 20 74 68 65 20 73 6f 75 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e | either.the.source.or.destination |
654c0 | 20 56 52 46 e2 80 99 73 2e 00 53 68 6f 77 00 53 68 6f 77 20 44 48 43 50 20 73 65 72 76 65 72 20 | .VRF...s..Show.Show.DHCP.server. |
654e0 | 64 61 65 6d 6f 6e 20 6c 6f 67 20 66 69 6c 65 00 53 68 6f 77 20 44 48 43 50 76 36 20 73 65 72 76 | daemon.log.file.Show.DHCPv6.serv |
65500 | 65 72 20 64 61 65 6d 6f 6e 20 6c 6f 67 20 66 69 6c 65 00 53 68 6f 77 20 46 69 72 65 77 61 6c 6c | er.daemon.log.file.Show.Firewall |
65520 | 20 6c 6f 67 00 53 68 6f 77 20 4c 4c 44 50 20 6e 65 69 67 68 62 6f 72 73 20 63 6f 6e 6e 65 63 74 | .log.Show.LLDP.neighbors.connect |
65540 | 65 64 20 76 69 61 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 | ed.via.interface.`<interface>`.. |
65560 | 53 68 6f 77 20 53 53 48 20 64 79 6e 61 6d 69 63 2d 70 72 6f 74 65 63 74 69 6f 6e 20 6c 6f 67 2e | Show.SSH.dynamic-protection.log. |
65580 | 00 53 68 6f 77 20 53 53 48 20 73 65 72 76 65 72 20 6c 6f 67 2e 00 53 68 6f 77 20 53 53 48 20 73 | .Show.SSH.server.log..Show.SSH.s |
655a0 | 65 72 76 65 72 20 70 75 62 6c 69 63 20 6b 65 79 20 66 69 6e 67 65 72 70 72 69 6e 74 73 2c 20 69 | erver.public.key.fingerprints,.i |
655c0 | 6e 63 6c 75 64 69 6e 67 20 61 20 76 69 73 75 61 6c 20 41 53 43 49 49 20 61 72 74 20 72 65 70 72 | ncluding.a.visual.ASCII.art.repr |
655e0 | 65 73 65 6e 74 61 74 69 6f 6e 2e 00 53 68 6f 77 20 53 53 48 20 73 65 72 76 65 72 20 70 75 62 6c | esentation..Show.SSH.server.publ |
65600 | 69 63 20 6b 65 79 20 66 69 6e 67 65 72 70 72 69 6e 74 73 2e 00 53 68 6f 77 20 57 41 4e 20 6c 6f | ic.key.fingerprints..Show.WAN.lo |
65620 | 61 64 20 62 61 6c 61 6e 63 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 63 6c 75 64 69 6e | ad.balancer.information.includin |
65640 | 67 20 74 65 73 74 20 74 79 70 65 73 20 61 6e 64 20 74 61 72 67 65 74 73 2e 20 41 20 63 68 61 72 | g.test.types.and.targets..A.char |
65660 | 61 63 74 65 72 20 61 74 20 74 68 65 20 73 74 61 72 74 20 6f 66 20 65 61 63 68 20 6c 69 6e 65 20 | acter.at.the.start.of.each.line. |
65680 | 64 65 70 69 63 74 73 20 74 68 65 20 73 74 61 74 65 20 6f 66 20 74 68 65 20 74 65 73 74 00 53 68 | depicts.the.state.of.the.test.Sh |
656a0 | 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 49 4d 45 49 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d | ow.WWAN.module.IMEI..Show.WWAN.m |
656c0 | 6f 64 75 6c 65 20 49 4d 53 49 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 4d 53 49 | odule.IMSI..Show.WWAN.module.MSI |
656e0 | 53 44 4e 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 53 49 4d 20 63 61 72 64 20 69 | SDN..Show.WWAN.module.SIM.card.i |
65700 | 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 66 69 72 | nformation..Show.WWAN.module.fir |
65720 | 6d 77 61 72 65 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 68 61 72 64 77 61 72 65 | mware..Show.WWAN.module.hardware |
65740 | 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 | .capabilities..Show.WWAN.module. |
65760 | 68 61 72 64 77 61 72 65 20 72 65 76 69 73 69 6f 6e 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 | hardware.revision..Show.WWAN.mod |
65780 | 75 6c 65 20 6d 6f 64 65 6c 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 73 69 67 6e | ule.model..Show.WWAN.module.sign |
657a0 | 61 6c 20 73 74 72 65 6e 67 74 68 2e 00 53 68 6f 77 20 61 20 6c 69 73 74 20 61 76 61 69 6c 61 62 | al.strength..Show.a.list.availab |
657c0 | 6c 65 20 63 6f 6e 74 61 69 6e 65 72 20 6e 65 74 77 6f 72 6b 73 00 53 68 6f 77 20 61 20 6c 69 73 | le.container.networks.Show.a.lis |
657e0 | 74 20 6f 66 20 69 6e 73 74 61 6c 6c 65 64 20 3a 61 62 62 72 3a 60 43 41 20 28 43 65 72 74 69 66 | t.of.installed.:abbr:`CA.(Certif |
65800 | 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 29 60 20 63 65 72 74 69 66 69 63 61 74 65 73 2e 00 | icate.Authority)`.certificates.. |
65820 | 53 68 6f 77 20 61 20 6c 69 73 74 20 6f 66 20 69 6e 73 74 61 6c 6c 65 64 20 3a 61 62 62 72 3a 60 | Show.a.list.of.installed.:abbr:` |
65840 | 43 52 4c 73 20 28 43 65 72 74 69 66 69 63 61 74 65 20 52 65 76 6f 63 61 74 69 6f 6e 20 4c 69 73 | CRLs.(Certificate.Revocation.Lis |
65860 | 74 29 60 2e 00 53 68 6f 77 20 61 20 6c 69 73 74 20 6f 66 20 69 6e 73 74 61 6c 6c 65 64 20 63 65 | t)`..Show.a.list.of.installed.ce |
65880 | 72 74 69 66 69 63 61 74 65 73 00 53 68 6f 77 20 61 6c 6c 20 42 46 44 20 70 65 65 72 73 00 53 68 | rtificates.Show.all.BFD.peers.Sh |
658a0 | 6f 77 20 61 76 61 69 6c 61 62 6c 65 20 6f 66 66 6c 6f 61 64 69 6e 67 20 66 75 6e 63 74 69 6f 6e | ow.available.offloading.function |
658c0 | 73 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 00 53 68 6f 77 20 62 69 | s.on.given.`<interface>`.Show.bi |
658e0 | 6e 64 65 64 20 71 61 74 20 64 65 76 69 63 65 20 69 6e 74 65 72 72 75 70 74 73 20 74 6f 20 63 65 | nded.qat.device.interrupts.to.ce |
65900 | 72 74 61 69 6e 20 63 6f 72 65 2e 00 53 68 6f 77 20 62 72 69 64 67 65 20 60 3c 6e 61 6d 65 3e 60 | rtain.core..Show.bridge.`<name>` |
65920 | 20 66 64 62 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 63 75 72 72 65 6e 74 20 66 6f 72 77 61 72 | .fdb.displays.the.current.forwar |
65940 | 64 69 6e 67 20 74 61 62 6c 65 3a 00 53 68 6f 77 20 62 72 69 64 67 65 20 60 3c 6e 61 6d 65 3e 60 | ding.table:.Show.bridge.`<name>` |
65960 | 20 6d 64 62 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 63 75 72 72 65 6e 74 20 6d 75 6c 74 69 63 | .mdb.displays.the.current.multic |
65980 | 61 73 74 20 67 72 6f 75 70 20 6d 65 6d 62 65 72 73 68 69 70 20 74 61 62 6c 65 2e 54 68 65 20 74 | ast.group.membership.table.The.t |
659a0 | 61 62 6c 65 20 69 73 20 70 6f 70 75 6c 61 74 65 64 20 62 79 20 49 47 4d 50 20 61 6e 64 20 4d 4c | able.is.populated.by.IGMP.and.ML |
659c0 | 44 20 73 6e 6f 6f 70 69 6e 67 20 69 6e 20 74 68 65 20 62 72 69 64 67 65 20 64 72 69 76 65 72 20 | D.snooping.in.the.bridge.driver. |
659e0 | 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 00 53 68 6f 77 20 62 72 69 65 66 20 69 6e 74 65 72 66 | automatically..Show.brief.interf |
65a00 | 61 63 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 53 68 6f 77 20 63 6f 6d 6d 61 6e 64 73 00 53 | ace.information..Show.commands.S |
65a20 | 68 6f 77 20 63 6f 6e 66 69 67 75 72 65 64 20 73 65 72 69 61 6c 20 70 6f 72 74 73 20 61 6e 64 20 | how.configured.serial.ports.and. |
65a40 | 74 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 | their.respective.interface.confi |
65a60 | 67 75 72 61 74 69 6f 6e 2e 00 53 68 6f 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 64 61 74 61 20 6f | guration..Show.connection.data.o |
65a80 | 66 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 64 20 74 72 61 66 66 69 63 3a 00 53 68 6f 77 20 63 6f | f.load.balanced.traffic:.Show.co |
65aa0 | 6e 6e 65 63 74 69 6f 6e 20 73 79 6e 63 69 6e 67 20 65 78 74 65 72 6e 61 6c 20 63 61 63 68 65 20 | nnection.syncing.external.cache. |
65ac0 | 65 6e 74 72 69 65 73 00 53 68 6f 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 79 6e 63 69 6e 67 20 | entries.Show.connection.syncing. |
65ae0 | 69 6e 74 65 72 6e 61 6c 20 63 61 63 68 65 20 65 6e 74 72 69 65 73 00 53 68 6f 77 20 63 75 72 72 | internal.cache.entries.Show.curr |
65b00 | 65 6e 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 75 73 65 72 73 2e 00 53 68 6f 77 20 64 65 74 61 | ently.connected.users..Show.deta |
65b20 | 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 61 6c 6c 20 6c 65 61 72 6e | iled.information.about.all.learn |
65b40 | 65 64 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 4e 6f 64 65 73 00 53 68 6f 77 20 64 65 | ed.Segment.Routing.Nodes.Show.de |
65b60 | 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 70 72 65 66 69 78 2d | tailed.information.about.prefix- |
65b80 | 73 69 64 20 61 6e 64 20 6c 61 62 65 6c 20 6c 65 61 72 6e 65 64 00 53 68 6f 77 20 64 65 74 61 69 | sid.and.label.learned.Show.detai |
65ba0 | 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 75 6e 64 65 72 6c | led.information.about.the.underl |
65bc0 | 61 79 69 6e 67 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 73 20 6f 6e 20 67 69 76 65 6e 20 62 6f | aying.physical.links.on.given.bo |
65be0 | 6e 64 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 53 68 6f 77 20 64 65 74 61 69 6c 65 64 20 | nd.`<interface>`..Show.detailed. |
65c00 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 | information.on.given.`<interface |
65c20 | 3e 60 00 53 68 6f 77 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 | >`.Show.detailed.information.on. |
65c40 | 74 68 65 20 67 69 76 65 6e 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 20 60 6c 6f | the.given.loopback.interface.`lo |
65c60 | 60 2e 00 53 68 6f 77 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 73 75 6d | `..Show.detailed.information.sum |
65c80 | 6d 61 72 79 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 00 53 68 6f 77 | mary.on.given.`<interface>`.Show |
65ca0 | 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 | .flow.accounting.information.for |
65cc0 | 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 66 6f 72 20 61 20 73 70 65 63 69 | .given.`<interface>`.for.a.speci |
65ce0 | 66 69 63 20 68 6f 73 74 20 6f 6e 6c 79 2e 00 53 68 6f 77 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 | fic.host.only..Show.flow.account |
65d00 | 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 | ing.information.for.given.`<inte |
65d20 | 72 66 61 63 65 3e 60 2e 00 53 68 6f 77 20 67 65 6e 65 72 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f | rface>`..Show.general.informatio |
65d40 | 6e 20 61 62 6f 75 74 20 73 70 65 63 69 66 69 63 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 | n.about.specific.WireGuard.inter |
65d60 | 66 61 63 65 00 53 68 6f 77 20 69 6e 66 6f 20 61 62 6f 75 74 20 74 68 65 20 57 69 72 65 67 75 61 | face.Show.info.about.the.Wiregua |
65d80 | 72 64 20 73 65 72 76 69 63 65 2e 20 49 74 20 61 6c 73 6f 20 73 68 6f 77 73 20 74 68 65 20 6c 61 | rd.service..It.also.shows.the.la |
65da0 | 74 65 73 74 20 68 61 6e 64 73 68 61 6b 65 2e 00 53 68 6f 77 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | test.handshake..Show.information |
65dc0 | 20 61 62 6f 75 74 20 70 68 79 73 69 63 61 6c 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 00 53 68 | .about.physical.`<interface>`.Sh |
65de0 | 6f 77 20 6c 69 73 74 20 6f 66 20 49 50 73 20 63 75 72 72 65 6e 74 6c 79 20 62 6c 6f 63 6b 65 64 | ow.list.of.IPs.currently.blocked |
65e00 | 20 62 79 20 53 53 48 20 64 79 6e 61 6d 69 63 2d 70 72 6f 74 65 63 74 69 6f 6e 2e 00 53 68 6f 77 | .by.SSH.dynamic-protection..Show |
65e20 | 20 6c 6f 67 73 20 66 6f 72 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 73 65 72 76 69 63 65 2e | .logs.for.mDNS.repeater.service. |
65e40 | 00 53 68 6f 77 20 6c 6f 67 73 20 66 72 6f 6d 20 61 20 67 69 76 65 6e 20 63 6f 6e 74 61 69 6e 65 | .Show.logs.from.a.given.containe |
65e60 | 72 00 53 68 6f 77 20 6c 6f 67 73 20 66 72 6f 6d 20 61 6c 6c 20 44 48 43 50 20 63 6c 69 65 6e 74 | r.Show.logs.from.all.DHCP.client |
65e80 | 20 70 72 6f 63 65 73 73 65 73 2e 00 53 68 6f 77 20 6c 6f 67 73 20 66 72 6f 6d 20 61 6c 6c 20 44 | .processes..Show.logs.from.all.D |
65ea0 | 48 43 50 76 36 20 63 6c 69 65 6e 74 20 70 72 6f 63 65 73 73 65 73 2e 00 53 68 6f 77 20 6c 6f 67 | HCPv6.client.processes..Show.log |
65ec0 | 73 20 66 72 6f 6d 20 73 70 65 63 69 66 69 63 20 60 69 6e 74 65 72 66 61 63 65 60 20 44 48 43 50 | s.from.specific.`interface`.DHCP |
65ee0 | 20 63 6c 69 65 6e 74 20 70 72 6f 63 65 73 73 2e 00 53 68 6f 77 20 6c 6f 67 73 20 66 72 6f 6d 20 | .client.process..Show.logs.from. |
65f00 | 73 70 65 63 69 66 69 63 20 60 69 6e 74 65 72 66 61 63 65 60 20 44 48 43 50 76 36 20 63 6c 69 65 | specific.`interface`.DHCPv6.clie |
65f20 | 6e 74 20 70 72 6f 63 65 73 73 2e 00 53 68 6f 77 20 6f 6e 6c 79 20 69 6e 66 6f 72 6d 61 74 69 6f | nt.process..Show.only.informatio |
65f40 | 6e 20 66 6f 72 20 73 70 65 63 69 66 69 65 64 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 | n.for.specified.Certificate.Auth |
65f60 | 6f 72 69 74 79 2e 00 53 68 6f 77 20 6f 6e 6c 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 | ority..Show.only.information.for |
65f80 | 20 73 70 65 63 69 66 69 65 64 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 53 68 6f 77 20 6f 6e 6c | .specified.certificate..Show.onl |
65fa0 | 79 20 6c 65 61 73 65 73 20 69 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 6f 6f 6c 2e 00 | y.leases.in.the.specified.pool.. |
65fc0 | 53 68 6f 77 20 6f 6e 6c 79 20 6c 65 61 73 65 73 20 77 69 74 68 20 74 68 65 20 73 70 65 63 69 66 | Show.only.leases.with.the.specif |
65fe0 | 69 65 64 20 73 74 61 74 65 2e 20 50 6f 73 73 69 62 6c 65 20 73 74 61 74 65 73 3a 20 61 62 61 6e | ied.state..Possible.states:.aban |
66000 | 64 6f 6e 65 64 2c 20 61 63 74 69 76 65 2c 20 61 6c 6c 2c 20 62 61 63 6b 75 70 2c 20 65 78 70 69 | doned,.active,.all,.backup,.expi |
66020 | 72 65 64 2c 20 66 72 65 65 2c 20 72 65 6c 65 61 73 65 64 2c 20 72 65 73 65 74 20 28 64 65 66 61 | red,.free,.released,.reset.(defa |
66040 | 75 6c 74 20 3d 20 61 63 74 69 76 65 29 00 53 68 6f 77 20 6f 6e 6c 79 20 6c 65 61 73 65 73 20 77 | ult.=.active).Show.only.leases.w |
66060 | 69 74 68 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 73 74 61 74 65 2e 20 50 6f 73 73 69 62 6c | ith.the.specified.state..Possibl |
66080 | 65 20 73 74 61 74 65 73 3a 20 61 6c 6c 2c 20 61 63 74 69 76 65 2c 20 66 72 65 65 2c 20 65 78 70 | e.states:.all,.active,.free,.exp |
660a0 | 69 72 65 64 2c 20 72 65 6c 65 61 73 65 64 2c 20 61 62 61 6e 64 6f 6e 65 64 2c 20 72 65 73 65 74 | ired,.released,.abandoned,.reset |
660c0 | 2c 20 62 61 63 6b 75 70 20 28 64 65 66 61 75 6c 74 20 3d 20 61 63 74 69 76 65 29 00 53 68 6f 77 | ,.backup.(default.=.active).Show |
660e0 | 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 65 6e 74 72 79 20 66 6f 72 20 74 68 65 20 64 65 66 | .routing.table.entry.for.the.def |
66100 | 61 75 6c 74 20 72 6f 75 74 65 2e 00 53 68 6f 77 20 73 70 65 63 69 66 69 63 20 4d 41 43 73 65 63 | ault.route..Show.specific.MACsec |
66120 | 20 69 6e 74 65 72 66 61 63 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 53 68 6f 77 20 73 74 61 74 | .interface.information.Show.stat |
66140 | 75 73 20 6f 66 20 6e 65 77 20 73 65 74 75 70 3a 00 53 68 6f 77 20 73 74 61 74 75 73 65 73 20 6f | us.of.new.setup:.Show.statuses.o |
66160 | 66 20 61 6c 6c 20 61 63 74 69 76 65 20 6c 65 61 73 65 73 20 67 72 61 6e 74 65 64 20 62 79 20 6c | f.all.active.leases.granted.by.l |
66180 | 6f 63 61 6c 20 28 74 68 69 73 20 73 65 72 76 65 72 29 20 6f 72 20 72 65 6d 6f 74 65 20 28 66 61 | ocal.(this.server).or.remote.(fa |
661a0 | 69 6c 6f 76 65 72 20 73 65 72 76 65 72 29 3a 00 53 68 6f 77 20 73 74 61 74 75 73 65 73 20 6f 66 | ilover.server):.Show.statuses.of |
661c0 | 20 61 6c 6c 20 61 63 74 69 76 65 20 6c 65 61 73 65 73 3a 00 53 68 6f 77 20 74 68 65 20 44 48 43 | .all.active.leases:.Show.the.DHC |
661e0 | 50 20 73 65 72 76 65 72 20 73 74 61 74 69 73 74 69 63 73 20 66 6f 72 20 74 68 65 20 73 70 65 63 | P.server.statistics.for.the.spec |
66200 | 69 66 69 65 64 20 70 6f 6f 6c 2e 00 53 68 6f 77 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 | ified.pool..Show.the.DHCP.server |
66220 | 20 73 74 61 74 69 73 74 69 63 73 3a 00 53 68 6f 77 20 74 68 65 20 63 6f 6e 73 6f 6c 65 20 73 65 | .statistics:.Show.the.console.se |
66240 | 72 76 65 72 20 6c 6f 67 2e 00 53 68 6f 77 20 74 68 65 20 66 75 6c 6c 20 63 6f 6e 66 69 67 20 75 | rver.log..Show.the.full.config.u |
66260 | 70 6c 6f 61 64 65 64 20 74 6f 20 74 68 65 20 51 41 54 20 64 65 76 69 63 65 2e 00 53 68 6f 77 20 | ploaded.to.the.QAT.device..Show. |
66280 | 74 68 65 20 6c 69 73 74 20 6f 66 20 61 6c 6c 20 61 63 74 69 76 65 20 63 6f 6e 74 61 69 6e 65 72 | the.list.of.all.active.container |
662a0 | 73 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f 63 61 6c 20 63 6f 6e 74 61 69 6e 65 72 20 69 6d 61 67 | s..Show.the.local.container.imag |
662c0 | 65 73 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f 67 73 20 6f 66 20 61 20 73 70 65 63 69 66 69 63 20 | es..Show.the.logs.of.a.specific. |
662e0 | 52 75 6c 65 2d 53 65 74 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f 67 73 20 6f 66 20 61 6c 6c 20 66 | Rule-Set..Show.the.logs.of.all.f |
66300 | 69 72 65 77 61 6c 6c 3b 20 73 68 6f 77 20 61 6c 6c 20 62 72 69 64 67 65 20 66 69 72 65 77 61 6c | irewall;.show.all.bridge.firewal |
66320 | 6c 20 6c 6f 67 73 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 66 6f 72 77 61 72 | l.logs;.show.all.logs.for.forwar |
66340 | 64 20 68 6f 6f 6b 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 66 6f 72 77 61 72 | d.hook;.show.all.logs.for.forwar |
66360 | 64 20 68 6f 6f 6b 20 61 6e 64 20 70 72 69 6f 72 69 74 79 20 66 69 6c 74 65 72 3b 20 73 68 6f 77 | d.hook.and.priority.filter;.show |
66380 | 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 63 75 73 74 6f 6d 20 | .all.logs.for.particular.custom. |
663a0 | 63 68 61 69 6e 3b 20 73 68 6f 77 20 6c 6f 67 73 20 66 6f 72 20 73 70 65 63 69 66 69 63 20 52 75 | chain;.show.logs.for.specific.Ru |
663c0 | 6c 65 2d 53 65 74 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f 67 73 20 6f 66 20 61 6c 6c 20 66 69 72 | le-Set..Show.the.logs.of.all.fir |
663e0 | 65 77 61 6c 6c 3b 20 73 68 6f 77 20 61 6c 6c 20 69 70 76 34 20 66 69 72 65 77 61 6c 6c 20 6c 6f | ewall;.show.all.ipv4.firewall.lo |
66400 | 67 73 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 | gs;.show.all.logs.for.particular |
66420 | 20 68 6f 6f 6b 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 | .hook;.show.all.logs.for.particu |
66440 | 6c 61 72 20 68 6f 6f 6b 20 61 6e 64 20 70 72 69 6f 72 69 74 79 3b 20 73 68 6f 77 20 61 6c 6c 20 | lar.hook.and.priority;.show.all. |
66460 | 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 63 75 73 74 6f 6d 20 63 68 61 69 6e | logs.for.particular.custom.chain |
66480 | 3b 20 73 68 6f 77 20 6c 6f 67 73 20 66 6f 72 20 73 70 65 63 69 66 69 63 20 52 75 6c 65 2d 53 65 | ;.show.logs.for.specific.Rule-Se |
664a0 | 74 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f 67 73 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c | t..Show.the.logs.of.all.firewall |
664c0 | 3b 20 73 68 6f 77 20 61 6c 6c 20 69 70 76 36 20 66 69 72 65 77 61 6c 6c 20 6c 6f 67 73 3b 20 73 | ;.show.all.ipv6.firewall.logs;.s |
664e0 | 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 68 6f 6f 6b | how.all.logs.for.particular.hook |
66500 | 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 68 | ;.show.all.logs.for.particular.h |
66520 | 6f 6f 6b 20 61 6e 64 20 70 72 69 6f 72 69 74 79 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 | ook.and.priority;.show.all.logs. |
66540 | 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 3b 20 73 68 6f | for.particular.custom.chain;.sho |
66560 | 77 20 6c 6f 67 73 20 66 6f 72 20 73 70 65 63 69 66 69 63 20 52 75 6c 65 2d 53 65 74 2e 00 53 68 | w.logs.for.specific.Rule-Set..Sh |
66580 | 6f 77 20 74 68 65 20 72 6f 75 74 65 00 53 68 6f 77 20 74 72 61 6e 73 63 65 69 76 65 72 20 69 6e | ow.the.route.Show.transceiver.in |
665a0 | 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 70 6c 75 67 69 6e 20 6d 6f 64 75 6c 65 73 2c 20 65 | formation.from.plugin.modules,.e |
665c0 | 2e 67 20 53 46 50 2b 2c 20 51 53 46 50 00 53 68 6f 77 69 6e 67 20 42 46 44 20 6d 6f 6e 69 74 6f | .g.SFP+,.QSFP.Showing.BFD.monito |
665e0 | 72 65 64 20 73 74 61 74 69 63 20 72 6f 75 74 65 73 00 53 68 6f 77 73 20 73 74 61 74 75 73 20 6f | red.static.routes.Shows.status.o |
66600 | 66 20 61 6c 6c 20 61 73 73 69 67 6e 65 64 20 6c 65 61 73 65 73 3a 00 53 69 64 65 20 41 3a 00 53 | f.all.assigned.leases:.Side.A:.S |
66620 | 69 64 65 20 42 3a 00 53 69 65 72 72 61 20 57 69 72 65 6c 65 73 73 20 41 69 72 50 72 69 6d 65 20 | ide.B:.Sierra.Wireless.AirPrime. |
66640 | 4d 43 37 33 30 34 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c 54 45 29 00 53 69 65 72 72 | MC7304.miniPCIe.card.(LTE).Sierr |
66660 | 61 20 57 69 72 65 6c 65 73 73 20 41 69 72 50 72 69 6d 65 20 4d 43 37 34 33 30 20 6d 69 6e 69 50 | a.Wireless.AirPrime.MC7430.miniP |
66680 | 43 49 65 20 63 61 72 64 20 28 4c 54 45 29 00 53 69 65 72 72 61 20 57 69 72 65 6c 65 73 73 20 41 | CIe.card.(LTE).Sierra.Wireless.A |
666a0 | 69 72 50 72 69 6d 65 20 4d 43 37 34 35 35 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c 54 | irPrime.MC7455.miniPCIe.card.(LT |
666c0 | 45 29 00 53 69 65 72 72 61 20 57 69 72 65 6c 65 73 73 20 41 69 72 50 72 69 6d 65 20 4d 43 37 37 | E).Sierra.Wireless.AirPrime.MC77 |
666e0 | 31 30 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c 54 45 29 00 53 69 6d 69 6c 61 72 20 63 | 10.miniPCIe.card.(LTE).Similar.c |
66700 | 6f 6d 62 69 6e 61 74 69 6f 6e 73 20 61 72 65 20 61 70 70 6c 69 63 61 62 6c 65 20 66 6f 72 20 74 | ombinations.are.applicable.for.t |
66720 | 68 65 20 64 65 61 64 2d 70 65 65 72 2d 64 65 74 65 63 74 69 6f 6e 2e 00 53 69 6d 70 6c 65 20 42 | he.dead-peer-detection..Simple.B |
66740 | 61 62 65 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 75 73 69 6e 67 20 32 20 6e 6f 64 65 73 | abel.configuration.using.2.nodes |
66760 | 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 69 6e 67 20 63 6f 6e 6e 65 63 74 65 64 20 69 6e | .and.redistributing.connected.in |
66780 | 74 65 72 66 61 63 65 73 2e 00 53 69 6d 70 6c 65 20 52 49 50 20 63 6f 6e 66 69 67 75 72 61 74 69 | terfaces..Simple.RIP.configurati |
667a0 | 6f 6e 20 75 73 69 6e 67 20 32 20 6e 6f 64 65 73 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 | on.using.2.nodes.and.redistribut |
667c0 | 69 6e 67 20 63 6f 6e 6e 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 73 2e 00 53 69 6d 70 6c 65 | ing.connected.interfaces..Simple |
667e0 | 20 73 65 74 75 70 20 77 69 74 68 20 6f 6e 65 20 75 73 65 72 20 61 64 64 65 64 20 61 6e 64 20 70 | .setup.with.one.user.added.and.p |
66800 | 61 73 73 77 6f 72 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 3a 00 53 69 6d 70 6c 65 20 74 | assword.authentication:.Simple.t |
66820 | 65 78 74 20 70 61 73 73 77 6f 72 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 69 | ext.password.authentication.is.i |
66840 | 6e 73 65 63 75 72 65 20 61 6e 64 20 64 65 70 72 65 63 61 74 65 64 20 69 6e 20 66 61 76 6f 75 72 | nsecure.and.deprecated.in.favour |
66860 | 20 6f 66 20 4d 44 35 20 48 4d 41 43 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 00 53 69 6e | .of.MD5.HMAC.authentication..Sin |
66880 | 63 65 20 62 6f 74 68 20 72 6f 75 74 65 72 73 20 64 6f 20 6e 6f 74 20 6b 6e 6f 77 20 74 68 65 69 | ce.both.routers.do.not.know.thei |
668a0 | 72 20 65 66 66 65 63 74 69 76 65 20 70 75 62 6c 69 63 20 61 64 64 72 65 73 73 65 73 2c 20 77 65 | r.effective.public.addresses,.we |
668c0 | 20 73 65 74 20 74 68 65 20 6c 6f 63 61 6c 2d 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 70 65 | .set.the.local-address.of.the.pe |
668e0 | 65 72 20 74 6f 20 22 61 6e 79 22 2e 00 53 69 6e 63 65 20 69 74 27 73 20 61 20 48 51 20 61 6e 64 | er.to."any"..Since.it's.a.HQ.and |
66900 | 20 62 72 61 6e 63 68 20 6f 66 66 69 63 65 73 20 73 65 74 75 70 2c 20 77 65 20 77 69 6c 6c 20 77 | .branch.offices.setup,.we.will.w |
66920 | 61 6e 74 20 61 6c 6c 20 63 6c 69 65 6e 74 73 20 74 6f 20 68 61 76 65 20 66 69 78 65 64 20 61 64 | ant.all.clients.to.have.fixed.ad |
66940 | 64 72 65 73 73 65 73 20 61 6e 64 20 77 65 20 77 69 6c 6c 20 72 6f 75 74 65 20 74 72 61 66 66 69 | dresses.and.we.will.route.traffi |
66960 | 63 20 74 6f 20 73 70 65 63 69 66 69 63 20 73 75 62 6e 65 74 73 20 74 68 72 6f 75 67 68 20 74 68 | c.to.specific.subnets.through.th |
66980 | 65 6d 2e 20 57 65 20 6e 65 65 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 65 61 | em..We.need.configuration.for.ea |
669a0 | 63 68 20 63 6c 69 65 6e 74 20 74 6f 20 61 63 68 69 65 76 65 20 74 68 69 73 2e 00 53 69 6e 63 65 | ch.client.to.achieve.this..Since |
669c0 | 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 77 6f 75 6c 64 20 62 65 20 61 20 73 69 | .the.RADIUS.server.would.be.a.si |
669e0 | 6e 67 6c 65 20 70 6f 69 6e 74 20 6f 66 20 66 61 69 6c 75 72 65 2c 20 6d 75 6c 74 69 70 6c 65 20 | ngle.point.of.failure,.multiple. |
66a00 | 52 41 44 49 55 53 20 73 65 72 76 65 72 73 20 63 61 6e 20 62 65 20 73 65 74 75 70 20 61 6e 64 20 | RADIUS.servers.can.be.setup.and. |
66a20 | 77 69 6c 6c 20 62 65 20 75 73 65 64 20 73 75 62 73 65 71 75 65 6e 74 69 61 6c 6c 79 2e 00 53 69 | will.be.used.subsequentially..Si |
66a40 | 6e 63 65 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 77 6f 75 6c 64 20 62 65 20 61 | nce.the.RADIUS.server.would.be.a |
66a60 | 20 73 69 6e 67 6c 65 20 70 6f 69 6e 74 20 6f 66 20 66 61 69 6c 75 72 65 2c 20 6d 75 6c 74 69 70 | .single.point.of.failure,.multip |
66a80 | 6c 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 73 20 63 61 6e 20 62 65 20 73 65 74 75 70 20 61 | le.RADIUS.servers.can.be.setup.a |
66aa0 | 6e 64 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 73 75 62 73 65 71 75 65 6e 74 69 61 6c 6c 79 2e | nd.will.be.used.subsequentially. |
66ac0 | 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 00 53 69 6e 63 65 20 74 68 65 20 6d 44 4e 53 20 70 72 6f | .For.example:.Since.the.mDNS.pro |
66ae0 | 74 6f 63 6f 6c 20 73 65 6e 64 73 20 74 68 65 20 3a 61 62 62 72 3a 60 41 41 28 41 75 74 68 6f 72 | tocol.sends.the.:abbr:`AA(Author |
66b00 | 69 74 61 74 69 76 65 20 41 6e 73 77 65 72 29 60 20 72 65 63 6f 72 64 73 20 69 6e 20 74 68 65 20 | itative.Answer)`.records.in.the. |
66b20 | 70 61 63 6b 65 74 20 69 74 73 65 6c 66 2c 20 74 68 65 20 72 65 70 65 61 74 65 72 20 64 6f 65 73 | packet.itself,.the.repeater.does |
66b40 | 20 6e 6f 74 20 6e 65 65 64 20 74 6f 20 66 6f 72 67 65 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 | .not.need.to.forge.the.source.ad |
66b60 | 64 72 65 73 73 2e 20 49 6e 73 74 65 61 64 2c 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 | dress..Instead,.the.source.addre |
66b80 | 73 73 20 69 73 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 72 65 70 65 | ss.is.of.the.interface.that.repe |
66ba0 | 61 74 73 20 74 68 65 20 70 61 63 6b 65 74 2e 00 53 69 6e 63 65 20 74 68 65 20 6d 44 4e 53 20 70 | ats.the.packet..Since.the.mDNS.p |
66bc0 | 72 6f 74 6f 63 6f 6c 20 73 65 6e 64 73 20 74 68 65 20 41 41 20 72 65 63 6f 72 64 73 20 69 6e 20 | rotocol.sends.the.AA.records.in. |
66be0 | 74 68 65 20 70 61 63 6b 65 74 20 69 74 73 65 6c 66 2c 20 74 68 65 20 72 65 70 65 61 74 65 72 20 | the.packet.itself,.the.repeater. |
66c00 | 64 6f 65 73 20 6e 6f 74 20 6e 65 65 64 20 74 6f 20 66 6f 72 67 65 20 74 68 65 20 73 6f 75 72 63 | does.not.need.to.forge.the.sourc |
66c20 | 65 20 61 64 64 72 65 73 73 2e 20 49 6e 73 74 65 61 64 2c 20 74 68 65 20 73 6f 75 72 63 65 20 61 | e.address..Instead,.the.source.a |
66c40 | 64 64 72 65 73 73 20 69 73 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 | ddress.is.of.the.interface.that. |
66c60 | 72 65 70 65 61 74 73 20 74 68 65 20 70 61 63 6b 65 74 2e 00 53 69 6e 63 65 20 77 65 20 61 72 65 | repeats.the.packet..Since.we.are |
66c80 | 20 61 6e 61 6c 79 7a 69 6e 67 20 61 74 74 61 63 6b 73 20 74 6f 20 61 6e 64 20 66 72 6f 6d 20 6f | .analyzing.attacks.to.and.from.o |
66ca0 | 75 72 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 2c 20 74 77 6f 20 74 79 70 65 73 20 6f | ur.internal.network,.two.types.o |
66cc0 | 66 20 61 74 74 61 63 6b 73 20 63 61 6e 20 62 65 20 69 64 65 6e 74 69 66 69 65 64 2c 20 61 6e 64 | f.attacks.can.be.identified,.and |
66ce0 | 20 64 69 66 66 65 72 65 6e 74 73 20 61 63 74 69 6f 6e 73 20 61 72 65 20 6e 65 65 64 65 64 3a 00 | .differents.actions.are.needed:. |
66d00 | 53 69 6e 67 6c 65 20 56 58 4c 41 4e 20 64 65 76 69 63 65 20 28 53 56 44 29 00 53 69 74 65 20 74 | Single.VXLAN.device.(SVD).Site.t |
66d20 | 6f 20 53 69 74 65 20 56 50 4e 00 53 69 74 65 2d 74 6f 2d 53 69 74 65 00 53 69 74 65 2d 74 6f 2d | o.Site.VPN.Site-to-Site.Site-to- |
66d40 | 73 69 74 65 20 6d 6f 64 65 20 70 72 6f 76 69 64 65 73 20 61 20 77 61 79 20 74 6f 20 61 64 64 20 | site.mode.provides.a.way.to.add. |
66d60 | 72 65 6d 6f 74 65 20 70 65 65 72 73 2c 20 77 68 69 63 68 20 63 6f 75 6c 64 20 62 65 20 63 6f 6e | remote.peers,.which.could.be.con |
66d80 | 66 69 67 75 72 65 64 20 74 6f 20 65 78 63 68 61 6e 67 65 20 65 6e 63 72 79 70 74 65 64 20 69 6e | figured.to.exchange.encrypted.in |
66da0 | 66 6f 72 6d 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 74 68 65 6d 20 61 6e 64 20 56 79 4f 53 20 | formation.between.them.and.VyOS. |
66dc0 | 69 74 73 65 6c 66 20 6f 72 20 63 6f 6e 6e 65 63 74 65 64 2f 72 6f 75 74 65 64 20 6e 65 74 77 6f | itself.or.connected/routed.netwo |
66de0 | 72 6b 73 2e 00 53 69 74 65 2d 74 6f 2d 73 69 74 65 20 6d 6f 64 65 20 73 75 70 70 6f 72 74 73 20 | rks..Site-to-site.mode.supports. |
66e00 | 78 2e 35 30 39 20 62 75 74 20 64 6f 65 73 6e 27 74 20 72 65 71 75 69 72 65 20 69 74 20 61 6e 64 | x.509.but.doesn't.require.it.and |
66e20 | 20 63 61 6e 20 61 6c 73 6f 20 77 6f 72 6b 20 77 69 74 68 20 73 74 61 74 69 63 20 6b 65 79 73 2c | .can.also.work.with.static.keys, |
66e40 | 20 77 68 69 63 68 20 69 73 20 73 69 6d 70 6c 65 72 20 69 6e 20 6d 61 6e 79 20 63 61 73 65 73 2e | .which.is.simpler.in.many.cases. |
66e60 | 20 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 2c 20 77 65 27 6c 6c 20 63 6f 6e 66 69 67 75 72 | .In.this.example,.we'll.configur |
66e80 | 65 20 61 20 73 69 6d 70 6c 65 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 4f 70 65 6e 56 50 4e 20 | e.a.simple.site-to-site.OpenVPN. |
66ea0 | 74 75 6e 6e 65 6c 20 75 73 69 6e 67 20 61 20 32 30 34 38 2d 62 69 74 20 70 72 65 2d 73 68 61 72 | tunnel.using.a.2048-bit.pre-shar |
66ec0 | 65 64 20 6b 65 79 2e 00 53 69 7a 65 20 6f 66 20 74 68 65 20 52 53 41 20 6b 65 79 2e 00 53 6c 61 | ed.key..Size.of.the.RSA.key..Sla |
66ee0 | 76 65 20 73 65 6c 65 63 74 69 6f 6e 20 66 6f 72 20 6f 75 74 67 6f 69 6e 67 20 74 72 61 66 66 69 | ve.selection.for.outgoing.traffi |
66f00 | 63 20 69 73 20 64 6f 6e 65 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 20 74 72 61 6e 73 | c.is.done.according.to.the.trans |
66f20 | 6d 69 74 20 68 61 73 68 20 70 6f 6c 69 63 79 2c 20 77 68 69 63 68 20 6d 61 79 20 62 65 20 63 68 | mit.hash.policy,.which.may.be.ch |
66f40 | 61 6e 67 65 64 20 66 72 6f 6d 20 74 68 65 20 64 65 66 61 75 6c 74 20 73 69 6d 70 6c 65 20 58 4f | anged.from.the.default.simple.XO |
66f60 | 52 20 70 6f 6c 69 63 79 20 76 69 61 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 68 61 73 68 2d 70 | R.policy.via.the.:cfgcmd:`hash-p |
66f80 | 6f 6c 69 63 79 60 20 6f 70 74 69 6f 6e 2c 20 64 6f 63 75 6d 65 6e 74 65 64 20 62 65 6c 6f 77 2e | olicy`.option,.documented.below. |
66fa0 | 00 53 6f 20 69 6e 20 6f 75 72 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 2c 20 77 65 20 77 | .So.in.our.firewall.policy,.we.w |
66fc0 | 61 6e 74 20 74 6f 20 61 6c 6c 6f 77 20 74 72 61 66 66 69 63 20 63 6f 6d 69 6e 67 20 69 6e 20 6f | ant.to.allow.traffic.coming.in.o |
66fe0 | 6e 20 74 68 65 20 6f 75 74 73 69 64 65 20 69 6e 74 65 72 66 61 63 65 2c 20 64 65 73 74 69 6e 65 | n.the.outside.interface,.destine |
67000 | 64 20 66 6f 72 20 54 43 50 20 70 6f 72 74 20 38 30 20 61 6e 64 20 74 68 65 20 49 50 20 61 64 64 | d.for.TCP.port.80.and.the.IP.add |
67020 | 72 65 73 73 20 6f 66 20 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 2e 00 53 6f 20 69 6e 20 6f 75 72 | ress.of.192.168.0.100..So.in.our |
67040 | 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 65 74 2c 20 77 65 20 77 61 6e 74 20 74 6f 20 61 6c | .firewall.ruleset,.we.want.to.al |
67060 | 6c 6f 77 20 74 72 61 66 66 69 63 20 77 68 69 63 68 20 70 72 65 76 69 6f 75 73 6c 79 20 6d 61 74 | low.traffic.which.previously.mat |
67080 | 63 68 65 64 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6e 61 74 20 72 75 6c 65 2e 20 49 6e 20 | ched.a.destination.nat.rule..In. |
670a0 | 6f 72 64 65 72 20 74 6f 20 61 76 6f 69 64 20 63 72 65 61 74 69 6e 67 20 6d 61 6e 79 20 72 75 6c | order.to.avoid.creating.many.rul |
670c0 | 65 73 2c 20 6f 6e 65 20 66 6f 72 20 65 61 63 68 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6e 61 74 | es,.one.for.each.destination.nat |
670e0 | 20 72 75 6c 65 2c 20 77 65 20 63 61 6e 20 61 63 63 65 70 74 20 61 6c 6c 20 2a 2a 27 64 6e 61 74 | .rule,.we.can.accept.all.**'dnat |
67100 | 27 2a 2a 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 77 69 74 68 20 6f 6e 65 20 73 69 6d 70 6c 65 20 | '**.connections.with.one.simple. |
67120 | 72 75 6c 65 2c 20 75 73 69 6e 67 20 60 60 63 6f 6e 6e 65 63 74 69 6f 6e 2d 73 74 61 74 75 73 60 | rule,.using.``connection-status` |
67140 | 60 20 6d 61 74 63 68 65 72 3a 00 53 6f 2c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 | `.matcher:.So,.firewall.configur |
67160 | 61 74 69 6f 6e 20 6e 65 65 64 65 64 20 66 6f 72 20 74 68 69 73 20 73 65 74 75 70 3a 00 53 6f 6c | ation.needed.for.this.setup:.Sol |
67180 | 61 72 57 69 6e 64 73 00 53 6f 6d 65 20 49 53 50 73 20 62 79 20 64 65 66 61 75 6c 74 20 6f 6e 6c | arWinds.Some.ISPs.by.default.onl |
671a0 | 79 20 64 65 6c 65 67 61 74 65 20 61 20 2f 36 34 20 70 72 65 66 69 78 2e 20 54 6f 20 72 65 71 75 | y.delegate.a./64.prefix..To.requ |
671c0 | 65 73 74 20 66 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 70 72 65 66 69 78 20 73 69 7a 65 20 75 | est.for.a.specific.prefix.size.u |
671e0 | 73 65 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 74 6f 20 72 65 71 75 65 73 74 20 66 6f 72 20 61 20 | se.this.option.to.request.for.a. |
67200 | 62 69 67 67 65 72 20 64 65 6c 65 67 61 74 69 6f 6e 20 66 6f 72 20 74 68 69 73 20 70 64 20 60 3c | bigger.delegation.for.this.pd.`< |
67220 | 69 64 3e 60 2e 20 54 68 69 73 20 76 61 6c 75 65 20 69 73 20 69 6e 20 74 68 65 20 72 61 6e 67 65 | id>`..This.value.is.in.the.range |
67240 | 20 66 72 6f 6d 20 33 32 20 2d 20 36 34 20 73 6f 20 79 6f 75 20 63 6f 75 6c 64 20 72 65 71 75 65 | .from.32.-.64.so.you.could.reque |
67260 | 73 74 20 75 70 20 74 6f 20 61 20 2f 33 32 20 70 72 65 66 69 78 20 28 69 66 20 79 6f 75 72 20 49 | st.up.to.a./32.prefix.(if.your.I |
67280 | 53 50 20 61 6c 6c 6f 77 73 20 74 68 69 73 29 20 64 6f 77 6e 20 74 6f 20 61 20 2f 36 34 20 64 65 | SP.allows.this).down.to.a./64.de |
672a0 | 6c 65 67 61 74 69 6f 6e 2e 00 53 6f 6d 65 20 49 54 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 72 | legation..Some.IT.environments.r |
672c0 | 65 71 75 69 72 65 20 74 68 65 20 75 73 65 20 6f 66 20 61 20 70 72 6f 78 79 20 74 6f 20 63 6f 6e | equire.the.use.of.a.proxy.to.con |
672e0 | 6e 65 63 74 20 74 6f 20 74 68 65 20 49 6e 74 65 72 6e 65 74 2e 20 57 69 74 68 6f 75 74 20 74 68 | nect.to.the.Internet..Without.th |
67300 | 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 56 79 4f 53 20 75 70 64 61 74 65 73 20 63 6f | is.configuration.VyOS.updates.co |
67320 | 75 6c 64 20 6e 6f 74 20 62 65 20 69 6e 73 74 61 6c 6c 65 64 20 64 69 72 65 63 74 6c 79 20 62 79 | uld.not.be.installed.directly.by |
67340 | 20 75 73 69 6e 67 20 74 68 65 20 3a 6f 70 63 6d 64 3a 60 61 64 64 20 73 79 73 74 65 6d 20 69 6d | .using.the.:opcmd:`add.system.im |
67360 | 61 67 65 60 20 63 6f 6d 6d 61 6e 64 20 28 3a 72 65 66 3a 60 75 70 64 61 74 65 5f 76 79 6f 73 60 | age`.command.(:ref:`update_vyos` |
67380 | 29 2e 00 53 6f 6d 65 20 52 41 44 49 55 53 20 73 65 76 65 72 73 20 75 73 65 20 61 6e 20 61 63 63 | )..Some.RADIUS.severs.use.an.acc |
673a0 | 65 73 73 20 63 6f 6e 74 72 6f 6c 20 6c 69 73 74 20 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 6f 72 | ess.control.list.which.allows.or |
673c0 | 20 64 65 6e 69 65 73 20 71 75 65 72 69 65 73 2c 20 6d 61 6b 65 20 73 75 72 65 20 74 6f 20 61 64 | .denies.queries,.make.sure.to.ad |
673e0 | 64 20 79 6f 75 72 20 56 79 4f 53 20 72 6f 75 74 65 72 20 74 6f 20 74 68 65 20 61 6c 6c 6f 77 65 | d.your.VyOS.router.to.the.allowe |
67400 | 64 20 63 6c 69 65 6e 74 20 6c 69 73 74 2e 00 53 6f 6d 65 20 52 41 44 49 55 53 5f 20 73 65 76 65 | d.client.list..Some.RADIUS_.seve |
67420 | 72 73 20 75 73 65 20 61 6e 20 61 63 63 65 73 73 20 63 6f 6e 74 72 6f 6c 20 6c 69 73 74 20 77 68 | rs.use.an.access.control.list.wh |
67440 | 69 63 68 20 61 6c 6c 6f 77 73 20 6f 72 20 64 65 6e 69 65 73 20 71 75 65 72 69 65 73 2c 20 6d 61 | ich.allows.or.denies.queries,.ma |
67460 | 6b 65 20 73 75 72 65 20 74 6f 20 61 64 64 20 79 6f 75 72 20 56 79 4f 53 20 72 6f 75 74 65 72 20 | ke.sure.to.add.your.VyOS.router. |
67480 | 74 6f 20 74 68 65 20 61 6c 6c 6f 77 65 64 20 63 6c 69 65 6e 74 20 6c 69 73 74 2e 00 53 6f 6d 65 | to.the.allowed.client.list..Some |
674a0 | 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 73 20 28 | .application.service.providers.( |
674c0 | 41 53 50 73 29 20 6f 70 65 72 61 74 65 20 61 20 56 50 4e 20 67 61 74 65 77 61 79 20 74 6f 20 70 | ASPs).operate.a.VPN.gateway.to.p |
674e0 | 72 6f 76 69 64 65 20 61 63 63 65 73 73 20 74 6f 20 74 68 65 69 72 20 69 6e 74 65 72 6e 61 6c 20 | rovide.access.to.their.internal. |
67500 | 72 65 73 6f 75 72 63 65 73 2c 20 61 6e 64 20 72 65 71 75 69 72 65 20 74 68 61 74 20 61 20 63 6f | resources,.and.require.that.a.co |
67520 | 6e 6e 65 63 74 69 6e 67 20 6f 72 67 61 6e 69 73 61 74 69 6f 6e 20 74 72 61 6e 73 6c 61 74 65 20 | nnecting.organisation.translate. |
67540 | 61 6c 6c 20 74 72 61 66 66 69 63 20 74 6f 20 74 68 65 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 | all.traffic.to.the.service.provi |
67560 | 64 65 72 20 6e 65 74 77 6f 72 6b 20 74 6f 20 61 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 | der.network.to.a.source.address. |
67580 | 70 72 6f 76 69 64 65 64 20 62 79 20 74 68 65 20 41 53 50 2e 00 53 6f 6d 65 20 63 6f 6e 74 61 69 | provided.by.the.ASP..Some.contai |
675a0 | 6e 65 72 20 72 65 67 69 73 74 72 69 65 73 20 72 65 71 75 69 72 65 20 63 72 65 64 65 6e 74 69 61 | ner.registries.require.credentia |
675c0 | 6c 73 20 74 6f 20 62 65 20 75 73 65 64 2e 00 53 6f 6d 65 20 66 69 72 65 77 61 6c 6c 20 73 65 74 | ls.to.be.used..Some.firewall.set |
675e0 | 74 69 6e 67 73 20 61 72 65 20 67 6c 6f 62 61 6c 20 61 6e 64 20 68 61 76 65 20 61 6e 20 61 66 66 | tings.are.global.and.have.an.aff |
67600 | 65 63 74 20 6f 6e 20 74 68 65 20 77 68 6f 6c 65 20 73 79 73 74 65 6d 2e 00 53 6f 6d 65 20 66 69 | ect.on.the.whole.system..Some.fi |
67620 | 72 65 77 61 6c 6c 20 73 65 74 74 69 6e 67 73 20 61 72 65 20 67 6c 6f 62 61 6c 20 61 6e 64 20 68 | rewall.settings.are.global.and.h |
67640 | 61 76 65 20 61 6e 20 61 66 66 65 63 74 20 6f 6e 20 74 68 65 20 77 68 6f 6c 65 20 73 79 73 74 65 | ave.an.affect.on.the.whole.syste |
67660 | 6d 2e 20 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 | m..In.this.section.there's.usefu |
67680 | 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 73 65 20 67 6c 6f 62 61 6c | l.information.about.these.global |
676a0 | 2d 6f 70 74 69 6f 6e 73 20 74 68 61 74 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 | -options.that.can.be.configured. |
676c0 | 75 73 69 6e 67 20 76 79 6f 73 20 63 6c 69 2e 00 53 6f 6d 65 20 70 6f 6c 69 63 69 65 73 20 61 6c | using.vyos.cli..Some.policies.al |
676e0 | 72 65 61 64 79 20 69 6e 63 6c 75 64 65 20 6f 74 68 65 72 20 65 6d 62 65 64 64 65 64 20 70 6f 6c | ready.include.other.embedded.pol |
67700 | 69 63 69 65 73 20 69 6e 73 69 64 65 2e 20 54 68 61 74 20 69 73 20 74 68 65 20 63 61 73 65 20 6f | icies.inside..That.is.the.case.o |
67720 | 66 20 53 68 61 70 65 72 5f 3a 20 65 61 63 68 20 6f 66 20 69 74 73 20 63 6c 61 73 73 65 73 20 75 | f.Shaper_:.each.of.its.classes.u |
67740 | 73 65 20 66 61 69 72 2d 71 75 65 75 65 20 75 6e 6c 65 73 73 20 79 6f 75 20 63 68 61 6e 67 65 20 | se.fair-queue.unless.you.change. |
67760 | 69 74 2e 00 53 6f 6d 65 20 70 6f 6c 69 63 69 65 73 20 63 61 6e 20 62 65 20 63 6f 6d 62 69 6e 65 | it..Some.policies.can.be.combine |
67780 | 64 2c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 65 6d 62 65 64 5f 20 61 20 | d,.you.will.be.able.to.embed_.a. |
677a0 | 64 69 66 66 65 72 65 6e 74 20 70 6f 6c 69 63 79 20 74 68 61 74 20 77 69 6c 6c 20 62 65 20 61 70 | different.policy.that.will.be.ap |
677c0 | 70 6c 69 65 64 20 74 6f 20 61 20 63 6c 61 73 73 20 6f 66 20 74 68 65 20 6d 61 69 6e 20 70 6f 6c | plied.to.a.class.of.the.main.pol |
677e0 | 69 63 79 2e 00 53 6f 6d 65 20 70 72 6f 78 79 73 20 72 65 71 75 69 72 65 2f 73 75 70 70 6f 72 74 | icy..Some.proxys.require/support |
67800 | 20 74 68 65 20 22 62 61 73 69 63 22 20 48 54 54 50 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | .the."basic".HTTP.authentication |
67820 | 20 73 63 68 65 6d 65 20 61 73 20 70 65 72 20 3a 72 66 63 3a 60 37 36 31 37 60 2c 20 74 68 75 73 | .scheme.as.per.:rfc:`7617`,.thus |
67840 | 20 61 20 70 61 73 73 77 6f 72 64 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 53 | .a.password.can.be.configured..S |
67860 | 6f 6d 65 20 70 72 6f 78 79 73 20 72 65 71 75 69 72 65 2f 73 75 70 70 6f 72 74 20 74 68 65 20 22 | ome.proxys.require/support.the." |
67880 | 62 61 73 69 63 22 20 48 54 54 50 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 63 68 65 6d | basic".HTTP.authentication.schem |
678a0 | 65 20 61 73 20 70 65 72 20 3a 72 66 63 3a 60 37 36 31 37 60 2c 20 74 68 75 73 20 61 20 75 73 65 | e.as.per.:rfc:`7617`,.thus.a.use |
678c0 | 72 6e 61 6d 65 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 53 6f 6d 65 20 72 65 | rname.can.be.configured..Some.re |
678e0 | 63 65 6e 74 20 49 53 50 73 20 72 65 71 75 69 72 65 20 79 6f 75 20 74 6f 20 62 75 69 6c 64 20 74 | cent.ISPs.require.you.to.build.t |
67900 | 68 65 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 68 72 6f 75 67 68 20 61 20 56 4c | he.PPPoE.connection.through.a.VL |
67920 | 41 4e 20 69 6e 74 65 72 66 61 63 65 2e 20 4f 6e 65 20 6f 66 20 74 68 6f 73 65 20 49 53 50 73 20 | AN.interface..One.of.those.ISPs. |
67940 | 69 73 20 65 2e 67 2e 20 44 65 75 74 73 63 68 65 20 54 65 6c 65 6b 6f 6d 20 69 6e 20 47 65 72 6d | is.e.g..Deutsche.Telekom.in.Germ |
67960 | 61 6e 79 2e 20 56 79 4f 53 20 63 61 6e 20 65 61 73 69 6c 79 20 63 72 65 61 74 65 20 61 20 50 50 | any..VyOS.can.easily.create.a.PP |
67980 | 50 6f 45 20 73 65 73 73 69 6f 6e 20 74 68 72 6f 75 67 68 20 61 6e 20 65 6e 63 61 70 73 75 6c 61 | PoE.session.through.an.encapsula |
679a0 | 74 65 64 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e | ted.VLAN.interface..The.followin |
679c0 | 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 72 75 6e 20 79 6f 75 72 20 50 50 | g.configuration.will.run.your.PP |
679e0 | 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 68 72 6f 75 67 68 20 56 4c 41 4e 37 20 77 68 69 | PoE.connection.through.VLAN7.whi |
67a00 | 63 68 20 69 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 4c 41 4e 20 66 6f 72 20 44 65 75 74 73 | ch.is.the.default.VLAN.for.Deuts |
67a20 | 63 68 65 20 54 65 6c 65 6b 6f 6d 3a 00 53 6f 6d 65 20 73 65 72 76 69 63 65 73 20 64 6f 6e 27 74 | che.Telekom:.Some.services.don't |
67a40 | 20 77 6f 72 6b 20 63 6f 72 72 65 63 74 6c 79 20 77 68 65 6e 20 62 65 69 6e 67 20 68 61 6e 64 6c | .work.correctly.when.being.handl |
67a60 | 65 64 20 76 69 61 20 61 20 77 65 62 20 70 72 6f 78 79 2e 20 53 6f 20 73 6f 6d 65 74 69 6d 65 73 | ed.via.a.web.proxy..So.sometimes |
67a80 | 20 69 74 20 69 73 20 75 73 65 66 75 6c 20 74 6f 20 62 79 70 61 73 73 20 61 20 74 72 61 6e 73 70 | .it.is.useful.to.bypass.a.transp |
67aa0 | 61 72 65 6e 74 20 70 72 6f 78 79 3a 00 53 6f 6d 65 20 75 73 65 72 73 20 74 65 6e 64 20 74 6f 20 | arent.proxy:.Some.users.tend.to. |
67ac0 | 63 6f 6e 6e 65 63 74 20 74 68 65 69 72 20 6d 6f 62 69 6c 65 20 64 65 76 69 63 65 73 20 75 73 69 | connect.their.mobile.devices.usi |
67ae0 | 6e 67 20 57 69 72 65 47 75 61 72 64 20 74 6f 20 74 68 65 69 72 20 56 79 4f 53 20 72 6f 75 74 65 | ng.WireGuard.to.their.VyOS.route |
67b00 | 72 2e 20 54 6f 20 65 61 73 65 20 64 65 70 6c 6f 79 6d 65 6e 74 20 6f 6e 65 20 63 61 6e 20 67 65 | r..To.ease.deployment.one.can.ge |
67b20 | 6e 65 72 61 74 65 20 61 20 22 70 65 72 20 6d 6f 62 69 6c 65 22 20 63 6f 6e 66 69 67 75 72 61 74 | nerate.a."per.mobile".configurat |
67b40 | 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2e 00 53 6f 6d 65 74 69 6d 65 73 | ion.from.the.VyOS.CLI..Sometimes |
67b60 | 20 6f 70 74 69 6f 6e 20 6c 69 6e 65 73 20 69 6e 20 74 68 65 20 67 65 6e 65 72 61 74 65 64 20 4f | .option.lines.in.the.generated.O |
67b80 | 70 65 6e 56 50 4e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 72 65 71 75 69 72 65 20 71 75 6f | penVPN.configuration.require.quo |
67ba0 | 74 65 73 2e 20 54 68 69 73 20 69 73 20 64 6f 6e 65 20 74 68 72 6f 75 67 68 20 61 20 68 61 63 6b | tes..This.is.done.through.a.hack |
67bc0 | 20 6f 6e 20 6f 75 72 20 63 6f 6e 66 69 67 20 67 65 6e 65 72 61 74 6f 72 2e 20 59 6f 75 20 63 61 | .on.our.config.generator..You.ca |
67be0 | 6e 20 70 61 73 73 20 71 75 6f 74 65 73 20 75 73 69 6e 67 20 74 68 65 20 60 60 26 71 75 6f 74 3b | n.pass.quotes.using.the.``" |
67c00 | 60 60 20 73 74 61 74 65 6d 65 6e 74 2e 00 53 6f 72 74 20 74 68 65 20 6f 75 74 70 75 74 20 62 79 | ``.statement..Sort.the.output.by |
67c20 | 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 6b 65 79 2e 20 50 6f 73 73 69 62 6c 65 20 6b 65 79 | .the.specified.key..Possible.key |
67c40 | 73 3a 20 65 78 70 69 72 65 73 2c 20 69 61 69 64 5f 64 75 69 64 2c 20 69 70 2c 20 6c 61 73 74 5f | s:.expires,.iaid_duid,.ip,.last_ |
67c60 | 63 6f 6d 6d 2c 20 70 6f 6f 6c 2c 20 72 65 6d 61 69 6e 69 6e 67 2c 20 73 74 61 74 65 2c 20 74 79 | comm,.pool,.remaining,.state,.ty |
67c80 | 70 65 20 28 64 65 66 61 75 6c 74 20 3d 20 69 70 29 00 53 6f 72 74 20 74 68 65 20 6f 75 74 70 75 | pe.(default.=.ip).Sort.the.outpu |
67ca0 | 74 20 62 79 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 6b 65 79 2e 20 50 6f 73 73 69 62 6c 65 | t.by.the.specified.key..Possible |
67cc0 | 20 6b 65 79 73 3a 20 69 70 2c 20 68 61 72 64 77 61 72 65 5f 61 64 64 72 65 73 73 2c 20 73 74 61 | .keys:.ip,.hardware_address,.sta |
67ce0 | 74 65 2c 20 73 74 61 72 74 2c 20 65 6e 64 2c 20 72 65 6d 61 69 6e 69 6e 67 2c 20 70 6f 6f 6c 2c | te,.start,.end,.remaining,.pool, |
67d00 | 20 68 6f 73 74 6e 61 6d 65 20 28 64 65 66 61 75 6c 74 20 3d 20 69 70 29 00 53 6f 75 72 63 65 20 | .hostname.(default.=.ip).Source. |
67d20 | 41 64 64 72 65 73 73 00 53 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 75 73 65 64 20 66 | Address.Source.IP.address.used.f |
67d40 | 6f 72 20 56 58 4c 41 4e 20 75 6e 64 65 72 6c 61 79 2e 20 54 68 69 73 20 69 73 20 6d 61 6e 64 61 | or.VXLAN.underlay..This.is.manda |
67d60 | 74 6f 72 79 20 77 68 65 6e 20 75 73 69 6e 67 20 56 58 4c 41 4e 20 76 69 61 20 4c 32 56 50 4e 2f | tory.when.using.VXLAN.via.L2VPN/ |
67d80 | 45 56 50 4e 2e 00 53 6f 75 72 63 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 75 73 65 64 20 69 | EVPN..Source.IPv4.address.used.i |
67da0 | 6e 20 61 6c 6c 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 71 75 65 69 72 65 73 2e 00 53 6f 75 | n.all.RADIUS.server.queires..Sou |
67dc0 | 72 63 65 20 4e 41 54 20 72 75 6c 65 73 00 53 6f 75 72 63 65 20 50 72 65 66 69 78 00 53 6f 75 72 | rce.NAT.rules.Source.Prefix.Sour |
67de0 | 63 65 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 52 41 44 49 55 53 | ce.all.connections.to.the.RADIUS |
67e00 | 20 73 65 72 76 65 72 73 20 66 72 6f 6d 20 67 69 76 65 6e 20 56 52 46 20 60 3c 6e 61 6d 65 3e 60 | .servers.from.given.VRF.`<name>` |
67e20 | 2e 00 53 6f 75 72 63 65 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 | ..Source.all.connections.to.the. |
67e40 | 54 41 43 41 43 53 20 73 65 72 76 65 72 73 20 66 72 6f 6d 20 67 69 76 65 6e 20 56 52 46 20 60 3c | TACACS.servers.from.given.VRF.`< |
67e60 | 6e 61 6d 65 3e 60 2e 00 53 6f 75 72 63 65 20 70 72 6f 74 6f 63 6f 6c 20 74 6f 20 6d 61 74 63 68 | name>`..Source.protocol.to.match |
67e80 | 2e 00 53 6f 75 72 63 65 20 74 75 6e 6e 65 6c 20 66 72 6f 6d 20 64 75 6d 6d 79 20 69 6e 74 65 72 | ..Source.tunnel.from.dummy.inter |
67ea0 | 66 61 63 65 00 53 6f 75 72 63 65 20 74 75 6e 6e 65 6c 20 66 72 6f 6d 20 6c 6f 6f 70 62 61 63 6b | face.Source.tunnel.from.loopback |
67ec0 | 73 00 53 70 61 6e 6e 69 6e 67 20 54 72 65 65 20 50 72 6f 74 6f 63 6f 6c 20 66 6f 72 77 61 72 64 | s.Spanning.Tree.Protocol.forward |
67ee0 | 69 6e 67 20 60 3c 64 65 6c 61 79 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c | ing.`<delay>`.in.seconds.(defaul |
67f00 | 74 3a 20 31 35 29 2e 00 53 70 61 6e 6e 69 6e 67 20 54 72 65 65 20 50 72 6f 74 6f 63 6f 6c 20 68 | t:.15)..Spanning.Tree.Protocol.h |
67f20 | 65 6c 6c 6f 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 20 60 3c 69 6e 74 65 72 76 61 6c 3e 60 20 | ello.advertisement.`<interval>`. |
67f40 | 69 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 32 29 2e 00 53 70 61 6e 6e 69 6e | in.seconds.(default:.2)..Spannin |
67f60 | 67 20 54 72 65 65 20 50 72 6f 74 6f 63 6f 6c 20 69 73 20 6e 6f 74 20 65 6e 61 62 6c 65 64 20 62 | g.Tree.Protocol.is.not.enabled.b |
67f80 | 79 20 64 65 66 61 75 6c 74 20 69 6e 20 56 79 4f 53 2e 20 3a 72 65 66 3a 60 73 74 70 60 20 63 61 | y.default.in.VyOS..:ref:`stp`.ca |
67fa0 | 6e 20 62 65 20 65 61 73 69 6c 79 20 65 6e 61 62 6c 65 64 20 69 66 20 6e 65 65 64 65 64 2e 00 53 | n.be.easily.enabled.if.needed..S |
67fc0 | 70 61 74 69 61 6c 20 4d 75 6c 74 69 70 6c 65 78 69 6e 67 20 50 6f 77 65 72 20 53 61 76 65 20 28 | patial.Multiplexing.Power.Save.( |
67fe0 | 53 4d 50 53 29 20 73 65 74 74 69 6e 67 73 00 53 70 65 63 66 79 69 6e 67 20 6e 68 73 20 6d 61 6b | SMPS).settings.Specfying.nhs.mak |
68000 | 65 73 20 61 6c 6c 20 6d 75 6c 74 69 63 61 73 74 20 70 61 63 6b 65 74 73 20 74 6f 20 62 65 20 72 | es.all.multicast.packets.to.be.r |
68020 | 65 70 65 61 74 65 64 20 74 6f 20 65 61 63 68 20 73 74 61 74 69 63 61 6c 6c 79 20 63 6f 6e 66 69 | epeated.to.each.statically.confi |
68040 | 67 75 72 65 64 20 6e 65 78 74 20 68 6f 70 2e 00 53 70 65 63 69 66 69 65 73 20 3a 61 62 62 72 3a | gured.next.hop..Specifies.:abbr: |
68060 | 60 4d 50 50 45 20 28 4d 69 63 72 6f 73 6f 66 74 20 50 6f 69 6e 74 2d 74 6f 2d 50 6f 69 6e 74 20 | `MPPE.(Microsoft.Point-to-Point. |
68080 | 45 6e 63 72 79 70 74 69 6f 6e 29 60 20 6e 65 67 6f 74 69 61 74 69 6f 6e 20 70 72 65 66 65 72 65 | Encryption)`.negotiation.prefere |
680a0 | 6e 63 65 2e 00 53 70 65 63 69 66 69 65 73 20 3a 61 62 62 72 3a 60 4d 50 50 45 20 28 4d 69 63 72 | nce..Specifies.:abbr:`MPPE.(Micr |
680c0 | 6f 73 6f 66 74 20 50 6f 69 6e 74 2d 74 6f 2d 50 6f 69 6e 74 20 45 6e 63 72 79 70 74 69 6f 6e 29 | osoft.Point-to-Point.Encryption) |
680e0 | 60 20 6e 65 67 6f 74 69 6f 61 74 69 6f 6e 20 70 72 65 66 65 72 65 6e 63 65 2e 00 53 70 65 63 69 | `.negotioation.preference..Speci |
68100 | 66 69 65 73 20 49 50 20 61 64 64 72 65 73 73 20 66 6f 72 20 44 79 6e 61 6d 69 63 20 41 75 74 68 | fies.IP.address.for.Dynamic.Auth |
68120 | 6f 72 69 7a 61 74 69 6f 6e 20 45 78 74 65 6e 73 69 6f 6e 20 73 65 72 76 65 72 20 28 44 4d 2f 43 | orization.Extension.server.(DM/C |
68140 | 6f 41 29 00 53 70 65 63 69 66 69 65 73 20 49 50 76 34 20 6e 65 67 6f 74 69 61 74 69 6f 6e 20 70 | oA).Specifies.IPv4.negotiation.p |
68160 | 72 65 66 65 72 65 6e 63 65 2e 00 53 70 65 63 69 66 69 65 73 20 49 50 76 36 20 6e 65 67 6f 74 69 | reference..Specifies.IPv6.negoti |
68180 | 61 74 69 6f 6e 20 70 72 65 66 65 72 65 6e 63 65 2e 00 53 70 65 63 69 66 69 65 73 20 53 65 72 76 | ation.preference..Specifies.Serv |
681a0 | 69 63 65 2d 4e 61 6d 65 20 74 6f 20 72 65 73 70 6f 6e 64 2e 20 49 66 20 61 62 73 65 6e 74 20 61 | ice-Name.to.respond..If.absent.a |
681c0 | 6e 79 20 53 65 72 76 69 63 65 2d 4e 61 6d 65 20 69 73 20 61 63 63 65 70 74 61 62 6c 65 20 61 6e | ny.Service-Name.is.acceptable.an |
681e0 | 64 20 63 6c 69 65 6e 74 e2 80 99 73 20 53 65 72 76 69 63 65 2d 4e 61 6d 65 20 77 69 6c 6c 20 62 | d.client...s.Service-Name.will.b |
68200 | 65 20 73 65 6e 74 20 62 61 63 6b 2e 20 41 6c 73 6f 20 70 6f 73 73 69 62 6c 65 20 73 65 74 20 6d | e.sent.back..Also.possible.set.m |
68220 | 75 6c 74 69 70 6c 65 20 73 65 72 76 69 63 65 2d 6e 61 6d 65 73 3a 20 60 73 6e 31 2c 73 6e 32 2c | ultiple.service-names:.`sn1,sn2, |
68240 | 73 6e 33 60 00 53 70 65 63 69 66 69 65 73 20 61 64 64 72 65 73 73 20 74 6f 20 62 65 20 75 73 65 | sn3`.Specifies.address.to.be.use |
68260 | 64 20 61 73 20 73 65 72 76 65 72 20 69 70 20 61 64 64 72 65 73 73 20 69 66 20 72 61 64 69 75 73 | d.as.server.ip.address.if.radius |
68280 | 20 63 61 6e 20 61 73 73 69 67 6e 20 6f 6e 6c 79 20 63 6c 69 65 6e 74 20 61 64 64 72 65 73 73 2e | .can.assign.only.client.address. |
682a0 | 20 49 6e 20 73 75 63 68 20 63 61 73 65 20 69 66 20 63 6c 69 65 6e 74 20 61 64 64 72 65 73 73 20 | .In.such.case.if.client.address. |
682c0 | 69 73 20 6d 61 74 63 68 65 64 20 6e 65 74 77 6f 72 6b 20 61 6e 64 20 6d 61 73 6b 20 74 68 65 6e | is.matched.network.and.mask.then |
682e0 | 20 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 20 61 6e 64 20 6d 61 73 6b 20 77 69 6c 6c | .specified.address.and.mask.will |
68300 | 20 62 65 20 75 73 65 64 2e 20 59 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 6d 75 6c 74 69 70 | .be.used..You.can.specify.multip |
68320 | 6c 65 20 73 75 63 68 20 6f 70 74 69 6f 6e 73 2e 00 53 70 65 63 69 66 69 65 73 20 61 6e 20 6f 70 | le.such.options..Specifies.an.op |
68340 | 74 69 6f 6e 61 6c 20 72 6f 75 74 65 2d 6d 61 70 20 74 6f 20 62 65 20 61 70 70 6c 69 65 64 20 74 | tional.route-map.to.be.applied.t |
68360 | 6f 20 72 6f 75 74 65 73 20 69 6d 70 6f 72 74 65 64 20 6f 72 20 65 78 70 6f 72 74 65 64 20 62 65 | o.routes.imported.or.exported.be |
68380 | 74 77 65 65 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 75 6e 69 63 61 73 74 20 56 52 46 20 61 6e | tween.the.current.unicast.VRF.an |
683a0 | 64 20 56 50 4e 2e 00 53 70 65 63 69 66 69 65 73 20 61 6e 20 75 70 73 74 72 65 61 6d 20 6e 65 74 | d.VPN..Specifies.an.upstream.net |
683c0 | 77 6f 72 6b 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 66 72 6f 6d 20 77 68 69 63 68 20 72 65 | work.`<interface>`.from.which.re |
683e0 | 70 6c 69 65 73 20 66 72 6f 6d 20 60 3c 73 65 72 76 65 72 3e 60 20 61 6e 64 20 6f 74 68 65 72 20 | plies.from.`<server>`.and.other. |
68400 | 72 65 6c 61 79 20 61 67 65 6e 74 73 20 77 69 6c 6c 20 62 65 20 61 63 63 65 70 74 65 64 2e 00 53 | relay.agents.will.be.accepted..S |
68420 | 70 65 63 69 66 69 65 73 20 66 69 78 65 64 20 6f 72 20 72 61 6e 64 6f 6d 20 69 6e 74 65 72 66 61 | pecifies.fixed.or.random.interfa |
68440 | 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 49 50 76 36 2e 20 42 79 20 64 65 66 61 75 | ce.identifier.for.IPv6..By.defau |
68460 | 6c 74 20 69 73 20 66 69 78 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 68 6f 77 20 6c 6f 6e 67 20 | lt.is.fixed..Specifies.how.long. |
68480 | 73 71 75 69 64 20 61 73 73 75 6d 65 73 20 61 6e 20 65 78 74 65 72 6e 61 6c 6c 79 20 76 61 6c 69 | squid.assumes.an.externally.vali |
684a0 | 64 61 74 65 64 20 75 73 65 72 6e 61 6d 65 3a 70 61 73 73 77 6f 72 64 20 70 61 69 72 20 69 73 20 | dated.username:password.pair.is. |
684c0 | 76 61 6c 69 64 20 66 6f 72 20 2d 20 69 6e 20 6f 74 68 65 72 20 77 6f 72 64 73 20 68 6f 77 20 6f | valid.for.-.in.other.words.how.o |
684e0 | 66 74 65 6e 20 74 68 65 20 68 65 6c 70 65 72 20 70 72 6f 67 72 61 6d 20 69 73 20 63 61 6c 6c 65 | ften.the.helper.program.is.calle |
68500 | 64 20 66 6f 72 20 74 68 61 74 20 75 73 65 72 2e 20 53 65 74 20 74 68 69 73 20 6c 6f 77 20 74 6f | d.for.that.user..Set.this.low.to |
68520 | 20 66 6f 72 63 65 20 72 65 76 61 6c 69 64 61 74 69 6f 6e 20 77 69 74 68 20 73 68 6f 72 74 20 6c | .force.revalidation.with.short.l |
68540 | 69 76 65 64 20 70 61 73 73 77 6f 72 64 73 2e 00 53 70 65 63 69 66 69 65 73 20 69 66 20 75 6e 6b | ived.passwords..Specifies.if.unk |
68560 | 6e 6f 77 6e 20 73 6f 75 72 63 65 20 6c 69 6e 6b 20 6c 61 79 65 72 20 61 64 64 72 65 73 73 65 73 | nown.source.link.layer.addresses |
68580 | 20 61 6e 64 20 49 50 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 65 6e 74 65 72 65 64 20 69 6e | .and.IP.addresses.are.entered.in |
685a0 | 74 6f 20 74 68 65 20 56 58 4c 41 4e 20 64 65 76 69 63 65 20 66 6f 72 77 61 72 64 69 6e 67 20 64 | to.the.VXLAN.device.forwarding.d |
685c0 | 61 74 61 62 61 73 65 2e 00 53 70 65 63 69 66 69 65 73 20 6e 75 6d 62 65 72 20 6f 66 20 69 6e 74 | atabase..Specifies.number.of.int |
685e0 | 65 72 66 61 63 65 73 20 74 6f 20 6b 65 65 70 20 69 6e 20 63 61 63 68 65 2e 20 49 74 20 6d 65 61 | erfaces.to.keep.in.cache..It.mea |
68600 | 6e 73 20 74 68 61 74 20 64 6f 6e e2 80 99 74 20 64 65 73 74 72 6f 79 20 69 6e 74 65 72 66 61 63 | ns.that.don...t.destroy.interfac |
68620 | 65 20 61 66 74 65 72 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 73 65 73 73 69 6f 6e 20 69 73 | e.after.corresponding.session.is |
68640 | 20 64 65 73 74 72 6f 79 65 64 2c 20 69 6e 73 74 65 61 64 20 70 6c 61 63 65 20 69 74 20 74 6f 20 | .destroyed,.instead.place.it.to. |
68660 | 63 61 63 68 65 20 61 6e 64 20 75 73 65 20 69 74 20 6c 61 74 65 72 20 66 6f 72 20 6e 65 77 20 73 | cache.and.use.it.later.for.new.s |
68680 | 65 73 73 69 6f 6e 73 20 72 65 70 65 61 74 65 64 6c 79 2e 20 54 68 69 73 20 73 68 6f 75 6c 64 20 | essions.repeatedly..This.should. |
686a0 | 72 65 64 75 63 65 20 6b 65 72 6e 65 6c 2d 6c 65 76 65 6c 20 69 6e 74 65 72 66 61 63 65 20 63 72 | reduce.kernel-level.interface.cr |
686c0 | 65 61 74 69 6f 6e 2f 64 65 6c 65 74 69 6f 6e 20 72 61 74 65 20 6c 61 63 6b 2e 20 44 65 66 61 75 | eation/deletion.rate.lack..Defau |
686e0 | 6c 74 20 76 61 6c 75 65 20 69 73 20 2a 2a 30 2a 2a 2e 00 53 70 65 63 69 66 69 65 73 20 6f 6e 65 | lt.value.is.**0**..Specifies.one |
68700 | 20 6f 66 20 74 68 65 20 62 6f 6e 64 69 6e 67 20 70 6f 6c 69 63 69 65 73 2e 20 54 68 65 20 64 65 | .of.the.bonding.policies..The.de |
68720 | 66 61 75 6c 74 20 69 73 20 38 30 32 2e 33 61 64 2e 20 50 6f 73 73 69 62 6c 65 20 76 61 6c 75 65 | fault.is.802.3ad..Possible.value |
68740 | 73 20 61 72 65 3a 00 53 70 65 63 69 66 69 65 73 20 70 65 65 72 20 69 6e 74 65 72 66 61 63 65 20 | s.are:.Specifies.peer.interface. |
68760 | 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 49 50 76 36 2e 20 42 79 20 64 65 66 61 75 6c 74 20 | identifier.for.IPv6..By.default. |
68780 | 69 73 20 66 69 78 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 70 72 6f 78 79 20 73 65 72 76 69 63 | is.fixed..Specifies.proxy.servic |
687a0 | 65 20 6c 69 73 74 65 6e 69 6e 67 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 6c 69 73 74 65 6e 20 | e.listening.address..The.listen. |
687c0 | 61 64 64 72 65 73 73 20 69 73 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 6e 20 77 68 69 | address.is.the.IP.address.on.whi |
687e0 | 63 68 20 74 68 65 20 77 65 62 20 70 72 6f 78 79 20 73 65 72 76 69 63 65 20 6c 69 73 74 65 6e 73 | ch.the.web.proxy.service.listens |
68800 | 20 66 6f 72 20 63 6c 69 65 6e 74 20 72 65 71 75 65 73 74 73 2e 00 53 70 65 63 69 66 69 65 73 20 | .for.client.requests..Specifies. |
68820 | 72 65 6c 61 79 20 61 67 65 6e 74 20 49 50 20 61 64 64 72 65 00 53 70 65 63 69 66 69 65 73 20 73 | relay.agent.IP.addre.Specifies.s |
68840 | 69 6e 67 6c 65 20 60 3c 67 61 74 65 77 61 79 3e 60 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 | ingle.`<gateway>`.IP.address.to. |
68860 | 62 65 20 75 73 65 64 20 61 73 20 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 20 6f 66 20 50 50 50 20 | be.used.as.local.address.of.PPP. |
68880 | 69 6e 74 65 72 66 61 63 65 73 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 61 74 20 74 68 65 20 3a | interfaces..Specifies.that.the.: |
688a0 | 61 62 62 72 3a 60 4e 42 4d 41 20 28 4e 6f 6e 2d 62 72 6f 61 64 63 61 73 74 20 6d 75 6c 74 69 70 | abbr:`NBMA.(Non-broadcast.multip |
688c0 | 6c 65 2d 61 63 63 65 73 73 20 6e 65 74 77 6f 72 6b 29 60 20 61 64 64 72 65 73 73 65 73 20 6f 66 | le-access.network)`.addresses.of |
688e0 | 20 74 68 65 20 6e 65 78 74 20 68 6f 70 20 73 65 72 76 65 72 73 20 61 72 65 20 64 65 66 69 6e 65 | .the.next.hop.servers.are.define |
68900 | 64 20 69 6e 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 6e 62 6d 61 2d 64 6f 6d 61 69 6e | d.in.the.domain.name.nbma-domain |
68920 | 2d 6e 61 6d 65 2e 20 46 6f 72 20 65 61 63 68 20 41 20 72 65 63 6f 72 64 20 6f 70 65 6e 6e 68 72 | -name..For.each.A.record.opennhr |
68940 | 70 20 63 72 65 61 74 65 73 20 61 20 64 79 6e 61 6d 69 63 20 4e 48 53 20 65 6e 74 72 79 2e 00 53 | p.creates.a.dynamic.NHS.entry..S |
68960 | 70 65 63 69 66 69 65 73 20 74 68 65 20 41 52 50 20 6c 69 6e 6b 20 6d 6f 6e 69 74 6f 72 69 6e 67 | pecifies.the.ARP.link.monitoring |
68980 | 20 60 3c 74 69 6d 65 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 2e 00 53 70 65 63 69 66 69 65 73 20 | .`<time>`.in.seconds..Specifies. |
689a0 | 74 68 65 20 49 50 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 75 73 65 20 61 73 20 41 52 50 20 6d | the.IP.addresses.to.use.as.ARP.m |
689c0 | 6f 6e 69 74 6f 72 69 6e 67 20 70 65 65 72 73 20 77 68 65 6e 20 3a 63 66 67 63 6d 64 3a 60 61 72 | onitoring.peers.when.:cfgcmd:`ar |
689e0 | 70 2d 6d 6f 6e 69 74 6f 72 20 69 6e 74 65 72 76 61 6c 60 20 6f 70 74 69 6f 6e 20 69 73 20 3e 20 | p-monitor.interval`.option.is.>. |
68a00 | 30 2e 20 54 68 65 73 65 20 61 72 65 20 74 68 65 20 74 61 72 67 65 74 73 20 6f 66 20 74 68 65 20 | 0..These.are.the.targets.of.the. |
68a20 | 41 52 50 20 72 65 71 75 65 73 74 20 73 65 6e 74 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 | ARP.request.sent.to.determine.th |
68a40 | 65 20 68 65 61 6c 74 68 20 6f 66 20 74 68 65 20 6c 69 6e 6b 20 74 6f 20 74 68 65 20 74 61 72 67 | e.health.of.the.link.to.the.targ |
68a60 | 65 74 73 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 61 76 61 69 6c 61 62 6c 65 20 3a 61 62 | ets..Specifies.the.available.:ab |
68a80 | 62 72 3a 60 4d 41 43 20 28 4d 65 73 73 61 67 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 | br:`MAC.(Message.Authentication. |
68aa0 | 43 6f 64 65 29 60 20 61 6c 67 6f 72 69 74 68 6d 73 2e 20 54 68 65 20 4d 41 43 20 61 6c 67 6f 72 | Code)`.algorithms..The.MAC.algor |
68ac0 | 69 74 68 6d 20 69 73 20 75 73 65 64 20 69 6e 20 70 72 6f 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e | ithm.is.used.in.protocol.version |
68ae0 | 20 32 20 66 6f 72 20 64 61 74 61 20 69 6e 74 65 67 72 69 74 79 20 70 72 6f 74 65 63 74 69 6f 6e | .2.for.data.integrity.protection |
68b00 | 2e 20 4d 75 6c 74 69 70 6c 65 20 61 6c 67 6f 72 69 74 68 6d 73 20 63 61 6e 20 62 65 20 70 72 6f | ..Multiple.algorithms.can.be.pro |
68b20 | 76 69 64 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 62 61 73 65 20 44 4e 20 75 6e 64 | vided..Specifies.the.base.DN.und |
68b40 | 65 72 20 77 68 69 63 68 20 74 68 65 20 75 73 65 72 73 20 61 72 65 20 6c 6f 63 61 74 65 64 2e 00 | er.which.the.users.are.located.. |
68b60 | 53 70 65 63 69 66 69 65 73 20 74 68 65 20 63 6c 69 65 6e 74 73 20 73 75 62 6e 65 74 20 6d 61 73 | Specifies.the.clients.subnet.mas |
68b80 | 6b 20 61 73 20 70 65 72 20 52 46 43 20 39 35 30 2e 20 49 66 20 75 6e 73 65 74 2c 20 73 75 62 6e | k.as.per.RFC.950..If.unset,.subn |
68ba0 | 65 74 20 64 65 63 6c 61 72 61 74 69 6f 6e 20 69 73 20 75 73 65 64 2e 00 53 70 65 63 69 66 69 65 | et.declaration.is.used..Specifie |
68bc0 | 73 20 74 68 65 20 68 6f 6c 64 69 6e 67 20 74 69 6d 65 20 66 6f 72 20 4e 48 52 50 20 52 65 67 69 | s.the.holding.time.for.NHRP.Regi |
68be0 | 73 74 72 61 74 69 6f 6e 20 52 65 71 75 65 73 74 73 20 61 6e 64 20 52 65 73 6f 6c 75 74 69 6f 6e | stration.Requests.and.Resolution |
68c00 | 20 52 65 70 6c 69 65 73 20 73 65 6e 74 20 66 72 6f 6d 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 | .Replies.sent.from.this.interfac |
68c20 | 65 20 6f 72 20 73 68 6f 72 74 63 75 74 2d 74 61 72 67 65 74 2e 20 54 68 65 20 68 6f 6c 64 74 69 | e.or.shortcut-target..The.holdti |
68c40 | 6d 65 20 69 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 73 65 63 6f 6e 64 73 20 61 6e 64 20 64 | me.is.specified.in.seconds.and.d |
68c60 | 65 66 61 75 6c 74 73 20 74 6f 20 74 77 6f 20 68 6f 75 72 73 2e 00 53 70 65 63 69 66 69 65 73 20 | efaults.to.two.hours..Specifies. |
68c80 | 74 68 65 20 69 6e 74 65 72 76 61 6c 20 61 74 20 77 68 69 63 68 20 4e 65 74 66 6c 6f 77 20 64 61 | the.interval.at.which.Netflow.da |
68ca0 | 74 61 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 74 6f 20 61 20 63 6f 6c 6c 65 63 74 6f 72 2e 20 | ta.will.be.sent.to.a.collector.. |
68cc0 | 41 73 20 70 65 72 20 64 65 66 61 75 6c 74 2c 20 4e 65 74 66 6c 6f 77 20 64 61 74 61 20 77 69 6c | As.per.default,.Netflow.data.wil |
68ce0 | 6c 20 62 65 20 73 65 6e 74 20 65 76 65 72 79 20 36 30 20 73 65 63 6f 6e 64 73 2e 00 53 70 65 63 | l.be.sent.every.60.seconds..Spec |
68d00 | 69 66 69 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 73 69 7a 65 20 6f 66 20 61 20 72 65 70 6c | ifies.the.maximum.size.of.a.repl |
68d20 | 79 20 62 6f 64 79 20 69 6e 20 4b 42 2c 20 75 73 65 64 20 74 6f 20 6c 69 6d 69 74 20 74 68 65 20 | y.body.in.KB,.used.to.limit.the. |
68d40 | 72 65 70 6c 79 20 73 69 7a 65 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 69 6e 69 6d 75 | reply.size..Specifies.the.minimu |
68d60 | 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6c 69 6e 6b 73 20 74 68 61 74 20 6d 75 73 74 20 62 65 20 61 | m.number.of.links.that.must.be.a |
68d80 | 63 74 69 76 65 20 62 65 66 6f 72 65 20 61 73 73 65 72 74 69 6e 67 20 63 61 72 72 69 65 72 2e 20 | ctive.before.asserting.carrier.. |
68da0 | 49 74 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 74 68 65 20 43 69 73 63 6f 20 45 74 68 65 72 | It.is.similar.to.the.Cisco.Ether |
68dc0 | 43 68 61 6e 6e 65 6c 20 6d 69 6e 2d 6c 69 6e 6b 73 20 66 65 61 74 75 72 65 2e 20 54 68 69 73 20 | Channel.min-links.feature..This. |
68de0 | 61 6c 6c 6f 77 73 20 73 65 74 74 69 6e 67 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 6e 75 6d 62 65 | allows.setting.the.minimum.numbe |
68e00 | 72 20 6f 66 20 6d 65 6d 62 65 72 20 70 6f 72 74 73 20 74 68 61 74 20 6d 75 73 74 20 62 65 20 75 | r.of.member.ports.that.must.be.u |
68e20 | 70 20 28 6c 69 6e 6b 2d 75 70 20 73 74 61 74 65 29 20 62 65 66 6f 72 65 20 6d 61 72 6b 69 6e 67 | p.(link-up.state).before.marking |
68e40 | 20 74 68 65 20 62 6f 6e 64 20 64 65 76 69 63 65 20 61 73 20 75 70 20 28 63 61 72 72 69 65 72 20 | .the.bond.device.as.up.(carrier. |
68e60 | 6f 6e 29 2e 20 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 66 6f 72 20 73 69 74 75 61 74 69 6f | on)..This.is.useful.for.situatio |
68e80 | 6e 73 20 77 68 65 72 65 20 68 69 67 68 65 72 20 6c 65 76 65 6c 20 73 65 72 76 69 63 65 73 20 73 | ns.where.higher.level.services.s |
68ea0 | 75 63 68 20 61 73 20 63 6c 75 73 74 65 72 69 6e 67 20 77 61 6e 74 20 74 6f 20 65 6e 73 75 72 65 | uch.as.clustering.want.to.ensure |
68ec0 | 20 61 20 6d 69 6e 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6c 6f 77 20 62 61 6e 64 77 69 64 | .a.minimum.number.of.low.bandwid |
68ee0 | 74 68 20 6c 69 6e 6b 73 20 61 72 65 20 61 63 74 69 76 65 20 62 65 66 6f 72 65 20 73 77 69 74 63 | th.links.are.active.before.switc |
68f00 | 68 6f 76 65 72 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 | hover..Specifies.the.name.of.the |
68f20 | 20 44 4e 20 61 74 74 72 69 62 75 74 65 20 74 68 61 74 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 | .DN.attribute.that.contains.the. |
68f40 | 75 73 65 72 6e 61 6d 65 2f 6c 6f 67 69 6e 2e 20 43 6f 6d 62 69 6e 65 64 20 77 69 74 68 20 74 68 | username/login..Combined.with.th |
68f60 | 65 20 62 61 73 65 20 44 4e 20 74 6f 20 63 6f 6e 73 74 72 75 63 74 20 74 68 65 20 75 73 65 72 73 | e.base.DN.to.construct.the.users |
68f80 | 20 44 4e 20 77 68 65 6e 20 6e 6f 20 73 65 61 72 63 68 20 66 69 6c 74 65 72 20 69 73 20 73 70 65 | .DN.when.no.search.filter.is.spe |
68fa0 | 63 69 66 69 65 64 20 28 60 66 69 6c 74 65 72 2d 65 78 70 72 65 73 73 69 6f 6e 60 29 2e 00 53 70 | cified.(`filter-expression`)..Sp |
68fc0 | 65 63 69 66 69 65 73 20 74 68 65 20 70 68 79 73 69 63 61 6c 20 60 3c 65 74 68 58 3e 60 20 45 74 | ecifies.the.physical.`<ethX>`.Et |
68fe0 | 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 | hernet.interface.associated.with |
69000 | 20 61 20 50 73 65 75 64 6f 20 45 74 68 65 72 6e 65 74 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 | .a.Pseudo.Ethernet.`<interface>` |
69020 | 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 70 6f 72 74 20 60 3c 70 6f 72 74 3e 60 20 74 68 | ..Specifies.the.port.`<port>`.th |
69040 | 61 74 20 74 68 65 20 53 53 54 50 20 70 6f 72 74 20 77 69 6c 6c 20 6c 69 73 74 65 6e 20 6f 6e 20 | at.the.SSTP.port.will.listen.on. |
69060 | 28 64 65 66 61 75 6c 74 20 34 34 33 29 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 70 72 6f | (default.443)..Specifies.the.pro |
69080 | 74 65 63 74 69 6f 6e 20 73 63 6f 70 65 20 28 61 6b 61 20 72 65 61 6c 6d 20 6e 61 6d 65 29 20 77 | tection.scope.(aka.realm.name).w |
690a0 | 68 69 63 68 20 69 73 20 74 6f 20 62 65 20 72 65 70 6f 72 74 65 64 20 74 6f 20 74 68 65 20 63 6c | hich.is.to.be.reported.to.the.cl |
690c0 | 69 65 6e 74 20 66 6f 72 20 74 68 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 63 68 65 | ient.for.the.authentication.sche |
690e0 | 6d 65 2e 20 49 74 20 69 73 20 63 6f 6d 6d 6f 6e 6c 79 20 70 61 72 74 20 6f 66 20 74 68 65 20 74 | me..It.is.commonly.part.of.the.t |
69100 | 65 78 74 20 74 68 65 20 75 73 65 72 20 77 69 6c 6c 20 73 65 65 20 77 68 65 6e 20 70 72 6f 6d 70 | ext.the.user.will.see.when.promp |
69120 | 74 65 64 20 66 6f 72 20 74 68 65 69 72 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 61 73 73 77 | ted.for.their.username.and.passw |
69140 | 6f 72 64 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 72 6f 75 74 65 20 64 69 73 74 69 6e 67 | ord..Specifies.the.route.disting |
69160 | 75 69 73 68 65 72 20 74 6f 20 62 65 20 61 64 64 65 64 20 74 6f 20 61 20 72 6f 75 74 65 20 65 78 | uisher.to.be.added.to.a.route.ex |
69180 | 70 6f 72 74 65 64 20 66 72 6f 6d 20 74 68 65 20 63 75 72 72 65 6e 74 20 75 6e 69 63 61 73 74 20 | ported.from.the.current.unicast. |
691a0 | 56 52 46 20 74 6f 20 56 50 4e 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 72 6f 75 74 65 2d | VRF.to.VPN..Specifies.the.route- |
691c0 | 74 61 72 67 65 74 20 6c 69 73 74 20 74 6f 20 62 65 20 61 74 74 61 63 68 65 64 20 74 6f 20 61 20 | target.list.to.be.attached.to.a. |
691e0 | 72 6f 75 74 65 20 28 65 78 70 6f 72 74 29 20 6f 72 20 74 68 65 20 72 6f 75 74 65 2d 74 61 72 67 | route.(export).or.the.route-targ |
69200 | 65 74 20 6c 69 73 74 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 28 69 6d 70 6f 72 74 | et.list.to.match.against.(import |
69220 | 29 20 77 68 65 6e 20 65 78 70 6f 72 74 69 6e 67 2f 69 6d 70 6f 72 74 69 6e 67 20 62 65 74 77 65 | ).when.exporting/importing.betwe |
69240 | 65 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 75 6e 69 63 61 73 74 20 56 52 46 20 61 6e 64 20 56 | en.the.current.unicast.VRF.and.V |
69260 | 50 4e 2e 54 68 65 20 52 54 4c 49 53 54 20 69 73 20 61 20 73 70 61 63 65 2d 73 65 70 61 72 61 74 | PN.The.RTLIST.is.a.space-separat |
69280 | 65 64 20 6c 69 73 74 20 6f 66 20 72 6f 75 74 65 2d 74 61 72 67 65 74 73 2c 20 77 68 69 63 68 20 | ed.list.of.route-targets,.which. |
692a0 | 61 72 65 20 42 47 50 20 65 78 74 65 6e 64 65 64 20 63 6f 6d 6d 75 6e 69 74 79 20 76 61 6c 75 65 | are.BGP.extended.community.value |
692c0 | 73 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 45 78 74 65 6e 64 65 64 20 43 6f 6d 6d 75 | s.as.described.in.Extended.Commu |
692e0 | 6e 69 74 69 65 73 20 41 74 74 72 69 62 75 74 65 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 | nities.Attribute..Specifies.the. |
69300 | 76 65 6e 64 6f 72 20 64 69 63 74 69 6f 6e 61 72 79 2c 20 64 69 63 74 69 6f 6e 61 72 79 20 6e 65 | vendor.dictionary,.dictionary.ne |
69320 | 65 64 73 20 74 6f 20 62 65 20 69 6e 20 2f 75 73 72 2f 73 68 61 72 65 2f 61 63 63 65 6c 2d 70 70 | eds.to.be.in./usr/share/accel-pp |
69340 | 70 2f 72 61 64 69 75 73 2e 00 53 70 65 63 69 66 69 65 73 20 74 69 6d 65 6f 75 74 20 69 6e 20 73 | p/radius..Specifies.timeout.in.s |
69360 | 65 63 6f 6e 64 73 20 74 6f 20 77 61 69 74 20 66 6f 72 20 61 6e 79 20 70 65 65 72 20 61 63 74 69 | econds.to.wait.for.any.peer.acti |
69380 | 76 69 74 79 2e 20 49 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 73 70 65 63 69 66 69 65 64 20 69 | vity..If.this.option.specified.i |
693a0 | 74 20 74 75 72 6e 73 20 6f 6e 20 61 64 61 70 74 69 76 65 20 6c 63 70 20 65 63 68 6f 20 66 75 6e | t.turns.on.adaptive.lcp.echo.fun |
693c0 | 63 74 69 6f 6e 61 6c 69 74 79 20 61 6e 64 20 22 6c 63 70 2d 65 63 68 6f 2d 66 61 69 6c 75 72 65 | ctionality.and."lcp-echo-failure |
693e0 | 22 20 69 73 20 6e 6f 74 20 75 73 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 74 69 6d 65 6f 75 74 | ".is.not.used..Specifies.timeout |
69400 | 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 6f 20 77 61 69 74 20 66 6f 72 20 61 6e 79 20 70 65 65 72 | .in.seconds.to.wait.for.any.peer |
69420 | 20 61 63 74 69 76 69 74 79 2e 20 49 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 73 70 65 63 69 66 | .activity..If.this.option.specif |
69440 | 69 65 64 20 69 74 20 74 75 72 6e 73 20 6f 6e 20 61 64 61 70 74 69 76 65 20 6c 63 70 20 65 63 68 | ied.it.turns.on.adaptive.lcp.ech |
69460 | 6f 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 6e 64 20 22 6c 63 70 2d 65 63 68 6f 2d 66 61 | o.functionality.and."lcp-echo-fa |
69480 | 69 6c 75 72 65 22 20 69 73 20 6e 6f 74 20 75 73 65 64 2e 20 44 65 66 61 75 6c 74 20 76 61 6c 75 | ilure".is.not.used..Default.valu |
694a0 | 65 20 69 73 20 2a 2a 30 2a 2a 2e 00 53 70 65 63 69 66 69 65 73 20 77 68 65 74 68 65 72 20 61 6e | e.is.**0**..Specifies.whether.an |
694c0 | 20 65 78 74 65 72 6e 61 6c 20 63 6f 6e 74 72 6f 6c 20 70 6c 61 6e 65 20 28 65 2e 67 2e 20 42 47 | .external.control.plane.(e.g..BG |
694e0 | 50 20 4c 32 56 50 4e 2f 45 56 50 4e 29 20 6f 72 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 46 44 | P.L2VPN/EVPN).or.the.internal.FD |
69500 | 42 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 77 68 65 74 | B.should.be.used..Specifies.whet |
69520 | 68 65 72 20 74 68 65 20 56 58 4c 41 4e 20 64 65 76 69 63 65 20 69 73 20 63 61 70 61 62 6c 65 20 | her.the.VXLAN.device.is.capable. |
69540 | 6f 66 20 76 6e 69 20 66 69 6c 74 65 72 69 6e 67 2e 00 53 70 65 63 69 66 69 65 73 20 77 68 65 74 | of.vni.filtering..Specifies.whet |
69560 | 68 65 72 20 74 68 69 73 20 4e 53 53 41 20 62 6f 72 64 65 72 20 72 6f 75 74 65 72 20 77 69 6c 6c | her.this.NSSA.border.router.will |
69580 | 20 75 6e 63 6f 6e 64 69 74 69 6f 6e 61 6c 6c 79 20 74 72 61 6e 73 6c 61 74 65 20 54 79 70 65 2d | .unconditionally.translate.Type- |
695a0 | 37 20 4c 53 41 73 20 69 6e 74 6f 20 54 79 70 65 2d 35 20 4c 53 41 73 2e 20 57 68 65 6e 20 72 6f | 7.LSAs.into.Type-5.LSAs..When.ro |
695c0 | 6c 65 20 69 73 20 41 6c 77 61 79 73 2c 20 54 79 70 65 2d 37 20 4c 53 41 73 20 61 72 65 20 74 72 | le.is.Always,.Type-7.LSAs.are.tr |
695e0 | 61 6e 73 6c 61 74 65 64 20 69 6e 74 6f 20 54 79 70 65 2d 35 20 4c 53 41 73 20 72 65 67 61 72 64 | anslated.into.Type-5.LSAs.regard |
69600 | 6c 65 73 73 20 6f 66 20 74 68 65 20 74 72 61 6e 73 6c 61 74 6f 72 20 73 74 61 74 65 20 6f 66 20 | less.of.the.translator.state.of. |
69620 | 6f 74 68 65 72 20 4e 53 53 41 20 62 6f 72 64 65 72 20 72 6f 75 74 65 72 73 2e 20 57 68 65 6e 20 | other.NSSA.border.routers..When. |
69640 | 72 6f 6c 65 20 69 73 20 43 61 6e 64 69 64 61 74 65 2c 20 74 68 69 73 20 72 6f 75 74 65 72 20 70 | role.is.Candidate,.this.router.p |
69660 | 61 72 74 69 63 69 70 61 74 65 73 20 69 6e 20 74 68 65 20 74 72 61 6e 73 6c 61 74 6f 72 20 65 6c | articipates.in.the.translator.el |
69680 | 65 63 74 69 6f 6e 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 69 66 20 69 74 20 77 69 6c 6c 20 70 | ection.to.determine.if.it.will.p |
696a0 | 65 72 66 6f 72 6d 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 73 20 64 75 74 69 65 73 2e 20 | erform.the.translations.duties.. |
696c0 | 57 68 65 6e 20 72 6f 6c 65 20 69 73 20 4e 65 76 65 72 2c 20 74 68 69 73 20 72 6f 75 74 65 72 20 | When.role.is.Never,.this.router. |
696e0 | 77 69 6c 6c 20 6e 65 76 65 72 20 74 72 61 6e 73 6c 61 74 65 20 54 79 70 65 2d 37 20 4c 53 41 73 | will.never.translate.Type-7.LSAs |
69700 | 20 69 6e 74 6f 20 54 79 70 65 2d 35 20 4c 53 41 73 2e 00 53 70 65 63 69 66 69 65 73 20 77 68 69 | .into.Type-5.LSAs..Specifies.whi |
69720 | 63 68 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 61 74 74 72 69 62 75 74 65 20 63 6f 6e 74 61 | ch.RADIUS.server.attribute.conta |
69740 | 69 6e 73 20 74 68 65 20 72 61 74 65 20 6c 69 6d 69 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 | ins.the.rate.limit.information.. |
69760 | 54 68 65 20 64 65 66 61 75 6c 74 20 61 74 74 72 69 62 75 74 65 20 69 73 20 60 46 69 6c 74 65 72 | The.default.attribute.is.`Filter |
69780 | 2d 49 64 60 2e 00 53 70 65 63 69 66 69 65 73 20 77 68 69 63 68 20 52 41 44 49 55 53 20 73 65 72 | -Id`..Specifies.which.RADIUS.ser |
697a0 | 76 65 72 20 61 74 74 72 69 62 75 74 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 72 61 74 65 20 | ver.attribute.contains.the.rate. |
697c0 | 6c 69 6d 69 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 61 | limit.information..The.default.a |
697e0 | 74 74 72 69 62 75 74 65 20 69 73 20 60 60 46 69 6c 74 65 72 2d 49 64 60 60 2e 00 53 70 65 63 69 | ttribute.is.``Filter-Id``..Speci |
69800 | 66 79 20 44 48 43 50 76 34 20 72 65 6c 61 79 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 70 61 | fy.DHCPv4.relay.IP.address.to.pa |
69820 | 73 73 20 72 65 71 75 65 73 74 73 20 74 6f 2e 20 49 66 20 73 70 65 63 69 66 69 65 64 20 67 69 61 | ss.requests.to..If.specified.gia |
69840 | 64 64 72 20 69 73 20 61 6c 73 6f 20 6e 65 65 64 65 64 2e 00 53 70 65 63 69 66 79 20 49 50 76 34 | ddr.is.also.needed..Specify.IPv4 |
69860 | 20 61 6e 64 2f 6f 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 73 20 74 68 61 74 20 73 68 6f 75 6c | .and/or.IPv6.networks.that.shoul |
69880 | 64 20 62 65 20 70 72 6f 74 65 63 74 65 64 2f 6d 6f 6e 69 74 6f 72 65 64 2e 00 53 70 65 63 69 66 | d.be.protected/monitored..Specif |
698a0 | 79 20 49 50 76 34 20 61 6e 64 2f 6f 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 73 20 77 68 69 63 | y.IPv4.and/or.IPv6.networks.whic |
698c0 | 68 20 61 72 65 20 67 6f 69 6e 67 20 74 6f 20 62 65 20 65 78 63 6c 75 64 65 64 2e 00 53 70 65 63 | h.are.going.to.be.excluded..Spec |
698e0 | 69 66 79 20 49 50 76 34 2f 49 50 76 36 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 20 6f 66 20 | ify.IPv4/IPv6.listen.address.of. |
69900 | 53 53 48 20 73 65 72 76 65 72 2e 20 4d 75 6c 74 69 70 6c 65 20 61 64 64 72 65 73 73 65 73 20 63 | SSH.server..Multiple.addresses.c |
69920 | 61 6e 20 62 65 20 64 65 66 69 6e 65 64 2e 00 53 70 65 63 69 66 79 20 61 20 3a 61 62 62 72 3a 60 | an.be.defined..Specify.a.:abbr:` |
69940 | 53 49 50 20 28 53 65 73 73 69 6f 6e 20 49 6e 69 74 69 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c | SIP.(Session.Initiation.Protocol |
69960 | 29 60 20 73 65 72 76 65 72 20 62 79 20 49 50 76 36 20 61 64 64 72 65 73 73 20 6f 66 20 46 75 6c | )`.server.by.IPv6.address.of.Ful |
69980 | 6c 79 20 51 75 61 6c 69 66 69 65 64 20 44 6f 6d 61 69 6e 20 4e 61 6d 65 20 66 6f 72 20 61 6c 6c | ly.Qualified.Domain.Name.for.all |
699a0 | 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 73 2e 00 53 70 65 63 69 66 79 20 61 20 46 75 6c 6c 79 | .DHCPv6.clients..Specify.a.Fully |
699c0 | 20 51 75 61 6c 69 66 69 65 64 20 44 6f 6d 61 69 6e 20 4e 61 6d 65 20 61 73 20 73 6f 75 72 63 65 | .Qualified.Domain.Name.as.source |
699e0 | 2f 64 65 73 74 69 6e 61 74 69 6f 6e 20 6d 61 74 63 68 65 72 2e 20 45 6e 73 75 72 65 20 72 6f 75 | /destination.matcher..Ensure.rou |
69a00 | 74 65 72 20 69 73 20 61 62 6c 65 20 74 6f 20 72 65 73 6f 6c 76 65 20 73 75 63 68 20 64 6e 73 20 | ter.is.able.to.resolve.such.dns. |
69a20 | 71 75 65 72 79 2e 00 53 70 65 63 69 66 79 20 61 20 4e 49 53 20 73 65 72 76 65 72 20 61 64 64 72 | query..Specify.a.NIS.server.addr |
69a40 | 65 73 73 20 66 6f 72 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 73 2e 00 53 70 65 63 69 66 79 20 | ess.for.DHCPv6.clients..Specify. |
69a60 | 61 20 4e 49 53 2b 20 73 65 72 76 65 72 20 61 64 64 72 65 73 73 20 66 6f 72 20 44 48 43 50 76 36 | a.NIS+.server.address.for.DHCPv6 |
69a80 | 20 63 6c 69 65 6e 74 73 2e 00 53 70 65 63 69 66 79 20 61 20 72 61 6e 67 65 20 6f 66 20 67 72 6f | .clients..Specify.a.range.of.gro |
69aa0 | 75 70 20 61 64 64 72 65 73 73 65 73 20 76 69 61 20 61 20 70 72 65 66 69 78 2d 6c 69 73 74 20 74 | up.addresses.via.a.prefix-list.t |
69ac0 | 68 61 74 20 66 6f 72 63 65 73 20 50 49 4d 20 74 6f 20 6e 65 76 65 72 20 64 6f 20 3a 61 62 62 72 | hat.forces.PIM.to.never.do.:abbr |
69ae0 | 3a 60 53 53 4d 20 28 53 6f 75 72 63 65 2d 53 70 65 63 69 66 69 63 20 4d 75 6c 74 69 63 61 73 74 | :`SSM.(Source-Specific.Multicast |
69b00 | 29 60 20 6f 76 65 72 2e 00 53 70 65 63 69 66 79 20 61 62 73 6f 6c 75 74 65 20 60 3c 70 61 74 68 | )`.over..Specify.absolute.`<path |
69b20 | 3e 60 20 74 6f 20 73 63 72 69 70 74 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 72 75 6e 20 77 | >`.to.script.which.will.be.run.w |
69b40 | 68 65 6e 20 60 3c 74 61 73 6b 3e 60 20 69 73 20 65 78 65 63 75 74 65 64 2e 00 53 70 65 63 69 66 | hen.`<task>`.is.executed..Specif |
69b60 | 79 20 61 6c 6c 6f 77 65 64 20 3a 61 62 62 72 3a 60 4b 45 58 20 28 4b 65 79 20 45 78 63 68 61 6e | y.allowed.:abbr:`KEX.(Key.Exchan |
69b80 | 67 65 29 60 20 61 6c 67 6f 72 69 74 68 6d 73 2e 00 53 70 65 63 69 66 79 20 61 6e 20 61 6c 74 65 | ge)`.algorithms..Specify.an.alte |
69ba0 | 72 6e 61 74 65 20 41 53 20 66 6f 72 20 74 68 69 73 20 42 47 50 20 70 72 6f 63 65 73 73 20 77 68 | rnate.AS.for.this.BGP.process.wh |
69bc0 | 65 6e 20 69 6e 74 65 72 61 63 74 69 6e 67 20 77 69 74 68 20 74 68 65 20 73 70 65 63 69 66 69 65 | en.interacting.with.the.specifie |
69be0 | 64 20 70 65 65 72 20 6f 72 20 70 65 65 72 20 67 72 6f 75 70 2e 20 57 69 74 68 20 6e 6f 20 6d 6f | d.peer.or.peer.group..With.no.mo |
69c00 | 64 69 66 69 65 72 73 2c 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 6c 6f 63 61 6c 2d 61 73 20 | difiers,.the.specified.local-as. |
69c20 | 69 73 20 70 72 65 70 65 6e 64 65 64 20 74 6f 20 74 68 65 20 72 65 63 65 69 76 65 64 20 41 53 5f | is.prepended.to.the.received.AS_ |
69c40 | 50 41 54 48 20 77 68 65 6e 20 72 65 63 65 69 76 69 6e 67 20 72 6f 75 74 69 6e 67 20 75 70 64 61 | PATH.when.receiving.routing.upda |
69c60 | 74 65 73 20 66 72 6f 6d 20 74 68 65 20 70 65 65 72 2c 20 61 6e 64 20 70 72 65 70 65 6e 64 65 64 | tes.from.the.peer,.and.prepended |
69c80 | 20 74 6f 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 41 53 5f 50 41 54 48 20 28 61 66 74 65 72 20 | .to.the.outgoing.AS_PATH.(after. |
69ca0 | 74 68 65 20 70 72 6f 63 65 73 73 20 6c 6f 63 61 6c 20 41 53 29 20 77 68 65 6e 20 74 72 61 6e 73 | the.process.local.AS).when.trans |
69cc0 | 6d 69 74 74 69 6e 67 20 6c 6f 63 61 6c 20 72 6f 75 74 65 73 20 74 6f 20 74 68 65 20 70 65 65 72 | mitting.local.routes.to.the.peer |
69ce0 | 2e 00 53 70 65 63 69 66 79 20 61 6e 20 61 6c 74 65 72 6e 61 74 65 20 54 43 50 20 70 6f 72 74 20 | ..Specify.an.alternate.TCP.port. |
69d00 | 77 68 65 72 65 20 74 68 65 20 6c 64 61 70 20 73 65 72 76 65 72 20 69 73 20 6c 69 73 74 65 6e 69 | where.the.ldap.server.is.listeni |
69d20 | 6e 67 20 69 66 20 6f 74 68 65 72 20 74 68 61 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 4c 44 41 | ng.if.other.than.the.default.LDA |
69d40 | 50 20 70 6f 72 74 20 33 38 39 2e 00 53 70 65 63 69 66 79 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 | P.port.389..Specify.interval.in. |
69d60 | 73 65 63 6f 6e 64 73 20 74 6f 20 77 61 69 74 20 62 65 74 77 65 65 6e 20 44 79 6e 61 6d 69 63 20 | seconds.to.wait.between.Dynamic. |
69d80 | 44 4e 53 20 75 70 64 61 74 65 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 20 33 30 30 | DNS.updates..The.default.is..300 |
69da0 | 20 73 65 63 6f 6e 64 73 2e 00 53 70 65 63 69 66 79 20 6c 6f 63 61 6c 20 72 61 6e 67 65 20 6f 66 | .seconds..Specify.local.range.of |
69dc0 | 20 69 70 20 61 64 64 72 65 73 73 20 74 6f 20 67 69 76 65 20 74 6f 20 64 68 63 70 20 63 6c 69 65 | .ip.address.to.give.to.dhcp.clie |
69de0 | 6e 74 73 2e 20 46 69 72 73 74 20 49 50 20 69 6e 20 72 61 6e 67 65 20 69 73 20 72 6f 75 74 65 72 | nts..First.IP.in.range.is.router |
69e00 | 20 49 50 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 6d 6f 72 65 20 63 75 73 74 6f 6d 69 7a 61 74 | .IP..If.you.need.more.customizat |
69e20 | 69 6f 6e 20 75 73 65 20 60 63 6c 69 65 6e 74 2d 69 70 2d 70 6f 6f 6c 60 00 53 70 65 63 69 66 79 | ion.use.`client-ip-pool`.Specify |
69e40 | 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 3a 61 62 62 72 3a 60 56 52 46 20 28 56 69 72 74 75 61 6c | .name.of.the.:abbr:`VRF.(Virtual |
69e60 | 20 52 6f 75 74 69 6e 67 20 61 6e 64 20 46 6f 72 77 61 72 64 69 6e 67 29 60 20 69 6e 73 74 61 6e | .Routing.and.Forwarding)`.instan |
69e80 | 63 65 2e 00 53 70 65 63 69 66 79 20 6e 65 78 74 68 6f 70 20 6f 6e 20 74 68 65 20 70 61 74 68 20 | ce..Specify.nexthop.on.the.path. |
69ea0 | 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 2c 20 60 60 69 70 76 34 2d 61 64 64 72 65 | to.the.destination,.``ipv4-addre |
69ec0 | 73 73 60 60 20 63 61 6e 20 62 65 20 73 65 74 20 74 6f 20 60 60 64 68 63 70 60 60 00 53 70 65 63 | ss``.can.be.set.to.``dhcp``.Spec |
69ee0 | 69 66 79 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 69 6e 74 6f 20 74 68 65 20 72 6f 75 74 69 6e | ify.static.route.into.the.routin |
69f00 | 67 20 74 61 62 6c 65 20 73 65 6e 64 69 6e 67 20 61 6c 6c 20 6e 6f 6e 20 6c 6f 63 61 6c 20 74 72 | g.table.sending.all.non.local.tr |
69f20 | 61 66 66 69 63 20 74 6f 20 74 68 65 20 6e 65 78 74 68 6f 70 20 61 64 64 72 65 73 73 20 60 3c 61 | affic.to.the.nexthop.address.`<a |
69f40 | 64 64 72 65 73 73 3e 60 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 49 50 20 60 3c 61 64 64 72 65 | ddress>`..Specify.the.IP.`<addre |
69f60 | 73 73 3e 60 20 6f 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 75 73 65 72 20 77 | ss>`.of.the.RADIUS.server.user.w |
69f80 | 69 74 68 20 74 68 65 20 70 72 65 2d 73 68 61 72 65 64 2d 73 65 63 72 65 74 20 67 69 76 65 6e 20 | ith.the.pre-shared-secret.given. |
69fa0 | 69 6e 20 60 3c 73 65 63 72 65 74 3e 60 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 49 50 20 60 3c | in.`<secret>`..Specify.the.IP.`< |
69fc0 | 61 64 64 72 65 73 73 3e 60 20 6f 66 20 74 68 65 20 54 41 43 41 43 53 20 73 65 72 76 65 72 20 75 | address>`.of.the.TACACS.server.u |
69fe0 | 73 65 72 20 77 69 74 68 20 74 68 65 20 70 72 65 2d 73 68 61 72 65 64 2d 73 65 63 72 65 74 20 67 | ser.with.the.pre-shared-secret.g |
6a000 | 69 76 65 6e 20 69 6e 20 60 3c 73 65 63 72 65 74 3e 60 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 | iven.in.`<secret>`..Specify.the. |
6a020 | 49 50 76 34 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 74 6f 20 75 73 65 20 66 6f 72 20 74 | IPv4.source.address.to.use.for.t |
6a040 | 68 65 20 42 47 50 20 73 65 73 73 69 6f 6e 20 74 6f 20 74 68 69 73 20 6e 65 69 67 68 62 6f 72 2c | he.BGP.session.to.this.neighbor, |
6a060 | 20 6d 61 79 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 73 20 65 69 74 68 65 72 20 61 6e 20 49 | .may.be.specified.as.either.an.I |
6a080 | 50 76 34 20 61 64 64 72 65 73 73 20 64 69 72 65 63 74 6c 79 20 6f 72 20 61 73 20 61 6e 20 69 6e | Pv4.address.directly.or.as.an.in |
6a0a0 | 74 65 72 66 61 63 65 20 6e 61 6d 65 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 4c 44 41 50 20 73 | terface.name..Specify.the.LDAP.s |
6a0c0 | 65 72 76 65 72 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 2e 00 53 70 65 63 69 66 79 20 74 68 65 | erver.to.connect.to..Specify.the |
6a0e0 | 20 69 64 65 6e 74 69 66 69 65 72 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 73 69 74 65 2d 6c 65 | .identifier.value.of.the.site-le |
6a100 | 76 65 6c 20 61 67 67 72 65 67 61 74 6f 72 20 28 53 4c 41 29 20 6f 6e 20 74 68 65 20 69 6e 74 65 | vel.aggregator.(SLA).on.the.inte |
6a120 | 72 66 61 63 65 2e 20 49 44 20 6d 75 73 74 20 62 65 20 61 20 64 65 63 69 6d 61 6c 20 6e 75 6d 62 | rface..ID.must.be.a.decimal.numb |
6a140 | 65 72 20 67 72 65 61 74 65 72 20 74 68 65 6e 20 30 20 77 68 69 63 68 20 66 69 74 73 20 69 6e 20 | er.greater.then.0.which.fits.in. |
6a160 | 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 53 4c 41 20 49 44 73 20 28 73 65 65 20 62 65 6c 6f 77 | the.length.of.SLA.IDs.(see.below |
6a180 | 29 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 65 73 73 | )..Specify.the.interface.address |
6a1a0 | 20 75 73 65 64 20 6c 6f 63 61 6c 6c 79 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 | .used.locally.on.the.interface.w |
6a1c0 | 68 65 72 65 20 74 68 65 20 70 72 65 66 69 78 20 68 61 73 20 62 65 65 6e 20 64 65 6c 65 67 61 74 | here.the.prefix.has.been.delegat |
6a1e0 | 65 64 20 74 6f 2e 20 49 44 20 6d 75 73 74 20 62 65 20 61 20 64 65 63 69 6d 61 6c 20 69 6e 74 65 | ed.to..ID.must.be.a.decimal.inte |
6a200 | 67 65 72 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 72 65 71 75 69 72 65 | ger..Specify.the.minimum.require |
6a220 | 64 20 54 4c 53 20 76 65 72 73 69 6f 6e 20 31 2e 32 20 6f 72 20 31 2e 33 00 53 70 65 63 69 66 79 | d.TLS.version.1.2.or.1.3.Specify |
6a240 | 20 74 68 65 20 70 6c 61 69 6e 74 65 78 74 20 70 61 73 73 77 6f 72 64 20 75 73 65 72 20 62 79 20 | .the.plaintext.password.user.by. |
6a260 | 75 73 65 72 20 60 3c 6e 61 6d 65 3e 60 20 6f 6e 20 74 68 69 73 20 73 79 73 74 65 6d 2e 20 54 68 | user.`<name>`.on.this.system..Th |
6a280 | 65 20 70 6c 61 69 6e 74 65 78 74 20 70 61 73 73 77 6f 72 64 20 77 69 6c 6c 20 62 65 20 61 75 74 | e.plaintext.password.will.be.aut |
6a2a0 | 6f 6d 61 74 69 63 61 6c 6c 79 20 74 72 61 6e 73 66 65 72 72 65 64 20 69 6e 74 6f 20 61 20 73 65 | omatically.transferred.into.a.se |
6a2c0 | 63 75 72 65 20 68 61 73 68 65 64 20 70 61 73 73 77 6f 72 64 20 61 6e 64 20 6e 6f 74 20 73 61 76 | cure.hashed.password.and.not.sav |
6a2e0 | 65 64 20 61 6e 79 77 68 65 72 65 20 69 6e 20 70 6c 61 69 6e 74 65 78 74 2e 00 53 70 65 63 69 66 | ed.anywhere.in.plaintext..Specif |
6a300 | 79 20 74 68 65 20 70 6f 72 74 20 75 73 65 64 20 6f 6e 20 77 68 69 63 68 20 74 68 65 20 70 72 6f | y.the.port.used.on.which.the.pro |
6a320 | 78 79 20 73 65 72 76 69 63 65 20 69 73 20 6c 69 73 74 65 6e 69 6e 67 20 66 6f 72 20 72 65 71 75 | xy.service.is.listening.for.requ |
6a340 | 65 73 74 73 2e 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 70 | ests..This.port.is.the.default.p |
6a360 | 6f 72 74 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 6c 69 73 74 65 | ort.used.for.the.specified.liste |
6a380 | 6e 2d 61 64 64 72 65 73 73 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 73 79 73 74 65 6d 73 20 60 | n-address..Specify.the.systems.` |
6a3a0 | 3c 74 69 6d 65 7a 6f 6e 65 3e 60 20 61 73 20 74 68 65 20 52 65 67 69 6f 6e 2f 4c 6f 63 61 74 69 | <timezone>`.as.the.Region/Locati |
6a3c0 | 6f 6e 20 74 68 61 74 20 62 65 73 74 20 64 65 66 69 6e 65 73 20 79 6f 75 72 20 6c 6f 63 61 74 69 | on.that.best.defines.your.locati |
6a3e0 | 6f 6e 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 73 70 65 63 69 66 79 69 6e 67 20 55 53 2f 50 | on..For.example,.specifying.US/P |
6a400 | 61 63 69 66 69 63 20 73 65 74 73 20 74 68 65 20 74 69 6d 65 20 7a 6f 6e 65 20 74 6f 20 55 53 20 | acific.sets.the.time.zone.to.US. |
6a420 | 50 61 63 69 66 69 63 20 74 69 6d 65 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 74 69 6d 65 20 69 | Pacific.time..Specify.the.time.i |
6a440 | 6e 74 65 72 76 61 6c 20 77 68 65 6e 20 60 3c 74 61 73 6b 3e 60 20 73 68 6f 75 6c 64 20 62 65 20 | nterval.when.`<task>`.should.be. |
6a460 | 65 78 65 63 75 74 65 64 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 69 73 20 73 70 65 63 69 66 | executed..The.interval.is.specif |
6a480 | 69 65 64 20 61 73 20 6e 75 6d 62 65 72 20 77 69 74 68 20 6f 6e 65 20 6f 66 20 74 68 65 20 66 6f | ied.as.number.with.one.of.the.fo |
6a4a0 | 6c 6c 6f 77 69 6e 67 20 73 75 66 66 69 78 65 73 3a 00 53 70 65 63 69 66 79 20 74 69 6d 65 6f 75 | llowing.suffixes:.Specify.timeou |
6a4c0 | 74 20 2f 20 75 70 64 61 74 65 20 69 6e 74 65 72 76 61 6c 20 74 6f 20 63 68 65 63 6b 20 69 66 20 | t./.update.interval.to.check.if. |
6a4e0 | 49 50 20 61 64 64 72 65 73 73 20 63 68 61 6e 67 65 64 2e 00 53 70 65 63 69 66 79 20 74 69 6d 65 | IP.address.changed..Specify.time |
6a500 | 6f 75 74 20 69 6e 74 65 72 76 61 6c 20 66 6f 72 20 6b 65 65 70 61 6c 69 76 65 20 6d 65 73 73 61 | out.interval.for.keepalive.messa |
6a520 | 67 65 20 69 6e 20 73 65 63 6f 6e 64 73 2e 00 53 70 65 63 69 66 79 20 77 68 65 72 65 20 69 6e 74 | ge.in.seconds..Specify.where.int |
6a540 | 65 72 66 61 63 65 20 69 73 20 73 68 61 72 65 64 20 62 79 20 6d 75 6c 74 69 70 6c 65 20 75 73 65 | erface.is.shared.by.multiple.use |
6a560 | 72 73 20 6f 72 20 69 74 20 69 73 20 76 6c 61 6e 2d 70 65 72 2d 75 73 65 72 2e 00 53 70 69 6e 65 | rs.or.it.is.vlan-per-user..Spine |
6a580 | 31 20 69 73 20 61 20 43 69 73 63 6f 20 49 4f 53 20 72 6f 75 74 65 72 20 72 75 6e 6e 69 6e 67 20 | 1.is.a.Cisco.IOS.router.running. |
6a5a0 | 76 65 72 73 69 6f 6e 20 31 35 2e 34 2c 20 4c 65 61 66 32 20 61 6e 64 20 4c 65 61 66 33 20 69 73 | version.15.4,.Leaf2.and.Leaf3.is |
6a5c0 | 20 65 61 63 68 20 61 20 56 79 4f 53 20 72 6f 75 74 65 72 20 72 75 6e 6e 69 6e 67 20 31 2e 32 2e | .each.a.VyOS.router.running.1.2. |
6a5e0 | 00 53 70 6c 75 6e 6b 00 53 70 6f 6b 65 00 53 71 75 69 64 5f 20 69 73 20 61 20 63 61 63 68 69 6e | .Splunk.Spoke.Squid_.is.a.cachin |
6a600 | 67 20 61 6e 64 20 66 6f 72 77 61 72 64 69 6e 67 20 48 54 54 50 20 77 65 62 20 70 72 6f 78 79 2e | g.and.forwarding.HTTP.web.proxy. |
6a620 | 20 49 74 20 68 61 73 20 61 20 77 69 64 65 20 76 61 72 69 65 74 79 20 6f 66 20 75 73 65 73 2c 20 | .It.has.a.wide.variety.of.uses,. |
6a640 | 69 6e 63 6c 75 64 69 6e 67 20 73 70 65 65 64 69 6e 67 20 75 70 20 61 20 77 65 62 20 73 65 72 76 | including.speeding.up.a.web.serv |
6a660 | 65 72 20 62 79 20 63 61 63 68 69 6e 67 20 72 65 70 65 61 74 65 64 20 72 65 71 75 65 73 74 73 2c | er.by.caching.repeated.requests, |
6a680 | 20 63 61 63 68 69 6e 67 20 77 65 62 2c 20 44 4e 53 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6d 70 | .caching.web,.DNS.and.other.comp |
6a6a0 | 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 6c 6f 6f 6b 75 70 73 20 66 6f 72 20 61 20 67 72 6f 75 70 | uter.network.lookups.for.a.group |
6a6c0 | 20 6f 66 20 70 65 6f 70 6c 65 20 73 68 61 72 69 6e 67 20 6e 65 74 77 6f 72 6b 20 72 65 73 6f 75 | .of.people.sharing.network.resou |
6a6e0 | 72 63 65 73 2c 20 61 6e 64 20 61 69 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 62 79 20 66 69 6c | rces,.and.aiding.security.by.fil |
6a700 | 74 65 72 69 6e 67 20 74 72 61 66 66 69 63 2e 20 41 6c 74 68 6f 75 67 68 20 70 72 69 6d 61 72 69 | tering.traffic..Although.primari |
6a720 | 6c 79 20 75 73 65 64 20 66 6f 72 20 48 54 54 50 20 61 6e 64 20 46 54 50 2c 20 53 71 75 69 64 20 | ly.used.for.HTTP.and.FTP,.Squid. |
6a740 | 69 6e 63 6c 75 64 65 73 20 6c 69 6d 69 74 65 64 20 73 75 70 70 6f 72 74 20 66 6f 72 20 73 65 76 | includes.limited.support.for.sev |
6a760 | 65 72 61 6c 20 6f 74 68 65 72 20 70 72 6f 74 6f 63 6f 6c 73 20 69 6e 63 6c 75 64 69 6e 67 20 49 | eral.other.protocols.including.I |
6a780 | 6e 74 65 72 6e 65 74 20 47 6f 70 68 65 72 2c 20 53 53 4c 2c 5b 36 5d 20 54 4c 53 20 61 6e 64 20 | nternet.Gopher,.SSL,[6].TLS.and. |
6a7a0 | 48 54 54 50 53 2e 20 53 71 75 69 64 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 74 68 | HTTPS..Squid.does.not.support.th |
6a7c0 | 65 20 53 4f 43 4b 53 20 70 72 6f 74 6f 63 6f 6c 2e 00 53 74 61 72 74 20 57 65 62 73 65 72 76 65 | e.SOCKS.protocol..Start.Webserve |
6a7e0 | 72 20 69 6e 20 67 69 76 65 6e 20 20 56 52 46 2e 00 53 74 61 72 74 20 62 79 20 63 68 65 63 6b 69 | r.in.given..VRF..Start.by.checki |
6a800 | 6e 67 20 66 6f 72 20 49 50 53 65 63 20 53 41 73 20 28 53 65 63 75 72 69 74 79 20 41 73 73 6f 63 | ng.for.IPSec.SAs.(Security.Assoc |
6a820 | 69 61 74 69 6f 6e 73 29 20 77 69 74 68 3a 00 53 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 56 79 4f | iations).with:.Starting.from.VyO |
6a840 | 53 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 2c 20 61 20 6e 65 | S.1.4-rolling-202308040557,.a.ne |
6a860 | 77 20 66 69 72 65 77 61 6c 6c 20 73 74 72 75 63 74 75 72 65 20 63 61 6e 20 62 65 20 66 6f 75 6e | w.firewall.structure.can.be.foun |
6a880 | 64 20 6f 6e 20 61 6c 6c 20 76 79 6f 73 20 69 6e 73 74 61 6c 61 74 69 6f 6e 73 2c 20 61 6e 64 20 | d.on.all.vyos.instalations,.and. |
6a8a0 | 7a 6f 6e 65 20 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 69 73 20 6e 6f 20 6c 6f 6e 67 65 72 | zone.based.firewall.is.no.longer |
6a8c0 | 20 73 75 70 70 6f 72 74 65 64 2e 20 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 6f 72 20 6d 6f | .supported..Documentation.for.mo |
6a8e0 | 73 74 20 6f 66 20 74 68 65 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 43 4c 49 20 63 61 6e 20 62 | st.of.the.new.firewall.CLI.can.b |
6a900 | 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 60 66 69 72 65 77 61 6c 6c 20 3c 68 74 74 70 73 3a | e.found.in.the.`firewall.<https: |
6a920 | 2f 2f 64 6f 63 73 2e 76 79 6f 73 2e 69 6f 2f 65 6e 2f 6c 61 74 65 73 74 2f 63 6f 6e 66 69 67 75 | //docs.vyos.io/en/latest/configu |
6a940 | 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 61 6c 2e 68 74 6d 6c 3e 60 5f 20 | ration/firewall/general.html>`_. |
6a960 | 63 68 61 70 74 65 72 2e 20 54 68 65 20 6c 65 67 61 63 79 20 66 69 72 65 77 61 6c 6c 20 69 73 20 | chapter..The.legacy.firewall.is. |
6a980 | 73 74 69 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 76 65 72 73 69 6f 6e 73 20 62 65 66 | still.available.for.versions.bef |
6a9a0 | 6f 72 65 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 20 61 6e 64 | ore.1.4-rolling-202308040557.and |
6a9c0 | 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 3a 72 65 66 3a 60 66 69 72 65 77 | .can.be.found.in.the.:ref:`firew |
6a9e0 | 61 6c 6c 2d 6c 65 67 61 63 79 60 20 63 68 61 70 74 65 72 2e 20 54 68 65 20 65 78 61 6d 70 6c 65 | all-legacy`.chapter..The.example |
6aa00 | 73 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 75 73 65 20 74 68 65 20 6c 65 67 61 63 79 | s.in.this.section.use.the.legacy |
6aa20 | 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 | .firewall.configuration.commands |
6aa40 | 2c 20 73 69 6e 63 65 20 74 68 69 73 20 66 65 61 74 75 72 65 20 68 61 73 20 62 65 65 6e 20 72 65 | ,.since.this.feature.has.been.re |
6aa60 | 6d 6f 76 65 64 20 69 6e 20 65 61 72 6c 69 65 72 20 72 65 6c 65 61 73 65 73 2e 00 53 74 61 72 74 | moved.in.earlier.releases..Start |
6aa80 | 69 6e 67 20 66 72 6f 6d 20 56 79 4f 53 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 | ing.from.VyOS.1.4-rolling-202308 |
6aaa0 | 30 34 30 35 35 37 2c 20 61 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 73 74 72 75 63 74 75 72 65 | 040557,.a.new.firewall.structure |
6aac0 | 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 61 6c 6c 20 76 79 6f 73 20 69 6e 73 74 61 6c | .can.be.found.on.all.vyos.instal |
6aae0 | 61 74 69 6f 6e 73 2e 20 5a 6f 6e 65 20 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 77 61 73 20 | ations..Zone.based.firewall.was. |
6ab00 | 72 65 6d 6f 76 65 64 20 69 6e 20 74 68 61 74 20 76 65 72 73 69 6f 6e 2c 20 62 75 74 20 72 65 20 | removed.in.that.version,.but.re. |
6ab20 | 69 6e 74 72 6f 64 75 63 65 64 20 69 6e 20 56 79 4f 53 20 31 2e 34 20 61 6e 64 20 31 2e 35 2e 20 | introduced.in.VyOS.1.4.and.1.5.. |
6ab40 | 41 6c 6c 20 76 65 72 73 69 6f 6e 73 20 62 75 69 6c 74 20 61 66 74 65 72 20 32 30 32 33 2d 31 30 | All.versions.built.after.2023-10 |
6ab60 | 2d 32 32 20 68 61 73 20 74 68 69 73 20 66 65 61 74 75 72 65 2e 20 44 6f 63 75 6d 65 6e 74 61 74 | -22.has.this.feature..Documentat |
6ab80 | 69 6f 6e 20 66 6f 72 20 6d 6f 73 74 20 6f 66 20 74 68 65 20 6e 65 77 20 66 69 72 65 77 61 6c 6c | ion.for.most.of.the.new.firewall |
6aba0 | 20 43 4c 49 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 60 66 69 72 65 77 61 | .CLI.can.be.found.in.the.`firewa |
6abc0 | 6c 6c 20 3c 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 76 79 6f 73 2e 69 6f 2f 65 6e 2f 6c 61 74 65 | ll.<https://docs.vyos.io/en/late |
6abe0 | 73 74 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 61 | st/configuration/firewall/genera |
6ac00 | 6c 2e 68 74 6d 6c 3e 60 5f 20 63 68 61 70 74 65 72 2e 20 54 68 65 20 6c 65 67 61 63 79 20 66 69 | l.html>`_.chapter..The.legacy.fi |
6ac20 | 72 65 77 61 6c 6c 20 69 73 20 73 74 69 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 76 65 | rewall.is.still.available.for.ve |
6ac40 | 72 73 69 6f 6e 73 20 62 65 66 6f 72 65 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 | rsions.before.1.4-rolling-202308 |
6ac60 | 30 34 30 35 35 37 20 61 6e 64 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 3a | 040557.and.can.be.found.in.the.: |
6ac80 | 64 6f 63 3a 60 6c 65 67 61 63 79 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 | doc:`legacy.firewall.configurati |
6aca0 | 6f 6e 20 3c 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 | on.</configuration/firewall/gene |
6acc0 | 72 61 6c 2d 6c 65 67 61 63 79 3e 60 20 63 68 61 70 74 65 72 2e 00 53 74 61 72 74 69 6e 67 20 66 | ral-legacy>`.chapter..Starting.f |
6ace0 | 72 6f 6d 20 56 79 4f 53 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 | rom.VyOS.1.4-rolling-20230804055 |
6ad00 | 37 2c 20 61 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 73 74 72 75 63 74 75 72 65 20 63 61 6e 20 | 7,.a.new.firewall.structure.can. |
6ad20 | 62 65 20 66 6f 75 6e 64 20 6f 6e 20 61 6c 6c 20 76 79 6f 73 20 69 6e 73 74 61 6c 6c 61 74 69 6f | be.found.on.all.vyos.installatio |
6ad40 | 6e 73 2e 00 53 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 56 79 4f 53 20 31 2e 34 2d 72 6f 6c 6c 69 | ns..Starting.from.VyOS.1.4-rolli |
6ad60 | 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 2c 20 61 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 | ng-202308040557,.a.new.firewall. |
6ad80 | 73 74 72 75 63 74 75 72 65 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 61 6c 6c 20 76 79 | structure.can.be.found.on.all.vy |
6ada0 | 6f 73 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 73 2e 20 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 | os.installations..Documentation. |
6adc0 | 66 6f 72 20 6d 6f 73 74 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 63 6c 69 20 63 61 6e 20 62 65 | for.most.new.firewall.cli.can.be |
6ade0 | 20 66 6f 75 6e 64 20 68 65 72 65 3a 00 53 74 61 72 74 69 6e 67 20 6f 66 20 77 69 74 68 20 56 79 | .found.here:.Starting.of.with.Vy |
6ae00 | 4f 53 20 31 2e 33 20 28 65 71 75 75 6c 65 75 73 29 20 77 65 20 61 64 64 65 64 20 73 75 70 70 6f | OS.1.3.(equuleus).we.added.suppo |
6ae20 | 72 74 20 66 6f 72 20 72 75 6e 6e 69 6e 67 20 56 79 4f 53 20 61 73 20 61 6e 20 4f 75 74 2d 6f 66 | rt.for.running.VyOS.as.an.Out-of |
6ae40 | 2d 42 61 6e 64 20 4d 61 6e 61 67 65 6d 65 6e 74 20 64 65 76 69 63 65 20 77 68 69 63 68 20 70 72 | -Band.Management.device.which.pr |
6ae60 | 6f 76 69 64 65 73 20 72 65 6d 6f 74 65 20 61 63 63 65 73 73 20 62 79 20 6d 65 61 6e 73 20 6f 66 | ovides.remote.access.by.means.of |
6ae80 | 20 53 53 48 20 74 6f 20 64 69 72 65 63 74 6c 79 20 61 74 74 61 63 68 65 64 20 73 65 72 69 61 6c | .SSH.to.directly.attached.serial |
6aea0 | 20 69 6e 74 65 72 66 61 63 65 73 2e 00 53 74 61 72 74 69 6e 67 20 77 69 74 68 20 56 79 4f 53 20 | .interfaces..Starting.with.VyOS. |
6aec0 | 31 2e 32 20 61 20 3a 61 62 62 72 3a 60 6d 44 4e 53 20 28 4d 75 6c 74 69 63 61 73 74 20 44 4e 53 | 1.2.a.:abbr:`mDNS.(Multicast.DNS |
6aee0 | 29 60 20 72 65 70 65 61 74 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 69 73 20 70 72 6f | )`.repeater.functionality.is.pro |
6af00 | 76 69 64 65 64 2e 20 41 64 64 69 74 69 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 63 61 | vided..Additional.information.ca |
6af20 | 6e 20 62 65 20 6f 62 74 61 69 6e 65 64 20 66 72 6f 6d 20 68 74 74 70 73 3a 2f 2f 65 6e 2e 77 69 | n.be.obtained.from.https://en.wi |
6af40 | 6b 69 70 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 4d 75 6c 74 69 63 61 73 74 5f 44 4e 53 2e 00 | kipedia.org/wiki/Multicast_DNS.. |
6af60 | 53 74 61 74 69 63 00 53 74 61 74 69 63 20 3a 61 62 62 72 3a 60 53 41 4b 20 28 53 65 63 75 72 65 | Static.Static.:abbr:`SAK.(Secure |
6af80 | 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 4b 65 79 29 60 20 6d 6f 64 65 20 63 61 6e 20 62 | .Authentication.Key)`.mode.can.b |
6afa0 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6d 61 6e 75 61 6c 6c 79 20 6f 6e 20 65 61 63 68 20 64 65 | e.configured.manually.on.each.de |
6afc0 | 76 69 63 65 20 77 69 73 68 69 6e 67 20 74 6f 20 75 73 65 20 4d 41 43 73 65 63 2e 20 4b 65 79 73 | vice.wishing.to.use.MACsec..Keys |
6afe0 | 20 6d 75 73 74 20 62 65 20 73 65 74 20 73 74 61 74 69 63 61 6c 6c 79 20 6f 6e 20 61 6c 6c 20 64 | .must.be.set.statically.on.all.d |
6b000 | 65 76 69 63 65 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 74 6f 20 66 6c 6f 77 20 70 72 6f 70 65 | evices.for.traffic.to.flow.prope |
6b020 | 72 6c 79 2e 20 4b 65 79 20 72 6f 74 61 74 69 6f 6e 20 69 73 20 64 65 70 65 6e 64 65 6e 74 20 6f | rly..Key.rotation.is.dependent.o |
6b040 | 6e 20 74 68 65 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 75 70 64 61 74 69 6e 67 20 61 6c 6c | n.the.administrator.updating.all |
6b060 | 20 6b 65 79 73 20 6d 61 6e 75 61 6c 6c 79 20 61 63 72 6f 73 73 20 63 6f 6e 6e 65 63 74 65 64 20 | .keys.manually.across.connected. |
6b080 | 64 65 76 69 63 65 73 2e 20 53 74 61 74 69 63 20 53 41 4b 20 6d 6f 64 65 20 63 61 6e 20 6e 6f 74 | devices..Static.SAK.mode.can.not |
6b0a0 | 20 62 65 20 75 73 65 64 20 77 69 74 68 20 4d 4b 41 2e 00 53 74 61 74 69 63 20 44 48 43 50 20 49 | .be.used.with.MKA..Static.DHCP.I |
6b0c0 | 50 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e 20 74 6f 20 68 6f 73 74 20 69 64 65 6e 74 69 66 | P.address.assign.to.host.identif |
6b0e0 | 69 65 64 20 62 79 20 60 3c 64 65 73 63 72 69 70 74 69 6f 6e 3e 60 2e 20 49 50 20 61 64 64 72 65 | ied.by.`<description>`..IP.addre |
6b100 | 73 73 20 6d 75 73 74 20 62 65 20 69 6e 73 69 64 65 20 74 68 65 20 60 3c 73 75 62 6e 65 74 3e 60 | ss.must.be.inside.the.`<subnet>` |
6b120 | 20 77 68 69 63 68 20 69 73 20 64 65 66 69 6e 65 64 20 62 75 74 20 63 61 6e 20 62 65 20 6f 75 74 | .which.is.defined.but.can.be.out |
6b140 | 73 69 64 65 20 74 68 65 20 64 79 6e 61 6d 69 63 20 72 61 6e 67 65 20 63 72 65 61 74 65 64 20 77 | side.the.dynamic.range.created.w |
6b160 | 69 74 68 20 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 64 68 63 70 2d 73 65 | ith.:cfgcmd:`set.service.dhcp-se |
6b180 | 72 76 65 72 20 73 68 61 72 65 64 2d 6e 65 74 77 6f 72 6b 2d 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 | rver.shared-network-name.<name>. |
6b1a0 | 73 75 62 6e 65 74 20 3c 73 75 62 6e 65 74 3e 20 72 61 6e 67 65 20 3c 6e 3e 60 2e 20 49 66 20 6e | subnet.<subnet>.range.<n>`..If.n |
6b1c0 | 6f 20 69 70 2d 61 64 64 72 65 73 73 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 61 6e 20 49 50 | o.ip-address.is.specified,.an.IP |
6b1e0 | 20 66 72 6f 6d 20 74 68 65 20 64 79 6e 61 6d 69 63 20 70 6f 6f 6c 20 69 73 20 75 73 65 64 2e 00 | .from.the.dynamic.pool.is.used.. |
6b200 | 53 74 61 74 69 63 20 48 6f 73 74 6e 61 6d 65 20 4d 61 70 70 69 6e 67 00 53 74 61 74 69 63 20 4b | Static.Hostname.Mapping.Static.K |
6b220 | 65 79 73 00 53 74 61 74 69 63 20 52 6f 75 74 65 73 00 53 74 61 74 69 63 20 52 6f 75 74 69 6e 67 | eys.Static.Routes.Static.Routing |
6b240 | 20 6f 72 20 6f 74 68 65 72 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 | .or.other.dynamic.routing.protoc |
6b260 | 6f 6c 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 6f 76 65 72 20 74 68 65 20 76 74 75 6e 20 69 6e | ols.can.be.used.over.the.vtun.in |
6b280 | 74 65 72 66 61 63 65 00 53 74 61 74 69 63 20 52 6f 75 74 69 6e 67 3a 00 53 74 61 74 69 63 20 6d | terface.Static.Routing:.Static.m |
6b2a0 | 61 70 70 69 6e 67 73 00 53 74 61 74 69 63 20 6d 61 70 70 69 6e 67 73 20 61 72 65 6e 27 74 20 73 | appings.Static.mappings.aren't.s |
6b2c0 | 68 6f 77 6e 2e 20 54 6f 20 73 68 6f 77 20 61 6c 6c 20 73 74 61 74 65 73 2c 20 75 73 65 20 60 60 | hown..To.show.all.states,.use.`` |
6b2e0 | 73 68 6f 77 20 64 68 63 70 20 73 65 72 76 65 72 20 6c 65 61 73 65 73 20 73 74 61 74 65 20 61 6c | show.dhcp.server.leases.state.al |
6b300 | 6c 60 60 2e 00 53 74 61 74 69 63 20 72 6f 75 74 65 73 20 61 72 65 20 6d 61 6e 75 61 6c 6c 79 20 | l``..Static.routes.are.manually. |
6b320 | 63 6f 6e 66 69 67 75 72 65 64 20 72 6f 75 74 65 73 2c 20 77 68 69 63 68 2c 20 69 6e 20 67 65 6e | configured.routes,.which,.in.gen |
6b340 | 65 72 61 6c 2c 20 63 61 6e 6e 6f 74 20 62 65 20 75 70 64 61 74 65 64 20 64 79 6e 61 6d 69 63 61 | eral,.cannot.be.updated.dynamica |
6b360 | 6c 6c 79 20 66 72 6f 6d 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 56 79 4f 53 20 6c 65 61 72 6e 73 | lly.from.information.VyOS.learns |
6b380 | 20 61 62 6f 75 74 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 74 6f 70 6f 6c 6f 67 79 20 66 72 6f 6d | .about.the.network.topology.from |
6b3a0 | 20 6f 74 68 65 72 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 2e 20 48 6f 77 65 76 65 | .other.routing.protocols..Howeve |
6b3c0 | 72 2c 20 69 66 20 61 20 6c 69 6e 6b 20 66 61 69 6c 73 2c 20 74 68 65 20 72 6f 75 74 65 72 20 77 | r,.if.a.link.fails,.the.router.w |
6b3e0 | 69 6c 6c 20 72 65 6d 6f 76 65 20 72 6f 75 74 65 73 2c 20 69 6e 63 6c 75 64 69 6e 67 20 73 74 61 | ill.remove.routes,.including.sta |
6b400 | 74 69 63 20 72 6f 75 74 65 73 2c 20 66 72 6f 6d 20 74 68 65 20 3a 61 62 62 72 3a 60 52 49 50 42 | tic.routes,.from.the.:abbr:`RIPB |
6b420 | 20 28 52 6f 75 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 42 61 73 65 29 60 20 74 68 61 | .(Routing.Information.Base)`.tha |
6b440 | 74 20 75 73 65 64 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 72 65 61 63 68 20 74 | t.used.this.interface.to.reach.t |
6b460 | 68 65 20 6e 65 78 74 20 68 6f 70 2e 20 49 6e 20 67 65 6e 65 72 61 6c 2c 20 73 74 61 74 69 63 20 | he.next.hop..In.general,.static. |
6b480 | 72 6f 75 74 65 73 20 73 68 6f 75 6c 64 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 66 6f 72 20 76 | routes.should.only.be.used.for.v |
6b4a0 | 65 72 79 20 73 69 6d 70 6c 65 20 6e 65 74 77 6f 72 6b 20 74 6f 70 6f 6c 6f 67 69 65 73 2c 20 6f | ery.simple.network.topologies,.o |
6b4c0 | 72 20 74 6f 20 6f 76 65 72 72 69 64 65 20 74 68 65 20 62 65 68 61 76 69 6f 72 20 6f 66 20 61 20 | r.to.override.the.behavior.of.a. |
6b4e0 | 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 61 20 73 | dynamic.routing.protocol.for.a.s |
6b500 | 6d 61 6c 6c 20 6e 75 6d 62 65 72 20 6f 66 20 72 6f 75 74 65 73 2e 20 54 68 65 20 63 6f 6c 6c 65 | mall.number.of.routes..The.colle |
6b520 | 63 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 72 6f 75 74 65 73 20 74 68 65 20 72 6f 75 74 65 72 20 68 | ction.of.all.routes.the.router.h |
6b540 | 61 73 20 6c 65 61 72 6e 65 64 20 66 72 6f 6d 20 69 74 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | as.learned.from.its.configuratio |
6b560 | 6e 20 6f 72 20 66 72 6f 6d 20 69 74 73 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 | n.or.from.its.dynamic.routing.pr |
6b580 | 6f 74 6f 63 6f 6c 73 20 69 73 20 73 74 6f 72 65 64 20 69 6e 20 74 68 65 20 52 49 42 2e 20 55 6e | otocols.is.stored.in.the.RIB..Un |
6b5a0 | 69 63 61 73 74 20 72 6f 75 74 65 73 20 61 72 65 20 64 69 72 65 63 74 6c 79 20 75 73 65 64 20 74 | icast.routes.are.directly.used.t |
6b5c0 | 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 66 6f 72 77 61 72 64 69 6e 67 20 74 61 62 6c 65 | o.determine.the.forwarding.table |
6b5e0 | 20 75 73 65 64 20 66 6f 72 20 75 6e 69 63 61 73 74 20 70 61 63 6b 65 74 20 66 6f 72 77 61 72 64 | .used.for.unicast.packet.forward |
6b600 | 69 6e 67 2e 00 53 74 61 74 69 63 20 72 6f 75 74 65 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 | ing..Static.routes.can.be.config |
6b620 | 75 72 65 64 20 72 65 66 65 72 65 6e 63 69 6e 67 20 74 68 65 20 74 75 6e 6e 65 6c 20 69 6e 74 65 | ured.referencing.the.tunnel.inte |
6b640 | 72 66 61 63 65 3b 20 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f | rface;.for.example,.the.local.ro |
6b660 | 75 74 65 72 20 77 69 6c 6c 20 75 73 65 20 61 20 6e 65 74 77 6f 72 6b 20 6f 66 20 31 30 2e 30 2e | uter.will.use.a.network.of.10.0. |
6b680 | 30 2e 30 2f 31 36 2c 20 77 68 69 6c 65 20 74 68 65 20 72 65 6d 6f 74 65 20 68 61 73 20 61 20 6e | 0.0/16,.while.the.remote.has.a.n |
6b6a0 | 65 74 77 6f 72 6b 20 6f 66 20 31 30 2e 31 2e 30 2e 30 2f 31 36 3a 00 53 74 61 74 69 6f 6e 20 73 | etwork.of.10.1.0.0/16:.Station.s |
6b6c0 | 75 70 70 6f 72 74 73 20 72 65 63 65 69 76 69 6e 67 20 56 48 54 20 76 61 72 69 61 6e 74 20 48 54 | upports.receiving.VHT.variant.HT |
6b6e0 | 20 43 6f 6e 74 72 6f 6c 20 66 69 65 6c 64 00 53 74 61 74 75 73 00 53 74 69 63 6b 79 20 43 6f 6e | .Control.field.Status.Sticky.Con |
6b700 | 6e 65 63 74 69 6f 6e 73 00 53 74 6f 72 61 67 65 20 6f 66 20 72 6f 75 74 65 20 75 70 64 61 74 65 | nections.Storage.of.route.update |
6b720 | 73 20 75 73 65 73 20 6d 65 6d 6f 72 79 2e 20 49 66 20 79 6f 75 20 65 6e 61 62 6c 65 20 73 6f 66 | s.uses.memory..If.you.enable.sof |
6b740 | 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 6e 62 6f 75 6e 64 20 66 6f 72 20 6d 75 | t.reconfiguration.inbound.for.mu |
6b760 | 6c 74 69 70 6c 65 20 6e 65 69 67 68 62 6f 72 73 2c 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 | ltiple.neighbors,.the.amount.of. |
6b780 | 6d 65 6d 6f 72 79 20 75 73 65 64 20 63 61 6e 20 62 65 63 6f 6d 65 20 73 69 67 6e 69 66 69 63 61 | memory.used.can.become.significa |
6b7a0 | 6e 74 2e 00 53 75 66 66 69 78 65 73 00 53 75 6d 6d 61 72 69 73 61 74 69 6f 6e 20 73 74 61 72 74 | nt..Suffixes.Summarisation.start |
6b7c0 | 73 20 6f 6e 6c 79 20 61 66 74 65 72 20 74 68 69 73 20 64 65 6c 61 79 20 74 69 6d 65 72 20 65 78 | s.only.after.this.delay.timer.ex |
6b7e0 | 70 69 72 79 2e 00 53 75 70 70 6f 72 74 65 64 20 4d 6f 64 75 6c 65 73 00 53 75 70 70 6f 72 74 65 | piry..Supported.Modules.Supporte |
6b800 | 64 20 63 68 61 6e 6e 65 6c 20 77 69 64 74 68 20 73 65 74 2e 00 53 75 70 70 6f 72 74 65 64 20 64 | d.channel.width.set..Supported.d |
6b820 | 61 65 6d 6f 6e 73 3a 00 53 75 70 70 6f 72 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 79 70 65 | aemons:.Supported.interface.type |
6b840 | 73 3a 00 53 75 70 70 6f 72 74 65 64 20 72 65 6d 6f 74 65 20 70 72 6f 74 6f 63 6f 6c 73 20 61 72 | s:.Supported.remote.protocols.ar |
6b860 | 65 20 46 54 50 2c 20 46 54 50 53 2c 20 48 54 54 50 2c 20 48 54 54 50 53 2c 20 53 43 50 2f 53 46 | e.FTP,.FTPS,.HTTP,.HTTPS,.SCP/SF |
6b880 | 54 50 20 61 6e 64 20 54 46 54 50 2e 00 53 75 70 70 6f 72 74 65 64 20 76 65 72 73 69 6f 6e 73 20 | TP.and.TFTP..Supported.versions. |
6b8a0 | 6f 66 20 52 49 50 20 61 72 65 3a 00 53 75 70 70 6f 72 74 73 20 61 73 20 48 45 4c 50 45 52 20 66 | of.RIP.are:.Supports.as.HELPER.f |
6b8c0 | 6f 72 20 63 6f 6e 66 69 67 75 72 65 64 20 67 72 61 63 65 20 70 65 72 69 6f 64 2e 00 53 75 70 70 | or.configured.grace.period..Supp |
6b8e0 | 6f 73 65 20 74 68 65 20 4c 45 46 54 20 72 6f 75 74 65 72 20 68 61 73 20 65 78 74 65 72 6e 61 6c | ose.the.LEFT.router.has.external |
6b900 | 20 61 64 64 72 65 73 73 20 31 39 32 2e 30 2e 32 2e 31 30 20 6f 6e 20 69 74 73 20 65 74 68 30 20 | .address.192.0.2.10.on.its.eth0. |
6b920 | 69 6e 74 65 72 66 61 63 65 2c 20 61 6e 64 20 74 68 65 20 52 49 47 48 54 20 72 6f 75 74 65 72 20 | interface,.and.the.RIGHT.router. |
6b940 | 69 73 20 32 30 33 2e 30 2e 31 31 33 2e 34 35 00 53 75 70 70 6f 73 65 20 79 6f 75 20 77 61 6e 74 | is.203.0.113.45.Suppose.you.want |
6b960 | 20 74 6f 20 75 73 65 20 31 30 2e 32 33 2e 31 2e 30 2f 32 34 20 6e 65 74 77 6f 72 6b 20 66 6f 72 | .to.use.10.23.1.0/24.network.for |
6b980 | 20 63 6c 69 65 6e 74 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 73 20 61 6e 64 20 61 6c 6c | .client.tunnel.endpoints.and.all |
6b9a0 | 20 63 6c 69 65 6e 74 20 73 75 62 6e 65 74 73 20 62 65 6c 6f 6e 67 20 74 6f 20 31 30 2e 32 33 2e | .client.subnets.belong.to.10.23. |
6b9c0 | 30 2e 30 2f 32 30 2e 20 41 6c 6c 20 63 6c 69 65 6e 74 73 20 6e 65 65 64 20 61 63 63 65 73 73 20 | 0.0/20..All.clients.need.access. |
6b9e0 | 74 6f 20 74 68 65 20 31 39 32 2e 31 36 38 2e 30 2e 30 2f 31 36 20 6e 65 74 77 6f 72 6b 2e 00 53 | to.the.192.168.0.0/16.network..S |
6ba00 | 75 70 70 72 65 73 73 20 73 65 6e 64 69 6e 67 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 | uppress.sending.Capability.Negot |
6ba20 | 69 61 74 69 6f 6e 20 61 73 20 4f 50 45 4e 20 6d 65 73 73 61 67 65 20 6f 70 74 69 6f 6e 61 6c 20 | iation.as.OPEN.message.optional. |
6ba40 | 70 61 72 61 6d 65 74 65 72 20 74 6f 20 74 68 65 20 70 65 65 72 2e 20 54 68 69 73 20 63 6f 6d 6d | parameter.to.the.peer..This.comm |
6ba60 | 61 6e 64 20 6f 6e 6c 79 20 61 66 66 65 63 74 73 20 74 68 65 20 70 65 65 72 20 69 73 20 63 6f 6e | and.only.affects.the.peer.is.con |
6ba80 | 66 69 67 75 72 65 64 20 6f 74 68 65 72 20 74 68 61 6e 20 49 50 76 34 20 75 6e 69 63 61 73 74 20 | figured.other.than.IPv4.unicast. |
6baa0 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 53 79 6e 61 6d 69 63 20 69 6e 73 74 72 75 63 74 73 | configuration..Synamic.instructs |
6bac0 | 20 74 6f 20 66 6f 72 77 61 72 64 20 74 6f 20 61 6c 6c 20 70 65 65 72 73 20 77 68 69 63 68 20 77 | .to.forward.to.all.peers.which.w |
6bae0 | 65 20 68 61 76 65 20 61 20 64 69 72 65 63 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 2e | e.have.a.direct.connection.with. |
6bb00 | 20 41 6c 74 65 72 6e 61 74 69 76 65 6c 79 2c 20 79 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 | .Alternatively,.you.can.specify. |
6bb20 | 74 68 65 20 64 69 72 65 63 74 69 76 65 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 20 66 6f 72 | the.directive.multiple.times.for |
6bb40 | 20 65 61 63 68 20 70 72 6f 74 6f 63 6f 6c 2d 61 64 64 72 65 73 73 20 74 68 65 20 6d 75 6c 74 69 | .each.protocol-address.the.multi |
6bb60 | 63 61 73 74 20 74 72 61 66 66 69 63 20 73 68 6f 75 6c 64 20 62 65 20 73 65 6e 74 20 74 6f 2e 00 | cast.traffic.should.be.sent.to.. |
6bb80 | 53 79 6e 63 20 67 72 6f 75 70 73 00 53 79 6e 70 72 6f 78 79 00 53 79 6e 70 72 6f 78 79 20 63 6f | Sync.groups.Synproxy.Synproxy.co |
6bba0 | 6e 6e 65 63 74 69 6f 6e 73 00 53 79 6e 70 72 6f 78 79 20 72 65 6c 69 65 73 20 6f 6e 20 73 79 6e | nnections.Synproxy.relies.on.syn |
6bbc0 | 63 6f 6f 6b 69 65 73 20 61 6e 64 20 54 43 50 20 74 69 6d 65 73 74 61 6d 70 73 2c 20 65 6e 73 75 | cookies.and.TCP.timestamps,.ensu |
6bbe0 | 72 65 20 74 68 65 73 65 20 61 72 65 20 65 6e 61 62 6c 65 64 00 53 79 6e 74 61 78 20 68 61 73 20 | re.these.are.enabled.Syntax.has. |
6bc00 | 63 68 61 6e 67 65 64 20 66 72 6f 6d 20 56 79 4f 53 20 31 2e 32 20 28 63 72 75 78 29 20 61 6e 64 | changed.from.VyOS.1.2.(crux).and |
6bc20 | 20 69 74 20 77 69 6c 6c 20 62 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 6d 69 67 72 61 74 | .it.will.be.automatically.migrat |
6bc40 | 65 64 20 64 75 72 69 6e 67 20 61 6e 20 75 70 67 72 61 64 65 2e 00 53 79 73 63 74 6c 00 53 79 73 | ed.during.an.upgrade..Sysctl.Sys |
6bc60 | 6c 6f 67 00 53 79 73 6c 6f 67 20 73 75 70 70 6f 72 74 73 20 6c 6f 67 67 69 6e 67 20 74 6f 20 6d | log.Syslog.supports.logging.to.m |
6bc80 | 75 6c 74 69 70 6c 65 20 74 61 72 67 65 74 73 2c 20 74 68 6f 73 65 20 74 61 72 67 65 74 73 20 63 | ultiple.targets,.those.targets.c |
6bca0 | 6f 75 6c 64 20 62 65 20 61 20 70 6c 61 69 6e 20 66 69 6c 65 20 6f 6e 20 79 6f 75 72 20 56 79 4f | ould.be.a.plain.file.on.your.VyO |
6bcc0 | 53 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 20 69 74 73 65 6c 66 2c 20 61 20 73 65 72 69 61 6c 20 | S.installation.itself,.a.serial. |
6bce0 | 63 6f 6e 73 6f 6c 65 20 6f 72 20 61 20 72 65 6d 6f 74 65 20 73 79 73 6c 6f 67 20 73 65 72 76 65 | console.or.a.remote.syslog.serve |
6bd00 | 72 20 77 68 69 63 68 20 69 73 20 72 65 61 63 68 65 64 20 76 69 61 20 3a 61 62 62 72 3a 60 49 50 | r.which.is.reached.via.:abbr:`IP |
6bd20 | 20 28 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 6f 6c 29 60 20 55 44 50 2f 54 43 50 2e 00 53 | .(Internet.Protocol)`.UDP/TCP..S |
6bd40 | 79 73 6c 6f 67 20 75 73 65 73 20 6c 6f 67 72 6f 74 61 74 65 20 74 6f 20 72 6f 74 61 74 65 20 6c | yslog.uses.logrotate.to.rotate.l |
6bd60 | 6f 67 69 6c 65 73 20 61 66 74 65 72 20 61 20 6e 75 6d 62 65 72 20 6f 66 20 67 69 76 65 73 20 62 | ogiles.after.a.number.of.gives.b |
6bd80 | 79 74 65 73 2e 20 57 65 20 6b 65 65 70 20 61 73 20 6d 61 6e 79 20 61 73 20 60 3c 6e 75 6d 62 65 | ytes..We.keep.as.many.as.`<numbe |
6bda0 | 72 3e 60 20 72 6f 74 61 74 65 64 20 66 69 6c 65 20 62 65 66 6f 72 65 20 74 68 65 79 20 61 72 65 | r>`.rotated.file.before.they.are |
6bdc0 | 20 64 65 6c 65 74 65 64 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 00 53 79 73 6c 6f 67 20 77 | .deleted.on.the.system..Syslog.w |
6bde0 | 69 6c 6c 20 77 72 69 74 65 20 60 3c 73 69 7a 65 3e 60 20 6b 69 6c 6f 62 79 74 65 73 20 69 6e 74 | ill.write.`<size>`.kilobytes.int |
6be00 | 6f 20 74 68 65 20 66 69 6c 65 20 73 70 65 63 69 66 69 65 64 20 62 79 20 60 3c 66 69 6c 65 6e 61 | o.the.file.specified.by.`<filena |
6be20 | 6d 65 3e 60 2e 20 41 66 74 65 72 20 74 68 69 73 20 6c 69 6d 69 74 20 68 61 73 20 62 65 65 6e 20 | me>`..After.this.limit.has.been. |
6be40 | 72 65 61 63 68 65 64 2c 20 74 68 65 20 63 75 73 74 6f 6d 20 66 69 6c 65 20 69 73 20 22 72 6f 74 | reached,.the.custom.file.is."rot |
6be60 | 61 74 65 64 22 20 62 79 20 6c 6f 67 72 6f 74 61 74 65 20 61 6e 64 20 61 20 6e 65 77 20 63 75 73 | ated".by.logrotate.and.a.new.cus |
6be80 | 74 6f 6d 20 66 69 6c 65 20 69 73 20 63 72 65 61 74 65 64 2e 00 53 79 73 74 65 6d 00 53 79 73 74 | tom.file.is.created..System.Syst |
6bea0 | 65 6d 20 44 4e 53 00 53 79 73 74 65 6d 20 44 69 73 70 6c 61 79 20 28 4c 43 44 29 00 53 79 73 74 | em.DNS.System.Display.(LCD).Syst |
6bec0 | 65 6d 20 4e 61 6d 65 20 61 6e 64 20 44 65 73 63 72 69 70 74 69 6f 6e 00 53 79 73 74 65 6d 20 50 | em.Name.and.Description.System.P |
6bee0 | 72 6f 78 79 00 53 79 73 74 65 6d 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 28 73 77 69 74 63 68 | roxy.System.capabilities.(switch |
6bf00 | 69 6e 67 2c 20 72 6f 75 74 69 6e 67 2c 20 65 74 63 2e 29 00 53 79 73 74 65 6d 20 63 6f 6e 66 69 | ing,.routing,.etc.).System.confi |
6bf20 | 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 00 53 79 73 74 65 6d 20 64 61 65 6d 6f 6e 73 | guration.commands.System.daemons |
6bf40 | 00 53 79 73 74 65 6d 20 69 64 65 6e 74 69 66 69 65 72 3a 20 60 60 31 39 32 31 2e 36 38 30 30 2e | .System.identifier:.``1921.6800. |
6bf60 | 31 30 30 32 60 60 20 2d 20 66 6f 72 20 73 79 73 74 65 6d 20 69 64 65 74 69 66 69 65 72 73 20 77 | 1002``.-.for.system.idetifiers.w |
6bf80 | 65 20 72 65 63 6f 6d 6d 65 6e 64 20 74 6f 20 75 73 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 | e.recommend.to.use.IP.address.or |
6bfa0 | 20 4d 41 43 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c | .MAC.address.of.the.router.itsel |
6bfc0 | 66 2e 20 54 68 65 20 77 61 79 20 74 6f 20 63 6f 6e 73 74 72 75 63 74 20 74 68 69 73 20 69 73 20 | f..The.way.to.construct.this.is. |
6bfe0 | 74 6f 20 6b 65 65 70 20 61 6c 6c 20 6f 66 20 74 68 65 20 7a 65 72 6f 65 73 20 6f 66 20 74 68 65 | to.keep.all.of.the.zeroes.of.the |
6c000 | 20 72 6f 75 74 65 72 20 49 50 20 61 64 64 72 65 73 73 2c 20 61 6e 64 20 74 68 65 6e 20 63 68 61 | .router.IP.address,.and.then.cha |
6c020 | 6e 67 65 20 74 68 65 20 70 65 72 69 6f 64 73 20 66 72 6f 6d 20 62 65 69 6e 67 20 65 76 65 72 79 | nge.the.periods.from.being.every |
6c040 | 20 74 68 72 65 65 20 6e 75 6d 62 65 72 73 20 74 6f 20 65 76 65 72 79 20 66 6f 75 72 20 6e 75 6d | .three.numbers.to.every.four.num |
6c060 | 62 65 72 73 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 74 68 61 74 20 69 73 20 6c 69 73 74 65 64 | bers..The.address.that.is.listed |
6c080 | 20 68 65 72 65 20 69 73 20 60 60 31 39 32 2e 31 36 38 2e 31 2e 32 60 60 2c 20 77 68 69 63 68 20 | .here.is.``192.168.1.2``,.which. |
6c0a0 | 69 66 20 65 78 70 61 6e 64 65 64 20 77 69 6c 6c 20 74 75 72 6e 20 69 6e 74 6f 20 60 60 31 39 32 | if.expanded.will.turn.into.``192 |
6c0c0 | 2e 31 36 38 2e 30 30 31 2e 30 30 32 60 60 2e 20 54 68 65 6e 20 61 6c 6c 20 6f 6e 65 20 68 61 73 | .168.001.002``..Then.all.one.has |
6c0e0 | 20 74 6f 20 64 6f 20 69 73 20 6d 6f 76 65 20 74 68 65 20 64 6f 74 73 20 74 6f 20 68 61 76 65 20 | .to.do.is.move.the.dots.to.have. |
6c100 | 66 6f 75 72 20 6e 75 6d 62 65 72 73 20 69 6e 73 74 65 61 64 20 6f 66 20 74 68 72 65 65 2e 20 54 | four.numbers.instead.of.three..T |
6c120 | 68 69 73 20 67 69 76 65 73 20 75 73 20 60 60 31 39 32 31 2e 36 38 30 30 2e 31 30 30 32 60 60 2e | his.gives.us.``1921.6800.1002``. |
6c140 | 00 53 79 73 74 65 6d 20 69 73 20 75 6e 75 73 61 62 6c 65 20 2d 20 61 20 70 61 6e 69 63 20 63 6f | .System.is.unusable.-.a.panic.co |
6c160 | 6e 64 69 74 69 6f 6e 00 54 41 43 41 43 53 20 45 78 61 6d 70 6c 65 00 54 41 43 41 43 53 20 69 73 | ndition.TACACS.Example.TACACS.is |
6c180 | 20 64 65 66 69 6e 65 64 20 69 6e 20 3a 72 66 63 3a 60 38 39 30 37 60 2e 00 54 41 43 41 43 53 20 | .defined.in.:rfc:`8907`..TACACS. |
6c1a0 | 73 65 72 76 65 72 73 20 63 6f 75 6c 64 20 62 65 20 68 61 72 64 65 6e 65 64 20 62 79 20 6f 6e 6c | servers.could.be.hardened.by.onl |
6c1c0 | 79 20 61 6c 6c 6f 77 69 6e 67 20 63 65 72 74 61 69 6e 20 49 50 20 61 64 64 72 65 73 73 65 73 20 | y.allowing.certain.IP.addresses. |
6c1e0 | 74 6f 20 63 6f 6e 6e 65 63 74 2e 20 41 73 20 6f 66 20 74 68 69 73 20 74 68 65 20 73 6f 75 72 63 | to.connect..As.of.this.the.sourc |
6c200 | 65 20 61 64 64 72 65 73 73 20 6f 66 20 65 61 63 68 20 54 41 43 41 43 53 20 71 75 65 72 79 20 63 | e.address.of.each.TACACS.query.c |
6c220 | 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 54 41 43 41 43 53 2b 00 54 42 44 00 54 43 | an.be.configured..TACACS+.TBD.TC |
6c240 | 50 20 26 20 55 44 50 20 73 65 72 76 69 63 65 73 20 72 75 6e 6e 69 6e 67 20 69 6e 20 74 68 65 20 | P.&.UDP.services.running.in.the. |
6c260 | 64 65 66 61 75 6c 74 20 56 52 46 20 63 6f 6e 74 65 78 74 20 28 69 65 2e 2c 20 6e 6f 74 20 62 6f | default.VRF.context.(ie.,.not.bo |
6c280 | 75 6e 64 20 74 6f 20 61 6e 79 20 56 52 46 20 64 65 76 69 63 65 29 20 63 61 6e 20 77 6f 72 6b 20 | und.to.any.VRF.device).can.work. |
6c2a0 | 61 63 72 6f 73 73 20 61 6c 6c 20 56 52 46 20 64 6f 6d 61 69 6e 73 20 62 79 20 65 6e 61 62 6c 69 | across.all.VRF.domains.by.enabli |
6c2c0 | 6e 67 20 74 68 69 73 20 6f 70 74 69 6f 6e 2e 00 54 46 54 50 20 53 65 72 76 65 72 00 54 61 67 20 | ng.this.option..TFTP.Server.Tag. |
6c2e0 | 69 73 20 74 68 65 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 2e 20 49 66 20 74 61 | is.the.optional.parameter..If.ta |
6c300 | 67 20 63 6f 6e 66 69 67 75 72 65 64 20 53 75 6d 6d 61 72 79 20 72 6f 75 74 65 20 77 69 6c 6c 20 | g.configured.Summary.route.will. |
6c320 | 62 65 20 6f 72 69 67 69 6e 61 74 65 64 20 77 69 74 68 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 | be.originated.with.the.configure |
6c340 | 64 20 74 61 67 2e 00 54 61 73 6b 20 53 63 68 65 64 75 6c 65 72 00 54 65 6c 65 67 72 61 66 00 54 | d.tag..Task.Scheduler.Telegraf.T |
6c360 | 65 6c 65 67 72 61 66 20 6f 75 74 70 75 74 20 70 6c 75 67 69 6e 20 61 7a 75 72 65 2d 64 61 74 61 | elegraf.output.plugin.azure-data |
6c380 | 2d 65 78 70 6c 6f 72 65 72 5f 00 54 65 6c 65 67 72 61 66 20 6f 75 74 70 75 74 20 70 6c 75 67 69 | -explorer_.Telegraf.output.plugi |
6c3a0 | 6e 20 70 72 6f 6d 65 74 68 65 75 73 2d 63 6c 69 65 6e 74 5f 00 54 65 6c 65 67 72 61 66 20 6f 75 | n.prometheus-client_.Telegraf.ou |
6c3c0 | 74 70 75 74 20 70 6c 75 67 69 6e 20 73 70 6c 75 6e 6b 5f 2e 20 48 54 54 50 20 45 76 65 6e 74 20 | tput.plugin.splunk_..HTTP.Event. |
6c3e0 | 43 6f 6c 6c 65 63 74 6f 72 2e 00 54 65 6c 6c 20 50 49 4d 20 74 68 61 74 20 77 65 20 77 6f 75 6c | Collector..Tell.PIM.that.we.woul |
6c400 | 64 20 6e 6f 74 20 6c 69 6b 65 20 74 6f 20 75 73 65 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 | d.not.like.to.use.this.interface |
6c420 | 20 74 6f 20 70 72 6f 63 65 73 73 20 62 6f 6f 74 73 74 72 61 70 20 6d 65 73 73 61 67 65 73 2e 00 | .to.process.bootstrap.messages.. |
6c440 | 54 65 6c 6c 20 50 49 4d 20 74 68 61 74 20 77 65 20 77 6f 75 6c 64 20 6e 6f 74 20 6c 69 6b 65 20 | Tell.PIM.that.we.would.not.like. |
6c460 | 74 6f 20 75 73 65 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 70 72 6f 63 65 73 73 | to.use.this.interface.to.process |
6c480 | 20 75 6e 69 63 61 73 74 20 62 6f 6f 74 73 74 72 61 70 20 6d 65 73 73 61 67 65 73 2e 00 54 65 6c | .unicast.bootstrap.messages..Tel |
6c4a0 | 6c 20 68 6f 73 74 73 20 74 6f 20 75 73 65 20 74 68 65 20 61 64 6d 69 6e 69 73 74 65 72 65 64 20 | l.hosts.to.use.the.administered. |
6c4c0 | 28 73 74 61 74 65 66 75 6c 29 20 70 72 6f 74 6f 63 6f 6c 20 28 69 2e 65 2e 20 44 48 43 50 29 20 | (stateful).protocol.(i.e..DHCP). |
6c4e0 | 66 6f 72 20 61 75 74 6f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 6f 74 68 65 72 20 28 | for.autoconfiguration.of.other.( |
6c500 | 6e 6f 6e 2d 61 64 64 72 65 73 73 29 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 54 65 6c 6c 20 68 6f | non-address).information.Tell.ho |
6c520 | 73 74 73 20 74 6f 20 75 73 65 20 74 68 65 20 61 64 6d 69 6e 69 73 74 65 72 65 64 20 73 74 61 74 | sts.to.use.the.administered.stat |
6c540 | 65 66 75 6c 20 70 72 6f 74 6f 63 6f 6c 20 28 69 2e 65 2e 20 44 48 43 50 29 20 66 6f 72 20 61 75 | eful.protocol.(i.e..DHCP).for.au |
6c560 | 74 6f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 54 65 6d 70 6f 72 61 72 79 20 64 69 73 61 62 6c | toconfiguration.Temporary.disabl |
6c580 | 65 20 74 68 69 73 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 54 65 6d 70 6f 72 61 72 79 20 | e.this.RADIUS.server..Temporary. |
6c5a0 | 64 69 73 61 62 6c 65 20 74 68 69 73 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 20 49 74 20 77 | disable.this.RADIUS.server..It.w |
6c5c0 | 6f 6e 27 74 20 62 65 20 71 75 65 72 69 65 64 2e 00 54 65 6d 70 6f 72 61 72 79 20 64 69 73 61 62 | on't.be.queried..Temporary.disab |
6c5e0 | 6c 65 20 74 68 69 73 20 54 41 43 41 43 53 20 73 65 72 76 65 72 2e 20 49 74 20 77 6f 6e 27 74 20 | le.this.TACACS.server..It.won't. |
6c600 | 62 65 20 71 75 65 72 69 65 64 2e 00 54 65 72 6d 69 6e 61 74 65 20 53 53 4c 00 54 65 73 74 20 63 | be.queried..Terminate.SSL.Test.c |
6c620 | 6f 6e 6e 65 63 74 69 6e 67 20 67 69 76 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2d 6f 72 69 65 6e | onnecting.given.connection-orien |
6c640 | 74 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 63 61 6e | ted.interface..`<interface>`.can |
6c660 | 20 62 65 20 60 60 70 70 70 6f 65 30 60 60 20 61 73 20 74 68 65 20 65 78 61 6d 70 6c 65 2e 00 54 | .be.``pppoe0``.as.the.example..T |
6c680 | 65 73 74 20 63 6f 6e 6e 65 63 74 69 6e 67 20 67 69 76 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2d | est.connecting.given.connection- |
6c6a0 | 6f 72 69 65 6e 74 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e | oriented.interface..`<interface> |
6c6c0 | 60 20 63 61 6e 20 62 65 20 60 60 73 73 74 70 63 30 60 60 20 61 73 20 74 68 65 20 65 78 61 6d 70 | `.can.be.``sstpc0``.as.the.examp |
6c6e0 | 6c 65 2e 00 54 65 73 74 20 64 69 73 63 6f 6e 6e 65 63 74 69 6e 67 20 67 69 76 65 6e 20 63 6f 6e | le..Test.disconnecting.given.con |
6c700 | 6e 65 63 74 69 6f 6e 2d 6f 72 69 65 6e 74 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 60 3c 69 6e | nection-oriented.interface..`<in |
6c720 | 74 65 72 66 61 63 65 3e 60 20 63 61 6e 20 62 65 20 60 60 70 70 70 6f 65 30 60 60 20 61 73 20 74 | terface>`.can.be.``pppoe0``.as.t |
6c740 | 68 65 20 65 78 61 6d 70 6c 65 2e 00 54 65 73 74 20 64 69 73 63 6f 6e 6e 65 63 74 69 6e 67 20 67 | he.example..Test.disconnecting.g |
6c760 | 69 76 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2d 6f 72 69 65 6e 74 65 64 20 69 6e 74 65 72 66 61 | iven.connection-oriented.interfa |
6c780 | 63 65 2e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 63 61 6e 20 62 65 20 60 60 73 73 74 70 63 | ce..`<interface>`.can.be.``sstpc |
6c7a0 | 30 60 60 20 61 73 20 74 68 65 20 65 78 61 6d 70 6c 65 2e 00 54 65 73 74 20 66 72 6f 6d 20 74 68 | 0``.as.the.example..Test.from.th |
6c7c0 | 65 20 49 50 76 36 20 6f 6e 6c 79 20 63 6c 69 65 6e 74 3a 00 54 65 73 74 69 6e 67 20 53 53 54 50 | e.IPv6.only.client:.Testing.SSTP |
6c7e0 | 00 54 65 73 74 69 6e 67 20 61 6e 64 20 56 61 6c 69 64 61 74 69 6f 6e 00 54 68 61 6e 6b 73 20 74 | .Testing.and.Validation.Thanks.t |
6c800 | 6f 20 74 68 69 73 20 64 69 73 63 6f 76 65 72 79 2c 20 61 6e 79 20 73 75 62 73 65 71 75 65 6e 74 | o.this.discovery,.any.subsequent |
6c820 | 20 74 72 61 66 66 69 63 20 62 65 74 77 65 65 6e 20 50 43 34 20 61 6e 64 20 50 43 35 20 77 69 6c | .traffic.between.PC4.and.PC5.wil |
6c840 | 6c 20 6e 6f 74 20 62 65 20 75 73 69 6e 67 20 74 68 65 20 6d 75 6c 74 69 63 61 73 74 2d 61 64 64 | l.not.be.using.the.multicast-add |
6c860 | 72 65 73 73 20 62 65 74 77 65 65 6e 20 74 68 65 20 6c 65 61 76 65 73 20 61 73 20 74 68 65 79 20 | ress.between.the.leaves.as.they. |
6c880 | 62 6f 74 68 20 6b 6e 6f 77 20 62 65 68 69 6e 64 20 77 68 69 63 68 20 4c 65 61 66 20 74 68 65 20 | both.know.behind.which.Leaf.the. |
6c8a0 | 50 43 73 20 61 72 65 20 63 6f 6e 6e 65 63 74 65 64 2e 20 54 68 69 73 20 73 61 76 65 73 20 74 72 | PCs.are.connected..This.saves.tr |
6c8c0 | 61 66 66 69 63 20 61 73 20 6c 65 73 73 20 6d 75 6c 74 69 63 61 73 74 20 70 61 63 6b 65 74 73 20 | affic.as.less.multicast.packets. |
6c8e0 | 73 65 6e 74 20 72 65 64 75 63 65 73 20 74 68 65 20 6c 6f 61 64 20 6f 6e 20 74 68 65 20 6e 65 74 | sent.reduces.the.load.on.the.net |
6c900 | 77 6f 72 6b 2c 20 77 68 69 63 68 20 69 6d 70 72 6f 76 65 73 20 73 63 61 6c 61 62 69 6c 69 74 79 | work,.which.improves.scalability |
6c920 | 20 77 68 65 6e 20 6d 6f 72 65 20 6c 65 61 76 65 73 20 61 72 65 20 61 64 64 65 64 2e 00 54 68 61 | .when.more.leaves.are.added..Tha |
6c940 | 74 20 69 73 20 68 6f 77 20 69 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 64 6f 20 74 68 | t.is.how.it.is.possible.to.do.th |
6c960 | 65 20 73 6f 2d 63 61 6c 6c 65 64 20 22 69 6e 67 72 65 73 73 20 73 68 61 70 69 6e 67 22 2e 00 54 | e.so-called."ingress.shaping"..T |
6c980 | 68 61 74 20 6c 6f 6f 6b 73 20 67 6f 6f 64 20 2d 20 77 65 20 64 65 66 69 6e 65 64 20 32 20 74 75 | hat.looks.good.-.we.defined.2.tu |
6c9a0 | 6e 6e 65 6c 73 20 61 6e 64 20 74 68 65 79 27 72 65 20 62 6f 74 68 20 75 70 20 61 6e 64 20 72 75 | nnels.and.they're.both.up.and.ru |
6c9c0 | 6e 6e 69 6e 67 2e 00 54 68 65 20 3a 61 62 62 72 3a 60 41 53 4e 20 28 41 75 74 6f 6e 6f 6d 6f 75 | nning..The.:abbr:`ASN.(Autonomou |
6c9e0 | 73 20 53 79 73 74 65 6d 20 4e 75 6d 62 65 72 29 60 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 | s.System.Number)`.is.one.of.the. |
6ca00 | 65 73 73 65 6e 74 69 61 6c 20 65 6c 65 6d 65 6e 74 73 20 6f 66 20 42 47 50 2e 20 42 47 50 20 69 | essential.elements.of.BGP..BGP.i |
6ca20 | 73 20 61 20 64 69 73 74 61 6e 63 65 20 76 65 63 74 6f 72 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 | s.a.distance.vector.routing.prot |
6ca40 | 6f 63 6f 6c 2c 20 61 6e 64 20 74 68 65 20 41 53 2d 50 61 74 68 20 66 72 61 6d 65 77 6f 72 6b 20 | ocol,.and.the.AS-Path.framework. |
6ca60 | 70 72 6f 76 69 64 65 73 20 64 69 73 74 61 6e 63 65 20 76 65 63 74 6f 72 20 6d 65 74 72 69 63 20 | provides.distance.vector.metric. |
6ca80 | 61 6e 64 20 6c 6f 6f 70 20 64 65 74 65 63 74 69 6f 6e 20 74 6f 20 42 47 50 2e 00 54 68 65 20 3a | and.loop.detection.to.BGP..The.: |
6caa0 | 61 62 62 72 3a 60 44 4e 50 54 76 36 20 28 44 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 76 36 2d 74 | abbr:`DNPTv6.(Destination.IPv6-t |
6cac0 | 6f 2d 49 50 76 36 20 4e 65 74 77 6f 72 6b 20 50 72 65 66 69 78 20 54 72 61 6e 73 6c 61 74 69 6f | o-IPv6.Network.Prefix.Translatio |
6cae0 | 6e 29 60 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 | n)`.destination.address.translat |
6cb00 | 69 6f 6e 20 66 75 6e 63 74 69 6f 6e 20 69 73 20 75 73 65 64 20 69 6e 20 73 63 65 6e 61 72 69 6f | ion.function.is.used.in.scenario |
6cb20 | 73 20 77 68 65 72 65 20 74 68 65 20 73 65 72 76 65 72 20 69 6e 20 74 68 65 20 69 6e 74 65 72 6e | s.where.the.server.in.the.intern |
6cb40 | 61 6c 20 6e 65 74 77 6f 72 6b 20 70 72 6f 76 69 64 65 73 20 73 65 72 76 69 63 65 73 20 74 6f 20 | al.network.provides.services.to. |
6cb60 | 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 2c 20 73 75 63 68 20 61 73 20 70 72 | the.external.network,.such.as.pr |
6cb80 | 6f 76 69 64 69 6e 67 20 57 65 62 20 73 65 72 76 69 63 65 73 20 6f 72 20 46 54 50 20 73 65 72 76 | oviding.Web.services.or.FTP.serv |
6cba0 | 69 63 65 73 20 74 6f 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 2e 20 42 79 | ices.to.the.external.network..By |
6cbc0 | 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 74 68 65 20 6d 61 70 70 69 6e 67 20 72 65 6c 61 74 69 6f | .configuring.the.mapping.relatio |
6cbe0 | 6e 73 68 69 70 20 62 65 74 77 65 65 6e 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 73 65 72 76 65 | nship.between.the.internal.serve |
6cc00 | 72 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f | r.address.and.the.external.netwo |
6cc20 | 72 6b 20 61 64 64 72 65 73 73 20 6f 6e 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f | rk.address.on.the.external.netwo |
6cc40 | 72 6b 20 73 69 64 65 20 69 6e 74 65 72 66 61 63 65 20 6f 66 20 74 68 65 20 4e 41 54 36 36 20 64 | rk.side.interface.of.the.NAT66.d |
6cc60 | 65 76 69 63 65 2c 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 75 73 65 72 73 20 63 61 | evice,.external.network.users.ca |
6cc80 | 6e 20 61 63 63 65 73 73 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 73 65 | n.access.the.internal.network.se |
6cca0 | 72 76 65 72 20 74 68 72 6f 75 67 68 20 74 68 65 20 64 65 73 69 67 6e 61 74 65 64 20 65 78 74 65 | rver.through.the.designated.exte |
6ccc0 | 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 2e 00 54 68 65 20 3a 61 62 62 72 3a | rnal.network.address..The.:abbr: |
6cce0 | 60 4d 50 4c 53 20 28 4d 75 6c 74 69 2d 50 72 6f 74 6f 63 6f 6c 20 4c 61 62 65 6c 20 53 77 69 74 | `MPLS.(Multi-Protocol.Label.Swit |
6cd00 | 63 68 69 6e 67 29 60 20 61 72 63 68 69 74 65 63 74 75 72 65 20 64 6f 65 73 20 6e 6f 74 20 61 73 | ching)`.architecture.does.not.as |
6cd20 | 73 75 6d 65 20 61 20 73 69 6e 67 6c 65 20 70 72 6f 74 6f 63 6f 6c 20 74 6f 20 63 72 65 61 74 65 | sume.a.single.protocol.to.create |
6cd40 | 20 4d 50 4c 53 20 70 61 74 68 73 2e 20 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 4c | .MPLS.paths..VyOS.supports.the.L |
6cd60 | 61 62 65 6c 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 28 4c 44 50 29 | abel.Distribution.Protocol.(LDP) |
6cd80 | 20 61 73 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 62 79 20 46 52 52 2c 20 62 61 73 65 64 20 6f 6e | .as.implemented.by.FRR,.based.on |
6cda0 | 20 3a 72 66 63 3a 60 35 30 33 36 60 2e 00 54 68 65 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e | .:rfc:`5036`..The.:ref:`source-n |
6cdc0 | 61 74 36 36 60 20 72 75 6c 65 20 72 65 70 6c 61 63 65 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 | at66`.rule.replaces.the.source.a |
6cde0 | 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 70 61 63 6b 65 74 20 61 6e 64 20 63 61 6c 63 75 6c 61 | ddress.of.the.packet.and.calcula |
6ce00 | 74 65 73 20 74 68 65 20 63 6f 6e 76 65 72 74 65 64 20 61 64 64 72 65 73 73 20 75 73 69 6e 67 20 | tes.the.converted.address.using. |
6ce20 | 74 68 65 20 70 72 65 66 69 78 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 74 68 65 20 72 75 6c 65 | the.prefix.specified.in.the.rule |
6ce40 | 2e 00 54 68 65 20 41 52 50 20 6d 6f 6e 69 74 6f 72 20 77 6f 72 6b 73 20 62 79 20 70 65 72 69 6f | ..The.ARP.monitor.works.by.perio |
6ce60 | 64 69 63 61 6c 6c 79 20 63 68 65 63 6b 69 6e 67 20 74 68 65 20 73 6c 61 76 65 20 64 65 76 69 63 | dically.checking.the.slave.devic |
6ce80 | 65 73 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 77 68 65 74 68 65 72 20 74 68 65 79 20 68 61 76 | es.to.determine.whether.they.hav |
6cea0 | 65 20 73 65 6e 74 20 6f 72 20 72 65 63 65 69 76 65 64 20 74 72 61 66 66 69 63 20 72 65 63 65 6e | e.sent.or.received.traffic.recen |
6cec0 | 74 6c 79 20 28 74 68 65 20 70 72 65 63 69 73 65 20 63 72 69 74 65 72 69 61 20 64 65 70 65 6e 64 | tly.(the.precise.criteria.depend |
6cee0 | 73 20 75 70 6f 6e 20 74 68 65 20 62 6f 6e 64 69 6e 67 20 6d 6f 64 65 2c 20 61 6e 64 20 74 68 65 | s.upon.the.bonding.mode,.and.the |
6cf00 | 20 73 74 61 74 65 20 6f 66 20 74 68 65 20 73 6c 61 76 65 29 2e 20 52 65 67 75 6c 61 72 20 74 72 | .state.of.the.slave)..Regular.tr |
6cf20 | 61 66 66 69 63 20 69 73 20 67 65 6e 65 72 61 74 65 64 20 76 69 61 20 41 52 50 20 70 72 6f 62 65 | affic.is.generated.via.ARP.probe |
6cf40 | 73 20 69 73 73 75 65 64 20 66 6f 72 20 74 68 65 20 61 64 64 72 65 73 73 65 73 20 73 70 65 63 69 | s.issued.for.the.addresses.speci |
6cf60 | 66 69 65 64 20 62 79 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 61 72 70 2d 6d 6f 6e 69 74 6f 72 | fied.by.the.:cfgcmd:`arp-monitor |
6cf80 | 20 74 61 72 67 65 74 60 20 6f 70 74 69 6f 6e 2e 00 54 68 65 20 41 53 50 20 68 61 73 20 64 6f 63 | .target`.option..The.ASP.has.doc |
6cfa0 | 75 6d 65 6e 74 65 64 20 74 68 65 69 72 20 49 50 53 65 63 20 72 65 71 75 69 72 65 6d 65 6e 74 73 | umented.their.IPSec.requirements |
6cfc0 | 3a 00 54 68 65 20 42 47 50 20 72 6f 75 74 65 72 20 63 61 6e 20 63 6f 6e 6e 65 63 74 20 74 6f 20 | :.The.BGP.router.can.connect.to. |
6cfe0 | 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 52 50 4b 49 20 63 61 63 68 65 20 73 65 72 76 65 72 73 20 74 | one.or.more.RPKI.cache.servers.t |
6d000 | 6f 20 72 65 63 65 69 76 65 20 76 61 6c 69 64 61 74 65 64 20 70 72 65 66 69 78 20 74 6f 20 6f 72 | o.receive.validated.prefix.to.or |
6d020 | 69 67 69 6e 20 41 53 20 6d 61 70 70 69 6e 67 73 2e 20 41 64 76 61 6e 63 65 64 20 66 61 69 6c 6f | igin.AS.mappings..Advanced.failo |
6d040 | 76 65 72 20 63 61 6e 20 62 65 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 62 79 20 73 65 72 76 65 72 | ver.can.be.implemented.by.server |
6d060 | 20 73 6f 63 6b 65 74 73 20 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 20 70 72 65 66 65 72 65 6e | .sockets.with.different.preferen |
6d080 | 63 65 20 76 61 6c 75 65 73 2e 00 54 68 65 20 43 4c 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | ce.values..The.CLI.configuration |
6d0a0 | 20 69 73 20 73 61 6d 65 20 61 73 20 6d 65 6e 74 69 6f 6e 65 64 20 69 6e 20 61 62 6f 76 65 20 61 | .is.same.as.mentioned.in.above.a |
6d0c0 | 72 74 69 63 6c 65 73 2e 20 54 68 65 20 6f 6e 6c 79 20 64 69 66 66 65 72 65 6e 63 65 20 69 73 2c | rticles..The.only.difference.is, |
6d0e0 | 20 74 68 61 74 20 65 61 63 68 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 64 | .that.each.routing.protocol.used |
6d100 | 2c 20 6d 75 73 74 20 62 65 20 70 72 65 66 69 78 65 64 20 77 69 74 68 20 74 68 65 20 60 76 72 66 | ,.must.be.prefixed.with.the.`vrf |
6d120 | 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 60 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 65 20 43 4c 4e 53 20 | .name.<name>`.command..The.CLNS. |
6d140 | 61 64 64 72 65 73 73 20 63 6f 6e 73 69 73 74 73 20 6f 66 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e | address.consists.of.the.followin |
6d160 | 67 20 70 61 72 74 73 3a 00 54 68 65 20 44 48 43 50 20 75 6e 69 71 75 65 20 69 64 65 6e 74 69 66 | g.parts:.The.DHCP.unique.identif |
6d180 | 69 65 72 20 28 44 55 49 44 29 20 69 73 20 75 73 65 64 20 62 79 20 61 20 63 6c 69 65 6e 74 20 74 | ier.(DUID).is.used.by.a.client.t |
6d1a0 | 6f 20 67 65 74 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 61 20 44 48 43 50 76 | o.get.an.IP.address.from.a.DHCPv |
6d1c0 | 36 20 73 65 72 76 65 72 2e 20 49 74 20 68 61 73 20 61 20 32 2d 62 79 74 65 20 44 55 49 44 20 74 | 6.server..It.has.a.2-byte.DUID.t |
6d1e0 | 79 70 65 20 66 69 65 6c 64 2c 20 61 6e 64 20 61 20 76 61 72 69 61 62 6c 65 2d 6c 65 6e 67 74 68 | ype.field,.and.a.variable-length |
6d200 | 20 69 64 65 6e 74 69 66 69 65 72 20 66 69 65 6c 64 20 75 70 20 74 6f 20 31 32 38 20 62 79 74 65 | .identifier.field.up.to.128.byte |
6d220 | 73 2e 20 49 74 73 20 61 63 74 75 61 6c 20 6c 65 6e 67 74 68 20 64 65 70 65 6e 64 73 20 6f 6e 20 | s..Its.actual.length.depends.on. |
6d240 | 69 74 73 20 74 79 70 65 2e 20 54 68 65 20 73 65 72 76 65 72 20 63 6f 6d 70 61 72 65 73 20 74 68 | its.type..The.server.compares.th |
6d260 | 65 20 44 55 49 44 20 77 69 74 68 20 69 74 73 20 64 61 74 61 62 61 73 65 20 61 6e 64 20 64 65 6c | e.DUID.with.its.database.and.del |
6d280 | 69 76 65 72 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 64 61 74 61 20 28 61 64 64 72 65 73 | ivers.configuration.data.(addres |
6d2a0 | 73 2c 20 6c 65 61 73 65 20 74 69 6d 65 73 2c 20 44 4e 53 20 73 65 72 76 65 72 73 2c 20 65 74 63 | s,.lease.times,.DNS.servers,.etc |
6d2c0 | 2e 29 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 2e 00 54 68 65 20 44 4e 20 61 6e 64 20 70 61 73 | .).to.the.client..The.DN.and.pas |
6d2e0 | 73 77 6f 72 64 20 74 6f 20 62 69 6e 64 20 61 73 20 77 68 69 6c 65 20 70 65 72 66 6f 72 6d 69 6e | sword.to.bind.as.while.performin |
6d300 | 67 20 73 65 61 72 63 68 65 73 2e 00 54 68 65 20 44 4e 20 61 6e 64 20 70 61 73 73 77 6f 72 64 20 | g.searches..The.DN.and.password. |
6d320 | 74 6f 20 62 69 6e 64 20 61 73 20 77 68 69 6c 65 20 70 65 72 66 6f 72 6d 69 6e 67 20 73 65 61 72 | to.bind.as.while.performing.sear |
6d340 | 63 68 65 73 2e 20 41 73 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 6e 65 65 64 73 20 74 6f 20 62 | ches..As.the.password.needs.to.b |
6d360 | 65 20 70 72 69 6e 74 65 64 20 69 6e 20 70 6c 61 69 6e 20 74 65 78 74 20 69 6e 20 79 6f 75 72 20 | e.printed.in.plain.text.in.your. |
6d380 | 53 71 75 69 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 74 20 69 73 20 73 74 72 6f 6e 67 | Squid.configuration.it.is.strong |
6d3a0 | 6c 79 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 75 73 65 20 61 20 61 63 63 6f 75 6e 74 20 | ly.recommended.to.use.a.account. |
6d3c0 | 77 69 74 68 20 6d 69 6e 69 6d 61 6c 20 61 73 73 6f 63 69 61 74 65 64 20 70 72 69 76 69 6c 65 67 | with.minimal.associated.privileg |
6d3e0 | 65 73 2e 20 54 68 69 73 20 74 6f 20 6c 69 6d 69 74 20 74 68 65 20 64 61 6d 61 67 65 20 69 6e 20 | es..This.to.limit.the.damage.in. |
6d400 | 63 61 73 65 20 73 6f 6d 65 6f 6e 65 20 63 6f 75 6c 64 20 67 65 74 20 68 6f 6c 64 20 6f 66 20 61 | case.someone.could.get.hold.of.a |
6d420 | 20 63 6f 70 79 20 6f 66 20 79 6f 75 72 20 53 71 75 69 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | .copy.of.your.Squid.configuratio |
6d440 | 6e 20 66 69 6c 65 2e 00 54 68 65 20 46 51 2d 43 6f 44 65 6c 20 70 6f 6c 69 63 79 20 64 69 73 74 | n.file..The.FQ-CoDel.policy.dist |
6d460 | 72 69 62 75 74 65 73 20 74 68 65 20 74 72 61 66 66 69 63 20 69 6e 74 6f 20 31 30 32 34 20 46 49 | ributes.the.traffic.into.1024.FI |
6d480 | 46 4f 20 71 75 65 75 65 73 20 61 6e 64 20 74 72 69 65 73 20 74 6f 20 70 72 6f 76 69 64 65 20 67 | FO.queues.and.tries.to.provide.g |
6d4a0 | 6f 6f 64 20 73 65 72 76 69 63 65 20 62 65 74 77 65 65 6e 20 61 6c 6c 20 6f 66 20 74 68 65 6d 2e | ood.service.between.all.of.them. |
6d4c0 | 20 49 74 20 61 6c 73 6f 20 74 72 69 65 73 20 74 6f 20 6b 65 65 70 20 74 68 65 20 6c 65 6e 67 74 | .It.also.tries.to.keep.the.lengt |
6d4e0 | 68 20 6f 66 20 61 6c 6c 20 74 68 65 20 71 75 65 75 65 73 20 73 68 6f 72 74 2e 00 54 68 65 20 48 | h.of.all.the.queues.short..The.H |
6d500 | 54 54 50 20 73 65 72 76 69 63 65 20 6c 69 73 74 65 6e 20 6f 6e 20 54 43 50 20 70 6f 72 74 20 38 | TTP.service.listen.on.TCP.port.8 |
6d520 | 30 2e 00 54 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 69 6e 74 65 72 6e 61 | 0..The.IP.address.of.the.interna |
6d540 | 6c 20 73 79 73 74 65 6d 20 77 65 20 77 69 73 68 20 74 6f 20 66 6f 72 77 61 72 64 20 74 72 61 66 | l.system.we.wish.to.forward.traf |
6d560 | 66 69 63 20 74 6f 2e 00 54 68 65 20 49 6e 74 65 6c 20 41 58 32 30 30 20 63 61 72 64 20 64 6f 65 | fic.to..The.Intel.AX200.card.doe |
6d580 | 73 20 6e 6f 74 20 77 6f 72 6b 20 6f 75 74 20 6f 66 20 74 68 65 20 62 6f 78 20 69 6e 20 41 50 20 | s.not.work.out.of.the.box.in.AP. |
6d5a0 | 6d 6f 64 65 2c 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 75 6e 69 78 2e 73 74 61 63 6b 65 78 63 68 | mode,.see.https://unix.stackexch |
6d5c0 | 61 6e 67 65 2e 63 6f 6d 2f 71 75 65 73 74 69 6f 6e 73 2f 35 39 38 32 37 35 2f 69 6e 74 65 6c 2d | ange.com/questions/598275/intel- |
6d5e0 | 61 78 32 30 30 2d 61 70 2d 6d 6f 64 65 2e 20 59 6f 75 20 63 61 6e 20 73 74 69 6c 6c 20 70 75 74 | ax200-ap-mode..You.can.still.put |
6d600 | 20 74 68 69 73 20 63 61 72 64 20 69 6e 74 6f 20 41 50 20 6d 6f 64 65 20 75 73 69 6e 67 20 74 68 | .this.card.into.AP.mode.using.th |
6d620 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 54 68 65 20 4f | e.following.configuration:.The.O |
6d640 | 49 44 20 60 60 2e 31 2e 33 2e 36 2e 31 2e 34 2e 31 2e 38 30 37 32 2e 31 2e 33 2e 32 2e 33 2e 31 | ID.``.1.3.6.1.4.1.8072.1.3.2.3.1 |
6d660 | 2e 31 2e 34 2e 31 31 36 2e 31 30 31 2e 31 31 35 2e 31 31 36 60 60 2c 20 6f 6e 63 65 20 63 61 6c | .1.4.116.101.115.116``,.once.cal |
6d680 | 6c 65 64 2c 20 77 69 6c 6c 20 63 6f 6e 74 61 69 6e 20 74 68 65 20 6f 75 74 70 75 74 20 6f 66 20 | led,.will.contain.the.output.of. |
6d6a0 | 74 68 65 20 65 78 74 65 6e 73 69 6f 6e 2e 00 54 68 65 20 50 6f 69 6e 74 2d 74 6f 2d 50 6f 69 6e | the.extension..The.Point-to-Poin |
6d6c0 | 74 20 54 75 6e 6e 65 6c 69 6e 67 20 50 72 6f 74 6f 63 6f 6c 20 28 50 50 54 50 5f 29 20 68 61 73 | t.Tunneling.Protocol.(PPTP_).has |
6d6e0 | 20 62 65 65 6e 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 69 6e 20 56 79 4f 53 20 6f 6e 6c 79 20 66 | .been.implemented.in.VyOS.only.f |
6d700 | 6f 72 20 62 61 63 6b 77 61 72 64 73 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 2e 20 50 50 54 50 | or.backwards.compatibility..PPTP |
6d720 | 20 68 61 73 20 6d 61 6e 79 20 77 65 6c 6c 20 6b 6e 6f 77 6e 20 73 65 63 75 72 69 74 79 20 69 73 | .has.many.well.known.security.is |
6d740 | 73 75 65 73 20 61 6e 64 20 79 6f 75 20 73 68 6f 75 6c 64 20 75 73 65 20 6f 6e 65 20 6f 66 20 74 | sues.and.you.should.use.one.of.t |
6d760 | 68 65 20 6d 61 6e 79 20 6f 74 68 65 72 20 6e 65 77 20 56 50 4e 20 69 6d 70 6c 65 6d 65 6e 74 61 | he.many.other.new.VPN.implementa |
6d780 | 74 69 6f 6e 73 2e 00 54 68 65 20 50 6f 77 65 72 44 4e 53 20 72 65 63 75 72 73 6f 72 20 68 61 73 | tions..The.PowerDNS.recursor.has |
6d7a0 | 20 35 20 64 69 66 66 65 72 65 6e 74 20 6c 65 76 65 6c 73 20 6f 66 20 44 4e 53 53 45 43 20 70 72 | .5.different.levels.of.DNSSEC.pr |
6d7c0 | 6f 63 65 73 73 69 6e 67 2c 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 73 65 74 20 77 69 74 68 20 | ocessing,.which.can.be.set.with. |
6d7e0 | 74 68 65 20 64 6e 73 73 65 63 20 73 65 74 74 69 6e 67 2e 20 49 6e 20 6f 72 64 65 72 20 66 72 6f | the.dnssec.setting..In.order.fro |
6d800 | 6d 20 6c 65 61 73 74 20 74 6f 20 6d 6f 73 74 20 70 72 6f 63 65 73 73 69 6e 67 2c 20 74 68 65 73 | m.least.to.most.processing,.thes |
6d820 | 65 20 61 72 65 3a 00 54 68 65 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 69 73 20 61 20 63 | e.are:.The.Priority.Queue.is.a.c |
6d840 | 6c 61 73 73 66 75 6c 20 73 63 68 65 64 75 6c 69 6e 67 20 70 6f 6c 69 63 79 2e 20 49 74 20 64 6f | lassful.scheduling.policy..It.do |
6d860 | 65 73 20 6e 6f 74 20 64 65 6c 61 79 20 70 61 63 6b 65 74 73 20 28 50 72 69 6f 72 69 74 79 20 51 | es.not.delay.packets.(Priority.Q |
6d880 | 75 65 75 65 20 69 73 20 6e 6f 74 20 61 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 29 2c 20 69 | ueue.is.not.a.shaping.policy),.i |
6d8a0 | 74 20 73 69 6d 70 6c 79 20 64 65 71 75 65 75 65 73 20 70 61 63 6b 65 74 73 20 61 63 63 6f 72 64 | t.simply.dequeues.packets.accord |
6d8c0 | 69 6e 67 20 74 6f 20 74 68 65 69 72 20 70 72 69 6f 72 69 74 79 2e 00 54 68 65 20 52 41 44 49 55 | ing.to.their.priority..The.RADIU |
6d8e0 | 53 20 61 63 63 6f 75 6e 74 69 6e 67 20 66 65 61 74 75 72 65 20 6d 75 73 74 20 62 65 20 75 73 65 | S.accounting.feature.must.be.use |
6d900 | 64 20 77 69 74 68 20 74 68 65 20 4f 70 65 6e 43 6f 6e 6e 65 63 74 20 61 75 74 68 65 6e 74 69 63 | d.with.the.OpenConnect.authentic |
6d920 | 61 74 69 6f 6e 20 6d 6f 64 65 20 52 41 44 49 55 53 2e 20 49 74 20 63 61 6e 6e 6f 74 20 62 65 20 | ation.mode.RADIUS..It.cannot.be. |
6d940 | 75 73 65 64 20 77 69 74 68 20 6c 6f 63 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 | used.with.local.authentication.. |
6d960 | 59 6f 75 20 6d 75 73 74 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 4f 70 65 6e 43 6f 6e 6e 65 | You.must.configure.the.OpenConne |
6d980 | 63 74 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 6f 64 65 20 74 6f 20 22 72 61 64 69 75 | ct.authentication.mode.to."radiu |
6d9a0 | 73 22 2e 00 54 68 65 20 52 41 44 49 55 53 20 64 69 63 74 69 6f 6e 61 72 69 65 73 20 69 6e 20 56 | s"..The.RADIUS.dictionaries.in.V |
6d9c0 | 79 4f 53 20 61 72 65 20 6c 6f 63 61 74 65 64 20 61 74 20 60 60 2f 75 73 72 2f 73 68 61 72 65 2f | yOS.are.located.at.``/usr/share/ |
6d9e0 | 61 63 63 65 6c 2d 70 70 70 2f 72 61 64 69 75 73 2f 60 60 00 54 68 65 20 53 52 20 73 65 67 6d 65 | accel-ppp/radius/``.The.SR.segme |
6da00 | 6e 74 73 20 61 72 65 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 | nts.are.portions.of.the.network. |
6da20 | 70 61 74 68 20 74 61 6b 65 6e 20 62 79 20 74 68 65 20 70 61 63 6b 65 74 2c 20 61 6e 64 20 61 72 | path.taken.by.the.packet,.and.ar |
6da40 | 65 20 63 61 6c 6c 65 64 20 53 49 44 73 2e 20 41 74 20 65 61 63 68 20 6e 6f 64 65 2c 20 74 68 65 | e.called.SIDs..At.each.node,.the |
6da60 | 20 66 69 72 73 74 20 53 49 44 20 6f 66 20 74 68 65 20 6c 69 73 74 20 69 73 20 72 65 61 64 2c 20 | .first.SID.of.the.list.is.read,. |
6da80 | 65 78 65 63 75 74 65 64 20 61 73 20 61 20 66 6f 72 77 61 72 64 69 6e 67 20 66 75 6e 63 74 69 6f | executed.as.a.forwarding.functio |
6daa0 | 6e 2c 20 61 6e 64 20 6d 61 79 20 62 65 20 70 6f 70 70 65 64 20 74 6f 20 6c 65 74 20 74 68 65 20 | n,.and.may.be.popped.to.let.the. |
6dac0 | 6e 65 78 74 20 6e 6f 64 65 20 72 65 61 64 20 74 68 65 20 6e 65 78 74 20 53 49 44 20 6f 66 20 74 | next.node.read.the.next.SID.of.t |
6dae0 | 68 65 20 6c 69 73 74 2e 20 54 68 65 20 53 49 44 20 6c 69 73 74 20 63 6f 6d 70 6c 65 74 65 6c 79 | he.list..The.SID.list.completely |
6db00 | 20 64 65 74 65 72 6d 69 6e 65 73 20 74 68 65 20 70 61 74 68 20 77 68 65 72 65 20 74 68 65 20 70 | .determines.the.path.where.the.p |
6db20 | 61 63 6b 65 74 20 69 73 20 66 6f 72 77 61 72 64 65 64 2e 00 54 68 65 20 53 68 61 70 65 72 20 70 | acket.is.forwarded..The.Shaper.p |
6db40 | 6f 6c 69 63 79 20 64 6f 65 73 20 6e 6f 74 20 67 75 61 72 61 6e 74 65 65 20 61 20 6c 6f 77 20 64 | olicy.does.not.guarantee.a.low.d |
6db60 | 65 6c 61 79 2c 20 62 75 74 20 69 74 20 64 6f 65 73 20 67 75 61 72 61 6e 74 65 65 20 62 61 6e 64 | elay,.but.it.does.guarantee.band |
6db80 | 77 69 64 74 68 20 74 6f 20 64 69 66 66 65 72 65 6e 74 20 74 72 61 66 66 69 63 20 63 6c 61 73 73 | width.to.different.traffic.class |
6dba0 | 65 73 20 61 6e 64 20 61 6c 73 6f 20 6c 65 74 73 20 79 6f 75 20 64 65 63 69 64 65 20 68 6f 77 20 | es.and.also.lets.you.decide.how. |
6dbc0 | 74 6f 20 61 6c 6c 6f 63 61 74 65 20 6d 6f 72 65 20 74 72 61 66 66 69 63 20 6f 6e 63 65 20 74 68 | to.allocate.more.traffic.once.th |
6dbe0 | 65 20 67 75 61 72 61 6e 74 65 65 73 20 61 72 65 20 6d 65 74 2e 00 54 68 65 20 55 44 50 20 70 6f | e.guarantees.are.met..The.UDP.po |
6dc00 | 72 74 20 6e 75 6d 62 65 72 20 75 73 65 64 20 62 79 20 79 6f 75 72 20 61 70 6c 6c 69 63 61 74 69 | rt.number.used.by.your.apllicati |
6dc20 | 6f 6e 2e 20 49 74 20 69 73 20 6d 61 6e 64 61 74 6f 72 79 20 66 6f 72 20 74 68 69 73 20 6b 69 6e | on..It.is.mandatory.for.this.kin |
6dc40 | 64 20 6f 66 20 6f 70 65 72 61 74 69 6f 6e 2e 00 54 68 65 20 56 58 4c 41 4e 20 73 70 65 63 69 66 | d.of.operation..The.VXLAN.specif |
6dc60 | 69 63 61 74 69 6f 6e 20 77 61 73 20 6f 72 69 67 69 6e 61 6c 6c 79 20 63 72 65 61 74 65 64 20 62 | ication.was.originally.created.b |
6dc80 | 79 20 56 4d 77 61 72 65 2c 20 41 72 69 73 74 61 20 4e 65 74 77 6f 72 6b 73 20 61 6e 64 20 43 69 | y.VMware,.Arista.Networks.and.Ci |
6dca0 | 73 63 6f 2e 20 4f 74 68 65 72 20 62 61 63 6b 65 72 73 20 6f 66 20 74 68 65 20 56 58 4c 41 4e 20 | sco..Other.backers.of.the.VXLAN. |
6dcc0 | 74 65 63 68 6e 6f 6c 6f 67 79 20 69 6e 63 6c 75 64 65 20 48 75 61 77 65 69 2c 20 42 72 6f 61 64 | technology.include.Huawei,.Broad |
6dce0 | 63 6f 6d 2c 20 43 69 74 72 69 78 2c 20 50 69 63 61 38 2c 20 42 69 67 20 53 77 69 74 63 68 20 4e | com,.Citrix,.Pica8,.Big.Switch.N |
6dd00 | 65 74 77 6f 72 6b 73 2c 20 43 75 6d 75 6c 75 73 20 4e 65 74 77 6f 72 6b 73 2c 20 44 65 6c 6c 20 | etworks,.Cumulus.Networks,.Dell. |
6dd20 | 45 4d 43 2c 20 45 72 69 63 73 73 6f 6e 2c 20 4d 65 6c 6c 61 6e 6f 78 2c 20 46 72 65 65 42 53 44 | EMC,.Ericsson,.Mellanox,.FreeBSD |
6dd40 | 2c 20 4f 70 65 6e 42 53 44 2c 20 52 65 64 20 48 61 74 2c 20 4a 6f 79 65 6e 74 2c 20 61 6e 64 20 | ,.OpenBSD,.Red.Hat,.Joyent,.and. |
6dd60 | 4a 75 6e 69 70 65 72 20 4e 65 74 77 6f 72 6b 73 2e 00 54 68 65 20 56 79 4f 53 20 44 4e 53 20 66 | Juniper.Networks..The.VyOS.DNS.f |
6dd80 | 6f 72 77 61 72 64 65 72 20 64 6f 65 73 20 6e 6f 74 20 72 65 71 75 69 72 65 20 61 6e 20 75 70 73 | orwarder.does.not.require.an.ups |
6dda0 | 74 72 65 61 6d 20 44 4e 53 20 73 65 72 76 65 72 2e 20 49 74 20 63 61 6e 20 73 65 72 76 65 20 61 | tream.DNS.server..It.can.serve.a |
6ddc0 | 73 20 61 20 66 75 6c 6c 20 72 65 63 75 72 73 69 76 65 20 44 4e 53 20 73 65 72 76 65 72 20 2d 20 | s.a.full.recursive.DNS.server.-. |
6dde0 | 62 75 74 20 69 74 20 63 61 6e 20 61 6c 73 6f 20 66 6f 72 77 61 72 64 20 71 75 65 72 69 65 73 20 | but.it.can.also.forward.queries. |
6de00 | 74 6f 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 75 70 73 74 72 65 61 6d 20 44 4e 53 20 73 65 72 | to.configurable.upstream.DNS.ser |
6de20 | 76 65 72 73 2e 20 42 79 20 6e 6f 74 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 79 20 75 70 73 | vers..By.not.configuring.any.ups |
6de40 | 74 72 65 61 6d 20 44 4e 53 20 73 65 72 76 65 72 73 20 79 6f 75 20 61 6c 73 6f 20 61 76 6f 69 64 | tream.DNS.servers.you.also.avoid |
6de60 | 20 62 65 69 6e 67 20 74 72 61 63 6b 65 64 20 62 79 20 74 68 65 20 70 72 6f 76 69 64 65 72 20 6f | .being.tracked.by.the.provider.o |
6de80 | 66 20 79 6f 75 72 20 75 70 73 74 72 65 61 6d 20 44 4e 53 20 73 65 72 76 65 72 2e 00 54 68 65 20 | f.your.upstream.DNS.server..The. |
6dea0 | 56 79 4f 53 20 44 4e 53 20 66 6f 72 77 61 72 64 65 72 20 77 69 6c 6c 20 6f 6e 6c 79 20 61 63 63 | VyOS.DNS.forwarder.will.only.acc |
6dec0 | 65 70 74 20 6c 6f 6f 6b 75 70 20 72 65 71 75 65 73 74 73 20 66 72 6f 6d 20 74 68 65 20 4c 41 4e | ept.lookup.requests.from.the.LAN |
6dee0 | 20 73 75 62 6e 65 74 73 20 2d 20 31 39 32 2e 31 36 38 2e 31 2e 30 2f 32 34 20 61 6e 64 20 32 30 | .subnets.-.192.168.1.0/24.and.20 |
6df00 | 30 31 3a 64 62 38 3a 3a 2f 36 34 00 54 68 65 20 56 79 4f 53 20 44 4e 53 20 66 6f 72 77 61 72 64 | 01:db8::/64.The.VyOS.DNS.forward |
6df20 | 65 72 20 77 69 6c 6c 20 6f 6e 6c 79 20 6c 69 73 74 65 6e 20 66 6f 72 20 72 65 71 75 65 73 74 73 | er.will.only.listen.for.requests |
6df40 | 20 6f 6e 20 74 68 65 20 65 74 68 31 20 28 4c 41 4e 29 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 | .on.the.eth1.(LAN).interface.add |
6df60 | 72 65 73 73 65 73 20 2d 20 31 39 32 2e 31 36 38 2e 31 2e 32 35 34 20 66 6f 72 20 49 50 76 34 20 | resses.-.192.168.1.254.for.IPv4. |
6df80 | 61 6e 64 20 32 30 30 31 3a 64 62 38 3a 3a 66 66 66 66 20 66 6f 72 20 49 50 76 36 00 54 68 65 20 | and.2001:db8::ffff.for.IPv6.The. |
6dfa0 | 56 79 4f 53 20 44 4e 53 20 66 6f 72 77 61 72 64 65 72 20 77 69 6c 6c 20 70 61 73 73 20 72 65 76 | VyOS.DNS.forwarder.will.pass.rev |
6dfc0 | 65 72 73 65 20 6c 6f 6f 6b 75 70 73 20 66 6f 72 20 20 31 30 2e 69 6e 2d 61 64 64 72 2e 61 72 70 | erse.lookups.for..10.in-addr.arp |
6dfe0 | 61 2c 20 31 36 38 2e 31 39 32 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 2c 20 31 36 2d 33 31 2e 31 | a,.168.192.in-addr.arpa,.16-31.1 |
6e000 | 37 32 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 20 7a 6f 6e 65 73 20 74 6f 20 75 70 73 74 72 65 61 | 72.in-addr.arpa.zones.to.upstrea |
6e020 | 6d 20 73 65 72 76 65 72 2e 00 54 68 65 20 56 79 4f 53 20 50 4b 49 20 73 75 62 73 79 73 74 65 6d | m.server..The.VyOS.PKI.subsystem |
6e040 | 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 75 73 65 64 20 74 6f 20 61 75 74 6f 6d 61 74 69 63 61 6c | .can.also.be.used.to.automatical |
6e060 | 6c 79 20 72 65 74 72 69 65 76 65 20 43 65 72 74 69 66 69 63 61 74 65 73 20 75 73 69 6e 67 20 74 | ly.retrieve.Certificates.using.t |
6e080 | 68 65 20 3a 61 62 62 72 3a 60 41 43 4d 45 20 28 41 75 74 6f 6d 61 74 69 63 20 43 65 72 74 69 66 | he.:abbr:`ACME.(Automatic.Certif |
6e0a0 | 69 63 61 74 65 20 4d 61 6e 61 67 65 6d 65 6e 74 20 45 6e 76 69 72 6f 6e 6d 65 6e 74 29 60 20 70 | icate.Management.Environment)`.p |
6e0c0 | 72 6f 74 6f 63 6f 6c 2e 00 54 68 65 20 56 79 4f 53 20 63 6f 6e 74 61 69 6e 65 72 20 69 6d 70 6c | rotocol..The.VyOS.container.impl |
6e0e0 | 65 6d 65 6e 74 61 74 69 6f 6e 20 69 73 20 62 61 73 65 64 20 6f 6e 20 60 50 6f 64 6d 61 6e 3c 68 | ementation.is.based.on.`Podman<h |
6e100 | 74 74 70 73 3a 2f 2f 70 6f 64 6d 61 6e 2e 69 6f 2f 3e 60 20 61 73 20 61 20 64 65 61 6d 6f 6e 6c | ttps://podman.io/>`.as.a.deamonl |
6e120 | 65 73 73 20 63 6f 6e 74 61 69 6e 65 72 20 65 6e 67 69 6e 65 2e 00 54 68 65 20 57 41 50 20 69 6e | ess.container.engine..The.WAP.in |
6e140 | 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 68 61 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 | .this.example.has.the.following. |
6e160 | 63 68 61 72 61 63 74 65 72 69 73 74 69 63 73 3a 00 54 68 65 20 57 69 72 65 6c 65 73 73 20 57 69 | characteristics:.The.Wireless.Wi |
6e180 | 64 65 2d 41 72 65 61 2d 4e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 20 70 72 6f 76 69 64 | de-Area-Network.interface.provid |
6e1a0 | 65 73 20 61 63 63 65 73 73 20 28 74 68 72 6f 75 67 68 20 61 20 77 69 72 65 6c 65 73 73 20 6d 6f | es.access.(through.a.wireless.mo |
6e1c0 | 64 65 6d 2f 77 77 61 6e 29 20 74 6f 20 77 69 72 65 6c 65 73 73 20 6e 65 74 77 6f 72 6b 73 20 70 | dem/wwan).to.wireless.networks.p |
6e1e0 | 72 6f 76 69 64 65 64 20 62 79 20 76 61 72 69 6f 75 73 20 63 65 6c 6c 75 6c 61 72 20 70 72 6f 76 | rovided.by.various.cellular.prov |
6e200 | 69 64 65 72 73 2e 00 54 68 65 20 60 60 43 44 60 60 2d 62 69 74 20 69 73 20 68 6f 6e 6f 72 65 64 | iders..The.``CD``-bit.is.honored |
6e220 | 20 63 6f 72 72 65 63 74 6c 79 20 66 6f 72 20 70 72 6f 63 65 73 73 20 61 6e 64 20 76 61 6c 69 64 | .correctly.for.process.and.valid |
6e240 | 61 74 65 2e 20 46 6f 72 20 6c 6f 67 2d 66 61 69 6c 2c 20 66 61 69 6c 75 72 65 73 20 77 69 6c 6c | ate..For.log-fail,.failures.will |
6e260 | 20 62 65 20 6c 6f 67 67 65 64 20 74 6f 6f 2e 00 54 68 65 20 60 60 61 64 64 72 65 73 73 60 60 20 | .be.logged.too..The.``address``. |
6e280 | 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 65 69 74 68 65 72 20 6f 6e 20 74 68 65 20 | can.be.configured.either.on.the. |
6e2a0 | 56 52 52 50 20 69 6e 74 65 72 66 61 63 65 20 6f 72 20 6f 6e 20 6e 6f 74 20 56 52 52 50 20 69 6e | VRRP.interface.or.on.not.VRRP.in |
6e2c0 | 74 65 72 66 61 63 65 2e 00 54 68 65 20 60 60 61 64 64 72 65 73 73 60 60 20 70 61 72 61 6d 65 74 | terface..The.``address``.paramet |
6e2e0 | 65 72 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 20 61 6e 20 49 50 76 34 20 6f 72 20 49 50 76 36 | er.can.be.either.an.IPv4.or.IPv6 |
6e300 | 20 61 64 64 72 65 73 73 2c 20 62 75 74 20 79 6f 75 20 63 61 6e 20 6e 6f 74 20 6d 69 78 20 49 50 | .address,.but.you.can.not.mix.IP |
6e320 | 76 34 20 61 6e 64 20 49 50 76 36 20 69 6e 20 74 68 65 20 73 61 6d 65 20 67 72 6f 75 70 2c 20 61 | v4.and.IPv6.in.the.same.group,.a |
6e340 | 6e 64 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 67 72 6f 75 70 73 20 77 69 | nd.will.need.to.create.groups.wi |
6e360 | 74 68 20 64 69 66 66 65 72 65 6e 74 20 56 52 49 44 73 20 73 70 65 63 69 61 6c 6c 79 20 66 6f 72 | th.different.VRIDs.specially.for |
6e380 | 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 2e 20 49 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 75 | .IPv4.and.IPv6..If.you.want.to.u |
6e3a0 | 73 65 20 49 50 76 34 20 2b 20 49 50 76 36 20 61 64 64 72 65 73 73 20 79 6f 75 20 63 61 6e 20 75 | se.IPv4.+.IPv6.address.you.can.u |
6e3c0 | 73 65 20 6f 70 74 69 6f 6e 20 60 60 65 78 63 6c 75 64 65 64 2d 61 64 64 72 65 73 73 60 60 00 54 | se.option.``excluded-address``.T |
6e3e0 | 68 65 20 60 60 68 74 74 70 60 60 20 73 65 72 76 69 63 65 20 69 73 20 6c 65 73 74 65 6e 73 20 6f | he.``http``.service.is.lestens.o |
6e400 | 6e 20 70 6f 72 74 20 38 30 20 61 6e 64 20 66 6f 72 63 65 20 72 65 64 69 72 65 63 74 73 20 66 72 | n.port.80.and.force.redirects.fr |
6e420 | 6f 6d 20 48 54 54 50 20 74 6f 20 48 54 54 50 53 2e 00 54 68 65 20 60 60 68 74 74 70 73 60 60 20 | om.HTTP.to.HTTPS..The.``https``. |
6e440 | 73 65 72 76 69 63 65 20 6c 69 73 74 65 6e 73 20 6f 6e 20 70 6f 72 74 20 34 34 33 20 77 69 74 68 | service.listens.on.port.443.with |
6e460 | 20 62 61 63 6b 65 6e 64 20 60 62 6b 2d 64 65 66 61 75 6c 74 60 20 74 6f 20 68 61 6e 64 6c 65 20 | .backend.`bk-default`.to.handle. |
6e480 | 48 54 54 50 53 20 74 72 61 66 66 69 63 2e 20 49 74 20 75 73 65 73 20 63 65 72 74 69 66 69 63 61 | HTTPS.traffic..It.uses.certifica |
6e4a0 | 74 65 20 6e 61 6d 65 64 20 60 60 63 65 72 74 60 60 20 66 6f 72 20 53 53 4c 20 74 65 72 6d 69 6e | te.named.``cert``.for.SSL.termin |
6e4c0 | 61 74 69 6f 6e 2e 00 54 68 65 20 60 60 70 65 72 73 69 73 74 65 6e 74 2d 74 75 6e 6e 65 6c 60 60 | ation..The.``persistent-tunnel`` |
6e4e0 | 20 64 69 72 65 63 74 69 76 65 20 77 69 6c 6c 20 61 6c 6c 6f 77 20 75 73 20 74 6f 20 63 6f 6e 66 | .directive.will.allow.us.to.conf |
6e500 | 69 67 75 72 65 20 74 75 6e 6e 65 6c 2d 72 65 6c 61 74 65 64 20 61 74 74 72 69 62 75 74 65 73 2c | igure.tunnel-related.attributes, |
6e520 | 20 73 75 63 68 20 61 73 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 20 61 73 20 77 65 20 77 | .such.as.firewall.policy.as.we.w |
6e540 | 6f 75 6c 64 20 6f 6e 20 61 6e 79 20 6e 6f 72 6d 61 6c 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 | ould.on.any.normal.network.inter |
6e560 | 66 61 63 65 2e 00 54 68 65 20 60 60 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 60 60 20 6d 75 73 | face..The.``source-address``.mus |
6e580 | 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 6f 6e 65 20 6f 66 20 56 79 4f 53 20 69 | t.be.configured.on.one.of.VyOS.i |
6e5a0 | 6e 74 65 72 66 61 63 65 2e 20 42 65 73 74 20 70 72 61 63 74 69 63 65 20 77 6f 75 6c 64 20 62 65 | nterface..Best.practice.would.be |
6e5c0 | 20 61 20 6c 6f 6f 70 62 61 63 6b 20 6f 72 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 2e 00 | .a.loopback.or.dummy.interface.. |
6e5e0 | 54 68 65 20 60 73 68 6f 77 20 62 72 69 64 67 65 60 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f | The.`show.bridge`.operational.co |
6e600 | 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 64 69 73 70 6c 61 79 20 63 6f 6e | mmand.can.be.used.to.display.con |
6e620 | 66 69 67 75 72 65 64 20 62 72 69 64 67 65 73 3a 00 54 68 65 20 61 62 6f 76 65 20 64 69 72 65 63 | figured.bridges:.The.above.direc |
6e640 | 74 6f 72 79 20 61 6e 64 20 64 65 66 61 75 6c 74 2d 63 6f 6e 66 69 67 20 6d 75 73 74 20 62 65 20 | tory.and.default-config.must.be. |
6e660 | 61 20 63 68 69 6c 64 20 64 69 72 65 63 74 6f 72 79 20 6f 66 20 2f 63 6f 6e 66 69 67 2f 61 75 74 | a.child.directory.of./config/aut |
6e680 | 68 2c 20 73 69 6e 63 65 20 66 69 6c 65 73 20 6f 75 74 73 69 64 65 20 74 68 69 73 20 64 69 72 65 | h,.since.files.outside.this.dire |
6e6a0 | 63 74 6f 72 79 20 61 72 65 20 6e 6f 74 20 70 65 72 73 69 73 74 65 64 20 61 66 74 65 72 20 61 6e | ctory.are.not.persisted.after.an |
6e6c0 | 20 69 6d 61 67 65 20 75 70 67 72 61 64 65 2e 00 54 68 65 20 61 63 74 69 6f 6e 20 63 61 6e 20 62 | .image.upgrade..The.action.can.b |
6e6e0 | 65 20 3a 00 54 68 65 20 61 64 64 72 65 73 73 20 74 68 65 20 73 65 72 76 65 72 20 6c 69 73 74 65 | e.:.The.address.the.server.liste |
6e700 | 6e 73 20 74 6f 20 64 75 72 69 6e 67 20 68 74 74 70 2d 30 31 20 63 68 61 6c 6c 65 6e 67 65 00 54 | ns.to.during.http-01.challenge.T |
6e720 | 68 65 20 61 64 76 61 6e 74 61 67 65 20 6f 66 20 74 68 69 73 20 69 73 20 74 68 61 74 20 74 68 65 | he.advantage.of.this.is.that.the |
6e740 | 20 72 6f 75 74 65 2d 73 65 6c 65 63 74 69 6f 6e 20 28 61 74 20 74 68 69 73 20 70 6f 69 6e 74 29 | .route-selection.(at.this.point) |
6e760 | 20 77 69 6c 6c 20 62 65 20 6d 6f 72 65 20 64 65 74 65 72 6d 69 6e 69 73 74 69 63 2e 20 54 68 65 | .will.be.more.deterministic..The |
6e780 | 20 64 69 73 61 64 76 61 6e 74 61 67 65 20 69 73 20 74 68 61 74 20 61 20 66 65 77 20 6f 72 20 65 | .disadvantage.is.that.a.few.or.e |
6e7a0 | 76 65 6e 20 6f 6e 65 20 6c 6f 77 65 73 74 2d 49 44 20 72 6f 75 74 65 72 20 6d 61 79 20 61 74 74 | ven.one.lowest-ID.router.may.att |
6e7c0 | 72 61 63 74 20 61 6c 6c 20 74 72 61 66 66 69 63 20 74 6f 20 6f 74 68 65 72 77 69 73 65 2d 65 71 | ract.all.traffic.to.otherwise-eq |
6e7e0 | 75 61 6c 20 70 61 74 68 73 20 62 65 63 61 75 73 65 20 6f 66 20 74 68 69 73 20 63 68 65 63 6b 2e | ual.paths.because.of.this.check. |
6e800 | 20 49 74 20 6d 61 79 20 69 6e 63 72 65 61 73 65 20 74 68 65 20 70 6f 73 73 69 62 69 6c 69 74 79 | .It.may.increase.the.possibility |
6e820 | 20 6f 66 20 4d 45 44 20 6f 72 20 49 47 50 20 6f 73 63 69 6c 6c 61 74 69 6f 6e 2c 20 75 6e 6c 65 | .of.MED.or.IGP.oscillation,.unle |
6e840 | 73 73 20 6f 74 68 65 72 20 6d 65 61 73 75 72 65 73 20 77 65 72 65 20 74 61 6b 65 6e 20 74 6f 20 | ss.other.measures.were.taken.to. |
6e860 | 61 76 6f 69 64 20 74 68 65 73 65 2e 20 54 68 65 20 65 78 61 63 74 20 62 65 68 61 76 69 6f 75 72 | avoid.these..The.exact.behaviour |
6e880 | 20 77 69 6c 6c 20 62 65 20 73 65 6e 73 69 74 69 76 65 20 74 6f 20 74 68 65 20 69 42 47 50 20 61 | .will.be.sensitive.to.the.iBGP.a |
6e8a0 | 6e 64 20 72 65 66 6c 65 63 74 69 6f 6e 20 74 6f 70 6f 6c 6f 67 79 2e 00 54 68 65 20 61 6c 6c 6f | nd.reflection.topology..The.allo |
6e8c0 | 63 61 74 65 64 20 61 64 64 72 65 73 73 20 62 6c 6f 63 6b 20 69 73 20 31 30 30 2e 36 34 2e 30 2e | cated.address.block.is.100.64.0. |
6e8e0 | 30 2f 31 30 2e 00 54 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 44 75 70 6c 69 63 61 74 65 20 41 64 | 0/10..The.amount.of.Duplicate.Ad |
6e900 | 64 72 65 73 73 20 44 65 74 65 63 74 69 6f 6e 20 70 72 6f 62 65 73 20 74 6f 20 73 65 6e 64 2e 00 | dress.Detection.probes.to.send.. |
6e920 | 54 68 65 20 61 74 74 72 69 62 75 74 65 73 20 3a 63 66 67 63 6d 64 3a 60 70 72 65 66 69 78 2d 6c | The.attributes.:cfgcmd:`prefix-l |
6e940 | 69 73 74 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 64 69 73 74 72 69 62 75 74 65 2d 6c 69 73 | ist`.and.:cfgcmd:`distribute-lis |
6e960 | 74 60 20 61 72 65 20 6d 75 74 75 61 6c 6c 79 20 65 78 63 6c 75 73 69 76 65 2c 20 61 6e 64 20 6f | t`.are.mutually.exclusive,.and.o |
6e980 | 6e 6c 79 20 6f 6e 65 20 63 6f 6d 6d 61 6e 64 20 28 64 69 73 74 72 69 62 75 74 65 2d 6c 69 73 74 | nly.one.command.(distribute-list |
6e9a0 | 20 6f 72 20 70 72 65 66 69 78 2d 6c 69 73 74 29 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 | .or.prefix-list).can.be.applied. |
6e9c0 | 74 6f 20 65 61 63 68 20 69 6e 62 6f 75 6e 64 20 6f 72 20 6f 75 74 62 6f 75 6e 64 20 64 69 72 65 | to.each.inbound.or.outbound.dire |
6e9e0 | 63 74 69 6f 6e 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 6e 65 69 67 68 62 6f 72 2e | ction.for.a.particular.neighbor. |
6ea00 | 00 54 68 65 20 61 76 61 69 6c 61 62 6c 65 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 3c 6d 61 74 63 | .The.available.options.for.<matc |
6ea20 | 68 3e 20 61 72 65 3a 00 54 68 65 20 62 65 6c 6f 77 20 72 65 66 65 72 65 6e 63 65 64 20 49 50 20 | h>.are:.The.below.referenced.IP. |
6ea40 | 61 64 64 72 65 73 73 20 60 31 39 32 2e 30 2e 32 2e 31 60 20 69 73 20 75 73 65 64 20 61 73 20 65 | address.`192.0.2.1`.is.used.as.e |
6ea60 | 78 61 6d 70 6c 65 20 61 64 64 72 65 73 73 20 72 65 70 72 65 73 65 6e 74 69 6e 67 20 61 20 67 6c | xample.address.representing.a.gl |
6ea80 | 6f 62 61 6c 20 75 6e 69 63 61 73 74 20 61 64 64 72 65 73 73 20 75 6e 64 65 72 20 77 68 69 63 68 | obal.unicast.address.under.which |
6eaa0 | 20 74 68 65 20 48 55 42 20 63 61 6e 20 62 65 20 63 6f 6e 74 61 63 74 65 64 20 62 79 20 65 61 63 | .the.HUB.can.be.contacted.by.eac |
6eac0 | 68 20 61 6e 64 20 65 76 65 72 79 20 69 6e 64 69 76 69 64 75 61 6c 20 73 70 6f 6b 65 2e 00 54 68 | h.and.every.individual.spoke..Th |
6eae0 | 65 20 62 6f 6e 64 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 70 72 6f 76 69 64 65 73 20 61 20 6d | e.bonding.interface.provides.a.m |
6eb00 | 65 74 68 6f 64 20 66 6f 72 20 61 67 67 72 65 67 61 74 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 6e | ethod.for.aggregating.multiple.n |
6eb20 | 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 73 20 69 6e 74 6f 20 61 20 73 69 6e 67 6c 65 20 | etwork.interfaces.into.a.single. |
6eb40 | 6c 6f 67 69 63 61 6c 20 22 62 6f 6e 64 65 64 22 20 69 6e 74 65 72 66 61 63 65 2c 20 6f 72 20 4c | logical."bonded".interface,.or.L |
6eb60 | 41 47 2c 20 6f 72 20 65 74 68 65 72 2d 63 68 61 6e 6e 65 6c 2c 20 6f 72 20 70 6f 72 74 2d 63 68 | AG,.or.ether-channel,.or.port-ch |
6eb80 | 61 6e 6e 65 6c 2e 20 54 68 65 20 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 65 20 62 6f 6e 64 65 | annel..The.behavior.of.the.bonde |
6eba0 | 64 20 69 6e 74 65 72 66 61 63 65 73 20 64 65 70 65 6e 64 73 20 75 70 6f 6e 20 74 68 65 20 6d 6f | d.interfaces.depends.upon.the.mo |
6ebc0 | 64 65 3b 20 67 65 6e 65 72 61 6c 6c 79 20 73 70 65 61 6b 69 6e 67 2c 20 6d 6f 64 65 73 20 70 72 | de;.generally.speaking,.modes.pr |
6ebe0 | 6f 76 69 64 65 20 65 69 74 68 65 72 20 68 6f 74 20 73 74 61 6e 64 62 79 20 6f 72 20 6c 6f 61 64 | ovide.either.hot.standby.or.load |
6ec00 | 20 62 61 6c 61 6e 63 69 6e 67 20 73 65 72 76 69 63 65 73 2e 20 41 64 64 69 74 69 6f 6e 61 6c 6c | .balancing.services..Additionall |
6ec20 | 79 2c 20 6c 69 6e 6b 20 69 6e 74 65 67 72 69 74 79 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 6d 61 79 | y,.link.integrity.monitoring.may |
6ec40 | 20 62 65 20 70 65 72 66 6f 72 6d 65 64 2e 00 54 68 65 20 63 61 73 65 20 6f 66 20 69 6e 67 72 65 | .be.performed..The.case.of.ingre |
6ec60 | 73 73 20 73 68 61 70 69 6e 67 00 54 68 65 20 63 6c 69 65 6e 74 2c 20 6f 6e 63 65 20 73 75 63 63 | ss.shaping.The.client,.once.succ |
6ec80 | 65 73 73 66 75 6c 6c 79 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 2c 20 77 69 6c 6c 20 72 65 63 | essfully.authenticated,.will.rec |
6eca0 | 65 69 76 65 20 61 6e 20 49 50 76 34 20 61 6e 64 20 61 6e 20 49 50 76 36 20 2f 36 34 20 61 64 64 | eive.an.IPv4.and.an.IPv6./64.add |
6ecc0 | 72 65 73 73 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 50 50 50 6f 45 20 65 6e 64 70 | ress.to.terminate.the.PPPoE.endp |
6ece0 | 6f 69 6e 74 20 6f 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 73 69 64 65 20 61 6e 64 20 61 20 2f 35 | oint.on.the.client.side.and.a./5 |
6ed00 | 36 20 73 75 62 6e 65 74 20 66 6f 72 20 74 68 65 20 63 6c 69 65 6e 74 73 20 69 6e 74 65 72 6e 61 | 6.subnet.for.the.clients.interna |
6ed20 | 6c 20 75 73 65 2e 00 54 68 65 20 63 6c 69 65 6e 74 2c 20 6f 6e 63 65 20 73 75 63 63 65 73 73 66 | l.use..The.client,.once.successf |
6ed40 | 75 6c 6c 79 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 2c 20 77 69 6c 6c 20 72 65 63 65 69 76 65 | ully.authenticated,.will.receive |
6ed60 | 20 61 6e 20 49 50 76 34 20 61 6e 64 20 61 6e 20 49 50 76 36 20 2f 36 34 20 61 64 64 72 65 73 73 | .an.IPv4.and.an.IPv6./64.address |
6ed80 | 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 70 70 70 6f 65 20 65 6e 64 70 6f 69 6e 74 | .to.terminate.the.pppoe.endpoint |
6eda0 | 20 6f 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 73 69 64 65 20 61 6e 64 20 61 20 2f 35 36 20 73 75 | .on.the.client.side.and.a./56.su |
6edc0 | 62 6e 65 74 20 66 6f 72 20 74 68 65 20 63 6c 69 65 6e 74 73 20 69 6e 74 65 72 6e 61 6c 20 75 73 | bnet.for.the.clients.internal.us |
6ede0 | 65 2e 00 54 68 65 20 63 6c 69 65 6e 74 73 20 3a 61 62 62 72 3a 60 43 50 45 20 28 43 75 73 74 6f | e..The.clients.:abbr:`CPE.(Custo |
6ee00 | 6d 65 72 20 50 72 65 6d 69 73 65 73 20 45 71 75 69 70 6d 65 6e 74 29 60 20 63 61 6e 20 6e 6f 77 | mer.Premises.Equipment)`.can.now |
6ee20 | 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 76 69 61 20 49 50 76 34 20 6f 72 20 49 50 76 36 2e 20 41 | .communicate.via.IPv4.or.IPv6..A |
6ee40 | 6c 6c 20 64 65 76 69 63 65 73 20 62 65 68 69 6e 64 20 60 60 32 30 30 31 3a 64 62 38 3a 3a 61 30 | ll.devices.behind.``2001:db8::a0 |
6ee60 | 30 3a 32 37 66 66 3a 66 65 32 66 3a 64 38 30 36 2f 36 34 60 60 20 63 61 6e 20 75 73 65 20 61 64 | 0:27ff:fe2f:d806/64``.can.use.ad |
6ee80 | 64 72 65 73 73 65 73 20 66 72 6f 6d 20 60 60 32 30 30 31 3a 64 62 38 3a 31 3a 3a 2f 35 36 60 60 | dresses.from.``2001:db8:1::/56`` |
6eea0 | 20 61 6e 64 20 63 61 6e 20 67 6c 6f 62 61 6c 6c 79 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 77 69 | .and.can.globally.communicate.wi |
6eec0 | 74 68 6f 75 74 20 74 68 65 20 6e 65 65 64 20 6f 66 20 61 6e 79 20 4e 41 54 20 72 75 6c 65 73 2e | thout.the.need.of.any.NAT.rules. |
6eee0 | 00 54 68 65 20 63 6f 6d 6d 61 6e 64 20 3a 6f 70 63 6d 64 3a 60 73 68 6f 77 20 69 6e 74 65 72 66 | .The.command.:opcmd:`show.interf |
6ef00 | 61 63 65 73 20 77 69 72 65 67 75 61 72 64 20 77 67 30 31 20 70 75 62 6c 69 63 2d 6b 65 79 60 20 | aces.wireguard.wg01.public-key`. |
6ef20 | 77 69 6c 6c 20 74 68 65 6e 20 73 68 6f 77 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 2c 20 77 | will.then.show.the.public.key,.w |
6ef40 | 68 69 63 68 20 6e 65 65 64 73 20 74 6f 20 62 65 20 73 68 61 72 65 64 20 77 69 74 68 20 74 68 65 | hich.needs.to.be.shared.with.the |
6ef60 | 20 70 65 65 72 2e 00 54 68 65 20 63 6f 6d 6d 61 6e 64 20 61 6c 73 6f 20 67 65 6e 65 72 61 74 65 | .peer..The.command.also.generate |
6ef80 | 73 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 6e 69 70 70 65 64 20 77 68 69 63 68 20 | s.a.configuration.snipped.which. |
6efa0 | 63 61 6e 20 62 65 20 63 6f 70 79 2f 70 61 73 74 65 64 20 69 6e 74 6f 20 74 68 65 20 56 79 4f 53 | can.be.copy/pasted.into.the.VyOS |
6efc0 | 20 43 4c 49 20 69 66 20 6e 65 65 64 65 64 2e 20 54 68 65 20 73 75 70 70 6c 69 65 64 20 60 60 3c | .CLI.if.needed..The.supplied.``< |
6efe0 | 6e 61 6d 65 3e 60 60 20 6f 6e 20 74 68 65 20 43 4c 49 20 77 69 6c 6c 20 62 65 63 6f 6d 65 20 74 | name>``.on.the.CLI.will.become.t |
6f000 | 68 65 20 70 65 65 72 20 6e 61 6d 65 20 69 6e 20 74 68 65 20 73 6e 69 70 70 65 74 2e 00 54 68 65 | he.peer.name.in.the.snippet..The |
6f020 | 20 63 6f 6d 6d 61 6e 64 20 62 65 6c 6f 77 20 65 6e 61 62 6c 65 73 20 69 74 2c 20 61 73 73 75 6d | .command.below.enables.it,.assum |
6f040 | 69 6e 67 20 74 68 65 20 52 41 44 49 55 53 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 68 61 73 20 62 65 | ing.the.RADIUS.connection.has.be |
6f060 | 65 6e 20 73 65 74 75 70 20 61 6e 64 20 69 73 20 77 6f 72 6b 69 6e 67 2e 00 54 68 65 20 63 6f 6d | en.setup.and.is.working..The.com |
6f080 | 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 63 75 72 72 65 6e 74 20 52 49 50 20 73 74 61 74 75 73 | mand.displays.current.RIP.status |
6f0a0 | 2e 20 49 74 20 69 6e 63 6c 75 64 65 73 20 52 49 50 20 74 69 6d 65 72 2c 20 66 69 6c 74 65 72 69 | ..It.includes.RIP.timer,.filteri |
6f0c0 | 6e 67 2c 20 76 65 72 73 69 6f 6e 2c 20 52 49 50 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 | ng,.version,.RIP.enabled.interfa |
6f0e0 | 63 65 20 61 6e 64 20 52 49 50 20 70 65 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 54 68 65 | ce.and.RIP.peer.information..The |
6f100 | 20 63 6f 6d 6d 61 6e 64 20 70 6f 6e 20 54 45 53 54 55 4e 4e 45 4c 20 65 73 74 61 62 6c 69 73 68 | .command.pon.TESTUNNEL.establish |
6f120 | 65 73 20 74 68 65 20 50 50 54 50 20 74 75 6e 6e 65 6c 20 74 6f 20 74 68 65 20 72 65 6d 6f 74 65 | es.the.PPTP.tunnel.to.the.remote |
6f140 | 20 73 79 73 74 65 6d 2e 00 54 68 65 20 63 6f 6d 70 75 74 65 72 73 20 6f 6e 20 61 6e 20 69 6e 74 | .system..The.computers.on.an.int |
6f160 | 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 63 61 6e 20 75 73 65 20 61 6e 79 20 6f 66 20 74 68 65 | ernal.network.can.use.any.of.the |
6f180 | 20 61 64 64 72 65 73 73 65 73 20 73 65 74 20 61 73 69 64 65 20 62 79 20 74 68 65 20 3a 61 62 62 | .addresses.set.aside.by.the.:abb |
6f1a0 | 72 3a 60 49 41 4e 41 20 28 49 6e 74 65 72 6e 65 74 20 41 73 73 69 67 6e 65 64 20 4e 75 6d 62 65 | r:`IANA.(Internet.Assigned.Numbe |
6f1c0 | 72 73 20 41 75 74 68 6f 72 69 74 79 29 60 20 66 6f 72 20 70 72 69 76 61 74 65 20 61 64 64 72 65 | rs.Authority)`.for.private.addre |
6f1e0 | 73 73 69 6e 67 20 28 73 65 65 20 3a 72 66 63 3a 60 31 39 31 38 60 29 2e 20 54 68 65 73 65 20 72 | ssing.(see.:rfc:`1918`)..These.r |
6f200 | 65 73 65 72 76 65 64 20 49 50 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 6e 6f 74 20 69 6e 20 | eserved.IP.addresses.are.not.in. |
6f220 | 75 73 65 20 6f 6e 20 74 68 65 20 49 6e 74 65 72 6e 65 74 2c 20 73 6f 20 61 6e 20 65 78 74 65 72 | use.on.the.Internet,.so.an.exter |
6f240 | 6e 61 6c 20 6d 61 63 68 69 6e 65 20 77 69 6c 6c 20 6e 6f 74 20 64 69 72 65 63 74 6c 79 20 72 6f | nal.machine.will.not.directly.ro |
6f260 | 75 74 65 20 74 6f 20 74 68 65 6d 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 61 64 64 72 65 | ute.to.them..The.following.addre |
6f280 | 73 73 65 73 20 61 72 65 20 72 65 73 65 72 76 65 64 20 66 6f 72 20 70 72 69 76 61 74 65 20 75 73 | sses.are.reserved.for.private.us |
6f2a0 | 65 3a 00 54 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 6c 6f 6f 6b 20 61 | e:.The.configuration.will.look.a |
6f2c0 | 73 20 66 6f 6c 6c 6f 77 73 3a 00 54 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 20 61 62 | s.follows:.The.configurations.ab |
6f2e0 | 6f 76 65 20 77 69 6c 6c 20 64 65 66 61 75 6c 74 20 74 6f 20 75 73 69 6e 67 20 32 35 36 2d 62 69 | ove.will.default.to.using.256-bi |
6f300 | 74 20 41 45 53 20 69 6e 20 47 43 4d 20 6d 6f 64 65 20 66 6f 72 20 65 6e 63 72 79 70 74 69 6f 6e | t.AES.in.GCM.mode.for.encryption |
6f320 | 20 28 69 66 20 62 6f 74 68 20 73 69 64 65 73 20 73 75 70 70 6f 72 74 20 4e 43 50 29 20 61 6e 64 | .(if.both.sides.support.NCP).and |
6f340 | 20 53 48 41 2d 31 20 66 6f 72 20 48 4d 41 43 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 | .SHA-1.for.HMAC.authentication.. |
6f360 | 53 48 41 2d 31 20 69 73 20 63 6f 6e 73 69 64 65 72 65 64 20 77 65 61 6b 2c 20 62 75 74 20 6f 74 | SHA-1.is.considered.weak,.but.ot |
6f380 | 68 65 72 20 68 61 73 68 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 73 20 61 72 65 20 61 76 61 69 6c | her.hashing.algorithms.are.avail |
6f3a0 | 61 62 6c 65 2c 20 61 73 20 61 72 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6c 67 6f 72 69 74 68 | able,.as.are.encryption.algorith |
6f3c0 | 6d 73 3a 00 54 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 65 20 68 6f 77 65 76 65 72 | ms:.The.connection.state.however |
6f3e0 | 20 69 73 20 63 6f 6d 70 6c 65 74 65 6c 79 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 6f 66 20 61 6e | .is.completely.independent.of.an |
6f400 | 79 20 75 70 70 65 72 2d 6c 65 76 65 6c 20 73 74 61 74 65 2c 20 73 75 63 68 20 61 73 20 54 43 50 | y.upper-level.state,.such.as.TCP |
6f420 | 27 73 20 6f 72 20 53 43 54 50 27 73 20 73 74 61 74 65 2e 20 50 61 72 74 20 6f 66 20 74 68 65 20 | 's.or.SCTP's.state..Part.of.the. |
6f440 | 72 65 61 73 6f 6e 20 66 6f 72 20 74 68 69 73 20 69 73 20 74 68 61 74 20 77 68 65 6e 20 6d 65 72 | reason.for.this.is.that.when.mer |
6f460 | 65 6c 79 20 66 6f 72 77 61 72 64 69 6e 67 20 70 61 63 6b 65 74 73 2c 20 69 2e 65 2e 20 6e 6f 20 | ely.forwarding.packets,.i.e..no. |
6f480 | 6c 6f 63 61 6c 20 64 65 6c 69 76 65 72 79 2c 20 74 68 65 20 54 43 50 20 65 6e 67 69 6e 65 20 6d | local.delivery,.the.TCP.engine.m |
6f4a0 | 61 79 20 6e 6f 74 20 6e 65 63 65 73 73 61 72 69 6c 79 20 62 65 20 69 6e 76 6f 6b 65 64 20 61 74 | ay.not.necessarily.be.invoked.at |
6f4c0 | 20 61 6c 6c 2e 20 45 76 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 6c 65 73 73 2d 6d 6f 64 65 20 74 | .all..Even.connectionless-mode.t |
6f4e0 | 72 61 6e 73 6d 69 73 73 69 6f 6e 73 20 73 75 63 68 20 61 73 20 55 44 50 2c 20 49 50 73 65 63 20 | ransmissions.such.as.UDP,.IPsec. |
6f500 | 28 41 48 2f 45 53 50 29 2c 20 47 52 45 20 61 6e 64 20 6f 74 68 65 72 20 74 75 6e 6e 65 6c 69 6e | (AH/ESP),.GRE.and.other.tunnelin |
6f520 | 67 20 70 72 6f 74 6f 63 6f 6c 73 20 68 61 76 65 2c 20 61 74 20 6c 65 61 73 74 2c 20 61 20 70 73 | g.protocols.have,.at.least,.a.ps |
6f540 | 65 75 64 6f 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 65 2e 20 54 68 65 20 68 65 75 72 69 | eudo.connection.state..The.heuri |
6f560 | 73 74 69 63 20 66 6f 72 20 73 75 63 68 20 70 72 6f 74 6f 63 6f 6c 73 20 69 73 20 6f 66 74 65 6e | stic.for.such.protocols.is.often |
6f580 | 20 62 61 73 65 64 20 75 70 6f 6e 20 61 20 70 72 65 73 65 74 20 74 69 6d 65 6f 75 74 20 76 61 6c | .based.upon.a.preset.timeout.val |
6f5a0 | 75 65 20 66 6f 72 20 69 6e 61 63 74 69 76 69 74 79 2c 20 61 66 74 65 72 20 77 68 6f 73 65 20 65 | ue.for.inactivity,.after.whose.e |
6f5c0 | 78 70 69 72 61 74 69 6f 6e 20 61 20 4e 65 74 66 69 6c 74 65 72 20 63 6f 6e 6e 65 63 74 69 6f 6e | xpiration.a.Netfilter.connection |
6f5e0 | 20 69 73 20 64 72 6f 70 70 65 64 2e 00 54 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 | .is.dropped..The.connection.trac |
6f600 | 6b 69 6e 67 20 65 78 70 65 63 74 20 74 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 6f 6e 65 20 65 | king.expect.table.contains.one.e |
6f620 | 6e 74 72 79 20 66 6f 72 20 65 61 63 68 20 65 78 70 65 63 74 65 64 20 63 6f 6e 6e 65 63 74 69 6f | ntry.for.each.expected.connectio |
6f640 | 6e 20 72 65 6c 61 74 65 64 20 74 6f 20 61 6e 20 65 78 69 73 74 69 6e 67 20 63 6f 6e 6e 65 63 74 | n.related.to.an.existing.connect |
6f660 | 69 6f 6e 2e 20 54 68 65 73 65 20 61 72 65 20 67 65 6e 65 72 61 6c 6c 79 20 75 73 65 64 20 62 79 | ion..These.are.generally.used.by |
6f680 | 20 e2 80 9c 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 68 65 6c 70 65 72 e2 80 | ....connection.tracking.helper.. |
6f6a0 | 9d 20 6d 6f 64 75 6c 65 73 20 73 75 63 68 20 61 73 20 46 54 50 2e 20 54 68 65 20 64 65 66 61 75 | ..modules.such.as.FTP..The.defau |
6f6c0 | 6c 74 20 73 69 7a 65 20 6f 66 20 74 68 65 20 65 78 70 65 63 74 20 74 61 62 6c 65 20 69 73 20 32 | lt.size.of.the.expect.table.is.2 |
6f6e0 | 30 34 38 20 65 6e 74 72 69 65 73 2e 00 54 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 | 048.entries..The.connection.trac |
6f700 | 6b 69 6e 67 20 74 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 6f 6e 65 20 65 6e 74 72 79 20 66 6f | king.table.contains.one.entry.fo |
6f720 | 72 20 65 61 63 68 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 62 65 69 6e 67 20 74 72 61 63 6b 65 64 20 | r.each.connection.being.tracked. |
6f740 | 62 79 20 74 68 65 20 73 79 73 74 65 6d 2e 00 54 68 65 20 63 75 72 72 65 6e 74 20 61 74 74 72 69 | by.the.system..The.current.attri |
6f760 | 62 75 74 65 20 27 46 69 6c 74 65 72 2d 49 64 27 20 69 73 20 62 65 69 6e 67 20 75 73 65 64 20 61 | bute.'Filter-Id'.is.being.used.a |
6f780 | 73 20 64 65 66 61 75 6c 74 20 61 6e 64 20 63 61 6e 20 62 65 20 73 65 74 75 70 20 77 69 74 68 69 | s.default.and.can.be.setup.withi |
6f7a0 | 6e 20 52 41 44 49 55 53 3a 00 54 68 65 20 63 75 72 72 65 6e 74 20 61 74 74 72 69 62 75 74 65 20 | n.RADIUS:.The.current.attribute. |
6f7c0 | 60 60 46 69 6c 74 65 72 2d 49 64 60 60 20 69 73 20 62 65 69 6e 67 20 75 73 65 64 20 61 73 20 64 | ``Filter-Id``.is.being.used.as.d |
6f7e0 | 65 66 61 75 6c 74 20 61 6e 64 20 63 61 6e 20 62 65 20 73 65 74 75 70 20 77 69 74 68 69 6e 20 52 | efault.and.can.be.setup.within.R |
6f800 | 41 44 49 55 53 3a 00 54 68 65 20 63 75 72 72 65 6e 74 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 76 | ADIUS:.The.current.protocol.is.v |
6f820 | 65 72 73 69 6f 6e 20 34 20 28 4e 54 50 76 34 29 2c 20 77 68 69 63 68 20 69 73 20 61 20 70 72 6f | ersion.4.(NTPv4),.which.is.a.pro |
6f840 | 70 6f 73 65 64 20 73 74 61 6e 64 61 72 64 20 61 73 20 64 6f 63 75 6d 65 6e 74 65 64 20 69 6e 20 | posed.standard.as.documented.in. |
6f860 | 3a 72 66 63 3a 60 35 39 30 35 60 2e 20 49 74 20 69 73 20 62 61 63 6b 77 61 72 64 20 63 6f 6d 70 | :rfc:`5905`..It.is.backward.comp |
6f880 | 61 74 69 62 6c 65 20 77 69 74 68 20 76 65 72 73 69 6f 6e 20 33 2c 20 73 70 65 63 69 66 69 65 64 | atible.with.version.3,.specified |
6f8a0 | 20 69 6e 20 3a 72 66 63 3a 60 31 33 30 35 60 2e 00 54 68 65 20 64 61 65 6d 6f 6e 20 64 6f 75 62 | .in.:rfc:`1305`..The.daemon.doub |
6f8c0 | 6c 65 73 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 6e 65 74 6c 69 6e 6b 20 65 76 65 6e | les.the.size.of.the.netlink.even |
6f8e0 | 74 20 73 6f 63 6b 65 74 20 62 75 66 66 65 72 20 73 69 7a 65 20 69 66 20 69 74 20 64 65 74 65 63 | t.socket.buffer.size.if.it.detec |
6f900 | 74 73 20 6e 65 74 6c 69 6e 6b 20 65 76 65 6e 74 20 6d 65 73 73 61 67 65 20 64 72 6f 70 70 69 6e | ts.netlink.event.message.droppin |
6f920 | 67 2e 20 54 68 69 73 20 63 6c 61 75 73 65 20 73 65 74 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 | g..This.clause.sets.the.maximum. |
6f940 | 62 75 66 66 65 72 20 73 69 7a 65 20 67 72 6f 77 74 68 20 74 68 61 74 20 63 61 6e 20 62 65 20 72 | buffer.size.growth.that.can.be.r |
6f960 | 65 61 63 68 65 64 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 52 41 44 49 55 53 20 61 74 74 72 69 | eached..The.default.RADIUS.attri |
6f980 | 62 75 74 65 20 66 6f 72 20 72 61 74 65 20 6c 69 6d 69 74 69 6e 67 20 69 73 20 60 60 46 69 6c 74 | bute.for.rate.limiting.is.``Filt |
6f9a0 | 65 72 2d 49 64 60 60 2c 20 62 75 74 20 79 6f 75 20 6d 61 79 20 61 6c 73 6f 20 72 65 64 65 66 69 | er-Id``,.but.you.may.also.redefi |
6f9c0 | 6e 65 20 69 74 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 56 79 4f 53 20 75 73 65 72 20 61 63 63 | ne.it..The.default.VyOS.user.acc |
6f9e0 | 6f 75 6e 74 20 28 60 76 79 6f 73 60 29 2c 20 61 73 20 77 65 6c 6c 20 61 73 20 6e 65 77 6c 79 20 | ount.(`vyos`),.as.well.as.newly. |
6fa00 | 63 72 65 61 74 65 64 20 75 73 65 72 20 61 63 63 6f 75 6e 74 73 2c 20 68 61 76 65 20 61 6c 6c 20 | created.user.accounts,.have.all. |
6fa20 | 63 61 70 61 62 69 6c 69 74 69 65 73 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 73 79 | capabilities.to.configure.the.sy |
6fa40 | 73 74 65 6d 2e 20 41 6c 6c 20 61 63 63 6f 75 6e 74 73 20 68 61 76 65 20 73 75 64 6f 20 63 61 70 | stem..All.accounts.have.sudo.cap |
6fa60 | 61 62 69 6c 69 74 69 65 73 20 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 63 61 6e 20 6f 70 65 72 | abilities.and.therefore.can.oper |
6fa80 | 61 74 65 20 61 73 20 72 6f 6f 74 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 00 54 68 65 20 64 | ate.as.root.on.the.system..The.d |
6faa0 | 65 66 61 75 6c 74 20 68 6f 73 74 6e 61 6d 65 20 75 73 65 64 20 69 73 20 60 76 79 6f 73 60 2e 00 | efault.hostname.used.is.`vyos`.. |
6fac0 | 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 34 39 32 2e 00 54 68 65 20 64 65 66 61 75 6c 74 | The.default.is.1492..The.default |
6fae0 | 20 69 73 20 60 60 38 30 32 2e 31 71 60 60 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 6c 65 61 73 | .is.``802.1q``..The.default.leas |
6fb00 | 65 20 74 69 6d 65 20 66 6f 72 20 44 48 43 50 76 36 20 6c 65 61 73 65 73 20 69 73 20 32 34 20 68 | e.time.for.DHCPv6.leases.is.24.h |
6fb20 | 6f 75 72 73 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 63 68 61 6e 67 65 64 20 62 79 20 73 75 70 | ours..This.can.be.changed.by.sup |
6fb40 | 70 6c 79 69 6e 67 20 61 20 60 60 64 65 66 61 75 6c 74 2d 74 69 6d 65 60 60 2c 20 60 60 6d 61 78 | plying.a.``default-time``,.``max |
6fb60 | 69 6d 75 6d 2d 74 69 6d 65 60 60 20 61 6e 64 20 60 60 6d 69 6e 69 6d 75 6d 2d 74 69 6d 65 60 60 | imum-time``.and.``minimum-time`` |
6fb80 | 2e 20 41 6c 6c 20 76 61 6c 75 65 73 20 6e 65 65 64 20 74 6f 20 62 65 20 73 75 70 70 6c 69 65 64 | ..All.values.need.to.be.supplied |
6fba0 | 20 69 6e 20 73 65 63 6f 6e 64 73 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 70 6f 72 74 20 75 64 | .in.seconds..The.default.port.ud |
6fbc0 | 70 20 69 73 20 73 65 74 20 74 6f 20 38 34 37 32 2e 20 49 74 20 63 61 6e 20 62 65 20 63 68 61 6e | p.is.set.to.8472..It.can.be.chan |
6fbe0 | 67 65 64 20 77 69 74 68 20 60 60 73 65 74 20 69 6e 74 65 72 66 61 63 65 20 76 78 6c 61 6e 20 3c | ged.with.``set.interface.vxlan.< |
6fc00 | 76 78 6c 61 6e 4e 3e 20 70 6f 72 74 20 3c 70 6f 72 74 3e 60 60 00 54 68 65 20 64 65 66 61 75 6c | vxlanN>.port.<port>``.The.defaul |
6fc20 | 74 20 74 69 6d 65 20 69 73 20 36 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 65 20 64 65 66 61 75 6c | t.time.is.60.seconds..The.defaul |
6fc40 | 74 20 76 61 6c 75 65 20 63 6f 72 72 65 73 70 6f 6e 64 73 20 74 6f 20 36 34 2e 00 54 68 65 20 64 | t.value.corresponds.to.64..The.d |
6fc60 | 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 30 2e 20 54 68 69 73 20 77 69 6c 6c 20 63 61 75 | efault.value.is.0..This.will.cau |
6fc80 | 73 65 20 74 68 65 20 63 61 72 72 69 65 72 20 74 6f 20 62 65 20 61 73 73 65 72 74 65 64 20 28 66 | se.the.carrier.to.be.asserted.(f |
6fca0 | 6f 72 20 38 30 32 2e 33 61 64 20 6d 6f 64 65 29 20 77 68 65 6e 65 76 65 72 20 74 68 65 72 65 20 | or.802.3ad.mode).whenever.there. |
6fcc0 | 69 73 20 61 6e 20 61 63 74 69 76 65 20 61 67 67 72 65 67 61 74 6f 72 2c 20 72 65 67 61 72 64 6c | is.an.active.aggregator,.regardl |
6fce0 | 65 73 73 20 6f 66 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 61 76 61 69 6c 61 62 6c 65 20 6c | ess.of.the.number.of.available.l |
6fd00 | 69 6e 6b 73 20 69 6e 20 74 68 61 74 20 61 67 67 72 65 67 61 74 6f 72 2e 00 54 68 65 20 64 65 66 | inks.in.that.aggregator..The.def |
6fd20 | 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 33 20 70 61 63 6b 65 74 73 2e 00 54 68 65 20 64 65 66 | ault.value.is.3.packets..The.def |
6fd40 | 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 33 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c | ault.value.is.3..The.default.val |
6fd60 | 75 65 20 69 73 20 33 30 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 | ue.is.300.seconds..The.default.v |
6fd80 | 61 6c 75 65 20 69 73 20 36 30 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 65 20 64 65 66 61 75 6c 74 | alue.is.600.seconds..The.default |
6fda0 | 20 76 61 6c 75 65 20 69 73 20 37 32 30 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 65 20 64 65 66 61 | .value.is.7200.seconds..The.defa |
6fdc0 | 75 6c 74 20 76 61 6c 75 65 20 69 73 20 38 36 34 30 30 20 73 65 63 6f 6e 64 73 20 77 68 69 63 68 | ult.value.is.86400.seconds.which |
6fde0 | 20 63 6f 72 72 65 73 70 6f 6e 64 73 20 74 6f 20 6f 6e 65 20 64 61 79 2e 00 54 68 65 20 64 65 66 | .corresponds.to.one.day..The.def |
6fe00 | 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 73 6c 6f 77 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 | ault.value.is.slow..The.default. |
6fe20 | 76 61 6c 75 65 73 20 66 6f 72 20 74 68 65 20 6d 69 6e 69 6d 75 6d 2d 74 68 72 65 73 68 6f 6c 64 | values.for.the.minimum-threshold |
6fe40 | 20 64 65 70 65 6e 64 20 6f 6e 20 49 50 20 70 72 65 63 65 64 65 6e 63 65 3a 00 54 68 65 20 64 65 | .depend.on.IP.precedence:.The.de |
6fe60 | 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 75 73 65 64 20 66 6f 72 20 63 72 65 61 74 69 6e 67 | stination.port.used.for.creating |
6fe80 | 20 61 20 56 58 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 4c 69 6e 75 78 20 64 65 66 61 | .a.VXLAN.interface.in.Linux.defa |
6fea0 | 75 6c 74 73 20 74 6f 20 69 74 73 20 70 72 65 2d 73 74 61 6e 64 61 72 64 20 76 61 6c 75 65 20 6f | ults.to.its.pre-standard.value.o |
6fec0 | 66 20 38 34 37 32 20 74 6f 20 70 72 65 73 65 72 76 65 20 62 61 63 6b 77 61 72 64 20 63 6f 6d 70 | f.8472.to.preserve.backward.comp |
6fee0 | 61 74 69 62 69 6c 69 74 79 2e 20 41 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 64 69 72 65 63 | atibility..A.configuration.direc |
6ff00 | 74 69 76 65 20 74 6f 20 73 75 70 70 6f 72 74 20 61 20 75 73 65 72 2d 73 70 65 63 69 66 69 65 64 | tive.to.support.a.user-specified |
6ff20 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 74 6f 20 6f 76 65 72 72 69 64 65 20 74 68 | .destination.port.to.override.th |
6ff40 | 61 74 20 62 65 68 61 76 69 6f 72 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 75 73 69 6e 67 20 74 | at.behavior.is.available.using.t |
6ff60 | 68 65 20 61 62 6f 76 65 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 65 20 64 65 76 69 63 65 20 63 61 6e | he.above.command..The.device.can |
6ff80 | 20 6f 6e 6c 79 20 72 65 63 65 69 76 65 20 70 61 63 6b 65 74 73 20 77 69 74 68 20 56 4e 49 73 20 | .only.receive.packets.with.VNIs. |
6ffa0 | 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 74 68 65 20 56 4e 49 20 66 69 6c 74 65 72 69 6e 67 20 | configured.in.the.VNI.filtering. |
6ffc0 | 74 61 62 6c 65 2e 00 54 68 65 20 64 69 61 6c 6f 67 75 65 20 62 65 74 77 65 65 6e 20 48 41 20 70 | table..The.dialogue.between.HA.p |
6ffe0 | 61 72 74 6e 65 72 73 20 69 73 20 6e 65 69 74 68 65 72 20 65 6e 63 72 79 70 74 65 64 20 6e 6f 72 | artners.is.neither.encrypted.nor |
70000 | 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 2e 20 53 69 6e 63 65 20 6d 6f 73 74 20 44 48 43 50 20 | .authenticated..Since.most.DHCP. |
70020 | 73 65 72 76 65 72 73 20 65 78 69 73 74 20 77 69 74 68 69 6e 20 61 6e 20 6f 72 67 61 6e 69 73 61 | servers.exist.within.an.organisa |
70040 | 74 69 6f 6e 27 73 20 6f 77 6e 20 73 65 63 75 72 65 20 49 6e 74 72 61 6e 65 74 2c 20 74 68 69 73 | tion's.own.secure.Intranet,.this |
70060 | 20 77 6f 75 6c 64 20 62 65 20 61 6e 20 75 6e 6e 65 63 65 73 73 61 72 79 20 6f 76 65 72 68 65 61 | .would.be.an.unnecessary.overhea |
70080 | 64 2e 20 48 6f 77 65 76 65 72 2c 20 69 66 20 79 6f 75 20 68 61 76 65 20 44 48 43 50 20 48 41 20 | d..However,.if.you.have.DHCP.HA. |
700a0 | 70 65 65 72 73 20 77 68 6f 73 65 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 20 74 72 61 76 65 | peers.whose.communications.trave |
700c0 | 72 73 65 20 69 6e 73 65 63 75 72 65 20 6e 65 74 77 6f 72 6b 73 2c 20 74 68 65 6e 20 77 65 20 72 | rse.insecure.networks,.then.we.r |
700e0 | 65 63 6f 6d 6d 65 6e 64 20 74 68 61 74 20 79 6f 75 20 63 6f 6e 73 69 64 65 72 20 74 68 65 20 75 | ecommend.that.you.consider.the.u |
70100 | 73 65 20 6f 66 20 56 50 4e 20 74 75 6e 6e 65 6c 69 6e 67 20 62 65 74 77 65 65 6e 20 74 68 65 6d | se.of.VPN.tunneling.between.them |
70120 | 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 20 48 41 20 70 61 72 74 6e 65 72 73 68 | .to.ensure.that.the.HA.partnersh |
70140 | 69 70 20 69 73 20 69 6d 6d 75 6e 65 20 74 6f 20 64 69 73 72 75 70 74 69 6f 6e 20 28 61 63 63 69 | ip.is.immune.to.disruption.(acci |
70160 | 64 65 6e 74 61 6c 20 6f 72 20 6f 74 68 65 72 77 69 73 65 29 20 76 69 61 20 74 68 69 72 64 20 70 | dental.or.otherwise).via.third.p |
70180 | 61 72 74 69 65 73 2e 00 54 68 65 20 64 69 61 6c 6f 67 75 65 20 62 65 74 77 65 65 6e 20 66 61 69 | arties..The.dialogue.between.fai |
701a0 | 6c 6f 76 65 72 20 70 61 72 74 6e 65 72 73 20 69 73 20 6e 65 69 74 68 65 72 20 65 6e 63 72 79 70 | lover.partners.is.neither.encryp |
701c0 | 74 65 64 20 6e 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 2e 20 53 69 6e 63 65 20 6d 6f 73 | ted.nor.authenticated..Since.mos |
701e0 | 74 20 44 48 43 50 20 73 65 72 76 65 72 73 20 65 78 69 73 74 20 77 69 74 68 69 6e 20 61 6e 20 6f | t.DHCP.servers.exist.within.an.o |
70200 | 72 67 61 6e 69 73 61 74 69 6f 6e 27 73 20 6f 77 6e 20 73 65 63 75 72 65 20 49 6e 74 72 61 6e 65 | rganisation's.own.secure.Intrane |
70220 | 74 2c 20 74 68 69 73 20 77 6f 75 6c 64 20 62 65 20 61 6e 20 75 6e 6e 65 63 65 73 73 61 72 79 20 | t,.this.would.be.an.unnecessary. |
70240 | 6f 76 65 72 68 65 61 64 2e 20 48 6f 77 65 76 65 72 2c 20 69 66 20 79 6f 75 20 68 61 76 65 20 44 | overhead..However,.if.you.have.D |
70260 | 48 43 50 20 66 61 69 6c 6f 76 65 72 20 70 65 65 72 73 20 77 68 6f 73 65 20 63 6f 6d 6d 75 6e 69 | HCP.failover.peers.whose.communi |
70280 | 63 61 74 69 6f 6e 73 20 74 72 61 76 65 72 73 65 20 69 6e 73 65 63 75 72 65 20 6e 65 74 77 6f 72 | cations.traverse.insecure.networ |
702a0 | 6b 73 2c 20 74 68 65 6e 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 74 68 61 74 20 79 6f 75 20 63 | ks,.then.we.recommend.that.you.c |
702c0 | 6f 6e 73 69 64 65 72 20 74 68 65 20 75 73 65 20 6f 66 20 56 50 4e 20 74 75 6e 6e 65 6c 69 6e 67 | onsider.the.use.of.VPN.tunneling |
702e0 | 20 62 65 74 77 65 65 6e 20 74 68 65 6d 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 | .between.them.to.ensure.that.the |
70300 | 20 66 61 69 6c 6f 76 65 72 20 70 61 72 74 6e 65 72 73 68 69 70 20 69 73 20 69 6d 6d 75 6e 65 20 | .failover.partnership.is.immune. |
70320 | 74 6f 20 64 69 73 72 75 70 74 69 6f 6e 20 28 61 63 63 69 64 65 6e 74 61 6c 20 6f 72 20 6f 74 68 | to.disruption.(accidental.or.oth |
70340 | 65 72 77 69 73 65 29 20 76 69 61 20 74 68 69 72 64 20 70 61 72 74 69 65 73 2e 00 54 68 65 20 64 | erwise).via.third.parties..The.d |
70360 | 6f 6d 61 69 6e 2d 6e 61 6d 65 20 70 61 72 61 6d 65 74 65 72 20 73 68 6f 75 6c 64 20 62 65 20 74 | omain-name.parameter.should.be.t |
70380 | 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 74 68 61 74 20 77 69 6c 6c 20 62 65 20 61 70 70 65 | he.domain.name.that.will.be.appe |
703a0 | 6e 64 65 64 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 27 73 20 68 6f 73 74 6e 61 6d 65 20 74 6f | nded.to.the.client's.hostname.to |
703c0 | 20 66 6f 72 6d 20 61 20 66 75 6c 6c 79 2d 71 75 61 6c 69 66 69 65 64 20 64 6f 6d 61 69 6e 2d 6e | .form.a.fully-qualified.domain-n |
703e0 | 61 6d 65 20 28 46 51 44 4e 29 20 28 44 48 43 50 20 4f 70 74 69 6f 6e 20 30 31 35 29 2e 00 54 68 | ame.(FQDN).(DHCP.Option.015)..Th |
70400 | 65 20 64 6f 6d 61 69 6e 2d 6e 61 6d 65 20 70 61 72 61 6d 65 74 65 72 20 73 68 6f 75 6c 64 20 62 | e.domain-name.parameter.should.b |
70420 | 65 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 75 73 65 64 20 77 68 65 6e 20 63 6f 6d 70 | e.the.domain.name.used.when.comp |
70440 | 6c 65 74 69 6e 67 20 44 4e 53 20 72 65 71 75 65 73 74 20 77 68 65 72 65 20 6e 6f 20 66 75 6c 6c | leting.DNS.request.where.no.full |
70460 | 20 46 51 44 4e 20 69 73 20 70 61 73 73 65 64 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 63 61 6e | .FQDN.is.passed..This.option.can |
70480 | 20 62 65 20 67 69 76 65 6e 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 20 69 66 20 79 6f 75 20 | .be.given.multiple.times.if.you. |
704a0 | 6e 65 65 64 20 6d 75 6c 74 69 70 6c 65 20 73 65 61 72 63 68 20 64 6f 6d 61 69 6e 73 20 28 44 48 | need.multiple.search.domains.(DH |
704c0 | 43 50 20 4f 70 74 69 6f 6e 20 31 31 39 29 2e 00 54 68 65 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 | CP.Option.119)..The.dummy.interf |
704e0 | 61 63 65 20 61 6c 6c 6f 77 73 20 75 73 20 74 6f 20 68 61 76 65 20 61 6e 20 65 71 75 69 76 61 6c | ace.allows.us.to.have.an.equival |
70500 | 65 6e 74 20 6f 66 20 74 68 65 20 43 69 73 63 6f 20 49 4f 53 20 4c 6f 6f 70 62 61 63 6b 20 69 6e | ent.of.the.Cisco.IOS.Loopback.in |
70520 | 74 65 72 66 61 63 65 20 2d 20 61 20 72 6f 75 74 65 72 2d 69 6e 74 65 72 6e 61 6c 20 69 6e 74 65 | terface.-.a.router-internal.inte |
70540 | 72 66 61 63 65 20 77 65 20 63 61 6e 20 75 73 65 20 66 6f 72 20 49 50 20 61 64 64 72 65 73 73 65 | rface.we.can.use.for.IP.addresse |
70560 | 73 20 74 68 65 20 72 6f 75 74 65 72 20 6d 75 73 74 20 6b 6e 6f 77 20 61 62 6f 75 74 2c 20 62 75 | s.the.router.must.know.about,.bu |
70580 | 74 20 77 68 69 63 68 20 61 72 65 20 6e 6f 74 20 61 63 74 75 61 6c 6c 79 20 61 73 73 69 67 6e 65 | t.which.are.not.actually.assigne |
705a0 | 64 20 74 6f 20 61 20 72 65 61 6c 20 6e 65 74 77 6f 72 6b 2e 00 54 68 65 20 64 75 6d 6d 79 20 69 | d.to.a.real.network..The.dummy.i |
705c0 | 6e 74 65 72 66 61 63 65 20 69 73 20 72 65 61 6c 6c 79 20 61 20 6c 69 74 74 6c 65 20 65 78 6f 74 | nterface.is.really.a.little.exot |
705e0 | 69 63 2c 20 62 75 74 20 72 61 74 68 65 72 20 75 73 65 66 75 6c 20 6e 65 76 65 72 74 68 65 6c 65 | ic,.but.rather.useful.neverthele |
70600 | 73 73 2e 20 44 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 6d 75 63 68 20 6c 69 | ss..Dummy.interfaces.are.much.li |
70620 | 6b 65 20 74 68 65 20 3a 72 65 66 3a 60 6c 6f 6f 70 62 61 63 6b 2d 69 6e 74 65 72 66 61 63 65 60 | ke.the.:ref:`loopback-interface` |
70640 | 20 69 6e 74 65 72 66 61 63 65 2c 20 65 78 63 65 70 74 20 79 6f 75 20 63 61 6e 20 68 61 76 65 20 | .interface,.except.you.can.have. |
70660 | 61 73 20 6d 61 6e 79 20 61 73 20 79 6f 75 20 77 61 6e 74 2e 00 54 68 65 20 65 6d 62 65 64 64 65 | as.many.as.you.want..The.embedde |
70680 | 64 20 53 71 75 69 64 20 70 72 6f 78 79 20 63 61 6e 20 75 73 65 20 4c 44 41 50 20 74 6f 20 61 75 | d.Squid.proxy.can.use.LDAP.to.au |
706a0 | 74 68 65 6e 74 69 63 61 74 65 20 75 73 65 72 73 20 61 67 61 69 6e 73 74 20 61 20 63 6f 6d 70 61 | thenticate.users.against.a.compa |
706c0 | 6e 79 20 77 69 64 65 20 64 69 72 65 63 74 6f 72 79 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | ny.wide.directory..The.following |
706e0 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 61 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 | .configuration.is.an.example.of. |
70700 | 68 6f 77 20 74 6f 20 75 73 65 20 41 63 74 69 76 65 20 44 69 72 65 63 74 6f 72 79 20 61 73 20 61 | how.to.use.Active.Directory.as.a |
70720 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 61 63 6b 65 6e 64 2e 20 51 75 65 72 69 65 73 20 61 | uthentication.backend..Queries.a |
70740 | 72 65 20 64 6f 6e 65 20 76 69 61 20 4c 44 41 50 2e 00 54 68 65 20 65 78 61 6d 70 6c 65 20 61 62 | re.done.via.LDAP..The.example.ab |
70760 | 6f 76 65 20 75 73 65 73 20 31 39 32 2e 30 2e 32 2e 32 20 61 73 20 65 78 74 65 72 6e 61 6c 20 49 | ove.uses.192.0.2.2.as.external.I |
70780 | 50 20 61 64 64 72 65 73 73 2e 20 41 20 4c 41 43 20 6e 6f 72 6d 61 6c 6c 79 20 72 65 71 75 69 72 | P.address..A.LAC.normally.requir |
707a0 | 65 73 20 61 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 70 61 73 73 77 6f 72 64 2c 20 77 | es.an.authentication.password,.w |
707c0 | 68 69 63 68 20 69 73 20 73 65 74 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 63 6f 6e 66 69 | hich.is.set.in.the.example.confi |
707e0 | 67 75 72 61 74 69 6f 6e 20 74 6f 20 60 60 6c 6e 73 20 73 68 61 72 65 64 2d 73 65 63 72 65 74 20 | guration.to.``lns.shared-secret. |
70800 | 27 73 65 63 72 65 74 27 60 60 2e 20 54 68 69 73 20 73 65 74 75 70 20 72 65 71 75 69 72 65 73 20 | 'secret'``..This.setup.requires. |
70820 | 74 68 65 20 43 6f 6d 70 72 65 73 73 69 6f 6e 20 43 6f 6e 74 72 6f 6c 20 50 72 6f 74 6f 63 6f 6c | the.Compression.Control.Protocol |
70840 | 20 28 43 43 50 29 20 62 65 69 6e 67 20 64 69 73 61 62 6c 65 64 2c 20 74 68 65 20 63 6f 6d 6d 61 | .(CCP).being.disabled,.the.comma |
70860 | 6e 64 20 60 60 73 65 74 20 76 70 6e 20 6c 32 74 70 20 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 20 | nd.``set.vpn.l2tp.remote-access. |
70880 | 63 63 70 2d 64 69 73 61 62 6c 65 60 60 20 61 63 63 6f 6d 70 6c 69 73 68 65 73 20 74 68 61 74 2e | ccp-disable``.accomplishes.that. |
708a0 | 00 54 68 65 20 65 78 61 6d 70 6c 65 20 62 65 6c 6f 77 20 63 6f 76 65 72 73 20 61 20 64 75 61 6c | .The.example.below.covers.a.dual |
708c0 | 2d 73 74 61 63 6b 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 76 69 61 20 70 70 70 6f 65 2d 73 | -stack.configuration.via.pppoe-s |
708e0 | 65 72 76 65 72 2e 00 54 68 65 20 65 78 61 6d 70 6c 65 20 62 65 6c 6f 77 20 63 6f 76 65 72 73 20 | erver..The.example.below.covers. |
70900 | 61 20 64 75 61 6c 2d 73 74 61 63 6b 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 54 68 65 20 | a.dual-stack.configuration..The. |
70920 | 65 78 61 6d 70 6c 65 20 62 65 6c 6f 77 20 75 73 65 73 20 41 43 4e 20 61 73 20 61 63 63 65 73 73 | example.below.uses.ACN.as.access |
70940 | 2d 63 6f 6e 63 65 6e 74 72 61 74 6f 72 20 6e 61 6d 65 2c 20 61 73 73 69 67 6e 73 20 61 6e 20 61 | -concentrator.name,.assigns.an.a |
70960 | 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 70 6f 6f 6c 20 31 30 2e 31 2e 31 2e 31 30 30 2d | ddress.from.the.pool.10.1.1.100- |
70980 | 31 31 31 2c 20 74 65 72 6d 69 6e 61 74 65 73 20 61 74 20 74 68 65 20 6c 6f 63 61 6c 20 65 6e 64 | 111,.terminates.at.the.local.end |
709a0 | 70 6f 69 6e 74 20 31 30 2e 31 2e 31 2e 31 20 61 6e 64 20 73 65 72 76 65 73 20 72 65 71 75 65 73 | point.10.1.1.1.and.serves.reques |
709c0 | 74 73 20 6f 6e 6c 79 20 6f 6e 20 65 74 68 31 2e 00 54 68 65 20 65 78 61 6d 70 6c 65 20 63 6f 6e | ts.only.on.eth1..The.example.con |
709e0 | 66 69 67 75 72 61 74 69 6f 6e 20 62 65 6c 6f 77 20 77 69 6c 6c 20 61 73 73 69 67 6e 20 61 6e 20 | figuration.below.will.assign.an. |
70a00 | 49 50 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 20 6f 6e 20 74 68 65 20 69 6e 63 6f 6d 69 6e 67 | IP.to.the.client.on.the.incoming |
70a20 | 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 32 20 77 69 74 68 20 74 68 65 20 63 6c 69 65 6e 74 20 | .interface.eth2.with.the.client. |
70a40 | 6d 61 63 20 61 64 64 72 65 73 73 20 30 38 3a 30 30 3a 32 37 3a 32 66 3a 64 38 3a 30 36 2e 20 4f | mac.address.08:00:27:2f:d8:06..O |
70a60 | 74 68 65 72 20 44 48 43 50 20 64 69 73 63 6f 76 65 72 79 20 72 65 71 75 65 73 74 73 20 77 69 6c | ther.DHCP.discovery.requests.wil |
70a80 | 6c 20 62 65 20 69 67 6e 6f 72 65 64 2c 20 75 6e 6c 65 73 73 20 74 68 65 20 63 6c 69 65 6e 74 20 | l.be.ignored,.unless.the.client. |
70aa0 | 6d 61 63 20 68 61 73 20 62 65 65 6e 20 65 6e 61 62 6c 65 64 20 69 6e 20 74 68 65 20 63 6f 6e 66 | mac.has.been.enabled.in.the.conf |
70ac0 | 69 67 75 72 61 74 69 6f 6e 2e 00 54 68 65 20 65 78 61 6d 70 6c 65 20 63 72 65 61 74 65 73 20 61 | iguration..The.example.creates.a |
70ae0 | 20 77 69 72 65 6c 65 73 73 20 73 74 61 74 69 6f 6e 20 28 63 6f 6d 6d 6f 6e 6c 79 20 72 65 66 65 | .wireless.station.(commonly.refe |
70b00 | 72 72 65 64 20 74 6f 20 61 73 20 57 69 2d 46 69 20 63 6c 69 65 6e 74 29 20 74 68 61 74 20 61 63 | rred.to.as.Wi-Fi.client).that.ac |
70b20 | 63 65 73 73 65 73 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 74 68 72 6f 75 67 68 20 74 68 65 20 57 | cesses.the.network.through.the.W |
70b40 | 41 50 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 65 20 61 62 6f 76 65 20 65 78 61 6d 70 6c 65 2e | AP.defined.in.the.above.example. |
70b60 | 20 54 68 65 20 64 65 66 61 75 6c 74 20 70 68 79 73 69 63 61 6c 20 64 65 76 69 63 65 20 28 60 60 | .The.default.physical.device.(`` |
70b80 | 70 68 79 30 60 60 29 20 69 73 20 75 73 65 64 2e 00 54 68 65 20 65 78 74 65 72 6e 61 6c 20 49 50 | phy0``).is.used..The.external.IP |
70ba0 | 20 61 64 64 72 65 73 73 20 74 6f 20 74 72 61 6e 73 6c 61 74 65 20 74 6f 00 54 68 65 20 66 69 72 | .address.to.translate.to.The.fir |
70bc0 | 65 77 61 6c 6c 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 67 | ewall.supports.the.creation.of.g |
70be0 | 72 6f 75 70 73 20 66 6f 72 20 61 64 64 72 65 73 73 65 73 2c 20 64 6f 6d 61 69 6e 73 2c 20 69 6e | roups.for.addresses,.domains,.in |
70c00 | 74 65 72 66 61 63 65 73 2c 20 6d 61 63 2d 61 64 64 72 65 73 73 65 73 2c 20 6e 65 74 77 6f 72 6b | terfaces,.mac-addresses,.network |
70c20 | 73 20 61 6e 64 20 70 6f 72 74 20 67 72 6f 75 70 73 2e 20 54 68 69 73 20 67 72 6f 75 70 73 20 63 | s.and.port.groups..This.groups.c |
70c40 | 61 6e 20 62 65 20 75 73 65 64 20 6c 61 74 65 72 20 69 6e 20 66 69 72 65 77 61 6c 6c 20 72 75 6c | an.be.used.later.in.firewall.rul |
70c60 | 65 73 65 74 20 61 73 20 64 65 73 69 72 65 64 2e 00 54 68 65 20 66 69 72 65 77 61 6c 6c 20 73 75 | eset.as.desired..The.firewall.su |
70c80 | 70 70 6f 72 74 73 20 74 68 65 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 67 72 6f 75 70 73 20 66 6f | pports.the.creation.of.groups.fo |
70ca0 | 72 20 70 6f 72 74 73 2c 20 61 64 64 72 65 73 73 65 73 2c 20 61 6e 64 20 6e 65 74 77 6f 72 6b 73 | r.ports,.addresses,.and.networks |
70cc0 | 20 28 69 6d 70 6c 65 6d 65 6e 74 65 64 20 75 73 69 6e 67 20 6e 65 74 66 69 6c 74 65 72 20 69 70 | .(implemented.using.netfilter.ip |
70ce0 | 73 65 74 29 20 61 6e 64 20 74 68 65 20 6f 70 74 69 6f 6e 20 6f 66 20 69 6e 74 65 72 66 61 63 65 | set).and.the.option.of.interface |
70d00 | 20 6f 72 20 7a 6f 6e 65 20 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 2e 00 | .or.zone.based.firewall.policy.. |
70d20 | 54 68 65 20 66 69 72 73 74 20 49 50 20 69 6e 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 6e 65 | The.first.IP.in.the.container.ne |
70d40 | 74 77 6f 72 6b 20 69 73 20 72 65 73 65 72 76 65 64 20 62 79 20 74 68 65 20 65 6e 67 69 6e 65 20 | twork.is.reserved.by.the.engine. |
70d60 | 61 6e 64 20 63 61 6e 6e 6f 74 20 62 65 20 75 73 65 64 00 54 68 65 20 66 69 72 73 74 20 61 64 64 | and.cannot.be.used.The.first.add |
70d80 | 72 65 73 73 20 6f 66 20 74 68 65 20 70 61 72 61 6d 65 74 65 72 20 60 60 63 6c 69 65 6e 74 2d 73 | ress.of.the.parameter.``client-s |
70da0 | 75 62 6e 65 74 60 60 2c 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 61 73 20 74 68 65 20 64 65 66 | ubnet``,.will.be.used.as.the.def |
70dc0 | 61 75 6c 74 20 67 61 74 65 77 61 79 2e 20 43 6f 6e 6e 65 63 74 65 64 20 73 65 73 73 69 6f 6e 73 | ault.gateway..Connected.sessions |
70de0 | 20 63 61 6e 20 62 65 20 63 68 65 63 6b 65 64 20 76 69 61 20 74 68 65 20 60 60 73 68 6f 77 20 69 | .can.be.checked.via.the.``show.i |
70e00 | 70 6f 65 2d 73 65 72 76 65 72 20 73 65 73 73 69 6f 6e 73 60 60 20 63 6f 6d 6d 61 6e 64 2e 00 54 | poe-server.sessions``.command..T |
70e20 | 68 65 20 66 69 72 73 74 20 61 6e 64 20 61 72 67 75 61 62 6c 79 20 63 6c 65 61 6e 65 72 20 6f 70 | he.first.and.arguably.cleaner.op |
70e40 | 74 69 6f 6e 20 69 73 20 74 6f 20 6d 61 6b 65 20 79 6f 75 72 20 49 50 73 65 63 20 70 6f 6c 69 63 | tion.is.to.make.your.IPsec.polic |
70e60 | 79 20 6d 61 74 63 68 20 47 52 45 20 70 61 63 6b 65 74 73 20 62 65 74 77 65 65 6e 20 65 78 74 65 | y.match.GRE.packets.between.exte |
70e80 | 72 6e 61 6c 20 61 64 64 72 65 73 73 65 73 20 6f 66 20 79 6f 75 72 20 72 6f 75 74 65 72 73 2e 20 | rnal.addresses.of.your.routers.. |
70ea0 | 54 68 69 73 20 69 73 20 74 68 65 20 62 65 73 74 20 6f 70 74 69 6f 6e 20 69 66 20 62 6f 74 68 20 | This.is.the.best.option.if.both. |
70ec0 | 72 6f 75 74 65 72 73 20 68 61 76 65 20 73 74 61 74 69 63 20 65 78 74 65 72 6e 61 6c 20 61 64 64 | routers.have.static.external.add |
70ee0 | 72 65 73 73 65 73 2e 00 54 68 65 20 66 69 72 73 74 20 66 6c 6f 77 20 63 6f 6e 74 72 6f 6c 20 6d | resses..The.first.flow.control.m |
70f00 | 65 63 68 61 6e 69 73 6d 2c 20 74 68 65 20 70 61 75 73 65 20 66 72 61 6d 65 2c 20 77 61 73 20 64 | echanism,.the.pause.frame,.was.d |
70f20 | 65 66 69 6e 65 64 20 62 79 20 74 68 65 20 49 45 45 45 20 38 30 32 2e 33 78 20 73 74 61 6e 64 61 | efined.by.the.IEEE.802.3x.standa |
70f40 | 72 64 2e 00 54 68 65 20 66 69 72 73 74 20 69 70 20 61 64 64 72 65 73 73 20 69 73 20 74 68 65 20 | rd..The.first.ip.address.is.the. |
70f60 | 52 50 27 73 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 73 65 63 6f 6e 64 20 76 61 6c 75 | RP's.address.and.the.second.valu |
70f80 | 65 20 69 73 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 70 72 65 66 69 78 20 6f 66 20 67 72 6f 75 | e.is.the.matching.prefix.of.grou |
70fa0 | 70 20 72 61 6e 67 65 73 20 63 6f 76 65 72 65 64 2e 00 54 68 65 20 66 69 72 73 74 20 72 65 67 69 | p.ranges.covered..The.first.regi |
70fc0 | 73 74 72 61 74 69 6f 6e 20 72 65 71 75 65 73 74 20 69 73 20 73 65 6e 74 20 74 6f 20 74 68 65 20 | stration.request.is.sent.to.the. |
70fe0 | 70 72 6f 74 6f 63 6f 6c 20 62 72 6f 61 64 63 61 73 74 20 61 64 64 72 65 73 73 2c 20 61 6e 64 20 | protocol.broadcast.address,.and. |
71000 | 74 68 65 20 73 65 72 76 65 72 27 73 20 72 65 61 6c 20 70 72 6f 74 6f 63 6f 6c 20 61 64 64 72 65 | the.server's.real.protocol.addre |
71020 | 73 73 20 69 73 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 64 65 74 65 63 74 65 64 20 66 72 6f 6d 20 | ss.is.dynamically.detected.from. |
71040 | 74 68 65 20 66 69 72 73 74 20 72 65 67 69 73 74 72 61 74 69 6f 6e 20 72 65 70 6c 79 2e 00 54 68 | the.first.registration.reply..Th |
71060 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 50 50 50 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 65 | e.following.PPP.configuration.te |
71080 | 73 74 73 20 4d 53 43 48 41 50 2d 76 32 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d | sts.MSCHAP-v2:.The.following.com |
710a0 | 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 | mand.can.be.used.to.generate.the |
710c0 | 20 4f 54 50 20 6b 65 79 20 61 73 20 77 65 6c 6c 20 61 73 20 74 68 65 20 43 4c 49 20 63 6f 6d 6d | .OTP.key.as.well.as.the.CLI.comm |
710e0 | 61 6e 64 73 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 6d 3a 00 54 68 65 20 66 6f 6c 6c | ands.to.configure.them:.The.foll |
71100 | 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 20 75 73 65 73 20 74 68 65 20 65 78 70 6c 69 63 69 74 2d | owing.command.uses.the.explicit- |
71120 | 6e 75 6c 6c 20 6c 61 62 65 6c 20 76 61 6c 75 65 20 66 6f 72 20 61 6c 6c 20 74 68 65 20 42 47 50 | null.label.value.for.all.the.BGP |
71140 | 20 69 6e 73 74 61 6e 63 65 73 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e | .instances..The.following.comman |
71160 | 64 73 20 6c 65 74 20 79 6f 75 20 63 68 65 63 6b 20 74 75 6e 6e 65 6c 20 73 74 61 74 75 73 2e 00 | ds.let.you.check.tunnel.status.. |
71180 | 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 6c 65 74 20 79 6f 75 20 72 | The.following.commands.let.you.r |
711a0 | 65 73 65 74 20 4f 70 65 6e 56 50 4e 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d | eset.OpenVPN..The.following.comm |
711c0 | 61 6e 64 73 20 74 72 61 6e 73 6c 61 74 65 20 74 6f 20 22 2d 2d 6e 65 74 20 68 6f 73 74 22 20 77 | ands.translate.to."--net.host".w |
711e0 | 68 65 6e 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 69 73 20 63 72 65 61 74 65 64 00 54 68 65 | hen.the.container.is.created.The |
71200 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 77 6f 75 6c 64 20 62 65 20 72 65 71 | .following.commands.would.be.req |
71220 | 75 69 72 65 64 20 74 6f 20 73 65 74 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 61 20 67 69 76 65 6e | uired.to.set.options.for.a.given |
71240 | 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 73 69 64 65 | .dynamic.routing.protocol.inside |
71260 | 20 61 20 67 69 76 65 6e 20 76 72 66 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 | .a.given.vrf:.The.following.conf |
71280 | 69 67 75 72 61 74 69 6f 6e 20 64 65 6d 6f 6e 73 74 72 61 74 65 73 20 68 6f 77 20 74 6f 20 75 73 | iguration.demonstrates.how.to.us |
712a0 | 65 20 56 79 4f 53 20 74 6f 20 61 63 68 69 65 76 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 | e.VyOS.to.achieve.load.balancing |
712c0 | 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 2e 00 54 68 65 20 66 | .based.on.the.domain.name..The.f |
712e0 | 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 78 70 6c 69 63 69 74 6c | ollowing.configuration.explicitl |
71300 | 79 20 6a 6f 69 6e 73 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 60 66 66 31 35 3a 3a 31 | y.joins.multicast.group.`ff15::1 |
71320 | 32 33 34 60 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 65 74 68 31 60 20 61 6e 64 20 73 6f 75 | 234`.on.interface.`eth1`.and.sou |
71340 | 72 63 65 2d 73 70 65 63 69 66 69 63 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 60 66 66 | rce-specific.multicast.group.`ff |
71360 | 31 35 3a 3a 35 36 37 38 60 20 77 69 74 68 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 60 32 | 15::5678`.with.source.address.`2 |
71380 | 30 30 31 3a 64 62 38 3a 3a 31 60 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 65 74 68 31 60 3a | 001:db8::1`.on.interface.`eth1`: |
713a0 | 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 6e 20 | .The.following.configuration.on. |
713c0 | 56 79 4f 53 20 61 70 70 6c 69 65 73 20 74 6f 20 61 6c 6c 20 66 6f 6c 6c 6f 77 69 6e 67 20 33 72 | VyOS.applies.to.all.following.3r |
713e0 | 64 20 70 61 72 74 79 20 76 65 6e 64 6f 72 73 2e 20 49 74 20 63 72 65 61 74 65 73 20 61 20 62 6f | d.party.vendors..It.creates.a.bo |
71400 | 6e 64 20 77 69 74 68 20 74 77 6f 20 6c 69 6e 6b 73 20 61 6e 64 20 56 4c 41 4e 20 31 30 2c 20 31 | nd.with.two.links.and.VLAN.10,.1 |
71420 | 30 30 20 6f 6e 20 74 68 65 20 62 6f 6e 64 65 64 20 69 6e 74 65 72 66 61 63 65 73 20 77 69 74 68 | 00.on.the.bonded.interfaces.with |
71440 | 20 61 20 70 65 72 20 56 49 46 20 49 50 76 34 20 61 64 64 72 65 73 73 2e 00 54 68 65 20 66 6f 6c | .a.per.VIF.IPv4.address..The.fol |
71460 | 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 72 65 76 65 72 73 65 2d 70 72 6f | lowing.configuration.reverse-pro |
71480 | 78 79 20 74 65 72 6d 69 6e 61 74 65 20 53 53 4c 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 | xy.terminate.SSL..The.following. |
714a0 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 61 73 73 69 67 6e 20 61 20 2f 36 34 20 | configuration.will.assign.a./64. |
714c0 | 70 72 65 66 69 78 20 6f 75 74 20 6f 66 20 61 20 2f 35 36 20 64 65 6c 65 67 61 74 69 6f 6e 20 74 | prefix.out.of.a./56.delegation.t |
714e0 | 6f 20 65 74 68 30 2e 20 54 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e 65 | o.eth0..The.IPv6.address.assigne |
71500 | 64 20 74 6f 20 65 74 68 30 20 77 69 6c 6c 20 62 65 20 3c 70 72 65 66 69 78 3e 3a 3a 66 66 66 66 | d.to.eth0.will.be.<prefix>::ffff |
71520 | 2f 36 34 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 6b 6e 6f 77 20 74 68 65 20 70 72 65 66 | /64..If.you.do.not.know.the.pref |
71540 | 69 78 20 73 69 7a 65 20 64 65 6c 65 67 61 74 65 64 20 74 6f 20 79 6f 75 2c 20 73 74 61 72 74 20 | ix.size.delegated.to.you,.start. |
71560 | 77 69 74 68 20 73 6c 61 2d 6c 65 6e 20 30 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f | with.sla-len.0..The.following.co |
71580 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 73 65 74 75 70 20 61 20 50 50 50 6f 45 20 73 | nfiguration.will.setup.a.PPPoE.s |
715a0 | 65 73 73 69 6f 6e 20 73 6f 75 72 63 65 20 66 72 6f 6d 20 65 74 68 31 20 61 6e 64 20 61 73 73 69 | ession.source.from.eth1.and.assi |
715c0 | 67 6e 20 61 20 2f 36 34 20 70 72 65 66 69 78 20 6f 75 74 20 6f 66 20 61 20 2f 35 36 20 64 65 6c | gn.a./64.prefix.out.of.a./56.del |
715e0 | 65 67 61 74 69 6f 6e 20 28 72 65 71 75 65 73 74 65 64 20 66 72 6f 6d 20 74 68 65 20 49 53 50 29 | egation.(requested.from.the.ISP) |
71600 | 20 74 6f 20 65 74 68 30 2e 20 54 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 61 73 73 69 67 | .to.eth0..The.IPv6.address.assig |
71620 | 6e 65 64 20 74 6f 20 65 74 68 30 20 77 69 6c 6c 20 62 65 20 3c 70 72 65 66 69 78 3e 3a 3a 31 2f | ned.to.eth0.will.be.<prefix>::1/ |
71640 | 36 34 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 6b 6e 6f 77 20 74 68 65 20 70 72 65 66 69 | 64..If.you.do.not.know.the.prefi |
71660 | 78 20 73 69 7a 65 20 64 65 6c 65 67 61 74 65 64 20 74 6f 20 79 6f 75 2c 20 73 74 61 72 74 20 77 | x.size.delegated.to.you,.start.w |
71680 | 69 74 68 20 73 6c 61 2d 6c 65 6e 20 30 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 | ith.sla-len.0..The.following.exa |
716a0 | 6d 70 6c 65 20 61 6c 6c 6f 77 73 20 56 79 4f 53 20 74 6f 20 75 73 65 20 3a 61 62 62 72 3a 60 50 | mple.allows.VyOS.to.use.:abbr:`P |
716c0 | 42 52 20 28 50 6f 6c 69 63 79 2d 42 61 73 65 64 20 52 6f 75 74 69 6e 67 29 60 20 66 6f 72 20 74 | BR.(Policy-Based.Routing)`.for.t |
716e0 | 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 6f 72 69 67 69 6e 61 74 65 64 20 66 72 6f 6d 20 74 68 | raffic,.which.originated.from.th |
71700 | 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2e 20 54 68 61 74 20 73 6f 6c 75 74 69 6f 6e 20 66 | e.router.itself..That.solution.f |
71720 | 6f 72 20 6d 75 6c 74 69 70 6c 65 20 49 53 50 27 73 20 61 6e 64 20 56 79 4f 53 20 72 6f 75 74 65 | or.multiple.ISP's.and.VyOS.route |
71740 | 72 20 77 69 6c 6c 20 72 65 73 70 6f 6e 64 20 66 72 6f 6d 20 74 68 65 20 73 61 6d 65 20 69 6e 74 | r.will.respond.from.the.same.int |
71760 | 65 72 66 61 63 65 20 74 68 61 74 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 | erface.that.the.packet.was.recei |
71780 | 76 65 64 2e 20 41 6c 73 6f 2c 20 69 74 20 75 73 65 64 2c 20 69 66 20 77 65 20 77 61 6e 74 20 74 | ved..Also,.it.used,.if.we.want.t |
717a0 | 68 61 74 20 6f 6e 65 20 56 50 4e 20 74 75 6e 6e 65 6c 20 74 6f 20 62 65 20 74 68 72 6f 75 67 68 | hat.one.VPN.tunnel.to.be.through |
717c0 | 20 6f 6e 65 20 70 72 6f 76 69 64 65 72 2c 20 61 6e 64 20 74 68 65 20 73 65 63 6f 6e 64 20 74 68 | .one.provider,.and.the.second.th |
717e0 | 72 6f 75 67 68 20 61 6e 6f 74 68 65 72 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 | rough.another..The.following.exa |
71800 | 6d 70 6c 65 20 63 72 65 61 74 65 73 20 61 20 57 41 50 2e 20 57 68 65 6e 20 63 6f 6e 66 69 67 75 | mple.creates.a.WAP..When.configu |
71820 | 72 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 57 41 50 20 69 6e 74 65 72 66 61 63 65 73 2c 20 79 6f | ring.multiple.WAP.interfaces,.yo |
71840 | 75 20 6d 75 73 74 20 73 70 65 63 69 66 79 20 75 6e 69 71 75 65 20 49 50 20 61 64 64 72 65 73 73 | u.must.specify.unique.IP.address |
71860 | 65 73 2c 20 63 68 61 6e 6e 65 6c 73 2c 20 4e 65 74 77 6f 72 6b 20 49 44 73 20 63 6f 6d 6d 6f 6e | es,.channels,.Network.IDs.common |
71880 | 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 3a 61 62 62 72 3a 60 53 53 49 44 20 28 53 | ly.referred.to.as.:abbr:`SSID.(S |
718a0 | 65 72 76 69 63 65 20 53 65 74 20 49 64 65 6e 74 69 66 69 65 72 29 60 2c 20 61 6e 64 20 4d 41 43 | ervice.Set.Identifier)`,.and.MAC |
718c0 | 20 61 64 64 72 65 73 73 65 73 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c | .addresses..The.following.exampl |
718e0 | 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 61 20 53 69 65 72 72 61 20 57 69 72 65 6c 65 73 73 20 | e.is.based.on.a.Sierra.Wireless. |
71900 | 4d 43 37 37 31 30 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 6f 6e 6c 79 20 74 68 65 20 66 | MC7710.miniPCIe.card.(only.the.f |
71920 | 6f 72 6d 20 66 61 63 74 6f 72 20 69 6e 20 72 65 61 6c 69 74 79 20 69 74 20 72 75 6e 73 20 55 42 | orm.factor.in.reality.it.runs.UB |
71940 | 53 29 20 61 6e 64 20 44 65 75 74 73 63 68 65 20 54 65 6c 65 6b 6f 6d 20 61 73 20 49 53 50 2e 20 | S).and.Deutsche.Telekom.as.ISP.. |
71960 | 54 68 65 20 63 61 72 64 20 69 73 20 61 73 73 65 6d 62 6c 65 64 20 69 6e 74 6f 20 61 20 3a 72 65 | The.card.is.assembled.into.a.:re |
71980 | 66 3a 60 70 63 2d 65 6e 67 69 6e 65 73 2d 61 70 75 34 60 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 | f:`pc-engines-apu4`..The.followi |
719a0 | 6e 67 20 65 78 61 6d 70 6c 65 20 74 6f 70 6f 6c 6f 67 79 20 77 61 73 20 62 75 69 6c 74 20 75 73 | ng.example.topology.was.built.us |
719c0 | 69 6e 67 20 45 56 45 2d 4e 47 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c | ing.EVE-NG..The.following.exampl |
719e0 | 65 20 77 69 6c 6c 20 73 68 6f 77 20 68 6f 77 20 56 79 4f 53 20 63 61 6e 20 62 65 20 75 73 65 64 | e.will.show.how.VyOS.can.be.used |
71a00 | 20 74 6f 20 72 65 64 69 72 65 63 74 20 77 65 62 20 74 72 61 66 66 69 63 20 74 6f 20 61 6e 20 65 | .to.redirect.web.traffic.to.an.e |
71a20 | 78 74 65 72 6e 61 6c 20 74 72 61 6e 73 70 61 72 65 6e 74 20 70 72 6f 78 79 3a 00 54 68 65 20 66 | xternal.transparent.proxy:.The.f |
71a40 | 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 73 20 73 68 6f 77 20 68 6f 77 20 74 6f 20 63 6f | ollowing.examples.show.how.to.co |
71a60 | 6e 66 69 67 75 72 65 20 4e 41 54 36 34 20 6f 6e 20 61 20 56 79 4f 53 20 72 6f 75 74 65 72 2e 20 | nfigure.NAT64.on.a.VyOS.router.. |
71a80 | 54 68 65 20 31 39 32 2e 30 2e 32 2e 31 30 20 61 64 64 72 65 73 73 20 69 73 20 75 73 65 64 20 61 | The.192.0.2.10.address.is.used.a |
71aa0 | 73 20 74 68 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 66 6f 72 20 74 68 65 20 74 72 61 6e 73 | s.the.IPv4.address.for.the.trans |
71ac0 | 6c 61 74 69 6f 6e 20 70 6f 6f 6c 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 68 61 72 64 77 | lation.pool..The.following.hardw |
71ae0 | 61 72 65 20 6d 6f 64 75 6c 65 73 20 68 61 76 65 20 62 65 65 6e 20 74 65 73 74 65 64 20 73 75 63 | are.modules.have.been.tested.suc |
71b00 | 63 65 73 73 66 75 6c 6c 79 20 69 6e 20 61 6e 20 3a 72 65 66 3a 60 70 63 2d 65 6e 67 69 6e 65 73 | cessfully.in.an.:ref:`pc-engines |
71b20 | 2d 61 70 75 34 60 20 62 6f 61 72 64 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 69 73 20 74 | -apu4`.board:.The.following.is.t |
71b40 | 68 65 20 63 6f 6e 66 69 67 20 66 6f 72 20 74 68 65 20 69 50 68 6f 6e 65 20 70 65 65 72 20 61 62 | he.config.for.the.iPhone.peer.ab |
71b60 | 6f 76 65 2e 20 49 74 27 73 20 69 6d 70 6f 72 74 61 6e 74 20 74 6f 20 6e 6f 74 65 20 74 68 61 74 | ove..It's.important.to.note.that |
71b80 | 20 74 68 65 20 60 60 41 6c 6c 6f 77 65 64 49 50 73 60 60 20 77 69 6c 64 63 61 72 64 20 73 65 74 | .the.``AllowedIPs``.wildcard.set |
71ba0 | 74 69 6e 67 20 64 69 72 65 63 74 73 20 61 6c 6c 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 74 | ting.directs.all.IPv4.and.IPv6.t |
71bc0 | 72 61 66 66 69 63 20 74 68 72 6f 75 67 68 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 54 | raffic.through.the.connection..T |
71be0 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 63 61 6e 20 62 65 20 75 73 | he.following.protocols.can.be.us |
71c00 | 65 64 3a 20 61 6e 79 2c 20 62 61 62 65 6c 2c 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 | ed:.any,.babel,.bgp,.connected,. |
71c20 | 65 69 67 72 70 2c 20 69 73 69 73 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 | eigrp,.isis,.kernel,.ospf,.rip,. |
71c40 | 73 74 61 74 69 63 2c 20 74 61 62 6c 65 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 | static,.table.The.following.prot |
71c60 | 6f 63 6f 6c 73 20 63 61 6e 20 62 65 20 75 73 65 64 3a 20 61 6e 79 2c 20 62 61 62 65 6c 2c 20 62 | ocols.can.be.used:.any,.babel,.b |
71c80 | 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 69 73 69 73 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 | gp,.connected,.isis,.kernel,.osp |
71ca0 | 66 76 33 2c 20 72 69 70 6e 67 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 00 54 68 65 20 66 6f | fv3,.ripng,.static,.table.The.fo |
71cc0 | 6c 6c 6f 77 69 6e 67 20 73 74 72 75 63 74 75 72 65 20 72 65 73 70 72 65 73 65 6e 74 20 74 68 65 | llowing.structure.respresent.the |
71ce0 | 20 63 6c 69 20 73 74 72 75 63 74 75 72 65 2e 00 54 68 65 20 66 6f 72 6d 75 6c 61 20 66 6f 72 20 | .cli.structure..The.formula.for. |
71d00 | 75 6e 66 72 61 67 6d 65 6e 74 65 64 20 54 43 50 20 61 6e 64 20 55 44 50 20 70 61 63 6b 65 74 73 | unfragmented.TCP.and.UDP.packets |
71d20 | 20 69 73 00 54 68 65 20 66 6f 72 77 61 72 64 69 6e 67 20 64 65 6c 61 79 20 74 69 6d 65 20 69 73 | .is.The.forwarding.delay.time.is |
71d40 | 20 74 68 65 20 74 69 6d 65 20 73 70 65 6e 74 20 69 6e 20 65 61 63 68 20 6f 66 20 74 68 65 20 6c | .the.time.spent.in.each.of.the.l |
71d60 | 69 73 74 65 6e 69 6e 67 20 61 6e 64 20 6c 65 61 72 6e 69 6e 67 20 73 74 61 74 65 73 20 62 65 66 | istening.and.learning.states.bef |
71d80 | 6f 72 65 20 74 68 65 20 46 6f 72 77 61 72 64 69 6e 67 20 73 74 61 74 65 20 69 73 20 65 6e 74 65 | ore.the.Forwarding.state.is.ente |
71da0 | 72 65 64 2e 20 54 68 69 73 20 64 65 6c 61 79 20 69 73 20 73 6f 20 74 68 61 74 20 77 68 65 6e 20 | red..This.delay.is.so.that.when. |
71dc0 | 61 20 6e 65 77 20 62 72 69 64 67 65 20 63 6f 6d 65 73 20 6f 6e 74 6f 20 61 20 62 75 73 79 20 6e | a.new.bridge.comes.onto.a.busy.n |
71de0 | 65 74 77 6f 72 6b 20 69 74 20 6c 6f 6f 6b 73 20 61 74 20 73 6f 6d 65 20 74 72 61 66 66 69 63 20 | etwork.it.looks.at.some.traffic. |
71e00 | 62 65 66 6f 72 65 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 2e 00 54 68 65 20 67 65 6e 65 72 61 | before.participating..The.genera |
71e20 | 74 65 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 6c 6f 6f 6b 20 6c 69 6b 65 | ted.configuration.will.look.like |
71e40 | 3a 00 54 68 65 20 67 65 6e 65 72 61 74 65 64 20 70 61 72 61 6d 65 74 65 72 73 20 61 72 65 20 74 | :.The.generated.parameters.are.t |
71e60 | 68 65 6e 20 6f 75 74 70 75 74 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 54 68 65 20 67 | hen.output.to.the.console..The.g |
71e80 | 65 6e 65 72 69 63 20 6e 61 6d 65 20 6f 66 20 51 75 61 6c 69 74 79 20 6f 66 20 53 65 72 76 69 63 | eneric.name.of.Quality.of.Servic |
71ea0 | 65 20 6f 72 20 54 72 61 66 66 69 63 20 43 6f 6e 74 72 6f 6c 20 69 6e 76 6f 6c 76 65 73 20 74 68 | e.or.Traffic.Control.involves.th |
71ec0 | 69 6e 67 73 20 6c 69 6b 65 20 73 68 61 70 69 6e 67 20 74 72 61 66 66 69 63 2c 20 73 63 68 65 64 | ings.like.shaping.traffic,.sched |
71ee0 | 75 6c 69 6e 67 20 6f 72 20 64 72 6f 70 70 69 6e 67 20 70 61 63 6b 65 74 73 2c 20 77 68 69 63 68 | uling.or.dropping.packets,.which |
71f00 | 20 61 72 65 20 74 68 65 20 6b 69 6e 64 20 6f 66 20 74 68 69 6e 67 73 20 79 6f 75 20 6d 61 79 20 | .are.the.kind.of.things.you.may. |
71f20 | 77 61 6e 74 20 74 6f 20 70 6c 61 79 20 77 69 74 68 20 77 68 65 6e 20 79 6f 75 20 68 61 76 65 2c | want.to.play.with.when.you.have, |
71f40 | 20 66 6f 72 20 69 6e 73 74 61 6e 63 65 2c 20 61 20 62 61 6e 64 77 69 64 74 68 20 62 6f 74 74 6c | .for.instance,.a.bandwidth.bottl |
71f60 | 65 6e 65 63 6b 20 69 6e 20 61 20 6c 69 6e 6b 20 61 6e 64 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 | eneck.in.a.link.and.you.want.to. |
71f80 | 73 6f 6d 65 68 6f 77 20 70 72 69 6f 72 69 74 69 7a 65 20 73 6f 6d 65 20 74 79 70 65 20 6f 66 20 | somehow.prioritize.some.type.of. |
71fa0 | 74 72 61 66 66 69 63 20 6f 76 65 72 20 61 6e 6f 74 68 65 72 2e 00 54 68 65 20 68 61 73 68 20 74 | traffic.over.another..The.hash.t |
71fc0 | 79 70 65 20 75 73 65 64 20 77 68 65 6e 20 64 69 73 63 6f 76 65 72 69 6e 67 20 66 69 6c 65 20 6f | ype.used.when.discovering.file.o |
71fe0 | 6e 20 6d 61 73 74 65 72 20 73 65 72 76 65 72 20 28 64 65 66 61 75 6c 74 3a 20 73 68 61 32 35 36 | n.master.server.(default:.sha256 |
72000 | 29 00 54 68 65 20 68 65 61 6c 74 68 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 70 | ).The.health.of.interfaces.and.p |
72020 | 61 74 68 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 74 68 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 | aths.assigned.to.the.load.balanc |
72040 | 65 72 20 69 73 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 63 68 65 63 6b 65 64 20 62 79 20 73 65 | er.is.periodically.checked.by.se |
72060 | 6e 64 69 6e 67 20 49 43 4d 50 20 70 61 63 6b 65 74 73 20 28 70 69 6e 67 29 20 74 6f 20 72 65 6d | nding.ICMP.packets.(ping).to.rem |
72080 | 6f 74 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 73 2c 20 61 20 54 54 4c 20 74 65 73 74 20 6f 72 20 | ote.destinations,.a.TTL.test.or. |
720a0 | 74 68 65 20 65 78 65 63 75 74 69 6f 6e 20 6f 66 20 61 20 75 73 65 72 20 64 65 66 69 6e 65 64 20 | the.execution.of.a.user.defined. |
720c0 | 73 63 72 69 70 74 2e 20 49 66 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 66 61 69 6c 73 20 74 68 | script..If.an.interface.fails.th |
720e0 | 65 20 68 65 61 6c 74 68 20 63 68 65 63 6b 20 69 74 20 69 73 20 72 65 6d 6f 76 65 64 20 66 72 6f | e.health.check.it.is.removed.fro |
72100 | 6d 20 74 68 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 27 73 20 70 6f 6f 6c 20 6f 66 20 69 6e | m.the.load.balancer's.pool.of.in |
72120 | 74 65 72 66 61 63 65 73 2e 20 54 6f 20 65 6e 61 62 6c 65 20 68 65 61 6c 74 68 20 63 68 65 63 6b | terfaces..To.enable.health.check |
72140 | 69 6e 67 20 66 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 3a 00 54 68 65 20 68 65 6c 6c 6f 2d | ing.for.an.interface:.The.hello- |
72160 | 6d 75 6c 74 69 70 6c 69 65 72 20 73 70 65 63 69 66 69 65 73 20 68 6f 77 20 6d 61 6e 79 20 48 65 | multiplier.specifies.how.many.He |
72180 | 6c 6c 6f 73 20 74 6f 20 73 65 6e 64 20 70 65 72 20 73 65 63 6f 6e 64 2c 20 66 72 6f 6d 20 31 20 | llos.to.send.per.second,.from.1. |
721a0 | 28 65 76 65 72 79 20 73 65 63 6f 6e 64 29 20 74 6f 20 31 30 20 28 65 76 65 72 79 20 31 30 30 6d | (every.second).to.10.(every.100m |
721c0 | 73 29 2e 20 54 68 75 73 20 6f 6e 65 20 63 61 6e 20 68 61 76 65 20 31 73 20 63 6f 6e 76 65 72 67 | s)..Thus.one.can.have.1s.converg |
721e0 | 65 6e 63 65 20 74 69 6d 65 20 66 6f 72 20 4f 53 50 46 2e 20 49 66 20 74 68 69 73 20 66 6f 72 6d | ence.time.for.OSPF..If.this.form |
72200 | 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 74 68 65 6e 20 74 68 65 20 68 65 6c 6c 6f 2d 69 6e | .is.specified,.then.the.hello-in |
72220 | 74 65 72 76 61 6c 20 61 64 76 65 72 74 69 73 65 64 20 69 6e 20 48 65 6c 6c 6f 20 70 61 63 6b 65 | terval.advertised.in.Hello.packe |
72240 | 74 73 20 69 73 20 73 65 74 20 74 6f 20 30 20 61 6e 64 20 74 68 65 20 68 65 6c 6c 6f 2d 69 6e 74 | ts.is.set.to.0.and.the.hello-int |
72260 | 65 72 76 61 6c 20 6f 6e 20 72 65 63 65 69 76 65 64 20 48 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 | erval.on.received.Hello.packets. |
72280 | 69 73 20 6e 6f 74 20 63 68 65 63 6b 65 64 2c 20 74 68 75 73 20 74 68 65 20 68 65 6c 6c 6f 2d 6d | is.not.checked,.thus.the.hello-m |
722a0 | 75 6c 74 69 70 6c 69 65 72 20 6e 65 65 64 20 4e 4f 54 20 62 65 20 74 68 65 20 73 61 6d 65 20 61 | ultiplier.need.NOT.be.the.same.a |
722c0 | 63 72 6f 73 73 20 6d 75 6c 74 69 70 6c 65 20 72 6f 75 74 65 72 73 20 6f 6e 20 61 20 63 6f 6d 6d | cross.multiple.routers.on.a.comm |
722e0 | 6f 6e 20 6c 69 6e 6b 2e 00 54 68 65 20 68 6f 73 74 6e 61 6d 65 20 63 61 6e 20 62 65 20 75 70 20 | on.link..The.hostname.can.be.up. |
72300 | 74 6f 20 36 33 20 63 68 61 72 61 63 74 65 72 73 2e 20 41 20 68 6f 73 74 6e 61 6d 65 20 6d 75 73 | to.63.characters..A.hostname.mus |
72320 | 74 20 73 74 61 72 74 20 61 6e 64 20 65 6e 64 20 77 69 74 68 20 61 20 6c 65 74 74 65 72 20 6f 72 | t.start.and.end.with.a.letter.or |
72340 | 20 64 69 67 69 74 2c 20 61 6e 64 20 68 61 76 65 20 61 73 20 69 6e 74 65 72 69 6f 72 20 63 68 61 | .digit,.and.have.as.interior.cha |
72360 | 72 61 63 74 65 72 73 20 6f 6e 6c 79 20 6c 65 74 74 65 72 73 2c 20 64 69 67 69 74 73 2c 20 6f 72 | racters.only.letters,.digits,.or |
72380 | 20 61 20 68 79 70 68 65 6e 2e 00 54 68 65 20 68 6f 73 74 6e 61 6d 65 20 6f 72 20 49 50 20 61 64 | .a.hyphen..The.hostname.or.IP.ad |
723a0 | 64 72 65 73 73 20 6f 66 20 74 68 65 20 6d 61 73 74 65 72 00 54 68 65 20 69 64 65 6e 74 69 66 69 | dress.of.the.master.The.identifi |
723c0 | 65 72 20 69 73 20 74 68 65 20 64 65 76 69 63 65 27 73 20 44 55 49 44 3a 20 63 6f 6c 6f 6e 2d 73 | er.is.the.device's.DUID:.colon-s |
723e0 | 65 70 61 72 61 74 65 64 20 68 65 78 20 6c 69 73 74 20 28 61 73 20 75 73 65 64 20 62 79 20 69 73 | eparated.hex.list.(as.used.by.is |
72400 | 63 2d 64 68 63 70 20 6f 70 74 69 6f 6e 20 64 68 63 70 76 36 2e 63 6c 69 65 6e 74 2d 69 64 29 2e | c-dhcp.option.dhcpv6.client-id). |
72420 | 20 49 66 20 74 68 65 20 64 65 76 69 63 65 20 61 6c 72 65 61 64 79 20 68 61 73 20 61 20 64 79 6e | .If.the.device.already.has.a.dyn |
72440 | 61 6d 69 63 20 6c 65 61 73 65 20 66 72 6f 6d 20 74 68 65 20 44 48 43 50 76 36 20 73 65 72 76 65 | amic.lease.from.the.DHCPv6.serve |
72460 | 72 2c 20 69 74 73 20 44 55 49 44 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 77 69 74 68 20 60 60 | r,.its.DUID.can.be.found.with.`` |
72480 | 73 68 6f 77 20 73 65 72 76 69 63 65 20 64 68 63 70 76 36 20 73 65 72 76 65 72 20 6c 65 61 73 65 | show.service.dhcpv6.server.lease |
724a0 | 73 60 60 2e 20 54 68 65 20 44 55 49 44 20 62 65 67 69 6e 73 20 61 74 20 74 68 65 20 35 74 68 20 | s``..The.DUID.begins.at.the.5th. |
724c0 | 6f 63 74 65 74 20 28 61 66 74 65 72 20 74 68 65 20 34 74 68 20 63 6f 6c 6f 6e 29 20 6f 66 20 49 | octet.(after.the.4th.colon).of.I |
724e0 | 41 49 44 5f 44 55 49 44 2e 00 54 68 65 20 69 6e 64 69 76 69 64 75 61 6c 20 73 70 6f 6b 65 20 63 | AID_DUID..The.individual.spoke.c |
72500 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 20 6f 6e 6c 79 20 64 69 66 66 65 72 20 69 6e 20 74 68 65 | onfigurations.only.differ.in.the |
72520 | 20 6c 6f 63 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 6f 6e 20 74 68 65 20 60 60 74 75 6e 31 30 | .local.IP.address.on.the.``tun10 |
72540 | 60 60 20 69 6e 74 65 72 66 61 63 65 2e 20 53 65 65 20 74 68 65 20 61 62 6f 76 65 20 64 69 61 67 | ``.interface..See.the.above.diag |
72560 | 72 61 6d 20 66 6f 72 20 74 68 65 20 69 6e 64 69 76 69 64 75 61 6c 20 49 50 20 61 64 64 72 65 73 | ram.for.the.individual.IP.addres |
72580 | 73 65 73 2e 00 54 68 65 20 69 6e 6e 65 72 20 74 61 67 20 69 73 20 74 68 65 20 74 61 67 20 77 68 | ses..The.inner.tag.is.the.tag.wh |
725a0 | 69 63 68 20 69 73 20 63 6c 6f 73 65 73 74 20 74 6f 20 74 68 65 20 70 61 79 6c 6f 61 64 20 70 6f | ich.is.closest.to.the.payload.po |
725c0 | 72 74 69 6f 6e 20 6f 66 20 74 68 65 20 66 72 61 6d 65 2e 20 49 74 20 69 73 20 6f 66 66 69 63 69 | rtion.of.the.frame..It.is.offici |
725e0 | 61 6c 6c 79 20 63 61 6c 6c 65 64 20 43 2d 54 41 47 20 28 63 75 73 74 6f 6d 65 72 20 74 61 67 2c | ally.called.C-TAG.(customer.tag, |
72600 | 20 77 69 74 68 20 65 74 68 65 72 74 79 70 65 20 30 78 38 31 30 30 29 2e 20 54 68 65 20 6f 75 74 | .with.ethertype.0x8100)..The.out |
72620 | 65 72 20 74 61 67 20 69 73 20 74 68 65 20 6f 6e 65 20 63 6c 6f 73 65 72 2f 63 6c 6f 73 65 73 74 | er.tag.is.the.one.closer/closest |
72640 | 20 74 6f 20 74 68 65 20 45 74 68 65 72 6e 65 74 20 68 65 61 64 65 72 2c 20 69 74 73 20 6e 61 6d | .to.the.Ethernet.header,.its.nam |
72660 | 65 20 69 73 20 53 2d 54 41 47 20 28 73 65 72 76 69 63 65 20 74 61 67 20 77 69 74 68 20 45 74 68 | e.is.S-TAG.(service.tag.with.Eth |
72680 | 65 72 6e 65 74 20 54 79 70 65 20 3d 20 30 78 38 38 61 38 29 2e 00 54 68 65 20 69 6e 74 65 72 66 | ernet.Type.=.0x88a8)..The.interf |
726a0 | 61 63 65 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 62 65 20 63 6f 6d 69 6e 67 20 69 6e 20 6f 6e | ace.traffic.will.be.coming.in.on |
726c0 | 3b 00 54 68 65 20 69 6e 74 65 72 66 61 63 65 20 75 73 65 64 20 74 6f 20 72 65 63 65 69 76 65 20 | ;.The.interface.used.to.receive. |
726e0 | 61 6e 64 20 72 65 6c 61 79 20 69 6e 64 69 76 69 64 75 61 6c 20 62 72 6f 61 64 63 61 73 74 20 70 | and.relay.individual.broadcast.p |
72700 | 61 63 6b 65 74 73 2e 20 49 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 72 65 63 65 69 76 65 2f 72 | ackets..If.you.want.to.receive/r |
72720 | 65 6c 61 79 20 70 61 63 6b 65 74 73 20 6f 6e 20 62 6f 74 68 20 60 65 74 68 31 60 20 61 6e 64 20 | elay.packets.on.both.`eth1`.and. |
72740 | 60 65 74 68 32 60 20 62 6f 74 68 20 69 6e 74 65 72 66 61 63 65 73 20 6e 65 65 64 20 74 6f 20 62 | `eth2`.both.interfaces.need.to.b |
72760 | 65 20 61 64 64 65 64 2e 00 54 68 65 20 69 6e 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 | e.added..The.internal.IP.address |
72780 | 65 73 20 77 65 20 77 61 6e 74 20 74 6f 20 74 72 61 6e 73 6c 61 74 65 00 54 68 65 20 69 6e 76 65 | es.we.want.to.translate.The.inve |
727a0 | 72 73 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 68 61 73 20 74 6f 20 62 65 20 61 70 70 6c | rse.configuration.has.to.be.appl |
727c0 | 69 65 64 20 74 6f 20 74 68 65 20 72 65 6d 6f 74 65 20 73 69 64 65 2e 00 54 68 65 20 6c 61 72 67 | ied.to.the.remote.side..The.larg |
727e0 | 65 73 74 20 4d 54 55 20 73 69 7a 65 20 79 6f 75 20 63 61 6e 20 75 73 65 20 77 69 74 68 20 44 53 | est.MTU.size.you.can.use.with.DS |
72800 | 4c 20 69 73 20 31 34 39 32 20 64 75 65 20 74 6f 20 50 50 50 6f 45 20 6f 76 65 72 68 65 61 64 2e | L.is.1492.due.to.PPPoE.overhead. |
72820 | 20 49 66 20 79 6f 75 20 61 72 65 20 73 77 69 74 63 68 69 6e 67 20 66 72 6f 6d 20 61 20 44 48 43 | .If.you.are.switching.from.a.DHC |
72840 | 50 20 62 61 73 65 64 20 49 53 50 20 6c 69 6b 65 20 63 61 62 6c 65 20 74 68 65 6e 20 62 65 20 61 | P.based.ISP.like.cable.then.be.a |
72860 | 77 61 72 65 20 74 68 61 74 20 74 68 69 6e 67 73 20 6c 69 6b 65 20 56 50 4e 20 6c 69 6e 6b 73 20 | ware.that.things.like.VPN.links. |
72880 | 6d 61 79 20 6e 65 65 64 20 74 6f 20 68 61 76 65 20 74 68 65 69 72 20 4d 54 55 20 73 69 7a 65 73 | may.need.to.have.their.MTU.sizes |
728a0 | 20 61 64 6a 75 73 74 65 64 20 74 6f 20 77 6f 72 6b 20 77 69 74 68 69 6e 20 74 68 69 73 20 6c 69 | .adjusted.to.work.within.this.li |
728c0 | 6d 69 74 2e 00 54 68 65 20 6c 61 73 74 20 73 74 65 70 20 69 73 20 74 6f 20 64 65 66 69 6e 65 20 | mit..The.last.step.is.to.define. |
728e0 | 61 6e 20 69 6e 74 65 72 66 61 63 65 20 72 6f 75 74 65 20 66 6f 72 20 31 39 32 2e 31 36 38 2e 32 | an.interface.route.for.192.168.2 |
72900 | 2e 30 2f 32 34 20 74 6f 20 67 65 74 20 74 68 72 6f 75 67 68 20 74 68 65 20 57 69 72 65 47 75 61 | .0/24.to.get.through.the.WireGua |
72920 | 72 64 20 69 6e 74 65 72 66 61 63 65 20 60 77 67 30 31 60 2e 20 4d 75 6c 74 69 70 6c 65 20 49 50 | rd.interface.`wg01`..Multiple.IP |
72940 | 73 20 6f 72 20 6e 65 74 77 6f 72 6b 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 61 6e 64 | s.or.networks.can.be.defined.and |
72960 | 20 72 6f 75 74 65 64 2e 20 54 68 65 20 6c 61 73 74 20 63 68 65 63 6b 20 69 73 20 61 6c 6c 6f 77 | .routed..The.last.check.is.allow |
72980 | 65 64 2d 69 70 73 20 77 68 69 63 68 20 65 69 74 68 65 72 20 70 72 65 76 65 6e 74 73 20 6f 72 20 | ed-ips.which.either.prevents.or. |
729a0 | 61 6c 6c 6f 77 73 20 74 68 65 20 74 72 61 66 66 69 63 2e 00 54 68 65 20 6c 65 67 61 63 79 20 61 | allows.the.traffic..The.legacy.a |
729c0 | 6e 64 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 | nd.zone-based.firewall.configura |
729e0 | 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 69 73 20 6e 6f 74 20 6c 6f 6e 67 65 72 20 73 75 70 70 6f | tion.options.is.not.longer.suppo |
72a00 | 72 74 65 64 2e 20 54 68 65 79 20 61 72 65 20 68 65 72 65 20 66 6f 72 20 72 65 66 65 72 65 6e 63 | rted..They.are.here.for.referenc |
72a20 | 65 20 70 75 72 70 6f 73 65 73 20 6f 6e 6c 79 2e 00 54 68 65 20 6c 69 6d 69 74 65 72 20 70 65 72 | e.purposes.only..The.limiter.per |
72a40 | 66 6f 72 6d 73 20 62 61 73 69 63 20 69 6e 67 72 65 73 73 20 70 6f 6c 69 63 69 6e 67 20 6f 66 20 | forms.basic.ingress.policing.of. |
72a60 | 74 72 61 66 66 69 63 20 66 6c 6f 77 73 2e 20 4d 75 6c 74 69 70 6c 65 20 63 6c 61 73 73 65 73 20 | traffic.flows..Multiple.classes. |
72a80 | 6f 66 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 61 6e 64 20 74 72 | of.traffic.can.be.defined.and.tr |
72aa0 | 61 66 66 69 63 20 6c 69 6d 69 74 73 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 65 | affic.limits.can.be.applied.to.e |
72ac0 | 61 63 68 20 63 6c 61 73 73 2e 20 41 6c 74 68 6f 75 67 68 20 74 68 65 20 70 6f 6c 69 63 65 72 20 | ach.class..Although.the.policer. |
72ae0 | 75 73 65 73 20 61 20 74 6f 6b 65 6e 20 62 75 63 6b 65 74 20 6d 65 63 68 61 6e 69 73 6d 20 69 6e | uses.a.token.bucket.mechanism.in |
72b00 | 74 65 72 6e 61 6c 6c 79 2c 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 74 68 65 20 63 | ternally,.it.does.not.have.the.c |
72b20 | 61 70 61 62 69 6c 69 74 79 20 74 6f 20 64 65 6c 61 79 20 61 20 70 61 63 6b 65 74 20 61 73 20 61 | apability.to.delay.a.packet.as.a |
72b40 | 20 73 68 61 70 69 6e 67 20 6d 65 63 68 61 6e 69 73 6d 20 64 6f 65 73 2e 20 54 72 61 66 66 69 63 | .shaping.mechanism.does..Traffic |
72b60 | 20 65 78 63 65 65 64 69 6e 67 20 74 68 65 20 64 65 66 69 6e 65 64 20 62 61 6e 64 77 69 64 74 68 | .exceeding.the.defined.bandwidth |
72b80 | 20 6c 69 6d 69 74 73 20 69 73 20 64 69 72 65 63 74 6c 79 20 64 72 6f 70 70 65 64 2e 20 41 20 6d | .limits.is.directly.dropped..A.m |
72ba0 | 61 78 69 6d 75 6d 20 61 6c 6c 6f 77 65 64 20 62 75 72 73 74 20 63 61 6e 20 62 65 20 63 6f 6e 66 | aximum.allowed.burst.can.be.conf |
72bc0 | 69 67 75 72 65 64 20 74 6f 6f 2e 00 54 68 65 20 6c 69 6e 6b 20 62 61 6e 64 77 69 64 74 68 20 65 | igured.too..The.link.bandwidth.e |
72be0 | 78 74 65 6e 64 65 64 20 63 6f 6d 6d 75 6e 69 74 79 20 69 73 20 65 6e 63 6f 64 65 64 20 61 73 20 | xtended.community.is.encoded.as. |
72c00 | 6e 6f 6e 2d 74 72 61 6e 73 69 74 69 76 65 00 54 68 65 20 6c 6f 63 61 6c 20 49 50 76 34 20 6f 72 | non-transitive.The.local.IPv4.or |
72c20 | 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 69 6e 64 20 74 68 65 20 44 4e 53 20 | .IPv6.addresses.to.bind.the.DNS. |
72c40 | 66 6f 72 77 61 72 64 65 72 20 74 6f 2e 20 54 68 65 20 66 6f 72 77 61 72 64 65 72 20 77 69 6c 6c | forwarder.to..The.forwarder.will |
72c60 | 20 6c 69 73 74 65 6e 20 6f 6e 20 74 68 69 73 20 61 64 64 72 65 73 73 20 66 6f 72 20 69 6e 63 6f | .listen.on.this.address.for.inco |
72c80 | 6d 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 54 68 65 20 6c 6f 63 61 6c 20 49 50 76 34 | ming.connections..The.local.IPv4 |
72ca0 | 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 75 73 65 20 61 73 20 61 20 73 | .or.IPv6.addresses.to.use.as.a.s |
72cc0 | 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 66 6f 72 20 73 65 6e 64 69 6e 67 20 71 75 65 72 69 65 | ource.address.for.sending.querie |
72ce0 | 73 2e 20 54 68 65 20 66 6f 72 77 61 72 64 65 72 20 77 69 6c 6c 20 73 65 6e 64 20 66 6f 72 77 61 | s..The.forwarder.will.send.forwa |
72d00 | 72 64 65 64 20 6f 75 74 62 6f 75 6e 64 20 44 4e 53 20 72 65 71 75 65 73 74 73 20 66 72 6f 6d 20 | rded.outbound.DNS.requests.from. |
72d20 | 74 68 69 73 20 61 64 64 72 65 73 73 2e 00 54 68 65 20 6c 6f 63 61 6c 20 73 69 74 65 20 77 69 6c | this.address..The.local.site.wil |
72d40 | 6c 20 68 61 76 65 20 61 20 73 75 62 6e 65 74 20 6f 66 20 31 30 2e 30 2e 30 2e 30 2f 31 36 2e 00 | l.have.a.subnet.of.10.0.0.0/16.. |
72d60 | 54 68 65 20 6c 6f 6f 70 62 61 63 6b 20 6e 65 74 77 6f 72 6b 69 6e 67 20 69 6e 74 65 72 66 61 63 | The.loopback.networking.interfac |
72d80 | 65 20 69 73 20 61 20 76 69 72 74 75 61 6c 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 20 69 6d | e.is.a.virtual.network.device.im |
72da0 | 70 6c 65 6d 65 6e 74 65 64 20 65 6e 74 69 72 65 6c 79 20 69 6e 20 73 6f 66 74 77 61 72 65 2e 20 | plemented.entirely.in.software.. |
72dc0 | 41 6c 6c 20 74 72 61 66 66 69 63 20 73 65 6e 74 20 74 6f 20 69 74 20 22 6c 6f 6f 70 73 20 62 61 | All.traffic.sent.to.it."loops.ba |
72de0 | 63 6b 22 20 61 6e 64 20 6a 75 73 74 20 74 61 72 67 65 74 73 20 73 65 72 76 69 63 65 73 20 6f 6e | ck".and.just.targets.services.on |
72e00 | 20 79 6f 75 72 20 6c 6f 63 61 6c 20 6d 61 63 68 69 6e 65 2e 00 54 68 65 20 6d 61 69 6e 20 70 6f | .your.local.machine..The.main.po |
72e20 | 69 6e 74 73 20 72 65 67 61 72 64 69 6e 67 20 74 68 69 73 20 70 61 63 6b 65 74 20 66 6c 6f 77 20 | ints.regarding.this.packet.flow. |
72e40 | 61 6e 64 20 74 65 72 6d 69 6e 6f 6c 6f 67 79 20 75 73 65 64 20 69 6e 20 56 79 4f 53 20 66 69 72 | and.terminology.used.in.VyOS.fir |
72e60 | 65 77 61 6c 6c 20 61 72 65 20 63 6f 76 65 72 65 64 20 62 65 6c 6f 77 3a 00 54 68 65 20 6d 61 69 | ewall.are.covered.below:.The.mai |
72e80 | 6e 20 73 74 72 75 63 74 75 72 65 20 56 79 4f 53 20 66 69 72 65 77 61 6c 6c 20 63 6c 69 20 69 73 | n.structure.VyOS.firewall.cli.is |
72ea0 | 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 54 68 65 20 6d 61 69 6e 20 73 74 72 75 63 74 75 72 65 20 | .shown.next:.The.main.structure. |
72ec0 | 6f 66 20 74 68 65 20 56 79 4f 53 20 66 69 72 65 77 61 6c 6c 20 43 4c 49 20 69 73 20 73 68 6f 77 | of.the.VyOS.firewall.CLI.is.show |
72ee0 | 6e 20 6e 65 78 74 3a 00 54 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 74 61 | n.next:.The.maximum.number.of.ta |
72f00 | 72 67 65 74 73 20 74 68 61 74 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 73 20 31 | rgets.that.can.be.specified.is.1 |
72f20 | 36 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 6e 6f 20 49 50 20 61 64 | 6..The.default.value.is.no.IP.ad |
72f40 | 64 72 65 73 73 2e 00 54 68 65 20 6d 65 61 6e 69 6e 67 20 6f 66 20 74 68 65 20 43 6c 61 73 73 20 | dress..The.meaning.of.the.Class. |
72f60 | 49 44 20 69 73 20 6e 6f 74 20 74 68 65 20 73 61 6d 65 20 66 6f 72 20 65 76 65 72 79 20 74 79 70 | ID.is.not.the.same.for.every.typ |
72f80 | 65 20 6f 66 20 70 6f 6c 69 63 79 2e 20 4e 6f 72 6d 61 6c 6c 79 20 70 6f 6c 69 63 69 65 73 20 6a | e.of.policy..Normally.policies.j |
72fa0 | 75 73 74 20 6e 65 65 64 20 61 20 6d 65 61 6e 69 6e 67 6c 65 73 73 20 6e 75 6d 62 65 72 20 74 6f | ust.need.a.meaningless.number.to |
72fc0 | 20 69 64 65 6e 74 69 66 79 20 61 20 63 6c 61 73 73 20 28 43 6c 61 73 73 20 49 44 29 2c 20 62 75 | .identify.a.class.(Class.ID),.bu |
72fe0 | 74 20 74 68 61 74 20 64 6f 65 73 20 6e 6f 74 20 61 70 70 6c 79 20 74 6f 20 65 76 65 72 79 20 70 | t.that.does.not.apply.to.every.p |
73000 | 6f 6c 69 63 79 2e 20 54 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 61 20 63 6c 61 73 73 20 69 6e 20 | olicy..The.number.of.a.class.in. |
73020 | 61 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 6f 6e 6c | a.Priority.Queue.it.does.not.onl |
73040 | 79 20 69 64 65 6e 74 69 66 79 20 69 74 2c 20 69 74 20 61 6c 73 6f 20 64 65 66 69 6e 65 73 20 69 | y.identify.it,.it.also.defines.i |
73060 | 74 73 20 70 72 69 6f 72 69 74 79 2e 00 54 68 65 20 6d 65 6d 62 65 72 20 69 6e 74 65 72 66 61 63 | ts.priority..The.member.interfac |
73080 | 65 20 60 65 74 68 31 60 20 69 73 20 61 20 74 72 75 6e 6b 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 | e.`eth1`.is.a.trunk.that.allows. |
730a0 | 56 4c 41 4e 20 31 30 20 74 6f 20 70 61 73 73 00 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 | VLAN.10.to.pass.The.metric.range |
730c0 | 20 69 73 20 31 20 74 6f 20 31 36 37 37 37 32 31 35 20 28 4d 61 78 20 76 61 6c 75 65 20 64 65 70 | .is.1.to.16777215.(Max.value.dep |
730e0 | 65 6e 64 20 69 66 20 6d 65 74 72 69 63 20 73 75 70 70 6f 72 74 20 6e 61 72 72 6f 77 20 6f 72 20 | end.if.metric.support.narrow.or. |
73100 | 77 69 64 65 20 76 61 6c 75 65 29 2e 00 54 68 65 20 6d 69 6e 69 6d 61 6c 20 65 63 68 6f 20 72 65 | wide.value)..The.minimal.echo.re |
73120 | 63 65 69 76 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 74 68 61 74 | ceive.transmission.interval.that |
73140 | 20 74 68 69 73 20 73 79 73 74 65 6d 20 69 73 20 63 61 70 61 62 6c 65 20 6f 66 20 68 61 6e 64 6c | .this.system.is.capable.of.handl |
73160 | 69 6e 67 00 54 68 65 20 6d 6f 73 74 20 76 69 73 69 62 6c 65 20 61 70 70 6c 69 63 61 74 69 6f 6e | ing.The.most.visible.application |
73180 | 20 6f 66 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 66 6f 72 20 61 63 63 65 73 73 20 74 | .of.the.protocol.is.for.access.t |
731a0 | 6f 20 73 68 65 6c 6c 20 61 63 63 6f 75 6e 74 73 20 6f 6e 20 55 6e 69 78 2d 6c 69 6b 65 20 6f 70 | o.shell.accounts.on.Unix-like.op |
731c0 | 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d 73 2c 20 62 75 74 20 69 74 20 73 65 65 73 20 73 6f 6d | erating.systems,.but.it.sees.som |
731e0 | 65 20 6c 69 6d 69 74 65 64 20 75 73 65 20 6f 6e 20 57 69 6e 64 6f 77 73 20 61 73 20 77 65 6c 6c | e.limited.use.on.Windows.as.well |
73200 | 2e 20 49 6e 20 32 30 31 35 2c 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 6e 6f 75 6e 63 65 64 20 74 | ..In.2015,.Microsoft.announced.t |
73220 | 68 61 74 20 74 68 65 79 20 77 6f 75 6c 64 20 69 6e 63 6c 75 64 65 20 6e 61 74 69 76 65 20 73 75 | hat.they.would.include.native.su |
73240 | 70 70 6f 72 74 20 66 6f 72 20 53 53 48 20 69 6e 20 61 20 66 75 74 75 72 65 20 72 65 6c 65 61 73 | pport.for.SSH.in.a.future.releas |
73260 | 65 2e 00 54 68 65 20 6d 75 6c 74 69 63 61 73 74 2d 67 72 6f 75 70 20 75 73 65 64 20 62 79 20 61 | e..The.multicast-group.used.by.a |
73280 | 6c 6c 20 6c 65 61 76 65 73 20 66 6f 72 20 74 68 69 73 20 76 6c 61 6e 20 65 78 74 65 6e 73 69 6f | ll.leaves.for.this.vlan.extensio |
732a0 | 6e 2e 20 48 61 73 20 74 6f 20 62 65 20 74 68 65 20 73 61 6d 65 20 6f 6e 20 61 6c 6c 20 6c 65 61 | n..Has.to.be.the.same.on.all.lea |
732c0 | 76 65 73 20 74 68 61 74 20 68 61 73 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 65 | ves.that.has.this.interface..The |
732e0 | 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 73 65 72 76 69 63 65 20 63 61 6e 20 62 65 20 64 69 66 66 | .name.of.the.service.can.be.diff |
73300 | 65 72 65 6e 74 2c 20 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 69 74 20 69 73 20 6f 6e 6c | erent,.in.this.example.it.is.onl |
73320 | 79 20 66 6f 72 20 63 6f 6e 76 65 6e 69 65 6e 63 65 2e 00 54 68 65 20 6e 65 74 6d 61 73 6b 20 6f | y.for.convenience..The.netmask.o |
73340 | 72 20 64 6f 6d 61 69 6e 20 74 68 61 74 20 45 44 4e 53 20 43 6c 69 65 6e 74 20 53 75 62 6e 65 74 | r.domain.that.EDNS.Client.Subnet |
73360 | 20 73 68 6f 75 6c 64 20 62 65 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 69 6e 20 6f 75 74 67 6f 69 | .should.be.enabled.for.in.outgoi |
73380 | 6e 67 20 71 75 65 72 69 65 73 2e 00 54 68 65 20 6e 65 74 77 6f 72 6b 20 74 6f 70 6f 6c 6f 67 79 | ng.queries..The.network.topology |
733a0 | 20 69 73 20 64 65 63 6c 61 72 65 64 20 62 79 20 73 68 61 72 65 64 2d 6e 65 74 77 6f 72 6b 2d 6e | .is.declared.by.shared-network-n |
733c0 | 61 6d 65 20 61 6e 64 20 74 68 65 20 73 75 62 6e 65 74 20 64 65 63 6c 61 72 61 74 69 6f 6e 73 2e | ame.and.the.subnet.declarations. |
733e0 | 20 54 68 65 20 44 48 43 50 20 73 65 72 76 69 63 65 20 63 61 6e 20 73 65 72 76 65 20 6d 75 6c 74 | .The.DHCP.service.can.serve.mult |
73400 | 69 70 6c 65 20 73 68 61 72 65 64 20 6e 65 74 77 6f 72 6b 73 2c 20 77 69 74 68 20 65 61 63 68 20 | iple.shared.networks,.with.each. |
73420 | 73 68 61 72 65 64 20 6e 65 74 77 6f 72 6b 20 68 61 76 69 6e 67 20 31 20 6f 72 20 6d 6f 72 65 20 | shared.network.having.1.or.more. |
73440 | 73 75 62 6e 65 74 73 2e 20 45 61 63 68 20 73 75 62 6e 65 74 20 6d 75 73 74 20 62 65 20 70 72 65 | subnets..Each.subnet.must.be.pre |
73460 | 73 65 6e 74 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 41 20 72 61 6e 67 65 20 63 61 | sent.on.an.interface..A.range.ca |
73480 | 6e 20 62 65 20 64 65 63 6c 61 72 65 64 20 69 6e 73 69 64 65 20 61 20 73 75 62 6e 65 74 20 74 6f | n.be.declared.inside.a.subnet.to |
734a0 | 20 64 65 66 69 6e 65 20 61 20 70 6f 6f 6c 20 6f 66 20 64 79 6e 61 6d 69 63 20 61 64 64 72 65 73 | .define.a.pool.of.dynamic.addres |
734c0 | 73 65 73 2e 20 4d 75 6c 74 69 70 6c 65 20 72 61 6e 67 65 73 20 63 61 6e 20 62 65 20 64 65 66 69 | ses..Multiple.ranges.can.be.defi |
734e0 | 6e 65 64 20 61 6e 64 20 63 61 6e 20 63 6f 6e 74 61 69 6e 20 68 6f 6c 65 73 2e 20 53 74 61 74 69 | ned.and.can.contain.holes..Stati |
73500 | 63 20 6d 61 70 70 69 6e 67 73 20 63 61 6e 20 62 65 20 73 65 74 20 74 6f 20 61 73 73 69 67 6e 20 | c.mappings.can.be.set.to.assign. |
73520 | 22 73 74 61 74 69 63 22 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 63 6c 69 65 6e 74 73 20 62 61 | "static".addresses.to.clients.ba |
73540 | 73 65 64 20 6f 6e 20 74 68 65 69 72 20 4d 41 43 20 61 64 64 72 65 73 73 2e 00 54 68 65 20 6e 65 | sed.on.their.MAC.address..The.ne |
73560 | 78 74 20 65 78 61 6d 70 6c 65 20 69 73 20 61 20 73 69 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 | xt.example.is.a.simple.configura |
73580 | 74 69 6f 6e 20 6f 66 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 2e 00 54 68 65 20 6e 65 78 74 | tion.of.conntrack-sync..The.next |
735a0 | 20 73 74 65 70 20 69 73 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 6c 6f 63 61 6c | .step.is.to.configure.your.local |
735c0 | 20 73 69 64 65 20 61 73 20 77 65 6c 6c 20 61 73 20 74 68 65 20 70 6f 6c 69 63 79 20 62 61 73 65 | .side.as.well.as.the.policy.base |
735e0 | 64 20 74 72 75 73 74 65 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 65 73 2e | d.trusted.destination.addresses. |
73600 | 20 49 66 20 79 6f 75 20 6f 6e 6c 79 20 69 6e 69 74 69 61 74 65 20 61 20 63 6f 6e 6e 65 63 74 69 | .If.you.only.initiate.a.connecti |
73620 | 6f 6e 2c 20 74 68 65 20 6c 69 73 74 65 6e 20 70 6f 72 74 20 61 6e 64 20 61 64 64 72 65 73 73 2f | on,.the.listen.port.and.address/ |
73640 | 70 6f 72 74 20 69 73 20 6f 70 74 69 6f 6e 61 6c 3b 20 68 6f 77 65 76 65 72 2c 20 69 66 20 79 6f | port.is.optional;.however,.if.yo |
73660 | 75 20 61 63 74 20 6c 69 6b 65 20 61 20 73 65 72 76 65 72 20 61 6e 64 20 65 6e 64 70 6f 69 6e 74 | u.act.like.a.server.and.endpoint |
73680 | 73 20 69 6e 69 74 69 61 74 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 79 6f | s.initiate.the.connections.to.yo |
736a0 | 75 72 20 73 79 73 74 65 6d 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 64 65 66 69 6e 65 20 61 20 | ur.system,.you.need.to.define.a. |
736c0 | 70 6f 72 74 20 79 6f 75 72 20 63 6c 69 65 6e 74 73 20 63 61 6e 20 63 6f 6e 6e 65 63 74 20 74 6f | port.your.clients.can.connect.to |
736e0 | 2c 20 6f 74 68 65 72 77 69 73 65 20 74 68 65 20 70 6f 72 74 20 69 73 20 72 61 6e 64 6f 6d 6c 79 | ,.otherwise.the.port.is.randomly |
73700 | 20 63 68 6f 73 65 6e 20 61 6e 64 20 6d 61 79 20 6d 61 6b 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 | .chosen.and.may.make.connection. |
73720 | 64 69 66 66 69 63 75 6c 74 20 77 69 74 68 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 2c 20 73 | difficult.with.firewall.rules,.s |
73740 | 69 6e 63 65 20 74 68 65 20 70 6f 72 74 20 6d 61 79 20 62 65 20 64 69 66 66 65 72 65 6e 74 20 65 | ince.the.port.may.be.different.e |
73760 | 61 63 68 20 74 69 6d 65 20 74 68 65 20 73 79 73 74 65 6d 20 69 73 20 72 65 62 6f 6f 74 65 64 2e | ach.time.the.system.is.rebooted. |
73780 | 00 54 68 65 20 6e 6f 74 65 64 20 70 75 62 6c 69 63 20 6b 65 79 73 20 73 68 6f 75 6c 64 20 62 65 | .The.noted.public.keys.should.be |
737a0 | 20 65 6e 74 65 72 65 64 20 6f 6e 20 74 68 65 20 6f 70 70 6f 73 69 74 65 20 72 6f 75 74 65 72 73 | .entered.on.the.opposite.routers |
737c0 | 2e 00 54 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 74 6f 20 | ..The.number.of.milliseconds.to. |
737e0 | 77 61 69 74 20 66 6f 72 20 61 20 72 65 6d 6f 74 65 20 61 75 74 68 6f 72 69 74 61 74 69 76 65 20 | wait.for.a.remote.authoritative. |
73800 | 73 65 72 76 65 72 20 74 6f 20 72 65 73 70 6f 6e 64 20 62 65 66 6f 72 65 20 74 69 6d 69 6e 67 20 | server.to.respond.before.timing. |
73820 | 6f 75 74 20 61 6e 64 20 72 65 73 70 6f 6e 64 69 6e 67 20 77 69 74 68 20 53 45 52 56 46 41 49 4c | out.and.responding.with.SERVFAIL |
73840 | 2e 00 54 68 65 20 6e 75 6d 62 65 72 20 70 61 72 61 6d 65 74 65 72 20 28 31 2d 31 30 29 20 63 6f | ..The.number.parameter.(1-10).co |
73860 | 6e 66 69 67 75 72 65 73 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 61 63 63 65 70 74 65 64 20 | nfigures.the.amount.of.accepted. |
73880 | 6f 63 63 75 72 65 6e 63 65 73 20 6f 66 20 74 68 65 20 73 79 73 74 65 6d 20 41 53 20 6e 75 6d 62 | occurences.of.the.system.AS.numb |
738a0 | 65 72 20 69 6e 20 41 53 20 70 61 74 68 2e 00 54 68 65 20 6f 66 66 69 63 69 61 6c 20 70 6f 72 74 | er.in.AS.path..The.official.port |
738c0 | 20 66 6f 72 20 4f 70 65 6e 56 50 4e 20 69 73 20 31 31 39 34 2c 20 77 68 69 63 68 20 77 65 20 72 | .for.OpenVPN.is.1194,.which.we.r |
738e0 | 65 73 65 72 76 65 20 66 6f 72 20 63 6c 69 65 6e 74 20 56 50 4e 3b 20 77 65 20 77 69 6c 6c 20 75 | eserve.for.client.VPN;.we.will.u |
73900 | 73 65 20 31 31 39 35 20 66 6f 72 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 56 50 4e 2e 00 54 68 | se.1195.for.site-to-site.VPN..Th |
73920 | 65 20 6f 6e 6c 79 20 73 74 61 67 65 73 20 56 79 4f 53 20 77 69 6c 6c 20 70 72 6f 63 65 73 73 20 | e.only.stages.VyOS.will.process. |
73940 | 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 | as.part.of.the.firewall.configur |
73960 | 61 74 69 6f 6e 20 69 73 20 74 68 65 20 60 66 6f 72 77 61 72 64 60 20 28 46 34 20 73 74 61 67 65 | ation.is.the.`forward`.(F4.stage |
73980 | 29 2c 20 60 69 6e 70 75 74 60 20 28 4c 34 20 73 74 61 67 65 29 2c 20 61 6e 64 20 60 6f 75 74 70 | ),.`input`.(L4.stage),.and.`outp |
739a0 | 75 74 60 20 28 4c 35 20 73 74 61 67 65 29 2e 20 41 6c 6c 20 74 68 65 20 6f 74 68 65 72 20 73 74 | ut`.(L5.stage)..All.the.other.st |
739c0 | 61 67 65 73 20 61 6e 64 20 73 74 65 70 73 20 61 72 65 20 66 6f 72 20 72 65 66 65 72 65 6e 63 65 | ages.and.steps.are.for.reference |
739e0 | 20 61 6e 64 20 63 61 6e 74 20 62 65 20 6d 61 6e 69 70 75 6c 61 74 65 64 20 74 68 72 6f 75 67 68 | .and.cant.be.manipulated.through |
73a00 | 20 56 79 4f 53 2e 00 54 68 65 20 6f 70 74 69 6f 6e 61 6c 20 60 64 69 73 61 62 6c 65 60 20 6f 70 | .VyOS..The.optional.`disable`.op |
73a20 | 74 69 6f 6e 20 61 6c 6c 6f 77 73 20 74 6f 20 65 78 63 6c 75 64 65 20 69 6e 74 65 72 66 61 63 65 | tion.allows.to.exclude.interface |
73a40 | 20 66 72 6f 6d 20 70 61 73 73 69 76 65 20 73 74 61 74 65 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e | .from.passive.state..This.comman |
73a60 | 64 20 69 73 20 75 73 65 64 20 69 66 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 3a 63 66 67 63 6d 64 | d.is.used.if.the.command.:cfgcmd |
73a80 | 3a 60 70 61 73 73 69 76 65 2d 69 6e 74 65 72 66 61 63 65 20 64 65 66 61 75 6c 74 60 20 77 61 73 | :`passive-interface.default`.was |
73aa0 | 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 54 68 65 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 | .configured..The.optional.parame |
73ac0 | 74 65 72 20 72 65 67 69 73 74 65 72 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 52 65 67 69 | ter.register.specifies.that.Regi |
73ae0 | 73 74 72 61 74 69 6f 6e 20 52 65 71 75 65 73 74 20 73 68 6f 75 6c 64 20 62 65 20 73 65 6e 74 20 | stration.Request.should.be.sent. |
73b00 | 74 6f 20 74 68 69 73 20 70 65 65 72 20 6f 6e 20 73 74 61 72 74 75 70 2e 00 54 68 65 20 6f 72 69 | to.this.peer.on.startup..The.ori |
73b20 | 67 69 6e 61 6c 20 38 30 32 2e 31 71 5f 20 73 70 65 63 69 66 69 63 61 74 69 6f 6e 20 61 6c 6c 6f | ginal.802.1q_.specification.allo |
73b40 | 77 73 20 61 20 73 69 6e 67 6c 65 20 56 69 72 74 75 61 6c 20 4c 6f 63 61 6c 20 41 72 65 61 20 4e | ws.a.single.Virtual.Local.Area.N |
73b60 | 65 74 77 6f 72 6b 20 28 56 4c 41 4e 29 20 68 65 61 64 65 72 20 74 6f 20 62 65 20 69 6e 73 65 72 | etwork.(VLAN).header.to.be.inser |
73b80 | 74 65 64 20 69 6e 74 6f 20 61 6e 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 2e 20 51 69 6e 51 | ted.into.an.Ethernet.frame..QinQ |
73ba0 | 20 61 6c 6c 6f 77 73 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 20 74 61 67 73 20 74 6f 20 62 65 | .allows.multiple.VLAN.tags.to.be |
73bc0 | 20 69 6e 73 65 72 74 65 64 20 69 6e 74 6f 20 61 20 73 69 6e 67 6c 65 20 66 72 61 6d 65 2c 20 61 | .inserted.into.a.single.frame,.a |
73be0 | 6e 20 65 73 73 65 6e 74 69 61 6c 20 63 61 70 61 62 69 6c 69 74 79 20 66 6f 72 20 69 6d 70 6c 65 | n.essential.capability.for.imple |
73c00 | 6d 65 6e 74 69 6e 67 20 4d 65 74 72 6f 20 45 74 68 65 72 6e 65 74 20 6e 65 74 77 6f 72 6b 20 74 | menting.Metro.Ethernet.network.t |
73c20 | 6f 70 6f 6c 6f 67 69 65 73 2e 20 4a 75 73 74 20 61 73 20 51 69 6e 51 20 65 78 74 65 6e 64 73 20 | opologies..Just.as.QinQ.extends. |
73c40 | 38 30 32 2e 31 51 2c 20 51 69 6e 51 20 69 74 73 65 6c 66 20 69 73 20 65 78 74 65 6e 64 65 64 20 | 802.1Q,.QinQ.itself.is.extended. |
73c60 | 62 79 20 6f 74 68 65 72 20 4d 65 74 72 6f 20 45 74 68 65 72 6e 65 74 20 70 72 6f 74 6f 63 6f 6c | by.other.Metro.Ethernet.protocol |
73c80 | 73 2e 00 54 68 65 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 70 65 72 | s..The.outgoing.interface.to.per |
73ca0 | 66 6f 72 6d 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6f 6e 00 54 68 65 20 70 65 65 72 | form.the.translation.on.The.peer |
73cc0 | 20 6e 61 6d 65 20 6d 75 73 74 20 62 65 20 61 6e 20 61 6c 70 68 61 6e 75 6d 65 72 69 63 20 61 6e | .name.must.be.an.alphanumeric.an |
73ce0 | 64 20 63 61 6e 20 68 61 76 65 20 68 79 70 65 6e 20 6f 72 20 75 6e 64 65 72 73 63 6f 72 65 20 61 | d.can.have.hypen.or.underscore.a |
73d00 | 73 20 73 70 65 63 69 61 6c 20 63 68 61 72 61 63 74 65 72 73 2e 20 49 74 20 69 73 20 70 75 72 65 | s.special.characters..It.is.pure |
73d20 | 6c 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 61 6c 2e 00 54 68 65 20 70 65 65 72 20 6e 61 6d 65 73 | ly.informational..The.peer.names |
73d40 | 20 52 49 47 48 54 20 61 6e 64 20 4c 45 46 54 20 61 72 65 20 75 73 65 64 20 61 73 20 69 6e 66 6f | .RIGHT.and.LEFT.are.used.as.info |
73d60 | 72 6d 61 74 69 6f 6e 61 6c 20 74 65 78 74 2e 00 54 68 65 20 70 65 65 72 20 77 69 74 68 20 6c 6f | rmational.text..The.peer.with.lo |
73d80 | 77 65 72 20 70 72 69 6f 72 69 74 79 20 77 69 6c 6c 20 62 65 63 6f 6d 65 20 74 68 65 20 6b 65 79 | wer.priority.will.become.the.key |
73da0 | 20 73 65 72 76 65 72 20 61 6e 64 20 73 74 61 72 74 20 64 69 73 74 72 69 62 75 74 69 6e 67 20 53 | .server.and.start.distributing.S |
73dc0 | 41 4b 73 2e 00 54 68 65 20 70 69 6e 67 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f | AKs..The.ping.command.is.used.to |
73de0 | 20 74 65 73 74 20 77 68 65 74 68 65 72 20 61 20 6e 65 74 77 6f 72 6b 20 68 6f 73 74 20 69 73 20 | .test.whether.a.network.host.is. |
73e00 | 72 65 61 63 68 61 62 6c 65 20 6f 72 20 6e 6f 74 2e 00 54 68 65 20 70 6f 70 75 6c 61 72 20 55 6e | reachable.or.not..The.popular.Un |
73e20 | 69 78 2f 4c 69 6e 75 78 20 60 60 64 69 67 60 60 20 74 6f 6f 6c 20 73 65 74 73 20 74 68 65 20 41 | ix/Linux.``dig``.tool.sets.the.A |
73e40 | 44 2d 62 69 74 20 69 6e 20 74 68 65 20 71 75 65 72 79 2e 20 54 68 69 73 20 6d 69 67 68 74 20 6c | D-bit.in.the.query..This.might.l |
73e60 | 65 61 64 20 74 6f 20 75 6e 65 78 70 65 63 74 65 64 20 71 75 65 72 79 20 72 65 73 75 6c 74 73 20 | ead.to.unexpected.query.results. |
73e80 | 77 68 65 6e 20 74 65 73 74 69 6e 67 2e 20 53 65 74 20 60 60 2b 6e 6f 61 64 60 60 20 6f 6e 20 74 | when.testing..Set.``+noad``.on.t |
73ea0 | 68 65 20 60 60 64 69 67 60 60 20 63 6f 6d 6d 61 6e 64 20 6c 69 6e 65 20 77 68 65 6e 20 74 68 69 | he.``dig``.command.line.when.thi |
73ec0 | 73 20 69 73 20 74 68 65 20 63 61 73 65 2e 00 54 68 65 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 | s.is.the.case..The.pre-shared.ke |
73ee0 | 79 20 6d 6f 64 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 77 69 6c 6c 20 62 65 | y.mode.is.deprecated.and.will.be |
73f00 | 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 66 75 74 75 72 65 20 4f 70 65 6e 56 50 4e 20 76 65 72 | .removed.from.future.OpenVPN.ver |
73f20 | 73 69 6f 6e 73 2c 20 73 6f 20 56 79 4f 53 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 72 65 6d 6f | sions,.so.VyOS.will.have.to.remo |
73f40 | 76 65 20 73 75 70 70 6f 72 74 20 66 6f 72 20 74 68 61 74 20 6f 70 74 69 6f 6e 20 61 73 20 77 65 | ve.support.for.that.option.as.we |
73f60 | 6c 6c 2e 20 54 68 65 20 72 65 61 73 6f 6e 20 69 73 20 74 68 61 74 20 75 73 69 6e 67 20 70 72 65 | ll..The.reason.is.that.using.pre |
73f80 | 2d 73 68 61 72 65 64 20 6b 65 79 73 20 69 73 20 73 69 67 6e 69 66 69 63 61 6e 74 6c 79 20 6c 65 | -shared.keys.is.significantly.le |
73fa0 | 73 73 20 73 65 63 75 72 65 20 74 68 61 6e 20 75 73 69 6e 67 20 54 4c 53 2e 00 54 68 65 20 70 72 | ss.secure.than.using.TLS..The.pr |
73fc0 | 65 66 69 78 20 61 6e 64 20 41 53 4e 20 74 68 61 74 20 6f 72 69 67 69 6e 61 74 65 64 20 69 74 20 | efix.and.ASN.that.originated.it. |
73fe0 | 6d 61 74 63 68 20 61 20 73 69 67 6e 65 64 20 52 4f 41 2e 20 54 68 65 73 65 20 61 72 65 20 70 72 | match.a.signed.ROA..These.are.pr |
74000 | 6f 62 61 62 6c 79 20 74 72 75 73 74 77 6f 72 74 68 79 20 72 6f 75 74 65 20 61 6e 6e 6f 75 6e 63 | obably.trustworthy.route.announc |
74020 | 65 6d 65 6e 74 73 2e 00 54 68 65 20 70 72 65 66 69 78 20 6f 72 20 70 72 65 66 69 78 20 6c 65 6e | ements..The.prefix.or.prefix.len |
74040 | 67 74 68 20 61 6e 64 20 41 53 4e 20 74 68 61 74 20 6f 72 69 67 69 6e 61 74 65 64 20 69 74 20 64 | gth.and.ASN.that.originated.it.d |
74060 | 6f 65 73 6e 27 74 20 6d 61 74 63 68 20 61 6e 79 20 65 78 69 73 74 69 6e 67 20 52 4f 41 2e 20 54 | oesn't.match.any.existing.ROA..T |
74080 | 68 69 73 20 63 6f 75 6c 64 20 62 65 20 74 68 65 20 72 65 73 75 6c 74 20 6f 66 20 61 20 70 72 65 | his.could.be.the.result.of.a.pre |
740a0 | 66 69 78 20 68 69 6a 61 63 6b 2c 20 6f 72 20 6d 65 72 65 6c 79 20 61 20 6d 69 73 63 6f 6e 66 69 | fix.hijack,.or.merely.a.misconfi |
740c0 | 67 75 72 61 74 69 6f 6e 2c 20 62 75 74 20 73 68 6f 75 6c 64 20 70 72 6f 62 61 62 6c 79 20 62 65 | guration,.but.should.probably.be |
740e0 | 20 74 72 65 61 74 65 64 20 61 73 20 75 6e 74 72 75 73 74 77 6f 72 74 68 79 20 72 6f 75 74 65 20 | .treated.as.untrustworthy.route. |
74100 | 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 2e 00 54 68 65 20 70 72 69 6d 61 72 79 20 44 48 43 50 20 | announcements..The.primary.DHCP. |
74120 | 73 65 72 76 65 72 20 75 73 65 73 20 61 64 64 72 65 73 73 20 60 31 39 32 2e 31 36 38 2e 31 38 39 | server.uses.address.`192.168.189 |
74140 | 2e 32 35 32 60 00 54 68 65 20 70 72 69 6d 61 72 79 20 61 6e 64 20 73 65 63 6f 6e 64 61 72 79 20 | .252`.The.primary.and.secondary. |
74160 | 73 74 61 74 65 6d 65 6e 74 73 20 64 65 74 65 72 6d 69 6e 65 73 20 77 68 65 74 68 65 72 20 74 68 | statements.determines.whether.th |
74180 | 65 20 73 65 72 76 65 72 20 69 73 20 70 72 69 6d 61 72 79 20 6f 72 20 73 65 63 6f 6e 64 61 72 79 | e.server.is.primary.or.secondary |
741a0 | 2e 00 54 68 65 20 70 72 69 6d 61 72 79 20 6f 70 74 69 6f 6e 20 69 73 20 6f 6e 6c 79 20 76 61 6c | ..The.primary.option.is.only.val |
741c0 | 69 64 20 66 6f 72 20 61 63 74 69 76 65 2d 62 61 63 6b 75 70 2c 20 74 72 61 6e 73 6d 69 74 2d 6c | id.for.active-backup,.transmit-l |
741e0 | 6f 61 64 2d 62 61 6c 61 6e 63 65 2c 20 61 6e 64 20 61 64 61 70 74 69 76 65 2d 6c 6f 61 64 2d 62 | oad-balance,.and.adaptive-load-b |
74200 | 61 6c 61 6e 63 65 20 6d 6f 64 65 2e 00 54 68 65 20 70 72 69 6f 72 69 74 79 20 6d 75 73 74 20 62 | alance.mode..The.priority.must.b |
74220 | 65 20 61 6e 20 69 6e 74 65 67 65 72 20 6e 75 6d 62 65 72 20 66 72 6f 6d 20 31 20 74 6f 20 32 35 | e.an.integer.number.from.1.to.25 |
74240 | 35 2e 20 48 69 67 68 65 72 20 70 72 69 6f 72 69 74 79 20 76 61 6c 75 65 20 69 6e 63 72 65 61 73 | 5..Higher.priority.value.increas |
74260 | 65 73 20 72 6f 75 74 65 72 27 73 20 70 72 65 63 65 64 65 6e 63 65 20 69 6e 20 74 68 65 20 6d 61 | es.router's.precedence.in.the.ma |
74280 | 73 74 65 72 20 65 6c 65 63 74 69 6f 6e 73 2e 00 54 68 65 20 70 72 6f 63 65 64 75 72 65 20 74 6f | ster.elections..The.procedure.to |
742a0 | 20 73 70 65 63 69 66 79 20 61 20 3a 61 62 62 72 3a 60 4e 49 53 2b 20 28 4e 65 74 77 6f 72 6b 20 | .specify.a.:abbr:`NIS+.(Network. |
742c0 | 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 53 65 72 76 69 63 65 20 50 6c 75 73 29 60 20 64 6f 6d 61 69 | Information.Service.Plus)`.domai |
742e0 | 6e 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 74 68 65 20 4e 49 53 20 64 6f 6d 61 69 6e 20 6f | n.is.similar.to.the.NIS.domain.o |
74300 | 6e 65 3a 00 54 68 65 20 70 72 6f 6d 70 74 20 69 73 20 61 64 6a 75 73 74 65 64 20 74 6f 20 72 65 | ne:.The.prompt.is.adjusted.to.re |
74320 | 66 6c 65 63 74 20 74 68 69 73 20 63 68 61 6e 67 65 20 69 6e 20 62 6f 74 68 20 63 6f 6e 66 69 67 | flect.this.change.in.both.config |
74340 | 20 61 6e 64 20 6f 70 2d 6d 6f 64 65 2e 00 54 68 65 20 70 72 6f 74 6f 63 6f 6c 20 61 6e 64 20 70 | .and.op-mode..The.protocol.and.p |
74360 | 6f 72 74 20 77 65 20 77 69 73 68 20 74 6f 20 66 6f 72 77 61 72 64 3b 00 54 68 65 20 70 72 6f 74 | ort.we.wish.to.forward;.The.prot |
74380 | 6f 63 6f 6c 20 69 73 20 75 73 75 61 6c 6c 79 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 74 65 72 | ocol.is.usually.described.in.ter |
743a0 | 6d 73 20 6f 66 20 61 20 63 6c 69 65 6e 74 2d 73 65 72 76 65 72 20 6d 6f 64 65 6c 2c 20 62 75 74 | ms.of.a.client-server.model,.but |
743c0 | 20 63 61 6e 20 61 73 20 65 61 73 69 6c 79 20 62 65 20 75 73 65 64 20 69 6e 20 70 65 65 72 2d 74 | .can.as.easily.be.used.in.peer-t |
743e0 | 6f 2d 70 65 65 72 20 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 20 77 68 65 72 65 20 62 6f 74 68 20 | o-peer.relationships.where.both. |
74400 | 70 65 65 72 73 20 63 6f 6e 73 69 64 65 72 20 74 68 65 20 6f 74 68 65 72 20 74 6f 20 62 65 20 61 | peers.consider.the.other.to.be.a |
74420 | 20 70 6f 74 65 6e 74 69 61 6c 20 74 69 6d 65 20 73 6f 75 72 63 65 2e 20 49 6d 70 6c 65 6d 65 6e | .potential.time.source..Implemen |
74440 | 74 61 74 69 6f 6e 73 20 73 65 6e 64 20 61 6e 64 20 72 65 63 65 69 76 65 20 74 69 6d 65 73 74 61 | tations.send.and.receive.timesta |
74460 | 6d 70 73 20 75 73 69 6e 67 20 3a 61 62 62 72 3a 60 55 44 50 20 28 55 73 65 72 20 44 61 74 61 67 | mps.using.:abbr:`UDP.(User.Datag |
74480 | 72 61 6d 20 50 72 6f 74 6f 63 6f 6c 29 60 20 6f 6e 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 31 32 | ram.Protocol)`.on.port.number.12 |
744a0 | 33 2e 00 54 68 65 20 70 72 6f 74 6f 63 6f 6c 20 6f 76 65 72 68 65 61 64 20 6f 66 20 4c 32 54 50 | 3..The.protocol.overhead.of.L2TP |
744c0 | 76 33 20 69 73 20 61 6c 73 6f 20 73 69 67 6e 69 66 69 63 61 6e 74 6c 79 20 62 69 67 67 65 72 20 | v3.is.also.significantly.bigger. |
744e0 | 74 68 61 6e 20 4d 50 4c 53 2e 00 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 69 63 65 20 69 6e 20 | than.MPLS..The.proxy.service.in. |
74500 | 56 79 4f 53 20 69 73 20 62 61 73 65 64 20 6f 6e 20 53 71 75 69 64 5f 20 61 6e 64 20 73 6f 6d 65 | VyOS.is.based.on.Squid_.and.some |
74520 | 20 72 65 6c 61 74 65 64 20 6d 6f 64 75 6c 65 73 2e 00 54 68 65 20 70 75 62 6c 69 63 20 49 50 20 | .related.modules..The.public.IP. |
74540 | 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 73 69 64 65 20 6f 66 20 74 68 65 | address.of.the.local.side.of.the |
74560 | 20 56 50 4e 20 77 69 6c 6c 20 62 65 20 31 39 38 2e 35 31 2e 31 30 30 2e 31 30 2e 00 54 68 65 20 | .VPN.will.be.198.51.100.10..The. |
74580 | 70 75 62 6c 69 63 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 20 | public.IP.address.of.the.remote. |
745a0 | 73 69 64 65 20 6f 66 20 74 68 65 20 56 50 4e 20 77 69 6c 6c 20 62 65 20 32 30 33 2e 30 2e 31 31 | side.of.the.VPN.will.be.203.0.11 |
745c0 | 33 2e 31 31 2e 00 54 68 65 20 72 61 74 65 2d 6c 69 6d 69 74 20 69 73 20 73 65 74 20 69 6e 20 6b | 3.11..The.rate-limit.is.set.in.k |
745e0 | 62 69 74 2f 73 65 63 2e 00 54 68 65 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 | bit/sec..The.regular.expression. |
74600 | 6d 61 74 63 68 65 73 20 69 66 20 61 6e 64 20 6f 6e 6c 79 20 69 66 20 74 68 65 20 65 6e 74 69 72 | matches.if.and.only.if.the.entir |
74620 | 65 20 73 74 72 69 6e 67 20 6d 61 74 63 68 65 73 20 74 68 65 20 70 61 74 74 65 72 6e 2e 00 54 68 | e.string.matches.the.pattern..Th |
74640 | 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 60 74 6f 2d 77 67 30 32 60 20 75 73 65 73 20 58 4d 72 | e.remote.peer.`to-wg02`.uses.XMr |
74660 | 6c 50 79 6b 61 78 68 64 41 41 69 53 6a 68 74 50 6c 76 69 33 30 4e 56 6b 76 4c 51 6c 69 51 75 4b | lPykaxhdAAiSjhtPlvi30NVkvLQliQuK |
74680 | 50 37 41 49 37 43 79 49 3d 20 61 73 20 69 74 73 20 70 75 62 6c 69 63 20 6b 65 79 20 70 6f 72 74 | P7AI7CyI=.as.its.public.key.port |
746a0 | 69 6f 6e 00 54 68 65 20 72 65 6d 6f 74 65 20 73 69 74 65 20 77 69 6c 6c 20 68 61 76 65 20 61 20 | ion.The.remote.site.will.have.a. |
746c0 | 73 75 62 6e 65 74 20 6f 66 20 31 30 2e 31 2e 30 2e 30 2f 31 36 2e 00 54 68 65 20 72 65 6d 6f 74 | subnet.of.10.1.0.0/16..The.remot |
746e0 | 65 20 75 73 65 72 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 6f 70 65 6e 63 6f 6e 6e 65 63 74 20 | e.user.will.use.the.openconnect. |
74700 | 63 6c 69 65 6e 74 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 | client.to.connect.to.the.router. |
74720 | 61 6e 64 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 66 | and.will.receive.an.IP.address.f |
74740 | 72 6f 6d 20 61 20 56 50 4e 20 70 6f 6f 6c 2c 20 61 6c 6c 6f 77 69 6e 67 20 66 75 6c 6c 20 61 63 | rom.a.VPN.pool,.allowing.full.ac |
74760 | 63 65 73 73 20 74 6f 20 74 68 65 20 6e 65 74 77 6f 72 6b 2e 00 54 68 65 20 72 65 71 75 65 73 74 | cess.to.the.network..The.request |
74780 | 6f 72 20 6e 65 74 6d 61 73 6b 20 66 6f 72 20 77 68 69 63 68 20 74 68 65 20 72 65 71 75 65 73 74 | or.netmask.for.which.the.request |
747a0 | 6f 72 20 49 50 20 41 64 64 72 65 73 73 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 20 61 73 20 | or.IP.Address.should.be.used.as. |
747c0 | 74 68 65 20 45 44 4e 53 20 43 6c 69 65 6e 74 20 53 75 62 6e 65 74 20 66 6f 72 20 6f 75 74 67 6f | the.EDNS.Client.Subnet.for.outgo |
747e0 | 69 6e 67 20 71 75 65 72 69 65 73 2e 00 54 68 65 20 72 65 71 75 69 72 65 64 20 63 6f 6e 66 69 67 | ing.queries..The.required.config |
74800 | 20 66 69 6c 65 20 6d 61 79 20 6c 6f 6f 6b 20 6c 69 6b 65 20 74 68 69 73 3a 00 54 68 65 20 72 65 | .file.may.look.like.this:.The.re |
74820 | 71 75 69 72 65 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 62 72 6f 6b | quired.configuration.can.be.brok |
74840 | 65 6e 20 64 6f 77 6e 20 69 6e 74 6f 20 34 20 6d 61 6a 6f 72 20 70 69 65 63 65 73 3a 00 54 68 65 | en.down.into.4.major.pieces:.The |
74860 | 20 72 65 73 75 6c 74 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 6c 6f | .resulting.configuration.will.lo |
74880 | 6f 6b 20 6c 69 6b 65 3a 00 54 68 65 20 72 6f 6f 74 20 63 61 75 73 65 20 6f 66 20 74 68 65 20 70 | ok.like:.The.root.cause.of.the.p |
748a0 | 72 6f 62 6c 65 6d 20 69 73 20 74 68 61 74 20 66 6f 72 20 56 54 49 20 74 75 6e 6e 65 6c 73 20 74 | roblem.is.that.for.VTI.tunnels.t |
748c0 | 6f 20 77 6f 72 6b 2c 20 74 68 65 69 72 20 74 72 61 66 66 69 63 20 73 65 6c 65 63 74 6f 72 73 20 | o.work,.their.traffic.selectors. |
748e0 | 68 61 76 65 20 74 6f 20 62 65 20 73 65 74 20 74 6f 20 30 2e 30 2e 30 2e 30 2f 30 20 66 6f 72 20 | have.to.be.set.to.0.0.0.0/0.for. |
74900 | 74 72 61 66 66 69 63 20 74 6f 20 6d 61 74 63 68 20 74 68 65 20 74 75 6e 6e 65 6c 2c 20 65 76 65 | traffic.to.match.the.tunnel,.eve |
74920 | 6e 20 74 68 6f 75 67 68 20 61 63 74 75 61 6c 20 72 6f 75 74 69 6e 67 20 64 65 63 69 73 69 6f 6e | n.though.actual.routing.decision |
74940 | 20 69 73 20 6d 61 64 65 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 6e 65 74 66 69 6c 74 65 72 20 | .is.made.according.to.netfilter. |
74960 | 6d 61 72 6b 73 2e 20 55 6e 6c 65 73 73 20 72 6f 75 74 65 20 69 6e 73 65 72 74 69 6f 6e 20 69 73 | marks..Unless.route.insertion.is |
74980 | 20 64 69 73 61 62 6c 65 64 20 65 6e 74 69 72 65 6c 79 2c 20 53 74 72 6f 6e 67 53 57 41 4e 20 74 | .disabled.entirely,.StrongSWAN.t |
749a0 | 68 75 73 20 6d 69 73 74 61 6b 65 6e 6c 79 20 69 6e 73 65 72 74 73 20 61 20 64 65 66 61 75 6c 74 | hus.mistakenly.inserts.a.default |
749c0 | 20 72 6f 75 74 65 20 74 68 72 6f 75 67 68 20 74 68 65 20 56 54 49 20 70 65 65 72 20 61 64 64 72 | .route.through.the.VTI.peer.addr |
749e0 | 65 73 73 2c 20 77 68 69 63 68 20 6d 61 6b 65 73 20 61 6c 6c 20 74 72 61 66 66 69 63 20 72 6f 75 | ess,.which.makes.all.traffic.rou |
74a00 | 74 65 64 20 74 6f 20 6e 6f 77 68 65 72 65 2e 00 54 68 65 20 72 6f 75 6e 64 2d 72 6f 62 69 6e 20 | ted.to.nowhere..The.round-robin. |
74a20 | 70 6f 6c 69 63 79 20 69 73 20 61 20 63 6c 61 73 73 66 75 6c 20 73 63 68 65 64 75 6c 65 72 20 74 | policy.is.a.classful.scheduler.t |
74a40 | 68 61 74 20 64 69 76 69 64 65 73 20 74 72 61 66 66 69 63 20 69 6e 20 64 69 66 66 65 72 65 6e 74 | hat.divides.traffic.in.different |
74a60 | 20 63 6c 61 73 73 65 73 5f 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 28 75 70 20 | .classes_.you.can.configure.(up. |
74a80 | 74 6f 20 34 30 39 36 29 2e 20 59 6f 75 20 63 61 6e 20 65 6d 62 65 64 5f 20 61 20 6e 65 77 20 70 | to.4096)..You.can.embed_.a.new.p |
74aa0 | 6f 6c 69 63 79 20 69 6e 74 6f 20 65 61 63 68 20 6f 66 20 74 68 6f 73 65 20 63 6c 61 73 73 65 73 | olicy.into.each.of.those.classes |
74ac0 | 20 28 64 65 66 61 75 6c 74 20 69 6e 63 6c 75 64 65 64 29 2e 00 54 68 65 20 72 6f 75 74 65 20 73 | .(default.included)..The.route.s |
74ae0 | 65 6c 65 63 74 69 6f 6e 20 70 72 6f 63 65 73 73 20 75 73 65 64 20 62 79 20 46 52 52 27 73 20 42 | election.process.used.by.FRR's.B |
74b00 | 47 50 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 75 73 65 73 20 74 68 65 20 66 6f 6c 6c 6f | GP.implementation.uses.the.follo |
74b20 | 77 69 6e 67 20 64 65 63 69 73 69 6f 6e 20 63 72 69 74 65 72 69 6f 6e 2c 20 73 74 61 72 74 69 6e | wing.decision.criterion,.startin |
74b40 | 67 20 61 74 20 74 68 65 20 74 6f 70 20 6f 66 20 74 68 65 20 6c 69 73 74 20 61 6e 64 20 67 6f 69 | g.at.the.top.of.the.list.and.goi |
74b60 | 6e 67 20 74 6f 77 61 72 64 73 20 74 68 65 20 62 6f 74 74 6f 6d 20 75 6e 74 69 6c 20 6f 6e 65 20 | ng.towards.the.bottom.until.one. |
74b80 | 6f 66 20 74 68 65 20 66 61 63 74 6f 72 73 20 63 61 6e 20 62 65 20 75 73 65 64 2e 00 54 68 65 20 | of.the.factors.can.be.used..The. |
74ba0 | 72 6f 75 74 65 20 77 69 74 68 20 74 68 65 20 73 68 6f 72 74 65 73 74 20 63 6c 75 73 74 65 72 2d | route.with.the.shortest.cluster- |
74bc0 | 6c 69 73 74 20 6c 65 6e 67 74 68 20 69 73 20 75 73 65 64 2e 20 54 68 65 20 63 6c 75 73 74 65 72 | list.length.is.used..The.cluster |
74be0 | 2d 6c 69 73 74 20 72 65 66 6c 65 63 74 73 20 74 68 65 20 69 42 47 50 20 72 65 66 6c 65 63 74 69 | -list.reflects.the.iBGP.reflecti |
74c00 | 6f 6e 20 70 61 74 68 20 74 68 65 20 72 6f 75 74 65 20 68 61 73 20 74 61 6b 65 6e 2e 00 54 68 65 | on.path.the.route.has.taken..The |
74c20 | 20 72 6f 75 74 65 72 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 75 70 64 61 74 65 73 20 6c 69 | .router.automatically.updates.li |
74c40 | 6e 6b 2d 73 74 61 74 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 74 68 20 69 74 73 20 6e 65 | nk-state.information.with.its.ne |
74c60 | 69 67 68 62 6f 72 73 2e 20 4f 6e 6c 79 20 61 6e 20 6f 62 73 6f 6c 65 74 65 20 69 6e 66 6f 72 6d | ighbors..Only.an.obsolete.inform |
74c80 | 61 74 69 6f 6e 20 69 73 20 75 70 64 61 74 65 64 20 77 68 69 63 68 20 61 67 65 20 68 61 73 20 65 | ation.is.updated.which.age.has.e |
74ca0 | 78 63 65 65 64 65 64 20 61 20 73 70 65 63 69 66 69 63 20 74 68 72 65 73 68 6f 6c 64 2e 20 54 68 | xceeded.a.specific.threshold..Th |
74cc0 | 69 73 20 70 61 72 61 6d 65 74 65 72 20 63 68 61 6e 67 65 73 20 61 20 74 68 72 65 73 68 6f 6c 64 | is.parameter.changes.a.threshold |
74ce0 | 20 76 61 6c 75 65 2c 20 77 68 69 63 68 20 62 79 20 64 65 66 61 75 6c 74 20 69 73 20 31 38 30 30 | .value,.which.by.default.is.1800 |
74d00 | 20 73 65 63 6f 6e 64 73 20 28 68 61 6c 66 20 61 6e 20 68 6f 75 72 29 2e 20 54 68 65 20 76 61 6c | .seconds.(half.an.hour)..The.val |
74d20 | 75 65 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 77 68 6f 6c 65 20 4f 53 50 46 20 | ue.is.applied.to.the.whole.OSPF. |
74d40 | 72 6f 75 74 65 72 2e 20 54 68 65 20 74 69 6d 65 72 20 72 61 6e 67 65 20 69 73 20 31 30 20 74 6f | router..The.timer.range.is.10.to |
74d60 | 20 31 38 30 30 2e 00 54 68 65 20 72 6f 75 74 65 72 20 73 68 6f 75 6c 64 20 64 69 73 63 61 72 64 | .1800..The.router.should.discard |
74d80 | 20 44 48 43 50 20 70 61 63 6b 61 67 65 73 20 61 6c 72 65 61 64 79 20 63 6f 6e 74 61 69 6e 69 6e | .DHCP.packages.already.containin |
74da0 | 67 20 72 65 6c 61 79 20 61 67 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 65 6e 73 | g.relay.agent.information.to.ens |
74dc0 | 75 72 65 20 74 68 61 74 20 6f 6e 6c 79 20 72 65 71 75 65 73 74 73 20 66 72 6f 6d 20 44 48 43 50 | ure.that.only.requests.from.DHCP |
74de0 | 20 63 6c 69 65 6e 74 73 20 61 72 65 20 66 6f 72 77 61 72 64 65 64 2e 00 54 68 65 20 73 46 6c 6f | .clients.are.forwarded..The.sFlo |
74e00 | 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 62 61 73 65 64 20 6f 6e 20 68 73 66 6c 6f 77 64 20 68 74 | w.accounting.based.on.hsflowd.ht |
74e20 | 74 70 73 3a 2f 2f 73 66 6c 6f 77 2e 6e 65 74 2f 00 54 68 65 20 73 61 6d 65 20 63 6f 6e 66 69 67 | tps://sflow.net/.The.same.config |
74e40 | 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 61 70 70 6c 79 20 77 68 65 6e 20 49 64 65 6e 74 | uration.options.apply.when.Ident |
74e60 | 69 74 79 20 62 61 73 65 64 20 63 6f 6e 66 69 67 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 | ity.based.config.is.configured.i |
74e80 | 6e 20 67 72 6f 75 70 20 6d 6f 64 65 20 65 78 63 65 70 74 20 74 68 61 74 20 67 72 6f 75 70 20 6d | n.group.mode.except.that.group.m |
74ea0 | 6f 64 65 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 77 69 74 68 20 52 41 44 49 55 53 | ode.can.only.be.used.with.RADIUS |
74ec0 | 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 00 54 68 65 20 73 63 68 65 6d 65 20 61 62 6f 76 | .authentication..The.scheme.abov |
74ee0 | 65 20 64 6f 65 73 6e 27 74 20 77 6f 72 6b 20 77 68 65 6e 20 6f 6e 65 20 6f 66 20 74 68 65 20 72 | e.doesn't.work.when.one.of.the.r |
74f00 | 6f 75 74 65 72 73 20 68 61 73 20 61 20 64 79 6e 61 6d 69 63 20 65 78 74 65 72 6e 61 6c 20 61 64 | outers.has.a.dynamic.external.ad |
74f20 | 64 72 65 73 73 20 74 68 6f 75 67 68 2e 20 54 68 65 20 63 6c 61 73 73 69 63 20 77 6f 72 6b 61 72 | dress.though..The.classic.workar |
74f40 | 6f 75 6e 64 20 66 6f 72 20 74 68 69 73 20 69 73 20 74 6f 20 73 65 74 75 70 20 61 6e 20 61 64 64 | ound.for.this.is.to.setup.an.add |
74f60 | 72 65 73 73 20 6f 6e 20 61 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 | ress.on.a.loopback.interface.and |
74f80 | 20 75 73 65 20 69 74 20 61 73 20 61 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 66 6f 72 20 | .use.it.as.a.source.address.for. |
74fa0 | 74 68 65 20 47 52 45 20 74 75 6e 6e 65 6c 2c 20 74 68 65 6e 20 73 65 74 75 70 20 61 6e 20 49 50 | the.GRE.tunnel,.then.setup.an.IP |
74fc0 | 73 65 63 20 70 6f 6c 69 63 79 20 74 6f 20 6d 61 74 63 68 20 74 68 6f 73 65 20 6c 6f 6f 70 62 61 | sec.policy.to.match.those.loopba |
74fe0 | 63 6b 20 61 64 64 72 65 73 73 65 73 2e 00 54 68 65 20 73 65 61 72 63 68 20 66 69 6c 74 65 72 20 | ck.addresses..The.search.filter. |
75000 | 63 61 6e 20 63 6f 6e 74 61 69 6e 20 75 70 20 74 6f 20 31 35 20 6f 63 63 75 72 72 65 6e 63 65 73 | can.contain.up.to.15.occurrences |
75020 | 20 6f 66 20 25 73 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 72 65 70 6c 61 63 65 64 20 62 79 | .of.%s.which.will.be.replaced.by |
75040 | 20 74 68 65 20 75 73 65 72 6e 61 6d 65 2c 20 61 73 20 69 6e 20 22 75 69 64 3d 25 73 22 20 66 6f | .the.username,.as.in."uid=%s".fo |
75060 | 72 20 3a 72 66 63 3a 60 32 30 33 37 60 20 64 69 72 65 63 74 6f 72 69 65 73 2e 20 46 6f 72 20 61 | r.:rfc:`2037`.directories..For.a |
75080 | 20 64 65 74 61 69 6c 65 64 20 64 65 73 63 72 69 70 74 69 6f 6e 20 6f 66 20 4c 44 41 50 20 73 65 | .detailed.description.of.LDAP.se |
750a0 | 61 72 63 68 20 66 69 6c 74 65 72 20 73 79 6e 74 61 78 20 73 65 65 20 3a 72 66 63 3a 60 32 32 35 | arch.filter.syntax.see.:rfc:`225 |
750c0 | 34 60 2e 00 54 68 65 20 73 65 63 6f 6e 64 61 72 79 20 44 48 43 50 20 73 65 72 76 65 72 20 75 73 | 4`..The.secondary.DHCP.server.us |
750e0 | 65 73 20 61 64 64 72 65 73 73 20 60 31 39 32 2e 31 36 38 2e 31 38 39 2e 32 35 33 60 00 54 68 65 | es.address.`192.168.189.253`.The |
75100 | 20 73 65 63 75 72 69 74 79 20 61 70 70 72 6f 61 63 68 20 69 6e 20 53 4e 4d 50 76 33 20 74 61 72 | .security.approach.in.SNMPv3.tar |
75120 | 67 65 74 73 3a 00 54 68 65 20 73 65 71 75 65 6e 63 65 20 60 60 5e 45 63 3f 60 60 20 74 72 61 6e | gets:.The.sequence.``^Ec?``.tran |
75140 | 73 6c 61 74 65 73 20 74 6f 3a 20 60 60 43 74 72 6c 2b 45 20 63 20 3f 60 60 2e 20 54 6f 20 71 75 | slates.to:.``Ctrl+E.c.?``..To.qu |
75160 | 69 74 20 74 68 65 20 73 65 73 73 69 6f 6e 20 75 73 65 3a 20 60 60 43 74 72 6c 2b 45 20 63 20 2e | it.the.session.use:.``Ctrl+E.c.. |
75180 | 60 60 00 54 68 65 20 73 65 74 75 70 20 69 73 20 74 68 69 73 3a 20 4c 65 61 66 32 20 2d 20 53 70 | ``.The.setup.is.this:.Leaf2.-.Sp |
751a0 | 69 6e 65 31 20 2d 20 4c 65 61 66 33 00 54 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 6f 6e 2d | ine1.-.Leaf3.The.size.of.the.on- |
751c0 | 64 69 73 6b 20 50 72 6f 78 79 20 63 61 63 68 65 20 69 73 20 75 73 65 72 20 63 6f 6e 66 69 67 75 | disk.Proxy.cache.is.user.configu |
751e0 | 72 61 62 6c 65 2e 20 54 68 65 20 50 72 6f 78 69 65 73 20 64 65 66 61 75 6c 74 20 63 61 63 68 65 | rable..The.Proxies.default.cache |
75200 | 2d 73 69 7a 65 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 31 30 30 20 4d 42 2e 00 54 | -size.is.configured.to.100.MB..T |
75220 | 68 65 20 73 70 65 65 64 20 28 62 61 75 64 72 61 74 65 29 20 6f 66 20 74 68 65 20 63 6f 6e 73 6f | he.speed.(baudrate).of.the.conso |
75240 | 6c 65 20 64 65 76 69 63 65 2e 20 53 75 70 70 6f 72 74 65 64 20 76 61 6c 75 65 73 20 61 72 65 3a | le.device..Supported.values.are: |
75260 | 00 54 68 65 20 73 74 61 6e 64 61 72 64 20 77 61 73 20 64 65 76 65 6c 6f 70 65 64 20 62 79 20 49 | .The.standard.was.developed.by.I |
75280 | 45 45 45 20 38 30 32 2e 31 2c 20 61 20 77 6f 72 6b 69 6e 67 20 67 72 6f 75 70 20 6f 66 20 74 68 | EEE.802.1,.a.working.group.of.th |
752a0 | 65 20 49 45 45 45 20 38 30 32 20 73 74 61 6e 64 61 72 64 73 20 63 6f 6d 6d 69 74 74 65 65 2c 20 | e.IEEE.802.standards.committee,. |
752c0 | 61 6e 64 20 63 6f 6e 74 69 6e 75 65 73 20 74 6f 20 62 65 20 61 63 74 69 76 65 6c 79 20 72 65 76 | and.continues.to.be.actively.rev |
752e0 | 69 73 65 64 2e 20 4f 6e 65 20 6f 66 20 74 68 65 20 6e 6f 74 61 62 6c 65 20 72 65 76 69 73 69 6f | ised..One.of.the.notable.revisio |
75300 | 6e 73 20 69 73 20 38 30 32 2e 31 51 2d 32 30 31 34 20 77 68 69 63 68 20 69 6e 63 6f 72 70 6f 72 | ns.is.802.1Q-2014.which.incorpor |
75320 | 61 74 65 64 20 49 45 45 45 20 38 30 32 2e 31 61 71 20 28 53 68 6f 72 74 65 73 74 20 50 61 74 68 | ated.IEEE.802.1aq.(Shortest.Path |
75340 | 20 42 72 69 64 67 69 6e 67 29 20 61 6e 64 20 6d 75 63 68 20 6f 66 20 74 68 65 20 49 45 45 45 20 | .Bridging).and.much.of.the.IEEE. |
75360 | 38 30 32 2e 31 64 20 73 74 61 6e 64 61 72 64 2e 00 54 68 65 20 73 79 73 74 65 6d 20 4c 43 44 20 | 802.1d.standard..The.system.LCD. |
75380 | 3a 61 62 62 72 3a 60 4c 43 44 20 28 4c 69 71 75 69 64 2d 63 72 79 73 74 61 6c 20 64 69 73 70 6c | :abbr:`LCD.(Liquid-crystal.displ |
753a0 | 61 79 29 60 20 6f 70 74 69 6f 6e 20 69 73 20 66 6f 72 20 75 73 65 72 73 20 72 75 6e 6e 69 6e 67 | ay)`.option.is.for.users.running |
753c0 | 20 56 79 4f 53 20 6f 6e 20 68 61 72 64 77 61 72 65 20 74 68 61 74 20 66 65 61 74 75 72 65 73 20 | .VyOS.on.hardware.that.features. |
753e0 | 61 6e 20 4c 43 44 20 64 69 73 70 6c 61 79 2e 20 54 68 69 73 20 69 73 20 74 79 70 69 63 61 6c 6c | an.LCD.display..This.is.typicall |
75400 | 79 20 61 20 73 6d 61 6c 6c 20 64 69 73 70 6c 61 79 20 62 75 69 6c 74 20 69 6e 20 61 6e 20 31 39 | y.a.small.display.built.in.an.19 |
75420 | 20 69 6e 63 68 20 72 61 63 6b 2d 6d 6f 75 6e 74 61 62 6c 65 20 61 70 70 6c 69 61 6e 63 65 2e 20 | .inch.rack-mountable.appliance.. |
75440 | 54 68 6f 73 65 20 64 69 73 70 6c 61 79 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 73 68 6f 77 20 | Those.displays.are.used.to.show. |
75460 | 72 75 6e 74 69 6d 65 20 64 61 74 61 2e 00 54 68 65 20 73 79 73 74 65 6d 20 69 73 20 63 6f 6e 66 | runtime.data..The.system.is.conf |
75480 | 69 67 75 72 65 64 20 74 6f 20 61 74 74 65 6d 70 74 20 64 6f 6d 61 69 6e 20 63 6f 6d 70 6c 65 74 | igured.to.attempt.domain.complet |
754a0 | 69 6f 6e 20 69 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 72 64 65 72 3a 20 76 79 6f 73 | ion.in.the.following.order:.vyos |
754c0 | 2e 69 6f 20 28 66 69 72 73 74 29 2c 20 76 79 6f 73 2e 6e 65 74 20 28 73 65 63 6f 6e 64 29 20 61 | .io.(first),.vyos.net.(second).a |
754e0 | 6e 64 20 76 79 6f 73 2e 6e 65 74 77 6f 72 6b 20 28 6c 61 73 74 29 3a 00 54 68 65 20 74 61 62 6c | nd.vyos.network.(last):.The.tabl |
75500 | 65 20 63 6f 6e 73 69 73 74 73 20 6f 66 20 66 6f 6c 6c 6f 77 69 6e 67 20 64 61 74 61 3a 00 54 68 | e.consists.of.following.data:.Th |
75520 | 65 20 74 61 73 6b 20 73 63 68 65 64 75 6c 65 72 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 65 | e.task.scheduler.allows.you.to.e |
75540 | 78 65 63 75 74 65 20 74 61 73 6b 73 20 6f 6e 20 61 20 67 69 76 65 6e 20 73 63 68 65 64 75 6c 65 | xecute.tasks.on.a.given.schedule |
75560 | 2e 20 49 74 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 55 4e 49 58 20 63 72 6f 6e 5f 2e 00 54 68 | ..It.makes.use.of.UNIX.cron_..Th |
75580 | 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 73 65 | e.translation.address.must.be.se |
755a0 | 74 20 74 6f 20 6f 6e 65 20 6f 66 20 74 68 65 20 61 76 61 69 6c 61 62 6c 65 20 61 64 64 72 65 73 | t.to.one.of.the.available.addres |
755c0 | 73 65 73 20 6f 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 60 6f 75 74 62 6f 75 6e 64 2d | ses.on.the.configured.`outbound- |
755e0 | 69 6e 74 65 72 66 61 63 65 60 20 6f 72 20 69 74 20 6d 75 73 74 20 62 65 20 73 65 74 20 74 6f 20 | interface`.or.it.must.be.set.to. |
75600 | 60 6d 61 73 71 75 65 72 61 64 65 60 20 77 68 69 63 68 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 | `masquerade`.which.will.use.the. |
75620 | 70 72 69 6d 61 72 79 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 60 6f 75 74 62 6f | primary.IP.address.of.the.`outbo |
75640 | 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 60 20 61 73 20 69 74 73 20 74 72 61 6e 73 6c 61 74 69 6f | und-interface`.as.its.translatio |
75660 | 6e 20 61 64 64 72 65 73 73 2e 00 54 68 65 20 74 75 6e 6e 65 6c 20 77 69 6c 6c 20 75 73 65 20 31 | n.address..The.tunnel.will.use.1 |
75680 | 30 2e 32 35 35 2e 31 2e 31 20 66 6f 72 20 74 68 65 20 6c 6f 63 61 6c 20 49 50 20 61 6e 64 20 31 | 0.255.1.1.for.the.local.IP.and.1 |
756a0 | 30 2e 32 35 35 2e 31 2e 32 20 66 6f 72 20 74 68 65 20 72 65 6d 6f 74 65 2e 00 54 68 65 20 74 79 | 0.255.1.2.for.the.remote..The.ty |
756c0 | 70 65 20 63 61 6e 20 62 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 3a 20 61 73 62 72 2d 73 75 | pe.can.be.the.following:.asbr-su |
756e0 | 6d 6d 61 72 79 2c 20 65 78 74 65 72 6e 61 6c 2c 20 6e 65 74 77 6f 72 6b 2c 20 6e 73 73 61 2d 65 | mmary,.external,.network,.nssa-e |
75700 | 78 74 65 72 6e 61 6c 2c 20 6f 70 61 71 75 65 2d 61 72 65 61 2c 20 6f 70 61 71 75 65 2d 61 73 2c | xternal,.opaque-area,.opaque-as, |
75720 | 20 6f 70 61 71 75 65 2d 6c 69 6e 6b 2c 20 72 6f 75 74 65 72 2c 20 73 75 6d 6d 61 72 79 2e 00 54 | .opaque-link,.router,.summary..T |
75740 | 68 65 20 75 6c 74 69 6d 61 74 65 20 67 6f 61 6c 20 6f 66 20 63 6c 61 73 73 69 66 79 69 6e 67 20 | he.ultimate.goal.of.classifying. |
75760 | 74 72 61 66 66 69 63 20 69 73 20 74 6f 20 67 69 76 65 20 65 61 63 68 20 63 6c 61 73 73 20 61 20 | traffic.is.to.give.each.class.a. |
75780 | 64 69 66 66 65 72 65 6e 74 20 74 72 65 61 74 6d 65 6e 74 2e 00 54 68 65 20 75 73 65 20 6f 66 20 | different.treatment..The.use.of. |
757a0 | 49 50 6f 45 20 61 64 64 72 65 73 73 65 73 20 74 68 65 20 64 69 73 61 64 76 61 6e 74 61 67 65 20 | IPoE.addresses.the.disadvantage. |
757c0 | 74 68 61 74 20 50 50 50 20 69 73 20 75 6e 73 75 69 74 65 64 20 66 6f 72 20 6d 75 6c 74 69 63 61 | that.PPP.is.unsuited.for.multica |
757e0 | 73 74 20 64 65 6c 69 76 65 72 79 20 74 6f 20 6d 75 6c 74 69 70 6c 65 20 75 73 65 72 73 2e 20 54 | st.delivery.to.multiple.users..T |
75800 | 79 70 69 63 61 6c 6c 79 2c 20 49 50 6f 45 20 75 73 65 73 20 44 79 6e 61 6d 69 63 20 48 6f 73 74 | ypically,.IPoE.uses.Dynamic.Host |
75820 | 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 61 6e 64 20 45 78 74 65 | .Configuration.Protocol.and.Exte |
75840 | 6e 73 69 62 6c 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 74 | nsible.Authentication.Protocol.t |
75860 | 6f 20 70 72 6f 76 69 64 65 20 74 68 65 20 73 61 6d 65 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 | o.provide.the.same.functionality |
75880 | 20 61 73 20 50 50 50 6f 45 2c 20 62 75 74 20 69 6e 20 61 20 6c 65 73 73 20 72 6f 62 75 73 74 20 | .as.PPPoE,.but.in.a.less.robust. |
758a0 | 6d 61 6e 6e 65 72 2e 00 54 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 61 74 74 72 69 62 75 | manner..The.value.of.the.attribu |
758c0 | 74 65 20 60 60 4e 41 53 2d 50 6f 72 74 2d 49 64 60 60 20 6d 75 73 74 20 62 65 20 6c 65 73 73 20 | te.``NAS-Port-Id``.must.be.less. |
758e0 | 74 68 61 6e 20 31 36 20 63 68 61 72 61 63 74 65 72 73 2c 20 6f 74 68 65 72 77 69 73 65 20 74 68 | than.16.characters,.otherwise.th |
75900 | 65 20 69 6e 74 65 72 66 61 63 65 20 77 6f 6e 27 74 20 62 65 20 72 65 6e 61 6d 65 64 2e 00 54 68 | e.interface.won't.be.renamed..Th |
75920 | 65 20 76 65 6e 64 6f 72 2d 63 6c 61 73 73 2d 69 64 20 6f 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 | e.vendor-class-id.option.can.be. |
75940 | 75 73 65 64 20 74 6f 20 72 65 71 75 65 73 74 20 61 20 73 70 65 63 69 66 69 63 20 63 6c 61 73 73 | used.to.request.a.specific.class |
75960 | 20 6f 66 20 76 65 6e 64 6f 72 20 6f 70 74 69 6f 6e 73 20 66 72 6f 6d 20 74 68 65 20 73 65 72 76 | .of.vendor.options.from.the.serv |
75980 | 65 72 2e 00 54 68 65 20 76 65 74 68 20 64 65 76 69 63 65 73 20 61 72 65 20 76 69 72 74 75 61 6c | er..The.veth.devices.are.virtual |
759a0 | 20 45 74 68 65 72 6e 65 74 20 64 65 76 69 63 65 73 2e 20 54 68 65 79 20 63 61 6e 20 61 63 74 20 | .Ethernet.devices..They.can.act. |
759c0 | 61 73 20 74 75 6e 6e 65 6c 73 20 62 65 74 77 65 65 6e 20 6e 65 74 77 6f 72 6b 20 6e 61 6d 65 73 | as.tunnels.between.network.names |
759e0 | 70 61 63 65 73 20 74 6f 20 63 72 65 61 74 65 20 61 20 62 72 69 64 67 65 20 74 6f 20 61 20 70 68 | paces.to.create.a.bridge.to.a.ph |
75a00 | 79 73 69 63 61 6c 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 20 69 6e 20 61 6e 6f 74 68 65 72 | ysical.network.device.in.another |
75a20 | 20 6e 61 6d 65 73 70 61 63 65 20 6f 72 20 56 52 46 2c 20 62 75 74 20 63 61 6e 20 61 6c 73 6f 20 | .namespace.or.VRF,.but.can.also. |
75a40 | 62 65 20 75 73 65 64 20 61 73 20 73 74 61 6e 64 61 6c 6f 6e 65 20 6e 65 74 77 6f 72 6b 20 64 65 | be.used.as.standalone.network.de |
75a60 | 76 69 63 65 73 2e 00 54 68 65 20 77 65 6c 6c 20 6b 6e 6f 77 6e 20 4e 41 54 36 34 20 70 72 65 66 | vices..The.well.known.NAT64.pref |
75a80 | 69 78 20 69 73 20 60 60 36 34 3a 66 66 39 62 3a 3a 2f 39 36 60 60 00 54 68 65 20 77 69 6e 64 6f | ix.is.``64:ff9b::/96``.The.windo |
75aa0 | 77 20 73 69 7a 65 20 6d 75 73 74 20 62 65 20 62 65 74 77 65 65 6e 20 31 20 61 6e 64 20 32 31 2e | w.size.must.be.between.1.and.21. |
75ac0 | 00 54 68 65 20 77 69 72 65 6c 65 73 73 20 63 6c 69 65 6e 74 20 28 73 75 70 70 6c 69 63 61 6e 74 | .The.wireless.client.(supplicant |
75ae0 | 29 20 61 75 74 68 65 6e 74 69 63 61 74 65 73 20 61 67 61 69 6e 73 74 20 74 68 65 20 52 41 44 49 | ).authenticates.against.the.RADI |
75b00 | 55 53 20 73 65 72 76 65 72 20 28 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 65 72 76 65 72 | US.server.(authentication.server |
75b20 | 29 20 75 73 69 6e 67 20 61 6e 20 3a 61 62 62 72 3a 60 45 41 50 20 28 45 78 74 65 6e 73 69 62 6c | ).using.an.:abbr:`EAP.(Extensibl |
75b40 | 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 20 6d 65 74 | e.Authentication.Protocol)`..met |
75b60 | 68 6f 64 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 | hod.configured.on.the.RADIUS.ser |
75b80 | 76 65 72 2e 20 54 68 65 20 57 41 50 20 28 61 6c 73 6f 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 | ver..The.WAP.(also.referred.to.a |
75ba0 | 73 20 61 75 74 68 65 6e 74 69 63 61 74 6f 72 29 20 72 6f 6c 65 20 69 73 20 74 6f 20 73 65 6e 64 | s.authenticator).role.is.to.send |
75bc0 | 20 61 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 20 62 65 74 | .all.authentication.messages.bet |
75be0 | 77 65 65 6e 20 74 68 65 20 73 75 70 70 6c 69 63 61 6e 74 20 61 6e 64 20 74 68 65 20 63 6f 6e 66 | ween.the.supplicant.and.the.conf |
75c00 | 69 67 75 72 65 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 65 72 76 65 72 2c 20 74 68 | igured.authentication.server,.th |
75c20 | 75 73 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 69 73 20 72 65 73 70 6f 6e 73 69 | us.the.RADIUS.server.is.responsi |
75c40 | 62 6c 65 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 73 65 72 73 | ble.for.authenticating.the.users |
75c60 | 2e 00 54 68 65 6e 20 61 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 53 4e 41 54 20 72 75 6c 65 | ..Then.a.corresponding.SNAT.rule |
75c80 | 20 69 73 20 63 72 65 61 74 65 64 20 74 6f 20 4e 41 54 20 6f 75 74 67 6f 69 6e 67 20 74 72 61 66 | .is.created.to.NAT.outgoing.traf |
75ca0 | 66 69 63 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 49 50 20 74 6f 20 61 20 72 65 73 | fic.for.the.internal.IP.to.a.res |
75cc0 | 65 72 76 65 64 20 65 78 74 65 72 6e 61 6c 20 49 50 2e 20 54 68 69 73 20 64 65 64 69 63 61 74 65 | erved.external.IP..This.dedicate |
75ce0 | 73 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 61 6e 20 69 | s.an.external.IP.address.to.an.i |
75d00 | 6e 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 20 69 73 20 75 73 65 66 75 6c | nternal.IP.address.and.is.useful |
75d20 | 20 66 6f 72 20 70 72 6f 74 6f 63 6f 6c 73 20 77 68 69 63 68 20 64 6f 6e 27 74 20 68 61 76 65 20 | .for.protocols.which.don't.have. |
75d40 | 74 68 65 20 6e 6f 74 69 6f 6e 20 6f 66 20 70 6f 72 74 73 2c 20 73 75 63 68 20 61 73 20 47 52 45 | the.notion.of.ports,.such.as.GRE |
75d60 | 2e 00 54 68 65 6e 20 77 65 20 6e 65 65 64 20 74 6f 20 67 65 6e 65 72 61 74 65 2c 20 61 64 64 20 | ..Then.we.need.to.generate,.add. |
75d80 | 61 6e 64 20 73 70 65 63 69 66 79 20 74 68 65 20 6e 61 6d 65 73 20 6f 66 20 74 68 65 20 63 72 79 | and.specify.the.names.of.the.cry |
75da0 | 70 74 6f 67 72 61 70 68 69 63 20 6d 61 74 65 72 69 61 6c 73 2e 20 45 61 63 68 20 6f 66 20 74 68 | ptographic.materials..Each.of.th |
75dc0 | 65 20 69 6e 73 74 61 6c 6c 20 63 6f 6d 6d 61 6e 64 20 73 68 6f 75 6c 64 20 62 65 20 61 70 70 6c | e.install.command.should.be.appl |
75de0 | 69 65 64 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6d | ied.to.the.configuration.and.com |
75e00 | 6d 69 74 65 64 20 62 65 66 6f 72 65 20 75 73 69 6e 67 20 75 6e 64 65 72 20 74 68 65 20 6f 70 65 | mited.before.using.under.the.ope |
75e20 | 6e 76 70 6e 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 54 68 | nvpn.interface.configuration..Th |
75e40 | 65 6e 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 69 6e 73 74 61 6c 6c 20 74 68 65 20 6b 65 79 20 6f | en.you.need.to.install.the.key.o |
75e60 | 6e 20 74 68 65 20 72 65 6d 6f 74 65 20 72 6f 75 74 65 72 3a 00 54 68 65 6e 20 79 6f 75 20 6e 65 | n.the.remote.router:.Then.you.ne |
75e80 | 65 64 20 74 6f 20 73 65 74 20 74 68 65 20 6b 65 79 20 69 6e 20 79 6f 75 72 20 4f 70 65 6e 56 50 | ed.to.set.the.key.in.your.OpenVP |
75ea0 | 4e 20 69 6e 74 65 72 66 61 63 65 20 73 65 74 74 69 6e 67 73 3a 00 54 68 65 6e 2c 20 46 61 73 74 | N.interface.settings:.Then,.Fast |
75ec0 | 4e 65 74 4d 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 54 68 65 72 65 20 61 72 65 20 | NetMon.configuration:.There.are. |
75ee0 | 33 20 64 65 66 61 75 6c 74 20 4e 54 50 20 73 65 72 76 65 72 20 73 65 74 2e 20 59 6f 75 20 61 72 | 3.default.NTP.server.set..You.ar |
75f00 | 65 20 61 62 6c 65 20 74 6f 20 63 68 61 6e 67 65 20 74 68 65 6d 2e 00 54 68 65 72 65 20 61 72 65 | e.able.to.change.them..There.are |
75f20 | 20 61 20 6c 6f 74 20 6f 66 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 61 67 61 69 | .a.lot.of.matching.criteria.agai |
75f40 | 6e 73 74 20 77 68 69 63 68 20 74 68 65 20 70 61 63 6b 61 67 65 20 63 61 6e 20 62 65 20 74 65 73 | nst.which.the.package.can.be.tes |
75f60 | 74 65 64 2e 00 54 68 65 72 65 20 61 72 65 20 61 20 6c 6f 74 20 6f 66 20 6d 61 74 63 68 69 6e 67 | ted..There.are.a.lot.of.matching |
75f80 | 20 63 72 69 74 65 72 69 61 20 61 67 61 69 6e 73 74 20 77 68 69 63 68 20 74 68 65 20 70 61 63 6b | .criteria.against.which.the.pack |
75fa0 | 65 74 20 63 61 6e 20 62 65 20 74 65 73 74 65 64 2e 00 54 68 65 72 65 20 61 72 65 20 61 20 6c 6f | et.can.be.tested..There.are.a.lo |
75fc0 | 74 20 6f 66 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 6f 70 74 69 6f 6e 73 20 61 | t.of.matching.criteria.options.a |
75fe0 | 76 61 69 6c 61 62 6c 65 2c 20 62 6f 74 68 20 66 6f 72 20 60 60 70 6f 6c 69 63 79 20 72 6f 75 74 | vailable,.both.for.``policy.rout |
76000 | 65 60 60 20 61 6e 64 20 60 60 70 6f 6c 69 63 79 20 72 6f 75 74 65 36 60 60 2e 20 54 68 65 73 65 | e``.and.``policy.route6``..These |
76020 | 20 6f 70 74 69 6f 6e 73 20 61 72 65 20 6c 69 73 74 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 | .options.are.listed.in.this.sect |
76040 | 69 6f 6e 2e 00 54 68 65 72 65 20 61 72 65 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 61 6d 65 74 | ion..There.are.different.paramet |
76060 | 65 72 73 20 66 6f 72 20 67 65 74 74 69 6e 67 20 70 72 65 66 69 78 2d 6c 69 73 74 20 69 6e 66 6f | ers.for.getting.prefix-list.info |
76080 | 72 6d 61 74 69 6f 6e 3a 00 54 68 65 72 65 20 61 72 65 20 6c 69 6d 69 74 73 20 6f 6e 20 77 68 69 | rmation:.There.are.limits.on.whi |
760a0 | 63 68 20 63 68 61 6e 6e 65 6c 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 69 74 68 20 48 54 34 | ch.channels.can.be.used.with.HT4 |
760c0 | 30 2d 20 61 6e 64 20 48 54 34 30 2b 2e 20 46 6f 6c 6c 6f 77 69 6e 67 20 74 61 62 6c 65 20 73 68 | 0-.and.HT40+..Following.table.sh |
760e0 | 6f 77 73 20 74 68 65 20 63 68 61 6e 6e 65 6c 73 20 74 68 61 74 20 6d 61 79 20 62 65 20 61 76 61 | ows.the.channels.that.may.be.ava |
76100 | 69 6c 61 62 6c 65 20 66 6f 72 20 48 54 34 30 2d 20 61 6e 64 20 48 54 34 30 2b 20 75 73 65 20 70 | ilable.for.HT40-.and.HT40+.use.p |
76120 | 65 72 20 49 45 45 45 20 38 30 32 2e 31 31 6e 20 41 6e 6e 65 78 20 4a 3a 00 54 68 65 72 65 20 61 | er.IEEE.802.11n.Annex.J:.There.a |
76140 | 72 65 20 6d 61 6e 79 20 70 61 72 61 6d 65 74 65 72 73 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 61 | re.many.parameters.you.will.be.a |
76160 | 62 6c 65 20 74 6f 20 75 73 65 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 6d 61 74 63 68 20 74 68 65 | ble.to.use.in.order.to.match.the |
76180 | 20 74 72 61 66 66 69 63 20 79 6f 75 20 77 61 6e 74 20 66 6f 72 20 61 20 63 6c 61 73 73 3a 00 54 | .traffic.you.want.for.a.class:.T |
761a0 | 68 65 72 65 20 61 72 65 20 6d 75 6c 74 69 70 6c 65 20 76 65 72 73 69 6f 6e 73 20 61 76 61 69 6c | here.are.multiple.versions.avail |
761c0 | 61 62 6c 65 20 66 6f 72 20 74 68 65 20 4e 65 74 46 6c 6f 77 20 64 61 74 61 2e 20 54 68 65 20 60 | able.for.the.NetFlow.data..The.` |
761e0 | 3c 76 65 72 73 69 6f 6e 3e 60 20 75 73 65 64 20 69 6e 20 74 68 65 20 65 78 70 6f 72 74 65 64 20 | <version>`.used.in.the.exported. |
76200 | 66 6c 6f 77 20 64 61 74 61 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 68 65 72 65 | flow.data.can.be.configured.here |
76220 | 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 76 65 72 73 69 6f 6e 73 20 61 72 65 20 73 75 70 | ..The.following.versions.are.sup |
76240 | 70 6f 72 74 65 64 3a 00 54 68 65 72 65 20 61 72 65 20 72 61 74 65 2d 6c 69 6d 69 74 65 64 20 61 | ported:.There.are.rate-limited.a |
76260 | 6e 64 20 6e 6f 6e 20 72 61 74 65 2d 6c 69 6d 69 74 65 64 20 75 73 65 72 73 20 28 4d 41 43 73 29 | nd.non.rate-limited.users.(MACs) |
76280 | 00 54 68 65 72 65 20 61 72 65 20 73 6f 6d 65 20 73 63 65 6e 61 72 69 6f 73 20 77 68 65 72 65 20 | .There.are.some.scenarios.where. |
762a0 | 73 65 72 69 61 6c 20 63 6f 6e 73 6f 6c 65 73 20 61 72 65 20 75 73 65 66 75 6c 2e 20 53 79 73 74 | serial.consoles.are.useful..Syst |
762c0 | 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 69 6f 6e 20 6f 66 20 72 65 6d 6f 74 65 20 63 6f 6d 70 | em.administration.of.remote.comp |
762e0 | 75 74 65 72 73 20 69 73 20 75 73 75 61 6c 6c 79 20 64 6f 6e 65 20 75 73 69 6e 67 20 3a 72 65 66 | uters.is.usually.done.using.:ref |
76300 | 3a 60 73 73 68 60 2c 20 62 75 74 20 74 68 65 72 65 20 61 72 65 20 74 69 6d 65 73 20 77 68 65 6e | :`ssh`,.but.there.are.times.when |
76320 | 20 61 63 63 65 73 73 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 20 69 73 20 74 68 65 20 6f 6e | .access.to.the.console.is.the.on |
76340 | 6c 79 20 77 61 79 20 74 6f 20 64 69 61 67 6e 6f 73 65 20 61 6e 64 20 63 6f 72 72 65 63 74 20 73 | ly.way.to.diagnose.and.correct.s |
76360 | 6f 66 74 77 61 72 65 20 66 61 69 6c 75 72 65 73 2e 20 4d 61 6a 6f 72 20 75 70 67 72 61 64 65 73 | oftware.failures..Major.upgrades |
76380 | 20 74 6f 20 74 68 65 20 69 6e 73 74 61 6c 6c 65 64 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 6d | .to.the.installed.distribution.m |
763a0 | 61 79 20 61 6c 73 6f 20 72 65 71 75 69 72 65 20 63 6f 6e 73 6f 6c 65 20 61 63 63 65 73 73 2e 00 | ay.also.require.console.access.. |
763c0 | 54 68 65 72 65 20 61 72 65 20 74 68 72 65 65 20 6d 6f 64 65 73 20 6f 66 20 6f 70 65 72 61 74 69 | There.are.three.modes.of.operati |
763e0 | 6f 6e 20 66 6f 72 20 61 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 3a 00 54 68 65 | on.for.a.wireless.interface:.The |
76400 | 72 65 20 61 72 65 20 74 77 6f 20 74 79 70 65 73 20 6f 66 20 4e 65 74 77 6f 72 6b 20 41 64 6d 69 | re.are.two.types.of.Network.Admi |
76420 | 6e 73 20 77 68 6f 20 64 65 61 6c 20 77 69 74 68 20 42 47 50 2c 20 74 68 6f 73 65 20 77 68 6f 20 | ns.who.deal.with.BGP,.those.who. |
76440 | 68 61 76 65 20 63 72 65 61 74 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 20 69 6e | have.created.an.international.in |
76460 | 63 69 64 65 6e 74 20 61 6e 64 2f 6f 72 20 6f 75 74 61 67 65 2c 20 61 6e 64 20 74 68 6f 73 65 20 | cident.and/or.outage,.and.those. |
76480 | 77 68 6f 20 61 72 65 20 6c 79 69 6e 67 00 54 68 65 72 65 20 61 72 65 20 74 77 6f 20 77 61 79 73 | who.are.lying.There.are.two.ways |
764a0 | 20 74 68 61 74 20 68 65 6c 70 20 75 73 20 74 6f 20 6d 69 74 69 67 61 74 65 20 74 68 65 20 42 47 | .that.help.us.to.mitigate.the.BG |
764c0 | 50 73 20 66 75 6c 6c 2d 6d 65 73 68 20 72 65 71 75 69 72 65 6d 65 6e 74 20 69 6e 20 61 20 6e 65 | Ps.full-mesh.requirement.in.a.ne |
764e0 | 74 77 6f 72 6b 3a 00 54 68 65 72 65 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 6f 6e 65 20 6c 6f 6f | twork:.There.can.only.be.one.loo |
76500 | 70 62 61 63 6b 20 60 60 6c 6f 60 60 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 74 68 65 20 73 79 | pback.``lo``.interface.on.the.sy |
76520 | 73 74 65 6d 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 6d 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 | stem..If.you.need.multiple.inter |
76540 | 66 61 63 65 73 2c 20 70 6c 65 61 73 65 20 75 73 65 20 74 68 65 20 3a 72 65 66 3a 60 64 75 6d 6d | faces,.please.use.the.:ref:`dumm |
76560 | 79 2d 69 6e 74 65 72 66 61 63 65 60 20 69 6e 74 65 72 66 61 63 65 20 74 79 70 65 2e 00 54 68 65 | y-interface`.interface.type..The |
76580 | 72 65 20 63 6f 75 6c 64 20 62 65 20 61 20 77 69 64 65 20 72 61 6e 67 65 20 6f 66 20 72 6f 75 74 | re.could.be.a.wide.range.of.rout |
765a0 | 69 6e 67 20 70 6f 6c 69 63 69 65 73 2e 20 53 6f 6d 65 20 65 78 61 6d 70 6c 65 73 20 61 72 65 20 | ing.policies..Some.examples.are. |
765c0 | 6c 69 73 74 65 64 20 62 65 6c 6f 77 3a 00 54 68 65 72 65 20 69 73 20 61 20 76 65 72 79 20 6e 69 | listed.below:.There.is.a.very.ni |
765e0 | 63 65 20 70 69 63 74 75 72 65 2f 65 78 70 6c 61 6e 61 74 69 6f 6e 20 69 6e 20 74 68 65 20 56 79 | ce.picture/explanation.in.the.Vy |
76600 | 61 74 74 61 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 77 68 69 63 68 20 73 68 6f 75 6c 64 20 | atta.documentation.which.should. |
76620 | 62 65 20 72 65 77 72 69 74 74 65 6e 20 68 65 72 65 2e 00 54 68 65 72 65 20 69 73 20 61 6c 73 6f | be.rewritten.here..There.is.also |
76640 | 20 61 20 47 52 45 20 6f 76 65 72 20 49 50 76 36 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 61 | .a.GRE.over.IPv6.encapsulation.a |
76660 | 76 61 69 6c 61 62 6c 65 2c 20 69 74 20 69 73 20 63 61 6c 6c 65 64 3a 20 60 60 69 70 36 67 72 65 | vailable,.it.is.called:.``ip6gre |
76680 | 60 60 2e 00 54 68 65 72 65 20 69 73 20 61 6e 20 65 6e 74 69 72 65 20 63 68 61 70 74 65 72 20 61 | ``..There.is.an.entire.chapter.a |
766a0 | 62 6f 75 74 20 68 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 3a 72 65 66 3a 60 76 72 | bout.how.to.configure.a.:ref:`vr |
766c0 | 66 60 2c 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 69 73 20 66 6f 72 20 61 64 64 69 74 69 | f`,.please.check.this.for.additi |
766e0 | 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 54 68 65 72 65 27 73 20 61 20 76 61 72 69 | onal.information..There's.a.vari |
76700 | 65 74 79 20 6f 66 20 63 6c 69 65 6e 74 20 47 55 49 20 66 72 6f 6e 74 65 6e 64 73 20 66 6f 72 20 | ety.of.client.GUI.frontends.for. |
76720 | 61 6e 79 20 70 6c 61 74 66 6f 72 6d 00 54 68 65 73 65 20 61 72 65 20 74 68 65 20 63 6f 6d 6d 61 | any.platform.These.are.the.comma |
76740 | 6e 64 73 20 66 6f 72 20 61 20 62 61 73 69 63 20 73 65 74 75 70 2e 00 54 68 65 73 65 20 63 6f 6d | nds.for.a.basic.setup..These.com |
76760 | 6d 61 6e 64 73 20 61 6c 6c 6f 77 20 74 68 65 20 56 4c 41 4e 31 30 20 61 6e 64 20 56 4c 41 4e 31 | mands.allow.the.VLAN10.and.VLAN1 |
76780 | 31 20 68 6f 73 74 73 20 74 6f 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 77 69 74 68 20 65 61 63 68 | 1.hosts.to.communicate.with.each |
767a0 | 20 6f 74 68 65 72 20 75 73 69 6e 67 20 74 68 65 20 6d 61 69 6e 20 72 6f 75 74 69 6e 67 20 74 61 | .other.using.the.main.routing.ta |
767c0 | 62 6c 65 2e 00 54 68 65 73 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 6e 6f 74 20 | ble..These.configuration.is.not. |
767e0 | 6d 61 6e 64 61 74 6f 72 79 20 61 6e 64 20 69 6e 20 6d 6f 73 74 20 63 61 73 65 73 20 74 68 65 72 | mandatory.and.in.most.cases.ther |
76800 | 65 27 73 20 6e 6f 20 6e 65 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 74 2e 20 42 75 74 | e's.no.need.to.configure.it..But |
76820 | 20 69 66 20 6e 65 63 65 73 73 61 72 79 2c 20 47 72 61 74 75 69 74 6f 75 73 20 41 52 50 20 63 61 | .if.necessary,.Gratuitous.ARP.ca |
76840 | 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 60 60 67 6c 6f 62 61 6c 2d 70 61 72 61 | n.be.configured.in.``global-para |
76860 | 6d 65 74 65 72 73 60 60 20 61 6e 64 2f 6f 72 20 69 6e 20 60 60 67 72 6f 75 70 60 60 20 73 65 63 | meters``.and/or.in.``group``.sec |
76880 | 74 69 6f 6e 2e 00 54 68 65 73 65 20 70 61 72 61 6d 65 74 65 72 73 20 61 72 65 20 70 61 73 73 65 | tion..These.parameters.are.passe |
768a0 | 64 20 61 73 2d 69 73 20 74 6f 20 69 73 63 2d 64 68 63 70 27 73 20 64 68 63 70 64 2e 63 6f 6e 66 | d.as-is.to.isc-dhcp's.dhcpd.conf |
768c0 | 20 75 6e 64 65 72 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6e 6f 64 65 20 74 68 | .under.the.configuration.node.th |
768e0 | 65 79 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 2e 20 54 68 65 79 20 61 72 65 20 6e 6f 74 20 | ey.are.defined.in..They.are.not. |
76900 | 76 61 6c 69 64 61 74 65 64 20 73 6f 20 61 6e 20 65 72 72 6f 72 20 69 6e 20 74 68 65 20 72 61 77 | validated.so.an.error.in.the.raw |
76920 | 20 70 61 72 61 6d 65 74 65 72 73 20 77 6f 6e 27 74 20 62 65 20 63 61 75 67 68 74 20 62 79 20 76 | .parameters.won't.be.caught.by.v |
76940 | 79 6f 73 27 73 20 73 63 72 69 70 74 73 20 61 6e 64 20 77 69 6c 6c 20 63 61 75 73 65 20 64 68 63 | yos's.scripts.and.will.cause.dhc |
76960 | 70 64 20 74 6f 20 66 61 69 6c 20 74 6f 20 73 74 61 72 74 2e 20 41 6c 77 61 79 73 20 76 65 72 69 | pd.to.fail.to.start..Always.veri |
76980 | 66 79 20 74 68 61 74 20 74 68 65 20 70 61 72 61 6d 65 74 65 72 73 20 61 72 65 20 63 6f 72 72 65 | fy.that.the.parameters.are.corre |
769a0 | 63 74 20 62 65 66 6f 72 65 20 63 6f 6d 6d 69 74 74 69 6e 67 20 74 68 65 20 63 6f 6e 66 69 67 75 | ct.before.committing.the.configu |
769c0 | 72 61 74 69 6f 6e 2e 20 52 65 66 65 72 20 74 6f 20 69 73 63 2d 64 68 63 70 27 73 20 64 68 63 70 | ration..Refer.to.isc-dhcp's.dhcp |
769e0 | 64 2e 63 6f 6e 66 20 6d 61 6e 75 61 6c 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 | d.conf.manual.for.more.informati |
76a00 | 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 6b 62 2e 69 73 63 2e 6f 72 67 2f 64 6f 63 73 2f 69 73 63 2d | on:.https://kb.isc.org/docs/isc- |
76a20 | 64 68 63 70 2d 34 34 2d 6d 61 6e 75 61 6c 2d 70 61 67 65 73 2d 64 68 63 70 64 63 6f 6e 66 00 54 | dhcp-44-manual-pages-dhcpdconf.T |
76a40 | 68 65 73 65 20 70 61 72 61 6d 65 74 65 72 73 20 6e 65 65 64 20 74 6f 20 62 65 20 70 61 72 74 20 | hese.parameters.need.to.be.part. |
76a60 | 6f 66 20 74 68 65 20 44 48 43 50 20 67 6c 6f 62 61 6c 20 6f 70 74 69 6f 6e 73 2e 20 54 68 65 79 | of.the.DHCP.global.options..They |
76a80 | 20 73 74 61 79 20 75 6e 63 68 61 6e 67 65 64 2e 00 54 68 65 79 20 63 61 6e 20 62 65 20 2a 2a 64 | .stay.unchanged..They.can.be.**d |
76aa0 | 65 63 69 6d 61 6c 2a 2a 20 70 72 65 66 69 78 65 73 2e 00 54 68 69 6e 67 73 20 74 6f 20 62 65 20 | ecimal**.prefixes..Things.to.be. |
76ac0 | 63 6f 6e 73 69 64 72 65 64 20 69 6e 20 74 68 69 73 20 73 65 74 75 70 3a 00 54 68 69 73 20 61 64 | considred.in.this.setup:.This.ad |
76ae0 | 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 74 68 65 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 6c | dress.must.be.the.address.of.a.l |
76b00 | 6f 63 61 6c 20 69 6e 74 65 72 66 61 63 65 2e 20 49 74 20 6d 61 79 20 62 65 20 73 70 65 63 69 66 | ocal.interface..It.may.be.specif |
76b20 | 69 65 64 20 61 73 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 72 20 61 6e 20 49 50 76 | ied.as.an.IPv4.address.or.an.IPv |
76b40 | 36 20 61 64 64 72 65 73 73 2e 00 54 68 69 73 20 61 6c 67 6f 72 69 74 68 6d 20 69 73 20 38 30 32 | 6.address..This.algorithm.is.802 |
76b60 | 2e 33 61 64 20 63 6f 6d 70 6c 69 61 6e 74 2e 00 54 68 69 73 20 61 6c 67 6f 72 69 74 68 6d 20 69 | .3ad.compliant..This.algorithm.i |
76b80 | 73 20 6e 6f 74 20 66 75 6c 6c 79 20 38 30 32 2e 33 61 64 20 63 6f 6d 70 6c 69 61 6e 74 2e 20 41 | s.not.fully.802.3ad.compliant..A |
76ba0 | 20 73 69 6e 67 6c 65 20 54 43 50 20 6f 72 20 55 44 50 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 20 | .single.TCP.or.UDP.conversation. |
76bc0 | 63 6f 6e 74 61 69 6e 69 6e 67 20 62 6f 74 68 20 66 72 61 67 6d 65 6e 74 65 64 20 61 6e 64 20 75 | containing.both.fragmented.and.u |
76be0 | 6e 66 72 61 67 6d 65 6e 74 65 64 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 73 65 65 20 70 61 63 | nfragmented.packets.will.see.pac |
76c00 | 6b 65 74 73 20 73 74 72 69 70 65 64 20 61 63 72 6f 73 73 20 74 77 6f 20 69 6e 74 65 72 66 61 63 | kets.striped.across.two.interfac |
76c20 | 65 73 2e 20 54 68 69 73 20 6d 61 79 20 72 65 73 75 6c 74 20 69 6e 20 6f 75 74 20 6f 66 20 6f 72 | es..This.may.result.in.out.of.or |
76c40 | 64 65 72 20 64 65 6c 69 76 65 72 79 2e 20 4d 6f 73 74 20 74 72 61 66 66 69 63 20 74 79 70 65 73 | der.delivery..Most.traffic.types |
76c60 | 20 77 69 6c 6c 20 6e 6f 74 20 6d 65 65 74 20 74 68 65 73 65 20 63 72 69 74 65 72 69 61 2c 20 61 | .will.not.meet.these.criteria,.a |
76c80 | 73 20 54 43 50 20 72 61 72 65 6c 79 20 66 72 61 67 6d 65 6e 74 73 20 74 72 61 66 66 69 63 2c 20 | s.TCP.rarely.fragments.traffic,. |
76ca0 | 61 6e 64 20 6d 6f 73 74 20 55 44 50 20 74 72 61 66 66 69 63 20 69 73 20 6e 6f 74 20 69 6e 76 6f | and.most.UDP.traffic.is.not.invo |
76cc0 | 6c 76 65 64 20 69 6e 20 65 78 74 65 6e 64 65 64 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 2e 20 | lved.in.extended.conversations.. |
76ce0 | 4f 74 68 65 72 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 6f 66 20 38 30 32 2e 33 61 64 | Other.implementations.of.802.3ad |
76d00 | 20 6d 61 79 20 6f 72 20 6d 61 79 20 6e 6f 74 20 74 6f 6c 65 72 61 74 65 20 74 68 69 73 20 6e 6f | .may.or.may.not.tolerate.this.no |
76d20 | 6e 63 6f 6d 70 6c 69 61 6e 63 65 2e 00 54 68 69 73 20 61 6c 67 6f 72 69 74 68 6d 20 77 69 6c 6c | ncompliance..This.algorithm.will |
76d40 | 20 70 6c 61 63 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 74 6f 20 61 20 70 61 72 74 69 63 75 6c | .place.all.traffic.to.a.particul |
76d60 | 61 72 20 6e 65 74 77 6f 72 6b 20 70 65 65 72 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 73 6c 61 76 | ar.network.peer.on.the.same.slav |
76d80 | 65 2e 00 54 68 69 73 20 61 6c 67 6f 72 69 74 68 6d 20 77 69 6c 6c 20 70 6c 61 63 65 20 61 6c 6c | e..This.algorithm.will.place.all |
76da0 | 20 74 72 61 66 66 69 63 20 74 6f 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 6e 65 74 77 6f 72 6b | .traffic.to.a.particular.network |
76dc0 | 20 70 65 65 72 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 73 6c 61 76 65 2e 20 46 6f 72 20 6e 6f 6e | .peer.on.the.same.slave..For.non |
76de0 | 2d 49 50 20 74 72 61 66 66 69 63 2c 20 74 68 65 20 66 6f 72 6d 75 6c 61 20 69 73 20 74 68 65 20 | -IP.traffic,.the.formula.is.the. |
76e00 | 73 61 6d 65 20 61 73 20 66 6f 72 20 74 68 65 20 6c 61 79 65 72 32 20 74 72 61 6e 73 6d 69 74 20 | same.as.for.the.layer2.transmit. |
76e20 | 68 61 73 68 20 70 6f 6c 69 63 79 2e 00 54 68 69 73 20 61 6c 6c 6f 77 73 20 61 76 6f 69 64 69 6e | hash.policy..This.allows.avoidin |
76e40 | 67 20 74 68 65 20 74 69 6d 65 72 73 20 64 65 66 69 6e 65 64 20 69 6e 20 42 47 50 20 61 6e 64 20 | g.the.timers.defined.in.BGP.and. |
76e60 | 4f 53 50 46 20 70 72 6f 74 6f 63 6f 6c 20 74 6f 20 65 78 70 69 72 65 73 2e 00 54 68 69 73 20 61 | OSPF.protocol.to.expires..This.a |
76e80 | 6c 6c 6f 77 73 20 74 68 65 20 6f 70 65 72 61 74 6f 72 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 | llows.the.operator.to.control.th |
76ea0 | 65 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 66 69 6c 65 20 64 65 73 63 72 69 70 74 6f 72 | e.number.of.open.file.descriptor |
76ec0 | 73 20 65 61 63 68 20 64 61 65 6d 6f 6e 20 69 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 73 74 61 72 | s.each.daemon.is.allowed.to.star |
76ee0 | 74 20 77 69 74 68 2e 20 49 66 20 74 68 65 20 6f 70 65 72 61 74 6f 72 20 70 6c 61 6e 73 20 74 6f | t.with..If.the.operator.plans.to |
76f00 | 20 72 75 6e 20 62 67 70 20 77 69 74 68 20 73 65 76 65 72 61 6c 20 74 68 6f 75 73 61 6e 64 73 20 | .run.bgp.with.several.thousands. |
76f20 | 6f 66 20 70 65 65 72 73 20 74 68 65 6e 20 74 68 69 73 20 69 73 20 77 68 65 72 65 20 77 65 20 77 | of.peers.then.this.is.where.we.w |
76f40 | 6f 75 6c 64 20 6d 6f 64 69 66 79 20 46 52 52 20 74 6f 20 61 6c 6c 6f 77 20 74 68 69 73 20 74 6f | ould.modify.FRR.to.allow.this.to |
76f60 | 20 68 61 70 70 65 6e 2e 00 54 68 69 73 20 61 6c 73 6f 20 77 6f 72 6b 73 20 66 6f 72 20 72 65 76 | .happen..This.also.works.for.rev |
76f80 | 65 72 73 65 2d 6c 6f 6f 6b 75 70 20 7a 6f 6e 65 73 20 28 60 60 31 38 2e 31 37 32 2e 69 6e 2d 61 | erse-lookup.zones.(``18.172.in-a |
76fa0 | 64 64 72 2e 61 72 70 61 60 60 29 2e 00 54 68 69 73 20 61 72 74 69 63 6c 65 20 74 6f 75 63 68 65 | ddr.arpa``)..This.article.touche |
76fc0 | 73 20 6f 6e 20 27 63 6c 61 73 73 69 63 27 20 49 50 20 74 75 6e 6e 65 6c 69 6e 67 20 70 72 6f 74 | s.on.'classic'.IP.tunneling.prot |
76fe0 | 6f 63 6f 6c 73 2e 00 54 68 69 73 20 62 6c 75 65 70 72 69 6e 74 20 75 73 65 73 20 56 79 4f 53 20 | ocols..This.blueprint.uses.VyOS. |
77000 | 61 73 20 74 68 65 20 44 4d 56 50 4e 20 48 75 62 20 61 6e 64 20 43 69 73 63 6f 20 28 37 32 30 36 | as.the.DMVPN.Hub.and.Cisco.(7206 |
77020 | 56 58 52 29 20 61 6e 64 20 56 79 4f 53 20 61 73 20 6d 75 6c 74 69 70 6c 65 20 73 70 6f 6b 65 20 | VXR).and.VyOS.as.multiple.spoke. |
77040 | 73 69 74 65 73 2e 20 54 68 65 20 6c 61 62 20 77 61 73 20 62 75 69 6c 64 20 75 73 69 6e 67 20 3a | sites..The.lab.was.build.using.: |
77060 | 61 62 62 72 3a 60 45 56 45 2d 4e 47 20 28 45 6d 75 6c 61 74 65 64 20 56 69 72 74 75 61 6c 20 45 | abbr:`EVE-NG.(Emulated.Virtual.E |
77080 | 6e 76 69 72 6f 6e 6d 65 6e 74 20 4e 47 29 60 2e 00 54 68 69 73 20 63 61 6e 20 62 65 20 63 6f 6e | nvironment.NG)`..This.can.be.con |
770a0 | 66 69 72 6d 65 64 20 75 73 69 6e 67 20 74 68 65 20 60 60 73 68 6f 77 20 69 70 20 72 6f 75 74 65 | firmed.using.the.``show.ip.route |
770c0 | 20 74 61 62 6c 65 20 31 30 30 60 60 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 | .table.100``.operational.command |
770e0 | 2e 00 54 68 69 73 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 64 6f 6e 65 20 69 66 20 61 6c 6c 20 79 | ..This.can.only.be.done.if.all.y |
77100 | 6f 75 72 20 75 73 65 72 73 20 61 72 65 20 6c 6f 63 61 74 65 64 20 64 69 72 65 63 74 6c 79 20 75 | our.users.are.located.directly.u |
77120 | 6e 64 65 72 20 74 68 65 20 73 61 6d 65 20 70 6f 73 69 74 69 6f 6e 20 69 6e 20 74 68 65 20 4c 44 | nder.the.same.position.in.the.LD |
77140 | 41 50 20 74 72 65 65 20 61 6e 64 20 74 68 65 20 6c 6f 67 69 6e 20 6e 61 6d 65 20 69 73 20 75 73 | AP.tree.and.the.login.name.is.us |
77160 | 65 64 20 66 6f 72 20 6e 61 6d 69 6e 67 20 65 61 63 68 20 75 73 65 72 20 6f 62 6a 65 63 74 2e 20 | ed.for.naming.each.user.object.. |
77180 | 49 66 20 79 6f 75 72 20 4c 44 41 50 20 74 72 65 65 20 64 6f 65 73 20 6e 6f 74 20 6d 61 74 63 68 | If.your.LDAP.tree.does.not.match |
771a0 | 20 74 68 65 73 65 20 63 72 69 74 65 72 69 61 73 20 6f 72 20 69 66 20 79 6f 75 20 77 61 6e 74 20 | .these.criterias.or.if.you.want. |
771c0 | 74 6f 20 66 69 6c 74 65 72 20 77 68 6f 20 61 72 65 20 76 61 6c 69 64 20 75 73 65 72 73 20 74 68 | to.filter.who.are.valid.users.th |
771e0 | 65 6e 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 75 73 65 20 61 20 73 65 61 72 63 68 20 66 69 6c 74 | en.you.need.to.use.a.search.filt |
77200 | 65 72 20 74 6f 20 73 65 61 72 63 68 20 66 6f 72 20 79 6f 75 72 20 75 73 65 72 73 20 44 4e 20 28 | er.to.search.for.your.users.DN.( |
77220 | 60 66 69 6c 74 65 72 2d 65 78 70 72 65 73 73 69 6f 6e 60 29 2e 00 54 68 69 73 20 63 68 61 70 65 | `filter-expression`)..This.chape |
77240 | 74 65 72 20 64 65 73 63 72 69 62 65 73 20 68 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 6b | ter.describes.how.to.configure.k |
77260 | 65 72 6e 65 6c 20 70 61 72 61 6d 65 74 65 72 73 20 61 74 20 72 75 6e 74 69 6d 65 2e 00 54 68 69 | ernel.parameters.at.runtime..Thi |
77280 | 73 20 63 68 61 70 74 65 72 20 64 65 73 63 72 69 62 65 20 74 68 65 20 70 6f 73 73 69 62 69 6c 69 | s.chapter.describe.the.possibili |
772a0 | 74 69 65 73 20 6f 66 20 61 64 76 61 6e 63 65 64 20 73 79 73 74 65 6d 20 62 65 68 61 76 69 6f 72 | ties.of.advanced.system.behavior |
772c0 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 64 20 73 65 74 73 20 6e 65 74 77 6f 72 6b 20 65 6e 74 69 74 | ..This.commad.sets.network.entit |
772e0 | 79 20 74 69 74 6c 65 20 28 4e 45 54 29 20 70 72 6f 76 69 64 65 64 20 69 6e 20 49 53 4f 20 66 6f | y.title.(NET).provided.in.ISO.fo |
77300 | 72 6d 61 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 63 63 65 70 74 20 69 6e 63 6f 6d 69 | rmat..This.command.accept.incomi |
77320 | 6e 67 20 72 6f 75 74 65 73 20 77 69 74 68 20 41 53 20 70 61 74 68 20 63 6f 6e 74 61 69 6e 69 6e | ng.routes.with.AS.path.containin |
77340 | 67 20 41 53 20 6e 75 6d 62 65 72 20 77 69 74 68 20 74 68 65 20 73 61 6d 65 20 76 61 6c 75 65 20 | g.AS.number.with.the.same.value. |
77360 | 61 73 20 74 68 65 20 63 75 72 72 65 6e 74 20 73 79 73 74 65 6d 20 41 53 2e 20 54 68 69 73 20 69 | as.the.current.system.AS..This.i |
77380 | 73 20 75 73 65 64 20 77 68 65 6e 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 75 73 65 20 74 68 65 20 | s.used.when.you.want.to.use.the. |
773a0 | 73 61 6d 65 20 41 53 20 6e 75 6d 62 65 72 20 69 6e 20 79 6f 75 72 20 73 69 74 65 73 2c 20 62 75 | same.AS.number.in.your.sites,.bu |
773c0 | 74 20 79 6f 75 20 63 61 6e e2 80 99 74 20 63 6f 6e 6e 65 63 74 20 74 68 65 6d 20 64 69 72 65 63 | t.you.can...t.connect.them.direc |
773e0 | 74 6c 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 20 6f 76 65 72 72 69 64 65 | tly..This.command.allow.override |
77400 | 20 74 68 65 20 72 65 73 75 6c 74 20 6f 66 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 | .the.result.of.Capability.Negoti |
77420 | 61 74 69 6f 6e 20 77 69 74 68 20 6c 6f 63 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 | ation.with.local.configuration.. |
77440 | 49 67 6e 6f 72 65 20 72 65 6d 6f 74 65 20 70 65 65 72 e2 80 99 73 20 63 61 70 61 62 69 6c 69 74 | Ignore.remote.peer...s.capabilit |
77460 | 79 20 76 61 6c 75 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 70 65 65 | y.value..This.command.allows.pee |
77480 | 72 69 6e 67 73 20 62 65 74 77 65 65 6e 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 | rings.between.directly.connected |
774a0 | 20 65 42 47 50 20 70 65 65 72 73 20 75 73 69 6e 67 20 6c 6f 6f 70 62 61 63 6b 20 61 64 64 72 65 | .eBGP.peers.using.loopback.addre |
774c0 | 73 73 65 73 20 77 69 74 68 6f 75 74 20 61 64 6a 75 73 74 69 6e 67 20 74 68 65 20 64 65 66 61 75 | sses.without.adjusting.the.defau |
774e0 | 6c 74 20 54 54 4c 20 6f 66 20 31 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 | lt.TTL.of.1..This.command.allows |
77500 | 20 73 65 73 73 69 6f 6e 73 20 74 6f 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 77 69 74 68 | .sessions.to.be.established.with |
77520 | 20 65 42 47 50 20 6e 65 69 67 68 62 6f 72 73 20 77 68 65 6e 20 74 68 65 79 20 61 72 65 20 6d 75 | .eBGP.neighbors.when.they.are.mu |
77540 | 6c 74 69 70 6c 65 20 68 6f 70 73 20 61 77 61 79 2e 20 57 68 65 6e 20 74 68 65 20 6e 65 69 67 68 | ltiple.hops.away..When.the.neigh |
77560 | 62 6f 72 20 69 73 20 6e 6f 74 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 61 6e | bor.is.not.directly.connected.an |
77580 | 64 20 74 68 69 73 20 6b 6e 6f 62 20 69 73 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 20 | d.this.knob.is.not.enabled,.the. |
775a0 | 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 65 73 74 61 62 6c 69 73 68 2e 20 54 68 65 20 | session.will.not.establish..The. |
775c0 | 6e 75 6d 62 65 72 20 6f 66 20 68 6f 70 73 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 | number.of.hops.range.is.1.to.255 |
775e0 | 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6d 75 74 75 61 6c 6c 79 20 65 78 63 6c 75 | ..This.command.is.mutually.exclu |
77600 | 73 69 76 65 20 77 69 74 68 20 3a 63 66 67 63 6d 64 3a 60 74 74 6c 2d 73 65 63 75 72 69 74 79 20 | sive.with.:cfgcmd:`ttl-security. |
77620 | 68 6f 70 73 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 68 65 20 72 | hops`..This.command.allows.the.r |
77640 | 6f 75 74 65 72 20 74 6f 20 70 72 65 66 65 72 20 72 6f 75 74 65 20 74 6f 20 73 70 65 63 69 66 69 | outer.to.prefer.route.to.specifi |
77660 | 65 64 20 70 72 65 66 69 78 20 6c 65 61 72 6e 65 64 20 76 69 61 20 49 47 50 20 74 68 72 6f 75 67 | ed.prefix.learned.via.IGP.throug |
77680 | 68 20 62 61 63 6b 64 6f 6f 72 20 6c 69 6e 6b 20 69 6e 73 74 65 61 64 20 6f 66 20 61 20 72 6f 75 | h.backdoor.link.instead.of.a.rou |
776a0 | 74 65 20 74 6f 20 74 68 65 20 73 61 6d 65 20 70 72 65 66 69 78 20 6c 65 61 72 6e 65 64 20 76 69 | te.to.the.same.prefix.learned.vi |
776c0 | 61 20 45 42 47 50 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 6c | a.EBGP..This.command.allows.to.l |
776e0 | 6f 67 20 63 68 61 6e 67 65 73 20 69 6e 20 61 64 6a 61 63 65 6e 63 79 2e 20 57 69 74 68 20 74 68 | og.changes.in.adjacency..With.th |
77700 | 65 20 6f 70 74 69 6f 6e 61 6c 20 3a 63 66 67 63 6d 64 3a 60 64 65 74 61 69 6c 60 20 61 72 67 75 | e.optional.:cfgcmd:`detail`.argu |
77720 | 6d 65 6e 74 2c 20 61 6c 6c 20 63 68 61 6e 67 65 73 20 69 6e 20 61 64 6a 61 63 65 6e 63 79 20 73 | ment,.all.changes.in.adjacency.s |
77740 | 74 61 74 75 73 20 61 72 65 20 73 68 6f 77 6e 2e 20 57 69 74 68 6f 75 74 20 3a 63 66 67 63 6d 64 | tatus.are.shown..Without.:cfgcmd |
77760 | 3a 60 64 65 74 61 69 6c 60 2c 20 6f 6e 6c 79 20 63 68 61 6e 67 65 73 20 74 6f 20 66 75 6c 6c 20 | :`detail`,.only.changes.to.full. |
77780 | 6f 72 20 72 65 67 72 65 73 73 69 6f 6e 73 20 61 72 65 20 73 68 6f 77 6e 2e 00 54 68 69 73 20 63 | or.regressions.are.shown..This.c |
777a0 | 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 64 69 73 | ommand.allows.to.specify.the.dis |
777c0 | 74 72 69 62 75 74 69 6f 6e 20 74 79 70 65 20 66 6f 72 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 63 | tribution.type.for.the.network.c |
777e0 | 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 3a 00 54 68 69 73 | onnected.to.this.interface:.This |
77800 | 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 75 73 65 20 72 6f 75 74 65 20 6d 61 70 | .command.allows.to.use.route.map |
77820 | 20 74 6f 20 66 69 6c 74 65 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 | .to.filter.redistributed.routes. |
77840 | 66 72 6f 6d 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 | from.given.route.source..There.a |
77860 | 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 | re.five.modes.available.for.rout |
77880 | 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c | e.source:.bgp,.connected,.kernel |
778a0 | 2c 20 72 69 70 6e 67 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c | ,.ripng,.static..This.command.al |
778c0 | 6c 6f 77 73 20 74 6f 20 75 73 65 20 72 6f 75 74 65 20 6d 61 70 20 74 6f 20 66 69 6c 74 65 72 20 | lows.to.use.route.map.to.filter. |
778e0 | 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 67 69 | redistributed.routes.from.the.gi |
77900 | 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 | ven.route.source..There.are.five |
77920 | 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 | .modes.available.for.route.sourc |
77940 | 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c | e:.bgp,.connected,.kernel,.ospf, |
77960 | 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 | .static..This.command.allows.to. |
77980 | 75 73 65 20 72 6f 75 74 65 20 6d 61 70 20 74 6f 20 66 69 6c 74 65 72 20 72 65 64 69 73 74 72 69 | use.route.map.to.filter.redistri |
779a0 | 62 75 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 | buted.routes.from.the.given.rout |
779c0 | 65 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 | e.source..There.are.five.modes.a |
779e0 | 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 | vailable.for.route.source:.bgp,. |
77a00 | 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 | connected,.kernel,.rip,.static.. |
77a20 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 75 73 65 20 72 6f 75 74 65 | This.command.allows.to.use.route |
77a40 | 20 6d 61 70 20 74 6f 20 66 69 6c 74 65 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 | .map.to.filter.redistributed.rou |
77a60 | 74 65 73 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e | tes.from.the.given.route.source. |
77a80 | 20 54 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 | .There.are.six.modes.available.f |
77aa0 | 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c | or.route.source:.bgp,.connected, |
77ac0 | 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 | .kernel,.ospf,.rip,.static..This |
77ae0 | 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 75 73 65 20 72 6f 75 74 65 20 6d 61 70 | .command.allows.to.use.route.map |
77b00 | 20 74 6f 20 66 69 6c 74 65 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 2e | .to.filter.redistributed.routes. |
77b20 | 20 54 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 | .There.are.six.modes.available.f |
77b40 | 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e | or.route.source:.connected,.kern |
77b60 | 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 2e 00 54 68 | el,.ospf,.rip,.static,.table..Th |
77b80 | 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 79 6f 75 20 61 70 70 6c 79 20 61 63 63 65 | is.command.allows.you.apply.acce |
77ba0 | 73 73 20 6c 69 73 74 73 20 74 6f 20 61 20 63 68 6f 73 65 6e 20 69 6e 74 65 72 66 61 63 65 20 74 | ss.lists.to.a.chosen.interface.t |
77bc0 | 6f 20 66 69 6c 74 65 72 20 74 68 65 20 42 61 62 65 6c 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 | o.filter.the.Babel.routes..This. |
77be0 | 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 79 6f 75 20 61 70 70 6c 79 20 61 63 63 65 73 73 20 | command.allows.you.apply.access. |
77c00 | 6c 69 73 74 73 20 74 6f 20 61 20 63 68 6f 73 65 6e 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 66 | lists.to.a.chosen.interface.to.f |
77c20 | 69 6c 74 65 72 20 74 68 65 20 52 49 50 20 70 61 74 68 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | ilter.the.RIP.path..This.command |
77c40 | 20 61 6c 6c 6f 77 73 20 79 6f 75 20 61 70 70 6c 79 20 70 72 65 66 69 78 20 6c 69 73 74 73 20 74 | .allows.you.apply.prefix.lists.t |
77c60 | 6f 20 61 20 63 68 6f 73 65 6e 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 66 69 6c 74 65 72 20 74 | o.a.chosen.interface.to.filter.t |
77c80 | 68 65 20 42 61 62 65 6c 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c | he.Babel.routes..This.command.al |
77ca0 | 6c 6f 77 73 20 79 6f 75 20 61 70 70 6c 79 20 70 72 65 66 69 78 20 6c 69 73 74 73 20 74 6f 20 61 | lows.you.apply.prefix.lists.to.a |
77cc0 | 20 63 68 6f 73 65 6e 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 | .chosen.interface.to.filter.the. |
77ce0 | 52 49 50 20 70 61 74 68 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 79 6f | RIP.path..This.command.allows.yo |
77d00 | 75 20 74 6f 20 73 65 6c 65 63 74 20 61 20 73 70 65 63 69 66 69 63 20 61 63 63 65 73 73 20 63 6f | u.to.select.a.specific.access.co |
77d20 | 6e 63 65 6e 74 72 61 74 6f 72 20 77 68 65 6e 20 79 6f 75 20 6b 6e 6f 77 20 74 68 65 20 61 63 63 | ncentrator.when.you.know.the.acc |
77d40 | 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 73 20 60 3c 6e 61 6d 65 3e 60 2e 00 54 68 69 73 | ess.concentrators.`<name>`..This |
77d60 | 20 63 6f 6d 6d 61 6e 64 20 61 70 70 6c 69 65 73 20 72 6f 75 74 65 2d 6d 61 70 20 74 6f 20 73 65 | .command.applies.route-map.to.se |
77d80 | 6c 65 63 74 69 76 65 6c 79 20 75 6e 73 75 70 70 72 65 73 73 20 70 72 65 66 69 78 65 73 20 73 75 | lectively.unsuppress.prefixes.su |
77da0 | 70 70 72 65 73 73 65 64 20 62 79 20 73 75 6d 6d 61 72 69 73 61 74 69 6f 6e 2e 00 54 68 69 73 20 | ppressed.by.summarisation..This. |
77dc0 | 63 6f 6d 6d 61 6e 64 20 61 70 70 6c 69 65 73 20 74 68 65 20 41 53 20 70 61 74 68 20 61 63 63 65 | command.applies.the.AS.path.acce |
77de0 | 73 73 20 6c 69 73 74 20 66 69 6c 74 65 72 73 20 6e 61 6d 65 64 20 69 6e 20 3c 6e 61 6d 65 3e 20 | ss.list.filters.named.in.<name>. |
77e00 | 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 6e 65 69 67 68 62 6f 72 20 74 6f | to.the.specified.BGP.neighbor.to |
77e20 | 20 72 65 73 74 72 69 63 74 20 74 68 65 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f | .restrict.the.routing.informatio |
77e40 | 6e 20 74 68 61 74 20 42 47 50 20 6c 65 61 72 6e 73 20 61 6e 64 2f 6f 72 20 61 64 76 65 72 74 69 | n.that.BGP.learns.and/or.adverti |
77e60 | 73 65 73 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 73 20 3a 63 66 67 63 6d 64 3a 60 65 78 70 6f | ses..The.arguments.:cfgcmd:`expo |
77e80 | 72 74 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 69 6d 70 6f 72 74 60 20 73 70 65 63 69 66 79 | rt`.and.:cfgcmd:`import`.specify |
77ea0 | 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 41 53 20 70 | .the.direction.in.which.the.AS.p |
77ec0 | 61 74 68 20 61 63 63 65 73 73 20 6c 69 73 74 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 | ath.access.list.are.applied..Thi |
77ee0 | 73 20 63 6f 6d 6d 61 6e 64 20 61 70 70 6c 69 65 73 20 74 68 65 20 61 63 63 65 73 73 20 6c 69 73 | s.command.applies.the.access.lis |
77f00 | 74 20 66 69 6c 74 65 72 73 20 6e 61 6d 65 64 20 69 6e 20 3c 6e 75 6d 62 65 72 3e 20 74 6f 20 74 | t.filters.named.in.<number>.to.t |
77f20 | 68 65 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 6e 65 69 67 68 62 6f 72 20 74 6f 20 72 65 73 | he.specified.BGP.neighbor.to.res |
77f40 | 74 72 69 63 74 20 74 68 65 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 | trict.the.routing.information.th |
77f60 | 61 74 20 42 47 50 20 6c 65 61 72 6e 73 20 61 6e 64 2f 6f 72 20 61 64 76 65 72 74 69 73 65 73 2e | at.BGP.learns.and/or.advertises. |
77f80 | 20 54 68 65 20 61 72 67 75 6d 65 6e 74 73 20 3a 63 66 67 63 6d 64 3a 60 65 78 70 6f 72 74 60 20 | .The.arguments.:cfgcmd:`export`. |
77fa0 | 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 69 6d 70 6f 72 74 60 20 73 70 65 63 69 66 79 20 74 68 65 | and.:cfgcmd:`import`.specify.the |
77fc0 | 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 61 63 63 65 73 73 20 6c | .direction.in.which.the.access.l |
77fe0 | 69 73 74 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 70 | ist.are.applied..This.command.ap |
78000 | 70 6c 69 65 73 20 74 68 65 20 70 72 66 65 66 69 78 20 6c 69 73 74 20 66 69 6c 74 65 72 73 20 6e | plies.the.prfefix.list.filters.n |
78020 | 61 6d 65 64 20 69 6e 20 3c 6e 61 6d 65 3e 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 | amed.in.<name>.to.the.specified. |
78040 | 42 47 50 20 6e 65 69 67 68 62 6f 72 20 74 6f 20 72 65 73 74 72 69 63 74 20 74 68 65 20 72 6f 75 | BGP.neighbor.to.restrict.the.rou |
78060 | 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 42 47 50 20 6c 65 61 72 6e 73 | ting.information.that.BGP.learns |
78080 | 20 61 6e 64 2f 6f 72 20 61 64 76 65 72 74 69 73 65 73 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 | .and/or.advertises..The.argument |
780a0 | 73 20 3a 63 66 67 63 6d 64 3a 60 65 78 70 6f 72 74 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 | s.:cfgcmd:`export`.and.:cfgcmd:` |
780c0 | 69 6d 70 6f 72 74 60 20 73 70 65 63 69 66 79 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e | import`.specify.the.direction.in |
780e0 | 20 77 68 69 63 68 20 74 68 65 20 70 72 65 66 69 78 20 6c 69 73 74 20 61 72 65 20 61 70 70 6c 69 | .which.the.prefix.list.are.appli |
78100 | 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 70 70 6c 69 65 73 20 74 68 65 20 72 6f 75 | ed..This.command.applies.the.rou |
78120 | 74 65 20 6d 61 70 20 6e 61 6d 65 64 20 69 6e 20 3c 6e 61 6d 65 3e 20 74 6f 20 74 68 65 20 73 70 | te.map.named.in.<name>.to.the.sp |
78140 | 65 63 69 66 69 65 64 20 42 47 50 20 6e 65 69 67 68 62 6f 72 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 | ecified.BGP.neighbor.to.control. |
78160 | 61 6e 64 20 6d 6f 64 69 66 79 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 | and.modify.routing.information.t |
78180 | 68 61 74 20 69 73 20 65 78 63 68 61 6e 67 65 64 20 62 65 74 77 65 65 6e 20 70 65 65 72 73 2e 20 | hat.is.exchanged.between.peers.. |
781a0 | 54 68 65 20 61 72 67 75 6d 65 6e 74 73 20 3a 63 66 67 63 6d 64 3a 60 65 78 70 6f 72 74 60 20 61 | The.arguments.:cfgcmd:`export`.a |
781c0 | 6e 64 20 3a 63 66 67 63 6d 64 3a 60 69 6d 70 6f 72 74 60 20 73 70 65 63 69 66 79 20 74 68 65 20 | nd.:cfgcmd:`import`.specify.the. |
781e0 | 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 72 6f 75 74 65 20 6d 61 70 | direction.in.which.the.route.map |
78200 | 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 62 69 6e 64 20 | .are.applied..This.command.bind. |
78220 | 73 70 65 63 69 66 69 63 20 70 65 65 72 20 74 6f 20 70 65 65 72 20 67 72 6f 75 70 20 77 69 74 68 | specific.peer.to.peer.group.with |
78240 | 20 61 20 67 69 76 65 6e 20 6e 61 6d 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 | .a.given.name..This.command.can. |
78260 | 62 65 20 75 73 65 64 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 42 61 62 65 6c 20 72 6f 75 74 | be.used.to.filter.the.Babel.rout |
78280 | 65 73 20 75 73 69 6e 67 20 61 63 63 65 73 73 20 6c 69 73 74 73 2e 20 3a 63 66 67 63 6d 64 3a 60 | es.using.access.lists..:cfgcmd:` |
782a0 | 69 6e 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 6f 75 74 60 20 74 68 69 73 20 69 73 20 74 68 | in`.and.:cfgcmd:`out`.this.is.th |
782c0 | 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 61 63 63 65 73 73 20 | e.direction.in.which.the.access. |
782e0 | 6c 69 73 74 73 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | lists.are.applied..This.command. |
78300 | 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 42 61 62 65 6c 20 | can.be.used.to.filter.the.Babel. |
78320 | 72 6f 75 74 65 73 20 75 73 69 6e 67 20 70 72 65 66 69 78 20 6c 69 73 74 73 2e 20 3a 63 66 67 63 | routes.using.prefix.lists..:cfgc |
78340 | 6d 64 3a 60 69 6e 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 6f 75 74 60 20 74 68 69 73 20 69 | md:`in`.and.:cfgcmd:`out`.this.i |
78360 | 73 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 70 72 65 | s.the.direction.in.which.the.pre |
78380 | 66 69 78 20 6c 69 73 74 73 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d | fix.lists.are.applied..This.comm |
783a0 | 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 52 49 | and.can.be.used.to.filter.the.RI |
783c0 | 50 20 70 61 74 68 20 75 73 69 6e 67 20 61 63 63 65 73 73 20 6c 69 73 74 73 2e 20 3a 63 66 67 63 | P.path.using.access.lists..:cfgc |
783e0 | 6d 64 3a 60 69 6e 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 6f 75 74 60 20 74 68 69 73 20 69 | md:`in`.and.:cfgcmd:`out`.this.i |
78400 | 73 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 61 63 63 | s.the.direction.in.which.the.acc |
78420 | 65 73 73 20 6c 69 73 74 73 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d | ess.lists.are.applied..This.comm |
78440 | 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 52 49 | and.can.be.used.to.filter.the.RI |
78460 | 50 20 70 61 74 68 20 75 73 69 6e 67 20 70 72 65 66 69 78 20 6c 69 73 74 73 2e 20 3a 63 66 67 63 | P.path.using.prefix.lists..:cfgc |
78480 | 6d 64 3a 60 69 6e 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 6f 75 74 60 20 74 68 69 73 20 69 | md:`in`.and.:cfgcmd:`out`.this.i |
784a0 | 73 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 70 72 65 | s.the.direction.in.which.the.pre |
784c0 | 66 69 78 20 6c 69 73 74 73 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d | fix.lists.are.applied..This.comm |
784e0 | 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 69 74 68 20 70 72 65 76 69 6f 75 73 20 63 6f | and.can.be.used.with.previous.co |
78500 | 6d 6d 61 6e 64 20 74 6f 20 73 65 74 73 20 64 65 66 61 75 6c 74 20 52 49 50 20 64 69 73 74 61 6e | mmand.to.sets.default.RIP.distan |
78520 | 63 65 20 74 6f 20 73 70 65 63 69 66 69 65 64 20 76 61 6c 75 65 20 77 68 65 6e 20 74 68 65 20 72 | ce.to.specified.value.when.the.r |
78540 | 6f 75 74 65 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 6d 61 74 63 68 65 73 20 74 | oute.source.IP.address.matches.t |
78560 | 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 20 61 6e 64 20 74 68 65 20 73 70 65 63 | he.specified.prefix.and.the.spec |
78580 | 69 66 69 65 64 20 61 63 63 65 73 73 2d 6c 69 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | ified.access-list..This.command. |
785a0 | 63 68 61 6e 67 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 20 6f 66 20 42 47 50 2e 20 54 68 | change.distance.value.of.BGP..Th |
785c0 | 65 20 61 72 67 75 6d 65 6e 74 73 20 61 72 65 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c | e.arguments.are.the.distance.val |
785e0 | 75 65 73 20 66 6f 72 20 65 78 74 65 72 6e 61 6c 20 72 6f 75 74 65 73 2c 20 69 6e 74 65 72 6e 61 | ues.for.external.routes,.interna |
78600 | 6c 20 72 6f 75 74 65 73 20 61 6e 64 20 6c 6f 63 61 6c 20 72 6f 75 74 65 73 20 72 65 73 70 65 63 | l.routes.and.local.routes.respec |
78620 | 74 69 76 65 6c 79 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 | tively..The.distance.range.is.1. |
78640 | 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 20 64 69 73 74 | to.255..This.command.change.dist |
78660 | 61 6e 63 65 20 76 61 6c 75 65 20 6f 66 20 4f 53 50 46 20 67 6c 6f 62 61 6c 6c 79 2e 20 54 68 65 | ance.value.of.OSPF.globally..The |
78680 | 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 | .distance.range.is.1.to.255..Thi |
786a0 | 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 20 | s.command.change.distance.value. |
786c0 | 6f 66 20 4f 53 50 46 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 73 20 61 72 65 20 74 68 65 20 64 | of.OSPF..The.arguments.are.the.d |
786e0 | 69 73 74 61 6e 63 65 20 76 61 6c 75 65 73 20 66 6f 72 20 65 78 74 65 72 6e 61 6c 20 72 6f 75 74 | istance.values.for.external.rout |
78700 | 65 73 2c 20 69 6e 74 65 72 2d 61 72 65 61 20 72 6f 75 74 65 73 20 61 6e 64 20 69 6e 74 72 61 2d | es,.inter-area.routes.and.intra- |
78720 | 61 72 65 61 20 72 6f 75 74 65 73 20 72 65 73 70 65 63 74 69 76 65 6c 79 2e 20 54 68 65 20 64 69 | area.routes.respectively..The.di |
78740 | 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 | stance.range.is.1.to.255..This.c |
78760 | 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 20 6f 66 20 | ommand.change.distance.value.of. |
78780 | 4f 53 50 46 76 33 20 67 6c 6f 62 61 6c 6c 79 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 | OSPFv3.globally..The.distance.ra |
787a0 | 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 | nge.is.1.to.255..This.command.ch |
787c0 | 61 6e 67 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 20 6f 66 20 4f 53 50 46 76 33 2e 20 54 | ange.distance.value.of.OSPFv3..T |
787e0 | 68 65 20 61 72 67 75 6d 65 6e 74 73 20 61 72 65 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 76 61 | he.arguments.are.the.distance.va |
78800 | 6c 75 65 73 20 66 6f 72 20 65 78 74 65 72 6e 61 6c 20 72 6f 75 74 65 73 2c 20 69 6e 74 65 72 2d | lues.for.external.routes,.inter- |
78820 | 61 72 65 61 20 72 6f 75 74 65 73 20 61 6e 64 20 69 6e 74 72 61 2d 61 72 65 61 20 72 6f 75 74 65 | area.routes.and.intra-area.route |
78840 | 73 20 72 65 73 70 65 63 74 69 76 65 6c 79 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e | s.respectively..The.distance.ran |
78860 | 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 | ge.is.1.to.255..This.command.cha |
78880 | 6e 67 65 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 20 6f 66 20 52 49 50 2e 20 54 | nge.the.distance.value.of.RIP..T |
788a0 | 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 | he.distance.range.is.1.to.255..T |
788c0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 73 20 74 68 65 20 65 42 47 50 20 62 65 68 | his.command.changes.the.eBGP.beh |
788e0 | 61 76 69 6f 72 20 6f 66 20 46 52 52 2e 20 42 79 20 64 65 66 61 75 6c 74 20 46 52 52 20 65 6e 61 | avior.of.FRR..By.default.FRR.ena |
78900 | 62 6c 65 73 20 3a 72 66 63 3a 60 38 32 31 32 60 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 77 | bles.:rfc:`8212`.functionality.w |
78920 | 68 69 63 68 20 61 66 66 65 63 74 73 20 68 6f 77 20 65 42 47 50 20 72 6f 75 74 65 73 20 61 72 65 | hich.affects.how.eBGP.routes.are |
78940 | 20 61 64 76 65 72 74 69 73 65 64 2c 20 6e 61 6d 65 6c 79 20 6e 6f 20 72 6f 75 74 65 73 20 61 72 | .advertised,.namely.no.routes.ar |
78960 | 65 20 61 64 76 65 72 74 69 73 65 64 20 61 63 72 6f 73 73 20 65 42 47 50 20 73 65 73 73 69 6f 6e | e.advertised.across.eBGP.session |
78980 | 73 20 77 69 74 68 6f 75 74 20 73 6f 6d 65 20 73 6f 72 74 20 6f 66 20 65 67 72 65 73 73 20 72 6f | s.without.some.sort.of.egress.ro |
789a0 | 75 74 65 2d 6d 61 70 2f 70 6f 6c 69 63 79 20 69 6e 20 70 6c 61 63 65 2e 20 49 6e 20 56 79 4f 53 | ute-map/policy.in.place..In.VyOS |
789c0 | 20 68 6f 77 65 76 65 72 20 77 65 20 68 61 76 65 20 74 68 69 73 20 52 46 43 20 66 75 6e 63 74 69 | .however.we.have.this.RFC.functi |
789e0 | 6f 6e 61 6c 69 74 79 20 64 69 73 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 73 6f 20 74 | onality.disabled.by.default.so.t |
78a00 | 68 61 74 20 77 65 20 63 61 6e 20 70 72 65 73 65 72 76 65 20 62 61 63 6b 77 61 72 64 73 20 63 6f | hat.we.can.preserve.backwards.co |
78a20 | 6d 70 61 74 69 62 69 6c 69 74 79 20 77 69 74 68 20 6f 6c 64 65 72 20 76 65 72 73 69 6f 6e 73 20 | mpatibility.with.older.versions. |
78a40 | 6f 66 20 56 79 4f 53 2e 20 57 69 74 68 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 6f 6e 65 20 63 61 | of.VyOS..With.this.option.one.ca |
78a60 | 6e 20 65 6e 61 62 6c 65 20 3a 72 66 63 3a 60 38 32 31 32 60 20 66 75 6e 63 74 69 6f 6e 61 6c 69 | n.enable.:rfc:`8212`.functionali |
78a80 | 74 79 20 74 6f 20 6f 70 65 72 61 74 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 6f 6e 66 | ty.to.operate..This.command.conf |
78aa0 | 69 67 75 72 65 73 20 70 61 64 64 69 6e 67 20 6f 6e 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 | igures.padding.on.hello.packets. |
78ac0 | 74 6f 20 61 63 63 6f 6d 6d 6f 64 61 74 65 20 61 73 79 6d 6d 65 74 72 69 63 61 6c 20 6d 61 78 69 | to.accommodate.asymmetrical.maxi |
78ae0 | 6d 75 6d 20 74 72 61 6e 73 66 65 72 20 75 6e 69 74 73 20 28 4d 54 55 73 29 20 66 72 6f 6d 20 64 | mum.transfer.units.(MTUs).from.d |
78b00 | 69 66 66 65 72 65 6e 74 20 68 6f 73 74 73 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a | ifferent.hosts.as.described.in.: |
78b20 | 72 66 63 3a 60 33 37 31 39 60 2e 20 54 68 69 73 20 68 65 6c 70 73 20 74 6f 20 70 72 65 76 65 6e | rfc:`3719`..This.helps.to.preven |
78b40 | 74 20 61 20 70 72 65 6d 61 74 75 72 65 20 61 64 6a 61 63 65 6e 63 79 20 55 70 20 73 74 61 74 65 | t.a.premature.adjacency.Up.state |
78b60 | 20 77 68 65 6e 20 6f 6e 65 20 72 6f 75 74 69 6e 67 20 64 65 76 69 63 65 73 20 4d 54 55 20 64 6f | .when.one.routing.devices.MTU.do |
78b80 | 65 73 20 6e 6f 74 20 6d 65 65 74 20 74 68 65 20 72 65 71 75 69 72 65 6d 65 6e 74 73 20 74 6f 20 | es.not.meet.the.requirements.to. |
78ba0 | 65 73 74 61 62 6c 69 73 68 20 74 68 65 20 61 64 6a 61 63 65 6e 63 79 2e 00 54 68 69 73 20 63 6f | establish.the.adjacency..This.co |
78bc0 | 6d 6d 61 6e 64 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 61 75 74 68 65 6e 74 69 63 61 74 | mmand.configures.the.authenticat |
78be0 | 69 6f 6e 20 70 61 73 73 77 6f 72 64 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 00 | ion.password.for.the.interface.. |
78c00 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 6d 61 78 69 | This.command.configures.the.maxi |
78c20 | 6d 75 6d 20 73 69 7a 65 20 6f 66 20 67 65 6e 65 72 61 74 65 64 20 3a 61 62 62 72 3a 60 4c 53 50 | mum.size.of.generated.:abbr:`LSP |
78c40 | 73 20 28 4c 69 6e 6b 20 53 74 61 74 65 20 50 44 55 73 29 60 2c 20 69 6e 20 62 79 74 65 73 2e 20 | s.(Link.State.PDUs)`,.in.bytes.. |
78c60 | 54 68 65 20 73 69 7a 65 20 72 61 6e 67 65 20 69 73 20 31 32 38 20 74 6f 20 34 33 35 32 2e 00 54 | The.size.range.is.128.to.4352..T |
78c80 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 70 61 73 73 69 | his.command.configures.the.passi |
78ca0 | 76 65 20 6d 6f 64 65 20 66 6f 72 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 | ve.mode.for.this.interface..This |
78cc0 | 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 20 6e 65 77 20 6e 65 69 67 68 62 6f 72 20 | .command.creates.a.new.neighbor. |
78ce0 | 77 68 6f 73 65 20 72 65 6d 6f 74 65 2d 61 73 20 69 73 20 3c 6e 61 73 6e 3e 2e 20 54 68 65 20 6e | whose.remote-as.is.<nasn>..The.n |
78d00 | 65 69 67 68 62 6f 72 20 61 64 64 72 65 73 73 20 63 61 6e 20 62 65 20 61 6e 20 49 50 76 34 20 61 | eighbor.address.can.be.an.IPv4.a |
78d20 | 64 64 72 65 73 73 20 6f 72 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 20 6f 72 20 61 6e 20 | ddress.or.an.IPv6.address.or.an. |
78d40 | 69 6e 74 65 72 66 61 63 65 20 74 6f 20 75 73 65 20 66 6f 72 20 74 68 65 20 63 6f 6e 6e 65 63 74 | interface.to.use.for.the.connect |
78d60 | 69 6f 6e 2e 20 54 68 65 20 63 6f 6d 6d 61 6e 64 20 69 73 20 61 70 70 6c 69 63 61 62 6c 65 20 66 | ion..The.command.is.applicable.f |
78d80 | 6f 72 20 70 65 65 72 20 61 6e 64 20 70 65 65 72 20 67 72 6f 75 70 2e 00 54 68 69 73 20 63 6f 6d | or.peer.and.peer.group..This.com |
78da0 | 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 20 6e 65 77 20 72 6f 75 74 65 2d 6d 61 70 20 70 6f 6c | mand.creates.a.new.route-map.pol |
78dc0 | 69 63 79 2c 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 3c 74 65 78 74 3e 2e 00 54 68 69 73 20 | icy,.identified.by.<text>..This. |
78de0 | 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 20 6e 65 77 20 72 75 6c 65 20 69 6e 20 74 68 | command.creates.a.new.rule.in.th |
78e00 | 65 20 49 50 76 36 20 61 63 63 65 73 73 20 6c 69 73 74 20 61 6e 64 20 64 65 66 69 6e 65 73 20 61 | e.IPv6.access.list.and.defines.a |
78e20 | 6e 20 61 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 | n.action..This.command.creates.a |
78e40 | 20 6e 65 77 20 72 75 6c 65 20 69 6e 20 74 68 65 20 49 50 76 36 20 70 72 65 66 69 78 2d 6c 69 73 | .new.rule.in.the.IPv6.prefix-lis |
78e60 | 74 20 61 6e 64 20 64 65 66 69 6e 65 73 20 61 6e 20 61 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f | t.and.defines.an.action..This.co |
78e80 | 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 20 6e 65 77 20 72 75 6c 65 20 69 6e 20 74 68 65 20 | mmand.creates.a.new.rule.in.the. |
78ea0 | 61 63 63 65 73 73 20 6c 69 73 74 20 61 6e 64 20 64 65 66 69 6e 65 73 20 61 6e 20 61 63 74 69 6f | access.list.and.defines.an.actio |
78ec0 | 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 20 6e 65 77 20 72 75 | n..This.command.creates.a.new.ru |
78ee0 | 6c 65 20 69 6e 20 74 68 65 20 70 72 65 66 69 78 2d 6c 69 73 74 20 61 6e 64 20 64 65 66 69 6e 65 | le.in.the.prefix-list.and.define |
78f00 | 73 20 61 6e 20 61 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 | s.an.action..This.command.create |
78f20 | 73 20 74 68 65 20 6e 65 77 20 49 50 76 36 20 61 63 63 65 73 73 20 6c 69 73 74 2c 20 69 64 65 6e | s.the.new.IPv6.access.list,.iden |
78f40 | 74 69 66 69 65 64 20 62 79 20 3c 74 65 78 74 3e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 | tified.by.<text>.This.command.cr |
78f60 | 65 61 74 65 73 20 74 68 65 20 6e 65 77 20 49 50 76 36 20 70 72 65 66 69 78 2d 6c 69 73 74 20 70 | eates.the.new.IPv6.prefix-list.p |
78f80 | 6f 6c 69 63 79 2c 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 3c 74 65 78 74 3e 2e 00 54 68 69 | olicy,.identified.by.<text>..Thi |
78fa0 | 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 74 68 65 20 6e 65 77 20 61 63 63 65 73 73 | s.command.creates.the.new.access |
78fc0 | 20 6c 69 73 74 20 70 6f 6c 69 63 79 2c 20 77 68 65 72 65 20 3c 61 63 6c 5f 6e 75 6d 62 65 72 3e | .list.policy,.where.<acl_number> |
78fe0 | 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 20 66 72 6f 6d 20 31 20 74 6f 20 32 36 39 39 | .must.be.a.number.from.1.to.2699 |
79000 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 74 68 65 20 6e 65 77 20 70 | ..This.command.creates.the.new.p |
79020 | 72 65 66 69 78 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2c 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 | refix-list.policy,.identified.by |
79040 | 20 3c 74 65 78 74 3e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 61 20 | .<text>..This.command.defines.a. |
79060 | 6e 65 77 20 70 65 65 72 20 67 72 6f 75 70 2e 20 59 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 | new.peer.group..You.can.specify. |
79080 | 74 6f 20 74 68 65 20 67 72 6f 75 70 20 74 68 65 20 73 61 6d 65 20 70 61 72 61 6d 65 74 65 72 73 | to.the.group.the.same.parameters |
790a0 | 20 74 68 61 74 20 79 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 66 6f 72 20 73 70 65 63 69 66 | .that.you.can.specify.for.specif |
790c0 | 69 63 20 6e 65 69 67 68 62 6f 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e | ic.neighbors..This.command.defin |
790e0 | 65 73 20 6d 61 74 63 68 69 6e 67 20 70 61 72 61 6d 65 74 65 72 73 20 66 6f 72 20 49 50 76 36 20 | es.matching.parameters.for.IPv6. |
79100 | 61 63 63 65 73 73 20 6c 69 73 74 20 72 75 6c 65 2e 20 4d 61 74 63 68 69 6e 67 20 63 72 69 74 65 | access.list.rule..Matching.crite |
79120 | 72 69 61 20 63 6f 75 6c 64 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 73 6f 75 72 63 65 20 70 | ria.could.be.applied.to.source.p |
79140 | 61 72 61 6d 65 74 65 72 73 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 | arameters:.This.command.defines. |
79160 | 6d 61 74 63 68 69 6e 67 20 70 61 72 61 6d 65 74 65 72 73 20 66 6f 72 20 61 63 63 65 73 73 20 6c | matching.parameters.for.access.l |
79180 | 69 73 74 20 72 75 6c 65 2e 20 4d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 63 6f 75 6c | ist.rule..Matching.criteria.coul |
791a0 | 64 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6f 72 20 73 | d.be.applied.to.destination.or.s |
791c0 | 6f 75 72 63 65 20 70 61 72 61 6d 65 74 65 72 73 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 | ource.parameters:.This.command.d |
791e0 | 65 66 69 6e 65 73 20 74 68 65 20 49 53 2d 49 53 20 72 6f 75 74 65 72 20 62 65 68 61 76 69 6f 72 | efines.the.IS-IS.router.behavior |
79200 | 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 63 75 6d | :.This.command.defines.the.accum |
79220 | 75 6c 61 74 65 64 20 70 65 6e 61 6c 74 79 20 61 6d 6f 75 6e 74 20 61 74 20 77 68 69 63 68 20 74 | ulated.penalty.amount.at.which.t |
79240 | 68 65 20 72 6f 75 74 65 20 69 73 20 72 65 2d 61 64 76 65 72 74 69 73 65 64 2e 20 54 68 65 20 70 | he.route.is.re-advertised..The.p |
79260 | 65 6e 61 6c 74 79 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 30 30 30 30 2e 00 54 68 69 73 | enalty.range.is.1.to.20000..This |
79280 | 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 63 75 6d 75 6c 61 74 65 64 | .command.defines.the.accumulated |
792a0 | 20 70 65 6e 61 6c 74 79 20 61 6d 6f 75 6e 74 20 61 74 20 77 68 69 63 68 20 74 68 65 20 72 6f 75 | .penalty.amount.at.which.the.rou |
792c0 | 74 65 20 69 73 20 73 75 70 70 72 65 73 73 65 64 2e 20 54 68 65 20 70 65 6e 61 6c 74 79 20 72 61 | te.is.suppressed..The.penalty.ra |
792e0 | 6e 67 65 20 69 73 20 31 20 74 6f 20 32 30 30 30 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | nge.is.1.to.20000..This.command. |
79300 | 64 65 66 69 6e 65 73 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 74 69 6d 65 20 69 6e 20 6d 69 | defines.the.amount.of.time.in.mi |
79320 | 6e 75 74 65 73 20 61 66 74 65 72 20 77 68 69 63 68 20 61 20 70 65 6e 61 6c 74 79 20 69 73 20 72 | nutes.after.which.a.penalty.is.r |
79340 | 65 64 75 63 65 64 20 62 79 20 68 61 6c 66 2e 20 54 68 65 20 74 69 6d 65 72 20 72 61 6e 67 65 20 | educed.by.half..The.timer.range. |
79360 | 69 73 20 31 30 20 74 6f 20 34 35 20 6d 69 6e 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | is.10.to.45.minutes..This.comman |
79380 | 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 | d.defines.the.maximum.number.of. |
793a0 | 70 61 72 61 6c 6c 65 6c 20 72 6f 75 74 65 73 20 74 68 61 74 20 74 68 65 20 42 47 50 20 63 61 6e | parallel.routes.that.the.BGP.can |
793c0 | 20 73 75 70 70 6f 72 74 2e 20 49 6e 20 6f 72 64 65 72 20 66 6f 72 20 42 47 50 20 74 6f 20 75 73 | .support..In.order.for.BGP.to.us |
793e0 | 65 20 74 68 65 20 73 65 63 6f 6e 64 20 70 61 74 68 2c 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | e.the.second.path,.the.following |
79400 | 20 61 74 74 72 69 62 75 74 65 73 20 68 61 76 65 20 74 6f 20 6d 61 74 63 68 3a 20 57 65 69 67 68 | .attributes.have.to.match:.Weigh |
79420 | 74 2c 20 4c 6f 63 61 6c 20 50 72 65 66 65 72 65 6e 63 65 2c 20 41 53 20 50 61 74 68 20 28 62 6f | t,.Local.Preference,.AS.Path.(bo |
79440 | 74 68 20 41 53 20 6e 75 6d 62 65 72 20 61 6e 64 20 41 53 20 70 61 74 68 20 6c 65 6e 67 74 68 29 | th.AS.number.and.AS.path.length) |
79460 | 2c 20 4f 72 69 67 69 6e 20 63 6f 64 65 2c 20 4d 45 44 2c 20 49 47 50 20 6d 65 74 72 69 63 2e 20 | ,.Origin.code,.MED,.IGP.metric.. |
79480 | 41 6c 73 6f 2c 20 74 68 65 20 6e 65 78 74 20 68 6f 70 20 61 64 64 72 65 73 73 20 66 6f 72 20 65 | Also,.the.next.hop.address.for.e |
794a0 | 61 63 68 20 70 61 74 68 20 6d 75 73 74 20 62 65 20 64 69 66 66 65 72 65 6e 74 2e 00 54 68 69 73 | ach.path.must.be.different..This |
794c0 | 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 74 69 6d | .command.defines.the.maximum.tim |
794e0 | 65 20 69 6e 20 6d 69 6e 75 74 65 73 20 74 68 61 74 20 61 20 72 6f 75 74 65 20 69 73 20 73 75 70 | e.in.minutes.that.a.route.is.sup |
79500 | 70 72 65 73 73 65 64 2e 20 54 68 65 20 74 69 6d 65 72 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f | pressed..The.timer.range.is.1.to |
79520 | 20 32 35 35 20 6d 69 6e 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 | .255.minutes..This.command.disab |
79540 | 6c 65 20 74 68 65 20 70 65 65 72 20 6f 72 20 70 65 65 72 20 67 72 6f 75 70 2e 20 54 6f 20 72 65 | le.the.peer.or.peer.group..To.re |
79560 | 65 6e 61 62 6c 65 20 74 68 65 20 70 65 65 72 20 75 73 65 20 74 68 65 20 64 65 6c 65 74 65 20 66 | enable.the.peer.use.the.delete.f |
79580 | 6f 72 6d 20 6f 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | orm.of.this.command..This.comman |
795a0 | 64 20 64 69 73 61 62 6c 65 73 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 20 66 6f 72 20 74 68 69 73 | d.disables.IGP-LDP.sync.for.this |
795c0 | 20 73 70 65 63 69 66 69 63 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | .specific.interface..This.comman |
795e0 | 64 20 64 69 73 61 62 6c 65 73 20 54 68 72 65 65 2d 57 61 79 20 48 61 6e 64 73 68 61 6b 65 20 66 | d.disables.Three-Way.Handshake.f |
79600 | 6f 72 20 50 32 50 20 61 64 6a 61 63 65 6e 63 69 65 73 20 77 68 69 63 68 20 64 65 73 63 72 69 62 | or.P2P.adjacencies.which.describ |
79620 | 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 33 30 33 60 2e 20 54 68 72 65 65 2d 57 61 79 20 48 61 6e | ed.in.:rfc:`5303`..Three-Way.Han |
79640 | 64 73 68 61 6b 65 20 69 73 20 65 6e 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 2e 00 54 68 | dshake.is.enabled.by.default..Th |
79660 | 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 63 68 65 63 6b 20 6f 66 20 74 68 65 | is.command.disables.check.of.the |
79680 | 20 4d 54 55 20 76 61 6c 75 65 20 69 6e 20 74 68 65 20 4f 53 50 46 20 44 42 44 20 70 61 63 6b 65 | .MTU.value.in.the.OSPF.DBD.packe |
796a0 | 74 73 2e 20 54 68 75 73 2c 20 75 73 65 20 6f 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c | ts..Thus,.use.of.this.command.al |
796c0 | 6c 6f 77 73 20 74 68 65 20 4f 53 50 46 20 61 64 6a 61 63 65 6e 63 79 20 74 6f 20 72 65 61 63 68 | lows.the.OSPF.adjacency.to.reach |
796e0 | 20 74 68 65 20 46 55 4c 4c 20 73 74 61 74 65 20 65 76 65 6e 20 74 68 6f 75 67 68 20 74 68 65 72 | .the.FULL.state.even.though.ther |
79700 | 65 20 69 73 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 4d 54 55 20 6d 69 73 6d 61 74 63 68 20 62 | e.is.an.interface.MTU.mismatch.b |
79720 | 65 74 77 65 65 6e 20 74 77 6f 20 4f 53 50 46 20 72 6f 75 74 65 72 73 2e 00 54 68 69 73 20 63 6f | etween.two.OSPF.routers..This.co |
79740 | 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 69 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | mmand.disables.it..This.command. |
79760 | 64 69 73 61 62 6c 65 73 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 69 6f 6e 20 62 65 74 77 65 65 | disables.route.reflection.betwee |
79780 | 6e 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 20 63 6c 69 65 6e 74 73 2e 20 42 79 20 64 65 | n.route.reflector.clients..By.de |
797a0 | 66 61 75 6c 74 2c 20 74 68 65 20 63 6c 69 65 6e 74 73 20 6f 66 20 61 20 72 6f 75 74 65 20 72 65 | fault,.the.clients.of.a.route.re |
797c0 | 66 6c 65 63 74 6f 72 20 61 72 65 20 6e 6f 74 20 72 65 71 75 69 72 65 64 20 74 6f 20 62 65 20 66 | flector.are.not.required.to.be.f |
797e0 | 75 6c 6c 79 20 6d 65 73 68 65 64 20 61 6e 64 20 74 68 65 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 | ully.meshed.and.the.routes.from. |
79800 | 61 20 63 6c 69 65 6e 74 20 61 72 65 20 72 65 66 6c 65 63 74 65 64 20 74 6f 20 6f 74 68 65 72 20 | a.client.are.reflected.to.other. |
79820 | 63 6c 69 65 6e 74 73 2e 20 48 6f 77 65 76 65 72 2c 20 69 66 20 74 68 65 20 63 6c 69 65 6e 74 73 | clients..However,.if.the.clients |
79840 | 20 61 72 65 20 66 75 6c 6c 79 20 6d 65 73 68 65 64 2c 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 | .are.fully.meshed,.route.reflect |
79860 | 69 6f 6e 20 69 73 20 6e 6f 74 20 72 65 71 75 69 72 65 64 2e 20 49 6e 20 74 68 69 73 20 63 61 73 | ion.is.not.required..In.this.cas |
79880 | 65 2c 20 75 73 65 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 6e 6f 2d 63 6c 69 65 6e 74 2d 74 6f | e,.use.the.:cfgcmd:`no-client-to |
798a0 | 2d 63 6c 69 65 6e 74 2d 72 65 66 6c 65 63 74 69 6f 6e 60 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 | -client-reflection`.command.to.d |
798c0 | 69 73 61 62 6c 65 20 63 6c 69 65 6e 74 2d 74 6f 2d 63 6c 69 65 6e 74 20 72 65 66 6c 65 63 74 69 | isable.client-to-client.reflecti |
798e0 | 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 73 70 6c 69 74 2d | on..This.command.disables.split- |
79900 | 68 6f 72 69 7a 6f 6e 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 42 79 20 64 65 66 | horizon.on.the.interface..By.def |
79920 | 61 75 6c 74 2c 20 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 20 52 49 | ault,.VyOS.does.not.advertise.RI |
79940 | 50 20 72 6f 75 74 65 73 20 6f 75 74 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 6f 76 65 72 20 | P.routes.out.the.interface.over. |
79960 | 77 68 69 63 68 20 74 68 65 79 20 77 65 72 65 20 6c 65 61 72 6e 65 64 20 28 73 70 6c 69 74 20 68 | which.they.were.learned.(split.h |
79980 | 6f 72 69 7a 6f 6e 29 2e 33 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 | orizon).3.This.command.disables. |
799a0 | 74 68 65 20 6c 6f 61 64 20 73 68 61 72 69 6e 67 20 61 63 72 6f 73 73 20 6d 75 6c 74 69 70 6c 65 | the.load.sharing.across.multiple |
799c0 | 20 4c 46 41 20 62 61 63 6b 75 70 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c | .LFA.backups..This.command.displ |
799e0 | 61 79 73 20 42 47 50 20 64 61 6d 70 65 6e 65 64 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f | ays.BGP.dampened.routes..This.co |
79a00 | 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 42 47 50 20 72 65 63 65 69 76 65 64 2d 72 6f 75 74 | mmand.displays.BGP.received-rout |
79a20 | 65 73 20 74 68 61 74 20 61 72 65 20 61 63 63 65 70 74 65 64 20 61 66 74 65 72 20 66 69 6c 74 65 | es.that.are.accepted.after.filte |
79a40 | 72 69 6e 67 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 42 47 50 20 | ring..This.command.displays.BGP. |
79a60 | 72 6f 75 74 65 73 20 61 64 76 65 72 74 69 73 65 64 20 74 6f 20 61 20 6e 65 69 67 68 62 6f 72 2e | routes.advertised.to.a.neighbor. |
79a80 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 42 47 50 20 72 6f 75 74 65 | .This.command.displays.BGP.route |
79aa0 | 73 20 61 6c 6c 6f 77 65 64 20 62 79 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 41 53 20 50 61 | s.allowed.by.the.specified.AS.Pa |
79ac0 | 74 68 20 61 63 63 65 73 73 20 6c 69 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 | th.access.list..This.command.dis |
79ae0 | 70 6c 61 79 73 20 42 47 50 20 72 6f 75 74 65 73 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 66 72 6f | plays.BGP.routes.originating.fro |
79b00 | 6d 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 6e 65 69 67 68 62 6f 72 20 62 65 66 | m.the.specified.BGP.neighbor.bef |
79b20 | 6f 72 65 20 69 6e 62 6f 75 6e 64 20 70 6f 6c 69 63 79 20 69 73 20 61 70 70 6c 69 65 64 2e 20 54 | ore.inbound.policy.is.applied..T |
79b40 | 6f 20 75 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 6e 62 6f 75 6e 64 20 73 6f 66 74 20 | o.use.this.command.inbound.soft. |
79b60 | 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 65 6e 61 62 6c 65 64 2e | reconfiguration.must.be.enabled. |
79b80 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 4c 53 41 73 20 69 6e 20 4d | .This.command.displays.LSAs.in.M |
79ba0 | 61 78 41 67 65 20 6c 69 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 | axAge.list..This.command.display |
79bc0 | 73 20 52 49 50 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c | s.RIP.routes..This.command.displ |
79be0 | 61 79 73 20 61 20 64 61 74 61 62 61 73 65 20 63 6f 6e 74 65 6e 74 73 20 66 6f 72 20 61 20 73 70 | ays.a.database.contents.for.a.sp |
79c00 | 65 63 69 66 69 63 20 6c 69 6e 6b 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 20 74 79 70 65 2e 00 | ecific.link.advertisement.type.. |
79c20 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 61 20 73 75 6d 6d 61 72 79 20 | This.command.displays.a.summary. |
79c40 | 74 61 62 6c 65 20 77 69 74 68 20 61 20 64 61 74 61 62 61 73 65 20 63 6f 6e 74 65 6e 74 73 20 28 | table.with.a.database.contents.( |
79c60 | 4c 53 41 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 61 20 74 61 | LSA)..This.command.displays.a.ta |
79c80 | 62 6c 65 20 6f 66 20 70 61 74 68 73 20 74 6f 20 61 72 65 61 20 62 6f 75 6e 64 61 72 79 20 61 6e | ble.of.paths.to.area.boundary.an |
79ca0 | 64 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 62 6f 75 6e 64 61 72 79 20 72 6f 75 | d.autonomous.system.boundary.rou |
79cc0 | 74 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 61 6c 6c 20 | ters..This.command.displays.all. |
79ce0 | 65 6e 74 72 69 65 73 20 69 6e 20 42 47 50 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 54 68 | entries.in.BGP.routing.table..Th |
79d00 | 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 64 61 6d 70 65 6e 65 64 20 72 6f 75 | is.command.displays.dampened.rou |
79d20 | 74 65 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 42 47 50 20 6e 65 69 67 68 62 6f 72 2e 00 | tes.received.from.BGP.neighbor.. |
79d40 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 65 78 74 65 72 6e 61 6c 20 69 | This.command.displays.external.i |
79d60 | 6e 66 6f 72 6d 61 74 69 6f 6e 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 69 6e 74 6f 20 4f 53 | nformation.redistributed.into.OS |
79d80 | 50 46 76 33 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 69 6e 66 6f 72 | PFv3.This.command.displays.infor |
79da0 | 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 42 47 50 20 72 6f 75 74 65 73 20 77 68 6f 73 65 20 41 53 | mation.about.BGP.routes.whose.AS |
79dc0 | 20 70 61 74 68 20 6d 61 74 63 68 65 73 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 67 75 | .path.matches.the.specified.regu |
79de0 | 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 | lar.expression..This.command.dis |
79e00 | 70 6c 61 79 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 66 6c 61 70 70 69 6e 67 | plays.information.about.flapping |
79e20 | 20 42 47 50 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 | .BGP.routes..This.command.displa |
79e40 | 79 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 70 61 72 74 69 63 75 | ys.information.about.the.particu |
79e60 | 6c 61 72 20 65 6e 74 72 79 20 69 6e 20 74 68 65 20 42 47 50 20 72 6f 75 74 69 6e 67 20 74 61 62 | lar.entry.in.the.BGP.routing.tab |
79e80 | 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 72 6f 75 74 65 73 | le..This.command.displays.routes |
79ea0 | 20 74 68 61 74 20 61 72 65 20 70 65 72 6d 69 74 74 65 64 20 62 79 20 74 68 65 20 42 47 50 20 63 | .that.are.permitted.by.the.BGP.c |
79ec0 | 6f 6d 6d 75 6e 69 74 79 20 6c 69 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 | ommunity.list..This.command.disp |
79ee0 | 6c 61 79 73 20 72 6f 75 74 65 73 20 74 68 61 74 20 62 65 6c 6f 6e 67 20 74 6f 20 73 70 65 63 69 | lays.routes.that.belong.to.speci |
79f00 | 66 69 65 64 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 69 65 73 2e 20 56 61 6c 69 64 20 76 61 6c 75 | fied.BGP.communities..Valid.valu |
79f20 | 65 20 69 73 20 61 20 63 6f 6d 6d 75 6e 69 74 79 20 6e 75 6d 62 65 72 20 69 6e 20 74 68 65 20 72 | e.is.a.community.number.in.the.r |
79f40 | 61 6e 67 65 20 66 72 6f 6d 20 31 20 74 6f 20 34 32 39 34 39 36 37 32 30 30 2c 20 6f 72 20 41 41 | ange.from.1.to.4294967200,.or.AA |
79f60 | 3a 4e 4e 20 28 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 2d 63 6f 6d 6d 75 6e 69 74 79 | :NN.(autonomous.system-community |
79f80 | 20 6e 75 6d 62 65 72 2f 32 2d 62 79 74 65 20 6e 75 6d 62 65 72 29 2c 20 6e 6f 2d 65 78 70 6f 72 | .number/2-byte.number),.no-expor |
79fa0 | 74 2c 20 6c 6f 63 61 6c 2d 61 73 2c 20 6f 72 20 6e 6f 2d 61 64 76 65 72 74 69 73 65 2e 00 54 68 | t,.local-as,.or.no-advertise..Th |
79fc0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 72 6f 75 74 65 73 20 77 69 74 68 20 | is.command.displays.routes.with. |
79fe0 | 63 6c 61 73 73 6c 65 73 73 20 69 6e 74 65 72 64 6f 6d 61 69 6e 20 72 6f 75 74 69 6e 67 20 28 43 | classless.interdomain.routing.(C |
7a000 | 49 44 52 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 73 74 61 74 | IDR)..This.command.displays.stat |
7a020 | 65 20 61 6e 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 4f 53 50 46 20 74 68 65 20 | e.and.configuration.of.OSPF.the. |
7a040 | 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2c 20 6f 72 20 61 6c 6c 20 69 6e 74 65 | specified.interface,.or.all.inte |
7a060 | 72 66 61 63 65 73 20 69 66 20 6e 6f 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 67 69 76 65 6e 2e | rfaces.if.no.interface.is.given. |
7a080 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 73 74 61 74 65 20 61 6e 64 | .This.command.displays.state.and |
7a0a0 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 4f 53 50 46 20 74 68 65 20 73 70 65 63 69 | .configuration.of.OSPF.the.speci |
7a0c0 | 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2c 20 6f 72 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 | fied.interface,.or.all.interface |
7a0e0 | 73 20 69 66 20 6e 6f 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 67 69 76 65 6e 2e 20 57 68 69 74 | s.if.no.interface.is.given..Whit |
7a100 | 68 20 74 68 65 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d 64 3a 60 70 72 65 66 69 78 60 20 | h.the.argument.:cfgcmd:`prefix`. |
7a120 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 68 6f 77 73 20 63 6f 6e 6e 65 63 74 65 64 20 70 72 65 | this.command.shows.connected.pre |
7a140 | 66 69 78 65 73 20 74 6f 20 61 64 76 65 72 74 69 73 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | fixes.to.advertise..This.command |
7a160 | 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 4f 53 50 46 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 | .displays.the.OSPF.routing.table |
7a180 | 2c 20 61 73 20 64 65 74 65 72 6d 69 6e 65 64 20 62 79 20 74 68 65 20 6d 6f 73 74 20 72 65 63 65 | ,.as.determined.by.the.most.rece |
7a1a0 | 6e 74 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | nt.SPF.calculation..This.command |
7a1c0 | 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 4f 53 50 46 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 | .displays.the.OSPF.routing.table |
7a1e0 | 2c 20 61 73 20 64 65 74 65 72 6d 69 6e 65 64 20 62 79 20 74 68 65 20 6d 6f 73 74 20 72 65 63 65 | ,.as.determined.by.the.most.rece |
7a200 | 6e 74 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 2e 20 57 69 74 68 20 74 68 65 20 6f 70 74 | nt.SPF.calculation..With.the.opt |
7a220 | 69 6f 6e 61 6c 20 3a 63 66 67 63 6d 64 3a 60 64 65 74 61 69 6c 60 20 61 72 67 75 6d 65 6e 74 2c | ional.:cfgcmd:`detail`.argument, |
7a240 | 20 65 61 63 68 20 72 6f 75 74 65 20 69 74 65 6d 27 73 20 61 64 76 65 72 74 69 73 65 72 20 72 6f | .each.route.item's.advertiser.ro |
7a260 | 75 74 65 72 20 61 6e 64 20 6e 65 74 77 6f 72 6b 20 61 74 74 72 69 62 75 74 65 20 77 69 6c 6c 20 | uter.and.network.attribute.will. |
7a280 | 62 65 20 73 68 6f 77 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 | be.shown..This.command.displays. |
7a2a0 | 74 68 65 20 6e 65 69 67 68 62 6f 72 20 44 52 20 63 68 6f 69 63 65 20 69 6e 66 6f 72 6d 61 74 69 | the.neighbor.DR.choice.informati |
7a2c0 | 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 6e 65 | on..This.command.displays.the.ne |
7a2e0 | 69 67 68 62 6f 72 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 61 20 64 65 74 61 69 6c 65 | ighbors.information.in.a.detaile |
7a300 | 64 20 66 6f 72 6d 20 66 6f 72 20 61 20 6e 65 69 67 68 62 6f 72 20 77 68 6f 73 65 20 49 50 20 61 | d.form.for.a.neighbor.whose.IP.a |
7a320 | 64 64 72 65 73 73 20 69 73 20 73 70 65 63 69 66 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | ddress.is.specified..This.comman |
7a340 | 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 6e 65 69 67 68 62 6f 72 73 20 69 6e 66 6f 72 6d 61 | d.displays.the.neighbors.informa |
7a360 | 74 69 6f 6e 20 69 6e 20 61 20 64 65 74 61 69 6c 65 64 20 66 6f 72 6d 2c 20 6e 6f 74 20 6a 75 73 | tion.in.a.detailed.form,.not.jus |
7a380 | 74 20 61 20 73 75 6d 6d 61 72 79 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | t.a.summary.table..This.command. |
7a3a0 | 64 69 73 70 6c 61 79 73 20 74 68 65 20 6e 65 69 67 68 62 6f 72 73 20 73 74 61 74 75 73 20 66 6f | displays.the.neighbors.status.fo |
7a3c0 | 72 20 61 20 6e 65 69 67 68 62 6f 72 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e | r.a.neighbor.on.the.specified.in |
7a3e0 | 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 | terface..This.command.displays.t |
7a400 | 68 65 20 6e 65 69 67 68 62 6f 72 73 20 73 74 61 74 75 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | he.neighbors.status..This.comman |
7a420 | 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 73 74 61 74 75 73 20 6f 66 20 61 6c 6c 20 42 47 50 | d.displays.the.status.of.all.BGP |
7a440 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c | .connections..This.command.enabl |
7a460 | 65 20 6c 6f 67 67 69 6e 67 20 6e 65 69 67 68 62 6f 72 20 75 70 2f 64 6f 77 6e 20 63 68 61 6e 67 | e.logging.neighbor.up/down.chang |
7a480 | 65 73 20 61 6e 64 20 72 65 73 65 74 20 72 65 61 73 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | es.and.reset.reason..This.comman |
7a4a0 | 64 20 65 6e 61 62 6c 65 2f 64 69 73 61 62 6c 65 73 20 73 75 6d 6d 61 72 69 73 61 74 69 6f 6e 20 | d.enable/disables.summarisation. |
7a4c0 | 66 6f 72 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 | for.the.configured.address.range |
7a4e0 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 3a 61 62 62 72 3a 60 42 46 | ..This.command.enables.:abbr:`BF |
7a500 | 44 20 28 42 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 46 6f 72 77 61 72 64 69 6e 67 20 44 65 74 65 | D.(Bidirectional.Forwarding.Dete |
7a520 | 63 74 69 6f 6e 29 60 20 6f 6e 20 74 68 69 73 20 4f 53 50 46 20 6c 69 6e 6b 20 69 6e 74 65 72 66 | ction)`.on.this.OSPF.link.interf |
7a540 | 61 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 3a 72 66 63 3a 60 | ace..This.command.enables.:rfc:` |
7a560 | 36 32 33 32 60 20 70 75 72 67 65 20 6f 72 69 67 69 6e 61 74 6f 72 20 69 64 65 6e 74 69 66 69 63 | 6232`.purge.originator.identific |
7a580 | 61 74 69 6f 6e 2e 20 45 6e 61 62 6c 65 20 70 75 72 67 65 20 6f 72 69 67 69 6e 61 74 6f 72 20 69 | ation..Enable.purge.originator.i |
7a5a0 | 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 20 28 50 4f 49 29 20 62 79 20 61 64 64 69 6e 67 20 74 68 | dentification.(POI).by.adding.th |
7a5c0 | 65 20 74 79 70 65 2c 20 6c 65 6e 67 74 68 20 61 6e 64 20 76 61 6c 75 65 20 28 54 4c 56 29 20 77 | e.type,.length.and.value.(TLV).w |
7a5e0 | 69 74 68 20 74 68 65 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 73 74 65 6d 20 28 49 53 29 | ith.the.Intermediate.System.(IS) |
7a600 | 20 69 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 20 74 6f 20 74 68 65 20 4c 53 50 73 20 74 68 61 74 | .identification.to.the.LSPs.that |
7a620 | 20 64 6f 20 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 50 4f 49 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e | .do.not.contain.POI.information. |
7a640 | 20 49 66 20 61 6e 20 49 53 20 67 65 6e 65 72 61 74 65 73 20 61 20 70 75 72 67 65 2c 20 56 79 4f | .If.an.IS.generates.a.purge,.VyO |
7a660 | 53 20 61 64 64 73 20 74 68 69 73 20 54 4c 56 20 77 69 74 68 20 74 68 65 20 73 79 73 74 65 6d 20 | S.adds.this.TLV.with.the.system. |
7a680 | 49 44 20 6f 66 20 74 68 65 20 49 53 20 74 6f 20 74 68 65 20 70 75 72 67 65 2e 00 54 68 69 73 20 | ID.of.the.IS.to.the.purge..This. |
7a6a0 | 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 49 50 20 66 61 73 74 20 72 65 2d 72 6f 75 74 69 | command.enables.IP.fast.re-routi |
7a6c0 | 6e 67 20 74 68 61 74 20 69 73 20 70 61 72 74 20 6f 66 20 3a 72 66 63 3a 60 35 32 38 36 60 2e 20 | ng.that.is.part.of.:rfc:`5286`.. |
7a6e0 | 53 70 65 63 69 66 69 63 61 6c 6c 79 20 74 68 69 73 20 69 73 20 61 20 70 72 65 66 69 78 20 6c 69 | Specifically.this.is.a.prefix.li |
7a700 | 73 74 20 77 68 69 63 68 20 72 65 66 65 72 65 6e 63 65 73 20 61 20 70 72 65 66 69 78 20 69 6e 20 | st.which.references.a.prefix.in. |
7a720 | 77 68 69 63 68 20 77 69 6c 6c 20 73 65 6c 65 63 74 20 65 6c 69 67 69 62 6c 65 20 50 51 20 6e 6f | which.will.select.eligible.PQ.no |
7a740 | 64 65 73 20 66 6f 72 20 72 65 6d 6f 74 65 20 4c 46 41 20 62 61 63 6b 75 70 73 2e 00 54 68 69 73 | des.for.remote.LFA.backups..This |
7a760 | 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 49 53 2d 49 53 20 6f 6e 20 74 68 69 73 20 69 | .command.enables.IS-IS.on.this.i |
7a780 | 6e 74 65 72 66 61 63 65 2c 20 61 6e 64 20 61 6c 6c 6f 77 73 20 66 6f 72 20 61 64 6a 61 63 65 6e | nterface,.and.allows.for.adjacen |
7a7a0 | 63 79 20 74 6f 20 6f 63 63 75 72 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 20 6e 61 6d 65 20 | cy.to.occur..Note.that.the.name. |
7a7c0 | 6f 66 20 49 53 2d 49 53 20 69 6e 73 74 61 6e 63 65 20 6d 75 73 74 20 62 65 20 74 68 65 20 73 61 | of.IS-IS.instance.must.be.the.sa |
7a7e0 | 6d 65 20 61 73 20 74 68 65 20 6f 6e 65 20 75 73 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 | me.as.the.one.used.to.configure. |
7a800 | 74 68 65 20 49 53 2d 49 53 20 70 72 6f 63 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | the.IS-IS.process..This.command. |
7a820 | 65 6e 61 62 6c 65 73 20 52 49 50 20 61 6e 64 20 73 65 74 73 20 74 68 65 20 52 49 50 20 65 6e 61 | enables.RIP.and.sets.the.RIP.ena |
7a840 | 62 6c 65 20 69 6e 74 65 72 66 61 63 65 20 62 79 20 4e 45 54 57 4f 52 4b 2e 20 54 68 65 20 69 6e | ble.interface.by.NETWORK..The.in |
7a860 | 74 65 72 66 61 63 65 73 20 77 68 69 63 68 20 68 61 76 65 20 61 64 64 72 65 73 73 65 73 20 6d 61 | terfaces.which.have.addresses.ma |
7a880 | 74 63 68 69 6e 67 20 77 69 74 68 20 4e 45 54 57 4f 52 4b 20 61 72 65 20 65 6e 61 62 6c 65 64 2e | tching.with.NETWORK.are.enabled. |
7a8a0 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 70 6f 69 73 6f 6e 2d 72 65 76 | .This.command.enables.poison-rev |
7a8c0 | 65 72 73 65 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 49 66 20 62 6f 74 68 20 70 | erse.on.the.interface..If.both.p |
7a8e0 | 6f 69 73 6f 6e 20 72 65 76 65 72 73 65 20 61 6e 64 20 73 70 6c 69 74 20 68 6f 72 69 7a 6f 6e 20 | oison.reverse.and.split.horizon. |
7a900 | 61 72 65 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 6e 20 56 79 4f 53 20 61 64 76 65 72 74 69 73 65 | are.enabled,.then.VyOS.advertise |
7a920 | 73 20 74 68 65 20 6c 65 61 72 6e 65 64 20 72 6f 75 74 65 73 20 61 73 20 75 6e 72 65 61 63 68 61 | s.the.learned.routes.as.unreacha |
7a940 | 62 6c 65 20 6f 76 65 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 77 68 69 63 68 20 | ble.over.the.interface.on.which. |
7a960 | 74 68 65 20 72 6f 75 74 65 20 77 61 73 20 6c 65 61 72 6e 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d | the.route.was.learned..This.comm |
7a980 | 61 6e 64 20 65 6e 61 62 6c 65 73 20 72 6f 75 74 69 6e 67 20 75 73 69 6e 67 20 72 61 64 69 6f 20 | and.enables.routing.using.radio. |
7a9a0 | 66 72 65 71 75 65 6e 63 79 20 64 69 76 65 72 73 69 74 79 2e 20 54 68 69 73 20 69 73 20 68 69 67 | frequency.diversity..This.is.hig |
7a9c0 | 68 6c 79 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 69 6e 20 6e 65 74 77 6f 72 6b 73 20 77 69 74 68 | hly.recommended.in.networks.with |
7a9e0 | 20 6d 61 6e 79 20 77 69 72 65 6c 65 73 73 20 6e 6f 64 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | .many.wireless.nodes..This.comma |
7aa00 | 6e 64 20 65 6e 61 62 6c 65 73 20 73 65 6e 64 69 6e 67 20 74 69 6d 65 73 74 61 6d 70 73 20 77 69 | nd.enables.sending.timestamps.wi |
7aa20 | 74 68 20 65 61 63 68 20 48 65 6c 6c 6f 20 61 6e 64 20 49 48 55 20 6d 65 73 73 61 67 65 20 69 6e | th.each.Hello.and.IHU.message.in |
7aa40 | 20 6f 72 64 65 72 20 74 6f 20 63 6f 6d 70 75 74 65 20 52 54 54 20 76 61 6c 75 65 73 2e 20 49 74 | .order.to.compute.RTT.values..It |
7aa60 | 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 69 6d 65 73 74 | .is.recommended.to.enable.timest |
7aa80 | 61 6d 70 73 20 6f 6e 20 74 75 6e 6e 65 6c 20 69 6e 74 65 72 66 61 63 65 73 2e 00 54 68 69 73 20 | amps.on.tunnel.interfaces..This. |
7aaa0 | 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 73 75 70 70 6f 72 74 20 66 6f 72 20 64 79 6e 61 | command.enables.support.for.dyna |
7aac0 | 6d 69 63 20 68 6f 73 74 6e 61 6d 65 20 54 4c 56 2e 20 44 79 6e 61 6d 69 63 20 68 6f 73 74 6e 61 | mic.hostname.TLV..Dynamic.hostna |
7aae0 | 6d 65 20 6d 61 70 70 69 6e 67 20 64 65 74 65 72 6d 69 6e 65 64 20 61 73 20 64 65 73 63 72 69 62 | me.mapping.determined.as.describ |
7ab00 | 65 64 20 69 6e 20 3a 72 66 63 3a 60 32 37 36 33 60 2c 20 44 79 6e 61 6d 69 63 20 48 6f 73 74 6e | ed.in.:rfc:`2763`,.Dynamic.Hostn |
7ab20 | 61 6d 65 20 45 78 63 68 61 6e 67 65 20 4d 65 63 68 61 6e 69 73 6d 20 66 6f 72 20 49 53 2d 49 53 | ame.Exchange.Mechanism.for.IS-IS |
7ab40 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 74 68 65 20 4f 52 46 20 63 | ..This.command.enables.the.ORF.c |
7ab60 | 61 70 61 62 69 6c 69 74 79 20 28 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 32 | apability.(described.in.:rfc:`52 |
7ab80 | 39 31 60 29 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2c 20 61 6e 64 20 65 6e | 91`).on.the.local.router,.and.en |
7aba0 | 61 62 6c 65 73 20 4f 52 46 20 63 61 70 61 62 69 6c 69 74 79 20 61 64 76 65 72 74 69 73 65 6d 65 | ables.ORF.capability.advertiseme |
7abc0 | 6e 74 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 70 65 65 72 2e 20 54 68 | nt.to.the.specified.BGP.peer..Th |
7abe0 | 65 20 3a 63 66 67 63 6d 64 3a 60 72 65 63 65 69 76 65 60 20 6b 65 79 77 6f 72 64 20 63 6f 6e 66 | e.:cfgcmd:`receive`.keyword.conf |
7ac00 | 69 67 75 72 65 73 20 61 20 72 6f 75 74 65 72 20 74 6f 20 61 64 76 65 72 74 69 73 65 20 4f 52 46 | igures.a.router.to.advertise.ORF |
7ac20 | 20 72 65 63 65 69 76 65 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 20 54 68 65 20 3a 63 66 67 63 | .receive.capabilities..The.:cfgc |
7ac40 | 6d 64 3a 60 73 65 6e 64 60 20 6b 65 79 77 6f 72 64 20 63 6f 6e 66 69 67 75 72 65 73 20 61 20 72 | md:`send`.keyword.configures.a.r |
7ac60 | 6f 75 74 65 72 20 74 6f 20 61 64 76 65 72 74 69 73 65 20 4f 52 46 20 73 65 6e 64 20 63 61 70 61 | outer.to.advertise.ORF.send.capa |
7ac80 | 62 69 6c 69 74 69 65 73 2e 20 54 6f 20 61 64 76 65 72 74 69 73 65 20 61 20 66 69 6c 74 65 72 20 | bilities..To.advertise.a.filter. |
7aca0 | 66 72 6f 6d 20 61 20 73 65 6e 64 65 72 2c 20 79 6f 75 20 6d 75 73 74 20 63 72 65 61 74 65 20 61 | from.a.sender,.you.must.create.a |
7acc0 | 6e 20 49 50 20 70 72 65 66 69 78 20 6c 69 73 74 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 | n.IP.prefix.list.for.the.specifi |
7ace0 | 65 64 20 42 47 50 20 70 65 65 72 20 61 70 70 6c 69 65 64 20 69 6e 20 69 6e 62 6f 75 6e 64 20 64 | ed.BGP.peer.applied.in.inbound.d |
7ad00 | 65 72 65 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 66 6f 72 63 65 73 20 | erection..This.command.enforces. |
7ad20 | 47 65 6e 65 72 61 6c 69 7a 65 64 20 54 54 4c 20 53 65 63 75 72 69 74 79 20 4d 65 63 68 61 6e 69 | Generalized.TTL.Security.Mechani |
7ad40 | 73 6d 20 28 47 54 53 4d 29 2c 20 61 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 3a 72 66 63 3a | sm.(GTSM),.as.specified.in.:rfc: |
7ad60 | 60 35 30 38 32 60 2e 20 57 69 74 68 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2c 20 6f 6e 6c 79 20 | `5082`..With.this.command,.only. |
7ad80 | 6e 65 69 67 68 62 6f 72 73 20 74 68 61 74 20 61 72 65 20 73 70 65 63 69 66 69 65 64 20 6e 75 6d | neighbors.that.are.specified.num |
7ada0 | 62 65 72 20 6f 66 20 68 6f 70 73 20 61 77 61 79 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 77 65 64 | ber.of.hops.away.will.be.allowed |
7adc0 | 20 74 6f 20 62 65 63 6f 6d 65 20 6e 65 69 67 68 62 6f 72 73 2e 20 54 68 65 20 6e 75 6d 62 65 72 | .to.become.neighbors..The.number |
7ade0 | 20 6f 66 20 68 6f 70 73 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 34 2e 20 54 68 69 73 | .of.hops.range.is.1.to.254..This |
7ae00 | 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6d 75 74 75 61 6c 6c 79 20 65 78 63 6c 75 73 69 76 65 20 77 | .command.is.mutually.exclusive.w |
7ae20 | 69 74 68 20 3a 63 66 67 63 6d 64 3a 60 65 62 67 70 2d 6d 75 6c 74 69 68 6f 70 60 2e 00 54 68 69 | ith.:cfgcmd:`ebgp-multihop`..Thi |
7ae40 | 73 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 63 65 73 20 73 74 72 69 63 74 6c 79 20 63 6f 6d 70 61 72 | s.command.forces.strictly.compar |
7ae60 | 65 20 72 65 6d 6f 74 65 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 61 6e 64 20 6c 6f 63 61 6c 20 | e.remote.capabilities.and.local. |
7ae80 | 63 61 70 61 62 69 6c 69 74 69 65 73 2e 20 49 66 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 61 72 | capabilities..If.capabilities.ar |
7aea0 | 65 20 64 69 66 66 65 72 65 6e 74 2c 20 73 65 6e 64 20 55 6e 73 75 70 70 6f 72 74 65 64 20 43 61 | e.different,.send.Unsupported.Ca |
7aec0 | 70 61 62 69 6c 69 74 79 20 65 72 72 6f 72 20 74 68 65 6e 20 72 65 73 65 74 20 63 6f 6e 6e 65 63 | pability.error.then.reset.connec |
7aee0 | 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 63 65 73 20 74 68 65 20 42 47 | tion..This.command.forces.the.BG |
7af00 | 50 20 73 70 65 61 6b 65 72 20 74 6f 20 72 65 70 6f 72 74 20 69 74 73 65 6c 66 20 61 73 20 74 68 | P.speaker.to.report.itself.as.th |
7af20 | 65 20 6e 65 78 74 20 68 6f 70 20 66 6f 72 20 61 6e 20 61 64 76 65 72 74 69 73 65 64 20 72 6f 75 | e.next.hop.for.an.advertised.rou |
7af40 | 74 65 20 69 74 20 61 64 76 65 72 74 69 73 65 64 20 74 6f 20 61 20 6e 65 69 67 68 62 6f 72 2e 00 | te.it.advertised.to.a.neighbor.. |
7af60 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 67 65 6e 65 72 61 74 65 20 61 20 64 65 66 61 75 6c 74 20 | This.command.generate.a.default. |
7af80 | 72 6f 75 74 65 20 69 6e 74 6f 20 74 68 65 20 52 49 50 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | route.into.the.RIP..This.command |
7afa0 | 20 67 69 76 65 73 20 61 20 62 72 69 65 66 20 73 74 61 74 75 73 20 6f 76 65 72 76 69 65 77 20 6f | .gives.a.brief.status.overview.o |
7afc0 | 66 20 61 20 73 70 65 63 69 66 69 65 64 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 | f.a.specified.wireless.interface |
7afe0 | 2e 20 54 68 65 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 | ..The.wireless.interface.identif |
7b000 | 69 65 72 20 63 61 6e 20 72 61 6e 67 65 20 66 72 6f 6d 20 77 6c 61 6e 30 20 74 6f 20 77 6c 61 6e | ier.can.range.from.wlan0.to.wlan |
7b020 | 39 39 39 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 67 6f 65 73 20 68 61 6e 64 20 69 6e 20 68 | 999..This.command.goes.hand.in.h |
7b040 | 61 6e 64 20 77 69 74 68 20 74 68 65 20 6c 69 73 74 65 6e 20 72 61 6e 67 65 20 63 6f 6d 6d 61 6e | and.with.the.listen.range.comman |
7b060 | 64 20 74 6f 20 6c 69 6d 69 74 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 42 47 50 20 6e 65 69 | d.to.limit.the.amount.of.BGP.nei |
7b080 | 67 68 62 6f 72 73 20 74 68 61 74 20 61 72 65 20 61 6c 6c 6f 77 65 64 20 74 6f 20 63 6f 6e 6e 65 | ghbors.that.are.allowed.to.conne |
7b0a0 | 63 74 20 74 6f 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2e 20 54 68 65 20 6c 69 6d 69 | ct.to.the.local.router..The.limi |
7b0c0 | 74 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 35 30 30 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | t.range.is.1.to.5000..This.comma |
7b0e0 | 6e 64 20 67 6f 74 20 61 64 64 65 64 20 69 6e 20 56 79 4f 53 20 31 2e 34 20 61 6e 64 20 69 6e 76 | nd.got.added.in.VyOS.1.4.and.inv |
7b100 | 65 72 74 73 20 74 68 65 20 6c 6f 67 69 63 20 66 72 6f 6d 20 74 68 65 20 6f 6c 64 20 60 60 64 65 | erts.the.logic.from.the.old.``de |
7b120 | 66 61 75 6c 74 2d 72 6f 75 74 65 60 60 20 43 4c 49 20 6f 70 74 69 6f 6e 2e 00 54 68 69 73 20 63 | fault-route``.CLI.option..This.c |
7b140 | 6f 6d 6d 61 6e 64 20 69 6e 73 74 65 61 64 20 6f 66 20 73 75 6d 6d 61 72 69 7a 69 6e 67 20 69 6e | ommand.instead.of.summarizing.in |
7b160 | 74 72 61 20 61 72 65 61 20 70 61 74 68 73 20 66 69 6c 74 65 72 20 74 68 65 6d 20 2d 20 69 2e 65 | tra.area.paths.filter.them.-.i.e |
7b180 | 2e 20 69 6e 74 72 61 20 61 72 65 61 20 70 61 74 68 73 20 66 72 6f 6d 20 74 68 69 73 20 72 61 6e | ..intra.area.paths.from.this.ran |
7b1a0 | 67 65 20 61 72 65 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 64 20 69 6e 74 6f 20 6f 74 68 65 72 | ge.are.not.advertised.into.other |
7b1c0 | 20 61 72 65 61 73 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6d 61 6b 65 73 20 73 65 6e 73 65 | .areas..This.command.makes.sense |
7b1e0 | 20 69 6e 20 41 42 52 20 6f 6e 6c 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 61 6c | .in.ABR.only..This.command.is.al |
7b200 | 73 6f 20 75 73 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 | so.used.to.enable.the.OSPF.proce |
7b220 | 73 73 2e 20 54 68 65 20 61 72 65 61 20 6e 75 6d 62 65 72 20 63 61 6e 20 62 65 20 73 70 65 63 69 | ss..The.area.number.can.be.speci |
7b240 | 66 69 65 64 20 69 6e 20 64 65 63 69 6d 61 6c 20 6e 6f 74 61 74 69 6f 6e 20 69 6e 20 74 68 65 20 | fied.in.decimal.notation.in.the. |
7b260 | 72 61 6e 67 65 20 66 72 6f 6d 20 30 20 74 6f 20 34 32 39 34 39 36 37 32 39 35 2e 20 4f 72 20 69 | range.from.0.to.4294967295..Or.i |
7b280 | 74 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 64 6f 74 74 65 64 20 64 65 63 | t.can.be.specified.in.dotted.dec |
7b2a0 | 69 6d 61 6c 20 6e 6f 74 61 74 69 6f 6e 20 73 69 6d 69 6c 61 72 20 74 6f 20 69 70 20 61 64 64 72 | imal.notation.similar.to.ip.addr |
7b2c0 | 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6f 6e 6c 79 20 61 6c 6c 6f 77 65 | ess..This.command.is.only.allowe |
7b2e0 | 64 20 66 6f 72 20 65 42 47 50 20 70 65 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 | d.for.eBGP.peers..This.command.i |
7b300 | 73 20 6f 6e 6c 79 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 65 42 47 50 20 70 65 65 72 73 2e 20 49 | s.only.allowed.for.eBGP.peers..I |
7b320 | 74 20 69 73 20 6e 6f 74 20 61 70 70 6c 69 63 61 62 6c 65 20 66 6f 72 20 70 65 65 72 20 67 72 6f | t.is.not.applicable.for.peer.gro |
7b340 | 75 70 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6f 6e 6c 79 20 75 73 65 66 75 6c | ups..This.command.is.only.useful |
7b360 | 20 61 74 20 73 63 61 6c 65 20 77 68 65 6e 20 79 6f 75 20 63 61 6e 20 70 6f 73 73 69 62 6c 79 20 | .at.scale.when.you.can.possibly. |
7b380 | 68 61 76 65 20 61 20 6c 61 72 67 65 20 6e 75 6d 62 65 72 20 6f 66 20 50 49 4d 20 63 6f 6e 74 72 | have.a.large.number.of.PIM.contr |
7b3a0 | 6f 6c 20 70 61 63 6b 65 74 73 20 66 6c 6f 77 69 6e 67 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | ol.packets.flowing..This.command |
7b3c0 | 20 69 73 20 73 70 65 63 69 66 69 63 20 74 6f 20 46 52 52 20 61 6e 64 20 56 79 4f 53 2e 20 54 68 | .is.specific.to.FRR.and.VyOS..Th |
7b3e0 | 65 20 72 6f 75 74 65 20 63 6f 6d 6d 61 6e 64 20 6d 61 6b 65 73 20 61 20 73 74 61 74 69 63 20 72 | e.route.command.makes.a.static.r |
7b400 | 6f 75 74 65 20 6f 6e 6c 79 20 69 6e 73 69 64 65 20 52 49 50 2e 20 54 68 69 73 20 63 6f 6d 6d 61 | oute.only.inside.RIP..This.comma |
7b420 | 6e 64 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 62 79 20 61 64 76 61 6e 63 | nd.should.be.used.only.by.advanc |
7b440 | 65 64 20 75 73 65 72 73 20 77 68 6f 20 61 72 65 20 70 61 72 74 69 63 75 6c 61 72 6c 79 20 6b 6e | ed.users.who.are.particularly.kn |
7b460 | 6f 77 6c 65 64 67 65 61 62 6c 65 20 61 62 6f 75 74 20 74 68 65 20 52 49 50 20 70 72 6f 74 6f 63 | owledgeable.about.the.RIP.protoc |
7b480 | 6f 6c 2e 20 49 6e 20 6d 6f 73 74 20 63 61 73 65 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 | ol..In.most.cases,.we.recommend. |
7b4a0 | 63 72 65 61 74 69 6e 67 20 61 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 69 6e 20 56 79 4f 53 20 | creating.a.static.route.in.VyOS. |
7b4c0 | 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 69 6e 67 20 69 74 20 69 6e 20 52 49 50 20 75 73 69 | and.redistributing.it.in.RIP.usi |
7b4e0 | 6e 67 20 3a 63 66 67 63 6d 64 3a 60 72 65 64 69 73 74 72 69 62 75 74 65 20 73 74 61 74 69 63 60 | ng.:cfgcmd:`redistribute.static` |
7b500 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 20 66 6f 72 20 61 64 76 65 72 | ..This.command.is.used.for.adver |
7b520 | 74 69 73 69 6e 67 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 73 2e 00 54 68 | tising.IPv4.or.IPv6.networks..Th |
7b540 | 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 72 65 74 72 69 65 76 65 20 69 | is.command.is.used.to.retrieve.i |
7b560 | 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 57 41 50 20 77 69 74 68 69 6e 20 74 68 65 20 | nformation.about.WAP.within.the. |
7b580 | 72 61 6e 67 65 20 6f 66 20 79 6f 75 72 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 | range.of.your.wireless.interface |
7b5a0 | 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 66 75 6c 20 6f 6e 20 77 69 72 65 | ..This.command.is.useful.on.wire |
7b5c0 | 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 73 74 | less.interfaces.configured.in.st |
7b5e0 | 61 74 69 6f 6e 20 6d 6f 64 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 66 | ation.mode..This.command.is.usef |
7b600 | 75 6c 20 69 66 20 6f 6e 65 20 64 65 73 69 72 65 73 20 74 6f 20 6c 6f 6f 73 65 6e 20 74 68 65 20 | ul.if.one.desires.to.loosen.the. |
7b620 | 72 65 71 75 69 72 65 6d 65 6e 74 20 66 6f 72 20 42 47 50 20 74 6f 20 68 61 76 65 20 73 74 72 69 | requirement.for.BGP.to.have.stri |
7b640 | 63 74 6c 79 20 64 65 66 69 6e 65 64 20 6e 65 69 67 68 62 6f 72 73 2e 20 53 70 65 63 69 66 69 63 | ctly.defined.neighbors..Specific |
7b660 | 61 6c 6c 79 20 77 68 61 74 20 69 73 20 61 6c 6c 6f 77 65 64 20 69 73 20 66 6f 72 20 74 68 65 20 | ally.what.is.allowed.is.for.the. |
7b680 | 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 74 6f 20 6c 69 73 74 65 6e 20 74 6f 20 61 20 72 61 6e 67 | local.router.to.listen.to.a.rang |
7b6a0 | 65 20 6f 66 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 64 65 66 69 | e.of.IPv4.or.IPv6.addresses.defi |
7b6c0 | 6e 65 64 20 62 79 20 61 20 70 72 65 66 69 78 20 61 6e 64 20 74 6f 20 61 63 63 65 70 74 20 42 47 | ned.by.a.prefix.and.to.accept.BG |
7b6e0 | 50 20 6f 70 65 6e 20 6d 65 73 73 61 67 65 73 2e 20 57 68 65 6e 20 61 20 54 43 50 20 63 6f 6e 6e | P.open.messages..When.a.TCP.conn |
7b700 | 65 63 74 69 6f 6e 20 28 61 6e 64 20 73 75 62 73 65 71 75 65 6e 74 6c 79 20 61 20 42 47 50 20 6f | ection.(and.subsequently.a.BGP.o |
7b720 | 70 65 6e 20 6d 65 73 73 61 67 65 29 20 66 72 6f 6d 20 77 69 74 68 69 6e 20 74 68 69 73 20 72 61 | pen.message).from.within.this.ra |
7b740 | 6e 67 65 20 74 72 69 65 73 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 68 65 20 6c 6f 63 61 6c 20 72 | nge.tries.to.connect.the.local.r |
7b760 | 6f 75 74 65 72 20 74 68 65 6e 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 77 69 6c 6c | outer.then.the.local.router.will |
7b780 | 20 72 65 73 70 6f 6e 64 20 61 6e 64 20 63 6f 6e 6e 65 63 74 20 77 69 74 68 20 74 68 65 20 70 61 | .respond.and.connect.with.the.pa |
7b7a0 | 72 61 6d 65 74 65 72 73 20 74 68 61 74 20 61 72 65 20 64 65 66 69 6e 65 64 20 77 69 74 68 69 6e | rameters.that.are.defined.within |
7b7c0 | 20 74 68 65 20 70 65 65 72 20 67 72 6f 75 70 2e 20 4f 6e 65 20 6d 75 73 74 20 64 65 66 69 6e 65 | .the.peer.group..One.must.define |
7b7e0 | 20 61 20 70 65 65 72 2d 67 72 6f 75 70 20 66 6f 72 20 65 61 63 68 20 72 61 6e 67 65 20 74 68 61 | .a.peer-group.for.each.range.tha |
7b800 | 74 20 69 73 20 6c 69 73 74 65 64 2e 20 49 66 20 6e 6f 20 70 65 65 72 2d 67 72 6f 75 70 20 69 73 | t.is.listed..If.no.peer-group.is |
7b820 | 20 64 65 66 69 6e 65 64 20 74 68 65 6e 20 61 6e 20 65 72 72 6f 72 20 77 69 6c 6c 20 6b 65 65 70 | .defined.then.an.error.will.keep |
7b840 | 20 79 6f 75 20 66 72 6f 6d 20 63 6f 6d 6d 69 74 74 69 6e 67 20 74 68 65 20 63 6f 6e 66 69 67 75 | .you.from.committing.the.configu |
7b860 | 72 61 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6d 6f 64 69 66 69 65 73 20 74 68 | ration..This.command.modifies.th |
7b880 | 65 20 64 65 66 61 75 6c 74 20 6d 65 74 72 69 63 20 28 68 6f 70 20 63 6f 75 6e 74 29 20 76 61 6c | e.default.metric.(hop.count).val |
7b8a0 | 75 65 20 66 6f 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 2e 20 54 68 65 | ue.for.redistributed.routes..The |
7b8c0 | 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 36 2e 20 54 68 65 20 64 65 | .metric.range.is.1.to.16..The.de |
7b8e0 | 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 | fault.value.is.1..This.command.d |
7b900 | 6f 65 73 20 6e 6f 74 20 61 66 66 65 63 74 20 63 6f 6e 6e 65 63 74 65 64 20 72 6f 75 74 65 20 65 | oes.not.affect.connected.route.e |
7b920 | 76 65 6e 20 69 66 20 69 74 20 69 73 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 62 79 20 3a 63 | ven.if.it.is.redistributed.by.:c |
7b940 | 66 67 63 6d 64 3a 60 72 65 64 69 73 74 72 69 62 75 74 65 20 63 6f 6e 6e 65 63 74 65 64 60 2e 20 | fgcmd:`redistribute.connected`.. |
7b960 | 54 6f 20 6d 6f 64 69 66 79 20 63 6f 6e 6e 65 63 74 65 64 20 72 6f 75 74 65 73 20 6d 65 74 72 69 | To.modify.connected.routes.metri |
7b980 | 63 20 76 61 6c 75 65 2c 20 70 6c 65 61 73 65 20 75 73 65 20 3a 63 66 67 63 6d 64 3a 60 72 65 64 | c.value,.please.use.:cfgcmd:`red |
7b9a0 | 69 73 74 72 69 62 75 74 65 20 63 6f 6e 6e 65 63 74 65 64 20 6d 65 74 72 69 63 60 2e 00 54 68 69 | istribute.connected.metric`..Thi |
7b9c0 | 73 20 63 6f 6d 6d 61 6e 64 20 6f 76 65 72 72 69 64 65 20 41 53 20 6e 75 6d 62 65 72 20 6f 66 20 | s.command.override.AS.number.of. |
7b9e0 | 74 68 65 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 72 6f 75 74 65 72 20 77 69 74 68 20 74 68 65 20 | the.originating.router.with.the. |
7ba00 | 6c 6f 63 61 6c 20 41 53 20 6e 75 6d 62 65 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 70 72 | local.AS.number..This.command.pr |
7ba20 | 65 76 65 6e 74 73 20 66 72 6f 6d 20 73 65 6e 64 69 6e 67 20 62 61 63 6b 20 70 72 65 66 69 78 65 | events.from.sending.back.prefixe |
7ba40 | 73 20 6c 65 61 72 6e 65 64 20 66 72 6f 6d 20 74 68 65 20 6e 65 69 67 68 62 6f 72 2e 00 54 68 69 | s.learned.from.the.neighbor..Thi |
7ba60 | 73 20 63 6f 6d 6d 61 6e 64 20 70 72 6f 76 69 64 65 73 20 74 6f 20 63 6f 6d 70 61 72 65 20 64 69 | s.command.provides.to.compare.di |
7ba80 | 66 66 65 72 65 6e 74 20 4d 45 44 20 76 61 6c 75 65 73 20 74 68 61 74 20 61 64 76 65 72 74 69 73 | fferent.MED.values.that.advertis |
7baa0 | 65 64 20 62 79 20 6e 65 69 67 68 62 6f 75 72 73 20 69 6e 20 74 68 65 20 73 61 6d 65 20 41 53 20 | ed.by.neighbours.in.the.same.AS. |
7bac0 | 66 6f 72 20 72 6f 75 74 65 73 20 73 65 6c 65 63 74 69 6f 6e 2e 20 57 68 65 6e 20 74 68 69 73 20 | for.routes.selection..When.this. |
7bae0 | 63 6f 6d 6d 61 6e 64 20 69 73 20 65 6e 61 62 6c 65 64 2c 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 | command.is.enabled,.routes.from. |
7bb00 | 74 68 65 20 73 61 6d 65 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 61 72 65 20 67 | the.same.autonomous.system.are.g |
7bb20 | 72 6f 75 70 65 64 20 74 6f 67 65 74 68 65 72 2c 20 61 6e 64 20 74 68 65 20 62 65 73 74 20 65 6e | rouped.together,.and.the.best.en |
7bb40 | 74 72 69 65 73 20 6f 66 20 65 61 63 68 20 67 72 6f 75 70 20 61 72 65 20 63 6f 6d 70 61 72 65 64 | tries.of.each.group.are.compared |
7bb60 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 70 72 6f 76 69 64 65 73 20 74 6f 20 63 6f 6d 70 61 | ..This.command.provides.to.compa |
7bb80 | 72 65 20 74 68 65 20 4d 45 44 20 6f 6e 20 72 6f 75 74 65 73 2c 20 65 76 65 6e 20 77 68 65 6e 20 | re.the.MED.on.routes,.even.when. |
7bba0 | 74 68 65 79 20 77 65 72 65 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 64 69 66 66 65 72 65 6e | they.were.received.from.differen |
7bbc0 | 74 20 6e 65 69 67 68 62 6f 75 72 69 6e 67 20 41 53 65 73 2e 20 53 65 74 74 69 6e 67 20 74 68 69 | t.neighbouring.ASes..Setting.thi |
7bbe0 | 73 20 6f 70 74 69 6f 6e 20 6d 61 6b 65 73 20 74 68 65 20 6f 72 64 65 72 20 6f 66 20 70 72 65 66 | s.option.makes.the.order.of.pref |
7bc00 | 65 72 65 6e 63 65 20 6f 66 20 72 6f 75 74 65 73 20 6d 6f 72 65 20 64 65 66 69 6e 65 64 2c 20 61 | erence.of.routes.more.defined,.a |
7bc20 | 6e 64 20 73 68 6f 75 6c 64 20 65 6c 69 6d 69 6e 61 74 65 20 4d 45 44 20 69 6e 64 75 63 65 64 20 | nd.should.eliminate.MED.induced. |
7bc40 | 6f 73 63 69 6c 6c 61 74 69 6f 6e 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 | oscillations..This.command.redis |
7bc60 | 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f | tributes.routing.information.fro |
7bc80 | 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 69 6e 74 6f 20 74 68 | m.the.given.route.source.into.th |
7bca0 | 65 20 49 53 49 53 20 64 61 74 61 62 61 73 65 20 61 73 20 4c 65 76 65 6c 2d 31 2e 20 54 68 65 72 | e.ISIS.database.as.Level-1..Ther |
7bcc0 | 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f | e.are.six.modes.available.for.ro |
7bce0 | 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e | ute.source:.bgp,.connected,.kern |
7bd00 | 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d | el,.ospf,.rip,.static..This.comm |
7bd20 | 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d | and.redistributes.routing.inform |
7bd40 | 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 | ation.from.the.given.route.sourc |
7bd60 | 65 20 69 6e 74 6f 20 74 68 65 20 49 53 49 53 20 64 61 74 61 62 61 73 65 20 61 73 20 4c 65 76 65 | e.into.the.ISIS.database.as.Leve |
7bd80 | 6c 2d 32 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 | l-2..There.are.six.modes.availab |
7bda0 | 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 | le.for.route.source:.bgp,.connec |
7bdc0 | 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 | ted,.kernel,.ospf,.rip,.static.. |
7bde0 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 | This.command.redistributes.routi |
7be00 | 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f | ng.information.from.the.given.ro |
7be20 | 75 74 65 20 73 6f 75 72 63 65 20 69 6e 74 6f 20 74 68 65 20 52 49 50 20 74 61 62 6c 65 73 2e 20 | ute.source.into.the.RIP.tables.. |
7be40 | 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 | There.are.five.modes.available.f |
7be60 | 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c | or.route.source:.bgp,.connected, |
7be80 | 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d | .kernel,.ospf,.static..This.comm |
7bea0 | 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d | and.redistributes.routing.inform |
7bec0 | 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 | ation.from.the.given.route.sourc |
7bee0 | 65 20 74 6f 20 74 68 65 20 42 47 50 20 70 72 6f 63 65 73 73 2e 20 54 68 65 72 65 20 61 72 65 20 | e.to.the.BGP.process..There.are. |
7bf00 | 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f | six.modes.available.for.route.so |
7bf20 | 75 72 63 65 3a 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 | urce:.connected,.kernel,.ospf,.r |
7bf40 | 69 70 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | ip,.static,.table..This.command. |
7bf60 | 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f | redistributes.routing.informatio |
7bf80 | 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 74 6f | n.from.the.given.route.source.to |
7bfa0 | 20 74 68 65 20 42 61 62 65 6c 20 70 72 6f 63 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | .the.Babel.process..This.command |
7bfc0 | 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 | .redistributes.routing.informati |
7bfe0 | 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 74 | on.from.the.given.route.source.t |
7c000 | 6f 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 | o.the.OSPF.process..There.are.fi |
7c020 | 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 | ve.modes.available.for.route.sou |
7c040 | 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 72 69 70 | rce:.bgp,.connected,.kernel,.rip |
7c060 | 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 | ,.static..This.command.redistrib |
7c080 | 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 | utes.routing.information.from.th |
7c0a0 | 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 74 6f 20 74 68 65 20 4f 53 50 46 | e.given.route.source.to.the.OSPF |
7c0c0 | 76 33 20 70 72 6f 63 65 73 73 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 | v3.process..There.are.five.modes |
7c0e0 | 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 | .available.for.route.source:.bgp |
7c100 | 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 72 69 70 6e 67 2c 20 73 74 61 74 | ,.connected,.kernel,.ripng,.stat |
7c120 | 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 6d 6f 76 65 73 20 74 68 65 20 70 72 69 | ic..This.command.removes.the.pri |
7c140 | 76 61 74 65 20 41 53 4e 20 6f 66 20 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 61 64 76 65 | vate.ASN.of.routes.that.are.adve |
7c160 | 72 74 69 73 65 64 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 70 65 65 72 2e 20 49 | rtised.to.the.configured.peer..I |
7c180 | 74 20 72 65 6d 6f 76 65 73 20 6f 6e 6c 79 20 70 72 69 76 61 74 65 20 41 53 4e 73 20 6f 6e 20 72 | t.removes.only.private.ASNs.on.r |
7c1a0 | 6f 75 74 65 73 20 61 64 76 65 72 74 69 73 65 64 20 74 6f 20 45 42 47 50 20 70 65 65 72 73 2e 00 | outes.advertised.to.EBGP.peers.. |
7c1c0 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 73 65 74 73 20 42 47 50 20 63 6f 6e 6e 65 63 74 69 | This.command.resets.BGP.connecti |
7c1e0 | 6f 6e 73 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 6e 65 69 67 68 62 6f 72 20 49 50 | ons.to.the.specified.neighbor.IP |
7c200 | 20 61 64 64 72 65 73 73 2e 20 57 69 74 68 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d 64 3a | .address..With.argument.:cfgcmd: |
7c220 | 60 73 6f 66 74 60 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 6e 69 74 69 61 74 65 73 20 61 20 | `soft`.this.command.initiates.a. |
7c240 | 73 6f 66 74 20 72 65 73 65 74 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 73 70 65 63 69 66 | soft.reset..If.you.do.not.specif |
7c260 | 79 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 69 6e 60 20 6f 72 20 3a 63 66 67 63 6d 64 3a 60 6f | y.the.:cfgcmd:`in`.or.:cfgcmd:`o |
7c280 | 75 74 60 20 6f 70 74 69 6f 6e 73 2c 20 62 6f 74 68 20 69 6e 62 6f 75 6e 64 20 61 6e 64 20 6f 75 | ut`.options,.both.inbound.and.ou |
7c2a0 | 74 62 6f 75 6e 64 20 73 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 72 65 20 | tbound.soft.reconfiguration.are. |
7c2c0 | 74 72 69 67 67 65 72 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 73 65 74 73 20 42 | triggered..This.command.resets.B |
7c2e0 | 47 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 | GP.connections.to.the.specified. |
7c300 | 70 65 65 72 20 67 72 6f 75 70 2e 20 57 69 74 68 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d | peer.group..With.argument.:cfgcm |
7c320 | 64 3a 60 73 6f 66 74 60 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 6e 69 74 69 61 74 65 73 20 | d:`soft`.this.command.initiates. |
7c340 | 61 20 73 6f 66 74 20 72 65 73 65 74 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 73 70 65 63 | a.soft.reset..If.you.do.not.spec |
7c360 | 69 66 79 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 69 6e 60 20 6f 72 20 3a 63 66 67 63 6d 64 3a | ify.the.:cfgcmd:`in`.or.:cfgcmd: |
7c380 | 60 6f 75 74 60 20 6f 70 74 69 6f 6e 73 2c 20 62 6f 74 68 20 69 6e 62 6f 75 6e 64 20 61 6e 64 20 | `out`.options,.both.inbound.and. |
7c3a0 | 6f 75 74 62 6f 75 6e 64 20 73 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 72 | outbound.soft.reconfiguration.ar |
7c3c0 | 65 20 74 72 69 67 67 65 72 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 73 65 74 73 | e.triggered..This.command.resets |
7c3e0 | 20 61 6c 6c 20 42 47 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 6f 66 20 67 69 76 65 6e 20 72 6f | .all.BGP.connections.of.given.ro |
7c400 | 75 74 65 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 73 65 74 73 20 61 6c 6c 20 65 78 | uter..This.command.resets.all.ex |
7c420 | 74 65 72 6e 61 6c 20 42 47 50 20 70 65 65 72 73 20 6f 66 20 67 69 76 65 6e 20 72 6f 75 74 65 72 | ternal.BGP.peers.of.given.router |
7c440 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 6c 65 63 74 73 20 41 42 52 20 6d 6f 64 65 6c | ..This.command.selects.ABR.model |
7c460 | 2e 20 4f 53 50 46 20 72 6f 75 74 65 72 20 73 75 70 70 6f 72 74 73 20 66 6f 75 72 20 41 42 52 20 | ..OSPF.router.supports.four.ABR. |
7c480 | 6d 6f 64 65 6c 73 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 20 64 65 66 61 75 6c 74 | models:.This.command.set.default |
7c4a0 | 20 6d 65 74 72 69 63 20 66 6f 72 20 63 69 72 63 75 69 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | .metric.for.circuit..This.comman |
7c4c0 | 64 20 73 65 74 20 74 68 65 20 63 68 61 6e 6e 65 6c 20 6e 75 6d 62 65 72 20 74 68 61 74 20 64 69 | d.set.the.channel.number.that.di |
7c4e0 | 76 65 72 73 69 74 79 20 72 6f 75 74 69 6e 67 20 75 73 65 73 20 66 6f 72 20 74 68 69 73 20 69 6e | versity.routing.uses.for.this.in |
7c500 | 74 65 72 66 61 63 65 20 28 73 65 65 20 64 69 76 65 72 73 69 74 79 20 6f 70 74 69 6f 6e 20 61 62 | terface.(see.diversity.option.ab |
7c520 | 6f 76 65 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 41 54 54 20 62 69 74 20 | ove)..This.command.sets.ATT.bit. |
7c540 | 74 6f 20 31 20 69 6e 20 4c 65 76 65 6c 31 20 4c 53 50 73 2e 20 49 74 20 69 73 20 64 65 73 63 72 | to.1.in.Level1.LSPs..It.is.descr |
7c560 | 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 37 38 37 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | ibed.in.:rfc:`3787`..This.comman |
7c580 | 64 20 73 65 74 73 20 4c 53 50 20 6d 61 78 69 6d 75 6d 20 4c 53 50 20 6c 69 66 65 74 69 6d 65 20 | d.sets.LSP.maximum.LSP.lifetime. |
7c5a0 | 69 6e 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 | in.seconds..The.interval.range.i |
7c5c0 | 73 20 33 35 30 20 74 6f 20 36 35 35 33 35 2e 20 4c 53 50 73 20 72 65 6d 61 69 6e 20 69 6e 20 61 | s.350.to.65535..LSPs.remain.in.a |
7c5e0 | 20 64 61 74 61 62 61 73 65 20 66 6f 72 20 31 32 30 30 20 73 65 63 6f 6e 64 73 20 62 79 20 64 65 | .database.for.1200.seconds.by.de |
7c600 | 66 61 75 6c 74 2e 20 49 66 20 74 68 65 79 20 61 72 65 20 6e 6f 74 20 72 65 66 72 65 73 68 65 64 | fault..If.they.are.not.refreshed |
7c620 | 20 62 79 20 74 68 61 74 20 74 69 6d 65 2c 20 74 68 65 79 20 61 72 65 20 64 65 6c 65 74 65 64 2e | .by.that.time,.they.are.deleted. |
7c640 | 20 59 6f 75 20 63 61 6e 20 63 68 61 6e 67 65 20 74 68 65 20 4c 53 50 20 72 65 66 72 65 73 68 20 | .You.can.change.the.LSP.refresh. |
7c660 | 69 6e 74 65 72 76 61 6c 20 6f 72 20 74 68 65 20 4c 53 50 20 6c 69 66 65 74 69 6d 65 2e 20 54 68 | interval.or.the.LSP.lifetime..Th |
7c680 | 65 20 4c 53 50 20 72 65 66 72 65 73 68 20 69 6e 74 65 72 76 61 6c 20 73 68 6f 75 6c 64 20 62 65 | e.LSP.refresh.interval.should.be |
7c6a0 | 20 6c 65 73 73 20 74 68 61 6e 20 74 68 65 20 4c 53 50 20 6c 69 66 65 74 69 6d 65 20 6f 72 20 65 | .less.than.the.LSP.lifetime.or.e |
7c6c0 | 6c 73 65 20 4c 53 50 73 20 77 69 6c 6c 20 74 69 6d 65 20 6f 75 74 20 62 65 66 6f 72 65 20 74 68 | lse.LSPs.will.time.out.before.th |
7c6e0 | 65 79 20 61 72 65 20 72 65 66 72 65 73 68 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | ey.are.refreshed..This.command.s |
7c700 | 65 74 73 20 4c 53 50 20 72 65 66 72 65 73 68 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f | ets.LSP.refresh.interval.in.seco |
7c720 | 6e 64 73 2e 20 49 53 2d 49 53 20 67 65 6e 65 72 61 74 65 73 20 4c 53 50 73 20 77 68 65 6e 20 74 | nds..IS-IS.generates.LSPs.when.t |
7c740 | 68 65 20 73 74 61 74 65 20 6f 66 20 61 20 6c 69 6e 6b 20 63 68 61 6e 67 65 73 2e 20 48 6f 77 65 | he.state.of.a.link.changes..Howe |
7c760 | 76 65 72 2c 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 72 6f 75 74 69 6e 67 20 64 61 74 61 | ver,.to.ensure.that.routing.data |
7c780 | 62 61 73 65 73 20 6f 6e 20 61 6c 6c 20 72 6f 75 74 65 72 73 20 72 65 6d 61 69 6e 20 63 6f 6e 76 | bases.on.all.routers.remain.conv |
7c7a0 | 65 72 67 65 64 2c 20 4c 53 50 73 20 69 6e 20 73 74 61 62 6c 65 20 6e 65 74 77 6f 72 6b 73 20 61 | erged,.LSPs.in.stable.networks.a |
7c7c0 | 72 65 20 67 65 6e 65 72 61 74 65 64 20 6f 6e 20 61 20 72 65 67 75 6c 61 72 20 62 61 73 69 73 20 | re.generated.on.a.regular.basis. |
7c7e0 | 65 76 65 6e 20 74 68 6f 75 67 68 20 74 68 65 72 65 20 68 61 73 20 62 65 65 6e 20 6e 6f 20 63 68 | even.though.there.has.been.no.ch |
7c800 | 61 6e 67 65 20 74 6f 20 74 68 65 20 73 74 61 74 65 20 6f 66 20 74 68 65 20 6c 69 6e 6b 73 2e 20 | ange.to.the.state.of.the.links.. |
7c820 | 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 36 35 32 33 35 | The.interval.range.is.1.to.65235 |
7c840 | 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 39 30 30 20 73 65 63 6f 6e | ..The.default.value.is.900.secon |
7c860 | 64 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 4f 53 50 46 20 61 75 74 68 65 | ds..This.command.sets.OSPF.authe |
7c880 | 6e 74 69 63 61 74 69 6f 6e 20 6b 65 79 20 74 6f 20 61 20 73 69 6d 70 6c 65 20 70 61 73 73 77 6f | ntication.key.to.a.simple.passwo |
7c8a0 | 72 64 2e 20 41 66 74 65 72 20 73 65 74 74 69 6e 67 2c 20 61 6c 6c 20 4f 53 50 46 20 70 61 63 6b | rd..After.setting,.all.OSPF.pack |
7c8c0 | 65 74 73 20 61 72 65 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 2e 20 4b 65 79 20 68 61 73 20 6c | ets.are.authenticated..Key.has.l |
7c8e0 | 65 6e 67 74 68 20 75 70 20 74 6f 20 38 20 63 68 61 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | ength.up.to.8.chars..This.comman |
7c900 | 64 20 73 65 74 73 20 50 53 4e 50 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 2e | d.sets.PSNP.interval.in.seconds. |
7c920 | 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 31 32 37 2e | .The.interval.range.is.0.to.127. |
7c940 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 52 6f 75 74 65 72 20 50 72 69 6f 72 69 | .This.command.sets.Router.Priori |
7c960 | 74 79 20 69 6e 74 65 67 65 72 20 76 61 6c 75 65 2e 20 54 68 65 20 72 6f 75 74 65 72 20 77 69 74 | ty.integer.value..The.router.wit |
7c980 | 68 20 74 68 65 20 68 69 67 68 65 73 74 20 70 72 69 6f 72 69 74 79 20 77 69 6c 6c 20 62 65 20 6d | h.the.highest.priority.will.be.m |
7c9a0 | 6f 72 65 20 65 6c 69 67 69 62 6c 65 20 74 6f 20 62 65 63 6f 6d 65 20 44 65 73 69 67 6e 61 74 65 | ore.eligible.to.become.Designate |
7c9c0 | 64 20 52 6f 75 74 65 72 2e 20 53 65 74 74 69 6e 67 20 74 68 65 20 76 61 6c 75 65 20 74 6f 20 30 | d.Router..Setting.the.value.to.0 |
7c9e0 | 2c 20 6d 61 6b 65 73 20 74 68 65 20 72 6f 75 74 65 72 20 69 6e 65 6c 69 67 69 62 6c 65 20 74 6f | ,.makes.the.router.ineligible.to |
7ca00 | 20 62 65 63 6f 6d 65 20 44 65 73 69 67 6e 61 74 65 64 20 52 6f 75 74 65 72 2e 20 54 68 65 20 64 | .become.Designated.Router..The.d |
7ca20 | 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 | efault.value.is.1..The.interval. |
7ca40 | 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | range.is.0.to.255..This.command. |
7ca60 | 73 65 74 73 20 64 65 66 61 75 6c 74 20 52 49 50 20 64 69 73 74 61 6e 63 65 20 74 6f 20 61 20 73 | sets.default.RIP.distance.to.a.s |
7ca80 | 70 65 63 69 66 69 65 64 20 76 61 6c 75 65 20 77 68 65 6e 20 74 68 65 20 72 6f 75 74 65 73 20 73 | pecified.value.when.the.routes.s |
7caa0 | 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 6d 61 74 63 68 65 73 20 74 68 65 20 73 70 65 | ource.IP.address.matches.the.spe |
7cac0 | 63 69 66 69 65 64 20 70 72 65 66 69 78 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 | cified.prefix..This.command.sets |
7cae0 | 20 68 65 6c 6c 6f 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 20 6f 6e 20 61 20 | .hello.interval.in.seconds.on.a. |
7cb00 | 67 69 76 65 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 72 61 6e 67 65 20 69 73 20 31 20 | given.interface..The.range.is.1. |
7cb20 | 74 6f 20 36 30 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6c 69 6e 6b 20 63 | to.600..This.command.sets.link.c |
7cb40 | 6f 73 74 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2e | ost.for.the.specified.interface. |
7cb60 | 20 54 68 65 20 63 6f 73 74 20 76 61 6c 75 65 20 69 73 20 73 65 74 20 74 6f 20 72 6f 75 74 65 72 | .The.cost.value.is.set.to.router |
7cb80 | 2d 4c 53 41 e2 80 99 73 20 6d 65 74 72 69 63 20 66 69 65 6c 64 20 61 6e 64 20 75 73 65 64 20 66 | -LSA...s.metric.field.and.used.f |
7cba0 | 6f 72 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 2e 20 54 68 65 20 63 6f 73 74 20 72 61 6e | or.SPF.calculation..The.cost.ran |
7cbc0 | 67 65 20 69 73 20 31 20 74 6f 20 36 35 35 33 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | ge.is.1.to.65535..This.command.s |
7cbe0 | 65 74 73 20 6d 69 6e 69 6d 75 6d 20 69 6e 74 65 72 76 61 6c 20 62 65 74 77 65 65 6e 20 63 6f 6e | ets.minimum.interval.between.con |
7cc00 | 73 65 63 75 74 69 76 65 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 73 20 69 6e 20 73 65 63 | secutive.SPF.calculations.in.sec |
7cc20 | 6f 6e 64 73 2e 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 | onds.The.interval.range.is.1.to. |
7cc40 | 31 32 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6d 69 6e 69 6d 75 6d 20 69 | 120..This.command.sets.minimum.i |
7cc60 | 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 20 62 65 74 77 65 65 6e 20 72 65 67 65 6e | nterval.in.seconds.between.regen |
7cc80 | 65 72 61 74 69 6e 67 20 73 61 6d 65 20 4c 53 50 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 | erating.same.LSP..The.interval.r |
7cca0 | 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 32 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | ange.is.1.to.120..This.command.s |
7ccc0 | 65 74 73 20 6d 75 6c 74 69 70 6c 69 65 72 20 66 6f 72 20 68 65 6c 6c 6f 20 68 6f 6c 64 69 6e 67 | ets.multiplier.for.hello.holding |
7cce0 | 20 74 69 6d 65 20 6f 6e 20 61 20 67 69 76 65 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 | .time.on.a.given.interface..The. |
7cd00 | 72 61 6e 67 65 20 69 73 20 32 20 74 6f 20 31 30 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | range.is.2.to.100..This.command. |
7cd20 | 73 65 74 73 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 66 6f 72 20 49 6e 66 54 72 | sets.number.of.seconds.for.InfTr |
7cd40 | 61 6e 73 44 65 6c 61 79 20 76 61 6c 75 65 2e 20 49 74 20 61 6c 6c 6f 77 73 20 74 6f 20 73 65 74 | ansDelay.value..It.allows.to.set |
7cd60 | 20 61 6e 64 20 61 64 6a 75 73 74 20 66 6f 72 20 65 61 63 68 20 69 6e 74 65 72 66 61 63 65 20 74 | .and.adjust.for.each.interface.t |
7cd80 | 68 65 20 64 65 6c 61 79 20 69 6e 74 65 72 76 61 6c 20 62 65 66 6f 72 65 20 73 74 61 72 74 69 6e | he.delay.interval.before.startin |
7cda0 | 67 20 74 68 65 20 73 79 6e 63 68 72 6f 6e 69 7a 69 6e 67 20 70 72 6f 63 65 73 73 20 6f 66 20 74 | g.the.synchronizing.process.of.t |
7cdc0 | 68 65 20 72 6f 75 74 65 72 27 73 20 64 61 74 61 62 61 73 65 20 77 69 74 68 20 61 6c 6c 20 6e 65 | he.router's.database.with.all.ne |
7cde0 | 69 67 68 62 6f 72 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 20 | ighbors..The.default.value.is.1. |
7ce00 | 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 33 | seconds..The.interval.range.is.3 |
7ce20 | 20 74 6f 20 36 35 35 33 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6e 75 6d | .to.65535..This.command.sets.num |
7ce40 | 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 66 6f 72 20 52 78 6d 74 49 6e 74 65 72 76 61 6c 20 | ber.of.seconds.for.RxmtInterval. |
7ce60 | 74 69 6d 65 72 20 76 61 6c 75 65 2e 20 54 68 69 73 20 76 61 6c 75 65 20 69 73 20 75 73 65 64 20 | timer.value..This.value.is.used. |
7ce80 | 77 68 65 6e 20 72 65 74 72 61 6e 73 6d 69 74 74 69 6e 67 20 44 61 74 61 62 61 73 65 20 44 65 73 | when.retransmitting.Database.Des |
7cea0 | 63 72 69 70 74 69 6f 6e 20 61 6e 64 20 4c 69 6e 6b 20 53 74 61 74 65 20 52 65 71 75 65 73 74 20 | cription.and.Link.State.Request. |
7cec0 | 70 61 63 6b 65 74 73 20 69 66 20 61 63 6b 6e 6f 77 6c 65 64 67 65 20 77 61 73 20 6e 6f 74 20 72 | packets.if.acknowledge.was.not.r |
7cee0 | 65 63 65 69 76 65 64 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 35 20 | eceived..The.default.value.is.5. |
7cf00 | 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 33 | seconds..The.interval.range.is.3 |
7cf20 | 20 74 6f 20 36 35 35 33 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6f 6c 64 | .to.65535..This.command.sets.old |
7cf40 | 2d 73 74 79 6c 65 20 28 49 53 4f 20 31 30 35 38 39 29 20 6f 72 20 6e 65 77 20 73 74 79 6c 65 20 | -style.(ISO.10589).or.new.style. |
7cf60 | 70 61 63 6b 65 74 20 66 6f 72 6d 61 74 73 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 | packet.formats:.This.command.set |
7cf80 | 73 20 6f 74 68 65 72 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 73 20 3c 6e 73 75 62 61 73 6e 3e | s.other.confederations.<nsubasn> |
7cfa0 | 20 61 73 20 6d 65 6d 62 65 72 73 20 6f 66 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d | .as.members.of.autonomous.system |
7cfc0 | 20 73 70 65 63 69 66 69 65 64 20 62 79 20 3a 63 66 67 63 6d 64 3a 60 63 6f 6e 66 65 64 65 72 61 | .specified.by.:cfgcmd:`confedera |
7cfe0 | 74 69 6f 6e 20 69 64 65 6e 74 69 66 69 65 72 20 3c 61 73 6e 3e 60 2e 00 54 68 69 73 20 63 6f 6d | tion.identifier.<asn>`..This.com |
7d000 | 6d 61 6e 64 20 73 65 74 73 20 6f 76 65 72 6c 6f 61 64 20 62 69 74 20 74 6f 20 61 76 6f 69 64 20 | mand.sets.overload.bit.to.avoid. |
7d020 | 61 6e 79 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 20 74 68 72 6f 75 67 68 20 74 68 69 73 | any.transit.traffic.through.this |
7d040 | 20 72 6f 75 74 65 72 2e 20 49 74 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 | .router..It.is.described.in.:rfc |
7d060 | 3a 60 33 37 38 37 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 70 72 69 6f 72 | :`3787`..This.command.sets.prior |
7d080 | 69 74 79 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 3a 61 62 62 72 3a | ity.for.the.interface.for.:abbr: |
7d0a0 | 60 44 49 53 20 28 44 65 73 69 67 6e 61 74 65 64 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 | `DIS.(Designated.Intermediate.Sy |
7d0c0 | 73 74 65 6d 29 60 20 65 6c 65 63 74 69 6f 6e 2e 20 54 68 65 20 70 72 69 6f 72 69 74 79 20 72 61 | stem)`.election..The.priority.ra |
7d0e0 | 6e 67 65 20 69 73 20 30 20 74 6f 20 31 32 37 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 | nge.is.0.to.127..This.command.se |
7d100 | 74 73 20 74 68 65 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 64 69 73 74 61 6e 63 65 20 66 | ts.the.administrative.distance.f |
7d120 | 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 72 6f 75 74 65 2e 20 54 68 65 20 64 69 73 74 61 | or.a.particular.route..The.dista |
7d140 | 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d | nce.range.is.1.to.255..This.comm |
7d160 | 61 6e 64 20 73 65 74 73 20 74 68 65 20 63 6f 73 74 20 6f 66 20 64 65 66 61 75 6c 74 2d 73 75 6d | and.sets.the.cost.of.default-sum |
7d180 | 6d 61 72 79 20 4c 53 41 73 20 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 73 74 75 62 62 79 20 61 72 | mary.LSAs.announced.to.stubby.ar |
7d1a0 | 65 61 73 2e 20 54 68 65 20 63 6f 73 74 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 31 36 37 37 | eas..The.cost.range.is.0.to.1677 |
7d1c0 | 37 32 31 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 64 65 66 61 | 7215..This.command.sets.the.defa |
7d1e0 | 75 6c 74 20 63 6f 73 74 20 6f 66 20 4c 53 41 73 20 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 4e 53 | ult.cost.of.LSAs.announced.to.NS |
7d200 | 53 41 20 61 72 65 61 73 2e 20 54 68 65 20 63 6f 73 74 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f | SA.areas..The.cost.range.is.0.to |
7d220 | 20 31 36 37 37 37 32 31 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 | .16777215..This.command.sets.the |
7d240 | 20 69 6e 69 74 69 61 6c 20 64 65 6c 61 79 2c 20 74 68 65 20 69 6e 69 74 69 61 6c 2d 68 6f 6c 64 | .initial.delay,.the.initial-hold |
7d260 | 74 69 6d 65 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 2d 68 6f 6c 64 74 69 6d 65 20 62 65 | time.and.the.maximum-holdtime.be |
7d280 | 74 77 65 65 6e 20 77 68 65 6e 20 53 50 46 20 69 73 20 63 61 6c 63 75 6c 61 74 65 64 20 61 6e 64 | tween.when.SPF.is.calculated.and |
7d2a0 | 20 74 68 65 20 65 76 65 6e 74 20 77 68 69 63 68 20 74 72 69 67 67 65 72 65 64 20 74 68 65 20 63 | .the.event.which.triggered.the.c |
7d2c0 | 61 6c 63 75 6c 61 74 69 6f 6e 2e 20 54 68 65 20 74 69 6d 65 73 20 61 72 65 20 73 70 65 63 69 66 | alculation..The.times.are.specif |
7d2e0 | 69 65 64 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 61 6e 64 20 6d 75 73 74 20 62 65 20 | ied.in.milliseconds.and.must.be. |
7d300 | 69 6e 20 74 68 65 20 72 61 6e 67 65 20 6f 66 20 30 20 74 6f 20 36 30 30 30 30 30 20 6d 69 6c 6c | in.the.range.of.0.to.600000.mill |
7d320 | 69 73 65 63 6f 6e 64 73 2e 20 3a 63 66 67 63 6d 64 3a 60 64 65 6c 61 79 60 20 73 65 74 73 20 74 | iseconds..:cfgcmd:`delay`.sets.t |
7d340 | 68 65 20 69 6e 69 74 69 61 6c 20 53 50 46 20 73 63 68 65 64 75 6c 65 20 64 65 6c 61 79 20 69 6e | he.initial.SPF.schedule.delay.in |
7d360 | 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 | .milliseconds..The.default.value |
7d380 | 20 69 73 20 32 30 30 20 6d 73 2e 20 3a 63 66 67 63 6d 64 3a 60 69 6e 69 74 69 61 6c 2d 68 6f 6c | .is.200.ms..:cfgcmd:`initial-hol |
7d3a0 | 64 74 69 6d 65 60 20 73 65 74 73 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 68 6f 6c 64 20 74 69 6d | dtime`.sets.the.minimum.hold.tim |
7d3c0 | 65 20 62 65 74 77 65 65 6e 20 74 77 6f 20 63 6f 6e 73 65 63 75 74 69 76 65 20 53 50 46 20 63 61 | e.between.two.consecutive.SPF.ca |
7d3e0 | 6c 63 75 6c 61 74 69 6f 6e 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 | lculations..The.default.value.is |
7d400 | 20 31 30 30 30 20 6d 73 2e 20 3a 63 66 67 63 6d 64 3a 60 6d 61 78 2d 68 6f 6c 64 74 69 6d 65 60 | .1000.ms..:cfgcmd:`max-holdtime` |
7d420 | 20 73 65 74 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 77 61 69 74 20 74 69 6d 65 20 62 65 74 77 | .sets.the.maximum.wait.time.betw |
7d440 | 65 65 6e 20 74 77 6f 20 63 6f 6e 73 65 63 75 74 69 76 65 20 53 50 46 20 63 61 6c 63 75 6c 61 74 | een.two.consecutive.SPF.calculat |
7d460 | 69 6f 6e 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 30 30 30 30 | ions..The.default.value.is.10000 |
7d480 | 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 69 6e 74 65 72 | .ms..This.command.sets.the.inter |
7d4a0 | 66 61 63 65 20 62 61 6e 64 77 69 64 74 68 20 66 6f 72 20 63 6f 73 74 20 63 61 6c 63 75 6c 61 74 | face.bandwidth.for.cost.calculat |
7d4c0 | 69 6f 6e 73 2c 20 77 68 65 72 65 20 62 61 6e 64 77 69 64 74 68 20 63 61 6e 20 62 65 20 69 6e 20 | ions,.where.bandwidth.can.be.in. |
7d4e0 | 72 61 6e 67 65 20 66 72 6f 6d 20 31 20 74 6f 20 31 30 30 30 30 30 2c 20 73 70 65 63 69 66 69 65 | range.from.1.to.100000,.specifie |
7d500 | 64 20 69 6e 20 4d 62 69 74 73 2f 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 | d.in.Mbits/s..This.command.sets. |
7d520 | 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 79 70 65 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | the.interface.type:.This.command |
7d540 | 20 73 65 74 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 52 49 50 20 4d 44 35 | .sets.the.interface.with.RIP.MD5 |
7d560 | 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c | .authentication..This.command.al |
7d580 | 73 6f 20 73 65 74 73 20 4d 44 35 20 4b 65 79 2e 20 54 68 65 20 6b 65 79 20 6d 75 73 74 20 62 65 | so.sets.MD5.Key..The.key.must.be |
7d5a0 | 20 73 68 6f 72 74 65 72 20 74 68 61 6e 20 31 36 20 63 68 61 72 61 63 74 65 72 73 2e 00 54 68 69 | .shorter.than.16.characters..Thi |
7d5c0 | 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 | s.command.sets.the.interface.wit |
7d5e0 | 68 20 52 49 50 20 73 69 6d 70 6c 65 20 70 61 73 73 77 6f 72 64 20 61 75 74 68 65 6e 74 69 63 61 | h.RIP.simple.password.authentica |
7d600 | 74 69 6f 6e 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 73 6f 20 73 65 74 73 20 61 75 74 | tion..This.command.also.sets.aut |
7d620 | 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 74 72 69 6e 67 2e 20 54 68 65 20 73 74 72 69 6e 67 20 6d | hentication.string..The.string.m |
7d640 | 75 73 74 20 62 65 20 73 68 6f 72 74 65 72 20 74 68 61 6e 20 31 36 20 63 68 61 72 61 63 74 65 72 | ust.be.shorter.than.16.character |
7d660 | 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 6d 75 6c 74 69 70 6c | s..This.command.sets.the.multipl |
7d680 | 69 63 61 74 69 76 65 20 66 61 63 74 6f 72 20 75 73 65 64 20 66 6f 72 20 64 69 76 65 72 73 69 74 | icative.factor.used.for.diversit |
7d6a0 | 79 20 72 6f 75 74 69 6e 67 2c 20 69 6e 20 75 6e 69 74 73 20 6f 66 20 31 2f 32 35 36 3b 20 6c 6f | y.routing,.in.units.of.1/256;.lo |
7d6c0 | 77 65 72 20 76 61 6c 75 65 73 20 63 61 75 73 65 20 64 69 76 65 72 73 69 74 79 20 74 6f 20 70 6c | wer.values.cause.diversity.to.pl |
7d6e0 | 61 79 20 61 20 6d 6f 72 65 20 69 6d 70 6f 72 74 61 6e 74 20 72 6f 6c 65 20 69 6e 20 72 6f 75 74 | ay.a.more.important.role.in.rout |
7d700 | 65 20 73 65 6c 65 63 74 69 6f 6e 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 74 20 32 35 36 2c | e.selection..The.default.it.256, |
7d720 | 20 77 68 69 63 68 20 6d 65 61 6e 73 20 74 68 61 74 20 64 69 76 65 72 73 69 74 79 20 70 6c 61 79 | .which.means.that.diversity.play |
7d740 | 73 20 6e 6f 20 72 6f 6c 65 20 69 6e 20 72 6f 75 74 65 20 73 65 6c 65 63 74 69 6f 6e 3b 20 79 6f | s.no.role.in.route.selection;.yo |
7d760 | 75 20 77 69 6c 6c 20 70 72 6f 62 61 62 6c 79 20 77 61 6e 74 20 74 6f 20 73 65 74 20 74 68 61 74 | u.will.probably.want.to.set.that |
7d780 | 20 74 6f 20 31 32 38 20 6f 72 20 6c 65 73 73 20 6f 6e 20 6e 6f 64 65 73 20 77 69 74 68 20 6d 75 | .to.128.or.less.on.nodes.with.mu |
7d7a0 | 6c 74 69 70 6c 65 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 72 61 64 69 6f 73 2e 00 54 68 69 73 20 | ltiple.independent.radios..This. |
7d7c0 | 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 72 65 66 65 72 65 6e 63 65 20 62 61 6e 64 77 | command.sets.the.reference.bandw |
7d7e0 | 69 64 74 68 20 66 6f 72 20 63 6f 73 74 20 63 61 6c 63 75 6c 61 74 69 6f 6e 73 2c 20 77 68 65 72 | idth.for.cost.calculations,.wher |
7d800 | 65 20 62 61 6e 64 77 69 64 74 68 20 63 61 6e 20 62 65 20 69 6e 20 72 61 6e 67 65 20 66 72 6f 6d | e.bandwidth.can.be.in.range.from |
7d820 | 20 31 20 74 6f 20 34 32 39 34 39 36 37 2c 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 4d 62 69 74 | .1.to.4294967,.specified.in.Mbit |
7d840 | 73 2f 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 30 30 4d 62 69 74 2f 73 20 28 69 | s/s..The.default.is.100Mbit/s.(i |
7d860 | 2e 65 2e 20 61 20 6c 69 6e 6b 20 6f 66 20 62 61 6e 64 77 69 64 74 68 20 31 30 30 4d 62 69 74 2f | .e..a.link.of.bandwidth.100Mbit/ |
7d880 | 73 20 6f 72 20 68 69 67 68 65 72 20 77 69 6c 6c 20 68 61 76 65 20 61 20 63 6f 73 74 20 6f 66 20 | s.or.higher.will.have.a.cost.of. |
7d8a0 | 31 2e 20 43 6f 73 74 20 6f 66 20 6c 6f 77 65 72 20 62 61 6e 64 77 69 64 74 68 20 6c 69 6e 6b 73 | 1..Cost.of.lower.bandwidth.links |
7d8c0 | 20 77 69 6c 6c 20 62 65 20 73 63 61 6c 65 64 20 77 69 74 68 20 72 65 66 65 72 65 6e 63 65 20 74 | .will.be.scaled.with.reference.t |
7d8e0 | 6f 20 74 68 69 73 20 63 6f 73 74 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 | o.this.cost)..This.command.sets. |
7d900 | 74 68 65 20 72 6f 75 74 65 72 2d 49 44 20 6f 66 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 | the.router-ID.of.the.OSPF.proces |
7d920 | 73 2e 20 54 68 65 20 72 6f 75 74 65 72 2d 49 44 20 6d 61 79 20 62 65 20 61 6e 20 49 50 20 61 64 | s..The.router-ID.may.be.an.IP.ad |
7d940 | 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 2c 20 62 75 74 20 6e 65 65 64 20 6e 6f | dress.of.the.router,.but.need.no |
7d960 | 74 20 62 65 20 e2 80 93 20 69 74 20 63 61 6e 20 62 65 20 61 6e 79 20 61 72 62 69 74 72 61 72 79 | t.be.....it.can.be.any.arbitrary |
7d980 | 20 33 32 62 69 74 20 6e 75 6d 62 65 72 2e 20 48 6f 77 65 76 65 72 20 69 74 20 4d 55 53 54 20 62 | .32bit.number..However.it.MUST.b |
7d9a0 | 65 20 75 6e 69 71 75 65 20 77 69 74 68 69 6e 20 74 68 65 20 65 6e 74 69 72 65 20 4f 53 50 46 20 | e.unique.within.the.entire.OSPF. |
7d9c0 | 64 6f 6d 61 69 6e 20 74 6f 20 74 68 65 20 4f 53 50 46 20 73 70 65 61 6b 65 72 20 e2 80 93 20 62 | domain.to.the.OSPF.speaker.....b |
7d9e0 | 61 64 20 74 68 69 6e 67 73 20 77 69 6c 6c 20 68 61 70 70 65 6e 20 69 66 20 6d 75 6c 74 69 70 6c | ad.things.will.happen.if.multipl |
7da00 | 65 20 4f 53 50 46 20 73 70 65 61 6b 65 72 73 20 61 72 65 20 63 6f 6e 66 69 67 75 72 65 64 20 77 | e.OSPF.speakers.are.configured.w |
7da20 | 69 74 68 20 74 68 65 20 73 61 6d 65 20 72 6f 75 74 65 72 2d 49 44 21 00 54 68 69 73 20 63 6f 6d | ith.the.same.router-ID!.This.com |
7da40 | 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 72 6f 75 74 65 72 2d 49 44 20 6f 66 20 74 68 65 20 4f | mand.sets.the.router-ID.of.the.O |
7da60 | 53 50 46 76 33 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 72 6f 75 74 65 72 2d 49 44 20 6d 61 79 | SPFv3.process..The.router-ID.may |
7da80 | 20 62 65 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 2c | .be.an.IP.address.of.the.router, |
7daa0 | 20 62 75 74 20 6e 65 65 64 20 6e 6f 74 20 62 65 20 e2 80 93 20 69 74 20 63 61 6e 20 62 65 20 61 | .but.need.not.be.....it.can.be.a |
7dac0 | 6e 79 20 61 72 62 69 74 72 61 72 79 20 33 32 62 69 74 20 6e 75 6d 62 65 72 2e 20 48 6f 77 65 76 | ny.arbitrary.32bit.number..Howev |
7dae0 | 65 72 20 69 74 20 4d 55 53 54 20 62 65 20 75 6e 69 71 75 65 20 77 69 74 68 69 6e 20 74 68 65 20 | er.it.MUST.be.unique.within.the. |
7db00 | 65 6e 74 69 72 65 20 4f 53 50 46 76 33 20 64 6f 6d 61 69 6e 20 74 6f 20 74 68 65 20 4f 53 50 46 | entire.OSPFv3.domain.to.the.OSPF |
7db20 | 76 33 20 73 70 65 61 6b 65 72 20 e2 80 93 20 62 61 64 20 74 68 69 6e 67 73 20 77 69 6c 6c 20 68 | v3.speaker.....bad.things.will.h |
7db40 | 61 70 70 65 6e 20 69 66 20 6d 75 6c 74 69 70 6c 65 20 4f 53 50 46 76 33 20 73 70 65 61 6b 65 72 | appen.if.multiple.OSPFv3.speaker |
7db60 | 73 20 61 72 65 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 20 74 68 65 20 73 61 6d 65 20 72 | s.are.configured.with.the.same.r |
7db80 | 6f 75 74 65 72 2d 49 44 21 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 | outer-ID!.This.command.sets.the. |
7dba0 | 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 70 61 73 73 69 76 65 20 6d | specified.interface.to.passive.m |
7dbc0 | 6f 64 65 2e 20 4f 6e 20 70 61 73 73 69 76 65 20 6d 6f 64 65 20 69 6e 74 65 72 66 61 63 65 2c 20 | ode..On.passive.mode.interface,. |
7dbe0 | 61 6c 6c 20 72 65 63 65 69 76 69 6e 67 20 70 61 63 6b 65 74 73 20 61 72 65 20 70 72 6f 63 65 73 | all.receiving.packets.are.proces |
7dc00 | 73 65 64 20 61 73 20 6e 6f 72 6d 61 6c 20 61 6e 64 20 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 | sed.as.normal.and.VyOS.does.not. |
7dc20 | 73 65 6e 64 20 65 69 74 68 65 72 20 6d 75 6c 74 69 63 61 73 74 20 6f 72 20 75 6e 69 63 61 73 74 | send.either.multicast.or.unicast |
7dc40 | 20 52 49 50 20 70 61 63 6b 65 74 73 20 65 78 63 65 70 74 20 74 6f 20 52 49 50 20 6e 65 69 67 68 | .RIP.packets.except.to.RIP.neigh |
7dc60 | 62 6f 72 73 20 73 70 65 63 69 66 69 65 64 20 77 69 74 68 20 6e 65 69 67 68 62 6f 72 20 63 6f 6d | bors.specified.with.neighbor.com |
7dc80 | 6d 61 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 68 6f 75 6c 64 20 4e 4f 54 20 62 65 | mand..This.command.should.NOT.be |
7dca0 | 20 73 65 74 20 6e 6f 72 6d 61 6c 6c 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 68 6f 77 | .set.normally..This.command.show |
7dcc0 | 73 20 62 6f 74 68 20 73 74 61 74 75 73 20 61 6e 64 20 73 74 61 74 69 73 74 69 63 73 20 6f 6e 20 | s.both.status.and.statistics.on. |
7dce0 | 74 68 65 20 73 70 65 63 69 66 69 65 64 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 | the.specified.wireless.interface |
7dd00 | 2e 20 54 68 65 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 | ..The.wireless.interface.identif |
7dd20 | 69 65 72 20 63 61 6e 20 72 61 6e 67 65 20 66 72 6f 6d 20 77 6c 61 6e 30 20 74 6f 20 77 6c 61 6e | ier.can.range.from.wlan0.to.wlan |
7dd40 | 39 39 39 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 42 47 | 999..This.command.specifies.a.BG |
7dd60 | 50 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 69 64 65 6e 74 69 66 69 65 72 2e 20 3c 61 73 6e | P.confederation.identifier..<asn |
7dd80 | 3e 20 69 73 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 74 68 65 20 61 75 74 6f 6e 6f 6d 6f 75 | >.is.the.number.of.the.autonomou |
7dda0 | 73 20 73 79 73 74 65 6d 20 74 68 61 74 20 69 6e 74 65 72 6e 61 6c 6c 79 20 69 6e 63 6c 75 64 65 | s.system.that.internally.include |
7ddc0 | 73 20 6d 75 6c 74 69 70 6c 65 20 73 75 62 2d 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d | s.multiple.sub-autonomous.system |
7dde0 | 73 20 28 61 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | s.(a.confederation)..This.comman |
7de00 | 64 20 73 70 65 63 69 66 69 65 73 20 61 20 42 61 62 65 6c 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 | d.specifies.a.Babel.enabled.inte |
7de20 | 72 66 61 63 65 20 62 79 20 69 6e 74 65 72 66 61 63 65 20 6e 61 6d 65 2e 20 42 6f 74 68 20 74 68 | rface.by.interface.name..Both.th |
7de40 | 65 20 73 65 6e 64 69 6e 67 20 61 6e 64 20 72 65 63 65 69 76 69 6e 67 20 6f 66 20 42 61 62 65 6c | e.sending.and.receiving.of.Babel |
7de60 | 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 62 65 20 65 6e 61 62 6c 65 64 20 6f 6e 20 74 68 65 20 | .packets.will.be.enabled.on.the. |
7de80 | 69 6e 74 65 72 66 61 63 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 74 68 69 73 20 63 6f 6d 6d | interface.specified.in.this.comm |
7dea0 | 61 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 4d 44 | and..This.command.specifies.a.MD |
7dec0 | 35 20 70 61 73 73 77 6f 72 64 20 74 6f 20 62 65 20 75 73 65 64 20 77 69 74 68 20 74 68 65 20 74 | 5.password.to.be.used.with.the.t |
7dee0 | 63 70 20 73 6f 63 6b 65 74 20 74 68 61 74 20 69 73 20 62 65 69 6e 67 20 75 73 65 64 20 74 6f 20 | cp.socket.that.is.being.used.to. |
7df00 | 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 2e 00 54 68 69 73 | connect.to.the.remote.peer..This |
7df20 | 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 52 49 50 20 65 6e 61 62 6c 65 64 | .command.specifies.a.RIP.enabled |
7df40 | 20 69 6e 74 65 72 66 61 63 65 20 62 79 20 69 6e 74 65 72 66 61 63 65 20 6e 61 6d 65 2e 20 42 6f | .interface.by.interface.name..Bo |
7df60 | 74 68 20 74 68 65 20 73 65 6e 64 69 6e 67 20 61 6e 64 20 72 65 63 65 69 76 69 6e 67 20 6f 66 20 | th.the.sending.and.receiving.of. |
7df80 | 52 49 50 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 62 65 20 65 6e 61 62 6c 65 64 20 6f 6e 20 74 | RIP.packets.will.be.enabled.on.t |
7dfa0 | 68 65 20 70 6f 72 74 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 74 68 69 73 20 63 6f 6d 6d 61 6e | he.port.specified.in.this.comman |
7dfc0 | 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 52 49 50 20 | d..This.command.specifies.a.RIP. |
7dfe0 | 6e 65 69 67 68 62 6f 72 2e 20 57 68 65 6e 20 61 20 6e 65 69 67 68 62 6f 72 20 64 6f 65 73 6e e2 | neighbor..When.a.neighbor.doesn. |
7e000 | 80 99 74 20 75 6e 64 65 72 73 74 61 6e 64 20 6d 75 6c 74 69 63 61 73 74 2c 20 74 68 69 73 20 63 | ..t.understand.multicast,.this.c |
7e020 | 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 73 70 65 63 69 66 79 20 6e 65 69 67 68 62 | ommand.is.used.to.specify.neighb |
7e040 | 6f 72 73 2e 20 49 6e 20 73 6f 6d 65 20 63 61 73 65 73 2c 20 6e 6f 74 20 61 6c 6c 20 72 6f 75 74 | ors..In.some.cases,.not.all.rout |
7e060 | 65 72 73 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 75 6e 64 65 72 73 74 61 6e 64 20 6d | ers.will.be.able.to.understand.m |
7e080 | 75 6c 74 69 63 61 73 74 69 6e 67 2c 20 77 68 65 72 65 20 70 61 63 6b 65 74 73 20 61 72 65 20 73 | ulticasting,.where.packets.are.s |
7e0a0 | 65 6e 74 20 74 6f 20 61 20 6e 65 74 77 6f 72 6b 20 6f 72 20 61 20 67 72 6f 75 70 20 6f 66 20 61 | ent.to.a.network.or.a.group.of.a |
7e0c0 | 64 64 72 65 73 73 65 73 2e 20 49 6e 20 61 20 73 69 74 75 61 74 69 6f 6e 20 77 68 65 72 65 20 61 | ddresses..In.a.situation.where.a |
7e0e0 | 20 6e 65 69 67 68 62 6f 72 20 63 61 6e 6e 6f 74 20 70 72 6f 63 65 73 73 20 6d 75 6c 74 69 63 61 | .neighbor.cannot.process.multica |
7e100 | 73 74 20 70 61 63 6b 65 74 73 2c 20 69 74 20 69 73 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 65 | st.packets,.it.is.necessary.to.e |
7e120 | 73 74 61 62 6c 69 73 68 20 61 20 64 69 72 65 63 74 20 6c 69 6e 6b 20 62 65 74 77 65 65 6e 20 72 | stablish.a.direct.link.between.r |
7e140 | 6f 75 74 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 | outers..This.command.specifies.a |
7e160 | 20 64 65 66 61 75 6c 74 20 77 65 69 67 68 74 20 76 61 6c 75 65 20 66 6f 72 20 74 68 65 20 6e 65 | .default.weight.value.for.the.ne |
7e180 | 69 67 68 62 6f 72 e2 80 99 73 20 72 6f 75 74 65 73 2e 20 54 68 65 20 6e 75 6d 62 65 72 20 72 61 | ighbor...s.routes..The.number.ra |
7e1a0 | 6e 67 65 20 69 73 20 31 20 74 6f 20 36 35 35 33 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | nge.is.1.to.65535..This.command. |
7e1c0 | 73 70 65 63 69 66 69 65 73 20 61 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 70 72 | specifies.a.maximum.number.of.pr |
7e1e0 | 65 66 69 78 65 73 20 77 65 20 63 61 6e 20 72 65 63 65 69 76 65 20 66 72 6f 6d 20 61 20 67 69 76 | efixes.we.can.receive.from.a.giv |
7e200 | 65 6e 20 70 65 65 72 2e 20 49 66 20 74 68 69 73 20 6e 75 6d 62 65 72 20 69 73 20 65 78 63 65 65 | en.peer..If.this.number.is.excee |
7e220 | 64 65 64 2c 20 74 68 65 20 42 47 50 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 64 65 73 | ded,.the.BGP.session.will.be.des |
7e240 | 74 72 6f 79 65 64 2e 20 54 68 65 20 6e 75 6d 62 65 72 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f | troyed..The.number.range.is.1.to |
7e260 | 20 34 32 39 34 39 36 37 32 39 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 | .4294967295..This.command.specif |
7e280 | 69 65 73 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 20 61 73 20 70 61 73 73 69 76 65 20 62 79 | ies.all.interfaces.as.passive.by |
7e2a0 | 20 64 65 66 61 75 6c 74 2e 20 42 65 63 61 75 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 | .default..Because.this.command.c |
7e2c0 | 68 61 6e 67 65 73 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6c 6f 67 69 63 20 74 | hanges.the.configuration.logic.t |
7e2e0 | 6f 20 61 20 64 65 66 61 75 6c 74 20 70 61 73 73 69 76 65 3b 20 74 68 65 72 65 66 6f 72 65 2c 20 | o.a.default.passive;.therefore,. |
7e300 | 69 6e 74 65 72 66 61 63 65 73 20 77 68 65 72 65 20 72 6f 75 74 65 72 20 61 64 6a 61 63 65 6e 63 | interfaces.where.router.adjacenc |
7e320 | 69 65 73 20 61 72 65 20 65 78 70 65 63 74 65 64 20 6e 65 65 64 20 74 6f 20 62 65 20 63 6f 6e 66 | ies.are.expected.need.to.be.conf |
7e340 | 69 67 75 72 65 64 20 77 69 74 68 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 70 61 73 73 69 76 65 | igured.with.the.:cfgcmd:`passive |
7e360 | 2d 69 6e 74 65 72 66 61 63 65 2d 65 78 63 6c 75 64 65 60 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 | -interface-exclude`.command..Thi |
7e380 | 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 | s.command.specifies.all.interfac |
7e3a0 | 65 73 20 74 6f 20 70 61 73 73 69 76 65 20 6d 6f 64 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | es.to.passive.mode..This.command |
7e3c0 | 20 73 70 65 63 69 66 69 65 73 20 61 6e 20 61 67 67 72 65 67 61 74 65 20 61 64 64 72 65 73 73 20 | .specifies.an.aggregate.address. |
7e3e0 | 61 6e 64 20 70 72 6f 76 69 64 65 73 20 74 68 61 74 20 6c 6f 6e 67 65 72 2d 70 72 65 66 69 78 65 | and.provides.that.longer-prefixe |
7e400 | 73 20 69 6e 73 69 64 65 20 6f 66 20 74 68 65 20 61 67 67 72 65 67 61 74 65 20 61 64 64 72 65 73 | s.inside.of.the.aggregate.addres |
7e420 | 73 20 61 72 65 20 73 75 70 70 72 65 73 73 65 64 20 62 65 66 6f 72 65 20 73 65 6e 64 69 6e 67 20 | s.are.suppressed.before.sending. |
7e440 | 42 47 50 20 75 70 64 61 74 65 73 20 6f 75 74 20 74 6f 20 70 65 65 72 73 2e 00 54 68 69 73 20 63 | BGP.updates.out.to.peers..This.c |
7e460 | 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 6e 20 61 67 67 72 65 67 61 74 65 20 61 64 | ommand.specifies.an.aggregate.ad |
7e480 | 64 72 65 73 73 20 77 69 74 68 20 61 20 6d 61 74 68 65 6d 61 74 69 63 61 6c 20 73 65 74 20 6f 66 | dress.with.a.mathematical.set.of |
7e4a0 | 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 73 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e | .autonomous.systems..This.comman |
7e4c0 | 64 20 73 75 6d 6d 61 72 69 7a 65 73 20 74 68 65 20 41 53 5f 50 41 54 48 20 61 74 74 72 69 62 75 | d.summarizes.the.AS_PATH.attribu |
7e4e0 | 74 65 73 20 6f 66 20 61 6c 6c 20 74 68 65 20 69 6e 64 69 76 69 64 75 61 6c 20 72 6f 75 74 65 73 | tes.of.all.the.individual.routes |
7e500 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 6e 20 61 67 67 72 | ..This.command.specifies.an.aggr |
7e520 | 65 67 61 74 65 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 61 | egate.address..The.router.will.a |
7e540 | 6c 73 6f 20 61 6e 6e 6f 75 6e 63 65 20 6c 6f 6e 67 65 72 2d 70 72 65 66 69 78 65 73 20 69 6e 73 | lso.announce.longer-prefixes.ins |
7e560 | 69 64 65 20 6f 66 20 74 68 65 20 61 67 67 72 65 67 61 74 65 20 61 64 64 72 65 73 73 2e 00 54 68 | ide.of.the.aggregate.address..Th |
7e580 | 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 74 74 72 69 62 75 74 65 73 20 | is.command.specifies.attributes. |
7e5a0 | 74 6f 20 62 65 20 6c 65 66 74 20 75 6e 63 68 61 6e 67 65 64 20 66 6f 72 20 61 64 76 65 72 74 69 | to.be.left.unchanged.for.adverti |
7e5c0 | 73 65 6d 65 6e 74 73 20 73 65 6e 74 20 74 6f 20 61 20 70 65 65 72 20 6f 72 20 70 65 65 72 20 67 | sements.sent.to.a.peer.or.peer.g |
7e5e0 | 72 6f 75 70 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 63 69 72 | roup..This.command.specifies.cir |
7e600 | 63 75 69 74 20 74 79 70 65 20 66 6f 72 20 69 6e 74 65 72 66 61 63 65 3a 00 54 68 69 73 20 63 6f | cuit.type.for.interface:.This.co |
7e620 | 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 63 6c 75 73 74 65 72 20 49 44 20 77 68 69 63 68 | mmand.specifies.cluster.ID.which |
7e640 | 20 69 64 65 6e 74 69 66 69 65 73 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 72 6f 75 74 | .identifies.a.collection.of.rout |
7e660 | 65 20 72 65 66 6c 65 63 74 6f 72 73 20 61 6e 64 20 74 68 65 69 72 20 63 6c 69 65 6e 74 73 2c 20 | e.reflectors.and.their.clients,. |
7e680 | 61 6e 64 20 69 73 20 75 73 65 64 20 62 79 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 73 20 | and.is.used.by.route.reflectors. |
7e6a0 | 74 6f 20 61 76 6f 69 64 20 6c 6f 6f 70 69 6e 67 2e 20 42 79 20 64 65 66 61 75 6c 74 20 63 6c 75 | to.avoid.looping..By.default.clu |
7e6c0 | 73 74 65 72 20 49 44 20 69 73 20 73 65 74 20 74 6f 20 74 68 65 20 42 47 50 20 72 6f 75 74 65 72 | ster.ID.is.set.to.the.BGP.router |
7e6e0 | 20 69 64 20 76 61 6c 75 65 2c 20 62 75 74 20 63 61 6e 20 62 65 20 73 65 74 20 74 6f 20 61 6e 20 | .id.value,.but.can.be.set.to.an. |
7e700 | 61 72 62 69 74 72 61 72 79 20 33 32 2d 62 69 74 20 76 61 6c 75 65 2e 00 54 68 69 73 20 63 6f 6d | arbitrary.32-bit.value..This.com |
7e720 | 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 68 6f 6c 64 2d 74 69 6d 65 20 69 6e 20 73 65 63 6f | mand.specifies.hold-time.in.seco |
7e740 | 6e 64 73 2e 20 54 68 65 20 74 69 6d 65 72 20 72 61 6e 67 65 20 69 73 20 34 20 74 6f 20 36 35 35 | nds..The.timer.range.is.4.to.655 |
7e760 | 33 35 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 38 30 20 73 65 63 | 35..The.default.value.is.180.sec |
7e780 | 6f 6e 64 2e 20 49 66 20 79 6f 75 20 73 65 74 20 76 61 6c 75 65 20 74 6f 20 30 20 56 79 4f 53 20 | ond..If.you.set.value.to.0.VyOS. |
7e7a0 | 77 69 6c 6c 20 6e 6f 74 20 68 6f 6c 64 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | will.not.hold.routes..This.comma |
7e7c0 | 6e 64 20 73 70 65 63 69 66 69 65 73 20 69 6e 74 65 72 66 61 63 65 20 61 73 20 70 61 73 73 69 76 | nd.specifies.interface.as.passiv |
7e7e0 | 65 2e 20 50 61 73 73 69 76 65 20 69 6e 74 65 72 66 61 63 65 20 61 64 76 65 72 74 69 73 65 73 20 | e..Passive.interface.advertises. |
7e800 | 69 74 73 20 61 64 64 72 65 73 73 2c 20 62 75 74 20 64 6f 65 73 20 6e 6f 74 20 72 75 6e 20 74 68 | its.address,.but.does.not.run.th |
7e820 | 65 20 4f 53 50 46 20 70 72 6f 74 6f 63 6f 6c 20 28 61 64 6a 61 63 65 6e 63 69 65 73 20 61 72 65 | e.OSPF.protocol.(adjacencies.are |
7e840 | 20 6e 6f 74 20 66 6f 72 6d 65 64 20 61 6e 64 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 61 72 | .not.formed.and.hello.packets.ar |
7e860 | 65 20 6e 6f 74 20 67 65 6e 65 72 61 74 65 64 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | e.not.generated)..This.command.s |
7e880 | 70 65 63 69 66 69 65 73 20 6b 65 65 70 2d 61 6c 69 76 65 20 74 69 6d 65 20 69 6e 20 73 65 63 6f | pecifies.keep-alive.time.in.seco |
7e8a0 | 6e 64 73 2e 20 54 68 65 20 74 69 6d 65 72 20 63 61 6e 20 72 61 6e 67 65 20 66 72 6f 6d 20 34 20 | nds..The.timer.can.range.from.4. |
7e8c0 | 74 6f 20 36 35 35 33 35 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 | to.65535..The.default.value.is.6 |
7e8e0 | 30 20 73 65 63 6f 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 | 0.second..This.command.specifies |
7e900 | 20 6d 65 74 72 69 63 20 28 4d 45 44 29 20 66 6f 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 | .metric.(MED).for.redistributed. |
7e920 | 72 6f 75 74 65 73 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f | routes..The.metric.range.is.0.to |
7e940 | 20 34 32 39 34 39 36 37 32 39 35 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 | .4294967295..There.are.six.modes |
7e960 | 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 63 6f 6e | .available.for.route.source:.con |
7e980 | 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 | nected,.kernel,.ospf,.rip,.stati |
7e9a0 | 63 2c 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 | c,.table..This.command.specifies |
7e9c0 | 20 6d 65 74 72 69 63 20 66 6f 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 | .metric.for.redistributed.routes |
7e9e0 | 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 | .from.the.given.route.source..Th |
7ea00 | 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 | ere.are.five.modes.available.for |
7ea20 | 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b | .route.source:.bgp,.connected,.k |
7ea40 | 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 73 74 61 74 69 63 2e 20 54 68 65 20 6d 65 74 72 69 63 20 | ernel,.ospf,.static..The.metric. |
7ea60 | 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 36 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | range.is.1.to.16..This.command.s |
7ea80 | 70 65 63 69 66 69 65 73 20 6d 65 74 72 69 63 20 66 6f 72 20 72 65 64 69 73 74 72 69 62 75 74 65 | pecifies.metric.for.redistribute |
7eaa0 | 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f | d.routes.from.the.given.route.so |
7eac0 | 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c | urce..There.are.five.modes.avail |
7eae0 | 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e | able.for.route.source:.bgp,.conn |
7eb00 | 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 20 54 68 65 20 | ected,.kernel,.rip,.static..The. |
7eb20 | 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 36 37 37 37 32 31 34 2e 00 54 | metric.range.is.1.to.16777214..T |
7eb40 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 6d 65 74 72 69 63 20 66 6f 72 | his.command.specifies.metric.for |
7eb60 | 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 67 | .redistributed.routes.from.the.g |
7eb80 | 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 78 | iven.route.source..There.are.six |
7eba0 | 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 | .modes.available.for.route.sourc |
7ebc0 | 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c | e:.bgp,.connected,.kernel,.ospf, |
7ebe0 | 20 72 69 70 2c 20 73 74 61 74 69 63 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 | .rip,.static..The.metric.range.i |
7ec00 | 73 20 31 20 74 6f 20 31 36 37 37 37 32 31 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 | s.1.to.16777215..This.command.sp |
7ec20 | 65 63 69 66 69 65 73 20 6d 65 74 72 69 63 20 74 79 70 65 20 66 6f 72 20 72 65 64 69 73 74 72 69 | ecifies.metric.type.for.redistri |
7ec40 | 62 75 74 65 64 20 72 6f 75 74 65 73 2e 20 44 69 66 66 65 72 65 6e 63 65 20 62 65 74 77 65 65 6e | buted.routes..Difference.between |
7ec60 | 20 74 77 6f 20 6d 65 74 72 69 63 20 74 79 70 65 73 20 74 68 61 74 20 6d 65 74 72 69 63 20 74 79 | .two.metric.types.that.metric.ty |
7ec80 | 70 65 20 31 20 69 73 20 61 20 6d 65 74 72 69 63 20 77 68 69 63 68 20 69 73 20 22 63 6f 6d 6d 65 | pe.1.is.a.metric.which.is."comme |
7eca0 | 6e 73 75 72 61 62 6c 65 22 20 77 69 74 68 20 69 6e 6e 65 72 20 4f 53 50 46 20 6c 69 6e 6b 73 2e | nsurable".with.inner.OSPF.links. |
7ecc0 | 20 57 68 65 6e 20 63 61 6c 63 75 6c 61 74 69 6e 67 20 61 20 6d 65 74 72 69 63 20 74 6f 20 74 68 | .When.calculating.a.metric.to.th |
7ece0 | 65 20 65 78 74 65 72 6e 61 6c 20 64 65 73 74 69 6e 61 74 69 6f 6e 2c 20 74 68 65 20 66 75 6c 6c | e.external.destination,.the.full |
7ed00 | 20 70 61 74 68 20 6d 65 74 72 69 63 20 69 73 20 63 61 6c 63 75 6c 61 74 65 64 20 61 73 20 61 20 | .path.metric.is.calculated.as.a. |
7ed20 | 6d 65 74 72 69 63 20 73 75 6d 20 70 61 74 68 20 6f 66 20 61 20 72 6f 75 74 65 72 20 77 68 69 63 | metric.sum.path.of.a.router.whic |
7ed40 | 68 20 68 61 64 20 61 64 76 65 72 74 69 73 65 64 20 74 68 69 73 20 6c 69 6e 6b 20 70 6c 75 73 20 | h.had.advertised.this.link.plus. |
7ed60 | 74 68 65 20 6c 69 6e 6b 20 6d 65 74 72 69 63 2e 20 54 68 75 73 2c 20 61 20 72 6f 75 74 65 20 77 | the.link.metric..Thus,.a.route.w |
7ed80 | 69 74 68 20 74 68 65 20 6c 65 61 73 74 20 73 75 6d 6d 61 72 79 20 6d 65 74 72 69 63 20 77 69 6c | ith.the.least.summary.metric.wil |
7eda0 | 6c 20 62 65 20 73 65 6c 65 63 74 65 64 2e 20 49 66 20 65 78 74 65 72 6e 61 6c 20 6c 69 6e 6b 20 | l.be.selected..If.external.link. |
7edc0 | 69 73 20 61 64 76 65 72 74 69 73 65 64 20 77 69 74 68 20 6d 65 74 72 69 63 20 74 79 70 65 20 32 | is.advertised.with.metric.type.2 |
7ede0 | 20 74 68 65 20 70 61 74 68 20 69 73 20 73 65 6c 65 63 74 65 64 20 77 68 69 63 68 20 6c 69 65 73 | .the.path.is.selected.which.lies |
7ee00 | 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f 75 74 65 72 20 77 68 69 63 68 20 61 64 76 65 72 74 | .through.the.router.which.advert |
7ee20 | 69 73 65 64 20 74 68 69 73 20 6c 69 6e 6b 20 77 69 74 68 20 74 68 65 20 6c 65 61 73 74 20 6d 65 | ised.this.link.with.the.least.me |
7ee40 | 74 72 69 63 20 64 65 73 70 69 74 65 20 6f 66 20 74 68 65 20 66 61 63 74 20 74 68 61 74 20 69 6e | tric.despite.of.the.fact.that.in |
7ee60 | 74 65 72 6e 61 6c 20 70 61 74 68 20 74 6f 20 74 68 69 73 20 72 6f 75 74 65 72 20 69 73 20 6c 6f | ternal.path.to.this.router.is.lo |
7ee80 | 6e 67 65 72 20 28 77 69 74 68 20 6d 6f 72 65 20 63 6f 73 74 29 2e 20 48 6f 77 65 76 65 72 2c 20 | nger.(with.more.cost)..However,. |
7eea0 | 69 66 20 74 77 6f 20 72 6f 75 74 65 72 73 20 61 64 76 65 72 74 69 73 65 64 20 61 6e 20 65 78 74 | if.two.routers.advertised.an.ext |
7eec0 | 65 72 6e 61 6c 20 6c 69 6e 6b 20 61 6e 64 20 77 69 74 68 20 6d 65 74 72 69 63 20 74 79 70 65 20 | ernal.link.and.with.metric.type. |
7eee0 | 32 20 74 68 65 20 70 72 65 66 65 72 65 6e 63 65 20 69 73 20 67 69 76 65 6e 20 74 6f 20 74 68 65 | 2.the.preference.is.given.to.the |
7ef00 | 20 70 61 74 68 20 77 68 69 63 68 20 6c 69 65 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f 75 | .path.which.lies.through.the.rou |
7ef20 | 74 65 72 20 77 69 74 68 20 61 20 73 68 6f 72 74 65 72 20 69 6e 74 65 72 6e 61 6c 20 70 61 74 68 | ter.with.a.shorter.internal.path |
7ef40 | 2e 20 49 66 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 72 6f 75 74 65 72 73 20 61 64 76 65 72 | ..If.two.different.routers.adver |
7ef60 | 74 69 73 65 64 20 74 77 6f 20 6c 69 6e 6b 73 20 74 6f 20 74 68 65 20 73 61 6d 65 20 65 78 74 65 | tised.two.links.to.the.same.exte |
7ef80 | 72 6e 61 6c 20 64 65 73 74 69 6d 61 74 69 6f 6e 20 62 75 74 20 77 69 74 68 20 64 69 66 66 65 72 | rnal.destimation.but.with.differ |
7efa0 | 65 6e 74 20 6d 65 74 72 69 63 20 74 79 70 65 2c 20 6d 65 74 72 69 63 20 74 79 70 65 20 31 20 69 | ent.metric.type,.metric.type.1.i |
7efc0 | 73 20 70 72 65 66 65 72 72 65 64 2e 20 49 66 20 74 79 70 65 20 6f 66 20 61 20 6d 65 74 72 69 63 | s.preferred..If.type.of.a.metric |
7efe0 | 20 6c 65 66 74 20 75 6e 64 65 66 69 6e 65 64 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 | .left.undefined.the.router.will. |
7f000 | 63 6f 6e 73 69 64 65 72 20 74 68 65 73 65 20 65 78 74 65 72 6e 61 6c 20 6c 69 6e 6b 73 20 74 6f | consider.these.external.links.to |
7f020 | 20 68 61 76 65 20 61 20 64 65 66 61 75 6c 74 20 6d 65 74 72 69 63 20 74 79 70 65 20 32 2e 00 54 | .have.a.default.metric.type.2..T |
7f040 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 6e 65 74 77 6f 72 6b 20 74 79 | his.command.specifies.network.ty |
7f060 | 70 65 20 74 6f 20 50 6f 69 6e 74 2d 74 6f 2d 50 6f 69 6e 74 2e 20 54 68 65 20 64 65 66 61 75 6c | pe.to.Point-to-Point..The.defaul |
7f080 | 74 20 6e 65 74 77 6f 72 6b 20 74 79 70 65 20 69 73 20 62 72 6f 61 64 63 61 73 74 2e 00 54 68 69 | t.network.type.is.broadcast..Thi |
7f0a0 | 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 42 47 50 20 63 6f 6e | s.command.specifies.that.BGP.con |
7f0c0 | 73 69 64 65 72 73 20 74 68 65 20 4d 45 44 20 77 68 65 6e 20 63 6f 6d 70 61 72 69 6e 67 20 72 6f | siders.the.MED.when.comparing.ro |
7f0e0 | 75 74 65 73 20 6f 72 69 67 69 6e 61 74 65 64 20 66 72 6f 6d 20 64 69 66 66 65 72 65 6e 74 20 73 | utes.originated.from.different.s |
7f100 | 75 62 2d 41 53 73 20 77 69 74 68 69 6e 20 74 68 65 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 | ub-ASs.within.the.confederation. |
7f120 | 74 6f 20 77 68 69 63 68 20 74 68 69 73 20 42 47 50 20 73 70 65 61 6b 65 72 20 62 65 6c 6f 6e 67 | to.which.this.BGP.speaker.belong |
7f140 | 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 73 74 61 74 65 2c 20 77 68 65 72 65 20 74 68 65 20 | s..The.default.state,.where.the. |
7f160 | 4d 45 44 20 61 74 74 72 69 62 75 74 65 20 69 73 20 6e 6f 74 20 63 6f 6e 73 69 64 65 72 65 64 2e | MED.attribute.is.not.considered. |
7f180 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 42 47 50 | .This.command.specifies.that.BGP |
7f1a0 | 20 64 65 63 69 73 69 6f 6e 20 70 72 6f 63 65 73 73 20 73 68 6f 75 6c 64 20 63 6f 6e 73 69 64 65 | .decision.process.should.conside |
7f1c0 | 72 20 70 61 74 68 73 20 6f 66 20 65 71 75 61 6c 20 41 53 5f 50 41 54 48 20 6c 65 6e 67 74 68 20 | r.paths.of.equal.AS_PATH.length. |
7f1e0 | 63 61 6e 64 69 64 61 74 65 73 20 66 6f 72 20 6d 75 6c 74 69 70 61 74 68 20 63 6f 6d 70 75 74 61 | candidates.for.multipath.computa |
7f200 | 74 69 6f 6e 2e 20 57 69 74 68 6f 75 74 20 74 68 65 20 6b 6e 6f 62 2c 20 74 68 65 20 65 6e 74 69 | tion..Without.the.knob,.the.enti |
7f220 | 72 65 20 41 53 5f 50 41 54 48 20 6d 75 73 74 20 6d 61 74 63 68 20 66 6f 72 20 6d 75 6c 74 69 70 | re.AS_PATH.must.match.for.multip |
7f240 | 61 74 68 20 63 6f 6d 70 75 74 61 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 | ath.computation..This.command.sp |
7f260 | 65 63 69 66 69 65 73 20 74 68 61 74 20 61 20 72 6f 75 74 65 20 77 69 74 68 20 61 20 4d 45 44 20 | ecifies.that.a.route.with.a.MED. |
7f280 | 69 73 20 61 6c 77 61 79 73 20 63 6f 6e 73 69 64 65 72 65 64 20 74 6f 20 62 65 20 62 65 74 74 65 | is.always.considered.to.be.bette |
7f2a0 | 72 20 74 68 61 6e 20 61 20 72 6f 75 74 65 20 77 69 74 68 6f 75 74 20 61 20 4d 45 44 20 62 79 20 | r.than.a.route.without.a.MED.by. |
7f2c0 | 63 61 75 73 69 6e 67 20 74 68 65 20 6d 69 73 73 69 6e 67 20 4d 45 44 20 61 74 74 72 69 62 75 74 | causing.the.missing.MED.attribut |
7f2e0 | 65 20 74 6f 20 68 61 76 65 20 61 20 76 61 6c 75 65 20 6f 66 20 69 6e 66 69 6e 69 74 79 2e 20 54 | e.to.have.a.value.of.infinity..T |
7f300 | 68 65 20 64 65 66 61 75 6c 74 20 73 74 61 74 65 2c 20 77 68 65 72 65 20 74 68 65 20 6d 69 73 73 | he.default.state,.where.the.miss |
7f320 | 69 6e 67 20 4d 45 44 20 61 74 74 72 69 62 75 74 65 20 69 73 20 63 6f 6e 73 69 64 65 72 65 64 20 | ing.MED.attribute.is.considered. |
7f340 | 74 6f 20 68 61 76 65 20 61 20 76 61 6c 75 65 20 6f 66 20 7a 65 72 6f 2e 00 54 68 69 73 20 63 6f | to.have.a.value.of.zero..This.co |
7f360 | 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 72 6f 75 74 65 20 75 70 64 61 74 | mmand.specifies.that.route.updat |
7f380 | 65 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 74 68 69 73 20 6e 65 69 67 68 62 6f 72 20 77 | es.received.from.this.neighbor.w |
7f3a0 | 69 6c 6c 20 62 65 20 73 74 6f 72 65 64 20 75 6e 6d 6f 64 69 66 69 65 64 2c 20 72 65 67 61 72 64 | ill.be.stored.unmodified,.regard |
7f3c0 | 6c 65 73 73 20 6f 66 20 74 68 65 20 69 6e 62 6f 75 6e 64 20 70 6f 6c 69 63 79 2e 20 57 68 65 6e | less.of.the.inbound.policy..When |
7f3e0 | 20 69 6e 62 6f 75 6e 64 20 73 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 | .inbound.soft.reconfiguration.is |
7f400 | 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 20 73 74 6f 72 65 64 20 75 70 64 61 74 65 73 20 61 72 65 | .enabled,.the.stored.updates.are |
7f420 | 20 70 72 6f 63 65 73 73 65 64 20 62 79 20 74 68 65 20 6e 65 77 20 70 6f 6c 69 63 79 20 63 6f 6e | .processed.by.the.new.policy.con |
7f440 | 66 69 67 75 72 61 74 69 6f 6e 20 74 6f 20 63 72 65 61 74 65 20 6e 65 77 20 69 6e 62 6f 75 6e 64 | figuration.to.create.new.inbound |
7f460 | 20 75 70 64 61 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 | .updates..This.command.specifies |
7f480 | 20 74 68 61 74 20 73 69 6d 70 6c 65 20 70 61 73 73 77 6f 72 64 20 61 75 74 68 65 6e 74 69 63 61 | .that.simple.password.authentica |
7f4a0 | 74 69 6f 6e 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 67 69 76 65 | tion.should.be.used.for.the.give |
7f4c0 | 6e 20 61 72 65 61 2e 20 54 68 65 20 70 61 73 73 77 6f 72 64 20 6d 75 73 74 20 61 6c 73 6f 20 62 | n.area..The.password.must.also.b |
7f4e0 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 20 70 65 72 2d 69 6e 74 65 72 66 61 63 65 20 | e.configured.on.a.per-interface. |
7f500 | 62 61 73 69 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 | basis..This.command.specifies.th |
7f520 | 61 74 20 74 68 65 20 63 6f 6d 6d 75 6e 69 74 79 20 61 74 74 72 69 62 75 74 65 20 73 68 6f 75 6c | at.the.community.attribute.shoul |
7f540 | 64 20 6e 6f 74 20 62 65 20 73 65 6e 74 20 69 6e 20 72 6f 75 74 65 20 75 70 64 61 74 65 73 20 74 | d.not.be.sent.in.route.updates.t |
7f560 | 6f 20 61 20 70 65 65 72 2e 20 42 79 20 64 65 66 61 75 6c 74 20 63 6f 6d 6d 75 6e 69 74 79 20 61 | o.a.peer..By.default.community.a |
7f580 | 74 74 72 69 62 75 74 65 20 69 73 20 73 65 6e 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | ttribute.is.sent..This.command.s |
7f5a0 | 70 65 63 69 66 69 65 73 20 74 68 61 74 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 63 6f 6e 66 | pecifies.that.the.length.of.conf |
7f5c0 | 65 64 65 72 61 74 69 6f 6e 20 70 61 74 68 20 73 65 74 73 20 61 6e 64 20 73 65 71 75 65 6e 63 65 | ederation.path.sets.and.sequence |
7f5e0 | 73 20 73 68 6f 75 6c 64 20 62 65 20 74 61 6b 65 6e 20 69 6e 74 6f 20 61 63 63 6f 75 6e 74 20 64 | s.should.be.taken.into.account.d |
7f600 | 75 72 69 6e 67 20 74 68 65 20 42 47 50 20 62 65 73 74 20 70 61 74 68 20 64 65 63 69 73 69 6f 6e | uring.the.BGP.best.path.decision |
7f620 | 20 70 72 6f 63 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 | .process..This.command.specifies |
7f640 | 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 6e 65 69 67 68 62 6f 72 69 | .the.IP.address.of.the.neighbori |
7f660 | 6e 67 20 64 65 76 69 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 | ng.device..This.command.specifie |
7f680 | 73 20 74 68 65 20 4f 53 50 46 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 28 73 29 2e | s.the.OSPF.enabled.interface(s). |
7f6a0 | 20 49 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 68 61 73 20 61 6e 20 61 64 64 72 65 73 73 | .If.the.interface.has.an.address |
7f6c0 | 20 66 72 6f 6d 20 64 65 66 69 6e 65 64 20 72 61 6e 67 65 20 74 68 65 6e 20 74 68 65 20 63 6f 6d | .from.defined.range.then.the.com |
7f6e0 | 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 4f 53 50 46 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 | mand.enables.OSPF.on.this.interf |
7f700 | 61 63 65 20 73 6f 20 72 6f 75 74 65 72 20 63 61 6e 20 70 72 6f 76 69 64 65 20 6e 65 74 77 6f 72 | ace.so.router.can.provide.networ |
7f720 | 6b 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 74 68 65 20 6f 74 68 65 72 20 6f 73 70 66 20 | k.information.to.the.other.ospf. |
7f740 | 72 6f 75 74 65 72 73 20 76 69 61 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 | routers.via.this.interface..This |
7f760 | 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 4f 53 50 46 76 33 20 65 6e | .command.specifies.the.OSPFv3.en |
7f780 | 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 | abled.interface..This.command.is |
7f7a0 | 20 61 6c 73 6f 20 75 73 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 4f 53 50 46 20 70 72 | .also.used.to.enable.the.OSPF.pr |
7f7c0 | 6f 63 65 73 73 2e 20 54 68 65 20 61 72 65 61 20 6e 75 6d 62 65 72 20 63 61 6e 20 62 65 20 73 70 | ocess..The.area.number.can.be.sp |
7f7e0 | 65 63 69 66 69 65 64 20 69 6e 20 64 65 63 69 6d 61 6c 20 6e 6f 74 61 74 69 6f 6e 20 69 6e 20 74 | ecified.in.decimal.notation.in.t |
7f800 | 68 65 20 72 61 6e 67 65 20 66 72 6f 6d 20 30 20 74 6f 20 34 32 39 34 39 36 37 32 39 35 2e 20 4f | he.range.from.0.to.4294967295..O |
7f820 | 72 20 69 74 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 64 6f 74 74 65 64 20 | r.it.can.be.specified.in.dotted. |
7f840 | 64 65 63 69 6d 61 6c 20 6e 6f 74 61 74 69 6f 6e 20 73 69 6d 69 6c 61 72 20 74 6f 20 69 70 20 61 | decimal.notation.similar.to.ip.a |
7f860 | 64 64 72 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 | ddress..This.command.specifies.t |
7f880 | 68 65 20 61 72 65 61 20 74 6f 20 62 65 20 61 20 4e 53 53 41 20 54 6f 74 61 6c 6c 79 20 53 74 75 | he.area.to.be.a.NSSA.Totally.Stu |
7f8a0 | 62 20 41 72 65 61 2e 20 41 42 52 73 20 66 6f 72 20 73 75 63 68 20 61 6e 20 61 72 65 61 20 64 6f | b.Area..ABRs.for.such.an.area.do |
7f8c0 | 20 6e 6f 74 20 6e 65 65 64 20 74 6f 20 70 61 73 73 20 4e 65 74 77 6f 72 6b 2d 53 75 6d 6d 61 72 | .not.need.to.pass.Network-Summar |
7f8e0 | 79 20 28 74 79 70 65 2d 33 29 20 4c 53 41 73 20 28 65 78 63 65 70 74 20 74 68 65 20 64 65 66 61 | y.(type-3).LSAs.(except.the.defa |
7f900 | 75 6c 74 20 73 75 6d 6d 61 72 79 20 72 6f 75 74 65 29 2c 20 41 53 42 52 2d 53 75 6d 6d 61 72 79 | ult.summary.route),.ASBR-Summary |
7f920 | 20 4c 53 41 73 20 28 74 79 70 65 2d 34 29 20 61 6e 64 20 41 53 2d 45 78 74 65 72 6e 61 6c 20 4c | .LSAs.(type-4).and.AS-External.L |
7f940 | 53 41 73 20 28 74 79 70 65 2d 35 29 20 69 6e 74 6f 20 74 68 65 20 61 72 65 61 2e 20 42 75 74 20 | SAs.(type-5).into.the.area..But. |
7f960 | 54 79 70 65 2d 37 20 4c 53 41 73 20 74 68 61 74 20 63 6f 6e 76 65 72 74 20 74 6f 20 54 79 70 65 | Type-7.LSAs.that.convert.to.Type |
7f980 | 2d 35 20 61 74 20 74 68 65 20 4e 53 53 41 20 41 42 52 20 61 72 65 20 61 6c 6c 6f 77 65 64 2e 00 | -5.at.the.NSSA.ABR.are.allowed.. |
7f9a0 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 61 72 65 61 20 | This.command.specifies.the.area. |
7f9c0 | 74 6f 20 62 65 20 61 20 4e 6f 74 20 53 6f 20 53 74 75 62 62 79 20 41 72 65 61 2e 20 45 78 74 65 | to.be.a.Not.So.Stubby.Area..Exte |
7f9e0 | 72 6e 61 6c 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 69 6d 70 6f | rnal.routing.information.is.impo |
7fa00 | 72 74 65 64 20 69 6e 74 6f 20 61 6e 20 4e 53 53 41 20 69 6e 20 54 79 70 65 2d 37 20 4c 53 41 73 | rted.into.an.NSSA.in.Type-7.LSAs |
7fa20 | 2e 20 54 79 70 65 2d 37 20 4c 53 41 73 20 61 72 65 20 73 69 6d 69 6c 61 72 20 74 6f 20 54 79 70 | ..Type-7.LSAs.are.similar.to.Typ |
7fa40 | 65 2d 35 20 41 53 2d 65 78 74 65 72 6e 61 6c 20 4c 53 41 73 2c 20 65 78 63 65 70 74 20 74 68 61 | e-5.AS-external.LSAs,.except.tha |
7fa60 | 74 20 74 68 65 79 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 66 6c 6f 6f 64 65 64 20 69 6e 74 6f 20 | t.they.can.only.be.flooded.into. |
7fa80 | 74 68 65 20 4e 53 53 41 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 66 75 72 74 68 65 72 20 70 72 | the.NSSA..In.order.to.further.pr |
7faa0 | 6f 70 61 67 61 74 65 20 74 68 65 20 4e 53 53 41 20 65 78 74 65 72 6e 61 6c 20 69 6e 66 6f 72 6d | opagate.the.NSSA.external.inform |
7fac0 | 61 74 69 6f 6e 2c 20 74 68 65 20 54 79 70 65 2d 37 20 4c 53 41 20 6d 75 73 74 20 62 65 20 74 72 | ation,.the.Type-7.LSA.must.be.tr |
7fae0 | 61 6e 73 6c 61 74 65 64 20 74 6f 20 61 20 54 79 70 65 2d 35 20 41 53 2d 65 78 74 65 72 6e 61 6c | anslated.to.a.Type-5.AS-external |
7fb00 | 2d 4c 53 41 20 62 79 20 74 68 65 20 4e 53 53 41 20 41 42 52 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | -LSA.by.the.NSSA.ABR..This.comma |
7fb20 | 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 61 72 65 61 20 74 6f 20 62 65 20 61 20 53 74 | nd.specifies.the.area.to.be.a.St |
7fb40 | 75 62 20 41 72 65 61 2e 20 54 68 61 74 20 69 73 2c 20 61 6e 20 61 72 65 61 20 77 68 65 72 65 20 | ub.Area..That.is,.an.area.where. |
7fb60 | 6e 6f 20 72 6f 75 74 65 72 20 6f 72 69 67 69 6e 61 74 65 73 20 72 6f 75 74 65 73 20 65 78 74 65 | no.router.originates.routes.exte |
7fb80 | 72 6e 61 6c 20 74 6f 20 4f 53 50 46 20 61 6e 64 20 68 65 6e 63 65 20 61 6e 20 61 72 65 61 20 77 | rnal.to.OSPF.and.hence.an.area.w |
7fba0 | 68 65 72 65 20 61 6c 6c 20 65 78 74 65 72 6e 61 6c 20 72 6f 75 74 65 73 20 61 72 65 20 76 69 61 | here.all.external.routes.are.via |
7fbc0 | 20 74 68 65 20 41 42 52 28 73 29 2e 20 48 65 6e 63 65 2c 20 41 42 52 73 20 66 6f 72 20 73 75 63 | .the.ABR(s)..Hence,.ABRs.for.suc |
7fbe0 | 68 20 61 6e 20 61 72 65 61 20 64 6f 20 6e 6f 74 20 6e 65 65 64 20 74 6f 20 70 61 73 73 20 41 53 | h.an.area.do.not.need.to.pass.AS |
7fc00 | 2d 45 78 74 65 72 6e 61 6c 20 4c 53 41 73 20 28 74 79 70 65 2d 35 29 20 6f 72 20 41 53 42 52 2d | -External.LSAs.(type-5).or.ASBR- |
7fc20 | 53 75 6d 6d 61 72 79 20 4c 53 41 73 20 28 74 79 70 65 2d 34 29 20 69 6e 74 6f 20 74 68 65 20 61 | Summary.LSAs.(type-4).into.the.a |
7fc40 | 72 65 61 2e 20 54 68 65 79 20 6e 65 65 64 20 6f 6e 6c 79 20 70 61 73 73 20 4e 65 74 77 6f 72 6b | rea..They.need.only.pass.Network |
7fc60 | 2d 53 75 6d 6d 61 72 79 20 28 74 79 70 65 2d 33 29 20 4c 53 41 73 20 69 6e 74 6f 20 73 75 63 68 | -Summary.(type-3).LSAs.into.such |
7fc80 | 20 61 6e 20 61 72 65 61 2c 20 61 6c 6f 6e 67 20 77 69 74 68 20 61 20 64 65 66 61 75 6c 74 2d 72 | .an.area,.along.with.a.default-r |
7fca0 | 6f 75 74 65 20 73 75 6d 6d 61 72 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 | oute.summary..This.command.speci |
7fcc0 | 66 69 65 73 20 74 68 65 20 61 72 65 61 20 74 6f 20 62 65 20 61 20 54 6f 74 61 6c 6c 79 20 53 74 | fies.the.area.to.be.a.Totally.St |
7fce0 | 75 62 20 41 72 65 61 2e 20 49 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 73 74 75 62 20 61 72 65 | ub.Area..In.addition.to.stub.are |
7fd00 | 61 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 74 68 69 73 20 61 72 65 61 20 74 79 70 65 20 70 72 65 | a.limitations.this.area.type.pre |
7fd20 | 76 65 6e 74 73 20 61 6e 20 41 42 52 20 66 72 6f 6d 20 69 6e 6a 65 63 74 69 6e 67 20 4e 65 74 77 | vents.an.ABR.from.injecting.Netw |
7fd40 | 6f 72 6b 2d 53 75 6d 6d 61 72 79 20 28 74 79 70 65 2d 33 29 20 4c 53 41 73 20 69 6e 74 6f 20 74 | ork-Summary.(type-3).LSAs.into.t |
7fd60 | 68 65 20 73 70 65 63 69 66 69 65 64 20 73 74 75 62 20 61 72 65 61 2e 20 4f 6e 6c 79 20 64 65 66 | he.specified.stub.area..Only.def |
7fd80 | 61 75 6c 74 20 73 75 6d 6d 61 72 79 20 72 6f 75 74 65 20 69 73 20 61 6c 6c 6f 77 65 64 2e 00 54 | ault.summary.route.is.allowed..T |
7fda0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 62 61 73 65 20 72 | his.command.specifies.the.base.r |
7fdc0 | 65 63 65 69 76 65 20 63 6f 73 74 20 66 6f 72 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 20 | eceive.cost.for.this.interface.. |
7fde0 | 46 6f 72 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 73 2c 20 69 74 20 73 70 65 63 | For.wireless.interfaces,.it.spec |
7fe00 | 69 66 69 65 73 20 74 68 65 20 6d 75 6c 74 69 70 6c 69 65 72 20 75 73 65 64 20 66 6f 72 20 63 6f | ifies.the.multiplier.used.for.co |
7fe20 | 6d 70 75 74 69 6e 67 20 74 68 65 20 45 54 58 20 72 65 63 65 70 74 69 6f 6e 20 63 6f 73 74 20 28 | mputing.the.ETX.reception.cost.( |
7fe40 | 64 65 66 61 75 6c 74 20 32 35 36 29 3b 20 66 6f 72 20 77 69 72 65 64 20 69 6e 74 65 72 66 61 63 | default.256);.for.wired.interfac |
7fe60 | 65 73 2c 20 69 74 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 63 6f 73 74 20 74 68 61 74 20 77 | es,.it.specifies.the.cost.that.w |
7fe80 | 69 6c 6c 20 62 65 20 61 64 76 65 72 74 69 73 65 64 20 74 6f 20 6e 65 69 67 68 62 6f 75 72 73 2e | ill.be.advertised.to.neighbours. |
7fea0 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 64 65 63 61 | .This.command.specifies.the.deca |
7fec0 | 79 20 66 61 63 74 6f 72 20 66 6f 72 20 74 68 65 20 65 78 70 6f 6e 65 6e 74 69 61 6c 20 6d 6f 76 | y.factor.for.the.exponential.mov |
7fee0 | 69 6e 67 20 61 76 65 72 61 67 65 20 6f 66 20 52 54 54 20 73 61 6d 70 6c 65 73 2c 20 69 6e 20 75 | ing.average.of.RTT.samples,.in.u |
7ff00 | 6e 69 74 73 20 6f 66 20 31 2f 32 35 36 2e 20 48 69 67 68 65 72 20 76 61 6c 75 65 73 20 64 69 73 | nits.of.1/256..Higher.values.dis |
7ff20 | 63 61 72 64 20 6f 6c 64 20 73 61 6d 70 6c 65 73 20 66 61 73 74 65 72 2e 20 54 68 65 20 64 65 66 | card.old.samples.faster..The.def |
7ff40 | 61 75 6c 74 20 69 73 20 34 32 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 | ault.is.42..This.command.specifi |
7ff60 | 65 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 6c 6f 63 61 6c 20 70 72 65 66 65 72 65 6e 63 65 20 | es.the.default.local.preference. |
7ff80 | 76 61 6c 75 65 2e 20 54 68 65 20 6c 6f 63 61 6c 20 70 72 65 66 65 72 65 6e 63 65 20 72 61 6e 67 | value..The.local.preference.rang |
7ffa0 | 65 20 69 73 20 30 20 74 6f 20 34 32 39 34 39 36 37 32 39 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | e.is.0.to.4294967295..This.comma |
7ffc0 | 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 6d 65 74 72 69 63 20 | nd.specifies.the.default.metric. |
7ffe0 | 76 61 6c 75 65 20 6f 66 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 2e 20 54 | value.of.redistributed.routes..T |
80000 | 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 31 36 37 37 37 32 31 34 | he.metric.range.is.0.to.16777214 |
80020 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 67 61 72 | ..This.command.specifies.the.gar |
80040 | 62 61 67 65 2d 63 6f 6c 6c 65 63 74 69 6f 6e 20 74 69 6d 65 72 2e 20 55 70 6f 6e 20 65 78 70 69 | bage-collection.timer..Upon.expi |
80060 | 72 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 67 61 72 62 61 67 65 2d 63 6f 6c 6c 65 63 74 69 6f 6e | ration.of.the.garbage-collection |
80080 | 20 74 69 6d 65 72 2c 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 66 69 6e 61 6c 6c 79 20 72 65 6d | .timer,.the.route.is.finally.rem |
800a0 | 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 54 68 65 | oved.from.the.routing.table..The |
800c0 | 20 74 69 6d 65 20 72 61 6e 67 65 20 69 73 20 35 20 74 6f 20 32 31 34 37 34 38 33 36 34 37 2e 20 | .time.range.is.5.to.2147483647.. |
800e0 | 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 32 30 20 73 65 63 6f 6e 64 73 | The.default.value.is.120.seconds |
80100 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 67 69 76 | ..This.command.specifies.the.giv |
80120 | 65 6e 20 6e 65 69 67 68 62 6f 72 20 61 73 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 20 63 | en.neighbor.as.route.reflector.c |
80140 | 6c 69 65 6e 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 | lient..This.command.specifies.th |
80160 | 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 69 6d 65 2c 20 69 6e 20 73 65 63 6f 6e 64 73 2c 20 62 65 | e.length.of.time,.in.seconds,.be |
80180 | 66 6f 72 65 20 74 68 65 20 72 6f 75 74 69 6e 67 20 64 65 76 69 63 65 20 73 65 6e 64 73 20 68 65 | fore.the.routing.device.sends.he |
801a0 | 6c 6c 6f 20 70 61 63 6b 65 74 73 20 6f 75 74 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 | llo.packets.out.of.the.interface |
801c0 | 20 62 65 66 6f 72 65 20 69 74 20 65 73 74 61 62 6c 69 73 68 65 73 20 61 64 6a 61 63 65 6e 63 79 | .before.it.establishes.adjacency |
801e0 | 20 77 69 74 68 20 61 20 6e 65 69 67 68 62 6f 72 2e 20 54 68 65 20 72 61 6e 67 65 20 69 73 20 31 | .with.a.neighbor..The.range.is.1 |
80200 | 20 74 6f 20 36 35 35 33 35 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 | .to.65535.seconds..The.default.v |
80220 | 61 6c 75 65 20 69 73 20 36 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | alue.is.60.seconds..This.command |
80240 | 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 52 54 54 2c 20 69 6e 20 6d | .specifies.the.maximum.RTT,.in.m |
80260 | 69 6c 6c 69 73 65 63 6f 6e 64 73 2c 20 61 62 6f 76 65 20 77 68 69 63 68 20 77 65 20 64 6f 6e 27 | illiseconds,.above.which.we.don' |
80280 | 74 20 69 6e 63 72 65 61 73 65 20 74 68 65 20 63 6f 73 74 20 74 6f 20 61 20 6e 65 69 67 68 62 6f | t.increase.the.cost.to.a.neighbo |
802a0 | 75 72 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 32 30 20 6d 73 2e 00 54 68 69 73 20 | ur..The.default.is.120.ms..This. |
802c0 | 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 63 6f | command.specifies.the.maximum.co |
802e0 | 73 74 20 61 64 64 65 64 20 74 6f 20 61 20 6e 65 69 67 68 62 6f 75 72 20 62 65 63 61 75 73 65 20 | st.added.to.a.neighbour.because. |
80300 | 6f 66 20 52 54 54 2c 20 69 2e 65 2e 20 77 68 65 6e 20 74 68 65 20 52 54 54 20 69 73 20 68 69 67 | of.RTT,.i.e..when.the.RTT.is.hig |
80320 | 68 65 72 20 6f 72 20 65 71 75 61 6c 20 74 68 61 6e 20 72 74 74 2d 6d 61 78 2e 20 54 68 65 20 64 | her.or.equal.than.rtt-max..The.d |
80340 | 65 66 61 75 6c 74 20 69 73 20 31 35 30 2e 20 53 65 74 74 69 6e 67 20 69 74 20 74 6f 20 30 20 65 | efault.is.150..Setting.it.to.0.e |
80360 | 66 66 65 63 74 69 76 65 6c 79 20 64 69 73 61 62 6c 65 73 20 74 68 65 20 75 73 65 20 6f 66 20 61 | ffectively.disables.the.use.of.a |
80380 | 20 52 54 54 2d 62 61 73 65 64 20 63 6f 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 | .RTT-based.cost..This.command.sp |
803a0 | 65 63 69 66 69 65 73 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 52 54 54 2c 20 69 6e 20 6d 69 6c 6c | ecifies.the.minimum.RTT,.in.mill |
803c0 | 69 73 65 63 6f 6e 64 73 2c 20 73 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 77 68 69 63 68 20 77 65 | iseconds,.starting.from.which.we |
803e0 | 20 69 6e 63 72 65 61 73 65 20 74 68 65 20 63 6f 73 74 20 74 6f 20 61 20 6e 65 69 67 68 62 6f 75 | .increase.the.cost.to.a.neighbou |
80400 | 72 2e 20 54 68 65 20 61 64 64 69 74 69 6f 6e 61 6c 20 63 6f 73 74 20 69 73 20 6c 69 6e 65 61 72 | r..The.additional.cost.is.linear |
80420 | 20 69 6e 20 28 72 74 74 20 2d 20 72 74 74 2d 6d 69 6e 29 2e 20 54 68 65 20 64 65 66 61 75 6c 74 | .in.(rtt.-.rtt-min)..The.default |
80440 | 20 69 73 20 31 30 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 | .is.10.ms..This.command.specifie |
80460 | 73 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 72 6f 75 74 65 20 61 64 76 65 72 74 69 73 65 6d 65 6e | s.the.minimum.route.advertisemen |
80480 | 74 20 69 6e 74 65 72 76 61 6c 20 66 6f 72 20 74 68 65 20 70 65 65 72 2e 20 54 68 65 20 69 6e 74 | t.interval.for.the.peer..The.int |
804a0 | 65 72 76 61 6c 20 76 61 6c 75 65 20 69 73 20 30 20 74 6f 20 36 30 30 20 73 65 63 6f 6e 64 73 2c | erval.value.is.0.to.600.seconds, |
804c0 | 20 77 69 74 68 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 20 | .with.the.default.advertisement. |
804e0 | 69 6e 74 65 72 76 61 6c 20 62 65 69 6e 67 20 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | interval.being.0..This.command.s |
80500 | 70 65 63 69 66 69 65 73 20 74 68 65 20 72 6f 75 74 65 72 20 70 72 69 6f 72 69 74 79 20 76 61 6c | pecifies.the.router.priority.val |
80520 | 75 65 20 6f 66 20 74 68 65 20 6e 6f 6e 62 72 6f 61 64 63 61 73 74 20 6e 65 69 67 68 62 6f 72 20 | ue.of.the.nonbroadcast.neighbor. |
80540 | 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 73 | associated.with.the.IP.address.s |
80560 | 70 65 63 69 66 69 65 64 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 30 2e 20 54 68 69 73 | pecified..The.default.is.0..This |
80580 | 20 6b 65 79 77 6f 72 64 20 64 6f 65 73 20 6e 6f 74 20 61 70 70 6c 79 20 74 6f 20 70 6f 69 6e 74 | .keyword.does.not.apply.to.point |
805a0 | 2d 74 6f 2d 6d 75 6c 74 69 70 6f 69 6e 74 20 69 6e 74 65 72 66 61 63 65 73 2e 00 54 68 69 73 20 | -to-multipoint.interfaces..This. |
805c0 | 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 72 6f 75 74 65 72 2d 49 44 2e | command.specifies.the.router-ID. |
805e0 | 20 49 66 20 72 6f 75 74 65 72 20 49 44 20 69 73 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 69 | .If.router.ID.is.not.specified.i |
80600 | 74 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 68 69 67 68 65 73 74 20 69 6e 74 65 72 66 61 63 65 | t.will.use.the.highest.interface |
80620 | 20 49 50 20 61 64 64 72 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 | .IP.address..This.command.specif |
80640 | 69 65 73 20 74 68 65 20 74 69 6d 65 20 63 6f 6e 73 74 61 6e 74 2c 20 69 6e 20 73 65 63 6f 6e 64 | ies.the.time.constant,.in.second |
80660 | 73 2c 20 6f 66 20 74 68 65 20 73 6d 6f 6f 74 68 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 20 75 73 | s,.of.the.smoothing.algorithm.us |
80680 | 65 64 20 66 6f 72 20 69 6d 70 6c 65 6d 65 6e 74 69 6e 67 20 68 79 73 74 65 72 65 73 69 73 2e 20 | ed.for.implementing.hysteresis.. |
806a0 | 4c 61 72 67 65 72 20 76 61 6c 75 65 73 20 72 65 64 75 63 65 20 72 6f 75 74 65 20 6f 73 63 69 6c | Larger.values.reduce.route.oscil |
806c0 | 6c 61 74 69 6f 6e 20 61 74 20 74 68 65 20 63 6f 73 74 20 6f 66 20 76 65 72 79 20 73 6c 69 67 68 | lation.at.the.cost.of.very.sligh |
806e0 | 74 6c 79 20 69 6e 63 72 65 61 73 69 6e 67 20 63 6f 6e 76 65 72 67 65 6e 63 65 20 74 69 6d 65 2e | tly.increasing.convergence.time. |
80700 | 20 54 68 65 20 76 61 6c 75 65 20 30 20 64 69 73 61 62 6c 65 73 20 68 79 73 74 65 72 65 73 69 73 | .The.value.0.disables.hysteresis |
80720 | 2c 20 61 6e 64 20 69 73 20 73 75 69 74 61 62 6c 65 20 66 6f 72 20 77 69 72 65 64 20 6e 65 74 77 | ,.and.is.suitable.for.wired.netw |
80740 | 6f 72 6b 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 34 20 73 2e 00 54 68 69 73 20 63 | orks..The.default.is.4.s..This.c |
80760 | 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 74 69 6d 65 20 69 6e 20 6d 69 6c | ommand.specifies.the.time.in.mil |
80780 | 6c 69 73 65 63 6f 6e 64 73 20 61 66 74 65 72 20 77 68 69 63 68 20 61 6e 20 27 69 6d 70 6f 72 74 | liseconds.after.which.an.'import |
807a0 | 61 6e 74 27 20 72 65 71 75 65 73 74 20 6f 72 20 75 70 64 61 74 65 20 77 69 6c 6c 20 62 65 20 72 | ant'.request.or.update.will.be.r |
807c0 | 65 73 65 6e 74 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 32 30 30 30 20 6d 73 2e 00 54 | esent..The.default.is.2000.ms..T |
807e0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 74 69 6d 65 20 69 | his.command.specifies.the.time.i |
80800 | 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 62 65 74 77 65 65 6e 20 74 77 6f 20 73 63 68 65 64 | n.milliseconds.between.two.sched |
80820 | 75 6c 65 64 20 68 65 6c 6c 6f 73 2e 20 4f 6e 20 77 69 72 65 64 20 6c 69 6e 6b 73 2c 20 42 61 62 | uled.hellos..On.wired.links,.Bab |
80840 | 65 6c 20 6e 6f 74 69 63 65 73 20 61 20 6c 69 6e 6b 20 66 61 69 6c 75 72 65 20 77 69 74 68 69 6e | el.notices.a.link.failure.within |
80860 | 20 74 77 6f 20 68 65 6c 6c 6f 20 69 6e 74 65 72 76 61 6c 73 3b 20 6f 6e 20 77 69 72 65 6c 65 73 | .two.hello.intervals;.on.wireles |
80880 | 73 20 6c 69 6e 6b 73 2c 20 74 68 65 20 6c 69 6e 6b 20 71 75 61 6c 69 74 79 20 76 61 6c 75 65 20 | s.links,.the.link.quality.value. |
808a0 | 69 73 20 72 65 65 73 74 69 6d 61 74 65 64 20 61 74 20 65 76 65 72 79 20 68 65 6c 6c 6f 20 69 6e | is.reestimated.at.every.hello.in |
808c0 | 74 65 72 76 61 6c 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 34 30 30 30 20 6d 73 2e 00 | terval..The.default.is.4000.ms.. |
808e0 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 74 69 6d 65 20 | This.command.specifies.the.time. |
80900 | 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 62 65 74 77 65 65 6e 20 74 77 6f 20 73 63 68 65 | in.milliseconds.between.two.sche |
80920 | 64 75 6c 65 64 20 75 70 64 61 74 65 73 2e 20 53 69 6e 63 65 20 42 61 62 65 6c 20 6d 61 6b 65 73 | duled.updates..Since.Babel.makes |
80940 | 20 65 78 74 65 6e 73 69 76 65 20 75 73 65 20 6f 66 20 74 72 69 67 67 65 72 65 64 20 75 70 64 61 | .extensive.use.of.triggered.upda |
80960 | 74 65 73 2c 20 74 68 69 73 20 63 61 6e 20 62 65 20 73 65 74 20 74 6f 20 66 61 69 72 6c 79 20 68 | tes,.this.can.be.set.to.fairly.h |
80980 | 69 67 68 20 76 61 6c 75 65 73 20 6f 6e 20 6c 69 6e 6b 73 20 77 69 74 68 20 6c 69 74 74 6c 65 20 | igh.values.on.links.with.little. |
809a0 | 70 61 63 6b 65 74 20 6c 6f 73 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 32 30 30 30 | packet.loss..The.default.is.2000 |
809c0 | 30 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 | 0.ms..This.command.specifies.the |
809e0 | 20 74 69 6d 65 6f 75 74 20 74 69 6d 65 72 2e 20 55 70 6f 6e 20 65 78 70 69 72 61 74 69 6f 6e 20 | .timeout.timer..Upon.expiration. |
80a00 | 6f 66 20 74 68 65 20 74 69 6d 65 6f 75 74 2c 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 6e 6f 20 | of.the.timeout,.the.route.is.no. |
80a20 | 6c 6f 6e 67 65 72 20 76 61 6c 69 64 3b 20 68 6f 77 65 76 65 72 2c 20 69 74 20 69 73 20 72 65 74 | longer.valid;.however,.it.is.ret |
80a40 | 61 69 6e 65 64 20 69 6e 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 66 6f 72 20 61 | ained.in.the.routing.table.for.a |
80a60 | 20 73 68 6f 72 74 20 74 69 6d 65 20 73 6f 20 74 68 61 74 20 6e 65 69 67 68 62 6f 72 73 20 63 61 | .short.time.so.that.neighbors.ca |
80a80 | 6e 20 62 65 20 6e 6f 74 69 66 69 65 64 20 74 68 61 74 20 74 68 65 20 72 6f 75 74 65 20 68 61 73 | n.be.notified.that.the.route.has |
80aa0 | 20 62 65 65 6e 20 64 72 6f 70 70 65 64 2e 20 54 68 65 20 74 69 6d 65 20 72 61 6e 67 65 20 69 73 | .been.dropped..The.time.range.is |
80ac0 | 20 35 20 74 6f 20 32 31 34 37 34 38 33 36 34 37 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 | .5.to.2147483647..The.default.va |
80ae0 | 6c 75 65 20 69 73 20 31 38 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | lue.is.180.seconds..This.command |
80b00 | 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 75 70 64 61 74 65 20 74 69 6d 65 72 2e 20 45 76 65 | .specifies.the.update.timer..Eve |
80b20 | 72 79 20 75 70 64 61 74 65 20 74 69 6d 65 72 20 73 65 63 6f 6e 64 73 2c 20 74 68 65 20 52 49 50 | ry.update.timer.seconds,.the.RIP |
80b40 | 20 70 72 6f 63 65 73 73 20 69 73 20 61 77 61 6b 65 6e 65 64 20 74 6f 20 73 65 6e 64 20 61 6e 20 | .process.is.awakened.to.send.an. |
80b60 | 75 6e 73 6f 6c 69 63 69 74 65 64 20 72 65 73 70 6f 6e 73 65 20 6d 65 73 73 61 67 65 20 63 6f 6e | unsolicited.response.message.con |
80b80 | 74 61 69 6e 69 6e 67 20 74 68 65 20 63 6f 6d 70 6c 65 74 65 20 72 6f 75 74 69 6e 67 20 74 61 62 | taining.the.complete.routing.tab |
80ba0 | 6c 65 20 74 6f 20 61 6c 6c 20 6e 65 69 67 68 62 6f 72 69 6e 67 20 52 49 50 20 72 6f 75 74 65 72 | le.to.all.neighboring.RIP.router |
80bc0 | 73 2e 20 54 68 65 20 74 69 6d 65 20 72 61 6e 67 65 20 69 73 20 35 20 74 6f 20 32 31 34 37 34 38 | s..The.time.range.is.5.to.214748 |
80be0 | 33 36 34 37 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 33 30 20 73 65 | 3647..The.default.value.is.30.se |
80c00 | 63 6f 6e 64 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 77 68 | conds..This.command.specifies.wh |
80c20 | 65 74 68 65 72 20 74 6f 20 70 65 72 66 6f 72 6d 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 6f | ether.to.perform.split-horizon.o |
80c40 | 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 53 70 65 63 69 66 79 69 6e 67 20 6e 6f 20 62 | n.the.interface..Specifying.no.b |
80c60 | 61 62 65 6c 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 69 73 20 61 6c 77 61 79 73 20 63 6f 72 | abel.split-horizon.is.always.cor |
80c80 | 72 65 63 74 2c 20 77 68 69 6c 65 20 62 61 62 65 6c 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 | rect,.while.babel.split-horizon. |
80ca0 | 69 73 20 61 6e 20 6f 70 74 69 6d 69 73 61 74 69 6f 6e 20 74 68 61 74 20 73 68 6f 75 6c 64 20 6f | is.an.optimisation.that.should.o |
80cc0 | 6e 6c 79 20 62 65 20 75 73 65 64 20 6f 6e 20 73 79 6d 6d 65 74 72 69 63 20 61 6e 64 20 74 72 61 | nly.be.used.on.symmetric.and.tra |
80ce0 | 6e 73 69 74 69 76 65 20 28 77 69 72 65 64 29 20 6e 65 74 77 6f 72 6b 73 2e 00 54 68 69 73 20 63 | nsitive.(wired).networks..This.c |
80d00 | 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 79 20 74 68 61 74 20 4f 53 50 46 20 70 61 63 6b 65 74 73 | ommand.specify.that.OSPF.packets |
80d20 | 20 6d 75 73 74 20 62 65 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 77 69 74 68 20 4d 44 35 20 | .must.be.authenticated.with.MD5. |
80d40 | 48 4d 41 43 73 20 77 69 74 68 69 6e 20 74 68 65 20 67 69 76 65 6e 20 61 72 65 61 2e 20 4b 65 79 | HMACs.within.the.given.area..Key |
80d60 | 69 6e 67 20 6d 61 74 65 72 69 61 6c 20 6d 75 73 74 20 61 6c 73 6f 20 62 65 20 63 6f 6e 66 69 67 | ing.material.must.also.be.config |
80d80 | 75 72 65 64 20 6f 6e 20 61 20 70 65 72 2d 69 6e 74 65 72 66 61 63 65 20 62 61 73 69 73 2e 00 54 | ured.on.a.per-interface.basis..T |
80da0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 79 73 20 74 68 61 74 20 4d 44 35 20 48 4d | his.command.specifys.that.MD5.HM |
80dc0 | 41 43 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 75 73 65 64 20 6f | AC.authentication.must.be.used.o |
80de0 | 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 20 49 74 20 73 65 74 73 20 4f 53 50 46 20 61 | n.this.interface..It.sets.OSPF.a |
80e00 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6b 65 79 20 74 6f 20 61 20 63 72 79 70 74 6f 67 72 61 | uthentication.key.to.a.cryptogra |
80e20 | 70 68 69 63 20 70 61 73 73 77 6f 72 64 2e 20 4b 65 79 2d 69 64 20 69 64 65 6e 74 69 66 69 65 73 | phic.password..Key-id.identifies |
80e40 | 20 73 65 63 72 65 74 20 6b 65 79 20 75 73 65 64 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 6d | .secret.key.used.to.create.the.m |
80e60 | 65 73 73 61 67 65 20 64 69 67 65 73 74 2e 20 54 68 69 73 20 49 44 20 69 73 20 70 61 72 74 20 6f | essage.digest..This.ID.is.part.o |
80e80 | 66 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 61 6e 64 20 6d 75 73 74 20 62 65 20 63 6f 6e 73 69 | f.the.protocol.and.must.be.consi |
80ea0 | 73 74 65 6e 74 20 61 63 72 6f 73 73 20 72 6f 75 74 65 72 73 20 6f 6e 20 61 20 6c 69 6e 6b 2e 20 | stent.across.routers.on.a.link.. |
80ec0 | 54 68 65 20 6b 65 79 20 63 61 6e 20 62 65 20 6c 6f 6e 67 20 75 70 20 74 6f 20 31 36 20 63 68 61 | The.key.can.be.long.up.to.16.cha |
80ee0 | 72 73 20 28 6c 61 72 67 65 72 20 73 74 72 69 6e 67 73 20 77 69 6c 6c 20 62 65 20 74 72 75 6e 63 | rs.(larger.strings.will.be.trunc |
80f00 | 61 74 65 64 29 2c 20 61 6e 64 20 69 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 | ated),.and.is.associated.with.th |
80f20 | 65 20 67 69 76 65 6e 20 6b 65 79 2d 69 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 75 6d | e.given.key-id..This.command.sum |
80f40 | 6d 61 72 69 7a 65 73 20 69 6e 74 72 61 20 61 72 65 61 20 70 61 74 68 73 20 66 72 6f 6d 20 73 70 | marizes.intra.area.paths.from.sp |
80f60 | 65 63 69 66 69 65 64 20 61 72 65 61 20 69 6e 74 6f 20 6f 6e 65 20 54 79 70 65 2d 33 20 49 6e 74 | ecified.area.into.one.Type-3.Int |
80f80 | 65 72 2d 41 72 65 61 20 50 72 65 66 69 78 20 4c 53 41 20 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 | er-Area.Prefix.LSA.announced.to. |
80fa0 | 6f 74 68 65 72 20 61 72 65 61 73 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 | other.areas..This.command.can.be |
80fc0 | 20 75 73 65 64 20 6f 6e 6c 79 20 69 6e 20 41 42 52 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | .used.only.in.ABR..This.command. |
80fe0 | 73 75 6d 6d 61 72 69 7a 65 73 20 69 6e 74 72 61 20 61 72 65 61 20 70 61 74 68 73 20 66 72 6f 6d | summarizes.intra.area.paths.from |
81000 | 20 73 70 65 63 69 66 69 65 64 20 61 72 65 61 20 69 6e 74 6f 20 6f 6e 65 20 73 75 6d 6d 61 72 79 | .specified.area.into.one.summary |
81020 | 2d 4c 53 41 20 28 54 79 70 65 2d 33 29 20 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 6f 74 68 65 72 | -LSA.(Type-3).announced.to.other |
81040 | 20 61 72 65 61 73 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 | .areas..This.command.can.be.used |
81060 | 20 6f 6e 6c 79 20 69 6e 20 41 42 52 20 61 6e 64 20 4f 4e 4c 59 20 72 6f 75 74 65 72 2d 4c 53 41 | .only.in.ABR.and.ONLY.router-LSA |
81080 | 73 20 28 54 79 70 65 2d 31 29 20 61 6e 64 20 6e 65 74 77 6f 72 6b 2d 4c 53 41 73 20 28 54 79 70 | s.(Type-1).and.network-LSAs.(Typ |
810a0 | 65 2d 32 29 20 28 69 2e 65 2e 20 4c 53 41 73 20 77 69 74 68 20 73 63 6f 70 65 20 61 72 65 61 29 | e-2).(i.e..LSAs.with.scope.area) |
810c0 | 20 63 61 6e 20 62 65 20 73 75 6d 6d 61 72 69 7a 65 64 2e 20 41 53 2d 65 78 74 65 72 6e 61 6c 2d | .can.be.summarized..AS-external- |
810e0 | 4c 53 41 73 20 28 54 79 70 65 2d 35 29 20 63 61 6e e2 80 99 74 20 62 65 20 73 75 6d 6d 61 72 69 | LSAs.(Type-5).can...t.be.summari |
81100 | 7a 65 64 20 2d 20 74 68 65 69 72 20 73 63 6f 70 65 20 69 73 20 41 53 2e 20 54 68 65 20 6f 70 74 | zed.-.their.scope.is.AS..The.opt |
81120 | 69 6f 6e 61 6c 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d 64 3a 60 63 6f 73 74 60 20 73 70 | ional.argument.:cfgcmd:`cost`.sp |
81140 | 65 63 69 66 69 65 73 20 74 68 65 20 61 67 67 72 65 67 61 74 65 64 20 6c 69 6e 6b 20 6d 65 74 72 | ecifies.the.aggregated.link.metr |
81160 | 69 63 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 31 36 37 | ic..The.metric.range.is.0.to.167 |
81180 | 37 37 32 31 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 73 75 72 65 20 6e 6f | 77215..This.command.to.ensure.no |
811a0 | 74 20 61 64 76 65 72 74 69 73 65 20 74 68 65 20 73 75 6d 6d 61 72 79 20 6c 73 61 20 66 6f 72 20 | t.advertise.the.summary.lsa.for. |
811c0 | 74 68 65 20 6d 61 74 63 68 65 64 20 65 78 74 65 72 6e 61 6c 20 4c 53 41 73 2e 00 54 68 69 73 20 | the.matched.external.LSAs..This. |
811e0 | 63 6f 6d 6d 61 6e 64 20 75 73 65 73 20 74 6f 20 63 6c 65 61 72 20 42 47 50 20 72 6f 75 74 65 20 | command.uses.to.clear.BGP.route. |
81200 | 64 61 6d 70 65 6e 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6e 64 20 74 6f 20 75 6e 73 | dampening.information.and.to.uns |
81220 | 75 70 70 72 65 73 73 20 73 75 70 70 72 65 73 73 65 64 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 | uppress.suppressed.routes..This. |
81240 | 63 6f 6d 6d 61 6e 64 20 77 61 73 20 69 6e 74 72 6f 64 75 63 65 64 20 69 6e 20 56 79 4f 53 20 31 | command.was.introduced.in.VyOS.1 |
81260 | 2e 34 20 2d 20 69 74 20 77 61 73 20 70 72 65 76 69 6f 75 73 6c 79 20 63 61 6c 6c 65 64 3a 20 60 | .4.-.it.was.previously.called:.` |
81280 | 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 6f 70 74 69 6f 6e 73 20 69 6e 74 65 72 66 61 63 65 20 | `set.firewall.options.interface. |
812a0 | 3c 6e 61 6d 65 3e 20 61 64 6a 75 73 74 2d 6d 73 73 20 3c 76 61 6c 75 65 3e 60 60 00 54 68 69 73 | <name>.adjust-mss.<value>``.This |
812c0 | 20 63 6f 6d 6d 61 6e 64 20 77 61 73 20 69 6e 74 72 6f 64 75 63 65 64 20 69 6e 20 56 79 4f 53 20 | .command.was.introduced.in.VyOS. |
812e0 | 31 2e 34 20 2d 20 69 74 20 77 61 73 20 70 72 65 76 69 6f 75 73 6c 79 20 63 61 6c 6c 65 64 3a 20 | 1.4.-.it.was.previously.called:. |
81300 | 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 6f 70 74 69 6f 6e 73 20 69 6e 74 65 72 66 61 63 65 | ``set.firewall.options.interface |
81320 | 20 3c 6e 61 6d 65 3e 20 61 64 6a 75 73 74 2d 6d 73 73 36 20 3c 76 61 6c 75 65 3e 60 60 00 54 68 | .<name>.adjust-mss6.<value>``.Th |
81340 | 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 63 68 61 6e 67 65 20 74 68 65 20 68 6f 6c 64 20 | is.command.will.change.the.hold. |
81360 | 64 6f 77 6e 20 76 61 6c 75 65 20 66 6f 72 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 | down.value.for.IGP-LDP.synchroni |
81380 | 7a 61 74 69 6f 6e 20 64 75 72 69 6e 67 20 63 6f 6e 76 65 72 67 65 6e 63 65 2f 69 6e 74 65 72 66 | zation.during.convergence/interf |
813a0 | 61 63 65 20 66 6c 61 70 20 65 76 65 6e 74 73 2c 20 62 75 74 20 66 6f 72 20 74 68 69 73 20 69 6e | ace.flap.events,.but.for.this.in |
813c0 | 74 65 72 66 61 63 65 20 6f 6e 6c 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 | terface.only..This.command.will. |
813e0 | 63 68 61 6e 67 65 20 74 68 65 20 68 6f 6c 64 20 64 6f 77 6e 20 76 61 6c 75 65 20 67 6c 6f 62 61 | change.the.hold.down.value.globa |
81400 | 6c 6c 79 20 66 6f 72 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 | lly.for.IGP-LDP.synchronization. |
81420 | 64 75 72 69 6e 67 20 63 6f 6e 76 65 72 67 65 6e 63 65 2f 69 6e 74 65 72 66 61 63 65 20 66 6c 61 | during.convergence/interface.fla |
81440 | 70 20 65 76 65 6e 74 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 63 6f 6e 66 | p.events..This.command.will.conf |
81460 | 69 67 75 72 65 20 61 20 74 69 65 2d 62 72 65 61 6b 65 72 20 66 6f 72 20 6d 75 6c 74 69 70 6c 65 | igure.a.tie-breaker.for.multiple |
81480 | 20 6c 6f 63 61 6c 20 4c 46 41 20 62 61 63 6b 75 70 73 2e 20 54 68 65 20 6c 6f 77 65 72 20 69 6e | .local.LFA.backups..The.lower.in |
814a0 | 64 65 78 20 6e 75 6d 62 65 72 73 20 77 69 6c 6c 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 66 69 | dex.numbers.will.be.processed.fi |
814c0 | 72 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 65 6e 61 62 6c 65 20 49 47 | rst..This.command.will.enable.IG |
814e0 | 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 67 6c 6f 62 61 6c 6c 79 20 66 | P-LDP.synchronization.globally.f |
81500 | 6f 72 20 49 53 49 53 2e 20 54 68 69 73 20 72 65 71 75 69 72 65 73 20 66 6f 72 20 4c 44 50 20 74 | or.ISIS..This.requires.for.LDP.t |
81520 | 6f 20 62 65 20 66 75 6e 63 74 69 6f 6e 61 6c 2e 20 54 68 69 73 20 69 73 20 64 65 73 63 72 69 62 | o.be.functional..This.is.describ |
81540 | 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 34 34 33 60 2e 20 42 79 20 64 65 66 61 75 6c 74 20 61 6c | ed.in.:rfc:`5443`..By.default.al |
81560 | 6c 20 69 6e 74 65 72 66 61 63 65 73 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 69 6e 20 49 53 2d 49 | l.interfaces.operational.in.IS-I |
81580 | 53 20 61 72 65 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f | S.are.enabled.for.synchronizatio |
815a0 | 6e 2e 20 4c 6f 6f 70 62 61 63 6b 73 20 61 72 65 20 65 78 65 6d 70 74 2e 00 54 68 69 73 20 63 6f | n..Loopbacks.are.exempt..This.co |
815c0 | 6d 6d 61 6e 64 20 77 69 6c 6c 20 65 6e 61 62 6c 65 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 68 72 | mmand.will.enable.IGP-LDP.synchr |
815e0 | 6f 6e 69 7a 61 74 69 6f 6e 20 67 6c 6f 62 61 6c 6c 79 20 66 6f 72 20 4f 53 50 46 2e 20 54 68 69 | onization.globally.for.OSPF..Thi |
81600 | 73 20 72 65 71 75 69 72 65 73 20 66 6f 72 20 4c 44 50 20 74 6f 20 62 65 20 66 75 6e 63 74 69 6f | s.requires.for.LDP.to.be.functio |
81620 | 6e 61 6c 2e 20 54 68 69 73 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 | nal..This.is.described.in.:rfc:` |
81640 | 35 34 34 33 60 2e 20 42 79 20 64 65 66 61 75 6c 74 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 | 5443`..By.default.all.interfaces |
81660 | 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 69 6e 20 4f 53 50 46 20 61 72 65 20 65 6e 61 62 6c 65 64 | .operational.in.OSPF.are.enabled |
81680 | 20 66 6f 72 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 2e 20 4c 6f 6f 70 62 61 63 6b 73 20 | .for.synchronization..Loopbacks. |
816a0 | 61 72 65 20 65 78 65 6d 70 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 67 65 | are.exempt..This.command.will.ge |
816c0 | 6e 65 72 61 74 65 20 61 20 64 65 66 61 75 6c 74 2d 72 6f 75 74 65 20 69 6e 20 4c 31 20 64 61 74 | nerate.a.default-route.in.L1.dat |
816e0 | 61 62 61 73 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 67 65 6e 65 72 61 74 | abase..This.command.will.generat |
81700 | 65 20 61 20 64 65 66 61 75 6c 74 2d 72 6f 75 74 65 20 69 6e 20 4c 32 20 64 61 74 61 62 61 73 65 | e.a.default-route.in.L2.database |
81720 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 67 69 76 65 20 61 6e 20 6f 76 65 72 | ..This.command.will.give.an.over |
81740 | 76 69 65 77 20 6f 66 20 61 20 72 75 6c 65 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 72 75 6c 65 2d | view.of.a.rule.in.a.single.rule- |
81760 | 73 65 74 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 67 69 76 65 20 61 6e 20 6f 76 | set.This.command.will.give.an.ov |
81780 | 65 72 76 69 65 77 20 6f 66 20 61 20 72 75 6c 65 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 72 75 6c | erview.of.a.rule.in.a.single.rul |
817a0 | 65 2d 73 65 74 2c 20 70 6c 75 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 64 65 66 61 | e-set,.plus.information.for.defa |
817c0 | 75 6c 74 20 61 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 67 69 | ult.action..This.command.will.gi |
817e0 | 76 65 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 61 20 72 75 6c 65 20 69 6e 20 61 20 73 69 | ve.an.overview.of.a.rule.in.a.si |
81800 | 6e 67 6c 65 20 72 75 6c 65 2d 73 65 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c | ngle.rule-set..This.command.will |
81820 | 20 67 69 76 65 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 61 20 73 69 6e 67 6c 65 20 72 75 | .give.an.overview.of.a.single.ru |
81840 | 6c 65 2d 73 65 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 6c 69 6d 69 74 20 | le-set..This.command.will.limit. |
81860 | 4c 46 41 20 62 61 63 6b 75 70 20 63 6f 6d 70 75 74 61 74 69 6f 6e 20 75 70 20 74 6f 20 74 68 65 | LFA.backup.computation.up.to.the |
81880 | 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 20 70 72 69 6f 72 69 74 79 2e 00 54 68 69 73 | .specified.prefix.priority..This |
818a0 | 20 63 6f 6d 6d 61 6e 64 20 77 6f 75 6c 64 20 61 6c 6c 6f 77 20 74 68 65 20 64 79 6e 61 6d 69 63 | .command.would.allow.the.dynamic |
818c0 | 20 75 70 64 61 74 65 20 6f 66 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 6f 76 65 72 20 61 6e 20 | .update.of.capabilities.over.an. |
818e0 | 65 73 74 61 62 6c 69 73 68 65 64 20 42 47 50 20 73 65 73 73 69 6f 6e 2e 00 54 68 69 73 20 63 6f | established.BGP.session..This.co |
81900 | 6d 6d 61 6e 64 73 20 63 72 65 61 74 65 73 20 61 20 62 72 69 64 67 65 20 74 68 61 74 20 69 73 20 | mmands.creates.a.bridge.that.is. |
81920 | 75 73 65 64 20 74 6f 20 62 69 6e 64 20 74 72 61 66 66 69 63 20 6f 6e 20 65 74 68 31 20 76 6c 61 | used.to.bind.traffic.on.eth1.vla |
81940 | 6e 20 32 34 31 20 77 69 74 68 20 74 68 65 20 76 78 6c 61 6e 32 34 31 2d 69 6e 74 65 72 66 61 63 | n.241.with.the.vxlan241-interfac |
81960 | 65 2e 20 54 68 65 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 6e 6f 74 20 72 65 71 75 69 72 65 | e..The.IP.address.is.not.require |
81980 | 64 2e 20 49 74 20 6d 61 79 20 68 6f 77 65 76 65 72 20 62 65 20 75 73 65 64 20 61 73 20 61 20 64 | d..It.may.however.be.used.as.a.d |
819a0 | 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 66 6f 72 20 65 61 63 68 20 4c 65 61 66 20 77 68 69 | efault.gateway.for.each.Leaf.whi |
819c0 | 63 68 20 61 6c 6c 6f 77 73 20 64 65 76 69 63 65 73 20 6f 6e 20 74 68 65 20 76 6c 61 6e 20 74 6f | ch.allows.devices.on.the.vlan.to |
819e0 | 20 72 65 61 63 68 20 6f 74 68 65 72 20 73 75 62 6e 65 74 73 2e 20 54 68 69 73 20 72 65 71 75 69 | .reach.other.subnets..This.requi |
81a00 | 72 65 73 20 74 68 61 74 20 74 68 65 20 73 75 62 6e 65 74 73 20 61 72 65 20 72 65 64 69 73 74 72 | res.that.the.subnets.are.redistr |
81a20 | 69 62 75 74 65 64 20 62 79 20 4f 53 50 46 20 73 6f 20 74 68 61 74 20 74 68 65 20 53 70 69 6e 65 | ibuted.by.OSPF.so.that.the.Spine |
81a40 | 20 77 69 6c 6c 20 6c 65 61 72 6e 20 68 6f 77 20 74 6f 20 72 65 61 63 68 20 69 74 2e 20 54 6f 20 | .will.learn.how.to.reach.it..To. |
81a60 | 64 6f 20 74 68 69 73 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 68 61 6e 67 65 20 74 68 65 20 4f | do.this.you.need.to.change.the.O |
81a80 | 53 50 46 20 6e 65 74 77 6f 72 6b 20 66 72 6f 6d 20 27 31 30 2e 30 2e 30 2e 30 2f 38 27 20 74 6f | SPF.network.from.'10.0.0.0/8'.to |
81aa0 | 20 27 30 2e 30 2e 30 2e 30 2f 30 27 20 74 6f 20 61 6c 6c 6f 77 20 31 37 32 2e 31 36 2f 31 32 2d | .'0.0.0.0/0'.to.allow.172.16/12- |
81ac0 | 6e 65 74 77 6f 72 6b 73 20 74 6f 20 62 65 20 61 64 76 65 72 74 69 73 65 64 2e 00 54 68 69 73 20 | networks.to.be.advertised..This. |
81ae0 | 63 6f 6d 6d 61 6e 64 73 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 46 69 6e 69 74 65 20 53 74 | commands.specifies.the.Finite.St |
81b00 | 61 74 65 20 4d 61 63 68 69 6e 65 20 28 46 53 4d 29 20 69 6e 74 65 6e 64 65 64 20 74 6f 20 63 6f | ate.Machine.(FSM).intended.to.co |
81b20 | 6e 74 72 6f 6c 20 74 68 65 20 74 69 6d 69 6e 67 20 6f 66 20 74 68 65 20 65 78 65 63 75 74 69 6f | ntrol.the.timing.of.the.executio |
81b40 | 6e 20 6f 66 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 73 20 69 6e 20 72 65 73 70 6f 6e 73 | n.of.SPF.calculations.in.respons |
81b60 | 65 20 74 6f 20 49 47 50 20 65 76 65 6e 74 73 2e 20 54 68 65 20 70 72 6f 63 65 73 73 20 64 65 73 | e.to.IGP.events..The.process.des |
81b80 | 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 38 34 30 35 60 2e 00 54 68 69 73 20 63 6f 6e 66 | cribed.in.:rfc:`8405`..This.conf |
81ba0 | 69 67 75 72 61 74 69 6f 6e 20 65 6e 61 62 6c 65 73 20 74 68 65 20 54 43 50 20 72 65 76 65 72 73 | iguration.enables.the.TCP.revers |
81bc0 | 65 20 70 72 6f 78 79 20 66 6f 72 20 74 68 65 20 22 6d 79 2d 74 63 70 2d 61 70 69 22 20 73 65 72 | e.proxy.for.the."my-tcp-api".ser |
81be0 | 76 69 63 65 2e 20 49 6e 63 6f 6d 69 6e 67 20 54 43 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 6f | vice..Incoming.TCP.connections.o |
81c00 | 6e 20 70 6f 72 74 20 38 38 38 38 20 77 69 6c 6c 20 62 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 | n.port.8888.will.be.load.balance |
81c20 | 64 20 61 63 72 6f 73 73 20 74 68 65 20 62 61 63 6b 65 6e 64 20 73 65 72 76 65 72 73 20 28 73 72 | d.across.the.backend.servers.(sr |
81c40 | 76 30 31 20 61 6e 64 20 73 72 76 30 32 29 20 75 73 69 6e 67 20 74 68 65 20 72 6f 75 6e 64 2d 72 | v01.and.srv02).using.the.round-r |
81c60 | 6f 62 69 6e 20 6c 6f 61 64 2d 62 61 6c 61 6e 63 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 2e 00 54 | obin.load-balancing.algorithm..T |
81c80 | 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6c 69 73 74 65 6e 20 6f 6e 20 70 6f 72 74 | his.configuration.listen.on.port |
81ca0 | 20 38 30 20 61 6e 64 20 72 65 64 69 72 65 63 74 20 69 6e 63 6f 6d 69 6e 67 20 72 65 71 75 65 73 | .80.and.redirect.incoming.reques |
81cc0 | 74 73 20 74 6f 20 48 54 54 50 53 3a 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | ts.to.HTTPS:.This.configuration. |
81ce0 | 6d 6f 64 69 66 69 65 73 20 74 68 65 20 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 65 20 6e 65 74 | modifies.the.behavior.of.the.net |
81d00 | 77 6f 72 6b 20 73 74 61 74 65 6d 65 6e 74 2e 20 49 66 20 79 6f 75 20 68 61 76 65 20 74 68 69 73 | work.statement..If.you.have.this |
81d20 | 20 63 6f 6e 66 69 67 75 72 65 64 20 74 68 65 20 75 6e 64 65 72 6c 79 69 6e 67 20 6e 65 74 77 6f | .configured.the.underlying.netwo |
81d40 | 72 6b 20 6d 75 73 74 20 65 78 69 73 74 20 69 6e 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 | rk.must.exist.in.the.routing.tab |
81d60 | 6c 65 2e 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 | le..This.configuration.parameter |
81d80 | 20 69 73 20 72 65 71 75 69 72 65 64 20 61 6e 64 20 6d 75 73 74 20 62 65 20 75 6e 69 71 75 65 20 | .is.required.and.must.be.unique. |
81da0 | 74 6f 20 65 61 63 68 20 73 75 62 6e 65 74 2e 20 49 74 20 69 73 20 72 65 71 75 69 72 65 64 20 74 | to.each.subnet..It.is.required.t |
81dc0 | 6f 20 6d 61 70 20 73 75 62 6e 65 74 73 20 74 6f 20 6c 65 61 73 65 20 66 69 6c 65 20 65 6e 74 72 | o.map.subnets.to.lease.file.entr |
81de0 | 69 65 73 2e 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 | ies..This.configuration.paramete |
81e00 | 72 20 6c 65 74 73 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 20 74 6f 20 6c 69 73 74 65 6e | r.lets.the.DHCP.server.to.listen |
81e20 | 20 66 6f 72 20 44 48 43 50 20 72 65 71 75 65 73 74 73 20 73 65 6e 74 20 74 6f 20 74 68 65 20 73 | .for.DHCP.requests.sent.to.the.s |
81e40 | 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 2c 20 69 74 20 69 73 20 6f 6e 6c 79 20 72 65 61 | pecified.address,.it.is.only.rea |
81e60 | 6c 69 73 74 69 63 61 6c 6c 79 20 75 73 65 66 75 6c 20 66 6f 72 20 61 20 73 65 72 76 65 72 20 77 | listically.useful.for.a.server.w |
81e80 | 68 6f 73 65 20 6f 6e 6c 79 20 63 6c 69 65 6e 74 73 20 61 72 65 20 72 65 61 63 68 65 64 20 76 69 | hose.only.clients.are.reached.vi |
81ea0 | 61 20 75 6e 69 63 61 73 74 73 2c 20 73 75 63 68 20 61 73 20 76 69 61 20 44 48 43 50 20 72 65 6c | a.unicasts,.such.as.via.DHCP.rel |
81ec0 | 61 79 20 61 67 65 6e 74 73 2e 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 | ay.agents..This.configuration.pa |
81ee0 | 72 61 6d 65 74 65 72 20 6c 65 74 73 20 79 6f 75 20 73 70 65 63 69 66 79 20 61 20 76 65 6e 64 6f | rameter.lets.you.specify.a.vendo |
81f00 | 72 2d 6f 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 65 6e 74 69 72 65 20 73 68 61 72 65 64 20 6e | r-option.for.the.entire.shared.n |
81f20 | 65 74 77 6f 72 6b 20 64 65 66 69 6e 69 74 69 6f 6e 2e 20 41 6c 6c 20 73 75 62 6e 65 74 73 20 77 | etwork.definition..All.subnets.w |
81f40 | 69 6c 6c 20 69 6e 68 65 72 69 74 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 | ill.inherit.this.configuration.i |
81f60 | 74 65 6d 20 69 66 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 6c 6f 63 61 6c 6c 79 2e 20 41 6e | tem.if.not.specified.locally..An |
81f80 | 20 65 78 61 6d 70 6c 65 20 66 6f 72 20 55 62 69 71 75 69 74 69 20 69 73 20 73 68 6f 77 6e 20 62 | .example.for.Ubiquiti.is.shown.b |
81fa0 | 65 6c 6f 77 3a 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 | elow:.This.configuration.paramet |
81fc0 | 65 72 20 6c 65 74 73 20 79 6f 75 20 73 70 65 63 69 66 79 20 61 20 76 65 6e 64 6f 72 2d 6f 70 74 | er.lets.you.specify.a.vendor-opt |
81fe0 | 69 6f 6e 20 66 6f 72 20 74 68 65 20 73 75 62 6e 65 74 20 73 70 65 63 69 66 69 65 64 20 77 69 74 | ion.for.the.subnet.specified.wit |
82000 | 68 69 6e 20 74 68 65 20 73 68 61 72 65 64 20 6e 65 74 77 6f 72 6b 20 64 65 66 69 6e 69 74 69 6f | hin.the.shared.network.definitio |
82020 | 6e 2e 20 41 6e 20 65 78 61 6d 70 6c 65 20 66 6f 72 20 55 62 69 71 75 69 74 69 20 69 73 20 73 68 | n..An.example.for.Ubiquiti.is.sh |
82040 | 6f 77 6e 20 62 65 6c 6f 77 3a 00 54 68 69 73 20 63 6f 75 6c 64 20 62 65 20 68 65 6c 70 66 75 6c | own.below:.This.could.be.helpful |
82060 | 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 74 65 73 74 20 68 6f 77 20 61 6e 20 61 70 70 6c | .if.you.want.to.test.how.an.appl |
82080 | 69 63 61 74 69 6f 6e 20 62 65 68 61 76 65 73 20 75 6e 64 65 72 20 63 65 72 74 61 69 6e 20 6e 65 | ication.behaves.under.certain.ne |
820a0 | 74 77 6f 72 6b 20 63 6f 6e 64 69 74 69 6f 6e 73 2e 00 54 68 69 73 20 63 72 65 61 74 65 73 20 61 | twork.conditions..This.creates.a |
820c0 | 20 72 6f 75 74 65 20 70 6f 6c 69 63 79 20 63 61 6c 6c 65 64 20 46 49 4c 54 45 52 2d 57 45 42 20 | .route.policy.called.FILTER-WEB. |
820e0 | 77 69 74 68 20 6f 6e 65 20 72 75 6c 65 20 74 6f 20 73 65 74 20 74 68 65 20 72 6f 75 74 69 6e 67 | with.one.rule.to.set.the.routing |
82100 | 20 74 61 62 6c 65 20 66 6f 72 20 6d 61 74 63 68 69 6e 67 20 74 72 61 66 66 69 63 20 28 54 43 50 | .table.for.matching.traffic.(TCP |
82120 | 20 70 6f 72 74 20 38 30 29 20 74 6f 20 74 61 62 6c 65 20 49 44 20 31 30 30 20 69 6e 73 74 65 61 | .port.80).to.table.ID.100.instea |
82140 | 64 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 | d.of.the.default.routing.table.. |
82160 | 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 31 30 30 30 30 2e 00 54 68 69 73 20 64 65 66 | This.defaults.to.10000..This.def |
82180 | 61 75 6c 74 73 20 74 6f 20 31 38 31 32 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 | aults.to.1812..This.defaults.to. |
821a0 | 32 30 30 37 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 33 30 20 73 65 63 6f 6e 64 | 2007..This.defaults.to.30.second |
821c0 | 73 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 33 30 30 20 73 65 63 6f 6e 64 73 2e | s..This.defaults.to.300.seconds. |
821e0 | 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 34 39 2e 00 54 68 69 73 20 64 65 66 61 75 | .This.defaults.to.49..This.defau |
82200 | 6c 74 73 20 74 6f 20 35 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 55 44 50 00 54 | lts.to.5..This.defaults.to.UDP.T |
82220 | 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 62 6f 74 68 20 31 2e 32 20 61 6e 64 20 31 2e 33 | his.defaults.to.both.1.2.and.1.3 |
82240 | 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 68 74 74 70 73 3a 2f 2f 61 63 6d 65 2d | ..This.defaults.to.https://acme- |
82260 | 76 30 32 2e 61 70 69 2e 6c 65 74 73 65 6e 63 72 79 70 74 2e 6f 72 67 2f 64 69 72 65 63 74 6f 72 | v02.api.letsencrypt.org/director |
82280 | 79 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 70 68 79 30 2e 00 54 68 69 73 20 64 65 | y.This.defaults.to.phy0..This.de |
822a0 | 70 65 6e 64 73 20 6f 6e 20 74 68 65 20 64 72 69 76 65 72 20 63 61 70 61 62 69 6c 69 74 69 65 73 | pends.on.the.driver.capabilities |
822c0 | 20 61 6e 64 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 77 69 74 68 20 61 | .and.may.not.be.available.with.a |
822e0 | 6c 6c 20 64 72 69 76 65 72 73 2e 00 54 68 69 73 20 64 69 61 62 6c 65 20 74 68 65 20 65 78 74 65 | ll.drivers..This.diable.the.exte |
82300 | 72 6e 61 6c 20 63 61 63 68 65 20 61 6e 64 20 64 69 72 65 63 74 6c 79 20 69 6e 6a 65 63 74 73 20 | rnal.cache.and.directly.injects. |
82320 | 74 68 65 20 66 6c 6f 77 2d 73 74 61 74 65 73 20 69 6e 74 6f 20 74 68 65 20 69 6e 2d 6b 65 72 6e | the.flow-states.into.the.in-kern |
82340 | 65 6c 20 43 6f 6e 6e 65 63 74 69 6f 6e 20 54 72 61 63 6b 69 6e 67 20 53 79 73 74 65 6d 20 6f 66 | el.Connection.Tracking.System.of |
82360 | 20 74 68 65 20 62 61 63 6b 75 70 20 66 69 72 65 77 61 6c 6c 2e 00 54 68 69 73 20 64 69 61 67 72 | .the.backup.firewall..This.diagr |
82380 | 61 6d 20 63 6f 72 72 65 73 70 6f 6e 64 73 20 77 69 74 68 20 74 68 65 20 65 78 61 6d 70 6c 65 20 | am.corresponds.with.the.example. |
823a0 | 73 69 74 65 20 74 6f 20 73 69 74 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 62 65 6c 6f 77 | site.to.site.configuration.below |
823c0 | 2e 00 54 68 69 73 20 65 6e 61 62 6c 65 73 20 3a 72 66 63 3a 60 33 31 33 37 60 20 73 75 70 70 6f | ..This.enables.:rfc:`3137`.suppo |
823e0 | 72 74 2c 20 77 68 65 72 65 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 20 64 65 73 63 72 | rt,.where.the.OSPF.process.descr |
82400 | 69 62 65 73 20 69 74 73 20 74 72 61 6e 73 69 74 20 6c 69 6e 6b 73 20 69 6e 20 69 74 73 20 72 6f | ibes.its.transit.links.in.its.ro |
82420 | 75 74 65 72 2d 4c 53 41 20 61 73 20 68 61 76 69 6e 67 20 69 6e 66 69 6e 69 74 65 20 64 69 73 74 | uter-LSA.as.having.infinite.dist |
82440 | 61 6e 63 65 20 73 6f 20 74 68 61 74 20 6f 74 68 65 72 20 72 6f 75 74 65 72 73 20 77 69 6c 6c 20 | ance.so.that.other.routers.will. |
82460 | 61 76 6f 69 64 20 63 61 6c 63 75 6c 61 74 69 6e 67 20 74 72 61 6e 73 69 74 20 70 61 74 68 73 20 | avoid.calculating.transit.paths. |
82480 | 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f 75 74 65 72 20 77 68 69 6c 65 20 73 74 69 6c 6c 20 62 | through.the.router.while.still.b |
824a0 | 65 69 6e 67 20 61 62 6c 65 20 74 6f 20 72 65 61 63 68 20 6e 65 74 77 6f 72 6b 73 20 74 68 72 6f | eing.able.to.reach.networks.thro |
824c0 | 75 67 68 20 74 68 65 20 72 6f 75 74 65 72 2e 00 54 68 69 73 20 65 6e 61 62 6c 65 73 20 74 68 65 | ugh.the.router..This.enables.the |
824e0 | 20 67 72 65 65 6e 66 69 65 6c 64 20 6f 70 74 69 6f 6e 20 77 68 69 63 68 20 73 65 74 73 20 74 68 | .greenfield.option.which.sets.th |
82500 | 65 20 60 60 5b 47 46 5d 60 60 20 6f 70 74 69 6f 6e 00 54 68 69 73 20 65 73 74 61 62 6c 69 73 68 | e.``[GF]``.option.This.establish |
82520 | 65 73 20 6f 75 72 20 50 6f 72 74 20 46 6f 72 77 61 72 64 20 72 75 6c 65 2c 20 62 75 74 20 69 66 | es.our.Port.Forward.rule,.but.if |
82540 | 20 77 65 20 63 72 65 61 74 65 64 20 61 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 20 69 74 | .we.created.a.firewall.policy.it |
82560 | 20 77 69 6c 6c 20 6c 69 6b 65 6c 79 20 62 6c 6f 63 6b 20 74 68 65 20 74 72 61 66 66 69 63 2e 00 | .will.likely.block.the.traffic.. |
82580 | 54 68 69 73 20 65 78 61 6d 70 6c 65 20 73 68 6f 77 73 20 68 6f 77 20 74 6f 20 74 61 72 67 65 74 | This.example.shows.how.to.target |
825a0 | 20 61 6e 20 4d 53 53 20 63 6c 61 6d 70 20 28 69 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 20 74 6f | .an.MSS.clamp.(in.our.example.to |
825c0 | 20 31 33 36 30 20 62 79 74 65 73 29 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 64 65 73 74 69 | .1360.bytes).to.a.specific.desti |
825e0 | 6e 61 74 69 6f 6e 20 49 50 2e 00 54 68 69 73 20 65 78 61 6d 70 6c 65 20 75 73 65 73 20 43 41 43 | nation.IP..This.example.uses.CAC |
82600 | 65 72 74 20 61 73 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 2e 00 54 68 | ert.as.certificate.authority..Th |
82620 | 69 73 20 66 65 61 74 75 72 65 20 63 6c 6f 73 65 6c 79 20 77 6f 72 6b 73 20 74 6f 67 65 74 68 65 | is.feature.closely.works.togethe |
82640 | 72 20 77 69 74 68 20 3a 72 65 66 3a 60 70 6b 69 60 20 73 75 62 73 79 73 74 65 6d 20 61 73 20 79 | r.with.:ref:`pki`.subsystem.as.y |
82660 | 6f 75 20 72 65 71 75 69 72 65 64 20 61 20 78 35 30 39 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 | ou.required.a.x509.certificate.. |
82680 | 54 68 69 73 20 66 65 61 74 75 72 65 20 73 65 72 76 65 73 20 74 68 65 20 70 75 72 70 6f 73 65 20 | This.feature.serves.the.purpose. |
826a0 | 6f 66 20 74 68 69 67 68 74 65 6e 69 6e 67 20 74 68 65 20 70 61 63 6b 65 74 20 76 61 6c 69 64 61 | of.thightening.the.packet.valida |
826c0 | 74 69 6f 6e 20 72 65 71 75 69 72 65 6d 65 6e 74 73 20 74 6f 20 61 76 6f 69 64 20 72 65 63 65 69 | tion.requirements.to.avoid.recei |
826e0 | 76 69 6e 67 20 42 46 44 20 63 6f 6e 74 72 6f 6c 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 6f 74 | ving.BFD.control.packets.from.ot |
82700 | 68 65 72 20 73 65 73 73 69 6f 6e 73 2e 00 54 68 69 73 20 66 65 61 74 75 72 65 20 73 75 6d 6d 61 | her.sessions..This.feature.summa |
82720 | 72 69 73 65 73 20 6f 72 69 67 69 6e 61 74 65 64 20 65 78 74 65 72 6e 61 6c 20 4c 53 41 73 20 28 | rises.originated.external.LSAs.( |
82740 | 54 79 70 65 2d 35 20 61 6e 64 20 54 79 70 65 2d 37 29 2e 20 53 75 6d 6d 61 72 79 20 52 6f 75 74 | Type-5.and.Type-7)..Summary.Rout |
82760 | 65 20 77 69 6c 6c 20 62 65 20 6f 72 69 67 69 6e 61 74 65 64 20 6f 6e 2d 62 65 68 61 6c 66 20 6f | e.will.be.originated.on-behalf.o |
82780 | 66 20 61 6c 6c 20 6d 61 74 63 68 65 64 20 65 78 74 65 72 6e 61 6c 20 4c 53 41 73 2e 00 54 68 69 | f.all.matched.external.LSAs..Thi |
827a0 | 73 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 69 73 20 63 6f 6e 74 72 6f 6c 6c 65 64 20 62 79 | s.functionality.is.controlled.by |
827c0 | 20 61 64 64 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 | .adding.the.following.configurat |
827e0 | 69 6f 6e 3a 00 54 68 69 73 20 66 75 6e 63 74 69 6f 6e 73 20 66 6f 72 20 62 6f 74 68 20 69 6e 64 | ion:.This.functions.for.both.ind |
82800 | 69 76 69 64 75 61 6c 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 61 64 64 72 65 73 73 20 67 72 | ividual.addresses.and.address.gr |
82820 | 6f 75 70 73 2e 00 54 68 69 73 20 67 69 76 65 73 20 75 73 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 | oups..This.gives.us.IGP-LDP.sync |
82840 | 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 66 6f 72 20 61 6c 6c 20 6e 6f 6e 2d 6c 6f 6f 70 62 61 63 6b | hronization.for.all.non-loopback |
82860 | 20 69 6e 74 65 72 66 61 63 65 73 20 77 69 74 68 20 61 20 68 6f 6c 64 64 6f 77 6e 20 74 69 6d 65 | .interfaces.with.a.holddown.time |
82880 | 72 20 6f 66 20 7a 65 72 6f 20 73 65 63 6f 6e 64 73 3a 00 54 68 69 73 20 67 69 76 65 73 20 75 73 | r.of.zero.seconds:.This.gives.us |
828a0 | 20 4d 50 4c 53 20 73 65 67 6d 65 6e 74 20 72 6f 75 74 69 6e 67 20 65 6e 61 62 6c 65 64 20 61 6e | .MPLS.segment.routing.enabled.an |
828c0 | 64 20 6c 61 62 65 6c 73 20 66 6f 72 20 66 61 72 20 65 6e 64 20 6c 6f 6f 70 62 61 63 6b 73 3a 00 | d.labels.for.far.end.loopbacks:. |
828e0 | 54 68 69 73 20 67 69 76 65 73 20 75 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6e 65 69 67 | This.gives.us.the.following.neig |
82900 | 68 62 6f 72 73 68 69 70 73 2c 20 4c 65 76 65 6c 20 31 20 61 6e 64 20 4c 65 76 65 6c 20 32 3a 00 | hborships,.Level.1.and.Level.2:. |
82920 | 54 68 69 73 20 69 6e 73 74 72 75 63 74 73 20 6f 70 65 6e 6e 68 72 70 20 74 6f 20 72 65 70 6c 79 | This.instructs.opennhrp.to.reply |
82940 | 20 77 69 74 68 20 61 75 74 68 6f 72 61 74 69 76 65 20 61 6e 73 77 65 72 73 20 6f 6e 20 4e 48 52 | .with.authorative.answers.on.NHR |
82960 | 50 20 52 65 73 6f 6c 75 74 69 6f 6e 20 52 65 71 75 65 73 74 73 20 64 65 73 74 69 6e 69 65 64 20 | P.Resolution.Requests.destinied. |
82980 | 74 6f 20 61 64 64 72 65 73 73 65 73 20 69 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 28 | to.addresses.in.this.interface.( |
829a0 | 69 6e 73 74 65 61 64 20 6f 66 20 66 6f 72 77 61 72 64 69 6e 67 20 74 68 65 20 70 61 63 6b 65 74 | instead.of.forwarding.the.packet |
829c0 | 73 29 2e 20 54 68 69 73 20 65 66 66 65 63 74 69 76 65 6c 79 20 61 6c 6c 6f 77 73 20 74 68 65 20 | s)..This.effectively.allows.the. |
829e0 | 63 72 65 61 74 69 6f 6e 20 6f 66 20 73 68 6f 72 74 63 75 74 20 72 6f 75 74 65 73 20 74 6f 20 73 | creation.of.shortcut.routes.to.s |
82a00 | 75 62 6e 65 74 73 20 6c 6f 63 61 74 65 64 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e | ubnets.located.on.the.interface. |
82a20 | 00 54 68 69 73 20 69 73 20 61 20 63 6f 6d 6d 6f 6e 20 73 63 65 6e 61 72 69 6f 20 77 68 65 72 65 | .This.is.a.common.scenario.where |
82a40 | 20 62 6f 74 68 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 61 6e 64 20 3a 72 65 66 | .both.:ref:`source-nat`.and.:ref |
82a60 | 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 20 61 72 65 20 63 6f 6e 66 69 67 75 72 65 | :`destination-nat`.are.configure |
82a80 | 64 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 2e 20 49 74 27 73 20 63 6f 6d 6d 6f 6e 6c | d.at.the.same.time..It's.commonl |
82aa0 | 79 20 75 73 65 64 20 77 68 65 6e 20 69 6e 74 65 72 6e 61 6c 20 28 70 72 69 76 61 74 65 29 20 68 | y.used.when.internal.(private).h |
82ac0 | 6f 73 74 73 20 6e 65 65 64 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 20 63 6f 6e 6e 65 63 74 | osts.need.to.establish.a.connect |
82ae0 | 69 6f 6e 20 77 69 74 68 20 65 78 74 65 72 6e 61 6c 20 72 65 73 6f 75 72 63 65 73 20 61 6e 64 20 | ion.with.external.resources.and. |
82b00 | 65 78 74 65 72 6e 61 6c 20 73 79 73 74 65 6d 73 20 6e 65 65 64 20 74 6f 20 61 63 63 65 73 73 20 | external.systems.need.to.access. |
82b20 | 69 6e 74 65 72 6e 61 6c 20 28 70 72 69 76 61 74 65 29 20 72 65 73 6f 75 72 63 65 73 2e 00 54 68 | internal.(private).resources..Th |
82b40 | 69 73 20 69 73 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 | is.is.a.configuration.parameter. |
82b60 | 66 6f 72 20 74 68 65 20 60 3c 73 75 62 6e 65 74 3e 60 2c 20 73 61 79 69 6e 67 20 74 68 61 74 20 | for.the.`<subnet>`,.saying.that. |
82b80 | 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 72 65 73 70 6f 6e 73 65 2c 20 74 65 6c 6c 20 74 68 | as.part.of.the.response,.tell.th |
82ba0 | 65 20 63 6c 69 65 6e 74 20 74 68 61 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 | e.client.that.the.default.gatewa |
82bc0 | 79 20 63 61 6e 20 62 65 20 72 65 61 63 68 65 64 20 61 74 20 60 3c 61 64 64 72 65 73 73 3e 60 2e | y.can.be.reached.at.`<address>`. |
82be0 | 00 54 68 69 73 20 69 73 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 | .This.is.a.configuration.paramet |
82c00 | 65 72 20 66 6f 72 20 74 68 65 20 73 75 62 6e 65 74 2c 20 73 61 79 69 6e 67 20 74 68 61 74 20 61 | er.for.the.subnet,.saying.that.a |
82c20 | 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 72 65 73 70 6f 6e 73 65 2c 20 74 65 6c 6c 20 74 68 65 | s.part.of.the.response,.tell.the |
82c40 | 20 63 6c 69 65 6e 74 20 74 68 61 74 20 74 68 65 20 44 4e 53 20 73 65 72 76 65 72 20 63 61 6e 20 | .client.that.the.DNS.server.can. |
82c60 | 62 65 20 66 6f 75 6e 64 20 61 74 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 54 68 69 73 20 69 73 | be.found.at.`<address>`..This.is |
82c80 | 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 63 6f 6d 6d 61 6e 64 2e 20 53 65 74 73 20 72 65 67 75 6c | .a.mandatory.command..Sets.regul |
82ca0 | 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 6c | ar.expression.to.match.against.l |
82cc0 | 6f 67 20 73 74 72 69 6e 67 20 6d 65 73 73 61 67 65 2e 00 54 68 69 73 20 69 73 20 61 20 6d 61 6e | og.string.message..This.is.a.man |
82ce0 | 64 61 74 6f 72 79 20 63 6f 6d 6d 61 6e 64 2e 20 53 65 74 73 20 74 68 65 20 66 75 6c 6c 20 70 61 | datory.command..Sets.the.full.pa |
82d00 | 74 68 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 2e 20 54 68 65 20 73 63 72 69 70 74 20 66 69 6c | th.to.the.script..The.script.fil |
82d20 | 65 20 6d 75 73 74 20 62 65 20 65 78 65 63 75 74 61 62 6c 65 2e 00 54 68 69 73 20 69 73 20 61 20 | e.must.be.executable..This.is.a. |
82d40 | 6d 61 6e 64 61 74 6f 72 79 20 6f 70 74 69 6f 6e 00 54 68 69 73 20 69 73 20 61 20 6d 61 6e 64 61 | mandatory.option.This.is.a.manda |
82d60 | 74 6f 72 79 20 73 65 74 74 69 6e 67 2e 00 54 68 69 73 20 69 73 20 61 63 68 69 65 76 65 64 20 62 | tory.setting..This.is.achieved.b |
82d80 | 79 20 75 73 69 6e 67 20 74 68 65 20 66 69 72 73 74 20 74 68 72 65 65 20 62 69 74 73 20 6f 66 20 | y.using.the.first.three.bits.of. |
82da0 | 74 68 65 20 54 6f 53 20 28 54 79 70 65 20 6f 66 20 53 65 72 76 69 63 65 29 20 66 69 65 6c 64 20 | the.ToS.(Type.of.Service).field. |
82dc0 | 74 6f 20 63 61 74 65 67 6f 72 69 7a 65 20 64 61 74 61 20 73 74 72 65 61 6d 73 20 61 6e 64 2c 20 | to.categorize.data.streams.and,. |
82de0 | 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 64 65 66 69 6e 65 64 20 70 | in.accordance.with.the.defined.p |
82e00 | 72 65 63 65 64 65 6e 63 65 20 70 61 72 61 6d 65 74 65 72 73 2c 20 61 20 64 65 63 69 73 69 6f 6e | recedence.parameters,.a.decision |
82e20 | 20 69 73 20 6d 61 64 65 2e 00 54 68 69 73 20 69 73 20 61 6c 73 6f 20 6b 6e 6f 77 6e 20 61 73 20 | .is.made..This.is.also.known.as. |
82e40 | 74 68 65 20 48 55 42 73 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 46 51 44 4e 2e 00 54 68 69 | the.HUBs.IP.address.or.FQDN..Thi |
82e60 | 73 20 69 73 20 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 20 62 65 63 61 75 73 65 | s.is.an.optional.command.because |
82e80 | 20 74 68 65 20 65 76 65 6e 74 20 68 61 6e 64 6c 65 72 20 77 69 6c 6c 20 62 65 20 61 75 74 6f 6d | .the.event.handler.will.be.autom |
82ea0 | 61 74 69 63 61 6c 6c 79 20 63 72 65 61 74 65 64 20 61 66 74 65 72 20 61 6e 79 20 6f 66 20 74 68 | atically.created.after.any.of.th |
82ec0 | 65 20 6e 65 78 74 20 63 6f 6d 6d 61 6e 64 73 2e 00 54 68 69 73 20 69 73 20 61 6e 20 6f 70 74 69 | e.next.commands..This.is.an.opti |
82ee0 | 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 2e 20 41 64 64 73 20 61 72 67 75 6d 65 6e 74 73 20 74 6f 20 | onal.command..Adds.arguments.to. |
82f00 | 74 68 65 20 73 63 72 69 70 74 2e 20 41 72 67 75 6d 65 6e 74 73 20 6d 75 73 74 20 62 65 20 73 65 | the.script..Arguments.must.be.se |
82f20 | 70 61 72 61 74 65 64 20 62 79 20 73 70 61 63 65 73 2e 00 54 68 69 73 20 69 73 20 61 6e 20 6f 70 | parated.by.spaces..This.is.an.op |
82f40 | 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 2e 20 41 64 64 73 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 | tional.command..Adds.environment |
82f60 | 20 61 6e 64 20 69 74 73 20 76 61 6c 75 65 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 2e 20 55 73 | .and.its.value.to.the.script..Us |
82f80 | 65 20 73 65 70 61 72 61 74 65 20 63 6f 6d 6d 61 6e 64 73 20 66 6f 72 20 65 61 63 68 20 65 6e 76 | e.separate.commands.for.each.env |
82fa0 | 69 72 6f 6e 6d 65 6e 74 2e 00 54 68 69 73 20 69 73 20 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 63 6f | ironment..This.is.an.optional.co |
82fc0 | 6d 6d 61 6e 64 2e 20 46 69 6c 74 65 72 73 20 6c 6f 67 20 6d 65 73 73 61 67 65 73 20 62 79 20 73 | mmand..Filters.log.messages.by.s |
82fe0 | 79 73 6c 6f 67 2d 69 64 65 6e 74 69 66 69 65 72 2e 00 54 68 69 73 20 69 73 20 64 6f 6e 65 20 74 | yslog-identifier..This.is.done.t |
83000 | 6f 20 73 75 70 70 6f 72 74 20 28 65 74 68 65 72 6e 65 74 29 20 73 77 69 74 63 68 20 66 65 61 74 | o.support.(ethernet).switch.feat |
83020 | 75 72 65 73 2c 20 6c 69 6b 65 20 3a 72 66 63 3a 60 33 30 36 39 60 2c 20 77 68 65 72 65 20 74 68 | ures,.like.:rfc:`3069`,.where.th |
83040 | 65 20 69 6e 64 69 76 69 64 75 61 6c 20 70 6f 72 74 73 20 61 72 65 20 4e 4f 54 20 61 6c 6c 6f 77 | e.individual.ports.are.NOT.allow |
83060 | 65 64 20 74 6f 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 77 69 74 68 20 65 61 63 68 20 6f 74 68 65 | ed.to.communicate.with.each.othe |
83080 | 72 2c 20 62 75 74 20 74 68 65 79 20 61 72 65 20 61 6c 6c 6f 77 65 64 20 74 6f 20 74 61 6c 6b 20 | r,.but.they.are.allowed.to.talk. |
830a0 | 74 6f 20 74 68 65 20 75 70 73 74 72 65 61 6d 20 72 6f 75 74 65 72 2e 20 41 73 20 64 65 73 63 72 | to.the.upstream.router..As.descr |
830c0 | 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 30 36 39 60 2c 20 69 74 20 69 73 20 70 6f 73 73 69 | ibed.in.:rfc:`3069`,.it.is.possi |
830e0 | 62 6c 65 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 73 65 20 68 6f 73 74 73 20 74 6f 20 63 6f 6d 6d | ble.to.allow.these.hosts.to.comm |
83100 | 75 6e 69 63 61 74 65 20 74 68 72 6f 75 67 68 20 74 68 65 20 75 70 73 74 72 65 61 6d 20 72 6f 75 | unicate.through.the.upstream.rou |
83120 | 74 65 72 20 62 79 20 70 72 6f 78 79 5f 61 72 70 27 69 6e 67 2e 00 54 68 69 73 20 69 73 20 65 73 | ter.by.proxy_arp'ing..This.is.es |
83140 | 70 65 63 69 61 6c 6c 79 20 75 73 65 66 75 6c 20 66 6f 72 20 74 68 65 20 75 70 73 74 72 65 61 6d | pecially.useful.for.the.upstream |
83160 | 20 69 6e 74 65 72 66 61 63 65 2c 20 73 69 6e 63 65 20 74 68 65 20 73 6f 75 72 63 65 20 66 6f 72 | .interface,.since.the.source.for |
83180 | 20 6d 75 6c 74 69 63 61 73 74 20 74 72 61 66 66 69 63 20 69 73 20 6f 66 74 65 6e 20 66 72 6f 6d | .multicast.traffic.is.often.from |
831a0 | 20 61 20 72 65 6d 6f 74 65 20 6c 6f 63 61 74 69 6f 6e 2e 00 54 68 69 73 20 69 73 20 6f 6e 65 20 | .a.remote.location..This.is.one. |
831c0 | 6f 66 20 74 68 65 20 73 69 6d 70 6c 65 73 74 20 74 79 70 65 73 20 6f 66 20 74 75 6e 6e 65 6c 73 | of.the.simplest.types.of.tunnels |
831e0 | 2c 20 61 73 20 64 65 66 69 6e 65 64 20 62 79 20 3a 72 66 63 3a 60 32 30 30 33 60 2e 20 49 74 20 | ,.as.defined.by.:rfc:`2003`..It. |
83200 | 74 61 6b 65 73 20 61 6e 20 49 50 76 34 20 70 61 63 6b 65 74 20 61 6e 64 20 73 65 6e 64 73 20 69 | takes.an.IPv4.packet.and.sends.i |
83220 | 74 20 61 73 20 61 20 70 61 79 6c 6f 61 64 20 6f 66 20 61 6e 6f 74 68 65 72 20 49 50 76 34 20 70 | t.as.a.payload.of.another.IPv4.p |
83240 | 61 63 6b 65 74 2e 20 46 6f 72 20 74 68 69 73 20 72 65 61 73 6f 6e 2c 20 74 68 65 72 65 20 61 72 | acket..For.this.reason,.there.ar |
83260 | 65 20 6e 6f 20 6f 74 68 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 | e.no.other.configuration.options |
83280 | 20 66 6f 72 20 74 68 69 73 20 6b 69 6e 64 20 6f 66 20 74 75 6e 6e 65 6c 2e 00 54 68 69 73 20 69 | .for.this.kind.of.tunnel..This.i |
832a0 | 73 20 6f 70 74 69 6f 6e 61 6c 2e 00 54 68 69 73 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 74 | s.optional..This.is.similar.to.t |
832c0 | 68 65 20 6e 65 74 77 6f 72 6b 20 67 72 6f 75 70 73 20 70 61 72 74 2c 20 62 75 74 20 68 65 72 65 | he.network.groups.part,.but.here |
832e0 | 20 79 6f 75 20 61 72 65 20 61 62 6c 65 20 74 6f 20 6e 65 67 61 74 65 20 74 68 65 20 6d 61 74 63 | .you.are.able.to.negate.the.matc |
83300 | 68 69 6e 67 20 61 64 64 72 65 73 73 65 73 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 49 50 76 36 | hing.addresses..This.is.the.IPv6 |
83320 | 20 63 6f 75 6e 74 65 72 70 61 72 74 20 6f 66 20 49 50 49 50 2e 20 49 27 6d 20 6e 6f 74 20 61 77 | .counterpart.of.IPIP..I'm.not.aw |
83340 | 61 72 65 20 6f 66 20 61 6e 20 52 46 43 20 74 68 61 74 20 64 65 66 69 6e 65 73 20 74 68 69 73 20 | are.of.an.RFC.that.defines.this. |
83360 | 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 73 70 65 63 69 66 69 63 61 6c 6c 79 2c 20 62 75 74 20 | encapsulation.specifically,.but. |
83380 | 69 74 27 73 20 61 20 6e 61 74 75 72 61 6c 20 73 70 65 63 69 66 69 63 20 63 61 73 65 20 6f 66 20 | it's.a.natural.specific.case.of. |
833a0 | 49 50 76 36 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 73 20 64 65 | IPv6.encapsulation.mechanisms.de |
833c0 | 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 32 34 37 33 60 2e 00 54 68 69 73 20 69 73 20 74 | scribed.in.:rfc:2473`..This.is.t |
833e0 | 68 65 20 4c 41 4e 20 65 78 74 65 6e 73 69 6f 6e 20 75 73 65 20 63 61 73 65 2e 20 54 68 65 20 65 | he.LAN.extension.use.case..The.e |
83400 | 74 68 30 20 70 6f 72 74 20 6f 66 20 74 68 65 20 64 69 73 74 61 6e 74 20 56 50 4e 20 70 65 65 72 | th0.port.of.the.distant.VPN.peer |
83420 | 73 20 77 69 6c 6c 20 62 65 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 6c 69 6b | s.will.be.directly.connected.lik |
83440 | 65 20 69 66 20 74 68 65 72 65 20 77 61 73 20 61 20 73 77 69 74 63 68 20 62 65 74 77 65 65 6e 20 | e.if.there.was.a.switch.between. |
83460 | 74 68 65 6d 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 4c 43 44 20 6d 6f 64 65 6c 20 75 73 65 64 | them..This.is.the.LCD.model.used |
83480 | 20 69 6e 20 79 6f 75 72 20 73 79 73 74 65 6d 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 63 6f 6e | .in.your.system..This.is.the.con |
834a0 | 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 66 6f 72 20 74 68 65 20 65 6e 74 | figuration.parameter.for.the.ent |
834c0 | 69 72 65 20 73 68 61 72 65 64 20 6e 65 74 77 6f 72 6b 20 64 65 66 69 6e 69 74 69 6f 6e 2e 20 41 | ire.shared.network.definition..A |
834e0 | 6c 6c 20 73 75 62 6e 65 74 73 20 77 69 6c 6c 20 69 6e 68 65 72 69 74 20 74 68 69 73 20 63 6f 6e | ll.subnets.will.inherit.this.con |
83500 | 66 69 67 75 72 61 74 69 6f 6e 20 69 74 65 6d 20 69 66 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 | figuration.item.if.not.specified |
83520 | 20 6c 6f 63 61 6c 6c 79 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 | .locally..This.is.the.configurat |
83540 | 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 66 6f 72 20 74 68 65 20 65 6e 74 69 72 65 20 73 68 61 | ion.parameter.for.the.entire.sha |
83560 | 72 65 64 20 6e 65 74 77 6f 72 6b 20 64 65 66 69 6e 69 74 69 6f 6e 2e 20 41 6c 6c 20 73 75 62 6e | red.network.definition..All.subn |
83580 | 65 74 73 20 77 69 6c 6c 20 69 6e 68 65 72 69 74 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 | ets.will.inherit.this.configurat |
835a0 | 69 6f 6e 20 69 74 65 6d 20 69 66 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 6c 6f 63 61 6c 6c | ion.item.if.not.specified.locall |
835c0 | 79 2e 20 4d 75 6c 74 69 70 6c 65 20 44 4e 53 20 73 65 72 76 65 72 73 20 63 61 6e 20 62 65 20 64 | y..Multiple.DNS.servers.can.be.d |
835e0 | 65 66 69 6e 65 64 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 65 71 75 69 76 61 6c 65 6e 74 20 6f | efined..This.is.the.equivalent.o |
83600 | 66 20 74 68 65 20 68 6f 73 74 20 62 6c 6f 63 6b 20 69 6e 20 64 68 63 70 64 2e 63 6f 6e 66 20 6f | f.the.host.block.in.dhcpd.conf.o |
83620 | 66 20 69 73 63 2d 64 68 63 70 64 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 6e 61 6d 65 20 6f 66 | f.isc-dhcpd..This.is.the.name.of |
83640 | 20 74 68 65 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 20 75 73 65 64 20 74 6f 20 | .the.physical.interface.used.to. |
83660 | 63 6f 6e 6e 65 63 74 20 74 6f 20 79 6f 75 72 20 4c 43 44 20 64 69 73 70 6c 61 79 2e 20 54 61 62 | connect.to.your.LCD.display..Tab |
83680 | 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 69 73 20 73 75 70 70 6f 72 74 65 64 20 61 6e 64 20 69 74 20 | .completion.is.supported.and.it. |
836a0 | 77 69 6c 6c 20 6c 69 73 74 20 79 6f 75 20 61 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 73 65 72 69 | will.list.you.all.available.seri |
836c0 | 61 6c 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 70 6f 6c 69 63 79 | al.interface..This.is.the.policy |
836e0 | 20 74 68 61 74 20 72 65 71 75 69 65 72 65 73 20 74 68 65 20 6c 6f 77 65 73 74 20 72 65 73 6f 75 | .that.requieres.the.lowest.resou |
83700 | 72 63 65 73 20 66 6f 72 20 74 68 65 20 73 61 6d 65 20 61 6d 6f 75 6e 74 20 6f 66 20 74 72 61 66 | rces.for.the.same.amount.of.traf |
83720 | 66 69 63 2e 20 42 75 74 20 2a 2a 76 65 72 79 20 6c 69 6b 65 6c 79 20 79 6f 75 20 64 6f 20 6e 6f | fic..But.**very.likely.you.do.no |
83740 | 74 20 6e 65 65 64 20 69 74 20 61 73 20 79 6f 75 20 63 61 6e 6e 6f 74 20 67 65 74 20 6d 75 63 68 | t.need.it.as.you.cannot.get.much |
83760 | 20 66 72 6f 6d 20 69 74 2e 20 53 6f 6d 65 74 69 6d 65 73 20 69 74 20 69 73 20 75 73 65 64 20 6a | .from.it..Sometimes.it.is.used.j |
83780 | 75 73 74 20 74 6f 20 65 6e 61 62 6c 65 20 6c 6f 67 67 69 6e 67 2e 2a 2a 00 54 68 69 73 20 69 73 | ust.to.enable.logging.**.This.is |
837a0 | 20 75 73 65 66 75 6c 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 6e 20 63 6f 6d 62 69 6e 61 | .useful,.for.example,.in.combina |
837c0 | 74 69 6f 6e 20 77 69 74 68 20 68 6f 73 74 66 69 6c 65 20 75 70 64 61 74 65 2e 00 54 68 69 73 20 | tion.with.hostfile.update..This. |
837e0 | 69 73 20 77 68 65 72 65 20 22 55 44 50 20 62 72 6f 61 64 63 61 73 74 20 72 65 6c 61 79 22 20 63 | is.where."UDP.broadcast.relay".c |
83800 | 6f 6d 65 73 20 69 6e 74 6f 20 70 6c 61 79 21 20 49 74 20 77 69 6c 6c 20 66 6f 72 77 61 72 64 20 | omes.into.play!.It.will.forward. |
83820 | 72 65 63 65 69 76 65 64 20 62 72 6f 61 64 63 61 73 74 73 20 74 6f 20 6f 74 68 65 72 20 63 6f 6e | received.broadcasts.to.other.con |
83840 | 66 69 67 75 72 65 64 20 6e 65 74 77 6f 72 6b 73 2e 00 54 68 69 73 20 6d 61 6b 65 73 20 74 68 65 | figured.networks..This.makes.the |
83860 | 20 73 65 72 76 65 72 20 61 75 74 68 6f 72 69 74 61 74 69 76 65 6c 79 20 6e 6f 74 20 61 77 61 72 | .server.authoritatively.not.awar |
83880 | 65 20 6f 66 3a 20 31 30 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 2c 20 31 36 38 2e 31 39 32 2e 69 | e.of:.10.in-addr.arpa,.168.192.i |
838a0 | 6e 2d 61 64 64 72 2e 61 72 70 61 2c 20 31 36 2d 33 31 2e 31 37 32 2e 69 6e 2d 61 64 64 72 2e 61 | n-addr.arpa,.16-31.172.in-addr.a |
838c0 | 72 70 61 2c 20 77 68 69 63 68 20 65 6e 61 62 6c 69 6e 67 20 75 70 73 74 72 65 61 6d 20 44 4e 53 | rpa,.which.enabling.upstream.DNS |
838e0 | 20 73 65 72 76 65 72 28 73 29 20 74 6f 20 62 65 20 75 73 65 64 20 66 6f 72 20 72 65 76 65 72 73 | .server(s).to.be.used.for.revers |
83900 | 65 20 6c 6f 6f 6b 75 70 73 20 6f 66 20 74 68 65 73 65 20 7a 6f 6e 65 73 2e 00 54 68 69 73 20 6d | e.lookups.of.these.zones..This.m |
83920 | 65 74 68 6f 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 69 73 61 62 6c 65 73 20 49 50 76 | ethod.automatically.disables.IPv |
83940 | 36 20 74 72 61 66 66 69 63 20 66 6f 72 77 61 72 64 69 6e 67 20 6f 6e 20 74 68 65 20 69 6e 74 65 | 6.traffic.forwarding.on.the.inte |
83960 | 72 66 61 63 65 20 69 6e 20 71 75 65 73 74 69 6f 6e 2e 00 54 68 69 73 20 6d 6f 64 65 20 70 72 6f | rface.in.question..This.mode.pro |
83980 | 76 69 64 65 73 20 66 61 75 6c 74 20 74 6f 6c 65 72 61 6e 63 65 2e 00 54 68 69 73 20 6d 6f 64 65 | vides.fault.tolerance..This.mode |
839a0 | 20 70 72 6f 76 69 64 65 73 20 66 61 75 6c 74 20 74 6f 6c 65 72 61 6e 63 65 2e 20 54 68 65 20 3a | .provides.fault.tolerance..The.: |
839c0 | 63 66 67 63 6d 64 3a 60 70 72 69 6d 61 72 79 60 20 6f 70 74 69 6f 6e 2c 20 64 6f 63 75 6d 65 6e | cfgcmd:`primary`.option,.documen |
839e0 | 74 65 64 20 62 65 6c 6f 77 2c 20 61 66 66 65 63 74 73 20 74 68 65 20 62 65 68 61 76 69 6f 72 20 | ted.below,.affects.the.behavior. |
83a00 | 6f 66 20 74 68 69 73 20 6d 6f 64 65 2e 00 54 68 69 73 20 6d 6f 64 65 20 70 72 6f 76 69 64 65 73 | of.this.mode..This.mode.provides |
83a20 | 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 61 6e 64 20 66 61 75 6c 74 20 74 6f 6c 65 72 61 | .load.balancing.and.fault.tolera |
83a40 | 6e 63 65 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 61 64 64 73 20 50 6f 77 65 72 20 43 6f 6e 73 | nce..This.option.adds.Power.Cons |
83a60 | 74 72 61 69 6e 74 20 65 6c 65 6d 65 6e 74 20 77 68 65 6e 20 61 70 70 6c 69 63 61 62 6c 65 20 61 | traint.element.when.applicable.a |
83a80 | 6e 64 20 43 6f 75 6e 74 72 79 20 65 6c 65 6d 65 6e 74 20 69 73 20 61 64 64 65 64 2e 20 50 6f 77 | nd.Country.element.is.added..Pow |
83aa0 | 65 72 20 43 6f 6e 73 74 72 61 69 6e 74 20 65 6c 65 6d 65 6e 74 20 69 73 20 72 65 71 75 69 72 65 | er.Constraint.element.is.require |
83ac0 | 64 20 62 79 20 54 72 61 6e 73 6d 69 74 20 50 6f 77 65 72 20 43 6f 6e 74 72 6f 6c 2e 00 54 68 69 | d.by.Transmit.Power.Control..Thi |
83ae0 | 73 20 6f 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 6d 75 6c 74 69 70 | s.option.can.be.specified.multip |
83b00 | 6c 65 20 74 69 6d 65 73 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 73 75 70 | le.times..This.option.can.be.sup |
83b20 | 70 6c 69 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e 00 54 68 69 73 20 6f 70 74 69 6f | plied.multiple.times..This.optio |
83b40 | 6e 20 69 73 20 6d 61 6e 64 61 74 6f 72 79 20 69 6e 20 41 63 63 65 73 73 2d 50 6f 69 6e 74 20 6d | n.is.mandatory.in.Access-Point.m |
83b60 | 6f 64 65 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 72 65 71 75 69 72 65 64 20 77 68 65 | ode..This.option.is.required.whe |
83b80 | 6e 20 72 75 6e 6e 69 6e 67 20 61 20 44 4d 56 50 4e 20 73 70 6f 6b 65 2e 00 54 68 69 73 20 6f 70 | n.running.a.DMVPN.spoke..This.op |
83ba0 | 74 69 6f 6e 20 69 73 20 75 73 65 64 20 62 79 20 73 6f 6d 65 20 44 48 43 50 20 63 6c 69 65 6e 74 | tion.is.used.by.some.DHCP.client |
83bc0 | 73 20 61 73 20 61 20 77 61 79 20 66 6f 72 20 75 73 65 72 73 20 74 6f 20 73 70 65 63 69 66 79 20 | s.as.a.way.for.users.to.specify. |
83be0 | 69 64 65 6e 74 69 66 79 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 74 68 65 20 63 | identifying.information.to.the.c |
83c00 | 6c 69 65 6e 74 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 20 61 20 73 69 6d | lient..This.can.be.used.in.a.sim |
83c20 | 69 6c 61 72 20 77 61 79 20 74 6f 20 74 68 65 20 76 65 6e 64 6f 72 2d 63 6c 61 73 73 2d 69 64 65 | ilar.way.to.the.vendor-class-ide |
83c40 | 6e 74 69 66 69 65 72 20 6f 70 74 69 6f 6e 2c 20 62 75 74 20 74 68 65 20 76 61 6c 75 65 20 6f 66 | ntifier.option,.but.the.value.of |
83c60 | 20 74 68 65 20 6f 70 74 69 6f 6e 20 69 73 20 73 70 65 63 69 66 69 65 64 20 62 79 20 74 68 65 20 | .the.option.is.specified.by.the. |
83c80 | 75 73 65 72 2c 20 6e 6f 74 20 74 68 65 20 76 65 6e 64 6f 72 2e 00 54 68 69 73 20 6f 70 74 69 6f | user,.not.the.vendor..This.optio |
83ca0 | 6e 20 69 73 20 75 73 65 64 20 62 79 20 73 6f 6d 65 20 44 48 43 50 20 63 6c 69 65 6e 74 73 20 74 | n.is.used.by.some.DHCP.clients.t |
83cc0 | 6f 20 69 64 65 6e 74 69 66 79 20 74 68 65 20 76 65 6e 64 6f 72 20 74 79 70 65 20 61 6e 64 20 70 | o.identify.the.vendor.type.and.p |
83ce0 | 6f 73 73 69 62 6c 79 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 61 20 44 | ossibly.the.configuration.of.a.D |
83d00 | 48 43 50 20 63 6c 69 65 6e 74 2e 20 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 61 | HCP.client..The.information.is.a |
83d20 | 20 73 74 72 69 6e 67 20 6f 66 20 62 79 74 65 73 20 77 68 6f 73 65 20 63 6f 6e 74 65 6e 74 73 20 | .string.of.bytes.whose.contents. |
83d40 | 61 72 65 20 73 70 65 63 69 66 69 63 20 74 6f 20 74 68 65 20 76 65 6e 64 6f 72 20 61 6e 64 20 61 | are.specific.to.the.vendor.and.a |
83d60 | 72 65 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 61 20 73 74 61 6e 64 61 72 64 2e 00 | re.not.specified.in.a.standard.. |
83d80 | 54 68 69 73 20 6f 70 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 75 73 65 64 20 77 69 74 68 20 60 60 | This.option.must.be.used.with.`` |
83da0 | 74 69 6d 65 6f 75 74 60 60 20 6f 70 74 69 6f 6e 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 6f 6e | timeout``.option..This.option.on |
83dc0 | 6c 79 20 61 66 66 65 63 74 73 20 38 30 32 2e 33 61 64 20 6d 6f 64 65 2e 00 54 68 69 73 20 6f 70 | ly.affects.802.3ad.mode..This.op |
83de0 | 74 69 6f 6e 20 73 70 65 63 69 66 69 65 73 20 61 20 64 65 6c 61 79 20 69 6e 20 73 65 63 6f 6e 64 | tion.specifies.a.delay.in.second |
83e00 | 73 20 62 65 66 6f 72 65 20 76 72 72 70 20 69 6e 73 74 61 6e 63 65 73 20 73 74 61 72 74 20 75 70 | s.before.vrrp.instances.start.up |
83e20 | 20 61 66 74 65 72 20 6b 65 65 70 61 6c 69 76 65 64 20 73 74 61 72 74 73 2e 00 54 68 69 73 20 6f | .after.keepalived.starts..This.o |
83e40 | 70 74 69 6f 6e 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 32 30 34 38 00 54 68 69 73 20 70 61 72 | ptions.defaults.to.2048.This.par |
83e60 | 61 6d 65 74 65 72 20 61 6c 6c 6f 77 73 20 74 6f 20 22 73 68 6f 72 74 63 75 74 22 20 72 6f 75 74 | ameter.allows.to."shortcut".rout |
83e80 | 65 73 20 28 6e 6f 6e 2d 62 61 63 6b 62 6f 6e 65 29 20 66 6f 72 20 69 6e 74 65 72 2d 61 72 65 61 | es.(non-backbone).for.inter-area |
83ea0 | 20 72 6f 75 74 65 73 2e 20 54 68 65 72 65 20 61 72 65 20 74 68 72 65 65 20 6d 6f 64 65 73 20 61 | .routes..There.are.three.modes.a |
83ec0 | 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 73 20 73 68 6f 72 74 63 75 74 74 69 6e 67 | vailable.for.routes.shortcutting |
83ee0 | 3a 00 54 68 69 73 20 70 6f 6c 69 63 79 20 69 73 20 69 6e 74 65 6e 64 65 64 20 74 6f 20 70 72 6f | :.This.policy.is.intended.to.pro |
83f00 | 76 69 64 65 20 61 20 6d 6f 72 65 20 62 61 6c 61 6e 63 65 64 20 64 69 73 74 72 69 62 75 74 69 6f | vide.a.more.balanced.distributio |
83f20 | 6e 20 6f 66 20 74 72 61 66 66 69 63 20 74 68 61 6e 20 6c 61 79 65 72 32 20 61 6c 6f 6e 65 2c 20 | n.of.traffic.than.layer2.alone,. |
83f40 | 65 73 70 65 63 69 61 6c 6c 79 20 69 6e 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 77 68 65 72 65 | especially.in.environments.where |
83f60 | 20 61 20 6c 61 79 65 72 33 20 67 61 74 65 77 61 79 20 64 65 76 69 63 65 20 69 73 20 72 65 71 75 | .a.layer3.gateway.device.is.requ |
83f80 | 69 72 65 64 20 74 6f 20 72 65 61 63 68 20 6d 6f 73 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 73 2e | ired.to.reach.most.destinations. |
83fa0 | 00 54 68 69 73 20 70 72 6f 6d 70 74 65 64 20 73 6f 6d 65 20 49 53 50 73 20 74 6f 20 64 65 76 65 | .This.prompted.some.ISPs.to.deve |
83fc0 | 6c 6f 70 20 61 20 70 6f 6c 69 63 79 20 77 69 74 68 69 6e 20 74 68 65 20 3a 61 62 62 72 3a 60 41 | lop.a.policy.within.the.:abbr:`A |
83fe0 | 52 49 4e 20 28 41 6d 65 72 69 63 61 6e 20 52 65 67 69 73 74 72 79 20 66 6f 72 20 49 6e 74 65 72 | RIN.(American.Registry.for.Inter |
84000 | 6e 65 74 20 4e 75 6d 62 65 72 73 29 60 20 74 6f 20 61 6c 6c 6f 63 61 74 65 20 6e 65 77 20 70 72 | net.Numbers)`.to.allocate.new.pr |
84020 | 69 76 61 74 65 20 61 64 64 72 65 73 73 20 73 70 61 63 65 20 66 6f 72 20 43 47 4e 73 2c 20 62 75 | ivate.address.space.for.CGNs,.bu |
84040 | 74 20 41 52 49 4e 20 64 65 66 65 72 72 65 64 20 74 6f 20 74 68 65 20 49 45 54 46 20 62 65 66 6f | t.ARIN.deferred.to.the.IETF.befo |
84060 | 72 65 20 69 6d 70 6c 65 6d 65 6e 74 69 6e 67 20 74 68 65 20 70 6f 6c 69 63 79 20 69 6e 64 69 63 | re.implementing.the.policy.indic |
84080 | 61 74 69 6e 67 20 74 68 61 74 20 74 68 65 20 6d 61 74 74 65 72 20 77 61 73 20 6e 6f 74 20 61 20 | ating.that.the.matter.was.not.a. |
840a0 | 74 79 70 69 63 61 6c 20 61 6c 6c 6f 63 61 74 69 6f 6e 20 69 73 73 75 65 20 62 75 74 20 61 20 72 | typical.allocation.issue.but.a.r |
840c0 | 65 73 65 72 76 61 74 69 6f 6e 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 66 6f 72 20 74 65 63 68 | eservation.of.addresses.for.tech |
840e0 | 6e 69 63 61 6c 20 70 75 72 70 6f 73 65 73 20 28 70 65 72 20 3a 72 66 63 3a 60 32 38 36 30 60 29 | nical.purposes.(per.:rfc:`2860`) |
84100 | 2e 00 54 68 69 73 20 72 65 71 75 69 72 65 64 20 73 65 74 74 69 6e 67 20 64 65 66 69 6e 65 73 20 | ..This.required.setting.defines. |
84120 | 74 68 65 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 63 75 72 72 65 6e 74 20 72 75 6c 65 2e 20 | the.action.of.the.current.rule.. |
84140 | 49 66 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2c 20 74 68 | If.action.is.set.to.``jump``,.th |
84160 | 65 6e 20 60 60 6a 75 6d 70 2d 74 61 72 67 65 74 60 60 20 69 73 20 61 6c 73 6f 20 6e 65 65 64 65 | en.``jump-target``.is.also.neede |
84180 | 64 2e 00 54 68 69 73 20 72 65 71 75 69 72 65 64 20 73 65 74 74 69 6e 67 20 64 65 66 69 6e 65 73 | d..This.required.setting.defines |
841a0 | 20 74 68 65 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 63 75 72 72 65 6e 74 20 72 75 6c 65 2e | .the.action.of.the.current.rule. |
841c0 | 20 49 66 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 6a 75 6d 70 2c 20 74 68 65 6e 20 | .If.action.is.set.to.jump,.then. |
841e0 | 6a 75 6d 70 2d 74 61 72 67 65 74 20 69 73 20 61 6c 73 6f 20 6e 65 65 64 65 64 2e 00 54 68 69 73 | jump-target.is.also.needed..This |
84200 | 20 72 65 71 75 69 72 65 73 20 74 77 6f 20 66 69 6c 65 73 2c 20 6f 6e 65 20 74 6f 20 63 72 65 61 | .requires.two.files,.one.to.crea |
84220 | 74 65 20 74 68 65 20 64 65 76 69 63 65 20 28 58 58 58 2e 6e 65 74 64 65 76 29 20 61 6e 64 20 6f | te.the.device.(XXX.netdev).and.o |
84240 | 6e 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 6f 6e 20 74 | ne.to.configure.the.network.on.t |
84260 | 68 65 20 64 65 76 69 63 65 20 28 58 58 58 2e 6e 65 74 77 6f 72 6b 29 00 54 68 69 73 20 72 65 73 | he.device.(XXX.network).This.res |
84280 | 75 6c 74 73 20 69 6e 20 74 68 65 20 61 63 74 69 76 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | ults.in.the.active.configuration |
842a0 | 3a 00 54 68 69 73 20 73 61 79 73 20 74 68 61 74 20 74 68 69 73 20 64 65 76 69 63 65 20 69 73 20 | :.This.says.that.this.device.is. |
842c0 | 74 68 65 20 6f 6e 6c 79 20 44 48 43 50 20 73 65 72 76 65 72 20 66 6f 72 20 74 68 69 73 20 6e 65 | the.only.DHCP.server.for.this.ne |
842e0 | 74 77 6f 72 6b 2e 20 49 66 20 6f 74 68 65 72 20 64 65 76 69 63 65 73 20 61 72 65 20 74 72 79 69 | twork..If.other.devices.are.tryi |
84300 | 6e 67 20 74 6f 20 6f 66 66 65 72 20 44 48 43 50 20 6c 65 61 73 65 73 2c 20 74 68 69 73 20 6d 61 | ng.to.offer.DHCP.leases,.this.ma |
84320 | 63 68 69 6e 65 20 77 69 6c 6c 20 73 65 6e 64 20 27 44 48 43 50 4e 41 4b 27 20 74 6f 20 61 6e 79 | chine.will.send.'DHCPNAK'.to.any |
84340 | 20 64 65 76 69 63 65 20 74 72 79 69 6e 67 20 74 6f 20 72 65 71 75 65 73 74 20 61 6e 20 49 50 20 | .device.trying.to.request.an.IP. |
84360 | 61 64 64 72 65 73 73 20 74 68 61 74 20 69 73 20 6e 6f 74 20 76 61 6c 69 64 20 66 6f 72 20 74 68 | address.that.is.not.valid.for.th |
84380 | 69 73 20 6e 65 74 77 6f 72 6b 2e 00 54 68 69 73 20 73 65 63 74 69 6f 6e 20 64 65 73 63 72 69 62 | is.network..This.section.describ |
843a0 | 65 73 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 44 4e 53 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d | es.configuring.DNS.on.the.system |
843c0 | 2c 20 6e 61 6d 65 6c 79 3a 00 54 68 69 73 20 73 65 63 74 69 6f 6e 20 64 65 73 63 72 69 62 65 73 | ,.namely:.This.section.describes |
843e0 | 20 74 68 65 20 73 79 73 74 65 6d 27 73 20 68 6f 73 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 | .the.system's.host.information.a |
84400 | 6e 64 20 68 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 6d 2c 20 69 74 20 63 6f 76 | nd.how.to.configure.them,.it.cov |
84420 | 65 72 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 70 69 63 73 3a 00 54 68 69 73 20 73 | ers.the.following.topics:.This.s |
84440 | 65 63 74 69 6f 6e 20 6e 65 65 64 73 20 69 6d 70 72 6f 76 65 6d 65 6e 74 73 2c 20 65 78 61 6d 70 | ection.needs.improvements,.examp |
84460 | 6c 65 73 20 61 6e 64 20 65 78 70 6c 61 6e 61 74 69 6f 6e 73 2e 00 54 68 69 73 20 73 65 74 20 74 | les.and.explanations..This.set.t |
84480 | 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 75 6c 65 2d 73 65 | he.default.action.of.the.rule-se |
844a0 | 74 20 69 66 20 6e 6f 20 72 75 6c 65 20 6d 61 74 63 68 65 64 20 61 20 70 61 63 6b 65 74 20 63 72 | t.if.no.rule.matched.a.packet.cr |
844c0 | 69 74 65 72 69 61 2e 20 49 66 20 64 65 66 61 63 75 6c 74 2d 61 63 74 69 6f 6e 20 69 73 20 73 65 | iteria..If.defacult-action.is.se |
844e0 | 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2c 20 74 68 65 6e 20 60 60 64 65 66 61 75 6c 74 2d 6a 75 | t.to.``jump``,.then.``default-ju |
84500 | 6d 70 2d 74 61 72 67 65 74 60 60 20 69 73 20 61 6c 73 6f 20 6e 65 65 64 65 64 2e 00 54 68 69 73 | mp-target``.is.also.needed..This |
84520 | 20 73 65 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 | .set.the.default.action.of.the.r |
84540 | 75 6c 65 2d 73 65 74 20 69 66 20 6e 6f 20 72 75 6c 65 20 6d 61 74 63 68 65 64 20 61 20 70 61 63 | ule-set.if.no.rule.matched.a.pac |
84560 | 6b 65 74 20 63 72 69 74 65 72 69 61 2e 20 49 66 20 64 65 66 61 63 75 6c 74 2d 61 63 74 69 6f 6e | ket.criteria..If.defacult-action |
84580 | 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2c 20 74 68 65 6e 20 60 60 64 65 66 61 | .is.set.to.``jump``,.then.``defa |
845a0 | 75 6c 74 2d 6a 75 6d 70 2d 74 61 72 67 65 74 60 60 20 69 73 20 61 6c 73 6f 20 6e 65 65 64 65 64 | ult-jump-target``.is.also.needed |
845c0 | 2e 20 4e 6f 74 65 20 74 68 61 74 20 66 6f 72 20 62 61 73 65 20 63 68 61 69 6e 73 2c 20 64 65 66 | ..Note.that.for.base.chains,.def |
845e0 | 61 75 6c 74 20 61 63 74 69 6f 6e 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 73 65 74 20 74 6f 20 60 | ault.action.can.only.be.set.to.` |
84600 | 60 61 63 63 65 70 74 60 60 20 6f 72 20 60 60 64 72 6f 70 60 60 2c 20 77 68 69 6c 65 20 6f 6e 20 | `accept``.or.``drop``,.while.on. |
84620 | 63 75 73 74 6f 6d 20 63 68 61 69 6e 2c 20 6d 6f 72 65 20 61 63 74 69 6f 6e 73 20 61 72 65 20 61 | custom.chain,.more.actions.are.a |
84640 | 76 61 69 6c 61 62 6c 65 2e 00 54 68 69 73 20 73 65 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 | vailable..This.set.the.default.a |
84660 | 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 75 6c 65 2d 73 65 74 20 69 66 20 6e 6f 20 72 75 6c 65 | ction.of.the.rule-set.if.no.rule |
84680 | 20 6d 61 74 63 68 65 64 20 61 20 70 61 63 6b 65 74 20 63 72 69 74 65 72 69 61 2e 20 49 66 20 64 | .matched.a.packet.criteria..If.d |
846a0 | 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 | efault-action.is.set.to.``jump`` |
846c0 | 2c 20 74 68 65 6e 20 60 60 64 65 66 61 75 6c 74 2d 6a 75 6d 70 2d 74 61 72 67 65 74 60 60 20 69 | ,.then.``default-jump-target``.i |
846e0 | 73 20 61 6c 73 6f 20 6e 65 65 64 65 64 2e 20 4e 6f 74 65 20 74 68 61 74 20 66 6f 72 20 62 61 73 | s.also.needed..Note.that.for.bas |
84700 | 65 20 63 68 61 69 6e 73 2c 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 63 61 6e 20 6f 6e 6c | e.chains,.default.action.can.onl |
84720 | 79 20 62 65 20 73 65 74 20 74 6f 20 60 60 61 63 63 65 70 74 60 60 20 6f 72 20 60 60 64 72 6f 70 | y.be.set.to.``accept``.or.``drop |
84740 | 60 60 2c 20 77 68 69 6c 65 20 6f 6e 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2c 20 6d 6f 72 65 20 | ``,.while.on.custom.chain,.more. |
84760 | 61 63 74 69 6f 6e 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 2e 00 54 68 69 73 20 73 65 74 73 | actions.are.available..This.sets |
84780 | 20 74 68 65 20 61 63 63 65 70 74 65 64 20 63 69 70 68 65 72 73 20 74 6f 20 75 73 65 20 77 68 65 | .the.accepted.ciphers.to.use.whe |
847a0 | 6e 20 76 65 72 73 69 6f 6e 20 3d 3e 20 32 2e 34 2e 30 20 61 6e 64 20 4e 43 50 20 69 73 20 65 6e | n.version.=>.2.4.0.and.NCP.is.en |
847c0 | 61 62 6c 65 64 20 28 77 68 69 63 68 20 69 73 20 74 68 65 20 64 65 66 61 75 6c 74 29 2e 20 44 65 | abled.(which.is.the.default)..De |
847e0 | 66 61 75 6c 74 20 4e 43 50 20 63 69 70 68 65 72 20 66 6f 72 20 76 65 72 73 69 6f 6e 73 20 3e 3d | fault.NCP.cipher.for.versions.>= |
84800 | 20 32 2e 34 2e 30 20 69 73 20 61 65 73 32 35 36 67 63 6d 2e 20 54 68 65 20 66 69 72 73 74 20 63 | .2.4.0.is.aes256gcm..The.first.c |
84820 | 69 70 68 65 72 20 69 6e 20 74 68 69 73 20 6c 69 73 74 20 69 73 20 77 68 61 74 20 73 65 72 76 65 | ipher.in.this.list.is.what.serve |
84840 | 72 20 70 75 73 68 65 73 20 74 6f 20 63 6c 69 65 6e 74 73 2e 00 54 68 69 73 20 73 65 74 73 20 74 | r.pushes.to.clients..This.sets.t |
84860 | 68 65 20 63 69 70 68 65 72 20 77 68 65 6e 20 4e 43 50 20 28 4e 65 67 6f 74 69 61 62 6c 65 20 43 | he.cipher.when.NCP.(Negotiable.C |
84880 | 72 79 70 74 6f 20 50 61 72 61 6d 65 74 65 72 73 29 20 69 73 20 64 69 73 61 62 6c 65 64 20 6f 72 | rypto.Parameters).is.disabled.or |
848a0 | 20 4f 70 65 6e 56 50 4e 20 76 65 72 73 69 6f 6e 20 3c 20 32 2e 34 2e 30 2e 00 54 68 69 73 20 73 | .OpenVPN.version.<.2.4.0..This.s |
848c0 | 65 74 74 69 6e 67 20 64 65 66 61 75 6c 74 73 20 74 6f 20 31 35 30 30 20 61 6e 64 20 69 73 20 76 | etting.defaults.to.1500.and.is.v |
848e0 | 61 6c 69 64 20 62 65 74 77 65 65 6e 20 31 30 20 61 6e 64 20 36 30 30 30 30 2e 00 54 68 69 73 20 | alid.between.10.and.60000..This. |
84900 | 73 65 74 74 69 6e 67 20 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 74 68 65 20 72 65 | setting.enable.or.disable.the.re |
84920 | 73 70 6f 6e 73 65 20 6f 66 20 69 63 6d 70 20 62 72 6f 61 64 63 61 73 74 20 6d 65 73 73 61 67 65 | sponse.of.icmp.broadcast.message |
84940 | 73 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 | s..The.following.system.paramete |
84960 | 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 54 68 69 73 20 73 65 74 74 69 6e 67 20 | r.will.be.altered:.This.setting. |
84980 | 68 61 6e 64 6c 65 20 69 66 20 56 79 4f 53 20 61 63 63 65 70 74 20 70 61 63 6b 65 74 73 20 77 69 | handle.if.VyOS.accept.packets.wi |
849a0 | 74 68 20 61 20 73 6f 75 72 63 65 20 72 6f 75 74 65 20 6f 70 74 69 6f 6e 2e 20 54 68 65 20 66 6f | th.a.source.route.option..The.fo |
849c0 | 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 | llowing.system.parameter.will.be |
849e0 | 20 61 6c 74 65 72 65 64 3a 00 54 68 69 73 20 73 65 74 74 69 6e 67 2c 20 77 68 69 63 68 20 64 65 | .altered:.This.setting,.which.de |
84a00 | 66 61 75 6c 74 73 20 74 6f 20 33 36 30 30 20 73 65 63 6f 6e 64 73 2c 20 70 75 74 73 20 61 20 6d | faults.to.3600.seconds,.puts.a.m |
84a20 | 61 78 69 6d 75 6d 20 6f 6e 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 74 69 6d 65 20 6e 65 67 | aximum.on.the.amount.of.time.neg |
84a40 | 61 74 69 76 65 20 65 6e 74 72 69 65 73 20 61 72 65 20 63 61 63 68 65 64 2e 00 54 68 69 73 20 73 | ative.entries.are.cached..This.s |
84a60 | 65 74 75 70 20 77 69 6c 6c 20 6d 61 6b 65 20 74 68 65 20 56 52 52 50 20 70 72 6f 63 65 73 73 20 | etup.will.make.the.VRRP.process. |
84a80 | 65 78 65 63 75 74 65 20 74 68 65 20 60 60 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2f 76 72 | execute.the.``/config/scripts/vr |
84aa0 | 72 70 2d 63 68 65 63 6b 2e 73 68 20 73 63 72 69 70 74 60 60 20 65 76 65 72 79 20 36 30 20 73 65 | rp-check.sh.script``.every.60.se |
84ac0 | 63 6f 6e 64 73 2c 20 61 6e 64 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 68 65 20 67 72 6f 75 70 20 | conds,.and.transition.the.group. |
84ae0 | 74 6f 20 74 68 65 20 66 61 75 6c 74 20 73 74 61 74 65 20 69 66 20 69 74 20 66 61 69 6c 73 20 28 | to.the.fault.state.if.it.fails.( |
84b00 | 69 2e 65 2e 20 65 78 69 74 73 20 77 69 74 68 20 6e 6f 6e 2d 7a 65 72 6f 20 73 74 61 74 75 73 29 | i.e..exits.with.non-zero.status) |
84b20 | 20 74 68 72 65 65 20 74 69 6d 65 73 3a 00 54 68 69 73 20 73 74 61 74 65 6d 65 6e 74 20 73 70 65 | .three.times:.This.statement.spe |
84b40 | 63 69 66 69 65 73 20 64 68 63 70 36 63 20 74 6f 20 6f 6e 6c 79 20 65 78 63 68 61 6e 67 65 20 69 | cifies.dhcp6c.to.only.exchange.i |
84b60 | 6e 66 6f 72 6d 61 74 69 6f 6e 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d | nformational.configuration.param |
84b80 | 65 74 65 72 73 20 77 69 74 68 20 73 65 72 76 65 72 73 2e 20 41 20 6c 69 73 74 20 6f 66 20 44 4e | eters.with.servers..A.list.of.DN |
84ba0 | 53 20 73 65 72 76 65 72 20 61 64 64 72 65 73 73 65 73 20 69 73 20 61 6e 20 65 78 61 6d 70 6c 65 | S.server.addresses.is.an.example |
84bc0 | 20 6f 66 20 73 75 63 68 20 70 61 72 61 6d 65 74 65 72 73 2e 20 54 68 69 73 20 73 74 61 74 65 6d | .of.such.parameters..This.statem |
84be0 | 65 6e 74 20 69 73 20 75 73 65 66 75 6c 20 77 68 65 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 64 6f | ent.is.useful.when.the.client.do |
84c00 | 65 73 20 6e 6f 74 20 6e 65 65 64 20 73 74 61 74 65 66 75 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 | es.not.need.stateful.configurati |
84c20 | 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 20 73 75 63 68 20 61 73 20 49 50 76 36 20 61 64 64 72 65 | on.parameters.such.as.IPv6.addre |
84c40 | 73 73 65 73 20 6f 72 20 70 72 65 66 69 78 65 73 2e 00 54 68 69 73 20 73 75 70 70 6f 72 74 20 6d | sses.or.prefixes..This.support.m |
84c60 | 61 79 20 62 65 20 65 6e 61 62 6c 65 64 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 6c 79 20 28 | ay.be.enabled.administratively.( |
84c80 | 61 6e 64 20 69 6e 64 65 66 69 6e 69 74 65 6c 79 29 20 77 69 74 68 20 74 68 65 20 3a 63 66 67 63 | and.indefinitely).with.the.:cfgc |
84ca0 | 6d 64 3a 60 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 60 20 63 6f 6d 6d 61 6e 64 2e 20 49 74 20 | md:`administrative`.command..It. |
84cc0 | 6d 61 79 20 61 6c 73 6f 20 62 65 20 65 6e 61 62 6c 65 64 20 63 6f 6e 64 69 74 69 6f 6e 61 6c 6c | may.also.be.enabled.conditionall |
84ce0 | 79 2e 20 43 6f 6e 64 69 74 69 6f 6e 61 6c 20 65 6e 61 62 6c 69 6e 67 20 6f 66 20 6d 61 78 2d 6d | y..Conditional.enabling.of.max-m |
84d00 | 65 74 72 69 63 20 72 6f 75 74 65 72 2d 6c 73 61 73 20 63 61 6e 20 62 65 20 66 6f 72 20 61 20 70 | etric.router-lsas.can.be.for.a.p |
84d20 | 65 72 69 6f 64 20 6f 66 20 73 65 63 6f 6e 64 73 20 61 66 74 65 72 20 73 74 61 72 74 75 70 20 77 | eriod.of.seconds.after.startup.w |
84d40 | 69 74 68 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 6f 6e 2d 73 74 61 72 74 75 70 20 3c 73 65 63 | ith.the.:cfgcmd:`on-startup.<sec |
84d60 | 6f 6e 64 73 3e 60 20 63 6f 6d 6d 61 6e 64 20 61 6e 64 2f 6f 72 20 66 6f 72 20 61 20 70 65 72 69 | onds>`.command.and/or.for.a.peri |
84d80 | 6f 64 20 6f 66 20 73 65 63 6f 6e 64 73 20 70 72 69 6f 72 20 74 6f 20 73 68 75 74 64 6f 77 6e 20 | od.of.seconds.prior.to.shutdown. |
84da0 | 77 69 74 68 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 6f 6e 2d 73 68 75 74 64 6f 77 6e 20 3c 73 | with.the.:cfgcmd:`on-shutdown.<s |
84dc0 | 65 63 6f 6e 64 73 3e 60 20 63 6f 6d 6d 61 6e 64 2e 20 54 68 65 20 74 69 6d 65 20 72 61 6e 67 65 | econds>`.command..The.time.range |
84de0 | 20 69 73 20 35 20 74 6f 20 38 36 34 30 30 2e 00 54 68 69 73 20 74 65 63 68 6e 69 71 75 65 20 69 | .is.5.to.86400..This.technique.i |
84e00 | 73 20 63 6f 6d 6d 6f 6e 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 4e 41 54 20 52 65 | s.commonly.referred.to.as.NAT.Re |
84e20 | 66 6c 65 63 74 69 6f 6e 20 6f 72 20 48 61 69 72 70 69 6e 20 4e 41 54 2e 00 54 68 69 73 20 74 65 | flection.or.Hairpin.NAT..This.te |
84e40 | 63 68 6e 6f 6c 6f 67 79 20 69 73 20 6b 6e 6f 77 6e 20 62 79 20 64 69 66 66 65 72 65 6e 74 20 6e | chnology.is.known.by.different.n |
84e60 | 61 6d 65 73 3a 00 54 68 69 73 20 74 68 65 20 73 69 6d 70 6c 65 73 74 20 71 75 65 75 65 20 70 6f | ames:.This.the.simplest.queue.po |
84e80 | 73 73 69 62 6c 65 20 79 6f 75 20 63 61 6e 20 61 70 70 6c 79 20 74 6f 20 79 6f 75 72 20 74 72 61 | ssible.you.can.apply.to.your.tra |
84ea0 | 66 66 69 63 2e 20 54 72 61 66 66 69 63 20 6d 75 73 74 20 67 6f 20 74 68 72 6f 75 67 68 20 61 20 | ffic..Traffic.must.go.through.a. |
84ec0 | 66 69 6e 69 74 65 20 71 75 65 75 65 20 62 65 66 6f 72 65 20 69 74 20 69 73 20 61 63 74 75 61 6c | finite.queue.before.it.is.actual |
84ee0 | 6c 79 20 73 65 6e 74 2e 20 59 6f 75 20 6d 75 73 74 20 64 65 66 69 6e 65 20 68 6f 77 20 6d 61 6e | ly.sent..You.must.define.how.man |
84f00 | 79 20 70 61 63 6b 65 74 73 20 74 68 61 74 20 71 75 65 75 65 20 63 61 6e 20 63 6f 6e 74 61 69 6e | y.packets.that.queue.can.contain |
84f20 | 2e 00 54 68 69 73 20 74 6f 70 6f 6c 6f 67 79 20 77 61 73 20 62 75 69 6c 74 20 75 73 69 6e 67 20 | ..This.topology.was.built.using. |
84f40 | 47 4e 53 33 2e 00 54 68 69 73 20 77 69 6c 6c 20 61 64 64 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e | GNS3..This.will.add.the.followin |
84f60 | 67 20 6f 70 74 69 6f 6e 20 74 6f 20 74 68 65 20 4b 65 72 6e 65 6c 20 63 6f 6d 6d 61 6e 64 6c 69 | g.option.to.the.Kernel.commandli |
84f80 | 6e 65 3a 00 54 68 69 73 20 77 69 6c 6c 20 61 64 64 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 | ne:.This.will.add.the.following. |
84fa0 | 74 77 6f 20 6f 70 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 4b 65 72 6e 65 6c 20 63 6f 6d 6d 61 6e | two.options.to.the.Kernel.comman |
84fc0 | 64 6c 69 6e 65 3a 00 54 68 69 73 20 77 69 6c 6c 20 62 65 20 74 68 65 20 6d 6f 73 74 20 77 69 64 | dline:.This.will.be.the.most.wid |
84fe0 | 65 6c 79 20 75 73 65 64 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 61 20 72 6f 75 74 65 72 20 63 | ely.used.interface.on.a.router.c |
85000 | 61 72 72 79 69 6e 67 20 74 72 61 66 66 69 63 20 74 6f 20 74 68 65 20 72 65 61 6c 20 77 6f 72 6c | arrying.traffic.to.the.real.worl |
85020 | 64 2e 00 54 68 69 73 20 77 69 6c 6c 20 63 6f 6e 66 69 67 75 72 65 20 61 20 73 74 61 74 69 63 20 | d..This.will.configure.a.static. |
85040 | 41 52 50 20 65 6e 74 72 79 20 61 6c 77 61 79 73 20 72 65 73 6f 6c 76 69 6e 67 20 60 3c 61 64 64 | ARP.entry.always.resolving.`<add |
85060 | 72 65 73 73 3e 60 20 74 6f 20 60 3c 6d 61 63 3e 60 20 66 6f 72 20 69 6e 74 65 72 66 61 63 65 20 | ress>`.to.`<mac>`.for.interface. |
85080 | 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 54 68 69 73 20 77 69 6c 6c 20 6d 61 74 63 68 20 54 | `<interface>`..This.will.match.T |
850a0 | 43 50 20 74 72 61 66 66 69 63 20 77 69 74 68 20 73 6f 75 72 63 65 20 70 6f 72 74 20 38 30 2e 00 | CP.traffic.with.source.port.80.. |
850c0 | 54 68 69 73 20 77 69 6c 6c 20 72 65 6e 64 65 72 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 64 | This.will.render.the.following.d |
850e0 | 64 63 6c 69 65 6e 74 5f 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 6e 74 72 79 3a 00 54 68 | dclient_.configuration.entry:.Th |
85100 | 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 62 61 73 69 63 20 66 69 72 65 77 61 6c | is.will.show.you.a.basic.firewal |
85120 | 6c 20 6f 76 65 72 76 69 65 77 00 54 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 | l.overview.This.will.show.you.a. |
85140 | 62 61 73 69 63 20 66 69 72 65 77 61 6c 6c 20 6f 76 65 72 76 69 65 77 2c 20 66 6f 72 20 61 6c 6c | basic.firewall.overview,.for.all |
85160 | 20 72 75 6c 65 73 65 74 2c 20 61 6e 64 20 6e 6f 74 20 6f 6e 6c 79 20 66 6f 72 20 69 70 76 34 00 | .ruleset,.and.not.only.for.ipv4. |
85180 | 54 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 62 61 73 69 63 20 73 75 6d 6d 61 | This.will.show.you.a.basic.summa |
851a0 | 72 79 20 6f 66 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 7a 6f 6e 65 2e 00 54 68 69 73 20 77 69 | ry.of.a.particular.zone..This.wi |
851c0 | 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 62 61 73 69 63 20 73 75 6d 6d 61 72 79 20 6f 66 20 7a | ll.show.you.a.basic.summary.of.z |
851e0 | 6f 6e 65 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 54 68 69 73 20 77 69 6c 6c 20 73 68 | ones.configuration..This.will.sh |
85200 | 6f 77 20 79 6f 75 20 61 20 72 75 6c 65 2d 73 65 74 20 73 74 61 74 69 73 74 69 63 20 73 69 6e 63 | ow.you.a.rule-set.statistic.sinc |
85220 | 65 20 74 68 65 20 6c 61 73 74 20 62 6f 6f 74 2e 00 54 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 | e.the.last.boot..This.will.show. |
85240 | 79 6f 75 20 61 20 73 74 61 74 69 73 74 69 63 20 6f 66 20 61 6c 6c 20 72 75 6c 65 2d 73 65 74 73 | you.a.statistic.of.all.rule-sets |
85260 | 20 73 69 6e 63 65 20 74 68 65 20 6c 61 73 74 20 62 6f 6f 74 2e 00 54 68 69 73 20 77 69 6c 6c 20 | .since.the.last.boot..This.will. |
85280 | 73 68 6f 77 20 79 6f 75 20 61 20 73 75 6d 6d 61 72 79 20 6f 66 20 72 75 6c 65 2d 73 65 74 73 20 | show.you.a.summary.of.rule-sets. |
852a0 | 61 6e 64 20 67 72 6f 75 70 73 00 54 68 69 73 20 77 6f 72 6b 61 72 6f 75 6e 64 20 6c 65 74 73 20 | and.groups.This.workaround.lets. |
852c0 | 79 6f 75 20 61 70 70 6c 79 20 61 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 74 68 | you.apply.a.shaping.policy.to.th |
852e0 | 65 20 69 6e 67 72 65 73 73 20 74 72 61 66 66 69 63 20 62 79 20 66 69 72 73 74 20 72 65 64 69 72 | e.ingress.traffic.by.first.redir |
85300 | 65 63 74 69 6e 67 20 69 74 20 74 6f 20 61 6e 20 69 6e 2d 62 65 74 77 65 65 6e 20 76 69 72 74 75 | ecting.it.to.an.in-between.virtu |
85320 | 61 6c 20 69 6e 74 65 72 66 61 63 65 20 28 60 49 6e 74 65 72 6d 65 64 69 61 74 65 20 46 75 6e 63 | al.interface.(`Intermediate.Func |
85340 | 74 69 6f 6e 61 6c 20 42 6c 6f 63 6b 60 5f 29 2e 20 54 68 65 72 65 2c 20 69 6e 20 74 68 61 74 20 | tional.Block`_)..There,.in.that. |
85360 | 76 69 72 74 75 61 6c 20 69 6e 74 65 72 66 61 63 65 2c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 61 | virtual.interface,.you.will.be.a |
85380 | 62 6c 65 20 74 6f 20 61 70 70 6c 79 20 61 6e 79 20 6f 66 20 74 68 65 20 70 6f 6c 69 63 69 65 73 | ble.to.apply.any.of.the.policies |
853a0 | 20 74 68 61 74 20 77 6f 72 6b 20 66 6f 72 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 2c | .that.work.for.outbound.traffic, |
853c0 | 20 66 6f 72 20 69 6e 73 74 61 6e 63 65 2c 20 61 20 73 68 61 70 69 6e 67 20 6f 6e 65 2e 00 54 68 | .for.instance,.a.shaping.one..Th |
853e0 | 69 73 20 77 6f 75 6c 64 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 | is.would.generate.the.following. |
85400 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 54 68 72 65 65 20 73 69 67 6e 69 66 69 63 61 6e 74 | configuration:.Three.significant |
85420 | 20 76 65 72 73 69 6f 6e 73 20 6f 66 20 53 4e 4d 50 20 68 61 76 65 20 62 65 65 6e 20 64 65 76 65 | .versions.of.SNMP.have.been.deve |
85440 | 6c 6f 70 65 64 20 61 6e 64 20 64 65 70 6c 6f 79 65 64 2e 20 53 4e 4d 50 76 31 20 69 73 20 74 68 | loped.and.deployed..SNMPv1.is.th |
85460 | 65 20 6f 72 69 67 69 6e 61 6c 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 68 65 20 70 72 6f 74 6f 63 | e.original.version.of.the.protoc |
85480 | 6f 6c 2e 20 4d 6f 72 65 20 72 65 63 65 6e 74 20 76 65 72 73 69 6f 6e 73 2c 20 53 4e 4d 50 76 32 | ol..More.recent.versions,.SNMPv2 |
854a0 | 63 20 61 6e 64 20 53 4e 4d 50 76 33 2c 20 66 65 61 74 75 72 65 20 69 6d 70 72 6f 76 65 6d 65 6e | c.and.SNMPv3,.feature.improvemen |
854c0 | 74 73 20 69 6e 20 70 65 72 66 6f 72 6d 61 6e 63 65 2c 20 66 6c 65 78 69 62 69 6c 69 74 79 20 61 | ts.in.performance,.flexibility.a |
854e0 | 6e 64 20 73 65 63 75 72 69 74 79 2e 00 54 69 6d 65 20 5a 6f 6e 65 00 54 69 6d 65 20 5a 6f 6e 65 | nd.security..Time.Zone.Time.Zone |
85500 | 20 73 65 74 74 69 6e 67 20 69 73 20 76 65 72 79 20 69 6d 70 6f 72 74 61 6e 74 20 61 73 20 65 2e | .setting.is.very.important.as.e. |
85520 | 67 20 61 6c 6c 20 79 6f 75 72 20 6c 6f 67 66 69 6c 65 20 65 6e 74 72 69 65 73 20 77 69 6c 6c 20 | g.all.your.logfile.entries.will. |
85540 | 62 65 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 7a 6f 6e 65 2e | be.based.on.the.configured.zone. |
85560 | 20 57 69 74 68 6f 75 74 20 70 72 6f 70 65 72 20 74 69 6d 65 20 7a 6f 6e 65 20 63 6f 6e 66 69 67 | .Without.proper.time.zone.config |
85580 | 75 72 61 74 69 6f 6e 20 69 74 20 77 69 6c 6c 20 62 65 20 76 65 72 79 20 64 69 66 66 69 63 75 6c | uration.it.will.be.very.difficul |
855a0 | 74 20 74 6f 20 63 6f 6d 70 61 72 65 20 6c 6f 67 66 69 6c 65 73 20 66 72 6f 6d 20 64 69 66 66 65 | t.to.compare.logfiles.from.diffe |
855c0 | 72 65 6e 74 20 73 79 73 74 65 6d 73 2e 00 54 69 6d 65 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e | rent.systems..Time.in.millisecon |
855e0 | 64 73 20 62 65 74 77 65 65 6e 20 72 65 74 72 61 6e 73 6d 69 74 74 65 64 20 4e 65 69 67 68 62 6f | ds.between.retransmitted.Neighbo |
85600 | 72 20 53 6f 6c 69 63 69 74 61 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 00 54 69 6d 65 20 69 6e 20 | r.Solicitation.messages.Time.in. |
85620 | 73 65 63 6f 6e 64 73 20 74 68 61 74 20 74 68 65 20 70 72 65 66 69 78 20 77 69 6c 6c 20 72 65 6d | seconds.that.the.prefix.will.rem |
85640 | 61 69 6e 20 70 72 65 66 65 72 72 65 64 20 28 64 65 66 61 75 6c 74 20 34 20 68 6f 75 72 73 29 00 | ain.preferred.(default.4.hours). |
85660 | 54 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 68 61 74 20 74 68 65 20 70 72 65 66 69 78 20 | Time.in.seconds.that.the.prefix. |
85680 | 77 69 6c 6c 20 72 65 6d 61 69 6e 20 76 61 6c 69 64 20 28 64 65 66 61 75 6c 74 3a 20 33 30 20 64 | will.remain.valid.(default:.30.d |
856a0 | 61 79 73 29 00 54 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 68 61 74 20 74 68 65 20 70 72 | ays).Time.in.seconds.that.the.pr |
856c0 | 65 66 69 78 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 76 61 6c 69 64 20 28 64 65 66 61 75 6c 74 3a | efix.will.remain.valid.(default: |
856e0 | 20 36 35 35 32 38 20 73 65 63 6f 6e 64 73 29 00 54 69 6d 65 20 69 73 20 69 6e 20 6d 69 6e 75 74 | .65528.seconds).Time.is.in.minut |
85700 | 65 73 20 61 6e 64 20 64 65 66 61 75 6c 74 73 20 74 6f 20 36 30 2e 00 54 69 6d 65 20 74 6f 20 6d | es.and.defaults.to.60..Time.to.m |
85720 | 61 74 63 68 20 74 68 65 20 64 65 66 69 6e 65 64 20 72 75 6c 65 2e 00 54 69 6d 65 2c 20 69 6e 20 | atch.the.defined.rule..Time,.in. |
85740 | 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2c 20 74 68 61 74 20 61 20 6e 6f 64 65 20 61 73 73 75 6d 65 | milliseconds,.that.a.node.assume |
85760 | 73 20 61 20 6e 65 69 67 68 62 6f 72 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 61 66 74 65 72 20 | s.a.neighbor.is.reachable.after. |
85780 | 68 61 76 69 6e 67 20 72 65 63 65 69 76 65 64 20 61 20 72 65 61 63 68 61 62 69 6c 69 74 79 20 63 | having.received.a.reachability.c |
857a0 | 6f 6e 66 69 72 6d 61 74 69 6f 6e 00 54 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 6e 64 73 00 54 | onfirmation.Timeout.in.seconds.T |
857c0 | 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 6e 64 73 20 62 65 74 77 65 65 6e 20 68 65 61 6c 74 68 | imeout.in.seconds.between.health |
857e0 | 20 74 61 72 67 65 74 20 63 68 65 63 6b 73 2e 00 54 69 6d 65 6f 75 74 20 74 6f 20 77 61 69 74 20 | .target.checks..Timeout.to.wait. |
85800 | 72 65 70 6c 79 20 66 6f 72 20 49 6e 74 65 72 69 6d 2d 55 70 64 61 74 65 20 70 61 63 6b 65 74 73 | reply.for.Interim-Update.packets |
85820 | 2e 20 28 64 65 66 61 75 6c 74 20 33 20 73 65 63 6f 6e 64 73 29 00 54 69 6d 65 6f 75 74 20 74 6f | ..(default.3.seconds).Timeout.to |
85840 | 20 77 61 69 74 20 72 65 73 70 6f 6e 73 65 20 66 72 6f 6d 20 73 65 72 76 65 72 20 28 73 65 63 6f | .wait.response.from.server.(seco |
85860 | 6e 64 73 29 00 54 69 6d 65 72 73 00 54 6f 20 61 63 74 69 76 61 74 65 20 74 68 65 20 56 4c 41 4e | nds).Timers.To.activate.the.VLAN |
85880 | 20 61 77 61 72 65 20 62 72 69 64 67 65 2c 20 79 6f 75 20 6d 75 73 74 20 61 63 74 69 76 61 74 65 | .aware.bridge,.you.must.activate |
858a0 | 20 74 68 69 73 20 73 65 74 74 69 6e 67 20 74 6f 20 75 73 65 20 56 4c 41 4e 20 73 65 74 74 69 6e | .this.setting.to.use.VLAN.settin |
858c0 | 67 73 20 66 6f 72 20 74 68 65 20 62 72 69 64 67 65 00 54 6f 20 61 6c 6c 6f 77 20 56 50 4e 2d 63 | gs.for.the.bridge.To.allow.VPN-c |
858e0 | 6c 69 65 6e 74 73 20 61 63 63 65 73 73 20 76 69 61 20 79 6f 75 72 20 65 78 74 65 72 6e 61 6c 20 | lients.access.via.your.external. |
85900 | 61 64 64 72 65 73 73 2c 20 61 20 4e 41 54 20 72 75 6c 65 20 69 73 20 72 65 71 75 69 72 65 64 3a | address,.a.NAT.rule.is.required: |
85920 | 00 54 6f 20 61 6c 6c 6f 77 20 6c 69 73 74 69 6e 67 20 61 64 64 69 74 69 6f 6e 61 6c 20 63 75 73 | .To.allow.listing.additional.cus |
85940 | 74 6f 6d 20 64 6f 6d 61 69 6e 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 6f 70 65 6e 74 68 | tom.domain,.for.example.``openth |
85960 | 72 65 61 64 2e 74 68 72 65 61 64 2e 68 6f 6d 65 2e 61 72 70 61 60 60 2c 20 73 6f 20 74 68 61 74 | read.thread.home.arpa``,.so.that |
85980 | 20 69 74 20 63 61 6e 20 72 65 66 6c 65 63 74 65 64 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f | .it.can.reflected.in.addition.to |
859a0 | 20 74 68 65 20 64 65 66 61 75 6c 74 20 60 60 6c 6f 63 61 6c 60 60 2c 20 75 73 65 20 74 68 65 20 | .the.default.``local``,.use.the. |
859c0 | 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 61 6c 6c 6f 77 20 6f 6e 6c 79 | following.command:.To.allow.only |
859e0 | 20 73 70 65 63 69 66 69 63 20 73 65 72 76 69 63 65 73 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 20 | .specific.services,.for.example. |
85a00 | 60 60 5f 61 69 72 70 6c 61 79 2e 5f 74 63 70 60 60 20 6f 72 20 60 60 5f 69 70 70 2e 5f 74 63 70 | ``_airplay._tcp``.or.``_ipp._tcp |
85a20 | 60 60 2c 20 28 69 6e 73 74 65 61 64 20 6f 66 20 61 6c 6c 20 73 65 72 76 69 63 65 73 29 20 74 6f | ``,.(instead.of.all.services).to |
85a40 | 20 62 65 20 72 65 2d 62 72 6f 61 64 63 61 73 74 65 64 2c 20 75 73 65 20 74 68 65 20 66 6f 6c 6c | .be.re-broadcasted,.use.the.foll |
85a60 | 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 61 6c 6c 6f 77 20 74 72 61 66 66 69 63 20 | owing.command:.To.allow.traffic. |
85a80 | 74 6f 20 70 61 73 73 20 74 68 72 6f 75 67 68 20 74 6f 20 63 6c 69 65 6e 74 73 2c 20 79 6f 75 20 | to.pass.through.to.clients,.you. |
85aa0 | 6e 65 65 64 20 74 6f 20 61 64 64 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 72 75 6c 65 73 2e | need.to.add.the.following.rules. |
85ac0 | 20 28 69 66 20 79 6f 75 20 75 73 65 64 20 74 68 65 20 64 65 66 61 75 6c 74 20 63 6f 6e 66 69 67 | .(if.you.used.the.default.config |
85ae0 | 75 72 61 74 69 6f 6e 20 61 74 20 74 68 65 20 74 6f 70 20 6f 66 20 74 68 69 73 20 70 61 67 65 29 | uration.at.the.top.of.this.page) |
85b00 | 00 54 6f 20 61 70 70 6c 79 20 74 68 69 73 20 70 6f 6c 69 63 79 20 74 6f 20 74 68 65 20 63 6f 72 | .To.apply.this.policy.to.the.cor |
85b20 | 72 65 63 74 20 69 6e 74 65 72 66 61 63 65 2c 20 63 6f 6e 66 69 67 75 72 65 20 69 74 20 6f 6e 20 | rect.interface,.configure.it.on. |
85b40 | 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 69 6e 62 6f 75 6e 64 20 6c 6f 63 61 6c 20 | the.interface.the.inbound.local. |
85b60 | 68 6f 73 74 20 77 69 6c 6c 20 73 65 6e 64 20 74 68 72 6f 75 67 68 20 74 6f 20 72 65 61 63 68 20 | host.will.send.through.to.reach. |
85b80 | 6f 75 72 20 64 65 73 74 69 6e 65 64 20 74 61 72 67 65 74 20 68 6f 73 74 20 28 69 6e 20 6f 75 72 | our.destined.target.host.(in.our |
85ba0 | 20 65 78 61 6d 70 6c 65 20 65 74 68 31 29 2e 00 54 6f 20 61 75 74 6f 20 75 70 64 61 74 65 20 74 | .example.eth1)..To.auto.update.t |
85bc0 | 68 65 20 62 6c 61 63 6b 6c 69 73 74 20 66 69 6c 65 73 00 54 6f 20 61 75 74 6f 6d 61 74 69 63 61 | he.blacklist.files.To.automatica |
85be0 | 6c 6c 79 20 61 73 73 69 67 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 61 6e 20 49 50 20 61 64 64 72 | lly.assign.the.client.an.IP.addr |
85c00 | 65 73 73 20 61 73 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 2c 20 61 20 63 6c 69 65 6e 74 | ess.as.tunnel.endpoint,.a.client |
85c20 | 20 49 50 20 70 6f 6f 6c 20 69 73 20 6e 65 65 64 65 64 2e 20 54 68 65 20 73 6f 75 72 63 65 20 63 | .IP.pool.is.needed..The.source.c |
85c40 | 61 6e 20 62 65 20 65 69 74 68 65 72 20 52 41 44 49 55 53 20 6f 72 20 61 20 6c 6f 63 61 6c 20 73 | an.be.either.RADIUS.or.a.local.s |
85c60 | 75 62 6e 65 74 20 6f 72 20 49 50 20 72 61 6e 67 65 20 64 65 66 69 6e 69 74 69 6f 6e 2e 00 54 6f | ubnet.or.IP.range.definition..To |
85c80 | 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 73 73 69 67 6e 20 74 68 65 20 63 6c 69 65 6e 74 | .automatically.assign.the.client |
85ca0 | 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 61 73 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e | .an.IP.address.as.tunnel.endpoin |
85cc0 | 74 2c 20 61 20 63 6c 69 65 6e 74 20 49 50 20 70 6f 6f 6c 20 69 73 20 6e 65 65 64 65 64 2e 20 54 | t,.a.client.IP.pool.is.needed..T |
85ce0 | 68 65 20 73 6f 75 72 63 65 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 20 52 41 44 49 55 53 20 6f | he.source.can.be.either.RADIUS.o |
85d00 | 72 20 61 20 6e 61 6d 65 64 20 70 6f 6f 6c 2e 20 54 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 | r.a.named.pool..There.is.possibi |
85d20 | 6c 69 74 79 20 74 6f 20 63 72 65 61 74 65 20 6d 75 6c 74 69 70 6c 65 20 6e 61 6d 65 64 20 70 6f | lity.to.create.multiple.named.po |
85d40 | 6f 6c 73 2e 20 45 61 63 68 20 6e 61 6d 65 64 20 70 6f 6f 6c 20 63 61 6e 20 69 6e 63 6c 75 64 65 | ols..Each.named.pool.can.include |
85d60 | 20 6f 6e 6c 79 20 6f 6e 65 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 2e 20 54 6f 20 75 73 65 20 | .only.one.address.range..To.use. |
85d80 | 6d 75 6c 74 69 70 6c 65 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 73 20 63 6f 6e 66 69 67 75 72 | multiple.address.ranges.configur |
85da0 | 65 20 60 60 6e 65 78 74 2d 70 6f 6f 6c 60 60 20 6f 70 74 69 6f 6e 2e 00 54 6f 20 62 65 20 75 73 | e.``next-pool``.option..To.be.us |
85dc0 | 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 60 60 61 63 74 69 6f 6e 60 60 20 69 73 20 73 65 74 20 74 | ed.only.when.``action``.is.set.t |
85de0 | 6f 20 60 60 6a 75 6d 70 60 60 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | o.``jump``..Use.this.command.to. |
85e00 | 73 70 65 63 69 66 79 20 6a 75 6d 70 20 74 61 72 67 65 74 2e 00 54 6f 20 62 65 20 75 73 65 64 20 | specify.jump.target..To.be.used. |
85e20 | 6f 6e 6c 79 20 77 68 65 6e 20 60 60 64 65 66 75 6c 74 2d 61 63 74 69 6f 6e 60 60 20 69 73 20 73 | only.when.``defult-action``.is.s |
85e40 | 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | et.to.``jump``..Use.this.command |
85e60 | 20 74 6f 20 73 70 65 63 69 66 79 20 6a 75 6d 70 20 74 61 72 67 65 74 20 66 6f 72 20 64 65 66 61 | .to.specify.jump.target.for.defa |
85e80 | 75 6c 74 20 72 75 6c 65 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 61 | ult.rule..To.be.used.only.when.a |
85ea0 | 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2e 20 55 73 65 20 74 68 | ction.is.set.to.``jump``..Use.th |
85ec0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 6a 75 6d 70 20 74 61 72 67 65 | is.command.to.specify.jump.targe |
85ee0 | 74 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 61 63 74 69 6f 6e 20 69 | t..To.be.used.only.when.action.i |
85f00 | 73 20 73 65 74 20 74 6f 20 60 60 71 75 65 75 65 60 60 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d | s.set.to.``queue``..Use.this.com |
85f20 | 6d 61 6e 64 20 74 6f 20 64 69 73 74 72 69 62 75 74 65 20 70 61 63 6b 65 74 73 20 62 65 74 77 65 | mand.to.distribute.packets.betwe |
85f40 | 65 6e 20 73 65 76 65 72 61 6c 20 71 75 65 75 65 73 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e | en.several.queues..To.be.used.on |
85f60 | 6c 79 20 77 68 65 6e 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 71 75 65 75 65 | ly.when.action.is.set.to.``queue |
85f80 | 60 60 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 65 74 20 70 61 63 6b | ``..Use.this.command.to.let.pack |
85fa0 | 65 74 20 67 6f 20 74 68 72 6f 75 67 68 20 66 69 72 65 77 61 6c 6c 20 77 68 65 6e 20 6e 6f 20 75 | et.go.through.firewall.when.no.u |
85fc0 | 73 65 72 73 70 61 63 65 20 73 6f 66 74 77 61 72 65 20 69 73 20 63 6f 6e 6e 65 63 74 65 64 20 74 | serspace.software.is.connected.t |
85fe0 | 6f 20 74 68 65 20 71 75 65 75 65 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 | o.the.queue..To.be.used.only.whe |
86000 | 6e 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 71 75 65 75 65 60 60 2e 20 55 73 | n.action.is.set.to.``queue``..Us |
86020 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 71 75 65 75 65 20 | e.this.command.to.specify.queue. |
86040 | 74 61 72 67 65 74 20 74 6f 20 75 73 65 2e 20 51 75 65 75 65 20 72 61 6e 67 65 20 69 73 20 61 6c | target.to.use..Queue.range.is.al |
86060 | 73 6f 20 73 75 70 70 6f 72 74 65 64 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 | so.supported..To.be.used.only.wh |
86080 | 65 6e 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 6a 75 6d 70 2e 20 55 73 65 20 74 68 | en.action.is.set.to.jump..Use.th |
860a0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 6a 75 6d 70 20 74 61 72 67 65 | is.command.to.specify.jump.targe |
860c0 | 74 2e 00 54 6f 20 62 79 70 61 73 73 20 74 68 65 20 70 72 6f 78 79 20 66 6f 72 20 65 76 65 72 79 | t..To.bypass.the.proxy.for.every |
860e0 | 20 72 65 71 75 65 73 74 20 74 68 61 74 20 69 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 61 20 73 | .request.that.is.coming.from.a.s |
86100 | 70 65 63 69 66 69 63 20 73 6f 75 72 63 65 3a 00 54 6f 20 62 79 70 61 73 73 20 74 68 65 20 70 72 | pecific.source:.To.bypass.the.pr |
86120 | 6f 78 79 20 66 6f 72 20 65 76 65 72 79 20 72 65 71 75 65 73 74 20 74 68 61 74 20 69 73 20 64 69 | oxy.for.every.request.that.is.di |
86140 | 72 65 63 74 65 64 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 64 65 73 74 69 6e 61 74 69 6f 6e | rected.to.a.specific.destination |
86160 | 3a 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 49 50 76 36 20 61 73 73 69 67 6e 6d 65 6e 74 73 20 | :.To.configure.IPv6.assignments. |
86180 | 66 6f 72 20 63 6c 69 65 6e 74 73 2c 20 74 77 6f 20 6f 70 74 69 6f 6e 73 20 6e 65 65 64 20 74 6f | for.clients,.two.options.need.to |
861a0 | 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 41 20 67 6c 6f 62 61 6c 20 70 72 65 66 69 78 20 | .be.configured..A.global.prefix. |
861c0 | 77 68 69 63 68 20 69 73 20 74 65 72 6d 69 6e 61 74 65 64 20 6f 6e 20 74 68 65 20 63 6c 69 65 6e | which.is.terminated.on.the.clien |
861e0 | 74 73 20 63 70 65 20 61 6e 64 20 61 20 64 65 6c 65 67 61 74 65 64 20 70 72 65 66 69 78 2c 20 74 | ts.cpe.and.a.delegated.prefix,.t |
86200 | 68 65 20 63 6c 69 65 6e 74 20 63 61 6e 20 75 73 65 20 66 6f 72 20 64 65 76 69 63 65 73 20 72 6f | he.client.can.use.for.devices.ro |
86220 | 75 74 65 64 20 76 69 61 20 74 68 65 20 63 6c 69 65 6e 74 73 20 63 70 65 2e 00 54 6f 20 63 6f 6e | uted.via.the.clients.cpe..To.con |
86240 | 66 69 67 75 72 65 20 56 79 4f 53 20 77 69 74 68 20 74 68 65 20 3a 64 6f 63 3a 60 6c 65 67 61 63 | figure.VyOS.with.the.:doc:`legac |
86260 | 79 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 3c 2f 63 6f 6e 66 69 | y.firewall.configuration.</confi |
86280 | 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 61 6c 2d 6c 65 67 61 63 79 | guration/firewall/general-legacy |
862a0 | 3e 60 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 56 79 4f 53 20 77 69 74 68 20 74 68 65 20 3a 64 | >`.To.configure.VyOS.with.the.:d |
862c0 | 6f 63 3a 60 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 | oc:`zone-based.firewall.configur |
862e0 | 61 74 69 6f 6e 20 3c 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 7a | ation.</configuration/firewall/z |
86300 | 6f 6e 65 3e 60 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 56 79 4f 53 20 77 69 74 68 20 74 68 65 | one>`.To.configure.VyOS.with.the |
86320 | 20 6e 65 77 20 3a 64 6f 63 3a 60 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | .new.:doc:`firewall.configuratio |
86340 | 6e 20 3c 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 | n.</configuration/firewall/gener |
86360 | 61 6c 3e 60 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 62 6c 6f 63 6b 69 6e 67 20 61 64 64 20 74 | al>`.To.configure.blocking.add.t |
86380 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | he.following.to.the.configuratio |
863a0 | 6e 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 63 6f 6e 6e | n.To.configure.site-to-site.conn |
863c0 | 65 63 74 69 6f 6e 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 61 64 64 20 70 65 65 72 73 20 77 69 74 | ection.you.need.to.add.peers.wit |
863e0 | 68 20 74 68 65 20 60 60 73 65 74 20 76 70 6e 20 69 70 73 65 63 20 73 69 74 65 2d 74 6f 2d 73 69 | h.the.``set.vpn.ipsec.site-to-si |
86400 | 74 65 20 70 65 65 72 20 3c 6e 61 6d 65 3e 60 60 20 63 6f 6d 6d 61 6e 64 2e 00 54 6f 20 63 6f 6e | te.peer.<name>``.command..To.con |
86420 | 66 69 67 75 72 65 20 73 79 73 6c 6f 67 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 77 69 74 63 | figure.syslog,.you.need.to.switc |
86440 | 68 20 69 6e 74 6f 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 2e 00 54 6f 20 63 6f | h.into.configuration.mode..To.co |
86460 | 6e 66 69 67 75 72 65 20 79 6f 75 72 20 4c 43 44 20 64 69 73 70 6c 61 79 20 79 6f 75 20 6d 75 73 | nfigure.your.LCD.display.you.mus |
86480 | 74 20 66 69 72 73 74 20 69 64 65 6e 74 69 66 79 20 74 68 65 20 75 73 65 64 20 68 61 72 64 77 61 | t.first.identify.the.used.hardwa |
864a0 | 72 65 2c 20 61 6e 64 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 6f 66 20 74 68 65 20 64 69 73 70 | re,.and.connectivity.of.the.disp |
864c0 | 6c 61 79 20 74 6f 20 79 6f 75 72 20 73 79 73 74 65 6d 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 | lay.to.your.system..This.can.be. |
864e0 | 61 6e 79 20 73 65 72 69 61 6c 20 70 6f 72 74 20 28 60 74 74 79 53 78 78 60 29 20 6f 72 20 73 65 | any.serial.port.(`ttySxx`).or.se |
86500 | 72 69 61 6c 20 76 69 61 20 55 53 42 20 6f 72 20 65 76 65 6e 20 6f 6c 64 20 70 61 72 61 6c 6c 65 | rial.via.USB.or.even.old.paralle |
86520 | 6c 20 70 6f 72 74 20 69 6e 74 65 72 66 61 63 65 73 2e 00 54 6f 20 63 72 65 61 74 65 20 56 4c 41 | l.port.interfaces..To.create.VLA |
86540 | 4e 73 20 70 65 72 20 75 73 65 72 20 64 75 72 69 6e 67 20 72 75 6e 74 69 6d 65 2c 20 74 68 65 20 | Ns.per.user.during.runtime,.the. |
86560 | 66 6f 6c 6c 6f 77 69 6e 67 20 73 65 74 74 69 6e 67 73 20 61 72 65 20 72 65 71 75 69 72 65 64 20 | following.settings.are.required. |
86580 | 6f 6e 20 61 20 70 65 72 20 69 6e 74 65 72 66 61 63 65 20 62 61 73 69 73 2e 20 56 4c 41 4e 20 49 | on.a.per.interface.basis..VLAN.I |
865a0 | 44 20 61 6e 64 20 56 4c 41 4e 20 72 61 6e 67 65 20 63 61 6e 20 62 65 20 70 72 65 73 65 6e 74 20 | D.and.VLAN.range.can.be.present. |
865c0 | 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 74 20 74 68 65 20 73 61 6d 65 | in.the.configuration.at.the.same |
865e0 | 20 74 69 6d 65 2e 00 54 6f 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 6c 69 6e 65 20 69 6e 20 79 | .time..To.create.a.new.line.in.y |
86600 | 6f 75 72 20 6c 6f 67 69 6e 20 6d 65 73 73 61 67 65 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 65 73 | our.login.message.you.need.to.es |
86620 | 63 61 70 65 20 74 68 65 20 6e 65 77 20 6c 69 6e 65 20 63 68 61 72 61 63 74 65 72 20 62 79 20 75 | cape.the.new.line.character.by.u |
86640 | 73 69 6e 67 20 60 60 5c 5c 6e 60 60 2e 00 54 6f 20 63 72 65 61 74 65 20 6d 6f 72 65 20 74 68 61 | sing.``\\n``..To.create.more.tha |
86660 | 6e 20 6f 6e 65 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 64 69 73 74 69 6e 63 74 20 55 44 50 20 70 | n.one.tunnel,.use.distinct.UDP.p |
86680 | 6f 72 74 73 2e 00 54 6f 20 63 72 65 61 74 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 31 30 | orts..To.create.routing.table.10 |
866a0 | 30 20 61 6e 64 20 61 64 64 20 61 20 6e 65 77 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 | 0.and.add.a.new.default.gateway. |
866c0 | 74 6f 20 62 65 20 75 73 65 64 20 62 79 20 74 72 61 66 66 69 63 20 6d 61 74 63 68 69 6e 67 20 6f | to.be.used.by.traffic.matching.o |
866e0 | 75 72 20 72 6f 75 74 65 20 70 6f 6c 69 63 79 3a 00 54 6f 20 64 65 66 69 6e 65 20 61 20 7a 6f 6e | ur.route.policy:.To.define.a.zon |
86700 | 65 20 73 65 74 75 70 20 65 69 74 68 65 72 20 6f 6e 65 20 77 69 74 68 20 69 6e 74 65 72 66 61 63 | e.setup.either.one.with.interfac |
86720 | 65 73 20 6f 72 20 61 20 6c 6f 63 61 6c 20 7a 6f 6e 65 2e 00 54 6f 20 64 69 73 61 62 6c 65 20 61 | es.or.a.local.zone..To.disable.a |
86740 | 64 76 65 72 74 69 73 65 6d 65 6e 74 73 20 77 69 74 68 6f 75 74 20 64 65 6c 65 74 69 6e 67 20 74 | dvertisements.without.deleting.t |
86760 | 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 54 6f 20 64 69 73 70 6c 61 79 20 74 68 65 | he.configuration:.To.display.the |
86780 | 20 63 6f 6e 66 69 67 75 72 65 64 20 4f 54 50 20 75 73 65 72 20 6b 65 79 2c 20 75 73 65 20 74 68 | .configured.OTP.user.key,.use.th |
867a0 | 65 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 64 69 73 70 6c 61 79 20 74 68 65 20 63 6f 6e 66 69 67 | e.command:.To.display.the.config |
867c0 | 75 72 65 64 20 4f 54 50 20 75 73 65 72 20 73 65 74 74 69 6e 67 73 2c 20 75 73 65 20 74 68 65 20 | ured.OTP.user.settings,.use.the. |
867e0 | 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 65 6e 61 62 6c 65 20 4d 4c 44 20 72 65 70 6f 72 74 73 20 61 | command:.To.enable.MLD.reports.a |
86800 | 6e 64 20 71 75 65 72 79 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 73 20 60 65 74 68 30 60 20 61 6e | nd.query.on.interfaces.`eth0`.an |
86820 | 64 20 60 65 74 68 31 60 3a 00 54 6f 20 65 6e 61 62 6c 65 20 52 41 44 49 55 53 20 62 61 73 65 64 | d.`eth1`:.To.enable.RADIUS.based |
86840 | 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2c 20 74 68 65 20 61 75 74 68 65 6e 74 69 63 61 74 | .authentication,.the.authenticat |
86860 | 69 6f 6e 20 6d 6f 64 65 20 6e 65 65 64 73 20 74 6f 20 62 65 20 63 68 61 6e 67 65 64 20 77 69 74 | ion.mode.needs.to.be.changed.wit |
86880 | 68 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 50 72 65 76 69 6f 75 73 20 | hin.the.configuration..Previous. |
868a0 | 73 65 74 74 69 6e 67 73 20 6c 69 6b 65 20 74 68 65 20 6c 6f 63 61 6c 20 75 73 65 72 73 2c 20 73 | settings.like.the.local.users,.s |
868c0 | 74 69 6c 6c 20 65 78 69 73 74 73 20 77 69 74 68 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 | till.exists.within.the.configura |
868e0 | 74 69 6f 6e 2c 20 68 6f 77 65 76 65 72 20 74 68 65 79 20 61 72 65 20 6e 6f 74 20 75 73 65 64 20 | tion,.however.they.are.not.used. |
86900 | 69 66 20 74 68 65 20 6d 6f 64 65 20 68 61 73 20 62 65 65 6e 20 63 68 61 6e 67 65 64 20 66 72 6f | if.the.mode.has.been.changed.fro |
86920 | 6d 20 6c 6f 63 61 6c 20 74 6f 20 72 61 64 69 75 73 2e 20 4f 6e 63 65 20 63 68 61 6e 67 65 64 20 | m.local.to.radius..Once.changed. |
86940 | 62 61 63 6b 20 74 6f 20 6c 6f 63 61 6c 2c 20 69 74 20 77 69 6c 6c 20 75 73 65 20 61 6c 6c 20 6c | back.to.local,.it.will.use.all.l |
86960 | 6f 63 61 6c 20 61 63 63 6f 75 6e 74 73 20 61 67 61 69 6e 2e 00 54 6f 20 65 6e 61 62 6c 65 20 62 | ocal.accounts.again..To.enable.b |
86980 | 61 6e 64 77 69 64 74 68 20 73 68 61 70 69 6e 67 20 76 69 61 20 52 41 44 49 55 53 2c 20 74 68 65 | andwidth.shaping.via.RADIUS,.the |
869a0 | 20 6f 70 74 69 6f 6e 20 72 61 74 65 2d 6c 69 6d 69 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 65 | .option.rate-limit.needs.to.be.e |
869c0 | 6e 61 62 6c 65 64 2e 00 54 6f 20 65 6e 61 62 6c 65 20 64 65 62 75 67 20 6d 65 73 73 61 67 65 73 | nabled..To.enable.debug.messages |
869e0 | 2e 20 41 76 61 69 6c 61 62 6c 65 20 76 69 61 20 3a 6f 70 63 6d 64 3a 60 73 68 6f 77 20 6c 6f 67 | ..Available.via.:opcmd:`show.log |
86a00 | 60 20 6f 72 20 3a 6f 70 63 6d 64 3a 60 6d 6f 6e 69 74 6f 72 20 6c 6f 67 60 00 54 6f 20 65 6e 61 | `.or.:opcmd:`monitor.log`.To.ena |
86a20 | 62 6c 65 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 6f | ble.mDNS.repeater.you.need.to.co |
86a40 | 6e 66 69 67 75 72 65 20 61 74 20 6c 65 61 73 74 20 74 77 6f 20 69 6e 74 65 72 66 61 63 65 73 20 | nfigure.at.least.two.interfaces. |
86a60 | 73 6f 20 74 68 61 74 20 61 6c 6c 20 69 6e 63 6f 6d 69 6e 67 20 6d 44 4e 53 20 70 61 63 6b 65 74 | so.that.all.incoming.mDNS.packet |
86a80 | 73 20 66 72 6f 6d 20 6f 6e 65 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 65 64 20 | s.from.one.interface.configured. |
86aa0 | 68 65 72 65 20 63 61 6e 20 62 65 20 72 65 2d 62 72 6f 61 64 63 61 73 74 65 64 20 74 6f 20 61 6e | here.can.be.re-broadcasted.to.an |
86ac0 | 79 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 28 73 29 20 63 6f 6e 66 69 67 75 72 65 64 20 | y.other.interface(s).configured. |
86ae0 | 75 6e 64 65 72 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 00 54 6f 20 65 6e 61 62 6c 65 20 6d 44 | under.this.section..To.enable.mD |
86b00 | 4e 53 20 72 65 70 65 61 74 65 72 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 | NS.repeater.you.need.to.configur |
86b20 | 65 20 61 74 20 6c 65 61 73 74 20 74 77 6f 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 6f 20 72 65 | e.at.least.two.interfaces..To.re |
86b40 | 2d 62 72 6f 61 64 63 61 73 74 20 61 6c 6c 20 69 6e 63 6f 6d 69 6e 67 20 6d 44 4e 53 20 70 61 63 | -broadcast.all.incoming.mDNS.pac |
86b60 | 6b 65 74 73 20 66 72 6f 6d 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 | kets.from.any.interface.configur |
86b80 | 65 64 20 68 65 72 65 20 74 6f 20 61 6e 79 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 20 63 | ed.here.to.any.other.interface.c |
86ba0 | 6f 6e 66 69 67 75 72 65 64 20 75 6e 64 65 72 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 00 54 6f | onfigured.under.this.section..To |
86bc0 | 20 65 6e 61 62 6c 65 20 74 68 65 20 48 54 54 50 20 73 65 63 75 72 69 74 79 20 68 65 61 64 65 72 | .enable.the.HTTP.security.header |
86be0 | 73 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 2c 20 75 73 65 | s.in.the.configuration.file,.use |
86c00 | 20 74 68 65 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 65 6e 61 62 6c 65 2f 64 69 73 61 62 6c 65 20 | .the.command:.To.enable/disable. |
86c20 | 68 65 6c 70 65 72 20 73 75 70 70 6f 72 74 20 66 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 6e 65 | helper.support.for.a.specific.ne |
86c40 | 69 67 68 62 6f 75 72 2c 20 74 68 65 20 72 6f 75 74 65 72 2d 69 64 20 28 41 2e 42 2e 43 2e 44 29 | ighbour,.the.router-id.(A.B.C.D) |
86c60 | 20 68 61 73 20 74 6f 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 00 54 6f 20 65 78 63 6c 75 64 65 | .has.to.be.specified..To.exclude |
86c80 | 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 2c 20 74 72 | .traffic.from.load.balancing,.tr |
86ca0 | 61 66 66 69 63 20 6d 61 74 63 68 69 6e 67 20 61 6e 20 65 78 63 6c 75 64 65 20 72 75 6c 65 20 69 | affic.matching.an.exclude.rule.i |
86cc0 | 73 20 6e 6f 74 20 62 61 6c 61 6e 63 65 64 20 62 75 74 20 72 6f 75 74 65 64 20 74 68 72 6f 75 67 | s.not.balanced.but.routed.throug |
86ce0 | 68 20 74 68 65 20 73 79 73 74 65 6d 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 69 6e 73 74 65 | h.the.system.routing.table.inste |
86d00 | 61 64 3a 00 54 6f 20 65 78 70 6c 61 69 6e 20 74 68 65 20 75 73 61 67 65 20 6f 66 20 4c 4e 53 20 | ad:.To.explain.the.usage.of.LNS. |
86d20 | 66 6f 6c 6c 6f 77 20 6f 75 72 20 62 6c 75 65 70 72 69 6e 74 20 3a 72 65 66 3a 60 65 78 61 6d 70 | follow.our.blueprint.:ref:`examp |
86d40 | 6c 65 73 2d 6c 61 63 2d 6c 6e 73 60 2e 00 54 6f 20 65 78 74 65 6e 64 20 53 4e 4d 50 20 61 67 65 | les-lac-lns`..To.extend.SNMP.age |
86d60 | 6e 74 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2c 20 63 75 73 74 6f 6d 20 73 63 72 69 70 74 73 | nt.functionality,.custom.scripts |
86d80 | 20 63 61 6e 20 62 65 20 65 78 65 63 75 74 65 64 20 65 76 65 72 79 20 74 69 6d 65 20 74 68 65 20 | .can.be.executed.every.time.the. |
86da0 | 61 67 65 6e 74 20 69 73 20 62 65 69 6e 67 20 63 61 6c 6c 65 64 2e 20 54 68 69 73 20 63 61 6e 20 | agent.is.being.called..This.can. |
86dc0 | 62 65 20 61 63 68 69 65 76 65 64 20 62 79 20 75 73 69 6e 67 20 60 60 61 72 62 69 74 72 61 72 79 | be.achieved.by.using.``arbitrary |
86de0 | 20 65 78 74 65 6e 73 69 6f 6e 63 6f 6d 6d 61 6e 64 73 60 60 2e 20 54 68 65 20 66 69 72 73 74 20 | .extensioncommands``..The.first. |
86e00 | 73 74 65 70 20 69 73 20 74 6f 20 63 72 65 61 74 65 20 61 20 66 75 6e 63 74 69 6f 6e 61 6c 20 73 | step.is.to.create.a.functional.s |
86e20 | 63 72 69 70 74 20 6f 66 20 63 6f 75 72 73 65 2c 20 74 68 65 6e 20 75 70 6c 6f 61 64 20 69 74 20 | cript.of.course,.then.upload.it. |
86e40 | 74 6f 20 79 6f 75 72 20 56 79 4f 53 20 69 6e 73 74 61 6e 63 65 20 76 69 61 20 74 68 65 20 63 6f | to.your.VyOS.instance.via.the.co |
86e60 | 6d 6d 61 6e 64 20 60 60 73 63 70 20 79 6f 75 72 5f 73 63 72 69 70 74 2e 73 68 20 76 79 6f 73 40 | mmand.``scp.your_script.sh.vyos@ |
86e80 | 79 6f 75 72 5f 72 6f 75 74 65 72 3a 2f 63 6f 6e 66 69 67 2f 75 73 65 72 2d 64 61 74 61 60 60 2e | your_router:/config/user-data``. |
86ea0 | 20 4f 6e 63 65 20 74 68 65 20 73 63 72 69 70 74 20 69 73 20 75 70 6c 6f 61 64 65 64 2c 20 69 74 | .Once.the.script.is.uploaded,.it |
86ec0 | 20 6e 65 65 64 73 20 74 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 76 69 61 20 74 68 65 20 | .needs.to.be.configured.via.the. |
86ee0 | 63 6f 6d 6d 61 6e 64 20 62 65 6c 6f 77 2e 00 54 6f 20 66 6f 72 77 61 72 64 20 61 6c 6c 20 62 72 | command.below..To.forward.all.br |
86f00 | 6f 61 64 63 61 73 74 20 70 61 63 6b 65 74 73 20 72 65 63 65 69 76 65 64 20 6f 6e 20 60 55 44 50 | oadcast.packets.received.on.`UDP |
86f20 | 20 70 6f 72 74 20 31 39 30 30 60 20 6f 6e 20 60 65 74 68 33 60 2c 20 60 65 74 68 34 60 20 6f 72 | .port.1900`.on.`eth3`,.`eth4`.or |
86f40 | 20 60 65 74 68 35 60 20 74 6f 20 61 6c 6c 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 | .`eth5`.to.all.other.interfaces. |
86f60 | 69 6e 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 54 6f 20 67 65 6e 65 72 61 | in.this.configuration..To.genera |
86f80 | 74 65 20 74 68 65 20 43 41 2c 20 74 68 65 20 73 65 72 76 65 72 20 70 72 69 76 61 74 65 20 6b 65 | te.the.CA,.the.server.private.ke |
86fa0 | 79 20 61 6e 64 20 63 65 72 74 69 66 69 63 61 74 65 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | y.and.certificates.the.following |
86fc0 | 20 63 6f 6d 6d 61 6e 64 73 20 63 61 6e 20 62 65 20 75 73 65 64 2e 00 54 6f 20 67 65 74 20 69 74 | .commands.can.be.used..To.get.it |
86fe0 | 20 74 6f 20 77 6f 72 6b 20 61 73 20 61 6e 20 61 63 63 65 73 73 20 70 6f 69 6e 74 20 77 69 74 68 | .to.work.as.an.access.point.with |
87000 | 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 79 6f 75 20 77 69 6c 6c 20 6e 65 65 | .this.configuration.you.will.nee |
87020 | 64 20 74 6f 20 73 65 74 20 75 70 20 61 20 44 48 43 50 20 73 65 72 76 65 72 20 74 6f 20 77 6f 72 | d.to.set.up.a.DHCP.server.to.wor |
87040 | 6b 20 77 69 74 68 20 74 68 61 74 20 6e 65 74 77 6f 72 6b 2e 20 59 6f 75 20 63 61 6e 20 2d 20 6f | k.with.that.network..You.can.-.o |
87060 | 66 20 63 6f 75 72 73 65 20 2d 20 61 6c 73 6f 20 62 72 69 64 67 65 20 74 68 65 20 57 69 72 65 6c | f.course.-.also.bridge.the.Wirel |
87080 | 65 73 73 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 61 6e 79 20 63 6f 6e 66 69 67 75 72 65 | ess.interface.with.any.configure |
870a0 | 64 20 62 72 69 64 67 65 20 28 3a 72 65 66 3a 60 62 72 69 64 67 65 2d 69 6e 74 65 72 66 61 63 65 | d.bridge.(:ref:`bridge-interface |
870c0 | 60 29 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 00 54 6f 20 68 61 6e 64 20 6f 75 74 20 69 6e | `).on.the.system..To.hand.out.in |
870e0 | 64 69 76 69 64 75 61 6c 20 70 72 65 66 69 78 65 73 20 74 6f 20 79 6f 75 72 20 63 6c 69 65 6e 74 | dividual.prefixes.to.your.client |
87100 | 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 | s.the.following.configuration.is |
87120 | 20 75 73 65 64 3a 00 54 6f 20 69 6d 70 6f 72 74 20 69 74 20 66 72 6f 6d 20 74 68 65 20 66 69 6c | .used:.To.import.it.from.the.fil |
87140 | 65 73 79 73 74 65 6d 20 75 73 65 3a 00 54 6f 20 6b 6e 6f 77 20 6d 6f 72 65 20 61 62 6f 75 74 20 | esystem.use:.To.know.more.about. |
87160 | 73 63 72 69 70 74 69 6e 67 2c 20 63 68 65 63 6b 20 74 68 65 20 3a 72 65 66 3a 60 63 6f 6d 6d 61 | scripting,.check.the.:ref:`comma |
87180 | 6e 64 2d 73 63 72 69 70 74 69 6e 67 60 20 73 65 63 74 69 6f 6e 2e 00 54 6f 20 6c 69 73 74 65 6e | nd-scripting`.section..To.listen |
871a0 | 20 6f 6e 20 62 6f 74 68 20 60 65 74 68 30 60 20 61 6e 64 20 60 65 74 68 31 60 20 6d 44 4e 53 20 | .on.both.`eth0`.and.`eth1`.mDNS. |
871c0 | 70 61 63 6b 65 74 73 20 61 6e 64 20 61 6c 73 6f 20 72 65 70 65 61 74 20 70 61 63 6b 65 74 73 20 | packets.and.also.repeat.packets. |
871e0 | 72 65 63 65 69 76 65 64 20 6f 6e 20 60 65 74 68 30 60 20 74 6f 20 60 65 74 68 31 60 20 28 61 6e | received.on.`eth0`.to.`eth1`.(an |
87200 | 64 20 76 69 63 65 2d 76 65 72 73 61 29 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 | d.vice-versa).use.the.following. |
87220 | 63 6f 6d 6d 61 6e 64 73 3a 00 54 6f 20 6d 61 6e 69 70 75 6c 61 74 65 20 6f 72 20 64 69 73 70 6c | commands:.To.manipulate.or.displ |
87240 | 61 79 20 41 52 50 5f 20 74 61 62 6c 65 20 65 6e 74 72 69 65 73 2c 20 74 68 65 20 66 6f 6c 6c 6f | ay.ARP_.table.entries,.the.follo |
87260 | 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 61 72 65 20 69 6d 70 6c 65 6d 65 6e 74 65 64 2e 00 54 | wing.commands.are.implemented..T |
87280 | 6f 20 70 65 72 66 6f 72 6d 20 61 20 67 72 61 63 65 66 75 6c 20 73 68 75 74 64 6f 77 6e 2c 20 74 | o.perform.a.graceful.shutdown,.t |
872a0 | 68 65 20 46 52 52 20 60 60 67 72 61 63 65 66 75 6c 2d 72 65 73 74 61 72 74 20 70 72 65 70 61 72 | he.FRR.``graceful-restart.prepar |
872c0 | 65 20 69 70 20 6f 73 70 66 60 60 20 45 58 45 43 2d 6c 65 76 65 6c 20 63 6f 6d 6d 61 6e 64 20 6e | e.ip.ospf``.EXEC-level.command.n |
872e0 | 65 65 64 73 20 74 6f 20 62 65 20 69 73 73 75 65 64 20 62 65 66 6f 72 65 20 72 65 73 74 61 72 74 | eeds.to.be.issued.before.restart |
87300 | 69 6e 67 20 74 68 65 20 6f 73 70 66 64 20 64 61 65 6d 6f 6e 2e 00 54 6f 20 72 65 71 75 65 73 74 | ing.the.ospfd.daemon..To.request |
87320 | 20 61 20 2f 35 36 20 70 72 65 66 69 78 20 66 72 6f 6d 20 79 6f 75 72 20 49 53 50 20 75 73 65 3a | .a./56.prefix.from.your.ISP.use: |
87340 | 00 54 6f 20 72 65 73 74 61 72 74 20 74 68 65 20 44 48 43 50 76 36 20 73 65 72 76 65 72 00 54 6f | .To.restart.the.DHCPv6.server.To |
87360 | 20 73 65 74 75 70 20 53 4e 41 54 2c 20 77 65 20 6e 65 65 64 20 74 6f 20 6b 6e 6f 77 3a 00 54 6f | .setup.SNAT,.we.need.to.know:.To |
87380 | 20 73 65 74 75 70 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 4e 41 54 20 72 75 6c 65 20 77 65 | .setup.a.destination.NAT.rule.we |
873a0 | 20 6e 65 65 64 20 74 6f 20 67 61 74 68 65 72 3a 00 54 6f 20 75 70 64 61 74 65 20 74 68 65 20 66 | .need.to.gather:.To.update.the.f |
873c0 | 69 72 6d 77 61 72 65 2c 20 56 79 4f 53 20 61 6c 73 6f 20 73 68 69 70 73 20 74 68 65 20 60 71 6d | irmware,.VyOS.also.ships.the.`qm |
873e0 | 69 2d 66 69 72 6d 77 61 72 65 2d 75 70 64 61 74 65 60 20 62 69 6e 61 72 79 2e 20 54 6f 20 75 70 | i-firmware-update`.binary..To.up |
87400 | 67 72 61 64 65 20 74 68 65 20 66 69 72 6d 77 61 72 65 20 6f 66 20 61 6e 20 65 2e 67 2e 20 53 69 | grade.the.firmware.of.an.e.g..Si |
87420 | 65 72 72 61 20 57 69 72 65 6c 65 73 73 20 4d 43 37 37 31 30 20 6d 6f 64 75 6c 65 20 74 6f 20 74 | erra.Wireless.MC7710.module.to.t |
87440 | 68 65 20 66 69 72 6d 77 61 72 65 20 70 72 6f 76 69 64 65 64 20 69 6e 20 74 68 65 20 66 69 6c 65 | he.firmware.provided.in.the.file |
87460 | 20 60 60 39 39 39 39 39 39 39 5f 39 39 39 39 39 39 39 5f 39 32 30 30 5f 30 33 2e 30 35 2e 31 34 | .``9999999_9999999_9200_03.05.14 |
87480 | 2e 30 30 5f 30 30 5f 67 65 6e 65 72 69 63 5f 30 30 30 2e 30 30 30 5f 30 30 31 5f 53 50 4b 47 5f | .00_00_generic_000.000_001_SPKG_ |
874a0 | 4d 43 2e 63 77 65 60 60 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 | MC.cwe``.use.the.following.comma |
874c0 | 6e 64 3a 00 54 6f 20 75 73 65 20 61 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 66 6f 72 20 61 | nd:.To.use.a.RADIUS.server.for.a |
874e0 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 6e 64 20 62 61 6e 64 77 69 64 74 68 2d 73 68 61 70 | uthentication.and.bandwidth-shap |
87500 | 69 6e 67 2c 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 63 6f 6e 66 69 | ing,.the.following.example.confi |
87520 | 67 75 72 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 2e 00 54 6f 20 75 73 65 20 61 20 72 | guration.can.be.used..To.use.a.r |
87540 | 61 64 69 75 73 20 73 65 72 76 65 72 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 77 69 74 63 68 | adius.server,.you.need.to.switch |
87560 | 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 6f 64 65 20 52 41 44 49 55 53 20 61 | .to.authentication.mode.RADIUS.a |
87580 | 6e 64 20 74 68 65 6e 20 63 6f 6e 66 69 67 75 72 65 20 69 74 2e 00 54 6f 20 75 73 65 20 73 75 63 | nd.then.configure.it..To.use.suc |
875a0 | 68 20 61 20 73 65 72 76 69 63 65 2c 20 6f 6e 65 20 6d 75 73 74 20 64 65 66 69 6e 65 20 61 20 6c | h.a.service,.one.must.define.a.l |
875c0 | 6f 67 69 6e 2c 20 70 61 73 73 77 6f 72 64 2c 20 6f 6e 65 20 6f 72 20 6d 75 6c 74 69 70 6c 65 20 | ogin,.password,.one.or.multiple. |
875e0 | 68 6f 73 74 6e 61 6d 65 73 2c 20 70 72 6f 74 6f 63 6f 6c 20 61 6e 64 20 73 65 72 76 65 72 2e 00 | hostnames,.protocol.and.server.. |
87600 | 54 6f 20 75 73 65 20 74 68 65 20 53 61 6c 74 2d 4d 69 6e 69 6f 6e 2c 20 61 20 72 75 6e 6e 69 6e | To.use.the.Salt-Minion,.a.runnin |
87620 | 67 20 53 61 6c 74 2d 4d 61 73 74 65 72 20 69 73 20 72 65 71 75 69 72 65 64 2e 20 59 6f 75 20 63 | g.Salt-Master.is.required..You.c |
87640 | 61 6e 20 66 69 6e 64 20 6d 6f 72 65 20 69 6e 20 74 68 65 20 60 53 61 6c 74 20 50 6f 6a 65 63 74 | an.find.more.in.the.`Salt.Poject |
87660 | 20 44 6f 63 75 6d 65 6e 74 61 69 6f 6e 20 3c 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 73 61 6c 74 | .Documentaion.<https://docs.salt |
87680 | 70 72 6f 6a 65 63 74 2e 69 6f 2f 65 6e 2f 6c 61 74 65 73 74 2f 63 6f 6e 74 65 6e 74 73 2e 68 74 | project.io/en/latest/contents.ht |
876a0 | 6d 6c 3e 60 5f 00 54 6f 20 75 73 65 20 74 68 69 73 20 66 75 6c 6c 20 63 6f 6e 66 69 67 75 72 61 | ml>`_.To.use.this.full.configura |
876c0 | 74 69 6f 6e 20 77 65 20 61 73 75 6d 65 20 61 20 70 75 62 6c 69 63 20 61 63 63 65 73 73 69 62 6c | tion.we.asume.a.public.accessibl |
876e0 | 65 20 68 6f 73 74 6e 61 6d 65 2e 00 54 6f 70 6f 6c 6f 67 79 3a 00 54 6f 70 6f 6c 6f 67 79 3a 20 | e.hostname..Topology:.Topology:. |
87700 | 50 43 34 20 2d 20 4c 65 61 66 32 20 2d 20 53 70 69 6e 65 31 20 2d 20 4c 65 61 66 33 20 2d 20 50 | PC4.-.Leaf2.-.Spine1.-.Leaf3.-.P |
87720 | 43 35 00 54 6f 75 62 6c 65 73 68 6f 6f 74 69 6e 67 00 54 72 61 63 6b 00 54 72 61 63 6b 20 6f 70 | C5.Toubleshooting.Track.Track.op |
87740 | 74 69 6f 6e 20 74 6f 20 74 72 61 63 6b 20 6e 6f 6e 20 56 52 52 50 20 69 6e 74 65 72 66 61 63 65 | tion.to.track.non.VRRP.interface |
87760 | 20 73 74 61 74 65 73 2e 20 56 52 52 50 20 63 68 61 6e 67 65 73 20 73 74 61 74 75 73 20 74 6f 20 | .states..VRRP.changes.status.to. |
87780 | 60 60 46 41 55 4c 54 60 60 20 69 66 20 6f 6e 65 20 6f 66 20 74 68 65 20 74 72 61 63 6b 20 69 6e | ``FAULT``.if.one.of.the.track.in |
877a0 | 74 65 72 66 61 63 65 73 20 69 6e 20 73 74 61 74 65 20 60 60 64 6f 77 6e 60 60 2e 00 54 72 61 64 | terfaces.in.state.``down``..Trad |
877c0 | 69 74 69 6f 6e 61 6c 20 42 47 50 20 64 69 64 20 6e 6f 74 20 68 61 76 65 20 74 68 65 20 66 65 61 | itional.BGP.did.not.have.the.fea |
877e0 | 74 75 72 65 20 74 6f 20 64 65 74 65 63 74 20 61 20 72 65 6d 6f 74 65 20 70 65 65 72 27 73 20 63 | ture.to.detect.a.remote.peer's.c |
87800 | 61 70 61 62 69 6c 69 74 69 65 73 2c 20 65 2e 67 2e 20 77 68 65 74 68 65 72 20 69 74 20 63 61 6e | apabilities,.e.g..whether.it.can |
87820 | 20 68 61 6e 64 6c 65 20 70 72 65 66 69 78 20 74 79 70 65 73 20 6f 74 68 65 72 20 74 68 61 6e 20 | .handle.prefix.types.other.than. |
87840 | 49 50 76 34 20 75 6e 69 63 61 73 74 20 72 6f 75 74 65 73 2e 20 54 68 69 73 20 77 61 73 20 61 20 | IPv4.unicast.routes..This.was.a. |
87860 | 62 69 67 20 70 72 6f 62 6c 65 6d 20 75 73 69 6e 67 20 4d 75 6c 74 69 70 72 6f 74 6f 63 6f 6c 20 | big.problem.using.Multiprotocol. |
87880 | 45 78 74 65 6e 73 69 6f 6e 20 66 6f 72 20 42 47 50 20 69 6e 20 61 6e 20 6f 70 65 72 61 74 69 6f | Extension.for.BGP.in.an.operatio |
878a0 | 6e 61 6c 20 6e 65 74 77 6f 72 6b 2e 20 3a 72 66 63 3a 60 32 38 34 32 60 20 61 64 6f 70 74 65 64 | nal.network..:rfc:`2842`.adopted |
878c0 | 20 61 20 66 65 61 74 75 72 65 20 63 61 6c 6c 65 64 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 | .a.feature.called.Capability.Neg |
878e0 | 6f 74 69 61 74 69 6f 6e 2e 20 2a 62 67 70 64 2a 20 75 73 65 20 74 68 69 73 20 43 61 70 61 62 69 | otiation..*bgpd*.use.this.Capabi |
87900 | 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 20 74 6f 20 64 65 74 65 63 74 20 74 68 65 20 72 | lity.Negotiation.to.detect.the.r |
87920 | 65 6d 6f 74 65 20 70 65 65 72 27 73 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 20 49 66 20 61 20 | emote.peer's.capabilities..If.a. |
87940 | 70 65 65 72 20 69 73 20 6f 6e 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 6e 20 49 50 | peer.is.only.configured.as.an.IP |
87960 | 76 34 20 75 6e 69 63 61 73 74 20 6e 65 69 67 68 62 6f 72 2c 20 2a 62 67 70 64 2a 20 64 6f 65 73 | v4.unicast.neighbor,.*bgpd*.does |
87980 | 20 6e 6f 74 20 73 65 6e 64 20 74 68 65 73 65 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 | .not.send.these.Capability.Negot |
879a0 | 69 61 74 69 6f 6e 20 70 61 63 6b 65 74 73 20 28 61 74 20 6c 65 61 73 74 20 6e 6f 74 20 75 6e 6c | iation.packets.(at.least.not.unl |
879c0 | 65 73 73 20 6f 74 68 65 72 20 6f 70 74 69 6f 6e 61 6c 20 42 47 50 20 66 65 61 74 75 72 65 73 20 | ess.other.optional.BGP.features. |
879e0 | 72 65 71 75 69 72 65 20 63 61 70 61 62 69 6c 69 74 79 20 6e 65 67 6f 74 69 61 74 69 6f 6e 29 2e | require.capability.negotiation). |
87a00 | 00 54 72 61 64 69 74 69 6f 6e 61 6c 6c 79 20 66 69 72 65 77 61 6c 6c 73 20 77 65 65 72 65 20 63 | .Traditionally.firewalls.weere.c |
87a20 | 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 20 74 68 65 20 63 6f 6e 63 65 70 74 20 6f 66 20 64 61 | onfigured.with.the.concept.of.da |
87a40 | 74 61 20 67 6f 69 6e 67 20 69 6e 20 61 6e 64 20 6f 75 74 20 6f 66 20 61 6e 20 69 6e 74 65 72 66 | ta.going.in.and.out.of.an.interf |
87a60 | 61 63 65 2e 20 54 68 65 20 72 6f 75 74 65 72 20 6a 75 73 74 20 6c 69 73 74 65 6e 65 64 20 74 6f | ace..The.router.just.listened.to |
87a80 | 20 74 68 65 20 64 61 74 61 20 66 6c 6f 77 69 6e 67 20 74 68 72 6f 75 67 68 20 61 6e 64 20 72 65 | .the.data.flowing.through.and.re |
87aa0 | 73 70 6f 6e 64 69 6e 67 20 61 73 20 72 65 71 75 69 72 65 64 20 69 66 20 69 74 20 77 61 73 20 64 | sponding.as.required.if.it.was.d |
87ac0 | 69 72 65 63 74 65 64 20 61 74 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2e 00 54 72 | irected.at.the.router.itself..Tr |
87ae0 | 61 64 69 74 69 6f 6e 61 6c 6c 79 20 68 61 72 64 77 61 72 65 20 72 6f 75 74 65 72 73 20 69 6d 70 | aditionally.hardware.routers.imp |
87b00 | 6c 65 6d 65 6e 74 20 49 50 73 65 63 20 65 78 63 6c 75 73 69 76 65 6c 79 20 64 75 65 20 74 6f 20 | lement.IPsec.exclusively.due.to. |
87b20 | 72 65 6c 61 74 69 76 65 20 65 61 73 65 20 6f 66 20 69 6d 70 6c 65 6d 65 6e 74 69 6e 67 20 69 74 | relative.ease.of.implementing.it |
87b40 | 20 69 6e 20 68 61 72 64 77 61 72 65 20 61 6e 64 20 69 6e 73 75 66 66 69 63 69 65 6e 74 20 43 50 | .in.hardware.and.insufficient.CP |
87b60 | 55 20 70 6f 77 65 72 20 66 6f 72 20 64 6f 69 6e 67 20 65 6e 63 72 79 70 74 69 6f 6e 20 69 6e 20 | U.power.for.doing.encryption.in. |
87b80 | 73 6f 66 74 77 61 72 65 2e 20 53 69 6e 63 65 20 56 79 4f 53 20 69 73 20 61 20 73 6f 66 74 77 61 | software..Since.VyOS.is.a.softwa |
87ba0 | 72 65 20 72 6f 75 74 65 72 2c 20 74 68 69 73 20 69 73 20 6c 65 73 73 20 6f 66 20 61 20 63 6f 6e | re.router,.this.is.less.of.a.con |
87bc0 | 63 65 72 6e 2e 20 4f 70 65 6e 56 50 4e 20 68 61 73 20 62 65 65 6e 20 77 69 64 65 6c 79 20 75 73 | cern..OpenVPN.has.been.widely.us |
87be0 | 65 64 20 6f 6e 20 55 4e 49 58 20 70 6c 61 74 66 6f 72 6d 20 66 6f 72 20 61 20 6c 6f 6e 67 20 74 | ed.on.UNIX.platform.for.a.long.t |
87c00 | 69 6d 65 20 61 6e 64 20 69 73 20 61 20 70 6f 70 75 6c 61 72 20 6f 70 74 69 6f 6e 20 66 6f 72 20 | ime.and.is.a.popular.option.for. |
87c20 | 72 65 6d 6f 74 65 20 61 63 63 65 73 73 20 56 50 4e 2c 20 74 68 6f 75 67 68 20 69 74 27 73 20 61 | remote.access.VPN,.though.it's.a |
87c40 | 6c 73 6f 20 63 61 70 61 62 6c 65 20 6f 66 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 63 6f 6e 6e | lso.capable.of.site-to-site.conn |
87c60 | 65 63 74 69 6f 6e 73 2e 00 54 72 61 66 66 69 63 20 46 69 6c 74 65 72 73 00 54 72 61 66 66 69 63 | ections..Traffic.Filters.Traffic |
87c80 | 20 46 69 6c 74 65 72 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 77 68 69 | .Filters.are.used.to.control.whi |
87ca0 | 63 68 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 68 61 76 65 20 74 68 65 20 64 65 66 69 6e 65 64 | ch.packets.will.have.the.defined |
87cc0 | 20 4e 41 54 20 72 75 6c 65 73 20 61 70 70 6c 69 65 64 2e 20 46 69 76 65 20 64 69 66 66 65 72 65 | .NAT.rules.applied..Five.differe |
87ce0 | 6e 74 20 66 69 6c 74 65 72 73 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 77 69 74 68 69 6e | nt.filters.can.be.applied.within |
87d00 | 20 61 20 4e 41 54 20 72 75 6c 65 2e 00 54 72 61 66 66 69 63 20 50 6f 6c 69 63 79 00 54 72 61 66 | .a.NAT.rule..Traffic.Policy.Traf |
87d20 | 66 69 63 20 63 61 6e 6e 6f 74 20 66 6c 6f 77 20 62 65 74 77 65 65 6e 20 7a 6f 6e 65 20 6d 65 6d | fic.cannot.flow.between.zone.mem |
87d40 | 62 65 72 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 20 | ber.interface.and.any.interface. |
87d60 | 74 68 61 74 20 69 73 20 6e 6f 74 20 61 20 7a 6f 6e 65 20 6d 65 6d 62 65 72 2e 00 54 72 61 66 66 | that.is.not.a.zone.member..Traff |
87d80 | 69 63 20 66 72 6f 6d 20 6d 75 6c 74 69 63 61 73 74 20 73 6f 75 72 63 65 73 20 77 69 6c 6c 20 67 | ic.from.multicast.sources.will.g |
87da0 | 6f 20 74 6f 20 74 68 65 20 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 2c 20 61 6e 64 20 72 | o.to.the.Rendezvous.Point,.and.r |
87dc0 | 65 63 65 69 76 65 72 73 20 77 69 6c 6c 20 70 75 6c 6c 20 69 74 20 66 72 6f 6d 20 61 20 73 68 61 | eceivers.will.pull.it.from.a.sha |
87de0 | 72 65 64 20 74 72 65 65 20 75 73 69 6e 67 20 3a 61 62 62 72 3a 60 49 47 4d 50 20 28 49 6e 74 65 | red.tree.using.:abbr:`IGMP.(Inte |
87e00 | 72 6e 65 74 20 47 72 6f 75 70 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 60 | rnet.Group.Management.Protocol)` |
87e20 | 2e 00 54 72 61 66 66 69 63 20 66 72 6f 6d 20 6d 75 6c 74 69 63 61 73 74 20 73 6f 75 72 63 65 73 | ..Traffic.from.multicast.sources |
87e40 | 20 77 69 6c 6c 20 67 6f 20 74 6f 20 74 68 65 20 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 | .will.go.to.the.Rendezvous.Point |
87e60 | 2c 20 61 6e 64 20 72 65 63 65 69 76 65 72 73 20 77 69 6c 6c 20 70 75 6c 6c 20 69 74 20 66 72 6f | ,.and.receivers.will.pull.it.fro |
87e80 | 6d 20 61 20 73 68 61 72 65 64 20 74 72 65 65 20 75 73 69 6e 67 20 49 47 4d 50 20 28 49 6e 74 65 | m.a.shared.tree.using.IGMP.(Inte |
87ea0 | 72 6e 65 74 20 47 72 6f 75 70 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 2e | rnet.Group.Management.Protocol). |
87ec0 | 00 54 72 61 66 66 69 63 20 66 72 6f 6d 20 6d 75 6c 74 69 63 61 73 74 20 73 6f 75 72 63 65 73 20 | .Traffic.from.multicast.sources. |
87ee0 | 77 69 6c 6c 20 67 6f 20 74 6f 20 74 68 65 20 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 2c | will.go.to.the.Rendezvous.Point, |
87f00 | 20 61 6e 64 20 72 65 63 65 69 76 65 72 73 20 77 69 6c 6c 20 70 75 6c 6c 20 69 74 20 66 72 6f 6d | .and.receivers.will.pull.it.from |
87f20 | 20 61 20 73 68 61 72 65 64 20 74 72 65 65 20 75 73 69 6e 67 20 4d 4c 44 20 28 4d 75 6c 74 69 63 | .a.shared.tree.using.MLD.(Multic |
87f40 | 61 73 74 20 4c 69 73 74 65 6e 65 72 20 44 69 73 63 6f 76 65 72 79 29 2e 00 54 72 61 66 66 69 63 | ast.Listener.Discovery)..Traffic |
87f60 | 20 6d 75 73 74 20 62 65 20 73 79 6d 6d 65 74 72 69 63 00 54 72 61 66 66 69 63 20 77 68 69 63 68 | .must.be.symmetric.Traffic.which |
87f80 | 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 6f 6e 20 61 6e | .is.received.by.the.router.on.an |
87fa0 | 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 6d 65 6d 62 65 72 20 6f 66 20 61 20 | .interface.which.is.member.of.a. |
87fc0 | 62 72 69 64 67 65 20 69 73 20 70 72 6f 63 65 73 73 65 64 20 6f 6e 20 74 68 65 20 2a 2a 42 72 69 | bridge.is.processed.on.the.**Bri |
87fe0 | 64 67 65 20 4c 61 79 65 72 2a 2a 2e 20 41 20 73 69 6d 70 6c 69 66 69 65 64 20 70 61 63 6b 65 74 | dge.Layer**..A.simplified.packet |
88000 | 20 66 6c 6f 77 20 64 69 61 67 72 61 6d 20 66 6f 72 20 74 68 69 73 20 6c 61 79 65 72 20 69 73 20 | .flow.diagram.for.this.layer.is. |
88020 | 73 68 6f 77 6e 20 6e 65 78 74 3a 00 54 72 61 6e 73 69 74 69 6f 6e 20 73 63 72 69 70 74 73 00 54 | shown.next:.Transition.scripts.T |
88040 | 72 61 6e 73 69 74 69 6f 6e 20 73 63 72 69 70 74 73 20 63 61 6e 20 68 65 6c 70 20 79 6f 75 20 69 | ransition.scripts.can.help.you.i |
88060 | 6d 70 6c 65 6d 65 6e 74 20 76 61 72 69 6f 75 73 20 66 69 78 75 70 73 2c 20 73 75 63 68 20 61 73 | mplement.various.fixups,.such.as |
88080 | 20 73 74 61 72 74 69 6e 67 20 61 6e 64 20 73 74 6f 70 70 69 6e 67 20 73 65 72 76 69 63 65 73 2c | .starting.and.stopping.services, |
880a0 | 20 6f 72 20 65 76 65 6e 20 6d 6f 64 69 66 79 69 6e 67 20 74 68 65 20 56 79 4f 53 20 63 6f 6e 66 | .or.even.modifying.the.VyOS.conf |
880c0 | 69 67 20 6f 6e 20 56 52 52 50 20 74 72 61 6e 73 69 74 69 6f 6e 2e 20 54 68 69 73 20 73 65 74 75 | ig.on.VRRP.transition..This.setu |
880e0 | 70 20 77 69 6c 6c 20 6d 61 6b 65 20 74 68 65 20 56 52 52 50 20 70 72 6f 63 65 73 73 20 65 78 65 | p.will.make.the.VRRP.process.exe |
88100 | 63 75 74 65 20 74 68 65 20 60 60 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2f 76 72 72 70 2d | cute.the.``/config/scripts/vrrp- |
88120 | 66 61 69 6c 2e 73 68 60 60 20 77 69 74 68 20 61 72 67 75 6d 65 6e 74 20 60 60 46 6f 6f 60 60 20 | fail.sh``.with.argument.``Foo``. |
88140 | 77 68 65 6e 20 56 52 52 50 20 66 61 69 6c 73 2c 20 61 6e 64 20 74 68 65 20 60 60 2f 63 6f 6e 66 | when.VRRP.fails,.and.the.``/conf |
88160 | 69 67 2f 73 63 72 69 70 74 73 2f 76 72 72 70 2d 6d 61 73 74 65 72 2e 73 68 60 60 20 77 68 65 6e | ig/scripts/vrrp-master.sh``.when |
88180 | 20 74 68 65 20 72 6f 75 74 65 72 20 62 65 63 6f 6d 65 73 20 74 68 65 20 6d 61 73 74 65 72 3a 00 | .the.router.becomes.the.master:. |
881a0 | 54 72 61 6e 73 70 61 72 65 6e 74 20 50 72 6f 78 79 00 54 72 6f 75 62 6c 65 73 68 6f 6f 74 69 6e | Transparent.Proxy.Troubleshootin |
881c0 | 67 00 54 75 6e 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 00 54 75 6e 6e 65 6c 00 54 75 6e 6e 65 6c 20 | g.Tuning.commands.Tunnel.Tunnel. |
881e0 | 6b 65 79 73 00 54 75 6e 6e 65 6c 20 70 61 73 73 77 6f 72 64 20 75 73 65 64 20 74 6f 20 61 75 74 | keys.Tunnel.password.used.to.aut |
88200 | 68 65 6e 74 69 63 61 74 65 20 74 68 65 20 63 6c 69 65 6e 74 20 28 4c 41 43 29 00 54 77 6f 20 65 | henticate.the.client.(LAC).Two.e |
88220 | 6e 76 69 72 6f 6e 6d 65 6e 74 20 76 61 72 69 61 62 6c 65 73 20 61 72 65 20 61 76 61 69 6c 61 62 | nvironment.variables.are.availab |
88240 | 6c 65 3a 00 54 77 6f 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 67 6f 69 6e 67 20 74 6f 20 | le:.Two.interfaces.are.going.to. |
88260 | 62 65 20 75 73 65 64 20 69 6e 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 73 3a 20 65 74 68 30 20 | be.used.in.the.flowtables:.eth0. |
88280 | 61 6e 64 20 65 74 68 31 00 54 77 6f 20 6e 65 77 20 66 69 6c 65 73 20 60 60 2f 63 6f 6e 66 69 67 | and.eth1.Two.new.files.``/config |
882a0 | 2f 61 75 74 68 2f 69 64 5f 72 73 61 5f 72 70 6b 69 60 60 20 61 6e 64 20 60 60 2f 63 6f 6e 66 69 | /auth/id_rsa_rpki``.and.``/confi |
882c0 | 67 2f 61 75 74 68 2f 69 64 5f 72 73 61 5f 72 70 6b 69 2e 70 75 62 60 60 20 77 69 6c 6c 20 62 65 | g/auth/id_rsa_rpki.pub``.will.be |
882e0 | 20 63 72 65 61 74 65 64 2e 00 54 77 6f 20 72 6f 75 74 65 72 73 20 63 6f 6e 6e 65 63 74 65 64 20 | .created..Two.routers.connected. |
88300 | 62 6f 74 68 20 76 69 61 20 65 74 68 31 20 74 68 72 6f 75 67 68 20 61 6e 20 75 6e 74 72 75 73 74 | both.via.eth1.through.an.untrust |
88320 | 65 64 20 73 77 69 74 63 68 00 54 79 70 65 20 6f 66 20 6d 65 74 72 69 63 73 20 67 72 6f 75 70 69 | ed.switch.Type.of.metrics.groupi |
88340 | 6e 67 20 77 68 65 6e 20 70 75 73 68 20 74 6f 20 41 7a 75 72 65 20 44 61 74 61 20 45 78 70 6c 6f | ng.when.push.to.Azure.Data.Explo |
88360 | 72 65 72 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 60 60 74 61 62 6c 65 2d 70 65 72 2d | rer..The.default.is.``table-per- |
88380 | 6d 65 74 72 69 63 60 60 2e 00 54 79 70 69 63 61 6c 6c 79 2c 20 61 20 31 2d 74 6f 2d 31 20 4e 41 | metric``..Typically,.a.1-to-1.NA |
883a0 | 54 20 72 75 6c 65 20 6f 6d 69 74 73 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 | T.rule.omits.the.destination.por |
883c0 | 74 20 28 61 6c 6c 20 70 6f 72 74 73 29 20 61 6e 64 20 72 65 70 6c 61 63 65 73 20 74 68 65 20 70 | t.(all.ports).and.replaces.the.p |
883e0 | 72 6f 74 6f 63 6f 6c 20 77 69 74 68 20 65 69 74 68 65 72 20 2a 2a 61 6c 6c 2a 2a 20 6f 72 20 2a | rotocol.with.either.**all**.or.* |
88400 | 2a 69 70 2a 2a 2e 00 55 44 50 20 42 72 6f 61 64 63 61 73 74 20 52 65 6c 61 79 00 55 44 50 20 6d | *ip**..UDP.Broadcast.Relay.UDP.m |
88420 | 6f 64 65 20 77 6f 72 6b 73 20 62 65 74 74 65 72 20 77 69 74 68 20 4e 41 54 3a 00 55 44 50 20 70 | ode.works.better.with.NAT:.UDP.p |
88440 | 6f 72 74 20 31 37 30 31 20 66 6f 72 20 49 50 73 65 63 00 55 44 50 20 70 6f 72 74 20 34 35 30 30 | ort.1701.for.IPsec.UDP.port.4500 |
88460 | 20 28 4e 41 54 2d 54 29 00 55 44 50 20 70 6f 72 74 20 35 30 30 20 28 49 4b 45 29 00 55 52 4c 20 | .(NAT-T).UDP.port.500.(IKE).URL. |
88480 | 46 69 6c 74 65 72 69 6e 67 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 53 71 75 69 64 47 75 | Filtering.is.provided.by.SquidGu |
884a0 | 61 72 64 5f 2e 00 55 52 4c 20 66 69 6c 74 65 72 69 6e 67 00 55 52 4c 20 77 69 74 68 20 73 69 67 | ard_..URL.filtering.URL.with.sig |
884c0 | 6e 61 74 75 72 65 20 6f 66 20 6d 61 73 74 65 72 20 66 6f 72 20 61 75 74 68 20 72 65 70 6c 79 20 | nature.of.master.for.auth.reply. |
884e0 | 76 65 72 69 66 69 63 61 74 69 6f 6e 00 55 53 42 20 74 6f 20 73 65 72 69 61 6c 20 63 6f 6e 76 65 | verification.USB.to.serial.conve |
88500 | 72 74 65 72 73 20 77 69 6c 6c 20 68 61 6e 64 6c 65 20 6d 6f 73 74 20 6f 66 20 74 68 65 69 72 20 | rters.will.handle.most.of.their. |
88520 | 77 6f 72 6b 20 69 6e 20 73 6f 66 74 77 61 72 65 20 73 6f 20 79 6f 75 20 73 68 6f 75 6c 64 20 62 | work.in.software.so.you.should.b |
88540 | 65 20 63 61 72 65 66 75 6c 6c 20 77 69 74 68 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 62 61 75 | e.carefull.with.the.selected.bau |
88560 | 64 72 61 74 65 20 61 73 20 73 6f 6d 65 20 74 69 6d 65 73 20 74 68 65 79 20 63 61 6e 27 74 20 63 | drate.as.some.times.they.can't.c |
88580 | 6f 70 65 20 77 69 74 68 20 74 68 65 20 65 78 70 65 63 74 65 64 20 73 70 65 65 64 2e 00 55 55 43 | ope.with.the.expected.speed..UUC |
885a0 | 50 20 73 75 62 73 79 73 74 65 6d 00 55 6e 69 63 61 73 74 00 55 6e 69 63 61 73 74 20 56 52 52 50 | P.subsystem.Unicast.Unicast.VRRP |
885c0 | 00 55 6e 69 63 61 73 74 20 56 58 4c 41 4e 00 55 6e 69 74 20 6f 66 20 74 68 69 73 20 63 6f 6d 6d | .Unicast.VXLAN.Unit.of.this.comm |
885e0 | 61 6e 64 20 69 73 20 4d 42 2e 00 55 6e 69 74 73 00 55 6e 74 69 6c 20 56 79 4f 53 20 31 2e 34 2c | and.is.MB..Units.Until.VyOS.1.4, |
88600 | 20 74 68 65 20 6f 6e 6c 79 20 6f 70 74 69 6f 6e 20 66 6f 72 20 73 69 74 65 2d 74 6f 2d 73 69 74 | .the.only.option.for.site-to-sit |
88620 | 65 20 4f 70 65 6e 56 50 4e 20 77 69 74 68 6f 75 74 20 50 4b 49 20 77 61 73 20 74 6f 20 75 73 65 | e.OpenVPN.without.PKI.was.to.use |
88640 | 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 73 2e 20 54 68 61 74 20 6f 70 74 69 6f 6e 20 69 73 | .pre-shared.keys..That.option.is |
88660 | 20 73 74 69 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 62 75 74 20 69 74 20 69 73 20 64 65 70 72 65 | .still.available.but.it.is.depre |
88680 | 63 61 74 65 64 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 69 6e 20 74 68 65 | cated.and.will.be.removed.in.the |
886a0 | 20 66 75 74 75 72 65 2e 20 48 6f 77 65 76 65 72 2c 20 69 66 20 79 6f 75 20 6e 65 65 64 20 74 6f | .future..However,.if.you.need.to |
886c0 | 20 73 65 74 20 75 70 20 61 20 74 75 6e 6e 65 6c 20 74 6f 20 61 6e 20 6f 6c 64 65 72 20 56 79 4f | .set.up.a.tunnel.to.an.older.VyO |
886e0 | 53 20 76 65 72 73 69 6f 6e 20 6f 72 20 61 20 73 79 73 74 65 6d 20 77 69 74 68 20 6f 6c 64 65 72 | S.version.or.a.system.with.older |
88700 | 20 4f 70 65 6e 56 50 4e 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 74 69 6c 6c 20 6e 65 65 64 | .OpenVPN,.you.need.to.still.need |
88720 | 20 74 6f 20 6b 6e 6f 77 20 68 6f 77 20 74 6f 20 75 73 65 20 69 74 2e 00 55 70 20 74 6f 20 73 65 | .to.know.how.to.use.it..Up.to.se |
88740 | 76 65 6e 20 71 75 65 75 65 73 20 2d 64 65 66 69 6e 65 64 20 61 73 20 63 6c 61 73 73 65 73 5f 20 | ven.queues.-defined.as.classes_. |
88760 | 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 20 70 72 69 6f 72 69 74 69 65 73 2d 20 63 61 6e 20 62 | with.different.priorities-.can.b |
88780 | 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 50 61 63 6b 65 74 73 20 61 72 65 20 70 6c 61 63 65 64 | e.configured..Packets.are.placed |
887a0 | 20 69 6e 74 6f 20 71 75 65 75 65 73 20 62 61 73 65 64 20 6f 6e 20 61 73 73 6f 63 69 61 74 65 64 | .into.queues.based.on.associated |
887c0 | 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 2e 20 50 61 63 6b 65 74 73 20 61 72 65 20 74 72 61 | .match.criteria..Packets.are.tra |
887e0 | 6e 73 6d 69 74 74 65 64 20 66 72 6f 6d 20 74 68 65 20 71 75 65 75 65 73 20 69 6e 20 70 72 69 6f | nsmitted.from.the.queues.in.prio |
88800 | 72 69 74 79 20 6f 72 64 65 72 2e 20 49 66 20 63 6c 61 73 73 65 73 20 77 69 74 68 20 61 20 68 69 | rity.order..If.classes.with.a.hi |
88820 | 67 68 65 72 20 70 72 69 6f 72 69 74 79 20 61 72 65 20 62 65 69 6e 67 20 66 69 6c 6c 65 64 20 77 | gher.priority.are.being.filled.w |
88840 | 69 74 68 20 70 61 63 6b 65 74 73 20 63 6f 6e 74 69 6e 75 6f 75 73 6c 79 2c 20 70 61 63 6b 65 74 | ith.packets.continuously,.packet |
88860 | 73 20 66 72 6f 6d 20 6c 6f 77 65 72 20 70 72 69 6f 72 69 74 79 20 63 6c 61 73 73 65 73 20 77 69 | s.from.lower.priority.classes.wi |
88880 | 6c 6c 20 6f 6e 6c 79 20 62 65 20 74 72 61 6e 73 6d 69 74 74 65 64 20 61 66 74 65 72 20 74 72 61 | ll.only.be.transmitted.after.tra |
888a0 | 66 66 69 63 20 76 6f 6c 75 6d 65 20 66 72 6f 6d 20 68 69 67 68 65 72 20 70 72 69 6f 72 69 74 79 | ffic.volume.from.higher.priority |
888c0 | 20 63 6c 61 73 73 65 73 20 64 65 63 72 65 61 73 65 73 2e 00 55 70 64 61 74 65 00 55 70 64 61 74 | .classes.decreases..Update.Updat |
888e0 | 65 20 63 6f 6e 74 61 69 6e 65 72 20 69 6d 61 67 65 00 55 70 64 61 74 65 20 67 65 6f 69 70 20 64 | e.container.image.Update.geoip.d |
88900 | 61 74 61 62 61 73 65 00 55 70 64 61 74 65 73 00 55 70 64 61 74 65 73 20 66 72 6f 6d 20 74 68 65 | atabase.Updates.Updates.from.the |
88920 | 20 52 50 4b 49 20 63 61 63 68 65 20 73 65 72 76 65 72 73 20 61 72 65 20 64 69 72 65 63 74 6c 79 | .RPKI.cache.servers.are.directly |
88940 | 20 61 70 70 6c 69 65 64 20 61 6e 64 20 70 61 74 68 20 73 65 6c 65 63 74 69 6f 6e 20 69 73 20 75 | .applied.and.path.selection.is.u |
88960 | 70 64 61 74 65 64 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 20 28 53 6f 66 74 20 72 65 63 6f 6e 66 | pdated.accordingly..(Soft.reconf |
88980 | 69 67 75 72 61 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 74 68 | iguration.must.be.enabled.for.th |
889a0 | 69 73 20 74 6f 20 77 6f 72 6b 29 2e 00 55 70 6c 6f 61 64 20 62 61 6e 64 77 69 64 74 68 20 6c 69 | is.to.work)..Upload.bandwidth.li |
889c0 | 6d 69 74 20 69 6e 20 6b 62 69 74 2f 73 20 66 6f 72 20 60 3c 75 73 65 72 3e 60 2e 00 55 70 6c 6f | mit.in.kbit/s.for.`<user>`..Uplo |
889e0 | 61 64 20 62 61 6e 64 77 69 64 74 68 20 6c 69 6d 69 74 20 69 6e 20 6b 62 69 74 2f 73 20 66 6f 72 | ad.bandwidth.limit.in.kbit/s.for |
88a00 | 20 66 6f 72 20 75 73 65 72 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 | .for.user.on.interface.`<interfa |
88a20 | 63 65 3e 60 2e 00 55 70 6f 6e 20 72 65 63 65 70 74 69 6f 6e 20 6f 66 20 61 6e 20 69 6e 63 6f 6d | ce>`..Upon.reception.of.an.incom |
88a40 | 69 6e 67 20 70 61 63 6b 65 74 2c 20 77 68 65 6e 20 61 20 72 65 73 70 6f 6e 73 65 20 69 73 20 73 | ing.packet,.when.a.response.is.s |
88a60 | 65 6e 74 2c 20 69 74 20 6d 69 67 68 74 20 62 65 20 64 65 73 69 72 65 64 20 74 6f 20 65 6e 73 75 | ent,.it.might.be.desired.to.ensu |
88a80 | 72 65 20 74 68 61 74 20 69 74 20 6c 65 61 76 65 73 20 66 72 6f 6d 20 74 68 65 20 73 61 6d 65 20 | re.that.it.leaves.from.the.same. |
88aa0 | 69 6e 74 65 72 66 61 63 65 20 61 73 20 74 68 65 20 69 6e 62 6f 75 6e 64 20 6f 6e 65 2e 20 54 68 | interface.as.the.inbound.one..Th |
88ac0 | 69 73 20 63 61 6e 20 62 65 20 61 63 68 69 65 76 65 64 20 62 79 20 65 6e 61 62 6c 69 6e 67 20 73 | is.can.be.achieved.by.enabling.s |
88ae0 | 74 69 63 6b 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 69 6e 20 74 68 65 20 6c 6f 61 64 20 62 61 | ticky.connections.in.the.load.ba |
88b00 | 6c 61 6e 63 69 6e 67 3a 00 55 70 6f 6e 20 73 68 75 74 64 6f 77 6e 2c 20 74 68 69 73 20 6f 70 74 | lancing:.Upon.shutdown,.this.opt |
88b20 | 69 6f 6e 20 77 69 6c 6c 20 64 65 70 72 65 63 61 74 65 20 74 68 65 20 70 72 65 66 69 78 20 62 79 | ion.will.deprecate.the.prefix.by |
88b40 | 20 61 6e 6e 6f 75 6e 63 69 6e 67 20 69 74 20 69 6e 20 74 68 65 20 73 68 75 74 64 6f 77 6e 20 52 | .announcing.it.in.the.shutdown.R |
88b60 | 41 00 55 73 65 20 38 30 32 2e 31 31 6e 20 70 72 6f 74 6f 63 6f 6c 00 55 73 65 20 3a 61 62 62 72 | A.Use.802.11n.protocol.Use.:abbr |
88b80 | 3a 60 44 48 20 28 44 69 66 66 69 65 e2 80 93 48 65 6c 6c 6d 61 6e 29 60 20 70 61 72 61 6d 65 74 | :`DH.(Diffie...Hellman)`.paramet |
88ba0 | 65 72 73 20 66 72 6f 6d 20 50 4b 49 20 73 75 62 73 79 73 74 65 6d 2e 20 4d 75 73 74 20 62 65 20 | ers.from.PKI.subsystem..Must.be. |
88bc0 | 61 74 20 6c 65 61 73 74 20 32 30 34 38 20 62 69 74 73 20 69 6e 20 6c 65 6e 67 74 68 2e 00 55 73 | at.least.2048.bits.in.length..Us |
88be0 | 65 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 66 72 6f 6d 20 50 4b 49 20 73 75 62 73 79 73 | e.CA.certificate.from.PKI.subsys |
88c00 | 74 65 6d 00 55 73 65 20 44 79 6e 44 4e 53 20 61 73 20 79 6f 75 72 20 70 72 65 66 65 72 72 65 64 | tem.Use.DynDNS.as.your.preferred |
88c20 | 20 70 72 6f 76 69 64 65 72 3a 00 55 73 65 20 54 4c 53 20 62 75 74 20 73 6b 69 70 20 68 6f 73 74 | .provider:.Use.TLS.but.skip.host |
88c40 | 20 76 61 6c 69 64 61 74 69 6f 6e 00 55 73 65 20 54 4c 53 20 65 6e 63 72 79 70 74 69 6f 6e 2e 00 | .validation.Use.TLS.encryption.. |
88c60 | 55 73 65 20 60 3c 73 75 62 6e 65 74 3e 60 20 61 73 20 74 68 65 20 49 50 20 70 6f 6f 6c 20 66 6f | Use.`<subnet>`.as.the.IP.pool.fo |
88c80 | 72 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6e 67 20 63 6c 69 65 6e 74 73 2e 00 55 73 65 20 60 60 | r.all.connecting.clients..Use.`` |
88ca0 | 73 68 6f 77 20 6c 6f 67 20 7c 20 73 74 72 69 70 2d 70 72 69 76 61 74 65 60 60 20 69 66 20 79 6f | show.log.|.strip-private``.if.yo |
88cc0 | 75 20 77 61 6e 74 20 74 6f 20 68 69 64 65 20 70 72 69 76 61 74 65 20 64 61 74 61 20 77 68 65 6e | u.want.to.hide.private.data.when |
88ce0 | 20 73 68 61 72 69 6e 67 20 79 6f 75 72 20 6c 6f 67 73 2e 00 55 73 65 20 60 64 65 6c 65 74 65 20 | .sharing.your.logs..Use.`delete. |
88d00 | 73 79 73 74 65 6d 20 63 6f 6e 6e 74 72 61 63 6b 20 6d 6f 64 75 6c 65 73 60 20 74 6f 20 64 65 61 | system.conntrack.modules`.to.dea |
88d20 | 63 74 69 76 65 20 61 6c 6c 20 6d 6f 64 75 6c 65 73 2e 00 55 73 65 20 61 20 70 65 72 73 69 73 74 | ctive.all.modules..Use.a.persist |
88d40 | 65 6e 74 20 4c 44 41 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 4e 6f 72 6d 61 6c 6c 79 20 74 68 | ent.LDAP.connection..Normally.th |
88d60 | 65 20 4c 44 41 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 6f 6e 6c 79 20 6f 70 65 6e 20 77 | e.LDAP.connection.is.only.open.w |
88d80 | 68 69 6c 65 20 76 61 6c 69 64 61 74 69 6e 67 20 61 20 75 73 65 72 6e 61 6d 65 20 74 6f 20 70 72 | hile.validating.a.username.to.pr |
88da0 | 65 73 65 72 76 65 20 72 65 73 6f 75 72 63 65 73 20 61 74 20 74 68 65 20 4c 44 41 50 20 73 65 72 | eserve.resources.at.the.LDAP.ser |
88dc0 | 76 65 72 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 63 61 75 73 65 73 20 74 68 65 20 4c 44 41 50 | ver..This.option.causes.the.LDAP |
88de0 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 62 65 20 6b 65 70 74 20 6f 70 65 6e 2c 20 61 6c 6c | .connection.to.be.kept.open,.all |
88e00 | 6f 77 69 6e 67 20 69 74 20 74 6f 20 62 65 20 72 65 75 73 65 64 20 66 6f 72 20 66 75 72 74 68 65 | owing.it.to.be.reused.for.furthe |
88e20 | 72 20 75 73 65 72 20 76 61 6c 69 64 61 74 69 6f 6e 73 2e 00 55 73 65 20 61 20 73 70 65 63 69 66 | r.user.validations..Use.a.specif |
88e40 | 69 63 20 61 64 64 72 65 73 73 2d 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 20 63 68 61 72 61 63 | ic.address-group..Prepend.charac |
88e60 | 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 | ter.``!``.for.inverted.matching. |
88e80 | 63 72 69 74 65 72 69 61 2e 00 55 73 65 20 61 20 73 70 65 63 69 66 69 63 20 64 6f 6d 61 69 6e 2d | criteria..Use.a.specific.domain- |
88ea0 | 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 | group..Prepend.character.``!``.f |
88ec0 | 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 2e 00 55 | or.inverted.matching.criteria..U |
88ee0 | 73 65 20 61 20 73 70 65 63 69 66 69 63 20 6d 61 63 2d 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 | se.a.specific.mac-group..Prepend |
88f00 | 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 | .character.``!``.for.inverted.ma |
88f20 | 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 2e 00 55 73 65 20 61 20 73 70 65 63 69 66 69 63 20 | tching.criteria..Use.a.specific. |
88f40 | 6e 65 74 77 6f 72 6b 2d 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 20 63 68 61 72 61 63 74 65 72 | network-group..Prepend.character |
88f60 | 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 | .``!``.for.inverted.matching.cri |
88f80 | 74 65 72 69 61 2e 00 55 73 65 20 61 20 73 70 65 63 69 66 69 63 20 70 6f 72 74 2d 67 72 6f 75 70 | teria..Use.a.specific.port-group |
88fa0 | 2e 20 50 72 65 70 65 6e 64 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e | ..Prepend.character.``!``.for.in |
88fc0 | 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 2e 00 55 73 65 20 61 63 | verted.matching.criteria..Use.ac |
88fe0 | 74 69 76 65 2d 61 63 74 69 76 65 20 48 41 20 6d 6f 64 65 2e 00 55 73 65 20 61 64 64 72 65 73 73 | tive-active.HA.mode..Use.address |
89000 | 20 60 6d 61 73 71 75 65 72 61 64 65 60 20 28 74 68 65 20 69 6e 74 65 72 66 61 63 65 73 20 70 72 | .`masquerade`.(the.interfaces.pr |
89020 | 69 6d 61 72 79 20 61 64 64 72 65 73 73 29 20 6f 6e 20 72 75 6c 65 20 33 30 00 55 73 65 20 61 6e | imary.address).on.rule.30.Use.an |
89040 | 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 67 65 6e 65 72 61 74 65 64 20 73 65 6c 66 2d 73 69 | .automatically.generated.self-si |
89060 | 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 00 55 73 65 20 61 6e 79 20 6c 6f 63 61 6c 20 61 | gned.certificate.Use.any.local.a |
89080 | 64 64 72 65 73 73 2c 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 6e 79 20 69 6e 74 65 72 66 | ddress,.configured.on.any.interf |
890a0 | 61 63 65 20 69 66 20 74 68 69 73 20 69 73 20 6e 6f 74 20 73 65 74 2e 00 55 73 65 20 61 75 74 68 | ace.if.this.is.not.set..Use.auth |
890c0 | 20 6b 65 79 20 66 69 6c 65 20 61 74 20 60 60 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2f 6d 79 2e 6b | .key.file.at.``/config/auth/my.k |
890e0 | 65 79 60 60 00 55 73 65 20 63 65 72 74 69 66 69 63 61 74 65 20 66 72 6f 6d 20 50 4b 49 20 73 75 | ey``.Use.certificate.from.PKI.su |
89100 | 62 73 79 73 74 65 6d 00 55 73 65 20 63 6f 6e 66 69 67 75 72 65 64 20 60 3c 75 72 6c 3e 60 20 74 | bsystem.Use.configured.`<url>`.t |
89120 | 6f 20 64 65 74 65 72 6d 69 6e 65 20 79 6f 75 72 20 49 50 20 61 64 64 72 65 73 73 2e 20 64 64 63 | o.determine.your.IP.address..ddc |
89140 | 6c 69 65 6e 74 5f 20 77 69 6c 6c 20 6c 6f 61 64 20 60 3c 75 72 6c 3e 60 20 61 6e 64 20 74 72 69 | lient_.will.load.`<url>`.and.tri |
89160 | 65 73 20 74 6f 20 65 78 74 72 61 63 74 20 79 6f 75 72 20 49 50 20 61 64 64 72 65 73 73 20 66 72 | es.to.extract.your.IP.address.fr |
89180 | 6f 6d 20 74 68 65 20 72 65 73 70 6f 6e 73 65 2e 00 55 73 65 20 64 65 53 45 43 20 28 64 65 64 79 | om.the.response..Use.deSEC.(dedy |
891a0 | 6e 2e 69 6f 29 20 61 73 20 79 6f 75 72 20 70 72 65 66 65 72 72 65 64 20 70 72 6f 76 69 64 65 72 | n.io).as.your.preferred.provider |
891c0 | 3a 00 55 73 65 20 69 6e 76 65 72 73 65 2d 6d 61 74 63 68 20 74 6f 20 6d 61 74 63 68 20 61 6e 79 | :.Use.inverse-match.to.match.any |
891e0 | 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 67 69 76 65 6e 20 63 6f 75 6e 74 72 79 2d 63 | thing.except.the.given.country-c |
89200 | 6f 64 65 73 2e 00 55 73 65 20 6c 6f 63 61 6c 20 73 6f 63 6b 65 74 20 66 6f 72 20 41 50 49 00 55 | odes..Use.local.socket.for.API.U |
89220 | 73 65 20 6c 6f 63 61 6c 20 75 73 65 72 20 60 66 6f 6f 60 20 77 69 74 68 20 70 61 73 73 77 6f 72 | se.local.user.`foo`.with.passwor |
89240 | 64 20 60 62 61 72 60 00 55 73 65 20 74 61 62 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 74 6f 20 67 65 | d.`bar`.Use.tab.completion.to.ge |
89260 | 74 20 61 20 6c 69 73 74 20 6f 66 20 63 61 74 65 67 6f 72 69 65 73 2e 00 55 73 65 20 74 68 65 20 | t.a.list.of.categories..Use.the. |
89280 | 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 | address.of.the.specified.interfa |
892a0 | 63 65 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 6d 61 63 68 69 6e 65 20 61 73 20 74 68 65 20 73 | ce.on.the.local.machine.as.the.s |
892c0 | 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e | ource.address.of.the.connection. |
892e0 | 00 55 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 70 6f 6c 6f 67 79 20 74 6f 20 62 | .Use.the.following.topology.to.b |
89300 | 75 69 6c 64 20 61 20 6e 61 74 36 36 20 62 61 73 65 64 20 69 73 6f 6c 61 74 65 64 20 6e 65 74 77 | uild.a.nat66.based.isolated.netw |
89320 | 6f 72 6b 20 62 65 74 77 65 65 6e 20 69 6e 74 65 72 6e 61 6c 20 61 6e 64 20 65 78 74 65 72 6e 61 | ork.between.internal.and.externa |
89340 | 6c 20 6e 65 74 77 6f 72 6b 73 20 28 64 79 6e 61 6d 69 63 20 70 72 65 66 69 78 20 69 73 20 6e 6f | l.networks.(dynamic.prefix.is.no |
89360 | 74 20 73 75 70 70 6f 72 74 65 64 29 3a 00 55 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 | t.supported):.Use.the.following. |
89380 | 74 6f 70 6f 6c 6f 67 79 20 74 6f 20 74 72 61 6e 73 6c 61 74 65 20 69 6e 74 65 72 6e 61 6c 20 75 | topology.to.translate.internal.u |
893a0 | 73 65 72 20 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 65 73 20 28 60 60 66 63 3a 3a 2f 37 60 60 29 | ser.local.addresses.(``fc::/7``) |
893c0 | 20 74 6f 20 44 48 43 50 76 36 2d 50 44 20 70 72 6f 76 69 64 65 64 20 70 72 65 66 69 78 65 73 20 | .to.DHCPv6-PD.provided.prefixes. |
893e0 | 66 72 6f 6d 20 61 6e 20 49 53 50 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 20 56 79 4f 53 20 | from.an.ISP.connected.to.a.VyOS. |
89400 | 48 41 20 70 61 69 72 2e 00 55 73 65 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 | HA.pair..Use.the.specified.addre |
89420 | 73 73 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 6d 61 63 68 69 6e 65 20 61 73 20 74 68 65 20 73 | ss.on.the.local.machine.as.the.s |
89440 | 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e | ource.address.of.the.connection. |
89460 | 20 4f 6e 6c 79 20 75 73 65 66 75 6c 20 6f 6e 20 73 79 73 74 65 6d 73 20 77 69 74 68 20 6d 6f 72 | .Only.useful.on.systems.with.mor |
89480 | 65 20 74 68 61 6e 20 6f 6e 65 20 61 64 64 72 65 73 73 2e 00 55 73 65 20 74 68 65 73 65 20 63 6f | e.than.one.address..Use.these.co |
894a0 | 6d 6d 61 6e 64 73 20 69 66 20 79 6f 75 20 77 6f 75 6c 64 20 6c 69 6b 65 20 74 6f 20 73 65 74 20 | mmands.if.you.would.like.to.set. |
894c0 | 74 68 65 20 64 69 73 63 6f 76 65 72 79 20 68 65 6c 6c 6f 20 61 6e 64 20 68 6f 6c 64 20 74 69 6d | the.discovery.hello.and.hold.tim |
894e0 | 65 20 70 61 72 61 6d 65 74 65 72 73 20 66 6f 72 20 74 68 65 20 74 61 72 67 65 74 65 64 20 4c 44 | e.parameters.for.the.targeted.LD |
89500 | 50 20 6e 65 69 67 68 62 6f 72 73 2e 00 55 73 65 20 74 68 65 73 65 20 63 6f 6d 6d 61 6e 64 73 20 | P.neighbors..Use.these.commands. |
89520 | 69 66 20 79 6f 75 20 77 6f 75 6c 64 20 6c 69 6b 65 20 74 6f 20 73 65 74 20 74 68 65 20 64 69 73 | if.you.would.like.to.set.the.dis |
89540 | 63 6f 76 65 72 79 20 68 65 6c 6c 6f 20 61 6e 64 20 68 6f 6c 64 20 74 69 6d 65 20 70 61 72 61 6d | covery.hello.and.hold.time.param |
89560 | 65 74 65 72 73 2e 00 55 73 65 20 74 68 65 73 65 20 63 6f 6d 6d 61 6e 64 73 20 74 6f 20 63 6f 6e | eters..Use.these.commands.to.con |
89580 | 74 72 6f 6c 20 74 68 65 20 65 78 70 6f 72 74 69 6e 67 20 6f 66 20 66 6f 72 77 61 72 64 69 6e 67 | trol.the.exporting.of.forwarding |
895a0 | 20 65 71 75 69 76 61 6c 65 6e 63 65 20 63 6c 61 73 73 65 73 20 28 46 45 43 73 29 20 66 6f 72 20 | .equivalence.classes.(FECs).for. |
895c0 | 4c 44 50 20 74 6f 20 6e 65 69 67 68 62 6f 72 73 2e 20 54 68 69 73 20 77 6f 75 6c 64 20 62 65 20 | LDP.to.neighbors..This.would.be. |
895e0 | 75 73 65 66 75 6c 20 66 6f 72 20 65 78 61 6d 70 6c 65 20 6f 6e 20 6f 6e 6c 79 20 61 6e 6e 6f 75 | useful.for.example.on.only.annou |
89600 | 6e 63 69 6e 67 20 74 68 65 20 6c 61 62 65 6c 65 64 20 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 | ncing.the.labeled.routes.that.ar |
89620 | 65 20 6e 65 65 64 65 64 20 61 6e 64 20 6e 6f 74 20 6f 6e 65 73 20 74 68 61 74 20 61 72 65 20 6e | e.needed.and.not.ones.that.are.n |
89640 | 6f 74 20 6e 65 65 64 65 64 2c 20 73 75 63 68 20 61 73 20 61 6e 6e 6f 75 6e 63 69 6e 67 20 6c 6f | ot.needed,.such.as.announcing.lo |
89660 | 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 6e 6f 20 6f 74 68 65 72 73 2e | opback.interfaces.and.no.others. |
89680 | 00 55 73 65 20 74 68 65 73 65 20 63 6f 6d 6d 61 6e 64 73 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 | .Use.these.commands.to.control.t |
896a0 | 68 65 20 69 6d 70 6f 72 74 69 6e 67 20 6f 66 20 66 6f 72 77 61 72 64 69 6e 67 20 65 71 75 69 76 | he.importing.of.forwarding.equiv |
896c0 | 61 6c 65 6e 63 65 20 63 6c 61 73 73 65 73 20 28 46 45 43 73 29 20 66 6f 72 20 4c 44 50 20 66 72 | alence.classes.(FECs).for.LDP.fr |
896e0 | 6f 6d 20 6e 65 69 67 68 62 6f 72 73 2e 20 54 68 69 73 20 77 6f 75 6c 64 20 62 65 20 75 73 65 66 | om.neighbors..This.would.be.usef |
89700 | 75 6c 20 66 6f 72 20 65 78 61 6d 70 6c 65 20 6f 6e 20 6f 6e 6c 79 20 61 63 63 65 70 74 69 6e 67 | ul.for.example.on.only.accepting |
89720 | 20 74 68 65 20 6c 61 62 65 6c 65 64 20 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 6e 65 65 | .the.labeled.routes.that.are.nee |
89740 | 64 65 64 20 61 6e 64 20 6e 6f 74 20 6f 6e 65 73 20 74 68 61 74 20 61 72 65 20 6e 6f 74 20 6e 65 | ded.and.not.ones.that.are.not.ne |
89760 | 65 64 65 64 2c 20 73 75 63 68 20 61 73 20 61 63 63 65 70 74 69 6e 67 20 6c 6f 6f 70 62 61 63 6b | eded,.such.as.accepting.loopback |
89780 | 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 72 65 6a 65 63 74 69 6e 67 20 61 6c 6c 20 6f 74 | .interfaces.and.rejecting.all.ot |
897a0 | 68 65 72 73 2e 00 55 73 65 20 74 68 69 73 20 50 49 4d 20 63 6f 6d 6d 61 6e 64 20 69 6e 20 74 68 | hers..Use.this.PIM.command.in.th |
897c0 | 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 73 65 74 20 74 68 65 20 | e.selected.interface.to.set.the. |
897e0 | 70 72 69 6f 72 69 74 79 20 28 31 2d 34 32 39 34 39 36 37 32 39 35 29 20 79 6f 75 20 77 61 6e 74 | priority.(1-4294967295).you.want |
89800 | 20 74 6f 20 69 6e 66 6c 75 65 6e 63 65 20 69 6e 20 74 68 65 20 65 6c 65 63 74 69 6f 6e 20 6f 66 | .to.influence.in.the.election.of |
89820 | 20 61 20 6e 6f 64 65 20 74 6f 20 62 65 63 6f 6d 65 20 74 68 65 20 44 65 73 69 67 6e 61 74 65 64 | .a.node.to.become.the.Designated |
89840 | 20 52 6f 75 74 65 72 20 66 6f 72 20 61 20 4c 41 4e 20 73 65 67 6d 65 6e 74 2e 20 54 68 65 20 64 | .Router.for.a.LAN.segment..The.d |
89860 | 65 66 61 75 6c 74 20 70 72 69 6f 72 69 74 79 20 69 73 20 31 2c 20 73 65 74 20 61 20 20 68 69 67 | efault.priority.is.1,.set.a..hig |
89880 | 68 65 72 20 76 61 6c 75 65 20 74 6f 20 67 69 76 65 20 74 68 65 20 72 6f 75 74 65 72 20 6d 6f 72 | her.value.to.give.the.router.mor |
898a0 | 65 20 70 72 65 66 65 72 65 6e 63 65 20 69 6e 20 74 68 65 20 44 52 20 65 6c 65 63 74 69 6f 6e 20 | e.preference.in.the.DR.election. |
898c0 | 70 72 6f 63 65 73 73 2e 00 55 73 65 20 74 68 69 73 20 50 49 4d 20 63 6f 6d 6d 61 6e 64 20 74 6f | process..Use.this.PIM.command.to |
898e0 | 20 6d 6f 64 69 66 79 20 74 68 65 20 74 69 6d 65 20 6f 75 74 20 76 61 6c 75 65 20 28 33 31 2d 36 | .modify.the.time.out.value.(31-6 |
89900 | 30 30 30 30 20 73 65 63 6f 6e 64 73 29 20 66 6f 72 20 61 6e 20 60 28 53 2c 47 29 20 3c 68 74 74 | 0000.seconds).for.an.`(S,G).<htt |
89920 | 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 37 37 36 31 | ps://tools.ietf.org/html/rfc7761 |
89940 | 23 73 65 63 74 69 6f 6e 2d 34 2e 31 3e 60 5f 20 66 6c 6f 77 2e 20 33 31 20 73 65 63 6f 6e 64 73 | #section-4.1>`_.flow..31.seconds |
89960 | 20 69 73 20 63 68 6f 73 65 6e 20 66 6f 72 20 61 20 6c 6f 77 65 72 20 62 6f 75 6e 64 20 61 73 20 | .is.chosen.for.a.lower.bound.as. |
89980 | 73 6f 6d 65 20 68 61 72 64 77 61 72 65 20 70 6c 61 74 66 6f 72 6d 73 20 63 61 6e 6e 6f 74 20 73 | some.hardware.platforms.cannot.s |
899a0 | 65 65 20 64 61 74 61 20 66 6c 6f 77 69 6e 67 20 69 6e 20 62 65 74 74 65 72 20 74 68 61 6e 20 33 | ee.data.flowing.in.better.than.3 |
899c0 | 30 20 73 65 63 6f 6e 64 73 20 63 68 75 6e 6b 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e | 0.seconds.chunks..Use.this.coman |
899e0 | 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 | d.to.set.the.IPv6.address.pool.f |
89a00 | 72 6f 6d 20 77 68 69 63 68 20 61 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 | rom.which.a.PPPoE.client.will.ge |
89a20 | 74 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 | t.an.IPv6.prefix.of.your.defined |
89a40 | 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 | .length.(mask).to.terminate.the. |
89a60 | 50 50 50 6f 45 20 65 6e 64 70 6f 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 69 64 65 2e 20 54 68 | PPPoE.endpoint.at.their.side..Th |
89a80 | 65 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 34 38 | e.mask.length.can.be.set.from.48 |
89aa0 | 20 74 6f 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 | .to.128.bit.long,.the.default.va |
89ac0 | 6c 75 65 20 69 73 20 36 34 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e 64 20 74 6f 20 73 65 | lue.is.64..Use.this.comand.to.se |
89ae0 | 74 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 | t.the.IPv6.address.pool.from.whi |
89b00 | 63 68 20 61 6e 20 49 50 6f 45 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 74 20 61 6e 20 49 50 | ch.an.IPoE.client.will.get.an.IP |
89b20 | 76 36 20 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 | v6.prefix.of.your.defined.length |
89b40 | 20 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 49 50 6f 45 20 65 6e | .(mask).to.terminate.the.IPoE.en |
89b60 | 64 70 6f 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 69 64 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c | dpoint.at.their.side..The.mask.l |
89b80 | 65 6e 67 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 | ength.can.be.set.from.48.to.128. |
89ba0 | 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 | bit.long,.the.default.value.is.6 |
89bc0 | 34 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 | 4..Use.this.comand.to.set.the.IP |
89be0 | 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 63 68 20 61 6e 20 50 50 | v6.address.pool.from.which.an.PP |
89c00 | 50 6f 45 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 74 20 61 6e 20 49 50 76 36 20 70 72 65 66 | PoE.client.will.get.an.IPv6.pref |
89c20 | 69 78 20 6f 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b 29 | ix.of.your.defined.length.(mask) |
89c40 | 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 50 50 50 6f 45 20 65 6e 64 70 6f 69 6e 74 | .to.terminate.the.PPPoE.endpoint |
89c60 | 20 61 74 20 74 68 65 69 72 20 73 69 64 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 | .at.their.side..The.mask.length. |
89c80 | 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 62 69 74 20 6c 6f | can.be.set.from.48.to.128.bit.lo |
89ca0 | 6e 67 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 34 2e 00 55 73 65 | ng,.the.default.value.is.64..Use |
89cc0 | 20 74 68 69 73 20 63 6f 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 36 20 61 64 64 | .this.comand.to.set.the.IPv6.add |
89ce0 | 72 65 73 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 63 68 20 61 6e 20 50 50 54 50 20 63 6c 69 | ress.pool.from.which.an.PPTP.cli |
89d00 | 65 6e 74 20 77 69 6c 6c 20 67 65 74 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 6f 66 20 79 | ent.will.get.an.IPv6.prefix.of.y |
89d20 | 6f 75 72 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 | our.defined.length.(mask).to.ter |
89d40 | 6d 69 6e 61 74 65 20 74 68 65 20 50 50 54 50 20 65 6e 64 70 6f 69 6e 74 20 61 74 20 74 68 65 69 | minate.the.PPTP.endpoint.at.thei |
89d60 | 72 20 73 69 64 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 6e 20 62 65 20 73 | r.side..The.mask.length.can.be.s |
89d80 | 65 74 20 66 72 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 | et.from.48.to.128.bit.long,.the. |
89da0 | 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 34 2e 00 55 73 65 20 74 68 69 73 20 63 6f | default.value.is.64..Use.this.co |
89dc0 | 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f | mand.to.set.the.IPv6.address.poo |
89de0 | 6c 20 66 72 6f 6d 20 77 68 69 63 68 20 61 6e 20 53 53 54 50 20 63 6c 69 65 6e 74 20 77 69 6c 6c | l.from.which.an.SSTP.client.will |
89e00 | 20 67 65 74 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 20 64 65 66 69 | .get.an.IPv6.prefix.of.your.defi |
89e20 | 6e 65 64 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 | ned.length.(mask).to.terminate.t |
89e40 | 68 65 20 53 53 54 50 20 65 6e 64 70 6f 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 69 64 65 2e 20 | he.SSTP.endpoint.at.their.side.. |
89e60 | 54 68 65 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 | The.mask.length.can.be.set.from. |
89e80 | 34 38 20 74 6f 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 | 48.to.128.bit.long,.the.default. |
89ea0 | 76 61 6c 75 65 20 69 73 20 36 34 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e 64 20 74 6f 20 | value.is.64..Use.this.comand.to. |
89ec0 | 73 65 74 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 | set.the.IPv6.address.pool.from.w |
89ee0 | 68 69 63 68 20 61 6e 20 6c 32 74 70 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 74 20 61 6e 20 | hich.an.l2tp.client.will.get.an. |
89f00 | 49 50 76 36 20 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 | IPv6.prefix.of.your.defined.leng |
89f20 | 74 68 20 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 6c 32 74 70 20 | th.(mask).to.terminate.the.l2tp. |
89f40 | 65 6e 64 70 6f 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 69 64 65 2e 20 54 68 65 20 6d 61 73 6b | endpoint.at.their.side..The.mask |
89f60 | 20 6c 65 6e 67 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 34 38 20 74 6f 20 31 32 | .length.can.be.set.from.48.to.12 |
89f80 | 38 20 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 | 8.bit.long,.the.default.value.is |
89fa0 | 20 36 34 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 20 65 76 65 72 79 20 | .64..Use.this.command.for.every. |
89fc0 | 70 6f 6f 6c 20 6f 66 20 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 79 6f 75 20 | pool.of.client.IP.addresses.you. |
89fe0 | 77 61 6e 74 20 74 6f 20 64 65 66 69 6e 65 2e 20 54 68 65 20 61 64 64 72 65 73 73 65 73 20 6f 66 | want.to.define..The.addresses.of |
8a000 | 20 74 68 69 73 20 70 6f 6f 6c 20 77 69 6c 6c 20 62 65 20 67 69 76 65 6e 20 74 6f 20 50 50 50 6f | .this.pool.will.be.given.to.PPPo |
8a020 | 45 20 63 6c 69 65 6e 74 73 2e 20 59 6f 75 20 6d 75 73 74 20 75 73 65 20 43 49 44 52 20 6e 6f 74 | E.clients..You.must.use.CIDR.not |
8a040 | 61 74 69 6f 6e 20 61 6e 64 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 | ation.and.it.must.be.within.a./2 |
8a060 | 34 20 73 75 62 6e 65 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 20 65 | 4.subnet..Use.this.command.for.e |
8a080 | 76 65 72 79 20 70 6f 6f 6c 20 6f 66 20 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 65 73 | very.pool.of.client.IP.addresses |
8a0a0 | 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 65 66 69 6e 65 2e 20 54 68 65 20 61 64 64 72 65 73 73 | .you.want.to.define..The.address |
8a0c0 | 65 73 20 6f 66 20 74 68 69 73 20 70 6f 6f 6c 20 77 69 6c 6c 20 62 65 20 67 69 76 65 6e 20 74 6f | es.of.this.pool.will.be.given.to |
8a0e0 | 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 59 6f 75 20 6d 75 73 74 20 75 73 65 20 43 49 44 | .PPPoE.clients..You.must.use.CID |
8a100 | 52 20 6e 6f 74 61 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 66 20 | R.notation..Use.this.command.if. |
8a120 | 79 6f 75 20 77 6f 75 6c 64 20 6c 69 6b 65 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 72 20 74 6f | you.would.like.for.the.router.to |
8a140 | 20 61 64 76 65 72 74 69 73 65 20 46 45 43 73 20 77 69 74 68 20 61 20 6c 61 62 65 6c 20 6f 66 20 | .advertise.FECs.with.a.label.of. |
8a160 | 30 20 66 6f 72 20 65 78 70 6c 69 63 69 74 20 6e 75 6c 6c 20 6f 70 65 72 61 74 69 6f 6e 73 2e 00 | 0.for.explicit.null.operations.. |
8a180 | 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 66 20 79 6f 75 20 77 6f 75 6c 64 20 6c 69 | Use.this.command.if.you.would.li |
8a1a0 | 6b 65 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 65 20 6c 6f 63 61 6c 20 46 45 43 20 61 6c 6c 6f | ke.to.control.the.local.FEC.allo |
8a1c0 | 63 61 74 69 6f 6e 73 20 66 6f 72 20 4c 44 50 2e 20 41 20 67 6f 6f 64 20 65 78 61 6d 70 6c 65 20 | cations.for.LDP..A.good.example. |
8a1e0 | 77 6f 75 6c 64 20 62 65 20 66 6f 72 20 79 6f 75 72 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 74 | would.be.for.your.local.router.t |
8a200 | 6f 20 6e 6f 74 20 61 6c 6c 6f 63 61 74 65 20 61 20 6c 61 62 65 6c 20 66 6f 72 20 65 76 65 72 79 | o.not.allocate.a.label.for.every |
8a220 | 74 68 69 6e 67 2e 20 4a 75 73 74 20 61 20 6c 61 62 65 6c 20 66 6f 72 20 77 68 61 74 20 69 74 27 | thing..Just.a.label.for.what.it' |
8a240 | 73 20 75 73 65 66 75 6c 2e 20 41 20 67 6f 6f 64 20 65 78 61 6d 70 6c 65 20 77 6f 75 6c 64 20 62 | s.useful..A.good.example.would.b |
8a260 | 65 20 6a 75 73 74 20 61 20 6c 6f 6f 70 62 61 63 6b 20 6c 61 62 65 6c 2e 00 55 73 65 20 74 68 69 | e.just.a.loopback.label..Use.thi |
8a280 | 73 20 63 6f 6d 6d 61 6e 64 20 69 66 20 79 6f 75 20 77 6f 75 6c 64 20 6c 69 6b 65 20 74 6f 20 73 | s.command.if.you.would.like.to.s |
8a2a0 | 65 74 20 74 68 65 20 54 43 50 20 73 65 73 73 69 6f 6e 20 68 6f 6c 64 20 74 69 6d 65 20 69 6e 74 | et.the.TCP.session.hold.time.int |
8a2c0 | 65 72 76 61 6c 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 61 6c 6c 6f | ervals..Use.this.command.to.allo |
8a2e0 | 77 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6a 6f 69 6e | w.the.selected.interface.to.join |
8a300 | 20 61 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 64 65 66 69 6e 69 6e 67 20 74 68 65 20 | .a.multicast.group.defining.the. |
8a320 | 6d 75 6c 74 69 63 61 73 74 20 61 64 64 72 65 73 73 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 6a 6f | multicast.address.you.want.to.jo |
8a340 | 69 6e 20 61 6e 64 20 74 68 65 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 6f | in.and.the.source.IP.address.too |
8a360 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 20 | ..Use.this.command.to.allow.the. |
8a380 | 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6a 6f 69 6e 20 61 20 6d 75 6c | selected.interface.to.join.a.mul |
8a3a0 | 74 69 63 61 73 74 20 67 72 6f 75 70 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | ticast.group..Use.this.command.t |
8a3c0 | 6f 20 61 6c 6c 6f 77 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 | o.allow.the.selected.interface.t |
8a3e0 | 6f 20 6a 6f 69 6e 20 61 20 73 6f 75 72 63 65 2d 73 70 65 63 69 66 69 63 20 6d 75 6c 74 69 63 61 | o.join.a.source-specific.multica |
8a400 | 73 74 20 67 72 6f 75 70 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 68 | st.group..Use.this.command.to.ch |
8a420 | 65 63 6b 20 74 68 65 20 74 75 6e 6e 65 6c 20 73 74 61 74 75 73 20 66 6f 72 20 4f 70 65 6e 56 50 | eck.the.tunnel.status.for.OpenVP |
8a440 | 4e 20 63 6c 69 65 6e 74 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f | N.client.interfaces..Use.this.co |
8a460 | 6d 6d 61 6e 64 20 74 6f 20 63 68 65 63 6b 20 74 68 65 20 74 75 6e 6e 65 6c 20 73 74 61 74 75 73 | mmand.to.check.the.tunnel.status |
8a480 | 20 66 6f 72 20 4f 70 65 6e 56 50 4e 20 73 65 72 76 65 72 20 69 6e 74 65 72 66 61 63 65 73 2e 00 | .for.OpenVPN.server.interfaces.. |
8a4a0 | 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 68 65 63 6b 20 74 68 65 20 74 75 | Use.this.command.to.check.the.tu |
8a4c0 | 6e 6e 65 6c 20 73 74 61 74 75 73 20 66 6f 72 20 4f 70 65 6e 56 50 4e 20 73 69 74 65 2d 74 6f 2d | nnel.status.for.OpenVPN.site-to- |
8a4e0 | 73 69 74 65 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | site.interfaces..Use.this.comman |
8a500 | 64 20 74 6f 20 63 6c 65 61 72 20 42 6f 72 64 65 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 | d.to.clear.Border.Gateway.Protoc |
8a520 | 6f 6c 20 73 74 61 74 69 73 74 69 63 73 20 6f 72 20 73 74 61 74 75 73 2e 00 55 73 65 20 74 68 69 | ol.statistics.or.status..Use.thi |
8a540 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 48 43 50 76 36 20 50 72 | s.command.to.configure.DHCPv6.Pr |
8a560 | 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 52 46 43 33 36 33 33 29 20 6f 6e 20 49 50 6f | efix.Delegation.(RFC3633).on.IPo |
8a580 | 45 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 65 74 20 79 6f 75 72 20 49 50 76 | E..You.will.have.to.set.your.IPv |
8a5a0 | 36 20 70 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c | 6.pool.and.the.length.of.the.del |
8a5c0 | 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 46 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 | egation.prefix..From.the.defined |
8a5e0 | 20 49 50 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e 67 20 6f | .IPv6.pool.you.will.be.handing.o |
8a600 | 75 74 20 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 | ut.networks.of.the.defined.lengt |
8a620 | 68 20 28 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 65 66 69 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 | h.(delegation-prefix)..The.lengt |
8a640 | 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 20 63 61 6e 20 62 | h.of.the.delegation.prefix.can.b |
8a660 | 65 20 73 65 74 20 66 72 6f 6d 20 33 32 20 74 6f 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 | e.set.from.32.to.64.bit.long..Us |
8a680 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 48 43 50 | e.this.command.to.configure.DHCP |
8a6a0 | 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 52 46 43 33 36 33 33 29 20 6f | v6.Prefix.Delegation.(RFC3633).o |
8a6c0 | 6e 20 50 50 50 6f 45 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 65 74 20 79 6f | n.PPPoE..You.will.have.to.set.yo |
8a6e0 | 75 72 20 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 | ur.IPv6.pool.and.the.length.of.t |
8a700 | 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 46 72 6f 6d 20 74 68 65 20 64 | he.delegation.prefix..From.the.d |
8a720 | 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 68 61 6e | efined.IPv6.pool.you.will.be.han |
8a740 | 64 69 6e 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 | ding.out.networks.of.the.defined |
8a760 | 20 6c 65 6e 67 74 68 20 28 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 65 66 69 78 29 2e 20 54 68 65 | .length.(delegation-prefix)..The |
8a780 | 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 | .length.of.the.delegation.prefix |
8a7a0 | 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 33 32 20 74 6f 20 36 34 20 62 69 74 20 6c 6f | .can.be.set.from.32.to.64.bit.lo |
8a7c0 | 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 | ng..Use.this.command.to.configur |
8a7e0 | 65 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 52 46 43 33 | e.DHCPv6.Prefix.Delegation.(RFC3 |
8a800 | 36 33 33 29 20 6f 6e 20 50 50 54 50 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 | 633).on.PPTP..You.will.have.to.s |
8a820 | 65 74 20 79 6f 75 72 20 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c 65 6e 67 74 68 | et.your.IPv6.pool.and.the.length |
8a840 | 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 46 72 6f 6d 20 | .of.the.delegation.prefix..From. |
8a860 | 74 68 65 20 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 69 6c 6c 20 62 | the.defined.IPv6.pool.you.will.b |
8a880 | 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 68 65 20 64 65 | e.handing.out.networks.of.the.de |
8a8a0 | 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 65 66 69 78 29 | fined.length.(delegation-prefix) |
8a8c0 | 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 | ..The.length.of.the.delegation.p |
8a8e0 | 72 65 66 69 78 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 33 32 20 74 6f 20 36 34 20 62 | refix.can.be.set.from.32.to.64.b |
8a900 | 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e | it.long..Use.this.command.to.con |
8a920 | 66 69 67 75 72 65 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 | figure.DHCPv6.Prefix.Delegation. |
8a940 | 28 52 46 43 33 36 33 33 29 20 6f 6e 20 53 53 54 50 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 | (RFC3633).on.SSTP..You.will.have |
8a960 | 20 74 6f 20 73 65 74 20 79 6f 75 72 20 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c | .to.set.your.IPv6.pool.and.the.l |
8a980 | 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 | ength.of.the.delegation.prefix.. |
8a9a0 | 46 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 | From.the.defined.IPv6.pool.you.w |
8a9c0 | 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 | ill.be.handing.out.networks.of.t |
8a9e0 | 68 65 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 | he.defined.length.(delegation-pr |
8aa00 | 65 66 69 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 | efix)..The.length.of.the.delegat |
8aa20 | 69 6f 6e 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 33 32 20 74 6f | ion.prefix.can.be.set.from.32.to |
8aa40 | 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | .64.bit.long..Use.this.command.t |
8aa60 | 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 | o.configure.DHCPv6.Prefix.Delega |
8aa80 | 74 69 6f 6e 20 28 52 46 43 33 36 33 33 29 20 6f 6e 20 6c 32 74 70 2e 20 59 6f 75 20 77 69 6c 6c | tion.(RFC3633).on.l2tp..You.will |
8aaa0 | 20 68 61 76 65 20 74 6f 20 73 65 74 20 79 6f 75 72 20 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 20 | .have.to.set.your.IPv6.pool.and. |
8aac0 | 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 | the.length.of.the.delegation.pre |
8aae0 | 66 69 78 2e 20 46 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 | fix..From.the.defined.IPv6.pool. |
8ab00 | 79 6f 75 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b 73 | you.will.be.handing.out.networks |
8ab20 | 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 64 65 6c 65 67 61 74 69 | .of.the.defined.length.(delegati |
8ab40 | 6f 6e 2d 70 72 65 66 69 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 | on-prefix)..The.length.of.the.de |
8ab60 | 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 | legation.prefix.can.be.set.from. |
8ab80 | 33 32 20 74 6f 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | 32.to.64.bit.long..Use.this.comm |
8aba0 | 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 | and.to.configure.DHCPv6.Prefix.D |
8abc0 | 65 6c 65 67 61 74 69 6f 6e 20 28 52 46 43 33 36 33 33 29 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 | elegation.(RFC3633)..You.will.ha |
8abe0 | 76 65 20 74 6f 20 73 65 74 20 79 6f 75 72 20 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 20 74 68 65 | ve.to.set.your.IPv6.pool.and.the |
8ac00 | 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 | .length.of.the.delegation.prefix |
8ac20 | 2e 20 46 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 79 6f 75 | ..From.the.defined.IPv6.pool.you |
8ac40 | 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b 73 20 6f 66 | .will.be.handing.out.networks.of |
8ac60 | 20 74 68 65 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 64 65 6c 65 67 61 74 69 6f 6e 2d | .the.defined.length.(delegation- |
8ac80 | 70 72 65 66 69 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 | prefix)..The.length.of.the.deleg |
8aca0 | 61 74 69 6f 6e 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 33 32 20 | ation.prefix.can.be.set.from.32. |
8acc0 | 74 6f 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | to.64.bit.long..Use.this.command |
8ace0 | 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 79 6e 61 6d 69 63 20 41 75 74 68 6f 72 69 7a 61 74 | .to.configure.Dynamic.Authorizat |
8ad00 | 69 6f 6e 20 45 78 74 65 6e 73 69 6f 6e 73 20 74 6f 20 52 41 44 49 55 53 20 73 6f 20 74 68 61 74 | ion.Extensions.to.RADIUS.so.that |
8ad20 | 20 79 6f 75 20 63 61 6e 20 72 65 6d 6f 74 65 6c 79 20 64 69 73 63 6f 6e 6e 65 63 74 20 73 65 73 | .you.can.remotely.disconnect.ses |
8ad40 | 73 69 6f 6e 73 20 61 6e 64 20 63 68 61 6e 67 65 20 73 6f 6d 65 20 61 75 74 68 65 6e 74 69 63 61 | sions.and.change.some.authentica |
8ad60 | 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | tion.parameters..Use.this.comman |
8ad80 | 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 22 62 6c 61 63 6b 2d 68 6f 6c 65 22 20 72 6f | d.to.configure.a."black-hole".ro |
8ada0 | 75 74 65 20 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 2e 20 41 20 62 6c 61 63 6b 2d 68 6f 6c 65 20 | ute.on.the.router..A.black-hole. |
8adc0 | 72 6f 75 74 65 20 69 73 20 61 20 72 6f 75 74 65 20 66 6f 72 20 77 68 69 63 68 20 74 68 65 20 73 | route.is.a.route.for.which.the.s |
8ade0 | 79 73 74 65 6d 20 73 69 6c 65 6e 74 6c 79 20 64 69 73 63 61 72 64 20 70 61 63 6b 65 74 73 20 74 | ystem.silently.discard.packets.t |
8ae00 | 68 61 74 20 61 72 65 20 6d 61 74 63 68 65 64 2e 20 54 68 69 73 20 70 72 65 76 65 6e 74 73 20 6e | hat.are.matched..This.prevents.n |
8ae20 | 65 74 77 6f 72 6b 73 20 6c 65 61 6b 69 6e 67 20 6f 75 74 20 70 75 62 6c 69 63 20 69 6e 74 65 72 | etworks.leaking.out.public.inter |
8ae40 | 66 61 63 65 73 2c 20 62 75 74 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 70 72 65 76 65 6e 74 20 74 | faces,.but.it.does.not.prevent.t |
8ae60 | 68 65 6d 20 66 72 6f 6d 20 62 65 69 6e 67 20 75 73 65 64 20 61 73 20 61 20 6d 6f 72 65 20 73 70 | hem.from.being.used.as.a.more.sp |
8ae80 | 65 63 69 66 69 63 20 72 6f 75 74 65 20 69 6e 73 69 64 65 20 79 6f 75 72 20 6e 65 74 77 6f 72 6b | ecific.route.inside.your.network |
8aea0 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 | ..Use.this.command.to.configure. |
8aec0 | 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 20 64 65 66 69 6e 69 | a.Network.Emulator.policy.defini |
8aee0 | 6e 67 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 66 69 78 65 64 20 61 6d 6f 75 6e 74 | ng.its.name.and.the.fixed.amount |
8af00 | 20 6f 66 20 74 69 6d 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 64 64 20 74 6f 20 61 6c 6c 20 | .of.time.you.want.to.add.to.all. |
8af20 | 70 61 63 6b 65 74 20 67 6f 69 6e 67 20 6f 75 74 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 | packet.going.out.of.the.interfac |
8af40 | 65 2e 20 54 68 65 20 6c 61 74 65 6e 63 79 20 77 69 6c 6c 20 62 65 20 61 64 64 65 64 20 74 68 72 | e..The.latency.will.be.added.thr |
8af60 | 6f 75 67 68 20 74 68 65 20 54 6f 6b 65 6e 20 42 75 63 6b 65 74 20 46 69 6c 74 65 72 20 71 64 69 | ough.the.Token.Bucket.Filter.qdi |
8af80 | 73 63 2e 20 49 74 20 77 69 6c 6c 20 6f 6e 6c 79 20 74 61 6b 65 20 65 66 66 65 63 74 20 69 66 20 | sc..It.will.only.take.effect.if. |
8afa0 | 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 74 73 20 62 61 6e 64 77 69 64 74 | you.have.configured.its.bandwidt |
8afc0 | 68 20 74 6f 6f 2e 20 59 6f 75 20 63 61 6e 20 75 73 65 20 73 65 63 73 2c 20 6d 73 20 61 6e 64 20 | h.too..You.can.use.secs,.ms.and. |
8afe0 | 75 73 2e 20 44 65 66 61 75 6c 74 3a 20 35 30 6d 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | us..Default:.50ms..Use.this.comm |
8b000 | 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 | and.to.configure.a.Priority.Queu |
8b020 | 65 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 73 65 74 20 61 20 63 6c | e.policy,.set.its.name,.set.a.cl |
8b040 | 61 73 73 20 77 69 74 68 20 61 20 70 72 69 6f 72 69 74 79 20 66 72 6f 6d 20 31 20 74 6f 20 37 20 | ass.with.a.priority.from.1.to.7. |
8b060 | 61 6e 64 20 64 65 66 69 6e 65 20 61 20 68 61 72 64 20 6c 69 6d 69 74 20 6f 6e 20 74 68 65 20 72 | and.define.a.hard.limit.on.the.r |
8b080 | 65 61 6c 20 71 75 65 75 65 20 73 69 7a 65 2e 20 57 68 65 6e 20 74 68 69 73 20 6c 69 6d 69 74 20 | eal.queue.size..When.this.limit. |
8b0a0 | 69 73 20 72 65 61 63 68 65 64 2c 20 6e 65 77 20 70 61 63 6b 65 74 73 20 61 72 65 20 64 72 6f 70 | is.reached,.new.packets.are.drop |
8b0c0 | 70 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 | ped..Use.this.command.to.configu |
8b0e0 | 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 20 61 6e 64 20 73 65 | re.a.Random-Detect.policy.and.se |
8b100 | 74 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 65 6e 20 6e 61 6d 65 20 74 68 65 20 49 50 20 50 72 65 | t.its.name,.then.name.the.IP.Pre |
8b120 | 63 65 64 65 6e 63 65 20 66 6f 72 20 74 68 65 20 76 69 72 74 75 61 6c 20 71 75 65 75 65 20 79 6f | cedence.for.the.virtual.queue.yo |
8b140 | 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 64 20 77 68 61 74 20 74 68 65 20 6d | u.are.configuring.and.what.the.m |
8b160 | 61 78 69 6d 75 6d 20 73 69 7a 65 20 6f 66 20 69 74 73 20 71 75 65 75 65 20 77 69 6c 6c 20 62 65 | aximum.size.of.its.queue.will.be |
8b180 | 20 28 66 72 6f 6d 20 31 20 74 6f 20 31 2d 34 32 39 34 39 36 37 32 39 35 20 70 61 63 6b 65 74 73 | .(from.1.to.1-4294967295.packets |
8b1a0 | 29 2e 20 50 61 63 6b 65 74 73 20 61 72 65 20 64 72 6f 70 70 65 64 20 77 68 65 6e 20 74 68 65 20 | )..Packets.are.dropped.when.the. |
8b1c0 | 63 75 72 72 65 6e 74 20 71 75 65 75 65 20 6c 65 6e 67 74 68 20 72 65 61 63 68 65 73 20 74 68 69 | current.queue.length.reaches.thi |
8b1e0 | 73 20 76 61 6c 75 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e | s.value..Use.this.command.to.con |
8b200 | 66 69 67 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 20 61 6e | figure.a.Random-Detect.policy.an |
8b220 | 64 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 65 6e 20 73 74 61 74 65 20 74 68 65 20 49 | d.set.its.name,.then.state.the.I |
8b240 | 50 20 50 72 65 63 65 64 65 6e 63 65 20 66 6f 72 20 74 68 65 20 76 69 72 74 75 61 6c 20 71 75 65 | P.Precedence.for.the.virtual.que |
8b260 | 75 65 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 64 20 77 68 61 74 20 | ue.you.are.configuring.and.what. |
8b280 | 69 74 73 20 6d 61 72 6b 20 28 64 72 6f 70 29 20 70 72 6f 62 61 62 69 6c 69 74 79 20 77 69 6c 6c | its.mark.(drop).probability.will |
8b2a0 | 20 62 65 2e 20 53 65 74 20 74 68 65 20 70 72 6f 62 61 62 69 6c 69 74 79 20 62 79 20 67 69 76 69 | .be..Set.the.probability.by.givi |
8b2c0 | 6e 67 20 74 68 65 20 4e 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 66 72 61 63 74 69 6f 6e 20 31 | ng.the.N.value.of.the.fraction.1 |
8b2e0 | 2f 4e 20 28 64 65 66 61 75 6c 74 3a 20 31 30 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | /N.(default:.10)..Use.this.comma |
8b300 | 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 | nd.to.configure.a.Random-Detect. |
8b320 | 70 6f 6c 69 63 79 20 61 6e 64 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 65 6e 20 73 74 | policy.and.set.its.name,.then.st |
8b340 | 61 74 65 20 74 68 65 20 49 50 20 50 72 65 63 65 64 65 6e 63 65 20 66 6f 72 20 74 68 65 20 76 69 | ate.the.IP.Precedence.for.the.vi |
8b360 | 72 74 75 61 6c 20 71 75 65 75 65 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 | rtual.queue.you.are.configuring. |
8b380 | 61 6e 64 20 77 68 61 74 20 69 74 73 20 6d 61 78 69 6d 75 6d 20 74 68 72 65 73 68 6f 6c 64 20 66 | and.what.its.maximum.threshold.f |
8b3a0 | 6f 72 20 72 61 6e 64 6f 6d 20 64 65 74 65 63 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 28 66 72 6f | or.random.detection.will.be.(fro |
8b3c0 | 6d 20 30 20 74 6f 20 34 30 39 36 20 70 61 63 6b 65 74 73 2c 20 64 65 66 61 75 6c 74 3a 20 31 38 | m.0.to.4096.packets,.default:.18 |
8b3e0 | 29 2e 20 41 74 20 74 68 69 73 20 73 69 7a 65 2c 20 74 68 65 20 6d 61 72 6b 69 6e 67 20 28 64 72 | )..At.this.size,.the.marking.(dr |
8b400 | 6f 70 29 20 70 72 6f 62 61 62 69 6c 69 74 79 20 69 73 20 6d 61 78 69 6d 61 6c 2e 00 55 73 65 20 | op).probability.is.maximal..Use. |
8b420 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 6e 64 | this.command.to.configure.a.Rand |
8b440 | 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 20 61 6e 64 20 73 65 74 20 69 74 73 20 6e 61 6d | om-Detect.policy.and.set.its.nam |
8b460 | 65 2c 20 74 68 65 6e 20 73 74 61 74 65 20 74 68 65 20 49 50 20 50 72 65 63 65 64 65 6e 63 65 20 | e,.then.state.the.IP.Precedence. |
8b480 | 66 6f 72 20 74 68 65 20 76 69 72 74 75 61 6c 20 71 75 65 75 65 20 79 6f 75 20 61 72 65 20 63 6f | for.the.virtual.queue.you.are.co |
8b4a0 | 6e 66 69 67 75 72 69 6e 67 20 61 6e 64 20 77 68 61 74 20 69 74 73 20 6d 69 6e 69 6d 75 6d 20 74 | nfiguring.and.what.its.minimum.t |
8b4c0 | 68 72 65 73 68 6f 6c 64 20 66 6f 72 20 72 61 6e 64 6f 6d 20 64 65 74 65 63 74 69 6f 6e 20 77 69 | hreshold.for.random.detection.wi |
8b4e0 | 6c 6c 20 62 65 20 28 66 72 6f 6d 20 30 20 74 6f 20 34 30 39 36 20 70 61 63 6b 65 74 73 29 2e 20 | ll.be.(from.0.to.4096.packets).. |
8b500 | 20 49 66 20 74 68 69 73 20 76 61 6c 75 65 20 69 73 20 65 78 63 65 65 64 65 64 2c 20 70 61 63 6b | .If.this.value.is.exceeded,.pack |
8b520 | 65 74 73 20 73 74 61 72 74 20 62 65 69 6e 67 20 65 6c 69 67 69 62 6c 65 20 66 6f 72 20 62 65 69 | ets.start.being.eligible.for.bei |
8b540 | 6e 67 20 64 72 6f 70 70 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | ng.dropped..Use.this.command.to. |
8b560 | 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 | configure.a.Random-Detect.policy |
8b580 | 20 61 6e 64 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 65 6e 20 73 74 61 74 65 20 74 68 | .and.set.its.name,.then.state.th |
8b5a0 | 65 20 49 50 20 50 72 65 63 65 64 65 6e 63 65 20 66 6f 72 20 74 68 65 20 76 69 72 74 75 61 6c 20 | e.IP.Precedence.for.the.virtual. |
8b5c0 | 71 75 65 75 65 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 64 20 77 68 | queue.you.are.configuring.and.wh |
8b5e0 | 61 74 20 74 68 65 20 73 69 7a 65 20 6f 66 20 69 74 73 20 61 76 65 72 61 67 65 2d 70 61 63 6b 65 | at.the.size.of.its.average-packe |
8b600 | 74 20 73 68 6f 75 6c 64 20 62 65 20 28 69 6e 20 62 79 74 65 73 2c 20 64 65 66 61 75 6c 74 3a 20 | t.should.be.(in.bytes,.default:. |
8b620 | 31 30 32 34 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 | 1024)..Use.this.command.to.confi |
8b640 | 67 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 2c 20 73 65 74 | gure.a.Random-Detect.policy,.set |
8b660 | 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 73 65 74 20 74 68 65 20 61 76 61 69 6c 61 62 6c 65 20 | .its.name.and.set.the.available. |
8b680 | 62 61 6e 64 77 69 64 74 68 20 66 6f 72 20 74 68 69 73 20 70 6f 6c 69 63 79 2e 20 49 74 20 69 73 | bandwidth.for.this.policy..It.is |
8b6a0 | 20 75 73 65 64 20 66 6f 72 20 63 61 6c 63 75 6c 61 74 69 6e 67 20 74 68 65 20 61 76 65 72 61 67 | .used.for.calculating.the.averag |
8b6c0 | 65 20 71 75 65 75 65 20 73 69 7a 65 20 61 66 74 65 72 20 73 6f 6d 65 20 69 64 6c 65 20 74 69 6d | e.queue.size.after.some.idle.tim |
8b6e0 | 65 2e 20 49 74 20 73 68 6f 75 6c 64 20 62 65 20 73 65 74 20 74 6f 20 74 68 65 20 62 61 6e 64 77 | e..It.should.be.set.to.the.bandw |
8b700 | 69 64 74 68 20 6f 66 20 79 6f 75 72 20 69 6e 74 65 72 66 61 63 65 2e 20 52 61 6e 64 6f 6d 20 44 | idth.of.your.interface..Random.D |
8b720 | 65 74 65 63 74 20 69 73 20 6e 6f 74 20 61 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 2c 20 74 | etect.is.not.a.shaping.policy,.t |
8b740 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 6e 6f 74 20 73 68 61 70 65 2e 00 55 73 65 20 | his.command.will.not.shape..Use. |
8b760 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 74 65 | this.command.to.configure.a.Rate |
8b780 | 2d 43 6f 6e 74 72 6f 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e | -Control.policy,.set.its.name.an |
8b7a0 | 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 61 6d 6f 75 6e 74 20 6f 66 20 74 69 6d 65 20 61 20 70 | d.the.maximum.amount.of.time.a.p |
8b7c0 | 61 63 6b 65 74 20 63 61 6e 20 62 65 20 71 75 65 75 65 64 20 28 64 65 66 61 75 6c 74 3a 20 35 30 | acket.can.be.queued.(default:.50 |
8b7e0 | 20 6d 73 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 | .ms)..Use.this.command.to.config |
8b800 | 75 72 65 20 61 20 52 61 74 65 2d 43 6f 6e 74 72 6f 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 | ure.a.Rate-Control.policy,.set.i |
8b820 | 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 72 61 74 65 20 6c 69 6d 69 74 20 79 6f 75 20 77 | ts.name.and.the.rate.limit.you.w |
8b840 | 61 6e 74 20 74 6f 20 68 61 76 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | ant.to.have..Use.this.command.to |
8b860 | 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 74 65 2d 43 6f 6e 74 72 6f 6c 20 70 6f 6c 69 63 79 | .configure.a.Rate-Control.policy |
8b880 | 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 | ,.set.its.name.and.the.size.of.t |
8b8a0 | 68 65 20 62 75 63 6b 65 74 20 69 6e 20 62 79 74 65 73 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 | he.bucket.in.bytes.which.will.be |
8b8c0 | 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 62 75 72 73 74 2e 00 55 73 65 20 74 68 69 73 20 63 | .available.for.burst..Use.this.c |
8b8e0 | 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 6f 75 6e 64 2d 52 6f 62 69 | ommand.to.configure.a.Round-Robi |
8b900 | 6e 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 73 65 74 20 61 20 63 6c | n.policy,.set.its.name,.set.a.cl |
8b920 | 61 73 73 20 49 44 2c 20 61 6e 64 20 74 68 65 20 71 75 61 6e 74 75 6d 20 66 6f 72 20 74 68 61 74 | ass.ID,.and.the.quantum.for.that |
8b940 | 20 63 6c 61 73 73 2e 20 54 68 65 20 64 65 66 69 63 69 74 20 63 6f 75 6e 74 65 72 20 77 69 6c 6c | .class..The.deficit.counter.will |
8b960 | 20 61 64 64 20 74 68 61 74 20 76 61 6c 75 65 20 65 61 63 68 20 72 6f 75 6e 64 2e 00 55 73 65 20 | .add.that.value.each.round..Use. |
8b980 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 6f 75 6e | this.command.to.configure.a.Roun |
8b9a0 | 64 2d 52 6f 62 69 6e 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 73 65 | d-Robin.policy,.set.its.name,.se |
8b9c0 | 74 20 61 20 63 6c 61 73 73 20 49 44 2c 20 61 6e 64 20 74 68 65 20 71 75 65 75 65 20 73 69 7a 65 | t.a.class.ID,.and.the.queue.size |
8b9e0 | 20 69 6e 20 70 61 63 6b 65 74 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | .in.packets..Use.this.command.to |
8ba00 | 20 63 6f 6e 66 69 67 75 72 65 20 61 20 53 68 61 70 65 72 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 | .configure.a.Shaper.policy,.set. |
8ba20 | 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 62 61 6e 64 77 69 64 | its.name.and.the.maximum.bandwid |
8ba40 | 74 68 20 66 6f 72 20 61 6c 6c 20 63 6f 6d 62 69 6e 65 64 20 74 72 61 66 66 69 63 2e 00 55 73 65 | th.for.all.combined.traffic..Use |
8ba60 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 53 68 61 | .this.command.to.configure.a.Sha |
8ba80 | 70 65 72 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 64 65 66 69 6e 65 | per.policy,.set.its.name,.define |
8baa0 | 20 61 20 63 6c 61 73 73 20 61 6e 64 20 73 65 74 20 74 68 65 20 67 75 61 72 61 6e 74 65 65 64 20 | .a.class.and.set.the.guaranteed. |
8bac0 | 74 72 61 66 66 69 63 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 6c 6c 6f 63 61 74 65 20 74 6f 20 | traffic.you.want.to.allocate.to. |
8bae0 | 74 68 61 74 20 63 6c 61 73 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | that.class..Use.this.command.to. |
8bb00 | 63 6f 6e 66 69 67 75 72 65 20 61 20 53 68 61 70 65 72 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 | configure.a.Shaper.policy,.set.i |
8bb20 | 74 73 20 6e 61 6d 65 2c 20 64 65 66 69 6e 65 20 61 20 63 6c 61 73 73 20 61 6e 64 20 73 65 74 20 | ts.name,.define.a.class.and.set. |
8bb40 | 74 68 65 20 6d 61 78 69 6d 75 6d 20 73 70 65 65 64 20 70 6f 73 73 69 62 6c 65 20 66 6f 72 20 74 | the.maximum.speed.possible.for.t |
8bb60 | 68 69 73 20 63 6c 61 73 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 63 65 69 6c 69 6e 67 20 76 | his.class..The.default.ceiling.v |
8bb80 | 61 6c 75 65 20 69 73 20 74 68 65 20 62 61 6e 64 77 69 64 74 68 20 76 61 6c 75 65 2e 00 55 73 65 | alue.is.the.bandwidth.value..Use |
8bba0 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 53 68 61 | .this.command.to.configure.a.Sha |
8bbc0 | 70 65 72 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 64 65 66 69 6e 65 | per.policy,.set.its.name,.define |
8bbe0 | 20 61 20 63 6c 61 73 73 20 61 6e 64 20 73 65 74 20 74 68 65 20 70 72 69 6f 72 69 74 79 20 66 6f | .a.class.and.set.the.priority.fo |
8bc00 | 72 20 75 73 61 67 65 20 6f 66 20 61 76 61 69 6c 61 62 6c 65 20 62 61 6e 64 77 69 64 74 68 20 6f | r.usage.of.available.bandwidth.o |
8bc20 | 6e 63 65 20 67 75 61 72 61 6e 74 65 65 73 20 68 61 76 65 20 62 65 65 6e 20 6d 65 74 2e 20 54 68 | nce.guarantees.have.been.met..Th |
8bc40 | 65 20 6c 6f 77 65 72 20 74 68 65 20 70 72 69 6f 72 69 74 79 20 6e 75 6d 62 65 72 2c 20 74 68 65 | e.lower.the.priority.number,.the |
8bc60 | 20 68 69 67 68 65 72 20 74 68 65 20 70 72 69 6f 72 69 74 79 2e 20 54 68 65 20 64 65 66 61 75 6c | .higher.the.priority..The.defaul |
8bc80 | 74 20 70 72 69 6f 72 69 74 79 20 76 61 6c 75 65 20 69 73 20 30 2c 20 74 68 65 20 68 69 67 68 65 | t.priority.value.is.0,.the.highe |
8bca0 | 73 74 20 70 72 69 6f 72 69 74 79 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | st.priority..Use.this.command.to |
8bcc0 | 20 63 6f 6e 66 69 67 75 72 65 20 61 20 53 68 61 70 65 72 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 | .configure.a.Shaper.policy,.set. |
8bce0 | 69 74 73 20 6e 61 6d 65 2c 20 64 65 66 69 6e 65 20 61 20 63 6c 61 73 73 20 61 6e 64 20 73 65 74 | its.name,.define.a.class.and.set |
8bd00 | 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 60 74 6f 63 6b 65 6e 20 62 75 63 6b 65 74 60 | .the.size.of.the.`tocken.bucket` |
8bd20 | 5f 20 69 6e 20 62 79 74 65 73 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 61 76 61 69 6c 61 | _.in.bytes,.which.will.be.availa |
8bd40 | 62 6c 65 20 74 6f 20 62 65 20 73 65 6e 74 20 61 74 20 63 65 69 6c 69 6e 67 20 73 70 65 65 64 20 | ble.to.be.sent.at.ceiling.speed. |
8bd60 | 28 64 65 66 61 75 6c 74 3a 20 31 35 4b 62 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | (default:.15Kb)..Use.this.comman |
8bd80 | 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 64 61 74 61 2d 72 61 74 65 20 6c 69 6d 69 74 | d.to.configure.a.data-rate.limit |
8bda0 | 20 74 6f 20 50 50 50 4f 6f 45 20 63 6c 69 65 6e 74 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 64 | .to.PPPOoE.clients.for.traffic.d |
8bdc0 | 6f 77 6e 6c 6f 61 64 20 6f 72 20 75 70 6c 6f 61 64 2e 20 54 68 65 20 72 61 74 65 2d 6c 69 6d 69 | ownload.or.upload..The.rate-limi |
8bde0 | 74 20 69 73 20 73 65 74 20 69 6e 20 6b 62 69 74 2f 73 65 63 2e 00 55 73 65 20 74 68 69 73 20 63 | t.is.set.in.kbit/sec..Use.this.c |
8be00 | 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 64 72 6f 70 2d 74 61 69 6c 20 | ommand.to.configure.a.drop-tail. |
8be20 | 70 6f 6c 69 63 79 20 28 50 46 49 46 4f 29 2e 20 43 68 6f 6f 73 65 20 61 20 75 6e 69 71 75 65 20 | policy.(PFIFO)..Choose.a.unique. |
8be40 | 6e 61 6d 65 20 66 6f 72 20 74 68 69 73 20 70 6f 6c 69 63 79 20 61 6e 64 20 74 68 65 20 73 69 7a | name.for.this.policy.and.the.siz |
8be60 | 65 20 6f 66 20 74 68 65 20 71 75 65 75 65 20 62 79 20 73 65 74 74 69 6e 67 20 74 68 65 20 6e 75 | e.of.the.queue.by.setting.the.nu |
8be80 | 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 69 74 20 63 61 6e 20 63 6f 6e 74 61 69 6e 20 28 | mber.of.packets.it.can.contain.( |
8bea0 | 6d 61 78 69 6d 75 6d 20 34 32 39 34 39 36 37 32 39 35 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f | maximum.4294967295)..Use.this.co |
8bec0 | 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 73 70 65 63 69 66 69 63 20 73 65 | mmand.to.configure.a.specific.se |
8bee0 | 73 73 69 6f 6e 20 68 6f 6c 64 20 74 69 6d 65 20 66 6f 72 20 4c 44 50 20 70 65 65 72 73 2e 20 53 | ssion.hold.time.for.LDP.peers..S |
8bf00 | 65 74 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 4c 44 50 20 70 65 65 | et.the.IP.address.of.the.LDP.pee |
8bf20 | 72 20 61 6e 64 20 61 20 73 65 73 73 69 6f 6e 20 68 6f 6c 64 20 74 69 6d 65 20 74 68 61 74 20 73 | r.and.a.session.hold.time.that.s |
8bf40 | 68 6f 75 6c 64 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 69 74 2e 20 59 6f 75 20 | hould.be.configured.for.it..You. |
8bf60 | 6d 61 79 20 68 61 76 65 20 74 6f 20 72 65 73 65 74 20 74 68 65 20 6e 65 69 67 68 62 6f 72 20 66 | may.have.to.reset.the.neighbor.f |
8bf80 | 6f 72 20 74 68 69 73 20 74 6f 20 77 6f 72 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | or.this.to.work..Use.this.comman |
8bfa0 | 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 6e 67 72 65 73 73 20 50 6f 6c 69 63 65 | d.to.configure.an.Ingress.Police |
8bfc0 | 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 62 75 72 | r,.defining.its.name.and.the.bur |
8bfe0 | 73 74 20 73 69 7a 65 20 69 6e 20 62 79 74 65 73 20 28 64 65 66 61 75 6c 74 3a 20 31 35 29 20 66 | st.size.in.bytes.(default:.15).f |
8c000 | 6f 72 20 69 74 73 20 64 65 66 61 75 6c 74 20 70 6f 6c 69 63 79 2e 00 55 73 65 20 74 68 69 73 20 | or.its.default.policy..Use.this. |
8c020 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 6e 67 72 65 73 73 20 | command.to.configure.an.Ingress. |
8c040 | 50 6f 6c 69 63 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 | Policer,.defining.its.name.and.t |
8c060 | 68 65 20 6d 61 78 69 6d 75 6d 20 61 6c 6c 6f 77 65 64 20 62 61 6e 64 77 69 64 74 68 20 66 6f 72 | he.maximum.allowed.bandwidth.for |
8c080 | 20 69 74 73 20 64 65 66 61 75 6c 74 20 70 6f 6c 69 63 79 2e 00 55 73 65 20 74 68 69 73 20 63 6f | .its.default.policy..Use.this.co |
8c0a0 | 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 6e 67 72 65 73 73 20 50 6f | mmand.to.configure.an.Ingress.Po |
8c0c0 | 6c 69 63 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 2c 20 61 20 63 6c 61 73 | licer,.defining.its.name,.a.clas |
8c0e0 | 73 20 69 64 65 6e 74 69 66 69 65 72 20 28 31 2d 34 30 39 30 29 20 61 6e 64 20 74 68 65 20 62 75 | s.identifier.(1-4090).and.the.bu |
8c100 | 72 73 74 20 73 69 7a 65 20 69 6e 20 62 79 74 65 73 20 66 6f 72 20 74 68 69 73 20 63 6c 61 73 73 | rst.size.in.bytes.for.this.class |
8c120 | 20 28 64 65 66 61 75 6c 74 3a 20 31 35 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | .(default:.15)..Use.this.command |
8c140 | 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 6e 67 72 65 73 73 20 50 6f 6c 69 63 65 72 | .to.configure.an.Ingress.Policer |
8c160 | 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 2c 20 61 20 63 6c 61 73 73 20 69 64 65 | ,.defining.its.name,.a.class.ide |
8c180 | 6e 74 69 66 69 65 72 20 28 31 2d 34 30 39 30 29 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d | ntifier.(1-4090).and.the.maximum |
8c1a0 | 20 61 6c 6c 6f 77 65 64 20 62 61 6e 64 77 69 64 74 68 20 66 6f 72 20 74 68 69 73 20 63 6c 61 73 | .allowed.bandwidth.for.this.clas |
8c1c0 | 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 | s..Use.this.command.to.configure |
8c1e0 | 20 61 6e 20 49 6e 67 72 65 73 73 20 50 6f 6c 69 63 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 | .an.Ingress.Policer,.defining.it |
8c200 | 73 20 6e 61 6d 65 2c 20 61 20 63 6c 61 73 73 20 69 64 65 6e 74 69 66 69 65 72 20 28 31 2d 34 30 | s.name,.a.class.identifier.(1-40 |
8c220 | 39 30 29 2c 20 61 20 63 6c 61 73 73 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 20 6e 61 6d 65 20 | 90),.a.class.matching.rule.name. |
8c240 | 61 6e 64 20 69 74 73 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f | and.its.description..Use.this.co |
8c260 | 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 6e 67 72 65 73 73 20 50 6f | mmand.to.configure.an.Ingress.Po |
8c280 | 6c 69 63 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 2c 20 61 20 63 6c 61 73 | licer,.defining.its.name,.a.clas |
8c2a0 | 73 20 69 64 65 6e 74 69 66 69 65 72 20 28 31 2d 34 30 39 30 29 2c 20 61 6e 64 20 74 68 65 20 70 | s.identifier.(1-4090),.and.the.p |
8c2c0 | 72 69 6f 72 69 74 79 20 28 30 2d 32 30 2c 20 64 65 66 61 75 6c 74 20 32 30 29 20 69 6e 20 77 68 | riority.(0-20,.default.20).in.wh |
8c2e0 | 69 63 68 20 74 68 65 20 72 75 6c 65 20 69 73 20 65 76 61 6c 75 61 74 65 64 20 28 74 68 65 20 6c | ich.the.rule.is.evaluated.(the.l |
8c300 | 6f 77 65 72 20 74 68 65 20 6e 75 6d 62 65 72 2c 20 74 68 65 20 68 69 67 68 65 72 20 74 68 65 20 | ower.the.number,.the.higher.the. |
8c320 | 70 72 69 6f 72 69 74 79 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 | priority)..Use.this.command.to.c |
8c340 | 6f 6e 66 69 67 75 72 65 20 61 6e 20 66 71 2d 63 6f 64 65 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 | onfigure.an.fq-codel.policy,.set |
8c360 | 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 | .its.name.and.the.maximum.number |
8c380 | 20 6f 66 20 62 79 74 65 73 20 28 64 65 66 61 75 6c 74 3a 20 31 35 31 34 29 20 74 6f 20 62 65 20 | .of.bytes.(default:.1514).to.be. |
8c3a0 | 64 65 71 75 65 75 65 64 20 66 72 6f 6d 20 61 20 71 75 65 75 65 20 61 74 20 6f 6e 63 65 2e 00 55 | dequeued.from.a.queue.at.once..U |
8c3c0 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 | se.this.command.to.configure.an. |
8c3e0 | 66 71 2d 63 6f 64 65 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e | fq-codel.policy,.set.its.name.an |
8c400 | 64 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 75 62 2d 71 75 65 75 65 73 20 28 64 65 66 61 | d.the.number.of.sub-queues.(defa |
8c420 | 75 6c 74 3a 20 31 30 32 34 29 20 69 6e 74 6f 20 77 68 69 63 68 20 70 61 63 6b 65 74 73 20 61 72 | ult:.1024).into.which.packets.ar |
8c440 | 65 20 63 6c 61 73 73 69 66 69 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | e.classified..Use.this.command.t |
8c460 | 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 66 71 2d 63 6f 64 65 6c 20 70 6f 6c 69 63 79 2c 20 | o.configure.an.fq-codel.policy,. |
8c480 | 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 74 69 6d 65 20 70 65 72 69 6f 64 | set.its.name.and.the.time.period |
8c4a0 | 20 75 73 65 64 20 62 79 20 74 68 65 20 63 6f 6e 74 72 6f 6c 20 6c 6f 6f 70 20 6f 66 20 43 6f 44 | .used.by.the.control.loop.of.CoD |
8c4c0 | 65 6c 20 74 6f 20 64 65 74 65 63 74 20 77 68 65 6e 20 61 20 70 65 72 73 69 73 74 65 6e 74 20 71 | el.to.detect.when.a.persistent.q |
8c4e0 | 75 65 75 65 20 69 73 20 64 65 76 65 6c 6f 70 69 6e 67 2c 20 65 6e 73 75 72 69 6e 67 20 74 68 61 | ueue.is.developing,.ensuring.tha |
8c500 | 74 20 74 68 65 20 6d 65 61 73 75 72 65 64 20 6d 69 6e 69 6d 75 6d 20 64 65 6c 61 79 20 64 6f 65 | t.the.measured.minimum.delay.doe |
8c520 | 73 20 6e 6f 74 20 62 65 63 6f 6d 65 20 74 6f 6f 20 73 74 61 6c 65 20 28 64 65 66 61 75 6c 74 3a | s.not.become.too.stale.(default: |
8c540 | 20 31 30 30 6d 73 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e | .100ms)..Use.this.command.to.con |
8c560 | 66 69 67 75 72 65 20 61 6e 20 66 71 2d 63 6f 64 65 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 | figure.an.fq-codel.policy,.set.i |
8c580 | 74 73 20 6e 61 6d 65 2c 20 61 6e 64 20 64 65 66 69 6e 65 20 61 20 68 61 72 64 20 6c 69 6d 69 74 | ts.name,.and.define.a.hard.limit |
8c5a0 | 20 6f 6e 20 74 68 65 20 72 65 61 6c 20 71 75 65 75 65 20 73 69 7a 65 2e 20 57 68 65 6e 20 74 68 | .on.the.real.queue.size..When.th |
8c5c0 | 69 73 20 6c 69 6d 69 74 20 69 73 20 72 65 61 63 68 65 64 2c 20 6e 65 77 20 70 61 63 6b 65 74 73 | is.limit.is.reached,.new.packets |
8c5e0 | 20 61 72 65 20 64 72 6f 70 70 65 64 20 28 64 65 66 61 75 6c 74 3a 20 31 30 32 34 30 20 70 61 63 | .are.dropped.(default:.10240.pac |
8c600 | 6b 65 74 73 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 | kets)..Use.this.command.to.confi |
8c620 | 67 75 72 65 20 61 6e 20 66 71 2d 63 6f 64 65 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 | gure.an.fq-codel.policy,.set.its |
8c640 | 20 6e 61 6d 65 2c 20 61 6e 64 20 64 65 66 69 6e 65 20 74 68 65 20 61 63 63 65 70 74 61 62 6c 65 | .name,.and.define.the.acceptable |
8c660 | 20 6d 69 6e 69 6d 75 6d 20 73 74 61 6e 64 69 6e 67 2f 70 65 72 73 69 73 74 65 6e 74 20 71 75 65 | .minimum.standing/persistent.que |
8c680 | 75 65 20 64 65 6c 61 79 2e 20 54 68 69 73 20 6d 69 6e 69 6d 75 6d 20 64 65 6c 61 79 20 69 73 20 | ue.delay..This.minimum.delay.is. |
8c6a0 | 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 74 72 61 63 6b 69 6e 67 20 74 68 65 20 6c 6f 63 61 6c | identified.by.tracking.the.local |
8c6c0 | 20 6d 69 6e 69 6d 75 6d 20 71 75 65 75 65 20 64 65 6c 61 79 20 74 68 61 74 20 70 61 63 6b 65 74 | .minimum.queue.delay.that.packet |
8c6e0 | 73 20 65 78 70 65 72 69 65 6e 63 65 20 28 64 65 66 61 75 6c 74 3a 20 35 6d 73 29 2e 00 55 73 65 | s.experience.(default:.5ms)..Use |
8c700 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 69 6e | .this.command.to.configure.an.in |
8c720 | 74 65 72 66 61 63 65 20 77 69 74 68 20 49 47 4d 50 20 73 6f 20 74 68 61 74 20 50 49 4d 20 63 61 | terface.with.IGMP.so.that.PIM.ca |
8c740 | 6e 20 72 65 63 65 69 76 65 20 49 47 4d 50 20 72 65 70 6f 72 74 73 20 61 6e 64 20 71 75 65 72 79 | n.receive.IGMP.reports.and.query |
8c760 | 20 6f 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 42 79 20 64 | .on.the.selected.interface..By.d |
8c780 | 65 66 61 75 6c 74 20 49 47 4d 50 20 76 65 72 73 69 6f 6e 20 33 20 77 69 6c 6c 20 62 65 20 75 73 | efault.IGMP.version.3.will.be.us |
8c7a0 | 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 | ed..Use.this.command.to.configur |
8c7c0 | 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 66 6f 72 20 4c 44 50 20 70 65 65 72 73 2e 20 | e.authentication.for.LDP.peers.. |
8c7e0 | 53 65 74 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 4c 44 50 20 70 65 | Set.the.IP.address.of.the.LDP.pe |
8c800 | 65 72 20 61 6e 64 20 61 20 70 61 73 73 77 6f 72 64 20 74 68 61 74 20 73 68 6f 75 6c 64 20 62 65 | er.and.a.password.that.should.be |
8c820 | 20 73 68 61 72 65 64 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 63 6f 6d 65 20 6e 65 69 67 68 | .shared.in.order.to.become.neigh |
8c840 | 62 6f 72 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 | bors..Use.this.command.to.config |
8c860 | 75 72 65 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 68 | ure.in.the.selected.interface.th |
8c880 | 65 20 49 47 4d 50 20 68 6f 73 74 20 71 75 65 72 79 20 69 6e 74 65 72 76 61 6c 20 28 31 2d 31 38 | e.IGMP.host.query.interval.(1-18 |
8c8a0 | 30 30 29 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 68 61 74 20 50 49 4d 20 77 69 6c 6c 20 75 73 65 | 00).in.seconds.that.PIM.will.use |
8c8c0 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 | ..Use.this.command.to.configure. |
8c8e0 | 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 49 47 | in.the.selected.interface.the.IG |
8c900 | 4d 50 20 71 75 65 72 79 20 72 65 73 70 6f 6e 73 65 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 20 | MP.query.response.timeout.value. |
8c920 | 28 31 30 2d 32 35 30 29 20 69 6e 20 64 65 63 69 73 65 63 6f 6e 64 73 2e 20 49 66 20 61 20 72 65 | (10-250).in.deciseconds..If.a.re |
8c940 | 70 6f 72 74 20 69 73 20 6e 6f 74 20 72 65 74 75 72 6e 65 64 20 69 6e 20 74 68 65 20 73 70 65 63 | port.is.not.returned.in.the.spec |
8c960 | 69 66 69 65 64 20 74 69 6d 65 2c 20 69 74 20 77 69 6c 6c 20 62 65 20 61 73 73 75 6d 65 64 20 74 | ified.time,.it.will.be.assumed.t |
8c980 | 68 65 20 28 53 2c 47 29 20 6f 72 20 28 2a 2c 47 29 20 73 74 61 74 65 20 3a 72 66 63 3a 60 37 37 | he.(S,G).or.(*,G).state.:rfc:`77 |
8c9a0 | 36 31 23 73 65 63 74 69 6f 6e 2d 34 2e 31 60 20 68 61 73 20 74 69 6d 65 64 20 6f 75 74 2e 00 55 | 61#section-4.1`.has.timed.out..U |
8c9c0 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 6e 20 | se.this.command.to.configure.in. |
8c9e0 | 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 49 47 4d 50 20 | the.selected.interface.the.IGMP. |
8ca00 | 71 75 65 72 79 20 72 65 73 70 6f 6e 73 65 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 20 28 31 30 | query.response.timeout.value.(10 |
8ca20 | 2d 32 35 30 29 20 69 6e 20 64 65 63 69 73 65 63 6f 6e 64 73 2e 20 49 66 20 61 20 72 65 70 6f 72 | -250).in.deciseconds..If.a.repor |
8ca40 | 74 20 69 73 20 6e 6f 74 20 72 65 74 75 72 6e 65 64 20 69 6e 20 74 68 65 20 73 70 65 63 69 66 69 | t.is.not.returned.in.the.specifi |
8ca60 | 65 64 20 74 69 6d 65 2c 20 69 74 20 77 69 6c 6c 20 62 65 20 61 73 73 75 6d 65 64 20 74 68 65 20 | ed.time,.it.will.be.assumed.the. |
8ca80 | 28 53 2c 47 29 20 6f 72 20 28 5c 2a 2c 47 29 20 73 74 61 74 65 20 3a 72 66 63 3a 60 37 37 36 31 | (S,G).or.(\*,G).state.:rfc:`7761 |
8caa0 | 23 73 65 63 74 69 6f 6e 2d 34 2e 31 60 20 68 61 73 20 74 69 6d 65 64 20 6f 75 74 2e 00 55 73 65 | #section-4.1`.has.timed.out..Use |
8cac0 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 6e 20 74 68 | .this.command.to.configure.in.th |
8cae0 | 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 49 47 4d 50 20 71 75 | e.selected.interface.the.IGMP.qu |
8cb00 | 65 72 79 20 72 65 73 70 6f 6e 73 65 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 20 28 31 30 2d 32 | ery.response.timeout.value.(10-2 |
8cb20 | 35 30 29 20 69 6e 20 64 65 63 69 73 65 63 6f 6e 64 73 2e 20 49 66 20 61 20 72 65 70 6f 72 74 20 | 50).in.deciseconds..If.a.report. |
8cb40 | 69 73 20 6e 6f 74 20 72 65 74 75 72 6e 65 64 20 69 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 | is.not.returned.in.the.specified |
8cb60 | 20 74 69 6d 65 2c 20 69 74 20 77 69 6c 6c 20 62 65 20 61 73 73 75 6d 65 64 20 74 68 65 20 60 28 | .time,.it.will.be.assumed.the.`( |
8cb80 | 53 2c 47 29 20 6f 72 20 28 2a 2c 47 29 20 73 74 61 74 65 20 3c 68 74 74 70 73 3a 2f 2f 74 6f 6f | S,G).or.(*,G).state.<https://too |
8cba0 | 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 37 37 36 31 23 73 65 63 74 69 6f 6e | ls.ietf.org/html/rfc7761#section |
8cbc0 | 2d 34 2e 31 3e 60 5f 20 68 61 73 20 74 69 6d 65 64 20 6f 75 74 2e 00 55 73 65 20 74 68 69 73 20 | -4.1>`_.has.timed.out..Use.this. |
8cbe0 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 6e 20 74 68 65 20 73 65 6c 65 | command.to.configure.in.the.sele |
8cc00 | 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 4d 4c 44 20 68 6f 73 74 20 71 75 65 72 | cted.interface.the.MLD.host.quer |
8cc20 | 79 20 69 6e 74 65 72 76 61 6c 20 28 31 2d 36 35 35 33 35 29 20 69 6e 20 73 65 63 6f 6e 64 73 20 | y.interval.(1-65535).in.seconds. |
8cc40 | 74 68 61 74 20 50 49 4d 20 77 69 6c 6c 20 75 73 65 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 | that.PIM.will.use..The.default.v |
8cc60 | 61 6c 75 65 20 69 73 20 31 32 35 20 73 65 63 6f 6e 64 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f | alue.is.125.seconds..Use.this.co |
8cc80 | 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 20 73 61 6d 70 6c 69 6e 67 | mmand.to.configure.the..sampling |
8cca0 | 20 72 61 74 65 20 66 6f 72 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 2e 20 54 68 65 20 73 | .rate.for.flow.accounting..The.s |
8ccc0 | 79 73 74 65 6d 20 73 61 6d 70 6c 65 73 20 6f 6e 65 20 69 6e 20 65 76 65 72 79 20 60 3c 72 61 74 | ystem.samples.one.in.every.`<rat |
8cce0 | 65 3e 60 20 70 61 63 6b 65 74 73 2c 20 77 68 65 72 65 20 60 3c 72 61 74 65 3e 60 20 69 73 20 74 | e>`.packets,.where.`<rate>`.is.t |
8cd00 | 68 65 20 76 61 6c 75 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 74 68 65 20 73 61 6d 70 | he.value.configured.for.the.samp |
8cd20 | 6c 69 6e 67 2d 72 61 74 65 20 6f 70 74 69 6f 6e 2e 20 54 68 65 20 61 64 76 61 6e 74 61 67 65 20 | ling-rate.option..The.advantage. |
8cd40 | 6f 66 20 73 61 6d 70 6c 69 6e 67 20 65 76 65 72 79 20 6e 20 70 61 63 6b 65 74 73 2c 20 77 68 65 | of.sampling.every.n.packets,.whe |
8cd60 | 72 65 20 6e 20 3e 20 31 2c 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 64 65 63 72 65 61 73 65 | re.n.>.1,.allows.you.to.decrease |
8cd80 | 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 70 72 6f 63 65 73 73 69 6e 67 20 72 65 73 6f 75 72 | .the.amount.of.processing.resour |
8cda0 | 63 65 73 20 72 65 71 75 69 72 65 64 20 66 6f 72 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 | ces.required.for.flow.accounting |
8cdc0 | 2e 20 54 68 65 20 64 69 73 61 64 76 61 6e 74 61 67 65 20 6f 66 20 6e 6f 74 20 73 61 6d 70 6c 69 | ..The.disadvantage.of.not.sampli |
8cde0 | 6e 67 20 65 76 65 72 79 20 70 61 63 6b 65 74 20 69 73 20 74 68 61 74 20 74 68 65 20 73 74 61 74 | ng.every.packet.is.that.the.stat |
8ce00 | 69 73 74 69 63 73 20 70 72 6f 64 75 63 65 64 20 61 72 65 20 65 73 74 69 6d 61 74 65 73 20 6f 66 | istics.produced.are.estimates.of |
8ce20 | 20 61 63 74 75 61 6c 20 64 61 74 61 20 66 6c 6f 77 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | .actual.data.flows..Use.this.com |
8ce40 | 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 | mand.to.configure.the.IP.address |
8ce60 | 20 61 6e 64 20 74 68 65 20 73 68 61 72 65 64 20 73 65 63 72 65 74 20 6b 65 79 20 6f 66 20 79 6f | .and.the.shared.secret.key.of.yo |
8ce80 | 75 72 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 20 20 59 6f 75 20 63 61 6e 20 68 61 76 65 20 | ur.RADIUS.server...You.can.have. |
8cea0 | 6d 75 6c 74 69 70 6c 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 73 20 63 6f 6e 66 69 67 75 72 | multiple.RADIUS.servers.configur |
8cec0 | 65 64 20 69 66 20 79 6f 75 20 77 69 73 68 20 74 6f 20 61 63 68 69 65 76 65 20 72 65 64 75 6e 64 | ed.if.you.wish.to.achieve.redund |
8cee0 | 61 6e 63 79 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 | ancy..Use.this.command.to.config |
8cf00 | 75 72 65 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 75 73 65 64 20 61 73 20 74 68 65 20 4c | ure.the.IP.address.used.as.the.L |
8cf20 | 44 50 20 72 6f 75 74 65 72 2d 69 64 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 64 65 76 69 63 65 | DP.router-id.of.the.local.device |
8cf40 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 | ..Use.this.command.to.configure. |
8cf60 | 74 68 65 20 50 49 4d 20 68 65 6c 6c 6f 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 | the.PIM.hello.interval.in.second |
8cf80 | 73 20 28 31 2d 31 38 30 29 20 66 6f 72 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 | s.(1-180).for.the.selected.inter |
8cfa0 | 66 61 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 | face..Use.this.command.to.config |
8cfc0 | 75 72 65 20 74 68 65 20 62 75 72 73 74 20 73 69 7a 65 20 6f 66 20 74 68 65 20 74 72 61 66 66 69 | ure.the.burst.size.of.the.traffi |
8cfe0 | 63 20 69 6e 20 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 | c.in.a.Network.Emulator.policy.. |
8d000 | 44 65 66 69 6e 65 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 4e 65 74 77 6f 72 6b 20 45 | Define.the.name.of.the.Network.E |
8d020 | 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 20 61 6e 64 20 69 74 73 20 74 72 61 66 66 69 63 20 62 | mulator.policy.and.its.traffic.b |
8d040 | 75 72 73 74 20 73 69 7a 65 20 28 69 74 20 77 69 6c 6c 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 | urst.size.(it.will.be.configured |
8d060 | 20 74 68 72 6f 75 67 68 20 74 68 65 20 54 6f 6b 65 6e 20 42 75 63 6b 65 74 20 46 69 6c 74 65 72 | .through.the.Token.Bucket.Filter |
8d080 | 20 71 64 69 73 63 29 2e 20 44 65 66 61 75 6c 74 3a 31 35 6b 62 2e 20 49 74 20 77 69 6c 6c 20 6f | .qdisc)..Default:15kb..It.will.o |
8d0a0 | 6e 6c 79 20 74 61 6b 65 20 65 66 66 65 63 74 20 69 66 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 | nly.take.effect.if.you.have.conf |
8d0c0 | 69 67 75 72 65 64 20 69 74 73 20 62 61 6e 64 77 69 64 74 68 20 74 6f 6f 2e 00 55 73 65 20 74 68 | igured.its.bandwidth.too..Use.th |
8d0e0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6c 6f 63 61 | is.command.to.configure.the.loca |
8d100 | 6c 20 67 61 74 65 77 61 79 20 49 50 20 61 64 64 72 65 73 73 2e 00 55 73 65 20 74 68 69 73 20 63 | l.gateway.IP.address..Use.this.c |
8d120 | 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 | ommand.to.configure.the.maximum. |
8d140 | 72 61 74 65 20 61 74 20 77 68 69 63 68 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 62 65 20 73 68 | rate.at.which.traffic.will.be.sh |
8d160 | 61 70 65 64 20 69 6e 20 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 | aped.in.a.Network.Emulator.polic |
8d180 | 79 2e 20 44 65 66 69 6e 65 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 70 6f 6c 69 63 79 | y..Define.the.name.of.the.policy |
8d1a0 | 20 61 6e 64 20 74 68 65 20 72 61 74 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | .and.the.rate..Use.this.command. |
8d1c0 | 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 73 61 6d 70 6c 69 6e 67 20 72 61 74 65 20 66 | to.configure.the.sampling.rate.f |
8d1e0 | 6f 72 20 73 46 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 28 64 65 66 61 75 6c 74 3a 20 31 30 | or.sFlow.accounting.(default:.10 |
8d200 | 30 30 29 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 | 00).Use.this.command.to.configur |
8d220 | 65 20 74 68 65 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 | e.the.username.and.the.password. |
8d240 | 6f 66 20 61 20 6c 6f 63 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 75 73 65 72 2e 00 55 73 | of.a.locally.configured.user..Us |
8d260 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 65 20 6d 61 | e.this.command.to.control.the.ma |
8d280 | 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 65 71 75 61 6c 20 63 6f 73 74 20 70 61 74 68 73 | ximum.number.of.equal.cost.paths |
8d2a0 | 20 74 6f 20 72 65 61 63 68 20 61 20 73 70 65 63 69 66 69 63 20 64 65 73 74 69 6e 61 74 69 6f 6e | .to.reach.a.specific.destination |
8d2c0 | 2e 20 54 68 65 20 75 70 70 65 72 20 6c 69 6d 69 74 20 6d 61 79 20 64 69 66 66 65 72 20 69 66 20 | ..The.upper.limit.may.differ.if. |
8d2e0 | 79 6f 75 20 63 68 61 6e 67 65 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 4d 55 4c 54 49 50 41 54 | you.change.the.value.of.MULTIPAT |
8d300 | 48 5f 4e 55 4d 20 64 75 72 69 6e 67 20 63 6f 6d 70 69 6c 61 74 69 6f 6e 2e 20 54 68 65 20 64 65 | H_NUM.during.compilation..The.de |
8d320 | 66 61 75 6c 74 20 69 73 20 4d 55 4c 54 49 50 41 54 48 5f 4e 55 4d 20 28 36 34 29 2e 00 55 73 65 | fault.is.MULTIPATH_NUM.(64)..Use |
8d340 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 72 65 61 74 65 20 61 20 46 61 69 72 2d 51 | .this.command.to.create.a.Fair-Q |
8d360 | 75 65 75 65 20 70 6f 6c 69 63 79 20 61 6e 64 20 67 69 76 65 20 69 74 20 61 20 6e 61 6d 65 2e 20 | ueue.policy.and.give.it.a.name.. |
8d380 | 49 74 20 69 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 53 74 6f 63 68 61 73 74 69 63 20 46 61 | It.is.based.on.the.Stochastic.Fa |
8d3a0 | 69 72 6e 65 73 73 20 51 75 65 75 65 69 6e 67 20 61 6e 64 20 63 61 6e 20 62 65 20 61 70 70 6c 69 | irness.Queueing.and.can.be.appli |
8d3c0 | 65 64 20 74 6f 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 2e 00 55 73 65 20 74 68 69 73 | ed.to.outbound.traffic..Use.this |
8d3e0 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 49 50 73 65 63 20 69 6e 74 65 72 66 61 | .command.to.define.IPsec.interfa |
8d400 | 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 61 | ce..Use.this.command.to.define.a |
8d420 | 20 46 61 69 72 2d 51 75 65 75 65 20 70 6f 6c 69 63 79 2c 20 62 61 73 65 64 20 6f 6e 20 74 68 65 | .Fair-Queue.policy,.based.on.the |
8d440 | 20 53 74 6f 63 68 61 73 74 69 63 20 46 61 69 72 6e 65 73 73 20 51 75 65 75 65 69 6e 67 2c 20 61 | .Stochastic.Fairness.Queueing,.a |
8d460 | 6e 64 20 73 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 6d 61 78 69 6d 75 6d 20 70 61 63 | nd.set.the.number.of.maximum.pac |
8d480 | 6b 65 74 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 77 61 69 74 20 69 6e 20 74 68 65 20 71 75 65 75 | kets.allowed.to.wait.in.the.queu |
8d4a0 | 65 2e 20 41 6e 79 20 6f 74 68 65 72 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 64 72 6f 70 | e..Any.other.packet.will.be.drop |
8d4c0 | 70 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 | ped..Use.this.command.to.define. |
8d4e0 | 61 20 46 61 69 72 2d 51 75 65 75 65 20 70 6f 6c 69 63 79 2c 20 62 61 73 65 64 20 6f 6e 20 74 68 | a.Fair-Queue.policy,.based.on.th |
8d500 | 65 20 53 74 6f 63 68 61 73 74 69 63 20 46 61 69 72 6e 65 73 73 20 51 75 65 75 65 69 6e 67 2c 20 | e.Stochastic.Fairness.Queueing,. |
8d520 | 61 6e 64 20 73 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 61 74 | and.set.the.number.of.seconds.at |
8d540 | 20 77 68 69 63 68 20 61 20 6e 65 77 20 71 75 65 75 65 20 61 6c 67 6f 72 69 74 68 6d 20 70 65 72 | .which.a.new.queue.algorithm.per |
8d560 | 74 75 72 62 61 74 69 6f 6e 20 77 69 6c 6c 20 6f 63 63 75 72 20 28 6d 61 78 69 6d 75 6d 20 34 32 | turbation.will.occur.(maximum.42 |
8d580 | 39 34 39 36 37 32 39 35 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 | 94967295)..Use.this.command.to.d |
8d5a0 | 65 66 69 6e 65 20 64 65 66 61 75 6c 74 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 | efine.default.IPv6.address.pool. |
8d5c0 | 6e 61 6d 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 | name..Use.this.command.to.define |
8d5e0 | 20 64 65 66 61 75 6c 74 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 6e 61 6d 65 2e 00 55 73 65 20 | .default.address.pool.name..Use. |
8d600 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 64 6f 6d 61 69 6e 73 2c 20 | this.command.to.define.domains,. |
8d620 | 6f 6e 65 20 61 74 20 61 20 74 69 6d 65 2c 20 73 6f 20 74 68 61 74 20 74 68 65 20 73 79 73 74 65 | one.at.a.time,.so.that.the.syste |
8d640 | 6d 20 75 73 65 73 20 74 68 65 6d 20 74 6f 20 63 6f 6d 70 6c 65 74 65 20 75 6e 71 75 61 6c 69 66 | m.uses.them.to.complete.unqualif |
8d660 | 69 65 64 20 68 6f 73 74 20 6e 61 6d 65 73 2e 20 4d 61 78 69 6d 75 6d 3a 20 36 20 65 6e 74 72 69 | ied.host.names..Maximum:.6.entri |
8d680 | 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 69 | es..Use.this.command.to.define.i |
8d6a0 | 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 74 68 65 72 | n.the.selected.interface.whether |
8d6c0 | 20 79 6f 75 20 63 68 6f 6f 73 65 20 49 47 4d 50 20 76 65 72 73 69 6f 6e 20 32 20 6f 72 20 33 2e | .you.choose.IGMP.version.2.or.3. |
8d6e0 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 69 6e 20 74 | .Use.this.command.to.define.in.t |
8d700 | 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 74 68 65 72 20 79 6f | he.selected.interface.whether.yo |
8d720 | 75 20 63 68 6f 6f 73 65 20 49 47 4d 50 20 76 65 72 73 69 6f 6e 20 32 20 6f 72 20 33 2e 20 54 68 | u.choose.IGMP.version.2.or.3..Th |
8d740 | 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 33 2e 00 55 73 65 20 74 68 69 73 20 63 | e.default.value.is.3..Use.this.c |
8d760 | 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 | ommand.to.define.the.IP.address. |
8d780 | 72 61 6e 67 65 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 50 50 50 6f 45 20 63 6c 69 65 6e | range.to.be.given.to.PPPoE.clien |
8d7a0 | 74 73 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e | ts..If.notation.``x.x.x.x-x.x.x. |
8d7c0 | 78 60 60 2c 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 | x``,.it.must.be.within.a./24.sub |
8d7e0 | 6e 65 74 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 69 | net..If.notation.``x.x.x.x/x``.i |
8d800 | 73 20 75 73 65 64 20 74 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 73 | s.used.there.is.possibility.to.s |
8d820 | 65 74 20 68 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | et.host/netmask..Use.this.comman |
8d840 | 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 66 69 72 73 74 20 49 50 20 61 64 64 72 65 73 73 | d.to.define.the.first.IP.address |
8d860 | 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 | .of.a.pool.of.addresses.to.be.gi |
8d880 | 76 65 6e 20 74 6f 20 49 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e | ven.to.IPoE.clients..If.notation |
8d8a0 | 20 60 60 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 6d 75 73 74 20 62 65 | .``x.x.x.x-x.x.x.x``,.it.must.be |
8d8c0 | 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 6e 6f 74 61 74 69 6f | .within.a./24.subnet..If.notatio |
8d8e0 | 6e 20 60 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 68 65 72 65 20 69 73 | n.``x.x.x.x/x``.is.used.there.is |
8d900 | 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f 6e 65 74 6d 61 73 6b | .possibility.to.set.host/netmask |
8d920 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 | ..Use.this.command.to.define.the |
8d940 | 20 66 69 72 73 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 | .first.IP.address.of.a.pool.of.a |
8d960 | 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 50 50 50 6f 45 20 63 6c | ddresses.to.be.given.to.PPPoE.cl |
8d980 | 69 65 6e 74 73 2e 20 49 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 | ients..It.must.be.within.a./24.s |
8d9a0 | 75 62 6e 65 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e | ubnet..Use.this.command.to.defin |
8d9c0 | 65 20 74 68 65 20 66 69 72 73 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c | e.the.first.IP.address.of.a.pool |
8d9e0 | 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 50 50 54 | .of.addresses.to.be.given.to.PPT |
8da00 | 50 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 | P.clients..If.notation.``x.x.x.x |
8da20 | 2d 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 | -x.x.x.x``,.it.must.be.within.a. |
8da40 | 2f 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e | /24.subnet..If.notation.``x.x.x. |
8da60 | 78 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 | x/x``.is.used.there.is.possibili |
8da80 | 74 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 69 73 | ty.to.set.host/netmask..Use.this |
8daa0 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 66 69 72 73 74 20 49 50 20 | .command.to.define.the.first.IP. |
8dac0 | 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 | address.of.a.pool.of.addresses.t |
8dae0 | 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 53 53 54 50 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e | o.be.given.to.SSTP.clients..If.n |
8db00 | 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 | otation.``x.x.x.x-x.x.x.x``,.it. |
8db20 | 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 | must.be.within.a./24.subnet..If. |
8db40 | 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 | notation.``x.x.x.x/x``.is.used.t |
8db60 | 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f | here.is.possibility.to.set.host/ |
8db80 | 6e 65 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 | netmask..Use.this.command.to.def |
8dba0 | 69 6e 65 20 74 68 65 20 66 69 72 73 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f | ine.the.first.IP.address.of.a.po |
8dbc0 | 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 6c | ol.of.addresses.to.be.given.to.l |
8dbe0 | 32 74 70 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 | 2tp.clients..If.notation.``x.x.x |
8dc00 | 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 | .x-x.x.x.x``,.it.must.be.within. |
8dc20 | 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e | a./24.subnet..If.notation.``x.x. |
8dc40 | 78 2e 78 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 | x.x/x``.is.used.there.is.possibi |
8dc60 | 6c 69 74 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 | lity.to.set.host/netmask..Use.th |
8dc80 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 66 69 72 73 74 20 49 | is.command.to.define.the.first.I |
8dca0 | 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 | P.address.of.a.pool.of.addresses |
8dcc0 | 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 70 70 70 6f 65 20 63 6c 69 65 6e 74 73 2e 20 49 | .to.be.given.to.pppoe.clients..I |
8dce0 | 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 2c 20 | f.notation.``x.x.x.x-x.x.x.x``,. |
8dd00 | 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 20 | it.must.be.within.a./24.subnet.. |
8dd20 | 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 69 73 20 75 73 65 | If.notation.``x.x.x.x/x``.is.use |
8dd40 | 64 20 74 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 73 65 74 20 68 6f | d.there.is.possibility.to.set.ho |
8dd60 | 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | st/netmask..Use.this.command.to. |
8dd80 | 64 65 66 69 6e 65 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 50 50 50 6f 45 20 73 | define.the.interface.the.PPPoE.s |
8dda0 | 65 72 76 65 72 20 77 69 6c 6c 20 75 73 65 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f 72 20 50 50 50 | erver.will.use.to.listen.for.PPP |
8ddc0 | 6f 45 20 63 6c 69 65 6e 74 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | oE.clients..Use.this.command.to. |
8dde0 | 64 65 66 69 6e 65 20 74 68 65 20 6c 61 73 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 | define.the.last.IP.address.of.a. |
8de00 | 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f | pool.of.addresses.to.be.given.to |
8de20 | 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 49 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 | .PPPoE.clients..It.must.be.withi |
8de40 | 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | n.a./24.subnet..Use.this.command |
8de60 | 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 71 75 65 | .to.define.the.length.of.the.que |
8de80 | 75 65 20 6f 66 20 79 6f 75 72 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 | ue.of.your.Network.Emulator.poli |
8dea0 | 63 79 2e 20 53 65 74 20 74 68 65 20 70 6f 6c 69 63 79 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 | cy..Set.the.policy.name.and.the. |
8dec0 | 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 28 31 2d 34 32 39 | maximum.number.of.packets.(1-429 |
8dee0 | 34 39 36 37 32 39 35 29 20 74 68 65 20 71 75 65 75 65 20 6d 61 79 20 68 6f 6c 64 20 71 75 65 75 | 4967295).the.queue.may.hold.queu |
8df00 | 65 64 20 61 74 20 61 20 74 69 6d 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | ed.at.a.time..Use.this.command.t |
8df20 | 6f 20 64 65 66 69 6e 65 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 65 | o.define.the.maximum.number.of.e |
8df40 | 6e 74 72 69 65 73 20 74 6f 20 6b 65 65 70 20 69 6e 20 74 68 65 20 41 52 50 20 63 61 63 68 65 20 | ntries.to.keep.in.the.ARP.cache. |
8df60 | 28 31 30 32 34 2c 20 32 30 34 38 2c 20 34 30 39 36 2c 20 38 31 39 32 2c 20 31 36 33 38 34 2c 20 | (1024,.2048,.4096,.8192,.16384,. |
8df80 | 33 32 37 36 38 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 | 32768)..Use.this.command.to.defi |
8dfa0 | 6e 65 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 65 6e 74 72 69 65 73 | ne.the.maximum.number.of.entries |
8dfc0 | 20 74 6f 20 6b 65 65 70 20 69 6e 20 74 68 65 20 4e 65 69 67 68 62 6f 72 20 63 61 63 68 65 20 28 | .to.keep.in.the.Neighbor.cache.( |
8dfe0 | 31 30 32 34 2c 20 32 30 34 38 2c 20 34 30 39 36 2c 20 38 31 39 32 2c 20 31 36 33 38 34 2c 20 33 | 1024,.2048,.4096,.8192,.16384,.3 |
8e000 | 32 37 36 38 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e | 2768)..Use.this.command.to.defin |
8e020 | 65 20 74 68 65 20 6e 65 78 74 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 6e 61 6d 65 2e 00 55 73 | e.the.next.address.pool.name..Us |
8e040 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 77 68 65 74 68 65 72 | e.this.command.to.define.whether |
8e060 | 20 79 6f 75 72 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 20 77 69 6c 6c 20 6c 6f 63 61 6c 6c 79 | .your.PPPoE.clients.will.locally |
8e080 | 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 69 6e 20 79 6f 75 72 20 56 79 4f 53 20 73 79 73 74 65 | .authenticate.in.your.VyOS.syste |
8e0a0 | 6d 20 6f 72 20 69 6e 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 55 73 65 20 74 68 69 73 20 | m.or.in.RADIUS.server..Use.this. |
8e0c0 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 72 65 63 74 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 74 | command.to.direct.an.interface.t |
8e0e0 | 6f 20 6e 6f 74 20 64 65 74 65 63 74 20 61 6e 79 20 70 68 79 73 69 63 61 6c 20 73 74 61 74 65 20 | o.not.detect.any.physical.state. |
8e100 | 63 68 61 6e 67 65 73 20 6f 6e 20 61 20 6c 69 6e 6b 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 | changes.on.a.link,.for.example,. |
8e120 | 77 68 65 6e 20 74 68 65 20 63 61 62 6c 65 20 69 73 20 75 6e 70 6c 75 67 67 65 64 2e 00 55 73 65 | when.the.cable.is.unplugged..Use |
8e140 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 20 49 50 76 34 20 64 69 | .this.command.to.disable.IPv4.di |
8e160 | 72 65 63 74 65 64 20 62 72 6f 61 64 63 61 73 74 20 66 6f 72 77 61 72 64 69 6e 67 20 6f 6e 20 61 | rected.broadcast.forwarding.on.a |
8e180 | 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | ll.interfaces..Use.this.command. |
8e1a0 | 74 6f 20 64 69 73 61 62 6c 65 20 49 50 76 34 20 66 6f 72 77 61 72 64 69 6e 67 20 6f 6e 20 61 6c | to.disable.IPv4.forwarding.on.al |
8e1c0 | 6c 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | l.interfaces..Use.this.command.t |
8e1e0 | 6f 20 64 69 73 61 62 6c 65 20 49 50 76 36 20 66 6f 72 77 61 72 64 69 6e 67 20 6f 6e 20 61 6c 6c | o.disable.IPv6.forwarding.on.all |
8e200 | 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | .interfaces..Use.this.command.to |
8e220 | 20 64 69 73 61 62 6c 65 20 49 50 76 36 20 6f 70 65 72 61 74 69 6f 6e 20 6f 6e 20 69 6e 74 65 72 | .disable.IPv6.operation.on.inter |
8e240 | 66 61 63 65 20 77 68 65 6e 20 44 75 70 6c 69 63 61 74 65 20 41 64 64 72 65 73 73 20 44 65 74 65 | face.when.Duplicate.Address.Dete |
8e260 | 63 74 69 6f 6e 20 66 61 69 6c 73 20 6f 6e 20 4c 69 6e 6b 2d 4c 6f 63 61 6c 20 61 64 64 72 65 73 | ction.fails.on.Link-Local.addres |
8e280 | 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 20 74 | s..Use.this.command.to.disable.t |
8e2a0 | 68 65 20 67 65 6e 65 72 61 74 69 6f 6e 20 6f 66 20 45 74 68 65 72 6e 65 74 20 66 6c 6f 77 20 63 | he.generation.of.Ethernet.flow.c |
8e2c0 | 6f 6e 74 72 6f 6c 20 28 70 61 75 73 65 20 66 72 61 6d 65 73 29 2e 00 55 73 65 20 74 68 69 73 20 | ontrol.(pause.frames)..Use.this. |
8e2e0 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6d 75 6c 61 74 65 20 6e 6f 69 73 65 20 69 6e 20 61 20 4e 65 | command.to.emulate.noise.in.a.Ne |
8e300 | 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 53 65 74 20 74 68 65 20 70 | twork.Emulator.policy..Set.the.p |
8e320 | 6f 6c 69 63 79 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 70 65 72 63 65 6e 74 61 67 65 20 6f 66 | olicy.name.and.the.percentage.of |
8e340 | 20 63 6f 72 72 75 70 74 65 64 20 70 61 63 6b 65 74 73 20 79 6f 75 20 77 61 6e 74 2e 20 41 20 72 | .corrupted.packets.you.want..A.r |
8e360 | 61 6e 64 6f 6d 20 65 72 72 6f 72 20 77 69 6c 6c 20 62 65 20 69 6e 74 72 6f 64 75 63 65 64 20 69 | andom.error.will.be.introduced.i |
8e380 | 6e 20 61 20 72 61 6e 64 6f 6d 20 70 6f 73 69 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 63 68 6f 73 | n.a.random.position.for.the.chos |
8e3a0 | 65 6e 20 70 65 72 63 65 6e 74 20 6f 66 20 70 61 63 6b 65 74 73 2e 00 55 73 65 20 74 68 69 73 20 | en.percent.of.packets..Use.this. |
8e3c0 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6d 75 6c 61 74 65 20 70 61 63 6b 65 74 2d 6c 6f 73 73 20 63 | command.to.emulate.packet-loss.c |
8e3e0 | 6f 6e 64 69 74 69 6f 6e 73 20 69 6e 20 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 | onditions.in.a.Network.Emulator. |
8e400 | 70 6f 6c 69 63 79 2e 20 53 65 74 20 74 68 65 20 70 6f 6c 69 63 79 20 6e 61 6d 65 20 61 6e 64 20 | policy..Set.the.policy.name.and. |
8e420 | 74 68 65 20 70 65 72 63 65 6e 74 61 67 65 20 6f 66 20 6c 6f 73 73 20 70 61 63 6b 65 74 73 20 79 | the.percentage.of.loss.packets.y |
8e440 | 6f 75 72 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 73 75 66 66 65 72 2e 00 55 73 65 20 74 68 69 | our.traffic.will.suffer..Use.thi |
8e460 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6d 75 6c 61 74 65 20 70 61 63 6b 65 74 2d 72 65 6f 72 | s.command.to.emulate.packet-reor |
8e480 | 64 65 72 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 20 69 6e 20 61 20 4e 65 74 77 6f 72 6b 20 45 | dering.conditions.in.a.Network.E |
8e4a0 | 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 53 65 74 20 74 68 65 20 70 6f 6c 69 63 79 20 6e | mulator.policy..Set.the.policy.n |
8e4c0 | 61 6d 65 20 61 6e 64 20 74 68 65 20 70 65 72 63 65 6e 74 61 67 65 20 6f 66 20 72 65 6f 72 64 65 | ame.and.the.percentage.of.reorde |
8e4e0 | 72 65 64 20 70 61 63 6b 65 74 73 20 79 6f 75 72 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 73 75 | red.packets.your.traffic.will.su |
8e500 | 66 66 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 | ffer..Use.this.command.to.enable |
8e520 | 20 4c 44 50 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 79 6f 75 20 64 65 66 69 6e 65 | .LDP.on.the.interface.you.define |
8e540 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 4d 50 4c | ..Use.this.command.to.enable.MPL |
8e560 | 53 20 70 72 6f 63 65 73 73 69 6e 67 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 79 6f | S.processing.on.the.interface.yo |
8e580 | 75 20 64 65 66 69 6e 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e | u.define..Use.this.command.to.en |
8e5a0 | 61 62 6c 65 20 50 49 4d 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 | able.PIM.in.the.selected.interfa |
8e5c0 | 63 65 20 73 6f 20 74 68 61 74 20 69 74 20 63 61 6e 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 77 69 | ce.so.that.it.can.communicate.wi |
8e5e0 | 74 68 20 50 49 4d 20 6e 65 69 67 68 62 6f 72 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | th.PIM.neighbors..Use.this.comma |
8e600 | 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 50 49 4d 76 36 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 | nd.to.enable.PIMv6.in.the.select |
8e620 | 65 64 20 69 6e 74 65 72 66 61 63 65 20 73 6f 20 74 68 61 74 20 69 74 20 63 61 6e 20 63 6f 6d 6d | ed.interface.so.that.it.can.comm |
8e640 | 75 6e 69 63 61 74 65 20 77 69 74 68 20 50 49 4d 76 36 20 6e 65 69 67 68 62 6f 72 73 2e 20 54 68 | unicate.with.PIMv6.neighbors..Th |
8e660 | 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 73 6f 20 65 6e 61 62 6c 65 73 20 4d 4c 44 20 72 65 70 6f | is.command.also.enables.MLD.repo |
8e680 | 72 74 73 20 61 6e 64 20 71 75 65 72 79 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 75 | rts.and.query.on.the.interface.u |
8e6a0 | 6e 6c 65 73 73 20 3a 63 66 67 63 6d 64 3a 60 6d 6c 64 20 64 69 73 61 62 6c 65 60 20 69 73 20 63 | nless.:cfgcmd:`mld.disable`.is.c |
8e6c0 | 6f 6e 66 69 67 75 72 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 | onfigured..Use.this.command.to.e |
8e6e0 | 6e 61 62 6c 65 20 61 63 71 75 69 73 69 74 69 6f 6e 20 6f 66 20 49 50 76 36 20 61 64 64 72 65 73 | nable.acquisition.of.IPv6.addres |
8e700 | 73 20 75 73 69 6e 67 20 73 74 61 74 65 6c 65 73 73 20 61 75 74 6f 63 6f 6e 66 69 67 20 28 53 4c | s.using.stateless.autoconfig.(SL |
8e720 | 41 41 43 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 | AAC)..Use.this.command.to.enable |
8e740 | 20 62 61 6e 64 77 69 64 74 68 20 73 68 61 70 69 6e 67 20 76 69 61 20 52 41 44 49 55 53 2e 00 55 | .bandwidth.shaping.via.RADIUS..U |
8e760 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 70 72 6f 78 79 20 | se.this.command.to.enable.proxy. |
8e780 | 41 64 64 72 65 73 73 20 52 65 73 6f 6c 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 28 41 52 50 | Address.Resolution.Protocol.(ARP |
8e7a0 | 29 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 20 50 72 6f 78 79 20 41 52 50 20 61 | ).on.this.interface..Proxy.ARP.a |
8e7c0 | 6c 6c 6f 77 73 20 61 6e 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 72 | llows.an.Ethernet.interface.to.r |
8e7e0 | 65 73 70 6f 6e 64 20 77 69 74 68 20 69 74 73 20 6f 77 6e 20 3a 61 62 62 72 3a 60 4d 41 43 20 28 | espond.with.its.own.:abbr:`MAC.( |
8e800 | 4d 65 64 69 61 20 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c 29 60 20 61 64 64 72 65 73 73 20 74 | Media.Access.Control)`.address.t |
8e820 | 6f 20 41 52 50 20 72 65 71 75 65 73 74 73 20 66 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 | o.ARP.requests.for.destination.I |
8e840 | 50 20 61 64 64 72 65 73 73 65 73 20 6f 6e 20 73 75 62 6e 65 74 73 20 61 74 74 61 63 68 65 64 20 | P.addresses.on.subnets.attached. |
8e860 | 74 6f 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 6f 6e 20 74 68 65 20 73 79 73 74 65 | to.other.interfaces.on.the.syste |
8e880 | 6d 2e 20 53 75 62 73 65 71 75 65 6e 74 20 70 61 63 6b 65 74 73 20 73 65 6e 74 20 74 6f 20 74 68 | m..Subsequent.packets.sent.to.th |
8e8a0 | 6f 73 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 65 73 20 61 72 65 | ose.destination.IP.addresses.are |
8e8c0 | 20 66 6f 72 77 61 72 64 65 64 20 61 70 70 72 6f 70 72 69 61 74 65 6c 79 20 62 79 20 74 68 65 20 | .forwarded.appropriately.by.the. |
8e8e0 | 73 79 73 74 65 6d 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 | system..Use.this.command.to.enab |
8e900 | 6c 65 20 74 61 72 67 65 74 65 64 20 4c 44 50 20 73 65 73 73 69 6f 6e 73 20 74 6f 20 74 68 65 20 | le.targeted.LDP.sessions.to.the. |
8e920 | 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2e 20 54 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 74 68 | local.router..The.router.will.th |
8e940 | 65 6e 20 72 65 73 70 6f 6e 64 20 74 6f 20 61 6e 79 20 73 65 73 73 69 6f 6e 73 20 74 68 61 74 20 | en.respond.to.any.sessions.that. |
8e960 | 61 72 65 20 74 72 79 69 6e 67 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 69 74 20 74 68 61 74 | are.trying.to.connect.to.it.that |
8e980 | 20 61 72 65 20 6e 6f 74 20 61 20 6c 69 6e 6b 20 6c 6f 63 61 6c 20 74 79 70 65 20 6f 66 20 54 43 | .are.not.a.link.local.type.of.TC |
8e9a0 | 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | P.connection..Use.this.command.t |
8e9c0 | 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 64 65 6c 61 79 20 6f 66 20 50 41 44 4f 20 28 50 50 50 6f | o.enable.the.delay.of.PADO.(PPPo |
8e9e0 | 45 20 41 63 74 69 76 65 20 44 69 73 63 6f 76 65 72 79 20 4f 66 66 65 72 29 20 70 61 63 6b 65 74 | E.Active.Discovery.Offer).packet |
8ea00 | 73 2c 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 75 73 65 64 20 61 73 20 61 20 73 65 73 73 69 6f | s,.which.can.be.used.as.a.sessio |
8ea20 | 6e 20 62 61 6c 61 6e 63 69 6e 67 20 6d 65 63 68 61 6e 69 73 6d 20 77 69 74 68 20 6f 74 68 65 72 | n.balancing.mechanism.with.other |
8ea40 | 20 50 50 50 6f 45 20 73 65 72 76 65 72 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | .PPPoE.servers..Use.this.command |
8ea60 | 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 74 6f 20 74 | .to.enable.the.local.router.to.t |
8ea80 | 72 79 20 61 6e 64 20 63 6f 6e 6e 65 63 74 20 77 69 74 68 20 61 20 74 61 72 67 65 74 65 64 20 4c | ry.and.connect.with.a.targeted.L |
8eaa0 | 44 50 20 73 65 73 73 69 6f 6e 20 74 6f 20 61 6e 6f 74 68 65 72 20 72 6f 75 74 65 72 2e 00 55 73 | DP.session.to.another.router..Us |
8eac0 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 6c 6f 67 | e.this.command.to.enable.the.log |
8eae0 | 67 69 6e 67 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 6f 6e 20 63 75 | ging.of.the.default.action.on.cu |
8eb00 | 73 74 6f 6d 20 63 68 61 69 6e 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | stom.chains..Use.this.command.to |
8eb20 | 20 65 6e 61 62 6c 65 20 74 68 65 20 6c 6f 67 67 69 6e 67 20 6f 66 20 74 68 65 20 64 65 66 61 75 | .enable.the.logging.of.the.defau |
8eb40 | 6c 74 20 61 63 74 69 6f 6e 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 63 68 61 69 6e | lt.action.on.the.specified.chain |
8eb60 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 | ..Use.this.command.to.enable.the |
8eb80 | 20 6c 6f 67 67 69 6e 67 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 2e 00 | .logging.of.the.default.action.. |
8eba0 | 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 2c 20 64 69 73 61 | Use.this.command.to.enable,.disa |
8ebc0 | 62 6c 65 2c 20 6f 72 20 73 70 65 63 69 66 79 20 68 6f 70 20 63 6f 75 6e 74 20 66 6f 72 20 54 54 | ble,.or.specify.hop.count.for.TT |
8ebe0 | 4c 20 73 65 63 75 72 69 74 79 20 66 6f 72 20 4c 44 50 20 70 65 65 72 73 2e 20 42 79 20 64 65 66 | L.security.for.LDP.peers..By.def |
8ec00 | 61 75 6c 74 20 74 68 65 20 76 61 6c 75 65 20 69 73 20 73 65 74 20 74 6f 20 32 35 35 20 28 6f 72 | ault.the.value.is.set.to.255.(or |
8ec20 | 20 6d 61 78 20 54 54 4c 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 66 | .max.TTL)..Use.this.command.to.f |
8ec40 | 6c 75 73 68 20 74 68 65 20 6b 65 72 6e 65 6c 20 49 50 76 36 20 72 6f 75 74 65 20 63 61 63 68 65 | lush.the.kernel.IPv6.route.cache |
8ec60 | 2e 20 41 6e 20 61 64 64 72 65 73 73 20 63 61 6e 20 62 65 20 61 64 64 65 64 20 74 6f 20 66 6c 75 | ..An.address.can.be.added.to.flu |
8ec80 | 73 68 20 69 74 20 6f 6e 6c 79 20 66 6f 72 20 74 68 61 74 20 72 6f 75 74 65 2e 00 55 73 65 20 74 | sh.it.only.for.that.route..Use.t |
8eca0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 67 65 74 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f | his.command.to.get.an.overview.o |
8ecc0 | 66 20 61 20 7a 6f 6e 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 67 65 | f.a.zone..Use.this.command.to.ge |
8ece0 | 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 4f 53 50 46 76 33 2e 00 55 73 65 20 | t.information.about.OSPFv3..Use. |
8ed00 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 67 65 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | this.command.to.get.information. |
8ed20 | 61 62 6f 75 74 20 74 68 65 20 52 49 50 4e 47 20 70 72 6f 74 6f 63 6f 6c 00 55 73 65 20 74 68 69 | about.the.RIPNG.protocol.Use.thi |
8ed40 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 6e 73 74 72 75 63 74 20 74 68 65 20 73 79 73 74 65 6d | s.command.to.instruct.the.system |
8ed60 | 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e | .to.establish.a.PPPoE.connection |
8ed80 | 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 6f 6e 63 65 20 74 72 61 66 66 69 63 20 70 61 73 73 | .automatically.once.traffic.pass |
8eda0 | 65 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 41 20 64 69 73 61 | es.through.the.interface..A.disa |
8edc0 | 62 6c 65 64 20 6f 6e 2d 64 65 6d 61 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 65 73 74 | bled.on-demand.connection.is.est |
8ede0 | 61 62 6c 69 73 68 65 64 20 61 74 20 62 6f 6f 74 20 74 69 6d 65 20 61 6e 64 20 72 65 6d 61 69 6e | ablished.at.boot.time.and.remain |
8ee00 | 73 20 75 70 2e 20 49 66 20 74 68 65 20 6c 69 6e 6b 20 66 61 69 6c 73 20 66 6f 72 20 61 6e 79 20 | s.up..If.the.link.fails.for.any. |
8ee20 | 72 65 61 73 6f 6e 2c 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 62 72 6f 75 67 68 74 20 62 61 63 6b | reason,.the.link.is.brought.back |
8ee40 | 20 75 70 20 69 6d 6d 65 64 69 61 74 65 6c 79 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | .up.immediately..Use.this.comman |
8ee60 | 64 20 74 6f 20 6c 69 6e 6b 20 74 68 65 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 | d.to.link.the.PPPoE.connection.t |
8ee80 | 6f 20 61 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 2e 20 45 61 63 68 20 50 50 50 | o.a.physical.interface..Each.PPP |
8eea0 | 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 | oE.connection.must.be.establishe |
8eec0 | 64 20 6f 76 65 72 20 61 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 2e 20 49 6e 74 | d.over.a.physical.interface..Int |
8eee0 | 65 72 66 61 63 65 73 20 63 61 6e 20 62 65 20 72 65 67 75 6c 61 72 20 45 74 68 65 72 6e 65 74 20 | erfaces.can.be.regular.Ethernet. |
8ef00 | 69 6e 74 65 72 66 61 63 65 73 2c 20 56 49 46 73 20 6f 72 20 62 6f 6e 64 69 6e 67 20 69 6e 74 65 | interfaces,.VIFs.or.bonding.inte |
8ef20 | 72 66 61 63 65 73 2f 56 49 46 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | rfaces/VIFs..Use.this.command.to |
8ef40 | 20 6c 6f 63 61 6c 6c 79 20 63 68 65 63 6b 20 74 68 65 20 61 63 74 69 76 65 20 73 65 73 73 69 6f | .locally.check.the.active.sessio |
8ef60 | 6e 73 20 69 6e 20 74 68 65 20 49 50 6f 45 20 73 65 72 76 65 72 2e 00 55 73 65 20 74 68 69 73 20 | ns.in.the.IPoE.server..Use.this. |
8ef80 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 6f 63 61 6c 6c 79 20 63 68 65 63 6b 20 74 68 65 20 61 63 74 | command.to.locally.check.the.act |
8efa0 | 69 76 65 20 73 65 73 73 69 6f 6e 73 20 69 6e 20 74 68 65 20 50 50 50 6f 45 20 73 65 72 76 65 72 | ive.sessions.in.the.PPPoE.server |
8efc0 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 6f 63 61 6c 6c 79 20 63 68 | ..Use.this.command.to.locally.ch |
8efe0 | 65 63 6b 20 74 68 65 20 61 63 74 69 76 65 20 73 65 73 73 69 6f 6e 73 20 69 6e 20 74 68 65 20 50 | eck.the.active.sessions.in.the.P |
8f000 | 50 54 50 20 73 65 72 76 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | PTP.server..Use.this.command.to. |
8f020 | 6c 6f 63 61 6c 6c 79 20 63 68 65 63 6b 20 74 68 65 20 61 63 74 69 76 65 20 73 65 73 73 69 6f 6e | locally.check.the.active.session |
8f040 | 73 20 69 6e 20 74 68 65 20 53 53 54 50 20 73 65 72 76 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 | s.in.the.SSTP.server..Use.this.c |
8f060 | 6f 6d 6d 61 6e 64 20 74 6f 20 6d 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 | ommand.to.manually.configure.a.R |
8f080 | 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 20 66 6f 72 20 50 49 4d 20 73 6f 20 74 68 61 74 20 | endezvous.Point.for.PIM.so.that. |
8f0a0 | 6a 6f 69 6e 20 6d 65 73 73 61 67 65 73 20 63 61 6e 20 62 65 20 73 65 6e 74 20 74 68 65 72 65 2e | join.messages.can.be.sent.there. |
8f0c0 | 20 53 65 74 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 61 64 64 72 65 73 73 | .Set.the.Rendevouz.Point.address |
8f0e0 | 20 61 6e 64 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 70 72 65 66 69 78 20 6f 66 20 67 72 6f 75 | .and.the.matching.prefix.of.grou |
8f100 | 70 20 72 61 6e 67 65 73 20 63 6f 76 65 72 65 64 2e 20 54 68 65 73 65 20 76 61 6c 75 65 73 20 6d | p.ranges.covered..These.values.m |
8f120 | 75 73 74 20 62 65 20 73 68 61 72 65 64 20 77 69 74 68 20 65 76 65 72 79 20 72 6f 75 74 65 72 20 | ust.be.shared.with.every.router. |
8f140 | 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 69 6e 20 74 68 65 20 50 49 4d 20 6e 65 74 77 6f 72 6b | participating.in.the.PIM.network |
8f160 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6e 6f 74 20 69 6e 73 74 61 6c | ..Use.this.command.to.not.instal |
8f180 | 6c 20 61 64 76 65 72 74 69 73 65 64 20 44 4e 53 20 6e 61 6d 65 73 65 72 76 65 72 73 20 69 6e 74 | l.advertised.DNS.nameservers.int |
8f1a0 | 6f 20 74 68 65 20 6c 6f 63 61 6c 20 73 79 73 74 65 6d 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | o.the.local.system..Use.this.com |
8f1c0 | 6d 61 6e 64 20 74 6f 20 70 72 65 66 65 72 20 49 50 76 34 20 66 6f 72 20 54 43 50 20 70 65 65 72 | mand.to.prefer.IPv4.for.TCP.peer |
8f1e0 | 20 74 72 61 6e 73 70 6f 72 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 6f 72 20 4c 44 50 20 77 68 | .transport.connection.for.LDP.wh |
8f200 | 65 6e 20 62 6f 74 68 20 61 6e 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 4c 44 50 20 61 64 64 | en.both.an.IPv4.and.IPv6.LDP.add |
8f220 | 72 65 73 73 20 61 72 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 | ress.are.configured.on.the.same. |
8f240 | 69 6e 74 65 72 66 61 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 72 | interface..Use.this.command.to.r |
8f260 | 65 73 65 74 20 49 50 76 36 20 4e 65 69 67 68 62 6f 72 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f | eset.IPv6.Neighbor.Discovery.Pro |
8f280 | 74 6f 63 6f 6c 20 63 61 63 68 65 20 66 6f 72 20 61 6e 20 61 64 64 72 65 73 73 20 6f 72 20 69 6e | tocol.cache.for.an.address.or.in |
8f2a0 | 74 65 72 66 61 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 72 65 73 | terface..Use.this.command.to.res |
8f2c0 | 65 74 20 61 6e 20 4c 44 50 20 6e 65 69 67 68 62 6f 72 2f 54 43 50 20 73 65 73 73 69 6f 6e 20 74 | et.an.LDP.neighbor/TCP.session.t |
8f2e0 | 68 61 74 20 69 73 20 65 73 74 61 62 6c 69 73 68 65 64 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | hat.is.established.Use.this.comm |
8f300 | 61 6e 64 20 74 6f 20 72 65 73 65 74 20 74 68 65 20 4f 70 65 6e 56 50 4e 20 70 72 6f 63 65 73 73 | and.to.reset.the.OpenVPN.process |
8f320 | 20 6f 6e 20 61 20 73 70 65 63 69 66 69 63 20 69 6e 74 65 72 66 61 63 65 2e 00 55 73 65 20 74 68 | .on.a.specific.interface..Use.th |
8f340 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 72 65 73 65 74 20 74 68 65 20 73 70 65 63 69 66 69 65 | is.command.to.reset.the.specifie |
8f360 | 64 20 4f 70 65 6e 56 50 4e 20 63 6c 69 65 6e 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | d.OpenVPN.client..Use.this.comma |
8f380 | 6e 64 20 74 6f 20 72 65 73 74 72 69 63 74 20 74 68 65 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e | nd.to.restrict.the.PPPoE.session |
8f3a0 | 20 6f 6e 20 61 20 67 69 76 65 6e 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 2e | .on.a.given.access.concentrator. |
8f3c0 | 20 4e 6f 72 6d 61 6c 6c 79 2c 20 61 20 68 6f 73 74 20 73 65 6e 64 73 20 61 20 50 50 50 6f 45 20 | .Normally,.a.host.sends.a.PPPoE. |
8f3e0 | 69 6e 69 74 69 61 74 69 6f 6e 20 70 61 63 6b 65 74 20 74 6f 20 73 74 61 72 74 20 74 68 65 20 50 | initiation.packet.to.start.the.P |
8f400 | 50 50 6f 45 20 64 69 73 63 6f 76 65 72 79 20 70 72 6f 63 65 73 73 2c 20 61 20 6e 75 6d 62 65 72 | PPoE.discovery.process,.a.number |
8f420 | 20 6f 66 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 73 20 72 65 73 70 6f 6e 64 | .of.access.concentrators.respond |
8f440 | 20 77 69 74 68 20 6f 66 66 65 72 20 70 61 63 6b 65 74 73 20 61 6e 64 20 74 68 65 20 68 6f 73 74 | .with.offer.packets.and.the.host |
8f460 | 20 73 65 6c 65 63 74 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 72 65 73 70 6f 6e 64 69 6e 67 20 61 | .selects.one.of.the.responding.a |
8f480 | 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 73 20 74 6f 20 73 65 72 76 65 20 74 68 69 | ccess.concentrators.to.serve.thi |
8f4a0 | 73 20 73 65 73 73 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 | s.session..Use.this.command.to.s |
8f4c0 | 65 65 20 4c 44 50 20 69 6e 74 65 72 66 61 63 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 55 73 65 | ee.LDP.interface.information.Use |
8f4e0 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 65 20 4c 44 50 20 6e 65 69 67 68 62 6f | .this.command.to.see.LDP.neighbo |
8f500 | 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | r.information.Use.this.command.t |
8f520 | 6f 20 73 65 65 20 64 65 74 61 69 6c 65 64 20 4c 44 50 20 6e 65 69 67 68 62 6f 72 20 69 6e 66 6f | o.see.detailed.LDP.neighbor.info |
8f540 | 72 6d 61 74 69 6f 6e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 65 20 | rmation.Use.this.command.to.see. |
8f560 | 64 69 73 63 6f 76 65 72 79 20 68 65 6c 6c 6f 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 55 73 65 20 | discovery.hello.information.Use. |
8f580 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 65 20 74 68 65 20 4c 61 62 65 6c 20 49 6e | this.command.to.see.the.Label.In |
8f5a0 | 66 6f 72 6d 61 74 69 6f 6e 20 42 61 73 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | formation.Base..Use.this.command |
8f5c0 | 20 74 6f 20 73 65 74 20 61 20 6e 61 6d 65 20 66 6f 72 20 74 68 69 73 20 50 50 50 6f 45 2d 73 65 | .to.set.a.name.for.this.PPPoE-se |
8f5e0 | 72 76 65 72 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 2e 00 55 73 65 20 74 68 | rver.access.concentrator..Use.th |
8f600 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 72 65 2d 64 69 61 6c 20 64 65 6c 61 79 20 | is.command.to.set.re-dial.delay. |
8f620 | 74 69 6d 65 20 74 6f 20 62 65 20 75 73 65 64 20 77 69 74 68 20 70 65 72 73 69 73 74 20 50 50 50 | time.to.be.used.with.persist.PPP |
8f640 | 6f 45 20 73 65 73 73 69 6f 6e 73 2e 20 57 68 65 6e 20 74 68 65 20 50 50 50 6f 45 20 73 65 73 73 | oE.sessions..When.the.PPPoE.sess |
8f660 | 69 6f 6e 20 69 73 20 74 65 72 6d 69 6e 61 74 65 64 20 62 79 20 70 65 65 72 2c 20 61 6e 64 20 6f | ion.is.terminated.by.peer,.and.o |
8f680 | 6e 2d 64 65 6d 61 6e 64 20 6f 70 74 69 6f 6e 20 69 73 20 6e 6f 74 20 73 65 74 2c 20 74 68 65 20 | n-demand.option.is.not.set,.the. |
8f6a0 | 72 6f 75 74 65 72 20 77 69 6c 6c 20 61 74 74 65 6d 70 74 20 74 6f 20 72 65 2d 65 73 74 61 62 6c | router.will.attempt.to.re-establ |
8f6c0 | 69 73 68 20 74 68 65 20 50 50 50 6f 45 20 6c 69 6e 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | ish.the.PPPoE.link..Use.this.com |
8f6e0 | 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 | mand.to.set.the.IP.address.of.th |
8f700 | 65 20 6c 6f 63 61 6c 20 65 6e 64 70 6f 69 6e 74 20 6f 66 20 61 20 50 50 50 6f 45 20 73 65 73 73 | e.local.endpoint.of.a.PPPoE.sess |
8f720 | 69 6f 6e 2e 20 49 66 20 69 74 20 69 73 20 6e 6f 74 20 73 65 74 20 69 74 20 77 69 6c 6c 20 62 65 | ion..If.it.is.not.set.it.will.be |
8f740 | 20 6e 65 67 6f 74 69 61 74 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | .negotiated..Use.this.command.to |
8f760 | 20 73 65 74 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 | .set.the.IP.address.of.the.remot |
8f780 | 65 20 65 6e 64 70 6f 69 6e 74 20 6f 66 20 61 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 2e 20 49 | e.endpoint.of.a.PPPoE.session..I |
8f7a0 | 66 20 69 74 20 69 73 20 6e 6f 74 20 73 65 74 20 69 74 20 77 69 6c 6c 20 62 65 20 6e 65 67 6f 74 | f.it.is.not.set.it.will.be.negot |
8f7c0 | 69 61 74 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 | iated..Use.this.command.to.set.t |
8f7e0 | 68 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 20 6f 66 20 65 76 65 72 79 | he.IPv4.or.IPv6.address.of.every |
8f800 | 20 44 6f 6d 61 6e 20 4e 61 6d 65 20 53 65 72 76 65 72 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 63 | .Doman.Name.Server.you.want.to.c |
8f820 | 6f 6e 66 69 67 75 72 65 2e 20 54 68 65 79 20 77 69 6c 6c 20 62 65 20 70 72 6f 70 61 67 61 74 65 | onfigure..They.will.be.propagate |
8f840 | 64 20 74 6f 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | d.to.PPPoE.clients..Use.this.com |
8f860 | 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 74 72 61 | mand.to.set.the.IPv4.or.IPv6.tra |
8f880 | 6e 73 70 6f 72 74 2d 61 64 64 72 65 73 73 20 75 73 65 64 20 62 79 20 4c 44 50 2e 00 55 73 65 20 | nsport-address.used.by.LDP..Use. |
8f8a0 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 69 64 6c 65 20 74 69 6d | this.command.to.set.the.idle.tim |
8f8c0 | 65 6f 75 74 20 69 6e 74 65 72 76 61 6c 20 74 6f 20 62 65 20 75 73 65 64 20 77 69 74 68 20 6f 6e | eout.interval.to.be.used.with.on |
8f8e0 | 2d 64 65 6d 61 6e 64 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 73 2e 20 57 68 65 6e 20 61 6e 20 | -demand.PPPoE.sessions..When.an. |
8f900 | 6f 6e 2d 64 65 6d 61 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 65 73 74 61 62 6c 69 73 | on-demand.connection.is.establis |
8f920 | 68 65 64 2c 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 62 72 6f 75 67 68 74 20 75 70 20 6f 6e 6c 79 | hed,.the.link.is.brought.up.only |
8f940 | 20 77 68 65 6e 20 74 72 61 66 66 69 63 20 69 73 20 73 65 6e 74 20 61 6e 64 20 69 73 20 64 69 73 | .when.traffic.is.sent.and.is.dis |
8f960 | 61 62 6c 65 64 20 77 68 65 6e 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 69 64 6c 65 20 66 6f 72 20 | abled.when.the.link.is.idle.for. |
8f980 | 74 68 65 20 69 6e 74 65 72 76 61 6c 20 73 70 65 63 69 66 69 65 64 2e 00 55 73 65 20 74 68 69 73 | the.interval.specified..Use.this |
8f9a0 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 66 6f 72 | .command.to.set.the.password.for |
8f9c0 | 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 77 69 74 68 20 61 20 72 65 6d 6f 74 65 20 50 50 | .authenticating.with.a.remote.PP |
8f9e0 | 50 6f 45 20 65 6e 64 70 6f 69 6e 74 2e 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 | PoE.endpoint..Authentication.is. |
8fa00 | 6f 70 74 69 6f 6e 61 6c 20 66 72 6f 6d 20 74 68 65 20 73 79 73 74 65 6d 27 73 20 70 6f 69 6e 74 | optional.from.the.system's.point |
8fa20 | 20 6f 66 20 76 69 65 77 20 62 75 74 20 6d 6f 73 74 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 | .of.view.but.most.service.provid |
8fa40 | 65 72 73 20 72 65 71 75 69 72 65 20 69 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | ers.require.it..Use.this.command |
8fa60 | 20 74 6f 20 73 65 74 20 74 68 65 20 74 61 72 67 65 74 20 74 6f 20 75 73 65 2e 20 41 63 74 69 6f | .to.set.the.target.to.use..Actio |
8fa80 | 6e 20 71 75 65 75 65 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 74 6f 20 75 73 65 20 74 | n.queue.must.be.defined.to.use.t |
8faa0 | 68 69 73 20 73 65 74 74 69 6e 67 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | his.setting.Use.this.command.to. |
8fac0 | 73 65 74 20 74 68 65 20 75 73 65 72 6e 61 6d 65 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 | set.the.username.for.authenticat |
8fae0 | 69 6e 67 20 77 69 74 68 20 61 20 72 65 6d 6f 74 65 20 50 50 50 6f 45 20 65 6e 64 70 6f 69 6e 74 | ing.with.a.remote.PPPoE.endpoint |
8fb00 | 2e 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 6f 70 74 69 6f 6e 61 6c 20 66 72 6f | ..Authentication.is.optional.fro |
8fb20 | 6d 20 74 68 65 20 73 79 73 74 65 6d 27 73 20 70 6f 69 6e 74 20 6f 66 20 76 69 65 77 20 62 75 74 | m.the.system's.point.of.view.but |
8fb40 | 20 6d 6f 73 74 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 73 20 72 65 71 75 69 72 65 20 | .most.service.providers.require. |
8fb60 | 69 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 49 50 76 | it..Use.this.command.to.show.IPv |
8fb80 | 36 20 42 6f 72 64 65 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 20 69 6e 66 6f 72 6d | 6.Border.Gateway.Protocol.inform |
8fba0 | 61 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 | ation..Use.this.command.to.show. |
8fbc0 | 49 50 76 36 20 4e 65 69 67 68 62 6f 72 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c | IPv6.Neighbor.Discovery.Protocol |
8fbe0 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | .information..Use.this.command.t |
8fc00 | 6f 20 73 68 6f 77 20 49 50 76 36 20 66 6f 72 77 61 72 64 69 6e 67 20 73 74 61 74 75 73 2e 00 55 | o.show.IPv6.forwarding.status..U |
8fc20 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 49 50 76 36 20 6d 75 6c | se.this.command.to.show.IPv6.mul |
8fc40 | 74 69 63 61 73 74 20 67 72 6f 75 70 20 6d 65 6d 62 65 72 73 68 69 70 2e 00 55 73 65 20 74 68 69 | ticast.group.membership..Use.thi |
8fc60 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 49 50 76 36 20 72 6f 75 74 65 73 2e 00 55 | s.command.to.show.IPv6.routes..U |
8fc80 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 61 6c 6c 20 49 50 76 36 | se.this.command.to.show.all.IPv6 |
8fca0 | 20 61 63 63 65 73 73 20 6c 69 73 74 73 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | .access.lists.Use.this.command.t |
8fcc0 | 6f 20 73 68 6f 77 20 61 6c 6c 20 49 50 76 36 20 70 72 65 66 69 78 20 6c 69 73 74 73 00 55 73 65 | o.show.all.IPv6.prefix.lists.Use |
8fce0 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 74 68 65 20 73 74 61 74 75 73 | .this.command.to.show.the.status |
8fd00 | 20 6f 66 20 74 68 65 20 52 49 50 4e 47 20 70 72 6f 74 6f 63 6f 6c 00 55 73 65 20 74 68 69 73 20 | .of.the.RIPNG.protocol.Use.this. |
8fd20 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 61 20 44 4e 53 20 73 65 72 76 65 72 20 | command.to.specify.a.DNS.server. |
8fd40 | 66 6f 72 20 74 68 65 20 73 79 73 74 65 6d 20 74 6f 20 62 65 20 75 73 65 64 20 66 6f 72 20 44 4e | for.the.system.to.be.used.for.DN |
8fd60 | 53 20 6c 6f 6f 6b 75 70 73 2e 20 4d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 44 4e 53 20 73 65 72 | S.lookups..More.than.one.DNS.ser |
8fd80 | 76 65 72 20 63 61 6e 20 62 65 20 61 64 64 65 64 2c 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 6f 6e | ver.can.be.added,.configuring.on |
8fda0 | 65 20 61 74 20 61 20 74 69 6d 65 2e 20 42 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 | e.at.a.time..Both.IPv4.and.IPv6. |
8fdc0 | 61 64 64 72 65 73 73 65 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 55 73 65 20 74 68 69 | addresses.are.supported..Use.thi |
8fde0 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 61 20 64 6f 6d 61 69 6e 20 6e 61 | s.command.to.specify.a.domain.na |
8fe00 | 6d 65 20 74 6f 20 62 65 20 61 70 70 65 6e 64 65 64 20 74 6f 20 64 6f 6d 61 69 6e 2d 6e 61 6d 65 | me.to.be.appended.to.domain-name |
8fe20 | 73 20 77 69 74 68 69 6e 20 55 52 4c 73 20 74 68 61 74 20 64 6f 20 6e 6f 74 20 69 6e 63 6c 75 64 | s.within.URLs.that.do.not.includ |
8fe40 | 65 20 61 20 64 6f 74 20 60 60 2e 60 60 20 74 68 65 20 64 6f 6d 61 69 6e 20 69 73 20 61 70 70 65 | e.a.dot.``.``.the.domain.is.appe |
8fe60 | 6e 64 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 | nded..Use.this.command.to.specif |
8fe80 | 79 20 61 20 73 65 72 76 69 63 65 20 6e 61 6d 65 20 62 79 20 77 68 69 63 68 20 74 68 65 20 6c 6f | y.a.service.name.by.which.the.lo |
8fea0 | 63 61 6c 20 50 50 50 6f 45 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 73 65 6c 65 63 74 20 61 | cal.PPPoE.interface.can.select.a |
8fec0 | 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 73 20 74 6f 20 63 6f 6e 6e 65 63 74 20 77 | ccess.concentrators.to.connect.w |
8fee0 | 69 74 68 2e 20 49 74 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 20 61 6e 79 20 61 63 63 65 | ith..It.will.connect.to.any.acce |
8ff00 | 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 20 69 66 20 6e 6f 74 20 73 65 74 2e 00 55 73 65 20 | ss.concentrator.if.not.set..Use. |
8ff20 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 75 73 65 20 4c 61 79 65 72 20 34 20 69 6e 66 6f | this.command.to.use.Layer.4.info |
8ff40 | 72 6d 61 74 69 6f 6e 20 66 6f 72 20 49 50 76 34 20 45 43 4d 50 20 68 61 73 68 69 6e 67 2e 00 55 | rmation.for.IPv4.ECMP.hashing..U |
8ff60 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 75 73 65 20 61 20 43 69 73 63 6f 20 6e | se.this.command.to.use.a.Cisco.n |
8ff80 | 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 74 20 66 6f 72 6d 61 74 20 74 6f 20 73 65 6e 64 20 61 6e 64 20 | on-compliant.format.to.send.and. |
8ffa0 | 69 6e 74 65 72 70 72 65 74 20 74 68 65 20 44 75 61 6c 2d 53 74 61 63 6b 20 63 61 70 61 62 69 6c | interpret.the.Dual-Stack.capabil |
8ffc0 | 69 74 79 20 54 4c 56 20 66 6f 72 20 49 50 76 36 20 4c 44 50 20 63 6f 6d 6d 75 6e 69 63 61 74 69 | ity.TLV.for.IPv6.LDP.communicati |
8ffe0 | 6f 6e 73 2e 20 54 68 69 73 20 69 73 20 72 65 6c 61 74 65 64 20 74 6f 20 3a 72 66 63 3a 60 37 35 | ons..This.is.related.to.:rfc:`75 |
90000 | 35 32 60 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 75 73 65 20 6f 72 64 | 52`..Use.this.command.to.use.ord |
90020 | 65 72 65 64 20 6c 61 62 65 6c 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 63 6f 6e 74 72 6f 6c 20 | ered.label.distribution.control. |
90040 | 6d 6f 64 65 2e 20 46 52 52 20 62 79 20 64 65 66 61 75 6c 74 20 75 73 65 73 20 69 6e 64 65 70 65 | mode..FRR.by.default.uses.indepe |
90060 | 6e 64 65 6e 74 20 6c 61 62 65 6c 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 63 6f 6e 74 72 6f 6c | ndent.label.distribution.control |
90080 | 20 6d 6f 64 65 20 66 6f 72 20 6c 61 62 65 6c 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 20 20 54 | .mode.for.label.distribution...T |
900a0 | 68 69 73 20 69 73 20 72 65 6c 61 74 65 64 20 74 6f 20 3a 72 66 63 3a 60 35 30 33 36 60 2e 00 55 | his.is.related.to.:rfc:`5036`..U |
900c0 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 75 73 65 72 20 4c 61 79 65 72 20 34 20 | se.this.command.to.user.Layer.4. |
900e0 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 45 43 4d 50 20 68 61 73 68 69 6e 67 2e 00 55 73 | information.for.ECMP.hashing..Us |
90100 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 76 69 65 77 20 6f 70 65 72 61 74 69 6f 6e | e.this.command.to.view.operation |
90120 | 61 6c 20 73 74 61 74 75 73 20 61 6e 64 20 64 65 74 61 69 6c 73 20 77 69 72 65 6c 65 73 73 2d 73 | al.status.and.details.wireless-s |
90140 | 70 65 63 69 66 69 63 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 61 6c 6c 20 77 69 | pecific.information.about.all.wi |
90160 | 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | reless.interfaces..Use.this.comm |
90180 | 61 6e 64 20 74 6f 20 76 69 65 77 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 73 74 61 74 75 73 20 61 | and.to.view.operational.status.a |
901a0 | 6e 64 20 77 69 72 65 6c 65 73 73 2d 73 70 65 63 69 66 69 63 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | nd.wireless-specific.information |
901c0 | 20 61 62 6f 75 74 20 61 6c 6c 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 73 2e 00 | .about.all.wireless.interfaces.. |
901e0 | 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 76 69 65 77 20 77 69 72 65 6c 65 73 | Use.this.command.to.view.wireles |
90200 | 73 20 69 6e 74 65 72 66 61 63 65 20 71 75 65 75 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 54 | s.interface.queue.information..T |
90220 | 68 65 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 | he.wireless.interface.identifier |
90240 | 20 63 61 6e 20 72 61 6e 67 65 20 66 72 6f 6d 20 77 6c 61 6e 30 20 74 6f 20 77 6c 61 6e 39 39 39 | .can.range.from.wlan0.to.wlan999 |
90260 | 2e 00 55 73 65 64 20 66 6f 72 20 74 72 6f 75 62 6c 65 73 68 6f 6f 74 69 6e 67 2e 00 55 73 65 64 | ..Used.for.troubleshooting..Used |
90280 | 20 74 6f 20 62 6c 6f 63 6b 20 61 20 73 70 65 63 69 66 69 63 20 6d 69 6d 65 2d 74 79 70 65 2e 00 | .to.block.a.specific.mime-type.. |
902a0 | 55 73 65 64 20 74 6f 20 62 6c 6f 63 6b 20 73 70 65 63 69 66 69 63 20 64 6f 6d 61 69 6e 73 20 62 | Used.to.block.specific.domains.b |
902c0 | 79 20 74 68 65 20 50 72 6f 78 79 2e 20 53 70 65 63 69 66 79 69 6e 67 20 22 76 79 6f 73 2e 6e 65 | y.the.Proxy..Specifying."vyos.ne |
902e0 | 74 22 20 77 69 6c 6c 20 62 6c 6f 63 6b 20 61 6c 6c 20 61 63 63 65 73 73 20 74 6f 20 76 79 6f 73 | t".will.block.all.access.to.vyos |
90300 | 2e 6e 65 74 2c 20 61 6e 64 20 73 70 65 63 69 66 79 69 6e 67 20 22 2e 78 78 78 22 20 77 69 6c 6c | .net,.and.specifying.".xxx".will |
90320 | 20 62 6c 6f 63 6b 20 61 6c 6c 20 61 63 63 65 73 73 20 74 6f 20 55 52 4c 73 20 68 61 76 69 6e 67 | .block.all.access.to.URLs.having |
90340 | 20 61 6e 20 55 52 4c 20 65 6e 64 69 6e 67 20 6f 6e 20 2e 78 78 78 2e 00 55 73 65 72 20 69 6e 74 | .an.URL.ending.on..xxx..User.int |
90360 | 65 72 66 61 63 65 20 63 61 6e 20 62 65 20 70 75 74 20 74 6f 20 56 52 46 20 63 6f 6e 74 65 78 74 | erface.can.be.put.to.VRF.context |
90380 | 20 76 69 61 20 52 41 44 49 55 53 20 41 63 63 65 73 73 2d 41 63 63 65 70 74 20 70 61 63 6b 65 74 | .via.RADIUS.Access-Accept.packet |
903a0 | 2c 20 6f 72 20 63 68 61 6e 67 65 20 69 74 20 76 69 61 20 52 41 44 49 55 53 20 43 6f 41 2e 20 60 | ,.or.change.it.via.RADIUS.CoA..` |
903c0 | 60 41 63 63 65 6c 2d 56 52 46 2d 4e 61 6d 65 60 60 20 69 73 20 75 73 65 64 20 66 72 6f 6d 20 74 | `Accel-VRF-Name``.is.used.from.t |
903e0 | 68 65 73 65 20 70 75 72 70 6f 73 65 73 2e 20 49 74 20 69 73 20 63 75 73 74 6f 6d 20 60 41 43 43 | hese.purposes..It.is.custom.`ACC |
90400 | 45 4c 2d 50 50 50 20 61 74 74 72 69 62 75 74 65 60 5f 2e 20 44 65 66 69 6e 65 20 69 74 20 69 6e | EL-PPP.attribute`_..Define.it.in |
90420 | 20 79 6f 75 72 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 55 73 65 72 2d 6c 65 76 65 6c 20 | .your.RADIUS.server..User-level. |
90440 | 6d 65 73 73 61 67 65 73 00 55 73 69 6e 67 20 27 73 6f 66 74 2d 72 65 63 6f 6e 66 69 67 75 72 61 | messages.Using.'soft-reconfigura |
90460 | 74 69 6f 6e 27 20 77 65 20 67 65 74 20 74 68 65 20 70 6f 6c 69 63 79 20 75 70 64 61 74 65 20 77 | tion'.we.get.the.policy.update.w |
90480 | 69 74 68 6f 75 74 20 62 6f 75 6e 63 69 6e 67 20 74 68 65 20 6e 65 69 67 68 62 6f 72 2e 00 55 73 | ithout.bouncing.the.neighbor..Us |
904a0 | 69 6e 67 20 2a 2a 6f 70 65 6e 76 70 6e 2d 6f 70 74 69 6f 6e 20 2d 72 65 6e 65 67 2d 73 65 63 2a | ing.**openvpn-option.-reneg-sec* |
904c0 | 2a 20 63 61 6e 20 62 65 20 74 72 69 63 6b 79 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 | *.can.be.tricky..This.option.is. |
904e0 | 75 73 65 64 20 74 6f 20 72 65 6e 65 67 6f 74 69 61 74 65 20 64 61 74 61 20 63 68 61 6e 6e 65 6c | used.to.renegotiate.data.channel |
90500 | 20 61 66 74 65 72 20 6e 20 73 65 63 6f 6e 64 73 2e 20 57 68 65 6e 20 75 73 65 64 20 61 74 20 62 | .after.n.seconds..When.used.at.b |
90520 | 6f 74 68 20 73 65 72 76 65 72 20 61 6e 64 20 63 6c 69 65 6e 74 2c 20 74 68 65 20 6c 6f 77 65 72 | oth.server.and.client,.the.lower |
90540 | 20 76 61 6c 75 65 20 77 69 6c 6c 20 74 72 69 67 67 65 72 20 74 68 65 20 72 65 6e 65 67 6f 74 69 | .value.will.trigger.the.renegoti |
90560 | 61 74 69 6f 6e 2e 20 49 66 20 79 6f 75 20 73 65 74 20 69 74 20 74 6f 20 30 20 6f 6e 20 6f 6e 65 | ation..If.you.set.it.to.0.on.one |
90580 | 20 73 69 64 65 20 6f 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 28 74 6f 20 64 69 73 61 | .side.of.the.connection.(to.disa |
905a0 | 62 6c 65 20 69 74 29 2c 20 74 68 65 20 63 68 6f 73 65 6e 20 76 61 6c 75 65 20 6f 6e 20 74 68 65 | ble.it),.the.chosen.value.on.the |
905c0 | 20 6f 74 68 65 72 20 73 69 64 65 20 77 69 6c 6c 20 64 65 74 65 72 6d 69 6e 65 20 77 68 65 6e 20 | .other.side.will.determine.when. |
905e0 | 74 68 65 20 72 65 6e 65 67 6f 74 69 61 74 69 6f 6e 20 77 69 6c 6c 20 6f 63 63 75 72 2e 00 55 73 | the.renegotiation.will.occur..Us |
90600 | 69 6e 67 20 42 47 50 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 00 55 73 69 6e 67 20 42 47 50 20 | ing.BGP.confederation.Using.BGP. |
90620 | 72 6f 75 74 65 2d 72 65 66 6c 65 63 74 6f 72 73 00 55 73 69 6e 67 20 56 4c 41 4e 20 61 77 61 72 | route-reflectors.Using.VLAN.awar |
90640 | 65 20 42 72 69 64 67 65 00 55 73 69 6e 67 20 6f 75 72 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e | e.Bridge.Using.our.documentation |
90660 | 20 63 68 61 70 74 65 72 20 2d 20 3a 72 65 66 3a 60 70 6b 69 60 20 67 65 6e 65 72 61 74 65 20 61 | .chapter.-.:ref:`pki`.generate.a |
90680 | 6e 64 20 69 6e 73 74 61 6c 6c 20 43 41 20 61 6e 64 20 53 65 72 76 65 72 20 63 65 72 74 69 66 69 | nd.install.CA.and.Server.certifi |
906a0 | 63 61 74 65 00 55 73 69 6e 67 20 74 68 65 20 6f 70 65 72 61 74 69 6f 6e 20 6d 6f 64 65 20 63 6f | cate.Using.the.operation.mode.co |
906c0 | 6d 6d 61 6e 64 20 74 6f 20 76 69 65 77 20 42 72 69 64 67 65 20 49 6e 66 6f 72 6d 61 74 69 6f 6e | mmand.to.view.Bridge.Information |
906e0 | 00 55 73 69 6e 67 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2c 20 79 6f 75 20 77 69 6c 6c 20 63 72 | .Using.this.command,.you.will.cr |
90700 | 65 61 74 65 20 61 20 6e 65 77 20 63 6c 69 65 6e 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | eate.a.new.client.configuration. |
90720 | 77 68 69 63 68 20 63 61 6e 20 63 6f 6e 6e 65 63 74 20 74 6f 20 60 60 69 6e 74 65 72 66 61 63 65 | which.can.connect.to.``interface |
90740 | 60 60 20 6f 6e 20 74 68 69 73 20 72 6f 75 74 65 72 2e 20 54 68 65 20 70 75 62 6c 69 63 20 6b 65 | ``.on.this.router..The.public.ke |
90760 | 79 20 66 72 6f 6d 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 20 69 | y.from.the.specified.interface.i |
90780 | 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 65 78 74 72 61 63 74 65 64 20 61 6e 64 20 65 6d | s.automatically.extracted.and.em |
907a0 | 62 65 64 64 65 64 20 69 6e 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 55 | bedded.into.the.configuration..U |
907c0 | 73 75 61 6c 6c 79 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 75 73 65 | sually.this.configuration.is.use |
907e0 | 64 20 69 6e 20 50 45 73 20 28 50 72 6f 76 69 64 65 72 20 45 64 67 65 29 20 74 6f 20 72 65 70 6c | d.in.PEs.(Provider.Edge).to.repl |
90800 | 61 63 65 20 74 68 65 20 69 6e 63 6f 6d 69 6e 67 20 63 75 73 74 6f 6d 65 72 20 41 53 20 6e 75 6d | ace.the.incoming.customer.AS.num |
90820 | 62 65 72 20 73 6f 20 74 68 65 20 63 6f 6e 6e 65 63 74 65 64 20 43 45 20 28 20 43 75 73 74 6f 6d | ber.so.the.connected.CE.(.Custom |
90840 | 65 72 20 45 64 67 65 29 20 63 61 6e 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 41 53 20 6e 75 6d | er.Edge).can.use.the.same.AS.num |
90860 | 62 65 72 20 61 73 20 74 68 65 20 6f 74 68 65 72 20 63 75 73 74 6f 6d 65 72 20 73 69 74 65 73 2e | ber.as.the.other.customer.sites. |
90880 | 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 63 75 73 74 6f 6d 65 72 73 20 6f 66 20 74 68 65 20 70 72 | .This.allows.customers.of.the.pr |
908a0 | 6f 76 69 64 65 72 20 6e 65 74 77 6f 72 6b 20 74 6f 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 41 | ovider.network.to.use.the.same.A |
908c0 | 53 20 6e 75 6d 62 65 72 20 61 63 72 6f 73 73 20 74 68 65 69 72 20 73 69 74 65 73 2e 00 56 48 54 | S.number.across.their.sites..VHT |
908e0 | 20 28 56 65 72 79 20 48 69 67 68 20 54 68 72 6f 75 67 68 70 75 74 29 20 63 61 70 61 62 69 6c 69 | .(Very.High.Throughput).capabili |
90900 | 74 69 65 73 20 28 38 30 32 2e 31 31 61 63 29 00 56 48 54 20 6c 69 6e 6b 20 61 64 61 70 74 61 74 | ties.(802.11ac).VHT.link.adaptat |
90920 | 69 6f 6e 20 63 61 70 61 62 69 6c 69 74 69 65 73 00 56 48 54 20 6f 70 65 72 61 74 69 6e 67 20 63 | ion.capabilities.VHT.operating.c |
90940 | 68 61 6e 6e 65 6c 20 63 65 6e 74 65 72 20 66 72 65 71 75 65 6e 63 79 20 2d 20 63 65 6e 74 65 72 | hannel.center.frequency.-.center |
90960 | 20 66 72 65 71 20 31 20 28 66 6f 72 20 75 73 65 20 77 69 74 68 20 38 30 2c 20 38 30 2b 38 30 20 | .freq.1.(for.use.with.80,.80+80. |
90980 | 61 6e 64 20 31 36 30 20 6d 6f 64 65 73 29 00 56 48 54 20 6f 70 65 72 61 74 69 6e 67 20 63 68 61 | and.160.modes).VHT.operating.cha |
909a0 | 6e 6e 65 6c 20 63 65 6e 74 65 72 20 66 72 65 71 75 65 6e 63 79 20 2d 20 63 65 6e 74 65 72 20 66 | nnel.center.frequency.-.center.f |
909c0 | 72 65 71 20 32 20 28 66 6f 72 20 75 73 65 20 77 69 74 68 20 74 68 65 20 38 30 2b 38 30 20 6d 6f | req.2.(for.use.with.the.80+80.mo |
909e0 | 64 65 29 00 56 4c 41 4e 00 56 4c 41 4e 20 31 30 20 6f 6e 20 6d 65 6d 62 65 72 20 69 6e 74 65 72 | de).VLAN.VLAN.10.on.member.inter |
90a00 | 66 61 63 65 20 60 65 74 68 32 60 20 28 41 43 43 45 53 53 20 6d 6f 64 65 29 00 56 4c 41 4e 20 45 | face.`eth2`.(ACCESS.mode).VLAN.E |
90a20 | 78 61 6d 70 6c 65 00 56 4c 41 4e 20 4f 70 74 69 6f 6e 73 00 56 4c 41 4e 20 6d 6f 6e 69 74 6f 72 | xample.VLAN.Options.VLAN.monitor |
90a40 | 20 66 6f 72 20 61 75 74 6f 6d 61 74 69 63 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 56 4c 41 4e 20 | .for.automatic.creation.of.VLAN. |
90a60 | 69 6e 74 65 72 66 61 63 65 73 20 66 6f 72 20 73 70 65 63 69 66 69 63 20 75 73 65 72 20 6f 6e 20 | interfaces.for.specific.user.on. |
90a80 | 73 70 65 63 69 66 69 63 20 3c 69 6e 74 65 72 66 61 63 65 3e 00 56 4c 41 4e 20 6e 61 6d 65 00 56 | specific.<interface>.VLAN.name.V |
90aa0 | 4c 41 4e 27 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 20 62 79 20 41 63 63 65 6c 2d 70 70 | LAN's.can.be.created.by.Accel-pp |
90ac0 | 70 20 6f 6e 20 74 68 65 20 66 6c 79 20 76 69 61 20 74 68 65 20 75 73 65 20 6f 66 20 61 20 4b 65 | p.on.the.fly.via.the.use.of.a.Ke |
90ae0 | 72 6e 65 6c 20 6d 6f 64 75 6c 65 20 6e 61 6d 65 64 20 60 60 76 6c 61 6e 5f 6d 6f 6e 60 60 2c 20 | rnel.module.named.``vlan_mon``,. |
90b00 | 77 68 69 63 68 20 69 73 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 69 6e 63 6f 6d 69 6e 67 20 76 6c 61 | which.is.monitoring.incoming.vla |
90b20 | 6e 73 20 61 6e 64 20 63 72 65 61 74 65 73 20 74 68 65 20 6e 65 63 65 73 73 61 72 79 20 56 4c 41 | ns.and.creates.the.necessary.VLA |
90b40 | 4e 20 69 66 20 72 65 71 75 69 72 65 64 20 61 6e 64 20 61 6c 6c 6f 77 65 64 2e 20 56 79 4f 53 20 | N.if.required.and.allowed..VyOS. |
90b60 | 73 75 70 70 6f 72 74 73 20 74 68 65 20 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 56 4c 41 4e 20 | supports.the.use.of.either.VLAN. |
90b80 | 49 44 27 73 20 6f 72 20 65 6e 74 69 72 65 20 72 61 6e 67 65 73 2c 20 62 6f 74 68 20 76 61 6c 75 | ID's.or.entire.ranges,.both.valu |
90ba0 | 65 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 | es.can.be.defined.at.the.same.ti |
90bc0 | 6d 65 20 66 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 00 56 4c 41 4e 27 73 20 63 61 6e 20 | me.for.an.interface..VLAN's.can. |
90be0 | 62 65 20 63 72 65 61 74 65 64 20 62 79 20 41 63 63 65 6c 2d 70 70 70 20 6f 6e 20 74 68 65 20 66 | be.created.by.Accel-ppp.on.the.f |
90c00 | 6c 79 20 76 69 61 20 74 68 65 20 75 73 65 20 6f 66 20 61 20 4b 65 72 6e 65 6c 20 6d 6f 64 75 6c | ly.via.the.use.of.a.Kernel.modul |
90c20 | 65 20 6e 61 6d 65 64 20 60 76 6c 61 6e 5f 6d 6f 6e 60 2c 20 77 68 69 63 68 20 69 73 20 6d 6f 6e | e.named.`vlan_mon`,.which.is.mon |
90c40 | 69 74 6f 72 69 6e 67 20 69 6e 63 6f 6d 69 6e 67 20 76 6c 61 6e 73 20 61 6e 64 20 63 72 65 61 74 | itoring.incoming.vlans.and.creat |
90c60 | 65 73 20 74 68 65 20 6e 65 63 65 73 73 61 72 79 20 56 4c 41 4e 20 69 66 20 72 65 71 75 69 72 65 | es.the.necessary.VLAN.if.require |
90c80 | 64 20 61 6e 64 20 61 6c 6c 6f 77 65 64 2e 20 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 74 68 65 | d.and.allowed..VyOS.supports.the |
90ca0 | 20 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 56 4c 41 4e 20 49 44 27 73 20 6f 72 20 65 6e 74 69 | .use.of.either.VLAN.ID's.or.enti |
90cc0 | 72 65 20 72 61 6e 67 65 73 2c 20 62 6f 74 68 20 76 61 6c 75 65 73 20 63 61 6e 20 62 65 20 64 65 | re.ranges,.both.values.can.be.de |
90ce0 | 66 69 6e 65 64 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 20 66 6f 72 20 61 6e 20 69 6e | fined.at.the.same.time.for.an.in |
90d00 | 74 65 72 66 61 63 65 2e 00 56 4d 77 61 72 65 20 75 73 65 72 73 20 73 68 6f 75 6c 64 20 65 6e 73 | terface..VMware.users.should.ens |
90d20 | 75 72 65 20 74 68 61 74 20 61 20 56 4d 58 4e 45 54 33 20 61 64 61 70 74 65 72 20 69 73 20 75 73 | ure.that.a.VMXNET3.adapter.is.us |
90d40 | 65 64 2e 20 45 31 30 30 30 20 61 64 61 70 74 65 72 73 20 68 61 76 65 20 6b 6e 6f 77 6e 20 69 73 | ed..E1000.adapters.have.known.is |
90d60 | 73 75 65 73 20 77 69 74 68 20 47 52 45 20 70 72 6f 63 65 73 73 69 6e 67 2e 00 56 50 4e 00 56 50 | sues.with.GRE.processing..VPN.VP |
90d80 | 4e 2d 63 6c 69 65 6e 74 73 20 77 69 6c 6c 20 72 65 71 75 65 73 74 20 63 6f 6e 66 69 67 75 72 61 | N-clients.will.request.configura |
90da0 | 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 2c 20 6f 70 74 69 6f 6e 61 6c 6c 79 20 79 6f 75 20 | tion.parameters,.optionally.you. |
90dc0 | 63 61 6e 20 44 4e 53 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 2e | can.DNS.parameter.to.the.client. |
90de0 | 00 56 52 46 00 56 52 46 20 52 6f 75 74 65 20 4c 65 61 6b 69 6e 67 00 56 52 46 20 61 6e 64 20 4e | .VRF.VRF.Route.Leaking.VRF.and.N |
90e00 | 41 54 00 56 52 46 20 62 6c 75 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 00 56 52 46 20 64 65 | AT.VRF.blue.routing.table.VRF.de |
90e20 | 66 61 75 6c 74 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 00 56 52 46 20 72 65 64 20 72 6f 75 74 | fault.routing.table.VRF.red.rout |
90e40 | 69 6e 67 20 74 61 62 6c 65 00 56 52 46 20 72 6f 75 74 65 20 6c 65 61 6b 69 6e 67 00 56 52 46 20 | ing.table.VRF.route.leaking.VRF. |
90e60 | 74 6f 70 6f 6c 6f 67 79 20 65 78 61 6d 70 6c 65 00 56 52 52 50 20 28 56 69 72 74 75 61 6c 20 52 | topology.example.VRRP.(Virtual.R |
90e80 | 6f 75 74 65 72 20 52 65 64 75 6e 64 61 6e 63 79 20 50 72 6f 74 6f 63 6f 6c 29 20 70 72 6f 76 69 | outer.Redundancy.Protocol).provi |
90ea0 | 64 65 73 20 61 63 74 69 76 65 2f 62 61 63 6b 75 70 20 72 65 64 75 6e 64 61 6e 63 79 20 66 6f 72 | des.active/backup.redundancy.for |
90ec0 | 20 72 6f 75 74 65 72 73 2e 20 45 76 65 72 79 20 56 52 52 50 20 72 6f 75 74 65 72 20 68 61 73 20 | .routers..Every.VRRP.router.has. |
90ee0 | 61 20 70 68 79 73 69 63 61 6c 20 49 50 2f 49 50 76 36 20 61 64 64 72 65 73 73 2c 20 61 6e 64 20 | a.physical.IP/IPv6.address,.and. |
90f00 | 61 20 76 69 72 74 75 61 6c 20 61 64 64 72 65 73 73 2e 20 4f 6e 20 73 74 61 72 74 75 70 2c 20 72 | a.virtual.address..On.startup,.r |
90f20 | 6f 75 74 65 72 73 20 65 6c 65 63 74 20 74 68 65 20 6d 61 73 74 65 72 2c 20 61 6e 64 20 74 68 65 | outers.elect.the.master,.and.the |
90f40 | 20 72 6f 75 74 65 72 20 77 69 74 68 20 74 68 65 20 68 69 67 68 65 73 74 20 70 72 69 6f 72 69 74 | .router.with.the.highest.priorit |
90f60 | 79 20 62 65 63 6f 6d 65 73 20 74 68 65 20 6d 61 73 74 65 72 20 61 6e 64 20 61 73 73 69 67 6e 73 | y.becomes.the.master.and.assigns |
90f80 | 20 74 68 65 20 76 69 72 74 75 61 6c 20 61 64 64 72 65 73 73 20 74 6f 20 69 74 73 20 69 6e 74 65 | .the.virtual.address.to.its.inte |
90fa0 | 72 66 61 63 65 2e 20 41 6c 6c 20 72 6f 75 74 65 72 73 20 77 69 74 68 20 6c 6f 77 65 72 20 70 72 | rface..All.routers.with.lower.pr |
90fc0 | 69 6f 72 69 74 69 65 73 20 62 65 63 6f 6d 65 20 62 61 63 6b 75 70 20 72 6f 75 74 65 72 73 2e 20 | iorities.become.backup.routers.. |
90fe0 | 54 68 65 20 6d 61 73 74 65 72 20 74 68 65 6e 20 73 74 61 72 74 73 20 73 65 6e 64 69 6e 67 20 6b | The.master.then.starts.sending.k |
91000 | 65 65 70 61 6c 69 76 65 20 70 61 63 6b 65 74 73 20 74 6f 20 6e 6f 74 69 66 79 20 6f 74 68 65 72 | eepalive.packets.to.notify.other |
91020 | 20 72 6f 75 74 65 72 73 20 74 68 61 74 20 69 74 27 73 20 61 76 61 69 6c 61 62 6c 65 2e 20 49 66 | .routers.that.it's.available..If |
91040 | 20 74 68 65 20 6d 61 73 74 65 72 20 66 61 69 6c 73 20 61 6e 64 20 73 74 6f 70 73 20 73 65 6e 64 | .the.master.fails.and.stops.send |
91060 | 69 6e 67 20 6b 65 65 70 61 6c 69 76 65 20 70 61 63 6b 65 74 73 2c 20 74 68 65 20 72 6f 75 74 65 | ing.keepalive.packets,.the.route |
91080 | 72 20 77 69 74 68 20 74 68 65 20 6e 65 78 74 20 68 69 67 68 65 73 74 20 70 72 69 6f 72 69 74 79 | r.with.the.next.highest.priority |
910a0 | 20 62 65 63 6f 6d 65 73 20 74 68 65 20 6e 65 77 20 6d 61 73 74 65 72 20 61 6e 64 20 74 61 6b 65 | .becomes.the.new.master.and.take |
910c0 | 73 20 6f 76 65 72 20 74 68 65 20 76 69 72 74 75 61 6c 20 61 64 64 72 65 73 73 2e 00 56 52 52 50 | s.over.the.virtual.address..VRRP |
910e0 | 20 63 61 6e 20 75 73 65 20 74 77 6f 20 6d 6f 64 65 73 3a 20 70 72 65 65 6d 70 74 69 76 65 20 61 | .can.use.two.modes:.preemptive.a |
91100 | 6e 64 20 6e 6f 6e 2d 70 72 65 65 6d 70 74 69 76 65 2e 20 49 6e 20 74 68 65 20 70 72 65 65 6d 70 | nd.non-preemptive..In.the.preemp |
91120 | 74 69 76 65 20 6d 6f 64 65 2c 20 69 66 20 61 20 72 6f 75 74 65 72 20 77 69 74 68 20 61 20 68 69 | tive.mode,.if.a.router.with.a.hi |
91140 | 67 68 65 72 20 70 72 69 6f 72 69 74 79 20 66 61 69 6c 73 20 61 6e 64 20 74 68 65 6e 20 63 6f 6d | gher.priority.fails.and.then.com |
91160 | 65 73 20 62 61 63 6b 2c 20 72 6f 75 74 65 72 73 20 77 69 74 68 20 6c 6f 77 65 72 20 70 72 69 6f | es.back,.routers.with.lower.prio |
91180 | 72 69 74 79 20 77 69 6c 6c 20 67 69 76 65 20 75 70 20 74 68 65 69 72 20 6d 61 73 74 65 72 20 73 | rity.will.give.up.their.master.s |
911a0 | 74 61 74 75 73 2e 20 49 6e 20 6e 6f 6e 2d 70 72 65 65 6d 70 74 69 76 65 20 6d 6f 64 65 2c 20 74 | tatus..In.non-preemptive.mode,.t |
911c0 | 68 65 20 6e 65 77 6c 79 20 65 6c 65 63 74 65 64 20 6d 61 73 74 65 72 20 77 69 6c 6c 20 6b 65 65 | he.newly.elected.master.will.kee |
911e0 | 70 20 74 68 65 20 6d 61 73 74 65 72 20 73 74 61 74 75 73 20 61 6e 64 20 74 68 65 20 76 69 72 74 | p.the.master.status.and.the.virt |
91200 | 75 61 6c 20 61 64 64 72 65 73 73 20 69 6e 64 65 66 69 6e 69 74 65 6c 79 2e 00 56 52 52 50 20 66 | ual.address.indefinitely..VRRP.f |
91220 | 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 63 61 6e 20 62 65 20 65 78 74 65 6e 64 65 64 20 77 69 74 | unctionality.can.be.extended.wit |
91240 | 68 20 73 63 72 69 70 74 73 2e 20 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 74 77 6f 20 6b 69 6e | h.scripts..VyOS.supports.two.kin |
91260 | 64 73 20 6f 66 20 73 63 72 69 70 74 73 3a 20 68 65 61 6c 74 68 20 63 68 65 63 6b 20 73 63 72 69 | ds.of.scripts:.health.check.scri |
91280 | 70 74 73 20 61 6e 64 20 74 72 61 6e 73 69 74 69 6f 6e 20 73 63 72 69 70 74 73 2e 20 48 65 61 6c | pts.and.transition.scripts..Heal |
912a0 | 74 68 20 63 68 65 63 6b 20 73 63 72 69 70 74 73 20 65 78 65 63 75 74 65 20 63 75 73 74 6f 6d 20 | th.check.scripts.execute.custom. |
912c0 | 63 68 65 63 6b 73 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 6d 61 73 74 65 72 | checks.in.addition.to.the.master |
912e0 | 20 72 6f 75 74 65 72 20 72 65 61 63 68 61 62 69 6c 69 74 79 2e 20 54 72 61 6e 73 69 74 69 6f 6e | .router.reachability..Transition |
91300 | 20 73 63 72 69 70 74 73 20 61 72 65 20 65 78 65 63 75 74 65 64 20 77 68 65 6e 20 56 52 52 50 20 | .scripts.are.executed.when.VRRP. |
91320 | 73 74 61 74 65 20 63 68 61 6e 67 65 73 20 66 72 6f 6d 20 6d 61 73 74 65 72 20 74 6f 20 62 61 63 | state.changes.from.master.to.bac |
91340 | 6b 75 70 20 6f 72 20 66 61 75 6c 74 20 61 6e 64 20 76 69 63 65 20 76 65 72 73 61 20 61 6e 64 20 | kup.or.fault.and.vice.versa.and. |
91360 | 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 | can.be.used.to.enable.or.disable |
91380 | 20 63 65 72 74 61 69 6e 20 73 65 72 76 69 63 65 73 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 2e 00 | .certain.services,.for.example.. |
913a0 | 56 52 52 50 20 67 72 6f 75 70 73 20 61 72 65 20 63 72 65 61 74 65 64 20 77 69 74 68 20 74 68 65 | VRRP.groups.are.created.with.the |
913c0 | 20 60 60 73 65 74 20 68 69 67 68 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 20 76 72 72 70 20 67 72 | .``set.high-availability.vrrp.gr |
913e0 | 6f 75 70 20 24 47 52 4f 55 50 5f 4e 41 4d 45 60 60 20 63 6f 6d 6d 61 6e 64 73 2e 20 54 68 65 20 | oup.$GROUP_NAME``.commands..The. |
91400 | 72 65 71 75 69 72 65 64 20 70 61 72 61 6d 65 74 65 72 73 20 61 72 65 20 69 6e 74 65 72 66 61 63 | required.parameters.are.interfac |
91420 | 65 2c 20 76 72 69 64 2c 20 61 6e 64 20 61 64 64 72 65 73 73 2e 00 56 52 52 50 20 6b 65 65 70 61 | e,.vrid,.and.address..VRRP.keepa |
91440 | 6c 69 76 65 20 70 61 63 6b 65 74 73 20 75 73 65 20 6d 75 6c 74 69 63 61 73 74 2c 20 61 6e 64 20 | live.packets.use.multicast,.and. |
91460 | 56 52 52 50 20 73 65 74 75 70 73 20 61 72 65 20 6c 69 6d 69 74 65 64 20 74 6f 20 61 20 73 69 6e | VRRP.setups.are.limited.to.a.sin |
91480 | 67 6c 65 20 64 61 74 61 6c 69 6e 6b 20 6c 61 79 65 72 20 73 65 67 6d 65 6e 74 2e 20 59 6f 75 20 | gle.datalink.layer.segment..You. |
914a0 | 63 61 6e 20 73 65 74 75 70 20 6d 75 6c 74 69 70 6c 65 20 56 52 52 50 20 67 72 6f 75 70 73 20 28 | can.setup.multiple.VRRP.groups.( |
914c0 | 61 6c 73 6f 20 63 61 6c 6c 65 64 20 76 69 72 74 75 61 6c 20 72 6f 75 74 65 72 73 29 2e 20 56 69 | also.called.virtual.routers)..Vi |
914e0 | 72 74 75 61 6c 20 72 6f 75 74 65 72 73 20 61 72 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 | rtual.routers.are.identified.by. |
91500 | 61 20 56 52 49 44 20 28 56 69 72 74 75 61 6c 20 52 6f 75 74 65 72 20 49 44 65 6e 74 69 66 69 65 | a.VRID.(Virtual.Router.IDentifie |
91520 | 72 29 2e 20 49 66 20 79 6f 75 20 73 65 74 75 70 20 6d 75 6c 74 69 70 6c 65 20 67 72 6f 75 70 73 | r)..If.you.setup.multiple.groups |
91540 | 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 2c 20 74 68 65 69 72 20 56 52 | .on.the.same.interface,.their.VR |
91560 | 49 44 73 20 6d 75 73 74 20 62 65 20 75 6e 69 71 75 65 20 69 66 20 74 68 65 79 20 75 73 65 20 74 | IDs.must.be.unique.if.they.use.t |
91580 | 68 65 20 73 61 6d 65 20 61 64 64 72 65 73 73 20 66 61 6d 69 6c 79 2c 20 62 75 74 20 69 74 27 73 | he.same.address.family,.but.it's |
915a0 | 20 70 6f 73 73 69 62 6c 65 20 28 65 76 65 6e 20 69 66 20 6e 6f 74 20 72 65 63 6f 6d 6d 65 6e 64 | .possible.(even.if.not.recommend |
915c0 | 65 64 20 66 6f 72 20 72 65 61 64 61 62 69 6c 69 74 79 20 72 65 61 73 6f 6e 73 29 20 74 6f 20 75 | ed.for.readability.reasons).to.u |
915e0 | 73 65 20 64 75 70 6c 69 63 61 74 65 20 56 52 49 44 73 20 6f 6e 20 64 69 66 66 65 72 65 6e 74 20 | se.duplicate.VRIDs.on.different. |
91600 | 69 6e 74 65 72 66 61 63 65 73 2e 00 56 52 52 50 20 70 72 69 6f 72 69 74 79 20 63 61 6e 20 62 65 | interfaces..VRRP.priority.can.be |
91620 | 20 73 65 74 20 77 69 74 68 20 60 60 70 72 69 6f 72 69 74 79 60 60 20 6f 70 74 69 6f 6e 3a 00 56 | .set.with.``priority``.option:.V |
91640 | 54 49 20 2d 20 56 69 72 74 75 61 6c 20 54 75 6e 6e 65 6c 20 49 6e 74 65 72 66 61 63 65 00 56 58 | TI.-.Virtual.Tunnel.Interface.VX |
91660 | 4c 41 4e 00 56 58 4c 41 4e 20 69 73 20 61 6e 20 65 76 6f 6c 75 74 69 6f 6e 20 6f 66 20 65 66 66 | LAN.VXLAN.is.an.evolution.of.eff |
91680 | 6f 72 74 73 20 74 6f 20 73 74 61 6e 64 61 72 64 69 7a 65 20 61 6e 20 6f 76 65 72 6c 61 79 20 65 | orts.to.standardize.an.overlay.e |
916a0 | 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c 2e 20 49 74 20 69 6e 63 72 65 61 | ncapsulation.protocol..It.increa |
916c0 | 73 65 73 20 74 68 65 20 73 63 61 6c 61 62 69 6c 69 74 79 20 75 70 20 74 6f 20 31 36 20 6d 69 6c | ses.the.scalability.up.to.16.mil |
916e0 | 6c 69 6f 6e 20 6c 6f 67 69 63 61 6c 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 61 6c 6c 6f 77 73 | lion.logical.networks.and.allows |
91700 | 20 66 6f 72 20 6c 61 79 65 72 20 32 20 61 64 6a 61 63 65 6e 63 79 20 61 63 72 6f 73 73 20 49 50 | .for.layer.2.adjacency.across.IP |
91720 | 20 6e 65 74 77 6f 72 6b 73 2e 20 4d 75 6c 74 69 63 61 73 74 20 6f 72 20 75 6e 69 63 61 73 74 20 | .networks..Multicast.or.unicast. |
91740 | 77 69 74 68 20 68 65 61 64 2d 65 6e 64 20 72 65 70 6c 69 63 61 74 69 6f 6e 20 28 48 45 52 29 20 | with.head-end.replication.(HER). |
91760 | 69 73 20 75 73 65 64 20 74 6f 20 66 6c 6f 6f 64 20 62 72 6f 61 64 63 61 73 74 2c 20 75 6e 6b 6e | is.used.to.flood.broadcast,.unkn |
91780 | 6f 77 6e 20 75 6e 69 63 61 73 74 2c 20 61 6e 64 20 6d 75 6c 74 69 63 61 73 74 20 28 42 55 4d 29 | own.unicast,.and.multicast.(BUM) |
917a0 | 20 74 72 61 66 66 69 63 2e 00 56 58 4c 41 4e 20 73 70 65 63 69 66 69 63 20 6f 70 74 69 6f 6e 73 | .traffic..VXLAN.specific.options |
917c0 | 00 56 58 4c 41 4e 20 77 61 73 20 6f 66 66 69 63 69 61 6c 6c 79 20 64 6f 63 75 6d 65 6e 74 65 64 | .VXLAN.was.officially.documented |
917e0 | 20 62 79 20 74 68 65 20 49 45 54 46 20 69 6e 20 3a 72 66 63 3a 60 37 33 34 38 60 2e 00 56 61 6c | .by.the.IETF.in.:rfc:`7348`..Val |
91800 | 69 64 20 76 61 6c 75 65 73 20 61 72 65 20 30 2e 2e 32 35 35 2e 00 56 61 6c 75 65 00 56 61 6c 75 | id.values.are.0..255..Value.Valu |
91820 | 65 20 74 6f 20 73 65 6e 64 20 74 6f 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 69 6e 20 4e 41 | e.to.send.to.RADIUS.server.in.NA |
91840 | 53 2d 49 50 2d 41 64 64 72 65 73 73 20 61 74 74 72 69 62 75 74 65 20 61 6e 64 20 74 6f 20 62 65 | S-IP-Address.attribute.and.to.be |
91860 | 20 6d 61 74 63 68 65 64 20 69 6e 20 44 4d 2f 43 6f 41 20 72 65 71 75 65 73 74 73 2e 20 41 6c 73 | .matched.in.DM/CoA.requests..Als |
91880 | 6f 20 44 4d 2f 43 6f 41 20 73 65 72 76 65 72 20 77 69 6c 6c 20 62 69 6e 64 20 74 6f 20 74 68 61 | o.DM/CoA.server.will.bind.to.tha |
918a0 | 74 20 61 64 64 72 65 73 73 2e 00 56 61 6c 75 65 20 74 6f 20 73 65 6e 64 20 74 6f 20 52 41 44 49 | t.address..Value.to.send.to.RADI |
918c0 | 55 53 20 73 65 72 76 65 72 20 69 6e 20 4e 41 53 2d 49 64 65 6e 74 69 66 69 65 72 20 61 74 74 72 | US.server.in.NAS-Identifier.attr |
918e0 | 69 62 75 74 65 20 61 6e 64 20 74 6f 20 62 65 20 6d 61 74 63 68 65 64 20 69 6e 20 44 4d 2f 43 6f | ibute.and.to.be.matched.in.DM/Co |
91900 | 41 20 72 65 71 75 65 73 74 73 2e 00 56 65 72 69 66 69 63 61 74 69 6f 6e 00 56 65 72 69 66 69 63 | A.requests..Verification.Verific |
91920 | 61 74 69 6f 6e 3a 00 56 65 72 69 66 79 20 74 68 61 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 | ation:.Verify.that.connections.a |
91940 | 72 65 20 68 69 74 74 69 6e 67 20 74 68 65 20 72 75 6c 65 20 6f 6e 20 62 6f 74 68 20 73 69 64 65 | re.hitting.the.rule.on.both.side |
91960 | 73 3a 00 56 65 72 73 69 6f 6e 00 56 69 72 74 75 61 6c 20 45 74 68 65 72 6e 65 74 00 56 69 72 74 | s:.Version.Virtual.Ethernet.Virt |
91980 | 75 61 6c 20 53 65 72 76 65 72 20 61 6c 6c 6f 77 73 20 74 6f 20 4c 6f 61 64 2d 62 61 6c 61 6e 63 | ual.Server.allows.to.Load-balanc |
919a0 | 65 20 74 72 61 66 66 69 63 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 76 69 72 74 75 61 6c 2d 61 64 | e.traffic.destination.virtual-ad |
919c0 | 64 72 65 73 73 3a 70 6f 72 74 20 62 65 74 77 65 65 6e 20 73 65 76 65 72 61 6c 20 72 65 61 6c 20 | dress:port.between.several.real. |
919e0 | 73 65 72 76 65 72 73 2e 00 56 69 72 74 75 61 6c 2d 73 65 72 76 65 72 00 56 69 72 74 75 61 6c 2d | servers..Virtual-server.Virtual- |
91a00 | 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 20 56 52 | server.can.be.configured.with.VR |
91a20 | 52 50 20 76 69 72 74 75 61 6c 20 61 64 64 72 65 73 73 20 6f 72 20 77 69 74 68 6f 75 74 20 56 52 | RP.virtual.address.or.without.VR |
91a40 | 52 50 2e 00 56 6f 6c 75 6d 65 20 69 73 20 65 69 74 68 65 72 20 6d 6f 75 6e 74 65 64 20 61 73 20 | RP..Volume.is.either.mounted.as. |
91a60 | 72 77 20 28 72 65 61 64 2d 77 72 69 74 65 20 2d 20 64 65 66 61 75 6c 74 29 20 6f 72 20 72 6f 20 | rw.(read-write.-.default).or.ro. |
91a80 | 28 72 65 61 64 2d 6f 6e 6c 79 29 00 56 79 4f 53 20 31 2e 31 20 73 75 70 70 6f 72 74 65 64 20 6c | (read-only).VyOS.1.1.supported.l |
91aa0 | 6f 67 69 6e 20 61 73 20 75 73 65 72 20 60 60 72 6f 6f 74 60 60 2e 20 54 68 69 73 20 68 61 73 20 | ogin.as.user.``root``..This.has. |
91ac0 | 62 65 65 6e 20 72 65 6d 6f 76 65 64 20 64 75 65 20 74 6f 20 74 69 67 68 74 65 72 20 73 65 63 75 | been.removed.due.to.tighter.secu |
91ae0 | 72 69 74 79 20 69 6e 20 56 79 4f 53 20 31 2e 32 2e 00 56 79 4f 53 20 31 2e 33 20 28 65 71 75 75 | rity.in.VyOS.1.2..VyOS.1.3.(equu |
91b00 | 6c 65 75 73 29 20 73 75 70 70 6f 72 74 73 20 44 48 43 50 76 36 2d 50 44 20 28 3a 72 66 63 3a 60 | leus).supports.DHCPv6-PD.(:rfc:` |
91b20 | 33 36 33 33 60 29 2e 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e | 3633`)..DHCPv6.Prefix.Delegation |
91b40 | 20 69 73 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 6d 6f 73 74 20 49 53 50 73 20 77 68 6f 20 70 | .is.supported.by.most.ISPs.who.p |
91b60 | 72 6f 76 69 64 65 20 6e 61 74 69 76 65 20 49 50 76 36 20 66 6f 72 20 63 6f 6e 73 75 6d 65 72 73 | rovide.native.IPv6.for.consumers |
91b80 | 20 6f 6e 20 66 69 78 65 64 20 6e 65 74 77 6f 72 6b 73 2e 00 56 79 4f 53 20 31 2e 34 20 28 73 61 | .on.fixed.networks..VyOS.1.4.(sa |
91ba0 | 67 69 74 74 61 29 20 69 6e 74 72 6f 64 75 63 65 64 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e | gitta).introduced.dynamic.routin |
91bc0 | 67 20 73 75 70 70 6f 72 74 20 66 6f 72 20 56 52 46 73 2e 00 56 79 4f 53 20 31 2e 34 20 63 68 61 | g.support.for.VRFs..VyOS.1.4.cha |
91be0 | 6e 67 65 64 20 74 68 65 20 77 61 79 20 69 6e 20 68 6f 77 20 65 6e 63 72 79 74 69 6f 6e 20 6b 65 | nged.the.way.in.how.encrytion.ke |
91c00 | 79 73 20 6f 72 20 63 65 72 74 69 66 69 63 61 74 65 73 20 61 72 65 20 73 74 6f 72 65 64 20 6f 6e | ys.or.certificates.are.stored.on |
91c20 | 20 74 68 65 20 73 79 73 74 65 6d 2e 20 49 6e 20 74 68 65 20 70 72 65 20 56 79 4f 53 20 31 2e 34 | .the.system..In.the.pre.VyOS.1.4 |
91c40 | 20 65 72 61 2c 20 63 65 72 74 69 66 69 63 61 74 65 73 20 67 6f 74 20 73 74 6f 72 65 64 20 75 6e | .era,.certificates.got.stored.un |
91c60 | 64 65 72 20 2f 63 6f 6e 66 69 67 20 61 6e 64 20 65 76 65 72 79 20 73 65 72 76 69 63 65 20 72 65 | der./config.and.every.service.re |
91c80 | 66 65 72 65 6e 63 65 64 20 61 20 66 69 6c 65 2e 20 54 68 61 74 20 6d 61 64 65 20 63 6f 70 79 69 | ferenced.a.file..That.made.copyi |
91ca0 | 6e 67 20 61 20 72 75 6e 6e 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 72 6f 6d 20 | ng.a.running.configuration.from. |
91cc0 | 73 79 73 74 65 6d 20 41 20 74 6f 20 73 79 73 74 65 6d 20 42 20 61 20 62 69 74 20 68 61 72 64 65 | system.A.to.system.B.a.bit.harde |
91ce0 | 72 2c 20 61 73 20 79 6f 75 20 68 61 64 20 74 6f 20 63 6f 70 79 20 74 68 65 20 66 69 6c 65 73 20 | r,.as.you.had.to.copy.the.files. |
91d00 | 61 6e 64 20 74 68 65 69 72 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 62 79 20 68 61 6e 64 2e 00 56 | and.their.permissions.by.hand..V |
91d20 | 79 4f 53 20 31 2e 34 20 75 73 65 73 20 63 68 72 6f 6e 79 20 69 6e 73 74 65 61 64 20 6f 66 20 6e | yOS.1.4.uses.chrony.instead.of.n |
91d40 | 74 70 64 20 28 73 65 65 20 3a 76 79 74 61 73 6b 3a 60 54 33 30 30 38 60 29 20 77 68 69 63 68 20 | tpd.(see.:vytask:`T3008`).which. |
91d60 | 77 69 6c 6c 20 6e 6f 20 6c 6f 6e 67 65 72 20 61 63 63 65 70 74 20 61 6e 6f 6e 79 6d 6f 75 73 20 | will.no.longer.accept.anonymous. |
91d80 | 4e 54 50 20 72 65 71 75 65 73 74 73 20 61 73 20 69 6e 20 56 79 4f 53 20 31 2e 33 2e 20 41 6c 6c | NTP.requests.as.in.VyOS.1.3..All |
91da0 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 20 77 69 6c 6c 20 62 65 20 6d 69 67 72 61 74 65 64 | .configurations.will.be.migrated |
91dc0 | 20 74 6f 20 6b 65 65 70 20 74 68 65 20 61 6e 6f 6e 79 6d 6f 75 73 20 66 75 6e 63 74 69 6f 6e 61 | .to.keep.the.anonymous.functiona |
91de0 | 6c 69 74 79 2e 20 46 6f 72 20 6e 65 77 20 73 65 74 75 70 73 20 69 66 20 79 6f 75 20 68 61 76 65 | lity..For.new.setups.if.you.have |
91e00 | 20 63 6c 69 65 6e 74 73 20 75 73 69 6e 67 20 79 6f 75 72 20 56 79 4f 53 20 69 6e 73 74 61 6c 6c | .clients.using.your.VyOS.install |
91e20 | 61 74 69 6f 6e 20 61 73 20 4e 54 50 20 73 65 72 76 65 72 2c 20 79 6f 75 20 6d 75 73 74 20 73 70 | ation.as.NTP.server,.you.must.sp |
91e40 | 65 63 69 66 79 20 74 68 65 20 60 61 6c 6c 6f 77 2d 63 6c 69 65 6e 74 60 20 64 69 72 65 63 74 69 | ecify.the.`allow-client`.directi |
91e60 | 76 65 2e 00 56 79 4f 53 20 41 72 69 73 74 61 20 45 4f 53 20 73 65 74 75 70 00 56 79 4f 53 20 45 | ve..VyOS.Arista.EOS.setup.VyOS.E |
91e80 | 53 50 20 67 72 6f 75 70 20 68 61 73 20 74 68 65 20 6e 65 78 74 20 6f 70 74 69 6f 6e 73 3a 00 56 | SP.group.has.the.next.options:.V |
91ea0 | 79 4f 53 20 46 69 65 6c 64 00 56 79 4f 53 20 49 4b 45 20 67 72 6f 75 70 20 68 61 73 20 74 68 65 | yOS.Field.VyOS.IKE.group.has.the |
91ec0 | 20 6e 65 78 74 20 6f 70 74 69 6f 6e 73 3a 00 56 79 4f 53 20 4d 49 42 73 00 56 79 4f 53 20 4e 41 | .next.options:.VyOS.MIBs.VyOS.NA |
91ee0 | 54 36 36 20 44 48 43 50 76 36 20 75 73 69 6e 67 20 61 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 | T66.DHCPv6.using.a.dummy.interfa |
91f00 | 63 65 00 56 79 4f 53 20 4e 41 54 36 36 20 53 69 6d 70 6c 65 20 43 6f 6e 66 69 67 75 72 65 00 56 | ce.VyOS.NAT66.Simple.Configure.V |
91f20 | 79 4f 53 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 20 65 6d 75 6c | yOS.Network.Emulator.policy.emul |
91f40 | 61 74 65 73 20 74 68 65 20 63 6f 6e 64 69 74 69 6f 6e 73 20 79 6f 75 20 63 61 6e 20 73 75 66 66 | ates.the.conditions.you.can.suff |
91f60 | 65 72 20 69 6e 20 61 20 72 65 61 6c 20 6e 65 74 77 6f 72 6b 2e 20 59 6f 75 20 77 69 6c 6c 20 62 | er.in.a.real.network..You.will.b |
91f80 | 65 20 61 62 6c 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 69 6e 67 73 20 6c 69 6b 65 20 | e.able.to.configure.things.like. |
91fa0 | 72 61 74 65 2c 20 62 75 72 73 74 2c 20 64 65 6c 61 79 2c 20 70 61 63 6b 65 74 20 6c 6f 73 73 2c | rate,.burst,.delay,.packet.loss, |
91fc0 | 20 70 61 63 6b 65 74 20 63 6f 72 72 75 70 74 69 6f 6e 20 6f 72 20 70 61 63 6b 65 74 20 72 65 6f | .packet.corruption.or.packet.reo |
91fe0 | 72 64 65 72 69 6e 67 2e 00 56 79 4f 53 20 4f 70 74 69 6f 6e 00 56 79 4f 53 20 50 6f 6c 69 63 79 | rdering..VyOS.Option.VyOS.Policy |
92000 | 2d 42 61 73 65 64 20 52 6f 75 74 69 6e 67 20 28 50 42 52 29 20 77 6f 72 6b 73 20 62 79 20 6d 61 | -Based.Routing.(PBR).works.by.ma |
92020 | 74 63 68 69 6e 67 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 73 20 | tching.source.IP.address.ranges. |
92040 | 61 6e 64 20 66 6f 72 77 61 72 64 69 6e 67 20 74 68 65 20 74 72 61 66 66 69 63 20 75 73 69 6e 67 | and.forwarding.the.traffic.using |
92060 | 20 64 69 66 66 65 72 65 6e 74 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 2e 00 56 79 4f 53 20 | .different.routing.tables..VyOS. |
92080 | 53 4e 4d 50 20 73 75 70 70 6f 72 74 73 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 | SNMP.supports.both.IPv4.and.IPv6 |
920a0 | 2e 00 56 79 4f 53 20 61 6c 73 6f 20 63 6f 6d 65 73 20 77 69 74 68 20 61 20 62 75 69 6c 64 20 69 | ..VyOS.also.comes.with.a.build.i |
920c0 | 6e 20 53 53 54 50 20 73 65 72 76 65 72 2c 20 73 65 65 20 3a 72 65 66 3a 60 73 73 74 70 60 2e 00 | n.SSTP.server,.see.:ref:`sstp`.. |
920e0 | 56 79 4f 53 20 61 6c 73 6f 20 70 72 6f 76 69 64 65 73 20 44 48 43 50 76 36 20 73 65 72 76 65 72 | VyOS.also.provides.DHCPv6.server |
92100 | 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 77 68 69 63 68 20 69 73 20 64 65 73 63 72 69 62 65 | .functionality.which.is.describe |
92120 | 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 00 56 79 4f 53 20 61 6c 73 6f 20 73 75 70 | d.in.this.section..VyOS.also.sup |
92140 | 70 6f 72 74 73 20 28 63 75 72 72 65 6e 74 6c 79 29 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 | ports.(currently).two.different. |
92160 | 6d 6f 64 65 73 20 6f 66 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2c 20 6c 6f 63 61 6c 20 61 | modes.of.authentication,.local.a |
92180 | 6e 64 20 52 41 44 49 55 53 2e 20 54 6f 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 6c 6f 63 61 6c | nd.RADIUS..To.create.a.new.local |
921a0 | 20 75 73 65 72 20 6e 61 6d 65 64 20 60 60 76 79 6f 73 60 60 20 77 69 74 68 20 70 61 73 73 77 6f | .user.named.``vyos``.with.passwo |
921c0 | 72 64 20 60 60 76 79 6f 73 60 60 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f | rd.``vyos``.use.the.following.co |
921e0 | 6d 6d 61 6e 64 73 2e 00 56 79 4f 53 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 73 20 74 77 6f 20 64 | mmands..VyOS.also.supports.two.d |
92200 | 69 66 66 65 72 65 6e 74 20 6d 6f 64 65 73 20 6f 66 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | ifferent.modes.of.authentication |
92220 | 2c 20 6c 6f 63 61 6c 20 61 6e 64 20 52 41 44 49 55 53 2e 20 54 6f 20 63 72 65 61 74 65 20 61 20 | ,.local.and.RADIUS..To.create.a. |
92240 | 6e 65 77 20 6c 6f 63 61 6c 20 75 73 65 72 20 6e 61 6d 65 64 20 22 76 79 6f 73 22 20 77 69 74 68 | new.local.user.named."vyos".with |
92260 | 20 61 20 70 61 73 73 77 6f 72 64 20 6f 66 20 22 76 79 6f 73 22 20 75 73 65 20 74 68 65 20 66 6f | .a.password.of."vyos".use.the.fo |
92280 | 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 2e 00 56 79 4f 53 20 63 61 6e 20 61 6c 73 6f 20 | llowing.commands..VyOS.can.also. |
922a0 | 72 75 6e 20 69 6e 20 44 4d 56 50 4e 20 73 70 6f 6b 65 20 6d 6f 64 65 2e 00 56 79 4f 53 20 63 61 | run.in.DMVPN.spoke.mode..VyOS.ca |
922c0 | 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 74 72 61 63 6b 20 63 6f 6e 6e 65 63 74 | n.be.configured.to.track.connect |
922e0 | 69 6f 6e 73 20 75 73 69 6e 67 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 | ions.using.the.connection.tracki |
92300 | 6e 67 20 73 75 62 73 79 73 74 65 6d 2e 20 43 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e | ng.subsystem..Connection.trackin |
92320 | 67 20 62 65 63 6f 6d 65 73 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6f 6e 63 65 20 65 69 74 68 65 | g.becomes.operational.once.eithe |
92340 | 72 20 73 74 61 74 65 66 75 6c 20 66 69 72 65 77 61 6c 6c 20 6f 72 20 4e 41 54 20 69 73 20 63 6f | r.stateful.firewall.or.NAT.is.co |
92360 | 6e 66 69 67 75 72 65 64 2e 00 56 79 4f 53 20 63 61 6e 20 6e 6f 74 20 6f 6e 6c 79 20 61 63 74 20 | nfigured..VyOS.can.not.only.act. |
92380 | 61 73 20 61 6e 20 4f 70 65 6e 56 50 4e 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 6f 72 20 73 65 | as.an.OpenVPN.site-to-site.or.se |
923a0 | 72 76 65 72 20 66 6f 72 20 6d 75 6c 74 69 70 6c 65 20 63 6c 69 65 6e 74 73 2e 20 59 6f 75 20 63 | rver.for.multiple.clients..You.c |
923c0 | 61 6e 20 69 6e 64 65 65 64 20 61 6c 73 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 79 20 56 79 4f | an.indeed.also.configure.any.VyO |
923e0 | 53 20 4f 70 65 6e 56 50 4e 20 69 6e 74 65 72 66 61 63 65 20 61 73 20 61 6e 20 4f 70 65 6e 56 50 | S.OpenVPN.interface.as.an.OpenVP |
92400 | 4e 20 63 6c 69 65 6e 74 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 61 20 56 79 4f 53 20 4f 70 | N.client.connecting.to.a.VyOS.Op |
92420 | 65 6e 56 50 4e 20 73 65 72 76 65 72 20 6f 72 20 61 6e 79 20 6f 74 68 65 72 20 4f 70 65 6e 56 50 | enVPN.server.or.any.other.OpenVP |
92440 | 4e 20 73 65 72 76 65 72 2e 00 56 79 4f 53 20 64 65 66 61 75 6c 74 20 77 69 6c 6c 20 62 65 20 60 | N.server..VyOS.default.will.be.` |
92460 | 61 75 74 6f 60 2e 00 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 20 73 70 65 63 | auto`..VyOS.does.not.have.a.spec |
92480 | 69 61 6c 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 74 61 72 74 20 74 68 65 20 42 61 62 65 6c 20 70 | ial.command.to.start.the.Babel.p |
924a0 | 72 6f 63 65 73 73 2e 20 54 68 65 20 42 61 62 65 6c 20 70 72 6f 63 65 73 73 20 73 74 61 72 74 73 | rocess..The.Babel.process.starts |
924c0 | 20 77 68 65 6e 20 74 68 65 20 66 69 72 73 74 20 42 61 62 65 6c 20 65 6e 61 62 6c 65 64 20 69 6e | .when.the.first.Babel.enabled.in |
924e0 | 74 65 72 66 61 63 65 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 56 79 4f 53 20 64 6f 65 73 | terface.is.configured..VyOS.does |
92500 | 20 6e 6f 74 20 68 61 76 65 20 61 20 73 70 65 63 69 61 6c 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 | .not.have.a.special.command.to.s |
92520 | 74 61 72 74 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 4f 53 50 46 20 | tart.the.OSPF.process..The.OSPF. |
92540 | 70 72 6f 63 65 73 73 20 73 74 61 72 74 73 20 77 68 65 6e 20 74 68 65 20 66 69 72 73 74 20 6f 73 | process.starts.when.the.first.os |
92560 | 70 66 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 63 6f 6e 66 69 67 75 72 | pf.enabled.interface.is.configur |
92580 | 65 64 2e 00 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 20 73 70 65 63 69 61 6c | ed..VyOS.does.not.have.a.special |
925a0 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 74 61 72 74 20 74 68 65 20 4f 53 50 46 76 33 20 70 72 6f | .command.to.start.the.OSPFv3.pro |
925c0 | 63 65 73 73 2e 20 54 68 65 20 4f 53 50 46 76 33 20 70 72 6f 63 65 73 73 20 73 74 61 72 74 73 20 | cess..The.OSPFv3.process.starts. |
925e0 | 77 68 65 6e 20 74 68 65 20 66 69 72 73 74 20 6f 73 70 66 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 | when.the.first.ospf.enabled.inte |
92600 | 72 66 61 63 65 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 56 79 4f 53 20 66 61 63 69 6c 69 | rface.is.configured..VyOS.facili |
92620 | 74 61 74 65 73 20 49 50 20 4d 75 6c 74 69 63 61 73 74 20 62 79 20 73 75 70 70 6f 72 74 69 6e 67 | tates.IP.Multicast.by.supporting |
92640 | 20 2a 2a 50 49 4d 20 53 70 61 72 73 65 20 4d 6f 64 65 2a 2a 2c 20 2a 2a 49 47 4d 50 2a 2a 20 61 | .**PIM.Sparse.Mode**,.**IGMP**.a |
92660 | 6e 64 20 2a 2a 49 47 4d 50 2d 50 72 6f 78 79 2a 2a 2e 00 56 79 4f 53 20 66 61 63 69 6c 69 74 61 | nd.**IGMP-Proxy**..VyOS.facilita |
92680 | 74 65 73 20 49 50 76 36 20 4d 75 6c 74 69 63 61 73 74 20 62 79 20 73 75 70 70 6f 72 74 69 6e 67 | tes.IPv6.Multicast.by.supporting |
926a0 | 20 2a 2a 50 49 4d 76 36 2a 2a 20 61 6e 64 20 2a 2a 4d 4c 44 2a 2a 2e 00 56 79 4f 53 20 69 6e 63 | .**PIMv6**.and.**MLD**..VyOS.inc |
926c0 | 6c 75 64 65 73 20 74 68 65 20 46 61 73 74 4e 65 74 4d 6f 6e 20 43 6f 6d 6d 75 6e 69 74 79 20 45 | ludes.the.FastNetMon.Community.E |
926e0 | 64 69 74 69 6f 6e 2e 00 56 79 4f 53 20 69 73 20 61 62 6c 65 20 74 6f 20 75 70 64 61 74 65 20 61 | dition..VyOS.is.able.to.update.a |
92700 | 20 72 65 6d 6f 74 65 20 44 4e 53 20 72 65 63 6f 72 64 20 77 68 65 6e 20 61 6e 20 69 6e 74 65 72 | .remote.DNS.record.when.an.inter |
92720 | 66 61 63 65 20 67 65 74 73 20 61 20 6e 65 77 20 49 50 20 61 64 64 72 65 73 73 2e 20 49 6e 20 6f | face.gets.a.new.IP.address..In.o |
92740 | 72 64 65 72 20 74 6f 20 64 6f 20 73 6f 2c 20 56 79 4f 53 20 69 6e 63 6c 75 64 65 73 20 64 64 63 | rder.to.do.so,.VyOS.includes.ddc |
92760 | 6c 69 65 6e 74 5f 2c 20 61 20 50 65 72 6c 20 73 63 72 69 70 74 20 77 72 69 74 74 65 6e 20 66 6f | lient_,.a.Perl.script.written.fo |
92780 | 72 20 74 68 69 73 20 6f 6e 6c 79 20 6f 6e 65 20 70 75 72 70 6f 73 65 2e 00 56 79 4f 53 20 69 73 | r.this.only.one.purpose..VyOS.is |
927a0 | 20 61 6c 73 6f 20 61 62 6c 65 20 74 6f 20 75 73 65 20 61 6e 79 20 73 65 72 76 69 63 65 20 72 65 | .also.able.to.use.any.service.re |
927c0 | 6c 79 69 6e 67 20 6f 6e 20 70 72 6f 74 6f 63 6f 6c 73 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 | lying.on.protocols.supported.by. |
927e0 | 64 64 63 6c 69 65 6e 74 2e 00 56 79 4f 53 20 69 74 73 65 6c 66 20 73 75 70 70 6f 72 74 73 20 53 | ddclient..VyOS.itself.supports.S |
92800 | 4e 4d 50 76 32 5f 20 28 76 65 72 73 69 6f 6e 20 32 29 20 61 6e 64 20 53 4e 4d 50 76 33 5f 20 28 | NMPv2_.(version.2).and.SNMPv3_.( |
92820 | 76 65 72 73 69 6f 6e 20 33 29 20 77 68 65 72 65 20 74 68 65 20 6c 61 74 65 72 20 69 73 20 72 65 | version.3).where.the.later.is.re |
92840 | 63 6f 6d 6d 65 6e 64 65 64 20 62 65 63 61 75 73 65 20 6f 66 20 69 6d 70 72 6f 76 65 64 20 73 65 | commended.because.of.improved.se |
92860 | 63 75 72 69 74 79 20 28 6f 70 74 69 6f 6e 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 | curity.(optional.authentication. |
92880 | 61 6e 64 20 65 6e 63 72 79 70 74 69 6f 6e 29 2e 00 56 79 4f 53 20 6c 65 74 73 20 79 6f 75 20 63 | and.encryption)..VyOS.lets.you.c |
928a0 | 6f 6e 74 72 6f 6c 20 74 72 61 66 66 69 63 20 69 6e 20 6d 61 6e 79 20 64 69 66 66 65 72 65 6e 74 | ontrol.traffic.in.many.different |
928c0 | 20 77 61 79 73 2c 20 68 65 72 65 20 77 65 20 77 69 6c 6c 20 63 6f 76 65 72 20 65 76 65 72 79 20 | .ways,.here.we.will.cover.every. |
928e0 | 70 6f 73 73 69 62 69 6c 69 74 79 2e 20 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 61 | possibility..You.can.configure.a |
92900 | 73 20 6d 61 6e 79 20 70 6f 6c 69 63 69 65 73 20 61 73 20 79 6f 75 20 77 61 6e 74 2c 20 62 75 74 | s.many.policies.as.you.want,.but |
92920 | 20 79 6f 75 20 77 69 6c 6c 20 6f 6e 6c 79 20 62 65 20 61 62 6c 65 20 74 6f 20 61 70 70 6c 79 20 | .you.will.only.be.able.to.apply. |
92940 | 6f 6e 65 20 70 6f 6c 69 63 79 20 70 65 72 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 64 69 72 | one.policy.per.interface.and.dir |
92960 | 65 63 74 69 6f 6e 20 28 69 6e 62 6f 75 6e 64 20 6f 72 20 6f 75 74 62 6f 75 6e 64 29 2e 00 56 79 | ection.(inbound.or.outbound)..Vy |
92980 | 4f 53 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 3a 61 62 62 72 3a 60 46 52 52 20 28 46 72 65 65 | OS.makes.use.of.:abbr:`FRR.(Free |
929a0 | 20 52 61 6e 67 65 20 52 6f 75 74 69 6e 67 29 60 20 61 6e 64 20 77 65 20 77 6f 75 6c 64 20 6c 69 | .Range.Routing)`.and.we.would.li |
929c0 | 6b 65 20 74 6f 20 74 68 61 6e 6b 20 74 68 65 6d 20 66 6f 72 20 74 68 65 69 72 20 65 66 66 6f 72 | ke.to.thank.them.for.their.effor |
929e0 | 74 21 00 56 79 4f 53 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 4c 69 6e 75 78 20 60 6e 65 74 66 | t!.VyOS.makes.use.of.Linux.`netf |
92a00 | 69 6c 74 65 72 20 3c 68 74 74 70 73 3a 2f 2f 6e 65 74 66 69 6c 74 65 72 2e 6f 72 67 2f 3e 60 5f | ilter.<https://netfilter.org/>`_ |
92a20 | 20 66 6f 72 20 70 61 63 6b 65 74 20 66 69 6c 74 65 72 69 6e 67 2e 00 56 79 4f 53 20 6e 6f 74 20 | .for.packet.filtering..VyOS.not. |
92a40 | 6f 6e 6c 79 20 63 61 6e 20 6e 6f 77 20 6d 61 6e 61 67 65 20 63 65 72 74 69 66 69 63 61 74 65 73 | only.can.now.manage.certificates |
92a60 | 20 69 73 73 75 65 64 20 62 79 20 33 72 64 20 70 61 72 74 79 20 43 65 72 74 69 66 69 63 61 74 65 | .issued.by.3rd.party.Certificate |
92a80 | 20 41 75 74 68 6f 72 69 74 69 65 73 2c 20 69 74 20 63 61 6e 20 61 6c 73 6f 20 61 63 74 20 61 73 | .Authorities,.it.can.also.act.as |
92aa0 | 20 61 20 43 41 20 6f 6e 20 69 74 73 20 6f 77 6e 2e 20 59 6f 75 20 63 61 6e 20 63 72 65 61 74 65 | .a.CA.on.its.own..You.can.create |
92ac0 | 20 79 6f 75 72 20 6f 77 6e 20 72 6f 6f 74 20 43 41 20 61 6e 64 20 73 69 67 6e 20 6b 65 79 73 20 | .your.own.root.CA.and.sign.keys. |
92ae0 | 77 69 74 68 20 69 74 20 62 79 20 6d 61 6b 69 6e 67 20 75 73 65 20 6f 66 20 73 6f 6d 65 20 73 69 | with.it.by.making.use.of.some.si |
92b00 | 6d 70 6c 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 2e 00 56 79 4f 53 20 6e 6f 77 20 | mple.op-mode.commands..VyOS.now. |
92b20 | 61 6c 73 6f 20 68 61 73 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 63 72 65 61 74 65 20 43 | also.has.the.ability.to.create.C |
92b40 | 41 73 2c 20 6b 65 79 73 2c 20 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 61 6e 64 20 6f 74 68 | As,.keys,.Diffie-Hellman.and.oth |
92b60 | 65 72 20 6b 65 79 70 61 69 72 73 20 66 72 6f 6d 20 61 6e 20 65 61 73 79 20 74 6f 20 61 63 63 65 | er.keypairs.from.an.easy.to.acce |
92b80 | 73 73 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6c 65 76 65 6c 20 63 6f 6d 6d 61 6e 64 2e 00 56 79 | ss.operational.level.command..Vy |
92ba0 | 4f 53 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 20 61 72 65 | OS.operational.mode.commands.are |
92bc0 | 20 6e 6f 74 20 6f 6e 6c 79 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 67 65 6e 65 72 61 74 69 | .not.only.available.for.generati |
92be0 | 6e 67 20 6b 65 79 73 20 62 75 74 20 61 6c 73 6f 20 74 6f 20 64 69 73 70 6c 61 79 20 74 68 65 6d | ng.keys.but.also.to.display.them |
92c00 | 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 20 61 6e 20 48 54 54 50 20 41 50 49 2e 20 59 6f 75 20 | ..VyOS.provide.an.HTTP.API..You. |
92c20 | 63 61 6e 20 75 73 65 20 69 74 20 74 6f 20 65 78 65 63 75 74 65 20 6f 70 2d 6d 6f 64 65 20 63 6f | can.use.it.to.execute.op-mode.co |
92c40 | 6d 6d 61 6e 64 73 2c 20 75 70 64 61 74 65 20 56 79 4f 53 2c 20 73 65 74 20 6f 72 20 64 65 6c 65 | mmands,.update.VyOS,.set.or.dele |
92c60 | 74 65 20 63 6f 6e 66 69 67 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 44 4e 53 20 69 6e 66 | te.config..VyOS.provides.DNS.inf |
92c80 | 72 61 73 74 72 75 63 74 75 72 65 20 66 6f 72 20 73 6d 61 6c 6c 20 6e 65 74 77 6f 72 6b 73 2e 20 | rastructure.for.small.networks.. |
92ca0 | 49 74 20 69 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 62 65 20 6c 69 67 68 74 77 65 69 67 68 74 | It.is.designed.to.be.lightweight |
92cc0 | 20 61 6e 64 20 68 61 76 65 20 61 20 73 6d 61 6c 6c 20 66 6f 6f 74 70 72 69 6e 74 2c 20 73 75 69 | .and.have.a.small.footprint,.sui |
92ce0 | 74 61 62 6c 65 20 66 6f 72 20 72 65 73 6f 75 72 63 65 20 63 6f 6e 73 74 72 61 69 6e 65 64 20 72 | table.for.resource.constrained.r |
92d00 | 6f 75 74 65 72 73 20 61 6e 64 20 66 69 72 65 77 61 6c 6c 73 2e 20 46 6f 72 20 74 68 69 73 20 77 | outers.and.firewalls..For.this.w |
92d20 | 65 20 75 74 69 6c 69 7a 65 20 50 6f 77 65 72 44 4e 53 20 72 65 63 75 72 73 6f 72 2e 00 56 79 4f | e.utilize.PowerDNS.recursor..VyO |
92d40 | 53 20 70 72 6f 76 69 64 65 73 20 48 69 67 68 20 41 76 61 69 6c 61 62 69 6c 69 74 79 20 73 75 70 | S.provides.High.Availability.sup |
92d60 | 70 6f 72 74 20 66 6f 72 20 44 48 43 50 20 73 65 72 76 65 72 2e 20 44 48 43 50 20 48 69 67 68 20 | port.for.DHCP.server..DHCP.High. |
92d80 | 41 76 61 69 6c 61 62 69 6c 69 74 79 20 63 61 6e 20 61 63 74 20 69 6e 20 74 77 6f 20 64 69 66 66 | Availability.can.act.in.two.diff |
92da0 | 65 72 65 6e 74 20 6d 6f 64 65 73 3a 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 61 20 63 6f 6d | erent.modes:.VyOS.provides.a.com |
92dc0 | 6d 61 6e 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 70 72 | mand.to.generate.a.connection.pr |
92de0 | 6f 66 69 6c 65 20 75 73 65 64 20 62 79 20 57 69 6e 64 6f 77 73 20 63 6c 69 65 6e 74 73 20 74 68 | ofile.used.by.Windows.clients.th |
92e00 | 61 74 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 22 72 77 22 20 63 6f 6e 6e | at.will.connect.to.the."rw".conn |
92e20 | 65 63 74 69 6f 6e 20 6f 6e 20 6f 75 72 20 56 79 4f 53 20 73 65 72 76 65 72 2e 00 56 79 4f 53 20 | ection.on.our.VyOS.server..VyOS. |
92e40 | 70 72 6f 76 69 64 65 73 20 70 6f 6c 69 63 69 65 73 20 63 6f 6d 6d 61 6e 64 73 20 65 78 63 6c 75 | provides.policies.commands.exclu |
92e60 | 73 69 76 65 6c 79 20 66 6f 72 20 42 47 50 20 74 72 61 66 66 69 63 20 66 69 6c 74 65 72 69 6e 67 | sively.for.BGP.traffic.filtering |
92e80 | 20 61 6e 64 20 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 3a 20 2a 2a 61 73 2d 70 61 74 68 2d 6c 69 73 | .and.manipulation:.**as-path-lis |
92ea0 | 74 2a 2a 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 6d 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 | t**.is.one.of.them..VyOS.provide |
92ec0 | 73 20 70 6f 6c 69 63 69 65 73 20 63 6f 6d 6d 61 6e 64 73 20 65 78 63 6c 75 73 69 76 65 6c 79 20 | s.policies.commands.exclusively. |
92ee0 | 66 6f 72 20 42 47 50 20 74 72 61 66 66 69 63 20 66 69 6c 74 65 72 69 6e 67 20 61 6e 64 20 6d 61 | for.BGP.traffic.filtering.and.ma |
92f00 | 6e 69 70 75 6c 61 74 69 6f 6e 3a 20 2a 2a 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 2a 2a 20 69 | nipulation:.**community-list**.i |
92f20 | 73 20 6f 6e 65 20 6f 66 20 74 68 65 6d 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 70 6f 6c | s.one.of.them..VyOS.provides.pol |
92f40 | 69 63 69 65 73 20 63 6f 6d 6d 61 6e 64 73 20 65 78 63 6c 75 73 69 76 65 6c 79 20 66 6f 72 20 42 | icies.commands.exclusively.for.B |
92f60 | 47 50 20 74 72 61 66 66 69 63 20 66 69 6c 74 65 72 69 6e 67 20 61 6e 64 20 6d 61 6e 69 70 75 6c | GP.traffic.filtering.and.manipul |
92f80 | 61 74 69 6f 6e 3a 20 2a 2a 65 78 74 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 2a 2a 20 69 73 20 | ation:.**extcommunity-list**.is. |
92fa0 | 6f 6e 65 20 6f 66 20 74 68 65 6d 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 70 6f 6c 69 63 | one.of.them..VyOS.provides.polic |
92fc0 | 69 65 73 20 63 6f 6d 6d 61 6e 64 73 20 65 78 63 6c 75 73 69 76 65 6c 79 20 66 6f 72 20 42 47 50 | ies.commands.exclusively.for.BGP |
92fe0 | 20 74 72 61 66 66 69 63 20 66 69 6c 74 65 72 69 6e 67 20 61 6e 64 20 6d 61 6e 69 70 75 6c 61 74 | .traffic.filtering.and.manipulat |
93000 | 69 6f 6e 3a 20 2a 2a 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 2a 2a 20 69 73 | ion:.**large-community-list**.is |
93020 | 20 6f 6e 65 20 6f 66 20 74 68 65 6d 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 73 6f 6d 65 | .one.of.them..VyOS.provides.some |
93040 | 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 6f 6e 20 4f 70 65 6e 56 50 4e | .operational.commands.on.OpenVPN |
93060 | 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 73 75 70 70 6f 72 74 20 66 6f 72 20 44 48 43 50 | ..VyOS.provides.support.for.DHCP |
93080 | 20 66 61 69 6c 6f 76 65 72 2e 20 44 48 43 50 20 66 61 69 6c 6f 76 65 72 20 6d 75 73 74 20 62 65 | .failover..DHCP.failover.must.be |
930a0 | 20 63 6f 6e 66 69 67 75 72 65 64 20 65 78 70 6c 69 63 69 74 6c 79 20 62 79 20 74 68 65 20 66 6f | .configured.explicitly.by.the.fo |
930c0 | 6c 6c 6f 77 69 6e 67 20 73 74 61 74 65 6d 65 6e 74 73 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 | llowing.statements..VyOS.provide |
930e0 | 73 20 74 68 69 73 20 75 74 69 6c 69 74 79 20 74 6f 20 69 6d 70 6f 72 74 20 65 78 69 73 74 69 6e | s.this.utility.to.import.existin |
93100 | 67 20 63 65 72 74 69 66 69 63 61 74 65 73 2f 6b 65 79 20 66 69 6c 65 73 20 64 69 72 65 63 74 6c | g.certificates/key.files.directl |
93120 | 79 20 69 6e 74 6f 20 50 4b 49 20 66 72 6f 6d 20 6f 70 2d 6d 6f 64 65 2e 20 50 72 65 76 69 6f 75 | y.into.PKI.from.op-mode..Previou |
93140 | 73 20 74 6f 20 56 79 4f 53 20 31 2e 34 2c 20 63 65 72 74 69 66 69 63 61 74 65 73 20 77 65 72 65 | s.to.VyOS.1.4,.certificates.were |
93160 | 20 73 74 6f 72 65 64 20 75 6e 64 65 72 20 74 68 65 20 2f 63 6f 6e 66 69 67 20 66 6f 6c 64 65 72 | .stored.under.the./config.folder |
93180 | 20 70 65 72 6d 61 6e 65 6e 74 6c 79 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 72 65 74 61 69 6e 65 | .permanently.and.will.be.retaine |
931a0 | 64 20 70 6f 73 74 20 75 70 67 72 61 64 65 2e 00 56 79 4f 53 20 72 65 76 65 72 73 65 2d 70 72 6f | d.post.upgrade..VyOS.reverse-pro |
931c0 | 78 79 20 69 73 20 62 61 6c 61 6e 63 65 72 20 61 6e 64 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 | xy.is.balancer.and.proxy.server. |
931e0 | 74 68 61 74 20 70 72 6f 76 69 64 65 73 20 68 69 67 68 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 2c | that.provides.high-availability, |
93200 | 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 61 6e 64 20 70 72 6f 78 79 69 6e 67 20 66 6f 72 | .load.balancing.and.proxying.for |
93220 | 20 54 43 50 20 28 6c 65 76 65 6c 20 34 29 20 61 6e 64 20 48 54 54 50 2d 62 61 73 65 64 20 28 6c | .TCP.(level.4).and.HTTP-based.(l |
93240 | 65 76 65 6c 20 37 29 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2e 00 56 79 4f 53 20 73 75 70 70 6f | evel.7).applications..VyOS.suppo |
93260 | 72 74 73 20 3a 61 62 62 72 3a 60 50 49 4d 2d 53 4d 20 28 50 49 4d 20 53 70 61 72 73 65 20 4d 6f | rts.:abbr:`PIM-SM.(PIM.Sparse.Mo |
93280 | 64 65 29 60 20 61 73 20 77 65 6c 6c 20 61 73 20 3a 61 62 62 72 3a 60 49 47 4d 50 20 28 49 6e 74 | de)`.as.well.as.:abbr:`IGMP.(Int |
932a0 | 65 72 6e 65 74 20 47 72 6f 75 70 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 | ernet.Group.Management.Protocol) |
932c0 | 60 20 76 32 20 61 6e 64 20 76 33 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 62 6f 74 68 20 49 | `.v2.and.v3.VyOS.supports.both.I |
932e0 | 47 4d 50 20 76 65 72 73 69 6f 6e 20 32 20 61 6e 64 20 76 65 72 73 69 6f 6e 20 33 20 28 77 68 69 | GMP.version.2.and.version.3.(whi |
93300 | 63 68 20 61 6c 6c 6f 77 73 20 73 6f 75 72 63 65 2d 73 70 65 63 69 66 69 63 20 6d 75 6c 74 69 63 | ch.allows.source-specific.multic |
93320 | 61 73 74 29 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 62 6f 74 68 20 4d 4c 44 20 76 65 72 | ast)..VyOS.supports.both.MLD.ver |
93340 | 73 69 6f 6e 20 31 20 61 6e 64 20 76 65 72 73 69 6f 6e 20 32 20 28 77 68 69 63 68 20 61 6c 6c 6f | sion.1.and.version.2.(which.allo |
93360 | 77 73 20 73 6f 75 72 63 65 2d 73 70 65 63 69 66 69 63 20 6d 75 6c 74 69 63 61 73 74 29 2e 00 56 | ws.source-specific.multicast)..V |
93380 | 79 4f 53 20 73 75 70 70 6f 72 74 73 20 66 6c 6f 77 2d 61 63 63 6f 75 6e 74 69 6e 67 20 66 6f 72 | yOS.supports.flow-accounting.for |
933a0 | 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 74 72 61 66 66 69 63 2e 20 54 68 65 | .both.IPv4.and.IPv6.traffic..The |
933c0 | 20 73 79 73 74 65 6d 20 61 63 74 73 20 61 73 20 61 20 66 6c 6f 77 20 65 78 70 6f 72 74 65 72 2c | .system.acts.as.a.flow.exporter, |
933e0 | 20 61 6e 64 20 79 6f 75 20 61 72 65 20 66 72 65 65 20 74 6f 20 75 73 65 20 69 74 20 77 69 74 68 | .and.you.are.free.to.use.it.with |
93400 | 20 61 6e 79 20 63 6f 6d 70 61 74 69 62 6c 65 20 63 6f 6c 6c 65 63 74 6f 72 2e 00 56 79 4f 53 20 | .any.compatible.collector..VyOS. |
93420 | 73 75 70 70 6f 72 74 73 20 6d 75 6c 74 69 70 6c 65 20 49 4b 45 76 32 20 72 65 6d 6f 74 65 2d 61 | supports.multiple.IKEv2.remote-a |
93440 | 63 63 65 73 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 20 45 76 65 72 79 20 63 6f 6e 6e 65 63 74 | ccess.connections..Every.connect |
93460 | 69 6f 6e 20 63 61 6e 20 68 61 76 65 20 69 74 73 20 64 65 64 69 63 61 74 65 64 20 49 4b 45 2f 45 | ion.can.have.its.dedicated.IKE/E |
93480 | 53 50 20 63 69 70 68 65 72 73 2c 20 63 65 72 74 69 66 69 63 61 74 65 73 20 6f 72 20 6c 6f 63 61 | SP.ciphers,.certificates.or.loca |
934a0 | 6c 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 20 66 6f 72 20 65 2e 67 2e 20 69 6e 62 6f 75 6e | l.listen.address.for.e.g..inboun |
934c0 | 64 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 | d.load.balancing..VyOS.supports. |
934e0 | 6f 6e 6c 69 6e 65 20 63 68 65 63 6b 69 6e 67 20 66 6f 72 20 75 70 64 61 74 65 73 00 56 79 4f 53 | online.checking.for.updates.VyOS |
93500 | 20 73 75 70 70 6f 72 74 73 20 73 46 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 66 6f 72 20 62 | .supports.sFlow.accounting.for.b |
93520 | 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 74 72 61 66 66 69 63 2e 20 54 68 65 20 73 | oth.IPv4.and.IPv6.traffic..The.s |
93540 | 79 73 74 65 6d 20 61 63 74 73 20 61 73 20 61 20 66 6c 6f 77 20 65 78 70 6f 72 74 65 72 2c 20 61 | ystem.acts.as.a.flow.exporter,.a |
93560 | 6e 64 20 79 6f 75 20 61 72 65 20 66 72 65 65 20 74 6f 20 75 73 65 20 69 74 20 77 69 74 68 20 61 | nd.you.are.free.to.use.it.with.a |
93580 | 6e 79 20 63 6f 6d 70 61 74 69 62 6c 65 20 63 6f 6c 6c 65 63 74 6f 72 2e 00 56 79 4f 53 20 73 75 | ny.compatible.collector..VyOS.su |
935a0 | 70 70 6f 72 74 73 20 73 65 74 74 69 6e 67 20 74 69 6d 65 6f 75 74 73 20 66 6f 72 20 63 6f 6e 6e | pports.setting.timeouts.for.conn |
935c0 | 65 63 74 69 6f 6e 73 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 20 63 6f 6e 6e 65 63 74 | ections.according.to.the.connect |
935e0 | 69 6f 6e 20 74 79 70 65 2e 20 59 6f 75 20 63 61 6e 20 73 65 74 20 74 69 6d 65 6f 75 74 20 76 61 | ion.type..You.can.set.timeout.va |
93600 | 6c 75 65 73 20 66 6f 72 20 67 65 6e 65 72 69 63 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 66 6f | lues.for.generic.connections,.fo |
93620 | 72 20 49 43 4d 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 55 44 50 20 63 6f 6e 6e 65 63 74 69 | r.ICMP.connections,.UDP.connecti |
93640 | 6f 6e 73 2c 20 6f 72 20 66 6f 72 20 54 43 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 69 6e 20 61 | ons,.or.for.TCP.connections.in.a |
93660 | 20 6e 75 6d 62 65 72 20 6f 66 20 64 69 66 66 65 72 65 6e 74 20 73 74 61 74 65 73 2e 00 56 79 4f | .number.of.different.states..VyO |
93680 | 53 20 73 75 70 70 6f 72 74 73 20 73 65 74 74 69 6e 67 20 75 70 20 50 50 50 6f 45 20 69 6e 20 74 | S.supports.setting.up.PPPoE.in.t |
936a0 | 77 6f 20 64 69 66 66 65 72 65 6e 74 20 77 61 79 73 20 74 6f 20 61 20 50 50 50 6f 45 20 69 6e 74 | wo.different.ways.to.a.PPPoE.int |
936c0 | 65 72 6e 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 54 68 69 73 20 69 73 20 62 65 63 61 75 73 | ernet.connection..This.is.becaus |
936e0 | 65 20 6d 6f 73 74 20 49 53 50 73 20 70 72 6f 76 69 64 65 20 61 20 6d 6f 64 65 6d 20 74 68 61 74 | e.most.ISPs.provide.a.modem.that |
93700 | 20 69 73 20 61 6c 73 6f 20 61 20 77 69 72 65 6c 65 73 73 20 72 6f 75 74 65 72 2e 00 56 79 4f 53 | .is.also.a.wireless.router..VyOS |
93720 | 20 75 73 65 73 20 49 53 43 20 44 48 43 50 20 73 65 72 76 65 72 20 66 6f 72 20 62 6f 74 68 20 49 | .uses.ISC.DHCP.server.for.both.I |
93740 | 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e 6d 65 6e 74 2e | Pv4.and.IPv6.address.assignment. |
93760 | 00 56 79 4f 53 20 75 73 65 73 20 4b 65 61 20 44 48 43 50 20 73 65 72 76 65 72 20 66 6f 72 20 62 | .VyOS.uses.Kea.DHCP.server.for.b |
93780 | 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e | oth.IPv4.and.IPv6.address.assign |
937a0 | 6d 65 6e 74 2e 00 56 79 4f 53 20 75 73 65 73 20 5b 46 52 52 6f 75 74 69 6e 67 5d 28 68 74 74 70 | ment..VyOS.uses.[FRRouting](http |
937c0 | 73 3a 2f 2f 66 72 72 6f 75 74 69 6e 67 2e 6f 72 67 2f 29 20 61 73 20 74 68 65 20 63 6f 6e 74 72 | s://frrouting.org/).as.the.contr |
937e0 | 6f 6c 20 70 6c 61 6e 65 20 66 6f 72 20 64 79 6e 61 6d 69 63 20 61 6e 64 20 73 74 61 74 69 63 20 | ol.plane.for.dynamic.and.static. |
93800 | 72 6f 75 74 69 6e 67 2e 20 54 68 65 20 72 6f 75 74 69 6e 67 20 64 61 65 6d 6f 6e 20 62 65 68 61 | routing..The.routing.daemon.beha |
93820 | 76 69 6f 72 20 63 61 6e 20 62 65 20 61 64 6a 75 73 74 65 64 20 64 75 72 69 6e 67 20 72 75 6e 74 | vior.can.be.adjusted.during.runt |
93840 | 69 6d 65 2c 20 62 75 74 20 72 65 71 75 69 72 65 20 65 69 74 68 65 72 20 61 20 72 65 73 74 61 72 | ime,.but.require.either.a.restar |
93860 | 74 20 6f 66 20 74 68 65 20 72 6f 75 74 69 6e 67 20 64 61 65 6d 6f 6e 2c 20 6f 72 20 61 20 72 65 | t.of.the.routing.daemon,.or.a.re |
93880 | 62 6f 6f 74 20 6f 66 20 74 68 65 20 73 79 73 74 65 6d 2e 00 56 79 4f 53 20 75 73 65 73 20 74 68 | boot.of.the.system..VyOS.uses.th |
938a0 | 65 20 60 69 6e 74 65 72 66 61 63 65 73 20 77 77 61 6e 60 20 73 75 62 73 79 73 74 65 6d 20 66 6f | e.`interfaces.wwan`.subsystem.fo |
938c0 | 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 56 79 4f 53 20 75 73 65 73 20 74 68 65 20 60 | r.configuration..VyOS.uses.the.` |
938e0 | 6d 69 72 72 6f 72 60 20 6f 70 74 69 6f 6e 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 70 6f 72 74 | mirror`.option.to.configure.port |
93900 | 20 6d 69 72 72 6f 72 69 6e 67 2e 20 54 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 | .mirroring..The.configuration.is |
93920 | 20 64 69 76 69 64 65 64 20 69 6e 74 6f 20 32 20 64 69 66 66 65 72 65 6e 74 20 64 69 72 65 63 74 | .divided.into.2.different.direct |
93940 | 69 6f 6e 73 2e 20 44 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 73 20 73 68 6f 75 6c 64 20 62 | ions..Destination.ports.should.b |
93960 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 64 69 66 66 65 72 65 6e 74 20 74 72 61 66 66 | e.configured.for.different.traff |
93980 | 69 63 20 64 69 72 65 63 74 69 6f 6e 73 2e 00 56 79 4f 53 20 75 74 69 6c 69 7a 65 73 20 60 61 63 | ic.directions..VyOS.utilizes.`ac |
939a0 | 63 65 6c 2d 70 70 70 60 5f 20 74 6f 20 70 72 6f 76 69 64 65 20 3a 61 62 62 72 3a 60 49 50 6f 45 | cel-ppp`_.to.provide.:abbr:`IPoE |
939c0 | 20 28 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 6f 6c 20 6f 76 65 72 20 45 74 68 65 72 6e 65 | .(Internet.Protocol.over.Etherne |
939e0 | 74 29 60 20 73 65 72 76 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2e 20 49 74 20 63 61 6e | t)`.server.functionality..It.can |
93a00 | 20 62 65 20 75 73 65 64 20 77 69 74 68 20 6c 6f 63 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 | .be.used.with.local.authenticati |
93a20 | 6f 6e 20 28 6d 61 63 2d 61 64 64 72 65 73 73 29 20 6f 72 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 | on.(mac-address).or.a.connected. |
93a40 | 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 56 79 4f 53 20 75 74 69 6c 69 7a 65 73 20 60 61 63 | RADIUS.server..VyOS.utilizes.`ac |
93a60 | 63 65 6c 2d 70 70 70 60 5f 20 74 6f 20 70 72 6f 76 69 64 65 20 50 50 50 6f 45 20 73 65 72 76 65 | cel-ppp`_.to.provide.PPPoE.serve |
93a80 | 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2e 20 49 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 | r.functionality..It.can.be.used. |
93aa0 | 77 69 74 68 20 6c 6f 63 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 72 20 61 20 63 | with.local.authentication.or.a.c |
93ac0 | 6f 6e 6e 65 63 74 65 64 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 56 79 4f 53 20 75 74 69 | onnected.RADIUS.server..VyOS.uti |
93ae0 | 6c 69 7a 65 73 20 61 63 63 65 6c 2d 70 70 70 5f 20 74 6f 20 70 72 6f 76 69 64 65 20 4c 32 54 50 | lizes.accel-ppp_.to.provide.L2TP |
93b00 | 20 73 65 72 76 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2e 20 49 74 20 63 61 6e 20 62 65 | .server.functionality..It.can.be |
93b20 | 20 75 73 65 64 20 77 69 74 68 20 6c 6f 63 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 | .used.with.local.authentication. |
93b40 | 6f 72 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 56 79 | or.a.connected.RADIUS.server..Vy |
93b60 | 4f 53 20 75 74 69 6c 69 7a 65 73 20 61 63 63 65 6c 2d 70 70 70 5f 20 74 6f 20 70 72 6f 76 69 64 | OS.utilizes.accel-ppp_.to.provid |
93b80 | 65 20 53 53 54 50 20 73 65 72 76 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2e 20 57 65 20 | e.SSTP.server.functionality..We. |
93ba0 | 73 75 70 70 6f 72 74 20 62 6f 74 68 20 6c 6f 63 61 6c 20 61 6e 64 20 52 41 44 49 55 53 20 61 75 | support.both.local.and.RADIUS.au |
93bc0 | 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 00 57 41 4e 20 4c 6f 61 64 20 42 61 6c 61 63 69 6e 67 20 | thentication..WAN.Load.Balacing. |
93be0 | 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 75 73 65 64 20 77 68 65 6e 20 64 79 6e 61 6d 69 63 20 | should.not.be.used.when.dynamic. |
93c00 | 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 75 73 65 64 2f 6e 65 65 64 65 64 2e | routing.protocol.is.used/needed. |
93c20 | 20 54 68 69 73 20 66 65 61 74 75 72 65 20 63 72 65 61 74 65 73 20 63 75 73 74 6f 6d 69 7a 65 64 | .This.feature.creates.customized |
93c40 | 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 20 61 6e 64 20 66 69 72 65 77 61 6c 6c 20 72 75 6c | .routing.tables.and.firewall.rul |
93c60 | 65 73 2c 20 74 68 61 74 20 6d 61 6b 65 73 20 69 74 20 69 6e 63 6f 6d 70 61 74 69 62 6c 65 20 74 | es,.that.makes.it.incompatible.t |
93c80 | 6f 20 75 73 65 20 77 69 74 68 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 57 41 | o.use.with.routing.protocols..WA |
93ca0 | 4e 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 60 65 74 68 31 60 00 57 41 4e 20 6c 6f 61 64 20 62 | N.interface.on.`eth1`.WAN.load.b |
93cc0 | 61 6c 61 6e 63 69 6e 67 00 57 4c 41 4e 2f 57 49 46 49 20 2d 20 57 69 72 65 6c 65 73 73 20 4c 41 | alancing.WLAN/WIFI.-.Wireless.LA |
93ce0 | 4e 00 57 4d 4d 2d 50 53 20 55 6e 73 63 68 65 64 75 6c 65 64 20 41 75 74 6f 6d 61 74 69 63 20 50 | N.WMM-PS.Unscheduled.Automatic.P |
93d00 | 6f 77 65 72 20 53 61 76 65 20 44 65 6c 69 76 65 72 79 20 5b 55 2d 41 50 53 44 5d 00 57 50 41 20 | ower.Save.Delivery.[U-APSD].WPA. |
93d20 | 70 61 73 73 70 68 72 61 73 65 20 60 60 31 32 33 34 35 36 37 38 60 60 00 57 57 41 4e 20 2d 20 57 | passphrase.``12345678``.WWAN.-.W |
93d40 | 69 72 65 6c 65 73 73 20 57 69 64 65 2d 41 72 65 61 2d 4e 65 74 77 6f 72 6b 00 57 61 72 6e 69 6e | ireless.Wide-Area-Network.Warnin |
93d60 | 67 00 57 61 72 6e 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 00 57 65 20 61 73 73 75 6d 65 20 74 | g.Warning.conditions.We.assume.t |
93d80 | 68 61 74 20 74 68 65 20 4c 45 46 54 20 72 6f 75 74 65 72 20 68 61 73 20 73 74 61 74 69 63 20 31 | hat.the.LEFT.router.has.static.1 |
93da0 | 39 32 2e 30 2e 32 2e 31 30 20 61 64 64 72 65 73 73 20 6f 6e 20 65 74 68 30 2c 20 61 6e 64 20 74 | 92.0.2.10.address.on.eth0,.and.t |
93dc0 | 68 65 20 52 49 47 48 54 20 72 6f 75 74 65 72 20 68 61 73 20 61 20 64 79 6e 61 6d 69 63 20 61 64 | he.RIGHT.router.has.a.dynamic.ad |
93de0 | 64 72 65 73 73 20 6f 6e 20 65 74 68 30 2e 00 57 65 20 63 61 6e 20 61 6c 73 6f 20 63 72 65 61 74 | dress.on.eth0..We.can.also.creat |
93e00 | 65 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 73 20 75 73 69 6e 67 20 43 65 72 62 6f 72 74 | e.the.certificates.using.Cerbort |
93e20 | 20 77 68 69 63 68 20 69 73 20 61 6e 20 65 61 73 79 2d 74 6f 2d 75 73 65 20 63 6c 69 65 6e 74 20 | .which.is.an.easy-to-use.client. |
93e40 | 74 68 61 74 20 66 65 74 63 68 65 73 20 61 20 63 65 72 74 69 66 69 63 61 74 65 20 66 72 6f 6d 20 | that.fetches.a.certificate.from. |
93e60 | 4c 65 74 27 73 20 45 6e 63 72 79 70 74 20 61 6e 20 6f 70 65 6e 20 63 65 72 74 69 66 69 63 61 74 | Let's.Encrypt.an.open.certificat |
93e80 | 65 20 61 75 74 68 6f 72 69 74 79 20 6c 61 75 6e 63 68 65 64 20 62 79 20 74 68 65 20 45 46 46 2c | e.authority.launched.by.the.EFF, |
93ea0 | 20 4d 6f 7a 69 6c 6c 61 2c 20 61 6e 64 20 6f 74 68 65 72 73 20 61 6e 64 20 64 65 70 6c 6f 79 73 | .Mozilla,.and.others.and.deploys |
93ec0 | 20 69 74 20 74 6f 20 61 20 77 65 62 20 73 65 72 76 65 72 2e 00 57 65 20 63 61 6e 20 62 75 69 6c | .it.to.a.web.server..We.can.buil |
93ee0 | 64 20 72 6f 75 74 65 2d 6d 61 70 73 20 66 6f 72 20 69 6d 70 6f 72 74 20 62 61 73 65 64 20 6f 6e | d.route-maps.for.import.based.on |
93f00 | 20 74 68 65 73 65 20 73 74 61 74 65 73 2e 20 48 65 72 65 20 69 73 20 61 20 73 69 6d 70 6c 65 20 | .these.states..Here.is.a.simple. |
93f20 | 52 50 4b 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 77 68 65 72 65 20 60 72 6f 75 74 69 | RPKI.configuration,.where.`routi |
93f40 | 6e 61 74 6f 72 60 20 69 73 20 74 68 65 20 52 50 4b 49 2d 76 61 6c 69 64 61 74 69 6e 67 20 22 63 | nator`.is.the.RPKI-validating."c |
93f60 | 61 63 68 65 22 20 73 65 72 76 65 72 20 77 69 74 68 20 69 70 20 60 31 39 32 2e 30 2e 32 2e 31 60 | ache".server.with.ip.`192.0.2.1` |
93f80 | 3a 00 57 65 20 63 61 6e 27 74 20 73 75 70 70 6f 72 74 20 61 6c 6c 20 64 69 73 70 6c 61 79 73 20 | :.We.can't.support.all.displays. |
93fa0 | 66 72 6f 6d 20 74 68 65 20 62 65 67 69 6e 6e 69 6e 67 2e 20 49 66 20 79 6f 75 72 20 64 69 73 70 | from.the.beginning..If.your.disp |
93fc0 | 6c 61 79 20 74 79 70 65 20 69 73 20 6d 69 73 73 69 6e 67 2c 20 70 6c 65 61 73 65 20 63 72 65 61 | lay.type.is.missing,.please.crea |
93fe0 | 74 65 20 61 20 66 65 61 74 75 72 65 20 72 65 71 75 65 73 74 20 76 69 61 20 50 68 61 62 72 69 63 | te.a.feature.request.via.Phabric |
94000 | 61 74 6f 72 5f 2e 00 57 65 20 63 6f 6e 66 69 67 75 72 65 20 61 20 6e 65 77 20 63 6f 6e 6e 65 63 | ator_..We.configure.a.new.connec |
94020 | 74 69 6f 6e 20 6e 61 6d 65 64 20 60 60 72 77 60 60 20 66 6f 72 20 72 6f 61 64 2d 77 61 72 72 69 | tion.named.``rw``.for.road-warri |
94040 | 6f 72 2c 20 74 68 61 74 20 69 64 65 6e 74 69 66 69 65 73 20 69 74 73 65 6c 66 20 61 73 20 60 60 | or,.that.identifies.itself.as.`` |
94060 | 31 39 32 2e 30 2e 32 2e 31 60 60 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 73 20 61 6e 64 20 75 | 192.0.2.1``.to.the.clients.and.u |
94080 | 73 65 73 20 74 68 65 20 60 60 76 79 6f 73 60 60 20 63 65 72 74 69 66 69 63 61 74 65 20 73 69 67 | ses.the.``vyos``.certificate.sig |
940a0 | 6e 65 64 20 62 79 20 74 68 65 20 60 43 41 63 65 72 74 5f 43 6c 61 73 73 33 5f 52 6f 6f 74 60 60 | ned.by.the.`CAcert_Class3_Root`` |
940c0 | 20 69 6e 74 65 72 6d 65 64 69 61 74 65 20 43 41 2e 20 57 65 20 73 65 6c 65 63 74 20 6f 75 72 20 | .intermediate.CA..We.select.our. |
940e0 | 70 72 65 76 69 6f 75 73 6c 79 20 73 70 65 63 69 66 69 65 64 20 49 4b 45 2f 45 53 50 20 67 72 6f | previously.specified.IKE/ESP.gro |
94100 | 75 70 73 20 61 6e 64 20 61 6c 73 6f 20 6c 69 6e 6b 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 | ups.and.also.link.the.IP.address |
94120 | 20 70 6f 6f 6c 20 74 6f 20 64 72 61 77 20 61 64 64 72 65 73 73 65 73 20 66 72 6f 6d 2e 00 57 65 | .pool.to.draw.addresses.from..We |
94140 | 20 63 6f 75 6c 64 20 65 78 70 61 6e 64 20 6f 6e 20 74 68 69 73 20 61 6e 64 20 61 6c 73 6f 20 64 | .could.expand.on.this.and.also.d |
94160 | 65 6e 79 20 6c 69 6e 6b 20 6c 6f 63 61 6c 20 61 6e 64 20 6d 75 6c 74 69 63 61 73 74 20 69 6e 20 | eny.link.local.and.multicast.in. |
94180 | 74 68 65 20 72 75 6c 65 20 32 30 20 61 63 74 69 6f 6e 20 64 65 6e 79 2e 00 57 65 20 64 6f 20 6e | the.rule.20.action.deny..We.do.n |
941a0 | 6f 74 20 68 61 76 65 20 43 4c 49 20 6e 6f 64 65 73 20 66 6f 72 20 65 76 65 72 79 20 73 69 6e 67 | ot.have.CLI.nodes.for.every.sing |
941c0 | 6c 65 20 4f 70 65 6e 56 50 4e 20 6f 70 74 69 6f 6e 2e 20 49 66 20 61 6e 20 6f 70 74 69 6f 6e 20 | le.OpenVPN.option..If.an.option. |
941e0 | 69 73 20 6d 69 73 73 69 6e 67 2c 20 61 20 66 65 61 74 75 72 65 20 72 65 71 75 65 73 74 20 73 68 | is.missing,.a.feature.request.sh |
94200 | 6f 75 6c 64 20 62 65 20 6f 70 65 6e 65 64 20 61 74 20 50 68 61 62 72 69 63 61 74 6f 72 5f 20 73 | ould.be.opened.at.Phabricator_.s |
94220 | 6f 20 61 6c 6c 20 75 73 65 72 73 20 63 61 6e 20 62 65 6e 65 66 69 74 20 66 72 6f 6d 20 69 74 20 | o.all.users.can.benefit.from.it. |
94240 | 28 73 65 65 20 3a 72 65 66 3a 60 69 73 73 75 65 73 5f 66 65 61 74 75 72 65 73 60 29 2e 00 57 65 | (see.:ref:`issues_features`)..We |
94260 | 20 64 6f 6e 27 74 20 72 65 63 6f 6d 65 6e 64 20 74 6f 20 75 73 65 20 61 72 67 75 6d 65 6e 74 73 | .don't.recomend.to.use.arguments |
94280 | 2e 20 55 73 69 6e 67 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 69 73 20 6d 6f 72 65 20 70 72 65 | ..Using.environments.is.more.pre |
942a0 | 66 66 65 72 65 62 6c 65 2e 00 57 65 20 67 65 6e 65 72 61 74 65 20 61 20 63 6f 6e 6e 65 63 74 69 | ffereble..We.generate.a.connecti |
942c0 | 6f 6e 20 70 72 6f 66 69 6c 65 20 75 73 65 64 20 62 79 20 57 69 6e 64 6f 77 73 20 63 6c 69 65 6e | on.profile.used.by.Windows.clien |
942e0 | 74 73 20 74 68 61 74 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 22 72 77 22 | ts.that.will.connect.to.the."rw" |
94300 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 6e 20 6f 75 72 20 56 79 4f 53 20 73 65 72 76 65 72 20 6f | .connection.on.our.VyOS.server.o |
94320 | 6e 20 74 68 65 20 56 50 4e 20 73 65 72 76 65 72 73 20 49 50 20 61 64 64 72 65 73 73 2f 66 71 64 | n.the.VPN.servers.IP.address/fqd |
94340 | 6e 20 60 76 70 6e 2e 76 79 6f 73 2e 6e 65 74 60 2e 00 57 65 20 6c 69 73 74 65 6e 20 6f 6e 20 70 | n.`vpn.vyos.net`..We.listen.on.p |
94360 | 6f 72 74 20 35 31 38 32 30 00 57 65 20 6e 65 65 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 | ort.51820.We.need.to.generate.th |
94380 | 65 20 63 65 72 74 69 66 69 63 61 74 65 20 77 68 69 63 68 20 61 75 74 68 65 6e 74 69 63 61 74 65 | e.certificate.which.authenticate |
943a0 | 73 20 75 73 65 72 73 20 77 68 6f 20 61 74 74 65 6d 70 74 20 74 6f 20 61 63 63 65 73 73 20 74 68 | s.users.who.attempt.to.access.th |
943c0 | 65 20 6e 65 74 77 6f 72 6b 20 72 65 73 6f 75 72 63 65 20 74 68 72 6f 75 67 68 20 74 68 65 20 53 | e.network.resource.through.the.S |
943e0 | 53 4c 20 56 50 4e 20 74 75 6e 6e 65 6c 73 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f | SL.VPN.tunnels..The.following.co |
94400 | 6d 6d 61 6e 64 73 20 77 69 6c 6c 20 63 72 65 61 74 65 20 61 20 73 65 6c 66 20 73 69 67 6e 65 64 | mmands.will.create.a.self.signed |
94420 | 20 63 65 72 74 69 66 69 63 61 74 65 73 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 73 74 6f 72 65 64 | .certificates.and.will.be.stored |
94440 | 20 69 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 57 65 20 6e 6f 77 20 75 74 69 6c 69 7a | .in.configuration:.We.now.utiliz |
94460 | 65 20 60 74 75 6e 65 64 60 20 66 6f 72 20 64 79 6e 61 6d 69 63 20 72 65 73 6f 75 72 63 65 20 62 | e.`tuned`.for.dynamic.resource.b |
94480 | 61 6c 61 6e 63 69 6e 67 20 62 61 73 65 64 20 6f 6e 20 70 72 6f 66 69 6c 65 73 2e 00 57 65 20 6f | alancing.based.on.profiles..We.o |
944a0 | 6e 6c 79 20 61 6c 6c 6f 77 20 74 68 65 20 31 39 32 2e 31 36 38 2e 32 2e 30 2f 32 34 20 73 75 62 | nly.allow.the.192.168.2.0/24.sub |
944c0 | 6e 65 74 20 74 6f 20 74 72 61 76 65 6c 20 6f 76 65 72 20 74 68 65 20 74 75 6e 6e 65 6c 00 57 65 | net.to.travel.over.the.tunnel.We |
944e0 | 20 6f 6e 6c 79 20 6e 65 65 64 20 61 20 73 69 6e 67 6c 65 20 73 74 65 70 20 66 6f 72 20 74 68 69 | .only.need.a.single.step.for.thi |
94500 | 73 20 69 6e 74 65 72 66 61 63 65 3a 00 57 65 20 72 6f 75 74 65 20 61 6c 6c 20 74 72 61 66 66 69 | s.interface:.We.route.all.traffi |
94520 | 63 20 66 6f 72 20 74 68 65 20 31 39 32 2e 31 36 38 2e 32 2e 30 2f 32 34 20 6e 65 74 77 6f 72 6b | c.for.the.192.168.2.0/24.network |
94540 | 20 74 6f 20 69 6e 74 65 72 66 61 63 65 20 60 77 67 30 31 60 00 57 65 20 75 73 65 20 61 20 76 6f | .to.interface.`wg01`.We.use.a.vo |
94560 | 6e 74 61 69 6e 65 72 20 70 72 6f 76 69 64 69 6e 67 20 74 68 65 20 54 41 43 41 43 53 20 73 65 72 | ntainer.providing.the.TACACS.ser |
94580 | 76 65 20 72 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 2e 00 57 65 20 77 69 6c 6c 20 6f 6e 6c | ve.rin.this.example..We.will.onl |
945a0 | 79 20 61 63 63 65 70 74 20 74 72 61 66 66 69 63 20 63 6f 6d 6d 69 6e 67 20 66 72 6f 6d 20 69 6e | y.accept.traffic.comming.from.in |
945c0 | 74 65 72 66 61 63 65 20 65 74 68 30 2c 20 70 72 6f 74 6f 63 6f 6c 20 74 63 70 20 61 6e 64 20 64 | terface.eth0,.protocol.tcp.and.d |
945e0 | 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 31 31 32 32 2e 20 41 6c 6c 20 6f 74 68 65 72 20 | estination.port.1122..All.other. |
94600 | 74 72 61 66 66 69 63 20 74 72 61 73 70 61 73 73 69 6e 67 20 74 68 65 20 72 6f 75 74 65 72 20 73 | traffic.traspassing.the.router.s |
94620 | 68 6f 75 6c 64 20 62 65 20 62 6c 6f 63 6b 65 64 2e 00 57 65 27 6c 6c 20 63 6f 6e 66 69 67 75 72 | hould.be.blocked..We'll.configur |
94640 | 65 20 4f 70 65 6e 56 50 4e 20 75 73 69 6e 67 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 63 65 72 74 | e.OpenVPN.using.self-signed.cert |
94660 | 69 66 69 63 61 74 65 73 2c 20 61 6e 64 20 74 68 65 6e 20 64 69 73 63 75 73 73 20 74 68 65 20 6c | ificates,.and.then.discuss.the.l |
94680 | 65 67 61 63 79 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 20 6d 6f 64 65 2e 00 57 65 27 6c 6c | egacy.pre-shared.key.mode..We'll |
946a0 | 20 75 73 65 20 74 68 65 20 49 4b 45 20 61 6e 64 20 45 53 50 20 67 72 6f 75 70 73 20 63 72 65 61 | .use.the.IKE.and.ESP.groups.crea |
946c0 | 74 65 64 20 61 62 6f 76 65 20 66 6f 72 20 74 68 69 73 20 56 50 4e 2e 20 42 65 63 61 75 73 65 20 | ted.above.for.this.VPN..Because. |
946e0 | 77 65 20 6e 65 65 64 20 61 63 63 65 73 73 20 74 6f 20 32 20 64 69 66 66 65 72 65 6e 74 20 73 75 | we.need.access.to.2.different.su |
94700 | 62 6e 65 74 73 20 6f 6e 20 74 68 65 20 66 61 72 20 73 69 64 65 2c 20 77 65 20 77 69 6c 6c 20 6e | bnets.on.the.far.side,.we.will.n |
94720 | 65 65 64 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 74 75 6e 6e 65 6c 73 2e 20 49 66 20 79 6f | eed.two.different.tunnels..If.yo |
94740 | 75 20 63 68 61 6e 67 65 64 20 74 68 65 20 6e 61 6d 65 73 20 6f 66 20 74 68 65 20 45 53 50 20 67 | u.changed.the.names.of.the.ESP.g |
94760 | 72 6f 75 70 20 61 6e 64 20 49 4b 45 20 67 72 6f 75 70 20 69 6e 20 74 68 65 20 70 72 65 76 69 6f | roup.and.IKE.group.in.the.previo |
94780 | 75 73 20 73 74 65 70 2c 20 6d 61 6b 65 20 73 75 72 65 20 79 6f 75 20 75 73 65 20 74 68 65 20 63 | us.step,.make.sure.you.use.the.c |
947a0 | 6f 72 72 65 63 74 20 6e 61 6d 65 73 20 68 65 72 65 20 74 6f 6f 2e 00 57 65 62 20 50 72 6f 78 79 | orrect.names.here.too..Web.Proxy |
947c0 | 20 41 75 74 6f 64 69 73 63 6f 76 65 72 79 20 28 57 50 41 44 29 20 55 52 4c 00 57 65 62 70 72 6f | .Autodiscovery.(WPAD).URL.Webpro |
947e0 | 78 79 00 57 65 62 73 65 72 76 65 72 20 73 68 6f 75 6c 64 20 6c 69 73 74 65 6e 20 6f 6e 20 73 70 | xy.Webserver.should.listen.on.sp |
94800 | 65 63 69 66 69 65 64 20 70 6f 72 74 2e 00 57 65 62 73 65 72 76 65 72 20 73 68 6f 75 6c 64 20 6f | ecified.port..Webserver.should.o |
94820 | 6e 6c 79 20 6c 69 73 74 65 6e 20 6f 6e 20 73 70 65 63 69 66 69 65 64 20 49 50 20 61 64 64 72 65 | nly.listen.on.specified.IP.addre |
94840 | 73 73 00 57 68 65 6e 20 4c 44 50 20 69 73 20 77 6f 72 6b 69 6e 67 2c 20 79 6f 75 20 77 69 6c 6c | ss.When.LDP.is.working,.you.will |
94860 | 20 62 65 20 61 62 6c 65 20 74 6f 20 73 65 65 20 6c 61 62 65 6c 20 69 6e 66 6f 72 6d 61 74 69 6f | .be.able.to.see.label.informatio |
94880 | 6e 20 69 6e 20 74 68 65 20 6f 75 74 63 6f 6d 65 20 6f 66 20 60 60 73 68 6f 77 20 69 70 20 72 6f | n.in.the.outcome.of.``show.ip.ro |
948a0 | 75 74 65 60 60 2e 20 42 65 73 69 64 65 73 20 74 68 61 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c | ute``..Besides.that.information, |
948c0 | 20 74 68 65 72 65 20 61 72 65 20 61 6c 73 6f 20 73 70 65 63 69 66 69 63 20 2a 73 68 6f 77 2a 20 | .there.are.also.specific.*show*. |
948e0 | 63 6f 6d 6d 61 6e 64 73 20 66 6f 72 20 4c 44 50 3a 00 57 68 65 6e 20 50 49 4d 20 72 65 63 65 69 | commands.for.LDP:.When.PIM.recei |
94900 | 76 65 73 20 61 20 72 65 67 69 73 74 65 72 20 70 61 63 6b 65 74 20 74 68 65 20 73 6f 75 72 63 65 | ves.a.register.packet.the.source |
94920 | 20 6f 66 20 74 68 65 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 63 6f 6d 70 61 72 65 64 20 | .of.the.packet.will.be.compared. |
94940 | 74 6f 20 74 68 65 20 70 72 65 66 69 78 2d 6c 69 73 74 20 73 70 65 63 69 66 69 65 64 2c 20 61 6e | to.the.prefix-list.specified,.an |
94960 | 64 20 69 66 20 61 20 70 65 72 6d 69 74 20 69 73 20 72 65 63 65 69 76 65 64 20 6e 6f 72 6d 61 6c | d.if.a.permit.is.received.normal |
94980 | 20 70 72 6f 63 65 73 73 69 6e 67 20 63 6f 6e 74 69 6e 75 65 73 2e 20 49 66 20 61 20 64 65 6e 79 | .processing.continues..If.a.deny |
949a0 | 20 69 73 20 72 65 74 75 72 6e 65 64 20 66 6f 72 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 | .is.returned.for.the.source.addr |
949c0 | 65 73 73 20 6f 66 20 74 68 65 20 72 65 67 69 73 74 65 72 20 70 61 63 6b 65 74 20 61 20 72 65 67 | ess.of.the.register.packet.a.reg |
949e0 | 69 73 74 65 72 20 73 74 6f 70 20 6d 65 73 73 61 67 65 20 69 73 20 73 65 6e 74 20 74 6f 20 74 68 | ister.stop.message.is.sent.to.th |
94a00 | 65 20 73 6f 75 72 63 65 2e 00 57 68 65 6e 20 56 52 46 73 20 61 72 65 20 75 73 65 64 20 69 74 20 | e.source..When.VRFs.are.used.it. |
94a20 | 69 73 20 6e 6f 74 20 6f 6e 6c 79 20 6d 61 6e 64 61 74 6f 72 79 20 74 6f 20 63 72 65 61 74 65 20 | is.not.only.mandatory.to.create. |
94a40 | 61 20 56 52 46 20 62 75 74 20 61 6c 73 6f 20 74 68 65 20 56 52 46 20 69 74 73 65 6c 66 20 6e 65 | a.VRF.but.also.the.VRF.itself.ne |
94a60 | 65 64 73 20 74 6f 20 62 65 20 61 73 73 69 67 6e 65 64 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 | eds.to.be.assigned.to.an.interfa |
94a80 | 63 65 2e 00 57 68 65 6e 20 61 20 60 60 63 75 73 74 6f 6d 60 60 20 44 79 6e 44 4e 53 20 70 72 6f | ce..When.a.``custom``.DynDNS.pro |
94aa0 | 76 69 64 65 72 20 69 73 20 75 73 65 64 20 74 68 65 20 60 3c 73 65 72 76 65 72 3e 60 20 77 68 65 | vider.is.used.the.`<server>`.whe |
94ac0 | 72 65 20 75 70 64 61 74 65 20 72 65 71 75 65 73 74 73 20 61 72 65 20 62 65 69 6e 67 20 73 65 6e | re.update.requests.are.being.sen |
94ae0 | 74 20 74 6f 20 6d 75 73 74 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 00 57 68 65 6e 20 61 20 60 | t.to.must.be.specified..When.a.` |
94b00 | 60 63 75 73 74 6f 6d 60 60 20 44 79 6e 44 4e 53 20 70 72 6f 76 69 64 65 72 20 69 73 20 75 73 65 | `custom``.DynDNS.provider.is.use |
94b20 | 64 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 64 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 | d.the.protocol.used.for.communic |
94b40 | 61 74 69 6e 67 20 74 6f 20 74 68 65 20 70 72 6f 76 69 64 65 72 20 6d 75 73 74 20 62 65 20 73 70 | ating.to.the.provider.must.be.sp |
94b60 | 65 63 69 66 69 65 64 20 75 6e 64 65 72 20 60 3c 70 72 6f 74 6f 63 6f 6c 3e 60 2e 20 53 65 65 20 | ecified.under.`<protocol>`..See. |
94b80 | 74 68 65 20 65 6d 62 65 64 64 65 64 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 68 65 6c 70 65 72 20 66 | the.embedded.completion.helper.f |
94ba0 | 6f 72 20 61 76 61 69 6c 61 62 6c 65 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 57 68 65 6e 20 61 20 60 | or.available.protocols..When.a.` |
94bc0 | 60 63 75 73 74 6f 6d 60 60 20 44 79 6e 44 4e 53 20 70 72 6f 76 69 64 65 72 20 69 73 20 75 73 65 | `custom``.DynDNS.provider.is.use |
94be0 | 64 2c 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 64 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 | d,.the.protocol.used.for.communi |
94c00 | 63 61 74 69 6e 67 20 74 6f 20 74 68 65 20 70 72 6f 76 69 64 65 72 20 6d 75 73 74 20 62 65 20 73 | cating.to.the.provider.must.be.s |
94c20 | 70 65 63 69 66 69 65 64 20 75 6e 64 65 72 20 60 3c 70 72 6f 74 6f 63 6f 6c 3e 60 2e 20 53 65 65 | pecified.under.`<protocol>`..See |
94c40 | 20 74 68 65 20 65 6d 62 65 64 64 65 64 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 68 65 6c 70 65 72 20 | .the.embedded.completion.helper. |
94c60 | 77 68 65 6e 20 65 6e 74 65 72 69 6e 67 20 61 62 6f 76 65 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 20 | when.entering.above.command.for. |
94c80 | 61 76 61 69 6c 61 62 6c 65 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 57 68 65 6e 20 61 20 66 61 69 6c | available.protocols..When.a.fail |
94ca0 | 6f 76 65 72 20 6f 63 63 75 72 73 20 69 6e 20 61 63 74 69 76 65 2d 62 61 63 6b 75 70 20 6d 6f 64 | over.occurs.in.active-backup.mod |
94cc0 | 65 2c 20 62 6f 6e 64 69 6e 67 20 77 69 6c 6c 20 69 73 73 75 65 20 6f 6e 65 20 6f 72 20 6d 6f 72 | e,.bonding.will.issue.one.or.mor |
94ce0 | 65 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 73 20 6f 6e 20 74 68 65 20 6e 65 77 6c 79 20 61 | e.gratuitous.ARPs.on.the.newly.a |
94d00 | 63 74 69 76 65 20 73 6c 61 76 65 2e 20 4f 6e 65 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 20 | ctive.slave..One.gratuitous.ARP. |
94d20 | 69 73 20 69 73 73 75 65 64 20 66 6f 72 20 74 68 65 20 62 6f 6e 64 69 6e 67 20 6d 61 73 74 65 72 | is.issued.for.the.bonding.master |
94d40 | 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 65 61 63 68 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 | .interface.and.each.VLAN.interfa |
94d60 | 63 65 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 62 6f 76 65 20 69 74 2c 20 70 72 6f 76 69 64 65 | ces.configured.above.it,.provide |
94d80 | 64 20 74 68 61 74 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 68 61 73 20 61 74 20 6c 65 61 73 | d.that.the.interface.has.at.leas |
94da0 | 74 20 6f 6e 65 20 49 50 20 61 64 64 72 65 73 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 47 72 61 | t.one.IP.address.configured..Gra |
94dc0 | 74 75 69 74 6f 75 73 20 41 52 50 73 20 69 73 73 75 65 64 20 66 6f 72 20 56 4c 41 4e 20 69 6e 74 | tuitous.ARPs.issued.for.VLAN.int |
94de0 | 65 72 66 61 63 65 73 20 61 72 65 20 74 61 67 67 65 64 20 77 69 74 68 20 74 68 65 20 61 70 70 72 | erfaces.are.tagged.with.the.appr |
94e00 | 6f 70 72 69 61 74 65 20 56 4c 41 4e 20 69 64 2e 00 57 68 65 6e 20 61 20 6c 69 6e 6b 20 69 73 20 | opriate.VLAN.id..When.a.link.is. |
94e20 | 72 65 63 6f 6e 6e 65 63 74 65 64 20 6f 72 20 61 20 6e 65 77 20 73 6c 61 76 65 20 6a 6f 69 6e 73 | reconnected.or.a.new.slave.joins |
94e40 | 20 74 68 65 20 62 6f 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 20 74 72 61 66 66 69 63 20 69 73 | .the.bond.the.receive.traffic.is |
94e60 | 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 61 6d 6f 6e 67 20 61 6c 6c 20 61 63 74 69 76 65 20 | .redistributed.among.all.active. |
94e80 | 73 6c 61 76 65 73 20 69 6e 20 74 68 65 20 62 6f 6e 64 20 62 79 20 69 6e 69 74 69 61 74 69 6e 67 | slaves.in.the.bond.by.initiating |
94ea0 | 20 41 52 50 20 52 65 70 6c 69 65 73 20 77 69 74 68 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 4d | .ARP.Replies.with.the.selected.M |
94ec0 | 41 43 20 61 64 64 72 65 73 73 20 74 6f 20 65 61 63 68 20 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 | AC.address.to.each.of.the.client |
94ee0 | 73 2e 20 54 68 65 20 75 70 64 65 6c 61 79 20 70 61 72 61 6d 65 74 65 72 20 28 64 65 74 61 69 6c | s..The.updelay.parameter.(detail |
94f00 | 65 64 20 62 65 6c 6f 77 29 20 6d 75 73 74 20 62 65 20 73 65 74 20 74 6f 20 61 20 76 61 6c 75 65 | ed.below).must.be.set.to.a.value |
94f20 | 20 65 71 75 61 6c 20 6f 72 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 74 68 65 20 73 77 69 74 63 | .equal.or.greater.than.the.switc |
94f40 | 68 27 73 20 66 6f 72 77 61 72 64 69 6e 67 20 64 65 6c 61 79 20 73 6f 20 74 68 61 74 20 74 68 65 | h's.forwarding.delay.so.that.the |
94f60 | 20 41 52 50 20 52 65 70 6c 69 65 73 20 73 65 6e 74 20 74 6f 20 74 68 65 20 70 65 65 72 73 20 77 | .ARP.Replies.sent.to.the.peers.w |
94f80 | 69 6c 6c 20 6e 6f 74 20 62 65 20 62 6c 6f 63 6b 65 64 20 62 79 20 74 68 65 20 73 77 69 74 63 68 | ill.not.be.blocked.by.the.switch |
94fa0 | 2e 00 57 68 65 6e 20 61 20 70 61 63 6b 65 74 20 69 73 20 74 6f 20 62 65 20 73 65 6e 74 2c 20 69 | ..When.a.packet.is.to.be.sent,.i |
94fc0 | 74 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 67 6f 20 74 68 72 6f 75 67 68 20 74 68 61 74 20 71 | t.will.have.to.go.through.that.q |
94fe0 | 75 65 75 65 2c 20 73 6f 20 74 68 65 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 70 6c 61 63 | ueue,.so.the.packet.will.be.plac |
95000 | 65 64 20 61 74 20 74 68 65 20 74 61 69 6c 20 6f 66 20 69 74 2e 20 57 68 65 6e 20 74 68 65 20 70 | ed.at.the.tail.of.it..When.the.p |
95020 | 61 63 6b 65 74 20 63 6f 6d 70 6c 65 74 65 6c 79 20 67 6f 65 73 20 74 68 72 6f 75 67 68 20 69 74 | acket.completely.goes.through.it |
95040 | 2c 20 69 74 20 77 69 6c 6c 20 62 65 20 64 65 71 75 65 75 65 64 20 65 6d 70 74 79 69 6e 67 20 69 | ,.it.will.be.dequeued.emptying.i |
95060 | 74 73 20 70 6c 61 63 65 20 69 6e 20 74 68 65 20 71 75 65 75 65 20 61 6e 64 20 62 65 69 6e 67 20 | ts.place.in.the.queue.and.being. |
95080 | 65 76 65 6e 74 75 61 6c 6c 79 20 68 61 6e 64 65 64 20 74 6f 20 74 68 65 20 4e 49 43 20 74 6f 20 | eventually.handed.to.the.NIC.to. |
950a0 | 62 65 20 61 63 74 75 61 6c 6c 79 20 73 65 6e 74 20 6f 75 74 2e 00 57 68 65 6e 20 61 20 70 65 65 | be.actually.sent.out..When.a.pee |
950c0 | 72 20 72 65 63 65 69 76 65 73 20 61 20 6d 61 72 74 69 61 6e 20 6e 65 78 74 68 6f 70 20 61 73 20 | r.receives.a.martian.nexthop.as. |
950e0 | 70 61 72 74 20 6f 66 20 74 68 65 20 4e 4c 52 49 20 66 6f 72 20 61 20 72 6f 75 74 65 20 70 65 72 | part.of.the.NLRI.for.a.route.per |
95100 | 6d 69 74 20 74 68 65 20 6e 65 78 74 68 6f 70 20 74 6f 20 62 65 20 75 73 65 64 20 61 73 20 73 75 | mit.the.nexthop.to.be.used.as.su |
95120 | 63 68 2c 20 69 6e 73 74 65 61 64 20 6f 66 20 72 65 6a 65 63 74 69 6e 67 20 61 6e 64 20 72 65 73 | ch,.instead.of.rejecting.and.res |
95140 | 65 74 74 69 6e 67 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 57 68 65 6e 20 61 20 72 6f | etting.the.connection..When.a.ro |
95160 | 75 74 65 20 66 61 69 6c 73 2c 20 61 20 72 6f 75 74 69 6e 67 20 75 70 64 61 74 65 20 69 73 20 73 | ute.fails,.a.routing.update.is.s |
95180 | 65 6e 74 20 74 6f 20 77 69 74 68 64 72 61 77 20 74 68 65 20 72 6f 75 74 65 20 66 72 6f 6d 20 74 | ent.to.withdraw.the.route.from.t |
951a0 | 68 65 20 6e 65 74 77 6f 72 6b 27 73 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 2e 20 57 68 65 | he.network's.routing.tables..Whe |
951c0 | 6e 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 72 65 2d 65 6e 61 62 6c 65 64 2c 20 74 68 65 20 63 | n.the.route.is.re-enabled,.the.c |
951e0 | 68 61 6e 67 65 20 69 6e 20 61 76 61 69 6c 61 62 69 6c 69 74 79 20 69 73 20 61 6c 73 6f 20 61 64 | hange.in.availability.is.also.ad |
95200 | 76 65 72 74 69 73 65 64 2e 20 41 20 72 6f 75 74 65 20 74 68 61 74 20 63 6f 6e 74 69 6e 75 61 6c | vertised..A.route.that.continual |
95220 | 6c 79 20 66 61 69 6c 73 20 61 6e 64 20 72 65 74 75 72 6e 73 20 72 65 71 75 69 72 65 73 20 61 20 | ly.fails.and.returns.requires.a. |
95240 | 67 72 65 61 74 20 64 65 61 6c 20 6f 66 20 6e 65 74 77 6f 72 6b 20 74 72 61 66 66 69 63 20 74 6f | great.deal.of.network.traffic.to |
95260 | 20 75 70 64 61 74 65 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 61 62 6f 75 74 20 74 68 65 20 72 6f | .update.the.network.about.the.ro |
95280 | 75 74 65 27 73 20 73 74 61 74 75 73 2e 00 57 68 65 6e 20 61 64 64 69 6e 67 20 49 50 76 36 20 72 | ute's.status..When.adding.IPv6.r |
952a0 | 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 65 78 63 68 61 6e 67 65 20 66 65 61 74 | outing.information.exchange.feat |
952c0 | 75 72 65 20 74 6f 20 42 47 50 2e 20 54 68 65 72 65 20 77 65 72 65 20 73 6f 6d 65 20 70 72 6f 70 | ure.to.BGP..There.were.some.prop |
952e0 | 6f 73 61 6c 73 2e 20 3a 61 62 62 72 3a 60 49 45 54 46 20 28 49 6e 74 65 72 6e 65 74 20 45 6e 67 | osals..:abbr:`IETF.(Internet.Eng |
95300 | 69 6e 65 65 72 69 6e 67 20 54 61 73 6b 20 46 6f 72 63 65 29 60 20 3a 61 62 62 72 3a 60 49 44 52 | ineering.Task.Force)`.:abbr:`IDR |
95320 | 20 28 49 6e 74 65 72 20 44 6f 6d 61 69 6e 20 52 6f 75 74 69 6e 67 29 60 20 61 64 6f 70 74 65 64 | .(Inter.Domain.Routing)`.adopted |
95340 | 20 61 20 70 72 6f 70 6f 73 61 6c 20 63 61 6c 6c 65 64 20 4d 75 6c 74 69 70 72 6f 74 6f 63 6f 6c | .a.proposal.called.Multiprotocol |
95360 | 20 45 78 74 65 6e 73 69 6f 6e 20 66 6f 72 20 42 47 50 2e 20 54 68 65 20 73 70 65 63 69 66 69 63 | .Extension.for.BGP..The.specific |
95380 | 61 74 69 6f 6e 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 32 32 38 33 | ation.is.described.in.:rfc:`2283 |
953a0 | 60 2e 20 54 68 65 20 70 72 6f 74 6f 63 6f 6c 20 64 6f 65 73 20 6e 6f 74 20 64 65 66 69 6e 65 20 | `..The.protocol.does.not.define. |
953c0 | 6e 65 77 20 70 72 6f 74 6f 63 6f 6c 73 2e 20 49 74 20 64 65 66 69 6e 65 73 20 6e 65 77 20 61 74 | new.protocols..It.defines.new.at |
953e0 | 74 72 69 62 75 74 65 73 20 74 6f 20 65 78 69 73 74 69 6e 67 20 42 47 50 2e 20 57 68 65 6e 20 69 | tributes.to.existing.BGP..When.i |
95400 | 74 20 69 73 20 75 73 65 64 20 65 78 63 68 61 6e 67 69 6e 67 20 49 50 76 36 20 72 6f 75 74 69 6e | t.is.used.exchanging.IPv6.routin |
95420 | 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 74 20 69 73 20 63 61 6c 6c 65 64 20 42 47 50 2d 34 | g.information.it.is.called.BGP-4 |
95440 | 2b 2e 20 57 68 65 6e 20 69 74 20 69 73 20 75 73 65 64 20 66 6f 72 20 65 78 63 68 61 6e 67 69 6e | +..When.it.is.used.for.exchangin |
95460 | 67 20 6d 75 6c 74 69 63 61 73 74 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | g.multicast.routing.information. |
95480 | 69 74 20 69 73 20 63 61 6c 6c 65 64 20 4d 42 47 50 2e 00 57 68 65 6e 20 61 6e 20 61 75 74 68 6f | it.is.called.MBGP..When.an.autho |
954a0 | 72 69 74 61 74 69 76 65 20 73 65 72 76 65 72 20 64 6f 65 73 20 6e 6f 74 20 61 6e 73 77 65 72 20 | ritative.server.does.not.answer. |
954c0 | 61 20 71 75 65 72 79 20 6f 72 20 73 65 6e 64 73 20 61 20 72 65 70 6c 79 20 74 68 65 20 72 65 63 | a.query.or.sends.a.reply.the.rec |
954e0 | 75 72 73 6f 72 20 64 6f 65 73 20 6e 6f 74 20 6c 69 6b 65 2c 20 69 74 20 69 73 20 74 68 72 6f 74 | ursor.does.not.like,.it.is.throt |
95500 | 74 6c 65 64 2e 20 41 6e 79 20 73 65 72 76 65 72 73 20 6d 61 74 63 68 69 6e 67 20 74 68 65 20 73 | tled..Any.servers.matching.the.s |
95520 | 75 70 70 6c 69 65 64 20 6e 65 74 6d 61 73 6b 73 20 77 69 6c 6c 20 6e 65 76 65 72 20 62 65 20 74 | upplied.netmasks.will.never.be.t |
95540 | 68 72 6f 74 74 6c 65 64 2e 00 57 68 65 6e 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 50 50 50 6f 45 | hrottled..When.configured,.PPPoE |
95560 | 20 77 69 6c 6c 20 63 72 65 61 74 65 20 74 68 65 20 6e 65 63 65 73 73 61 72 79 20 56 4c 41 4e 73 | .will.create.the.necessary.VLANs |
95580 | 20 77 68 65 6e 20 72 65 71 75 69 72 65 64 2e 20 4f 6e 63 65 20 74 68 65 20 75 73 65 72 20 73 65 | .when.required..Once.the.user.se |
955a0 | 73 73 69 6f 6e 20 68 61 73 20 62 65 65 6e 20 63 61 6e 63 65 6c 6c 65 64 20 61 6e 64 20 74 68 65 | ssion.has.been.cancelled.and.the |
955c0 | 20 56 4c 41 4e 20 69 73 20 6e 6f 74 20 6e 65 65 64 65 64 20 61 6e 79 6d 6f 72 65 2c 20 56 79 4f | .VLAN.is.not.needed.anymore,.VyO |
955e0 | 53 20 77 69 6c 6c 20 72 65 6d 6f 76 65 20 69 74 20 61 67 61 69 6e 2e 00 57 68 65 6e 20 63 6f 6e | S.will.remove.it.again..When.con |
95600 | 66 69 67 75 72 69 6e 67 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 3a | figuring.a.Random-Detect.policy: |
95620 | 20 2a 2a 74 68 65 20 68 69 67 68 65 72 20 74 68 65 20 70 72 65 63 65 64 65 6e 63 65 20 6e 75 6d | .**the.higher.the.precedence.num |
95640 | 62 65 72 2c 20 74 68 65 20 68 69 67 68 65 72 20 74 68 65 20 70 72 69 6f 72 69 74 79 2a 2a 2e 00 | ber,.the.higher.the.priority**.. |
95660 | 57 68 65 6e 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 79 6f 75 72 20 66 69 6c 74 65 72 2c 20 79 6f | When.configuring.your.filter,.yo |
95680 | 75 20 63 61 6e 20 75 73 65 20 74 68 65 20 60 60 54 61 62 60 60 20 6b 65 79 20 74 6f 20 73 65 65 | u.can.use.the.``Tab``.key.to.see |
956a0 | 20 74 68 65 20 6d 61 6e 79 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 61 6d 65 74 65 72 73 20 79 | .the.many.different.parameters.y |
956c0 | 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 2e 00 57 68 65 6e 20 63 6f 6e 66 69 67 75 72 69 | ou.can.configure..When.configuri |
956e0 | 6e 67 20 79 6f 75 72 20 74 72 61 66 66 69 63 20 70 6f 6c 69 63 79 2c 20 79 6f 75 20 77 69 6c 6c | ng.your.traffic.policy,.you.will |
95700 | 20 68 61 76 65 20 74 6f 20 73 65 74 20 64 61 74 61 20 72 61 74 65 20 76 61 6c 75 65 73 2c 20 77 | .have.to.set.data.rate.values,.w |
95720 | 61 74 63 68 20 6f 75 74 20 74 68 65 20 75 6e 69 74 73 20 79 6f 75 20 61 72 65 20 6d 61 6e 61 67 | atch.out.the.units.you.are.manag |
95740 | 69 6e 67 2c 20 69 74 20 69 73 20 65 61 73 79 20 74 6f 20 67 65 74 20 63 6f 6e 66 75 73 65 64 20 | ing,.it.is.easy.to.get.confused. |
95760 | 77 69 74 68 20 74 68 65 20 64 69 66 66 65 72 65 6e 74 20 70 72 65 66 69 78 65 73 20 61 6e 64 20 | with.the.different.prefixes.and. |
95780 | 73 75 66 66 69 78 65 73 20 79 6f 75 20 63 61 6e 20 75 73 65 2e 20 56 79 4f 53 20 77 69 6c 6c 20 | suffixes.you.can.use..VyOS.will. |
957a0 | 61 6c 77 61 79 73 20 73 68 6f 77 20 79 6f 75 20 74 68 65 20 64 69 66 66 65 72 65 6e 74 20 75 6e | always.show.you.the.different.un |
957c0 | 69 74 73 20 79 6f 75 20 63 61 6e 20 75 73 65 2e 00 57 68 65 6e 20 64 65 66 69 6e 69 6e 67 20 61 | its.you.can.use..When.defining.a |
957e0 | 20 72 75 6c 65 2c 20 69 74 20 69 73 20 65 6e 61 62 6c 65 20 62 79 20 64 65 66 61 75 6c 74 2e 20 | .rule,.it.is.enable.by.default.. |
95800 | 49 6e 20 73 6f 6d 65 20 63 61 73 65 73 2c 20 69 74 20 69 73 20 75 73 65 66 75 6c 20 74 6f 20 6a | In.some.cases,.it.is.useful.to.j |
95820 | 75 73 74 20 64 69 73 61 62 6c 65 20 74 68 65 20 72 75 6c 65 2c 20 72 61 74 68 65 72 20 74 68 61 | ust.disable.the.rule,.rather.tha |
95840 | 6e 20 72 65 6d 6f 76 69 6e 67 20 69 74 2e 00 57 68 65 6e 20 64 65 66 69 6e 69 6e 67 20 74 68 65 | n.removing.it..When.defining.the |
95860 | 20 74 72 61 6e 73 6c 61 74 65 64 20 61 64 64 72 65 73 73 2c 20 63 61 6c 6c 65 64 20 60 60 62 61 | .translated.address,.called.``ba |
95880 | 63 6b 65 6e 64 73 60 60 2c 20 61 20 60 60 77 65 69 67 68 74 60 60 20 6d 75 73 74 20 62 65 20 63 | ckends``,.a.``weight``.must.be.c |
958a0 | 6f 6e 66 69 67 75 72 65 64 2e 20 54 68 69 73 20 6c 65 74 73 20 74 68 65 20 75 73 65 72 20 64 65 | onfigured..This.lets.the.user.de |
958c0 | 66 69 6e 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 61 | fine.load.balance.distribution.a |
958e0 | 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 69 72 20 6e 65 65 64 73 2e 20 54 68 65 6d 20 73 75 | ccording.to.their.needs..Them.su |
95900 | 6d 20 6f 66 20 61 6c 6c 20 74 68 65 20 77 65 69 67 68 74 73 20 64 65 66 69 6e 65 64 20 66 6f 72 | m.of.all.the.weights.defined.for |
95920 | 20 74 68 65 20 62 61 63 6b 65 6e 64 73 20 73 68 6f 75 6c 64 20 62 65 20 65 71 75 61 6c 20 74 6f | .the.backends.should.be.equal.to |
95940 | 20 31 30 30 2e 20 49 6e 20 6f 64 65 72 20 77 6f 72 64 73 2c 20 74 68 65 20 77 65 69 67 68 74 20 | .100..In.oder.words,.the.weight. |
95960 | 64 65 66 69 6e 65 64 20 66 6f 72 20 74 68 65 20 62 61 63 6b 65 6e 64 20 69 73 20 74 68 65 20 70 | defined.for.the.backend.is.the.p |
95980 | 65 72 63 65 6e 74 61 67 65 20 6f 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 68 61 | ercentage.of.the.connections.tha |
959a0 | 74 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 73 75 63 68 20 62 61 63 6b 65 6e 64 2e 00 57 68 65 | t.will.receive.such.backend..Whe |
959c0 | 6e 20 64 65 71 75 65 75 69 6e 67 2c 20 65 61 63 68 20 68 61 73 68 2d 62 75 63 6b 65 74 20 77 69 | n.dequeuing,.each.hash-bucket.wi |
959e0 | 74 68 20 64 61 74 61 20 69 73 20 71 75 65 72 69 65 64 20 69 6e 20 61 20 72 6f 75 6e 64 20 72 6f | th.data.is.queried.in.a.round.ro |
95a00 | 62 69 6e 20 66 61 73 68 69 6f 6e 2e 20 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 74 | bin.fashion..You.can.configure.t |
95a20 | 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 71 75 65 75 65 2e 00 57 68 65 6e 20 64 65 73 | he.length.of.the.queue..When.des |
95a40 | 69 67 6e 69 6e 67 20 79 6f 75 72 20 4e 41 54 20 72 75 6c 65 73 65 74 20 6c 65 61 76 65 20 73 6f | igning.your.NAT.ruleset.leave.so |
95a60 | 6d 65 20 73 70 61 63 65 20 62 65 74 77 65 65 6e 20 63 6f 6e 73 65 63 75 74 69 76 65 20 72 75 6c | me.space.between.consecutive.rul |
95a80 | 65 73 20 66 6f 72 20 6c 61 74 65 72 20 65 78 74 65 6e 73 69 6f 6e 2e 20 59 6f 75 72 20 72 75 6c | es.for.later.extension..Your.rul |
95aa0 | 65 73 65 74 20 63 6f 75 6c 64 20 73 74 61 72 74 20 77 69 74 68 20 6e 75 6d 62 65 72 73 20 31 30 | eset.could.start.with.numbers.10 |
95ac0 | 2c 20 32 30 2c 20 33 30 2e 20 59 6f 75 20 74 68 75 73 20 63 61 6e 20 6c 61 74 65 72 20 65 78 74 | ,.20,.30..You.thus.can.later.ext |
95ae0 | 65 6e 64 20 74 68 65 20 72 75 6c 65 73 65 74 20 61 6e 64 20 70 6c 61 63 65 20 6e 65 77 20 72 75 | end.the.ruleset.and.place.new.ru |
95b00 | 6c 65 73 20 62 65 74 77 65 65 6e 20 65 78 69 73 74 69 6e 67 20 6f 6e 65 73 2e 00 57 68 65 6e 20 | les.between.existing.ones..When. |
95b20 | 64 6f 69 6e 67 20 66 61 75 6c 74 20 69 73 6f 6c 61 74 69 6f 6e 20 77 69 74 68 20 70 69 6e 67 2c | doing.fault.isolation.with.ping, |
95b40 | 20 79 6f 75 20 73 68 6f 75 6c 64 20 66 69 72 73 74 20 72 75 6e 20 69 74 20 6f 6e 20 74 68 65 20 | .you.should.first.run.it.on.the. |
95b60 | 6c 6f 63 61 6c 20 68 6f 73 74 2c 20 74 6f 20 76 65 72 69 66 79 20 74 68 61 74 20 74 68 65 20 6c | local.host,.to.verify.that.the.l |
95b80 | 6f 63 61 6c 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 75 70 20 61 6e 64 | ocal.network.interface.is.up.and |
95ba0 | 20 72 75 6e 6e 69 6e 67 2e 20 54 68 65 6e 2c 20 63 6f 6e 74 69 6e 75 65 20 77 69 74 68 20 68 6f | .running..Then,.continue.with.ho |
95bc0 | 73 74 73 20 61 6e 64 20 67 61 74 65 77 61 79 73 20 66 75 72 74 68 65 72 20 64 6f 77 6e 20 74 68 | sts.and.gateways.further.down.th |
95be0 | 65 20 72 6f 61 64 20 74 6f 77 61 72 64 73 20 79 6f 75 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e | e.road.towards.your.destination. |
95c00 | 20 52 6f 75 6e 64 2d 74 72 69 70 20 74 69 6d 65 20 61 6e 64 20 70 61 63 6b 65 74 20 6c 6f 73 73 | .Round-trip.time.and.packet.loss |
95c20 | 20 73 74 61 74 69 73 74 69 63 73 20 61 72 65 20 63 6f 6d 70 75 74 65 64 2e 00 57 68 65 6e 20 66 | .statistics.are.computed..When.f |
95c40 | 69 72 73 74 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 74 68 65 20 6e 65 77 20 56 50 4e 20 74 | irst.connecting.to.the.new.VPN.t |
95c60 | 68 65 20 75 73 65 72 20 69 73 20 70 72 6f 6d 70 74 65 64 20 74 6f 20 65 6e 74 65 72 20 70 72 6f | he.user.is.prompted.to.enter.pro |
95c80 | 70 65 72 20 63 72 65 64 65 6e 74 69 61 6c 73 2e 00 57 68 65 6e 20 6c 6f 61 64 69 6e 67 20 74 68 | per.credentials..When.loading.th |
95ca0 | 65 20 63 65 72 74 69 66 69 63 61 74 65 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 6d 61 6e 75 61 6c | e.certificate.you.need.to.manual |
95cc0 | 6c 79 20 73 74 72 69 70 20 74 68 65 20 60 60 2d 2d 2d 2d 2d 42 45 47 49 4e 20 43 45 52 54 49 46 | ly.strip.the.``-----BEGIN.CERTIF |
95ce0 | 49 43 41 54 45 2d 2d 2d 2d 2d 60 60 20 61 6e 64 20 60 60 2d 2d 2d 2d 2d 45 4e 44 20 43 45 52 54 | ICATE-----``.and.``-----END.CERT |
95d00 | 49 46 49 43 41 54 45 2d 2d 2d 2d 2d 60 60 20 74 61 67 73 2e 20 41 6c 73 6f 2c 20 74 68 65 20 63 | IFICATE-----``.tags..Also,.the.c |
95d20 | 65 72 74 69 66 69 63 61 74 65 2f 6b 65 79 20 6e 65 65 64 73 20 74 6f 20 62 65 20 70 72 65 73 65 | ertificate/key.needs.to.be.prese |
95d40 | 6e 74 65 64 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 6c 69 6e 65 20 77 69 74 68 6f 75 74 20 6c 69 | nted.in.a.single.line.without.li |
95d60 | 6e 65 20 62 72 65 61 6b 73 20 28 60 60 5c 6e 60 60 29 2c 20 74 68 69 73 20 63 61 6e 20 62 65 20 | ne.breaks.(``\n``),.this.can.be. |
95d80 | 64 6f 6e 65 20 75 73 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 68 65 6c 6c 20 63 | done.using.the.following.shell.c |
95da0 | 6f 6d 6d 61 6e 64 3a 00 57 68 65 6e 20 6c 6f 61 64 69 6e 67 20 74 68 65 20 63 65 72 74 69 66 69 | ommand:.When.loading.the.certifi |
95dc0 | 63 61 74 65 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 6d 61 6e 75 61 6c 6c 79 20 73 74 72 69 70 20 | cate.you.need.to.manually.strip. |
95de0 | 74 68 65 20 60 60 2d 2d 2d 2d 2d 42 45 47 49 4e 20 4b 45 59 2d 2d 2d 2d 2d 60 60 20 61 6e 64 20 | the.``-----BEGIN.KEY-----``.and. |
95e00 | 60 60 2d 2d 2d 2d 2d 45 4e 44 20 4b 45 59 2d 2d 2d 2d 2d 60 60 20 74 61 67 73 2e 20 41 6c 73 6f | ``-----END.KEY-----``.tags..Also |
95e20 | 2c 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 2f 6b 65 79 20 6e 65 65 64 73 20 74 6f 20 62 | ,.the.certificate/key.needs.to.b |
95e40 | 65 20 70 72 65 73 65 6e 74 65 64 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 6c 69 6e 65 20 77 69 74 | e.presented.in.a.single.line.wit |
95e60 | 68 6f 75 74 20 6c 69 6e 65 20 62 72 65 61 6b 73 20 28 60 60 5c 6e 60 60 29 2c 20 74 68 69 73 20 | hout.line.breaks.(``\n``),.this. |
95e80 | 63 61 6e 20 62 65 20 64 6f 6e 65 20 75 73 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 | can.be.done.using.the.following. |
95ea0 | 73 68 65 6c 6c 20 63 6f 6d 6d 61 6e 64 3a 00 57 68 65 6e 20 6d 61 74 68 63 69 6e 67 20 61 6c 6c | shell.command:.When.mathcing.all |
95ec0 | 20 70 61 74 74 65 72 6e 73 20 64 65 66 69 6e 65 64 20 69 6e 20 61 20 72 75 6c 65 2c 20 74 68 65 | .patterns.defined.in.a.rule,.the |
95ee0 | 6e 20 64 69 66 66 65 72 65 6e 74 20 61 63 74 69 6f 6e 73 20 63 61 6e 20 62 65 20 6d 61 64 65 2e | n.different.actions.can.be.made. |
95f00 | 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 64 72 6f 70 69 6e 67 20 74 68 65 20 70 61 63 6b 65 | .This.includes.droping.the.packe |
95f20 | 74 2c 20 6d 6f 64 69 66 79 69 6e 67 20 63 65 72 74 61 69 6e 20 64 61 74 61 2c 20 6f 72 20 73 65 | t,.modifying.certain.data,.or.se |
95f40 | 74 74 69 6e 67 20 61 20 64 69 66 66 65 72 65 6e 74 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e | tting.a.different.routing.table. |
95f60 | 00 57 68 65 6e 20 6e 6f 20 6f 70 74 69 6f 6e 73 2f 70 61 72 61 6d 65 74 65 72 73 20 61 72 65 20 | .When.no.options/parameters.are. |
95f80 | 75 73 65 64 2c 20 74 68 65 20 63 6f 6e 74 65 6e 74 73 20 6f 66 20 74 68 65 20 6d 61 69 6e 20 73 | used,.the.contents.of.the.main.s |
95fa0 | 79 73 6c 6f 67 20 66 69 6c 65 20 61 72 65 20 64 69 73 70 6c 61 79 65 64 2e 00 57 68 65 6e 20 6e | yslog.file.are.displayed..When.n |
95fc0 | 6f 2d 72 65 6c 65 61 73 65 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 64 68 63 70 36 63 20 77 | o-release.is.specified,.dhcp6c.w |
95fe0 | 69 6c 6c 20 73 65 6e 64 20 61 20 72 65 6c 65 61 73 65 20 6d 65 73 73 61 67 65 20 6f 6e 20 63 6c | ill.send.a.release.message.on.cl |
96000 | 69 65 6e 74 20 65 78 69 74 20 74 6f 20 70 72 65 76 65 6e 74 20 6c 6f 73 69 6e 67 20 61 6e 20 61 | ient.exit.to.prevent.losing.an.a |
96020 | 73 73 69 67 6e 65 64 20 61 64 64 72 65 73 73 20 6f 72 20 70 72 65 66 69 78 2e 00 57 68 65 6e 20 | ssigned.address.or.prefix..When. |
96040 | 70 72 6f 63 65 73 73 69 6e 67 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 61 20 6e 65 69 67 68 62 | processing.packets.from.a.neighb |
96060 | 6f 72 20 70 72 6f 63 65 73 73 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 | or.process.the.number.of.packets |
96080 | 20 69 6e 63 6f 6d 69 6e 67 20 61 74 20 6f 6e 65 20 74 69 6d 65 20 62 65 66 6f 72 65 20 6d 6f 76 | .incoming.at.one.time.before.mov |
960a0 | 69 6e 67 20 6f 6e 20 74 6f 20 74 68 65 20 6e 65 78 74 20 74 61 73 6b 2e 00 57 68 65 6e 20 72 61 | ing.on.to.the.next.task..When.ra |
960c0 | 70 69 64 2d 63 6f 6d 6d 69 74 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 64 68 63 70 36 63 20 | pid-commit.is.specified,.dhcp6c. |
960e0 | 77 69 6c 6c 20 69 6e 63 6c 75 64 65 20 61 20 72 61 70 69 64 2d 63 6f 6d 6d 69 74 20 6f 70 74 69 | will.include.a.rapid-commit.opti |
96100 | 6f 6e 20 69 6e 20 73 6f 6c 69 63 69 74 20 6d 65 73 73 61 67 65 73 20 61 6e 64 20 77 61 69 74 20 | on.in.solicit.messages.and.wait. |
96120 | 66 6f 72 20 61 6e 20 69 6d 6d 65 64 69 61 74 65 20 72 65 70 6c 79 20 69 6e 73 74 65 61 64 20 6f | for.an.immediate.reply.instead.o |
96140 | 66 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 2e 00 57 68 65 6e 20 72 65 6d 6f 74 65 20 70 65 | f.advertisements..When.remote.pe |
96160 | 65 72 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 63 61 70 61 62 69 6c 69 74 79 20 6e 65 67 6f | er.does.not.have.capability.nego |
96180 | 74 69 61 74 69 6f 6e 20 66 65 61 74 75 72 65 2c 20 72 65 6d 6f 74 65 20 70 65 65 72 20 77 69 6c | tiation.feature,.remote.peer.wil |
961a0 | 6c 20 6e 6f 74 20 73 65 6e 64 20 61 6e 79 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 61 74 20 61 | l.not.send.any.capabilities.at.a |
961c0 | 6c 6c 2e 20 49 6e 20 74 68 61 74 20 63 61 73 65 2c 20 62 67 70 20 63 6f 6e 66 69 67 75 72 65 73 | ll..In.that.case,.bgp.configures |
961e0 | 20 74 68 65 20 70 65 65 72 20 77 69 74 68 20 63 6f 6e 66 69 67 75 72 65 64 20 63 61 70 61 62 69 | .the.peer.with.configured.capabi |
96200 | 6c 69 74 69 65 73 2e 00 57 68 65 6e 20 72 75 6e 6e 69 6e 67 20 69 74 20 61 74 20 31 47 62 69 74 | lities..When.running.it.at.1Gbit |
96220 | 20 61 6e 64 20 6c 6f 77 65 72 2c 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 72 65 64 75 | .and.lower,.you.may.want.to.redu |
96240 | 63 65 20 74 68 65 20 60 71 75 65 75 65 2d 6c 69 6d 69 74 60 20 74 6f 20 31 30 30 30 20 70 61 63 | ce.the.`queue-limit`.to.1000.pac |
96260 | 6b 65 74 73 20 6f 72 20 6c 65 73 73 2e 20 49 6e 20 72 61 74 65 73 20 6c 69 6b 65 20 31 30 4d 62 | kets.or.less..In.rates.like.10Mb |
96280 | 69 74 2c 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 73 65 74 20 69 74 20 74 6f 20 36 30 | it,.you.may.want.to.set.it.to.60 |
962a0 | 30 20 70 61 63 6b 65 74 73 2e 00 57 68 65 6e 20 73 65 6e 64 69 6e 67 20 50 49 4d 20 68 65 6c 6c | 0.packets..When.sending.PIM.hell |
962c0 | 6f 20 70 61 63 6b 65 74 73 20 74 65 6c 6c 20 50 49 4d 20 74 6f 20 6e 6f 74 20 73 65 6e 64 20 61 | o.packets.tell.PIM.to.not.send.a |
962e0 | 6e 79 20 76 36 20 73 65 63 6f 6e 64 61 72 79 20 61 64 64 72 65 73 73 65 73 20 6f 6e 20 74 68 65 | ny.v6.secondary.addresses.on.the |
96300 | 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 | .interface..This.information.is. |
96320 | 75 73 65 64 20 74 6f 20 61 6c 6c 6f 77 20 50 49 4d 20 74 6f 20 75 73 65 20 76 36 20 6e 65 78 74 | used.to.allow.PIM.to.use.v6.next |
96340 | 68 6f 70 73 20 69 6e 20 69 74 27 73 20 64 65 63 69 73 69 6f 6e 20 66 6f 72 20 3a 61 62 62 72 3a | hops.in.it's.decision.for.:abbr: |
96360 | 60 52 50 46 20 28 52 65 76 65 72 73 65 20 50 61 74 68 20 46 6f 72 77 61 72 64 69 6e 67 29 60 20 | `RPF.(Reverse.Path.Forwarding)`. |
96380 | 6c 6f 6f 6b 75 70 20 69 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 6e 6f 74 20 73 65 74 | lookup.if.this.option.is.not.set |
963a0 | 20 28 64 65 66 61 75 6c 74 29 2e 00 57 68 65 6e 20 73 65 74 20 74 68 65 20 69 6e 74 65 72 66 61 | .(default)..When.set.the.interfa |
963c0 | 63 65 20 69 73 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 22 64 69 61 6c 2d 6f 6e 2d 64 65 6d 61 6e | ce.is.enabled.for."dial-on-deman |
963e0 | 64 22 2e 00 57 68 65 6e 20 73 70 65 63 69 66 69 65 64 2c 20 74 68 69 73 20 73 68 6f 75 6c 64 20 | d"..When.specified,.this.should. |
96400 | 62 65 20 74 68 65 20 6f 6e 6c 79 20 6b 65 79 77 6f 72 64 20 66 6f 72 20 74 68 65 20 69 6e 74 65 | be.the.only.keyword.for.the.inte |
96420 | 72 66 61 63 65 2e 00 57 68 65 6e 20 73 74 61 72 74 69 6e 67 20 61 20 56 79 4f 53 20 6c 69 76 65 | rface..When.starting.a.VyOS.live |
96440 | 20 73 79 73 74 65 6d 20 28 74 68 65 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 20 43 44 29 20 74 68 | .system.(the.installation.CD).th |
96460 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6b 65 79 62 6f 61 72 64 20 6c 61 79 6f 75 74 20 64 65 66 | e.configured.keyboard.layout.def |
96480 | 61 75 6c 74 73 20 74 6f 20 55 53 2e 20 41 73 20 74 68 69 73 20 6d 69 67 68 74 20 6e 6f 74 20 73 | aults.to.US..As.this.might.not.s |
964a0 | 75 69 74 65 20 65 76 65 72 79 6f 6e 65 73 20 75 73 65 20 63 61 73 65 20 79 6f 75 20 63 61 6e 20 | uite.everyones.use.case.you.can. |
964c0 | 61 64 6a 75 73 74 20 74 68 65 20 75 73 65 64 20 6b 65 79 62 6f 61 72 64 20 6c 61 79 6f 75 74 20 | adjust.the.used.keyboard.layout. |
964e0 | 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 20 63 6f 6e 73 6f 6c 65 2e 00 57 68 65 6e 20 74 68 65 20 | on.the.system.console..When.the. |
96500 | 44 48 43 50 20 73 65 72 76 65 72 20 69 73 20 63 6f 6e 73 69 64 65 72 69 6e 67 20 64 79 6e 61 6d | DHCP.server.is.considering.dynam |
96520 | 69 63 61 6c 6c 79 20 61 6c 6c 6f 63 61 74 69 6e 67 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 | ically.allocating.an.IP.address. |
96540 | 74 6f 20 61 20 63 6c 69 65 6e 74 2c 20 69 74 20 66 69 72 73 74 20 73 65 6e 64 73 20 61 6e 20 49 | to.a.client,.it.first.sends.an.I |
96560 | 43 4d 50 20 45 63 68 6f 20 72 65 71 75 65 73 74 20 28 61 20 70 69 6e 67 29 20 74 6f 20 74 68 65 | CMP.Echo.request.(a.ping).to.the |
96580 | 20 61 64 64 72 65 73 73 20 62 65 69 6e 67 20 61 73 73 69 67 6e 65 64 2e 20 49 74 20 77 61 69 74 | .address.being.assigned..It.wait |
965a0 | 73 20 66 6f 72 20 61 20 73 65 63 6f 6e 64 2c 20 61 6e 64 20 69 66 20 6e 6f 20 49 43 4d 50 20 45 | s.for.a.second,.and.if.no.ICMP.E |
965c0 | 63 68 6f 20 72 65 73 70 6f 6e 73 65 20 68 61 73 20 62 65 65 6e 20 68 65 61 72 64 2c 20 69 74 20 | cho.response.has.been.heard,.it. |
965e0 | 61 73 73 69 67 6e 73 20 74 68 65 20 61 64 64 72 65 73 73 2e 00 57 68 65 6e 20 74 68 65 20 63 6c | assigns.the.address..When.the.cl |
96600 | 6f 73 65 2d 61 63 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 73 20 73 65 74 20 6f 6e 20 74 68 65 20 | ose-action.option.is.set.on.the. |
96620 | 70 65 65 72 73 2c 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2d 74 79 70 65 20 6f 66 20 65 61 | peers,.the.connection-type.of.ea |
96640 | 63 68 20 70 65 65 72 20 68 61 73 20 74 6f 20 63 6f 6e 73 69 64 65 72 65 64 20 63 61 72 65 66 75 | ch.peer.has.to.considered.carefu |
96660 | 6c 6c 79 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 66 20 74 68 65 20 6f 70 74 69 6f 6e 20 | lly..For.example,.if.the.option. |
96680 | 69 73 20 73 65 74 20 6f 6e 20 62 6f 74 68 20 70 65 65 72 73 2c 20 74 68 65 6e 20 62 6f 74 68 20 | is.set.on.both.peers,.then.both. |
966a0 | 77 6f 75 6c 64 20 61 74 74 65 6d 70 74 20 74 6f 20 69 6e 69 74 69 61 74 65 20 61 6e 64 20 68 6f | would.attempt.to.initiate.and.ho |
966c0 | 6c 64 20 6f 70 65 6e 20 6d 75 6c 74 69 70 6c 65 20 63 6f 70 69 65 73 20 6f 66 20 65 61 63 68 20 | ld.open.multiple.copies.of.each. |
966e0 | 63 68 69 6c 64 20 53 41 2e 20 54 68 69 73 20 6d 69 67 68 74 20 6c 65 61 64 20 74 6f 20 69 6e 73 | child.SA..This.might.lead.to.ins |
96700 | 74 61 62 69 6c 69 74 79 20 6f 66 20 74 68 65 20 64 65 76 69 63 65 20 6f 72 20 63 70 75 2f 6d 65 | tability.of.the.device.or.cpu/me |
96720 | 6d 6f 72 79 20 75 74 69 6c 69 7a 61 74 69 6f 6e 2e 00 57 68 65 6e 20 74 68 65 20 63 6f 6d 6d 61 | mory.utilization..When.the.comma |
96740 | 6e 64 20 61 62 6f 76 65 20 69 73 20 73 65 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 61 6e 73 77 65 | nd.above.is.set,.VyOS.will.answe |
96760 | 72 20 65 76 65 72 79 20 49 43 4d 50 20 65 63 68 6f 20 72 65 71 75 65 73 74 20 61 64 64 72 65 73 | r.every.ICMP.echo.request.addres |
96780 | 73 65 64 20 74 6f 20 69 74 73 65 6c 66 2c 20 62 75 74 20 74 68 61 74 20 77 69 6c 6c 20 6f 6e 6c | sed.to.itself,.but.that.will.onl |
967a0 | 79 20 68 61 70 70 65 6e 20 69 66 20 6e 6f 20 6f 74 68 65 72 20 72 75 6c 65 20 69 73 20 61 70 70 | y.happen.if.no.other.rule.is.app |
967c0 | 6c 69 65 64 20 64 72 6f 70 70 69 6e 67 20 6f 72 20 72 65 6a 65 63 74 69 6e 67 20 6c 6f 63 61 6c | lied.dropping.or.rejecting.local |
967e0 | 20 65 63 68 6f 20 72 65 71 75 65 73 74 73 2e 20 49 6e 20 63 61 73 65 20 6f 66 20 63 6f 6e 66 6c | .echo.requests..In.case.of.confl |
96800 | 69 63 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 6e 6f 74 20 61 6e 73 77 65 72 20 49 43 4d 50 20 65 | ict,.VyOS.will.not.answer.ICMP.e |
96820 | 63 68 6f 20 72 65 71 75 65 73 74 73 2e 00 57 68 65 6e 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 61 | cho.requests..When.the.command.a |
96840 | 62 6f 76 65 20 69 73 20 73 65 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 61 6e 73 77 65 72 20 6e 6f | bove.is.set,.VyOS.will.answer.no |
96860 | 20 49 43 4d 50 20 65 63 68 6f 20 72 65 71 75 65 73 74 20 61 64 64 72 65 73 73 65 64 20 74 6f 20 | .ICMP.echo.request.addressed.to. |
96880 | 69 74 73 65 6c 66 20 61 74 20 61 6c 6c 2c 20 6e 6f 20 6d 61 74 74 65 72 20 77 68 65 72 65 20 69 | itself.at.all,.no.matter.where.i |
968a0 | 74 20 63 6f 6d 65 73 20 66 72 6f 6d 20 6f 72 20 77 68 65 74 68 65 72 20 6d 6f 72 65 20 73 70 65 | t.comes.from.or.whether.more.spe |
968c0 | 63 69 66 69 63 20 72 75 6c 65 73 20 61 72 65 20 62 65 69 6e 67 20 61 70 70 6c 69 65 64 20 74 6f | cific.rules.are.being.applied.to |
968e0 | 20 61 63 63 65 70 74 20 74 68 65 6d 2e 00 57 68 65 6e 20 74 68 65 20 76 72 72 70 20 67 72 6f 75 | .accept.them..When.the.vrrp.grou |
96900 | 70 20 69 73 20 61 20 6d 65 6d 62 65 72 20 6f 66 20 74 68 65 20 73 79 6e 63 20 67 72 6f 75 70 20 | p.is.a.member.of.the.sync.group. |
96920 | 77 69 6c 6c 20 75 73 65 20 6f 6e 6c 79 20 74 68 65 20 73 79 6e 63 20 67 72 6f 75 70 20 68 65 61 | will.use.only.the.sync.group.hea |
96940 | 6c 74 68 20 63 68 65 63 6b 20 73 63 72 69 70 74 2e 20 54 68 69 73 20 65 78 61 6d 70 6c 65 20 73 | lth.check.script..This.example.s |
96960 | 68 6f 77 73 20 68 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 74 20 66 6f 72 20 74 68 65 | hows.how.to.configure.it.for.the |
96980 | 20 73 79 6e 63 20 67 72 6f 75 70 3a 00 57 68 65 6e 20 75 73 69 6e 67 20 44 48 43 50 20 74 6f 20 | .sync.group:.When.using.DHCP.to. |
969a0 | 72 65 74 72 69 65 76 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 61 6e 64 20 69 66 20 6c 6f 63 | retrieve.IPv4.address.and.if.loc |
969c0 | 61 6c 20 63 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 73 20 61 72 65 20 6e 65 65 64 65 64 2c 20 74 68 | al.customizations.are.needed,.th |
969e0 | 65 79 20 73 68 6f 75 6c 64 20 62 65 20 70 6f 73 73 69 62 6c 65 20 75 73 69 6e 67 20 74 68 65 20 | ey.should.be.possible.using.the. |
96a00 | 65 6e 74 65 72 20 61 6e 64 20 65 78 69 74 20 68 6f 6f 6b 73 20 70 72 6f 76 69 64 65 64 2e 20 54 | enter.and.exit.hooks.provided..T |
96a20 | 68 65 20 68 6f 6f 6b 20 64 69 72 73 20 61 72 65 3a 00 57 68 65 6e 20 75 73 69 6e 67 20 45 56 45 | he.hook.dirs.are:.When.using.EVE |
96a40 | 2d 4e 47 20 74 6f 20 6c 61 62 20 74 68 69 73 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 65 6e 73 75 | -NG.to.lab.this.environment.ensu |
96a60 | 72 65 20 79 6f 75 20 61 72 65 20 75 73 69 6e 67 20 65 31 30 30 30 20 61 73 20 74 68 65 20 64 65 | re.you.are.using.e1000.as.the.de |
96a80 | 73 69 72 65 64 20 64 72 69 76 65 72 20 66 6f 72 20 79 6f 75 72 20 56 79 4f 53 20 6e 65 74 77 6f | sired.driver.for.your.VyOS.netwo |
96aa0 | 72 6b 20 69 6e 74 65 72 66 61 63 65 73 2e 20 57 68 65 6e 20 75 73 69 6e 67 20 74 68 65 20 72 65 | rk.interfaces..When.using.the.re |
96ac0 | 67 75 6c 61 72 20 76 69 72 74 69 6f 20 6e 65 74 77 6f 72 6b 20 64 72 69 76 65 72 20 6e 6f 20 4c | gular.virtio.network.driver.no.L |
96ae0 | 41 43 50 20 50 44 55 73 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 62 79 20 56 79 4f 53 20 74 68 | ACP.PDUs.will.be.sent.by.VyOS.th |
96b00 | 75 73 20 74 68 65 20 70 6f 72 74 2d 63 68 61 6e 6e 65 6c 20 77 69 6c 6c 20 6e 65 76 65 72 20 62 | us.the.port-channel.will.never.b |
96b20 | 65 63 6f 6d 65 20 61 63 74 69 76 65 21 00 57 68 65 6e 20 75 73 69 6e 67 20 4e 41 54 20 66 6f 72 | ecome.active!.When.using.NAT.for |
96b40 | 20 61 20 6c 61 72 67 65 20 6e 75 6d 62 65 72 20 6f 66 20 68 6f 73 74 20 73 79 73 74 65 6d 73 20 | .a.large.number.of.host.systems. |
96b60 | 69 74 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 68 61 74 20 61 20 6d 69 6e 69 6d 75 6d 20 6f 66 | it.recommended.that.a.minimum.of |
96b80 | 20 31 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 75 73 65 64 20 74 6f 20 4e 41 54 20 65 76 65 | .1.IP.address.is.used.to.NAT.eve |
96ba0 | 72 79 20 32 35 36 20 68 6f 73 74 20 73 79 73 74 65 6d 73 2e 20 54 68 69 73 20 69 73 20 64 75 65 | ry.256.host.systems..This.is.due |
96bc0 | 20 74 6f 20 74 68 65 20 6c 69 6d 69 74 20 6f 66 20 36 35 2c 30 30 30 20 70 6f 72 74 20 6e 75 6d | .to.the.limit.of.65,000.port.num |
96be0 | 62 65 72 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 75 6e 69 71 75 65 20 74 72 61 6e 73 6c | bers.available.for.unique.transl |
96c00 | 61 74 69 6f 6e 73 20 61 6e 64 20 61 20 72 65 73 65 72 76 69 6e 67 20 61 6e 20 61 76 65 72 61 67 | ations.and.a.reserving.an.averag |
96c20 | 65 20 6f 66 20 32 30 30 2d 33 30 30 20 73 65 73 73 69 6f 6e 73 20 70 65 72 20 68 6f 73 74 20 73 | e.of.200-300.sessions.per.host.s |
96c40 | 79 73 74 65 6d 2e 00 57 68 65 6e 20 75 73 69 6e 67 20 4e 41 54 20 66 6f 72 20 61 20 6c 61 72 67 | ystem..When.using.NAT.for.a.larg |
96c60 | 65 20 6e 75 6d 62 65 72 20 6f 66 20 68 6f 73 74 20 73 79 73 74 65 6d 73 20 69 74 20 72 65 63 6f | e.number.of.host.systems.it.reco |
96c80 | 6d 6d 65 6e 64 65 64 20 74 68 61 74 20 61 20 6d 69 6e 69 6d 75 6d 20 6f 66 20 31 20 49 50 20 61 | mmended.that.a.minimum.of.1.IP.a |
96ca0 | 64 64 72 65 73 73 20 69 73 20 75 73 65 64 20 74 6f 20 4e 41 54 20 65 76 65 72 79 20 32 35 36 20 | ddress.is.used.to.NAT.every.256. |
96cc0 | 70 72 69 76 61 74 65 20 68 6f 73 74 20 73 79 73 74 65 6d 73 2e 20 54 68 69 73 20 69 73 20 64 75 | private.host.systems..This.is.du |
96ce0 | 65 20 74 6f 20 74 68 65 20 6c 69 6d 69 74 20 6f 66 20 36 35 2c 30 30 30 20 70 6f 72 74 20 6e 75 | e.to.the.limit.of.65,000.port.nu |
96d00 | 6d 62 65 72 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 75 6e 69 71 75 65 20 74 72 61 6e 73 | mbers.available.for.unique.trans |
96d20 | 6c 61 74 69 6f 6e 73 20 61 6e 64 20 61 20 72 65 73 65 72 76 69 6e 67 20 61 6e 20 61 76 65 72 61 | lations.and.a.reserving.an.avera |
96d40 | 67 65 20 6f 66 20 32 30 30 2d 33 30 30 20 73 65 73 73 69 6f 6e 73 20 70 65 72 20 68 6f 73 74 20 | ge.of.200-300.sessions.per.host. |
96d60 | 73 79 73 74 65 6d 2e 00 57 68 65 6e 20 75 73 69 6e 67 20 53 53 48 2c 20 6b 6e 6f 77 6e 2d 68 6f | system..When.using.SSH,.known-ho |
96d80 | 73 74 73 2d 66 69 6c 65 2c 20 70 72 69 76 61 74 65 2d 6b 65 79 2d 66 69 6c 65 20 61 6e 64 20 70 | sts-file,.private-key-file.and.p |
96da0 | 75 62 6c 69 63 2d 6b 65 79 2d 66 69 6c 65 20 61 72 65 20 6d 61 6e 64 61 74 6f 72 79 20 6f 70 74 | ublic-key-file.are.mandatory.opt |
96dc0 | 69 6f 6e 73 2e 00 57 68 65 6e 20 75 73 69 6e 67 20 53 53 48 2c 20 70 72 69 76 61 74 65 2d 6b 65 | ions..When.using.SSH,.private-ke |
96de0 | 79 2d 66 69 6c 65 20 61 6e 64 20 70 75 62 6c 69 63 2d 6b 65 79 2d 66 69 6c 65 20 61 72 65 20 6d | y-file.and.public-key-file.are.m |
96e00 | 61 6e 64 61 74 6f 72 79 20 6f 70 74 69 6f 6e 73 2e 00 57 68 65 6e 20 75 73 69 6e 67 20 54 69 6d | andatory.options..When.using.Tim |
96e20 | 65 2d 62 61 73 65 64 20 6f 6e 65 2d 74 69 6d 65 20 70 61 73 73 77 6f 72 64 20 28 54 4f 54 50 29 | e-based.one-time.password.(TOTP) |
96e40 | 20 28 4f 54 50 20 48 4f 54 50 2d 74 69 6d 65 29 2c 20 62 65 20 73 75 72 65 20 74 68 61 74 20 74 | .(OTP.HOTP-time),.be.sure.that.t |
96e60 | 68 65 20 74 69 6d 65 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 20 61 6e 64 20 74 68 65 20 4f 54 | he.time.on.the.server.and.the.OT |
96e80 | 50 20 74 6f 6b 65 6e 20 67 65 6e 65 72 61 74 6f 72 20 61 72 65 20 73 79 6e 63 68 72 6f 6e 69 7a | P.token.generator.are.synchroniz |
96ea0 | 65 64 20 62 79 20 4e 54 50 00 57 68 65 6e 20 75 73 69 6e 67 20 73 69 74 65 2d 74 6f 2d 73 69 74 | ed.by.NTP.When.using.site-to-sit |
96ec0 | 65 20 49 50 73 65 63 20 77 69 74 68 20 56 54 49 20 69 6e 74 65 72 66 61 63 65 73 2c 20 62 65 20 | e.IPsec.with.VTI.interfaces,.be. |
96ee0 | 73 75 72 65 20 74 6f 20 64 69 73 61 62 6c 65 20 72 6f 75 74 65 20 61 75 74 6f 69 6e 73 74 61 6c | sure.to.disable.route.autoinstal |
96f00 | 6c 00 57 68 65 6e 20 75 73 69 6e 67 20 74 68 65 20 49 50 76 36 20 70 72 6f 74 6f 63 6f 6c 2c 20 | l.When.using.the.IPv6.protocol,. |
96f20 | 4d 52 55 20 6d 75 73 74 20 62 65 20 61 74 20 6c 65 61 73 74 20 31 32 38 30 20 62 79 74 65 73 2e | MRU.must.be.at.least.1280.bytes. |
96f40 | 00 57 68 65 6e 20 75 74 69 6c 69 7a 69 6e 67 20 56 79 4f 53 20 69 6e 20 61 6e 20 65 6e 76 69 72 | .When.utilizing.VyOS.in.an.envir |
96f60 | 6f 6e 6d 65 6e 74 20 77 69 74 68 20 41 72 69 73 74 61 20 67 65 61 72 20 79 6f 75 20 63 61 6e 20 | onment.with.Arista.gear.you.can. |
96f80 | 75 73 65 20 74 68 69 73 20 62 6c 75 65 20 70 72 69 6e 74 20 61 73 20 61 6e 20 69 6e 69 74 69 61 | use.this.blue.print.as.an.initia |
96fa0 | 6c 20 73 65 74 75 70 20 74 6f 20 67 65 74 20 61 6e 20 4c 41 43 50 20 62 6f 6e 64 20 2f 20 70 6f | l.setup.to.get.an.LACP.bond./.po |
96fc0 | 72 74 2d 63 68 61 6e 6e 65 6c 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 62 65 74 77 65 65 6e 20 74 | rt-channel.operational.between.t |
96fe0 | 68 6f 73 65 20 74 77 6f 20 64 65 76 69 63 65 73 2e 00 57 68 65 72 65 20 62 6f 74 68 20 72 6f 75 | hose.two.devices..Where.both.rou |
97000 | 74 65 73 20 77 65 72 65 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 65 42 47 50 20 70 65 65 72 | tes.were.received.from.eBGP.peer |
97020 | 73 2c 20 74 68 65 6e 20 70 72 65 66 65 72 20 74 68 65 20 72 6f 75 74 65 20 77 68 69 63 68 20 69 | s,.then.prefer.the.route.which.i |
97040 | 73 20 61 6c 72 65 61 64 79 20 73 65 6c 65 63 74 65 64 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 | s.already.selected..Note.that.th |
97060 | 69 73 20 63 68 65 63 6b 20 69 73 20 6e 6f 74 20 61 70 70 6c 69 65 64 20 69 66 20 3a 63 66 67 63 | is.check.is.not.applied.if.:cfgc |
97080 | 6d 64 3a 60 62 67 70 20 62 65 73 74 70 61 74 68 20 63 6f 6d 70 61 72 65 2d 72 6f 75 74 65 72 69 | md:`bgp.bestpath.compare-routeri |
970a0 | 64 60 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 54 68 69 73 20 63 68 65 63 6b 20 63 61 6e | d`.is.configured..This.check.can |
970c0 | 20 70 72 65 76 65 6e 74 20 73 6f 6d 65 20 63 61 73 65 73 20 6f 66 20 6f 73 63 69 6c 6c 61 74 69 | .prevent.some.cases.of.oscillati |
970e0 | 6f 6e 2e 00 57 68 65 72 65 20 66 69 72 65 77 61 6c 6c 20 62 61 73 65 20 63 68 61 69 6e 20 74 6f | on..Where.firewall.base.chain.to |
97100 | 20 63 6f 6e 66 69 67 75 72 65 20 66 69 72 65 77 61 6c 6c 20 66 69 6c 74 65 72 69 6e 67 20 72 75 | .configure.firewall.filtering.ru |
97120 | 6c 65 73 20 66 6f 72 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 20 69 73 20 60 60 73 65 74 | les.for.transit.traffic.is.``set |
97140 | 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e | .firewall.ipv4.forward.filter... |
97160 | 2e 60 60 2c 20 77 68 69 63 68 20 68 61 70 70 65 6e 73 20 69 6e 20 73 74 61 67 65 20 35 2c 20 68 | .``,.which.happens.in.stage.5,.h |
97180 | 69 67 68 6c 69 67 68 74 65 6e 65 64 20 77 69 74 68 20 72 65 64 20 63 6f 6c 6f 72 2e 00 57 68 65 | ighlightened.with.red.color..Whe |
971a0 | 72 65 20 66 69 72 65 77 61 6c 6c 20 62 61 73 65 20 63 68 61 69 6e 20 74 6f 20 63 6f 6e 66 69 67 | re.firewall.base.chain.to.config |
971c0 | 75 72 65 20 66 69 72 65 77 61 6c 6c 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 20 66 6f 72 | ure.firewall.filtering.rules.for |
971e0 | 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 | .transit.traffic.is.``set.firewa |
97200 | 6c 6c 20 69 70 76 36 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2c 20 77 68 | ll.ipv6.forward.filter....``,.wh |
97220 | 69 63 68 20 68 61 70 70 65 6e 73 20 69 6e 20 73 74 61 67 65 20 35 2c 20 68 69 67 68 6c 69 67 68 | ich.happens.in.stage.5,.highligh |
97240 | 74 65 6e 65 64 20 77 69 74 68 20 72 65 64 20 63 6f 6c 6f 72 2e 00 57 68 65 72 65 20 72 6f 75 74 | tened.with.red.color..Where.rout |
97260 | 65 73 20 77 69 74 68 20 61 20 4d 45 44 20 77 65 72 65 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d | es.with.a.MED.were.received.from |
97280 | 20 74 68 65 20 73 61 6d 65 20 41 53 2c 20 70 72 65 66 65 72 20 74 68 65 20 72 6f 75 74 65 20 77 | .the.same.AS,.prefer.the.route.w |
972a0 | 69 74 68 20 74 68 65 20 6c 6f 77 65 73 74 20 4d 45 44 2e 00 57 68 65 72 65 2c 20 6d 61 69 6e 20 | ith.the.lowest.MED..Where,.main. |
972c0 | 6b 65 79 20 77 6f 72 64 73 20 61 6e 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 74 68 | key.words.and.configuration.path |
972e0 | 73 20 74 68 61 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 75 6e 64 65 72 73 74 6f 6f 64 3a 00 57 | s.that.needs.to.be.understood:.W |
97300 | 68 65 74 68 65 72 20 74 6f 20 61 63 63 65 70 74 20 44 41 44 20 28 44 75 70 6c 69 63 61 74 65 20 | hether.to.accept.DAD.(Duplicate. |
97320 | 41 64 64 72 65 73 73 20 44 65 74 65 63 74 69 6f 6e 29 2e 00 57 68 69 63 68 20 67 65 6e 65 72 61 | Address.Detection)..Which.genera |
97340 | 74 65 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a | tes.the.following.configuration: |
97360 | 00 57 68 69 63 68 20 72 65 73 75 6c 74 73 20 69 6e 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | .Which.results.in.a.configuratio |
97380 | 6e 20 6f 66 3a 00 57 68 69 63 68 20 77 6f 75 6c 64 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 66 | n.of:.Which.would.generate.the.f |
973a0 | 6f 6c 6c 6f 77 69 6e 67 20 4e 41 54 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 63 6f 6e 66 69 67 75 | ollowing.NAT.destination.configu |
973c0 | 72 61 74 69 6f 6e 3a 00 57 68 69 6c 65 20 2a 2a 6e 65 74 77 6f 72 6b 20 67 72 6f 75 70 73 2a 2a | ration:.While.**network.groups** |
973e0 | 20 61 63 63 65 70 74 20 49 50 20 6e 65 74 77 6f 72 6b 73 20 69 6e 20 43 49 44 52 20 6e 6f 74 61 | .accept.IP.networks.in.CIDR.nota |
97400 | 74 69 6f 6e 2c 20 73 70 65 63 69 66 69 63 20 49 50 20 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 | tion,.specific.IP.addresses.can. |
97420 | 62 65 20 61 64 64 65 64 20 61 73 20 61 20 33 32 2d 62 69 74 20 70 72 65 66 69 78 2e 20 49 66 20 | be.added.as.a.32-bit.prefix..If. |
97440 | 79 6f 75 20 66 6f 72 65 73 65 65 20 74 68 65 20 6e 65 65 64 20 74 6f 20 61 64 64 20 61 20 6d 69 | you.foresee.the.need.to.add.a.mi |
97460 | 78 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 6e 65 74 77 6f 72 6b 73 2c 20 74 68 65 | x.of.addresses.and.networks,.the |
97480 | 20 6e 65 74 77 6f 72 6b 20 67 72 6f 75 70 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 2e 00 57 | .network.group.is.recommended..W |
974a0 | 68 69 6c 65 20 6d 61 6e 79 20 61 72 65 20 61 77 61 72 65 20 6f 66 20 4f 70 65 6e 56 50 4e 20 61 | hile.many.are.aware.of.OpenVPN.a |
974c0 | 73 20 61 20 43 6c 69 65 6e 74 20 56 50 4e 20 73 6f 6c 75 74 69 6f 6e 2c 20 69 74 20 69 73 20 6f | s.a.Client.VPN.solution,.it.is.o |
974e0 | 66 74 65 6e 20 6f 76 65 72 6c 6f 6f 6b 65 64 20 61 73 20 61 20 73 69 74 65 2d 74 6f 2d 73 69 74 | ften.overlooked.as.a.site-to-sit |
97500 | 65 20 56 50 4e 20 73 6f 6c 75 74 69 6f 6e 20 64 75 65 20 74 6f 20 6c 61 63 6b 20 6f 66 20 73 75 | e.VPN.solution.due.to.lack.of.su |
97520 | 70 70 6f 72 74 20 66 6f 72 20 74 68 69 73 20 6d 6f 64 65 20 69 6e 20 6d 61 6e 79 20 72 6f 75 74 | pport.for.this.mode.in.many.rout |
97540 | 65 72 20 70 6c 61 74 66 6f 72 6d 73 2e 00 57 68 69 6c 65 20 6e 6f 72 6d 61 6c 20 47 52 45 20 69 | er.platforms..While.normal.GRE.i |
97560 | 73 20 66 6f 72 20 6c 61 79 65 72 20 33 2c 20 47 52 45 54 41 50 20 69 73 20 66 6f 72 20 6c 61 79 | s.for.layer.3,.GRETAP.is.for.lay |
97580 | 65 72 20 32 2e 20 47 52 45 54 41 50 20 63 61 6e 20 65 6e 63 61 70 73 75 6c 61 74 65 20 45 74 68 | er.2..GRETAP.can.encapsulate.Eth |
975a0 | 65 72 6e 65 74 20 66 72 61 6d 65 73 2c 20 74 68 75 73 20 69 74 20 63 61 6e 20 62 65 20 62 72 69 | ernet.frames,.thus.it.can.be.bri |
975c0 | 64 67 65 64 20 77 69 74 68 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 63 72 | dged.with.other.interfaces.to.cr |
975e0 | 65 61 74 65 20 64 61 74 61 6c 69 6e 6b 20 6c 61 79 65 72 20 73 65 67 6d 65 6e 74 73 20 74 68 61 | eate.datalink.layer.segments.tha |
97600 | 74 20 73 70 61 6e 20 6d 75 6c 74 69 70 6c 65 20 72 65 6d 6f 74 65 20 73 69 74 65 73 2e 00 57 68 | t.span.multiple.remote.sites..Wh |
97620 | 69 74 65 6c 69 73 74 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 6e 65 74 77 6f 72 6b | itelist.of.addresses.and.network |
97640 | 73 2e 20 41 6c 77 61 79 73 20 61 6c 6c 6f 77 20 69 6e 62 6f 75 6e 64 20 63 6f 6e 6e 65 63 74 69 | s..Always.allow.inbound.connecti |
97660 | 6f 6e 73 20 66 72 6f 6d 20 74 68 65 73 65 20 73 79 73 74 65 6d 73 2e 00 57 69 6c 6c 20 61 64 64 | ons.from.these.systems..Will.add |
97680 | 20 60 60 70 65 72 73 69 73 74 65 6e 74 2d 6b 65 79 60 60 20 61 74 20 74 68 65 20 65 6e 64 20 6f | .``persistent-key``.at.the.end.o |
976a0 | 66 20 74 68 65 20 67 65 6e 65 72 61 74 65 64 20 4f 70 65 6e 56 50 4e 20 63 6f 6e 66 69 67 75 72 | f.the.generated.OpenVPN.configur |
976c0 | 61 74 69 6f 6e 2e 20 50 6c 65 61 73 65 20 75 73 65 20 74 68 69 73 20 6f 6e 6c 79 20 61 73 20 6c | ation..Please.use.this.only.as.l |
976e0 | 61 73 74 20 72 65 73 6f 72 74 20 2d 20 74 68 69 6e 67 73 20 6d 69 67 68 74 20 62 72 65 61 6b 20 | ast.resort.-.things.might.break. |
97700 | 61 6e 64 20 4f 70 65 6e 56 50 4e 20 77 6f 6e 27 74 20 73 74 61 72 74 20 69 66 20 79 6f 75 20 70 | and.OpenVPN.won't.start.if.you.p |
97720 | 61 73 73 20 69 6e 76 61 6c 69 64 20 6f 70 74 69 6f 6e 73 2f 73 79 6e 74 61 78 2e 00 57 69 6c 6c | ass.invalid.options/syntax..Will |
97740 | 20 61 64 64 20 60 60 70 75 73 68 20 22 6b 65 65 70 61 6c 69 76 65 20 31 20 31 30 22 60 60 20 74 | .add.``push."keepalive.1.10"``.t |
97760 | 6f 20 74 68 65 20 67 65 6e 65 72 61 74 65 64 20 4f 70 65 6e 56 50 4e 20 63 6f 6e 66 69 67 20 66 | o.the.generated.OpenVPN.config.f |
97780 | 69 6c 65 2e 00 57 69 6c 6c 20 62 65 20 72 65 63 6f 72 64 65 64 20 6f 6e 6c 79 20 70 61 63 6b 65 | ile..Will.be.recorded.only.packe |
977a0 | 74 73 2f 66 6c 6f 77 73 20 6f 6e 20 2a 2a 69 6e 63 6f 6d 69 6e 67 2a 2a 20 64 69 72 65 63 74 69 | ts/flows.on.**incoming**.directi |
977c0 | 6f 6e 20 69 6e 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 20 62 79 20 64 | on.in.configured.interfaces.by.d |
977e0 | 65 66 61 75 6c 74 2e 00 57 69 6c 6c 20 64 72 6f 70 20 60 3c 73 68 61 72 65 64 2d 6e 65 74 77 6f | efault..Will.drop.`<shared-netwo |
97800 | 72 6b 2d 6e 61 6d 65 3e 5f 60 20 66 72 6f 6d 20 63 6c 69 65 6e 74 20 44 4e 53 20 72 65 63 6f 72 | rk-name>_`.from.client.DNS.recor |
97820 | 64 2c 20 75 73 69 6e 67 20 6f 6e 6c 79 20 74 68 65 20 68 6f 73 74 20 64 65 63 6c 61 72 61 74 69 | d,.using.only.the.host.declarati |
97840 | 6f 6e 20 6e 61 6d 65 20 61 6e 64 20 64 6f 6d 61 69 6e 3a 20 60 3c 68 6f 73 74 6e 61 6d 65 3e 2e | on.name.and.domain:.`<hostname>. |
97860 | 3c 64 6f 6d 61 69 6e 2d 6e 61 6d 65 3e 60 00 57 69 6e 64 6f 77 73 20 31 30 20 64 6f 65 73 20 6e | <domain-name>`.Windows.10.does.n |
97880 | 6f 74 20 61 6c 6c 6f 77 20 61 20 75 73 65 72 20 74 6f 20 63 68 6f 6f 73 65 20 74 68 65 20 69 6e | ot.allow.a.user.to.choose.the.in |
978a0 | 74 65 67 72 69 74 79 20 61 6e 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 69 70 68 65 72 73 20 75 | tegrity.and.encryption.ciphers.u |
978c0 | 73 69 6e 67 20 74 68 65 20 47 55 49 20 61 6e 64 20 69 74 20 75 73 65 73 20 73 6f 6d 65 20 6f 6c | sing.the.GUI.and.it.uses.some.ol |
978e0 | 64 65 72 20 70 72 6f 70 6f 73 61 6c 73 20 62 79 20 64 65 66 61 75 6c 74 2e 20 41 20 75 73 65 72 | der.proposals.by.default..A.user |
97900 | 20 63 61 6e 20 6f 6e 6c 79 20 63 68 61 6e 67 65 20 74 68 65 20 70 72 6f 70 6f 73 61 6c 73 20 6f | .can.only.change.the.proposals.o |
97920 | 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 73 69 64 65 20 62 79 20 63 6f 6e 66 69 67 75 72 69 6e 67 | n.the.client.side.by.configuring |
97940 | 20 74 68 65 20 49 50 53 65 63 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 70 72 6f 66 69 6c 65 20 76 69 | .the.IPSec.connection.profile.vi |
97960 | 61 20 50 6f 77 65 72 53 68 65 6c 6c 2e 00 57 69 6e 64 6f 77 73 20 49 6e 74 65 72 6e 65 74 20 4e | a.PowerShell..Windows.Internet.N |
97980 | 61 6d 65 20 53 65 72 76 69 63 65 20 28 57 49 4e 53 29 20 73 65 72 76 65 72 73 20 70 72 6f 70 61 | ame.Service.(WINS).servers.propa |
979a0 | 67 61 74 65 64 20 74 6f 20 63 6c 69 65 6e 74 00 57 69 6e 64 6f 77 73 20 65 78 70 65 63 74 73 20 | gated.to.client.Windows.expects. |
979c0 | 74 68 65 20 73 65 72 76 65 72 20 6e 61 6d 65 20 74 6f 20 62 65 20 61 6c 73 6f 20 75 73 65 64 20 | the.server.name.to.be.also.used. |
979e0 | 69 6e 20 74 68 65 20 73 65 72 76 65 72 27 73 20 63 65 72 74 69 66 69 63 61 74 65 20 63 6f 6d 6d | in.the.server's.certificate.comm |
97a00 | 6f 6e 20 6e 61 6d 65 2c 20 73 6f 20 69 74 27 73 20 62 65 73 74 20 74 6f 20 75 73 65 20 74 68 69 | on.name,.so.it's.best.to.use.thi |
97a20 | 73 20 44 4e 53 20 6e 61 6d 65 20 66 6f 72 20 79 6f 75 72 20 56 50 4e 20 63 6f 6e 6e 65 63 74 69 | s.DNS.name.for.your.VPN.connecti |
97a40 | 6f 6e 2e 00 57 69 72 65 47 75 61 72 64 00 57 69 72 65 47 75 61 72 64 20 43 6c 69 65 6e 74 20 51 | on..WireGuard.WireGuard.Client.Q |
97a60 | 52 20 63 6f 64 65 00 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 20 69 74 73 65 6c | R.code.WireGuard.interface.itsel |
97a80 | 66 20 75 73 65 73 20 61 64 64 72 65 73 73 20 31 30 2e 31 2e 30 2e 31 2f 33 30 00 57 69 72 65 47 | f.uses.address.10.1.0.1/30.WireG |
97aa0 | 75 61 72 64 20 69 73 20 61 6e 20 65 78 74 72 65 6d 65 6c 79 20 73 69 6d 70 6c 65 20 79 65 74 20 | uard.is.an.extremely.simple.yet. |
97ac0 | 66 61 73 74 20 61 6e 64 20 6d 6f 64 65 72 6e 20 56 50 4e 20 74 68 61 74 20 75 74 69 6c 69 7a 65 | fast.and.modern.VPN.that.utilize |
97ae0 | 73 20 73 74 61 74 65 2d 6f 66 2d 74 68 65 2d 61 72 74 20 63 72 79 70 74 6f 67 72 61 70 68 79 2e | s.state-of-the-art.cryptography. |
97b00 | 20 53 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 69 72 65 67 75 61 72 64 2e 63 6f 6d 20 66 | .See.https://www.wireguard.com.f |
97b20 | 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 57 69 72 65 47 75 61 72 64 20 72 | or.more.information..WireGuard.r |
97b40 | 65 71 75 69 72 65 73 20 74 68 65 20 67 65 6e 65 72 61 74 69 6f 6e 20 6f 66 20 61 20 6b 65 79 70 | equires.the.generation.of.a.keyp |
97b60 | 61 69 72 2c 20 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 20 61 20 70 72 69 76 61 74 65 20 6b 65 | air,.which.includes.a.private.ke |
97b80 | 79 20 74 6f 20 64 65 63 72 79 70 74 20 69 6e 63 6f 6d 69 6e 67 20 74 72 61 66 66 69 63 2c 20 61 | y.to.decrypt.incoming.traffic,.a |
97ba0 | 6e 64 20 61 20 70 75 62 6c 69 63 20 6b 65 79 20 66 6f 72 20 70 65 65 72 28 73 29 20 74 6f 20 65 | nd.a.public.key.for.peer(s).to.e |
97bc0 | 6e 63 72 79 70 74 20 74 72 61 66 66 69 63 2e 00 57 69 72 65 6c 65 73 73 20 63 68 61 6e 6e 65 6c | ncrypt.traffic..Wireless.channel |
97be0 | 20 60 60 31 60 60 00 57 69 72 65 6c 65 73 73 20 64 65 76 69 63 65 20 74 79 70 65 20 66 6f 72 20 | .``1``.Wireless.device.type.for. |
97c00 | 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 00 57 69 72 65 6c 65 73 73 20 68 61 72 64 77 61 72 65 | this.interface.Wireless.hardware |
97c20 | 20 64 65 76 69 63 65 20 75 73 65 64 20 61 73 20 75 6e 64 65 72 6c 61 79 20 72 61 64 69 6f 2e 00 | .device.used.as.underlay.radio.. |
97c40 | 57 69 72 65 6c 65 73 73 20 6f 70 74 69 6f 6e 73 00 57 69 72 65 6c 65 73 73 20 6f 70 74 69 6f 6e | Wireless.options.Wireless.option |
97c60 | 73 20 28 53 74 61 74 69 6f 6e 2f 43 6c 69 65 6e 74 29 00 57 69 72 65 6c 65 73 73 4d 6f 64 65 6d | s.(Station/Client).WirelessModem |
97c80 | 20 28 57 57 41 4e 29 20 6f 70 74 69 6f 6e 73 00 57 69 74 68 20 56 79 4f 53 20 62 65 69 6e 67 20 | .(WWAN).options.With.VyOS.being. |
97ca0 | 62 61 73 65 64 20 6f 6e 20 74 6f 70 20 6f 66 20 4c 69 6e 75 78 20 61 6e 64 20 69 74 73 20 6b 65 | based.on.top.of.Linux.and.its.ke |
97cc0 | 72 6e 65 6c 2c 20 74 68 65 20 4e 65 74 66 69 6c 74 65 72 20 70 72 6f 6a 65 63 74 20 63 72 65 61 | rnel,.the.Netfilter.project.crea |
97ce0 | 74 65 64 20 74 68 65 20 69 70 74 61 62 6c 65 73 20 61 6e 64 20 6e 6f 77 20 74 68 65 20 73 75 63 | ted.the.iptables.and.now.the.suc |
97d00 | 63 65 73 73 6f 72 20 6e 66 74 61 62 6c 65 73 20 66 6f 72 20 74 68 65 20 4c 69 6e 75 78 20 6b 65 | cessor.nftables.for.the.Linux.ke |
97d20 | 72 6e 65 6c 20 74 6f 20 77 6f 72 6b 20 64 69 72 65 63 74 6c 79 20 6f 6e 20 74 68 65 20 64 61 74 | rnel.to.work.directly.on.the.dat |
97d40 | 61 20 66 6c 6f 77 73 2e 20 54 68 69 73 20 6e 6f 77 20 65 78 74 65 6e 64 73 20 74 68 65 20 63 6f | a.flows..This.now.extends.the.co |
97d60 | 6e 63 65 70 74 20 6f 66 20 7a 6f 6e 65 2d 62 61 73 65 64 20 73 65 63 75 72 69 74 79 20 74 6f 20 | ncept.of.zone-based.security.to. |
97d80 | 61 6c 6c 6f 77 20 66 6f 72 20 6d 61 6e 69 70 75 6c 61 74 69 6e 67 20 74 68 65 20 64 61 74 61 20 | allow.for.manipulating.the.data. |
97da0 | 61 74 20 6d 75 6c 74 69 70 6c 65 20 73 74 61 67 65 73 20 6f 6e 63 65 20 61 63 63 65 70 74 65 64 | at.multiple.stages.once.accepted |
97dc0 | 20 62 79 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 74 68 | .by.the.network.interface.and.th |
97de0 | 65 20 64 72 69 76 65 72 20 62 65 66 6f 72 65 20 62 65 69 6e 67 20 68 61 6e 64 65 64 20 6f 66 66 | e.driver.before.being.handed.off |
97e00 | 20 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 28 65 2e 67 2e 20 61 20 77 65 62 20 | .to.the.destination.(e.g..a.web. |
97e20 | 73 65 72 76 65 72 20 4f 52 20 61 6e 6f 74 68 65 72 20 64 65 76 69 63 65 29 2e 00 57 69 74 68 20 | server.OR.another.device)..With. |
97e40 | 57 69 72 65 47 75 61 72 64 2c 20 61 20 52 6f 61 64 20 57 61 72 72 69 6f 72 20 56 50 4e 20 63 6f | WireGuard,.a.Road.Warrior.VPN.co |
97e60 | 6e 66 69 67 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 61 20 73 69 74 65 2d 74 6f 2d 73 69 74 | nfig.is.similar.to.a.site-to-sit |
97e80 | 65 20 56 50 4e 2e 20 49 74 20 6a 75 73 74 20 6c 61 63 6b 73 20 74 68 65 20 60 60 61 64 64 72 65 | e.VPN..It.just.lacks.the.``addre |
97ea0 | 73 73 60 60 20 61 6e 64 20 60 60 70 6f 72 74 60 60 20 73 74 61 74 65 6d 65 6e 74 73 2e 00 57 69 | ss``.and.``port``.statements..Wi |
97ec0 | 74 68 20 74 68 65 20 60 60 6e 61 6d 65 2d 73 65 72 76 65 72 60 60 20 6f 70 74 69 6f 6e 20 73 65 | th.the.``name-server``.option.se |
97ee0 | 74 20 74 6f 20 60 60 6e 6f 6e 65 60 60 2c 20 56 79 4f 53 20 77 69 6c 6c 20 69 67 6e 6f 72 65 20 | t.to.``none``,.VyOS.will.ignore. |
97f00 | 74 68 65 20 6e 61 6d 65 73 65 72 76 65 72 73 20 79 6f 75 72 20 49 53 50 20 73 65 6e 64 73 20 79 | the.nameservers.your.ISP.sends.y |
97f20 | 6f 75 20 61 6e 64 20 74 68 75 73 20 79 6f 75 20 63 61 6e 20 66 75 6c 6c 79 20 72 65 6c 79 20 6f | ou.and.thus.you.can.fully.rely.o |
97f40 | 6e 20 74 68 65 20 6f 6e 65 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 73 | n.the.ones.you.have.configured.s |
97f60 | 74 61 74 69 63 61 6c 6c 79 2e 00 57 69 74 68 20 74 68 65 20 66 69 72 65 77 61 6c 6c 20 79 6f 75 | tatically..With.the.firewall.you |
97f80 | 20 63 61 6e 20 73 65 74 20 72 75 6c 65 73 20 74 6f 20 61 63 63 65 70 74 2c 20 64 72 6f 70 20 6f | .can.set.rules.to.accept,.drop.o |
97fa0 | 72 20 72 65 6a 65 63 74 20 49 43 4d 50 20 69 6e 2c 20 6f 75 74 20 6f 72 20 6c 6f 63 61 6c 20 74 | r.reject.ICMP.in,.out.or.local.t |
97fc0 | 72 61 66 66 69 63 2e 20 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 75 73 65 20 74 68 65 20 67 65 6e | raffic..You.can.also.use.the.gen |
97fe0 | 65 72 61 6c 20 2a 2a 66 69 72 65 77 61 6c 6c 20 61 6c 6c 2d 70 69 6e 67 2a 2a 20 63 6f 6d 6d 61 | eral.**firewall.all-ping**.comma |
98000 | 6e 64 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 66 66 65 63 74 73 20 6f 6e 6c 79 20 74 6f | nd..This.command.affects.only.to |
98020 | 20 4c 4f 43 41 4c 20 28 70 61 63 6b 65 74 73 20 64 65 73 74 69 6e 65 64 20 66 6f 72 20 79 6f 75 | .LOCAL.(packets.destined.for.you |
98040 | 72 20 56 79 4f 53 20 73 79 73 74 65 6d 29 2c 20 6e 6f 74 20 74 6f 20 49 4e 20 6f 72 20 4f 55 54 | r.VyOS.system),.not.to.IN.or.OUT |
98060 | 20 74 72 61 66 66 69 63 2e 00 57 69 74 68 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2c 20 79 6f 75 | .traffic..With.this.command,.you |
98080 | 20 63 61 6e 20 73 70 65 63 69 66 79 20 68 6f 77 20 74 68 65 20 55 52 4c 20 70 61 74 68 20 73 68 | .can.specify.how.the.URL.path.sh |
980a0 | 6f 75 6c 64 20 62 65 20 6d 61 74 63 68 65 64 20 61 67 61 69 6e 73 74 20 69 6e 63 6f 6d 69 6e 67 | ould.be.matched.against.incoming |
980c0 | 20 72 65 71 75 65 73 74 73 2e 00 57 69 74 68 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 | .requests..With.zone-based.firew |
980e0 | 61 6c 6c 73 20 61 20 6e 65 77 20 63 6f 6e 63 65 70 74 20 77 61 73 20 69 6d 70 6c 65 6d 65 6e 74 | alls.a.new.concept.was.implement |
98100 | 65 64 2c 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 73 74 61 6e 64 61 72 64 20 | ed,.in.addition.to.the.standard. |
98120 | 69 6e 20 61 6e 64 20 6f 75 74 20 74 72 61 66 66 69 63 20 66 6c 6f 77 73 2c 20 61 20 6c 6f 63 61 | in.and.out.traffic.flows,.a.loca |
98140 | 6c 20 66 6c 6f 77 20 77 61 73 20 61 64 64 65 64 2e 20 54 68 69 73 20 6c 6f 63 61 6c 20 77 61 73 | l.flow.was.added..This.local.was |
98160 | 20 66 6f 72 20 74 72 61 66 66 69 63 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 61 6e 64 20 64 65 73 | .for.traffic.originating.and.des |
98180 | 74 69 6e 65 64 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2e 20 57 68 69 63 | tined.to.the.router.itself..Whic |
981a0 | 68 20 6d 65 61 6e 73 20 61 64 64 69 74 69 6f 6e 61 6c 20 72 75 6c 65 73 20 77 65 72 65 20 72 65 | h.means.additional.rules.were.re |
981c0 | 71 75 69 72 65 64 20 74 6f 20 73 65 63 75 72 65 20 74 68 65 20 66 69 72 65 77 61 6c 6c 20 69 74 | quired.to.secure.the.firewall.it |
981e0 | 73 65 6c 66 20 66 72 6f 6d 20 74 68 65 20 6e 65 74 77 6f 72 6b 2c 20 69 6e 20 61 64 64 69 74 69 | self.from.the.network,.in.additi |
98200 | 6f 6e 20 74 6f 20 74 68 65 20 65 78 69 73 74 69 6e 67 20 69 6e 62 6f 75 6e 64 20 61 6e 64 20 6f | on.to.the.existing.inbound.and.o |
98220 | 75 74 62 6f 75 6e 64 20 72 75 6c 65 73 20 66 72 6f 6d 20 74 68 65 20 74 72 61 64 69 74 69 6f 6e | utbound.rules.from.the.tradition |
98240 | 61 6c 20 63 6f 6e 63 65 70 74 20 61 62 6f 76 65 2e 00 57 69 74 68 20 7a 6f 6e 65 2d 62 61 73 65 | al.concept.above..With.zone-base |
98260 | 64 20 66 69 72 65 77 61 6c 6c 73 20 61 20 6e 65 77 20 63 6f 6e 63 65 70 74 20 77 61 73 20 69 6d | d.firewalls.a.new.concept.was.im |
98280 | 70 6c 65 6d 65 6e 74 65 64 2c 20 69 6e 20 61 64 64 74 69 6f 6e 20 74 6f 20 74 68 65 20 73 74 61 | plemented,.in.addtion.to.the.sta |
982a0 | 6e 64 61 72 64 20 69 6e 20 61 6e 64 20 6f 75 74 20 74 72 61 66 66 69 63 20 66 6c 6f 77 73 2c 20 | ndard.in.and.out.traffic.flows,. |
982c0 | 61 20 6c 6f 63 61 6c 20 66 6c 6f 77 20 77 61 73 20 61 64 64 65 64 2e 20 54 68 69 73 20 6c 6f 63 | a.local.flow.was.added..This.loc |
982e0 | 61 6c 20 77 61 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 61 | al.was.for.traffic.originating.a |
98300 | 6e 64 20 64 65 73 74 69 6e 65 64 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 | nd.destined.to.the.router.itself |
98320 | 2e 20 57 68 69 63 68 20 6d 65 61 6e 73 20 61 64 64 69 74 69 6f 6e 61 6c 20 72 75 6c 65 73 20 77 | ..Which.means.additional.rules.w |
98340 | 65 72 65 20 72 65 71 75 69 72 65 64 20 74 6f 20 73 65 63 75 72 65 20 74 68 65 20 66 69 72 65 77 | ere.required.to.secure.the.firew |
98360 | 61 6c 6c 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 74 68 65 20 6e 65 74 77 6f 72 6b 2c 20 69 6e 20 | all.itself.from.the.network,.in. |
98380 | 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 65 78 69 73 74 69 6e 67 20 69 6e 62 6f 75 6e 64 | addition.to.the.existing.inbound |
983a0 | 20 61 6e 64 20 6f 75 74 62 6f 75 6e 64 20 72 75 6c 65 73 20 66 72 6f 6d 20 74 68 65 20 74 72 61 | .and.outbound.rules.from.the.tra |
983c0 | 64 69 74 69 6f 6e 61 6c 20 63 6f 6e 63 65 70 74 20 61 62 6f 76 65 2e 00 59 00 59 6f 75 20 61 70 | ditional.concept.above..Y.You.ap |
983e0 | 70 6c 79 20 61 20 72 75 6c 65 2d 73 65 74 20 61 6c 77 61 79 73 20 74 6f 20 61 20 7a 6f 6e 65 20 | ply.a.rule-set.always.to.a.zone. |
98400 | 66 72 6f 6d 20 61 6e 20 6f 74 68 65 72 20 7a 6f 6e 65 2c 20 69 74 20 69 73 20 72 65 63 6f 6d 6d | from.an.other.zone,.it.is.recomm |
98420 | 65 6e 64 65 64 20 74 6f 20 63 72 65 61 74 65 20 6f 6e 65 20 72 75 6c 65 2d 73 65 74 20 66 6f 72 | ended.to.create.one.rule-set.for |
98440 | 20 65 61 63 68 20 7a 6f 6e 65 20 70 61 69 72 2e 00 59 6f 75 20 61 72 65 20 61 62 6c 65 20 74 6f | .each.zone.pair..You.are.able.to |
98460 | 20 73 65 74 20 70 6f 73 74 2d 6c 6f 67 69 6e 20 6f 72 20 70 72 65 2d 6c 6f 67 69 6e 20 62 61 6e | .set.post-login.or.pre-login.ban |
98480 | 6e 65 72 20 6d 65 73 73 61 67 65 73 20 74 6f 20 64 69 73 70 6c 61 79 20 63 65 72 74 61 69 6e 20 | ner.messages.to.display.certain. |
984a0 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 74 68 69 73 20 73 79 73 74 65 6d 2e 00 59 6f 75 | information.for.this.system..You |
984c0 | 20 61 72 65 20 62 65 20 61 62 6c 65 20 74 6f 20 64 6f 77 6e 6c 6f 61 64 20 74 68 65 20 66 69 6c | .are.be.able.to.download.the.fil |
984e0 | 65 73 20 75 73 69 6e 67 20 53 43 50 2c 20 6f 6e 63 65 20 74 68 65 20 53 53 48 20 73 65 72 76 69 | es.using.SCP,.once.the.SSH.servi |
98500 | 63 65 20 68 61 73 20 62 65 65 6e 20 61 63 74 69 76 61 74 65 64 20 6c 69 6b 65 20 73 6f 00 59 6f | ce.has.been.activated.like.so.Yo |
98520 | 75 20 63 61 6e 20 61 6c 73 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 74 69 6d 65 20 69 6e | u.can.also.configure.the.time.in |
98540 | 74 65 72 76 61 6c 20 66 6f 72 20 70 72 65 65 6d 70 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 22 | terval.for.preemption.with.the." |
98560 | 70 72 65 65 6d 70 74 2d 64 65 6c 61 79 22 20 6f 70 74 69 6f 6e 2e 20 46 6f 72 20 65 78 61 6d 70 | preempt-delay".option..For.examp |
98580 | 6c 65 2c 20 74 6f 20 73 65 74 20 74 68 65 20 68 69 67 68 65 72 20 70 72 69 6f 72 69 74 79 20 72 | le,.to.set.the.higher.priority.r |
985a0 | 6f 75 74 65 72 20 74 6f 20 74 61 6b 65 20 6f 76 65 72 20 69 6e 20 31 38 30 20 73 65 63 6f 6e 64 | outer.to.take.over.in.180.second |
985c0 | 73 2c 20 75 73 65 3a 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 64 65 66 69 6e 65 20 63 75 73 74 | s,.use:.You.can.also.define.cust |
985e0 | 6f 6d 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 73 20 74 6f 20 61 70 70 6c 79 20 74 6f 20 61 20 | om.timeout.values.to.apply.to.a. |
98600 | 73 70 65 63 69 66 69 63 20 73 75 62 73 65 74 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 | specific.subset.of.connections,. |
98620 | 62 61 73 65 64 20 6f 6e 20 61 20 70 61 63 6b 65 74 20 61 6e 64 20 66 6c 6f 77 20 73 65 6c 65 63 | based.on.a.packet.and.flow.selec |
98640 | 74 6f 72 2e 20 54 6f 20 64 6f 20 74 68 69 73 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 72 65 | tor..To.do.this,.you.need.to.cre |
98660 | 61 74 65 20 61 20 72 75 6c 65 20 64 65 66 69 6e 69 6e 67 20 74 68 65 20 70 61 63 6b 65 74 20 61 | ate.a.rule.defining.the.packet.a |
98680 | 6e 64 20 66 6c 6f 77 20 73 65 6c 65 63 74 6f 72 2e 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 6b | nd.flow.selector..You.can.also.k |
986a0 | 65 65 70 20 64 69 66 66 65 72 65 6e 74 20 44 4e 53 20 7a 6f 6e 65 20 75 70 64 61 74 65 64 2e 20 | eep.different.DNS.zone.updated.. |
986c0 | 4a 75 73 74 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 63 6f 6e 66 69 67 20 6e 6f 64 65 3a 20 60 | Just.create.a.new.config.node:.` |
986e0 | 60 73 65 74 20 73 65 72 76 69 63 65 20 64 6e 73 20 64 79 6e 61 6d 69 63 20 69 6e 74 65 72 66 61 | `set.service.dns.dynamic.interfa |
98700 | 63 65 20 3c 69 6e 74 65 72 66 61 63 65 3e 20 72 66 63 32 31 33 36 20 3c 6f 74 68 65 72 2d 73 65 | ce.<interface>.rfc2136.<other-se |
98720 | 72 76 69 63 65 2d 6e 61 6d 65 3e 60 60 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 6f 70 74 20 66 | rvice-name>``.You.can.also.opt.f |
98740 | 6f 72 20 75 73 69 6e 67 20 60 3a 3a 2f 36 34 60 20 61 73 20 70 72 65 66 69 78 20 66 6f 72 20 79 | or.using.`::/64`.as.prefix.for.y |
98760 | 6f 75 72 20 3a 61 62 62 72 3a 60 52 41 73 20 28 52 6f 75 74 65 72 20 41 64 76 65 72 74 69 73 65 | our.:abbr:`RAs.(Router.Advertise |
98780 | 6d 65 6e 74 73 29 60 2e 20 54 68 69 73 20 77 69 6c 6c 20 74 61 6b 65 20 74 68 65 20 49 50 76 36 | ments)`..This.will.take.the.IPv6 |
987a0 | 20 47 55 41 20 70 72 65 66 69 78 20 61 73 73 69 67 6e 65 64 20 74 6f 20 74 68 65 20 69 6e 74 65 | .GUA.prefix.assigned.to.the.inte |
987c0 | 72 66 61 63 65 2c 20 77 68 69 63 68 20 63 6f 6d 65 73 20 69 6e 20 68 61 6e 64 79 20 77 68 65 6e | rface,.which.comes.in.handy.when |
987e0 | 20 75 73 69 6e 67 20 44 48 43 50 76 36 2d 50 44 2e 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 73 | .using.DHCPv6-PD..You.can.also.s |
98800 | 70 65 63 69 66 79 20 77 68 69 63 68 20 49 50 76 36 20 61 63 63 65 73 73 2d 6c 69 73 74 20 73 68 | pecify.which.IPv6.access-list.sh |
98820 | 6f 75 6c 64 20 62 65 20 73 68 6f 77 6e 3a 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 74 75 6e 65 | ould.be.shown:.You.can.also.tune |
98840 | 20 6d 75 6c 74 69 63 61 73 74 20 77 69 74 68 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f | .multicast.with.the.following.co |
98860 | 6d 6d 61 6e 64 73 2e 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 75 73 65 20 61 6e 6f 74 68 65 72 | mmands..You.can.also.use.another |
98880 | 20 61 74 74 72 69 62 75 74 65 73 20 66 6f 72 20 69 64 65 6e 74 69 66 79 20 63 6c 69 65 6e 74 20 | .attributes.for.identify.client. |
988a0 | 66 6f 72 20 64 69 73 63 6f 6e 6e 65 63 74 2c 20 6c 69 6b 65 20 46 72 61 6d 65 64 2d 49 50 2d 41 | for.disconnect,.like.Framed-IP-A |
988c0 | 64 64 72 65 73 73 2c 20 41 63 63 74 2d 53 65 73 73 69 6f 6e 2d 49 64 2c 20 65 74 63 2e 20 52 65 | ddress,.Acct-Session-Id,.etc..Re |
988e0 | 73 75 6c 74 20 63 6f 6d 6d 61 6e 64 73 20 61 70 70 65 61 72 73 20 69 6e 20 6c 6f 67 2e 00 59 6f | sult.commands.appears.in.log..Yo |
98900 | 75 20 63 61 6e 20 61 6c 73 6f 20 77 72 69 74 65 20 61 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 | u.can.also.write.a.description.f |
98920 | 6f 72 20 61 20 66 69 6c 74 65 72 3a 00 59 6f 75 20 63 61 6e 20 61 73 73 69 67 6e 20 6d 75 6c 74 | or.a.filter:.You.can.assign.mult |
98940 | 69 70 6c 65 20 6b 65 79 73 20 74 6f 20 74 68 65 20 73 61 6d 65 20 75 73 65 72 20 62 79 20 75 73 | iple.keys.to.the.same.user.by.us |
98960 | 69 6e 67 20 61 20 75 6e 69 71 75 65 20 69 64 65 6e 74 69 66 69 65 72 20 70 65 72 20 53 53 48 20 | ing.a.unique.identifier.per.SSH. |
98980 | 6b 65 79 2e 00 59 6f 75 20 63 61 6e 20 61 76 6f 69 64 20 74 68 65 20 22 6c 65 61 6b 79 22 20 62 | key..You.can.avoid.the."leaky".b |
989a0 | 65 68 61 76 69 6f 72 20 62 79 20 75 73 69 6e 67 20 61 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 | ehavior.by.using.a.firewall.poli |
989c0 | 63 79 20 74 68 61 74 20 64 72 6f 70 73 20 22 69 6e 76 61 6c 69 64 22 20 73 74 61 74 65 20 70 61 | cy.that.drops."invalid".state.pa |
989e0 | 63 6b 65 74 73 2e 00 59 6f 75 20 63 61 6e 20 63 68 65 63 6b 20 79 6f 75 72 20 4e 49 43 20 64 72 | ckets..You.can.check.your.NIC.dr |
98a00 | 69 76 65 72 20 62 79 20 69 73 73 75 69 6e 67 20 3a 6f 70 63 6d 64 3a 60 73 68 6f 77 20 69 6e 74 | iver.by.issuing.:opcmd:`show.int |
98a20 | 65 72 66 61 63 65 73 20 65 74 68 65 72 6e 65 74 20 65 74 68 30 20 70 68 79 73 69 63 61 6c 20 7c | erfaces.ethernet.eth0.physical.| |
98a40 | 20 67 72 65 70 20 2d 69 20 64 72 69 76 65 72 60 00 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 | .grep.-i.driver`.You.can.configu |
98a60 | 72 65 20 61 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 20 74 68 72 6f 75 67 68 | re.a.policy.into.a.class.through |
98a80 | 20 74 68 65 20 60 60 71 75 65 75 65 2d 74 79 70 65 60 60 20 73 65 74 74 69 6e 67 2e 00 59 6f 75 | .the.``queue-type``.setting..You |
98aa0 | 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 63 6c 61 73 73 65 73 20 28 75 70 20 74 6f 20 34 30 | .can.configure.classes.(up.to.40 |
98ac0 | 39 30 29 20 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 20 73 65 74 74 69 6e 67 73 20 61 6e 64 20 | 90).with.different.settings.and. |
98ae0 | 61 20 64 65 66 61 75 6c 74 20 70 6f 6c 69 63 79 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 61 | a.default.policy.which.will.be.a |
98b00 | 70 70 6c 69 65 64 20 74 6f 20 61 6e 79 20 74 72 61 66 66 69 63 20 6e 6f 74 20 6d 61 74 63 68 69 | pplied.to.any.traffic.not.matchi |
98b20 | 6e 67 20 61 6e 79 20 6f 66 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 63 6c 61 73 73 65 73 | ng.any.of.the.configured.classes |
98b40 | 2e 00 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 6d 75 6c 74 69 70 6c 65 20 69 6e 74 | ..You.can.configure.multiple.int |
98b60 | 65 72 66 61 63 65 73 20 77 68 69 63 68 20 77 68 6f 75 6c 64 20 70 61 72 74 69 63 69 70 61 74 65 | erfaces.which.whould.participate |
98b80 | 20 69 6e 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 2e 00 59 6f 75 20 63 61 6e 20 63 6f 6e | .in.flow.accounting..You.can.con |
98ba0 | 66 69 67 75 72 65 20 6d 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 66 61 63 65 73 20 77 68 69 63 68 | figure.multiple.interfaces.which |
98bc0 | 20 77 68 6f 75 6c 64 20 70 61 72 74 69 63 69 70 61 74 65 20 69 6e 20 73 66 6c 6f 77 20 61 63 63 | .whould.participate.in.sflow.acc |
98be0 | 6f 75 6e 74 69 6e 67 2e 00 59 6f 75 20 63 61 6e 20 63 72 65 61 74 65 20 6d 75 6c 74 69 70 6c 65 | ounting..You.can.create.multiple |
98c00 | 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 6f 6e 20 61 20 70 68 79 73 69 63 61 6c 20 69 | .VLAN.interfaces.on.a.physical.i |
98c20 | 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 56 4c 41 4e 20 49 44 20 72 61 6e 67 65 20 69 73 20 66 | nterface..The.VLAN.ID.range.is.f |
98c40 | 72 6f 6d 20 30 20 74 6f 20 34 30 39 34 2e 00 59 6f 75 20 63 61 6e 20 64 69 73 61 62 6c 65 20 61 | rom.0.to.4094..You.can.disable.a |
98c60 | 20 56 52 52 50 20 67 72 6f 75 70 20 77 69 74 68 20 60 60 64 69 73 61 62 6c 65 60 60 20 6f 70 74 | .VRRP.group.with.``disable``.opt |
98c80 | 69 6f 6e 3a 00 59 6f 75 20 63 61 6e 20 67 65 74 20 6d 6f 72 65 20 73 70 65 63 69 66 69 63 20 4f | ion:.You.can.get.more.specific.O |
98ca0 | 53 50 46 76 33 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 70 | SPFv3.information.by.using.the.p |
98cc0 | 61 72 61 6d 65 74 65 72 73 20 73 68 6f 77 6e 20 62 65 6c 6f 77 3a 00 59 6f 75 20 63 61 6e 20 6e | arameters.shown.below:.You.can.n |
98ce0 | 6f 74 20 61 73 73 69 67 6e 20 74 68 65 20 73 61 6d 65 20 61 6c 6c 6f 77 65 64 2d 69 70 73 20 73 | ot.assign.the.same.allowed-ips.s |
98d00 | 74 61 74 65 6d 65 6e 74 20 74 6f 20 6d 75 6c 74 69 70 6c 65 20 57 69 72 65 47 75 61 72 64 20 70 | tatement.to.multiple.WireGuard.p |
98d20 | 65 65 72 73 2e 20 54 68 69 73 20 61 20 64 65 73 69 67 6e 20 64 65 63 69 73 69 6f 6e 2e 20 46 6f | eers..This.a.design.decision..Fo |
98d40 | 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 | r.more.information.please.check. |
98d60 | 74 68 65 20 60 57 69 72 65 47 75 61 72 64 20 6d 61 69 6c 69 6e 67 20 6c 69 73 74 60 5f 2e 00 59 | the.`WireGuard.mailing.list`_..Y |
98d80 | 6f 75 20 63 61 6e 20 6e 6f 74 20 72 75 6e 20 74 68 69 73 20 69 6e 20 61 20 56 52 52 50 20 73 65 | ou.can.not.run.this.in.a.VRRP.se |
98da0 | 74 75 70 2c 20 69 66 20 6d 75 6c 74 69 70 6c 65 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 73 20 | tup,.if.multiple.mDNS.repeaters. |
98dc0 | 61 72 65 20 6c 61 75 6e 63 68 65 64 20 69 6e 20 61 20 73 75 62 6e 65 74 20 79 6f 75 20 77 69 6c | are.launched.in.a.subnet.you.wil |
98de0 | 6c 20 65 78 70 65 72 69 65 6e 63 65 20 74 68 65 20 6d 44 4e 53 20 70 61 63 6b 65 74 20 73 74 6f | l.experience.the.mDNS.packet.sto |
98e00 | 72 6d 20 64 65 61 74 68 21 00 59 6f 75 20 63 61 6e 20 6e 6f 77 20 22 64 69 61 6c 22 20 74 68 65 | rm.death!.You.can.now."dial".the |
98e20 | 20 70 65 65 72 20 77 69 74 68 20 74 68 65 20 66 6f 6c 6c 77 6f 69 6e 67 20 63 6f 6d 6d 61 6e 64 | .peer.with.the.follwoing.command |
98e40 | 3a 20 60 60 73 73 74 70 63 20 2d 2d 6c 6f 67 2d 6c 65 76 65 6c 20 34 20 2d 2d 6c 6f 67 2d 73 74 | :.``sstpc.--log-level.4.--log-st |
98e60 | 64 65 72 72 20 2d 2d 75 73 65 72 20 76 79 6f 73 20 2d 2d 70 61 73 73 77 6f 72 64 20 76 79 6f 73 | derr.--user.vyos.--password.vyos |
98e80 | 20 76 70 6e 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 20 2d 2d 20 63 61 6c 6c 20 76 79 6f 73 60 60 2e | .vpn.example.com.--.call.vyos``. |
98ea0 | 00 59 6f 75 20 63 61 6e 20 6e 6f 77 20 53 53 48 20 69 6e 74 6f 20 79 6f 75 72 20 73 79 73 74 65 | .You.can.now.SSH.into.your.syste |
98ec0 | 6d 20 75 73 69 6e 67 20 61 64 6d 69 6e 2f 61 64 6d 69 6e 20 61 73 20 61 20 64 65 66 61 75 6c 74 | m.using.admin/admin.as.a.default |
98ee0 | 20 75 73 65 72 20 73 75 70 70 6c 69 65 64 20 66 72 6f 6d 20 74 68 65 20 60 60 6c 66 6b 65 69 74 | .user.supplied.from.the.``lfkeit |
98f00 | 65 6c 2f 74 61 63 61 63 73 5f 70 6c 75 73 3a 6c 61 74 65 73 74 60 60 20 63 6f 6e 74 61 69 6e 65 | el/tacacs_plus:latest``.containe |
98f20 | 72 2e 00 59 6f 75 20 63 61 6e 20 6f 6e 6c 79 20 61 70 70 6c 79 20 6f 6e 65 20 70 6f 6c 69 63 79 | r..You.can.only.apply.one.policy |
98f40 | 20 70 65 72 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 64 69 72 65 63 74 69 6f 6e 2c 20 62 75 | .per.interface.and.direction,.bu |
98f60 | 74 20 79 6f 75 20 63 6f 75 6c 64 20 72 65 75 73 65 20 61 20 70 6f 6c 69 63 79 20 6f 6e 20 64 69 | t.you.could.reuse.a.policy.on.di |
98f80 | 66 66 65 72 65 6e 74 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 64 69 72 65 63 74 69 6f 6e | fferent.interfaces.and.direction |
98fa0 | 73 3a 00 59 6f 75 20 63 61 6e 20 72 75 6e 20 74 68 65 20 55 44 50 20 62 72 6f 61 64 63 61 73 74 | s:.You.can.run.the.UDP.broadcast |
98fc0 | 20 72 65 6c 61 79 20 73 65 72 76 69 63 65 20 6f 6e 20 6d 75 6c 74 69 70 6c 65 20 72 6f 75 74 65 | .relay.service.on.multiple.route |
98fe0 | 72 73 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 20 73 75 62 6e 65 74 2e 20 54 68 65 72 65 20 | rs.connected.to.a.subnet..There. |
99000 | 69 73 20 2a 2a 4e 4f 2a 2a 20 55 44 50 20 62 72 6f 61 64 63 61 73 74 20 72 65 6c 61 79 20 70 61 | is.**NO**.UDP.broadcast.relay.pa |
99020 | 63 6b 65 74 20 73 74 6f 72 6d 21 00 59 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 61 20 73 74 | cket.storm!.You.can.specify.a.st |
99040 | 61 74 69 63 20 44 48 43 50 20 61 73 73 69 67 6e 6d 65 6e 74 20 6f 6e 20 61 20 70 65 72 20 68 6f | atic.DHCP.assignment.on.a.per.ho |
99060 | 73 74 20 62 61 73 69 73 2e 20 59 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 68 65 20 4d 41 43 20 | st.basis..You.will.need.the.MAC. |
99080 | 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 73 74 61 74 69 6f 6e 20 61 6e 64 20 79 6f 75 72 20 | address.of.the.station.and.your. |
990a0 | 64 65 73 69 72 65 64 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 | desired.IP.address..The.address. |
990c0 | 6d 75 73 74 20 62 65 20 69 6e 73 69 64 65 20 74 68 65 20 73 75 62 6e 65 74 20 64 65 66 69 6e 69 | must.be.inside.the.subnet.defini |
990e0 | 74 69 6f 6e 20 62 75 74 20 63 61 6e 20 62 65 20 6f 75 74 73 69 64 65 20 6f 66 20 74 68 65 20 72 | tion.but.can.be.outside.of.the.r |
99100 | 61 6e 67 65 20 73 74 61 74 65 6d 65 6e 74 2e 00 59 6f 75 20 63 61 6e 20 74 65 73 74 20 74 68 65 | ange.statement..You.can.test.the |
99120 | 20 53 4e 4d 50 76 33 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 66 72 6f 6d 20 61 6e 79 20 6c | .SNMPv3.functionality.from.any.l |
99140 | 69 6e 75 78 20 62 61 73 65 64 20 73 79 73 74 65 6d 2c 20 6a 75 73 74 20 72 75 6e 20 74 68 65 20 | inux.based.system,.just.run.the. |
99160 | 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 20 60 60 73 6e 6d 70 77 61 6c 6b 20 2d 76 | following.command:.``snmpwalk.-v |
99180 | 20 33 20 2d 75 20 76 79 6f 73 20 2d 61 20 53 48 41 20 2d 41 20 76 79 6f 73 31 32 33 34 35 36 37 | .3.-u.vyos.-a.SHA.-A.vyos1234567 |
991a0 | 38 20 2d 78 20 41 45 53 20 2d 58 20 76 79 6f 73 31 32 33 34 35 36 37 38 20 2d 6c 20 61 75 74 68 | 8.-x.AES.-X.vyos12345678.-l.auth |
991c0 | 50 72 69 76 20 31 39 32 2e 30 2e 32 2e 31 20 2e 31 60 60 00 59 6f 75 20 63 61 6e 20 75 73 65 20 | Priv.192.0.2.1..1``.You.can.use. |
991e0 | 77 69 6c 64 63 61 72 64 20 60 60 2a 60 60 20 74 6f 20 6d 61 74 63 68 20 61 20 67 72 6f 75 70 20 | wildcard.``*``.to.match.a.group. |
99200 | 6f 66 20 69 6e 74 65 72 66 61 63 65 73 2e 00 59 6f 75 20 63 61 6e 20 76 65 72 69 66 79 20 79 6f | of.interfaces..You.can.verify.yo |
99220 | 75 72 20 56 52 52 50 20 67 72 6f 75 70 20 73 74 61 74 75 73 20 77 69 74 68 20 74 68 65 20 6f 70 | ur.VRRP.group.status.with.the.op |
99240 | 65 72 61 74 69 6f 6e 61 6c 20 6d 6f 64 65 20 60 60 72 75 6e 20 73 68 6f 77 20 76 72 72 70 60 60 | erational.mode.``run.show.vrrp`` |
99260 | 20 63 6f 6d 6d 61 6e 64 3a 00 59 6f 75 20 63 61 6e 20 76 69 65 77 20 74 68 61 74 20 74 68 65 20 | .command:.You.can.view.that.the. |
99280 | 70 6f 6c 69 63 79 20 69 73 20 62 65 69 6e 67 20 63 6f 72 72 65 63 74 6c 79 20 28 6f 72 20 69 6e | policy.is.being.correctly.(or.in |
992a0 | 63 6f 72 72 65 63 74 6c 79 29 20 75 74 69 6c 69 73 65 64 20 77 69 74 68 20 74 68 65 20 66 6f 6c | correctly).utilised.with.the.fol |
992c0 | 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 59 6f 75 20 63 61 6e 6e 6f 74 20 65 61 73 69 6c | lowing.command:.You.cannot.easil |
992e0 | 79 20 72 65 64 69 73 74 72 69 62 75 74 65 20 49 50 76 36 20 72 6f 75 74 65 73 20 76 69 61 20 4f | y.redistribute.IPv6.routes.via.O |
99300 | 53 50 46 76 33 20 6f 6e 20 61 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 20 6c | SPFv3.on.a.WireGuard.interface.l |
99320 | 69 6e 6b 2e 20 54 68 69 73 20 72 65 71 75 69 72 65 73 20 79 6f 75 20 74 6f 20 63 6f 6e 66 69 67 | ink..This.requires.you.to.config |
99340 | 75 72 65 20 6c 69 6e 6b 2d 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 65 73 20 6d 61 6e 75 61 6c 6c | ure.link-local.addresses.manuall |
99360 | 79 20 6f 6e 20 74 68 65 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 73 2c 20 73 | y.on.the.WireGuard.interfaces,.s |
99380 | 65 65 20 3a 76 79 74 61 73 6b 3a 60 54 31 34 38 33 60 2e 00 59 6f 75 20 64 6f 20 2a 2a 6e 6f 74 | ee.:vytask:`T1483`..You.do.**not |
993a0 | 2a 2a 20 6e 65 65 64 20 74 6f 20 63 6f 70 79 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 | **.need.to.copy.the.certificate. |
993c0 | 74 6f 20 74 68 65 20 6f 74 68 65 72 20 72 6f 75 74 65 72 2e 20 49 6e 73 74 65 61 64 2c 20 79 6f | to.the.other.router..Instead,.yo |
993e0 | 75 20 6e 65 65 64 20 74 6f 20 72 65 74 72 69 65 76 65 20 69 74 73 20 53 48 41 2d 32 35 36 20 66 | u.need.to.retrieve.its.SHA-256.f |
99400 | 69 6e 67 65 72 70 72 69 6e 74 2e 20 4f 70 65 6e 56 50 4e 20 6f 6e 6c 79 20 73 75 70 70 6f 72 74 | ingerprint..OpenVPN.only.support |
99420 | 73 20 53 48 41 2d 32 35 36 20 66 69 6e 67 65 72 70 72 69 6e 74 73 20 61 74 20 74 68 65 20 6d 6f | s.SHA-256.fingerprints.at.the.mo |
99440 | 6d 65 6e 74 2c 20 73 6f 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 75 73 65 20 74 68 65 20 66 6f 6c | ment,.so.you.need.to.use.the.fol |
99460 | 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 59 6f 75 20 6d 61 79 20 61 6c 73 6f 20 61 64 64 | lowing.command:.You.may.also.add |
99480 | 69 74 69 6f 6e 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 20 74 69 6d 65 6f 75 74 73 20 66 6f 72 | itionally.configure.timeouts.for |
994a0 | 20 64 69 66 66 65 72 65 6e 74 20 74 79 70 65 73 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e | .different.types.of.connections. |
994c0 | 00 59 6f 75 20 6d 61 79 20 70 72 65 66 65 72 20 6c 6f 63 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 | .You.may.prefer.locally.configur |
994e0 | 65 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 6d 6f 72 65 20 74 68 61 6e 20 74 68 65 20 6e 65 | ed.capabilities.more.than.the.ne |
99500 | 67 6f 74 69 61 74 65 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 65 76 65 6e 20 74 68 6f 75 67 | gotiated.capabilities.even.thoug |
99520 | 68 20 72 65 6d 6f 74 65 20 70 65 65 72 20 73 65 6e 64 73 20 63 61 70 61 62 69 6c 69 74 69 65 73 | h.remote.peer.sends.capabilities |
99540 | 2e 20 49 66 20 74 68 65 20 70 65 65 72 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 62 79 20 3a | ..If.the.peer.is.configured.by.: |
99560 | 63 66 67 63 6d 64 3a 60 6f 76 65 72 72 69 64 65 2d 63 61 70 61 62 69 6c 69 74 79 60 2c 20 56 79 | cfgcmd:`override-capability`,.Vy |
99580 | 4f 53 20 69 67 6e 6f 72 65 73 20 72 65 63 65 69 76 65 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 | OS.ignores.received.capabilities |
995a0 | 20 74 68 65 6e 20 6f 76 65 72 72 69 64 65 20 6e 65 67 6f 74 69 61 74 65 64 20 63 61 70 61 62 69 | .then.override.negotiated.capabi |
995c0 | 6c 69 74 69 65 73 20 77 69 74 68 20 63 6f 6e 66 69 67 75 72 65 64 20 76 61 6c 75 65 73 2e 00 59 | lities.with.configured.values..Y |
995e0 | 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 64 69 73 61 62 6c 65 20 73 65 6e 64 69 6e 67 20 43 | ou.may.want.to.disable.sending.C |
99600 | 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 20 4f 50 45 4e 20 6d 65 73 73 61 | apability.Negotiation.OPEN.messa |
99620 | 67 65 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 74 68 65 20 70 65 65 | ge.optional.parameter.to.the.pee |
99640 | 72 20 77 68 65 6e 20 72 65 6d 6f 74 65 20 70 65 65 72 20 64 6f 65 73 20 6e 6f 74 20 69 6d 70 6c | r.when.remote.peer.does.not.impl |
99660 | 65 6d 65 6e 74 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 2e 20 50 6c | ement.Capability.Negotiation..Pl |
99680 | 65 61 73 65 20 75 73 65 20 3a 63 66 67 63 6d 64 3a 60 64 69 73 61 62 6c 65 2d 63 61 70 61 62 69 | ease.use.:cfgcmd:`disable-capabi |
996a0 | 6c 69 74 79 2d 6e 65 67 6f 74 69 61 74 69 6f 6e 60 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 | lity-negotiation`.command.to.dis |
996c0 | 61 62 6c 65 20 74 68 65 20 66 65 61 74 75 72 65 2e 00 59 6f 75 20 6e 65 65 64 20 32 20 73 65 70 | able.the.feature..You.need.2.sep |
996e0 | 61 72 61 74 65 20 66 69 72 65 77 61 6c 6c 73 20 74 6f 20 64 65 66 69 6e 65 20 74 72 61 66 66 69 | arate.firewalls.to.define.traffi |
99700 | 63 3a 20 6f 6e 65 20 66 6f 72 20 65 61 63 68 20 64 69 72 65 63 74 69 6f 6e 2e 00 59 6f 75 20 6e | c:.one.for.each.direction..You.n |
99720 | 65 65 64 20 74 6f 20 64 69 73 61 62 6c 65 20 74 68 65 20 69 6e 2d 6d 65 6d 6f 72 79 20 74 61 62 | eed.to.disable.the.in-memory.tab |
99740 | 6c 65 20 69 6e 20 70 72 6f 64 75 63 74 69 6f 6e 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 21 20 55 | le.in.production.environments!.U |
99760 | 73 69 6e 67 20 3a 61 62 62 72 3a 60 49 4d 54 20 28 49 6e 2d 4d 65 6d 6f 72 79 20 54 61 62 6c 65 | sing.:abbr:`IMT.(In-Memory.Table |
99780 | 29 60 20 6d 61 79 20 6c 65 61 64 20 74 6f 20 68 65 61 76 79 20 43 50 55 20 6f 76 65 72 6c 6f 61 | )`.may.lead.to.heavy.CPU.overloa |
997a0 | 64 69 6e 67 20 61 6e 64 20 75 6e 73 74 61 62 6c 65 20 66 6c 6f 77 2d 61 63 63 6f 75 6e 74 69 6e | ding.and.unstable.flow-accountin |
997c0 | 67 20 62 65 68 61 76 69 6f 72 2e 00 59 6f 75 20 6e 65 65 64 20 79 6f 75 72 20 50 50 50 6f 45 20 | g.behavior..You.need.your.PPPoE. |
997e0 | 63 72 65 64 65 6e 74 69 61 6c 73 20 66 72 6f 6d 20 79 6f 75 72 20 44 53 4c 20 49 53 50 20 69 6e | credentials.from.your.DSL.ISP.in |
99800 | 20 6f 72 64 65 72 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 69 73 2e 20 54 68 65 20 75 73 | .order.to.configure.this..The.us |
99820 | 75 61 6c 20 75 73 65 72 6e 61 6d 65 20 69 73 20 69 6e 20 74 68 65 20 66 6f 72 6d 20 6f 66 20 6e | ual.username.is.in.the.form.of.n |
99840 | 61 6d 65 40 68 6f 73 74 2e 6e 65 74 20 62 75 74 20 6d 61 79 20 76 61 72 79 20 64 65 70 65 6e 64 | ame@host.net.but.may.vary.depend |
99860 | 69 6e 67 20 6f 6e 20 49 53 50 2e 00 59 6f 75 20 6e 6f 77 20 73 65 65 20 74 68 65 20 6c 6f 6e 67 | ing.on.ISP..You.now.see.the.long |
99880 | 65 72 20 41 53 20 70 61 74 68 2e 00 59 6f 75 20 73 68 6f 75 6c 64 20 61 64 64 20 61 20 66 69 72 | er.AS.path..You.should.add.a.fir |
998a0 | 65 77 61 6c 6c 20 74 6f 20 79 6f 75 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 62 6f 76 | ewall.to.your.configuration.abov |
998c0 | 65 20 61 73 20 77 65 6c 6c 20 62 79 20 61 73 73 69 67 6e 69 6e 67 20 69 74 20 74 6f 20 74 68 65 | e.as.well.by.assigning.it.to.the |
998e0 | 20 70 70 70 6f 65 30 20 69 74 73 65 6c 66 20 61 73 20 73 68 6f 77 6e 20 68 65 72 65 3a 00 59 6f | .pppoe0.itself.as.shown.here:.Yo |
99900 | 75 20 73 68 6f 75 6c 64 20 61 6c 73 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 20 4f 55 | u.should.also.ensure.that.the.OU |
99920 | 54 49 53 44 45 5f 4c 4f 43 41 4c 20 66 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 20 69 73 20 61 70 | TISDE_LOCAL.firewall.group.is.ap |
99940 | 70 6c 69 65 64 20 74 6f 20 74 68 65 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 61 | plied.to.the.WAN.interface.and.a |
99960 | 20 64 69 72 65 63 74 69 6f 6e 20 28 6c 6f 63 61 6c 29 2e 00 59 6f 75 20 73 68 6f 75 6c 64 20 61 | .direction.(local)..You.should.a |
99980 | 6c 73 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 20 4f 55 54 53 49 44 45 5f 4c 4f 43 41 | lso.ensure.that.the.OUTSIDE_LOCA |
999a0 | 4c 20 66 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 74 | L.firewall.group.is.applied.to.t |
999c0 | 68 65 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 61 20 64 69 72 65 63 74 69 6f 6e | he.WAN.interface.and.a.direction |
999e0 | 20 28 6c 6f 63 61 6c 29 2e 00 59 6f 75 20 77 69 6c 6c 20 61 6c 73 6f 20 6e 65 65 64 20 74 68 65 | .(local)..You.will.also.need.the |
99a00 | 20 70 75 62 6c 69 63 20 6b 65 79 20 6f 66 20 79 6f 75 72 20 70 65 65 72 20 61 73 20 77 65 6c 6c | .public.key.of.your.peer.as.well |
99a20 | 20 61 73 20 74 68 65 20 6e 65 74 77 6f 72 6b 28 73 29 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 74 | .as.the.network(s).you.want.to.t |
99a40 | 75 6e 6e 65 6c 20 28 61 6c 6c 6f 77 65 64 2d 69 70 73 29 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 | unnel.(allowed-ips).to.configure |
99a60 | 20 61 20 57 69 72 65 47 75 61 72 64 20 74 75 6e 6e 65 6c 2e 20 54 68 65 20 70 75 62 6c 69 63 20 | .a.WireGuard.tunnel..The.public. |
99a80 | 6b 65 79 20 62 65 6c 6f 77 20 69 73 20 61 6c 77 61 79 73 20 74 68 65 20 70 75 62 6c 69 63 20 6b | key.below.is.always.the.public.k |
99aa0 | 65 79 20 66 72 6f 6d 20 79 6f 75 72 20 70 65 65 72 2c 20 6e 6f 74 20 79 6f 75 72 20 6c 6f 63 61 | ey.from.your.peer,.not.your.loca |
99ac0 | 6c 20 6f 6e 65 2e 00 59 6f 75 72 20 49 53 50 73 20 6d 6f 64 65 6d 20 69 73 20 63 6f 6e 6e 65 63 | l.one..Your.ISPs.modem.is.connec |
99ae0 | 74 65 64 20 74 6f 20 70 6f 72 74 20 60 60 65 74 68 30 60 60 20 6f 66 20 79 6f 75 72 20 56 79 4f | ted.to.port.``eth0``.of.your.VyO |
99b00 | 53 20 62 6f 78 2e 00 59 6f 75 72 20 4c 41 4e 20 63 6f 6e 6e 65 63 74 65 64 20 6f 6e 20 65 74 68 | S.box..Your.LAN.connected.on.eth |
99b20 | 30 20 75 73 65 73 20 70 72 65 66 69 78 20 60 60 32 30 30 31 3a 64 62 38 3a 62 65 65 66 3a 32 3a | 0.uses.prefix.``2001:db8:beef:2: |
99b40 | 3a 2f 36 34 60 60 20 77 69 74 68 20 74 68 65 20 72 6f 75 74 65 72 20 62 65 65 69 6e 67 20 60 60 | :/64``.with.the.router.beeing.`` |
99b60 | 32 30 30 31 3a 64 62 38 3a 62 65 65 66 3a 32 3a 3a 31 60 60 00 5a 65 62 72 61 20 73 75 70 70 6f | 2001:db8:beef:2::1``.Zebra.suppo |
99b80 | 72 74 73 20 70 72 65 66 69 78 2d 6c 69 73 74 73 20 61 6e 64 20 52 6f 75 74 65 20 4d 61 70 73 73 | rts.prefix-lists.and.Route.Mapss |
99ba0 | 20 74 6f 20 6d 61 74 63 68 20 72 6f 75 74 65 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 6f | .to.match.routes.received.from.o |
99bc0 | 74 68 65 72 20 46 52 52 20 63 6f 6d 70 6f 6e 65 6e 74 73 2e 20 54 68 65 20 70 65 72 6d 69 74 2f | ther.FRR.components..The.permit/ |
99be0 | 64 65 6e 79 20 66 61 63 69 6c 69 74 69 65 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 74 68 65 73 | deny.facilities.provided.by.thes |
99c00 | 65 20 63 6f 6d 6d 61 6e 64 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 66 69 6c 74 65 72 | e.commands.can.be.used.to.filter |
99c20 | 20 77 68 69 63 68 20 72 6f 75 74 65 73 20 7a 65 62 72 61 20 77 69 6c 6c 20 69 6e 73 74 61 6c 6c | .which.routes.zebra.will.install |
99c40 | 20 69 6e 20 74 68 65 20 6b 65 72 6e 65 6c 2e 00 5a 65 62 72 61 2f 4b 65 72 6e 65 6c 20 72 6f 75 | .in.the.kernel..Zebra/Kernel.rou |
99c60 | 74 65 20 66 69 6c 74 65 72 69 6e 67 00 5a 6f 6e 65 20 42 61 73 65 64 20 46 69 72 65 77 61 6c 6c | te.filtering.Zone.Based.Firewall |
99c80 | 00 5a 6f 6e 65 20 42 61 73 65 64 20 46 69 72 65 77 61 6c 6c 20 28 44 65 70 72 65 63 61 74 65 64 | .Zone.Based.Firewall.(Deprecated |
99ca0 | 29 00 5a 6f 6e 65 2d 50 6f 6c 69 63 79 20 4f 76 65 72 76 69 65 77 00 5a 6f 6e 65 2d 62 61 73 65 | ).Zone-Policy.Overview.Zone-base |
99cc0 | 64 20 66 69 72 65 77 61 6c 6c 00 5b 41 2e 42 2e 43 2e 44 5d 20 e2 80 93 20 6c 69 6e 6b 2d 73 74 | d.firewall.[A.B.C.D].....link-st |
99ce0 | 61 74 65 2d 69 64 2e 20 57 69 74 68 20 74 68 69 73 20 73 70 65 63 69 66 69 65 64 20 74 68 65 20 | ate-id..With.this.specified.the. |
99d00 | 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 70 6f 72 74 69 6f 6e 20 6f 66 20 74 68 65 20 | command.displays.portion.of.the. |
99d20 | 6e 65 74 77 6f 72 6b 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 74 68 61 74 20 69 73 20 62 65 69 6e | network.environment.that.is.bein |
99d40 | 67 20 64 65 73 63 72 69 62 65 64 20 62 79 20 74 68 65 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 | g.described.by.the.advertisement |
99d60 | 2e 20 54 68 65 20 76 61 6c 75 65 20 65 6e 74 65 72 65 64 20 64 65 70 65 6e 64 73 20 6f 6e 20 74 | ..The.value.entered.depends.on.t |
99d80 | 68 65 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 e2 80 99 73 20 4c 53 20 74 79 70 65 2e 20 49 74 | he.advertisement...s.LS.type..It |
99da0 | 20 6d 75 73 74 20 62 65 20 65 6e 74 65 72 65 64 20 69 6e 20 74 68 65 20 66 6f 72 6d 20 6f 66 20 | .must.be.entered.in.the.form.of. |
99dc0 | 61 6e 20 49 50 20 61 64 64 72 65 73 73 2e 00 60 31 2e 20 43 72 65 61 74 65 20 61 6e 20 65 76 65 | an.IP.address..`1..Create.an.eve |
99de0 | 6e 74 20 68 61 6e 64 6c 65 72 60 5f 00 60 32 2e 20 41 64 64 20 72 65 67 65 78 20 74 6f 20 74 68 | nt.handler`_.`2..Add.regex.to.th |
99e00 | 65 20 73 63 72 69 70 74 60 5f 00 60 33 2e 20 41 64 64 20 61 20 66 75 6c 6c 20 70 61 74 68 20 74 | e.script`_.`3..Add.a.full.path.t |
99e20 | 6f 20 74 68 65 20 73 63 72 69 70 74 60 5f 00 60 34 2e 20 41 64 64 20 6f 70 74 69 6f 6e 61 6c 20 | o.the.script`_.`4..Add.optional. |
99e40 | 70 61 72 61 6d 65 74 65 72 73 60 5f 00 60 3c 6e 61 6d 65 3e 60 20 6d 75 73 74 20 62 65 20 69 64 | parameters`_.`<name>`.must.be.id |
99e60 | 65 6e 74 69 63 61 6c 20 6f 6e 20 62 6f 74 68 20 73 69 64 65 73 21 00 60 60 24 20 74 61 69 6c 20 | entical.on.both.sides!.``$.tail. |
99e80 | 2d 6e 20 2b 32 20 63 61 2e 6b 65 79 20 7c 20 68 65 61 64 20 2d 6e 20 2d 31 20 7c 20 74 72 20 2d | -n.+2.ca.key.|.head.-n.-1.|.tr.- |
99ea0 | 64 20 27 5c 6e 27 60 60 00 60 60 24 20 74 61 69 6c 20 2d 6e 20 2b 32 20 63 61 2e 70 65 6d 20 7c | d.'\n'``.``$.tail.-n.+2.ca.pem.| |
99ec0 | 20 68 65 61 64 20 2d 6e 20 2d 31 20 7c 20 74 72 20 2d 64 20 27 5c 6e 27 60 60 00 60 60 24 20 74 | .head.-n.-1.|.tr.-d.'\n'``.``$.t |
99ee0 | 61 69 6c 20 2d 6e 20 2b 32 20 63 65 72 74 2e 6b 65 79 20 7c 20 68 65 61 64 20 2d 6e 20 2d 31 20 | ail.-n.+2.cert.key.|.head.-n.-1. |
99f00 | 7c 20 74 72 20 2d 64 20 27 5c 6e 27 60 60 00 60 60 24 20 74 61 69 6c 20 2d 6e 20 2b 32 20 63 65 | |.tr.-d.'\n'``.``$.tail.-n.+2.ce |
99f20 | 72 74 2e 70 65 6d 20 7c 20 68 65 61 64 20 2d 6e 20 2d 31 20 7c 20 74 72 20 2d 64 20 27 5c 6e 27 | rt.pem.|.head.-n.-1.|.tr.-d.'\n' |
99f40 | 60 60 00 60 60 2b 60 60 20 73 75 63 63 65 73 73 66 75 6c 00 60 60 2d 60 60 20 66 61 69 6c 65 64 | ``.``+``.successful.``-``.failed |
99f60 | 00 60 60 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2f 64 68 63 70 2d 63 6c 69 65 6e 74 2f 70 | .``/config/scripts/dhcp-client/p |
99f80 | 6f 73 74 2d 68 6f 6f 6b 73 2e 64 2f 60 60 00 60 60 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 | ost-hooks.d/``.``/config/scripts |
99fa0 | 2f 64 68 63 70 2d 63 6c 69 65 6e 74 2f 70 72 65 2d 68 6f 6f 6b 73 2e 64 2f 60 60 00 60 60 30 2e | /dhcp-client/pre-hooks.d/``.``0. |
99fc0 | 70 6f 6f 6c 2e 6e 74 70 2e 6f 72 67 60 60 00 60 60 30 60 60 20 2d 20 32 30 20 6f 72 20 34 30 20 | pool.ntp.org``.``0``.-.20.or.40. |
99fe0 | 4d 48 7a 20 63 68 61 6e 6e 65 6c 20 77 69 64 74 68 20 28 64 65 66 61 75 6c 74 29 00 60 60 30 60 | MHz.channel.width.(default).``0` |
9a000 | 60 3a 20 4e 6f 20 72 65 70 6c 61 79 20 77 69 6e 64 6f 77 2c 20 73 74 72 69 63 74 20 63 68 65 63 | `:.No.replay.window,.strict.chec |
9a020 | 6b 00 60 60 31 2d 34 32 39 34 39 36 37 32 39 35 60 60 3a 20 4e 75 6d 62 65 72 20 6f 66 20 70 61 | k.``1-4294967295``:.Number.of.pa |
9a040 | 63 6b 65 74 73 20 74 68 61 74 20 63 6f 75 6c 64 20 62 65 20 6d 69 73 6f 72 64 65 72 65 64 00 60 | ckets.that.could.be.misordered.` |
9a060 | 60 31 2e 70 6f 6f 6c 2e 6e 74 70 2e 6f 72 67 60 60 00 60 60 31 31 35 32 30 30 60 60 20 2d 20 31 | `1.pool.ntp.org``.``115200``.-.1 |
9a080 | 31 35 2c 32 30 30 20 62 70 73 20 28 64 65 66 61 75 6c 74 20 66 6f 72 20 73 65 72 69 61 6c 20 63 | 15,200.bps.(default.for.serial.c |
9a0a0 | 6f 6e 73 6f 6c 65 29 00 60 60 31 32 30 30 60 60 20 2d 20 31 32 30 30 20 62 70 73 00 60 60 31 39 | onsole).``1200``.-.1200.bps.``19 |
9a0c0 | 32 2e 31 36 38 2e 32 2e 32 35 34 60 60 20 49 50 20 61 64 64 72 65 65 73 73 20 6f 6e 20 56 79 4f | 2.168.2.254``.IP.addreess.on.VyO |
9a0e0 | 53 20 65 74 68 32 20 66 72 6f 6d 20 49 53 50 32 00 60 60 31 39 32 30 30 60 60 20 2d 20 31 39 2c | S.eth2.from.ISP2.``19200``.-.19, |
9a100 | 32 30 30 20 62 70 73 00 60 60 31 60 60 20 2d 20 38 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 20 77 | 200.bps.``1``.-.80.MHz.channel.w |
9a120 | 69 64 74 68 00 60 60 32 2e 70 6f 6f 6c 2e 6e 74 70 2e 6f 72 67 60 60 00 60 60 32 30 33 2e 30 2e | idth.``2.pool.ntp.org``.``203.0. |
9a140 | 31 31 33 2e 32 35 34 60 60 20 49 50 20 61 64 64 72 65 65 73 73 20 6f 6e 20 56 79 4f 53 20 65 74 | 113.254``.IP.addreess.on.VyOS.et |
9a160 | 68 31 20 66 72 6f 6d 20 49 53 50 31 00 60 60 32 34 30 30 60 60 20 2d 20 32 34 30 30 20 62 70 73 | h1.from.ISP1.``2400``.-.2400.bps |
9a180 | 00 60 60 32 60 60 20 2d 20 31 36 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 20 77 69 64 74 68 00 60 | .``2``.-.160.MHz.channel.width.` |
9a1a0 | 60 33 38 34 30 30 60 60 20 2d 20 33 38 2c 34 30 30 20 62 70 73 20 28 64 65 66 61 75 6c 74 20 66 | `38400``.-.38,400.bps.(default.f |
9a1c0 | 6f 72 20 58 65 6e 20 63 6f 6e 73 6f 6c 65 29 00 60 60 33 60 60 20 2d 20 38 30 2b 38 30 20 4d 48 | or.Xen.console).``3``.-.80+80.MH |
9a1e0 | 7a 20 63 68 61 6e 6e 65 6c 20 77 69 64 74 68 00 60 60 34 38 30 30 60 60 20 2d 20 34 38 30 30 20 | z.channel.width.``4800``.-.4800. |
9a200 | 62 70 73 00 60 60 35 37 36 30 30 60 60 20 2d 20 35 37 2c 36 30 30 20 62 70 73 00 60 60 36 34 3a | bps.``57600``.-.57,600.bps.``64: |
9a220 | 66 66 39 62 3a 3a 2f 39 36 60 60 20 69 73 20 74 68 65 20 77 65 6c 6c 2d 6b 6e 6f 77 6e 20 70 72 | ff9b::/96``.is.the.well-known.pr |
9a240 | 65 66 69 78 20 66 6f 72 20 49 50 76 34 2d 65 6d 62 65 64 64 65 64 20 49 50 76 36 20 61 64 64 72 | efix.for.IPv4-embedded.IPv6.addr |
9a260 | 65 73 73 65 73 2e 20 54 68 65 20 70 72 65 66 69 78 20 69 73 20 75 73 65 64 20 74 6f 20 72 65 70 | esses..The.prefix.is.used.to.rep |
9a280 | 72 65 73 65 6e 74 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 69 6e 20 61 6e 20 49 50 76 36 | resent.IPv4.addresses.in.an.IPv6 |
9a2a0 | 20 61 64 64 72 65 73 73 20 66 6f 72 6d 61 74 2e 20 54 68 65 20 49 50 76 34 20 61 64 64 72 65 73 | .address.format..The.IPv4.addres |
9a2c0 | 73 20 69 73 20 65 6e 63 6f 64 65 64 20 69 6e 20 74 68 65 20 6c 6f 77 2d 6f 72 64 65 72 20 33 32 | s.is.encoded.in.the.low-order.32 |
9a2e0 | 20 62 69 74 73 20 6f 66 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 68 | .bits.of.the.IPv6.address..The.h |
9a300 | 69 67 68 2d 6f 72 64 65 72 20 33 32 20 62 69 74 73 20 61 72 65 20 73 65 74 20 74 6f 20 74 68 65 | igh-order.32.bits.are.set.to.the |
9a320 | 20 77 65 6c 6c 2d 6b 6e 6f 77 6e 20 70 72 65 66 69 78 20 36 34 3a 66 66 39 62 3a 3a 2f 39 36 2e | .well-known.prefix.64:ff9b::/96. |
9a340 | 00 60 60 38 30 32 2e 33 61 64 60 60 20 2d 20 49 45 45 45 20 38 30 32 2e 33 61 64 20 44 79 6e 61 | .``802.3ad``.-.IEEE.802.3ad.Dyna |
9a360 | 6d 69 63 20 6c 69 6e 6b 20 61 67 67 72 65 67 61 74 69 6f 6e 2e 20 43 72 65 61 74 65 73 20 61 67 | mic.link.aggregation..Creates.ag |
9a380 | 67 72 65 67 61 74 69 6f 6e 20 67 72 6f 75 70 73 20 74 68 61 74 20 73 68 61 72 65 20 74 68 65 20 | gregation.groups.that.share.the. |
9a3a0 | 73 61 6d 65 20 73 70 65 65 64 20 61 6e 64 20 64 75 70 6c 65 78 20 73 65 74 74 69 6e 67 73 2e 20 | same.speed.and.duplex.settings.. |
9a3c0 | 55 74 69 6c 69 7a 65 73 20 61 6c 6c 20 73 6c 61 76 65 73 20 69 6e 20 74 68 65 20 61 63 74 69 76 | Utilizes.all.slaves.in.the.activ |
9a3e0 | 65 20 61 67 67 72 65 67 61 74 6f 72 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 20 38 30 | e.aggregator.according.to.the.80 |
9a400 | 32 2e 33 61 64 20 73 70 65 63 69 66 69 63 61 74 69 6f 6e 2e 00 60 60 39 36 30 30 60 60 20 2d 20 | 2.3ad.specification..``9600``.-. |
9a420 | 39 36 30 30 20 62 70 73 00 60 60 3c 20 64 68 2d 67 72 6f 75 70 20 3e 60 60 20 64 65 66 69 6e 65 | 9600.bps.``<.dh-group.>``.define |
9a440 | 73 20 61 20 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 67 72 6f 75 70 20 66 6f 72 20 50 46 53 | s.a.Diffie-Hellman.group.for.PFS |
9a460 | 3b 00 60 60 4b 6e 6f 77 6e 20 6c 69 6d 69 74 61 74 69 6f 6e 73 3a 60 60 00 60 60 53 74 61 74 65 | ;.``Known.limitations:``.``State |
9a480 | 66 75 6c 2d 49 50 76 36 2d 41 64 64 72 65 73 73 2d 50 6f 6f 6c 60 60 20 61 6e 64 20 60 60 44 65 | ful-IPv6-Address-Pool``.and.``De |
9a4a0 | 6c 65 67 61 74 65 64 2d 49 50 76 36 2d 50 72 65 66 69 78 2d 50 6f 6f 6c 60 60 20 61 72 65 20 64 | legated-IPv6-Prefix-Pool``.are.d |
9a4c0 | 65 66 69 6e 65 64 20 69 6e 20 52 46 43 36 39 31 31 2e 20 49 66 20 74 68 65 79 20 61 72 65 20 6e | efined.in.RFC6911..If.they.are.n |
9a4e0 | 6f 74 20 64 65 66 69 6e 65 64 20 69 6e 20 79 6f 75 72 20 52 41 44 49 55 53 20 73 65 72 76 65 72 | ot.defined.in.your.RADIUS.server |
9a500 | 2c 20 61 64 64 20 6e 65 77 20 64 69 63 74 69 6f 6e 61 72 79 5f 2e 00 60 60 57 4c 42 5f 49 4e 54 | ,.add.new.dictionary_..``WLB_INT |
9a520 | 45 52 46 41 43 45 5f 4e 41 4d 45 3d 5b 69 6e 74 65 72 66 61 63 65 6e 61 6d 65 5d 60 60 3a 20 49 | ERFACE_NAME=[interfacename]``:.I |
9a540 | 6e 74 65 72 66 61 63 65 20 74 6f 20 62 65 20 6d 6f 6e 69 74 6f 72 65 64 00 60 60 57 4c 42 5f 49 | nterface.to.be.monitored.``WLB_I |
9a560 | 4e 54 45 52 46 41 43 45 5f 53 54 41 54 45 3d 5b 41 43 54 49 56 45 7c 46 41 49 4c 45 44 5d 60 60 | NTERFACE_STATE=[ACTIVE|FAILED]`` |
9a580 | 3a 20 49 6e 74 65 72 66 61 63 65 20 73 74 61 74 65 00 60 60 61 60 60 20 2d 20 38 30 32 2e 31 31 | :.Interface.state.``a``.-.802.11 |
9a5a0 | 61 20 2d 20 35 34 20 4d 62 69 74 73 2f 73 65 63 00 60 60 61 63 60 60 20 2d 20 38 30 32 2e 31 31 | a.-.54.Mbits/sec.``ac``.-.802.11 |
9a5c0 | 61 63 20 2d 20 31 33 30 30 20 4d 62 69 74 73 2f 73 65 63 00 60 60 61 63 63 65 70 74 2d 6f 77 6e | ac.-.1300.Mbits/sec.``accept-own |
9a5e0 | 2d 6e 65 78 74 68 6f 70 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 | -nexthop``.-...........Well-know |
9a600 | 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 61 63 63 65 70 74 2d 6f 77 6e 2d 6e | n.communities.value.accept-own-n |
9a620 | 65 78 74 68 6f 70 20 30 78 46 46 46 46 30 30 30 38 00 60 60 61 63 63 65 70 74 2d 6f 77 6e 60 60 | exthop.0xFFFF0008.``accept-own`` |
9a640 | 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 | .-...................Well-known. |
9a660 | 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 41 43 43 45 50 54 5f 4f 57 4e 20 30 78 46 | communities.value.ACCEPT_OWN.0xF |
9a680 | 46 46 46 30 30 30 31 00 60 60 61 63 63 65 70 74 60 60 3a 20 61 63 63 65 70 74 20 74 68 65 20 70 | FFF0001.``accept``:.accept.the.p |
9a6a0 | 61 63 6b 65 74 2e 00 60 60 61 63 63 65 73 73 2d 70 6f 69 6e 74 60 60 20 2d 20 41 63 63 65 73 73 | acket..``access-point``.-.Access |
9a6c0 | 2d 70 6f 69 6e 74 20 66 6f 72 77 61 72 64 73 20 70 61 63 6b 65 74 73 20 62 65 74 77 65 65 6e 20 | -point.forwards.packets.between. |
9a6e0 | 6f 74 68 65 72 20 6e 6f 64 65 73 00 60 60 61 63 74 69 6f 6e 60 60 20 6b 65 65 70 2d 61 6c 69 76 | other.nodes.``action``.keep-aliv |
9a700 | 65 20 66 61 69 6c 75 72 65 20 61 63 74 69 6f 6e 3a 00 60 60 61 63 74 69 76 65 2d 62 61 63 6b 75 | e.failure.action:.``active-backu |
9a720 | 70 60 60 20 2d 20 41 63 74 69 76 65 2d 62 61 63 6b 75 70 20 70 6f 6c 69 63 79 3a 20 4f 6e 6c 79 | p``.-.Active-backup.policy:.Only |
9a740 | 20 6f 6e 65 20 73 6c 61 76 65 20 69 6e 20 74 68 65 20 62 6f 6e 64 20 69 73 20 61 63 74 69 76 65 | .one.slave.in.the.bond.is.active |
9a760 | 2e 20 41 20 64 69 66 66 65 72 65 6e 74 20 73 6c 61 76 65 20 62 65 63 6f 6d 65 73 20 61 63 74 69 | ..A.different.slave.becomes.acti |
9a780 | 76 65 20 69 66 2c 20 61 6e 64 20 6f 6e 6c 79 20 69 66 2c 20 74 68 65 20 61 63 74 69 76 65 20 73 | ve.if,.and.only.if,.the.active.s |
9a7a0 | 6c 61 76 65 20 66 61 69 6c 73 2e 20 54 68 65 20 62 6f 6e 64 27 73 20 4d 41 43 20 61 64 64 72 65 | lave.fails..The.bond's.MAC.addre |
9a7c0 | 73 73 20 69 73 20 65 78 74 65 72 6e 61 6c 6c 79 20 76 69 73 69 62 6c 65 20 6f 6e 20 6f 6e 6c 79 | ss.is.externally.visible.on.only |
9a7e0 | 20 6f 6e 65 20 70 6f 72 74 20 28 6e 65 74 77 6f 72 6b 20 61 64 61 70 74 65 72 29 20 74 6f 20 61 | .one.port.(network.adapter).to.a |
9a800 | 76 6f 69 64 20 63 6f 6e 66 75 73 69 6e 67 20 74 68 65 20 73 77 69 74 63 68 2e 00 60 60 61 64 61 | void.confusing.the.switch..``ada |
9a820 | 70 74 69 76 65 2d 6c 6f 61 64 2d 62 61 6c 61 6e 63 65 60 60 20 2d 20 41 64 61 70 74 69 76 65 20 | ptive-load-balance``.-.Adaptive. |
9a840 | 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 3a 20 69 6e 63 6c 75 64 65 73 20 74 72 61 6e 73 6d 69 | load.balancing:.includes.transmi |
9a860 | 74 2d 6c 6f 61 64 2d 62 61 6c 61 6e 63 65 20 70 6c 75 73 20 72 65 63 65 69 76 65 20 6c 6f 61 64 | t-load-balance.plus.receive.load |
9a880 | 20 62 61 6c 61 6e 63 69 6e 67 20 66 6f 72 20 49 50 56 34 20 74 72 61 66 66 69 63 2c 20 61 6e 64 | .balancing.for.IPV4.traffic,.and |
9a8a0 | 20 64 6f 65 73 20 6e 6f 74 20 72 65 71 75 69 72 65 20 61 6e 79 20 73 70 65 63 69 61 6c 20 73 77 | .does.not.require.any.special.sw |
9a8c0 | 69 74 63 68 20 73 75 70 70 6f 72 74 2e 20 54 68 65 20 72 65 63 65 69 76 65 20 6c 6f 61 64 20 62 | itch.support..The.receive.load.b |
9a8e0 | 61 6c 61 6e 63 69 6e 67 20 69 73 20 61 63 68 69 65 76 65 64 20 62 79 20 41 52 50 20 6e 65 67 6f | alancing.is.achieved.by.ARP.nego |
9a900 | 74 69 61 74 69 6f 6e 2e 20 54 68 65 20 62 6f 6e 64 69 6e 67 20 64 72 69 76 65 72 20 69 6e 74 65 | tiation..The.bonding.driver.inte |
9a920 | 72 63 65 70 74 73 20 74 68 65 20 41 52 50 20 52 65 70 6c 69 65 73 20 73 65 6e 74 20 62 79 20 74 | rcepts.the.ARP.Replies.sent.by.t |
9a940 | 68 65 20 6c 6f 63 61 6c 20 73 79 73 74 65 6d 20 6f 6e 20 74 68 65 69 72 20 77 61 79 20 6f 75 74 | he.local.system.on.their.way.out |
9a960 | 20 61 6e 64 20 6f 76 65 72 77 72 69 74 65 73 20 74 68 65 20 73 6f 75 72 63 65 20 68 61 72 64 77 | .and.overwrites.the.source.hardw |
9a980 | 61 72 65 20 61 64 64 72 65 73 73 20 77 69 74 68 20 74 68 65 20 75 6e 69 71 75 65 20 68 61 72 64 | are.address.with.the.unique.hard |
9a9a0 | 77 61 72 65 20 61 64 64 72 65 73 73 20 6f 66 20 6f 6e 65 20 6f 66 20 74 68 65 20 73 6c 61 76 65 | ware.address.of.one.of.the.slave |
9a9c0 | 73 20 69 6e 20 74 68 65 20 62 6f 6e 64 20 73 75 63 68 20 74 68 61 74 20 64 69 66 66 65 72 65 6e | s.in.the.bond.such.that.differen |
9a9e0 | 74 20 70 65 65 72 73 20 75 73 65 20 64 69 66 66 65 72 65 6e 74 20 68 61 72 64 77 61 72 65 20 61 | t.peers.use.different.hardware.a |
9aa00 | 64 64 72 65 73 73 65 73 20 66 6f 72 20 74 68 65 20 73 65 72 76 65 72 2e 00 60 60 61 67 67 72 65 | ddresses.for.the.server..``aggre |
9aa20 | 73 73 69 76 65 60 60 20 75 73 65 20 41 67 67 72 65 73 73 69 76 65 20 6d 6f 64 65 20 66 6f 72 20 | ssive``.use.Aggressive.mode.for. |
9aa40 | 4b 65 79 20 45 78 63 68 61 6e 67 65 73 20 69 6e 20 74 68 65 20 49 4b 45 76 31 20 70 72 6f 74 6f | Key.Exchanges.in.the.IKEv1.proto |
9aa60 | 63 6f 6c 20 61 67 67 72 65 73 73 69 76 65 20 6d 6f 64 65 20 69 73 20 6d 75 63 68 20 6d 6f 72 65 | col.aggressive.mode.is.much.more |
9aa80 | 20 69 6e 73 65 63 75 72 65 20 63 6f 6d 70 61 72 65 64 20 74 6f 20 4d 61 69 6e 20 6d 6f 64 65 3b | .insecure.compared.to.Main.mode; |
9aaa0 | 00 60 60 61 6c 6c 2d 61 76 61 69 6c 61 62 6c 65 60 60 20 61 6c 6c 20 63 68 65 63 6b 69 6e 67 20 | .``all-available``.all.checking. |
9aac0 | 74 61 72 67 65 74 20 61 64 64 72 65 73 73 65 73 20 6d 75 73 74 20 62 65 20 61 76 61 69 6c 61 62 | target.addresses.must.be.availab |
9aae0 | 6c 65 20 74 6f 20 70 61 73 73 20 74 68 69 73 20 63 68 65 63 6b 00 60 60 61 6e 79 2d 61 76 61 69 | le.to.pass.this.check.``any-avai |
9ab00 | 6c 61 62 6c 65 60 60 20 61 6e 79 20 6f 66 20 74 68 65 20 63 68 65 63 6b 69 6e 67 20 74 61 72 67 | lable``.any.of.the.checking.targ |
9ab20 | 65 74 20 61 64 64 72 65 73 73 65 73 20 6d 75 73 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 74 | et.addresses.must.be.available.t |
9ab40 | 6f 20 70 61 73 73 20 74 68 69 73 20 63 68 65 63 6b 00 60 60 61 75 74 68 65 6e 74 69 63 61 74 69 | o.pass.this.check.``authenticati |
9ab60 | 6f 6e 20 6c 6f 63 61 6c 2d 69 64 2f 72 65 6d 6f 74 65 2d 69 64 60 60 20 2d 20 49 4b 45 20 69 64 | on.local-id/remote-id``.-.IKE.id |
9ab80 | 65 6e 74 69 66 69 63 61 74 69 6f 6e 20 69 73 20 75 73 65 64 20 66 6f 72 20 76 61 6c 69 64 61 74 | entification.is.used.for.validat |
9aba0 | 69 6f 6e 20 6f 66 20 56 50 4e 20 70 65 65 72 20 64 65 76 69 63 65 73 20 64 75 72 69 6e 67 20 49 | ion.of.VPN.peer.devices.during.I |
9abc0 | 4b 45 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 63 6f | KE.negotiation..If.you.do.not.co |
9abe0 | 6e 66 69 67 75 72 65 20 6c 6f 63 61 6c 2f 72 65 6d 6f 74 65 2d 69 64 65 6e 74 69 74 79 2c 20 74 | nfigure.local/remote-identity,.t |
9ac00 | 68 65 20 64 65 76 69 63 65 20 75 73 65 73 20 74 68 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 | he.device.uses.the.IPv4.or.IPv6. |
9ac20 | 61 64 64 72 65 73 73 20 74 68 61 74 20 63 6f 72 72 65 73 70 6f 6e 64 73 20 74 6f 20 74 68 65 20 | address.that.corresponds.to.the. |
9ac40 | 6c 6f 63 61 6c 2f 72 65 6d 6f 74 65 20 70 65 65 72 20 62 79 20 64 65 66 61 75 6c 74 2e 20 49 6e | local/remote.peer.by.default..In |
9ac60 | 20 63 65 72 74 61 69 6e 20 6e 65 74 77 6f 72 6b 20 73 65 74 75 70 73 20 28 6c 69 6b 65 20 69 70 | .certain.network.setups.(like.ip |
9ac80 | 73 65 63 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 64 79 6e 61 6d 69 63 20 61 64 64 72 65 | sec.interface.with.dynamic.addre |
9aca0 | 73 73 2c 20 6f 72 20 62 65 68 69 6e 64 20 74 68 65 20 4e 41 54 20 29 2c 20 74 68 65 20 49 4b 45 | ss,.or.behind.the.NAT.),.the.IKE |
9acc0 | 20 49 44 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 74 68 65 20 70 65 65 72 20 64 6f 65 73 20 | .ID.received.from.the.peer.does. |
9ace0 | 6e 6f 74 20 6d 61 74 63 68 20 74 68 65 20 49 4b 45 20 67 61 74 65 77 61 79 20 63 6f 6e 66 69 67 | not.match.the.IKE.gateway.config |
9ad00 | 75 72 65 64 20 6f 6e 20 74 68 65 20 64 65 76 69 63 65 2e 20 54 68 69 73 20 63 61 6e 20 6c 65 61 | ured.on.the.device..This.can.lea |
9ad20 | 64 20 74 6f 20 61 20 50 68 61 73 65 20 31 20 76 61 6c 69 64 61 74 69 6f 6e 20 66 61 69 6c 75 72 | d.to.a.Phase.1.validation.failur |
9ad40 | 65 2e 20 53 6f 2c 20 6d 61 6b 65 20 73 75 72 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 | e..So,.make.sure.to.configure.th |
9ad60 | 65 20 6c 6f 63 61 6c 2f 72 65 6d 6f 74 65 20 69 64 20 65 78 70 6c 69 63 69 74 6c 79 20 61 6e 64 | e.local/remote.id.explicitly.and |
9ad80 | 20 65 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 20 49 4b 45 20 49 44 20 69 73 20 74 68 65 20 73 | .ensure.that.the.IKE.ID.is.the.s |
9ada0 | 61 6d 65 20 61 73 20 74 68 65 20 72 65 6d 6f 74 65 2d 69 64 65 6e 74 69 74 79 20 63 6f 6e 66 69 | ame.as.the.remote-identity.confi |
9adc0 | 67 75 72 65 64 20 6f 6e 20 74 68 65 20 70 65 65 72 20 64 65 76 69 63 65 2e 00 60 60 61 75 74 68 | gured.on.the.peer.device..``auth |
9ade0 | 65 6e 74 69 63 61 74 69 6f 6e 60 60 20 2d 20 63 6f 6e 66 69 67 75 72 65 20 61 75 74 68 65 6e 74 | entication``.-.configure.authent |
9ae00 | 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 56 79 4f 53 20 61 6e 64 20 61 20 72 65 6d 6f 74 | ication.between.VyOS.and.a.remot |
9ae20 | 65 20 70 65 65 72 2e 20 49 66 20 70 72 65 2d 73 68 61 72 65 64 2d 73 65 63 72 65 74 20 6d 6f 64 | e.peer..If.pre-shared-secret.mod |
9ae40 | 65 20 69 73 20 75 73 65 64 2c 20 74 68 65 20 73 65 63 72 65 74 20 6b 65 79 20 6d 75 73 74 20 62 | e.is.used,.the.secret.key.must.b |
9ae60 | 65 20 64 65 66 69 6e 65 64 20 69 6e 20 60 60 73 65 74 20 76 70 6e 20 69 70 73 65 63 20 61 75 74 | e.defined.in.``set.vpn.ipsec.aut |
9ae80 | 68 65 6e 74 69 63 61 74 69 6f 6e 60 60 20 61 6e 64 20 73 75 62 6f 70 74 69 6f 6e 73 3a 00 60 60 | hentication``.and.suboptions:.`` |
9aea0 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 60 60 20 2d 20 63 6f 6e 66 69 67 75 72 65 20 61 75 74 | authentication``.-.configure.aut |
9aec0 | 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 56 79 4f 53 20 61 6e 64 20 61 20 72 | hentication.between.VyOS.and.a.r |
9aee0 | 65 6d 6f 74 65 20 70 65 65 72 2e 20 53 75 62 6f 70 74 69 6f 6e 73 3a 00 60 60 62 60 60 20 2d 20 | emote.peer..Suboptions:.``b``.-. |
9af00 | 38 30 32 2e 31 31 62 20 2d 20 31 31 20 4d 62 69 74 73 2f 73 65 63 00 60 60 62 61 62 65 6c 60 60 | 802.11b.-.11.Mbits/sec.``babel`` |
9af20 | 20 2d 20 42 61 62 65 6c 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 28 42 61 62 65 6c | .-.Babel.routing.protocol.(Babel |
9af40 | 29 00 60 60 62 65 67 69 6e 60 60 20 4d 61 74 63 68 65 73 20 74 68 65 20 62 65 67 69 6e 6e 69 6e | ).``begin``.Matches.the.beginnin |
9af60 | 67 20 6f 66 20 74 68 65 20 55 52 4c 20 70 61 74 68 00 60 60 62 67 70 60 60 20 2d 20 42 6f 72 64 | g.of.the.URL.path.``bgp``.-.Bord |
9af80 | 65 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 20 28 42 47 50 29 00 60 60 62 69 6e 64 | er.Gateway.Protocol.(BGP).``bind |
9afa0 | 60 60 20 2d 20 73 65 6c 65 63 74 20 61 20 56 54 49 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 62 | ``.-.select.a.VTI.interface.to.b |
9afc0 | 69 6e 64 20 74 6f 20 74 68 69 73 20 70 65 65 72 3b 00 60 60 62 6c 61 63 6b 68 6f 6c 65 60 60 20 | ind.to.this.peer;.``blackhole``. |
9afe0 | 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 | -....................Well-known. |
9b000 | 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 42 4c 41 43 4b 48 4f 4c 45 20 30 78 46 46 | communities.value.BLACKHOLE.0xFF |
9b020 | 46 46 30 32 39 41 00 60 60 62 72 6f 61 64 63 61 73 74 60 60 20 2d 20 42 72 6f 61 64 63 61 73 74 | FF029A.``broadcast``.-.Broadcast |
9b040 | 20 70 6f 6c 69 63 79 3a 20 74 72 61 6e 73 6d 69 74 73 20 65 76 65 72 79 74 68 69 6e 67 20 6f 6e | .policy:.transmits.everything.on |
9b060 | 20 61 6c 6c 20 73 6c 61 76 65 20 69 6e 74 65 72 66 61 63 65 73 2e 00 60 60 62 75 72 73 74 60 60 | .all.slave.interfaces..``burst`` |
9b080 | 3a 20 4e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 6f | :.Number.of.packets.allowed.to.o |
9b0a0 | 76 65 72 73 68 6f 6f 74 20 74 68 65 20 6c 69 6d 69 74 20 77 69 74 68 69 6e 20 60 60 70 65 72 69 | vershoot.the.limit.within.``peri |
9b0c0 | 6f 64 60 60 2e 20 44 65 66 61 75 6c 74 20 35 2e 00 60 60 63 61 2d 63 65 72 74 2d 66 69 6c 65 60 | od``..Default.5..``ca-cert-file` |
9b0e0 | 60 20 2d 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 66 69 6c 65 2e 20 55 73 69 6e 67 20 66 | `.-.CA.certificate.file..Using.f |
9b100 | 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 72 65 6d 6f 74 65 20 70 65 65 72 3b 00 60 | or.authenticating.remote.peer;.` |
9b120 | 60 63 61 2d 63 65 72 74 69 66 69 63 61 74 65 60 60 20 2d 20 43 41 20 63 65 72 74 69 66 69 63 61 | `ca-certificate``.-.CA.certifica |
9b140 | 74 65 20 69 6e 20 50 4b 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 55 73 69 6e 67 20 66 | te.in.PKI.configuration..Using.f |
9b160 | 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 72 65 6d 6f 74 65 20 70 65 65 72 3b 00 60 | or.authenticating.remote.peer;.` |
9b180 | 60 63 64 70 60 60 20 2d 20 4c 69 73 74 65 6e 20 66 6f 72 20 43 44 50 20 66 6f 72 20 43 69 73 63 | `cdp``.-.Listen.for.CDP.for.Cisc |
9b1a0 | 6f 20 72 6f 75 74 65 72 73 2f 73 77 69 74 63 68 65 73 00 60 60 63 65 72 74 2d 66 69 6c 65 60 60 | o.routers/switches.``cert-file`` |
9b1c0 | 20 2d 20 63 65 72 74 69 66 69 63 61 74 65 20 66 69 6c 65 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 | .-.certificate.file,.which.will. |
9b1e0 | 62 65 20 75 73 65 64 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 6c 6f 63 61 6c | be.used.for.authenticating.local |
9b200 | 20 72 6f 75 74 65 72 20 6f 6e 20 72 65 6d 6f 74 65 20 70 65 65 72 3b 00 60 60 63 65 72 74 69 66 | .router.on.remote.peer;.``certif |
9b220 | 69 63 61 74 65 60 60 20 2d 20 63 65 72 74 69 66 69 63 61 74 65 20 66 69 6c 65 20 69 6e 20 50 4b | icate``.-.certificate.file.in.PK |
9b240 | 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 75 | I.configuration,.which.will.be.u |
9b260 | 73 65 64 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 6c 6f 63 61 6c 20 72 6f 75 | sed.for.authenticating.local.rou |
9b280 | 74 65 72 20 6f 6e 20 72 65 6d 6f 74 65 20 70 65 65 72 3b 00 60 60 63 6c 65 61 72 60 60 20 63 6c | ter.on.remote.peer;.``clear``.cl |
9b2a0 | 6f 73 65 73 20 74 68 65 20 43 48 49 4c 44 5f 53 41 20 61 6e 64 20 64 6f 65 73 20 6e 6f 74 20 74 | oses.the.CHILD_SA.and.does.not.t |
9b2c0 | 61 6b 65 20 66 75 72 74 68 65 72 20 61 63 74 69 6f 6e 20 28 64 65 66 61 75 6c 74 29 3b 00 60 60 | ake.further.action.(default);.`` |
9b2e0 | 63 6c 65 61 72 60 60 20 73 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 63 6c 65 61 72 3b 00 60 60 63 | clear``.set.action.to.clear;.``c |
9b300 | 6c 6f 73 65 2d 61 63 74 69 6f 6e 20 3d 20 6e 6f 6e 65 20 7c 20 63 6c 65 61 72 20 7c 20 68 6f 6c | lose-action.=.none.|.clear.|.hol |
9b320 | 64 20 7c 20 72 65 73 74 61 72 74 60 60 20 2d 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 74 69 | d.|.restart``.-.defines.the.acti |
9b340 | 6f 6e 20 74 6f 20 74 61 6b 65 20 69 66 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 75 6e | on.to.take.if.the.remote.peer.un |
9b360 | 65 78 70 65 63 74 65 64 6c 79 20 63 6c 6f 73 65 73 20 61 20 43 48 49 4c 44 5f 53 41 20 28 73 65 | expectedly.closes.a.CHILD_SA.(se |
9b380 | 65 20 61 62 6f 76 65 20 66 6f 72 20 6d 65 61 6e 69 6e 67 20 6f 66 20 76 61 6c 75 65 73 29 2e 20 | e.above.for.meaning.of.values).. |
9b3a0 | 41 20 63 6c 6f 73 65 61 63 74 69 6f 6e 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 75 73 65 64 | A.closeaction.should.not.be.used |
9b3c0 | 20 69 66 20 74 68 65 20 70 65 65 72 20 75 73 65 73 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 69 | .if.the.peer.uses.reauthenticati |
9b3e0 | 6f 6e 20 6f 72 20 75 6e 69 71 75 65 69 64 73 2e 00 60 60 63 6c 6f 73 65 2d 61 63 74 69 6f 6e 20 | on.or.uniqueids..``close-action. |
9b400 | 3d 20 6e 6f 6e 65 20 7c 20 63 6c 65 61 72 20 7c 20 74 72 61 70 20 7c 20 73 74 61 72 74 60 60 20 | =.none.|.clear.|.trap.|.start``. |
9b420 | 2d 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 74 69 6f 6e 20 74 6f 20 74 61 6b 65 20 69 66 20 | -.defines.the.action.to.take.if. |
9b440 | 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 75 6e 65 78 70 65 63 74 65 64 6c 79 20 63 6c 6f | the.remote.peer.unexpectedly.clo |
9b460 | 73 65 73 20 61 20 43 48 49 4c 44 5f 53 41 20 28 73 65 65 20 61 62 6f 76 65 20 66 6f 72 20 6d 65 | ses.a.CHILD_SA.(see.above.for.me |
9b480 | 61 6e 69 6e 67 20 6f 66 20 76 61 6c 75 65 73 29 2e 20 41 20 63 6c 6f 73 65 61 63 74 69 6f 6e 20 | aning.of.values)..A.closeaction. |
9b4a0 | 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 75 73 65 64 20 69 66 20 74 68 65 20 70 65 65 72 20 75 | should.not.be.used.if.the.peer.u |
9b4c0 | 73 65 73 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 72 20 75 6e 69 71 75 65 69 64 | ses.reauthentication.or.uniqueid |
9b4e0 | 73 2e 00 60 60 63 6c 6f 73 65 2d 61 63 74 69 6f 6e 60 60 20 64 65 66 69 6e 65 73 20 74 68 65 20 | s..``close-action``.defines.the. |
9b500 | 61 63 74 69 6f 6e 20 74 6f 20 74 61 6b 65 20 69 66 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 | action.to.take.if.the.remote.pee |
9b520 | 72 20 75 6e 65 78 70 65 63 74 65 64 6c 79 20 63 6c 6f 73 65 73 20 61 20 43 48 49 4c 44 5f 53 41 | r.unexpectedly.closes.a.CHILD_SA |
9b540 | 3a 00 60 60 63 6f 6d 70 72 65 73 73 69 6f 6e 60 60 20 20 45 6e 61 62 6c 65 73 20 74 68 65 20 20 | :.``compression``..Enables.the.. |
9b560 | 49 50 43 6f 6d 70 28 49 50 20 50 61 79 6c 6f 61 64 20 43 6f 6d 70 72 65 73 73 69 6f 6e 29 20 70 | IPComp(IP.Payload.Compression).p |
9b580 | 72 6f 74 6f 63 6f 6c 20 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 63 6f 6d 70 72 65 73 73 69 6e 67 | rotocol.which.allows.compressing |
9b5a0 | 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 6f 66 20 49 50 20 70 61 63 6b 65 74 73 2e 00 60 60 63 6f | .the.content.of.IP.packets..``co |
9b5c0 | 6d 70 72 65 73 73 69 6f 6e 60 60 20 77 68 65 74 68 65 72 20 49 50 43 6f 6d 70 20 63 6f 6d 70 72 | mpression``.whether.IPComp.compr |
9b5e0 | 65 73 73 69 6f 6e 20 6f 66 20 63 6f 6e 74 65 6e 74 20 69 73 20 70 72 6f 70 6f 73 65 64 20 6f 6e | ession.of.content.is.proposed.on |
9b600 | 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 00 60 60 63 6f 6e 6e 65 63 74 65 64 60 60 20 2d | .the.connection:.``connected``.- |
9b620 | 20 43 6f 6e 6e 65 63 74 65 64 20 72 6f 75 74 65 73 20 28 64 69 72 65 63 74 6c 79 20 61 74 74 61 | .Connected.routes.(directly.atta |
9b640 | 63 68 65 64 20 73 75 62 6e 65 74 20 6f 72 20 68 6f 73 74 29 00 60 60 63 6f 6e 6e 65 63 74 69 6f | ched.subnet.or.host).``connectio |
9b660 | 6e 2d 74 79 70 65 60 60 20 2d 20 68 6f 77 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 69 73 20 63 6f | n-type``.-.how.to.handle.this.co |
9b680 | 6e 6e 65 63 74 69 6f 6e 20 70 72 6f 63 65 73 73 2e 20 50 6f 73 73 69 62 6c 65 20 76 61 72 69 61 | nnection.process..Possible.varia |
9b6a0 | 6e 74 73 3a 00 60 60 63 6f 6e 74 69 6e 75 65 60 60 3a 20 63 6f 6e 74 69 6e 75 65 20 70 61 72 73 | nts:.``continue``:.continue.pars |
9b6c0 | 69 6e 67 20 6e 65 78 74 20 72 75 6c 65 2e 00 60 60 63 72 6c 2d 66 69 6c 65 60 60 20 2d 20 66 69 | ing.next.rule..``crl-file``.-.fi |
9b6e0 | 6c 65 20 77 69 74 68 20 74 68 65 20 43 65 72 74 69 66 69 63 61 74 65 20 52 65 76 6f 63 61 74 69 | le.with.the.Certificate.Revocati |
9b700 | 6f 6e 20 4c 69 73 74 2e 20 55 73 69 6e 67 20 74 6f 20 63 68 65 63 6b 20 69 66 20 61 20 63 65 72 | on.List..Using.to.check.if.a.cer |
9b720 | 74 69 66 69 63 61 74 65 20 66 6f 72 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 69 73 20 | tificate.for.the.remote.peer.is. |
9b740 | 76 61 6c 69 64 20 6f 72 20 72 65 76 6f 6b 65 64 3b 00 60 60 64 60 60 20 2d 20 45 78 65 63 75 74 | valid.or.revoked;.``d``.-.Execut |
9b760 | 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 64 61 79 73 00 60 60 64 65 61 64 2d 70 65 65 72 | ion.interval.in.days.``dead-peer |
9b780 | 2d 64 65 74 65 63 74 69 6f 6e 20 61 63 74 69 6f 6e 20 3d 20 63 6c 65 61 72 20 7c 20 68 6f 6c 64 | -detection.action.=.clear.|.hold |
9b7a0 | 20 7c 20 72 65 73 74 61 72 74 60 60 20 2d 20 52 5f 55 5f 54 48 45 52 45 20 6e 6f 74 69 66 69 63 | .|.restart``.-.R_U_THERE.notific |
9b7c0 | 61 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 28 49 4b 45 76 31 29 20 6f 72 20 65 6d 70 74 79 20 49 | ation.messages(IKEv1).or.empty.I |
9b7e0 | 4e 46 4f 52 4d 41 54 49 4f 4e 41 4c 20 6d 65 73 73 61 67 65 73 20 28 49 4b 45 76 32 29 20 61 72 | NFORMATIONAL.messages.(IKEv2).ar |
9b800 | 65 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 73 65 6e 74 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 | e.periodically.sent.in.order.to. |
9b820 | 63 68 65 63 6b 20 74 68 65 20 6c 69 76 65 6c 69 6e 65 73 73 20 6f 66 20 74 68 65 20 49 50 73 65 | check.the.liveliness.of.the.IPse |
9b840 | 63 20 70 65 65 72 2e 20 54 68 65 20 76 61 6c 75 65 73 20 63 6c 65 61 72 2c 20 68 6f 6c 64 2c 20 | c.peer..The.values.clear,.hold,. |
9b860 | 61 6e 64 20 72 65 73 74 61 72 74 20 61 6c 6c 20 61 63 74 69 76 61 74 65 20 44 50 44 20 61 6e 64 | and.restart.all.activate.DPD.and |
9b880 | 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 61 63 74 69 6f 6e 20 74 6f 20 70 65 72 66 6f 72 6d | .determine.the.action.to.perform |
9b8a0 | 20 6f 6e 20 61 20 74 69 6d 65 6f 75 74 2e 20 57 69 74 68 20 60 60 63 6c 65 61 72 60 60 20 74 68 | .on.a.timeout..With.``clear``.th |
9b8c0 | 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 63 6c 6f 73 65 64 20 77 69 74 68 20 6e 6f 20 66 | e.connection.is.closed.with.no.f |
9b8e0 | 75 72 74 68 65 72 20 61 63 74 69 6f 6e 73 20 74 61 6b 65 6e 2e 20 60 60 68 6f 6c 64 60 60 20 69 | urther.actions.taken..``hold``.i |
9b900 | 6e 73 74 61 6c 6c 73 20 61 20 74 72 61 70 20 70 6f 6c 69 63 79 2c 20 77 68 69 63 68 20 77 69 6c | nstalls.a.trap.policy,.which.wil |
9b920 | 6c 20 63 61 74 63 68 20 6d 61 74 63 68 69 6e 67 20 74 72 61 66 66 69 63 20 61 6e 64 20 74 72 69 | l.catch.matching.traffic.and.tri |
9b940 | 65 73 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f | es.to.re-negotiate.the.connectio |
9b960 | 6e 20 6f 6e 20 64 65 6d 61 6e 64 2e 20 60 60 72 65 73 74 61 72 74 60 60 20 77 69 6c 6c 20 69 6d | n.on.demand..``restart``.will.im |
9b980 | 6d 65 64 69 61 74 65 6c 79 20 74 72 69 67 67 65 72 20 61 6e 20 61 74 74 65 6d 70 74 20 74 6f 20 | mediately.trigger.an.attempt.to. |
9b9a0 | 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 60 60 64 | re-negotiate.the.connection..``d |
9b9c0 | 65 61 64 2d 70 65 65 72 2d 64 65 74 65 63 74 69 6f 6e 20 61 63 74 69 6f 6e 20 3d 20 63 6c 65 61 | ead-peer-detection.action.=.clea |
9b9e0 | 72 20 7c 20 74 72 61 70 20 7c 20 72 65 73 74 61 72 74 60 60 20 2d 20 52 5f 55 5f 54 48 45 52 45 | r.|.trap.|.restart``.-.R_U_THERE |
9ba00 | 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 28 49 4b 45 76 31 29 20 6f 72 | .notification.messages(IKEv1).or |
9ba20 | 20 65 6d 70 74 79 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 41 4c 20 6d 65 73 73 61 67 65 73 20 28 49 | .empty.INFORMATIONAL.messages.(I |
9ba40 | 4b 45 76 32 29 20 61 72 65 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 73 65 6e 74 20 69 6e 20 6f | KEv2).are.periodically.sent.in.o |
9ba60 | 72 64 65 72 20 74 6f 20 63 68 65 63 6b 20 74 68 65 20 6c 69 76 65 6c 69 6e 65 73 73 20 6f 66 20 | rder.to.check.the.liveliness.of. |
9ba80 | 74 68 65 20 49 50 73 65 63 20 70 65 65 72 2e 20 54 68 65 20 76 61 6c 75 65 73 20 63 6c 65 61 72 | the.IPsec.peer..The.values.clear |
9baa0 | 2c 20 74 72 61 70 2c 20 61 6e 64 20 72 65 73 74 61 72 74 20 61 6c 6c 20 61 63 74 69 76 61 74 65 | ,.trap,.and.restart.all.activate |
9bac0 | 20 44 50 44 20 61 6e 64 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 61 63 74 69 6f 6e 20 74 6f | .DPD.and.determine.the.action.to |
9bae0 | 20 70 65 72 66 6f 72 6d 20 6f 6e 20 61 20 74 69 6d 65 6f 75 74 2e 20 57 69 74 68 20 60 60 63 6c | .perform.on.a.timeout..With.``cl |
9bb00 | 65 61 72 60 60 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 63 6c 6f 73 65 64 20 77 | ear``.the.connection.is.closed.w |
9bb20 | 69 74 68 20 6e 6f 20 66 75 72 74 68 65 72 20 61 63 74 69 6f 6e 73 20 74 61 6b 65 6e 2e 20 60 60 | ith.no.further.actions.taken..`` |
9bb40 | 74 72 61 70 60 60 20 69 6e 73 74 61 6c 6c 73 20 61 20 74 72 61 70 20 70 6f 6c 69 63 79 2c 20 77 | trap``.installs.a.trap.policy,.w |
9bb60 | 68 69 63 68 20 77 69 6c 6c 20 63 61 74 63 68 20 6d 61 74 63 68 69 6e 67 20 74 72 61 66 66 69 63 | hich.will.catch.matching.traffic |
9bb80 | 20 61 6e 64 20 74 72 69 65 73 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 63 | .and.tries.to.re-negotiate.the.c |
9bba0 | 6f 6e 6e 65 63 74 69 6f 6e 20 6f 6e 20 64 65 6d 61 6e 64 2e 20 60 60 72 65 73 74 61 72 74 60 60 | onnection.on.demand..``restart`` |
9bbc0 | 20 77 69 6c 6c 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 74 72 69 67 67 65 72 20 61 6e 20 61 74 74 | .will.immediately.trigger.an.att |
9bbe0 | 65 6d 70 74 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 | empt.to.re-negotiate.the.connect |
9bc00 | 69 6f 6e 2e 00 60 60 64 65 61 64 2d 70 65 65 72 2d 64 65 74 65 63 74 69 6f 6e 60 60 20 63 6f 6e | ion..``dead-peer-detection``.con |
9bc20 | 74 72 6f 6c 73 20 74 68 65 20 75 73 65 20 6f 66 20 74 68 65 20 44 65 61 64 20 50 65 65 72 20 44 | trols.the.use.of.the.Dead.Peer.D |
9bc40 | 65 74 65 63 74 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c 20 28 44 50 44 2c 20 52 46 43 20 33 37 30 36 | etection.protocol.(DPD,.RFC.3706 |
9bc60 | 29 20 77 68 65 72 65 20 52 5f 55 5f 54 48 45 52 45 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 6d | ).where.R_U_THERE.notification.m |
9bc80 | 65 73 73 61 67 65 73 20 28 49 4b 45 76 31 29 20 6f 72 20 65 6d 70 74 79 20 49 4e 46 4f 52 4d 41 | essages.(IKEv1).or.empty.INFORMA |
9bca0 | 54 49 4f 4e 41 4c 20 6d 65 73 73 61 67 65 73 20 28 49 4b 45 76 32 29 20 61 72 65 20 70 65 72 69 | TIONAL.messages.(IKEv2).are.peri |
9bcc0 | 6f 64 69 63 61 6c 6c 79 20 73 65 6e 74 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 63 68 65 63 6b 20 | odically.sent.in.order.to.check. |
9bce0 | 74 68 65 20 6c 69 76 65 6c 69 6e 65 73 73 20 6f 66 20 74 68 65 20 49 50 73 65 63 20 70 65 65 72 | the.liveliness.of.the.IPsec.peer |
9bd00 | 3a 00 60 60 64 65 66 61 75 6c 74 2d 65 73 70 2d 67 72 6f 75 70 60 60 20 2d 20 45 53 50 20 67 72 | :.``default-esp-group``.-.ESP.gr |
9bd20 | 6f 75 70 20 74 6f 20 75 73 65 20 62 79 20 64 65 66 61 75 6c 74 20 66 6f 72 20 74 72 61 66 66 69 | oup.to.use.by.default.for.traffi |
9bd40 | 63 20 65 6e 63 72 79 70 74 69 6f 6e 2e 20 4d 69 67 68 74 20 62 65 20 6f 76 65 72 77 72 69 74 74 | c.encryption..Might.be.overwritt |
9bd60 | 65 6e 20 62 79 20 69 6e 64 69 76 69 64 75 61 6c 20 73 65 74 74 69 6e 67 73 20 66 6f 72 20 74 75 | en.by.individual.settings.for.tu |
9bd80 | 6e 6e 65 6c 20 6f 72 20 56 54 49 20 69 6e 74 65 72 66 61 63 65 20 62 69 6e 64 69 6e 67 3b 00 60 | nnel.or.VTI.interface.binding;.` |
9bda0 | 60 64 65 73 63 72 69 70 74 69 6f 6e 60 60 20 2d 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 | `description``.-.description.for |
9bdc0 | 20 74 68 69 73 20 70 65 65 72 3b 00 60 60 64 68 2d 67 72 6f 75 70 60 60 20 64 68 2d 67 72 6f 75 | .this.peer;.``dh-group``.dh-grou |
9bde0 | 70 3b 00 60 60 64 68 63 70 2d 69 6e 74 65 72 66 61 63 65 60 60 20 2d 20 49 44 20 66 6f 72 20 61 | p;.``dhcp-interface``.-.ID.for.a |
9be00 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 67 65 6e 65 72 61 74 65 64 20 66 72 6f 6d 20 44 48 43 | uthentication.generated.from.DHC |
9be20 | 50 20 61 64 64 72 65 73 73 20 64 79 6e 61 6d 69 63 61 6c 6c 79 3b 00 60 60 64 68 63 70 2d 69 6e | P.address.dynamically;.``dhcp-in |
9be40 | 74 65 72 66 61 63 65 60 60 20 2d 20 75 73 65 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 2c 20 72 | terface``.-.use.an.IP.address,.r |
9be60 | 65 63 65 69 76 65 64 20 66 72 6f 6d 20 44 48 43 50 20 66 6f 72 20 49 50 53 65 63 20 63 6f 6e 6e | eceived.from.DHCP.for.IPSec.conn |
9be80 | 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 69 73 20 70 65 65 72 2c 20 69 6e 73 74 65 61 64 20 6f | ection.with.this.peer,.instead.o |
9bea0 | 66 20 60 60 6c 6f 63 61 6c 2d 61 64 64 72 65 73 73 60 60 3b 00 60 60 64 69 73 61 62 6c 65 2d 6d | f.``local-address``;.``disable-m |
9bec0 | 6f 62 69 6b 65 60 60 20 64 69 73 61 62 6c 65 73 20 4d 4f 42 49 4b 45 20 53 75 70 70 6f 72 74 2e | obike``.disables.MOBIKE.Support. |
9bee0 | 20 4d 4f 42 49 4b 45 20 69 73 20 6f 6e 6c 79 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 49 4b | .MOBIKE.is.only.available.for.IK |
9bf00 | 45 76 32 20 61 6e 64 20 65 6e 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 2e 00 60 60 64 69 | Ev2.and.enabled.by.default..``di |
9bf20 | 73 61 62 6c 65 2d 72 6f 75 74 65 2d 61 75 74 6f 69 6e 73 74 61 6c 6c 60 60 20 2d 20 54 68 69 73 | sable-route-autoinstall``.-.This |
9bf40 | 20 6f 70 74 69 6f 6e 20 77 68 65 6e 20 63 6f 6e 66 69 67 75 72 65 64 20 64 69 73 61 62 6c 65 73 | .option.when.configured.disables |
9bf60 | 20 74 68 65 20 72 6f 75 74 65 73 20 69 6e 73 74 61 6c 6c 65 64 20 69 6e 20 74 68 65 20 64 65 66 | .the.routes.installed.in.the.def |
9bf80 | 61 75 6c 74 20 74 61 62 6c 65 20 32 32 30 20 66 6f 72 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 | ault.table.220.for.site-to-site. |
9bfa0 | 69 70 73 65 63 2e 20 49 74 20 69 73 20 6d 6f 73 74 6c 79 20 75 73 65 64 20 77 69 74 68 20 56 54 | ipsec..It.is.mostly.used.with.VT |
9bfc0 | 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 60 60 64 69 73 61 62 6c 65 2d 72 6f 75 74 65 | I.configuration..``disable-route |
9bfe0 | 2d 61 75 74 6f 69 6e 73 74 61 6c 6c 60 60 20 44 6f 20 6e 6f 74 20 61 75 74 6f 6d 61 74 69 63 61 | -autoinstall``.Do.not.automatica |
9c000 | 6c 6c 79 20 69 6e 73 74 61 6c 6c 20 72 6f 75 74 65 73 20 74 6f 20 72 65 6d 6f 74 65 20 6e 65 74 | lly.install.routes.to.remote.net |
9c020 | 77 6f 72 6b 73 3b 00 60 60 64 69 73 61 62 6c 65 60 60 20 2d 20 64 69 73 61 62 6c 65 20 74 68 69 | works;.``disable``.-.disable.thi |
9c040 | 73 20 74 75 6e 6e 65 6c 3b 00 60 60 64 69 73 61 62 6c 65 60 60 20 44 69 73 61 62 6c 65 20 50 46 | s.tunnel;.``disable``.Disable.PF |
9c060 | 53 3b 00 60 60 64 69 73 61 62 6c 65 60 60 20 64 69 73 61 62 6c 65 20 49 50 43 6f 6d 70 20 63 6f | S;.``disable``.disable.IPComp.co |
9c080 | 6d 70 72 65 73 73 69 6f 6e 20 28 64 65 66 61 75 6c 74 29 3b 00 60 60 64 69 73 61 62 6c 65 60 60 | mpression.(default);.``disable`` |
9c0a0 | 20 64 69 73 61 62 6c 65 20 4d 4f 42 49 4b 45 3b 00 60 60 64 72 6f 70 60 60 3a 20 64 72 6f 70 20 | .disable.MOBIKE;.``drop``:.drop. |
9c0c0 | 74 68 65 20 70 61 63 6b 65 74 2e 00 60 60 65 63 64 73 61 2d 73 68 61 32 2d 6e 69 73 74 70 32 35 | the.packet..``ecdsa-sha2-nistp25 |
9c0e0 | 36 60 60 00 60 60 65 63 64 73 61 2d 73 68 61 32 2d 6e 69 73 74 70 33 38 34 60 60 00 60 60 65 63 | 6``.``ecdsa-sha2-nistp384``.``ec |
9c100 | 64 73 61 2d 73 68 61 32 2d 6e 69 73 74 70 35 32 31 60 60 00 60 60 65 64 70 60 60 20 2d 20 4c 69 | dsa-sha2-nistp521``.``edp``.-.Li |
9c120 | 73 74 65 6e 20 66 6f 72 20 45 44 50 20 66 6f 72 20 45 78 74 72 65 6d 65 20 72 6f 75 74 65 72 73 | sten.for.EDP.for.Extreme.routers |
9c140 | 2f 73 77 69 74 63 68 65 73 00 60 60 65 6e 61 62 6c 65 60 60 20 49 6e 68 65 72 69 74 20 44 69 66 | /switches.``enable``.Inherit.Dif |
9c160 | 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 67 72 6f 75 70 20 66 72 6f 6d 20 49 4b 45 20 67 72 6f 75 70 | fie-Hellman.group.from.IKE.group |
9c180 | 20 28 64 65 66 61 75 6c 74 29 3b 00 60 60 65 6e 61 62 6c 65 60 60 20 65 6e 61 62 6c 65 20 49 50 | .(default);.``enable``.enable.IP |
9c1a0 | 43 6f 6d 70 20 63 6f 6d 70 72 65 73 73 69 6f 6e 3b 00 60 60 65 6e 61 62 6c 65 60 60 20 65 6e 61 | Comp.compression;.``enable``.ena |
9c1c0 | 62 6c 65 20 4d 4f 42 49 4b 45 20 28 64 65 66 61 75 6c 74 20 66 6f 72 20 49 4b 45 76 32 29 3b 00 | ble.MOBIKE.(default.for.IKEv2);. |
9c1e0 | 60 60 65 6e 63 72 79 70 74 69 6f 6e 60 60 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6c 67 6f 72 69 | ``encryption``.encryption.algori |
9c200 | 74 68 6d 20 28 64 65 66 61 75 6c 74 20 31 32 38 20 62 69 74 20 41 45 53 2d 43 42 43 29 3b 00 60 | thm.(default.128.bit.AES-CBC);.` |
9c220 | 60 65 6e 63 72 79 70 74 69 6f 6e 60 60 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6c 67 6f 72 69 74 | `encryption``.encryption.algorit |
9c240 | 68 6d 3b 00 60 60 65 6e 64 60 60 20 4d 61 74 63 68 65 73 20 74 68 65 20 65 6e 64 20 6f 66 20 74 | hm;.``end``.Matches.the.end.of.t |
9c260 | 68 65 20 55 52 4c 20 70 61 74 68 2e 00 60 60 65 73 70 2d 67 72 6f 75 70 60 60 20 2d 20 64 65 66 | he.URL.path..``esp-group``.-.def |
9c280 | 69 6e 65 20 45 53 50 20 67 72 6f 75 70 20 66 6f 72 20 65 6e 63 72 79 70 74 20 74 72 61 66 66 69 | ine.ESP.group.for.encrypt.traffi |
9c2a0 | 63 2c 20 64 65 66 69 6e 65 64 20 62 79 20 74 68 69 73 20 74 75 6e 6e 65 6c 3b 00 60 60 65 73 70 | c,.defined.by.this.tunnel;.``esp |
9c2c0 | 2d 67 72 6f 75 70 60 60 20 2d 20 64 65 66 69 6e 65 20 45 53 50 20 67 72 6f 75 70 20 66 6f 72 20 | -group``.-.define.ESP.group.for. |
9c2e0 | 65 6e 63 72 79 70 74 20 74 72 61 66 66 69 63 2c 20 70 61 73 73 65 64 20 74 68 69 73 20 56 54 49 | encrypt.traffic,.passed.this.VTI |
9c300 | 20 69 6e 74 65 72 66 61 63 65 2e 00 60 60 65 78 61 63 74 60 60 20 52 65 71 75 69 72 65 73 20 61 | .interface..``exact``.Requires.a |
9c320 | 6e 20 65 78 61 63 74 6c 79 20 6d 61 74 63 68 20 6f 66 20 74 68 65 20 55 52 4c 20 70 61 74 68 00 | n.exactly.match.of.the.URL.path. |
9c340 | 60 60 66 64 70 60 60 20 2d 20 4c 69 73 74 65 6e 20 66 6f 72 20 46 44 50 20 66 6f 72 20 46 6f 75 | ``fdp``.-.Listen.for.FDP.for.Fou |
9c360 | 6e 64 72 79 20 72 6f 75 74 65 72 73 2f 73 77 69 74 63 68 65 73 00 60 60 66 69 6c 65 60 60 20 2d | ndry.routers/switches.``file``.- |
9c380 | 20 70 61 74 68 20 74 6f 20 74 68 65 20 6b 65 79 20 66 69 6c 65 3b 00 60 60 66 6c 65 78 76 70 6e | .path.to.the.key.file;.``flexvpn |
9c3a0 | 60 60 20 41 6c 6c 6f 77 20 46 6c 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 70 61 79 6c 6f | ``.Allow.FlexVPN.vendor.ID.paylo |
9c3c0 | 61 64 20 28 49 4b 45 76 32 20 6f 6e 6c 79 29 2e 20 53 65 6e 64 20 74 68 65 20 43 69 73 63 6f 20 | ad.(IKEv2.only)..Send.the.Cisco. |
9c3e0 | 46 6c 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 70 61 79 6c 6f 61 64 20 28 49 4b 45 76 32 | FlexVPN.vendor.ID.payload.(IKEv2 |
9c400 | 20 6f 6e 6c 79 29 2c 20 77 68 69 63 68 20 69 73 20 72 65 71 75 69 72 65 64 20 69 6e 20 6f 72 64 | .only),.which.is.required.in.ord |
9c420 | 65 72 20 74 6f 20 6d 61 6b 65 20 43 69 73 63 6f 20 62 72 61 6e 64 20 64 65 76 69 63 65 73 20 61 | er.to.make.Cisco.brand.devices.a |
9c440 | 6c 6c 6f 77 20 6e 65 67 6f 74 69 61 74 69 6e 67 20 61 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 | llow.negotiating.a.local.traffic |
9c460 | 20 73 65 6c 65 63 74 6f 72 20 28 66 72 6f 6d 20 73 74 72 6f 6e 67 53 77 61 6e 27 73 20 70 6f 69 | .selector.(from.strongSwan's.poi |
9c480 | 6e 74 20 6f 66 20 76 69 65 77 29 20 74 68 61 74 20 69 73 20 6e 6f 74 20 74 68 65 20 61 73 73 69 | nt.of.view).that.is.not.the.assi |
9c4a0 | 67 6e 65 64 20 76 69 72 74 75 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 69 66 20 73 75 63 68 20 | gned.virtual.IP.address.if.such. |
9c4c0 | 61 6e 20 61 64 64 72 65 73 73 20 69 73 20 72 65 71 75 65 73 74 65 64 20 62 79 20 73 74 72 6f 6e | an.address.is.requested.by.stron |
9c4e0 | 67 53 77 61 6e 2e 20 53 65 6e 64 69 6e 67 20 74 68 65 20 43 69 73 63 6f 20 46 6c 65 78 56 50 4e | gSwan..Sending.the.Cisco.FlexVPN |
9c500 | 20 76 65 6e 64 6f 72 20 49 44 20 70 72 65 76 65 6e 74 73 20 74 68 65 20 70 65 65 72 20 66 72 6f | .vendor.ID.prevents.the.peer.fro |
9c520 | 6d 20 6e 61 72 72 6f 77 69 6e 67 20 74 68 65 20 69 6e 69 74 69 61 74 6f 72 27 73 20 6c 6f 63 61 | m.narrowing.the.initiator's.loca |
9c540 | 6c 20 74 72 61 66 66 69 63 20 73 65 6c 65 63 74 6f 72 20 61 6e 64 20 61 6c 6c 6f 77 73 20 69 74 | l.traffic.selector.and.allows.it |
9c560 | 20 74 6f 20 65 2e 67 2e 20 6e 65 67 6f 74 69 61 74 65 20 61 20 54 53 20 6f 66 20 30 2e 30 2e 30 | .to.e.g..negotiate.a.TS.of.0.0.0 |
9c580 | 2e 30 2f 30 20 3d 3d 20 30 2e 30 2e 30 2e 30 2f 30 20 69 6e 73 74 65 61 64 2e 20 54 68 69 73 20 | .0/0.==.0.0.0.0/0.instead..This. |
9c5a0 | 68 61 73 20 62 65 65 6e 20 74 65 73 74 65 64 20 77 69 74 68 20 61 20 22 74 75 6e 6e 65 6c 20 6d | has.been.tested.with.a."tunnel.m |
9c5c0 | 6f 64 65 20 69 70 73 65 63 20 69 70 76 34 22 20 43 69 73 63 6f 20 74 65 6d 70 6c 61 74 65 20 62 | ode.ipsec.ipv4".Cisco.template.b |
9c5e0 | 75 74 20 73 68 6f 75 6c 64 20 61 6c 73 6f 20 77 6f 72 6b 20 66 6f 72 20 47 52 45 20 65 6e 63 61 | ut.should.also.work.for.GRE.enca |
9c600 | 70 73 75 6c 61 74 69 6f 6e 3b 00 60 60 66 6c 65 78 76 70 6e 60 60 20 41 6c 6c 6f 77 73 20 46 6c | psulation;.``flexvpn``.Allows.Fl |
9c620 | 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 70 61 79 6c 6f 61 64 20 28 49 4b 45 76 32 20 6f | exVPN.vendor.ID.payload.(IKEv2.o |
9c640 | 6e 6c 79 29 2e 20 53 65 6e 64 20 74 68 65 20 43 69 73 63 6f 20 46 6c 65 78 56 50 4e 20 76 65 6e | nly)..Send.the.Cisco.FlexVPN.ven |
9c660 | 64 6f 72 20 49 44 20 70 61 79 6c 6f 61 64 20 28 49 4b 45 76 32 20 6f 6e 6c 79 29 2c 20 77 68 69 | dor.ID.payload.(IKEv2.only),.whi |
9c680 | 63 68 20 69 73 20 72 65 71 75 69 72 65 64 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 6d 61 6b 65 20 | ch.is.required.in.order.to.make. |
9c6a0 | 43 69 73 63 6f 20 62 72 61 6e 64 20 64 65 76 69 63 65 73 20 61 6c 6c 6f 77 20 6e 65 67 6f 74 69 | Cisco.brand.devices.allow.negoti |
9c6c0 | 61 74 69 6e 67 20 61 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 20 73 65 6c 65 63 74 6f 72 20 28 | ating.a.local.traffic.selector.( |
9c6e0 | 66 72 6f 6d 20 73 74 72 6f 6e 67 53 77 61 6e 27 73 20 70 6f 69 6e 74 20 6f 66 20 76 69 65 77 29 | from.strongSwan's.point.of.view) |
9c700 | 20 74 68 61 74 20 69 73 20 6e 6f 74 20 74 68 65 20 61 73 73 69 67 6e 65 64 20 76 69 72 74 75 61 | .that.is.not.the.assigned.virtua |
9c720 | 6c 20 49 50 20 61 64 64 72 65 73 73 20 69 66 20 73 75 63 68 20 61 6e 20 61 64 64 72 65 73 73 20 | l.IP.address.if.such.an.address. |
9c740 | 69 73 20 72 65 71 75 65 73 74 65 64 20 62 79 20 73 74 72 6f 6e 67 53 77 61 6e 2e 20 53 65 6e 64 | is.requested.by.strongSwan..Send |
9c760 | 69 6e 67 20 74 68 65 20 43 69 73 63 6f 20 46 6c 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 | ing.the.Cisco.FlexVPN.vendor.ID. |
9c780 | 70 72 65 76 65 6e 74 73 20 74 68 65 20 70 65 65 72 20 66 72 6f 6d 20 6e 61 72 72 6f 77 69 6e 67 | prevents.the.peer.from.narrowing |
9c7a0 | 20 74 68 65 20 69 6e 69 74 69 61 74 6f 72 27 73 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 20 73 | .the.initiator's.local.traffic.s |
9c7c0 | 65 6c 65 63 74 6f 72 20 61 6e 64 20 61 6c 6c 6f 77 73 20 69 74 20 74 6f 20 65 2e 67 2e 20 6e 65 | elector.and.allows.it.to.e.g..ne |
9c7e0 | 67 6f 74 69 61 74 65 20 61 20 54 53 20 6f 66 20 30 2e 30 2e 30 2e 30 2f 30 20 3d 3d 20 30 2e 30 | gotiate.a.TS.of.0.0.0.0/0.==.0.0 |
9c800 | 2e 30 2e 30 2f 30 20 69 6e 73 74 65 61 64 2e 20 54 68 69 73 20 68 61 73 20 62 65 65 6e 20 74 65 | .0.0/0.instead..This.has.been.te |
9c820 | 73 74 65 64 20 77 69 74 68 20 61 20 22 74 75 6e 6e 65 6c 20 6d 6f 64 65 20 69 70 73 65 63 20 69 | sted.with.a."tunnel.mode.ipsec.i |
9c840 | 70 76 34 22 20 43 69 73 63 6f 20 74 65 6d 70 6c 61 74 65 20 62 75 74 20 73 68 6f 75 6c 64 20 61 | pv4".Cisco.template.but.should.a |
9c860 | 6c 73 6f 20 77 6f 72 6b 20 66 6f 72 20 47 52 45 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 3b 00 | lso.work.for.GRE.encapsulation;. |
9c880 | 60 60 66 6f 72 63 65 2d 75 64 70 2d 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 60 60 20 2d 20 66 6f | ``force-udp-encapsulation``.-.fo |
9c8a0 | 72 63 65 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 6f 66 20 45 53 50 20 69 6e 74 6f 20 55 44 | rce.encapsulation.of.ESP.into.UD |
9c8c0 | 50 20 64 61 74 61 67 72 61 6d 73 2e 20 55 73 65 66 75 6c 20 69 6e 20 63 61 73 65 20 69 66 20 62 | P.datagrams..Useful.in.case.if.b |
9c8e0 | 65 74 77 65 65 6e 20 6c 6f 63 61 6c 20 61 6e 64 20 72 65 6d 6f 74 65 20 73 69 64 65 20 69 73 20 | etween.local.and.remote.side.is. |
9c900 | 66 69 72 65 77 61 6c 6c 20 6f 72 20 4e 41 54 2c 20 77 68 69 63 68 20 6e 6f 74 20 61 6c 6c 6f 77 | firewall.or.NAT,.which.not.allow |
9c920 | 73 20 70 61 73 73 69 6e 67 20 70 6c 61 69 6e 20 45 53 50 20 70 61 63 6b 65 74 73 20 62 65 74 77 | s.passing.plain.ESP.packets.betw |
9c940 | 65 65 6e 20 74 68 65 6d 3b 00 60 60 67 60 60 20 2d 20 38 30 32 2e 31 31 67 20 2d 20 35 34 20 4d | een.them;.``g``.-.802.11g.-.54.M |
9c960 | 62 69 74 73 2f 73 65 63 20 28 64 65 66 61 75 6c 74 29 00 60 60 67 72 61 63 65 66 75 6c 2d 73 68 | bits/sec.(default).``graceful-sh |
9c980 | 75 74 64 6f 77 6e 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e | utdown``.-............Well-known |
9c9a0 | 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 47 52 41 43 45 46 55 4c 5f 53 48 55 54 | .communities.value.GRACEFUL_SHUT |
9c9c0 | 44 4f 57 4e 20 30 78 46 46 46 46 30 30 30 30 00 60 60 68 60 60 20 2d 20 45 78 65 63 75 74 69 6f | DOWN.0xFFFF0000.``h``.-.Executio |
9c9e0 | 6e 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 68 6f 75 72 73 00 60 60 68 61 73 68 60 60 20 68 61 73 | n.interval.in.hours.``hash``.has |
9ca00 | 68 20 61 6c 67 6f 72 69 74 68 6d 20 28 64 65 66 61 75 6c 74 20 73 68 61 31 29 2e 00 60 60 68 61 | h.algorithm.(default.sha1)..``ha |
9ca20 | 73 68 60 60 20 68 61 73 68 20 61 6c 67 6f 72 69 74 68 6d 2e 00 60 60 68 6f 6c 64 60 60 20 73 65 | sh``.hash.algorithm..``hold``.se |
9ca40 | 74 20 61 63 74 69 6f 6e 20 74 6f 20 68 6f 6c 64 20 28 64 65 66 61 75 6c 74 29 00 60 60 68 6f 6c | t.action.to.hold.(default).``hol |
9ca60 | 64 60 60 20 73 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 68 6f 6c 64 3b 00 60 60 68 74 34 30 2b 60 | d``.set.action.to.hold;.``ht40+` |
9ca80 | 60 20 2d 20 42 6f 74 68 20 32 30 20 4d 48 7a 20 61 6e 64 20 34 30 20 4d 48 7a 20 77 69 74 68 20 | `.-.Both.20.MHz.and.40.MHz.with. |
9caa0 | 73 65 63 6f 6e 64 61 72 79 20 63 68 61 6e 6e 65 6c 20 61 62 6f 76 65 20 74 68 65 20 70 72 69 6d | secondary.channel.above.the.prim |
9cac0 | 61 72 79 20 63 68 61 6e 6e 65 6c 00 60 60 68 74 34 30 2d 60 60 20 2d 20 42 6f 74 68 20 32 30 20 | ary.channel.``ht40-``.-.Both.20. |
9cae0 | 4d 48 7a 20 61 6e 64 20 34 30 20 4d 48 7a 20 77 69 74 68 20 73 65 63 6f 6e 64 61 72 79 20 63 68 | MHz.and.40.MHz.with.secondary.ch |
9cb00 | 61 6e 6e 65 6c 20 62 65 6c 6f 77 20 74 68 65 20 70 72 69 6d 61 72 79 20 63 68 61 6e 6e 65 6c 00 | annel.below.the.primary.channel. |
9cb20 | 60 60 68 76 63 30 60 60 20 2d 20 58 65 6e 20 63 6f 6e 73 6f 6c 65 00 60 60 69 64 60 60 20 2d 20 | ``hvc0``.-.Xen.console.``id``.-. |
9cb40 | 73 74 61 74 69 63 20 49 44 27 73 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 | static.ID's.for.authentication.. |
9cb60 | 49 6e 20 67 65 6e 65 72 61 6c 20 6c 6f 63 61 6c 20 61 6e 64 20 72 65 6d 6f 74 65 20 61 64 64 72 | In.general.local.and.remote.addr |
9cb80 | 65 73 73 20 60 60 3c 78 2e 78 2e 78 2e 78 3e 60 60 2c 20 60 60 3c 68 3a 68 3a 68 3a 68 3a 68 3a | ess.``<x.x.x.x>``,.``<h:h:h:h:h: |
9cba0 | 68 3a 68 3a 68 3e 60 60 20 6f 72 20 60 60 25 61 6e 79 60 60 3b 00 60 60 69 6b 65 2d 67 72 6f 75 | h:h:h>``.or.``%any``;.``ike-grou |
9cbc0 | 70 60 60 20 2d 20 49 4b 45 20 67 72 6f 75 70 20 74 6f 20 75 73 65 20 66 6f 72 20 6b 65 79 20 65 | p``.-.IKE.group.to.use.for.key.e |
9cbe0 | 78 63 68 61 6e 67 65 73 3b 00 60 60 69 6b 65 76 31 60 60 20 75 73 65 20 49 4b 45 76 31 20 66 6f | xchanges;.``ikev1``.use.IKEv1.fo |
9cc00 | 72 20 4b 65 79 20 45 78 63 68 61 6e 67 65 3b 00 60 60 69 6b 65 76 32 2d 72 65 61 75 74 68 60 60 | r.Key.Exchange;.``ikev2-reauth`` |
9cc20 | 20 2d 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 64 75 | .-.reauthenticate.remote.peer.du |
9cc40 | 72 69 6e 67 20 74 68 65 20 72 65 6b 65 79 69 6e 67 20 70 72 6f 63 65 73 73 2e 20 43 61 6e 20 62 | ring.the.rekeying.process..Can.b |
9cc60 | 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 69 74 68 20 49 4b 45 76 32 2e 20 43 72 65 61 74 65 20 61 | e.used.only.with.IKEv2..Create.a |
9cc80 | 20 6e 65 77 20 49 4b 45 5f 53 41 20 66 72 6f 6d 20 74 68 65 20 73 63 72 61 74 63 68 20 61 6e 64 | .new.IKE_SA.from.the.scratch.and |
9cca0 | 20 74 72 79 20 74 6f 20 72 65 63 72 65 61 74 65 20 61 6c 6c 20 49 50 73 65 63 20 53 41 73 3b 00 | .try.to.recreate.all.IPsec.SAs;. |
9ccc0 | 60 60 69 6b 65 76 32 2d 72 65 61 75 74 68 60 60 20 77 68 65 74 68 65 72 20 72 65 6b 65 79 69 6e | ``ikev2-reauth``.whether.rekeyin |
9cce0 | 67 20 6f 66 20 61 6e 20 49 4b 45 5f 53 41 20 73 68 6f 75 6c 64 20 61 6c 73 6f 20 72 65 61 75 74 | g.of.an.IKE_SA.should.also.reaut |
9cd00 | 68 65 6e 74 69 63 61 74 65 20 74 68 65 20 70 65 65 72 2e 20 49 6e 20 49 4b 45 76 31 2c 20 72 65 | henticate.the.peer..In.IKEv1,.re |
9cd20 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 61 6c 77 61 79 73 20 64 6f 6e 65 2e 20 53 | authentication.is.always.done..S |
9cd40 | 65 74 74 69 6e 67 20 74 68 69 73 20 70 61 72 61 6d 65 74 65 72 20 65 6e 61 62 6c 65 73 20 72 65 | etting.this.parameter.enables.re |
9cd60 | 6d 6f 74 65 20 68 6f 73 74 20 72 65 2d 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 75 72 69 | mote.host.re-authentication.duri |
9cd80 | 6e 67 20 61 6e 20 49 4b 45 20 72 65 6b 65 79 2e 00 60 60 69 6b 65 76 32 2d 72 65 61 75 74 68 60 | ng.an.IKE.rekey..``ikev2-reauth` |
9cda0 | 60 20 77 68 65 74 68 65 72 20 72 65 6b 65 79 69 6e 67 20 6f 66 20 61 6e 20 49 4b 45 5f 53 41 20 | `.whether.rekeying.of.an.IKE_SA. |
9cdc0 | 73 68 6f 75 6c 64 20 61 6c 73 6f 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 65 20 74 68 65 20 70 | should.also.reauthenticate.the.p |
9cde0 | 65 65 72 2e 20 49 6e 20 49 4b 45 76 31 2c 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 | eer..In.IKEv1,.reauthentication. |
9ce00 | 69 73 20 61 6c 77 61 79 73 20 64 6f 6e 65 3a 00 60 60 69 6b 65 76 32 60 60 20 75 73 65 20 49 4b | is.always.done:.``ikev2``.use.IK |
9ce20 | 45 76 32 20 66 6f 72 20 4b 65 79 20 45 78 63 68 61 6e 67 65 3b 00 60 60 69 6e 60 60 3a 20 52 75 | Ev2.for.Key.Exchange;.``in``:.Ru |
9ce40 | 6c 65 73 65 74 20 66 6f 72 20 66 6f 72 77 61 72 64 65 64 20 70 61 63 6b 65 74 73 20 6f 6e 20 61 | leset.for.forwarded.packets.on.a |
9ce60 | 6e 20 69 6e 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 00 60 60 69 6e 69 74 69 61 74 65 60 60 | n.inbound.interface.``initiate`` |
9ce80 | 20 2d 20 64 6f 65 73 20 69 6e 69 74 69 61 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 72 65 | .-.does.initial.connection.to.re |
9cea0 | 6d 6f 74 65 20 70 65 65 72 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 61 66 74 65 72 20 63 6f 6e 66 | mote.peer.immediately.after.conf |
9cec0 | 69 67 75 72 69 6e 67 20 61 6e 64 20 61 66 74 65 72 20 62 6f 6f 74 2e 20 49 6e 20 74 68 69 73 20 | iguring.and.after.boot..In.this. |
9cee0 | 6d 6f 64 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 | mode.the.connection.will.not.be. |
9cf00 | 72 65 73 74 61 72 74 65 64 20 69 6e 20 63 61 73 65 20 6f 66 20 64 69 73 63 6f 6e 6e 65 63 74 69 | restarted.in.case.of.disconnecti |
9cf20 | 6f 6e 2c 20 74 68 65 72 65 66 6f 72 65 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 20 6f 6e 6c | on,.therefore.should.be.used.onl |
9cf40 | 79 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 44 50 44 20 6f 72 20 61 6e 6f 74 68 65 72 20 73 | y.together.with.DPD.or.another.s |
9cf60 | 65 73 73 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 6d 65 74 68 6f 64 73 3b 00 60 60 69 6e 74 65 6c | ession.tracking.methods;.``intel |
9cf80 | 5f 69 64 6c 65 2e 6d 61 78 5f 63 73 74 61 74 65 3d 30 60 60 20 44 69 73 61 62 6c 65 20 69 6e 74 | _idle.max_cstate=0``.Disable.int |
9cfa0 | 65 6c 5f 69 64 6c 65 20 61 6e 64 20 66 61 6c 6c 20 62 61 63 6b 20 6f 6e 20 61 63 70 69 5f 69 64 | el_idle.and.fall.back.on.acpi_id |
9cfc0 | 6c 65 00 60 60 69 6e 74 65 72 66 61 63 65 60 60 20 49 6e 74 65 72 66 61 63 65 20 4e 61 6d 65 20 | le.``interface``.Interface.Name. |
9cfe0 | 74 6f 20 75 73 65 2e 20 54 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 | to.use..The.name.of.the.interfac |
9d000 | 65 20 6f 6e 20 77 68 69 63 68 20 76 69 72 74 75 61 6c 20 49 50 20 61 64 64 72 65 73 73 65 73 20 | e.on.which.virtual.IP.addresses. |
9d020 | 73 68 6f 75 6c 64 20 62 65 20 69 6e 73 74 61 6c 6c 65 64 2e 20 49 66 20 6e 6f 74 20 73 70 65 63 | should.be.installed..If.not.spec |
9d040 | 69 66 69 65 64 20 74 68 65 20 61 64 64 72 65 73 73 65 73 20 77 69 6c 6c 20 62 65 20 69 6e 73 74 | ified.the.addresses.will.be.inst |
9d060 | 61 6c 6c 65 64 20 6f 6e 20 74 68 65 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 3b | alled.on.the.outbound.interface; |
9d080 | 00 60 60 69 6e 74 65 72 66 61 63 65 60 60 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 56 | .``interface``.is.used.for.the.V |
9d0a0 | 79 4f 53 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 64 65 6e 74 69 66 79 20 74 68 65 20 | yOS.CLI.command.to.identify.the. |
9d0c0 | 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 68 69 73 20 70 | WireGuard.interface.where.this.p |
9d0e0 | 72 69 76 61 74 65 20 6b 65 79 20 69 73 20 74 6f 20 62 65 20 75 73 65 64 2e 00 60 60 69 6e 74 65 | rivate.key.is.to.be.used..``inte |
9d100 | 72 6e 65 74 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c | rnet``.-.....................Wel |
9d120 | 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 30 00 60 60 69 6e | l-known.communities.value.0.``in |
9d140 | 74 65 72 76 61 6c 60 60 20 6b 65 65 70 2d 61 6c 69 76 65 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 | terval``.keep-alive.interval.in. |
9d160 | 73 65 63 6f 6e 64 73 20 3c 32 2d 38 36 34 30 30 3e 20 28 64 65 66 61 75 6c 74 20 33 30 29 3b 00 | seconds.<2-86400>.(default.30);. |
9d180 | 60 60 69 73 69 73 60 60 20 2d 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 73 74 65 6d 20 74 | ``isis``.-.Intermediate.System.t |
9d1a0 | 6f 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 73 74 65 6d 20 28 49 53 2d 49 53 29 00 60 60 | o.Intermediate.System.(IS-IS).`` |
9d1c0 | 6a 75 6d 70 60 60 3a 20 6a 75 6d 70 20 74 6f 20 61 6e 6f 74 68 65 72 20 63 75 73 74 6f 6d 20 63 | jump``:.jump.to.another.custom.c |
9d1e0 | 68 61 69 6e 2e 00 60 60 6b 65 72 6e 65 6c 60 60 20 2d 20 4b 65 72 6e 65 6c 20 72 6f 75 74 65 73 | hain..``kernel``.-.Kernel.routes |
9d200 | 00 60 60 6b 65 79 2d 65 78 63 68 61 6e 67 65 60 60 20 77 68 69 63 68 20 70 72 6f 74 6f 63 6f 6c | .``key-exchange``.which.protocol |
9d220 | 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 20 74 6f 20 69 6e 69 74 69 61 6c 69 7a 65 20 74 68 | .should.be.used.to.initialize.th |
9d240 | 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 49 66 20 6e 6f 74 20 73 65 74 20 62 6f 74 68 20 70 72 6f | e.connection.If.not.set.both.pro |
9d260 | 74 6f 63 6f 6c 73 20 61 72 65 20 68 61 6e 64 6c 65 64 20 61 6e 64 20 63 6f 6e 6e 65 63 74 69 6f | tocols.are.handled.and.connectio |
9d280 | 6e 73 20 77 69 6c 6c 20 75 73 65 20 49 4b 45 76 32 20 77 68 65 6e 20 69 6e 69 74 69 61 74 69 6e | ns.will.use.IKEv2.when.initiatin |
9d2a0 | 67 2c 20 62 75 74 20 61 63 63 65 70 74 20 61 6e 79 20 70 72 6f 74 6f 63 6f 6c 20 76 65 72 73 69 | g,.but.accept.any.protocol.versi |
9d2c0 | 6f 6e 20 77 68 65 6e 20 72 65 73 70 6f 6e 64 69 6e 67 3a 00 60 60 6b 65 79 60 60 20 2d 20 61 20 | on.when.responding:.``key``.-.a. |
9d2e0 | 70 72 69 76 61 74 65 20 6b 65 79 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 | private.key,.which.will.be.used. |
9d300 | 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 | for.authenticating.local.router. |
9d320 | 6f 6e 20 72 65 6d 6f 74 65 20 70 65 65 72 3a 00 60 60 6c 61 74 65 6e 63 79 60 60 3a 20 41 20 73 | on.remote.peer:.``latency``:.A.s |
9d340 | 65 72 76 65 72 20 70 72 6f 66 69 6c 65 20 66 6f 63 75 73 65 64 20 6f 6e 20 6c 6f 77 65 72 69 6e | erver.profile.focused.on.lowerin |
9d360 | 67 20 6e 65 74 77 6f 72 6b 20 6c 61 74 65 6e 63 79 2e 20 54 68 69 73 20 70 72 6f 66 69 6c 65 20 | g.network.latency..This.profile. |
9d380 | 66 61 76 6f 72 73 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 6f 76 65 72 20 70 6f 77 65 72 20 73 61 | favors.performance.over.power.sa |
9d3a0 | 76 69 6e 67 73 20 62 79 20 73 65 74 74 69 6e 67 20 60 60 69 6e 74 65 6c 5f 70 73 74 61 74 65 60 | vings.by.setting.``intel_pstate` |
9d3c0 | 60 20 61 6e 64 20 60 60 6d 69 6e 5f 70 65 72 66 5f 70 63 74 3d 31 30 30 60 60 2e 00 60 60 6c 65 | `.and.``min_perf_pct=100``..``le |
9d3e0 | 61 73 74 2d 63 6f 6e 6e 65 63 74 69 6f 6e 60 60 20 44 69 73 74 72 69 62 75 74 65 73 20 72 65 71 | ast-connection``.Distributes.req |
9d400 | 75 65 73 74 73 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 20 77 69 74 68 20 74 68 65 20 66 65 77 | uests.to.the.server.with.the.few |
9d420 | 65 73 74 20 61 63 74 69 76 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 60 60 6c 65 61 73 74 2d 63 | est.active.connections.``least-c |
9d440 | 6f 6e 6e 65 63 74 69 6f 6e 60 60 20 44 69 73 74 72 69 62 75 74 65 73 20 72 65 71 75 65 73 74 73 | onnection``.Distributes.requests |
9d460 | 20 74 70 20 74 6a 65 20 73 65 72 76 65 72 20 77 6f 74 6a 20 74 68 65 20 66 65 77 65 73 74 20 61 | .tp.tje.server.wotj.the.fewest.a |
9d480 | 63 74 69 76 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 60 60 6c 69 66 65 2d 62 79 74 65 73 60 60 | ctive.connections.``life-bytes`` |
9d4a0 | 20 45 53 50 20 6c 69 66 65 20 69 6e 20 62 79 74 65 73 20 3c 31 30 32 34 2d 32 36 38 34 33 35 34 | .ESP.life.in.bytes.<1024-2684354 |
9d4c0 | 35 36 30 30 30 30 30 3e 2e 20 4e 75 6d 62 65 72 20 6f 66 20 62 79 74 65 73 20 74 72 61 6e 73 6d | 5600000>..Number.of.bytes.transm |
9d4e0 | 69 74 74 65 64 20 6f 76 65 72 20 61 6e 20 49 50 73 65 63 20 53 41 20 62 65 66 6f 72 65 20 69 74 | itted.over.an.IPsec.SA.before.it |
9d500 | 20 65 78 70 69 72 65 73 3b 00 60 60 6c 69 66 65 2d 70 61 63 6b 65 74 73 60 60 20 45 53 50 20 6c | .expires;.``life-packets``.ESP.l |
9d520 | 69 66 65 20 69 6e 20 70 61 63 6b 65 74 73 20 3c 31 30 30 30 2d 32 36 38 34 33 35 34 35 36 30 30 | ife.in.packets.<1000-26843545600 |
9d540 | 30 30 30 3e 2e 20 4e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 74 72 61 6e 73 6d 69 74 | 000>..Number.of.packets.transmit |
9d560 | 74 65 64 20 6f 76 65 72 20 61 6e 20 49 50 73 65 63 20 53 41 20 62 65 66 6f 72 65 20 69 74 20 65 | ted.over.an.IPsec.SA.before.it.e |
9d580 | 78 70 69 72 65 73 3b 00 60 60 6c 69 66 65 74 69 6d 65 60 60 20 45 53 50 20 6c 69 66 65 74 69 6d | xpires;.``lifetime``.ESP.lifetim |
9d5a0 | 65 20 69 6e 20 73 65 63 6f 6e 64 73 20 3c 33 30 2d 38 36 34 30 30 3e 20 28 64 65 66 61 75 6c 74 | e.in.seconds.<30-86400>.(default |
9d5c0 | 20 33 36 30 30 29 2e 20 48 6f 77 20 6c 6f 6e 67 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 69 6e | .3600)..How.long.a.particular.in |
9d5e0 | 73 74 61 6e 63 65 20 6f 66 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 28 61 20 73 65 74 20 6f 66 | stance.of.a.connection.(a.set.of |
9d600 | 20 65 6e 63 72 79 70 74 69 6f 6e 2f 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6b 65 79 73 20 | .encryption/authentication.keys. |
9d620 | 66 6f 72 20 75 73 65 72 20 70 61 63 6b 65 74 73 29 20 73 68 6f 75 6c 64 20 6c 61 73 74 2c 20 66 | for.user.packets).should.last,.f |
9d640 | 72 6f 6d 20 73 75 63 63 65 73 73 66 75 6c 20 6e 65 67 6f 74 69 61 74 69 6f 6e 20 74 6f 20 65 78 | rom.successful.negotiation.to.ex |
9d660 | 70 69 72 79 3b 00 60 60 6c 69 66 65 74 69 6d 65 60 60 20 49 4b 45 20 6c 69 66 65 74 69 6d 65 20 | piry;.``lifetime``.IKE.lifetime. |
9d680 | 69 6e 20 73 65 63 6f 6e 64 73 20 3c 30 2d 38 36 34 30 30 3e 20 28 64 65 66 61 75 6c 74 20 32 38 | in.seconds.<0-86400>.(default.28 |
9d6a0 | 38 30 30 29 3b 00 60 60 6c 69 66 65 74 69 6d 65 60 60 20 49 4b 45 20 6c 69 66 65 74 69 6d 65 20 | 800);.``lifetime``.IKE.lifetime. |
9d6c0 | 69 6e 20 73 65 63 6f 6e 64 73 20 3c 33 30 2d 38 36 34 30 30 3e 20 28 64 65 66 61 75 6c 74 20 32 | in.seconds.<30-86400>.(default.2 |
9d6e0 | 38 38 30 30 29 3b 00 60 60 6c 6c 67 72 2d 73 74 61 6c 65 60 60 20 2d 20 20 20 20 20 20 20 20 20 | 8800);.``llgr-stale``.-......... |
9d700 | 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 | ..........Well-known.communities |
9d720 | 20 76 61 6c 75 65 20 4c 4c 47 52 5f 53 54 41 4c 45 20 30 78 46 46 46 46 30 30 30 36 00 60 60 6c | .value.LLGR_STALE.0xFFFF0006.``l |
9d740 | 6f 63 61 6c 2d 61 64 64 72 65 73 73 60 60 20 2d 20 6c 6f 63 61 6c 20 49 50 20 61 64 64 72 65 73 | ocal-address``.-.local.IP.addres |
9d760 | 73 20 66 6f 72 20 49 50 53 65 63 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 69 73 | s.for.IPSec.connection.with.this |
9d780 | 20 70 65 65 72 2e 20 49 66 20 64 65 66 69 6e 65 64 20 60 60 61 6e 79 60 60 2c 20 74 68 65 6e 20 | .peer..If.defined.``any``,.then. |
9d7a0 | 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 77 68 69 63 68 20 63 6f 6e 66 69 67 75 72 65 64 20 6f | an.IP.address.which.configured.o |
9d7c0 | 6e 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 77 | n.interface.with.default.route.w |
9d7e0 | 69 6c 6c 20 62 65 20 75 73 65 64 3b 00 60 60 6c 6f 63 61 6c 2d 61 73 60 60 20 2d 20 20 20 20 20 | ill.be.used;.``local-as``.-..... |
9d800 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 | ................Well-known.commu |
9d820 | 6e 69 74 69 65 73 20 76 61 6c 75 65 20 4e 4f 5f 45 58 50 4f 52 54 5f 53 55 42 43 4f 4e 46 45 44 | nities.value.NO_EXPORT_SUBCONFED |
9d840 | 20 30 78 46 46 46 46 46 46 30 33 00 60 60 6c 6f 63 61 6c 2d 69 64 60 60 20 2d 20 49 44 20 66 6f | .0xFFFFFF03.``local-id``.-.ID.fo |
9d860 | 72 20 74 68 65 20 6c 6f 63 61 6c 20 56 79 4f 53 20 72 6f 75 74 65 72 2e 20 49 66 20 64 65 66 69 | r.the.local.VyOS.router..If.defi |
9d880 | 6e 65 64 2c 20 64 75 72 69 6e 67 20 74 68 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 | ned,.during.the.authentication.i |
9d8a0 | 74 20 77 69 6c 6c 20 62 65 20 73 65 6e 64 20 74 6f 20 72 65 6d 6f 74 65 20 70 65 65 72 3b 00 60 | t.will.be.send.to.remote.peer;.` |
9d8c0 | 60 6c 6f 63 61 6c 2d 6b 65 79 60 60 20 2d 20 6e 61 6d 65 20 6f 66 20 50 4b 49 20 6b 65 79 2d 70 | `local-key``.-.name.of.PKI.key-p |
9d8e0 | 61 69 72 20 77 69 74 68 20 6c 6f 63 61 6c 20 70 72 69 76 61 74 65 20 6b 65 79 00 60 60 6c 6f 63 | air.with.local.private.key.``loc |
9d900 | 61 6c 60 60 20 2d 20 64 65 66 69 6e 65 20 61 20 6c 6f 63 61 6c 20 73 6f 75 72 63 65 20 66 6f 72 | al``.-.define.a.local.source.for |
9d920 | 20 6d 61 74 63 68 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 73 68 6f 75 6c 64 20 62 65 20 | .match.traffic,.which.should.be. |
9d940 | 65 6e 63 72 79 70 74 65 64 20 61 6e 64 20 73 65 6e 64 20 74 6f 20 74 68 69 73 20 70 65 65 72 3a | encrypted.and.send.to.this.peer: |
9d960 | 00 60 60 6c 6f 63 61 6c 60 60 3a 20 52 75 6c 65 73 65 74 20 66 6f 72 20 70 61 63 6b 65 74 73 20 | .``local``:.Ruleset.for.packets. |
9d980 | 64 65 73 74 69 6e 65 64 20 66 6f 72 20 74 68 69 73 20 72 6f 75 74 65 72 00 60 60 6d 60 60 20 2d | destined.for.this.router.``m``.- |
9d9a0 | 20 45 78 65 63 75 74 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 6d 69 6e 75 74 65 73 00 60 | .Execution.interval.in.minutes.` |
9d9c0 | 60 6d 61 69 6e 60 60 20 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 75 73 65 64 20 62 79 20 56 79 | `main``.Routing.table.used.by.Vy |
9d9e0 | 4f 53 20 61 6e 64 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 6e 6f 74 20 70 61 72 74 | OS.and.other.interfaces.not.part |
9da00 | 69 63 69 70 61 74 69 6e 67 20 69 6e 20 50 42 52 00 60 60 6d 61 69 6e 60 60 20 75 73 65 20 4d 61 | icipating.in.PBR.``main``.use.Ma |
9da20 | 69 6e 20 6d 6f 64 65 20 66 6f 72 20 4b 65 79 20 45 78 63 68 61 6e 67 65 73 20 69 6e 20 74 68 65 | in.mode.for.Key.Exchanges.in.the |
9da40 | 20 49 4b 45 76 31 20 50 72 6f 74 6f 63 6f 6c 20 28 52 65 63 6f 6d 6d 65 6e 64 65 64 20 44 65 66 | .IKEv1.Protocol.(Recommended.Def |
9da60 | 61 75 6c 74 29 3b 00 60 60 6d 65 73 73 61 67 65 60 60 3a 20 46 75 6c 6c 20 6d 65 73 73 61 67 65 | ault);.``message``:.Full.message |
9da80 | 20 74 68 61 74 20 68 61 73 20 74 72 69 67 67 65 72 65 64 20 74 68 65 20 73 63 72 69 70 74 2e 00 | .that.has.triggered.the.script.. |
9daa0 | 60 60 6d 69 74 69 67 61 74 69 6f 6e 73 3d 6f 66 66 60 60 00 60 60 6d 6f 62 69 6b 65 60 60 20 65 | ``mitigations=off``.``mobike``.e |
9dac0 | 6e 61 62 6c 65 20 4d 4f 42 49 4b 45 20 53 75 70 70 6f 72 74 2e 20 4d 4f 42 49 4b 45 20 69 73 20 | nable.MOBIKE.Support..MOBIKE.is. |
9dae0 | 6f 6e 6c 79 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 49 4b 45 76 32 3a 00 60 60 6d 6f 64 65 | only.available.for.IKEv2:.``mode |
9db00 | 60 60 20 2d 20 6d 6f 64 65 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 65 74 | ``.-.mode.for.authentication.bet |
9db20 | 77 65 65 6e 20 56 79 4f 53 20 61 6e 64 20 72 65 6d 6f 74 65 20 70 65 65 72 3a 00 60 60 6d 6f 64 | ween.VyOS.and.remote.peer:.``mod |
9db40 | 65 60 60 20 49 4b 45 76 31 20 50 68 61 73 65 20 31 20 4d 6f 64 65 20 53 65 6c 65 63 74 69 6f 6e | e``.IKEv1.Phase.1.Mode.Selection |
9db60 | 3a 00 60 60 6d 6f 64 65 60 60 20 74 68 65 20 74 79 70 65 20 6f 66 20 74 68 65 20 63 6f 6e 6e 65 | :.``mode``.the.type.of.the.conne |
9db80 | 63 74 69 6f 6e 3a 00 60 60 6d 6f 6e 69 74 6f 72 60 60 20 2d 20 50 61 73 73 69 76 65 6c 79 20 6d | ction:.``monitor``.-.Passively.m |
9dba0 | 6f 6e 69 74 6f 72 20 61 6c 6c 20 70 61 63 6b 65 74 73 20 6f 6e 20 74 68 65 20 66 72 65 71 75 65 | onitor.all.packets.on.the.freque |
9dbc0 | 6e 63 79 2f 63 68 61 6e 6e 65 6c 00 60 60 6d 75 6c 74 69 2d 75 73 65 72 2d 62 65 61 6d 66 6f 72 | ncy/channel.``multi-user-beamfor |
9dbe0 | 6d 65 65 60 60 20 2d 20 53 75 70 70 6f 72 74 20 66 6f 72 20 6f 70 65 72 61 74 69 6f 6e 20 61 73 | mee``.-.Support.for.operation.as |
9dc00 | 20 73 69 6e 67 6c 65 20 75 73 65 72 20 62 65 61 6d 66 6f 72 6d 65 72 00 60 60 6d 75 6c 74 69 2d | .single.user.beamformer.``multi- |
9dc20 | 75 73 65 72 2d 62 65 61 6d 66 6f 72 6d 65 72 60 60 20 2d 20 53 75 70 70 6f 72 74 20 66 6f 72 20 | user-beamformer``.-.Support.for. |
9dc40 | 6f 70 65 72 61 74 69 6f 6e 20 61 73 20 73 69 6e 67 6c 65 20 75 73 65 72 20 62 65 61 6d 66 6f 72 | operation.as.single.user.beamfor |
9dc60 | 6d 65 72 00 60 60 6e 60 60 20 2d 20 38 30 32 2e 31 31 6e 20 2d 20 36 30 30 20 4d 62 69 74 73 2f | mer.``n``.-.802.11n.-.600.Mbits/ |
9dc80 | 73 65 63 00 60 60 6e 61 6d 65 60 60 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 56 79 4f | sec.``name``.is.used.for.the.VyO |
9dca0 | 53 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 64 65 6e 74 69 66 79 20 74 68 69 73 20 6b | S.CLI.command.to.identify.this.k |
9dcc0 | 65 79 2e 20 54 68 69 73 20 6b 65 79 20 60 60 6e 61 6d 65 60 60 20 69 73 20 74 68 65 6e 20 75 73 | ey..This.key.``name``.is.then.us |
9dce0 | 65 64 20 69 6e 20 74 68 65 20 43 4c 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 6f 20 72 | ed.in.the.CLI.configuration.to.r |
9dd00 | 65 66 65 72 65 6e 63 65 20 74 68 65 20 6b 65 79 20 69 6e 73 74 61 6e 63 65 2e 00 60 60 6e 65 74 | eference.the.key.instance..``net |
9dd20 | 2e 69 70 76 34 2e 63 6f 6e 66 2e 61 6c 6c 2e 61 63 63 65 70 74 5f 72 65 64 69 72 65 63 74 73 60 | .ipv4.conf.all.accept_redirects` |
9dd40 | 60 00 60 60 6e 65 74 2e 69 70 76 34 2e 63 6f 6e 66 2e 61 6c 6c 2e 61 63 63 65 70 74 5f 73 6f 75 | `.``net.ipv4.conf.all.accept_sou |
9dd60 | 72 63 65 5f 72 6f 75 74 65 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e 63 6f 6e 66 2e 61 6c 6c 2e | rce_route``.``net.ipv4.conf.all. |
9dd80 | 6c 6f 67 5f 6d 61 72 74 69 61 6e 73 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e 63 6f 6e 66 2e 61 | log_martians``.``net.ipv4.conf.a |
9dda0 | 6c 6c 2e 72 70 5f 66 69 6c 74 65 72 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e 63 6f 6e 66 2e 61 | ll.rp_filter``.``net.ipv4.conf.a |
9ddc0 | 6c 6c 2e 73 65 6e 64 5f 72 65 64 69 72 65 63 74 73 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e 69 | ll.send_redirects``.``net.ipv4.i |
9dde0 | 63 6d 70 5f 65 63 68 6f 5f 69 67 6e 6f 72 65 5f 62 72 6f 61 64 63 61 73 74 73 60 60 00 60 60 6e | cmp_echo_ignore_broadcasts``.``n |
9de00 | 65 74 2e 69 70 76 34 2e 74 63 70 5f 72 66 63 31 33 33 37 60 60 00 60 60 6e 65 74 2e 69 70 76 34 | et.ipv4.tcp_rfc1337``.``net.ipv4 |
9de20 | 2e 74 63 70 5f 73 79 6e 63 6f 6f 6b 69 65 73 60 60 00 60 60 6e 65 74 2e 69 70 76 36 2e 63 6f 6e | .tcp_syncookies``.``net.ipv6.con |
9de40 | 66 2e 61 6c 6c 2e 61 63 63 65 70 74 5f 72 65 64 69 72 65 63 74 73 60 60 00 60 60 6e 65 74 2e 69 | f.all.accept_redirects``.``net.i |
9de60 | 70 76 36 2e 63 6f 6e 66 2e 61 6c 6c 2e 61 63 63 65 70 74 5f 73 6f 75 72 63 65 5f 72 6f 75 74 65 | pv6.conf.all.accept_source_route |
9de80 | 60 60 00 60 60 6e 6f 2d 61 64 76 65 72 74 69 73 65 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 | ``.``no-advertise``.-........... |
9dea0 | 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c | ......Well-known.communities.val |
9dec0 | 75 65 20 4e 4f 5f 41 44 56 45 52 54 49 53 45 20 30 78 46 46 46 46 46 46 30 32 00 60 60 6e 6f 2d | ue.NO_ADVERTISE.0xFFFFFF02.``no- |
9dee0 | 65 78 70 6f 72 74 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 | export``.-....................We |
9df00 | 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 4e 4f 5f 45 58 | ll-known.communities.value.NO_EX |
9df20 | 50 4f 52 54 20 30 78 46 46 46 46 46 46 30 31 00 60 60 6e 6f 2d 6c 6c 67 72 60 60 20 2d 20 20 20 | PORT.0xFFFFFF01.``no-llgr``.-... |
9df40 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f | ...................Well-known.co |
9df60 | 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 4e 4f 5f 4c 4c 47 52 20 30 78 46 46 46 46 30 30 | mmunities.value.NO_LLGR.0xFFFF00 |
9df80 | 30 37 00 60 60 6e 6f 2d 70 65 65 72 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | 07.``no-peer``.-................ |
9dfa0 | 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c | ......Well-known.communities.val |
9dfc0 | 75 65 20 4e 4f 50 45 45 52 20 30 78 46 46 46 46 46 46 30 34 00 60 60 6e 6f 60 60 20 64 69 73 61 | ue.NOPEER.0xFFFFFF04.``no``.disa |
9dfe0 | 62 6c 65 20 72 65 6d 6f 74 65 20 68 6f 73 74 20 72 65 2d 61 75 74 68 65 6e 74 69 63 61 74 6f 6e | ble.remote.host.re-authenticaton |
9e000 | 20 64 75 72 69 6e 67 20 61 6e 20 49 4b 45 20 72 65 6b 65 79 3b 00 60 60 6e 6f 6e 65 60 60 20 2d | .during.an.IKE.rekey;.``none``.- |
9e020 | 20 45 78 65 63 75 74 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 6d 69 6e 75 74 65 73 00 60 | .Execution.interval.in.minutes.` |
9e040 | 60 6e 6f 6e 65 60 60 20 2d 20 6c 6f 61 64 73 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f | `none``.-.loads.the.connection.o |
9e060 | 6e 6c 79 2c 20 77 68 69 63 68 20 74 68 65 6e 20 63 61 6e 20 62 65 20 6d 61 6e 75 61 6c 6c 79 20 | nly,.which.then.can.be.manually. |
9e080 | 69 6e 69 74 69 61 74 65 64 20 6f 72 20 75 73 65 64 20 61 73 20 61 20 72 65 73 70 6f 6e 64 65 72 | initiated.or.used.as.a.responder |
9e0a0 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 60 60 6e 6f 6e 65 60 60 20 73 65 74 20 61 63 74 | .configuration..``none``.set.act |
9e0c0 | 69 6f 6e 20 74 6f 20 6e 6f 6e 65 20 28 64 65 66 61 75 6c 74 29 3b 00 60 60 6e 6f 73 65 6c 65 63 | ion.to.none.(default);.``noselec |
9e0e0 | 74 60 60 20 6d 61 72 6b 73 20 74 68 65 20 73 65 72 76 65 72 20 61 73 20 75 6e 75 73 65 64 2c 20 | t``.marks.the.server.as.unused,. |
9e100 | 65 78 63 65 70 74 20 66 6f 72 20 64 69 73 70 6c 61 79 20 70 75 72 70 6f 73 65 73 2e 20 54 68 65 | except.for.display.purposes..The |
9e120 | 20 73 65 72 76 65 72 20 69 73 20 64 69 73 63 61 72 64 65 64 20 62 79 20 74 68 65 20 73 65 6c 65 | .server.is.discarded.by.the.sele |
9e140 | 63 74 69 6f 6e 20 61 6c 67 6f 72 69 74 68 6d 2e 00 60 60 6e 74 73 60 60 20 65 6e 61 62 6c 65 73 | ction.algorithm..``nts``.enables |
9e160 | 20 4e 65 74 77 6f 72 6b 20 54 69 6d 65 20 53 65 63 75 72 69 74 79 20 28 4e 54 53 29 20 66 6f 72 | .Network.Time.Security.(NTS).for |
9e180 | 20 74 68 65 20 73 65 72 76 65 72 20 61 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 3a 72 66 63 | .the.server.as.specified.in.:rfc |
9e1a0 | 3a 60 38 39 31 35 60 00 60 60 6f 70 74 69 6f 6e 73 60 60 00 60 60 6f 73 70 66 60 60 20 2d 20 4f | :`8915`.``options``.``ospf``.-.O |
9e1c0 | 70 65 6e 20 53 68 6f 72 74 65 73 74 20 50 61 74 68 20 46 69 72 73 74 20 28 4f 53 50 46 76 32 29 | pen.Shortest.Path.First.(OSPFv2) |
9e1e0 | 00 60 60 6f 73 70 66 76 33 60 60 20 2d 20 4f 70 65 6e 20 53 68 6f 72 74 65 73 74 20 50 61 74 68 | .``ospfv3``.-.Open.Shortest.Path |
9e200 | 20 46 69 72 73 74 20 28 49 50 76 36 29 20 28 4f 53 50 46 76 33 29 00 60 60 6f 75 74 60 60 3a 20 | .First.(IPv6).(OSPFv3).``out``:. |
9e220 | 52 75 6c 65 73 65 74 20 66 6f 72 20 66 6f 72 77 61 72 64 65 64 20 70 61 63 6b 65 74 73 20 6f 6e | Ruleset.for.forwarded.packets.on |
9e240 | 20 61 6e 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 00 60 60 70 61 73 73 70 68 72 | .an.outbound.interface.``passphr |
9e260 | 61 73 65 60 60 20 2d 20 6c 6f 63 61 6c 20 70 72 69 76 61 74 65 20 6b 65 79 20 70 61 73 73 70 68 | ase``.-.local.private.key.passph |
9e280 | 72 61 73 65 00 60 60 70 61 73 73 70 68 72 61 73 65 60 60 20 2d 20 70 72 69 76 61 74 65 20 6b 65 | rase.``passphrase``.-.private.ke |
9e2a0 | 79 20 70 61 73 73 70 68 72 61 73 65 2c 20 69 66 20 6e 65 65 64 65 64 2e 00 60 60 70 61 73 73 77 | y.passphrase,.if.needed..``passw |
9e2c0 | 6f 72 64 60 60 20 2d 20 70 61 73 73 70 68 72 61 73 65 20 70 72 69 76 61 74 65 20 6b 65 79 2c 20 | ord``.-.passphrase.private.key,. |
9e2e0 | 69 66 20 6e 65 65 64 65 64 2e 00 60 60 70 65 65 72 60 60 20 69 73 20 75 73 65 64 20 66 6f 72 20 | if.needed..``peer``.is.used.for. |
9e300 | 74 68 65 20 56 79 4f 53 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 64 65 6e 74 69 66 79 | the.VyOS.CLI.command.to.identify |
9e320 | 20 74 68 65 20 57 69 72 65 47 75 61 72 64 20 70 65 65 72 20 77 68 65 72 65 20 74 68 69 73 20 73 | .the.WireGuard.peer.where.this.s |
9e340 | 65 63 72 65 64 20 69 73 20 74 6f 20 62 65 20 75 73 65 64 2e 00 60 60 70 65 72 69 6f 64 60 60 3a | ecred.is.to.be.used..``period``: |
9e360 | 20 54 69 6d 65 20 77 69 6e 64 6f 77 20 66 6f 72 20 72 61 74 65 20 63 61 6c 63 75 6c 61 74 69 6f | .Time.window.for.rate.calculatio |
9e380 | 6e 2e 20 50 6f 73 73 69 62 6c 65 20 76 61 6c 75 65 73 3a 20 60 60 73 65 63 6f 6e 64 60 60 20 28 | n..Possible.values:.``second``.( |
9e3a0 | 6f 6e 65 20 73 65 63 6f 6e 64 29 2c 20 60 60 6d 69 6e 75 74 65 60 60 20 28 6f 6e 65 20 6d 69 6e | one.second),.``minute``.(one.min |
9e3c0 | 75 74 65 29 2c 20 60 60 68 6f 75 72 60 60 20 28 6f 6e 65 20 68 6f 75 72 29 2e 20 44 65 66 61 75 | ute),.``hour``.(one.hour)..Defau |
9e3e0 | 6c 74 20 69 73 20 60 60 73 65 63 6f 6e 64 60 60 2e 00 60 60 70 66 73 60 60 20 77 68 65 74 68 65 | lt.is.``second``..``pfs``.whethe |
9e400 | 72 20 50 65 72 66 65 63 74 20 46 6f 72 77 61 72 64 20 53 65 63 72 65 63 79 20 6f 66 20 6b 65 79 | r.Perfect.Forward.Secrecy.of.key |
9e420 | 73 20 69 73 20 64 65 73 69 72 65 64 20 6f 6e 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 27 73 | s.is.desired.on.the.connection's |
9e440 | 20 6b 65 79 69 6e 67 20 63 68 61 6e 6e 65 6c 20 61 6e 64 20 64 65 66 69 6e 65 73 20 61 20 44 69 | .keying.channel.and.defines.a.Di |
9e460 | 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 67 72 6f 75 70 20 66 6f 72 20 50 46 53 3a 00 60 60 70 6f | ffie-Hellman.group.for.PFS:.``po |
9e480 | 6f 6c 60 60 20 6d 6f 62 69 6c 69 7a 65 73 20 70 65 72 73 69 73 74 65 6e 74 20 63 6c 69 65 6e 74 | ol``.mobilizes.persistent.client |
9e4a0 | 20 6d 6f 64 65 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 77 69 74 68 20 61 20 6e 75 6d 62 65 72 20 | .mode.association.with.a.number. |
9e4c0 | 6f 66 20 72 65 6d 6f 74 65 20 73 65 72 76 65 72 73 2e 00 60 60 70 6f 72 74 60 60 20 2d 20 64 65 | of.remote.servers..``port``.-.de |
9e4e0 | 66 69 6e 65 20 70 6f 72 74 2e 20 48 61 76 65 20 65 66 66 65 63 74 20 6f 6e 6c 79 20 77 68 65 6e | fine.port..Have.effect.only.when |
9e500 | 20 75 73 65 64 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 60 60 70 72 65 66 69 78 60 60 3b 00 | .used.together.with.``prefix``;. |
9e520 | 60 60 70 72 65 2d 73 68 61 72 65 64 2d 73 65 63 72 65 74 60 60 20 2d 20 75 73 65 20 70 72 65 64 | ``pre-shared-secret``.-.use.pred |
9e540 | 65 66 69 6e 65 64 20 73 68 61 72 65 64 20 73 65 63 72 65 74 20 70 68 72 61 73 65 3b 00 60 60 70 | efined.shared.secret.phrase;.``p |
9e560 | 72 65 66 65 72 60 60 20 6d 61 72 6b 73 20 74 68 65 20 73 65 72 76 65 72 20 61 73 20 70 72 65 66 | refer``.marks.the.server.as.pref |
9e580 | 65 72 72 65 64 2e 20 41 6c 6c 20 6f 74 68 65 72 20 74 68 69 6e 67 73 20 62 65 69 6e 67 20 65 71 | erred..All.other.things.being.eq |
9e5a0 | 75 61 6c 2c 20 74 68 69 73 20 68 6f 73 74 20 77 69 6c 6c 20 62 65 20 63 68 6f 73 65 6e 20 66 6f | ual,.this.host.will.be.chosen.fo |
9e5c0 | 72 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 61 6d 6f 6e 67 20 61 20 73 65 74 20 6f 66 | r.synchronization.among.a.set.of |
9e5e0 | 20 63 6f 72 72 65 63 74 6c 79 20 6f 70 65 72 61 74 69 6e 67 20 68 6f 73 74 73 2e 00 60 60 70 72 | .correctly.operating.hosts..``pr |
9e600 | 65 66 69 78 60 60 20 2d 20 49 50 20 6e 65 74 77 6f 72 6b 20 61 74 20 6c 6f 63 61 6c 20 73 69 64 | efix``.-.IP.network.at.local.sid |
9e620 | 65 2e 00 60 60 70 72 65 66 69 78 60 60 20 2d 20 49 50 20 6e 65 74 77 6f 72 6b 20 61 74 20 72 65 | e..``prefix``.-.IP.network.at.re |
9e640 | 6d 6f 74 65 20 73 69 64 65 2e 00 60 60 70 72 66 60 60 20 70 73 65 75 64 6f 2d 72 61 6e 64 6f 6d | mote.side..``prf``.pseudo-random |
9e660 | 20 66 75 6e 63 74 69 6f 6e 2e 00 60 60 70 72 69 6f 72 69 74 79 60 60 20 2d 20 41 64 64 20 70 72 | .function..``priority``.-.Add.pr |
9e680 | 69 6f 72 69 74 79 20 66 6f 72 20 70 6f 6c 69 63 79 2d 62 61 73 65 64 20 49 50 53 65 63 20 56 50 | iority.for.policy-based.IPSec.VP |
9e6a0 | 4e 20 74 75 6e 6e 65 6c 73 28 6c 6f 77 65 73 74 20 76 61 6c 75 65 20 6d 6f 72 65 20 70 72 65 66 | N.tunnels(lowest.value.more.pref |
9e6c0 | 65 72 61 62 6c 65 29 00 60 60 70 72 6f 63 65 73 73 6f 72 2e 6d 61 78 5f 63 73 74 61 74 65 3d 31 | erable).``processor.max_cstate=1 |
9e6e0 | 60 60 20 4c 69 6d 69 74 20 70 72 6f 63 65 73 73 6f 72 20 74 6f 20 6d 61 78 69 6d 75 6d 20 43 2d | ``.Limit.processor.to.maximum.C- |
9e700 | 73 74 61 74 65 20 31 00 60 60 70 72 6f 70 6f 73 61 6c 60 60 20 45 53 50 2d 67 72 6f 75 70 20 70 | state.1.``proposal``.ESP-group.p |
9e720 | 72 6f 70 6f 73 61 6c 20 77 69 74 68 20 6e 75 6d 62 65 72 20 3c 31 2d 36 35 35 33 35 3e 3a 00 60 | roposal.with.number.<1-65535>:.` |
9e740 | 60 70 72 6f 70 6f 73 61 6c 60 60 20 74 68 65 20 6c 69 73 74 20 6f 66 20 70 72 6f 70 6f 73 61 6c | `proposal``.the.list.of.proposal |
9e760 | 73 20 61 6e 64 20 74 68 65 69 72 20 70 61 72 61 6d 65 74 65 72 73 3a 00 60 60 70 72 6f 74 6f 63 | s.and.their.parameters:.``protoc |
9e780 | 6f 6c 60 60 20 2d 20 64 65 66 69 6e 65 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 6d | ol``.-.define.the.protocol.for.m |
9e7a0 | 61 74 63 68 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 73 68 6f 75 6c 64 20 62 65 20 65 6e | atch.traffic,.which.should.be.en |
9e7c0 | 63 72 79 70 74 65 64 20 61 6e 64 20 73 65 6e 64 20 74 6f 20 74 68 69 73 20 70 65 65 72 3b 00 60 | crypted.and.send.to.this.peer;.` |
9e7e0 | 60 70 73 6b 60 60 20 2d 20 50 72 65 73 68 61 72 65 64 20 73 65 63 72 65 74 20 6b 65 79 20 6e 61 | `psk``.-.Preshared.secret.key.na |
9e800 | 6d 65 3a 00 60 60 71 75 65 75 65 60 60 3a 20 45 6e 71 75 65 75 65 20 70 61 63 6b 65 74 20 74 6f | me:.``queue``:.Enqueue.packet.to |
9e820 | 20 75 73 65 72 73 70 61 63 65 2e 00 60 60 72 61 74 65 60 60 3a 20 4e 75 6d 62 65 72 20 6f 66 20 | .userspace..``rate``:.Number.of. |
9e840 | 70 61 63 6b 65 74 73 2e 20 44 65 66 61 75 6c 74 20 35 2e 00 60 60 72 65 6a 65 63 74 60 60 3a 20 | packets..Default.5..``reject``:. |
9e860 | 72 65 6a 65 63 74 20 74 68 65 20 70 61 63 6b 65 74 2e 00 60 60 72 65 6d 6f 74 65 2d 61 64 64 72 | reject.the.packet..``remote-addr |
9e880 | 65 73 73 60 60 20 2d 20 72 65 6d 6f 74 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 68 6f 73 | ess``.-.remote.IP.address.or.hos |
9e8a0 | 74 6e 61 6d 65 20 66 6f 72 20 49 50 53 65 63 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 49 50 76 34 | tname.for.IPSec.connection..IPv4 |
9e8c0 | 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 20 69 73 20 75 73 65 64 20 77 68 65 6e 20 61 20 | .or.IPv6.address.is.used.when.a. |
9e8e0 | 70 65 65 72 20 68 61 73 20 61 20 70 75 62 6c 69 63 20 73 74 61 74 69 63 20 49 50 20 61 64 64 72 | peer.has.a.public.static.IP.addr |
9e900 | 65 73 73 2e 20 48 6f 73 74 6e 61 6d 65 20 69 73 20 61 20 44 4e 53 20 6e 61 6d 65 20 77 68 69 63 | ess..Hostname.is.a.DNS.name.whic |
9e920 | 68 20 63 6f 75 6c 64 20 62 65 20 75 73 65 64 20 77 68 65 6e 20 61 20 70 65 65 72 20 68 61 73 20 | h.could.be.used.when.a.peer.has. |
9e940 | 61 20 70 75 62 6c 69 63 20 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 20 44 4e 53 20 6e 61 6d 65 | a.public.IP.address.and.DNS.name |
9e960 | 2c 20 62 75 74 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 63 6f 75 6c 64 20 62 65 20 63 68 61 | ,.but.an.IP.address.could.be.cha |
9e980 | 6e 67 65 64 20 66 72 6f 6d 20 74 69 6d 65 20 74 6f 20 74 69 6d 65 2e 00 60 60 72 65 6d 6f 74 65 | nged.from.time.to.time..``remote |
9e9a0 | 2d 69 64 60 60 20 2d 20 64 65 66 69 6e 65 20 61 6e 20 49 44 20 66 6f 72 20 72 65 6d 6f 74 65 20 | -id``.-.define.an.ID.for.remote. |
9e9c0 | 70 65 65 72 2c 20 69 6e 73 74 65 61 64 20 6f 66 20 75 73 69 6e 67 20 70 65 65 72 20 6e 61 6d 65 | peer,.instead.of.using.peer.name |
9e9e0 | 20 6f 72 20 61 64 64 72 65 73 73 2e 20 55 73 65 66 75 6c 20 69 6e 20 63 61 73 65 20 69 66 20 74 | .or.address..Useful.in.case.if.t |
9ea00 | 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 69 73 20 62 65 68 69 6e 64 20 4e 41 54 20 6f 72 20 | he.remote.peer.is.behind.NAT.or. |
9ea20 | 69 66 20 60 60 6d 6f 64 65 20 78 35 30 39 60 60 20 69 73 20 75 73 65 64 3b 00 60 60 72 65 6d 6f | if.``mode.x509``.is.used;.``remo |
9ea40 | 74 65 2d 6b 65 79 60 60 20 2d 20 6e 61 6d 65 20 6f 66 20 50 4b 49 20 6b 65 79 2d 70 61 69 72 20 | te-key``.-.name.of.PKI.key-pair. |
9ea60 | 77 69 74 68 20 72 65 6d 6f 74 65 20 70 75 62 6c 69 63 20 6b 65 79 00 60 60 72 65 6d 6f 74 65 60 | with.remote.public.key.``remote` |
9ea80 | 60 20 2d 20 64 65 66 69 6e 65 20 74 68 65 20 72 65 6d 6f 74 65 20 64 65 73 74 69 6e 61 74 69 6f | `.-.define.the.remote.destinatio |
9eaa0 | 6e 20 66 6f 72 20 6d 61 74 63 68 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 73 68 6f 75 6c | n.for.match.traffic,.which.shoul |
9eac0 | 64 20 62 65 20 65 6e 63 72 79 70 74 65 64 20 61 6e 64 20 73 65 6e 64 20 74 6f 20 74 68 69 73 20 | d.be.encrypted.and.send.to.this. |
9eae0 | 70 65 65 72 3a 00 60 60 72 65 70 6c 61 79 2d 77 69 6e 64 6f 77 60 60 20 2d 20 49 50 73 65 63 20 | peer:.``replay-window``.-.IPsec. |
9eb00 | 72 65 70 6c 61 79 20 77 69 6e 64 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 66 6f 72 20 74 | replay.window.to.configure.for.t |
9eb20 | 68 69 73 20 43 48 49 4c 44 5f 53 41 20 28 64 65 66 61 75 6c 74 3a 20 33 32 29 2c 20 61 20 76 61 | his.CHILD_SA.(default:.32),.a.va |
9eb40 | 6c 75 65 20 6f 66 20 30 20 64 69 73 61 62 6c 65 73 20 49 50 73 65 63 20 72 65 70 6c 61 79 20 70 | lue.of.0.disables.IPsec.replay.p |
9eb60 | 72 6f 74 65 63 74 69 6f 6e 00 60 60 72 65 71 2d 73 73 6c 2d 73 6e 69 60 60 20 53 53 4c 20 53 65 | rotection.``req-ssl-sni``.SSL.Se |
9eb80 | 72 76 65 72 20 4e 61 6d 65 20 49 6e 64 69 63 61 74 69 6f 6e 20 28 53 4e 49 29 20 72 65 71 75 65 | rver.Name.Indication.(SNI).reque |
9eba0 | 73 74 20 6d 61 74 63 68 00 60 60 72 65 73 70 2d 74 69 6d 65 60 60 3a 20 74 68 65 20 6d 61 78 69 | st.match.``resp-time``:.the.maxi |
9ebc0 | 6d 75 6d 20 72 65 73 70 6f 6e 73 65 20 74 69 6d 65 20 66 6f 72 20 70 69 6e 67 20 69 6e 20 73 65 | mum.response.time.for.ping.in.se |
9ebe0 | 63 6f 6e 64 73 2e 20 52 61 6e 67 65 20 31 2e 2e 2e 33 30 2c 20 64 65 66 61 75 6c 74 20 35 00 60 | conds..Range.1...30,.default.5.` |
9ec00 | 60 72 65 73 70 6f 6e 64 60 60 20 2d 20 64 6f 65 73 20 6e 6f 74 20 74 72 79 20 74 6f 20 69 6e 69 | `respond``.-.does.not.try.to.ini |
9ec20 | 74 69 61 74 65 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 61 20 72 65 6d 6f 74 65 20 70 | tiate.a.connection.to.a.remote.p |
9ec40 | 65 65 72 2e 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 2c 20 74 68 65 20 49 50 53 65 63 20 73 65 73 | eer..In.this.mode,.the.IPSec.ses |
9ec60 | 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 6f 6e 6c 79 20 61 66 | sion.will.be.established.only.af |
9ec80 | 74 65 72 20 69 6e 69 74 69 61 74 69 6f 6e 20 66 72 6f 6d 20 61 20 72 65 6d 6f 74 65 20 70 65 65 | ter.initiation.from.a.remote.pee |
9eca0 | 72 2e 20 43 6f 75 6c 64 20 62 65 20 75 73 65 66 75 6c 20 77 68 65 6e 20 74 68 65 72 65 20 69 73 | r..Could.be.useful.when.there.is |
9ecc0 | 20 6e 6f 20 64 69 72 65 63 74 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 74 6f 20 74 68 65 20 70 | .no.direct.connectivity.to.the.p |
9ece0 | 65 65 72 20 64 75 65 20 74 6f 20 66 69 72 65 77 61 6c 6c 20 6f 72 20 4e 41 54 20 69 6e 20 74 68 | eer.due.to.firewall.or.NAT.in.th |
9ed00 | 65 20 6d 69 64 64 6c 65 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 61 6e 64 20 72 65 6d 6f 74 65 | e.middle.of.the.local.and.remote |
9ed20 | 20 73 69 64 65 2e 00 60 60 72 65 73 74 61 72 74 60 60 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 74 | .side..``restart``.immediately.t |
9ed40 | 72 69 65 73 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 43 48 49 4c 44 5f 53 | ries.to.re-negotiate.the.CHILD_S |
9ed60 | 41 20 75 6e 64 65 72 20 61 20 66 72 65 73 68 20 49 4b 45 5f 53 41 3b 00 60 60 72 65 73 74 61 72 | A.under.a.fresh.IKE_SA;.``restar |
9ed80 | 74 60 60 20 73 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 72 65 73 74 61 72 74 3b 00 60 60 72 65 74 | t``.set.action.to.restart;.``ret |
9eda0 | 75 72 6e 60 60 3a 20 52 65 74 75 72 6e 20 66 72 6f 6d 20 74 68 65 20 63 75 72 72 65 6e 74 20 63 | urn``:.Return.from.the.current.c |
9edc0 | 68 61 69 6e 20 61 6e 64 20 63 6f 6e 74 69 6e 75 65 20 61 74 20 74 68 65 20 6e 65 78 74 20 72 75 | hain.and.continue.at.the.next.ru |
9ede0 | 6c 65 20 6f 66 20 74 68 65 20 6c 61 73 74 20 63 68 61 69 6e 2e 00 60 60 72 69 70 60 60 20 2d 20 | le.of.the.last.chain..``rip``.-. |
9ee00 | 52 6f 75 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 28 52 49 | Routing.Information.Protocol.(RI |
9ee20 | 50 29 00 60 60 72 69 70 6e 67 60 60 20 2d 20 52 6f 75 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 | P).``ripng``.-.Routing.Informati |
9ee40 | 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 6e 65 78 74 2d 67 65 6e 65 72 61 74 69 6f 6e 20 28 49 50 76 | on.Protocol.next-generation.(IPv |
9ee60 | 36 29 20 28 52 49 50 6e 67 29 00 60 60 72 6f 75 6e 64 2d 72 6f 62 69 6e 60 60 20 2d 20 52 6f 75 | 6).(RIPng).``round-robin``.-.Rou |
9ee80 | 6e 64 2d 72 6f 62 69 6e 20 70 6f 6c 69 63 79 3a 20 54 72 61 6e 73 6d 69 74 20 70 61 63 6b 65 74 | nd-robin.policy:.Transmit.packet |
9eea0 | 73 20 69 6e 20 73 65 71 75 65 6e 74 69 61 6c 20 6f 72 64 65 72 20 66 72 6f 6d 20 74 68 65 20 66 | s.in.sequential.order.from.the.f |
9eec0 | 69 72 73 74 20 61 76 61 69 6c 61 62 6c 65 20 73 6c 61 76 65 20 74 68 72 6f 75 67 68 20 74 68 65 | irst.available.slave.through.the |
9eee0 | 20 6c 61 73 74 2e 00 60 60 72 6f 75 6e 64 2d 72 6f 62 69 6e 60 60 20 44 69 73 74 72 69 62 75 74 | .last..``round-robin``.Distribut |
9ef00 | 65 73 20 72 65 71 75 65 73 74 73 20 69 6e 20 61 20 63 69 72 63 75 6c 61 72 20 6d 61 6e 6e 65 72 | es.requests.in.a.circular.manner |
9ef20 | 2c 20 73 65 71 75 65 6e 74 69 61 6c 6c 79 20 73 65 6e 64 69 6e 67 20 65 61 63 68 20 72 65 71 75 | ,.sequentially.sending.each.requ |
9ef40 | 65 73 74 20 74 6f 20 74 68 65 20 6e 65 78 74 20 73 65 72 76 65 72 20 69 6e 20 6c 69 6e 65 00 60 | est.to.the.next.server.in.line.` |
9ef60 | 60 72 6f 75 74 65 2d 66 69 6c 74 65 72 2d 74 72 61 6e 73 6c 61 74 65 64 2d 76 34 60 60 20 2d 20 | `route-filter-translated-v4``.-. |
9ef80 | 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 52 | ..Well-known.communities.value.R |
9efa0 | 4f 55 54 45 5f 46 49 4c 54 45 52 5f 54 52 41 4e 53 4c 41 54 45 44 5f 76 34 20 30 78 46 46 46 46 | OUTE_FILTER_TRANSLATED_v4.0xFFFF |
9efc0 | 30 30 30 32 00 60 60 72 6f 75 74 65 2d 66 69 6c 74 65 72 2d 74 72 61 6e 73 6c 61 74 65 64 2d 76 | 0002.``route-filter-translated-v |
9efe0 | 36 60 60 20 2d 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 | 6``.-...Well-known.communities.v |
9f000 | 61 6c 75 65 20 52 4f 55 54 45 5f 46 49 4c 54 45 52 5f 54 52 41 4e 53 4c 41 54 45 44 5f 76 36 20 | alue.ROUTE_FILTER_TRANSLATED_v6. |
9f020 | 30 78 46 46 46 46 30 30 30 34 00 60 60 72 6f 75 74 65 2d 66 69 6c 74 65 72 2d 76 34 60 60 20 2d | 0xFFFF0004.``route-filter-v4``.- |
9f040 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 | ..............Well-known.communi |
9f060 | 74 69 65 73 20 76 61 6c 75 65 20 52 4f 55 54 45 5f 46 49 4c 54 45 52 5f 76 34 20 30 78 46 46 46 | ties.value.ROUTE_FILTER_v4.0xFFF |
9f080 | 46 30 30 30 33 00 60 60 72 6f 75 74 65 2d 66 69 6c 74 65 72 2d 76 36 60 60 20 2d 20 20 20 20 20 | F0003.``route-filter-v6``.-..... |
9f0a0 | 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 | .........Well-known.communities. |
9f0c0 | 76 61 6c 75 65 20 52 4f 55 54 45 5f 46 49 4c 54 45 52 5f 76 36 20 30 78 46 46 46 46 30 30 30 35 | value.ROUTE_FILTER_v6.0xFFFF0005 |
9f0e0 | 00 60 60 72 73 61 2d 6b 65 79 2d 6e 61 6d 65 60 60 20 2d 20 73 68 61 72 65 64 20 52 53 41 20 6b | .``rsa-key-name``.-.shared.RSA.k |
9f100 | 65 79 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 54 68 65 20 6b 65 79 20 6d | ey.for.authentication..The.key.m |
9f120 | 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 65 20 60 60 73 65 74 20 76 70 6e 20 | ust.be.defined.in.the.``set.vpn. |
9f140 | 72 73 61 2d 6b 65 79 73 60 60 20 73 65 63 74 69 6f 6e 3b 00 60 60 72 73 61 60 60 20 2d 20 6f 70 | rsa-keys``.section;.``rsa``.-.op |
9f160 | 74 69 6f 6e 73 20 66 6f 72 20 52 53 41 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 6f 64 | tions.for.RSA.authentication.mod |
9f180 | 65 3a 00 60 60 72 73 61 60 60 20 2d 20 75 73 65 20 73 69 6d 70 6c 65 20 73 68 61 72 65 64 20 52 | e:.``rsa``.-.use.simple.shared.R |
9f1a0 | 53 41 20 6b 65 79 2e 00 60 60 72 73 61 60 60 20 2d 20 75 73 65 20 73 69 6d 70 6c 65 20 73 68 61 | SA.key..``rsa``.-.use.simple.sha |
9f1c0 | 72 65 64 20 52 53 41 20 6b 65 79 2e 20 54 68 65 20 6b 65 79 20 6d 75 73 74 20 62 65 20 64 65 66 | red.RSA.key..The.key.must.be.def |
9f1e0 | 69 6e 65 64 20 69 6e 20 74 68 65 20 60 60 73 65 74 20 76 70 6e 20 72 73 61 2d 6b 65 79 73 60 60 | ined.in.the.``set.vpn.rsa-keys`` |
9f200 | 20 73 65 63 74 69 6f 6e 3b 00 60 60 73 65 63 72 65 74 60 60 20 2d 20 70 72 65 64 65 66 69 6e 65 | .section;.``secret``.-.predefine |
9f220 | 64 20 73 68 61 72 65 64 20 73 65 63 72 65 74 2e 20 55 73 65 64 20 69 66 20 63 6f 6e 66 69 67 75 | d.shared.secret..Used.if.configu |
9f240 | 72 65 64 20 6d 6f 64 65 20 60 60 70 72 65 2d 73 68 61 72 65 64 2d 73 65 63 72 65 74 60 60 3b 00 | red.mode.``pre-shared-secret``;. |
9f260 | 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 62 72 69 64 67 65 20 66 6f 72 77 61 72 64 20 66 69 | ``set.firewall.bridge.forward.fi |
9f280 | 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 | lter....``..``set.firewall.ipv4. |
9f2a0 | 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 74 20 66 69 72 65 | forward.filter....``..``set.fire |
9f2c0 | 77 61 6c 6c 20 69 70 76 34 20 69 6e 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 | wall.ipv4.input.filter....``..`` |
9f2e0 | 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 6f 75 74 70 75 74 20 66 69 6c 74 65 72 20 | set.firewall.ipv4.output.filter. |
9f300 | 2e 2e 2e 60 60 2e 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 66 6f 72 77 61 | ...``..``set.firewall.ipv6.forwa |
9f320 | 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 | rd.filter....``..``set.firewall. |
9f340 | 69 70 76 36 20 69 6e 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 74 20 66 | ipv6.input.filter....``..``set.f |
9f360 | 69 72 65 77 61 6c 6c 20 69 70 76 36 20 6f 75 74 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 | irewall.ipv6.output.filter....`` |
9f380 | 2e 00 60 60 73 69 6e 67 6c 65 2d 75 73 65 72 2d 62 65 61 6d 66 6f 72 6d 65 65 60 60 20 2d 20 53 | ..``single-user-beamformee``.-.S |
9f3a0 | 75 70 70 6f 72 74 20 66 6f 72 20 6f 70 65 72 61 74 69 6f 6e 20 61 73 20 73 69 6e 67 6c 65 20 75 | upport.for.operation.as.single.u |
9f3c0 | 73 65 72 20 62 65 61 6d 66 6f 72 6d 65 65 00 60 60 73 69 6e 67 6c 65 2d 75 73 65 72 2d 62 65 61 | ser.beamformee.``single-user-bea |
9f3e0 | 6d 66 6f 72 6d 65 72 60 60 20 2d 20 53 75 70 70 6f 72 74 20 66 6f 72 20 6f 70 65 72 61 74 69 6f | mformer``.-.Support.for.operatio |
9f400 | 6e 20 61 73 20 73 69 6e 67 6c 65 20 75 73 65 72 20 62 65 61 6d 66 6f 72 6d 65 72 00 60 60 73 6f | n.as.single.user.beamformer.``so |
9f420 | 6e 6d 70 60 60 20 2d 20 4c 69 73 74 65 6e 20 66 6f 72 20 53 4f 4e 4d 50 20 66 6f 72 20 4e 6f 72 | nmp``.-.Listen.for.SONMP.for.Nor |
9f440 | 74 65 6c 20 72 6f 75 74 65 72 73 2f 73 77 69 74 63 68 65 73 00 60 60 73 6f 75 72 63 65 2d 61 64 | tel.routers/switches.``source-ad |
9f460 | 64 72 65 73 73 60 60 20 44 69 73 74 72 69 62 75 74 65 73 20 72 65 71 75 65 73 74 73 20 62 61 73 | dress``.Distributes.requests.bas |
9f480 | 65 64 20 6f 6e 20 74 68 65 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 | ed.on.the.source.IP.address.of.t |
9f4a0 | 68 65 20 63 6c 69 65 6e 74 00 60 60 73 73 68 2d 64 73 73 60 60 00 60 60 73 73 68 2d 65 64 32 35 | he.client.``ssh-dss``.``ssh-ed25 |
9f4c0 | 35 31 39 60 60 00 60 60 73 73 68 2d 72 73 61 20 41 41 41 41 42 33 4e 7a 61 43 31 79 63 32 45 41 | 519``.``ssh-rsa.AAAAB3NzaC1yc2EA |
9f4e0 | 41 41 41 42 41 41 2e 2e 2e 56 42 44 35 6c 4b 77 45 57 42 20 75 73 65 72 6e 61 6d 65 40 68 6f 73 | AAABAA...VBD5lKwEWB.username@hos |
9f500 | 74 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 60 60 00 60 60 73 73 68 2d 72 73 61 60 60 00 60 60 73 73 | t.example.com``.``ssh-rsa``.``ss |
9f520 | 6c 2d 66 63 2d 73 6e 69 2d 65 6e 64 60 60 20 53 53 4c 20 66 72 6f 6e 74 65 6e 64 20 6d 61 74 63 | l-fc-sni-end``.SSL.frontend.matc |
9f540 | 68 20 65 6e 64 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 53 65 72 76 65 72 20 4e 61 6d 65 00 | h.end.of.connection.Server.Name. |
9f560 | 60 60 73 73 6c 2d 66 63 2d 73 6e 69 60 60 20 53 53 4c 20 66 72 6f 6e 74 65 6e 64 20 63 6f 6e 6e | ``ssl-fc-sni``.SSL.frontend.conn |
9f580 | 65 63 74 69 6f 6e 20 53 65 72 76 65 72 20 4e 61 6d 65 20 49 6e 64 69 63 61 74 69 6f 6e 20 6d 61 | ection.Server.Name.Indication.ma |
9f5a0 | 74 63 68 00 60 60 73 74 61 72 74 60 60 20 74 72 69 65 73 20 74 6f 20 69 6d 6d 65 64 69 61 74 65 | tch.``start``.tries.to.immediate |
9f5c0 | 6c 79 20 72 65 2d 63 72 65 61 74 65 20 74 68 65 20 43 48 49 4c 44 5f 53 41 3b 00 60 60 73 74 61 | ly.re-create.the.CHILD_SA;.``sta |
9f5e0 | 74 69 63 60 60 20 2d 20 53 74 61 74 69 63 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 72 6f | tic``.-.Statically.configured.ro |
9f600 | 75 74 65 73 00 60 60 73 74 61 74 69 6f 6e 60 60 20 2d 20 43 6f 6e 6e 65 63 74 73 20 74 6f 20 61 | utes.``station``.-.Connects.to.a |
9f620 | 6e 6f 74 68 65 72 20 61 63 63 65 73 73 20 70 6f 69 6e 74 00 60 60 73 79 6e 70 72 6f 78 79 60 60 | nother.access.point.``synproxy`` |
9f640 | 3a 20 73 79 6e 70 72 6f 78 79 20 74 68 65 20 70 61 63 6b 65 74 2e 00 60 60 73 79 73 63 74 6c 60 | :.synproxy.the.packet..``sysctl` |
9f660 | 60 20 69 73 20 75 73 65 64 20 74 6f 20 6d 6f 64 69 66 79 20 6b 65 72 6e 65 6c 20 70 61 72 61 6d | `.is.used.to.modify.kernel.param |
9f680 | 65 74 65 72 73 20 61 74 20 72 75 6e 74 69 6d 65 2e 20 20 54 68 65 20 70 61 72 61 6d 65 74 65 72 | eters.at.runtime...The.parameter |
9f6a0 | 73 20 61 76 61 69 6c 61 62 6c 65 20 61 72 65 20 74 68 6f 73 65 20 6c 69 73 74 65 64 20 75 6e 64 | s.available.are.those.listed.und |
9f6c0 | 65 72 20 2f 70 72 6f 63 2f 73 79 73 2f 2e 00 60 60 74 61 62 6c 65 20 31 30 60 60 20 52 6f 75 74 | er./proc/sys/..``table.10``.Rout |
9f6e0 | 69 6e 67 20 74 61 62 6c 65 20 75 73 65 64 20 66 6f 72 20 49 53 50 31 00 60 60 74 61 62 6c 65 20 | ing.table.used.for.ISP1.``table. |
9f700 | 31 30 60 60 20 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 75 73 65 64 20 66 6f 72 20 56 4c 41 4e | 10``.Routing.table.used.for.VLAN |
9f720 | 20 31 30 20 28 31 39 32 2e 31 36 38 2e 31 38 38 2e 30 2f 32 34 29 00 60 60 74 61 62 6c 65 20 31 | .10.(192.168.188.0/24).``table.1 |
9f740 | 31 60 60 20 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 75 73 65 64 20 66 6f 72 20 49 53 50 32 00 | 1``.Routing.table.used.for.ISP2. |
9f760 | 60 60 74 61 62 6c 65 20 31 31 60 60 20 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 75 73 65 64 20 | ``table.11``.Routing.table.used. |
9f780 | 66 6f 72 20 56 4c 41 4e 20 31 31 20 28 31 39 32 2e 31 36 38 2e 31 38 39 2e 30 2f 32 34 29 00 60 | for.VLAN.11.(192.168.189.0/24).` |
9f7a0 | 60 74 61 62 6c 65 60 60 20 2d 20 4e 6f 6e 2d 6d 61 69 6e 20 4b 65 72 6e 65 6c 20 52 6f 75 74 69 | `table``.-.Non-main.Kernel.Routi |
9f7c0 | 6e 67 20 54 61 62 6c 65 00 60 60 74 61 72 67 65 74 60 60 3a 20 74 68 65 20 74 61 72 67 65 74 20 | ng.Table.``target``:.the.target. |
9f7e0 | 74 6f 20 62 65 20 73 65 6e 74 20 49 43 4d 50 20 70 61 63 6b 65 74 73 20 74 6f 2c 20 61 64 64 72 | to.be.sent.ICMP.packets.to,.addr |
9f800 | 65 73 73 20 63 61 6e 20 62 65 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 72 20 68 6f | ess.can.be.an.IPv4.address.or.ho |
9f820 | 73 74 6e 61 6d 65 00 60 60 74 65 73 74 2d 73 63 72 69 70 74 60 60 3a 20 41 20 75 73 65 72 20 64 | stname.``test-script``:.A.user.d |
9f840 | 65 66 69 6e 65 64 20 73 63 72 69 70 74 20 6d 75 73 74 20 72 65 74 75 72 6e 20 30 20 74 6f 20 62 | efined.script.must.return.0.to.b |
9f860 | 65 20 63 6f 6e 73 69 64 65 72 65 64 20 73 75 63 63 65 73 73 66 75 6c 20 61 6e 64 20 6e 6f 6e 2d | e.considered.successful.and.non- |
9f880 | 7a 65 72 6f 20 74 6f 20 66 61 69 6c 2e 20 53 63 72 69 70 74 73 20 61 72 65 20 6c 6f 63 61 74 65 | zero.to.fail..Scripts.are.locate |
9f8a0 | 64 20 69 6e 20 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2c 20 66 6f 72 20 64 69 66 66 65 72 | d.in./config/scripts,.for.differ |
9f8c0 | 65 6e 74 20 6c 6f 63 61 74 69 6f 6e 73 20 74 68 65 20 66 75 6c 6c 20 70 61 74 68 20 6e 65 65 64 | ent.locations.the.full.path.need |
9f8e0 | 73 20 74 6f 20 62 65 20 70 72 6f 76 69 64 65 64 00 60 60 74 68 72 65 73 68 6f 6c 64 60 60 3a 20 | s.to.be.provided.``threshold``:. |
9f900 | 60 60 62 65 6c 6f 77 60 60 20 6f 72 20 60 60 61 62 6f 76 65 60 60 20 74 68 65 20 73 70 65 63 69 | ``below``.or.``above``.the.speci |
9f920 | 66 69 65 64 20 72 61 74 65 20 6c 69 6d 69 74 2e 00 60 60 74 68 72 6f 75 67 68 70 75 74 60 60 3a | fied.rate.limit..``throughput``: |
9f940 | 20 41 20 73 65 72 76 65 72 20 70 72 6f 66 69 6c 65 20 66 6f 63 75 73 65 64 20 6f 6e 20 69 6d 70 | .A.server.profile.focused.on.imp |
9f960 | 72 6f 76 69 6e 67 20 6e 65 74 77 6f 72 6b 20 74 68 72 6f 75 67 68 70 75 74 2e 20 54 68 69 73 20 | roving.network.throughput..This. |
9f980 | 70 72 6f 66 69 6c 65 20 66 61 76 6f 72 73 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 6f 76 65 72 20 | profile.favors.performance.over. |
9f9a0 | 70 6f 77 65 72 20 73 61 76 69 6e 67 73 20 62 79 20 73 65 74 74 69 6e 67 20 60 60 69 6e 74 65 6c | power.savings.by.setting.``intel |
9f9c0 | 5f 70 73 74 61 74 65 60 60 20 61 6e 64 20 60 60 6d 61 78 5f 70 65 72 66 5f 70 63 74 3d 31 30 30 | _pstate``.and.``max_perf_pct=100 |
9f9e0 | 60 60 20 61 6e 64 20 69 6e 63 72 65 61 73 69 6e 67 20 6b 65 72 6e 65 6c 20 6e 65 74 77 6f 72 6b | ``.and.increasing.kernel.network |
9fa00 | 20 62 75 66 66 65 72 20 73 69 7a 65 73 2e 00 60 60 74 69 6d 65 6f 75 74 60 60 20 6b 65 65 70 2d | .buffer.sizes..``timeout``.keep- |
9fa20 | 61 6c 69 76 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 6e 64 73 20 3c 32 2d 38 36 34 30 | alive.timeout.in.seconds.<2-8640 |
9fa40 | 30 3e 20 28 64 65 66 61 75 6c 74 20 31 32 30 29 20 49 4b 45 76 31 20 6f 6e 6c 79 00 60 60 74 72 | 0>.(default.120).IKEv1.only.``tr |
9fa60 | 61 6e 73 6d 69 74 2d 6c 6f 61 64 2d 62 61 6c 61 6e 63 65 60 60 20 2d 20 41 64 61 70 74 69 76 65 | ansmit-load-balance``.-.Adaptive |
9fa80 | 20 74 72 61 6e 73 6d 69 74 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 3a 20 63 68 61 6e 6e 65 | .transmit.load.balancing:.channe |
9faa0 | 6c 20 62 6f 6e 64 69 6e 67 20 74 68 61 74 20 64 6f 65 73 20 6e 6f 74 20 72 65 71 75 69 72 65 20 | l.bonding.that.does.not.require. |
9fac0 | 61 6e 79 20 73 70 65 63 69 61 6c 20 73 77 69 74 63 68 20 73 75 70 70 6f 72 74 2e 00 60 60 74 72 | any.special.switch.support..``tr |
9fae0 | 61 6e 73 70 6f 72 74 60 60 20 74 72 61 6e 73 70 6f 72 74 20 6d 6f 64 65 3b 00 60 60 74 72 61 70 | ansport``.transport.mode;.``trap |
9fb00 | 60 60 20 20 69 6e 73 74 61 6c 6c 73 20 61 20 74 72 61 70 20 70 6f 6c 69 63 79 2c 20 77 68 69 63 | ``..installs.a.trap.policy,.whic |
9fb20 | 68 20 77 69 6c 6c 20 63 61 74 63 68 20 6d 61 74 63 68 69 6e 67 20 74 72 61 66 66 69 63 20 61 6e | h.will.catch.matching.traffic.an |
9fb40 | 64 20 74 72 69 65 73 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 74 75 6e 6e | d.tries.to.re-negotiate.the.tunn |
9fb60 | 65 6c 20 6f 6e 2d 64 65 6d 61 6e 64 3b 00 60 60 74 72 61 70 60 60 20 69 6e 73 74 61 6c 6c 73 20 | el.on-demand;.``trap``.installs. |
9fb80 | 61 20 74 72 61 70 20 70 6f 6c 69 63 79 20 66 6f 72 20 74 68 65 20 43 48 49 4c 44 5f 53 41 3b 00 | a.trap.policy.for.the.CHILD_SA;. |
9fba0 | 60 60 74 74 6c 2d 6c 69 6d 69 74 60 60 3a 20 46 6f 72 20 74 68 65 20 55 44 50 20 54 54 4c 20 6c | ``ttl-limit``:.For.the.UDP.TTL.l |
9fbc0 | 69 6d 69 74 20 74 65 73 74 20 74 68 65 20 68 6f 70 20 63 6f 75 6e 74 20 6c 69 6d 69 74 20 6d 75 | imit.test.the.hop.count.limit.mu |
9fbe0 | 73 74 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 20 54 68 65 20 6c 69 6d 69 74 20 6d 75 73 74 20 | st.be.specified..The.limit.must. |
9fc00 | 62 65 20 73 68 6f 72 74 65 72 20 74 68 61 6e 20 74 68 65 20 70 61 74 68 20 6c 65 6e 67 74 68 2c | be.shorter.than.the.path.length, |
9fc20 | 20 61 6e 20 49 43 4d 50 20 74 69 6d 65 20 65 78 70 69 72 65 64 20 6d 65 73 73 61 67 65 20 69 73 | .an.ICMP.time.expired.message.is |
9fc40 | 20 6e 65 65 64 65 64 20 74 6f 20 62 65 20 72 65 74 75 72 6e 65 64 20 66 6f 72 20 61 20 73 75 63 | .needed.to.be.returned.for.a.suc |
9fc60 | 63 65 73 73 66 75 6c 20 74 65 73 74 2e 20 64 65 66 61 75 6c 74 20 31 00 60 60 74 74 79 53 4e 60 | cessful.test..default.1.``ttySN` |
9fc80 | 60 20 2d 20 53 65 72 69 61 6c 20 64 65 76 69 63 65 20 6e 61 6d 65 00 60 60 74 74 79 55 53 42 58 | `.-.Serial.device.name.``ttyUSBX |
9fca0 | 60 60 20 2d 20 55 53 42 20 53 65 72 69 61 6c 20 64 65 76 69 63 65 20 6e 61 6d 65 00 60 60 74 75 | ``.-.USB.Serial.device.name.``tu |
9fcc0 | 6e 6e 65 6c 60 60 20 2d 20 64 65 66 69 6e 65 20 63 72 69 74 65 72 69 61 20 66 6f 72 20 74 72 61 | nnel``.-.define.criteria.for.tra |
9fce0 | 66 66 69 63 20 74 6f 20 62 65 20 6d 61 74 63 68 65 64 20 66 6f 72 20 65 6e 63 72 79 70 74 69 6e | ffic.to.be.matched.for.encryptin |
9fd00 | 67 20 61 6e 64 20 73 65 6e 64 20 69 74 20 74 6f 20 61 20 70 65 65 72 3a 00 60 60 74 75 6e 6e 65 | g.and.send.it.to.a.peer:.``tunne |
9fd20 | 6c 60 60 20 74 75 6e 6e 65 6c 20 6d 6f 64 65 20 28 64 65 66 61 75 6c 74 29 3b 00 60 60 74 79 70 | l``.tunnel.mode.(default);.``typ |
9fd40 | 65 60 60 3a 20 53 70 65 63 69 66 79 20 74 68 65 20 74 79 70 65 20 6f 66 20 74 65 73 74 2e 20 74 | e``:.Specify.the.type.of.test..t |
9fd60 | 79 70 65 20 63 61 6e 20 62 65 20 70 69 6e 67 2c 20 74 74 6c 20 6f 72 20 61 20 75 73 65 72 20 64 | ype.can.be.ping,.ttl.or.a.user.d |
9fd80 | 65 66 69 6e 65 64 20 73 63 72 69 70 74 00 60 60 75 73 65 2d 78 35 30 39 2d 69 64 60 60 20 2d 20 | efined.script.``use-x509-id``.-. |
9fda0 | 75 73 65 20 6c 6f 63 61 6c 20 49 44 20 66 72 6f 6d 20 78 35 30 39 20 63 65 72 74 69 66 69 63 61 | use.local.ID.from.x509.certifica |
9fdc0 | 74 65 2e 20 43 61 6e 6e 6f 74 20 62 65 20 75 73 65 64 20 77 68 65 6e 20 60 60 69 64 60 60 20 69 | te..Cannot.be.used.when.``id``.i |
9fde0 | 73 20 64 65 66 69 6e 65 64 3b 00 60 60 76 69 72 74 75 61 6c 2d 61 64 64 72 65 73 73 60 60 20 2d | s.defined;.``virtual-address``.- |
9fe00 | 20 44 65 66 69 6e 65 73 20 61 20 76 69 72 74 75 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 77 68 | .Defines.a.virtual.IP.address.wh |
9fe20 | 69 63 68 20 69 73 20 72 65 71 75 65 73 74 65 64 20 62 79 20 74 68 65 20 69 6e 69 74 69 61 74 6f | ich.is.requested.by.the.initiato |
9fe40 | 72 20 61 6e 64 20 6f 6e 65 20 6f 72 20 73 65 76 65 72 61 6c 20 49 50 76 34 20 61 6e 64 2f 6f 72 | r.and.one.or.several.IPv4.and/or |
9fe60 | 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 61 73 73 69 67 6e 65 64 20 66 72 6f | .IPv6.addresses.are.assigned.fro |
9fe80 | 6d 20 6d 75 6c 74 69 70 6c 65 20 70 6f 6f 6c 73 20 62 79 20 74 68 65 20 72 65 73 70 6f 6e 64 65 | m.multiple.pools.by.the.responde |
9fea0 | 72 2e 00 60 60 76 69 72 74 75 61 6c 2d 69 70 60 60 20 41 6c 6c 6f 77 20 69 6e 73 74 61 6c 6c 20 | r..``virtual-ip``.Allow.install. |
9fec0 | 76 69 72 74 75 61 6c 2d 69 70 20 61 64 64 72 65 73 73 65 73 2e 20 43 6f 6d 6d 61 20 73 65 70 61 | virtual-ip.addresses..Comma.sepa |
9fee0 | 72 61 74 65 64 20 6c 69 73 74 20 6f 66 20 76 69 72 74 75 61 6c 20 49 50 73 20 74 6f 20 72 65 71 | rated.list.of.virtual.IPs.to.req |
9ff00 | 75 65 73 74 20 69 6e 20 49 4b 45 76 32 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 79 6c | uest.in.IKEv2.configuration.payl |
9ff20 | 6f 61 64 73 20 6f 72 20 49 4b 45 76 31 20 4d 6f 64 65 20 43 6f 6e 66 69 67 2e 20 54 68 65 20 77 | oads.or.IKEv1.Mode.Config..The.w |
9ff40 | 69 6c 64 63 61 72 64 20 61 64 64 72 65 73 73 65 73 20 30 2e 30 2e 30 2e 30 20 61 6e 64 20 3a 3a | ildcard.addresses.0.0.0.0.and.:: |
9ff60 | 20 72 65 71 75 65 73 74 20 61 6e 20 61 72 62 69 74 72 61 72 79 20 61 64 64 72 65 73 73 2c 20 73 | .request.an.arbitrary.address,.s |
9ff80 | 70 65 63 69 66 69 63 20 61 64 64 72 65 73 73 65 73 20 6d 61 79 20 62 65 20 64 65 66 69 6e 65 64 | pecific.addresses.may.be.defined |
9ffa0 | 2e 20 54 68 65 20 72 65 73 70 6f 6e 64 65 72 20 6d 61 79 20 72 65 74 75 72 6e 20 61 20 64 69 66 | ..The.responder.may.return.a.dif |
9ffc0 | 66 65 72 65 6e 74 20 61 64 64 72 65 73 73 2c 20 74 68 6f 75 67 68 2c 20 6f 72 20 6e 6f 6e 65 20 | ferent.address,.though,.or.none. |
9ffe0 | 61 74 20 61 6c 6c 2e 00 60 60 76 69 72 74 75 61 6c 2d 69 70 60 60 20 41 6c 6c 6f 77 73 20 74 6f | at.all..``virtual-ip``.Allows.to |
a0000 | 20 69 6e 73 74 61 6c 6c 20 76 69 72 74 75 61 6c 2d 69 70 20 61 64 64 72 65 73 73 65 73 2e 20 43 | .install.virtual-ip.addresses..C |
a0020 | 6f 6d 6d 61 20 73 65 70 61 72 61 74 65 64 20 6c 69 73 74 20 6f 66 20 76 69 72 74 75 61 6c 20 49 | omma.separated.list.of.virtual.I |
a0040 | 50 73 20 74 6f 20 72 65 71 75 65 73 74 20 69 6e 20 49 4b 45 76 32 20 63 6f 6e 66 69 67 75 72 61 | Ps.to.request.in.IKEv2.configura |
a0060 | 74 69 6f 6e 20 70 61 79 6c 6f 61 64 73 20 6f 72 20 49 4b 45 76 31 20 4d 6f 64 65 20 43 6f 6e 66 | tion.payloads.or.IKEv1.Mode.Conf |
a0080 | 69 67 2e 20 54 68 65 20 77 69 6c 64 63 61 72 64 20 61 64 64 72 65 73 73 65 73 20 30 2e 30 2e 30 | ig..The.wildcard.addresses.0.0.0 |
a00a0 | 2e 30 20 61 6e 64 20 3a 3a 20 72 65 71 75 65 73 74 20 61 6e 20 61 72 62 69 74 72 61 72 79 20 61 | .0.and.::.request.an.arbitrary.a |
a00c0 | 64 64 72 65 73 73 2c 20 73 70 65 63 69 66 69 63 20 61 64 64 72 65 73 73 65 73 20 6d 61 79 20 62 | ddress,.specific.addresses.may.b |
a00e0 | 65 20 64 65 66 69 6e 65 64 2e 20 54 68 65 20 72 65 73 70 6f 6e 64 65 72 20 6d 61 79 20 72 65 74 | e.defined..The.responder.may.ret |
a0100 | 75 72 6e 20 61 20 64 69 66 66 65 72 65 6e 74 20 61 64 64 72 65 73 73 2c 20 74 68 6f 75 67 68 2c | urn.a.different.address,.though, |
a0120 | 20 6f 72 20 6e 6f 6e 65 20 61 74 20 61 6c 6c 2e 20 44 65 66 69 6e 65 20 74 68 65 20 60 60 76 69 | .or.none.at.all..Define.the.``vi |
a0140 | 72 74 75 61 6c 2d 61 64 64 72 65 73 73 60 60 20 6f 70 74 69 6f 6e 20 74 6f 20 63 6f 6e 66 69 67 | rtual-address``.option.to.config |
a0160 | 75 72 65 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 69 6e 20 73 69 74 65 2d 74 6f 2d 73 69 | ure.the.IP.address.in.site-to-si |
a0180 | 74 65 20 68 69 65 72 61 72 63 68 79 2e 00 60 60 76 6e 63 60 60 20 2d 20 56 69 72 74 75 61 6c 20 | te.hierarchy..``vnc``.-.Virtual. |
a01a0 | 4e 65 74 77 6f 72 6b 20 43 6f 6e 74 72 6f 6c 20 28 56 4e 43 29 00 60 60 76 74 69 60 60 20 2d 20 | Network.Control.(VNC).``vti``.-. |
a01c0 | 75 73 65 20 61 20 56 54 49 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 74 72 61 66 66 69 63 20 | use.a.VTI.interface.for.traffic. |
a01e0 | 65 6e 63 72 79 70 74 69 6f 6e 2e 20 41 6e 79 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 77 | encryption..Any.traffic,.which.w |
a0200 | 69 6c 6c 20 62 65 20 73 65 6e 64 20 74 6f 20 56 54 49 20 69 6e 74 65 72 66 61 63 65 20 77 69 6c | ill.be.send.to.VTI.interface.wil |
a0220 | 6c 20 62 65 20 65 6e 63 72 79 70 74 65 64 20 61 6e 64 20 73 65 6e 64 20 74 6f 20 74 68 69 73 20 | l.be.encrypted.and.send.to.this. |
a0240 | 70 65 65 72 2e 20 55 73 69 6e 67 20 56 54 49 20 6d 61 6b 65 73 20 49 50 53 65 63 20 63 6f 6e 66 | peer..Using.VTI.makes.IPSec.conf |
a0260 | 69 67 75 72 61 74 69 6f 6e 20 6d 75 63 68 20 66 6c 65 78 69 62 6c 65 20 61 6e 64 20 65 61 73 69 | iguration.much.flexible.and.easi |
a0280 | 65 72 20 69 6e 20 63 6f 6d 70 6c 65 78 20 73 69 74 75 61 74 69 6f 6e 2c 20 61 6e 64 20 61 6c 6c | er.in.complex.situation,.and.all |
a02a0 | 6f 77 73 20 74 6f 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 61 64 64 2f 64 65 6c 65 74 65 20 72 65 | ows.to.dynamically.add/delete.re |
a02c0 | 6d 6f 74 65 20 6e 65 74 77 6f 72 6b 73 2c 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 61 20 70 | mote.networks,.reachable.via.a.p |
a02e0 | 65 65 72 2c 20 61 73 20 69 6e 20 74 68 69 73 20 6d 6f 64 65 20 72 6f 75 74 65 72 20 64 6f 6e 27 | eer,.as.in.this.mode.router.don' |
a0300 | 74 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 64 64 69 74 69 6f 6e 61 6c 20 53 41 2f 70 | t.need.to.create.additional.SA/p |
a0320 | 6f 6c 69 63 79 20 66 6f 72 20 65 61 63 68 20 72 65 6d 6f 74 65 20 6e 65 74 77 6f 72 6b 3a 00 60 | olicy.for.each.remote.network:.` |
a0340 | 60 78 35 30 39 60 60 20 2d 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 78 35 30 39 20 61 75 74 68 65 | `x509``.-.options.for.x509.authe |
a0360 | 6e 74 69 63 61 74 69 6f 6e 20 6d 6f 64 65 3a 00 60 60 78 35 30 39 60 60 20 2d 20 75 73 65 20 63 | ntication.mode:.``x509``.-.use.c |
a0380 | 65 72 74 69 66 69 63 61 74 65 73 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 66 6f 72 20 61 | ertificates.infrastructure.for.a |
a03a0 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 00 60 60 78 6f 72 2d 68 61 73 68 60 60 20 2d 20 58 4f | uthentication..``xor-hash``.-.XO |
a03c0 | 52 20 70 6f 6c 69 63 79 3a 20 54 72 61 6e 73 6d 69 74 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 | R.policy:.Transmit.based.on.the. |
a03e0 | 73 65 6c 65 63 74 65 64 20 74 72 61 6e 73 6d 69 74 20 68 61 73 68 20 70 6f 6c 69 63 79 2e 20 20 | selected.transmit.hash.policy... |
a0400 | 54 68 65 20 64 65 66 61 75 6c 74 20 70 6f 6c 69 63 79 20 69 73 20 61 20 73 69 6d 70 6c 65 20 5b | The.default.policy.is.a.simple.[ |
a0420 | 28 73 6f 75 72 63 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 58 4f 52 27 64 20 77 69 74 68 20 64 | (source.MAC.address.XOR'd.with.d |
a0440 | 65 73 74 69 6e 61 74 69 6f 6e 20 4d 41 43 20 61 64 64 72 65 73 73 20 58 4f 52 20 70 61 63 6b 65 | estination.MAC.address.XOR.packe |
a0460 | 74 20 74 79 70 65 20 49 44 29 20 6d 6f 64 75 6c 6f 20 73 6c 61 76 65 20 63 6f 75 6e 74 5d 2e 20 | t.type.ID).modulo.slave.count].. |
a0480 | 41 6c 74 65 72 6e 61 74 65 20 74 72 61 6e 73 6d 69 74 20 70 6f 6c 69 63 69 65 73 20 6d 61 79 20 | Alternate.transmit.policies.may. |
a04a0 | 62 65 20 73 65 6c 65 63 74 65 64 20 76 69 61 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 68 61 73 | be.selected.via.the.:cfgcmd:`has |
a04c0 | 68 2d 70 6f 6c 69 63 79 60 20 6f 70 74 69 6f 6e 2c 20 64 65 73 63 72 69 62 65 64 20 62 65 6c 6f | h-policy`.option,.described.belo |
a04e0 | 77 2e 00 60 60 79 65 73 60 60 20 65 6e 61 62 6c 65 20 72 65 6d 6f 74 65 20 68 6f 73 74 20 72 65 | w..``yes``.enable.remote.host.re |
a0500 | 2d 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 75 72 69 6e 67 20 61 6e 20 49 4b 45 20 72 65 | -authentication.during.an.IKE.re |
a0520 | 6b 65 79 3b 00 60 69 67 6e 6f 72 65 60 3a 20 4e 6f 20 63 6f 72 72 65 63 74 69 6f 6e 20 69 73 20 | key;.`ignore`:.No.correction.is. |
a0540 | 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 63 6c 6f 63 6b 20 66 6f 72 20 74 68 65 20 6c 65 61 | applied.to.the.clock.for.the.lea |
a0560 | 70 20 73 65 63 6f 6e 64 2e 20 54 68 65 20 63 6c 6f 63 6b 20 77 69 6c 6c 20 62 65 20 63 6f 72 72 | p.second..The.clock.will.be.corr |
a0580 | 65 63 74 65 64 20 6c 61 74 65 72 20 69 6e 20 6e 6f 72 6d 61 6c 20 6f 70 65 72 61 74 69 6f 6e 20 | ected.later.in.normal.operation. |
a05a0 | 77 68 65 6e 20 6e 65 77 20 6d 65 61 73 75 72 65 6d 65 6e 74 73 20 61 72 65 20 6d 61 64 65 20 61 | when.new.measurements.are.made.a |
a05c0 | 6e 64 20 74 68 65 20 65 73 74 69 6d 61 74 65 64 20 6f 66 66 73 65 74 20 69 6e 63 6c 75 64 65 73 | nd.the.estimated.offset.includes |
a05e0 | 20 74 68 65 20 6f 6e 65 20 73 65 63 6f 6e 64 20 65 72 72 6f 72 2e 00 60 73 6d 65 61 72 60 3a 20 | .the.one.second.error..`smear`:. |
a0600 | 57 68 65 6e 20 73 6d 65 61 72 69 6e 67 20 61 20 6c 65 61 70 20 73 65 63 6f 6e 64 2c 20 74 68 65 | When.smearing.a.leap.second,.the |
a0620 | 20 6c 65 61 70 20 73 74 61 74 75 73 20 69 73 20 73 75 70 70 72 65 73 73 65 64 20 6f 6e 20 74 68 | .leap.status.is.suppressed.on.th |
a0640 | 65 20 73 65 72 76 65 72 20 61 6e 64 20 74 68 65 20 73 65 72 76 65 64 20 74 69 6d 65 20 69 73 20 | e.server.and.the.served.time.is. |
a0660 | 63 6f 72 72 65 63 74 65 64 20 73 6c 6f 77 6c 79 20 62 79 20 73 6c 65 77 69 6e 67 20 69 6e 73 74 | corrected.slowly.by.slewing.inst |
a0680 | 65 61 64 20 6f 66 20 73 74 65 70 70 69 6e 67 2e 20 54 68 65 20 63 6c 69 65 6e 74 73 20 64 6f 20 | ead.of.stepping..The.clients.do. |
a06a0 | 6e 6f 74 20 6e 65 65 64 20 61 6e 79 20 73 70 65 63 69 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 | not.need.any.special.configurati |
a06c0 | 6f 6e 20 61 73 20 74 68 65 79 20 64 6f 20 6e 6f 74 20 6b 6e 6f 77 20 74 68 65 72 65 20 69 73 20 | on.as.they.do.not.know.there.is. |
a06e0 | 61 6e 79 20 6c 65 61 70 20 73 65 63 6f 6e 64 20 61 6e 64 20 74 68 65 79 20 66 6f 6c 6c 6f 77 20 | any.leap.second.and.they.follow. |
a0700 | 74 68 65 20 73 65 72 76 65 72 20 74 69 6d 65 20 77 68 69 63 68 20 65 76 65 6e 74 75 61 6c 6c 79 | the.server.time.which.eventually |
a0720 | 20 62 72 69 6e 67 73 20 74 68 65 6d 20 62 61 63 6b 20 74 6f 20 55 54 43 2e 20 43 61 72 65 20 6d | .brings.them.back.to.UTC..Care.m |
a0740 | 75 73 74 20 62 65 20 74 61 6b 65 6e 20 74 6f 20 65 6e 73 75 72 65 20 74 68 65 79 20 75 73 65 20 | ust.be.taken.to.ensure.they.use. |
a0760 | 6f 6e 6c 79 20 4e 54 50 20 73 65 72 76 65 72 73 20 77 68 69 63 68 20 73 6d 65 61 72 20 74 68 65 | only.NTP.servers.which.smear.the |
a0780 | 20 6c 65 61 70 20 73 65 63 6f 6e 64 20 69 6e 20 65 78 61 63 74 6c 79 20 74 68 65 20 73 61 6d 65 | .leap.second.in.exactly.the.same |
a07a0 | 20 77 61 79 20 66 6f 72 20 73 79 6e 63 68 72 6f 6e 69 73 61 74 69 6f 6e 2e 00 60 73 6f 75 72 63 | .way.for.synchronisation..`sourc |
a07c0 | 65 2d 61 64 64 72 65 73 73 60 20 61 6e 64 20 60 73 6f 75 72 63 65 2d 69 6e 74 65 72 66 61 63 65 | e-address`.and.`source-interface |
a07e0 | 60 20 63 61 6e 20 6e 6f 74 20 62 65 20 75 73 65 64 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 | `.can.not.be.used.at.the.same.ti |
a0800 | 6d 65 2e 00 60 73 79 73 74 65 6d 60 3a 20 57 68 65 6e 20 69 6e 73 65 72 74 69 6e 67 20 61 20 6c | me..`system`:.When.inserting.a.l |
a0820 | 65 61 70 20 73 65 63 6f 6e 64 2c 20 74 68 65 20 6b 65 72 6e 65 6c 20 73 74 65 70 73 20 74 68 65 | eap.second,.the.kernel.steps.the |
a0840 | 20 73 79 73 74 65 6d 20 63 6c 6f 63 6b 20 62 61 63 6b 77 61 72 64 73 20 62 79 20 6f 6e 65 20 73 | .system.clock.backwards.by.one.s |
a0860 | 65 63 6f 6e 64 20 77 68 65 6e 20 74 68 65 20 63 6c 6f 63 6b 20 67 65 74 73 20 74 6f 20 30 30 3a | econd.when.the.clock.gets.to.00: |
a0880 | 30 30 3a 30 30 20 55 54 43 2e 20 57 68 65 6e 20 64 65 6c 65 74 69 6e 67 20 61 20 6c 65 61 70 20 | 00:00.UTC..When.deleting.a.leap. |
a08a0 | 73 65 63 6f 6e 64 2c 20 69 74 20 73 74 65 70 73 20 66 6f 72 77 61 72 64 20 62 79 20 6f 6e 65 20 | second,.it.steps.forward.by.one. |
a08c0 | 73 65 63 6f 6e 64 20 77 68 65 6e 20 74 68 65 20 63 6c 6f 63 6b 20 67 65 74 73 20 74 6f 20 32 33 | second.when.the.clock.gets.to.23 |
a08e0 | 3a 35 39 3a 35 39 20 55 54 43 2e 00 60 74 69 6d 65 7a 6f 6e 65 60 3a 20 54 68 69 73 20 64 69 72 | :59:59.UTC..`timezone`:.This.dir |
a0900 | 65 63 74 69 76 65 20 73 70 65 63 69 66 69 65 73 20 61 20 74 69 6d 65 7a 6f 6e 65 20 69 6e 20 74 | ective.specifies.a.timezone.in.t |
a0920 | 68 65 20 73 79 73 74 65 6d 20 74 69 6d 65 7a 6f 6e 65 20 64 61 74 61 62 61 73 65 20 77 68 69 63 | he.system.timezone.database.whic |
a0940 | 68 20 63 68 72 6f 6e 79 64 20 63 61 6e 20 75 73 65 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 77 | h.chronyd.can.use.to.determine.w |
a0960 | 68 65 6e 20 77 69 6c 6c 20 74 68 65 20 6e 65 78 74 20 6c 65 61 70 20 73 65 63 6f 6e 64 20 6f 63 | hen.will.the.next.leap.second.oc |
a0980 | 63 75 72 20 61 6e 64 20 77 68 61 74 20 69 73 20 74 68 65 20 63 75 72 72 65 6e 74 20 6f 66 66 73 | cur.and.what.is.the.current.offs |
a09a0 | 65 74 20 62 65 74 77 65 65 6e 20 54 41 49 20 61 6e 64 20 55 54 43 2e 20 49 74 20 77 69 6c 6c 20 | et.between.TAI.and.UTC..It.will. |
a09c0 | 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 63 68 65 63 6b 20 69 66 20 32 33 3a 35 39 3a 35 39 20 61 | periodically.check.if.23:59:59.a |
a09e0 | 6e 64 20 32 33 3a 35 39 3a 36 30 20 61 72 65 20 76 61 6c 69 64 20 74 69 6d 65 73 20 69 6e 20 74 | nd.23:59:60.are.valid.times.in.t |
a0a00 | 68 65 20 74 69 6d 65 7a 6f 6e 65 2e 20 54 68 69 73 20 6e 6f 72 6d 61 6c 6c 79 20 77 6f 72 6b 73 | he.timezone..This.normally.works |
a0a20 | 20 77 69 74 68 20 74 68 65 20 72 69 67 68 74 2f 55 54 43 20 74 69 6d 65 7a 6f 6e 65 20 77 68 69 | .with.the.right/UTC.timezone.whi |
a0a40 | 63 68 20 69 73 20 74 68 65 20 64 65 66 61 75 6c 74 00 60 74 77 65 65 74 20 62 79 20 45 76 69 6c | ch.is.the.default.`tweet.by.Evil |
a0a60 | 4d 6f 67 60 5f 2c 20 32 30 32 30 2d 30 32 2d 32 31 00 61 20 62 61 6e 64 77 69 64 74 68 20 74 65 | Mog`_,.2020-02-21.a.bandwidth.te |
a0a80 | 73 74 20 6f 76 65 72 20 74 68 65 20 56 50 4e 20 67 6f 74 20 74 68 65 73 65 20 72 65 73 75 6c 74 | st.over.the.VPN.got.these.result |
a0aa0 | 73 3a 00 61 20 62 6c 61 6e 6b 20 69 6e 64 69 63 61 74 65 73 20 74 68 61 74 20 6e 6f 20 74 65 73 | s:.a.blank.indicates.that.no.tes |
a0ac0 | 74 20 68 61 73 20 62 65 65 6e 20 63 61 72 72 69 65 64 20 6f 75 74 00 61 65 73 32 35 36 20 45 6e | t.has.been.carried.out.aes256.En |
a0ae0 | 63 72 79 70 74 69 6f 6e 00 61 6c 65 72 74 00 61 6c 6c 00 61 6e 20 52 44 20 2f 20 52 54 4c 49 53 | cryption.alert.all.an.RD./.RTLIS |
a0b00 | 54 00 61 6e 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 61 20 6e 65 78 74 68 6f 70 00 61 6e | T.an.interface.with.a.nexthop.an |
a0b20 | 79 3a 20 61 6e 79 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 61 6e 79 3a | y:.any.IP.address.to.match..any: |
a0b40 | 20 61 6e 79 20 49 50 76 36 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 61 75 74 68 | .any.IPv6.address.to.match..auth |
a0b60 | 00 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 00 61 75 74 6f 20 2d 20 69 6e 74 65 72 66 61 63 65 20 | .authorization.auto.-.interface. |
a0b80 | 64 75 70 6c 65 78 20 73 65 74 74 69 6e 67 20 69 73 20 61 75 74 6f 2d 6e 65 67 6f 74 69 61 74 65 | duplex.setting.is.auto-negotiate |
a0ba0 | 64 00 61 75 74 6f 20 2d 20 69 6e 74 65 72 66 61 63 65 20 73 70 65 65 64 20 69 73 20 61 75 74 6f | d.auto.-.interface.speed.is.auto |
a0bc0 | 2d 6e 65 67 6f 74 69 61 74 65 64 00 62 67 70 64 00 62 6f 6e 64 69 6e 67 00 62 6f 6f 74 2d 73 69 | -negotiated.bgpd.bonding.boot-si |
a0be0 | 7a 65 00 62 6f 6f 74 66 69 6c 65 2d 6e 61 6d 65 00 62 6f 6f 74 66 69 6c 65 2d 6e 61 6d 65 2c 20 | ze.bootfile-name.bootfile-name,. |
a0c00 | 66 69 6c 65 6e 61 6d 65 00 62 6f 6f 74 66 69 6c 65 2d 73 65 72 76 65 72 00 62 6f 6f 74 66 69 6c | filename.bootfile-server.bootfil |
a0c20 | 65 2d 73 69 7a 65 00 62 72 69 64 67 65 00 63 6c 69 65 6e 74 20 65 78 61 6d 70 6c 65 20 28 64 65 | e-size.bridge.client.example.(de |
a0c40 | 62 69 61 6e 20 39 29 00 63 6c 69 65 6e 74 2d 70 72 65 66 69 78 2d 6c 65 6e 67 74 68 00 63 6c 6f | bian.9).client-prefix-length.clo |
a0c60 | 63 6b 00 63 6c 6f 63 6b 20 64 61 65 6d 6f 6e 20 28 6e 6f 74 65 20 32 29 00 63 72 69 74 00 63 72 | ck.clock.daemon.(note.2).crit.cr |
a0c80 | 6f 6e 00 64 61 65 6d 6f 6e 00 64 64 63 6c 69 65 6e 74 5f 20 68 61 73 20 61 6e 6f 74 68 65 72 20 | on.daemon.ddclient_.has.another. |
a0ca0 | 77 61 79 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 57 41 4e 20 49 50 20 61 64 64 72 | way.to.determine.the.WAN.IP.addr |
a0cc0 | 65 73 73 2e 20 54 68 69 73 20 69 73 20 63 6f 6e 74 72 6f 6c 6c 65 64 20 62 79 3a 00 64 64 63 6c | ess..This.is.controlled.by:.ddcl |
a0ce0 | 69 65 6e 74 5f 20 75 73 65 73 20 74 77 6f 20 6d 65 74 68 6f 64 73 20 74 6f 20 75 70 64 61 74 65 | ient_.uses.two.methods.to.update |
a0d00 | 20 61 20 44 4e 53 20 72 65 63 6f 72 64 2e 20 54 68 65 20 66 69 72 73 74 20 6f 6e 65 20 77 69 6c | .a.DNS.record..The.first.one.wil |
a0d20 | 6c 20 73 65 6e 64 20 75 70 64 61 74 65 73 20 64 69 72 65 63 74 6c 79 20 74 6f 20 74 68 65 20 44 | l.send.updates.directly.to.the.D |
a0d40 | 4e 53 20 64 61 65 6d 6f 6e 2c 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 3a 72 | NS.daemon,.in.compliance.with.:r |
a0d60 | 66 63 3a 60 32 31 33 36 60 2e 20 54 68 65 20 73 65 63 6f 6e 64 20 6f 6e 65 20 69 6e 76 6f 6c 76 | fc:`2136`..The.second.one.involv |
a0d80 | 65 73 20 61 20 74 68 69 72 64 20 70 61 72 74 79 20 73 65 72 76 69 63 65 2c 20 6c 69 6b 65 20 44 | es.a.third.party.service,.like.D |
a0da0 | 79 6e 44 4e 53 2e 63 6f 6d 20 6f 72 20 61 6e 79 20 6f 74 68 65 72 20 73 69 6d 69 6c 61 72 20 77 | ynDNS.com.or.any.other.similar.w |
a0dc0 | 65 62 73 69 74 65 2e 20 54 68 69 73 20 6d 65 74 68 6f 64 20 75 73 65 73 20 48 54 54 50 20 72 65 | ebsite..This.method.uses.HTTP.re |
a0de0 | 71 75 65 73 74 73 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 74 68 65 20 6e 65 77 20 49 50 20 61 64 | quests.to.transmit.the.new.IP.ad |
a0e00 | 64 72 65 73 73 2e 20 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 62 6f 74 68 20 69 6e | dress..You.can.configure.both.in |
a0e20 | 20 56 79 4f 53 2e 00 64 64 63 6c 69 65 6e 74 5f 20 75 73 65 73 20 74 77 6f 20 6d 65 74 68 6f 64 | .VyOS..ddclient_.uses.two.method |
a0e40 | 73 20 74 6f 20 75 70 64 61 74 65 20 61 20 44 4e 53 20 72 65 63 6f 72 64 2e 20 54 68 65 20 66 69 | s.to.update.a.DNS.record..The.fi |
a0e60 | 72 73 74 20 6f 6e 65 20 77 69 6c 6c 20 73 65 6e 64 20 75 70 64 61 74 65 73 20 64 69 72 65 63 74 | rst.one.will.send.updates.direct |
a0e80 | 6c 79 20 74 6f 20 74 68 65 20 44 4e 53 20 64 61 65 6d 6f 6e 2c 20 69 6e 20 63 6f 6d 70 6c 69 61 | ly.to.the.DNS.daemon,.in.complia |
a0ea0 | 6e 63 65 20 77 69 74 68 20 3a 72 66 63 3a 60 32 31 33 36 60 2e 20 54 68 65 20 73 65 63 6f 6e 64 | nce.with.:rfc:`2136`..The.second |
a0ec0 | 20 6f 6e 65 20 69 6e 76 6f 6c 76 65 73 20 61 20 74 68 69 72 64 20 70 61 72 74 79 20 73 65 72 76 | .one.involves.a.third.party.serv |
a0ee0 | 69 63 65 2c 20 6c 69 6b 65 20 44 79 6e 44 4e 53 2e 63 6f 6d 20 6f 72 20 61 6e 79 20 6f 74 68 65 | ice,.like.DynDNS.com.or.any.othe |
a0f00 | 72 20 73 75 63 68 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 2e 20 54 68 69 73 20 6d 65 | r.such.service.provider..This.me |
a0f20 | 74 68 6f 64 20 75 73 65 73 20 48 54 54 50 20 72 65 71 75 65 73 74 73 20 74 6f 20 74 72 61 6e 73 | thod.uses.HTTP.requests.to.trans |
a0f40 | 6d 69 74 20 74 68 65 20 6e 65 77 20 49 50 20 61 64 64 72 65 73 73 2e 20 59 6f 75 20 63 61 6e 20 | mit.the.new.IP.address..You.can. |
a0f60 | 63 6f 6e 66 69 67 75 72 65 20 62 6f 74 68 20 69 6e 20 56 79 4f 53 2e 00 64 64 63 6c 69 65 6e 74 | configure.both.in.VyOS..ddclient |
a0f80 | 5f 20 77 69 6c 6c 20 73 6b 69 70 20 61 6e 79 20 61 64 64 72 65 73 73 20 6c 6f 63 61 74 65 64 20 | _.will.skip.any.address.located. |
a0fa0 | 62 65 66 6f 72 65 20 74 68 65 20 73 74 72 69 6e 67 20 73 65 74 20 69 6e 20 60 3c 70 61 74 74 65 | before.the.string.set.in.`<patte |
a0fc0 | 72 6e 3e 60 2e 00 64 65 62 75 67 00 64 65 63 72 65 6d 65 6e 74 2d 6c 69 66 65 74 69 6d 65 00 64 | rn>`..debug.decrement-lifetime.d |
a0fe0 | 65 66 61 75 6c 74 20 6d 69 6e 2d 74 68 72 65 73 68 6f 6c 64 00 64 65 66 61 75 6c 74 2d 6c 65 61 | efault.min-threshold.default-lea |
a1000 | 73 65 2d 74 69 6d 65 2c 20 6d 61 78 2d 6c 65 61 73 65 2d 74 69 6d 65 00 64 65 66 61 75 6c 74 2d | se-time,.max-lease-time.default- |
a1020 | 6c 69 66 65 74 69 6d 65 00 64 65 66 61 75 6c 74 2d 70 72 65 66 65 72 65 6e 63 65 00 64 65 66 61 | lifetime.default-preference.defa |
a1040 | 75 6c 74 2d 72 6f 75 74 65 72 00 64 65 70 72 65 63 61 74 65 2d 70 72 65 66 69 78 00 64 65 73 74 | ult-router.deprecate-prefix.dest |
a1060 | 69 6e 61 74 69 6f 6e 2d 68 61 73 68 69 6e 67 00 64 68 63 70 2d 73 65 72 76 65 72 2d 69 64 65 6e | ination-hashing.dhcp-server-iden |
a1080 | 74 69 66 69 65 72 00 64 69 72 65 63 74 00 64 69 72 65 63 74 6f 72 79 00 64 69 73 61 62 6c 65 3a | tifier.direct.directory.disable: |
a10a0 | 20 4e 6f 20 73 6f 75 72 63 65 20 76 61 6c 69 64 61 74 69 6f 6e 00 64 6e 73 73 6c 00 64 6f 6d 61 | .No.source.validation.dnssl.doma |
a10c0 | 69 6e 2d 6e 61 6d 65 00 64 6f 6d 61 69 6e 2d 6e 61 6d 65 2d 73 65 72 76 65 72 73 00 64 6f 6d 61 | in-name.domain-name-servers.doma |
a10e0 | 69 6e 2d 73 65 61 72 63 68 00 65 6d 65 72 67 00 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c | in-search.emerg.enable.or.disabl |
a1100 | 65 20 20 49 43 4d 50 76 34 20 72 65 64 69 72 65 63 74 20 6d 65 73 73 61 67 65 73 20 73 65 6e 64 | e..ICMPv4.redirect.messages.send |
a1120 | 20 62 79 20 56 79 4f 53 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 | .by.VyOS.The.following.system.pa |
a1140 | 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 65 6e 61 62 6c 65 20 | rameter.will.be.altered:.enable. |
a1160 | 6f 72 20 64 69 73 61 62 6c 65 20 49 43 4d 50 76 34 20 72 65 64 69 72 65 63 74 20 6d 65 73 73 61 | or.disable.ICMPv4.redirect.messa |
a1180 | 67 65 73 20 73 65 6e 64 20 62 79 20 56 79 4f 53 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 | ges.send.by.VyOS.The.following.s |
a11a0 | 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a | ystem.parameter.will.be.altered: |
a11c0 | 00 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 6f 66 20 49 43 4d 50 76 34 20 6f 72 20 | .enable.or.disable.of.ICMPv4.or. |
a11e0 | 49 43 4d 50 76 36 20 72 65 64 69 72 65 63 74 20 6d 65 73 73 61 67 65 73 20 61 63 63 65 70 74 65 | ICMPv6.redirect.messages.accepte |
a1200 | 64 20 62 79 20 56 79 4f 53 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 | d.by.VyOS..The.following.system. |
a1220 | 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 65 6e 61 62 6c | parameter.will.be.altered:.enabl |
a1240 | 65 20 6f 72 20 64 69 73 61 62 6c 65 20 74 68 65 20 6c 6f 67 67 69 6e 67 20 6f 66 20 6d 61 72 74 | e.or.disable.the.logging.of.mart |
a1260 | 69 61 6e 20 49 50 76 34 20 70 61 63 6b 65 74 73 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 | ian.IPv4.packets..The.following. |
a1280 | 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 | system.parameter.will.be.altered |
a12a0 | 3a 00 65 72 72 00 65 74 68 65 72 6e 65 74 00 65 78 61 63 74 2d 6d 61 74 63 68 3a 20 65 78 61 63 | :.err.ethernet.exact-match:.exac |
a12c0 | 74 20 6d 61 74 63 68 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 72 65 66 69 78 65 73 2e | t.match.of.the.network.prefixes. |
a12e0 | 00 65 78 63 6c 75 64 65 00 66 61 69 6c 6f 76 65 72 00 66 61 73 74 3a 20 52 65 71 75 65 73 74 20 | .exclude.failover.fast:.Request. |
a1300 | 70 61 72 74 6e 65 72 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 4c 41 43 50 44 55 73 20 65 76 65 72 | partner.to.transmit.LACPDUs.ever |
a1320 | 79 20 31 20 73 65 63 6f 6e 64 00 66 69 6c 65 20 3c 66 69 6c 65 20 6e 61 6d 65 3e 00 66 69 6c 74 | y.1.second.file.<file.name>.filt |
a1340 | 65 72 2d 6c 69 73 74 00 66 74 70 00 66 75 6c 6c 20 2d 20 61 6c 77 61 79 73 20 75 73 65 20 66 75 | er-list.ftp.full.-.always.use.fu |
a1360 | 6c 6c 2d 64 75 70 6c 65 78 00 67 65 6e 65 76 65 00 68 61 6c 66 20 2d 20 61 6c 77 61 79 73 20 75 | ll-duplex.geneve.half.-.always.u |
a1380 | 73 65 20 68 61 6c 66 2d 64 75 70 6c 65 78 00 68 6f 70 2d 6c 69 6d 69 74 00 68 6f 73 74 3a 20 73 | se.half-duplex.hop-limit.host:.s |
a13a0 | 69 6e 67 6c 65 20 68 6f 73 74 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 | ingle.host.IP.address.to.match.. |
a13c0 | 68 74 74 70 73 3a 2f 2f 61 63 63 65 73 73 2e 72 65 64 68 61 74 2e 63 6f 6d 2f 73 69 74 65 73 2f | https://access.redhat.com/sites/ |
a13e0 | 64 65 66 61 75 6c 74 2f 66 69 6c 65 73 2f 61 74 74 61 63 68 6d 65 6e 74 73 2f 32 30 31 35 30 31 | default/files/attachments/201501 |
a1400 | 2d 70 65 72 66 2d 62 72 69 65 66 2d 6c 6f 77 2d 6c 61 74 65 6e 63 79 2d 74 75 6e 69 6e 67 2d 72 | -perf-brief-low-latency-tuning-r |
a1420 | 68 65 6c 37 2d 76 32 2e 31 2e 70 64 66 00 68 74 74 70 73 3a 2f 2f 63 6f 6d 6d 75 6e 69 74 79 2e | hel7-v2.1.pdf.https://community. |
a1440 | 6f 70 65 6e 76 70 6e 2e 6e 65 74 2f 6f 70 65 6e 76 70 6e 2f 77 69 6b 69 2f 44 61 74 61 43 68 61 | openvpn.net/openvpn/wiki/DataCha |
a1460 | 6e 6e 65 6c 4f 66 66 6c 6f 61 64 2f 46 65 61 74 75 72 65 73 00 69 66 20 74 68 65 72 65 20 69 73 | nnelOffload/Features.if.there.is |
a1480 | 20 61 20 73 75 70 70 6f 72 74 65 64 20 64 65 76 69 63 65 2c 20 65 6e 61 62 6c 65 20 49 6e 74 65 | .a.supported.device,.enable.Inte |
a14a0 | 6c c2 ae 20 51 41 54 00 69 66 20 74 68 65 72 65 20 69 73 20 6e 6f 6e 20 64 65 76 69 63 65 20 74 | l...QAT.if.there.is.non.device.t |
a14c0 | 68 65 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 73 68 6f 77 20 60 60 60 4e 6f 20 51 41 54 20 64 | he.command.will.show.```No.QAT.d |
a14e0 | 65 76 69 63 65 20 66 6f 75 6e 64 60 60 60 00 69 6e 66 6f 00 69 6e 74 65 72 76 61 6c 00 69 6e 76 | evice.found```.info.interval.inv |
a1500 | 61 6c 69 64 00 69 6e 76 65 72 73 65 2d 6d 61 74 63 68 3a 20 6e 65 74 77 6f 72 6b 2f 6e 65 74 6d | alid.inverse-match:.network/netm |
a1520 | 61 73 6b 20 74 6f 20 6d 61 74 63 68 20 28 72 65 71 75 69 72 65 73 20 6e 65 74 77 6f 72 6b 20 62 | ask.to.match.(requires.network.b |
a1540 | 65 20 64 65 66 69 6e 65 64 29 2e 00 69 70 2d 66 6f 72 77 61 72 64 69 6e 67 00 69 73 69 73 64 00 | e.defined)..ip-forwarding.isisd. |
a1560 | 69 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 69 74 68 20 61 6e 79 20 4e 49 43 2c 00 69 74 20 | it.can.be.used.with.any.NIC,.it. |
a1580 | 64 6f 65 73 20 6e 6f 74 20 69 6e 63 72 65 61 73 65 20 68 61 72 64 77 61 72 65 20 64 65 76 69 63 | does.not.increase.hardware.devic |
a15a0 | 65 20 69 6e 74 65 72 72 75 70 74 20 72 61 74 65 20 28 61 6c 74 68 6f 75 67 68 20 69 74 20 64 6f | e.interrupt.rate.(although.it.do |
a15c0 | 65 73 20 69 6e 74 72 6f 64 75 63 65 20 69 6e 74 65 72 2d 70 72 6f 63 65 73 73 6f 72 20 69 6e 74 | es.introduce.inter-processor.int |
a15e0 | 65 72 72 75 70 74 73 20 28 49 50 49 73 29 29 2e 00 6b 65 72 6e 00 6c 32 74 70 76 33 00 6c 64 70 | errupts.(IPIs))..kern.l2tpv3.ldp |
a1600 | 64 00 6c 65 61 73 65 00 6c 65 61 73 74 2d 63 6f 6e 6e 65 63 74 69 6f 6e 00 6c 65 66 74 20 6c 6f | d.lease.least-connection.left.lo |
a1620 | 63 61 6c 5f 69 70 3a 20 31 39 32 2e 31 36 38 2e 30 2e 31 30 20 23 20 56 50 4e 20 47 61 74 65 77 | cal_ip:.192.168.0.10.#.VPN.Gatew |
a1640 | 61 79 2c 20 62 65 68 69 6e 64 20 4e 41 54 20 64 65 76 69 63 65 00 6c 65 66 74 20 6c 6f 63 61 6c | ay,.behind.NAT.device.left.local |
a1660 | 5f 69 70 3a 20 60 31 39 38 2e 35 31 2e 31 30 30 2e 33 60 20 23 20 73 65 72 76 65 72 20 73 69 64 | _ip:.`198.51.100.3`.#.server.sid |
a1680 | 65 20 57 41 4e 20 49 50 00 6c 65 66 74 20 70 75 62 6c 69 63 5f 69 70 3a 31 37 32 2e 31 38 2e 32 | e.WAN.IP.left.public_ip:172.18.2 |
a16a0 | 30 31 2e 31 30 00 6c 65 66 74 20 73 75 62 6e 65 74 3a 20 60 31 39 32 2e 31 36 38 2e 30 2e 30 2f | 01.10.left.subnet:.`192.168.0.0/ |
a16c0 | 32 34 60 20 73 69 74 65 31 2c 20 73 65 72 76 65 72 20 73 69 64 65 20 28 69 2e 65 2e 20 6c 6f 63 | 24`.site1,.server.side.(i.e..loc |
a16e0 | 61 6c 69 74 79 2c 20 61 63 74 75 61 6c 6c 79 20 74 68 65 72 65 20 69 73 20 6e 6f 20 63 6c 69 65 | ality,.actually.there.is.no.clie |
a1700 | 6e 74 20 6f 72 20 73 65 72 76 65 72 20 72 6f 6c 65 73 29 00 6c 69 6e 6b 2d 6d 74 75 00 6c 6f 63 | nt.or.server.roles).link-mtu.loc |
a1720 | 61 6c 20 75 73 65 20 30 20 28 6c 6f 63 61 6c 30 29 00 6c 6f 63 61 6c 20 75 73 65 20 31 20 28 6c | al.use.0.(local0).local.use.1.(l |
a1740 | 6f 63 61 6c 31 29 00 6c 6f 63 61 6c 20 75 73 65 20 32 20 28 6c 6f 63 61 6c 32 29 00 6c 6f 63 61 | ocal1).local.use.2.(local2).loca |
a1760 | 6c 20 75 73 65 20 33 20 28 6c 6f 63 61 6c 33 29 00 6c 6f 63 61 6c 20 75 73 65 20 34 20 28 6c 6f | l.use.3.(local3).local.use.4.(lo |
a1780 | 63 61 6c 34 29 00 6c 6f 63 61 6c 20 75 73 65 20 35 20 28 6c 6f 63 61 6c 35 29 00 6c 6f 63 61 6c | cal4).local.use.5.(local5).local |
a17a0 | 20 75 73 65 20 37 20 28 6c 6f 63 61 6c 37 29 00 6c 6f 63 61 6c 30 00 6c 6f 63 61 6c 31 00 6c 6f | .use.7.(local7).local0.local1.lo |
a17c0 | 63 61 6c 32 00 6c 6f 63 61 6c 33 00 6c 6f 63 61 6c 34 00 6c 6f 63 61 6c 35 00 6c 6f 63 61 6c 36 | cal2.local3.local4.local5.local6 |
a17e0 | 00 6c 6f 63 61 6c 37 00 6c 6f 63 61 6c 69 74 79 2d 62 61 73 65 64 2d 6c 65 61 73 74 2d 63 6f 6e | .local7.locality-based-least-con |
a1800 | 6e 65 63 74 69 6f 6e 00 6c 6f 67 61 6c 65 72 74 00 6c 6f 67 61 75 64 69 74 00 6c 6f 6f 73 65 3a | nection.logalert.logaudit.loose: |
a1820 | 20 45 61 63 68 20 69 6e 63 6f 6d 69 6e 67 20 70 61 63 6b 65 74 27 73 20 73 6f 75 72 63 65 20 61 | .Each.incoming.packet's.source.a |
a1840 | 64 64 72 65 73 73 20 69 73 20 61 6c 73 6f 20 74 65 73 74 65 64 20 61 67 61 69 6e 73 74 20 74 68 | ddress.is.also.tested.against.th |
a1860 | 65 20 46 49 42 20 61 6e 64 20 69 66 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 | e.FIB.and.if.the.source.address. |
a1880 | 69 73 20 6e 6f 74 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 61 6e 79 20 69 6e 74 65 72 66 61 | is.not.reachable.via.any.interfa |
a18a0 | 63 65 20 74 68 65 20 70 61 63 6b 65 74 20 63 68 65 63 6b 20 77 69 6c 6c 20 66 61 69 6c 2e 00 6c | ce.the.packet.check.will.fail..l |
a18c0 | 70 72 00 6d 44 4e 53 20 52 65 70 65 61 74 65 72 00 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 63 | pr.mDNS.Repeater.mDNS.repeater.c |
a18e0 | 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 72 65 2d 62 72 6f 61 64 63 61 73 74 | an.be.configured.to.re-broadcast |
a1900 | 20 6f 6e 6c 79 20 73 70 65 63 69 66 69 63 20 73 65 72 76 69 63 65 73 2e 20 42 79 20 64 65 66 61 | .only.specific.services..By.defa |
a1920 | 75 6c 74 2c 20 61 6c 6c 20 73 65 72 76 69 63 65 73 20 61 72 65 20 72 65 2d 62 72 6f 61 64 63 61 | ult,.all.services.are.re-broadca |
a1940 | 73 74 65 64 2e 00 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 63 61 6e 20 62 65 20 65 6e 61 62 6c | sted..mDNS.repeater.can.be.enabl |
a1960 | 65 64 20 65 69 74 68 65 72 20 6f 6e 20 49 50 76 34 20 73 6f 63 6b 65 74 20 6f 72 20 6f 6e 20 49 | ed.either.on.IPv4.socket.or.on.I |
a1980 | 50 76 36 20 73 6f 63 6b 65 74 20 6f 72 20 62 6f 74 68 20 74 6f 20 72 65 2d 62 72 6f 61 64 63 61 | Pv6.socket.or.both.to.re-broadca |
a19a0 | 73 74 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 77 69 | st..By.default,.mDNS.repeater.wi |
a19c0 | 6c 6c 20 6c 69 73 74 65 6e 20 6f 6e 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 2e | ll.listen.on.both.IPv4.and.IPv6. |
a19e0 | 00 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 63 61 6e 20 62 65 20 74 65 6d 70 6f 72 61 72 69 6c | .mDNS.repeater.can.be.temporaril |
a1a00 | 79 20 64 69 73 61 62 6c 65 64 20 77 69 74 68 6f 75 74 20 64 65 6c 65 74 69 6e 67 20 74 68 65 20 | y.disabled.without.deleting.the. |
a1a20 | 73 65 72 76 69 63 65 20 75 73 69 6e 67 00 6d 61 69 6c 00 6d 61 6e 61 67 65 64 2d 66 6c 61 67 00 | service.using.mail.managed-flag. |
a1a40 | 6d 61 74 63 68 2d 66 72 61 67 3a 20 53 65 63 6f 6e 64 20 61 6e 64 20 66 75 72 74 68 65 72 20 66 | match-frag:.Second.and.further.f |
a1a60 | 72 61 67 6d 65 6e 74 73 20 6f 66 20 66 72 61 67 6d 65 6e 74 65 64 20 70 61 63 6b 65 74 73 2e 00 | ragments.of.fragmented.packets.. |
a1a80 | 6d 61 74 63 68 2d 69 70 73 65 63 3a 20 6d 61 74 63 68 20 69 6e 62 6f 75 6e 64 20 49 50 73 65 63 | match-ipsec:.match.inbound.IPsec |
a1aa0 | 20 70 61 63 6b 65 74 73 2e 00 6d 61 74 63 68 2d 6e 6f 6e 2d 66 72 61 67 3a 20 48 65 61 64 20 66 | .packets..match-non-frag:.Head.f |
a1ac0 | 72 61 67 6d 65 6e 74 73 20 6f 72 20 75 6e 66 72 61 67 6d 65 6e 74 65 64 20 70 61 63 6b 65 74 73 | ragments.or.unfragmented.packets |
a1ae0 | 2e 00 6d 61 74 63 68 2d 6e 6f 6e 65 3a 20 6d 61 74 63 68 20 69 6e 62 6f 75 6e 64 20 6e 6f 6e 2d | ..match-none:.match.inbound.non- |
a1b00 | 49 50 73 65 63 20 70 61 63 6b 65 74 73 2e 00 6d 69 6e 69 6d 61 6c 20 63 6f 6e 66 69 67 00 6d 6f | IPsec.packets..minimal.config.mo |
a1b20 | 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 72 65 6c 61 74 65 64 20 49 47 50 20 20 2d 20 3a 72 | re.information.related.IGP..-.:r |
a1b40 | 65 66 3a 60 72 6f 75 74 69 6e 67 2d 69 73 69 73 60 00 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 | ef:`routing-isis`.more.informati |
a1b60 | 6f 6e 20 72 65 6c 61 74 65 64 20 49 47 50 20 20 2d 20 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d | on.related.IGP..-.:ref:`routing- |
a1b80 | 6f 73 70 66 60 00 6e 61 6d 65 2d 73 65 72 76 65 72 00 6e 65 74 62 69 6f 73 2d 6e 61 6d 65 2d 73 | ospf`.name-server.netbios-name-s |
a1ba0 | 65 72 76 65 72 73 00 6e 65 74 77 6f 72 6b 3a 20 6e 65 74 77 6f 72 6b 2f 6e 65 74 6d 61 73 6b 20 | ervers.network:.network/netmask. |
a1bc0 | 74 6f 20 6d 61 74 63 68 20 28 72 65 71 75 69 72 65 73 20 69 6e 76 65 72 73 65 2d 6d 61 74 63 68 | to.match.(requires.inverse-match |
a1be0 | 20 62 65 20 64 65 66 69 6e 65 64 29 20 42 55 47 2c 20 4e 4f 20 69 6e 76 65 72 74 2d 6d 61 74 63 | .be.defined).BUG,.NO.invert-matc |
a1c00 | 68 20 6f 70 74 69 6f 6e 20 69 6e 20 61 63 63 65 73 73 2d 6c 69 73 74 36 00 6e 65 74 77 6f 72 6b | h.option.in.access-list6.network |
a1c20 | 3a 20 6e 65 74 77 6f 72 6b 2f 6e 65 74 6d 61 73 6b 20 74 6f 20 6d 61 74 63 68 20 28 72 65 71 75 | :.network/netmask.to.match.(requ |
a1c40 | 69 72 65 73 20 69 6e 76 65 72 73 65 2d 6d 61 74 63 68 20 62 65 20 64 65 66 69 6e 65 64 29 2e 00 | ires.inverse-match.be.defined).. |
a1c60 | 6e 65 77 73 00 6e 65 78 74 2d 73 65 72 76 65 72 00 6e 6f 2d 61 75 74 6f 6e 6f 6d 6f 75 73 2d 66 | news.next-server.no-autonomous-f |
a1c80 | 6c 61 67 00 6e 6f 2d 6f 6e 2d 6c 69 6e 6b 2d 66 6c 61 67 00 6e 6f 74 66 6f 75 6e 64 00 6e 6f 74 | lag.no-on-link-flag.notfound.not |
a1ca0 | 69 63 65 00 6e 74 70 00 6e 74 70 2d 73 65 72 76 65 72 00 6e 74 70 2d 73 65 72 76 65 72 73 00 6f | ice.ntp.ntp-server.ntp-servers.o |
a1cc0 | 6e 65 20 72 75 6c 65 20 77 69 74 68 20 61 20 4c 41 4e 20 28 69 6e 62 6f 75 6e 64 2d 69 6e 74 65 | ne.rule.with.a.LAN.(inbound-inte |
a1ce0 | 72 66 61 63 65 29 20 61 6e 64 20 74 68 65 20 57 41 4e 20 28 69 6e 74 65 72 66 61 63 65 29 2e 00 | rface).and.the.WAN.(interface).. |
a1d00 | 6f 70 65 6e 76 70 6e 00 6f 73 70 66 36 64 00 6f 73 70 66 64 00 6f 73 70 66 64 20 73 75 70 70 6f | openvpn.ospf6d.ospfd.ospfd.suppo |
a1d20 | 72 74 73 20 4f 70 61 71 75 65 20 4c 53 41 20 3a 72 66 63 3a 60 32 33 37 30 60 20 61 73 20 70 61 | rts.Opaque.LSA.:rfc:`2370`.as.pa |
a1d40 | 72 74 69 61 6c 20 73 75 70 70 6f 72 74 20 66 6f 72 20 4d 50 4c 53 20 54 72 61 66 66 69 63 20 45 | rtial.support.for.MPLS.Traffic.E |
a1d60 | 6e 67 69 6e 65 65 72 69 6e 67 20 4c 53 41 73 2e 20 54 68 65 20 6f 70 61 71 75 65 2d 6c 73 61 20 | ngineering.LSAs..The.opaque-lsa. |
a1d80 | 63 61 70 61 62 69 6c 69 74 79 20 6d 75 73 74 20 62 65 20 65 6e 61 62 6c 65 64 20 69 6e 20 74 68 | capability.must.be.enabled.in.th |
a1da0 | 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 6f 74 68 65 72 2d 63 6f 6e 66 69 67 2d 66 6c | e.configuration..other-config-fl |
a1dc0 | 61 67 00 70 61 67 65 73 20 74 6f 20 73 6f 72 74 00 70 6f 6c 69 63 79 20 61 73 2d 70 61 74 68 2d | ag.pages.to.sort.policy.as-path- |
a1de0 | 6c 69 73 74 00 70 6f 6c 69 63 79 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 00 70 6f 6c 69 63 | list.policy.community-list.polic |
a1e00 | 79 20 65 78 74 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 00 70 6f 6c 69 63 79 20 6c 61 72 67 65 | y.extcommunity-list.policy.large |
a1e20 | 2d 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 00 70 6f 70 2d 73 65 72 76 65 72 00 70 72 65 66 65 | -community-list.pop-server.prefe |
a1e40 | 72 72 65 64 2d 6c 69 66 65 74 69 6d 65 00 70 72 65 66 69 78 2d 6c 69 73 74 2c 20 64 69 73 74 72 | rred-lifetime.prefix-list,.distr |
a1e60 | 69 62 75 74 65 2d 6c 69 73 74 00 70 73 65 75 64 6f 2d 65 74 68 65 72 6e 65 74 00 72 61 6e 67 65 | ibute-list.pseudo-ethernet.range |
a1e80 | 00 72 65 61 63 68 61 62 6c 65 2d 74 69 6d 65 00 72 65 73 65 74 20 63 6f 6d 6d 61 6e 64 73 00 72 | .reachable-time.reset.commands.r |
a1ea0 | 65 74 72 61 6e 73 2d 74 69 6d 65 72 00 72 66 63 33 34 34 32 2d 73 74 61 74 69 63 2d 72 6f 75 74 | etrans-timer.rfc3442-static-rout |
a1ec0 | 65 2c 20 77 69 6e 64 6f 77 73 2d 73 74 61 74 69 63 2d 72 6f 75 74 65 00 72 66 63 33 37 36 38 2d | e,.windows-static-route.rfc3768- |
a1ee0 | 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 00 72 69 67 68 74 20 6c 6f 63 61 6c 5f 69 70 3a 20 31 37 | compatibility.right.local_ip:.17 |
a1f00 | 32 2e 31 38 2e 32 30 32 2e 31 30 20 23 20 72 69 67 68 74 20 73 69 64 65 20 57 41 4e 20 49 50 00 | 2.18.202.10.#.right.side.WAN.IP. |
a1f20 | 72 69 67 68 74 20 6c 6f 63 61 6c 5f 69 70 3a 20 60 32 30 33 2e 30 2e 31 31 33 2e 32 60 20 23 20 | right.local_ip:.`203.0.113.2`.#. |
a1f40 | 72 65 6d 6f 74 65 20 6f 66 66 69 63 65 20 73 69 64 65 20 57 41 4e 20 49 50 00 72 69 67 68 74 20 | remote.office.side.WAN.IP.right. |
a1f60 | 73 75 62 6e 65 74 3a 20 60 31 30 2e 30 2e 30 2e 30 2f 32 34 60 20 73 69 74 65 32 2c 72 65 6d 6f | subnet:.`10.0.0.0/24`.site2,remo |
a1f80 | 74 65 20 6f 66 66 69 63 65 20 73 69 64 65 00 72 69 70 64 00 72 6f 75 6e 64 2d 72 6f 62 69 6e 00 | te.office.side.ripd.round-robin. |
a1fa0 | 72 6f 75 74 65 2d 6d 61 70 00 72 6f 75 74 65 72 73 00 73 46 6c 6f 77 00 73 46 6c 6f 77 20 69 73 | route-map.routers.sFlow.sFlow.is |
a1fc0 | 20 61 20 74 65 63 68 6e 6f 6c 6f 67 79 20 74 68 61 74 20 65 6e 61 62 6c 65 73 20 6d 6f 6e 69 74 | .a.technology.that.enables.monit |
a1fe0 | 6f 72 69 6e 67 20 6f 66 20 6e 65 74 77 6f 72 6b 20 74 72 61 66 66 69 63 20 62 79 20 73 65 6e 64 | oring.of.network.traffic.by.send |
a2000 | 69 6e 67 20 73 61 6d 70 6c 65 64 20 70 61 63 6b 65 74 73 20 74 6f 20 61 20 63 6f 6c 6c 65 63 74 | ing.sampled.packets.to.a.collect |
a2020 | 6f 72 20 64 65 76 69 63 65 2e 00 73 65 63 75 72 69 74 79 00 73 65 72 76 65 72 20 65 78 61 6d 70 | or.device..security.server.examp |
a2040 | 6c 65 00 73 65 72 76 65 72 2d 69 64 65 6e 74 69 66 69 65 72 00 73 65 74 20 61 20 64 65 73 74 69 | le.server-identifier.set.a.desti |
a2060 | 6e 61 74 69 6f 6e 20 61 6e 64 2f 6f 72 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2e 20 41 63 | nation.and/or.source.address..Ac |
a2080 | 63 65 70 74 65 64 20 69 6e 70 75 74 3a 00 73 68 61 32 35 36 20 48 61 73 68 65 73 00 73 68 6f 77 | cepted.input:.sha256.Hashes.show |
a20a0 | 20 63 6f 6d 6d 61 6e 64 73 00 73 69 61 64 64 72 00 73 6c 6f 77 3a 20 52 65 71 75 65 73 74 20 70 | .commands.siaddr.slow:.Request.p |
a20c0 | 61 72 74 6e 65 72 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 4c 41 43 50 44 55 73 20 65 76 65 72 79 | artner.to.transmit.LACPDUs.every |
a20e0 | 20 33 30 20 73 65 63 6f 6e 64 73 00 73 6d 74 70 2d 73 65 72 76 65 72 00 73 6f 66 74 77 61 72 65 | .30.seconds.smtp-server.software |
a2100 | 20 66 69 6c 74 65 72 73 20 63 61 6e 20 65 61 73 69 6c 79 20 62 65 20 61 64 64 65 64 20 74 6f 20 | .filters.can.easily.be.added.to. |
a2120 | 68 61 73 68 20 6f 76 65 72 20 6e 65 77 20 70 72 6f 74 6f 63 6f 6c 73 2c 00 73 6f 75 72 63 65 2d | hash.over.new.protocols,.source- |
a2140 | 68 61 73 68 69 6e 67 00 73 70 6f 6b 65 30 31 2d 73 70 6f 6b 65 30 34 00 73 70 6f 6b 65 30 35 00 | hashing.spoke01-spoke04.spoke05. |
a2160 | 73 74 61 74 69 63 2d 6d 61 70 70 69 6e 67 00 73 74 61 74 69 63 2d 72 6f 75 74 65 00 73 74 72 69 | static-mapping.static-route.stri |
a2180 | 63 74 3a 20 45 61 63 68 20 69 6e 63 6f 6d 69 6e 67 20 70 61 63 6b 65 74 20 69 73 20 74 65 73 74 | ct:.Each.incoming.packet.is.test |
a21a0 | 65 64 20 61 67 61 69 6e 73 74 20 74 68 65 20 46 49 42 20 61 6e 64 20 69 66 20 74 68 65 20 69 6e | ed.against.the.FIB.and.if.the.in |
a21c0 | 74 65 72 66 61 63 65 20 69 73 20 6e 6f 74 20 74 68 65 20 62 65 73 74 20 72 65 76 65 72 73 65 20 | terface.is.not.the.best.reverse. |
a21e0 | 70 61 74 68 20 74 68 65 20 70 61 63 6b 65 74 20 63 68 65 63 6b 20 77 69 6c 6c 20 66 61 69 6c 2e | path.the.packet.check.will.fail. |
a2200 | 20 42 79 20 64 65 66 61 75 6c 74 20 66 61 69 6c 65 64 20 70 61 63 6b 65 74 73 20 61 72 65 20 64 | .By.default.failed.packets.are.d |
a2220 | 69 73 63 61 72 64 65 64 2e 00 73 75 62 6e 65 74 2d 6d 61 73 6b 00 73 79 73 6c 6f 67 00 74 61 69 | iscarded..subnet-mask.syslog.tai |
a2240 | 6c 00 74 63 5f 20 69 73 20 61 20 70 6f 77 65 72 66 75 6c 20 74 6f 6f 6c 20 66 6f 72 20 54 72 61 | l.tc_.is.a.powerful.tool.for.Tra |
a2260 | 66 66 69 63 20 43 6f 6e 74 72 6f 6c 20 66 6f 75 6e 64 20 61 74 20 74 68 65 20 4c 69 6e 75 78 20 | ffic.Control.found.at.the.Linux. |
a2280 | 6b 65 72 6e 65 6c 2e 20 48 6f 77 65 76 65 72 2c 20 69 74 73 20 63 6f 6e 66 69 67 75 72 61 74 69 | kernel..However,.its.configurati |
a22a0 | 6f 6e 20 69 73 20 6f 66 74 65 6e 20 63 6f 6e 73 69 64 65 72 65 64 20 61 20 63 75 6d 62 65 72 73 | on.is.often.considered.a.cumbers |
a22c0 | 6f 6d 65 20 74 61 73 6b 2e 20 46 6f 72 74 75 6e 61 74 65 6c 79 2c 20 56 79 4f 53 20 65 61 73 65 | ome.task..Fortunately,.VyOS.ease |
a22e0 | 73 20 74 68 65 20 6a 6f 62 20 74 68 72 6f 75 67 68 20 69 74 73 20 43 4c 49 2c 20 77 68 69 6c 65 | s.the.job.through.its.CLI,.while |
a2300 | 20 75 73 69 6e 67 20 60 60 74 63 60 60 20 61 73 20 62 61 63 6b 65 6e 64 2e 00 74 66 74 70 2d 73 | .using.``tc``.as.backend..tftp-s |
a2320 | 65 72 76 65 72 2d 6e 61 6d 65 00 74 68 69 73 20 6f 70 74 69 6f 6e 20 61 6c 6c 6f 77 73 20 74 6f | erver-name.this.option.allows.to |
a2340 | 20 63 6f 6e 66 69 67 75 72 65 20 70 72 65 66 69 78 2d 73 69 64 20 6f 6e 20 53 52 2e 20 54 68 65 | .configure.prefix-sid.on.SR..The |
a2360 | 20 e2 80 98 6e 6f 2d 70 68 70 2d 66 6c 61 67 e2 80 99 20 6d 65 61 6e 73 20 4e 4f 20 50 65 6e 75 | ....no-php-flag....means.NO.Penu |
a2380 | 6c 74 69 6d 61 74 65 20 48 6f 70 20 50 6f 70 70 69 6e 67 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 | ltimate.Hop.Popping.that.allows. |
a23a0 | 53 52 20 6e 6f 64 65 20 74 6f 20 72 65 71 75 65 73 74 20 74 6f 20 69 74 73 20 6e 65 69 67 68 62 | SR.node.to.request.to.its.neighb |
a23c0 | 6f 72 20 74 6f 20 6e 6f 74 20 70 6f 70 20 74 68 65 20 6c 61 62 65 6c 2e 20 54 68 65 20 e2 80 98 | or.to.not.pop.the.label..The.... |
a23e0 | 65 78 70 6c 69 63 69 74 2d 6e 75 6c 6c e2 80 99 20 66 6c 61 67 20 61 6c 6c 6f 77 73 20 53 52 20 | explicit-null....flag.allows.SR. |
a2400 | 6e 6f 64 65 20 74 6f 20 72 65 71 75 65 73 74 20 74 6f 20 69 74 73 20 6e 65 69 67 68 62 6f 72 20 | node.to.request.to.its.neighbor. |
a2420 | 74 6f 20 73 65 6e 64 20 49 50 20 70 61 63 6b 65 74 20 77 69 74 68 20 74 68 65 20 45 58 50 4c 49 | to.send.IP.packet.with.the.EXPLI |
a2440 | 43 49 54 2d 4e 55 4c 4c 20 6c 61 62 65 6c 2e 20 54 68 65 20 e2 80 98 6e 2d 66 6c 61 67 2d 63 6c | CIT-NULL.label..The....n-flag-cl |
a2460 | 65 61 72 e2 80 99 20 6f 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 65 78 70 | ear....option.can.be.used.to.exp |
a2480 | 6c 69 63 69 74 6c 79 20 63 6c 65 61 72 20 74 68 65 20 4e 6f 64 65 20 66 6c 61 67 20 74 68 61 74 | licitly.clear.the.Node.flag.that |
a24a0 | 20 69 73 20 73 65 74 20 62 79 20 64 65 66 61 75 6c 74 20 66 6f 72 20 50 72 65 66 69 78 2d 53 49 | .is.set.by.default.for.Prefix-SI |
a24c0 | 44 73 20 61 73 73 6f 63 69 61 74 65 64 20 74 6f 20 6c 6f 6f 70 62 61 63 6b 20 61 64 64 72 65 73 | Ds.associated.to.loopback.addres |
a24e0 | 73 65 73 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 6e 65 63 65 73 73 61 72 79 20 74 6f | ses..This.option.is.necessary.to |
a2500 | 20 63 6f 6e 66 69 67 75 72 65 20 41 6e 79 63 61 73 74 2d 53 49 44 73 2e 00 74 69 6d 65 2d 6f 66 | .configure.Anycast-SIDs..time-of |
a2520 | 66 73 65 74 00 74 69 6d 65 2d 73 65 72 76 65 72 00 74 69 6d 65 2d 73 65 72 76 65 72 73 00 74 75 | fset.time-server.time-servers.tu |
a2540 | 6e 6e 65 6c 00 75 73 65 20 36 20 28 6c 6f 63 61 6c 36 29 00 75 73 65 20 74 68 69 73 20 63 6f 6d | nnel.use.6.(local6).use.this.com |
a2560 | 6d 61 6e 64 20 74 6f 20 63 68 65 63 6b 20 69 66 20 74 68 65 72 65 20 69 73 20 61 6e 20 49 6e 74 | mand.to.check.if.there.is.an.Int |
a2580 | 65 6c c2 ae 20 51 41 54 20 73 75 70 70 6f 72 74 65 64 20 50 72 6f 63 65 73 73 6f 72 20 69 6e 20 | el...QAT.supported.Processor.in. |
a25a0 | 79 6f 75 72 20 73 79 73 74 65 6d 2e 00 75 73 65 72 00 75 75 63 70 00 76 61 6c 69 64 00 76 61 6c | your.system..user.uucp.valid.val |
a25c0 | 69 64 2d 6c 69 66 65 74 69 6d 65 00 76 65 74 68 20 69 6e 74 65 72 66 61 63 65 73 20 6e 65 65 64 | id-lifetime.veth.interfaces.need |
a25e0 | 20 74 6f 20 62 65 20 63 72 65 61 74 65 64 20 69 6e 20 70 61 69 72 73 20 2d 20 69 74 27 73 20 63 | .to.be.created.in.pairs.-.it's.c |
a2600 | 61 6c 6c 65 64 20 74 68 65 20 70 65 65 72 20 6e 61 6d 65 00 76 78 6c 61 6e 00 77 61 72 6e 69 6e | alled.the.peer.name.vxlan.warnin |
a2620 | 67 00 77 65 20 64 65 73 63 72 69 62 65 64 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | g.we.described.the.configuration |
a2640 | 20 53 52 20 49 53 49 53 20 2f 20 53 52 20 4f 53 50 46 20 75 73 69 6e 67 20 32 20 63 6f 6e 6e 65 | .SR.ISIS./.SR.OSPF.using.2.conne |
a2660 | 63 74 65 64 20 77 69 74 68 20 74 68 65 6d 20 74 6f 20 73 68 61 72 65 20 6c 61 62 65 6c 20 69 6e | cted.with.them.to.share.label.in |
a2680 | 66 6f 72 6d 61 74 69 6f 6e 2e 00 77 65 69 67 68 74 65 64 2d 6c 65 61 73 74 2d 63 6f 6e 6e 65 63 | formation..weighted-least-connec |
a26a0 | 74 69 6f 6e 00 77 65 69 67 68 74 65 64 2d 72 6f 75 6e 64 2d 72 6f 62 69 6e 00 77 68 69 6c 65 20 | tion.weighted-round-robin.while. |
a26c0 | 61 20 2a 62 79 74 65 2a 20 69 73 20 77 72 69 74 74 65 6e 20 61 73 20 61 20 73 69 6e 67 6c 65 20 | a.*byte*.is.written.as.a.single. |
a26e0 | 2a 2a 62 2a 2a 2e 00 77 69 6e 73 2d 73 65 72 76 65 72 00 77 69 72 65 67 75 61 72 64 00 77 69 72 | **b**..wins-server.wireguard.wir |
a2700 | 65 6c 65 73 73 00 77 69 74 68 20 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 73 79 73 74 65 6d 20 61 | eless.with.:cfgcmd:`set.system.a |
a2720 | 63 63 65 6c 65 72 61 74 69 6f 6e 20 71 61 74 60 20 6f 6e 20 62 6f 74 68 20 73 79 73 74 65 6d 73 | cceleration.qat`.on.both.systems |
a2740 | 20 74 68 65 20 62 61 6e 64 77 69 64 74 68 20 69 6e 63 72 65 61 73 65 73 2e 00 77 70 61 64 2d 75 | .the.bandwidth.increases..wpad-u |
a2760 | 72 6c 00 77 70 61 64 2d 75 72 6c 2c 20 77 70 61 64 2d 75 72 6c 20 63 6f 64 65 20 32 35 32 20 3d | rl.wpad-url,.wpad-url.code.252.= |
a2780 | 20 74 65 78 74 00 77 77 61 6e 00 7a 65 62 72 61 00 4d 49 4d 45 2d 56 65 72 73 69 6f 6e 3a 20 31 | .text.wwan.zebra.MIME-Version:.1 |
a27a0 | 2e 30 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 | .0.Content-Type:.text/plain;.cha |
a27c0 | 72 73 65 74 3d 55 54 46 2d 38 0a 43 6f 6e 74 65 6e 74 2d 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f | rset=UTF-8.Content-Transfer-Enco |
a27e0 | 64 69 6e 67 3a 20 38 62 69 74 0a 58 2d 47 65 6e 65 72 61 74 6f 72 3a 20 4c 6f 63 61 6c 61 7a 79 | ding:.8bit.X-Generator:.Localazy |
a2800 | 20 28 68 74 74 70 73 3a 2f 2f 6c 6f 63 61 6c 61 7a 79 2e 63 6f 6d 29 0a 50 72 6f 6a 65 63 74 2d | .(https://localazy.com).Project- |
a2820 | 49 64 2d 56 65 72 73 69 6f 6e 3a 20 0a 4c 61 6e 67 75 61 67 65 3a 20 70 74 0a 50 6c 75 72 61 6c | Id-Version:..Language:.pt.Plural |
a2840 | 2d 46 6f 72 6d 73 3a 20 6e 70 6c 75 72 61 6c 73 3d 32 3b 20 70 6c 75 72 61 6c 3d 28 6e 3e 3d 30 | -Forms:.nplurals=2;.plural=(n>=0 |
a2860 | 20 26 26 20 6e 3c 3d 31 29 20 3f 20 30 20 3a 20 31 3b 0a 00 21 3c 68 3a 68 3a 68 3a 68 3a 68 3a | .&&.n<=1).?.0.:.1;..!<h:h:h:h:h: |
a2880 | 68 3a 68 3a 68 2f 78 3e 3a 20 4d 61 74 63 68 20 65 76 65 72 79 74 68 69 6e 67 20 65 78 63 65 70 | h:h:h/x>:.Match.everything.excep |
a28a0 | 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 2e 00 21 3c 68 3a 68 3a 68 3a | t.the.specified.prefix..!<h:h:h: |
a28c0 | 68 3a 68 3a 68 3a 68 3a 68 3e 2d 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 3a 20 4d 61 | h:h:h:h:h>-<h:h:h:h:h:h:h:h>:.Ma |
a28e0 | 74 63 68 20 65 76 65 72 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 66 | tch.everything.except.the.specif |
a2900 | 69 65 64 20 72 61 6e 67 65 2e 00 21 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 3a 20 4d | ied.range..!<h:h:h:h:h:h:h:h>:.M |
a2920 | 61 74 63 68 20 65 76 65 72 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 | atch.everything.except.the.speci |
a2940 | 66 69 65 64 20 61 64 64 72 65 73 73 2e 00 21 3c 78 2e 78 2e 78 2e 78 2f 78 3e 3a 20 4d 61 74 63 | fied.address..!<x.x.x.x/x>:.Matc |
a2960 | 68 20 65 76 65 72 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 66 69 65 | h.everything.except.the.specifie |
a2980 | 64 20 73 75 62 6e 65 74 2e 00 21 3c 78 2e 78 2e 78 2e 78 3e 2d 3c 78 2e 78 2e 78 2e 78 3e 3a 20 | d.subnet..!<x.x.x.x>-<x.x.x.x>:. |
a29a0 | 4d 61 74 63 68 20 65 76 65 72 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 | Match.everything.except.the.spec |
a29c0 | 69 66 69 65 64 20 72 61 6e 67 65 2e 00 21 3c 78 2e 78 2e 78 2e 78 3e 3a 20 4d 61 74 63 68 20 65 | ified.range..!<x.x.x.x>:.Match.e |
a29e0 | 76 65 72 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 | verything.except.the.specified.a |
a2a00 | 64 64 72 65 73 73 2e 00 22 4d 61 6e 61 67 65 64 20 61 64 64 72 65 73 73 20 63 6f 6e 66 69 67 75 | ddress.."Managed.address.configu |
a2a20 | 72 61 74 69 6f 6e 22 20 66 6c 61 67 00 22 4f 74 68 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | ration".flag."Other.configuratio |
a2a40 | 6e 22 20 66 6c 61 67 00 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 c3 a4 23 23 23 | n".flag.###################..### |
a2a60 | 23 23 23 23 23 23 23 23 23 23 20 46 6c 6f 77 74 61 62 6c 65 73 20 46 69 72 65 77 61 6c 6c 20 43 | ##########.Flowtables.Firewall.C |
a2a80 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 | onfiguration.################### |
a2aa0 | 23 23 23 23 23 23 23 23 23 23 23 23 23 23 00 28 54 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 66 | ##############.(This.can.be.usef |
a2ac0 | 75 6c 20 77 68 65 6e 20 61 20 63 61 6c 6c 65 64 20 73 65 72 76 69 63 65 20 68 61 73 20 6d 61 6e | ul.when.a.called.service.has.man |
a2ae0 | 79 20 61 6e 64 2f 6f 72 20 6f 66 74 65 6e 20 63 68 61 6e 67 69 6e 67 20 64 65 73 74 69 6e 61 74 | y.and/or.often.changing.destinat |
a2b00 | 69 6f 6e 20 61 64 64 72 65 73 73 65 73 20 2d 20 65 2e 67 2e 20 4e 65 74 66 6c 69 78 2e 29 00 2a | ion.addresses.-.e.g..Netflix.).* |
a2b20 | 2a 31 2d 32 35 34 2a 2a 20 e2 80 93 20 69 6e 74 65 72 66 61 63 65 73 20 77 69 74 68 20 61 20 63 | *1-254**.....interfaces.with.a.c |
a2b40 | 68 61 6e 6e 65 6c 20 6e 75 6d 62 65 72 20 69 6e 74 65 72 66 65 72 65 20 77 69 74 68 20 69 6e 74 | hannel.number.interfere.with.int |
a2b60 | 65 72 66 65 72 69 6e 67 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 69 6e 74 65 72 66 61 63 | erfering.interfaces.and.interfac |
a2b80 | 65 73 20 77 69 74 68 20 74 68 65 20 73 61 6d 65 20 63 68 61 6e 6e 65 6c 20 6e 75 6d 62 65 72 2e | es.with.the.same.channel.number. |
a2ba0 | 20 2a 2a 69 6e 74 65 72 66 65 72 69 6e 67 2a 2a 20 e2 80 93 20 69 6e 74 65 72 66 65 72 69 6e 67 | .**interfering**.....interfering |
a2bc0 | 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 61 73 73 75 6d 65 64 20 74 6f 20 69 6e 74 65 72 | .interfaces.are.assumed.to.inter |
a2be0 | 66 65 72 65 20 77 69 74 68 20 61 6c 6c 20 6f 74 68 65 72 20 63 68 61 6e 6e 65 6c 73 20 65 78 63 | fere.with.all.other.channels.exc |
a2c00 | 65 70 74 20 6e 6f 6e 69 6e 74 65 72 66 65 72 69 6e 67 20 63 68 61 6e 6e 65 6c 73 2e 20 2a 2a 6e | ept.noninterfering.channels..**n |
a2c20 | 6f 6e 69 6e 74 65 72 66 65 72 69 6e 67 2a 2a 20 e2 80 93 20 6e 6f 6e 69 6e 74 65 72 66 65 72 69 | oninterfering**.....noninterferi |
a2c40 | 6e 67 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 61 73 73 75 6d 65 64 20 74 6f 20 6f 6e 6c | ng.interfaces.are.assumed.to.onl |
a2c60 | 79 20 69 6e 74 65 72 66 65 72 65 20 77 69 74 68 20 74 68 65 6d 73 65 6c 76 65 73 2e 00 2a 2a 31 | y.interfere.with.themselves..**1 |
a2c80 | 2e 20 43 6f 6e 66 69 72 6d 20 49 50 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 62 65 74 77 65 65 | ..Confirm.IP.connectivity.betwee |
a2ca0 | 6e 20 74 75 6e 6e 65 6c 20 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 20 61 6e 64 20 72 65 6d 6f | n.tunnel.source-address.and.remo |
a2cc0 | 74 65 3a 2a 2a 00 2a 2a 31 30 2a 2a 20 2d 20 3a 61 62 62 72 3a 60 49 50 46 49 58 20 28 49 50 20 | te:**.**10**.-.:abbr:`IPFIX.(IP. |
a2ce0 | 46 6c 6f 77 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 45 78 70 6f 72 74 29 60 20 61 73 20 70 65 72 | Flow.Information.Export)`.as.per |
a2d00 | 20 3a 72 66 63 3a 60 33 39 31 37 60 00 2a 2a 32 2e 20 43 6f 6e 66 69 72 6d 20 74 68 65 20 6c 69 | .:rfc:`3917`.**2..Confirm.the.li |
a2d20 | 6e 6b 20 74 79 70 65 20 68 61 73 20 62 65 65 6e 20 73 65 74 20 74 6f 20 47 52 45 3a 2a 2a 00 2a | nk.type.has.been.set.to.GRE:**.* |
a2d40 | 2a 33 2e 20 43 6f 6e 66 69 72 6d 20 49 50 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 61 63 72 6f | *3..Confirm.IP.connectivity.acro |
a2d60 | 73 73 20 74 68 65 20 74 75 6e 6e 65 6c 3a 2a 2a 00 2a 2a 35 2a 2a 20 2d 20 4d 6f 73 74 20 63 6f | ss.the.tunnel:**.**5**.-.Most.co |
a2d80 | 6d 6d 6f 6e 20 76 65 72 73 69 6f 6e 2c 20 62 75 74 20 72 65 73 74 72 69 63 74 65 64 20 74 6f 20 | mmon.version,.but.restricted.to. |
a2da0 | 49 50 76 34 20 66 6c 6f 77 73 20 6f 6e 6c 79 00 2a 2a 39 2a 2a 20 2d 20 4e 65 74 46 6c 6f 77 20 | IPv4.flows.only.**9**.-.NetFlow. |
a2dc0 | 76 65 72 73 69 6f 6e 20 39 20 28 64 65 66 61 75 6c 74 29 00 2a 2a 41 53 20 70 61 74 68 20 6c 65 | version.9.(default).**AS.path.le |
a2de0 | 6e 67 74 68 20 63 68 65 63 6b 2a 2a 00 2a 2a 41 63 74 69 76 65 2d 61 63 74 69 76 65 2a 2a 3a 20 | ngth.check**.**Active-active**:. |
a2e00 | 62 6f 74 68 20 44 48 43 50 20 73 65 72 76 65 72 73 20 77 69 6c 6c 20 72 65 73 70 6f 6e 64 20 74 | both.DHCP.servers.will.respond.t |
a2e20 | 6f 20 44 48 43 50 20 72 65 71 75 65 73 74 73 2e 20 49 66 20 60 60 6d 6f 64 65 60 60 20 69 73 20 | o.DHCP.requests..If.``mode``.is. |
a2e40 | 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 69 73 20 69 73 20 74 68 65 20 64 65 66 61 75 6c 74 | not.defined,.this.is.the.default |
a2e60 | 20 62 65 68 61 76 69 6f 72 2e 00 2a 2a 41 63 74 69 76 65 2d 70 61 73 73 69 76 65 2a 2a 3a 20 6f | .behavior..**Active-passive**:.o |
a2e80 | 6e 6c 79 20 60 60 70 72 69 6d 61 72 79 60 60 20 73 65 72 76 65 72 20 77 69 6c 6c 20 72 65 73 70 | nly.``primary``.server.will.resp |
a2ea0 | 6f 6e 64 20 74 6f 20 44 48 43 50 20 72 65 71 75 65 73 74 73 2e 20 49 66 20 74 68 69 73 20 73 65 | ond.to.DHCP.requests..If.this.se |
a2ec0 | 72 76 65 72 20 67 6f 65 73 20 6f 66 66 6c 69 6e 65 2c 20 74 68 65 6e 20 60 60 73 65 63 6f 6e 64 | rver.goes.offline,.then.``second |
a2ee0 | 61 72 79 60 60 20 73 65 72 76 65 72 20 77 69 6c 6c 20 74 61 6b 65 20 70 6c 61 63 65 2e 00 2a 2a | ary``.server.will.take.place..** |
a2f00 | 41 6c 72 65 61 64 79 2d 73 65 6c 65 63 74 65 64 20 65 78 74 65 72 6e 61 6c 20 63 68 65 63 6b 2a | Already-selected.external.check* |
a2f20 | 2a 00 2a 2a 41 70 70 6c 69 65 73 20 74 6f 3a 2a 2a 20 49 6e 62 6f 75 6e 64 20 74 72 61 66 66 69 | *.**Applies.to:**.Inbound.traffi |
a2f40 | 63 2e 00 2a 2a 41 70 70 6c 69 65 73 20 74 6f 3a 2a 2a 20 4f 75 74 62 6f 75 6e 64 20 54 72 61 66 | c..**Applies.to:**.Outbound.Traf |
a2f60 | 66 69 63 2e 00 2a 2a 41 70 70 6c 69 65 73 20 74 6f 3a 2a 2a 20 4f 75 74 62 6f 75 6e 64 20 74 72 | fic..**Applies.to:**.Outbound.tr |
a2f80 | 61 66 66 69 63 2e 00 2a 2a 41 70 70 6c 79 20 74 68 65 20 74 72 61 66 66 69 63 20 70 6f 6c 69 63 | affic..**Apply.the.traffic.polic |
a2fa0 | 79 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 69 6e 67 72 65 73 73 20 6f 72 20 65 67 72 | y.to.an.interface.ingress.or.egr |
a2fc0 | 65 73 73 2a 2a 2e 00 2a 2a 42 72 69 64 67 65 20 50 6f 72 74 3f 2a 2a 3a 20 63 68 6f 6f 73 65 20 | ess**..**Bridge.Port?**:.choose. |
a2fe0 | 61 70 70 72 6f 70 69 61 74 65 20 70 61 74 68 20 62 61 73 65 64 20 6f 6e 20 69 66 20 69 6e 74 65 | appropiate.path.based.on.if.inte |
a3000 | 72 66 61 63 65 20 77 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 | rface.were.the.packet.was.receiv |
a3020 | 65 64 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c 20 6f 72 20 6e 6f 74 2e 00 | ed.is.part.of.a.bridge,.or.not.. |
a3040 | 2a 2a 42 72 69 64 67 65 20 50 6f 72 74 3f 2a 2a 3a 20 63 68 6f 6f 73 65 20 61 70 70 72 6f 70 72 | **Bridge.Port?**:.choose.appropr |
a3060 | 69 61 74 65 20 70 61 74 68 20 62 61 73 65 64 20 6f 6e 20 77 68 65 74 68 65 72 20 69 6e 74 65 72 | iate.path.based.on.whether.inter |
a3080 | 66 61 63 65 20 77 68 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 | face.where.the.packet.was.receiv |
a30a0 | 65 64 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c 20 6f 72 20 6e 6f 74 2e 00 | ed.is.part.of.a.bridge,.or.not.. |
a30c0 | 2a 2a 43 69 73 63 6f 20 49 4f 53 20 52 6f 75 74 65 72 3a 2a 2a 00 2a 2a 43 6c 69 65 6e 74 20 49 | **Cisco.IOS.Router:**.**Client.I |
a30e0 | 50 20 61 64 64 72 65 73 73 20 76 69 61 20 49 50 20 72 61 6e 67 65 20 64 65 66 69 6e 69 74 69 6f | P.address.via.IP.range.definitio |
a3100 | 6e 2a 2a 00 2a 2a 43 6c 69 65 6e 74 20 49 50 20 73 75 62 6e 65 74 73 20 76 69 61 20 43 49 44 52 | n**.**Client.IP.subnets.via.CIDR |
a3120 | 20 6e 6f 74 61 74 69 6f 6e 2a 2a 00 2a 2a 43 6c 75 73 74 65 72 2d 4c 69 73 74 20 6c 65 6e 67 74 | .notation**.**Cluster-List.lengt |
a3140 | 68 20 63 68 65 63 6b 2a 2a 00 2a 2a 43 6f 6e 6e 74 72 61 63 6b 20 49 67 6e 6f 72 65 2a 2a 3a 20 | h.check**.**Conntrack.Ignore**:. |
a3160 | 72 75 6c 65 73 20 64 65 66 69 6e 65 64 20 75 6e 64 65 72 20 60 60 73 65 74 20 73 79 73 74 65 6d | rules.defined.under.``set.system |
a3180 | 20 63 6f 6e 6e 74 72 61 63 6b 20 69 67 6e 6f 72 65 20 5b 69 70 76 34 20 7c 20 69 70 76 36 5d 20 | .conntrack.ignore.[ipv4.|.ipv6]. |
a31a0 | 2e 2e 2e 60 60 2e 00 2a 2a 43 72 65 61 74 65 20 61 20 74 72 61 66 66 69 63 20 70 6f 6c 69 63 79 | ...``..**Create.a.traffic.policy |
a31c0 | 2a 2a 2e 00 2a 2a 44 48 43 50 28 76 36 29 2a 2a 00 2a 2a 44 48 43 50 76 36 20 50 72 65 66 69 78 | **..**DHCP(v6)**.**DHCPv6.Prefix |
a31e0 | 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 50 44 29 2a 2a 00 2a 2a 44 65 73 74 69 6e 61 74 69 6f 6e | .Delegation.(PD)**.**Destination |
a3200 | 20 4e 41 54 2a 2a 3a 20 72 75 6c 65 73 20 64 65 66 69 6e 65 64 20 75 6e 64 65 72 20 60 60 73 65 | .NAT**:.rules.defined.under.``se |
a3220 | 74 20 5b 6e 61 74 20 7c 20 6e 61 74 36 36 5d 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 2e 2e 60 60 | t.[nat.|.nat66].destination...`` |
a3240 | 2e 00 2a 2a 44 65 73 74 69 6e 61 74 69 6f 6e 20 69 73 20 74 68 65 20 72 6f 75 74 65 72 3f 2a 2a | ..**Destination.is.the.router?** |
a3260 | 3a 20 63 68 6f 6f 73 65 20 61 70 70 72 6f 70 69 61 74 65 20 70 61 74 68 20 62 61 73 65 64 20 6f | :.choose.appropiate.path.based.o |
a3280 | 6e 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 72 61 6e 73 69 | n.destination.IP.address..Transi |
a32a0 | 74 20 66 6f 72 77 61 72 64 20 63 6f 6e 74 69 6e 75 6e 65 73 20 74 6f 20 2a 2a 66 6f 72 77 61 72 | t.forward.continunes.to.**forwar |
a32c0 | 64 2a 2a 2c 20 77 68 69 6c 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 64 65 73 74 69 6e 61 74 | d**,.while.traffic.that.destinat |
a32e0 | 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 | ion.IP.address.is.configured.on. |
a3300 | 74 68 65 20 72 6f 75 74 65 72 20 63 6f 6e 74 69 6e 75 65 73 20 74 6f 20 2a 2a 69 6e 70 75 74 2a | the.router.continues.to.**input* |
a3320 | 2a 2e 00 2a 2a 44 65 73 74 69 6e 61 74 69 6f 6e 20 69 73 20 74 68 65 20 72 6f 75 74 65 72 3f 2a | *..**Destination.is.the.router?* |
a3340 | 2a 3a 20 63 68 6f 6f 73 65 20 61 70 70 72 6f 70 72 69 61 74 65 20 70 61 74 68 20 62 61 73 65 64 | *:.choose.appropriate.path.based |
a3360 | 20 6f 6e 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 72 61 6e | .on.destination.IP.address..Tran |
a3380 | 73 69 74 20 66 6f 72 77 61 72 64 20 63 6f 6e 74 69 6e 75 65 73 20 74 6f 20 2a 2a 66 6f 72 77 61 | sit.forward.continues.to.**forwa |
a33a0 | 72 64 2a 2a 2c 20 77 68 69 6c 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 64 65 73 74 69 6e 61 | rd**,.while.traffic.that.destina |
a33c0 | 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e | tion.IP.address.is.configured.on |
a33e0 | 20 74 68 65 20 72 6f 75 74 65 72 20 63 6f 6e 74 69 6e 75 65 73 20 74 6f 20 2a 2a 69 6e 70 75 74 | .the.router.continues.to.**input |
a3400 | 2a 2a 2e 00 2a 2a 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 75 6e 64 65 72 20 64 65 76 65 6c 6f | **..**Documentation.under.develo |
a3420 | 70 6d 65 6e 74 2a 2a 00 2a 2a 45 74 68 65 72 6e 65 74 20 28 70 72 6f 74 6f 63 6f 6c 2c 20 64 65 | pment**.**Ethernet.(protocol,.de |
a3440 | 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6f 72 20 73 6f 75 72 63 65 20 61 64 64 72 | stination.address.or.source.addr |
a3460 | 65 73 73 29 2a 2a 00 2a 2a 45 78 61 6d 70 6c 65 3a 2a 2a 00 2a 2a 45 78 74 65 72 6e 61 6c 20 63 | ess)**.**Example:**.**External.c |
a3480 | 68 65 63 6b 2a 2a 00 2a 2a 46 69 72 65 77 61 6c 6c 20 6d 61 72 6b 2a 2a 00 2a 2a 46 6c 6f 77 74 | heck**.**Firewall.mark**.**Flowt |
a34a0 | 61 62 6c 65 20 52 65 66 65 72 65 6e 63 65 3a 2a 2a 20 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 6b | able.Reference:**.https://docs.k |
a34c0 | 65 72 6e 65 6c 2e 6f 72 67 2f 6e 65 74 77 6f 72 6b 69 6e 67 2f 6e 66 5f 66 6c 6f 77 74 61 62 6c | ernel.org/networking/nf_flowtabl |
a34e0 | 65 2e 68 74 6d 6c 00 2a 2a 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2a 2a 20 | e.html.**For.more.information**. |
a3500 | 6f 66 20 4e 65 74 66 69 6c 74 65 72 20 68 6f 6f 6b 73 20 61 6e 64 20 4c 69 6e 75 78 20 6e 65 74 | of.Netfilter.hooks.and.Linux.net |
a3520 | 77 6f 72 6b 69 6e 67 20 70 61 63 6b 65 74 20 66 6c 6f 77 73 20 63 61 6e 20 62 65 20 66 6f 75 6e | working.packet.flows.can.be.foun |
a3540 | 64 20 69 6e 20 60 4e 65 74 66 69 6c 74 65 72 2d 48 6f 6f 6b 73 20 3c 68 74 74 70 73 3a 2f 2f 77 | d.in.`Netfilter-Hooks.<https://w |
a3560 | 69 6b 69 2e 6e 66 74 61 62 6c 65 73 2e 6f 72 67 2f 77 69 6b 69 2d 6e 66 74 61 62 6c 65 73 2f 69 | iki.nftables.org/wiki-nftables/i |
a3580 | 6e 64 65 78 2e 70 68 70 2f 4e 65 74 66 69 6c 74 65 72 5f 68 6f 6f 6b 73 3e 60 5f 00 2a 2a 46 6f | ndex.php/Netfilter_hooks>`_.**Fo |
a35a0 | 72 77 61 72 64 20 28 42 72 69 64 67 65 29 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 | rward.(Bridge)**:.stage.where.tr |
a35c0 | 61 66 66 69 63 20 74 68 61 74 20 69 73 20 74 72 61 73 73 70 61 73 69 6e 67 20 74 68 72 6f 75 67 | affic.that.is.trasspasing.throug |
a35e0 | 68 20 74 68 65 20 62 72 69 64 67 65 20 69 73 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e | h.the.bridge.is.filtered.and.con |
a3600 | 74 72 6f 6c 6c 65 64 3a 00 2a 2a 46 6f 72 77 61 72 64 20 28 42 72 69 64 67 65 29 2a 2a 3a 20 73 | trolled:.**Forward.(Bridge)**:.s |
a3620 | 74 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 69 73 20 74 72 65 73 70 | tage.where.traffic.that.is.tresp |
a3640 | 61 73 69 6e 67 20 74 68 72 6f 75 67 68 20 74 68 65 20 62 72 69 64 67 65 20 69 73 20 66 69 6c 74 | asing.through.the.bridge.is.filt |
a3660 | 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 3a 00 2a 2a 46 6f 72 77 61 72 64 2a 2a | ered.and.controlled:.**Forward** |
a3680 | 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 20 63 61 | :.stage.where.transit.traffic.ca |
a36a0 | 6e 20 62 65 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 2e 20 54 68 | n.be.filtered.and.controlled..Th |
a36c0 | 69 73 20 69 6e 63 6c 75 64 65 73 20 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 66 69 6c 74 65 72 | is.includes.ipv4.and.ipv6.filter |
a36e0 | 69 6e 67 20 72 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 48 61 72 64 77 61 72 | ing.rules,.defined.in:.**Hardwar |
a3700 | 65 20 6f 66 66 6c 6f 61 64 3a 2a 2a 20 73 68 6f 75 6c 64 20 62 65 20 73 75 70 70 6f 72 74 65 64 | e.offload:**.should.be.supported |
a3720 | 20 62 79 20 74 68 65 20 4e 49 43 73 20 75 73 65 64 2e 00 2a 2a 49 47 50 20 63 6f 73 74 20 63 68 | .by.the.NICs.used..**IGP.cost.ch |
a3740 | 65 63 6b 2a 2a 00 2a 2a 49 50 76 34 20 28 44 53 43 50 20 76 61 6c 75 65 2c 20 6d 61 78 69 6d 75 | eck**.**IPv4.(DSCP.value,.maximu |
a3760 | 6d 20 70 61 63 6b 65 74 20 6c 65 6e 67 74 68 2c 20 70 72 6f 74 6f 63 6f 6c 2c 20 73 6f 75 72 63 | m.packet.length,.protocol,.sourc |
a3780 | 65 20 61 64 64 72 65 73 73 2c 2a 2a 20 2a 2a 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 | e.address,**.**destination.addre |
a37a0 | 73 73 2c 20 73 6f 75 72 63 65 20 70 6f 72 74 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 | ss,.source.port,.destination.por |
a37c0 | 74 20 6f 72 20 54 43 50 20 66 6c 61 67 73 29 2a 2a 00 2a 2a 49 50 76 36 20 28 44 53 43 50 20 76 | t.or.TCP.flags)**.**IPv6.(DSCP.v |
a37e0 | 61 6c 75 65 2c 20 6d 61 78 69 6d 75 6d 20 70 61 79 6c 6f 61 64 20 6c 65 6e 67 74 68 2c 20 70 72 | alue,.maximum.payload.length,.pr |
a3800 | 6f 74 6f 63 6f 6c 2c 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2c 2a 2a 20 2a 2a 64 65 73 74 | otocol,.source.address,**.**dest |
a3820 | 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2c 20 73 6f 75 72 63 65 20 70 6f 72 74 2c 20 64 65 | ination.address,.source.port,.de |
a3840 | 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 6f 72 20 54 43 50 20 66 6c 61 67 73 29 2a 2a 00 2a | stination.port.or.TCP.flags)**.* |
a3860 | 2a 49 66 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 61 20 70 6f 6c 69 63 79 | *If.you.are.looking.for.a.policy |
a3880 | 20 66 6f 72 20 79 6f 75 72 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 2a 2a 20 62 75 74 | .for.your.outbound.traffic**.but |
a38a0 | 20 79 6f 75 20 64 6f 6e 27 74 20 6b 6e 6f 77 20 77 68 69 63 68 20 6f 6e 65 20 79 6f 75 20 6e 65 | .you.don't.know.which.one.you.ne |
a38c0 | 65 64 20 61 6e 64 20 79 6f 75 20 64 6f 6e 27 74 20 77 61 6e 74 20 74 6f 20 67 6f 20 74 68 72 6f | ed.and.you.don't.want.to.go.thro |
a38e0 | 75 67 68 20 65 76 65 72 79 20 70 6f 73 73 69 62 6c 65 20 70 6f 6c 69 63 79 20 73 68 6f 77 6e 20 | ugh.every.possible.policy.shown. |
a3900 | 68 65 72 65 2c 20 2a 2a 6f 75 72 20 62 65 74 20 69 73 20 74 68 61 74 20 68 69 67 68 6c 79 20 6c | here,.**our.bet.is.that.highly.l |
a3920 | 69 6b 65 6c 79 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 61 2a 2a 20 53 68 | ikely.you.are.looking.for.a**.Sh |
a3940 | 61 70 65 72 5f 20 2a 2a 70 6f 6c 69 63 79 20 61 6e 64 20 79 6f 75 20 77 61 6e 74 20 74 6f 2a 2a | aper_.**policy.and.you.want.to** |
a3960 | 20 3a 72 65 66 3a 60 73 65 74 20 69 74 73 20 71 75 65 75 65 73 20 3c 65 6d 62 65 64 3e 60 20 2a | .:ref:`set.its.queues.<embed>`.* |
a3980 | 2a 61 73 20 46 51 2d 43 6f 44 65 6c 2a 2a 2e 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 | *as.FQ-CoDel**..**Important.note |
a39a0 | 20 61 62 6f 75 74 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 73 3a 2a 2a 20 49 66 20 64 65 66 | .about.default-actions:**.If.def |
a39c0 | 61 75 6c 74 20 61 63 74 69 6f 6e 20 66 6f 72 20 61 6e 79 20 62 61 73 65 20 63 68 61 69 6e 20 69 | ault.action.for.any.base.chain.i |
a39e0 | 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 | s.not.defined,.then.the.default. |
a3a00 | 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a 2a 61 63 63 65 70 74 2a 2a 20 66 6f 72 20 | action.is.set.to.**accept**.for. |
a3a20 | 74 68 61 74 20 63 68 61 69 6e 2e 20 46 6f 72 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 73 2c 20 69 | that.chain..For.custom.chains,.i |
a3a40 | 66 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c | f.default.action.is.not.defined, |
a3a60 | 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 | .then.the.default-action.is.set. |
a3a80 | 74 6f 20 2a 2a 64 72 6f 70 2a 2a 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 20 61 62 6f | to.**drop**.**Important.note.abo |
a3aa0 | 75 74 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 73 3a 2a 2a 20 49 66 20 64 65 66 61 75 6c 74 | ut.default-actions:**.If.default |
a3ac0 | 20 61 63 74 69 6f 6e 20 66 6f 72 20 61 6e 79 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 6e 6f | .action.for.any.base.chain.is.no |
a3ae0 | 74 20 64 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 | t.defined,.then.the.default.acti |
a3b00 | 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a 2a 61 63 63 65 70 74 2a 2a 20 66 6f 72 20 74 68 61 74 | on.is.set.to.**accept**.for.that |
a3b20 | 20 63 68 61 69 6e 2e 20 46 6f 72 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 73 2c 20 69 66 20 64 65 | .chain..For.custom.chains,.if.de |
a3b40 | 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 65 | fault.action.is.not.defined,.the |
a3b60 | 6e 20 74 68 65 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a | n.the.default-action.is.set.to.* |
a3b80 | 2a 64 72 6f 70 2a 2a 2e 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 20 61 62 6f 75 74 20 | *drop**..**Important.note.about. |
a3ba0 | 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 73 3a 2a 2a 20 49 66 20 64 65 66 61 75 6c 74 20 61 63 | default-actions:**.If.default.ac |
a3bc0 | 74 69 6f 6e 20 66 6f 72 20 61 6e 79 20 63 68 61 69 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 | tion.for.any.chain.is.not.define |
a3be0 | 64 2c 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 73 65 | d,.then.the.default.action.is.se |
a3c00 | 74 20 74 6f 20 2a 2a 61 63 63 65 70 74 2a 2a 20 66 6f 72 20 74 68 61 74 20 63 68 61 69 6e 2e 20 | t.to.**accept**.for.that.chain.. |
a3c20 | 4f 6e 6c 79 20 66 6f 72 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 73 2c 20 74 68 65 20 64 65 66 61 | Only.for.custom.chains,.the.defa |
a3c40 | 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a 2a 64 72 6f 70 2a 2a 2e 00 2a | ult.action.is.set.to.**drop**..* |
a3c60 | 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 20 61 62 6f 75 74 20 64 65 66 61 75 6c 74 2d 61 63 | *Important.note.about.default-ac |
a3c80 | 74 69 6f 6e 73 3a 2a 2a 20 49 66 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 66 6f 72 20 61 | tions:**.If.default.action.for.a |
a3ca0 | 6e 79 20 63 68 61 69 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 74 68 | ny.chain.is.not.defined,.then.th |
a3cc0 | 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a 2a 64 72 6f | e.default.action.is.set.to.**dro |
a3ce0 | 70 2a 2a 20 66 6f 72 20 74 68 61 74 20 63 68 61 69 6e 2e 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 | p**.for.that.chain..**Important. |
a3d00 | 6e 6f 74 65 20 6f 6e 20 75 73 61 67 65 20 6f 66 20 74 65 72 6d 73 3a 2a 2a 20 54 68 65 20 66 69 | note.on.usage.of.terms:**.The.fi |
a3d20 | 72 65 77 61 6c 6c 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 74 68 65 20 74 65 72 6d 73 20 60 66 | rewall.makes.use.of.the.terms.`f |
a3d40 | 6f 72 77 61 72 64 60 2c 20 60 69 6e 70 75 74 60 2c 20 61 6e 64 20 60 6f 75 74 70 75 74 60 20 66 | orward`,.`input`,.and.`output`.f |
a3d60 | 6f 72 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 2e 20 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 | or.firewall.policy..More.informa |
a3d80 | 74 69 6f 6e 20 6f 66 20 4e 65 74 66 69 6c 74 65 72 20 68 6f 6f 6b 73 20 61 6e 64 20 4c 69 6e 75 | tion.of.Netfilter.hooks.and.Linu |
a3da0 | 78 20 6e 65 74 77 6f 72 6b 69 6e 67 20 70 61 63 6b 65 74 20 66 6c 6f 77 73 20 63 61 6e 20 62 65 | x.networking.packet.flows.can.be |
a3dc0 | 20 66 6f 75 6e 64 20 69 6e 20 60 4e 65 74 66 69 6c 74 65 72 2d 48 6f 6f 6b 73 20 3c 68 74 74 70 | .found.in.`Netfilter-Hooks.<http |
a3de0 | 73 3a 2f 2f 77 69 6b 69 2e 6e 66 74 61 62 6c 65 73 2e 6f 72 67 2f 77 69 6b 69 2d 6e 66 74 61 62 | s://wiki.nftables.org/wiki-nftab |
a3e00 | 6c 65 73 2f 69 6e 64 65 78 2e 70 68 70 2f 4e 65 74 66 69 6c 74 65 72 5f 68 6f 6f 6b 73 3e 60 5f | les/index.php/Netfilter_hooks>`_ |
a3e20 | 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 20 6f 6e 20 75 73 61 67 65 20 6f 66 20 74 65 | .**Important.note.on.usage.of.te |
a3e40 | 72 6d 73 3a 2a 2a 20 54 68 65 20 66 69 72 65 77 61 6c 6c 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 | rms:**.The.firewall.makes.use.of |
a3e60 | 20 74 68 65 20 74 65 72 6d 73 20 60 69 6e 60 2c 20 60 6f 75 74 60 2c 20 61 6e 64 20 60 6c 6f 63 | .the.terms.`in`,.`out`,.and.`loc |
a3e80 | 61 6c 60 20 66 6f 72 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 2e 20 55 73 65 72 73 20 65 | al`.for.firewall.policy..Users.e |
a3ea0 | 78 70 65 72 69 65 6e 63 65 64 20 77 69 74 68 20 6e 65 74 66 69 6c 74 65 72 20 6f 66 74 65 6e 20 | xperienced.with.netfilter.often. |
a3ec0 | 63 6f 6e 66 75 73 65 20 60 69 6e 60 20 74 6f 20 62 65 20 61 20 72 65 66 65 72 65 6e 63 65 20 74 | confuse.`in`.to.be.a.reference.t |
a3ee0 | 6f 20 74 68 65 20 60 49 4e 50 55 54 60 20 63 68 61 69 6e 2c 20 61 6e 64 20 60 6f 75 74 60 20 74 | o.the.`INPUT`.chain,.and.`out`.t |
a3f00 | 68 65 20 60 4f 55 54 50 55 54 60 20 63 68 61 69 6e 20 66 72 6f 6d 20 6e 65 74 66 69 6c 74 65 72 | he.`OUTPUT`.chain.from.netfilter |
a3f20 | 2e 20 54 68 69 73 20 69 73 20 6e 6f 74 20 74 68 65 20 63 61 73 65 2e 20 54 68 65 73 65 20 69 6e | ..This.is.not.the.case..These.in |
a3f40 | 73 74 65 61 64 20 69 6e 64 69 63 61 74 65 20 74 68 65 20 75 73 65 20 6f 66 20 74 68 65 20 60 46 | stead.indicate.the.use.of.the.`F |
a3f60 | 4f 52 57 41 52 44 60 20 63 68 61 69 6e 20 61 6e 64 20 65 69 74 68 65 72 20 74 68 65 20 69 6e 70 | ORWARD`.chain.and.either.the.inp |
a3f80 | 75 74 20 6f 72 20 6f 75 74 70 75 74 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 60 49 4e 50 | ut.or.output.interface..The.`INP |
a3fa0 | 55 54 60 20 63 68 61 69 6e 2c 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 66 6f 72 20 6c 6f 63 | UT`.chain,.which.is.used.for.loc |
a3fc0 | 61 6c 20 74 72 61 66 66 69 63 20 74 6f 20 74 68 65 20 4f 53 2c 20 69 73 20 61 20 72 65 66 65 72 | al.traffic.to.the.OS,.is.a.refer |
a3fe0 | 65 6e 63 65 20 74 6f 20 61 73 20 60 6c 6f 63 61 6c 60 20 77 69 74 68 20 72 65 73 70 65 63 74 20 | ence.to.as.`local`.with.respect. |
a4000 | 74 6f 20 69 74 73 20 69 6e 70 75 74 20 69 6e 74 65 72 66 61 63 65 2e 00 2a 2a 49 6d 70 6f 72 74 | to.its.input.interface..**Import |
a4020 | 61 6e 74 20 6e 6f 74 65 3a 2a 2a 20 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 69 | ant.note:**.This.documentation.i |
a4040 | 73 20 76 61 6c 69 64 20 6f 6e 6c 79 20 66 6f 72 20 56 79 4f 53 20 53 61 67 69 74 74 61 20 70 72 | s.valid.only.for.VyOS.Sagitta.pr |
a4060 | 69 6f 72 20 74 6f 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 00 | ior.to.1.4-rolling-202308040557. |
a4080 | 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 3a 2a 2a 20 54 68 69 73 20 64 6f 63 75 6d 65 6e | **Important.note:**.This.documen |
a40a0 | 74 61 74 69 6f 6e 20 69 73 20 76 61 6c 69 64 20 6f 6e 6c 79 20 66 6f 72 20 56 79 4f 53 20 53 61 | tation.is.valid.only.for.VyOS.Sa |
a40c0 | 67 69 74 74 61 20 70 72 69 6f 72 20 74 6f 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 59 59 59 59 4d | gitta.prior.to.1.4-rolling-YYYYM |
a40e0 | 4d 44 44 48 48 6d 6d 00 2a 2a 49 6e 70 75 74 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 | MDDHHmm.**Input**:.stage.where.t |
a4100 | 72 61 66 66 69 63 20 64 65 73 74 69 6e 61 74 65 64 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 | raffic.destinated.to.the.router. |
a4120 | 69 74 73 65 6c 66 20 63 61 6e 20 62 65 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 | itself.can.be.filtered.and.contr |
a4140 | 6f 6c 6c 65 64 2e 20 54 68 69 73 20 69 73 20 77 68 65 72 65 20 61 6c 6c 20 72 75 6c 65 73 20 66 | olled..This.is.where.all.rules.f |
a4160 | 6f 72 20 73 65 63 75 72 69 6e 67 20 74 68 65 20 72 6f 75 74 65 72 20 73 68 6f 75 6c 64 20 74 61 | or.securing.the.router.should.ta |
a4180 | 6b 65 20 70 6c 61 63 65 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 69 70 76 34 20 61 6e 64 | ke.place..This.includes.ipv4.and |
a41a0 | 20 69 70 76 36 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 20 69 | .ipv6.filtering.rules,.defined.i |
a41c0 | 6e 3a 00 2a 2a 49 6e 70 75 74 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 | n:.**Input**:.stage.where.traffi |
a41e0 | 63 20 64 65 73 74 69 6e 65 64 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 | c.destined.for.the.router.itself |
a4200 | 20 63 61 6e 20 62 65 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 2e | .can.be.filtered.and.controlled. |
a4220 | 20 54 68 69 73 20 69 73 20 77 68 65 72 65 20 61 6c 6c 20 72 75 6c 65 73 20 66 6f 72 20 73 65 63 | .This.is.where.all.rules.for.sec |
a4240 | 75 72 69 6e 67 20 74 68 65 20 72 6f 75 74 65 72 20 73 68 6f 75 6c 64 20 74 61 6b 65 20 70 6c 61 | uring.the.router.should.take.pla |
a4260 | 63 65 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 | ce..This.includes.ipv4.and.ipv6. |
a4280 | 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 49 | filtering.rules,.defined.in:.**I |
a42a0 | 6e 74 65 72 66 61 63 65 20 6e 61 6d 65 2a 2a 00 2a 2a 4c 45 46 54 2a 2a 00 2a 2a 4c 45 46 54 3a | nterface.name**.**LEFT**.**LEFT: |
a42c0 | 2a 2a 20 2a 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 60 65 74 68 30 2e 32 30 31 60 | **.*.WAN.interface.on.`eth0.201` |
a42e0 | 20 2a 20 60 65 74 68 30 2e 32 30 31 60 20 69 6e 74 65 72 66 61 63 65 20 49 50 3a 20 60 31 37 32 | .*.`eth0.201`.interface.IP:.`172 |
a4300 | 2e 31 38 2e 32 30 31 2e 31 30 2f 32 34 60 20 2a 20 60 76 74 69 31 30 60 20 69 6e 74 65 72 66 61 | .18.201.10/24`.*.`vti10`.interfa |
a4320 | 63 65 20 49 50 3a 20 60 31 30 2e 30 2e 30 2e 32 2f 33 31 60 20 2a 20 60 64 75 6d 30 60 20 69 6e | ce.IP:.`10.0.0.2/31`.*.`dum0`.in |
a4340 | 74 65 72 66 61 63 65 20 49 50 3a 20 60 31 30 2e 30 2e 31 31 2e 31 2f 32 34 60 20 28 66 6f 72 20 | terface.IP:.`10.0.11.1/24`.(for. |
a4360 | 74 65 73 74 69 6e 67 20 70 75 72 70 6f 73 65 73 29 00 2a 2a 4c 61 79 65 72 20 33 20 62 72 69 64 | testing.purposes).**Layer.3.brid |
a4380 | 67 65 2a 2a 3a 20 57 68 65 6e 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 61 73 73 69 | ge**:.When.an.IP.address.is.assi |
a43a0 | 67 6e 65 64 20 74 6f 20 74 68 65 20 62 72 69 64 67 65 20 69 6e 74 65 72 66 61 63 65 2c 20 61 6e | gned.to.the.bridge.interface,.an |
a43c0 | 64 20 69 66 20 74 72 61 66 66 69 63 20 69 73 20 73 65 6e 74 20 74 6f 20 74 68 65 20 72 6f 75 74 | d.if.traffic.is.sent.to.the.rout |
a43e0 | 65 72 20 74 6f 20 74 68 69 73 20 49 50 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 20 75 73 69 6e 67 | er.to.this.IP.(for.example.using |
a4400 | 20 73 75 63 68 20 49 50 20 61 73 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 29 2c 20 74 68 | .such.IP.as.default.gateway),.th |
a4420 | 65 6e 20 72 75 6c 65 73 20 64 65 66 69 6e 65 64 20 66 6f 72 20 2a 2a 62 72 69 64 67 65 20 66 69 | en.rules.defined.for.**bridge.fi |
a4440 | 72 65 77 61 6c 6c 2a 2a 20 77 6f 6e 27 74 20 6d 61 74 63 68 2c 20 61 6e 64 20 66 69 72 65 77 61 | rewall**.won't.match,.and.firewa |
a4460 | 6c 6c 20 61 6e 61 6c 79 73 69 73 20 63 6f 6e 74 69 6e 75 65 73 20 61 74 20 2a 2a 49 50 20 6c 61 | ll.analysis.continues.at.**IP.la |
a4480 | 79 65 72 2a 2a 2e 00 2a 2a 4c 65 61 66 32 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 2a 2a 00 | yer**..**Leaf2.configuration:**. |
a44a0 | 2a 2a 4c 65 61 66 33 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 2a 2a 00 2a 2a 4c 69 6e 75 78 | **Leaf3.configuration:**.**Linux |
a44c0 | 20 73 79 73 74 65 6d 64 2d 6e 65 74 77 6f 72 6b 64 3a 2a 2a 00 2a 2a 4c 6f 63 61 6c 20 70 72 65 | .systemd-networkd:**.**Local.pre |
a44e0 | 66 65 72 65 6e 63 65 20 63 68 65 63 6b 2a 2a 00 2a 2a 4c 6f 63 61 6c 20 72 6f 75 74 65 20 63 68 | ference.check**.**Local.route.ch |
a4500 | 65 63 6b 2a 2a 00 2a 2a 4d 45 44 20 63 68 65 63 6b 2a 2a 00 2a 2a 4d 75 6c 74 69 2d 70 61 74 68 | eck**.**MED.check**.**Multi-path |
a4520 | 20 63 68 65 63 6b 2a 2a 00 2a 2a 4e 6f 64 65 20 31 2a 2a 00 2a 2a 4e 6f 64 65 20 31 3a 2a 2a 00 | .check**.**Node.1**.**Node.1:**. |
a4540 | 2a 2a 4e 6f 64 65 20 32 2a 2a 00 2a 2a 4e 6f 64 65 20 32 3a 2a 2a 00 2a 2a 4e 6f 64 65 31 3a 2a | **Node.2**.**Node.2:**.**Node1:* |
a4560 | 2a 00 2a 2a 4e 6f 64 65 32 3a 2a 2a 00 2a 2a 4f 50 54 49 4f 4e 41 4c 3a 2a 2a 20 45 78 63 6c 75 | *.**Node2:**.**OPTIONAL:**.Exclu |
a4580 | 64 65 20 49 6e 74 65 72 2d 56 4c 41 4e 20 74 72 61 66 66 69 63 20 28 62 65 74 77 65 65 6e 20 56 | de.Inter-VLAN.traffic.(between.V |
a45a0 | 4c 41 4e 31 30 20 61 6e 64 20 56 4c 41 4e 31 31 29 20 66 72 6f 6d 20 50 42 52 00 2a 2a 4f 53 50 | LAN10.and.VLAN11).from.PBR.**OSP |
a45c0 | 46 20 6e 65 74 77 6f 72 6b 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2a 2a 20 e2 80 93 20 69 6e | F.network.routing.table**.....in |
a45e0 | 63 6c 75 64 65 73 20 61 20 6c 69 73 74 20 6f 66 20 61 63 71 75 69 72 65 64 20 72 6f 75 74 65 73 | cludes.a.list.of.acquired.routes |
a4600 | 20 66 6f 72 20 61 6c 6c 20 61 63 63 65 73 73 69 62 6c 65 20 6e 65 74 77 6f 72 6b 73 20 28 6f 72 | .for.all.accessible.networks.(or |
a4620 | 20 61 67 67 72 65 67 61 74 65 64 20 61 72 65 61 20 72 61 6e 67 65 73 29 20 6f 66 20 4f 53 50 46 | .aggregated.area.ranges).of.OSPF |
a4640 | 20 73 79 73 74 65 6d 2e 20 22 49 41 22 20 66 6c 61 67 20 6d 65 61 6e 73 20 74 68 61 74 20 72 6f | .system.."IA".flag.means.that.ro |
a4660 | 75 74 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 69 73 20 69 6e 20 74 68 65 20 61 72 65 61 20 74 | ute.destination.is.in.the.area.t |
a4680 | 6f 20 77 68 69 63 68 20 74 68 65 20 72 6f 75 74 65 72 20 69 73 20 6e 6f 74 20 63 6f 6e 6e 65 63 | o.which.the.router.is.not.connec |
a46a0 | 74 65 64 2c 20 69 2e 65 2e 20 69 74 e2 80 99 73 20 61 6e 20 69 6e 74 65 72 2d 61 72 65 61 20 70 | ted,.i.e..it...s.an.inter-area.p |
a46c0 | 61 74 68 2e 20 49 6e 20 73 71 75 61 72 65 20 62 72 61 63 6b 65 74 73 20 61 20 73 75 6d 6d 61 72 | ath..In.square.brackets.a.summar |
a46e0 | 79 20 6d 65 74 72 69 63 20 66 6f 72 20 61 6c 6c 20 6c 69 6e 6b 73 20 74 68 72 6f 75 67 68 20 77 | y.metric.for.all.links.through.w |
a4700 | 68 69 63 68 20 61 20 70 61 74 68 20 6c 69 65 73 20 74 6f 20 74 68 69 73 20 6e 65 74 77 6f 72 6b | hich.a.path.lies.to.this.network |
a4720 | 20 69 73 20 73 70 65 63 69 66 69 65 64 2e 20 22 76 69 61 22 20 70 72 65 66 69 78 20 64 65 66 69 | .is.specified.."via".prefix.defi |
a4740 | 6e 65 73 20 61 20 72 6f 75 74 65 72 2d 67 61 74 65 77 61 79 2c 20 69 2e 65 2e 20 74 68 65 20 66 | nes.a.router-gateway,.i.e..the.f |
a4760 | 69 72 73 74 20 72 6f 75 74 65 72 20 6f 6e 20 74 68 65 20 77 61 79 20 74 6f 20 74 68 65 20 64 65 | irst.router.on.the.way.to.the.de |
a4780 | 73 74 69 6e 61 74 69 6f 6e 20 28 6e 65 78 74 20 68 6f 70 29 2e 20 2a 2a 4f 53 50 46 20 72 6f 75 | stination.(next.hop)..**OSPF.rou |
a47a0 | 74 65 72 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2a 2a 20 e2 80 93 20 69 6e 63 6c 75 64 65 73 | ter.routing.table**.....includes |
a47c0 | 20 61 20 6c 69 73 74 20 6f 66 20 61 63 71 75 69 72 65 64 20 72 6f 75 74 65 73 20 74 6f 20 61 6c | .a.list.of.acquired.routes.to.al |
a47e0 | 6c 20 61 63 63 65 73 73 69 62 6c 65 20 41 42 52 73 20 61 6e 64 20 41 53 42 52 73 2e 20 2a 2a 4f | l.accessible.ABRs.and.ASBRs..**O |
a4800 | 53 50 46 20 65 78 74 65 72 6e 61 6c 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2a 2a 20 e2 80 93 | SPF.external.routing.table**.... |
a4820 | 20 69 6e 63 6c 75 64 65 73 20 61 20 6c 69 73 74 20 6f 66 20 61 63 71 75 69 72 65 64 20 72 6f 75 | .includes.a.list.of.acquired.rou |
a4840 | 74 65 73 20 74 68 61 74 20 61 72 65 20 65 78 74 65 72 6e 61 6c 20 74 6f 20 74 68 65 20 4f 53 50 | tes.that.are.external.to.the.OSP |
a4860 | 46 20 70 72 6f 63 65 73 73 2e 20 22 45 22 20 66 6c 61 67 20 70 6f 69 6e 74 73 20 74 6f 20 74 68 | F.process.."E".flag.points.to.th |
a4880 | 65 20 65 78 74 65 72 6e 61 6c 20 6c 69 6e 6b 20 6d 65 74 72 69 63 20 74 79 70 65 20 28 45 31 20 | e.external.link.metric.type.(E1. |
a48a0 | e2 80 93 20 6d 65 74 72 69 63 20 74 79 70 65 20 31 2c 20 45 32 20 e2 80 93 20 6d 65 74 72 69 63 | ....metric.type.1,.E2.....metric |
a48c0 | 20 74 79 70 65 20 32 29 2e 20 45 78 74 65 72 6e 61 6c 20 6c 69 6e 6b 20 6d 65 74 72 69 63 20 69 | .type.2)..External.link.metric.i |
a48e0 | 73 20 70 72 69 6e 74 65 64 20 69 6e 20 74 68 65 20 22 3c 6d 65 74 72 69 63 20 6f 66 20 74 68 65 | s.printed.in.the."<metric.of.the |
a4900 | 20 72 6f 75 74 65 72 20 77 68 69 63 68 20 61 64 76 65 72 74 69 73 65 64 20 74 68 65 20 6c 69 6e | .router.which.advertised.the.lin |
a4920 | 6b 3e 2f 3c 6c 69 6e 6b 20 6d 65 74 72 69 63 3e 22 20 66 6f 72 6d 61 74 2e 00 2a 2a 4f 6e 65 20 | k>/<link.metric>".format..**One. |
a4940 | 67 61 74 65 77 61 79 3a 2a 2a 00 2a 2a 4f 72 69 67 69 6e 20 63 68 65 63 6b 2a 2a 00 2a 2a 4f 75 | gateway:**.**Origin.check**.**Ou |
a4960 | 74 70 75 74 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 74 68 61 74 | tput**:.stage.where.traffic.that |
a4980 | 20 69 73 20 6f 72 69 67 69 6e 61 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 | .is.originated.by.the.router.its |
a49a0 | 65 6c 66 20 63 61 6e 20 62 65 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c | elf.can.be.filtered.and.controll |
a49c0 | 65 64 2e 20 42 61 72 65 20 69 6e 20 6d 69 6e 64 20 74 68 61 74 20 74 68 69 73 20 74 72 61 66 66 | ed..Bare.in.mind.that.this.traff |
a49e0 | 69 63 20 63 61 6e 20 62 65 20 61 20 6e 65 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 72 69 67 69 | ic.can.be.a.new.connection.origi |
a4a00 | 6e 74 65 64 20 62 79 20 61 20 69 6e 74 65 72 6e 61 6c 20 70 72 6f 63 65 73 73 20 72 75 6e 6e 69 | nted.by.a.internal.process.runni |
a4a20 | 6e 67 20 6f 6e 20 56 79 4f 53 20 72 6f 75 74 65 72 2c 20 73 75 63 68 20 61 73 20 4e 54 50 2c 20 | ng.on.VyOS.router,.such.as.NTP,. |
a4a40 | 6f 72 20 63 61 6e 20 62 65 20 61 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 74 72 61 66 66 69 63 20 | or.can.be.a.response.to.traffic. |
a4a60 | 72 65 63 65 69 76 65 64 20 65 78 74 65 72 6e 61 6c 79 20 74 68 72 6f 75 67 68 20 2a 2a 69 6e 70 | received.externaly.through.**inp |
a4a80 | 75 74 74 2a 2a 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 61 | utt**.(for.example.response.to.a |
a4aa0 | 6e 20 73 73 68 20 6c 6f 67 69 6e 20 61 74 74 65 6d 70 74 20 74 6f 20 74 68 65 20 72 6f 75 74 65 | n.ssh.login.attempt.to.the.route |
a4ac0 | 72 29 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 | r)..This.includes.ipv4.and.ipv6. |
a4ae0 | 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 4f | filtering.rules,.defined.in:.**O |
a4b00 | 75 74 70 75 74 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 74 68 61 | utput**:.stage.where.traffic.tha |
a4b20 | 74 20 6f 72 69 67 69 6e 61 74 65 73 20 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 | t.originates.from.the.router.its |
a4b40 | 65 6c 66 20 63 61 6e 20 62 65 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c | elf.can.be.filtered.and.controll |
a4b60 | 65 64 2e 20 42 65 61 72 20 69 6e 20 6d 69 6e 64 20 74 68 61 74 20 74 68 69 73 20 74 72 61 66 66 | ed..Bear.in.mind.that.this.traff |
a4b80 | 69 63 20 63 61 6e 20 62 65 20 61 20 6e 65 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 72 69 67 69 | ic.can.be.a.new.connection.origi |
a4ba0 | 6e 61 74 65 64 20 62 79 20 61 20 69 6e 74 65 72 6e 61 6c 20 70 72 6f 63 65 73 73 20 72 75 6e 6e | nated.by.a.internal.process.runn |
a4bc0 | 69 6e 67 20 6f 6e 20 56 79 4f 53 20 72 6f 75 74 65 72 2c 20 73 75 63 68 20 61 73 20 4e 54 50 2c | ing.on.VyOS.router,.such.as.NTP, |
a4be0 | 20 6f 72 20 61 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 74 72 61 66 66 69 63 20 72 65 63 65 69 76 | .or.a.response.to.traffic.receiv |
a4c00 | 65 64 20 65 78 74 65 72 6e 61 6c 79 20 74 68 72 6f 75 67 68 20 2a 2a 69 6e 70 75 74 2a 2a 20 28 | ed.externaly.through.**input**.( |
a4c20 | 66 6f 72 20 65 78 61 6d 70 6c 65 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 61 6e 20 73 73 68 20 6c | for.example.response.to.an.ssh.l |
a4c40 | 6f 67 69 6e 20 61 74 74 65 6d 70 74 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 29 2e 20 54 68 69 | ogin.attempt.to.the.router)..Thi |
a4c60 | 73 20 69 6e 63 6c 75 64 65 73 20 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 66 69 6c 74 65 72 69 | s.includes.ipv4.and.ipv6.filteri |
a4c80 | 6e 67 20 72 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 4f 75 74 70 75 74 2a 2a | ng.rules,.defined.in:.**Output** |
a4ca0 | 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 6f 72 69 67 69 | :.stage.where.traffic.that.origi |
a4cc0 | 6e 61 74 65 73 20 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 20 63 61 6e | nates.from.the.router.itself.can |
a4ce0 | 20 62 65 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 2e 20 42 65 61 | .be.filtered.and.controlled..Bea |
a4d00 | 72 20 69 6e 20 6d 69 6e 64 20 74 68 61 74 20 74 68 69 73 20 74 72 61 66 66 69 63 20 63 61 6e 20 | r.in.mind.that.this.traffic.can. |
a4d20 | 62 65 20 61 20 6e 65 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 72 69 67 69 6e 61 74 65 64 20 62 | be.a.new.connection.originated.b |
a4d40 | 79 20 61 20 69 6e 74 65 72 6e 61 6c 20 70 72 6f 63 65 73 73 20 72 75 6e 6e 69 6e 67 20 6f 6e 20 | y.a.internal.process.running.on. |
a4d60 | 56 79 4f 53 20 72 6f 75 74 65 72 2c 20 73 75 63 68 20 61 73 20 4e 54 50 2c 20 6f 72 20 61 20 72 | VyOS.router,.such.as.NTP,.or.a.r |
a4d80 | 65 73 70 6f 6e 73 65 20 74 6f 20 74 72 61 66 66 69 63 20 72 65 63 65 69 76 65 64 20 65 78 74 65 | esponse.to.traffic.received.exte |
a4da0 | 72 6e 61 6c 79 20 74 68 72 6f 75 67 68 20 2a 2a 69 6e 70 75 74 74 2a 2a 20 28 66 6f 72 20 65 78 | rnaly.through.**inputt**.(for.ex |
a4dc0 | 61 6d 70 6c 65 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 61 6e 20 73 73 68 20 6c 6f 67 69 6e 20 61 | ample.response.to.an.ssh.login.a |
a4de0 | 74 74 65 6d 70 74 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 29 2e 20 54 68 69 73 20 69 6e 63 6c | ttempt.to.the.router)..This.incl |
a4e00 | 75 64 65 73 20 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c | udes.ipv4.and.ipv6.filtering.rul |
a4e20 | 65 73 2c 20 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 50 65 65 72 20 61 64 64 72 65 73 73 2a 2a | es,.defined.in:.**Peer.address** |
a4e40 | 00 2a 2a 50 6f 6c 69 63 79 20 52 6f 75 74 65 2a 2a 3a 20 72 75 6c 65 73 20 64 65 66 69 6e 65 64 | .**Policy.Route**:.rules.defined |
a4e60 | 20 75 6e 64 65 72 20 60 60 73 65 74 20 70 6f 6c 69 63 79 20 5b 72 6f 75 74 65 20 7c 20 72 6f 75 | .under.``set.policy.[route.|.rou |
a4e80 | 74 65 36 5d 20 2e 2e 2e 60 60 2e 00 2a 2a 50 6f 6c 69 63 79 20 64 65 66 69 6e 69 74 69 6f 6e 3a | te6]....``..**Policy.definition: |
a4ea0 | 2a 2a 00 2a 2a 50 6f 73 74 72 6f 75 74 69 6e 67 2a 2a 3a 20 61 73 20 69 6e 20 2a 2a 50 72 65 72 | **.**Postrouting**:.as.in.**Prer |
a4ec0 | 6f 75 74 69 6e 67 2a 2a 2c 20 73 65 76 65 72 61 6c 20 61 63 74 69 6f 6e 73 20 64 65 66 69 6e 65 | outing**,.several.actions.define |
a4ee0 | 64 20 69 6e 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 74 73 20 6f 66 20 56 79 4f 53 20 63 6f 6e | d.in.different.parts.of.VyOS.con |
a4f00 | 66 69 67 75 72 61 74 69 6f 6e 20 61 72 65 20 70 65 72 66 6f 72 6d 65 64 20 69 6e 20 74 68 69 73 | figuration.are.performed.in.this |
a4f20 | 20 73 74 61 67 65 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 3a 00 2a 2a 50 72 65 72 6f 75 74 | .stage..This.includes:.**Prerout |
a4f40 | 69 6e 67 2a 2a 3a 20 73 65 76 65 72 61 6c 20 61 63 74 69 6f 6e 73 20 63 61 6e 20 62 65 20 64 6f | ing**:.several.actions.can.be.do |
a4f60 | 6e 65 20 69 6e 20 74 68 69 73 20 73 74 61 67 65 2c 20 61 6e 64 20 63 75 72 72 65 6e 74 6c 79 20 | ne.in.this.stage,.and.currently. |
a4f80 | 74 68 65 73 65 20 61 63 74 69 6f 6e 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 64 69 66 | these.actions.are.defined.in.dif |
a4fa0 | 66 65 72 65 6e 74 20 70 61 72 74 73 20 69 6e 20 56 79 4f 53 20 63 6f 6e 66 69 67 75 72 61 74 69 | ferent.parts.in.VyOS.configurati |
a4fc0 | 6f 6e 2e 20 4f 72 64 65 72 20 69 73 20 69 6d 70 6f 72 74 61 6e 74 2c 20 61 6e 64 20 61 6c 6c 20 | on..Order.is.important,.and.all. |
a4fe0 | 74 68 65 73 65 20 61 63 74 69 6f 6e 73 20 61 72 65 20 70 65 72 66 6f 72 6d 65 64 20 62 65 66 6f | these.actions.are.performed.befo |
a5000 | 72 65 20 61 6e 79 20 61 63 74 69 6f 6e 73 20 64 65 66 69 6e 65 64 20 75 6e 64 65 72 20 60 60 66 | re.any.actions.defined.under.``f |
a5020 | 69 72 65 77 61 6c 6c 60 60 20 73 65 63 74 69 6f 6e 2e 20 52 65 6c 65 76 61 6e 74 20 63 6f 6e 66 | irewall``.section..Relevant.conf |
a5040 | 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 61 63 74 73 20 69 6e 20 74 68 69 73 20 73 74 61 67 | iguration.that.acts.in.this.stag |
a5060 | 65 20 61 72 65 3a 00 2a 2a 50 72 65 72 6f 75 74 69 6e 67 2a 2a 3a 20 73 65 76 65 72 61 6c 20 61 | e.are:.**Prerouting**:.several.a |
a5080 | 63 74 69 6f 6e 73 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 69 6e 20 74 68 69 73 20 73 74 61 67 65 | ctions.can.be.done.in.this.stage |
a50a0 | 2c 20 61 6e 64 20 63 75 72 72 65 6e 74 6c 79 20 74 68 65 73 65 20 61 63 74 69 6f 6e 73 20 61 72 | ,.and.currently.these.actions.ar |
a50c0 | 65 20 64 65 66 69 6e 65 64 20 69 6e 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 74 73 20 69 6e 20 | e.defined.in.different.parts.in. |
a50e0 | 76 79 6f 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 4f 72 64 65 72 20 69 73 20 69 6d 70 | vyos.configuration..Order.is.imp |
a5100 | 6f 72 74 61 6e 74 2c 20 61 6e 64 20 61 6c 6c 20 74 68 65 73 65 20 61 63 74 69 6f 6e 73 20 61 72 | ortant,.and.all.these.actions.ar |
a5120 | 65 20 70 65 72 66 6f 72 6d 65 64 20 62 65 66 6f 72 65 20 61 6e 79 20 61 63 74 69 6f 6e 73 20 64 | e.performed.before.any.actions.d |
a5140 | 65 66 69 6e 65 20 75 6e 64 65 72 20 60 60 66 69 72 65 77 61 6c 6c 60 60 20 73 65 63 74 69 6f 6e | efine.under.``firewall``.section |
a5160 | 2e 20 52 65 6c 65 76 61 6e 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 61 63 | ..Relevant.configuration.that.ac |
a5180 | 74 73 20 69 6e 20 74 68 69 73 20 73 74 61 67 65 20 61 72 65 3a 00 2a 2a 50 72 69 6d 61 72 79 2a | ts.in.this.stage.are:.**Primary* |
a51a0 | 2a 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 2a 2a 20 46 61 69 72 2f 46 | *.**Queueing.discipline**.Fair/F |
a51c0 | 6c 6f 77 20 51 75 65 75 65 20 43 6f 44 65 6c 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 | low.Queue.CoDel..**Queueing.disc |
a51e0 | 69 70 6c 69 6e 65 3a 2a 2a 20 44 65 66 69 63 69 74 20 52 6f 75 6e 64 20 52 6f 62 69 6e 2e 00 2a | ipline:**.Deficit.Round.Robin..* |
a5200 | 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 47 65 6e 65 72 61 6c 69 | *Queueing.discipline:**.Generali |
a5220 | 7a 65 64 20 52 61 6e 64 6f 6d 20 45 61 72 6c 79 20 44 72 6f 70 2e 00 2a 2a 51 75 65 75 65 69 6e | zed.Random.Early.Drop..**Queuein |
a5240 | 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 48 69 65 72 61 72 63 68 69 63 61 6c 20 54 6f 6b | g.discipline:**.Hierarchical.Tok |
a5260 | 65 6e 20 42 75 63 6b 65 74 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 | en.Bucket..**Queueing.discipline |
a5280 | 3a 2a 2a 20 49 6e 67 72 65 73 73 20 70 6f 6c 69 63 65 72 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 | :**.Ingress.policer..**Queueing. |
a52a0 | 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 50 46 49 46 4f 20 28 50 61 63 6b 65 74 20 46 69 72 73 | discipline:**.PFIFO.(Packet.Firs |
a52c0 | 74 20 49 6e 20 46 69 72 73 74 20 4f 75 74 29 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 | t.In.First.Out)..**Queueing.disc |
a52e0 | 69 70 6c 69 6e 65 3a 2a 2a 20 50 52 49 4f 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 | ipline:**.PRIO..**Queueing.disci |
a5300 | 70 6c 69 6e 65 3a 2a 2a 20 53 46 51 20 28 53 74 6f 63 68 61 73 74 69 63 20 46 61 69 72 6e 65 73 | pline:**.SFQ.(Stochastic.Fairnes |
a5320 | 73 20 51 75 65 75 69 6e 67 29 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e | s.Queuing)..**Queueing.disciplin |
a5340 | 65 3a 2a 2a 20 54 6f 63 6b 65 6e 20 42 75 63 6b 65 74 20 46 69 6c 74 65 72 2e 00 2a 2a 51 75 65 | e:**.Tocken.Bucket.Filter..**Que |
a5360 | 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 6e 65 74 65 6d 20 28 4e 65 74 77 6f | ueing.discipline:**.netem.(Netwo |
a5380 | 72 6b 20 45 6d 75 6c 61 74 6f 72 29 20 2b 20 54 42 46 20 28 54 6f 6b 65 6e 20 42 75 63 6b 65 74 | rk.Emulator).+.TBF.(Token.Bucket |
a53a0 | 20 46 69 6c 74 65 72 29 2e 00 2a 2a 52 31 20 53 74 61 74 69 63 20 4b 65 79 2a 2a 00 2a 2a 52 31 | .Filter)..**R1.Static.Key**.**R1 |
a53c0 | 2a 2a 00 2a 2a 52 32 20 53 74 61 74 69 63 20 4b 65 79 2a 2a 00 2a 2a 52 32 2a 2a 00 2a 2a 52 41 | **.**R2.Static.Key**.**R2**.**RA |
a53e0 | 44 49 55 53 20 62 61 73 65 64 20 49 50 20 70 6f 6f 6c 73 20 28 46 72 61 6d 65 64 2d 49 50 2d 41 | DIUS.based.IP.pools.(Framed-IP-A |
a5400 | 64 64 72 65 73 73 29 2a 2a 00 2a 2a 52 41 44 49 55 53 20 73 65 73 73 69 6f 6e 73 20 6d 61 6e 61 | ddress)**.**RADIUS.sessions.mana |
a5420 | 67 65 6d 65 6e 74 20 44 4d 2f 43 6f 41 2a 2a 00 2a 2a 52 49 47 48 54 2a 2a 00 2a 2a 52 49 47 48 | gement.DM/CoA**.**RIGHT**.**RIGH |
a5440 | 54 3a 2a 2a 20 2a 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 60 65 74 68 30 2e 32 30 | T:**.*.WAN.interface.on.`eth0.20 |
a5460 | 32 60 20 2a 20 60 65 74 68 30 2e 32 30 31 60 20 69 6e 74 65 72 66 61 63 65 20 49 50 3a 20 60 31 | 2`.*.`eth0.201`.interface.IP:.`1 |
a5480 | 37 32 2e 31 38 2e 32 30 32 2e 31 30 2f 32 34 60 20 2a 20 60 76 74 69 31 30 60 20 69 6e 74 65 72 | 72.18.202.10/24`.*.`vti10`.inter |
a54a0 | 66 61 63 65 20 49 50 3a 20 60 31 30 2e 30 2e 30 2e 33 2f 33 31 60 20 2a 20 60 64 75 6d 30 60 20 | face.IP:.`10.0.0.3/31`.*.`dum0`. |
a54c0 | 69 6e 74 65 72 66 61 63 65 20 49 50 3a 20 60 31 30 2e 30 2e 31 32 2e 31 2f 32 34 60 20 28 66 6f | interface.IP:.`10.0.12.1/24`.(fo |
a54e0 | 72 20 74 65 73 74 69 6e 67 20 70 75 72 70 6f 73 65 73 29 00 2a 2a 52 6f 75 74 65 72 20 31 2a 2a | r.testing.purposes).**Router.1** |
a5500 | 00 2a 2a 52 6f 75 74 65 72 20 32 2a 2a 00 2a 2a 52 6f 75 74 65 72 20 33 2a 2a 00 2a 2a 52 6f 75 | .**Router.2**.**Router.3**.**Rou |
a5520 | 74 65 72 2d 49 44 20 63 68 65 63 6b 2a 2a 00 2a 2a 52 6f 75 74 65 73 20 6c 65 61 72 6e 65 64 20 | ter-ID.check**.**Routes.learned. |
a5540 | 61 66 74 65 72 20 72 6f 75 74 69 6e 67 20 70 6f 6c 69 63 79 20 61 70 70 6c 69 65 64 3a 2a 2a 00 | after.routing.policy.applied:**. |
a5560 | 2a 2a 52 6f 75 74 65 73 20 6c 65 61 72 6e 65 64 20 62 65 66 6f 72 65 20 72 6f 75 74 69 6e 67 20 | **Routes.learned.before.routing. |
a5580 | 70 6f 6c 69 63 79 20 61 70 70 6c 69 65 64 3a 2a 2a 00 2a 2a 53 57 31 2a 2a 00 2a 2a 53 57 32 2a | policy.applied:**.**SW1**.**SW2* |
a55a0 | 2a 00 2a 2a 53 65 63 6f 6e 64 61 72 79 2a 2a 00 2a 2a 53 65 74 74 69 6e 67 20 75 70 20 49 50 53 | *.**Secondary**.**Setting.up.IPS |
a55c0 | 65 63 2a 2a 00 2a 2a 53 65 74 74 69 6e 67 20 75 70 20 74 68 65 20 47 52 45 20 74 75 6e 6e 65 6c | ec**.**Setting.up.the.GRE.tunnel |
a55e0 | 2a 2a 00 2a 2a 53 6f 75 72 63 65 20 4e 41 54 2a 2a 3a 20 72 75 6c 65 73 20 64 65 66 69 6e 65 64 | **.**Source.NAT**:.rules.defined |
a5600 | 20 75 6e 64 65 72 20 60 60 73 65 74 20 5b 6e 61 74 20 7c 20 6e 61 74 36 36 5d 20 64 65 73 74 69 | .under.``set.[nat.|.nat66].desti |
a5620 | 6e 61 74 69 6f 6e 2e 2e 2e 60 60 2e 00 2a 2a 53 70 69 6e 65 31 20 43 6f 6e 66 69 67 75 72 61 74 | nation...``..**Spine1.Configurat |
a5640 | 69 6f 6e 3a 2a 2a 00 2a 2a 53 74 61 74 75 73 2a 2a 00 2a 2a 54 6f 20 73 65 65 20 74 68 65 20 72 | ion:**.**Status**.**To.see.the.r |
a5660 | 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 3a 2a 2a 00 2a 2a 54 77 6f 20 67 61 74 | edistributed.routes:**.**Two.gat |
a5680 | 65 77 61 79 73 20 61 6e 64 20 64 69 66 66 65 72 65 6e 74 20 6d 65 74 72 69 63 73 3a 2a 2a 00 2a | eways.and.different.metrics:**.* |
a56a0 | 2a 56 4c 41 4e 20 49 44 2a 2a 00 2a 2a 56 79 4f 53 20 52 6f 75 74 65 72 3a 2a 2a 00 2a 2a 57 65 | *VLAN.ID**.**VyOS.Router:**.**We |
a56c0 | 69 67 68 74 20 63 68 65 63 6b 2a 2a 00 2a 2a 61 64 64 72 65 73 73 2a 2a 20 63 61 6e 20 62 65 20 | ight.check**.**address**.can.be. |
a56e0 | 73 70 65 63 69 66 69 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 20 61 73 20 49 50 76 34 | specified.multiple.times.as.IPv4 |
a5700 | 20 61 6e 64 2f 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 2c 20 65 2e 67 2e 20 31 39 32 2e 30 | .and/or.IPv6.address,.e.g..192.0 |
a5720 | 2e 32 2e 31 2f 32 34 20 61 6e 64 2f 6f 72 20 32 30 30 31 3a 64 62 38 3a 3a 31 2f 36 34 00 2a 2a | .2.1/24.and/or.2001:db8::1/64.** |
a5740 | 61 64 64 72 65 73 73 2a 2a 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 6d 75 6c 74 69 | address**.can.be.specified.multi |
a5760 | 70 6c 65 20 74 69 6d 65 73 2c 20 65 2e 67 2e 20 31 39 32 2e 31 36 38 2e 31 30 30 2e 31 20 61 6e | ple.times,.e.g..192.168.100.1.an |
a5780 | 64 2f 6f 72 20 31 39 32 2e 31 36 38 2e 31 30 30 2e 30 2f 32 34 00 2a 2a 61 6c 6c 6f 77 2a 2a 20 | d/or.192.168.100.0/24.**allow**. |
a57a0 | 2d 20 4e 65 67 6f 74 69 61 74 65 20 49 50 76 34 20 6f 6e 6c 79 20 69 66 20 63 6c 69 65 6e 74 20 | -.Negotiate.IPv4.only.if.client. |
a57c0 | 72 65 71 75 65 73 74 73 20 28 44 65 66 61 75 6c 74 20 76 61 6c 75 65 29 00 2a 2a 61 6c 6c 6f 77 | requests.(Default.value).**allow |
a57e0 | 2a 2a 20 2d 20 4e 65 67 6f 74 69 61 74 65 20 49 50 76 36 20 6f 6e 6c 79 20 69 66 20 63 6c 69 65 | **.-.Negotiate.IPv6.only.if.clie |
a5800 | 6e 74 20 72 65 71 75 65 73 74 73 00 2a 2a 61 6c 6c 6f 77 2d 68 6f 73 74 2d 6e 65 74 77 6f 72 6b | nt.requests.**allow-host-network |
a5820 | 73 2a 2a 20 63 61 6e 6e 6f 74 20 62 65 20 75 73 65 64 20 77 69 74 68 20 2a 2a 6e 65 74 77 6f 72 | s**.cannot.be.used.with.**networ |
a5840 | 6b 2a 2a 00 2a 2a 61 6c 77 61 79 73 2a 2a 3a 20 52 65 73 74 61 72 74 20 63 6f 6e 74 61 69 6e 65 | k**.**always**:.Restart.containe |
a5860 | 72 73 20 77 68 65 6e 20 74 68 65 79 20 65 78 69 74 2c 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 | rs.when.they.exit,.regardless.of |
a5880 | 20 73 74 61 74 75 73 2c 20 72 65 74 72 79 69 6e 67 20 69 6e 64 65 66 69 6e 69 74 65 6c 79 00 2a | .status,.retrying.indefinitely.* |
a58a0 | 2a 61 70 70 65 6e 64 3a 2a 2a 20 54 68 65 20 72 65 6c 61 79 20 61 67 65 6e 74 20 69 73 20 61 6c | *append:**.The.relay.agent.is.al |
a58c0 | 6c 6f 77 65 64 20 74 6f 20 61 70 70 65 6e 64 20 69 74 73 20 6f 77 6e 20 72 65 6c 61 79 20 69 6e | lowed.to.append.its.own.relay.in |
a58e0 | 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 61 20 72 65 63 65 69 76 65 64 20 44 48 43 50 20 70 61 63 | formation.to.a.received.DHCP.pac |
a5900 | 6b 65 74 2c 20 64 69 73 72 65 67 61 72 64 69 6e 67 20 72 65 6c 61 79 20 69 6e 66 6f 72 6d 61 74 | ket,.disregarding.relay.informat |
a5920 | 69 6f 6e 20 61 6c 72 65 61 64 79 20 70 72 65 73 65 6e 74 20 69 6e 20 74 68 65 20 70 61 63 6b 65 | ion.already.present.in.the.packe |
a5940 | 74 2e 00 2a 2a 61 70 70 6c 69 63 61 74 69 6f 6e 2a 2a 3a 20 61 6e 61 6c 79 7a 65 73 20 72 65 63 | t..**application**:.analyzes.rec |
a5960 | 65 69 76 65 64 20 66 6c 6f 77 20 64 61 74 61 20 69 6e 20 74 68 65 20 63 6f 6e 74 65 78 74 20 6f | eived.flow.data.in.the.context.o |
a5980 | 66 20 69 6e 74 72 75 73 69 6f 6e 20 64 65 74 65 63 74 69 6f 6e 20 6f 72 20 74 72 61 66 66 69 63 | f.intrusion.detection.or.traffic |
a59a0 | 20 70 72 6f 66 69 6c 69 6e 67 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 00 2a 2a 61 75 74 6f 2a 2a | .profiling,.for.example.**auto** |
a59c0 | 20 e2 80 93 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 65 74 65 72 6d 69 6e 65 73 20 74 68 | .....automatically.determines.th |
a59e0 | 65 20 69 6e 74 65 72 66 61 63 65 20 74 79 70 65 2e 20 2a 2a 77 69 72 65 64 2a 2a 20 e2 80 93 20 | e.interface.type..**wired**..... |
a5a00 | 65 6e 61 62 6c 65 73 20 6f 70 74 69 6d 69 73 61 74 69 6f 6e 73 20 66 6f 72 20 77 69 72 65 64 20 | enables.optimisations.for.wired. |
a5a20 | 69 6e 74 65 72 66 61 63 65 73 2e 20 2a 2a 77 69 72 65 6c 65 73 73 2a 2a 20 e2 80 93 20 64 69 73 | interfaces..**wireless**.....dis |
a5a40 | 61 62 6c 65 73 20 61 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 74 69 6d 69 73 61 74 69 6f 6e 73 20 | ables.a.number.of.optimisations. |
a5a60 | 74 68 61 74 20 61 72 65 20 6f 6e 6c 79 20 63 6f 72 72 65 63 74 20 6f 6e 20 77 69 72 65 64 20 69 | that.are.only.correct.on.wired.i |
a5a80 | 6e 74 65 72 66 61 63 65 73 2e 20 53 70 65 63 69 66 79 69 6e 67 20 77 69 72 65 6c 65 73 73 20 69 | nterfaces..Specifying.wireless.i |
a5aa0 | 73 20 61 6c 77 61 79 73 20 63 6f 72 72 65 63 74 2c 20 62 75 74 20 6d 61 79 20 63 61 75 73 65 20 | s.always.correct,.but.may.cause. |
a5ac0 | 73 6c 6f 77 65 72 20 63 6f 6e 76 65 72 67 65 6e 63 65 20 61 6e 64 20 65 78 74 72 61 20 72 6f 75 | slower.convergence.and.extra.rou |
a5ae0 | 74 69 6e 67 20 74 72 61 66 66 69 63 2e 00 2a 2a 62 61 6e 2d 74 69 6d 65 2a 2a 20 61 6e 64 20 2a | ting.traffic..**ban-time**.and.* |
a5b00 | 2a 74 68 72 65 73 68 6f 6c 64 2a 2a 3a 20 74 68 65 73 65 20 76 61 6c 75 65 73 20 61 72 65 20 6b | *threshold**:.these.values.are.k |
a5b20 | 65 70 74 20 76 65 72 79 20 6c 6f 77 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 65 61 73 69 6c 79 20 | ept.very.low.in.order.to.easily. |
a5b40 | 69 64 65 6e 74 69 66 79 20 61 6e 64 20 67 65 6e 65 72 61 74 65 20 61 6e 64 20 61 74 74 61 63 6b | identify.and.generate.and.attack |
a5b60 | 2e 00 2a 2a 62 72 6f 61 64 63 61 73 74 2a 2a 20 e2 80 93 20 62 72 6f 61 64 63 61 73 74 20 49 50 | ..**broadcast**.....broadcast.IP |
a5b80 | 20 61 64 64 72 65 73 73 65 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 20 2a 2a 6e 6f 6e 2d 62 | .addresses.distribution..**non-b |
a5ba0 | 72 6f 61 64 63 61 73 74 2a 2a 20 e2 80 93 20 61 64 64 72 65 73 73 20 64 69 73 74 72 69 62 75 74 | roadcast**.....address.distribut |
a5bc0 | 69 6f 6e 20 69 6e 20 4e 42 4d 41 20 6e 65 74 77 6f 72 6b 73 20 74 6f 70 6f 6c 6f 67 79 2e 20 2a | ion.in.NBMA.networks.topology..* |
a5be0 | 2a 70 6f 69 6e 74 2d 74 6f 2d 6d 75 6c 74 69 70 6f 69 6e 74 2a 2a 20 e2 80 93 20 61 64 64 72 65 | *point-to-multipoint**.....addre |
a5c00 | 73 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 69 6e 20 70 6f 69 6e 74 2d 74 6f 2d 6d 75 6c 74 | ss.distribution.in.point-to-mult |
a5c20 | 69 70 6f 69 6e 74 20 6e 65 74 77 6f 72 6b 73 2e 20 2a 2a 70 6f 69 6e 74 2d 74 6f 2d 70 6f 69 6e | ipoint.networks..**point-to-poin |
a5c40 | 74 2a 2a 20 e2 80 93 20 61 64 64 72 65 73 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 69 6e 20 | t**.....address.distribution.in. |
a5c60 | 70 6f 69 6e 74 2d 74 6f 2d 70 6f 69 6e 74 20 6e 65 74 77 6f 72 6b 73 2e 00 2a 2a 62 72 6f 61 64 | point-to-point.networks..**broad |
a5c80 | 63 61 73 74 2a 2a 20 e2 80 93 20 62 72 6f 61 64 63 61 73 74 20 49 50 20 61 64 64 72 65 73 73 65 | cast**.....broadcast.IP.addresse |
a5ca0 | 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 20 2a 2a 70 6f 69 6e 74 2d 74 6f 2d 70 6f 69 6e 74 | s.distribution..**point-to-point |
a5cc0 | 2a 2a 20 e2 80 93 20 61 64 64 72 65 73 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 69 6e 20 70 | **.....address.distribution.in.p |
a5ce0 | 6f 69 6e 74 2d 74 6f 2d 70 6f 69 6e 74 20 6e 65 74 77 6f 72 6b 73 2e 00 2a 2a 63 61 6c 6c 69 6e | oint-to-point.networks..**callin |
a5d00 | 67 2d 73 69 64 2a 2a 20 2d 20 43 61 6c 63 75 6c 61 74 65 20 69 6e 74 65 72 66 61 63 65 20 69 64 | g-sid**.-.Calculate.interface.id |
a5d20 | 65 6e 74 69 66 69 65 72 20 66 72 6f 6d 20 63 61 6c 6c 69 6e 67 2d 73 74 61 74 69 6f 6e 2d 69 64 | entifier.from.calling-station-id |
a5d40 | 2e 00 2a 2a 63 69 73 63 6f 2a 2a 20 e2 80 93 20 61 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 62 65 | ..**cisco**.....a.router.will.be |
a5d60 | 20 63 6f 6e 73 69 64 65 72 65 64 20 61 73 20 41 42 52 20 69 66 20 69 74 20 68 61 73 20 73 65 76 | .considered.as.ABR.if.it.has.sev |
a5d80 | 65 72 61 6c 20 63 6f 6e 66 69 67 75 72 65 64 20 6c 69 6e 6b 73 20 74 6f 20 74 68 65 20 6e 65 74 | eral.configured.links.to.the.net |
a5da0 | 77 6f 72 6b 73 20 69 6e 20 64 69 66 66 65 72 65 6e 74 20 61 72 65 61 73 20 6f 6e 65 20 6f 66 20 | works.in.different.areas.one.of. |
a5dc0 | 77 68 69 63 68 20 69 73 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 2e 20 4d 6f 72 65 6f 76 | which.is.a.backbone.area..Moreov |
a5de0 | 65 72 2c 20 74 68 65 20 6c 69 6e 6b 20 74 6f 20 74 68 65 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 | er,.the.link.to.the.backbone.are |
a5e00 | 61 20 73 68 6f 75 6c 64 20 62 65 20 61 63 74 69 76 65 20 28 77 6f 72 6b 69 6e 67 29 2e 20 2a 2a | a.should.be.active.(working)..** |
a5e20 | 69 62 6d 2a 2a 20 e2 80 93 20 69 64 65 6e 74 69 63 61 6c 20 74 6f 20 22 63 69 73 63 6f 22 20 6d | ibm**.....identical.to."cisco".m |
a5e40 | 6f 64 65 6c 20 62 75 74 20 69 6e 20 74 68 69 73 20 63 61 73 65 20 61 20 62 61 63 6b 62 6f 6e 65 | odel.but.in.this.case.a.backbone |
a5e60 | 20 61 72 65 61 20 6c 69 6e 6b 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 63 74 69 76 65 2e 20 2a 2a | .area.link.may.not.be.active..** |
a5e80 | 73 74 61 6e 64 61 72 64 2a 2a 20 e2 80 93 20 72 6f 75 74 65 72 20 68 61 73 20 73 65 76 65 72 61 | standard**.....router.has.severa |
a5ea0 | 6c 20 61 63 74 69 76 65 20 6c 69 6e 6b 73 20 74 6f 20 64 69 66 66 65 72 65 6e 74 20 61 72 65 61 | l.active.links.to.different.area |
a5ec0 | 73 2e 20 2a 2a 73 68 6f 72 74 63 75 74 2a 2a 20 e2 80 93 20 69 64 65 6e 74 69 63 61 6c 20 74 6f | s..**shortcut**.....identical.to |
a5ee0 | 20 22 73 74 61 6e 64 61 72 64 22 20 62 75 74 20 69 6e 20 74 68 69 73 20 6d 6f 64 65 6c 20 61 20 | ."standard".but.in.this.model.a. |
a5f00 | 72 6f 75 74 65 72 20 69 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 75 73 65 20 61 20 63 6f 6e 6e 65 | router.is.allowed.to.use.a.conne |
a5f20 | 63 74 65 64 20 61 72 65 61 73 20 74 6f 70 6f 6c 6f 67 79 20 77 69 74 68 6f 75 74 20 69 6e 76 6f | cted.areas.topology.without.invo |
a5f40 | 6c 76 69 6e 67 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 66 6f 72 20 69 6e 74 65 72 2d | lving.a.backbone.area.for.inter- |
a5f60 | 61 72 65 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 2a 2a 63 6f 6c 6c 65 63 74 6f 72 2a 2a 3a | area.connections..**collector**: |
a5f80 | 20 72 65 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 72 65 63 65 70 74 69 6f 6e 2c 20 73 74 6f 72 | .responsible.for.reception,.stor |
a5fa0 | 61 67 65 20 61 6e 64 20 70 72 65 2d 70 72 6f 63 65 73 73 69 6e 67 20 6f 66 20 66 6c 6f 77 20 64 | age.and.pre-processing.of.flow.d |
a5fc0 | 61 74 61 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 61 20 66 6c 6f 77 20 65 78 70 6f 72 74 65 | ata.received.from.a.flow.exporte |
a5fe0 | 72 00 2a 2a 64 65 66 61 75 6c 74 2a 2a 20 e2 80 93 20 20 74 68 69 73 20 61 72 65 61 20 77 69 6c | r.**default**......this.area.wil |
a6000 | 6c 20 62 65 20 75 73 65 64 20 66 6f 72 20 73 68 6f 72 74 63 75 74 74 69 6e 67 20 6f 6e 6c 79 20 | l.be.used.for.shortcutting.only. |
a6020 | 69 66 20 41 42 52 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 20 6c 69 6e 6b 20 74 6f 20 74 | if.ABR.does.not.have.a.link.to.t |
a6040 | 68 65 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 6f 72 20 74 68 69 73 20 6c 69 6e 6b 20 77 61 | he.backbone.area.or.this.link.wa |
a6060 | 73 20 6c 6f 73 74 2e 20 2a 2a 65 6e 61 62 6c 65 2a 2a 20 e2 80 93 20 74 68 65 20 61 72 65 61 20 | s.lost..**enable**.....the.area. |
a6080 | 77 69 6c 6c 20 62 65 20 75 73 65 64 20 66 6f 72 20 73 68 6f 72 74 63 75 74 74 69 6e 67 20 65 76 | will.be.used.for.shortcutting.ev |
a60a0 | 65 72 79 20 74 69 6d 65 20 74 68 65 20 72 6f 75 74 65 20 74 68 61 74 20 67 6f 65 73 20 74 68 72 | ery.time.the.route.that.goes.thr |
a60c0 | 6f 75 67 68 20 69 74 20 69 73 20 63 68 65 61 70 65 72 2e 20 2a 2a 64 69 73 61 62 6c 65 2a 2a 20 | ough.it.is.cheaper..**disable**. |
a60e0 | e2 80 93 20 74 68 69 73 20 61 72 65 61 20 69 73 20 6e 65 76 65 72 20 75 73 65 64 20 62 79 20 41 | ....this.area.is.never.used.by.A |
a6100 | 42 52 20 66 6f 72 20 72 6f 75 74 65 73 20 73 68 6f 72 74 63 75 74 74 69 6e 67 2e 00 2a 2a 64 65 | BR.for.routes.shortcutting..**de |
a6120 | 66 61 75 6c 74 2a 2a 20 e2 80 93 20 65 6e 61 62 6c 65 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e | fault**.....enable.split-horizon |
a6140 | 20 6f 6e 20 77 69 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 2c 20 61 6e 64 20 64 69 73 61 62 6c | .on.wired.interfaces,.and.disabl |
a6160 | 65 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 6f 6e 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 | e.split-horizon.on.wireless.inte |
a6180 | 72 66 61 63 65 73 2e 20 2a 2a 65 6e 61 62 6c 65 2a 2a 20 e2 80 93 20 65 6e 61 62 6c 65 20 73 70 | rfaces..**enable**.....enable.sp |
a61a0 | 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 73 2e 20 | lit-horizon.on.this.interfaces.. |
a61c0 | 2a 2a 64 69 73 61 62 6c 65 2a 2a 20 e2 80 93 20 64 69 73 61 62 6c 65 20 73 70 6c 69 74 2d 68 6f | **disable**.....disable.split-ho |
a61e0 | 72 69 7a 6f 6e 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 73 2e 00 2a 2a 64 65 6e 79 | rizon.on.this.interfaces..**deny |
a6200 | 2a 2a 20 2d 20 44 6f 20 6e 6f 74 20 6e 65 67 6f 74 69 61 74 65 20 49 50 76 34 00 2a 2a 64 65 6e | **.-.Do.not.negotiate.IPv4.**den |
a6220 | 79 2a 2a 20 2d 20 44 6f 20 6e 6f 74 20 6e 65 67 6f 74 69 61 74 65 20 49 50 76 36 20 28 64 65 66 | y**.-.Do.not.negotiate.IPv6.(def |
a6240 | 61 75 6c 74 20 76 61 6c 75 65 29 00 2a 2a 64 65 6e 79 2a 2a 20 2d 20 64 65 6e 79 20 6d 70 70 65 | ault.value).**deny**.-.deny.mppe |
a6260 | 00 2a 2a 64 65 6e 79 2a 2a 3a 20 44 65 6e 79 20 73 65 63 6f 6e 64 20 73 65 73 73 69 6f 6e 20 61 | .**deny**:.Deny.second.session.a |
a6280 | 75 74 68 6f 72 69 7a 61 74 69 6f 6e 2e 00 2a 2a 64 65 73 74 69 6e 61 74 69 6f 6e 2a 2a 20 2d 20 | uthorization..**destination**.-. |
a62a0 | 73 70 65 63 69 66 79 20 77 68 69 63 68 20 70 61 63 6b 65 74 73 20 74 68 65 20 74 72 61 6e 73 6c | specify.which.packets.the.transl |
a62c0 | 61 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 2c 20 6f 6e 6c 79 20 62 | ation.will.be.applied.to,.only.b |
a62e0 | 61 73 65 64 20 6f 6e 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 | ased.on.the.destination.address. |
a6300 | 61 6e 64 2f 6f 72 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 2a | and/or.port.number.configured..* |
a6320 | 2a 64 68 63 70 2a 2a 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 65 73 73 20 69 73 20 72 65 63 | *dhcp**.interface.address.is.rec |
a6340 | 65 69 76 65 64 20 62 79 20 44 48 43 50 20 66 72 6f 6d 20 61 20 44 48 43 50 20 73 65 72 76 65 72 | eived.by.DHCP.from.a.DHCP.server |
a6360 | 20 6f 6e 20 74 68 69 73 20 73 65 67 6d 65 6e 74 2e 00 2a 2a 64 68 63 70 76 36 2a 2a 20 69 6e 74 | .on.this.segment..**dhcpv6**.int |
a6380 | 65 72 66 61 63 65 20 61 64 64 72 65 73 73 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 44 48 | erface.address.is.received.by.DH |
a63a0 | 43 50 76 36 20 66 72 6f 6d 20 61 20 44 48 43 50 76 36 20 73 65 72 76 65 72 20 6f 6e 20 74 68 69 | CPv6.from.a.DHCPv6.server.on.thi |
a63c0 | 73 20 73 65 67 6d 65 6e 74 2e 00 2a 2a 64 69 73 61 62 6c 65 2a 2a 3a 20 44 69 73 61 62 6c 65 73 | s.segment..**disable**:.Disables |
a63e0 | 20 73 65 73 73 69 6f 6e 20 63 6f 6e 74 72 6f 6c 2e 00 2a 2a 64 69 73 63 61 72 64 3a 2a 2a 20 52 | .session.control..**discard:**.R |
a6400 | 65 63 65 69 76 65 64 20 70 61 63 6b 65 74 73 20 77 68 69 63 68 20 61 6c 72 65 61 64 79 20 63 6f | eceived.packets.which.already.co |
a6420 | 6e 74 61 69 6e 20 72 65 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 | ntain.relay.information.will.be. |
a6440 | 64 69 73 63 61 72 64 65 64 2e 00 2a 2a 64 6f 77 6e 73 74 72 65 61 6d 3a 2a 2a 20 44 6f 77 6e 73 | discarded..**downstream:**.Downs |
a6460 | 74 72 65 61 6d 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 74 68 65 | tream.network.interfaces.are.the |
a6480 | 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 74 68 65 20 | .distribution.interfaces.to.the. |
a64a0 | 64 65 73 74 69 6e 61 74 69 6f 6e 20 6e 65 74 77 6f 72 6b 73 2c 20 77 68 65 72 65 20 6d 75 6c 74 | destination.networks,.where.mult |
a64c0 | 69 63 61 73 74 20 63 6c 69 65 6e 74 73 20 63 61 6e 20 6a 6f 69 6e 20 67 72 6f 75 70 73 20 61 6e | icast.clients.can.join.groups.an |
a64e0 | 64 20 72 65 63 65 69 76 65 20 6d 75 6c 74 69 63 61 73 74 20 64 61 74 61 2e 20 4f 6e 65 20 6f 72 | d.receive.multicast.data..One.or |
a6500 | 20 6d 6f 72 65 20 64 6f 77 6e 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 73 20 6d 75 73 74 | .more.downstream.interfaces.must |
a6520 | 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 2a 2a 65 78 70 6f 72 74 65 72 2a 2a 3a 20 61 67 | .be.configured..**exporter**:.ag |
a6540 | 67 72 65 67 61 74 65 73 20 70 61 63 6b 65 74 73 20 69 6e 74 6f 20 66 6c 6f 77 73 20 61 6e 64 20 | gregates.packets.into.flows.and. |
a6560 | 65 78 70 6f 72 74 73 20 66 6c 6f 77 20 72 65 63 6f 72 64 73 20 74 6f 77 61 72 64 73 20 6f 6e 65 | exports.flow.records.towards.one |
a6580 | 20 6f 72 20 6d 6f 72 65 20 66 6c 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 73 00 2a 2a 66 69 72 65 77 | .or.more.flow.collectors.**firew |
a65a0 | 61 6c 6c 20 61 6c 6c 2d 70 69 6e 67 2a 2a 20 61 66 66 65 63 74 73 20 6f 6e 6c 79 20 74 6f 20 4c | all.all-ping**.affects.only.to.L |
a65c0 | 4f 43 41 4c 20 61 6e 64 20 69 74 20 61 6c 77 61 79 73 20 62 65 68 61 76 65 73 20 69 6e 20 74 68 | OCAL.and.it.always.behaves.in.th |
a65e0 | 65 20 6d 6f 73 74 20 72 65 73 74 72 69 63 74 69 76 65 20 77 61 79 00 2a 2a 66 69 72 65 77 61 6c | e.most.restrictive.way.**firewal |
a6600 | 6c 20 67 6c 6f 62 61 6c 2d 6f 70 74 69 6f 6e 73 20 61 6c 6c 2d 70 69 6e 67 2a 2a 20 61 66 66 65 | l.global-options.all-ping**.affe |
a6620 | 63 74 73 20 6f 6e 6c 79 20 74 6f 20 4c 4f 43 41 4c 20 61 6e 64 20 69 74 20 61 6c 77 61 79 73 20 | cts.only.to.LOCAL.and.it.always. |
a6640 | 62 65 68 61 76 65 73 20 69 6e 20 74 68 65 20 6d 6f 73 74 20 72 65 73 74 72 69 63 74 69 76 65 20 | behaves.in.the.most.restrictive. |
a6660 | 77 61 79 00 2a 2a 66 6f 72 77 61 72 64 3a 2a 2a 20 41 6c 6c 20 70 61 63 6b 65 74 73 20 61 72 65 | way.**forward:**.All.packets.are |
a6680 | 20 66 6f 72 77 61 72 64 65 64 2c 20 72 65 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6c | .forwarded,.relay.information.al |
a66a0 | 72 65 61 64 79 20 70 72 65 73 65 6e 74 20 77 69 6c 6c 20 62 65 20 69 67 6e 6f 72 65 64 2e 00 2a | ready.present.will.be.ignored..* |
a66c0 | 2a 69 6e 62 6f 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 2a 2a 20 2d 20 61 70 70 6c 69 63 61 62 6c | *inbound-interface**.-.applicabl |
a66e0 | 65 20 6f 6e 6c 79 20 74 6f 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 | e.only.to.:ref:`destination-nat` |
a6700 | 2e 20 49 74 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 | ..It.configures.the.interface.wh |
a6720 | 69 63 68 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 69 6e 73 69 64 65 20 74 72 61 66 66 | ich.is.used.for.the.inside.traff |
a6740 | 69 63 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 20 | ic.the.translation.rule.applies. |
a6760 | 74 6f 2e 00 2a 2a 69 6e 62 6f 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 2a 2a 20 2d 20 61 70 70 6c | to..**inbound-interface**.-.appl |
a6780 | 69 63 61 62 6c 65 20 6f 6e 6c 79 20 74 6f 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e | icable.only.to.:ref:`destination |
a67a0 | 2d 6e 61 74 60 2e 20 49 74 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 | -nat`..It.configures.the.interfa |
a67c0 | 63 65 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 69 6e 73 69 64 65 20 | ce.which.is.used.for.the.inside. |
a67e0 | 74 72 61 66 66 69 63 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 | traffic.the.translation.rule.app |
a6800 | 6c 69 65 73 20 74 6f 2e 20 49 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 73 2c 20 69 6e 76 65 72 | lies.to..Interface.groups,.inver |
a6820 | 74 65 64 20 73 65 6c 65 63 74 69 6f 6e 20 61 6e 64 20 77 69 6c 64 63 61 72 64 2c 20 61 72 65 20 | ted.selection.and.wildcard,.are. |
a6840 | 61 6c 73 6f 20 73 75 70 70 6f 72 74 65 64 2e 00 2a 2a 69 70 76 34 2d 61 64 64 72 2a 2a 20 2d 20 | also.supported..**ipv4-addr**.-. |
a6860 | 43 61 6c 63 75 6c 61 74 65 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 | Calculate.interface.identifier.f |
a6880 | 72 6f 6d 20 49 50 76 34 20 61 64 64 72 65 73 73 2e 00 2a 2a 6c 32 2a 2a 3a 20 49 74 20 6d 65 61 | rom.IPv4.address..**l2**:.It.mea |
a68a0 | 6e 73 20 74 68 61 74 20 63 6c 69 65 6e 74 73 20 61 72 65 20 6f 6e 20 73 61 6d 65 20 6e 65 74 77 | ns.that.clients.are.on.same.netw |
a68c0 | 6f 72 6b 20 77 68 65 72 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 2e 2a 2a 28 64 65 66 61 75 6c | ork.where.interface.is.**(defaul |
a68e0 | 74 29 2a 2a 00 2a 2a 6c 61 79 65 72 32 2a 2a 20 2d 20 55 73 65 73 20 58 4f 52 20 6f 66 20 68 61 | t)**.**layer2**.-.Uses.XOR.of.ha |
a6900 | 72 64 77 61 72 65 20 4d 41 43 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 70 61 63 6b 65 74 20 | rdware.MAC.addresses.and.packet. |
a6920 | 74 79 70 65 20 49 44 20 66 69 65 6c 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 | type.ID.field.to.generate.the.ha |
a6940 | 73 68 2e 20 54 68 65 20 66 6f 72 6d 75 6c 61 20 69 73 00 2a 2a 6c 61 79 65 72 32 2b 33 2a 2a 20 | sh..The.formula.is.**layer2+3**. |
a6960 | 2d 20 54 68 69 73 20 70 6f 6c 69 63 79 20 75 73 65 73 20 61 20 63 6f 6d 62 69 6e 61 74 69 6f 6e | -.This.policy.uses.a.combination |
a6980 | 20 6f 66 20 6c 61 79 65 72 32 20 61 6e 64 20 6c 61 79 65 72 33 20 70 72 6f 74 6f 63 6f 6c 20 69 | .of.layer2.and.layer3.protocol.i |
a69a0 | 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 73 68 2e | nformation.to.generate.the.hash. |
a69c0 | 20 55 73 65 73 20 58 4f 52 20 6f 66 20 68 61 72 64 77 61 72 65 20 4d 41 43 20 61 64 64 72 65 73 | .Uses.XOR.of.hardware.MAC.addres |
a69e0 | 73 65 73 20 61 6e 64 20 49 50 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 67 65 6e 65 72 61 74 65 | ses.and.IP.addresses.to.generate |
a6a00 | 20 74 68 65 20 68 61 73 68 2e 20 54 68 65 20 66 6f 72 6d 75 6c 61 20 69 73 3a 00 2a 2a 6c 61 79 | .the.hash..The.formula.is:.**lay |
a6a20 | 65 72 33 2b 34 2a 2a 20 2d 20 54 68 69 73 20 70 6f 6c 69 63 79 20 75 73 65 73 20 75 70 70 65 72 | er3+4**.-.This.policy.uses.upper |
a6a40 | 20 6c 61 79 65 72 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 77 68 65 | .layer.protocol.information,.whe |
a6a60 | 6e 20 61 76 61 69 6c 61 62 6c 65 2c 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 73 | n.available,.to.generate.the.has |
a6a80 | 68 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 74 6f 20 61 20 | h..This.allows.for.traffic.to.a. |
a6aa0 | 70 61 72 74 69 63 75 6c 61 72 20 6e 65 74 77 6f 72 6b 20 70 65 65 72 20 74 6f 20 73 70 61 6e 20 | particular.network.peer.to.span. |
a6ac0 | 6d 75 6c 74 69 70 6c 65 20 73 6c 61 76 65 73 2c 20 61 6c 74 68 6f 75 67 68 20 61 20 73 69 6e 67 | multiple.slaves,.although.a.sing |
a6ae0 | 6c 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 73 70 61 6e 20 6d 75 6c 74 | le.connection.will.not.span.mult |
a6b00 | 69 70 6c 65 20 73 6c 61 76 65 73 2e 00 2a 2a 6c 65 66 74 2a 2a 00 2a 2a 6c 65 76 65 6c 2d 31 2a | iple.slaves..**left**.**level-1* |
a6b20 | 2a 20 2d 20 41 63 74 20 61 73 20 61 20 73 74 61 74 69 6f 6e 20 28 4c 65 76 65 6c 20 31 29 20 72 | *.-.Act.as.a.station.(Level.1).r |
a6b40 | 6f 75 74 65 72 20 6f 6e 6c 79 2e 00 2a 2a 6c 65 76 65 6c 2d 31 2a 2a 20 2d 20 4c 65 76 65 6c 2d | outer.only..**level-1**.-.Level- |
a6b60 | 31 20 6f 6e 6c 79 20 61 64 6a 61 63 65 6e 63 69 65 73 20 61 72 65 20 66 6f 72 6d 65 64 2e 00 2a | 1.only.adjacencies.are.formed..* |
a6b80 | 2a 6c 65 76 65 6c 2d 31 2d 32 2a 2a 20 2d 20 41 63 74 20 61 73 20 61 20 73 74 61 74 69 6f 6e 20 | *level-1-2**.-.Act.as.a.station. |
a6ba0 | 28 4c 65 76 65 6c 20 31 29 20 72 6f 75 74 65 72 20 61 6e 64 20 61 72 65 61 20 28 4c 65 76 65 6c | (Level.1).router.and.area.(Level |
a6bc0 | 20 32 29 20 72 6f 75 74 65 72 2e 00 2a 2a 6c 65 76 65 6c 2d 31 2d 32 2a 2a 20 2d 20 4c 65 76 65 | .2).router..**level-1-2**.-.Leve |
a6be0 | 6c 2d 31 2d 32 20 61 64 6a 61 63 65 6e 63 69 65 73 20 61 72 65 20 66 6f 72 6d 65 64 00 2a 2a 6c | l-1-2.adjacencies.are.formed.**l |
a6c00 | 65 76 65 6c 2d 32 2d 6f 6e 6c 79 2a 2a 20 2d 20 41 63 74 20 61 73 20 61 6e 20 61 72 65 61 20 28 | evel-2-only**.-.Act.as.an.area.( |
a6c20 | 4c 65 76 65 6c 20 32 29 20 72 6f 75 74 65 72 20 6f 6e 6c 79 2e 00 2a 2a 6c 65 76 65 6c 2d 32 2d | Level.2).router.only..**level-2- |
a6c40 | 6f 6e 6c 79 2a 2a 20 2d 20 4c 65 76 65 6c 2d 32 20 6f 6e 6c 79 20 61 64 6a 61 63 65 6e 63 69 65 | only**.-.Level-2.only.adjacencie |
a6c60 | 73 20 61 72 65 20 66 6f 72 6d 65 64 00 2a 2a 6c 6f 63 61 6c 20 73 69 64 65 20 2d 20 63 6f 6d 6d | s.are.formed.**local.side.-.comm |
a6c80 | 61 6e 64 73 2a 2a 00 2a 2a 6c 6f 63 61 6c 2a 2a 3a 20 41 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 | ands**.**local**:.All.authentica |
a6ca0 | 74 69 6f 6e 20 71 75 65 72 69 65 73 20 61 72 65 20 68 61 6e 64 6c 65 64 20 6c 6f 63 61 6c 6c 79 | tion.queries.are.handled.locally |
a6cc0 | 2e 00 2a 2a 6c 6f 63 61 6c 2a 2a 3a 20 49 74 20 6d 65 61 6e 73 20 74 68 61 74 20 63 6c 69 65 6e | ..**local**:.It.means.that.clien |
a6ce0 | 74 20 61 72 65 20 62 65 68 69 6e 64 20 73 6f 6d 65 20 72 6f 75 74 65 72 2e 00 2a 2a 6c 6f 67 2d | t.are.behind.some.router..**log- |
a6d00 | 66 61 69 6c 2a 2a 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 2c 20 74 68 65 20 72 65 63 75 72 73 6f | fail**.In.this.mode,.the.recurso |
a6d20 | 72 20 77 69 6c 6c 20 61 74 74 65 6d 70 74 20 74 6f 20 76 61 6c 69 64 61 74 65 20 61 6c 6c 20 64 | r.will.attempt.to.validate.all.d |
a6d40 | 61 74 61 20 69 74 20 72 65 74 72 69 65 76 65 73 20 66 72 6f 6d 20 61 75 74 68 6f 72 69 74 61 74 | ata.it.retrieves.from.authoritat |
a6d60 | 69 76 65 20 73 65 72 76 65 72 73 2c 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 63 | ive.servers,.regardless.of.the.c |
a6d80 | 6c 69 65 6e 74 27 73 20 44 4e 53 53 45 43 20 64 65 73 69 72 65 73 2c 20 61 6e 64 20 77 69 6c 6c | lient's.DNSSEC.desires,.and.will |
a6da0 | 20 6c 6f 67 20 74 68 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 72 65 73 75 6c 74 2e 20 54 68 69 73 | .log.the.validation.result..This |
a6dc0 | 20 6d 6f 64 65 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 | .mode.can.be.used.to.determine.t |
a6de0 | 68 65 20 65 78 74 72 61 20 6c 6f 61 64 20 61 6e 64 20 61 6d 6f 75 6e 74 20 6f 66 20 70 6f 73 73 | he.extra.load.and.amount.of.poss |
a6e00 | 69 62 6c 79 20 62 6f 67 75 73 20 61 6e 73 77 65 72 73 20 62 65 66 6f 72 65 20 74 75 72 6e 69 6e | ibly.bogus.answers.before.turnin |
a6e20 | 67 20 6f 6e 20 66 75 6c 6c 2d 62 6c 6f 77 6e 20 76 61 6c 69 64 61 74 69 6f 6e 2e 20 52 65 73 70 | g.on.full-blown.validation..Resp |
a6e40 | 6f 6e 73 65 73 20 74 6f 20 63 6c 69 65 6e 74 20 71 75 65 72 69 65 73 20 61 72 65 20 74 68 65 20 | onses.to.client.queries.are.the. |
a6e60 | 73 61 6d 65 20 61 73 20 77 69 74 68 20 70 72 6f 63 65 73 73 2e 00 2a 2a 6e 61 72 72 6f 77 2a 2a | same.as.with.process..**narrow** |
a6e80 | 20 2d 20 55 73 65 20 6f 6c 64 20 73 74 79 6c 65 20 6f 66 20 54 4c 56 73 20 77 69 74 68 20 6e 61 | .-.Use.old.style.of.TLVs.with.na |
a6ea0 | 72 72 6f 77 20 6d 65 74 72 69 63 2e 00 2a 2a 6e 65 74 2d 61 64 6d 69 6e 2a 2a 3a 20 4e 65 74 77 | rrow.metric..**net-admin**:.Netw |
a6ec0 | 6f 72 6b 20 6f 70 65 72 61 74 69 6f 6e 73 20 28 69 6e 74 65 72 66 61 63 65 2c 20 66 69 72 65 77 | ork.operations.(interface,.firew |
a6ee0 | 61 6c 6c 2c 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 29 00 2a 2a 6e 65 74 2d 62 69 6e 64 2d | all,.routing.tables).**net-bind- |
a6f00 | 73 65 72 76 69 63 65 2a 2a 3a 20 42 69 6e 64 20 61 20 73 6f 63 6b 65 74 20 74 6f 20 70 72 69 76 | service**:.Bind.a.socket.to.priv |
a6f20 | 69 6c 65 67 65 64 20 70 6f 72 74 73 20 28 70 6f 72 74 20 6e 75 6d 62 65 72 73 20 6c 65 73 73 20 | ileged.ports.(port.numbers.less. |
a6f40 | 74 68 61 6e 20 31 30 32 34 29 00 2a 2a 6e 65 74 2d 72 61 77 2a 2a 3a 20 50 65 72 6d 69 73 73 69 | than.1024).**net-raw**:.Permissi |
a6f60 | 6f 6e 20 74 6f 20 63 72 65 61 74 65 20 72 61 77 20 6e 65 74 77 6f 72 6b 20 73 6f 63 6b 65 74 73 | on.to.create.raw.network.sockets |
a6f80 | 00 2a 2a 6e 6f 2a 2a 3a 20 44 6f 20 6e 6f 74 20 72 65 73 74 61 72 74 20 63 6f 6e 74 61 69 6e 65 | .**no**:.Do.not.restart.containe |
a6fa0 | 72 73 20 6f 6e 20 65 78 69 74 00 2a 2a 6e 6f 61 75 74 68 2a 2a 3a 20 41 75 74 68 65 6e 74 69 63 | rs.on.exit.**noauth**:.Authentic |
a6fc0 | 61 74 69 6f 6e 20 64 69 73 61 62 6c 65 64 00 2a 2a 6e 6f 61 75 74 68 2a 2a 3a 20 41 75 74 68 65 | ation.disabled.**noauth**:.Authe |
a6fe0 | 6e 74 69 63 61 74 69 6f 6e 20 64 69 73 61 62 6c 65 64 2e 00 2a 2a 6f 66 66 2a 2a 20 49 6e 20 74 | ntication.disabled..**off**.In.t |
a7000 | 68 69 73 20 6d 6f 64 65 2c 20 6e 6f 20 44 4e 53 53 45 43 20 70 72 6f 63 65 73 73 69 6e 67 20 74 | his.mode,.no.DNSSEC.processing.t |
a7020 | 61 6b 65 73 20 70 6c 61 63 65 2e 20 54 68 65 20 72 65 63 75 72 73 6f 72 20 77 69 6c 6c 20 6e 6f | akes.place..The.recursor.will.no |
a7040 | 74 20 73 65 74 20 74 68 65 20 44 4e 53 53 45 43 20 4f 4b 20 28 44 4f 29 20 62 69 74 20 69 6e 20 | t.set.the.DNSSEC.OK.(DO).bit.in. |
a7060 | 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 71 75 65 72 69 65 73 20 61 6e 64 20 77 69 6c 6c 20 69 67 | the.outgoing.queries.and.will.ig |
a7080 | 6e 6f 72 65 20 74 68 65 20 44 4f 20 61 6e 64 20 41 44 20 62 69 74 73 20 69 6e 20 71 75 65 72 69 | nore.the.DO.and.AD.bits.in.queri |
a70a0 | 65 73 2e 00 2a 2a 6f 6e 2d 66 61 69 6c 75 72 65 2a 2a 3a 20 52 65 73 74 61 72 74 20 63 6f 6e 74 | es..**on-failure**:.Restart.cont |
a70c0 | 61 69 6e 65 72 73 20 77 68 65 6e 20 74 68 65 79 20 65 78 69 74 20 77 69 74 68 20 61 20 6e 6f 6e | ainers.when.they.exit.with.a.non |
a70e0 | 2d 7a 65 72 6f 20 65 78 69 74 20 63 6f 64 65 2c 20 72 65 74 72 79 69 6e 67 20 69 6e 64 65 66 69 | -zero.exit.code,.retrying.indefi |
a7100 | 6e 69 74 65 6c 79 20 28 64 65 66 61 75 6c 74 29 00 2a 2a 6f 75 74 62 6f 75 6e 64 2d 69 6e 74 65 | nitely.(default).**outbound-inte |
a7120 | 72 66 61 63 65 2a 2a 20 2d 20 61 70 70 6c 69 63 61 62 6c 65 20 6f 6e 6c 79 20 74 6f 20 3a 72 65 | rface**.-.applicable.only.to.:re |
a7140 | 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 2e 20 49 74 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 | f:`source-nat`..It.configures.th |
a7160 | 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 68 | e.interface.which.is.used.for.th |
a7180 | 65 20 6f 75 74 73 69 64 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 74 68 69 73 20 74 72 61 6e | e.outside.traffic.that.this.tran |
a71a0 | 73 6c 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 20 74 6f 2e 00 2a 2a 6f 75 74 62 6f | slation.rule.applies.to..**outbo |
a71c0 | 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 2a 2a 20 2d 20 61 70 70 6c 69 63 61 62 6c 65 20 6f 6e 6c | und-interface**.-.applicable.onl |
a71e0 | 79 20 74 6f 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 2e 20 49 74 20 63 6f 6e 66 69 | y.to.:ref:`source-nat`..It.confi |
a7200 | 67 75 72 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 75 73 65 | gures.the.interface.which.is.use |
a7220 | 64 20 66 6f 72 20 74 68 65 20 6f 75 74 73 69 64 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 74 | d.for.the.outside.traffic.that.t |
a7240 | 68 69 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 20 74 6f 2e | his.translation.rule.applies.to. |
a7260 | 20 49 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 73 2c 20 69 6e 76 65 72 74 65 64 20 73 65 6c 65 | .Interface.groups,.inverted.sele |
a7280 | 63 74 69 6f 6e 20 61 6e 64 20 77 69 6c 64 63 61 72 64 2c 20 61 72 65 20 61 6c 73 6f 20 73 75 70 | ction.and.wildcard,.are.also.sup |
a72a0 | 70 6f 72 74 65 64 2e 00 2a 2a 70 72 65 66 65 72 2a 2a 20 2d 20 41 73 6b 20 63 6c 69 65 6e 74 20 | ported..**prefer**.-.Ask.client. |
a72c0 | 66 6f 72 20 49 50 76 34 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2c 20 64 6f 20 6e 6f 74 20 66 61 69 | for.IPv4.negotiation,.do.not.fai |
a72e0 | 6c 20 69 66 20 69 74 20 72 65 6a 65 63 74 73 00 2a 2a 70 72 65 66 65 72 2a 2a 20 2d 20 41 73 6b | l.if.it.rejects.**prefer**.-.Ask |
a7300 | 20 63 6c 69 65 6e 74 20 66 6f 72 20 49 50 76 36 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2c 20 64 6f | .client.for.IPv6.negotiation,.do |
a7320 | 20 6e 6f 74 20 66 61 69 6c 20 69 66 20 69 74 20 72 65 6a 65 63 74 73 00 2a 2a 70 72 65 66 65 72 | .not.fail.if.it.rejects.**prefer |
a7340 | 2a 2a 20 2d 20 61 73 6b 20 63 6c 69 65 6e 74 20 66 6f 72 20 6d 70 70 65 2c 20 69 66 20 69 74 20 | **.-.ask.client.for.mppe,.if.it. |
a7360 | 72 65 6a 65 63 74 73 20 64 6f 6e 27 74 20 66 61 69 6c 00 2a 2a 70 72 65 66 65 72 2a 2a 20 2d 20 | rejects.don't.fail.**prefer**.-. |
a7380 | 61 73 6b 20 63 6c 69 65 6e 74 20 66 6f 72 20 6d 70 70 65 2c 20 69 66 20 69 74 20 72 65 6a 65 63 | ask.client.for.mppe,.if.it.rejec |
a73a0 | 74 73 20 64 6f 6e 27 74 20 66 61 69 6c 2e 20 28 44 65 66 61 75 6c 74 20 76 61 6c 75 65 29 00 2a | ts.don't.fail..(Default.value).* |
a73c0 | 2a 70 72 6f 63 65 73 73 2a 2a 20 57 68 65 6e 20 64 6e 73 73 65 63 20 69 73 20 73 65 74 20 74 6f | *process**.When.dnssec.is.set.to |
a73e0 | 20 70 72 6f 63 65 73 73 20 74 68 65 20 62 65 68 61 76 69 6f 72 20 69 73 20 73 69 6d 69 6c 61 72 | .process.the.behavior.is.similar |
a7400 | 20 74 6f 20 70 72 6f 63 65 73 73 2d 6e 6f 2d 76 61 6c 69 64 61 74 65 2e 20 48 6f 77 65 76 65 72 | .to.process-no-validate..However |
a7420 | 2c 20 74 68 65 20 72 65 63 75 72 73 6f 72 20 77 69 6c 6c 20 74 72 79 20 74 6f 20 76 61 6c 69 64 | ,.the.recursor.will.try.to.valid |
a7440 | 61 74 65 20 74 68 65 20 64 61 74 61 20 69 66 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 6f 66 20 | ate.the.data.if.at.least.one.of. |
a7460 | 74 68 65 20 44 4f 20 6f 72 20 41 44 20 62 69 74 73 20 69 73 20 73 65 74 20 69 6e 20 74 68 65 20 | the.DO.or.AD.bits.is.set.in.the. |
a7480 | 71 75 65 72 79 3b 20 69 6e 20 74 68 61 74 20 63 61 73 65 2c 20 69 74 20 77 69 6c 6c 20 73 65 74 | query;.in.that.case,.it.will.set |
a74a0 | 20 74 68 65 20 41 44 2d 62 69 74 20 69 6e 20 74 68 65 20 72 65 73 70 6f 6e 73 65 20 77 68 65 6e | .the.AD-bit.in.the.response.when |
a74c0 | 20 74 68 65 20 64 61 74 61 20 69 73 20 76 61 6c 69 64 61 74 65 64 20 73 75 63 63 65 73 73 66 75 | .the.data.is.validated.successfu |
a74e0 | 6c 6c 79 2c 20 6f 72 20 73 65 6e 64 20 53 45 52 56 46 41 49 4c 20 77 68 65 6e 20 74 68 65 20 76 | lly,.or.send.SERVFAIL.when.the.v |
a7500 | 61 6c 69 64 61 74 69 6f 6e 20 63 6f 6d 65 73 20 75 70 20 62 6f 67 75 73 2e 00 2a 2a 70 72 6f 63 | alidation.comes.up.bogus..**proc |
a7520 | 65 73 73 2d 6e 6f 2d 76 61 6c 69 64 61 74 65 2a 2a 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 20 74 | ess-no-validate**.In.this.mode.t |
a7540 | 68 65 20 72 65 63 75 72 73 6f 72 20 61 63 74 73 20 61 73 20 61 20 22 73 65 63 75 72 69 74 79 20 | he.recursor.acts.as.a."security. |
a7560 | 61 77 61 72 65 2c 20 6e 6f 6e 2d 76 61 6c 69 64 61 74 69 6e 67 22 20 6e 61 6d 65 73 65 72 76 65 | aware,.non-validating".nameserve |
a7580 | 72 2c 20 6d 65 61 6e 69 6e 67 20 69 74 20 77 69 6c 6c 20 73 65 74 20 74 68 65 20 44 4f 2d 62 69 | r,.meaning.it.will.set.the.DO-bi |
a75a0 | 74 20 6f 6e 20 6f 75 74 67 6f 69 6e 67 20 71 75 65 72 69 65 73 20 61 6e 64 20 77 69 6c 6c 20 70 | t.on.outgoing.queries.and.will.p |
a75c0 | 72 6f 76 69 64 65 20 44 4e 53 53 45 43 20 72 65 6c 61 74 65 64 20 52 52 73 65 74 73 20 28 4e 53 | rovide.DNSSEC.related.RRsets.(NS |
a75e0 | 45 43 2c 20 52 52 53 49 47 29 20 74 6f 20 63 6c 69 65 6e 74 73 20 74 68 61 74 20 61 73 6b 20 66 | EC,.RRSIG).to.clients.that.ask.f |
a7600 | 6f 72 20 74 68 65 6d 20 28 62 79 20 6d 65 61 6e 73 20 6f 66 20 61 20 44 4f 2d 62 69 74 20 69 6e | or.them.(by.means.of.a.DO-bit.in |
a7620 | 20 74 68 65 20 71 75 65 72 79 29 2c 20 65 78 63 65 70 74 20 66 6f 72 20 7a 6f 6e 65 73 20 70 72 | .the.query),.except.for.zones.pr |
a7640 | 6f 76 69 64 65 64 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 75 74 68 2d 7a 6f 6e 65 73 20 73 65 | ovided.through.the.auth-zones.se |
a7660 | 74 74 69 6e 67 2e 20 49 74 20 77 69 6c 6c 20 6e 6f 74 20 64 6f 20 61 6e 79 20 76 61 6c 69 64 61 | tting..It.will.not.do.any.valida |
a7680 | 74 69 6f 6e 20 69 6e 20 74 68 69 73 20 6d 6f 64 65 2c 20 6e 6f 74 20 65 76 65 6e 20 77 68 65 6e | tion.in.this.mode,.not.even.when |
a76a0 | 20 72 65 71 75 65 73 74 65 64 20 62 79 20 74 68 65 20 63 6c 69 65 6e 74 2e 00 2a 2a 70 72 6f 74 | .requested.by.the.client..**prot |
a76c0 | 6f 63 6f 6c 2a 2a 20 2d 20 73 70 65 63 69 66 79 20 77 68 69 63 68 20 74 79 70 65 73 20 6f 66 20 | ocol**.-.specify.which.types.of. |
a76e0 | 70 72 6f 74 6f 63 6f 6c 73 20 74 68 69 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 20 | protocols.this.translation.rule. |
a7700 | 61 70 70 6c 69 65 73 20 74 6f 2e 20 4f 6e 6c 79 20 70 61 63 6b 65 74 73 20 6d 61 74 63 68 69 6e | applies.to..Only.packets.matchin |
a7720 | 67 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 6f 74 6f 63 6f 6c 20 61 72 65 20 4e 41 54 | g.the.specified.protocol.are.NAT |
a7740 | 65 64 2e 20 42 79 20 64 65 66 61 75 6c 74 20 74 68 69 73 20 61 70 70 6c 69 65 73 20 74 6f 20 60 | ed..By.default.this.applies.to.` |
a7760 | 61 6c 6c 60 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 2a 2a 72 61 64 69 75 73 2a 2a 3a 20 41 6c 6c 20 | all`.protocols..**radius**:.All. |
a7780 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 71 75 65 72 69 65 73 20 61 72 65 20 68 61 6e 64 6c | authentication.queries.are.handl |
a77a0 | 65 64 20 62 79 20 61 20 63 6f 6e 66 69 67 75 72 65 64 20 52 41 44 49 55 53 20 73 65 72 76 65 72 | ed.by.a.configured.RADIUS.server |
a77c0 | 2e 00 2a 2a 72 61 6e 64 6f 6d 2a 2a 20 2d 20 52 61 6e 64 6f 6d 20 69 6e 74 65 72 66 61 63 65 20 | ..**random**.-.Random.interface. |
a77e0 | 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 49 50 76 36 00 2a 2a 72 65 6d 6f 74 65 20 73 69 64 | identifier.for.IPv6.**remote.sid |
a7800 | 65 20 2d 20 63 6f 6d 6d 61 6e 64 73 2a 2a 00 2a 2a 72 65 70 6c 61 63 65 2a 2a 3a 20 54 65 72 6d | e.-.commands**.**replace**:.Term |
a7820 | 69 6e 61 74 65 20 66 69 72 73 74 20 73 65 73 73 69 6f 6e 20 77 68 65 6e 20 73 65 63 6f 6e 64 20 | inate.first.session.when.second. |
a7840 | 69 73 20 61 75 74 68 6f 72 69 7a 65 64 20 2a 2a 28 64 65 66 61 75 6c 74 29 2a 2a 00 2a 2a 72 65 | is.authorized.**(default)**.**re |
a7860 | 70 6c 61 63 65 3a 2a 2a 20 52 65 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6c 72 65 61 | place:**.Relay.information.alrea |
a7880 | 64 79 20 70 72 65 73 65 6e 74 20 69 6e 20 61 20 70 61 63 6b 65 74 20 69 73 20 73 74 72 69 70 70 | dy.present.in.a.packet.is.stripp |
a78a0 | 65 64 20 61 6e 64 20 72 65 70 6c 61 63 65 64 20 77 69 74 68 20 74 68 65 20 72 6f 75 74 65 72 27 | ed.and.replaced.with.the.router' |
a78c0 | 73 20 6f 77 6e 20 72 65 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 73 65 74 2e 00 2a 2a 72 | s.own.relay.information.set..**r |
a78e0 | 65 71 75 69 72 65 2a 2a 20 2d 20 52 65 71 75 69 72 65 20 49 50 76 34 20 6e 65 67 6f 74 69 61 74 | equire**.-.Require.IPv4.negotiat |
a7900 | 69 6f 6e 00 2a 2a 72 65 71 75 69 72 65 2a 2a 20 2d 20 52 65 71 75 69 72 65 20 49 50 76 36 20 6e | ion.**require**.-.Require.IPv6.n |
a7920 | 65 67 6f 74 69 61 74 69 6f 6e 00 2a 2a 72 65 71 75 69 72 65 2a 2a 20 2d 20 61 73 6b 20 63 6c 69 | egotiation.**require**.-.ask.cli |
a7940 | 65 6e 74 20 66 6f 72 20 6d 70 70 65 2c 20 69 66 20 69 74 20 72 65 6a 65 63 74 73 20 64 72 6f 70 | ent.for.mppe,.if.it.rejects.drop |
a7960 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 00 2a 2a 72 69 67 68 74 2a 2a 00 2a 2a 73 65 74 70 63 61 70 2a | .connection.**right**.**setpcap* |
a7980 | 2a 3a 20 43 61 70 61 62 69 6c 69 74 79 20 73 65 74 73 20 28 66 72 6f 6d 20 62 6f 75 6e 64 65 64 | *:.Capability.sets.(from.bounded |
a79a0 | 20 6f 72 20 69 6e 68 65 72 69 74 65 64 20 73 65 74 29 00 2a 2a 73 68 61 72 65 64 2a 2a 3a 20 4d | .or.inherited.set).**shared**:.M |
a79c0 | 75 6c 74 69 70 6c 65 20 63 6c 69 65 6e 74 73 20 73 68 61 72 65 20 74 68 65 20 73 61 6d 65 20 6e | ultiple.clients.share.the.same.n |
a79e0 | 65 74 77 6f 72 6b 2e 20 2a 2a 28 64 65 66 61 75 6c 74 29 2a 2a 00 2a 2a 73 6f 75 72 63 65 2a 2a | etwork..**(default)**.**source** |
a7a00 | 20 2d 20 73 70 65 63 69 66 69 65 73 20 77 68 69 63 68 20 70 61 63 6b 65 74 73 20 74 68 65 20 4e | .-.specifies.which.packets.the.N |
a7a20 | 41 54 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 20 74 6f 20 62 | AT.translation.rule.applies.to.b |
a7a40 | 61 73 65 64 20 6f 6e 20 74 68 65 20 70 61 63 6b 65 74 73 20 73 6f 75 72 63 65 20 49 50 20 61 64 | ased.on.the.packets.source.IP.ad |
a7a60 | 64 72 65 73 73 20 61 6e 64 2f 6f 72 20 73 6f 75 72 63 65 20 70 6f 72 74 2e 20 4f 6e 6c 79 20 6d | dress.and/or.source.port..Only.m |
a7a80 | 61 74 63 68 69 6e 67 20 70 61 63 6b 65 74 73 20 61 72 65 20 63 6f 6e 73 69 64 65 72 65 64 20 66 | atching.packets.are.considered.f |
a7aa0 | 6f 72 20 4e 41 54 2e 00 2a 2a 73 79 73 2d 61 64 6d 69 6e 2a 2a 3a 20 41 64 6d 69 6e 69 73 74 61 | or.NAT..**sys-admin**:.Administa |
a7ac0 | 74 69 6f 6e 20 6f 70 65 72 61 74 69 6f 6e 73 20 28 71 75 6f 74 61 63 74 6c 2c 20 6d 6f 75 6e 74 | tion.operations.(quotactl,.mount |
a7ae0 | 2c 20 73 65 74 68 6f 73 74 6e 61 6d 65 2c 20 73 65 74 64 6f 6d 61 69 6e 61 6d 65 29 00 2a 2a 73 | ,.sethostname,.setdomainame).**s |
a7b00 | 79 73 2d 74 69 6d 65 2a 2a 3a 20 50 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 73 65 74 20 73 79 73 | ys-time**:.Permission.to.set.sys |
a7b20 | 74 65 6d 20 63 6c 6f 63 6b 00 2a 2a 74 72 61 6e 73 69 74 69 6f 6e 2a 2a 20 2d 20 53 65 6e 64 20 | tem.clock.**transition**.-.Send. |
a7b40 | 61 6e 64 20 61 63 63 65 70 74 20 62 6f 74 68 20 73 74 79 6c 65 73 20 6f 66 20 54 4c 56 73 20 64 | and.accept.both.styles.of.TLVs.d |
a7b60 | 75 72 69 6e 67 20 74 72 61 6e 73 69 74 69 6f 6e 2e 00 2a 2a 75 70 73 74 72 65 61 6d 3a 2a 2a 20 | uring.transition..**upstream:**. |
a7b80 | 54 68 65 20 75 70 73 74 72 65 61 6d 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 20 69 | The.upstream.network.interface.i |
a7ba0 | 73 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 | s.the.outgoing.interface.which.i |
a7bc0 | 73 20 72 65 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6e 67 20 | s.responsible.for.communicating. |
a7be0 | 74 6f 20 61 76 61 69 6c 61 62 6c 65 20 6d 75 6c 74 69 63 61 73 74 20 64 61 74 61 20 73 6f 75 72 | to.available.multicast.data.sour |
a7c00 | 63 65 73 2e 20 54 68 65 72 65 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 6f 6e 65 20 75 70 73 74 72 | ces..There.can.only.be.one.upstr |
a7c20 | 65 61 6d 20 69 6e 74 65 72 66 61 63 65 2e 00 2a 2a 76 61 6c 69 64 61 74 65 2a 2a 20 54 68 65 20 | eam.interface..**validate**.The. |
a7c40 | 68 69 67 68 65 73 74 20 6d 6f 64 65 20 6f 66 20 44 4e 53 53 45 43 20 70 72 6f 63 65 73 73 69 6e | highest.mode.of.DNSSEC.processin |
a7c60 | 67 2e 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 2c 20 61 6c 6c 20 71 75 65 72 69 65 73 20 77 69 6c | g..In.this.mode,.all.queries.wil |
a7c80 | 6c 20 62 65 20 76 61 6c 69 64 61 74 65 64 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 61 6e 73 77 65 | l.be.validated.and.will.be.answe |
a7ca0 | 72 65 64 20 77 69 74 68 20 61 20 53 45 52 56 46 41 49 4c 20 69 6e 20 63 61 73 65 20 6f 66 20 62 | red.with.a.SERVFAIL.in.case.of.b |
a7cc0 | 6f 67 75 73 20 64 61 74 61 2c 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 63 6c 69 | ogus.data,.regardless.of.the.cli |
a7ce0 | 65 6e 74 27 73 20 72 65 71 75 65 73 74 2e 00 2a 2a 76 6c 61 6e 2a 2a 3a 20 4f 6e 65 20 56 4c 41 | ent's.request..**vlan**:.One.VLA |
a7d00 | 4e 20 70 65 72 20 63 6c 69 65 6e 74 2e 00 2a 2a 77 69 64 65 2a 2a 20 2d 20 55 73 65 20 6e 65 77 | N.per.client..**wide**.-.Use.new |
a7d20 | 20 73 74 79 6c 65 20 6f 66 20 54 4c 56 73 20 74 6f 20 63 61 72 72 79 20 77 69 64 65 72 20 6d 65 | .style.of.TLVs.to.carry.wider.me |
a7d40 | 74 72 69 63 2e 00 2a 2a 78 3a 78 3a 78 3a 78 2a 2a 20 2d 20 53 70 65 63 69 66 79 20 69 6e 74 65 | tric..**x:x:x:x**.-.Specify.inte |
a7d60 | 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 49 50 76 36 00 2a 62 67 70 64 2a | rface.identifier.for.IPv6.*bgpd* |
a7d80 | 20 73 75 70 70 6f 72 74 73 20 4d 75 6c 74 69 70 72 6f 74 6f 63 6f 6c 20 45 78 74 65 6e 73 69 6f | .supports.Multiprotocol.Extensio |
a7da0 | 6e 20 66 6f 72 20 42 47 50 2e 20 53 6f 20 69 66 20 61 20 72 65 6d 6f 74 65 20 70 65 65 72 20 73 | n.for.BGP..So.if.a.remote.peer.s |
a7dc0 | 75 70 70 6f 72 74 73 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 2c 20 2a 62 67 70 64 2a 20 63 61 6e | upports.the.protocol,.*bgpd*.can |
a7de0 | 20 65 78 63 68 61 6e 67 65 20 49 50 76 36 20 61 6e 64 2f 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 | .exchange.IPv6.and/or.multicast. |
a7e00 | 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 30 00 30 20 69 66 20 6e 6f 74 20 | routing.information..0.0.if.not. |
a7e20 | 64 65 66 69 6e 65 64 2c 20 77 68 69 63 68 20 6d 65 61 6e 73 20 6e 6f 20 72 65 66 72 65 73 68 69 | defined,.which.means.no.refreshi |
a7e40 | 6e 67 2e 00 30 20 69 66 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e 00 30 30 30 30 30 30 00 30 30 31 | ng..0.if.not.defined..000000.001 |
a7e60 | 30 31 30 00 30 30 31 31 30 30 00 30 30 31 31 31 30 00 30 31 30 30 31 30 00 30 31 30 31 30 30 00 | 010.001100.001110.010010.010100. |
a7e80 | 30 31 30 31 31 30 00 30 31 31 30 31 30 00 30 31 31 31 30 30 00 30 31 31 31 31 30 00 30 3a 20 44 | 010110.011010.011100.011110.0:.D |
a7ea0 | 69 73 61 62 6c 65 20 44 41 44 00 31 00 31 20 69 66 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e 00 31 | isable.DAD.1.1.if.not.defined..1 |
a7ec0 | 2d 74 6f 2d 31 20 4e 41 54 00 31 2e 20 43 72 65 61 74 65 20 61 6e 20 65 76 65 6e 74 20 68 61 6e | -to-1.NAT.1..Create.an.event.han |
a7ee0 | 64 6c 65 72 00 31 2e 20 46 69 72 73 74 20 70 61 63 6b 65 74 20 69 73 20 72 65 63 65 69 76 65 64 | dler.1..First.packet.is.received |
a7f00 | 20 6f 6e 20 65 68 74 30 2c 20 77 69 74 68 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 | .on.eht0,.with.destination.addre |
a7f20 | 73 73 20 31 39 32 2e 30 2e 32 2e 31 30 30 2c 20 70 72 6f 74 6f 63 6f 6c 20 74 63 70 20 61 6e 64 | ss.192.0.2.100,.protocol.tcp.and |
a7f40 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 31 31 32 32 2e 20 41 73 73 75 6d 65 20 73 | .destination.port.1122..Assume.s |
a7f60 | 75 63 68 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 69 73 20 72 65 61 63 68 | uch.destination.address.is.reach |
a7f80 | 61 62 6c 65 20 74 68 72 6f 75 67 68 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 31 2e 00 31 30 00 | able.through.interface.eth1..10. |
a7fa0 | 31 30 20 2d 20 31 30 20 4d 42 69 74 2f 73 00 31 30 2e 30 2e 30 2e 30 20 74 6f 20 31 30 2e 32 35 | 10.-.10.MBit/s.10.0.0.0.to.10.25 |
a7fc0 | 35 2e 32 35 35 2e 32 35 35 20 28 43 49 44 52 3a 20 31 30 2e 30 2e 30 2e 30 2f 38 29 00 31 30 30 | 5.255.255.(CIDR:.10.0.0.0/8).100 |
a7fe0 | 20 2d 20 31 30 30 20 4d 42 69 74 2f 73 00 31 30 30 30 20 2d 20 31 20 47 42 69 74 2f 73 00 31 30 | .-.100.MBit/s.1000.-.1.GBit/s.10 |
a8000 | 30 30 30 20 2d 20 31 30 20 47 42 69 74 2f 73 00 31 30 30 30 30 30 20 2d 20 31 30 30 20 47 42 69 | 000.-.10.GBit/s.100000.-.100.GBi |
a8020 | 74 2f 73 00 31 30 30 30 31 30 00 31 30 30 31 30 30 00 31 30 30 31 31 30 00 31 30 31 31 31 30 00 | t/s.100010.100100.100110.101110. |
a8040 | 31 31 00 31 31 39 00 31 32 00 31 32 31 2c 20 32 34 39 00 31 33 00 31 34 00 31 35 00 31 36 00 31 | 11.119.12.121,.249.13.14.15.16.1 |
a8060 | 37 00 31 37 32 2e 31 36 2e 30 2e 30 20 74 6f 20 31 37 32 2e 33 31 2e 32 35 35 2e 32 35 35 20 28 | 7.172.16.0.0.to.172.31.255.255.( |
a8080 | 43 49 44 52 3a 20 31 37 32 2e 31 36 2e 30 2e 30 2f 31 32 29 00 31 38 00 31 39 00 31 39 32 2e 31 | CIDR:.172.16.0.0/12).18.19.192.1 |
a80a0 | 36 38 2e 30 2e 30 20 74 6f 20 31 39 32 2e 31 36 38 2e 32 35 35 2e 32 35 35 20 28 43 49 44 52 3a | 68.0.0.to.192.168.255.255.(CIDR: |
a80c0 | 20 31 39 32 2e 31 36 38 2e 30 2e 30 2f 31 36 29 00 31 3a 20 45 6e 61 62 6c 65 20 44 41 44 20 28 | .192.168.0.0/16).1:.Enable.DAD.( |
a80e0 | 64 65 66 61 75 6c 74 29 00 32 00 32 2e 20 41 64 64 20 72 65 67 65 78 20 74 6f 20 74 68 65 20 73 | default).2.2..Add.regex.to.the.s |
a8100 | 63 72 69 70 74 00 32 2e 20 53 69 6e 63 65 20 74 68 69 73 20 69 73 20 74 68 65 20 66 69 72 73 74 | cript.2..Since.this.is.the.first |
a8120 | 20 70 61 63 6b 65 74 2c 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 75 73 20 6f 66 20 74 68 | .packet,.connection.status.of.th |
a8140 | 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 2c 20 73 6f 20 66 61 72 20 69 73 20 2a 2a 6e 65 77 2a 2a | is.connection,.so.far.is.**new** |
a8160 | 2e 20 53 6f 20 6e 65 69 74 68 65 72 20 72 75 6c 65 20 31 30 20 6e 6f 72 20 32 30 20 61 72 65 20 | ..So.neither.rule.10.nor.20.are. |
a8180 | 76 61 6c 69 64 2e 00 32 30 00 32 31 00 32 32 00 32 33 00 32 35 30 30 20 2d 20 32 2e 35 20 47 42 | valid..20.21.22.23.2500.-.2.5.GB |
a81a0 | 69 74 2f 73 00 32 35 30 30 30 20 2d 20 32 35 20 47 42 69 74 2f 73 00 32 35 32 00 32 36 00 32 38 | it/s.25000.-.25.GBit/s.252.26.28 |
a81c0 | 00 32 3a 20 45 6e 61 62 6c 65 20 44 41 44 2c 20 61 6e 64 20 64 69 73 61 62 6c 65 20 49 50 76 36 | .2:.Enable.DAD,.and.disable.IPv6 |
a81e0 | 20 6f 70 65 72 61 74 69 6f 6e 20 69 66 20 4d 41 43 2d 62 61 73 65 64 20 64 75 70 6c 69 63 61 74 | .operation.if.MAC-based.duplicat |
a8200 | 65 20 6c 69 6e 6b 2d 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 20 68 61 73 20 62 65 65 6e 20 66 6f | e.link-local.address.has.been.fo |
a8220 | 75 6e 64 2e 00 32 46 41 20 4f 54 50 20 73 75 70 70 6f 72 74 00 33 00 33 2e 20 41 64 64 20 61 20 | und..2FA.OTP.support.3.3..Add.a. |
a8240 | 66 75 6c 6c 20 70 61 74 68 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 00 33 30 00 33 34 00 33 36 | full.path.to.the.script.30.34.36 |
a8260 | 00 33 38 00 34 00 34 2e 20 41 64 64 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 73 | .38.4.4..Add.optional.parameters |
a8280 | 00 34 2e 20 4f 6e 63 65 20 61 6e 73 77 65 72 20 66 72 6f 6d 20 73 65 72 76 65 72 20 31 39 32 2e | .4..Once.answer.from.server.192. |
a82a0 | 30 2e 32 2e 31 30 30 20 69 73 20 73 65 65 6e 20 69 6e 20 6f 70 70 6f 73 69 74 65 20 64 69 72 65 | 0.2.100.is.seen.in.opposite.dire |
a82c0 | 63 74 69 6f 6e 2c 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 65 20 77 69 6c 6c 20 62 65 20 | ction,.connection.state.will.be. |
a82e0 | 74 72 69 67 67 65 72 65 64 20 74 6f 20 2a 2a 65 73 74 61 62 6c 69 73 68 65 64 2a 2a 2c 20 73 6f | triggered.to.**established**,.so |
a8300 | 20 74 68 69 73 20 72 65 70 6c 79 20 69 73 20 61 63 63 65 70 74 65 64 20 69 6e 20 72 75 6c 65 20 | .this.reply.is.accepted.in.rule. |
a8320 | 31 30 2e 00 34 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 73 20 6d 61 79 20 73 77 69 74 63 68 20 74 | 10..40.MHz.channels.may.switch.t |
a8340 | 68 65 69 72 20 70 72 69 6d 61 72 79 20 61 6e 64 20 73 65 63 6f 6e 64 61 72 79 20 63 68 61 6e 6e | heir.primary.and.secondary.chann |
a8360 | 65 6c 73 20 69 66 20 6e 65 65 64 65 64 20 6f 72 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 34 30 20 | els.if.needed.or.creation.of.40. |
a8380 | 4d 48 7a 20 63 68 61 6e 6e 65 6c 20 6d 61 79 62 65 20 72 65 6a 65 63 74 65 64 20 62 61 73 65 64 | MHz.channel.maybe.rejected.based |
a83a0 | 20 6f 6e 20 6f 76 65 72 6c 61 70 70 69 6e 67 20 42 53 53 65 73 2e 20 54 68 65 73 65 20 63 68 61 | .on.overlapping.BSSes..These.cha |
a83c0 | 6e 67 65 73 20 61 72 65 20 64 6f 6e 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 77 68 65 6e | nges.are.done.automatically.when |
a83e0 | 20 68 6f 73 74 61 70 64 20 69 73 20 73 65 74 74 69 6e 67 20 75 70 20 74 68 65 20 34 30 20 4d 48 | .hostapd.is.setting.up.the.40.MH |
a8400 | 7a 20 63 68 61 6e 6e 65 6c 2e 00 34 30 30 30 30 20 2d 20 34 30 20 47 42 69 74 2f 73 00 34 32 00 | z.channel..40000.-.40.GBit/s.42. |
a8420 | 34 34 00 34 36 00 35 00 35 20 69 66 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e 00 35 2e 20 53 65 63 | 44.46.5.5.if.not.defined..5..Sec |
a8440 | 6f 6e 64 20 70 61 63 6b 65 74 20 66 6f 72 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 | ond.packet.for.this.connection.i |
a8460 | 73 20 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 2e 20 53 69 6e 63 65 20 | s.received.by.the.router..Since. |
a8480 | 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 65 20 69 73 20 2a 2a 65 73 74 61 62 6c 69 73 68 65 | connection.state.is.**establishe |
a84a0 | 64 2a 2a 2c 20 74 68 65 6e 20 72 75 6c 65 20 31 30 20 69 73 20 68 69 74 2c 20 61 6e 64 20 61 20 | d**,.then.rule.10.is.hit,.and.a. |
a84c0 | 6e 65 77 20 65 6e 74 72 79 20 69 6e 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 46 54 30 31 20 | new.entry.in.the.flowtable.FT01. |
a84e0 | 69 73 20 61 64 64 65 64 20 66 6f 72 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 35 30 | is.added.for.this.connection..50 |
a8500 | 30 30 20 2d 20 35 20 47 42 69 74 2f 73 00 35 30 30 30 30 20 2d 20 35 30 20 47 42 69 74 2f 73 00 | 00.-.5.GBit/s.50000.-.50.GBit/s. |
a8520 | 35 34 00 36 00 36 2e 20 41 6c 6c 20 73 75 62 73 65 63 75 65 6e 74 20 70 61 63 6b 65 74 73 20 77 | 54.6.6..All.subsecuent.packets.w |
a8540 | 69 6c 6c 20 73 6b 69 70 20 74 72 61 64 69 74 69 6f 6e 61 6c 20 70 61 74 68 2c 20 61 6e 64 20 77 | ill.skip.traditional.path,.and.w |
a8560 | 69 6c 6c 20 62 65 20 6f 66 66 6c 6f 61 64 65 64 20 61 6e 64 20 77 69 6c 6c 20 75 73 65 20 74 68 | ill.be.offloaded.and.will.use.th |
a8580 | 65 20 2a 2a 46 61 73 74 20 50 61 74 68 2a 2a 2e 00 36 36 00 36 36 25 20 6f 66 20 74 72 61 66 66 | e.**Fast.Path**..66.66%.of.traff |
a85a0 | 69 63 20 69 73 20 72 6f 75 74 65 64 20 74 6f 20 65 74 68 30 2c 20 65 74 68 31 20 67 65 74 73 20 | ic.is.routed.to.eth0,.eth1.gets. |
a85c0 | 33 33 25 20 6f 66 20 74 72 61 66 66 69 63 2e 00 36 37 00 36 39 00 36 69 6e 34 20 28 53 49 54 29 | 33%.of.traffic..67.69.6in4.(SIT) |
a85e0 | 00 36 69 6e 34 20 75 73 65 73 20 74 75 6e 6e 65 6c 69 6e 67 20 74 6f 20 65 6e 63 61 70 73 75 6c | .6in4.uses.tunneling.to.encapsul |
a8600 | 61 74 65 20 49 50 76 36 20 74 72 61 66 66 69 63 20 6f 76 65 72 20 49 50 76 34 20 6c 69 6e 6b 73 | ate.IPv6.traffic.over.IPv4.links |
a8620 | 20 61 73 20 64 65 66 69 6e 65 64 20 69 6e 20 3a 72 66 63 3a 60 34 32 31 33 60 2e 20 54 68 65 20 | .as.defined.in.:rfc:`4213`..The. |
a8640 | 36 69 6e 34 20 74 72 61 66 66 69 63 20 69 73 20 73 65 6e 74 20 6f 76 65 72 20 49 50 76 34 20 69 | 6in4.traffic.is.sent.over.IPv4.i |
a8660 | 6e 73 69 64 65 20 49 50 76 34 20 70 61 63 6b 65 74 73 20 77 68 6f 73 65 20 49 50 20 68 65 61 64 | nside.IPv4.packets.whose.IP.head |
a8680 | 65 72 73 20 68 61 76 65 20 74 68 65 20 49 50 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 6d 62 65 72 20 | ers.have.the.IP.protocol.number. |
a86a0 | 73 65 74 20 74 6f 20 34 31 2e 20 54 68 69 73 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 6d 62 65 72 20 | set.to.41..This.protocol.number. |
a86c0 | 69 73 20 73 70 65 63 69 66 69 63 61 6c 6c 79 20 64 65 73 69 67 6e 61 74 65 64 20 66 6f 72 20 49 | is.specifically.designated.for.I |
a86e0 | 50 76 36 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 2c 20 74 68 65 20 49 50 76 34 20 70 61 63 6b | Pv6.encapsulation,.the.IPv4.pack |
a8700 | 65 74 20 68 65 61 64 65 72 20 69 73 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 66 6f 6c 6c 6f 77 65 | et.header.is.immediately.followe |
a8720 | 64 20 62 79 20 74 68 65 20 49 50 76 36 20 70 61 63 6b 65 74 20 62 65 69 6e 67 20 63 61 72 72 69 | d.by.the.IPv6.packet.being.carri |
a8740 | 65 64 2e 20 54 68 65 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 6f 76 65 72 68 65 61 64 20 69 | ed..The.encapsulation.overhead.i |
a8760 | 73 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 49 50 76 34 20 68 65 61 64 65 72 20 6f 66 | s.the.size.of.the.IPv4.header.of |
a8780 | 20 32 30 20 62 79 74 65 73 2c 20 74 68 65 72 65 66 6f 72 65 20 77 69 74 68 20 61 6e 20 4d 54 55 | .20.bytes,.therefore.with.an.MTU |
a87a0 | 20 6f 66 20 31 35 30 30 20 62 79 74 65 73 2c 20 49 50 76 36 20 70 61 63 6b 65 74 73 20 6f 66 20 | .of.1500.bytes,.IPv6.packets.of. |
a87c0 | 31 34 38 30 20 62 79 74 65 73 20 63 61 6e 20 62 65 20 73 65 6e 74 20 77 69 74 68 6f 75 74 20 66 | 1480.bytes.can.be.sent.without.f |
a87e0 | 72 61 67 6d 65 6e 74 61 74 69 6f 6e 2e 20 54 68 69 73 20 74 75 6e 6e 65 6c 69 6e 67 20 74 65 63 | ragmentation..This.tunneling.tec |
a8800 | 68 6e 69 71 75 65 20 69 73 20 66 72 65 71 75 65 6e 74 6c 79 20 75 73 65 64 20 62 79 20 49 50 76 | hnique.is.frequently.used.by.IPv |
a8820 | 36 20 74 75 6e 6e 65 6c 20 62 72 6f 6b 65 72 73 20 6c 69 6b 65 20 60 48 75 72 72 69 63 61 6e 65 | 6.tunnel.brokers.like.`Hurricane |
a8840 | 20 45 6c 65 63 74 72 69 63 60 5f 2e 00 37 00 37 30 00 38 00 38 30 32 2e 31 71 20 56 4c 41 4e 20 | .Electric`_..7.70.8.802.1q.VLAN. |
a8860 | 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 72 65 70 72 65 73 65 6e 74 65 64 20 61 73 20 76 69 | interfaces.are.represented.as.vi |
a8880 | 72 74 75 61 6c 20 73 75 62 2d 69 6e 74 65 72 66 61 63 65 73 20 69 6e 20 56 79 4f 53 2e 20 54 68 | rtual.sub-interfaces.in.VyOS..Th |
a88a0 | 65 20 74 65 72 6d 20 75 73 65 64 20 66 6f 72 20 74 68 69 73 20 69 73 20 60 60 76 69 66 60 60 2e | e.term.used.for.this.is.``vif``. |
a88c0 | 00 39 00 3a 61 62 62 72 3a 60 41 46 49 20 28 41 64 64 72 65 73 73 20 66 61 6d 69 6c 79 20 61 75 | .9.:abbr:`AFI.(Address.family.au |
a88e0 | 74 68 6f 72 69 74 79 20 69 64 65 6e 74 69 66 69 65 72 29 60 20 2d 20 60 60 34 39 60 60 20 54 68 | thority.identifier)`.-.``49``.Th |
a8900 | 65 20 41 46 49 20 76 61 6c 75 65 20 34 39 20 69 73 20 77 68 61 74 20 49 53 2d 49 53 20 75 73 65 | e.AFI.value.49.is.what.IS-IS.use |
a8920 | 73 20 66 6f 72 20 70 72 69 76 61 74 65 20 61 64 64 72 65 73 73 69 6e 67 2e 00 3a 61 62 62 72 3a | s.for.private.addressing..:abbr: |
a8940 | 60 41 52 50 20 28 41 64 64 72 65 73 73 20 52 65 73 6f 6c 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f | `ARP.(Address.Resolution.Protoco |
a8960 | 6c 29 60 20 69 73 20 61 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c 20 | l)`.is.a.communication.protocol. |
a8980 | 75 73 65 64 20 66 6f 72 20 64 69 73 63 6f 76 65 72 69 6e 67 20 74 68 65 20 6c 69 6e 6b 20 6c 61 | used.for.discovering.the.link.la |
a89a0 | 79 65 72 20 61 64 64 72 65 73 73 2c 20 73 75 63 68 20 61 73 20 61 20 4d 41 43 20 61 64 64 72 65 | yer.address,.such.as.a.MAC.addre |
a89c0 | 73 73 2c 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 61 20 67 69 76 65 6e 20 69 6e 74 65 | ss,.associated.with.a.given.inte |
a89e0 | 72 6e 65 74 20 6c 61 79 65 72 20 61 64 64 72 65 73 73 2c 20 74 79 70 69 63 61 6c 6c 79 20 61 6e | rnet.layer.address,.typically.an |
a8a00 | 20 49 50 76 34 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 6d 61 70 70 69 6e 67 20 69 73 20 61 | .IPv4.address..This.mapping.is.a |
a8a20 | 20 63 72 69 74 69 63 61 6c 20 66 75 6e 63 74 69 6f 6e 20 69 6e 20 74 68 65 20 49 6e 74 65 72 6e | .critical.function.in.the.Intern |
a8a40 | 65 74 20 70 72 6f 74 6f 63 6f 6c 20 73 75 69 74 65 2e 20 41 52 50 20 77 61 73 20 64 65 66 69 6e | et.protocol.suite..ARP.was.defin |
a8a60 | 65 64 20 69 6e 20 31 39 38 32 20 62 79 20 3a 72 66 63 3a 60 38 32 36 60 20 77 68 69 63 68 20 69 | ed.in.1982.by.:rfc:`826`.which.i |
a8a80 | 73 20 49 6e 74 65 72 6e 65 74 20 53 74 61 6e 64 61 72 64 20 53 54 44 20 33 37 2e 00 3a 61 62 62 | s.Internet.Standard.STD.37..:abb |
a8aa0 | 72 3a 60 42 46 44 20 28 42 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 46 6f 72 77 61 72 64 69 6e 67 | r:`BFD.(Bidirectional.Forwarding |
a8ac0 | 20 44 65 74 65 63 74 69 6f 6e 29 60 20 69 73 20 64 65 73 63 72 69 62 65 64 20 61 6e 64 20 65 78 | .Detection)`.is.described.and.ex |
a8ae0 | 74 65 6e 64 65 64 20 62 79 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 52 46 43 73 3a 20 3a 72 | tended.by.the.following.RFCs:.:r |
a8b00 | 66 63 3a 60 35 38 38 30 60 2c 20 3a 72 66 63 3a 60 35 38 38 31 60 20 61 6e 64 20 3a 72 66 63 3a | fc:`5880`,.:rfc:`5881`.and.:rfc: |
a8b20 | 60 35 38 38 33 60 2e 00 3a 61 62 62 72 3a 60 42 47 50 20 28 42 6f 72 64 65 72 20 47 61 74 65 77 | `5883`..:abbr:`BGP.(Border.Gatew |
a8b40 | 61 79 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 45 78 74 65 | ay.Protocol)`.is.one.of.the.Exte |
a8b60 | 72 69 6f 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 73 20 61 6e 64 20 74 68 65 20 64 | rior.Gateway.Protocols.and.the.d |
a8b80 | 65 20 66 61 63 74 6f 20 73 74 61 6e 64 61 72 64 20 69 6e 74 65 72 64 6f 6d 61 69 6e 20 72 6f 75 | e.facto.standard.interdomain.rou |
a8ba0 | 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2e 20 54 68 65 20 6c 61 74 65 73 74 20 42 47 50 20 76 65 | ting.protocol..The.latest.BGP.ve |
a8bc0 | 72 73 69 6f 6e 20 69 73 20 34 2e 20 42 47 50 2d 34 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 | rsion.is.4..BGP-4.is.described.i |
a8be0 | 6e 20 3a 72 66 63 3a 60 31 37 37 31 60 20 61 6e 64 20 75 70 64 61 74 65 64 20 62 79 20 3a 72 66 | n.:rfc:`1771`.and.updated.by.:rf |
a8c00 | 63 3a 60 34 32 37 31 60 2e 20 3a 72 66 63 3a 60 32 38 35 38 60 20 61 64 64 73 20 6d 75 6c 74 69 | c:`4271`..:rfc:`2858`.adds.multi |
a8c20 | 70 72 6f 74 6f 63 6f 6c 20 73 75 70 70 6f 72 74 20 74 6f 20 42 47 50 2e 00 3a 61 62 62 72 3a 60 | protocol.support.to.BGP..:abbr:` |
a8c40 | 43 4b 4e 20 28 4d 41 43 73 65 63 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 61 73 73 6f 63 69 61 | CKN.(MACsec.connectivity.associa |
a8c60 | 74 69 6f 6e 20 6e 61 6d 65 29 60 20 6b 65 79 00 3a 61 62 62 72 3a 60 44 4d 56 50 4e 20 28 44 79 | tion.name)`.key.:abbr:`DMVPN.(Dy |
a8c80 | 6e 61 6d 69 63 20 4d 75 6c 74 69 70 6f 69 6e 74 20 56 69 72 74 75 61 6c 20 50 72 69 76 61 74 65 | namic.Multipoint.Virtual.Private |
a8ca0 | 20 4e 65 74 77 6f 72 6b 29 60 20 69 73 20 61 20 64 79 6e 61 6d 69 63 20 3a 61 62 62 72 3a 60 56 | .Network)`.is.a.dynamic.:abbr:`V |
a8cc0 | 50 4e 20 28 56 69 72 74 75 61 6c 20 50 72 69 76 61 74 65 20 4e 65 74 77 6f 72 6b 29 60 20 74 65 | PN.(Virtual.Private.Network)`.te |
a8ce0 | 63 68 6e 6f 6c 6f 67 79 20 6f 72 69 67 69 6e 61 6c 6c 79 20 64 65 76 65 6c 6f 70 65 64 20 62 79 | chnology.originally.developed.by |
a8d00 | 20 43 69 73 63 6f 2e 20 57 68 69 6c 65 20 74 68 65 69 72 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 | .Cisco..While.their.implementati |
a8d20 | 6f 6e 20 77 61 73 20 73 6f 6d 65 77 68 61 74 20 70 72 6f 70 72 69 65 74 61 72 79 2c 20 74 68 65 | on.was.somewhat.proprietary,.the |
a8d40 | 20 75 6e 64 65 72 6c 79 69 6e 67 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 61 72 65 20 61 63 74 | .underlying.technologies.are.act |
a8d60 | 75 61 6c 6c 79 20 73 74 61 6e 64 61 72 64 73 20 62 61 73 65 64 2e 20 54 68 65 20 74 68 72 65 65 | ually.standards.based..The.three |
a8d80 | 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 61 72 65 3a 00 3a 61 62 62 72 3a 60 44 4e 41 54 20 28 | .technologies.are:.:abbr:`DNAT.( |
a8da0 | 44 65 73 74 69 6e 61 74 69 6f 6e 20 4e 65 74 77 6f 72 6b 20 41 64 64 72 65 73 73 20 54 72 61 6e | Destination.Network.Address.Tran |
a8dc0 | 73 6c 61 74 69 6f 6e 29 60 20 63 68 61 6e 67 65 73 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f | slation)`.changes.the.destinatio |
a8de0 | 6e 20 61 64 64 72 65 73 73 20 6f 66 20 70 61 63 6b 65 74 73 20 70 61 73 73 69 6e 67 20 74 68 72 | n.address.of.packets.passing.thr |
a8e00 | 6f 75 67 68 20 74 68 65 20 72 6f 75 74 65 72 2c 20 77 68 69 6c 65 20 3a 72 65 66 3a 60 73 6f 75 | ough.the.router,.while.:ref:`sou |
a8e20 | 72 63 65 2d 6e 61 74 60 20 63 68 61 6e 67 65 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 | rce-nat`.changes.the.source.addr |
a8e40 | 65 73 73 20 6f 66 20 70 61 63 6b 65 74 73 2e 20 44 4e 41 54 20 69 73 20 74 79 70 69 63 61 6c 6c | ess.of.packets..DNAT.is.typicall |
a8e60 | 79 20 75 73 65 64 20 77 68 65 6e 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 28 70 75 62 6c 69 63 29 | y.used.when.an.external.(public) |
a8e80 | 20 68 6f 73 74 20 6e 65 65 64 73 20 74 6f 20 69 6e 69 74 69 61 74 65 20 61 20 73 65 73 73 69 6f | .host.needs.to.initiate.a.sessio |
a8ea0 | 6e 20 77 69 74 68 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 28 70 72 69 76 61 74 65 29 20 68 6f 73 | n.with.an.internal.(private).hos |
a8ec0 | 74 2e 20 41 20 63 75 73 74 6f 6d 65 72 20 6e 65 65 64 73 20 74 6f 20 61 63 63 65 73 73 20 61 20 | t..A.customer.needs.to.access.a. |
a8ee0 | 70 72 69 76 61 74 65 20 73 65 72 76 69 63 65 20 62 65 68 69 6e 64 20 74 68 65 20 72 6f 75 74 65 | private.service.behind.the.route |
a8f00 | 72 73 20 70 75 62 6c 69 63 20 49 50 2e 20 41 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 65 73 | rs.public.IP..A.connection.is.es |
a8f20 | 74 61 62 6c 69 73 68 65 64 20 77 69 74 68 20 74 68 65 20 72 6f 75 74 65 72 73 20 70 75 62 6c 69 | tablished.with.the.routers.publi |
a8f40 | 63 20 49 50 20 61 64 64 72 65 73 73 20 6f 6e 20 61 20 77 65 6c 6c 20 6b 6e 6f 77 6e 20 70 6f 72 | c.IP.address.on.a.well.known.por |
a8f60 | 74 20 61 6e 64 20 74 68 75 73 20 61 6c 6c 20 74 72 61 66 66 69 63 20 66 6f 72 20 74 68 69 73 20 | t.and.thus.all.traffic.for.this. |
a8f80 | 70 6f 72 74 20 69 73 20 72 65 77 72 69 74 74 65 6e 20 74 6f 20 61 64 64 72 65 73 73 20 74 68 65 | port.is.rewritten.to.address.the |
a8fa0 | 20 69 6e 74 65 72 6e 61 6c 20 28 70 72 69 76 61 74 65 29 20 68 6f 73 74 2e 00 3a 61 62 62 72 3a | .internal.(private).host..:abbr: |
a8fc0 | 60 45 41 50 20 28 45 78 74 65 6e 73 69 62 6c 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 | `EAP.(Extensible.Authentication. |
a8fe0 | 50 72 6f 74 6f 63 6f 6c 29 60 20 6f 76 65 72 20 4c 41 4e 20 28 45 41 50 6f 4c 29 20 69 73 20 61 | Protocol)`.over.LAN.(EAPoL).is.a |
a9000 | 20 6e 65 74 77 6f 72 6b 20 70 6f 72 74 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 70 72 6f | .network.port.authentication.pro |
a9020 | 74 6f 63 6f 6c 20 75 73 65 64 20 69 6e 20 49 45 45 45 20 38 30 32 2e 31 58 20 28 50 6f 72 74 20 | tocol.used.in.IEEE.802.1X.(Port. |
a9040 | 42 61 73 65 64 20 4e 65 74 77 6f 72 6b 20 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c 29 20 64 65 | Based.Network.Access.Control).de |
a9060 | 76 65 6c 6f 70 65 64 20 74 6f 20 67 69 76 65 20 61 20 67 65 6e 65 72 69 63 20 6e 65 74 77 6f 72 | veloped.to.give.a.generic.networ |
a9080 | 6b 20 73 69 67 6e 2d 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 6e 65 74 77 6f 72 6b 20 72 65 73 6f | k.sign-on.to.access.network.reso |
a90a0 | 75 72 63 65 73 2e 00 3a 61 62 62 72 3a 60 45 55 49 2d 36 34 20 28 36 34 2d 42 69 74 20 45 78 74 | urces..:abbr:`EUI-64.(64-Bit.Ext |
a90c0 | 65 6e 64 65 64 20 55 6e 69 71 75 65 20 49 64 65 6e 74 69 66 69 65 72 29 60 20 61 73 20 73 70 65 | ended.Unique.Identifier)`.as.spe |
a90e0 | 63 69 66 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 34 32 39 31 60 20 61 6c 6c 6f 77 73 20 61 20 68 | cified.in.:rfc:`4291`.allows.a.h |
a9100 | 6f 73 74 20 74 6f 20 61 73 73 69 67 6e 20 69 74 65 73 6c 66 20 61 20 75 6e 69 71 75 65 20 36 34 | ost.to.assign.iteslf.a.unique.64 |
a9120 | 2d 42 69 74 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 00 3a 61 62 62 72 3a 60 47 45 4e 45 56 45 | -Bit.IPv6.address..:abbr:`GENEVE |
a9140 | 20 28 47 65 6e 65 72 69 63 20 4e 65 74 77 6f 72 6b 20 56 69 72 74 75 61 6c 69 7a 61 74 69 6f 6e | .(Generic.Network.Virtualization |
a9160 | 20 45 6e 63 61 70 73 75 6c 61 74 69 6f 6e 29 60 20 73 75 70 70 6f 72 74 73 20 61 6c 6c 20 6f 66 | .Encapsulation)`.supports.all.of |
a9180 | 20 74 68 65 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 6f 66 20 3a 61 62 62 72 3a 60 56 58 4c 41 | .the.capabilities.of.:abbr:`VXLA |
a91a0 | 4e 20 28 56 69 72 74 75 61 6c 20 45 78 74 65 6e 73 69 62 6c 65 20 4c 41 4e 29 60 2c 20 3a 61 62 | N.(Virtual.Extensible.LAN)`,.:ab |
a91c0 | 62 72 3a 60 4e 56 47 52 45 20 28 4e 65 74 77 6f 72 6b 20 56 69 72 74 75 61 6c 69 7a 61 74 69 6f | br:`NVGRE.(Network.Virtualizatio |
a91e0 | 6e 20 75 73 69 6e 67 20 47 65 6e 65 72 69 63 20 52 6f 75 74 69 6e 67 20 45 6e 63 61 70 73 75 6c | n.using.Generic.Routing.Encapsul |
a9200 | 61 74 69 6f 6e 29 60 2c 20 61 6e 64 20 3a 61 62 62 72 3a 60 53 54 54 20 28 53 74 61 74 65 6c 65 | ation)`,.and.:abbr:`STT.(Statele |
a9220 | 73 73 20 54 72 61 6e 73 70 6f 72 74 20 54 75 6e 6e 65 6c 69 6e 67 29 60 20 61 6e 64 20 77 61 73 | ss.Transport.Tunneling)`.and.was |
a9240 | 20 64 65 73 69 67 6e 65 64 20 74 6f 20 6f 76 65 72 63 6f 6d 65 20 74 68 65 69 72 20 70 65 72 63 | .designed.to.overcome.their.perc |
a9260 | 65 69 76 65 64 20 6c 69 6d 69 74 61 74 69 6f 6e 73 2e 20 4d 61 6e 79 20 62 65 6c 69 65 76 65 20 | eived.limitations..Many.believe. |
a9280 | 47 45 4e 45 56 45 20 63 6f 75 6c 64 20 65 76 65 6e 74 75 61 6c 6c 79 20 72 65 70 6c 61 63 65 20 | GENEVE.could.eventually.replace. |
a92a0 | 74 68 65 73 65 20 65 61 72 6c 69 65 72 20 66 6f 72 6d 61 74 73 20 65 6e 74 69 72 65 6c 79 2e 00 | these.earlier.formats.entirely.. |
a92c0 | 3a 61 62 62 72 3a 60 47 52 45 20 28 47 65 6e 65 72 69 63 20 52 6f 75 74 69 6e 67 20 45 6e 63 61 | :abbr:`GRE.(Generic.Routing.Enca |
a92e0 | 70 73 75 6c 61 74 69 6f 6e 29 60 2c 20 47 52 45 2f 49 50 73 65 63 20 28 6f 72 20 49 50 49 50 2f | psulation)`,.GRE/IPsec.(or.IPIP/ |
a9300 | 49 50 73 65 63 2c 20 53 49 54 2f 49 50 73 65 63 2c 20 6f 72 20 61 6e 79 20 6f 74 68 65 72 20 73 | IPsec,.SIT/IPsec,.or.any.other.s |
a9320 | 74 61 74 65 6c 65 73 73 20 74 75 6e 6e 65 6c 20 70 72 6f 74 6f 63 6f 6c 20 6f 76 65 72 20 49 50 | tateless.tunnel.protocol.over.IP |
a9340 | 73 65 63 29 20 69 73 20 74 68 65 20 75 73 75 61 6c 20 77 61 79 20 74 6f 20 70 72 6f 74 65 63 74 | sec).is.the.usual.way.to.protect |
a9360 | 20 74 68 65 20 74 72 61 66 66 69 63 20 69 6e 73 69 64 65 20 61 20 74 75 6e 6e 65 6c 2e 00 3a 61 | .the.traffic.inside.a.tunnel..:a |
a9380 | 62 62 72 3a 60 47 52 4f 20 28 47 65 6e 65 72 69 63 20 72 65 63 65 69 76 65 20 6f 66 66 6c 6f 61 | bbr:`GRO.(Generic.receive.offloa |
a93a0 | 64 29 60 20 69 73 20 74 68 65 20 63 6f 6d 70 6c 65 6d 65 6e 74 20 74 6f 20 47 53 4f 2e 20 49 64 | d)`.is.the.complement.to.GSO..Id |
a93c0 | 65 61 6c 6c 79 20 61 6e 79 20 66 72 61 6d 65 20 61 73 73 65 6d 62 6c 65 64 20 62 79 20 47 52 4f | eally.any.frame.assembled.by.GRO |
a93e0 | 20 73 68 6f 75 6c 64 20 62 65 20 73 65 67 6d 65 6e 74 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 | .should.be.segmented.to.create.a |
a9400 | 6e 20 69 64 65 6e 74 69 63 61 6c 20 73 65 71 75 65 6e 63 65 20 6f 66 20 66 72 61 6d 65 73 20 75 | n.identical.sequence.of.frames.u |
a9420 | 73 69 6e 67 20 47 53 4f 2c 20 61 6e 64 20 61 6e 79 20 73 65 71 75 65 6e 63 65 20 6f 66 20 66 72 | sing.GSO,.and.any.sequence.of.fr |
a9440 | 61 6d 65 73 20 73 65 67 6d 65 6e 74 65 64 20 62 79 20 47 53 4f 20 73 68 6f 75 6c 64 20 62 65 20 | ames.segmented.by.GSO.should.be. |
a9460 | 61 62 6c 65 20 74 6f 20 62 65 20 72 65 61 73 73 65 6d 62 6c 65 64 20 62 61 63 6b 20 74 6f 20 74 | able.to.be.reassembled.back.to.t |
a9480 | 68 65 20 6f 72 69 67 69 6e 61 6c 20 62 79 20 47 52 4f 2e 20 54 68 65 20 6f 6e 6c 79 20 65 78 63 | he.original.by.GRO..The.only.exc |
a94a0 | 65 70 74 69 6f 6e 20 74 6f 20 74 68 69 73 20 69 73 20 49 50 76 34 20 49 44 20 69 6e 20 74 68 65 | eption.to.this.is.IPv4.ID.in.the |
a94c0 | 20 63 61 73 65 20 74 68 61 74 20 74 68 65 20 44 46 20 62 69 74 20 69 73 20 73 65 74 20 66 6f 72 | .case.that.the.DF.bit.is.set.for |
a94e0 | 20 61 20 67 69 76 65 6e 20 49 50 20 68 65 61 64 65 72 2e 20 49 66 20 74 68 65 20 76 61 6c 75 65 | .a.given.IP.header..If.the.value |
a9500 | 20 6f 66 20 74 68 65 20 49 50 76 34 20 49 44 20 69 73 20 6e 6f 74 20 73 65 71 75 65 6e 74 69 61 | .of.the.IPv4.ID.is.not.sequentia |
a9520 | 6c 6c 79 20 69 6e 63 72 65 6d 65 6e 74 69 6e 67 20 69 74 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 | lly.incrementing.it.will.be.alte |
a9540 | 72 65 64 20 73 6f 20 74 68 61 74 20 69 74 20 69 73 20 77 68 65 6e 20 61 20 66 72 61 6d 65 20 61 | red.so.that.it.is.when.a.frame.a |
a9560 | 73 73 65 6d 62 6c 65 64 20 76 69 61 20 47 52 4f 20 69 73 20 73 65 67 6d 65 6e 74 65 64 20 76 69 | ssembled.via.GRO.is.segmented.vi |
a9580 | 61 20 47 53 4f 2e 00 3a 61 62 62 72 3a 60 47 53 4f 20 28 47 65 6e 65 72 69 63 20 53 65 67 6d 65 | a.GSO..:abbr:`GSO.(Generic.Segme |
a95a0 | 6e 74 61 74 69 6f 6e 20 4f 66 66 6c 6f 61 64 29 60 20 69 73 20 61 20 70 75 72 65 20 73 6f 66 74 | ntation.Offload)`.is.a.pure.soft |
a95c0 | 77 61 72 65 20 6f 66 66 6c 6f 61 64 20 74 68 61 74 20 69 73 20 6d 65 61 6e 74 20 74 6f 20 64 65 | ware.offload.that.is.meant.to.de |
a95e0 | 61 6c 20 77 69 74 68 20 63 61 73 65 73 20 77 68 65 72 65 20 64 65 76 69 63 65 20 64 72 69 76 65 | al.with.cases.where.device.drive |
a9600 | 72 73 20 63 61 6e 6e 6f 74 20 70 65 72 66 6f 72 6d 20 74 68 65 20 6f 66 66 6c 6f 61 64 73 20 64 | rs.cannot.perform.the.offloads.d |
a9620 | 65 73 63 72 69 62 65 64 20 61 62 6f 76 65 2e 20 57 68 61 74 20 6f 63 63 75 72 73 20 69 6e 20 47 | escribed.above..What.occurs.in.G |
a9640 | 53 4f 20 69 73 20 74 68 61 74 20 61 20 67 69 76 65 6e 20 73 6b 62 75 66 66 20 77 69 6c 6c 20 68 | SO.is.that.a.given.skbuff.will.h |
a9660 | 61 76 65 20 69 74 73 20 64 61 74 61 20 62 72 6f 6b 65 6e 20 6f 75 74 20 6f 76 65 72 20 6d 75 6c | ave.its.data.broken.out.over.mul |
a9680 | 74 69 70 6c 65 20 73 6b 62 75 66 66 73 20 74 68 61 74 20 68 61 76 65 20 62 65 65 6e 20 72 65 73 | tiple.skbuffs.that.have.been.res |
a96a0 | 69 7a 65 64 20 74 6f 20 6d 61 74 63 68 20 74 68 65 20 4d 53 53 20 70 72 6f 76 69 64 65 64 20 76 | ized.to.match.the.MSS.provided.v |
a96c0 | 69 61 20 73 6b 62 5f 73 68 69 6e 66 6f 28 29 2d 3e 67 73 6f 5f 73 69 7a 65 2e 00 3a 61 62 62 72 | ia.skb_shinfo()->gso_size..:abbr |
a96e0 | 3a 60 49 47 4d 50 20 28 49 6e 74 65 72 6e 65 74 20 47 72 6f 75 70 20 4d 61 6e 61 67 65 6d 65 6e | :`IGMP.(Internet.Group.Managemen |
a9700 | 74 20 50 72 6f 74 6f 63 6f 6c 29 60 20 70 72 6f 78 79 20 73 65 6e 64 73 20 49 47 4d 50 20 68 6f | t.Protocol)`.proxy.sends.IGMP.ho |
a9720 | 73 74 20 6d 65 73 73 61 67 65 73 20 6f 6e 20 62 65 68 61 6c 66 20 6f 66 20 61 20 63 6f 6e 6e 65 | st.messages.on.behalf.of.a.conne |
a9740 | 63 74 65 64 20 63 6c 69 65 6e 74 2e 20 54 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d | cted.client..The.configuration.m |
a9760 | 75 73 74 20 64 65 66 69 6e 65 20 6f 6e 65 2c 20 61 6e 64 20 6f 6e 6c 79 20 6f 6e 65 20 75 70 73 | ust.define.one,.and.only.one.ups |
a9780 | 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 2c 20 61 6e 64 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 | tream.interface,.and.one.or.more |
a97a0 | 20 64 6f 77 6e 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 73 2e 00 3a 61 62 62 72 3a 60 49 | .downstream.interfaces..:abbr:`I |
a97c0 | 50 53 65 63 20 28 49 50 20 53 65 63 75 72 69 74 79 29 60 20 2d 20 74 6f 6f 20 6d 61 6e 79 20 52 | PSec.(IP.Security)`.-.too.many.R |
a97e0 | 46 43 73 20 74 6f 20 6c 69 73 74 2c 20 62 75 74 20 73 74 61 72 74 20 77 69 74 68 20 3a 72 66 63 | FCs.to.list,.but.start.with.:rfc |
a9800 | 3a 60 34 33 30 31 60 00 3a 61 62 62 72 3a 60 49 53 2d 49 53 20 28 49 6e 74 65 72 6d 65 64 69 61 | :`4301`.:abbr:`IS-IS.(Intermedia |
a9820 | 74 65 20 53 79 73 74 65 6d 20 74 6f 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 73 74 65 6d | te.System.to.Intermediate.System |
a9840 | 29 60 20 69 73 20 61 20 6c 69 6e 6b 2d 73 74 61 74 65 20 69 6e 74 65 72 69 6f 72 20 67 61 74 65 | )`.is.a.link-state.interior.gate |
a9860 | 77 61 79 20 70 72 6f 74 6f 63 6f 6c 20 28 49 47 50 29 20 77 68 69 63 68 20 69 73 20 64 65 73 63 | way.protocol.(IGP).which.is.desc |
a9880 | 72 69 62 65 64 20 69 6e 20 49 53 4f 31 30 35 38 39 2c 20 3a 72 66 63 3a 60 31 31 39 35 60 2c 20 | ribed.in.ISO10589,.:rfc:`1195`,. |
a98a0 | 3a 72 66 63 3a 60 35 33 30 38 60 2e 20 49 53 2d 49 53 20 72 75 6e 73 20 74 68 65 20 44 69 6a 6b | :rfc:`5308`..IS-IS.runs.the.Dijk |
a98c0 | 73 74 72 61 20 73 68 6f 72 74 65 73 74 2d 70 61 74 68 20 66 69 72 73 74 20 28 53 50 46 29 20 61 | stra.shortest-path.first.(SPF).a |
a98e0 | 6c 67 6f 72 69 74 68 6d 20 74 6f 20 63 72 65 61 74 65 20 61 20 64 61 74 61 62 61 73 65 20 6f 66 | lgorithm.to.create.a.database.of |
a9900 | 20 74 68 65 20 6e 65 74 77 6f 72 6b e2 80 99 73 20 74 6f 70 6f 6c 6f 67 79 2c 20 61 6e 64 20 66 | .the.network...s.topology,.and.f |
a9920 | 72 6f 6d 20 74 68 61 74 20 64 61 74 61 62 61 73 65 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 | rom.that.database.to.determine.t |
a9940 | 68 65 20 62 65 73 74 20 28 74 68 61 74 20 69 73 2c 20 6c 6f 77 65 73 74 20 63 6f 73 74 29 20 70 | he.best.(that.is,.lowest.cost).p |
a9960 | 61 74 68 20 74 6f 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 20 54 68 65 20 69 6e 74 65 72 6d | ath.to.a.destination..The.interm |
a9980 | 65 64 69 61 74 65 20 73 79 73 74 65 6d 73 20 28 74 68 65 20 6e 61 6d 65 20 66 6f 72 20 72 6f 75 | ediate.systems.(the.name.for.rou |
a99a0 | 74 65 72 73 29 20 65 78 63 68 61 6e 67 65 20 74 6f 70 6f 6c 6f 67 79 20 69 6e 66 6f 72 6d 61 74 | ters).exchange.topology.informat |
a99c0 | 69 6f 6e 20 77 69 74 68 20 74 68 65 69 72 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 65 6e 63 74 65 | ion.with.their.directly.conencte |
a99e0 | 64 20 6e 65 69 67 68 62 6f 72 73 2e 20 49 53 2d 49 53 20 72 75 6e 73 20 64 69 72 65 63 74 6c 79 | d.neighbors..IS-IS.runs.directly |
a9a00 | 20 6f 6e 20 74 68 65 20 64 61 74 61 20 6c 69 6e 6b 20 6c 61 79 65 72 20 28 4c 61 79 65 72 20 32 | .on.the.data.link.layer.(Layer.2 |
a9a20 | 29 2e 20 49 53 2d 49 53 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 63 61 6c 6c 65 64 20 3a 61 | )..IS-IS.addresses.are.called.:a |
a9a40 | 62 62 72 3a 60 4e 45 54 73 20 28 4e 65 74 77 6f 72 6b 20 45 6e 74 69 74 79 20 54 69 74 6c 65 73 | bbr:`NETs.(Network.Entity.Titles |
a9a60 | 29 60 20 61 6e 64 20 63 61 6e 20 62 65 20 38 20 74 6f 20 32 30 20 62 79 74 65 73 20 6c 6f 6e 67 | )`.and.can.be.8.to.20.bytes.long |
a9a80 | 2c 20 62 75 74 20 61 72 65 20 67 65 6e 65 72 61 6c 6c 79 20 31 30 20 62 79 74 65 73 20 6c 6f 6e | ,.but.are.generally.10.bytes.lon |
a9aa0 | 67 2e 20 54 68 65 20 74 72 65 65 20 64 61 74 61 62 61 73 65 20 74 68 61 74 20 69 73 20 63 72 65 | g..The.tree.database.that.is.cre |
a9ac0 | 61 74 65 64 20 77 69 74 68 20 49 53 2d 49 53 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 74 68 | ated.with.IS-IS.is.similar.to.th |
a9ae0 | 65 20 6f 6e 65 20 74 68 61 74 20 69 73 20 63 72 65 61 74 65 64 20 77 69 74 68 20 4f 53 50 46 20 | e.one.that.is.created.with.OSPF. |
a9b00 | 69 6e 20 74 68 61 74 20 74 68 65 20 70 61 74 68 73 20 63 68 6f 73 65 6e 20 73 68 6f 75 6c 64 20 | in.that.the.paths.chosen.should. |
a9b20 | 62 65 20 73 69 6d 69 6c 61 72 2e 20 43 6f 6d 70 61 72 69 73 6f 6e 73 20 74 6f 20 4f 53 50 46 20 | be.similar..Comparisons.to.OSPF. |
a9b40 | 61 72 65 20 69 6e 65 76 69 74 61 62 6c 65 20 61 6e 64 20 6f 66 74 65 6e 20 61 72 65 20 72 65 61 | are.inevitable.and.often.are.rea |
a9b60 | 73 6f 6e 61 62 6c 65 20 6f 6e 65 73 20 74 6f 20 6d 61 6b 65 20 69 6e 20 72 65 67 61 72 64 73 20 | sonable.ones.to.make.in.regards. |
a9b80 | 74 6f 20 74 68 65 20 77 61 79 20 61 20 6e 65 74 77 6f 72 6b 20 77 69 6c 6c 20 72 65 73 70 6f 6e | to.the.way.a.network.will.respon |
a9ba0 | 64 20 77 69 74 68 20 65 69 74 68 65 72 20 49 47 50 2e 00 3a 61 62 62 72 3a 60 4c 33 56 50 4e 20 | d.with.either.IGP..:abbr:`L3VPN. |
a9bc0 | 56 52 46 73 20 28 20 4c 61 79 65 72 20 33 20 56 69 72 74 75 61 6c 20 50 72 69 76 61 74 65 20 4e | VRFs.(.Layer.3.Virtual.Private.N |
a9be0 | 65 74 77 6f 72 6b 73 20 29 60 20 62 67 70 64 20 73 75 70 70 6f 72 74 73 20 66 6f 72 20 49 50 76 | etworks.)`.bgpd.supports.for.IPv |
a9c00 | 34 20 52 46 43 20 34 33 36 34 20 61 6e 64 20 49 50 76 36 20 52 46 43 20 34 36 35 39 2e 20 4c 33 | 4.RFC.4364.and.IPv6.RFC.4659..L3 |
a9c20 | 56 50 4e 20 72 6f 75 74 65 73 2c 20 61 6e 64 20 74 68 65 69 72 20 61 73 73 6f 63 69 61 74 65 64 | VPN.routes,.and.their.associated |
a9c40 | 20 56 52 46 20 4d 50 4c 53 20 6c 61 62 65 6c 73 2c 20 63 61 6e 20 62 65 20 64 69 73 74 72 69 62 | .VRF.MPLS.labels,.can.be.distrib |
a9c60 | 75 74 65 64 20 74 6f 20 56 50 4e 20 53 41 46 49 20 6e 65 69 67 68 62 6f 72 73 20 69 6e 20 74 68 | uted.to.VPN.SAFI.neighbors.in.th |
a9c80 | 65 20 64 65 66 61 75 6c 74 2c 20 69 2e 65 2e 2c 20 6e 6f 6e 20 56 52 46 2c 20 42 47 50 20 69 6e | e.default,.i.e.,.non.VRF,.BGP.in |
a9ca0 | 73 74 61 6e 63 65 2e 20 56 52 46 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 61 72 65 20 72 65 61 63 | stance..VRF.MPLS.labels.are.reac |
a9cc0 | 68 65 64 20 75 73 69 6e 67 20 63 6f 72 65 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 77 68 69 63 68 | hed.using.core.MPLS.labels.which |
a9ce0 | 20 61 72 65 20 64 69 73 74 72 69 62 75 74 65 64 20 75 73 69 6e 67 20 4c 44 50 20 6f 72 20 42 47 | .are.distributed.using.LDP.or.BG |
a9d00 | 50 20 6c 61 62 65 6c 65 64 20 75 6e 69 63 61 73 74 2e 20 62 67 70 64 20 61 6c 73 6f 20 73 75 70 | P.labeled.unicast..bgpd.also.sup |
a9d20 | 70 6f 72 74 73 20 69 6e 74 65 72 2d 56 52 46 20 72 6f 75 74 65 20 6c 65 61 6b 69 6e 67 2e 00 3a | ports.inter-VRF.route.leaking..: |
a9d40 | 61 62 62 72 3a 60 4c 44 50 20 28 4c 61 62 65 6c 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 50 72 | abbr:`LDP.(Label.Distribution.Pr |
a9d60 | 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 54 43 50 20 62 61 73 65 64 20 4d 50 4c 53 20 73 69 67 | otocol)`.is.a.TCP.based.MPLS.sig |
a9d80 | 6e 61 6c 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 74 68 61 74 20 64 69 73 74 72 69 62 75 74 65 73 | naling.protocol.that.distributes |
a9da0 | 20 6c 61 62 65 6c 73 20 63 72 65 61 74 69 6e 67 20 4d 50 4c 53 20 6c 61 62 65 6c 20 73 77 69 74 | .labels.creating.MPLS.label.swit |
a9dc0 | 63 68 65 64 20 70 61 74 68 73 20 69 6e 20 61 20 64 79 6e 61 6d 69 63 20 6d 61 6e 6e 65 72 2e 20 | ched.paths.in.a.dynamic.manner.. |
a9de0 | 4c 44 50 20 69 73 20 6e 6f 74 20 61 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2c 20 61 | LDP.is.not.a.routing.protocol,.a |
a9e00 | 73 20 69 74 20 72 65 6c 69 65 73 20 6f 6e 20 6f 74 68 65 72 20 72 6f 75 74 69 6e 67 20 70 72 6f | s.it.relies.on.other.routing.pro |
a9e20 | 74 6f 63 6f 6c 73 20 66 6f 72 20 66 6f 72 77 61 72 64 69 6e 67 20 64 65 63 69 73 69 6f 6e 73 2e | tocols.for.forwarding.decisions. |
a9e40 | 20 4c 44 50 20 63 61 6e 6e 6f 74 20 62 6f 6f 74 73 74 72 61 70 20 69 74 73 65 6c 66 2c 20 61 6e | .LDP.cannot.bootstrap.itself,.an |
a9e60 | 64 20 74 68 65 72 65 66 6f 72 65 20 72 65 6c 69 65 73 20 6f 6e 20 73 61 69 64 20 72 6f 75 74 69 | d.therefore.relies.on.said.routi |
a9e80 | 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 77 | ng.protocols.for.communication.w |
a9ea0 | 69 74 68 20 6f 74 68 65 72 20 72 6f 75 74 65 72 73 20 74 68 61 74 20 75 73 65 20 4c 44 50 2e 00 | ith.other.routers.that.use.LDP.. |
a9ec0 | 3a 61 62 62 72 3a 60 4c 4c 44 50 20 28 4c 69 6e 6b 20 4c 61 79 65 72 20 44 69 73 63 6f 76 65 72 | :abbr:`LLDP.(Link.Layer.Discover |
a9ee0 | 79 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 76 65 6e 64 6f 72 2d 6e 65 75 74 72 61 6c | y.Protocol)`.is.a.vendor-neutral |
a9f00 | 20 6c 69 6e 6b 20 6c 61 79 65 72 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 20 74 68 65 20 49 6e 74 65 | .link.layer.protocol.in.the.Inte |
a9f20 | 72 6e 65 74 20 50 72 6f 74 6f 63 6f 6c 20 53 75 69 74 65 20 75 73 65 64 20 62 79 20 6e 65 74 77 | rnet.Protocol.Suite.used.by.netw |
a9f40 | 6f 72 6b 20 64 65 76 69 63 65 73 20 66 6f 72 20 61 64 76 65 72 74 69 73 69 6e 67 20 74 68 65 69 | ork.devices.for.advertising.thei |
a9f60 | 72 20 69 64 65 6e 74 69 74 79 2c 20 63 61 70 61 62 69 6c 69 74 69 65 73 2c 20 61 6e 64 20 6e 65 | r.identity,.capabilities,.and.ne |
a9f80 | 69 67 68 62 6f 72 73 20 6f 6e 20 61 6e 20 49 45 45 45 20 38 30 32 20 6c 6f 63 61 6c 20 61 72 65 | ighbors.on.an.IEEE.802.local.are |
a9fa0 | 61 20 6e 65 74 77 6f 72 6b 2c 20 70 72 69 6e 63 69 70 61 6c 6c 79 20 77 69 72 65 64 20 45 74 68 | a.network,.principally.wired.Eth |
a9fc0 | 65 72 6e 65 74 2e 20 54 68 65 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 66 6f 72 6d 61 6c 6c 79 20 | ernet..The.protocol.is.formally. |
a9fe0 | 72 65 66 65 72 72 65 64 20 74 6f 20 62 79 20 74 68 65 20 49 45 45 45 20 61 73 20 53 74 61 74 69 | referred.to.by.the.IEEE.as.Stati |
aa000 | 6f 6e 20 61 6e 64 20 4d 65 64 69 61 20 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c 20 43 6f 6e 6e | on.and.Media.Access.Control.Conn |
aa020 | 65 63 74 69 76 69 74 79 20 44 69 73 63 6f 76 65 72 79 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 | ectivity.Discovery.specified.in. |
aa040 | 49 45 45 45 20 38 30 32 2e 31 41 42 20 61 6e 64 20 49 45 45 45 20 38 30 32 2e 33 2d 32 30 31 32 | IEEE.802.1AB.and.IEEE.802.3-2012 |
aa060 | 20 73 65 63 74 69 6f 6e 20 36 20 63 6c 61 75 73 65 20 37 39 2e 00 3a 61 62 62 72 3a 60 4d 4b 41 | .section.6.clause.79..:abbr:`MKA |
aa080 | 20 28 4d 41 43 73 65 63 20 4b 65 79 20 41 67 72 65 65 6d 65 6e 74 20 70 72 6f 74 6f 63 6f 6c 29 | .(MACsec.Key.Agreement.protocol) |
aa0a0 | 60 20 69 73 20 75 73 65 64 20 74 6f 20 73 79 6e 63 68 72 6f 6e 69 7a 65 20 6b 65 79 73 20 62 65 | `.is.used.to.synchronize.keys.be |
aa0c0 | 74 77 65 65 6e 20 69 6e 64 69 76 69 64 75 61 6c 20 70 65 65 72 73 2e 00 3a 61 62 62 72 3a 60 4d | tween.individual.peers..:abbr:`M |
aa0e0 | 50 4c 53 20 28 4d 75 6c 74 69 2d 50 72 6f 74 6f 63 6f 6c 20 4c 61 62 65 6c 20 53 77 69 74 63 68 | PLS.(Multi-Protocol.Label.Switch |
aa100 | 69 6e 67 29 60 20 69 73 20 61 20 70 61 63 6b 65 74 20 66 6f 72 77 61 72 64 69 6e 67 20 70 61 72 | ing)`.is.a.packet.forwarding.par |
aa120 | 61 64 69 67 6d 20 77 68 69 63 68 20 64 69 66 66 65 72 73 20 66 72 6f 6d 20 72 65 67 75 6c 61 72 | adigm.which.differs.from.regular |
aa140 | 20 49 50 20 66 6f 72 77 61 72 64 69 6e 67 2e 20 49 6e 73 74 65 61 64 20 6f 66 20 49 50 20 61 64 | .IP.forwarding..Instead.of.IP.ad |
aa160 | 64 72 65 73 73 65 73 20 62 65 69 6e 67 20 75 73 65 64 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 64 | dresses.being.used.to.make.the.d |
aa180 | 65 63 69 73 69 6f 6e 20 6f 6e 20 66 69 6e 64 69 6e 67 20 74 68 65 20 65 78 69 74 20 69 6e 74 65 | ecision.on.finding.the.exit.inte |
aa1a0 | 72 66 61 63 65 2c 20 61 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 69 6e 73 74 65 61 64 20 75 73 65 | rface,.a.router.will.instead.use |
aa1c0 | 20 61 6e 20 65 78 61 63 74 20 6d 61 74 63 68 20 6f 6e 20 61 20 33 32 20 62 69 74 2f 34 20 62 79 | .an.exact.match.on.a.32.bit/4.by |
aa1e0 | 74 65 20 68 65 61 64 65 72 20 63 61 6c 6c 65 64 20 74 68 65 20 4d 50 4c 53 20 6c 61 62 65 6c 2e | te.header.called.the.MPLS.label. |
aa200 | 20 54 68 69 73 20 6c 61 62 65 6c 20 69 73 20 69 6e 73 65 72 74 65 64 20 62 65 74 77 65 65 6e 20 | .This.label.is.inserted.between. |
aa220 | 74 68 65 20 65 74 68 65 72 6e 65 74 20 28 6c 61 79 65 72 20 32 29 20 68 65 61 64 65 72 20 61 6e | the.ethernet.(layer.2).header.an |
aa240 | 64 20 74 68 65 20 49 50 20 28 6c 61 79 65 72 20 33 29 20 68 65 61 64 65 72 2e 20 4f 6e 65 20 63 | d.the.IP.(layer.3).header..One.c |
aa260 | 61 6e 20 73 74 61 74 69 63 61 6c 6c 79 20 6f 72 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 61 73 73 | an.statically.or.dynamically.ass |
aa280 | 69 67 6e 20 6c 61 62 65 6c 20 61 6c 6c 6f 63 61 74 69 6f 6e 73 2c 20 62 75 74 20 77 65 20 77 69 | ign.label.allocations,.but.we.wi |
aa2a0 | 6c 6c 20 66 6f 63 75 73 20 6f 6e 20 64 79 6e 61 6d 69 63 20 61 6c 6c 6f 63 61 74 69 6f 6e 20 6f | ll.focus.on.dynamic.allocation.o |
aa2c0 | 66 20 6c 61 62 65 6c 73 20 75 73 69 6e 67 20 73 6f 6d 65 20 73 6f 72 74 20 6f 66 20 6c 61 62 65 | f.labels.using.some.sort.of.labe |
aa2e0 | 6c 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c 20 28 73 75 63 68 20 61 73 | l.distribution.protocol.(such.as |
aa300 | 20 74 68 65 20 61 70 74 6c 79 20 6e 61 6d 65 64 20 4c 61 62 65 6c 20 44 69 73 74 72 69 62 75 74 | .the.aptly.named.Label.Distribut |
aa320 | 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 2f 20 4c 44 50 2c 20 52 65 73 6f 75 72 63 65 20 52 65 73 | ion.Protocol./.LDP,.Resource.Res |
aa340 | 65 72 76 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 2f 20 52 53 56 50 2c 20 6f 72 20 53 65 67 | ervation.Protocol./.RSVP,.or.Seg |
aa360 | 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 74 68 72 6f 75 67 68 20 4f 53 50 46 2f 49 53 49 53 29 2e | ment.Routing.through.OSPF/ISIS). |
aa380 | 20 54 68 65 73 65 20 70 72 6f 74 6f 63 6f 6c 73 20 61 6c 6c 6f 77 20 66 6f 72 20 74 68 65 20 63 | .These.protocols.allow.for.the.c |
aa3a0 | 72 65 61 74 69 6f 6e 20 6f 66 20 61 20 75 6e 69 64 69 72 65 63 74 69 6f 6e 61 6c 2f 75 6e 69 63 | reation.of.a.unidirectional/unic |
aa3c0 | 61 73 74 20 70 61 74 68 20 63 61 6c 6c 65 64 20 61 20 6c 61 62 65 6c 65 64 20 73 77 69 74 63 68 | ast.path.called.a.labeled.switch |
aa3e0 | 65 64 20 70 61 74 68 20 28 69 6e 69 74 69 61 6c 69 7a 65 64 20 61 73 20 4c 53 50 29 20 74 68 72 | ed.path.(initialized.as.LSP).thr |
aa400 | 6f 75 67 68 6f 75 74 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 74 68 61 74 20 6f 70 65 72 61 74 65 | oughout.the.network.that.operate |
aa420 | 73 20 76 65 72 79 20 6d 75 63 68 20 6c 69 6b 65 20 61 20 74 75 6e 6e 65 6c 20 74 68 72 6f 75 67 | s.very.much.like.a.tunnel.throug |
aa440 | 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 2e 20 41 6e 20 65 61 73 79 20 77 61 79 20 6f 66 20 74 68 | h.the.network..An.easy.way.of.th |
aa460 | 69 6e 6b 69 6e 67 20 61 62 6f 75 74 20 68 6f 77 20 61 6e 20 4d 50 4c 53 20 4c 53 50 20 61 63 74 | inking.about.how.an.MPLS.LSP.act |
aa480 | 75 61 6c 6c 79 20 66 6f 72 77 61 72 64 73 20 74 72 61 66 66 69 63 20 74 68 72 6f 75 67 68 6f 75 | ually.forwards.traffic.throughou |
aa4a0 | 74 20 61 20 6e 65 74 77 6f 72 6b 20 69 73 20 74 6f 20 74 68 69 6e 6b 20 6f 66 20 61 20 47 52 45 | t.a.network.is.to.think.of.a.GRE |
aa4c0 | 20 74 75 6e 6e 65 6c 2e 20 54 68 65 79 20 61 72 65 20 6e 6f 74 20 74 68 65 20 73 61 6d 65 20 69 | .tunnel..They.are.not.the.same.i |
aa4e0 | 6e 20 68 6f 77 20 74 68 65 79 20 6f 70 65 72 61 74 65 2c 20 62 75 74 20 74 68 65 79 20 61 72 65 | n.how.they.operate,.but.they.are |
aa500 | 20 74 68 65 20 73 61 6d 65 20 69 6e 20 68 6f 77 20 74 68 65 79 20 68 61 6e 64 6c 65 20 74 68 65 | .the.same.in.how.they.handle.the |
aa520 | 20 74 75 6e 6e 65 6c 65 64 20 70 61 63 6b 65 74 2e 20 49 74 20 77 6f 75 6c 64 20 62 65 20 67 6f | .tunneled.packet..It.would.be.go |
aa540 | 6f 64 20 74 6f 20 74 68 69 6e 6b 20 6f 66 20 4d 50 4c 53 20 61 73 20 61 20 74 75 6e 6e 65 6c 69 | od.to.think.of.MPLS.as.a.tunneli |
aa560 | 6e 67 20 74 65 63 68 6e 6f 6c 6f 67 79 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 | ng.technology.that.can.be.used.t |
aa580 | 6f 20 74 72 61 6e 73 70 6f 72 74 20 6d 61 6e 79 20 64 69 66 66 65 72 65 6e 74 20 74 79 70 65 73 | o.transport.many.different.types |
aa5a0 | 20 6f 66 20 70 61 63 6b 65 74 73 2c 20 74 6f 20 61 69 64 20 69 6e 20 74 72 61 66 66 69 63 20 65 | .of.packets,.to.aid.in.traffic.e |
aa5c0 | 6e 67 69 6e 65 65 72 69 6e 67 20 62 79 20 61 6c 6c 6f 77 69 6e 67 20 6f 6e 65 20 74 6f 20 73 70 | ngineering.by.allowing.one.to.sp |
aa5e0 | 65 63 69 66 79 20 70 61 74 68 73 20 74 68 72 6f 75 67 68 6f 75 74 20 74 68 65 20 6e 65 74 77 6f | ecify.paths.throughout.the.netwo |
aa600 | 72 6b 20 28 75 73 69 6e 67 20 52 53 56 50 20 6f 72 20 53 52 29 2c 20 61 6e 64 20 74 6f 20 67 65 | rk.(using.RSVP.or.SR),.and.to.ge |
aa620 | 6e 65 72 61 6c 6c 79 20 61 6c 6c 6f 77 20 66 6f 72 20 65 61 73 69 65 72 20 69 6e 74 72 61 2f 69 | nerally.allow.for.easier.intra/i |
aa640 | 6e 74 65 72 20 6e 65 74 77 6f 72 6b 20 74 72 61 6e 73 70 6f 72 74 20 6f 66 20 64 61 74 61 20 70 | nter.network.transport.of.data.p |
aa660 | 61 63 6b 65 74 73 2e 00 3a 61 62 62 72 3a 60 4e 41 54 20 28 4e 65 74 77 6f 72 6b 20 41 64 64 72 | ackets..:abbr:`NAT.(Network.Addr |
aa680 | 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 20 63 6f 6d 6d 6f 6e 20 6d 65 | ess.Translation)`.is.a.common.me |
aa6a0 | 74 68 6f 64 20 6f 66 20 72 65 6d 61 70 70 69 6e 67 20 6f 6e 65 20 49 50 20 61 64 64 72 65 73 73 | thod.of.remapping.one.IP.address |
aa6c0 | 20 73 70 61 63 65 20 69 6e 74 6f 20 61 6e 6f 74 68 65 72 20 62 79 20 6d 6f 64 69 66 79 69 6e 67 | .space.into.another.by.modifying |
aa6e0 | 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 | .network.address.information.in. |
aa700 | 74 68 65 20 49 50 20 68 65 61 64 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 77 68 69 6c 65 20 74 | the.IP.header.of.packets.while.t |
aa720 | 68 65 79 20 61 72 65 20 69 6e 20 74 72 61 6e 73 69 74 20 61 63 72 6f 73 73 20 61 20 74 72 61 66 | hey.are.in.transit.across.a.traf |
aa740 | 66 69 63 20 72 6f 75 74 69 6e 67 20 64 65 76 69 63 65 2e 20 54 68 65 20 74 65 63 68 6e 69 71 75 | fic.routing.device..The.techniqu |
aa760 | 65 20 77 61 73 20 6f 72 69 67 69 6e 61 6c 6c 79 20 75 73 65 64 20 61 73 20 61 20 73 68 6f 72 74 | e.was.originally.used.as.a.short |
aa780 | 63 75 74 20 74 6f 20 61 76 6f 69 64 20 74 68 65 20 6e 65 65 64 20 74 6f 20 72 65 61 64 64 72 65 | cut.to.avoid.the.need.to.readdre |
aa7a0 | 73 73 20 65 76 65 72 79 20 68 6f 73 74 20 77 68 65 6e 20 61 20 6e 65 74 77 6f 72 6b 20 77 61 73 | ss.every.host.when.a.network.was |
aa7c0 | 20 6d 6f 76 65 64 2e 20 49 74 20 68 61 73 20 62 65 63 6f 6d 65 20 61 20 70 6f 70 75 6c 61 72 20 | .moved..It.has.become.a.popular. |
aa7e0 | 61 6e 64 20 65 73 73 65 6e 74 69 61 6c 20 74 6f 6f 6c 20 69 6e 20 63 6f 6e 73 65 72 76 69 6e 67 | and.essential.tool.in.conserving |
aa800 | 20 67 6c 6f 62 61 6c 20 61 64 64 72 65 73 73 20 73 70 61 63 65 20 69 6e 20 74 68 65 20 66 61 63 | .global.address.space.in.the.fac |
aa820 | 65 20 6f 66 20 49 50 76 34 20 61 64 64 72 65 73 73 20 65 78 68 61 75 73 74 69 6f 6e 2e 20 4f 6e | e.of.IPv4.address.exhaustion..On |
aa840 | 65 20 49 6e 74 65 72 6e 65 74 2d 72 6f 75 74 61 62 6c 65 20 49 50 20 61 64 64 72 65 73 73 20 6f | e.Internet-routable.IP.address.o |
aa860 | 66 20 61 20 4e 41 54 20 67 61 74 65 77 61 79 20 63 61 6e 20 62 65 20 75 73 65 64 20 66 6f 72 20 | f.a.NAT.gateway.can.be.used.for. |
aa880 | 61 6e 20 65 6e 74 69 72 65 20 70 72 69 76 61 74 65 20 6e 65 74 77 6f 72 6b 2e 00 3a 61 62 62 72 | an.entire.private.network..:abbr |
aa8a0 | 3a 60 4e 41 54 20 28 4e 65 74 77 6f 72 6b 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 | :`NAT.(Network.Address.Translati |
aa8c0 | 6f 6e 29 60 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 65 6e 74 69 72 65 6c 79 20 6f 6e 20 61 | on)`.is.configured.entirely.on.a |
aa8e0 | 20 73 65 72 69 65 73 20 6f 66 20 73 6f 20 63 61 6c 6c 65 64 20 60 72 75 6c 65 73 60 2e 20 52 75 | .series.of.so.called.`rules`..Ru |
aa900 | 6c 65 73 20 61 72 65 20 6e 75 6d 62 65 72 65 64 20 61 6e 64 20 65 76 61 6c 75 61 74 65 64 20 62 | les.are.numbered.and.evaluated.b |
aa920 | 79 20 74 68 65 20 75 6e 64 65 72 6c 79 69 6e 67 20 4f 53 20 69 6e 20 6e 75 6d 65 72 69 63 61 6c | y.the.underlying.OS.in.numerical |
aa940 | 20 6f 72 64 65 72 21 20 54 68 65 20 72 75 6c 65 20 6e 75 6d 62 65 72 73 20 63 61 6e 20 62 65 20 | .order!.The.rule.numbers.can.be. |
aa960 | 63 68 61 6e 67 65 73 20 62 79 20 75 74 69 6c 69 7a 69 6e 67 20 74 68 65 20 3a 63 66 67 63 6d 64 | changes.by.utilizing.the.:cfgcmd |
aa980 | 3a 60 72 65 6e 61 6d 65 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 63 6f 70 79 60 20 63 6f 6d | :`rename`.and.:cfgcmd:`copy`.com |
aa9a0 | 6d 61 6e 64 73 2e 00 3a 61 62 62 72 3a 60 4e 41 54 36 34 20 28 49 50 76 36 2d 74 6f 2d 49 50 76 | mands..:abbr:`NAT64.(IPv6-to-IPv |
aa9c0 | 34 20 50 72 65 66 69 78 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 20 63 72 69 74 | 4.Prefix.Translation)`.is.a.crit |
aa9e0 | 69 63 61 6c 20 63 6f 6d 70 6f 6e 65 6e 74 20 69 6e 20 6d 6f 64 65 72 6e 20 6e 65 74 77 6f 72 6b | ical.component.in.modern.network |
aaa00 | 69 6e 67 2c 20 66 61 63 69 6c 69 74 61 74 69 6e 67 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 | ing,.facilitating.communication. |
aaa20 | 62 65 74 77 65 65 6e 20 49 50 76 36 20 61 6e 64 20 49 50 76 34 20 6e 65 74 77 6f 72 6b 73 2e 20 | between.IPv6.and.IPv4.networks.. |
aaa40 | 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 6f 75 74 6c 69 6e 65 73 20 74 68 65 20 | This.documentation.outlines.the. |
aaa60 | 73 65 74 75 70 2c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 61 6e 64 20 75 73 61 67 65 20 | setup,.configuration,.and.usage. |
aaa80 | 6f 66 20 74 68 65 20 4e 41 54 36 34 20 66 65 61 74 75 72 65 20 69 6e 20 79 6f 75 72 20 70 72 6f | of.the.NAT64.feature.in.your.pro |
aaaa0 | 6a 65 63 74 2e 20 57 68 65 74 68 65 72 20 79 6f 75 20 61 72 65 20 74 72 61 6e 73 69 74 69 6f 6e | ject..Whether.you.are.transition |
aaac0 | 69 6e 67 20 74 6f 20 49 50 76 36 20 6f 72 20 6e 65 65 64 20 74 6f 20 73 65 61 6d 6c 65 73 73 6c | ing.to.IPv6.or.need.to.seamlessl |
aaae0 | 79 20 63 6f 6e 6e 65 63 74 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 64 65 76 69 63 65 73 2e | y.connect.IPv4.and.IPv6.devices. |
aab00 | 20 4e 41 54 36 34 20 69 73 20 61 20 73 74 61 74 65 66 75 6c 20 74 72 61 6e 73 6c 61 74 69 6f 6e | .NAT64.is.a.stateful.translation |
aab20 | 20 6d 65 63 68 61 6e 69 73 6d 20 74 68 61 74 20 74 72 61 6e 73 6c 61 74 65 73 20 49 50 76 36 20 | .mechanism.that.translates.IPv6. |
aab40 | 61 64 64 72 65 73 73 65 73 20 74 6f 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 | addresses.to.IPv4.addresses.and. |
aab60 | 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 | IPv4.addresses.to.IPv6.addresses |
aab80 | 2e 20 4e 41 54 36 34 20 69 73 20 75 73 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 49 50 76 36 2d 6f | ..NAT64.is.used.to.enable.IPv6-o |
aaba0 | 6e 6c 79 20 63 6c 69 65 6e 74 73 20 74 6f 20 63 6f 6e 74 61 63 74 20 49 50 76 34 20 73 65 72 76 | nly.clients.to.contact.IPv4.serv |
aabc0 | 65 72 73 20 75 73 69 6e 67 20 75 6e 69 63 61 73 74 20 55 44 50 2c 20 54 43 50 2c 20 6f 72 20 49 | ers.using.unicast.UDP,.TCP,.or.I |
aabe0 | 43 4d 50 2e 00 3a 61 62 62 72 3a 60 4e 45 54 20 28 4e 65 74 77 6f 72 6b 20 45 6e 74 69 74 79 20 | CMP..:abbr:`NET.(Network.Entity. |
aac00 | 54 69 74 6c 65 29 60 20 73 65 6c 65 63 74 6f 72 3a 20 60 60 30 30 60 60 20 4d 75 73 74 20 61 6c | Title)`.selector:.``00``.Must.al |
aac20 | 77 61 79 73 20 62 65 20 30 30 2e 20 54 68 69 73 20 73 65 74 74 69 6e 67 20 69 6e 64 69 63 61 74 | ways.be.00..This.setting.indicat |
aac40 | 65 73 20 22 74 68 69 73 20 73 79 73 74 65 6d 22 20 6f 72 20 22 6c 6f 63 61 6c 20 73 79 73 74 65 | es."this.system".or."local.syste |
aac60 | 6d 2e 22 00 3a 61 62 62 72 3a 60 4e 48 52 50 20 28 4e 65 78 74 20 48 6f 70 20 52 65 73 6f 6c 75 | m.".:abbr:`NHRP.(Next.Hop.Resolu |
aac80 | 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 3a 72 66 63 3a 60 32 33 33 32 60 00 3a 61 62 62 | tion.Protocol)`.:rfc:`2332`.:abb |
aaca0 | 72 3a 60 4e 50 54 76 36 20 28 49 50 76 36 2d 74 6f 2d 49 50 76 36 20 4e 65 74 77 6f 72 6b 20 50 | r:`NPTv6.(IPv6-to-IPv6.Network.P |
aacc0 | 72 65 66 69 78 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 6e 20 61 64 64 72 65 73 | refix.Translation)`.is.an.addres |
aace0 | 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 74 65 63 68 6e 6f 6c 6f 67 79 20 62 61 73 65 64 20 6f | s.translation.technology.based.o |
aad00 | 6e 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 73 2c 20 75 73 65 64 20 74 6f 20 63 6f 6e 76 65 72 74 | n.IPv6.networks,.used.to.convert |
aad20 | 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 20 69 6e 20 61 6e 20 49 50 | .an.IPv6.address.prefix.in.an.IP |
aad40 | 76 36 20 6d 65 73 73 61 67 65 20 69 6e 74 6f 20 61 6e 6f 74 68 65 72 20 49 50 76 36 20 61 64 64 | v6.message.into.another.IPv6.add |
aad60 | 72 65 73 73 20 70 72 65 66 69 78 2e 20 57 65 20 63 61 6c 6c 20 74 68 69 73 20 61 64 64 72 65 73 | ress.prefix..We.call.this.addres |
aad80 | 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6d 65 74 68 6f 64 20 4e 41 54 36 36 2e 20 44 65 76 69 | s.translation.method.NAT66..Devi |
aada0 | 63 65 73 20 74 68 61 74 20 73 75 70 70 6f 72 74 20 74 68 65 20 4e 41 54 36 36 20 66 75 6e 63 74 | ces.that.support.the.NAT66.funct |
aadc0 | 69 6f 6e 20 61 72 65 20 63 61 6c 6c 65 64 20 4e 41 54 36 36 20 64 65 76 69 63 65 73 2c 20 77 68 | ion.are.called.NAT66.devices,.wh |
aade0 | 69 63 68 20 63 61 6e 20 70 72 6f 76 69 64 65 20 4e 41 54 36 36 20 73 6f 75 72 63 65 20 61 6e 64 | ich.can.provide.NAT66.source.and |
aae00 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e | .destination.address.translation |
aae20 | 20 66 75 6e 63 74 69 6f 6e 73 2e 00 3a 61 62 62 72 3a 60 4e 54 50 20 28 4e 65 74 77 6f 72 6b 20 | .functions..:abbr:`NTP.(Network. |
aae40 | 54 69 6d 65 20 50 72 6f 74 6f 63 6f 6c 60 29 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 69 6e 67 20 | Time.Protocol`).is.a.networking. |
aae60 | 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 63 6c 6f 63 6b 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 | protocol.for.clock.synchronizati |
aae80 | 6f 6e 20 62 65 74 77 65 65 6e 20 63 6f 6d 70 75 74 65 72 20 73 79 73 74 65 6d 73 20 6f 76 65 72 | on.between.computer.systems.over |
aaea0 | 20 70 61 63 6b 65 74 2d 73 77 69 74 63 68 65 64 2c 20 76 61 72 69 61 62 6c 65 2d 6c 61 74 65 6e | .packet-switched,.variable-laten |
aaec0 | 63 79 20 64 61 74 61 20 6e 65 74 77 6f 72 6b 73 2e 20 49 6e 20 6f 70 65 72 61 74 69 6f 6e 20 73 | cy.data.networks..In.operation.s |
aaee0 | 69 6e 63 65 20 62 65 66 6f 72 65 20 31 39 38 35 2c 20 4e 54 50 20 69 73 20 6f 6e 65 20 6f 66 20 | ince.before.1985,.NTP.is.one.of. |
aaf00 | 74 68 65 20 6f 6c 64 65 73 74 20 49 6e 74 65 72 6e 65 74 20 70 72 6f 74 6f 63 6f 6c 73 20 69 6e | the.oldest.Internet.protocols.in |
aaf20 | 20 63 75 72 72 65 6e 74 20 75 73 65 2e 00 3a 61 62 62 72 3a 60 4f 53 50 46 20 28 4f 70 65 6e 20 | .current.use..:abbr:`OSPF.(Open. |
aaf40 | 53 68 6f 72 74 65 73 74 20 50 61 74 68 20 46 69 72 73 74 29 60 20 69 73 20 61 20 72 6f 75 74 69 | Shortest.Path.First)`.is.a.routi |
aaf60 | 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 6f | ng.protocol.for.Internet.Protoco |
aaf80 | 6c 20 28 49 50 29 20 6e 65 74 77 6f 72 6b 73 2e 20 49 74 20 75 73 65 73 20 61 20 6c 69 6e 6b 20 | l.(IP).networks..It.uses.a.link. |
aafa0 | 73 74 61 74 65 20 72 6f 75 74 69 6e 67 20 28 4c 53 52 29 20 61 6c 67 6f 72 69 74 68 6d 20 61 6e | state.routing.(LSR).algorithm.an |
aafc0 | 64 20 66 61 6c 6c 73 20 69 6e 74 6f 20 74 68 65 20 67 72 6f 75 70 20 6f 66 20 69 6e 74 65 72 69 | d.falls.into.the.group.of.interi |
aafe0 | 6f 72 20 67 61 74 65 77 61 79 20 70 72 6f 74 6f 63 6f 6c 73 20 28 49 47 50 73 29 2c 20 6f 70 65 | or.gateway.protocols.(IGPs),.ope |
ab000 | 72 61 74 69 6e 67 20 77 69 74 68 69 6e 20 61 20 73 69 6e 67 6c 65 20 61 75 74 6f 6e 6f 6d 6f 75 | rating.within.a.single.autonomou |
ab020 | 73 20 73 79 73 74 65 6d 20 28 41 53 29 2e 20 49 74 20 69 73 20 64 65 66 69 6e 65 64 20 61 73 20 | s.system.(AS)..It.is.defined.as. |
ab040 | 4f 53 50 46 20 56 65 72 73 69 6f 6e 20 32 20 69 6e 20 3a 72 66 63 3a 60 32 33 32 38 60 20 28 31 | OSPF.Version.2.in.:rfc:`2328`.(1 |
ab060 | 39 39 38 29 20 66 6f 72 20 49 50 76 34 2e 20 55 70 64 61 74 65 73 20 66 6f 72 20 49 50 76 36 20 | 998).for.IPv4..Updates.for.IPv6. |
ab080 | 61 72 65 20 73 70 65 63 69 66 69 65 64 20 61 73 20 4f 53 50 46 20 56 65 72 73 69 6f 6e 20 33 20 | are.specified.as.OSPF.Version.3. |
ab0a0 | 69 6e 20 3a 72 66 63 3a 60 35 33 34 30 60 20 28 32 30 30 38 29 2e 20 4f 53 50 46 20 73 75 70 70 | in.:rfc:`5340`.(2008)..OSPF.supp |
ab0c0 | 6f 72 74 73 20 74 68 65 20 3a 61 62 62 72 3a 60 43 49 44 52 20 28 43 6c 61 73 73 6c 65 73 73 20 | orts.the.:abbr:`CIDR.(Classless. |
ab0e0 | 49 6e 74 65 72 2d 44 6f 6d 61 69 6e 20 52 6f 75 74 69 6e 67 29 60 20 61 64 64 72 65 73 73 69 6e | Inter-Domain.Routing)`.addressin |
ab100 | 67 20 6d 6f 64 65 6c 2e 00 3a 61 62 62 72 3a 60 50 49 4d 20 28 50 72 6f 74 6f 63 6f 6c 20 49 6e | g.model..:abbr:`PIM.(Protocol.In |
ab120 | 64 65 70 65 6e 64 65 6e 74 20 4d 75 6c 74 69 63 61 73 74 29 60 20 6d 75 73 74 20 62 65 20 63 6f | dependent.Multicast)`.must.be.co |
ab140 | 6e 66 69 67 75 72 65 64 20 69 6e 20 65 76 65 72 79 20 69 6e 74 65 72 66 61 63 65 20 6f 66 20 65 | nfigured.in.every.interface.of.e |
ab160 | 76 65 72 79 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 72 6f 75 74 65 72 2e 20 45 76 65 72 79 | very.participating.router..Every |
ab180 | 20 72 6f 75 74 65 72 20 6d 75 73 74 20 61 6c 73 6f 20 68 61 76 65 20 74 68 65 20 6c 6f 63 61 74 | .router.must.also.have.the.locat |
ab1a0 | 69 6f 6e 20 6f 66 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 6d 61 6e 75 61 | ion.of.the.Rendevouz.Point.manua |
ab1c0 | 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 54 68 65 6e 2c 20 75 6e 69 64 69 72 65 63 74 69 | lly.configured..Then,.unidirecti |
ab1e0 | 6f 6e 61 6c 20 73 68 61 72 65 64 20 74 72 65 65 73 20 72 6f 6f 74 65 64 20 61 74 20 74 68 65 20 | onal.shared.trees.rooted.at.the. |
ab200 | 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 69 63 61 6c | Rendevouz.Point.will.automatical |
ab220 | 6c 79 20 62 65 20 62 75 69 6c 74 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 64 69 73 74 72 69 | ly.be.built.for.multicast.distri |
ab240 | 62 75 74 69 6f 6e 2e 00 3a 61 62 62 72 3a 60 50 50 50 6f 45 20 28 50 6f 69 6e 74 2d 74 6f 2d 50 | bution..:abbr:`PPPoE.(Point-to-P |
ab260 | 6f 69 6e 74 20 50 72 6f 74 6f 63 6f 6c 20 6f 76 65 72 20 45 74 68 65 72 6e 65 74 29 60 20 69 73 | oint.Protocol.over.Ethernet)`.is |
ab280 | 20 61 20 6e 65 74 77 6f 72 6b 20 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 65 6e 63 61 70 73 75 6c | .a.network.protocol.for.encapsul |
ab2a0 | 61 74 69 6e 67 20 50 50 50 20 66 72 61 6d 65 73 20 69 6e 73 69 64 65 20 45 74 68 65 72 6e 65 74 | ating.PPP.frames.inside.Ethernet |
ab2c0 | 20 66 72 61 6d 65 73 2e 20 49 74 20 61 70 70 65 61 72 65 64 20 69 6e 20 31 39 39 39 2c 20 69 6e | .frames..It.appeared.in.1999,.in |
ab2e0 | 20 74 68 65 20 63 6f 6e 74 65 78 74 20 6f 66 20 74 68 65 20 62 6f 6f 6d 20 6f 66 20 44 53 4c 20 | .the.context.of.the.boom.of.DSL. |
ab300 | 61 73 20 74 68 65 20 73 6f 6c 75 74 69 6f 6e 20 66 6f 72 20 74 75 6e 6e 65 6c 69 6e 67 20 70 61 | as.the.solution.for.tunneling.pa |
ab320 | 63 6b 65 74 73 20 6f 76 65 72 20 74 68 65 20 44 53 4c 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f | ckets.over.the.DSL.connection.to |
ab340 | 20 74 68 65 20 3a 61 62 62 72 3a 60 49 53 50 73 20 28 49 6e 74 65 72 6e 65 74 20 53 65 72 76 69 | .the.:abbr:`ISPs.(Internet.Servi |
ab360 | 63 65 20 50 72 6f 76 69 64 65 72 73 29 60 20 49 50 20 6e 65 74 77 6f 72 6b 2c 20 61 6e 64 20 66 | ce.Providers)`.IP.network,.and.f |
ab380 | 72 6f 6d 20 74 68 65 72 65 20 74 6f 20 74 68 65 20 72 65 73 74 20 6f 66 20 74 68 65 20 49 6e 74 | rom.there.to.the.rest.of.the.Int |
ab3a0 | 65 72 6e 65 74 2e 20 41 20 32 30 30 35 20 6e 65 74 77 6f 72 6b 69 6e 67 20 62 6f 6f 6b 20 6e 6f | ernet..A.2005.networking.book.no |
ab3c0 | 74 65 64 20 74 68 61 74 20 22 4d 6f 73 74 20 44 53 4c 20 70 72 6f 76 69 64 65 72 73 20 75 73 65 | ted.that."Most.DSL.providers.use |
ab3e0 | 20 50 50 50 6f 45 2c 20 77 68 69 63 68 20 70 72 6f 76 69 64 65 73 20 61 75 74 68 65 6e 74 69 63 | .PPPoE,.which.provides.authentic |
ab400 | 61 74 69 6f 6e 2c 20 65 6e 63 72 79 70 74 69 6f 6e 2c 20 61 6e 64 20 63 6f 6d 70 72 65 73 73 69 | ation,.encryption,.and.compressi |
ab420 | 6f 6e 2e 22 20 54 79 70 69 63 61 6c 20 75 73 65 20 6f 66 20 50 50 50 6f 45 20 69 6e 76 6f 6c 76 | on.".Typical.use.of.PPPoE.involv |
ab440 | 65 73 20 6c 65 76 65 72 61 67 69 6e 67 20 74 68 65 20 50 50 50 20 66 61 63 69 6c 69 74 69 65 73 | es.leveraging.the.PPP.facilities |
ab460 | 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 73 65 72 20 77 69 74 | .for.authenticating.the.user.wit |
ab480 | 68 20 61 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 61 73 73 77 6f 72 64 2c 20 70 72 65 64 6f | h.a.username.and.password,.predo |
ab4a0 | 6d 69 6e 61 74 65 6c 79 20 76 69 61 20 74 68 65 20 50 41 50 20 70 72 6f 74 6f 63 6f 6c 20 61 6e | minately.via.the.PAP.protocol.an |
ab4c0 | 64 20 6c 65 73 73 20 6f 66 74 65 6e 20 76 69 61 20 43 48 41 50 2e 00 3a 61 62 62 72 3a 60 52 41 | d.less.often.via.CHAP..:abbr:`RA |
ab4e0 | 73 20 28 52 6f 75 74 65 72 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 29 60 20 61 72 65 20 64 | s.(Router.advertisements)`.are.d |
ab500 | 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 34 38 36 31 23 73 65 63 74 69 6f 6e 2d 34 | escribed.in.:rfc:`4861#section-4 |
ab520 | 2e 36 2e 32 60 2e 20 54 68 65 79 20 61 72 65 20 70 61 72 74 20 6f 66 20 77 68 61 74 20 69 73 20 | .6.2`..They.are.part.of.what.is. |
ab540 | 6b 6e 6f 77 6e 20 61 73 20 3a 61 62 62 72 3a 60 53 4c 41 41 43 20 28 53 74 61 74 65 6c 65 73 73 | known.as.:abbr:`SLAAC.(Stateless |
ab560 | 20 41 64 64 72 65 73 73 20 41 75 74 6f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 29 60 2e 00 3a 61 | .Address.Autoconfiguration)`..:a |
ab580 | 62 62 72 3a 60 52 49 50 20 28 52 6f 75 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 50 72 | bbr:`RIP.(Routing.Information.Pr |
ab5a0 | 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 77 69 64 65 6c 79 20 64 65 70 6c 6f 79 65 64 20 69 6e | otocol)`.is.a.widely.deployed.in |
ab5c0 | 74 65 72 69 6f 72 20 67 61 74 65 77 61 79 20 70 72 6f 74 6f 63 6f 6c 2e 20 52 49 50 20 77 61 73 | terior.gateway.protocol..RIP.was |
ab5e0 | 20 64 65 76 65 6c 6f 70 65 64 20 69 6e 20 74 68 65 20 31 39 37 30 73 20 61 74 20 58 65 72 6f 78 | .developed.in.the.1970s.at.Xerox |
ab600 | 20 4c 61 62 73 20 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 58 4e 53 20 72 6f 75 74 69 6e 67 | .Labs.as.part.of.the.XNS.routing |
ab620 | 20 70 72 6f 74 6f 63 6f 6c 2e 20 52 49 50 20 69 73 20 61 20 64 69 73 74 61 6e 63 65 2d 76 65 63 | .protocol..RIP.is.a.distance-vec |
ab640 | 74 6f 72 20 70 72 6f 74 6f 63 6f 6c 20 61 6e 64 20 69 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 | tor.protocol.and.is.based.on.the |
ab660 | 20 42 65 6c 6c 6d 61 6e 2d 46 6f 72 64 20 61 6c 67 6f 72 69 74 68 6d 73 2e 20 41 73 20 61 20 64 | .Bellman-Ford.algorithms..As.a.d |
ab680 | 69 73 74 61 6e 63 65 2d 76 65 63 74 6f 72 20 70 72 6f 74 6f 63 6f 6c 2c 20 52 49 50 20 72 6f 75 | istance-vector.protocol,.RIP.rou |
ab6a0 | 74 65 72 20 73 65 6e 64 20 75 70 64 61 74 65 73 20 74 6f 20 69 74 73 20 6e 65 69 67 68 62 6f 72 | ter.send.updates.to.its.neighbor |
ab6c0 | 73 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 2c 20 74 68 75 73 20 61 6c 6c 6f 77 69 6e 67 20 74 68 | s.periodically,.thus.allowing.th |
ab6e0 | 65 20 63 6f 6e 76 65 72 67 65 6e 63 65 20 74 6f 20 61 20 6b 6e 6f 77 6e 20 74 6f 70 6f 6c 6f 67 | e.convergence.to.a.known.topolog |
ab700 | 79 2e 20 49 6e 20 65 61 63 68 20 75 70 64 61 74 65 2c 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 | y..In.each.update,.the.distance. |
ab720 | 74 6f 20 61 6e 79 20 67 69 76 65 6e 20 6e 65 74 77 6f 72 6b 20 77 69 6c 6c 20 62 65 20 62 72 6f | to.any.given.network.will.be.bro |
ab740 | 61 64 63 61 73 74 20 74 6f 20 69 74 73 20 6e 65 69 67 68 62 6f 72 69 6e 67 20 72 6f 75 74 65 72 | adcast.to.its.neighboring.router |
ab760 | 2e 00 3a 61 62 62 72 3a 60 52 50 4b 49 20 28 52 65 73 6f 75 72 63 65 20 50 75 62 6c 69 63 20 4b | ..:abbr:`RPKI.(Resource.Public.K |
ab780 | 65 79 20 49 6e 66 72 61 73 74 72 75 63 74 75 72 65 29 60 20 69 73 20 61 20 66 72 61 6d 65 77 6f | ey.Infrastructure)`.is.a.framewo |
ab7a0 | 72 6b 20 3a 61 62 62 72 3a 60 50 4b 49 20 28 50 75 62 6c 69 63 20 4b 65 79 20 49 6e 66 72 61 73 | rk.:abbr:`PKI.(Public.Key.Infras |
ab7c0 | 74 72 75 63 74 75 72 65 29 60 20 64 65 73 69 67 6e 65 64 20 74 6f 20 73 65 63 75 72 65 20 74 68 | tructure)`.designed.to.secure.th |
ab7e0 | 65 20 49 6e 74 65 72 6e 65 74 20 72 6f 75 74 69 6e 67 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 | e.Internet.routing.infrastructur |
ab800 | 65 2e 20 49 74 20 61 73 73 6f 63 69 61 74 65 73 20 42 47 50 20 72 6f 75 74 65 20 61 6e 6e 6f 75 | e..It.associates.BGP.route.annou |
ab820 | 6e 63 65 6d 65 6e 74 73 20 77 69 74 68 20 74 68 65 20 63 6f 72 72 65 63 74 20 6f 72 69 67 69 6e | ncements.with.the.correct.origin |
ab840 | 61 74 69 6e 67 20 3a 61 62 62 72 3a 60 41 53 4e 20 28 41 75 74 6f 6e 6f 6d 75 73 20 53 79 73 74 | ating.:abbr:`ASN.(Autonomus.Syst |
ab860 | 65 6d 20 4e 75 6d 62 65 72 29 60 20 77 68 69 63 68 20 42 47 50 20 72 6f 75 74 65 72 73 20 63 61 | em.Number)`.which.BGP.routers.ca |
ab880 | 6e 20 74 68 65 6e 20 75 73 65 20 74 6f 20 63 68 65 63 6b 20 65 61 63 68 20 72 6f 75 74 65 20 61 | n.then.use.to.check.each.route.a |
ab8a0 | 67 61 69 6e 73 74 20 74 68 65 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 3a 61 62 62 72 3a 60 | gainst.the.corresponding.:abbr:` |
ab8c0 | 52 4f 41 20 28 52 6f 75 74 65 20 4f 72 69 67 69 6e 20 41 75 74 68 6f 72 69 73 61 74 69 6f 6e 29 | ROA.(Route.Origin.Authorisation) |
ab8e0 | 60 20 66 6f 72 20 76 61 6c 69 64 69 74 79 2e 20 52 50 4b 49 20 69 73 20 64 65 73 63 72 69 62 65 | `.for.validity..RPKI.is.describe |
ab900 | 64 20 69 6e 20 3a 72 66 63 3a 60 36 34 38 30 60 2e 00 3a 61 62 62 72 3a 60 52 50 53 20 28 52 65 | d.in.:rfc:`6480`..:abbr:`RPS.(Re |
ab920 | 63 65 69 76 65 20 50 61 63 6b 65 74 20 53 74 65 65 72 69 6e 67 29 60 20 69 73 20 6c 6f 67 69 63 | ceive.Packet.Steering)`.is.logic |
ab940 | 61 6c 6c 79 20 61 20 73 6f 66 74 77 61 72 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 6f | ally.a.software.implementation.o |
ab960 | 66 20 3a 61 62 62 72 3a 60 52 53 53 20 28 52 65 63 65 69 76 65 20 53 69 64 65 20 53 63 61 6c 69 | f.:abbr:`RSS.(Receive.Side.Scali |
ab980 | 6e 67 29 60 2e 20 42 65 69 6e 67 20 69 6e 20 73 6f 66 74 77 61 72 65 2c 20 69 74 20 69 73 20 6e | ng)`..Being.in.software,.it.is.n |
ab9a0 | 65 63 65 73 73 61 72 69 6c 79 20 63 61 6c 6c 65 64 20 6c 61 74 65 72 20 69 6e 20 74 68 65 20 64 | ecessarily.called.later.in.the.d |
ab9c0 | 61 74 61 70 61 74 68 2e 20 57 68 65 72 65 61 73 20 52 53 53 20 73 65 6c 65 63 74 73 20 74 68 65 | atapath..Whereas.RSS.selects.the |
ab9e0 | 20 71 75 65 75 65 20 61 6e 64 20 68 65 6e 63 65 20 43 50 55 20 74 68 61 74 20 77 69 6c 6c 20 72 | .queue.and.hence.CPU.that.will.r |
aba00 | 75 6e 20 74 68 65 20 68 61 72 64 77 61 72 65 20 69 6e 74 65 72 72 75 70 74 20 68 61 6e 64 6c 65 | un.the.hardware.interrupt.handle |
aba20 | 72 2c 20 52 50 53 20 73 65 6c 65 63 74 73 20 74 68 65 20 43 50 55 20 74 6f 20 70 65 72 66 6f 72 | r,.RPS.selects.the.CPU.to.perfor |
aba40 | 6d 20 70 72 6f 74 6f 63 6f 6c 20 70 72 6f 63 65 73 73 69 6e 67 20 61 62 6f 76 65 20 74 68 65 20 | m.protocol.processing.above.the. |
aba60 | 69 6e 74 65 72 72 75 70 74 20 68 61 6e 64 6c 65 72 2e 20 54 68 69 73 20 69 73 20 61 63 63 6f 6d | interrupt.handler..This.is.accom |
aba80 | 70 6c 69 73 68 65 64 20 62 79 20 70 6c 61 63 69 6e 67 20 74 68 65 20 70 61 63 6b 65 74 20 6f 6e | plished.by.placing.the.packet.on |
abaa0 | 20 74 68 65 20 64 65 73 69 72 65 64 20 43 50 55 27 73 20 62 61 63 6b 6c 6f 67 20 71 75 65 75 65 | .the.desired.CPU's.backlog.queue |
abac0 | 20 61 6e 64 20 77 61 6b 69 6e 67 20 75 70 20 74 68 65 20 43 50 55 20 66 6f 72 20 70 72 6f 63 65 | .and.waking.up.the.CPU.for.proce |
abae0 | 73 73 69 6e 67 2e 20 52 50 53 20 68 61 73 20 73 6f 6d 65 20 61 64 76 61 6e 74 61 67 65 73 20 6f | ssing..RPS.has.some.advantages.o |
abb00 | 76 65 72 20 52 53 53 3a 00 3a 61 62 62 72 3a 60 53 4c 41 41 43 20 28 53 74 61 74 65 6c 65 73 73 | ver.RSS:.:abbr:`SLAAC.(Stateless |
abb20 | 20 41 64 64 72 65 73 73 20 41 75 74 6f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 29 60 20 3a 72 66 | .Address.Autoconfiguration)`.:rf |
abb40 | 63 3a 60 34 38 36 32 60 2e 20 49 50 76 36 20 68 6f 73 74 73 20 63 61 6e 20 63 6f 6e 66 69 67 75 | c:`4862`..IPv6.hosts.can.configu |
abb60 | 72 65 20 74 68 65 6d 73 65 6c 76 65 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 77 68 65 6e | re.themselves.automatically.when |
abb80 | 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 6e 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 20 75 73 | .connected.to.an.IPv6.network.us |
abba0 | 69 6e 67 20 74 68 65 20 4e 65 69 67 68 62 6f 72 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f | ing.the.Neighbor.Discovery.Proto |
abbc0 | 63 6f 6c 20 76 69 61 20 3a 61 62 62 72 3a 60 49 43 4d 50 76 36 20 28 49 6e 74 65 72 6e 65 74 20 | col.via.:abbr:`ICMPv6.(Internet. |
abbe0 | 43 6f 6e 74 72 6f 6c 20 4d 65 73 73 61 67 65 20 50 72 6f 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e | Control.Message.Protocol.version |
abc00 | 20 36 29 60 20 72 6f 75 74 65 72 20 64 69 73 63 6f 76 65 72 79 20 6d 65 73 73 61 67 65 73 2e 20 | .6)`.router.discovery.messages.. |
abc20 | 57 68 65 6e 20 66 69 72 73 74 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 20 6e 65 74 77 6f 72 | When.first.connected.to.a.networ |
abc40 | 6b 2c 20 61 20 68 6f 73 74 20 73 65 6e 64 73 20 61 20 6c 69 6e 6b 2d 6c 6f 63 61 6c 20 72 6f 75 | k,.a.host.sends.a.link-local.rou |
abc60 | 74 65 72 20 73 6f 6c 69 63 69 74 61 74 69 6f 6e 20 6d 75 6c 74 69 63 61 73 74 20 72 65 71 75 65 | ter.solicitation.multicast.reque |
abc80 | 73 74 20 66 6f 72 20 69 74 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 | st.for.its.configuration.paramet |
abca0 | 65 72 73 3b 20 72 6f 75 74 65 72 73 20 72 65 73 70 6f 6e 64 20 74 6f 20 73 75 63 68 20 61 20 72 | ers;.routers.respond.to.such.a.r |
abcc0 | 65 71 75 65 73 74 20 77 69 74 68 20 61 20 72 6f 75 74 65 72 20 61 64 76 65 72 74 69 73 65 6d 65 | equest.with.a.router.advertiseme |
abce0 | 6e 74 20 70 61 63 6b 65 74 20 74 68 61 74 20 63 6f 6e 74 61 69 6e 73 20 49 6e 74 65 72 6e 65 74 | nt.packet.that.contains.Internet |
abd00 | 20 4c 61 79 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 2e | .Layer.configuration.parameters. |
abd20 | 00 3a 61 62 62 72 3a 60 53 4e 41 54 20 28 53 6f 75 72 63 65 20 4e 65 74 77 6f 72 6b 20 41 64 64 | .:abbr:`SNAT.(Source.Network.Add |
abd40 | 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 74 68 65 20 6d 6f 73 74 20 63 | ress.Translation)`.is.the.most.c |
abd60 | 6f 6d 6d 6f 6e 20 66 6f 72 6d 20 6f 66 20 3a 61 62 62 72 3a 60 4e 41 54 20 28 4e 65 74 77 6f 72 | ommon.form.of.:abbr:`NAT.(Networ |
abd80 | 6b 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 61 6e 64 20 69 73 20 74 | k.Address.Translation)`.and.is.t |
abda0 | 79 70 69 63 61 6c 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 73 69 6d 70 6c 79 20 61 73 20 4e | ypically.referred.to.simply.as.N |
abdc0 | 41 54 2e 20 54 6f 20 62 65 20 6d 6f 72 65 20 63 6f 72 72 65 63 74 2c 20 77 68 61 74 20 6d 6f 73 | AT..To.be.more.correct,.what.mos |
abde0 | 74 20 70 65 6f 70 6c 65 20 72 65 66 65 72 20 74 6f 20 61 73 20 3a 61 62 62 72 3a 60 4e 41 54 20 | t.people.refer.to.as.:abbr:`NAT. |
abe00 | 28 4e 65 74 77 6f 72 6b 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 | (Network.Address.Translation)`.i |
abe20 | 73 20 61 63 74 75 61 6c 6c 79 20 74 68 65 20 70 72 6f 63 65 73 73 20 6f 66 20 3a 61 62 62 72 3a | s.actually.the.process.of.:abbr: |
abe40 | 60 50 41 54 20 28 50 6f 72 74 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 | `PAT.(Port.Address.Translation)` |
abe60 | 2c 20 6f 72 20 4e 41 54 20 6f 76 65 72 6c 6f 61 64 2e 20 53 4e 41 54 20 69 73 20 74 79 70 69 63 | ,.or.NAT.overload..SNAT.is.typic |
abe80 | 61 6c 6c 79 20 75 73 65 64 20 62 79 20 69 6e 74 65 72 6e 61 6c 20 75 73 65 72 73 2f 70 72 69 76 | ally.used.by.internal.users/priv |
abea0 | 61 74 65 20 68 6f 73 74 73 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 49 6e 74 65 72 6e 65 74 | ate.hosts.to.access.the.Internet |
abec0 | 20 2d 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 69 73 20 74 72 61 6e 73 6c 61 | .-.the.source.address.is.transla |
abee0 | 74 65 64 20 61 6e 64 20 74 68 75 73 20 6b 65 70 74 20 70 72 69 76 61 74 65 2e 00 3a 61 62 62 72 | ted.and.thus.kept.private..:abbr |
abf00 | 3a 60 53 4e 41 54 36 34 20 28 49 50 76 36 2d 74 6f 2d 49 50 76 34 20 53 6f 75 72 63 65 20 41 64 | :`SNAT64.(IPv6-to-IPv4.Source.Ad |
abf20 | 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 20 73 74 61 74 65 66 75 | dress.Translation)`.is.a.statefu |
abf40 | 6c 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 20 74 68 61 74 20 74 72 61 | l.translation.mechanism.that.tra |
abf60 | 6e 73 6c 61 74 65 73 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 49 50 76 34 20 61 | nslates.IPv6.addresses.to.IPv4.a |
abf80 | 64 64 72 65 73 73 65 73 2e 00 3a 61 62 62 72 3a 60 53 4e 4d 50 20 28 53 69 6d 70 6c 65 20 4e 65 | ddresses..:abbr:`SNMP.(Simple.Ne |
abfa0 | 74 77 6f 72 6b 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 | twork.Management.Protocol)`.is.a |
abfc0 | 6e 20 49 6e 74 65 72 6e 65 74 20 53 74 61 6e 64 61 72 64 20 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 | n.Internet.Standard.protocol.for |
abfe0 | 20 63 6f 6c 6c 65 63 74 69 6e 67 20 61 6e 64 20 6f 72 67 61 6e 69 7a 69 6e 67 20 69 6e 66 6f 72 | .collecting.and.organizing.infor |
ac000 | 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 6d 61 6e 61 67 65 64 20 64 65 76 69 63 65 73 20 6f 6e 20 | mation.about.managed.devices.on. |
ac020 | 49 50 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 66 6f 72 20 6d 6f 64 69 66 79 69 6e 67 20 74 68 | IP.networks.and.for.modifying.th |
ac040 | 61 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 63 68 61 6e 67 65 20 64 65 76 69 63 65 20 | at.information.to.change.device. |
ac060 | 62 65 68 61 76 69 6f 72 2e 20 44 65 76 69 63 65 73 20 74 68 61 74 20 74 79 70 69 63 61 6c 6c 79 | behavior..Devices.that.typically |
ac080 | 20 73 75 70 70 6f 72 74 20 53 4e 4d 50 20 69 6e 63 6c 75 64 65 20 63 61 62 6c 65 20 6d 6f 64 65 | .support.SNMP.include.cable.mode |
ac0a0 | 6d 73 2c 20 72 6f 75 74 65 72 73 2c 20 73 77 69 74 63 68 65 73 2c 20 73 65 72 76 65 72 73 2c 20 | ms,.routers,.switches,.servers,. |
ac0c0 | 77 6f 72 6b 73 74 61 74 69 6f 6e 73 2c 20 70 72 69 6e 74 65 72 73 2c 20 61 6e 64 20 6d 6f 72 65 | workstations,.printers,.and.more |
ac0e0 | 2e 00 3a 61 62 62 72 3a 60 53 4e 50 54 76 36 20 28 53 6f 75 72 63 65 20 49 50 76 36 2d 74 6f 2d | ..:abbr:`SNPTv6.(Source.IPv6-to- |
ac100 | 49 50 76 36 20 4e 65 74 77 6f 72 6b 20 50 72 65 66 69 78 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 | IPv6.Network.Prefix.Translation) |
ac120 | 60 20 54 68 65 20 63 6f 6e 76 65 72 73 69 6f 6e 20 66 75 6e 63 74 69 6f 6e 20 69 73 20 6d 61 69 | `.The.conversion.function.is.mai |
ac140 | 6e 6c 79 20 75 73 65 64 20 69 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 63 65 6e 61 72 | nly.used.in.the.following.scenar |
ac160 | 69 6f 73 3a 00 3a 61 62 62 72 3a 60 53 53 48 20 28 53 65 63 75 72 65 20 53 68 65 6c 6c 29 60 20 | ios:.:abbr:`SSH.(Secure.Shell)`. |
ac180 | 69 73 20 61 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 6e 65 74 77 6f 72 6b 20 70 72 6f 74 6f | is.a.cryptographic.network.proto |
ac1a0 | 63 6f 6c 20 66 6f 72 20 6f 70 65 72 61 74 69 6e 67 20 6e 65 74 77 6f 72 6b 20 73 65 72 76 69 63 | col.for.operating.network.servic |
ac1c0 | 65 73 20 73 65 63 75 72 65 6c 79 20 6f 76 65 72 20 61 6e 20 75 6e 73 65 63 75 72 65 64 20 6e 65 | es.securely.over.an.unsecured.ne |
ac1e0 | 74 77 6f 72 6b 2e 20 54 68 65 20 73 74 61 6e 64 61 72 64 20 54 43 50 20 70 6f 72 74 20 66 6f 72 | twork..The.standard.TCP.port.for |
ac200 | 20 53 53 48 20 69 73 20 32 32 2e 20 54 68 65 20 62 65 73 74 20 6b 6e 6f 77 6e 20 65 78 61 6d 70 | .SSH.is.22..The.best.known.examp |
ac220 | 6c 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 69 73 20 66 6f 72 20 72 65 6d 6f 74 65 20 6c 6f 67 | le.application.is.for.remote.log |
ac240 | 69 6e 20 74 6f 20 63 6f 6d 70 75 74 65 72 20 73 79 73 74 65 6d 73 20 62 79 20 75 73 65 72 73 2e | in.to.computer.systems.by.users. |
ac260 | 00 3a 61 62 62 72 3a 60 53 53 54 50 20 28 53 65 63 75 72 65 20 53 6f 63 6b 65 74 20 54 75 6e 6e | .:abbr:`SSTP.(Secure.Socket.Tunn |
ac280 | 65 6c 69 6e 67 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 66 6f 72 6d 20 6f 66 20 3a 61 | eling.Protocol)`.is.a.form.of.:a |
ac2a0 | 62 62 72 3a 60 56 50 4e 20 28 56 69 72 74 75 61 6c 20 50 72 69 76 61 74 65 20 4e 65 74 77 6f 72 | bbr:`VPN.(Virtual.Private.Networ |
ac2c0 | 6b 29 60 20 74 75 6e 6e 65 6c 20 74 68 61 74 20 70 72 6f 76 69 64 65 73 20 61 20 6d 65 63 68 61 | k)`.tunnel.that.provides.a.mecha |
ac2e0 | 6e 69 73 6d 20 74 6f 20 74 72 61 6e 73 70 6f 72 74 20 50 50 50 20 74 72 61 66 66 69 63 20 74 68 | nism.to.transport.PPP.traffic.th |
ac300 | 72 6f 75 67 68 20 61 6e 20 53 53 4c 2f 54 4c 53 20 63 68 61 6e 6e 65 6c 2e 20 53 53 4c 2f 54 4c | rough.an.SSL/TLS.channel..SSL/TL |
ac320 | 53 20 70 72 6f 76 69 64 65 73 20 74 72 61 6e 73 70 6f 72 74 2d 6c 65 76 65 6c 20 73 65 63 75 72 | S.provides.transport-level.secur |
ac340 | 69 74 79 20 77 69 74 68 20 6b 65 79 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2c 20 65 6e 63 72 79 70 | ity.with.key.negotiation,.encryp |
ac360 | 74 69 6f 6e 20 61 6e 64 20 74 72 61 66 66 69 63 20 69 6e 74 65 67 72 69 74 79 20 63 68 65 63 6b | tion.and.traffic.integrity.check |
ac380 | 69 6e 67 2e 20 54 68 65 20 75 73 65 20 6f 66 20 53 53 4c 2f 54 4c 53 20 6f 76 65 72 20 54 43 50 | ing..The.use.of.SSL/TLS.over.TCP |
ac3a0 | 20 70 6f 72 74 20 34 34 33 20 61 6c 6c 6f 77 73 20 53 53 54 50 20 74 6f 20 70 61 73 73 20 74 68 | .port.443.allows.SSTP.to.pass.th |
ac3c0 | 72 6f 75 67 68 20 76 69 72 74 75 61 6c 6c 79 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 73 20 61 6e | rough.virtually.all.firewalls.an |
ac3e0 | 64 20 70 72 6f 78 79 20 73 65 72 76 65 72 73 20 65 78 63 65 70 74 20 66 6f 72 20 61 75 74 68 65 | d.proxy.servers.except.for.authe |
ac400 | 6e 74 69 63 61 74 65 64 20 77 65 62 20 70 72 6f 78 69 65 73 2e 00 3a 61 62 62 72 3a 60 53 53 54 | nticated.web.proxies..:abbr:`SST |
ac420 | 50 20 28 53 65 63 75 72 65 20 53 6f 63 6b 65 74 20 54 75 6e 6e 65 6c 69 6e 67 20 50 72 6f 74 6f | P.(Secure.Socket.Tunneling.Proto |
ac440 | 63 6f 6c 29 60 20 69 73 20 61 20 66 6f 72 6d 20 6f 66 20 3a 61 62 62 72 3a 60 56 54 50 20 28 56 | col)`.is.a.form.of.:abbr:`VTP.(V |
ac460 | 69 72 74 75 61 6c 20 50 72 69 76 61 74 65 20 4e 65 74 77 6f 72 6b 29 60 20 74 75 6e 6e 65 6c 20 | irtual.Private.Network)`.tunnel. |
ac480 | 74 68 61 74 20 70 72 6f 76 69 64 65 73 20 61 20 6d 65 63 68 61 6e 69 73 6d 20 74 6f 20 74 72 61 | that.provides.a.mechanism.to.tra |
ac4a0 | 6e 73 70 6f 72 74 20 50 50 50 20 74 72 61 66 66 69 63 20 74 68 72 6f 75 67 68 20 61 6e 20 53 53 | nsport.PPP.traffic.through.an.SS |
ac4c0 | 4c 2f 54 4c 53 20 63 68 61 6e 6e 65 6c 2e 20 53 53 4c 2f 54 4c 53 20 70 72 6f 76 69 64 65 73 20 | L/TLS.channel..SSL/TLS.provides. |
ac4e0 | 74 72 61 6e 73 70 6f 72 74 2d 6c 65 76 65 6c 20 73 65 63 75 72 69 74 79 20 77 69 74 68 20 6b 65 | transport-level.security.with.ke |
ac500 | 79 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2c 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6e 64 20 74 72 | y.negotiation,.encryption.and.tr |
ac520 | 61 66 66 69 63 20 69 6e 74 65 67 72 69 74 79 20 63 68 65 63 6b 69 6e 67 2e 20 54 68 65 20 75 73 | affic.integrity.checking..The.us |
ac540 | 65 20 6f 66 20 53 53 4c 2f 54 4c 53 20 6f 76 65 72 20 54 43 50 20 70 6f 72 74 20 34 34 33 20 28 | e.of.SSL/TLS.over.TCP.port.443.( |
ac560 | 62 79 20 64 65 66 61 75 6c 74 2c 20 70 6f 72 74 20 63 61 6e 20 62 65 20 63 68 61 6e 67 65 64 29 | by.default,.port.can.be.changed) |
ac580 | 20 61 6c 6c 6f 77 73 20 53 53 54 50 20 74 6f 20 70 61 73 73 20 74 68 72 6f 75 67 68 20 76 69 72 | .allows.SSTP.to.pass.through.vir |
ac5a0 | 74 75 61 6c 6c 79 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 73 20 61 6e 64 20 70 72 6f 78 79 20 73 | tually.all.firewalls.and.proxy.s |
ac5c0 | 65 72 76 65 72 73 20 65 78 63 65 70 74 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 | ervers.except.for.authenticated. |
ac5e0 | 77 65 62 20 70 72 6f 78 69 65 73 2e 00 3a 61 62 62 72 3a 60 53 54 50 20 28 53 70 61 6e 6e 69 6e | web.proxies..:abbr:`STP.(Spannin |
ac600 | 67 20 54 72 65 65 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 70 | g.Tree.Protocol)`.is.a.network.p |
ac620 | 72 6f 74 6f 63 6f 6c 20 74 68 61 74 20 62 75 69 6c 64 73 20 61 20 6c 6f 6f 70 2d 66 72 65 65 20 | rotocol.that.builds.a.loop-free. |
ac640 | 6c 6f 67 69 63 61 6c 20 74 6f 70 6f 6c 6f 67 79 20 66 6f 72 20 45 74 68 65 72 6e 65 74 20 6e 65 | logical.topology.for.Ethernet.ne |
ac660 | 74 77 6f 72 6b 73 2e 20 54 68 65 20 62 61 73 69 63 20 66 75 6e 63 74 69 6f 6e 20 6f 66 20 53 54 | tworks..The.basic.function.of.ST |
ac680 | 50 20 69 73 20 74 6f 20 70 72 65 76 65 6e 74 20 62 72 69 64 67 65 20 6c 6f 6f 70 73 20 61 6e 64 | P.is.to.prevent.bridge.loops.and |
ac6a0 | 20 74 68 65 20 62 72 6f 61 64 63 61 73 74 20 72 61 64 69 61 74 69 6f 6e 20 74 68 61 74 20 72 65 | .the.broadcast.radiation.that.re |
ac6c0 | 73 75 6c 74 73 20 66 72 6f 6d 20 74 68 65 6d 2e 20 53 70 61 6e 6e 69 6e 67 20 74 72 65 65 20 61 | sults.from.them..Spanning.tree.a |
ac6e0 | 6c 73 6f 20 61 6c 6c 6f 77 73 20 61 20 6e 65 74 77 6f 72 6b 20 64 65 73 69 67 6e 20 74 6f 20 69 | lso.allows.a.network.design.to.i |
ac700 | 6e 63 6c 75 64 65 20 62 61 63 6b 75 70 20 6c 69 6e 6b 73 20 70 72 6f 76 69 64 69 6e 67 20 66 61 | nclude.backup.links.providing.fa |
ac720 | 75 6c 74 20 74 6f 6c 65 72 61 6e 63 65 20 69 66 20 61 6e 20 61 63 74 69 76 65 20 6c 69 6e 6b 20 | ult.tolerance.if.an.active.link. |
ac740 | 66 61 69 6c 73 2e 00 3a 61 62 62 72 3a 60 54 46 54 50 20 28 54 72 69 76 69 61 6c 20 46 69 6c 65 | fails..:abbr:`TFTP.(Trivial.File |
ac760 | 20 54 72 61 6e 73 66 65 72 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 73 69 6d 70 6c 65 | .Transfer.Protocol)`.is.a.simple |
ac780 | 2c 20 6c 6f 63 6b 73 74 65 70 20 66 69 6c 65 20 74 72 61 6e 73 66 65 72 20 70 72 6f 74 6f 63 6f | ,.lockstep.file.transfer.protoco |
ac7a0 | 6c 20 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 61 20 63 6c 69 65 6e 74 20 74 6f 20 67 65 74 20 61 | l.which.allows.a.client.to.get.a |
ac7c0 | 20 66 69 6c 65 20 66 72 6f 6d 20 6f 72 20 70 75 74 20 61 20 66 69 6c 65 20 6f 6e 74 6f 20 61 20 | .file.from.or.put.a.file.onto.a. |
ac7e0 | 72 65 6d 6f 74 65 20 68 6f 73 74 2e 20 4f 6e 65 20 6f 66 20 69 74 73 20 70 72 69 6d 61 72 79 20 | remote.host..One.of.its.primary. |
ac800 | 75 73 65 73 20 69 73 20 69 6e 20 74 68 65 20 65 61 72 6c 79 20 73 74 61 67 65 73 20 6f 66 20 6e | uses.is.in.the.early.stages.of.n |
ac820 | 6f 64 65 73 20 62 6f 6f 74 69 6e 67 20 66 72 6f 6d 20 61 20 6c 6f 63 61 6c 20 61 72 65 61 20 6e | odes.booting.from.a.local.area.n |
ac840 | 65 74 77 6f 72 6b 2e 20 54 46 54 50 20 68 61 73 20 62 65 65 6e 20 75 73 65 64 20 66 6f 72 20 74 | etwork..TFTP.has.been.used.for.t |
ac860 | 68 69 73 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 62 65 63 61 75 73 65 20 69 74 20 69 73 20 76 65 | his.application.because.it.is.ve |
ac880 | 72 79 20 73 69 6d 70 6c 65 20 74 6f 20 69 6d 70 6c 65 6d 65 6e 74 2e 00 3a 61 62 62 72 3a 60 56 | ry.simple.to.implement..:abbr:`V |
ac8a0 | 4e 49 20 28 56 69 72 74 75 61 6c 20 4e 65 74 77 6f 72 6b 20 49 64 65 6e 74 69 66 69 65 72 29 60 | NI.(Virtual.Network.Identifier)` |
ac8c0 | 20 69 73 20 61 6e 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 61 20 75 6e 69 71 75 65 20 65 | .is.an.identifier.for.a.unique.e |
ac8e0 | 6c 65 6d 65 6e 74 20 6f 66 20 61 20 76 69 72 74 75 61 6c 20 6e 65 74 77 6f 72 6b 2e 20 20 49 6e | lement.of.a.virtual.network...In |
ac900 | 20 6d 61 6e 79 20 73 69 74 75 61 74 69 6f 6e 73 20 74 68 69 73 20 6d 61 79 20 72 65 70 72 65 73 | .many.situations.this.may.repres |
ac920 | 65 6e 74 20 61 6e 20 4c 32 20 73 65 67 6d 65 6e 74 2c 20 68 6f 77 65 76 65 72 2c 20 74 68 65 20 | ent.an.L2.segment,.however,.the. |
ac940 | 63 6f 6e 74 72 6f 6c 20 70 6c 61 6e 65 20 64 65 66 69 6e 65 73 20 74 68 65 20 66 6f 72 77 61 72 | control.plane.defines.the.forwar |
ac960 | 64 69 6e 67 20 73 65 6d 61 6e 74 69 63 73 20 6f 66 20 64 65 63 61 70 73 75 6c 61 74 65 64 20 70 | ding.semantics.of.decapsulated.p |
ac980 | 61 63 6b 65 74 73 2e 20 54 68 65 20 56 4e 49 20 4d 41 59 20 62 65 20 75 73 65 64 20 61 73 20 70 | ackets..The.VNI.MAY.be.used.as.p |
ac9a0 | 61 72 74 20 6f 66 20 45 43 4d 50 20 66 6f 72 77 61 72 64 69 6e 67 20 64 65 63 69 73 69 6f 6e 73 | art.of.ECMP.forwarding.decisions |
ac9c0 | 20 6f 72 20 4d 41 59 20 62 65 20 75 73 65 64 20 61 73 20 61 20 6d 65 63 68 61 6e 69 73 6d 20 74 | .or.MAY.be.used.as.a.mechanism.t |
ac9e0 | 6f 20 64 69 73 74 69 6e 67 75 69 73 68 20 62 65 74 77 65 65 6e 20 6f 76 65 72 6c 61 70 70 69 6e | o.distinguish.between.overlappin |
aca00 | 67 20 61 64 64 72 65 73 73 20 73 70 61 63 65 73 20 63 6f 6e 74 61 69 6e 65 64 20 69 6e 20 74 68 | g.address.spaces.contained.in.th |
aca20 | 65 20 65 6e 63 61 70 73 75 6c 61 74 65 64 20 70 61 63 6b 65 74 20 77 68 65 6e 20 6c 6f 61 64 20 | e.encapsulated.packet.when.load. |
aca40 | 62 61 6c 61 6e 63 69 6e 67 20 61 63 72 6f 73 73 20 43 50 55 73 2e 00 3a 61 62 62 72 3a 60 56 52 | balancing.across.CPUs..:abbr:`VR |
aca60 | 46 20 28 56 69 72 74 75 61 6c 20 52 6f 75 74 69 6e 67 20 61 6e 64 20 46 6f 72 77 61 72 64 69 6e | F.(Virtual.Routing.and.Forwardin |
aca80 | 67 29 60 20 64 65 76 69 63 65 73 20 63 6f 6d 62 69 6e 65 64 20 77 69 74 68 20 69 70 20 72 75 6c | g)`.devices.combined.with.ip.rul |
acaa0 | 65 73 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 63 72 65 61 74 | es.provides.the.ability.to.creat |
acac0 | 65 20 76 69 72 74 75 61 6c 20 72 6f 75 74 69 6e 67 20 61 6e 64 20 66 6f 72 77 61 72 64 69 6e 67 | e.virtual.routing.and.forwarding |
acae0 | 20 64 6f 6d 61 69 6e 73 20 28 61 6b 61 20 56 52 46 73 2c 20 56 52 46 2d 6c 69 74 65 20 74 6f 20 | .domains.(aka.VRFs,.VRF-lite.to. |
acb00 | 62 65 20 73 70 65 63 69 66 69 63 29 20 69 6e 20 74 68 65 20 4c 69 6e 75 78 20 6e 65 74 77 6f 72 | be.specific).in.the.Linux.networ |
acb20 | 6b 20 73 74 61 63 6b 2e 20 4f 6e 65 20 75 73 65 20 63 61 73 65 20 69 73 20 74 68 65 20 6d 75 6c | k.stack..One.use.case.is.the.mul |
acb40 | 74 69 2d 74 65 6e 61 6e 63 79 20 70 72 6f 62 6c 65 6d 20 77 68 65 72 65 20 65 61 63 68 20 74 65 | ti-tenancy.problem.where.each.te |
acb60 | 6e 61 6e 74 20 68 61 73 20 74 68 65 69 72 20 6f 77 6e 20 75 6e 69 71 75 65 20 72 6f 75 74 69 6e | nant.has.their.own.unique.routin |
acb80 | 67 20 74 61 62 6c 65 73 20 61 6e 64 20 69 6e 20 74 68 65 20 76 65 72 79 20 6c 65 61 73 74 20 6e | g.tables.and.in.the.very.least.n |
acba0 | 65 65 64 20 64 69 66 66 65 72 65 6e 74 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 73 2e 00 | eed.different.default.gateways.. |
acbc0 | 3a 61 62 62 72 3a 60 56 58 4c 41 4e 20 28 56 69 72 74 75 61 6c 20 45 78 74 65 6e 73 69 62 6c 65 | :abbr:`VXLAN.(Virtual.Extensible |
acbe0 | 20 4c 41 4e 29 60 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 76 69 72 74 75 61 6c 69 7a 61 74 69 | .LAN)`.is.a.network.virtualizati |
acc00 | 6f 6e 20 74 65 63 68 6e 6f 6c 6f 67 79 20 74 68 61 74 20 61 74 74 65 6d 70 74 73 20 74 6f 20 61 | on.technology.that.attempts.to.a |
acc20 | 64 64 72 65 73 73 20 74 68 65 20 73 63 61 6c 61 62 69 6c 69 74 79 20 70 72 6f 62 6c 65 6d 73 20 | ddress.the.scalability.problems. |
acc40 | 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 6c 61 72 67 65 20 63 6c 6f 75 64 20 63 6f 6d 70 | associated.with.large.cloud.comp |
acc60 | 75 74 69 6e 67 20 64 65 70 6c 6f 79 6d 65 6e 74 73 2e 20 49 74 20 75 73 65 73 20 61 20 56 4c 41 | uting.deployments..It.uses.a.VLA |
acc80 | 4e 2d 6c 69 6b 65 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 74 65 63 68 6e 69 71 75 65 20 74 | N-like.encapsulation.technique.t |
acca0 | 6f 20 65 6e 63 61 70 73 75 6c 61 74 65 20 4f 53 49 20 6c 61 79 65 72 20 32 20 45 74 68 65 72 6e | o.encapsulate.OSI.layer.2.Ethern |
accc0 | 65 74 20 66 72 61 6d 65 73 20 77 69 74 68 69 6e 20 6c 61 79 65 72 20 34 20 55 44 50 20 64 61 74 | et.frames.within.layer.4.UDP.dat |
acce0 | 61 67 72 61 6d 73 2c 20 75 73 69 6e 67 20 34 37 38 39 20 61 73 20 74 68 65 20 64 65 66 61 75 6c | agrams,.using.4789.as.the.defaul |
acd00 | 74 20 49 41 4e 41 2d 61 73 73 69 67 6e 65 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 55 44 50 20 | t.IANA-assigned.destination.UDP. |
acd20 | 70 6f 72 74 20 6e 75 6d 62 65 72 2e 20 56 58 4c 41 4e 20 65 6e 64 70 6f 69 6e 74 73 2c 20 77 68 | port.number..VXLAN.endpoints,.wh |
acd40 | 69 63 68 20 74 65 72 6d 69 6e 61 74 65 20 56 58 4c 41 4e 20 74 75 6e 6e 65 6c 73 20 61 6e 64 20 | ich.terminate.VXLAN.tunnels.and. |
acd60 | 6d 61 79 20 62 65 20 65 69 74 68 65 72 20 76 69 72 74 75 61 6c 20 6f 72 20 70 68 79 73 69 63 61 | may.be.either.virtual.or.physica |
acd80 | 6c 20 73 77 69 74 63 68 20 70 6f 72 74 73 2c 20 61 72 65 20 6b 6e 6f 77 6e 20 61 73 20 3a 61 62 | l.switch.ports,.are.known.as.:ab |
acda0 | 62 72 3a 60 56 54 45 50 73 20 28 56 58 4c 41 4e 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 | br:`VTEPs.(VXLAN.tunnel.endpoint |
acdc0 | 73 29 60 2e 00 3a 61 62 62 72 3a 60 57 41 50 20 28 57 69 72 65 6c 65 73 73 20 41 63 63 65 73 73 | s)`..:abbr:`WAP.(Wireless.Access |
acde0 | 2d 50 6f 69 6e 74 29 60 20 70 72 6f 76 69 64 65 73 20 6e 65 74 77 6f 72 6b 20 61 63 63 65 73 73 | -Point)`.provides.network.access |
ace00 | 20 74 6f 20 63 6f 6e 6e 65 63 74 69 6e 67 20 73 74 61 74 69 6f 6e 73 20 69 66 20 74 68 65 20 70 | .to.connecting.stations.if.the.p |
ace20 | 68 79 73 69 63 61 6c 20 68 61 72 64 77 61 72 65 20 73 75 70 70 6f 72 74 73 20 61 63 74 69 6e 67 | hysical.hardware.supports.acting |
ace40 | 20 61 73 20 61 20 57 41 50 00 3a 61 62 62 72 3a 60 57 4c 41 4e 20 28 57 69 72 65 6c 65 73 73 20 | .as.a.WAP.:abbr:`WLAN.(Wireless. |
ace60 | 4c 41 4e 29 60 20 69 6e 74 65 72 66 61 63 65 20 70 72 6f 76 69 64 65 20 38 30 32 2e 31 31 20 28 | LAN)`.interface.provide.802.11.( |
ace80 | 61 2f 62 2f 67 2f 6e 2f 61 63 29 20 77 69 72 65 6c 65 73 73 20 73 75 70 70 6f 72 74 20 28 63 6f | a/b/g/n/ac).wireless.support.(co |
acea0 | 6d 6d 6f 6e 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 57 69 2d 46 69 29 20 62 79 20 | mmonly.referred.to.as.Wi-Fi).by. |
acec0 | 6d 65 61 6e 73 20 6f 66 20 63 6f 6d 70 61 74 69 62 6c 65 20 68 61 72 64 77 61 72 65 2e 20 49 66 | means.of.compatible.hardware..If |
acee0 | 20 79 6f 75 72 20 68 61 72 64 77 61 72 65 20 73 75 70 70 6f 72 74 73 20 69 74 2c 20 56 79 4f 53 | .your.hardware.supports.it,.VyOS |
acf00 | 20 73 75 70 70 6f 72 74 73 20 6d 75 6c 74 69 70 6c 65 20 6c 6f 67 69 63 61 6c 20 77 69 72 65 6c | .supports.multiple.logical.wirel |
acf20 | 65 73 73 20 69 6e 74 65 72 66 61 63 65 73 20 70 65 72 20 70 68 79 73 69 63 61 6c 20 64 65 76 69 | ess.interfaces.per.physical.devi |
acf40 | 63 65 2e 00 3a 61 62 62 72 3a 60 57 50 41 20 28 57 69 2d 46 69 20 50 72 6f 74 65 63 74 65 64 20 | ce..:abbr:`WPA.(Wi-Fi.Protected. |
acf60 | 41 63 63 65 73 73 29 60 20 61 6e 64 20 57 50 41 32 20 45 6e 74 65 72 70 72 69 73 65 20 69 6e 20 | Access)`.and.WPA2.Enterprise.in. |
acf80 | 63 6f 6d 62 69 6e 61 74 69 6f 6e 20 77 69 74 68 20 38 30 32 2e 31 78 20 62 61 73 65 64 20 61 75 | combination.with.802.1x.based.au |
acfa0 | 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 61 75 74 68 | thentication.can.be.used.to.auth |
acfc0 | 65 6e 74 69 63 61 74 65 20 75 73 65 72 73 20 6f 72 20 63 6f 6d 70 75 74 65 72 73 20 69 6e 20 61 | enticate.users.or.computers.in.a |
acfe0 | 20 64 6f 6d 61 69 6e 2e 00 3a 61 62 62 72 3a 60 6d 47 52 45 20 28 4d 75 6c 74 69 70 6f 69 6e 74 | .domain..:abbr:`mGRE.(Multipoint |
ad000 | 20 47 65 6e 65 72 69 63 20 52 6f 75 74 69 6e 67 20 45 6e 63 61 70 73 75 6c 61 74 69 6f 6e 29 60 | .Generic.Routing.Encapsulation)` |
ad020 | 20 3a 72 66 63 3a 60 31 37 30 32 60 00 3a 63 66 67 63 6d 64 3a 60 61 64 76 2d 72 6f 75 74 65 72 | .:rfc:`1702`.:cfgcmd:`adv-router |
ad040 | 20 3c 41 2e 42 2e 43 2e 44 3e 60 20 e2 80 93 20 72 6f 75 74 65 72 20 69 64 2c 20 77 68 69 63 68 | .<A.B.C.D>`.....router.id,.which |
ad060 | 20 6c 69 6e 6b 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 20 6e 65 65 64 20 74 6f 20 62 65 20 | .link.advertisements.need.to.be. |
ad080 | 72 65 76 69 65 77 65 64 2e 00 3a 63 66 67 63 6d 64 3a 60 73 65 6c 66 2d 6f 72 69 67 69 6e 61 74 | reviewed..:cfgcmd:`self-originat |
ad0a0 | 65 60 20 64 69 73 70 6c 61 79 73 20 6f 6e 6c 79 20 73 65 6c 66 2d 6f 72 69 67 69 6e 61 74 65 64 | e`.displays.only.self-originated |
ad0c0 | 20 4c 53 41 73 20 66 72 6f 6d 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2e 00 3a 63 66 | .LSAs.from.the.local.router..:cf |
ad0e0 | 67 63 6d 64 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 | gcmd:`set.service.conntrack-sync |
ad100 | 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 30 20 70 65 65 72 20 31 39 32 2e 31 36 38 2e 30 2e 32 | .interface.eth0.peer.192.168.0.2 |
ad120 | 35 30 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 | 50`.:code:`set.service.webproxy. |
ad140 | 75 72 6c 2d 66 69 6c 74 65 72 69 6e 67 20 73 71 75 69 64 67 75 61 72 64 20 61 75 74 6f 2d 75 70 | url-filtering.squidguard.auto-up |
ad160 | 64 61 74 65 20 75 70 64 61 74 65 2d 68 6f 75 72 20 32 33 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 | date.update-hour.23`.:code:`set. |
ad180 | 73 65 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 75 72 6c 2d 66 69 6c 74 65 72 69 6e 67 20 73 | service.webproxy.url-filtering.s |
ad1a0 | 71 75 69 64 67 75 61 72 64 20 62 6c 6f 63 6b 2d 63 61 74 65 67 6f 72 79 20 61 64 73 60 00 3a 63 | quidguard.block-category.ads`.:c |
ad1c0 | 6f 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 75 72 6c 2d 66 69 | ode:`set.service.webproxy.url-fi |
ad1e0 | 6c 74 65 72 69 6e 67 20 73 71 75 69 64 67 75 61 72 64 20 62 6c 6f 63 6b 2d 63 61 74 65 67 6f 72 | ltering.squidguard.block-categor |
ad200 | 79 20 6d 61 6c 77 61 72 65 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 | y.malware`.:code:`set.service.we |
ad220 | 62 70 72 6f 78 79 20 77 68 69 74 65 6c 69 73 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 2d 61 64 64 | bproxy.whitelist.destination-add |
ad240 | 72 65 73 73 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 | ress.192.0.2.0/24`.:code:`set.se |
ad260 | 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 77 68 69 74 65 6c 69 73 74 20 64 65 73 74 69 6e 61 | rvice.webproxy.whitelist.destina |
ad280 | 74 69 6f 6e 2d 61 64 64 72 65 73 73 20 31 39 38 2e 35 31 2e 31 30 30 2e 33 33 60 00 3a 63 6f 64 | tion-address.198.51.100.33`.:cod |
ad2a0 | 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 77 68 69 74 65 6c 69 73 | e:`set.service.webproxy.whitelis |
ad2c0 | 74 20 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 20 31 39 32 2e 31 36 38 2e 31 2e 32 60 00 3a 63 | t.source-address.192.168.1.2`.:c |
ad2e0 | 6f 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 77 68 69 74 65 6c | ode:`set.service.webproxy.whitel |
ad300 | 69 73 74 20 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 20 31 39 32 2e 31 36 38 2e 32 2e 30 2f 32 | ist.source-address.192.168.2.0/2 |
ad320 | 34 60 00 3a 6c 61 73 74 70 72 6f 6f 66 72 65 61 64 3a 32 30 32 31 2d 30 37 2d 31 32 00 3a 6f 70 | 4`.:lastproofread:2021-07-12.:op |
ad340 | 63 6d 64 3a 60 67 65 6e 65 72 61 74 65 20 70 6b 69 20 77 69 72 65 67 75 61 72 64 20 6b 65 79 2d | cmd:`generate.pki.wireguard.key- |
ad360 | 70 61 69 72 60 2e 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 62 67 70 60 00 3a 72 65 66 3a 60 | pair`..:ref:`routing-bgp`.:ref:` |
ad380 | 72 6f 75 74 69 6e 67 2d 62 67 70 60 3a 20 60 60 73 65 74 20 76 72 66 20 6e 61 6d 65 20 3c 6e 61 | routing-bgp`:.``set.vrf.name.<na |
ad3a0 | 6d 65 3e 20 70 72 6f 74 6f 63 6f 6c 73 20 62 67 70 20 2e 2e 2e 60 60 00 3a 72 65 66 3a 60 72 6f | me>.protocols.bgp....``.:ref:`ro |
ad3c0 | 75 74 69 6e 67 2d 69 73 69 73 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 69 73 69 73 60 3a | uting-isis`.:ref:`routing-isis`: |
ad3e0 | 20 60 60 73 65 74 20 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 70 72 6f 74 6f 63 6f 6c 73 | .``set.vrf.name.<name>.protocols |
ad400 | 20 69 73 69 73 20 2e 2e 2e 60 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 6f 73 70 66 60 00 | .isis....``.:ref:`routing-ospf`. |
ad420 | 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 6f 73 70 66 60 3a 20 60 60 73 65 74 20 76 72 66 20 6e | :ref:`routing-ospf`:.``set.vrf.n |
ad440 | 61 6d 65 20 3c 6e 61 6d 65 3e 20 70 72 6f 74 6f 63 6f 6c 73 20 6f 73 70 66 20 2e 2e 2e 60 60 00 | ame.<name>.protocols.ospf....``. |
ad460 | 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 6f 73 70 66 76 33 60 00 3a 72 65 66 3a 60 72 6f 75 74 | :ref:`routing-ospfv3`.:ref:`rout |
ad480 | 69 6e 67 2d 6f 73 70 66 76 33 60 3a 20 60 60 73 65 74 20 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d | ing-ospfv3`:.``set.vrf.name.<nam |
ad4a0 | 65 3e 20 70 72 6f 74 6f 63 6f 6c 73 20 6f 73 70 66 76 33 20 2e 2e 2e 60 60 00 3a 72 65 66 3a 60 | e>.protocols.ospfv3....``.:ref:` |
ad4c0 | 72 6f 75 74 69 6e 67 2d 73 74 61 74 69 63 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 73 74 | routing-static`.:ref:`routing-st |
ad4e0 | 61 74 69 63 60 3a 20 60 60 73 65 74 20 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 70 72 6f | atic`:.``set.vrf.name.<name>.pro |
ad500 | 74 6f 63 6f 6c 73 20 73 74 61 74 69 63 20 2e 2e 2e 60 60 00 3a 72 66 63 3a 60 32 31 33 31 60 20 | tocols.static....``.:rfc:`2131`. |
ad520 | 73 74 61 74 65 73 3a 20 54 68 65 20 63 6c 69 65 6e 74 20 4d 41 59 20 63 68 6f 6f 73 65 20 74 6f | states:.The.client.MAY.choose.to |
ad540 | 20 65 78 70 6c 69 63 69 74 6c 79 20 70 72 6f 76 69 64 65 20 74 68 65 20 69 64 65 6e 74 69 66 69 | .explicitly.provide.the.identifi |
ad560 | 65 72 20 74 68 72 6f 75 67 68 20 74 68 65 20 27 63 6c 69 65 6e 74 20 69 64 65 6e 74 69 66 69 65 | er.through.the.'client.identifie |
ad580 | 72 27 20 6f 70 74 69 6f 6e 2e 20 49 66 20 74 68 65 20 63 6c 69 65 6e 74 20 73 75 70 70 6c 69 65 | r'.option..If.the.client.supplie |
ad5a0 | 73 20 61 20 27 63 6c 69 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 27 2c 20 74 68 65 20 63 6c 69 | s.a.'client.identifier',.the.cli |
ad5c0 | 65 6e 74 20 4d 55 53 54 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 27 63 6c 69 65 6e 74 20 69 64 | ent.MUST.use.the.same.'client.id |
ad5e0 | 65 6e 74 69 66 69 65 72 27 20 69 6e 20 61 6c 6c 20 73 75 62 73 65 71 75 65 6e 74 20 6d 65 73 73 | entifier'.in.all.subsequent.mess |
ad600 | 61 67 65 73 2c 20 61 6e 64 20 74 68 65 20 73 65 72 76 65 72 20 4d 55 53 54 20 75 73 65 20 74 68 | ages,.and.the.server.MUST.use.th |
ad620 | 61 74 20 69 64 65 6e 74 69 66 69 65 72 20 74 6f 20 69 64 65 6e 74 69 66 79 20 74 68 65 20 63 6c | at.identifier.to.identify.the.cl |
ad640 | 69 65 6e 74 2e 00 3a 72 66 63 3a 60 32 31 33 36 60 20 42 61 73 65 64 00 3a 72 66 63 3a 60 32 33 | ient..:rfc:`2136`.Based.:rfc:`23 |
ad660 | 32 38 60 2c 20 74 68 65 20 73 75 63 63 65 73 73 6f 72 20 74 6f 20 3a 72 66 63 3a 60 31 35 38 33 | 28`,.the.successor.to.:rfc:`1583 |
ad680 | 60 2c 20 73 75 67 67 65 73 74 73 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 73 65 63 74 69 6f 6e | `,.suggests.according.to.section |
ad6a0 | 20 47 2e 32 20 28 63 68 61 6e 67 65 73 29 20 69 6e 20 73 65 63 74 69 6f 6e 20 31 36 2e 34 2e 31 | .G.2.(changes).in.section.16.4.1 |
ad6c0 | 20 61 20 63 68 61 6e 67 65 20 74 6f 20 74 68 65 20 70 61 74 68 20 70 72 65 66 65 72 65 6e 63 65 | .a.change.to.the.path.preference |
ad6e0 | 20 61 6c 67 6f 72 69 74 68 6d 20 74 68 61 74 20 70 72 65 76 65 6e 74 73 20 70 6f 73 73 69 62 6c | .algorithm.that.prevents.possibl |
ad700 | 65 20 72 6f 75 74 69 6e 67 20 6c 6f 6f 70 73 20 74 68 61 74 20 77 65 72 65 20 70 6f 73 73 69 62 | e.routing.loops.that.were.possib |
ad720 | 6c 65 20 69 6e 20 74 68 65 20 6f 6c 64 20 76 65 72 73 69 6f 6e 20 6f 66 20 4f 53 50 46 76 32 2e | le.in.the.old.version.of.OSPFv2. |
ad740 | 20 4d 6f 72 65 20 73 70 65 63 69 66 69 63 61 6c 6c 79 20 69 74 20 64 65 6d 61 6e 64 73 20 74 68 | .More.specifically.it.demands.th |
ad760 | 61 74 20 69 6e 74 65 72 2d 61 72 65 61 20 70 61 74 68 73 20 61 6e 64 20 69 6e 74 72 61 2d 61 72 | at.inter-area.paths.and.intra-ar |
ad780 | 65 61 20 62 61 63 6b 62 6f 6e 65 20 70 61 74 68 20 61 72 65 20 6e 6f 77 20 6f 66 20 65 71 75 61 | ea.backbone.path.are.now.of.equa |
ad7a0 | 6c 20 70 72 65 66 65 72 65 6e 63 65 20 62 75 74 20 73 74 69 6c 6c 20 62 6f 74 68 20 70 72 65 66 | l.preference.but.still.both.pref |
ad7c0 | 65 72 72 65 64 20 74 6f 20 65 78 74 65 72 6e 61 6c 20 70 61 74 68 73 2e 00 3a 76 79 74 61 73 6b | erred.to.external.paths..:vytask |
ad7e0 | 3a 60 54 33 36 34 32 60 20 64 65 73 63 72 69 62 65 73 20 61 20 6e 65 77 20 43 4c 49 20 73 75 62 | :`T3642`.describes.a.new.CLI.sub |
ad800 | 73 79 73 74 65 6d 20 74 68 61 74 20 73 65 72 76 65 73 20 61 73 20 61 20 22 63 65 72 74 73 74 6f | system.that.serves.as.a."certsto |
ad820 | 72 65 22 20 74 6f 20 61 6c 6c 20 73 65 72 76 69 63 65 73 20 72 65 71 75 69 72 69 6e 67 20 61 6e | re".to.all.services.requiring.an |
ad840 | 79 20 6b 69 6e 64 20 6f 66 20 65 6e 63 72 79 70 74 69 6f 6e 20 6b 65 79 28 73 29 2e 20 49 6e 20 | y.kind.of.encryption.key(s)..In. |
ad860 | 73 68 6f 72 74 2c 20 70 75 62 6c 69 63 20 61 6e 64 20 70 72 69 76 61 74 65 20 63 65 72 74 69 66 | short,.public.and.private.certif |
ad880 | 69 63 61 74 65 73 20 61 72 65 20 6e 6f 77 20 73 74 6f 72 65 64 20 69 6e 20 50 4b 43 53 23 38 20 | icates.are.now.stored.in.PKCS#8. |
ad8a0 | 66 6f 72 6d 61 74 20 69 6e 20 74 68 65 20 72 65 67 75 6c 61 72 20 56 79 4f 53 20 43 4c 49 2e 20 | format.in.the.regular.VyOS.CLI.. |
ad8c0 | 4b 65 79 73 20 63 61 6e 20 6e 6f 77 20 62 65 20 61 64 64 65 64 2c 20 65 64 69 74 65 64 2c 20 61 | Keys.can.now.be.added,.edited,.a |
ad8e0 | 6e 64 20 64 65 6c 65 74 65 64 20 75 73 69 6e 67 20 74 68 65 20 72 65 67 75 6c 61 72 20 73 65 74 | nd.deleted.using.the.regular.set |
ad900 | 2f 65 64 69 74 2f 64 65 6c 65 74 65 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 73 2e 00 3c 31 2d 36 35 | /edit/delete.CLI.commands..<1-65 |
ad920 | 35 33 35 3e 3a 20 4e 75 6d 62 65 72 65 64 20 70 6f 72 74 2e 00 3c 61 61 3a 6e 6e 3a 6e 6e 3e 3a | 535>:.Numbered.port..<aa:nn:nn>: |
ad940 | 20 45 78 74 65 6e 64 65 64 20 63 6f 6d 6d 75 6e 69 74 79 20 6c 69 73 74 20 72 65 67 75 6c 61 72 | .Extended.community.list.regular |
ad960 | 20 65 78 70 72 65 73 73 69 6f 6e 2e 00 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 2f 78 3e | .expression..<h:h:h:h:h:h:h:h/x> |
ad980 | 3a 20 49 50 76 36 20 70 72 65 66 69 78 20 74 6f 20 6d 61 74 63 68 2e 00 3c 68 3a 68 3a 68 3a 68 | :.IPv6.prefix.to.match..<h:h:h:h |
ad9a0 | 3a 68 3a 68 3a 68 3a 68 3e 2d 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 3a 20 49 50 76 | :h:h:h:h>-<h:h:h:h:h:h:h:h>:.IPv |
ad9c0 | 36 20 72 61 6e 67 65 20 74 6f 20 6d 61 74 63 68 2e 00 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 | 6.range.to.match..<h:h:h:h:h:h:h |
ad9e0 | 3a 68 3e 3a 20 49 50 76 36 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 3c 6c 69 6e | :h>:.IPv6.address.to.match..<lin |
ada00 | 65 73 3e 00 3c 6e 75 6d 62 65 72 3e 20 6d 75 73 74 20 62 65 20 66 72 6f 6d 20 33 34 20 2d 20 31 | es>.<number>.must.be.from.34.-.1 |
ada20 | 37 33 2e 20 46 6f 72 20 38 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 73 20 69 74 20 73 68 6f 75 6c | 73..For.80.MHz.channels.it.shoul |
ada40 | 64 20 62 65 20 63 68 61 6e 6e 65 6c 20 2b 20 36 2e 00 3c 6e 75 6d 62 65 72 3e 20 e2 80 93 20 61 | d.be.channel.+.6..<number>.....a |
ada60 | 72 65 61 20 69 64 65 6e 74 69 66 69 65 72 20 74 68 72 6f 75 67 68 20 77 68 69 63 68 20 61 20 76 | rea.identifier.through.which.a.v |
ada80 | 69 72 74 75 61 6c 20 6c 69 6e 6b 20 67 6f 65 73 2e 20 3c 41 2e 42 2e 43 2e 44 3e 20 e2 80 93 20 | irtual.link.goes..<A.B.C.D>..... |
adaa0 | 41 42 52 20 72 6f 75 74 65 72 2d 69 64 20 77 69 74 68 20 77 68 69 63 68 20 61 20 76 69 72 74 75 | ABR.router-id.with.which.a.virtu |
adac0 | 61 6c 20 6c 69 6e 6b 20 69 73 20 65 73 74 61 62 6c 69 73 68 65 64 2e 20 56 69 72 74 75 61 6c 20 | al.link.is.established..Virtual. |
adae0 | 6c 69 6e 6b 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 62 6f 74 68 20 | link.must.be.configured.on.both. |
adb00 | 72 6f 75 74 65 72 73 2e 00 3c 70 6f 72 74 20 6e 61 6d 65 3e 3a 20 4e 61 6d 65 64 20 70 6f 72 74 | routers..<port.name>:.Named.port |
adb20 | 20 28 61 6e 79 20 6e 61 6d 65 20 69 6e 20 2f 65 74 63 2f 73 65 72 76 69 63 65 73 2c 20 65 2e 67 | .(any.name.in./etc/services,.e.g |
adb40 | 2e 2c 20 68 74 74 70 29 2e 00 3c 72 74 20 61 61 3a 6e 6e 3a 6e 6e 3e 3a 20 52 6f 75 74 65 20 54 | .,.http)..<rt.aa:nn:nn>:.Route.T |
adb60 | 61 72 67 65 74 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 2e 00 3c 73 6f 6f 20 61 | arget.regular.expression..<soo.a |
adb80 | 61 3a 6e 6e 3a 6e 6e 3e 3a 20 53 69 74 65 20 6f 66 20 4f 72 69 67 69 6e 20 72 65 67 75 6c 61 72 | a:nn:nn>:.Site.of.Origin.regular |
adba0 | 20 65 78 70 72 65 73 73 69 6f 6e 2e 00 3c 73 74 61 72 74 3e 2d 3c 65 6e 64 3e 3a 20 4e 75 6d 62 | .expression..<start>-<end>:.Numb |
adbc0 | 65 72 65 64 20 70 6f 72 74 20 72 61 6e 67 65 20 28 65 2e 67 2e 2c 20 31 30 30 31 2d 31 30 30 35 | ered.port.range.(e.g.,.1001-1005 |
adbe0 | 29 2e 00 3c 78 2e 78 2e 78 2e 78 2f 78 3e 3a 20 53 75 62 6e 65 74 20 74 6f 20 6d 61 74 63 68 2e | )..<x.x.x.x/x>:.Subnet.to.match. |
adc00 | 00 3c 78 2e 78 2e 78 2e 78 3e 2d 3c 78 2e 78 2e 78 2e 78 3e 3a 20 49 50 20 72 61 6e 67 65 20 74 | .<x.x.x.x>-<x.x.x.x>:.IP.range.t |
adc20 | 6f 20 6d 61 74 63 68 2e 00 3c 78 2e 78 2e 78 2e 78 3e 3a 20 49 50 20 61 64 64 72 65 73 73 20 74 | o.match..<x.x.x.x>:.IP.address.t |
adc40 | 6f 20 6d 61 74 63 68 2e 00 41 20 2a 2a 64 6f 6d 61 69 6e 20 67 72 6f 75 70 2a 2a 20 72 65 70 72 | o.match..A.**domain.group**.repr |
adc60 | 65 73 65 6e 74 73 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 64 6f 6d 61 69 6e 73 2e 00 | esents.a.collection.of.domains.. |
adc80 | 41 20 2a 2a 6d 61 63 20 67 72 6f 75 70 2a 2a 20 72 65 70 72 65 73 65 6e 74 73 20 61 20 63 6f 6c | A.**mac.group**.represents.a.col |
adca0 | 6c 65 63 74 69 6f 6e 20 6f 66 20 6d 61 63 20 61 64 64 72 65 73 73 65 73 2e 00 41 20 2a 2a 70 6f | lection.of.mac.addresses..A.**po |
adcc0 | 72 74 20 67 72 6f 75 70 2a 2a 20 72 65 70 72 65 73 65 6e 74 73 20 6f 6e 6c 79 20 70 6f 72 74 20 | rt.group**.represents.only.port. |
adce0 | 6e 75 6d 62 65 72 73 2c 20 6e 6f 74 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 2e 20 50 6f 72 74 20 | numbers,.not.the.protocol..Port. |
add00 | 67 72 6f 75 70 73 20 63 61 6e 20 62 65 20 72 65 66 65 72 65 6e 63 65 64 20 66 6f 72 20 65 69 74 | groups.can.be.referenced.for.eit |
add20 | 68 65 72 20 54 43 50 20 6f 72 20 55 44 50 2e 20 49 74 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 | her.TCP.or.UDP..It.is.recommende |
add40 | 64 20 74 68 61 74 20 54 43 50 20 61 6e 64 20 55 44 50 20 67 72 6f 75 70 73 20 61 72 65 20 63 72 | d.that.TCP.and.UDP.groups.are.cr |
add60 | 65 61 74 65 64 20 73 65 70 61 72 61 74 65 6c 79 20 74 6f 20 61 76 6f 69 64 20 61 63 63 69 64 65 | eated.separately.to.avoid.accide |
add80 | 6e 74 61 6c 6c 79 20 66 69 6c 74 65 72 69 6e 67 20 75 6e 6e 65 63 65 73 73 61 72 79 20 70 6f 72 | ntally.filtering.unnecessary.por |
adda0 | 74 73 2e 20 52 61 6e 67 65 73 20 6f 66 20 70 6f 72 74 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 | ts..Ranges.of.ports.can.be.speci |
addc0 | 66 69 65 64 20 62 79 20 75 73 69 6e 67 20 60 2d 60 2e 00 41 20 2a 62 69 74 2a 20 69 73 20 77 72 | fied.by.using.`-`..A.*bit*.is.wr |
adde0 | 69 74 74 65 6e 20 61 73 20 2a 2a 62 69 74 2a 2a 2c 00 41 20 3a 61 62 62 72 3a 60 4e 49 53 20 28 | itten.as.**bit**,.A.:abbr:`NIS.( |
ade00 | 4e 65 74 77 6f 72 6b 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 53 65 72 76 69 63 65 29 60 20 64 6f | Network.Information.Service)`.do |
ade20 | 6d 61 69 6e 20 63 61 6e 20 62 65 20 73 65 74 20 74 6f 20 62 65 20 75 73 65 64 20 66 6f 72 20 44 | main.can.be.set.to.be.used.for.D |
ade40 | 48 43 50 76 36 20 63 6c 69 65 6e 74 73 2e 00 41 20 42 47 50 20 63 6f 6e 66 65 64 65 72 61 74 69 | HCPv6.clients..A.BGP.confederati |
ade60 | 6f 6e 20 64 69 76 69 64 65 73 20 6f 75 72 20 41 53 20 69 6e 74 6f 20 73 75 62 2d 41 53 65 73 20 | on.divides.our.AS.into.sub-ASes. |
ade80 | 74 6f 20 72 65 64 75 63 65 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 72 65 71 75 69 72 65 64 | to.reduce.the.number.of.required |
adea0 | 20 49 42 47 50 20 70 65 65 72 69 6e 67 73 2e 20 57 69 74 68 69 6e 20 61 20 73 75 62 2d 41 53 20 | .IBGP.peerings..Within.a.sub-AS. |
adec0 | 77 65 20 73 74 69 6c 6c 20 72 65 71 75 69 72 65 20 66 75 6c 6c 2d 6d 65 73 68 20 49 42 47 50 20 | we.still.require.full-mesh.IBGP. |
adee0 | 62 75 74 20 62 65 74 77 65 65 6e 20 74 68 65 73 65 20 73 75 62 2d 41 53 65 73 20 77 65 20 75 73 | but.between.these.sub-ASes.we.us |
adf00 | 65 20 73 6f 6d 65 74 68 69 6e 67 20 74 68 61 74 20 6c 6f 6f 6b 73 20 6c 69 6b 65 20 45 42 47 50 | e.something.that.looks.like.EBGP |
adf20 | 20 62 75 74 20 62 65 68 61 76 65 73 20 6c 69 6b 65 20 49 42 47 50 20 28 63 61 6c 6c 65 64 20 63 | .but.behaves.like.IBGP.(called.c |
adf40 | 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 42 47 50 29 2e 20 43 6f 6e 66 65 64 65 72 61 74 69 6f 6e | onfederation.BGP)..Confederation |
adf60 | 20 6d 65 63 68 61 6e 69 73 6d 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a | .mechanism.is.described.in.:rfc: |
adf80 | 60 35 30 36 35 60 00 41 20 42 47 50 2d 73 70 65 61 6b 69 6e 67 20 72 6f 75 74 65 72 20 6c 69 6b | `5065`.A.BGP-speaking.router.lik |
adfa0 | 65 20 56 79 4f 53 20 63 61 6e 20 72 65 74 72 69 65 76 65 20 52 4f 41 20 69 6e 66 6f 72 6d 61 74 | e.VyOS.can.retrieve.ROA.informat |
adfc0 | 69 6f 6e 20 66 72 6f 6d 20 52 50 4b 49 20 22 52 65 6c 79 69 6e 67 20 50 61 72 74 79 20 73 6f 66 | ion.from.RPKI."Relying.Party.sof |
adfe0 | 74 77 61 72 65 22 20 28 6f 66 74 65 6e 20 6a 75 73 74 20 63 61 6c 6c 65 64 20 61 6e 20 22 52 50 | tware".(often.just.called.an."RP |
ae000 | 4b 49 20 73 65 72 76 65 72 22 20 6f 72 20 22 52 50 4b 49 20 76 61 6c 69 64 61 74 6f 72 22 29 20 | KI.server".or."RPKI.validator"). |
ae020 | 62 79 20 75 73 69 6e 67 20 3a 61 62 62 72 3a 60 52 54 52 20 28 52 50 4b 49 20 74 6f 20 52 6f 75 | by.using.:abbr:`RTR.(RPKI.to.Rou |
ae040 | 74 65 72 29 60 20 70 72 6f 74 6f 63 6f 6c 2e 20 54 68 65 72 65 20 61 72 65 20 73 65 76 65 72 61 | ter)`.protocol..There.are.severa |
ae060 | 6c 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 74 6f | l.open.source.implementations.to |
ae080 | 20 63 68 6f 6f 73 65 20 66 72 6f 6d 2c 20 73 75 63 68 20 61 73 20 4e 4c 4e 65 74 4c 61 62 73 27 | .choose.from,.such.as.NLNetLabs' |
ae0a0 | 20 52 6f 75 74 69 6e 61 74 6f 72 5f 20 28 77 72 69 74 74 65 6e 20 69 6e 20 52 75 73 74 29 2c 20 | .Routinator_.(written.in.Rust),. |
ae0c0 | 43 6c 6f 75 64 66 6c 61 72 65 27 73 20 47 6f 52 54 52 5f 20 61 6e 64 20 4f 63 74 6f 52 50 4b 49 | Cloudflare's.GoRTR_.and.OctoRPKI |
ae0e0 | 5f 20 28 77 72 69 74 74 65 6e 20 69 6e 20 47 6f 29 2c 20 61 6e 64 20 52 49 50 45 20 4e 43 43 27 | _.(written.in.Go),.and.RIPE.NCC' |
ae100 | 73 20 52 50 4b 49 20 56 61 6c 69 64 61 74 6f 72 5f 20 28 77 72 69 74 74 65 6e 20 69 6e 20 4a 61 | s.RPKI.Validator_.(written.in.Ja |
ae120 | 76 61 29 2e 20 54 68 65 20 52 54 52 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 64 65 73 63 72 69 62 | va)..The.RTR.protocol.is.describ |
ae140 | 65 64 20 69 6e 20 3a 72 66 63 3a 60 38 32 31 30 60 2e 00 41 20 42 72 69 64 67 65 20 69 73 20 61 | ed.in.:rfc:`8210`..A.Bridge.is.a |
ae160 | 20 77 61 79 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 77 6f 20 45 74 68 65 72 6e 65 74 20 73 65 67 | .way.to.connect.two.Ethernet.seg |
ae180 | 6d 65 6e 74 73 20 74 6f 67 65 74 68 65 72 20 69 6e 20 61 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 64 | ments.together.in.a.protocol.ind |
ae1a0 | 65 70 65 6e 64 65 6e 74 20 77 61 79 2e 20 50 61 63 6b 65 74 73 20 61 72 65 20 66 6f 72 77 61 72 | ependent.way..Packets.are.forwar |
ae1c0 | 64 65 64 20 62 61 73 65 64 20 6f 6e 20 45 74 68 65 72 6e 65 74 20 61 64 64 72 65 73 73 2c 20 72 | ded.based.on.Ethernet.address,.r |
ae1e0 | 61 74 68 65 72 20 74 68 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 28 6c 69 6b 65 20 61 20 72 6f | ather.than.IP.address.(like.a.ro |
ae200 | 75 74 65 72 29 2e 20 53 69 6e 63 65 20 66 6f 72 77 61 72 64 69 6e 67 20 69 73 20 64 6f 6e 65 20 | uter)..Since.forwarding.is.done. |
ae220 | 61 74 20 4c 61 79 65 72 20 32 2c 20 61 6c 6c 20 70 72 6f 74 6f 63 6f 6c 73 20 63 61 6e 20 67 6f | at.Layer.2,.all.protocols.can.go |
ae240 | 20 74 72 61 6e 73 70 61 72 65 6e 74 6c 79 20 74 68 72 6f 75 67 68 20 61 20 62 72 69 64 67 65 2e | .transparently.through.a.bridge. |
ae260 | 20 54 68 65 20 4c 69 6e 75 78 20 62 72 69 64 67 65 20 63 6f 64 65 20 69 6d 70 6c 65 6d 65 6e 74 | .The.Linux.bridge.code.implement |
ae280 | 73 20 61 20 73 75 62 73 65 74 20 6f 66 20 74 68 65 20 41 4e 53 49 2f 49 45 45 45 20 38 30 32 2e | s.a.subset.of.the.ANSI/IEEE.802. |
ae2a0 | 31 64 20 73 74 61 6e 64 61 72 64 2e 00 41 20 47 52 45 20 74 75 6e 6e 65 6c 20 6f 70 65 72 61 74 | 1d.standard..A.GRE.tunnel.operat |
ae2c0 | 65 73 20 61 74 20 6c 61 79 65 72 20 33 20 6f 66 20 74 68 65 20 4f 53 49 20 6d 6f 64 65 6c 20 61 | es.at.layer.3.of.the.OSI.model.a |
ae2e0 | 6e 64 20 69 73 20 72 65 70 72 65 73 65 6e 74 65 64 20 62 79 20 49 50 20 70 72 6f 74 6f 63 6f 6c | nd.is.represented.by.IP.protocol |
ae300 | 20 34 37 2e 20 54 68 65 20 6d 61 69 6e 20 62 65 6e 65 66 69 74 20 6f 66 20 61 20 47 52 45 20 74 | .47..The.main.benefit.of.a.GRE.t |
ae320 | 75 6e 6e 65 6c 20 69 73 20 74 68 61 74 20 79 6f 75 20 61 72 65 20 61 62 6c 65 20 74 6f 20 63 61 | unnel.is.that.you.are.able.to.ca |
ae340 | 72 72 79 20 6d 75 6c 74 69 70 6c 65 20 70 72 6f 74 6f 63 6f 6c 73 20 69 6e 73 69 64 65 20 74 68 | rry.multiple.protocols.inside.th |
ae360 | 65 20 73 61 6d 65 20 74 75 6e 6e 65 6c 2e 20 47 52 45 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 73 | e.same.tunnel..GRE.also.supports |
ae380 | 20 6d 75 6c 74 69 63 61 73 74 20 74 72 61 66 66 69 63 20 61 6e 64 20 73 75 70 70 6f 72 74 73 20 | .multicast.traffic.and.supports. |
ae3a0 | 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 74 68 61 74 20 6c 65 76 65 72 61 67 65 20 | routing.protocols.that.leverage. |
ae3c0 | 6d 75 6c 74 69 63 61 73 74 20 74 6f 20 66 6f 72 6d 20 6e 65 69 67 68 62 6f 72 20 61 64 6a 61 63 | multicast.to.form.neighbor.adjac |
ae3e0 | 65 6e 63 69 65 73 2e 00 41 20 52 75 6c 65 2d 53 65 74 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 | encies..A.Rule-Set.can.be.applie |
ae400 | 64 20 74 6f 20 65 76 65 72 79 20 69 6e 74 65 72 66 61 63 65 3a 00 41 20 53 4e 54 50 20 73 65 72 | d.to.every.interface:.A.SNTP.ser |
ae420 | 76 65 72 20 61 64 64 72 65 73 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 66 6f 72 | ver.address.can.be.specified.for |
ae440 | 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 73 2e 00 41 20 56 52 46 20 64 65 76 69 63 65 20 69 73 | .DHCPv6.clients..A.VRF.device.is |
ae460 | 20 63 72 65 61 74 65 64 20 77 69 74 68 20 61 6e 20 61 73 73 6f 63 69 61 74 65 64 20 72 6f 75 74 | .created.with.an.associated.rout |
ae480 | 65 20 74 61 62 6c 65 2e 20 4e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 | e.table..Network.interfaces.are. |
ae4a0 | 74 68 65 6e 20 65 6e 73 6c 61 76 65 64 20 74 6f 20 61 20 56 52 46 20 64 65 76 69 63 65 2e 00 41 | then.enslaved.to.a.VRF.device..A |
ae4c0 | 20 56 79 4f 53 20 47 52 45 20 74 75 6e 6e 65 6c 20 63 61 6e 20 63 61 72 72 79 20 62 6f 74 68 20 | .VyOS.GRE.tunnel.can.carry.both. |
ae4e0 | 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 74 72 61 66 66 69 63 20 61 6e 64 20 63 61 6e 20 61 6c | IPv4.and.IPv6.traffic.and.can.al |
ae500 | 73 6f 20 62 65 20 63 72 65 61 74 65 64 20 6f 76 65 72 20 65 69 74 68 65 72 20 49 50 76 34 20 28 | so.be.created.over.either.IPv4.( |
ae520 | 67 72 65 29 20 6f 72 20 49 50 76 36 20 28 69 70 36 67 72 65 29 2e 00 41 20 56 79 4f 53 20 72 6f | gre).or.IPv6.(ip6gre)..A.VyOS.ro |
ae540 | 75 74 65 72 20 77 69 74 68 20 74 77 6f 20 69 6e 74 65 72 66 61 63 65 73 20 2d 20 65 74 68 30 20 | uter.with.two.interfaces.-.eth0. |
ae560 | 28 57 41 4e 29 20 61 6e 64 20 65 74 68 31 20 28 4c 41 4e 29 20 2d 20 69 73 20 72 65 71 75 69 72 | (WAN).and.eth1.(LAN).-.is.requir |
ae580 | 65 64 20 74 6f 20 69 6d 70 6c 65 6d 65 6e 74 20 61 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 | ed.to.implement.a.split-horizon. |
ae5a0 | 44 4e 53 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 65 78 61 6d 70 6c 65 2e 63 6f | DNS.configuration.for.example.co |
ae5c0 | 6d 2e 00 41 20 62 61 73 69 63 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 72 65 71 75 69 72 65 | m..A.basic.configuration.require |
ae5e0 | 73 20 61 20 74 75 6e 6e 65 6c 20 73 6f 75 72 63 65 20 28 73 6f 75 72 63 65 2d 61 64 64 72 65 73 | s.a.tunnel.source.(source-addres |
ae600 | 73 29 2c 20 61 20 74 75 6e 6e 65 6c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 28 72 65 6d 6f 74 65 | s),.a.tunnel.destination.(remote |
ae620 | 29 2c 20 61 6e 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 74 79 70 65 20 28 67 72 65 29 2c 20 | ),.an.encapsulation.type.(gre),. |
ae640 | 61 6e 64 20 61 6e 20 61 64 64 72 65 73 73 20 28 69 70 76 34 2f 69 70 76 36 29 2e 20 42 65 6c 6f | and.an.address.(ipv4/ipv6)..Belo |
ae660 | 77 20 69 73 20 61 20 62 61 73 69 63 20 49 50 76 34 20 6f 6e 6c 79 20 63 6f 6e 66 69 67 75 72 61 | w.is.a.basic.IPv4.only.configura |
ae680 | 74 69 6f 6e 20 65 78 61 6d 70 6c 65 20 74 61 6b 65 6e 20 66 72 6f 6d 20 61 20 56 79 4f 53 20 72 | tion.example.taken.from.a.VyOS.r |
ae6a0 | 6f 75 74 65 72 20 61 6e 64 20 61 20 43 69 73 63 6f 20 49 4f 53 20 72 6f 75 74 65 72 2e 20 54 68 | outer.and.a.Cisco.IOS.router..Th |
ae6c0 | 65 20 6d 61 69 6e 20 64 69 66 66 65 72 65 6e 63 65 20 62 65 74 77 65 65 6e 20 74 68 65 73 65 20 | e.main.difference.between.these. |
ae6e0 | 74 77 6f 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 20 69 73 20 74 68 61 74 20 56 79 4f 53 20 | two.configurations.is.that.VyOS. |
ae700 | 72 65 71 75 69 72 65 73 20 79 6f 75 20 65 78 70 6c 69 63 69 74 6c 79 20 63 6f 6e 66 69 67 75 72 | requires.you.explicitly.configur |
ae720 | 65 20 74 68 65 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 74 79 70 65 2e 20 54 68 65 20 43 69 | e.the.encapsulation.type..The.Ci |
ae740 | 73 63 6f 20 72 6f 75 74 65 72 20 64 65 66 61 75 6c 74 73 20 74 6f 20 47 52 45 20 49 50 20 6f 74 | sco.router.defaults.to.GRE.IP.ot |
ae760 | 68 65 72 77 69 73 65 20 69 74 20 77 6f 75 6c 64 20 68 61 76 65 20 74 6f 20 62 65 20 63 6f 6e 66 | herwise.it.would.have.to.be.conf |
ae780 | 69 67 75 72 65 64 20 61 73 20 77 65 6c 6c 2e 00 41 20 62 61 73 69 63 20 69 6e 74 72 6f 64 75 63 | igured.as.well..A.basic.introduc |
ae7a0 | 74 69 6f 6e 20 74 6f 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 73 20 63 61 6e | tion.to.zone-based.firewalls.can |
ae7c0 | 20 62 65 20 66 6f 75 6e 64 20 60 68 65 72 65 20 3c 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 | .be.found.`here.<https://support |
ae7e0 | 2e 76 79 6f 73 2e 69 6f 2f 65 6e 2f 6b 62 2f 61 72 74 69 63 6c 65 73 2f 61 2d 70 72 69 6d 65 72 | .vyos.io/en/kb/articles/a-primer |
ae800 | 2d 74 6f 2d 7a 6f 6e 65 2d 62 61 73 65 64 2d 66 69 72 65 77 61 6c 6c 3e 60 5f 2c 20 61 6e 64 20 | -to-zone-based-firewall>`_,.and. |
ae820 | 61 6e 20 65 78 61 6d 70 6c 65 20 61 74 20 3a 72 65 66 3a 60 65 78 61 6d 70 6c 65 73 2d 7a 6f 6e | an.example.at.:ref:`examples-zon |
ae840 | 65 2d 70 6f 6c 69 63 79 60 2e 00 41 20 62 72 69 64 67 65 20 6e 61 6d 65 64 20 60 62 72 31 30 30 | e-policy`..A.bridge.named.`br100 |
ae860 | 60 00 41 20 62 72 69 65 66 20 64 65 73 63 72 69 70 74 69 6f 6e 20 77 68 61 74 20 74 68 69 73 20 | `.A.brief.description.what.this. |
ae880 | 6e 65 74 77 6f 72 6b 20 69 73 20 61 6c 6c 20 61 62 6f 75 74 2e 00 41 20 63 6c 61 73 73 20 63 61 | network.is.all.about..A.class.ca |
ae8a0 | 6e 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 6d 61 74 63 68 20 66 69 6c 74 65 72 73 3a 00 41 | n.have.multiple.match.filters:.A |
ae8c0 | 20 63 6f 6d 6d 6f 6e 20 65 78 61 6d 70 6c 65 20 69 73 20 74 68 65 20 63 61 73 65 20 6f 66 20 73 | .common.example.is.the.case.of.s |
ae8e0 | 6f 6d 65 20 70 6f 6c 69 63 69 65 73 20 77 68 69 63 68 2c 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 | ome.policies.which,.in.order.to. |
ae900 | 62 65 20 65 66 66 65 63 74 69 76 65 2c 20 74 68 65 79 20 6e 65 65 64 20 74 6f 20 62 65 20 61 70 | be.effective,.they.need.to.be.ap |
ae920 | 70 6c 69 65 64 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 69 73 20 64 69 | plied.to.an.interface.that.is.di |
ae940 | 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 77 68 65 72 65 20 74 68 65 20 62 6f 74 74 6c | rectly.connected.where.the.bottl |
ae960 | 65 6e 65 63 6b 20 69 73 2e 20 49 66 20 79 6f 75 72 20 72 6f 75 74 65 72 20 69 73 20 6e 6f 74 20 | eneck.is..If.your.router.is.not. |
ae980 | 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 62 6f 74 74 6c 65 | directly.connected.to.the.bottle |
ae9a0 | 6e 65 63 6b 2c 20 62 75 74 20 73 6f 6d 65 20 68 6f 70 20 62 65 66 6f 72 65 20 69 74 2c 20 79 6f | neck,.but.some.hop.before.it,.yo |
ae9c0 | 75 20 63 61 6e 20 65 6d 75 6c 61 74 65 20 74 68 65 20 62 6f 74 74 6c 65 6e 65 63 6b 20 62 79 20 | u.can.emulate.the.bottleneck.by. |
ae9e0 | 65 6d 62 65 64 64 69 6e 67 20 79 6f 75 72 20 6e 6f 6e 2d 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 | embedding.your.non-shaping.polic |
aea00 | 79 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 66 75 6c 20 73 68 61 70 69 6e 67 20 6f 6e 65 20 73 6f | y.into.a.classful.shaping.one.so |
aea20 | 20 74 68 61 74 20 69 74 20 74 61 6b 65 73 20 65 66 66 65 63 74 2e 00 41 20 63 6f 6d 70 6c 65 74 | .that.it.takes.effect..A.complet |
aea40 | 65 20 4c 44 41 50 20 61 75 74 68 20 4f 70 65 6e 56 50 4e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | e.LDAP.auth.OpenVPN.configuratio |
aea60 | 6e 20 63 6f 75 6c 64 20 6c 6f 6f 6b 20 6c 69 6b 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 | n.could.look.like.the.following. |
aea80 | 65 78 61 6d 70 6c 65 3a 00 41 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 78 61 6d 70 6c 65 | example:.A.configuration.example |
aeaa0 | 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 20 49 | .can.be.found.in.this.section..I |
aeac0 | 6e 20 74 68 69 73 20 73 69 6d 70 6c 69 66 69 65 64 20 73 63 65 6e 61 72 69 6f 2c 20 6d 61 69 6e | n.this.simplified.scenario,.main |
aeae0 | 20 74 68 69 6e 67 73 20 74 6f 20 62 65 20 63 6f 6e 73 69 64 65 72 65 64 20 61 72 65 3a 00 41 20 | .things.to.be.considered.are:.A. |
aeb00 | 63 6f 6e 6e 65 63 74 69 6f 6e 20 61 74 74 65 6d 70 74 20 77 69 6c 6c 20 62 65 20 73 68 6f 77 6e | connection.attempt.will.be.shown |
aeb20 | 20 61 73 3a 00 41 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 69 73 20 61 75 74 6f 6d 61 74 69 | .as:.A.default.route.is.automati |
aeb40 | 63 61 6c 6c 79 20 69 6e 73 74 61 6c 6c 65 64 20 6f 6e 63 65 20 74 68 65 20 69 6e 74 65 72 66 61 | cally.installed.once.the.interfa |
aeb60 | 63 65 20 69 73 20 75 70 2e 20 54 6f 20 63 68 61 6e 67 65 20 74 68 69 73 20 62 65 68 61 76 69 6f | ce.is.up..To.change.this.behavio |
aeb80 | 72 20 75 73 65 20 74 68 65 20 60 60 6e 6f 2d 64 65 66 61 75 6c 74 2d 72 6f 75 74 65 60 60 20 43 | r.use.the.``no-default-route``.C |
aeba0 | 4c 49 20 6f 70 74 69 6f 6e 2e 00 41 20 64 65 73 63 72 69 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 | LI.option..A.description.can.be. |
aebc0 | 61 64 64 65 64 20 66 6f 72 20 65 61 63 68 20 61 6e 64 20 65 76 65 72 79 20 75 6e 69 71 75 65 20 | added.for.each.and.every.unique. |
aebe0 | 72 65 6c 61 79 20 49 44 2e 20 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 74 6f 20 64 69 73 74 | relay.ID..This.is.useful.to.dist |
aec00 | 69 6e 67 75 69 73 68 20 62 65 74 77 65 65 6e 20 6d 75 6c 74 69 70 6c 65 20 64 69 66 66 65 72 65 | inguish.between.multiple.differe |
aec20 | 6e 74 20 70 6f 72 74 73 2f 61 70 70 6c 69 61 63 74 69 6f 6e 73 2e 00 41 20 64 69 73 61 62 6c 65 | nt.ports/appliactions..A.disable |
aec40 | 64 20 67 72 6f 75 70 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 | d.group.will.be.removed.from.the |
aec60 | 20 56 52 52 50 20 70 72 6f 63 65 73 73 20 61 6e 64 20 79 6f 75 72 20 72 6f 75 74 65 72 20 77 69 | .VRRP.process.and.your.router.wi |
aec80 | 6c 6c 20 6e 6f 74 20 70 61 72 74 69 63 69 70 61 74 65 20 69 6e 20 56 52 52 50 20 66 6f 72 20 74 | ll.not.participate.in.VRRP.for.t |
aeca0 | 68 61 74 20 56 52 49 44 2e 20 49 74 20 77 69 6c 6c 20 64 69 73 61 70 70 65 61 72 20 66 72 6f 6d | hat.VRID..It.will.disappear.from |
aecc0 | 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 20 6f 75 74 70 75 | .operational.mode.commands.outpu |
aece0 | 74 2c 20 72 61 74 68 65 72 20 74 68 61 6e 20 65 6e 74 65 72 20 74 68 65 20 62 61 63 6b 75 70 20 | t,.rather.than.enter.the.backup. |
aed00 | 73 74 61 74 65 2e 00 41 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 69 73 20 74 68 65 20 6c 61 62 65 | state..A.domain.name.is.the.labe |
aed20 | 6c 20 28 6e 61 6d 65 29 20 61 73 73 69 67 6e 65 64 20 74 6f 20 61 20 63 6f 6d 70 75 74 65 72 20 | l.(name).assigned.to.a.computer. |
aed40 | 6e 65 74 77 6f 72 6b 20 61 6e 64 20 69 73 20 74 68 75 73 20 75 6e 69 71 75 65 2e 20 56 79 4f 53 | network.and.is.thus.unique..VyOS |
aed60 | 20 61 70 70 65 6e 64 73 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 61 73 20 61 20 73 75 | .appends.the.domain.name.as.a.su |
aed80 | 66 66 69 78 20 74 6f 20 61 6e 79 20 75 6e 71 75 61 6c 69 66 69 65 64 20 6e 61 6d 65 2e 20 46 6f | ffix.to.any.unqualified.name..Fo |
aeda0 | 72 20 65 78 61 6d 70 6c 65 2c 20 69 66 20 79 6f 75 20 73 65 74 20 74 68 65 20 64 6f 6d 61 69 6e | r.example,.if.you.set.the.domain |
aedc0 | 20 6e 61 6d 65 20 60 65 78 61 6d 70 6c 65 2e 63 6f 6d 60 2c 20 61 6e 64 20 79 6f 75 20 77 6f 75 | .name.`example.com`,.and.you.wou |
aede0 | 6c 64 20 70 69 6e 67 20 74 68 65 20 75 6e 71 75 61 6c 69 66 69 65 64 20 6e 61 6d 65 20 6f 66 20 | ld.ping.the.unqualified.name.of. |
aee00 | 60 63 72 75 78 60 2c 20 74 68 65 6e 20 56 79 4f 53 20 71 75 61 6c 69 66 69 65 73 20 74 68 65 20 | `crux`,.then.VyOS.qualifies.the. |
aee20 | 6e 61 6d 65 20 74 6f 20 60 63 72 75 78 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 60 2e 00 41 20 64 75 | name.to.`crux.example.com`..A.du |
aee40 | 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 74 68 65 20 70 72 6f 76 69 64 65 72 2d 61 | mmy.interface.for.the.provider-a |
aee60 | 73 73 69 67 6e 65 64 20 49 50 3b 00 41 20 66 69 72 65 77 61 6c 6c 20 6d 61 72 6b 20 60 60 66 77 | ssigned.IP;.A.firewall.mark.``fw |
aee80 | 6d 61 72 6b 60 60 20 61 6c 6c 6f 77 73 20 75 73 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 70 6f 72 | mark``.allows.using.multiple.por |
aeea0 | 74 73 20 66 6f 72 20 68 69 67 68 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 20 76 69 72 74 75 61 6c | ts.for.high-availability.virtual |
aeec0 | 2d 73 65 72 76 65 72 2e 20 49 74 20 75 73 65 73 20 66 77 6d 61 72 6b 20 76 61 6c 75 65 2e 00 41 | -server..It.uses.fwmark.value..A |
aeee0 | 20 66 75 6c 6c 20 65 78 61 6d 70 6c 65 20 6f 66 20 61 20 54 75 6e 6e 65 6c 62 72 6f 6b 65 72 2e | .full.example.of.a.Tunnelbroker. |
aef00 | 6e 65 74 20 63 6f 6e 66 69 67 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 61 74 20 3a 72 65 66 3a | net.config.can.be.found.at.:ref: |
aef20 | 60 68 65 72 65 20 3c 65 78 61 6d 70 6c 65 73 2d 74 75 6e 6e 65 6c 62 72 6f 6b 65 72 2d 69 70 76 | `here.<examples-tunnelbroker-ipv |
aef40 | 36 3e 60 2e 00 41 20 67 65 6e 65 72 69 63 20 60 3c 6e 61 6d 65 3e 60 20 72 65 66 65 72 65 6e 63 | 6>`..A.generic.`<name>`.referenc |
aef60 | 69 6e 67 20 74 68 69 73 20 73 79 6e 63 20 73 65 72 76 69 63 65 2e 00 41 20 68 6f 73 74 6e 61 6d | ing.this.sync.service..A.hostnam |
aef80 | 65 20 69 73 20 74 68 65 20 6c 61 62 65 6c 20 28 6e 61 6d 65 29 20 61 73 73 69 67 6e 65 64 20 74 | e.is.the.label.(name).assigned.t |
aefa0 | 6f 20 61 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 20 28 61 20 68 6f 73 74 29 20 6f 6e 20 61 | o.a.network.device.(a.host).on.a |
aefc0 | 20 6e 65 74 77 6f 72 6b 20 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 64 69 73 74 69 6e 67 75 | .network.and.is.used.to.distingu |
aefe0 | 69 73 68 20 6f 6e 65 20 64 65 76 69 63 65 20 66 72 6f 6d 20 61 6e 6f 74 68 65 72 20 6f 6e 20 73 | ish.one.device.from.another.on.s |
af000 | 70 65 63 69 66 69 63 20 6e 65 74 77 6f 72 6b 73 20 6f 72 20 6f 76 65 72 20 74 68 65 20 69 6e 74 | pecific.networks.or.over.the.int |
af020 | 65 72 6e 65 74 2e 20 4f 6e 20 74 68 65 20 6f 74 68 65 72 20 68 61 6e 64 20 74 68 69 73 20 77 69 | ernet..On.the.other.hand.this.wi |
af040 | 6c 6c 20 62 65 20 74 68 65 20 6e 61 6d 65 20 77 68 69 63 68 20 61 70 70 65 61 72 73 20 6f 6e 20 | ll.be.the.name.which.appears.on. |
af060 | 74 68 65 20 63 6f 6d 6d 61 6e 64 20 6c 69 6e 65 20 70 72 6f 6d 70 74 2e 00 41 20 68 75 6d 61 6e | the.command.line.prompt..A.human |
af080 | 20 72 65 61 64 61 62 6c 65 20 64 65 73 63 72 69 70 74 69 6f 6e 20 77 68 61 74 20 74 68 69 73 20 | .readable.description.what.this. |
af0a0 | 43 41 20 69 73 20 61 62 6f 75 74 2e 00 41 20 68 75 6d 61 6e 20 72 65 61 64 61 62 6c 65 20 64 65 | CA.is.about..A.human.readable.de |
af0c0 | 73 63 72 69 70 74 69 6f 6e 20 77 68 61 74 20 74 68 69 73 20 63 65 72 74 69 66 69 63 61 74 65 20 | scription.what.this.certificate. |
af0e0 | 69 73 20 61 62 6f 75 74 2e 00 41 20 6c 6f 6f 6b 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 20 69 | is.about..A.lookback.interface.i |
af100 | 73 20 61 6c 77 61 79 73 20 75 70 2c 20 74 68 75 73 20 69 74 20 63 6f 75 6c 64 20 62 65 20 75 73 | s.always.up,.thus.it.could.be.us |
af120 | 65 64 20 66 6f 72 20 6d 61 6e 61 67 65 6d 65 6e 74 20 74 72 61 66 66 69 63 20 6f 72 20 61 73 20 | ed.for.management.traffic.or.as. |
af140 | 73 6f 75 72 63 65 2f 64 65 73 74 69 6e 61 74 69 6f 6e 20 66 6f 72 20 61 6e 64 20 3a 61 62 62 72 | source/destination.for.and.:abbr |
af160 | 3a 60 49 47 50 20 28 49 6e 74 65 72 69 6f 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c | :`IGP.(Interior.Gateway.Protocol |
af180 | 29 60 20 6c 69 6b 65 20 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 62 67 70 60 20 73 6f 20 79 6f | )`.like.:ref:`routing-bgp`.so.yo |
af1a0 | 75 72 20 69 6e 74 65 72 6e 61 6c 20 42 47 50 20 6c 69 6e 6b 20 69 73 20 6e 6f 74 20 64 65 70 65 | ur.internal.BGP.link.is.not.depe |
af1c0 | 6e 64 65 6e 74 20 6f 6e 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 20 73 74 61 74 65 73 20 61 6e | ndent.on.physical.link.states.an |
af1e0 | 64 20 6d 75 6c 74 69 70 6c 65 20 72 6f 75 74 65 73 20 63 61 6e 20 62 65 20 63 68 6f 73 65 6e 20 | d.multiple.routes.can.be.chosen. |
af200 | 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 20 41 20 3a 72 65 66 3a 60 64 75 6d 6d | to.the.destination..A.:ref:`dumm |
af220 | 79 2d 69 6e 74 65 72 66 61 63 65 60 20 49 6e 74 65 72 66 61 63 65 20 73 68 6f 75 6c 64 20 61 6c | y-interface`.Interface.should.al |
af240 | 77 61 79 73 20 62 65 20 70 72 65 66 65 72 72 65 64 20 6f 76 65 72 20 61 20 3a 72 65 66 3a 60 6c | ways.be.preferred.over.a.:ref:`l |
af260 | 6f 6f 70 62 61 63 6b 2d 69 6e 74 65 72 66 61 63 65 60 20 69 6e 74 65 72 66 61 63 65 2e 00 41 20 | oopback-interface`.interface..A. |
af280 | 6d 61 6e 61 67 65 64 20 64 65 76 69 63 65 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 6e 6f 64 65 | managed.device.is.a.network.node |
af2a0 | 20 74 68 61 74 20 69 6d 70 6c 65 6d 65 6e 74 73 20 61 6e 20 53 4e 4d 50 20 69 6e 74 65 72 66 61 | .that.implements.an.SNMP.interfa |
af2c0 | 63 65 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 75 6e 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 28 72 | ce.that.allows.unidirectional.(r |
af2e0 | 65 61 64 2d 6f 6e 6c 79 29 20 6f 72 20 62 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 28 72 65 61 64 | ead-only).or.bidirectional.(read |
af300 | 20 61 6e 64 20 77 72 69 74 65 29 20 61 63 63 65 73 73 20 74 6f 20 6e 6f 64 65 2d 73 70 65 63 69 | .and.write).access.to.node-speci |
af320 | 66 69 63 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 4d 61 6e 61 67 65 64 20 64 65 76 69 63 65 73 | fic.information..Managed.devices |
af340 | 20 65 78 63 68 61 6e 67 65 20 6e 6f 64 65 2d 73 70 65 63 69 66 69 63 20 69 6e 66 6f 72 6d 61 74 | .exchange.node-specific.informat |
af360 | 69 6f 6e 20 77 69 74 68 20 74 68 65 20 4e 4d 53 73 2e 20 53 6f 6d 65 74 69 6d 65 73 20 63 61 6c | ion.with.the.NMSs..Sometimes.cal |
af380 | 6c 65 64 20 6e 65 74 77 6f 72 6b 20 65 6c 65 6d 65 6e 74 73 2c 20 74 68 65 20 6d 61 6e 61 67 65 | led.network.elements,.the.manage |
af3a0 | 64 20 64 65 76 69 63 65 73 20 63 61 6e 20 62 65 20 61 6e 79 20 74 79 70 65 20 6f 66 20 64 65 76 | d.devices.can.be.any.type.of.dev |
af3c0 | 69 63 65 2c 20 69 6e 63 6c 75 64 69 6e 67 2c 20 62 75 74 20 6e 6f 74 20 6c 69 6d 69 74 65 64 20 | ice,.including,.but.not.limited. |
af3e0 | 74 6f 2c 20 72 6f 75 74 65 72 73 2c 20 61 63 63 65 73 73 20 73 65 72 76 65 72 73 2c 20 73 77 69 | to,.routers,.access.servers,.swi |
af400 | 74 63 68 65 73 2c 20 63 61 62 6c 65 20 6d 6f 64 65 6d 73 2c 20 62 72 69 64 67 65 73 2c 20 68 75 | tches,.cable.modems,.bridges,.hu |
af420 | 62 73 2c 20 49 50 20 74 65 6c 65 70 68 6f 6e 65 73 2c 20 49 50 20 76 69 64 65 6f 20 63 61 6d 65 | bs,.IP.telephones,.IP.video.came |
af440 | 72 61 73 2c 20 63 6f 6d 70 75 74 65 72 20 68 6f 73 74 73 2c 20 61 6e 64 20 70 72 69 6e 74 65 72 | ras,.computer.hosts,.and.printer |
af460 | 73 2e 00 41 20 6d 61 74 63 68 20 66 69 6c 74 65 72 20 63 61 6e 20 63 6f 6e 74 61 69 6e 20 6d 75 | s..A.match.filter.can.contain.mu |
af480 | 6c 74 69 70 6c 65 20 63 72 69 74 65 72 69 61 20 61 6e 64 20 77 69 6c 6c 20 6d 61 74 63 68 20 74 | ltiple.criteria.and.will.match.t |
af4a0 | 72 61 66 66 69 63 20 69 66 20 61 6c 6c 20 74 68 6f 73 65 20 63 72 69 74 65 72 69 61 20 61 72 65 | raffic.if.all.those.criteria.are |
af4c0 | 20 74 72 75 65 2e 00 41 20 6d 6f 6e 69 74 6f 72 65 64 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 | .true..A.monitored.static.route. |
af4e0 | 63 6f 6e 64 69 74 69 6f 6e 73 20 74 68 65 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 20 74 6f 20 74 | conditions.the.installation.to.t |
af500 | 68 65 20 52 49 42 20 6f 6e 20 74 68 65 20 42 46 44 20 73 65 73 73 69 6f 6e 20 72 75 6e 6e 69 6e | he.RIB.on.the.BFD.session.runnin |
af520 | 67 20 73 74 61 74 65 3a 20 77 68 65 6e 20 42 46 44 20 73 65 73 73 69 6f 6e 20 69 73 20 75 70 20 | g.state:.when.BFD.session.is.up. |
af540 | 74 68 65 20 72 6f 75 74 65 20 69 73 20 69 6e 73 74 61 6c 6c 65 64 20 74 6f 20 52 49 42 2c 20 62 | the.route.is.installed.to.RIB,.b |
af560 | 75 74 20 77 68 65 6e 20 74 68 65 20 42 46 44 20 73 65 73 73 69 6f 6e 20 69 73 20 64 6f 77 6e 20 | ut.when.the.BFD.session.is.down. |
af580 | 69 74 20 69 73 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 20 52 49 42 2e 00 41 20 6e 65 | it.is.removed.from.the.RIB..A.ne |
af5a0 | 74 77 6f 72 6b 20 6d 61 6e 61 67 65 6d 65 6e 74 20 73 74 61 74 69 6f 6e 20 65 78 65 63 75 74 65 | twork.management.station.execute |
af5c0 | 73 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 74 68 61 74 20 6d 6f 6e 69 74 6f 72 20 61 6e 64 20 | s.applications.that.monitor.and. |
af5e0 | 63 6f 6e 74 72 6f 6c 20 6d 61 6e 61 67 65 64 20 64 65 76 69 63 65 73 2e 20 4e 4d 53 73 20 70 72 | control.managed.devices..NMSs.pr |
af600 | 6f 76 69 64 65 20 74 68 65 20 62 75 6c 6b 20 6f 66 20 74 68 65 20 70 72 6f 63 65 73 73 69 6e 67 | ovide.the.bulk.of.the.processing |
af620 | 20 61 6e 64 20 6d 65 6d 6f 72 79 20 72 65 73 6f 75 72 63 65 73 20 72 65 71 75 69 72 65 64 20 66 | .and.memory.resources.required.f |
af640 | 6f 72 20 6e 65 74 77 6f 72 6b 20 6d 61 6e 61 67 65 6d 65 6e 74 2e 20 4f 6e 65 20 6f 72 20 6d 6f | or.network.management..One.or.mo |
af660 | 72 65 20 4e 4d 53 73 20 6d 61 79 20 65 78 69 73 74 20 6f 6e 20 61 6e 79 20 6d 61 6e 61 67 65 64 | re.NMSs.may.exist.on.any.managed |
af680 | 20 6e 65 74 77 6f 72 6b 2e 00 41 20 6e 65 77 20 69 6e 74 65 72 66 61 63 65 20 62 65 63 6f 6d 65 | .network..A.new.interface.become |
af6a0 | 73 20 70 72 65 73 65 6e 74 20 60 60 50 6f 72 74 2d 63 68 61 6e 6e 65 6c 31 60 60 2c 20 61 6c 6c | s.present.``Port-channel1``,.all |
af6c0 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6c 69 6b 65 20 61 6c 6c 6f 77 65 64 20 56 4c 41 4e | .configuration.like.allowed.VLAN |
af6e0 | 20 69 6e 74 65 72 66 61 63 65 73 2c 20 53 54 50 20 77 69 6c 6c 20 68 61 70 70 65 6e 20 68 65 72 | .interfaces,.STP.will.happen.her |
af700 | 65 2e 00 41 20 70 61 63 6b 65 74 20 72 61 74 65 20 6c 69 6d 69 74 20 63 61 6e 20 62 65 20 73 65 | e..A.packet.rate.limit.can.be.se |
af720 | 74 20 66 6f 72 20 61 20 72 75 6c 65 20 74 6f 20 61 70 70 6c 79 20 74 68 65 20 72 75 6c 65 20 74 | t.for.a.rule.to.apply.the.rule.t |
af740 | 6f 20 74 72 61 66 66 69 63 20 61 62 6f 76 65 20 6f 72 20 62 65 6c 6f 77 20 61 20 73 70 65 63 69 | o.traffic.above.or.below.a.speci |
af760 | 66 69 65 64 20 74 68 72 65 73 68 6f 6c 64 2e 20 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 | fied.threshold..To.configure.the |
af780 | 20 72 61 74 65 20 6c 69 6d 69 74 69 6e 67 20 75 73 65 3a 00 41 20 70 61 63 6b 65 74 20 74 68 61 | .rate.limiting.use:.A.packet.tha |
af7a0 | 74 20 66 69 6e 64 73 20 61 20 6d 61 74 63 68 69 6e 67 20 65 6e 74 72 79 20 69 6e 20 74 68 65 20 | t.finds.a.matching.entry.in.the. |
af7c0 | 66 6c 6f 77 74 61 62 6c 65 20 28 66 6c 6f 77 74 61 62 6c 65 20 68 69 74 29 20 69 73 20 74 72 61 | flowtable.(flowtable.hit).is.tra |
af7e0 | 6e 73 6d 69 74 74 65 64 20 74 6f 20 74 68 65 20 6f 75 74 70 75 74 20 6e 65 74 64 65 76 69 63 65 | nsmitted.to.the.output.netdevice |
af800 | 2c 20 68 65 6e 63 65 2c 20 70 61 63 6b 65 74 73 20 62 79 70 61 73 73 20 74 68 65 20 63 6c 61 73 | ,.hence,.packets.bypass.the.clas |
af820 | 73 69 63 20 49 50 20 66 6f 72 77 61 72 64 69 6e 67 20 70 61 74 68 20 61 6e 64 20 75 73 65 73 20 | sic.IP.forwarding.path.and.uses. |
af840 | 74 68 65 20 2a 2a 46 61 73 74 20 50 61 74 68 2a 2a 20 28 6f 72 61 6e 67 65 20 63 69 72 63 6c 65 | the.**Fast.Path**.(orange.circle |
af860 | 73 20 70 61 74 68 29 2e 20 54 68 65 20 76 69 73 69 62 6c 65 20 65 66 66 65 63 74 20 69 73 20 74 | s.path)..The.visible.effect.is.t |
af880 | 68 61 74 20 79 6f 75 20 64 6f 20 6e 6f 74 20 73 65 65 20 74 68 65 73 65 20 70 61 63 6b 65 74 73 | hat.you.do.not.see.these.packets |
af8a0 | 20 66 72 6f 6d 20 61 6e 79 20 6f 66 20 74 68 65 20 4e 65 74 66 69 6c 74 65 72 20 68 6f 6f 6b 73 | .from.any.of.the.Netfilter.hooks |
af8c0 | 20 63 6f 6d 69 6e 67 20 61 66 74 65 72 20 69 6e 67 72 65 73 73 2e 20 49 6e 20 63 61 73 65 20 74 | .coming.after.ingress..In.case.t |
af8e0 | 68 61 74 20 74 68 65 72 65 20 69 73 20 6e 6f 20 6d 61 74 63 68 69 6e 67 20 65 6e 74 72 79 20 69 | hat.there.is.no.matching.entry.i |
af900 | 6e 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 28 66 6c 6f 77 74 61 62 6c 65 20 6d 69 73 73 29 | n.the.flowtable.(flowtable.miss) |
af920 | 2c 20 74 68 65 20 70 61 63 6b 65 74 20 66 6f 6c 6c 6f 77 73 20 74 68 65 20 63 6c 61 73 73 69 63 | ,.the.packet.follows.the.classic |
af940 | 20 49 50 20 66 6f 72 77 61 72 64 69 6e 67 20 70 61 74 68 2e 00 41 20 70 65 6e 61 6c 74 79 20 6f | .IP.forwarding.path..A.penalty.o |
af960 | 66 20 31 30 30 30 20 69 73 20 61 73 73 65 73 73 65 64 20 65 61 63 68 20 74 69 6d 65 20 74 68 65 | f.1000.is.assessed.each.time.the |
af980 | 20 72 6f 75 74 65 20 66 61 69 6c 73 2e 20 57 68 65 6e 20 74 68 65 20 70 65 6e 61 6c 74 69 65 73 | .route.fails..When.the.penalties |
af9a0 | 20 72 65 61 63 68 20 61 20 70 72 65 64 65 66 69 6e 65 64 20 74 68 72 65 73 68 6f 6c 64 20 28 73 | .reach.a.predefined.threshold.(s |
af9c0 | 75 70 70 72 65 73 73 2d 76 61 6c 75 65 29 2c 20 74 68 65 20 72 6f 75 74 65 72 20 73 74 6f 70 73 | uppress-value),.the.router.stops |
af9e0 | 20 61 64 76 65 72 74 69 73 69 6e 67 20 74 68 65 20 72 6f 75 74 65 2e 00 41 20 70 68 79 73 69 63 | .advertising.the.route..A.physic |
afa00 | 61 6c 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 63 6f 6e 6e | al.interface.is.required.to.conn |
afa20 | 65 63 74 20 74 68 69 73 20 4d 41 43 73 65 63 20 69 6e 73 74 61 6e 63 65 20 74 6f 2e 20 54 72 61 | ect.this.MACsec.instance.to..Tra |
afa40 | 66 66 69 63 20 6c 65 61 76 69 6e 67 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 77 69 6c 6c | ffic.leaving.this.interface.will |
afa60 | 20 6e 6f 77 20 62 65 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 2f 65 6e 63 72 79 70 74 65 64 2e | .now.be.authenticated/encrypted. |
afa80 | 00 41 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 64 65 66 69 | .A.pool.of.addresses.can.be.defi |
afaa0 | 6e 65 64 20 62 79 20 75 73 69 6e 67 20 61 20 68 79 70 68 65 6e 20 62 65 74 77 65 65 6e 20 74 77 | ned.by.using.a.hyphen.between.tw |
afac0 | 6f 20 49 50 20 61 64 64 72 65 73 73 65 73 3a 00 41 20 70 6f 72 74 20 63 61 6e 20 62 65 20 73 65 | o.IP.addresses:.A.port.can.be.se |
afae0 | 74 20 77 69 74 68 20 61 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 6f 72 20 61 20 6e 61 6d 65 20 77 | t.with.a.port.number.or.a.name.w |
afb00 | 68 69 63 68 20 69 73 20 68 65 72 65 20 64 65 66 69 6e 65 64 3a 20 60 60 2f 65 74 63 2f 73 65 72 | hich.is.here.defined:.``/etc/ser |
afb20 | 76 69 63 65 73 60 60 2e 00 41 20 71 75 65 72 79 20 66 6f 72 20 77 68 69 63 68 20 74 68 65 72 65 | vices``..A.query.for.which.there |
afb40 | 20 69 73 20 61 75 74 68 6f 72 69 74 61 74 69 76 65 6c 79 20 6e 6f 20 61 6e 73 77 65 72 20 69 73 | .is.authoritatively.no.answer.is |
afb60 | 20 63 61 63 68 65 64 20 74 6f 20 71 75 69 63 6b 6c 79 20 64 65 6e 79 20 61 20 72 65 63 6f 72 64 | .cached.to.quickly.deny.a.record |
afb80 | 27 73 20 65 78 69 73 74 65 6e 63 65 20 6c 61 74 65 72 20 6f 6e 2c 20 77 69 74 68 6f 75 74 20 70 | 's.existence.later.on,.without.p |
afba0 | 75 74 74 69 6e 67 20 61 20 68 65 61 76 79 20 6c 6f 61 64 20 6f 6e 20 74 68 65 20 72 65 6d 6f 74 | utting.a.heavy.load.on.the.remot |
afbc0 | 65 20 73 65 72 76 65 72 2e 20 49 6e 20 70 72 61 63 74 69 63 65 2c 20 63 61 63 68 65 73 20 63 61 | e.server..In.practice,.caches.ca |
afbe0 | 6e 20 62 65 63 6f 6d 65 20 73 61 74 75 72 61 74 65 64 20 77 69 74 68 20 68 75 6e 64 72 65 64 73 | n.become.saturated.with.hundreds |
afc00 | 20 6f 66 20 74 68 6f 75 73 61 6e 64 73 20 6f 66 20 68 6f 73 74 73 20 77 68 69 63 68 20 61 72 65 | .of.thousands.of.hosts.which.are |
afc20 | 20 74 72 69 65 64 20 6f 6e 6c 79 20 6f 6e 63 65 2e 00 41 20 72 65 63 65 69 76 65 64 20 4e 48 52 | .tried.only.once..A.received.NHR |
afc40 | 50 20 54 72 61 66 66 69 63 20 49 6e 64 69 63 61 74 69 6f 6e 20 77 69 6c 6c 20 74 72 69 67 67 65 | P.Traffic.Indication.will.trigge |
afc60 | 72 20 74 68 65 20 72 65 73 6f 6c 75 74 69 6f 6e 20 61 6e 64 20 65 73 74 61 62 6c 69 73 68 6d 65 | r.the.resolution.and.establishme |
afc80 | 6e 74 20 6f 66 20 61 20 73 68 6f 72 74 63 75 74 20 72 6f 75 74 65 2e 00 41 20 72 6f 75 74 69 6e | nt.of.a.shortcut.route..A.routin |
afca0 | 67 20 74 61 62 6c 65 20 49 44 20 63 61 6e 20 6e 6f 74 20 62 65 20 6d 6f 64 69 66 69 65 64 20 6f | g.table.ID.can.not.be.modified.o |
afcc0 | 6e 63 65 20 69 74 20 69 73 20 61 73 73 69 67 6e 65 64 2e 20 49 74 20 63 61 6e 20 6f 6e 6c 79 20 | nce.it.is.assigned..It.can.only. |
afce0 | 62 65 20 63 68 61 6e 67 65 64 20 62 79 20 64 65 6c 65 74 69 6e 67 20 61 6e 64 20 72 65 2d 61 64 | be.changed.by.deleting.and.re-ad |
afd00 | 64 69 6e 67 20 74 68 65 20 56 52 46 20 69 6e 73 74 61 6e 63 65 2e 00 41 20 72 75 6c 65 2d 73 65 | ding.the.VRF.instance..A.rule-se |
afd20 | 74 20 69 73 20 61 20 6e 61 6d 65 64 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 66 69 72 65 77 | t.is.a.named.collection.of.firew |
afd40 | 61 6c 6c 20 72 75 6c 65 73 20 74 68 61 74 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f | all.rules.that.can.be.applied.to |
afd60 | 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 6f 72 20 61 20 7a 6f 6e 65 2e 20 45 61 63 68 20 72 75 | .an.interface.or.a.zone..Each.ru |
afd80 | 6c 65 20 69 73 20 6e 75 6d 62 65 72 65 64 2c 20 68 61 73 20 61 6e 20 61 63 74 69 6f 6e 20 74 6f | le.is.numbered,.has.an.action.to |
afda0 | 20 61 70 70 6c 79 20 69 66 20 74 68 65 20 72 75 6c 65 20 69 73 20 6d 61 74 63 68 65 64 2c 20 61 | .apply.if.the.rule.is.matched,.a |
afdc0 | 6e 64 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 63 72 | nd.the.ability.to.specify.the.cr |
afde0 | 69 74 65 72 69 61 20 74 6f 20 6d 61 74 63 68 2e 20 44 61 74 61 20 70 61 63 6b 65 74 73 20 67 6f | iteria.to.match..Data.packets.go |
afe00 | 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 75 6c 65 73 20 66 72 6f 6d 20 31 20 2d 20 39 39 39 39 | .through.the.rules.from.1.-.9999 |
afe20 | 39 39 2c 20 61 74 20 74 68 65 20 66 69 72 73 74 20 6d 61 74 63 68 20 74 68 65 20 61 63 74 69 6f | 99,.at.the.first.match.the.actio |
afe40 | 6e 20 6f 66 20 74 68 65 20 72 75 6c 65 20 77 69 6c 6c 20 62 65 20 65 78 65 63 75 74 65 64 2e 00 | n.of.the.rule.will.be.executed.. |
afe60 | 41 20 72 75 6c 65 2d 73 65 74 20 69 73 20 61 20 6e 61 6d 65 64 20 63 6f 6c 6c 65 63 74 69 6f 6e | A.rule-set.is.a.named.collection |
afe80 | 20 6f 66 20 72 75 6c 65 73 20 74 68 61 74 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f | .of.rules.that.can.be.applied.to |
afea0 | 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 45 61 63 68 20 72 75 6c 65 20 69 73 20 6e 75 6d 62 | .an.interface..Each.rule.is.numb |
afec0 | 65 72 65 64 2c 20 68 61 73 20 61 6e 20 61 63 74 69 6f 6e 20 74 6f 20 61 70 70 6c 79 20 69 66 20 | ered,.has.an.action.to.apply.if. |
afee0 | 74 68 65 20 72 75 6c 65 20 69 73 20 6d 61 74 63 68 65 64 2c 20 61 6e 64 20 74 68 65 20 61 62 69 | the.rule.is.matched,.and.the.abi |
aff00 | 6c 69 74 79 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 63 72 69 74 65 72 69 61 20 74 6f 20 | lity.to.specify.the.criteria.to. |
aff20 | 6d 61 74 63 68 2e 20 44 61 74 61 20 70 61 63 6b 65 74 73 20 67 6f 20 74 68 72 6f 75 67 68 20 74 | match..Data.packets.go.through.t |
aff40 | 68 65 20 72 75 6c 65 73 20 66 72 6f 6d 20 31 20 2d 20 39 39 39 39 39 39 2c 20 61 74 20 74 68 65 | he.rules.from.1.-.999999,.at.the |
aff60 | 20 66 69 72 73 74 20 6d 61 74 63 68 20 74 68 65 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 | .first.match.the.action.of.the.r |
aff80 | 75 6c 65 20 77 69 6c 6c 20 62 65 20 65 78 65 63 75 74 65 64 2e 00 41 20 73 63 72 69 70 74 20 63 | ule.will.be.executed..A.script.c |
affa0 | 61 6e 20 62 65 20 72 75 6e 20 77 68 65 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 73 74 61 74 | an.be.run.when.an.interface.stat |
affc0 | 65 20 63 68 61 6e 67 65 20 6f 63 63 75 72 73 2e 20 53 63 72 69 70 74 73 20 61 72 65 20 72 75 6e | e.change.occurs..Scripts.are.run |
affe0 | 20 66 72 6f 6d 20 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2c 20 66 6f 72 20 61 20 64 69 66 | .from./config/scripts,.for.a.dif |
b0000 | 66 65 72 65 6e 74 20 6c 6f 63 61 74 69 6f 6e 20 73 70 65 63 69 66 79 20 74 68 65 20 66 75 6c 6c | ferent.location.specify.the.full |
b0020 | 20 70 61 74 68 3a 00 41 20 73 65 67 6d 65 6e 74 20 49 44 20 74 68 61 74 20 63 6f 6e 74 61 69 6e | .path:.A.segment.ID.that.contain |
b0040 | 73 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 20 63 61 6c 63 75 6c 61 74 65 | s.an.IP.address.prefix.calculate |
b0060 | 64 20 62 79 20 61 6e 20 49 47 50 20 69 6e 20 74 68 65 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 | d.by.an.IGP.in.the.service.provi |
b0080 | 64 65 72 20 63 6f 72 65 20 6e 65 74 77 6f 72 6b 2e 20 50 72 65 66 69 78 20 53 49 44 73 20 61 72 | der.core.network..Prefix.SIDs.ar |
b00a0 | 65 20 67 6c 6f 62 61 6c 6c 79 20 75 6e 69 71 75 65 2c 20 74 68 69 73 20 76 61 6c 75 65 20 69 6e | e.globally.unique,.this.value.in |
b00c0 | 64 65 6e 74 69 66 79 20 69 74 00 41 20 73 65 6e 64 69 6e 67 20 73 74 61 74 69 6f 6e 20 28 63 6f | dentify.it.A.sending.station.(co |
b00e0 | 6d 70 75 74 65 72 20 6f 72 20 6e 65 74 77 6f 72 6b 20 73 77 69 74 63 68 29 20 6d 61 79 20 62 65 | mputer.or.network.switch).may.be |
b0100 | 20 74 72 61 6e 73 6d 69 74 74 69 6e 67 20 64 61 74 61 20 66 61 73 74 65 72 20 74 68 61 6e 20 74 | .transmitting.data.faster.than.t |
b0120 | 68 65 20 6f 74 68 65 72 20 65 6e 64 20 6f 66 20 74 68 65 20 6c 69 6e 6b 20 63 61 6e 20 61 63 63 | he.other.end.of.the.link.can.acc |
b0140 | 65 70 74 20 69 74 2e 20 55 73 69 6e 67 20 66 6c 6f 77 20 63 6f 6e 74 72 6f 6c 2c 20 74 68 65 20 | ept.it..Using.flow.control,.the. |
b0160 | 72 65 63 65 69 76 69 6e 67 20 73 74 61 74 69 6f 6e 20 63 61 6e 20 73 69 67 6e 61 6c 20 74 68 65 | receiving.station.can.signal.the |
b0180 | 20 73 65 6e 64 65 72 20 72 65 71 75 65 73 74 69 6e 67 20 73 75 73 70 65 6e 73 69 6f 6e 20 6f 66 | .sender.requesting.suspension.of |
b01a0 | 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 73 20 75 6e 74 69 6c 20 74 68 65 20 72 65 63 65 69 76 65 | .transmissions.until.the.receive |
b01c0 | 72 20 63 61 74 63 68 65 73 20 75 70 2e 00 41 20 73 68 61 72 65 64 20 6e 65 74 77 6f 72 6b 20 6e | r.catches.up..A.shared.network.n |
b01e0 | 61 6d 65 64 20 60 60 4e 45 54 31 60 60 20 73 65 72 76 65 73 20 73 75 62 6e 65 74 20 60 60 32 30 | amed.``NET1``.serves.subnet.``20 |
b0200 | 30 31 3a 64 62 38 3a 3a 2f 36 34 60 60 00 41 20 73 69 6d 70 6c 65 20 42 47 50 20 63 6f 6e 66 69 | 01:db8::/64``.A.simple.BGP.confi |
b0220 | 67 75 72 61 74 69 6f 6e 20 76 69 61 20 49 50 76 36 2e 00 41 20 73 69 6d 70 6c 65 20 52 61 6e 64 | guration.via.IPv6..A.simple.Rand |
b0240 | 6f 6d 20 45 61 72 6c 79 20 44 65 74 65 63 74 69 6f 6e 20 28 52 45 44 29 20 70 6f 6c 69 63 79 20 | om.Early.Detection.(RED).policy. |
b0260 | 77 6f 75 6c 64 20 73 74 61 72 74 20 72 61 6e 64 6f 6d 6c 79 20 64 72 6f 70 70 69 6e 67 20 70 61 | would.start.randomly.dropping.pa |
b0280 | 63 6b 65 74 73 20 66 72 6f 6d 20 61 20 71 75 65 75 65 20 62 65 66 6f 72 65 20 69 74 20 72 65 61 | ckets.from.a.queue.before.it.rea |
b02a0 | 63 68 65 73 20 69 74 73 20 71 75 65 75 65 20 6c 69 6d 69 74 20 74 68 75 73 20 61 76 6f 69 64 69 | ches.its.queue.limit.thus.avoidi |
b02c0 | 6e 67 20 63 6f 6e 67 65 73 74 69 6f 6e 2e 20 54 68 61 74 20 69 73 20 67 6f 6f 64 20 66 6f 72 20 | ng.congestion..That.is.good.for. |
b02e0 | 54 43 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 73 20 74 68 65 20 67 72 61 64 75 61 6c 20 64 | TCP.connections.as.the.gradual.d |
b0300 | 72 6f 70 70 69 6e 67 20 6f 66 20 70 61 63 6b 65 74 73 20 61 63 74 73 20 61 73 20 61 20 73 69 67 | ropping.of.packets.acts.as.a.sig |
b0320 | 6e 61 6c 20 66 6f 72 20 74 68 65 20 73 65 6e 64 65 72 20 74 6f 20 64 65 63 72 65 61 73 65 20 69 | nal.for.the.sender.to.decrease.i |
b0340 | 74 73 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 72 61 74 65 2e 00 41 20 73 69 6d 70 6c 65 20 65 | ts.transmission.rate..A.simple.e |
b0360 | 42 47 50 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 41 20 73 69 6d 70 6c 65 20 65 78 61 6d | BGP.configuration:.A.simple.exam |
b0380 | 70 6c 65 20 6f 66 20 53 68 61 70 65 72 20 75 73 69 6e 67 20 70 72 69 6f 72 69 74 69 65 73 2e 00 | ple.of.Shaper.using.priorities.. |
b03a0 | 41 20 73 69 6d 70 6c 65 20 65 78 61 6d 70 6c 65 20 6f 66 20 61 6e 20 46 51 2d 43 6f 44 65 6c 20 | A.simple.example.of.an.FQ-CoDel. |
b03c0 | 70 6f 6c 69 63 79 20 77 6f 72 6b 69 6e 67 20 69 6e 73 69 64 65 20 61 20 53 68 61 70 65 72 20 6f | policy.working.inside.a.Shaper.o |
b03e0 | 6e 65 2e 00 41 20 73 69 6d 70 6c 69 66 69 65 64 20 74 72 61 66 66 69 63 20 66 6c 6f 77 20 64 69 | ne..A.simplified.traffic.flow.di |
b0400 | 61 67 72 61 6d 2c 20 62 61 73 65 64 20 6f 6e 20 4e 65 74 66 69 6c 74 65 72 20 70 61 63 6b 65 74 | agram,.based.on.Netfilter.packet |
b0420 | 20 66 6c 6f 77 2c 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 2c 20 69 6e 20 6f 72 64 65 72 20 74 | .flow,.is.shown.next,.in.order.t |
b0440 | 6f 20 68 61 76 65 20 61 20 66 75 6c 6c 20 76 69 65 77 20 61 6e 64 20 75 6e 64 65 72 73 74 61 6e | o.have.a.full.view.and.understan |
b0460 | 64 69 6e 67 20 6f 66 20 68 6f 77 20 70 61 63 6b 65 74 73 20 61 72 65 20 70 72 6f 63 65 73 73 65 | ding.of.how.packets.are.processe |
b0480 | 64 2c 20 61 6e 64 20 77 68 61 74 20 70 6f 73 73 69 62 6c 65 20 70 61 74 68 73 20 74 72 61 66 66 | d,.and.what.possible.paths.traff |
b04a0 | 69 63 20 63 61 6e 20 74 61 6b 65 2e 00 41 20 73 69 6d 70 6c 69 66 69 65 64 20 74 72 61 66 66 69 | ic.can.take..A.simplified.traffi |
b04c0 | 63 20 66 6c 6f 77 2c 20 62 61 73 65 64 20 6f 6e 20 4e 65 74 66 69 6c 74 65 72 20 70 61 63 6b 65 | c.flow,.based.on.Netfilter.packe |
b04e0 | 74 20 66 6c 6f 77 2c 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 2c 20 69 6e 20 6f 72 64 65 72 20 | t.flow,.is.shown.next,.in.order. |
b0500 | 74 6f 20 68 61 76 65 20 61 20 66 75 6c 6c 20 76 69 65 77 20 61 6e 64 20 75 6e 64 65 72 73 74 61 | to.have.a.full.view.and.understa |
b0520 | 6e 64 69 6e 67 20 6f 66 20 68 6f 77 20 70 61 63 6b 65 74 73 20 61 72 65 20 70 72 6f 63 65 73 73 | nding.of.how.packets.are.process |
b0540 | 65 64 2c 20 61 6e 64 20 77 68 61 74 20 70 6f 73 73 69 62 6c 65 20 70 61 74 68 73 20 63 61 6e 20 | ed,.and.what.possible.paths.can. |
b0560 | 74 61 6b 65 2e 00 41 20 73 69 6e 67 6c 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 | take..A.single.internal.network. |
b0580 | 61 6e 64 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 2e 20 55 73 65 20 74 68 65 20 4e 41 | and.external.network..Use.the.NA |
b05a0 | 54 36 36 20 64 65 76 69 63 65 20 74 6f 20 63 6f 6e 6e 65 63 74 20 61 20 73 69 6e 67 6c 65 20 69 | T66.device.to.connect.a.single.i |
b05c0 | 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 6e 64 20 70 75 62 6c 69 63 20 6e 65 74 77 6f | nternal.network.and.public.netwo |
b05e0 | 72 6b 2c 20 61 6e 64 20 74 68 65 20 68 6f 73 74 73 20 69 6e 20 74 68 65 20 69 6e 74 65 72 6e 61 | rk,.and.the.hosts.in.the.interna |
b0600 | 6c 20 6e 65 74 77 6f 72 6b 20 75 73 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 72 65 66 69 | l.network.use.IPv6.address.prefi |
b0620 | 78 65 73 20 74 68 61 74 20 6f 6e 6c 79 20 73 75 70 70 6f 72 74 20 72 6f 75 74 69 6e 67 20 77 69 | xes.that.only.support.routing.wi |
b0640 | 74 68 69 6e 20 74 68 65 20 6c 6f 63 61 6c 20 72 61 6e 67 65 2e 20 57 68 65 6e 20 61 20 68 6f 73 | thin.the.local.range..When.a.hos |
b0660 | 74 20 69 6e 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 63 63 65 73 73 | t.in.the.internal.network.access |
b0680 | 65 73 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 2c 20 74 68 65 20 73 6f 75 | es.the.external.network,.the.sou |
b06a0 | 72 63 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 20 69 6e 20 74 68 65 20 6d | rce.IPv6.address.prefix.in.the.m |
b06c0 | 65 73 73 61 67 65 20 77 69 6c 6c 20 62 65 20 63 6f 6e 76 65 72 74 65 64 20 69 6e 74 6f 20 61 20 | essage.will.be.converted.into.a. |
b06e0 | 67 6c 6f 62 61 6c 20 75 6e 69 63 61 73 74 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 72 65 66 | global.unicast.IPv6.address.pref |
b0700 | 69 78 20 62 79 20 74 68 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 2e 00 41 20 73 74 61 74 69 6f | ix.by.the.NAT66.device..A.statio |
b0720 | 6e 20 61 63 74 73 20 61 73 20 61 20 57 69 2d 46 69 20 63 6c 69 65 6e 74 20 61 63 63 65 73 73 69 | n.acts.as.a.Wi-Fi.client.accessi |
b0740 | 6e 67 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 74 68 72 6f 75 67 68 20 61 6e 20 61 76 61 69 6c 61 | ng.the.network.through.an.availa |
b0760 | 62 6c 65 20 57 41 50 00 41 20 73 79 6e 63 20 67 72 6f 75 70 20 61 6c 6c 6f 77 73 20 56 52 52 50 | ble.WAP.A.sync.group.allows.VRRP |
b0780 | 20 67 72 6f 75 70 73 20 74 6f 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 6f 67 65 74 68 65 72 2e 00 | .groups.to.transition.together.. |
b07a0 | 41 20 74 79 70 69 63 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 75 73 69 6e 67 20 32 20 | A.typical.configuration.using.2. |
b07c0 | 6e 6f 64 65 73 2e 00 41 20 74 79 70 69 63 61 6c 20 70 72 6f 62 6c 65 6d 20 77 69 74 68 20 75 73 | nodes..A.typical.problem.with.us |
b07e0 | 69 6e 67 20 4e 41 54 20 61 6e 64 20 68 6f 73 74 69 6e 67 20 70 75 62 6c 69 63 20 73 65 72 76 65 | ing.NAT.and.hosting.public.serve |
b0800 | 72 73 20 69 73 20 74 68 65 20 61 62 69 6c 69 74 79 20 66 6f 72 20 69 6e 74 65 72 6e 61 6c 20 73 | rs.is.the.ability.for.internal.s |
b0820 | 79 73 74 65 6d 73 20 74 6f 20 72 65 61 63 68 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 73 65 72 76 | ystems.to.reach.an.internal.serv |
b0840 | 65 72 20 75 73 69 6e 67 20 69 74 27 73 20 65 78 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 | er.using.it's.external.IP.addres |
b0860 | 73 2e 20 54 68 65 20 73 6f 6c 75 74 69 6f 6e 20 74 6f 20 74 68 69 73 20 69 73 20 75 73 75 61 6c | s..The.solution.to.this.is.usual |
b0880 | 6c 79 20 74 68 65 20 75 73 65 20 6f 66 20 73 70 6c 69 74 2d 44 4e 53 20 74 6f 20 63 6f 72 72 65 | ly.the.use.of.split-DNS.to.corre |
b08a0 | 63 74 6c 79 20 70 6f 69 6e 74 20 68 6f 73 74 20 73 79 73 74 65 6d 73 20 74 6f 20 74 68 65 20 69 | ctly.point.host.systems.to.the.i |
b08c0 | 6e 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 20 77 68 65 6e 20 72 65 71 75 65 73 74 73 20 61 72 | nternal.address.when.requests.ar |
b08e0 | 65 20 6d 61 64 65 20 69 6e 74 65 72 6e 61 6c 6c 79 2e 20 42 65 63 61 75 73 65 20 6d 61 6e 79 20 | e.made.internally..Because.many. |
b0900 | 73 6d 61 6c 6c 65 72 20 6e 65 74 77 6f 72 6b 73 20 6c 61 63 6b 20 44 4e 53 20 69 6e 66 72 61 73 | smaller.networks.lack.DNS.infras |
b0920 | 74 72 75 63 74 75 72 65 2c 20 61 20 77 6f 72 6b 2d 61 72 6f 75 6e 64 20 69 73 20 63 6f 6d 6d 6f | tructure,.a.work-around.is.commo |
b0940 | 6e 6c 79 20 64 65 70 6c 6f 79 65 64 20 74 6f 20 66 61 63 69 6c 69 74 61 74 65 20 74 68 65 20 74 | nly.deployed.to.facilitate.the.t |
b0960 | 72 61 66 66 69 63 20 62 79 20 4e 41 54 69 6e 67 20 74 68 65 20 72 65 71 75 65 73 74 20 66 72 6f | raffic.by.NATing.the.request.fro |
b0980 | 6d 20 69 6e 74 65 72 6e 61 6c 20 68 6f 73 74 73 20 74 6f 20 74 68 65 20 73 6f 75 72 63 65 20 61 | m.internal.hosts.to.the.source.a |
b09a0 | 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 69 6e 74 65 72 66 61 63 65 | ddress.of.the.internal.interface |
b09c0 | 20 6f 6e 20 74 68 65 20 66 69 72 65 77 61 6c 6c 2e 00 41 20 75 73 65 72 20 66 72 69 65 6e 64 6c | .on.the.firewall..A.user.friendl |
b09e0 | 79 20 61 6c 69 61 73 20 66 6f 72 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 43 61 6e | y.alias.for.this.connection..Can |
b0a00 | 20 62 65 20 75 73 65 64 20 69 6e 73 74 65 61 64 20 6f 66 20 74 68 65 20 64 65 76 69 63 65 20 6e | .be.used.instead.of.the.device.n |
b0a20 | 61 6d 65 20 77 68 65 6e 20 63 6f 6e 6e 65 63 74 69 6e 67 2e 00 41 20 75 73 65 72 20 66 72 69 65 | ame.when.connecting..A.user.frie |
b0a40 | 6e 64 6c 79 20 64 65 73 63 72 69 70 74 69 6f 6e 20 69 64 65 6e 74 69 66 79 69 6e 67 20 74 68 65 | ndly.description.identifying.the |
b0a60 | 20 63 6f 6e 6e 65 63 74 65 64 20 70 65 72 69 70 68 65 72 61 6c 2e 00 41 20 76 61 6c 75 65 20 6f | .connected.peripheral..A.value.o |
b0a80 | 66 20 30 20 64 69 73 61 62 6c 65 73 20 41 52 50 20 6d 6f 6e 69 74 6f 72 69 6e 67 2e 20 54 68 65 | f.0.disables.ARP.monitoring..The |
b0aa0 | 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 30 2e 00 41 20 76 61 6c 75 65 20 6f 66 20 | .default.value.is.0..A.value.of. |
b0ac0 | 32 39 36 20 77 6f 72 6b 73 20 77 65 6c 6c 20 6f 6e 20 76 65 72 79 20 73 6c 6f 77 20 6c 69 6e 6b | 296.works.well.on.very.slow.link |
b0ae0 | 73 20 28 34 30 20 62 79 74 65 73 20 66 6f 72 20 54 43 50 2f 49 50 20 68 65 61 64 65 72 20 2b 20 | s.(40.bytes.for.TCP/IP.header.+. |
b0b00 | 32 35 36 20 62 79 74 65 73 20 6f 66 20 64 61 74 61 29 2e 00 41 20 76 65 72 79 20 73 6d 61 6c 6c | 256.bytes.of.data)..A.very.small |
b0b20 | 20 62 75 66 66 65 72 20 77 69 6c 6c 20 73 6f 6f 6e 20 73 74 61 72 74 20 64 72 6f 70 70 69 6e 67 | .buffer.will.soon.start.dropping |
b0b40 | 20 70 61 63 6b 65 74 73 2e 00 41 20 7a 6f 6e 65 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 | .packets..A.zone.must.be.configu |
b0b60 | 72 65 64 20 62 65 66 6f 72 65 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 73 73 69 67 | red.before.an.interface.is.assig |
b0b80 | 6e 65 64 20 74 6f 20 69 74 20 61 6e 64 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 62 | ned.to.it.and.an.interface.can.b |
b0ba0 | 65 20 61 73 73 69 67 6e 65 64 20 74 6f 20 6f 6e 6c 79 20 61 20 73 69 6e 67 6c 65 20 7a 6f 6e 65 | e.assigned.to.only.a.single.zone |
b0bc0 | 2e 00 41 43 4d 45 00 41 43 4d 45 20 44 69 72 65 63 74 6f 72 79 20 52 65 73 6f 75 72 63 65 20 55 | ..ACME.ACME.Directory.Resource.U |
b0be0 | 52 49 2e 00 41 50 49 00 41 52 50 00 41 62 6f 76 65 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 75 | RI..API.ARP.Above.command.will.u |
b0c00 | 73 65 20 60 31 30 2e 30 2e 30 2e 33 60 20 61 73 20 73 6f 75 72 63 65 20 49 50 76 34 20 61 64 64 | se.`10.0.0.3`.as.source.IPv4.add |
b0c20 | 72 65 73 73 20 66 6f 72 20 61 6c 6c 20 52 41 44 49 55 53 20 71 75 65 72 69 65 73 20 6f 6e 20 74 | ress.for.all.RADIUS.queries.on.t |
b0c40 | 68 69 73 20 4e 41 53 2e 00 41 62 6f 76 65 2c 20 63 6f 6d 6d 61 6e 64 20 73 79 6e 74 61 78 20 69 | his.NAS..Above,.command.syntax.i |
b0c60 | 73 6e 20 6e 6f 74 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 64 79 6e 61 6d 69 63 20 64 6e | sn.noted.to.configure.dynamic.dn |
b0c80 | 73 20 6f 6e 20 61 20 73 70 65 63 69 66 69 63 20 69 6e 74 65 72 66 61 63 65 2e 20 49 74 20 69 73 | s.on.a.specific.interface..It.is |
b0ca0 | 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 6f 76 65 72 6c 6f 6f 6b 20 74 68 65 20 61 64 64 69 74 69 | .possible.to.overlook.the.additi |
b0cc0 | 6f 6e 61 6c 20 61 64 64 72 65 73 73 20 6f 70 74 69 6f 6e 2c 20 77 65 62 2c 20 77 68 65 6e 20 63 | onal.address.option,.web,.when.c |
b0ce0 | 6f 6d 70 6c 65 74 65 69 6e 67 20 74 68 6f 73 65 20 63 6f 6d 6d 61 6e 64 73 2e 20 64 64 63 6c 69 | ompleteing.those.commands..ddcli |
b0d00 | 65 6e 74 5f 20 68 61 73 20 61 6e 6f 74 68 65 72 20 77 61 79 20 74 6f 20 64 65 74 65 72 6d 69 6e | ent_.has.another.way.to.determin |
b0d20 | 65 20 74 68 65 20 57 41 4e 20 49 50 20 61 64 64 72 65 73 73 2c 20 75 73 69 6e 67 20 61 20 77 65 | e.the.WAN.IP.address,.using.a.we |
b0d40 | 62 2d 62 61 73 65 64 20 75 72 6c 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 65 78 74 | b-based.url.to.determine.the.ext |
b0d60 | 65 72 6e 61 6c 20 49 50 2e 20 45 61 63 68 20 6f 66 20 74 68 65 20 63 6f 6d 6d 61 6e 64 73 20 61 | ernal.IP..Each.of.the.commands.a |
b0d80 | 62 6f 76 65 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 62 65 20 6d 6f 64 69 66 69 65 64 20 74 6f | bove.will.need.to.be.modified.to |
b0da0 | 20 75 73 65 20 27 77 65 62 27 20 61 73 20 74 68 65 20 27 69 6e 74 65 72 66 61 63 65 27 20 73 70 | .use.'web'.as.the.'interface'.sp |
b0dc0 | 65 63 69 66 69 65 64 20 69 66 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 69 73 | ecified.if.this.functionality.is |
b0de0 | 20 74 6f 20 62 65 20 75 74 69 6c 69 7a 65 64 2e 00 41 63 63 65 6c 65 72 61 74 69 6f 6e 00 41 63 | .to.be.utilized..Acceleration.Ac |
b0e00 | 63 65 70 74 20 53 53 48 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 6f 72 20 74 68 65 20 67 69 76 | cept.SSH.connections.for.the.giv |
b0e20 | 65 6e 20 60 3c 64 65 76 69 63 65 3e 60 20 6f 6e 20 54 43 50 20 70 6f 72 74 20 60 3c 70 6f 72 74 | en.`<device>`.on.TCP.port.`<port |
b0e40 | 3e 60 2e 20 41 66 74 65 72 20 73 75 63 63 65 73 73 66 75 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 | >`..After.successfull.authentica |
b0e60 | 74 69 6f 6e 20 74 68 65 20 75 73 65 72 20 77 69 6c 6c 20 62 65 20 64 69 72 65 63 74 6c 79 20 64 | tion.the.user.will.be.directly.d |
b0e80 | 72 6f 70 70 65 64 20 74 6f 20 74 68 65 20 63 6f 6e 6e 65 63 74 65 64 20 73 65 72 69 61 6c 20 64 | ropped.to.the.connected.serial.d |
b0ea0 | 65 76 69 63 65 2e 00 41 63 63 65 70 74 20 6f 6e 6c 79 20 63 65 72 74 61 69 6e 20 70 72 6f 74 6f | evice..Accept.only.certain.proto |
b0ec0 | 63 6f 6c 73 3a 20 59 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 72 65 70 6c 69 63 61 74 65 20 | cols:.You.may.want.to.replicate. |
b0ee0 | 74 68 65 20 73 74 61 74 65 20 6f 66 20 66 6c 6f 77 73 20 64 65 70 65 6e 64 69 6e 67 20 6f 6e 20 | the.state.of.flows.depending.on. |
b0f00 | 74 68 65 69 72 20 6c 61 79 65 72 20 34 20 70 72 6f 74 6f 63 6f 6c 2e 00 41 63 63 65 70 74 20 70 | their.layer.4.protocol..Accept.p |
b0f20 | 65 65 72 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 2e 20 42 79 20 64 65 66 | eer.interface.identifier..By.def |
b0f40 | 61 75 6c 74 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e 00 41 63 63 65 70 74 61 62 6c 65 20 | ault.is.not.defined..Acceptable. |
b0f60 | 72 61 74 65 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 28 65 2e 67 2e 20 31 2f 6d 69 6e 2c | rate.of.connections.(e.g..1/min, |
b0f80 | 20 36 30 2f 73 65 63 29 00 41 63 63 65 73 73 20 4c 69 73 74 20 50 6f 6c 69 63 79 00 41 63 63 65 | .60/sec).Access.List.Policy.Acce |
b0fa0 | 73 73 20 4c 69 73 74 73 00 41 63 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 74 61 6b 65 6e 20 69 6d | ss.Lists.Action.must.be.taken.im |
b0fc0 | 6d 65 64 69 61 74 65 6c 79 20 2d 20 41 20 63 6f 6e 64 69 74 69 6f 6e 20 74 68 61 74 20 73 68 6f | mediately.-.A.condition.that.sho |
b0fe0 | 75 6c 64 20 62 65 20 63 6f 72 72 65 63 74 65 64 20 69 6d 6d 65 64 69 61 74 65 6c 79 2c 20 73 75 | uld.be.corrected.immediately,.su |
b1000 | 63 68 20 61 73 20 61 20 63 6f 72 72 75 70 74 65 64 20 73 79 73 74 65 6d 20 64 61 74 61 62 61 73 | ch.as.a.corrupted.system.databas |
b1020 | 65 2e 00 41 63 74 69 6f 6e 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 72 75 6e 20 6f 6e 63 65 | e..Action.which.will.be.run.once |
b1040 | 20 74 68 65 20 63 74 72 6c 2d 61 6c 74 2d 64 65 6c 20 6b 65 79 73 74 72 6f 6b 65 20 69 73 20 72 | .the.ctrl-alt-del.keystroke.is.r |
b1060 | 65 63 65 69 76 65 64 2e 00 41 63 74 69 6f 6e 73 00 41 63 74 69 76 65 20 44 69 72 65 63 74 6f 72 | eceived..Actions.Active.Director |
b1080 | 79 00 41 63 74 69 76 65 20 68 65 61 6c 74 68 20 63 68 65 63 6b 20 62 61 63 6b 65 6e 64 20 73 65 | y.Active.health.check.backend.se |
b10a0 | 72 76 65 72 00 41 64 64 20 4e 54 41 20 28 6e 65 67 61 74 69 76 65 20 74 72 75 73 74 20 61 6e 63 | rver.Add.NTA.(negative.trust.anc |
b10c0 | 68 6f 72 29 20 66 6f 72 20 74 68 69 73 20 64 6f 6d 61 69 6e 2e 20 54 68 69 73 20 6d 75 73 74 20 | hor).for.this.domain..This.must. |
b10e0 | 62 65 20 73 65 74 20 69 66 20 74 68 65 20 64 6f 6d 61 69 6e 20 64 6f 65 73 20 6e 6f 74 20 73 75 | be.set.if.the.domain.does.not.su |
b1100 | 70 70 6f 72 74 20 44 4e 53 53 45 43 2e 00 41 64 64 20 50 6f 77 65 72 20 43 6f 6e 73 74 72 61 69 | pport.DNSSEC..Add.Power.Constrai |
b1120 | 6e 74 20 65 6c 65 6d 65 6e 74 20 74 6f 20 42 65 61 63 6f 6e 20 61 6e 64 20 50 72 6f 62 65 20 52 | nt.element.to.Beacon.and.Probe.R |
b1140 | 65 73 70 6f 6e 73 65 20 66 72 61 6d 65 73 2e 00 41 64 64 20 61 20 66 6f 72 77 61 72 64 69 6e 67 | esponse.frames..Add.a.forwarding |
b1160 | 20 72 75 6c 65 20 6d 61 74 63 68 69 6e 67 20 55 44 50 20 70 6f 72 74 20 6f 6e 20 79 6f 75 72 20 | .rule.matching.UDP.port.on.your. |
b1180 | 69 6e 74 65 72 6e 65 74 20 72 6f 75 74 65 72 2e 00 41 64 64 20 61 20 68 6f 73 74 20 64 65 76 69 | internet.router..Add.a.host.devi |
b11a0 | 63 65 20 74 6f 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 2e 00 41 64 64 20 61 63 63 65 73 73 2d | ce.to.the.container..Add.access- |
b11c0 | 63 6f 6e 74 72 6f 6c 20 64 69 72 65 63 74 69 76 65 20 74 6f 20 61 6c 6c 6f 77 20 6f 72 20 64 65 | control.directive.to.allow.or.de |
b11e0 | 6e 79 20 75 73 65 72 73 20 61 6e 64 20 67 72 6f 75 70 73 2e 20 44 69 72 65 63 74 69 76 65 73 20 | ny.users.and.groups..Directives. |
b1200 | 61 72 65 20 70 72 6f 63 65 73 73 65 64 20 69 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f | are.processed.in.the.following.o |
b1220 | 72 64 65 72 20 6f 66 20 70 72 65 63 65 64 65 6e 63 65 3a 20 60 60 64 65 6e 79 2d 75 73 65 72 73 | rder.of.precedence:.``deny-users |
b1240 | 60 60 2c 20 60 60 61 6c 6c 6f 77 2d 75 73 65 72 73 60 60 2c 20 60 60 64 65 6e 79 2d 67 72 6f 75 | ``,.``allow-users``,.``deny-grou |
b1260 | 70 73 60 60 20 61 6e 64 20 60 60 61 6c 6c 6f 77 2d 67 72 6f 75 70 73 60 60 2e 00 41 64 64 20 63 | ps``.and.``allow-groups``..Add.c |
b1280 | 75 73 74 6f 6d 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 76 61 72 69 61 62 6c 65 73 2e 20 4d 75 6c | ustom.environment.variables..Mul |
b12a0 | 74 69 70 6c 65 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 76 61 72 69 61 62 6c 65 73 20 61 72 65 20 | tiple.environment.variables.are. |
b12c0 | 61 6c 6c 6f 77 65 64 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 | allowed..The.following.commands. |
b12e0 | 74 72 61 6e 73 6c 61 74 65 20 74 6f 20 22 2d 65 20 6b 65 79 3d 76 61 6c 75 65 22 20 77 68 65 6e | translate.to."-e.key=value".when |
b1300 | 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 69 73 20 63 72 65 61 74 65 64 2e 00 41 64 64 20 64 | .the.container.is.created..Add.d |
b1320 | 65 66 61 75 6c 74 20 72 6f 75 74 65 73 20 66 6f 72 20 72 6f 75 74 69 6e 67 20 60 60 74 61 62 6c | efault.routes.for.routing.``tabl |
b1340 | 65 20 31 30 60 60 20 61 6e 64 20 60 60 74 61 62 6c 65 20 31 31 60 60 00 41 64 64 20 6d 75 6c 74 | e.10``.and.``table.11``.Add.mult |
b1360 | 69 70 6c 65 20 73 6f 75 72 63 65 20 49 50 20 69 6e 20 6f 6e 65 20 72 75 6c 65 20 77 69 74 68 20 | iple.source.IP.in.one.rule.with. |
b1380 | 73 61 6d 65 20 70 72 69 6f 72 69 74 79 00 41 64 64 20 6e 65 77 20 70 6f 72 74 20 74 6f 20 53 53 | same.priority.Add.new.port.to.SS |
b13a0 | 4c 2d 70 6f 72 74 73 20 61 63 6c 2e 20 50 6f 72 74 73 20 69 6e 63 6c 75 64 65 64 20 62 79 20 64 | L-ports.acl..Ports.included.by.d |
b13c0 | 65 66 61 75 6c 74 20 69 6e 20 53 53 4c 2d 70 6f 72 74 73 20 61 63 6c 3a 20 34 34 33 00 41 64 64 | efault.in.SSL-ports.acl:.443.Add |
b13e0 | 20 6e 65 77 20 70 6f 72 74 20 74 6f 20 53 61 66 65 2d 70 6f 72 74 73 20 61 63 6c 2e 20 50 6f 72 | .new.port.to.Safe-ports.acl..Por |
b1400 | 74 73 20 69 6e 63 6c 75 64 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 69 6e 20 53 61 66 65 2d 70 | ts.included.by.default.in.Safe-p |
b1420 | 6f 72 74 73 20 61 63 6c 3a 20 32 31 2c 20 37 30 2c 20 38 30 2c 20 32 31 30 2c 20 32 38 30 2c 20 | orts.acl:.21,.70,.80,.210,.280,. |
b1440 | 34 34 33 2c 20 34 38 38 2c 20 35 39 31 2c 20 37 37 37 2c 20 38 37 33 2c 20 31 30 32 35 2d 36 35 | 443,.488,.591,.777,.873,.1025-65 |
b1460 | 35 33 35 00 41 64 64 20 6f 72 20 72 65 70 6c 61 63 65 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 79 | 535.Add.or.replace.BGP.community |
b1480 | 20 61 74 74 72 69 62 75 74 65 20 69 6e 20 66 6f 72 6d 61 74 20 60 60 3c 30 2d 36 35 35 33 35 3a | .attribute.in.format.``<0-65535: |
b14a0 | 30 2d 36 35 35 33 35 3e 60 60 20 6f 72 20 66 72 6f 6d 20 77 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f | 0-65535>``.or.from.well-known.co |
b14c0 | 6d 6d 75 6e 69 74 79 20 6c 69 73 74 00 41 64 64 20 6f 72 20 72 65 70 6c 61 63 65 20 42 47 50 20 | mmunity.list.Add.or.replace.BGP. |
b14e0 | 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 20 61 74 74 72 69 62 75 74 65 20 69 6e 20 66 6f 72 | large-community.attribute.in.for |
b1500 | 6d 61 74 20 60 60 3c 30 2d 34 32 39 34 39 36 37 32 39 35 3a 30 2d 34 32 39 34 39 36 37 32 39 35 | mat.``<0-4294967295:0-4294967295 |
b1520 | 3a 30 2d 34 32 39 34 39 36 37 32 39 35 3e 60 60 00 41 64 64 20 70 6f 6c 69 63 79 20 72 6f 75 74 | :0-4294967295>``.Add.policy.rout |
b1540 | 65 20 6d 61 74 63 68 69 6e 67 20 56 4c 41 4e 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 65 73 | e.matching.VLAN.source.addresses |
b1560 | 00 41 64 64 20 70 75 62 6c 69 63 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 | .Add.public.key.portion.for.the. |
b1580 | 63 65 72 74 69 66 69 63 61 74 65 20 6e 61 6d 65 64 20 60 6e 61 6d 65 60 20 74 6f 20 74 68 65 20 | certificate.named.`name`.to.the. |
b15a0 | 56 79 4f 53 20 43 4c 49 2e 00 41 64 64 20 74 68 65 20 43 41 73 20 70 72 69 76 61 74 65 20 6b 65 | VyOS.CLI..Add.the.CAs.private.ke |
b15c0 | 79 20 74 6f 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2e 20 54 68 69 73 20 73 68 6f 75 6c 64 20 6e | y.to.the.VyOS.CLI..This.should.n |
b15e0 | 65 76 65 72 20 6c 65 61 76 65 20 74 68 65 20 73 79 73 74 65 6d 2c 20 61 6e 64 20 69 73 20 6f 6e | ever.leave.the.system,.and.is.on |
b1600 | 6c 79 20 72 65 71 75 69 72 65 64 20 69 66 20 79 6f 75 20 75 73 65 20 56 79 4f 53 20 61 73 20 79 | ly.required.if.you.use.VyOS.as.y |
b1620 | 6f 75 72 20 63 65 72 74 69 66 69 63 61 74 65 20 67 65 6e 65 72 61 74 6f 72 20 61 73 20 6d 65 6e | our.certificate.generator.as.men |
b1640 | 74 69 6f 6e 65 64 20 61 62 6f 76 65 2e 00 41 64 64 20 74 68 65 20 63 6f 6d 6d 61 6e 64 73 20 66 | tioned.above..Add.the.commands.f |
b1660 | 72 6f 6d 20 53 6e 69 70 70 65 74 20 69 6e 20 74 68 65 20 57 69 6e 64 6f 77 73 20 73 69 64 65 20 | rom.Snippet.in.the.Windows.side. |
b1680 | 76 69 61 20 50 6f 77 65 72 53 68 65 6c 6c 2e 20 41 6c 73 6f 20 69 6d 70 6f 72 74 20 74 68 65 20 | via.PowerShell..Also.import.the. |
b16a0 | 72 6f 6f 74 20 43 41 20 63 65 72 74 20 74 6f 20 74 68 65 20 57 69 6e 64 6f 77 73 20 e2 80 9c 54 | root.CA.cert.to.the.Windows....T |
b16c0 | 72 75 73 74 65 64 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 69 6f 6e 20 41 75 74 68 6f 72 | rusted.Root.Certification.Author |
b16e0 | 69 74 69 65 73 e2 80 9d 20 61 6e 64 20 65 73 74 61 62 6c 69 73 68 20 74 68 65 20 63 6f 6e 6e 65 | ities....and.establish.the.conne |
b1700 | 63 74 69 6f 6e 2e 00 41 64 64 20 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 70 6f 72 74 69 | ction..Add.the.private.key.porti |
b1720 | 6f 6e 20 6f 66 20 74 68 69 73 20 63 65 72 74 69 66 69 63 61 74 65 20 74 6f 20 74 68 65 20 43 4c | on.of.this.certificate.to.the.CL |
b1740 | 49 2e 20 54 68 69 73 20 73 68 6f 75 6c 64 20 6e 65 76 65 72 20 6c 65 61 76 65 20 74 68 65 20 73 | I..This.should.never.leave.the.s |
b1760 | 79 73 74 65 6d 20 61 73 20 69 74 20 69 73 20 75 73 65 64 20 74 6f 20 64 65 63 72 79 70 74 20 74 | ystem.as.it.is.used.to.decrypt.t |
b1780 | 68 65 20 64 61 74 61 2e 00 41 64 64 20 74 68 65 20 70 75 62 6c 69 63 20 43 41 20 63 65 72 74 69 | he.data..Add.the.public.CA.certi |
b17a0 | 66 69 63 61 74 65 20 66 6f 72 20 74 68 65 20 43 41 20 6e 61 6d 65 64 20 60 6e 61 6d 65 60 20 74 | ficate.for.the.CA.named.`name`.t |
b17c0 | 6f 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2e 00 41 64 64 69 6e 67 20 61 20 32 46 41 20 77 69 74 | o.the.VyOS.CLI..Adding.a.2FA.wit |
b17e0 | 68 20 61 6e 20 4f 54 50 2d 6b 65 79 00 41 64 64 69 74 69 6f 6e 61 6c 20 67 6c 6f 62 61 6c 20 70 | h.an.OTP-key.Additional.global.p |
b1800 | 61 72 61 6d 65 74 65 72 73 20 61 72 65 20 73 65 74 2c 20 69 6e 63 6c 75 64 69 6e 67 20 74 68 65 | arameters.are.set,.including.the |
b1820 | 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6c 69 6d 69 74 | .maximum.number.connection.limit |
b1840 | 20 6f 66 20 34 30 30 30 20 61 6e 64 20 61 20 6d 69 6e 69 6d 75 6d 20 54 4c 53 20 76 65 72 73 69 | .of.4000.and.a.minimum.TLS.versi |
b1860 | 6f 6e 20 6f 66 20 31 2e 33 2e 00 41 64 64 69 74 69 6f 6e 61 6c 20 6f 70 74 69 6f 6e 20 74 6f 20 | on.of.1.3..Additional.option.to. |
b1880 | 72 75 6e 20 54 46 54 50 20 73 65 72 76 65 72 20 69 6e 20 74 68 65 20 3a 61 62 62 72 3a 60 56 52 | run.TFTP.server.in.the.:abbr:`VR |
b18a0 | 46 20 28 56 69 72 74 75 61 6c 20 52 6f 75 74 69 6e 67 20 61 6e 64 20 46 6f 72 77 61 72 64 69 6e | F.(Virtual.Routing.and.Forwardin |
b18c0 | 67 29 60 20 63 6f 6e 74 65 78 74 00 41 64 64 69 74 69 6f 6e 61 6c 6c 79 20 79 6f 75 20 73 68 6f | g)`.context.Additionally.you.sho |
b18e0 | 75 6c 64 20 6b 65 65 70 20 69 6e 20 6d 69 6e 64 20 74 68 61 74 20 74 68 69 73 20 66 65 61 74 75 | uld.keep.in.mind.that.this.featu |
b1900 | 72 65 20 66 75 6e 64 61 6d 65 6e 74 61 6c 6c 79 20 64 69 73 61 62 6c 65 73 20 74 68 65 20 61 62 | re.fundamentally.disables.the.ab |
b1920 | 69 6c 69 74 79 20 74 6f 20 75 73 65 20 77 69 64 65 6c 79 20 64 65 70 6c 6f 79 65 64 20 42 47 50 | ility.to.use.widely.deployed.BGP |
b1940 | 20 66 65 61 74 75 72 65 73 2e 20 42 47 50 20 75 6e 6e 75 6d 62 65 72 65 64 2c 20 68 6f 73 74 6e | .features..BGP.unnumbered,.hostn |
b1960 | 61 6d 65 20 73 75 70 70 6f 72 74 2c 20 41 53 34 2c 20 41 64 64 70 61 74 68 2c 20 52 6f 75 74 65 | ame.support,.AS4,.Addpath,.Route |
b1980 | 20 52 65 66 72 65 73 68 2c 20 4f 52 46 2c 20 44 79 6e 61 6d 69 63 20 43 61 70 61 62 69 6c 69 74 | .Refresh,.ORF,.Dynamic.Capabilit |
b19a0 | 69 65 73 2c 20 61 6e 64 20 67 72 61 63 65 66 75 6c 20 72 65 73 74 61 72 74 2e 00 41 64 64 69 74 | ies,.and.graceful.restart..Addit |
b19c0 | 69 6f 6e 61 6c 6c 79 2c 20 65 61 63 68 20 63 6c 69 65 6e 74 20 6e 65 65 64 73 20 61 20 63 6f 70 | ionally,.each.client.needs.a.cop |
b19e0 | 79 20 6f 66 20 63 61 20 63 65 72 74 20 61 6e 64 20 69 74 73 20 6f 77 6e 20 63 6c 69 65 6e 74 20 | y.of.ca.cert.and.its.own.client. |
b1a00 | 6b 65 79 20 61 6e 64 20 63 65 72 74 20 66 69 6c 65 73 2e 20 54 68 65 20 66 69 6c 65 73 20 61 72 | key.and.cert.files..The.files.ar |
b1a20 | 65 20 70 6c 61 69 6e 74 65 78 74 20 73 6f 20 74 68 65 79 20 6d 61 79 20 62 65 20 63 6f 70 69 65 | e.plaintext.so.they.may.be.copie |
b1a40 | 64 20 65 69 74 68 65 72 20 6d 61 6e 75 61 6c 6c 79 20 66 72 6f 6d 20 74 68 65 20 43 4c 49 2e 20 | d.either.manually.from.the.CLI.. |
b1a60 | 43 6c 69 65 6e 74 20 6b 65 79 20 61 6e 64 20 63 65 72 74 20 66 69 6c 65 73 20 73 68 6f 75 6c 64 | Client.key.and.cert.files.should |
b1a80 | 20 62 65 20 73 69 67 6e 65 64 20 77 69 74 68 20 74 68 65 20 70 72 6f 70 65 72 20 63 61 20 63 65 | .be.signed.with.the.proper.ca.ce |
b1aa0 | 72 74 20 61 6e 64 20 67 65 6e 65 72 61 74 65 64 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 20 73 | rt.and.generated.on.the.server.s |
b1ac0 | 69 64 65 2e 00 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 77 65 20 77 61 6e 74 20 74 6f 20 75 73 | ide..Additionally,.we.want.to.us |
b1ae0 | 65 20 56 50 4e 73 20 6f 6e 6c 79 20 6f 6e 20 6f 75 72 20 65 74 68 31 20 69 6e 74 65 72 66 61 63 | e.VPNs.only.on.our.eth1.interfac |
b1b00 | 65 20 28 74 68 65 20 65 78 74 65 72 6e 61 6c 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 74 68 65 | e.(the.external.interface.in.the |
b1b20 | 20 69 6d 61 67 65 20 61 62 6f 76 65 29 00 41 64 64 72 65 73 73 00 41 64 64 72 65 73 73 20 43 6f | .image.above).Address.Address.Co |
b1b40 | 6e 76 65 72 73 69 6f 6e 00 41 64 64 72 65 73 73 20 46 61 6d 69 6c 69 65 73 00 41 64 64 72 65 73 | nversion.Address.Families.Addres |
b1b60 | 73 20 47 72 6f 75 70 73 00 41 64 64 72 65 73 73 20 70 6f 6f 6c 20 73 68 61 6c 6c 20 62 65 20 60 | s.Groups.Address.pool.shall.be.` |
b1b80 | 60 32 30 30 31 3a 64 62 38 3a 3a 31 30 30 60 60 20 74 68 72 6f 75 67 68 20 60 60 32 30 30 31 3a | `2001:db8::100``.through.``2001: |
b1ba0 | 64 62 38 3a 3a 31 39 39 60 60 2e 00 41 64 64 72 65 73 73 20 70 6f 6f 6c 73 00 41 64 64 72 65 73 | db8::199``..Address.pools.Addres |
b1bc0 | 73 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f 72 20 48 54 54 50 53 20 72 65 71 75 65 73 74 73 00 41 | s.to.listen.for.HTTPS.requests.A |
b1be0 | 64 64 73 20 72 65 67 69 73 74 72 79 20 74 6f 20 6c 69 73 74 20 6f 66 20 75 6e 71 75 61 6c 69 66 | dds.registry.to.list.of.unqualif |
b1c00 | 69 65 64 2d 73 65 61 72 63 68 2d 72 65 67 69 73 74 72 69 65 73 2e 20 42 79 20 64 65 66 61 75 6c | ied-search-registries..By.defaul |
b1c20 | 74 2c 20 66 6f 72 20 61 6e 79 20 69 6d 61 67 65 20 74 68 61 74 20 64 6f 65 73 20 6e 6f 74 20 69 | t,.for.any.image.that.does.not.i |
b1c40 | 6e 63 6c 75 64 65 20 74 68 65 20 72 65 67 69 73 74 72 79 20 69 6e 20 74 68 65 20 69 6d 61 67 65 | nclude.the.registry.in.the.image |
b1c60 | 20 6e 61 6d 65 2c 20 56 79 4f 53 20 77 69 6c 6c 20 75 73 65 20 64 6f 63 6b 65 72 2e 69 6f 20 61 | .name,.VyOS.will.use.docker.io.a |
b1c80 | 6e 64 20 71 75 61 79 2e 69 6f 20 61 73 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 | nd.quay.io.as.the.container.regi |
b1ca0 | 73 74 72 79 2e 00 41 64 64 73 20 72 65 67 69 73 74 72 79 20 74 6f 20 6c 69 73 74 20 6f 66 20 75 | stry..Adds.registry.to.list.of.u |
b1cc0 | 6e 71 75 61 6c 69 66 69 65 64 2d 73 65 61 72 63 68 2d 72 65 67 69 73 74 72 69 65 73 2e 20 42 79 | nqualified-search-registries..By |
b1ce0 | 20 64 65 66 61 75 6c 74 2c 20 66 6f 72 20 61 6e 79 20 69 6d 61 67 65 20 74 68 61 74 20 64 6f 65 | .default,.for.any.image.that.doe |
b1d00 | 73 20 6e 6f 74 20 69 6e 63 6c 75 64 65 20 74 68 65 20 72 65 67 69 73 74 72 79 20 69 6e 20 74 68 | s.not.include.the.registry.in.th |
b1d20 | 65 20 69 6d 61 67 65 20 6e 61 6d 65 2c 20 56 79 6f 73 20 77 69 6c 6c 20 75 73 65 20 64 6f 63 6b | e.image.name,.Vyos.will.use.dock |
b1d40 | 65 72 2e 69 6f 20 61 73 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 73 74 72 79 2e | er.io.as.the.container.registry. |
b1d60 | 00 41 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 44 69 73 74 61 6e 63 65 00 41 64 76 61 6e 63 65 | .Administrative.Distance.Advance |
b1d80 | 64 20 49 6e 74 65 72 66 61 63 65 20 4f 70 74 69 6f 6e 73 00 41 64 76 61 6e 63 65 64 20 4f 70 74 | d.Interface.Options.Advanced.Opt |
b1da0 | 69 6f 6e 73 00 41 64 76 61 6e 63 65 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 61 6e 20 | ions.Advanced.configuration.can. |
b1dc0 | 62 65 20 75 73 65 64 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 61 70 70 6c 79 20 73 6f 75 72 63 65 | be.used.in.order.to.apply.source |
b1de0 | 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 4e 41 54 2c 20 61 6e 64 20 77 69 74 68 69 6e 20 | .or.destination.NAT,.and.within. |
b1e00 | 61 20 73 69 6e 67 6c 65 20 72 75 6c 65 2c 20 62 65 20 61 62 6c 65 20 74 6f 20 64 65 66 69 6e 65 | a.single.rule,.be.able.to.define |
b1e20 | 20 6d 75 6c 74 69 70 6c 65 20 74 72 61 6e 73 6c 61 74 65 64 20 61 64 64 72 65 73 73 65 73 2c 20 | .multiple.translated.addresses,. |
b1e40 | 73 6f 20 4e 41 54 20 62 61 6c 61 6e 63 65 73 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 73 | so.NAT.balances.the.translations |
b1e60 | 20 61 6d 6f 6e 67 20 74 68 65 6d 2e 00 41 64 76 61 6e 74 61 67 65 73 20 6f 66 20 4f 70 65 6e 56 | .among.them..Advantages.of.OpenV |
b1e80 | 50 4e 20 61 72 65 3a 00 41 64 76 65 72 74 69 73 65 20 44 4e 53 20 73 65 72 76 65 72 20 70 65 72 | PN.are:.Advertise.DNS.server.per |
b1ea0 | 20 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 | .https://tools.ietf.org/html/rfc |
b1ec0 | 36 31 30 36 00 41 64 76 65 72 74 69 73 69 6e 67 20 61 20 4e 41 54 36 34 20 50 72 65 66 69 78 00 | 6106.Advertising.a.NAT64.Prefix. |
b1ee0 | 41 64 76 65 72 74 69 73 69 6e 67 20 61 20 50 72 65 66 69 78 00 41 66 74 65 72 20 63 6f 6d 6d 69 | Advertising.a.Prefix.After.commi |
b1f00 | 74 20 74 68 65 20 70 6c 61 69 6e 74 65 78 74 20 70 61 73 73 77 6f 72 64 73 20 77 69 6c 6c 20 62 | t.the.plaintext.passwords.will.b |
b1f20 | 65 20 68 61 73 68 65 64 20 61 6e 64 20 73 74 6f 72 65 64 20 69 6e 20 79 6f 75 72 20 63 6f 6e 66 | e.hashed.and.stored.in.your.conf |
b1f40 | 69 67 75 72 61 74 69 6f 6e 2e 20 54 68 65 20 72 65 73 75 6c 74 69 6e 67 20 43 4c 49 20 63 6f 6e | iguration..The.resulting.CLI.con |
b1f60 | 66 69 67 20 77 69 6c 6c 20 6c 6f 6f 6b 20 6c 69 6b 65 3a 00 41 66 74 65 72 20 63 6f 6d 6d 69 74 | fig.will.look.like:.After.commit |
b1f80 | 74 69 6e 67 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 65 20 63 61 6e 20 76 65 | ting.the.configuration.we.can.ve |
b1fa0 | 72 69 66 79 20 61 6c 6c 20 6c 65 61 6b 65 64 20 72 6f 75 74 65 73 20 61 72 65 20 69 6e 73 74 61 | rify.all.leaked.routes.are.insta |
b1fc0 | 6c 6c 65 64 2c 20 61 6e 64 20 74 72 79 20 74 6f 20 49 43 4d 50 20 70 69 6e 67 20 50 43 31 20 66 | lled,.and.try.to.ICMP.ping.PC1.f |
b1fe0 | 72 6f 6d 20 50 43 33 2e 00 41 66 74 65 72 20 74 68 65 20 50 4b 49 20 63 65 72 74 73 20 61 72 65 | rom.PC3..After.the.PKI.certs.are |
b2000 | 20 61 6c 6c 20 73 65 74 20 75 70 20 77 65 20 63 61 6e 20 73 74 61 72 74 20 63 6f 6e 66 69 67 75 | .all.set.up.we.can.start.configu |
b2020 | 72 69 6e 67 20 6f 75 72 20 49 50 53 65 63 2f 49 4b 45 20 70 72 6f 70 6f 73 61 6c 73 20 75 73 65 | ring.our.IPSec/IKE.proposals.use |
b2040 | 64 20 66 6f 72 20 6b 65 79 2d 65 78 63 68 61 6e 67 65 20 65 6e 64 20 64 61 74 61 20 65 6e 63 72 | d.for.key-exchange.end.data.encr |
b2060 | 79 70 74 69 6f 6e 2e 20 54 68 65 20 75 73 65 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 69 70 68 | yption..The.used.encryption.ciph |
b2080 | 65 72 73 20 61 6e 64 20 69 6e 74 65 67 72 69 74 79 20 61 6c 67 6f 72 69 74 68 6d 73 20 76 61 72 | ers.and.integrity.algorithms.var |
b20a0 | 79 20 66 72 6f 6d 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d 20 74 6f 20 6f 70 65 72 61 | y.from.operating.system.to.opera |
b20c0 | 74 69 6e 67 20 73 79 73 74 65 6d 2e 20 54 68 65 20 6f 6e 65 73 20 75 73 65 64 20 69 6e 20 74 68 | ting.system..The.ones.used.in.th |
b20e0 | 69 73 20 65 78 61 6d 70 6c 65 20 61 72 65 20 76 61 6c 69 64 61 74 65 64 20 74 6f 20 77 6f 72 6b | is.example.are.validated.to.work |
b2100 | 20 6f 6e 20 57 69 6e 64 6f 77 73 20 31 30 2e 00 41 66 74 65 72 20 74 68 65 20 50 4b 49 20 63 65 | .on.Windows.10..After.the.PKI.ce |
b2120 | 72 74 73 20 61 72 65 20 61 6c 6c 20 73 65 74 20 75 70 20 77 65 20 63 61 6e 20 73 74 61 72 74 20 | rts.are.all.set.up.we.can.start. |
b2140 | 63 6f 6e 66 69 67 75 72 69 6e 67 20 6f 75 72 20 49 50 53 65 63 2f 49 4b 45 20 70 72 6f 70 6f 73 | configuring.our.IPSec/IKE.propos |
b2160 | 61 6c 73 20 75 73 65 64 20 66 6f 72 20 6b 65 79 2d 65 78 63 68 61 6e 67 65 20 65 6e 64 20 64 61 | als.used.for.key-exchange.end.da |
b2180 | 74 61 20 65 6e 63 72 79 70 74 69 6f 6e 2e 20 54 68 65 20 75 73 65 64 20 65 6e 63 72 79 70 74 69 | ta.encryption..The.used.encrypti |
b21a0 | 6f 6e 20 63 69 70 68 65 72 73 20 61 6e 64 20 69 6e 74 65 67 72 69 74 79 20 61 6c 67 6f 72 69 74 | on.ciphers.and.integrity.algorit |
b21c0 | 68 6d 73 20 76 61 72 79 20 66 72 6f 6d 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d 20 74 | hms.vary.from.operating.system.t |
b21e0 | 6f 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d 2e 20 54 68 65 20 6f 6e 65 73 20 75 73 65 | o.operating.system..The.ones.use |
b2200 | 64 20 69 6e 20 74 68 69 73 20 70 6f 73 74 20 61 72 65 20 76 61 6c 69 64 61 74 65 64 20 74 6f 20 | d.in.this.post.are.validated.to. |
b2220 | 77 6f 72 6b 20 6f 6e 20 62 6f 74 68 20 57 69 6e 64 6f 77 73 20 31 30 20 61 6e 64 20 69 4f 53 2f | work.on.both.Windows.10.and.iOS/ |
b2240 | 69 50 61 64 4f 53 20 31 34 20 74 6f 20 31 37 2e 00 41 66 74 65 72 20 77 65 20 68 61 76 65 20 69 | iPadOS.14.to.17..After.we.have.i |
b2260 | 6d 70 6f 72 74 65 64 20 74 68 65 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 28 73 29 20 77 65 | mported.the.CA.certificate(s).we |
b2280 | 20 63 61 6e 20 6e 6f 77 20 69 6d 70 6f 72 74 20 61 6e 64 20 61 64 64 20 63 65 72 74 69 66 69 63 | .can.now.import.and.add.certific |
b22a0 | 61 74 65 73 20 75 73 65 64 20 62 79 20 73 65 72 76 69 63 65 73 20 6f 6e 20 74 68 69 73 20 72 6f | ates.used.by.services.on.this.ro |
b22c0 | 75 74 65 72 2e 00 41 66 74 65 72 20 79 6f 75 20 6f 62 74 61 69 6e 65 64 20 79 6f 75 72 20 73 65 | uter..After.you.obtained.your.se |
b22e0 | 72 76 65 72 20 63 65 72 74 69 66 69 63 61 74 65 20 79 6f 75 20 63 61 6e 20 69 6d 70 6f 72 74 20 | rver.certificate.you.can.import. |
b2300 | 69 74 20 66 72 6f 6d 20 61 20 66 69 6c 65 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 66 69 6c 65 | it.from.a.file.on.the.local.file |
b2320 | 73 79 73 74 65 6d 2c 20 6f 72 20 70 61 73 74 65 20 69 74 20 69 6e 74 6f 20 74 68 65 20 43 4c 49 | system,.or.paste.it.into.the.CLI |
b2340 | 2e 20 50 6c 65 61 73 65 20 6e 6f 74 65 20 74 68 61 74 20 77 68 65 6e 20 65 6e 74 65 72 69 6e 67 | ..Please.note.that.when.entering |
b2360 | 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 6d 61 6e 75 61 6c 6c 79 20 79 6f 75 20 6e 65 | .the.certificate.manually.you.ne |
b2380 | 65 64 20 74 6f 20 73 74 72 69 70 20 74 68 65 20 60 60 2d 2d 2d 2d 2d 42 45 47 49 4e 20 4b 45 59 | ed.to.strip.the.``-----BEGIN.KEY |
b23a0 | 2d 2d 2d 2d 2d 60 60 20 61 6e 64 20 60 60 2d 2d 2d 2d 2d 45 4e 44 20 4b 45 59 2d 2d 2d 2d 2d 60 | -----``.and.``-----END.KEY-----` |
b23c0 | 60 20 74 61 67 73 2e 20 41 6c 73 6f 2c 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 6f 72 | `.tags..Also,.the.certificate.or |
b23e0 | 20 6b 65 79 20 6e 65 65 64 73 20 74 6f 20 62 65 20 70 72 65 73 65 6e 74 65 64 20 69 6e 20 61 20 | .key.needs.to.be.presented.in.a. |
b2400 | 73 69 6e 67 6c 65 20 6c 69 6e 65 20 77 69 74 68 6f 75 74 20 6c 69 6e 65 20 62 72 65 61 6b 73 20 | single.line.without.line.breaks. |
b2420 | 28 60 60 5c 6e 60 60 29 2e 00 41 67 65 6e 74 20 2d 20 73 6f 66 74 77 61 72 65 20 77 68 69 63 68 | (``\n``)..Agent.-.software.which |
b2440 | 20 72 75 6e 73 20 6f 6e 20 6d 61 6e 61 67 65 64 20 64 65 76 69 63 65 73 00 41 6c 65 72 74 00 41 | .runs.on.managed.devices.Alert.A |
b2460 | 6c 67 6f 72 69 74 68 6d 00 41 6c 69 61 73 65 73 00 41 6c 6c 20 44 4e 53 20 72 65 71 75 65 73 74 | lgorithm.Aliases.All.DNS.request |
b2480 | 73 20 66 6f 72 20 65 78 61 6d 70 6c 65 2e 63 6f 6d 20 6d 75 73 74 20 62 65 20 66 6f 72 77 61 72 | s.for.example.com.must.be.forwar |
b24a0 | 64 65 64 20 74 6f 20 61 20 44 4e 53 20 73 65 72 76 65 72 20 61 74 20 31 39 32 2e 30 2e 32 2e 32 | ded.to.a.DNS.server.at.192.0.2.2 |
b24c0 | 35 34 20 61 6e 64 20 32 30 30 31 3a 64 62 38 3a 63 61 66 65 3a 3a 31 00 41 6c 6c 20 53 4e 4d 50 | 54.and.2001:db8:cafe::1.All.SNMP |
b24e0 | 20 4d 49 42 73 20 61 72 65 20 6c 6f 63 61 74 65 64 20 69 6e 20 65 61 63 68 20 69 6d 61 67 65 20 | .MIBs.are.located.in.each.image. |
b2500 | 6f 66 20 56 79 4f 53 20 68 65 72 65 3a 20 60 60 2f 75 73 72 2f 73 68 61 72 65 2f 73 6e 6d 70 2f | of.VyOS.here:.``/usr/share/snmp/ |
b2520 | 6d 69 62 73 2f 60 60 00 41 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 57 57 41 4e 20 63 61 72 64 73 | mibs/``.All.available.WWAN.cards |
b2540 | 20 68 61 76 65 20 61 20 62 75 69 6c 64 20 69 6e 2c 20 72 65 70 72 6f 67 72 61 6d 6d 61 62 6c 65 | .have.a.build.in,.reprogrammable |
b2560 | 20 66 69 72 6d 77 61 72 65 2e 20 4d 6f 73 74 20 6f 66 20 74 68 65 20 76 65 6e 64 6f 72 73 20 70 | .firmware..Most.of.the.vendors.p |
b2580 | 72 6f 76 69 64 65 20 61 20 72 65 67 75 6c 61 72 20 75 70 64 61 74 65 20 74 6f 20 74 68 65 20 66 | rovide.a.regular.update.to.the.f |
b25a0 | 69 72 6d 77 61 72 65 20 75 73 65 64 20 69 6e 20 74 68 65 20 62 61 73 65 62 61 6e 64 20 63 68 69 | irmware.used.in.the.baseband.chi |
b25c0 | 70 2e 00 41 6c 6c 20 63 65 72 74 69 66 69 63 61 74 65 73 20 73 68 6f 75 6c 64 20 62 65 20 73 74 | p..All.certificates.should.be.st |
b25e0 | 6f 72 65 64 20 6f 6e 20 56 79 4f 53 20 75 6e 64 65 72 20 60 60 2f 63 6f 6e 66 69 67 2f 61 75 74 | ored.on.VyOS.under.``/config/aut |
b2600 | 68 60 60 2e 20 49 66 20 63 65 72 74 69 66 69 63 61 74 65 73 20 61 72 65 20 6e 6f 74 20 73 74 6f | h``..If.certificates.are.not.sto |
b2620 | 72 65 64 20 69 6e 20 74 68 65 20 60 60 2f 63 6f 6e 66 69 67 60 60 20 64 69 72 65 63 74 6f 72 79 | red.in.the.``/config``.directory |
b2640 | 20 74 68 65 79 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 6d 69 67 72 61 74 65 64 20 64 75 72 69 6e | .they.will.not.be.migrated.durin |
b2660 | 67 20 61 20 73 6f 66 74 77 61 72 65 20 75 70 64 61 74 65 2e 00 41 6c 6c 20 66 61 63 69 6c 69 74 | g.a.software.update..All.facilit |
b2680 | 69 65 73 00 41 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 | ies.All.interfaces.used.for.the. |
b26a0 | 44 48 43 50 20 72 65 6c 61 79 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 54 | DHCP.relay.must.be.configured..T |
b26c0 | 68 69 73 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 75 70 6c 69 6e 6b 20 74 6f 20 74 68 65 20 44 | his.includes.the.uplink.to.the.D |
b26e0 | 48 43 50 20 73 65 72 76 65 72 2e 00 41 6c 6c 20 69 74 65 6d 73 20 69 6e 20 61 20 73 79 6e 63 20 | HCP.server..All.items.in.a.sync. |
b2700 | 67 72 6f 75 70 20 73 68 6f 75 6c 64 20 62 65 20 73 69 6d 69 6c 61 72 6c 79 20 63 6f 6e 66 69 67 | group.should.be.similarly.config |
b2720 | 75 72 65 64 2e 20 49 66 20 6f 6e 65 20 56 52 52 50 20 67 72 6f 75 70 20 69 73 20 73 65 74 20 74 | ured..If.one.VRRP.group.is.set.t |
b2740 | 6f 20 61 20 64 69 66 66 65 72 65 6e 74 20 70 72 65 65 6d 70 74 69 6f 6e 20 64 65 6c 61 79 20 6f | o.a.different.preemption.delay.o |
b2760 | 72 20 70 72 69 6f 72 69 74 79 2c 20 69 74 20 77 6f 75 6c 64 20 72 65 73 75 6c 74 20 69 6e 20 61 | r.priority,.it.would.result.in.a |
b2780 | 6e 20 65 6e 64 6c 65 73 73 20 74 72 61 6e 73 69 74 69 6f 6e 20 6c 6f 6f 70 2e 00 41 6c 6c 20 6f | n.endless.transition.loop..All.o |
b27a0 | 74 68 65 72 20 44 4e 53 20 72 65 71 75 65 73 74 73 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 | ther.DNS.requests.will.be.forwar |
b27c0 | 64 65 64 20 74 6f 20 61 20 64 69 66 66 65 72 65 6e 74 20 73 65 74 20 6f 66 20 44 4e 53 20 73 65 | ded.to.a.different.set.of.DNS.se |
b27e0 | 72 76 65 72 73 20 61 74 20 31 39 32 2e 30 2e 32 2e 31 2c 20 31 39 32 2e 30 2e 32 2e 32 2c 20 32 | rvers.at.192.0.2.1,.192.0.2.2,.2 |
b2800 | 30 30 31 3a 64 62 38 3a 3a 31 3a 66 66 66 66 20 61 6e 64 20 32 30 30 31 3a 64 62 38 3a 3a 32 3a | 001:db8::1:ffff.and.2001:db8::2: |
b2820 | 66 66 66 66 00 41 6c 6c 20 72 65 70 6c 79 20 73 69 7a 65 73 20 61 72 65 20 61 63 63 65 70 74 65 | ffff.All.reply.sizes.are.accepte |
b2840 | 64 20 62 79 20 64 65 66 61 75 6c 74 2e 00 41 6c 6c 20 72 6f 75 74 65 72 73 20 69 6e 20 74 68 65 | d.by.default..All.routers.in.the |
b2860 | 20 50 49 4d 20 6e 65 74 77 6f 72 6b 20 6d 75 73 74 20 61 67 72 65 65 20 6f 6e 20 74 68 65 73 65 | .PIM.network.must.agree.on.these |
b2880 | 20 76 61 6c 75 65 73 2e 00 41 6c 6c 20 73 63 72 69 70 74 73 20 65 78 63 65 63 75 74 65 64 20 74 | .values..All.scripts.excecuted.t |
b28a0 | 68 69 73 20 77 61 79 20 61 72 65 20 65 78 65 63 75 74 65 64 20 61 73 20 72 6f 6f 74 20 75 73 65 | his.way.are.executed.as.root.use |
b28c0 | 72 20 2d 20 74 68 69 73 20 6d 61 79 20 62 65 20 64 61 6e 67 65 72 6f 75 73 2e 20 54 6f 67 65 74 | r.-.this.may.be.dangerous..Toget |
b28e0 | 68 65 72 20 77 69 74 68 20 3a 72 65 66 3a 60 63 6f 6d 6d 61 6e 64 2d 73 63 72 69 70 74 69 6e 67 | her.with.:ref:`command-scripting |
b2900 | 60 20 74 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 66 6f 72 20 61 75 74 6f 6d 61 74 69 6e | `.this.can.be.used.for.automatin |
b2920 | 67 20 28 72 65 2d 29 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 41 6c 6c 20 74 68 65 73 65 20 | g.(re-)configuration..All.these. |
b2940 | 72 75 6c 65 73 20 77 69 74 68 20 4f 54 43 20 77 69 6c 6c 20 68 65 6c 70 20 74 6f 20 64 65 74 65 | rules.with.OTC.will.help.to.dete |
b2960 | 63 74 20 61 6e 64 20 6d 69 74 69 67 61 74 65 20 72 6f 75 74 65 20 6c 65 61 6b 73 20 61 6e 64 20 | ct.and.mitigate.route.leaks.and. |
b2980 | 68 61 70 70 65 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 69 66 20 6c 6f 63 61 6c 2d 72 6f | happen.automatically.if.local-ro |
b29a0 | 6c 65 20 69 73 20 73 65 74 2e 00 41 6c 6c 20 74 68 6f 73 65 20 70 72 6f 74 6f 63 6f 6c 73 20 61 | le.is.set..All.those.protocols.a |
b29c0 | 72 65 20 67 72 6f 75 70 65 64 20 75 6e 64 65 72 20 60 60 69 6e 74 65 72 66 61 63 65 73 20 74 75 | re.grouped.under.``interfaces.tu |
b29e0 | 6e 6e 65 6c 60 60 20 69 6e 20 56 79 4f 53 2e 20 4c 65 74 27 73 20 74 61 6b 65 20 61 20 63 6c 6f | nnel``.in.VyOS..Let's.take.a.clo |
b2a00 | 73 65 72 20 6c 6f 6f 6b 20 61 74 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 73 20 61 6e 64 20 6f 70 | ser.look.at.the.protocols.and.op |
b2a20 | 74 69 6f 6e 73 20 63 75 72 72 65 6e 74 6c 79 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 56 79 4f | tions.currently.supported.by.VyO |
b2a40 | 53 2e 00 41 6c 6c 20 74 72 61 66 66 69 63 20 62 65 74 77 65 65 6e 20 7a 6f 6e 65 73 20 69 73 20 | S..All.traffic.between.zones.is. |
b2a60 | 61 66 66 65 63 74 65 64 20 62 79 20 65 78 69 73 74 69 6e 67 20 70 6f 6c 69 63 69 65 73 00 41 6c | affected.by.existing.policies.Al |
b2a80 | 6c 20 74 72 61 66 66 69 63 20 74 6f 20 61 6e 64 20 66 72 6f 6d 20 61 6e 20 69 6e 74 65 72 66 61 | l.traffic.to.and.from.an.interfa |
b2aa0 | 63 65 20 77 69 74 68 69 6e 20 61 20 7a 6f 6e 65 20 69 73 20 70 65 72 6d 69 74 74 65 64 2e 00 41 | ce.within.a.zone.is.permitted..A |
b2ac0 | 6c 6c 20 74 75 6e 6e 65 6c 20 73 65 73 73 69 6f 6e 73 20 63 61 6e 20 62 65 20 63 68 65 63 6b 65 | ll.tunnel.sessions.can.be.checke |
b2ae0 | 64 20 76 69 61 3a 00 41 6c 6c 6f 63 61 74 69 6f 6e 20 63 6c 69 65 6e 74 73 20 69 70 20 61 64 64 | d.via:.Allocation.clients.ip.add |
b2b00 | 72 65 73 73 65 73 20 62 79 20 52 41 44 49 55 53 00 41 6c 6c 6f 77 20 60 60 73 73 68 60 60 20 64 | resses.by.RADIUS.Allow.``ssh``.d |
b2b20 | 79 6e 61 6d 69 63 2d 70 72 6f 74 65 63 74 69 6f 6e 2e 00 41 6c 6c 6f 77 20 61 63 63 65 73 73 20 | ynamic-protection..Allow.access. |
b2b40 | 74 6f 20 73 69 74 65 73 20 69 6e 20 61 20 64 6f 6d 61 69 6e 20 77 69 74 68 6f 75 74 20 72 65 74 | to.sites.in.a.domain.without.ret |
b2b60 | 72 69 65 76 69 6e 67 20 74 68 65 6d 20 66 72 6f 6d 20 74 68 65 20 50 72 6f 78 79 20 63 61 63 68 | rieving.them.from.the.Proxy.cach |
b2b80 | 65 2e 20 53 70 65 63 69 66 79 69 6e 67 20 22 76 79 6f 73 2e 6e 65 74 22 20 77 69 6c 6c 20 61 6c | e..Specifying."vyos.net".will.al |
b2ba0 | 6c 6f 77 20 61 63 63 65 73 73 20 74 6f 20 76 79 6f 73 2e 6e 65 74 20 62 75 74 20 74 68 65 20 70 | low.access.to.vyos.net.but.the.p |
b2bc0 | 61 67 65 73 20 61 63 63 65 73 73 65 64 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 61 63 68 65 64 | ages.accessed.will.not.be.cached |
b2be0 | 2e 20 49 74 20 75 73 65 66 75 6c 20 66 6f 72 20 77 6f 72 6b 69 6e 67 20 61 72 6f 75 6e 64 20 70 | ..It.useful.for.working.around.p |
b2c00 | 72 6f 62 6c 65 6d 73 20 77 69 74 68 20 22 49 66 2d 4d 6f 64 69 66 69 65 64 2d 53 69 6e 63 65 22 | roblems.with."If-Modified-Since" |
b2c20 | 20 63 68 65 63 6b 69 6e 67 20 61 74 20 63 65 72 74 61 69 6e 20 73 69 74 65 73 2e 00 41 6c 6c 6f | .checking.at.certain.sites..Allo |
b2c40 | 77 20 62 67 70 20 74 6f 20 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 65 78 74 65 6e 64 65 64 2d | w.bgp.to.negotiate.the.extended- |
b2c60 | 6e 65 78 74 68 6f 70 20 63 61 70 61 62 69 6c 69 74 79 20 77 69 74 68 20 69 74 e2 80 99 73 20 70 | nexthop.capability.with.it...s.p |
b2c80 | 65 65 72 2e 20 49 66 20 79 6f 75 20 61 72 65 20 70 65 65 72 69 6e 67 20 6f 76 65 72 20 61 20 49 | eer..If.you.are.peering.over.a.I |
b2ca0 | 50 76 36 20 4c 69 6e 6b 2d 4c 6f 63 61 6c 20 61 64 64 72 65 73 73 20 74 68 65 6e 20 74 68 69 73 | Pv6.Link-Local.address.then.this |
b2cc0 | 20 63 61 70 61 62 69 6c 69 74 79 20 69 73 20 74 75 72 6e 65 64 20 6f 6e 20 61 75 74 6f 6d 61 74 | .capability.is.turned.on.automat |
b2ce0 | 69 63 61 6c 6c 79 2e 20 49 66 20 79 6f 75 20 61 72 65 20 70 65 65 72 69 6e 67 20 6f 76 65 72 20 | ically..If.you.are.peering.over. |
b2d00 | 61 20 49 50 76 36 20 47 6c 6f 62 61 6c 20 41 64 64 72 65 73 73 20 74 68 65 6e 20 74 75 72 6e 69 | a.IPv6.Global.Address.then.turni |
b2d20 | 6e 67 20 6f 6e 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 61 6c 6c 6f 77 20 42 47 | ng.on.this.command.will.allow.BG |
b2d40 | 50 20 74 6f 20 69 6e 73 74 61 6c 6c 20 49 50 76 34 20 72 6f 75 74 65 73 20 77 69 74 68 20 49 50 | P.to.install.IPv4.routes.with.IP |
b2d60 | 76 36 20 6e 65 78 74 68 6f 70 73 20 69 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 68 61 76 65 20 49 | v6.nexthops.if.you.do.not.have.I |
b2d80 | 50 76 34 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 73 2e 00 41 6c | Pv4.configured.on.interfaces..Al |
b2da0 | 6c 6f 77 20 65 78 70 6c 69 63 69 74 20 49 50 76 36 20 61 64 64 72 65 73 73 20 66 6f 72 20 74 68 | low.explicit.IPv6.address.for.th |
b2dc0 | 65 20 69 6e 74 65 72 66 61 63 65 2e 00 41 6c 6c 6f 77 20 68 6f 73 74 20 6e 65 74 77 6f 72 6b 69 | e.interface..Allow.host.networki |
b2de0 | 6e 67 20 69 6e 20 61 20 63 6f 6e 74 61 69 6e 65 72 2e 20 54 68 65 20 6e 65 74 77 6f 72 6b 20 73 | ng.in.a.container..The.network.s |
b2e00 | 74 61 63 6b 20 6f 66 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 69 73 20 6e 6f 74 20 69 73 6f | tack.of.the.container.is.not.iso |
b2e20 | 6c 61 74 65 64 20 66 72 6f 6d 20 74 68 65 20 68 6f 73 74 20 61 6e 64 20 77 69 6c 6c 20 75 73 65 | lated.from.the.host.and.will.use |
b2e40 | 20 74 68 65 20 68 6f 73 74 20 49 50 2e 00 41 6c 6c 6f 77 20 6c 69 73 74 69 6e 67 20 61 64 64 69 | .the.host.IP..Allow.listing.addi |
b2e60 | 74 69 6f 6e 61 6c 20 63 75 73 74 6f 6d 20 64 6f 6d 61 69 6e 73 20 74 6f 20 62 65 20 62 72 6f 77 | tional.custom.domains.to.be.brow |
b2e80 | 73 65 64 20 28 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 64 65 66 61 75 6c 74 20 | sed.(in.addition.to.the.default. |
b2ea0 | 60 60 6c 6f 63 61 6c 60 60 29 20 73 6f 20 74 68 61 74 20 74 68 65 79 20 63 61 6e 20 62 65 20 72 | ``local``).so.that.they.can.be.r |
b2ec0 | 65 66 6c 65 63 74 65 64 2e 00 41 6c 6c 6f 77 20 74 68 69 73 20 42 46 44 20 70 65 65 72 20 74 6f | eflected..Allow.this.BFD.peer.to |
b2ee0 | 20 6e 6f 74 20 62 65 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 00 41 6c 6c 6f 77 | .not.be.directly.connected.Allow |
b2f00 | 65 64 20 76 61 6c 75 65 73 20 66 70 72 20 54 43 50 20 66 6c 61 67 73 3a 20 60 60 53 59 4e 60 60 | ed.values.fpr.TCP.flags:.``SYN`` |
b2f20 | 2c 20 60 60 41 43 4b 60 60 2c 20 60 60 46 49 4e 60 60 2c 20 60 60 52 53 54 60 60 2c 20 60 60 55 | ,.``ACK``,.``FIN``,.``RST``,.``U |
b2f40 | 52 47 60 60 2c 20 60 60 50 53 48 60 60 2c 20 60 60 41 4c 4c 60 60 20 57 68 65 6e 20 73 70 65 63 | RG``,.``PSH``,.``ALL``.When.spec |
b2f60 | 69 66 79 69 6e 67 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 66 6c 61 67 2c 20 66 6c 61 67 73 | ifying.more.than.one.flag,.flags |
b2f80 | 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 61 20 73 65 70 61 72 61 74 65 64 2e 20 54 68 65 20 | .should.be.comma.separated..The. |
b2fa0 | 60 60 21 60 60 20 6e 65 67 61 74 65 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 70 72 6f 74 6f 63 | ``!``.negate.the.selected.protoc |
b2fc0 | 6f 6c 2e 00 41 6c 6c 6f 77 65 64 20 76 61 6c 75 65 73 20 66 70 72 20 54 43 50 20 66 6c 61 67 73 | ol..Allowed.values.fpr.TCP.flags |
b2fe0 | 3a 20 60 60 61 63 6b 60 60 2c 20 60 60 63 77 72 60 60 2c 20 60 60 65 63 6e 60 60 2c 20 60 60 66 | :.``ack``,.``cwr``,.``ecn``,.``f |
b3000 | 69 6e 60 60 2c 20 60 60 70 73 68 60 60 2c 20 60 60 72 73 74 60 60 2c 20 60 60 73 79 6e 60 60 20 | in``,.``psh``,.``rst``,.``syn``. |
b3020 | 61 6e 64 20 60 60 75 72 67 60 60 2e 20 4d 75 6c 74 69 70 6c 65 20 76 61 6c 75 65 73 20 61 72 65 | and.``urg``..Multiple.values.are |
b3040 | 20 73 75 70 70 6f 72 74 65 64 2c 20 61 6e 64 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 73 65 6c | .supported,.and.for.inverted.sel |
b3060 | 65 63 74 69 6f 6e 20 75 73 65 20 60 60 6e 6f 74 60 60 2c 20 61 73 20 73 68 6f 77 6e 20 69 6e 20 | ection.use.``not``,.as.shown.in. |
b3080 | 74 68 65 20 65 78 61 6d 70 6c 65 2e 00 41 6c 6c 6f 77 73 20 73 70 65 63 69 66 69 63 20 56 4c 41 | the.example..Allows.specific.VLA |
b30a0 | 4e 20 49 44 73 20 74 6f 20 70 61 73 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 62 72 69 64 67 65 | N.IDs.to.pass.through.the.bridge |
b30c0 | 20 6d 65 6d 62 65 72 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 63 61 6e 20 65 69 74 68 | .member.interface..This.can.eith |
b30e0 | 65 72 20 62 65 20 61 6e 20 69 6e 64 69 76 69 64 75 61 6c 20 56 4c 41 4e 20 69 64 20 6f 72 20 61 | er.be.an.individual.VLAN.id.or.a |
b3100 | 20 72 61 6e 67 65 20 6f 66 20 56 4c 41 4e 20 69 64 73 20 64 65 6c 69 6d 69 74 65 64 20 62 79 20 | .range.of.VLAN.ids.delimited.by. |
b3120 | 61 20 68 79 70 68 65 6e 2e 00 41 6c 6c 6f 77 73 20 74 6f 20 64 65 66 69 6e 65 20 55 52 4c 20 70 | a.hyphen..Allows.to.define.URL.p |
b3140 | 61 74 68 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 73 20 66 6f 72 20 61 20 73 70 65 63 69 66 69 | ath.matching.rules.for.a.specifi |
b3160 | 63 20 73 65 72 76 69 63 65 2e 00 41 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 63 6f 6e 66 69 67 75 | c.service..Allows.you.to.configu |
b3180 | 72 65 20 74 68 65 20 6e 65 78 74 2d 68 6f 70 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 61 6e | re.the.next-hop.interface.for.an |
b31a0 | 20 69 6e 74 65 72 66 61 63 65 2d 62 61 73 65 64 20 49 50 76 34 20 73 74 61 74 69 63 20 72 6f 75 | .interface-based.IPv4.static.rou |
b31c0 | 74 65 2e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 77 69 6c 6c 20 62 65 20 74 68 65 20 6e 65 | te..`<interface>`.will.be.the.ne |
b31e0 | 78 74 2d 68 6f 70 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 69 | xt-hop.interface.where.traffic.i |
b3200 | 73 20 72 6f 75 74 65 64 20 66 6f 72 20 74 68 65 20 67 69 76 65 6e 20 60 3c 73 75 62 6e 65 74 3e | s.routed.for.the.given.`<subnet> |
b3220 | 60 2e 00 41 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6e | `..Allows.you.to.configure.the.n |
b3240 | 65 78 74 2d 68 6f 70 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 | ext-hop.interface.for.an.interfa |
b3260 | 63 65 2d 62 61 73 65 64 20 49 50 76 36 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 20 60 3c 69 6e | ce-based.IPv6.static.route..`<in |
b3280 | 74 65 72 66 61 63 65 3e 60 20 77 69 6c 6c 20 62 65 20 74 68 65 20 6e 65 78 74 2d 68 6f 70 20 69 | terface>`.will.be.the.next-hop.i |
b32a0 | 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 69 73 20 72 6f 75 74 65 64 | nterface.where.traffic.is.routed |
b32c0 | 20 66 6f 72 20 74 68 65 20 67 69 76 65 6e 20 60 3c 73 75 62 6e 65 74 3e 60 2e 00 41 6c 72 65 61 | .for.the.given.`<subnet>`..Alrea |
b32e0 | 64 79 20 6c 65 61 72 6e 65 64 20 6b 6e 6f 77 6e 5f 68 6f 73 74 73 20 66 69 6c 65 73 20 6f 66 20 | dy.learned.known_hosts.files.of. |
b3300 | 63 6c 69 65 6e 74 73 20 6e 65 65 64 20 61 6e 20 75 70 64 61 74 65 20 61 73 20 74 68 65 20 70 75 | clients.need.an.update.as.the.pu |
b3320 | 62 6c 69 63 20 6b 65 79 20 77 69 6c 6c 20 63 68 61 6e 67 65 2e 00 41 6c 73 6f 2c 20 2a 2a 64 65 | blic.key.will.change..Also,.**de |
b3340 | 66 61 75 6c 74 2d 61 63 74 69 6f 6e 2a 2a 20 69 73 20 61 6e 20 61 63 74 69 6f 6e 20 74 68 61 74 | fault-action**.is.an.action.that |
b3360 | 20 74 61 6b 65 73 20 70 6c 61 63 65 20 77 68 65 6e 65 76 65 72 20 61 20 70 61 63 6b 65 74 20 64 | .takes.place.whenever.a.packet.d |
b3380 | 6f 65 73 20 6e 6f 74 20 6d 61 74 63 68 20 61 6e 79 20 72 75 6c 65 20 69 6e 20 69 74 27 73 20 63 | oes.not.match.any.rule.in.it's.c |
b33a0 | 68 61 69 6e 2e 20 46 6f 72 20 62 61 73 65 20 63 68 61 69 6e 73 2c 20 70 6f 73 73 69 62 6c 65 20 | hain..For.base.chains,.possible. |
b33c0 | 6f 70 74 69 6f 6e 73 20 66 6f 72 20 2a 2a 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 2a 2a 20 61 | options.for.**default-action**.a |
b33e0 | 72 65 20 2a 2a 61 63 63 65 70 74 2a 2a 20 6f 72 20 2a 2a 64 72 6f 70 2a 2a 2e 00 41 6c 73 6f 2c | re.**accept**.or.**drop**..Also, |
b3400 | 20 66 6f 72 20 62 61 63 6b 77 61 72 64 73 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 20 74 68 69 | .for.backwards.compatibility.thi |
b3420 | 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 77 68 69 63 68 20 75 73 65 73 20 67 65 6e 65 | s.configuration,.which.uses.gene |
b3440 | 72 69 63 20 69 6e 74 65 72 66 61 63 65 20 64 65 66 69 6e 69 74 69 6f 6e 2c 20 69 73 20 73 74 69 | ric.interface.definition,.is.sti |
b3460 | 6c 6c 20 76 61 6c 69 64 3a 00 41 6c 73 6f 2c 20 66 6f 72 20 74 68 6f 73 65 20 77 68 6f 20 68 61 | ll.valid:.Also,.for.those.who.ha |
b3480 | 76 65 6e 27 74 20 75 70 64 61 74 65 64 20 74 6f 20 6e 65 77 65 72 20 76 65 72 73 69 6f 6e 2c 20 | ven't.updated.to.newer.version,. |
b34a0 | 6c 65 67 61 63 79 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 69 73 20 73 74 69 6c 6c 20 70 72 | legacy.documentation.is.still.pr |
b34c0 | 65 73 65 6e 74 20 61 6e 64 20 76 61 6c 69 64 20 66 6f 72 20 61 6c 6c 20 73 61 67 69 74 74 61 20 | esent.and.valid.for.all.sagitta. |
b34e0 | 76 65 72 73 69 6f 6e 20 70 72 69 6f 72 20 74 6f 20 56 79 4f 53 20 31 2e 34 2d 72 6f 6c 6c 69 6e | version.prior.to.VyOS.1.4-rollin |
b3500 | 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 3a 00 41 6c 73 6f 2c 20 69 6e 20 3a 72 65 66 3a 60 64 | g-202308040557:.Also,.in.:ref:`d |
b3520 | 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 2c 20 72 65 64 69 72 65 63 74 69 6f 6e 20 74 6f 20 | estination-nat`,.redirection.to. |
b3540 | 6c 6f 63 61 6c 68 6f 73 74 20 69 73 20 73 75 70 70 6f 72 74 65 64 2e 20 54 68 65 20 72 65 64 69 | localhost.is.supported..The.redi |
b3560 | 72 65 63 74 20 73 74 61 74 65 6d 65 6e 74 20 69 73 20 61 20 73 70 65 63 69 61 6c 20 66 6f 72 6d | rect.statement.is.a.special.form |
b3580 | 20 6f 66 20 64 6e 61 74 20 77 68 69 63 68 20 61 6c 77 61 79 73 20 74 72 61 6e 73 6c 61 74 65 73 | .of.dnat.which.always.translates |
b35a0 | 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 74 6f 20 74 68 65 20 | .the.destination.address.to.the. |
b35c0 | 6c 6f 63 61 6c 20 68 6f 73 74 e2 80 99 73 20 6f 6e 65 2e 00 41 6c 74 65 72 6e 61 74 65 20 52 6f | local.host...s.one..Alternate.Ro |
b35e0 | 75 74 69 6e 67 20 54 61 62 6c 65 73 00 41 6c 74 65 72 6e 61 74 65 20 72 6f 75 74 69 6e 67 20 74 | uting.Tables.Alternate.routing.t |
b3600 | 61 62 6c 65 73 20 61 72 65 20 75 73 65 64 20 77 69 74 68 20 70 6f 6c 69 63 79 20 62 61 73 65 64 | ables.are.used.with.policy.based |
b3620 | 20 72 6f 75 74 69 6e 67 20 62 79 20 75 74 69 6c 69 7a 69 6e 67 20 3a 72 65 66 3a 60 76 72 66 60 | .routing.by.utilizing.:ref:`vrf` |
b3640 | 2e 00 41 6c 74 65 72 6e 61 74 69 76 65 20 74 6f 20 6d 75 6c 74 69 63 61 73 74 2c 20 74 68 65 20 | ..Alternative.to.multicast,.the. |
b3660 | 72 65 6d 6f 74 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 56 58 4c 41 4e | remote.IPv4.address.of.the.VXLAN |
b3680 | 20 74 75 6e 6e 65 6c 20 63 61 6e 20 62 65 20 73 65 74 20 64 69 72 65 63 74 6c 79 2e 20 4c 65 74 | .tunnel.can.be.set.directly..Let |
b36a0 | 27 73 20 63 68 61 6e 67 65 20 74 68 65 20 4d 75 6c 74 69 63 61 73 74 20 65 78 61 6d 70 6c 65 20 | 's.change.the.Multicast.example. |
b36c0 | 66 72 6f 6d 20 61 62 6f 76 65 3a 00 41 6c 77 61 79 73 20 65 78 63 6c 75 64 65 20 74 68 69 73 20 | from.above:.Always.exclude.this. |
b36e0 | 61 64 64 72 65 73 73 20 66 72 6f 6d 20 61 6e 79 20 64 65 66 69 6e 65 64 20 72 61 6e 67 65 2e 20 | address.from.any.defined.range.. |
b3700 | 54 68 69 73 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 6e 65 76 65 72 20 62 65 20 61 73 73 69 67 | This.address.will.never.be.assig |
b3720 | 6e 65 64 20 62 79 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 2e 00 41 6e 20 2a 2a 69 6e 74 | ned.by.the.DHCP.server..An.**int |
b3740 | 65 72 66 61 63 65 20 67 72 6f 75 70 2a 2a 20 72 65 70 72 65 73 65 6e 74 73 20 61 20 63 6f 6c 6c | erface.group**.represents.a.coll |
b3760 | 65 63 74 69 6f 6e 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 2e 00 41 6e 20 41 53 20 69 73 20 61 | ection.of.interfaces..An.AS.is.a |
b3780 | 20 63 6f 6e 6e 65 63 74 65 64 20 67 72 6f 75 70 20 6f 66 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 | .connected.group.of.one.or.more. |
b37a0 | 49 50 20 70 72 65 66 69 78 65 73 20 72 75 6e 20 62 79 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 6e | IP.prefixes.run.by.one.or.more.n |
b37c0 | 65 74 77 6f 72 6b 20 6f 70 65 72 61 74 6f 72 73 20 77 68 69 63 68 20 68 61 73 20 61 20 53 49 4e | etwork.operators.which.has.a.SIN |
b37e0 | 47 4c 45 20 61 6e 64 20 43 4c 45 41 52 4c 59 20 44 45 46 49 4e 45 44 20 72 6f 75 74 69 6e 67 20 | GLE.and.CLEARLY.DEFINED.routing. |
b3800 | 70 6f 6c 69 63 79 2e 00 41 6e 20 49 50 76 34 20 54 43 50 20 66 69 6c 74 65 72 20 77 69 6c 6c 20 | policy..An.IPv4.TCP.filter.will. |
b3820 | 6f 6e 6c 79 20 6d 61 74 63 68 20 70 61 63 6b 65 74 73 20 77 69 74 68 20 61 6e 20 49 50 76 34 20 | only.match.packets.with.an.IPv4. |
b3840 | 68 65 61 64 65 72 20 6c 65 6e 67 74 68 20 6f 66 20 32 30 20 62 79 74 65 73 20 28 77 68 69 63 68 | header.length.of.20.bytes.(which |
b3860 | 20 69 73 20 74 68 65 20 6d 61 6a 6f 72 69 74 79 20 6f 66 20 49 50 76 34 20 70 61 63 6b 65 74 73 | .is.the.majority.of.IPv4.packets |
b3880 | 20 61 6e 79 77 61 79 29 2e 00 41 6e 20 53 4e 4d 50 2d 6d 61 6e 61 67 65 64 20 6e 65 74 77 6f 72 | .anyway)..An.SNMP-managed.networ |
b38a0 | 6b 20 63 6f 6e 73 69 73 74 73 20 6f 66 20 74 68 72 65 65 20 6b 65 79 20 63 6f 6d 70 6f 6e 65 6e | k.consists.of.three.key.componen |
b38c0 | 74 73 3a 00 41 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 73 70 65 63 69 66 79 69 6e 67 20 | ts:.An.`<interface>`.specifying. |
b38e0 | 77 68 69 63 68 20 73 6c 61 76 65 20 69 73 20 74 68 65 20 70 72 69 6d 61 72 79 20 64 65 76 69 63 | which.slave.is.the.primary.devic |
b3900 | 65 2e 20 54 68 65 20 73 70 65 63 69 66 69 65 64 20 64 65 76 69 63 65 20 77 69 6c 6c 20 61 6c 77 | e..The.specified.device.will.alw |
b3920 | 61 79 73 20 62 65 20 74 68 65 20 61 63 74 69 76 65 20 73 6c 61 76 65 20 77 68 69 6c 65 20 69 74 | ays.be.the.active.slave.while.it |
b3940 | 20 69 73 20 61 76 61 69 6c 61 62 6c 65 2e 20 4f 6e 6c 79 20 77 68 65 6e 20 74 68 65 20 70 72 69 | .is.available..Only.when.the.pri |
b3960 | 6d 61 72 79 20 69 73 20 6f 66 66 2d 6c 69 6e 65 20 77 69 6c 6c 20 61 6c 74 65 72 6e 61 74 65 20 | mary.is.off-line.will.alternate. |
b3980 | 64 65 76 69 63 65 73 20 62 65 20 75 73 65 64 2e 20 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 | devices.be.used..This.is.useful. |
b39a0 | 77 68 65 6e 20 6f 6e 65 20 73 6c 61 76 65 20 69 73 20 70 72 65 66 65 72 72 65 64 20 6f 76 65 72 | when.one.slave.is.preferred.over |
b39c0 | 20 61 6e 6f 74 68 65 72 2c 20 65 2e 67 2e 2c 20 77 68 65 6e 20 6f 6e 65 20 73 6c 61 76 65 20 68 | .another,.e.g.,.when.one.slave.h |
b39e0 | 61 73 20 68 69 67 68 65 72 20 74 68 72 6f 75 67 68 70 75 74 20 74 68 61 6e 20 61 6e 6f 74 68 65 | as.higher.throughput.than.anothe |
b3a00 | 72 2e 00 41 6e 20 61 64 64 69 74 69 6f 6e 61 6c 20 6c 61 79 65 72 20 6f 66 20 73 79 6d 6d 65 74 | r..An.additional.layer.of.symmet |
b3a20 | 72 69 63 2d 6b 65 79 20 63 72 79 70 74 6f 20 63 61 6e 20 62 65 20 75 73 65 64 20 6f 6e 20 74 6f | ric-key.crypto.can.be.used.on.to |
b3a40 | 70 20 6f 66 20 74 68 65 20 61 73 79 6d 6d 65 74 72 69 63 20 63 72 79 70 74 6f 2e 00 41 6e 20 61 | p.of.the.asymmetric.crypto..An.a |
b3a60 | 64 64 69 74 69 6f 6e 61 6c 20 6c 61 79 65 72 20 6f 66 20 73 79 6d 6d 65 74 72 69 63 2d 6b 65 79 | dditional.layer.of.symmetric-key |
b3a80 | 20 63 72 79 70 74 6f 20 63 61 6e 20 62 65 20 75 73 65 64 20 6f 6e 20 74 6f 70 20 6f 66 20 74 68 | .crypto.can.be.used.on.top.of.th |
b3aa0 | 65 20 61 73 79 6d 6d 65 74 72 69 63 20 63 72 79 70 74 6f 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e | e.asymmetric.crypto..This.comman |
b3ac0 | 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 63 72 65 61 74 65 73 20 66 6f 72 20 79 6f 75 20 | d.automatically.creates.for.you. |
b3ae0 | 74 68 65 20 72 65 71 75 69 72 65 64 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 6e 73 74 | the.required.CLI.command.to.inst |
b3b00 | 61 6c 6c 20 74 68 69 73 20 50 53 4b 20 66 6f 72 20 61 20 67 69 76 65 6e 20 70 65 65 72 2e 00 41 | all.this.PSK.for.a.given.peer..A |
b3b20 | 6e 20 61 64 64 69 74 69 6f 6e 61 6c 20 6c 61 79 65 72 20 6f 66 20 73 79 6d 6d 65 74 72 69 63 2d | n.additional.layer.of.symmetric- |
b3b40 | 6b 65 79 20 63 72 79 70 74 6f 20 63 61 6e 20 62 65 20 75 73 65 64 20 6f 6e 20 74 6f 70 20 6f 66 | key.crypto.can.be.used.on.top.of |
b3b60 | 20 74 68 65 20 61 73 79 6d 6d 65 74 72 69 63 20 63 72 79 70 74 6f 2e 20 54 68 69 73 20 69 73 20 | .the.asymmetric.crypto..This.is. |
b3b80 | 6f 70 74 69 6f 6e 61 6c 2e 00 41 6e 20 61 64 76 61 6e 74 61 67 65 20 6f 66 20 74 68 69 73 20 73 | optional..An.advantage.of.this.s |
b3ba0 | 63 68 65 6d 65 20 69 73 20 74 68 61 74 20 79 6f 75 20 67 65 74 20 61 20 72 65 61 6c 20 69 6e 74 | cheme.is.that.you.get.a.real.int |
b3bc0 | 65 72 66 61 63 65 20 77 69 74 68 20 69 74 73 20 6f 77 6e 20 61 64 64 72 65 73 73 2c 20 77 68 69 | erface.with.its.own.address,.whi |
b3be0 | 63 68 20 6d 61 6b 65 73 20 69 74 20 65 61 73 69 65 72 20 74 6f 20 73 65 74 75 70 20 73 74 61 74 | ch.makes.it.easier.to.setup.stat |
b3c00 | 69 63 20 72 6f 75 74 65 73 20 6f 72 20 75 73 65 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 | ic.routes.or.use.dynamic.routing |
b3c20 | 20 70 72 6f 74 6f 63 6f 6c 73 20 77 69 74 68 6f 75 74 20 68 61 76 69 6e 67 20 74 6f 20 6d 6f 64 | .protocols.without.having.to.mod |
b3c40 | 69 66 79 20 49 50 73 65 63 20 70 6f 6c 69 63 69 65 73 2e 20 54 68 65 20 6f 74 68 65 72 20 61 64 | ify.IPsec.policies..The.other.ad |
b3c60 | 76 61 6e 74 61 67 65 20 69 73 20 74 68 61 74 20 69 74 20 67 72 65 61 74 6c 79 20 73 69 6d 70 6c | vantage.is.that.it.greatly.simpl |
b3c80 | 69 66 69 65 73 20 72 6f 75 74 65 72 20 74 6f 20 72 6f 75 74 65 72 20 63 6f 6d 6d 75 6e 69 63 61 | ifies.router.to.router.communica |
b3ca0 | 74 69 6f 6e 2c 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 74 72 69 63 6b 79 20 77 69 74 68 20 70 | tion,.which.can.be.tricky.with.p |
b3cc0 | 6c 61 69 6e 20 49 50 73 65 63 20 62 65 63 61 75 73 65 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 | lain.IPsec.because.the.external. |
b3ce0 | 6f 75 74 67 6f 69 6e 67 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 20 75 | outgoing.address.of.the.router.u |
b3d00 | 73 75 61 6c 6c 79 20 64 6f 65 73 6e 27 74 20 6d 61 74 63 68 20 74 68 65 20 49 50 73 65 63 20 70 | sually.doesn't.match.the.IPsec.p |
b3d20 | 6f 6c 69 63 79 20 6f 66 20 74 79 70 69 63 61 6c 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 73 65 | olicy.of.typical.site-to-site.se |
b3d40 | 74 75 70 20 61 6e 64 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 61 64 64 20 73 70 65 63 69 61 6c 20 | tup.and.you.need.to.add.special. |
b3d60 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 69 74 2c 20 6f 72 20 61 64 6a 75 73 74 20 | configuration.for.it,.or.adjust. |
b3d80 | 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 66 6f 72 20 6f 75 74 67 6f 69 6e 67 20 | the.source.address.for.outgoing. |
b3da0 | 74 72 61 66 66 69 63 20 6f 66 20 79 6f 75 72 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2e 20 47 52 | traffic.of.your.applications..GR |
b3dc0 | 45 2f 49 50 73 65 63 20 68 61 73 20 6e 6f 20 73 75 63 68 20 70 72 6f 62 6c 65 6d 20 61 6e 64 20 | E/IPsec.has.no.such.problem.and. |
b3de0 | 69 73 20 63 6f 6d 70 6c 65 74 65 6c 79 20 74 72 61 6e 73 70 61 72 65 6e 74 20 66 6f 72 20 74 68 | is.completely.transparent.for.th |
b3e00 | 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2e 00 41 6e 20 61 67 65 6e 74 20 69 73 20 61 20 6e 65 | e.applications..An.agent.is.a.ne |
b3e20 | 74 77 6f 72 6b 2d 6d 61 6e 61 67 65 6d 65 6e 74 20 73 6f 66 74 77 61 72 65 20 6d 6f 64 75 6c 65 | twork-management.software.module |
b3e40 | 20 74 68 61 74 20 72 65 73 69 64 65 73 20 6f 6e 20 61 20 6d 61 6e 61 67 65 64 20 64 65 76 69 63 | .that.resides.on.a.managed.devic |
b3e60 | 65 2e 20 41 6e 20 61 67 65 6e 74 20 68 61 73 20 6c 6f 63 61 6c 20 6b 6e 6f 77 6c 65 64 67 65 20 | e..An.agent.has.local.knowledge. |
b3e80 | 6f 66 20 6d 61 6e 61 67 65 6d 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6e 64 20 74 72 | of.management.information.and.tr |
b3ea0 | 61 6e 73 6c 61 74 65 73 20 74 68 61 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 6f 72 20 | anslates.that.information.to.or. |
b3ec0 | 66 72 6f 6d 20 61 6e 20 53 4e 4d 50 2d 73 70 65 63 69 66 69 63 20 66 6f 72 6d 2e 00 41 6e 20 61 | from.an.SNMP-specific.form..An.a |
b3ee0 | 6c 74 65 72 6e 61 74 65 20 63 6f 6d 6d 61 6e 64 20 63 6f 75 6c 64 20 62 65 20 22 6d 70 6c 73 2d | lternate.command.could.be."mpls- |
b3f00 | 74 65 20 6f 6e 22 20 28 54 72 61 66 66 69 63 20 45 6e 67 69 6e 65 65 72 69 6e 67 29 00 41 6e 20 | te.on".(Traffic.Engineering).An. |
b3f20 | 61 72 62 69 74 72 61 72 79 20 6e 65 74 6d 61 73 6b 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 | arbitrary.netmask.can.be.applied |
b3f40 | 20 74 6f 20 6d 61 73 6b 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 6f 6e 6c 79 20 6d 61 74 63 68 | .to.mask.addresses.to.only.match |
b3f60 | 20 61 67 61 69 6e 73 74 20 61 20 73 70 65 63 69 66 69 63 20 70 6f 72 74 69 6f 6e 2e 00 41 6e 20 | .against.a.specific.portion..An. |
b3f80 | 61 72 62 69 74 72 61 72 79 20 6e 65 74 6d 61 73 6b 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 | arbitrary.netmask.can.be.applied |
b3fa0 | 20 74 6f 20 6d 61 73 6b 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 6f 6e 6c 79 20 6d 61 74 63 68 | .to.mask.addresses.to.only.match |
b3fc0 | 20 61 67 61 69 6e 73 74 20 61 20 73 70 65 63 69 66 69 63 20 70 6f 72 74 69 6f 6e 2e 20 54 68 69 | .against.a.specific.portion..Thi |
b3fe0 | 73 20 69 73 20 70 61 72 74 69 63 75 6c 61 72 6c 79 20 75 73 65 66 75 6c 20 77 69 74 68 20 49 50 | s.is.particularly.useful.with.IP |
b4000 | 76 36 20 61 6e 64 20 61 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 61 73 20 | v6.and.a.zone-based.firewall.as. |
b4020 | 72 75 6c 65 73 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 76 61 6c 69 64 20 69 66 20 74 68 65 20 49 | rules.will.remain.valid.if.the.I |
b4040 | 50 76 36 20 70 72 65 66 69 78 20 63 68 61 6e 67 65 73 20 61 6e 64 20 74 68 65 20 68 6f 73 74 20 | Pv6.prefix.changes.and.the.host. |
b4060 | 70 6f 72 74 69 6f 6e 20 6f 66 20 73 79 73 74 65 6d 73 20 49 50 76 36 20 61 64 64 72 65 73 73 20 | portion.of.systems.IPv6.address. |
b4080 | 69 73 20 73 74 61 74 69 63 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 77 69 74 68 20 53 4c 41 | is.static.(for.example,.with.SLA |
b40a0 | 41 43 20 6f 72 20 60 74 6f 6b 65 6e 69 73 65 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 | AC.or.`tokenised.IPv6.addresses. |
b40c0 | 3c 68 74 74 70 73 3a 2f 2f 64 61 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f | <https://datatracker.ietf.org/do |
b40e0 | 63 2f 69 64 2f 64 72 61 66 74 2d 63 68 6f 77 6e 2d 36 6d 61 6e 2d 74 6f 6b 65 6e 69 73 65 64 2d | c/id/draft-chown-6man-tokenised- |
b4100 | 69 70 76 36 2d 69 64 65 6e 74 69 66 69 65 72 73 2d 30 32 2e 74 78 74 3e 60 5f 29 00 41 6e 20 61 | ipv6-identifiers-02.txt>`_).An.a |
b4120 | 72 62 69 74 72 61 72 79 20 6e 65 74 6d 61 73 6b 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 | rbitrary.netmask.can.be.applied. |
b4140 | 74 6f 20 6d 61 73 6b 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 6f 6e 6c 79 20 6d 61 74 63 68 20 | to.mask.addresses.to.only.match. |
b4160 | 61 67 61 69 6e 73 74 20 61 20 73 70 65 63 69 66 69 63 20 70 6f 72 74 69 6f 6e 2e 20 54 68 69 73 | against.a.specific.portion..This |
b4180 | 20 69 73 20 70 61 72 74 69 63 75 6c 61 72 6c 79 20 75 73 65 66 75 6c 20 77 69 74 68 20 49 50 76 | .is.particularly.useful.with.IPv |
b41a0 | 36 20 61 6e 64 20 61 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 61 73 20 72 | 6.and.a.zone-based.firewall.as.r |
b41c0 | 75 6c 65 73 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 76 61 6c 69 64 20 69 66 20 74 68 65 20 49 50 | ules.will.remain.valid.if.the.IP |
b41e0 | 76 36 20 70 72 65 66 69 78 20 63 68 61 6e 67 65 73 20 61 6e 64 20 74 68 65 20 68 6f 73 74 20 70 | v6.prefix.changes.and.the.host.p |
b4200 | 6f 72 74 69 6f 6e 20 6f 66 20 73 79 73 74 65 6d 73 20 49 50 76 36 20 61 64 64 72 65 73 73 20 69 | ortion.of.systems.IPv6.address.i |
b4220 | 73 20 73 74 61 74 69 63 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 77 69 74 68 20 53 4c 41 41 | s.static.(for.example,.with.SLAA |
b4240 | 43 20 6f 72 20 60 74 6f 6b 65 6e 69 73 65 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 3c | C.or.`tokenised.IPv6.addresses.< |
b4260 | 68 74 74 70 73 3a 2f 2f 64 61 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 | https://datatracker.ietf.org/doc |
b4280 | 2f 69 64 2f 64 72 61 66 74 2d 63 68 6f 77 6e 2d 36 6d 61 6e 2d 74 6f 6b 65 6e 69 73 65 64 2d 69 | /id/draft-chown-6man-tokenised-i |
b42a0 | 70 76 36 2d 69 64 65 6e 74 69 66 69 65 72 73 2d 30 32 2e 74 78 74 3e 60 5f 29 2e 00 41 6e 20 61 | pv6-identifiers-02.txt>`_)..An.a |
b42c0 | 72 62 69 74 72 61 72 79 20 6e 65 74 6d 61 73 6b 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 | rbitrary.netmask.can.be.applied. |
b42e0 | 74 6f 20 6d 61 73 6b 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 6f 6e 6c 79 20 6d 61 74 63 68 20 | to.mask.addresses.to.only.match. |
b4300 | 61 67 61 69 6e 73 74 20 61 20 73 70 65 63 69 66 69 63 20 70 6f 72 74 69 6f 6e 2e 20 54 68 69 73 | against.a.specific.portion..This |
b4320 | 20 69 73 20 70 61 72 74 69 63 75 6c 61 72 6c 79 20 75 73 65 66 75 6c 20 77 69 74 68 20 49 50 76 | .is.particularly.useful.with.IPv |
b4340 | 36 20 61 73 20 72 75 6c 65 73 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 76 61 6c 69 64 20 69 66 20 | 6.as.rules.will.remain.valid.if. |
b4360 | 74 68 65 20 49 50 76 36 20 70 72 65 66 69 78 20 63 68 61 6e 67 65 73 20 61 6e 64 20 74 68 65 20 | the.IPv6.prefix.changes.and.the. |
b4380 | 68 6f 73 74 20 70 6f 72 74 69 6f 6e 20 6f 66 20 73 79 73 74 65 6d 73 20 49 50 76 36 20 61 64 64 | host.portion.of.systems.IPv6.add |
b43a0 | 72 65 73 73 20 69 73 20 73 74 61 74 69 63 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 77 69 74 | ress.is.static.(for.example,.wit |
b43c0 | 68 20 53 4c 41 41 43 20 6f 72 20 60 74 6f 6b 65 6e 69 73 65 64 20 49 50 76 36 20 61 64 64 72 65 | h.SLAAC.or.`tokenised.IPv6.addre |
b43e0 | 73 73 65 73 20 3c 68 74 74 70 73 3a 2f 2f 64 61 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f | sses.<https://datatracker.ietf.o |
b4400 | 72 67 2f 64 6f 63 2f 69 64 2f 64 72 61 66 74 2d 63 68 6f 77 6e 2d 36 6d 61 6e 2d 74 6f 6b 65 6e | rg/doc/id/draft-chown-6man-token |
b4420 | 69 73 65 64 2d 69 70 76 36 2d 69 64 65 6e 74 69 66 69 65 72 73 2d 30 32 2e 74 78 74 3e 60 5f 29 | ised-ipv6-identifiers-02.txt>`_) |
b4440 | 00 41 6e 20 62 61 73 69 63 20 69 6e 74 72 6f 64 75 63 74 69 6f 6e 20 74 6f 20 7a 6f 6e 65 2d 62 | .An.basic.introduction.to.zone-b |
b4460 | 61 73 65 64 20 66 69 72 65 77 61 6c 6c 73 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 60 68 65 72 | ased.firewalls.can.be.found.`her |
b4480 | 65 20 3c 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 76 79 6f 73 2e 69 6f 2f 65 6e 2f 6b 62 | e.<https://support.vyos.io/en/kb |
b44a0 | 2f 61 72 74 69 63 6c 65 73 2f 61 2d 70 72 69 6d 65 72 2d 74 6f 2d 7a 6f 6e 65 2d 62 61 73 65 64 | /articles/a-primer-to-zone-based |
b44c0 | 2d 66 69 72 65 77 61 6c 6c 3e 60 5f 2c 20 61 6e 64 20 61 6e 20 65 78 61 6d 70 6c 65 20 61 74 20 | -firewall>`_,.and.an.example.at. |
b44e0 | 3a 72 65 66 3a 60 65 78 61 6d 70 6c 65 73 2d 7a 6f 6e 65 2d 70 6f 6c 69 63 79 60 2e 00 41 6e 20 | :ref:`examples-zone-policy`..An. |
b4500 | 65 78 61 6d 70 6c 65 20 6f 66 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 | example.of.a.configuration.that. |
b4520 | 73 65 6e 64 73 20 60 60 74 65 6c 65 67 72 61 66 60 60 20 6d 65 74 72 69 63 73 20 74 6f 20 72 65 | sends.``telegraf``.metrics.to.re |
b4540 | 6d 6f 74 65 20 60 60 49 6e 66 6c 75 78 44 42 20 32 60 60 00 41 6e 20 65 78 61 6d 70 6c 65 20 6f | mote.``InfluxDB.2``.An.example.o |
b4560 | 66 20 63 72 65 61 74 69 6e 67 20 61 20 56 4c 41 4e 2d 61 77 61 72 65 20 62 72 69 64 67 65 20 69 | f.creating.a.VLAN-aware.bridge.i |
b4580 | 73 20 61 73 20 66 6f 6c 6c 6f 77 73 3a 00 41 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 6b 65 79 20 | s.as.follows:.An.example.of.key. |
b45a0 | 67 65 6e 65 72 61 74 69 6f 6e 3a 00 41 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 74 68 65 20 64 61 | generation:.An.example.of.the.da |
b45c0 | 74 61 20 63 61 70 74 75 72 65 64 20 62 79 20 61 20 46 52 45 45 52 41 44 49 55 53 20 73 65 72 76 | ta.captured.by.a.FREERADIUS.serv |
b45e0 | 65 72 20 77 69 74 68 20 73 71 6c 20 61 63 63 6f 75 6e 74 69 6e 67 3a 00 41 6e 20 65 78 61 6d 70 | er.with.sql.accounting:.An.examp |
b4600 | 6c 65 3a 00 41 6e 20 6f 70 74 69 6f 6e 20 74 68 61 74 20 74 61 6b 65 73 20 61 20 71 75 6f 74 65 | le:.An.option.that.takes.a.quote |
b4620 | 64 20 73 74 72 69 6e 67 20 69 73 20 73 65 74 20 62 79 20 72 65 70 6c 61 63 69 6e 67 20 61 6c 6c | d.string.is.set.by.replacing.all |
b4640 | 20 71 75 6f 74 65 20 63 68 61 72 61 63 74 65 72 73 20 77 69 74 68 20 74 68 65 20 73 74 72 69 6e | .quote.characters.with.the.strin |
b4660 | 67 20 60 60 26 71 75 6f 74 3b 60 60 20 69 6e 73 69 64 65 20 74 68 65 20 73 74 61 74 69 63 2d 6d | g.``"``.inside.the.static-m |
b4680 | 61 70 70 69 6e 67 2d 70 61 72 61 6d 65 74 65 72 73 20 76 61 6c 75 65 2e 20 54 68 65 20 72 65 73 | apping-parameters.value..The.res |
b46a0 | 75 6c 74 69 6e 67 20 6c 69 6e 65 20 69 6e 20 64 68 63 70 64 2e 63 6f 6e 66 20 77 69 6c 6c 20 62 | ulting.line.in.dhcpd.conf.will.b |
b46c0 | 65 20 60 60 6f 70 74 69 6f 6e 20 70 78 65 6c 69 6e 75 78 2e 63 6f 6e 66 69 67 66 69 6c 65 20 22 | e.``option.pxelinux.configfile." |
b46e0 | 70 78 65 6c 69 6e 75 78 2e 63 66 67 2f 30 31 2d 30 30 2d 31 35 2d 31 37 2d 34 34 2d 32 64 2d 61 | pxelinux.cfg/01-00-15-17-44-2d-a |
b4700 | 61 22 3b 60 60 2e 00 41 6e 61 6c 79 73 69 73 20 6f 6e 20 77 68 61 74 20 68 61 70 70 65 6e 73 20 | a";``..Analysis.on.what.happens. |
b4720 | 66 6f 72 20 64 65 73 69 72 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 00 41 6e 64 20 62 61 73 65 | for.desired.connection:.And.base |
b4740 | 20 63 68 61 69 6e 20 66 6f 72 20 74 72 61 66 66 69 63 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 | .chain.for.traffic.generated.by. |
b4760 | 74 68 65 20 72 6f 75 74 65 72 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 | the.router.is.``set.firewall.ipv |
b4780 | 34 20 6f 75 74 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 41 6e 64 20 62 61 73 65 20 63 | 4.output.filter....``.And.base.c |
b47a0 | 68 61 69 6e 20 66 6f 72 20 74 72 61 66 66 69 63 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 74 68 | hain.for.traffic.generated.by.th |
b47c0 | 65 20 72 6f 75 74 65 72 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 | e.router.is.``set.firewall.ipv6. |
b47e0 | 6f 75 74 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 41 6e 64 20 63 6f 6e 74 65 6e 74 20 | output.filter....``.And.content. |
b4800 | 6f 66 20 74 68 65 20 73 63 72 69 70 74 3a 00 41 6e 64 20 66 6f 72 20 69 70 76 36 3a 00 41 6e 64 | of.the.script:.And.for.ipv6:.And |
b4820 | 20 6e 65 78 74 2c 20 73 6f 6d 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 78 61 6d 70 6c | .next,.some.configuration.exampl |
b4840 | 65 20 77 68 65 72 65 20 67 72 6f 75 70 73 20 61 72 65 20 75 73 65 64 3a 00 41 6e 64 20 6f 70 2d | e.where.groups.are.used:.And.op- |
b4860 | 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 3a 00 41 6e 64 20 74 68 65 20 64 69 66 66 65 72 65 6e 74 | mode.commands:.And.the.different |
b4880 | 20 49 50 76 34 20 2a 2a 72 65 73 65 74 2a 2a 20 63 6f 6d 6d 61 6e 64 73 20 61 76 61 69 6c 61 62 | .IPv4.**reset**.commands.availab |
b48a0 | 6c 65 3a 00 41 6e 64 20 74 68 65 6e 20 68 61 73 68 20 69 73 20 72 65 64 75 63 65 64 20 6d 6f 64 | le:.And.then.hash.is.reduced.mod |
b48c0 | 75 6c 6f 20 73 6c 61 76 65 20 63 6f 75 6e 74 2e 00 41 6e 64 2c 20 74 6f 20 70 72 69 6e 74 20 6f | ulo.slave.count..And,.to.print.o |
b48e0 | 6e 6c 79 20 62 72 69 64 67 65 20 66 69 72 65 77 61 6c 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a | nly.bridge.firewall.information: |
b4900 | 00 41 6e 6f 74 68 65 72 20 74 65 72 6d 20 6f 66 74 65 6e 20 75 73 65 64 20 66 6f 72 20 44 4e 41 | .Another.term.often.used.for.DNA |
b4920 | 54 20 69 73 20 2a 2a 31 2d 74 6f 2d 31 20 4e 41 54 2a 2a 2e 20 46 6f 72 20 61 20 31 2d 74 6f 2d | T.is.**1-to-1.NAT**..For.a.1-to- |
b4940 | 31 20 4e 41 54 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 62 6f 74 68 20 44 4e 41 54 20 61 | 1.NAT.configuration,.both.DNAT.a |
b4960 | 6e 64 20 53 4e 41 54 20 61 72 65 20 75 73 65 64 20 74 6f 20 4e 41 54 20 61 6c 6c 20 74 72 61 66 | nd.SNAT.are.used.to.NAT.all.traf |
b4980 | 66 69 63 20 66 72 6f 6d 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 | fic.from.an.external.IP.address. |
b49a0 | 74 6f 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 20 76 69 | to.an.internal.IP.address.and.vi |
b49c0 | 63 65 2d 76 65 72 73 61 2e 00 41 6e 6f 74 68 65 72 20 74 68 69 6e 67 20 74 6f 20 6b 65 65 70 20 | ce-versa..Another.thing.to.keep. |
b49e0 | 69 6e 20 6d 69 6e 64 20 77 69 74 68 20 4c 44 50 20 69 73 20 74 68 61 74 20 6d 75 63 68 20 6c 69 | in.mind.with.LDP.is.that.much.li |
b4a00 | 6b 65 20 42 47 50 2c 20 69 74 20 69 73 20 61 20 70 72 6f 74 6f 63 6f 6c 20 74 68 61 74 20 72 75 | ke.BGP,.it.is.a.protocol.that.ru |
b4a20 | 6e 73 20 6f 6e 20 74 6f 70 20 6f 66 20 54 43 50 2e 20 49 74 20 68 6f 77 65 76 65 72 20 64 6f 65 | ns.on.top.of.TCP..It.however.doe |
b4a40 | 73 20 6e 6f 74 20 68 61 76 65 20 61 6e 20 61 62 69 6c 69 74 79 20 74 6f 20 64 6f 20 73 6f 6d 65 | s.not.have.an.ability.to.do.some |
b4a60 | 74 68 69 6e 67 20 6c 69 6b 65 20 61 20 72 65 66 72 65 73 68 20 63 61 70 61 62 69 6c 69 74 79 20 | thing.like.a.refresh.capability. |
b4a80 | 6c 69 6b 65 20 42 47 50 73 20 72 6f 75 74 65 20 72 65 66 72 65 73 68 20 63 61 70 61 62 69 6c 69 | like.BGPs.route.refresh.capabili |
b4aa0 | 74 79 2e 20 54 68 65 72 65 66 6f 72 65 20 6f 6e 65 20 6d 69 67 68 74 20 68 61 76 65 20 74 6f 20 | ty..Therefore.one.might.have.to. |
b4ac0 | 72 65 73 65 74 20 74 68 65 20 6e 65 69 67 68 62 6f 72 20 66 6f 72 20 61 20 63 61 70 61 62 69 6c | reset.the.neighbor.for.a.capabil |
b4ae0 | 69 74 79 20 63 68 61 6e 67 65 20 6f 72 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 68 | ity.change.or.a.configuration.ch |
b4b00 | 61 6e 67 65 20 74 6f 20 77 6f 72 6b 2e 00 41 70 70 6c 65 20 69 4f 53 2f 69 50 61 64 4f 53 20 65 | ange.to.work..Apple.iOS/iPadOS.e |
b4b20 | 78 70 65 63 74 73 20 74 68 65 20 73 65 72 76 65 72 20 6e 61 6d 65 20 74 6f 20 62 65 20 61 6c 73 | xpects.the.server.name.to.be.als |
b4b40 | 6f 20 75 73 65 64 20 69 6e 20 74 68 65 20 73 65 72 76 65 72 27 73 20 63 65 72 74 69 66 69 63 61 | o.used.in.the.server's.certifica |
b4b60 | 74 65 20 63 6f 6d 6d 6f 6e 20 6e 61 6d 65 2c 20 73 6f 20 69 74 27 73 20 62 65 73 74 20 74 6f 20 | te.common.name,.so.it's.best.to. |
b4b80 | 75 73 65 20 74 68 69 73 20 44 4e 53 20 6e 61 6d 65 20 66 6f 72 20 79 6f 75 72 20 56 50 4e 20 63 | use.this.DNS.name.for.your.VPN.c |
b4ba0 | 6f 6e 6e 65 63 74 69 6f 6e 2e 00 41 70 70 6c 79 20 61 20 72 6f 75 74 65 2d 6d 61 70 20 66 69 6c | onnection..Apply.a.route-map.fil |
b4bc0 | 74 65 72 20 74 6f 20 72 6f 75 74 65 73 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 | ter.to.routes.for.the.specified. |
b4be0 | 70 72 6f 74 6f 63 6f 6c 2e 00 41 70 70 6c 79 20 61 20 72 6f 75 74 65 2d 6d 61 70 20 66 69 6c 74 | protocol..Apply.a.route-map.filt |
b4c00 | 65 72 20 74 6f 20 72 6f 75 74 65 73 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 | er.to.routes.for.the.specified.p |
b4c20 | 72 6f 74 6f 63 6f 6c 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 | rotocol..The.following.protocols |
b4c40 | 20 63 61 6e 20 62 65 20 75 73 65 64 3a 20 61 6e 79 2c 20 62 61 62 65 6c 2c 20 62 67 70 2c 20 63 | .can.be.used:.any,.babel,.bgp,.c |
b4c60 | 6f 6e 6e 65 63 74 65 64 2c 20 65 69 67 72 70 2c 20 69 73 69 73 2c 20 6b 65 72 6e 65 6c 2c 20 6f | onnected,.eigrp,.isis,.kernel,.o |
b4c80 | 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 00 41 70 70 6c 79 20 61 20 | spf,.rip,.static,.table.Apply.a. |
b4ca0 | 72 6f 75 74 65 2d 6d 61 70 20 66 69 6c 74 65 72 20 74 6f 20 72 6f 75 74 65 73 20 66 6f 72 20 74 | route-map.filter.to.routes.for.t |
b4cc0 | 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 6f 74 6f 63 6f 6c 2e 20 54 68 65 20 66 6f 6c 6c 6f | he.specified.protocol..The.follo |
b4ce0 | 77 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 63 61 6e 20 62 65 20 75 73 65 64 3a 20 61 6e 79 2c | wing.protocols.can.be.used:.any, |
b4d00 | 20 62 61 62 65 6c 2c 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 69 73 69 73 2c 20 6b 65 | .babel,.bgp,.connected,.isis,.ke |
b4d20 | 72 6e 65 6c 2c 20 6f 73 70 66 76 33 2c 20 72 69 70 6e 67 2c 20 73 74 61 74 69 63 2c 20 74 61 62 | rnel,.ospfv3,.ripng,.static,.tab |
b4d40 | 6c 65 00 41 70 70 6c 79 20 72 6f 75 74 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 2a 2a 69 6e 62 | le.Apply.routing.policy.to.**inb |
b4d60 | 6f 75 6e 64 2a 2a 20 64 69 72 65 63 74 69 6f 6e 20 6f 66 20 6f 75 74 20 56 4c 41 4e 20 69 6e 74 | ound**.direction.of.out.VLAN.int |
b4d80 | 65 72 66 61 63 65 73 00 41 70 70 6c 79 69 6e 67 20 61 20 52 75 6c 65 2d 53 65 74 20 74 6f 20 61 | erfaces.Applying.a.Rule-Set.to.a |
b4da0 | 20 5a 6f 6e 65 00 41 70 70 6c 79 69 6e 67 20 61 20 52 75 6c 65 2d 53 65 74 20 74 6f 20 61 6e 20 | .Zone.Applying.a.Rule-Set.to.an. |
b4dc0 | 49 6e 74 65 72 66 61 63 65 00 41 70 70 6c 79 69 6e 67 20 61 20 74 72 61 66 66 69 63 20 70 6f 6c | Interface.Applying.a.traffic.pol |
b4de0 | 69 63 79 00 41 72 65 61 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 41 72 65 61 20 69 64 65 6e | icy.Area.Configuration.Area.iden |
b4e00 | 74 69 66 69 65 72 3a 20 60 60 30 30 30 31 60 60 20 49 53 2d 49 53 20 61 72 65 61 20 6e 75 6d 62 | tifier:.``0001``.IS-IS.area.numb |
b4e20 | 65 72 20 28 6e 75 6d 62 65 72 69 63 61 6c 20 61 72 65 61 20 60 60 31 60 60 29 00 41 72 67 75 6d | er.(numberical.area.``1``).Argum |
b4e40 | 65 6e 74 73 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 70 61 73 73 65 64 20 74 6f 20 74 68 65 | ents.which.will.be.passed.to.the |
b4e60 | 20 65 78 65 63 75 74 61 62 6c 65 2e 00 41 72 69 73 74 61 20 45 4f 53 00 41 72 75 62 61 2f 48 50 | .executable..Arista.EOS.Aruba/HP |
b4e80 | 00 41 73 20 49 6e 74 65 72 6e 65 74 20 77 69 64 65 20 50 4d 54 55 20 64 69 73 63 6f 76 65 72 79 | .As.Internet.wide.PMTU.discovery |
b4ea0 | 20 72 61 72 65 6c 79 20 77 6f 72 6b 73 2c 20 77 65 20 73 6f 6d 65 74 69 6d 65 73 20 6e 65 65 64 | .rarely.works,.we.sometimes.need |
b4ec0 | 20 74 6f 20 63 6c 61 6d 70 20 6f 75 72 20 54 43 50 20 4d 53 53 20 76 61 6c 75 65 20 74 6f 20 61 | .to.clamp.our.TCP.MSS.value.to.a |
b4ee0 | 20 73 70 65 63 69 66 69 63 20 76 61 6c 75 65 2e 20 54 68 69 73 20 69 73 20 61 20 66 69 65 6c 64 | .specific.value..This.is.a.field |
b4f00 | 20 69 6e 20 74 68 65 20 54 43 50 20 6f 70 74 69 6f 6e 73 20 70 61 72 74 20 6f 66 20 61 20 53 59 | .in.the.TCP.options.part.of.a.SY |
b4f20 | 4e 20 70 61 63 6b 65 74 2e 20 42 79 20 73 65 74 74 69 6e 67 20 74 68 65 20 4d 53 53 20 76 61 6c | N.packet..By.setting.the.MSS.val |
b4f40 | 75 65 2c 20 79 6f 75 20 61 72 65 20 74 65 6c 6c 69 6e 67 20 74 68 65 20 72 65 6d 6f 74 65 20 73 | ue,.you.are.telling.the.remote.s |
b4f60 | 69 64 65 20 75 6e 65 71 75 69 76 6f 63 61 6c 6c 79 20 27 64 6f 20 6e 6f 74 20 74 72 79 20 74 6f | ide.unequivocally.'do.not.try.to |
b4f80 | 20 73 65 6e 64 20 6d 65 20 70 61 63 6b 65 74 73 20 62 69 67 67 65 72 20 74 68 61 6e 20 74 68 69 | .send.me.packets.bigger.than.thi |
b4fa0 | 73 20 76 61 6c 75 65 27 2e 00 41 73 20 53 53 54 50 20 70 72 6f 76 69 64 65 73 20 50 50 50 20 76 | s.value'..As.SSTP.provides.PPP.v |
b4fc0 | 69 61 20 61 20 53 53 4c 2f 54 4c 53 20 63 68 61 6e 6e 65 6c 20 74 68 65 20 75 73 65 20 6f 66 20 | ia.a.SSL/TLS.channel.the.use.of. |
b4fe0 | 65 69 74 68 65 72 20 70 75 62 6c 69 63 61 6c 6c 79 20 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 | either.publically.signed.certifi |
b5000 | 63 61 74 65 73 20 61 73 20 77 65 6c 6c 20 61 73 20 61 20 70 72 69 76 61 74 65 20 50 4b 49 20 69 | cates.as.well.as.a.private.PKI.i |
b5020 | 73 20 72 65 71 75 69 72 65 64 2e 00 41 73 20 56 79 4f 53 20 69 73 20 4c 69 6e 75 78 20 62 61 73 | s.required..As.VyOS.is.Linux.bas |
b5040 | 65 64 20 74 68 65 20 64 65 66 61 75 6c 74 20 70 6f 72 74 20 75 73 65 64 20 69 73 20 6e 6f 74 20 | ed.the.default.port.used.is.not. |
b5060 | 75 73 69 6e 67 20 34 37 38 39 20 61 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 49 41 4e 41 2d 61 | using.4789.as.the.default.IANA-a |
b5080 | 73 73 69 67 6e 65 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 55 44 50 20 70 6f 72 74 20 6e 75 6d | ssigned.destination.UDP.port.num |
b50a0 | 62 65 72 2e 20 49 6e 73 74 65 61 64 20 56 79 4f 53 20 75 73 65 73 20 74 68 65 20 4c 69 6e 75 78 | ber..Instead.VyOS.uses.the.Linux |
b50c0 | 20 64 65 66 61 75 6c 74 20 70 6f 72 74 20 6f 66 20 38 34 37 32 2e 00 41 73 20 56 79 4f 53 20 69 | .default.port.of.8472..As.VyOS.i |
b50e0 | 73 20 62 61 73 65 64 20 6f 6e 20 4c 69 6e 75 78 20 61 6e 64 20 74 68 65 72 65 20 77 61 73 20 6e | s.based.on.Linux.and.there.was.n |
b5100 | 6f 20 6f 66 66 69 63 69 61 6c 20 49 41 4e 41 20 70 6f 72 74 20 61 73 73 69 67 6e 65 64 20 66 6f | o.official.IANA.port.assigned.fo |
b5120 | 72 20 56 58 4c 41 4e 2c 20 56 79 4f 53 20 75 73 65 73 20 61 20 64 65 66 61 75 6c 74 20 70 6f 72 | r.VXLAN,.VyOS.uses.a.default.por |
b5140 | 74 20 6f 66 20 38 34 37 32 2e 20 59 6f 75 20 63 61 6e 20 63 68 61 6e 67 65 20 74 68 65 20 70 6f | t.of.8472..You.can.change.the.po |
b5160 | 72 74 20 6f 6e 20 61 20 70 65 72 20 56 58 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 20 62 61 73 69 | rt.on.a.per.VXLAN.interface.basi |
b5180 | 73 20 74 6f 20 67 65 74 20 69 74 20 77 6f 72 6b 69 6e 67 20 61 63 72 6f 73 73 20 6d 75 6c 74 69 | s.to.get.it.working.across.multi |
b51a0 | 70 6c 65 20 76 65 6e 64 6f 72 73 2e 00 41 73 20 56 79 4f 53 20 69 73 20 62 61 73 65 64 20 6f 6e | ple.vendors..As.VyOS.is.based.on |
b51c0 | 20 4c 69 6e 75 78 20 69 74 20 6c 65 76 65 72 61 67 65 73 20 69 74 73 20 66 69 72 65 77 61 6c 6c | .Linux.it.leverages.its.firewall |
b51e0 | 2e 20 54 68 65 20 4e 65 74 66 69 6c 74 65 72 20 70 72 6f 6a 65 63 74 20 63 72 65 61 74 65 64 20 | ..The.Netfilter.project.created. |
b5200 | 69 70 74 61 62 6c 65 73 20 61 6e 64 20 69 74 73 20 73 75 63 63 65 73 73 6f 72 20 6e 66 74 61 62 | iptables.and.its.successor.nftab |
b5220 | 6c 65 73 20 66 6f 72 20 74 68 65 20 4c 69 6e 75 78 20 6b 65 72 6e 65 6c 20 74 6f 20 77 6f 72 6b | les.for.the.Linux.kernel.to.work |
b5240 | 20 64 69 72 65 63 74 6c 79 20 6f 6e 20 70 61 63 6b 65 74 20 64 61 74 61 20 66 6c 6f 77 73 2e 20 | .directly.on.packet.data.flows.. |
b5260 | 54 68 69 73 20 6e 6f 77 20 65 78 74 65 6e 64 73 20 74 68 65 20 63 6f 6e 63 65 70 74 20 6f 66 20 | This.now.extends.the.concept.of. |
b5280 | 7a 6f 6e 65 2d 62 61 73 65 64 20 73 65 63 75 72 69 74 79 20 74 6f 20 61 6c 6c 6f 77 20 66 6f 72 | zone-based.security.to.allow.for |
b52a0 | 20 6d 61 6e 69 70 75 6c 61 74 69 6e 67 20 74 68 65 20 64 61 74 61 20 61 74 20 6d 75 6c 74 69 70 | .manipulating.the.data.at.multip |
b52c0 | 6c 65 20 73 74 61 67 65 73 20 6f 6e 63 65 20 61 63 63 65 70 74 65 64 20 62 79 20 74 68 65 20 6e | le.stages.once.accepted.by.the.n |
b52e0 | 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 74 68 65 20 64 72 69 76 65 72 20 | etwork.interface.and.the.driver. |
b5300 | 62 65 66 6f 72 65 20 62 65 69 6e 67 20 68 61 6e 64 65 64 20 6f 66 66 20 74 6f 20 74 68 65 20 64 | before.being.handed.off.to.the.d |
b5320 | 65 73 74 69 6e 61 74 69 6f 6e 20 28 65 2e 67 2e 2c 20 61 20 77 65 62 20 73 65 72 76 65 72 20 4f | estination.(e.g.,.a.web.server.O |
b5340 | 52 20 61 6e 6f 74 68 65 72 20 64 65 76 69 63 65 29 2e 00 41 73 20 56 79 4f 53 20 6d 61 6b 65 73 | R.another.device)..As.VyOS.makes |
b5360 | 20 75 73 65 20 6f 66 20 74 68 65 20 51 4d 49 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 63 6f 6e | .use.of.the.QMI.interface.to.con |
b5380 | 6e 65 63 74 20 74 6f 20 74 68 65 20 57 57 41 4e 20 6d 6f 64 65 6d 20 63 61 72 64 73 2c 20 61 6c | nect.to.the.WWAN.modem.cards,.al |
b53a0 | 73 6f 20 74 68 65 20 66 69 72 6d 77 61 72 65 20 63 61 6e 20 62 65 20 72 65 70 72 6f 67 72 61 6d | so.the.firmware.can.be.reprogram |
b53c0 | 6d 65 64 2e 00 41 73 20 61 20 72 65 66 65 72 65 6e 63 65 3a 20 66 6f 72 20 31 30 6d 62 69 74 2f | med..As.a.reference:.for.10mbit/ |
b53e0 | 73 20 6f 6e 20 49 6e 74 65 6c 2c 20 79 6f 75 20 6d 69 67 68 74 20 6e 65 65 64 20 61 74 20 6c 65 | s.on.Intel,.you.might.need.at.le |
b5400 | 61 73 74 20 31 30 6b 62 79 74 65 20 62 75 66 66 65 72 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 | ast.10kbyte.buffer.if.you.want.t |
b5420 | 6f 20 72 65 61 63 68 20 79 6f 75 72 20 63 6f 6e 66 69 67 75 72 65 64 20 72 61 74 65 2e 00 41 73 | o.reach.your.configured.rate..As |
b5440 | 20 61 20 72 65 73 75 6c 74 2c 20 74 68 65 20 70 72 6f 63 65 73 73 69 6e 67 20 6f 66 20 65 61 63 | .a.result,.the.processing.of.eac |
b5460 | 68 20 70 61 63 6b 65 74 20 62 65 63 6f 6d 65 73 20 6d 6f 72 65 20 65 66 66 69 63 69 65 6e 74 2c | h.packet.becomes.more.efficient, |
b5480 | 20 70 6f 74 65 6e 74 69 61 6c 6c 79 20 6c 65 76 65 72 61 67 69 6e 67 20 68 61 72 64 77 61 72 65 | .potentially.leveraging.hardware |
b54a0 | 20 65 6e 63 72 79 70 74 69 6f 6e 20 6f 66 66 6c 6f 61 64 69 6e 67 20 73 75 70 70 6f 72 74 20 61 | .encryption.offloading.support.a |
b54c0 | 76 61 69 6c 61 62 6c 65 20 69 6e 20 74 68 65 20 6b 65 72 6e 65 6c 2e 00 41 73 20 61 6e 20 61 6c | vailable.in.the.kernel..As.an.al |
b54e0 | 74 65 72 6e 61 74 69 76 65 20 74 6f 20 61 70 70 6c 79 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 | ternative.to.applying.policy.to. |
b5500 | 61 6e 20 69 6e 74 65 72 66 61 63 65 20 64 69 72 65 63 74 6c 79 2c 20 61 20 7a 6f 6e 65 2d 62 61 | an.interface.directly,.a.zone-ba |
b5520 | 73 65 64 20 66 69 72 65 77 61 6c 6c 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 20 74 6f 20 73 | sed.firewall.can.be.created.to.s |
b5540 | 69 6d 70 6c 69 66 79 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 68 65 6e 20 6d 75 6c 74 69 | implify.configuration.when.multi |
b5560 | 70 6c 65 20 69 6e 74 65 72 66 61 63 65 73 20 62 65 6c 6f 6e 67 20 74 6f 20 74 68 65 20 73 61 6d | ple.interfaces.belong.to.the.sam |
b5580 | 65 20 73 65 63 75 72 69 74 79 20 7a 6f 6e 65 2e 20 49 6e 73 74 65 61 64 20 6f 66 20 61 70 70 6c | e.security.zone..Instead.of.appl |
b55a0 | 79 69 6e 67 20 72 75 6c 65 2d 73 65 74 73 20 74 6f 20 69 6e 74 65 72 66 61 63 65 73 2c 20 74 68 | ying.rule-sets.to.interfaces,.th |
b55c0 | 65 79 20 61 72 65 20 61 70 70 6c 69 65 64 20 74 6f 20 73 6f 75 72 63 65 20 7a 6f 6e 65 2d 64 65 | ey.are.applied.to.source.zone-de |
b55e0 | 73 74 69 6e 61 74 69 6f 6e 20 7a 6f 6e 65 20 70 61 69 72 73 2e 00 41 73 20 62 6f 74 68 20 4d 69 | stination.zone.pairs..As.both.Mi |
b5600 | 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 61 6e 64 20 41 70 70 6c 65 20 69 4f 53 2f 69 50 | crosoft.Windows.and.Apple.iOS/iP |
b5620 | 61 64 4f 53 20 6f 6e 6c 79 20 73 75 70 70 6f 72 74 20 61 20 63 65 72 74 61 69 6e 20 73 65 74 20 | adOS.only.support.a.certain.set. |
b5640 | 6f 66 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 69 70 68 65 72 73 20 61 6e 64 20 69 6e 74 65 67 72 | of.encryption.ciphers.and.integr |
b5660 | 69 74 79 20 61 6c 67 6f 72 69 74 68 6d 73 20 77 65 20 77 69 6c 6c 20 76 61 6c 69 64 61 74 65 20 | ity.algorithms.we.will.validate. |
b5680 | 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 49 4b 45 2f 45 53 50 20 70 72 6f 70 6f 73 61 6c 73 | the.configured.IKE/ESP.proposals |
b56a0 | 20 61 6e 64 20 6f 6e 6c 79 20 6c 69 73 74 20 74 68 65 20 63 6f 6d 70 61 74 69 62 6c 65 20 6f 6e | .and.only.list.the.compatible.on |
b56c0 | 65 73 20 74 6f 20 74 68 65 20 75 73 65 72 20 e2 80 94 20 69 66 20 6d 75 6c 74 69 70 6c 65 20 61 | es.to.the.user.....if.multiple.a |
b56e0 | 72 65 20 64 65 66 69 6e 65 64 2e 20 49 66 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 6d 61 74 63 | re.defined..If.there.are.no.matc |
b5700 | 68 69 6e 67 20 70 72 6f 70 6f 73 61 6c 73 20 66 6f 75 6e 64 20 e2 80 94 20 77 65 20 63 61 6e 20 | hing.proposals.found.....we.can. |
b5720 | 6e 6f 74 20 67 65 6e 65 72 61 74 65 20 61 20 70 72 6f 66 69 6c 65 20 66 6f 72 20 79 6f 75 2e 00 | not.generate.a.profile.for.you.. |
b5740 | 41 73 20 64 65 73 63 72 69 62 65 64 2c 20 66 69 72 73 74 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 | As.described,.first.packet.will. |
b5760 | 62 65 20 65 76 61 6c 75 61 74 65 64 20 62 79 20 61 6c 6c 20 74 68 65 20 66 69 72 65 77 61 6c 6c | be.evaluated.by.all.the.firewall |
b5780 | 20 70 61 74 68 2c 20 73 6f 20 64 65 73 69 72 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 68 6f | .path,.so.desired.connection.sho |
b57a0 | 75 6c 64 20 62 65 20 65 78 70 6c 69 63 69 74 65 6c 79 20 61 63 63 65 70 74 65 64 2e 20 53 61 6d | uld.be.explicitely.accepted..Sam |
b57c0 | 65 20 74 68 69 6e 67 20 73 68 6f 75 6c 64 20 62 65 20 74 61 6b 65 6e 20 69 6e 74 6f 20 61 63 63 | e.thing.should.be.taken.into.acc |
b57e0 | 6f 75 6e 74 20 66 6f 72 20 74 72 61 66 66 69 63 20 69 6e 20 72 65 76 65 72 73 65 20 6f 72 64 65 | ount.for.traffic.in.reverse.orde |
b5800 | 72 2e 20 49 6e 20 6d 6f 73 74 20 63 61 73 65 73 20 73 74 61 74 65 20 70 6f 6c 69 63 69 65 73 20 | r..In.most.cases.state.policies. |
b5820 | 61 72 65 20 75 73 65 64 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 61 63 63 65 70 74 20 63 6f 6e 6e | are.used.in.order.to.accept.conn |
b5840 | 65 63 74 69 6f 6e 20 69 6e 20 72 65 76 65 72 73 65 20 70 61 74 63 68 2e 00 41 73 20 6d 6f 72 65 | ection.in.reverse.patch..As.more |
b5860 | 20 61 6e 64 20 6d 6f 72 65 20 72 6f 75 74 65 72 73 20 72 75 6e 20 6f 6e 20 48 79 70 65 72 76 69 | .and.more.routers.run.on.Hypervi |
b5880 | 73 6f 72 73 2c 20 65 78 70 65 63 69 61 6c 6c 79 20 77 69 74 68 20 61 20 3a 61 62 62 72 3a 60 4e | sors,.expecially.with.a.:abbr:`N |
b58a0 | 4f 53 20 28 4e 65 74 77 6f 72 6b 20 4f 70 65 72 61 74 69 6e 67 20 53 79 73 74 65 6d 29 60 20 61 | OS.(Network.Operating.System)`.a |
b58c0 | 73 20 56 79 4f 53 2c 20 69 74 20 6d 61 6b 65 73 20 66 65 77 65 72 20 61 6e 64 20 66 65 77 65 72 | s.VyOS,.it.makes.fewer.and.fewer |
b58e0 | 20 73 65 6e 73 65 20 74 6f 20 75 73 65 20 73 74 61 74 69 63 20 72 65 73 6f 75 72 63 65 20 62 69 | .sense.to.use.static.resource.bi |
b5900 | 6e 64 69 6e 67 73 20 6c 69 6b 65 20 60 60 73 6d 70 2d 61 66 66 69 6e 69 74 79 60 60 20 61 73 20 | ndings.like.``smp-affinity``.as. |
b5920 | 70 72 65 73 65 6e 74 20 69 6e 20 56 79 4f 53 20 31 2e 32 20 61 6e 64 20 65 61 72 6c 69 65 72 20 | present.in.VyOS.1.2.and.earlier. |
b5940 | 74 6f 20 70 69 6e 20 63 65 72 74 61 69 6e 20 69 6e 74 65 72 72 75 70 74 20 68 61 6e 64 6c 65 72 | to.pin.certain.interrupt.handler |
b5960 | 73 20 74 6f 20 73 70 65 63 69 66 69 63 20 43 50 55 73 2e 00 41 73 20 6e 65 74 77 6f 72 6b 20 61 | s.to.specific.CPUs..As.network.a |
b5980 | 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6d 6f 64 69 66 69 65 73 20 74 68 65 20 | ddress.translation.modifies.the. |
b59a0 | 49 50 20 61 64 64 72 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 70 61 63 6b 65 74 | IP.address.information.in.packet |
b59c0 | 73 2c 20 4e 41 54 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 6d 61 79 20 76 61 72 79 20 | s,.NAT.implementations.may.vary. |
b59e0 | 69 6e 20 74 68 65 69 72 20 73 70 65 63 69 66 69 63 20 62 65 68 61 76 69 6f 72 20 69 6e 20 76 61 | in.their.specific.behavior.in.va |
b5a00 | 72 69 6f 75 73 20 61 64 64 72 65 73 73 69 6e 67 20 63 61 73 65 73 20 61 6e 64 20 74 68 65 69 72 | rious.addressing.cases.and.their |
b5a20 | 20 65 66 66 65 63 74 20 6f 6e 20 6e 65 74 77 6f 72 6b 20 74 72 61 66 66 69 63 2e 20 54 68 65 20 | .effect.on.network.traffic..The. |
b5a40 | 73 70 65 63 69 66 69 63 73 20 6f 66 20 4e 41 54 20 62 65 68 61 76 69 6f 72 20 61 72 65 20 6e 6f | specifics.of.NAT.behavior.are.no |
b5a60 | 74 20 63 6f 6d 6d 6f 6e 6c 79 20 64 6f 63 75 6d 65 6e 74 65 64 20 62 79 20 76 65 6e 64 6f 72 73 | t.commonly.documented.by.vendors |
b5a80 | 20 6f 66 20 65 71 75 69 70 6d 65 6e 74 20 63 6f 6e 74 61 69 6e 69 6e 67 20 4e 41 54 20 69 6d 70 | .of.equipment.containing.NAT.imp |
b5aa0 | 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 2e 00 41 73 20 6f 66 20 56 79 4f 53 20 31 2e 34 2c 20 4f 70 | lementations..As.of.VyOS.1.4,.Op |
b5ac0 | 65 6e 56 50 4e 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 6d 6f 64 65 20 63 61 6e 20 75 73 65 20 | enVPN.site-to-site.mode.can.use. |
b5ae0 | 65 69 74 68 65 72 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 73 20 6f 72 20 78 2e 35 30 39 20 | either.pre-shared.keys.or.x.509. |
b5b00 | 63 65 72 74 69 66 69 63 61 74 65 73 2e 00 41 73 20 70 65 72 20 64 65 66 61 75 6c 74 20 61 6e 64 | certificates..As.per.default.and |
b5b20 | 20 69 66 20 6e 6f 74 20 6f 74 68 65 72 77 69 73 65 20 64 65 66 69 6e 65 64 2c 20 6d 73 63 68 61 | .if.not.otherwise.defined,.mscha |
b5b40 | 70 2d 76 32 20 69 73 20 62 65 69 6e 67 20 75 73 65 64 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 | p-v2.is.being.used.for.authentic |
b5b60 | 61 74 69 6f 6e 20 61 6e 64 20 6d 70 70 65 20 31 32 38 2d 62 69 74 20 28 73 74 61 74 65 6c 65 73 | ation.and.mppe.128-bit.(stateles |
b5b80 | 73 29 20 66 6f 72 20 65 6e 63 72 79 70 74 69 6f 6e 2e 20 49 66 20 6e 6f 20 67 61 74 65 77 61 79 | s).for.encryption..If.no.gateway |
b5ba0 | 2d 61 64 64 72 65 73 73 20 69 73 20 73 65 74 20 77 69 74 68 69 6e 20 74 68 65 20 63 6f 6e 66 69 | -address.is.set.within.the.confi |
b5bc0 | 67 75 72 61 74 69 6f 6e 2c 20 74 68 65 20 6c 6f 77 65 73 74 20 49 50 20 6f 75 74 20 6f 66 20 74 | guration,.the.lowest.IP.out.of.t |
b5be0 | 68 65 20 2f 32 34 20 63 6c 69 65 6e 74 2d 69 70 2d 70 6f 6f 6c 20 69 73 20 62 65 69 6e 67 20 75 | he./24.client-ip-pool.is.being.u |
b5c00 | 73 65 64 2e 20 46 6f 72 20 69 6e 73 74 61 6e 63 65 2c 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c | sed..For.instance,.in.the.exampl |
b5c20 | 65 20 62 65 6c 6f 77 20 69 74 20 77 6f 75 6c 64 20 62 65 20 31 39 32 2e 31 36 38 2e 30 2e 31 2e | e.below.it.would.be.192.168.0.1. |
b5c40 | 00 41 73 20 73 61 69 64 20 62 65 66 6f 72 65 2c 20 6f 6e 63 65 20 66 69 72 65 77 61 6c 6c 20 67 | .As.said.before,.once.firewall.g |
b5c60 | 72 6f 75 70 73 20 61 72 65 20 63 72 65 61 74 65 64 2c 20 74 68 65 79 20 63 61 6e 20 62 65 20 72 | roups.are.created,.they.can.be.r |
b5c80 | 65 66 65 72 65 6e 63 65 64 20 65 69 74 68 65 72 20 69 6e 20 66 69 72 65 77 61 6c 6c 2c 20 6e 61 | eferenced.either.in.firewall,.na |
b5ca0 | 74 2c 20 6e 61 74 36 36 20 61 6e 64 2f 6f 72 20 70 6f 6c 69 63 79 2d 72 6f 75 74 65 20 72 75 6c | t,.nat66.and/or.policy-route.rul |
b5cc0 | 65 73 2e 00 41 73 20 73 68 6f 77 6e 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 61 62 6f 76 | es..As.shown.in.the.example.abov |
b5ce0 | 65 2c 20 6f 6e 65 20 6f 66 20 74 68 65 20 70 6f 73 73 69 62 69 6c 69 74 69 65 73 20 74 6f 20 6d | e,.one.of.the.possibilities.to.m |
b5d00 | 61 74 63 68 20 70 61 63 6b 65 74 73 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6d 61 72 6b 73 20 64 | atch.packets.is.based.on.marks.d |
b5d20 | 6f 6e 65 20 62 79 20 74 68 65 20 66 69 72 65 77 61 6c 6c 2c 20 60 74 68 61 74 20 63 61 6e 20 67 | one.by.the.firewall,.`that.can.g |
b5d40 | 69 76 65 20 79 6f 75 20 61 20 67 72 65 61 74 20 64 65 61 6c 20 6f 66 20 66 6c 65 78 69 62 69 6c | ive.you.a.great.deal.of.flexibil |
b5d60 | 69 74 79 60 5f 2e 00 41 73 20 73 68 6f 77 6e 20 69 6e 20 74 68 65 20 6c 61 73 74 20 63 6f 6d 6d | ity`_..As.shown.in.the.last.comm |
b5d80 | 61 6e 64 20 6f 66 20 74 68 65 20 65 78 61 6d 70 6c 65 20 61 62 6f 76 65 2c 20 74 68 65 20 60 71 | and.of.the.example.above,.the.`q |
b5da0 | 75 65 75 65 2d 74 79 70 65 60 20 73 65 74 74 69 6e 67 20 61 6c 6c 6f 77 73 20 74 68 65 73 65 20 | ueue-type`.setting.allows.these. |
b5dc0 | 63 6f 6d 62 69 6e 61 74 69 6f 6e 73 2e 20 59 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 | combinations..You.will.be.able.t |
b5de0 | 6f 20 75 73 65 20 69 74 20 69 6e 20 6d 61 6e 79 20 70 6f 6c 69 63 69 65 73 2e 00 41 73 20 74 68 | o.use.it.in.many.policies..As.th |
b5e00 | 65 20 65 78 61 6d 70 6c 65 20 69 6d 61 67 65 20 62 65 6c 6f 77 20 73 68 6f 77 73 2c 20 74 68 65 | e.example.image.below.shows,.the |
b5e20 | 20 64 65 76 69 63 65 20 6e 6f 77 20 6e 65 65 64 73 20 72 75 6c 65 73 20 74 6f 20 61 6c 6c 6f 77 | .device.now.needs.rules.to.allow |
b5e40 | 2f 62 6c 6f 63 6b 20 74 72 61 66 66 69 63 20 74 6f 20 6f 72 20 66 72 6f 6d 20 74 68 65 20 73 65 | /block.traffic.to.or.from.the.se |
b5e60 | 72 76 69 63 65 73 20 72 75 6e 6e 69 6e 67 20 6f 6e 20 74 68 65 20 64 65 76 69 63 65 20 74 68 61 | rvices.running.on.the.device.tha |
b5e80 | 74 20 68 61 76 65 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 6f 6e 20 74 68 61 74 20 | t.have.open.connections.on.that. |
b5ea0 | 69 6e 74 65 72 66 61 63 65 2e 00 41 73 20 74 68 65 20 65 78 61 6d 70 6c 65 20 69 6d 61 67 65 20 | interface..As.the.example.image. |
b5ec0 | 62 65 6c 6f 77 20 73 68 6f 77 73 2c 20 74 68 65 20 64 65 76 69 63 65 20 77 61 73 20 63 6f 6e 66 | below.shows,.the.device.was.conf |
b5ee0 | 69 67 75 72 65 64 20 77 69 74 68 20 72 75 6c 65 73 20 62 6c 6f 63 6b 69 6e 67 20 69 6e 62 6f 75 | igured.with.rules.blocking.inbou |
b5f00 | 6e 64 20 6f 72 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 6e 20 65 61 63 68 20 69 | nd.or.outbound.traffic.on.each.i |
b5f20 | 6e 74 65 72 66 61 63 65 2e 00 41 73 20 74 68 65 20 6e 61 6d 65 20 69 6d 70 6c 69 65 73 2c 20 69 | nterface..As.the.name.implies,.i |
b5f40 | 74 27 73 20 49 50 76 34 20 65 6e 63 61 70 73 75 6c 61 74 65 64 20 69 6e 20 49 50 76 36 2c 20 61 | t's.IPv4.encapsulated.in.IPv6,.a |
b5f60 | 73 20 73 69 6d 70 6c 65 20 61 73 20 74 68 61 74 2e 00 41 73 20 77 65 6c 6c 20 61 73 20 74 68 65 | s.simple.as.that..As.well.as.the |
b5f80 | 20 62 65 6c 6f 77 20 74 6f 20 61 6c 6c 6f 77 20 4e 41 54 2d 74 72 61 76 65 72 73 61 6c 20 28 77 | .below.to.allow.NAT-traversal.(w |
b5fa0 | 68 65 6e 20 4e 41 54 20 69 73 20 64 65 74 65 63 74 65 64 20 62 79 20 74 68 65 20 56 50 4e 20 63 | hen.NAT.is.detected.by.the.VPN.c |
b5fc0 | 6c 69 65 6e 74 2c 20 45 53 50 20 69 73 20 65 6e 63 61 70 73 75 6c 61 74 65 64 20 69 6e 20 55 44 | lient,.ESP.is.encapsulated.in.UD |
b5fe0 | 50 20 66 6f 72 20 4e 41 54 2d 74 72 61 76 65 72 73 61 6c 29 3a 00 41 73 20 77 69 74 68 20 6f 74 | P.for.NAT-traversal):.As.with.ot |
b6000 | 68 65 72 20 70 6f 6c 69 63 69 65 73 2c 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 63 61 6e 20 65 6d | her.policies,.Round-Robin.can.em |
b6020 | 62 65 64 5f 20 61 6e 6f 74 68 65 72 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 | bed_.another.policy.into.a.class |
b6040 | 20 74 68 72 6f 75 67 68 20 74 68 65 20 60 60 71 75 65 75 65 2d 74 79 70 65 60 60 20 73 65 74 74 | .through.the.``queue-type``.sett |
b6060 | 69 6e 67 2e 00 41 73 20 77 69 74 68 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 73 2c 20 53 68 61 | ing..As.with.other.policies,.Sha |
b6080 | 70 65 72 20 63 61 6e 20 65 6d 62 65 64 5f 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 73 20 69 6e | per.can.embed_.other.policies.in |
b60a0 | 74 6f 20 69 74 73 20 63 6c 61 73 73 65 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 60 60 71 75 65 | to.its.classes.through.the.``que |
b60c0 | 75 65 2d 74 79 70 65 60 60 20 73 65 74 74 69 6e 67 20 61 6e 64 20 74 68 65 6e 20 63 6f 6e 66 69 | ue-type``.setting.and.then.confi |
b60e0 | 67 75 72 65 20 74 68 65 69 72 20 70 61 72 61 6d 65 74 65 72 73 2e 00 41 73 20 77 69 74 68 20 6f | gure.their.parameters..As.with.o |
b6100 | 74 68 65 72 20 70 6f 6c 69 63 69 65 73 2c 20 79 6f 75 20 63 61 6e 20 64 65 66 69 6e 65 20 64 69 | ther.policies,.you.can.define.di |
b6120 | 66 66 65 72 65 6e 74 20 74 79 70 65 20 6f 66 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 73 20 66 | fferent.type.of.matching.rules.f |
b6140 | 6f 72 20 79 6f 75 72 20 63 6c 61 73 73 65 73 3a 00 41 73 20 77 69 74 68 20 6f 74 68 65 72 20 70 | or.your.classes:.As.with.other.p |
b6160 | 6f 6c 69 63 69 65 73 2c 20 79 6f 75 20 63 61 6e 20 65 6d 62 65 64 5f 20 6f 74 68 65 72 20 70 6f | olicies,.you.can.embed_.other.po |
b6180 | 6c 69 63 69 65 73 20 69 6e 74 6f 20 74 68 65 20 63 6c 61 73 73 65 73 20 28 61 6e 64 20 64 65 66 | licies.into.the.classes.(and.def |
b61a0 | 61 75 6c 74 29 20 6f 66 20 79 6f 75 72 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 70 6f 6c | ault).of.your.Priority.Queue.pol |
b61c0 | 69 63 79 20 74 68 72 6f 75 67 68 20 74 68 65 20 60 60 71 75 65 75 65 2d 74 79 70 65 60 60 20 73 | icy.through.the.``queue-type``.s |
b61e0 | 65 74 74 69 6e 67 3a 00 41 73 20 79 6f 75 20 63 61 6e 20 73 65 65 20 69 6e 20 74 68 65 20 65 78 | etting:.As.you.can.see.in.the.ex |
b6200 | 61 6d 70 6c 65 20 68 65 72 65 2c 20 79 6f 75 20 63 61 6e 20 61 73 73 69 67 6e 20 74 68 65 20 73 | ample.here,.you.can.assign.the.s |
b6220 | 61 6d 65 20 72 75 6c 65 2d 73 65 74 20 74 6f 20 73 65 76 65 72 61 6c 20 69 6e 74 65 72 66 61 63 | ame.rule-set.to.several.interfac |
b6240 | 65 73 2e 20 41 6e 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 6f 6e 6c 79 20 68 61 76 65 20 6f | es..An.interface.can.only.have.o |
b6260 | 6e 65 20 72 75 6c 65 2d 73 65 74 20 70 65 72 20 63 68 61 69 6e 2e 00 41 73 20 79 6f 75 20 63 61 | ne.rule-set.per.chain..As.you.ca |
b6280 | 6e 20 73 65 65 2c 20 4c 65 61 66 32 20 61 6e 64 20 4c 65 61 66 33 20 63 6f 6e 66 69 67 75 72 61 | n.see,.Leaf2.and.Leaf3.configura |
b62a0 | 74 69 6f 6e 20 69 73 20 61 6c 6d 6f 73 74 20 69 64 65 6e 74 69 63 61 6c 2e 20 54 68 65 72 65 20 | tion.is.almost.identical..There. |
b62c0 | 61 72 65 20 6c 6f 74 73 20 6f 66 20 63 6f 6d 6d 61 6e 64 73 20 61 62 6f 76 65 2c 20 49 27 6c 6c | are.lots.of.commands.above,.I'll |
b62e0 | 20 74 72 79 20 74 6f 20 69 6e 74 6f 20 6d 6f 72 65 20 64 65 74 61 69 6c 20 62 65 6c 6f 77 2c 20 | .try.to.into.more.detail.below,. |
b6300 | 63 6f 6d 6d 61 6e 64 20 64 65 73 63 72 69 70 74 69 6f 6e 73 20 61 72 65 20 70 6c 61 63 65 64 20 | command.descriptions.are.placed. |
b6320 | 75 6e 64 65 72 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 62 6f 78 65 73 3a 00 41 73 73 69 67 6e 20 | under.the.command.boxes:.Assign. |
b6340 | 60 3c 6d 65 6d 62 65 72 3e 60 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 62 72 69 64 67 65 20 60 | `<member>`.interface.to.bridge.` |
b6360 | 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 20 41 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 68 65 6c 70 65 | <interface>`..A.completion.helpe |
b6380 | 72 20 77 69 6c 6c 20 68 65 6c 70 20 79 6f 75 20 77 69 74 68 20 61 6c 6c 20 61 6c 6c 6f 77 65 64 | r.will.help.you.with.all.allowed |
b63a0 | 20 69 6e 74 65 72 66 61 63 65 73 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 62 72 69 64 67 65 64 | .interfaces.which.can.be.bridged |
b63c0 | 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 3a 72 65 66 3a 60 65 74 68 65 72 6e 65 74 2d 69 | ..This.includes.:ref:`ethernet-i |
b63e0 | 6e 74 65 72 66 61 63 65 60 2c 20 3a 72 65 66 3a 60 62 6f 6e 64 2d 69 6e 74 65 72 66 61 63 65 60 | nterface`,.:ref:`bond-interface` |
b6400 | 2c 20 3a 72 65 66 3a 60 6c 32 74 70 76 33 2d 69 6e 74 65 72 66 61 63 65 60 2c 20 3a 72 65 66 3a | ,.:ref:`l2tpv3-interface`,.:ref: |
b6420 | 60 6f 70 65 6e 76 70 6e 60 2c 20 3a 72 65 66 3a 60 76 78 6c 61 6e 2d 69 6e 74 65 72 66 61 63 65 | `openvpn`,.:ref:`vxlan-interface |
b6440 | 60 2c 20 3a 72 65 66 3a 60 77 69 72 65 6c 65 73 73 2d 69 6e 74 65 72 66 61 63 65 60 2c 20 3a 72 | `,.:ref:`wireless-interface`,.:r |
b6460 | 65 66 3a 60 74 75 6e 6e 65 6c 2d 69 6e 74 65 72 66 61 63 65 60 20 61 6e 64 20 3a 72 65 66 3a 60 | ef:`tunnel-interface`.and.:ref:` |
b6480 | 67 65 6e 65 76 65 2d 69 6e 74 65 72 66 61 63 65 60 2e 00 41 73 73 69 67 6e 20 61 20 73 70 65 63 | geneve-interface`..Assign.a.spec |
b64a0 | 69 66 69 63 20 62 61 63 6b 65 6e 64 20 74 6f 20 61 20 72 75 6c 65 00 41 73 73 69 67 6e 20 69 6e | ific.backend.to.a.rule.Assign.in |
b64c0 | 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 69 6e 74 65 72 66 61 63 | terface.identified.by.`<interfac |
b64e0 | 65 3e 60 20 74 6f 20 56 52 46 20 6e 61 6d 65 64 20 60 3c 6e 61 6d 65 3e 60 2e 00 41 73 73 69 67 | e>`.to.VRF.named.`<name>`..Assig |
b6500 | 6e 20 6d 65 6d 62 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 50 6f 72 74 43 68 61 6e 6e | n.member.interfaces.to.PortChann |
b6520 | 65 6c 00 41 73 73 69 67 6e 20 73 74 61 74 69 63 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 60 | el.Assign.static.IP.address.to.` |
b6540 | 3c 75 73 65 72 3e 60 20 61 63 63 6f 75 6e 74 2e 00 41 73 73 69 67 6e 20 74 68 65 20 49 50 20 61 | <user>`.account..Assign.the.IP.a |
b6560 | 64 64 72 65 73 73 20 74 6f 20 74 68 69 73 20 6d 61 63 68 69 6e 65 20 66 6f 72 20 60 3c 74 69 6d | ddress.to.this.machine.for.`<tim |
b6580 | 65 3e 60 20 73 65 63 6f 6e 64 73 2e 00 41 73 73 69 67 6e 20 74 68 65 20 53 53 48 20 70 75 62 6c | e>`.seconds..Assign.the.SSH.publ |
b65a0 | 69 63 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 60 3c 6b 65 79 3e 60 20 69 64 65 6e 74 69 66 69 65 | ic.key.portion.`<key>`.identifie |
b65c0 | 64 20 62 79 20 70 65 72 2d 6b 65 79 20 60 3c 69 64 65 6e 74 69 66 69 65 72 3e 60 20 74 6f 20 74 | d.by.per-key.`<identifier>`.to.t |
b65e0 | 68 65 20 6c 6f 63 61 6c 20 75 73 65 72 20 60 3c 75 73 65 72 6e 61 6d 65 3e 60 2e 00 41 73 73 6f | he.local.user.`<username>`..Asso |
b6600 | 63 69 61 74 65 73 20 74 68 65 20 70 72 65 76 69 6f 75 73 6c 79 20 67 65 6e 65 72 61 74 65 64 20 | ciates.the.previously.generated. |
b6620 | 70 72 69 76 61 74 65 20 6b 65 79 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 57 69 72 65 47 75 | private.key.to.a.specific.WireGu |
b6640 | 61 72 64 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 63 | ard.interface..The.private.key.c |
b6660 | 61 6e 20 62 65 20 67 65 6e 65 72 61 74 65 20 76 69 61 20 74 68 65 20 63 6f 6d 6d 61 6e 64 00 41 | an.be.generate.via.the.command.A |
b6680 | 73 73 75 72 65 20 74 68 61 74 20 79 6f 75 72 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 61 | ssure.that.your.firewall.rules.a |
b66a0 | 6c 6c 6f 77 20 74 68 65 20 74 72 61 66 66 69 63 2c 20 69 6e 20 77 68 69 63 68 20 63 61 73 65 20 | llow.the.traffic,.in.which.case. |
b66c0 | 79 6f 75 20 68 61 76 65 20 61 20 77 6f 72 6b 69 6e 67 20 56 50 4e 20 75 73 69 6e 67 20 57 69 72 | you.have.a.working.VPN.using.Wir |
b66e0 | 65 47 75 61 72 64 2e 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 31 | eGuard..Assured.Forwarding(AF).1 |
b6700 | 31 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 31 32 00 41 73 73 75 | 1.Assured.Forwarding(AF).12.Assu |
b6720 | 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 31 33 00 41 73 73 75 72 65 64 20 46 6f | red.Forwarding(AF).13.Assured.Fo |
b6740 | 72 77 61 72 64 69 6e 67 28 41 46 29 20 32 31 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 | rwarding(AF).21.Assured.Forwardi |
b6760 | 6e 67 28 41 46 29 20 32 32 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 | ng(AF).22.Assured.Forwarding(AF) |
b6780 | 20 32 33 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 33 31 00 41 73 | .23.Assured.Forwarding(AF).31.As |
b67a0 | 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 33 32 00 41 73 73 75 72 65 64 20 | sured.Forwarding(AF).32.Assured. |
b67c0 | 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 33 33 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 | Forwarding(AF).33.Assured.Forwar |
b67e0 | 64 69 6e 67 28 41 46 29 20 34 31 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 | ding(AF).41.Assured.Forwarding(A |
b6800 | 46 29 20 34 32 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 34 33 00 | F).42.Assured.Forwarding(AF).43. |
b6820 | 41 74 20 65 76 65 72 79 20 72 6f 75 6e 64 2c 20 74 68 65 20 64 65 66 69 63 69 74 20 63 6f 75 6e | At.every.round,.the.deficit.coun |
b6840 | 74 65 72 20 61 64 64 73 20 74 68 65 20 71 75 61 6e 74 75 6d 20 73 6f 20 74 68 61 74 20 65 76 65 | ter.adds.the.quantum.so.that.eve |
b6860 | 6e 20 6c 61 72 67 65 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 68 61 76 65 20 74 68 65 69 72 20 | n.large.packets.will.have.their. |
b6880 | 6f 70 70 6f 72 74 75 6e 69 74 79 20 74 6f 20 62 65 20 64 65 71 75 65 75 65 64 2e 00 41 74 20 74 | opportunity.to.be.dequeued..At.t |
b68a0 | 68 65 20 6d 6f 6d 65 6e 74 20 69 74 20 6e 6f 74 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 6c 6f 6f | he.moment.it.not.possible.to.loo |
b68c0 | 6b 20 61 74 20 74 68 65 20 77 68 6f 6c 65 20 66 69 72 65 77 61 6c 6c 20 6c 6f 67 20 77 69 74 68 | k.at.the.whole.firewall.log.with |
b68e0 | 20 56 79 4f 53 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 2e 20 41 6c 6c 20 | .VyOS.operational.commands..All. |
b6900 | 6c 6f 67 73 20 77 69 6c 6c 20 73 61 76 65 20 74 6f 20 60 60 2f 76 61 72 2f 6c 6f 67 73 2f 6d 65 | logs.will.save.to.``/var/logs/me |
b6920 | 73 73 61 67 65 73 60 60 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 67 72 65 70 20 27 31 | ssages``..For.example:.``grep.'1 |
b6940 | 30 2e 31 30 2e 30 2e 31 30 27 20 2f 76 61 72 2f 6c 6f 67 2f 6d 65 73 73 61 67 65 73 60 60 00 41 | 0.10.0.10'./var/log/messages``.A |
b6960 | 74 20 74 68 65 20 74 69 6d 65 20 6f 66 20 74 68 69 73 20 77 72 69 74 69 6e 67 20 74 68 65 20 66 | t.the.time.of.this.writing.the.f |
b6980 | 6f 6c 6c 6f 77 69 6e 67 20 64 69 73 70 6c 61 79 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 3a | ollowing.displays.are.supported: |
b69a0 | 00 41 74 20 76 65 72 79 20 6c 6f 77 20 72 61 74 65 73 20 28 62 65 6c 6f 77 20 33 4d 62 69 74 29 | .At.very.low.rates.(below.3Mbit) |
b69c0 | 2c 20 62 65 73 69 64 65 73 20 74 75 6e 69 6e 67 20 60 71 75 61 6e 74 75 6d 60 20 28 33 30 30 20 | ,.besides.tuning.`quantum`.(300. |
b69e0 | 6b 65 65 70 73 20 62 65 69 6e 67 20 6f 6b 29 20 79 6f 75 20 6d 61 79 20 61 6c 73 6f 20 77 61 6e | keeps.being.ok).you.may.also.wan |
b6a00 | 74 20 74 6f 20 69 6e 63 72 65 61 73 65 20 60 74 61 72 67 65 74 60 20 74 6f 20 73 6f 6d 65 74 68 | t.to.increase.`target`.to.someth |
b6a20 | 69 6e 67 20 6c 69 6b 65 20 31 35 6d 73 20 61 6e 64 20 69 6e 63 72 65 61 73 65 20 60 69 6e 74 65 | ing.like.15ms.and.increase.`inte |
b6a40 | 72 76 61 6c 60 20 74 6f 20 73 6f 6d 65 74 68 69 6e 67 20 61 72 6f 75 6e 64 20 31 35 30 20 6d 73 | rval`.to.something.around.150.ms |
b6a60 | 2e 00 41 74 74 61 63 68 65 73 20 75 73 65 72 2d 64 65 66 69 6e 65 64 20 6e 65 74 77 6f 72 6b 20 | ..Attaches.user-defined.network. |
b6a80 | 74 6f 20 61 20 63 6f 6e 74 61 69 6e 65 72 2e 20 4f 6e 6c 79 20 6f 6e 65 20 6e 65 74 77 6f 72 6b | to.a.container..Only.one.network |
b6aa0 | 20 6d 75 73 74 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 6e 64 20 6d 75 73 74 20 61 6c 72 65 | .must.be.specified.and.must.alre |
b6ac0 | 61 64 79 20 65 78 69 73 74 2e 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 00 41 75 74 68 65 6e | ady.exist..Authentication.Authen |
b6ae0 | 74 69 63 61 74 69 6f 6e 20 28 45 41 50 6f 4c 29 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 | tication.(EAPoL).Authentication. |
b6b00 | 41 64 76 61 6e 63 65 64 20 4f 70 74 69 6f 6e 73 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 | Advanced.Options.Authentication. |
b6b20 | 61 70 70 6c 69 63 61 74 69 6f 6e 20 63 6c 69 65 6e 74 2d 69 64 2e 00 41 75 74 68 65 6e 74 69 63 | application.client-id..Authentic |
b6b40 | 61 74 69 6f 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 63 6c 69 65 6e 74 2d 73 65 63 72 65 74 2e | ation.application.client-secret. |
b6b60 | 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 74 65 6e 61 | .Authentication.application.tena |
b6b80 | 6e 74 2d 69 64 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 64 6f 6e 65 20 62 79 20 | nt-id.Authentication.is.done.by. |
b6ba0 | 75 73 69 6e 67 20 74 68 65 20 60 60 6f 70 65 6e 76 70 6e 2d 61 75 74 68 2d 6c 64 61 70 2e 73 6f | using.the.``openvpn-auth-ldap.so |
b6bc0 | 60 60 20 70 6c 75 67 69 6e 20 77 68 69 63 68 20 69 73 20 73 68 69 70 70 65 64 20 77 69 74 68 20 | ``.plugin.which.is.shipped.with. |
b6be0 | 65 76 65 72 79 20 56 79 4f 53 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 2e 20 41 20 64 65 64 69 63 | every.VyOS.installation..A.dedic |
b6c00 | 61 74 65 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 20 69 73 20 72 65 71 75 69 | ated.configuration.file.is.requi |
b6c20 | 72 65 64 2e 20 49 74 20 69 73 20 62 65 73 74 20 70 72 61 63 74 69 73 65 20 74 6f 20 73 74 6f 72 | red..It.is.best.practise.to.stor |
b6c40 | 65 20 69 74 20 69 6e 20 60 60 2f 63 6f 6e 66 69 67 60 60 20 74 6f 20 73 75 72 76 69 76 65 20 69 | e.it.in.``/config``.to.survive.i |
b6c60 | 6d 61 67 65 20 75 70 64 61 74 65 73 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 72 67 61 | mage.updates.Authentication.orga |
b6c80 | 6e 69 7a 61 74 69 6f 6e 20 6e 61 6d 65 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 74 6f 6b | nization.name.Authentication.tok |
b6ca0 | 65 6e 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 e2 80 93 20 74 6f 20 76 65 72 69 66 79 20 | en.Authentication.....to.verify. |
b6cc0 | 74 68 61 74 20 74 68 65 20 6d 65 73 73 61 67 65 20 69 73 20 66 72 6f 6d 20 61 20 76 61 6c 69 64 | that.the.message.is.from.a.valid |
b6ce0 | 20 73 6f 75 72 63 65 2e 00 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 74 6f 6b 65 6e 00 41 75 74 | .source..Authorization.token.Aut |
b6d00 | 6f 6d 61 74 69 63 20 56 4c 41 4e 20 43 72 65 61 74 69 6f 6e 00 41 75 74 6f 6d 61 74 69 63 20 56 | omatic.VLAN.Creation.Automatic.V |
b6d20 | 4c 41 4e 20 63 72 65 61 74 69 6f 6e 00 41 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 63 72 65 61 74 | LAN.creation.Automatically.creat |
b6d40 | 65 20 42 46 44 20 73 65 73 73 69 6f 6e 20 66 6f 72 20 65 61 63 68 20 52 49 50 20 70 65 65 72 20 | e.BFD.session.for.each.RIP.peer. |
b6d60 | 64 69 73 63 6f 76 65 72 65 64 20 69 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 20 57 68 | discovered.in.this.interface..Wh |
b6d80 | 65 6e 20 74 68 65 20 42 46 44 20 73 65 73 73 69 6f 6e 20 6d 6f 6e 69 74 6f 72 20 73 69 67 6e 61 | en.the.BFD.session.monitor.signa |
b6da0 | 6c 69 7a 65 20 74 68 61 74 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 64 6f 77 6e 20 74 68 65 20 52 | lize.that.the.link.is.down.the.R |
b6dc0 | 49 50 20 70 65 65 72 20 69 73 20 72 65 6d 6f 76 65 64 20 61 6e 64 20 61 6c 6c 20 74 68 65 20 6c | IP.peer.is.removed.and.all.the.l |
b6de0 | 65 61 72 6e 65 64 20 72 6f 75 74 65 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 | earned.routes.associated.with.th |
b6e00 | 61 74 20 70 65 65 72 20 61 72 65 20 72 65 6d 6f 76 65 64 2e 00 41 75 74 6f 6d 61 74 69 63 61 6c | at.peer.are.removed..Automatical |
b6e20 | 6c 79 20 72 65 62 6f 6f 74 20 73 79 73 74 65 6d 20 6f 6e 20 6b 65 72 6e 65 6c 20 70 61 6e 69 63 | ly.reboot.system.on.kernel.panic |
b6e40 | 20 61 66 74 65 72 20 36 30 20 73 65 63 6f 6e 64 73 2e 00 41 75 74 6f 6e 6f 6d 6f 75 73 20 53 79 | .after.60.seconds..Autonomous.Sy |
b6e60 | 73 74 65 6d 73 00 41 76 6f 69 64 69 6e 67 20 22 6c 65 61 6b 79 22 20 4e 41 54 00 41 7a 75 72 65 | stems.Avoiding."leaky".NAT.Azure |
b6e80 | 2d 64 61 74 61 2d 65 78 70 6c 6f 72 65 72 00 42 46 44 00 42 46 44 20 53 74 61 74 69 63 20 52 6f | -data-explorer.BFD.BFD.Static.Ro |
b6ea0 | 75 74 65 20 4d 6f 6e 69 74 6f 72 69 6e 67 00 42 46 44 20 73 65 6e 64 73 20 6c 6f 74 73 20 6f 66 | ute.Monitoring.BFD.sends.lots.of |
b6ec0 | 20 73 6d 61 6c 6c 20 55 44 50 20 70 61 63 6b 65 74 73 20 76 65 72 79 20 71 75 69 63 6b 6c 79 20 | .small.UDP.packets.very.quickly. |
b6ee0 | 74 6f 20 65 6e 73 75 72 65 73 20 74 68 61 74 20 74 68 65 20 70 65 65 72 20 69 73 20 73 74 69 6c | to.ensures.that.the.peer.is.stil |
b6f00 | 6c 20 61 6c 69 76 65 2e 00 42 47 50 00 42 47 50 20 2d 20 41 53 20 50 61 74 68 20 50 6f 6c 69 63 | l.alive..BGP.BGP.-.AS.Path.Polic |
b6f20 | 79 00 42 47 50 20 2d 20 43 6f 6d 6d 75 6e 69 74 79 20 4c 69 73 74 00 42 47 50 20 2d 20 45 78 74 | y.BGP.-.Community.List.BGP.-.Ext |
b6f40 | 65 6e 64 65 64 20 43 6f 6d 6d 75 6e 69 74 79 20 4c 69 73 74 00 42 47 50 20 2d 20 4c 61 72 67 65 | ended.Community.List.BGP.-.Large |
b6f60 | 20 43 6f 6d 6d 75 6e 69 74 79 20 4c 69 73 74 00 42 47 50 20 45 78 61 6d 70 6c 65 00 42 47 50 20 | .Community.List.BGP.Example.BGP. |
b6f80 | 52 6f 75 74 65 72 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 42 47 50 20 53 63 61 6c 69 6e 67 | Router.Configuration.BGP.Scaling |
b6fa0 | 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 42 47 50 20 61 67 67 72 65 67 61 74 6f 72 20 61 74 | .Configuration.BGP.aggregator.at |
b6fc0 | 74 72 69 62 75 74 65 3a 20 41 53 20 6e 75 6d 62 65 72 20 6f 72 20 49 50 20 61 64 64 72 65 73 73 | tribute:.AS.number.or.IP.address |
b6fe0 | 20 6f 66 20 61 6e 20 61 67 67 72 65 67 61 74 69 6f 6e 2e 00 42 47 50 20 61 73 2d 70 61 74 68 20 | .of.an.aggregation..BGP.as-path. |
b7000 | 6c 69 73 74 20 74 6f 20 6d 61 74 63 68 2e 00 42 47 50 20 61 74 6f 6d 69 63 20 61 67 67 72 65 67 | list.to.match..BGP.atomic.aggreg |
b7020 | 61 74 65 20 61 74 74 72 69 62 75 74 65 2e 00 42 47 50 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 | ate.attribute..BGP.community-lis |
b7040 | 74 20 74 6f 20 6d 61 74 63 68 2e 00 42 47 50 20 65 78 74 65 6e 64 65 64 20 63 6f 6d 6d 75 6e 69 | t.to.match..BGP.extended.communi |
b7060 | 74 79 20 74 6f 20 6d 61 74 63 68 2e 00 42 47 50 20 72 6f 6c 65 73 20 61 72 65 20 64 65 66 69 6e | ty.to.match..BGP.roles.are.defin |
b7080 | 65 64 20 69 6e 20 52 46 43 20 3a 72 66 63 3a 60 39 32 33 34 60 20 61 6e 64 20 70 72 6f 76 69 64 | ed.in.RFC.:rfc:`9234`.and.provid |
b70a0 | 65 20 61 6e 20 65 61 73 79 20 77 61 79 20 74 6f 20 61 64 64 20 72 6f 75 74 65 20 6c 65 61 6b 20 | e.an.easy.way.to.add.route.leak. |
b70c0 | 70 72 65 76 65 6e 74 69 6f 6e 2c 20 64 65 74 65 63 74 69 6f 6e 20 61 6e 64 20 6d 69 74 69 67 61 | prevention,.detection.and.mitiga |
b70e0 | 74 69 6f 6e 2e 20 54 68 65 20 6c 6f 63 61 6c 20 52 6f 6c 65 20 76 61 6c 75 65 20 69 73 20 6e 65 | tion..The.local.Role.value.is.ne |
b7100 | 67 6f 74 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 6e 65 77 20 42 47 50 20 52 6f 6c 65 20 63 | gotiated.with.the.new.BGP.Role.c |
b7120 | 61 70 61 62 69 6c 69 74 79 20 77 68 69 63 68 20 68 61 73 20 61 20 62 75 69 6c 74 2d 69 6e 20 63 | apability.which.has.a.built-in.c |
b7140 | 68 65 63 6b 20 6f 66 20 74 68 65 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 76 61 6c 75 65 2e | heck.of.the.corresponding.value. |
b7160 | 20 49 6e 20 63 61 73 65 20 6f 66 20 61 20 6d 69 73 6d 61 74 63 68 20 74 68 65 20 6e 65 77 20 4f | .In.case.of.a.mismatch.the.new.O |
b7180 | 50 45 4e 20 52 6f 6c 65 73 20 4d 69 73 6d 61 74 63 68 20 4e 6f 74 69 66 69 63 61 74 69 6f 6e 20 | PEN.Roles.Mismatch.Notification. |
b71a0 | 3c 32 2c 20 31 31 3e 20 77 6f 75 6c 64 20 62 65 20 73 65 6e 74 2e 20 54 68 65 20 63 6f 72 72 65 | <2,.11>.would.be.sent..The.corre |
b71c0 | 63 74 20 52 6f 6c 65 20 70 61 69 72 73 20 61 72 65 3a 00 42 47 50 20 72 6f 75 74 65 72 73 20 63 | ct.Role.pairs.are:.BGP.routers.c |
b71e0 | 6f 6e 6e 65 63 74 65 64 20 69 6e 73 69 64 65 20 74 68 65 20 73 61 6d 65 20 41 53 20 74 68 72 6f | onnected.inside.the.same.AS.thro |
b7200 | 75 67 68 20 42 47 50 20 62 65 6c 6f 6e 67 20 74 6f 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 42 47 | ugh.BGP.belong.to.an.internal.BG |
b7220 | 50 20 73 65 73 73 69 6f 6e 2c 20 6f 72 20 49 42 47 50 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 | P.session,.or.IBGP..In.order.to. |
b7240 | 70 72 65 76 65 6e 74 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 6c 6f 6f 70 73 2c 20 49 42 47 | prevent.routing.table.loops,.IBG |
b7260 | 50 20 73 70 65 61 6b 65 72 20 64 6f 65 73 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 20 49 42 47 | P.speaker.does.not.advertise.IBG |
b7280 | 50 2d 6c 65 61 72 6e 65 64 20 72 6f 75 74 65 73 20 74 6f 20 6f 74 68 65 72 20 49 42 47 50 20 73 | P-learned.routes.to.other.IBGP.s |
b72a0 | 70 65 61 6b 65 72 20 28 53 70 6c 69 74 20 48 6f 72 69 7a 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 29 | peaker.(Split.Horizon.mechanism) |
b72c0 | 2e 20 41 73 20 73 75 63 68 2c 20 49 42 47 50 20 72 65 71 75 69 72 65 73 20 61 20 66 75 6c 6c 20 | ..As.such,.IBGP.requires.a.full. |
b72e0 | 6d 65 73 68 20 6f 66 20 61 6c 6c 20 70 65 65 72 73 2e 20 46 6f 72 20 6c 61 72 67 65 20 6e 65 74 | mesh.of.all.peers..For.large.net |
b7300 | 77 6f 72 6b 73 2c 20 74 68 69 73 20 71 75 69 63 6b 6c 79 20 62 65 63 6f 6d 65 73 20 75 6e 73 63 | works,.this.quickly.becomes.unsc |
b7320 | 61 6c 61 62 6c 65 2e 00 42 47 50 20 72 6f 75 74 65 73 20 6d 61 79 20 62 65 20 6c 65 61 6b 65 64 | alable..BGP.routes.may.be.leaked |
b7340 | 20 28 69 2e 65 2e 20 63 6f 70 69 65 64 29 20 62 65 74 77 65 65 6e 20 61 20 75 6e 69 63 61 73 74 | .(i.e..copied).between.a.unicast |
b7360 | 20 56 52 46 20 52 49 42 20 61 6e 64 20 74 68 65 20 56 50 4e 20 53 41 46 49 20 52 49 42 20 6f 66 | .VRF.RIB.and.the.VPN.SAFI.RIB.of |
b7380 | 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 52 46 20 66 6f 72 20 75 73 65 20 69 6e 20 4d 50 4c 53 | .the.default.VRF.for.use.in.MPLS |
b73a0 | 2d 62 61 73 65 64 20 4c 33 56 50 4e 73 2e 20 55 6e 69 63 61 73 74 20 72 6f 75 74 65 73 20 6d 61 | -based.L3VPNs..Unicast.routes.ma |
b73c0 | 79 20 61 6c 73 6f 20 62 65 20 6c 65 61 6b 65 64 20 62 65 74 77 65 65 6e 20 61 6e 79 20 56 52 46 | y.also.be.leaked.between.any.VRF |
b73e0 | 73 20 28 69 6e 63 6c 75 64 69 6e 67 20 74 68 65 20 75 6e 69 63 61 73 74 20 52 49 42 20 6f 66 20 | s.(including.the.unicast.RIB.of. |
b7400 | 74 68 65 20 64 65 66 61 75 6c 74 20 42 47 50 20 69 6e 73 74 61 6e 63 65 29 2e 20 41 20 73 68 6f | the.default.BGP.instance)..A.sho |
b7420 | 72 74 63 75 74 20 73 79 6e 74 61 78 20 69 73 20 61 6c 73 6f 20 61 76 61 69 6c 61 62 6c 65 20 66 | rtcut.syntax.is.also.available.f |
b7440 | 6f 72 20 73 70 65 63 69 66 79 69 6e 67 20 6c 65 61 6b 69 6e 67 20 66 72 6f 6d 20 6f 6e 65 20 56 | or.specifying.leaking.from.one.V |
b7460 | 52 46 20 74 6f 20 61 6e 6f 74 68 65 72 20 56 52 46 20 75 73 69 6e 67 20 74 68 65 20 64 65 66 61 | RF.to.another.VRF.using.the.defa |
b7480 | 75 6c 74 20 69 6e 73 74 61 6e 63 65 e2 80 99 73 20 56 50 4e 20 52 49 42 20 61 73 20 74 68 65 20 | ult.instance...s.VPN.RIB.as.the. |
b74a0 | 69 6e 74 65 6d 65 64 69 61 72 79 20 2e 20 41 20 63 6f 6d 6d 6f 6e 20 61 70 70 6c 69 63 61 74 69 | intemediary...A.common.applicati |
b74c0 | 6f 6e 20 6f 66 20 74 68 65 20 56 52 46 2d 56 52 46 20 66 65 61 74 75 72 65 20 69 73 20 74 6f 20 | on.of.the.VRF-VRF.feature.is.to. |
b74e0 | 63 6f 6e 6e 65 63 74 20 61 20 63 75 73 74 6f 6d 65 72 e2 80 99 73 20 70 72 69 76 61 74 65 20 72 | connect.a.customer...s.private.r |
b7500 | 6f 75 74 69 6e 67 20 64 6f 6d 61 69 6e 20 74 6f 20 61 20 70 72 6f 76 69 64 65 72 e2 80 99 73 20 | outing.domain.to.a.provider...s. |
b7520 | 56 50 4e 20 73 65 72 76 69 63 65 2e 20 4c 65 61 6b 69 6e 67 20 69 73 20 63 6f 6e 66 69 67 75 72 | VPN.service..Leaking.is.configur |
b7540 | 65 64 20 66 72 6f 6d 20 74 68 65 20 70 6f 69 6e 74 20 6f 66 20 76 69 65 77 20 6f 66 20 61 6e 20 | ed.from.the.point.of.view.of.an. |
b7560 | 69 6e 64 69 76 69 64 75 61 6c 20 56 52 46 3a 20 69 6d 70 6f 72 74 20 72 65 66 65 72 73 20 74 6f | individual.VRF:.import.refers.to |
b7580 | 20 72 6f 75 74 65 73 20 6c 65 61 6b 65 64 20 66 72 6f 6d 20 56 50 4e 20 74 6f 20 61 20 75 6e 69 | .routes.leaked.from.VPN.to.a.uni |
b75a0 | 63 61 73 74 20 56 52 46 2c 20 77 68 65 72 65 61 73 20 65 78 70 6f 72 74 20 72 65 66 65 72 73 20 | cast.VRF,.whereas.export.refers. |
b75c0 | 74 6f 20 72 6f 75 74 65 73 20 6c 65 61 6b 65 64 20 66 72 6f 6d 20 61 20 75 6e 69 63 61 73 74 20 | to.routes.leaked.from.a.unicast. |
b75e0 | 56 52 46 20 74 6f 20 56 50 4e 2e 00 42 61 62 65 6c 00 42 61 62 65 6c 20 61 20 64 75 61 6c 20 73 | VRF.to.VPN..Babel.Babel.a.dual.s |
b7600 | 74 61 63 6b 20 70 72 6f 74 6f 63 6f 6c 2e 20 41 20 73 69 6e 67 6c 65 20 42 61 62 65 6c 20 69 6e | tack.protocol..A.single.Babel.in |
b7620 | 73 74 61 6e 63 65 20 69 73 20 61 62 6c 65 20 74 6f 20 70 65 72 66 6f 72 6d 20 72 6f 75 74 69 6e | stance.is.able.to.perform.routin |
b7640 | 67 20 66 6f 72 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 2e 00 42 61 62 65 6c 20 | g.for.both.IPv4.and.IPv6..Babel. |
b7660 | 69 73 20 61 20 6d 6f 64 65 72 6e 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 64 65 73 | is.a.modern.routing.protocol.des |
b7680 | 69 67 6e 65 64 20 74 6f 20 62 65 20 72 6f 62 75 73 74 20 61 6e 64 20 65 66 66 69 63 69 65 6e 74 | igned.to.be.robust.and.efficient |
b76a0 | 20 62 6f 74 68 20 69 6e 20 6f 72 64 69 6e 61 72 79 20 77 69 72 65 64 20 6e 65 74 77 6f 72 6b 73 | .both.in.ordinary.wired.networks |
b76c0 | 20 61 6e 64 20 69 6e 20 77 69 72 65 6c 65 73 73 20 6d 65 73 68 20 6e 65 74 77 6f 72 6b 73 2e 20 | .and.in.wireless.mesh.networks.. |
b76e0 | 42 79 20 64 65 66 61 75 6c 74 2c 20 69 74 20 75 73 65 73 20 68 6f 70 2d 63 6f 75 6e 74 20 6f 6e | By.default,.it.uses.hop-count.on |
b7700 | 20 77 69 72 65 64 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 61 20 76 61 72 69 61 6e 74 20 6f 66 | .wired.networks.and.a.variant.of |
b7720 | 20 45 54 58 20 6f 6e 20 77 69 72 65 6c 65 73 73 20 6c 69 6e 6b 73 2c 20 49 74 20 63 61 6e 20 62 | .ETX.on.wireless.links,.It.can.b |
b7740 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 74 61 6b 65 20 72 61 64 69 6f 20 64 69 76 65 72 | e.configured.to.take.radio.diver |
b7760 | 73 69 74 79 20 69 6e 74 6f 20 61 63 63 6f 75 6e 74 20 61 6e 64 20 74 6f 20 61 75 74 6f 6d 61 74 | sity.into.account.and.to.automat |
b7780 | 69 63 61 6c 6c 79 20 63 6f 6d 70 75 74 65 20 61 20 6c 69 6e 6b 27 73 20 6c 61 74 65 6e 63 79 20 | ically.compute.a.link's.latency. |
b77a0 | 61 6e 64 20 69 6e 63 6c 75 64 65 20 69 74 20 69 6e 20 74 68 65 20 6d 65 74 72 69 63 2e 20 49 74 | and.include.it.in.the.metric..It |
b77c0 | 20 69 73 20 64 65 66 69 6e 65 64 20 69 6e 20 3a 72 66 63 3a 60 38 39 36 36 60 2e 00 42 61 63 6b | .is.defined.in.:rfc:`8966`..Back |
b77e0 | 65 6e 64 00 42 61 6c 61 6e 63 65 20 61 6c 67 6f 72 69 74 68 6d 73 3a 00 42 61 6c 61 6e 63 69 6e | end.Balance.algorithms:.Balancin |
b7800 | 67 20 52 75 6c 65 73 00 42 61 6c 61 6e 63 69 6e 67 20 62 61 73 65 64 20 6f 6e 20 64 6f 6d 61 69 | g.Rules.Balancing.based.on.domai |
b7820 | 6e 20 6e 61 6d 65 00 42 61 6e 64 77 69 64 74 68 20 53 68 61 70 69 6e 67 00 42 61 6e 64 77 69 64 | n.name.Bandwidth.Shaping.Bandwid |
b7840 | 74 68 20 53 68 61 70 69 6e 67 20 66 6f 72 20 6c 6f 63 61 6c 20 75 73 65 72 73 00 42 61 6e 64 77 | th.Shaping.for.local.users.Bandw |
b7860 | 69 64 74 68 20 72 61 74 65 20 6c 69 6d 69 74 73 20 63 61 6e 20 62 65 20 73 65 74 20 66 6f 72 20 | idth.rate.limits.can.be.set.for. |
b7880 | 6c 6f 63 61 6c 20 75 73 65 72 73 20 6f 72 20 52 41 44 49 55 53 20 62 61 73 65 64 20 61 74 74 72 | local.users.or.RADIUS.based.attr |
b78a0 | 69 62 75 74 65 73 2e 00 42 61 6e 64 77 69 64 74 68 20 72 61 74 65 20 6c 69 6d 69 74 73 20 63 61 | ibutes..Bandwidth.rate.limits.ca |
b78c0 | 6e 20 62 65 20 73 65 74 20 66 6f 72 20 6c 6f 63 61 6c 20 75 73 65 72 73 20 6f 72 20 76 69 61 20 | n.be.set.for.local.users.or.via. |
b78e0 | 52 41 44 49 55 53 20 62 61 73 65 64 20 61 74 74 72 69 62 75 74 65 73 2e 00 42 61 6e 64 77 69 64 | RADIUS.based.attributes..Bandwid |
b7900 | 74 68 20 72 61 74 65 20 6c 69 6d 69 74 73 20 63 61 6e 20 62 65 20 73 65 74 20 66 6f 72 20 6c 6f | th.rate.limits.can.be.set.for.lo |
b7920 | 63 61 6c 20 75 73 65 72 73 20 77 69 74 68 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 | cal.users.within.the.configurati |
b7940 | 6f 6e 20 6f 72 20 76 69 61 20 52 41 44 49 55 53 20 62 61 73 65 64 20 61 74 74 72 69 62 75 74 65 | on.or.via.RADIUS.based.attribute |
b7960 | 73 2e 00 42 61 73 65 20 63 68 61 69 6e 20 69 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 74 6f 77 | s..Base.chain.is.for.traffic.tow |
b7980 | 61 72 64 20 74 68 65 20 72 6f 75 74 65 72 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c | ard.the.router.is.``set.firewall |
b79a0 | 20 69 70 76 34 20 69 6e 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 42 61 73 65 20 63 68 | .ipv4.input.filter....``.Base.ch |
b79c0 | 61 69 6e 20 69 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 74 6f 77 61 72 64 20 74 68 65 20 72 6f | ain.is.for.traffic.toward.the.ro |
b79e0 | 75 74 65 72 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 69 6e 70 75 | uter.is.``set.firewall.ipv6.inpu |
b7a00 | 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 42 61 73 65 6c 69 6e 65 20 44 4d 56 50 4e 20 74 6f | t.filter....``.Baseline.DMVPN.to |
b7a20 | 70 6f 6c 6f 67 79 00 42 61 73 69 63 20 43 6f 6e 63 65 70 74 73 00 42 61 73 69 63 20 63 6f 6d 6d | pology.Basic.Concepts.Basic.comm |
b7a40 | 61 6e 64 73 00 42 61 73 69 63 20 66 69 6c 74 65 72 69 6e 67 20 63 61 6e 20 62 65 20 64 6f 6e 65 | ands.Basic.filtering.can.be.done |
b7a60 | 20 75 73 69 6e 67 20 61 63 63 65 73 73 2d 6c 69 73 74 20 61 6e 64 20 61 63 63 65 73 73 2d 6c 69 | .using.access-list.and.access-li |
b7a80 | 73 74 36 2e 00 42 61 73 69 63 20 66 69 6c 74 65 72 69 6e 67 20 63 6f 75 6c 64 20 61 6c 73 6f 20 | st6..Basic.filtering.could.also. |
b7aa0 | 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 49 50 76 36 20 74 72 61 66 66 69 63 2e 00 42 61 73 69 | be.applied.to.IPv6.traffic..Basi |
b7ac0 | 63 20 73 65 74 75 70 00 42 65 20 73 75 72 65 20 74 6f 20 73 65 74 20 61 20 73 61 6e 65 20 64 65 | c.setup.Be.sure.to.set.a.sane.de |
b7ae0 | 66 61 75 6c 74 20 63 6f 6e 66 69 67 20 69 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 63 6f 6e 66 | fault.config.in.the.default.conf |
b7b00 | 69 67 20 66 69 6c 65 2c 20 74 68 69 73 20 77 69 6c 6c 20 62 65 20 6c 6f 61 64 65 64 20 69 6e 20 | ig.file,.this.will.be.loaded.in. |
b7b20 | 74 68 65 20 63 61 73 65 20 74 68 61 74 20 61 20 75 73 65 72 20 69 73 20 61 75 74 68 65 6e 74 69 | the.case.that.a.user.is.authenti |
b7b40 | 63 61 74 65 64 20 61 6e 64 20 6e 6f 20 66 69 6c 65 20 69 73 20 66 6f 75 6e 64 20 69 6e 20 74 68 | cated.and.no.file.is.found.in.th |
b7b60 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 64 69 72 65 63 74 6f 72 79 20 6d 61 74 63 68 69 6e 67 20 | e.configured.directory.matching. |
b7b80 | 74 68 65 20 75 73 65 72 73 20 75 73 65 72 6e 61 6d 65 2f 67 72 6f 75 70 2e 00 42 65 61 6d 66 6f | the.users.username/group..Beamfo |
b7ba0 | 72 6d 69 6e 67 20 63 61 70 61 62 69 6c 69 74 69 65 73 3a 00 42 65 63 61 75 73 65 20 61 6e 20 61 | rming.capabilities:.Because.an.a |
b7bc0 | 67 67 72 65 67 61 74 6f 72 20 63 61 6e 6e 6f 74 20 62 65 20 61 63 74 69 76 65 20 77 69 74 68 6f | ggregator.cannot.be.active.witho |
b7be0 | 75 74 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 61 76 61 69 6c 61 62 6c 65 20 6c 69 6e 6b 2c 20 | ut.at.least.one.available.link,. |
b7c00 | 73 65 74 74 69 6e 67 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 74 6f 20 30 20 6f 72 20 74 6f 20 31 | setting.this.option.to.0.or.to.1 |
b7c20 | 20 68 61 73 20 74 68 65 20 65 78 61 63 74 20 73 61 6d 65 20 65 66 66 65 63 74 2e 00 42 65 63 61 | .has.the.exact.same.effect..Beca |
b7c40 | 75 73 65 20 65 78 69 73 74 69 6e 67 20 73 65 73 73 69 6f 6e 73 20 64 6f 20 6e 6f 74 20 61 75 74 | use.existing.sessions.do.not.aut |
b7c60 | 6f 6d 61 74 69 63 61 6c 6c 79 20 66 61 69 6c 20 6f 76 65 72 20 74 6f 20 61 20 6e 65 77 20 70 61 | omatically.fail.over.to.a.new.pa |
b7c80 | 74 68 2c 20 74 68 65 20 73 65 73 73 69 6f 6e 20 74 61 62 6c 65 20 63 61 6e 20 62 65 20 66 6c 75 | th,.the.session.table.can.be.flu |
b7ca0 | 73 68 65 64 20 6f 6e 20 65 61 63 68 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 65 20 63 68 | shed.on.each.connection.state.ch |
b7cc0 | 61 6e 67 65 3a 00 42 65 66 6f 72 65 20 65 6e 61 62 6c 69 6e 67 20 61 6e 79 20 68 61 72 64 77 61 | ange:.Before.enabling.any.hardwa |
b7ce0 | 72 65 20 73 65 67 6d 65 6e 74 61 74 69 6f 6e 20 6f 66 66 6c 6f 61 64 20 61 20 63 6f 72 72 65 73 | re.segmentation.offload.a.corres |
b7d00 | 70 6f 6e 64 69 6e 67 20 73 6f 66 74 77 61 72 65 20 6f 66 66 6c 6f 61 64 20 69 73 20 72 65 71 75 | ponding.software.offload.is.requ |
b7d20 | 69 72 65 64 20 69 6e 20 47 53 4f 2e 20 4f 74 68 65 72 77 69 73 65 20 69 74 20 62 65 63 6f 6d 65 | ired.in.GSO..Otherwise.it.become |
b7d40 | 73 20 70 6f 73 73 69 62 6c 65 20 66 6f 72 20 61 20 66 72 61 6d 65 20 74 6f 20 62 65 20 72 65 2d | s.possible.for.a.frame.to.be.re- |
b7d60 | 72 6f 75 74 65 64 20 62 65 74 77 65 65 6e 20 64 65 76 69 63 65 73 20 61 6e 64 20 65 6e 64 20 75 | routed.between.devices.and.end.u |
b7d80 | 70 20 62 65 69 6e 67 20 75 6e 61 62 6c 65 20 74 6f 20 62 65 20 74 72 61 6e 73 6d 69 74 74 65 64 | p.being.unable.to.be.transmitted |
b7da0 | 2e 00 42 65 66 6f 72 65 20 79 6f 75 20 61 72 65 20 61 62 6c 65 20 74 6f 20 61 70 70 6c 79 20 61 | ..Before.you.are.able.to.apply.a |
b7dc0 | 20 72 75 6c 65 2d 73 65 74 20 74 6f 20 61 20 7a 6f 6e 65 20 79 6f 75 20 68 61 76 65 20 74 6f 20 | .rule-set.to.a.zone.you.have.to. |
b7de0 | 63 72 65 61 74 65 20 74 68 65 20 7a 6f 6e 65 73 20 66 69 72 73 74 2e 00 42 65 6c 6f 77 20 66 6c | create.the.zones.first..Below.fl |
b7e00 | 6f 77 2d 63 68 61 72 74 20 63 6f 75 6c 64 20 62 65 20 61 20 71 75 69 63 6b 20 72 65 66 65 72 65 | ow-chart.could.be.a.quick.refere |
b7e20 | 6e 63 65 20 66 6f 72 20 74 68 65 20 63 6c 6f 73 65 2d 61 63 74 69 6f 6e 20 63 6f 6d 62 69 6e 61 | nce.for.the.close-action.combina |
b7e40 | 74 69 6f 6e 20 64 65 70 65 6e 64 69 6e 67 20 6f 6e 20 68 6f 77 20 74 68 65 20 70 65 65 72 20 69 | tion.depending.on.how.the.peer.i |
b7e60 | 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 42 65 6c 6f 77 20 69 73 20 61 6e 20 65 78 61 6d 70 6c | s.configured..Below.is.an.exampl |
b7e80 | 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 4c 4e 53 3a 00 42 65 73 74 20 65 66 66 6f 72 | e.to.configure.a.LNS:.Best.effor |
b7ea0 | 74 20 74 72 61 66 66 69 63 2c 20 64 65 66 61 75 6c 74 00 42 65 74 77 65 65 6e 20 63 6f 6d 70 75 | t.traffic,.default.Between.compu |
b7ec0 | 74 65 72 73 2c 20 74 68 65 20 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 | ters,.the.most.common.configurat |
b7ee0 | 69 6f 6e 20 75 73 65 64 20 77 61 73 20 22 38 4e 31 22 3a 20 65 69 67 68 74 20 62 69 74 20 63 68 | ion.used.was."8N1":.eight.bit.ch |
b7f00 | 61 72 61 63 74 65 72 73 2c 20 77 69 74 68 20 6f 6e 65 20 73 74 61 72 74 20 62 69 74 2c 20 6f 6e | aracters,.with.one.start.bit,.on |
b7f20 | 65 20 73 74 6f 70 20 62 69 74 2c 20 61 6e 64 20 6e 6f 20 70 61 72 69 74 79 20 62 69 74 2e 20 54 | e.stop.bit,.and.no.parity.bit..T |
b7f40 | 68 75 73 20 31 30 20 42 61 75 64 20 74 69 6d 65 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 73 65 | hus.10.Baud.times.are.used.to.se |
b7f60 | 6e 64 20 61 20 73 69 6e 67 6c 65 20 63 68 61 72 61 63 74 65 72 2c 20 61 6e 64 20 73 6f 20 64 69 | nd.a.single.character,.and.so.di |
b7f80 | 76 69 64 69 6e 67 20 74 68 65 20 73 69 67 6e 61 6c 6c 69 6e 67 20 62 69 74 2d 72 61 74 65 20 62 | viding.the.signalling.bit-rate.b |
b7fa0 | 79 20 74 65 6e 20 72 65 73 75 6c 74 73 20 69 6e 20 74 68 65 20 6f 76 65 72 61 6c 6c 20 74 72 61 | y.ten.results.in.the.overall.tra |
b7fc0 | 6e 73 6d 69 73 73 69 6f 6e 20 73 70 65 65 64 20 69 6e 20 63 68 61 72 61 63 74 65 72 73 20 70 65 | nsmission.speed.in.characters.pe |
b7fe0 | 72 20 73 65 63 6f 6e 64 2e 20 54 68 69 73 20 69 73 20 61 6c 73 6f 20 74 68 65 20 64 65 66 61 75 | r.second..This.is.also.the.defau |
b8000 | 6c 74 20 73 65 74 74 69 6e 67 20 69 66 20 6e 6f 6e 65 20 6f 66 20 74 68 6f 73 65 20 6f 70 74 69 | lt.setting.if.none.of.those.opti |
b8020 | 6f 6e 73 20 61 72 65 20 64 65 66 69 6e 65 64 2e 00 42 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 4e | ons.are.defined..Bidirectional.N |
b8040 | 41 54 00 42 69 6e 61 72 79 20 76 61 6c 75 65 00 42 69 6e 64 20 63 6f 6e 74 61 69 6e 65 72 20 6e | AT.Binary.value.Bind.container.n |
b8060 | 65 74 77 6f 72 6b 20 74 6f 20 61 20 67 69 76 65 6e 20 56 52 46 20 69 6e 73 74 61 6e 63 65 2e 00 | etwork.to.a.given.VRF.instance.. |
b8080 | 42 69 6e 64 20 6c 69 73 74 65 6e 65 72 20 74 6f 20 73 70 65 63 69 66 69 63 20 69 6e 74 65 72 66 | Bind.listener.to.specific.interf |
b80a0 | 61 63 65 2f 61 64 64 72 65 73 73 2c 20 6d 61 6e 64 61 74 6f 72 79 20 66 6f 72 20 49 50 76 36 00 | ace/address,.mandatory.for.IPv6. |
b80c0 | 42 69 6e 64 73 20 65 74 68 31 2e 32 34 31 20 61 6e 64 20 76 78 6c 61 6e 32 34 31 20 74 6f 20 65 | Binds.eth1.241.and.vxlan241.to.e |
b80e0 | 61 63 68 20 6f 74 68 65 72 20 62 79 20 6d 61 6b 69 6e 67 20 74 68 65 6d 20 62 6f 74 68 20 6d 65 | ach.other.by.making.them.both.me |
b8100 | 6d 62 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 6f 66 20 74 68 65 20 73 61 6d 65 20 62 72 69 64 | mber.interfaces.of.the.same.brid |
b8120 | 67 65 2e 00 42 6c 61 63 6b 68 6f 6c 65 00 42 6c 6f 63 6b 20 73 6f 75 72 63 65 20 49 50 20 69 6e | ge..Blackhole.Block.source.IP.in |
b8140 | 20 73 65 63 6f 6e 64 73 2e 20 53 75 62 73 65 71 75 65 6e 74 20 62 6c 6f 63 6b 73 20 69 6e 63 72 | .seconds..Subsequent.blocks.incr |
b8160 | 65 61 73 65 20 62 79 20 61 20 66 61 63 74 6f 72 20 6f 66 20 31 2e 35 20 54 68 65 20 64 65 66 61 | ease.by.a.factor.of.1.5.The.defa |
b8180 | 75 6c 74 20 69 73 20 31 32 30 2e 00 42 6c 6f 63 6b 20 73 6f 75 72 63 65 20 49 50 20 77 68 65 6e | ult.is.120..Block.source.IP.when |
b81a0 | 20 74 68 65 69 72 20 63 75 6d 75 6c 61 74 69 76 65 20 61 74 74 61 63 6b 20 73 63 6f 72 65 20 65 | .their.cumulative.attack.score.e |
b81c0 | 78 63 65 65 64 73 20 74 68 72 65 73 68 6f 6c 64 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 | xceeds.threshold..The.default.is |
b81e0 | 20 33 30 2e 00 42 6c 6f 63 6b 69 6e 67 20 63 61 6c 6c 20 77 69 74 68 20 6e 6f 20 74 69 6d 65 6f | .30..Blocking.call.with.no.timeo |
b8200 | 75 74 2e 20 53 79 73 74 65 6d 20 77 69 6c 6c 20 62 65 63 6f 6d 65 20 75 6e 72 65 73 70 6f 6e 73 | ut..System.will.become.unrespons |
b8220 | 69 76 65 20 69 66 20 73 63 72 69 70 74 20 64 6f 65 73 20 6e 6f 74 20 72 65 74 75 72 6e 21 00 42 | ive.if.script.does.not.return!.B |
b8240 | 6f 61 72 64 65 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 20 28 42 47 50 29 20 6f 72 | oarder.Gateway.Protocol.(BGP).or |
b8260 | 69 67 69 6e 20 63 6f 64 65 20 74 6f 20 6d 61 74 63 68 2e 00 42 6f 6e 64 20 2f 20 4c 69 6e 6b 20 | igin.code.to.match..Bond./.Link. |
b8280 | 41 67 67 72 65 67 61 74 69 6f 6e 00 42 6f 6e 64 20 6f 70 74 69 6f 6e 73 00 42 6f 6f 74 20 69 6d | Aggregation.Bond.options.Boot.im |
b82a0 | 61 67 65 20 6c 65 6e 67 74 68 20 69 6e 20 35 31 32 2d 6f 63 74 65 74 20 62 6c 6f 63 6b 73 00 42 | age.length.in.512-octet.blocks.B |
b82c0 | 6f 6f 74 73 74 72 61 70 20 66 69 6c 65 20 6e 61 6d 65 00 42 6f 74 68 20 49 50 76 34 20 61 6e 64 | ootstrap.file.name.Both.IPv4.and |
b82e0 | 20 49 50 76 36 20 6d 75 6c 74 69 63 61 73 74 20 69 73 20 70 6f 73 73 69 62 6c 65 2e 00 42 6f 74 | .IPv6.multicast.is.possible..Bot |
b8300 | 68 20 6c 6f 63 61 6c 20 61 64 6d 69 6e 69 73 74 65 72 65 64 20 61 6e 64 20 72 65 6d 6f 74 65 20 | h.local.administered.and.remote. |
b8320 | 61 64 6d 69 6e 69 73 74 65 72 65 64 20 3a 61 62 62 72 3a 60 52 41 44 49 55 53 20 28 52 65 6d 6f | administered.:abbr:`RADIUS.(Remo |
b8340 | 74 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 44 69 61 6c 2d 49 6e 20 55 73 65 72 20 53 | te.Authentication.Dial-In.User.S |
b8360 | 65 72 76 69 63 65 29 60 20 61 63 63 6f 75 6e 74 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e | ervice)`.accounts.are.supported. |
b8380 | 00 42 6f 74 68 20 72 65 70 6c 69 65 73 20 61 6e 64 20 72 65 71 75 65 73 74 73 20 74 79 70 65 20 | .Both.replies.and.requests.type. |
b83a0 | 67 72 61 74 75 69 74 6f 75 73 20 61 72 70 20 77 69 6c 6c 20 74 72 69 67 67 65 72 20 74 68 65 20 | gratuitous.arp.will.trigger.the. |
b83c0 | 41 52 50 20 74 61 62 6c 65 20 74 6f 20 62 65 20 75 70 64 61 74 65 64 2c 20 69 66 20 74 68 69 73 | ARP.table.to.be.updated,.if.this |
b83e0 | 20 73 65 74 74 69 6e 67 20 69 73 20 6f 6e 2e 00 42 72 61 6e 63 68 20 31 27 73 20 72 6f 75 74 65 | .setting.is.on..Branch.1's.route |
b8400 | 72 20 6d 69 67 68 74 20 68 61 76 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6c 69 6e 65 73 | r.might.have.the.following.lines |
b8420 | 3a 00 42 72 69 64 67 65 00 42 72 69 64 67 65 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 | :.Bridge.Bridge.Firewall.Configu |
b8440 | 72 61 74 69 6f 6e 00 42 72 69 64 67 65 20 4f 70 74 69 6f 6e 73 00 42 72 69 64 67 65 20 52 75 6c | ration.Bridge.Options.Bridge.Rul |
b8460 | 65 73 00 42 72 69 64 67 65 20 61 6e 73 77 65 72 73 20 6f 6e 20 49 50 20 61 64 64 72 65 73 73 20 | es.Bridge.answers.on.IP.address. |
b8480 | 31 39 32 2e 30 2e 32 2e 31 2f 32 34 20 61 6e 64 20 32 30 30 31 3a 64 62 38 3a 3a 66 66 66 66 2f | 192.0.2.1/24.and.2001:db8::ffff/ |
b84a0 | 36 34 00 42 72 69 64 67 65 20 6d 61 78 69 6d 75 6d 20 61 67 69 6e 67 20 60 3c 74 69 6d 65 3e 60 | 64.Bridge.maximum.aging.`<time>` |
b84c0 | 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 32 30 29 2e 00 42 72 69 64 67 | .in.seconds.(default:.20)..Bridg |
b84e0 | 65 3a 00 42 75 72 73 74 20 63 6f 75 6e 74 00 42 75 73 69 6e 65 73 73 20 55 73 65 72 73 00 42 75 | e:.Burst.count.Business.Users.Bu |
b8500 | 74 20 62 65 66 6f 72 65 20 6c 65 61 72 6e 69 6e 67 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 79 | t.before.learning.to.configure.y |
b8520 | 6f 75 72 20 70 6f 6c 69 63 79 2c 20 77 65 20 77 69 6c 6c 20 77 61 72 6e 20 79 6f 75 20 61 62 6f | our.policy,.we.will.warn.you.abo |
b8540 | 75 74 20 74 68 65 20 64 69 66 66 65 72 65 6e 74 20 75 6e 69 74 73 20 79 6f 75 20 63 61 6e 20 75 | ut.the.different.units.you.can.u |
b8560 | 73 65 20 61 6e 64 20 61 6c 73 6f 20 73 68 6f 77 20 79 6f 75 20 77 68 61 74 20 2a 63 6c 61 73 73 | se.and.also.show.you.what.*class |
b8580 | 65 73 2a 20 61 72 65 20 61 6e 64 20 68 6f 77 20 74 68 65 79 20 77 6f 72 6b 2c 20 61 73 20 73 6f | es*.are.and.how.they.work,.as.so |
b85a0 | 6d 65 20 70 6f 6c 69 63 69 65 73 20 6d 61 79 20 72 65 71 75 69 72 65 20 79 6f 75 20 74 6f 20 63 | me.policies.may.require.you.to.c |
b85c0 | 6f 6e 66 69 67 75 72 65 20 74 68 65 6d 2e 00 42 79 20 64 65 66 61 75 6c 74 20 56 52 52 50 20 75 | onfigure.them..By.default.VRRP.u |
b85e0 | 73 65 73 20 6d 75 6c 74 69 63 61 73 74 20 70 61 63 6b 65 74 73 2e 20 49 66 20 79 6f 75 72 20 6e | ses.multicast.packets..If.your.n |
b8600 | 65 74 77 6f 72 6b 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 6d 75 6c 74 69 63 61 73 | etwork.does.not.support.multicas |
b8620 | 74 20 66 6f 72 20 77 68 61 74 65 76 65 72 20 72 65 61 73 6f 6e 2c 20 79 6f 75 20 63 61 6e 20 6d | t.for.whatever.reason,.you.can.m |
b8640 | 61 6b 65 20 56 52 52 50 20 75 73 65 20 75 6e 69 63 61 73 74 20 63 6f 6d 6d 75 6e 69 63 61 74 69 | ake.VRRP.use.unicast.communicati |
b8660 | 6f 6e 20 69 6e 73 74 65 61 64 2e 00 42 79 20 64 65 66 61 75 6c 74 20 56 52 52 50 20 75 73 65 73 | on.instead..By.default.VRRP.uses |
b8680 | 20 70 72 65 65 6d 70 74 69 6f 6e 2e 20 59 6f 75 20 63 61 6e 20 64 69 73 61 62 6c 65 20 69 74 20 | .preemption..You.can.disable.it. |
b86a0 | 77 69 74 68 20 74 68 65 20 22 6e 6f 2d 70 72 65 65 6d 70 74 22 20 6f 70 74 69 6f 6e 3a 00 42 79 | with.the."no-preempt".option:.By |
b86c0 | 20 64 65 66 61 75 6c 74 20 60 73 74 72 69 63 74 2d 6c 73 61 2d 63 68 65 63 6b 69 6e 67 60 20 69 | .default.`strict-lsa-checking`.i |
b86e0 | 73 20 63 6f 6e 66 69 67 75 72 65 64 20 74 68 65 6e 20 74 68 65 20 68 65 6c 70 65 72 20 77 69 6c | s.configured.then.the.helper.wil |
b8700 | 6c 20 61 62 6f 72 74 20 74 68 65 20 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 20 77 68 65 | l.abort.the.Graceful.Restart.whe |
b8720 | 6e 20 61 20 4c 53 41 20 63 68 61 6e 67 65 20 6f 63 63 75 72 73 20 77 68 69 63 68 20 61 66 66 65 | n.a.LSA.change.occurs.which.affe |
b8740 | 63 74 73 20 74 68 65 20 72 65 73 74 61 72 74 69 6e 67 20 72 6f 75 74 65 72 2e 00 42 79 20 64 65 | cts.the.restarting.router..By.de |
b8760 | 66 61 75 6c 74 20 74 68 65 20 73 63 6f 70 65 20 6f 66 20 74 68 65 20 70 6f 72 74 20 62 69 6e 64 | fault.the.scope.of.the.port.bind |
b8780 | 69 6e 67 73 20 66 6f 72 20 75 6e 62 6f 75 6e 64 20 73 6f 63 6b 65 74 73 20 69 73 20 6c 69 6d 69 | ings.for.unbound.sockets.is.limi |
b87a0 | 74 65 64 20 74 6f 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 52 46 2e 20 54 68 61 74 20 69 73 2c | ted.to.the.default.VRF..That.is, |
b87c0 | 20 69 74 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 6d 61 74 63 68 65 64 20 62 79 20 70 61 63 6b 65 | .it.will.not.be.matched.by.packe |
b87e0 | 74 73 20 61 72 72 69 76 69 6e 67 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 73 20 65 6e 73 6c 61 76 | ts.arriving.on.interfaces.enslav |
b8800 | 65 64 20 74 6f 20 61 20 56 52 46 20 61 6e 64 20 70 72 6f 63 65 73 73 65 73 20 6d 61 79 20 62 69 | ed.to.a.VRF.and.processes.may.bi |
b8820 | 6e 64 20 74 6f 20 74 68 65 20 73 61 6d 65 20 70 6f 72 74 20 69 66 20 74 68 65 79 20 62 69 6e 64 | nd.to.the.same.port.if.they.bind |
b8840 | 20 74 6f 20 61 20 56 52 46 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 46 52 52 20 77 69 6c 6c 20 | .to.a.VRF..By.default,.FRR.will. |
b8860 | 62 72 69 6e 67 20 75 70 20 70 65 65 72 69 6e 67 20 77 69 74 68 20 6d 69 6e 69 6d 61 6c 20 63 6f | bring.up.peering.with.minimal.co |
b8880 | 6d 6d 6f 6e 20 63 61 70 61 62 69 6c 69 74 79 20 66 6f 72 20 74 68 65 20 62 6f 74 68 20 73 69 64 | mmon.capability.for.the.both.sid |
b88a0 | 65 73 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 66 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f | es..For.example,.if.the.local.ro |
b88c0 | 75 74 65 72 20 68 61 73 20 75 6e 69 63 61 73 74 20 61 6e 64 20 6d 75 6c 74 69 63 61 73 74 20 63 | uter.has.unicast.and.multicast.c |
b88e0 | 61 70 61 62 69 6c 69 74 69 65 73 20 61 6e 64 20 74 68 65 20 72 65 6d 6f 74 65 20 72 6f 75 74 65 | apabilities.and.the.remote.route |
b8900 | 72 20 6f 6e 6c 79 20 68 61 73 20 75 6e 69 63 61 73 74 20 63 61 70 61 62 69 6c 69 74 79 20 74 68 | r.only.has.unicast.capability.th |
b8920 | 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 65 73 74 61 62 6c 69 73 68 20 74 68 | e.local.router.will.establish.th |
b8940 | 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 75 6e 69 63 61 73 74 20 6f 6e 6c 79 20 63 | e.connection.with.unicast.only.c |
b8960 | 61 70 61 62 69 6c 69 74 79 2e 20 57 68 65 6e 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 63 6f 6d | apability..When.there.are.no.com |
b8980 | 6d 6f 6e 20 63 61 70 61 62 69 6c 69 74 69 65 73 2c 20 46 52 52 20 73 65 6e 64 73 20 55 6e 73 75 | mon.capabilities,.FRR.sends.Unsu |
b89a0 | 70 70 6f 72 74 65 64 20 43 61 70 61 62 69 6c 69 74 79 20 65 72 72 6f 72 20 61 6e 64 20 74 68 65 | pported.Capability.error.and.the |
b89c0 | 6e 20 72 65 73 65 74 73 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 42 79 20 64 65 66 61 | n.resets.the.connection..By.defa |
b89e0 | 75 6c 74 2c 20 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 20 61 20 64 | ult,.VyOS.does.not.advertise.a.d |
b8a00 | 65 66 61 75 6c 74 20 72 6f 75 74 65 20 28 30 2e 30 2e 30 2e 30 2f 30 29 20 65 76 65 6e 20 69 66 | efault.route.(0.0.0.0/0).even.if |
b8a20 | 20 69 74 20 69 73 20 69 6e 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 57 68 65 6e 20 79 6f | .it.is.in.routing.table..When.yo |
b8a40 | 75 20 77 61 6e 74 20 74 6f 20 61 6e 6e 6f 75 6e 63 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 | u.want.to.announce.default.route |
b8a60 | 73 20 74 6f 20 74 68 65 20 70 65 65 72 2c 20 75 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2e | s.to.the.peer,.use.this.command. |
b8a80 | 20 55 73 69 6e 67 20 6f 70 74 69 6f 6e 61 6c 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d 64 | .Using.optional.argument.:cfgcmd |
b8aa0 | 3a 60 72 6f 75 74 65 2d 6d 61 70 60 20 79 6f 75 20 63 61 6e 20 69 6e 6a 65 63 74 20 74 68 65 20 | :`route-map`.you.can.inject.the. |
b8ac0 | 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 74 6f 20 67 69 76 65 6e 20 6e 65 69 67 68 62 6f 72 20 | default.route.to.given.neighbor. |
b8ae0 | 6f 6e 6c 79 20 69 66 20 74 68 65 20 63 6f 6e 64 69 74 69 6f 6e 73 20 69 6e 20 74 68 65 20 72 6f | only.if.the.conditions.in.the.ro |
b8b00 | 75 74 65 20 6d 61 70 20 61 72 65 20 6d 65 74 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 61 20 6e | ute.map.are.met..By.default,.a.n |
b8b20 | 65 77 20 74 6f 6b 65 6e 20 69 73 20 67 65 6e 65 72 61 74 65 64 20 65 76 65 72 79 20 33 30 20 73 | ew.token.is.generated.every.30.s |
b8b40 | 65 63 6f 6e 64 73 20 62 79 20 74 68 65 20 6d 6f 62 69 6c 65 20 61 70 70 6c 69 63 61 74 69 6f 6e | econds.by.the.mobile.application |
b8b60 | 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 63 6f 6d 70 65 6e 73 61 74 65 20 66 6f 72 20 70 6f 73 | ..In.order.to.compensate.for.pos |
b8b80 | 73 69 62 6c 65 20 74 69 6d 65 2d 73 6b 65 77 20 62 65 74 77 65 65 6e 20 74 68 65 20 63 6c 69 65 | sible.time-skew.between.the.clie |
b8ba0 | 6e 74 20 61 6e 64 20 74 68 65 20 73 65 72 76 65 72 2c 20 61 6e 20 65 78 74 72 61 20 74 6f 6b 65 | nt.and.the.server,.an.extra.toke |
b8bc0 | 6e 20 62 65 66 6f 72 65 20 61 6e 64 20 61 66 74 65 72 20 74 68 65 20 63 75 72 72 65 6e 74 20 74 | n.before.and.after.the.current.t |
b8be0 | 69 6d 65 20 69 73 20 61 6c 6c 6f 77 65 64 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 66 6f 72 20 | ime.is.allowed..This.allows.for. |
b8c00 | 61 20 74 69 6d 65 20 73 6b 65 77 20 6f 66 20 75 70 20 74 6f 20 33 30 20 73 65 63 6f 6e 64 73 20 | a.time.skew.of.up.to.30.seconds. |
b8c20 | 62 65 74 77 65 65 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 65 72 76 65 72 20 61 6e | between.authentication.server.an |
b8c40 | 64 20 63 6c 69 65 6e 74 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 64 64 63 6c 69 65 6e 74 5f 20 | d.client..By.default,.ddclient_. |
b8c60 | 77 69 6c 6c 20 75 70 64 61 74 65 20 61 20 64 79 6e 61 6d 69 63 20 64 6e 73 20 72 65 63 6f 72 64 | will.update.a.dynamic.dns.record |
b8c80 | 20 75 73 69 6e 67 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 64 69 72 65 63 74 6c 79 20 61 | .using.the.IP.address.directly.a |
b8ca0 | 74 74 61 63 68 65 64 20 74 6f 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 49 66 20 79 6f 75 | ttached.to.the.interface..If.you |
b8cc0 | 72 20 56 79 4f 53 20 69 6e 73 74 61 6e 63 65 20 69 73 20 62 65 68 69 6e 64 20 4e 41 54 2c 20 79 | r.VyOS.instance.is.behind.NAT,.y |
b8ce0 | 6f 75 72 20 72 65 63 6f 72 64 20 77 69 6c 6c 20 62 65 20 75 70 64 61 74 65 64 20 74 6f 20 70 6f | our.record.will.be.updated.to.po |
b8d00 | 69 6e 74 20 74 6f 20 79 6f 75 72 20 69 6e 74 65 72 6e 61 6c 20 49 50 2e 00 42 79 20 64 65 66 61 | int.to.your.internal.IP..By.defa |
b8d20 | 75 6c 74 2c 20 65 6e 61 62 6c 69 6e 67 20 52 50 4b 49 20 64 6f 65 73 20 6e 6f 74 20 63 68 61 6e | ult,.enabling.RPKI.does.not.chan |
b8d40 | 67 65 20 62 65 73 74 20 70 61 74 68 20 73 65 6c 65 63 74 69 6f 6e 2e 20 49 6e 20 70 61 72 74 69 | ge.best.path.selection..In.parti |
b8d60 | 63 75 6c 61 72 2c 20 69 6e 76 61 6c 69 64 20 70 72 65 66 69 78 65 73 20 77 69 6c 6c 20 73 74 69 | cular,.invalid.prefixes.will.sti |
b8d80 | 6c 6c 20 62 65 20 63 6f 6e 73 69 64 65 72 65 64 20 64 75 72 69 6e 67 20 62 65 73 74 20 70 61 74 | ll.be.considered.during.best.pat |
b8da0 | 68 20 73 65 6c 65 63 74 69 6f 6e 2e 20 48 6f 77 65 76 65 72 2c 20 74 68 65 20 72 6f 75 74 65 72 | h.selection..However,.the.router |
b8dc0 | 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 69 67 6e 6f 72 65 20 61 6c 6c | .can.be.configured.to.ignore.all |
b8de0 | 20 69 6e 76 61 6c 69 64 20 70 72 65 66 69 78 65 73 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 69 | .invalid.prefixes..By.default,.i |
b8e00 | 74 20 73 75 70 70 6f 72 74 73 20 62 6f 74 68 20 70 6c 61 6e 6e 65 64 20 61 6e 64 20 75 6e 70 6c | t.supports.both.planned.and.unpl |
b8e20 | 61 6e 6e 65 64 20 6f 75 74 61 67 65 73 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 6c 6f 63 61 6c | anned.outages..By.default,.local |
b8e40 | 6c 79 20 61 64 76 65 72 74 69 73 65 64 20 70 72 65 66 69 78 65 73 20 75 73 65 20 74 68 65 20 69 | ly.advertised.prefixes.use.the.i |
b8e60 | 6d 70 6c 69 63 69 74 2d 6e 75 6c 6c 20 6c 61 62 65 6c 20 74 6f 20 65 6e 63 6f 64 65 20 69 6e 20 | mplicit-null.label.to.encode.in. |
b8e80 | 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 4e 4c 52 49 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 6e | the.outgoing.NLRI..By.default,.n |
b8ea0 | 67 69 6e 78 20 65 78 70 6f 73 65 73 20 74 68 65 20 6c 6f 63 61 6c 20 41 50 49 20 6f 6e 20 61 6c | ginx.exposes.the.local.API.on.al |
b8ec0 | 6c 20 76 69 72 74 75 61 6c 20 73 65 72 76 65 72 73 2e 20 55 73 65 20 74 68 69 73 20 74 6f 20 72 | l.virtual.servers..Use.this.to.r |
b8ee0 | 65 73 74 72 69 63 74 20 6e 67 69 6e 78 20 74 6f 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 76 69 72 | estrict.nginx.to.one.or.more.vir |
b8f00 | 74 75 61 6c 20 68 6f 73 74 73 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 72 65 63 6f 72 64 65 64 | tual.hosts..By.default,.recorded |
b8f20 | 20 66 6c 6f 77 73 20 77 69 6c 6c 20 62 65 20 73 61 76 65 64 20 69 6e 74 65 72 6e 61 6c 6c 79 20 | .flows.will.be.saved.internally. |
b8f40 | 61 6e 64 20 63 61 6e 20 62 65 20 6c 69 73 74 65 64 20 77 69 74 68 20 74 68 65 20 43 4c 49 20 63 | and.can.be.listed.with.the.CLI.c |
b8f60 | 6f 6d 6d 61 6e 64 2e 20 59 6f 75 20 6d 61 79 20 64 69 73 61 62 6c 65 20 75 73 69 6e 67 20 74 68 | ommand..You.may.disable.using.th |
b8f80 | 65 20 6c 6f 63 61 6c 20 69 6e 2d 6d 65 6d 6f 72 79 20 74 61 62 6c 65 20 77 69 74 68 20 74 68 65 | e.local.in-memory.table.with.the |
b8fa0 | 20 63 6f 6d 6d 61 6e 64 3a 00 42 79 20 64 65 66 61 75 6c 74 2c 20 74 68 65 20 42 47 50 20 70 72 | .command:.By.default,.the.BGP.pr |
b8fc0 | 65 66 69 78 20 69 73 20 61 64 76 65 72 74 69 73 65 64 20 65 76 65 6e 20 69 66 20 69 74 27 73 20 | efix.is.advertised.even.if.it's. |
b8fe0 | 6e 6f 74 20 70 72 65 73 65 6e 74 20 69 6e 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 | not.present.in.the.routing.table |
b9000 | 2e 20 54 68 69 73 20 62 65 68 61 76 69 6f 75 72 20 64 69 66 66 65 72 73 20 66 72 6f 6d 20 74 68 | ..This.behaviour.differs.from.th |
b9020 | 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 6f 66 20 73 6f 6d 65 20 76 65 6e 64 6f 72 73 | e.implementation.of.some.vendors |
b9040 | 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 74 68 69 73 20 62 72 69 64 67 69 6e 67 20 69 73 20 61 | ..By.default,.this.bridging.is.a |
b9060 | 6c 6c 6f 77 65 64 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 77 68 65 6e 20 56 79 4f 53 20 72 65 | llowed..By.default,.when.VyOS.re |
b9080 | 63 65 69 76 65 73 20 61 6e 20 49 43 4d 50 20 65 63 68 6f 20 72 65 71 75 65 73 74 20 70 61 63 6b | ceives.an.ICMP.echo.request.pack |
b90a0 | 65 74 20 64 65 73 74 69 6e 65 64 20 66 6f 72 20 69 74 73 65 6c 66 2c 20 69 74 20 77 69 6c 6c 20 | et.destined.for.itself,.it.will. |
b90c0 | 61 6e 73 77 65 72 20 77 69 74 68 20 61 6e 20 49 43 4d 50 20 65 63 68 6f 20 72 65 70 6c 79 2c 20 | answer.with.an.ICMP.echo.reply,. |
b90e0 | 75 6e 6c 65 73 73 20 79 6f 75 20 61 76 6f 69 64 20 69 74 20 74 68 72 6f 75 67 68 20 69 74 73 20 | unless.you.avoid.it.through.its. |
b9100 | 66 69 72 65 77 61 6c 6c 2e 00 42 79 20 75 73 69 6e 67 20 50 73 65 75 64 6f 2d 45 74 68 65 72 6e | firewall..By.using.Pseudo-Ethern |
b9120 | 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 74 68 65 72 65 20 77 69 6c 6c 20 62 65 20 6c 65 73 73 | et.interfaces.there.will.be.less |
b9140 | 20 73 79 73 74 65 6d 20 6f 76 65 72 68 65 61 64 20 63 6f 6d 70 61 72 65 64 20 74 6f 20 72 75 6e | .system.overhead.compared.to.run |
b9160 | 6e 69 6e 67 20 61 20 74 72 61 64 69 74 69 6f 6e 61 6c 20 62 72 69 64 67 69 6e 67 20 61 70 70 72 | ning.a.traditional.bridging.appr |
b9180 | 6f 61 63 68 2e 20 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 | oach..Pseudo-Ethernet.interfaces |
b91a0 | 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 75 73 65 64 20 74 6f 20 77 6f 72 6b 61 72 6f 75 6e 64 20 | .can.also.be.used.to.workaround. |
b91c0 | 74 68 65 20 67 65 6e 65 72 61 6c 20 6c 69 6d 69 74 20 6f 66 20 34 30 39 36 20 76 69 72 74 75 61 | the.general.limit.of.4096.virtua |
b91e0 | 6c 20 4c 41 4e 73 20 28 56 4c 41 4e 73 29 20 70 65 72 20 70 68 79 73 69 63 61 6c 20 45 74 68 65 | l.LANs.(VLANs).per.physical.Ethe |
b9200 | 72 6e 65 74 20 70 6f 72 74 2c 20 73 69 6e 63 65 20 74 68 61 74 20 6c 69 6d 69 74 20 69 73 20 77 | rnet.port,.since.that.limit.is.w |
b9220 | 69 74 68 20 72 65 73 70 65 63 74 20 74 6f 20 61 20 73 69 6e 67 6c 65 20 4d 41 43 20 61 64 64 72 | ith.respect.to.a.single.MAC.addr |
b9240 | 65 73 73 2e 00 42 79 70 61 73 73 69 6e 67 20 74 68 65 20 77 65 62 70 72 6f 78 79 00 43 41 20 28 | ess..Bypassing.the.webproxy.CA.( |
b9260 | 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 29 00 43 52 49 54 49 43 2f 45 43 | Certificate.Authority).CRITIC/EC |
b9280 | 50 00 43 61 6c 6c 20 61 6e 6f 74 68 65 72 20 72 6f 75 74 65 2d 6d 61 70 20 70 6f 6c 69 63 79 20 | P.Call.another.route-map.policy. |
b92a0 | 6f 6e 20 6d 61 74 63 68 2e 00 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e | on.match..Capability.Negotiation |
b92c0 | 00 43 65 72 74 61 69 6e 20 76 65 6e 64 6f 72 73 20 75 73 65 20 62 72 6f 61 64 63 61 73 74 73 20 | .Certain.vendors.use.broadcasts. |
b92e0 | 74 6f 20 69 64 65 6e 74 69 66 79 20 74 68 65 69 72 20 65 71 75 69 70 6d 65 6e 74 20 77 69 74 68 | to.identify.their.equipment.with |
b9300 | 69 6e 20 6f 6e 65 20 65 74 68 65 72 6e 65 74 20 73 65 67 6d 65 6e 74 2e 20 55 6e 66 6f 72 74 75 | in.one.ethernet.segment..Unfortu |
b9320 | 6e 61 74 65 6c 79 20 69 66 20 79 6f 75 20 73 70 6c 69 74 20 79 6f 75 72 20 6e 65 74 77 6f 72 6b | nately.if.you.split.your.network |
b9340 | 20 77 69 74 68 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 73 20 79 6f 75 20 6c 6f 6f 73 65 20 74 | .with.multiple.VLANs.you.loose.t |
b9360 | 68 65 20 61 62 69 6c 69 74 79 20 6f 66 20 69 64 65 6e 74 69 66 79 69 6e 67 20 79 6f 75 72 20 65 | he.ability.of.identifying.your.e |
b9380 | 71 75 69 70 6d 65 6e 74 2e 00 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 | quipment..Certificate.Authority. |
b93a0 | 28 43 41 29 00 43 65 72 74 69 66 69 63 61 74 65 20 72 65 76 6f 63 61 74 69 6f 6e 20 6c 69 73 74 | (CA).Certificate.revocation.list |
b93c0 | 20 69 6e 20 50 45 4d 20 66 6f 72 6d 61 74 2e 00 43 65 72 74 69 66 69 63 61 74 65 73 00 43 68 61 | .in.PEM.format..Certificates.Cha |
b93e0 | 6e 67 65 20 73 79 73 74 65 6d 20 6b 65 79 62 6f 61 72 64 20 6c 61 79 6f 75 74 20 74 6f 20 67 69 | nge.system.keyboard.layout.to.gi |
b9400 | 76 65 6e 20 6c 61 6e 67 75 61 67 65 2e 00 43 68 61 6e 67 65 20 74 68 65 20 64 65 66 61 75 6c 74 | ven.language..Change.the.default |
b9420 | 2d 61 63 74 69 6f 6e 20 77 69 74 68 20 74 68 69 73 20 73 65 74 74 69 6e 67 2e 00 43 68 61 6e 67 | -action.with.this.setting..Chang |
b9440 | 65 73 20 69 6e 20 42 47 50 20 70 6f 6c 69 63 69 65 73 20 72 65 71 75 69 72 65 20 74 68 65 20 42 | es.in.BGP.policies.require.the.B |
b9460 | 47 50 20 73 65 73 73 69 6f 6e 20 74 6f 20 62 65 20 63 6c 65 61 72 65 64 2e 20 43 6c 65 61 72 69 | GP.session.to.be.cleared..Cleari |
b9480 | 6e 67 20 68 61 73 20 61 20 6c 61 72 67 65 20 6e 65 67 61 74 69 76 65 20 69 6d 70 61 63 74 20 6f | ng.has.a.large.negative.impact.o |
b94a0 | 6e 20 6e 65 74 77 6f 72 6b 20 6f 70 65 72 61 74 69 6f 6e 73 2e 20 53 6f 66 74 20 72 65 63 6f 6e | n.network.operations..Soft.recon |
b94c0 | 66 69 67 75 72 61 74 69 6f 6e 20 65 6e 61 62 6c 65 73 20 79 6f 75 20 74 6f 20 67 65 6e 65 72 61 | figuration.enables.you.to.genera |
b94e0 | 74 65 20 69 6e 62 6f 75 6e 64 20 75 70 64 61 74 65 73 20 66 72 6f 6d 20 61 20 6e 65 69 67 68 62 | te.inbound.updates.from.a.neighb |
b9500 | 6f 72 2c 20 63 68 61 6e 67 65 20 61 6e 64 20 61 63 74 69 76 61 74 65 20 42 47 50 20 70 6f 6c 69 | or,.change.and.activate.BGP.poli |
b9520 | 63 69 65 73 20 77 69 74 68 6f 75 74 20 63 6c 65 61 72 69 6e 67 20 74 68 65 20 42 47 50 20 73 65 | cies.without.clearing.the.BGP.se |
b9540 | 73 73 69 6f 6e 2e 00 43 68 61 6e 67 65 73 20 74 6f 20 74 68 65 20 4e 41 54 20 73 79 73 74 65 6d | ssion..Changes.to.the.NAT.system |
b9560 | 20 6f 6e 6c 79 20 61 66 66 65 63 74 20 6e 65 77 6c 79 20 65 73 74 61 62 6c 69 73 68 65 64 20 63 | .only.affect.newly.established.c |
b9580 | 6f 6e 6e 65 63 74 69 6f 6e 73 2e 20 41 6c 72 65 61 64 79 20 65 73 74 61 62 6c 69 73 68 65 64 20 | onnections..Already.established. |
b95a0 | 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 72 65 20 6e 6f 74 20 61 66 66 65 63 74 65 64 2e 00 43 68 | connections.are.not.affected..Ch |
b95c0 | 61 6e 67 69 6e 67 20 74 68 65 20 6b 65 79 6d 61 70 20 6f 6e 6c 79 20 68 61 73 20 61 6e 20 65 66 | anging.the.keymap.only.has.an.ef |
b95e0 | 66 65 63 74 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 20 63 6f 6e 73 6f 6c 65 2c 20 75 73 69 6e | fect.on.the.system.console,.usin |
b9600 | 67 20 53 53 48 20 6f 72 20 53 65 72 69 61 6c 20 72 65 6d 6f 74 65 20 61 63 63 65 73 73 20 74 6f | g.SSH.or.Serial.remote.access.to |
b9620 | 20 74 68 65 20 64 65 76 69 63 65 20 69 73 20 6e 6f 74 20 61 66 66 65 63 74 65 64 20 61 73 20 74 | .the.device.is.not.affected.as.t |
b9640 | 68 65 20 6b 65 79 62 6f 61 72 64 20 6c 61 79 6f 75 74 20 68 65 72 65 20 63 6f 72 72 65 73 70 6f | he.keyboard.layout.here.correspo |
b9660 | 6e 64 73 20 74 6f 20 79 6f 75 72 20 61 63 63 65 73 73 20 73 79 73 74 65 6d 2e 00 43 68 61 6e 6e | nds.to.your.access.system..Chann |
b9680 | 65 6c 20 6e 75 6d 62 65 72 20 28 49 45 45 45 20 38 30 32 2e 31 31 29 2c 20 66 6f 72 20 32 2e 34 | el.number.(IEEE.802.11),.for.2.4 |
b96a0 | 47 68 7a 20 28 38 30 32 2e 31 31 20 62 2f 67 2f 6e 29 20 63 68 61 6e 6e 65 6c 73 20 72 61 6e 67 | Ghz.(802.11.b/g/n).channels.rang |
b96c0 | 65 20 66 72 6f 6d 20 31 2d 31 34 2e 20 4f 6e 20 35 47 68 7a 20 28 38 30 32 2e 31 31 20 61 2f 68 | e.from.1-14..On.5Ghz.(802.11.a/h |
b96e0 | 2f 6a 2f 6e 2f 61 63 29 20 63 68 61 6e 6e 65 6c 73 20 61 76 61 69 6c 61 62 6c 65 20 61 72 65 20 | /j/n/ac).channels.available.are. |
b9700 | 30 2c 20 33 34 20 74 6f 20 31 37 33 00 43 68 65 63 6b 20 69 66 20 74 68 65 20 49 6e 74 65 6c c2 | 0,.34.to.173.Check.if.the.Intel. |
b9720 | ae 20 51 41 54 20 64 65 76 69 63 65 20 69 73 20 75 70 20 61 6e 64 20 72 65 61 64 79 20 74 6f 20 | ..QAT.device.is.up.and.ready.to. |
b9740 | 64 6f 20 74 68 65 20 6a 6f 62 2e 00 43 68 65 63 6b 20 73 74 61 74 75 73 00 43 68 65 63 6b 20 74 | do.the.job..Check.status.Check.t |
b9760 | 68 65 20 6d 61 6e 79 20 70 61 72 61 6d 65 74 65 72 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 | he.many.parameters.available.for |
b9780 | 20 74 68 65 20 60 73 68 6f 77 20 69 70 76 36 20 72 6f 75 74 65 60 20 63 6f 6d 6d 61 6e 64 3a 00 | .the.`show.ipv6.route`.command:. |
b97a0 | 43 68 65 63 6b 3a 00 43 68 65 63 6b 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 43 68 65 63 | Check:.Checking.connections.Chec |
b97c0 | 6b 73 00 43 68 6f 6f 73 65 20 79 6f 75 72 20 60 60 64 69 72 65 63 74 6f 72 79 60 60 20 6c 6f 63 | ks.Choose.your.``directory``.loc |
b97e0 | 61 74 69 6f 6e 20 63 61 72 65 66 75 6c 6c 79 20 6f 72 20 79 6f 75 20 77 69 6c 6c 20 6c 6f 6f 73 | ation.carefully.or.you.will.loos |
b9800 | 65 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 6f 6e 20 69 6d 61 67 65 20 75 70 67 72 61 64 65 73 2e | e.the.content.on.image.upgrades. |
b9820 | 20 41 6e 79 20 64 69 72 65 63 74 6f 72 79 20 75 6e 64 65 72 20 60 60 2f 63 6f 6e 66 69 67 60 60 | .Any.directory.under.``/config`` |
b9840 | 20 69 73 20 73 61 76 65 20 61 74 20 74 68 69 73 20 77 69 6c 6c 20 62 65 20 6d 69 67 72 61 74 65 | .is.save.at.this.will.be.migrate |
b9860 | 64 2e 00 43 69 73 63 6f 20 43 61 74 61 6c 79 73 74 00 43 69 73 63 6f 20 61 6e 64 20 41 6c 6c 69 | d..Cisco.Catalyst.Cisco.and.Alli |
b9880 | 65 64 20 54 65 6c 65 73 79 6e 20 63 61 6c 6c 20 69 74 20 50 72 69 76 61 74 65 20 56 4c 41 4e 00 | ed.Telesyn.call.it.Private.VLAN. |
b98a0 | 43 6c 61 6d 70 20 4d 53 53 20 66 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 49 50 00 43 6c 61 73 | Clamp.MSS.for.a.specific.IP.Clas |
b98c0 | 73 20 74 72 65 61 74 6d 65 6e 74 00 43 6c 61 73 73 65 73 00 43 6c 61 73 73 6c 65 73 73 20 73 74 | s.treatment.Classes.Classless.st |
b98e0 | 61 74 69 63 20 72 6f 75 74 65 00 43 6c 65 61 72 20 61 6c 6c 20 42 47 50 20 65 78 74 63 6f 6d 6d | atic.route.Clear.all.BGP.extcomm |
b9900 | 75 6e 69 74 69 65 73 2e 00 43 6c 69 65 6e 74 00 43 6c 69 65 6e 74 20 41 64 64 72 65 73 73 20 50 | unities..Client.Client.Address.P |
b9920 | 6f 6f 6c 73 00 43 6c 69 65 6e 74 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 00 43 6c 69 65 6e | ools.Client.Authentication.Clien |
b9940 | 74 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 43 6c 69 65 6e 74 20 49 50 20 50 6f 6f 6c 20 41 | t.Configuration.Client.IP.Pool.A |
b9960 | 64 76 61 6e 63 65 64 20 4f 70 74 69 6f 6e 73 00 43 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 | dvanced.Options.Client.IP.addres |
b9980 | 73 65 73 20 77 69 6c 6c 20 62 65 20 70 72 6f 76 69 64 65 64 20 66 72 6f 6d 20 70 6f 6f 6c 20 60 | ses.will.be.provided.from.pool.` |
b99a0 | 31 39 32 2e 30 2e 32 2e 30 2f 32 35 60 00 43 6c 69 65 6e 74 20 53 69 64 65 00 43 6c 69 65 6e 74 | 192.0.2.0/25`.Client.Side.Client |
b99c0 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 43 6c 69 65 6e 74 20 64 6f 6d 61 69 6e 20 6e 61 6d | .configuration.Client.domain.nam |
b99e0 | 65 00 43 6c 69 65 6e 74 20 64 6f 6d 61 69 6e 20 73 65 61 72 63 68 00 43 6c 69 65 6e 74 20 69 73 | e.Client.domain.search.Client.is |
b9a00 | 6f 6c 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 6c | olation.can.be.used.to.prevent.l |
b9a20 | 6f 77 2d 6c 65 76 65 6c 20 62 72 69 64 67 69 6e 67 20 6f 66 20 66 72 61 6d 65 73 20 62 65 74 77 | ow-level.bridging.of.frames.betw |
b9a40 | 65 65 6e 20 61 73 73 6f 63 69 61 74 65 64 20 73 74 61 74 69 6f 6e 73 20 69 6e 20 74 68 65 20 42 | een.associated.stations.in.the.B |
b9a60 | 53 53 2e 00 43 6c 69 65 6e 74 3a 00 43 6c 69 65 6e 74 73 20 61 72 65 20 69 64 65 6e 74 69 66 69 | SS..Client:.Clients.are.identifi |
b9a80 | 65 64 20 62 79 20 74 68 65 20 43 4e 20 66 69 65 6c 64 20 6f 66 20 74 68 65 69 72 20 78 2e 35 30 | ed.by.the.CN.field.of.their.x.50 |
b9aa0 | 39 20 63 65 72 74 69 66 69 63 61 74 65 73 2c 20 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 | 9.certificates,.in.this.example. |
b9ac0 | 74 68 65 20 43 4e 20 69 73 20 60 60 63 6c 69 65 6e 74 30 60 60 3a 00 43 6c 69 65 6e 74 73 20 72 | the.CN.is.``client0``:.Clients.r |
b9ae0 | 65 63 65 69 76 69 6e 67 20 61 64 76 65 72 74 69 73 65 20 6d 65 73 73 61 67 65 73 20 66 72 6f 6d | eceiving.advertise.messages.from |
b9b00 | 20 6d 75 6c 74 69 70 6c 65 20 73 65 72 76 65 72 73 20 63 68 6f 6f 73 65 20 74 68 65 20 73 65 72 | .multiple.servers.choose.the.ser |
b9b20 | 76 65 72 20 77 69 74 68 20 74 68 65 20 68 69 67 68 65 73 74 20 70 72 65 66 65 72 65 6e 63 65 20 | ver.with.the.highest.preference. |
b9b40 | 76 61 6c 75 65 2e 20 54 68 65 20 72 61 6e 67 65 20 66 6f 72 20 74 68 69 73 20 76 61 6c 75 65 20 | value..The.range.for.this.value. |
b9b60 | 69 73 20 60 60 30 2e 2e 2e 32 35 35 60 60 2e 00 43 6c 6f 63 6b 20 64 61 65 6d 6f 6e 00 43 6f 6d | is.``0...255``..Clock.daemon.Com |
b9b80 | 6d 61 6e 64 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 6c | mand.completion.can.be.used.to.l |
b9ba0 | 69 73 74 20 61 76 61 69 6c 61 62 6c 65 20 74 69 6d 65 20 7a 6f 6e 65 73 2e 20 54 68 65 20 61 64 | ist.available.time.zones..The.ad |
b9bc0 | 6a 75 73 74 6d 65 6e 74 20 66 6f 72 20 64 61 79 6c 69 67 68 74 20 74 69 6d 65 20 77 69 6c 6c 20 | justment.for.daylight.time.will. |
b9be0 | 74 61 6b 65 20 70 6c 61 63 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 62 61 73 65 64 20 6f | take.place.automatically.based.o |
b9c00 | 6e 20 74 68 65 20 74 69 6d 65 20 6f 66 20 79 65 61 72 2e 00 43 6f 6d 6d 61 6e 64 20 66 6f 72 20 | n.the.time.of.year..Command.for. |
b9c20 | 64 69 73 61 62 6c 69 6e 67 20 61 20 72 75 6c 65 20 62 75 74 20 6b 65 65 70 20 69 74 20 69 6e 20 | disabling.a.rule.but.keep.it.in. |
b9c40 | 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 43 6f 6d 6d 61 6e 64 20 73 68 6f 75 6c | the.configuration..Command.shoul |
b9c60 | 64 20 70 72 6f 62 61 62 6c 79 20 62 65 20 65 78 74 65 6e 64 65 64 20 74 6f 20 6c 69 73 74 20 61 | d.probably.be.extended.to.list.a |
b9c80 | 6c 73 6f 20 74 68 65 20 72 65 61 6c 20 69 6e 74 65 72 66 61 63 65 73 20 61 73 73 69 67 6e 65 64 | lso.the.real.interfaces.assigned |
b9ca0 | 20 74 6f 20 74 68 69 73 20 6f 6e 65 20 56 52 46 20 74 6f 20 67 65 74 20 61 20 62 65 74 74 65 72 | .to.this.one.VRF.to.get.a.better |
b9cc0 | 20 6f 76 65 72 76 69 65 77 2e 00 43 6f 6d 6d 61 6e 64 20 75 73 65 64 20 74 6f 20 75 70 64 61 74 | .overview..Command.used.to.updat |
b9ce0 | 65 20 47 65 6f 49 50 20 64 61 74 61 62 61 73 65 20 61 6e 64 20 66 69 72 65 77 61 6c 6c 20 73 65 | e.GeoIP.database.and.firewall.se |
b9d00 | 74 73 2e 00 43 6f 6d 6d 61 6e 64 73 00 43 6f 6d 6d 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | ts..Commands.Common.configuratio |
b9d20 | 6e 2c 20 76 61 6c 69 64 20 66 6f 72 20 62 6f 74 68 20 70 72 69 6d 61 72 79 20 61 6e 64 20 73 65 | n,.valid.for.both.primary.and.se |
b9d40 | 63 6f 6e 64 61 72 79 20 6e 6f 64 65 2e 00 43 6f 6d 6d 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 63 | condary.node..Common.interface.c |
b9d60 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 43 6f 6d 6d 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 00 43 | onfiguration.Common.parameters.C |
b9d80 | 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 43 6f 6e 66 69 | onfederation.Configuration.Confi |
b9da0 | 64 65 6e 74 69 61 6c 69 74 79 20 e2 80 93 20 45 6e 63 72 79 70 74 69 6f 6e 20 6f 66 20 70 61 63 | dentiality.....Encryption.of.pac |
b9dc0 | 6b 65 74 73 20 74 6f 20 70 72 65 76 65 6e 74 20 73 6e 6f 6f 70 69 6e 67 20 62 79 20 61 6e 20 75 | kets.to.prevent.snooping.by.an.u |
b9de0 | 6e 61 75 74 68 6f 72 69 7a 65 64 20 73 6f 75 72 63 65 2e 00 43 6f 6e 66 69 67 75 72 61 74 69 6f | nauthorized.source..Configuratio |
b9e00 | 6e 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 45 78 61 6d 70 6c 65 00 43 6f 6e 66 69 67 75 72 | n.Configuration.Example.Configur |
b9e20 | 61 74 69 6f 6e 20 45 78 61 6d 70 6c 65 73 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 75 69 | ation.Examples.Configuration.Gui |
b9e40 | 64 65 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 4f 70 74 69 6f 6e 73 00 43 6f 6e 66 69 67 75 | de.Configuration.Options.Configu |
b9e60 | 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f 76 65 72 65 64 20 69 6e 20 74 68 69 73 20 | ration.commands.covered.in.this. |
b9e80 | 73 65 63 74 69 6f 6e 3a 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 | section:.Configuration.commands. |
b9ea0 | 66 6f 72 20 74 68 65 20 70 72 69 76 61 74 65 20 61 6e 64 20 70 75 62 6c 69 63 20 6b 65 79 20 77 | for.the.private.and.public.key.w |
b9ec0 | 69 6c 6c 20 62 65 20 64 69 73 70 6c 61 79 65 64 20 6f 6e 20 74 68 65 20 73 63 72 65 65 6e 20 77 | ill.be.displayed.on.the.screen.w |
b9ee0 | 68 69 63 68 20 6e 65 65 64 73 20 74 6f 20 62 65 20 73 65 74 20 6f 6e 20 74 68 65 20 72 6f 75 74 | hich.needs.to.be.set.on.the.rout |
b9f00 | 65 72 20 66 69 72 73 74 2e 20 4e 6f 74 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 77 69 74 68 20 | er.first..Note.the.command.with. |
b9f20 | 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 28 73 65 74 20 70 6b 69 20 6b 65 79 2d 70 61 69 72 | the.public.key.(set.pki.key-pair |
b9f40 | 20 69 70 73 65 63 2d 4c 45 46 54 20 70 75 62 6c 69 63 20 6b 65 79 20 27 4d 49 49 42 49 6a 41 4e | .ipsec-LEFT.public.key.'MIIBIjAN |
b9f60 | 42 67 6b 71 68 2e 2e 2e 27 29 2e 20 54 68 65 6e 20 64 6f 20 74 68 65 20 73 61 6d 65 20 6f 6e 20 | Bgkqh...')..Then.do.the.same.on. |
b9f80 | 74 68 65 20 6f 70 70 6f 73 69 74 65 20 72 6f 75 74 65 72 3a 00 43 6f 6e 66 69 67 75 72 61 74 69 | the.opposite.router:.Configurati |
b9fa0 | 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 77 69 6c 6c 20 64 69 73 70 6c 61 79 2e 20 4e 6f 74 65 20 74 | on.commands.will.display..Note.t |
b9fc0 | 68 65 20 63 6f 6d 6d 61 6e 64 20 77 69 74 68 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 28 | he.command.with.the.public.key.( |
b9fe0 | 73 65 74 20 70 6b 69 20 6b 65 79 2d 70 61 69 72 20 69 70 73 65 63 2d 4c 45 46 54 20 70 75 62 6c | set.pki.key-pair.ipsec-LEFT.publ |
ba000 | 69 63 20 6b 65 79 20 27 4d 49 49 42 49 6a 41 4e 42 67 6b 71 68 2e 2e 2e 27 29 2e 20 54 68 65 6e | ic.key.'MIIBIjANBgkqh...')..Then |
ba020 | 20 64 6f 20 74 68 65 20 73 61 6d 65 20 6f 6e 20 74 68 65 20 6f 70 70 6f 73 69 74 65 20 72 6f 75 | .do.the.same.on.the.opposite.rou |
ba040 | 74 65 72 3a 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 78 61 6d 70 6c 65 3a 00 43 6f 6e 66 | ter:.Configuration.example:.Conf |
ba060 | 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 73 65 20 65 78 70 6f 72 74 65 64 20 72 6f 75 | iguration.for.these.exported.rou |
ba080 | 74 65 73 20 6d 75 73 74 2c 20 61 74 20 61 20 6d 69 6e 69 6d 75 6d 2c 20 73 70 65 63 69 66 79 20 | tes.must,.at.a.minimum,.specify. |
ba0a0 | 74 68 65 73 65 20 74 77 6f 20 70 61 72 61 6d 65 74 65 72 73 2e 00 43 6f 6e 66 69 67 75 72 61 74 | these.two.parameters..Configurat |
ba0c0 | 69 6f 6e 20 6f 66 20 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 73 74 61 74 69 63 60 00 43 6f 6e | ion.of.:ref:`routing-static`.Con |
ba0e0 | 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 61 20 44 48 43 50 20 48 41 20 70 61 69 72 3a 00 43 6f | figuration.of.a.DHCP.HA.pair:.Co |
ba100 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 61 20 44 48 43 50 20 66 61 69 6c 6f 76 65 72 20 70 | nfiguration.of.a.DHCP.failover.p |
ba120 | 61 69 72 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 72 6f 75 74 65 20 6c 65 61 6b 69 | air.Configuration.of.route.leaki |
ba140 | 6e 67 20 62 65 74 77 65 65 6e 20 61 20 75 6e 69 63 61 73 74 20 56 52 46 20 52 49 42 20 61 6e 64 | ng.between.a.unicast.VRF.RIB.and |
ba160 | 20 74 68 65 20 56 50 4e 20 53 41 46 49 20 52 49 42 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 | .the.VPN.SAFI.RIB.of.the.default |
ba180 | 20 56 52 46 20 69 73 20 61 63 63 6f 6d 70 6c 69 73 68 65 64 20 76 69 61 20 63 6f 6d 6d 61 6e 64 | .VRF.is.accomplished.via.command |
ba1a0 | 73 20 69 6e 20 74 68 65 20 63 6f 6e 74 65 78 74 20 6f 66 20 61 20 56 52 46 20 61 64 64 72 65 73 | s.in.the.context.of.a.VRF.addres |
ba1c0 | 73 2d 66 61 6d 69 6c 79 2e 00 43 6f 6e 66 69 67 75 72 65 00 43 6f 6e 66 69 67 75 72 65 20 3a 61 | s-family..Configure.Configure.:a |
ba1e0 | 62 62 72 3a 60 4d 54 55 20 28 4d 61 78 69 6d 75 6d 20 54 72 61 6e 73 6d 69 73 73 69 6f 6e 20 55 | bbr:`MTU.(Maximum.Transmission.U |
ba200 | 6e 69 74 29 60 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 20 49 74 | nit)`.on.given.`<interface>`..It |
ba220 | 20 69 73 20 74 68 65 20 73 69 7a 65 20 28 69 6e 20 62 79 74 65 73 29 20 6f 66 20 74 68 65 20 6c | .is.the.size.(in.bytes).of.the.l |
ba240 | 61 72 67 65 73 74 20 65 74 68 65 72 6e 65 74 20 66 72 61 6d 65 20 73 65 6e 74 20 6f 6e 20 74 68 | argest.ethernet.frame.sent.on.th |
ba260 | 69 73 20 6c 69 6e 6b 2e 00 43 6f 6e 66 69 67 75 72 65 20 42 46 44 00 43 6f 6e 66 69 67 75 72 65 | is.link..Configure.BFD.Configure |
ba280 | 20 44 4e 53 20 60 3c 72 65 63 6f 72 64 3e 60 20 77 68 69 63 68 20 73 68 6f 75 6c 64 20 62 65 20 | .DNS.`<record>`.which.should.be. |
ba2a0 | 75 70 64 61 74 65 64 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 73 65 74 20 6d 75 6c 74 69 70 6c | updated..This.can.be.set.multipl |
ba2c0 | 65 20 74 69 6d 65 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 44 4e 53 20 60 3c 7a 6f 6e 65 3e 60 20 | e.times..Configure.DNS.`<zone>`. |
ba2e0 | 74 6f 20 62 65 20 75 70 64 61 74 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 47 45 4e 45 56 45 20 | to.be.updated..Configure.GENEVE. |
ba300 | 74 75 6e 6e 65 6c 20 66 61 72 20 65 6e 64 2f 72 65 6d 6f 74 65 20 74 75 6e 6e 65 6c 20 65 6e 64 | tunnel.far.end/remote.tunnel.end |
ba320 | 70 6f 69 6e 74 2e 00 43 6f 6e 66 69 67 75 72 65 20 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 | point..Configure.Graceful.Restar |
ba340 | 74 20 3a 72 66 63 3a 60 33 36 32 33 60 20 68 65 6c 70 65 72 20 73 75 70 70 6f 72 74 2e 20 42 79 | t.:rfc:`3623`.helper.support..By |
ba360 | 20 64 65 66 61 75 6c 74 2c 20 68 65 6c 70 65 72 20 73 75 70 70 6f 72 74 20 69 73 20 64 69 73 61 | .default,.helper.support.is.disa |
ba380 | 62 6c 65 64 20 66 6f 72 20 61 6c 6c 20 6e 65 69 67 68 62 6f 75 72 73 2e 20 54 68 69 73 20 63 6f | bled.for.all.neighbours..This.co |
ba3a0 | 6e 66 69 67 20 65 6e 61 62 6c 65 73 2f 64 69 73 61 62 6c 65 73 20 68 65 6c 70 65 72 20 73 75 70 | nfig.enables/disables.helper.sup |
ba3c0 | 70 6f 72 74 20 6f 6e 20 74 68 69 73 20 72 6f 75 74 65 72 20 66 6f 72 20 61 6c 6c 20 6e 65 69 67 | port.on.this.router.for.all.neig |
ba3e0 | 68 62 6f 75 72 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 | hbours..Configure.Graceful.Resta |
ba400 | 72 74 20 3a 72 66 63 3a 60 33 36 32 33 60 20 72 65 73 74 61 72 74 69 6e 67 20 73 75 70 70 6f 72 | rt.:rfc:`3623`.restarting.suppor |
ba420 | 74 2e 20 57 68 65 6e 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 67 72 61 | t..When.enabled,.the.default.gra |
ba440 | 63 65 20 70 65 72 69 6f 64 20 69 73 20 31 32 30 20 73 65 63 6f 6e 64 73 2e 00 43 6f 6e 66 69 67 | ce.period.is.120.seconds..Config |
ba460 | 75 72 65 20 49 43 4d 50 20 74 68 72 65 73 68 6f 6c 64 20 70 61 72 61 6d 65 74 65 72 73 2e 00 43 | ure.ICMP.threshold.parameters..C |
ba480 | 6f 6e 66 69 67 75 72 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 44 48 43 50 20 | onfigure.IP.address.of.the.DHCP. |
ba4a0 | 60 3c 73 65 72 76 65 72 3e 60 20 77 68 69 63 68 20 77 69 6c 6c 20 68 61 6e 64 6c 65 20 74 68 65 | `<server>`.which.will.handle.the |
ba4c0 | 20 72 65 6c 61 79 65 64 20 70 61 63 6b 65 74 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 52 41 44 49 | .relayed.packets..Configure.RADI |
ba4e0 | 55 53 20 60 3c 73 65 72 76 65 72 3e 60 20 61 6e 64 20 69 74 73 20 72 65 71 75 69 72 65 64 20 70 | US.`<server>`.and.its.required.p |
ba500 | 6f 72 74 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 72 65 71 75 65 73 74 73 2e | ort.for.authentication.requests. |
ba520 | 00 43 6f 6e 66 69 67 75 72 65 20 52 41 44 49 55 53 20 60 3c 73 65 72 76 65 72 3e 60 20 61 6e 64 | .Configure.RADIUS.`<server>`.and |
ba540 | 20 69 74 73 20 72 65 71 75 69 72 65 64 20 73 68 61 72 65 64 20 60 3c 73 65 63 72 65 74 3e 60 20 | .its.required.shared.`<secret>`. |
ba560 | 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6e 67 20 77 69 74 68 20 74 68 65 20 52 41 44 49 55 | for.communicating.with.the.RADIU |
ba580 | 53 20 73 65 72 76 65 72 2e 00 43 6f 6e 66 69 67 75 72 65 20 53 4e 41 54 20 72 75 6c 65 20 28 34 | S.server..Configure.SNAT.rule.(4 |
ba5a0 | 30 29 20 74 6f 20 6f 6e 6c 79 20 4e 41 54 20 70 61 63 6b 65 74 73 20 77 69 74 68 20 61 20 64 65 | 0).to.only.NAT.packets.with.a.de |
ba5c0 | 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6f 66 20 31 39 32 2e 30 2e 32 2e 31 2e 00 | stination.address.of.192.0.2.1.. |
ba5e0 | 43 6f 6e 66 69 67 75 72 65 20 54 43 50 20 74 68 72 65 73 68 6f 6c 64 20 70 61 72 61 6d 65 74 65 | Configure.TCP.threshold.paramete |
ba600 | 72 73 00 43 6f 6e 66 69 67 75 72 65 20 55 44 50 20 74 68 72 65 73 68 6f 6c 64 20 70 61 72 61 6d | rs.Configure.UDP.threshold.param |
ba620 | 65 74 65 72 73 00 43 6f 6e 66 69 67 75 72 65 20 60 3c 6d 65 73 73 61 67 65 3e 60 20 77 68 69 63 | eters.Configure.`<message>`.whic |
ba640 | 68 20 69 73 20 73 68 6f 77 6e 20 61 66 74 65 72 20 75 73 65 72 20 68 61 73 20 6c 6f 67 67 65 64 | h.is.shown.after.user.has.logged |
ba660 | 20 69 6e 20 74 6f 20 74 68 65 20 73 79 73 74 65 6d 2e 00 43 6f 6e 66 69 67 75 72 65 20 60 3c 6d | .in.to.the.system..Configure.`<m |
ba680 | 65 73 73 61 67 65 3e 60 20 77 68 69 63 68 20 69 73 20 73 68 6f 77 6e 20 64 75 72 69 6e 67 20 53 | essage>`.which.is.shown.during.S |
ba6a0 | 53 48 20 63 6f 6e 6e 65 63 74 20 61 6e 64 20 62 65 66 6f 72 65 20 61 20 75 73 65 72 20 69 73 20 | SH.connect.and.before.a.user.is. |
ba6c0 | 6c 6f 67 67 65 64 20 69 6e 2e 00 43 6f 6e 66 69 67 75 72 65 20 60 3c 70 61 73 73 77 6f 72 64 3e | logged.in..Configure.`<password> |
ba6e0 | 60 20 75 73 65 64 20 77 68 65 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 | `.used.when.authenticating.the.u |
ba700 | 70 64 61 74 65 20 72 65 71 75 65 73 74 20 66 6f 72 20 44 79 6e 44 4e 53 20 73 65 72 76 69 63 65 | pdate.request.for.DynDNS.service |
ba720 | 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 2d 6e 61 6d 65 3e 60 2e | .identified.by.`<service-name>`. |
ba740 | 00 43 6f 6e 66 69 67 75 72 65 20 60 3c 70 61 73 73 77 6f 72 64 3e 60 20 75 73 65 64 20 77 68 65 | .Configure.`<password>`.used.whe |
ba760 | 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 70 64 61 74 65 20 72 65 71 75 | n.authenticating.the.update.requ |
ba780 | 65 73 74 20 66 6f 72 20 44 79 6e 44 4e 53 20 73 65 72 76 69 63 65 20 69 64 65 6e 74 69 66 69 65 | est.for.DynDNS.service.identifie |
ba7a0 | 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 60 3c 75 73 | d.by.`<service>`..Configure.`<us |
ba7c0 | 65 72 6e 61 6d 65 3e 60 20 75 73 65 64 20 77 68 65 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e | ername>`.used.when.authenticatin |
ba7e0 | 67 20 74 68 65 20 75 70 64 61 74 65 20 72 65 71 75 65 73 74 20 66 6f 72 20 44 79 6e 44 4e 53 20 | g.the.update.request.for.DynDNS. |
ba800 | 73 65 72 76 69 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 2d | service.identified.by.`<service- |
ba820 | 6e 61 6d 65 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 60 3c 75 73 65 72 6e 61 6d 65 3e 60 20 75 | name>`..Configure.`<username>`.u |
ba840 | 73 65 64 20 77 68 65 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 70 64 61 | sed.when.authenticating.the.upda |
ba860 | 74 65 20 72 65 71 75 65 73 74 20 66 6f 72 20 44 79 6e 44 4e 53 20 73 65 72 76 69 63 65 20 69 64 | te.request.for.DynDNS.service.id |
ba880 | 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 3e 60 2e 20 46 6f 72 20 4e 61 6d | entified.by.`<service>`..For.Nam |
ba8a0 | 65 63 68 65 61 70 2c 20 73 65 74 20 74 68 65 20 3c 64 6f 6d 61 69 6e 3e 20 79 6f 75 20 77 69 73 | echeap,.set.the.<domain>.you.wis |
ba8c0 | 68 20 74 6f 20 75 70 64 61 74 65 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 20 55 52 4c 20 74 68 61 | h.to.update..Configure.a.URL.tha |
ba8e0 | 74 20 63 6f 6e 74 61 69 6e 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 69 6d 61 | t.contains.information.about.ima |
ba900 | 67 65 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 20 73 46 6c 6f 77 20 61 67 65 6e 74 20 61 64 64 | ges..Configure.a.sFlow.agent.add |
ba920 | 72 65 73 73 2e 20 49 74 20 63 61 6e 20 62 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 | ress..It.can.be.IPv4.or.IPv6.add |
ba940 | 72 65 73 73 2c 20 62 75 74 20 79 6f 75 20 6d 75 73 74 20 73 65 74 20 74 68 65 20 73 61 6d 65 20 | ress,.but.you.must.set.the.same. |
ba960 | 70 72 6f 74 6f 63 6f 6c 2c 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 66 6f 72 20 73 46 6c 6f | protocol,.which.is.used.for.sFlo |
ba980 | 77 20 63 6f 6c 6c 65 63 74 6f 72 20 61 64 64 72 65 73 73 65 73 2e 20 42 79 20 64 65 66 61 75 6c | w.collector.addresses..By.defaul |
ba9a0 | 74 2c 20 75 73 69 6e 67 20 72 6f 75 74 65 72 2d 69 64 20 66 72 6f 6d 20 42 47 50 20 6f 72 20 4f | t,.using.router-id.from.BGP.or.O |
ba9c0 | 53 50 46 20 70 72 6f 74 6f 63 6f 6c 2c 20 6f 72 20 74 68 65 20 70 72 69 6d 61 72 79 20 49 50 20 | SPF.protocol,.or.the.primary.IP. |
ba9e0 | 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 66 69 72 73 74 20 69 6e 74 65 72 66 61 63 65 | address.from.the.first.interface |
baa00 | 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 66 6f 72 20 3c | ..Configure.a.static.route.for.< |
baa20 | 73 75 62 6e 65 74 3e 20 75 73 69 6e 67 20 67 61 74 65 77 61 79 20 3c 61 64 64 72 65 73 73 3e 20 | subnet>.using.gateway.<address>. |
baa40 | 2c 20 75 73 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 74 6f 20 69 6e 64 65 6e 74 69 66 | ,.use.source.address.to.indentif |
baa60 | 79 20 74 68 65 20 70 65 65 72 20 77 68 65 6e 20 69 73 20 6d 75 6c 74 69 2d 68 6f 70 20 73 65 73 | y.the.peer.when.is.multi-hop.ses |
baa80 | 73 69 6f 6e 20 61 6e 64 20 74 68 65 20 67 61 74 65 77 61 79 20 61 64 64 72 65 73 73 20 61 73 20 | sion.and.the.gateway.address.as. |
baaa0 | 42 46 44 20 70 65 65 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 00 43 6f | BFD.peer.destination.address..Co |
baac0 | 6e 66 69 67 75 72 65 20 61 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 66 6f 72 20 3c 73 75 62 6e | nfigure.a.static.route.for.<subn |
baae0 | 65 74 3e 20 75 73 69 6e 67 20 67 61 74 65 77 61 79 20 3c 61 64 64 72 65 73 73 3e 20 61 6e 64 20 | et>.using.gateway.<address>.and. |
bab00 | 75 73 65 20 74 68 65 20 67 61 74 65 77 61 79 20 61 64 64 72 65 73 73 20 61 73 20 42 46 44 20 70 | use.the.gateway.address.as.BFD.p |
bab20 | 65 65 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 00 43 6f 6e 66 69 67 75 | eer.destination.address..Configu |
bab40 | 72 65 20 61 64 64 72 65 73 73 20 6f 66 20 4e 65 74 46 6c 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 2e | re.address.of.NetFlow.collector. |
bab60 | 20 4e 65 74 46 6c 6f 77 20 73 65 72 76 65 72 20 61 74 20 60 3c 61 64 64 72 65 73 73 3e 60 20 63 | .NetFlow.server.at.`<address>`.c |
bab80 | 61 6e 20 62 65 20 62 6f 74 68 20 6c 69 73 74 65 6e 69 6e 67 20 6f 6e 20 61 6e 20 49 50 76 34 20 | an.be.both.listening.on.an.IPv4. |
baba0 | 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 64 64 72 65 | or.IPv6.address..Configure.addre |
babc0 | 73 73 20 6f 66 20 73 46 6c 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 2e 20 73 46 6c 6f 77 20 73 65 72 | ss.of.sFlow.collector..sFlow.ser |
babe0 | 76 65 72 20 61 74 20 3c 61 64 64 72 65 73 73 3e 20 63 61 6e 20 62 65 20 62 6f 74 68 20 6c 69 73 | ver.at.<address>.can.be.both.lis |
bac00 | 74 65 6e 69 6e 67 20 6f 6e 20 61 6e 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 | tening.on.an.IPv4.or.IPv6.addres |
bac20 | 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 64 64 72 65 73 73 20 6f 66 20 73 46 6c 6f 77 20 63 6f | s..Configure.address.of.sFlow.co |
bac40 | 6c 6c 65 63 74 6f 72 2e 20 73 46 6c 6f 77 20 73 65 72 76 65 72 20 61 74 20 60 3c 61 64 64 72 65 | llector..sFlow.server.at.`<addre |
bac60 | 73 73 3e 60 20 63 61 6e 20 62 65 20 61 6e 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 | ss>`.can.be.an.IPv4.or.IPv6.addr |
bac80 | 65 73 73 2e 20 42 75 74 20 79 6f 75 20 63 61 6e 6e 6f 74 20 65 78 70 6f 72 74 20 74 6f 20 62 6f | ess..But.you.cannot.export.to.bo |
baca0 | 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 63 6f 6c 6c 65 63 74 6f 72 73 20 61 74 20 74 | th.IPv4.and.IPv6.collectors.at.t |
bacc0 | 68 65 20 73 61 6d 65 20 74 69 6d 65 21 00 43 6f 6e 66 69 67 75 72 65 20 61 67 65 6e 74 20 49 50 | he.same.time!.Configure.agent.IP |
bace0 | 20 61 64 64 72 65 73 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 69 73 20 69 6e | .address.associated.with.this.in |
bad00 | 74 65 72 66 61 63 65 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 67 67 72 65 67 61 74 69 6f 6e 20 64 | terface..Configure.aggregation.d |
bad20 | 65 6c 61 79 20 74 69 6d 65 72 20 69 6e 74 65 72 76 61 6c 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 | elay.timer.interval..Configure.a |
bad40 | 6c 65 72 74 20 73 63 72 69 70 74 20 74 68 61 74 20 77 69 6c 6c 20 62 65 20 65 78 65 63 75 74 65 | lert.script.that.will.be.execute |
bad60 | 64 20 77 68 65 6e 20 61 6e 20 61 74 74 61 63 6b 20 69 73 20 64 65 74 65 63 74 65 64 2e 00 43 6f | d.when.an.attack.is.detected..Co |
bad80 | 6e 66 69 67 75 72 65 20 61 6e 20 61 63 63 6f 75 6e 74 69 6e 67 20 73 65 72 76 65 72 20 61 6e 64 | nfigure.an.accounting.server.and |
bada0 | 20 65 6e 61 62 6c 65 20 61 63 63 6f 75 6e 74 69 6e 67 20 77 69 74 68 3a 00 43 6f 6e 66 69 67 75 | .enable.accounting.with:.Configu |
badc0 | 72 65 20 61 6e 64 20 65 6e 61 62 6c 65 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 66 6c 6f 77 | re.and.enable.collection.of.flow |
bade0 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 69 | .information.for.the.interface.i |
bae00 | 64 65 6e 74 69 66 69 65 64 20 62 79 20 3c 69 6e 74 65 72 66 61 63 65 3e 2e 00 43 6f 6e 66 69 67 | dentified.by.<interface>..Config |
bae20 | 75 72 65 20 61 6e 64 20 65 6e 61 62 6c 65 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 66 6c 6f | ure.and.enable.collection.of.flo |
bae40 | 77 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 | w.information.for.the.interface. |
bae60 | 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 43 6f 6e | identified.by.`<interface>`..Con |
bae80 | 66 69 67 75 72 65 20 61 75 74 6f 2d 63 68 65 63 6b 69 6e 67 20 66 6f 72 20 6e 65 77 20 69 6d 61 | figure.auto-checking.for.new.ima |
baea0 | 67 65 73 00 43 6f 6e 66 69 67 75 72 65 20 62 61 63 6b 65 6e 64 20 60 3c 6e 61 6d 65 3e 60 20 6d | ges.Configure.backend.`<name>`.m |
baec0 | 6f 64 65 20 54 43 50 20 6f 72 20 48 54 54 50 00 43 6f 6e 66 69 67 75 72 65 20 62 6f 74 68 20 72 | ode.TCP.or.HTTP.Configure.both.r |
baee0 | 6f 75 74 65 72 73 20 28 61 20 61 6e 64 20 62 29 20 66 6f 72 20 44 48 43 50 76 36 2d 50 44 20 76 | outers.(a.and.b).for.DHCPv6-PD.v |
baf00 | 69 61 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 3a 00 43 6f 6e 66 69 67 75 72 65 20 64 69 | ia.dummy.interface:.Configure.di |
baf20 | 72 65 63 74 69 6f 6e 20 66 6f 72 20 70 72 6f 63 65 73 73 69 6e 67 20 74 72 61 66 66 69 63 2e 00 | rection.for.processing.traffic.. |
baf40 | 43 6f 6e 66 69 67 75 72 65 20 65 69 74 68 65 72 20 6f 6e 65 20 6f 72 20 74 77 6f 20 73 74 6f 70 | Configure.either.one.or.two.stop |
baf60 | 20 62 69 74 73 2e 20 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 6f 6e 65 20 73 74 6f 70 | .bits..This.defaults.to.one.stop |
baf80 | 20 62 69 74 73 20 69 66 20 6c 65 66 74 20 75 6e 63 6f 6e 66 69 67 75 72 65 64 2e 00 43 6f 6e 66 | .bits.if.left.unconfigured..Conf |
bafa0 | 69 67 75 72 65 20 65 69 74 68 65 72 20 73 65 76 65 6e 20 6f 72 20 65 69 67 68 74 20 64 61 74 61 | igure.either.seven.or.eight.data |
bafc0 | 20 62 69 74 73 2e 20 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 65 69 67 68 74 20 64 61 | .bits..This.defaults.to.eight.da |
bafe0 | 74 61 20 62 69 74 73 20 69 66 20 6c 65 66 74 20 75 6e 63 6f 6e 66 69 67 75 72 65 64 2e 00 43 6f | ta.bits.if.left.unconfigured..Co |
bb000 | 6e 66 69 67 75 72 65 20 67 65 6e 65 72 61 6c 20 74 68 72 65 73 68 6f 6c 64 20 70 61 72 61 6d 65 | nfigure.general.threshold.parame |
bb020 | 74 65 72 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 68 6f 77 20 6c 6f 6e 67 20 61 6e 20 49 50 20 28 | ters..Configure.how.long.an.IP.( |
bb040 | 61 74 74 61 63 6b 65 72 29 20 73 68 6f 75 6c 64 20 62 65 20 6b 65 70 74 20 69 6e 20 62 6c 6f 63 | attacker).should.be.kept.in.bloc |
bb060 | 6b 65 64 20 73 74 61 74 65 2e 20 44 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 39 30 30 | ked.state..Default.value.is.1900 |
bb080 | 2e 00 43 6f 6e 66 69 67 75 72 65 20 69 6e 64 69 76 69 64 75 61 6c 20 62 72 69 64 67 65 20 70 6f | ..Configure.individual.bridge.po |
bb0a0 | 72 74 20 60 3c 70 72 69 6f 72 69 74 79 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 69 6e 74 65 72 | rt.`<priority>`..Configure.inter |
bb0c0 | 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 77 69 74 68 20 6f 6e 65 20 6f 72 20 6d | face.`<interface>`.with.one.or.m |
bb0e0 | 6f 72 65 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 65 73 73 65 73 2e 00 43 6f 6e 66 69 67 75 | ore.interface.addresses..Configu |
bb100 | 72 65 20 69 6e 74 65 72 66 61 63 65 2d 73 70 65 63 69 66 69 63 20 48 6f 73 74 2f 52 6f 75 74 65 | re.interface-specific.Host/Route |
bb120 | 72 20 62 65 68 61 76 69 6f 75 72 2e 20 49 66 20 73 65 74 2c 20 74 68 65 20 69 6e 74 65 72 66 61 | r.behaviour..If.set,.the.interfa |
bb140 | 63 65 20 77 69 6c 6c 20 73 77 69 74 63 68 20 74 6f 20 68 6f 73 74 20 6d 6f 64 65 20 61 6e 64 20 | ce.will.switch.to.host.mode.and. |
bb160 | 49 50 76 36 20 66 6f 72 77 61 72 64 69 6e 67 20 77 69 6c 6c 20 62 65 20 64 69 73 61 62 6c 65 64 | IPv6.forwarding.will.be.disabled |
bb180 | 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 43 6f 6e 66 69 67 75 72 65 20 6c 69 | .on.this.interface..Configure.li |
bb1a0 | 73 74 65 6e 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 6d 69 72 72 6f 72 69 6e 67 20 74 72 61 | sten.interface.for.mirroring.tra |
bb1c0 | 66 66 69 63 2e 00 43 6f 6e 66 69 67 75 72 65 20 6c 6f 63 61 6c 20 49 50 76 34 20 61 64 64 72 65 | ffic..Configure.local.IPv4.addre |
bb1e0 | 73 73 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f 72 20 73 66 6c 6f 77 2e 00 43 6f 6e 66 69 67 75 72 | ss.to.listen.for.sflow..Configur |
bb200 | 65 20 6e 65 77 20 53 4e 4d 50 20 75 73 65 72 20 6e 61 6d 65 64 20 22 76 79 6f 73 22 20 77 69 74 | e.new.SNMP.user.named."vyos".wit |
bb220 | 68 20 70 61 73 73 77 6f 72 64 20 22 76 79 6f 73 31 32 33 34 35 36 37 38 22 00 43 6f 6e 66 69 67 | h.password."vyos12345678".Config |
bb240 | 75 72 65 20 6e 65 78 74 2d 68 6f 70 20 60 3c 61 64 64 72 65 73 73 3e 60 20 61 6e 64 20 60 3c 74 | ure.next-hop.`<address>`.and.`<t |
bb260 | 61 72 67 65 74 2d 61 64 64 72 65 73 73 3e 60 20 66 6f 72 20 61 6e 20 49 50 76 34 20 73 74 61 74 | arget-address>`.for.an.IPv4.stat |
bb280 | 69 63 20 72 6f 75 74 65 2e 20 53 70 65 63 69 66 79 20 74 68 65 20 74 61 72 67 65 74 20 49 50 76 | ic.route..Specify.the.target.IPv |
bb2a0 | 34 20 61 64 64 72 65 73 73 20 66 6f 72 20 68 65 61 6c 74 68 20 63 68 65 63 6b 69 6e 67 2e 00 43 | 4.address.for.health.checking..C |
bb2c0 | 6f 6e 66 69 67 75 72 65 20 6e 65 78 74 2d 68 6f 70 20 60 3c 61 64 64 72 65 73 73 3e 60 20 66 6f | onfigure.next-hop.`<address>`.fo |
bb2e0 | 72 20 61 6e 20 49 50 76 34 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 20 4d 75 6c 74 69 70 6c 65 | r.an.IPv4.static.route..Multiple |
bb300 | 20 73 74 61 74 69 63 20 72 6f 75 74 65 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 2e 00 43 | .static.routes.can.be.created..C |
bb320 | 6f 6e 66 69 67 75 72 65 20 6e 65 78 74 2d 68 6f 70 20 60 3c 61 64 64 72 65 73 73 3e 60 20 66 6f | onfigure.next-hop.`<address>`.fo |
bb340 | 72 20 61 6e 20 49 50 76 36 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 20 4d 75 6c 74 69 70 6c 65 | r.an.IPv6.static.route..Multiple |
bb360 | 20 73 74 61 74 69 63 20 72 6f 75 74 65 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 2e 00 43 | .static.routes.can.be.created..C |
bb380 | 6f 6e 66 69 67 75 72 65 20 6f 6e 65 20 6f 66 20 74 68 65 20 70 72 65 64 65 66 69 6e 65 64 20 73 | onfigure.one.of.the.predefined.s |
bb3a0 | 79 73 74 65 6d 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 70 72 6f 66 69 6c 65 73 2e 00 43 6f 6e 66 | ystem.performance.profiles..Conf |
bb3c0 | 69 67 75 72 65 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 61 74 74 72 69 62 75 74 65 73 20 74 6f 20 | igure.one.or.more.attributes.to. |
bb3e0 | 74 68 65 20 67 69 76 65 6e 20 4e 54 50 20 73 65 72 76 65 72 2e 00 43 6f 6e 66 69 67 75 72 65 20 | the.given.NTP.server..Configure. |
bb400 | 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 73 65 72 76 65 72 73 20 66 6f 72 20 73 79 6e 63 68 72 6f 6e | one.or.more.servers.for.synchron |
bb420 | 69 73 61 74 69 6f 6e 2e 20 53 65 72 76 65 72 20 6e 61 6d 65 20 63 61 6e 20 62 65 20 65 69 74 68 | isation..Server.name.can.be.eith |
bb440 | 65 72 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 3a 61 62 62 72 3a 60 46 51 44 4e 20 | er.an.IP.address.or.:abbr:`FQDN. |
bb460 | 28 46 75 6c 6c 79 20 51 75 61 6c 69 66 69 65 64 20 44 6f 6d 61 69 6e 20 4e 61 6d 65 29 60 2e 00 | (Fully.Qualified.Domain.Name)`.. |
bb480 | 43 6f 6e 66 69 67 75 72 65 20 6f 70 74 69 6f 6e 61 6c 20 54 54 4c 20 76 61 6c 75 65 20 6f 6e 20 | Configure.optional.TTL.value.on. |
bb4a0 | 74 68 65 20 67 69 76 65 6e 20 72 65 73 6f 75 72 63 65 20 72 65 63 6f 72 64 2e 20 54 68 69 73 20 | the.given.resource.record..This. |
bb4c0 | 64 65 66 61 75 6c 74 73 20 74 6f 20 36 30 30 20 73 65 63 6f 6e 64 73 2e 00 43 6f 6e 66 69 67 75 | defaults.to.600.seconds..Configu |
bb4e0 | 72 65 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 20 64 75 70 6c 65 78 20 73 65 74 | re.physical.interface.duplex.set |
bb500 | 74 69 6e 67 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 | ting..Configure.physical.interfa |
bb520 | 63 65 20 73 70 65 65 64 20 73 65 74 74 69 6e 67 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 6f 72 74 | ce.speed.setting..Configure.port |
bb540 | 20 6d 69 72 72 6f 72 69 6e 67 20 66 6f 72 20 60 69 6e 74 65 72 66 61 63 65 60 20 69 6e 62 6f 75 | .mirroring.for.`interface`.inbou |
bb560 | 6e 64 20 74 72 61 66 66 69 63 20 61 6e 64 20 63 6f 70 79 20 74 68 65 20 74 72 61 66 66 69 63 20 | nd.traffic.and.copy.the.traffic. |
bb580 | 74 6f 20 60 6d 6f 6e 69 74 6f 72 2d 69 6e 74 65 72 66 61 63 65 60 00 43 6f 6e 66 69 67 75 72 65 | to.`monitor-interface`.Configure |
bb5a0 | 20 70 6f 72 74 20 6d 69 72 72 6f 72 69 6e 67 20 66 6f 72 20 60 69 6e 74 65 72 66 61 63 65 60 20 | .port.mirroring.for.`interface`. |
bb5c0 | 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 61 6e 64 20 63 6f 70 79 20 74 68 65 20 74 72 | outbound.traffic.and.copy.the.tr |
bb5e0 | 61 66 66 69 63 20 74 6f 20 60 6d 6f 6e 69 74 6f 72 2d 69 6e 74 65 72 66 61 63 65 60 00 43 6f 6e | affic.to.`monitor-interface`.Con |
bb600 | 66 69 67 75 72 65 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 6f 66 20 72 65 6d 6f 74 65 20 56 58 4c | figure.port.number.of.remote.VXL |
bb620 | 41 4e 20 65 6e 64 70 6f 69 6e 74 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 6f 72 74 20 6e 75 6d 62 | AN.endpoint..Configure.port.numb |
bb640 | 65 72 20 74 6f 20 62 65 20 75 73 65 64 20 66 6f 72 20 73 66 6c 6f 77 20 63 6f 6e 65 63 74 69 6f | er.to.be.used.for.sflow.conectio |
bb660 | 6e 2e 20 44 65 66 61 75 6c 74 20 70 6f 72 74 20 69 73 20 36 33 34 33 2e 00 43 6f 6e 66 69 67 75 | n..Default.port.is.6343..Configu |
bb680 | 72 65 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 64 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 | re.protocol.used.for.communicati |
bb6a0 | 6f 6e 20 74 6f 20 72 65 6d 6f 74 65 20 73 79 73 6c 6f 67 20 68 6f 73 74 2e 20 54 68 69 73 20 63 | on.to.remote.syslog.host..This.c |
bb6c0 | 61 6e 20 62 65 20 65 69 74 68 65 72 20 55 44 50 20 6f 72 20 54 43 50 2e 00 43 6f 6e 66 69 67 75 | an.be.either.UDP.or.TCP..Configu |
bb6e0 | 72 65 20 70 72 6f 78 79 20 70 6f 72 74 20 69 66 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 6c 69 73 | re.proxy.port.if.it.does.not.lis |
bb700 | 74 65 6e 20 74 6f 20 74 68 65 20 64 65 66 61 75 6c 74 20 70 6f 72 74 20 38 30 2e 00 43 6f 6e 66 | ten.to.the.default.port.80..Conf |
bb720 | 69 67 75 72 65 20 73 46 6c 6f 77 20 61 67 65 6e 74 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 | igure.sFlow.agent.IPv4.or.IPv6.a |
bb740 | 64 64 72 65 73 73 00 43 6f 6e 66 69 67 75 72 65 20 73 63 68 65 64 75 6c 65 20 63 6f 75 6e 74 65 | ddress.Configure.schedule.counte |
bb760 | 72 2d 70 6f 6c 6c 69 6e 67 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 33 | r-polling.in.seconds.(default:.3 |
bb780 | 30 29 00 43 6f 6e 66 69 67 75 72 65 20 73 65 72 76 69 63 65 20 60 3c 6e 61 6d 65 3e 60 20 6d 6f | 0).Configure.service.`<name>`.mo |
bb7a0 | 64 65 20 54 43 50 20 6f 72 20 48 54 54 50 00 43 6f 6e 66 69 67 75 72 65 20 73 65 72 76 69 63 65 | de.TCP.or.HTTP.Configure.service |
bb7c0 | 20 60 3c 6e 61 6d 65 3e 60 20 74 6f 20 75 73 65 20 74 68 65 20 62 61 63 6b 65 6e 64 20 3c 6e 61 | .`<name>`.to.use.the.backend.<na |
bb7e0 | 6d 65 3e 00 43 6f 6e 66 69 67 75 72 65 20 73 65 73 73 69 6f 6e 20 74 69 6d 65 6f 75 74 20 61 66 | me>.Configure.session.timeout.af |
bb800 | 74 65 72 20 77 68 69 63 68 20 74 68 65 20 75 73 65 72 20 77 69 6c 6c 20 62 65 20 6c 6f 67 67 65 | ter.which.the.user.will.be.logge |
bb820 | 64 20 6f 75 74 2e 00 43 6f 6e 66 69 67 75 72 65 20 73 79 73 74 65 6d 20 64 6f 6d 61 69 6e 20 6e | d.out..Configure.system.domain.n |
bb840 | 61 6d 65 2e 20 41 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 6d 75 73 74 20 73 74 61 72 74 20 61 6e | ame..A.domain.name.must.start.an |
bb860 | 64 20 65 6e 64 20 77 69 74 68 20 61 20 6c 65 74 74 65 72 20 6f 72 20 64 69 67 69 74 2c 20 61 6e | d.end.with.a.letter.or.digit,.an |
bb880 | 64 20 68 61 76 65 20 61 73 20 69 6e 74 65 72 69 6f 72 20 63 68 61 72 61 63 74 65 72 73 20 6f 6e | d.have.as.interior.characters.on |
bb8a0 | 6c 79 20 6c 65 74 74 65 72 73 2c 20 64 69 67 69 74 73 2c 20 6f 72 20 61 20 68 79 70 68 65 6e 2e | ly.letters,.digits,.or.a.hyphen. |
bb8c0 | 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 41 2d 73 69 64 65 20 72 6f 75 74 65 72 20 66 6f 72 | .Configure.the.A-side.router.for |
bb8e0 | 20 4e 50 54 76 36 20 75 73 69 6e 67 20 74 68 65 20 70 72 65 66 69 78 65 73 20 61 62 6f 76 65 3a | .NPTv6.using.the.prefixes.above: |
bb900 | 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 42 2d 73 69 64 65 20 72 6f 75 74 65 72 20 66 6f 72 | .Configure.the.B-side.router.for |
bb920 | 20 4e 50 54 76 36 20 75 73 69 6e 67 20 74 68 65 20 70 72 65 66 69 78 65 73 20 61 62 6f 76 65 3a | .NPTv6.using.the.prefixes.above: |
bb940 | 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 44 4e 53 20 60 3c 73 65 72 76 65 72 3e 60 20 49 50 | .Configure.the.DNS.`<server>`.IP |
bb960 | 2f 46 51 44 4e 20 75 73 65 64 20 77 68 65 6e 20 75 70 64 61 74 69 6e 67 20 74 68 69 73 20 64 79 | /FQDN.used.when.updating.this.dy |
bb980 | 6e 61 6d 69 63 20 61 73 73 69 67 6e 6d 65 6e 74 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 | namic.assignment..Configure.the. |
bb9a0 | 49 50 76 34 20 6f 72 20 49 50 76 36 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 20 6f 66 20 74 | IPv4.or.IPv6.listen.address.of.t |
bb9c0 | 68 65 20 54 46 54 50 20 73 65 72 76 65 72 2e 20 4d 75 6c 74 69 70 6c 65 20 49 50 76 34 20 61 6e | he.TFTP.server..Multiple.IPv4.an |
bb9e0 | 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 67 69 76 65 6e 2e 20 54 | d.IPv6.addresses.can.be.given..T |
bba00 | 68 65 72 65 20 77 69 6c 6c 20 62 65 20 6f 6e 65 20 54 46 54 50 20 73 65 72 76 65 72 20 69 6e 73 | here.will.be.one.TFTP.server.ins |
bba20 | 74 61 6e 63 65 73 20 6c 69 73 74 65 6e 69 6e 67 20 6f 6e 20 65 61 63 68 20 49 50 20 61 64 64 72 | tances.listening.on.each.IP.addr |
bba40 | 65 73 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 | ess..Configure.the.connection.tr |
bba60 | 61 63 6b 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 68 65 6c 70 65 72 20 6d 6f 64 75 6c 65 73 2e 20 | acking.protocol.helper.modules.. |
bba80 | 41 6c 6c 20 6d 6f 64 75 6c 65 73 20 61 72 65 20 65 6e 61 62 6c 65 20 62 79 20 64 65 66 61 75 6c | All.modules.are.enable.by.defaul |
bbaa0 | 74 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 64 69 73 63 72 65 74 65 20 70 6f 72 74 20 75 | t..Configure.the.discrete.port.u |
bbac0 | 6e 64 65 72 20 77 68 69 63 68 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 63 61 6e | nder.which.the.RADIUS.server.can |
bbae0 | 20 62 65 20 72 65 61 63 68 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 64 69 73 63 72 | .be.reached..Configure.the.discr |
bbb00 | 65 74 65 20 70 6f 72 74 20 75 6e 64 65 72 20 77 68 69 63 68 20 74 68 65 20 54 41 43 41 43 53 20 | ete.port.under.which.the.TACACS. |
bbb20 | 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 72 65 61 63 68 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 | server.can.be.reached..Configure |
bbb40 | 20 74 68 65 20 6c 6f 61 64 2d 62 61 6c 61 6e 63 69 6e 67 20 72 65 76 65 72 73 65 2d 70 72 6f 78 | .the.load-balancing.reverse-prox |
bbb60 | 79 20 73 65 72 76 69 63 65 20 66 6f 72 20 48 54 54 50 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 72 | y.service.for.HTTP..Configure.tr |
bbb80 | 61 66 66 69 63 20 63 61 70 74 75 72 65 20 6d 6f 64 65 2e 00 43 6f 6e 66 69 67 75 72 65 20 75 73 | affic.capture.mode..Configure.us |
bbba0 | 65 72 20 64 65 66 69 6e 65 64 20 3a 61 62 62 72 3a 60 4d 41 43 20 28 4d 65 64 69 61 20 41 63 63 | er.defined.:abbr:`MAC.(Media.Acc |
bbbc0 | 65 73 73 20 43 6f 6e 74 72 6f 6c 29 60 20 61 64 64 72 65 73 73 20 6f 6e 20 67 69 76 65 6e 20 60 | ess.Control)`.address.on.given.` |
bbbe0 | 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 77 61 74 65 72 6d 61 72 | <interface>`..Configure.watermar |
bbc00 | 6b 20 77 61 72 6e 69 6e 67 20 67 65 6e 65 72 61 74 69 6f 6e 20 66 6f 72 20 61 6e 20 49 47 4d 50 | k.warning.generation.for.an.IGMP |
bbc20 | 20 67 72 6f 75 70 20 6c 69 6d 69 74 2e 20 47 65 6e 65 72 61 74 65 73 20 77 61 72 6e 69 6e 67 20 | .group.limit..Generates.warning. |
bbc40 | 6f 6e 63 65 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 67 72 6f 75 70 20 6c 69 6d 69 74 20 | once.the.configured.group.limit. |
bbc60 | 69 73 20 72 65 61 63 68 65 64 20 77 68 69 6c 65 20 61 64 64 69 6e 67 20 6e 65 77 20 67 72 6f 75 | is.reached.while.adding.new.grou |
bbc80 | 70 73 2e 00 43 6f 6e 66 69 67 75 72 65 64 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 60 3c 69 | ps..Configured.routing.table.`<i |
bbca0 | 64 3e 60 20 69 73 20 75 73 65 64 20 62 79 20 56 52 46 20 60 3c 6e 61 6d 65 3e 60 2e 00 43 6f 6e | d>`.is.used.by.VRF.`<name>`..Con |
bbcc0 | 66 69 67 75 72 65 64 20 76 61 6c 75 65 00 43 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 42 47 50 | figured.value.Configures.the.BGP |
bbce0 | 20 73 70 65 61 6b 65 72 20 73 6f 20 74 68 61 74 20 69 74 20 6f 6e 6c 79 20 61 63 63 65 70 74 73 | .speaker.so.that.it.only.accepts |
bbd00 | 20 69 6e 62 6f 75 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 2c 20 62 75 74 20 64 | .inbound.connections.from,.but.d |
bbd20 | 6f 65 73 20 6e 6f 74 20 69 6e 69 74 69 61 74 65 20 6f 75 74 62 6f 75 6e 64 20 63 6f 6e 6e 65 63 | oes.not.initiate.outbound.connec |
bbd40 | 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 70 65 65 72 20 6f 72 20 70 65 65 72 20 67 72 6f 75 70 2e | tions.to.the.peer.or.peer.group. |
bbd60 | 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 49 50 6f 45 20 53 65 72 76 65 72 00 43 6f 6e 66 69 67 75 | .Configuring.IPoE.Server.Configu |
bbd80 | 72 69 6e 67 20 49 50 73 65 63 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 4c 32 54 50 20 53 65 72 76 | ring.IPsec.Configuring.L2TP.Serv |
bbda0 | 65 72 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 4c 4e 53 20 28 4c 32 54 50 20 4e 65 74 77 6f 72 6b | er.Configuring.LNS.(L2TP.Network |
bbdc0 | 20 53 65 72 76 65 72 29 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 50 50 50 6f 45 20 53 65 72 76 65 | .Server).Configuring.PPPoE.Serve |
bbde0 | 72 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 50 50 54 50 20 53 65 72 76 65 72 00 43 6f 6e 66 69 67 | r.Configuring.PPTP.Server.Config |
bbe00 | 75 72 69 6e 67 20 52 41 44 49 55 53 20 61 63 63 6f 75 6e 74 69 6e 67 00 43 6f 6e 66 69 67 75 72 | uring.RADIUS.accounting.Configur |
bbe20 | 69 6e 67 20 52 41 44 49 55 53 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 00 43 6f 6e 66 69 67 | ing.RADIUS.authentication.Config |
bbe40 | 75 72 69 6e 67 20 53 53 54 50 20 53 65 72 76 65 72 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 53 53 | uring.SSTP.Server.Configuring.SS |
bbe60 | 54 50 20 63 6c 69 65 6e 74 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 56 79 4f 53 20 74 6f 20 61 63 | TP.client.Configuring.VyOS.to.ac |
bbe80 | 74 20 61 73 20 79 6f 75 72 20 49 50 53 65 63 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 | t.as.your.IPSec.access.concentra |
bbea0 | 74 6f 72 20 69 73 20 6f 6e 65 20 74 68 69 6e 67 2c 20 62 75 74 20 79 6f 75 20 70 72 6f 62 61 62 | tor.is.one.thing,.but.you.probab |
bbec0 | 6c 79 20 6e 65 65 64 20 74 6f 20 73 65 74 75 70 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 63 6f 6e | ly.need.to.setup.your.client.con |
bbee0 | 6e 65 63 74 69 6e 67 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 20 73 6f 20 74 68 65 79 20 63 61 | necting.to.the.server.so.they.ca |
bbf00 | 6e 20 74 61 6c 6b 20 74 6f 20 74 68 65 20 49 50 53 65 63 20 67 61 74 65 77 61 79 2e 00 43 6f 6e | n.talk.to.the.IPSec.gateway..Con |
bbf20 | 66 69 67 75 72 69 6e 67 20 61 20 6c 69 73 74 65 6e 2d 61 64 64 72 65 73 73 20 69 73 20 65 73 73 | figuring.a.listen-address.is.ess |
bbf40 | 65 6e 74 69 61 6c 20 66 6f 72 20 74 68 65 20 73 65 72 76 69 63 65 20 74 6f 20 77 6f 72 6b 2e 00 | ential.for.the.service.to.work.. |
bbf60 | 43 6f 6e 6e 65 63 74 2f 44 69 73 63 6f 6e 6e 65 63 74 00 43 6f 6e 6e 65 63 74 65 64 20 63 6c 69 | Connect/Disconnect.Connected.cli |
bbf80 | 65 6e 74 20 73 68 6f 75 6c 64 20 75 73 65 20 60 3c 61 64 64 72 65 73 73 3e 60 20 61 73 20 74 68 | ent.should.use.`<address>`.as.th |
bbfa0 | 65 69 72 20 44 4e 53 20 73 65 72 76 65 72 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 63 63 | eir.DNS.server..This.command.acc |
bbfc0 | 65 70 74 73 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 | epts.both.IPv4.and.IPv6.addresse |
bbfe0 | 73 2e 20 55 70 20 74 6f 20 74 77 6f 20 6e 61 6d 65 73 65 72 76 65 72 73 20 63 61 6e 20 62 65 20 | s..Up.to.two.nameservers.can.be. |
bc000 | 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 49 50 76 34 2c 20 75 70 20 74 6f 20 74 68 72 65 65 | configured.for.IPv4,.up.to.three |
bc020 | 20 66 6f 72 20 49 50 76 36 2e 00 43 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 52 50 | .for.IPv6..Connections.to.the.RP |
bc040 | 4b 49 20 63 61 63 68 69 6e 67 20 73 65 72 76 65 72 20 63 61 6e 20 6e 6f 74 20 6f 6e 6c 79 20 62 | KI.caching.server.can.not.only.b |
bc060 | 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 62 79 20 48 54 54 50 2f 54 4c 53 20 62 75 74 20 79 6f | e.established.by.HTTP/TLS.but.yo |
bc080 | 75 20 63 61 6e 20 61 6c 73 6f 20 72 65 6c 79 20 6f 6e 20 61 20 73 65 63 75 72 65 20 53 53 48 20 | u.can.also.rely.on.a.secure.SSH. |
bc0a0 | 73 65 73 73 69 6f 6e 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 2e 20 54 6f 20 65 6e 61 62 6c 65 | session.to.the.server..To.enable |
bc0c0 | 20 53 53 48 20 79 6f 75 20 66 69 72 73 74 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 79 6f | .SSH.you.first.need.to.create.yo |
bc0e0 | 75 72 73 65 6c 73 20 61 6e 20 53 53 48 20 63 6c 69 65 6e 74 20 6b 65 79 70 61 69 72 20 75 73 69 | ursels.an.SSH.client.keypair.usi |
bc100 | 6e 67 20 60 60 67 65 6e 65 72 61 74 65 20 73 73 68 20 63 6c 69 65 6e 74 2d 6b 65 79 20 2f 63 6f | ng.``generate.ssh.client-key./co |
bc120 | 6e 66 69 67 2f 61 75 74 68 2f 69 64 5f 72 73 61 5f 72 70 6b 69 60 60 2e 20 4f 6e 63 65 20 79 6f | nfig/auth/id_rsa_rpki``..Once.yo |
bc140 | 75 72 20 6b 65 79 20 69 73 20 63 72 65 61 74 65 64 20 79 6f 75 20 63 61 6e 20 73 65 74 75 70 20 | ur.key.is.created.you.can.setup. |
bc160 | 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 43 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 | the.connection..Connections.to.t |
bc180 | 68 65 20 52 50 4b 49 20 63 61 63 68 69 6e 67 20 73 65 72 76 65 72 20 63 61 6e 20 6e 6f 74 20 6f | he.RPKI.caching.server.can.not.o |
bc1a0 | 6e 6c 79 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 62 79 20 48 54 54 50 2f 54 4c 53 20 62 | nly.be.established.by.HTTP/TLS.b |
bc1c0 | 75 74 20 79 6f 75 20 63 61 6e 20 61 6c 73 6f 20 72 65 6c 79 20 6f 6e 20 61 20 73 65 63 75 72 65 | ut.you.can.also.rely.on.a.secure |
bc1e0 | 20 53 53 48 20 73 65 73 73 69 6f 6e 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 2e 20 54 6f 20 65 | .SSH.session.to.the.server..To.e |
bc200 | 6e 61 62 6c 65 20 53 53 48 2c 20 66 69 72 73 74 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 72 65 | nable.SSH,.first.you.need.to.cre |
bc220 | 61 74 65 20 61 6e 20 53 53 48 20 63 6c 69 65 6e 74 20 6b 65 79 70 61 69 72 20 75 73 69 6e 67 20 | ate.an.SSH.client.keypair.using. |
bc240 | 60 60 67 65 6e 65 72 61 74 65 20 73 73 68 20 63 6c 69 65 6e 74 2d 6b 65 79 20 2f 63 6f 6e 66 69 | ``generate.ssh.client-key./confi |
bc260 | 67 2f 61 75 74 68 2f 69 64 5f 72 73 61 5f 72 70 6b 69 60 60 2e 20 4f 6e 63 65 20 79 6f 75 72 20 | g/auth/id_rsa_rpki``..Once.your. |
bc280 | 6b 65 79 20 69 73 20 63 72 65 61 74 65 64 20 79 6f 75 20 63 61 6e 20 73 65 74 75 70 20 74 68 65 | key.is.created.you.can.setup.the |
bc2a0 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 43 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 | .connection..Connections.to.the. |
bc2c0 | 52 50 4b 49 20 63 61 63 68 69 6e 67 20 73 65 72 76 65 72 20 63 61 6e 20 6e 6f 74 20 6f 6e 6c 79 | RPKI.caching.server.can.not.only |
bc2e0 | 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 62 79 20 54 43 50 20 75 73 69 6e 67 20 74 68 65 | .be.established.by.TCP.using.the |
bc300 | 20 52 54 52 20 70 72 6f 74 6f 63 6f 6c 20 62 75 74 20 79 6f 75 20 63 61 6e 20 61 6c 73 6f 20 72 | .RTR.protocol.but.you.can.also.r |
bc320 | 65 6c 79 20 6f 6e 20 61 20 73 65 63 75 72 65 20 53 53 48 20 73 65 73 73 69 6f 6e 20 74 6f 20 74 | ely.on.a.secure.SSH.session.to.t |
bc340 | 68 65 20 73 65 72 76 65 72 2e 20 54 68 69 73 20 70 72 6f 76 69 64 65 73 20 74 72 61 6e 73 70 6f | he.server..This.provides.transpo |
bc360 | 72 74 20 69 6e 74 65 67 72 69 74 79 20 61 6e 64 20 63 6f 6e 66 69 64 65 6e 74 69 61 6c 69 74 79 | rt.integrity.and.confidentiality |
bc380 | 20 61 6e 64 20 69 74 20 69 73 20 61 20 67 6f 6f 64 20 69 64 65 61 20 69 66 20 79 6f 75 72 20 76 | .and.it.is.a.good.idea.if.your.v |
bc3a0 | 61 6c 69 64 61 74 69 6f 6e 20 73 6f 66 74 77 61 72 65 20 73 75 70 70 6f 72 74 73 20 69 74 2e 20 | alidation.software.supports.it.. |
bc3c0 | 20 54 6f 20 65 6e 61 62 6c 65 20 53 53 48 2c 20 66 69 72 73 74 20 79 6f 75 20 6e 65 65 64 20 74 | .To.enable.SSH,.first.you.need.t |
bc3e0 | 6f 20 63 72 65 61 74 65 20 61 6e 20 53 53 48 20 63 6c 69 65 6e 74 20 6b 65 79 70 61 69 72 20 75 | o.create.an.SSH.client.keypair.u |
bc400 | 73 69 6e 67 20 60 60 67 65 6e 65 72 61 74 65 20 73 73 68 20 63 6c 69 65 6e 74 2d 6b 65 79 20 2f | sing.``generate.ssh.client-key./ |
bc420 | 63 6f 6e 66 69 67 2f 61 75 74 68 2f 69 64 5f 72 73 61 5f 72 70 6b 69 60 60 2e 20 4f 6e 63 65 20 | config/auth/id_rsa_rpki``..Once. |
bc440 | 79 6f 75 72 20 6b 65 79 20 69 73 20 63 72 65 61 74 65 64 20 79 6f 75 20 63 61 6e 20 73 65 74 75 | your.key.is.created.you.can.setu |
bc460 | 70 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 43 6f 6e 6e 74 72 61 63 6b 00 43 6f 6e 6e | p.the.connection..Conntrack.Conn |
bc480 | 74 72 61 63 6b 20 53 79 6e 63 00 43 6f 6e 6e 74 72 61 63 6b 20 53 79 6e 63 20 45 78 61 6d 70 6c | track.Sync.Conntrack.Sync.Exampl |
bc4a0 | 65 00 43 6f 6e 6e 74 72 61 63 6b 20 69 67 6e 6f 72 65 20 72 75 6c 65 73 00 43 6f 6e 6e 74 72 61 | e.Conntrack.ignore.rules.Conntra |
bc4c0 | 63 6b 20 6c 6f 67 00 43 6f 6e 73 6f 6c 65 00 43 6f 6e 73 6f 6c 65 20 53 65 72 76 65 72 00 43 6f | ck.log.Console.Console.Server.Co |
bc4e0 | 6e 73 74 72 61 69 6e 20 74 68 65 20 6d 65 6d 6f 72 79 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 | nstrain.the.memory.available.to. |
bc500 | 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 2e 00 43 6f 6e 74 61 69 6e 65 72 00 43 6f 6e 74 61 69 6e | the.container..Container.Contain |
bc520 | 65 72 20 4e 65 74 77 6f 72 6b 73 00 43 6f 6e 74 61 69 6e 65 72 20 52 65 67 69 73 74 72 79 00 43 | er.Networks.Container.Registry.C |
bc540 | 6f 6e 74 72 61 63 6b 20 54 69 6d 65 6f 75 74 73 00 43 6f 6e 76 65 72 74 20 74 68 65 20 61 64 64 | ontrack.Timeouts.Convert.the.add |
bc560 | 72 65 73 73 20 70 72 65 66 69 78 20 6f 66 20 61 20 73 69 6e 67 6c 65 20 60 66 63 30 30 3a 3a 2f | ress.prefix.of.a.single.`fc00::/ |
bc580 | 36 34 60 20 6e 65 74 77 6f 72 6b 20 74 6f 20 60 66 63 30 31 3a 3a 2f 36 34 60 00 43 6f 6e 76 65 | 64`.network.to.`fc01::/64`.Conve |
bc5a0 | 72 74 20 74 68 65 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 20 6f 66 20 61 20 73 69 6e 67 6c | rt.the.address.prefix.of.a.singl |
bc5c0 | 65 20 60 66 63 30 31 3a 3a 2f 36 34 60 20 6e 65 74 77 6f 72 6b 20 74 6f 20 60 66 63 30 30 3a 3a | e.`fc01::/64`.network.to.`fc00:: |
bc5e0 | 2f 36 34 60 00 43 6f 70 79 20 74 68 65 20 6b 65 79 2c 20 61 73 20 69 74 20 69 73 20 6e 6f 74 20 | /64`.Copy.the.key,.as.it.is.not. |
bc600 | 73 74 6f 72 65 64 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 66 69 6c 65 73 79 73 74 65 6d 2e 20 | stored.on.the.local.filesystem.. |
bc620 | 42 65 63 61 75 73 65 20 69 74 20 69 73 20 61 20 73 79 6d 6d 65 74 72 69 63 20 6b 65 79 2c 20 6f | Because.it.is.a.symmetric.key,.o |
bc640 | 6e 6c 79 20 79 6f 75 20 61 6e 64 20 79 6f 75 72 20 70 65 65 72 20 73 68 6f 75 6c 64 20 68 61 76 | nly.you.and.your.peer.should.hav |
bc660 | 65 20 6b 6e 6f 77 6c 65 64 67 65 20 6f 66 20 69 74 73 20 63 6f 6e 74 65 6e 74 2e 20 4d 61 6b 65 | e.knowledge.of.its.content..Make |
bc680 | 20 73 75 72 65 20 79 6f 75 20 64 69 73 74 72 69 62 75 74 65 20 74 68 65 20 6b 65 79 20 69 6e 20 | .sure.you.distribute.the.key.in. |
bc6a0 | 61 20 73 61 66 65 20 6d 61 6e 6e 65 72 2c 00 43 6f 75 6e 74 72 79 20 63 6f 64 65 20 28 49 53 4f | a.safe.manner,.Country.code.(ISO |
bc6c0 | 2f 49 45 43 20 33 31 36 36 2d 31 29 2e 20 55 73 65 64 20 74 6f 20 73 65 74 20 72 65 67 75 6c 61 | /IEC.3166-1)..Used.to.set.regula |
bc6e0 | 74 6f 72 79 20 64 6f 6d 61 69 6e 2e 20 53 65 74 20 61 73 20 6e 65 65 64 65 64 20 74 6f 20 69 6e | tory.domain..Set.as.needed.to.in |
bc700 | 64 69 63 61 74 65 20 63 6f 75 6e 74 72 79 20 69 6e 20 77 68 69 63 68 20 64 65 76 69 63 65 20 69 | dicate.country.in.which.device.i |
bc720 | 73 20 6f 70 65 72 61 74 69 6e 67 2e 20 54 68 69 73 20 63 61 6e 20 6c 69 6d 69 74 20 61 76 61 69 | s.operating..This.can.limit.avai |
bc740 | 6c 61 62 6c 65 20 63 68 61 6e 6e 65 6c 73 20 61 6e 64 20 74 72 61 6e 73 6d 69 74 20 70 6f 77 65 | lable.channels.and.transmit.powe |
bc760 | 72 2e 00 43 72 65 61 74 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 70 6f 6c 69 63 79 20 69 | r..Creat.community-list.policy.i |
bc780 | 64 65 6e 74 69 66 69 65 64 20 62 79 20 6e 61 6d 65 20 3c 74 65 78 74 3e 2e 00 43 72 65 61 74 20 | dentified.by.name.<text>..Creat. |
bc7a0 | 65 78 74 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 70 6f 6c 69 63 79 20 69 64 65 6e 74 69 66 | extcommunity-list.policy.identif |
bc7c0 | 69 65 64 20 62 79 20 6e 61 6d 65 20 3c 74 65 78 74 3e 2e 00 43 72 65 61 74 65 20 44 48 43 50 20 | ied.by.name.<text>..Create.DHCP. |
bc7e0 | 61 64 64 72 65 73 73 20 72 61 6e 67 65 20 77 69 74 68 20 61 20 72 61 6e 67 65 20 69 64 20 6f 66 | address.range.with.a.range.id.of |
bc800 | 20 60 3c 6e 3e 60 2e 20 44 48 43 50 20 6c 65 61 73 65 73 20 61 72 65 20 74 61 6b 65 6e 20 66 72 | .`<n>`..DHCP.leases.are.taken.fr |
bc820 | 6f 6d 20 74 68 69 73 20 70 6f 6f 6c 2e 20 54 68 65 20 70 6f 6f 6c 20 73 74 61 72 74 73 20 61 74 | om.this.pool..The.pool.starts.at |
bc840 | 20 61 64 64 72 65 73 73 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 43 72 65 61 74 65 20 44 48 43 | .address.`<address>`..Create.DHC |
bc860 | 50 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 20 77 69 74 68 20 61 20 72 61 6e 67 65 20 69 64 20 | P.address.range.with.a.range.id. |
bc880 | 6f 66 20 60 3c 6e 3e 60 2e 20 44 48 43 50 20 6c 65 61 73 65 73 20 61 72 65 20 74 61 6b 65 6e 20 | of.`<n>`..DHCP.leases.are.taken. |
bc8a0 | 66 72 6f 6d 20 74 68 69 73 20 70 6f 6f 6c 2e 20 54 68 65 20 70 6f 6f 6c 20 73 74 6f 70 73 20 77 | from.this.pool..The.pool.stops.w |
bc8c0 | 69 74 68 20 61 64 64 72 65 73 73 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 43 72 65 61 74 65 20 | ith.address.`<address>`..Create. |
bc8e0 | 44 4e 53 20 72 65 63 6f 72 64 20 70 65 72 20 63 6c 69 65 6e 74 20 6c 65 61 73 65 2c 20 62 79 20 | DNS.record.per.client.lease,.by. |
bc900 | 61 64 64 69 6e 67 20 63 6c 69 65 6e 74 73 20 74 6f 20 2f 65 74 63 2f 68 6f 73 74 73 20 66 69 6c | adding.clients.to./etc/hosts.fil |
bc920 | 65 2e 20 45 6e 74 72 79 20 77 69 6c 6c 20 68 61 76 65 20 66 6f 72 6d 61 74 3a 20 60 3c 73 68 61 | e..Entry.will.have.format:.`<sha |
bc940 | 72 65 64 2d 6e 65 74 77 6f 72 6b 2d 6e 61 6d 65 3e 5f 3c 68 6f 73 74 6e 61 6d 65 3e 2e 3c 64 6f | red-network-name>_<hostname>.<do |
bc960 | 6d 61 69 6e 2d 6e 61 6d 65 3e 60 00 43 72 65 61 74 65 20 60 3c 75 73 65 72 3e 60 20 66 6f 72 20 | main-name>`.Create.`<user>`.for. |
bc980 | 6c 6f 63 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 6e 20 74 68 69 73 20 73 79 73 | local.authentication.on.this.sys |
bc9a0 | 74 65 6d 2e 20 54 68 65 20 75 73 65 72 73 20 70 61 73 73 77 6f 72 64 20 77 69 6c 6c 20 62 65 20 | tem..The.users.password.will.be. |
bc9c0 | 73 65 74 20 74 6f 20 60 3c 70 61 73 73 3e 60 2e 00 43 72 65 61 74 65 20 60 60 31 37 32 2e 31 38 | set.to.`<pass>`..Create.``172.18 |
bc9e0 | 2e 32 30 31 2e 30 2f 32 34 60 60 20 61 73 20 61 20 73 75 62 6e 65 74 20 77 69 74 68 69 6e 20 60 | .201.0/24``.as.a.subnet.within.` |
bca00 | 60 4e 45 54 31 60 60 20 61 6e 64 20 70 61 73 73 20 61 64 64 72 65 73 73 20 6f 66 20 55 6e 69 66 | `NET1``.and.pass.address.of.Unif |
bca20 | 69 20 63 6f 6e 74 72 6f 6c 6c 65 72 20 61 74 20 60 60 31 37 32 2e 31 36 2e 31 30 30 2e 31 60 60 | i.controller.at.``172.16.100.1`` |
bca40 | 20 74 6f 20 63 6c 69 65 6e 74 73 20 6f 66 20 74 68 61 74 20 73 75 62 6e 65 74 2e 00 43 72 65 61 | .to.clients.of.that.subnet..Crea |
bca60 | 74 65 20 61 20 62 61 73 69 63 20 62 72 69 64 67 65 00 43 72 65 61 74 65 20 61 20 66 69 6c 65 20 | te.a.basic.bridge.Create.a.file. |
bca80 | 6e 61 6d 65 64 20 60 60 56 79 4f 53 2d 31 2e 33 2e 36 2e 31 2e 34 2e 31 2e 34 34 36 34 31 2e 43 | named.``VyOS-1.3.6.1.4.1.44641.C |
bcaa0 | 6f 6e 66 69 67 4d 67 6d 74 2d 43 6f 6d 6d 61 6e 64 73 60 60 20 75 73 69 6e 67 20 74 68 65 20 66 | onfigMgmt-Commands``.using.the.f |
bcac0 | 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 74 65 6e 74 3a 00 43 72 65 61 74 65 20 61 20 6c 6f 61 64 20 | ollowing.content:.Create.a.load. |
bcae0 | 62 61 6c 61 6e 63 69 6e 67 20 72 75 6c 65 2c 20 69 74 20 63 61 6e 20 62 65 20 61 20 6e 75 6d 62 | balancing.rule,.it.can.be.a.numb |
bcb00 | 65 72 20 62 65 74 77 65 65 6e 20 31 20 61 6e 64 20 39 39 39 39 3a 00 43 72 65 61 74 65 20 61 20 | er.between.1.and.9999:.Create.a. |
bcb20 | 6e 65 77 20 3a 61 62 62 72 3a 60 43 41 20 28 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f | new.:abbr:`CA.(Certificate.Autho |
bcb40 | 72 69 74 79 29 60 20 61 6e 64 20 6f 75 74 70 75 74 20 74 68 65 20 43 41 73 20 70 75 62 6c 69 63 | rity)`.and.output.the.CAs.public |
bcb60 | 20 61 6e 64 20 70 72 69 76 61 74 65 20 6b 65 79 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e | .and.private.key.on.the.console. |
bcb80 | 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 44 48 43 50 20 73 74 61 74 69 63 20 6d 61 70 70 69 6e | .Create.a.new.DHCP.static.mappin |
bcba0 | 67 20 6e 61 6d 65 64 20 60 3c 64 65 73 63 72 69 70 74 69 6f 6e 3e 60 20 77 68 69 63 68 20 69 73 | g.named.`<description>`.which.is |
bcbc0 | 20 76 61 6c 69 64 20 66 6f 72 20 74 68 65 20 68 6f 73 74 20 69 64 65 6e 74 69 66 69 65 64 20 62 | .valid.for.the.host.identified.b |
bcbe0 | 79 20 69 74 73 20 44 48 43 50 20 75 6e 69 71 75 65 20 69 64 65 6e 74 69 66 69 65 72 20 28 44 55 | y.its.DHCP.unique.identifier.(DU |
bcc00 | 49 44 29 20 60 3c 69 64 65 6e 74 69 66 69 65 72 3e 60 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 | ID).`<identifier>`..Create.a.new |
bcc20 | 20 44 48 43 50 20 73 74 61 74 69 63 20 6d 61 70 70 69 6e 67 20 6e 61 6d 65 64 20 60 3c 64 65 73 | .DHCP.static.mapping.named.`<des |
bcc40 | 63 72 69 70 74 69 6f 6e 3e 60 20 77 68 69 63 68 20 69 73 20 76 61 6c 69 64 20 66 6f 72 20 74 68 | cription>`.which.is.valid.for.th |
bcc60 | 65 20 68 6f 73 74 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 69 74 73 20 4d 41 43 20 60 3c 61 | e.host.identified.by.its.MAC.`<a |
bcc80 | 64 64 72 65 73 73 3e 60 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 56 4c 41 4e 20 69 6e 74 65 | ddress>`..Create.a.new.VLAN.inte |
bcca0 | 72 66 61 63 65 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 | rface.on.interface.`<interface>` |
bccc0 | 20 75 73 69 6e 67 20 74 68 65 20 56 4c 41 4e 20 6e 75 6d 62 65 72 20 70 72 6f 76 69 64 65 64 20 | .using.the.VLAN.number.provided. |
bcce0 | 76 69 61 20 60 3c 76 6c 61 6e 2d 69 64 3e 60 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 70 75 | via.`<vlan-id>`..Create.a.new.pu |
bcd00 | 62 6c 69 63 2f 70 72 69 76 61 74 65 20 6b 65 79 70 61 69 72 20 61 6e 64 20 6f 75 74 70 75 74 20 | blic/private.keypair.and.output. |
bcd20 | 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 | the.certificate.on.the.console.. |
bcd40 | 43 72 65 61 74 65 20 61 20 6e 65 77 20 70 75 62 6c 69 63 2f 70 72 69 76 61 74 65 20 6b 65 79 70 | Create.a.new.public/private.keyp |
bcd60 | 61 69 72 20 77 68 69 63 68 20 69 73 20 73 69 67 6e 65 64 20 62 79 20 74 68 65 20 43 41 20 72 65 | air.which.is.signed.by.the.CA.re |
bcd80 | 66 65 72 65 6e 63 65 64 20 62 79 20 60 63 61 2d 6e 61 6d 65 60 2e 20 54 68 65 20 73 69 67 6e 65 | ferenced.by.`ca-name`..The.signe |
bcda0 | 64 20 63 65 72 74 69 66 69 63 61 74 65 20 69 73 20 74 68 65 6e 20 6f 75 74 70 75 74 20 74 6f 20 | d.certificate.is.then.output.to. |
bcdc0 | 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 73 65 6c 66 2d 73 | the.console..Create.a.new.self-s |
bcde0 | 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 2e 20 54 68 65 20 70 75 62 6c 69 63 2f 70 72 | igned.certificate..The.public/pr |
bce00 | 69 76 61 74 65 20 69 73 20 74 68 65 6e 20 73 68 6f 77 6e 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f | ivate.is.then.shown.on.the.conso |
bce20 | 6c 65 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 73 75 62 6f 72 64 69 6e 61 74 65 20 3a 61 62 | le..Create.a.new.subordinate.:ab |
bce40 | 62 72 3a 60 43 41 20 28 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 29 60 20 | br:`CA.(Certificate.Authority)`. |
bce60 | 61 6e 64 20 73 69 67 6e 20 69 74 20 75 73 69 6e 67 20 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 | and.sign.it.using.the.private.ke |
bce80 | 79 20 72 65 66 65 72 65 6e 63 65 64 20 62 79 20 60 63 61 2d 6e 61 6d 65 60 2e 00 43 72 65 61 74 | y.referenced.by.`ca-name`..Creat |
bcea0 | 65 20 61 20 6e 65 77 20 73 75 62 6f 72 64 69 6e 61 74 65 20 3a 61 62 62 72 3a 60 43 41 20 28 43 | e.a.new.subordinate.:abbr:`CA.(C |
bcec0 | 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 29 60 20 61 6e 64 20 73 69 67 6e 20 | ertificate.Authority)`.and.sign. |
bcee0 | 69 74 20 75 73 69 6e 67 20 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 72 65 66 65 72 65 6e | it.using.the.private.key.referen |
bcf00 | 63 65 64 20 62 79 20 60 6e 61 6d 65 60 2e 00 43 72 65 61 74 65 20 61 20 70 65 65 72 20 61 73 20 | ced.by.`name`..Create.a.peer.as. |
bcf20 | 79 6f 75 20 77 6f 75 6c 64 20 77 68 65 6e 20 79 6f 75 20 73 70 65 63 69 66 79 20 61 6e 20 41 53 | you.would.when.you.specify.an.AS |
bcf40 | 4e 2c 20 65 78 63 65 70 74 20 74 68 61 74 20 69 66 20 74 68 65 20 70 65 65 72 73 20 41 53 4e 20 | N,.except.that.if.the.peers.ASN. |
bcf60 | 69 73 20 64 69 66 66 65 72 65 6e 74 20 74 68 61 6e 20 6d 69 6e 65 20 61 73 20 73 70 65 63 69 66 | is.different.than.mine.as.specif |
bcf80 | 69 65 64 20 75 6e 64 65 72 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 70 72 6f 74 6f 63 6f 6c 73 | ied.under.the.:cfgcmd:`protocols |
bcfa0 | 20 62 67 70 20 3c 61 73 6e 3e 60 20 63 6f 6d 6d 61 6e 64 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 | .bgp.<asn>`.command.the.connecti |
bcfc0 | 6f 6e 20 77 69 6c 6c 20 62 65 20 64 65 6e 69 65 64 2e 00 43 72 65 61 74 65 20 61 20 70 65 65 72 | on.will.be.denied..Create.a.peer |
bcfe0 | 20 61 73 20 79 6f 75 20 77 6f 75 6c 64 20 77 68 65 6e 20 79 6f 75 20 73 70 65 63 69 66 79 20 61 | .as.you.would.when.you.specify.a |
bd000 | 6e 20 41 53 4e 2c 20 65 78 63 65 70 74 20 74 68 61 74 20 69 66 20 74 68 65 20 70 65 65 72 73 20 | n.ASN,.except.that.if.the.peers. |
bd020 | 41 53 4e 20 69 73 20 74 68 65 20 73 61 6d 65 20 61 73 20 6d 69 6e 65 20 61 73 20 73 70 65 63 69 | ASN.is.the.same.as.mine.as.speci |
bd040 | 66 69 65 64 20 75 6e 64 65 72 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 70 72 6f 74 6f 63 6f 6c | fied.under.the.:cfgcmd:`protocol |
bd060 | 73 20 62 67 70 20 3c 61 73 6e 3e 60 20 63 6f 6d 6d 61 6e 64 20 74 68 65 20 63 6f 6e 6e 65 63 74 | s.bgp.<asn>`.command.the.connect |
bd080 | 69 6f 6e 20 77 69 6c 6c 20 62 65 20 64 65 6e 69 65 64 2e 00 43 72 65 61 74 65 20 61 20 73 74 61 | ion.will.be.denied..Create.a.sta |
bd0a0 | 74 69 63 20 68 6f 73 74 6e 61 6d 65 20 6d 61 70 70 69 6e 67 20 77 68 69 63 68 20 77 69 6c 6c 20 | tic.hostname.mapping.which.will. |
bd0c0 | 61 6c 77 61 79 73 20 72 65 73 6f 6c 76 65 20 74 68 65 20 6e 61 6d 65 20 60 3c 68 6f 73 74 6e 61 | always.resolve.the.name.`<hostna |
bd0e0 | 6d 65 3e 60 20 74 6f 20 49 50 20 61 64 64 72 65 73 73 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 | me>`.to.IP.address.`<address>`.. |
bd100 | 43 72 65 61 74 65 20 61 73 2d 70 61 74 68 2d 70 6f 6c 69 63 79 20 69 64 65 6e 74 69 66 69 65 64 | Create.as-path-policy.identified |
bd120 | 20 62 79 20 6e 61 6d 65 20 3c 74 65 78 74 3e 2e 00 43 72 65 61 74 65 20 66 69 72 65 77 61 6c 6c | .by.name.<text>..Create.firewall |
bd140 | 20 72 75 6c 65 20 69 6e 20 66 6f 72 77 61 72 64 20 63 68 61 69 6e 2c 20 61 6e 64 20 64 65 66 69 | .rule.in.forward.chain,.and.defi |
bd160 | 6e 65 20 77 68 69 63 68 20 66 6c 6f 77 74 62 61 6c 65 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 | ne.which.flowtbale.should.be.use |
bd180 | 64 2e 20 4f 6e 6c 79 20 61 70 70 6c 69 63 61 62 6c 65 20 69 66 20 61 63 74 69 6f 6e 20 69 73 20 | d..Only.applicable.if.action.is. |
bd1a0 | 60 60 6f 66 66 6c 6f 61 64 60 60 2e 00 43 72 65 61 74 65 20 66 69 72 65 77 61 6c 6c 20 72 75 6c | ``offload``..Create.firewall.rul |
bd1c0 | 65 20 69 6e 20 66 6f 72 77 61 72 64 20 63 68 61 69 6e 2c 20 61 6e 64 20 73 65 74 20 61 63 74 69 | e.in.forward.chain,.and.set.acti |
bd1e0 | 6f 6e 20 74 6f 20 60 60 6f 66 66 6c 6f 61 64 60 60 2e 00 43 72 65 61 74 65 20 66 69 72 65 77 61 | on.to.``offload``..Create.firewa |
bd200 | 6c 6c 20 72 75 6c 65 3a 20 63 72 65 61 74 65 20 61 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 2c | ll.rule:.create.a.firewall.rule, |
bd220 | 20 73 65 74 74 69 6e 67 20 61 63 74 69 6f 6e 20 74 6f 20 60 60 6f 66 66 6c 6f 61 64 60 60 20 61 | .setting.action.to.``offload``.a |
bd240 | 6e 64 20 75 73 69 6e 67 20 64 65 73 69 72 65 64 20 66 6c 6f 77 74 61 62 6c 65 20 66 6f 72 20 60 | nd.using.desired.flowtable.for.` |
bd260 | 60 6f 66 66 6c 6f 61 64 2d 74 61 72 67 65 74 60 60 2e 00 43 72 65 61 74 65 20 66 6c 6f 77 74 61 | `offload-target``..Create.flowta |
bd280 | 62 6c 65 3a 20 63 72 65 61 74 65 20 66 6c 6f 77 74 61 62 6c 65 2c 20 77 68 69 63 68 20 69 6e 63 | ble:.create.flowtable,.which.inc |
bd2a0 | 6c 75 64 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 73 20 74 68 61 74 20 61 72 65 20 67 6f | ludes.the.interfaces.that.are.go |
bd2c0 | 69 6e 67 20 74 6f 20 62 65 20 75 73 65 64 20 62 79 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 2e | ing.to.be.used.by.the.flowtable. |
bd2e0 | 00 43 72 65 61 74 65 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 70 6f 6c | .Create.large-community-list.pol |
bd300 | 69 63 79 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 6e 61 6d 65 20 3c 74 65 78 74 3e 2e 00 43 | icy.identified.by.name.<text>..C |
bd320 | 72 65 61 74 65 20 6e 61 6d 65 64 20 60 3c 61 6c 69 61 73 3e 60 20 66 6f 72 20 74 68 65 20 63 6f | reate.named.`<alias>`.for.the.co |
bd340 | 6e 66 69 67 75 72 65 64 20 73 74 61 74 69 63 20 6d 61 70 70 69 6e 67 20 66 6f 72 20 60 3c 68 6f | nfigured.static.mapping.for.`<ho |
bd360 | 73 74 6e 61 6d 65 3e 60 2e 20 54 68 75 73 20 74 68 65 20 61 64 64 72 65 73 73 20 63 6f 6e 66 69 | stname>`..Thus.the.address.confi |
bd380 | 67 75 72 65 64 20 61 73 20 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 73 79 73 74 65 6d 20 73 74 61 | gured.as.:cfgcmd:`set.system.sta |
bd3a0 | 74 69 63 2d 68 6f 73 74 2d 6d 61 70 70 69 6e 67 20 68 6f 73 74 2d 6e 61 6d 65 20 3c 68 6f 73 74 | tic-host-mapping.host-name.<host |
bd3c0 | 6e 61 6d 65 3e 20 69 6e 65 74 20 3c 61 64 64 72 65 73 73 3e 60 20 63 61 6e 20 62 65 20 72 65 61 | name>.inet.<address>`.can.be.rea |
bd3e0 | 63 68 65 64 20 76 69 61 20 6d 75 6c 74 69 70 6c 65 20 6e 61 6d 65 73 2e 00 43 72 65 61 74 65 20 | ched.via.multiple.names..Create. |
bd400 | 6e 65 77 20 3a 72 66 63 3a 60 32 31 33 36 60 20 44 4e 53 20 75 70 64 61 74 65 20 63 6f 6e 66 69 | new.:rfc:`2136`.DNS.update.confi |
bd420 | 67 75 72 61 74 69 6f 6e 20 77 68 69 63 68 20 77 69 6c 6c 20 75 70 64 61 74 65 20 74 68 65 20 49 | guration.which.will.update.the.I |
bd440 | 50 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 60 3c 69 6e 74 65 72 66 61 63 | P.address.assigned.to.`<interfac |
bd460 | 65 3e 60 20 6f 6e 20 74 68 65 20 73 65 72 76 69 63 65 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 | e>`.on.the.service.you.configure |
bd480 | 64 20 75 6e 64 65 72 20 60 3c 73 65 72 76 69 63 65 2d 6e 61 6d 65 3e 60 2e 00 43 72 65 61 74 65 | d.under.`<service-name>`..Create |
bd4a0 | 20 6e 65 77 20 56 52 46 20 69 6e 73 74 61 6e 63 65 20 77 69 74 68 20 60 3c 6e 61 6d 65 3e 60 2e | .new.VRF.instance.with.`<name>`. |
bd4c0 | 20 54 68 65 20 6e 61 6d 65 20 69 73 20 75 73 65 64 20 77 68 65 6e 20 70 6c 61 63 69 6e 67 20 69 | .The.name.is.used.when.placing.i |
bd4e0 | 6e 64 69 76 69 64 75 61 6c 20 69 6e 74 65 72 66 61 63 65 73 20 69 6e 74 6f 20 74 68 65 20 56 52 | ndividual.interfaces.into.the.VR |
bd500 | 46 2e 00 43 72 65 61 74 65 20 6e 65 77 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 75 70 64 61 74 65 | F..Create.new.dynamic.DNS.update |
bd520 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 68 69 63 68 20 77 69 6c 6c 20 75 70 64 61 74 65 | .configuration.which.will.update |
bd540 | 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 60 3c 69 6e | .the.IP.address.assigned.to.`<in |
bd560 | 74 65 72 66 61 63 65 3e 60 20 6f 6e 20 74 68 65 20 73 65 72 76 69 63 65 20 79 6f 75 20 63 6f 6e | terface>`.on.the.service.you.con |
bd580 | 66 69 67 75 72 65 64 20 75 6e 64 65 72 20 60 3c 73 65 72 76 69 63 65 2d 6e 61 6d 65 3e 60 2e 00 | figured.under.`<service-name>`.. |
bd5a0 | 43 72 65 61 74 65 20 6e 65 77 20 73 79 73 74 65 6d 20 75 73 65 72 20 77 69 74 68 20 75 73 65 72 | Create.new.system.user.with.user |
bd5c0 | 6e 61 6d 65 20 60 3c 6e 61 6d 65 3e 60 20 61 6e 64 20 72 65 61 6c 2d 6e 61 6d 65 20 73 70 65 63 | name.`<name>`.and.real-name.spec |
bd5e0 | 69 66 69 65 64 20 62 79 20 60 3c 73 74 72 69 6e 67 3e 60 2e 00 43 72 65 61 74 65 20 73 65 72 76 | ified.by.`<string>`..Create.serv |
bd600 | 69 63 65 20 60 3c 6e 61 6d 65 3e 60 20 74 6f 20 6c 69 73 74 65 6e 20 6f 6e 20 3c 70 6f 72 74 3e | ice.`<name>`.to.listen.on.<port> |
bd620 | 00 43 72 65 61 74 65 73 20 61 20 6e 61 6d 65 64 20 63 6f 6e 74 61 69 6e 65 72 20 6e 65 74 77 6f | .Creates.a.named.container.netwo |
bd640 | 72 6b 00 43 72 65 61 74 65 73 20 6c 6f 63 61 6c 20 49 50 6f 45 20 75 73 65 72 20 77 69 74 68 20 | rk.Creates.local.IPoE.user.with. |
bd660 | 75 73 65 72 6e 61 6d 65 3d 2a 2a 3c 69 6e 74 65 72 66 61 63 65 3e 2a 2a 20 61 6e 64 20 70 61 73 | username=**<interface>**.and.pas |
bd680 | 73 77 6f 72 64 3d 2a 2a 3c 4d 41 43 3e 2a 2a 20 28 6d 61 63 2d 61 64 64 72 65 73 73 29 00 43 72 | sword=**<MAC>**.(mac-address).Cr |
bd6a0 | 65 61 74 65 73 20 73 74 61 74 69 63 20 70 65 65 72 20 6d 61 70 70 69 6e 67 20 6f 66 20 70 72 6f | eates.static.peer.mapping.of.pro |
bd6c0 | 74 6f 63 6f 6c 2d 61 64 64 72 65 73 73 20 74 6f 20 3a 61 62 62 72 3a 60 4e 42 4d 41 20 28 4e 6f | tocol-address.to.:abbr:`NBMA.(No |
bd6e0 | 6e 2d 62 72 6f 61 64 63 61 73 74 20 6d 75 6c 74 69 70 6c 65 2d 61 63 63 65 73 73 20 6e 65 74 77 | n-broadcast.multiple-access.netw |
bd700 | 6f 72 6b 29 60 20 61 64 64 72 65 73 73 2e 00 43 72 65 61 74 69 6e 67 20 61 20 62 72 69 64 67 65 | ork)`.address..Creating.a.bridge |
bd720 | 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 76 65 72 79 20 73 69 6d 70 6c 65 2e 20 49 6e 20 74 68 | .interface.is.very.simple..In.th |
bd740 | 69 73 20 65 78 61 6d 70 6c 65 2c 20 77 65 20 77 69 6c 6c 20 68 61 76 65 3a 00 43 72 65 61 74 69 | is.example,.we.will.have:.Creati |
bd760 | 6e 67 20 61 20 66 6c 6f 77 20 74 61 62 6c 65 3a 00 43 72 65 61 74 69 6e 67 20 61 20 74 72 61 66 | ng.a.flow.table:.Creating.a.traf |
bd780 | 66 69 63 20 70 6f 6c 69 63 79 00 43 72 65 61 74 69 6e 67 20 72 75 6c 65 73 20 66 6f 72 20 75 73 | fic.policy.Creating.rules.for.us |
bd7a0 | 69 6e 67 20 66 6c 6f 77 20 74 61 62 6c 65 73 3a 00 43 72 65 64 65 6e 74 69 61 6c 73 20 63 61 6e | ing.flow.tables:.Credentials.can |
bd7c0 | 20 62 65 20 64 65 66 69 6e 65 64 20 68 65 72 65 20 61 6e 64 20 77 69 6c 6c 20 6f 6e 6c 79 20 62 | .be.defined.here.and.will.only.b |
bd7e0 | 65 20 75 73 65 64 20 77 68 65 6e 20 61 64 64 69 6e 67 20 61 20 63 6f 6e 74 61 69 6e 65 72 20 69 | e.used.when.adding.a.container.i |
bd800 | 6d 61 67 65 20 74 6f 20 74 68 65 20 73 79 73 74 65 6d 2e 00 43 72 69 74 69 63 61 6c 00 43 72 69 | mage.to.the.system..Critical.Cri |
bd820 | 74 69 63 61 6c 20 63 6f 6e 64 69 74 69 6f 6e 73 20 2d 20 65 2e 67 2e 20 68 61 72 64 20 64 72 69 | tical.conditions.-.e.g..hard.dri |
bd840 | 76 65 20 65 72 72 6f 72 73 2e 00 43 72 79 73 74 61 6c 66 6f 6e 74 7a 20 43 46 41 2d 35 33 33 00 | ve.errors..Crystalfontz.CFA-533. |
bd860 | 43 72 79 73 74 61 6c 66 6f 6e 74 7a 20 43 46 41 2d 36 33 31 00 43 72 79 73 74 61 6c 66 6f 6e 74 | Crystalfontz.CFA-631.Crystalfont |
bd880 | 7a 20 43 46 41 2d 36 33 33 00 43 72 79 73 74 61 6c 66 6f 6e 74 7a 20 43 46 41 2d 36 33 35 00 43 | z.CFA-633.Crystalfontz.CFA-635.C |
bd8a0 | 75 72 20 48 6f 70 20 4c 69 6d 69 74 00 43 75 72 72 65 6e 74 6c 79 20 64 6f 65 73 20 6e 6f 74 20 | ur.Hop.Limit.Currently.does.not. |
bd8c0 | 64 6f 20 6d 75 63 68 20 61 73 20 63 61 63 68 69 6e 67 20 69 73 20 6e 6f 74 20 69 6d 70 6c 65 6d | do.much.as.caching.is.not.implem |
bd8e0 | 65 6e 74 65 64 2e 00 43 75 72 72 65 6e 74 6c 79 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 | ented..Currently.dynamic.routing |
bd900 | 20 69 73 20 73 75 70 70 6f 72 74 65 64 20 66 6f 72 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 | .is.supported.for.the.following. |
bd920 | 70 72 6f 74 6f 63 6f 6c 73 3a 00 43 75 73 74 6f 6d 20 46 69 6c 65 00 43 75 73 74 6f 6d 20 62 72 | protocols:.Custom.File.Custom.br |
bd940 | 69 64 67 65 20 66 69 72 65 77 61 6c 6c 20 63 68 61 69 6e 73 20 63 61 6e 20 62 65 20 63 72 65 61 | idge.firewall.chains.can.be.crea |
bd960 | 74 65 20 77 69 74 68 20 63 6f 6d 6d 61 6e 64 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 62 | te.with.command.``set.firewall.b |
bd980 | 72 69 64 67 65 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 2e 2e 2e 60 60 2e 20 49 6e 20 6f 72 64 65 | ridge.name.<name>....``..In.orde |
bd9a0 | 72 20 74 6f 20 75 73 65 20 73 75 63 68 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2c 20 61 20 72 75 | r.to.use.such.custom.chain,.a.ru |
bd9c0 | 6c 65 20 77 69 74 68 20 61 63 74 69 6f 6e 20 6a 75 6d 70 2c 20 61 6e 64 20 74 68 65 20 61 70 70 | le.with.action.jump,.and.the.app |
bd9e0 | 72 6f 70 69 61 74 65 20 74 61 72 67 65 74 20 73 68 6f 75 6c 64 20 62 65 20 64 65 66 69 6e 65 64 | ropiate.target.should.be.defined |
bda00 | 20 69 6e 20 61 20 62 61 73 65 20 63 68 61 69 6e 2e 00 43 75 73 74 6f 6d 20 66 69 72 65 77 61 6c | .in.a.base.chain..Custom.firewal |
bda20 | 6c 20 63 68 61 69 6e 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 2c 20 77 69 74 68 20 63 6f | l.chains.can.be.created,.with.co |
bda40 | 6d 6d 61 6e 64 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 5b 69 70 76 34 20 7c 20 69 70 | mmands.``set.firewall.[ipv4.|.ip |
bda60 | 76 36 5d 20 5b 6e 61 6d 65 20 7c 20 69 70 76 36 2d 6e 61 6d 65 5d 20 3c 6e 61 6d 65 3e 20 2e 2e | v6].[name.|.ipv6-name].<name>... |
bda80 | 2e 60 60 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 73 75 63 68 20 63 75 73 74 6f 6d | .``..In.order.to.use.such.custom |
bdaa0 | 20 63 68 61 69 6e 2c 20 61 20 72 75 6c 65 20 77 69 74 68 20 2a 2a 61 63 74 69 6f 6e 20 6a 75 6d | .chain,.a.rule.with.**action.jum |
bdac0 | 70 2a 2a 2c 20 61 6e 64 20 74 68 65 20 61 70 70 72 6f 70 69 61 74 65 20 2a 2a 74 61 72 67 65 74 | p**,.and.the.appropiate.**target |
bdae0 | 2a 2a 20 73 68 6f 75 6c 64 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 61 20 62 61 73 65 20 63 | **.should.be.defined.in.a.base.c |
bdb00 | 68 61 69 6e 2e 00 43 75 73 74 6f 6d 20 66 69 72 65 77 61 6c 6c 20 63 68 61 69 6e 73 20 63 61 6e | hain..Custom.firewall.chains.can |
bdb20 | 20 62 65 20 63 72 65 61 74 65 64 2c 20 77 69 74 68 20 63 6f 6d 6d 61 6e 64 73 20 60 60 73 65 74 | .be.created,.with.commands.``set |
bdb40 | 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 2e 2e 2e 60 60 | .firewall.ipv4.name.<name>....`` |
bdb60 | 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 73 75 63 68 20 63 75 73 74 6f 6d 20 63 68 | ..In.order.to.use.such.custom.ch |
bdb80 | 61 69 6e 2c 20 61 20 72 75 6c 65 20 77 69 74 68 20 2a 2a 61 63 74 69 6f 6e 20 6a 75 6d 70 2a 2a | ain,.a.rule.with.**action.jump** |
bdba0 | 2c 20 61 6e 64 20 74 68 65 20 61 70 70 72 6f 70 69 61 74 65 20 2a 2a 74 61 72 67 65 74 2a 2a 20 | ,.and.the.appropiate.**target**. |
bdbc0 | 73 68 6f 75 6c 64 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 61 20 62 61 73 65 20 63 68 61 69 | should.be.defined.in.a.base.chai |
bdbe0 | 6e 2e 00 43 75 73 74 6f 6d 20 66 69 72 65 77 61 6c 6c 20 63 68 61 69 6e 73 20 63 61 6e 20 62 65 | n..Custom.firewall.chains.can.be |
bdc00 | 20 63 72 65 61 74 65 64 2c 20 77 69 74 68 20 63 6f 6d 6d 61 6e 64 73 20 60 60 73 65 74 20 66 69 | .created,.with.commands.``set.fi |
bdc20 | 72 65 77 61 6c 6c 20 69 70 76 36 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 2e 2e 2e 60 60 2e 20 49 | rewall.ipv6.name.<name>....``..I |
bdc40 | 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 73 75 63 68 20 63 75 73 74 6f 6d 20 63 68 61 69 6e | n.order.to.use.such.custom.chain |
bdc60 | 2c 20 61 20 72 75 6c 65 20 77 69 74 68 20 2a 2a 61 63 74 69 6f 6e 20 6a 75 6d 70 2a 2a 2c 20 61 | ,.a.rule.with.**action.jump**,.a |
bdc80 | 6e 64 20 74 68 65 20 61 70 70 72 6f 70 69 61 74 65 20 2a 2a 74 61 72 67 65 74 2a 2a 20 73 68 6f | nd.the.appropiate.**target**.sho |
bdca0 | 75 6c 64 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 61 20 62 61 73 65 20 63 68 61 69 6e 2e 00 | uld.be.defined.in.a.base.chain.. |
bdcc0 | 43 75 73 74 6f 6d 20 68 65 61 6c 74 68 2d 63 68 65 63 6b 20 73 63 72 69 70 74 20 61 6c 6c 6f 77 | Custom.health-check.script.allow |
bdce0 | 73 20 63 68 65 63 6b 69 6e 67 20 72 65 61 6c 2d 73 65 72 76 65 72 20 61 76 61 69 6c 61 62 69 6c | s.checking.real-server.availabil |
bdd00 | 69 74 79 00 43 75 73 74 6f 6d 69 7a 65 64 20 69 67 6e 6f 72 65 20 72 75 6c 65 73 2c 20 62 61 73 | ity.Customized.ignore.rules,.bas |
bdd20 | 65 64 20 6f 6e 20 61 20 70 61 63 6b 65 74 20 61 6e 64 20 66 6c 6f 77 20 73 65 6c 65 63 74 6f 72 | ed.on.a.packet.and.flow.selector |
bdd40 | 2e 00 44 43 4f 20 63 61 6e 20 62 65 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 62 6f 74 68 20 6e 65 | ..DCO.can.be.enabled.for.both.ne |
bdd60 | 77 20 61 6e 64 20 65 78 69 73 74 69 6e 67 20 74 75 6e 6e 65 6c 73 2c 56 79 4f 53 20 61 64 64 73 | w.and.existing.tunnels,VyOS.adds |
bdd80 | 20 61 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 65 61 63 68 20 74 75 6e 6e 65 6c 20 63 6f 6e 66 69 67 | .an.option.in.each.tunnel.config |
bdda0 | 75 72 61 74 69 6f 6e 20 77 68 65 72 65 20 77 65 20 63 61 6e 20 65 6e 61 62 6c 65 20 74 68 69 73 | uration.where.we.can.enable.this |
bddc0 | 20 66 75 6e 63 74 69 6f 6e 20 20 2e 54 68 65 20 63 75 72 72 65 6e 74 20 62 65 73 74 20 70 72 61 | .function...The.current.best.pra |
bdde0 | 63 74 69 63 65 20 69 73 20 74 6f 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 74 75 6e 6e 65 6c 20 | ctice.is.to.create.a.new.tunnel. |
bde00 | 77 69 74 68 20 44 43 4f 20 74 6f 20 6d 69 6e 69 6d 69 7a 65 20 74 68 65 20 63 68 61 6e 63 65 20 | with.DCO.to.minimize.the.chance. |
bde20 | 6f 66 20 70 72 6f 62 6c 65 6d 73 20 77 69 74 68 20 65 78 69 73 74 69 6e 67 20 63 6c 69 65 6e 74 | of.problems.with.existing.client |
bde40 | 73 2e 00 44 43 4f 20 73 75 70 70 6f 72 74 20 69 73 20 61 20 70 65 72 2d 74 75 6e 6e 65 6c 20 6f | s..DCO.support.is.a.per-tunnel.o |
bde60 | 70 74 69 6f 6e 20 61 6e 64 20 69 74 20 69 73 20 6e 6f 74 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c | ption.and.it.is.not.automaticall |
bde80 | 79 20 65 6e 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 66 6f 72 20 6e 65 77 20 6f 72 20 | y.enabled.by.default.for.new.or. |
bdea0 | 75 70 67 72 61 64 65 64 20 74 75 6e 6e 65 6c 73 2e 20 45 78 69 73 74 69 6e 67 20 74 75 6e 6e 65 | upgraded.tunnels..Existing.tunne |
bdec0 | 6c 73 20 77 69 6c 6c 20 63 6f 6e 74 69 6e 75 65 20 74 6f 20 66 75 6e 63 74 69 6f 6e 20 61 73 20 | ls.will.continue.to.function.as. |
bdee0 | 74 68 65 79 20 68 61 76 65 20 69 6e 20 74 68 65 20 70 61 73 74 2e 00 44 44 6f 53 20 50 72 6f 74 | they.have.in.the.past..DDoS.Prot |
bdf00 | 65 63 74 69 6f 6e 00 44 48 20 47 72 6f 75 70 20 31 34 00 44 48 43 50 20 48 69 67 68 20 41 76 61 | ection.DH.Group.14.DHCP.High.Ava |
bdf20 | 69 6c 61 62 69 6c 69 74 79 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 65 78 70 | ilability.must.be.configured.exp |
bdf40 | 6c 69 63 69 74 6c 79 20 62 79 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 74 61 74 65 6d 65 | licitly.by.the.following.stateme |
bdf60 | 6e 74 73 20 6f 6e 20 62 6f 74 68 20 73 65 72 76 65 72 73 3a 00 44 48 43 50 20 52 65 6c 61 79 00 | nts.on.both.servers:.DHCP.Relay. |
bdf80 | 44 48 43 50 20 53 65 72 76 65 72 00 44 48 43 50 20 66 61 69 6c 6f 76 65 72 20 70 61 72 61 6d 65 | DHCP.Server.DHCP.failover.parame |
bdfa0 | 74 65 72 73 00 44 48 43 50 20 6c 65 61 73 65 20 72 61 6e 67 65 00 44 48 43 50 20 72 61 6e 67 65 | ters.DHCP.lease.range.DHCP.range |
bdfc0 | 20 73 70 61 6e 73 20 66 72 6f 6d 20 60 31 39 32 2e 31 36 38 2e 31 38 39 2e 31 30 60 20 2d 20 60 | .spans.from.`192.168.189.10`.-.` |
bdfe0 | 31 39 32 2e 31 36 38 2e 31 38 39 2e 32 35 30 60 00 44 48 43 50 20 72 65 6c 61 79 20 65 78 61 6d | 192.168.189.250`.DHCP.relay.exam |
be000 | 70 6c 65 00 44 48 43 50 20 73 65 72 76 65 72 20 69 73 20 6c 6f 63 61 74 65 64 20 61 74 20 49 50 | ple.DHCP.server.is.located.at.IP |
be020 | 76 34 20 61 64 64 72 65 73 73 20 31 30 2e 30 2e 31 2e 34 20 6f 6e 20 60 60 65 74 68 32 60 60 2e | v4.address.10.0.1.4.on.``eth2``. |
be040 | 00 44 48 43 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 73 20 6d 75 73 74 20 62 65 20 63 6f | .DHCPv6.address.pools.must.be.co |
be060 | 6e 66 69 67 75 72 65 64 20 66 6f 72 20 74 68 65 20 73 79 73 74 65 6d 20 74 6f 20 61 63 74 20 61 | nfigured.for.the.system.to.act.a |
be080 | 73 20 61 20 44 48 43 50 76 36 20 73 65 72 76 65 72 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | s.a.DHCPv6.server..The.following |
be0a0 | 20 65 78 61 6d 70 6c 65 20 64 65 73 63 72 69 62 65 73 20 61 20 63 6f 6d 6d 6f 6e 20 73 63 65 6e | .example.describes.a.common.scen |
be0c0 | 61 72 69 6f 2e 00 44 48 43 50 76 36 20 72 65 6c 61 79 20 65 78 61 6d 70 6c 65 00 44 48 43 50 76 | ario..DHCPv6.relay.example.DHCPv |
be0e0 | 36 20 72 65 71 75 65 73 74 73 20 61 72 65 20 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 20 72 | 6.requests.are.received.by.the.r |
be100 | 6f 75 74 65 72 20 6f 6e 20 60 6c 69 73 74 65 6e 69 6e 67 20 69 6e 74 65 72 66 61 63 65 60 20 60 | outer.on.`listening.interface`.` |
be120 | 60 65 74 68 31 60 60 00 44 4d 56 50 4e 00 44 4d 56 50 4e 20 65 78 61 6d 70 6c 65 20 6e 65 74 77 | `eth1``.DMVPN.DMVPN.example.netw |
be140 | 6f 72 6b 00 44 4d 56 50 4e 20 6e 65 74 77 6f 72 6b 00 44 4d 56 50 4e 20 6f 6e 6c 79 20 61 75 74 | ork.DMVPN.network.DMVPN.only.aut |
be160 | 6f 6d 61 74 65 73 20 74 68 65 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 20 64 69 73 63 6f | omates.the.tunnel.endpoint.disco |
be180 | 76 65 72 79 20 61 6e 64 20 73 65 74 75 70 2e 20 41 20 63 6f 6d 70 6c 65 74 65 20 73 6f 6c 75 74 | very.and.setup..A.complete.solut |
be1a0 | 69 6f 6e 20 61 6c 73 6f 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 74 68 65 20 75 73 65 20 6f 66 | ion.also.incorporates.the.use.of |
be1c0 | 20 61 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2e 20 42 47 50 20 69 73 20 70 61 72 74 | .a.routing.protocol..BGP.is.part |
be1e0 | 69 63 75 6c 61 72 6c 79 20 77 65 6c 6c 20 73 75 69 74 65 64 20 66 6f 72 20 75 73 65 20 77 69 74 | icularly.well.suited.for.use.wit |
be200 | 68 20 44 4d 56 50 4e 2e 00 44 4e 41 54 00 44 4e 41 54 20 69 73 20 74 79 70 69 63 61 6c 6c 79 20 | h.DMVPN..DNAT.DNAT.is.typically. |
be220 | 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 61 20 2a 2a 50 6f 72 74 20 46 6f 72 77 61 72 64 2a | referred.to.as.a.**Port.Forward* |
be240 | 2a 2e 20 57 68 65 6e 20 75 73 69 6e 67 20 56 79 4f 53 20 61 73 20 61 20 4e 41 54 20 72 6f 75 74 | *..When.using.VyOS.as.a.NAT.rout |
be260 | 65 72 20 61 6e 64 20 66 69 72 65 77 61 6c 6c 2c 20 61 20 63 6f 6d 6d 6f 6e 20 63 6f 6e 66 69 67 | er.and.firewall,.a.common.config |
be280 | 75 72 61 74 69 6f 6e 20 74 61 73 6b 20 69 73 20 74 6f 20 72 65 64 69 72 65 63 74 20 69 6e 63 6f | uration.task.is.to.redirect.inco |
be2a0 | 6d 69 6e 67 20 74 72 61 66 66 69 63 20 74 6f 20 61 20 73 79 73 74 65 6d 20 62 65 68 69 6e 64 20 | ming.traffic.to.a.system.behind. |
be2c0 | 74 68 65 20 66 69 72 65 77 61 6c 6c 2e 00 44 4e 41 54 20 72 75 6c 65 20 31 30 20 72 65 70 6c 61 | the.firewall..DNAT.rule.10.repla |
be2e0 | 63 65 73 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6f 66 20 61 | ces.the.destination.address.of.a |
be300 | 6e 20 69 6e 62 6f 75 6e 64 20 70 61 63 6b 65 74 20 77 69 74 68 20 31 39 32 2e 30 2e 32 2e 31 30 | n.inbound.packet.with.192.0.2.10 |
be320 | 00 44 4e 41 54 36 36 00 44 4e 53 20 46 6f 72 77 61 72 64 69 6e 67 00 44 4e 53 20 6e 61 6d 65 20 | .DNAT66.DNS.Forwarding.DNS.name. |
be340 | 73 65 72 76 65 72 73 00 44 4e 53 20 73 65 61 72 63 68 20 6c 69 73 74 20 74 6f 20 61 64 76 65 72 | servers.DNS.search.list.to.adver |
be360 | 74 69 73 65 00 44 4e 53 20 73 65 72 76 65 72 20 49 50 76 34 20 61 64 64 72 65 73 73 00 44 4e 53 | tise.DNS.server.IPv4.address.DNS |
be380 | 20 73 65 72 76 65 72 20 69 73 20 6c 6f 63 61 74 65 64 20 61 74 20 60 60 32 30 30 31 3a 64 62 38 | .server.is.located.at.``2001:db8 |
be3a0 | 3a 3a 66 66 66 66 60 60 00 44 4e 53 53 4c 00 44 53 43 50 20 76 61 6c 75 65 73 20 61 73 20 70 65 | ::ffff``.DNSSL.DSCP.values.as.pe |
be3c0 | 72 20 3a 72 66 63 3a 60 32 34 37 34 60 20 61 6e 64 20 3a 72 66 63 3a 60 34 35 39 35 60 3a 00 44 | r.:rfc:`2474`.and.:rfc:`4595`:.D |
be3e0 | 53 53 53 2f 43 43 4b 20 4d 6f 64 65 20 69 6e 20 34 30 20 4d 48 7a 2c 20 74 68 69 73 20 73 65 74 | SSS/CCK.Mode.in.40.MHz,.this.set |
be400 | 73 20 60 60 5b 44 53 53 53 5f 43 43 4b 2d 34 30 5d 60 60 00 44 61 74 61 20 69 73 20 70 72 6f 76 | s.``[DSSS_CCK-40]``.Data.is.prov |
be420 | 69 64 65 64 20 62 79 20 44 42 2d 49 50 2e 63 6f 6d 20 75 6e 64 65 72 20 43 43 2d 42 59 2d 34 2e | ided.by.DB-IP.com.under.CC-BY-4. |
be440 | 30 20 6c 69 63 65 6e 73 65 2e 20 41 74 74 72 69 62 75 74 69 6f 6e 20 72 65 71 75 69 72 65 64 2c | 0.license..Attribution.required, |
be460 | 20 70 65 72 6d 69 74 73 20 72 65 64 69 73 74 72 69 62 75 74 69 6f 6e 20 73 6f 20 77 65 20 63 61 | .permits.redistribution.so.we.ca |
be480 | 6e 20 69 6e 63 6c 75 64 65 20 61 20 64 61 74 61 62 61 73 65 20 69 6e 20 69 6d 61 67 65 73 28 7e | n.include.a.database.in.images(~ |
be4a0 | 33 4d 42 20 63 6f 6d 70 72 65 73 73 65 64 29 2e 20 49 6e 63 6c 75 64 65 73 20 63 72 6f 6e 20 73 | 3MB.compressed)..Includes.cron.s |
be4c0 | 63 72 69 70 74 20 28 6d 61 6e 75 61 6c 6c 79 20 63 61 6c 6c 61 62 6c 65 20 62 79 20 6f 70 2d 6d | cript.(manually.callable.by.op-m |
be4e0 | 6f 64 65 20 75 70 64 61 74 65 20 67 65 6f 69 70 29 20 74 6f 20 6b 65 65 70 20 64 61 74 61 62 61 | ode.update.geoip).to.keep.databa |
be500 | 73 65 20 61 6e 64 20 72 75 6c 65 73 20 75 70 64 61 74 65 64 2e 00 44 65 62 75 67 00 44 65 62 75 | se.and.rules.updated..Debug.Debu |
be520 | 67 2d 6c 65 76 65 6c 20 6d 65 73 73 61 67 65 73 20 2d 20 4d 65 73 73 61 67 65 73 20 74 68 61 74 | g-level.messages.-.Messages.that |
be540 | 20 63 6f 6e 74 61 69 6e 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6e 6f 72 6d 61 6c 6c 79 20 6f 66 | .contain.information.normally.of |
be560 | 20 75 73 65 20 6f 6e 6c 79 20 77 68 65 6e 20 64 65 62 75 67 67 69 6e 67 20 61 20 70 72 6f 67 72 | .use.only.when.debugging.a.progr |
be580 | 61 6d 2e 00 44 65 66 61 75 6c 74 00 44 65 66 61 75 6c 74 20 31 2e 00 44 65 66 61 75 6c 74 20 47 | am..Default.Default.1..Default.G |
be5a0 | 61 74 65 77 61 79 2f 52 6f 75 74 65 00 44 65 66 61 75 6c 74 20 52 6f 75 74 65 72 20 50 72 65 66 | ateway/Route.Default.Router.Pref |
be5c0 | 65 72 65 6e 63 65 00 44 65 66 61 75 6c 74 20 62 65 68 61 76 69 6f 72 20 2d 20 64 6f 6e 27 74 20 | erence.Default.behavior.-.don't. |
be5e0 | 61 73 6b 20 63 6c 69 65 6e 74 20 66 6f 72 20 6d 70 70 65 2c 20 62 75 74 20 61 6c 6c 6f 77 20 69 | ask.client.for.mppe,.but.allow.i |
be600 | 74 20 69 66 20 63 6c 69 65 6e 74 20 77 61 6e 74 73 2e 20 50 6c 65 61 73 65 20 6e 6f 74 65 20 74 | t.if.client.wants..Please.note.t |
be620 | 68 61 74 20 52 41 44 49 55 53 20 6d 61 79 20 6f 76 65 72 72 69 64 65 20 74 68 69 73 20 6f 70 74 | hat.RADIUS.may.override.this.opt |
be640 | 69 6f 6e 20 62 79 20 4d 53 2d 4d 50 50 45 2d 45 6e 63 72 79 70 74 69 6f 6e 2d 50 6f 6c 69 63 79 | ion.by.MS-MPPE-Encryption-Policy |
be660 | 20 61 74 74 72 69 62 75 74 65 2e 00 44 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 61 6e 64 20 | .attribute..Default.gateway.and. |
be680 | 44 4e 53 20 73 65 72 76 65 72 20 69 73 20 61 74 20 60 31 39 32 2e 30 2e 32 2e 32 35 34 60 00 44 | DNS.server.is.at.`192.0.2.254`.D |
be6a0 | 65 66 61 75 6c 74 20 69 73 20 35 31 32 20 4d 42 2e 20 55 73 65 20 30 20 4d 42 20 66 6f 72 20 75 | efault.is.512.MB..Use.0.MB.for.u |
be6c0 | 6e 6c 69 6d 69 74 65 64 20 6d 65 6d 6f 72 79 2e 00 44 65 66 61 75 6c 74 20 69 73 20 60 60 61 6e | nlimited.memory..Default.is.``an |
be6e0 | 79 2d 61 76 61 69 6c 61 62 6c 65 60 60 2e 00 44 65 66 61 75 6c 74 20 69 73 20 60 60 69 63 6d 70 | y-available``..Default.is.``icmp |
be700 | 60 60 2e 00 44 65 66 61 75 6c 74 20 69 73 20 74 6f 20 64 65 74 65 63 74 73 20 70 68 79 73 69 63 | ``..Default.is.to.detects.physic |
be720 | 61 6c 20 6c 69 6e 6b 20 73 74 61 74 65 20 63 68 61 6e 67 65 73 2e 00 44 65 66 61 75 6c 74 20 70 | al.link.state.changes..Default.p |
be740 | 6f 72 74 20 69 73 20 33 31 32 38 2e 00 44 65 66 61 75 6c 74 3a 20 31 00 44 65 66 61 75 6c 74 3a | ort.is.3128..Default:.1.Default: |
be760 | 20 34 34 33 00 44 65 66 61 75 6c 74 73 20 74 6f 20 27 75 69 64 27 00 44 65 66 61 75 6c 74 73 20 | .443.Defaults.to.'uid'.Defaults. |
be780 | 74 6f 20 32 32 35 2e 30 2e 30 2e 35 30 2e 00 44 65 66 61 75 6c 74 73 20 74 6f 20 60 60 75 73 60 | to.225.0.0.50..Defaults.to.``us` |
be7a0 | 60 2e 00 44 65 66 69 6e 65 20 43 6f 6e 65 63 74 69 6f 6e 20 54 69 6d 65 6f 75 74 73 00 44 65 66 | `..Define.Conection.Timeouts.Def |
be7c0 | 69 6e 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 70 72 65 66 69 78 20 66 6f 72 20 61 20 67 69 | ine.IPv4.or.IPv6.prefix.for.a.gi |
be7e0 | 76 65 6e 20 6e 65 74 77 6f 72 6b 20 6e 61 6d 65 2e 20 4f 6e 6c 79 20 6f 6e 65 20 49 50 76 34 20 | ven.network.name..Only.one.IPv4. |
be800 | 61 6e 64 20 6f 6e 65 20 49 50 76 36 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 75 73 65 64 20 | and.one.IPv6.prefix.can.be.used. |
be820 | 70 65 72 20 6e 65 74 77 6f 72 6b 20 6e 61 6d 65 2e 00 44 65 66 69 6e 65 20 49 50 76 34 2f 49 50 | per.network.name..Define.IPv4/IP |
be840 | 76 36 20 6d 61 6e 61 67 65 6d 65 6e 74 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6d 69 74 74 65 | v6.management.address.transmitte |
be860 | 64 20 76 69 61 20 4c 4c 44 50 2e 20 4d 75 6c 74 69 70 6c 65 20 61 64 64 72 65 73 73 65 73 20 63 | d.via.LLDP..Multiple.addresses.c |
be880 | 61 6e 20 62 65 20 64 65 66 69 6e 65 64 2e 20 4f 6e 6c 79 20 61 64 64 72 65 73 73 65 73 20 63 6f | an.be.defined..Only.addresses.co |
be8a0 | 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 73 79 73 74 65 6d 20 77 69 6c 6c 20 62 65 20 74 72 | nnected.to.the.system.will.be.tr |
be8c0 | 61 6e 73 6d 69 74 74 65 64 2e 00 44 65 66 69 6e 65 20 61 20 49 50 76 34 20 6f 72 20 49 50 76 36 | ansmitted..Define.a.IPv4.or.IPv6 |
be8e0 | 20 4e 65 74 77 6f 72 6b 20 67 72 6f 75 70 2e 00 44 65 66 69 6e 65 20 61 20 49 50 76 34 20 6f 72 | .Network.group..Define.a.IPv4.or |
be900 | 20 61 20 49 50 76 36 20 61 64 64 72 65 73 73 20 67 72 6f 75 70 00 44 65 66 69 6e 65 20 61 20 5a | .a.IPv6.address.group.Define.a.Z |
be920 | 6f 6e 65 00 44 65 66 69 6e 65 20 61 20 64 69 73 63 72 65 74 65 20 73 6f 75 72 63 65 20 49 50 20 | one.Define.a.discrete.source.IP. |
be940 | 61 64 64 72 65 73 73 20 6f 66 20 31 30 30 2e 36 34 2e 30 2e 31 20 66 6f 72 20 53 4e 41 54 20 72 | address.of.100.64.0.1.for.SNAT.r |
be960 | 75 6c 65 20 32 30 00 44 65 66 69 6e 65 20 61 20 64 6f 6d 61 69 6e 20 67 72 6f 75 70 2e 00 44 65 | ule.20.Define.a.domain.group..De |
be980 | 66 69 6e 65 20 61 20 6d 61 63 20 67 72 6f 75 70 2e 00 44 65 66 69 6e 65 20 61 20 70 6f 72 74 20 | fine.a.mac.group..Define.a.port. |
be9a0 | 67 72 6f 75 70 2e 20 41 20 70 6f 72 74 20 6e 61 6d 65 20 63 61 6e 20 62 65 20 61 6e 79 20 6e 61 | group..A.port.name.can.be.any.na |
be9c0 | 6d 65 20 64 65 66 69 6e 65 64 20 69 6e 20 2f 65 74 63 2f 73 65 72 76 69 63 65 73 2e 20 65 2e 67 | me.defined.in./etc/services..e.g |
be9e0 | 2e 3a 20 68 74 74 70 00 44 65 66 69 6e 65 20 61 6c 6c 6f 77 65 64 20 63 69 70 68 65 72 73 20 75 | .:.http.Define.allowed.ciphers.u |
bea00 | 73 65 64 20 66 6f 72 20 74 68 65 20 53 53 48 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 41 20 6e 75 | sed.for.the.SSH.connection..A.nu |
bea20 | 6d 62 65 72 20 6f 66 20 61 6c 6c 6f 77 65 64 20 63 69 70 68 65 72 73 20 63 61 6e 20 62 65 20 73 | mber.of.allowed.ciphers.can.be.s |
bea40 | 70 65 63 69 66 69 65 64 2c 20 75 73 65 20 6d 75 6c 74 69 70 6c 65 20 6f 63 63 75 72 72 65 6e 63 | pecified,.use.multiple.occurrenc |
bea60 | 65 73 20 74 6f 20 61 6c 6c 6f 77 20 6d 75 6c 74 69 70 6c 65 20 63 69 70 68 65 72 73 2e 00 44 65 | es.to.allow.multiple.ciphers..De |
bea80 | 66 69 6e 65 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 2e 20 57 69 6c 64 63 61 72 | fine.an.interface.group..Wildcar |
beaa0 | 64 20 61 72 65 20 61 63 63 65 70 74 65 64 20 74 6f 6f 2e 00 44 65 66 69 6e 65 20 62 65 68 61 76 | d.are.accepted.too..Define.behav |
beac0 | 69 6f 72 20 66 6f 72 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 20 66 72 61 6d 65 73 20 77 68 | ior.for.gratuitous.ARP.frames.wh |
beae0 | 6f 27 73 20 49 50 20 69 73 20 6e 6f 74 20 61 6c 72 65 61 64 79 20 70 72 65 73 65 6e 74 20 69 6e | o's.IP.is.not.already.present.in |
beb00 | 20 74 68 65 20 41 52 50 20 74 61 62 6c 65 2e 20 49 66 20 63 6f 6e 66 69 67 75 72 65 64 20 63 72 | .the.ARP.table..If.configured.cr |
beb20 | 65 61 74 65 20 6e 65 77 20 65 6e 74 72 69 65 73 20 69 6e 20 74 68 65 20 41 52 50 20 74 61 62 6c | eate.new.entries.in.the.ARP.tabl |
beb40 | 65 2e 00 44 65 66 69 6e 65 20 64 69 66 66 65 72 65 6e 74 20 6d 6f 64 65 73 20 66 6f 72 20 49 50 | e..Define.different.modes.for.IP |
beb60 | 20 64 69 72 65 63 74 65 64 20 62 72 6f 61 64 63 61 73 74 20 66 6f 72 77 61 72 64 69 6e 67 20 61 | .directed.broadcast.forwarding.a |
beb80 | 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 31 38 31 32 60 20 61 6e 64 20 3a | s.described.in.:rfc:`1812`.and.: |
beba0 | 72 66 63 3a 60 32 36 34 34 60 2e 00 44 65 66 69 6e 65 20 64 69 66 66 65 72 65 6e 74 20 6d 6f 64 | rfc:`2644`..Define.different.mod |
bebc0 | 65 73 20 66 6f 72 20 73 65 6e 64 69 6e 67 20 72 65 70 6c 69 65 73 20 69 6e 20 72 65 73 70 6f 6e | es.for.sending.replies.in.respon |
bebe0 | 73 65 20 74 6f 20 72 65 63 65 69 76 65 64 20 41 52 50 20 72 65 71 75 65 73 74 73 20 74 68 61 74 | se.to.received.ARP.requests.that |
bec00 | 20 72 65 73 6f 6c 76 65 20 6c 6f 63 61 6c 20 74 61 72 67 65 74 20 49 50 20 61 64 64 72 65 73 73 | .resolve.local.target.IP.address |
bec20 | 65 73 3a 00 44 65 66 69 6e 65 20 64 69 66 66 65 72 65 6e 74 20 72 65 73 74 72 69 63 74 69 6f 6e | es:.Define.different.restriction |
bec40 | 20 6c 65 76 65 6c 73 20 66 6f 72 20 61 6e 6e 6f 75 6e 63 69 6e 67 20 74 68 65 20 6c 6f 63 61 6c | .levels.for.announcing.the.local |
bec60 | 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 49 50 20 70 61 63 6b 65 | .source.IP.address.from.IP.packe |
bec80 | 74 73 20 69 6e 20 41 52 50 20 72 65 71 75 65 73 74 73 20 73 65 6e 74 20 6f 6e 20 69 6e 74 65 72 | ts.in.ARP.requests.sent.on.inter |
beca0 | 66 61 63 65 2e 00 44 65 66 69 6e 65 20 68 6f 77 20 74 6f 20 68 61 6e 64 6c 65 20 6c 65 61 66 2d | face..Define.how.to.handle.leaf- |
becc0 | 73 65 6f 6e 64 73 2e 00 44 65 66 69 6e 65 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 62 65 20 | seonds..Define.interfaces.to.be. |
bece0 | 75 73 65 64 20 69 6e 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 2e 00 44 65 66 69 6e 65 20 6c 65 | used.in.the.flowtable..Define.le |
bed00 | 6e 67 74 68 20 6f 66 20 70 61 63 6b 65 74 20 70 61 79 6c 6f 61 64 20 74 6f 20 69 6e 63 6c 75 64 | ngth.of.packet.payload.to.includ |
bed20 | 65 20 69 6e 20 6e 65 74 6c 69 6e 6b 20 6d 65 73 73 61 67 65 2e 20 4f 6e 6c 79 20 61 70 70 6c 69 | e.in.netlink.message..Only.appli |
bed40 | 63 61 62 6c 65 20 69 66 20 72 75 6c 65 20 6c 6f 67 20 69 73 20 65 6e 61 62 6c 65 20 61 6e 64 20 | cable.if.rule.log.is.enable.and. |
bed60 | 6c 6f 67 20 67 72 6f 75 70 20 69 73 20 64 65 66 69 6e 65 64 2e 00 44 65 66 69 6e 65 20 6c 6f 67 | log.group.is.defined..Define.log |
bed80 | 20 67 72 6f 75 70 20 74 6f 20 73 65 6e 64 20 6d 65 73 73 61 67 65 20 74 6f 2e 20 4f 6e 6c 79 20 | .group.to.send.message.to..Only. |
beda0 | 61 70 70 6c 69 63 61 62 6c 65 20 69 66 20 72 75 6c 65 20 6c 6f 67 20 69 73 20 65 6e 61 62 6c 65 | applicable.if.rule.log.is.enable |
bedc0 | 2e 00 44 65 66 69 6e 65 20 6c 6f 67 2d 6c 65 76 65 6c 2e 20 4f 6e 6c 79 20 61 70 70 6c 69 63 61 | ..Define.log-level..Only.applica |
bede0 | 62 6c 65 20 69 66 20 72 75 6c 65 20 6c 6f 67 20 69 73 20 65 6e 61 62 6c 65 2e 00 44 65 66 69 6e | ble.if.rule.log.is.enable..Defin |
bee00 | 65 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 74 6f 20 71 75 65 75 65 20 69 6e 73 | e.number.of.packets.to.queue.ins |
bee20 | 69 64 65 20 74 68 65 20 6b 65 72 6e 65 6c 20 62 65 66 6f 72 65 20 73 65 6e 64 69 6e 67 20 74 68 | ide.the.kernel.before.sending.th |
bee40 | 65 6d 20 74 6f 20 75 73 65 72 73 70 61 63 65 2e 20 4f 6e 6c 79 20 61 70 70 6c 69 63 61 62 6c 65 | em.to.userspace..Only.applicable |
bee60 | 20 69 66 20 72 75 6c 65 20 6c 6f 67 20 69 73 20 65 6e 61 62 6c 65 20 61 6e 64 20 6c 6f 67 20 67 | .if.rule.log.is.enable.and.log.g |
bee80 | 72 6f 75 70 20 69 73 20 64 65 66 69 6e 65 64 2e 00 44 65 66 69 6e 65 20 6f 70 65 72 61 74 69 6f | roup.is.defined..Define.operatio |
beea0 | 6e 20 6d 6f 64 65 20 6f 66 20 48 69 67 68 20 41 76 61 69 6c 61 62 69 6c 69 74 79 20 66 65 61 74 | n.mode.of.High.Availability.feat |
beec0 | 75 72 65 2e 20 44 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 66 20 63 6f 6d 6d 61 6e 64 20 69 73 | ure..Default.value.if.command.is |
beee0 | 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 69 73 20 60 61 63 74 69 76 65 2d 61 63 74 69 76 65 | .not.specified.is.`active-active |
bef00 | 60 00 44 65 66 69 6e 65 20 74 68 65 20 74 69 6d 65 20 69 6e 74 65 72 76 61 6c 20 74 6f 20 75 70 | `.Define.the.time.interval.to.up |
bef20 | 64 61 74 65 20 74 68 65 20 6c 6f 63 61 6c 20 63 61 63 68 65 00 44 65 66 69 6e 65 20 74 68 65 20 | date.the.local.cache.Define.the. |
bef40 | 7a 6f 6e 65 20 61 73 20 61 20 6c 6f 63 61 6c 20 7a 6f 6e 65 2e 20 41 20 6c 6f 63 61 6c 20 7a 6f | zone.as.a.local.zone..A.local.zo |
bef60 | 6e 65 20 68 61 73 20 6e 6f 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 77 69 6c 6c 20 62 65 | ne.has.no.interfaces.and.will.be |
bef80 | 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2e 00 44 | .applied.to.the.router.itself..D |
befa0 | 65 66 69 6e 65 20 74 79 70 65 20 6f 66 20 6f 66 66 6c 6f 61 64 20 74 6f 20 62 65 20 75 73 65 64 | efine.type.of.offload.to.be.used |
befc0 | 20 62 79 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 3a 20 60 60 68 61 72 64 77 61 72 65 60 60 20 | .by.the.flowtable:.``hardware``. |
befe0 | 6f 72 20 60 60 73 6f 66 74 77 61 72 65 60 60 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 60 60 73 | or.``software``..By.default,.``s |
bf000 | 6f 66 74 77 61 72 65 60 60 20 6f 66 66 6c 6f 61 64 20 69 73 20 75 73 65 64 2e 00 44 65 66 69 6e | oftware``.offload.is.used..Defin |
bf020 | 65 20 75 73 65 64 20 65 74 68 65 72 74 79 70 65 20 6f 66 20 62 72 69 64 67 65 20 69 6e 74 65 72 | e.used.ethertype.of.bridge.inter |
bf040 | 66 61 63 65 2e 00 44 65 66 69 6e 65 64 20 74 68 65 20 49 50 76 34 2c 20 49 50 76 36 20 6f 72 20 | face..Defined.the.IPv4,.IPv6.or. |
bf060 | 46 51 44 4e 20 61 6e 64 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 6f 66 20 74 68 65 20 63 61 63 68 | FQDN.and.port.number.of.the.cach |
bf080 | 69 6e 67 20 52 50 4b 49 20 63 61 63 68 69 6e 67 20 69 6e 73 74 61 6e 63 65 20 77 68 69 63 68 20 | ing.RPKI.caching.instance.which. |
bf0a0 | 69 73 20 75 73 65 64 2e 00 44 65 66 69 6e 65 73 20 61 6c 74 65 72 6e 61 74 65 20 73 6f 75 72 63 | is.used..Defines.alternate.sourc |
bf0c0 | 65 73 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 69 6e 67 20 61 6e 64 20 49 47 4d 50 20 64 61 74 | es.for.multicasting.and.IGMP.dat |
bf0e0 | 61 2e 20 54 68 65 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 6f | a..The.network.address.must.be.o |
bf100 | 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 6f 72 6d 61 74 20 27 61 2e 62 2e 63 2e 64 2f | n.the.following.format.'a.b.c.d/ |
bf120 | 6e 27 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 | n'..By.default,.the.router.will. |
bf140 | 61 63 63 65 70 74 20 64 61 74 61 20 66 72 6f 6d 20 73 6f 75 72 63 65 73 20 6f 6e 20 74 68 65 20 | accept.data.from.sources.on.the. |
bf160 | 73 61 6d 65 20 6e 65 74 77 6f 72 6b 20 61 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 6e | same.network.as.configured.on.an |
bf180 | 20 69 6e 74 65 72 66 61 63 65 2e 20 49 66 20 74 68 65 20 6d 75 6c 74 69 63 61 73 74 20 73 6f 75 | .interface..If.the.multicast.sou |
bf1a0 | 72 63 65 20 6c 69 65 73 20 6f 6e 20 61 20 72 65 6d 6f 74 65 20 6e 65 74 77 6f 72 6b 2c 20 6f 6e | rce.lies.on.a.remote.network,.on |
bf1c0 | 65 20 6d 75 73 74 20 64 65 66 69 6e 65 20 66 72 6f 6d 20 77 68 65 72 65 20 74 72 61 66 66 69 63 | e.must.define.from.where.traffic |
bf1e0 | 20 73 68 6f 75 6c 64 20 62 65 20 61 63 63 65 70 74 65 64 2e 00 44 65 66 69 6e 65 73 20 61 6e 20 | .should.be.accepted..Defines.an. |
bf200 | 6f 66 66 2d 4e 42 4d 41 20 6e 65 74 77 6f 72 6b 20 70 72 65 66 69 78 20 66 6f 72 20 77 68 69 63 | off-NBMA.network.prefix.for.whic |
bf220 | 68 20 74 68 65 20 47 52 45 20 69 6e 74 65 72 66 61 63 65 20 77 69 6c 6c 20 61 63 74 20 61 73 20 | h.the.GRE.interface.will.act.as. |
bf240 | 61 20 67 61 74 65 77 61 79 2e 20 54 68 69 73 20 61 6e 20 61 6c 74 65 72 6e 61 74 69 76 65 20 74 | a.gateway..This.an.alternative.t |
bf260 | 6f 20 64 65 66 69 6e 69 6e 67 20 6c 6f 63 61 6c 20 69 6e 74 65 72 66 61 63 65 73 20 77 69 74 68 | o.defining.local.interfaces.with |
bf280 | 20 73 68 6f 72 74 63 75 74 2d 64 65 73 74 69 6e 61 74 69 6f 6e 20 66 6c 61 67 2e 00 44 65 66 69 | .shortcut-destination.flag..Defi |
bf2a0 | 6e 65 73 20 62 6c 61 63 6b 68 6f 6c 65 20 64 69 73 74 61 6e 63 65 20 66 6f 72 20 74 68 69 73 20 | nes.blackhole.distance.for.this. |
bf2c0 | 72 6f 75 74 65 2c 20 72 6f 75 74 65 73 20 77 69 74 68 20 73 6d 61 6c 6c 65 72 20 61 64 6d 69 6e | route,.routes.with.smaller.admin |
bf2e0 | 69 73 74 72 61 74 69 76 65 20 64 69 73 74 61 6e 63 65 20 61 72 65 20 65 6c 65 63 74 65 64 20 70 | istrative.distance.are.elected.p |
bf300 | 72 69 6f 72 20 74 6f 20 74 68 6f 73 65 20 77 69 74 68 20 61 20 68 69 67 68 65 72 20 64 69 73 74 | rior.to.those.with.a.higher.dist |
bf320 | 61 6e 63 65 2e 00 44 65 66 69 6e 65 73 20 6d 69 6e 69 6d 75 6d 20 61 63 63 65 70 74 61 62 6c 65 | ance..Defines.minimum.acceptable |
bf340 | 20 4d 54 55 2e 20 49 66 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 74 72 79 20 74 6f 20 6e 65 67 6f | .MTU..If.client.will.try.to.nego |
bf360 | 74 69 61 74 65 20 6c 65 73 73 20 74 68 65 6e 20 73 70 65 63 69 66 69 65 64 20 4d 54 55 20 74 68 | tiate.less.then.specified.MTU.th |
bf380 | 65 6e 20 69 74 20 77 69 6c 6c 20 62 65 20 4e 41 4b 65 64 20 6f 72 20 64 69 73 63 6f 6e 6e 65 63 | en.it.will.be.NAKed.or.disconnec |
bf3a0 | 74 65 64 20 69 66 20 72 65 6a 65 63 74 73 20 67 72 65 61 74 65 72 20 4d 54 55 2e 20 44 65 66 61 | ted.if.rejects.greater.MTU..Defa |
bf3c0 | 75 6c 74 20 76 61 6c 75 65 20 69 73 20 2a 2a 31 30 30 2a 2a 2e 00 44 65 66 69 6e 65 73 20 6e 65 | ult.value.is.**100**..Defines.ne |
bf3e0 | 78 74 2d 68 6f 70 20 64 69 73 74 61 6e 63 65 20 66 6f 72 20 74 68 69 73 20 72 6f 75 74 65 2c 20 | xt-hop.distance.for.this.route,. |
bf400 | 72 6f 75 74 65 73 20 77 69 74 68 20 73 6d 61 6c 6c 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 69 | routes.with.smaller.administrati |
bf420 | 76 65 20 64 69 73 74 61 6e 63 65 20 61 72 65 20 65 6c 65 63 74 65 64 20 70 72 69 6f 72 20 74 6f | ve.distance.are.elected.prior.to |
bf440 | 20 74 68 6f 73 65 20 77 69 74 68 20 61 20 68 69 67 68 65 72 20 64 69 73 74 61 6e 63 65 2e 00 44 | .those.with.a.higher.distance..D |
bf460 | 65 66 69 6e 65 73 20 70 72 65 66 65 72 72 65 64 20 4d 52 55 2e 20 42 79 20 64 65 66 61 75 6c 74 | efines.preferred.MRU..By.default |
bf480 | 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e 00 44 65 66 69 6e 65 73 20 70 72 6f 74 6f 63 6f | .is.not.defined..Defines.protoco |
bf4a0 | 6c 73 20 66 6f 72 20 63 68 65 63 6b 69 6e 67 20 41 52 50 2c 20 49 43 4d 50 2c 20 54 43 50 00 44 | ls.for.checking.ARP,.ICMP,.TCP.D |
bf4c0 | 65 66 69 6e 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 60 3c 6e 75 6d 62 65 72 3e 60 20 6f 66 | efines.the.maximum.`<number>`.of |
bf4e0 | 20 75 6e 61 6e 73 77 65 72 65 64 20 65 63 68 6f 20 72 65 71 75 65 73 74 73 2e 20 55 70 6f 6e 20 | .unanswered.echo.requests..Upon. |
bf500 | 72 65 61 63 68 69 6e 67 20 74 68 65 20 76 61 6c 75 65 20 60 3c 6e 75 6d 62 65 72 3e 60 2c 20 74 | reaching.the.value.`<number>`,.t |
bf520 | 68 65 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 72 65 73 65 74 2e 00 44 65 66 69 6e 65 | he.session.will.be.reset..Define |
bf540 | 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 60 3c 6e 75 6d 62 65 72 3e 60 20 6f 66 20 75 6e 61 6e | s.the.maximum.`<number>`.of.unan |
bf560 | 73 77 65 72 65 64 20 65 63 68 6f 20 72 65 71 75 65 73 74 73 2e 20 55 70 6f 6e 20 72 65 61 63 68 | swered.echo.requests..Upon.reach |
bf580 | 69 6e 67 20 74 68 65 20 76 61 6c 75 65 20 60 3c 6e 75 6d 62 65 72 3e 60 2c 20 74 68 65 20 73 65 | ing.the.value.`<number>`,.the.se |
bf5a0 | 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 72 65 73 65 74 2e 20 44 65 66 61 75 6c 74 20 76 61 6c | ssion.will.be.reset..Default.val |
bf5c0 | 75 65 20 69 73 20 2a 2a 33 2a 2a 2e 00 44 65 66 69 6e 65 73 20 74 68 65 20 73 70 65 63 69 66 69 | ue.is.**3**..Defines.the.specifi |
bf5e0 | 65 64 20 64 65 76 69 63 65 20 61 73 20 61 20 73 79 73 74 65 6d 20 63 6f 6e 73 6f 6c 65 2e 20 41 | ed.device.as.a.system.console..A |
bf600 | 76 61 69 6c 61 62 6c 65 20 63 6f 6e 73 6f 6c 65 20 64 65 76 69 63 65 73 20 63 61 6e 20 62 65 20 | vailable.console.devices.can.be. |
bf620 | 28 73 65 65 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 68 65 6c 70 65 72 29 3a 00 44 65 66 69 6e 69 6e | (see.completion.helper):.Definin |
bf640 | 67 20 50 65 65 72 73 00 44 65 6c 65 67 61 74 65 20 70 72 65 66 69 78 65 73 20 66 72 6f 6d 20 74 | g.Peers.Delegate.prefixes.from.t |
bf660 | 68 65 20 72 61 6e 67 65 20 69 6e 64 69 63 61 74 65 64 20 62 79 20 74 68 65 20 73 74 61 72 74 20 | he.range.indicated.by.the.start. |
bf680 | 61 6e 64 20 73 74 6f 70 20 71 75 61 6c 69 66 69 65 72 2e 00 44 65 6c 65 74 65 20 42 47 50 20 63 | and.stop.qualifier..Delete.BGP.c |
bf6a0 | 6f 6d 6d 75 6e 69 74 69 65 73 20 6d 61 74 63 68 69 6e 67 20 74 68 65 20 63 6f 6d 6d 75 6e 69 74 | ommunities.matching.the.communit |
bf6c0 | 79 2d 6c 69 73 74 2e 00 44 65 6c 65 74 65 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 6d | y-list..Delete.BGP.communities.m |
bf6e0 | 61 74 63 68 69 6e 67 20 74 68 65 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 | atching.the.large-community-list |
bf700 | 2e 00 44 65 6c 65 74 65 20 4c 6f 67 73 00 44 65 6c 65 74 65 20 61 20 70 61 72 74 69 63 75 6c 61 | ..Delete.Logs.Delete.a.particula |
bf720 | 72 20 63 6f 6e 74 61 69 6e 65 72 20 69 6d 61 67 65 20 62 61 73 65 64 20 6f 6e 20 69 74 27 73 20 | r.container.image.based.on.it's. |
bf740 | 69 6d 61 67 65 20 49 44 2e 20 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 64 65 6c 65 74 65 20 61 6c | image.ID..You.can.also.delete.al |
bf760 | 6c 20 63 6f 6e 74 61 69 6e 65 72 20 69 6d 61 67 65 73 20 61 74 20 6f 6e 63 65 2e 00 44 65 6c 65 | l.container.images.at.once..Dele |
bf780 | 74 65 20 61 6c 6c 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 69 65 73 00 44 65 6c 65 74 65 20 61 6c | te.all.BGP.communities.Delete.al |
bf7a0 | 6c 20 42 47 50 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 69 65 73 00 44 65 6c 65 74 65 20 64 | l.BGP.large-communities.Delete.d |
bf7c0 | 65 66 61 75 6c 74 20 72 6f 75 74 65 20 66 72 6f 6d 20 74 68 65 20 73 79 73 74 65 6d 2e 00 44 65 | efault.route.from.the.system..De |
bf7e0 | 6c 65 74 65 73 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 75 73 65 72 2d 64 65 66 69 6e 65 64 | letes.the.specified.user-defined |
bf800 | 20 66 69 6c 65 20 3c 74 65 78 74 3e 20 69 6e 20 74 68 65 20 2f 76 61 72 2f 6c 6f 67 2f 75 73 65 | .file.<text>.in.the./var/log/use |
bf820 | 72 20 64 69 72 65 63 74 6f 72 79 00 44 65 70 65 6e 64 69 6e 67 20 6f 6e 20 74 68 65 20 6c 6f 63 | r.directory.Depending.on.the.loc |
bf840 | 61 74 69 6f 6e 2c 20 6e 6f 74 20 61 6c 6c 20 6f 66 20 74 68 65 73 65 20 63 68 61 6e 6e 65 6c 73 | ation,.not.all.of.these.channels |
bf860 | 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 75 73 65 21 00 44 65 73 63 72 | .may.be.available.for.use!.Descr |
bf880 | 69 70 74 69 6f 6e 00 44 65 73 70 69 74 65 20 74 68 65 20 44 72 6f 70 2d 54 61 69 6c 20 70 6f 6c | iption.Despite.the.Drop-Tail.pol |
bf8a0 | 69 63 79 20 64 6f 65 73 20 6e 6f 74 20 73 6c 6f 77 20 64 6f 77 6e 20 70 61 63 6b 65 74 73 2c 20 | icy.does.not.slow.down.packets,. |
bf8c0 | 69 66 20 6d 61 6e 79 20 70 61 63 6b 65 74 73 20 61 72 65 20 74 6f 20 62 65 20 73 65 6e 74 2c 20 | if.many.packets.are.to.be.sent,. |
bf8e0 | 74 68 65 79 20 63 6f 75 6c 64 20 67 65 74 20 64 72 6f 70 70 65 64 20 77 68 65 6e 20 74 72 79 69 | they.could.get.dropped.when.tryi |
bf900 | 6e 67 20 74 6f 20 67 65 74 20 65 6e 71 75 65 75 65 64 20 61 74 20 74 68 65 20 74 61 69 6c 2e 20 | ng.to.get.enqueued.at.the.tail.. |
bf920 | 54 68 69 73 20 63 61 6e 20 68 61 70 70 65 6e 20 69 66 20 74 68 65 20 71 75 65 75 65 20 68 61 73 | This.can.happen.if.the.queue.has |
bf940 | 20 73 74 69 6c 6c 20 6e 6f 74 20 62 65 65 6e 20 61 62 6c 65 20 74 6f 20 72 65 6c 65 61 73 65 20 | .still.not.been.able.to.release. |
bf960 | 65 6e 6f 75 67 68 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 69 74 73 20 68 65 61 64 2e 00 44 65 | enough.packets.from.its.head..De |
bf980 | 73 70 69 74 65 20 74 68 65 20 66 61 63 74 20 74 68 61 74 20 41 44 20 69 73 20 61 20 73 75 70 65 | spite.the.fact.that.AD.is.a.supe |
bf9a0 | 72 73 65 74 20 6f 66 20 4c 44 41 50 00 44 65 73 74 69 6e 61 74 69 6f 6e 20 41 64 64 72 65 73 73 | rset.of.LDAP.Destination.Address |
bf9c0 | 00 44 65 73 74 69 6e 61 74 69 6f 6e 20 4e 41 54 00 44 65 73 74 69 6e 61 74 69 6f 6e 20 50 72 65 | .Destination.NAT.Destination.Pre |
bf9e0 | 66 69 78 00 44 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 22 | fix.Detailed.information.about." |
bfa00 | 63 69 73 63 6f 22 20 61 6e 64 20 22 69 62 6d 22 20 6d 6f 64 65 6c 73 20 64 69 66 66 65 72 65 6e | cisco".and."ibm".models.differen |
bfa20 | 63 65 73 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 3a 72 66 63 3a 60 33 35 30 39 60 2e | ces.can.be.found.in.:rfc:`3509`. |
bfa40 | 20 41 20 22 73 68 6f 72 74 63 75 74 22 20 6d 6f 64 65 6c 20 61 6c 6c 6f 77 73 20 41 42 52 20 74 | .A."shortcut".model.allows.ABR.t |
bfa60 | 6f 20 63 72 65 61 74 65 20 72 6f 75 74 65 73 20 62 65 74 77 65 65 6e 20 61 72 65 61 73 20 62 61 | o.create.routes.between.areas.ba |
bfa80 | 73 65 64 20 6f 6e 20 74 68 65 20 74 6f 70 6f 6c 6f 67 79 20 6f 66 20 74 68 65 20 61 72 65 61 73 | sed.on.the.topology.of.the.areas |
bfaa0 | 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 69 73 20 72 6f 75 74 65 72 20 62 75 74 20 6e 6f | .connected.to.this.router.but.no |
bfac0 | 74 20 75 73 69 6e 67 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 69 6e 20 63 61 73 65 20 | t.using.a.backbone.area.in.case. |
bfae0 | 69 66 20 6e 6f 6e 2d 62 61 63 6b 62 6f 6e 65 20 72 6f 75 74 65 20 77 69 6c 6c 20 62 65 20 63 68 | if.non-backbone.route.will.be.ch |
bfb00 | 65 61 70 65 72 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 | eaper..For.more.information.abou |
bfb20 | 74 20 22 73 68 6f 72 74 63 75 74 22 20 6d 6f 64 65 6c 2c 20 73 65 65 20 3a 74 3a 60 6f 73 70 66 | t."shortcut".model,.see.:t:`ospf |
bfb40 | 2d 73 68 6f 72 74 63 75 74 2d 61 62 72 2d 30 32 2e 74 78 74 60 00 44 65 74 65 72 6d 69 6e 65 73 | -shortcut-abr-02.txt`.Determines |
bfb60 | 20 68 6f 77 20 6f 70 65 6e 6e 68 72 70 20 64 61 65 6d 6f 6e 20 73 68 6f 75 6c 64 20 73 6f 66 74 | .how.opennhrp.daemon.should.soft |
bfb80 | 20 73 77 69 74 63 68 20 74 68 65 20 6d 75 6c 74 69 63 61 73 74 20 74 72 61 66 66 69 63 2e 20 43 | .switch.the.multicast.traffic..C |
bfba0 | 75 72 72 65 6e 74 6c 79 2c 20 6d 75 6c 74 69 63 61 73 74 20 74 72 61 66 66 69 63 20 69 73 20 63 | urrently,.multicast.traffic.is.c |
bfbc0 | 61 70 74 75 72 65 64 20 62 79 20 6f 70 65 6e 6e 68 72 70 20 64 61 65 6d 6f 6e 20 75 73 69 6e 67 | aptured.by.opennhrp.daemon.using |
bfbe0 | 20 61 20 70 61 63 6b 65 74 20 73 6f 63 6b 65 74 2c 20 61 6e 64 20 72 65 73 65 6e 74 20 62 61 63 | .a.packet.socket,.and.resent.bac |
bfc00 | 6b 20 74 6f 20 70 72 6f 70 65 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 73 2e 20 54 68 69 73 20 6d | k.to.proper.destinations..This.m |
bfc20 | 65 61 6e 73 20 74 68 61 74 20 6d 75 6c 74 69 63 61 73 74 20 70 61 63 6b 65 74 20 73 65 6e 64 69 | eans.that.multicast.packet.sendi |
bfc40 | 6e 67 20 69 73 20 43 50 55 20 69 6e 74 65 6e 73 69 76 65 2e 00 44 65 76 69 63 65 20 69 73 20 69 | ng.is.CPU.intensive..Device.is.i |
bfc60 | 6e 63 61 70 61 62 6c 65 20 6f 66 20 34 30 20 4d 48 7a 2c 20 64 6f 20 6e 6f 74 20 61 64 76 65 72 | ncapable.of.40.MHz,.do.not.adver |
bfc80 | 74 69 73 65 2e 20 54 68 69 73 20 73 65 74 73 20 60 60 5b 34 30 2d 49 4e 54 4f 4c 45 52 41 4e 54 | tise..This.sets.``[40-INTOLERANT |
bfca0 | 5d 60 60 00 44 65 76 69 63 65 73 20 65 76 61 6c 75 61 74 69 6e 67 20 77 68 65 74 68 65 72 20 61 | ]``.Devices.evaluating.whether.a |
bfcc0 | 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 69 73 20 70 75 62 6c 69 63 20 6d 75 73 74 20 62 65 | n.IPv4.address.is.public.must.be |
bfce0 | 20 75 70 64 61 74 65 64 20 74 6f 20 72 65 63 6f 67 6e 69 7a 65 20 74 68 65 20 6e 65 77 20 61 64 | .updated.to.recognize.the.new.ad |
bfd00 | 64 72 65 73 73 20 73 70 61 63 65 2e 20 41 6c 6c 6f 63 61 74 69 6e 67 20 6d 6f 72 65 20 70 72 69 | dress.space..Allocating.more.pri |
bfd20 | 76 61 74 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 73 70 61 63 65 20 66 6f 72 20 4e 41 54 20 | vate.IPv4.address.space.for.NAT. |
bfd40 | 64 65 76 69 63 65 73 20 6d 69 67 68 74 20 70 72 6f 6c 6f 6e 67 20 74 68 65 20 74 72 61 6e 73 69 | devices.might.prolong.the.transi |
bfd60 | 74 69 6f 6e 20 74 6f 20 49 50 76 36 2e 00 44 69 66 66 65 72 65 6e 74 20 4e 41 54 20 54 79 70 65 | tion.to.IPv6..Different.NAT.Type |
bfd80 | 73 00 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 70 61 72 61 6d 65 74 65 72 73 00 44 69 72 65 | s.Diffie-Hellman.parameters.Dire |
bfda0 | 63 74 69 6f 6e 3a 20 2a 2a 69 6e 2a 2a 20 61 6e 64 20 2a 2a 6f 75 74 2a 2a 2e 20 50 72 6f 74 65 | ction:.**in**.and.**out**..Prote |
bfdc0 | 63 74 20 70 75 62 6c 69 63 20 6e 65 74 77 6f 72 6b 20 66 72 6f 6d 20 65 78 74 65 72 6e 61 6c 20 | ct.public.network.from.external. |
bfde0 | 61 74 74 61 63 6b 73 2c 20 61 6e 64 20 69 64 65 6e 74 69 66 79 20 69 6e 74 65 72 6e 61 6c 20 61 | attacks,.and.identify.internal.a |
bfe00 | 74 74 61 63 6b 73 20 74 6f 77 61 72 64 73 20 69 6e 74 65 72 6e 65 74 2e 00 44 69 73 61 62 6c 65 | ttacks.towards.internet..Disable |
bfe20 | 20 28 6c 6f 63 6b 29 20 61 63 63 6f 75 6e 74 2e 20 55 73 65 72 20 77 69 6c 6c 20 6e 6f 74 20 62 | .(lock).account..User.will.not.b |
bfe40 | 65 20 61 62 6c 65 20 74 6f 20 6c 6f 67 20 69 6e 2e 00 44 69 73 61 62 6c 65 20 43 50 55 20 70 6f | e.able.to.log.in..Disable.CPU.po |
bfe60 | 77 65 72 20 73 61 76 69 6e 67 20 6d 65 63 68 61 6e 69 73 6d 73 20 61 6c 73 6f 20 6b 6e 6f 77 6e | wer.saving.mechanisms.also.known |
bfe80 | 20 61 73 20 43 20 73 74 61 74 65 73 2e 00 44 69 73 61 62 6c 65 20 43 6f 6d 70 72 65 73 73 69 6f | .as.C.states..Disable.Compressio |
bfea0 | 6e 20 43 6f 6e 74 72 6f 6c 20 50 72 6f 74 6f 63 6f 6c 20 28 43 43 50 29 2e 20 43 43 50 20 69 73 | n.Control.Protocol.(CCP)..CCP.is |
bfec0 | 20 65 6e 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 2e 00 44 69 73 61 62 6c 65 20 4d 4c 44 | .enabled.by.default..Disable.MLD |
bfee0 | 20 72 65 70 6f 72 74 73 20 61 6e 64 20 71 75 65 72 79 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 | .reports.and.query.on.the.interf |
bff00 | 61 63 65 2e 00 44 69 73 61 62 6c 65 20 60 3c 75 73 65 72 3e 60 20 61 63 63 6f 75 6e 74 2e 00 44 | ace..Disable.`<user>`.account..D |
bff20 | 69 73 61 62 6c 65 20 61 20 42 46 44 20 70 65 65 72 00 44 69 73 61 62 6c 65 20 61 20 63 6f 6e 74 | isable.a.BFD.peer.Disable.a.cont |
bff40 | 61 69 6e 65 72 2e 00 44 69 73 61 62 6c 65 20 61 20 67 69 76 65 6e 20 63 6f 6e 74 61 69 6e 65 72 | ainer..Disable.a.given.container |
bff60 | 20 72 65 67 69 73 74 72 79 00 44 69 73 61 62 6c 65 20 61 6c 6c 20 6f 70 74 69 6f 6e 61 6c 20 43 | .registry.Disable.all.optional.C |
bff80 | 50 55 20 6d 69 74 69 67 61 74 69 6f 6e 73 2e 20 54 68 69 73 20 69 6d 70 72 6f 76 65 73 20 73 79 | PU.mitigations..This.improves.sy |
bffa0 | 73 74 65 6d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2c 20 62 75 74 20 69 74 20 6d 61 79 20 61 6c 73 | stem.performance,.but.it.may.als |
bffc0 | 6f 20 65 78 70 6f 73 65 20 75 73 65 72 73 20 74 6f 20 73 65 76 65 72 61 6c 20 43 50 55 20 76 75 | o.expose.users.to.several.CPU.vu |
bffe0 | 6c 6e 65 72 61 62 69 6c 69 74 69 65 73 2e 00 44 69 73 61 62 6c 65 20 63 6f 6e 6e 65 63 74 69 6f | lnerabilities..Disable.connectio |
c0000 | 6e 20 6c 6f 67 67 69 6e 67 20 76 69 61 20 53 79 73 6c 6f 67 2e 00 44 69 73 61 62 6c 65 20 63 6f | n.logging.via.Syslog..Disable.co |
c0020 | 6e 6e 74 72 61 63 6b 20 6c 6f 6f 73 65 20 74 72 61 63 6b 20 6f 70 74 69 6f 6e 00 44 69 73 61 62 | nntrack.loose.track.option.Disab |
c0040 | 6c 65 20 64 68 63 70 2d 72 65 6c 61 79 20 73 65 72 76 69 63 65 2e 00 44 69 73 61 62 6c 65 20 64 | le.dhcp-relay.service..Disable.d |
c0060 | 68 63 70 76 36 2d 72 65 6c 61 79 20 73 65 72 76 69 63 65 2e 00 44 69 73 61 62 6c 65 20 67 69 76 | hcpv6-relay.service..Disable.giv |
c0080 | 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 20 49 74 20 77 69 6c 6c 20 62 65 20 70 6c 61 | en.`<interface>`..It.will.be.pla |
c00a0 | 63 65 64 20 69 6e 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 6c 79 20 64 6f 77 6e 20 28 60 60 | ced.in.administratively.down.(`` |
c00c0 | 41 2f 44 60 60 29 20 73 74 61 74 65 2e 00 44 69 73 61 62 6c 65 20 69 6d 6d 65 64 69 61 74 65 20 | A/D``).state..Disable.immediate. |
c00e0 | 73 65 73 73 69 6f 6e 20 72 65 73 65 74 20 69 66 20 70 65 65 72 27 73 20 63 6f 6e 6e 65 63 74 65 | session.reset.if.peer's.connecte |
c0100 | 64 20 6c 69 6e 6b 20 67 6f 65 73 20 64 6f 77 6e 2e 00 44 69 73 61 62 6c 65 20 70 61 73 73 77 6f | d.link.goes.down..Disable.passwo |
c0120 | 72 64 20 62 61 73 65 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 4c 6f 67 69 6e 20 76 | rd.based.authentication..Login.v |
c0140 | 69 61 20 53 53 48 20 6b 65 79 73 20 6f 6e 6c 79 2e 20 54 68 69 73 20 68 61 72 64 65 6e 73 20 73 | ia.SSH.keys.only..This.hardens.s |
c0160 | 65 63 75 72 69 74 79 21 00 44 69 73 61 62 6c 65 20 73 65 6e 64 69 6e 67 20 61 6e 64 20 72 65 63 | ecurity!.Disable.sending.and.rec |
c0180 | 65 69 76 69 6e 67 20 50 49 4d 20 63 6f 6e 74 72 6f 6c 20 70 61 63 6b 65 74 73 20 6f 6e 20 74 68 | eiving.PIM.control.packets.on.th |
c01a0 | 65 20 69 6e 74 65 72 66 61 63 65 2e 00 44 69 73 61 62 6c 65 20 74 68 65 20 68 6f 73 74 20 76 61 | e.interface..Disable.the.host.va |
c01c0 | 6c 69 64 61 74 69 6f 6e 20 74 68 72 6f 75 67 68 20 72 65 76 65 72 73 65 20 44 4e 53 20 6c 6f 6f | lidation.through.reverse.DNS.loo |
c01e0 | 6b 75 70 73 20 2d 20 63 61 6e 20 73 70 65 65 64 75 70 20 6c 6f 67 69 6e 20 74 69 6d 65 20 77 68 | kups.-.can.speedup.login.time.wh |
c0200 | 65 6e 20 72 65 76 65 72 73 65 20 6c 6f 6f 6b 75 70 20 69 73 20 6e 6f 74 20 70 6f 73 73 69 62 6c | en.reverse.lookup.is.not.possibl |
c0220 | 65 2e 00 44 69 73 61 62 6c 65 20 74 68 65 20 70 65 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | e..Disable.the.peer.configuratio |
c0240 | 6e 00 44 69 73 61 62 6c 65 20 74 68 69 73 20 49 50 76 34 20 73 74 61 74 69 63 20 72 6f 75 74 65 | n.Disable.this.IPv4.static.route |
c0260 | 20 65 6e 74 72 79 2e 00 44 69 73 61 62 6c 65 20 74 68 69 73 20 49 50 76 36 20 73 74 61 74 69 63 | .entry..Disable.this.IPv6.static |
c0280 | 20 72 6f 75 74 65 20 65 6e 74 72 79 2e 00 44 69 73 61 62 6c 65 20 74 68 69 73 20 73 65 72 76 69 | .route.entry..Disable.this.servi |
c02a0 | 63 65 2e 00 44 69 73 61 62 6c 65 20 74 72 61 6e 73 6d 69 74 20 6f 66 20 4c 4c 44 50 20 66 72 61 | ce..Disable.transmit.of.LLDP.fra |
c02c0 | 6d 65 73 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 20 55 73 65 66 | mes.on.given.`<interface>`..Usef |
c02e0 | 75 6c 20 74 6f 20 65 78 63 6c 75 64 65 20 63 65 72 74 61 69 6e 20 69 6e 74 65 72 66 61 63 65 73 | ul.to.exclude.certain.interfaces |
c0300 | 20 66 72 6f 6d 20 4c 4c 44 50 20 77 68 65 6e 20 60 60 61 6c 6c 60 60 20 68 61 76 65 20 62 65 65 | .from.LLDP.when.``all``.have.bee |
c0320 | 6e 20 65 6e 61 62 6c 65 64 2e 00 44 69 73 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 2d | n.enabled..Disabled.by.default.- |
c0340 | 20 6e 6f 20 6b 65 72 6e 65 6c 20 6d 6f 64 75 6c 65 20 6c 6f 61 64 65 64 2e 00 44 69 73 61 62 6c | .no.kernel.module.loaded..Disabl |
c0360 | 65 73 20 63 61 63 68 69 6e 67 20 6f 66 20 70 65 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 | es.caching.of.peer.information.f |
c0380 | 72 6f 6d 20 66 6f 72 77 61 72 64 65 64 20 4e 48 52 50 20 52 65 73 6f 6c 75 74 69 6f 6e 20 52 65 | rom.forwarded.NHRP.Resolution.Re |
c03a0 | 70 6c 79 20 70 61 63 6b 65 74 73 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f | ply.packets..This.can.be.used.to |
c03c0 | 20 72 65 64 75 63 65 20 6d 65 6d 6f 72 79 20 63 6f 6e 73 75 6d 70 74 69 6f 6e 20 6f 6e 20 62 69 | .reduce.memory.consumption.on.bi |
c03e0 | 67 20 4e 42 4d 41 20 73 75 62 6e 65 74 73 2e 00 44 69 73 61 62 6c 65 73 20 69 6e 74 65 72 66 61 | g.NBMA.subnets..Disables.interfa |
c0400 | 63 65 2d 62 61 73 65 64 20 49 50 76 34 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 00 44 69 73 61 | ce-based.IPv4.static.route..Disa |
c0420 | 62 6c 65 73 20 69 6e 74 65 72 66 61 63 65 2d 62 61 73 65 64 20 49 50 76 36 20 73 74 61 74 69 63 | bles.interface-based.IPv6.static |
c0440 | 20 72 6f 75 74 65 2e 00 44 69 73 61 62 6c 65 73 20 71 75 69 63 6b 6c 65 61 76 65 20 6d 6f 64 65 | .route..Disables.quickleave.mode |
c0460 | 2e 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 20 74 68 65 20 64 61 65 6d 6f 6e 20 77 69 6c 6c 20 6e | ..In.this.mode.the.daemon.will.n |
c0480 | 6f 74 20 73 65 6e 64 20 61 20 4c 65 61 76 65 20 49 47 4d 50 20 6d 65 73 73 61 67 65 20 75 70 73 | ot.send.a.Leave.IGMP.message.ups |
c04a0 | 74 72 65 61 6d 20 61 73 20 73 6f 6f 6e 20 61 73 20 69 74 20 72 65 63 65 69 76 65 73 20 61 20 4c | tream.as.soon.as.it.receives.a.L |
c04c0 | 65 61 76 65 20 6d 65 73 73 61 67 65 20 66 6f 72 20 61 6e 79 20 64 6f 77 6e 73 74 72 65 61 6d 20 | eave.message.for.any.downstream. |
c04e0 | 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 64 61 65 6d 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 61 | interface..The.daemon.will.not.a |
c0500 | 73 6b 20 66 6f 72 20 4d 65 6d 62 65 72 73 68 69 70 20 72 65 70 6f 72 74 73 20 6f 6e 20 74 68 65 | sk.for.Membership.reports.on.the |
c0520 | 20 64 6f 77 6e 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 73 2c 20 61 6e 64 20 69 66 20 61 | .downstream.interfaces,.and.if.a |
c0540 | 20 72 65 70 6f 72 74 20 69 73 20 72 65 63 65 69 76 65 64 20 74 68 65 20 67 72 6f 75 70 20 69 73 | .report.is.received.the.group.is |
c0560 | 20 6e 6f 74 20 6a 6f 69 6e 65 64 20 61 67 61 69 6e 20 74 68 65 20 75 70 73 74 72 65 61 6d 2e 00 | .not.joined.again.the.upstream.. |
c0580 | 44 69 73 61 62 6c 65 73 20 77 65 62 20 66 69 6c 74 65 72 69 6e 67 20 77 69 74 68 6f 75 74 20 64 | Disables.web.filtering.without.d |
c05a0 | 69 73 63 61 72 64 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 44 69 73 61 62 6c 65 | iscarding.configuration..Disable |
c05c0 | 73 20 77 65 62 20 70 72 6f 78 79 20 74 72 61 6e 73 70 61 72 65 6e 74 20 6d 6f 64 65 20 61 74 20 | s.web.proxy.transparent.mode.at. |
c05e0 | 61 20 6c 69 73 74 65 6e 69 6e 67 20 61 64 64 72 65 73 73 2e 00 44 69 73 61 62 6c 69 6e 67 20 41 | a.listening.address..Disabling.A |
c0600 | 64 76 65 72 74 69 73 65 6d 65 6e 74 73 00 44 69 73 61 62 6c 69 6e 67 20 61 20 56 52 52 50 20 67 | dvertisements.Disabling.a.VRRP.g |
c0620 | 72 6f 75 70 00 44 69 73 61 62 6c 69 6e 67 20 74 68 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 6f 6e | roup.Disabling.the.encryption.on |
c0640 | 20 74 68 65 20 6c 69 6e 6b 20 62 79 20 72 65 6d 6f 76 69 6e 67 20 60 60 73 65 63 75 72 69 74 79 | .the.link.by.removing.``security |
c0660 | 20 65 6e 63 72 79 70 74 60 60 20 77 69 6c 6c 20 73 68 6f 77 20 74 68 65 20 75 6e 65 6e 63 72 79 | .encrypt``.will.show.the.unencry |
c0680 | 70 74 65 64 20 62 75 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 63 6f 6e 74 65 6e 74 2e 00 | pted.but.authenticated.content.. |
c06a0 | 44 69 73 61 64 76 61 6e 74 61 67 65 73 20 61 72 65 3a 00 44 69 73 61 73 73 6f 63 69 61 74 65 20 | Disadvantages.are:.Disassociate. |
c06c0 | 73 74 61 74 69 6f 6e 73 20 62 61 73 65 64 20 6f 6e 20 65 78 63 65 73 73 69 76 65 20 74 72 61 6e | stations.based.on.excessive.tran |
c06e0 | 73 6d 69 73 73 69 6f 6e 20 66 61 69 6c 75 72 65 73 20 6f 72 20 6f 74 68 65 72 20 69 6e 64 69 63 | smission.failures.or.other.indic |
c0700 | 61 74 69 6f 6e 73 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6c 6f 73 73 2e 00 44 69 73 70 6c | ations.of.connection.loss..Displ |
c0720 | 61 79 20 49 50 76 34 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 66 6f 72 20 56 52 46 20 69 64 | ay.IPv4.routing.table.for.VRF.id |
c0740 | 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 6e 61 6d 65 3e 60 2e 00 44 69 73 70 6c 61 79 20 49 50 | entified.by.`<name>`..Display.IP |
c0760 | 76 36 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 66 6f 72 20 56 52 46 20 69 64 65 6e 74 69 66 | v6.routing.table.for.VRF.identif |
c0780 | 69 65 64 20 62 79 20 60 3c 6e 61 6d 65 3e 60 2e 00 44 69 73 70 6c 61 79 20 4c 6f 67 73 00 44 69 | ied.by.`<name>`..Display.Logs.Di |
c07a0 | 73 70 6c 61 79 20 4f 54 50 20 6b 65 79 20 66 6f 72 20 75 73 65 72 00 44 69 73 70 6c 61 79 20 61 | splay.OTP.key.for.user.Display.a |
c07c0 | 6c 6c 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 61 74 74 65 6d 70 74 73 20 6f 66 20 74 68 65 | ll.authorization.attempts.of.the |
c07e0 | 20 73 70 65 63 69 66 69 65 64 20 69 6d 61 67 65 00 44 69 73 70 6c 61 79 20 61 6c 6c 20 6b 6e 6f | .specified.image.Display.all.kno |
c0800 | 77 6e 20 41 52 50 20 74 61 62 6c 65 20 65 6e 74 72 69 65 73 20 6f 6e 20 61 20 67 69 76 65 6e 20 | wn.ARP.table.entries.on.a.given. |
c0820 | 69 6e 74 65 72 66 61 63 65 20 6f 6e 6c 79 20 28 60 65 74 68 31 60 29 3a 00 44 69 73 70 6c 61 79 | interface.only.(`eth1`):.Display |
c0840 | 20 61 6c 6c 20 6b 6e 6f 77 6e 20 41 52 50 20 74 61 62 6c 65 20 65 6e 74 72 69 65 73 20 73 70 61 | .all.known.ARP.table.entries.spa |
c0860 | 6e 6e 69 6e 67 20 61 63 72 6f 73 73 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 00 44 69 73 70 | nning.across.all.interfaces.Disp |
c0880 | 6c 61 79 20 63 6f 6e 74 65 6e 74 73 20 6f 66 20 61 20 73 70 65 63 69 66 69 65 64 20 75 73 65 72 | lay.contents.of.a.specified.user |
c08a0 | 2d 64 65 66 69 6e 65 64 20 6c 6f 67 20 66 69 6c 65 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 | -defined.log.file.of.the.specifi |
c08c0 | 65 64 20 69 6d 61 67 65 00 44 69 73 70 6c 61 79 20 63 6f 6e 74 65 6e 74 73 20 6f 66 20 61 6c 6c | ed.image.Display.contents.of.all |
c08e0 | 20 6d 61 73 74 65 72 20 6c 6f 67 20 66 69 6c 65 73 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 | .master.log.files.of.the.specifi |
c0900 | 65 64 20 69 6d 61 67 65 00 44 69 73 70 6c 61 79 20 6c 61 73 74 20 6c 69 6e 65 73 20 6f 66 20 74 | ed.image.Display.last.lines.of.t |
c0920 | 68 65 20 73 79 73 74 65 6d 20 6c 6f 67 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 | he.system.log.of.the.specified.i |
c0940 | 6d 61 67 65 00 44 69 73 70 6c 61 79 20 6c 69 73 74 20 6f 66 20 61 6c 6c 20 75 73 65 72 2d 64 65 | mage.Display.list.of.all.user-de |
c0960 | 66 69 6e 65 64 20 6c 6f 67 20 66 69 6c 65 73 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 | fined.log.files.of.the.specified |
c0980 | 20 69 6d 61 67 65 00 44 69 73 70 6c 61 79 20 6c 6f 67 20 66 69 6c 65 73 20 6f 66 20 67 69 76 65 | .image.Display.log.files.of.give |
c09a0 | 6e 20 63 61 74 65 67 6f 72 79 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 20 55 73 65 20 74 | n.category.on.the.console..Use.t |
c09c0 | 61 62 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 74 6f 20 67 65 74 20 61 20 6c 69 73 74 20 6f 66 20 61 | ab.completion.to.get.a.list.of.a |
c09e0 | 76 61 69 6c 61 62 6c 65 20 63 61 74 65 67 6f 72 69 65 73 2e 20 54 68 6f 73 20 63 61 74 65 67 6f | vailable.categories..Thos.catego |
c0a00 | 72 69 65 73 20 63 6f 75 6c 64 20 62 65 3a 20 61 6c 6c 2c 20 61 75 74 68 6f 72 69 7a 61 74 69 6f | ries.could.be:.all,.authorizatio |
c0a20 | 6e 2c 20 63 6c 75 73 74 65 72 2c 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 2c 20 64 68 63 70 | n,.cluster,.conntrack-sync,.dhcp |
c0a40 | 2c 20 64 69 72 65 63 74 6f 72 79 2c 20 64 6e 73 2c 20 66 69 6c 65 2c 20 66 69 72 65 77 61 6c 6c | ,.directory,.dns,.file,.firewall |
c0a60 | 2c 20 68 74 74 70 73 2c 20 69 6d 61 67 65 20 6c 6c 64 70 2c 20 6e 61 74 2c 20 6f 70 65 6e 76 70 | ,.https,.image.lldp,.nat,.openvp |
c0a80 | 6e 2c 20 73 6e 6d 70 2c 20 74 61 69 6c 2c 20 76 70 6e 2c 20 76 72 72 70 00 44 69 73 70 6c 61 79 | n,.snmp,.tail,.vpn,.vrrp.Display |
c0aa0 | 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 61 6c 6c 20 6e 65 69 67 68 62 6f 72 | s.information.about.all.neighbor |
c0ac0 | 73 20 64 69 73 63 6f 76 65 72 65 64 20 76 69 61 20 4c 4c 44 50 2e 00 44 69 73 70 6c 61 79 73 20 | s.discovered.via.LLDP..Displays. |
c0ae0 | 71 75 65 75 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 61 20 50 50 50 6f 45 20 69 6e | queue.information.for.a.PPPoE.in |
c0b00 | 74 65 72 66 61 63 65 2e 00 44 69 73 70 6c 61 79 73 20 74 68 65 20 72 6f 75 74 65 20 70 61 63 6b | terface..Displays.the.route.pack |
c0b20 | 65 74 73 20 74 61 6b 65 6e 20 74 6f 20 61 20 6e 65 74 77 6f 72 6b 20 68 6f 73 74 20 75 74 69 6c | ets.taken.to.a.network.host.util |
c0b40 | 69 7a 69 6e 67 20 56 52 46 20 69 6e 73 74 61 6e 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 | izing.VRF.instance.identified.by |
c0b60 | 20 60 3c 6e 61 6d 65 3e 60 2e 20 57 68 65 6e 20 75 73 69 6e 67 20 74 68 65 20 49 50 76 34 20 6f | .`<name>`..When.using.the.IPv4.o |
c0b80 | 72 20 49 50 76 36 20 6f 70 74 69 6f 6e 2c 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 72 6f 75 74 | r.IPv6.option,.displays.the.rout |
c0ba0 | 65 20 70 61 63 6b 65 74 73 20 74 61 6b 65 6e 20 74 6f 20 74 68 65 20 67 69 76 65 6e 20 68 6f 73 | e.packets.taken.to.the.given.hos |
c0bc0 | 74 73 20 49 50 20 61 64 64 72 65 73 73 20 66 61 6d 69 6c 79 2e 20 54 68 69 73 20 6f 70 74 69 6f | ts.IP.address.family..This.optio |
c0be0 | 6e 20 69 73 20 75 73 65 66 75 6c 20 77 68 65 6e 20 74 68 65 20 68 6f 73 74 20 69 73 20 73 70 65 | n.is.useful.when.the.host.is.spe |
c0c00 | 63 69 66 69 65 64 20 61 73 20 61 20 68 6f 73 74 6e 61 6d 65 20 72 61 74 68 65 72 20 74 68 61 6e | cified.as.a.hostname.rather.than |
c0c20 | 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 2e 00 44 6f 20 2a 6e 6f 74 2a 20 6d 61 6e 75 61 6c 6c | .an.IP.address..Do.*not*.manuall |
c0c40 | 79 20 65 64 69 74 20 60 2f 65 74 63 2f 68 6f 73 74 73 60 2e 20 54 68 69 73 20 66 69 6c 65 20 77 | y.edit.`/etc/hosts`..This.file.w |
c0c60 | 69 6c 6c 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 62 65 20 72 65 67 65 6e 65 72 61 74 65 64 | ill.automatically.be.regenerated |
c0c80 | 20 6f 6e 20 62 6f 6f 74 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 73 65 74 74 69 6e 67 73 20 69 | .on.boot.based.on.the.settings.i |
c0ca0 | 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2c 20 77 68 69 63 68 20 6d 65 61 6e 73 20 79 6f 75 27 | n.this.section,.which.means.you' |
c0cc0 | 6c 6c 20 6c 6f 73 65 20 61 6c 6c 20 79 6f 75 72 20 6d 61 6e 75 61 6c 20 65 64 69 74 73 2e 20 49 | ll.lose.all.your.manual.edits..I |
c0ce0 | 6e 73 74 65 61 64 2c 20 63 6f 6e 66 69 67 75 72 65 20 73 74 61 74 69 63 20 68 6f 73 74 20 6d 61 | nstead,.configure.static.host.ma |
c0d00 | 70 70 69 6e 67 73 20 61 73 20 66 6f 6c 6c 6f 77 73 2e 00 44 6f 20 6e 6f 74 20 61 6c 6c 6f 77 20 | ppings.as.follows..Do.not.allow. |
c0d20 | 49 50 76 34 20 6e 65 78 74 68 6f 70 20 74 72 61 63 6b 69 6e 67 20 74 6f 20 72 65 73 6f 6c 76 65 | IPv4.nexthop.tracking.to.resolve |
c0d40 | 20 76 69 61 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 2e 20 54 68 69 73 20 70 61 72 | .via.the.default.route..This.par |
c0d60 | 61 6d 65 74 65 72 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 70 65 72 2d 56 52 46 2c 20 73 6f | ameter.is.configured.per-VRF,.so |
c0d80 | 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 69 73 20 61 6c 73 6f 20 61 76 61 69 6c 61 62 6c 65 20 69 | .the.command.is.also.available.i |
c0da0 | 6e 20 74 68 65 20 56 52 46 20 73 75 62 6e 6f 64 65 2e 00 44 6f 20 6e 6f 74 20 61 6c 6c 6f 77 20 | n.the.VRF.subnode..Do.not.allow. |
c0dc0 | 49 50 76 36 20 6e 65 78 74 68 6f 70 20 74 72 61 63 6b 69 6e 67 20 74 6f 20 72 65 73 6f 6c 76 65 | IPv6.nexthop.tracking.to.resolve |
c0de0 | 20 76 69 61 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 2e 20 54 68 69 73 20 70 61 72 | .via.the.default.route..This.par |
c0e00 | 61 6d 65 74 65 72 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 70 65 72 2d 56 52 46 2c 20 73 6f | ameter.is.configured.per-VRF,.so |
c0e20 | 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 69 73 20 61 6c 73 6f 20 61 76 61 69 6c 61 62 6c 65 20 69 | .the.command.is.also.available.i |
c0e40 | 6e 20 74 68 65 20 56 52 46 20 73 75 62 6e 6f 64 65 2e 00 44 6f 20 6e 6f 74 20 61 73 73 69 67 6e | n.the.VRF.subnode..Do.not.assign |
c0e60 | 20 61 20 6c 69 6e 6b 2d 6c 6f 63 61 6c 20 49 50 76 36 20 61 64 64 72 65 73 73 20 74 6f 20 74 68 | .a.link-local.IPv6.address.to.th |
c0e80 | 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 44 6f 20 6e 6f 74 20 63 6f 6e 66 69 67 75 72 65 20 49 | is.interface..Do.not.configure.I |
c0ea0 | 46 42 20 61 73 20 74 68 65 20 66 69 72 73 74 20 73 74 65 70 2e 20 46 69 72 73 74 20 63 72 65 61 | FB.as.the.first.step..First.crea |
c0ec0 | 74 65 20 65 76 65 72 79 74 68 69 6e 67 20 65 6c 73 65 20 6f 66 20 79 6f 75 72 20 74 72 61 66 66 | te.everything.else.of.your.traff |
c0ee0 | 69 63 2d 70 6f 6c 69 63 79 2c 20 61 6e 64 20 74 68 65 6e 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 | ic-policy,.and.then.you.can.conf |
c0f00 | 69 67 75 72 65 20 49 46 42 2e 20 4f 74 68 65 72 77 69 73 65 20 79 6f 75 20 6d 69 67 68 74 20 67 | igure.IFB..Otherwise.you.might.g |
c0f20 | 65 74 20 74 68 65 20 60 60 52 54 4e 45 54 4c 49 4e 4b 20 61 6e 73 77 65 72 3a 20 46 69 6c 65 20 | et.the.``RTNETLINK.answer:.File. |
c0f40 | 65 78 69 73 74 73 60 60 20 65 72 72 6f 72 2c 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 73 6f 6c | exists``.error,.which.can.be.sol |
c0f60 | 76 65 64 20 77 69 74 68 20 60 60 73 75 64 6f 20 69 70 20 6c 69 6e 6b 20 64 65 6c 65 74 65 20 69 | ved.with.``sudo.ip.link.delete.i |
c0f80 | 66 62 30 60 60 2e 00 44 6f 20 6e 6f 74 20 73 65 6e 64 20 48 61 72 64 20 52 65 73 65 74 20 43 45 | fb0``..Do.not.send.Hard.Reset.CE |
c0fa0 | 41 53 45 20 4e 6f 74 69 66 69 63 61 74 69 6f 6e 20 66 6f 72 20 22 41 64 6d 69 6e 69 73 74 72 61 | ASE.Notification.for."Administra |
c0fc0 | 74 69 76 65 20 52 65 73 65 74 22 20 65 76 65 6e 74 73 2e 20 57 68 65 6e 20 73 65 74 20 61 6e 64 | tive.Reset".events..When.set.and |
c0fe0 | 20 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 20 4e 6f 74 69 66 69 63 61 74 69 6f 6e 20 63 | .Graceful.Restart.Notification.c |
c1000 | 61 70 61 62 69 6c 69 74 79 20 69 73 20 65 78 63 68 61 6e 67 65 64 20 62 65 74 77 65 65 6e 20 74 | apability.is.exchanged.between.t |
c1020 | 68 65 20 70 65 65 72 73 2c 20 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 20 70 72 6f 63 65 | he.peers,.Graceful.Restart.proce |
c1040 | 64 75 72 65 73 20 61 70 70 6c 79 2c 20 61 6e 64 20 72 6f 75 74 65 73 20 77 69 6c 6c 20 62 65 20 | dures.apply,.and.routes.will.be. |
c1060 | 72 65 74 61 69 6e 65 64 2e 00 44 6f 20 6e 6f 74 20 75 73 65 20 74 68 65 20 6c 6f 63 61 6c 20 60 | retained..Do.not.use.the.local.` |
c1080 | 60 2f 65 74 63 2f 68 6f 73 74 73 60 60 20 66 69 6c 65 20 69 6e 20 6e 61 6d 65 20 72 65 73 6f 6c | `/etc/hosts``.file.in.name.resol |
c10a0 | 75 74 69 6f 6e 2e 20 56 79 4f 53 20 44 48 43 50 20 73 65 72 76 65 72 20 77 69 6c 6c 20 75 73 65 | ution..VyOS.DHCP.server.will.use |
c10c0 | 20 74 68 69 73 20 66 69 6c 65 20 74 6f 20 61 64 64 20 72 65 73 6f 6c 76 65 72 73 20 74 6f 20 61 | .this.file.to.add.resolvers.to.a |
c10e0 | 73 73 69 67 6e 65 64 20 61 64 64 72 65 73 73 65 73 2e 00 44 6f 65 73 20 6e 6f 74 20 6e 65 65 64 | ssigned.addresses..Does.not.need |
c1100 | 20 74 6f 20 62 65 20 75 73 65 64 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 70 72 6f 78 79 5f | .to.be.used.together.with.proxy_ |
c1120 | 61 72 70 2e 00 44 6f 6d 61 69 6e 00 44 6f 6d 61 69 6e 20 47 72 6f 75 70 73 00 44 6f 6d 61 69 6e | arp..Domain.Domain.Groups.Domain |
c1140 | 20 4e 61 6d 65 00 44 6f 6d 61 69 6e 20 6e 61 6d 65 28 73 29 20 66 6f 72 20 77 68 69 63 68 20 74 | .Name.Domain.name(s).for.which.t |
c1160 | 6f 20 6f 62 74 61 69 6e 20 63 65 72 74 69 66 69 63 61 74 65 00 44 6f 6d 61 69 6e 20 6e 61 6d 65 | o.obtain.certificate.Domain.name |
c1180 | 73 20 63 61 6e 20 69 6e 63 6c 75 64 65 20 6c 65 74 74 65 72 73 2c 20 6e 75 6d 62 65 72 73 2c 20 | s.can.include.letters,.numbers,. |
c11a0 | 68 79 70 68 65 6e 73 20 61 6e 64 20 70 65 72 69 6f 64 73 20 77 69 74 68 20 61 20 6d 61 78 69 6d | hyphens.and.periods.with.a.maxim |
c11c0 | 75 6d 20 6c 65 6e 67 74 68 20 6f 66 20 32 35 33 20 63 68 61 72 61 63 74 65 72 73 2e 00 44 6f 6d | um.length.of.253.characters..Dom |
c11e0 | 61 69 6e 20 6e 61 6d 65 73 20 74 6f 20 61 70 70 6c 79 2c 20 6d 75 6c 74 69 70 6c 65 20 64 6f 6d | ain.names.to.apply,.multiple.dom |
c1200 | 61 69 6e 2d 6e 61 6d 65 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 00 44 6f 6d 61 | ain-names.can.be.specified..Doma |
c1220 | 69 6e 20 73 65 61 72 63 68 20 6f 72 64 65 72 00 44 6f 6e 27 74 20 62 65 20 61 66 72 61 69 64 20 | in.search.order.Don't.be.afraid. |
c1240 | 74 68 61 74 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 72 65 2d 64 6f 20 79 6f 75 72 20 63 6f 6e 66 | that.you.need.to.re-do.your.conf |
c1260 | 69 67 75 72 61 74 69 6f 6e 2e 20 4b 65 79 20 74 72 61 6e 73 66 6f 72 6d 61 74 69 6f 6e 20 69 73 | iguration..Key.transformation.is |
c1280 | 20 68 61 6e 64 6c 65 64 2c 20 61 73 20 61 6c 77 61 79 73 2c 20 62 79 20 6f 75 72 20 6d 69 67 72 | .handled,.as.always,.by.our.migr |
c12a0 | 61 74 69 6f 6e 20 73 63 72 69 70 74 73 2c 20 73 6f 20 74 68 69 73 20 77 69 6c 6c 20 62 65 20 61 | ation.scripts,.so.this.will.be.a |
c12c0 | 20 73 6d 6f 6f 74 68 20 74 72 61 6e 73 69 74 69 6f 6e 20 66 6f 72 20 79 6f 75 21 00 44 6f 6e 27 | .smooth.transition.for.you!.Don' |
c12e0 | 74 20 66 6f 72 67 65 74 2c 20 74 68 65 20 43 49 44 52 20 64 65 63 6c 61 72 65 64 20 69 6e 20 74 | t.forget,.the.CIDR.declared.in.t |
c1300 | 68 65 20 6e 65 74 77 6f 72 6b 20 73 74 61 74 65 6d 65 6e 74 20 2a 2a 4d 55 53 54 20 65 78 69 73 | he.network.statement.**MUST.exis |
c1320 | 74 20 69 6e 20 79 6f 75 72 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 28 64 79 6e 61 6d 69 63 | t.in.your.routing.table.(dynamic |
c1340 | 20 6f 72 20 73 74 61 74 69 63 29 2c 20 74 68 65 20 62 65 73 74 20 77 61 79 20 74 6f 20 6d 61 6b | .or.static),.the.best.way.to.mak |
c1360 | 65 20 73 75 72 65 20 74 68 61 74 20 69 73 20 74 72 75 65 20 69 73 20 63 72 65 61 74 69 6e 67 20 | e.sure.that.is.true.is.creating. |
c1380 | 61 20 73 74 61 74 69 63 20 72 6f 75 74 65 3a 2a 2a 00 44 6f 6e 27 74 20 66 6f 72 67 65 74 2c 20 | a.static.route:**.Don't.forget,. |
c13a0 | 74 68 65 20 43 49 44 52 20 64 65 63 6c 61 72 65 64 20 69 6e 20 74 68 65 20 6e 65 74 77 6f 72 6b | the.CIDR.declared.in.the.network |
c13c0 | 20 73 74 61 74 65 6d 65 6e 74 20 4d 55 53 54 20 2a 2a 65 78 69 73 74 20 69 6e 20 79 6f 75 72 20 | .statement.MUST.**exist.in.your. |
c13e0 | 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 28 64 79 6e 61 6d 69 63 20 6f 72 20 73 74 61 74 69 63 | routing.table.(dynamic.or.static |
c1400 | 29 2c 20 74 68 65 20 62 65 73 74 20 77 61 79 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 74 68 61 | ),.the.best.way.to.make.sure.tha |
c1420 | 74 20 69 73 20 74 72 75 65 20 69 73 20 63 72 65 61 74 69 6e 67 20 61 20 73 74 61 74 69 63 20 72 | t.is.true.is.creating.a.static.r |
c1440 | 6f 75 74 65 3a 2a 2a 00 44 6f 6e 27 74 20 67 65 74 20 63 6f 6e 66 75 73 65 64 20 61 62 6f 75 74 | oute:**.Don't.get.confused.about |
c1460 | 20 74 68 65 20 75 73 65 64 20 2f 33 31 20 74 75 6e 6e 65 6c 20 73 75 62 6e 65 74 2e 20 3a 72 66 | .the.used./31.tunnel.subnet..:rf |
c1480 | 63 3a 60 33 30 32 31 60 20 67 69 76 65 73 20 79 6f 75 20 61 64 64 69 74 69 6f 6e 61 6c 20 69 6e | c:`3021`.gives.you.additional.in |
c14a0 | 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 75 73 69 6e 67 20 2f 33 31 20 73 75 62 6e 65 74 73 20 | formation.for.using./31.subnets. |
c14c0 | 6f 6e 20 70 6f 69 6e 74 2d 74 6f 2d 70 6f 69 6e 74 20 6c 69 6e 6b 73 2e 00 44 6f 77 6e 6c 6f 61 | on.point-to-point.links..Downloa |
c14e0 | 64 20 62 61 6e 64 77 69 64 74 68 20 6c 69 6d 69 74 20 69 6e 20 6b 62 69 74 2f 73 20 66 6f 72 20 | d.bandwidth.limit.in.kbit/s.for. |
c1500 | 60 3c 75 73 65 72 3e 60 2e 00 44 6f 77 6e 6c 6f 61 64 20 62 61 6e 64 77 69 64 74 68 20 6c 69 6d | `<user>`..Download.bandwidth.lim |
c1520 | 69 74 20 69 6e 20 6b 62 69 74 2f 73 20 66 6f 72 20 75 73 65 72 20 6f 6e 20 69 6e 74 65 72 66 61 | it.in.kbit/s.for.user.on.interfa |
c1540 | 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 44 6f 77 6e 6c 6f 61 64 2f 55 70 64 61 74 | ce.`<interface>`..Download/Updat |
c1560 | 65 20 63 6f 6d 70 6c 65 74 65 20 62 6c 61 63 6b 6c 69 73 74 00 44 6f 77 6e 6c 6f 61 64 2f 55 70 | e.complete.blacklist.Download/Up |
c1580 | 64 61 74 65 20 70 61 72 74 69 61 6c 20 62 6c 61 63 6b 6c 69 73 74 2e 00 44 72 6f 70 20 41 53 2d | date.partial.blacklist..Drop.AS- |
c15a0 | 4e 55 4d 42 45 52 20 66 72 6f 6d 20 74 68 65 20 42 47 50 20 41 53 20 70 61 74 68 2e 00 44 72 6f | NUMBER.from.the.BGP.AS.path..Dro |
c15c0 | 70 20 54 61 69 6c 00 44 72 6f 70 20 72 61 74 65 00 44 72 6f 70 70 65 64 20 70 61 63 6b 65 74 73 | p.Tail.Drop.rate.Dropped.packets |
c15e0 | 20 72 65 70 6f 72 74 65 64 20 6f 6e 20 44 52 4f 50 4d 4f 4e 20 4e 65 74 6c 69 6e 6b 20 63 68 61 | .reported.on.DROPMON.Netlink.cha |
c1600 | 6e 6e 65 6c 20 62 79 20 4c 69 6e 75 78 20 6b 65 72 6e 65 6c 20 61 72 65 20 65 78 70 6f 72 74 65 | nnel.by.Linux.kernel.are.exporte |
c1620 | 64 20 76 69 61 20 74 68 65 20 73 74 61 6e 64 61 72 64 20 73 46 6c 6f 77 20 76 35 20 65 78 74 65 | d.via.the.standard.sFlow.v5.exte |
c1640 | 6e 73 69 6f 6e 20 66 6f 72 20 72 65 70 6f 72 74 69 6e 67 20 64 72 6f 70 70 65 64 20 70 61 63 6b | nsion.for.reporting.dropped.pack |
c1660 | 65 74 73 00 44 75 61 6c 2d 53 74 61 63 6b 20 49 50 76 34 2f 49 50 76 36 20 70 72 6f 76 69 73 69 | ets.Dual-Stack.IPv4/IPv6.provisi |
c1680 | 6f 6e 69 6e 67 20 77 69 74 68 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 00 44 75 6d | oning.with.Prefix.Delegation.Dum |
c16a0 | 6d 79 00 44 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 00 44 75 6d 6d 79 20 69 6e 74 65 72 66 61 | my.Dummy.interface.Dummy.interfa |
c16c0 | 63 65 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 61 73 20 69 6e 74 65 72 66 61 63 65 73 20 74 68 | ces.can.be.used.as.interfaces.th |
c16e0 | 61 74 20 61 6c 77 61 79 73 20 73 74 61 79 20 75 70 20 28 69 6e 20 74 68 65 20 73 61 6d 65 20 66 | at.always.stay.up.(in.the.same.f |
c1700 | 61 73 68 69 6f 6e 20 74 6f 20 6c 6f 6f 70 62 61 63 6b 73 20 69 6e 20 43 69 73 63 6f 20 49 4f 53 | ashion.to.loopbacks.in.Cisco.IOS |
c1720 | 29 2c 20 6f 72 20 66 6f 72 20 74 65 73 74 69 6e 67 20 70 75 72 70 6f 73 65 73 2e 00 44 75 70 6c | ),.or.for.testing.purposes..Dupl |
c1740 | 69 63 61 74 65 20 70 61 63 6b 65 74 73 20 61 72 65 20 6e 6f 74 20 69 6e 63 6c 75 64 65 64 20 69 | icate.packets.are.not.included.i |
c1760 | 6e 20 74 68 65 20 70 61 63 6b 65 74 20 6c 6f 73 73 20 63 61 6c 63 75 6c 61 74 69 6f 6e 2c 20 61 | n.the.packet.loss.calculation,.a |
c1780 | 6c 74 68 6f 75 67 68 20 74 68 65 20 72 6f 75 6e 64 2d 74 72 69 70 20 74 69 6d 65 20 6f 66 20 74 | lthough.the.round-trip.time.of.t |
c17a0 | 68 65 73 65 20 70 61 63 6b 65 74 73 20 69 73 20 75 73 65 64 20 69 6e 20 63 61 6c 63 75 6c 61 74 | hese.packets.is.used.in.calculat |
c17c0 | 69 6e 67 20 74 68 65 20 6d 69 6e 69 6d 75 6d 2f 20 61 76 65 72 61 67 65 2f 6d 61 78 69 6d 75 6d | ing.the.minimum/.average/maximum |
c17e0 | 20 72 6f 75 6e 64 2d 74 72 69 70 20 74 69 6d 65 20 6e 75 6d 62 65 72 73 2e 00 44 75 72 69 6e 67 | .round-trip.time.numbers..During |
c1800 | 20 69 6e 69 74 69 61 6c 20 64 65 70 6c 6f 79 6d 65 6e 74 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 | .initial.deployment.we.recommend |
c1820 | 20 75 73 69 6e 67 20 74 68 65 20 73 74 61 67 69 6e 67 20 41 50 49 20 6f 66 20 4c 65 74 73 45 6e | .using.the.staging.API.of.LetsEn |
c1840 | 63 72 79 70 74 20 74 6f 20 70 72 65 76 65 6e 74 20 61 6e 64 20 62 6c 61 63 6b 6c 69 73 74 69 6e | crypt.to.prevent.and.blacklistin |
c1860 | 67 20 6f 66 20 79 6f 75 72 20 73 79 73 74 65 6d 2e 20 54 68 65 20 41 50 49 20 65 6e 64 70 6f 69 | g.of.your.system..The.API.endpoi |
c1880 | 6e 74 20 69 73 20 68 74 74 70 73 3a 2f 2f 61 63 6d 65 2d 73 74 61 67 69 6e 67 2d 76 30 32 2e 61 | nt.is.https://acme-staging-v02.a |
c18a0 | 70 69 2e 6c 65 74 73 65 6e 63 72 79 70 74 2e 6f 72 67 2f 64 69 72 65 63 74 6f 72 79 00 44 75 72 | pi.letsencrypt.org/directory.Dur |
c18c0 | 69 6e 67 20 70 72 6f 66 69 6c 65 20 69 6d 70 6f 72 74 2c 20 74 68 65 20 75 73 65 72 20 69 73 20 | ing.profile.import,.the.user.is. |
c18e0 | 61 73 6b 65 64 20 74 6f 20 65 6e 74 65 72 20 69 74 73 20 49 50 53 65 63 20 63 72 65 64 65 6e 74 | asked.to.enter.its.IPSec.credent |
c1900 | 69 61 6c 73 20 28 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 61 73 73 77 6f 72 64 29 20 77 68 69 | ials.(username.and.password).whi |
c1920 | 63 68 20 69 73 20 73 74 6f 72 65 64 20 6f 6e 20 74 68 65 20 6d 6f 62 69 6c 65 2e 00 44 79 6e 61 | ch.is.stored.on.the.mobile..Dyna |
c1940 | 6d 69 63 20 44 4e 53 00 44 79 6e 61 6d 69 63 2d 70 72 6f 74 65 63 74 69 6f 6e 00 45 41 50 6f 4c | mic.DNS.Dynamic-protection.EAPoL |
c1960 | 20 63 6f 6d 65 73 20 77 69 74 68 20 61 6e 20 69 64 65 6e 74 69 66 79 20 6f 70 74 69 6f 6e 2e 20 | .comes.with.an.identify.option.. |
c1980 | 57 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 75 73 65 20 74 68 65 20 69 6e 74 65 72 66 61 | We.automatically.use.the.interfa |
c19a0 | 63 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 61 73 20 69 64 65 6e 74 69 74 79 20 70 61 72 61 6d | ce.MAC.address.as.identity.param |
c19c0 | 65 74 65 72 2e 00 45 53 50 20 28 45 6e 63 61 70 73 75 6c 61 74 69 6e 67 20 53 65 63 75 72 69 74 | eter..ESP.(Encapsulating.Securit |
c19e0 | 79 20 50 61 79 6c 6f 61 64 29 20 41 74 74 72 69 62 75 74 65 73 00 45 53 50 20 50 68 61 73 65 3a | y.Payload).Attributes.ESP.Phase: |
c1a00 | 00 45 53 50 20 69 73 20 75 73 65 64 20 74 6f 20 70 72 6f 76 69 64 65 20 63 6f 6e 66 69 64 65 6e | .ESP.is.used.to.provide.confiden |
c1a20 | 74 69 61 6c 69 74 79 2c 20 64 61 74 61 20 6f 72 69 67 69 6e 20 61 75 74 68 65 6e 74 69 63 61 74 | tiality,.data.origin.authenticat |
c1a40 | 69 6f 6e 2c 20 63 6f 6e 6e 65 63 74 69 6f 6e 6c 65 73 73 20 69 6e 74 65 67 72 69 74 79 2c 20 61 | ion,.connectionless.integrity,.a |
c1a60 | 6e 20 61 6e 74 69 2d 72 65 70 6c 61 79 20 73 65 72 76 69 63 65 20 28 61 20 66 6f 72 6d 20 6f 66 | n.anti-replay.service.(a.form.of |
c1a80 | 20 70 61 72 74 69 61 6c 20 73 65 71 75 65 6e 63 65 20 69 6e 74 65 67 72 69 74 79 29 2c 20 61 6e | .partial.sequence.integrity),.an |
c1aa0 | 64 20 6c 69 6d 69 74 65 64 20 74 72 61 66 66 69 63 20 66 6c 6f 77 20 63 6f 6e 66 69 64 65 6e 74 | d.limited.traffic.flow.confident |
c1ac0 | 69 61 6c 69 74 79 2e 20 68 74 74 70 73 3a 2f 2f 64 61 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 | iality..https://datatracker.ietf |
c1ae0 | 2e 6f 72 67 2f 64 6f 63 2f 68 74 6d 6c 2f 72 66 63 34 33 30 33 00 45 61 63 68 20 3a 61 62 62 72 | .org/doc/html/rfc4303.Each.:abbr |
c1b00 | 3a 60 41 53 20 28 41 75 74 6f 6e 6f 6d 6f 75 73 20 53 79 73 74 65 6d 29 60 20 68 61 73 20 61 6e | :`AS.(Autonomous.System)`.has.an |
c1b20 | 20 69 64 65 6e 74 69 66 79 69 6e 67 20 6e 75 6d 62 65 72 20 61 73 73 6f 63 69 61 74 65 64 20 77 | .identifying.number.associated.w |
c1b40 | 69 74 68 20 69 74 20 63 61 6c 6c 65 64 20 61 6e 20 3a 61 62 62 72 3a 60 41 53 4e 20 28 41 75 74 | ith.it.called.an.:abbr:`ASN.(Aut |
c1b60 | 6f 6e 6f 6d 6f 75 73 20 53 79 73 74 65 6d 20 4e 75 6d 62 65 72 29 60 2e 20 54 68 69 73 20 69 73 | onomous.System.Number)`..This.is |
c1b80 | 20 61 20 74 77 6f 20 6f 63 74 65 74 20 76 61 6c 75 65 20 72 61 6e 67 69 6e 67 20 69 6e 20 76 61 | .a.two.octet.value.ranging.in.va |
c1ba0 | 6c 75 65 20 66 72 6f 6d 20 31 20 74 6f 20 36 35 35 33 35 2e 20 54 68 65 20 41 53 20 6e 75 6d 62 | lue.from.1.to.65535..The.AS.numb |
c1bc0 | 65 72 73 20 36 34 35 31 32 20 74 68 72 6f 75 67 68 20 36 35 35 33 35 20 61 72 65 20 64 65 66 69 | ers.64512.through.65535.are.defi |
c1be0 | 6e 65 64 20 61 73 20 70 72 69 76 61 74 65 20 41 53 20 6e 75 6d 62 65 72 73 2e 20 50 72 69 76 61 | ned.as.private.AS.numbers..Priva |
c1c00 | 74 65 20 41 53 20 6e 75 6d 62 65 72 73 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 64 76 65 72 74 | te.AS.numbers.must.not.be.advert |
c1c20 | 69 73 65 64 20 6f 6e 20 74 68 65 20 67 6c 6f 62 61 6c 20 49 6e 74 65 72 6e 65 74 2e 20 54 68 65 | ised.on.the.global.Internet..The |
c1c40 | 20 32 2d 62 79 74 65 20 41 53 20 6e 75 6d 62 65 72 20 72 61 6e 67 65 20 68 61 73 20 62 65 65 6e | .2-byte.AS.number.range.has.been |
c1c60 | 20 65 78 68 61 75 73 74 65 64 2e 20 34 2d 62 79 74 65 20 41 53 20 6e 75 6d 62 65 72 73 20 61 72 | .exhausted..4-byte.AS.numbers.ar |
c1c80 | 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 36 37 39 33 60 2c 20 61 6e 64 20 | e.specified.in.:rfc:`6793`,.and. |
c1ca0 | 70 72 6f 76 69 64 65 20 61 20 70 6f 6f 6c 20 6f 66 20 34 32 39 34 39 36 37 32 39 36 20 41 53 20 | provide.a.pool.of.4294967296.AS. |
c1cc0 | 6e 75 6d 62 65 72 73 2e 00 45 61 63 68 20 4e 65 74 66 69 6c 74 65 72 20 63 6f 6e 6e 65 63 74 69 | numbers..Each.Netfilter.connecti |
c1ce0 | 6f 6e 20 69 73 20 75 6e 69 71 75 65 6c 79 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 61 20 28 | on.is.uniquely.identified.by.a.( |
c1d00 | 6c 61 79 65 72 2d 33 20 70 72 6f 74 6f 63 6f 6c 2c 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 | layer-3.protocol,.source.address |
c1d20 | 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2c 20 6c 61 79 65 72 2d 34 20 70 | ,.destination.address,.layer-4.p |
c1d40 | 72 6f 74 6f 63 6f 6c 2c 20 6c 61 79 65 72 2d 34 20 6b 65 79 29 20 74 75 70 6c 65 2e 20 54 68 65 | rotocol,.layer-4.key).tuple..The |
c1d60 | 20 6c 61 79 65 72 2d 34 20 6b 65 79 20 64 65 70 65 6e 64 73 20 6f 6e 20 74 68 65 20 74 72 61 6e | .layer-4.key.depends.on.the.tran |
c1d80 | 73 70 6f 72 74 20 70 72 6f 74 6f 63 6f 6c 3b 20 66 6f 72 20 54 43 50 2f 55 44 50 20 69 74 20 69 | sport.protocol;.for.TCP/UDP.it.i |
c1da0 | 73 20 74 68 65 20 70 6f 72 74 20 6e 75 6d 62 65 72 73 2c 20 66 6f 72 20 74 75 6e 6e 65 6c 73 20 | s.the.port.numbers,.for.tunnels. |
c1dc0 | 69 74 20 63 61 6e 20 62 65 20 74 68 65 69 72 20 74 75 6e 6e 65 6c 20 49 44 2c 20 62 75 74 20 6f | it.can.be.their.tunnel.ID,.but.o |
c1de0 | 74 68 65 72 77 69 73 65 20 69 73 20 6a 75 73 74 20 7a 65 72 6f 2c 20 61 73 20 69 66 20 69 74 20 | therwise.is.just.zero,.as.if.it. |
c1e00 | 77 65 72 65 20 6e 6f 74 20 70 61 72 74 20 6f 66 20 74 68 65 20 74 75 70 6c 65 2e 20 54 6f 20 62 | were.not.part.of.the.tuple..To.b |
c1e20 | 65 20 61 62 6c 65 20 74 6f 20 69 6e 73 70 65 63 74 20 74 68 65 20 54 43 50 20 70 6f 72 74 20 69 | e.able.to.inspect.the.TCP.port.i |
c1e40 | 6e 20 61 6c 6c 20 63 61 73 65 73 2c 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 62 65 20 6d 61 6e | n.all.cases,.packets.will.be.man |
c1e60 | 64 61 74 6f 72 69 6c 79 20 64 65 66 72 61 67 6d 65 6e 74 65 64 2e 00 45 61 63 68 20 56 58 4c 41 | datorily.defragmented..Each.VXLA |
c1e80 | 4e 20 73 65 67 6d 65 6e 74 20 69 73 20 69 64 65 6e 74 69 66 69 65 64 20 74 68 72 6f 75 67 68 20 | N.segment.is.identified.through. |
c1ea0 | 61 20 32 34 2d 62 69 74 20 73 65 67 6d 65 6e 74 20 49 44 2c 20 74 65 72 6d 65 64 20 74 68 65 20 | a.24-bit.segment.ID,.termed.the. |
c1ec0 | 3a 61 62 62 72 3a 60 56 4e 49 20 28 56 58 4c 41 4e 20 4e 65 74 77 6f 72 6b 20 49 64 65 6e 74 69 | :abbr:`VNI.(VXLAN.Network.Identi |
c1ee0 | 66 69 65 72 20 28 6f 72 20 56 58 4c 41 4e 20 53 65 67 6d 65 6e 74 20 49 44 29 29 60 2c 20 54 68 | fier.(or.VXLAN.Segment.ID))`,.Th |
c1f00 | 69 73 20 61 6c 6c 6f 77 73 20 75 70 20 74 6f 20 31 36 4d 20 56 58 4c 41 4e 20 73 65 67 6d 65 6e | is.allows.up.to.16M.VXLAN.segmen |
c1f20 | 74 73 20 74 6f 20 63 6f 65 78 69 73 74 20 77 69 74 68 69 6e 20 74 68 65 20 73 61 6d 65 20 61 64 | ts.to.coexist.within.the.same.ad |
c1f40 | 6d 69 6e 69 73 74 72 61 74 69 76 65 20 64 6f 6d 61 69 6e 2e 00 45 61 63 68 20 62 72 69 64 67 65 | ministrative.domain..Each.bridge |
c1f60 | 20 68 61 73 20 61 20 72 65 6c 61 74 69 76 65 20 70 72 69 6f 72 69 74 79 20 61 6e 64 20 63 6f 73 | .has.a.relative.priority.and.cos |
c1f80 | 74 2e 20 45 61 63 68 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 73 73 6f 63 69 61 74 65 64 20 | t..Each.interface.is.associated. |
c1fa0 | 77 69 74 68 20 61 20 70 6f 72 74 20 28 6e 75 6d 62 65 72 29 20 69 6e 20 74 68 65 20 53 54 50 20 | with.a.port.(number).in.the.STP. |
c1fc0 | 63 6f 64 65 2e 20 45 61 63 68 20 68 61 73 20 61 20 70 72 69 6f 72 69 74 79 20 61 6e 64 20 61 20 | code..Each.has.a.priority.and.a. |
c1fe0 | 63 6f 73 74 2c 20 74 68 61 74 20 69 73 20 75 73 65 64 20 74 6f 20 64 65 63 69 64 65 20 77 68 69 | cost,.that.is.used.to.decide.whi |
c2000 | 63 68 20 69 73 20 74 68 65 20 73 68 6f 72 74 65 73 74 20 70 61 74 68 20 74 6f 20 66 6f 72 77 61 | ch.is.the.shortest.path.to.forwa |
c2020 | 72 64 20 61 20 70 61 63 6b 65 74 2e 20 54 68 65 20 6c 6f 77 65 73 74 20 63 6f 73 74 20 70 61 74 | rd.a.packet..The.lowest.cost.pat |
c2040 | 68 20 69 73 20 61 6c 77 61 79 73 20 75 73 65 64 20 75 6e 6c 65 73 73 20 74 68 65 20 6f 74 68 65 | h.is.always.used.unless.the.othe |
c2060 | 72 20 70 61 74 68 20 69 73 20 64 6f 77 6e 2e 20 49 66 20 79 6f 75 20 68 61 76 65 20 6d 75 6c 74 | r.path.is.down..If.you.have.mult |
c2080 | 69 70 6c 65 20 62 72 69 64 67 65 73 20 61 6e 64 20 69 6e 74 65 72 66 61 63 65 73 20 74 68 65 6e | iple.bridges.and.interfaces.then |
c20a0 | 20 79 6f 75 20 6d 61 79 20 6e 65 65 64 20 74 6f 20 61 64 6a 75 73 74 20 74 68 65 20 70 72 69 6f | .you.may.need.to.adjust.the.prio |
c20c0 | 72 69 74 69 65 73 20 74 6f 20 61 63 68 69 65 76 65 20 6f 70 74 69 6d 75 6d 20 70 65 72 66 6f 72 | rities.to.achieve.optimum.perfor |
c20e0 | 6d 61 6e 63 65 2e 00 45 61 63 68 20 62 72 6f 61 64 63 61 73 74 20 72 65 6c 61 79 20 69 6e 73 74 | mance..Each.broadcast.relay.inst |
c2100 | 61 6e 63 65 20 63 61 6e 20 62 65 20 69 6e 64 69 76 69 64 75 61 6c 6c 79 20 64 69 73 61 62 6c 65 | ance.can.be.individually.disable |
c2120 | 64 20 77 69 74 68 6f 75 74 20 64 65 6c 65 74 69 6e 67 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 | d.without.deleting.the.configure |
c2140 | 64 20 6e 6f 64 65 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f | d.node.by.using.the.following.co |
c2160 | 6d 6d 61 6e 64 3a 00 45 61 63 68 20 63 6c 61 73 73 20 63 61 6e 20 68 61 76 65 20 61 20 67 75 61 | mmand:.Each.class.can.have.a.gua |
c2180 | 72 61 6e 74 65 65 64 20 70 61 72 74 20 6f 66 20 74 68 65 20 74 6f 74 61 6c 20 62 61 6e 64 77 69 | ranteed.part.of.the.total.bandwi |
c21a0 | 64 74 68 20 64 65 66 69 6e 65 64 20 66 6f 72 20 74 68 65 20 77 68 6f 6c 65 20 70 6f 6c 69 63 79 | dth.defined.for.the.whole.policy |
c21c0 | 2c 20 73 6f 20 61 6c 6c 20 74 68 6f 73 65 20 73 68 61 72 65 73 20 74 6f 67 65 74 68 65 72 20 73 | ,.so.all.those.shares.together.s |
c21e0 | 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 68 69 67 68 65 72 20 74 68 61 6e 20 74 68 65 20 70 6f 6c | hould.not.be.higher.than.the.pol |
c2200 | 69 63 79 27 73 20 77 68 6f 6c 65 20 62 61 6e 64 77 69 64 74 68 2e 00 45 61 63 68 20 63 6c 61 73 | icy's.whole.bandwidth..Each.clas |
c2220 | 73 20 69 73 20 61 73 73 69 67 6e 65 64 20 61 20 64 65 66 69 63 69 74 20 63 6f 75 6e 74 65 72 20 | s.is.assigned.a.deficit.counter. |
c2240 | 28 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 62 79 74 65 73 20 74 68 61 74 20 61 20 66 6c 6f 77 | (the.number.of.bytes.that.a.flow |
c2260 | 20 69 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 77 68 65 6e 20 69 74 20 | .is.allowed.to.transmit.when.it. |
c2280 | 69 73 20 69 74 73 20 74 75 72 6e 29 20 69 6e 69 74 69 61 6c 69 7a 65 64 20 74 6f 20 71 75 61 6e | is.its.turn).initialized.to.quan |
c22a0 | 74 75 6d 2e 20 51 75 61 6e 74 75 6d 20 69 73 20 61 20 70 61 72 61 6d 65 74 65 72 20 79 6f 75 20 | tum..Quantum.is.a.parameter.you. |
c22c0 | 63 6f 6e 66 69 67 75 72 65 20 77 68 69 63 68 20 61 63 74 73 20 6c 69 6b 65 20 61 20 63 72 65 64 | configure.which.acts.like.a.cred |
c22e0 | 69 74 20 6f 66 20 66 69 78 20 62 79 74 65 73 20 74 68 65 20 63 6f 75 6e 74 65 72 20 72 65 63 65 | it.of.fix.bytes.the.counter.rece |
c2300 | 69 76 65 73 20 6f 6e 20 65 61 63 68 20 72 6f 75 6e 64 2e 20 54 68 65 6e 20 74 68 65 20 52 6f 75 | ives.on.each.round..Then.the.Rou |
c2320 | 6e 64 2d 52 6f 62 69 6e 20 70 6f 6c 69 63 79 20 73 74 61 72 74 73 20 6d 6f 76 69 6e 67 20 69 74 | nd-Robin.policy.starts.moving.it |
c2340 | 73 20 52 6f 75 6e 64 20 52 6f 62 69 6e 20 70 6f 69 6e 74 65 72 20 74 68 72 6f 75 67 68 20 74 68 | s.Round.Robin.pointer.through.th |
c2360 | 65 20 71 75 65 75 65 73 2e 20 49 66 20 74 68 65 20 64 65 66 69 63 69 74 20 63 6f 75 6e 74 65 72 | e.queues..If.the.deficit.counter |
c2380 | 20 69 73 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 74 68 65 20 70 61 63 6b 65 74 27 73 20 73 69 | .is.greater.than.the.packet's.si |
c23a0 | 7a 65 20 61 74 20 74 68 65 20 68 65 61 64 20 6f 66 20 74 68 65 20 71 75 65 75 65 2c 20 74 68 69 | ze.at.the.head.of.the.queue,.thi |
c23c0 | 73 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 61 6e 64 20 74 68 65 20 76 61 | s.packet.will.be.sent.and.the.va |
c23e0 | 6c 75 65 20 6f 66 20 74 68 65 20 63 6f 75 6e 74 65 72 20 77 69 6c 6c 20 62 65 20 64 65 63 72 65 | lue.of.the.counter.will.be.decre |
c2400 | 6d 65 6e 74 65 64 20 62 79 20 74 68 65 20 70 61 63 6b 65 74 20 73 69 7a 65 2e 20 54 68 65 6e 2c | mented.by.the.packet.size..Then, |
c2420 | 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 6e 65 78 74 20 70 61 63 6b 65 74 20 77 69 6c | .the.size.of.the.next.packet.wil |
c2440 | 6c 20 62 65 20 63 6f 6d 70 61 72 65 64 20 74 6f 20 74 68 65 20 63 6f 75 6e 74 65 72 20 76 61 6c | l.be.compared.to.the.counter.val |
c2460 | 75 65 20 61 67 61 69 6e 2c 20 72 65 70 65 61 74 69 6e 67 20 74 68 65 20 70 72 6f 63 65 73 73 2e | ue.again,.repeating.the.process. |
c2480 | 20 4f 6e 63 65 20 74 68 65 20 71 75 65 75 65 20 69 73 20 65 6d 70 74 79 20 6f 72 20 74 68 65 20 | .Once.the.queue.is.empty.or.the. |
c24a0 | 76 61 6c 75 65 20 6f 66 20 74 68 65 20 63 6f 75 6e 74 65 72 20 69 73 20 69 6e 73 75 66 66 69 63 | value.of.the.counter.is.insuffic |
c24c0 | 69 65 6e 74 2c 20 74 68 65 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 70 6f 69 6e 74 65 72 20 77 69 | ient,.the.Round-Robin.pointer.wi |
c24e0 | 6c 6c 20 6d 6f 76 65 20 74 6f 20 74 68 65 20 6e 65 78 74 20 71 75 65 75 65 2e 20 49 66 20 74 68 | ll.move.to.the.next.queue..If.th |
c2500 | 65 20 71 75 65 75 65 20 69 73 20 65 6d 70 74 79 2c 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 | e.queue.is.empty,.the.value.of.t |
c2520 | 68 65 20 64 65 66 69 63 69 74 20 63 6f 75 6e 74 65 72 20 69 73 20 72 65 73 65 74 20 74 6f 20 30 | he.deficit.counter.is.reset.to.0 |
c2540 | 2e 00 45 61 63 68 20 64 79 6e 61 6d 69 63 20 4e 48 53 20 77 69 6c 6c 20 67 65 74 20 61 20 70 65 | ..Each.dynamic.NHS.will.get.a.pe |
c2560 | 65 72 20 65 6e 74 72 79 20 77 69 74 68 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6e 65 74 | er.entry.with.the.configured.net |
c2580 | 77 6f 72 6b 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 64 69 73 63 6f 76 65 72 65 64 20 | work.address.and.the.discovered. |
c25a0 | 4e 42 4d 41 20 61 64 64 72 65 73 73 2e 00 45 61 63 68 20 68 65 61 6c 74 68 20 63 68 65 63 6b 20 | NBMA.address..Each.health.check. |
c25c0 | 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 69 74 73 20 6f 77 6e 20 74 65 73 74 2c 20 74 | is.configured.in.its.own.test,.t |
c25e0 | 65 73 74 73 20 61 72 65 20 6e 75 6d 62 65 72 65 64 20 61 6e 64 20 70 72 6f 63 65 73 73 65 64 20 | ests.are.numbered.and.processed. |
c2600 | 69 6e 20 6e 75 6d 65 72 69 63 20 6f 72 64 65 72 2e 20 46 6f 72 20 6d 75 6c 74 69 20 74 61 72 67 | in.numeric.order..For.multi.targ |
c2620 | 65 74 20 68 65 61 6c 74 68 20 63 68 65 63 6b 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 74 65 73 74 | et.health.checking.multiple.test |
c2640 | 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 3a 00 45 61 63 68 20 69 6e 64 69 76 69 64 75 61 | s.can.be.defined:.Each.individua |
c2660 | 6c 20 63 6f 6e 66 69 67 75 72 65 64 20 63 6f 6e 73 6f 6c 65 2d 73 65 72 76 65 72 20 64 65 76 69 | l.configured.console-server.devi |
c2680 | 63 65 20 63 61 6e 20 62 65 20 64 69 72 65 63 74 6c 79 20 65 78 70 6f 73 65 64 20 74 6f 20 74 68 | ce.can.be.directly.exposed.to.th |
c26a0 | 65 20 6f 75 74 73 69 64 65 20 77 6f 72 6c 64 2e 20 41 20 75 73 65 72 20 63 61 6e 20 64 69 72 65 | e.outside.world..A.user.can.dire |
c26c0 | 63 74 6c 79 20 63 6f 6e 6e 65 63 74 20 76 69 61 20 53 53 48 20 74 6f 20 74 68 65 20 63 6f 6e 66 | ctly.connect.via.SSH.to.the.conf |
c26e0 | 69 67 75 72 65 64 20 70 6f 72 74 2e 00 45 61 63 68 20 6e 6f 64 65 20 28 48 75 62 20 61 6e 64 20 | igured.port..Each.node.(Hub.and. |
c2700 | 53 70 6f 6b 65 29 20 75 73 65 73 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 | Spoke).uses.an.IP.address.from.t |
c2720 | 68 65 20 6e 65 74 77 6f 72 6b 20 31 37 32 2e 31 36 2e 32 35 33 2e 31 32 38 2f 32 39 2e 00 45 61 | he.network.172.16.253.128/29..Ea |
c2740 | 63 68 20 6f 66 20 74 68 65 20 69 6e 73 74 61 6c 6c 20 63 6f 6d 6d 61 6e 64 20 73 68 6f 75 6c 64 | ch.of.the.install.command.should |
c2760 | 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | .be.applied.to.the.configuration |
c2780 | 20 61 6e 64 20 63 6f 6d 6d 69 74 65 64 20 62 65 66 6f 72 65 20 75 73 69 6e 67 20 75 6e 64 65 72 | .and.commited.before.using.under |
c27a0 | 20 74 68 65 20 6f 70 65 6e 63 6f 6e 6e 65 63 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 | .the.openconnect.configuration:. |
c27c0 | 45 61 63 68 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 70 65 65 72 20 68 61 73 20 74 68 65 20 6e | Each.site-to-site.peer.has.the.n |
c27e0 | 65 78 74 20 6f 70 74 69 6f 6e 73 3a 00 45 65 6e 61 62 6c 65 73 20 74 68 65 20 47 65 6e 65 72 69 | ext.options:.Eenables.the.Generi |
c2800 | 63 20 50 72 6f 74 6f 63 6f 6c 20 65 78 74 65 6e 73 69 6f 6e 20 28 56 58 4c 41 4e 2d 47 50 45 29 | c.Protocol.extension.(VXLAN-GPE) |
c2820 | 2e 20 43 75 72 72 65 6e 74 6c 79 2c 20 74 68 69 73 20 69 73 20 6f 6e 6c 79 20 73 75 70 70 6f 72 | ..Currently,.this.is.only.suppor |
c2840 | 74 65 64 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6b | ted.together.with.the.external.k |
c2860 | 65 79 77 6f 72 64 2e 00 45 6d 61 69 6c 20 61 64 64 72 65 73 73 20 74 6f 20 61 73 73 6f 63 69 61 | eyword..Email.address.to.associa |
c2880 | 74 65 20 77 69 74 68 20 63 65 72 74 69 66 69 63 61 74 65 00 45 6d 61 69 6c 20 75 73 65 64 20 66 | te.with.certificate.Email.used.f |
c28a0 | 6f 72 20 72 65 67 69 73 74 72 61 74 69 6f 6e 20 61 6e 64 20 72 65 63 6f 76 65 72 79 20 63 6f 6e | or.registration.and.recovery.con |
c28c0 | 74 61 63 74 2e 00 45 6d 62 65 64 64 69 6e 67 20 6f 6e 65 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 | tact..Embedding.one.policy.into. |
c28e0 | 61 6e 6f 74 68 65 72 20 6f 6e 65 00 45 6d 65 72 67 65 6e 63 79 00 45 6e 61 62 6c 65 20 3a 61 62 | another.one.Emergency.Enable.:ab |
c2900 | 62 72 3a 60 42 4d 50 20 28 42 47 50 20 4d 6f 6e 69 74 6f 72 69 6e 67 20 50 72 6f 74 6f 63 6f 6c | br:`BMP.(BGP.Monitoring.Protocol |
c2920 | 29 60 20 73 75 70 70 6f 72 74 00 45 6e 61 62 6c 65 20 42 46 44 20 66 6f 72 20 49 53 49 53 20 6f | )`.support.Enable.BFD.for.ISIS.o |
c2940 | 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 00 45 6e 61 62 6c 65 20 42 46 44 20 66 6f 72 20 4f 53 | n.an.interface.Enable.BFD.for.OS |
c2960 | 50 46 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 00 45 6e 61 62 6c 65 20 42 46 44 20 66 6f | PF.on.an.interface.Enable.BFD.fo |
c2980 | 72 20 4f 53 50 46 76 33 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 00 45 6e 61 62 6c 65 20 | r.OSPFv3.on.an.interface.Enable. |
c29a0 | 42 46 44 20 69 6e 20 42 47 50 00 45 6e 61 62 6c 65 20 42 46 44 20 69 6e 20 49 53 49 53 00 45 6e | BFD.in.BGP.Enable.BFD.in.ISIS.En |
c29c0 | 61 62 6c 65 20 42 46 44 20 69 6e 20 4f 53 50 46 00 45 6e 61 62 6c 65 20 42 46 44 20 6f 6e 20 61 | able.BFD.in.OSPF.Enable.BFD.on.a |
c29e0 | 20 42 47 50 20 70 65 65 72 20 67 72 6f 75 70 00 45 6e 61 62 6c 65 20 42 46 44 20 6f 6e 20 61 20 | .BGP.peer.group.Enable.BFD.on.a. |
c2a00 | 73 69 6e 67 6c 65 20 42 47 50 20 6e 65 69 67 68 62 6f 72 00 45 6e 61 62 6c 65 20 44 48 43 50 20 | single.BGP.neighbor.Enable.DHCP. |
c2a20 | 66 61 69 6c 6f 76 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 74 68 69 73 20 | failover.configuration.for.this. |
c2a40 | 61 64 64 72 65 73 73 20 70 6f 6f 6c 2e 00 45 6e 61 62 6c 65 20 48 54 2d 64 65 6c 61 79 65 64 20 | address.pool..Enable.HT-delayed. |
c2a60 | 42 6c 6f 63 6b 20 41 63 6b 20 60 60 5b 44 45 4c 41 59 45 44 2d 42 41 5d 60 60 00 45 6e 61 62 6c | Block.Ack.``[DELAYED-BA]``.Enabl |
c2a80 | 65 20 49 43 4d 50 20 52 6f 75 74 65 72 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c | e.ICMP.Router.Discovery.Protocol |
c2aa0 | 20 73 75 70 70 6f 72 74 00 45 6e 61 62 6c 65 20 49 47 4d 50 20 61 6e 64 20 4d 4c 44 20 71 75 65 | .support.Enable.IGMP.and.MLD.que |
c2ac0 | 72 69 65 72 2e 00 45 6e 61 62 6c 65 20 49 47 4d 50 20 61 6e 64 20 4d 4c 44 20 73 6e 6f 6f 70 69 | rier..Enable.IGMP.and.MLD.snoopi |
c2ae0 | 6e 67 2e 00 45 6e 61 62 6c 65 20 49 50 20 66 6f 72 77 61 72 64 69 6e 67 20 6f 6e 20 63 6c 69 65 | ng..Enable.IP.forwarding.on.clie |
c2b00 | 6e 74 00 45 6e 61 62 6c 65 20 49 53 2d 49 53 00 45 6e 61 62 6c 65 20 49 53 2d 49 53 20 61 6e 64 | nt.Enable.IS-IS.Enable.IS-IS.and |
c2b20 | 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 00 45 6e 61 62 6c 65 20 | .IGP-LDP.synchronization.Enable. |
c2b40 | 49 53 2d 49 53 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 20 72 6f 75 74 65 73 20 6e 6f | IS-IS.and.redistribute.routes.no |
c2b60 | 74 20 6e 61 74 69 76 65 6c 79 20 69 6e 20 49 53 2d 49 53 00 45 6e 61 62 6c 65 20 49 53 2d 49 53 | t.natively.in.IS-IS.Enable.IS-IS |
c2b80 | 20 77 69 74 68 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 28 45 78 70 65 72 69 6d 65 6e | .with.Segment.Routing.(Experimen |
c2ba0 | 74 61 6c 29 00 45 6e 61 62 6c 65 20 4c 2d 53 49 47 20 54 58 4f 50 20 70 72 6f 74 65 63 74 69 6f | tal).Enable.L-SIG.TXOP.protectio |
c2bc0 | 6e 20 63 61 70 61 62 69 6c 69 74 79 00 45 6e 61 62 6c 65 20 4c 44 50 43 20 28 4c 6f 77 20 44 65 | n.capability.Enable.LDPC.(Low.De |
c2be0 | 6e 73 69 74 79 20 50 61 72 69 74 79 20 43 68 65 63 6b 29 20 63 6f 64 69 6e 67 20 63 61 70 61 62 | nsity.Parity.Check).coding.capab |
c2c00 | 69 6c 69 74 79 00 45 6e 61 62 6c 65 20 4c 44 50 43 20 63 6f 64 69 6e 67 20 63 61 70 61 62 69 6c | ility.Enable.LDPC.coding.capabil |
c2c20 | 69 74 79 00 45 6e 61 62 6c 65 20 4c 4c 44 50 20 73 65 72 76 69 63 65 00 45 6e 61 62 6c 65 20 4f | ity.Enable.LLDP.service.Enable.O |
c2c40 | 53 50 46 00 45 6e 61 62 6c 65 20 4f 53 50 46 20 61 6e 64 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 | SPF.Enable.OSPF.and.IGP-LDP.sync |
c2c60 | 68 72 6f 6e 69 7a 61 74 69 6f 6e 3a 00 45 6e 61 62 6c 65 20 4f 53 50 46 20 77 69 74 68 20 53 65 | hronization:.Enable.OSPF.with.Se |
c2c80 | 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 28 45 78 70 65 72 69 6d 65 6e 74 61 6c 29 3a 00 45 6e | gment.Routing.(Experimental):.En |
c2ca0 | 61 62 6c 65 20 4f 53 50 46 20 77 69 74 68 20 72 6f 75 74 65 20 72 65 64 69 73 74 72 69 62 75 74 | able.OSPF.with.route.redistribut |
c2cc0 | 69 6f 6e 20 6f 66 20 74 68 65 20 6c 6f 6f 70 62 61 63 6b 20 61 6e 64 20 64 65 66 61 75 6c 74 20 | ion.of.the.loopback.and.default. |
c2ce0 | 6f 72 69 67 69 6e 61 74 65 3a 00 45 6e 61 62 6c 65 20 4f 54 50 20 32 46 41 20 66 6f 72 20 75 73 | originate:.Enable.OTP.2FA.for.us |
c2d00 | 65 72 20 60 75 73 65 72 6e 61 6d 65 60 20 77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74 69 | er.`username`.with.default.setti |
c2d20 | 6e 67 73 2c 20 75 73 69 6e 67 20 74 68 65 20 42 41 53 45 33 32 20 65 6e 63 6f 64 65 64 20 32 46 | ngs,.using.the.BASE32.encoded.2F |
c2d40 | 41 2f 4d 46 41 20 6b 65 79 20 73 70 65 63 69 66 69 65 64 20 62 79 20 60 3c 6b 65 79 3e 60 2e 00 | A/MFA.key.specified.by.`<key>`.. |
c2d60 | 45 6e 61 62 6c 65 20 4f 70 65 6e 56 50 4e 20 44 61 74 61 20 43 68 61 6e 6e 65 6c 20 4f 66 66 6c | Enable.OpenVPN.Data.Channel.Offl |
c2d80 | 6f 61 64 20 66 65 61 74 75 72 65 20 62 79 20 6c 6f 61 64 69 6e 67 20 74 68 65 20 61 70 70 72 6f | oad.feature.by.loading.the.appro |
c2da0 | 70 72 69 61 74 65 20 6b 65 72 6e 65 6c 20 6d 6f 64 75 6c 65 2e 00 45 6e 61 62 6c 65 20 50 52 45 | priate.kernel.module..Enable.PRE |
c2dc0 | 46 36 34 20 6f 70 74 69 6f 6e 20 61 73 20 6f 75 74 6c 69 6e 65 64 20 69 6e 20 3a 72 66 63 3a 60 | F64.option.as.outlined.in.:rfc:` |
c2de0 | 38 37 38 31 60 2e 00 45 6e 61 62 6c 65 20 53 4e 4d 50 00 45 6e 61 62 6c 65 20 53 4e 4d 50 20 71 | 8781`..Enable.SNMP.Enable.SNMP.q |
c2e00 | 75 65 72 69 65 73 20 6f 66 20 74 68 65 20 4c 4c 44 50 20 64 61 74 61 62 61 73 65 00 45 6e 61 62 | ueries.of.the.LLDP.database.Enab |
c2e20 | 6c 65 20 53 4e 4d 50 20 73 75 70 70 6f 72 74 20 66 6f 72 20 61 6e 20 69 6e 64 69 76 69 64 75 61 | le.SNMP.support.for.an.individua |
c2e40 | 6c 20 72 6f 75 74 69 6e 67 20 64 61 65 6d 6f 6e 2e 00 45 6e 61 62 6c 65 20 53 54 50 00 45 6e 61 | l.routing.daemon..Enable.STP.Ena |
c2e60 | 62 6c 65 20 54 46 54 50 20 73 65 72 76 69 63 65 20 62 79 20 73 70 65 63 69 66 79 69 6e 67 20 74 | ble.TFTP.service.by.specifying.t |
c2e80 | 68 65 20 60 3c 64 69 72 65 63 74 6f 72 79 3e 60 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 75 | he.`<directory>`.which.will.be.u |
c2ea0 | 73 65 64 20 74 6f 20 73 65 72 76 65 20 66 69 6c 65 73 2e 00 45 6e 61 62 6c 65 20 56 48 54 20 54 | sed.to.serve.files..Enable.VHT.T |
c2ec0 | 58 4f 50 20 50 6f 77 65 72 20 53 61 76 65 20 4d 6f 64 65 00 45 6e 61 62 6c 65 20 56 4c 41 4e 2d | XOP.Power.Save.Mode.Enable.VLAN- |
c2ee0 | 41 77 61 72 65 20 42 72 69 64 67 65 00 45 6e 61 62 6c 65 20 61 75 74 6f 6d 61 74 69 63 20 72 65 | Aware.Bridge.Enable.automatic.re |
c2f00 | 64 69 72 65 63 74 20 66 72 6f 6d 20 68 74 74 70 20 74 6f 20 68 74 74 70 73 2e 00 45 6e 61 62 6c | direct.from.http.to.https..Enabl |
c2f20 | 65 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 73 68 6f 72 74 63 75 74 20 72 6f 75 74 65 73 2e 00 45 | e.creation.of.shortcut.routes..E |
c2f40 | 6e 61 62 6c 65 20 64 69 66 66 65 72 65 6e 74 20 74 79 70 65 73 20 6f 66 20 68 61 72 64 77 61 72 | nable.different.types.of.hardwar |
c2f60 | 65 20 6f 66 66 6c 6f 61 64 69 6e 67 20 6f 6e 20 74 68 65 20 67 69 76 65 6e 20 4e 49 43 2e 00 45 | e.offloading.on.the.given.NIC..E |
c2f80 | 6e 61 62 6c 65 20 67 69 76 65 6e 20 6c 65 67 61 63 79 20 70 72 6f 74 6f 63 6f 6c 20 6f 6e 20 74 | nable.given.legacy.protocol.on.t |
c2fa0 | 68 69 73 20 4c 4c 44 50 20 69 6e 73 74 61 6e 63 65 2e 20 4c 65 67 61 63 79 20 70 72 6f 74 6f 63 | his.LLDP.instance..Legacy.protoc |
c2fc0 | 6f 6c 73 20 69 6e 63 6c 75 64 65 3a 00 45 6e 61 62 6c 65 20 6c 61 79 65 72 20 37 20 48 54 54 50 | ols.include:.Enable.layer.7.HTTP |
c2fe0 | 20 68 65 61 6c 74 68 20 63 68 65 63 6b 00 45 6e 61 62 6c 65 20 6c 6f 67 67 69 6e 67 20 66 6f 72 | .health.check.Enable.logging.for |
c3000 | 20 74 68 65 20 6d 61 74 63 68 65 64 20 70 61 63 6b 65 74 2e 20 49 66 20 74 68 69 73 20 63 6f 6e | .the.matched.packet..If.this.con |
c3020 | 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6e 6f 74 20 70 72 65 73 65 6e | figuration.command.is.not.presen |
c3040 | 74 2c 20 74 68 65 6e 20 6c 6f 67 20 69 73 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 00 45 6e 61 62 | t,.then.log.is.not.enabled..Enab |
c3060 | 6c 65 20 6f 72 20 44 69 73 61 62 6c 65 20 56 79 4f 53 20 74 6f 20 62 65 20 3a 72 66 63 3a 60 31 | le.or.Disable.VyOS.to.be.:rfc:`1 |
c3080 | 33 33 37 60 20 63 6f 6e 66 6f 72 6d 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 | 337`.conform..The.following.syst |
c30a0 | 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 45 6e | em.parameter.will.be.altered:.En |
c30c0 | 61 62 6c 65 20 6f 72 20 44 69 73 61 62 6c 65 20 69 66 20 56 79 4f 53 20 75 73 65 20 49 50 76 34 | able.or.Disable.if.VyOS.use.IPv4 |
c30e0 | 20 54 43 50 20 53 59 4e 20 43 6f 6f 6b 69 65 73 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 | .TCP.SYN.Cookies..The.following. |
c3100 | 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 | system.parameter.will.be.altered |
c3120 | 3a 00 45 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 6c 6f 67 67 69 6e 67 20 66 6f 72 20 | :.Enable.or.disable.logging.for. |
c3140 | 74 68 65 20 6d 61 74 63 68 65 64 20 70 61 63 6b 65 74 2e 00 45 6e 61 62 6c 65 20 6f 73 70 66 20 | the.matched.packet..Enable.ospf. |
c3160 | 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 73 65 74 20 61 73 73 6f 63 69 61 74 | on.an.interface.and.set.associat |
c3180 | 65 64 20 61 72 65 61 2e 00 45 6e 61 62 6c 65 20 70 6f 6c 69 63 79 20 66 6f 72 20 73 6f 75 72 63 | ed.area..Enable.policy.for.sourc |
c31a0 | 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 62 79 20 72 65 76 65 72 73 65 64 20 70 61 74 68 2c 20 61 | e.validation.by.reversed.path,.a |
c31c0 | 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 37 30 34 60 2e 20 43 75 72 72 | s.specified.in.:rfc:`3704`..Curr |
c31e0 | 65 6e 74 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 70 72 61 63 74 69 63 65 20 69 6e 20 3a 72 66 63 | ent.recommended.practice.in.:rfc |
c3200 | 3a 60 33 37 30 34 60 20 69 73 20 74 6f 20 65 6e 61 62 6c 65 20 73 74 72 69 63 74 20 6d 6f 64 65 | :`3704`.is.to.enable.strict.mode |
c3220 | 20 74 6f 20 70 72 65 76 65 6e 74 20 49 50 20 73 70 6f 6f 66 69 6e 67 20 66 72 6f 6d 20 44 44 6f | .to.prevent.IP.spoofing.from.DDo |
c3240 | 73 20 61 74 74 61 63 6b 73 2e 20 49 66 20 75 73 69 6e 67 20 61 73 79 6d 6d 65 74 72 69 63 20 72 | s.attacks..If.using.asymmetric.r |
c3260 | 6f 75 74 69 6e 67 20 6f 72 20 6f 74 68 65 72 20 63 6f 6d 70 6c 69 63 61 74 65 64 20 72 6f 75 74 | outing.or.other.complicated.rout |
c3280 | 69 6e 67 2c 20 74 68 65 6e 20 6c 6f 6f 73 65 20 6d 6f 64 65 20 69 73 20 72 65 63 6f 6d 6d 65 6e | ing,.then.loose.mode.is.recommen |
c32a0 | 64 65 64 2e 00 45 6e 61 62 6c 65 20 72 65 63 65 69 76 69 6e 67 20 50 50 44 55 20 75 73 69 6e 67 | ded..Enable.receiving.PPDU.using |
c32c0 | 20 53 54 42 43 20 28 53 70 61 63 65 20 54 69 6d 65 20 42 6c 6f 63 6b 20 43 6f 64 69 6e 67 29 00 | .STBC.(Space.Time.Block.Coding). |
c32e0 | 45 6e 61 62 6c 65 20 73 61 6d 70 6c 69 6e 67 20 6f 66 20 70 61 63 6b 65 74 73 2c 20 77 68 69 63 | Enable.sampling.of.packets,.whic |
c3300 | 68 20 77 69 6c 6c 20 62 65 20 74 72 61 6e 73 6d 69 74 74 65 64 20 74 6f 20 73 46 6c 6f 77 20 63 | h.will.be.transmitted.to.sFlow.c |
c3320 | 6f 6c 6c 65 63 74 6f 72 73 2e 00 45 6e 61 62 6c 65 20 73 65 6e 64 69 6e 67 20 50 50 44 55 20 75 | ollectors..Enable.sending.PPDU.u |
c3340 | 73 69 6e 67 20 53 54 42 43 20 28 53 70 61 63 65 20 54 69 6d 65 20 42 6c 6f 63 6b 20 43 6f 64 69 | sing.STBC.(Space.Time.Block.Codi |
c3360 | 6e 67 29 00 45 6e 61 62 6c 65 20 73 65 6e 64 69 6e 67 20 6f 66 20 43 69 73 63 6f 20 73 74 79 6c | ng).Enable.sending.of.Cisco.styl |
c3380 | 65 20 4e 48 52 50 20 54 72 61 66 66 69 63 20 49 6e 64 69 63 61 74 69 6f 6e 20 70 61 63 6b 65 74 | e.NHRP.Traffic.Indication.packet |
c33a0 | 73 2e 20 49 66 20 74 68 69 73 20 69 73 20 65 6e 61 62 6c 65 64 20 61 6e 64 20 6f 70 65 6e 6e 68 | s..If.this.is.enabled.and.opennh |
c33c0 | 72 70 20 64 65 74 65 63 74 73 20 61 20 66 6f 72 77 61 72 64 65 64 20 20 70 61 63 6b 65 74 2c 20 | rp.detects.a.forwarded..packet,. |
c33e0 | 69 74 20 77 69 6c 6c 20 73 65 6e 64 20 61 20 6d 65 73 73 61 67 65 20 74 6f 20 74 68 65 20 6f 72 | it.will.send.a.message.to.the.or |
c3400 | 69 67 69 6e 61 6c 20 73 65 6e 64 65 72 20 6f 66 20 74 68 65 20 70 61 63 6b 65 74 20 69 6e 73 74 | iginal.sender.of.the.packet.inst |
c3420 | 72 75 63 74 69 6e 67 20 69 74 20 74 6f 20 63 72 65 61 74 65 20 61 20 64 69 72 65 63 74 20 63 6f | ructing.it.to.create.a.direct.co |
c3440 | 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 20 54 | nnection.with.the.destination..T |
c3460 | 68 69 73 20 69 73 20 62 61 73 69 63 61 6c 6c 79 20 61 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 64 65 | his.is.basically.a.protocol.inde |
c3480 | 70 65 6e 64 65 6e 74 20 65 71 75 69 76 61 6c 65 6e 74 20 6f 66 20 49 43 4d 50 20 72 65 64 69 72 | pendent.equivalent.of.ICMP.redir |
c34a0 | 65 63 74 2e 00 45 6e 61 62 6c 65 20 73 70 61 6e 6e 69 6e 67 20 74 72 65 65 20 70 72 6f 74 6f 63 | ect..Enable.spanning.tree.protoc |
c34c0 | 6f 6c 2e 20 53 54 50 20 69 73 20 64 69 73 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 2e 00 | ol..STP.is.disabled.by.default.. |
c34e0 | 45 6e 61 62 6c 65 20 74 68 65 20 4f 70 61 71 75 65 2d 4c 53 41 20 63 61 70 61 62 69 6c 69 74 79 | Enable.the.Opaque-LSA.capability |
c3500 | 20 28 72 66 63 32 33 37 30 29 2c 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 74 72 61 6e 73 70 6f | .(rfc2370),.necessary.to.transpo |
c3520 | 72 74 20 6c 61 62 65 6c 20 6f 6e 20 49 47 50 00 45 6e 61 62 6c 65 20 74 68 69 73 20 66 65 61 74 | rt.label.on.IGP.Enable.this.feat |
c3540 | 75 72 65 20 63 61 75 73 65 73 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 72 65 73 65 74 2e 00 45 | ure.causes.an.interface.reset..E |
c3560 | 6e 61 62 6c 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 6f 66 20 4c 4c 44 50 20 69 6e 66 6f 72 | nable.transmission.of.LLDP.infor |
c3580 | 6d 61 74 69 6f 6e 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 20 59 | mation.on.given.`<interface>`..Y |
c35a0 | 6f 75 20 63 61 6e 20 61 6c 73 6f 20 73 61 79 20 60 60 61 6c 6c 60 60 20 68 65 72 65 20 73 6f 20 | ou.can.also.say.``all``.here.so. |
c35c0 | 4c 4c 44 50 20 69 73 20 74 75 72 6e 65 64 20 6f 6e 20 6f 6e 20 65 76 65 72 79 20 69 6e 74 65 72 | LLDP.is.turned.on.on.every.inter |
c35e0 | 66 61 63 65 2e 00 45 6e 61 62 6c 65 64 20 6f 6e 2d 64 65 6d 61 6e 64 20 50 50 50 6f 45 20 63 6f | face..Enabled.on-demand.PPPoE.co |
c3600 | 6e 6e 65 63 74 69 6f 6e 73 20 62 72 69 6e 67 20 75 70 20 74 68 65 20 6c 69 6e 6b 20 6f 6e 6c 79 | nnections.bring.up.the.link.only |
c3620 | 20 77 68 65 6e 20 74 72 61 66 66 69 63 20 6e 65 65 64 73 20 74 6f 20 70 61 73 73 20 74 68 69 73 | .when.traffic.needs.to.pass.this |
c3640 | 20 6c 69 6e 6b 2e 20 20 49 66 20 74 68 65 20 6c 69 6e 6b 20 66 61 69 6c 73 20 66 6f 72 20 61 6e | .link...If.the.link.fails.for.an |
c3660 | 79 20 72 65 61 73 6f 6e 2c 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 62 72 6f 75 67 68 74 20 62 61 | y.reason,.the.link.is.brought.ba |
c3680 | 63 6b 20 75 70 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 6f 6e 63 65 20 74 72 61 66 66 69 63 | ck.up.automatically.once.traffic |
c36a0 | 20 70 61 73 73 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 61 67 61 69 6e 2e 20 49 66 20 | .passes.the.interface.again..If. |
c36c0 | 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 6f 6e 2d 64 65 6d 61 6e 64 20 50 50 50 6f 45 | you.configure.an.on-demand.PPPoE |
c36e0 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 2c 20 79 6f 75 20 6d 75 73 74 20 61 6c 73 6f 20 63 6f 6e 66 69 | .connection,.you.must.also.confi |
c3700 | 67 75 72 65 20 74 68 65 20 69 64 6c 65 20 74 69 6d 65 6f 75 74 20 70 65 72 69 6f 64 2c 20 61 66 | gure.the.idle.timeout.period,.af |
c3720 | 74 65 72 20 77 68 69 63 68 20 61 6e 20 69 64 6c 65 20 50 50 50 6f 45 20 6c 69 6e 6b 20 77 69 6c | ter.which.an.idle.PPPoE.link.wil |
c3740 | 6c 20 62 65 20 64 69 73 63 6f 6e 6e 65 63 74 65 64 2e 20 41 20 6e 6f 6e 2d 7a 65 72 6f 20 69 64 | l.be.disconnected..A.non-zero.id |
c3760 | 6c 65 20 74 69 6d 65 6f 75 74 20 77 69 6c 6c 20 6e 65 76 65 72 20 64 69 73 63 6f 6e 6e 65 63 74 | le.timeout.will.never.disconnect |
c3780 | 20 74 68 65 20 6c 69 6e 6b 20 61 66 74 65 72 20 69 74 20 66 69 72 73 74 20 63 61 6d 65 20 75 70 | .the.link.after.it.first.came.up |
c37a0 | 2e 00 45 6e 61 62 6c 65 73 20 43 69 73 63 6f 20 73 74 79 6c 65 20 61 75 74 68 65 6e 74 69 63 61 | ..Enables.Cisco.style.authentica |
c37c0 | 74 69 6f 6e 20 6f 6e 20 4e 48 52 50 20 70 61 63 6b 65 74 73 2e 20 54 68 69 73 20 65 6d 62 65 64 | tion.on.NHRP.packets..This.embed |
c37e0 | 73 20 74 68 65 20 73 65 63 72 65 74 20 70 6c 61 69 6e 74 65 78 74 20 70 61 73 73 77 6f 72 64 20 | s.the.secret.plaintext.password. |
c3800 | 74 6f 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 4e 48 52 50 20 70 61 63 6b 65 74 73 2e 20 49 6e | to.the.outgoing.NHRP.packets..In |
c3820 | 63 6f 6d 69 6e 67 20 4e 48 52 50 20 70 61 63 6b 65 74 73 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 | coming.NHRP.packets.on.this.inte |
c3840 | 72 66 61 63 65 20 61 72 65 20 64 69 73 63 61 72 64 65 64 20 75 6e 6c 65 73 73 20 74 68 65 20 73 | rface.are.discarded.unless.the.s |
c3860 | 65 63 72 65 74 20 70 61 73 73 77 6f 72 64 20 69 73 20 70 72 65 73 65 6e 74 2e 20 4d 61 78 69 6d | ecret.password.is.present..Maxim |
c3880 | 75 6d 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 73 65 63 72 65 74 20 69 73 20 38 20 63 68 61 | um.length.of.the.secret.is.8.cha |
c38a0 | 72 61 63 74 65 72 73 2e 00 45 6e 61 62 6c 65 73 20 61 6e 20 4d 50 4c 53 20 6c 61 62 65 6c 20 74 | racters..Enables.an.MPLS.label.t |
c38c0 | 6f 20 62 65 20 61 74 74 61 63 68 65 64 20 74 6f 20 61 20 72 6f 75 74 65 20 65 78 70 6f 72 74 65 | o.be.attached.to.a.route.exporte |
c38e0 | 64 20 66 72 6f 6d 20 74 68 65 20 63 75 72 72 65 6e 74 20 75 6e 69 63 61 73 74 20 56 52 46 20 74 | d.from.the.current.unicast.VRF.t |
c3900 | 6f 20 56 50 4e 2e 20 49 66 20 74 68 65 20 76 61 6c 75 65 20 73 70 65 63 69 66 69 65 64 20 69 73 | o.VPN..If.the.value.specified.is |
c3920 | 20 61 75 74 6f 2c 20 74 68 65 20 6c 61 62 65 6c 20 76 61 6c 75 65 20 69 73 20 61 75 74 6f 6d 61 | .auto,.the.label.value.is.automa |
c3940 | 74 69 63 61 6c 6c 79 20 61 73 73 69 67 6e 65 64 20 66 72 6f 6d 20 61 20 70 6f 6f 6c 20 6d 61 69 | tically.assigned.from.a.pool.mai |
c3960 | 6e 74 61 69 6e 65 64 2e 00 45 6e 61 62 6c 65 73 20 62 61 6e 64 77 69 64 74 68 20 73 68 61 70 69 | ntained..Enables.bandwidth.shapi |
c3980 | 6e 67 20 76 69 61 20 52 41 44 49 55 53 2e 00 45 6e 61 62 6c 65 73 20 69 6d 70 6f 72 74 20 6f 72 | ng.via.RADIUS..Enables.import.or |
c39a0 | 20 65 78 70 6f 72 74 20 6f 66 20 72 6f 75 74 65 73 20 62 65 74 77 65 65 6e 20 74 68 65 20 63 75 | .export.of.routes.between.the.cu |
c39c0 | 72 72 65 6e 74 20 75 6e 69 63 61 73 74 20 56 52 46 20 61 6e 64 20 56 50 4e 2e 00 45 6e 61 62 6c | rrent.unicast.VRF.and.VPN..Enabl |
c39e0 | 65 73 20 74 68 65 20 47 65 6e 65 72 69 63 20 50 72 6f 74 6f 63 6f 6c 20 65 78 74 65 6e 73 69 6f | es.the.Generic.Protocol.extensio |
c3a00 | 6e 20 28 56 58 4c 41 4e 2d 47 50 45 29 2e 20 43 75 72 72 65 6e 74 6c 79 2c 20 74 68 69 73 20 69 | n.(VXLAN-GPE)..Currently,.this.i |
c3a20 | 73 20 6f 6e 6c 79 20 73 75 70 70 6f 72 74 65 64 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 74 | s.only.supported.together.with.t |
c3a40 | 68 65 20 65 78 74 65 72 6e 61 6c 20 6b 65 79 77 6f 72 64 2e 00 45 6e 61 62 6c 65 73 20 74 68 65 | he.external.keyword..Enables.the |
c3a60 | 20 65 63 68 6f 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 6d 6f 64 65 00 45 6e 61 62 6c 65 73 20 | .echo.transmission.mode.Enables. |
c3a80 | 74 68 65 20 72 6f 6f 74 20 70 61 72 74 69 74 69 6f 6e 20 61 75 74 6f 2d 65 78 74 65 6e 73 69 6f | the.root.partition.auto-extensio |
c3aa0 | 6e 20 61 6e 64 20 72 65 73 69 7a 65 73 20 74 6f 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 61 76 61 | n.and.resizes.to.the.maximum.ava |
c3ac0 | 69 6c 61 62 6c 65 20 73 70 61 63 65 20 6f 6e 20 73 79 73 74 65 6d 20 62 6f 6f 74 2e 00 45 6e 61 | ilable.space.on.system.boot..Ena |
c3ae0 | 62 6c 69 6e 67 20 41 64 76 65 72 74 69 73 6d 65 6e 74 73 00 45 6e 61 62 6c 69 6e 67 20 4f 70 65 | bling.Advertisments.Enabling.Ope |
c3b00 | 6e 56 50 4e 20 44 43 4f 00 45 6e 61 62 6c 69 6e 67 20 53 53 48 20 6f 6e 6c 79 20 72 65 71 75 69 | nVPN.DCO.Enabling.SSH.only.requi |
c3b20 | 72 65 73 20 79 6f 75 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 70 6f 72 74 20 60 60 3c 70 | res.you.to.specify.the.port.``<p |
c3b40 | 6f 72 74 3e 60 60 20 79 6f 75 20 77 61 6e 74 20 53 53 48 20 74 6f 20 6c 69 73 74 65 6e 20 6f 6e | ort>``.you.want.SSH.to.listen.on |
c3b60 | 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 53 53 48 20 72 75 6e 73 20 6f 6e 20 70 6f 72 74 20 32 | ..By.default,.SSH.runs.on.port.2 |
c3b80 | 32 2e 00 45 6e 61 62 6c 69 6e 67 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 69 6e 63 72 65 61 | 2..Enabling.this.function.increa |
c3ba0 | 73 65 73 20 74 68 65 20 72 69 73 6b 20 6f 66 20 62 61 6e 64 77 69 64 74 68 20 73 61 74 75 72 61 | ses.the.risk.of.bandwidth.satura |
c3bc0 | 74 69 6f 6e 2e 00 45 6e 66 6f 72 63 65 20 73 74 72 69 63 74 20 70 61 74 68 20 63 68 65 63 6b 69 | tion..Enforce.strict.path.checki |
c3be0 | 6e 67 00 45 6e 73 6c 61 76 65 20 60 3c 6d 65 6d 62 65 72 3e 60 20 69 6e 74 65 72 66 61 63 65 20 | ng.Enslave.`<member>`.interface. |
c3c00 | 74 6f 20 62 6f 6e 64 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 45 6e 73 75 72 65 20 74 68 | to.bond.`<interface>`..Ensure.th |
c3c20 | 61 74 20 77 68 65 6e 20 63 6f 6d 70 61 72 69 6e 67 20 72 6f 75 74 65 73 20 77 68 65 72 65 20 62 | at.when.comparing.routes.where.b |
c3c40 | 6f 74 68 20 61 72 65 20 65 71 75 61 6c 20 6f 6e 20 6d 6f 73 74 20 6d 65 74 72 69 63 73 2c 20 69 | oth.are.equal.on.most.metrics,.i |
c3c60 | 6e 63 6c 75 64 69 6e 67 20 6c 6f 63 61 6c 2d 70 72 65 66 2c 20 41 53 5f 50 41 54 48 20 6c 65 6e | ncluding.local-pref,.AS_PATH.len |
c3c80 | 67 74 68 2c 20 49 47 50 20 63 6f 73 74 2c 20 4d 45 44 2c 20 74 68 61 74 20 74 68 65 20 74 69 65 | gth,.IGP.cost,.MED,.that.the.tie |
c3ca0 | 20 69 73 20 62 72 6f 6b 65 6e 20 62 61 73 65 64 20 6f 6e 20 72 6f 75 74 65 72 2d 49 44 2e 00 45 | .is.broken.based.on.router-ID..E |
c3cc0 | 6e 74 65 72 70 72 69 73 65 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 73 20 75 73 75 61 6c 6c 79 20 | nterprise.installations.usually. |
c3ce0 | 73 68 69 70 20 61 20 6b 69 6e 64 20 6f 66 20 64 69 72 65 63 74 6f 72 79 20 73 65 72 76 69 63 65 | ship.a.kind.of.directory.service |
c3d00 | 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 74 6f 20 68 61 76 65 20 61 20 73 69 6e 67 6c 65 20 | .which.is.used.to.have.a.single. |
c3d20 | 70 61 73 73 77 6f 72 64 20 73 74 6f 72 65 20 66 6f 72 20 61 6c 6c 20 65 6d 70 6c 6f 79 65 65 73 | password.store.for.all.employees |
c3d40 | 2e 20 56 79 4f 53 20 61 6e 64 20 4f 70 65 6e 56 50 4e 20 73 75 70 70 6f 72 74 20 75 73 69 6e 67 | ..VyOS.and.OpenVPN.support.using |
c3d60 | 20 4c 44 41 50 2f 41 44 20 61 73 20 73 69 6e 67 6c 65 20 75 73 65 72 20 62 61 63 6b 65 6e 64 2e | .LDAP/AD.as.single.user.backend. |
c3d80 | 00 45 72 69 63 73 73 6f 6e 20 63 61 6c 6c 20 69 74 20 4d 41 43 2d 46 6f 72 63 65 64 20 46 6f 72 | .Ericsson.call.it.MAC-Forced.For |
c3da0 | 77 61 72 64 69 6e 67 20 28 52 46 43 20 44 72 61 66 74 29 00 45 72 72 6f 72 00 45 72 72 6f 72 20 | warding.(RFC.Draft).Error.Error. |
c3dc0 | 63 6f 6e 64 69 74 69 6f 6e 73 00 45 73 74 61 62 6c 69 73 68 65 64 20 73 65 73 73 69 6f 6e 73 20 | conditions.Established.sessions. |
c3de0 | 63 61 6e 20 62 65 20 76 69 65 77 65 64 20 75 73 69 6e 67 20 74 68 65 20 2a 2a 73 68 6f 77 20 6c | can.be.viewed.using.the.**show.l |
c3e00 | 32 74 70 2d 73 65 72 76 65 72 20 73 65 73 73 69 6f 6e 73 2a 2a 20 6f 70 65 72 61 74 69 6f 6e 61 | 2tp-server.sessions**.operationa |
c3e20 | 6c 20 63 6f 6d 6d 61 6e 64 00 45 74 68 65 72 6e 65 74 00 45 74 68 65 72 6e 65 74 20 66 6c 6f 77 | l.command.Ethernet.Ethernet.flow |
c3e40 | 20 63 6f 6e 74 72 6f 6c 20 69 73 20 61 20 6d 65 63 68 61 6e 69 73 6d 20 66 6f 72 20 74 65 6d 70 | .control.is.a.mechanism.for.temp |
c3e60 | 6f 72 61 72 69 6c 79 20 73 74 6f 70 70 69 6e 67 20 74 68 65 20 74 72 61 6e 73 6d 69 73 73 69 6f | orarily.stopping.the.transmissio |
c3e80 | 6e 20 6f 66 20 64 61 74 61 20 6f 6e 20 45 74 68 65 72 6e 65 74 20 66 61 6d 69 6c 79 20 63 6f 6d | n.of.data.on.Ethernet.family.com |
c3ea0 | 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 73 2e 20 54 68 65 20 67 6f 61 6c 20 6f 66 20 74 68 69 73 | puter.networks..The.goal.of.this |
c3ec0 | 20 6d 65 63 68 61 6e 69 73 6d 20 69 73 20 74 6f 20 65 6e 73 75 72 65 20 7a 65 72 6f 20 70 61 63 | .mechanism.is.to.ensure.zero.pac |
c3ee0 | 6b 65 74 20 6c 6f 73 73 20 69 6e 20 74 68 65 20 70 72 65 73 65 6e 63 65 20 6f 66 20 6e 65 74 77 | ket.loss.in.the.presence.of.netw |
c3f00 | 6f 72 6b 20 63 6f 6e 67 65 73 74 69 6f 6e 2e 00 45 74 68 65 72 6e 65 74 20 6f 70 74 69 6f 6e 73 | ork.congestion..Ethernet.options |
c3f20 | 00 45 74 68 65 72 74 79 70 65 20 60 60 30 78 38 31 30 30 60 60 20 69 73 20 75 73 65 64 20 66 6f | .Ethertype.``0x8100``.is.used.fo |
c3f40 | 72 20 60 60 38 30 32 2e 31 71 60 60 20 61 6e 64 20 65 74 68 65 72 74 79 70 65 20 60 60 30 78 38 | r.``802.1q``.and.ethertype.``0x8 |
c3f60 | 38 61 38 60 60 20 69 73 20 75 73 65 64 20 66 6f 72 20 60 60 38 30 32 2e 31 61 64 60 60 2e 00 45 | 8a8``.is.used.for.``802.1ad``..E |
c3f80 | 76 65 6e 74 20 48 61 6e 64 6c 65 72 00 45 76 65 6e 74 20 48 61 6e 64 6c 65 72 20 43 6f 6e 66 69 | vent.Handler.Event.Handler.Confi |
c3fa0 | 67 75 72 61 74 69 6f 6e 20 53 74 65 70 73 00 45 76 65 6e 74 20 48 61 6e 64 6c 65 72 20 54 65 63 | guration.Steps.Event.Handler.Tec |
c3fc0 | 68 6e 6f 6c 6f 67 79 20 4f 76 65 72 76 69 65 77 00 45 76 65 6e 74 20 68 61 6e 64 6c 65 72 20 61 | hnology.Overview.Event.handler.a |
c3fe0 | 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 65 78 65 63 75 74 65 20 73 63 72 69 70 74 73 20 77 68 65 | llows.you.to.execute.scripts.whe |
c4000 | 6e 20 61 20 73 74 72 69 6e 67 20 74 68 61 74 20 6d 61 74 63 68 65 73 20 61 20 72 65 67 65 78 20 | n.a.string.that.matches.a.regex. |
c4020 | 6f 72 20 61 20 72 65 67 65 78 20 77 69 74 68 20 61 20 73 65 72 76 69 63 65 20 6e 61 6d 65 20 61 | or.a.regex.with.a.service.name.a |
c4040 | 70 70 65 61 72 73 20 69 6e 20 6a 6f 75 72 6e 61 6c 64 20 6c 6f 67 73 2e 20 59 6f 75 20 63 61 6e | ppears.in.journald.logs..You.can |
c4060 | 20 70 61 73 73 20 76 61 72 69 61 62 6c 65 73 2c 20 61 72 67 75 6d 65 6e 74 73 2c 20 61 6e 64 20 | .pass.variables,.arguments,.and. |
c4080 | 61 20 66 75 6c 6c 20 6d 61 74 63 68 69 6e 67 20 73 74 72 69 6e 67 20 74 6f 20 74 68 65 20 73 63 | a.full.matching.string.to.the.sc |
c40a0 | 72 69 70 74 2e 00 45 76 65 6e 74 20 68 61 6e 64 6c 65 72 20 73 63 72 69 70 74 00 45 76 65 6e 74 | ript..Event.handler.script.Event |
c40c0 | 20 68 61 6e 64 6c 65 72 20 74 68 61 74 20 6d 6f 6e 69 74 6f 72 73 20 74 68 65 20 73 74 61 74 65 | .handler.that.monitors.the.state |
c40e0 | 20 6f 66 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 30 2e 00 45 76 65 72 79 20 4e 41 54 20 72 75 | .of.interface.eth0..Every.NAT.ru |
c4100 | 6c 65 20 68 61 73 20 61 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 20 64 65 66 | le.has.a.translation.command.def |
c4120 | 69 6e 65 64 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 64 65 66 69 6e 65 64 20 66 6f 72 20 74 68 | ined..The.address.defined.for.th |
c4140 | 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 69 73 20 74 68 65 20 61 64 64 72 65 73 73 20 75 73 65 | e.translation.is.the.address.use |
c4160 | 64 20 77 68 65 6e 20 74 68 65 20 61 64 64 72 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 | d.when.the.address.information.i |
c4180 | 6e 20 61 20 70 61 63 6b 65 74 20 69 73 20 72 65 70 6c 61 63 65 64 2e 00 45 76 65 72 79 20 53 4e | n.a.packet.is.replaced..Every.SN |
c41a0 | 41 54 36 36 20 72 75 6c 65 20 68 61 73 20 61 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 63 6f 6d 6d | AT66.rule.has.a.translation.comm |
c41c0 | 61 6e 64 20 64 65 66 69 6e 65 64 2e 20 54 68 65 20 70 72 65 66 69 78 20 64 65 66 69 6e 65 64 20 | and.defined..The.prefix.defined. |
c41e0 | 66 6f 72 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 69 73 20 74 68 65 20 70 72 65 66 69 | for.the.translation.is.the.prefi |
c4200 | 78 20 75 73 65 64 20 77 68 65 6e 20 74 68 65 20 61 64 64 72 65 73 73 20 69 6e 66 6f 72 6d 61 74 | x.used.when.the.address.informat |
c4220 | 69 6f 6e 20 69 6e 20 61 20 70 61 63 6b 65 74 20 69 73 20 72 65 70 6c 61 63 65 64 2e e3 80 81 00 | ion.in.a.packet.is.replaced..... |
c4240 | 45 76 65 72 79 20 53 53 48 20 6b 65 79 20 63 6f 6d 65 73 20 69 6e 20 74 68 72 65 65 20 70 61 72 | Every.SSH.key.comes.in.three.par |
c4260 | 74 73 3a 00 45 76 65 72 79 20 53 53 48 20 70 75 62 6c 69 63 20 6b 65 79 20 70 6f 72 74 69 6f 6e | ts:.Every.SSH.public.key.portion |
c4280 | 20 72 65 66 65 72 65 6e 63 65 64 20 62 79 20 60 3c 69 64 65 6e 74 69 66 69 65 72 3e 60 20 72 65 | .referenced.by.`<identifier>`.re |
c42a0 | 71 75 69 72 65 73 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 | quires.the.configuration.of.the. |
c42c0 | 60 3c 74 79 70 65 3e 60 20 6f 66 20 70 75 62 6c 69 63 2d 6b 65 79 20 75 73 65 64 2e 20 54 68 69 | `<type>`.of.public-key.used..Thi |
c42e0 | 73 20 74 79 70 65 20 63 61 6e 20 62 65 20 61 6e 79 20 6f 66 3a 00 45 76 65 72 79 20 55 44 50 20 | s.type.can.be.any.of:.Every.UDP. |
c4300 | 70 6f 72 74 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 64 20 72 65 71 75 69 | port.which.will.be.forward.requi |
c4320 | 72 65 73 20 6f 6e 65 20 75 6e 69 71 75 65 20 49 44 2e 20 43 75 72 72 65 6e 74 6c 79 20 77 65 20 | res.one.unique.ID..Currently.we. |
c4340 | 73 75 70 70 6f 72 74 20 39 39 20 49 44 73 21 00 45 76 65 72 79 20 56 69 72 74 75 61 6c 20 45 74 | support.99.IDs!.Every.Virtual.Et |
c4360 | 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 62 65 68 61 76 65 73 20 6c 69 6b 65 20 61 | hernet.interfaces.behaves.like.a |
c4380 | 20 72 65 61 6c 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 79 20 63 | .real.Ethernet.interface..They.c |
c43a0 | 61 6e 20 68 61 76 65 20 49 50 76 34 2f 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 63 6f 6e 66 | an.have.IPv4/IPv6.addresses.conf |
c43c0 | 69 67 75 72 65 64 2c 20 6f 72 20 63 61 6e 20 72 65 71 75 65 73 74 20 61 64 64 72 65 73 73 65 73 | igured,.or.can.request.addresses |
c43e0 | 20 62 79 20 44 48 43 50 2f 20 44 48 43 50 76 36 20 61 6e 64 20 61 72 65 20 61 73 73 6f 63 69 61 | .by.DHCP/.DHCPv6.and.are.associa |
c4400 | 74 65 64 2f 6d 61 70 70 65 64 20 77 69 74 68 20 61 20 72 65 61 6c 20 65 74 68 65 72 6e 65 74 20 | ted/mapped.with.a.real.ethernet. |
c4420 | 70 6f 72 74 2e 20 54 68 69 73 20 61 6c 73 6f 20 6d 61 6b 65 73 20 50 73 65 75 64 6f 2d 45 74 68 | port..This.also.makes.Pseudo-Eth |
c4440 | 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 69 6e 74 65 72 65 73 74 69 6e 67 20 66 6f 72 | ernet.interfaces.interesting.for |
c4460 | 20 74 65 73 74 69 6e 67 20 70 75 72 70 6f 73 65 73 2e 20 41 20 50 73 65 75 64 6f 2d 45 74 68 65 | .testing.purposes..A.Pseudo-Ethe |
c4480 | 72 6e 65 74 20 64 65 76 69 63 65 20 77 69 6c 6c 20 69 6e 68 65 72 69 74 20 63 68 61 72 61 63 74 | rnet.device.will.inherit.charact |
c44a0 | 65 72 69 73 74 69 63 73 20 28 73 70 65 65 64 2c 20 64 75 70 6c 65 78 2c 20 2e 2e 2e 29 20 66 72 | eristics.(speed,.duplex,....).fr |
c44c0 | 6f 6d 20 69 74 73 20 70 68 79 73 69 63 61 6c 20 70 61 72 65 6e 74 20 28 74 68 65 20 73 6f 20 63 | om.its.physical.parent.(the.so.c |
c44e0 | 61 6c 6c 65 64 20 6c 69 6e 6b 29 20 69 6e 74 65 72 66 61 63 65 2e 00 45 76 65 72 79 20 57 57 41 | alled.link).interface..Every.WWA |
c4500 | 4e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 72 65 71 75 69 72 65 73 20 61 6e 20 3a 61 62 62 72 3a 60 | N.connection.requires.an.:abbr:` |
c4520 | 41 50 4e 20 28 41 63 63 65 73 73 20 50 6f 69 6e 74 20 4e 61 6d 65 29 60 20 77 68 69 63 68 20 69 | APN.(Access.Point.Name)`.which.i |
c4540 | 73 20 75 73 65 64 20 62 79 20 74 68 65 20 63 6c 69 65 6e 74 20 74 6f 20 64 69 61 6c 20 69 6e 74 | s.used.by.the.client.to.dial.int |
c4560 | 6f 20 74 68 65 20 49 53 50 73 20 6e 65 74 77 6f 72 6b 2e 20 54 68 69 73 20 69 73 20 61 20 6d 61 | o.the.ISPs.network..This.is.a.ma |
c4580 | 6e 64 61 74 6f 72 79 20 70 61 72 61 6d 65 74 65 72 2e 20 43 6f 6e 74 61 63 74 20 79 6f 75 72 20 | ndatory.parameter..Contact.your. |
c45a0 | 53 65 72 76 69 63 65 20 50 72 6f 76 69 64 65 72 20 66 6f 72 20 63 6f 72 72 65 63 74 20 41 50 4e | Service.Provider.for.correct.APN |
c45c0 | 2e 00 45 76 65 72 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 2f 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 | ..Every.connection/remote-access |
c45e0 | 20 70 6f 6f 6c 20 77 65 20 63 6f 6e 66 69 67 75 72 65 20 61 6c 73 6f 20 6e 65 65 64 73 20 61 20 | .pool.we.configure.also.needs.a. |
c4600 | 70 6f 6f 6c 20 77 68 65 72 65 20 77 65 20 63 61 6e 20 64 72 61 77 20 6f 75 72 20 63 6c 69 65 6e | pool.where.we.can.draw.our.clien |
c4620 | 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 66 72 6f 6d 2e 20 57 65 20 70 72 6f 76 69 64 65 20 | t.IP.addresses.from..We.provide. |
c4640 | 6f 6e 65 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 70 6f 6f 6c 2e 20 41 75 74 68 6f 72 69 7a | one.IPv4.and.IPv6.pool..Authoriz |
c4660 | 65 64 20 63 6c 69 65 6e 74 73 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 61 6e 20 49 50 76 34 20 | ed.clients.will.receive.an.IPv4. |
c4680 | 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 31 39 32 2e 30 2e 32 2e 31 32 38 2f 32 35 20 | address.from.the.192.0.2.128/25. |
c46a0 | 70 72 65 66 69 78 20 61 6e 64 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 | prefix.and.an.IPv6.address.from. |
c46c0 | 74 68 65 20 32 30 30 31 3a 64 62 38 3a 32 30 30 30 3a 3a 2f 36 34 20 70 72 65 66 69 78 2e 20 57 | the.2001:db8:2000::/64.prefix..W |
c46e0 | 65 20 63 61 6e 20 61 6c 73 6f 20 73 65 6e 64 20 73 6f 6d 65 20 44 4e 53 20 6e 61 6d 65 73 65 72 | e.can.also.send.some.DNS.nameser |
c4700 | 76 65 72 73 20 64 6f 77 6e 20 74 6f 20 6f 75 72 20 63 6c 69 65 6e 74 73 20 75 73 65 64 20 6f 6e | vers.down.to.our.clients.used.on |
c4720 | 20 74 68 65 69 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 45 76 65 72 79 20 63 6f 6e 6e 65 63 74 | .their.connection..Every.connect |
c4740 | 69 6f 6e 2f 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 20 70 6f 6f 6c 20 77 65 20 63 6f 6e 66 69 67 | ion/remote-access.pool.we.config |
c4760 | 75 72 65 20 61 6c 73 6f 20 6e 65 65 64 73 20 61 20 70 6f 6f 6c 20 77 68 65 72 65 20 77 65 20 63 | ure.also.needs.a.pool.where.we.c |
c4780 | 61 6e 20 64 72 61 77 20 6f 75 72 20 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 | an.draw.our.client.IP.addresses. |
c47a0 | 66 72 6f 6d 2e 20 57 65 20 70 72 6f 76 69 64 65 20 6f 6e 65 20 49 50 76 34 20 61 6e 64 20 49 50 | from..We.provide.one.IPv4.and.IP |
c47c0 | 76 36 20 70 6f 6f 6c 2e 20 41 75 74 68 6f 72 69 7a 65 64 20 63 6c 69 65 6e 74 73 20 77 69 6c 6c | v6.pool..Authorized.clients.will |
c47e0 | 20 72 65 63 65 69 76 65 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 | .receive.an.IPv4.address.from.th |
c4800 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 49 50 76 34 20 70 72 65 66 69 78 20 61 6e 64 20 61 6e 20 | e.configured.IPv4.prefix.and.an. |
c4820 | 49 50 76 36 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 49 50 76 36 20 70 72 65 66 69 | IPv6.address.from.the.IPv6.prefi |
c4840 | 78 2e 20 57 65 20 63 61 6e 20 61 6c 73 6f 20 73 65 6e 64 20 73 6f 6d 65 20 44 4e 53 20 6e 61 6d | x..We.can.also.send.some.DNS.nam |
c4860 | 65 73 65 72 76 65 72 73 20 64 6f 77 6e 20 74 6f 20 6f 75 72 20 63 6c 69 65 6e 74 73 20 75 73 65 | eservers.down.to.our.clients.use |
c4880 | 64 20 6f 6e 20 74 68 65 69 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 45 78 61 6d 70 6c 65 00 45 | d.on.their.connection..Example.E |
c48a0 | 78 61 6d 70 6c 65 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 45 78 61 6d 70 6c 65 20 49 50 76 | xample.Configuration.Example.IPv |
c48c0 | 36 20 6f 6e 6c 79 3a 00 45 78 61 6d 70 6c 65 20 4e 65 74 77 6f 72 6b 00 45 78 61 6d 70 6c 65 20 | 6.only:.Example.Network.Example. |
c48e0 | 50 61 72 74 69 61 6c 20 43 6f 6e 66 69 67 00 45 78 61 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 | Partial.Config.Example.configura |
c4900 | 74 69 6f 6e 20 66 6f 72 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 73 3a 00 45 | tion.for.WireGuard.interfaces:.E |
c4920 | 78 61 6d 70 6c 65 20 66 6f 72 20 63 68 61 6e 67 69 6e 67 20 72 61 74 65 2d 6c 69 6d 69 74 20 76 | xample.for.changing.rate-limit.v |
c4940 | 69 61 20 52 41 44 49 55 53 20 43 6f 41 2e 00 45 78 61 6d 70 6c 65 20 66 6f 72 20 63 6f 6e 66 69 | ia.RADIUS.CoA..Example.for.confi |
c4960 | 67 75 72 69 6e 67 20 61 20 73 69 6d 70 6c 65 20 4c 32 54 50 20 6f 76 65 72 20 49 50 73 65 63 20 | guring.a.simple.L2TP.over.IPsec. |
c4980 | 56 50 4e 20 66 6f 72 20 72 65 6d 6f 74 65 20 61 63 63 65 73 73 20 28 77 6f 72 6b 73 20 77 69 74 | VPN.for.remote.access.(works.wit |
c49a0 | 68 20 6e 61 74 69 76 65 20 57 69 6e 64 6f 77 73 20 61 6e 64 20 4d 61 63 20 56 50 4e 20 63 6c 69 | h.native.Windows.and.Mac.VPN.cli |
c49c0 | 65 6e 74 73 29 3a 00 45 78 61 6d 70 6c 65 20 6f 66 20 72 65 64 69 72 65 63 74 69 6f 6e 3a 00 45 | ents):.Example.of.redirection:.E |
c49e0 | 78 61 6d 70 6c 65 20 73 79 6e 70 72 6f 78 79 00 45 78 61 6d 70 6c 65 2c 20 66 72 6f 6d 20 72 61 | xample.synproxy.Example,.from.ra |
c4a00 | 64 69 75 73 2d 73 65 72 76 65 72 20 73 65 6e 64 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 20 64 69 73 | dius-server.send.command.for.dis |
c4a20 | 63 6f 6e 6e 65 63 74 20 63 6c 69 65 6e 74 20 77 69 74 68 20 75 73 65 72 6e 61 6d 65 20 74 65 73 | connect.client.with.username.tes |
c4a40 | 74 00 45 78 61 6d 70 6c 65 3a 00 45 78 61 6d 70 6c 65 3a 20 44 65 6c 65 67 61 74 65 20 61 20 2f | t.Example:.Example:.Delegate.a./ |
c4a60 | 36 34 20 70 72 65 66 69 78 20 74 6f 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 38 20 77 68 69 63 | 64.prefix.to.interface.eth8.whic |
c4a80 | 68 20 77 69 6c 6c 20 75 73 65 20 61 20 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 20 6f 6e 20 74 68 | h.will.use.a.local.address.on.th |
c4aa0 | 69 73 20 72 6f 75 74 65 72 20 6f 66 20 60 60 3c 70 72 65 66 69 78 3e 3a 3a 66 66 66 66 60 60 2c | is.router.of.``<prefix>::ffff``, |
c4ac0 | 20 61 73 20 74 68 65 20 61 64 64 72 65 73 73 20 36 35 35 33 34 20 77 69 6c 6c 20 63 6f 72 72 65 | .as.the.address.65534.will.corre |
c4ae0 | 73 70 6f 6e 64 20 74 6f 20 60 60 66 66 66 66 60 60 20 69 6e 20 68 65 78 61 64 65 63 69 6d 61 6c | spond.to.``ffff``.in.hexadecimal |
c4b00 | 20 6e 6f 74 61 74 69 6f 6e 2e 00 45 78 61 6d 70 6c 65 3a 20 46 6f 72 20 61 6e 20 7e 38 2c 30 30 | .notation..Example:.For.an.~8,00 |
c4b20 | 30 20 68 6f 73 74 20 6e 65 74 77 6f 72 6b 20 61 20 73 6f 75 72 63 65 20 4e 41 54 20 70 6f 6f 6c | 0.host.network.a.source.NAT.pool |
c4b40 | 20 6f 66 20 33 32 20 49 50 20 61 64 64 72 65 73 73 65 73 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 | .of.32.IP.addresses.is.recommend |
c4b60 | 65 64 2e 00 45 78 61 6d 70 6c 65 3a 20 49 66 20 49 44 20 69 73 20 31 20 61 6e 64 20 74 68 65 20 | ed..Example:.If.ID.is.1.and.the. |
c4b80 | 63 6c 69 65 6e 74 20 69 73 20 64 65 6c 65 67 61 74 65 64 20 61 6e 20 49 50 76 36 20 70 72 65 66 | client.is.delegated.an.IPv6.pref |
c4ba0 | 69 78 20 32 30 30 31 3a 64 62 38 3a 66 66 66 66 3a 3a 2f 34 38 2c 20 64 68 63 70 36 63 20 77 69 | ix.2001:db8:ffff::/48,.dhcp6c.wi |
c4bc0 | 6c 6c 20 63 6f 6d 62 69 6e 65 20 74 68 65 20 74 77 6f 20 76 61 6c 75 65 73 20 69 6e 74 6f 20 61 | ll.combine.the.two.values.into.a |
c4be0 | 20 73 69 6e 67 6c 65 20 49 50 76 36 20 70 72 65 66 69 78 2c 20 32 30 30 31 3a 64 62 38 3a 66 66 | .single.IPv6.prefix,.2001:db8:ff |
c4c00 | 66 66 3a 31 3a 3a 2f 36 34 2c 20 61 6e 64 20 77 69 6c 6c 20 63 6f 6e 66 69 67 75 72 65 20 74 68 | ff:1::/64,.and.will.configure.th |
c4c20 | 65 20 70 72 65 66 69 78 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 | e.prefix.on.the.specified.interf |
c4c40 | 61 63 65 2e 00 45 78 61 6d 70 6c 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 20 69 6e 62 6f 75 6e 64 | ace..Example:.Mirror.the.inbound |
c4c60 | 20 74 72 61 66 66 69 63 20 6f 66 20 60 62 6f 6e 64 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 | .traffic.of.`bond1`.port.to.`eth |
c4c80 | 33 60 00 45 78 61 6d 70 6c 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 20 69 6e 62 6f 75 6e 64 20 74 | 3`.Example:.Mirror.the.inbound.t |
c4ca0 | 72 61 66 66 69 63 20 6f 66 20 60 62 72 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 | raffic.of.`br1`.port.to.`eth3`.E |
c4cc0 | 78 61 6d 70 6c 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 20 69 6e 62 6f 75 6e 64 20 74 72 61 66 66 | xample:.Mirror.the.inbound.traff |
c4ce0 | 69 63 20 6f 66 20 60 65 74 68 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 78 61 6d | ic.of.`eth1`.port.to.`eth3`.Exam |
c4d00 | 70 6c 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 | ple:.Mirror.the.outbound.traffic |
c4d20 | 20 6f 66 20 60 62 6f 6e 64 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 78 61 6d 70 | .of.`bond1`.port.to.`eth3`.Examp |
c4d40 | 6c 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 | le:.Mirror.the.outbound.traffic. |
c4d60 | 6f 66 20 60 62 72 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 78 61 6d 70 6c 65 3a | of.`br1`.port.to.`eth3`.Example: |
c4d80 | 20 4d 69 72 72 6f 72 20 74 68 65 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 20 | .Mirror.the.outbound.traffic.of. |
c4da0 | 60 65 74 68 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 78 61 6d 70 6c 65 3a 20 53 | `eth1`.port.to.`eth3`.Example:.S |
c4dc0 | 65 74 20 60 65 74 68 30 60 20 6d 65 6d 62 65 72 20 70 6f 72 74 20 74 6f 20 62 65 20 61 6c 6c 6f | et.`eth0`.member.port.to.be.allo |
c4de0 | 77 65 64 20 56 4c 41 4e 20 34 00 45 78 61 6d 70 6c 65 3a 20 53 65 74 20 60 65 74 68 30 60 20 6d | wed.VLAN.4.Example:.Set.`eth0`.m |
c4e00 | 65 6d 62 65 72 20 70 6f 72 74 20 74 6f 20 62 65 20 61 6c 6c 6f 77 65 64 20 56 4c 41 4e 20 36 2d | ember.port.to.be.allowed.VLAN.6- |
c4e20 | 38 00 45 78 61 6d 70 6c 65 3a 20 53 65 74 20 60 65 74 68 30 60 20 6d 65 6d 62 65 72 20 70 6f 72 | 8.Example:.Set.`eth0`.member.por |
c4e40 | 74 20 74 6f 20 62 65 20 6e 61 74 69 76 65 20 56 4c 41 4e 20 32 00 45 78 61 6d 70 6c 65 3a 20 74 | t.to.be.native.VLAN.2.Example:.t |
c4e60 | 6f 20 62 65 20 61 70 70 65 6e 64 65 64 20 69 73 20 73 65 74 20 74 6f 20 60 60 76 79 6f 73 2e 6e | o.be.appended.is.set.to.``vyos.n |
c4e80 | 65 74 60 60 20 61 6e 64 20 74 68 65 20 55 52 4c 20 72 65 63 65 69 76 65 64 20 69 73 20 60 60 77 | et``.and.the.URL.received.is.``w |
c4ea0 | 77 77 2f 66 6f 6f 2e 68 74 6d 6c 60 60 2c 20 74 68 65 20 73 79 73 74 65 6d 20 77 69 6c 6c 20 75 | ww/foo.html``,.the.system.will.u |
c4ec0 | 73 65 20 74 68 65 20 67 65 6e 65 72 61 74 65 64 2c 20 66 69 6e 61 6c 20 55 52 4c 20 6f 66 20 60 | se.the.generated,.final.URL.of.` |
c4ee0 | 60 77 77 77 2e 76 79 6f 73 2e 6e 65 74 2f 66 6f 6f 2e 68 74 6d 6c 60 60 2e 00 45 78 61 6d 70 6c | `www.vyos.net/foo.html``..Exampl |
c4f00 | 65 73 00 45 78 61 6d 70 6c 65 73 20 6f 66 20 70 6f 6c 69 63 69 65 73 20 75 73 61 67 65 3a 00 45 | es.Examples.of.policies.usage:.E |
c4f20 | 78 61 6d 70 6c 65 73 3a 00 45 78 63 6c 75 64 65 20 49 50 20 61 64 64 72 65 73 73 65 73 20 66 72 | xamples:.Exclude.IP.addresses.fr |
c4f40 | 6f 6d 20 60 60 56 52 52 50 20 70 61 63 6b 65 74 73 60 60 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e | om.``VRRP.packets``..This.option |
c4f60 | 20 60 60 65 78 63 6c 75 64 65 64 2d 61 64 64 72 65 73 73 60 60 20 69 73 20 75 73 65 64 20 77 68 | .``excluded-address``.is.used.wh |
c4f80 | 65 6e 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 73 65 74 20 49 50 76 34 20 2b 20 49 50 76 36 20 61 | en.you.want.to.set.IPv4.+.IPv6.a |
c4fa0 | 64 64 72 65 73 73 65 73 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 76 69 72 74 75 61 6c 20 69 6e 74 | ddresses.on.the.same.virtual.int |
c4fc0 | 65 72 66 61 63 65 20 6f 72 20 77 68 65 6e 20 75 73 65 64 20 6d 6f 72 65 20 74 68 61 6e 20 32 30 | erface.or.when.used.more.than.20 |
c4fe0 | 20 49 50 20 61 64 64 72 65 73 73 65 73 2e 00 45 78 63 6c 75 64 65 20 61 64 64 72 65 73 73 00 45 | .IP.addresses..Exclude.address.E |
c5000 | 78 63 6c 75 64 65 20 74 72 61 66 66 69 63 00 45 78 69 74 20 70 6f 6c 69 63 79 20 6f 6e 20 6d 61 | xclude.traffic.Exit.policy.on.ma |
c5020 | 74 63 68 3a 20 67 6f 20 74 6f 20 6e 65 78 74 20 73 65 71 75 65 6e 63 65 20 6e 75 6d 62 65 72 2e | tch:.go.to.next.sequence.number. |
c5040 | 00 45 78 69 74 20 70 6f 6c 69 63 79 20 6f 6e 20 6d 61 74 63 68 3a 20 67 6f 20 74 6f 20 72 75 6c | .Exit.policy.on.match:.go.to.rul |
c5060 | 65 20 3c 31 2d 36 35 35 33 35 3e 00 45 78 70 65 64 69 74 65 64 20 66 6f 72 77 61 72 64 69 6e 67 | e.<1-65535>.Expedited.forwarding |
c5080 | 20 28 45 46 29 00 45 78 70 6c 61 6e 61 74 69 6f 6e 00 45 78 70 6c 69 63 69 74 6c 79 20 64 65 63 | .(EF).Explanation.Explicitly.dec |
c50a0 | 6c 61 72 65 20 49 44 20 66 6f 72 20 74 68 69 73 20 6d 69 6e 69 6f 6e 20 74 6f 20 75 73 65 20 28 | lare.ID.for.this.minion.to.use.( |
c50c0 | 64 65 66 61 75 6c 74 3a 20 68 6f 73 74 6e 61 6d 65 29 00 45 78 74 65 72 6e 61 6c 20 44 48 43 50 | default:.hostname).External.DHCP |
c50e0 | 76 36 20 73 65 72 76 65 72 20 69 73 20 61 74 20 32 30 30 31 3a 64 62 38 3a 3a 34 00 45 78 74 65 | v6.server.is.at.2001:db8::4.Exte |
c5100 | 72 6e 61 6c 20 52 6f 75 74 65 20 53 75 6d 6d 61 72 69 73 61 74 69 6f 6e 00 45 78 74 65 72 6e 61 | rnal.Route.Summarisation.Externa |
c5120 | 6c 20 61 74 74 61 63 6b 3a 20 61 6e 20 61 74 74 61 63 6b 20 66 72 6f 6d 20 74 68 65 20 69 6e 74 | l.attack:.an.attack.from.the.int |
c5140 | 65 72 6e 65 74 20 74 6f 77 61 72 64 73 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 49 50 20 69 73 20 | ernet.towards.an.internal.IP.is. |
c5160 | 69 64 65 6e 74 69 66 79 2e 20 49 6e 20 74 68 69 73 20 63 61 73 65 2c 20 61 6c 6c 20 63 6f 6e 6e | identify..In.this.case,.all.conn |
c5180 | 65 63 74 69 6f 6e 73 20 74 6f 77 61 72 64 73 20 73 75 63 68 20 49 50 20 77 69 6c 6c 20 62 65 20 | ections.towards.such.IP.will.be. |
c51a0 | 62 6c 6f 63 6b 65 64 00 46 51 2d 43 6f 44 65 6c 00 46 51 2d 43 6f 44 65 6c 20 66 69 67 68 74 73 | blocked.FQ-CoDel.FQ-CoDel.fights |
c51c0 | 20 62 75 66 66 65 72 62 6c 6f 61 74 20 61 6e 64 20 72 65 64 75 63 65 73 20 6c 61 74 65 6e 63 79 | .bufferbloat.and.reduces.latency |
c51e0 | 20 77 69 74 68 6f 75 74 20 74 68 65 20 6e 65 65 64 20 6f 66 20 63 6f 6d 70 6c 65 78 20 63 6f 6e | .without.the.need.of.complex.con |
c5200 | 66 69 67 75 72 61 74 69 6f 6e 73 2e 20 49 74 20 68 61 73 20 62 65 63 6f 6d 65 20 74 68 65 20 6e | figurations..It.has.become.the.n |
c5220 | 65 77 20 64 65 66 61 75 6c 74 20 51 75 65 75 65 69 6e 67 20 44 69 73 63 69 70 6c 69 6e 65 20 66 | ew.default.Queueing.Discipline.f |
c5240 | 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 73 20 6f 66 20 73 6f 6d 65 20 47 4e 55 2f 4c 69 | or.the.interfaces.of.some.GNU/Li |
c5260 | 6e 75 78 20 64 69 73 74 72 69 62 75 74 69 6f 6e 73 2e 00 46 51 2d 43 6f 44 65 6c 20 69 73 20 62 | nux.distributions..FQ-CoDel.is.b |
c5280 | 61 73 65 64 20 6f 6e 20 61 20 6d 6f 64 69 66 69 65 64 20 44 65 66 69 63 69 74 20 52 6f 75 6e 64 | ased.on.a.modified.Deficit.Round |
c52a0 | 20 52 6f 62 69 6e 20 28 44 52 52 5f 29 20 71 75 65 75 65 20 73 63 68 65 64 75 6c 65 72 20 77 69 | .Robin.(DRR_).queue.scheduler.wi |
c52c0 | 74 68 20 74 68 65 20 43 6f 44 65 6c 20 41 63 74 69 76 65 20 51 75 65 75 65 20 4d 61 6e 61 67 65 | th.the.CoDel.Active.Queue.Manage |
c52e0 | 6d 65 6e 74 20 28 41 51 4d 29 20 61 6c 67 6f 72 69 74 68 6d 20 6f 70 65 72 61 74 69 6e 67 20 6f | ment.(AQM).algorithm.operating.o |
c5300 | 6e 20 65 61 63 68 20 71 75 65 75 65 2e 00 46 51 2d 43 6f 44 65 6c 20 69 73 20 74 75 6e 65 64 20 | n.each.queue..FQ-CoDel.is.tuned. |
c5320 | 74 6f 20 72 75 6e 20 6f 6b 20 77 69 74 68 20 69 74 73 20 64 65 66 61 75 6c 74 20 70 61 72 61 6d | to.run.ok.with.its.default.param |
c5340 | 65 74 65 72 73 20 61 74 20 31 30 47 62 69 74 20 73 70 65 65 64 73 2e 20 49 74 20 6d 69 67 68 74 | eters.at.10Gbit.speeds..It.might |
c5360 | 20 77 6f 72 6b 20 6f 6b 20 74 6f 6f 20 61 74 20 6f 74 68 65 72 20 73 70 65 65 64 73 20 77 69 74 | .work.ok.too.at.other.speeds.wit |
c5380 | 68 6f 75 74 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 79 74 68 69 6e 67 2c 20 62 75 74 20 68 | hout.configuring.anything,.but.h |
c53a0 | 65 72 65 20 77 65 20 77 69 6c 6c 20 65 78 70 6c 61 69 6e 20 73 6f 6d 65 20 63 61 73 65 73 20 77 | ere.we.will.explain.some.cases.w |
c53c0 | 68 65 6e 20 79 6f 75 20 6d 69 67 68 74 20 77 61 6e 74 20 74 6f 20 74 75 6e 65 20 69 74 73 20 70 | hen.you.might.want.to.tune.its.p |
c53e0 | 61 72 61 6d 65 74 65 72 73 2e 00 46 51 2d 43 6f 64 65 6c 20 69 73 20 61 20 6e 6f 6e 2d 73 68 61 | arameters..FQ-Codel.is.a.non-sha |
c5400 | 70 69 6e 67 20 28 77 6f 72 6b 2d 63 6f 6e 73 65 72 76 69 6e 67 29 20 70 6f 6c 69 63 79 2c 20 73 | ping.(work-conserving).policy,.s |
c5420 | 6f 20 69 74 20 77 69 6c 6c 20 6f 6e 6c 79 20 62 65 20 75 73 65 66 75 6c 20 69 66 20 79 6f 75 72 | o.it.will.only.be.useful.if.your |
c5440 | 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 72 65 61 6c 6c 79 20 66 75 | .outgoing.interface.is.really.fu |
c5460 | 6c 6c 2e 20 49 66 20 69 74 20 69 73 20 6e 6f 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 6e 6f 74 20 | ll..If.it.is.not,.VyOS.will.not. |
c5480 | 6f 77 6e 20 74 68 65 20 71 75 65 75 65 20 61 6e 64 20 46 51 2d 43 6f 64 65 6c 20 77 69 6c 6c 20 | own.the.queue.and.FQ-Codel.will. |
c54a0 | 68 61 76 65 20 6e 6f 20 65 66 66 65 63 74 2e 20 49 66 20 74 68 65 72 65 20 69 73 20 62 61 6e 64 | have.no.effect..If.there.is.band |
c54c0 | 77 69 64 74 68 20 61 76 61 69 6c 61 62 6c 65 20 6f 6e 20 74 68 65 20 70 68 79 73 69 63 61 6c 20 | width.available.on.the.physical. |
c54e0 | 6c 69 6e 6b 2c 20 79 6f 75 20 63 61 6e 20 65 6d 62 65 64 5f 20 46 51 2d 43 6f 64 65 6c 20 69 6e | link,.you.can.embed_.FQ-Codel.in |
c5500 | 74 6f 20 61 20 63 6c 61 73 73 66 75 6c 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 | to.a.classful.shaping.policy.to. |
c5520 | 6d 61 6b 65 20 73 75 72 65 20 69 74 20 6f 77 6e 73 20 74 68 65 20 71 75 65 75 65 2e 20 49 66 20 | make.sure.it.owns.the.queue..If. |
c5540 | 79 6f 75 20 61 72 65 20 6e 6f 74 20 73 75 72 65 20 69 66 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 | you.are.not.sure.if.you.need.to. |
c5560 | 65 6d 62 65 64 20 79 6f 75 72 20 46 51 2d 43 6f 44 65 6c 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 | embed.your.FQ-CoDel.policy.into. |
c5580 | 61 20 53 68 61 70 65 72 2c 20 64 6f 20 69 74 2e 00 46 52 52 00 46 52 52 20 6f 66 66 65 72 73 20 | a.Shaper,.do.it..FRR.FRR.offers. |
c55a0 | 6f 6e 6c 79 20 70 61 72 74 69 61 6c 20 73 75 70 70 6f 72 74 20 66 6f 72 20 73 6f 6d 65 20 6f 66 | only.partial.support.for.some.of |
c55c0 | 20 74 68 65 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 65 78 74 65 6e 73 69 6f 6e 73 | .the.routing.protocol.extensions |
c55e0 | 20 74 68 61 74 20 61 72 65 20 75 73 65 64 20 77 69 74 68 20 4d 50 4c 53 2d 54 45 3b 20 69 74 20 | .that.are.used.with.MPLS-TE;.it. |
c5600 | 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 61 20 63 6f 6d 70 6c 65 74 65 20 52 53 56 50 | does.not.support.a.complete.RSVP |
c5620 | 2d 54 45 20 73 6f 6c 75 74 69 6f 6e 2e 00 46 52 52 20 73 75 70 70 6f 72 74 73 20 61 20 6e 65 77 | -TE.solution..FRR.supports.a.new |
c5640 | 20 77 61 79 20 6f 66 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 56 4c 41 4e 2d 74 6f 2d 56 4e 49 20 | .way.of.configuring.VLAN-to-VNI. |
c5660 | 6d 61 70 70 69 6e 67 73 20 66 6f 72 20 45 56 50 4e 2d 56 58 4c 41 4e 2c 20 77 68 65 6e 20 77 6f | mappings.for.EVPN-VXLAN,.when.wo |
c5680 | 72 6b 69 6e 67 20 77 69 74 68 20 74 68 65 20 4c 69 6e 75 78 20 6b 65 72 6e 65 6c 2e 20 49 6e 20 | rking.with.the.Linux.kernel..In. |
c56a0 | 74 68 69 73 20 6e 65 77 20 77 61 79 2c 20 74 68 65 20 6d 61 70 70 69 6e 67 20 6f 66 20 61 20 56 | this.new.way,.the.mapping.of.a.V |
c56c0 | 4c 41 4e 20 74 6f 20 61 20 3a 61 62 62 72 3a 60 56 4e 49 20 28 56 58 4c 41 4e 20 4e 65 74 77 6f | LAN.to.a.:abbr:`VNI.(VXLAN.Netwo |
c56e0 | 72 6b 20 49 64 65 6e 74 69 66 69 65 72 20 28 6f 72 20 56 58 4c 41 4e 20 53 65 67 6d 65 6e 74 20 | rk.Identifier.(or.VXLAN.Segment. |
c5700 | 49 44 29 29 60 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 67 61 69 6e 73 74 20 61 20 63 6f | ID))`.is.configured.against.a.co |
c5720 | 6e 74 61 69 6e 65 72 20 56 58 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 | ntainer.VXLAN.interface.which.is |
c5740 | 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 61 20 3a 61 62 62 72 3a 60 53 56 44 20 28 53 69 | .referred.to.as.a.:abbr:`SVD.(Si |
c5760 | 6e 67 6c 65 20 56 58 4c 41 4e 20 64 65 76 69 63 65 29 60 2e 00 46 54 50 20 64 61 65 6d 6f 6e 00 | ngle.VXLAN.device)`..FTP.daemon. |
c5780 | 46 61 63 69 6c 69 74 69 65 73 00 46 61 63 69 6c 69 74 69 65 73 20 63 61 6e 20 62 65 20 61 64 6a | Facilities.Facilities.can.be.adj |
c57a0 | 75 73 74 65 64 20 74 6f 20 6d 65 65 74 20 74 68 65 20 6e 65 65 64 73 20 6f 66 20 74 68 65 20 75 | usted.to.meet.the.needs.of.the.u |
c57c0 | 73 65 72 3a 00 46 61 63 69 6c 69 74 79 20 43 6f 64 65 00 46 61 69 6c 6f 76 65 72 00 46 61 69 6c | ser:.Facility.Code.Failover.Fail |
c57e0 | 6f 76 65 72 20 52 6f 75 74 65 73 00 46 61 69 6c 6f 76 65 72 20 6d 65 63 68 61 6e 69 73 6d 20 74 | over.Routes.Failover.mechanism.t |
c5800 | 6f 20 75 73 65 20 66 6f 72 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 2e 00 46 61 69 6c 6f 76 | o.use.for.conntrack-sync..Failov |
c5820 | 65 72 20 72 6f 75 74 65 73 20 61 72 65 20 6d 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 | er.routes.are.manually.configure |
c5840 | 64 20 72 6f 75 74 65 73 2c 20 62 75 74 20 74 68 65 79 20 69 6e 73 74 61 6c 6c 20 74 6f 20 74 68 | d.routes,.but.they.install.to.th |
c5860 | 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 69 66 20 74 68 65 20 68 65 61 6c 74 68 2d 63 68 | e.routing.table.if.the.health-ch |
c5880 | 65 63 6b 20 74 61 72 67 65 74 20 69 73 20 61 6c 69 76 65 2e 20 49 66 20 74 68 65 20 74 61 72 67 | eck.target.is.alive..If.the.targ |
c58a0 | 65 74 20 69 73 20 6e 6f 74 20 61 6c 69 76 65 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 72 65 6d | et.is.not.alive.the.route.is.rem |
c58c0 | 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 75 6e 74 69 | oved.from.the.routing.table.unti |
c58e0 | 6c 20 74 68 65 20 74 61 72 67 65 74 20 77 69 6c 6c 20 62 65 20 61 76 61 69 6c 61 62 6c 65 2e 00 | l.the.target.will.be.available.. |
c5900 | 46 61 69 72 20 51 75 65 75 65 00 46 61 69 72 20 51 75 65 75 65 20 69 73 20 61 20 6e 6f 6e 2d 73 | Fair.Queue.Fair.Queue.is.a.non-s |
c5920 | 68 61 70 69 6e 67 20 28 77 6f 72 6b 2d 63 6f 6e 73 65 72 76 69 6e 67 29 20 70 6f 6c 69 63 79 2c | haping.(work-conserving).policy, |
c5940 | 20 73 6f 20 69 74 20 77 69 6c 6c 20 6f 6e 6c 79 20 62 65 20 75 73 65 66 75 6c 20 69 66 20 79 6f | .so.it.will.only.be.useful.if.yo |
c5960 | 75 72 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 72 65 61 6c 6c 79 20 | ur.outgoing.interface.is.really. |
c5980 | 66 75 6c 6c 2e 20 49 66 20 69 74 20 69 73 20 6e 6f 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 6e 6f | full..If.it.is.not,.VyOS.will.no |
c59a0 | 74 20 6f 77 6e 20 74 68 65 20 71 75 65 75 65 20 61 6e 64 20 46 61 69 72 20 51 75 65 75 65 20 77 | t.own.the.queue.and.Fair.Queue.w |
c59c0 | 69 6c 6c 20 68 61 76 65 20 6e 6f 20 65 66 66 65 63 74 2e 20 49 66 20 74 68 65 72 65 20 69 73 20 | ill.have.no.effect..If.there.is. |
c59e0 | 62 61 6e 64 77 69 64 74 68 20 61 76 61 69 6c 61 62 6c 65 20 6f 6e 20 74 68 65 20 70 68 79 73 69 | bandwidth.available.on.the.physi |
c5a00 | 63 61 6c 20 6c 69 6e 6b 2c 20 79 6f 75 20 63 61 6e 20 65 6d 62 65 64 5f 20 46 61 69 72 2d 51 75 | cal.link,.you.can.embed_.Fair-Qu |
c5a20 | 65 75 65 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 66 75 6c 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 | eue.into.a.classful.shaping.poli |
c5a40 | 63 79 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 69 74 20 6f 77 6e 73 20 74 68 65 20 71 75 65 75 | cy.to.make.sure.it.owns.the.queu |
c5a60 | 65 2e 00 46 61 69 72 20 51 75 65 75 65 20 69 73 20 61 20 77 6f 72 6b 2d 63 6f 6e 73 65 72 76 69 | e..Fair.Queue.is.a.work-conservi |
c5a80 | 6e 67 20 73 63 68 65 64 75 6c 65 72 20 77 68 69 63 68 20 73 63 68 65 64 75 6c 65 73 20 74 68 65 | ng.scheduler.which.schedules.the |
c5aa0 | 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 6f 66 20 70 61 63 6b 65 74 73 20 62 61 73 65 64 20 6f | .transmission.of.packets.based.o |
c5ac0 | 6e 20 66 6c 6f 77 73 2c 20 74 68 61 74 20 69 73 2c 20 69 74 20 62 61 6c 61 6e 63 65 73 20 74 72 | n.flows,.that.is,.it.balances.tr |
c5ae0 | 61 66 66 69 63 20 64 69 73 74 72 69 62 75 74 69 6e 67 20 69 74 20 74 68 72 6f 75 67 68 20 64 69 | affic.distributing.it.through.di |
c5b00 | 66 66 65 72 65 6e 74 20 73 75 62 2d 71 75 65 75 65 73 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 65 | fferent.sub-queues.in.order.to.e |
c5b20 | 6e 73 75 72 65 20 66 61 69 72 6e 65 73 73 20 73 6f 20 74 68 61 74 20 65 61 63 68 20 66 6c 6f 77 | nsure.fairness.so.that.each.flow |
c5b40 | 20 69 73 20 61 62 6c 65 20 74 6f 20 73 65 6e 64 20 64 61 74 61 20 69 6e 20 74 75 72 6e 2c 20 70 | .is.able.to.send.data.in.turn,.p |
c5b60 | 72 65 76 65 6e 74 69 6e 67 20 61 6e 79 20 73 69 6e 67 6c 65 20 6f 6e 65 20 66 72 6f 6d 20 64 72 | reventing.any.single.one.from.dr |
c5b80 | 6f 77 6e 69 6e 67 20 6f 75 74 20 74 68 65 20 72 65 73 74 2e 00 46 61 73 74 4e 65 74 4d 6f 6e 00 | owning.out.the.rest..FastNetMon. |
c5ba0 | 46 61 73 74 4e 65 74 4d 6f 6e 20 69 73 20 61 20 68 69 67 68 2d 70 65 72 66 6f 72 6d 61 6e 63 65 | FastNetMon.is.a.high-performance |
c5bc0 | 20 44 44 6f 53 20 64 65 74 65 63 74 6f 72 2f 73 65 6e 73 6f 72 20 62 75 69 6c 74 20 6f 6e 20 74 | .DDoS.detector/sensor.built.on.t |
c5be0 | 6f 70 20 6f 66 20 6d 75 6c 74 69 70 6c 65 20 70 61 63 6b 65 74 20 63 61 70 74 75 72 65 20 65 6e | op.of.multiple.packet.capture.en |
c5c00 | 67 69 6e 65 73 3a 20 4e 65 74 46 6c 6f 77 2c 20 49 50 46 49 58 2c 20 73 46 6c 6f 77 2c 20 41 46 | gines:.NetFlow,.IPFIX,.sFlow,.AF |
c5c20 | 5f 50 41 43 4b 45 54 20 28 70 6f 72 74 20 6d 69 72 72 6f 72 29 2e 20 49 74 20 63 61 6e 20 64 65 | _PACKET.(port.mirror)..It.can.de |
c5c40 | 74 65 63 74 20 68 6f 73 74 73 20 69 6e 20 74 68 65 20 64 65 70 6c 6f 79 65 64 20 6e 65 74 77 6f | tect.hosts.in.the.deployed.netwo |
c5c60 | 72 6b 20 73 65 6e 64 69 6e 67 20 6f 72 20 72 65 63 65 69 76 69 6e 67 20 6c 61 72 67 65 20 76 6f | rk.sending.or.receiving.large.vo |
c5c80 | 6c 75 6d 65 73 20 6f 66 20 74 72 61 66 66 69 63 2c 20 70 61 63 6b 65 74 73 2f 62 79 74 65 73 2f | lumes.of.traffic,.packets/bytes/ |
c5ca0 | 66 6c 6f 77 73 20 70 65 72 20 73 65 63 6f 6e 64 20 61 6e 64 20 70 65 72 66 6f 72 6d 20 61 20 63 | flows.per.second.and.perform.a.c |
c5cc0 | 6f 6e 66 69 67 75 72 61 62 6c 65 20 61 63 74 69 6f 6e 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 61 | onfigurable.action.to.handle.tha |
c5ce0 | 74 20 65 76 65 6e 74 2c 20 73 75 63 68 20 61 73 20 63 61 6c 6c 69 6e 67 20 61 20 63 75 73 74 6f | t.event,.such.as.calling.a.custo |
c5d00 | 6d 20 73 63 72 69 70 74 2e 00 46 65 61 74 75 72 65 73 20 6f 66 20 74 68 65 20 43 75 72 72 65 6e | m.script..Features.of.the.Curren |
c5d20 | 74 20 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 00 46 69 65 6c 64 00 46 69 6c 65 20 69 64 65 6e | t.Implementation.Field.File.iden |
c5d40 | 74 69 66 69 65 64 20 62 79 20 60 3c 66 69 6c 65 6e 61 6d 65 3e 60 20 63 6f 6e 74 61 69 6e 69 6e | tified.by.`<filename>`.containin |
c5d60 | 67 20 74 68 65 20 54 53 49 47 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6b 65 79 20 66 6f | g.the.TSIG.authentication.key.fo |
c5d80 | 72 20 52 46 43 32 31 33 36 20 6e 73 75 70 64 61 74 65 20 6f 6e 20 72 65 6d 6f 74 65 20 44 4e 53 | r.RFC2136.nsupdate.on.remote.DNS |
c5da0 | 20 73 65 72 76 65 72 2e 00 46 69 6c 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 6b 65 | .server..File.identified.by.`<ke |
c5dc0 | 79 66 69 6c 65 3e 60 20 63 6f 6e 74 61 69 6e 69 6e 67 20 74 68 65 20 73 65 63 72 65 74 20 52 4e | yfile>`.containing.the.secret.RN |
c5de0 | 44 43 20 6b 65 79 20 73 68 61 72 65 64 20 77 69 74 68 20 72 65 6d 6f 74 65 20 44 4e 53 20 73 65 | DC.key.shared.with.remote.DNS.se |
c5e00 | 72 76 65 72 2e 00 46 69 6c 74 65 72 20 54 79 70 65 2d 33 20 73 75 6d 6d 61 72 79 2d 4c 53 41 73 | rver..Filter.Type-3.summary-LSAs |
c5e20 | 20 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 6f 74 68 65 72 20 61 72 65 61 73 20 6f 72 69 67 69 6e | .announced.to.other.areas.origin |
c5e40 | 61 74 65 64 20 66 72 6f 6d 20 69 6e 74 72 61 2d 20 61 72 65 61 20 70 61 74 68 73 20 66 72 6f 6d | ated.from.intra-.area.paths.from |
c5e60 | 20 73 70 65 63 69 66 69 65 64 20 61 72 65 61 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6d 61 | .specified.area..This.command.ma |
c5e80 | 6b 65 73 20 73 65 6e 73 65 20 69 6e 20 41 42 52 20 6f 6e 6c 79 2e 00 46 69 6c 74 65 72 20 74 72 | kes.sense.in.ABR.only..Filter.tr |
c5ea0 | 61 66 66 69 63 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 65 2f 64 65 73 74 69 6e 61 74 69 6f | affic.based.on.source/destinatio |
c5ec0 | 6e 20 61 64 64 72 65 73 73 2e 00 46 69 6c 74 65 72 2d 49 64 3d 32 30 30 30 2f 33 30 30 30 20 28 | n.address..Filter-Id=2000/3000.( |
c5ee0 | 6d 65 61 6e 73 20 32 30 30 30 4b 62 69 74 20 64 6f 77 6e 2d 73 74 72 65 61 6d 20 72 61 74 65 20 | means.2000Kbit.down-stream.rate. |
c5f00 | 61 6e 64 20 33 30 30 30 4b 62 69 74 20 75 70 2d 73 74 72 65 61 6d 20 72 61 74 65 29 00 46 69 6c | and.3000Kbit.up-stream.rate).Fil |
c5f20 | 74 65 72 2d 49 64 3d 35 30 30 30 2f 34 30 30 30 20 28 6d 65 61 6e 73 20 35 30 30 30 4b 62 69 74 | ter-Id=5000/4000.(means.5000Kbit |
c5f40 | 20 64 6f 77 6e 2d 73 74 72 65 61 6d 20 72 61 74 65 20 61 6e 64 20 34 30 30 30 4b 62 69 74 20 75 | .down-stream.rate.and.4000Kbit.u |
c5f60 | 70 2d 73 74 72 65 61 6d 20 72 61 74 65 29 20 49 66 20 61 74 74 72 69 62 75 74 65 20 46 69 6c 74 | p-stream.rate).If.attribute.Filt |
c5f80 | 65 72 2d 49 64 20 72 65 64 65 66 69 6e 65 64 2c 20 72 65 70 6c 61 63 65 20 69 74 20 69 6e 20 52 | er-Id.redefined,.replace.it.in.R |
c5fa0 | 41 44 49 55 53 20 43 6f 41 20 72 65 71 75 65 73 74 2e 00 46 69 6c 74 65 72 69 6e 67 00 46 69 6c | ADIUS.CoA.request..Filtering.Fil |
c5fc0 | 74 65 72 69 6e 67 20 69 73 20 75 73 65 64 20 66 6f 72 20 62 6f 74 68 20 69 6e 70 75 74 20 61 6e | tering.is.used.for.both.input.an |
c5fe0 | 64 20 6f 75 74 70 75 74 20 6f 66 20 74 68 65 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 | d.output.of.the.routing.informat |
c6000 | 69 6f 6e 2e 20 4f 6e 63 65 20 66 69 6c 74 65 72 69 6e 67 20 69 73 20 64 65 66 69 6e 65 64 2c 20 | ion..Once.filtering.is.defined,. |
c6020 | 69 74 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 69 6e 20 61 6e 79 20 64 69 72 65 63 74 69 | it.can.be.applied.in.any.directi |
c6040 | 6f 6e 2e 20 56 79 4f 53 20 6d 61 6b 65 73 20 66 69 6c 74 65 72 69 6e 67 20 70 6f 73 73 69 62 6c | on..VyOS.makes.filtering.possibl |
c6060 | 65 20 75 73 69 6e 67 20 61 63 6c 73 20 61 6e 64 20 70 72 65 66 69 78 20 6c 69 73 74 73 2e 00 46 | e.using.acls.and.prefix.lists..F |
c6080 | 69 6e 61 6c 6c 79 2c 20 74 6f 20 61 70 70 6c 79 20 74 68 65 20 70 6f 6c 69 63 79 20 72 6f 75 74 | inally,.to.apply.the.policy.rout |
c60a0 | 65 20 74 6f 20 69 6e 67 72 65 73 73 20 74 72 61 66 66 69 63 20 6f 6e 20 6f 75 72 20 4c 41 4e 20 | e.to.ingress.traffic.on.our.LAN. |
c60c0 | 69 6e 74 65 72 66 61 63 65 2c 20 77 65 20 75 73 65 3a 00 46 69 72 65 77 61 6c 6c 00 46 69 72 65 | interface,.we.use:.Firewall.Fire |
c60e0 | 77 61 6c 6c 20 2d 20 49 50 76 34 20 52 75 6c 65 73 00 46 69 72 65 77 61 6c 6c 20 2d 20 49 50 76 | wall.-.IPv4.Rules.Firewall.-.IPv |
c6100 | 36 20 52 75 6c 65 73 00 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 46 | 6.Rules.Firewall.Configuration.F |
c6120 | 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 28 44 65 70 72 65 63 61 74 65 | irewall.Configuration.(Deprecate |
c6140 | 64 29 00 46 69 72 65 77 61 6c 6c 20 44 65 73 63 72 69 70 74 69 6f 6e 00 46 69 72 65 77 61 6c 6c | d).Firewall.Description.Firewall |
c6160 | 20 45 78 63 65 70 74 69 6f 6e 73 00 46 69 72 65 77 61 6c 6c 20 4c 6f 67 73 00 46 69 72 65 77 61 | .Exceptions.Firewall.Logs.Firewa |
c6180 | 6c 6c 20 52 75 6c 65 73 00 46 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 73 00 46 69 72 65 77 61 6c | ll.Rules.Firewall.groups.Firewal |
c61a0 | 6c 20 67 72 6f 75 70 73 20 72 65 70 72 65 73 65 6e 74 20 63 6f 6c 6c 65 63 74 69 6f 6e 73 20 6f | l.groups.represent.collections.o |
c61c0 | 66 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 6e 65 74 77 6f 72 6b 73 2c 20 70 6f 72 74 73 2c | f.IP.addresses,.networks,.ports, |
c61e0 | 20 6d 61 63 20 61 64 64 72 65 73 73 65 73 20 6f 72 20 64 6f 6d 61 69 6e 73 2e 20 4f 6e 63 65 20 | .mac.addresses.or.domains..Once. |
c6200 | 63 72 65 61 74 65 64 2c 20 61 20 67 72 6f 75 70 20 63 61 6e 20 62 65 20 72 65 66 65 72 65 6e 63 | created,.a.group.can.be.referenc |
c6220 | 65 64 20 62 79 20 66 69 72 65 77 61 6c 6c 2c 20 6e 61 74 20 61 6e 64 20 70 6f 6c 69 63 79 20 72 | ed.by.firewall,.nat.and.policy.r |
c6240 | 6f 75 74 65 20 72 75 6c 65 73 20 61 73 20 65 69 74 68 65 72 20 61 20 73 6f 75 72 63 65 20 6f 72 | oute.rules.as.either.a.source.or |
c6260 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6d 61 74 63 68 65 72 2e 20 4d 65 6d 62 65 72 73 20 63 61 | .destination.matcher..Members.ca |
c6280 | 6e 20 62 65 20 61 64 64 65 64 20 6f 72 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 61 20 67 72 6f | n.be.added.or.removed.from.a.gro |
c62a0 | 75 70 20 77 69 74 68 6f 75 74 20 63 68 61 6e 67 65 73 20 74 6f 2c 20 6f 72 20 74 68 65 20 6e 65 | up.without.changes.to,.or.the.ne |
c62c0 | 65 64 20 74 6f 20 72 65 6c 6f 61 64 2c 20 69 6e 64 69 76 69 64 75 61 6c 20 66 69 72 65 77 61 6c | ed.to.reload,.individual.firewal |
c62e0 | 6c 20 72 75 6c 65 73 2e 00 46 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 73 20 72 65 70 72 65 73 65 | l.rules..Firewall.groups.represe |
c6300 | 6e 74 20 63 6f 6c 6c 65 63 74 69 6f 6e 73 20 6f 66 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 | nt.collections.of.IP.addresses,. |
c6320 | 6e 65 74 77 6f 72 6b 73 2c 20 70 6f 72 74 73 2c 20 6d 61 63 20 61 64 64 72 65 73 73 65 73 2c 20 | networks,.ports,.mac.addresses,. |
c6340 | 64 6f 6d 61 69 6e 73 20 6f 72 20 69 6e 74 65 72 66 61 63 65 73 2e 20 4f 6e 63 65 20 63 72 65 61 | domains.or.interfaces..Once.crea |
c6360 | 74 65 64 2c 20 61 20 67 72 6f 75 70 20 63 61 6e 20 62 65 20 72 65 66 65 72 65 6e 63 65 64 20 62 | ted,.a.group.can.be.referenced.b |
c6380 | 79 20 66 69 72 65 77 61 6c 6c 2c 20 6e 61 74 20 61 6e 64 20 70 6f 6c 69 63 79 20 72 6f 75 74 65 | y.firewall,.nat.and.policy.route |
c63a0 | 20 72 75 6c 65 73 20 61 73 20 65 69 74 68 65 72 20 61 20 73 6f 75 72 63 65 20 6f 72 20 64 65 73 | .rules.as.either.a.source.or.des |
c63c0 | 74 69 6e 61 74 69 6f 6e 20 6d 61 74 63 68 65 72 2c 20 61 6e 64 20 61 73 20 69 6e 62 70 75 6e 64 | tination.matcher,.and.as.inbpund |
c63e0 | 2f 6f 75 74 62 6f 75 6e 64 20 69 6e 20 74 68 65 20 63 61 73 65 20 6f 66 20 69 6e 74 65 72 66 61 | /outbound.in.the.case.of.interfa |
c6400 | 63 65 20 67 72 6f 75 70 2e 00 46 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 73 20 72 65 70 72 65 73 | ce.group..Firewall.groups.repres |
c6420 | 65 6e 74 20 63 6f 6c 6c 65 63 74 69 6f 6e 73 20 6f 66 20 49 50 20 61 64 64 72 65 73 73 65 73 2c | ent.collections.of.IP.addresses, |
c6440 | 20 6e 65 74 77 6f 72 6b 73 2c 20 70 6f 72 74 73 2c 20 6d 61 63 20 61 64 64 72 65 73 73 65 73 2c | .networks,.ports,.mac.addresses, |
c6460 | 20 64 6f 6d 61 69 6e 73 20 6f 72 20 69 6e 74 65 72 66 61 63 65 73 2e 20 4f 6e 63 65 20 63 72 65 | .domains.or.interfaces..Once.cre |
c6480 | 61 74 65 64 2c 20 61 20 67 72 6f 75 70 20 63 61 6e 20 62 65 20 72 65 66 65 72 65 6e 63 65 64 20 | ated,.a.group.can.be.referenced. |
c64a0 | 62 79 20 66 69 72 65 77 61 6c 6c 2c 20 6e 61 74 20 61 6e 64 20 70 6f 6c 69 63 79 20 72 6f 75 74 | by.firewall,.nat.and.policy.rout |
c64c0 | 65 20 72 75 6c 65 73 20 61 73 20 65 69 74 68 65 72 20 61 20 73 6f 75 72 63 65 20 6f 72 20 64 65 | e.rules.as.either.a.source.or.de |
c64e0 | 73 74 69 6e 61 74 69 6f 6e 20 6d 61 74 63 68 65 72 2c 20 61 6e 64 2f 6f 72 20 61 73 20 69 6e 62 | stination.matcher,.and/or.as.inb |
c6500 | 6f 75 6e 64 2f 6f 75 74 62 6f 75 6e 64 20 69 6e 20 74 68 65 20 63 61 73 65 20 6f 66 20 69 6e 74 | ound/outbound.in.the.case.of.int |
c6520 | 65 72 66 61 63 65 20 67 72 6f 75 70 2e 00 46 69 72 65 77 61 6c 6c 20 6d 61 72 6b 2e 20 49 74 20 | erface.group..Firewall.mark..It. |
c6540 | 70 6f 73 73 69 62 6c 65 20 74 6f 20 6c 6f 61 64 62 61 6c 61 6e 63 69 6e 67 20 74 72 61 66 66 69 | possible.to.loadbalancing.traffi |
c6560 | 63 20 62 61 73 65 64 20 6f 6e 20 60 60 66 77 6d 61 72 6b 60 60 20 76 61 6c 75 65 00 46 69 72 65 | c.based.on.``fwmark``.value.Fire |
c6580 | 77 61 6c 6c 20 70 6f 6c 69 63 79 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 61 70 70 6c 69 65 64 20 | wall.policy.can.also.be.applied. |
c65a0 | 74 6f 20 74 68 65 20 74 75 6e 6e 65 6c 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 60 6c 6f 63 | to.the.tunnel.interface.for.`loc |
c65c0 | 61 6c 60 2c 20 60 69 6e 60 2c 20 61 6e 64 20 60 6f 75 74 60 20 64 69 72 65 63 74 69 6f 6e 73 20 | al`,.`in`,.and.`out`.directions. |
c65e0 | 61 6e 64 20 66 75 6e 63 74 69 6f 6e 73 20 69 64 65 6e 74 69 63 61 6c 6c 79 20 74 6f 20 65 74 68 | and.functions.identically.to.eth |
c6600 | 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 2e 00 46 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 | ernet.interfaces..Firewall.rules |
c6620 | 20 61 72 65 20 77 72 69 74 74 65 6e 20 61 73 20 6e 6f 72 6d 61 6c 2c 20 75 73 69 6e 67 20 74 68 | .are.written.as.normal,.using.th |
c6640 | 65 20 69 6e 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 61 73 20 74 68 65 20 73 6f 75 | e.internal.IP.address.as.the.sou |
c6660 | 72 63 65 20 6f 66 20 6f 75 74 62 6f 75 6e 64 20 72 75 6c 65 73 20 61 6e 64 20 74 68 65 20 64 65 | rce.of.outbound.rules.and.the.de |
c6680 | 73 74 69 6e 61 74 69 6f 6e 20 6f 66 20 69 6e 62 6f 75 6e 64 20 72 75 6c 65 73 2e 00 46 69 72 65 | stination.of.inbound.rules..Fire |
c66a0 | 77 61 6c 6c 20 72 75 6c 65 73 20 66 6f 72 20 44 65 73 74 69 6e 61 74 69 6f 6e 20 4e 41 54 00 46 | wall.rules.for.Destination.NAT.F |
c66c0 | 69 72 65 77 61 6c 6c 2d 4c 65 67 61 63 79 00 46 69 72 6d 77 61 72 65 20 55 70 64 61 74 65 00 46 | irewall-Legacy.Firmware.Update.F |
c66e0 | 69 72 73 74 20 68 6f 70 20 69 6e 74 65 72 66 61 63 65 20 6f 66 20 61 20 72 6f 75 74 65 20 74 6f | irst.hop.interface.of.a.route.to |
c6700 | 20 6d 61 74 63 68 2e 00 46 69 72 73 74 20 6f 66 20 61 6c 6c 20 79 6f 75 20 6d 75 73 74 20 63 6f | .match..First.of.all.you.must.co |
c6720 | 6e 66 69 67 75 72 65 20 42 47 50 20 72 6f 75 74 65 72 20 77 69 74 68 20 74 68 65 20 3a 61 62 62 | nfigure.BGP.router.with.the.:abb |
c6740 | 72 3a 60 41 53 4e 20 28 41 75 74 6f 6e 6f 6d 6f 75 73 20 53 79 73 74 65 6d 20 4e 75 6d 62 65 72 | r:`ASN.(Autonomous.System.Number |
c6760 | 29 60 2e 20 54 68 65 20 41 53 20 6e 75 6d 62 65 72 20 69 73 20 61 6e 20 69 64 65 6e 74 69 66 69 | )`..The.AS.number.is.an.identifi |
c6780 | 65 72 20 66 6f 72 20 74 68 65 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 2e 20 54 68 | er.for.the.autonomous.system..Th |
c67a0 | 65 20 42 47 50 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 73 20 74 68 65 20 41 53 20 6e 75 6d 62 65 | e.BGP.protocol.uses.the.AS.numbe |
c67c0 | 72 20 66 6f 72 20 64 65 74 65 63 74 69 6e 67 20 77 68 65 74 68 65 72 20 74 68 65 20 42 47 50 20 | r.for.detecting.whether.the.BGP. |
c67e0 | 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 69 6e 74 65 72 6e 61 6c 20 6f 72 20 65 78 74 65 72 6e | connection.is.internal.or.extern |
c6800 | 61 6c 2e 20 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 20 73 70 65 63 69 61 6c | al..VyOS.does.not.have.a.special |
c6820 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 74 61 72 74 20 74 68 65 20 42 47 50 20 70 72 6f 63 65 73 | .command.to.start.the.BGP.proces |
c6840 | 73 2e 20 54 68 65 20 42 47 50 20 70 72 6f 63 65 73 73 20 73 74 61 72 74 73 20 77 68 65 6e 20 74 | s..The.BGP.process.starts.when.t |
c6860 | 68 65 20 66 69 72 73 74 20 6e 65 69 67 68 62 6f 72 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e | he.first.neighbor.is.configured. |
c6880 | 00 46 69 72 73 74 20 6f 66 20 61 6c 6c 2c 20 77 65 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 | .First.of.all,.we.need.to.create |
c68a0 | 20 61 20 43 41 20 72 6f 6f 74 20 63 65 72 74 69 66 69 63 61 74 65 20 61 6e 64 20 73 65 72 76 65 | .a.CA.root.certificate.and.serve |
c68c0 | 72 20 63 65 72 74 69 66 69 63 61 74 65 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 20 73 69 64 65 | r.certificate.on.the.server.side |
c68e0 | 2e 00 46 69 72 73 74 20 73 63 65 6e 61 72 69 6f 3a 20 61 70 70 6c 79 20 64 65 73 74 69 6e 61 74 | ..First.scenario:.apply.destinat |
c6900 | 69 6f 6e 20 4e 41 54 20 66 6f 72 20 61 6c 6c 20 48 54 54 50 20 74 72 61 66 66 69 63 20 63 6f 6d | ion.NAT.for.all.HTTP.traffic.com |
c6920 | 6d 69 6e 67 20 74 68 72 6f 75 67 68 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 30 2c 20 61 6e 64 | ming.through.interface.eth0,.and |
c6940 | 20 75 73 65 72 20 34 20 62 61 63 6b 65 6e 64 73 2e 20 46 69 72 73 74 20 62 61 63 6b 65 6e 64 20 | .user.4.backends..First.backend. |
c6960 | 73 68 6f 75 6c 64 20 72 65 63 65 69 76 65 64 20 33 30 25 20 6f 66 20 74 68 65 20 72 65 71 75 65 | should.received.30%.of.the.reque |
c6980 | 73 74 2c 20 73 65 63 6f 6e 64 20 62 61 63 6b 65 6e 64 20 73 68 6f 75 6c 64 20 67 65 74 20 32 30 | st,.second.backend.should.get.20 |
c69a0 | 25 2c 20 74 68 69 72 64 20 31 35 25 20 61 6e 64 20 74 68 65 20 66 6f 75 72 74 68 20 33 35 25 20 | %,.third.15%.and.the.fourth.35%. |
c69c0 | 57 65 20 77 69 6c 6c 20 75 73 65 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 | We.will.use.source.and.destinati |
c69e0 | 6f 6e 20 61 64 64 72 65 73 73 20 66 6f 72 20 68 61 73 68 20 67 65 6e 65 72 61 74 69 6f 6e 2e 00 | on.address.for.hash.generation.. |
c6a00 | 46 69 72 73 74 20 73 74 65 70 73 00 46 69 72 73 74 20 74 68 65 20 4f 54 50 20 6b 65 79 73 20 6d | First.steps.First.the.OTP.keys.m |
c6a20 | 75 73 74 20 62 65 20 67 65 6e 65 72 61 74 65 64 20 61 6e 64 20 73 65 6e 74 20 74 6f 20 74 68 65 | ust.be.generated.and.sent.to.the |
c6a40 | 20 75 73 65 72 20 61 6e 64 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 | .user.and.to.the.configuration:. |
c6a60 | 46 69 72 73 74 20 77 65 20 6e 65 65 64 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 62 61 73 | First.we.need.to.specify.the.bas |
c6a80 | 69 63 20 73 65 74 74 69 6e 67 73 2e 20 31 31 39 34 2f 55 44 50 20 69 73 20 74 68 65 20 64 65 66 | ic.settings..1194/UDP.is.the.def |
c6aa0 | 61 75 6c 74 2e 20 54 68 65 20 60 60 70 65 72 73 69 73 74 65 6e 74 2d 74 75 6e 6e 65 6c 60 60 20 | ault..The.``persistent-tunnel``. |
c6ac0 | 6f 70 74 69 6f 6e 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 2c 20 69 74 20 70 72 65 76 65 6e | option.is.recommended,.it.preven |
c6ae0 | 74 73 20 74 68 65 20 54 55 4e 2f 54 41 50 20 64 65 76 69 63 65 20 66 72 6f 6d 20 63 6c 6f 73 69 | ts.the.TUN/TAP.device.from.closi |
c6b00 | 6e 67 20 6f 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 72 65 73 65 74 73 20 6f 72 20 64 61 65 6d 6f | ng.on.connection.resets.or.daemo |
c6b20 | 6e 20 72 65 6c 6f 61 64 73 2e 00 46 69 72 73 74 20 79 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 | n.reloads..First.you.will.need.t |
c6b40 | 6f 20 64 65 70 6c 6f 79 20 61 6e 20 52 50 4b 49 20 76 61 6c 69 64 61 74 6f 72 20 66 6f 72 20 79 | o.deploy.an.RPKI.validator.for.y |
c6b60 | 6f 75 72 20 72 6f 75 74 65 72 73 20 74 6f 20 75 73 65 2e 20 54 68 65 20 52 49 50 45 20 4e 43 43 | our.routers.to.use..The.RIPE.NCC |
c6b80 | 20 68 65 6c 70 66 75 6c 6c 79 20 70 72 6f 76 69 64 65 20 60 73 6f 6d 65 20 69 6e 73 74 72 75 63 | .helpfully.provide.`some.instruc |
c6ba0 | 74 69 6f 6e 73 60 5f 20 74 6f 20 67 65 74 20 79 6f 75 20 73 74 61 72 74 65 64 20 77 69 74 68 20 | tions`_.to.get.you.started.with. |
c6bc0 | 73 65 76 65 72 61 6c 20 64 69 66 66 65 72 65 6e 74 20 6f 70 74 69 6f 6e 73 2e 20 20 4f 6e 63 65 | several.different.options...Once |
c6be0 | 20 79 6f 75 72 20 73 65 72 76 65 72 20 69 73 20 72 75 6e 6e 69 6e 67 20 79 6f 75 20 63 61 6e 20 | .your.server.is.running.you.can. |
c6c00 | 73 74 61 72 74 20 76 61 6c 69 64 61 74 69 6e 67 20 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 2e 00 | start.validating.announcements.. |
c6c20 | 46 69 72 73 74 2c 20 6f 6e 20 62 6f 74 68 20 72 6f 75 74 65 72 73 20 72 75 6e 20 74 68 65 20 6f | First,.on.both.routers.run.the.o |
c6c40 | 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 20 22 67 65 6e 65 72 61 74 65 20 70 6b 69 | perational.command."generate.pki |
c6c60 | 20 6b 65 79 2d 70 61 69 72 20 69 6e 73 74 61 6c 6c 20 3c 6b 65 79 2d 70 61 69 72 20 6e 61 6d 3e | .key-pair.install.<key-pair.nam> |
c6c80 | 3e 22 2e 20 59 6f 75 20 6d 61 79 20 63 68 6f 6f 73 65 20 64 69 66 66 65 72 65 6e 74 20 6c 65 6e | >"..You.may.choose.different.len |
c6ca0 | 67 74 68 20 74 68 61 6e 20 32 30 34 38 20 6f 66 20 63 6f 75 72 73 65 2e 00 46 69 72 73 74 2c 20 | gth.than.2048.of.course..First,. |
c6cc0 | 6f 6e 20 62 6f 74 68 20 72 6f 75 74 65 72 73 20 72 75 6e 20 74 68 65 20 6f 70 65 72 61 74 69 6f | on.both.routers.run.the.operatio |
c6ce0 | 6e 61 6c 20 63 6f 6d 6d 61 6e 64 20 22 67 65 6e 65 72 61 74 65 20 70 6b 69 20 6b 65 79 2d 70 61 | nal.command."generate.pki.key-pa |
c6d00 | 69 72 20 69 6e 73 74 61 6c 6c 20 3c 6b 65 79 2d 70 61 69 72 20 6e 61 6d 65 3e 22 2e 20 59 6f 75 | ir.install.<key-pair.name>"..You |
c6d20 | 20 6d 61 79 20 63 68 6f 6f 73 65 20 64 69 66 66 65 72 65 6e 74 20 6c 65 6e 67 74 68 20 74 68 61 | .may.choose.different.length.tha |
c6d40 | 6e 20 32 30 34 38 20 6f 66 20 63 6f 75 72 73 65 2e 00 46 69 72 73 74 2c 20 6f 6e 65 20 6f 66 20 | n.2048.of.course..First,.one.of. |
c6d60 | 74 68 65 20 73 79 73 74 65 6d 73 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 6b 65 79 20 75 73 69 | the.systems.generate.the.key.usi |
c6d80 | 6e 67 20 74 68 65 20 3a 72 65 66 3a 60 67 65 6e 65 72 61 74 65 20 70 6b 69 20 6f 70 65 6e 76 70 | ng.the.:ref:`generate.pki.openvp |
c6da0 | 6e 20 73 68 61 72 65 64 2d 73 65 63 72 65 74 3c 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 70 6b | n.shared-secret<configuration/pk |
c6dc0 | 69 2f 69 6e 64 65 78 3a 70 6b 69 3e 60 20 63 6f 6d 6d 61 6e 64 2e 20 4f 6e 63 65 20 67 65 6e 65 | i/index:pki>`.command..Once.gene |
c6de0 | 72 61 74 65 64 2c 20 79 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 69 6e 73 74 61 6c 6c 20 | rated,.you.will.need.to.install. |
c6e00 | 74 68 69 73 20 6b 65 79 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 73 79 73 74 65 6d 2c 20 74 68 | this.key.on.the.local.system,.th |
c6e20 | 65 6e 20 63 6f 70 79 20 61 6e 64 20 69 6e 73 74 61 6c 6c 20 74 68 69 73 20 6b 65 79 20 74 6f 20 | en.copy.and.install.this.key.to. |
c6e40 | 74 68 65 20 72 65 6d 6f 74 65 20 72 6f 75 74 65 72 2e 00 46 69 72 73 74 2c 20 79 6f 75 20 6e 65 | the.remote.router..First,.you.ne |
c6e60 | 65 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 61 20 6b 65 79 20 62 79 20 72 75 6e 6e 69 6e 67 20 | ed.to.generate.a.key.by.running. |
c6e80 | 60 60 72 75 6e 20 67 65 6e 65 72 61 74 65 20 70 6b 69 20 6f 70 65 6e 76 70 6e 20 73 68 61 72 65 | ``run.generate.pki.openvpn.share |
c6ea0 | 64 2d 73 65 63 72 65 74 20 69 6e 73 74 61 6c 6c 20 3c 6e 61 6d 65 3e 60 60 20 66 72 6f 6d 20 63 | d-secret.install.<name>``.from.c |
c6ec0 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 2e 20 59 6f 75 20 63 61 6e 20 75 73 65 20 61 | onfiguration.mode..You.can.use.a |
c6ee0 | 6e 79 20 6e 61 6d 65 2c 20 77 65 20 77 69 6c 6c 20 75 73 65 20 60 60 73 32 73 60 60 2e 00 46 6c | ny.name,.we.will.use.``s2s``..Fl |
c6f00 | 61 73 68 00 46 6c 61 73 68 20 4f 76 65 72 72 69 64 65 00 46 6c 6f 77 20 41 63 63 6f 75 6e 74 69 | ash.Flash.Override.Flow.Accounti |
c6f20 | 6e 67 00 46 6c 6f 77 20 45 78 70 6f 72 74 00 46 6c 6f 77 20 61 6e 64 20 70 61 63 6b 65 74 2d 62 | ng.Flow.Export.Flow.and.packet-b |
c6f40 | 61 73 65 64 20 62 61 6c 61 6e 63 69 6e 67 00 46 6c 6f 77 73 20 63 61 6e 20 62 65 20 65 78 70 6f | ased.balancing.Flows.can.be.expo |
c6f60 | 72 74 65 64 20 76 69 61 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 70 72 6f 74 6f 63 6f 6c 73 | rted.via.two.different.protocols |
c6f80 | 3a 20 4e 65 74 46 6c 6f 77 20 28 76 65 72 73 69 6f 6e 73 20 35 2c 20 39 20 61 6e 64 20 31 30 2f | :.NetFlow.(versions.5,.9.and.10/ |
c6fa0 | 49 50 46 49 58 29 20 61 6e 64 20 73 46 6c 6f 77 2e 20 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 | IPFIX).and.sFlow..Additionally,. |
c6fc0 | 79 6f 75 20 6d 61 79 20 73 61 76 65 20 66 6c 6f 77 73 20 74 6f 20 61 6e 20 69 6e 2d 6d 65 6d 6f | you.may.save.flows.to.an.in-memo |
c6fe0 | 72 79 20 74 61 62 6c 65 20 69 6e 74 65 72 6e 61 6c 6c 79 20 69 6e 20 61 20 72 6f 75 74 65 72 2e | ry.table.internally.in.a.router. |
c7000 | 00 46 6c 6f 77 74 61 62 6c 65 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 46 6c 6f 77 74 61 62 | .Flowtable.Configuration.Flowtab |
c7020 | 6c 65 73 20 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 64 65 66 69 6e 65 20 61 20 66 61 73 74 | les..allows.you.to.define.a.fast |
c7040 | 70 61 74 68 20 74 68 72 6f 75 67 68 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 64 61 74 61 70 | path.through.the.flowtable.datap |
c7060 | 61 74 68 2e 20 54 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 73 75 70 70 6f 72 74 73 20 66 6f 72 20 | ath..The.flowtable.supports.for. |
c7080 | 74 68 65 20 6c 61 79 65 72 20 33 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 6e 64 20 74 68 | the.layer.3.IPv4.and.IPv6.and.th |
c70a0 | 65 20 6c 61 79 65 72 20 34 20 54 43 50 20 61 6e 64 20 55 44 50 20 70 72 6f 74 6f 63 6f 6c 73 2e | e.layer.4.TCP.and.UDP.protocols. |
c70c0 | 00 46 6c 6f 77 74 61 62 6c 65 73 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 | .Flowtables.Firewall.Configurati |
c70e0 | 6f 6e 00 46 6c 75 73 68 69 6e 67 20 74 68 65 20 73 65 73 73 69 6f 6e 20 74 61 62 6c 65 20 77 69 | on.Flushing.the.session.table.wi |
c7100 | 6c 6c 20 63 61 75 73 65 20 6f 74 68 65 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 66 61 | ll.cause.other.connections.to.fa |
c7120 | 6c 6c 20 62 61 63 6b 20 66 72 6f 6d 20 66 6c 6f 77 2d 62 61 73 65 64 20 74 6f 20 70 61 63 6b 65 | ll.back.from.flow-based.to.packe |
c7140 | 74 2d 62 61 73 65 64 20 62 61 6c 61 6e 63 69 6e 67 20 75 6e 74 69 6c 20 65 61 63 68 20 66 6c 6f | t-based.balancing.until.each.flo |
c7160 | 77 20 69 73 20 72 65 65 73 74 61 62 6c 69 73 68 65 64 2e 00 46 6f 6c 6c 6f 77 20 74 68 65 20 53 | w.is.reestablished..Follow.the.S |
c7180 | 53 48 20 64 79 6e 61 6d 69 63 2d 70 72 6f 74 65 63 74 69 6f 6e 20 6c 6f 67 2e 00 46 6f 6c 6c 6f | SH.dynamic-protection.log..Follo |
c71a0 | 77 20 74 68 65 20 53 53 48 20 73 65 72 76 65 72 20 6c 6f 67 2e 00 46 6f 6c 6c 6f 77 20 74 68 65 | w.the.SSH.server.log..Follow.the |
c71c0 | 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 74 6f 20 67 65 6e 65 72 61 74 65 20 43 41 20 63 65 72 | .instructions.to.generate.CA.cer |
c71e0 | 74 20 28 69 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 29 3a 00 46 6f 6c 6c 6f | t.(in.configuration.mode):.Follo |
c7200 | 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 74 6f 20 67 65 6e 65 72 61 74 65 20 73 | w.the.instructions.to.generate.s |
c7220 | 65 72 76 65 72 20 63 65 72 74 20 28 69 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 | erver.cert.(in.configuration.mod |
c7240 | 65 29 3a 00 46 6f 6c 6c 6f 77 20 74 68 65 20 6c 6f 67 73 20 66 6f 72 20 6d 44 4e 53 20 72 65 70 | e):.Follow.the.logs.for.mDNS.rep |
c7260 | 65 61 74 65 72 20 73 65 72 76 69 63 65 2e 00 46 6f 72 20 3a 72 65 66 3a 60 62 69 64 69 72 65 63 | eater.service..For.:ref:`bidirec |
c7280 | 74 69 6f 6e 61 6c 2d 6e 61 74 60 20 61 20 72 75 6c 65 20 66 6f 72 20 62 6f 74 68 20 3a 72 65 66 | tional-nat`.a.rule.for.both.:ref |
c72a0 | 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 61 6e 64 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 | :`source-nat`.and.:ref:`destinat |
c72c0 | 69 6f 6e 2d 6e 61 74 60 20 6e 65 65 64 73 20 74 6f 20 62 65 20 63 72 65 61 74 65 64 2e 00 46 6f | ion-nat`.needs.to.be.created..Fo |
c72e0 | 72 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 20 72 75 6c 65 73 20 74 | r.:ref:`destination-nat`.rules.t |
c7300 | 68 65 20 70 61 63 6b 65 74 73 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 77 | he.packets.destination.address.w |
c7320 | 69 6c 6c 20 62 65 20 72 65 70 6c 61 63 65 64 20 62 79 20 74 68 65 20 73 70 65 63 69 66 69 65 64 | ill.be.replaced.by.the.specified |
c7340 | 20 61 64 64 72 65 73 73 20 69 6e 20 74 68 65 20 60 74 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 64 | .address.in.the.`translation.add |
c7360 | 72 65 73 73 60 20 63 6f 6d 6d 61 6e 64 2e 00 46 6f 72 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d | ress`.command..For.:ref:`source- |
c7380 | 6e 61 74 60 20 72 75 6c 65 73 20 74 68 65 20 70 61 63 6b 65 74 73 20 73 6f 75 72 63 65 20 61 64 | nat`.rules.the.packets.source.ad |
c73a0 | 64 72 65 73 73 20 77 69 6c 6c 20 62 65 20 72 65 70 6c 61 63 65 64 20 77 69 74 68 20 74 68 65 20 | dress.will.be.replaced.with.the. |
c73c0 | 61 64 64 72 65 73 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 74 68 65 20 74 72 61 6e 73 6c 61 | address.specified.in.the.transla |
c73e0 | 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 2e 20 41 20 70 6f 72 74 20 74 72 61 6e 73 6c 61 74 69 6f 6e | tion.command..A.port.translation |
c7400 | 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 6e 64 20 69 73 20 70 61 | .can.also.be.specified.and.is.pa |
c7420 | 72 74 20 6f 66 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 00 46 | rt.of.the.translation.address..F |
c7440 | 6f 72 20 45 6e 63 72 79 70 74 69 6f 6e 3a 00 46 6f 72 20 48 61 73 68 69 6e 67 3a 00 46 6f 72 20 | or.Encryption:.For.Hashing:.For. |
c7460 | 49 53 2d 49 53 20 74 6f 70 20 6f 70 65 72 61 74 65 20 63 6f 72 72 65 63 74 6c 79 2c 20 6f 6e 65 | IS-IS.top.operate.correctly,.one |
c7480 | 20 6d 75 73 74 20 64 6f 20 74 68 65 20 65 71 75 69 76 61 6c 65 6e 74 20 6f 66 20 61 20 52 6f 75 | .must.do.the.equivalent.of.a.Rou |
c74a0 | 74 65 72 20 49 44 20 69 6e 20 43 4c 4e 53 2e 20 54 68 69 73 20 52 6f 75 74 65 72 20 49 44 20 69 | ter.ID.in.CLNS..This.Router.ID.i |
c74c0 | 73 20 63 61 6c 6c 65 64 20 74 68 65 20 3a 61 62 62 72 3a 60 4e 45 54 20 28 4e 65 74 77 6f 72 6b | s.called.the.:abbr:`NET.(Network |
c74e0 | 20 45 6e 74 69 74 79 20 54 69 74 6c 65 29 60 2e 20 54 68 69 73 20 6d 75 73 74 20 62 65 20 75 6e | .Entity.Title)`..This.must.be.un |
c7500 | 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 61 6e 64 20 65 76 65 72 79 20 72 6f 75 74 65 72 20 74 | ique.for.each.and.every.router.t |
c7520 | 68 61 74 20 69 73 20 6f 70 65 72 61 74 69 6e 67 20 69 6e 20 49 53 2d 49 53 2e 20 49 74 20 61 6c | hat.is.operating.in.IS-IS..It.al |
c7540 | 73 6f 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 64 75 70 6c 69 63 61 74 65 64 20 6f 74 68 65 72 77 | so.must.not.be.duplicated.otherw |
c7560 | 69 73 65 20 74 68 65 20 73 61 6d 65 20 69 73 73 75 65 73 20 74 68 61 74 20 6f 63 63 75 72 20 77 | ise.the.same.issues.that.occur.w |
c7580 | 69 74 68 69 6e 20 4f 53 50 46 20 77 69 6c 6c 20 6f 63 63 75 72 20 77 69 74 68 69 6e 20 49 53 2d | ithin.OSPF.will.occur.within.IS- |
c75a0 | 49 53 20 77 68 65 6e 20 69 74 20 63 6f 6d 65 73 20 74 6f 20 73 61 69 64 20 64 75 70 6c 69 63 61 | IS.when.it.comes.to.said.duplica |
c75c0 | 74 69 6f 6e 2e 00 46 6f 72 20 49 6e 63 6f 6d 69 6e 67 20 61 6e 64 20 49 6d 70 6f 72 74 20 52 6f | tion..For.Incoming.and.Import.Ro |
c75e0 | 75 74 65 2d 6d 61 70 73 20 69 66 20 77 65 20 72 65 63 65 69 76 65 20 61 20 76 36 20 67 6c 6f 62 | ute-maps.if.we.receive.a.v6.glob |
c7600 | 61 6c 20 61 6e 64 20 76 36 20 4c 4c 20 61 64 64 72 65 73 73 20 66 6f 72 20 74 68 65 20 72 6f 75 | al.and.v6.LL.address.for.the.rou |
c7620 | 74 65 2c 20 74 68 65 6e 20 70 72 65 66 65 72 20 74 6f 20 75 73 65 20 74 68 65 20 67 6c 6f 62 61 | te,.then.prefer.to.use.the.globa |
c7640 | 6c 20 61 64 64 72 65 73 73 20 61 73 20 74 68 65 20 6e 65 78 74 68 6f 70 2e 00 46 6f 72 20 4c 6f | l.address.as.the.nexthop..For.Lo |
c7660 | 63 61 6c 20 55 73 65 72 73 00 46 6f 72 20 52 41 44 49 55 53 20 75 73 65 72 73 00 46 6f 72 20 55 | cal.Users.For.RADIUS.users.For.U |
c7680 | 53 42 20 70 6f 72 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 72 65 66 6f 72 | SB.port.information.please.refor |
c76a0 | 20 74 6f 3a 20 3a 72 65 66 3a 60 68 61 72 64 77 61 72 65 5f 75 73 62 60 2e 00 46 6f 72 20 61 20 | .to:.:ref:`hardware_usb`..For.a. |
c76c0 | 68 65 61 64 73 74 61 72 74 20 79 6f 75 20 63 61 6e 20 75 73 65 20 74 68 65 20 62 65 6c 6f 77 20 | headstart.you.can.use.the.below. |
c76e0 | 65 78 61 6d 70 6c 65 20 6f 6e 20 68 6f 77 20 74 6f 20 62 75 69 6c 64 20 61 20 62 6f 6e 64 20 77 | example.on.how.to.build.a.bond.w |
c7700 | 69 74 68 20 74 77 6f 20 69 6e 74 65 72 66 61 63 65 73 20 66 72 6f 6d 20 56 79 4f 53 20 74 6f 20 | ith.two.interfaces.from.VyOS.to. |
c7720 | 61 20 4a 75 6e 69 70 65 72 20 45 58 20 53 77 69 74 63 68 20 73 79 73 74 65 6d 2e 00 46 6f 72 20 | a.Juniper.EX.Switch.system..For. |
c7740 | 61 20 68 65 61 64 73 74 61 72 74 20 79 6f 75 20 63 61 6e 20 75 73 65 20 74 68 65 20 62 65 6c 6f | a.headstart.you.can.use.the.belo |
c7760 | 77 20 65 78 61 6d 70 6c 65 20 6f 6e 20 68 6f 77 20 74 6f 20 62 75 69 6c 64 20 61 20 62 6f 6e 64 | w.example.on.how.to.build.a.bond |
c7780 | 2c 70 6f 72 74 2d 63 68 61 6e 6e 65 6c 20 77 69 74 68 20 74 77 6f 20 69 6e 74 65 72 66 61 63 65 | ,port-channel.with.two.interface |
c77a0 | 73 20 66 72 6f 6d 20 56 79 4f 53 20 74 6f 20 61 20 41 72 75 62 61 2f 48 50 20 32 35 31 30 47 20 | s.from.VyOS.to.a.Aruba/HP.2510G. |
c77c0 | 73 77 69 74 63 68 2e 00 46 6f 72 20 61 20 6c 61 72 67 65 20 61 6d 6f 75 6e 74 20 6f 66 20 70 72 | switch..For.a.large.amount.of.pr |
c77e0 | 69 76 61 74 65 20 6d 61 63 68 69 6e 65 73 20 62 65 68 69 6e 64 20 74 68 65 20 4e 41 54 20 79 6f | ivate.machines.behind.the.NAT.yo |
c7800 | 75 72 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 6d 69 67 68 74 20 74 6f 20 62 65 20 62 69 67 67 | ur.address.pool.might.to.be.bigg |
c7820 | 65 72 2e 20 55 73 65 20 61 6e 79 20 61 64 64 72 65 73 73 20 69 6e 20 74 68 65 20 72 61 6e 67 65 | er..Use.any.address.in.the.range |
c7840 | 20 31 30 30 2e 36 34 2e 30 2e 31 30 20 2d 20 31 30 30 2e 36 34 2e 30 2e 32 30 20 6f 6e 20 53 4e | .100.64.0.10.-.100.64.0.20.on.SN |
c7860 | 41 54 20 72 75 6c 65 20 34 30 20 77 68 65 6e 20 64 6f 69 6e 67 20 74 68 65 20 74 72 61 6e 73 6c | AT.rule.40.when.doing.the.transl |
c7880 | 61 74 69 6f 6e 00 46 6f 72 20 61 20 73 69 6d 70 6c 65 20 68 6f 6d 65 20 6e 65 74 77 6f 72 6b 20 | ation.For.a.simple.home.network. |
c78a0 | 75 73 69 6e 67 20 6a 75 73 74 20 74 68 65 20 49 53 50 27 73 20 65 71 75 69 70 6d 65 6e 74 2c 20 | using.just.the.ISP's.equipment,. |
c78c0 | 74 68 69 73 20 69 73 20 75 73 75 61 6c 6c 79 20 64 65 73 69 72 61 62 6c 65 2e 20 42 75 74 20 69 | this.is.usually.desirable..But.i |
c78e0 | 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 72 75 6e 20 56 79 4f 53 20 61 73 20 79 6f 75 72 20 66 | f.you.want.to.run.VyOS.as.your.f |
c7900 | 69 72 65 77 61 6c 6c 20 61 6e 64 20 72 6f 75 74 65 72 2c 20 74 68 69 73 20 77 69 6c 6c 20 72 65 | irewall.and.router,.this.will.re |
c7920 | 73 75 6c 74 20 69 6e 20 68 61 76 69 6e 67 20 61 20 64 6f 75 62 6c 65 20 4e 41 54 20 61 6e 64 20 | sult.in.having.a.double.NAT.and. |
c7940 | 66 69 72 65 77 61 6c 6c 20 73 65 74 75 70 2e 20 54 68 69 73 20 72 65 73 75 6c 74 73 20 69 6e 20 | firewall.setup..This.results.in. |
c7960 | 61 20 66 65 77 20 65 78 74 72 61 20 6c 61 79 65 72 73 20 6f 66 20 63 6f 6d 70 6c 65 78 69 74 79 | a.few.extra.layers.of.complexity |
c7980 | 2c 20 70 61 72 74 69 63 75 6c 61 72 6c 79 20 69 66 20 79 6f 75 20 75 73 65 20 73 6f 6d 65 20 4e | ,.particularly.if.you.use.some.N |
c79a0 | 41 54 20 6f 72 20 74 75 6e 6e 65 6c 20 66 65 61 74 75 72 65 73 2e 00 46 6f 72 20 63 6f 6e 6e 65 | AT.or.tunnel.features..For.conne |
c79c0 | 63 74 69 6f 6e 6c 65 73 73 20 70 72 6f 74 6f 63 6f 6c 73 20 61 73 20 6c 69 6b 65 20 49 43 4d 50 | ctionless.protocols.as.like.ICMP |
c79e0 | 20 61 6e 64 20 55 44 50 2c 20 61 20 66 6c 6f 77 20 69 73 20 63 6f 6e 73 69 64 65 72 65 64 20 63 | .and.UDP,.a.flow.is.considered.c |
c7a00 | 6f 6d 70 6c 65 74 65 20 6f 6e 63 65 20 6e 6f 20 6d 6f 72 65 20 70 61 63 6b 65 74 73 20 66 6f 72 | omplete.once.no.more.packets.for |
c7a20 | 20 74 68 69 73 20 66 6c 6f 77 20 61 70 70 65 61 72 20 61 66 74 65 72 20 63 6f 6e 66 69 67 75 72 | .this.flow.appear.after.configur |
c7a40 | 61 62 6c 65 20 74 69 6d 65 6f 75 74 2e 00 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 66 20 70 72 | able.timeout..For.example,.if.pr |
c7a60 | 6f 62 6c 65 6d 73 20 77 69 74 68 20 70 6f 6f 72 20 74 69 6d 65 20 73 79 6e 63 68 72 6f 6e 69 7a | oblems.with.poor.time.synchroniz |
c7a80 | 61 74 69 6f 6e 20 61 72 65 20 65 78 70 65 72 69 65 6e 63 65 64 2c 20 74 68 65 20 77 69 6e 64 6f | ation.are.experienced,.the.windo |
c7aa0 | 77 20 63 61 6e 20 62 65 20 69 6e 63 72 65 61 73 65 64 20 66 72 6f 6d 20 69 74 73 20 64 65 66 61 | w.can.be.increased.from.its.defa |
c7ac0 | 75 6c 74 20 73 69 7a 65 20 6f 66 20 33 20 70 65 72 6d 69 74 74 65 64 20 63 6f 64 65 73 20 28 6f | ult.size.of.3.permitted.codes.(o |
c7ae0 | 6e 65 20 70 72 65 76 69 6f 75 73 20 63 6f 64 65 2c 20 74 68 65 20 63 75 72 72 65 6e 74 20 63 6f | ne.previous.code,.the.current.co |
c7b00 | 64 65 2c 20 74 68 65 20 6e 65 78 74 20 63 6f 64 65 29 20 74 6f 20 31 37 20 70 65 72 6d 69 74 74 | de,.the.next.code).to.17.permitt |
c7b20 | 65 64 20 63 6f 64 65 73 20 28 74 68 65 20 38 20 70 72 65 76 69 6f 75 73 20 63 6f 64 65 73 2c 20 | ed.codes.(the.8.previous.codes,. |
c7b40 | 74 68 65 20 63 75 72 72 65 6e 74 20 63 6f 64 65 2c 20 61 6e 64 20 74 68 65 20 38 20 6e 65 78 74 | the.current.code,.and.the.8.next |
c7b60 | 20 63 6f 64 65 73 29 2e 20 54 68 69 73 20 77 69 6c 6c 20 70 65 72 6d 69 74 20 66 6f 72 20 61 20 | .codes)..This.will.permit.for.a. |
c7b80 | 74 69 6d 65 20 73 6b 65 77 20 6f 66 20 75 70 20 74 6f 20 34 20 6d 69 6e 75 74 65 73 20 62 65 74 | time.skew.of.up.to.4.minutes.bet |
c7ba0 | 77 65 65 6e 20 63 6c 69 65 6e 74 20 61 6e 64 20 73 65 72 76 65 72 2e 00 46 6f 72 20 65 78 61 6d | ween.client.and.server..For.exam |
c7bc0 | 70 6c 65 3a 00 46 6f 72 20 66 69 72 65 77 61 6c 6c 20 66 69 6c 74 65 72 69 6e 67 2c 20 63 6f 6e | ple:.For.firewall.filtering,.con |
c7be0 | 66 69 67 75 72 61 74 69 6f 6e 20 73 68 6f 75 6c 64 20 62 65 20 64 6f 6e 65 20 69 6e 20 60 60 73 | figuration.should.be.done.in.``s |
c7c00 | 65 74 20 66 69 72 65 77 61 6c 6c 20 5b 69 70 76 34 20 7c 20 69 70 76 36 5d 20 2e 2e 2e 60 60 00 | et.firewall.[ipv4.|.ipv6]....``. |
c7c20 | 46 6f 72 20 66 69 72 65 77 61 6c 6c 20 66 69 6c 74 65 72 69 6e 67 2c 20 66 69 72 65 77 61 6c 6c | For.firewall.filtering,.firewall |
c7c40 | 20 72 75 6c 65 73 20 6e 65 65 64 73 20 74 6f 20 62 65 20 63 72 65 61 74 65 64 2e 20 45 61 63 68 | .rules.needs.to.be.created..Each |
c7c60 | 20 72 75 6c 65 20 69 73 20 6e 75 6d 62 65 72 65 64 2c 20 68 61 73 20 61 6e 20 61 63 74 69 6f 6e | .rule.is.numbered,.has.an.action |
c7c80 | 20 74 6f 20 61 70 70 6c 79 20 69 66 20 74 68 65 20 72 75 6c 65 20 69 73 20 6d 61 74 63 68 65 64 | .to.apply.if.the.rule.is.matched |
c7ca0 | 2c 20 61 6e 64 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 73 70 65 63 69 66 79 20 6d 75 6c | ,.and.the.ability.to.specify.mul |
c7cc0 | 74 69 70 6c 65 20 63 72 69 74 65 72 69 61 20 6d 61 74 63 68 65 72 73 2e 20 44 61 74 61 20 70 61 | tiple.criteria.matchers..Data.pa |
c7ce0 | 63 6b 65 74 73 20 67 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 75 6c 65 73 20 66 72 6f 6d 20 | ckets.go.through.the.rules.from. |
c7d00 | 31 20 2d 20 39 39 39 39 39 39 2c 20 73 6f 20 6f 72 64 65 72 20 69 73 20 63 72 75 63 69 61 6c 2e | 1.-.999999,.so.order.is.crucial. |
c7d20 | 20 41 74 20 74 68 65 20 66 69 72 73 74 20 6d 61 74 63 68 20 74 68 65 20 61 63 74 69 6f 6e 20 6f | .At.the.first.match.the.action.o |
c7d40 | 66 20 74 68 65 20 72 75 6c 65 20 77 69 6c 6c 20 62 65 20 65 78 65 63 75 74 65 64 2e 00 46 6f 72 | f.the.rule.will.be.executed..For |
c7d60 | 20 66 72 61 67 6d 65 6e 74 65 64 20 54 43 50 20 6f 72 20 55 44 50 20 70 61 63 6b 65 74 73 20 61 | .fragmented.TCP.or.UDP.packets.a |
c7d80 | 6e 64 20 61 6c 6c 20 6f 74 68 65 72 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 70 72 6f 74 6f | nd.all.other.IPv4.and.IPv6.proto |
c7da0 | 63 6f 6c 20 74 72 61 66 66 69 63 2c 20 74 68 65 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 74 | col.traffic,.the.source.and.dest |
c7dc0 | 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 6f 6d 69 74 | ination.port.information.is.omit |
c7de0 | 74 65 64 2e 20 46 6f 72 20 6e 6f 6e 2d 49 50 20 74 72 61 66 66 69 63 2c 20 74 68 65 20 66 6f 72 | ted..For.non-IP.traffic,.the.for |
c7e00 | 6d 75 6c 61 20 69 73 20 74 68 65 20 73 61 6d 65 20 61 73 20 66 6f 72 20 74 68 65 20 6c 61 79 65 | mula.is.the.same.as.for.the.laye |
c7e20 | 72 32 20 74 72 61 6e 73 6d 69 74 20 68 61 73 68 20 70 6f 6c 69 63 79 2e 00 46 6f 72 20 67 65 6e | r2.transmit.hash.policy..For.gen |
c7e40 | 65 72 61 74 69 6e 67 20 61 6e 20 4f 54 50 20 6b 65 79 20 69 6e 20 56 79 4f 53 2c 20 79 6f 75 20 | erating.an.OTP.key.in.VyOS,.you. |
c7e60 | 63 61 6e 20 75 73 65 20 74 68 65 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 28 6f 70 65 72 61 74 69 | can.use.the.CLI.command.(operati |
c7e80 | 6f 6e 61 6c 20 6d 6f 64 65 29 3a 00 46 6f 72 20 69 6e 62 6f 75 6e 64 20 75 70 64 61 74 65 73 20 | onal.mode):.For.inbound.updates. |
c7ea0 | 74 68 65 20 6f 72 64 65 72 20 6f 66 20 70 72 65 66 65 72 65 6e 63 65 20 69 73 3a 00 46 6f 72 20 | the.order.of.preference.is:.For. |
c7ec0 | 69 6e 73 74 61 6e 63 65 2c 20 77 69 74 68 20 3a 63 6f 64 65 3a 60 73 65 74 20 71 6f 73 20 70 6f | instance,.with.:code:`set.qos.po |
c7ee0 | 6c 69 63 79 20 73 68 61 70 65 72 20 4d 59 2d 53 48 41 50 45 52 20 63 6c 61 73 73 20 33 30 20 73 | licy.shaper.MY-SHAPER.class.30.s |
c7f00 | 65 74 2d 64 73 63 70 20 45 46 60 20 79 6f 75 20 77 6f 75 6c 64 20 62 65 20 6d 6f 64 69 66 79 69 | et-dscp.EF`.you.would.be.modifyi |
c7f20 | 6e 67 20 74 68 65 20 44 53 43 50 20 66 69 65 6c 64 20 76 61 6c 75 65 20 6f 66 20 70 61 63 6b 65 | ng.the.DSCP.field.value.of.packe |
c7f40 | 74 73 20 69 6e 20 74 68 61 74 20 63 6c 61 73 73 20 74 6f 20 45 78 70 65 64 69 74 65 20 46 6f 72 | ts.in.that.class.to.Expedite.For |
c7f60 | 77 61 72 64 69 6e 67 2e 00 46 6f 72 20 69 70 76 34 3a 00 46 6f 72 20 6c 61 74 65 73 74 20 72 65 | warding..For.ipv4:.For.latest.re |
c7f80 | 6c 65 61 73 65 73 2c 20 72 65 66 65 72 20 74 68 65 20 60 66 69 72 65 77 61 6c 6c 20 28 69 6e 74 | leases,.refer.the.`firewall.(int |
c7fa0 | 65 72 66 61 63 65 2d 67 72 6f 75 70 73 29 20 3c 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 76 79 6f | erface-groups).<https://docs.vyo |
c7fc0 | 73 2e 69 6f 2f 65 6e 2f 6c 61 74 65 73 74 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 | s.io/en/latest/configuration/fir |
c7fe0 | 65 77 61 6c 6c 2f 67 65 6e 65 72 61 6c 2e 68 74 6d 6c 23 69 6e 74 65 72 66 61 63 65 2d 67 72 6f | ewall/general.html#interface-gro |
c8000 | 75 70 73 3e 60 5f 20 6d 61 69 6e 20 70 61 67 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 7a 6f | ups>`_.main.page.to.configure.zo |
c8020 | 6e 65 20 62 61 73 65 64 20 72 75 6c 65 73 2e 20 4e 65 77 20 73 79 6e 74 61 78 20 77 61 73 20 69 | ne.based.rules..New.syntax.was.i |
c8040 | 6e 74 72 6f 64 75 63 65 64 20 68 65 72 65 20 3a 76 79 74 61 73 6b 3a 60 54 35 31 36 30 60 00 46 | ntroduced.here.:vytask:`T5160`.F |
c8060 | 6f 72 20 6c 61 74 65 73 74 20 72 65 6c 65 61 73 65 73 2c 20 72 65 66 65 72 20 74 68 65 20 60 66 | or.latest.releases,.refer.the.`f |
c8080 | 69 72 65 77 61 6c 6c 20 3c 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 76 79 6f 73 2e 69 6f 2f 65 6e | irewall.<https://docs.vyos.io/en |
c80a0 | 2f 6c 61 74 65 73 74 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 | /latest/configuration/firewall/g |
c80c0 | 65 6e 65 72 61 6c 2e 68 74 6d 6c 23 69 6e 74 65 72 66 61 63 65 2d 67 72 6f 75 70 73 3e 60 5f 20 | eneral.html#interface-groups>`_. |
c80e0 | 6d 61 69 6e 20 70 61 67 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 7a 6f 6e 65 20 62 61 73 65 | main.page.to.configure.zone.base |
c8100 | 64 20 72 75 6c 65 73 2e 20 4e 65 77 20 73 79 6e 74 61 78 20 77 61 73 20 69 6e 74 72 6f 64 75 63 | d.rules..New.syntax.was.introduc |
c8120 | 65 64 20 68 65 72 65 20 3a 76 79 74 61 73 6b 3a 60 54 35 31 36 30 60 00 46 6f 72 20 6d 6f 72 65 | ed.here.:vytask:`T5160`.For.more |
c8140 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 68 6f 77 20 4d 50 4c 53 20 6c 61 62 65 6c 20 73 | .information.on.how.MPLS.label.s |
c8160 | 77 69 74 63 68 69 6e 67 20 77 6f 72 6b 73 2c 20 70 6c 65 61 73 65 20 67 6f 20 76 69 73 69 74 20 | witching.works,.please.go.visit. |
c8180 | 60 57 69 6b 69 70 65 64 69 61 20 28 4d 50 4c 53 29 60 5f 2e 00 46 6f 72 20 6d 75 6c 74 69 20 68 | `Wikipedia.(MPLS)`_..For.multi.h |
c81a0 | 6f 70 20 73 65 73 73 69 6f 6e 73 20 6f 6e 6c 79 2e 20 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 | op.sessions.only..Configure.the. |
c81c0 | 6d 69 6e 69 6d 75 6d 20 65 78 70 65 63 74 65 64 20 54 54 4c 20 66 6f 72 20 61 6e 20 69 6e 63 6f | minimum.expected.TTL.for.an.inco |
c81e0 | 6d 69 6e 67 20 42 46 44 20 63 6f 6e 74 72 6f 6c 20 70 61 63 6b 65 74 2e 00 46 6f 72 20 6e 65 74 | ming.BFD.control.packet..For.net |
c8200 | 77 6f 72 6b 20 6d 61 69 6e 74 65 6e 61 6e 63 65 2c 20 69 74 27 73 20 61 20 67 6f 6f 64 20 69 64 | work.maintenance,.it's.a.good.id |
c8220 | 65 61 20 74 6f 20 64 69 72 65 63 74 20 75 73 65 72 73 20 74 6f 20 61 20 62 61 63 6b 75 70 20 73 | ea.to.direct.users.to.a.backup.s |
c8240 | 65 72 76 65 72 20 73 6f 20 74 68 61 74 20 74 68 65 20 70 72 69 6d 61 72 79 20 73 65 72 76 65 72 | erver.so.that.the.primary.server |
c8260 | 20 63 61 6e 20 62 65 20 73 61 66 65 6c 79 20 74 61 6b 65 6e 20 6f 75 74 20 6f 66 20 73 65 72 76 | .can.be.safely.taken.out.of.serv |
c8280 | 69 63 65 2e 20 49 74 27 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 73 77 69 74 63 68 20 79 6f 75 | ice..It's.possible.to.switch.you |
c82a0 | 72 20 50 50 50 6f 45 20 73 65 72 76 65 72 20 74 6f 20 6d 61 69 6e 74 65 6e 61 6e 63 65 20 6d 6f | r.PPPoE.server.to.maintenance.mo |
c82c0 | 64 65 20 77 68 65 72 65 20 69 74 20 6d 61 69 6e 74 61 69 6e 73 20 61 6c 72 65 61 64 79 20 65 73 | de.where.it.maintains.already.es |
c82e0 | 74 61 62 6c 69 73 68 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 62 75 74 20 72 65 66 75 73 | tablished.connections,.but.refus |
c8300 | 65 73 20 6e 65 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 61 74 74 65 6d 70 74 73 2e 00 46 6f 72 20 | es.new.connection.attempts..For. |
c8320 | 6f 70 74 69 6d 61 6c 20 73 63 61 6c 61 62 69 6c 69 74 79 2c 20 4d 75 6c 74 69 63 61 73 74 20 73 | optimal.scalability,.Multicast.s |
c8340 | 68 6f 75 6c 64 6e 27 74 20 62 65 20 75 73 65 64 20 61 74 20 61 6c 6c 2c 20 62 75 74 20 69 6e 73 | houldn't.be.used.at.all,.but.ins |
c8360 | 74 65 61 64 20 75 73 65 20 42 47 50 20 74 6f 20 73 69 67 6e 61 6c 20 61 6c 6c 20 63 6f 6e 6e 65 | tead.use.BGP.to.signal.all.conne |
c8380 | 63 74 65 64 20 64 65 76 69 63 65 73 20 62 65 74 77 65 65 6e 20 6c 65 61 76 65 73 2e 20 55 6e 66 | cted.devices.between.leaves..Unf |
c83a0 | 6f 72 74 75 6e 61 74 65 6c 79 2c 20 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 79 65 74 20 73 75 | ortunately,.VyOS.does.not.yet.su |
c83c0 | 70 70 6f 72 74 20 74 68 69 73 2e 00 46 6f 72 20 6f 75 74 62 6f 75 6e 64 20 75 70 64 61 74 65 73 | pport.this..For.outbound.updates |
c83e0 | 20 74 68 65 20 6f 72 64 65 72 20 6f 66 20 70 72 65 66 65 72 65 6e 63 65 20 69 73 3a 00 46 6f 72 | .the.order.of.preference.is:.For |
c8400 | 20 72 65 66 65 72 65 6e 63 65 2c 20 61 20 64 65 73 63 72 69 70 74 69 6f 6e 20 63 61 6e 20 62 65 | .reference,.a.description.can.be |
c8420 | 20 64 65 66 69 6e 65 64 20 66 6f 72 20 65 76 65 72 79 20 64 65 66 69 6e 65 64 20 63 75 73 74 6f | .defined.for.every.defined.custo |
c8440 | 6d 20 63 68 61 69 6e 2e 00 46 6f 72 20 72 65 66 65 72 65 6e 63 65 2c 20 61 20 64 65 73 63 72 69 | m.chain..For.reference,.a.descri |
c8460 | 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 66 6f 72 20 65 76 65 72 79 20 73 | ption.can.be.defined.for.every.s |
c8480 | 69 6e 67 6c 65 20 72 75 6c 65 2c 20 61 6e 64 20 66 6f 72 20 65 76 65 72 79 20 64 65 66 69 6e 65 | ingle.rule,.and.for.every.define |
c84a0 | 64 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2e 00 46 6f 72 20 73 65 63 75 72 69 74 79 2c 20 74 68 | d.custom.chain..For.security,.th |
c84c0 | 65 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 20 73 68 6f 75 6c 64 20 6f 6e 6c 79 20 62 65 20 | e.listen.address.should.only.be. |
c84e0 | 75 73 65 64 20 6f 6e 20 69 6e 74 65 72 6e 61 6c 2f 74 72 75 73 74 65 64 20 6e 65 74 77 6f 72 6b | used.on.internal/trusted.network |
c8500 | 73 21 00 46 6f 72 20 73 65 72 69 61 6c 20 76 69 61 20 55 53 42 20 70 6f 72 74 20 69 6e 66 6f 72 | s!.For.serial.via.USB.port.infor |
c8520 | 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 72 65 66 6f 72 20 74 6f 3a 20 3a 72 65 66 3a 60 68 61 | mation.please.refor.to:.:ref:`ha |
c8540 | 72 64 77 61 72 65 5f 75 73 62 60 2e 00 46 6f 72 20 73 69 6d 70 6c 69 63 69 74 79 20 77 65 27 6c | rdware_usb`..For.simplicity.we'l |
c8560 | 6c 20 61 73 73 75 6d 65 20 74 68 61 74 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 47 52 | l.assume.that.the.protocol.is.GR |
c8580 | 45 2c 20 69 74 27 73 20 6e 6f 74 20 68 61 72 64 20 74 6f 20 67 75 65 73 73 20 77 68 61 74 20 6e | E,.it's.not.hard.to.guess.what.n |
c85a0 | 65 65 64 73 20 74 6f 20 62 65 20 63 68 61 6e 67 65 64 20 74 6f 20 6d 61 6b 65 20 69 74 20 77 6f | eeds.to.be.changed.to.make.it.wo |
c85c0 | 72 6b 20 77 69 74 68 20 61 20 64 69 66 66 65 72 65 6e 74 20 70 72 6f 74 6f 63 6f 6c 2e 20 57 65 | rk.with.a.different.protocol..We |
c85e0 | 20 61 73 73 75 6d 65 20 74 68 61 74 20 49 50 73 65 63 20 77 69 6c 6c 20 75 73 65 20 70 72 65 2d | .assume.that.IPsec.will.use.pre- |
c8600 | 73 68 61 72 65 64 20 73 65 63 72 65 74 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 6e 64 | shared.secret.authentication.and |
c8620 | 20 77 69 6c 6c 20 75 73 65 20 41 45 53 31 32 38 2f 53 48 41 31 20 66 6f 72 20 74 68 65 20 63 69 | .will.use.AES128/SHA1.for.the.ci |
c8640 | 70 68 65 72 20 61 6e 64 20 68 61 73 68 2e 20 41 64 6a 75 73 74 20 74 68 69 73 20 61 73 20 6e 65 | pher.and.hash..Adjust.this.as.ne |
c8660 | 63 65 73 73 61 72 79 2e 00 46 6f 72 20 74 68 65 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 | cessary..For.the.:ref:`destinati |
c8680 | 6f 6e 2d 6e 61 74 36 36 60 20 72 75 6c 65 2c 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 | on-nat66`.rule,.the.destination. |
c86a0 | 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 70 61 63 6b 65 74 20 69 73 72 65 70 6c 61 63 65 64 | address.of.the.packet.isreplaced |
c86c0 | 20 62 79 20 74 68 65 20 61 64 64 72 65 73 73 20 63 61 6c 63 75 6c 61 74 65 64 20 66 72 6f 6d 20 | .by.the.address.calculated.from. |
c86e0 | 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 20 6f 72 20 70 72 65 66 69 78 20 | the.specified.address.or.prefix. |
c8700 | 69 6e 20 74 68 65 20 60 74 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 60 20 63 6f 6d | in.the.`translation.address`.com |
c8720 | 6d 61 6e 64 00 46 6f 72 20 74 68 65 20 4f 70 65 6e 56 50 4e 20 74 72 61 66 66 69 63 20 74 6f 20 | mand.For.the.OpenVPN.traffic.to. |
c8740 | 70 61 73 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 2c 20 | pass.through.the.WAN.interface,. |
c8760 | 79 6f 75 20 6d 75 73 74 20 63 72 65 61 74 65 20 61 20 66 69 72 65 77 61 6c 6c 20 65 78 63 65 70 | you.must.create.a.firewall.excep |
c8780 | 74 69 6f 6e 2e 00 46 6f 72 20 74 68 65 20 57 69 72 65 47 75 61 72 64 20 74 72 61 66 66 69 63 20 | tion..For.the.WireGuard.traffic. |
c87a0 | 74 6f 20 70 61 73 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 57 41 4e 20 69 6e 74 65 72 66 61 63 | to.pass.through.the.WAN.interfac |
c87c0 | 65 2c 20 79 6f 75 20 6d 75 73 74 20 63 72 65 61 74 65 20 61 20 66 69 72 65 77 61 6c 6c 20 65 78 | e,.you.must.create.a.firewall.ex |
c87e0 | 63 65 70 74 69 6f 6e 2e 00 46 6f 72 20 74 68 65 20 61 76 65 72 61 67 65 20 75 73 65 72 20 61 20 | ception..For.the.average.user.a. |
c8800 | 73 65 72 69 61 6c 20 63 6f 6e 73 6f 6c 65 20 68 61 73 20 6e 6f 20 61 64 76 61 6e 74 61 67 65 20 | serial.console.has.no.advantage. |
c8820 | 6f 76 65 72 20 61 20 63 6f 6e 73 6f 6c 65 20 6f 66 66 65 72 65 64 20 62 79 20 61 20 64 69 72 65 | over.a.console.offered.by.a.dire |
c8840 | 63 74 6c 79 20 61 74 74 61 63 68 65 64 20 6b 65 79 62 6f 61 72 64 20 61 6e 64 20 73 63 72 65 65 | ctly.attached.keyboard.and.scree |
c8860 | 6e 2e 20 53 65 72 69 61 6c 20 63 6f 6e 73 6f 6c 65 73 20 61 72 65 20 6d 75 63 68 20 73 6c 6f 77 | n..Serial.consoles.are.much.slow |
c8880 | 65 72 2c 20 74 61 6b 69 6e 67 20 75 70 20 74 6f 20 61 20 73 65 63 6f 6e 64 20 74 6f 20 66 69 6c | er,.taking.up.to.a.second.to.fil |
c88a0 | 6c 20 61 20 38 30 20 63 6f 6c 75 6d 6e 20 62 79 20 32 34 20 6c 69 6e 65 20 73 63 72 65 65 6e 2e | l.a.80.column.by.24.line.screen. |
c88c0 | 20 53 65 72 69 61 6c 20 63 6f 6e 73 6f 6c 65 73 20 67 65 6e 65 72 61 6c 6c 79 20 6f 6e 6c 79 20 | .Serial.consoles.generally.only. |
c88e0 | 73 75 70 70 6f 72 74 20 6e 6f 6e 2d 70 72 6f 70 6f 72 74 69 6f 6e 61 6c 20 41 53 43 49 49 20 74 | support.non-proportional.ASCII.t |
c8900 | 65 78 74 2c 20 77 69 74 68 20 6c 69 6d 69 74 65 64 20 73 75 70 70 6f 72 74 20 66 6f 72 20 6c 61 | ext,.with.limited.support.for.la |
c8920 | 6e 67 75 61 67 65 73 20 6f 74 68 65 72 20 74 68 61 6e 20 45 6e 67 6c 69 73 68 2e 00 46 6f 72 20 | nguages.other.than.English..For. |
c8940 | 74 68 65 20 69 6e 67 72 65 73 73 20 74 72 61 66 66 69 63 20 6f 66 20 61 6e 20 69 6e 74 65 72 66 | the.ingress.traffic.of.an.interf |
c8960 | 61 63 65 2c 20 74 68 65 72 65 20 69 73 20 6f 6e 6c 79 20 6f 6e 65 20 70 6f 6c 69 63 79 20 79 6f | ace,.there.is.only.one.policy.yo |
c8980 | 75 20 63 61 6e 20 64 69 72 65 63 74 6c 79 20 61 70 70 6c 79 2c 20 61 20 2a 2a 4c 69 6d 69 74 65 | u.can.directly.apply,.a.**Limite |
c89a0 | 72 2a 2a 20 70 6f 6c 69 63 79 2e 20 59 6f 75 20 63 61 6e 6e 6f 74 20 61 70 70 6c 79 20 61 20 73 | r**.policy..You.cannot.apply.a.s |
c89c0 | 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 20 64 69 72 65 63 74 6c 79 20 74 6f 20 74 68 65 20 69 6e | haping.policy.directly.to.the.in |
c89e0 | 67 72 65 73 73 20 74 72 61 66 66 69 63 20 6f 66 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 20 62 | gress.traffic.of.any.interface.b |
c8a00 | 65 63 61 75 73 65 20 73 68 61 70 69 6e 67 20 6f 6e 6c 79 20 77 6f 72 6b 73 20 66 6f 72 20 6f 75 | ecause.shaping.only.works.for.ou |
c8a20 | 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 2e 00 46 6f 72 20 74 68 65 20 73 61 6b 65 20 6f 66 20 | tbound.traffic..For.the.sake.of. |
c8a40 | 64 65 6d 6f 6e 73 74 72 61 74 69 6f 6e 2c 20 60 65 78 61 6d 70 6c 65 20 23 31 20 69 6e 20 74 68 | demonstration,.`example.#1.in.th |
c8a60 | 65 20 6f 66 66 69 63 69 61 6c 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 3c 68 74 74 70 73 3a | e.official.documentation.<https: |
c8a80 | 2f 2f 77 77 77 2e 7a 61 62 62 69 78 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2f 63 | //www.zabbix.com/documentation/c |
c8aa0 | 75 72 72 65 6e 74 2f 6d 61 6e 75 61 6c 2f 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 2f 63 6f 6e 74 61 | urrent/manual/installation/conta |
c8ac0 | 69 6e 65 72 73 3e 60 5f 20 74 6f 20 74 68 65 20 64 65 63 6c 61 72 61 74 69 76 65 20 56 79 4f 53 | iners>`_.to.the.declarative.VyOS |
c8ae0 | 20 43 4c 49 20 73 79 6e 74 61 78 2e 00 46 6f 72 20 74 72 61 66 66 69 63 20 6f 72 69 67 69 6e 61 | .CLI.syntax..For.traffic.origina |
c8b00 | 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 | ted.by.the.router,.base.chain.is |
c8b20 | 20 2a 2a 6f 75 74 70 75 74 20 66 69 6c 74 65 72 2a 2a 3a 20 60 60 73 65 74 20 66 69 72 65 77 61 | .**output.filter**:.``set.firewa |
c8b40 | 6c 6c 20 5b 69 70 76 34 20 7c 20 69 70 76 36 5d 20 6f 75 74 70 75 74 20 66 69 6c 74 65 72 20 2e | ll.[ipv4.|.ipv6].output.filter.. |
c8b60 | 2e 2e 60 60 00 46 6f 72 20 74 72 61 66 66 69 63 20 74 68 61 74 20 6e 65 65 64 73 20 74 6f 20 62 | ..``.For.traffic.that.needs.to.b |
c8b80 | 65 20 66 6f 72 77 61 72 65 64 20 69 6e 74 65 72 6e 61 6c 6c 79 20 62 79 20 74 68 65 20 62 72 69 | e.forwared.internally.by.the.bri |
c8ba0 | 64 67 65 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 69 73 20 2a 2a 66 6f 72 77 61 72 64 2a | dge,.base.chain.is.is.**forward* |
c8bc0 | 2a 2c 20 61 6e 64 20 69 74 27 73 20 62 61 73 65 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 20 66 69 6c | *,.and.it's.base.command.for.fil |
c8be0 | 74 65 72 69 6e 67 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 62 72 69 64 67 65 20 | tering.is.``set.firewall.bridge. |
c8c00 | 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 46 6f 72 20 74 72 61 66 66 69 63 | forward.filter....``.For.traffic |
c8c20 | 20 74 68 61 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 66 6f 72 77 61 72 65 64 20 69 6e 74 65 72 | .that.needs.to.be.forwared.inter |
c8c40 | 6e 61 6c 6c 79 20 62 79 20 74 68 65 20 62 72 69 64 67 65 2c 20 62 61 73 65 20 63 68 61 69 6e 20 | nally.by.the.bridge,.base.chain. |
c8c60 | 69 73 20 69 73 20 2a 2a 66 6f 72 77 61 72 64 2a 2a 2c 20 61 6e 64 20 69 74 27 73 20 62 61 73 65 | is.is.**forward**,.and.it's.base |
c8c80 | 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 20 66 69 6c 74 65 72 69 6e 67 20 69 73 20 60 60 73 65 74 20 | .command.for.filtering.is.``set. |
c8ca0 | 66 69 72 65 77 61 6c 6c 20 62 72 69 64 67 65 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e | firewall.bridge.forward.filter.. |
c8cc0 | 2e 2e 60 60 2c 20 77 68 69 63 68 20 68 61 70 70 65 6e 73 20 69 6e 20 73 74 61 67 65 20 34 2c 20 | ..``,.which.happens.in.stage.4,. |
c8ce0 | 68 69 67 68 6c 69 67 68 74 65 6e 65 64 20 77 69 74 68 20 72 65 64 20 63 6f 6c 6f 72 2e 00 46 6f | highlightened.with.red.color..Fo |
c8d00 | 72 20 74 72 61 66 66 69 63 20 74 6f 77 61 72 64 73 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 | r.traffic.towards.the.router.its |
c8d20 | 65 6c 66 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 2a 2a 69 6e 70 75 74 20 66 69 6c 74 65 | elf,.base.chain.is.**input.filte |
c8d40 | 72 2a 2a 3a 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 5b 69 70 76 34 20 7c 20 69 70 76 36 | r**:.``set.firewall.[ipv4.|.ipv6 |
c8d60 | 5d 20 69 6e 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 46 6f 72 20 74 72 61 66 66 69 63 | ].input.filter....``.For.traffic |
c8d80 | 20 74 6f 77 61 72 64 73 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2c 20 62 61 73 65 | .towards.the.router.itself,.base |
c8da0 | 20 63 68 61 69 6e 20 69 73 20 2a 2a 69 6e 70 75 74 2a 2a 2c 20 77 68 69 6c 65 20 74 72 61 66 66 | .chain.is.**input**,.while.traff |
c8dc0 | 69 63 20 6f 72 69 67 69 6e 61 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 2c 20 62 61 73 | ic.originated.by.the.router,.bas |
c8de0 | 65 20 63 68 61 69 6e 20 69 73 20 2a 2a 6f 75 74 70 75 74 2a 2a 2e 20 41 20 6e 65 77 20 73 69 6d | e.chain.is.**output**..A.new.sim |
c8e00 | 70 6c 69 66 69 65 64 20 70 61 63 6b 65 74 20 66 6c 6f 77 20 64 69 61 67 72 61 6d 20 69 73 20 73 | plified.packet.flow.diagram.is.s |
c8e20 | 68 6f 77 6e 20 6e 65 78 74 2c 20 77 68 69 63 68 20 73 68 6f 77 73 20 74 68 65 20 70 61 74 68 20 | hown.next,.which.shows.the.path. |
c8e40 | 66 6f 72 20 74 72 61 66 66 69 63 20 64 65 73 74 69 6e 61 74 65 64 20 74 6f 20 74 68 65 20 72 6f | for.traffic.destinated.to.the.ro |
c8e60 | 75 74 65 72 20 69 74 73 65 6c 66 2c 20 61 6e 64 20 74 72 61 66 66 69 63 20 67 65 6e 65 72 61 74 | uter.itself,.and.traffic.generat |
c8e80 | 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 28 73 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 | ed.by.the.router.(starting.from. |
c8ea0 | 63 69 72 63 6c 65 20 6e 75 6d 62 65 72 20 36 29 3a 00 46 6f 72 20 74 72 61 6e 73 69 74 20 74 72 | circle.number.6):.For.transit.tr |
c8ec0 | 61 66 66 69 63 2c 20 77 68 69 63 68 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 20 | affic,.which.is.received.by.the. |
c8ee0 | 72 6f 75 74 65 72 20 61 6e 64 20 66 6f 72 77 61 72 64 65 64 2c 20 62 61 73 65 20 63 68 61 69 6e | router.and.forwarded,.base.chain |
c8f00 | 20 69 73 20 2a 2a 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 2a 2a 3a 20 60 60 73 65 74 20 66 69 | .is.**forward.filter**:.``set.fi |
c8f20 | 72 65 77 61 6c 6c 20 5b 69 70 76 34 20 7c 20 69 70 76 36 5d 20 66 6f 72 77 61 72 64 20 66 69 6c | rewall.[ipv4.|.ipv6].forward.fil |
c8f40 | 74 65 72 20 2e 2e 2e 60 60 00 46 6f 72 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 2c 20 77 | ter....``.For.transit.traffic,.w |
c8f60 | 68 69 63 68 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 61 | hich.is.received.by.the.router.a |
c8f80 | 6e 64 20 66 6f 72 77 61 72 64 65 64 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 2a 2a 66 6f | nd.forwarded,.base.chain.is.**fo |
c8fa0 | 72 77 61 72 64 2a 2a 2e 20 41 20 73 69 6d 70 6c 69 66 69 65 64 20 70 61 63 6b 65 74 20 66 6c 6f | rward**..A.simplified.packet.flo |
c8fc0 | 77 20 64 69 61 67 72 61 6d 20 66 6f 72 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 20 69 73 | w.diagram.for.transit.traffic.is |
c8fe0 | 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 46 6f 72 6d 61 6c 6c 79 2c 20 61 20 76 69 72 74 75 61 6c | .shown.next:.Formally,.a.virtual |
c9000 | 20 6c 69 6e 6b 20 6c 6f 6f 6b 73 20 6c 69 6b 65 20 61 20 70 6f 69 6e 74 2d 74 6f 2d 70 6f 69 6e | .link.looks.like.a.point-to-poin |
c9020 | 74 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 77 6f 20 41 42 52 20 66 72 6f | t.network.connecting.two.ABR.fro |
c9040 | 6d 20 6f 6e 65 20 61 72 65 61 20 6f 6e 65 20 6f 66 20 77 68 69 63 68 20 70 68 79 73 69 63 61 6c | m.one.area.one.of.which.physical |
c9060 | 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 2e | ly.connected.to.a.backbone.area. |
c9080 | 20 54 68 69 73 20 70 73 65 75 64 6f 2d 6e 65 74 77 6f 72 6b 20 69 73 20 63 6f 6e 73 69 64 65 72 | .This.pseudo-network.is.consider |
c90a0 | 65 64 20 74 6f 20 62 65 6c 6f 6e 67 20 74 6f 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 2e | ed.to.belong.to.a.backbone.area. |
c90c0 | 00 46 6f 72 77 61 72 64 20 69 6e 63 6f 6d 69 6e 67 20 44 4e 53 20 71 75 65 72 69 65 73 20 74 6f | .Forward.incoming.DNS.queries.to |
c90e0 | 20 74 68 65 20 44 4e 53 20 73 65 72 76 65 72 73 20 63 6f 6e 66 69 67 75 72 65 64 20 75 6e 64 65 | .the.DNS.servers.configured.unde |
c9100 | 72 20 74 68 65 20 60 60 73 79 73 74 65 6d 20 6e 61 6d 65 2d 73 65 72 76 65 72 60 60 20 6e 6f 64 | r.the.``system.name-server``.nod |
c9120 | 65 73 2e 00 46 6f 72 77 61 72 64 20 6d 65 74 68 6f 64 00 46 6f 72 77 61 72 64 20 72 65 63 65 69 | es..Forward.method.Forward.recei |
c9140 | 76 65 64 20 71 75 65 72 69 65 73 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 64 6f 6d | ved.queries.for.a.particular.dom |
c9160 | 61 69 6e 20 28 73 70 65 63 69 66 69 65 64 20 76 69 61 20 60 64 6f 6d 61 69 6e 2d 6e 61 6d 65 60 | ain.(specified.via.`domain-name` |
c9180 | 29 20 74 6f 20 61 20 67 69 76 65 6e 20 6e 61 6d 65 73 65 72 76 65 72 2e 20 4d 75 6c 74 69 70 6c | ).to.a.given.nameserver..Multipl |
c91a0 | 65 20 6e 61 6d 65 73 65 72 76 65 72 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 20 | e.nameservers.can.be.specified.. |
c91c0 | 59 6f 75 20 63 61 6e 20 75 73 65 20 74 68 69 73 20 66 65 61 74 75 72 65 20 66 6f 72 20 61 20 44 | You.can.use.this.feature.for.a.D |
c91e0 | 4e 53 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 | NS.split-horizon.configuration.. |
c9200 | 46 6f 75 72 20 70 6f 6c 69 63 69 65 73 20 66 6f 72 20 72 65 66 6f 72 77 61 72 64 69 6e 67 20 44 | Four.policies.for.reforwarding.D |
c9220 | 48 43 50 20 70 61 63 6b 65 74 73 20 65 78 69 73 74 3a 00 46 72 6f 6d 20 3a 72 66 63 3a 60 31 39 | HCP.packets.exist:.From.:rfc:`19 |
c9240 | 33 30 60 3a 00 46 72 6f 6d 20 61 20 73 65 63 75 72 69 74 79 20 70 65 72 73 70 65 63 74 69 76 65 | 30`:.From.a.security.perspective |
c9260 | 2c 20 69 74 20 69 73 20 6e 6f 74 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 6c 65 74 20 61 | ,.it.is.not.recommended.to.let.a |
c9280 | 20 74 68 69 72 64 20 70 61 72 74 79 20 63 72 65 61 74 65 20 61 6e 64 20 73 68 61 72 65 20 74 68 | .third.party.create.and.share.th |
c92a0 | 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 66 6f 72 20 61 20 73 65 63 75 72 65 64 20 63 6f 6e 6e | e.private.key.for.a.secured.conn |
c92c0 | 65 63 74 69 6f 6e 2e 20 59 6f 75 20 73 68 6f 75 6c 64 20 63 72 65 61 74 65 20 74 68 65 20 70 72 | ection..You.should.create.the.pr |
c92e0 | 69 76 61 74 65 20 70 6f 72 74 69 6f 6e 20 6f 6e 20 79 6f 75 72 20 6f 77 6e 20 61 6e 64 20 6f 6e | ivate.portion.on.your.own.and.on |
c9300 | 6c 79 20 68 61 6e 64 20 6f 75 74 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 2e 20 50 6c 65 61 | ly.hand.out.the.public.key..Plea |
c9320 | 73 65 20 6b 65 65 70 20 74 68 69 73 20 69 6e 20 6d 69 6e 64 20 77 68 65 6e 20 75 73 69 6e 67 20 | se.keep.this.in.mind.when.using. |
c9340 | 74 68 69 73 20 63 6f 6e 76 65 6e 69 65 6e 63 65 20 66 65 61 74 75 72 65 2e 00 46 72 6f 6d 20 6d | this.convenience.feature..From.m |
c9360 | 61 69 6e 20 73 74 72 75 63 74 75 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 3a 64 6f 63 3a 60 46 | ain.structure.defined.in.:doc:`F |
c9380 | 69 72 65 77 61 6c 6c 20 4f 76 65 72 76 69 65 77 3c 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f | irewall.Overview</configuration/ |
c93a0 | 66 69 72 65 77 61 6c 6c 2f 69 6e 64 65 78 3e 60 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e | firewall/index>`.in.this.section |
c93c0 | 20 79 6f 75 20 63 61 6e 20 66 69 6e 64 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 | .you.can.find.detailed.informati |
c93e0 | 6f 6e 20 6f 6e 6c 79 20 66 6f 72 20 74 68 65 20 6e 65 78 74 20 70 61 72 74 20 6f 66 20 74 68 65 | on.only.for.the.next.part.of.the |
c9400 | 20 67 65 6e 65 72 61 6c 20 73 74 72 75 63 74 75 72 65 3a 00 46 77 6d 61 72 6b 00 47 45 4e 45 56 | .general.structure:.Fwmark.GENEV |
c9420 | 45 00 47 45 4e 45 56 45 20 69 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 73 75 70 70 6f 72 74 20 | E.GENEVE.is.designed.to.support. |
c9440 | 6e 65 74 77 6f 72 6b 20 76 69 72 74 75 61 6c 69 7a 61 74 69 6f 6e 20 75 73 65 20 63 61 73 65 73 | network.virtualization.use.cases |
c9460 | 2c 20 77 68 65 72 65 20 74 75 6e 6e 65 6c 73 20 61 72 65 20 74 79 70 69 63 61 6c 6c 79 20 65 73 | ,.where.tunnels.are.typically.es |
c9480 | 74 61 62 6c 69 73 68 65 64 20 74 6f 20 61 63 74 20 61 73 20 61 20 62 61 63 6b 70 6c 61 6e 65 20 | tablished.to.act.as.a.backplane. |
c94a0 | 62 65 74 77 65 65 6e 20 74 68 65 20 76 69 72 74 75 61 6c 20 73 77 69 74 63 68 65 73 20 72 65 73 | between.the.virtual.switches.res |
c94c0 | 69 64 69 6e 67 20 69 6e 20 68 79 70 65 72 76 69 73 6f 72 73 2c 20 70 68 79 73 69 63 61 6c 20 73 | iding.in.hypervisors,.physical.s |
c94e0 | 77 69 74 63 68 65 73 2c 20 6f 72 20 6d 69 64 64 6c 65 62 6f 78 65 73 20 6f 72 20 6f 74 68 65 72 | witches,.or.middleboxes.or.other |
c9500 | 20 61 70 70 6c 69 61 6e 63 65 73 2e 20 41 6e 20 61 72 62 69 74 72 61 72 79 20 49 50 20 6e 65 74 | .appliances..An.arbitrary.IP.net |
c9520 | 77 6f 72 6b 20 63 61 6e 20 62 65 20 75 73 65 64 20 61 73 20 61 6e 20 75 6e 64 65 72 6c 61 79 20 | work.can.be.used.as.an.underlay. |
c9540 | 61 6c 74 68 6f 75 67 68 20 43 6c 6f 73 20 6e 65 74 77 6f 72 6b 73 20 2d 20 41 20 74 65 63 68 6e | although.Clos.networks.-.A.techn |
c9560 | 69 71 75 65 20 66 6f 72 20 63 6f 6d 70 6f 73 69 6e 67 20 6e 65 74 77 6f 72 6b 20 66 61 62 72 69 | ique.for.composing.network.fabri |
c9580 | 63 73 20 6c 61 72 67 65 72 20 74 68 61 6e 20 61 20 73 69 6e 67 6c 65 20 73 77 69 74 63 68 20 77 | cs.larger.than.a.single.switch.w |
c95a0 | 68 69 6c 65 20 6d 61 69 6e 74 61 69 6e 69 6e 67 20 6e 6f 6e 2d 62 6c 6f 63 6b 69 6e 67 20 62 61 | hile.maintaining.non-blocking.ba |
c95c0 | 6e 64 77 69 64 74 68 20 61 63 72 6f 73 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 70 6f 69 6e 74 73 | ndwidth.across.connection.points |
c95e0 | 2e 20 45 43 4d 50 20 69 73 20 75 73 65 64 20 74 6f 20 64 69 76 69 64 65 20 74 72 61 66 66 69 63 | ..ECMP.is.used.to.divide.traffic |
c9600 | 20 61 63 72 6f 73 73 20 74 68 65 20 6d 75 6c 74 69 70 6c 65 20 6c 69 6e 6b 73 20 61 6e 64 20 73 | .across.the.multiple.links.and.s |
c9620 | 77 69 74 63 68 65 73 20 74 68 61 74 20 63 6f 6e 73 74 69 74 75 74 65 20 74 68 65 20 66 61 62 72 | witches.that.constitute.the.fabr |
c9640 | 69 63 2e 20 53 6f 6d 65 74 69 6d 65 73 20 74 65 72 6d 65 64 20 22 6c 65 61 66 20 61 6e 64 20 73 | ic..Sometimes.termed."leaf.and.s |
c9660 | 70 69 6e 65 22 20 6f 72 20 22 66 61 74 20 74 72 65 65 22 20 74 6f 70 6f 6c 6f 67 69 65 73 2e 00 | pine".or."fat.tree".topologies.. |
c9680 | 47 45 4e 45 56 45 20 6f 70 74 69 6f 6e 73 00 47 52 45 20 69 73 20 61 20 77 65 6c 6c 20 64 65 66 | GENEVE.options.GRE.is.a.well.def |
c96a0 | 69 6e 65 64 20 73 74 61 6e 64 61 72 64 20 74 68 61 74 20 69 73 20 63 6f 6d 6d 6f 6e 20 69 6e 20 | ined.standard.that.is.common.in. |
c96c0 | 6d 6f 73 74 20 6e 65 74 77 6f 72 6b 73 2e 20 57 68 69 6c 65 20 6e 6f 74 20 69 6e 68 65 72 65 6e | most.networks..While.not.inheren |
c96e0 | 74 6c 79 20 64 69 66 66 69 63 75 6c 74 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 72 65 | tly.difficult.to.configure.there |
c9700 | 20 61 72 65 20 61 20 63 6f 75 70 6c 65 20 6f 66 20 74 68 69 6e 67 73 20 74 6f 20 6b 65 65 70 20 | .are.a.couple.of.things.to.keep. |
c9720 | 69 6e 20 6d 69 6e 64 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 74 68 65 20 63 6f 6e 66 69 67 75 | in.mind.to.make.sure.the.configu |
c9740 | 72 61 74 69 6f 6e 20 70 65 72 66 6f 72 6d 73 20 61 73 20 65 78 70 65 63 74 65 64 2e 20 41 20 63 | ration.performs.as.expected..A.c |
c9760 | 6f 6d 6d 6f 6e 20 63 61 75 73 65 20 66 6f 72 20 47 52 45 20 74 75 6e 6e 65 6c 73 20 74 6f 20 66 | ommon.cause.for.GRE.tunnels.to.f |
c9780 | 61 69 6c 20 74 6f 20 63 6f 6d 65 20 75 70 20 63 6f 72 72 65 63 74 6c 79 20 69 6e 63 6c 75 64 65 | ail.to.come.up.correctly.include |
c97a0 | 20 41 43 4c 20 6f 72 20 46 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 20 | .ACL.or.Firewall.configurations. |
c97c0 | 74 68 61 74 20 61 72 65 20 64 69 73 63 61 72 64 69 6e 67 20 49 50 20 70 72 6f 74 6f 63 6f 6c 20 | that.are.discarding.IP.protocol. |
c97e0 | 34 37 20 6f 72 20 62 6c 6f 63 6b 69 6e 67 20 79 6f 75 72 20 73 6f 75 72 63 65 2f 64 65 73 74 69 | 47.or.blocking.your.source/desti |
c9800 | 6e 61 74 69 6f 6e 20 74 72 61 66 66 69 63 2e 00 47 52 45 20 69 73 20 61 6c 73 6f 20 74 68 65 20 | nation.traffic..GRE.is.also.the. |
c9820 | 6f 6e 6c 79 20 63 6c 61 73 73 69 63 20 70 72 6f 74 6f 63 6f 6c 20 74 68 61 74 20 61 6c 6c 6f 77 | only.classic.protocol.that.allow |
c9840 | 73 20 63 72 65 61 74 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 74 75 6e 6e 65 6c 73 20 77 69 74 68 | s.creating.multiple.tunnels.with |
c9860 | 20 74 68 65 20 73 61 6d 65 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e | .the.same.source.and.destination |
c9880 | 20 64 75 65 20 74 6f 20 69 74 73 20 73 75 70 70 6f 72 74 20 66 6f 72 20 74 75 6e 6e 65 6c 20 6b | .due.to.its.support.for.tunnel.k |
c98a0 | 65 79 73 2e 20 44 65 73 70 69 74 65 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 69 73 20 66 65 61 74 | eys..Despite.its.name,.this.feat |
c98c0 | 75 72 65 20 68 61 73 20 6e 6f 74 68 69 6e 67 20 74 6f 20 64 6f 20 77 69 74 68 20 73 65 63 75 72 | ure.has.nothing.to.do.with.secur |
c98e0 | 69 74 79 3a 20 69 74 27 73 20 73 69 6d 70 6c 79 20 61 6e 20 69 64 65 6e 74 69 66 69 65 72 20 74 | ity:.it's.simply.an.identifier.t |
c9900 | 68 61 74 20 61 6c 6c 6f 77 73 20 72 6f 75 74 65 72 73 20 74 6f 20 74 65 6c 6c 20 6f 6e 65 20 74 | hat.allows.routers.to.tell.one.t |
c9920 | 75 6e 6e 65 6c 20 66 72 6f 6d 20 61 6e 6f 74 68 65 72 2e 00 47 52 45 20 69 73 20 6f 66 74 65 6e | unnel.from.another..GRE.is.often |
c9940 | 20 73 65 65 6e 20 61 73 20 61 20 6f 6e 65 20 73 69 7a 65 20 66 69 74 73 20 61 6c 6c 20 73 6f 6c | .seen.as.a.one.size.fits.all.sol |
c9960 | 75 74 69 6f 6e 20 77 68 65 6e 20 69 74 20 63 6f 6d 65 73 20 74 6f 20 63 6c 61 73 73 69 63 20 49 | ution.when.it.comes.to.classic.I |
c9980 | 50 20 74 75 6e 6e 65 6c 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 2c 20 61 6e 64 20 66 6f 72 20 61 | P.tunneling.protocols,.and.for.a |
c99a0 | 20 67 6f 6f 64 20 72 65 61 73 6f 6e 2e 20 48 6f 77 65 76 65 72 2c 20 74 68 65 72 65 20 61 72 65 | .good.reason..However,.there.are |
c99c0 | 20 6d 6f 72 65 20 73 70 65 63 69 61 6c 69 7a 65 64 20 6f 70 74 69 6f 6e 73 2c 20 61 6e 64 20 6d | .more.specialized.options,.and.m |
c99e0 | 61 6e 79 20 6f 66 20 74 68 65 6d 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 56 79 4f | any.of.them.are.supported.by.VyO |
c9a00 | 53 2e 20 54 68 65 72 65 20 61 72 65 20 61 6c 73 6f 20 72 61 74 68 65 72 20 6f 62 73 63 75 72 65 | S..There.are.also.rather.obscure |
c9a20 | 20 47 52 45 20 6f 70 74 69 6f 6e 73 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 66 75 6c 2e | .GRE.options.that.can.be.useful. |
c9a40 | 00 47 52 45 2f 49 50 49 50 2f 53 49 54 20 61 6e 64 20 49 50 73 65 63 20 61 72 65 20 77 69 64 65 | .GRE/IPIP/SIT.and.IPsec.are.wide |
c9a60 | 6c 79 20 61 63 63 65 70 74 65 64 20 73 74 61 6e 64 61 72 64 73 2c 20 77 68 69 63 68 20 6d 61 6b | ly.accepted.standards,.which.mak |
c9a80 | 65 20 74 68 69 73 20 73 63 68 65 6d 65 20 65 61 73 79 20 74 6f 20 69 6d 70 6c 65 6d 65 6e 74 20 | e.this.scheme.easy.to.implement. |
c9aa0 | 62 65 74 77 65 65 6e 20 56 79 4f 53 20 61 6e 64 20 76 69 72 74 75 61 6c 6c 79 20 61 6e 79 20 6f | between.VyOS.and.virtually.any.o |
c9ac0 | 74 68 65 72 20 72 6f 75 74 65 72 2e 00 47 52 45 54 41 50 00 47 65 6e 65 61 72 61 74 65 20 61 20 | ther.router..GRETAP.Genearate.a. |
c9ae0 | 6e 65 77 20 4f 70 65 6e 56 50 4e 20 73 68 61 72 65 64 20 73 65 63 72 65 74 2e 20 54 68 65 20 67 | new.OpenVPN.shared.secret..The.g |
c9b00 | 65 6e 65 72 61 74 65 64 20 73 65 63 72 65 64 20 69 73 20 74 68 65 20 6f 75 74 70 75 74 20 74 6f | enerated.secred.is.the.output.to |
c9b20 | 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 47 65 6e 65 61 72 61 74 65 20 61 20 6e 65 77 20 4f 70 | .the.console..Genearate.a.new.Op |
c9b40 | 65 6e 56 50 4e 20 73 68 61 72 65 64 20 73 65 63 72 65 74 2e 20 54 68 65 20 67 65 6e 65 72 61 74 | enVPN.shared.secret..The.generat |
c9b60 | 65 64 20 73 65 63 72 65 74 20 69 73 20 74 68 65 20 6f 75 74 70 75 74 20 74 6f 20 74 68 65 20 63 | ed.secret.is.the.output.to.the.c |
c9b80 | 6f 6e 73 6f 6c 65 2e 00 47 65 6e 65 72 61 6c 00 47 65 6e 65 72 61 6c 20 43 6f 6e 66 69 67 75 72 | onsole..General.General.Configur |
c9ba0 | 61 74 69 6f 6e 00 47 65 6e 65 72 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 66 6f 72 20 66 69 72 65 77 | ation.General.commands.for.firew |
c9bc0 | 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 63 6f 75 6e 74 65 72 20 61 6e 64 20 73 | all.configuration,.counter.and.s |
c9be0 | 74 61 74 69 73 63 69 74 73 3a 00 47 65 6e 65 72 61 74 65 20 3a 61 62 62 72 3a 60 4d 4b 41 20 28 | tatiscits:.Generate.:abbr:`MKA.( |
c9c00 | 4d 41 43 73 65 63 20 4b 65 79 20 41 67 72 65 65 6d 65 6e 74 20 70 72 6f 74 6f 63 6f 6c 29 60 20 | MACsec.Key.Agreement.protocol)`. |
c9c20 | 43 41 4b 20 6b 65 79 20 31 32 38 20 6f 72 20 32 35 36 20 62 69 74 73 2e 00 47 65 6e 65 72 61 74 | CAK.key.128.or.256.bits..Generat |
c9c40 | 65 20 3a 61 62 62 72 3a 60 4d 4b 41 20 28 4d 41 43 73 65 63 20 4b 65 79 20 41 67 72 65 65 6d 65 | e.:abbr:`MKA.(MACsec.Key.Agreeme |
c9c60 | 6e 74 20 70 72 6f 74 6f 63 6f 6c 29 60 20 43 41 4b 20 6b 65 79 2e 00 47 65 6e 65 72 61 74 65 20 | nt.protocol)`.CAK.key..Generate. |
c9c80 | 4b 65 79 70 61 69 72 00 47 65 6e 65 72 61 74 65 20 61 20 57 69 72 65 47 75 61 72 64 20 70 72 65 | Keypair.Generate.a.WireGuard.pre |
c9ca0 | 2d 73 68 61 72 65 64 20 73 65 63 72 65 74 20 75 73 65 64 20 66 6f 72 20 70 65 65 72 73 20 74 6f | -shared.secret.used.for.peers.to |
c9cc0 | 20 63 6f 6d 6d 75 6e 69 63 61 74 65 2e 00 47 65 6e 65 72 61 74 65 20 61 20 6e 65 77 20 57 69 72 | .communicate..Generate.a.new.Wir |
c9ce0 | 65 47 75 61 72 64 20 70 75 62 6c 69 63 2f 70 72 69 76 61 74 65 20 6b 65 79 20 70 6f 72 74 69 6f | eGuard.public/private.key.portio |
c9d00 | 6e 20 61 6e 64 20 6f 75 74 70 75 74 20 74 68 65 20 72 65 73 75 6c 74 20 74 6f 20 74 68 65 20 63 | n.and.output.the.result.to.the.c |
c9d20 | 6f 6e 73 6f 6c 65 2e 00 47 65 6e 65 72 61 74 65 20 61 20 6e 65 77 20 73 65 74 20 6f 66 20 3a 61 | onsole..Generate.a.new.set.of.:a |
c9d40 | 62 62 72 3a 60 44 48 20 28 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 29 60 20 70 61 72 61 6d 65 | bbr:`DH.(Diffie-Hellman)`.parame |
c9d60 | 74 65 72 73 2e 20 54 68 65 20 6b 65 79 20 73 69 7a 65 20 69 73 20 72 65 71 75 65 73 74 65 64 20 | ters..The.key.size.is.requested. |
c9d80 | 62 79 20 74 68 65 20 43 4c 49 20 61 6e 64 20 64 65 66 61 75 6c 74 73 20 74 6f 20 32 30 34 38 20 | by.the.CLI.and.defaults.to.2048. |
c9da0 | 62 69 74 2e 00 47 65 6e 65 72 61 74 65 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | bit..Generate.the.configuration. |
c9dc0 | 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 20 74 6f 20 61 64 64 20 61 20 70 75 62 6c 69 63 20 6b 65 | mode.commands.to.add.a.public.ke |
c9de0 | 79 20 66 6f 72 20 3a 72 65 66 3a 60 73 73 68 5f 6b 65 79 5f 62 61 73 65 64 5f 61 75 74 68 65 6e | y.for.:ref:`ssh_key_based_authen |
c9e00 | 74 69 63 61 74 69 6f 6e 60 2e 20 60 60 3c 6c 6f 63 61 74 69 6f 6e 3e 60 60 20 63 61 6e 20 62 65 | tication`..``<location>``.can.be |
c9e20 | 20 61 20 6c 6f 63 61 6c 20 70 61 74 68 20 6f 72 20 61 20 55 52 4c 20 70 6f 69 6e 74 69 6e 67 20 | .a.local.path.or.a.URL.pointing. |
c9e40 | 61 74 20 61 20 72 65 6d 6f 74 65 20 66 69 6c 65 2e 00 47 65 6e 65 72 61 74 65 73 20 61 20 6b 65 | at.a.remote.file..Generates.a.ke |
c9e60 | 79 70 61 69 72 2c 20 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 70 75 62 6c 69 63 | ypair,.which.includes.the.public |
c9e80 | 20 61 6e 64 20 70 72 69 76 61 74 65 20 70 61 72 74 73 2c 20 61 6e 64 20 62 75 69 6c 64 20 61 20 | .and.private.parts,.and.build.a. |
c9ea0 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 6e 73 74 61 6c 6c | configuration.command.to.install |
c9ec0 | 20 74 68 69 73 20 6b 65 79 20 74 6f 20 60 60 69 6e 74 65 72 66 61 63 65 60 60 2e 00 47 65 6e 65 | .this.key.to.``interface``..Gene |
c9ee0 | 72 69 63 20 52 6f 75 74 69 6e 67 20 45 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 28 47 52 45 29 00 | ric.Routing.Encapsulation.(GRE). |
c9f00 | 47 65 6e 65 76 65 20 48 65 61 64 65 72 3a 00 47 65 74 20 61 20 6c 69 73 74 20 6f 66 20 61 6c 6c | Geneve.Header:.Get.a.list.of.all |
c9f20 | 20 77 69 72 65 67 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 73 00 47 65 74 20 61 6e 20 6f 76 65 | .wireguard.interfaces.Get.an.ove |
c9f40 | 72 76 69 65 77 20 6f 76 65 72 20 74 68 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 6f 75 6e 74 65 | rview.over.the.encryption.counte |
c9f60 | 72 73 2e 00 47 65 74 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f | rs..Get.detailed.information.abo |
c9f80 | 75 74 20 4c 4c 44 50 20 6e 65 69 67 68 62 6f 72 73 2e 00 47 65 74 20 74 68 65 20 44 48 43 50 76 | ut.LLDP.neighbors..Get.the.DHCPv |
c9fa0 | 36 2d 50 44 20 70 72 65 66 69 78 65 73 20 66 72 6f 6d 20 62 6f 74 68 20 72 6f 75 74 65 72 73 3a | 6-PD.prefixes.from.both.routers: |
c9fc0 | 00 47 65 74 74 69 6e 67 20 73 74 61 72 74 65 64 00 47 69 76 65 6e 20 74 68 65 20 66 61 63 74 20 | .Getting.started.Given.the.fact. |
c9fe0 | 74 68 61 74 20 6f 70 65 6e 20 44 4e 53 20 72 65 63 75 72 73 6f 72 73 20 63 6f 75 6c 64 20 62 65 | that.open.DNS.recursors.could.be |
ca000 | 20 75 73 65 64 20 6f 6e 20 44 44 6f 53 20 61 6d 70 6c 69 66 69 63 61 74 69 6f 6e 20 61 74 74 61 | .used.on.DDoS.amplification.atta |
ca020 | 63 6b 73 2c 20 79 6f 75 20 6d 75 73 74 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6e 65 74 77 | cks,.you.must.configure.the.netw |
ca040 | 6f 72 6b 73 20 77 68 69 63 68 20 61 72 65 20 61 6c 6c 6f 77 65 64 20 74 6f 20 75 73 65 20 74 68 | orks.which.are.allowed.to.use.th |
ca060 | 69 73 20 72 65 63 75 72 73 6f 72 2e 20 41 20 6e 65 74 77 6f 72 6b 20 6f 66 20 60 60 30 2e 30 2e | is.recursor..A.network.of.``0.0. |
ca080 | 30 2e 30 2f 30 60 60 20 6f 72 20 60 60 3a 3a 2f 30 60 60 20 77 6f 75 6c 64 20 61 6c 6c 6f 77 20 | 0.0/0``.or.``::/0``.would.allow. |
ca0a0 | 61 6c 6c 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 73 20 74 6f 20 71 75 | all.IPv4.and.IPv6.networks.to.qu |
ca0c0 | 65 72 79 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 54 68 69 73 20 69 73 20 67 65 6e 65 72 61 6c | ery.this.server..This.is.general |
ca0e0 | 6c 79 20 61 20 62 61 64 20 69 64 65 61 2e 00 47 69 76 65 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 | ly.a.bad.idea..Given.the.followi |
ca100 | 6e 67 20 65 78 61 6d 70 6c 65 20 77 65 20 68 61 76 65 20 6f 6e 65 20 56 79 4f 53 20 72 6f 75 74 | ng.example.we.have.one.VyOS.rout |
ca120 | 65 72 20 61 63 74 69 6e 67 20 61 73 20 4f 70 65 6e 56 50 4e 20 73 65 72 76 65 72 20 61 6e 64 20 | er.acting.as.OpenVPN.server.and. |
ca140 | 61 6e 6f 74 68 65 72 20 56 79 4f 53 20 72 6f 75 74 65 72 20 61 63 74 69 6e 67 20 61 73 20 4f 70 | another.VyOS.router.acting.as.Op |
ca160 | 65 6e 56 50 4e 20 63 6c 69 65 6e 74 2e 20 54 68 65 20 73 65 72 76 65 72 20 61 6c 73 6f 20 70 75 | enVPN.client..The.server.also.pu |
ca180 | 73 68 65 73 20 61 20 73 74 61 74 69 63 20 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 20 | shes.a.static.client.IP.address. |
ca1a0 | 74 6f 20 74 68 65 20 4f 70 65 6e 56 50 4e 20 63 6c 69 65 6e 74 2e 20 52 65 6d 65 6d 62 65 72 2c | to.the.OpenVPN.client..Remember, |
ca1c0 | 20 63 6c 69 65 6e 74 73 20 61 72 65 20 69 64 65 6e 74 69 66 69 65 64 20 75 73 69 6e 67 20 74 68 | .clients.are.identified.using.th |
ca1e0 | 65 69 72 20 43 4e 20 61 74 74 72 69 62 75 74 65 20 69 6e 20 74 68 65 20 53 53 4c 20 63 65 72 74 | eir.CN.attribute.in.the.SSL.cert |
ca200 | 69 66 69 63 61 74 65 2e 00 47 6c 6f 61 62 61 6c 00 47 6c 6f 62 61 6c 20 41 64 76 61 6e 63 65 64 | ificate..Gloabal.Global.Advanced |
ca220 | 20 6f 70 74 69 6f 6e 73 00 47 6c 6f 62 61 6c 20 4f 70 74 69 6f 6e 73 00 47 6c 6f 62 61 6c 20 4f | .options.Global.Options.Global.O |
ca240 | 70 74 69 6f 6e 73 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 47 6c | ptions.Firewall.Configuration.Gl |
ca260 | 6f 62 61 6c 20 6f 70 74 69 6f 6e 73 00 47 6c 6f 62 61 6c 20 70 61 72 61 6d 65 74 65 72 73 00 47 | obal.options.Global.parameters.G |
ca280 | 6c 6f 62 61 6c 20 73 65 74 74 69 6e 67 73 00 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 00 | lobal.settings.Graceful.Restart. |
ca2a0 | 47 72 61 74 75 69 74 6f 75 73 20 41 52 50 00 47 72 6f 75 70 73 00 47 72 6f 75 70 73 20 6e 65 65 | Gratuitous.ARP.Groups.Groups.nee |
ca2c0 | 64 20 74 6f 20 68 61 76 65 20 75 6e 69 71 75 65 20 6e 61 6d 65 73 2e 20 45 76 65 6e 20 74 68 6f | d.to.have.unique.names..Even.tho |
ca2e0 | 75 67 68 20 73 6f 6d 65 20 63 6f 6e 74 61 69 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 | ugh.some.contain.IPv4.addresses. |
ca300 | 61 6e 64 20 6f 74 68 65 72 73 20 63 6f 6e 74 61 69 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 65 | and.others.contain.IPv6.addresse |
ca320 | 73 2c 20 74 68 65 79 20 73 74 69 6c 6c 20 6e 65 65 64 20 74 6f 20 68 61 76 65 20 75 6e 69 71 75 | s,.they.still.need.to.have.uniqu |
ca340 | 65 20 6e 61 6d 65 73 2c 20 73 6f 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 61 70 70 65 | e.names,.so.you.may.want.to.appe |
ca360 | 6e 64 20 22 2d 76 34 22 20 6f 72 20 22 2d 76 36 22 20 74 6f 20 79 6f 75 72 20 67 72 6f 75 70 20 | nd."-v4".or."-v6".to.your.group. |
ca380 | 6e 61 6d 65 73 2e 00 48 51 27 73 20 72 6f 75 74 65 72 20 72 65 71 75 69 72 65 73 20 74 68 65 20 | names..HQ's.router.requires.the. |
ca3a0 | 66 6f 6c 6c 6f 77 69 6e 67 20 73 74 65 70 73 20 74 6f 20 67 65 6e 65 72 61 74 65 20 63 72 79 70 | following.steps.to.generate.cryp |
ca3c0 | 74 6f 20 6d 61 74 65 72 69 61 6c 73 20 66 6f 72 20 74 68 65 20 42 72 61 6e 63 68 20 31 3a 00 48 | to.materials.for.the.Branch.1:.H |
ca3e0 | 54 20 28 48 69 67 68 20 54 68 72 6f 75 67 68 70 75 74 29 20 63 61 70 61 62 69 6c 69 74 69 65 73 | T.(High.Throughput).capabilities |
ca400 | 20 28 38 30 32 2e 31 31 6e 29 00 48 54 54 50 20 41 50 49 00 48 54 54 50 20 62 61 73 65 64 20 73 | .(802.11n).HTTP.API.HTTP.based.s |
ca420 | 65 72 76 69 63 65 73 00 48 54 54 50 20 62 61 73 69 63 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | ervices.HTTP.basic.authenticatio |
ca440 | 6e 20 75 73 65 72 6e 61 6d 65 00 48 54 54 50 20 63 6c 69 65 6e 74 00 48 54 54 50 2d 41 50 49 00 | n.username.HTTP.client.HTTP-API. |
ca460 | 48 61 69 72 70 69 6e 20 4e 41 54 2f 4e 41 54 20 52 65 66 6c 65 63 74 69 6f 6e 00 48 61 6e 64 20 | Hairpin.NAT/NAT.Reflection.Hand. |
ca480 | 6f 75 74 20 70 72 65 66 69 78 65 73 20 6f 66 20 73 69 7a 65 20 60 3c 6c 65 6e 67 74 68 3e 60 20 | out.prefixes.of.size.`<length>`. |
ca4a0 | 74 6f 20 63 6c 69 65 6e 74 73 20 69 6e 20 73 75 62 6e 65 74 20 60 3c 70 72 65 66 69 78 3e 60 20 | to.clients.in.subnet.`<prefix>`. |
ca4c0 | 77 68 65 6e 20 74 68 65 79 20 72 65 71 75 65 73 74 20 66 6f 72 20 70 72 65 66 69 78 20 64 65 6c | when.they.request.for.prefix.del |
ca4e0 | 65 67 61 74 69 6f 6e 2e 00 48 61 6e 64 6c 69 6e 67 20 61 6e 64 20 6d 6f 6e 69 74 6f 72 69 6e 67 | egation..Handling.and.monitoring |
ca500 | 00 48 61 76 69 6e 67 20 63 6f 6e 74 72 6f 6c 20 6f 76 65 72 20 74 68 65 20 6d 61 74 63 68 69 6e | .Having.control.over.the.matchin |
ca520 | 67 20 6f 66 20 49 4e 56 41 4c 49 44 20 73 74 61 74 65 20 74 72 61 66 66 69 63 2c 20 65 2e 67 2e | g.of.INVALID.state.traffic,.e.g. |
ca540 | 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 73 65 6c 65 63 74 69 76 65 6c 79 20 6c 6f 67 2c | .the.ability.to.selectively.log, |
ca560 | 20 69 73 20 61 6e 20 69 6d 70 6f 72 74 61 6e 74 20 74 72 6f 75 62 6c 65 73 68 6f 6f 74 69 6e 67 | .is.an.important.troubleshooting |
ca580 | 20 74 6f 6f 6c 20 66 6f 72 20 6f 62 73 65 72 76 69 6e 67 20 62 72 6f 6b 65 6e 20 70 72 6f 74 6f | .tool.for.observing.broken.proto |
ca5a0 | 63 6f 6c 20 62 65 68 61 76 69 6f 72 2e 20 46 6f 72 20 74 68 69 73 20 72 65 61 73 6f 6e 2c 20 56 | col.behavior..For.this.reason,.V |
ca5c0 | 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 67 6c 6f 62 61 6c 6c 79 20 64 72 6f 70 20 69 6e 76 61 6c | yOS.does.not.globally.drop.inval |
ca5e0 | 69 64 20 73 74 61 74 65 20 74 72 61 66 66 69 63 2c 20 69 6e 73 74 65 61 64 20 61 6c 6c 6f 77 69 | id.state.traffic,.instead.allowi |
ca600 | 6e 67 20 74 68 65 20 6f 70 65 72 61 74 6f 72 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 64 65 74 65 | ng.the.operator.to.make.the.dete |
ca620 | 72 6d 69 6e 61 74 69 6f 6e 20 6f 6e 20 68 6f 77 20 74 68 65 20 74 72 61 66 66 69 63 20 69 73 20 | rmination.on.how.the.traffic.is. |
ca640 | 68 61 6e 64 6c 65 64 2e 00 48 65 61 6c 74 68 20 63 68 65 63 6b 20 73 63 72 69 70 74 73 00 48 65 | handled..Health.check.scripts.He |
ca660 | 61 6c 74 68 20 63 68 65 63 6b 73 00 48 65 61 6c 74 68 2d 63 68 65 63 6b 00 48 65 72 65 20 61 72 | alth.checks.Health-check.Here.ar |
ca680 | 65 20 73 6f 6d 65 20 65 78 61 6d 70 6c 65 73 20 66 6f 72 20 61 70 70 6c 79 69 6e 67 20 61 20 72 | e.some.examples.for.applying.a.r |
ca6a0 | 75 6c 65 2d 73 65 74 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 00 48 65 72 65 20 69 73 20 | ule-set.to.an.interface.Here.is. |
ca6c0 | 61 20 73 65 63 6f 6e 64 20 65 78 61 6d 70 6c 65 20 6f 66 20 61 20 64 75 61 6c 2d 73 74 61 63 6b | a.second.example.of.a.dual-stack |
ca6e0 | 20 74 75 6e 6e 65 6c 20 6f 76 65 72 20 49 50 76 36 20 62 65 74 77 65 65 6e 20 61 20 56 79 4f 53 | .tunnel.over.IPv6.between.a.VyOS |
ca700 | 20 72 6f 75 74 65 72 20 61 6e 64 20 61 20 4c 69 6e 75 78 20 68 6f 73 74 20 75 73 69 6e 67 20 73 | .router.and.a.Linux.host.using.s |
ca720 | 79 73 74 65 6d 64 2d 6e 65 74 77 6f 72 6b 64 2e 00 48 65 72 65 20 69 73 20 61 6e 20 65 78 61 6d | ystemd-networkd..Here.is.an.exam |
ca740 | 70 6c 65 20 3a 61 62 62 72 3a 60 4e 45 54 20 28 4e 65 74 77 6f 72 6b 20 45 6e 74 69 74 79 20 54 | ple.:abbr:`NET.(Network.Entity.T |
ca760 | 69 74 6c 65 29 60 20 76 61 6c 75 65 3a 00 48 65 72 65 20 69 73 20 61 6e 20 65 78 61 6d 70 6c 65 | itle)`.value:.Here.is.an.example |
ca780 | 20 72 6f 75 74 65 2d 6d 61 70 20 74 6f 20 61 70 70 6c 79 20 74 6f 20 72 6f 75 74 65 73 20 6c 65 | .route-map.to.apply.to.routes.le |
ca7a0 | 61 72 6e 65 64 20 61 74 20 69 6d 70 6f 72 74 2e 20 49 6e 20 74 68 69 73 20 66 69 6c 74 65 72 20 | arned.at.import..In.this.filter. |
ca7c0 | 77 65 20 72 65 6a 65 63 74 20 70 72 65 66 69 78 65 73 20 77 69 74 68 20 74 68 65 20 73 74 61 74 | we.reject.prefixes.with.the.stat |
ca7e0 | 65 20 60 69 6e 76 61 6c 69 64 60 2c 20 61 6e 64 20 73 65 74 20 61 20 68 69 67 68 65 72 20 60 6c | e.`invalid`,.and.set.a.higher.`l |
ca800 | 6f 63 61 6c 2d 70 72 65 66 65 72 65 6e 63 65 60 20 69 66 20 74 68 65 20 70 72 65 66 69 78 20 69 | ocal-preference`.if.the.prefix.i |
ca820 | 73 20 52 50 4b 49 20 60 76 61 6c 69 64 60 20 72 61 74 68 65 72 20 74 68 61 6e 20 6d 65 72 65 6c | s.RPKI.`valid`.rather.than.merel |
ca840 | 79 20 60 6e 6f 74 66 6f 75 6e 64 60 2e 00 48 65 72 65 20 69 73 20 61 6e 20 65 78 61 6d 70 6c 65 | y.`notfound`..Here.is.an.example |
ca860 | 20 77 65 72 65 20 6d 75 6c 74 69 70 6c 65 20 67 72 6f 75 70 73 20 61 72 65 20 63 72 65 61 74 65 | .were.multiple.groups.are.create |
ca880 | 64 3a 00 48 65 72 65 20 69 73 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 20 73 68 | d:.Here.is.the.routing.tables.sh |
ca8a0 | 6f 77 69 6e 67 20 74 68 65 20 4d 50 4c 53 20 73 65 67 6d 65 6e 74 20 72 6f 75 74 69 6e 67 20 6c | owing.the.MPLS.segment.routing.l |
ca8c0 | 61 62 65 6c 20 6f 70 65 72 61 74 69 6f 6e 73 3a 00 48 65 72 65 20 77 65 20 70 72 6f 76 69 64 65 | abel.operations:.Here.we.provide |
ca8e0 | 20 74 77 6f 20 65 78 61 6d 70 6c 65 73 20 6f 6e 20 68 6f 77 20 74 6f 20 61 70 70 6c 79 20 4e 41 | .two.examples.on.how.to.apply.NA |
ca900 | 54 20 4c 6f 61 64 20 42 61 6c 61 6e 63 65 2e 00 48 65 72 65 27 73 20 61 6e 20 65 78 74 72 61 63 | T.Load.Balance..Here's.an.extrac |
ca920 | 74 20 6f 66 20 61 20 73 69 6d 70 6c 65 20 31 2d 74 6f 2d 31 20 4e 41 54 20 63 6f 6e 66 69 67 75 | t.of.a.simple.1-to-1.NAT.configu |
ca940 | 72 61 74 69 6f 6e 20 77 69 74 68 20 6f 6e 65 20 69 6e 74 65 72 6e 61 6c 20 61 6e 64 20 6f 6e 65 | ration.with.one.internal.and.one |
ca960 | 20 65 78 74 65 72 6e 61 6c 20 69 6e 74 65 72 66 61 63 65 3a 00 48 65 72 65 27 73 20 6f 6e 65 20 | .external.interface:.Here's.one. |
ca980 | 65 78 61 6d 70 6c 65 20 6f 66 20 61 20 6e 65 74 77 6f 72 6b 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 | example.of.a.network.environment |
ca9a0 | 20 66 6f 72 20 61 6e 20 41 53 50 2e 20 54 68 65 20 41 53 50 20 72 65 71 75 65 73 74 73 20 74 68 | .for.an.ASP..The.ASP.requests.th |
ca9c0 | 61 74 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 20 74 68 69 73 20 63 6f 6d | at.all.connections.from.this.com |
ca9e0 | 70 61 6e 79 20 73 68 6f 75 6c 64 20 63 6f 6d 65 20 66 72 6f 6d 20 31 37 32 2e 32 39 2e 34 31 2e | pany.should.come.from.172.29.41. |
caa00 | 38 39 20 2d 20 61 6e 20 61 64 64 72 65 73 73 20 74 68 61 74 20 69 73 20 61 73 73 69 67 6e 65 64 | 89.-.an.address.that.is.assigned |
caa20 | 20 62 79 20 74 68 65 20 41 53 50 20 61 6e 64 20 6e 6f 74 20 69 6e 20 75 73 65 20 61 74 20 74 68 | .by.the.ASP.and.not.in.use.at.th |
caa40 | 65 20 63 75 73 74 6f 6d 65 72 20 73 69 74 65 2e 00 48 65 72 65 27 73 20 74 68 65 20 49 50 20 72 | e.customer.site..Here's.the.IP.r |
caa60 | 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 70 6f 70 75 6c 61 74 65 64 2e 20 4a 75 73 74 20 74 | outes.that.are.populated..Just.t |
caa80 | 68 65 20 6c 6f 6f 70 62 61 63 6b 3a 00 48 65 72 65 27 73 20 74 68 65 20 6e 65 69 67 68 62 6f 72 | he.loopback:.Here's.the.neighbor |
caaa0 | 73 20 75 70 3a 00 48 65 72 65 27 73 20 74 68 65 20 72 6f 75 74 65 73 3a 00 48 65 77 6c 65 74 74 | s.up:.Here's.the.routes:.Hewlett |
caac0 | 2d 50 61 63 6b 61 72 64 20 63 61 6c 6c 20 69 74 20 53 6f 75 72 63 65 2d 50 6f 72 74 20 66 69 6c | -Packard.call.it.Source-Port.fil |
caae0 | 74 65 72 69 6e 67 20 6f 72 20 70 6f 72 74 2d 69 73 6f 6c 61 74 69 6f 6e 00 48 69 67 68 00 48 69 | tering.or.port-isolation.High.Hi |
cab00 | 67 68 20 41 76 61 69 6c 61 62 69 6c 69 74 79 00 48 69 67 68 20 61 76 61 69 6c 61 62 69 6c 69 74 | gh.Availability.High.availabilit |
cab20 | 79 00 48 6f 6d 65 20 55 73 65 72 73 00 48 6f 70 20 63 6f 75 6e 74 20 66 69 65 6c 64 20 6f 66 20 | y.Home.Users.Hop.count.field.of. |
cab40 | 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 52 41 20 70 61 63 6b 65 74 73 00 48 6f 73 74 20 49 6e 66 | the.outgoing.RA.packets.Host.Inf |
cab60 | 6f 72 6d 61 74 69 6f 6e 00 48 6f 73 74 20 6e 61 6d 65 00 48 6f 73 74 20 73 70 65 63 69 66 69 63 | ormation.Host.name.Host.specific |
cab80 | 20 6d 61 70 70 69 6e 67 20 73 68 61 6c 6c 20 62 65 20 6e 61 6d 65 64 20 60 60 63 6c 69 65 6e 74 | .mapping.shall.be.named.``client |
caba0 | 31 60 60 00 48 6f 73 74 6e 61 6d 65 00 48 6f 77 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 69 | 1``.Hostname.How.an.IP.address.i |
cabc0 | 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 3a 72 | s.assigned.to.an.interface.in.:r |
cabe0 | 65 66 3a 60 65 74 68 65 72 6e 65 74 2d 69 6e 74 65 72 66 61 63 65 60 2e 20 54 68 69 73 20 73 65 | ef:`ethernet-interface`..This.se |
cac00 | 63 74 69 6f 6e 20 73 68 6f 77 73 20 68 6f 77 20 74 6f 20 73 74 61 74 69 63 61 6c 6c 79 20 6d 61 | ction.shows.how.to.statically.ma |
cac20 | 70 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 61 20 68 6f 73 74 6e 61 6d 65 20 66 6f | p.an.IP.address.to.a.hostname.fo |
cac40 | 72 20 6c 6f 63 61 6c 20 28 6d 65 61 6e 69 6e 67 20 6f 6e 20 74 68 69 73 20 56 79 4f 53 20 69 6e | r.local.(meaning.on.this.VyOS.in |
cac60 | 73 74 61 6e 63 65 29 20 6e 61 6d 65 20 72 65 73 6f 6c 75 74 69 6f 6e 2e 20 54 68 69 73 20 69 73 | stance).name.resolution..This.is |
cac80 | 20 74 68 65 20 56 79 4f 53 20 65 71 75 69 76 61 6c 65 6e 74 20 74 6f 20 60 2f 65 74 63 2f 68 6f | .the.VyOS.equivalent.to.`/etc/ho |
caca0 | 73 74 73 60 20 66 69 6c 65 20 65 6e 74 72 69 65 73 2e 00 48 6f 77 20 74 6f 20 63 6f 6e 66 69 67 | sts`.file.entries..How.to.config |
cacc0 | 75 72 65 20 45 76 65 6e 74 20 48 61 6e 64 6c 65 72 00 48 6f 77 20 74 6f 20 6d 61 6b 65 20 69 74 | ure.Event.Handler.How.to.make.it |
cace0 | 20 77 6f 72 6b 00 48 6f 77 65 76 65 72 2c 20 6e 6f 77 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 6d | .work.However,.now.you.need.to.m |
cad00 | 61 6b 65 20 49 50 73 65 63 20 77 6f 72 6b 20 77 69 74 68 20 64 79 6e 61 6d 69 63 20 61 64 64 72 | ake.IPsec.work.with.dynamic.addr |
cad20 | 65 73 73 20 6f 6e 20 6f 6e 65 20 73 69 64 65 2e 20 54 68 65 20 74 72 69 63 6b 79 20 70 61 72 74 | ess.on.one.side..The.tricky.part |
cad40 | 20 69 73 20 74 68 61 74 20 70 72 65 2d 73 68 61 72 65 64 20 73 65 63 72 65 74 20 61 75 74 68 65 | .is.that.pre-shared.secret.authe |
cad60 | 6e 74 69 63 61 74 69 6f 6e 20 64 6f 65 73 6e 27 74 20 77 6f 72 6b 20 77 69 74 68 20 64 79 6e 61 | ntication.doesn't.work.with.dyna |
cad80 | 6d 69 63 20 61 64 64 72 65 73 73 2c 20 73 6f 20 77 65 27 6c 6c 20 68 61 76 65 20 74 6f 20 75 73 | mic.address,.so.we'll.have.to.us |
cada0 | 65 20 52 53 41 20 6b 65 79 73 2e 00 48 6f 77 65 76 65 72 2c 20 73 69 6e 63 65 20 56 79 4f 53 20 | e.RSA.keys..However,.since.VyOS. |
cadc0 | 31 2e 34 2c 20 69 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 76 65 72 69 66 79 20 73 65 | 1.4,.it.is.possible.to.verify.se |
cade0 | 6c 66 2d 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 73 20 75 73 69 6e 67 20 63 65 72 | lf-signed.certificates.using.cer |
cae00 | 74 69 66 69 63 61 74 65 20 66 69 6e 67 65 72 70 72 69 6e 74 73 2e 00 48 6f 77 65 76 65 72 2c 20 | tificate.fingerprints..However,. |
cae20 | 73 70 6c 69 74 2d 74 75 6e 6e 65 6c 69 6e 67 20 63 61 6e 20 62 65 20 61 63 68 69 65 76 65 64 20 | split-tunneling.can.be.achieved. |
cae40 | 62 79 20 73 70 65 63 69 66 79 69 6e 67 20 74 68 65 20 72 65 6d 6f 74 65 20 73 75 62 6e 65 74 73 | by.specifying.the.remote.subnets |
cae60 | 2e 20 54 68 69 73 20 65 6e 73 75 72 65 73 20 74 68 61 74 20 6f 6e 6c 79 20 74 72 61 66 66 69 63 | ..This.ensures.that.only.traffic |
cae80 | 20 64 65 73 74 69 6e 65 64 20 66 6f 72 20 74 68 65 20 72 65 6d 6f 74 65 20 73 69 74 65 20 69 73 | .destined.for.the.remote.site.is |
caea0 | 20 73 65 6e 74 20 6f 76 65 72 20 74 68 65 20 74 75 6e 6e 65 6c 2e 20 41 6c 6c 20 6f 74 68 65 72 | .sent.over.the.tunnel..All.other |
caec0 | 20 74 72 61 66 66 69 63 20 69 73 20 75 6e 61 66 66 65 63 74 65 64 2e 00 48 75 61 77 65 69 20 4d | .traffic.is.unaffected..Huawei.M |
caee0 | 45 39 30 39 73 2d 31 32 30 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c 54 45 29 00 48 75 | E909s-120.miniPCIe.card.(LTE).Hu |
caf00 | 61 77 65 69 20 4d 45 39 30 39 75 2d 35 32 31 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c | awei.ME909u-521.miniPCIe.card.(L |
caf20 | 54 45 29 00 48 75 62 00 49 45 45 45 20 38 30 32 2e 31 58 2f 4d 41 43 73 65 63 20 70 72 65 2d 73 | TE).Hub.IEEE.802.1X/MACsec.pre-s |
caf40 | 68 61 72 65 64 20 6b 65 79 20 6d 6f 64 65 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 63 6f 6e 66 | hared.key.mode..This.allows.conf |
caf60 | 69 67 75 72 69 6e 67 20 4d 41 43 73 65 63 20 77 69 74 68 20 61 20 70 72 65 2d 73 68 61 72 65 64 | iguring.MACsec.with.a.pre-shared |
caf80 | 20 6b 65 79 20 75 73 69 6e 67 20 61 20 3a 61 62 62 72 3a 60 43 41 4b 20 28 4d 41 43 73 65 63 20 | .key.using.a.:abbr:`CAK.(MACsec. |
cafa0 | 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 6b 65 79 29 60 20 61 | connectivity.association.key)`.a |
cafc0 | 6e 64 20 3a 61 62 62 72 3a 60 43 4b 4e 20 28 4d 41 43 73 65 63 20 63 6f 6e 6e 65 63 74 69 76 69 | nd.:abbr:`CKN.(MACsec.connectivi |
cafe0 | 74 79 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 6e 61 6d 65 29 60 20 70 61 69 72 2e 00 49 45 45 45 | ty.association.name)`.pair..IEEE |
cb000 | 20 38 30 32 2e 31 58 2f 4d 41 43 73 65 63 20 72 65 70 6c 61 79 20 70 72 6f 74 65 63 74 69 6f 6e | .802.1X/MACsec.replay.protection |
cb020 | 20 77 69 6e 64 6f 77 2e 20 54 68 69 73 20 64 65 74 65 72 6d 69 6e 65 73 20 61 20 77 69 6e 64 6f | .window..This.determines.a.windo |
cb040 | 77 20 69 6e 20 77 68 69 63 68 20 72 65 70 6c 61 79 20 69 73 20 74 6f 6c 65 72 61 74 65 64 2c 20 | w.in.which.replay.is.tolerated,. |
cb060 | 74 6f 20 61 6c 6c 6f 77 20 72 65 63 65 69 70 74 20 6f 66 20 66 72 61 6d 65 73 20 74 68 61 74 20 | to.allow.receipt.of.frames.that. |
cb080 | 68 61 76 65 20 62 65 65 6e 20 6d 69 73 6f 72 64 65 72 65 64 20 62 79 20 74 68 65 20 6e 65 74 77 | have.been.misordered.by.the.netw |
cb0a0 | 6f 72 6b 2e 00 49 45 45 45 20 38 30 32 2e 31 61 64 5f 20 77 61 73 20 61 6e 20 45 74 68 65 72 6e | ork..IEEE.802.1ad_.was.an.Ethern |
cb0c0 | 65 74 20 6e 65 74 77 6f 72 6b 69 6e 67 20 73 74 61 6e 64 61 72 64 20 69 6e 66 6f 72 6d 61 6c 6c | et.networking.standard.informall |
cb0e0 | 79 20 6b 6e 6f 77 6e 20 61 73 20 51 69 6e 51 20 61 73 20 61 6e 20 61 6d 65 6e 64 6d 65 6e 74 20 | y.known.as.QinQ.as.an.amendment. |
cb100 | 74 6f 20 49 45 45 45 20 73 74 61 6e 64 61 72 64 20 38 30 32 2e 31 71 20 56 4c 41 4e 20 69 6e 74 | to.IEEE.standard.802.1q.VLAN.int |
cb120 | 65 72 66 61 63 65 73 20 61 73 20 64 65 73 63 72 69 62 65 64 20 61 62 6f 76 65 2e 20 38 30 32 2e | erfaces.as.described.above..802. |
cb140 | 31 61 64 20 77 61 73 20 69 6e 63 6f 72 70 6f 72 61 74 65 64 20 69 6e 74 6f 20 74 68 65 20 62 61 | 1ad.was.incorporated.into.the.ba |
cb160 | 73 65 20 38 30 32 2e 31 71 5f 20 73 74 61 6e 64 61 72 64 20 69 6e 20 32 30 31 31 2e 20 54 68 65 | se.802.1q_.standard.in.2011..The |
cb180 | 20 74 65 63 68 6e 69 71 75 65 20 69 73 20 61 6c 73 6f 20 6b 6e 6f 77 6e 20 61 73 20 70 72 6f 76 | .technique.is.also.known.as.prov |
cb1a0 | 69 64 65 72 20 62 72 69 64 67 69 6e 67 2c 20 53 74 61 63 6b 65 64 20 56 4c 41 4e 73 2c 20 6f 72 | ider.bridging,.Stacked.VLANs,.or |
cb1c0 | 20 73 69 6d 70 6c 79 20 51 69 6e 51 20 6f 72 20 51 2d 69 6e 2d 51 2e 20 22 51 2d 69 6e 2d 51 22 | .simply.QinQ.or.Q-in-Q.."Q-in-Q" |
cb1e0 | 20 63 61 6e 20 66 6f 72 20 73 75 70 70 6f 72 74 65 64 20 64 65 76 69 63 65 73 20 61 70 70 6c 79 | .can.for.supported.devices.apply |
cb200 | 20 74 6f 20 43 2d 74 61 67 20 73 74 61 63 6b 69 6e 67 20 6f 6e 20 43 2d 74 61 67 20 28 45 74 68 | .to.C-tag.stacking.on.C-tag.(Eth |
cb220 | 65 72 6e 65 74 20 54 79 70 65 20 3d 20 30 78 38 31 30 30 29 2e 00 49 45 45 45 20 38 30 32 2e 31 | ernet.Type.=.0x8100)..IEEE.802.1 |
cb240 | 71 5f 2c 20 6f 66 74 65 6e 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 44 6f 74 31 71 2c 20 | q_,.often.referred.to.as.Dot1q,. |
cb260 | 69 73 20 74 68 65 20 6e 65 74 77 6f 72 6b 69 6e 67 20 73 74 61 6e 64 61 72 64 20 74 68 61 74 20 | is.the.networking.standard.that. |
cb280 | 73 75 70 70 6f 72 74 73 20 76 69 72 74 75 61 6c 20 4c 41 4e 73 20 28 56 4c 41 4e 73 29 20 6f 6e | supports.virtual.LANs.(VLANs).on |
cb2a0 | 20 61 6e 20 49 45 45 45 20 38 30 32 2e 33 20 45 74 68 65 72 6e 65 74 20 6e 65 74 77 6f 72 6b 2e | .an.IEEE.802.3.Ethernet.network. |
cb2c0 | 20 54 68 65 20 73 74 61 6e 64 61 72 64 20 64 65 66 69 6e 65 73 20 61 20 73 79 73 74 65 6d 20 6f | .The.standard.defines.a.system.o |
cb2e0 | 66 20 56 4c 41 4e 20 74 61 67 67 69 6e 67 20 66 6f 72 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d | f.VLAN.tagging.for.Ethernet.fram |
cb300 | 65 73 20 61 6e 64 20 74 68 65 20 61 63 63 6f 6d 70 61 6e 79 69 6e 67 20 70 72 6f 63 65 64 75 72 | es.and.the.accompanying.procedur |
cb320 | 65 73 20 74 6f 20 62 65 20 75 73 65 64 20 62 79 20 62 72 69 64 67 65 73 20 61 6e 64 20 73 77 69 | es.to.be.used.by.bridges.and.swi |
cb340 | 74 63 68 65 73 20 69 6e 20 68 61 6e 64 6c 69 6e 67 20 73 75 63 68 20 66 72 61 6d 65 73 2e 20 54 | tches.in.handling.such.frames..T |
cb360 | 68 65 20 73 74 61 6e 64 61 72 64 20 61 6c 73 6f 20 63 6f 6e 74 61 69 6e 73 20 70 72 6f 76 69 73 | he.standard.also.contains.provis |
cb380 | 69 6f 6e 73 20 66 6f 72 20 61 20 71 75 61 6c 69 74 79 2d 6f 66 2d 73 65 72 76 69 63 65 20 70 72 | ions.for.a.quality-of-service.pr |
cb3a0 | 69 6f 72 69 74 69 7a 61 74 69 6f 6e 20 73 63 68 65 6d 65 20 63 6f 6d 6d 6f 6e 6c 79 20 6b 6e 6f | ioritization.scheme.commonly.kno |
cb3c0 | 77 6e 20 61 73 20 49 45 45 45 20 38 30 32 2e 31 70 20 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 | wn.as.IEEE.802.1p.and.defines.th |
cb3e0 | 65 20 47 65 6e 65 72 69 63 20 41 74 74 72 69 62 75 74 65 20 52 65 67 69 73 74 72 61 74 69 6f 6e | e.Generic.Attribute.Registration |
cb400 | 20 50 72 6f 74 6f 63 6f 6c 2e 00 49 45 54 46 20 70 75 62 6c 69 73 68 65 64 20 3a 72 66 63 3a 60 | .Protocol..IETF.published.:rfc:` |
cb420 | 36 35 39 38 60 2c 20 64 65 74 61 69 6c 69 6e 67 20 61 20 73 68 61 72 65 64 20 61 64 64 72 65 73 | 6598`,.detailing.a.shared.addres |
cb440 | 73 20 73 70 61 63 65 20 66 6f 72 20 75 73 65 20 69 6e 20 49 53 50 20 43 47 4e 20 64 65 70 6c 6f | s.space.for.use.in.ISP.CGN.deplo |
cb460 | 79 6d 65 6e 74 73 20 74 68 61 74 20 63 61 6e 20 68 61 6e 64 6c 65 20 74 68 65 20 73 61 6d 65 20 | yments.that.can.handle.the.same. |
cb480 | 6e 65 74 77 6f 72 6b 20 70 72 65 66 69 78 65 73 20 6f 63 63 75 72 72 69 6e 67 20 62 6f 74 68 20 | network.prefixes.occurring.both. |
cb4a0 | 6f 6e 20 69 6e 62 6f 75 6e 64 20 61 6e 64 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 | on.inbound.and.outbound.interfac |
cb4c0 | 65 73 2e 20 41 52 49 4e 20 72 65 74 75 72 6e 65 64 20 61 64 64 72 65 73 73 20 73 70 61 63 65 20 | es..ARIN.returned.address.space. |
cb4e0 | 74 6f 20 74 68 65 20 3a 61 62 62 72 3a 60 49 41 4e 41 20 28 49 6e 74 65 72 6e 65 74 20 41 73 73 | to.the.:abbr:`IANA.(Internet.Ass |
cb500 | 69 67 6e 65 64 20 4e 75 6d 62 65 72 73 20 41 75 74 68 6f 72 69 74 79 29 60 20 66 6f 72 20 74 68 | igned.Numbers.Authority)`.for.th |
cb520 | 69 73 20 61 6c 6c 6f 63 61 74 69 6f 6e 2e 00 49 47 4d 50 20 2d 20 49 6e 74 65 72 6e 65 74 20 47 | is.allocation..IGMP.-.Internet.G |
cb540 | 72 6f 75 70 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 00 49 47 4d 50 20 50 | roup.Management.Protocol).IGMP.P |
cb560 | 72 6f 78 79 00 49 4b 45 20 28 49 6e 74 65 72 6e 65 74 20 4b 65 79 20 45 78 63 68 61 6e 67 65 29 | roxy.IKE.(Internet.Key.Exchange) |
cb580 | 20 41 74 74 72 69 62 75 74 65 73 00 49 4b 45 20 50 68 61 73 65 3a 00 49 4b 45 20 70 65 72 66 6f | .Attributes.IKE.Phase:.IKE.perfo |
cb5a0 | 72 6d 73 20 6d 75 74 75 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 | rms.mutual.authentication.betwee |
cb5c0 | 6e 20 74 77 6f 20 70 61 72 74 69 65 73 20 61 6e 64 20 65 73 74 61 62 6c 69 73 68 65 73 20 61 6e | n.two.parties.and.establishes.an |
cb5e0 | 20 49 4b 45 20 73 65 63 75 72 69 74 79 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 28 53 41 29 20 74 | .IKE.security.association.(SA).t |
cb600 | 68 61 74 20 69 6e 63 6c 75 64 65 73 20 73 68 61 72 65 64 20 73 65 63 72 65 74 20 69 6e 66 6f 72 | hat.includes.shared.secret.infor |
cb620 | 6d 61 74 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 65 66 66 69 63 | mation.that.can.be.used.to.effic |
cb640 | 69 65 6e 74 6c 79 20 65 73 74 61 62 6c 69 73 68 20 53 41 73 20 66 6f 72 20 45 6e 63 61 70 73 75 | iently.establish.SAs.for.Encapsu |
cb660 | 6c 61 74 69 6e 67 20 53 65 63 75 72 69 74 79 20 50 61 79 6c 6f 61 64 20 28 45 53 50 29 20 6f 72 | lating.Security.Payload.(ESP).or |
cb680 | 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 48 65 61 64 65 72 20 28 41 48 29 20 61 6e 64 20 | .Authentication.Header.(AH).and. |
cb6a0 | 61 20 73 65 74 20 6f 66 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 61 6c 67 6f 72 69 74 68 6d | a.set.of.cryptographic.algorithm |
cb6c0 | 73 20 74 6f 20 62 65 20 75 73 65 64 20 62 79 20 74 68 65 20 53 41 73 20 74 6f 20 70 72 6f 74 65 | s.to.be.used.by.the.SAs.to.prote |
cb6e0 | 63 74 20 74 68 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 74 68 65 79 20 63 61 72 72 79 2e 20 | ct.the.traffic.that.they.carry.. |
cb700 | 68 74 74 70 73 3a 2f 2f 64 61 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 | https://datatracker.ietf.org/doc |
cb720 | 2f 68 74 6d 6c 2f 72 66 63 35 39 39 36 00 49 4b 45 76 31 00 49 4b 45 76 32 00 49 4b 45 76 32 20 | /html/rfc5996.IKEv1.IKEv2.IKEv2. |
cb740 | 49 50 53 65 63 20 72 6f 61 64 2d 77 61 72 72 69 6f 72 73 20 72 65 6d 6f 74 65 2d 61 63 63 65 73 | IPSec.road-warriors.remote-acces |
cb760 | 73 20 56 50 4e 00 49 50 00 49 50 20 61 64 64 72 65 73 73 00 49 50 20 61 64 64 72 65 73 73 20 60 | s.VPN.IP.IP.address.IP.address.` |
cb780 | 60 31 39 32 2e 31 36 38 2e 31 2e 31 30 30 60 60 20 73 68 61 6c 6c 20 62 65 20 73 74 61 74 69 63 | `192.168.1.100``.shall.be.static |
cb7a0 | 61 6c 6c 79 20 6d 61 70 70 65 64 20 74 6f 20 63 6c 69 65 6e 74 20 6e 61 6d 65 64 20 60 60 63 6c | ally.mapped.to.client.named.``cl |
cb7c0 | 69 65 6e 74 31 60 60 00 49 50 20 61 64 64 72 65 73 73 20 60 60 31 39 32 2e 31 36 38 2e 32 2e 31 | ient1``.IP.address.``192.168.2.1 |
cb7e0 | 2f 32 34 60 60 00 49 50 20 61 64 64 72 65 73 73 20 66 6f 72 20 44 48 43 50 20 73 65 72 76 65 72 | /24``.IP.address.for.DHCP.server |
cb800 | 20 69 64 65 6e 74 69 66 69 65 72 00 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 4e 54 50 20 73 65 | .identifier.IP.address.of.NTP.se |
cb820 | 72 76 65 72 00 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 50 4f 50 33 20 73 65 72 76 65 72 00 49 | rver.IP.address.of.POP3.server.I |
cb840 | 50 20 61 64 64 72 65 73 73 20 6f 66 20 53 4d 54 50 20 73 65 72 76 65 72 00 49 50 20 61 64 64 72 | P.address.of.SMTP.server.IP.addr |
cb860 | 65 73 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 | ess.of.route.to.match,.based.on. |
cb880 | 61 63 63 65 73 73 2d 6c 69 73 74 2e 00 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 | access-list..IP.address.of.route |
cb8a0 | 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 70 72 65 66 69 78 2d 6c 69 73 74 2e | .to.match,.based.on.prefix-list. |
cb8c0 | 00 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 | .IP.address.of.route.to.match,.b |
cb8e0 | 61 73 65 64 20 6f 6e 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 2d 6c 65 6e 67 74 68 2e | ased.on.specified.prefix-length. |
cb900 | 20 4e 6f 74 65 20 74 68 61 74 20 74 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 66 6f 72 20 | .Note.that.this.can.be.used.for. |
cb920 | 6b 65 72 6e 65 6c 20 72 6f 75 74 65 73 20 6f 6e 6c 79 2e 20 44 6f 20 6e 6f 74 20 61 70 70 6c 79 | kernel.routes.only..Do.not.apply |
cb940 | 20 74 6f 20 74 68 65 20 72 6f 75 74 65 73 20 6f 66 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e | .to.the.routes.of.dynamic.routin |
cb960 | 67 20 70 72 6f 74 6f 63 6f 6c 73 20 28 65 2e 67 2e 20 42 47 50 2c 20 52 49 50 2c 20 4f 53 46 50 | g.protocols.(e.g..BGP,.RIP,.OSFP |
cb980 | 29 2c 20 61 73 20 74 68 69 73 20 63 61 6e 20 6c 65 61 64 20 74 6f 20 75 6e 65 78 70 65 63 74 65 | ),.as.this.can.lead.to.unexpecte |
cb9a0 | 64 20 72 65 73 75 6c 74 73 2e 2e 00 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 65 78 63 6c 75 64 | d.results...IP.address.to.exclud |
cb9c0 | 65 20 66 72 6f 6d 20 44 48 43 50 20 6c 65 61 73 65 20 72 61 6e 67 65 00 49 50 20 61 64 64 72 65 | e.from.DHCP.lease.range.IP.addre |
cb9e0 | 73 73 65 73 20 6f 72 20 6e 65 74 77 6f 72 6b 73 20 66 6f 72 20 77 68 69 63 68 20 6c 6f 63 61 6c | sses.or.networks.for.which.local |
cba00 | 20 63 6f 6e 6e 74 72 61 63 6b 20 65 6e 74 72 69 65 73 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 73 | .conntrack.entries.will.not.be.s |
cba20 | 79 6e 63 65 64 00 49 50 20 6d 61 6e 61 67 65 6d 65 6e 74 20 61 64 64 72 65 73 73 00 49 50 20 6d | ynced.IP.management.address.IP.m |
cba40 | 61 73 71 75 65 72 61 64 69 6e 67 20 69 73 20 61 20 74 65 63 68 6e 69 71 75 65 20 74 68 61 74 20 | asquerading.is.a.technique.that. |
cba60 | 68 69 64 65 73 20 61 6e 20 65 6e 74 69 72 65 20 49 50 20 61 64 64 72 65 73 73 20 73 70 61 63 65 | hides.an.entire.IP.address.space |
cba80 | 2c 20 75 73 75 61 6c 6c 79 20 63 6f 6e 73 69 73 74 69 6e 67 20 6f 66 20 70 72 69 76 61 74 65 20 | ,.usually.consisting.of.private. |
cbaa0 | 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 62 65 68 69 6e 64 20 61 20 73 69 6e 67 6c 65 20 49 50 | IP.addresses,.behind.a.single.IP |
cbac0 | 20 61 64 64 72 65 73 73 20 69 6e 20 61 6e 6f 74 68 65 72 2c 20 75 73 75 61 6c 6c 79 20 70 75 62 | .address.in.another,.usually.pub |
cbae0 | 6c 69 63 20 61 64 64 72 65 73 73 20 73 70 61 63 65 2e 20 54 68 65 20 68 69 64 64 65 6e 20 61 64 | lic.address.space..The.hidden.ad |
cbb00 | 64 72 65 73 73 65 73 20 61 72 65 20 63 68 61 6e 67 65 64 20 69 6e 74 6f 20 61 20 73 69 6e 67 6c | dresses.are.changed.into.a.singl |
cbb20 | 65 20 28 70 75 62 6c 69 63 29 20 49 50 20 61 64 64 72 65 73 73 20 61 73 20 74 68 65 20 73 6f 75 | e.(public).IP.address.as.the.sou |
cbb40 | 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 49 50 20 70 | rce.address.of.the.outgoing.IP.p |
cbb60 | 61 63 6b 65 74 73 20 73 6f 20 74 68 65 79 20 61 70 70 65 61 72 20 61 73 20 6f 72 69 67 69 6e 61 | ackets.so.they.appear.as.origina |
cbb80 | 74 69 6e 67 20 6e 6f 74 20 66 72 6f 6d 20 74 68 65 20 68 69 64 64 65 6e 20 68 6f 73 74 20 62 75 | ting.not.from.the.hidden.host.bu |
cbba0 | 74 20 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 69 6e 67 20 64 65 76 69 63 65 20 69 74 73 65 6c 66 | t.from.the.routing.device.itself |
cbbc0 | 2e 20 42 65 63 61 75 73 65 20 6f 66 20 74 68 65 20 70 6f 70 75 6c 61 72 69 74 79 20 6f 66 20 74 | ..Because.of.the.popularity.of.t |
cbbe0 | 68 69 73 20 74 65 63 68 6e 69 71 75 65 20 74 6f 20 63 6f 6e 73 65 72 76 65 20 49 50 76 34 20 61 | his.technique.to.conserve.IPv4.a |
cbc00 | 64 64 72 65 73 73 20 73 70 61 63 65 2c 20 74 68 65 20 74 65 72 6d 20 4e 41 54 20 68 61 73 20 62 | ddress.space,.the.term.NAT.has.b |
cbc20 | 65 63 6f 6d 65 20 76 69 72 74 75 61 6c 6c 79 20 73 79 6e 6f 6e 79 6d 6f 75 73 20 77 69 74 68 20 | ecome.virtually.synonymous.with. |
cbc40 | 49 50 20 6d 61 73 71 75 65 72 61 64 69 6e 67 2e 00 49 50 20 6e 65 78 74 2d 68 6f 70 20 6f 66 20 | IP.masquerading..IP.next-hop.of. |
cbc60 | 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 61 63 63 65 73 73 2d | route.to.match,.based.on.access- |
cbc80 | 6c 69 73 74 2e 00 49 50 20 6e 65 78 74 2d 68 6f 70 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 | list..IP.next-hop.of.route.to.ma |
cbca0 | 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 69 70 20 61 64 64 72 65 73 73 2e 00 49 50 20 6e 65 78 | tch,.based.on.ip.address..IP.nex |
cbcc0 | 74 2d 68 6f 70 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f | t-hop.of.route.to.match,.based.o |
cbce0 | 6e 20 70 72 65 66 69 78 20 6c 65 6e 67 74 68 2e 00 49 50 20 6e 65 78 74 2d 68 6f 70 20 6f 66 20 | n.prefix.length..IP.next-hop.of. |
cbd00 | 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 70 72 65 66 69 78 2d | route.to.match,.based.on.prefix- |
cbd20 | 6c 69 73 74 2e 00 49 50 20 6e 65 78 74 2d 68 6f 70 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 | list..IP.next-hop.of.route.to.ma |
cbd40 | 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 74 79 70 65 2e 00 49 50 20 70 72 65 63 65 64 65 6e 63 | tch,.based.on.type..IP.precedenc |
cbd60 | 65 20 61 73 20 64 65 66 69 6e 65 64 20 69 6e 20 3a 72 66 63 3a 60 37 39 31 60 3a 00 49 50 20 70 | e.as.defined.in.:rfc:`791`:.IP.p |
cbd80 | 72 6f 74 6f 63 6f 6c 20 6e 75 6d 62 65 72 20 35 30 20 28 45 53 50 29 00 49 50 20 72 6f 75 74 65 | rotocol.number.50.(ESP).IP.route |
cbda0 | 20 73 6f 75 72 63 65 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 | .source.of.route.to.match,.based |
cbdc0 | 20 6f 6e 20 61 63 63 65 73 73 2d 6c 69 73 74 2e 00 49 50 20 72 6f 75 74 65 20 73 6f 75 72 63 65 | .on.access-list..IP.route.source |
cbde0 | 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 70 72 65 | .of.route.to.match,.based.on.pre |
cbe00 | 66 69 78 2d 6c 69 73 74 2e 00 49 50 36 49 50 36 00 49 50 49 50 00 49 50 49 50 36 00 49 50 53 65 | fix-list..IP6IP6.IPIP.IPIP6.IPSe |
cbe20 | 63 20 49 4b 45 20 61 6e 64 20 45 53 50 00 49 50 53 65 63 20 49 4b 45 20 61 6e 64 20 45 53 50 20 | c.IKE.and.ESP.IPSec.IKE.and.ESP. |
cbe40 | 47 72 6f 75 70 73 3b 00 49 50 53 65 63 20 49 4b 45 76 32 20 52 65 6d 6f 74 65 20 41 63 63 65 73 | Groups;.IPSec.IKEv2.Remote.Acces |
cbe60 | 73 20 56 50 4e 00 49 50 53 65 63 20 49 4b 45 76 32 20 73 69 74 65 32 73 69 74 65 20 56 50 4e 00 | s.VPN.IPSec.IKEv2.site2site.VPN. |
cbe80 | 49 50 53 65 63 20 49 4b 45 76 32 20 73 69 74 65 32 73 69 74 65 20 56 50 4e 20 28 73 6f 75 72 63 | IPSec.IKEv2.site2site.VPN.(sourc |
cbea0 | 65 20 2e 2f 64 72 61 77 2e 69 6f 2f 76 70 6e 5f 73 32 73 5f 69 6b 65 76 32 2e 64 72 61 77 69 6f | e../draw.io/vpn_s2s_ikev2.drawio |
cbec0 | 29 00 49 50 53 65 63 20 56 50 4e 20 54 75 6e 6e 65 6c 73 00 49 50 53 65 63 20 56 50 4e 20 74 75 | ).IPSec.VPN.Tunnels.IPSec.VPN.tu |
cbee0 | 6e 6e 65 6c 73 2e 00 49 50 53 65 63 3a 00 49 50 6f 45 20 53 65 72 76 65 72 00 49 50 6f 45 20 63 | nnels..IPSec:.IPoE.Server.IPoE.c |
cbf00 | 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 20 6f 6e 20 64 69 66 66 65 72 65 6e 74 20 69 6e 74 | an.be.configure.on.different.int |
cbf20 | 65 72 66 61 63 65 73 2c 20 69 74 20 77 69 6c 6c 20 64 65 70 65 6e 64 20 6f 6e 20 65 61 63 68 20 | erfaces,.it.will.depend.on.each. |
cbf40 | 73 70 65 63 69 66 69 63 20 73 69 74 75 61 74 69 6f 6e 20 77 68 69 63 68 20 69 6e 74 65 72 66 61 | specific.situation.which.interfa |
cbf60 | 63 65 20 77 69 6c 6c 20 70 72 6f 76 69 64 65 20 49 50 6f 45 20 74 6f 20 63 6c 69 65 6e 74 73 2e | ce.will.provide.IPoE.to.clients. |
cbf80 | 20 54 68 65 20 63 6c 69 65 6e 74 73 20 6d 61 63 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 | .The.clients.mac.address.and.the |
cbfa0 | 20 69 6e 63 6f 6d 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 62 65 69 6e 67 20 75 73 65 | .incoming.interface.is.being.use |
cbfc0 | 64 20 61 73 20 63 6f 6e 74 72 6f 6c 20 70 61 72 61 6d 65 74 65 72 2c 20 74 6f 20 61 75 74 68 65 | d.as.control.parameter,.to.authe |
cbfe0 | 6e 74 69 63 61 74 65 20 61 20 63 6c 69 65 6e 74 2e 00 49 50 6f 45 20 69 73 20 61 20 6d 65 74 68 | nticate.a.client..IPoE.is.a.meth |
cc000 | 6f 64 20 6f 66 20 64 65 6c 69 76 65 72 69 6e 67 20 61 6e 20 49 50 20 70 61 79 6c 6f 61 64 20 6f | od.of.delivering.an.IP.payload.o |
cc020 | 76 65 72 20 61 6e 20 45 74 68 65 72 6e 65 74 2d 62 61 73 65 64 20 61 63 63 65 73 73 20 6e 65 74 | ver.an.Ethernet-based.access.net |
cc040 | 77 6f 72 6b 20 6f 72 20 61 6e 20 61 63 63 65 73 73 20 6e 65 74 77 6f 72 6b 20 75 73 69 6e 67 20 | work.or.an.access.network.using. |
cc060 | 62 72 69 64 67 65 64 20 45 74 68 65 72 6e 65 74 20 6f 76 65 72 20 41 73 79 6e 63 68 72 6f 6e 6f | bridged.Ethernet.over.Asynchrono |
cc080 | 75 73 20 54 72 61 6e 73 66 65 72 20 4d 6f 64 65 20 28 41 54 4d 29 20 77 69 74 68 6f 75 74 20 75 | us.Transfer.Mode.(ATM).without.u |
cc0a0 | 73 69 6e 67 20 50 50 50 6f 45 2e 20 49 74 20 64 69 72 65 63 74 6c 79 20 65 6e 63 61 70 73 75 6c | sing.PPPoE..It.directly.encapsul |
cc0c0 | 61 74 65 73 20 74 68 65 20 49 50 20 64 61 74 61 67 72 61 6d 73 20 69 6e 20 45 74 68 65 72 6e 65 | ates.the.IP.datagrams.in.Etherne |
cc0e0 | 74 20 66 72 61 6d 65 73 2c 20 75 73 69 6e 67 20 74 68 65 20 73 74 61 6e 64 61 72 64 20 3a 72 66 | t.frames,.using.the.standard.:rf |
cc100 | 63 3a 60 38 39 34 60 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 2e 00 49 50 6f 45 20 73 65 72 76 | c:`894`.encapsulation..IPoE.serv |
cc120 | 65 72 20 77 69 6c 6c 20 6c 69 73 74 65 6e 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 73 20 65 74 68 | er.will.listen.on.interfaces.eth |
cc140 | 31 2e 35 30 20 61 6e 64 20 65 74 68 31 2e 35 31 00 49 50 73 65 63 00 49 50 73 65 63 20 70 6f 6c | 1.50.and.eth1.51.IPsec.IPsec.pol |
cc160 | 69 63 79 20 6d 61 74 63 68 69 6e 67 20 47 52 45 00 49 50 76 34 00 49 50 76 34 20 46 69 72 65 77 | icy.matching.GRE.IPv4.IPv4.Firew |
cc180 | 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 50 76 34 20 61 64 64 72 65 73 73 20 6f | all.Configuration.IPv4.address.o |
cc1a0 | 66 20 6e 65 78 74 20 62 6f 6f 74 73 74 72 61 70 20 73 65 72 76 65 72 00 49 50 76 34 20 61 64 64 | f.next.bootstrap.server.IPv4.add |
cc1c0 | 72 65 73 73 20 6f 66 20 72 6f 75 74 65 72 20 6f 6e 20 74 68 65 20 63 6c 69 65 6e 74 27 73 20 73 | ress.of.router.on.the.client's.s |
cc1e0 | 75 62 6e 65 74 00 49 50 76 34 20 6f 72 20 49 50 76 36 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 | ubnet.IPv4.or.IPv6.source.addres |
cc200 | 73 20 6f 66 20 4e 65 74 46 6c 6f 77 20 70 61 63 6b 65 74 73 00 49 50 76 34 20 70 65 65 72 69 6e | s.of.NetFlow.packets.IPv4.peerin |
cc220 | 67 00 49 50 76 34 20 72 65 6c 61 79 00 49 50 76 34 20 72 6f 75 74 65 20 61 6e 64 20 49 50 76 36 | g.IPv4.relay.IPv4.route.and.IPv6 |
cc240 | 20 72 6f 75 74 65 20 70 6f 6c 69 63 69 65 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 74 | .route.policies.are.defined.in.t |
cc260 | 68 69 73 20 73 65 63 74 69 6f 6e 2e 20 54 68 65 73 65 20 72 6f 75 74 65 20 70 6f 6c 69 63 69 65 | his.section..These.route.policie |
cc280 | 73 20 63 61 6e 20 74 68 65 6e 20 62 65 20 61 73 73 6f 63 69 61 74 65 64 20 74 6f 20 69 6e 74 65 | s.can.then.be.associated.to.inte |
cc2a0 | 72 66 61 63 65 73 2e 00 49 50 76 34 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 | rfaces..IPv4.route.source:.bgp,. |
cc2c0 | 63 6f 6e 6e 65 63 74 65 64 2c 20 65 69 67 72 70 2c 20 69 73 69 73 2c 20 6b 65 72 6e 65 6c 2c 20 | connected,.eigrp,.isis,.kernel,. |
cc2e0 | 6e 68 72 70 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 49 50 76 34 20 73 65 | nhrp,.ospf,.rip,.static..IPv4.se |
cc300 | 72 76 65 72 00 49 50 76 34 2f 49 50 76 36 20 72 65 6d 6f 74 65 20 61 64 64 72 65 73 73 20 6f 66 | rver.IPv4/IPv6.remote.address.of |
cc320 | 20 74 68 65 20 56 58 4c 41 4e 20 74 75 6e 6e 65 6c 2e 20 41 6c 74 65 72 6e 61 74 69 76 65 20 74 | .the.VXLAN.tunnel..Alternative.t |
cc340 | 6f 20 6d 75 6c 74 69 63 61 73 74 2c 20 74 68 65 20 72 65 6d 6f 74 65 20 49 50 76 34 2f 49 50 76 | o.multicast,.the.remote.IPv4/IPv |
cc360 | 36 20 61 64 64 72 65 73 73 20 63 61 6e 20 73 65 74 20 64 69 72 65 63 74 6c 79 2e 00 49 50 76 36 | 6.address.can.set.directly..IPv6 |
cc380 | 00 49 50 76 36 20 41 63 63 65 73 73 20 4c 69 73 74 00 49 50 76 36 20 41 64 76 61 6e 63 65 64 20 | .IPv6.Access.List.IPv6.Advanced. |
cc3a0 | 4f 70 74 69 6f 6e 73 00 49 50 76 36 20 44 48 43 50 76 36 2d 50 44 20 45 78 61 6d 70 6c 65 00 49 | Options.IPv6.DHCPv6-PD.Example.I |
cc3c0 | 50 76 36 20 44 4e 53 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 6f 70 74 69 6f 6e 61 6c 2e 00 | Pv6.DNS.addresses.are.optional.. |
cc3e0 | 49 50 76 36 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 50 76 36 | IPv6.Firewall.Configuration.IPv6 |
cc400 | 20 4d 75 6c 74 69 63 61 73 74 00 49 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f | .Multicast.IPv6.Prefix.Delegatio |
cc420 | 6e 00 49 50 76 36 20 50 72 65 66 69 78 20 4c 69 73 74 73 00 49 50 76 36 20 53 4c 41 41 43 20 61 | n.IPv6.Prefix.Lists.IPv6.SLAAC.a |
cc440 | 6e 64 20 49 41 2d 50 44 00 49 50 76 36 20 54 43 50 20 66 69 6c 74 65 72 73 20 77 69 6c 6c 20 6f | nd.IA-PD.IPv6.TCP.filters.will.o |
cc460 | 6e 6c 79 20 6d 61 74 63 68 20 49 50 76 36 20 70 61 63 6b 65 74 73 20 77 69 74 68 20 6e 6f 20 68 | nly.match.IPv6.packets.with.no.h |
cc480 | 65 61 64 65 72 20 65 78 74 65 6e 73 69 6f 6e 2c 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 65 6e 2e | eader.extension,.see.https://en. |
cc4a0 | 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 49 50 76 36 5f 70 61 63 6b 65 74 23 45 | wikipedia.org/wiki/IPv6_packet#E |
cc4c0 | 78 74 65 6e 73 69 6f 6e 5f 68 65 61 64 65 72 73 00 49 50 76 36 20 61 64 64 72 65 73 73 20 60 60 | xtension_headers.IPv6.address.`` |
cc4e0 | 32 30 30 31 3a 64 62 38 3a 3a 31 30 31 60 60 20 73 68 61 6c 6c 20 62 65 20 73 74 61 74 69 63 61 | 2001:db8::101``.shall.be.statica |
cc500 | 6c 6c 79 20 6d 61 70 70 65 64 00 49 50 76 36 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 | lly.mapped.IPv6.address.of.route |
cc520 | 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 49 50 76 36 20 61 63 63 65 73 73 2d | .to.match,.based.on.IPv6.access- |
cc540 | 6c 69 73 74 2e 00 49 50 76 36 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d | list..IPv6.address.of.route.to.m |
cc560 | 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 49 50 76 36 20 70 72 65 66 69 78 2d 6c 69 73 74 2e | atch,.based.on.IPv6.prefix-list. |
cc580 | 00 49 50 76 36 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c | .IPv6.address.of.route.to.match, |
cc5a0 | 20 62 61 73 65 64 20 6f 6e 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 2d 6c 65 6e 67 74 | .based.on.specified.prefix-lengt |
cc5c0 | 68 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 66 6f | h..Note.that.this.can.be.used.fo |
cc5e0 | 72 20 6b 65 72 6e 65 6c 20 72 6f 75 74 65 73 20 6f 6e 6c 79 2e 20 44 6f 20 6e 6f 74 20 61 70 70 | r.kernel.routes.only..Do.not.app |
cc600 | 6c 79 20 74 6f 20 74 68 65 20 72 6f 75 74 65 73 20 6f 66 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 | ly.to.the.routes.of.dynamic.rout |
cc620 | 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 28 65 2e 67 2e 20 42 47 50 2c 20 52 49 50 2c 20 4f 53 | ing.protocols.(e.g..BGP,.RIP,.OS |
cc640 | 46 50 29 2c 20 61 73 20 74 68 69 73 20 63 61 6e 20 6c 65 61 64 20 74 6f 20 75 6e 65 78 70 65 63 | FP),.as.this.can.lead.to.unexpec |
cc660 | 74 65 64 20 72 65 73 75 6c 74 73 2e 2e 00 49 50 76 36 20 63 6c 69 65 6e 74 27 73 20 70 72 65 66 | ted.results...IPv6.client's.pref |
cc680 | 69 78 00 49 50 76 36 20 63 6c 69 65 6e 74 27 73 20 70 72 65 66 69 78 20 61 73 73 69 67 6e 6d 65 | ix.IPv6.client's.prefix.assignme |
cc6a0 | 6e 74 00 49 50 76 36 20 64 65 66 61 75 6c 74 20 63 6c 69 65 6e 74 27 73 20 70 6f 6f 6c 20 61 73 | nt.IPv6.default.client's.pool.as |
cc6c0 | 73 69 67 6e 6d 65 6e 74 00 49 50 76 36 20 70 65 65 72 69 6e 67 00 49 50 76 36 20 70 72 65 66 69 | signment.IPv6.peering.IPv6.prefi |
cc6e0 | 78 20 60 60 32 30 30 31 3a 64 62 38 3a 30 3a 31 30 31 3a 3a 2f 36 34 60 60 20 73 68 61 6c 6c 20 | x.``2001:db8:0:101::/64``.shall. |
cc700 | 62 65 20 73 74 61 74 69 63 61 6c 6c 79 20 6d 61 70 70 65 64 00 49 50 76 36 20 70 72 65 66 69 78 | be.statically.mapped.IPv6.prefix |
cc720 | 2e 00 49 50 76 36 20 72 65 6c 61 79 00 49 50 76 36 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 | ..IPv6.relay.IPv6.route.source:. |
cc740 | 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 65 69 67 72 70 2c 20 69 73 69 73 2c 20 6b 65 72 | bgp,.connected,.eigrp,.isis,.ker |
cc760 | 6e 65 6c 2c 20 6e 68 72 70 2c 20 6f 73 70 66 76 33 2c 20 72 69 70 6e 67 2c 20 73 74 61 74 69 63 | nel,.nhrp,.ospfv3,.ripng,.static |
cc780 | 2e 00 49 50 76 36 20 73 65 72 76 65 72 00 49 50 76 36 20 73 75 70 70 6f 72 74 00 49 53 2d 49 53 | ..IPv6.server.IPv6.support.IS-IS |
cc7a0 | 00 49 53 2d 49 53 20 47 6c 6f 62 61 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 53 2d 49 | .IS-IS.Global.Configuration.IS-I |
cc7c0 | 53 20 53 52 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 53 43 2d 44 48 43 50 20 4f 70 74 69 | S.SR.Configuration.ISC-DHCP.Opti |
cc7e0 | 6f 6e 20 6e 61 6d 65 00 49 64 65 6e 74 69 74 79 20 42 61 73 65 64 20 43 6f 6e 66 69 67 75 72 61 | on.name.Identity.Based.Configura |
cc800 | 74 69 6f 6e 00 49 66 20 2a 2a 6d 61 78 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 20 69 73 20 73 65 74 | tion.If.**max-threshold**.is.set |
cc820 | 20 62 75 74 20 2a 2a 6d 69 6e 2d 74 68 72 65 73 68 6f 6c 64 20 69 73 20 6e 6f 74 2c 20 74 68 65 | .but.**min-threshold.is.not,.the |
cc840 | 6e 20 2a 2a 6d 69 6e 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 20 69 73 20 73 63 61 6c 65 64 20 74 6f | n.**min-threshold**.is.scaled.to |
cc860 | 20 35 30 25 20 6f 66 20 2a 2a 6d 61 78 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 2e 00 49 66 20 3a 63 | .50%.of.**max-threshold**..If.:c |
cc880 | 66 67 63 6d 64 3a 60 73 74 72 69 63 74 60 20 69 73 20 73 65 74 20 74 68 65 20 42 47 50 20 73 65 | fgcmd:`strict`.is.set.the.BGP.se |
cc8a0 | 73 73 69 6f 6e 20 77 6f 6e e2 80 99 74 20 62 65 63 6f 6d 65 20 65 73 74 61 62 6c 69 73 68 65 64 | ssion.won...t.become.established |
cc8c0 | 20 75 6e 74 69 6c 20 74 68 65 20 42 47 50 20 6e 65 69 67 68 62 6f 72 20 73 65 74 73 20 6c 6f 63 | .until.the.BGP.neighbor.sets.loc |
cc8e0 | 61 6c 20 52 6f 6c 65 20 6f 6e 20 69 74 73 20 73 69 64 65 2e 20 54 68 69 73 20 63 6f 6e 66 69 67 | al.Role.on.its.side..This.config |
cc900 | 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 64 65 66 69 6e 65 64 20 69 6e 20 | uration.parameter.is.defined.in. |
cc920 | 52 46 43 20 3a 72 66 63 3a 60 39 32 33 34 60 20 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 65 | RFC.:rfc:`9234`.and.is.used.to.e |
cc940 | 6e 66 6f 72 63 65 20 74 68 65 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 63 6f 6e 66 69 67 75 | nforce.the.corresponding.configu |
cc960 | 72 61 74 69 6f 6e 20 61 74 20 79 6f 75 72 20 63 6f 75 6e 74 65 72 2d 70 61 72 74 73 20 73 69 64 | ration.at.your.counter-parts.sid |
cc980 | 65 2e 00 49 66 20 41 52 50 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 69 73 20 75 73 65 64 20 69 6e 20 | e..If.ARP.monitoring.is.used.in. |
cc9a0 | 61 6e 20 65 74 68 65 72 63 68 61 6e 6e 65 6c 20 63 6f 6d 70 61 74 69 62 6c 65 20 6d 6f 64 65 20 | an.etherchannel.compatible.mode. |
cc9c0 | 28 6d 6f 64 65 73 20 72 6f 75 6e 64 2d 72 6f 62 69 6e 20 61 6e 64 20 78 6f 72 2d 68 61 73 68 29 | (modes.round-robin.and.xor-hash) |
cc9e0 | 2c 20 74 68 65 20 73 77 69 74 63 68 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6e 66 69 67 75 72 65 | ,.the.switch.should.be.configure |
cca00 | 64 20 69 6e 20 61 20 6d 6f 64 65 20 74 68 61 74 20 65 76 65 6e 6c 79 20 64 69 73 74 72 69 62 75 | d.in.a.mode.that.evenly.distribu |
cca20 | 74 65 73 20 70 61 63 6b 65 74 73 20 61 63 72 6f 73 73 20 61 6c 6c 20 6c 69 6e 6b 73 2e 20 49 66 | tes.packets.across.all.links..If |
cca40 | 20 74 68 65 20 73 77 69 74 63 68 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 64 69 73 | .the.switch.is.configured.to.dis |
cca60 | 74 72 69 62 75 74 65 20 74 68 65 20 70 61 63 6b 65 74 73 20 69 6e 20 61 6e 20 58 4f 52 20 66 61 | tribute.the.packets.in.an.XOR.fa |
cca80 | 73 68 69 6f 6e 2c 20 61 6c 6c 20 72 65 70 6c 69 65 73 20 66 72 6f 6d 20 74 68 65 20 41 52 50 20 | shion,.all.replies.from.the.ARP. |
ccaa0 | 74 61 72 67 65 74 73 20 77 69 6c 6c 20 62 65 20 72 65 63 65 69 76 65 64 20 6f 6e 20 74 68 65 20 | targets.will.be.received.on.the. |
ccac0 | 73 61 6d 65 20 6c 69 6e 6b 20 77 68 69 63 68 20 63 6f 75 6c 64 20 63 61 75 73 65 20 74 68 65 20 | same.link.which.could.cause.the. |
ccae0 | 6f 74 68 65 72 20 74 65 61 6d 20 6d 65 6d 62 65 72 73 20 74 6f 20 66 61 69 6c 2e 00 49 66 20 43 | other.team.members.to.fail..If.C |
ccb00 | 41 20 69 73 20 70 72 65 73 65 6e 74 2c 20 74 68 69 73 20 63 65 72 74 69 66 69 63 61 74 65 20 77 | A.is.present,.this.certificate.w |
ccb20 | 69 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 67 65 6e 65 72 61 74 65 64 20 43 52 4c | ill.be.included.in.generated.CRL |
ccb40 | 73 00 49 66 20 43 4c 49 20 6f 70 74 69 6f 6e 20 69 73 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 | s.If.CLI.option.is.not.specified |
ccb60 | 2c 20 74 68 69 73 20 66 65 61 74 75 72 65 20 69 73 20 64 69 73 61 62 6c 65 64 2e 00 49 66 20 50 | ,.this.feature.is.disabled..If.P |
ccb80 | 49 4d 20 68 61 73 20 74 68 65 20 61 20 63 68 6f 69 63 65 20 6f 66 20 45 43 4d 50 20 6e 65 78 74 | IM.has.the.a.choice.of.ECMP.next |
ccba0 | 68 6f 70 73 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 3a 61 62 62 72 3a 60 52 50 46 | hops.for.a.particular.:abbr:`RPF |
ccbc0 | 20 28 52 65 76 65 72 73 65 20 50 61 74 68 20 46 6f 72 77 61 72 64 69 6e 67 29 60 2c 20 50 49 4d | .(Reverse.Path.Forwarding)`,.PIM |
ccbe0 | 20 77 69 6c 6c 20 63 61 75 73 65 20 53 2c 47 20 66 6c 6f 77 73 20 74 6f 20 62 65 20 73 70 72 65 | .will.cause.S,G.flows.to.be.spre |
ccc00 | 61 64 20 6f 75 74 20 61 6d 6f 6e 67 73 74 20 74 68 65 20 6e 65 78 74 68 6f 70 73 2e 20 49 66 20 | ad.out.amongst.the.nexthops..If. |
ccc20 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 74 68 | this.command.is.not.specified.th |
ccc40 | 65 6e 20 74 68 65 20 66 69 72 73 74 20 6e 65 78 74 68 6f 70 20 66 6f 75 6e 64 20 77 69 6c 6c 20 | en.the.first.nexthop.found.will. |
ccc60 | 62 65 20 75 73 65 64 2e 00 49 66 20 50 49 4d 20 69 73 20 75 73 69 6e 67 20 45 43 4d 50 20 61 6e | be.used..If.PIM.is.using.ECMP.an |
ccc80 | 64 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 67 6f 65 73 20 64 6f 77 6e 2c 20 63 61 75 73 65 20 | d.an.interface.goes.down,.cause. |
ccca0 | 50 49 4d 20 74 6f 20 72 65 62 61 6c 61 6e 63 65 20 61 6c 6c 20 53 2c 47 20 66 6c 6f 77 73 20 61 | PIM.to.rebalance.all.S,G.flows.a |
cccc0 | 63 72 6f 73 73 20 74 68 65 20 72 65 6d 61 69 6e 69 6e 67 20 6e 65 78 74 68 6f 70 73 2e 20 49 66 | cross.the.remaining.nexthops..If |
ccce0 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6e 6f 74 20 63 6f 6e 66 69 67 75 72 65 64 20 | .this.command.is.not.configured. |
ccd00 | 50 49 4d 20 6f 6e 6c 79 20 6d 6f 64 69 66 69 65 73 20 74 68 6f 73 65 20 53 2c 47 20 66 6c 6f 77 | PIM.only.modifies.those.S,G.flow |
ccd20 | 73 20 74 68 61 74 20 77 65 72 65 20 75 73 69 6e 67 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 | s.that.were.using.the.interface. |
ccd40 | 74 68 61 74 20 77 65 6e 74 20 64 6f 77 6e 2e 00 49 66 20 60 60 61 6c 69 61 73 60 60 20 69 73 20 | that.went.down..If.``alias``.is. |
ccd60 | 73 65 74 2c 20 69 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 73 74 65 61 64 20 6f 66 20 74 | set,.it.can.be.used.instead.of.t |
ccd80 | 68 65 20 64 65 76 69 63 65 20 77 68 65 6e 20 63 6f 6e 6e 65 63 74 69 6e 67 2e 00 49 66 20 60 60 | he.device.when.connecting..If.`` |
ccda0 | 61 6c 6c 60 60 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 72 65 6d 6f 76 65 20 61 6c 6c 20 41 | all``.is.specified,.remove.all.A |
ccdc0 | 53 20 6e 75 6d 62 65 72 73 20 66 72 6f 6d 20 74 68 65 20 41 53 5f 50 41 54 48 20 6f 66 20 74 68 | S.numbers.from.the.AS_PATH.of.th |
ccde0 | 65 20 42 47 50 20 70 61 74 68 27 73 20 4e 4c 52 49 2e 00 49 66 20 61 20 6c 6f 63 61 6c 20 66 69 | e.BGP.path's.NLRI..If.a.local.fi |
cce00 | 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 20 69 73 20 69 6e 20 70 6c 61 63 65 20 6f 6e 20 79 6f 75 | rewall.policy.is.in.place.on.you |
cce20 | 72 20 65 78 74 65 72 6e 61 6c 20 69 6e 74 65 72 66 61 63 65 20 79 6f 75 20 77 69 6c 6c 20 6e 65 | r.external.interface.you.will.ne |
cce40 | 65 64 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 20 70 6f 72 74 73 20 62 65 6c 6f 77 3a 00 49 66 20 | ed.to.allow.the.ports.below:.If. |
cce60 | 61 20 72 65 67 69 73 74 72 79 20 69 73 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 2c 20 44 6f 63 | a.registry.is.not.specified,.Doc |
cce80 | 6b 65 72 2e 69 6f 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 61 73 20 74 68 65 20 63 6f 6e 74 61 | ker.io.will.be.used.as.the.conta |
ccea0 | 69 6e 65 72 20 72 65 67 69 73 74 72 79 20 75 6e 6c 65 73 73 20 61 6e 20 61 6c 74 65 72 6e 61 74 | iner.registry.unless.an.alternat |
ccec0 | 69 76 65 20 72 65 67 69 73 74 72 79 20 69 73 20 73 70 65 63 69 66 69 65 64 20 75 73 69 6e 67 20 | ive.registry.is.specified.using. |
ccee0 | 2a 2a 73 65 74 20 63 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 73 74 72 79 20 3c 6e 61 6d 65 3e 2a | **set.container.registry.<name>* |
ccf00 | 2a 20 6f 72 20 74 68 65 20 72 65 67 69 73 74 72 79 20 69 73 20 69 6e 63 6c 75 64 65 64 20 69 6e | *.or.the.registry.is.included.in |
ccf20 | 20 74 68 65 20 69 6d 61 67 65 20 6e 61 6d 65 00 49 66 20 61 20 72 65 73 70 6f 6e 73 65 20 69 73 | .the.image.name.If.a.response.is |
ccf40 | 20 68 65 61 72 64 2c 20 74 68 65 20 6c 65 61 73 65 20 69 73 20 61 62 61 6e 64 6f 6e 65 64 2c 20 | .heard,.the.lease.is.abandoned,. |
ccf60 | 61 6e 64 20 74 68 65 20 73 65 72 76 65 72 20 64 6f 65 73 20 6e 6f 74 20 72 65 73 70 6f 6e 64 20 | and.the.server.does.not.respond. |
ccf80 | 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 2e 20 54 68 65 20 6c 65 61 73 65 20 77 69 6c 6c 20 72 65 | to.the.client..The.lease.will.re |
ccfa0 | 6d 61 69 6e 20 61 62 61 6e 64 6f 6e 65 64 20 66 6f 72 20 61 20 6d 69 6e 69 6d 75 6d 20 6f 66 20 | main.abandoned.for.a.minimum.of. |
ccfc0 | 61 62 61 6e 64 6f 6e 2d 6c 65 61 73 65 2d 74 69 6d 65 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 | abandon-lease-time.seconds.(defa |
ccfe0 | 75 6c 74 73 20 74 6f 20 32 34 20 68 6f 75 72 73 29 2e 00 49 66 20 61 20 72 6f 75 74 65 20 68 61 | ults.to.24.hours)..If.a.route.ha |
cd000 | 73 20 61 6e 20 4f 52 49 47 49 4e 41 54 4f 52 5f 49 44 20 61 74 74 72 69 62 75 74 65 20 62 65 63 | s.an.ORIGINATOR_ID.attribute.bec |
cd020 | 61 75 73 65 20 69 74 20 68 61 73 20 62 65 65 6e 20 72 65 66 6c 65 63 74 65 64 2c 20 74 68 61 74 | ause.it.has.been.reflected,.that |
cd040 | 20 4f 52 49 47 49 4e 41 54 4f 52 5f 49 44 20 77 69 6c 6c 20 62 65 20 75 73 65 64 2e 20 4f 74 68 | .ORIGINATOR_ID.will.be.used..Oth |
cd060 | 65 72 77 69 73 65 2c 20 74 68 65 20 72 6f 75 74 65 72 2d 49 44 20 6f 66 20 74 68 65 20 70 65 65 | erwise,.the.router-ID.of.the.pee |
cd080 | 72 20 74 68 65 20 72 6f 75 74 65 20 77 61 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 77 69 | r.the.route.was.received.from.wi |
cd0a0 | 6c 6c 20 62 65 20 75 73 65 64 2e 00 49 66 20 61 20 72 75 6c 65 20 69 73 20 64 65 66 69 6e 65 64 | ll.be.used..If.a.rule.is.defined |
cd0c0 | 2c 20 74 68 65 6e 20 61 6e 20 61 63 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 | ,.then.an.action.must.be.defined |
cd0e0 | 20 66 6f 72 20 69 74 2e 20 54 68 69 73 20 74 65 6c 6c 73 20 74 68 65 20 66 69 72 65 77 61 6c 6c | .for.it..This.tells.the.firewall |
cd100 | 20 77 68 61 74 20 74 6f 20 64 6f 20 69 66 20 61 6c 6c 20 63 72 69 74 65 72 69 61 20 6d 61 74 63 | .what.to.do.if.all.criteria.matc |
cd120 | 68 65 72 73 20 64 65 66 69 6e 65 64 20 66 6f 72 20 73 75 63 68 20 72 75 6c 65 20 64 6f 20 6d 61 | hers.defined.for.such.rule.do.ma |
cd140 | 74 63 68 2e 00 49 66 20 61 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 66 72 65 65 20 61 64 64 72 | tch..If.a.there.are.no.free.addr |
cd160 | 65 73 73 65 73 20 62 75 74 20 74 68 65 72 65 20 61 72 65 20 61 62 61 6e 64 6f 6e 65 64 20 49 50 | esses.but.there.are.abandoned.IP |
cd180 | 20 61 64 64 72 65 73 73 65 73 2c 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 20 77 69 6c 6c | .addresses,.the.DHCP.server.will |
cd1a0 | 20 61 74 74 65 6d 70 74 20 74 6f 20 72 65 63 6c 61 69 6d 20 61 6e 20 61 62 61 6e 64 6f 6e 65 64 | .attempt.to.reclaim.an.abandoned |
cd1c0 | 20 49 50 20 61 64 64 72 65 73 73 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 76 61 | .IP.address.regardless.of.the.va |
cd1e0 | 6c 75 65 20 6f 66 20 61 62 61 6e 64 6f 6e 2d 6c 65 61 73 65 2d 74 69 6d 65 2e 00 49 66 20 61 6e | lue.of.abandon-lease-time..If.an |
cd200 | 20 49 53 50 20 64 65 70 6c 6f 79 73 20 61 20 3a 61 62 62 72 3a 60 43 47 4e 20 28 43 61 72 72 69 | .ISP.deploys.a.:abbr:`CGN.(Carri |
cd220 | 65 72 2d 67 72 61 64 65 20 4e 41 54 29 60 2c 20 61 6e 64 20 75 73 65 73 20 3a 72 66 63 3a 60 31 | er-grade.NAT)`,.and.uses.:rfc:`1 |
cd240 | 39 31 38 60 20 61 64 64 72 65 73 73 20 73 70 61 63 65 20 74 6f 20 6e 75 6d 62 65 72 20 63 75 73 | 918`.address.space.to.number.cus |
cd260 | 74 6f 6d 65 72 20 67 61 74 65 77 61 79 73 2c 20 74 68 65 20 72 69 73 6b 20 6f 66 20 61 64 64 72 | tomer.gateways,.the.risk.of.addr |
cd280 | 65 73 73 20 63 6f 6c 6c 69 73 69 6f 6e 2c 20 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 72 6f 75 | ess.collision,.and.therefore.rou |
cd2a0 | 74 69 6e 67 20 66 61 69 6c 75 72 65 73 2c 20 61 72 69 73 65 73 20 77 68 65 6e 20 74 68 65 20 63 | ting.failures,.arises.when.the.c |
cd2c0 | 75 73 74 6f 6d 65 72 20 6e 65 74 77 6f 72 6b 20 61 6c 72 65 61 64 79 20 75 73 65 73 20 61 6e 20 | ustomer.network.already.uses.an. |
cd2e0 | 3a 72 66 63 3a 60 31 39 31 38 60 20 61 64 64 72 65 73 73 20 73 70 61 63 65 2e 00 49 66 20 61 6e | :rfc:`1918`.address.space..If.an |
cd300 | 20 61 6e 6f 74 68 65 72 20 62 72 69 64 67 65 20 69 6e 20 74 68 65 20 73 70 61 6e 6e 69 6e 67 20 | .another.bridge.in.the.spanning. |
cd320 | 74 72 65 65 20 64 6f 65 73 20 6e 6f 74 20 73 65 6e 64 20 6f 75 74 20 61 20 68 65 6c 6c 6f 20 70 | tree.does.not.send.out.a.hello.p |
cd340 | 61 63 6b 65 74 20 66 6f 72 20 61 20 6c 6f 6e 67 20 70 65 72 69 6f 64 20 6f 66 20 74 69 6d 65 2c | acket.for.a.long.period.of.time, |
cd360 | 20 69 74 20 69 73 20 61 73 73 75 6d 65 64 20 74 6f 20 62 65 20 64 65 61 64 2e 00 49 66 20 63 68 | .it.is.assumed.to.be.dead..If.ch |
cd380 | 6f 6f 73 69 6e 67 20 61 20 76 61 6c 75 65 20 62 65 6c 6f 77 20 33 31 20 73 65 63 6f 6e 64 73 20 | oosing.a.value.below.31.seconds. |
cd3a0 | 62 65 20 61 77 61 72 65 20 74 68 61 74 20 73 6f 6d 65 20 68 61 72 64 77 61 72 65 20 70 6c 61 74 | be.aware.that.some.hardware.plat |
cd3c0 | 66 6f 72 6d 73 20 63 61 6e 6e 6f 74 20 73 65 65 20 64 61 74 61 20 66 6c 6f 77 69 6e 67 20 69 6e | forms.cannot.see.data.flowing.in |
cd3e0 | 20 62 65 74 74 65 72 20 74 68 61 6e 20 33 30 20 73 65 63 6f 6e 64 20 63 68 75 6e 6b 73 2e 00 49 | .better.than.30.second.chunks..I |
cd400 | 66 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 69 6e 63 6f 6d 69 6e 67 20 49 50 20 64 69 72 65 63 74 | f.configured,.incoming.IP.direct |
cd420 | 65 64 20 62 72 6f 61 64 63 61 73 74 20 70 61 63 6b 65 74 73 20 6f 6e 20 74 68 69 73 20 69 6e 74 | ed.broadcast.packets.on.this.int |
cd440 | 65 72 66 61 63 65 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 64 65 64 2e 00 49 66 20 63 6f 6e | erface.will.be.forwarded..If.con |
cd460 | 66 69 67 75 72 65 64 2c 20 72 65 70 6c 79 20 6f 6e 6c 79 20 69 66 20 74 68 65 20 74 61 72 67 65 | figured,.reply.only.if.the.targe |
cd480 | 74 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 20 63 6f | t.IP.address.is.local.address.co |
cd4a0 | 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 69 6e 63 6f 6d 69 6e 67 20 69 6e 74 65 72 66 61 | nfigured.on.the.incoming.interfa |
cd4c0 | 63 65 2e 00 49 66 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 74 72 79 20 74 6f 20 61 76 6f 69 64 20 | ce..If.configured,.try.to.avoid. |
cd4e0 | 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 65 73 20 74 68 61 74 20 61 72 65 20 6e 6f 74 20 69 6e 20 | local.addresses.that.are.not.in. |
cd500 | 74 68 65 20 74 61 72 67 65 74 27 73 20 73 75 62 6e 65 74 20 66 6f 72 20 74 68 69 73 20 69 6e 74 | the.target's.subnet.for.this.int |
cd520 | 65 72 66 61 63 65 2e 20 54 68 69 73 20 6d 6f 64 65 20 69 73 20 75 73 65 66 75 6c 20 77 68 65 6e | erface..This.mode.is.useful.when |
cd540 | 20 74 61 72 67 65 74 20 68 6f 73 74 73 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 74 68 69 73 | .target.hosts.reachable.via.this |
cd560 | 20 69 6e 74 65 72 66 61 63 65 20 72 65 71 75 69 72 65 20 74 68 65 20 73 6f 75 72 63 65 20 49 50 | .interface.require.the.source.IP |
cd580 | 20 61 64 64 72 65 73 73 20 69 6e 20 41 52 50 20 72 65 71 75 65 73 74 73 20 74 6f 20 62 65 20 70 | .address.in.ARP.requests.to.be.p |
cd5a0 | 61 72 74 20 6f 66 20 74 68 65 69 72 20 6c 6f 67 69 63 61 6c 20 6e 65 74 77 6f 72 6b 20 63 6f 6e | art.of.their.logical.network.con |
cd5c0 | 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 72 65 63 65 69 76 69 6e 67 20 69 6e 74 65 72 66 61 | figured.on.the.receiving.interfa |
cd5e0 | 63 65 2e 20 57 68 65 6e 20 77 65 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 72 65 71 75 65 73 74 | ce..When.we.generate.the.request |
cd600 | 20 77 65 20 77 69 6c 6c 20 63 68 65 63 6b 20 61 6c 6c 20 6f 75 72 20 73 75 62 6e 65 74 73 20 74 | .we.will.check.all.our.subnets.t |
cd620 | 68 61 74 20 69 6e 63 6c 75 64 65 20 74 68 65 20 74 61 72 67 65 74 20 49 50 20 61 6e 64 20 77 69 | hat.include.the.target.IP.and.wi |
cd640 | 6c 6c 20 70 72 65 73 65 72 76 65 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 69 | ll.preserve.the.source.address.i |
cd660 | 66 20 69 74 20 69 73 20 66 72 6f 6d 20 73 75 63 68 20 73 75 62 6e 65 74 2e 20 49 66 20 74 68 65 | f.it.is.from.such.subnet..If.the |
cd680 | 72 65 20 69 73 20 6e 6f 20 73 75 63 68 20 73 75 62 6e 65 74 20 77 65 20 73 65 6c 65 63 74 20 73 | re.is.no.such.subnet.we.select.s |
cd6a0 | 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 20 72 | ource.address.according.to.the.r |
cd6c0 | 75 6c 65 73 20 66 6f 72 20 6c 65 76 65 6c 20 32 2e 00 49 66 20 63 6f 6e 66 69 67 75 72 69 6e 67 | ules.for.level.2..If.configuring |
cd6e0 | 20 56 58 4c 41 4e 20 69 6e 20 61 20 56 79 4f 53 20 76 69 72 74 75 61 6c 20 6d 61 63 68 69 6e 65 | .VXLAN.in.a.VyOS.virtual.machine |
cd700 | 2c 20 65 6e 73 75 72 65 20 74 68 61 74 20 4d 41 43 20 73 70 6f 6f 66 69 6e 67 20 28 48 79 70 65 | ,.ensure.that.MAC.spoofing.(Hype |
cd720 | 72 2d 56 29 20 6f 72 20 46 6f 72 67 65 64 20 54 72 61 6e 73 6d 69 74 73 20 28 45 53 58 29 20 61 | r-V).or.Forged.Transmits.(ESX).a |
cd740 | 72 65 20 70 65 72 6d 69 74 74 65 64 2c 20 6f 74 68 65 72 77 69 73 65 20 66 6f 72 77 61 72 64 65 | re.permitted,.otherwise.forwarde |
cd760 | 64 20 66 72 61 6d 65 73 20 6d 61 79 20 62 65 20 62 6c 6f 63 6b 65 64 20 62 79 20 74 68 65 20 68 | d.frames.may.be.blocked.by.the.h |
cd780 | 79 70 65 72 76 69 73 6f 72 2e 00 49 66 20 66 6f 72 77 61 72 64 69 6e 67 20 74 72 61 66 66 69 63 | ypervisor..If.forwarding.traffic |
cd7a0 | 20 74 6f 20 61 20 64 69 66 66 65 72 65 6e 74 20 70 6f 72 74 20 74 68 61 6e 20 69 74 20 69 73 20 | .to.a.different.port.than.it.is. |
cd7c0 | 61 72 72 69 76 69 6e 67 20 6f 6e 2c 20 79 6f 75 20 6d 61 79 20 61 6c 73 6f 20 63 6f 6e 66 69 67 | arriving.on,.you.may.also.config |
cd7e0 | 75 72 65 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 70 6f 72 74 20 75 73 69 6e 67 20 60 | ure.the.translation.port.using.` |
cd800 | 73 65 74 20 6e 61 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 72 75 6c 65 20 5b 6e 5d 20 74 72 61 | set.nat.destination.rule.[n].tra |
cd820 | 6e 73 6c 61 74 69 6f 6e 20 70 6f 72 74 60 2e 00 49 66 20 67 75 61 72 61 6e 74 65 65 64 20 74 72 | nslation.port`..If.guaranteed.tr |
cd840 | 61 66 66 69 63 20 66 6f 72 20 61 20 63 6c 61 73 73 20 69 73 20 6d 65 74 20 61 6e 64 20 74 68 65 | affic.for.a.class.is.met.and.the |
cd860 | 72 65 20 69 73 20 72 6f 6f 6d 20 66 6f 72 20 6d 6f 72 65 20 74 72 61 66 66 69 63 2c 20 74 68 65 | re.is.room.for.more.traffic,.the |
cd880 | 20 63 65 69 6c 69 6e 67 20 70 61 72 61 6d 65 74 65 72 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 | .ceiling.parameter.can.be.used.t |
cd8a0 | 6f 20 73 65 74 20 68 6f 77 20 6d 75 63 68 20 6d 6f 72 65 20 62 61 6e 64 77 69 64 74 68 20 63 6f | o.set.how.much.more.bandwidth.co |
cd8c0 | 75 6c 64 20 62 65 20 75 73 65 64 2e 20 49 66 20 67 75 61 72 61 6e 74 65 65 64 20 74 72 61 66 66 | uld.be.used..If.guaranteed.traff |
cd8e0 | 69 63 20 69 73 20 6d 65 74 20 61 6e 64 20 74 68 65 72 65 20 61 72 65 20 73 65 76 65 72 61 6c 20 | ic.is.met.and.there.are.several. |
cd900 | 63 6c 61 73 73 65 73 20 77 69 6c 6c 69 6e 67 20 74 6f 20 75 73 65 20 74 68 65 69 72 20 63 65 69 | classes.willing.to.use.their.cei |
cd920 | 6c 69 6e 67 73 2c 20 74 68 65 20 70 72 69 6f 72 69 74 79 20 70 61 72 61 6d 65 74 65 72 20 77 69 | lings,.the.priority.parameter.wi |
cd940 | 6c 6c 20 65 73 74 61 62 6c 69 73 68 20 74 68 65 20 6f 72 64 65 72 20 69 6e 20 77 68 69 63 68 20 | ll.establish.the.order.in.which. |
cd960 | 74 68 61 74 20 61 64 64 69 74 69 6f 6e 61 6c 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 62 65 20 | that.additional.traffic.will.be. |
cd980 | 61 6c 6c 6f 63 61 74 65 64 2e 20 50 72 69 6f 72 69 74 79 20 63 61 6e 20 62 65 20 61 6e 79 20 6e | allocated..Priority.can.be.any.n |
cd9a0 | 75 6d 62 65 72 20 66 72 6f 6d 20 30 20 74 6f 20 37 2e 20 54 68 65 20 6c 6f 77 65 72 20 74 68 65 | umber.from.0.to.7..The.lower.the |
cd9c0 | 20 6e 75 6d 62 65 72 2c 20 74 68 65 20 68 69 67 68 65 72 20 74 68 65 20 70 72 69 6f 72 69 74 79 | .number,.the.higher.the.priority |
cd9e0 | 2e 00 49 66 20 69 6e 74 65 72 66 61 63 65 20 77 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 | ..If.interface.were.the.packet.w |
cda00 | 61 73 20 72 65 63 65 69 76 65 64 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c | as.received.is.part.of.a.bridge, |
cda20 | 20 74 68 65 6e 20 70 61 63 6b 65 74 20 69 73 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 | .then.packet.is.processed.at.the |
cda40 | 20 2a 2a 42 72 69 64 67 65 20 4c 61 79 65 72 2a 2a 2c 20 77 68 69 63 68 20 63 6f 6e 74 61 69 6e | .**Bridge.Layer**,.which.contain |
cda60 | 73 20 61 20 76 65 72 20 62 61 73 69 63 20 73 65 74 75 70 20 77 68 65 72 65 20 66 6f 72 20 62 72 | s.a.ver.basic.setup.where.for.br |
cda80 | 69 64 67 65 20 66 69 6c 74 65 72 69 6e 67 3a 00 49 66 20 69 6e 74 65 72 66 61 63 65 20 77 65 72 | idge.filtering:.If.interface.wer |
cdaa0 | 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 69 73 6e 27 74 20 | e.the.packet.was.received.isn't. |
cdac0 | 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c 20 74 68 65 6e 20 70 61 63 6b 65 74 20 69 73 | part.of.a.bridge,.then.packet.is |
cdae0 | 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 2a 2a 49 50 20 4c 61 79 65 72 2a 2a 3a 00 | .processed.at.the.**IP.Layer**:. |
cdb00 | 49 66 20 69 74 27 73 20 76 69 74 61 6c 20 74 68 61 74 20 74 68 65 20 64 61 65 6d 6f 6e 20 73 68 | If.it's.vital.that.the.daemon.sh |
cdb20 | 6f 75 6c 64 20 61 63 74 20 65 78 61 63 74 6c 79 20 6c 69 6b 65 20 61 20 72 65 61 6c 20 6d 75 6c | ould.act.exactly.like.a.real.mul |
cdb40 | 74 69 63 61 73 74 20 63 6c 69 65 6e 74 20 6f 6e 20 74 68 65 20 75 70 73 74 72 65 61 6d 20 69 6e | ticast.client.on.the.upstream.in |
cdb60 | 74 65 72 66 61 63 65 2c 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 73 68 6f 75 6c 64 20 62 65 | terface,.this.function.should.be |
cdb80 | 20 65 6e 61 62 6c 65 64 2e 00 49 66 20 6b 6e 6f 77 6e 2c 20 74 68 65 20 49 50 20 6f 66 20 74 68 | .enabled..If.known,.the.IP.of.th |
cdba0 | 65 20 72 65 6d 6f 74 65 20 72 6f 75 74 65 72 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 | e.remote.router.can.be.configure |
cdbc0 | 64 20 75 73 69 6e 67 20 74 68 65 20 60 60 72 65 6d 6f 74 65 2d 68 6f 73 74 60 60 20 64 69 72 65 | d.using.the.``remote-host``.dire |
cdbe0 | 63 74 69 76 65 3b 20 69 66 20 75 6e 6b 6e 6f 77 6e 2c 20 69 74 20 63 61 6e 20 62 65 20 6f 6d 69 | ctive;.if.unknown,.it.can.be.omi |
cdc00 | 74 74 65 64 2e 20 57 65 20 77 69 6c 6c 20 61 73 73 75 6d 65 20 61 20 64 79 6e 61 6d 69 63 20 49 | tted..We.will.assume.a.dynamic.I |
cdc20 | 50 20 66 6f 72 20 6f 75 72 20 72 65 6d 6f 74 65 20 72 6f 75 74 65 72 2e 00 49 66 20 6c 6f 67 67 | P.for.our.remote.router..If.logg |
cdc40 | 69 6e 67 20 74 6f 20 61 20 6c 6f 63 61 6c 20 75 73 65 72 20 61 63 63 6f 75 6e 74 20 69 73 20 63 | ing.to.a.local.user.account.is.c |
cdc60 | 6f 6e 66 69 67 75 72 65 64 2c 20 61 6c 6c 20 64 65 66 69 6e 65 64 20 6c 6f 67 20 6d 65 73 73 61 | onfigured,.all.defined.log.messa |
cdc80 | 67 65 73 20 61 72 65 20 64 69 73 70 6c 61 79 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 20 69 | ges.are.display.on.the.console.i |
cdca0 | 66 20 74 68 65 20 6c 6f 63 61 6c 20 75 73 65 72 20 69 73 20 6c 6f 67 67 65 64 20 69 6e 2c 20 69 | f.the.local.user.is.logged.in,.i |
cdcc0 | 66 20 74 68 65 20 75 73 65 72 20 69 73 20 6e 6f 74 20 6c 6f 67 67 65 64 20 69 6e 2c 20 6e 6f 20 | f.the.user.is.not.logged.in,.no. |
cdce0 | 6d 65 73 73 61 67 65 73 20 61 72 65 20 62 65 69 6e 67 20 64 69 73 70 6c 61 79 65 64 2e 20 46 6f | messages.are.being.displayed..Fo |
cdd00 | 72 20 61 6e 20 65 78 70 6c 61 6e 61 74 69 6f 6e 20 6f 6e 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 | r.an.explanation.on.:ref:`syslog |
cdd20 | 5f 66 61 63 69 6c 69 74 69 65 73 60 20 6b 65 79 77 6f 72 64 73 20 61 6e 64 20 3a 72 65 66 3a 60 | _facilities`.keywords.and.:ref:` |
cdd40 | 73 79 73 6c 6f 67 5f 73 65 76 65 72 69 74 79 5f 6c 65 76 65 6c 60 20 6b 65 79 77 6f 72 64 73 20 | syslog_severity_level`.keywords. |
cdd60 | 73 65 65 20 74 61 62 6c 65 73 20 62 65 6c 6f 77 2e 00 49 66 20 6d 61 6b 69 6e 67 20 75 73 65 20 | see.tables.below..If.making.use. |
cdd80 | 6f 66 20 6d 75 6c 74 69 70 6c 65 20 74 75 6e 6e 65 6c 73 2c 20 4f 70 65 6e 56 50 4e 20 6d 75 73 | of.multiple.tunnels,.OpenVPN.mus |
cdda0 | 74 20 68 61 76 65 20 61 20 77 61 79 20 74 6f 20 64 69 73 74 69 6e 67 75 69 73 68 20 62 65 74 77 | t.have.a.way.to.distinguish.betw |
cddc0 | 65 65 6e 20 64 69 66 66 65 72 65 6e 74 20 74 75 6e 6e 65 6c 73 20 61 73 69 64 65 20 66 72 6f 6d | een.different.tunnels.aside.from |
cdde0 | 20 74 68 65 20 70 72 65 2d 73 68 61 72 65 64 2d 6b 65 79 2e 20 54 68 69 73 20 69 73 20 65 69 74 | .the.pre-shared-key..This.is.eit |
cde00 | 68 65 72 20 62 79 20 72 65 66 65 72 65 6e 63 69 6e 67 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 | her.by.referencing.IP.address.or |
cde20 | 20 70 6f 72 74 20 6e 75 6d 62 65 72 2e 20 4f 6e 65 20 6f 70 74 69 6f 6e 20 69 73 20 74 6f 20 64 | .port.number..One.option.is.to.d |
cde40 | 65 64 69 63 61 74 65 20 61 20 70 75 62 6c 69 63 20 49 50 20 74 6f 20 65 61 63 68 20 74 75 6e 6e | edicate.a.public.IP.to.each.tunn |
cde60 | 65 6c 2e 20 41 6e 6f 74 68 65 72 20 6f 70 74 69 6f 6e 20 69 73 20 74 6f 20 64 65 64 69 63 61 74 | el..Another.option.is.to.dedicat |
cde80 | 65 20 61 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 74 6f 20 65 61 63 68 20 74 75 6e 6e 65 6c 20 28 | e.a.port.number.to.each.tunnel.( |
cdea0 | 65 2e 67 2e 20 31 31 39 35 2c 31 31 39 36 2c 31 31 39 37 2e 2e 2e 29 2e 00 49 66 20 6d 75 6c 74 | e.g..1195,1196,1197...)..If.mult |
cdec0 | 69 2d 70 61 74 68 69 6e 67 20 69 73 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 6e 20 63 68 65 63 6b | i-pathing.is.enabled,.then.check |
cdee0 | 20 77 68 65 74 68 65 72 20 74 68 65 20 72 6f 75 74 65 73 20 6e 6f 74 20 79 65 74 20 64 69 73 74 | .whether.the.routes.not.yet.dist |
cdf00 | 69 6e 67 75 69 73 68 65 64 20 69 6e 20 70 72 65 66 65 72 65 6e 63 65 20 6d 61 79 20 62 65 20 63 | inguished.in.preference.may.be.c |
cdf20 | 6f 6e 73 69 64 65 72 65 64 20 65 71 75 61 6c 2e 20 49 66 20 3a 63 66 67 63 6d 64 3a 60 62 67 70 | onsidered.equal..If.:cfgcmd:`bgp |
cdf40 | 20 62 65 73 74 70 61 74 68 20 61 73 2d 70 61 74 68 20 6d 75 6c 74 69 70 61 74 68 2d 72 65 6c 61 | .bestpath.as-path.multipath-rela |
cdf60 | 78 60 20 69 73 20 73 65 74 2c 20 61 6c 6c 20 73 75 63 68 20 72 6f 75 74 65 73 20 61 72 65 20 63 | x`.is.set,.all.such.routes.are.c |
cdf80 | 6f 6e 73 69 64 65 72 65 64 20 65 71 75 61 6c 2c 20 6f 74 68 65 72 77 69 73 65 20 72 6f 75 74 65 | onsidered.equal,.otherwise.route |
cdfa0 | 73 20 72 65 63 65 69 76 65 64 20 76 69 61 20 69 42 47 50 20 77 69 74 68 20 69 64 65 6e 74 69 63 | s.received.via.iBGP.with.identic |
cdfc0 | 61 6c 20 41 53 5f 50 41 54 48 73 20 6f 72 20 72 6f 75 74 65 73 20 72 65 63 65 69 76 65 64 20 66 | al.AS_PATHs.or.routes.received.f |
cdfe0 | 72 6f 6d 20 65 42 47 50 20 6e 65 69 67 68 62 6f 75 72 73 20 69 6e 20 74 68 65 20 73 61 6d 65 20 | rom.eBGP.neighbours.in.the.same. |
ce000 | 41 53 20 61 72 65 20 63 6f 6e 73 69 64 65 72 65 64 20 65 71 75 61 6c 2e 00 49 66 20 6e 6f 20 63 | AS.are.considered.equal..If.no.c |
ce020 | 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 61 6e 20 52 50 4b 49 20 63 61 63 68 65 20 73 65 72 76 65 | onnection.to.an.RPKI.cache.serve |
ce040 | 72 20 63 61 6e 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 61 66 74 65 72 20 61 20 70 72 65 | r.can.be.established.after.a.pre |
ce060 | 2d 64 65 66 69 6e 65 64 20 74 69 6d 65 6f 75 74 2c 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 6c | -defined.timeout,.the.router.wil |
ce080 | 6c 20 70 72 6f 63 65 73 73 20 72 6f 75 74 65 73 20 77 69 74 68 6f 75 74 20 70 72 65 66 69 78 20 | l.process.routes.without.prefix. |
ce0a0 | 6f 72 69 67 69 6e 20 76 61 6c 69 64 61 74 69 6f 6e 2e 20 49 74 20 73 74 69 6c 6c 20 77 69 6c 6c | origin.validation..It.still.will |
ce0c0 | 20 74 72 79 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 | .try.to.establish.a.connection.t |
ce0e0 | 6f 20 61 6e 20 52 50 4b 49 20 63 61 63 68 65 20 73 65 72 76 65 72 20 69 6e 20 74 68 65 20 62 61 | o.an.RPKI.cache.server.in.the.ba |
ce100 | 63 6b 67 72 6f 75 6e 64 2e 00 49 66 20 6e 6f 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 69 73 20 73 | ckground..If.no.destination.is.s |
ce120 | 70 65 63 69 66 69 65 64 20 74 68 65 20 72 75 6c 65 20 77 69 6c 6c 20 6d 61 74 63 68 20 6f 6e 20 | pecified.the.rule.will.match.on. |
ce140 | 61 6e 79 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 61 6e 64 20 70 6f 72 74 | any.destination.address.and.port |
ce160 | 2e 00 49 66 20 6e 6f 20 69 70 20 70 72 65 66 69 78 20 6c 69 73 74 20 69 73 20 73 70 65 63 69 66 | ..If.no.ip.prefix.list.is.specif |
ce180 | 69 65 64 2c 20 69 74 20 61 63 74 73 20 61 73 20 70 65 72 6d 69 74 2e 20 49 66 20 69 70 20 70 72 | ied,.it.acts.as.permit..If.ip.pr |
ce1a0 | 65 66 69 78 20 6c 69 73 74 20 69 73 20 64 65 66 69 6e 65 64 2c 20 61 6e 64 20 6e 6f 20 6d 61 74 | efix.list.is.defined,.and.no.mat |
ce1c0 | 63 68 20 69 73 20 66 6f 75 6e 64 2c 20 64 65 66 61 75 6c 74 20 64 65 6e 79 20 69 73 20 61 70 70 | ch.is.found,.default.deny.is.app |
ce1e0 | 6c 69 65 64 2e 00 49 66 20 6e 6f 20 6f 70 74 69 6f 6e 20 69 73 20 73 70 65 63 69 66 69 65 64 2c | lied..If.no.option.is.specified, |
ce200 | 20 74 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 60 61 6c 6c 60 2e 00 49 66 20 6e 6f 74 20 | .this.defaults.to.`all`..If.not. |
ce220 | 73 65 74 20 28 64 65 66 61 75 6c 74 29 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 68 61 76 65 | set.(default).allows.you.to.have |
ce240 | 20 6d 75 6c 74 69 70 6c 65 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 73 20 6f 6e 20 | .multiple.network.interfaces.on. |
ce260 | 74 68 65 20 73 61 6d 65 20 73 75 62 6e 65 74 2c 20 61 6e 64 20 68 61 76 65 20 74 68 65 20 41 52 | the.same.subnet,.and.have.the.AR |
ce280 | 50 73 20 66 6f 72 20 65 61 63 68 20 69 6e 74 65 72 66 61 63 65 20 62 65 20 61 6e 73 77 65 72 65 | Ps.for.each.interface.be.answere |
ce2a0 | 64 20 62 61 73 65 64 20 6f 6e 20 77 68 65 74 68 65 72 20 6f 72 20 6e 6f 74 20 74 68 65 20 6b 65 | d.based.on.whether.or.not.the.ke |
ce2c0 | 72 6e 65 6c 20 77 6f 75 6c 64 20 72 6f 75 74 65 20 61 20 70 61 63 6b 65 74 20 66 72 6f 6d 20 74 | rnel.would.route.a.packet.from.t |
ce2e0 | 68 65 20 41 52 50 27 64 20 49 50 20 6f 75 74 20 74 68 61 74 20 69 6e 74 65 72 66 61 63 65 20 28 | he.ARP'd.IP.out.that.interface.( |
ce300 | 74 68 65 72 65 66 6f 72 65 20 79 6f 75 20 6d 75 73 74 20 75 73 65 20 73 6f 75 72 63 65 20 62 61 | therefore.you.must.use.source.ba |
ce320 | 73 65 64 20 72 6f 75 74 69 6e 67 20 66 6f 72 20 74 68 69 73 20 74 6f 20 77 6f 72 6b 29 2e 00 49 | sed.routing.for.this.to.work)..I |
ce340 | 66 20 6f 70 74 69 6f 6e 61 6c 20 70 72 6f 66 69 6c 65 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 | f.optional.profile.parameter.is. |
ce360 | 75 73 65 64 2c 20 73 65 6c 65 63 74 20 61 20 42 46 44 20 70 72 6f 66 69 6c 65 20 66 6f 72 20 74 | used,.select.a.BFD.profile.for.t |
ce380 | 68 65 20 42 46 44 20 73 65 73 73 69 6f 6e 73 20 63 72 65 61 74 65 64 20 76 69 61 20 74 68 69 73 | he.BFD.sessions.created.via.this |
ce3a0 | 20 69 6e 74 65 72 66 61 63 65 2e 00 49 66 20 73 65 74 20 74 68 65 20 6b 65 72 6e 65 6c 20 63 61 | .interface..If.set.the.kernel.ca |
ce3c0 | 6e 20 72 65 73 70 6f 6e 64 20 74 6f 20 61 72 70 20 72 65 71 75 65 73 74 73 20 77 69 74 68 20 61 | n.respond.to.arp.requests.with.a |
ce3e0 | 64 64 72 65 73 73 65 73 20 66 72 6f 6d 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 2e 20 | ddresses.from.other.interfaces.. |
ce400 | 54 68 69 73 20 6d 61 79 20 73 65 65 6d 20 77 72 6f 6e 67 20 62 75 74 20 69 74 20 75 73 75 61 6c | This.may.seem.wrong.but.it.usual |
ce420 | 6c 79 20 6d 61 6b 65 73 20 73 65 6e 73 65 2c 20 62 65 63 61 75 73 65 20 69 74 20 69 6e 63 72 65 | ly.makes.sense,.because.it.incre |
ce440 | 61 73 65 73 20 74 68 65 20 63 68 61 6e 63 65 20 6f 66 20 73 75 63 63 65 73 73 66 75 6c 20 63 6f | ases.the.chance.of.successful.co |
ce460 | 6d 6d 75 6e 69 63 61 74 69 6f 6e 2e 20 49 50 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 6f 77 | mmunication..IP.addresses.are.ow |
ce480 | 6e 65 64 20 62 79 20 74 68 65 20 63 6f 6d 70 6c 65 74 65 20 68 6f 73 74 20 6f 6e 20 4c 69 6e 75 | ned.by.the.complete.host.on.Linu |
ce4a0 | 78 2c 20 6e 6f 74 20 62 79 20 70 61 72 74 69 63 75 6c 61 72 20 69 6e 74 65 72 66 61 63 65 73 2e | x,.not.by.particular.interfaces. |
ce4c0 | 20 4f 6e 6c 79 20 66 6f 72 20 6d 6f 72 65 20 63 6f 6d 70 6c 65 78 20 73 65 74 75 70 73 20 6c 69 | .Only.for.more.complex.setups.li |
ce4e0 | 6b 65 20 6c 6f 61 64 2d 62 61 6c 61 6e 63 69 6e 67 2c 20 64 6f 65 73 20 74 68 69 73 20 62 65 68 | ke.load-balancing,.does.this.beh |
ce500 | 61 76 69 6f 75 72 20 63 61 75 73 65 20 70 72 6f 62 6c 65 6d 73 2e 00 49 66 20 73 65 74 2c 20 49 | aviour.cause.problems..If.set,.I |
ce520 | 50 76 34 20 64 69 72 65 63 74 65 64 20 62 72 6f 61 64 63 61 73 74 20 66 6f 72 77 61 72 64 69 6e | Pv4.directed.broadcast.forwardin |
ce540 | 67 20 77 69 6c 6c 20 62 65 20 63 6f 6d 70 6c 65 74 65 6c 79 20 64 69 73 61 62 6c 65 64 20 72 65 | g.will.be.completely.disabled.re |
ce560 | 67 61 72 64 6c 65 73 73 20 6f 66 20 77 68 65 74 68 65 72 20 70 65 72 2d 69 6e 74 65 72 66 61 63 | gardless.of.whether.per-interfac |
ce580 | 65 20 64 69 72 65 63 74 65 64 20 62 72 6f 61 64 63 61 73 74 20 66 6f 72 77 61 72 64 69 6e 67 20 | e.directed.broadcast.forwarding. |
ce5a0 | 69 73 20 65 6e 61 62 6c 65 64 20 6f 72 20 6e 6f 74 2e 00 49 66 20 73 75 66 66 69 78 20 69 73 20 | is.enabled.or.not..If.suffix.is. |
ce5c0 | 6f 6d 69 74 74 65 64 2c 20 6d 69 6e 75 74 65 73 20 61 72 65 20 69 6d 70 6c 69 65 64 2e 00 49 66 | omitted,.minutes.are.implied..If |
ce5e0 | 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 6e 6f 2d 70 72 65 70 65 6e 64 60 20 61 74 74 72 69 62 | .the.:cfgcmd:`no-prepend`.attrib |
ce600 | 75 74 65 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 74 68 65 6e 20 74 68 65 20 73 75 70 70 6c | ute.is.specified,.then.the.suppl |
ce620 | 69 65 64 20 6c 6f 63 61 6c 2d 61 73 20 69 73 20 6e 6f 74 20 70 72 65 70 65 6e 64 65 64 20 74 6f | ied.local-as.is.not.prepended.to |
ce640 | 20 74 68 65 20 72 65 63 65 69 76 65 64 20 41 53 5f 50 41 54 48 2e 00 49 66 20 74 68 65 20 3a 63 | .the.received.AS_PATH..If.the.:c |
ce660 | 66 67 63 6d 64 3a 60 72 65 70 6c 61 63 65 2d 61 73 60 20 61 74 74 72 69 62 75 74 65 20 69 73 20 | fgcmd:`replace-as`.attribute.is. |
ce680 | 73 70 65 63 69 66 69 65 64 2c 20 74 68 65 6e 20 6f 6e 6c 79 20 74 68 65 20 73 75 70 70 6c 69 65 | specified,.then.only.the.supplie |
ce6a0 | 64 20 6c 6f 63 61 6c 2d 61 73 20 69 73 20 70 72 65 70 65 6e 64 65 64 20 74 6f 20 74 68 65 20 41 | d.local-as.is.prepended.to.the.A |
ce6c0 | 53 5f 50 41 54 48 20 77 68 65 6e 20 74 72 61 6e 73 6d 69 74 74 69 6e 67 20 6c 6f 63 61 6c 2d 72 | S_PATH.when.transmitting.local-r |
ce6e0 | 6f 75 74 65 20 75 70 64 61 74 65 73 20 74 6f 20 74 68 69 73 20 70 65 65 72 2e 00 49 66 20 74 68 | oute.updates.to.this.peer..If.th |
ce700 | 65 20 41 52 50 20 74 61 62 6c 65 20 61 6c 72 65 61 64 79 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 | e.ARP.table.already.contains.the |
ce720 | 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 67 72 61 74 75 69 74 6f 75 73 20 61 72 | .IP.address.of.the.gratuitous.ar |
ce740 | 70 20 66 72 61 6d 65 2c 20 74 68 65 20 61 72 70 20 74 61 62 6c 65 20 77 69 6c 6c 20 62 65 20 75 | p.frame,.the.arp.table.will.be.u |
ce760 | 70 64 61 74 65 64 20 72 65 67 61 72 64 6c 65 73 73 20 69 66 20 74 68 69 73 20 73 65 74 74 69 6e | pdated.regardless.if.this.settin |
ce780 | 67 20 69 73 20 6f 6e 20 6f 72 20 6f 66 66 2e 00 49 66 20 74 68 65 20 41 53 2d 50 61 74 68 20 66 | g.is.on.or.off..If.the.AS-Path.f |
ce7a0 | 6f 72 20 74 68 65 20 72 6f 75 74 65 20 68 61 73 20 61 20 70 72 69 76 61 74 65 20 41 53 4e 20 62 | or.the.route.has.a.private.ASN.b |
ce7c0 | 65 74 77 65 65 6e 20 70 75 62 6c 69 63 20 41 53 4e 73 2c 20 69 74 20 69 73 20 61 73 73 75 6d 65 | etween.public.ASNs,.it.is.assume |
ce7e0 | 64 20 74 68 61 74 20 74 68 69 73 20 69 73 20 61 20 64 65 73 69 67 6e 20 63 68 6f 69 63 65 2c 20 | d.that.this.is.a.design.choice,. |
ce800 | 61 6e 64 20 74 68 65 20 70 72 69 76 61 74 65 20 41 53 4e 20 69 73 20 6e 6f 74 20 72 65 6d 6f 76 | and.the.private.ASN.is.not.remov |
ce820 | 65 64 2e 00 49 66 20 74 68 65 20 41 53 2d 50 61 74 68 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 | ed..If.the.AS-Path.for.the.route |
ce840 | 20 68 61 73 20 6f 6e 6c 79 20 70 72 69 76 61 74 65 20 41 53 4e 73 2c 20 74 68 65 20 70 72 69 76 | .has.only.private.ASNs,.the.priv |
ce860 | 61 74 65 20 41 53 4e 73 20 61 72 65 20 72 65 6d 6f 76 65 64 2e 00 49 66 20 74 68 65 20 49 50 20 | ate.ASNs.are.removed..If.the.IP. |
ce880 | 70 72 65 66 69 78 20 6d 61 73 6b 20 69 73 20 70 72 65 73 65 6e 74 2c 20 69 74 20 64 69 72 65 63 | prefix.mask.is.present,.it.direc |
ce8a0 | 74 73 20 6f 70 65 6e 6e 68 72 70 20 74 6f 20 75 73 65 20 74 68 69 73 20 70 65 65 72 20 61 73 20 | ts.opennhrp.to.use.this.peer.as. |
ce8c0 | 61 20 6e 65 78 74 20 68 6f 70 20 73 65 72 76 65 72 20 77 68 65 6e 20 73 65 6e 64 69 6e 67 20 52 | a.next.hop.server.when.sending.R |
ce8e0 | 65 73 6f 6c 75 74 69 6f 6e 20 52 65 71 75 65 73 74 73 20 6d 61 74 63 68 69 6e 67 20 74 68 69 73 | esolution.Requests.matching.this |
ce900 | 20 73 75 62 6e 65 74 2e 00 49 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 73 65 | .subnet..If.the.RADIUS.server.se |
ce920 | 6e 64 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 60 60 44 65 6c 65 67 61 74 65 64 2d 49 50 | nds.the.attribute.``Delegated-IP |
ce940 | 76 36 2d 50 72 65 66 69 78 2d 50 6f 6f 6c 60 60 2c 20 49 50 76 36 20 64 65 6c 65 67 61 74 69 6f | v6-Prefix-Pool``,.IPv6.delegatio |
ce960 | 6e 20 70 65 66 69 78 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 20 66 72 6f 6d 20 61 | n.pefix.will.be.allocated.from.a |
ce980 | 20 70 72 65 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 60 60 64 65 6c 65 67 61 74 65 | .predefined.IPv6.pool.``delegate |
ce9a0 | 60 60 20 77 68 6f 73 65 20 6e 61 6d 65 20 65 71 75 61 6c 73 20 74 68 65 20 61 74 74 72 69 62 75 | ``.whose.name.equals.the.attribu |
ce9c0 | 74 65 20 76 61 6c 75 65 2e 00 49 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 73 | te.value..If.the.RADIUS.server.s |
ce9e0 | 65 6e 64 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 60 60 46 72 61 6d 65 64 2d 49 50 2d 41 | ends.the.attribute.``Framed-IP-A |
cea00 | 64 64 72 65 73 73 60 60 20 74 68 65 6e 20 74 68 69 73 20 49 50 20 61 64 64 72 65 73 73 20 77 69 | ddress``.then.this.IP.address.wi |
cea20 | 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 20 61 6e | ll.be.allocated.to.the.client.an |
cea40 | 64 20 74 68 65 20 6f 70 74 69 6f 6e 20 60 60 64 65 66 61 75 6c 74 2d 70 6f 6f 6c 60 60 20 77 69 | d.the.option.``default-pool``.wi |
cea60 | 74 68 69 6e 20 74 68 65 20 43 4c 49 20 63 6f 6e 66 69 67 20 69 73 20 62 65 69 6e 67 20 69 67 6e | thin.the.CLI.config.is.being.ign |
cea80 | 6f 72 65 64 2e 00 49 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 73 65 6e 64 73 | ored..If.the.RADIUS.server.sends |
ceaa0 | 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 60 60 46 72 61 6d 65 64 2d 49 50 2d 41 64 64 72 65 | .the.attribute.``Framed-IP-Addre |
ceac0 | 73 73 60 60 20 74 68 65 6e 20 74 68 69 73 20 49 50 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 | ss``.then.this.IP.address.will.b |
ceae0 | 65 20 61 6c 6c 6f 63 61 74 65 64 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 20 61 6e 64 20 74 68 | e.allocated.to.the.client.and.th |
ceb00 | 65 20 6f 70 74 69 6f 6e 20 69 70 2d 70 6f 6f 6c 20 77 69 74 68 69 6e 20 74 68 65 20 43 4c 49 20 | e.option.ip-pool.within.the.CLI. |
ceb20 | 63 6f 6e 66 69 67 20 69 73 20 62 65 69 6e 67 20 69 67 6e 6f 72 65 64 2e 00 49 66 20 74 68 65 20 | config.is.being.ignored..If.the. |
ceb40 | 52 41 44 49 55 53 20 73 65 72 76 65 72 20 73 65 6e 64 73 20 74 68 65 20 61 74 74 72 69 62 75 74 | RADIUS.server.sends.the.attribut |
ceb60 | 65 20 60 60 46 72 61 6d 65 64 2d 50 6f 6f 6c 60 60 2c 20 49 50 20 61 64 64 72 65 73 73 20 77 69 | e.``Framed-Pool``,.IP.address.wi |
ceb80 | 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 20 66 72 6f 6d 20 61 20 70 72 65 64 65 66 69 6e 65 | ll.be.allocated.from.a.predefine |
ceba0 | 64 20 49 50 20 70 6f 6f 6c 20 77 68 6f 73 65 20 6e 61 6d 65 20 65 71 75 61 6c 73 20 74 68 65 20 | d.IP.pool.whose.name.equals.the. |
cebc0 | 61 74 74 72 69 62 75 74 65 20 76 61 6c 75 65 2e 00 49 66 20 74 68 65 20 52 41 44 49 55 53 20 73 | attribute.value..If.the.RADIUS.s |
cebe0 | 65 72 76 65 72 20 73 65 6e 64 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 60 60 53 74 61 74 | erver.sends.the.attribute.``Stat |
cec00 | 65 66 75 6c 2d 49 50 76 36 2d 41 64 64 72 65 73 73 2d 50 6f 6f 6c 60 60 2c 20 49 50 76 36 20 61 | eful-IPv6-Address-Pool``,.IPv6.a |
cec20 | 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 20 66 72 6f 6d 20 61 20 | ddress.will.be.allocated.from.a. |
cec40 | 70 72 65 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 60 60 70 72 65 66 69 78 60 60 20 | predefined.IPv6.pool.``prefix``. |
cec60 | 77 68 6f 73 65 20 6e 61 6d 65 20 65 71 75 61 6c 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 | whose.name.equals.the.attribute. |
cec80 | 76 61 6c 75 65 2e 00 49 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 75 73 65 73 | value..If.the.RADIUS.server.uses |
ceca0 | 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 60 60 4e 41 53 2d 50 6f 72 74 2d 49 64 60 60 2c 20 | .the.attribute.``NAS-Port-Id``,. |
cecc0 | 70 70 70 20 74 75 6e 6e 65 6c 73 20 77 69 6c 6c 20 62 65 20 72 65 6e 61 6d 65 64 2e 00 49 66 20 | ppp.tunnels.will.be.renamed..If. |
cece0 | 74 68 65 20 61 76 65 72 61 67 65 20 71 75 65 75 65 20 73 69 7a 65 20 69 73 20 6c 6f 77 65 72 20 | the.average.queue.size.is.lower. |
ced00 | 74 68 61 6e 20 74 68 65 20 2a 2a 6d 69 6e 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 2c 20 61 6e 20 61 | than.the.**min-threshold**,.an.a |
ced20 | 72 72 69 76 69 6e 67 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 70 6c 61 63 65 64 20 69 6e | rriving.packet.will.be.placed.in |
ced40 | 20 74 68 65 20 71 75 65 75 65 2e 00 49 66 20 74 68 65 20 63 75 72 72 65 6e 74 20 71 75 65 75 65 | .the.queue..If.the.current.queue |
ced60 | 20 73 69 7a 65 20 69 73 20 6c 61 72 67 65 72 20 74 68 61 6e 20 2a 2a 71 75 65 75 65 2d 6c 69 6d | .size.is.larger.than.**queue-lim |
ced80 | 69 74 2a 2a 2c 20 74 68 65 6e 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 62 65 20 64 72 6f 70 70 | it**,.then.packets.will.be.dropp |
ceda0 | 65 64 2e 20 54 68 65 20 61 76 65 72 61 67 65 20 71 75 65 75 65 20 73 69 7a 65 20 64 65 70 65 6e | ed..The.average.queue.size.depen |
cedc0 | 64 73 20 6f 6e 20 69 74 73 20 66 6f 72 6d 65 72 20 61 76 65 72 61 67 65 20 73 69 7a 65 20 61 6e | ds.on.its.former.average.size.an |
cede0 | 64 20 69 74 73 20 63 75 72 72 65 6e 74 20 6f 6e 65 2e 00 49 66 20 74 68 65 20 69 6e 74 65 72 66 | d.its.current.one..If.the.interf |
cee00 | 61 63 65 20 77 68 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 | ace.where.the.packet.was.receive |
cee20 | 64 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c 20 74 68 65 6e 20 70 61 63 6b | d.is.part.of.a.bridge,.then.pack |
cee40 | 65 74 69 73 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 2a 2a 42 72 69 64 67 65 20 4c | etis.processed.at.the.**Bridge.L |
cee60 | 61 79 65 72 2a 2a 2c 20 77 68 69 63 68 20 63 6f 6e 74 61 69 6e 73 20 61 20 62 61 73 69 63 20 73 | ayer**,.which.contains.a.basic.s |
cee80 | 65 74 75 70 20 66 6f 72 20 62 72 69 64 67 65 20 66 69 6c 74 65 72 69 6e 67 3a 00 49 66 20 74 68 | etup.for.bridge.filtering:.If.th |
ceea0 | 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 | e.interface.where.the.packet.was |
ceec0 | 20 72 65 63 65 69 76 65 64 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c 20 74 | .received.is.part.of.a.bridge,.t |
ceee0 | 68 65 6e 20 74 68 65 20 70 61 63 6b 65 74 20 69 73 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 | hen.the.packet.is.processed.at.t |
cef00 | 68 65 20 2a 2a 42 72 69 64 67 65 20 4c 61 79 65 72 2a 2a 2c 20 77 68 69 63 68 20 63 6f 6e 74 61 | he.**Bridge.Layer**,.which.conta |
cef20 | 69 6e 73 20 61 20 62 61 73 69 63 20 73 65 74 75 70 20 66 6f 72 20 62 72 69 64 67 65 20 66 69 6c | ins.a.basic.setup.for.bridge.fil |
cef40 | 74 65 72 69 6e 67 3a 00 49 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 | tering:.If.the.interface.where.t |
cef60 | 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 69 73 6e 27 74 20 70 61 72 | he.packet.was.received.isn't.par |
cef80 | 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c 20 74 68 65 6e 20 70 61 63 6b 65 74 69 73 20 70 72 6f | t.of.a.bridge,.then.packetis.pro |
cefa0 | 63 65 73 73 65 64 20 61 74 20 74 68 65 20 2a 2a 49 50 20 4c 61 79 65 72 2a 2a 3a 00 49 66 20 74 | cessed.at.the.**IP.Layer**:.If.t |
cefc0 | 68 65 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 49 50 76 36 20 74 68 65 6e 20 74 68 65 20 73 6f 75 | he.protocol.is.IPv6.then.the.sou |
cefe0 | 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 65 73 20 61 72 | rce.and.destination.addresses.ar |
cf000 | 65 20 66 69 72 73 74 20 68 61 73 68 65 64 20 75 73 69 6e 67 20 69 70 76 36 5f 61 64 64 72 5f 68 | e.first.hashed.using.ipv6_addr_h |
cf020 | 61 73 68 2e 00 49 66 20 74 68 65 20 73 74 61 74 69 63 61 6c 6c 79 20 6d 61 70 70 65 64 20 70 65 | ash..If.the.statically.mapped.pe |
cf040 | 65 72 20 69 73 20 72 75 6e 6e 69 6e 67 20 43 69 73 63 6f 20 49 4f 53 2c 20 73 70 65 63 69 66 79 | er.is.running.Cisco.IOS,.specify |
cf060 | 20 74 68 65 20 63 69 73 63 6f 20 6b 65 79 77 6f 72 64 2e 20 49 74 20 69 73 20 75 73 65 64 20 74 | .the.cisco.keyword..It.is.used.t |
cf080 | 6f 20 66 69 78 20 73 74 61 74 69 63 61 6c 6c 79 20 74 68 65 20 52 65 67 69 73 74 72 61 74 69 6f | o.fix.statically.the.Registratio |
cf0a0 | 6e 20 52 65 71 75 65 73 74 20 49 44 20 73 6f 20 74 68 61 74 20 61 20 6d 61 74 63 68 69 6e 67 20 | n.Request.ID.so.that.a.matching. |
cf0c0 | 50 75 72 67 65 20 52 65 71 75 65 73 74 20 63 61 6e 20 62 65 20 73 65 6e 74 20 69 66 20 4e 42 4d | Purge.Request.can.be.sent.if.NBM |
cf0e0 | 41 20 61 64 64 72 65 73 73 20 68 61 73 20 63 68 61 6e 67 65 64 2e 20 54 68 69 73 20 69 73 20 74 | A.address.has.changed..This.is.t |
cf100 | 6f 20 77 6f 72 6b 20 61 72 6f 75 6e 64 20 62 72 6f 6b 65 6e 20 49 4f 53 20 77 68 69 63 68 20 72 | o.work.around.broken.IOS.which.r |
cf120 | 65 71 75 69 72 65 73 20 50 75 72 67 65 20 52 65 71 75 65 73 74 20 49 44 20 74 6f 20 6d 61 74 63 | equires.Purge.Request.ID.to.matc |
cf140 | 68 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 52 65 67 69 73 74 72 61 74 69 6f 6e 20 52 65 71 75 | h.the.original.Registration.Requ |
cf160 | 65 73 74 20 49 44 2e 00 49 66 20 74 68 65 20 73 79 73 74 65 6d 20 64 65 74 65 63 74 73 20 61 6e | est.ID..If.the.system.detects.an |
cf180 | 20 75 6e 63 6f 6e 66 69 67 75 72 65 64 20 77 69 72 65 6c 65 73 73 20 64 65 76 69 63 65 2c 20 69 | .unconfigured.wireless.device,.i |
cf1a0 | 74 20 77 69 6c 6c 20 62 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 64 64 65 64 20 74 68 | t.will.be.automatically.added.th |
cf1c0 | 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 72 65 65 2c 20 73 70 65 63 69 66 79 69 6e 67 | e.configuration.tree,.specifying |
cf1e0 | 20 61 6e 79 20 64 65 74 65 63 74 65 64 20 73 65 74 74 69 6e 67 73 20 28 66 6f 72 20 65 78 61 6d | .any.detected.settings.(for.exam |
cf200 | 70 6c 65 2c 20 69 74 73 20 4d 41 43 20 61 64 64 72 65 73 73 29 20 61 6e 64 20 63 6f 6e 66 69 67 | ple,.its.MAC.address).and.config |
cf220 | 75 72 65 64 20 74 6f 20 72 75 6e 20 69 6e 20 6d 6f 6e 69 74 6f 72 20 6d 6f 64 65 2e 00 49 66 20 | ured.to.run.in.monitor.mode..If. |
cf240 | 74 68 65 20 74 61 62 6c 65 20 69 73 20 65 6d 70 74 79 20 61 6e 64 20 79 6f 75 20 68 61 76 65 20 | the.table.is.empty.and.you.have. |
cf260 | 61 20 77 61 72 6e 69 6e 67 20 6d 65 73 73 61 67 65 2c 20 69 74 20 6d 65 61 6e 73 20 63 6f 6e 6e | a.warning.message,.it.means.conn |
cf280 | 74 72 61 63 6b 20 69 73 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 20 54 6f 20 65 6e 61 62 6c 65 20 | track.is.not.enabled..To.enable. |
cf2a0 | 63 6f 6e 6e 74 72 61 63 6b 2c 20 6a 75 73 74 20 63 72 65 61 74 65 20 61 20 4e 41 54 20 6f 72 20 | conntrack,.just.create.a.NAT.or. |
cf2c0 | 61 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 2e 20 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 66 69 | a.firewall.rule..:cfgcmd:`set.fi |
cf2e0 | 72 65 77 61 6c 6c 20 73 74 61 74 65 2d 70 6f 6c 69 63 79 20 65 73 74 61 62 6c 69 73 68 65 64 20 | rewall.state-policy.established. |
cf300 | 61 63 74 69 6f 6e 20 61 63 63 65 70 74 60 00 49 66 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 66 | action.accept`.If.there.are.no.f |
cf320 | 72 65 65 20 61 64 64 72 65 73 73 65 73 20 62 75 74 20 74 68 65 72 65 20 61 72 65 20 61 62 61 6e | ree.addresses.but.there.are.aban |
cf340 | 64 6f 6e 65 64 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 74 68 65 20 44 48 43 50 20 73 65 72 | doned.IP.addresses,.the.DHCP.ser |
cf360 | 76 65 72 20 77 69 6c 6c 20 61 74 74 65 6d 70 74 20 74 6f 20 72 65 63 6c 61 69 6d 20 61 6e 20 61 | ver.will.attempt.to.reclaim.an.a |
cf380 | 62 61 6e 64 6f 6e 65 64 20 49 50 20 61 64 64 72 65 73 73 20 72 65 67 61 72 64 6c 65 73 73 20 6f | bandoned.IP.address.regardless.o |
cf3a0 | 66 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 61 62 61 6e 64 6f 6e 2d 6c 65 61 73 65 2d 74 69 6d | f.the.value.of.abandon-lease-tim |
cf3c0 | 65 2e 00 49 66 20 74 68 65 72 65 20 69 73 20 53 4e 41 54 20 72 75 6c 65 73 20 6f 6e 20 65 74 68 | e..If.there.is.SNAT.rules.on.eth |
cf3e0 | 31 2c 20 6e 65 65 64 20 74 6f 20 61 64 64 20 65 78 63 6c 75 64 65 20 72 75 6c 65 00 49 66 20 74 | 1,.need.to.add.exclude.rule.If.t |
cf400 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 69 6e 76 6f 6b 65 64 20 66 72 6f 6d 20 63 6f 6e 66 | his.command.is.invoked.from.conf |
cf420 | 69 67 75 72 65 20 6d 6f 64 65 20 77 69 74 68 20 74 68 65 20 60 60 72 75 6e 60 60 20 70 72 65 66 | igure.mode.with.the.``run``.pref |
cf440 | 69 78 20 74 68 65 20 6b 65 79 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 69 6e 73 74 | ix.the.key.is.automatically.inst |
cf460 | 61 6c 6c 65 64 20 74 6f 20 74 68 65 20 61 70 70 72 6f 70 72 69 61 74 65 20 69 6e 74 65 72 66 61 | alled.to.the.appropriate.interfa |
cf480 | 63 65 3a 00 49 66 20 74 68 69 73 20 69 73 20 73 65 74 20 74 68 65 20 72 65 6c 61 79 20 61 67 65 | ce:.If.this.is.set.the.relay.age |
cf4a0 | 6e 74 20 77 69 6c 6c 20 69 6e 73 65 72 74 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 49 44 2e | nt.will.insert.the.interface.ID. |
cf4c0 | 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 73 65 74 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c | .This.option.is.set.automaticall |
cf4e0 | 79 20 69 66 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 6c 69 73 74 65 6e 69 6e 67 20 69 6e 74 | y.if.more.than.one.listening.int |
cf500 | 65 72 66 61 63 65 73 20 61 72 65 20 69 6e 20 75 73 65 2e 00 49 66 20 74 68 69 73 20 6f 70 74 69 | erfaces.are.in.use..If.this.opti |
cf520 | 6f 6e 20 69 73 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 6e 20 74 68 65 20 61 6c 72 65 61 64 79 2d | on.is.enabled,.then.the.already- |
cf540 | 73 65 6c 65 63 74 65 64 20 63 68 65 63 6b 2c 20 77 68 65 72 65 20 61 6c 72 65 61 64 79 20 73 65 | selected.check,.where.already.se |
cf560 | 6c 65 63 74 65 64 20 65 42 47 50 20 72 6f 75 74 65 73 20 61 72 65 20 70 72 65 66 65 72 72 65 64 | lected.eBGP.routes.are.preferred |
cf580 | 2c 20 69 73 20 73 6b 69 70 70 65 64 2e 00 49 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 | ,.is.skipped..If.this.option.is. |
cf5a0 | 73 70 65 63 69 66 69 65 64 20 61 6e 64 20 69 73 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 30 2c | specified.and.is.greater.than.0, |
cf5c0 | 20 74 68 65 6e 20 74 68 65 20 50 50 50 20 6d 6f 64 75 6c 65 20 77 69 6c 6c 20 73 65 6e 64 20 4c | .then.the.PPP.module.will.send.L |
cf5e0 | 43 50 20 70 69 6e 67 73 20 6f 66 20 74 68 65 20 65 63 68 6f 20 72 65 71 75 65 73 74 20 65 76 65 | CP.pings.of.the.echo.request.eve |
cf600 | 72 79 20 60 3c 69 6e 74 65 72 76 61 6c 3e 60 20 73 65 63 6f 6e 64 73 2e 00 49 66 20 74 68 69 73 | ry.`<interval>`.seconds..If.this |
cf620 | 20 6f 70 74 69 6f 6e 20 69 73 20 73 70 65 63 69 66 69 65 64 20 61 6e 64 20 69 73 20 67 72 65 61 | .option.is.specified.and.is.grea |
cf640 | 74 65 72 20 74 68 61 6e 20 30 2c 20 74 68 65 6e 20 74 68 65 20 50 50 50 20 6d 6f 64 75 6c 65 20 | ter.than.0,.then.the.PPP.module. |
cf660 | 77 69 6c 6c 20 73 65 6e 64 20 4c 43 50 20 70 69 6e 67 73 20 6f 66 20 74 68 65 20 65 63 68 6f 20 | will.send.LCP.pings.of.the.echo. |
cf680 | 72 65 71 75 65 73 74 20 65 76 65 72 79 20 60 3c 69 6e 74 65 72 76 61 6c 3e 60 20 73 65 63 6f 6e | request.every.`<interval>`.secon |
cf6a0 | 64 73 2e 20 44 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 2a 2a 33 30 2a 2a 2e 00 49 66 20 | ds..Default.value.is.**30**..If. |
cf6c0 | 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 75 6e 73 65 74 20 28 64 65 66 61 75 6c 74 29 2c 20 | this.option.is.unset.(default),. |
cf6e0 | 69 6e 63 6f 6d 69 6e 67 20 49 50 20 64 69 72 65 63 74 65 64 20 62 72 6f 61 64 63 61 73 74 20 70 | incoming.IP.directed.broadcast.p |
cf700 | 61 63 6b 65 74 73 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 66 6f 72 77 61 72 64 65 64 2e 00 49 66 | ackets.will.not.be.forwarded..If |
cf720 | 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 75 6e 73 65 74 20 28 64 65 66 61 75 6c 74 29 2c | .this.option.is.unset.(default), |
cf740 | 20 72 65 70 6c 79 20 66 6f 72 20 61 6e 79 20 6c 6f 63 61 6c 20 74 61 72 67 65 74 20 49 50 20 61 | .reply.for.any.local.target.IP.a |
cf760 | 64 64 72 65 73 73 2c 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 6e 79 20 69 6e 74 65 72 66 | ddress,.configured.on.any.interf |
cf780 | 61 63 65 2e 00 49 66 20 74 68 69 73 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 6e 6f 74 20 73 65 | ace..If.this.parameter.is.not.se |
cf7a0 | 74 20 6f 72 20 30 2c 20 61 6e 20 6f 6e 2d 64 65 6d 61 6e 64 20 6c 69 6e 6b 20 77 69 6c 6c 20 6e | t.or.0,.an.on-demand.link.will.n |
cf7c0 | 6f 74 20 62 65 20 74 61 6b 65 6e 20 64 6f 77 6e 20 77 68 65 6e 20 69 74 20 69 73 20 69 64 6c 65 | ot.be.taken.down.when.it.is.idle |
cf7e0 | 20 61 6e 64 20 61 66 74 65 72 20 74 68 65 20 69 6e 69 74 69 61 6c 20 65 73 74 61 62 6c 69 73 68 | .and.after.the.initial.establish |
cf800 | 6d 65 6e 74 20 6f 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 49 74 20 77 69 6c 6c 20 | ment.of.the.connection..It.will. |
cf820 | 73 74 61 79 20 75 70 20 66 6f 72 65 76 65 72 2e 00 49 66 20 74 68 69 73 20 70 61 72 61 6d 65 74 | stay.up.forever..If.this.paramet |
cf840 | 65 72 20 69 73 20 6e 6f 74 20 73 65 74 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 68 6f 6c 64 6f | er.is.not.set,.the.default.holdo |
cf860 | 66 66 20 74 69 6d 65 20 69 73 20 33 30 20 73 65 63 6f 6e 64 73 2e 00 49 66 20 75 6e 73 65 74 2c | ff.time.is.30.seconds..If.unset, |
cf880 | 20 69 6e 63 6f 6d 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 52 41 44 | .incoming.connections.to.the.RAD |
cf8a0 | 49 55 53 20 73 65 72 76 65 72 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 6e 65 61 72 65 73 74 20 | IUS.server.will.use.the.nearest. |
cf8c0 | 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 65 73 73 20 70 6f 69 6e 74 69 6e 67 20 74 6f 77 61 72 | interface.address.pointing.towar |
cf8e0 | 64 73 20 74 68 65 20 73 65 72 76 65 72 20 2d 20 6d 61 6b 69 6e 67 20 69 74 20 65 72 72 6f 72 20 | ds.the.server.-.making.it.error. |
cf900 | 70 72 6f 6e 65 20 6f 6e 20 65 2e 67 2e 20 4f 53 50 46 20 6e 65 74 77 6f 72 6b 73 20 77 68 65 6e | prone.on.e.g..OSPF.networks.when |
cf920 | 20 61 20 6c 69 6e 6b 20 66 61 69 6c 73 20 61 6e 64 20 61 20 62 61 63 6b 75 70 20 72 6f 75 74 65 | .a.link.fails.and.a.backup.route |
cf940 | 20 69 73 20 74 61 6b 65 6e 2e 00 49 66 20 75 6e 73 65 74 2c 20 69 6e 63 6f 6d 69 6e 67 20 63 6f | .is.taken..If.unset,.incoming.co |
cf960 | 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 54 41 43 41 43 53 20 73 65 72 76 65 72 20 77 | nnections.to.the.TACACS.server.w |
cf980 | 69 6c 6c 20 75 73 65 20 74 68 65 20 6e 65 61 72 65 73 74 20 69 6e 74 65 72 66 61 63 65 20 61 64 | ill.use.the.nearest.interface.ad |
cf9a0 | 64 72 65 73 73 20 70 6f 69 6e 74 69 6e 67 20 74 6f 77 61 72 64 73 20 74 68 65 20 73 65 72 76 65 | dress.pointing.towards.the.serve |
cf9c0 | 72 20 2d 20 6d 61 6b 69 6e 67 20 69 74 20 65 72 72 6f 72 20 70 72 6f 6e 65 20 6f 6e 20 65 2e 67 | r.-.making.it.error.prone.on.e.g |
cf9e0 | 2e 20 4f 53 50 46 20 6e 65 74 77 6f 72 6b 73 20 77 68 65 6e 20 61 20 6c 69 6e 6b 20 66 61 69 6c | ..OSPF.networks.when.a.link.fail |
cfa00 | 73 20 61 6e 64 20 61 20 62 61 63 6b 75 70 20 72 6f 75 74 65 20 69 73 20 74 61 6b 65 6e 2e 00 49 | s.and.a.backup.route.is.taken..I |
cfa20 | 66 20 79 6f 75 20 61 70 70 6c 79 20 61 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 61 6e 20 69 6e | f.you.apply.a.parameter.to.an.in |
cfa40 | 64 69 76 69 64 75 61 6c 20 6e 65 69 67 68 62 6f 72 20 49 50 20 61 64 64 72 65 73 73 2c 20 79 6f | dividual.neighbor.IP.address,.yo |
cfa60 | 75 20 6f 76 65 72 72 69 64 65 20 74 68 65 20 61 63 74 69 6f 6e 20 64 65 66 69 6e 65 64 20 66 6f | u.override.the.action.defined.fo |
cfa80 | 72 20 61 20 70 65 65 72 20 67 72 6f 75 70 20 74 68 61 74 20 69 6e 63 6c 75 64 65 73 20 74 68 61 | r.a.peer.group.that.includes.tha |
cfaa0 | 74 20 49 50 20 61 64 64 72 65 73 73 2e 00 49 66 20 79 6f 75 20 61 72 65 20 61 20 68 61 63 6b 65 | t.IP.address..If.you.are.a.hacke |
cfac0 | 72 20 6f 72 20 77 61 6e 74 20 74 6f 20 74 72 79 20 6f 6e 20 79 6f 75 72 20 6f 77 6e 20 77 65 20 | r.or.want.to.try.on.your.own.we. |
cfae0 | 73 75 70 70 6f 72 74 20 70 61 73 73 69 6e 67 20 72 61 77 20 4f 70 65 6e 56 50 4e 20 6f 70 74 69 | support.passing.raw.OpenVPN.opti |
cfb00 | 6f 6e 73 20 74 6f 20 4f 70 65 6e 56 50 4e 2e 00 49 66 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 | ons.to.OpenVPN..If.you.are.confi |
cfb20 | 67 75 72 69 6e 67 20 61 20 56 52 46 20 66 6f 72 20 6d 61 6e 61 67 65 6d 65 6e 74 20 70 75 72 70 | guring.a.VRF.for.management.purp |
cfb40 | 6f 73 65 73 2c 20 74 68 65 72 65 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 6e 6f 20 77 61 79 20 | oses,.there.is.currently.no.way. |
cfb60 | 74 6f 20 66 6f 72 63 65 20 73 79 73 74 65 6d 20 44 4e 53 20 74 72 61 66 66 69 63 20 76 69 61 20 | to.force.system.DNS.traffic.via. |
cfb80 | 61 20 73 70 65 63 69 66 69 63 20 56 52 46 2e 00 49 66 20 79 6f 75 20 61 72 65 20 6e 65 77 20 74 | a.specific.VRF..If.you.are.new.t |
cfba0 | 6f 20 74 68 65 73 65 20 72 6f 75 74 69 6e 67 20 73 65 63 75 72 69 74 79 20 74 65 63 68 6e 6f 6c | o.these.routing.security.technol |
cfbc0 | 6f 67 69 65 73 20 74 68 65 6e 20 74 68 65 72 65 20 69 73 20 61 6e 20 60 65 78 63 65 6c 6c 65 6e | ogies.then.there.is.an.`excellen |
cfbe0 | 74 20 67 75 69 64 65 20 74 6f 20 52 50 4b 49 60 5f 20 62 79 20 4e 4c 6e 65 74 20 4c 61 62 73 20 | t.guide.to.RPKI`_.by.NLnet.Labs. |
cfc00 | 77 68 69 63 68 20 77 69 6c 6c 20 67 65 74 20 79 6f 75 20 75 70 20 74 6f 20 73 70 65 65 64 20 76 | which.will.get.you.up.to.speed.v |
cfc20 | 65 72 79 20 71 75 69 63 6b 6c 79 2e 20 54 68 65 69 72 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e | ery.quickly..Their.documentation |
cfc40 | 20 65 78 70 6c 61 69 6e 73 20 65 76 65 72 79 74 68 69 6e 67 20 66 72 6f 6d 20 77 68 61 74 20 52 | .explains.everything.from.what.R |
cfc60 | 50 4b 49 20 69 73 20 74 6f 20 64 65 70 6c 6f 79 69 6e 67 20 69 74 20 69 6e 20 70 72 6f 64 75 63 | PKI.is.to.deploying.it.in.produc |
cfc80 | 74 69 6f 6e 2e 20 49 74 20 61 6c 73 6f 20 68 61 73 20 73 6f 6d 65 20 60 68 65 6c 70 20 61 6e 64 | tion..It.also.has.some.`help.and |
cfca0 | 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 67 75 69 64 61 6e 63 65 60 5f 20 69 6e 63 6c 75 64 69 6e | .operational.guidance`_.includin |
cfcc0 | 67 20 22 57 68 61 74 20 63 61 6e 20 49 20 64 6f 20 61 62 6f 75 74 20 6d 79 20 72 6f 75 74 65 20 | g."What.can.I.do.about.my.route. |
cfce0 | 68 61 76 69 6e 67 20 61 6e 20 49 6e 76 61 6c 69 64 20 73 74 61 74 65 3f 22 00 49 66 20 79 6f 75 | having.an.Invalid.state?".If.you |
cfd00 | 20 61 72 65 20 72 65 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 74 68 65 20 67 6c 6f 62 61 6c 20 | .are.responsible.for.the.global. |
cfd20 | 61 64 64 72 65 73 73 65 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 79 6f 75 72 20 6e 65 74 77 6f | addresses.assigned.to.your.netwo |
cfd40 | 72 6b 2c 20 70 6c 65 61 73 65 20 6d 61 6b 65 20 73 75 72 65 20 74 68 61 74 20 79 6f 75 72 20 70 | rk,.please.make.sure.that.your.p |
cfd60 | 72 65 66 69 78 65 73 20 68 61 76 65 20 52 4f 41 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 | refixes.have.ROAs.associated.wit |
cfd80 | 68 20 74 68 65 6d 20 74 6f 20 61 76 6f 69 64 20 62 65 69 6e 67 20 60 6e 6f 74 66 6f 75 6e 64 60 | h.them.to.avoid.being.`notfound` |
cfda0 | 20 62 79 20 52 50 4b 49 2e 20 46 6f 72 20 6d 6f 73 74 20 41 53 4e 73 20 74 68 69 73 20 77 69 6c | .by.RPKI..For.most.ASNs.this.wil |
cfdc0 | 6c 20 69 6e 76 6f 6c 76 65 20 70 75 62 6c 69 73 68 69 6e 67 20 52 4f 41 73 20 76 69 61 20 79 6f | l.involve.publishing.ROAs.via.yo |
cfde0 | 75 72 20 3a 61 62 62 72 3a 60 52 49 52 20 28 52 65 67 69 6f 6e 61 6c 20 49 6e 74 65 72 6e 65 74 | ur.:abbr:`RIR.(Regional.Internet |
cfe00 | 20 52 65 67 69 73 74 72 79 29 60 20 28 52 49 50 45 20 4e 43 43 2c 20 41 50 4e 49 43 2c 20 41 52 | .Registry)`.(RIPE.NCC,.APNIC,.AR |
cfe20 | 49 4e 2c 20 4c 41 43 4e 49 43 20 6f 72 20 41 46 52 49 4e 49 43 29 2c 20 61 6e 64 20 69 73 20 73 | IN,.LACNIC.or.AFRINIC),.and.is.s |
cfe40 | 6f 6d 65 74 68 69 6e 67 20 79 6f 75 20 61 72 65 20 65 6e 63 6f 75 72 61 67 65 64 20 74 6f 20 64 | omething.you.are.encouraged.to.d |
cfe60 | 6f 20 77 68 65 6e 65 76 65 72 20 79 6f 75 20 70 6c 61 6e 20 74 6f 20 61 6e 6e 6f 75 6e 63 65 20 | o.whenever.you.plan.to.announce. |
cfe80 | 61 64 64 72 65 73 73 65 73 20 69 6e 74 6f 20 74 68 65 20 44 46 5a 2e 00 49 66 20 79 6f 75 20 61 | addresses.into.the.DFZ..If.you.a |
cfea0 | 72 65 20 75 73 69 6e 67 20 46 51 2d 43 6f 44 65 6c 20 65 6d 62 65 64 64 65 64 20 69 6e 74 6f 20 | re.using.FQ-CoDel.embedded.into. |
cfec0 | 53 68 61 70 65 72 5f 20 61 6e 64 20 79 6f 75 20 68 61 76 65 20 6c 61 72 67 65 20 72 61 74 65 73 | Shaper_.and.you.have.large.rates |
cfee0 | 20 28 31 30 30 4d 62 69 74 20 61 6e 64 20 61 62 6f 76 65 29 2c 20 79 6f 75 20 6d 61 79 20 63 6f | .(100Mbit.and.above),.you.may.co |
cff00 | 6e 73 69 64 65 72 20 69 6e 63 72 65 61 73 69 6e 67 20 60 71 75 61 6e 74 75 6d 60 20 74 6f 20 38 | nsider.increasing.`quantum`.to.8 |
cff20 | 30 30 30 20 6f 72 20 68 69 67 68 65 72 20 73 6f 20 74 68 61 74 20 74 68 65 20 73 63 68 65 64 75 | 000.or.higher.so.that.the.schedu |
cff40 | 6c 65 72 20 73 61 76 65 73 20 43 50 55 2e 00 49 66 20 79 6f 75 20 61 72 65 20 75 73 69 6e 67 20 | ler.saves.CPU..If.you.are.using. |
cff60 | 4f 53 50 46 20 61 73 20 49 47 50 2c 20 61 6c 77 61 79 73 20 74 68 65 20 63 6c 6f 73 65 73 74 20 | OSPF.as.IGP,.always.the.closest. |
cff80 | 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 52 41 44 49 55 | interface.connected.to.the.RADIU |
cffa0 | 53 20 73 65 72 76 65 72 20 69 73 20 75 73 65 64 2e 20 57 69 74 68 20 56 79 4f 53 20 31 2e 32 20 | S.server.is.used..With.VyOS.1.2. |
cffc0 | 79 6f 75 20 63 61 6e 20 62 69 6e 64 20 61 6c 6c 20 6f 75 74 67 6f 69 6e 67 20 52 41 44 49 55 53 | you.can.bind.all.outgoing.RADIUS |
cffe0 | 20 72 65 71 75 65 73 74 73 20 74 6f 20 61 20 73 69 6e 67 6c 65 20 73 6f 75 72 63 65 20 49 50 20 | .requests.to.a.single.source.IP. |
d0000 | 65 2e 67 2e 20 74 68 65 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 2e 00 49 66 20 | e.g..the.loopback.interface..If. |
d0020 | 79 6f 75 20 61 72 65 20 75 73 69 6e 67 20 4f 53 50 46 20 61 73 20 49 47 50 2c 20 61 6c 77 61 79 | you.are.using.OSPF.as.IGP,.alway |
d0040 | 73 20 74 68 65 20 63 6c 6f 73 65 73 74 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 6e 65 63 74 65 | s.the.closest.interface.connecte |
d0060 | 64 20 74 6f 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 69 73 20 75 73 65 64 2e 20 | d.to.the.RADIUS.server.is.used.. |
d0080 | 59 6f 75 20 63 61 6e 20 62 69 6e 64 20 61 6c 6c 20 6f 75 74 67 6f 69 6e 67 20 52 41 44 49 55 53 | You.can.bind.all.outgoing.RADIUS |
d00a0 | 20 72 65 71 75 65 73 74 73 20 74 6f 20 61 20 73 69 6e 67 6c 65 20 73 6f 75 72 63 65 20 49 50 20 | .requests.to.a.single.source.IP. |
d00c0 | 65 2e 67 2e 20 74 68 65 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 2e 00 49 66 20 | e.g..the.loopback.interface..If. |
d00e0 | 79 6f 75 20 63 68 61 6e 67 65 20 74 68 65 20 64 65 66 61 75 6c 74 20 65 6e 63 72 79 70 74 69 6f | you.change.the.default.encryptio |
d0100 | 6e 20 61 6e 64 20 68 61 73 68 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 73 2c 20 62 65 20 73 75 72 | n.and.hashing.algorithms,.be.sur |
d0120 | 65 20 74 68 61 74 20 74 68 65 20 6c 6f 63 61 6c 20 61 6e 64 20 72 65 6d 6f 74 65 20 65 6e 64 73 | e.that.the.local.and.remote.ends |
d0140 | 20 68 61 76 65 20 6d 61 74 63 68 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 2c 20 6f | .have.matching.configurations,.o |
d0160 | 74 68 65 72 77 69 73 65 20 74 68 65 20 74 75 6e 6e 65 6c 20 77 69 6c 6c 20 6e 6f 74 20 63 6f 6d | therwise.the.tunnel.will.not.com |
d0180 | 65 20 75 70 2e 00 49 66 20 79 6f 75 20 63 68 6f 6f 73 65 20 61 6e 79 20 61 73 20 74 68 65 20 6f | e.up..If.you.choose.any.as.the.o |
d01a0 | 70 74 69 6f 6e 20 74 68 61 74 20 77 69 6c 6c 20 63 61 75 73 65 20 61 6c 6c 20 70 72 6f 74 6f 63 | ption.that.will.cause.all.protoc |
d01c0 | 6f 6c 73 20 74 68 61 74 20 61 72 65 20 73 65 6e 64 69 6e 67 20 72 6f 75 74 65 73 20 74 6f 20 7a | ols.that.are.sending.routes.to.z |
d01e0 | 65 62 72 61 2e 00 49 66 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 20 61 20 63 6c 61 73 73 20 66 | ebra..If.you.configure.a.class.f |
d0200 | 6f 72 20 2a 2a 56 6f 49 50 20 74 72 61 66 66 69 63 2a 2a 2c 20 64 6f 6e 27 74 20 67 69 76 65 20 | or.**VoIP.traffic**,.don't.give. |
d0220 | 69 74 20 61 6e 79 20 2a 63 65 69 6c 69 6e 67 2a 2c 20 6f 74 68 65 72 77 69 73 65 20 6e 65 77 20 | it.any.*ceiling*,.otherwise.new. |
d0240 | 56 6f 49 50 20 63 61 6c 6c 73 20 63 6f 75 6c 64 20 73 74 61 72 74 20 77 68 65 6e 20 74 68 65 20 | VoIP.calls.could.start.when.the. |
d0260 | 6c 69 6e 6b 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 61 6e 64 20 67 65 74 20 73 75 64 64 65 6e | link.is.available.and.get.sudden |
d0280 | 6c 79 20 64 72 6f 70 70 65 64 20 77 68 65 6e 20 6f 74 68 65 72 20 63 6c 61 73 73 65 73 20 73 74 | ly.dropped.when.other.classes.st |
d02a0 | 61 72 74 20 75 73 69 6e 67 20 74 68 65 69 72 20 61 73 73 69 67 6e 65 64 20 2a 62 61 6e 64 77 69 | art.using.their.assigned.*bandwi |
d02c0 | 64 74 68 2a 20 73 68 61 72 65 2e 00 49 66 20 79 6f 75 20 65 6e 61 62 6c 65 20 74 68 69 73 2c 20 | dth*.share..If.you.enable.this,. |
d02e0 | 79 6f 75 20 77 69 6c 6c 20 70 72 6f 62 61 62 6c 79 20 77 61 6e 74 20 74 6f 20 73 65 74 20 64 69 | you.will.probably.want.to.set.di |
d0300 | 76 65 72 73 69 74 79 2d 66 61 63 74 6f 72 20 61 6e 64 20 63 68 61 6e 6e 65 6c 20 62 65 6c 6f 77 | versity-factor.and.channel.below |
d0320 | 2e 00 49 66 20 79 6f 75 20 65 6e 74 65 72 20 61 20 76 61 6c 75 65 20 73 6d 61 6c 6c 65 72 20 74 | ..If.you.enter.a.value.smaller.t |
d0340 | 68 61 6e 20 36 30 20 73 65 63 6f 6e 64 73 20 62 65 20 61 77 61 72 65 20 74 68 61 74 20 74 68 69 | han.60.seconds.be.aware.that.thi |
d0360 | 73 20 63 61 6e 20 61 6e 64 20 77 69 6c 6c 20 61 66 66 65 63 74 20 63 6f 6e 76 65 72 67 65 6e 63 | s.can.and.will.affect.convergenc |
d0380 | 65 20 61 74 20 73 63 61 6c 65 2e 00 49 66 20 79 6f 75 20 66 65 65 6c 20 62 65 74 74 65 72 20 66 | e.at.scale..If.you.feel.better.f |
d03a0 | 6f 72 77 61 72 64 69 6e 67 20 61 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 72 65 71 | orwarding.all.authentication.req |
d03c0 | 75 65 73 74 73 20 74 6f 20 79 6f 75 72 20 65 6e 74 65 72 70 72 69 73 65 73 20 52 41 44 49 55 53 | uests.to.your.enterprises.RADIUS |
d03e0 | 20 73 65 72 76 65 72 2c 20 75 73 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 73 20 62 65 6c 6f 77 2e | .server,.use.the.commands.below. |
d0400 | 00 49 66 20 79 6f 75 20 68 61 70 70 65 6e 20 74 6f 20 72 75 6e 20 74 68 69 73 20 69 6e 20 61 20 | .If.you.happen.to.run.this.in.a. |
d0420 | 76 69 72 74 75 61 6c 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 6c 69 6b 65 20 62 79 20 45 56 45 2d | virtual.environment.like.by.EVE- |
d0440 | 4e 47 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 65 6e 73 75 72 65 20 79 6f 75 72 20 56 79 4f 53 20 | NG.you.need.to.ensure.your.VyOS. |
d0460 | 4e 49 43 20 69 73 20 73 65 74 20 74 6f 20 75 73 65 20 74 68 65 20 65 31 30 30 30 20 64 72 69 76 | NIC.is.set.to.use.the.e1000.driv |
d0480 | 65 72 2e 20 55 73 69 6e 67 20 74 68 65 20 64 65 66 61 75 6c 74 20 60 60 76 69 72 74 69 6f 2d 6e | er..Using.the.default.``virtio-n |
d04a0 | 65 74 2d 70 63 69 60 60 20 6f 72 20 74 68 65 20 60 60 76 6d 78 6e 65 74 33 60 60 20 64 72 69 76 | et-pci``.or.the.``vmxnet3``.driv |
d04c0 | 65 72 20 77 69 6c 6c 20 6e 6f 74 20 77 6f 72 6b 2e 20 49 43 4d 50 20 6d 65 73 73 61 67 65 73 20 | er.will.not.work..ICMP.messages. |
d04e0 | 77 69 6c 6c 20 6e 6f 74 20 62 65 20 70 72 6f 70 65 72 6c 79 20 70 72 6f 63 65 73 73 65 64 2e 20 | will.not.be.properly.processed.. |
d0500 | 54 68 65 79 20 61 72 65 20 76 69 73 69 62 6c 65 20 6f 6e 20 74 68 65 20 76 69 72 74 75 61 6c 20 | They.are.visible.on.the.virtual. |
d0520 | 77 69 72 65 20 62 75 74 20 77 69 6c 6c 20 6e 6f 74 20 6d 61 6b 65 20 69 74 20 66 75 6c 6c 79 20 | wire.but.will.not.make.it.fully. |
d0540 | 75 70 20 74 68 65 20 6e 65 74 77 6f 72 6b 69 6e 67 20 73 74 61 63 6b 2e 00 49 66 20 79 6f 75 20 | up.the.networking.stack..If.you. |
d0560 | 68 61 70 70 65 6e 20 74 6f 20 75 73 65 20 53 6f 6c 61 72 57 69 6e 64 73 20 4f 72 69 6f 6e 20 61 | happen.to.use.SolarWinds.Orion.a |
d0580 | 73 20 4e 4d 53 20 79 6f 75 20 63 61 6e 20 61 6c 73 6f 20 75 73 65 20 74 68 65 20 44 65 76 69 63 | s.NMS.you.can.also.use.the.Devic |
d05a0 | 65 20 54 65 6d 70 6c 61 74 65 73 20 4d 61 6e 61 67 65 6d 65 6e 74 2e 20 41 20 74 65 6d 70 6c 61 | e.Templates.Management..A.templa |
d05c0 | 74 65 20 66 6f 72 20 56 79 4f 53 20 63 61 6e 20 62 65 20 65 61 73 69 6c 79 20 69 6d 70 6f 72 74 | te.for.VyOS.can.be.easily.import |
d05e0 | 65 64 2e 00 49 66 20 79 6f 75 20 68 61 70 70 65 6e 65 64 20 74 6f 20 75 73 65 20 61 20 43 69 73 | ed..If.you.happened.to.use.a.Cis |
d0600 | 63 6f 20 4e 4d 2d 31 36 41 20 2d 20 53 69 78 74 65 65 6e 20 50 6f 72 74 20 41 73 79 6e 63 20 4e | co.NM-16A.-.Sixteen.Port.Async.N |
d0620 | 65 74 77 6f 72 6b 20 4d 6f 64 75 6c 65 20 6f 72 20 4e 4d 2d 33 32 41 20 2d 20 54 68 69 72 74 79 | etwork.Module.or.NM-32A.-.Thirty |
d0640 | 2d 74 77 6f 20 50 6f 72 74 20 41 73 79 6e 63 20 4e 65 74 77 6f 72 6b 20 4d 6f 64 75 6c 65 20 2d | -two.Port.Async.Network.Module.- |
d0660 | 20 74 68 69 73 20 69 73 20 79 6f 75 72 20 56 79 4f 53 20 72 65 70 6c 61 63 65 6d 65 6e 74 2e 00 | .this.is.your.VyOS.replacement.. |
d0680 | 49 66 20 79 6f 75 20 68 61 76 65 20 61 20 6c 6f 74 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 2c | If.you.have.a.lot.of.interfaces, |
d06a0 | 20 61 6e 64 2f 6f 72 20 61 20 6c 6f 74 20 6f 66 20 73 75 62 6e 65 74 73 2c 20 74 68 65 6e 20 65 | .and/or.a.lot.of.subnets,.then.e |
d06c0 | 6e 61 62 6c 69 6e 67 20 4f 53 50 46 20 76 69 61 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6d 61 | nabling.OSPF.via.this.command.ma |
d06e0 | 79 20 72 65 73 75 6c 74 20 69 6e 20 61 20 73 6c 69 67 68 74 20 70 65 72 66 6f 72 6d 61 6e 63 65 | y.result.in.a.slight.performance |
d0700 | 20 69 6d 70 72 6f 76 65 6d 65 6e 74 2e 00 49 66 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 | .improvement..If.you.have.config |
d0720 | 75 72 65 64 20 74 68 65 20 60 49 4e 53 49 44 45 2d 4f 55 54 60 20 70 6f 6c 69 63 79 2c 20 79 6f | ured.the.`INSIDE-OUT`.policy,.yo |
d0740 | 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 61 64 64 20 61 64 64 69 74 69 6f 6e 61 6c 20 72 75 | u.will.need.to.add.additional.ru |
d0760 | 6c 65 73 20 74 6f 20 70 65 72 6d 69 74 20 69 6e 62 6f 75 6e 64 20 4e 41 54 20 74 72 61 66 66 69 | les.to.permit.inbound.NAT.traffi |
d0780 | 63 2e 00 49 66 20 79 6f 75 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 61 64 64 72 65 73 73 65 | c..If.you.have.multiple.addresse |
d07a0 | 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 69 6e 74 | s.configured.on.a.particular.int |
d07c0 | 65 72 66 61 63 65 20 61 6e 64 20 77 6f 75 6c 64 20 6c 69 6b 65 20 50 49 4d 20 74 6f 20 75 73 65 | erface.and.would.like.PIM.to.use |
d07e0 | 20 61 20 73 70 65 63 69 66 69 63 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 61 73 73 6f 63 | .a.specific.source.address.assoc |
d0800 | 69 61 74 65 64 20 77 69 74 68 20 74 68 61 74 20 69 6e 74 65 72 66 61 63 65 2e 00 49 66 20 79 6f | iated.with.that.interface..If.yo |
d0820 | 75 20 6e 65 65 64 20 74 6f 20 73 61 6d 70 6c 65 20 61 6c 73 6f 20 65 67 72 65 73 73 20 74 72 61 | u.need.to.sample.also.egress.tra |
d0840 | 66 66 69 63 2c 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 | ffic,.you.may.want.to.configure. |
d0860 | 65 67 72 65 73 73 20 66 6c 6f 77 2d 61 63 63 6f 75 6e 74 69 6e 67 3a 00 49 66 20 79 6f 75 20 6f | egress.flow-accounting:.If.you.o |
d0880 | 6e 6c 79 20 77 61 6e 74 20 74 6f 20 63 68 65 63 6b 20 69 66 20 74 68 65 20 75 73 65 72 20 61 63 | nly.want.to.check.if.the.user.ac |
d08a0 | 63 6f 75 6e 74 20 69 73 20 65 6e 61 62 6c 65 64 20 61 6e 64 20 63 61 6e 20 61 75 74 68 65 6e 74 | count.is.enabled.and.can.authent |
d08c0 | 69 63 61 74 65 20 28 61 67 61 69 6e 73 74 20 74 68 65 20 70 72 69 6d 61 72 79 20 67 72 6f 75 70 | icate.(against.the.primary.group |
d08e0 | 29 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 6e 69 70 70 65 64 20 69 73 20 73 75 66 66 69 | ).the.following.snipped.is.suffi |
d0900 | 63 69 65 6e 74 3a 00 49 66 20 79 6f 75 20 73 65 74 20 61 20 63 75 73 74 6f 6d 20 52 41 44 49 55 | cient:.If.you.set.a.custom.RADIU |
d0920 | 53 20 61 74 74 72 69 62 75 74 65 20 79 6f 75 20 6d 75 73 74 20 64 65 66 69 6e 65 20 69 74 20 6f | S.attribute.you.must.define.it.o |
d0940 | 6e 20 62 6f 74 68 20 64 69 63 74 69 6f 6e 61 72 69 65 73 20 61 74 20 52 41 44 49 55 53 20 73 65 | n.both.dictionaries.at.RADIUS.se |
d0960 | 72 76 65 72 20 61 6e 64 20 63 6c 69 65 6e 74 2c 20 77 68 69 63 68 20 69 73 20 74 68 65 20 76 79 | rver.and.client,.which.is.the.vy |
d0980 | 6f 73 20 72 6f 75 74 65 72 20 69 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 2e 00 49 66 20 79 6f 75 | os.router.in.our.example..If.you |
d09a0 | 20 73 65 74 20 61 20 63 75 73 74 6f 6d 20 52 41 44 49 55 53 20 61 74 74 72 69 62 75 74 65 20 79 | .set.a.custom.RADIUS.attribute.y |
d09c0 | 6f 75 20 6d 75 73 74 20 64 65 66 69 6e 65 20 69 74 20 6f 6e 20 62 6f 74 68 20 64 69 63 74 69 6f | ou.must.define.it.on.both.dictio |
d09e0 | 6e 61 72 69 65 73 20 61 74 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 61 6e 64 20 63 6c 69 65 | naries.at.RADIUS.server.and.clie |
d0a00 | 6e 74 2e 00 49 66 20 79 6f 75 20 75 73 65 20 55 53 42 20 74 6f 20 73 65 72 69 61 6c 20 63 6f 6e | nt..If.you.use.USB.to.serial.con |
d0a20 | 76 65 72 74 65 72 73 20 66 6f 72 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 79 6f 75 72 20 56 | verters.for.connecting.to.your.V |
d0a40 | 79 4f 53 20 61 70 70 6c 69 61 6e 63 65 20 70 6c 65 61 73 65 20 6e 6f 74 65 20 74 68 61 74 20 6d | yOS.appliance.please.note.that.m |
d0a60 | 6f 73 74 20 6f 66 20 74 68 65 6d 20 75 73 65 20 73 6f 66 74 77 61 72 65 20 65 6d 75 6c 61 74 69 | ost.of.them.use.software.emulati |
d0a80 | 6f 6e 20 77 69 74 68 6f 75 74 20 66 6c 6f 77 20 63 6f 6e 74 72 6f 6c 2e 20 54 68 69 73 20 6d 65 | on.without.flow.control..This.me |
d0aa0 | 61 6e 73 20 79 6f 75 20 73 68 6f 75 6c 64 20 73 74 61 72 74 20 77 69 74 68 20 61 20 63 6f 6d 6d | ans.you.should.start.with.a.comm |
d0ac0 | 6f 6e 20 62 61 75 64 20 72 61 74 65 20 28 6d 6f 73 74 20 6c 69 6b 65 6c 79 20 39 36 30 30 20 62 | on.baud.rate.(most.likely.9600.b |
d0ae0 | 61 75 64 29 20 61 73 20 6f 74 68 65 72 77 69 73 65 20 79 6f 75 20 70 72 6f 62 61 62 6c 79 20 63 | aud).as.otherwise.you.probably.c |
d0b00 | 61 6e 20 6e 6f 74 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 64 65 76 69 63 65 20 75 73 69 | an.not.connect.to.the.device.usi |
d0b20 | 6e 67 20 68 69 67 68 20 73 70 65 65 64 20 62 61 75 64 20 72 61 74 65 73 20 61 73 20 79 6f 75 72 | ng.high.speed.baud.rates.as.your |
d0b40 | 20 73 65 72 69 61 6c 20 63 6f 6e 76 65 72 74 65 72 20 73 69 6d 70 6c 79 20 63 61 6e 20 6e 6f 74 | .serial.converter.simply.can.not |
d0b60 | 20 70 72 6f 63 65 73 73 20 74 68 69 73 20 64 61 74 61 20 72 61 74 65 2e 00 49 66 20 79 6f 75 20 | .process.this.data.rate..If.you. |
d0b80 | 75 73 65 20 61 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 2c 20 64 | use.a.self-signed.certificate,.d |
d0ba0 | 6f 20 6e 6f 74 20 66 6f 72 67 65 74 20 74 6f 20 69 6e 73 74 61 6c 6c 20 43 41 20 6f 6e 20 74 68 | o.not.forget.to.install.CA.on.th |
d0bc0 | 65 20 63 6c 69 65 6e 74 20 73 69 64 65 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 63 68 | e.client.side..If.you.want.to.ch |
d0be0 | 61 6e 67 65 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 66 6c 6f 77 73 | ange.the.maximum.number.of.flows |
d0c00 | 2c 20 77 68 69 63 68 20 61 72 65 20 74 72 61 63 6b 69 6e 67 20 73 69 6d 75 6c 74 61 6e 65 6f 75 | ,.which.are.tracking.simultaneou |
d0c20 | 73 6c 79 2c 20 79 6f 75 20 6d 61 79 20 64 6f 20 74 68 69 73 20 77 69 74 68 20 74 68 69 73 20 63 | sly,.you.may.do.this.with.this.c |
d0c40 | 6f 6d 6d 61 6e 64 20 28 64 65 66 61 75 6c 74 20 38 31 39 32 29 2e 00 49 66 20 79 6f 75 20 77 61 | ommand.(default.8192)..If.you.wa |
d0c60 | 6e 74 20 74 6f 20 64 69 73 61 62 6c 65 20 61 20 72 75 6c 65 20 62 75 74 20 6c 65 74 20 69 74 20 | nt.to.disable.a.rule.but.let.it. |
d0c80 | 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 49 66 20 79 6f 75 20 77 61 6e | in.the.configuration..If.you.wan |
d0ca0 | 74 20 74 6f 20 68 61 76 65 20 61 64 6d 69 6e 20 75 73 65 72 73 20 74 6f 20 61 75 74 68 65 6e 74 | t.to.have.admin.users.to.authent |
d0cc0 | 69 63 61 74 65 20 76 69 61 20 52 41 44 49 55 53 20 69 74 20 69 73 20 65 73 73 65 6e 74 69 61 6c | icate.via.RADIUS.it.is.essential |
d0ce0 | 20 74 6f 20 73 65 6e 74 20 74 68 65 20 60 60 43 69 73 63 6f 2d 41 56 2d 50 61 69 72 20 73 68 65 | .to.sent.the.``Cisco-AV-Pair.she |
d0d00 | 6c 6c 3a 70 72 69 76 2d 6c 76 6c 3d 31 35 60 60 20 61 74 74 72 69 62 75 74 65 2e 20 57 69 74 68 | ll:priv-lvl=15``.attribute..With |
d0d20 | 6f 75 74 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 79 6f 75 20 77 69 6c 6c 20 6f 6e 6c 79 20 | out.the.attribute.you.will.only. |
d0d40 | 67 65 74 20 72 65 67 75 6c 61 72 2c 20 6e 6f 6e 20 70 72 69 76 69 6c 65 67 75 65 64 2c 20 73 79 | get.regular,.non.privilegued,.sy |
d0d60 | 73 74 65 6d 20 75 73 65 72 73 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 75 73 65 20 65 | stem.users..If.you.want.to.use.e |
d0d80 | 78 69 73 74 69 6e 67 20 62 6c 61 63 6b 6c 69 73 74 73 20 79 6f 75 20 68 61 76 65 20 74 6f 20 63 | xisting.blacklists.you.have.to.c |
d0da0 | 72 65 61 74 65 2f 64 6f 77 6e 6c 6f 61 64 20 61 20 64 61 74 61 62 61 73 65 20 66 69 72 73 74 2e | reate/download.a.database.first. |
d0dc0 | 20 4f 74 68 65 72 77 69 73 65 20 79 6f 75 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 61 62 6c 65 20 | .Otherwise.you.will.not.be.able. |
d0de0 | 74 6f 20 63 6f 6d 6d 69 74 20 74 68 65 20 63 6f 6e 66 69 67 20 63 68 61 6e 67 65 73 2e 00 49 66 | to.commit.the.config.changes..If |
d0e00 | 20 79 6f 75 20 77 61 6e 74 20 79 6f 75 72 20 72 6f 75 74 65 72 20 74 6f 20 66 6f 72 77 61 72 64 | .you.want.your.router.to.forward |
d0e20 | 20 44 48 43 50 20 72 65 71 75 65 73 74 73 20 74 6f 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 44 48 | .DHCP.requests.to.an.external.DH |
d0e40 | 43 50 20 73 65 72 76 65 72 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 | CP.server.you.can.configure.the. |
d0e60 | 73 79 73 74 65 6d 20 74 6f 20 61 63 74 20 61 73 20 61 20 44 48 43 50 20 72 65 6c 61 79 20 61 67 | system.to.act.as.a.DHCP.relay.ag |
d0e80 | 65 6e 74 2e 20 54 68 65 20 44 48 43 50 20 72 65 6c 61 79 20 61 67 65 6e 74 20 77 6f 72 6b 73 20 | ent..The.DHCP.relay.agent.works. |
d0ea0 | 77 69 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 2e 00 49 66 | with.IPv4.and.IPv6.addresses..If |
d0ec0 | 20 79 6f 75 20 77 61 6e 74 2c 20 6e 65 65 64 2c 20 61 6e 64 20 73 68 6f 75 6c 64 20 75 73 65 20 | .you.want,.need,.and.should.use. |
d0ee0 | 6d 6f 72 65 20 61 64 76 61 6e 63 65 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 69 70 68 65 72 73 | more.advanced.encryption.ciphers |
d0f00 | 20 28 64 65 66 61 75 6c 74 20 69 73 20 73 74 69 6c 6c 20 33 44 45 53 29 20 79 6f 75 20 6e 65 65 | .(default.is.still.3DES).you.nee |
d0f20 | 64 20 74 6f 20 70 72 6f 76 69 73 69 6f 6e 20 79 6f 75 72 20 64 65 76 69 63 65 20 75 73 69 6e 67 | d.to.provision.your.device.using |
d0f40 | 20 61 20 73 6f 2d 63 61 6c 6c 65 64 20 22 44 65 76 69 63 65 20 50 72 6f 66 69 6c 65 22 2e 20 41 | .a.so-called."Device.Profile"..A |
d0f60 | 20 70 72 6f 66 69 6c 65 20 69 73 20 61 20 73 69 6d 70 6c 65 20 74 65 78 74 20 66 69 6c 65 20 63 | .profile.is.a.simple.text.file.c |
d0f80 | 6f 6e 74 61 69 6e 69 6e 67 20 58 4d 4c 20 6e 6f 64 65 73 20 77 69 74 68 20 61 20 60 60 2e 6d 6f | ontaining.XML.nodes.with.a.``.mo |
d0fa0 | 62 69 6c 65 63 6f 6e 66 69 67 60 60 20 66 69 6c 65 20 65 78 74 65 6e 73 69 6f 6e 20 74 68 61 74 | bileconfig``.file.extension.that |
d0fc0 | 20 63 61 6e 20 62 65 20 73 65 6e 74 20 61 6e 64 20 6f 70 65 6e 65 64 20 6f 6e 20 61 6e 79 20 64 | .can.be.sent.and.opened.on.any.d |
d0fe0 | 65 76 69 63 65 20 66 72 6f 6d 20 61 6e 20 45 2d 4d 61 69 6c 2e 00 49 66 20 79 6f 75 27 76 65 20 | evice.from.an.E-Mail..If.you've. |
d1000 | 63 6f 6d 70 6c 65 74 65 64 20 61 6c 6c 20 74 68 65 20 61 62 6f 76 65 20 73 74 65 70 73 20 79 6f | completed.all.the.above.steps.yo |
d1020 | 75 20 6e 6f 20 64 6f 75 62 74 20 77 61 6e 74 20 74 6f 20 73 65 65 20 69 66 20 69 74 27 73 20 61 | u.no.doubt.want.to.see.if.it's.a |
d1040 | 6c 6c 20 77 6f 72 6b 69 6e 67 2e 00 49 67 6e 6f 72 65 20 41 53 5f 50 41 54 48 20 6c 65 6e 67 74 | ll.working..Ignore.AS_PATH.lengt |
d1060 | 68 20 77 68 65 6e 20 73 65 6c 65 63 74 69 6e 67 20 61 20 72 6f 75 74 65 00 49 67 6e 6f 72 65 20 | h.when.selecting.a.route.Ignore. |
d1080 | 56 52 52 50 20 6d 61 69 6e 20 69 6e 74 65 72 66 61 63 65 20 66 61 75 6c 74 73 00 49 6d 61 67 65 | VRRP.main.interface.faults.Image |
d10a0 | 20 74 68 61 6e 6b 66 75 6c 6c 79 20 62 6f 72 72 6f 77 65 64 20 66 72 6f 6d 20 68 74 74 70 73 3a | .thankfully.borrowed.from.https: |
d10c0 | 2f 2f 65 6e 2e 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 46 69 6c 65 3a 53 4e 4d | //en.wikipedia.org/wiki/File:SNM |
d10e0 | 50 5f 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 5f 70 72 69 6e 63 69 70 6c 65 73 5f 64 69 61 67 72 | P_communication_principles_diagr |
d1100 | 61 6d 2e 50 4e 47 20 77 68 69 63 68 20 69 73 20 75 6e 64 65 72 20 74 68 65 20 47 4e 55 20 46 72 | am.PNG.which.is.under.the.GNU.Fr |
d1120 | 65 65 20 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 4c 69 63 65 6e 73 65 00 49 6d 61 67 69 6e 65 | ee.Documentation.License.Imagine |
d1140 | 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 70 6f 6c 6f 67 79 00 49 6d 6d 65 64 69 61 74 | .the.following.topology.Immediat |
d1160 | 65 00 49 6d 70 6f 72 74 20 66 69 6c 65 73 20 74 6f 20 50 4b 49 20 66 6f 72 6d 61 74 00 49 6d 70 | e.Import.files.to.PKI.format.Imp |
d1180 | 6f 72 74 20 74 68 65 20 43 41 73 20 70 72 69 76 61 74 65 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 | ort.the.CAs.private.key.portion. |
d11a0 | 74 6f 20 74 68 65 20 43 4c 49 2e 20 54 68 69 73 20 73 68 6f 75 6c 64 20 6e 65 76 65 72 20 6c 65 | to.the.CLI..This.should.never.le |
d11c0 | 61 76 65 20 74 68 65 20 73 79 73 74 65 6d 20 61 73 20 69 74 20 69 73 20 75 73 65 64 20 74 6f 20 | ave.the.system.as.it.is.used.to. |
d11e0 | 64 65 63 72 79 70 74 20 74 68 65 20 64 61 74 61 2e 20 54 68 65 20 6b 65 79 20 69 73 20 72 65 71 | decrypt.the.data..The.key.is.req |
d1200 | 75 69 72 65 64 20 69 66 20 79 6f 75 20 75 73 65 20 56 79 4f 53 20 61 73 20 79 6f 75 72 20 63 65 | uired.if.you.use.VyOS.as.your.ce |
d1220 | 72 74 69 66 69 63 61 74 65 20 67 65 6e 65 72 61 74 6f 72 2e 00 49 6d 70 6f 72 74 20 74 68 65 20 | rtificate.generator..Import.the. |
d1240 | 4f 70 65 6e 56 50 4e 20 73 68 61 72 65 64 20 73 65 63 72 65 74 20 73 74 6f 72 65 64 20 69 6e 20 | OpenVPN.shared.secret.stored.in. |
d1260 | 66 69 6c 65 20 74 6f 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2e 00 49 6d 70 6f 72 74 20 74 68 65 | file.to.the.VyOS.CLI..Import.the |
d1280 | 20 63 65 72 74 69 66 69 63 61 74 65 20 66 72 6f 6d 20 74 68 65 20 66 69 6c 65 20 74 6f 20 56 79 | .certificate.from.the.file.to.Vy |
d12a0 | 4f 53 20 43 4c 49 2e 00 49 6d 70 6f 72 74 20 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 6f | OS.CLI..Import.the.private.key.o |
d12c0 | 66 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 74 6f 20 74 68 65 20 56 79 4f 53 20 43 4c | f.the.certificate.to.the.VyOS.CL |
d12e0 | 49 2e 20 54 68 69 73 20 73 68 6f 75 6c 64 20 6e 65 76 65 72 20 6c 65 61 76 65 20 74 68 65 20 73 | I..This.should.never.leave.the.s |
d1300 | 79 73 74 65 6d 20 61 73 20 69 74 20 69 73 20 75 73 65 64 20 74 6f 20 64 65 63 72 79 70 74 20 74 | ystem.as.it.is.used.to.decrypt.t |
d1320 | 68 65 20 64 61 74 61 2e 00 49 6d 70 6f 72 74 20 74 68 65 20 70 75 62 6c 69 63 20 43 41 20 63 65 | he.data..Import.the.public.CA.ce |
d1340 | 72 74 69 66 69 63 61 74 65 20 66 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 66 69 6c 65 20 | rtificate.from.the.defined.file. |
d1360 | 74 6f 20 56 79 4f 53 20 43 4c 49 2e 00 49 6d 70 6f 72 74 65 64 20 70 72 65 66 69 78 65 73 20 64 | to.VyOS.CLI..Imported.prefixes.d |
d1380 | 75 72 69 6e 67 20 74 68 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 6d 61 79 20 68 61 76 65 20 76 61 | uring.the.validation.may.have.va |
d13a0 | 6c 75 65 73 3a 00 49 6e 20 3a 72 66 63 3a 60 33 30 36 39 60 20 69 74 20 69 73 20 63 61 6c 6c 65 | lues:.In.:rfc:`3069`.it.is.calle |
d13c0 | 64 20 56 4c 41 4e 20 41 67 67 72 65 67 61 74 69 6f 6e 00 49 6e 20 3a 76 79 74 61 73 6b 3a 60 54 | d.VLAN.Aggregation.In.:vytask:`T |
d13e0 | 32 31 39 39 60 20 74 68 65 20 73 79 6e 74 61 78 20 6f 66 20 74 68 65 20 7a 6f 6e 65 20 63 6f 6e | 2199`.the.syntax.of.the.zone.con |
d1400 | 66 69 67 75 72 61 74 69 6f 6e 20 77 61 73 20 63 68 61 6e 67 65 64 2e 20 54 68 65 20 7a 6f 6e 65 | figuration.was.changed..The.zone |
d1420 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 76 65 64 20 66 72 6f 6d 20 60 60 7a 6f 6e 65 | .configuration.moved.from.``zone |
d1440 | 2d 70 6f 6c 69 63 79 20 7a 6f 6e 65 20 3c 6e 61 6d 65 3e 60 60 20 74 6f 20 60 60 66 69 72 65 77 | -policy.zone.<name>``.to.``firew |
d1460 | 61 6c 6c 20 7a 6f 6e 65 20 3c 6e 61 6d 65 3e 60 60 2e 00 49 6e 20 49 6e 74 65 72 6e 65 74 20 50 | all.zone.<name>``..In.Internet.P |
d1480 | 72 6f 74 6f 63 6f 6c 20 56 65 72 73 69 6f 6e 20 36 20 28 49 50 76 36 29 20 6e 65 74 77 6f 72 6b | rotocol.Version.6.(IPv6).network |
d14a0 | 73 2c 20 74 68 65 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 6f 66 20 41 52 50 20 69 73 20 70 | s,.the.functionality.of.ARP.is.p |
d14c0 | 72 6f 76 69 64 65 64 20 62 79 20 74 68 65 20 4e 65 69 67 68 62 6f 72 20 44 69 73 63 6f 76 65 72 | rovided.by.the.Neighbor.Discover |
d14e0 | 79 20 50 72 6f 74 6f 63 6f 6c 20 28 4e 44 50 29 2e 00 49 6e 20 50 72 69 6f 72 69 74 79 20 51 75 | y.Protocol.(NDP)..In.Priority.Qu |
d1500 | 65 75 65 20 77 65 20 64 6f 20 6e 6f 74 20 64 65 66 69 6e 65 20 63 6c 61 73 65 73 20 77 69 74 68 | eue.we.do.not.define.clases.with |
d1520 | 20 61 20 6d 65 61 6e 69 6e 67 6c 65 73 73 20 63 6c 61 73 73 20 49 44 20 6e 75 6d 62 65 72 20 62 | .a.meaningless.class.ID.number.b |
d1540 | 75 74 20 77 69 74 68 20 61 20 63 6c 61 73 73 20 70 72 69 6f 72 69 74 79 20 6e 75 6d 62 65 72 20 | ut.with.a.class.priority.number. |
d1560 | 28 31 2d 37 29 2e 20 54 68 65 20 6c 6f 77 65 72 20 74 68 65 20 6e 75 6d 62 65 72 2c 20 74 68 65 | (1-7)..The.lower.the.number,.the |
d1580 | 20 68 69 67 68 65 72 20 74 68 65 20 70 72 69 6f 72 69 74 79 2e 00 49 6e 20 56 79 4f 53 20 74 68 | .higher.the.priority..In.VyOS.th |
d15a0 | 65 20 74 65 72 6d 73 20 60 60 76 69 66 2d 73 60 60 20 61 6e 64 20 60 60 76 69 66 2d 63 60 60 20 | e.terms.``vif-s``.and.``vif-c``. |
d15c0 | 73 74 61 6e 64 20 66 6f 72 20 74 68 65 20 65 74 68 65 72 74 79 70 65 20 74 61 67 73 20 74 68 61 | stand.for.the.ethertype.tags.tha |
d15e0 | 74 20 61 72 65 20 75 73 65 64 2e 00 49 6e 20 56 79 4f 53 2c 20 45 53 50 20 61 74 74 72 69 62 75 | t.are.used..In.VyOS,.ESP.attribu |
d1600 | 74 65 73 20 61 72 65 20 73 70 65 63 69 66 69 65 64 20 74 68 72 6f 75 67 68 20 45 53 50 20 67 72 | tes.are.specified.through.ESP.gr |
d1620 | 6f 75 70 73 2e 20 4d 75 6c 74 69 70 6c 65 20 70 72 6f 70 6f 73 61 6c 73 20 63 61 6e 20 62 65 20 | oups..Multiple.proposals.can.be. |
d1640 | 73 70 65 63 69 66 69 65 64 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 67 72 6f 75 70 2e 00 49 6e 20 | specified.in.a.single.group..In. |
d1660 | 56 79 4f 53 2c 20 49 4b 45 20 61 74 74 72 69 62 75 74 65 73 20 61 72 65 20 73 70 65 63 69 66 69 | VyOS,.IKE.attributes.are.specifi |
d1680 | 65 64 20 74 68 72 6f 75 67 68 20 49 4b 45 20 67 72 6f 75 70 73 2e 20 4d 75 6c 74 69 70 6c 65 20 | ed.through.IKE.groups..Multiple. |
d16a0 | 70 72 6f 70 6f 73 61 6c 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 61 20 | proposals.can.be.specified.in.a. |
d16c0 | 73 69 6e 67 6c 65 20 67 72 6f 75 70 2e 00 49 6e 20 56 79 4f 53 2c 20 61 20 63 6c 61 73 73 20 69 | single.group..In.VyOS,.a.class.i |
d16e0 | 73 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 61 20 6e 75 6d 62 65 72 20 79 6f 75 20 63 61 6e | s.identified.by.a.number.you.can |
d1700 | 20 63 68 6f 6f 73 65 20 77 68 65 6e 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 69 74 2e 00 49 6e 20 | .choose.when.configuring.it..In. |
d1720 | 61 20 6d 69 6e 69 6d 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 74 68 65 20 66 6f 6c | a.minimal.configuration,.the.fol |
d1740 | 6c 6f 77 69 6e 67 20 6d 75 73 74 20 62 65 20 70 72 6f 76 69 64 65 64 3a 00 49 6e 20 61 20 6d 75 | lowing.must.be.provided:.In.a.mu |
d1760 | 6c 74 69 70 6c 65 20 56 4c 41 4e 20 68 65 61 64 65 72 20 63 6f 6e 74 65 78 74 2c 20 6f 75 74 20 | ltiple.VLAN.header.context,.out. |
d1780 | 6f 66 20 63 6f 6e 76 65 6e 69 65 6e 63 65 20 74 68 65 20 74 65 72 6d 20 22 56 4c 41 4e 20 74 61 | of.convenience.the.term."VLAN.ta |
d17a0 | 67 22 20 6f 72 20 6a 75 73 74 20 22 74 61 67 22 20 66 6f 72 20 73 68 6f 72 74 20 69 73 20 6f 66 | g".or.just."tag".for.short.is.of |
d17c0 | 74 65 6e 20 75 73 65 64 20 69 6e 20 70 6c 61 63 65 20 6f 66 20 22 38 30 32 2e 31 71 5f 20 56 4c | ten.used.in.place.of."802.1q_.VL |
d17e0 | 41 4e 20 68 65 61 64 65 72 22 2e 20 51 69 6e 51 20 61 6c 6c 6f 77 73 20 6d 75 6c 74 69 70 6c 65 | AN.header"..QinQ.allows.multiple |
d1800 | 20 56 4c 41 4e 20 74 61 67 73 20 69 6e 20 61 6e 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 3b | .VLAN.tags.in.an.Ethernet.frame; |
d1820 | 20 74 6f 67 65 74 68 65 72 20 74 68 65 73 65 20 74 61 67 73 20 63 6f 6e 73 74 69 74 75 74 65 20 | .together.these.tags.constitute. |
d1840 | 61 20 74 61 67 20 73 74 61 63 6b 2e 20 57 68 65 6e 20 75 73 65 64 20 69 6e 20 74 68 65 20 63 6f | a.tag.stack..When.used.in.the.co |
d1860 | 6e 74 65 78 74 20 6f 66 20 61 6e 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 2c 20 61 20 51 69 | ntext.of.an.Ethernet.frame,.a.Qi |
d1880 | 6e 51 20 66 72 61 6d 65 20 69 73 20 61 20 66 72 61 6d 65 20 74 68 61 74 20 68 61 73 20 32 20 56 | nQ.frame.is.a.frame.that.has.2.V |
d18a0 | 4c 41 4e 20 38 30 32 2e 31 71 5f 20 68 65 61 64 65 72 73 20 28 64 6f 75 62 6c 65 2d 74 61 67 67 | LAN.802.1q_.headers.(double-tagg |
d18c0 | 65 64 29 2e 00 49 6e 20 61 20 6e 75 74 73 68 65 6c 6c 2c 20 74 68 65 20 63 75 72 72 65 6e 74 20 | ed)..In.a.nutshell,.the.current. |
d18e0 | 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 66 6f 6c 6c | implementation.provides.the.foll |
d1900 | 6f 77 69 6e 67 20 66 65 61 74 75 72 65 73 3a 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 3a | owing.features:.In.addition.to.: |
d1920 | 61 62 62 72 3a 60 52 41 44 49 55 53 20 28 52 65 6d 6f 74 65 20 41 75 74 68 65 6e 74 69 63 61 74 | abbr:`RADIUS.(Remote.Authenticat |
d1940 | 69 6f 6e 20 44 69 61 6c 2d 49 6e 20 55 73 65 72 20 53 65 72 76 69 63 65 29 60 2c 20 3a 61 62 62 | ion.Dial-In.User.Service)`,.:abb |
d1960 | 72 3a 60 54 41 43 41 43 53 20 28 54 65 72 6d 69 6e 61 6c 20 41 63 63 65 73 73 20 43 6f 6e 74 72 | r:`TACACS.(Terminal.Access.Contr |
d1980 | 6f 6c 6c 65 72 20 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c 20 53 79 73 74 65 6d 29 60 20 63 61 | oller.Access.Control.System)`.ca |
d19a0 | 6e 20 61 6c 73 6f 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 6c 61 72 67 65 20 64 65 70 6c 6f 79 6d | n.also.be.found.in.large.deploym |
d19c0 | 65 6e 74 73 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 64 69 73 70 6c 61 79 69 6e 67 20 | ents..In.addition.to.displaying. |
d19e0 | 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6c 6f 63 61 | flow.accounting.information.loca |
d1a00 | 6c 6c 79 2c 20 6f 6e 65 20 63 61 6e 20 61 6c 73 6f 20 65 78 70 6f 72 74 65 64 20 74 68 65 6d 20 | lly,.one.can.also.exported.them. |
d1a20 | 74 6f 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 73 65 72 76 65 72 2e 00 49 6e 20 61 64 64 69 74 | to.a.collection.server..In.addit |
d1a40 | 69 6f 6e 20 74 6f 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 61 62 6f 76 65 2c 20 74 68 65 20 6f 75 | ion.to.the.command.above,.the.ou |
d1a60 | 74 70 75 74 20 69 73 20 69 6e 20 61 20 66 6f 72 6d 61 74 20 77 68 69 63 68 20 63 61 6e 20 62 65 | tput.is.in.a.format.which.can.be |
d1a80 | 20 75 73 65 64 20 74 6f 20 64 69 72 65 63 74 6c 79 20 69 6d 70 6f 72 74 20 74 68 65 20 6b 65 79 | .used.to.directly.import.the.key |
d1aa0 | 20 69 6e 74 6f 20 74 68 65 20 56 79 4f 53 20 43 4c 49 20 62 79 20 73 69 6d 70 6c 79 20 63 6f 70 | .into.the.VyOS.CLI.by.simply.cop |
d1ac0 | 79 2d 70 61 73 74 69 6e 67 20 74 68 65 20 6f 75 74 70 75 74 20 66 72 6f 6d 20 6f 70 2d 6d 6f 64 | y-pasting.the.output.from.op-mod |
d1ae0 | 65 20 69 6e 74 6f 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 2e 00 49 6e 20 61 64 | e.into.configuration.mode..In.ad |
d1b00 | 64 69 74 69 6f 6e 20 77 65 20 73 65 74 75 70 20 49 50 76 36 20 3a 61 62 62 72 3a 60 52 41 20 28 | dition.we.setup.IPv6.:abbr:`RA.( |
d1b20 | 52 6f 75 74 65 72 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 73 29 60 20 74 6f 20 6d 61 6b 65 20 | Router.Advertisements)`.to.make. |
d1b40 | 74 68 65 20 70 72 65 66 69 78 20 6b 6e 6f 77 6e 20 6f 6e 20 74 68 65 20 65 74 68 30 20 6c 69 6e | the.prefix.known.on.the.eth0.lin |
d1b60 | 6b 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 79 6f 75 20 63 61 6e 20 61 6c 73 6f 20 64 69 73 61 | k..In.addition.you.can.also.disa |
d1b80 | 62 6c 65 20 74 68 65 20 77 68 6f 6c 65 20 73 65 72 76 69 63 65 20 77 69 74 68 6f 75 74 20 74 68 | ble.the.whole.service.without.th |
d1ba0 | 65 20 6e 65 65 64 20 74 6f 20 72 65 6d 6f 76 65 20 69 74 20 66 72 6f 6d 20 74 68 65 20 63 75 72 | e.need.to.remove.it.from.the.cur |
d1bc0 | 72 65 6e 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 | rent.configuration..In.addition. |
d1be0 | 79 6f 75 20 77 69 6c 6c 20 73 70 65 63 69 66 69 79 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 | you.will.specifiy.the.IP.address |
d1c00 | 20 6f 72 20 46 51 44 4e 20 66 6f 72 20 74 68 65 20 63 6c 69 65 6e 74 20 77 68 65 72 65 20 69 74 | .or.FQDN.for.the.client.where.it |
d1c20 | 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 70 61 | .will.connect.to..The.address.pa |
d1c40 | 72 61 6d 65 74 65 72 20 63 61 6e 20 62 65 20 75 73 65 64 20 75 70 20 74 6f 20 74 77 6f 20 74 69 | rameter.can.be.used.up.to.two.ti |
d1c60 | 6d 65 73 20 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 61 73 73 69 67 6e 20 74 68 65 20 63 6c | mes.and.is.used.to.assign.the.cl |
d1c80 | 69 65 6e 74 73 20 73 70 65 63 69 66 69 63 20 49 50 76 34 20 28 2f 33 32 29 20 6f 72 20 49 50 76 | ients.specific.IPv4.(/32).or.IPv |
d1ca0 | 36 20 28 2f 31 32 38 29 20 61 64 64 72 65 73 73 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 79 6f | 6.(/128).address..In.addition.yo |
d1cc0 | 75 20 77 69 6c 6c 20 73 70 65 63 69 66 79 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 | u.will.specify.the.IP.address.or |
d1ce0 | 20 46 51 44 4e 20 66 6f 72 20 74 68 65 20 63 6c 69 65 6e 74 20 77 68 65 72 65 20 69 74 20 77 69 | .FQDN.for.the.client.where.it.wi |
d1d00 | 6c 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 70 61 72 61 6d | ll.connect.to..The.address.param |
d1d20 | 65 74 65 72 20 63 61 6e 20 62 65 20 75 73 65 64 20 75 70 20 74 6f 20 74 77 6f 20 74 69 6d 65 73 | eter.can.be.used.up.to.two.times |
d1d40 | 20 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 61 73 73 69 67 6e 20 74 68 65 20 63 6c 69 65 6e | .and.is.used.to.assign.the.clien |
d1d60 | 74 73 20 73 70 65 63 69 66 69 63 20 49 50 76 34 20 28 2f 33 32 29 20 6f 72 20 49 50 76 36 20 28 | ts.specific.IPv4.(/32).or.IPv6.( |
d1d80 | 2f 31 32 38 29 20 61 64 64 72 65 73 73 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 2c 20 79 6f 75 20 | /128).address..In.addition,.you. |
d1da0 | 63 61 6e 20 73 70 65 63 69 66 79 20 6d 61 6e 79 20 6f 74 68 65 72 20 70 61 72 61 6d 65 74 65 72 | can.specify.many.other.parameter |
d1dc0 | 73 20 74 6f 20 67 65 74 20 42 47 50 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 00 49 6e 20 61 6e 20 | s.to.get.BGP.information:.In.an. |
d1de0 | 2a 2a 61 64 64 72 65 73 73 20 67 72 6f 75 70 2a 2a 20 61 20 73 69 6e 67 6c 65 20 49 50 20 61 64 | **address.group**.a.single.IP.ad |
d1e00 | 64 72 65 73 73 20 6f 72 20 49 50 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 73 20 61 72 65 20 64 | dress.or.IP.address.ranges.are.d |
d1e20 | 65 66 69 6e 65 64 2e 00 49 6e 20 62 6f 74 68 20 63 61 73 65 73 2c 20 77 65 20 77 69 6c 6c 20 75 | efined..In.both.cases,.we.will.u |
d1e40 | 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 65 74 74 69 6e 67 73 3a 00 49 6e 20 63 61 | se.the.following.settings:.In.ca |
d1e60 | 73 65 20 6f 66 20 70 65 65 72 2d 70 65 65 72 20 72 65 6c 61 74 69 6f 6e 73 68 69 70 20 72 6f 75 | se.of.peer-peer.relationship.rou |
d1e80 | 74 65 73 20 63 61 6e 20 62 65 20 72 65 63 65 69 76 65 64 20 6f 6e 6c 79 20 69 66 20 4f 54 43 20 | tes.can.be.received.only.if.OTC. |
d1ea0 | 76 61 6c 75 65 20 69 73 20 65 71 75 61 6c 20 74 6f 20 79 6f 75 72 20 6e 65 69 67 68 62 6f 72 20 | value.is.equal.to.your.neighbor. |
d1ec0 | 41 53 20 6e 75 6d 62 65 72 2e 00 49 6e 20 63 61 73 65 2c 20 69 66 20 79 6f 75 20 6e 65 65 64 20 | AS.number..In.case,.if.you.need. |
d1ee0 | 74 6f 20 63 61 74 63 68 20 73 6f 6d 65 20 6c 6f 67 73 20 66 72 6f 6d 20 66 6c 6f 77 2d 61 63 63 | to.catch.some.logs.from.flow-acc |
d1f00 | 6f 75 6e 74 69 6e 67 20 64 61 65 6d 6f 6e 2c 20 79 6f 75 20 6d 61 79 20 63 6f 6e 66 69 67 75 72 | ounting.daemon,.you.may.configur |
d1f20 | 65 20 6c 6f 67 67 69 6e 67 20 66 61 63 69 6c 69 74 79 3a 00 49 6e 20 63 6f 6e 74 72 61 73 74 20 | e.logging.facility:.In.contrast. |
d1f40 | 74 6f 20 73 69 6d 70 6c 65 20 52 45 44 2c 20 56 79 4f 53 27 20 52 61 6e 64 6f 6d 2d 44 65 74 65 | to.simple.RED,.VyOS'.Random-Dete |
d1f60 | 63 74 20 75 73 65 73 20 61 20 47 65 6e 65 72 61 6c 69 7a 65 64 20 52 61 6e 64 6f 6d 20 45 61 72 | ct.uses.a.Generalized.Random.Ear |
d1f80 | 6c 79 20 44 65 74 65 63 74 20 70 6f 6c 69 63 79 20 74 68 61 74 20 70 72 6f 76 69 64 65 73 20 64 | ly.Detect.policy.that.provides.d |
d1fa0 | 69 66 66 65 72 65 6e 74 20 76 69 72 74 75 61 6c 20 71 75 65 75 65 73 20 62 61 73 65 64 20 6f 6e | ifferent.virtual.queues.based.on |
d1fc0 | 20 74 68 65 20 49 50 20 50 72 65 63 65 64 65 6e 63 65 20 76 61 6c 75 65 20 73 6f 20 74 68 61 74 | .the.IP.Precedence.value.so.that |
d1fe0 | 20 73 6f 6d 65 20 76 69 72 74 75 61 6c 20 71 75 65 75 65 73 20 63 61 6e 20 64 72 6f 70 20 6d 6f | .some.virtual.queues.can.drop.mo |
d2000 | 72 65 20 70 61 63 6b 65 74 73 20 74 68 61 6e 20 6f 74 68 65 72 73 2e 00 49 6e 20 66 61 69 6c 6f | re.packets.than.others..In.failo |
d2020 | 76 65 72 20 6d 6f 64 65 2c 20 6f 6e 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 73 65 74 20 74 | ver.mode,.one.interface.is.set.t |
d2040 | 6f 20 62 65 20 74 68 65 20 70 72 69 6d 61 72 79 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 6f | o.be.the.primary.interface.and.o |
d2060 | 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 73 65 63 6f 6e 64 61 72 79 20 6f 72 | ther.interfaces.are.secondary.or |
d2080 | 20 73 70 61 72 65 2e 20 49 6e 73 74 65 61 64 20 6f 66 20 62 61 6c 61 6e 63 69 6e 67 20 74 72 61 | .spare..Instead.of.balancing.tra |
d20a0 | 66 66 69 63 20 61 63 72 6f 73 73 20 61 6c 6c 20 68 65 61 6c 74 68 79 20 69 6e 74 65 72 66 61 63 | ffic.across.all.healthy.interfac |
d20c0 | 65 73 2c 20 6f 6e 6c 79 20 74 68 65 20 70 72 69 6d 61 72 79 20 69 6e 74 65 72 66 61 63 65 20 69 | es,.only.the.primary.interface.i |
d20e0 | 73 20 75 73 65 64 20 61 6e 64 20 69 6e 20 63 61 73 65 20 6f 66 20 66 61 69 6c 75 72 65 2c 20 61 | s.used.and.in.case.of.failure,.a |
d2100 | 20 73 65 63 6f 6e 64 61 72 79 20 69 6e 74 65 72 66 61 63 65 20 73 65 6c 65 63 74 65 64 20 66 72 | .secondary.interface.selected.fr |
d2120 | 6f 6d 20 74 68 65 20 70 6f 6f 6c 20 6f 66 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 74 65 72 66 61 | om.the.pool.of.available.interfa |
d2140 | 63 65 73 20 74 61 6b 65 73 20 6f 76 65 72 2e 20 54 68 65 20 70 72 69 6d 61 72 79 20 69 6e 74 65 | ces.takes.over..The.primary.inte |
d2160 | 72 66 61 63 65 20 69 73 20 73 65 6c 65 63 74 65 64 20 62 61 73 65 64 20 6f 6e 20 69 74 73 20 77 | rface.is.selected.based.on.its.w |
d2180 | 65 69 67 68 74 20 61 6e 64 20 68 65 61 6c 74 68 2c 20 6f 74 68 65 72 73 20 62 65 63 6f 6d 65 20 | eight.and.health,.others.become. |
d21a0 | 73 65 63 6f 6e 64 61 72 79 20 69 6e 74 65 72 66 61 63 65 73 2e 20 53 65 63 6f 6e 64 61 72 79 20 | secondary.interfaces..Secondary. |
d21c0 | 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 74 61 6b 65 20 6f 76 65 72 20 61 20 66 61 69 6c 65 64 | interfaces.to.take.over.a.failed |
d21e0 | 20 70 72 69 6d 61 72 79 20 69 6e 74 65 72 66 61 63 65 20 61 72 65 20 63 68 6f 73 65 6e 20 66 72 | .primary.interface.are.chosen.fr |
d2200 | 6f 6d 20 74 68 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 27 73 20 69 6e 74 65 72 66 61 63 65 | om.the.load.balancer's.interface |
d2220 | 20 70 6f 6f 6c 2c 20 64 65 70 65 6e 64 69 6e 67 20 6f 6e 20 74 68 65 69 72 20 77 65 69 67 68 74 | .pool,.depending.on.their.weight |
d2240 | 20 61 6e 64 20 68 65 61 6c 74 68 2e 20 49 6e 74 65 72 66 61 63 65 20 72 6f 6c 65 73 20 63 61 6e | .and.health..Interface.roles.can |
d2260 | 20 61 6c 73 6f 20 62 65 20 73 65 6c 65 63 74 65 64 20 62 61 73 65 64 20 6f 6e 20 72 75 6c 65 20 | .also.be.selected.based.on.rule. |
d2280 | 6f 72 64 65 72 20 62 79 20 69 6e 63 6c 75 64 69 6e 67 20 69 6e 74 65 72 66 61 63 65 73 20 69 6e | order.by.including.interfaces.in |
d22a0 | 20 62 61 6c 61 6e 63 69 6e 67 20 72 75 6c 65 73 20 61 6e 64 20 6f 72 64 65 72 69 6e 67 20 74 68 | .balancing.rules.and.ordering.th |
d22c0 | 6f 73 65 20 72 75 6c 65 73 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 20 54 6f 20 70 75 74 20 74 68 | ose.rules.accordingly..To.put.th |
d22e0 | 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 20 69 6e 20 66 61 69 6c 6f 76 65 72 20 6d 6f 64 65 | e.load.balancer.in.failover.mode |
d2300 | 2c 20 63 72 65 61 74 65 20 61 20 66 61 69 6c 6f 76 65 72 20 72 75 6c 65 3a 00 49 6e 20 66 69 72 | ,.create.a.failover.rule:.In.fir |
d2320 | 65 77 61 6c 6c 20 62 72 69 64 67 65 20 72 75 6c 65 73 2c 20 74 68 65 20 61 63 74 69 6f 6e 20 63 | ewall.bridge.rules,.the.action.c |
d2340 | 61 6e 20 62 65 3a 00 49 6e 20 67 65 6e 65 72 61 6c 2c 20 4f 53 50 46 20 70 72 6f 74 6f 63 6f 6c | an.be:.In.general,.OSPF.protocol |
d2360 | 20 72 65 71 75 69 72 65 73 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 28 61 72 65 61 20 | .requires.a.backbone.area.(area. |
d2380 | 30 29 20 74 6f 20 62 65 20 63 6f 68 65 72 65 6e 74 20 61 6e 64 20 66 75 6c 6c 79 20 63 6f 6e 6e | 0).to.be.coherent.and.fully.conn |
d23a0 | 65 63 74 65 64 2e 20 49 2e 65 2e 20 61 6e 79 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 72 6f | ected..I.e..any.backbone.area.ro |
d23c0 | 75 74 65 72 20 6d 75 73 74 20 68 61 76 65 20 61 20 72 6f 75 74 65 20 74 6f 20 61 6e 79 20 6f 74 | uter.must.have.a.route.to.any.ot |
d23e0 | 68 65 72 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 72 6f 75 74 65 72 2e 20 4d 6f 72 65 6f 76 | her.backbone.area.router..Moreov |
d2400 | 65 72 2c 20 65 76 65 72 79 20 41 42 52 20 6d 75 73 74 20 68 61 76 65 20 61 20 6c 69 6e 6b 20 74 | er,.every.ABR.must.have.a.link.t |
d2420 | 6f 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 2e 20 48 6f 77 65 76 65 72 2c 20 69 74 20 69 73 20 | o.backbone.area..However,.it.is. |
d2440 | 6e 6f 74 20 61 6c 77 61 79 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 68 61 76 65 20 61 20 70 68 | not.always.possible.to.have.a.ph |
d2460 | 79 73 69 63 61 6c 20 6c 69 6e 6b 20 74 6f 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 2e 20 | ysical.link.to.a.backbone.area.. |
d2480 | 49 6e 20 74 68 69 73 20 63 61 73 65 20 62 65 74 77 65 65 6e 20 74 77 6f 20 41 42 52 20 28 6f 6e | In.this.case.between.two.ABR.(on |
d24a0 | 65 20 6f 66 20 74 68 65 6d 20 68 61 73 20 61 20 6c 69 6e 6b 20 74 6f 20 74 68 65 20 62 61 63 6b | e.of.them.has.a.link.to.the.back |
d24c0 | 62 6f 6e 65 20 61 72 65 61 29 20 69 6e 20 74 68 65 20 61 72 65 61 20 28 6e 6f 74 20 73 74 75 62 | bone.area).in.the.area.(not.stub |
d24e0 | 20 61 72 65 61 29 20 61 20 76 69 72 74 75 61 6c 20 6c 69 6e 6b 20 69 73 20 6f 72 67 61 6e 69 7a | .area).a.virtual.link.is.organiz |
d2500 | 65 64 2e 00 49 6e 20 6c 61 72 67 65 20 64 65 70 6c 6f 79 6d 65 6e 74 73 20 69 74 20 69 73 20 6e | ed..In.large.deployments.it.is.n |
d2520 | 6f 74 20 72 65 61 73 6f 6e 61 62 6c 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 65 61 63 68 20 | ot.reasonable.to.configure.each. |
d2540 | 75 73 65 72 20 69 6e 64 69 76 69 64 75 61 6c 6c 79 20 6f 6e 20 65 76 65 72 79 20 73 79 73 74 65 | user.individually.on.every.syste |
d2560 | 6d 2e 20 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 75 73 69 6e 67 20 3a 61 62 62 72 3a 60 52 41 | m..VyOS.supports.using.:abbr:`RA |
d2580 | 44 49 55 53 20 28 52 65 6d 6f 74 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 44 69 61 6c | DIUS.(Remote.Authentication.Dial |
d25a0 | 2d 49 6e 20 55 73 65 72 20 53 65 72 76 69 63 65 29 60 20 73 65 72 76 65 72 73 20 61 73 20 62 61 | -In.User.Service)`.servers.as.ba |
d25c0 | 63 6b 65 6e 64 20 66 6f 72 20 75 73 65 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 00 49 | ckend.for.user.authentication..I |
d25e0 | 6e 20 6f 72 64 65 72 20 66 6f 72 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 69 6e 66 6f | n.order.for.flow.accounting.info |
d2600 | 72 6d 61 74 69 6f 6e 20 74 6f 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 20 61 6e 64 20 64 69 73 70 | rmation.to.be.collected.and.disp |
d2620 | 6c 61 79 65 64 20 66 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2c 20 74 68 65 20 69 6e 74 65 | layed.for.an.interface,.the.inte |
d2640 | 72 66 61 63 65 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 66 6c 6f | rface.must.be.configured.for.flo |
d2660 | 77 20 61 63 63 6f 75 6e 74 69 6e 67 2e 00 49 6e 20 6f 72 64 65 72 20 66 6f 72 20 74 68 65 20 70 | w.accounting..In.order.for.the.p |
d2680 | 72 69 6d 61 72 79 20 61 6e 64 20 74 68 65 20 73 65 63 6f 6e 64 61 72 79 20 44 48 43 50 20 73 65 | rimary.and.the.secondary.DHCP.se |
d26a0 | 72 76 65 72 20 74 6f 20 6b 65 65 70 20 74 68 65 69 72 20 6c 65 61 73 65 20 74 61 62 6c 65 73 20 | rver.to.keep.their.lease.tables. |
d26c0 | 69 6e 20 73 79 6e 63 2c 20 74 68 65 79 20 6d 75 73 74 20 62 65 20 61 62 6c 65 20 74 6f 20 72 65 | in.sync,.they.must.be.able.to.re |
d26e0 | 61 63 68 20 65 61 63 68 20 6f 74 68 65 72 20 6f 6e 20 54 43 50 20 70 6f 72 74 20 36 34 37 2e 20 | ach.each.other.on.TCP.port.647.. |
d2700 | 49 66 20 79 6f 75 20 68 61 76 65 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 69 6e 20 65 66 | If.you.have.firewall.rules.in.ef |
d2720 | 66 65 63 74 2c 20 61 64 6a 75 73 74 20 74 68 65 6d 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 00 49 | fect,.adjust.them.accordingly..I |
d2740 | 6e 20 6f 72 64 65 72 20 66 6f 72 20 74 68 65 20 73 79 73 74 65 6d 20 74 6f 20 75 73 65 20 61 6e | n.order.for.the.system.to.use.an |
d2760 | 64 20 63 6f 6d 70 6c 65 74 65 20 75 6e 71 75 61 6c 69 66 69 65 64 20 68 6f 73 74 20 6e 61 6d 65 | d.complete.unqualified.host.name |
d2780 | 73 2c 20 61 20 6c 69 73 74 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 77 68 69 63 68 20 77 | s,.a.list.can.be.defined.which.w |
d27a0 | 69 6c 6c 20 62 65 20 75 73 65 64 20 66 6f 72 20 64 6f 6d 61 69 6e 20 73 65 61 72 63 68 65 73 2e | ill.be.used.for.domain.searches. |
d27c0 | 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 61 6c 6c 6f 77 20 66 6f 72 20 4c 44 50 20 6f 6e 20 74 68 | .In.order.to.allow.for.LDP.on.th |
d27e0 | 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 74 6f 20 65 78 63 68 61 6e 67 65 20 6c 61 62 65 6c | e.local.router.to.exchange.label |
d2800 | 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 20 77 69 74 68 20 6f 74 68 65 72 20 72 6f 75 74 65 | .advertisements.with.other.route |
d2820 | 72 73 2c 20 61 20 54 43 50 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 65 73 74 61 62 6c | rs,.a.TCP.session.will.be.establ |
d2840 | 69 73 68 65 64 20 62 65 74 77 65 65 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 69 73 63 | ished.between.automatically.disc |
d2860 | 6f 76 65 72 65 64 20 61 6e 64 20 73 74 61 74 69 63 61 6c 6c 79 20 61 73 73 69 67 6e 65 64 20 72 | overed.and.statically.assigned.r |
d2880 | 6f 75 74 65 72 73 2e 20 4c 44 50 20 77 69 6c 6c 20 74 72 79 20 74 6f 20 65 73 74 61 62 6c 69 73 | outers..LDP.will.try.to.establis |
d28a0 | 68 20 61 20 54 43 50 20 73 65 73 73 69 6f 6e 20 74 6f 20 74 68 65 20 2a 2a 74 72 61 6e 73 70 6f | h.a.TCP.session.to.the.**transpo |
d28c0 | 72 74 20 61 64 64 72 65 73 73 2a 2a 20 6f 66 20 6f 74 68 65 72 20 72 6f 75 74 65 72 73 2e 20 54 | rt.address**.of.other.routers..T |
d28e0 | 68 65 72 65 66 6f 72 65 20 66 6f 72 20 4c 44 50 20 74 6f 20 66 75 6e 63 74 69 6f 6e 20 70 72 6f | herefore.for.LDP.to.function.pro |
d2900 | 70 65 72 6c 79 20 70 6c 65 61 73 65 20 6d 61 6b 65 20 73 75 72 65 20 74 68 65 20 74 72 61 6e 73 | perly.please.make.sure.the.trans |
d2920 | 70 6f 72 74 20 61 64 64 72 65 73 73 20 69 73 20 73 68 6f 77 6e 20 69 6e 20 74 68 65 20 72 6f 75 | port.address.is.shown.in.the.rou |
d2940 | 74 69 6e 67 20 74 61 62 6c 65 20 61 6e 64 20 72 65 61 63 68 61 62 6c 65 20 74 6f 20 74 72 61 66 | ting.table.and.reachable.to.traf |
d2960 | 66 69 63 20 61 74 20 61 6c 6c 20 74 69 6d 65 73 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 63 6f | fic.at.all.times..In.order.to.co |
d2980 | 6e 74 72 6f 6c 20 61 6e 64 20 6d 6f 64 69 66 79 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 | ntrol.and.modify.routing.informa |
d29a0 | 74 69 6f 6e 20 74 68 61 74 20 69 73 20 65 78 63 68 61 6e 67 65 64 20 62 65 74 77 65 65 6e 20 70 | tion.that.is.exchanged.between.p |
d29c0 | 65 65 72 73 20 79 6f 75 20 63 61 6e 20 75 73 65 20 72 6f 75 74 65 2d 6d 61 70 2c 20 66 69 6c 74 | eers.you.can.use.route-map,.filt |
d29e0 | 65 72 2d 6c 69 73 74 2c 20 70 72 65 66 69 78 2d 6c 69 73 74 2c 20 64 69 73 74 72 69 62 75 74 65 | er-list,.prefix-list,.distribute |
d2a00 | 2d 6c 69 73 74 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 64 65 66 69 6e 65 20 77 68 69 63 68 20 | -list..In.order.to.define.which. |
d2a20 | 74 72 61 66 66 69 63 20 67 6f 65 73 20 69 6e 74 6f 20 77 68 69 63 68 20 63 6c 61 73 73 2c 20 79 | traffic.goes.into.which.class,.y |
d2a40 | 6f 75 20 64 65 66 69 6e 65 20 66 69 6c 74 65 72 73 20 28 74 68 61 74 20 69 73 2c 20 74 68 65 20 | ou.define.filters.(that.is,.the. |
d2a60 | 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 29 2e 20 50 61 63 6b 65 74 73 20 67 6f 20 74 | matching.criteria)..Packets.go.t |
d2a80 | 68 72 6f 75 67 68 20 74 68 65 73 65 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 73 20 28 61 73 20 | hrough.these.matching.rules.(as. |
d2aa0 | 69 6e 20 74 68 65 20 72 75 6c 65 73 20 6f 66 20 61 20 66 69 72 65 77 61 6c 6c 29 20 61 6e 64 2c | in.the.rules.of.a.firewall).and, |
d2ac0 | 20 69 66 20 61 20 70 61 63 6b 65 74 20 6d 61 74 63 68 65 73 20 74 68 65 20 66 69 6c 74 65 72 2c | .if.a.packet.matches.the.filter, |
d2ae0 | 20 69 74 20 69 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 74 68 61 74 20 63 6c 61 73 73 2e 00 49 | .it.is.assigned.to.that.class..I |
d2b00 | 6e 20 6f 72 64 65 72 20 74 6f 20 68 61 76 65 20 56 79 4f 53 20 54 72 61 66 66 69 63 20 43 6f 6e | n.order.to.have.VyOS.Traffic.Con |
d2b20 | 74 72 6f 6c 20 77 6f 72 6b 69 6e 67 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 66 6f 6c 6c 6f 77 20 | trol.working.you.need.to.follow. |
d2b40 | 32 20 73 74 65 70 73 3a 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 68 61 76 65 20 66 75 6c 6c 20 63 | 2.steps:.In.order.to.have.full.c |
d2b60 | 6f 6e 74 72 6f 6c 20 61 6e 64 20 6d 61 6b 65 20 75 73 65 20 6f 66 20 6d 75 6c 74 69 70 6c 65 20 | ontrol.and.make.use.of.multiple. |
d2b80 | 73 74 61 74 69 63 20 70 75 62 6c 69 63 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 79 6f 75 72 | static.public.IP.addresses,.your |
d2ba0 | 20 56 79 4f 53 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 69 6e 69 74 69 61 74 65 20 74 68 65 20 | .VyOS.will.have.to.initiate.the. |
d2bc0 | 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 20 69 74 2e | PPPoE.connection.and.control.it. |
d2be0 | 20 49 6e 20 6f 72 64 65 72 20 66 6f 72 20 74 68 69 73 20 6d 65 74 68 6f 64 20 74 6f 20 77 6f 72 | .In.order.for.this.method.to.wor |
d2c00 | 6b 2c 20 79 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 66 69 67 75 72 65 20 6f 75 74 20 68 | k,.you.will.have.to.figure.out.h |
d2c20 | 6f 77 20 74 6f 20 6d 61 6b 65 20 79 6f 75 72 20 44 53 4c 20 4d 6f 64 65 6d 2f 52 6f 75 74 65 72 | ow.to.make.your.DSL.Modem/Router |
d2c40 | 20 73 77 69 74 63 68 20 69 6e 74 6f 20 61 20 42 72 69 64 67 65 64 20 4d 6f 64 65 20 73 6f 20 69 | .switch.into.a.Bridged.Mode.so.i |
d2c60 | 74 20 6f 6e 6c 79 20 61 63 74 73 20 61 73 20 61 20 44 53 4c 20 54 72 61 6e 73 63 65 69 76 65 72 | t.only.acts.as.a.DSL.Transceiver |
d2c80 | 20 64 65 76 69 63 65 20 74 6f 20 63 6f 6e 6e 65 63 74 20 62 65 74 77 65 65 6e 20 74 68 65 20 45 | .device.to.connect.between.the.E |
d2ca0 | 74 68 65 72 6e 65 74 20 6c 69 6e 6b 20 6f 66 20 79 6f 75 72 20 56 79 4f 53 20 61 6e 64 20 74 68 | thernet.link.of.your.VyOS.and.th |
d2cc0 | 65 20 70 68 6f 6e 65 20 63 61 62 6c 65 2e 20 4f 6e 63 65 20 79 6f 75 72 20 44 53 4c 20 54 72 61 | e.phone.cable..Once.your.DSL.Tra |
d2ce0 | 6e 73 63 65 69 76 65 72 20 69 73 20 69 6e 20 42 72 69 64 67 65 20 4d 6f 64 65 2c 20 79 6f 75 20 | nsceiver.is.in.Bridge.Mode,.you. |
d2d00 | 73 68 6f 75 6c 64 20 67 65 74 20 6e 6f 20 49 50 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 69 74 | should.get.no.IP.address.from.it |
d2d20 | 2e 20 50 6c 65 61 73 65 20 6d 61 6b 65 20 73 75 72 65 20 79 6f 75 20 63 6f 6e 6e 65 63 74 20 74 | ..Please.make.sure.you.connect.t |
d2d40 | 6f 20 74 68 65 20 45 74 68 65 72 6e 65 74 20 50 6f 72 74 20 31 20 69 66 20 79 6f 75 72 20 44 53 | o.the.Ethernet.Port.1.if.your.DS |
d2d60 | 4c 20 54 72 61 6e 73 63 65 69 76 65 72 20 68 61 73 20 61 20 73 77 69 74 63 68 2c 20 61 73 20 73 | L.Transceiver.has.a.switch,.as.s |
d2d80 | 6f 6d 65 20 6f 66 20 74 68 65 6d 20 6f 6e 6c 79 20 77 6f 72 6b 20 74 68 69 73 20 77 61 79 2e 00 | ome.of.them.only.work.this.way.. |
d2da0 | 49 6e 20 6f 72 64 65 72 20 74 6f 20 6d 61 70 20 73 70 65 63 69 66 69 63 20 49 50 76 36 20 61 64 | In.order.to.map.specific.IPv6.ad |
d2dc0 | 64 72 65 73 73 65 73 20 74 6f 20 73 70 65 63 69 66 69 63 20 68 6f 73 74 73 20 73 74 61 74 69 63 | dresses.to.specific.hosts.static |
d2de0 | 20 6d 61 70 70 69 6e 67 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 2e 20 54 68 65 20 66 6f | .mappings.can.be.created..The.fo |
d2e00 | 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 65 78 70 6c 61 69 6e 73 20 74 68 65 20 70 72 6f | llowing.example.explains.the.pro |
d2e20 | 63 65 73 73 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 6d 69 6e 69 6d 69 7a 65 20 74 68 65 20 66 | cess..In.order.to.minimize.the.f |
d2e40 | 6c 6f 6f 64 69 6e 67 20 6f 66 20 41 52 50 20 61 6e 64 20 4e 44 20 6d 65 73 73 61 67 65 73 20 69 | looding.of.ARP.and.ND.messages.i |
d2e60 | 6e 20 74 68 65 20 56 58 4c 41 4e 20 6e 65 74 77 6f 72 6b 2c 20 45 56 50 4e 20 69 6e 63 6c 75 64 | n.the.VXLAN.network,.EVPN.includ |
d2e80 | 65 73 20 70 72 6f 76 69 73 69 6f 6e 73 20 3a 72 66 63 3a 60 37 34 33 32 23 73 65 63 74 69 6f 6e | es.provisions.:rfc:`7432#section |
d2ea0 | 2d 31 30 60 20 74 68 61 74 20 61 6c 6c 6f 77 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 56 54 | -10`.that.allow.participating.VT |
d2ec0 | 45 50 73 20 74 6f 20 73 75 70 70 72 65 73 73 20 73 75 63 68 20 6d 65 73 73 61 67 65 73 20 69 6e | EPs.to.suppress.such.messages.in |
d2ee0 | 20 63 61 73 65 20 74 68 65 79 20 6b 6e 6f 77 20 74 68 65 20 4d 41 43 2d 49 50 20 62 69 6e 64 69 | .case.they.know.the.MAC-IP.bindi |
d2f00 | 6e 67 20 61 6e 64 20 63 61 6e 20 72 65 70 6c 79 20 6f 6e 20 62 65 68 61 6c 66 20 6f 66 20 74 68 | ng.and.can.reply.on.behalf.of.th |
d2f20 | 65 20 72 65 6d 6f 74 65 20 68 6f 73 74 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 73 65 70 61 72 | e.remote.host..In.order.to.separ |
d2f40 | 61 74 65 20 74 72 61 66 66 69 63 2c 20 46 61 69 72 20 51 75 65 75 65 20 75 73 65 73 20 61 20 63 | ate.traffic,.Fair.Queue.uses.a.c |
d2f60 | 6c 61 73 73 69 66 69 65 72 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 | lassifier.based.on.source.addres |
d2f80 | 73 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 61 6e 64 20 73 6f 75 72 63 | s,.destination.address.and.sourc |
d2fa0 | 65 20 70 6f 72 74 2e 20 54 68 65 20 61 6c 67 6f 72 69 74 68 6d 20 65 6e 71 75 65 75 65 73 20 70 | e.port..The.algorithm.enqueues.p |
d2fc0 | 61 63 6b 65 74 73 20 74 6f 20 68 61 73 68 20 62 75 63 6b 65 74 73 20 62 61 73 65 64 20 6f 6e 20 | ackets.to.hash.buckets.based.on. |
d2fe0 | 74 68 6f 73 65 20 74 72 65 65 20 70 61 72 61 6d 65 74 65 72 73 2e 20 45 61 63 68 20 6f 66 20 74 | those.tree.parameters..Each.of.t |
d3000 | 68 65 73 65 20 62 75 63 6b 65 74 73 20 73 68 6f 75 6c 64 20 72 65 70 72 65 73 65 6e 74 20 61 20 | hese.buckets.should.represent.a. |
d3020 | 75 6e 69 71 75 65 20 66 6c 6f 77 2e 20 42 65 63 61 75 73 65 20 6d 75 6c 74 69 70 6c 65 20 66 6c | unique.flow..Because.multiple.fl |
d3040 | 6f 77 73 20 6d 61 79 20 67 65 74 20 68 61 73 68 65 64 20 74 6f 20 74 68 65 20 73 61 6d 65 20 62 | ows.may.get.hashed.to.the.same.b |
d3060 | 75 63 6b 65 74 2c 20 74 68 65 20 68 61 73 68 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 20 69 73 20 | ucket,.the.hashing.algorithm.is. |
d3080 | 70 65 72 74 75 72 62 65 64 20 61 74 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 69 6e 74 65 72 76 | perturbed.at.configurable.interv |
d30a0 | 61 6c 73 20 73 6f 20 74 68 61 74 20 74 68 65 20 75 6e 66 61 69 72 6e 65 73 73 20 6c 61 73 74 73 | als.so.that.the.unfairness.lasts |
d30c0 | 20 6f 6e 6c 79 20 66 6f 72 20 61 20 73 68 6f 72 74 20 77 68 69 6c 65 2e 20 50 65 72 74 75 72 62 | .only.for.a.short.while..Perturb |
d30e0 | 61 74 69 6f 6e 20 6d 61 79 20 68 6f 77 65 76 65 72 20 63 61 75 73 65 20 73 6f 6d 65 20 69 6e 61 | ation.may.however.cause.some.ina |
d3100 | 64 76 65 72 74 65 6e 74 20 70 61 63 6b 65 74 20 72 65 6f 72 64 65 72 69 6e 67 20 74 6f 20 6f 63 | dvertent.packet.reordering.to.oc |
d3120 | 63 75 72 2e 20 41 6e 20 61 64 76 69 73 61 62 6c 65 20 76 61 6c 75 65 20 63 6f 75 6c 64 20 62 65 | cur..An.advisable.value.could.be |
d3140 | 20 31 30 20 73 65 63 6f 6e 64 73 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 50 49 4d | .10.seconds..In.order.to.use.PIM |
d3160 | 2c 20 69 74 20 69 73 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 | ,.it.is.necessary.to.configure.a |
d3180 | 20 3a 61 62 62 72 3a 60 52 50 20 28 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 29 60 20 66 | .:abbr:`RP.(Rendezvous.Point)`.f |
d31a0 | 6f 72 20 6a 6f 69 6e 20 6d 65 73 73 61 67 65 73 20 74 6f 20 62 65 20 73 65 6e 74 20 74 6f 2e 20 | or.join.messages.to.be.sent.to.. |
d31c0 | 43 75 72 72 65 6e 74 6c 79 20 74 68 65 20 6f 6e 6c 79 20 6d 65 74 68 6f 64 6f 6c 6f 67 79 20 74 | Currently.the.only.methodology.t |
d31e0 | 6f 20 64 6f 20 74 68 69 73 20 69 73 20 76 69 61 20 73 74 61 74 69 63 20 72 65 6e 64 65 7a 76 6f | o.do.this.is.via.static.rendezvo |
d3200 | 75 73 20 70 6f 69 6e 74 20 63 6f 6d 6d 61 6e 64 73 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 | us.point.commands..In.order.to.u |
d3220 | 73 65 20 54 53 4f 2f 4c 52 4f 20 77 69 74 68 20 56 4d 58 4e 45 54 33 20 61 64 61 74 65 72 73 20 | se.TSO/LRO.with.VMXNET3.adaters. |
d3240 | 6f 6e 65 20 6d 75 73 74 20 61 6c 73 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 53 47 20 6f 66 66 6c | one.must.also.enable.the.SG.offl |
d3260 | 6f 61 64 69 6e 67 20 6f 70 74 69 6f 6e 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 66 | oading.option..In.order.to.use.f |
d3280 | 6c 6f 77 74 61 62 6c 65 73 2c 20 74 68 65 20 6d 69 6e 69 6d 61 6c 20 63 6f 6e 66 69 67 75 72 61 | lowtables,.the.minimal.configura |
d32a0 | 74 69 6f 6e 20 6e 65 65 64 65 64 20 69 6e 63 6c 75 64 65 73 3a 00 49 6e 20 6f 74 68 65 72 20 77 | tion.needed.includes:.In.other.w |
d32c0 | 6f 72 64 73 20 69 74 20 61 6c 6c 6f 77 73 20 63 6f 6e 74 72 6f 6c 20 6f 66 20 77 68 69 63 68 20 | ords.it.allows.control.of.which. |
d32e0 | 63 61 72 64 73 20 28 75 73 75 61 6c 6c 79 20 31 29 20 77 69 6c 6c 20 72 65 73 70 6f 6e 64 20 74 | cards.(usually.1).will.respond.t |
d3300 | 6f 20 61 6e 20 61 72 70 20 72 65 71 75 65 73 74 2e 00 49 6e 20 6f 74 68 65 72 20 77 6f 72 64 73 | o.an.arp.request..In.other.words |
d3320 | 2c 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 68 61 73 20 61 6c 72 65 61 64 | ,.connection.tracking.has.alread |
d3340 | 79 20 6f 62 73 65 72 76 65 64 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 62 65 20 63 6c 6f | y.observed.the.connection.be.clo |
d3360 | 73 65 64 20 61 6e 64 20 68 61 73 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 68 65 20 66 6c 6f 77 20 | sed.and.has.transition.the.flow. |
d3380 | 74 6f 20 49 4e 56 41 4c 49 44 20 74 6f 20 70 72 65 76 65 6e 74 20 61 74 74 61 63 6b 73 20 66 72 | to.INVALID.to.prevent.attacks.fr |
d33a0 | 6f 6d 20 61 74 74 65 6d 70 74 69 6e 67 20 74 6f 20 72 65 75 73 65 20 74 68 65 20 63 6f 6e 6e 65 | om.attempting.to.reuse.the.conne |
d33c0 | 63 74 69 6f 6e 2e 00 49 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 20 74 68 65 20 63 65 72 74 69 66 | ction..In.our.example.the.certif |
d33e0 | 69 63 61 74 65 20 6e 61 6d 65 20 69 73 20 63 61 6c 6c 65 64 20 76 79 6f 73 3a 00 49 6e 20 6f 75 | icate.name.is.called.vyos:.In.ou |
d3400 | 72 20 65 78 61 6d 70 6c 65 2c 20 77 65 20 75 73 65 64 20 74 68 65 20 6b 65 79 20 6e 61 6d 65 20 | r.example,.we.used.the.key.name. |
d3420 | 60 60 6f 70 65 6e 76 70 6e 2d 31 60 60 20 77 68 69 63 68 20 77 65 20 77 69 6c 6c 20 72 65 66 65 | ``openvpn-1``.which.we.will.refe |
d3440 | 72 65 6e 63 65 20 69 6e 20 6f 75 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 49 6e 20 6f | rence.in.our.configuration..In.o |
d3460 | 75 72 20 65 78 61 6d 70 6c 65 2c 20 77 65 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 64 69 6e | ur.example,.we.will.be.forwardin |
d3480 | 67 20 77 65 62 20 73 65 72 76 65 72 20 74 72 61 66 66 69 63 20 74 6f 20 61 6e 20 69 6e 74 65 72 | g.web.server.traffic.to.an.inter |
d34a0 | 6e 61 6c 20 77 65 62 20 73 65 72 76 65 72 20 6f 6e 20 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 2e | nal.web.server.on.192.168.0.100. |
d34c0 | 20 48 54 54 50 20 74 72 61 66 66 69 63 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 74 68 65 20 54 | .HTTP.traffic.makes.use.of.the.T |
d34e0 | 43 50 20 70 72 6f 74 6f 63 6f 6c 20 6f 6e 20 70 6f 72 74 20 38 30 2e 20 46 6f 72 20 6f 74 68 65 | CP.protocol.on.port.80..For.othe |
d3500 | 72 20 63 6f 6d 6d 6f 6e 20 70 6f 72 74 20 6e 75 6d 62 65 72 73 2c 20 73 65 65 3a 20 68 74 74 70 | r.common.port.numbers,.see:.http |
d3520 | 73 3a 2f 2f 65 6e 2e 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 4c 69 73 74 5f 6f | s://en.wikipedia.org/wiki/List_o |
d3540 | 66 5f 54 43 50 5f 61 6e 64 5f 55 44 50 5f 70 6f 72 74 5f 6e 75 6d 62 65 72 73 00 49 6e 20 70 72 | f_TCP_and_UDP_port_numbers.In.pr |
d3560 | 69 6e 63 69 70 6c 65 2c 20 76 61 6c 75 65 73 20 6d 75 73 74 20 62 65 20 3a 63 6f 64 65 3a 60 6d | inciple,.values.must.be.:code:`m |
d3580 | 69 6e 2d 74 68 72 65 73 68 6f 6c 64 60 20 3c 20 3a 63 6f 64 65 3a 60 6d 61 78 2d 74 68 72 65 73 | in-threshold`.<.:code:`max-thres |
d35a0 | 68 6f 6c 64 60 20 3c 20 3a 63 6f 64 65 3a 60 71 75 65 75 65 2d 6c 69 6d 69 74 60 2e 00 49 6e 20 | hold`.<.:code:`queue-limit`..In. |
d35c0 | 73 68 6f 72 74 2c 20 44 4d 56 50 4e 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 63 61 70 61 62 69 | short,.DMVPN.provides.the.capabi |
d35e0 | 6c 69 74 79 20 66 6f 72 20 63 72 65 61 74 69 6e 67 20 61 20 64 79 6e 61 6d 69 63 2d 6d 65 73 68 | lity.for.creating.a.dynamic-mesh |
d3600 | 20 56 50 4e 20 6e 65 74 77 6f 72 6b 20 77 69 74 68 6f 75 74 20 68 61 76 69 6e 67 20 74 6f 20 70 | .VPN.network.without.having.to.p |
d3620 | 72 65 2d 63 6f 6e 66 69 67 75 72 65 20 28 73 74 61 74 69 63 29 20 61 6c 6c 20 70 6f 73 73 69 62 | re-configure.(static).all.possib |
d3640 | 6c 65 20 74 75 6e 6e 65 6c 20 65 6e 64 2d 70 6f 69 6e 74 20 70 65 65 72 73 2e 00 49 6e 20 73 6f | le.tunnel.end-point.peers..In.so |
d3660 | 6d 65 20 63 61 73 65 73 20 69 74 20 6d 61 79 20 62 65 20 6d 6f 72 65 20 63 6f 6e 76 65 6e 69 65 | me.cases.it.may.be.more.convenie |
d3680 | 6e 74 20 74 6f 20 65 6e 61 62 6c 65 20 4f 53 50 46 20 6f 6e 20 61 20 70 65 72 20 69 6e 74 65 72 | nt.to.enable.OSPF.on.a.per.inter |
d36a0 | 66 61 63 65 2f 73 75 62 6e 65 74 20 62 61 73 69 73 20 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 70 | face/subnet.basis.:cfgcmd:`set.p |
d36c0 | 72 6f 74 6f 63 6f 6c 73 20 6f 73 70 66 20 69 6e 74 65 72 66 61 63 65 20 3c 69 6e 74 65 72 66 61 | rotocols.ospf.interface.<interfa |
d36e0 | 63 65 3e 20 61 72 65 61 20 3c 78 2e 78 2e 78 2e 78 20 7c 20 78 3e 60 00 49 6e 20 74 68 65 20 3a | ce>.area.<x.x.x.x.|.x>`.In.the.: |
d3700 | 72 65 66 3a 60 63 72 65 61 74 69 6e 67 5f 61 5f 74 72 61 66 66 69 63 5f 70 6f 6c 69 63 79 60 20 | ref:`creating_a_traffic_policy`. |
d3720 | 73 65 63 74 69 6f 6e 20 79 6f 75 20 77 69 6c 6c 20 73 65 65 20 74 68 61 74 20 73 6f 6d 65 20 6f | section.you.will.see.that.some.o |
d3740 | 66 20 74 68 65 20 70 6f 6c 69 63 69 65 73 20 75 73 65 20 2a 63 6c 61 73 73 65 73 2a 2e 20 54 68 | f.the.policies.use.*classes*..Th |
d3760 | 6f 73 65 20 70 6f 6c 69 63 69 65 73 20 6c 65 74 20 79 6f 75 20 64 69 73 74 72 69 62 75 74 65 20 | ose.policies.let.you.distribute. |
d3780 | 74 72 61 66 66 69 63 20 69 6e 74 6f 20 64 69 66 66 65 72 65 6e 74 20 63 6c 61 73 73 65 73 20 61 | traffic.into.different.classes.a |
d37a0 | 63 63 6f 72 64 69 6e 67 20 74 6f 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 61 6d 65 74 65 72 73 | ccording.to.different.parameters |
d37c0 | 20 79 6f 75 20 63 61 6e 20 63 68 6f 6f 73 65 2e 20 53 6f 2c 20 61 20 63 6c 61 73 73 20 69 73 20 | .you.can.choose..So,.a.class.is. |
d37e0 | 6a 75 73 74 20 61 20 73 70 65 63 69 66 69 63 20 74 79 70 65 20 6f 66 20 74 72 61 66 66 69 63 20 | just.a.specific.type.of.traffic. |
d3800 | 79 6f 75 20 73 65 6c 65 63 74 2e 00 49 6e 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2c 20 61 20 6b | you.select..In.the.VyOS.CLI,.a.k |
d3820 | 65 79 20 70 6f 69 6e 74 20 6f 66 74 65 6e 20 6f 76 65 72 6c 6f 6f 6b 65 64 20 69 73 20 74 68 61 | ey.point.often.overlooked.is.tha |
d3840 | 74 20 72 61 74 68 65 72 20 74 68 61 6e 20 62 65 69 6e 67 20 63 6f 6e 66 69 67 75 72 65 64 20 75 | t.rather.than.being.configured.u |
d3860 | 73 69 6e 67 20 74 68 65 20 60 73 65 74 20 76 70 6e 60 20 73 74 61 6e 7a 61 2c 20 4f 70 65 6e 56 | sing.the.`set.vpn`.stanza,.OpenV |
d3880 | 50 4e 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 6e 65 74 77 6f 72 6b 20 69 6e | PN.is.configured.as.a.network.in |
d38a0 | 74 65 72 66 61 63 65 20 75 73 69 6e 67 20 60 73 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 6f 70 | terface.using.`set.interfaces.op |
d38c0 | 65 6e 76 70 6e 60 2e 00 49 6e 20 74 68 65 20 61 62 6f 76 65 20 65 78 61 6d 70 6c 65 2c 20 61 6e | envpn`..In.the.above.example,.an |
d38e0 | 20 65 78 74 65 72 6e 61 6c 20 49 50 20 6f 66 20 31 39 32 2e 30 2e 32 2e 32 20 69 73 20 61 73 73 | .external.IP.of.192.0.2.2.is.ass |
d3900 | 75 6d 65 64 2e 00 49 6e 20 74 68 65 20 61 67 65 20 6f 66 20 76 65 72 79 20 66 61 73 74 20 6e 65 | umed..In.the.age.of.very.fast.ne |
d3920 | 74 77 6f 72 6b 73 2c 20 61 20 73 65 63 6f 6e 64 20 6f 66 20 75 6e 72 65 61 63 68 61 62 69 6c 69 | tworks,.a.second.of.unreachabili |
d3940 | 74 79 20 6d 61 79 20 65 71 75 61 6c 20 6d 69 6c 6c 69 6f 6e 73 20 6f 66 20 6c 6f 73 74 20 70 61 | ty.may.equal.millions.of.lost.pa |
d3960 | 63 6b 65 74 73 2e 20 54 68 65 20 69 64 65 61 20 62 65 68 69 6e 64 20 42 46 44 20 69 73 20 74 6f | ckets..The.idea.behind.BFD.is.to |
d3980 | 20 64 65 74 65 63 74 20 76 65 72 79 20 71 75 69 63 6b 6c 79 20 77 68 65 6e 20 61 20 70 65 65 72 | .detect.very.quickly.when.a.peer |
d39a0 | 20 69 73 20 64 6f 77 6e 20 61 6e 64 20 74 61 6b 65 20 61 63 74 69 6f 6e 20 65 78 74 72 65 6d 65 | .is.down.and.take.action.extreme |
d39c0 | 6c 79 20 66 61 73 74 2e 00 49 6e 20 74 68 65 20 63 61 73 65 20 6f 66 20 4c 32 54 50 76 33 2c 20 | ly.fast..In.the.case.of.L2TPv3,. |
d39e0 | 74 68 65 20 66 65 61 74 75 72 65 73 20 6c 6f 73 74 20 61 72 65 20 74 65 6c 65 74 72 61 66 66 69 | the.features.lost.are.teletraffi |
d3a00 | 63 20 65 6e 67 69 6e 65 65 72 69 6e 67 20 66 65 61 74 75 72 65 73 20 63 6f 6e 73 69 64 65 72 65 | c.engineering.features.considere |
d3a20 | 64 20 69 6d 70 6f 72 74 61 6e 74 20 69 6e 20 4d 50 4c 53 2e 20 48 6f 77 65 76 65 72 2c 20 74 68 | d.important.in.MPLS..However,.th |
d3a40 | 65 72 65 20 69 73 20 6e 6f 20 72 65 61 73 6f 6e 20 74 68 65 73 65 20 66 65 61 74 75 72 65 73 20 | ere.is.no.reason.these.features. |
d3a60 | 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 2d 65 6e 67 69 6e 65 65 72 65 64 20 69 6e 20 6f 72 | could.not.be.re-engineered.in.or |
d3a80 | 20 6f 6e 20 74 6f 70 20 6f 66 20 4c 32 54 50 76 33 20 69 6e 20 6c 61 74 65 72 20 70 72 6f 64 75 | .on.top.of.L2TPv3.in.later.produ |
d3aa0 | 63 74 73 2e 00 49 6e 20 74 68 65 20 63 61 73 65 20 74 68 65 20 61 76 65 72 61 67 65 20 71 75 65 | cts..In.the.case.the.average.que |
d3ac0 | 75 65 20 73 69 7a 65 20 69 73 20 62 65 74 77 65 65 6e 20 2a 2a 6d 69 6e 2d 74 68 72 65 73 68 6f | ue.size.is.between.**min-thresho |
d3ae0 | 6c 64 2a 2a 20 61 6e 64 20 2a 2a 6d 61 78 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 2c 20 74 68 65 6e | ld**.and.**max-threshold**,.then |
d3b00 | 20 61 6e 20 61 72 72 69 76 69 6e 67 20 70 61 63 6b 65 74 20 77 6f 75 6c 64 20 62 65 20 65 69 74 | .an.arriving.packet.would.be.eit |
d3b20 | 68 65 72 20 64 72 6f 70 70 65 64 20 6f 72 20 70 6c 61 63 65 64 20 69 6e 20 74 68 65 20 71 75 65 | her.dropped.or.placed.in.the.que |
d3b40 | 75 65 2c 20 69 74 20 77 69 6c 6c 20 64 65 70 65 6e 64 20 6f 6e 20 74 68 65 20 64 65 66 69 6e 65 | ue,.it.will.depend.on.the.define |
d3b60 | 64 20 2a 2a 6d 61 72 6b 2d 70 72 6f 62 61 62 69 6c 69 74 79 2a 2a 2e 00 49 6e 20 74 68 65 20 63 | d.**mark-probability**..In.the.c |
d3b80 | 61 73 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 70 70 6c 79 20 73 6f 6d 65 20 6b 69 6e 64 20 | ase.you.want.to.apply.some.kind. |
d3ba0 | 6f 66 20 2a 2a 73 68 61 70 69 6e 67 2a 2a 20 74 6f 20 79 6f 75 72 20 2a 2a 69 6e 62 6f 75 6e 64 | of.**shaping**.to.your.**inbound |
d3bc0 | 2a 2a 20 74 72 61 66 66 69 63 2c 20 63 68 65 63 6b 20 74 68 65 20 69 6e 67 72 65 73 73 2d 73 68 | **.traffic,.check.the.ingress-sh |
d3be0 | 61 70 69 6e 67 5f 20 73 65 63 74 69 6f 6e 2e 00 49 6e 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 61 | aping_.section..In.the.command.a |
d3c00 | 62 6f 76 65 2c 20 77 65 20 73 65 74 20 74 68 65 20 74 79 70 65 20 6f 66 20 70 6f 6c 69 63 79 20 | bove,.we.set.the.type.of.policy. |
d3c20 | 77 65 20 61 72 65 20 67 6f 69 6e 67 20 74 6f 20 77 6f 72 6b 20 77 69 74 68 20 61 6e 64 20 74 68 | we.are.going.to.work.with.and.th |
d3c40 | 65 20 6e 61 6d 65 20 77 65 20 63 68 6f 6f 73 65 20 66 6f 72 20 69 74 3b 20 61 20 63 6c 61 73 73 | e.name.we.choose.for.it;.a.class |
d3c60 | 20 28 73 6f 20 74 68 61 74 20 77 65 20 63 61 6e 20 64 69 66 66 65 72 65 6e 74 69 61 74 65 20 73 | .(so.that.we.can.differentiate.s |
d3c80 | 6f 6d 65 20 74 72 61 66 66 69 63 29 20 61 6e 64 20 61 6e 20 69 64 65 6e 74 69 66 69 61 62 6c 65 | ome.traffic).and.an.identifiable |
d3ca0 | 20 6e 75 6d 62 65 72 20 66 6f 72 20 74 68 61 74 20 63 6c 61 73 73 3b 20 74 68 65 6e 20 77 65 20 | .number.for.that.class;.then.we. |
d3cc0 | 63 6f 6e 66 69 67 75 72 65 20 61 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 20 28 6f 72 20 66 69 | configure.a.matching.rule.(or.fi |
d3ce0 | 6c 74 65 72 29 20 61 6e 64 20 61 20 6e 61 6d 65 20 66 6f 72 20 69 74 2e 00 49 6e 20 74 68 65 20 | lter).and.a.name.for.it..In.the. |
d3d00 | 65 6e 64 2c 20 61 6e 20 58 4d 4c 20 73 74 72 75 63 74 75 72 65 20 69 73 20 67 65 6e 65 72 61 74 | end,.an.XML.structure.is.generat |
d3d20 | 65 64 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 73 61 76 65 64 20 61 73 20 60 60 76 79 6f 73 2e | ed.which.can.be.saved.as.``vyos. |
d3d40 | 6d 6f 62 69 6c 65 63 6f 6e 66 69 67 60 60 20 61 6e 64 20 73 65 6e 74 20 74 6f 20 74 68 65 20 64 | mobileconfig``.and.sent.to.the.d |
d3d60 | 65 76 69 63 65 20 62 79 20 45 2d 4d 61 69 6c 20 77 68 65 72 65 20 69 74 20 6c 61 74 65 72 20 63 | evice.by.E-Mail.where.it.later.c |
d3d80 | 61 6e 20 62 65 20 69 6d 70 6f 72 74 65 64 2e 00 49 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 61 | an.be.imported..In.the.example.a |
d3da0 | 62 6f 76 65 2c 20 74 68 65 20 66 69 72 73 74 20 34 39 39 20 73 65 73 73 69 6f 6e 73 20 63 6f 6e | bove,.the.first.499.sessions.con |
d3dc0 | 6e 65 63 74 20 77 69 74 68 6f 75 74 20 64 65 6c 61 79 2e 20 50 41 44 4f 20 70 61 63 6b 65 74 73 | nect.without.delay..PADO.packets |
d3de0 | 20 77 69 6c 6c 20 62 65 20 64 65 6c 61 79 65 64 20 35 30 20 6d 73 20 66 6f 72 20 63 6f 6e 6e 65 | .will.be.delayed.50.ms.for.conne |
d3e00 | 63 74 69 6f 6e 20 66 72 6f 6d 20 35 30 30 20 74 6f 20 39 39 39 2c 20 74 68 69 73 20 74 72 69 63 | ction.from.500.to.999,.this.tric |
d3e20 | 6b 20 61 6c 6c 6f 77 73 20 6f 74 68 65 72 20 50 50 50 6f 45 20 73 65 72 76 65 72 73 20 73 65 6e | k.allows.other.PPPoE.servers.sen |
d3e40 | 64 20 50 41 44 4f 20 66 61 73 74 65 72 20 61 6e 64 20 63 6c 69 65 6e 74 73 20 77 69 6c 6c 20 63 | d.PADO.faster.and.clients.will.c |
d3e60 | 6f 6e 6e 65 63 74 20 74 6f 20 6f 74 68 65 72 20 73 65 72 76 65 72 73 2e 20 4c 61 73 74 20 63 6f | onnect.to.other.servers..Last.co |
d3e80 | 6d 6d 61 6e 64 20 73 61 79 73 20 74 68 61 74 20 74 68 69 73 20 50 50 50 6f 45 20 73 65 72 76 65 | mmand.says.that.this.PPPoE.serve |
d3ea0 | 72 20 63 61 6e 20 73 65 72 76 65 20 6f 6e 6c 79 20 33 30 30 30 20 63 6c 69 65 6e 74 73 2e 00 49 | r.can.serve.only.3000.clients..I |
d3ec0 | 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 51 75 69 63 6b | n.the.example.used.for.the.Quick |
d3ee0 | 20 53 74 61 72 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 62 6f 76 65 2c 20 77 65 20 64 | .Start.configuration.above,.we.d |
d3f00 | 65 6d 6f 6e 73 74 72 61 74 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 | emonstrate.the.following.configu |
d3f20 | 72 61 74 69 6f 6e 3a 00 49 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 | ration:.In.the.following.example |
d3f40 | 20 77 65 20 63 61 6e 20 73 65 65 20 61 20 62 61 73 69 63 20 6d 75 6c 74 69 63 61 73 74 20 73 65 | .we.can.see.a.basic.multicast.se |
d3f60 | 74 75 70 3a 00 49 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 2c 20 62 | tup:.In.the.following.example,.b |
d3f80 | 6f 74 68 20 60 55 73 65 72 31 60 20 61 6e 64 20 60 55 73 65 72 32 60 20 77 69 6c 6c 20 62 65 20 | oth.`User1`.and.`User2`.will.be. |
d3fa0 | 61 62 6c 65 20 74 6f 20 53 53 48 20 69 6e 74 6f 20 56 79 4f 53 20 61 73 20 75 73 65 72 20 60 60 | able.to.SSH.into.VyOS.as.user.`` |
d3fc0 | 76 79 6f 73 60 60 20 75 73 69 6e 67 20 74 68 65 69 72 20 76 65 72 79 20 6f 77 6e 20 6b 65 79 73 | vyos``.using.their.very.own.keys |
d3fe0 | 2e 20 60 55 73 65 72 31 60 20 69 73 20 72 65 73 74 72 69 63 74 65 64 20 74 6f 20 6f 6e 6c 79 20 | ..`User1`.is.restricted.to.only. |
d4000 | 62 65 20 61 62 6c 65 20 74 6f 20 63 6f 6e 6e 65 63 74 20 66 72 6f 6d 20 61 20 73 69 6e 67 6c 65 | be.able.to.connect.from.a.single |
d4020 | 20 49 50 20 61 64 64 72 65 73 73 2e 20 49 6e 20 61 64 64 69 74 69 6f 6e 20 69 66 20 70 61 73 73 | .IP.address..In.addition.if.pass |
d4040 | 77 6f 72 64 20 62 61 73 65 20 6c 6f 67 69 6e 20 69 73 20 77 61 6e 74 65 64 20 66 6f 72 20 74 68 | word.base.login.is.wanted.for.th |
d4060 | 65 20 60 60 76 79 6f 73 60 60 20 75 73 65 72 20 61 20 32 46 41 2f 4d 46 41 20 6b 65 79 63 6f 64 | e.``vyos``.user.a.2FA/MFA.keycod |
d4080 | 65 20 69 73 20 72 65 71 75 69 72 65 64 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 | e.is.required.in.addition.to.the |
d40a0 | 20 70 61 73 73 77 6f 72 64 2e 00 49 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d | .password..In.the.following.exam |
d40c0 | 70 6c 65 2c 20 74 68 65 20 49 50 73 20 66 6f 72 20 74 68 65 20 72 65 6d 6f 74 65 20 63 6c 69 65 | ple,.the.IPs.for.the.remote.clie |
d40e0 | 6e 74 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 65 20 70 65 65 72 73 2e 20 54 68 | nts.are.defined.in.the.peers..Th |
d4100 | 69 73 20 61 6c 6c 6f 77 73 20 74 68 65 20 70 65 65 72 73 20 74 6f 20 69 6e 74 65 72 61 63 74 20 | is.allows.the.peers.to.interact. |
d4120 | 77 69 74 68 20 6f 6e 65 20 61 6e 6f 74 68 65 72 2e 20 49 6e 20 63 6f 6d 70 61 72 69 73 6f 6e 20 | with.one.another..In.comparison. |
d4140 | 74 6f 20 74 68 65 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 65 78 61 6d 70 6c 65 20 74 68 65 20 | to.the.site-to-site.example.the. |
d4160 | 60 60 70 65 72 73 69 73 74 65 6e 74 2d 6b 65 65 70 61 6c 69 76 65 60 60 20 66 6c 61 67 20 69 73 | ``persistent-keepalive``.flag.is |
d4180 | 20 73 65 74 20 74 6f 20 31 35 20 73 65 63 6f 6e 64 73 20 74 6f 20 61 73 73 75 72 65 20 74 68 65 | .set.to.15.seconds.to.assure.the |
d41a0 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 6b 65 70 74 20 61 6c 69 76 65 2e 20 54 68 69 73 20 | .connection.is.kept.alive..This. |
d41c0 | 69 73 20 6d 61 69 6e 6c 79 20 72 65 6c 65 76 61 6e 74 20 69 66 20 6f 6e 65 20 6f 66 20 74 68 65 | is.mainly.relevant.if.one.of.the |
d41e0 | 20 70 65 65 72 73 20 69 73 20 62 65 68 69 6e 64 20 4e 41 54 20 61 6e 64 20 63 61 6e 27 74 20 62 | .peers.is.behind.NAT.and.can't.b |
d4200 | 65 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 69 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e | e.connected.to.if.the.connection |
d4220 | 20 69 73 20 6c 6f 73 74 2e 20 54 6f 20 62 65 20 65 66 66 65 63 74 69 76 65 20 74 68 69 73 20 76 | .is.lost..To.be.effective.this.v |
d4240 | 61 6c 75 65 20 6e 65 65 64 73 20 74 6f 20 62 65 20 6c 6f 77 65 72 20 74 68 61 6e 20 74 68 65 20 | alue.needs.to.be.lower.than.the. |
d4260 | 55 44 50 20 74 69 6d 65 6f 75 74 2e 00 49 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 | UDP.timeout..In.the.following.ex |
d4280 | 61 6d 70 6c 65 2c 20 77 68 65 6e 20 56 4c 41 4e 39 20 74 72 61 6e 73 69 74 69 6f 6e 73 2c 20 56 | ample,.when.VLAN9.transitions,.V |
d42a0 | 4c 41 4e 32 30 20 77 69 6c 6c 20 61 6c 73 6f 20 74 72 61 6e 73 69 74 69 6f 6e 3a 00 49 6e 20 74 | LAN20.will.also.transition:.In.t |
d42c0 | 68 65 20 66 75 74 75 72 65 20 74 68 69 73 20 69 73 20 65 78 70 65 63 74 65 64 20 74 6f 20 62 65 | he.future.this.is.expected.to.be |
d42e0 | 20 61 20 76 65 72 79 20 75 73 65 66 75 6c 20 70 72 6f 74 6f 63 6f 6c 20 28 74 68 6f 75 67 68 20 | .a.very.useful.protocol.(though. |
d4300 | 74 68 65 72 65 20 61 72 65 20 60 6f 74 68 65 72 20 70 72 6f 70 6f 73 61 6c 73 60 5f 29 2e 00 49 | there.are.`other.proposals`_)..I |
d4320 | 6e 20 74 68 65 20 6e 65 78 74 20 65 78 61 6d 70 6c 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 64 | n.the.next.example.all.traffic.d |
d4340 | 65 73 74 69 6e 65 64 20 74 6f 20 60 60 32 30 33 2e 30 2e 31 31 33 2e 31 60 60 20 61 6e 64 20 70 | estined.to.``203.0.113.1``.and.p |
d4360 | 6f 72 74 20 60 60 38 32 38 30 60 60 20 70 72 6f 74 6f 63 6f 6c 20 54 43 50 20 69 73 20 62 61 6c | ort.``8280``.protocol.TCP.is.bal |
d4380 | 61 6e 63 65 64 20 62 65 74 77 65 65 6e 20 32 20 72 65 61 6c 20 73 65 72 76 65 72 73 20 60 60 31 | anced.between.2.real.servers.``1 |
d43a0 | 39 32 2e 30 2e 32 2e 31 31 60 60 20 61 6e 64 20 60 60 31 39 32 2e 30 2e 32 2e 31 32 60 60 20 74 | 92.0.2.11``.and.``192.0.2.12``.t |
d43c0 | 6f 20 70 6f 72 74 20 60 60 38 30 60 60 00 49 6e 20 74 68 65 20 70 61 73 74 20 28 56 79 4f 53 20 | o.port.``80``.In.the.past.(VyOS. |
d43e0 | 31 2e 31 29 20 75 73 65 64 20 61 20 67 61 74 65 77 61 79 2d 61 64 64 72 65 73 73 20 63 6f 6e 66 | 1.1).used.a.gateway-address.conf |
d4400 | 69 67 75 72 65 64 20 75 6e 64 65 72 20 74 68 65 20 73 79 73 74 65 6d 20 74 72 65 65 20 28 3a 63 | igured.under.the.system.tree.(:c |
d4420 | 66 67 63 6d 64 3a 60 73 65 74 20 73 79 73 74 65 6d 20 67 61 74 65 77 61 79 2d 61 64 64 72 65 73 | fgcmd:`set.system.gateway-addres |
d4440 | 73 20 3c 61 64 64 72 65 73 73 3e 60 29 2c 20 74 68 69 73 20 69 73 20 6e 6f 20 6c 6f 6e 67 65 72 | s.<address>`),.this.is.no.longer |
d4460 | 20 73 75 70 70 6f 72 74 65 64 20 61 6e 64 20 65 78 69 73 74 69 6e 67 20 63 6f 6e 66 69 67 75 72 | .supported.and.existing.configur |
d4480 | 61 74 69 6f 6e 73 20 61 72 65 20 6d 69 67 72 61 74 65 64 20 74 6f 20 74 68 65 20 6e 65 77 20 43 | ations.are.migrated.to.the.new.C |
d44a0 | 4c 49 20 63 6f 6d 6d 61 6e 64 2e 00 49 6e 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 72 65 65 | LI.command..In.this.command.tree |
d44c0 | 2c 20 61 6c 6c 20 68 61 72 64 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 69 6f 6e 20 6f 70 74 69 | ,.all.hardware.acceleration.opti |
d44e0 | 6f 6e 73 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 6c 65 64 2e 20 41 74 20 74 68 65 20 6d 6f 6d 65 | ons.will.be.handled..At.the.mome |
d4500 | 6e 74 20 6f 6e 6c 79 20 60 49 6e 74 65 6c c2 ae 20 51 41 54 60 5f 20 69 73 20 73 75 70 70 6f 72 | nt.only.`Intel...QAT`_.is.suppor |
d4520 | 74 65 64 00 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 | ted.In.this.example.all.traffic. |
d4540 | 64 65 73 74 69 6e 65 64 20 74 6f 20 70 6f 72 74 73 20 22 38 30 2c 20 32 32 32 32 2c 20 38 38 38 | destined.to.ports."80,.2222,.888 |
d4560 | 38 22 20 70 72 6f 74 6f 63 6f 6c 20 54 43 50 20 6d 61 72 6b 73 20 74 6f 20 66 77 6d 61 72 6b 20 | 8".protocol.TCP.marks.to.fwmark. |
d4580 | 22 31 31 31 22 20 61 6e 64 20 62 61 6c 61 6e 63 65 64 20 62 65 74 77 65 65 6e 20 32 20 72 65 61 | "111".and.balanced.between.2.rea |
d45a0 | 6c 20 73 65 72 76 65 72 73 2e 20 50 6f 72 74 20 22 30 22 20 69 73 20 72 65 71 75 69 72 65 64 20 | l.servers..Port."0".is.required. |
d45c0 | 69 66 20 6d 75 6c 74 69 70 6c 65 20 70 6f 72 74 73 20 61 72 65 20 75 73 65 64 2e 00 49 6e 20 74 | if.multiple.ports.are.used..In.t |
d45e0 | 68 69 73 20 65 78 61 6d 70 6c 65 20 69 6d 61 67 65 2c 20 61 20 73 69 6d 70 6c 69 66 65 64 20 74 | his.example.image,.a.simplifed.t |
d4600 | 72 61 66 66 69 63 20 66 6c 6f 77 20 69 73 20 73 68 6f 77 6e 20 74 6f 20 68 65 6c 70 20 70 72 6f | raffic.flow.is.shown.to.help.pro |
d4620 | 76 69 64 65 20 63 6f 6e 74 65 78 74 20 74 6f 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 60 66 6f | vide.context.to.the.terms.of.`fo |
d4640 | 72 77 61 72 64 60 2c 20 60 69 6e 70 75 74 60 2c 20 61 6e 64 20 60 6f 75 74 70 75 74 60 20 66 6f | rward`,.`input`,.and.`output`.fo |
d4660 | 72 20 74 68 65 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 43 4c 49 20 66 6f 72 6d 61 74 2e 00 49 | r.the.new.firewall.CLI.format..I |
d4680 | 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 77 65 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 6d | n.this.example.we.will.use.the.m |
d46a0 | 6f 73 74 20 63 6f 6d 70 6c 69 63 61 74 65 64 20 63 61 73 65 3a 20 61 20 73 65 74 75 70 20 77 68 | ost.complicated.case:.a.setup.wh |
d46c0 | 65 72 65 20 65 61 63 68 20 63 6c 69 65 6e 74 20 69 73 20 61 20 72 6f 75 74 65 72 20 74 68 61 74 | ere.each.client.is.a.router.that |
d46e0 | 20 68 61 73 20 69 74 73 20 6f 77 6e 20 73 75 62 6e 65 74 20 28 74 68 69 6e 6b 20 48 51 20 61 6e | .has.its.own.subnet.(think.HQ.an |
d4700 | 64 20 62 72 61 6e 63 68 20 6f 66 66 69 63 65 73 29 2c 20 73 69 6e 63 65 20 73 69 6d 70 6c 65 72 | d.branch.offices),.since.simpler |
d4720 | 20 73 65 74 75 70 73 20 61 72 65 20 73 75 62 73 65 74 73 20 6f 66 20 69 74 2e 00 49 6e 20 74 68 | .setups.are.subsets.of.it..In.th |
d4740 | 69 73 20 65 78 61 6d 70 6c 65 2c 20 73 6f 6d 65 20 2a 4f 70 65 6e 4e 49 43 2a 20 73 65 72 76 65 | is.example,.some.*OpenNIC*.serve |
d4760 | 72 73 20 61 72 65 20 75 73 65 64 2c 20 74 77 6f 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 | rs.are.used,.two.IPv4.addresses. |
d4780 | 61 6e 64 20 74 77 6f 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 3a 00 49 6e 20 74 68 69 73 20 | and.two.IPv6.addresses:.In.this. |
d47a0 | 65 78 61 6d 70 6c 65 2c 20 77 65 20 75 73 65 20 2a 2a 6d 61 73 71 75 65 72 61 64 65 2a 2a 20 61 | example,.we.use.**masquerade**.a |
d47c0 | 73 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 69 6e 73 74 65 61 | s.the.translation.address.instea |
d47e0 | 64 20 6f 66 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 2a 2a 6d 61 73 71 75 65 | d.of.an.IP.address..The.**masque |
d4800 | 72 61 64 65 2a 2a 20 74 61 72 67 65 74 20 69 73 20 65 66 66 65 63 74 69 76 65 6c 79 20 61 6e 20 | rade**.target.is.effectively.an. |
d4820 | 61 6c 69 61 73 20 74 6f 20 73 61 79 20 22 75 73 65 20 77 68 61 74 65 76 65 72 20 49 50 20 61 64 | alias.to.say."use.whatever.IP.ad |
d4840 | 64 72 65 73 73 20 69 73 20 6f 6e 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 | dress.is.on.the.outgoing.interfa |
d4860 | 63 65 22 2c 20 72 61 74 68 65 72 20 74 68 61 6e 20 61 20 73 74 61 74 69 63 61 6c 6c 79 20 63 6f | ce",.rather.than.a.statically.co |
d4880 | 6e 66 69 67 75 72 65 64 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 69 73 20 75 73 65 | nfigured.IP.address..This.is.use |
d48a0 | 66 75 6c 20 69 66 20 79 6f 75 20 75 73 65 20 44 48 43 50 20 66 6f 72 20 79 6f 75 72 20 6f 75 74 | ful.if.you.use.DHCP.for.your.out |
d48c0 | 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 64 6f 20 6e 6f 74 20 6b 6e 6f 77 20 | going.interface.and.do.not.know. |
d48e0 | 77 68 61 74 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 | what.the.external.address.will.b |
d4900 | 65 2e 00 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 2c 20 77 65 20 77 69 6c 6c 20 62 65 20 75 | e..In.this.example,.we.will.be.u |
d4920 | 73 69 6e 67 20 74 68 65 20 65 78 61 6d 70 6c 65 20 51 75 69 63 6b 20 53 74 61 72 74 20 63 6f 6e | sing.the.example.Quick.Start.con |
d4940 | 66 69 67 75 72 61 74 69 6f 6e 20 61 62 6f 76 65 20 61 73 20 61 20 73 74 61 72 74 69 6e 67 20 70 | figuration.above.as.a.starting.p |
d4960 | 6f 69 6e 74 2e 00 49 6e 20 74 68 69 73 20 6d 65 74 68 6f 64 2c 20 74 68 65 20 44 53 4c 20 4d 6f | oint..In.this.method,.the.DSL.Mo |
d4980 | 64 65 6d 2f 52 6f 75 74 65 72 20 63 6f 6e 6e 65 63 74 73 20 74 6f 20 74 68 65 20 49 53 50 20 66 | dem/Router.connects.to.the.ISP.f |
d49a0 | 6f 72 20 79 6f 75 20 77 69 74 68 20 79 6f 75 72 20 63 72 65 64 65 6e 74 69 61 6c 73 20 70 72 65 | or.you.with.your.credentials.pre |
d49c0 | 70 72 6f 67 72 61 6d 6d 65 64 20 69 6e 74 6f 20 74 68 65 20 64 65 76 69 63 65 2e 20 54 68 69 73 | programmed.into.the.device..This |
d49e0 | 20 67 69 76 65 73 20 79 6f 75 20 61 6e 20 3a 72 66 63 3a 60 31 39 31 38 60 20 61 64 64 72 65 73 | .gives.you.an.:rfc:`1918`.addres |
d4a00 | 73 2c 20 73 75 63 68 20 61 73 20 60 60 31 39 32 2e 31 36 38 2e 31 2e 30 2f 32 34 60 60 20 62 79 | s,.such.as.``192.168.1.0/24``.by |
d4a20 | 20 64 65 66 61 75 6c 74 2e 00 49 6e 20 74 68 69 73 20 73 63 65 6e 61 72 69 6f 3a 00 49 6e 20 74 | .default..In.this.scenario:.In.t |
d4a40 | 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 | his.section.there's.useful.infor |
d4a60 | 6d 61 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 | mation.of.all.firewall.configura |
d4a80 | 74 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 72 65 67 61 72 64 69 6e 67 20 | tion.that.can.be.done.regarding. |
d4aa0 | 49 50 76 34 2c 20 61 6e 64 20 61 70 70 72 6f 70 69 61 74 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d | IPv4,.and.appropiate.op-mode.com |
d4ac0 | 6d 61 6e 64 73 2e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f | mands..Configuration.commands.co |
d4ae0 | 76 65 72 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 3a 00 49 6e 20 74 68 69 73 20 73 | vered.in.this.section:.In.this.s |
d4b00 | 65 63 74 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f | ection.there's.useful.informatio |
d4b20 | 6e 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | n.of.all.firewall.configuration. |
d4b40 | 74 68 61 74 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 72 65 67 61 72 64 69 6e 67 20 49 50 76 36 2c | that.can.be.done.regarding.IPv6, |
d4b60 | 20 61 6e 64 20 61 70 70 72 6f 70 69 61 74 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 | .and.appropiate.op-mode.commands |
d4b80 | 2e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f 76 65 72 65 64 | ..Configuration.commands.covered |
d4ba0 | 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 3a 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f | .in.this.section:.In.this.sectio |
d4bc0 | 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 | n.there's.useful.information.of. |
d4be0 | 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 | all.firewall.configuration.that. |
d4c00 | 63 61 6e 20 62 65 20 64 6f 6e 65 20 72 65 67 61 72 64 69 6e 67 20 62 72 69 64 67 65 2c 20 61 6e | can.be.done.regarding.bridge,.an |
d4c20 | 64 20 61 70 70 72 6f 70 69 61 74 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 2e 20 43 | d.appropiate.op-mode.commands..C |
d4c40 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f 76 65 72 65 64 20 69 6e | onfiguration.commands.covered.in |
d4c60 | 20 74 68 69 73 20 73 65 63 74 69 6f 6e 3a 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 74 | .this.section:.In.this.section.t |
d4c80 | 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 61 6c 6c | here's.useful.information.of.all |
d4ca0 | 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 63 61 6e | .firewall.configuration.that.can |
d4cc0 | 20 62 65 20 64 6f 6e 65 20 72 65 67 61 72 64 69 6e 67 20 66 6c 6f 77 74 61 62 6c 65 73 00 49 6e | .be.done.regarding.flowtables.In |
d4ce0 | 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 | .this.section.there's.useful.inf |
d4d00 | 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 | ormation.of.all.firewall.configu |
d4d20 | 72 61 74 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 72 65 67 61 72 64 69 6e | ration.that.can.be.done.regardin |
d4d40 | 67 20 66 6c 6f 77 74 61 62 6c 65 73 2e 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 | g.flowtables..In.this.section.th |
d4d60 | 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 | ere's.useful.information.of.all. |
d4d80 | 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 69 73 20 6e | firewall.configuration.that.is.n |
d4da0 | 65 65 64 65 64 20 66 6f 72 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 2e 20 43 | eeded.for.zone-based.firewall..C |
d4dc0 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f 76 65 72 65 64 20 69 6e | onfiguration.commands.covered.in |
d4de0 | 20 74 68 69 73 20 73 65 63 74 69 6f 6e 3a 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 79 | .this.section:.In.this.section.y |
d4e00 | 6f 75 20 63 61 6e 20 66 69 6e 64 20 61 6c 6c 20 75 73 65 66 75 6c 20 66 69 72 65 77 61 6c 6c 20 | ou.can.find.all.useful.firewall. |
d4e20 | 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 2e 00 49 6e 20 74 72 61 6e 73 70 61 72 65 6e 74 | op-mode.commands..In.transparent |
d4e40 | 20 70 72 6f 78 79 20 6d 6f 64 65 2c 20 61 6c 6c 20 74 72 61 66 66 69 63 20 61 72 72 69 76 69 6e | .proxy.mode,.all.traffic.arrivin |
d4e60 | 67 20 6f 6e 20 70 6f 72 74 20 38 30 20 61 6e 64 20 64 65 73 74 69 6e 65 64 20 66 6f 72 20 74 68 | g.on.port.80.and.destined.for.th |
d4e80 | 65 20 49 6e 74 65 72 6e 65 74 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 66 6f 72 77 | e.Internet.is.automatically.forw |
d4ea0 | 61 72 64 65 64 20 74 68 72 6f 75 67 68 20 74 68 65 20 70 72 6f 78 79 2e 20 54 68 69 73 20 61 6c | arded.through.the.proxy..This.al |
d4ec0 | 6c 6f 77 73 20 69 6d 6d 65 64 69 61 74 65 20 70 72 6f 78 79 20 66 6f 72 77 61 72 64 69 6e 67 20 | lows.immediate.proxy.forwarding. |
d4ee0 | 77 69 74 68 6f 75 74 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 63 6c 69 65 6e 74 20 62 72 6f 77 73 | without.configuring.client.brows |
d4f00 | 65 72 73 2e 00 49 6e 20 74 79 70 69 63 61 6c 20 75 73 65 73 20 6f 66 20 53 4e 4d 50 2c 20 6f 6e | ers..In.typical.uses.of.SNMP,.on |
d4f20 | 65 20 6f 72 20 6d 6f 72 65 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 63 6f 6d 70 75 74 65 | e.or.more.administrative.compute |
d4f40 | 72 73 20 63 61 6c 6c 65 64 20 6d 61 6e 61 67 65 72 73 20 68 61 76 65 20 74 68 65 20 74 61 73 6b | rs.called.managers.have.the.task |
d4f60 | 20 6f 66 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 6f 72 20 6d 61 6e 61 67 69 6e 67 20 61 20 67 72 6f | .of.monitoring.or.managing.a.gro |
d4f80 | 75 70 20 6f 66 20 68 6f 73 74 73 20 6f 72 20 64 65 76 69 63 65 73 20 6f 6e 20 61 20 63 6f 6d 70 | up.of.hosts.or.devices.on.a.comp |
d4fa0 | 75 74 65 72 20 6e 65 74 77 6f 72 6b 2e 20 45 61 63 68 20 6d 61 6e 61 67 65 64 20 73 79 73 74 65 | uter.network..Each.managed.syste |
d4fc0 | 6d 20 65 78 65 63 75 74 65 73 20 61 20 73 6f 66 74 77 61 72 65 20 63 6f 6d 70 6f 6e 65 6e 74 20 | m.executes.a.software.component. |
d4fe0 | 63 61 6c 6c 65 64 20 61 6e 20 61 67 65 6e 74 20 77 68 69 63 68 20 72 65 70 6f 72 74 73 20 69 6e | called.an.agent.which.reports.in |
d5000 | 66 6f 72 6d 61 74 69 6f 6e 20 76 69 61 20 53 4e 4d 50 20 74 6f 20 74 68 65 20 6d 61 6e 61 67 65 | formation.via.SNMP.to.the.manage |
d5020 | 72 2e 00 49 6e 20 7a 6f 6e 65 2d 62 61 73 65 64 20 70 6f 6c 69 63 79 2c 20 69 6e 74 65 72 66 61 | r..In.zone-based.policy,.interfa |
d5040 | 63 65 73 20 61 72 65 20 61 73 73 69 67 6e 65 64 20 74 6f 20 7a 6f 6e 65 73 2c 20 61 6e 64 20 69 | ces.are.assigned.to.zones,.and.i |
d5060 | 6e 73 70 65 63 74 69 6f 6e 20 70 6f 6c 69 63 79 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 74 | nspection.policy.is.applied.to.t |
d5080 | 72 61 66 66 69 63 20 6d 6f 76 69 6e 67 20 62 65 74 77 65 65 6e 20 74 68 65 20 7a 6f 6e 65 73 20 | raffic.moving.between.the.zones. |
d50a0 | 61 6e 64 20 61 63 74 65 64 20 6f 6e 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 66 69 72 65 77 61 | and.acted.on.according.to.firewa |
d50c0 | 6c 6c 20 72 75 6c 65 73 2e 20 41 20 5a 6f 6e 65 20 69 73 20 61 20 67 72 6f 75 70 20 6f 66 20 69 | ll.rules..A.Zone.is.a.group.of.i |
d50e0 | 6e 74 65 72 66 61 63 65 73 20 74 68 61 74 20 68 61 76 65 20 73 69 6d 69 6c 61 72 20 66 75 6e 63 | nterfaces.that.have.similar.func |
d5100 | 74 69 6f 6e 73 20 6f 72 20 66 65 61 74 75 72 65 73 2e 20 49 74 20 65 73 74 61 62 6c 69 73 68 65 | tions.or.features..It.establishe |
d5120 | 73 20 74 68 65 20 73 65 63 75 72 69 74 79 20 62 6f 72 64 65 72 73 20 6f 66 20 61 20 6e 65 74 77 | s.the.security.borders.of.a.netw |
d5140 | 6f 72 6b 2e 20 41 20 7a 6f 6e 65 20 64 65 66 69 6e 65 73 20 61 20 62 6f 75 6e 64 61 72 79 20 77 | ork..A.zone.defines.a.boundary.w |
d5160 | 68 65 72 65 20 74 72 61 66 66 69 63 20 69 73 20 73 75 62 6a 65 63 74 65 64 20 74 6f 20 70 6f 6c | here.traffic.is.subjected.to.pol |
d5180 | 69 63 79 20 72 65 73 74 72 69 63 74 69 6f 6e 73 20 61 73 20 69 74 20 63 72 6f 73 73 65 73 20 74 | icy.restrictions.as.it.crosses.t |
d51a0 | 6f 20 61 6e 6f 74 68 65 72 20 72 65 67 69 6f 6e 20 6f 66 20 61 20 6e 65 74 77 6f 72 6b 2e 00 49 | o.another.region.of.a.network..I |
d51c0 | 6e 20 7a 6f 6e 65 2d 62 61 73 65 64 20 70 6f 6c 69 63 79 2c 20 69 6e 74 65 72 66 61 63 65 73 20 | n.zone-based.policy,.interfaces. |
d51e0 | 61 72 65 20 61 73 73 69 67 6e 65 64 20 74 6f 20 7a 6f 6e 65 73 2c 20 61 6e 64 20 69 6e 73 70 65 | are.assigned.to.zones,.and.inspe |
d5200 | 63 74 69 6f 6e 20 70 6f 6c 69 63 79 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 74 72 61 66 66 | ction.policy.is.applied.to.traff |
d5220 | 69 63 20 6d 6f 76 69 6e 67 20 62 65 74 77 65 65 6e 20 74 68 65 20 7a 6f 6e 65 73 20 61 6e 64 20 | ic.moving.between.the.zones.and. |
d5240 | 61 63 74 65 64 20 6f 6e 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 66 69 72 65 77 61 6c 6c 20 72 | acted.on.according.to.firewall.r |
d5260 | 75 6c 65 73 2e 20 41 20 7a 6f 6e 65 20 69 73 20 61 20 67 72 6f 75 70 20 6f 66 20 69 6e 74 65 72 | ules..A.zone.is.a.group.of.inter |
d5280 | 66 61 63 65 73 20 74 68 61 74 20 68 61 76 65 20 73 69 6d 69 6c 61 72 20 66 75 6e 63 74 69 6f 6e | faces.that.have.similar.function |
d52a0 | 73 20 6f 72 20 66 65 61 74 75 72 65 73 2e 20 49 74 20 65 73 74 61 62 6c 69 73 68 65 73 20 74 68 | s.or.features..It.establishes.th |
d52c0 | 65 20 73 65 63 75 72 69 74 79 20 62 6f 72 64 65 72 73 20 6f 66 20 61 20 6e 65 74 77 6f 72 6b 2e | e.security.borders.of.a.network. |
d52e0 | 20 41 20 7a 6f 6e 65 20 64 65 66 69 6e 65 73 20 61 20 62 6f 75 6e 64 61 72 79 20 77 68 65 72 65 | .A.zone.defines.a.boundary.where |
d5300 | 20 74 72 61 66 66 69 63 20 69 73 20 73 75 62 6a 65 63 74 65 64 20 74 6f 20 70 6f 6c 69 63 79 20 | .traffic.is.subjected.to.policy. |
d5320 | 72 65 73 74 72 69 63 74 69 6f 6e 73 20 61 73 20 69 74 20 63 72 6f 73 73 65 73 20 74 6f 20 61 6e | restrictions.as.it.crosses.to.an |
d5340 | 6f 74 68 65 72 20 72 65 67 69 6f 6e 20 6f 66 20 61 20 6e 65 74 77 6f 72 6b 2e 00 49 6e 62 6f 75 | other.region.of.a.network..Inbou |
d5360 | 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 61 20 57 41 4e 20 69 6e 74 65 72 66 61 63 | nd.connections.to.a.WAN.interfac |
d5380 | 65 20 63 61 6e 20 62 65 20 69 6d 70 72 6f 70 65 72 6c 79 20 68 61 6e 64 6c 65 64 20 77 68 65 6e | e.can.be.improperly.handled.when |
d53a0 | 20 74 68 65 20 72 65 70 6c 79 20 69 73 20 73 65 6e 74 20 62 61 63 6b 20 74 6f 20 74 68 65 20 63 | .the.reply.is.sent.back.to.the.c |
d53c0 | 6c 69 65 6e 74 2e 00 49 6e 63 6f 6d 69 6e 67 20 74 72 61 66 66 69 63 20 69 73 20 72 65 63 65 69 | lient..Incoming.traffic.is.recei |
d53e0 | 76 65 64 20 62 79 20 74 68 65 20 63 75 72 72 65 6e 74 20 73 6c 61 76 65 2e 20 49 66 20 74 68 65 | ved.by.the.current.slave..If.the |
d5400 | 20 72 65 63 65 69 76 69 6e 67 20 73 6c 61 76 65 20 66 61 69 6c 73 2c 20 61 6e 6f 74 68 65 72 20 | .receiving.slave.fails,.another. |
d5420 | 73 6c 61 76 65 20 74 61 6b 65 73 20 6f 76 65 72 20 74 68 65 20 4d 41 43 20 61 64 64 72 65 73 73 | slave.takes.over.the.MAC.address |
d5440 | 20 6f 66 20 74 68 65 20 66 61 69 6c 65 64 20 72 65 63 65 69 76 69 6e 67 20 73 6c 61 76 65 2e 00 | .of.the.failed.receiving.slave.. |
d5460 | 49 6e 63 72 65 61 73 65 20 4d 61 78 69 6d 75 6d 20 4d 50 44 55 20 6c 65 6e 67 74 68 20 74 6f 20 | Increase.Maximum.MPDU.length.to. |
d5480 | 37 39 39 31 20 6f 72 20 31 31 34 35 34 20 6f 63 74 65 74 73 20 28 64 65 66 61 75 6c 74 20 33 38 | 7991.or.11454.octets.(default.38 |
d54a0 | 39 35 20 6f 63 74 65 74 73 29 00 49 6e 64 69 63 61 74 69 6f 6e 00 49 6e 64 69 76 69 64 75 61 6c | 95.octets).Indication.Individual |
d54c0 | 20 43 6c 69 65 6e 74 20 53 75 62 6e 65 74 00 49 6e 66 6f 72 6d 20 63 6c 69 65 6e 74 20 74 68 61 | .Client.Subnet.Inform.client.tha |
d54e0 | 74 20 74 68 65 20 44 4e 53 20 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 61 74 | t.the.DNS.server.can.be.found.at |
d5500 | 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 67 61 74 68 65 72 | .`<address>`..Information.gather |
d5520 | 65 64 20 77 69 74 68 20 4c 4c 44 50 20 69 73 20 73 74 6f 72 65 64 20 69 6e 20 74 68 65 20 64 65 | ed.with.LLDP.is.stored.in.the.de |
d5540 | 76 69 63 65 20 61 73 20 61 20 3a 61 62 62 72 3a 60 4d 49 42 20 28 4d 61 6e 61 67 65 6d 65 6e 74 | vice.as.a.:abbr:`MIB.(Management |
d5560 | 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 44 61 74 61 62 61 73 65 29 60 20 61 6e 64 20 63 61 6e 20 | .Information.Database)`.and.can. |
d5580 | 62 65 20 71 75 65 72 69 65 64 20 77 69 74 68 20 3a 61 62 62 72 3a 60 53 4e 4d 50 20 28 53 69 6d | be.queried.with.:abbr:`SNMP.(Sim |
d55a0 | 70 6c 65 20 4e 65 74 77 6f 72 6b 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 | ple.Network.Management.Protocol) |
d55c0 | 60 20 61 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 32 39 32 32 60 2e 20 54 | `.as.specified.in.:rfc:`2922`..T |
d55e0 | 68 65 20 74 6f 70 6f 6c 6f 67 79 20 6f 66 20 61 6e 20 4c 4c 44 50 2d 65 6e 61 62 6c 65 64 20 6e | he.topology.of.an.LLDP-enabled.n |
d5600 | 65 74 77 6f 72 6b 20 63 61 6e 20 62 65 20 64 69 73 63 6f 76 65 72 65 64 20 62 79 20 63 72 61 77 | etwork.can.be.discovered.by.craw |
d5620 | 6c 69 6e 67 20 74 68 65 20 68 6f 73 74 73 20 61 6e 64 20 71 75 65 72 79 69 6e 67 20 74 68 69 73 | ling.the.hosts.and.querying.this |
d5640 | 20 64 61 74 61 62 61 73 65 2e 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 6d 61 79 20 | .database..Information.that.may. |
d5660 | 62 65 20 72 65 74 72 69 65 76 65 64 20 69 6e 63 6c 75 64 65 3a 00 49 6e 66 6f 72 6d 61 74 69 6f | be.retrieved.include:.Informatio |
d5680 | 6e 61 6c 00 49 6e 66 6f 72 6d 61 74 69 6f 6e 61 6c 20 6d 65 73 73 61 67 65 73 00 49 6e 70 75 74 | nal.Informational.messages.Input |
d56a0 | 20 66 72 6f 6d 20 60 65 74 68 30 60 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 00 49 | .from.`eth0`.network.interface.I |
d56c0 | 6e 73 70 65 63 74 20 6c 6f 67 73 3a 00 49 6e 73 74 61 6c 6c 20 74 68 65 20 63 6c 69 65 6e 74 20 | nspect.logs:.Install.the.client. |
d56e0 | 73 6f 66 74 77 61 72 65 20 76 69 61 20 61 70 74 20 61 6e 64 20 65 78 65 63 75 74 65 20 70 70 74 | software.via.apt.and.execute.ppt |
d5700 | 70 73 65 74 75 70 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 | psetup.to.generate.the.configura |
d5720 | 74 69 6f 6e 2e 00 49 6e 73 74 65 61 64 20 6f 66 20 61 20 6e 75 6d 65 72 69 63 61 6c 20 4d 53 53 | tion..Instead.of.a.numerical.MSS |
d5740 | 20 76 61 6c 75 65 20 60 63 6c 61 6d 70 2d 6d 73 73 2d 74 6f 2d 70 6d 74 75 60 20 63 61 6e 20 62 | .value.`clamp-mss-to-pmtu`.can.b |
d5760 | 65 20 75 73 65 64 20 74 6f 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 73 65 74 20 74 68 65 20 | e.used.to.automatically.set.the. |
d5780 | 70 72 6f 70 65 72 20 76 61 6c 75 65 2e 00 49 6e 73 74 65 61 64 20 6f 66 20 70 61 73 73 77 6f 72 | proper.value..Instead.of.passwor |
d57a0 | 64 20 6f 6e 6c 79 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2c 20 32 46 41 20 70 61 73 73 77 | d.only.authentication,.2FA.passw |
d57c0 | 6f 72 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 2b 20 4f 54 50 20 6b 65 79 20 63 61 6e | ord.authentication.+.OTP.key.can |
d57e0 | 20 62 65 20 75 73 65 64 2e 20 41 6c 74 65 72 6e 61 74 69 76 65 6c 79 2c 20 4f 54 50 20 61 75 74 | .be.used..Alternatively,.OTP.aut |
d5800 | 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 6e 6c 79 2c 20 77 69 74 68 6f 75 74 20 61 20 70 61 73 73 | hentication.only,.without.a.pass |
d5820 | 77 6f 72 64 2c 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 54 6f 20 64 6f 20 74 68 69 73 2c 20 61 | word,.can.be.used..To.do.this,.a |
d5840 | 6e 20 4f 54 50 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 61 64 64 65 | n.OTP.configuration.must.be.adde |
d5860 | 64 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 62 6f 76 65 3a 00 49 6e | d.to.the.configuration.above:.In |
d5880 | 73 74 65 61 64 20 6f 66 20 73 65 6e 64 69 6e 67 20 74 68 65 20 72 65 61 6c 20 73 79 73 74 65 6d | stead.of.sending.the.real.system |
d58a0 | 20 68 6f 73 74 6e 61 6d 65 20 74 6f 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 2c 20 6f 76 | .hostname.to.the.DHCP.server,.ov |
d58c0 | 65 72 77 72 69 74 65 20 74 68 65 20 68 6f 73 74 2d 6e 61 6d 65 20 77 69 74 68 20 74 68 69 73 20 | erwrite.the.host-name.with.this. |
d58e0 | 67 69 76 65 6e 2d 76 61 6c 75 65 2e 00 49 6e 74 65 67 72 69 74 79 20 e2 80 93 20 4d 65 73 73 61 | given-value..Integrity.....Messa |
d5900 | 67 65 20 69 6e 74 65 67 72 69 74 79 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 61 20 70 61 | ge.integrity.to.ensure.that.a.pa |
d5920 | 63 6b 65 74 20 68 61 73 20 6e 6f 74 20 62 65 65 6e 20 74 61 6d 70 65 72 65 64 20 77 68 69 6c 65 | cket.has.not.been.tampered.while |
d5940 | 20 69 6e 20 74 72 61 6e 73 69 74 20 69 6e 63 6c 75 64 69 6e 67 20 61 6e 20 6f 70 74 69 6f 6e 61 | .in.transit.including.an.optiona |
d5960 | 6c 20 70 61 63 6b 65 74 20 72 65 70 6c 61 79 20 70 72 6f 74 65 63 74 69 6f 6e 20 6d 65 63 68 61 | l.packet.replay.protection.mecha |
d5980 | 6e 69 73 6d 2e 00 49 6e 74 65 6c 20 41 58 32 30 30 00 49 6e 74 65 6c c2 ae 20 51 41 54 00 49 6e | nism..Intel.AX200.Intel...QAT.In |
d59a0 | 74 65 72 63 6f 6e 6e 65 63 74 20 74 68 65 20 67 6c 6f 62 61 6c 20 56 52 46 20 77 69 74 68 20 76 | terconnect.the.global.VRF.with.v |
d59c0 | 72 66 20 22 72 65 64 22 20 75 73 69 6e 67 20 74 68 65 20 76 65 74 68 31 30 20 3c 2d 3e 20 76 65 | rf."red".using.the.veth10.<->.ve |
d59e0 | 74 68 20 31 31 20 70 61 69 72 00 49 6e 74 65 72 66 61 63 65 20 2a 2a 65 74 68 30 2a 2a 20 75 73 | th.11.pair.Interface.**eth0**.us |
d5a00 | 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 75 70 73 74 72 65 61 6d 2e 00 49 6e 74 65 72 | ed.to.connect.to.upstream..Inter |
d5a20 | 66 61 63 65 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 6e 74 65 72 66 61 63 65 20 47 72 6f | face.Configuration.Interface.Gro |
d5a40 | 75 70 73 00 49 6e 74 65 72 66 61 63 65 20 52 6f 75 74 65 73 00 49 6e 74 65 72 66 61 63 65 20 60 | ups.Interface.Routes.Interface.` |
d5a60 | 65 74 68 31 60 20 4c 41 4e 20 69 73 20 62 65 68 69 6e 64 20 4e 41 54 2e 20 49 6e 20 6f 72 64 65 | eth1`.LAN.is.behind.NAT..In.orde |
d5a80 | 72 20 74 6f 20 73 75 62 73 63 72 69 62 65 20 60 31 30 2e 30 2e 30 2e 30 2f 32 33 60 20 73 75 62 | r.to.subscribe.`10.0.0.0/23`.sub |
d5aa0 | 6e 65 74 20 6d 75 6c 74 69 63 61 73 74 20 77 68 69 63 68 20 69 73 20 69 6e 20 60 65 74 68 30 60 | net.multicast.which.is.in.`eth0` |
d5ac0 | 20 57 41 4e 20 77 65 20 6e 65 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 67 6d 70 2d 70 | .WAN.we.need.to.configure.igmp-p |
d5ae0 | 72 6f 78 79 2e 00 49 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 6e | roxy..Interface.configuration.In |
d5b00 | 74 65 72 66 61 63 65 20 66 6f 72 20 44 48 43 50 20 52 65 6c 61 79 20 41 67 65 6e 74 20 74 6f 20 | terface.for.DHCP.Relay.Agent.to. |
d5b20 | 66 6f 72 77 61 72 64 20 72 65 71 75 65 73 74 73 20 6f 75 74 2e 00 49 6e 74 65 72 66 61 63 65 20 | forward.requests.out..Interface. |
d5b40 | 66 6f 72 20 44 48 43 50 20 52 65 6c 61 79 20 41 67 65 6e 74 20 74 6f 20 6c 69 73 74 65 6e 20 66 | for.DHCP.Relay.Agent.to.listen.f |
d5b60 | 6f 72 20 72 65 71 75 65 73 74 73 2e 00 49 6e 74 65 72 66 61 63 65 20 73 70 65 63 69 66 69 63 20 | or.requests..Interface.specific. |
d5b80 | 63 6f 6d 6d 61 6e 64 73 00 49 6e 74 65 72 66 61 63 65 20 74 6f 20 75 73 65 20 66 6f 72 20 73 79 | commands.Interface.to.use.for.sy |
d5ba0 | 6e 63 69 6e 67 20 63 6f 6e 6e 74 72 61 63 6b 20 65 6e 74 72 69 65 73 2e 00 49 6e 74 65 72 66 61 | ncing.conntrack.entries..Interfa |
d5bc0 | 63 65 20 75 73 65 64 20 66 6f 72 20 56 58 4c 41 4e 20 75 6e 64 65 72 6c 61 79 2e 20 54 68 69 73 | ce.used.for.VXLAN.underlay..This |
d5be0 | 20 69 73 20 6d 61 6e 64 61 74 6f 72 79 20 77 68 65 6e 20 75 73 69 6e 67 20 56 58 4c 41 4e 20 76 | .is.mandatory.when.using.VXLAN.v |
d5c00 | 69 61 20 61 20 6d 75 6c 74 69 63 61 73 74 20 6e 65 74 77 6f 72 6b 2e 20 56 58 4c 41 4e 20 74 72 | ia.a.multicast.network..VXLAN.tr |
d5c20 | 61 66 66 69 63 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 65 6e 74 65 72 20 61 6e 64 20 65 78 69 74 | affic.will.always.enter.and.exit |
d5c40 | 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 49 6e 74 65 72 66 61 63 65 20 77 65 69 67 68 | .this.interface..Interface.weigh |
d5c60 | 74 00 49 6e 74 65 72 66 61 63 65 73 00 49 6e 74 65 72 66 61 63 65 73 20 43 6f 6e 66 69 67 75 72 | t.Interfaces.Interfaces.Configur |
d5c80 | 61 74 69 6f 6e 00 49 6e 74 65 72 66 61 63 65 73 20 74 68 61 74 20 70 61 72 74 69 63 69 70 61 74 | ation.Interfaces.that.participat |
d5ca0 | 65 20 69 6e 20 74 68 65 20 44 48 43 50 20 72 65 6c 61 79 20 70 72 6f 63 65 73 73 2e 20 49 66 20 | e.in.the.DHCP.relay.process..If. |
d5cc0 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 2c 20 61 74 20 6c 65 61 73 74 20 74 | this.command.is.used,.at.least.t |
d5ce0 | 77 6f 20 65 6e 74 72 69 65 73 20 6f 66 20 69 74 20 61 72 65 20 72 65 71 75 69 72 65 64 3a 20 6f | wo.entries.of.it.are.required:.o |
d5d00 | 6e 65 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 63 61 70 74 75 72 | ne.for.the.interface.that.captur |
d5d20 | 65 73 20 74 68 65 20 64 68 63 70 2d 72 65 71 75 65 73 74 73 2c 20 61 6e 64 20 6f 6e 65 20 66 6f | es.the.dhcp-requests,.and.one.fo |
d5d40 | 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 66 6f 72 77 61 72 64 20 73 75 63 68 20 | r.the.interface.to.forward.such. |
d5d60 | 72 65 71 75 65 73 74 73 2e 20 41 20 77 61 72 6e 69 6e 67 20 6d 65 73 73 61 67 65 20 77 69 6c 6c | requests..A.warning.message.will |
d5d80 | 20 62 65 20 73 68 6f 77 6e 20 69 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 | .be.shown.if.this.command.is.use |
d5da0 | 64 2c 20 73 69 6e 63 65 20 6e 65 77 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 73 68 6f | d,.since.new.implementations.sho |
d5dc0 | 75 6c 64 20 75 73 65 20 60 60 6c 69 73 74 65 6e 2d 69 6e 74 65 72 66 61 63 65 60 60 20 61 6e 64 | uld.use.``listen-interface``.and |
d5de0 | 20 60 60 75 70 73 74 72 65 61 6d 2d 69 6e 74 65 72 66 61 63 65 60 60 2e 00 49 6e 74 65 72 66 61 | .``upstream-interface``..Interfa |
d5e00 | 63 65 73 20 77 68 6f 73 65 20 44 48 43 50 20 63 6c 69 65 6e 74 20 6e 61 6d 65 73 65 72 76 65 72 | ces.whose.DHCP.client.nameserver |
d5e20 | 73 20 74 6f 20 66 6f 72 77 61 72 64 20 72 65 71 75 65 73 74 73 20 74 6f 2e 00 49 6e 74 65 72 66 | s.to.forward.requests.to..Interf |
d5e40 | 61 63 65 73 2c 20 74 68 65 69 72 20 77 65 69 67 68 74 20 61 6e 64 20 74 68 65 20 74 79 70 65 20 | aces,.their.weight.and.the.type. |
d5e60 | 6f 66 20 74 72 61 66 66 69 63 20 74 6f 20 62 65 20 62 61 6c 61 6e 63 65 64 20 61 72 65 20 64 65 | of.traffic.to.be.balanced.are.de |
d5e80 | 66 69 6e 65 64 20 69 6e 20 6e 75 6d 62 65 72 65 64 20 62 61 6c 61 6e 63 69 6e 67 20 72 75 6c 65 | fined.in.numbered.balancing.rule |
d5ea0 | 20 73 65 74 73 2e 20 54 68 65 20 72 75 6c 65 20 73 65 74 73 20 61 72 65 20 65 78 65 63 75 74 65 | .sets..The.rule.sets.are.execute |
d5ec0 | 64 20 69 6e 20 6e 75 6d 65 72 69 63 61 6c 20 6f 72 64 65 72 20 61 67 61 69 6e 73 74 20 6f 75 74 | d.in.numerical.order.against.out |
d5ee0 | 67 6f 69 6e 67 20 70 61 63 6b 65 74 73 2e 20 49 6e 20 63 61 73 65 20 6f 66 20 61 20 6d 61 74 63 | going.packets..In.case.of.a.matc |
d5f00 | 68 20 74 68 65 20 70 61 63 6b 65 74 20 69 73 20 73 65 6e 74 20 74 68 72 6f 75 67 68 20 61 6e 20 | h.the.packet.is.sent.through.an. |
d5f20 | 69 6e 74 65 72 66 61 63 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 74 68 65 20 6d 61 74 63 68 | interface.specified.in.the.match |
d5f40 | 69 6e 67 20 72 75 6c 65 2e 20 49 66 20 61 20 70 61 63 6b 65 74 20 64 6f 65 73 6e 27 74 20 6d 61 | ing.rule..If.a.packet.doesn't.ma |
d5f60 | 74 63 68 20 61 6e 79 20 72 75 6c 65 20 69 74 20 69 73 20 73 65 6e 74 20 62 79 20 75 73 69 6e 67 | tch.any.rule.it.is.sent.by.using |
d5f80 | 20 74 68 65 20 73 79 73 74 65 6d 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 52 75 6c 65 20 | .the.system.routing.table..Rule. |
d5fa0 | 6e 75 6d 62 65 72 73 20 63 61 6e 27 74 20 62 65 20 63 68 61 6e 67 65 64 2e 00 49 6e 74 65 72 6e | numbers.can't.be.changed..Intern |
d5fc0 | 61 6c 20 61 74 74 61 63 6b 3a 20 61 6e 20 61 74 74 61 63 6b 20 66 72 6f 6d 20 74 68 65 20 69 6e | al.attack:.an.attack.from.the.in |
d5fe0 | 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 28 67 65 6e 65 72 61 74 65 64 20 62 79 20 61 20 63 | ternal.network.(generated.by.a.c |
d6000 | 75 73 74 6f 6d 65 72 29 20 74 6f 77 61 72 64 73 20 74 68 65 20 69 6e 74 65 72 6e 65 74 20 69 73 | ustomer).towards.the.internet.is |
d6020 | 20 69 64 65 6e 74 69 66 79 2e 20 49 6e 20 74 68 69 73 20 63 61 73 65 2c 20 61 6c 6c 20 63 6f 6e | .identify..In.this.case,.all.con |
d6040 | 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 20 74 68 69 73 20 70 61 72 74 69 63 75 6c 61 72 20 49 50 | nections.from.this.particular.IP |
d6060 | 2f 43 75 73 74 6f 6d 65 72 20 77 69 6c 6c 20 62 65 20 62 6c 6f 63 6b 65 64 2e 00 49 6e 74 65 72 | /Customer.will.be.blocked..Inter |
d6080 | 6e 61 6c 6c 79 2c 20 69 6e 20 66 6c 6f 77 2d 61 63 63 6f 75 6e 74 69 6e 67 20 70 72 6f 63 65 73 | nally,.in.flow-accounting.proces |
d60a0 | 73 65 73 20 65 78 69 73 74 20 61 20 62 75 66 66 65 72 20 66 6f 72 20 64 61 74 61 20 65 78 63 68 | ses.exist.a.buffer.for.data.exch |
d60c0 | 61 6e 67 69 6e 67 20 62 65 74 77 65 65 6e 20 63 6f 72 65 20 70 72 6f 63 65 73 73 20 61 6e 64 20 | anging.between.core.process.and. |
d60e0 | 70 6c 75 67 69 6e 73 20 28 65 61 63 68 20 65 78 70 6f 72 74 20 74 61 72 67 65 74 20 69 73 20 61 | plugins.(each.export.target.is.a |
d6100 | 20 73 65 70 61 72 61 74 65 64 20 70 6c 75 67 69 6e 29 2e 20 49 66 20 79 6f 75 20 68 61 76 65 20 | .separated.plugin)..If.you.have. |
d6120 | 68 69 67 68 20 74 72 61 66 66 69 63 20 6c 65 76 65 6c 73 20 6f 72 20 6e 6f 74 65 64 20 73 6f 6d | high.traffic.levels.or.noted.som |
d6140 | 65 20 70 72 6f 62 6c 65 6d 73 20 77 69 74 68 20 6d 69 73 73 65 64 20 72 65 63 6f 72 64 73 20 6f | e.problems.with.missed.records.o |
d6160 | 72 20 73 74 6f 70 70 69 6e 67 20 65 78 70 6f 72 74 69 6e 67 2c 20 79 6f 75 20 6d 61 79 20 74 72 | r.stopping.exporting,.you.may.tr |
d6180 | 79 20 74 6f 20 69 6e 63 72 65 61 73 65 20 61 20 64 65 66 61 75 6c 74 20 62 75 66 66 65 72 20 73 | y.to.increase.a.default.buffer.s |
d61a0 | 69 7a 65 20 28 31 30 20 4d 69 42 29 20 77 69 74 68 20 74 68 65 20 6e 65 78 74 20 63 6f 6d 6d 61 | ize.(10.MiB).with.the.next.comma |
d61c0 | 6e 64 3a 00 49 6e 74 65 72 6e 65 74 20 4b 65 79 20 45 78 63 68 61 6e 67 65 20 76 65 72 73 69 6f | nd:.Internet.Key.Exchange.versio |
d61e0 | 6e 20 32 20 28 49 4b 45 76 32 29 20 69 73 20 61 20 74 75 6e 6e 65 6c 69 6e 67 20 70 72 6f 74 6f | n.2.(IKEv2).is.a.tunneling.proto |
d6200 | 63 6f 6c 2c 20 62 61 73 65 64 20 6f 6e 20 49 50 73 65 63 2c 20 74 68 61 74 20 65 73 74 61 62 6c | col,.based.on.IPsec,.that.establ |
d6220 | 69 73 68 65 73 20 61 20 73 65 63 75 72 65 20 56 50 4e 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e | ishes.a.secure.VPN.communication |
d6240 | 20 62 65 74 77 65 65 6e 20 56 50 4e 20 64 65 76 69 63 65 73 2c 20 20 61 6e 64 20 64 65 66 69 6e | .between.VPN.devices,..and.defin |
d6260 | 65 73 20 6e 65 67 6f 74 69 61 74 69 6f 6e 20 61 6e 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | es.negotiation.and.authenticatio |
d6280 | 6e 20 70 72 6f 63 65 73 73 65 73 20 66 6f 72 20 49 50 73 65 63 20 73 65 63 75 72 69 74 79 20 61 | n.processes.for.IPsec.security.a |
d62a0 | 73 73 6f 63 69 61 74 69 6f 6e 73 20 28 53 41 73 29 2e 20 49 74 20 69 73 20 6f 66 74 65 6e 20 6b | ssociations.(SAs)..It.is.often.k |
d62c0 | 6e 6f 77 6e 20 61 73 20 49 4b 45 76 32 2f 49 50 53 65 63 20 6f 72 20 49 50 53 65 63 20 49 4b 45 | nown.as.IKEv2/IPSec.or.IPSec.IKE |
d62e0 | 76 32 20 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 20 e2 80 94 20 6f 72 20 72 6f 61 64 2d 77 61 72 | v2.remote-access.....or.road-war |
d6300 | 72 69 6f 72 73 20 61 73 20 6f 74 68 65 72 73 20 63 61 6c 6c 20 69 74 2e 00 49 6e 74 65 72 6e 65 | riors.as.others.call.it..Interne |
d6320 | 74 20 4b 65 79 20 45 78 63 68 61 6e 67 65 20 76 65 72 73 69 6f 6e 20 32 2c 20 49 4b 45 76 32 20 | t.Key.Exchange.version.2,.IKEv2. |
d6340 | 66 6f 72 20 73 68 6f 72 74 2c 20 69 73 20 61 20 72 65 71 75 65 73 74 2f 72 65 73 70 6f 6e 73 65 | for.short,.is.a.request/response |
d6360 | 20 70 72 6f 74 6f 63 6f 6c 20 64 65 76 65 6c 6f 70 65 64 20 62 79 20 62 6f 74 68 20 43 69 73 63 | .protocol.developed.by.both.Cisc |
d6380 | 6f 20 61 6e 64 20 4d 69 63 72 6f 73 6f 66 74 2e 20 49 74 20 69 73 20 75 73 65 64 20 74 6f 20 65 | o.and.Microsoft..It.is.used.to.e |
d63a0 | 73 74 61 62 6c 69 73 68 20 61 6e 64 20 73 65 63 75 72 65 20 49 50 76 34 2f 49 50 76 36 20 63 6f | stablish.and.secure.IPv4/IPv6.co |
d63c0 | 6e 6e 65 63 74 69 6f 6e 73 2c 20 62 65 20 69 74 20 61 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 | nnections,.be.it.a.site-to-site. |
d63e0 | 56 50 4e 20 6f 72 20 66 72 6f 6d 20 61 20 72 6f 61 64 2d 77 61 72 72 69 6f 72 20 63 6f 6e 6e 65 | VPN.or.from.a.road-warrior.conne |
d6400 | 63 74 69 6e 67 20 74 6f 20 61 20 68 75 62 20 73 69 74 65 2e 20 49 4b 45 76 32 2c 20 77 68 65 6e | cting.to.a.hub.site..IKEv2,.when |
d6420 | 20 72 75 6e 20 69 6e 20 70 6f 69 6e 74 2d 74 6f 2d 6d 75 6c 74 69 70 6f 69 6e 74 2c 20 6f 72 20 | .run.in.point-to-multipoint,.or. |
d6440 | 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 2f 72 6f 61 64 2d 77 61 72 72 69 6f 72 20 6d 6f 64 65 2c | remote-access/road-warrior.mode, |
d6460 | 20 73 65 63 75 72 65 73 20 74 68 65 20 73 65 72 76 65 72 2d 73 69 64 65 20 77 69 74 68 20 61 6e | .secures.the.server-side.with.an |
d6480 | 6f 74 68 65 72 20 6c 61 79 65 72 20 62 79 20 75 73 69 6e 67 20 61 6e 20 78 35 30 39 20 73 69 67 | other.layer.by.using.an.x509.sig |
d64a0 | 6e 65 64 20 73 65 72 76 65 72 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 49 6e 74 65 72 6e 65 74 | ned.server.certificate..Internet |
d64c0 | 77 6f 72 6b 20 43 6f 6e 74 72 6f 6c 00 49 6e 74 65 72 76 61 6c 00 49 6e 74 65 72 76 61 6c 20 69 | work.Control.Interval.Interval.i |
d64e0 | 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 00 49 6e 74 65 72 76 61 6c 20 69 6e 20 6d 69 6e 75 74 | n.milliseconds.Interval.in.minut |
d6500 | 65 73 20 62 65 74 77 65 65 6e 20 75 70 64 61 74 65 73 20 28 64 65 66 61 75 6c 74 3a 20 36 30 29 | es.between.updates.(default:.60) |
d6520 | 00 49 6e 74 72 6f 64 75 63 69 6e 67 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 73 20 72 65 | .Introducing.route.reflectors.re |
d6540 | 6d 6f 76 65 73 20 74 68 65 20 6e 65 65 64 20 66 6f 72 20 74 68 65 20 66 75 6c 6c 2d 6d 65 73 68 | moves.the.need.for.the.full-mesh |
d6560 | 2e 20 57 68 65 6e 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 20 61 20 72 6f 75 74 65 20 72 65 66 | ..When.you.configure.a.route.ref |
d6580 | 6c 65 63 74 6f 72 20 79 6f 75 20 68 61 76 65 20 74 6f 20 74 65 6c 6c 20 74 68 65 20 72 6f 75 74 | lector.you.have.to.tell.the.rout |
d65a0 | 65 72 20 77 68 65 74 68 65 72 20 74 68 65 20 6f 74 68 65 72 20 49 42 47 50 20 72 6f 75 74 65 72 | er.whether.the.other.IBGP.router |
d65c0 | 20 69 73 20 61 20 63 6c 69 65 6e 74 20 6f 72 20 6e 6f 6e 2d 63 6c 69 65 6e 74 2e 20 41 20 63 6c | .is.a.client.or.non-client..A.cl |
d65e0 | 69 65 6e 74 20 69 73 20 61 6e 20 49 42 47 50 20 72 6f 75 74 65 72 20 74 68 61 74 20 74 68 65 20 | ient.is.an.IBGP.router.that.the. |
d6600 | 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 20 77 69 6c 6c 20 e2 80 9c 72 65 66 6c 65 63 74 e2 | route.reflector.will....reflect. |
d6620 | 80 9d 20 72 6f 75 74 65 73 20 74 6f 2c 20 74 68 65 20 6e 6f 6e 2d 63 6c 69 65 6e 74 20 69 73 20 | ...routes.to,.the.non-client.is. |
d6640 | 6a 75 73 74 20 61 20 72 65 67 75 6c 61 72 20 49 42 47 50 20 6e 65 69 67 68 62 6f 72 2e 20 52 6f | just.a.regular.IBGP.neighbor..Ro |
d6660 | 75 74 65 20 72 65 66 6c 65 63 74 6f 72 73 20 6d 65 63 68 61 6e 69 73 6d 20 69 73 20 64 65 73 63 | ute.reflectors.mechanism.is.desc |
d6680 | 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 34 34 35 36 60 20 61 6e 64 20 75 70 64 61 74 65 64 | ribed.in.:rfc:`4456`.and.updated |
d66a0 | 20 62 79 20 3a 72 66 63 3a 60 37 36 30 36 60 2e 00 49 74 20 64 69 73 61 62 6c 65 73 20 74 72 61 | .by.:rfc:`7606`..It.disables.tra |
d66c0 | 6e 73 70 61 72 65 6e 74 20 68 75 67 65 20 70 61 67 65 73 2c 20 61 6e 64 20 61 75 74 6f 6d 61 74 | nsparent.huge.pages,.and.automat |
d66e0 | 69 63 20 4e 55 4d 41 20 62 61 6c 61 6e 63 69 6e 67 2e 20 49 74 20 61 6c 73 6f 20 75 73 65 73 20 | ic.NUMA.balancing..It.also.uses. |
d6700 | 63 70 75 70 6f 77 65 72 20 74 6f 20 73 65 74 20 74 68 65 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 | cpupower.to.set.the.performance. |
d6720 | 63 70 75 66 72 65 71 20 67 6f 76 65 72 6e 6f 72 2c 20 61 6e 64 20 72 65 71 75 65 73 74 73 20 61 | cpufreq.governor,.and.requests.a |
d6740 | 20 63 70 75 5f 64 6d 61 5f 6c 61 74 65 6e 63 79 20 76 61 6c 75 65 20 6f 66 20 31 2e 20 49 74 20 | .cpu_dma_latency.value.of.1..It. |
d6760 | 61 6c 73 6f 20 73 65 74 73 20 62 75 73 79 5f 72 65 61 64 20 61 6e 64 20 62 75 73 79 5f 70 6f 6c | also.sets.busy_read.and.busy_pol |
d6780 | 6c 20 74 69 6d 65 73 20 74 6f 20 35 30 20 75 73 2c 20 61 6e 64 20 74 63 70 5f 66 61 73 74 6f 70 | l.times.to.50.us,.and.tcp_fastop |
d67a0 | 65 6e 20 74 6f 20 33 2e 00 49 74 20 65 6e 61 62 6c 65 73 20 74 72 61 6e 73 70 61 72 65 6e 74 20 | en.to.3..It.enables.transparent. |
d67c0 | 68 75 67 65 20 70 61 67 65 73 2c 20 61 6e 64 20 75 73 65 73 20 63 70 75 70 6f 77 65 72 20 74 6f | huge.pages,.and.uses.cpupower.to |
d67e0 | 20 73 65 74 20 74 68 65 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 63 70 75 66 72 65 71 20 67 6f 76 | .set.the.performance.cpufreq.gov |
d6800 | 65 72 6e 6f 72 2e 20 49 74 20 61 6c 73 6f 20 73 65 74 73 20 60 60 6b 65 72 6e 65 6c 2e 73 63 68 | ernor..It.also.sets.``kernel.sch |
d6820 | 65 64 5f 6d 69 6e 5f 67 72 61 6e 75 6c 61 72 69 74 79 5f 6e 73 60 60 20 74 6f 20 31 30 20 75 73 | ed_min_granularity_ns``.to.10.us |
d6840 | 2c 20 60 60 6b 65 72 6e 65 6c 2e 73 63 68 65 64 5f 77 61 6b 65 75 70 5f 67 72 61 6e 75 6c 61 72 | ,.``kernel.sched_wakeup_granular |
d6860 | 69 74 79 5f 6e 73 60 60 20 74 6f 20 31 35 20 75 73 73 2c 20 61 6e 64 20 60 60 76 6d 2e 64 69 72 | ity_ns``.to.15.uss,.and.``vm.dir |
d6880 | 74 79 5f 72 61 74 69 6f 60 60 20 74 6f 20 34 30 25 2e 00 49 74 20 67 65 6e 65 72 61 74 65 73 20 | ty_ratio``.to.40%..It.generates. |
d68a0 | 74 68 65 20 6b 65 79 70 61 69 72 2c 20 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 | the.keypair,.which.includes.the. |
d68c0 | 70 75 62 6c 69 63 20 61 6e 64 20 70 72 69 76 61 74 65 20 70 61 72 74 73 2e 20 54 68 65 20 6b 65 | public.and.private.parts..The.ke |
d68e0 | 79 20 69 73 20 6e 6f 74 20 73 74 6f 72 65 64 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 20 2d 20 | y.is.not.stored.on.the.system.-. |
d6900 | 6f 6e 6c 79 20 61 20 6b 65 79 70 61 69 72 20 69 73 20 67 65 6e 65 72 61 74 65 64 2e 00 49 74 20 | only.a.keypair.is.generated..It. |
d6920 | 68 65 6c 70 73 20 74 6f 20 73 75 70 70 6f 72 74 20 61 73 20 48 45 4c 50 45 52 20 6f 6e 6c 79 20 | helps.to.support.as.HELPER.only. |
d6940 | 66 6f 72 20 70 6c 61 6e 6e 65 64 20 72 65 73 74 61 72 74 73 2e 00 49 74 20 68 65 6c 70 73 20 74 | for.planned.restarts..It.helps.t |
d6960 | 6f 20 74 68 69 6e 6b 20 6f 66 20 74 68 65 20 73 79 6e 74 61 78 20 61 73 3a 20 28 73 65 65 20 62 | o.think.of.the.syntax.as:.(see.b |
d6980 | 65 6c 6f 77 29 2e 20 54 68 65 20 27 72 75 6c 65 2d 73 65 74 27 20 73 68 6f 75 6c 64 20 62 65 20 | elow)..The.'rule-set'.should.be. |
d69a0 | 77 72 69 74 74 65 6e 20 66 72 6f 6d 20 74 68 65 20 70 65 72 73 70 65 63 74 69 76 65 20 6f 66 3a | written.from.the.perspective.of: |
d69c0 | 20 2a 53 6f 75 72 63 65 20 5a 6f 6e 65 2a 2d 74 6f 2d 3e 2a 44 65 73 74 69 6e 61 74 69 6f 6e 20 | .*Source.Zone*-to->*Destination. |
d69e0 | 5a 6f 6e 65 2a 00 49 74 20 69 73 20 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 43 69 73 63 | Zone*.It.is.compatible.with.Cisc |
d6a00 | 6f 20 28 52 29 20 41 6e 79 43 6f 6e 6e 65 63 74 20 28 52 29 20 63 6c 69 65 6e 74 73 2e 00 49 74 | o.(R).AnyConnect.(R).clients..It |
d6a20 | 20 69 73 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 60 60 65 74 68 31 60 60 00 49 74 20 69 73 20 | .is.connected.to.``eth1``.It.is. |
d6a40 | 68 69 67 68 6c 79 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 75 73 65 20 53 53 48 20 6b 65 | highly.recommended.to.use.SSH.ke |
d6a60 | 79 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 42 79 20 64 65 66 61 75 6c 74 20 74 68 65 | y.authentication..By.default.the |
d6a80 | 72 65 20 69 73 20 6f 6e 6c 79 20 6f 6e 65 20 75 73 65 72 20 28 60 60 76 79 6f 73 60 60 29 2c 20 | re.is.only.one.user.(``vyos``),. |
d6aa0 | 61 6e 64 20 79 6f 75 20 63 61 6e 20 61 73 73 69 67 6e 20 61 6e 79 20 6e 75 6d 62 65 72 20 6f 66 | and.you.can.assign.any.number.of |
d6ac0 | 20 6b 65 79 73 20 74 6f 20 74 68 61 74 20 75 73 65 72 2e 20 59 6f 75 20 63 61 6e 20 67 65 6e 65 | .keys.to.that.user..You.can.gene |
d6ae0 | 72 61 74 65 20 61 20 73 73 68 20 6b 65 79 20 77 69 74 68 20 74 68 65 20 60 60 73 73 68 2d 6b 65 | rate.a.ssh.key.with.the.``ssh-ke |
d6b00 | 79 67 65 6e 60 60 20 63 6f 6d 6d 61 6e 64 20 6f 6e 20 79 6f 75 72 20 6c 6f 63 61 6c 20 6d 61 63 | ygen``.command.on.your.local.mac |
d6b20 | 68 69 6e 65 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 28 62 79 20 64 65 66 61 75 6c 74 29 20 73 61 | hine,.which.will.(by.default).sa |
d6b40 | 76 65 20 69 74 20 61 73 20 60 60 7e 2f 2e 73 73 68 2f 69 64 5f 72 73 61 2e 70 75 62 60 60 2e 00 | ve.it.as.``~/.ssh/id_rsa.pub``.. |
d6b60 | 49 74 20 69 73 20 68 69 67 68 6c 79 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 75 73 65 20 | It.is.highly.recommended.to.use. |
d6b80 | 74 68 65 20 73 61 6d 65 20 61 64 64 72 65 73 73 20 66 6f 72 20 62 6f 74 68 20 74 68 65 20 4c 44 | the.same.address.for.both.the.LD |
d6ba0 | 50 20 72 6f 75 74 65 72 2d 69 64 20 61 6e 64 20 74 68 65 20 64 69 73 63 6f 76 65 72 79 20 74 72 | P.router-id.and.the.discovery.tr |
d6bc0 | 61 6e 73 70 6f 72 74 20 61 64 64 72 65 73 73 2c 20 62 75 74 20 66 6f 72 20 56 79 4f 53 20 4d 50 | ansport.address,.but.for.VyOS.MP |
d6be0 | 4c 53 20 4c 44 50 20 74 6f 20 77 6f 72 6b 20 62 6f 74 68 20 70 61 72 61 6d 65 74 65 72 73 20 6d | LS.LDP.to.work.both.parameters.m |
d6c00 | 75 73 74 20 62 65 20 65 78 70 6c 69 63 69 74 6c 79 20 73 65 74 20 69 6e 20 74 68 65 20 63 6f 6e | ust.be.explicitly.set.in.the.con |
d6c20 | 66 69 67 75 72 61 74 69 6f 6e 2e 00 49 74 20 69 73 20 69 6d 70 6f 72 74 61 6e 74 20 74 6f 20 6e | figuration..It.is.important.to.n |
d6c40 | 6f 74 65 20 74 68 61 74 20 77 68 65 6e 20 63 72 65 61 74 69 6e 67 20 66 69 72 65 77 61 6c 6c 20 | ote.that.when.creating.firewall. |
d6c60 | 72 75 6c 65 73 20 74 68 61 74 20 74 68 65 20 44 4e 41 54 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 | rules.that.the.DNAT.translation. |
d6c80 | 6f 63 63 75 72 73 20 2a 2a 62 65 66 6f 72 65 2a 2a 20 74 72 61 66 66 69 63 20 74 72 61 76 65 72 | occurs.**before**.traffic.traver |
d6ca0 | 73 65 73 20 74 68 65 20 66 69 72 65 77 61 6c 6c 2e 20 49 6e 20 6f 74 68 65 72 20 77 6f 72 64 73 | ses.the.firewall..In.other.words |
d6cc0 | 2c 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 68 61 73 20 61 6c | ,.the.destination.address.has.al |
d6ce0 | 72 65 61 64 79 20 62 65 65 6e 20 74 72 61 6e 73 6c 61 74 65 64 20 74 6f 20 31 39 32 2e 31 36 38 | ready.been.translated.to.192.168 |
d6d00 | 2e 30 2e 31 30 30 2e 00 49 74 20 69 73 20 69 6d 70 6f 72 74 61 6e 74 20 74 6f 20 6e 6f 74 65 20 | .0.100..It.is.important.to.note. |
d6d20 | 74 68 61 74 20 77 68 65 6e 20 63 72 65 61 74 69 6e 67 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 | that.when.creating.firewall.rule |
d6d40 | 73 2c 20 74 68 65 20 44 4e 41 54 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6f 63 63 75 72 73 20 2a | s,.the.DNAT.translation.occurs.* |
d6d60 | 2a 62 65 66 6f 72 65 2a 2a 20 74 72 61 66 66 69 63 20 74 72 61 76 65 72 73 65 73 20 74 68 65 20 | *before**.traffic.traverses.the. |
d6d80 | 66 69 72 65 77 61 6c 6c 2e 20 49 6e 20 6f 74 68 65 72 20 77 6f 72 64 73 2c 20 74 68 65 20 64 65 | firewall..In.other.words,.the.de |
d6da0 | 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 68 61 73 20 61 6c 72 65 61 64 79 20 62 65 | stination.address.has.already.be |
d6dc0 | 65 6e 20 74 72 61 6e 73 6c 61 74 65 64 20 74 6f 20 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 2e 00 | en.translated.to.192.168.0.100.. |
d6de0 | 49 74 20 69 73 20 6e 6f 74 20 73 75 66 66 69 63 69 65 6e 74 20 74 6f 20 6f 6e 6c 79 20 63 6f 6e | It.is.not.sufficient.to.only.con |
d6e00 | 66 69 67 75 72 65 20 61 20 4c 33 56 50 4e 20 56 52 46 73 20 62 75 74 20 4c 33 56 50 4e 20 56 52 | figure.a.L3VPN.VRFs.but.L3VPN.VR |
d6e20 | 46 73 20 6d 75 73 74 20 62 65 20 6d 61 69 6e 74 61 69 6e 65 64 2c 20 74 6f 6f 2e 46 6f 72 20 4c | Fs.must.be.maintained,.too.For.L |
d6e40 | 33 56 50 4e 20 56 52 46 20 6d 61 69 6e 74 65 6e 61 6e 63 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 | 3VPN.VRF.maintenance.the.followi |
d6e60 | 6e 67 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 61 72 65 20 69 6e 20 70 | ng.operational.commands.are.in.p |
d6e80 | 6c 61 63 65 2e 00 49 74 20 69 73 20 6e 6f 74 20 73 75 66 66 69 63 69 65 6e 74 20 74 6f 20 6f 6e | lace..It.is.not.sufficient.to.on |
d6ea0 | 6c 79 20 63 6f 6e 66 69 67 75 72 65 20 61 20 56 52 46 20 62 75 74 20 56 52 46 73 20 6d 75 73 74 | ly.configure.a.VRF.but.VRFs.must |
d6ec0 | 20 62 65 20 6d 61 69 6e 74 61 69 6e 65 64 2c 20 74 6f 6f 2e 20 46 6f 72 20 56 52 46 20 6d 61 69 | .be.maintained,.too..For.VRF.mai |
d6ee0 | 6e 74 65 6e 61 6e 63 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 70 65 72 61 74 69 6f 6e | ntenance.the.following.operation |
d6f00 | 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 61 72 65 20 69 6e 20 70 6c 61 63 65 2e 00 49 74 20 69 73 20 | al.commands.are.in.place..It.is. |
d6f20 | 6e 6f 74 20 76 61 6c 69 64 20 74 6f 20 75 73 65 20 74 68 65 20 60 76 69 66 20 31 60 20 6f 70 74 | not.valid.to.use.the.`vif.1`.opt |
d6f40 | 69 6f 6e 20 66 6f 72 20 56 4c 41 4e 20 61 77 61 72 65 20 62 72 69 64 67 65 73 20 62 65 63 61 75 | ion.for.VLAN.aware.bridges.becau |
d6f60 | 73 65 20 56 4c 41 4e 20 61 77 61 72 65 20 62 72 69 64 67 65 73 20 61 73 73 75 6d 65 20 74 68 61 | se.VLAN.aware.bridges.assume.tha |
d6f80 | 74 20 61 6c 6c 20 75 6e 6c 61 62 65 6c 65 64 20 70 61 63 6b 65 74 73 20 62 65 6c 6f 6e 67 20 74 | t.all.unlabeled.packets.belong.t |
d6fa0 | 6f 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 4c 41 4e 20 31 20 6d 65 6d 62 65 72 20 61 6e 64 20 | o.the.default.VLAN.1.member.and. |
d6fc0 | 74 68 61 74 20 74 68 65 20 56 4c 41 4e 20 49 44 20 6f 66 20 74 68 65 20 62 72 69 64 67 65 27 73 | that.the.VLAN.ID.of.the.bridge's |
d6fe0 | 20 70 61 72 65 6e 74 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 6c 77 61 79 73 20 31 00 49 74 | .parent.interface.is.always.1.It |
d7000 | 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 65 6e 68 61 6e 63 65 20 61 75 74 68 65 6e 74 69 | .is.possible.to.enhance.authenti |
d7020 | 63 61 74 69 6f 6e 20 73 65 63 75 72 69 74 79 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 3a 61 62 | cation.security.by.using.the.:ab |
d7040 | 62 72 3a 60 32 46 41 20 28 54 77 6f 2d 66 61 63 74 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 | br:`2FA.(Two-factor.authenticati |
d7060 | 6f 6e 29 60 2f 3a 61 62 62 72 3a 60 4d 46 41 20 28 4d 75 6c 74 69 2d 66 61 63 74 6f 72 20 61 75 | on)`/:abbr:`MFA.(Multi-factor.au |
d7080 | 74 68 65 6e 74 69 63 61 74 69 6f 6e 29 60 20 66 65 61 74 75 72 65 20 74 6f 67 65 74 68 65 72 20 | thentication)`.feature.together. |
d70a0 | 77 69 74 68 20 3a 61 62 62 72 3a 60 4f 54 50 20 28 4f 6e 65 2d 54 69 6d 65 2d 50 61 64 29 60 20 | with.:abbr:`OTP.(One-Time-Pad)`. |
d70c0 | 6f 6e 20 56 79 4f 53 2e 20 3a 61 62 62 72 3a 60 32 46 41 20 28 54 77 6f 2d 66 61 63 74 6f 72 20 | on.VyOS..:abbr:`2FA.(Two-factor. |
d70e0 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 29 60 2f 3a 61 62 62 72 3a 60 4d 46 41 20 28 4d 75 6c | authentication)`/:abbr:`MFA.(Mul |
d7100 | 74 69 2d 66 61 63 74 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 29 60 20 69 73 20 63 6f | ti-factor.authentication)`.is.co |
d7120 | 6e 66 69 67 75 72 65 64 20 69 6e 64 65 70 65 6e 64 65 6e 74 6c 79 20 70 65 72 20 65 61 63 68 20 | nfigured.independently.per.each. |
d7140 | 75 73 65 72 2e 20 49 66 20 61 6e 20 4f 54 50 20 6b 65 79 20 69 73 20 63 6f 6e 66 69 67 75 72 65 | user..If.an.OTP.key.is.configure |
d7160 | 64 20 66 6f 72 20 61 20 75 73 65 72 2c 20 32 46 41 2f 4d 46 41 20 69 73 20 61 75 74 6f 6d 61 74 | d.for.a.user,.2FA/MFA.is.automat |
d7180 | 69 63 61 6c 6c 79 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 74 68 61 74 20 70 61 72 74 69 63 75 6c | ically.enabled.for.that.particul |
d71a0 | 61 72 20 75 73 65 72 2e 20 49 66 20 61 20 75 73 65 72 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 | ar.user..If.a.user.does.not.have |
d71c0 | 20 61 6e 20 4f 54 50 20 6b 65 79 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 74 68 65 72 65 20 69 73 | .an.OTP.key.configured,.there.is |
d71e0 | 20 6e 6f 20 32 46 41 2f 4d 46 41 20 63 68 65 63 6b 20 66 6f 72 20 74 68 61 74 20 75 73 65 72 2e | .no.2FA/MFA.check.for.that.user. |
d7200 | 00 49 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 70 65 72 6d 69 74 20 42 47 50 20 69 6e | .It.is.possible.to.permit.BGP.in |
d7220 | 73 74 61 6c 6c 20 56 50 4e 20 70 72 65 66 69 78 65 73 20 77 69 74 68 6f 75 74 20 74 72 61 6e 73 | stall.VPN.prefixes.without.trans |
d7240 | 70 6f 72 74 20 6c 61 62 65 6c 73 2e 20 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | port.labels..This.configuration. |
d7260 | 77 69 6c 6c 20 69 6e 73 74 61 6c 6c 20 56 50 4e 20 70 72 65 66 69 78 65 73 20 6f 72 69 67 69 6e | will.install.VPN.prefixes.origin |
d7280 | 61 74 65 64 20 66 72 6f 6d 20 61 6e 20 65 2d 62 67 70 20 73 65 73 73 69 6f 6e 2c 20 61 6e 64 20 | ated.from.an.e-bgp.session,.and. |
d72a0 | 77 69 74 68 20 74 68 65 20 6e 65 78 74 2d 68 6f 70 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 | with.the.next-hop.directly.conne |
d72c0 | 63 74 65 64 2e 00 49 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 73 70 65 63 69 66 79 20 | cted..It.is.possible.to.specify. |
d72e0 | 61 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 66 6f 72 20 69 70 76 36 20 70 72 65 66 69 78 65 73 | a.static.route.for.ipv6.prefixes |
d7300 | 20 75 73 69 6e 67 20 61 6e 20 53 52 76 36 20 73 65 67 6d 65 6e 74 73 20 69 6e 73 74 72 75 63 74 | .using.an.SRv6.segments.instruct |
d7320 | 69 6f 6e 2e 20 54 68 65 20 60 2f 60 20 73 65 70 61 72 61 74 6f 72 20 63 61 6e 20 62 65 20 75 73 | ion..The.`/`.separator.can.be.us |
d7340 | 65 64 20 74 6f 20 73 70 65 63 69 66 79 20 6d 75 6c 74 69 70 6c 65 20 73 65 67 6d 65 6e 74 20 69 | ed.to.specify.multiple.segment.i |
d7360 | 6e 73 74 72 75 63 74 69 6f 6e 73 2e 00 49 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 75 | nstructions..It.is.possible.to.u |
d7380 | 73 65 20 65 69 74 68 65 72 20 4d 75 6c 74 69 63 61 73 74 20 6f 72 20 55 6e 69 63 61 73 74 20 74 | se.either.Multicast.or.Unicast.t |
d73a0 | 6f 20 73 79 6e 63 20 63 6f 6e 6e 74 72 61 63 6b 20 74 72 61 66 66 69 63 2e 20 4d 6f 73 74 20 65 | o.sync.conntrack.traffic..Most.e |
d73c0 | 78 61 6d 70 6c 65 73 20 62 65 6c 6f 77 20 73 68 6f 77 20 4d 75 6c 74 69 63 61 73 74 2c 20 62 75 | xamples.below.show.Multicast,.bu |
d73e0 | 74 20 75 6e 69 63 61 73 74 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 62 79 20 75 73 | t.unicast.can.be.specified.by.us |
d7400 | 69 6e 67 20 74 68 65 20 22 70 65 65 72 22 20 6b 65 79 77 6f 72 6b 20 61 66 74 65 72 20 74 68 65 | ing.the."peer".keywork.after.the |
d7420 | 20 73 70 65 63 69 66 69 63 65 64 20 69 6e 74 65 72 66 61 63 65 2c 20 61 73 20 69 6e 20 74 68 65 | .specificed.interface,.as.in.the |
d7440 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 3a 00 49 74 20 69 73 20 76 65 72 79 20 65 | .following.example:.It.is.very.e |
d7460 | 61 73 79 20 74 6f 20 6d 69 73 63 6f 6e 66 69 67 75 72 65 20 6d 75 6c 74 69 63 61 73 74 20 72 65 | asy.to.misconfigure.multicast.re |
d7480 | 70 65 61 74 69 6e 67 20 69 66 20 79 6f 75 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 4e 48 53 | peating.if.you.have.multiple.NHS |
d74a0 | 65 73 2e 00 49 74 20 75 73 65 73 20 61 20 73 69 6e 67 6c 65 20 54 43 50 20 6f 72 20 55 44 50 20 | es..It.uses.a.single.TCP.or.UDP. |
d74c0 | 63 6f 6e 6e 65 63 74 69 6f 6e 20 61 6e 64 20 64 6f 65 73 20 6e 6f 74 20 72 65 6c 79 20 6f 6e 20 | connection.and.does.not.rely.on. |
d74e0 | 70 61 63 6b 65 74 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 65 73 2c 20 73 6f 20 69 74 20 77 | packet.source.addresses,.so.it.w |
d7500 | 69 6c 6c 20 77 6f 72 6b 20 65 76 65 6e 20 74 68 72 6f 75 67 68 20 61 20 64 6f 75 62 6c 65 20 4e | ill.work.even.through.a.double.N |
d7520 | 41 54 3a 20 70 65 72 66 65 63 74 20 66 6f 72 20 70 75 62 6c 69 63 20 68 6f 74 73 70 6f 74 73 20 | AT:.perfect.for.public.hotspots. |
d7540 | 61 6e 64 20 73 75 63 68 00 49 74 20 75 73 65 73 20 61 20 73 74 6f 63 68 61 73 74 69 63 20 6d 6f | and.such.It.uses.a.stochastic.mo |
d7560 | 64 65 6c 20 74 6f 20 63 6c 61 73 73 69 66 79 20 69 6e 63 6f 6d 69 6e 67 20 70 61 63 6b 65 74 73 | del.to.classify.incoming.packets |
d7580 | 20 69 6e 74 6f 20 64 69 66 66 65 72 65 6e 74 20 66 6c 6f 77 73 20 61 6e 64 20 69 73 20 75 73 65 | .into.different.flows.and.is.use |
d75a0 | 64 20 74 6f 20 70 72 6f 76 69 64 65 20 61 20 66 61 69 72 20 73 68 61 72 65 20 6f 66 20 74 68 65 | d.to.provide.a.fair.share.of.the |
d75c0 | 20 62 61 6e 64 77 69 64 74 68 20 74 6f 20 61 6c 6c 20 74 68 65 20 66 6c 6f 77 73 20 75 73 69 6e | .bandwidth.to.all.the.flows.usin |
d75e0 | 67 20 74 68 65 20 71 75 65 75 65 2e 20 45 61 63 68 20 66 6c 6f 77 20 69 73 20 6d 61 6e 61 67 65 | g.the.queue..Each.flow.is.manage |
d7600 | 64 20 62 79 20 74 68 65 20 43 6f 44 65 6c 20 71 75 65 75 69 6e 67 20 20 64 69 73 63 69 70 6c 69 | d.by.the.CoDel.queuing..discipli |
d7620 | 6e 65 2e 20 52 65 6f 72 64 65 72 69 6e 67 20 77 69 74 68 69 6e 20 61 20 66 6c 6f 77 20 69 73 20 | ne..Reordering.within.a.flow.is. |
d7640 | 61 76 6f 69 64 65 64 20 73 69 6e 63 65 20 43 6f 64 65 6c 20 69 6e 74 65 72 6e 61 6c 6c 79 20 75 | avoided.since.Codel.internally.u |
d7660 | 73 65 73 20 61 20 46 49 46 4f 20 71 75 65 75 65 2e 00 49 74 20 77 69 6c 6c 20 62 65 20 63 6f 6d | ses.a.FIFO.queue..It.will.be.com |
d7680 | 62 69 6e 65 64 20 77 69 74 68 20 74 68 65 20 64 65 6c 65 67 61 74 65 64 20 70 72 65 66 69 78 20 | bined.with.the.delegated.prefix. |
d76a0 | 61 6e 64 20 74 68 65 20 73 6c 61 2d 69 64 20 74 6f 20 66 6f 72 6d 20 61 20 63 6f 6d 70 6c 65 74 | and.the.sla-id.to.form.a.complet |
d76c0 | 65 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 | e.interface.address..The.default |
d76e0 | 20 69 73 20 74 6f 20 75 73 65 20 74 68 65 20 45 55 49 2d 36 34 20 61 64 64 72 65 73 73 20 6f 66 | .is.to.use.the.EUI-64.address.of |
d7700 | 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 00 49 74 27 73 20 65 61 73 79 20 74 6f 20 73 65 74 | .the.interface..It's.easy.to.set |
d7720 | 75 70 20 61 6e 64 20 6f 66 66 65 72 73 20 76 65 72 79 20 66 6c 65 78 69 62 6c 65 20 73 70 6c 69 | up.and.offers.very.flexible.spli |
d7740 | 74 20 74 75 6e 6e 65 6c 69 6e 67 00 49 74 27 73 20 6e 6f 74 20 6c 69 6b 65 6c 79 20 74 68 61 74 | t.tunneling.It's.not.likely.that |
d7760 | 20 61 6e 79 6f 6e 65 20 77 69 6c 6c 20 6e 65 65 64 20 69 74 20 61 6e 79 20 74 69 6d 65 20 73 6f | .anyone.will.need.it.any.time.so |
d7780 | 6f 6e 2c 20 62 75 74 20 69 74 20 64 6f 65 73 20 65 78 69 73 74 2e 00 49 74 27 73 20 73 6c 6f 77 | on,.but.it.does.exist..It's.slow |
d77a0 | 65 72 20 74 68 61 6e 20 49 50 73 65 63 20 64 75 65 20 74 6f 20 68 69 67 68 65 72 20 70 72 6f 74 | er.than.IPsec.due.to.higher.prot |
d77c0 | 6f 63 6f 6c 20 6f 76 65 72 68 65 61 64 20 61 6e 64 20 74 68 65 20 66 61 63 74 20 69 74 20 72 75 | ocol.overhead.and.the.fact.it.ru |
d77e0 | 6e 73 20 69 6e 20 75 73 65 72 20 6d 6f 64 65 20 77 68 69 6c 65 20 49 50 73 65 63 2c 20 6f 6e 20 | ns.in.user.mode.while.IPsec,.on. |
d7800 | 4c 69 6e 75 78 2c 20 69 73 20 69 6e 20 6b 65 72 6e 65 6c 20 6d 6f 64 65 00 49 74 27 73 20 74 69 | Linux,.is.in.kernel.mode.It's.ti |
d7820 | 6d 65 20 74 6f 20 63 68 65 63 6b 20 63 6f 6e 6e 74 72 61 63 6b 20 74 61 62 6c 65 2c 20 74 6f 20 | me.to.check.conntrack.table,.to. |
d7840 | 73 65 65 20 69 66 20 61 6e 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 61 73 20 61 63 63 65 70 74 | see.if.any.connection.was.accept |
d7860 | 65 64 2c 20 61 6e 64 20 69 66 20 77 61 73 20 70 72 6f 70 65 72 6c 79 20 6f 66 66 6c 6f 61 64 65 | ed,.and.if.was.properly.offloade |
d7880 | 64 00 4a 6f 69 6e 20 61 20 67 69 76 65 6e 20 56 52 46 2e 20 54 68 69 73 20 77 69 6c 6c 20 6f 70 | d.Join.a.given.VRF..This.will.op |
d78a0 | 65 6e 20 61 20 6e 65 77 20 73 75 62 73 68 65 6c 6c 20 77 69 74 68 69 6e 20 74 68 65 20 73 70 65 | en.a.new.subshell.within.the.spe |
d78c0 | 63 69 66 69 65 64 20 56 52 46 2e 00 4a 75 6d 70 20 74 6f 20 61 20 64 69 66 66 65 72 65 6e 74 20 | cified.VRF..Jump.to.a.different. |
d78e0 | 72 75 6c 65 20 69 6e 20 74 68 69 73 20 72 6f 75 74 65 2d 6d 61 70 20 6f 6e 20 61 20 6d 61 74 63 | rule.in.this.route-map.on.a.matc |
d7900 | 68 2e 00 4a 75 6e 69 70 65 72 20 45 58 20 53 77 69 74 63 68 00 4b 65 72 6e 65 6c 00 4b 65 72 6e | h..Juniper.EX.Switch.Kernel.Kern |
d7920 | 65 6c 20 6d 65 73 73 61 67 65 73 00 4b 65 79 20 42 61 73 65 64 20 41 75 74 68 65 6e 74 69 63 61 | el.messages.Key.Based.Authentica |
d7940 | 74 69 6f 6e 00 4b 65 79 20 47 65 6e 65 72 61 74 69 6f 6e 00 4b 65 79 20 4d 61 6e 61 67 65 6d 65 | tion.Key.Generation.Key.Manageme |
d7960 | 6e 74 00 4b 65 79 20 50 61 72 61 6d 65 74 65 72 73 3a 00 4b 65 79 20 50 6f 69 6e 74 73 3a 00 4b | nt.Key.Parameters:.Key.Points:.K |
d7980 | 65 79 20 65 78 63 68 61 6e 67 65 20 61 6e 64 20 70 61 79 6c 6f 61 64 20 65 6e 63 72 79 70 74 69 | ey.exchange.and.payload.encrypti |
d79a0 | 6f 6e 20 69 73 20 64 6f 6e 65 20 75 73 69 6e 67 20 49 4b 45 20 61 6e 64 20 45 53 50 20 70 72 6f | on.is.done.using.IKE.and.ESP.pro |
d79c0 | 70 6f 73 61 6c 73 20 61 73 20 6b 6e 6f 77 6e 20 66 72 6f 6d 20 49 4b 45 76 31 20 62 75 74 20 74 | posals.as.known.from.IKEv1.but.t |
d79e0 | 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 72 65 20 66 61 73 74 65 72 20 74 6f 20 65 73 74 | he.connections.are.faster.to.est |
d7a00 | 61 62 6c 69 73 68 2c 20 6d 6f 72 65 20 72 65 6c 69 61 62 6c 65 2c 20 61 6e 64 20 61 6c 73 6f 20 | ablish,.more.reliable,.and.also. |
d7a20 | 73 75 70 70 6f 72 74 20 72 6f 61 6d 69 6e 67 20 66 72 6f 6d 20 49 50 20 74 6f 20 49 50 20 28 63 | support.roaming.from.IP.to.IP.(c |
d7a40 | 61 6c 6c 65 64 20 4d 4f 42 49 4b 45 20 77 68 69 63 68 20 6d 61 6b 65 73 20 73 75 72 65 20 79 6f | alled.MOBIKE.which.makes.sure.yo |
d7a60 | 75 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 64 72 6f 70 20 77 68 65 6e | ur.connection.does.not.drop.when |
d7a80 | 20 63 68 61 6e 67 69 6e 67 20 6e 65 74 77 6f 72 6b 73 20 66 72 6f 6d 20 65 2e 67 2e 20 57 49 46 | .changing.networks.from.e.g..WIF |
d7aa0 | 49 20 74 6f 20 4c 54 45 20 61 6e 64 20 62 61 63 6b 29 2e 20 41 75 74 68 65 6e 74 69 63 61 74 69 | I.to.LTE.and.back)..Authenticati |
d7ac0 | 6f 6e 20 63 61 6e 20 62 65 20 61 63 68 69 65 76 65 64 20 77 69 74 68 20 58 2e 35 30 39 20 63 65 | on.can.be.achieved.with.X.509.ce |
d7ae0 | 72 74 69 66 69 63 61 74 65 73 2e 00 4b 65 79 20 65 78 63 68 61 6e 67 65 20 61 6e 64 20 70 61 79 | rtificates..Key.exchange.and.pay |
d7b00 | 6c 6f 61 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 69 73 20 73 74 69 6c 6c 20 64 6f 6e 65 20 75 73 | load.encryption.is.still.done.us |
d7b20 | 69 6e 67 20 49 4b 45 20 61 6e 64 20 45 53 50 20 70 72 6f 70 6f 73 61 6c 73 20 61 73 20 6b 6e 6f | ing.IKE.and.ESP.proposals.as.kno |
d7b40 | 77 6e 20 66 72 6f 6d 20 49 4b 45 76 31 20 62 75 74 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e | wn.from.IKEv1.but.the.connection |
d7b60 | 73 20 61 72 65 20 66 61 73 74 65 72 20 74 6f 20 65 73 74 61 62 6c 69 73 68 2c 20 6d 6f 72 65 20 | s.are.faster.to.establish,.more. |
d7b80 | 72 65 6c 69 61 62 6c 65 2c 20 61 6e 64 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 20 72 6f 61 6d 69 | reliable,.and.also.support.roami |
d7ba0 | 6e 67 20 66 72 6f 6d 20 49 50 20 74 6f 20 49 50 20 28 63 61 6c 6c 65 64 20 4d 4f 42 49 4b 45 20 | ng.from.IP.to.IP.(called.MOBIKE. |
d7bc0 | 77 68 69 63 68 20 6d 61 6b 65 73 20 73 75 72 65 20 79 6f 75 72 20 63 6f 6e 6e 65 63 74 69 6f 6e | which.makes.sure.your.connection |
d7be0 | 20 64 6f 65 73 20 6e 6f 74 20 64 72 6f 70 20 77 68 65 6e 20 63 68 61 6e 67 69 6e 67 20 6e 65 74 | .does.not.drop.when.changing.net |
d7c00 | 77 6f 72 6b 73 20 66 72 6f 6d 20 65 2e 67 2e 20 57 49 46 49 20 74 6f 20 4c 54 45 20 61 6e 64 20 | works.from.e.g..WIFI.to.LTE.and. |
d7c20 | 62 61 63 6b 29 2e 00 4b 65 79 20 75 73 61 67 65 20 28 43 4c 49 29 00 4b 65 79 62 6f 61 72 64 20 | back)..Key.usage.(CLI).Keyboard. |
d7c40 | 4c 61 79 6f 75 74 00 4b 65 79 70 61 69 72 73 00 4b 65 79 77 6f 72 64 00 4c 32 54 50 00 4c 32 54 | Layout.Keypairs.Keyword.L2TP.L2T |
d7c60 | 50 20 6f 76 65 72 20 49 50 73 65 63 00 4c 32 54 50 76 33 00 4c 32 54 50 76 33 20 63 61 6e 20 62 | P.over.IPsec.L2TPv3.L2TPv3.can.b |
d7c80 | 65 20 72 65 67 61 72 64 65 64 20 61 73 20 62 65 69 6e 67 20 74 6f 20 4d 50 4c 53 20 77 68 61 74 | e.regarded.as.being.to.MPLS.what |
d7ca0 | 20 49 50 20 69 73 20 74 6f 20 41 54 4d 3a 20 61 20 73 69 6d 70 6c 69 66 69 65 64 20 76 65 72 73 | .IP.is.to.ATM:.a.simplified.vers |
d7cc0 | 69 6f 6e 20 6f 66 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 63 65 70 74 2c 20 77 69 74 68 20 6d 75 | ion.of.the.same.concept,.with.mu |
d7ce0 | 63 68 20 6f 66 20 74 68 65 20 73 61 6d 65 20 62 65 6e 65 66 69 74 20 61 63 68 69 65 76 65 64 20 | ch.of.the.same.benefit.achieved. |
d7d00 | 61 74 20 61 20 66 72 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 65 66 66 6f 72 74 2c 20 61 74 20 | at.a.fraction.of.the.effort,.at. |
d7d20 | 74 68 65 20 63 6f 73 74 20 6f 66 20 6c 6f 73 69 6e 67 20 73 6f 6d 65 20 74 65 63 68 6e 69 63 61 | the.cost.of.losing.some.technica |
d7d40 | 6c 20 66 65 61 74 75 72 65 73 20 63 6f 6e 73 69 64 65 72 65 64 20 6c 65 73 73 20 69 6d 70 6f 72 | l.features.considered.less.impor |
d7d60 | 74 61 6e 74 20 69 6e 20 74 68 65 20 6d 61 72 6b 65 74 2e 00 4c 32 54 50 76 33 20 69 73 20 64 65 | tant.in.the.market..L2TPv3.is.de |
d7d80 | 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 39 32 31 60 2e 00 4c 32 54 50 76 33 20 69 | scribed.in.:rfc:`3921`..L2TPv3.i |
d7da0 | 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 39 33 31 60 2e 00 4c 32 54 50 | s.described.in.:rfc:`3931`..L2TP |
d7dc0 | 76 33 20 6f 70 74 69 6f 6e 73 00 4c 32 54 50 76 33 3a 00 4c 33 56 50 4e 20 56 52 46 73 00 4c 44 | v3.options.L2TPv3:.L3VPN.VRFs.LD |
d7de0 | 41 50 00 4c 44 41 50 20 70 72 6f 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e 2e 20 44 65 66 61 75 6c | AP.LDAP.protocol.version..Defaul |
d7e00 | 74 73 20 74 6f 20 33 20 69 66 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 2e 00 4c 44 41 50 20 73 | ts.to.3.if.not.specified..LDAP.s |
d7e20 | 65 61 72 63 68 20 66 69 6c 74 65 72 20 74 6f 20 6c 6f 63 61 74 65 20 74 68 65 20 75 73 65 72 20 | earch.filter.to.locate.the.user. |
d7e40 | 44 4e 2e 20 52 65 71 75 69 72 65 64 20 69 66 20 74 68 65 20 75 73 65 72 73 20 61 72 65 20 69 6e | DN..Required.if.the.users.are.in |
d7e60 | 20 61 20 68 69 65 72 61 72 63 68 79 20 62 65 6c 6f 77 20 74 68 65 20 62 61 73 65 20 44 4e 2c 20 | .a.hierarchy.below.the.base.DN,. |
d7e80 | 6f 72 20 69 66 20 74 68 65 20 6c 6f 67 69 6e 20 6e 61 6d 65 20 69 73 20 6e 6f 74 20 77 68 61 74 | or.if.the.login.name.is.not.what |
d7ea0 | 20 62 75 69 6c 64 73 20 74 68 65 20 75 73 65 72 20 73 70 65 63 69 66 69 63 20 70 61 72 74 20 6f | .builds.the.user.specific.part.o |
d7ec0 | 66 20 74 68 65 20 75 73 65 72 73 20 44 4e 2e 00 4c 4c 44 50 00 4c 4c 44 50 20 70 65 72 66 6f 72 | f.the.users.DN..LLDP.LLDP.perfor |
d7ee0 | 6d 73 20 66 75 6e 63 74 69 6f 6e 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 73 65 76 65 72 61 6c 20 | ms.functions.similar.to.several. |
d7f00 | 70 72 6f 70 72 69 65 74 61 72 79 20 70 72 6f 74 6f 63 6f 6c 73 2c 20 73 75 63 68 20 61 73 20 3a | proprietary.protocols,.such.as.: |
d7f20 | 61 62 62 72 3a 60 43 44 50 20 28 43 69 73 63 6f 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f | abbr:`CDP.(Cisco.Discovery.Proto |
d7f40 | 63 6f 6c 29 60 2c 20 3a 61 62 62 72 3a 60 46 44 50 20 28 46 6f 75 6e 64 72 79 20 44 69 73 63 6f | col)`,.:abbr:`FDP.(Foundry.Disco |
d7f60 | 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 29 60 2c 20 3a 61 62 62 72 3a 60 4e 44 50 20 28 4e 6f 72 | very.Protocol)`,.:abbr:`NDP.(Nor |
d7f80 | 74 65 6c 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 29 60 20 61 6e 64 20 3a 61 62 | tel.Discovery.Protocol)`.and.:ab |
d7fa0 | 62 72 3a 60 4c 4c 54 44 20 28 4c 69 6e 6b 20 4c 61 79 65 72 20 54 6f 70 6f 6c 6f 67 79 20 44 69 | br:`LLTD.(Link.Layer.Topology.Di |
d7fc0 | 73 63 6f 76 65 72 79 29 60 2e 00 4c 4e 53 20 28 4c 32 54 50 20 4e 65 74 77 6f 72 6b 20 53 65 72 | scovery)`..LNS.(L2TP.Network.Ser |
d7fe0 | 76 65 72 29 00 4c 4e 53 20 61 72 65 20 6f 66 74 65 6e 20 75 73 65 64 20 74 6f 20 63 6f 6e 6e 65 | ver).LNS.are.often.used.to.conne |
d8000 | 63 74 20 74 6f 20 61 20 4c 41 43 20 28 4c 32 54 50 20 41 63 63 65 73 73 20 43 6f 6e 63 65 6e 74 | ct.to.a.LAC.(L2TP.Access.Concent |
d8020 | 72 61 74 6f 72 29 2e 00 4c 61 62 65 6c 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 50 72 6f 74 6f | rator)..Label.Distribution.Proto |
d8040 | 63 6f 6c 00 4c 61 79 65 72 20 32 20 54 75 6e 6e 65 6c 6c 69 6e 67 20 50 72 6f 74 6f 63 6f 6c 20 | col.Layer.2.Tunnelling.Protocol. |
d8060 | 56 65 72 73 69 6f 6e 20 33 20 69 73 20 61 6e 20 49 45 54 46 20 73 74 61 6e 64 61 72 64 20 72 65 | Version.3.is.an.IETF.standard.re |
d8080 | 6c 61 74 65 64 20 74 6f 20 4c 32 54 50 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 61 | lated.to.L2TP.that.can.be.used.a |
d80a0 | 73 20 61 6e 20 61 6c 74 65 72 6e 61 74 69 76 65 20 70 72 6f 74 6f 63 6f 6c 20 74 6f 20 3a 72 65 | s.an.alternative.protocol.to.:re |
d80c0 | 66 3a 60 6d 70 6c 73 60 20 66 6f 72 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 6f 66 20 6d 75 | f:`mpls`.for.encapsulation.of.mu |
d80e0 | 6c 74 69 70 72 6f 74 6f 63 6f 6c 20 4c 61 79 65 72 20 32 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f | ltiprotocol.Layer.2.communicatio |
d8100 | 6e 73 20 74 72 61 66 66 69 63 20 6f 76 65 72 20 49 50 20 6e 65 74 77 6f 72 6b 73 2e 20 4c 69 6b | ns.traffic.over.IP.networks..Lik |
d8120 | 65 20 4c 32 54 50 2c 20 4c 32 54 50 76 33 20 70 72 6f 76 69 64 65 73 20 61 20 70 73 65 75 64 6f | e.L2TP,.L2TPv3.provides.a.pseudo |
d8140 | 2d 77 69 72 65 20 73 65 72 76 69 63 65 20 62 75 74 20 69 73 20 73 63 61 6c 65 64 20 74 6f 20 66 | -wire.service.but.is.scaled.to.f |
d8160 | 69 74 20 63 61 72 72 69 65 72 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2e 00 4c 65 61 73 65 20 74 | it.carrier.requirements..Lease.t |
d8180 | 69 6d 65 20 77 69 6c 6c 20 62 65 20 6c 65 66 74 20 61 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 | ime.will.be.left.at.the.default. |
d81a0 | 76 61 6c 75 65 20 77 68 69 63 68 20 69 73 20 32 34 20 68 6f 75 72 73 00 4c 65 61 73 65 20 74 69 | value.which.is.24.hours.Lease.ti |
d81c0 | 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 38 36 34 30 30 | meout.in.seconds.(default:.86400 |
d81e0 | 29 00 4c 65 67 61 63 79 20 46 69 72 65 77 61 6c 6c 00 4c 65 74 20 53 4e 4d 50 20 64 61 65 6d 6f | ).Legacy.Firewall.Let.SNMP.daemo |
d8200 | 6e 20 6c 69 73 74 65 6e 20 6f 6e 6c 79 20 6f 6e 20 49 50 20 61 64 64 72 65 73 73 20 31 39 32 2e | n.listen.only.on.IP.address.192. |
d8220 | 30 2e 32 2e 31 00 4c 65 74 27 73 20 61 73 73 75 6d 65 20 50 43 34 20 6f 6e 20 4c 65 61 66 32 20 | 0.2.1.Let's.assume.PC4.on.Leaf2. |
d8240 | 77 61 6e 74 73 20 74 6f 20 70 69 6e 67 20 50 43 35 20 6f 6e 20 4c 65 61 66 33 2e 20 49 6e 73 74 | wants.to.ping.PC5.on.Leaf3..Inst |
d8260 | 65 61 64 20 6f 66 20 73 65 74 74 69 6e 67 20 4c 65 61 66 33 20 61 73 20 6f 75 72 20 72 65 6d 6f | ead.of.setting.Leaf3.as.our.remo |
d8280 | 74 65 20 65 6e 64 20 6d 61 6e 75 61 6c 6c 79 2c 20 4c 65 61 66 32 20 65 6e 63 61 70 73 75 6c 61 | te.end.manually,.Leaf2.encapsula |
d82a0 | 74 65 73 20 74 68 65 20 70 61 63 6b 65 74 20 69 6e 74 6f 20 61 20 55 44 50 2d 70 61 63 6b 65 74 | tes.the.packet.into.a.UDP-packet |
d82c0 | 20 61 6e 64 20 73 65 6e 64 73 20 69 74 20 74 6f 20 69 74 73 20 64 65 73 69 67 6e 61 74 65 64 20 | .and.sends.it.to.its.designated. |
d82e0 | 6d 75 6c 74 69 63 61 73 74 2d 61 64 64 72 65 73 73 20 76 69 61 20 53 70 69 6e 65 31 2e 20 57 68 | multicast-address.via.Spine1..Wh |
d8300 | 65 6e 20 53 70 69 6e 65 31 20 72 65 63 65 69 76 65 73 20 74 68 69 73 20 70 61 63 6b 65 74 20 69 | en.Spine1.receives.this.packet.i |
d8320 | 74 20 66 6f 72 77 61 72 64 73 20 69 74 20 74 6f 20 61 6c 6c 20 6f 74 68 65 72 20 6c 65 61 76 65 | t.forwards.it.to.all.other.leave |
d8340 | 73 20 77 68 6f 20 68 61 73 20 6a 6f 69 6e 65 64 20 74 68 65 20 73 61 6d 65 20 6d 75 6c 74 69 63 | s.who.has.joined.the.same.multic |
d8360 | 61 73 74 2d 67 72 6f 75 70 2c 20 69 6e 20 74 68 69 73 20 63 61 73 65 20 4c 65 61 66 33 2e 20 57 | ast-group,.in.this.case.Leaf3..W |
d8380 | 68 65 6e 20 4c 65 61 66 33 20 72 65 63 65 69 76 65 73 20 74 68 65 20 70 61 63 6b 65 74 20 69 74 | hen.Leaf3.receives.the.packet.it |
d83a0 | 20 66 6f 72 77 61 72 64 73 20 69 74 2c 20 77 68 69 6c 65 20 61 74 20 74 68 65 20 73 61 6d 65 20 | .forwards.it,.while.at.the.same. |
d83c0 | 74 69 6d 65 20 6c 65 61 72 6e 69 6e 67 20 74 68 61 74 20 50 43 34 20 69 73 20 72 65 61 63 68 61 | time.learning.that.PC4.is.reacha |
d83e0 | 62 6c 65 20 62 65 68 69 6e 64 20 4c 65 61 66 32 2c 20 62 65 63 61 75 73 65 20 74 68 65 20 65 6e | ble.behind.Leaf2,.because.the.en |
d8400 | 63 61 70 73 75 6c 61 74 65 64 20 70 61 63 6b 65 74 20 68 61 64 20 4c 65 61 66 32 27 73 20 49 50 | capsulated.packet.had.Leaf2's.IP |
d8420 | 20 61 64 64 72 65 73 73 20 73 65 74 20 61 73 20 73 6f 75 72 63 65 20 49 50 2e 00 4c 65 74 27 73 | .address.set.as.source.IP..Let's |
d8440 | 20 61 73 73 75 6d 65 20 77 65 20 68 61 76 65 20 74 77 6f 20 44 48 43 50 20 57 41 4e 20 69 6e 74 | .assume.we.have.two.DHCP.WAN.int |
d8460 | 65 72 66 61 63 65 73 20 61 6e 64 20 6f 6e 65 20 4c 41 4e 20 28 65 74 68 32 29 3a 00 4c 65 74 27 | erfaces.and.one.LAN.(eth2):.Let' |
d8480 | 73 20 62 75 69 6c 64 20 61 20 73 69 6d 70 6c 65 20 56 50 4e 20 62 65 74 77 65 65 6e 20 32 20 49 | s.build.a.simple.VPN.between.2.I |
d84a0 | 6e 74 65 6c c2 ae 20 51 41 54 20 72 65 61 64 79 20 64 65 76 69 63 65 73 2e 00 4c 65 74 27 73 20 | ntel...QAT.ready.devices..Let's. |
d84c0 | 65 78 70 61 6e 64 20 74 68 65 20 65 78 61 6d 70 6c 65 20 66 72 6f 6d 20 61 62 6f 76 65 20 61 6e | expand.the.example.from.above.an |
d84e0 | 64 20 61 64 64 20 77 65 69 67 68 74 20 74 6f 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 73 2e 20 | d.add.weight.to.the.interfaces.. |
d8500 | 54 68 65 20 62 61 6e 64 77 69 64 74 68 20 66 72 6f 6d 20 65 74 68 30 20 69 73 20 6c 61 72 67 65 | The.bandwidth.from.eth0.is.large |
d8520 | 72 20 74 68 61 6e 20 65 74 68 31 2e 20 50 65 72 20 64 65 66 61 75 6c 74 2c 20 6f 75 74 62 6f 75 | r.than.eth1..Per.default,.outbou |
d8540 | 6e 64 20 74 72 61 66 66 69 63 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 72 61 6e 64 6f 6d | nd.traffic.is.distributed.random |
d8560 | 6c 79 20 61 63 72 6f 73 73 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 74 65 72 66 61 63 65 73 2e 20 | ly.across.available.interfaces.. |
d8580 | 57 65 69 67 68 74 73 20 63 61 6e 20 62 65 20 61 73 73 69 67 6e 65 64 20 74 6f 20 69 6e 74 65 72 | Weights.can.be.assigned.to.inter |
d85a0 | 66 61 63 65 73 20 74 6f 20 69 6e 66 6c 75 65 6e 63 65 20 74 68 65 20 62 61 6c 61 6e 63 69 6e 67 | faces.to.influence.the.balancing |
d85c0 | 2e 00 4c 65 74 73 20 61 73 73 75 6d 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 70 6f | ..Lets.assume.the.following.topo |
d85e0 | 6c 6f 67 79 3a 00 4c 65 76 65 6c 20 34 20 62 61 6c 61 6e 63 69 6e 67 00 4c 69 66 65 74 69 6d 65 | logy:.Level.4.balancing.Lifetime |
d8600 | 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 | .associated.with.the.default.rou |
d8620 | 74 65 72 20 69 6e 20 75 6e 69 74 73 20 6f 66 20 73 65 63 6f 6e 64 73 00 4c 69 66 65 74 69 6d 65 | ter.in.units.of.seconds.Lifetime |
d8640 | 20 69 6e 20 64 61 79 73 3b 20 64 65 66 61 75 6c 74 20 69 73 20 33 36 35 00 4c 69 66 65 74 69 6d | .in.days;.default.is.365.Lifetim |
d8660 | 65 20 69 73 20 64 65 63 72 65 6d 65 6e 74 65 64 20 62 79 20 74 68 65 20 6e 75 6d 62 65 72 20 6f | e.is.decremented.by.the.number.o |
d8680 | 66 20 73 65 63 6f 6e 64 73 20 73 69 6e 63 65 20 74 68 65 20 6c 61 73 74 20 52 41 20 2d 20 75 73 | f.seconds.since.the.last.RA.-.us |
d86a0 | 65 20 69 6e 20 63 6f 6e 6a 75 6e 63 74 69 6f 6e 20 77 69 74 68 20 61 20 44 48 43 50 76 36 2d 50 | e.in.conjunction.with.a.DHCPv6-P |
d86c0 | 44 20 70 72 65 66 69 78 00 4c 69 6b 65 20 6f 6e 20 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f | D.prefix.Like.on.Microsoft.Windo |
d86e0 | 77 73 2c 20 41 70 70 6c 65 20 69 4f 53 2f 69 50 61 64 4f 53 20 6f 75 74 20 6f 66 20 74 68 65 20 | ws,.Apple.iOS/iPadOS.out.of.the. |
d8700 | 62 6f 78 20 64 6f 65 73 20 6e 6f 74 20 65 78 70 6f 73 65 20 61 6c 6c 20 61 76 61 69 6c 61 62 6c | box.does.not.expose.all.availabl |
d8720 | 65 20 56 50 4e 20 6f 70 74 69 6f 6e 73 20 76 69 61 20 74 68 65 20 64 65 76 69 63 65 20 47 55 49 | e.VPN.options.via.the.device.GUI |
d8740 | 2e 00 4c 69 6d 69 74 20 61 6c 6c 6f 77 65 64 20 63 69 70 68 65 72 20 61 6c 67 6f 72 69 74 68 6d | ..Limit.allowed.cipher.algorithm |
d8760 | 73 20 75 73 65 64 20 64 75 72 69 6e 67 20 53 53 4c 2f 54 4c 53 20 68 61 6e 64 73 68 61 6b 65 00 | s.used.during.SSL/TLS.handshake. |
d8780 | 4c 69 6d 69 74 20 6c 6f 67 69 6e 73 20 74 6f 20 60 3c 6c 69 6d 69 74 3e 60 20 70 65 72 20 65 76 | Limit.logins.to.`<limit>`.per.ev |
d87a0 | 65 72 79 20 60 60 72 61 74 65 2d 74 69 6d 65 60 60 20 73 65 63 6f 6e 64 73 2e 20 52 61 74 65 20 | ery.``rate-time``.seconds..Rate. |
d87c0 | 6c 69 6d 69 74 20 6d 75 73 74 20 62 65 20 62 65 74 77 65 65 6e 20 31 20 61 6e 64 20 31 30 20 61 | limit.must.be.between.1.and.10.a |
d87e0 | 74 74 65 6d 70 74 73 2e 00 4c 69 6d 69 74 20 6c 6f 67 69 6e 73 20 74 6f 20 60 60 72 61 74 65 2d | ttempts..Limit.logins.to.``rate- |
d8800 | 6c 69 6d 69 74 60 60 20 61 74 74 65 6d 70 73 20 70 65 72 20 65 76 65 72 79 20 60 3c 73 65 63 6f | limit``.attemps.per.every.`<seco |
d8820 | 6e 64 73 3e 60 2e 20 52 61 74 65 20 74 69 6d 65 20 6d 75 73 74 20 62 65 20 62 65 74 77 65 65 6e | nds>`..Rate.time.must.be.between |
d8840 | 20 31 35 20 61 6e 64 20 36 30 30 20 73 65 63 6f 6e 64 73 2e 00 4c 69 6d 69 74 20 6d 61 78 69 6d | .15.and.600.seconds..Limit.maxim |
d8860 | 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 4c 69 6d 69 74 65 72 | um.number.of.connections.Limiter |
d8880 | 00 4c 69 6d 69 74 65 72 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 6f 73 65 20 70 6f 6c 69 63 69 65 | .Limiter.is.one.of.those.policie |
d88a0 | 73 20 74 68 61 74 20 75 73 65 73 20 63 6c 61 73 73 65 73 5f 20 28 49 6e 67 72 65 73 73 20 71 64 | s.that.uses.classes_.(Ingress.qd |
d88c0 | 69 73 63 20 69 73 20 61 63 74 75 61 6c 6c 79 20 61 20 63 6c 61 73 73 6c 65 73 73 20 70 6f 6c 69 | isc.is.actually.a.classless.poli |
d88e0 | 63 79 20 62 75 74 20 66 69 6c 74 65 72 73 20 64 6f 20 77 6f 72 6b 20 69 6e 20 69 74 29 2e 00 4c | cy.but.filters.do.work.in.it)..L |
d8900 | 69 6d 69 74 73 00 4c 69 6e 65 20 70 72 69 6e 74 65 72 20 73 75 62 73 79 73 74 65 6d 00 4c 69 6e | imits.Line.printer.subsystem.Lin |
d8920 | 6b 20 4d 54 55 20 76 61 6c 75 65 20 70 6c 61 63 65 64 20 69 6e 20 52 41 73 2c 20 65 78 6c 75 64 | k.MTU.value.placed.in.RAs,.exlud |
d8940 | 65 64 20 69 6e 20 52 41 73 20 69 66 20 75 6e 73 65 74 00 4c 69 6e 6b 20 61 67 67 72 65 67 61 74 | ed.in.RAs.if.unset.Link.aggregat |
d8960 | 69 6f 6e 00 4c 69 6e 75 78 20 6e 65 74 66 69 6c 74 65 72 20 77 69 6c 6c 20 6e 6f 74 20 4e 41 54 | ion.Linux.netfilter.will.not.NAT |
d8980 | 20 74 72 61 66 66 69 63 20 6d 61 72 6b 65 64 20 61 73 20 49 4e 56 41 4c 49 44 2e 20 54 68 69 73 | .traffic.marked.as.INVALID..This |
d89a0 | 20 6f 66 74 65 6e 20 63 6f 6e 66 75 73 65 73 20 70 65 6f 70 6c 65 20 69 6e 74 6f 20 74 68 69 6e | .often.confuses.people.into.thin |
d89c0 | 6b 69 6e 67 20 74 68 61 74 20 4c 69 6e 75 78 20 28 6f 72 20 73 70 65 63 69 66 69 63 61 6c 6c 79 | king.that.Linux.(or.specifically |
d89e0 | 20 56 79 4f 53 29 20 68 61 73 20 61 20 62 72 6f 6b 65 6e 20 4e 41 54 20 69 6d 70 6c 65 6d 65 6e | .VyOS).has.a.broken.NAT.implemen |
d8a00 | 74 61 74 69 6f 6e 20 62 65 63 61 75 73 65 20 6e 6f 6e 2d 4e 41 54 65 64 20 74 72 61 66 66 69 63 | tation.because.non-NATed.traffic |
d8a20 | 20 69 73 20 73 65 65 6e 20 6c 65 61 76 69 6e 67 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 69 6e 74 | .is.seen.leaving.an.external.int |
d8a40 | 65 72 66 61 63 65 2e 20 54 68 69 73 20 69 73 20 61 63 74 75 61 6c 6c 79 20 77 6f 72 6b 69 6e 67 | erface..This.is.actually.working |
d8a60 | 20 61 73 20 69 6e 74 65 6e 64 65 64 2c 20 61 6e 64 20 61 20 70 61 63 6b 65 74 20 63 61 70 74 75 | .as.intended,.and.a.packet.captu |
d8a80 | 72 65 20 6f 66 20 74 68 65 20 22 6c 65 61 6b 79 22 20 74 72 61 66 66 69 63 20 73 68 6f 75 6c 64 | re.of.the."leaky".traffic.should |
d8aa0 | 20 72 65 76 65 61 6c 20 74 68 61 74 20 74 68 65 20 74 72 61 66 66 69 63 20 69 73 20 65 69 74 68 | .reveal.that.the.traffic.is.eith |
d8ac0 | 65 72 20 61 6e 20 61 64 64 69 74 69 6f 6e 61 6c 20 54 43 50 20 22 52 53 54 22 2c 20 22 46 49 4e | er.an.additional.TCP."RST",."FIN |
d8ae0 | 2c 41 43 4b 22 2c 20 6f 72 20 22 52 53 54 2c 41 43 4b 22 20 73 65 6e 74 20 62 79 20 63 6c 69 65 | ,ACK",.or."RST,ACK".sent.by.clie |
d8b00 | 6e 74 20 73 79 73 74 65 6d 73 20 61 66 74 65 72 20 4c 69 6e 75 78 20 6e 65 74 66 69 6c 74 65 72 | nt.systems.after.Linux.netfilter |
d8b20 | 20 63 6f 6e 73 69 64 65 72 73 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 63 6c 6f 73 65 64 | .considers.the.connection.closed |
d8b40 | 2e 20 54 68 65 20 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 20 69 73 20 74 68 65 20 61 64 64 69 74 69 6f | ..The.most.common.is.the.additio |
d8b60 | 6e 61 6c 20 54 43 50 20 52 53 54 20 73 6f 6d 65 20 68 6f 73 74 20 69 6d 70 6c 65 6d 65 6e 74 61 | nal.TCP.RST.some.host.implementa |
d8b80 | 74 69 6f 6e 73 20 73 65 6e 64 20 61 66 74 65 72 20 74 65 72 6d 69 6e 61 74 69 6e 67 20 61 20 63 | tions.send.after.terminating.a.c |
d8ba0 | 6f 6e 6e 65 63 74 69 6f 6e 20 28 77 68 69 63 68 20 69 73 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 | onnection.(which.is.implementati |
d8bc0 | 6f 6e 2d 73 70 65 63 69 66 69 63 29 2e 00 4c 69 73 74 20 61 6c 6c 20 4d 41 43 73 65 63 20 69 6e | on-specific)..List.all.MACsec.in |
d8be0 | 74 65 72 66 61 63 65 73 2e 00 4c 69 73 74 20 6f 66 20 66 61 63 69 6c 69 74 69 65 73 20 75 73 65 | terfaces..List.of.facilities.use |
d8c00 | 64 20 62 79 20 73 79 73 6c 6f 67 2e 20 4d 6f 73 74 20 66 61 63 69 6c 69 74 69 65 73 20 6e 61 6d | d.by.syslog..Most.facilities.nam |
d8c20 | 65 73 20 61 72 65 20 73 65 6c 66 20 65 78 70 6c 61 6e 61 74 6f 72 79 2e 20 46 61 63 69 6c 69 74 | es.are.self.explanatory..Facilit |
d8c40 | 69 65 73 20 6c 6f 63 61 6c 30 20 2d 20 6c 6f 63 61 6c 37 20 63 6f 6d 6d 6f 6e 20 75 73 61 67 65 | ies.local0.-.local7.common.usage |
d8c60 | 20 69 73 20 66 2e 65 2e 20 61 73 20 6e 65 74 77 6f 72 6b 20 6c 6f 67 73 20 66 61 63 69 6c 69 74 | .is.f.e..as.network.logs.facilit |
d8c80 | 69 65 73 20 66 6f 72 20 6e 6f 64 65 73 20 61 6e 64 20 6e 65 74 77 6f 72 6b 20 65 71 75 69 70 6d | ies.for.nodes.and.network.equipm |
d8ca0 | 65 6e 74 2e 20 47 65 6e 65 72 61 6c 6c 79 20 69 74 20 64 65 70 65 6e 64 73 20 6f 6e 20 74 68 65 | ent..Generally.it.depends.on.the |
d8cc0 | 20 73 69 74 75 61 74 69 6f 6e 20 68 6f 77 20 74 6f 20 63 6c 61 73 73 69 66 79 20 6c 6f 67 73 20 | .situation.how.to.classify.logs. |
d8ce0 | 61 6e 64 20 70 75 74 20 74 68 65 6d 20 74 6f 20 66 61 63 69 6c 69 74 69 65 73 2e 20 53 65 65 20 | and.put.them.to.facilities..See. |
d8d00 | 66 61 63 69 6c 69 74 69 65 73 20 6d 6f 72 65 20 61 73 20 61 20 74 6f 6f 6c 20 72 61 74 68 65 72 | facilities.more.as.a.tool.rather |
d8d20 | 20 74 68 61 6e 20 61 20 64 69 72 65 63 74 69 76 65 20 74 6f 20 66 6f 6c 6c 6f 77 2e 00 4c 69 73 | .than.a.directive.to.follow..Lis |
d8d40 | 74 20 6f 66 20 6e 65 74 77 6f 72 6b 73 20 6f 72 20 63 6c 69 65 6e 74 20 61 64 64 72 65 73 73 65 | t.of.networks.or.client.addresse |
d8d60 | 73 20 70 65 72 6d 69 74 74 65 64 20 74 6f 20 63 6f 6e 74 61 63 74 20 74 68 69 73 20 4e 54 50 20 | s.permitted.to.contact.this.NTP. |
d8d80 | 73 65 72 76 65 72 2e 00 4c 69 73 74 20 6f 66 20 73 75 70 70 6f 72 74 65 64 20 4d 41 43 73 3a 20 | server..List.of.supported.MACs:. |
d8da0 | 60 60 68 6d 61 63 2d 6d 64 35 60 60 2c 20 60 60 68 6d 61 63 2d 6d 64 35 2d 39 36 60 60 2c 20 60 | ``hmac-md5``,.``hmac-md5-96``,.` |
d8dc0 | 60 68 6d 61 63 2d 72 69 70 65 6d 64 31 36 30 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 31 60 60 | `hmac-ripemd160``,.``hmac-sha1`` |
d8de0 | 2c 20 60 60 68 6d 61 63 2d 73 68 61 31 2d 39 36 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 32 2d | ,.``hmac-sha1-96``,.``hmac-sha2- |
d8e00 | 32 35 36 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 32 2d 35 31 32 60 60 2c 20 60 60 75 6d 61 63 | 256``,.``hmac-sha2-512``,.``umac |
d8e20 | 2d 36 34 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 75 6d 61 63 2d 31 32 38 40 6f 70 | -64@openssh.com``,.``umac-128@op |
d8e40 | 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 6d 64 35 2d 65 74 6d 40 6f 70 65 6e | enssh.com``,.``hmac-md5-etm@open |
d8e60 | 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 6d 64 35 2d 39 36 2d 65 74 6d 40 6f 70 65 | ssh.com``,.``hmac-md5-96-etm@ope |
d8e80 | 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 72 69 70 65 6d 64 31 36 30 2d 65 74 6d | nssh.com``,.``hmac-ripemd160-etm |
d8ea0 | 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 31 2d 65 74 6d 40 | @openssh.com``,.``hmac-sha1-etm@ |
d8ec0 | 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 31 2d 39 36 2d 65 74 | openssh.com``,.``hmac-sha1-96-et |
d8ee0 | 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 32 2d 32 35 36 | m@openssh.com``,.``hmac-sha2-256 |
d8f00 | 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 32 2d | -etm@openssh.com``,.``hmac-sha2- |
d8f20 | 35 31 32 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 75 6d 61 63 2d 36 34 | 512-etm@openssh.com``,.``umac-64 |
d8f40 | 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 75 6d 61 63 2d 31 32 38 2d 65 | -etm@openssh.com``,.``umac-128-e |
d8f60 | 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 00 4c 69 73 74 20 6f 66 20 73 75 70 70 6f 72 74 | tm@openssh.com``.List.of.support |
d8f80 | 65 64 20 61 6c 67 6f 72 69 74 68 6d 73 3a 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d | ed.algorithms:.``diffie-hellman- |
d8fa0 | 67 72 6f 75 70 31 2d 73 68 61 31 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d | group1-sha1``,.``diffie-hellman- |
d8fc0 | 67 72 6f 75 70 31 34 2d 73 68 61 31 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e | group14-sha1``,.``diffie-hellman |
d8fe0 | 2d 67 72 6f 75 70 31 34 2d 73 68 61 32 35 36 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c | -group14-sha256``,.``diffie-hell |
d9000 | 6d 61 6e 2d 67 72 6f 75 70 31 36 2d 73 68 61 35 31 32 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 | man-group16-sha512``,.``diffie-h |
d9020 | 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 31 38 2d 73 68 61 35 31 32 60 60 2c 20 60 60 64 69 66 66 69 | ellman-group18-sha512``,.``diffi |
d9040 | 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 2d 65 78 63 68 61 6e 67 65 2d 73 68 61 31 60 60 2c | e-hellman-group-exchange-sha1``, |
d9060 | 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 2d 65 78 63 68 61 6e 67 65 | .``diffie-hellman-group-exchange |
d9080 | 2d 73 68 61 32 35 36 60 60 2c 20 60 60 65 63 64 68 2d 73 68 61 32 2d 6e 69 73 74 70 32 35 36 60 | -sha256``,.``ecdh-sha2-nistp256` |
d90a0 | 60 2c 20 60 60 65 63 64 68 2d 73 68 61 32 2d 6e 69 73 74 70 33 38 34 60 60 2c 20 60 60 65 63 64 | `,.``ecdh-sha2-nistp384``,.``ecd |
d90c0 | 68 2d 73 68 61 32 2d 6e 69 73 74 70 35 32 31 60 60 2c 20 60 60 63 75 72 76 65 32 35 35 31 39 2d | h-sha2-nistp521``,.``curve25519- |
d90e0 | 73 68 61 32 35 36 60 60 20 61 6e 64 20 60 60 63 75 72 76 65 32 35 35 31 39 2d 73 68 61 32 35 36 | sha256``.and.``curve25519-sha256 |
d9100 | 40 6c 69 62 73 73 68 2e 6f 72 67 60 60 2e 00 4c 69 73 74 20 6f 66 20 73 75 70 70 6f 72 74 65 64 | @libssh.org``..List.of.supported |
d9120 | 20 63 69 70 68 65 72 73 3a 20 60 60 33 64 65 73 2d 63 62 63 60 60 2c 20 60 60 61 65 73 31 32 38 | .ciphers:.``3des-cbc``,.``aes128 |
d9140 | 2d 63 62 63 60 60 2c 20 60 60 61 65 73 31 39 32 2d 63 62 63 60 60 2c 20 60 60 61 65 73 32 35 36 | -cbc``,.``aes192-cbc``,.``aes256 |
d9160 | 2d 63 62 63 60 60 2c 20 60 60 61 65 73 31 32 38 2d 63 74 72 60 60 2c 20 60 60 61 65 73 31 39 32 | -cbc``,.``aes128-ctr``,.``aes192 |
d9180 | 2d 63 74 72 60 60 2c 20 60 60 61 65 73 32 35 36 2d 63 74 72 60 60 2c 20 60 60 61 72 63 66 6f 75 | -ctr``,.``aes256-ctr``,.``arcfou |
d91a0 | 72 31 32 38 60 60 2c 20 60 60 61 72 63 66 6f 75 72 32 35 36 60 60 2c 20 60 60 61 72 63 66 6f 75 | r128``,.``arcfour256``,.``arcfou |
d91c0 | 72 60 60 2c 20 60 60 62 6c 6f 77 66 69 73 68 2d 63 62 63 60 60 2c 20 60 60 63 61 73 74 31 32 38 | r``,.``blowfish-cbc``,.``cast128 |
d91e0 | 2d 63 62 63 60 60 00 4c 69 73 74 20 6f 66 20 77 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e | -cbc``.List.of.well-known.commun |
d9200 | 69 74 69 65 73 00 4c 69 73 74 65 6e 20 66 6f 72 20 44 48 43 50 20 72 65 71 75 65 73 74 73 20 6f | ities.Listen.for.DHCP.requests.o |
d9220 | 6e 20 69 6e 74 65 72 66 61 63 65 20 60 60 65 74 68 31 60 60 2e 00 4c 69 73 74 73 20 56 52 46 73 | n.interface.``eth1``..Lists.VRFs |
d9240 | 20 74 68 61 74 20 68 61 76 65 20 62 65 65 6e 20 63 72 65 61 74 65 64 00 4c 6f 61 64 20 42 61 6c | .that.have.been.created.Load.Bal |
d9260 | 61 6e 63 65 00 4c 6f 61 64 20 42 61 6c 61 6e 63 69 6e 67 00 4c 6f 61 64 20 74 68 65 20 63 6f 6e | ance.Load.Balancing.Load.the.con |
d9280 | 74 61 69 6e 65 72 20 69 6d 61 67 65 20 69 6e 20 6f 70 2d 6d 6f 64 65 2e 00 4c 6f 61 64 2d 62 61 | tainer.image.in.op-mode..Load-ba |
d92a0 | 6c 61 6e 63 69 6e 67 00 4c 6f 61 64 2d 62 61 6c 61 6e 63 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d | lancing.Load-balancing.algorithm |
d92c0 | 73 20 74 6f 20 62 65 20 75 73 65 64 20 66 6f 72 20 64 69 73 74 72 69 62 75 74 69 6e 64 20 72 65 | s.to.be.used.for.distributind.re |
d92e0 | 71 75 65 73 74 73 20 61 6d 6f 6e 67 20 74 68 65 20 76 61 69 6c 61 62 6c 65 20 73 65 72 76 65 72 | quests.among.the.vailable.server |
d9300 | 73 00 4c 6f 61 64 2d 62 61 6c 61 6e 63 69 6e 67 20 73 63 68 65 64 75 6c 65 20 61 6c 67 6f 72 69 | s.Load-balancing.schedule.algori |
d9320 | 74 68 6d 3a 00 4c 6f 63 61 6c 00 4c 6f 63 61 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 2d | thm:.Local.Local.Configuration.- |
d9340 | 20 41 6e 6e 6f 74 61 74 65 64 3a 00 4c 6f 63 61 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a | .Annotated:.Local.Configuration: |
d9360 | 00 4c 6f 63 61 6c 20 49 50 20 60 3c 61 64 64 72 65 73 73 3e 60 20 75 73 65 64 20 77 68 65 6e 20 | .Local.IP.`<address>`.used.when. |
d9380 | 63 6f 6d 6d 75 6e 69 63 61 74 69 6e 67 20 74 6f 20 74 68 65 20 48 41 20 70 65 65 72 2e 00 4c 6f | communicating.to.the.HA.peer..Lo |
d93a0 | 63 61 6c 20 49 50 20 60 3c 61 64 64 72 65 73 73 3e 60 20 75 73 65 64 20 77 68 65 6e 20 63 6f 6d | cal.IP.`<address>`.used.when.com |
d93c0 | 6d 75 6e 69 63 61 74 69 6e 67 20 74 6f 20 74 68 65 20 66 61 69 6c 6f 76 65 72 20 70 65 65 72 2e | municating.to.the.failover.peer. |
d93e0 | 00 4c 6f 63 61 6c 20 49 50 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 6c 69 73 74 65 6e 20 6f 6e | .Local.IP.addresses.to.listen.on |
d9400 | 00 4c 6f 63 61 6c 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 66 6f 72 20 73 65 72 76 69 63 | .Local.IPv4.addresses.for.servic |
d9420 | 65 20 74 6f 20 6c 69 73 74 65 6e 20 6f 6e 2e 00 4c 6f 63 61 6c 20 52 6f 75 74 65 20 49 50 76 34 | e.to.listen.on..Local.Route.IPv4 |
d9440 | 00 4c 6f 63 61 6c 20 52 6f 75 74 65 20 49 50 76 36 00 4c 6f 63 61 6c 20 52 6f 75 74 65 20 50 6f | .Local.Route.IPv6.Local.Route.Po |
d9460 | 6c 69 63 79 00 4c 6f 63 61 6c 20 55 73 65 72 20 41 63 63 6f 75 6e 74 00 4c 6f 63 61 6c 20 70 61 | licy.Local.User.Account.Local.pa |
d9480 | 74 68 20 74 68 61 74 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 6b 6e 6f 77 6e 20 68 6f 73 74 73 | th.that.includes.the.known.hosts |
d94a0 | 20 66 69 6c 65 2e 00 4c 6f 63 61 6c 20 70 61 74 68 20 74 68 61 74 20 69 6e 63 6c 75 64 65 73 20 | .file..Local.path.that.includes. |
d94c0 | 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 66 69 6c 65 20 6f 66 20 74 68 65 20 72 6f 75 74 | the.private.key.file.of.the.rout |
d94e0 | 65 72 2e 00 4c 6f 63 61 6c 20 70 61 74 68 20 74 68 61 74 20 69 6e 63 6c 75 64 65 73 20 74 68 65 | er..Local.path.that.includes.the |
d9500 | 20 70 75 62 6c 69 63 20 6b 65 79 20 66 69 6c 65 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 2e 00 | .public.key.file.of.the.router.. |
d9520 | 4c 6f 63 61 6c 20 72 6f 75 74 65 00 4c 6f 63 61 6c 6c 79 20 63 6f 6e 6e 65 63 74 20 74 6f 20 73 | Local.route.Locally.connect.to.s |
d9540 | 65 72 69 61 6c 20 70 6f 72 74 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 64 65 76 69 63 | erial.port.identified.by.`<devic |
d9560 | 65 3e 60 2e 00 4c 6f 63 61 6c 6c 79 20 73 69 67 6e 69 66 69 63 61 6e 74 20 61 64 6d 69 6e 69 73 | e>`..Locally.significant.adminis |
d9580 | 74 72 61 74 69 76 65 20 64 69 73 74 61 6e 63 65 2e 00 4c 6f 67 20 61 6c 65 72 74 00 4c 6f 67 20 | trative.distance..Log.alert.Log. |
d95a0 | 61 75 64 69 74 00 4c 6f 67 20 65 76 65 72 79 74 68 69 6e 67 00 4c 6f 67 20 6d 65 73 73 61 67 65 | audit.Log.everything.Log.message |
d95c0 | 73 20 66 72 6f 6d 20 61 20 73 70 65 63 69 66 69 65 64 20 69 6d 61 67 65 20 63 61 6e 20 62 65 20 | s.from.a.specified.image.can.be. |
d95e0 | 64 69 73 70 6c 61 79 65 64 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 20 44 65 74 61 69 6c | displayed.on.the.console..Detail |
d9600 | 73 20 6f 66 20 61 6c 6c 6f 77 65 64 20 70 61 72 61 6d 65 74 65 72 73 3a 00 4c 6f 67 20 73 79 73 | s.of.allowed.parameters:.Log.sys |
d9620 | 6c 6f 67 20 6d 65 73 73 61 67 65 73 20 74 6f 20 60 60 2f 64 65 76 2f 63 6f 6e 73 6f 6c 65 60 60 | log.messages.to.``/dev/console`` |
d9640 | 2c 20 66 6f 72 20 61 6e 20 65 78 70 6c 61 6e 61 74 69 6f 6e 20 6f 6e 20 3a 72 65 66 3a 60 73 79 | ,.for.an.explanation.on.:ref:`sy |
d9660 | 73 6c 6f 67 5f 66 61 63 69 6c 69 74 69 65 73 60 20 6b 65 79 77 6f 72 64 73 20 61 6e 64 20 3a 72 | slog_facilities`.keywords.and.:r |
d9680 | 65 66 3a 60 73 79 73 6c 6f 67 5f 73 65 76 65 72 69 74 79 5f 6c 65 76 65 6c 60 20 6b 65 79 77 6f | ef:`syslog_severity_level`.keywo |
d96a0 | 72 64 73 20 73 65 65 20 74 61 62 6c 65 73 20 62 65 6c 6f 77 2e 00 4c 6f 67 20 73 79 73 6c 6f 67 | rds.see.tables.below..Log.syslog |
d96c0 | 20 6d 65 73 73 61 67 65 73 20 74 6f 20 66 69 6c 65 20 73 70 65 63 69 66 69 65 64 20 76 69 61 20 | .messages.to.file.specified.via. |
d96e0 | 60 3c 66 69 6c 65 6e 61 6d 65 3e 60 2c 20 66 6f 72 20 61 6e 20 65 78 70 6c 61 6e 61 74 69 6f 6e | `<filename>`,.for.an.explanation |
d9700 | 20 6f 6e 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 66 61 63 69 6c 69 74 69 65 73 60 20 6b 65 79 | .on.:ref:`syslog_facilities`.key |
d9720 | 77 6f 72 64 73 20 61 6e 64 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 73 65 76 65 72 69 74 79 5f | words.and.:ref:`syslog_severity_ |
d9740 | 6c 65 76 65 6c 60 20 6b 65 79 77 6f 72 64 73 20 73 65 65 20 74 61 62 6c 65 73 20 62 65 6c 6f 77 | level`.keywords.see.tables.below |
d9760 | 2e 00 4c 6f 67 20 73 79 73 6c 6f 67 20 6d 65 73 73 61 67 65 73 20 74 6f 20 72 65 6d 6f 74 65 20 | ..Log.syslog.messages.to.remote. |
d9780 | 68 6f 73 74 20 73 70 65 63 69 66 69 65 64 20 62 79 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 20 54 | host.specified.by.`<address>`..T |
d97a0 | 68 65 20 61 64 64 72 65 73 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 62 79 20 65 | he.address.can.be.specified.by.e |
d97c0 | 69 74 68 65 72 20 46 51 44 4e 20 6f 72 20 49 50 20 61 64 64 72 65 73 73 2e 20 46 6f 72 20 61 6e | ither.FQDN.or.IP.address..For.an |
d97e0 | 20 65 78 70 6c 61 6e 61 74 69 6f 6e 20 6f 6e 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 66 61 63 | .explanation.on.:ref:`syslog_fac |
d9800 | 69 6c 69 74 69 65 73 60 20 6b 65 79 77 6f 72 64 73 20 61 6e 64 20 3a 72 65 66 3a 60 73 79 73 6c | ilities`.keywords.and.:ref:`sysl |
d9820 | 6f 67 5f 73 65 76 65 72 69 74 79 5f 6c 65 76 65 6c 60 20 6b 65 79 77 6f 72 64 73 20 73 65 65 20 | og_severity_level`.keywords.see. |
d9840 | 74 61 62 6c 65 73 20 62 65 6c 6f 77 2e 00 4c 6f 67 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e | tables.below..Log.the.connection |
d9860 | 20 74 72 61 63 6b 69 6e 67 20 65 76 65 6e 74 73 20 70 65 72 20 70 72 6f 74 6f 63 6f 6c 2e 00 4c | .tracking.events.per.protocol..L |
d9880 | 6f 67 67 69 6e 67 00 4c 6f 67 67 69 6e 67 20 63 61 6e 20 62 65 20 65 6e 61 62 6c 65 20 66 6f 72 | ogging.Logging.can.be.enable.for |
d98a0 | 20 65 76 65 72 79 20 73 69 6e 67 6c 65 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 2e 20 49 66 20 | .every.single.firewall.rule..If. |
d98c0 | 65 6e 61 62 6c 65 64 2c 20 6f 74 68 65 72 20 6c 6f 67 20 6f 70 74 69 6f 6e 73 20 63 61 6e 20 62 | enabled,.other.log.options.can.b |
d98e0 | 65 20 64 65 66 69 6e 65 64 2e 00 4c 6f 67 67 69 6e 67 20 74 6f 20 61 20 72 65 6d 6f 74 65 20 68 | e.defined..Logging.to.a.remote.h |
d9900 | 6f 73 74 20 6c 65 61 76 65 73 20 74 68 65 20 6c 6f 63 61 6c 20 6c 6f 67 67 69 6e 67 20 63 6f 6e | ost.leaves.the.local.logging.con |
d9920 | 66 69 67 75 72 61 74 69 6f 6e 20 69 6e 74 61 63 74 2c 20 69 74 20 63 61 6e 20 62 65 20 63 6f 6e | figuration.intact,.it.can.be.con |
d9940 | 66 69 67 75 72 65 64 20 69 6e 20 70 61 72 61 6c 6c 65 6c 20 74 6f 20 61 20 63 75 73 74 6f 6d 20 | figured.in.parallel.to.a.custom. |
d9960 | 66 69 6c 65 20 6f 72 20 63 6f 6e 73 6f 6c 65 20 6c 6f 67 67 69 6e 67 2e 20 59 6f 75 20 63 61 6e | file.or.console.logging..You.can |
d9980 | 20 6c 6f 67 20 74 6f 20 6d 75 6c 74 69 70 6c 65 20 68 6f 73 74 73 20 61 74 20 74 68 65 20 73 61 | .log.to.multiple.hosts.at.the.sa |
d99a0 | 6d 65 20 74 69 6d 65 2c 20 75 73 69 6e 67 20 65 69 74 68 65 72 20 54 43 50 20 6f 72 20 55 44 50 | me.time,.using.either.TCP.or.UDP |
d99c0 | 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 73 65 6e 64 69 6e 67 20 74 68 65 20 6d 65 73 | ..The.default.is.sending.the.mes |
d99e0 | 73 61 67 65 73 20 76 69 61 20 70 6f 72 74 20 35 31 34 2f 55 44 50 2e 00 4c 6f 67 69 6e 20 42 61 | sages.via.port.514/UDP..Login.Ba |
d9a00 | 6e 6e 65 72 00 4c 6f 67 69 6e 20 6c 69 6d 69 74 73 00 4c 6f 67 69 6e 2f 55 73 65 72 20 4d 61 6e | nner.Login.limits.Login/User.Man |
d9a20 | 61 67 65 6d 65 6e 74 00 4c 6f 6f 70 20 46 72 65 65 20 41 6c 74 65 72 6e 61 74 65 20 28 4c 46 41 | agement.Loop.Free.Alternate.(LFA |
d9a40 | 29 00 4c 6f 6f 70 62 61 63 6b 00 4c 6f 6f 70 62 61 63 6b 73 20 6f 63 63 75 72 73 20 61 74 20 74 | ).Loopback.Loopbacks.occurs.at.t |
d9a60 | 68 65 20 49 50 20 6c 65 76 65 6c 20 74 68 65 20 73 61 6d 65 20 77 61 79 20 61 73 20 66 6f 72 20 | he.IP.level.the.same.way.as.for. |
d9a80 | 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 2c 20 65 74 68 65 72 6e 65 74 20 66 72 61 6d 65 | other.interfaces,.ethernet.frame |
d9aa0 | 73 20 61 72 65 20 6e 6f 74 20 66 6f 72 77 61 72 64 65 64 20 62 65 74 77 65 65 6e 20 50 73 65 75 | s.are.not.forwarded.between.Pseu |
d9ac0 | 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 2e 00 4c 6f 77 00 4d 41 43 20 | do-Ethernet.interfaces..Low.MAC. |
d9ae0 | 47 72 6f 75 70 73 00 4d 41 43 20 61 64 64 72 65 73 73 20 61 67 69 6e 67 20 60 3c 74 69 6d 65 60 | Groups.MAC.address.aging.`<time` |
d9b00 | 3e 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 33 30 30 29 2e 00 4d 41 43 | >.in.seconds.(default:.300)..MAC |
d9b20 | 2f 50 48 59 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 4d 41 43 56 4c 41 4e 20 2d 20 50 73 65 75 64 | /PHY.information.MACVLAN.-.Pseud |
d9b40 | 6f 20 45 74 68 65 72 6e 65 74 00 4d 41 43 73 65 63 00 4d 41 43 73 65 63 20 69 73 20 61 6e 20 49 | o.Ethernet.MACsec.MACsec.is.an.I |
d9b60 | 45 45 45 20 73 74 61 6e 64 61 72 64 20 28 49 45 45 45 20 38 30 32 2e 31 41 45 29 20 66 6f 72 20 | EEE.standard.(IEEE.802.1AE).for. |
d9b80 | 4d 41 43 20 73 65 63 75 72 69 74 79 2c 20 69 6e 74 72 6f 64 75 63 65 64 20 69 6e 20 32 30 30 36 | MAC.security,.introduced.in.2006 |
d9ba0 | 2e 20 49 74 20 64 65 66 69 6e 65 73 20 61 20 77 61 79 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 | ..It.defines.a.way.to.establish. |
d9bc0 | 61 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 63 6f 6e 6e 65 63 74 69 6f | a.protocol.independent.connectio |
d9be0 | 6e 20 62 65 74 77 65 65 6e 20 74 77 6f 20 68 6f 73 74 73 20 77 69 74 68 20 64 61 74 61 20 63 6f | n.between.two.hosts.with.data.co |
d9c00 | 6e 66 69 64 65 6e 74 69 61 6c 69 74 79 2c 20 61 75 74 68 65 6e 74 69 63 69 74 79 20 61 6e 64 2f | nfidentiality,.authenticity.and/ |
d9c20 | 6f 72 20 69 6e 74 65 67 72 69 74 79 2c 20 75 73 69 6e 67 20 47 43 4d 2d 41 45 53 2d 31 32 38 2e | or.integrity,.using.GCM-AES-128. |
d9c40 | 20 4d 41 43 73 65 63 20 6f 70 65 72 61 74 65 73 20 6f 6e 20 74 68 65 20 45 74 68 65 72 6e 65 74 | .MACsec.operates.on.the.Ethernet |
d9c60 | 20 6c 61 79 65 72 20 61 6e 64 20 61 73 20 73 75 63 68 20 69 73 20 61 20 6c 61 79 65 72 20 32 20 | .layer.and.as.such.is.a.layer.2. |
d9c80 | 70 72 6f 74 6f 63 6f 6c 2c 20 77 68 69 63 68 20 6d 65 61 6e 73 20 69 74 27 73 20 64 65 73 69 67 | protocol,.which.means.it's.desig |
d9ca0 | 6e 65 64 20 74 6f 20 73 65 63 75 72 65 20 74 72 61 66 66 69 63 20 77 69 74 68 69 6e 20 61 20 6c | ned.to.secure.traffic.within.a.l |
d9cc0 | 61 79 65 72 20 32 20 6e 65 74 77 6f 72 6b 2c 20 69 6e 63 6c 75 64 69 6e 67 20 44 48 43 50 20 6f | ayer.2.network,.including.DHCP.o |
d9ce0 | 72 20 41 52 50 20 72 65 71 75 65 73 74 73 2e 20 49 74 20 64 6f 65 73 20 6e 6f 74 20 63 6f 6d 70 | r.ARP.requests..It.does.not.comp |
d9d00 | 65 74 65 20 77 69 74 68 20 6f 74 68 65 72 20 73 65 63 75 72 69 74 79 20 73 6f 6c 75 74 69 6f 6e | ete.with.other.security.solution |
d9d20 | 73 20 73 75 63 68 20 61 73 20 49 50 73 65 63 20 28 6c 61 79 65 72 20 33 29 20 6f 72 20 54 4c 53 | s.such.as.IPsec.(layer.3).or.TLS |
d9d40 | 20 28 6c 61 79 65 72 20 34 29 2c 20 61 73 20 61 6c 6c 20 74 68 6f 73 65 20 73 6f 6c 75 74 69 6f | .(layer.4),.as.all.those.solutio |
d9d60 | 6e 73 20 61 72 65 20 75 73 65 64 20 66 6f 72 20 74 68 65 69 72 20 6f 77 6e 20 73 70 65 63 69 66 | ns.are.used.for.their.own.specif |
d9d80 | 69 63 20 75 73 65 20 63 61 73 65 73 2e 00 4d 41 43 73 65 63 20 6f 6e 6c 79 20 70 72 6f 76 69 64 | ic.use.cases..MACsec.only.provid |
d9da0 | 65 73 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 79 20 64 65 66 61 75 6c 74 2c 20 65 6e | es.authentication.by.default,.en |
d9dc0 | 63 72 79 70 74 69 6f 6e 20 69 73 20 6f 70 74 69 6f 6e 61 6c 2e 20 54 68 69 73 20 63 6f 6d 6d 61 | cryption.is.optional..This.comma |
d9de0 | 6e 64 20 77 69 6c 6c 20 65 6e 61 62 6c 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 66 6f 72 20 61 6c | nd.will.enable.encryption.for.al |
d9e00 | 6c 20 6f 75 74 67 6f 69 6e 67 20 70 61 63 6b 65 74 73 2e 00 4d 41 43 73 65 63 20 6f 70 74 69 6f | l.outgoing.packets..MACsec.optio |
d9e20 | 6e 73 00 4d 44 49 20 70 6f 77 65 72 00 4d 46 41 2f 32 46 41 20 61 75 74 68 65 6e 74 69 63 61 74 | ns.MDI.power.MFA/2FA.authenticat |
d9e40 | 69 6f 6e 20 75 73 69 6e 67 20 4f 54 50 20 28 6f 6e 65 20 74 69 6d 65 20 70 61 73 73 77 6f 72 64 | ion.using.OTP.(one.time.password |
d9e60 | 73 29 00 4d 50 4c 53 00 4d 50 4c 53 20 73 75 70 70 6f 72 74 20 69 6e 20 56 79 4f 53 20 69 73 20 | s).MPLS.MPLS.support.in.VyOS.is. |
d9e80 | 6e 6f 74 20 66 69 6e 69 73 68 65 64 20 79 65 74 2c 20 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 | not.finished.yet,.and.therefore. |
d9ea0 | 69 74 73 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 69 73 20 6c 69 6d 69 74 65 64 2e 20 43 75 | its.functionality.is.limited..Cu |
d9ec0 | 72 72 65 6e 74 6c 79 20 74 68 65 72 65 20 69 73 20 6e 6f 20 73 75 70 70 6f 72 74 20 66 6f 72 20 | rrently.there.is.no.support.for. |
d9ee0 | 4d 50 4c 53 20 65 6e 61 62 6c 65 64 20 56 50 4e 20 73 65 72 76 69 63 65 73 20 73 75 63 68 20 61 | MPLS.enabled.VPN.services.such.a |
d9f00 | 73 20 4c 32 56 50 4e 73 20 61 6e 64 20 6d 56 50 4e 73 2e 20 52 53 56 50 20 73 75 70 70 6f 72 74 | s.L2VPNs.and.mVPNs..RSVP.support |
d9f20 | 20 69 73 20 61 6c 73 6f 20 6e 6f 74 20 70 72 65 73 65 6e 74 20 61 73 20 74 68 65 20 75 6e 64 65 | .is.also.not.present.as.the.unde |
d9f40 | 72 6c 79 69 6e 67 20 72 6f 75 74 69 6e 67 20 73 74 61 63 6b 20 28 46 52 52 29 20 64 6f 65 73 20 | rlying.routing.stack.(FRR).does. |
d9f60 | 6e 6f 74 20 69 6d 70 6c 65 6d 65 6e 74 20 69 74 2e 20 43 75 72 72 65 6e 74 6c 79 20 56 79 4f 53 | not.implement.it..Currently.VyOS |
d9f80 | 20 69 6d 70 6c 65 6d 65 6e 74 73 20 4c 44 50 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 | .implements.LDP.as.described.in. |
d9fa0 | 52 46 43 20 35 30 33 36 3b 20 6f 74 68 65 72 20 4c 44 50 20 73 74 61 6e 64 61 72 64 20 61 72 65 | RFC.5036;.other.LDP.standard.are |
d9fc0 | 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 6e 65 73 3a 20 52 46 43 20 36 37 32 30 2c 20 52 | .the.following.ones:.RFC.6720,.R |
d9fe0 | 46 43 20 36 36 36 37 2c 20 52 46 43 20 35 39 31 39 2c 20 52 46 43 20 35 35 36 31 2c 20 52 46 43 | FC.6667,.RFC.5919,.RFC.5561,.RFC |
da000 | 20 37 35 35 32 2c 20 52 46 43 20 34 34 34 37 2e 20 42 65 63 61 75 73 65 20 4d 50 4c 53 20 69 73 | .7552,.RFC.4447..Because.MPLS.is |
da020 | 20 61 6c 72 65 61 64 79 20 61 76 61 69 6c 61 62 6c 65 20 28 46 52 52 20 61 6c 73 6f 20 73 75 70 | .already.available.(FRR.also.sup |
da040 | 70 6f 72 74 73 20 52 46 43 20 33 30 33 31 29 2e 00 4d 53 53 20 76 61 6c 75 65 20 3d 20 4d 54 55 | ports.RFC.3031)..MSS.value.=.MTU |
da060 | 20 2d 20 32 30 20 28 49 50 20 68 65 61 64 65 72 29 20 2d 20 32 30 20 28 54 43 50 20 68 65 61 64 | .-.20.(IP.header).-.20.(TCP.head |
da080 | 65 72 29 2c 20 72 65 73 75 6c 74 69 6e 67 20 69 6e 20 31 34 35 32 20 62 79 74 65 73 20 6f 6e 20 | er),.resulting.in.1452.bytes.on. |
da0a0 | 61 20 31 34 39 32 20 62 79 74 65 20 4d 54 55 2e 00 4d 53 53 20 76 61 6c 75 65 20 3d 20 4d 54 55 | a.1492.byte.MTU..MSS.value.=.MTU |
da0c0 | 20 2d 20 34 30 20 28 49 50 76 36 20 68 65 61 64 65 72 29 20 2d 20 32 30 20 28 54 43 50 20 68 65 | .-.40.(IPv6.header).-.20.(TCP.he |
da0e0 | 61 64 65 72 29 2c 20 72 65 73 75 6c 74 69 6e 67 20 69 6e 20 31 34 33 32 20 62 79 74 65 73 20 6f | ader),.resulting.in.1432.bytes.o |
da100 | 6e 20 61 20 31 34 39 32 20 62 79 74 65 20 4d 54 55 2e 00 4d 54 55 00 4d 61 69 6c 20 73 79 73 74 | n.a.1492.byte.MTU..MTU.Mail.syst |
da120 | 65 6d 00 4d 61 69 6e 20 6e 6f 74 65 73 20 72 65 67 61 72 64 69 6e 67 20 74 68 69 73 20 70 61 63 | em.Main.notes.regarding.this.pac |
da140 | 6b 65 74 20 66 6c 6f 77 20 61 6e 64 20 74 65 72 6d 69 6e 6f 6c 6f 67 79 20 75 73 65 64 20 69 6e | ket.flow.and.terminology.used.in |
da160 | 20 56 79 4f 53 20 66 69 72 65 77 61 6c 6c 3a 00 4d 61 69 6e 20 73 74 72 75 63 74 75 72 65 20 56 | .VyOS.firewall:.Main.structure.V |
da180 | 79 4f 53 20 66 69 72 65 77 61 6c 6c 20 63 6c 69 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 | yOS.firewall.cli.is.shown.next:. |
da1a0 | 4d 61 69 6e 20 73 74 72 75 63 74 75 72 65 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 4d 61 | Main.structure.is.shown.next:.Ma |
da1c0 | 69 6e 74 65 6e 61 6e 63 65 20 6d 6f 64 65 00 4d 61 6b 65 20 73 75 72 65 20 63 6f 6e 6e 74 72 61 | intenance.mode.Make.sure.conntra |
da1e0 | 63 6b 20 69 73 20 65 6e 61 62 6c 65 64 20 62 79 20 72 75 6e 6e 69 6e 67 20 61 6e 64 20 73 68 6f | ck.is.enabled.by.running.and.sho |
da200 | 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 74 61 62 6c 65 2e 00 4d 61 6e | w.connection.tracking.table..Man |
da220 | 61 67 65 64 20 64 65 76 69 63 65 73 00 4d 61 6e 61 67 65 6d 65 6e 74 20 46 72 61 6d 65 20 50 72 | aged.devices.Management.Frame.Pr |
da240 | 6f 74 65 63 74 69 6f 6e 20 28 4d 46 50 29 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 49 45 45 45 | otection.(MFP).according.to.IEEE |
da260 | 20 38 30 32 2e 31 31 77 00 4d 61 6e 64 61 74 6f 72 79 20 53 65 74 74 69 6e 67 73 00 4d 61 6e 75 | .802.11w.Mandatory.Settings.Manu |
da280 | 61 6c 20 4e 65 69 67 68 62 6f 72 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 4d 61 6e 75 61 6c | al.Neighbor.Configuration.Manual |
da2a0 | 6c 79 20 74 72 69 67 67 65 72 20 63 65 72 74 69 66 69 63 61 74 65 20 72 65 6e 65 77 61 6c 2e 20 | ly.trigger.certificate.renewal.. |
da2c0 | 54 68 69 73 20 77 69 6c 6c 20 62 65 20 64 6f 6e 65 20 74 77 69 63 65 20 61 20 64 61 79 2e 00 4d | This.will.be.done.twice.a.day..M |
da2e0 | 61 70 73 20 74 68 65 20 56 4e 49 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 56 4c 41 | aps.the.VNI.to.the.specified.VLA |
da300 | 4e 20 69 64 2e 20 54 68 65 20 56 4c 41 4e 20 63 61 6e 20 74 68 65 6e 20 62 65 20 63 6f 6e 73 75 | N.id..The.VLAN.can.then.be.consu |
da320 | 6d 65 64 20 62 79 20 61 20 62 72 69 64 67 65 2e 00 4d 61 72 6b 20 52 41 44 49 55 53 20 73 65 72 | med.by.a.bridge..Mark.RADIUS.ser |
da340 | 76 65 72 20 61 73 20 6f 66 66 6c 69 6e 65 20 66 6f 72 20 74 68 69 73 20 67 69 76 65 6e 20 60 3c | ver.as.offline.for.this.given.`< |
da360 | 74 69 6d 65 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 2e 00 4d 61 72 6b 20 74 68 65 20 43 41 73 20 | time>`.in.seconds..Mark.the.CAs. |
da380 | 70 72 69 76 61 74 65 20 6b 65 79 20 61 73 20 70 61 73 73 77 6f 72 64 20 70 72 6f 74 65 63 74 65 | private.key.as.password.protecte |
da3a0 | 64 2e 20 55 73 65 72 20 69 73 20 61 73 6b 65 64 20 66 6f 72 20 74 68 65 20 70 61 73 73 77 6f 72 | d..User.is.asked.for.the.passwor |
da3c0 | 64 20 77 68 65 6e 20 74 68 65 20 6b 65 79 20 69 73 20 72 65 66 65 72 65 6e 63 65 64 2e 00 4d 61 | d.when.the.key.is.referenced..Ma |
da3e0 | 72 6b 20 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 61 73 20 70 61 73 73 77 6f 72 64 20 70 | rk.the.private.key.as.password.p |
da400 | 72 6f 74 65 63 74 65 64 2e 20 55 73 65 72 20 69 73 20 61 73 6b 65 64 20 66 6f 72 20 74 68 65 20 | rotected..User.is.asked.for.the. |
da420 | 70 61 73 73 77 6f 72 64 20 77 68 65 6e 20 74 68 65 20 6b 65 79 20 69 73 20 72 65 66 65 72 65 6e | password.when.the.key.is.referen |
da440 | 63 65 64 2e 00 4d 61 74 63 68 20 42 47 50 20 6c 61 72 67 65 20 63 6f 6d 6d 75 6e 69 74 69 65 73 | ced..Match.BGP.large.communities |
da460 | 2e 00 4d 61 74 63 68 20 49 50 20 61 64 64 72 65 73 73 65 73 20 62 61 73 65 64 20 6f 6e 20 69 74 | ..Match.IP.addresses.based.on.it |
da480 | 73 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 2e 20 4d 6f 72 65 20 69 6e 66 6f 3a 20 60 67 65 6f 69 70 | s.geolocation..More.info:.`geoip |
da4a0 | 20 6d 61 74 63 68 69 6e 67 20 3c 68 74 74 70 73 3a 2f 2f 77 69 6b 69 2e 6e 66 74 61 62 6c 65 73 | .matching.<https://wiki.nftables |
da4c0 | 2e 6f 72 67 2f 77 69 6b 69 2d 6e 66 74 61 62 6c 65 73 2f 69 6e 64 65 78 2e 70 68 70 2f 47 65 6f | .org/wiki-nftables/index.php/Geo |
da4e0 | 49 50 5f 6d 61 74 63 68 69 6e 67 3e 60 5f 2e 00 4d 61 74 63 68 20 49 50 20 61 64 64 72 65 73 73 | IP_matching>`_..Match.IP.address |
da500 | 65 73 20 62 61 73 65 64 20 6f 6e 20 69 74 73 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 2e 20 4d 6f 72 | es.based.on.its.geolocation..Mor |
da520 | 65 20 69 6e 66 6f 3a 20 60 67 65 6f 69 70 20 6d 61 74 63 68 69 6e 67 20 3c 68 74 74 70 73 3a 2f | e.info:.`geoip.matching.<https:/ |
da540 | 2f 77 69 6b 69 2e 6e 66 74 61 62 6c 65 73 2e 6f 72 67 2f 77 69 6b 69 2d 6e 66 74 61 62 6c 65 73 | /wiki.nftables.org/wiki-nftables |
da560 | 2f 69 6e 64 65 78 2e 70 68 70 2f 47 65 6f 49 50 5f 6d 61 74 63 68 69 6e 67 3e 60 5f 2e 20 55 73 | /index.php/GeoIP_matching>`_..Us |
da580 | 65 20 69 6e 76 65 72 73 65 2d 6d 61 74 63 68 20 74 6f 20 6d 61 74 63 68 20 61 6e 79 74 68 69 6e | e.inverse-match.to.match.anythin |
da5a0 | 67 20 65 78 63 65 70 74 20 74 68 65 20 67 69 76 65 6e 20 63 6f 75 6e 74 72 79 2d 63 6f 64 65 73 | g.except.the.given.country-codes |
da5c0 | 2e 00 4d 61 74 63 68 20 52 50 4b 49 20 76 61 6c 69 64 61 74 69 6f 6e 20 72 65 73 75 6c 74 2e 00 | ..Match.RPKI.validation.result.. |
da5e0 | 4d 61 74 63 68 20 61 20 70 72 6f 74 6f 63 6f 6c 20 63 72 69 74 65 72 69 61 2e 20 41 20 70 72 6f | Match.a.protocol.criteria..A.pro |
da600 | 74 6f 63 6f 6c 20 6e 75 6d 62 65 72 20 6f 72 20 61 20 6e 61 6d 65 20 77 68 69 63 68 20 69 73 20 | tocol.number.or.a.name.which.is. |
da620 | 64 65 66 69 6e 65 64 20 69 6e 3a 20 60 60 2f 65 74 63 2f 70 72 6f 74 6f 63 6f 6c 73 60 60 2e 20 | defined.in:.``/etc/protocols``.. |
da640 | 53 70 65 63 69 61 6c 20 6e 61 6d 65 73 20 61 72 65 20 60 60 61 6c 6c 60 60 20 66 6f 72 20 61 6c | Special.names.are.``all``.for.al |
da660 | 6c 20 70 72 6f 74 6f 63 6f 6c 73 20 61 6e 64 20 60 60 74 63 70 5f 75 64 70 60 60 20 66 6f 72 20 | l.protocols.and.``tcp_udp``.for. |
da680 | 74 63 70 20 61 6e 64 20 75 64 70 20 62 61 73 65 64 20 70 61 63 6b 65 74 73 2e 20 54 68 65 20 60 | tcp.and.udp.based.packets..The.` |
da6a0 | 60 21 60 60 20 6e 65 67 61 74 65 73 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 70 72 6f 74 6f 63 | `!``.negates.the.selected.protoc |
da6c0 | 6f 6c 2e 00 4d 61 74 63 68 20 61 20 70 72 6f 74 6f 63 6f 6c 20 63 72 69 74 65 72 69 61 2e 20 41 | ol..Match.a.protocol.criteria..A |
da6e0 | 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 6d 62 65 72 20 6f 72 20 61 20 6e 61 6d 65 20 77 68 69 63 68 | .protocol.number.or.a.name.which |
da700 | 20 69 73 20 68 65 72 65 20 64 65 66 69 6e 65 64 3a 20 60 60 2f 65 74 63 2f 70 72 6f 74 6f 63 6f | .is.here.defined:.``/etc/protoco |
da720 | 6c 73 60 60 2e 20 53 70 65 63 69 61 6c 20 6e 61 6d 65 73 20 61 72 65 20 60 60 61 6c 6c 60 60 20 | ls``..Special.names.are.``all``. |
da740 | 66 6f 72 20 61 6c 6c 20 70 72 6f 74 6f 63 6f 6c 73 20 61 6e 64 20 60 60 74 63 70 5f 75 64 70 60 | for.all.protocols.and.``tcp_udp` |
da760 | 60 20 66 6f 72 20 74 63 70 20 61 6e 64 20 75 64 70 20 62 61 73 65 64 20 70 61 63 6b 65 74 73 2e | `.for.tcp.and.udp.based.packets. |
da780 | 20 54 68 65 20 60 60 21 60 60 20 6e 65 67 61 74 65 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 70 | .The.``!``.negate.the.selected.p |
da7a0 | 72 6f 74 6f 63 6f 6c 2e 00 4d 61 74 63 68 20 61 67 61 69 6e 73 74 20 74 68 65 20 73 74 61 74 65 | rotocol..Match.against.the.state |
da7c0 | 20 6f 66 20 61 20 70 61 63 6b 65 74 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 63 6f 6e | .of.a.packet..Match.based.on.con |
da7e0 | 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 68 65 6c 70 65 72 | nection.tracking.protocol.helper |
da800 | 20 6d 6f 64 75 6c 65 20 74 6f 20 73 65 63 75 72 65 20 75 73 65 20 6f 66 20 74 68 61 74 20 68 65 | .module.to.secure.use.of.that.he |
da820 | 6c 70 65 72 20 6d 6f 64 75 6c 65 2e 20 53 65 65 20 62 65 6c 6f 77 20 66 6f 72 20 70 6f 73 73 69 | lper.module..See.below.for.possi |
da840 | 62 6c 65 20 63 6f 6d 70 6c 65 74 69 6f 6e 73 20 60 3c 6d 6f 64 75 6c 65 3e 60 2e 00 4d 61 74 63 | ble.completions.`<module>`..Matc |
da860 | 68 20 62 61 73 65 64 20 6f 6e 20 64 73 63 70 20 76 61 6c 75 65 20 63 72 69 74 65 72 69 61 2e 20 | h.based.on.dscp.value.criteria.. |
da880 | 4d 75 6c 74 69 70 6c 65 20 76 61 6c 75 65 73 20 66 72 6f 6d 20 30 20 74 6f 20 36 33 20 61 6e 64 | Multiple.values.from.0.to.63.and |
da8a0 | 20 72 61 6e 67 65 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 | .ranges.are.supported..Match.bas |
da8c0 | 65 64 20 6f 6e 20 64 73 63 70 20 76 61 6c 75 65 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e | ed.on.dscp.value..Match.based.on |
da8e0 | 20 66 72 61 67 6d 65 6e 74 20 63 72 69 74 65 72 69 61 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 | .fragment.criteria..Match.based. |
da900 | 6f 6e 20 69 63 6d 70 20 63 6f 64 65 20 61 6e 64 20 74 79 70 65 2e 00 4d 61 74 63 68 20 62 61 73 | on.icmp.code.and.type..Match.bas |
da920 | 65 64 20 6f 6e 20 69 63 6d 70 20 74 79 70 65 2d 6e 61 6d 65 20 63 72 69 74 65 72 69 61 2e 20 55 | ed.on.icmp.type-name.criteria..U |
da940 | 73 65 20 74 61 62 20 66 6f 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 77 68 61 | se.tab.for.information.about.wha |
da960 | 74 20 2a 2a 74 79 70 65 2d 6e 61 6d 65 2a 2a 20 63 72 69 74 65 72 69 61 20 61 72 65 20 73 75 70 | t.**type-name**.criteria.are.sup |
da980 | 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 63 6d 70 76 36 20 74 79 | ported..Match.based.on.icmpv6.ty |
da9a0 | 70 65 2d 6e 61 6d 65 20 63 72 69 74 65 72 69 61 2e 20 55 73 65 20 74 61 62 20 66 6f 72 20 69 6e | pe-name.criteria..Use.tab.for.in |
da9c0 | 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 77 68 61 74 20 2a 2a 74 79 70 65 2d 6e 61 6d 65 | formation.about.what.**type-name |
da9e0 | 2a 2a 20 63 72 69 74 65 72 69 61 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 | **.criteria.are.supported..Match |
daa00 | 20 62 61 73 65 64 20 6f 6e 20 69 63 6d 70 7c 69 63 6d 70 76 36 20 63 6f 64 65 20 61 6e 64 20 74 | .based.on.icmp|icmpv6.code.and.t |
daa20 | 79 70 65 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 63 6d 70 7c 69 63 6d 70 76 36 20 | ype..Match.based.on.icmp|icmpv6. |
daa40 | 74 79 70 65 2d 6e 61 6d 65 20 63 72 69 74 65 72 69 61 2e 20 55 73 65 20 74 61 62 20 66 6f 72 20 | type-name.criteria..Use.tab.for. |
daa60 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 77 68 61 74 20 2a 2a 74 79 70 65 2d 6e 61 | information.about.what.**type-na |
daa80 | 6d 65 2a 2a 20 63 72 69 74 65 72 69 61 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 | me**.criteria.are.supported..Mat |
daaa0 | 63 68 20 62 61 73 65 64 20 6f 6e 20 69 63 6d 70 7c 69 63 6d 70 76 36 20 74 79 70 65 2d 6e 61 6d | ch.based.on.icmp|icmpv6.type-nam |
daac0 | 65 20 63 72 69 74 65 72 69 61 2e 20 55 73 65 20 74 61 62 20 66 6f 72 20 69 6e 66 6f 72 6d 61 74 | e.criteria..Use.tab.for.informat |
daae0 | 69 6f 6e 20 61 62 6f 75 74 20 77 68 61 74 20 74 79 70 65 2d 6e 61 6d 65 20 63 72 69 74 65 72 69 | ion.about.what.type-name.criteri |
dab00 | 61 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 | a.are.supported..Match.based.on. |
dab20 | 69 6e 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 | inbound.interface.group..Prepend |
dab40 | 69 6e 67 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 | ing.character.``!``.for.inverted |
dab60 | 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f | .matching.criteria.is.also.suppo |
dab80 | 72 74 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 21 49 46 41 43 45 5f 47 52 4f 55 50 60 | rtd..For.example.``!IFACE_GROUP` |
daba0 | 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 6e 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 | `.Match.based.on.inbound.interfa |
dabc0 | 63 65 2e 20 57 69 6c 63 61 72 64 20 60 60 2a 60 60 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 46 | ce..Wilcard.``*``.can.be.used..F |
dabe0 | 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 65 74 68 32 2a 60 60 00 4d 61 74 63 68 20 62 61 73 65 | or.example:.``eth2*``.Match.base |
dac00 | 64 20 6f 6e 20 69 6e 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 2e 20 57 69 6c 63 61 72 64 20 | d.on.inbound.interface..Wilcard. |
dac20 | 60 60 2a 60 60 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 | ``*``.can.be.used..For.example:. |
dac40 | 60 60 65 74 68 32 2a 60 60 2e 20 50 72 65 70 65 6e 64 69 6e 67 20 63 68 61 72 61 63 74 65 72 20 | ``eth2*``..Prepending.character. |
dac60 | 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 | ``!``.for.inverted.matching.crit |
dac80 | 65 72 69 61 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 64 2e 20 46 6f 72 20 65 78 61 6d 70 | eria.is.also.supportd..For.examp |
daca0 | 6c 65 20 60 60 21 65 74 68 32 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 6e 62 6f | le.``!eth2``.Match.based.on.inbo |
dacc0 | 75 6e 64 2f 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 2e 20 57 69 6c 63 61 72 64 20 | und/outbound.interface..Wilcard. |
dace0 | 60 60 2a 60 60 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 | ``*``.can.be.used..For.example:. |
dad00 | 60 60 65 74 68 32 2a 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 70 73 65 63 20 63 | ``eth2*``.Match.based.on.ipsec.c |
dad20 | 72 69 74 65 72 69 61 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 6f 75 74 62 6f 75 6e 64 | riteria..Match.based.on.outbound |
dad40 | 20 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 69 6e 67 20 63 68 61 | .interface.group..Prepending.cha |
dad60 | 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 | racter.``!``.for.inverted.matchi |
dad80 | 6e 67 20 63 72 69 74 65 72 69 61 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 64 2e 20 46 6f | ng.criteria.is.also.supportd..Fo |
dada0 | 72 20 65 78 61 6d 70 6c 65 20 60 60 21 49 46 41 43 45 5f 47 52 4f 55 50 60 60 00 4d 61 74 63 68 | r.example.``!IFACE_GROUP``.Match |
dadc0 | 20 62 61 73 65 64 20 6f 6e 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 2e 20 57 69 | .based.on.outbound.interface..Wi |
dade0 | 6c 63 61 72 64 20 60 60 2a 60 60 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 46 6f 72 20 65 78 61 | lcard.``*``.can.be.used..For.exa |
dae00 | 6d 70 6c 65 3a 20 60 60 65 74 68 32 2a 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 6f | mple:.``eth2*``.Match.based.on.o |
dae20 | 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 2e 20 57 69 6c 63 61 72 64 20 60 60 2a 60 60 | utbound.interface..Wilcard.``*`` |
dae40 | 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 65 74 68 | .can.be.used..For.example:.``eth |
dae60 | 32 2a 60 60 2e 20 50 72 65 70 65 6e 64 69 6e 67 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 | 2*``..Prepending.character.``!`` |
dae80 | 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 | .for.inverted.matching.criteria. |
daea0 | 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 | is.also.supportd..For.example.`` |
daec0 | 21 65 74 68 32 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 70 61 63 6b 65 74 20 6c 65 | !eth2``.Match.based.on.packet.le |
daee0 | 6e 67 74 68 20 63 72 69 74 65 72 69 61 2e 20 4d 75 6c 74 69 70 6c 65 20 76 61 6c 75 65 73 20 66 | ngth.criteria..Multiple.values.f |
daf00 | 72 6f 6d 20 31 20 74 6f 20 36 35 35 33 35 20 61 6e 64 20 72 61 6e 67 65 73 20 61 72 65 20 73 75 | rom.1.to.65535.and.ranges.are.su |
daf20 | 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 70 61 63 6b 65 74 20 74 | pported..Match.based.on.packet.t |
daf40 | 79 70 65 20 63 72 69 74 65 72 69 61 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 74 68 65 | ype.criteria..Match.based.on.the |
daf60 | 20 6d 61 78 69 6d 75 6d 20 61 76 65 72 61 67 65 20 72 61 74 65 2c 20 73 70 65 63 69 66 69 65 64 | .maximum.average.rate,.specified |
daf80 | 20 61 73 20 2a 2a 69 6e 74 65 67 65 72 2f 75 6e 69 74 2a 2a 2e 20 46 6f 72 20 65 78 61 6d 70 6c | .as.**integer/unit**..For.exampl |
dafa0 | 65 20 2a 2a 35 2f 6d 69 6e 75 74 65 73 2a 2a 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 74 | e.**5/minutes**.Match.based.on.t |
dafc0 | 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 74 6f 20 | he.maximum.number.of.packets.to. |
dafe0 | 61 6c 6c 6f 77 20 69 6e 20 65 78 63 65 73 73 20 6f 66 20 72 61 74 65 2e 00 4d 61 74 63 68 20 62 | allow.in.excess.of.rate..Match.b |
db000 | 61 73 65 64 20 6f 6e 20 76 6c 61 6e 20 49 44 2e 20 52 61 6e 67 65 20 69 73 20 61 6c 73 6f 20 73 | ased.on.vlan.ID..Range.is.also.s |
db020 | 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 76 6c 61 6e 20 70 72 | upported..Match.based.on.vlan.pr |
db040 | 69 6f 72 69 74 79 28 70 63 70 29 2e 20 52 61 6e 67 65 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f | iority(pcp)..Range.is.also.suppo |
db060 | 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 73 20 6f 6e 20 72 65 63 65 6e 74 6c 79 20 73 65 | rted..Match.bases.on.recently.se |
db080 | 65 6e 20 73 6f 75 72 63 65 73 2e 00 4d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 | en.sources..Match.criteria.based |
db0a0 | 20 6f 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6d 61 72 6b 2e 00 4d 61 74 63 68 20 63 72 69 74 65 | .on.connection.mark..Match.crite |
db0c0 | 72 69 61 20 62 61 73 65 64 20 6f 6e 20 6e 61 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 | ria.based.on.nat.connection.stat |
db0e0 | 75 73 2e 00 4d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 | us..Match.criteria.based.on.sour |
db100 | 63 65 20 61 6e 64 2f 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 20 54 | ce.and/or.destination.address..T |
db120 | 68 69 73 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 67 72 | his.is.similar.to.the.network.gr |
db140 | 6f 75 70 73 20 70 61 72 74 2c 20 62 75 74 20 68 65 72 65 20 79 6f 75 20 61 72 65 20 61 62 6c 65 | oups.part,.but.here.you.are.able |
db160 | 20 74 6f 20 6e 65 67 61 74 65 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 61 64 64 72 65 73 73 65 | .to.negate.the.matching.addresse |
db180 | 73 2e 00 4d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 | s..Match.criteria.based.on.sourc |
db1a0 | 65 20 61 6e 64 2f 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6d 61 63 2d 61 64 64 72 65 73 73 | e.and/or.destination.mac-address |
db1c0 | 2e 00 4d 61 74 63 68 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 00 4d 61 74 63 68 20 66 69 72 65 77 61 | ..Match.domain.name.Match.firewa |
db1e0 | 6c 6c 20 6d 61 72 6b 20 76 61 6c 75 65 00 4d 61 74 63 68 20 68 6f 70 2d 6c 69 6d 69 74 20 70 61 | ll.mark.value.Match.hop-limit.pa |
db200 | 72 61 6d 65 74 65 72 2c 20 77 68 65 72 65 20 27 65 71 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 | rameter,.where.'eq'.stands.for.' |
db220 | 65 71 75 61 6c 27 3b 20 27 67 74 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 67 72 65 61 74 65 72 | equal';.'gt'.stands.for.'greater |
db240 | 20 74 68 61 6e 27 2c 20 61 6e 64 20 27 6c 74 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 6c 65 73 | .than',.and.'lt'.stands.for.'les |
db260 | 73 20 74 68 61 6e 27 2e 00 4d 61 74 63 68 20 6c 6f 63 61 6c 20 70 72 65 66 65 72 65 6e 63 65 2e | s.than'..Match.local.preference. |
db280 | 00 4d 61 74 63 68 20 72 6f 75 74 65 20 6d 65 74 72 69 63 2e 00 4d 61 74 63 68 20 74 69 6d 65 20 | .Match.route.metric..Match.time. |
db2a0 | 74 6f 20 6c 69 76 65 20 70 61 72 61 6d 65 74 65 72 2c 20 77 68 65 72 65 20 27 65 71 27 20 73 74 | to.live.parameter,.where.'eq'.st |
db2c0 | 61 6e 64 73 20 66 6f 72 20 27 65 71 75 61 6c 27 3b 20 27 67 74 27 20 73 74 61 6e 64 73 20 66 6f | ands.for.'equal';.'gt'.stands.fo |
db2e0 | 72 20 27 67 72 65 61 74 65 72 20 74 68 61 6e 27 2c 20 61 6e 64 20 27 6c 74 27 20 73 74 61 6e 64 | r.'greater.than',.and.'lt'.stand |
db300 | 73 20 66 6f 72 20 27 6c 65 73 73 20 74 68 61 6e 27 2e 00 4d 61 74 63 68 20 77 68 65 6e 20 27 63 | s.for.'less.than'..Match.when.'c |
db320 | 6f 75 6e 74 27 20 61 6d 6f 75 6e 74 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 72 65 20 | ount'.amount.of.connections.are. |
db340 | 73 65 65 6e 20 77 69 74 68 69 6e 20 27 74 69 6d 65 27 2e 20 54 68 65 73 65 20 6d 61 74 63 68 69 | seen.within.'time'..These.matchi |
db360 | 6e 67 20 63 72 69 74 65 72 69 61 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 62 6c 6f 63 6b | ng.criteria.can.be.used.to.block |
db380 | 20 62 72 75 74 65 2d 66 6f 72 63 65 20 61 74 74 65 6d 70 74 73 2e 00 4d 61 74 63 68 69 6e 67 20 | .brute-force.attempts..Matching. |
db3a0 | 63 72 69 74 65 72 69 61 00 4d 61 74 63 68 69 6e 67 20 74 72 61 66 66 69 63 00 4d 61 78 69 6d 75 | criteria.Matching.traffic.Maximu |
db3c0 | 6d 20 41 2d 4d 53 44 55 20 6c 65 6e 67 74 68 20 33 38 33 39 20 28 64 65 66 61 75 6c 74 29 20 6f | m.A-MSDU.length.3839.(default).o |
db3e0 | 72 20 37 39 33 35 20 6f 63 74 65 74 73 00 4d 61 78 69 6d 75 6d 20 54 72 61 6e 73 6d 69 73 73 69 | r.7935.octets.Maximum.Transmissi |
db400 | 6f 6e 20 55 6e 69 74 20 28 4d 54 55 29 20 28 64 65 66 61 75 6c 74 3a 20 2a 2a 31 34 33 36 2a 2a | on.Unit.(MTU).(default:.**1436** |
db420 | 29 00 4d 61 78 69 6d 75 6d 20 54 72 61 6e 73 6d 69 73 73 69 6f 6e 20 55 6e 69 74 20 28 4d 54 55 | ).Maximum.Transmission.Unit.(MTU |
db440 | 29 20 28 64 65 66 61 75 6c 74 3a 20 2a 2a 31 34 39 32 2a 2a 29 00 4d 61 78 69 6d 75 6d 20 54 72 | ).(default:.**1492**).Maximum.Tr |
db460 | 61 6e 73 6d 69 73 73 69 6f 6e 20 55 6e 69 74 20 28 4d 54 55 29 20 28 64 65 66 61 75 6c 74 3a 20 | ansmission.Unit.(MTU).(default:. |
db480 | 2a 2a 31 35 30 30 2a 2a 29 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 44 4e 53 20 | **1500**).Maximum.number.of.DNS. |
db4a0 | 63 61 63 68 65 20 65 6e 74 72 69 65 73 2e 20 31 20 6d 69 6c 6c 69 6f 6e 20 70 65 72 20 43 50 55 | cache.entries..1.million.per.CPU |
db4c0 | 20 63 6f 72 65 20 77 69 6c 6c 20 67 65 6e 65 72 61 6c 6c 79 20 73 75 66 66 69 63 65 20 66 6f 72 | .core.will.generally.suffice.for |
db4e0 | 20 6d 6f 73 74 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 73 2e 00 4d 61 78 69 6d 75 6d 20 6e 75 6d | .most.installations..Maximum.num |
db500 | 62 65 72 20 6f 66 20 49 50 76 34 20 6e 61 6d 65 73 65 72 76 65 72 73 00 4d 61 78 69 6d 75 6d 20 | ber.of.IPv4.nameservers.Maximum. |
db520 | 6e 75 6d 62 65 72 20 6f 66 20 61 75 74 68 65 6e 74 69 63 61 74 6f 72 20 70 72 6f 63 65 73 73 65 | number.of.authenticator.processe |
db540 | 73 20 74 6f 20 73 70 61 77 6e 2e 20 49 66 20 79 6f 75 20 73 74 61 72 74 20 74 6f 6f 20 66 65 77 | s.to.spawn..If.you.start.too.few |
db560 | 20 53 71 75 69 64 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 77 61 69 74 20 66 6f 72 20 74 68 65 | .Squid.will.have.to.wait.for.the |
db580 | 6d 20 74 6f 20 70 72 6f 63 65 73 73 20 61 20 62 61 63 6b 6c 6f 67 20 6f 66 20 63 72 65 64 65 6e | m.to.process.a.backlog.of.creden |
db5a0 | 74 69 61 6c 20 76 65 72 69 66 69 63 61 74 69 6f 6e 73 2c 20 73 6c 6f 77 69 6e 67 20 69 74 20 64 | tial.verifications,.slowing.it.d |
db5c0 | 6f 77 6e 2e 20 57 68 65 6e 20 70 61 73 73 77 6f 72 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 73 | own..When.password.verifications |
db5e0 | 20 61 72 65 20 64 6f 6e 65 20 76 69 61 20 61 20 28 73 6c 6f 77 29 20 6e 65 74 77 6f 72 6b 20 79 | .are.done.via.a.(slow).network.y |
db600 | 6f 75 20 61 72 65 20 6c 69 6b 65 6c 79 20 74 6f 20 6e 65 65 64 20 6c 6f 74 73 20 6f 66 20 61 75 | ou.are.likely.to.need.lots.of.au |
db620 | 74 68 65 6e 74 69 63 61 74 6f 72 20 70 72 6f 63 65 73 73 65 73 2e 00 4d 61 78 69 6d 75 6d 20 6e | thenticator.processes..Maximum.n |
db640 | 75 6d 62 65 72 20 6f 66 20 63 6f 6e 63 75 72 72 65 6e 74 20 73 65 73 73 69 6f 6e 20 73 74 61 72 | umber.of.concurrent.session.star |
db660 | 74 20 61 74 74 65 6d 70 74 73 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 73 74 61 | t.attempts.Maximum.number.of.sta |
db680 | 74 69 6f 6e 73 20 61 6c 6c 6f 77 65 64 20 69 6e 20 73 74 61 74 69 6f 6e 20 74 61 62 6c 65 2e 20 | tions.allowed.in.station.table.. |
db6a0 | 4e 65 77 20 73 74 61 74 69 6f 6e 73 20 77 69 6c 6c 20 62 65 20 72 65 6a 65 63 74 65 64 20 61 66 | New.stations.will.be.rejected.af |
db6c0 | 74 65 72 20 74 68 65 20 73 74 61 74 69 6f 6e 20 74 61 62 6c 65 20 69 73 20 66 75 6c 6c 2e 20 49 | ter.the.station.table.is.full..I |
db6e0 | 45 45 45 20 38 30 32 2e 31 31 20 68 61 73 20 61 20 6c 69 6d 69 74 20 6f 66 20 32 30 30 37 20 64 | EEE.802.11.has.a.limit.of.2007.d |
db700 | 69 66 66 65 72 65 6e 74 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 49 44 73 2c 20 73 6f 20 74 68 69 | ifferent.association.IDs,.so.thi |
db720 | 73 20 6e 75 6d 62 65 72 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 61 72 67 65 72 20 74 68 | s.number.should.not.be.larger.th |
db740 | 61 6e 20 74 68 61 74 2e 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 74 69 6d 65 73 | an.that..Maximum.number.of.times |
db760 | 20 61 6e 20 65 78 70 69 72 65 64 20 72 65 63 6f 72 64 e2 80 99 73 20 54 54 4c 20 69 73 20 65 78 | .an.expired.record...s.TTL.is.ex |
db780 | 74 65 6e 64 65 64 20 62 79 20 33 30 73 20 77 68 65 6e 20 73 65 72 76 69 6e 67 20 73 74 61 6c 65 | tended.by.30s.when.serving.stale |
db7a0 | 2e 20 45 78 74 65 6e 73 69 6f 6e 20 6f 6e 6c 79 20 6f 63 63 75 72 73 20 69 66 20 61 20 72 65 63 | ..Extension.only.occurs.if.a.rec |
db7c0 | 6f 72 64 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 66 72 65 73 68 65 64 2e 20 41 20 76 61 6c 75 65 | ord.cannot.be.refreshed..A.value |
db7e0 | 20 6f 66 20 30 20 6d 65 61 6e 73 20 74 68 65 20 53 65 72 76 65 20 53 74 61 6c 65 20 6d 65 63 68 | .of.0.means.the.Serve.Stale.mech |
db800 | 61 6e 69 73 6d 20 69 73 20 6e 6f 74 20 75 73 65 64 2e 20 54 6f 20 61 6c 6c 6f 77 20 72 65 63 6f | anism.is.not.used..To.allow.reco |
db820 | 72 64 73 20 62 65 63 6f 6d 69 6e 67 20 73 74 61 6c 65 20 74 6f 20 62 65 20 73 65 72 76 65 64 20 | rds.becoming.stale.to.be.served. |
db840 | 66 6f 72 20 61 6e 20 68 6f 75 72 2c 20 75 73 65 20 61 20 76 61 6c 75 65 20 6f 66 20 31 32 30 2e | for.an.hour,.use.a.value.of.120. |
db860 | 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 74 72 69 65 73 20 74 6f 20 73 65 6e 64 | .Maximum.number.of.tries.to.send |
db880 | 20 41 63 63 65 73 73 2d 52 65 71 75 65 73 74 2f 41 63 63 6f 75 6e 74 69 6e 67 2d 52 65 71 75 65 | .Access-Request/Accounting-Reque |
db8a0 | 73 74 20 71 75 65 72 69 65 73 00 4d 65 64 69 75 6d 00 4d 65 6d 62 65 72 20 49 6e 74 65 72 66 61 | st.queries.Medium.Member.Interfa |
db8c0 | 63 65 73 00 4d 65 6d 62 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 60 65 74 68 31 60 20 61 6e 64 | ces.Member.interfaces.`eth1`.and |
db8e0 | 20 56 4c 41 4e 20 31 30 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 65 74 68 32 60 00 4d 65 73 | .VLAN.10.on.interface.`eth2`.Mes |
db900 | 73 61 67 65 73 20 67 65 6e 65 72 61 74 65 64 20 69 6e 74 65 72 6e 61 6c 6c 79 20 62 79 20 73 79 | sages.generated.internally.by.sy |
db920 | 73 6c 6f 67 64 00 4d 65 74 72 69 73 20 76 65 72 73 69 6f 6e 2c 20 74 68 65 20 64 65 66 61 75 6c | slogd.Metris.version,.the.defaul |
db940 | 74 20 69 73 20 60 60 32 60 60 00 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 65 78 70 | t.is.``2``.Microsoft.Windows.exp |
db960 | 65 63 74 73 20 74 68 65 20 73 65 72 76 65 72 20 6e 61 6d 65 20 74 6f 20 62 65 20 61 6c 73 6f 20 | ects.the.server.name.to.be.also. |
db980 | 75 73 65 64 20 69 6e 20 74 68 65 20 73 65 72 76 65 72 27 73 20 63 65 72 74 69 66 69 63 61 74 65 | used.in.the.server's.certificate |
db9a0 | 20 63 6f 6d 6d 6f 6e 20 6e 61 6d 65 2c 20 73 6f 20 69 74 27 73 20 62 65 73 74 20 74 6f 20 75 73 | .common.name,.so.it's.best.to.us |
db9c0 | 65 20 74 68 69 73 20 44 4e 53 20 6e 61 6d 65 20 66 6f 72 20 79 6f 75 72 20 56 50 4e 20 63 6f 6e | e.this.DNS.name.for.your.VPN.con |
db9e0 | 6e 65 63 74 69 6f 6e 2e 00 4d 69 6e 20 61 6e 64 20 6d 61 78 20 69 6e 74 65 72 76 61 6c 73 20 62 | nection..Min.and.max.intervals.b |
dba00 | 65 74 77 65 65 6e 20 75 6e 73 6f 6c 69 63 69 74 65 64 20 6d 75 6c 74 69 63 61 73 74 20 52 41 73 | etween.unsolicited.multicast.RAs |
dba20 | 00 4d 69 6e 75 6d 75 6d 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 65 74 20 69 73 20 70 72 6f | .Minumum.firewall.ruleset.is.pro |
dba40 | 76 69 64 65 64 2c 20 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 20 73 6f 6d 65 20 66 69 6c 74 65 | vided,.which.includes.some.filte |
dba60 | 72 69 6e 67 20 72 75 6c 65 73 2c 20 61 6e 64 20 61 70 70 72 6f 70 69 61 74 65 20 72 75 6c 65 73 | ring.rules,.and.appropiate.rules |
dba80 | 20 66 6f 72 20 75 73 69 6e 67 20 66 6c 6f 77 74 61 62 6c 65 20 6f 66 66 6c 6f 61 64 20 63 61 70 | .for.using.flowtable.offload.cap |
dbaa0 | 61 62 69 6c 69 74 69 65 73 2e 00 4d 6f 64 69 66 79 20 74 68 65 20 6a 6f 69 6e 2f 70 72 75 6e 65 | abilities..Modify.the.join/prune |
dbac0 | 20 69 6e 74 65 72 76 61 6c 20 74 68 61 74 20 50 49 4d 20 75 73 65 73 20 74 6f 20 74 68 65 20 6e | .interval.that.PIM.uses.to.the.n |
dbae0 | 65 77 20 76 61 6c 75 65 2e 20 54 69 6d 65 20 69 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 73 | ew.value..Time.is.specified.in.s |
dbb00 | 65 63 6f 6e 64 73 2e 00 4d 6f 64 69 66 79 20 74 68 65 20 74 69 6d 65 20 6f 75 74 20 76 61 6c 75 | econds..Modify.the.time.out.valu |
dbb20 | 65 20 66 6f 72 20 61 20 53 2c 47 20 66 6c 6f 77 20 66 72 6f 6d 20 31 2d 36 35 35 33 35 20 73 65 | e.for.a.S,G.flow.from.1-65535.se |
dbb40 | 63 6f 6e 64 73 20 61 74 20 3a 61 62 62 72 3a 60 52 50 20 28 52 65 6e 64 65 7a 76 6f 75 73 20 50 | conds.at.:abbr:`RP.(Rendezvous.P |
dbb60 | 6f 69 6e 74 29 60 2e 20 54 68 65 20 6e 6f 72 6d 61 6c 20 6b 65 65 70 61 6c 69 76 65 20 70 65 72 | oint)`..The.normal.keepalive.per |
dbb80 | 69 6f 64 20 66 6f 72 20 74 68 65 20 4b 41 54 28 53 2c 47 29 20 64 65 66 61 75 6c 74 73 20 74 6f | iod.for.the.KAT(S,G).defaults.to |
dbba0 | 20 32 31 30 20 73 65 63 6f 6e 64 73 2e 20 48 6f 77 65 76 65 72 2c 20 61 74 20 74 68 65 20 3a 61 | .210.seconds..However,.at.the.:a |
dbbc0 | 62 62 72 3a 60 52 50 20 28 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 29 60 2c 20 74 68 65 | bbr:`RP.(Rendezvous.Point)`,.the |
dbbe0 | 20 6b 65 65 70 61 6c 69 76 65 20 70 65 72 69 6f 64 20 6d 75 73 74 20 62 65 20 61 74 20 6c 65 61 | .keepalive.period.must.be.at.lea |
dbc00 | 73 74 20 74 68 65 20 52 65 67 69 73 74 65 72 5f 53 75 70 70 72 65 73 73 69 6f 6e 5f 54 69 6d 65 | st.the.Register_Suppression_Time |
dbc20 | 2c 20 6f 72 20 74 68 65 20 52 50 20 6d 61 79 20 74 69 6d 65 20 6f 75 74 20 74 68 65 20 28 53 2c | ,.or.the.RP.may.time.out.the.(S, |
dbc40 | 47 29 20 73 74 61 74 65 20 62 65 66 6f 72 65 20 74 68 65 20 6e 65 78 74 20 4e 75 6c 6c 2d 52 65 | G).state.before.the.next.Null-Re |
dbc60 | 67 69 73 74 65 72 20 61 72 72 69 76 65 73 2e 20 54 68 75 73 2c 20 74 68 65 20 4b 41 54 28 53 2c | gister.arrives..Thus,.the.KAT(S, |
dbc80 | 47 29 20 69 73 20 73 65 74 20 74 6f 20 6d 61 78 28 4b 65 65 70 61 6c 69 76 65 5f 50 65 72 69 6f | G).is.set.to.max(Keepalive_Perio |
dbca0 | 64 2c 20 52 50 5f 4b 65 65 70 61 6c 69 76 65 5f 50 65 72 69 6f 64 29 20 77 68 65 6e 20 61 20 52 | d,.RP_Keepalive_Period).when.a.R |
dbcc0 | 65 67 69 73 74 65 72 2d 53 74 6f 70 20 69 73 20 73 65 6e 74 2e 00 4d 6f 64 69 66 79 20 74 68 65 | egister-Stop.is.sent..Modify.the |
dbce0 | 20 74 69 6d 65 20 6f 75 74 20 76 61 6c 75 65 20 66 6f 72 20 61 20 53 2c 47 20 66 6c 6f 77 20 66 | .time.out.value.for.a.S,G.flow.f |
dbd00 | 72 6f 6d 20 31 2d 36 35 35 33 35 20 73 65 63 6f 6e 64 73 2e 20 49 66 20 63 68 6f 6f 73 69 6e 67 | rom.1-65535.seconds..If.choosing |
dbd20 | 20 61 20 76 61 6c 75 65 20 62 65 6c 6f 77 20 33 31 20 73 65 63 6f 6e 64 73 20 62 65 20 61 77 61 | .a.value.below.31.seconds.be.awa |
dbd40 | 72 65 20 74 68 61 74 20 73 6f 6d 65 20 68 61 72 64 77 61 72 65 20 70 6c 61 74 66 6f 72 6d 73 20 | re.that.some.hardware.platforms. |
dbd60 | 63 61 6e 6e 6f 74 20 73 65 65 20 64 61 74 61 20 66 6c 6f 77 69 6e 67 20 69 6e 20 62 65 74 74 65 | cannot.see.data.flowing.in.bette |
dbd80 | 72 20 74 68 61 6e 20 33 30 20 73 65 63 6f 6e 64 20 63 68 75 6e 6b 73 2e 00 4d 6f 64 69 66 79 20 | r.than.30.second.chunks..Modify. |
dbda0 | 74 68 65 20 74 69 6d 65 20 74 68 61 74 20 70 69 6d 20 77 69 6c 6c 20 72 65 67 69 73 74 65 72 20 | the.time.that.pim.will.register. |
dbdc0 | 73 75 70 70 72 65 73 73 20 61 20 46 48 52 20 77 69 6c 6c 20 73 65 6e 64 20 72 65 67 69 73 74 65 | suppress.a.FHR.will.send.registe |
dbde0 | 72 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 6b 65 72 6e 65 6c 2e 00 4d | r.notifications.to.the.kernel..M |
dbe00 | 6f 6e 69 74 6f 72 2c 20 74 68 65 20 73 79 73 74 65 6d 20 70 61 73 73 69 76 65 6c 79 20 6d 6f 6e | onitor,.the.system.passively.mon |
dbe20 | 69 74 6f 72 73 20 61 6e 79 20 6b 69 6e 64 20 6f 66 20 77 69 72 65 6c 65 73 73 20 74 72 61 66 66 | itors.any.kind.of.wireless.traff |
dbe40 | 69 63 00 4d 6f 6e 69 74 6f 72 69 6e 67 00 4d 6f 6e 69 74 6f 72 69 6e 67 20 66 75 6e 63 74 69 6f | ic.Monitoring.Monitoring.functio |
dbe60 | 6e 61 6c 69 74 79 20 77 69 74 68 20 60 60 74 65 6c 65 67 72 61 66 60 60 20 61 6e 64 20 60 60 49 | nality.with.``telegraf``.and.``I |
dbe80 | 6e 66 6c 75 78 44 42 20 32 60 60 20 69 73 20 70 72 6f 76 69 64 65 64 2e 20 54 65 6c 65 67 72 61 | nfluxDB.2``.is.provided..Telegra |
dbea0 | 66 20 69 73 20 74 68 65 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 73 65 72 76 65 72 20 61 67 65 6e | f.is.the.open.source.server.agen |
dbec0 | 74 20 74 6f 20 68 65 6c 70 20 79 6f 75 20 63 6f 6c 6c 65 63 74 20 6d 65 74 72 69 63 73 2c 20 65 | t.to.help.you.collect.metrics,.e |
dbee0 | 76 65 6e 74 73 20 61 6e 64 20 6c 6f 67 73 20 66 72 6f 6d 20 79 6f 75 72 20 72 6f 75 74 65 72 73 | vents.and.logs.from.your.routers |
dbf00 | 2e 00 4d 6f 72 65 20 64 65 74 61 69 6c 73 20 61 62 6f 75 74 20 74 68 65 20 49 50 73 65 63 20 61 | ..More.details.about.the.IPsec.a |
dbf20 | 6e 64 20 56 54 49 20 69 73 73 75 65 20 61 6e 64 20 6f 70 74 69 6f 6e 20 64 69 73 61 62 6c 65 2d | nd.VTI.issue.and.option.disable- |
dbf40 | 72 6f 75 74 65 2d 61 75 74 6f 69 6e 73 74 61 6c 6c 20 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 2e 76 | route-autoinstall.https://blog.v |
dbf60 | 79 6f 73 2e 69 6f 2f 76 79 6f 73 2d 31 2d 64 6f 74 2d 32 2d 30 2d 64 65 76 65 6c 6f 70 6d 65 6e | yos.io/vyos-1-dot-2-0-developmen |
dbf80 | 74 2d 6e 65 77 73 2d 69 6e 2d 6a 75 6c 79 00 4d 6f 73 74 20 6f 70 65 72 61 74 69 6e 67 20 73 79 | t-news-in-july.Most.operating.sy |
dbfa0 | 73 74 65 6d 73 20 69 6e 63 6c 75 64 65 20 6e 61 74 69 76 65 20 63 6c 69 65 6e 74 20 73 75 70 70 | stems.include.native.client.supp |
dbfc0 | 6f 72 74 20 66 6f 72 20 49 50 73 65 63 20 49 4b 45 76 32 20 56 50 4e 20 63 6f 6e 6e 65 63 74 69 | ort.for.IPsec.IKEv2.VPN.connecti |
dbfe0 | 6f 6e 73 2c 20 61 6e 64 20 6f 74 68 65 72 73 20 74 79 70 69 63 61 6c 6c 79 20 68 61 76 65 20 61 | ons,.and.others.typically.have.a |
dc000 | 6e 20 61 70 70 20 6f 72 20 61 64 64 2d 6f 6e 20 70 61 63 6b 61 67 65 20 77 68 69 63 68 20 61 64 | n.app.or.add-on.package.which.ad |
dc020 | 64 73 20 74 68 65 20 63 61 70 61 62 69 6c 69 74 79 2e 20 54 68 69 73 20 73 65 63 74 69 6f 6e 20 | ds.the.capability..This.section. |
dc040 | 63 6f 76 65 72 73 20 49 50 73 65 63 20 49 4b 45 76 32 20 63 6c 69 65 6e 74 20 63 6f 6e 66 69 67 | covers.IPsec.IKEv2.client.config |
dc060 | 75 72 61 74 69 6f 6e 20 66 6f 72 20 57 69 6e 64 6f 77 73 20 31 30 2e 00 4d 6f 75 6e 74 20 61 20 | uration.for.Windows.10..Mount.a. |
dc080 | 76 6f 6c 75 6d 65 20 69 6e 74 6f 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 00 4d 75 6c 74 69 00 | volume.into.the.container.Multi. |
dc0a0 | 4d 75 6c 74 69 2d 63 6c 69 65 6e 74 20 73 65 72 76 65 72 20 69 73 20 74 68 65 20 6d 6f 73 74 20 | Multi-client.server.is.the.most. |
dc0c0 | 70 6f 70 75 6c 61 72 20 4f 70 65 6e 56 50 4e 20 6d 6f 64 65 20 6f 6e 20 72 6f 75 74 65 72 73 2e | popular.OpenVPN.mode.on.routers. |
dc0e0 | 20 49 74 20 61 6c 77 61 79 73 20 75 73 65 73 20 78 2e 35 30 39 20 61 75 74 68 65 6e 74 69 63 61 | .It.always.uses.x.509.authentica |
dc100 | 74 69 6f 6e 20 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 72 65 71 75 69 72 65 73 20 61 20 50 4b | tion.and.therefore.requires.a.PK |
dc120 | 49 20 73 65 74 75 70 2e 20 52 65 66 65 72 20 74 68 69 73 20 74 6f 70 69 63 20 3a 72 65 66 3a 60 | I.setup..Refer.this.topic.:ref:` |
dc140 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 70 6b 69 2f 69 6e 64 65 78 3a 70 6b 69 60 20 74 6f 20 | configuration/pki/index:pki`.to. |
dc160 | 67 65 6e 65 72 61 74 65 20 61 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 2c 20 61 20 73 65 72 | generate.a.CA.certificate,.a.ser |
dc180 | 76 65 72 20 63 65 72 74 69 66 69 63 61 74 65 20 61 6e 64 20 6b 65 79 2c 20 61 20 63 65 72 74 69 | ver.certificate.and.key,.a.certi |
dc1a0 | 66 69 63 61 74 65 20 72 65 76 6f 63 61 74 69 6f 6e 20 6c 69 73 74 2c 20 61 20 44 69 66 66 69 65 | ficate.revocation.list,.a.Diffie |
dc1c0 | 2d 48 65 6c 6c 6d 61 6e 20 6b 65 79 20 65 78 63 68 61 6e 67 65 20 70 61 72 61 6d 65 74 65 72 73 | -Hellman.key.exchange.parameters |
dc1e0 | 20 66 69 6c 65 2e 20 59 6f 75 20 64 6f 20 6e 6f 74 20 6e 65 65 64 20 63 6c 69 65 6e 74 20 63 65 | .file..You.do.not.need.client.ce |
dc200 | 72 74 69 66 69 63 61 74 65 73 20 61 6e 64 20 6b 65 79 73 20 66 6f 72 20 74 68 65 20 73 65 72 76 | rtificates.and.keys.for.the.serv |
dc220 | 65 72 20 73 65 74 75 70 2e 00 4d 75 6c 74 69 2d 68 6f 6d 65 64 2e 20 49 6e 20 61 20 6d 75 6c 74 | er.setup..Multi-homed..In.a.mult |
dc240 | 69 2d 68 6f 6d 65 64 20 6e 65 74 77 6f 72 6b 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 2c 20 74 68 65 | i-homed.network.environment,.the |
dc260 | 20 4e 41 54 36 36 20 64 65 76 69 63 65 20 63 6f 6e 6e 65 63 74 73 20 74 6f 20 61 6e 20 69 6e 74 | .NAT66.device.connects.to.an.int |
dc280 | 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 6e 64 20 73 69 6d 75 6c 74 61 6e 65 6f 75 73 6c 79 | ernal.network.and.simultaneously |
dc2a0 | 20 63 6f 6e 6e 65 63 74 73 20 74 6f 20 64 69 66 66 65 72 65 6e 74 20 65 78 74 65 72 6e 61 6c 20 | .connects.to.different.external. |
dc2c0 | 6e 65 74 77 6f 72 6b 73 2e 20 41 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 63 61 | networks..Address.translation.ca |
dc2e0 | 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 65 61 63 68 20 65 78 74 65 72 6e 61 6c | n.be.configured.on.each.external |
dc300 | 20 6e 65 74 77 6f 72 6b 20 73 69 64 65 20 69 6e 74 65 72 66 61 63 65 20 6f 66 20 74 68 65 20 4e | .network.side.interface.of.the.N |
dc320 | 41 54 36 36 20 64 65 76 69 63 65 20 74 6f 20 63 6f 6e 76 65 72 74 20 74 68 65 20 73 61 6d 65 20 | AT66.device.to.convert.the.same. |
dc340 | 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 20 69 6e 74 6f 20 64 69 | internal.network.address.into.di |
dc360 | 66 66 65 72 65 6e 74 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 | fferent.external.network.address |
dc380 | 65 73 2c 20 61 6e 64 20 72 65 61 6c 69 7a 65 20 74 68 65 20 6d 61 70 70 69 6e 67 20 6f 66 20 74 | es,.and.realize.the.mapping.of.t |
dc3a0 | 68 65 20 73 61 6d 65 20 69 6e 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 20 74 6f 20 6d 75 6c 74 | he.same.internal.address.to.mult |
dc3c0 | 69 70 6c 65 20 65 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 65 73 2e 00 4d 75 6c 74 69 3a 20 | iple.external.addresses..Multi:. |
dc3e0 | 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e | can.be.specified.multiple.times. |
dc400 | 00 4d 75 6c 74 69 63 61 73 74 00 4d 75 6c 74 69 63 61 73 74 20 44 4e 53 20 75 73 65 73 20 74 68 | .Multicast.Multicast.DNS.uses.th |
dc420 | 65 20 32 32 34 2e 30 2e 30 2e 32 35 31 20 61 64 64 72 65 73 73 2c 20 77 68 69 63 68 20 69 73 20 | e.224.0.0.251.address,.which.is. |
dc440 | 22 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 6c 79 20 73 63 6f 70 65 64 22 20 61 6e 64 20 64 6f | "administratively.scoped".and.do |
dc460 | 65 73 20 6e 6f 74 20 6c 65 61 76 65 20 74 68 65 20 73 75 62 6e 65 74 2e 20 49 74 20 72 65 74 72 | es.not.leave.the.subnet..It.retr |
dc480 | 61 6e 73 6d 69 74 73 20 6d 44 4e 53 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 6f 6e 65 20 69 6e | ansmits.mDNS.packets.from.one.in |
dc4a0 | 74 65 72 66 61 63 65 20 74 6f 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 68 69 | terface.to.other.interfaces..Thi |
dc4c0 | 73 20 65 6e 61 62 6c 65 73 20 73 75 70 70 6f 72 74 20 66 6f 72 20 65 2e 67 2e 20 41 70 70 6c 65 | s.enables.support.for.e.g..Apple |
dc4e0 | 20 41 69 72 70 6c 61 79 20 64 65 76 69 63 65 73 20 61 63 72 6f 73 73 20 6d 75 6c 74 69 70 6c 65 | .Airplay.devices.across.multiple |
dc500 | 20 56 4c 41 4e 73 2e 00 4d 75 6c 74 69 63 61 73 74 20 44 4e 53 20 75 73 65 73 20 74 68 65 20 72 | .VLANs..Multicast.DNS.uses.the.r |
dc520 | 65 73 65 72 76 65 64 20 61 64 64 72 65 73 73 20 60 60 32 32 34 2e 30 2e 30 2e 32 35 31 60 60 2c | eserved.address.``224.0.0.251``, |
dc540 | 20 77 68 69 63 68 20 69 73 20 60 22 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 6c 79 20 73 63 6f | .which.is.`"administratively.sco |
dc560 | 70 65 64 22 60 20 61 6e 64 20 64 6f 65 73 20 6e 6f 74 20 6c 65 61 76 65 20 74 68 65 20 73 75 62 | ped"`.and.does.not.leave.the.sub |
dc580 | 6e 65 74 2e 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 72 65 74 72 61 6e 73 6d 69 74 73 20 6d | net..mDNS.repeater.retransmits.m |
dc5a0 | 44 4e 53 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 6f 6e 65 20 69 6e 74 65 72 66 61 63 65 20 74 | DNS.packets.from.one.interface.t |
dc5c0 | 6f 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 68 69 73 20 65 6e 61 62 6c 65 73 | o.other.interfaces..This.enables |
dc5e0 | 20 73 75 70 70 6f 72 74 20 66 6f 72 20 64 65 76 69 63 65 73 20 75 73 69 6e 67 20 6d 44 4e 53 20 | .support.for.devices.using.mDNS. |
dc600 | 64 69 73 63 6f 76 65 72 79 20 28 6c 69 6b 65 20 6e 65 74 77 6f 72 6b 20 70 72 69 6e 74 65 72 73 | discovery.(like.network.printers |
dc620 | 2c 20 41 70 70 6c 65 20 41 69 72 70 6c 61 79 2c 20 43 68 72 6f 6d 65 63 61 73 74 2c 20 76 61 72 | ,.Apple.Airplay,.Chromecast,.var |
dc640 | 69 6f 75 73 20 49 50 20 62 61 73 65 64 20 68 6f 6d 65 2d 61 75 74 6f 6d 61 74 69 6f 6e 20 64 65 | ious.IP.based.home-automation.de |
dc660 | 76 69 63 65 73 20 65 74 63 29 20 61 63 72 6f 73 73 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 73 | vices.etc).across.multiple.VLANs |
dc680 | 2e 00 4d 75 6c 74 69 63 61 73 74 20 56 58 4c 41 4e 00 4d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 | ..Multicast.VXLAN.Multicast.grou |
dc6a0 | 70 20 61 64 64 72 65 73 73 20 66 6f 72 20 56 58 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 2e 20 56 | p.address.for.VXLAN.interface..V |
dc6c0 | 58 4c 41 4e 20 74 75 6e 6e 65 6c 73 20 63 61 6e 20 62 65 20 62 75 69 6c 74 20 65 69 74 68 65 72 | XLAN.tunnels.can.be.built.either |
dc6e0 | 20 76 69 61 20 4d 75 6c 74 69 63 61 73 74 20 6f 72 20 76 69 61 20 55 6e 69 63 61 73 74 2e 00 4d | .via.Multicast.or.via.Unicast..M |
dc700 | 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 74 6f 20 75 73 65 20 66 6f 72 20 73 79 6e 63 69 6e | ulticast.group.to.use.for.syncin |
dc720 | 67 20 63 6f 6e 6e 74 72 61 63 6b 20 65 6e 74 72 69 65 73 2e 00 4d 75 6c 74 69 63 61 73 74 20 72 | g.conntrack.entries..Multicast.r |
dc740 | 65 63 65 69 76 65 72 73 20 77 69 6c 6c 20 74 61 6c 6b 20 49 47 4d 50 20 74 6f 20 74 68 65 69 72 | eceivers.will.talk.IGMP.to.their |
dc760 | 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2c 20 73 6f 2c 20 62 65 73 69 64 65 73 20 68 61 76 69 6e | .local.router,.so,.besides.havin |
dc780 | 67 20 50 49 4d 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 65 76 65 72 79 20 72 6f 75 74 65 72 | g.PIM.configured.in.every.router |
dc7a0 | 2c 20 49 47 4d 50 20 6d 75 73 74 20 61 6c 73 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 | ,.IGMP.must.also.be.configured.i |
dc7c0 | 6e 20 61 6e 79 20 72 6f 75 74 65 72 20 77 68 65 72 65 20 74 68 65 72 65 20 63 6f 75 6c 64 20 62 | n.any.router.where.there.could.b |
dc7e0 | 65 20 61 20 6d 75 6c 74 69 63 61 73 74 20 72 65 63 65 69 76 65 72 20 6c 6f 63 61 6c 6c 79 20 63 | e.a.multicast.receiver.locally.c |
dc800 | 6f 6e 6e 65 63 74 65 64 2e 00 4d 75 6c 74 69 63 61 73 74 20 72 65 63 65 69 76 65 72 73 20 77 69 | onnected..Multicast.receivers.wi |
dc820 | 6c 6c 20 74 61 6c 6b 20 4d 4c 44 20 74 6f 20 74 68 65 69 72 20 6c 6f 63 61 6c 20 72 6f 75 74 65 | ll.talk.MLD.to.their.local.route |
dc840 | 72 2c 20 73 6f 2c 20 62 65 73 69 64 65 73 20 68 61 76 69 6e 67 20 50 49 4d 76 36 20 63 6f 6e 66 | r,.so,.besides.having.PIMv6.conf |
dc860 | 69 67 75 72 65 64 20 69 6e 20 65 76 65 72 79 20 72 6f 75 74 65 72 2c 20 4d 4c 44 20 6d 75 73 74 | igured.in.every.router,.MLD.must |
dc880 | 20 61 6c 73 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 61 6e 79 20 72 6f 75 74 65 | .also.be.configured.in.any.route |
dc8a0 | 72 20 77 68 65 72 65 20 74 68 65 72 65 20 63 6f 75 6c 64 20 62 65 20 61 20 6d 75 6c 74 69 63 61 | r.where.there.could.be.a.multica |
dc8c0 | 73 74 20 72 65 63 65 69 76 65 72 20 6c 6f 63 61 6c 6c 79 20 63 6f 6e 6e 65 63 74 65 64 2e 00 4d | st.receiver.locally.connected..M |
dc8e0 | 75 6c 74 69 63 61 73 74 2d 72 6f 75 74 69 6e 67 20 69 73 20 72 65 71 75 69 72 65 64 20 66 6f 72 | ulticast-routing.is.required.for |
dc900 | 20 74 68 65 20 6c 65 61 76 65 73 20 74 6f 20 66 6f 72 77 61 72 64 20 74 72 61 66 66 69 63 20 62 | .the.leaves.to.forward.traffic.b |
dc920 | 65 74 77 65 65 6e 20 65 61 63 68 20 6f 74 68 65 72 20 69 6e 20 61 20 6d 6f 72 65 20 73 63 61 6c | etween.each.other.in.a.more.scal |
dc940 | 61 62 6c 65 20 77 61 79 2e 20 54 68 69 73 20 61 6c 73 6f 20 72 65 71 75 69 72 65 73 20 50 49 4d | able.way..This.also.requires.PIM |
dc960 | 20 74 6f 20 62 65 20 65 6e 61 62 6c 65 64 20 74 6f 77 61 72 64 73 20 74 68 65 20 6c 65 61 76 65 | .to.be.enabled.towards.the.leave |
dc980 | 73 20 73 6f 20 74 68 61 74 20 74 68 65 20 53 70 69 6e 65 20 63 61 6e 20 6c 65 61 72 6e 20 77 68 | s.so.that.the.Spine.can.learn.wh |
dc9a0 | 61 74 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 73 20 65 61 63 68 20 4c 65 61 66 20 65 78 | at.multicast.groups.each.Leaf.ex |
dc9c0 | 70 65 63 74 73 20 74 72 61 66 66 69 63 20 66 72 6f 6d 2e 00 4d 75 6c 74 69 70 6c 65 20 44 4e 53 | pects.traffic.from..Multiple.DNS |
dc9e0 | 20 73 65 72 76 65 72 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 2e 00 4d 75 6c 74 69 70 6c | .servers.can.be.defined..Multipl |
dca00 | 65 20 52 50 4b 49 20 63 61 63 68 69 6e 67 20 69 6e 73 74 61 6e 63 65 73 20 63 61 6e 20 62 65 20 | e.RPKI.caching.instances.can.be. |
dca20 | 73 75 70 70 6c 69 65 64 20 61 6e 64 20 74 68 65 79 20 6e 65 65 64 20 61 20 70 72 65 66 65 72 65 | supplied.and.they.need.a.prefere |
dca40 | 6e 63 65 20 69 6e 20 77 68 69 63 68 20 74 68 65 69 72 20 72 65 73 75 6c 74 20 73 65 74 73 20 61 | nce.in.which.their.result.sets.a |
dca60 | 72 65 20 75 73 65 64 2e 00 4d 75 6c 74 69 70 6c 65 20 55 70 6c 69 6e 6b 73 00 4d 75 6c 74 69 70 | re.used..Multiple.Uplinks.Multip |
dca80 | 6c 65 20 56 4c 41 4e 20 74 6f 20 56 4e 49 20 6d 61 70 70 69 6e 67 73 20 63 61 6e 20 62 65 20 63 | le.VLAN.to.VNI.mappings.can.be.c |
dcaa0 | 6f 6e 66 69 67 75 72 65 64 20 61 67 61 69 6e 73 74 20 74 68 65 20 73 61 6d 65 20 53 56 44 2e 20 | onfigured.against.the.same.SVD.. |
dcac0 | 54 68 69 73 20 61 6c 6c 6f 77 73 20 66 6f 72 20 61 20 73 69 67 6e 69 66 69 63 61 6e 74 20 73 63 | This.allows.for.a.significant.sc |
dcae0 | 61 6c 69 6e 67 20 6f 66 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 56 4e 49 73 20 73 69 6e 63 | aling.of.the.number.of.VNIs.sinc |
dcb00 | 65 20 61 20 73 65 70 61 72 61 74 65 20 56 58 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 | e.a.separate.VXLAN.interface.is. |
dcb20 | 6e 6f 20 6c 6f 6e 67 65 72 20 72 65 71 75 69 72 65 64 20 66 6f 72 20 65 61 63 68 20 56 4e 49 2e | no.longer.required.for.each.VNI. |
dcb40 | 00 4d 75 6c 74 69 70 6c 65 20 61 6c 69 61 73 65 73 20 63 61 6e 20 70 65 20 73 70 65 63 69 66 69 | .Multiple.aliases.can.pe.specifi |
dcb60 | 65 64 20 70 65 72 20 68 6f 73 74 2d 6e 61 6d 65 2e 00 4d 75 6c 74 69 70 6c 65 20 64 65 73 74 69 | ed.per.host-name..Multiple.desti |
dcb80 | 6e 61 74 69 6f 6e 20 70 6f 72 74 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 73 | nation.ports.can.be.specified.as |
dcba0 | 20 61 20 63 6f 6d 6d 61 2d 73 65 70 61 72 61 74 65 64 20 6c 69 73 74 2e 20 54 68 65 20 77 68 6f | .a.comma-separated.list..The.who |
dcbc0 | 6c 65 20 6c 69 73 74 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 22 6e 65 67 61 74 65 64 22 20 75 73 | le.list.can.also.be."negated".us |
dcbe0 | 69 6e 67 20 27 21 27 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 27 21 32 32 2c 74 65 6c 6e 65 | ing.'!'..For.example:.'!22,telne |
dcc00 | 74 2c 68 74 74 70 2c 31 32 33 2c 31 30 30 31 2d 31 30 30 35 27 00 4d 75 6c 74 69 70 6c 65 20 64 | t,http,123,1001-1005'.Multiple.d |
dcc20 | 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 | estination.ports.can.be.specifie |
dcc40 | 64 20 61 73 20 61 20 63 6f 6d 6d 61 2d 73 65 70 61 72 61 74 65 64 20 6c 69 73 74 2e 20 54 68 65 | d.as.a.comma-separated.list..The |
dcc60 | 20 77 68 6f 6c 65 20 6c 69 73 74 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 22 6e 65 67 61 74 65 64 | .whole.list.can.also.be."negated |
dcc80 | 22 20 75 73 69 6e 67 20 27 21 27 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 21 32 32 2c 74 | ".using.'!'..For.example:.`!22,t |
dcca0 | 65 6c 6e 65 74 2c 68 74 74 70 2c 31 32 33 2c 31 30 30 31 2d 31 30 30 35 60 60 00 4d 75 6c 74 69 | elnet,http,123,1001-1005``.Multi |
dccc0 | 70 6c 65 20 69 6e 74 65 72 66 61 63 65 73 20 6d 61 79 20 62 65 20 73 70 65 63 69 66 69 65 64 2e | ple.interfaces.may.be.specified. |
dcce0 | 00 4d 75 6c 74 69 70 6c 65 20 6e 65 74 77 6f 72 6b 73 2f 63 6c 69 65 6e 74 20 49 50 20 61 64 64 | .Multiple.networks/client.IP.add |
dcd00 | 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 4d 75 6c 74 69 70 | resses.can.be.configured..Multip |
dcd20 | 6c 65 20 73 65 72 76 65 72 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 00 4d 75 6c | le.servers.can.be.specified..Mul |
dcd40 | 74 69 70 6c 65 20 73 65 72 76 69 63 65 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 70 65 72 20 69 | tiple.services.can.be.used.per.i |
dcd60 | 6e 74 65 72 66 61 63 65 2e 20 4a 75 73 74 20 73 70 65 63 69 66 79 20 61 73 20 6d 61 6e 79 20 73 | nterface..Just.specify.as.many.s |
dcd80 | 65 72 76 69 63 65 73 20 70 65 72 20 69 6e 74 65 72 66 61 63 65 20 61 73 20 79 6f 75 20 6c 69 6b | ervices.per.interface.as.you.lik |
dcda0 | 65 21 00 4d 75 6c 74 69 70 6c 65 20 73 6f 75 72 63 65 20 70 6f 72 74 73 20 63 61 6e 20 62 65 20 | e!.Multiple.source.ports.can.be. |
dcdc0 | 73 70 65 63 69 66 69 65 64 20 61 73 20 61 20 63 6f 6d 6d 61 2d 73 65 70 61 72 61 74 65 64 20 6c | specified.as.a.comma-separated.l |
dcde0 | 69 73 74 2e 20 54 68 65 20 77 68 6f 6c 65 20 6c 69 73 74 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 | ist..The.whole.list.can.also.be. |
dce00 | 22 6e 65 67 61 74 65 64 22 20 75 73 69 6e 67 20 60 60 21 60 60 2e 20 46 6f 72 20 65 78 61 6d 70 | "negated".using.``!``..For.examp |
dce20 | 6c 65 3a 00 4d 75 6c 74 69 70 6c 65 20 74 61 72 67 65 74 20 49 50 20 61 64 64 72 65 73 73 65 73 | le:.Multiple.target.IP.addresses |
dce40 | 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 20 41 74 20 6c 65 61 73 74 20 6f 6e 65 20 | .can.be.specified..At.least.one. |
dce60 | 49 50 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 67 69 76 65 6e 20 66 6f 72 20 41 52 50 | IP.address.must.be.given.for.ARP |
dce80 | 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 74 6f 20 66 75 6e 63 74 69 6f 6e 2e 00 4d 75 6c 74 69 70 6c | .monitoring.to.function..Multipl |
dcea0 | 65 20 75 73 65 72 73 20 63 61 6e 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 73 61 6d 65 20 | e.users.can.connect.to.the.same. |
dcec0 | 73 65 72 69 61 6c 20 64 65 76 69 63 65 20 62 75 74 20 6f 6e 6c 79 20 6f 6e 65 20 69 73 20 61 6c | serial.device.but.only.one.is.al |
dcee0 | 6c 6f 77 65 64 20 74 6f 20 77 72 69 74 65 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 20 70 6f | lowed.to.write.to.the.console.po |
dcf00 | 72 74 2e 00 4d 75 6c 74 69 70 72 6f 74 6f 63 6f 6c 20 65 78 74 65 6e 73 69 6f 6e 73 20 65 6e 61 | rt..Multiprotocol.extensions.ena |
dcf20 | 62 6c 65 20 42 47 50 20 74 6f 20 63 61 72 72 79 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 | ble.BGP.to.carry.routing.informa |
dcf40 | 74 69 6f 6e 20 66 6f 72 20 6d 75 6c 74 69 70 6c 65 20 6e 65 74 77 6f 72 6b 20 6c 61 79 65 72 20 | tion.for.multiple.network.layer. |
dcf60 | 70 72 6f 74 6f 63 6f 6c 73 2e 20 42 47 50 20 73 75 70 70 6f 72 74 73 20 61 6e 20 41 64 64 72 65 | protocols..BGP.supports.an.Addre |
dcf80 | 73 73 20 46 61 6d 69 6c 79 20 49 64 65 6e 74 69 66 69 65 72 20 28 41 46 49 29 20 66 6f 72 20 49 | ss.Family.Identifier.(AFI).for.I |
dcfa0 | 50 76 34 20 61 6e 64 20 49 50 76 36 2e 00 4e 00 4e 41 54 00 4e 41 54 20 28 73 70 65 63 69 66 69 | Pv4.and.IPv6..N.NAT.NAT.(specifi |
dcfc0 | 63 61 6c 6c 79 2c 20 53 6f 75 72 63 65 20 4e 41 54 29 3b 00 4e 41 54 20 43 6f 6e 66 69 67 75 72 | cally,.Source.NAT);.NAT.Configur |
dcfe0 | 61 74 69 6f 6e 00 4e 41 54 20 4c 6f 61 64 20 42 61 6c 61 6e 63 65 00 4e 41 54 20 4c 6f 61 64 20 | ation.NAT.Load.Balance.NAT.Load. |
dd000 | 42 61 6c 61 6e 63 65 20 75 73 65 73 20 61 6e 20 61 6c 67 6f 72 69 74 68 6d 20 74 68 61 74 20 67 | Balance.uses.an.algorithm.that.g |
dd020 | 65 6e 65 72 61 74 65 73 20 61 20 68 61 73 68 20 61 6e 64 20 62 61 73 65 64 20 6f 6e 20 69 74 2c | enerates.a.hash.and.based.on.it, |
dd040 | 20 74 68 65 6e 20 69 74 20 61 70 70 6c 69 65 73 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 74 | .then.it.applies.corresponding.t |
dd060 | 72 61 6e 73 6c 61 74 69 6f 6e 2e 20 54 68 69 73 20 68 61 73 68 20 63 61 6e 20 62 65 20 67 65 6e | ranslation..This.hash.can.be.gen |
dd080 | 65 72 61 74 65 64 20 72 61 6e 64 6f 6d 6c 79 2c 20 6f 72 20 63 61 6e 20 75 73 65 20 64 61 74 61 | erated.randomly,.or.can.use.data |
dd0a0 | 20 66 72 6f 6d 20 74 68 65 20 69 70 20 68 65 61 64 65 72 3a 20 73 6f 75 72 63 65 2d 61 64 64 72 | .from.the.ip.header:.source-addr |
dd0c0 | 65 73 73 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 2d 61 64 64 72 65 73 73 2c 20 73 6f 75 72 63 65 | ess,.destination-address,.source |
dd0e0 | 2d 70 6f 72 74 20 61 6e 64 2f 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 2d 70 6f 72 74 2e 20 42 | -port.and/or.destination-port..B |
dd100 | 79 20 64 65 66 61 75 6c 74 2c 20 69 74 20 77 69 6c 6c 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 | y.default,.it.will.generate.the. |
dd120 | 68 61 73 68 20 72 61 6e 64 6f 6d 6c 79 2e 00 4e 41 54 20 52 75 6c 65 73 65 74 00 4e 41 54 20 62 | hash.randomly..NAT.Ruleset.NAT.b |
dd140 | 65 66 6f 72 65 20 56 50 4e 00 4e 41 54 20 62 65 66 6f 72 65 20 56 50 4e 20 54 6f 70 6f 6c 6f 67 | efore.VPN.NAT.before.VPN.Topolog |
dd160 | 79 00 4e 41 54 2c 20 52 6f 75 74 69 6e 67 2c 20 46 69 72 65 77 61 6c 6c 20 49 6e 74 65 72 61 63 | y.NAT,.Routing,.Firewall.Interac |
dd180 | 74 69 6f 6e 00 4e 41 54 34 34 00 4e 41 54 36 34 00 4e 41 54 36 34 20 63 6c 69 65 6e 74 20 63 6f | tion.NAT44.NAT64.NAT64.client.co |
dd1a0 | 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 4e 41 54 36 34 20 70 72 65 66 69 78 20 6d 61 73 6b 20 6d | nfiguration:.NAT64.prefix.mask.m |
dd1c0 | 75 73 74 20 62 65 20 6f 6e 65 20 6f 66 3a 20 2f 33 32 2c 20 2f 34 30 2c 20 2f 34 38 2c 20 2f 35 | ust.be.one.of:./32,./40,./48,./5 |
dd1e0 | 36 2c 20 2f 36 34 20 6f 72 20 39 36 2e 00 4e 41 54 36 34 20 73 65 72 76 65 72 20 63 6f 6e 66 69 | 6,./64.or.96..NAT64.server.confi |
dd200 | 67 75 72 61 74 69 6f 6e 3a 00 4e 41 54 36 36 28 4e 50 54 76 36 29 00 4e 48 52 50 20 70 72 6f 76 | guration:.NAT66(NPTv6).NHRP.prov |
dd220 | 69 64 65 73 20 74 68 65 20 64 79 6e 61 6d 69 63 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 | ides.the.dynamic.tunnel.endpoint |
dd240 | 20 64 69 73 63 6f 76 65 72 79 20 6d 65 63 68 61 6e 69 73 6d 20 28 65 6e 64 70 6f 69 6e 74 20 72 | .discovery.mechanism.(endpoint.r |
dd260 | 65 67 69 73 74 72 61 74 69 6f 6e 2c 20 61 6e 64 20 65 6e 64 70 6f 69 6e 74 20 64 69 73 63 6f 76 | egistration,.and.endpoint.discov |
dd280 | 65 72 79 2f 6c 6f 6f 6b 75 70 29 2c 20 6d 47 52 45 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 74 | ery/lookup),.mGRE.provides.the.t |
dd2a0 | 75 6e 6e 65 6c 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 69 74 73 65 6c 66 2c 20 61 6e 64 20 | unnel.encapsulation.itself,.and. |
dd2c0 | 74 68 65 20 49 50 53 65 63 20 70 72 6f 74 6f 63 6f 6c 73 20 68 61 6e 64 6c 65 20 74 68 65 20 6b | the.IPSec.protocols.handle.the.k |
dd2e0 | 65 79 20 65 78 63 68 61 6e 67 65 2c 20 61 6e 64 20 63 72 79 70 74 6f 20 6d 65 63 68 61 6e 69 73 | ey.exchange,.and.crypto.mechanis |
dd300 | 6d 2e 00 4e 54 50 00 4e 54 50 20 69 73 20 69 6e 74 65 6e 64 65 64 20 74 6f 20 73 79 6e 63 68 72 | m..NTP.NTP.is.intended.to.synchr |
dd320 | 6f 6e 69 7a 65 20 61 6c 6c 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 63 6f 6d 70 75 74 65 72 | onize.all.participating.computer |
dd340 | 73 20 74 6f 20 77 69 74 68 69 6e 20 61 20 66 65 77 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 6f | s.to.within.a.few.milliseconds.o |
dd360 | 66 20 3a 61 62 62 72 3a 60 55 54 43 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 | f.:abbr:`UTC.(Coordinated.Univer |
dd380 | 73 61 6c 20 54 69 6d 65 29 60 2e 20 49 74 20 75 73 65 73 20 74 68 65 20 69 6e 74 65 72 73 65 63 | sal.Time)`..It.uses.the.intersec |
dd3a0 | 74 69 6f 6e 20 61 6c 67 6f 72 69 74 68 6d 2c 20 61 20 6d 6f 64 69 66 69 65 64 20 76 65 72 73 69 | tion.algorithm,.a.modified.versi |
dd3c0 | 6f 6e 20 6f 66 20 4d 61 72 7a 75 6c 6c 6f 27 73 20 61 6c 67 6f 72 69 74 68 6d 2c 20 74 6f 20 73 | on.of.Marzullo's.algorithm,.to.s |
dd3e0 | 65 6c 65 63 74 20 61 63 63 75 72 61 74 65 20 74 69 6d 65 20 73 65 72 76 65 72 73 20 61 6e 64 20 | elect.accurate.time.servers.and. |
dd400 | 69 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 6d 69 74 69 67 61 74 65 20 74 68 65 20 65 66 66 65 | is.designed.to.mitigate.the.effe |
dd420 | 63 74 73 20 6f 66 20 76 61 72 69 61 62 6c 65 20 6e 65 74 77 6f 72 6b 20 6c 61 74 65 6e 63 79 2e | cts.of.variable.network.latency. |
dd440 | 20 4e 54 50 20 63 61 6e 20 75 73 75 61 6c 6c 79 20 6d 61 69 6e 74 61 69 6e 20 74 69 6d 65 20 74 | .NTP.can.usually.maintain.time.t |
dd460 | 6f 20 77 69 74 68 69 6e 20 74 65 6e 73 20 6f 66 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 6f 76 | o.within.tens.of.milliseconds.ov |
dd480 | 65 72 20 74 68 65 20 70 75 62 6c 69 63 20 49 6e 74 65 72 6e 65 74 2c 20 61 6e 64 20 63 61 6e 20 | er.the.public.Internet,.and.can. |
dd4a0 | 61 63 68 69 65 76 65 20 62 65 74 74 65 72 20 74 68 61 6e 20 6f 6e 65 20 6d 69 6c 6c 69 73 65 63 | achieve.better.than.one.millisec |
dd4c0 | 6f 6e 64 20 61 63 63 75 72 61 63 79 20 69 6e 20 6c 6f 63 61 6c 20 61 72 65 61 20 6e 65 74 77 6f | ond.accuracy.in.local.area.netwo |
dd4e0 | 72 6b 73 20 75 6e 64 65 72 20 69 64 65 61 6c 20 63 6f 6e 64 69 74 69 6f 6e 73 2e 20 41 73 79 6d | rks.under.ideal.conditions..Asym |
dd500 | 6d 65 74 72 69 63 20 72 6f 75 74 65 73 20 61 6e 64 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 67 65 73 | metric.routes.and.network.conges |
dd520 | 74 69 6f 6e 20 63 61 6e 20 63 61 75 73 65 20 65 72 72 6f 72 73 20 6f 66 20 31 30 30 20 6d 73 20 | tion.can.cause.errors.of.100.ms. |
dd540 | 6f 72 20 6d 6f 72 65 2e 00 4e 54 50 20 70 72 6f 63 65 73 73 20 77 69 6c 6c 20 6f 6e 6c 79 20 6c | or.more..NTP.process.will.only.l |
dd560 | 69 73 74 65 6e 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 49 50 20 61 64 64 72 65 73 | isten.on.the.specified.IP.addres |
dd580 | 73 2e 20 59 6f 75 20 6d 75 73 74 20 73 70 65 63 69 66 79 20 74 68 65 20 60 3c 61 64 64 72 65 73 | s..You.must.specify.the.`<addres |
dd5a0 | 73 3e 60 20 61 6e 64 20 6f 70 74 69 6f 6e 61 6c 6c 79 20 74 68 65 20 70 65 72 6d 69 74 74 65 64 | s>`.and.optionally.the.permitted |
dd5c0 | 20 63 6c 69 65 6e 74 73 2e 20 4d 75 6c 74 69 70 6c 65 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 | .clients..Multiple.listen.addres |
dd5e0 | 73 65 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 4e 54 50 20 73 75 62 73 79 | ses.can.be.configured..NTP.subsy |
dd600 | 73 74 65 6d 00 4e 54 50 20 73 75 70 70 6c 69 65 73 20 61 20 77 61 72 6e 69 6e 67 20 6f 66 20 61 | stem.NTP.supplies.a.warning.of.a |
dd620 | 6e 79 20 69 6d 70 65 6e 64 69 6e 67 20 6c 65 61 70 20 73 65 63 6f 6e 64 20 61 64 6a 75 73 74 6d | ny.impending.leap.second.adjustm |
dd640 | 65 6e 74 2c 20 62 75 74 20 6e 6f 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 6c 6f | ent,.but.no.information.about.lo |
dd660 | 63 61 6c 20 74 69 6d 65 20 7a 6f 6e 65 73 20 6f 72 20 64 61 79 6c 69 67 68 74 20 73 61 76 69 6e | cal.time.zones.or.daylight.savin |
dd680 | 67 20 74 69 6d 65 20 69 73 20 74 72 61 6e 73 6d 69 74 74 65 64 2e 00 4e 61 6d 65 20 53 65 72 76 | g.time.is.transmitted..Name.Serv |
dd6a0 | 65 72 00 4e 61 6d 65 20 6f 66 20 69 6e 73 74 61 6c 6c 65 64 20 63 65 72 74 69 66 69 63 61 74 65 | er.Name.of.installed.certificate |
dd6c0 | 20 61 75 74 68 6f 72 69 74 79 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 4e 61 6d 65 20 6f 66 20 | .authority.certificate..Name.of. |
dd6e0 | 69 6e 73 74 61 6c 6c 65 64 20 73 65 72 76 65 72 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 4e 61 | installed.server.certificate..Na |
dd700 | 6d 65 20 6f 66 20 73 74 61 74 69 63 20 6d 61 70 70 69 6e 67 00 4e 61 6d 65 20 6f 66 20 74 68 65 | me.of.static.mapping.Name.of.the |
dd720 | 20 73 69 6e 67 6c 65 20 74 61 62 6c 65 20 4f 6e 6c 79 20 69 66 20 73 65 74 20 67 72 6f 75 70 2d | .single.table.Only.if.set.group- |
dd740 | 6d 65 74 72 69 63 73 20 73 69 6e 67 6c 65 2d 74 61 62 6c 65 2e 00 4e 61 6d 65 20 6f 72 20 49 50 | metrics.single-table..Name.or.IP |
dd760 | 76 34 20 61 64 64 72 65 73 73 20 6f 66 20 54 46 54 50 20 73 65 72 76 65 72 00 4e 65 74 42 49 4f | v4.address.of.TFTP.server.NetBIO |
dd780 | 53 20 6f 76 65 72 20 54 43 50 2f 49 50 20 6e 61 6d 65 20 73 65 72 76 65 72 00 4e 65 74 46 6c 6f | S.over.TCP/IP.name.server.NetFlo |
dd7a0 | 77 00 4e 65 74 46 6c 6f 77 20 2f 20 49 50 46 49 58 00 4e 65 74 46 6c 6f 77 20 65 6e 67 69 6e 65 | w.NetFlow./.IPFIX.NetFlow.engine |
dd7c0 | 2d 69 64 20 77 68 69 63 68 20 77 69 6c 6c 20 61 70 70 65 61 72 20 69 6e 20 4e 65 74 46 6c 6f 77 | -id.which.will.appear.in.NetFlow |
dd7e0 | 20 64 61 74 61 2e 20 54 68 65 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 32 35 35 2e 00 4e 65 | .data..The.range.is.0.to.255..Ne |
dd800 | 74 46 6c 6f 77 20 69 73 20 61 20 66 65 61 74 75 72 65 20 74 68 61 74 20 77 61 73 20 69 6e 74 72 | tFlow.is.a.feature.that.was.intr |
dd820 | 6f 64 75 63 65 64 20 6f 6e 20 43 69 73 63 6f 20 72 6f 75 74 65 72 73 20 61 72 6f 75 6e 64 20 31 | oduced.on.Cisco.routers.around.1 |
dd840 | 39 39 36 20 74 68 61 74 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f | 996.that.provides.the.ability.to |
dd860 | 20 63 6f 6c 6c 65 63 74 20 49 50 20 6e 65 74 77 6f 72 6b 20 74 72 61 66 66 69 63 20 61 73 20 69 | .collect.IP.network.traffic.as.i |
dd880 | 74 20 65 6e 74 65 72 73 20 6f 72 20 65 78 69 74 73 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 | t.enters.or.exits.an.interface.. |
dd8a0 | 42 79 20 61 6e 61 6c 79 7a 69 6e 67 20 74 68 65 20 64 61 74 61 20 70 72 6f 76 69 64 65 64 20 62 | By.analyzing.the.data.provided.b |
dd8c0 | 79 20 4e 65 74 46 6c 6f 77 2c 20 61 20 6e 65 74 77 6f 72 6b 20 61 64 6d 69 6e 69 73 74 72 61 74 | y.NetFlow,.a.network.administrat |
dd8e0 | 6f 72 20 63 61 6e 20 64 65 74 65 72 6d 69 6e 65 20 74 68 69 6e 67 73 20 73 75 63 68 20 61 73 20 | or.can.determine.things.such.as. |
dd900 | 74 68 65 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6f 66 20 74 72 | the.source.and.destination.of.tr |
dd920 | 61 66 66 69 63 2c 20 63 6c 61 73 73 20 6f 66 20 73 65 72 76 69 63 65 2c 20 61 6e 64 20 74 68 65 | affic,.class.of.service,.and.the |
dd940 | 20 63 61 75 73 65 73 20 6f 66 20 63 6f 6e 67 65 73 74 69 6f 6e 2e 20 41 20 74 79 70 69 63 61 6c | .causes.of.congestion..A.typical |
dd960 | 20 66 6c 6f 77 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 73 65 74 75 70 20 28 75 73 69 6e 67 20 4e 65 | .flow.monitoring.setup.(using.Ne |
dd980 | 74 46 6c 6f 77 29 20 63 6f 6e 73 69 73 74 73 20 6f 66 20 74 68 72 65 65 20 6d 61 69 6e 20 63 6f | tFlow).consists.of.three.main.co |
dd9a0 | 6d 70 6f 6e 65 6e 74 73 3a 00 4e 65 74 46 6c 6f 77 20 69 73 20 75 73 75 61 6c 6c 79 20 65 6e 61 | mponents:.NetFlow.is.usually.ena |
dd9c0 | 62 6c 65 64 20 6f 6e 20 61 20 70 65 72 2d 69 6e 74 65 72 66 61 63 65 20 62 61 73 69 73 20 74 6f | bled.on.a.per-interface.basis.to |
dd9e0 | 20 6c 69 6d 69 74 20 6c 6f 61 64 20 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 20 63 6f 6d 70 6f 6e | .limit.load.on.the.router.compon |
dda00 | 65 6e 74 73 20 69 6e 76 6f 6c 76 65 64 20 69 6e 20 4e 65 74 46 6c 6f 77 2c 20 6f 72 20 74 6f 20 | ents.involved.in.NetFlow,.or.to. |
dda20 | 6c 69 6d 69 74 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 4e 65 74 46 6c 6f 77 20 72 65 63 6f | limit.the.amount.of.NetFlow.reco |
dda40 | 72 64 73 20 65 78 70 6f 72 74 65 64 2e 00 4e 65 74 46 6c 6f 77 20 76 35 20 65 78 61 6d 70 6c 65 | rds.exported..NetFlow.v5.example |
dda60 | 3a 00 4e 65 74 66 69 6c 74 65 72 20 62 61 73 65 64 00 4e 65 74 6d 61 73 6b 20 67 72 65 61 74 65 | :.Netfilter.based.Netmask.greate |
dda80 | 72 20 74 68 61 6e 20 6c 65 6e 67 74 68 2e 00 4e 65 74 6d 61 73 6b 20 6c 65 73 73 20 74 68 61 6e | r.than.length..Netmask.less.than |
ddaa0 | 20 6c 65 6e 67 74 68 00 4e 65 74 77 6f 72 6b 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 20 43 6f | .length.Network.Advertisement.Co |
ddac0 | 6e 66 69 67 75 72 61 74 69 6f 6e 00 4e 65 74 77 6f 72 6b 20 43 6f 6e 74 72 6f 6c 00 4e 65 74 77 | nfiguration.Network.Control.Netw |
ddae0 | 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 00 4e 65 74 77 6f 72 6b 20 47 72 6f 75 70 73 00 4e 65 74 77 | ork.Emulator.Network.Groups.Netw |
ddb00 | 6f 72 6b 20 49 44 20 28 53 53 49 44 29 20 60 60 45 6e 74 65 72 70 72 69 73 65 2d 54 45 53 54 60 | ork.ID.(SSID).``Enterprise-TEST` |
ddb20 | 60 00 4e 65 74 77 6f 72 6b 20 49 44 20 28 53 53 49 44 29 20 60 60 54 45 53 54 60 60 00 4e 65 74 | `.Network.ID.(SSID).``TEST``.Net |
ddb40 | 77 6f 72 6b 20 54 6f 70 6f 6c 6f 67 79 20 44 69 61 67 72 61 6d 00 4e 65 74 77 6f 72 6b 20 6d 61 | work.Topology.Diagram.Network.ma |
ddb60 | 6e 61 67 65 6d 65 6e 74 20 73 74 61 74 69 6f 6e 20 28 4e 4d 53 29 20 2d 20 73 6f 66 74 77 61 72 | nagement.station.(NMS).-.softwar |
ddb80 | 65 20 77 68 69 63 68 20 72 75 6e 73 20 6f 6e 20 74 68 65 20 6d 61 6e 61 67 65 72 00 4e 65 74 77 | e.which.runs.on.the.manager.Netw |
ddba0 | 6f 72 6b 20 6e 65 77 73 20 73 75 62 73 79 73 74 65 6d 00 4e 65 74 77 6f 72 6b 20 74 6f 20 62 65 | ork.news.subsystem.Network.to.be |
ddbc0 | 20 70 72 6f 74 65 63 74 65 64 3a 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 20 28 70 75 62 6c 69 63 | .protected:.192.0.2.0/24.(public |
ddbe0 | 20 49 50 73 20 75 73 65 20 62 79 20 63 75 73 74 6f 6d 65 72 73 29 00 4e 65 74 77 6f 72 6b 73 20 | .IPs.use.by.customers).Networks. |
ddc00 | 61 6c 6c 6f 77 65 64 20 74 6f 20 71 75 65 72 79 20 74 68 69 73 20 73 65 72 76 65 72 00 4e 65 77 | allowed.to.query.this.server.New |
ddc20 | 20 75 73 65 72 20 77 69 6c 6c 20 75 73 65 20 53 48 41 2f 41 45 53 20 66 6f 72 20 61 75 74 68 65 | .user.will.use.SHA/AES.for.authe |
ddc40 | 6e 74 69 63 61 74 69 6f 6e 20 61 6e 64 20 70 72 69 76 61 63 79 00 4e 65 78 74 20 69 74 20 69 73 | ntication.and.privacy.Next.it.is |
ddc60 | 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 32 46 41 20 66 6f 72 20 | .necessary.to.configure.2FA.for. |
ddc80 | 4f 70 65 6e 43 6f 6e 6e 65 63 74 3a 00 4e 65 78 74 2d 68 6f 70 20 69 6e 74 65 72 66 61 63 65 20 | OpenConnect:.Next-hop.interface. |
ddca0 | 66 6f 72 20 74 68 65 20 72 6f 75 74 65 00 4e 65 78 74 68 6f 70 20 49 50 20 61 64 64 72 65 73 73 | for.the.route.Nexthop.IP.address |
ddcc0 | 2e 00 4e 65 78 74 68 6f 70 20 49 50 76 36 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e | ..Nexthop.IPv6.address.to.match. |
ddce0 | 00 4e 65 78 74 68 6f 70 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 00 4e 65 78 74 68 6f 70 20 54 | .Nexthop.IPv6.address..Nexthop.T |
ddd00 | 72 61 63 6b 69 6e 67 00 4e 65 78 74 68 6f 70 20 74 72 61 63 6b 69 6e 67 20 72 65 73 6f 6c 76 65 | racking.Nexthop.tracking.resolve |
ddd20 | 20 6e 65 78 74 68 6f 70 73 20 76 69 61 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 | .nexthops.via.the.default.route. |
ddd40 | 62 79 20 64 65 66 61 75 6c 74 2e 20 54 68 69 73 20 69 73 20 65 6e 61 62 6c 65 64 20 62 79 20 64 | by.default..This.is.enabled.by.d |
ddd60 | 65 66 61 75 6c 74 20 66 6f 72 20 61 20 74 72 61 64 69 74 69 6f 6e 61 6c 20 70 72 6f 66 69 6c 65 | efault.for.a.traditional.profile |
ddd80 | 20 6f 66 20 46 52 52 20 77 68 69 63 68 20 77 65 20 75 73 65 2e 20 49 74 20 61 6e 64 20 63 61 6e | .of.FRR.which.we.use..It.and.can |
ddda0 | 20 62 65 20 64 69 73 61 62 6c 65 64 20 69 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 77 61 6e 27 74 | .be.disabled.if.you.do.not.wan't |
dddc0 | 20 74 6f 20 65 2e 67 2e 20 61 6c 6c 6f 77 20 42 47 50 20 74 6f 20 70 65 65 72 20 61 63 72 6f 73 | .to.e.g..allow.BGP.to.peer.acros |
ddde0 | 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 2e 00 4e 6f 20 52 4f 41 20 65 78 69 73 | s.the.default.route..No.ROA.exis |
dde00 | 74 73 20 77 68 69 63 68 20 63 6f 76 65 72 73 20 74 68 61 74 20 70 72 65 66 69 78 2e 20 55 6e 66 | ts.which.covers.that.prefix..Unf |
dde20 | 6f 72 74 75 6e 61 74 65 6c 79 20 74 68 69 73 20 69 73 20 74 68 65 20 63 61 73 65 20 66 6f 72 20 | ortunately.this.is.the.case.for. |
dde40 | 61 62 6f 75 74 20 38 30 25 20 6f 66 20 74 68 65 20 49 50 76 34 20 70 72 65 66 69 78 65 73 20 77 | about.80%.of.the.IPv4.prefixes.w |
dde60 | 68 69 63 68 20 77 65 72 65 20 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 74 68 65 20 3a 61 62 62 72 | hich.were.announced.to.the.:abbr |
dde80 | 3a 60 44 46 5a 20 28 64 65 66 61 75 6c 74 2d 66 72 65 65 20 7a 6f 6e 65 29 60 20 61 74 20 74 68 | :`DFZ.(default-free.zone)`.at.th |
ddea0 | 65 20 73 74 61 72 74 20 6f 66 20 32 30 32 30 00 4e 6f 20 56 4c 41 4e 20 74 61 67 67 69 6e 67 20 | e.start.of.2020.No.VLAN.tagging. |
ddec0 | 72 65 71 75 69 72 65 64 20 62 79 20 79 6f 75 72 20 49 53 50 2e 00 4e 6f 20 72 6f 75 74 65 20 69 | required.by.your.ISP..No.route.i |
ddee0 | 73 20 73 75 70 70 72 65 73 73 65 64 20 69 6e 64 65 66 69 6e 69 74 65 6c 79 2e 20 4d 61 78 69 6d | s.suppressed.indefinitely..Maxim |
ddf00 | 75 6d 2d 73 75 70 70 72 65 73 73 2d 74 69 6d 65 20 64 65 66 69 6e 65 73 20 74 68 65 20 6d 61 78 | um-suppress-time.defines.the.max |
ddf20 | 69 6d 75 6d 20 74 69 6d 65 20 61 20 72 6f 75 74 65 20 63 61 6e 20 62 65 20 73 75 70 70 72 65 73 | imum.time.a.route.can.be.suppres |
ddf40 | 73 65 64 20 62 65 66 6f 72 65 20 69 74 20 69 73 20 72 65 2d 61 64 76 65 72 74 69 73 65 64 2e 00 | sed.before.it.is.re-advertised.. |
ddf60 | 4e 6f 20 73 75 70 70 6f 72 74 20 66 6f 72 20 53 52 4c 42 00 4e 6f 20 73 75 70 70 6f 72 74 20 66 | No.support.for.SRLB.No.support.f |
ddf80 | 6f 72 20 62 69 6e 64 69 6e 67 20 53 49 44 00 4e 6f 20 73 75 70 70 6f 72 74 20 66 6f 72 20 6c 65 | or.binding.SID.No.support.for.le |
ddfa0 | 76 65 6c 20 72 65 64 69 73 74 72 69 62 75 74 69 6f 6e 20 28 4c 31 20 74 6f 20 4c 32 20 6f 72 20 | vel.redistribution.(L1.to.L2.or. |
ddfc0 | 4c 32 20 74 6f 20 4c 31 29 00 4e 6f 6e 2d 74 72 61 6e 73 70 61 72 65 6e 74 20 70 72 6f 78 79 69 | L2.to.L1).Non-transparent.proxyi |
ddfe0 | 6e 67 20 72 65 71 75 69 72 65 73 20 74 68 61 74 20 74 68 65 20 63 6c 69 65 6e 74 20 62 72 6f 77 | ng.requires.that.the.client.brow |
de000 | 73 65 72 73 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 20 74 68 65 20 70 72 6f 78 | sers.be.configured.with.the.prox |
de020 | 79 20 73 65 74 74 69 6e 67 73 20 62 65 66 6f 72 65 20 72 65 71 75 65 73 74 73 20 61 72 65 20 72 | y.settings.before.requests.are.r |
de040 | 65 64 69 72 65 63 74 65 64 2e 20 54 68 65 20 61 64 76 61 6e 74 61 67 65 20 6f 66 20 74 68 69 73 | edirected..The.advantage.of.this |
de060 | 20 69 73 20 74 68 61 74 20 74 68 65 20 63 6c 69 65 6e 74 20 77 65 62 20 62 72 6f 77 73 65 72 20 | .is.that.the.client.web.browser. |
de080 | 63 61 6e 20 64 65 74 65 63 74 20 74 68 61 74 20 61 20 70 72 6f 78 79 20 69 73 20 69 6e 20 75 73 | can.detect.that.a.proxy.is.in.us |
de0a0 | 65 20 61 6e 64 20 63 61 6e 20 62 65 68 61 76 65 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 20 49 6e | e.and.can.behave.accordingly..In |
de0c0 | 20 61 64 64 69 74 69 6f 6e 2c 20 77 65 62 2d 74 72 61 6e 73 6d 69 74 74 65 64 20 6d 61 6c 77 61 | .addition,.web-transmitted.malwa |
de0e0 | 72 65 20 63 61 6e 20 73 6f 6d 65 74 69 6d 65 73 20 62 65 20 62 6c 6f 63 6b 65 64 20 62 79 20 61 | re.can.sometimes.be.blocked.by.a |
de100 | 20 6e 6f 6e 2d 74 72 61 6e 73 70 61 72 65 6e 74 20 77 65 62 20 70 72 6f 78 79 2c 20 73 69 6e 63 | .non-transparent.web.proxy,.sinc |
de120 | 65 20 74 68 65 79 20 61 72 65 20 6e 6f 74 20 61 77 61 72 65 20 6f 66 20 74 68 65 20 70 72 6f 78 | e.they.are.not.aware.of.the.prox |
de140 | 79 20 73 65 74 74 69 6e 67 73 2e 00 4e 6f 6e 65 20 6f 66 20 74 68 65 20 6f 70 65 72 61 74 69 6e | y.settings..None.of.the.operatin |
de160 | 67 20 73 79 73 74 65 6d 73 20 68 61 76 65 20 63 6c 69 65 6e 74 20 73 6f 66 74 77 61 72 65 20 69 | g.systems.have.client.software.i |
de180 | 6e 73 74 61 6c 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 00 4e 6f 72 6d 61 6c 20 62 75 74 20 73 | nstalled.by.default.Normal.but.s |
de1a0 | 69 67 6e 69 66 69 63 61 6e 74 20 63 6f 6e 64 69 74 69 6f 6e 73 20 2d 20 63 6f 6e 64 69 74 69 6f | ignificant.conditions.-.conditio |
de1c0 | 6e 73 20 74 68 61 74 20 61 72 65 20 6e 6f 74 20 65 72 72 6f 72 20 63 6f 6e 64 69 74 69 6f 6e 73 | ns.that.are.not.error.conditions |
de1e0 | 2c 20 62 75 74 20 74 68 61 74 20 6d 61 79 20 72 65 71 75 69 72 65 20 73 70 65 63 69 61 6c 20 68 | ,.but.that.may.require.special.h |
de200 | 61 6e 64 6c 69 6e 67 2e 00 4e 6f 74 20 61 6c 6c 20 74 72 61 6e 73 6d 69 74 20 70 6f 6c 69 63 69 | andling..Not.all.transmit.polici |
de220 | 65 73 20 6d 61 79 20 62 65 20 38 30 32 2e 33 61 64 20 63 6f 6d 70 6c 69 61 6e 74 2c 20 70 61 72 | es.may.be.802.3ad.compliant,.par |
de240 | 74 69 63 75 6c 61 72 6c 79 20 69 6e 20 72 65 67 61 72 64 73 20 74 6f 20 74 68 65 20 70 61 63 6b | ticularly.in.regards.to.the.pack |
de260 | 65 74 20 6d 69 73 6f 72 64 65 72 69 6e 67 20 72 65 71 75 69 72 65 6d 65 6e 74 73 20 6f 66 20 73 | et.misordering.requirements.of.s |
de280 | 65 63 74 69 6f 6e 20 34 33 2e 32 2e 34 20 6f 66 20 74 68 65 20 38 30 32 2e 33 61 64 20 73 74 61 | ection.43.2.4.of.the.802.3ad.sta |
de2a0 | 6e 64 61 72 64 2e 00 4e 6f 74 65 20 74 68 61 74 20 64 65 6c 65 74 69 6e 67 20 74 68 65 20 6c 6f | ndard..Note.that.deleting.the.lo |
de2c0 | 67 20 66 69 6c 65 20 64 6f 65 73 20 6e 6f 74 20 73 74 6f 70 20 74 68 65 20 73 79 73 74 65 6d 20 | g.file.does.not.stop.the.system. |
de2e0 | 66 72 6f 6d 20 6c 6f 67 67 69 6e 67 20 65 76 65 6e 74 73 2e 20 49 66 20 79 6f 75 20 75 73 65 20 | from.logging.events..If.you.use. |
de300 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 68 69 6c 65 20 74 68 65 20 73 79 73 74 65 6d 20 69 73 | this.command.while.the.system.is |
de320 | 20 6c 6f 67 67 69 6e 67 20 65 76 65 6e 74 73 2c 20 6f 6c 64 20 6c 6f 67 20 65 76 65 6e 74 73 20 | .logging.events,.old.log.events. |
de340 | 77 69 6c 6c 20 62 65 20 64 65 6c 65 74 65 64 2c 20 62 75 74 20 65 76 65 6e 74 73 20 61 66 74 65 | will.be.deleted,.but.events.afte |
de360 | 72 20 74 68 65 20 64 65 6c 65 74 65 20 6f 70 65 72 61 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 72 | r.the.delete.operation.will.be.r |
de380 | 65 63 6f 72 64 65 64 20 69 6e 20 74 68 65 20 6e 65 77 20 66 69 6c 65 2e 20 54 6f 20 64 65 6c 65 | ecorded.in.the.new.file..To.dele |
de3a0 | 74 65 20 74 68 65 20 66 69 6c 65 20 61 6c 74 6f 67 65 74 68 65 72 2c 20 66 69 72 73 74 20 64 65 | te.the.file.altogether,.first.de |
de3c0 | 6c 65 74 65 20 6c 6f 67 67 69 6e 67 20 74 6f 20 74 68 65 20 66 69 6c 65 20 75 73 69 6e 67 20 73 | lete.logging.to.the.file.using.s |
de3e0 | 79 73 74 65 6d 20 73 79 73 6c 6f 67 20 3a 72 65 66 3a 60 63 75 73 74 6f 6d 2d 66 69 6c 65 60 20 | ystem.syslog.:ref:`custom-file`. |
de400 | 63 6f 6d 6d 61 6e 64 2c 20 61 6e 64 20 74 68 65 6e 20 64 65 6c 65 74 65 20 74 68 65 20 66 69 6c | command,.and.then.delete.the.fil |
de420 | 65 2e 00 4e 6f 74 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 77 69 74 68 20 74 68 65 20 70 75 62 | e..Note.the.command.with.the.pub |
de440 | 6c 69 63 20 6b 65 79 20 28 73 65 74 20 70 6b 69 20 6b 65 79 2d 70 61 69 72 20 69 70 73 65 63 2d | lic.key.(set.pki.key-pair.ipsec- |
de460 | 52 49 47 48 54 20 70 75 62 6c 69 63 20 6b 65 79 20 27 46 41 41 4f 43 41 51 38 41 4d 49 49 2e 2e | RIGHT.public.key.'FAAOCAQ8AMII.. |
de480 | 2e 27 29 2e 00 4e 6f 74 65 3a 20 63 65 72 74 69 66 69 63 61 74 65 20 6e 61 6d 65 73 20 64 6f 6e | .')..Note:.certificate.names.don |
de4a0 | 27 74 20 6d 61 74 74 65 72 2c 20 77 65 20 75 73 65 20 27 6f 70 65 6e 76 70 6e 2d 6c 6f 63 61 6c | 't.matter,.we.use.'openvpn-local |
de4c0 | 27 20 61 6e 64 20 27 6f 70 65 6e 76 70 6e 2d 72 65 6d 6f 74 65 27 20 62 75 74 20 74 68 65 79 20 | '.and.'openvpn-remote'.but.they. |
de4e0 | 63 61 6e 20 62 65 20 61 72 62 69 74 72 61 72 79 2e 00 4e 6f 74 69 63 65 00 4e 6f 77 20 63 6f 6e | can.be.arbitrary..Notice.Now.con |
de500 | 66 69 67 75 72 65 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 20 73 65 72 76 69 63 65 20 6f 6e | figure.conntrack-sync.service.on |
de520 | 20 60 60 72 6f 75 74 65 72 31 60 60 20 2a 2a 61 6e 64 2a 2a 20 60 60 72 6f 75 74 65 72 32 60 60 | .``router1``.**and**.``router2`` |
de540 | 00 4e 6f 77 20 74 68 65 20 6e 6f 74 65 64 20 70 75 62 6c 69 63 20 6b 65 79 73 20 73 68 6f 75 6c | .Now.the.noted.public.keys.shoul |
de560 | 64 20 62 65 20 65 6e 74 65 72 65 64 20 6f 6e 20 74 68 65 20 6f 70 70 6f 73 69 74 65 20 72 6f 75 | d.be.entered.on.the.opposite.rou |
de580 | 74 65 72 73 2e 00 4e 6f 77 20 77 65 20 61 64 64 20 74 68 65 20 6f 70 74 69 6f 6e 20 74 6f 20 74 | ters..Now.we.add.the.option.to.t |
de5a0 | 68 65 20 73 63 6f 70 65 2c 20 61 64 61 70 74 20 74 6f 20 79 6f 75 72 20 73 65 74 75 70 00 4e 6f | he.scope,.adapt.to.your.setup.No |
de5c0 | 77 20 77 65 20 6e 65 65 64 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 73 65 72 76 65 72 20 | w.we.need.to.specify.the.server. |
de5e0 | 6e 65 74 77 6f 72 6b 20 73 65 74 74 69 6e 67 73 2e 20 49 6e 20 61 6c 6c 20 63 61 73 65 73 20 77 | network.settings..In.all.cases.w |
de600 | 65 20 6e 65 65 64 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 73 75 62 6e 65 74 20 66 6f 72 | e.need.to.specify.the.subnet.for |
de620 | 20 63 6c 69 65 6e 74 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 73 2e 20 53 69 6e 63 65 20 | .client.tunnel.endpoints..Since. |
de640 | 77 65 20 77 61 6e 74 20 63 6c 69 65 6e 74 73 20 74 6f 20 61 63 63 65 73 73 20 61 20 73 70 65 63 | we.want.clients.to.access.a.spec |
de660 | 69 66 69 63 20 6e 65 74 77 6f 72 6b 20 62 65 68 69 6e 64 20 6f 75 72 20 72 6f 75 74 65 72 2c 20 | ific.network.behind.our.router,. |
de680 | 77 65 20 77 69 6c 6c 20 75 73 65 20 61 20 70 75 73 68 2d 72 6f 75 74 65 20 6f 70 74 69 6f 6e 20 | we.will.use.a.push-route.option. |
de6a0 | 66 6f 72 20 69 6e 73 74 61 6c 6c 69 6e 67 20 74 68 61 74 20 72 6f 75 74 65 20 6f 6e 20 63 6c 69 | for.installing.that.route.on.cli |
de6c0 | 65 6e 74 73 2e 00 4e 6f 77 20 77 68 65 6e 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 68 65 20 75 73 | ents..Now.when.connecting.the.us |
de6e0 | 65 72 20 77 69 6c 6c 20 66 69 72 73 74 20 62 65 20 61 73 6b 65 64 20 66 6f 72 20 74 68 65 20 70 | er.will.first.be.asked.for.the.p |
de700 | 61 73 73 77 6f 72 64 20 61 6e 64 20 74 68 65 6e 20 74 68 65 20 4f 54 50 20 6b 65 79 2e 00 4e 6f | assword.and.then.the.OTP.key..No |
de720 | 77 20 79 6f 75 20 61 72 65 20 72 65 61 64 79 20 74 6f 20 73 65 74 75 70 20 49 50 73 65 63 2e 20 | w.you.are.ready.to.setup.IPsec.. |
de740 | 54 68 65 20 6b 65 79 20 70 6f 69 6e 74 73 3a 00 4e 6f 77 20 79 6f 75 20 61 72 65 20 72 65 61 64 | The.key.points:.Now.you.are.read |
de760 | 79 20 74 6f 20 73 65 74 75 70 20 49 50 73 65 63 2e 20 59 6f 75 27 6c 6c 20 6e 65 65 64 20 74 6f | y.to.setup.IPsec..You'll.need.to |
de780 | 20 75 73 65 20 61 6e 20 49 44 20 69 6e 73 74 65 61 64 20 6f 66 20 61 64 64 72 65 73 73 20 66 6f | .use.an.ID.instead.of.address.fo |
de7a0 | 72 20 74 68 65 20 70 65 65 72 2e 00 4e 75 6d 62 65 72 20 6f 66 20 61 6e 74 65 6e 6e 61 73 20 6f | r.the.peer..Number.of.antennas.o |
de7c0 | 6e 20 74 68 69 73 20 63 61 72 64 00 4e 75 6d 62 65 72 20 6f 66 20 62 69 74 73 20 6f 66 20 63 6c | n.this.card.Number.of.bits.of.cl |
de7e0 | 69 65 6e 74 20 49 50 76 34 20 61 64 64 72 65 73 73 20 74 6f 20 70 61 73 73 20 77 68 65 6e 20 73 | ient.IPv4.address.to.pass.when.s |
de800 | 65 6e 64 69 6e 67 20 45 44 4e 53 20 43 6c 69 65 6e 74 20 53 75 62 6e 65 74 20 61 64 64 72 65 73 | ending.EDNS.Client.Subnet.addres |
de820 | 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 4e 75 6d 62 65 72 20 6f 66 20 6c 69 6e 65 73 20 74 | s.information..Number.of.lines.t |
de840 | 6f 20 62 65 20 64 69 73 70 6c 61 79 65 64 2c 20 64 65 66 61 75 6c 74 20 31 30 00 4f 53 50 46 00 | o.be.displayed,.default.10.OSPF. |
de860 | 4f 53 50 46 20 53 52 20 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 4f 53 50 46 20 69 73 20 61 | OSPF.SR..Configuration.OSPF.is.a |
de880 | 20 77 69 64 65 6c 79 20 75 73 65 64 20 49 47 50 20 69 6e 20 6c 61 72 67 65 20 65 6e 74 65 72 70 | .widely.used.IGP.in.large.enterp |
de8a0 | 72 69 73 65 20 6e 65 74 77 6f 72 6b 73 2e 00 4f 53 50 46 20 72 6f 75 74 69 6e 67 20 64 65 76 69 | rise.networks..OSPF.routing.devi |
de8c0 | 63 65 73 20 6e 6f 72 6d 61 6c 6c 79 20 64 69 73 63 6f 76 65 72 20 74 68 65 69 72 20 6e 65 69 67 | ces.normally.discover.their.neig |
de8e0 | 68 62 6f 72 73 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 62 79 20 6c 69 73 74 65 6e 69 6e 67 20 74 | hbors.dynamically.by.listening.t |
de900 | 6f 20 74 68 65 20 62 72 6f 61 64 63 61 73 74 20 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 68 65 6c | o.the.broadcast.or.multicast.hel |
de920 | 6c 6f 20 70 61 63 6b 65 74 73 20 6f 6e 20 74 68 65 20 6e 65 74 77 6f 72 6b 2e 20 42 65 63 61 75 | lo.packets.on.the.network..Becau |
de940 | 73 65 20 61 6e 20 4e 42 4d 41 20 6e 65 74 77 6f 72 6b 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 | se.an.NBMA.network.does.not.supp |
de960 | 6f 72 74 20 62 72 6f 61 64 63 61 73 74 20 28 6f 72 20 6d 75 6c 74 69 63 61 73 74 29 2c 20 74 68 | ort.broadcast.(or.multicast),.th |
de980 | 65 20 64 65 76 69 63 65 20 63 61 6e 6e 6f 74 20 64 69 73 63 6f 76 65 72 20 69 74 73 20 6e 65 69 | e.device.cannot.discover.its.nei |
de9a0 | 67 68 62 6f 72 73 20 64 79 6e 61 6d 69 63 61 6c 6c 79 2c 20 73 6f 20 79 6f 75 20 6d 75 73 74 20 | ghbors.dynamically,.so.you.must. |
de9c0 | 63 6f 6e 66 69 67 75 72 65 20 61 6c 6c 20 74 68 65 20 6e 65 69 67 68 62 6f 72 73 20 73 74 61 74 | configure.all.the.neighbors.stat |
de9e0 | 69 63 61 6c 6c 79 2e 00 4f 53 50 46 76 32 20 28 49 50 76 34 29 00 4f 53 50 46 76 33 20 28 49 50 | ically..OSPFv2.(IPv4).OSPFv3.(IP |
dea00 | 76 36 29 00 4f 54 50 2d 6b 65 79 20 67 65 6e 65 72 61 74 69 6f 6e 00 4f 66 66 6c 6f 61 64 69 6e | v6).OTP-key.generation.Offloadin |
dea20 | 67 00 4f 66 66 73 65 74 20 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 27 73 20 73 75 62 6e 65 74 20 | g.Offset.of.the.client's.subnet. |
dea40 | 69 6e 20 73 65 63 6f 6e 64 73 20 66 72 6f 6d 20 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 | in.seconds.from.Coordinated.Univ |
dea60 | 65 72 73 61 6c 20 54 69 6d 65 20 28 55 54 43 29 00 4f 66 74 65 6e 20 77 65 20 6e 65 65 64 20 74 | ersal.Time.(UTC).Often.we.need.t |
dea80 | 6f 20 65 6d 62 65 64 20 6f 6e 65 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 6e 6f 74 68 65 72 20 | o.embed.one.policy.into.another. |
deaa0 | 6f 6e 65 2e 20 49 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 64 6f 20 73 6f 20 6f 6e 20 | one..It.is.possible.to.do.so.on. |
deac0 | 63 6c 61 73 73 66 75 6c 20 70 6f 6c 69 63 69 65 73 2c 20 62 79 20 61 74 74 61 63 68 69 6e 67 20 | classful.policies,.by.attaching. |
deae0 | 61 20 6e 65 77 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 2e 20 46 6f 72 20 69 | a.new.policy.into.a.class..For.i |
deb00 | 6e 73 74 61 6e 63 65 2c 20 79 6f 75 20 6d 69 67 68 74 20 77 61 6e 74 20 74 6f 20 61 70 70 6c 79 | nstance,.you.might.want.to.apply |
deb20 | 20 64 69 66 66 65 72 65 6e 74 20 70 6f 6c 69 63 69 65 73 20 74 6f 20 74 68 65 20 64 69 66 66 65 | .different.policies.to.the.diffe |
deb40 | 72 65 6e 74 20 63 6c 61 73 73 65 73 20 6f 66 20 61 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 70 6f | rent.classes.of.a.Round-Robin.po |
deb60 | 6c 69 63 79 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 4f 66 74 65 6e 20 | licy.you.have.configured..Often. |
deb80 | 79 6f 75 20 77 69 6c 6c 20 61 6c 73 6f 20 68 61 76 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 | you.will.also.have.to.configure. |
deba0 | 79 6f 75 72 20 2a 64 65 66 61 75 6c 74 2a 20 74 72 61 66 66 69 63 20 69 6e 20 74 68 65 20 73 61 | your.*default*.traffic.in.the.sa |
debc0 | 6d 65 20 77 61 79 20 79 6f 75 20 64 6f 20 77 69 74 68 20 61 20 63 6c 61 73 73 2e 20 2a 44 65 66 | me.way.you.do.with.a.class..*Def |
debe0 | 61 75 6c 74 2a 20 63 61 6e 20 62 65 20 63 6f 6e 73 69 64 65 72 65 64 20 61 20 63 6c 61 73 73 20 | ault*.can.be.considered.a.class. |
dec00 | 61 73 20 69 74 20 62 65 68 61 76 65 73 20 6c 69 6b 65 20 74 68 61 74 2e 20 49 74 20 63 6f 6e 74 | as.it.behaves.like.that..It.cont |
dec20 | 61 69 6e 73 20 61 6e 79 20 74 72 61 66 66 69 63 20 74 68 61 74 20 64 69 64 20 6e 6f 74 20 6d 61 | ains.any.traffic.that.did.not.ma |
dec40 | 74 63 68 20 61 6e 79 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 63 6c 61 73 73 65 73 2c 20 | tch.any.of.the.defined.classes,. |
dec60 | 73 6f 20 69 74 20 69 73 20 6c 69 6b 65 20 61 6e 20 6f 70 65 6e 20 63 6c 61 73 73 2c 20 61 20 63 | so.it.is.like.an.open.class,.a.c |
dec80 | 6c 61 73 73 20 77 69 74 68 6f 75 74 20 6d 61 74 63 68 69 6e 67 20 66 69 6c 74 65 72 73 2e 00 4f | lass.without.matching.filters..O |
deca0 | 6e 20 61 63 74 69 76 65 20 72 6f 75 74 65 72 20 72 75 6e 3a 00 4f 6e 20 62 6f 74 68 20 73 69 64 | n.active.router.run:.On.both.sid |
decc0 | 65 73 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 61 20 73 65 6c 66 2d | es,.you.need.to.generate.a.self- |
dece0 | 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 2c 20 70 72 65 66 65 72 72 61 62 6c 79 20 | signed.certificate,.preferrably. |
ded00 | 75 73 69 6e 67 20 74 68 65 20 22 65 63 22 20 28 65 6c 6c 69 70 74 69 63 20 63 75 72 76 65 29 20 | using.the."ec".(elliptic.curve). |
ded20 | 74 79 70 65 2e 20 59 6f 75 20 63 61 6e 20 67 65 6e 65 72 61 74 65 20 74 68 65 6d 20 62 79 20 65 | type..You.can.generate.them.by.e |
ded40 | 78 65 63 75 74 69 6e 67 20 63 6f 6d 6d 61 6e 64 20 60 60 72 75 6e 20 67 65 6e 65 72 61 74 65 20 | xecuting.command.``run.generate. |
ded60 | 70 6b 69 20 63 65 72 74 69 66 69 63 61 74 65 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 69 6e 73 74 | pki.certificate.self-signed.inst |
ded80 | 61 6c 6c 20 3c 6e 61 6d 65 3e 60 60 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | all.<name>``.in.the.configuratio |
deda0 | 6e 20 6d 6f 64 65 2e 20 4f 6e 63 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 69 73 20 63 6f 6d 70 | n.mode..Once.the.command.is.comp |
dedc0 | 6c 65 74 65 2c 20 69 74 20 77 69 6c 6c 20 61 64 64 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 | lete,.it.will.add.the.certificat |
dede0 | 65 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 65 73 73 69 6f 6e 2c 20 | e.to.the.configuration.session,. |
dee00 | 74 6f 20 74 68 65 20 60 60 70 6b 69 60 60 20 73 75 62 74 72 65 65 2e 20 59 6f 75 20 63 61 6e 20 | to.the.``pki``.subtree..You.can. |
dee20 | 74 68 65 6e 20 72 65 76 69 65 77 20 74 68 65 20 70 72 6f 70 6f 73 65 64 20 63 68 61 6e 67 65 73 | then.review.the.proposed.changes |
dee40 | 20 61 6e 64 20 63 6f 6d 6d 69 74 20 74 68 65 6d 2e 00 4f 6e 20 6c 6f 77 20 72 61 74 65 73 20 28 | .and.commit.them..On.low.rates.( |
dee60 | 62 65 6c 6f 77 20 34 30 4d 62 69 74 29 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 74 75 | below.40Mbit).you.may.want.to.tu |
dee80 | 6e 65 20 60 71 75 61 6e 74 75 6d 60 20 64 6f 77 6e 20 74 6f 20 73 6f 6d 65 74 68 69 6e 67 20 6c | ne.`quantum`.down.to.something.l |
deea0 | 69 6b 65 20 33 30 30 20 62 79 74 65 73 2e 00 4f 6e 20 6d 6f 73 74 20 73 63 65 6e 61 72 69 6f 73 | ike.300.bytes..On.most.scenarios |
deec0 | 2c 20 74 68 65 72 65 27 73 20 6e 6f 20 6e 65 65 64 20 74 6f 20 63 68 61 6e 67 65 20 73 70 65 63 | ,.there's.no.need.to.change.spec |
deee0 | 69 66 69 63 20 70 61 72 61 6d 65 74 65 72 73 2c 20 61 6e 64 20 75 73 69 6e 67 20 64 65 66 61 75 | ific.parameters,.and.using.defau |
def00 | 6c 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 65 6e 6f 75 67 68 2e 20 42 75 74 20 | lt.configuration.is.enough..But. |
def20 | 74 68 65 72 65 20 61 72 65 20 63 61 73 65 73 20 77 65 72 65 20 65 78 74 72 61 20 63 6f 6e 66 69 | there.are.cases.were.extra.confi |
def40 | 67 75 72 61 74 69 6f 6e 20 69 73 20 6e 65 65 64 65 64 2e 00 4f 6e 20 73 74 61 6e 64 62 79 20 72 | guration.is.needed..On.standby.r |
def60 | 6f 75 74 65 72 20 72 75 6e 3a 00 4f 6e 20 73 79 73 74 65 6d 73 20 77 69 74 68 20 6d 75 6c 74 69 | outer.run:.On.systems.with.multi |
def80 | 70 6c 65 20 72 65 64 75 6e 64 61 6e 74 20 75 70 6c 69 6e 6b 73 20 61 6e 64 20 72 6f 75 74 65 73 | ple.redundant.uplinks.and.routes |
defa0 | 2c 20 69 74 27 73 20 61 20 67 6f 6f 64 20 69 64 65 61 20 74 6f 20 75 73 65 20 61 20 64 65 64 69 | ,.it's.a.good.idea.to.use.a.dedi |
defc0 | 63 61 74 65 64 20 61 64 64 72 65 73 73 20 66 6f 72 20 6d 61 6e 61 67 65 6d 65 6e 74 20 61 6e 64 | cated.address.for.management.and |
defe0 | 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 2e 20 48 6f 77 65 | .dynamic.routing.protocols..Howe |
df000 | 76 65 72 2c 20 61 73 73 69 67 6e 69 6e 67 20 74 68 61 74 20 61 64 64 72 65 73 73 20 74 6f 20 61 | ver,.assigning.that.address.to.a |
df020 | 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 20 69 73 20 72 69 73 6b 79 3a 20 69 66 20 74 68 61 74 | .physical.link.is.risky:.if.that |
df040 | 20 6c 69 6e 6b 20 67 6f 65 73 20 64 6f 77 6e 2c 20 74 68 61 74 20 61 64 64 72 65 73 73 20 77 69 | .link.goes.down,.that.address.wi |
df060 | 6c 6c 20 62 65 63 6f 6d 65 20 69 6e 61 63 63 65 73 73 69 62 6c 65 2e 20 41 20 63 6f 6d 6d 6f 6e | ll.become.inaccessible..A.common |
df080 | 20 73 6f 6c 75 74 69 6f 6e 20 69 73 20 74 6f 20 61 73 73 69 67 6e 20 74 68 65 20 6d 61 6e 61 67 | .solution.is.to.assign.the.manag |
df0a0 | 65 6d 65 6e 74 20 61 64 64 72 65 73 73 20 74 6f 20 61 20 6c 6f 6f 70 62 61 63 6b 20 6f 72 20 61 | ement.address.to.a.loopback.or.a |
df0c0 | 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 61 64 76 65 72 74 69 73 65 20 74 | .dummy.interface.and.advertise.t |
df0e0 | 68 61 74 20 61 64 64 72 65 73 73 20 76 69 61 20 61 6c 6c 20 70 68 79 73 69 63 61 6c 20 6c 69 6e | hat.address.via.all.physical.lin |
df100 | 6b 73 2c 20 73 6f 20 74 68 61 74 20 69 74 27 73 20 72 65 61 63 68 61 62 6c 65 20 74 68 72 6f 75 | ks,.so.that.it's.reachable.throu |
df120 | 67 68 20 61 6e 79 20 6f 66 20 74 68 65 6d 2e 20 53 69 6e 63 65 20 69 6e 20 4c 69 6e 75 78 2d 62 | gh.any.of.them..Since.in.Linux-b |
df140 | 61 73 65 64 20 73 79 73 74 65 6d 73 2c 20 74 68 65 72 65 20 63 61 6e 20 62 65 20 6f 6e 6c 79 20 | ased.systems,.there.can.be.only. |
df160 | 6f 6e 65 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 2c 20 69 74 27 73 20 62 65 74 | one.loopback.interface,.it's.bet |
df180 | 74 65 72 20 74 6f 20 75 73 65 20 61 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 | ter.to.use.a.dummy.interface.for |
df1a0 | 20 74 68 61 74 20 70 75 72 70 6f 73 65 2c 20 73 69 6e 63 65 20 74 68 65 79 20 63 61 6e 20 62 65 | .that.purpose,.since.they.can.be |
df1c0 | 20 61 64 64 65 64 2c 20 72 65 6d 6f 76 65 64 2c 20 61 6e 64 20 74 61 6b 65 6e 20 75 70 20 61 6e | .added,.removed,.and.taken.up.an |
df1e0 | 64 20 64 6f 77 6e 20 69 6e 64 65 70 65 6e 64 65 6e 74 6c 79 2e 00 4f 6e 20 74 68 65 20 4c 45 46 | d.down.independently..On.the.LEF |
df200 | 54 20 28 73 74 61 74 69 63 20 61 64 64 72 65 73 73 29 3a 00 4f 6e 20 74 68 65 20 4c 45 46 54 3a | T.(static.address):.On.the.LEFT: |
df220 | 00 4f 6e 20 74 68 65 20 52 49 47 48 54 20 28 64 79 6e 61 6d 69 63 20 61 64 64 72 65 73 73 29 3a | .On.the.RIGHT.(dynamic.address): |
df240 | 00 4f 6e 20 74 68 65 20 52 49 47 48 54 2c 20 73 65 74 75 70 20 62 79 20 61 6e 61 6c 6f 67 79 20 | .On.the.RIGHT,.setup.by.analogy. |
df260 | 61 6e 64 20 73 77 61 70 20 6c 6f 63 61 6c 20 61 6e 64 20 72 65 6d 6f 74 65 20 61 64 64 72 65 73 | and.swap.local.and.remote.addres |
df280 | 73 65 73 2e 00 4f 6e 20 74 68 65 20 52 49 47 48 54 3a 00 4f 6e 20 74 68 65 20 61 63 74 69 76 65 | ses..On.the.RIGHT:.On.the.active |
df2a0 | 20 72 6f 75 74 65 72 2c 20 79 6f 75 20 73 68 6f 75 6c 64 20 68 61 76 65 20 69 6e 66 6f 72 6d 61 | .router,.you.should.have.informa |
df2c0 | 74 69 6f 6e 20 69 6e 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 2d 63 61 63 68 65 20 6f 66 20 63 6f | tion.in.the.internal-cache.of.co |
df2e0 | 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 2e 20 54 68 65 20 73 61 6d 65 20 63 75 72 72 65 6e 74 20 61 | nntrack-sync..The.same.current.a |
df300 | 63 74 69 76 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 6e 75 6d 62 65 72 20 73 68 6f 75 6c 64 20 | ctive.connections.number.should. |
df320 | 62 65 20 73 68 6f 77 6e 20 69 6e 20 74 68 65 20 65 78 74 65 72 6e 61 6c 2d 63 61 63 68 65 20 6f | be.shown.in.the.external-cache.o |
df340 | 66 20 74 68 65 20 73 74 61 6e 64 62 79 20 72 6f 75 74 65 72 00 4f 6e 20 74 68 65 20 69 6e 69 74 | f.the.standby.router.On.the.init |
df360 | 69 61 74 6f 72 2c 20 77 65 20 6e 65 65 64 20 74 6f 20 73 65 74 20 74 68 65 20 72 65 6d 6f 74 65 | iator,.we.need.to.set.the.remote |
df380 | 2d 69 64 20 6f 70 74 69 6f 6e 20 73 6f 20 74 68 61 74 20 69 74 20 63 61 6e 20 69 64 65 6e 74 69 | -id.option.so.that.it.can.identi |
df3a0 | 66 79 20 49 4b 45 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 74 68 65 20 72 65 73 70 6f 6e 64 65 | fy.IKE.traffic.from.the.responde |
df3c0 | 72 20 63 6f 72 72 65 63 74 6c 79 2e 00 4f 6e 20 74 68 65 20 69 6e 69 74 69 61 74 6f 72 2c 20 77 | r.correctly..On.the.initiator,.w |
df3e0 | 65 20 73 65 74 20 74 68 65 20 70 65 65 72 20 61 64 64 72 65 73 73 20 74 6f 20 69 74 73 20 70 75 | e.set.the.peer.address.to.its.pu |
df400 | 62 6c 69 63 20 61 64 64 72 65 73 73 2c 20 62 75 74 20 6f 6e 20 74 68 65 20 72 65 73 70 6f 6e 64 | blic.address,.but.on.the.respond |
df420 | 65 72 20 77 65 20 6f 6e 6c 79 20 73 65 74 20 74 68 65 20 69 64 2e 00 4f 6e 20 74 68 65 20 6c 61 | er.we.only.set.the.id..On.the.la |
df440 | 73 74 20 68 6f 70 20 72 6f 75 74 65 72 20 69 66 20 69 74 20 69 73 20 64 65 73 69 72 65 64 20 74 | st.hop.router.if.it.is.desired.t |
df460 | 6f 20 6e 6f 74 20 73 77 69 74 63 68 20 6f 76 65 72 20 74 6f 20 74 68 65 20 53 50 54 20 74 72 65 | o.not.switch.over.to.the.SPT.tre |
df480 | 65 20 63 6f 6e 66 69 67 75 72 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2e 00 4f 6e 20 74 68 65 | e.configure.this.command..On.the |
df4a0 | 20 72 65 73 70 6f 6e 64 65 72 2c 20 77 65 20 6e 65 65 64 20 74 6f 20 73 65 74 20 74 68 65 20 6c | .responder,.we.need.to.set.the.l |
df4c0 | 6f 63 61 6c 20 69 64 20 73 6f 20 74 68 61 74 20 69 6e 69 74 69 61 74 6f 72 20 63 61 6e 20 6b 6e | ocal.id.so.that.initiator.can.kn |
df4e0 | 6f 77 20 77 68 6f 27 73 20 74 61 6c 6b 69 6e 67 20 74 6f 20 69 74 20 66 6f 72 20 74 68 65 20 70 | ow.who's.talking.to.it.for.the.p |
df500 | 6f 69 6e 74 20 23 33 20 74 6f 20 77 6f 72 6b 2e 00 4f 6e 63 65 20 61 20 63 6c 61 73 73 20 68 61 | oint.#3.to.work..Once.a.class.ha |
df520 | 73 20 61 20 66 69 6c 74 65 72 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 79 6f 75 20 77 69 6c 6c 20 | s.a.filter.configured,.you.will. |
df540 | 61 6c 73 6f 20 68 61 76 65 20 74 6f 20 64 65 66 69 6e 65 20 77 68 61 74 20 79 6f 75 20 77 61 6e | also.have.to.define.what.you.wan |
df560 | 74 20 74 6f 20 64 6f 20 77 69 74 68 20 74 68 65 20 74 72 61 66 66 69 63 20 6f 66 20 74 68 61 74 | t.to.do.with.the.traffic.of.that |
df580 | 20 63 6c 61 73 73 2c 20 77 68 61 74 20 73 70 65 63 69 66 69 63 20 54 72 61 66 66 69 63 2d 43 6f | .class,.what.specific.Traffic-Co |
df5a0 | 6e 74 72 6f 6c 20 74 72 65 61 74 6d 65 6e 74 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 67 69 76 65 | ntrol.treatment.you.want.to.give |
df5c0 | 20 69 74 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 64 69 66 66 65 72 65 6e 74 20 70 6f 73 | .it..You.will.have.different.pos |
df5e0 | 73 69 62 69 6c 69 74 69 65 73 20 64 65 70 65 6e 64 69 6e 67 20 6f 6e 20 74 68 65 20 54 72 61 66 | sibilities.depending.on.the.Traf |
df600 | 66 69 63 20 50 6f 6c 69 63 79 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 2e 00 | fic.Policy.you.are.configuring.. |
df620 | 4f 6e 63 65 20 61 20 6e 65 69 67 68 62 6f 72 20 68 61 73 20 62 65 65 6e 20 66 6f 75 6e 64 2c 20 | Once.a.neighbor.has.been.found,. |
df640 | 74 68 65 20 65 6e 74 72 79 20 69 73 20 63 6f 6e 73 69 64 65 72 65 64 20 74 6f 20 62 65 20 76 61 | the.entry.is.considered.to.be.va |
df660 | 6c 69 64 20 66 6f 72 20 61 74 20 6c 65 61 73 74 20 66 6f 72 20 74 68 69 73 20 73 70 65 63 69 66 | lid.for.at.least.for.this.specif |
df680 | 69 63 20 74 69 6d 65 2e 20 41 6e 20 65 6e 74 72 79 27 73 20 76 61 6c 69 64 69 74 79 20 77 69 6c | ic.time..An.entry's.validity.wil |
df6a0 | 6c 20 62 65 20 65 78 74 65 6e 64 65 64 20 69 66 20 69 74 20 72 65 63 65 69 76 65 73 20 70 6f 73 | l.be.extended.if.it.receives.pos |
df6c0 | 69 74 69 76 65 20 66 65 65 64 62 61 63 6b 20 66 72 6f 6d 20 68 69 67 68 65 72 20 6c 65 76 65 6c | itive.feedback.from.higher.level |
df6e0 | 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 4f 6e 63 65 20 61 20 72 6f 75 74 65 20 69 73 20 61 73 73 65 | .protocols..Once.a.route.is.asse |
df700 | 73 73 65 64 20 61 20 70 65 6e 61 6c 74 79 2c 20 74 68 65 20 70 65 6e 61 6c 74 79 20 69 73 20 64 | ssed.a.penalty,.the.penalty.is.d |
df720 | 65 63 72 65 61 73 65 64 20 62 79 20 68 61 6c 66 20 65 61 63 68 20 74 69 6d 65 20 61 20 70 72 65 | ecreased.by.half.each.time.a.pre |
df740 | 64 65 66 69 6e 65 64 20 61 6d 6f 75 6e 74 20 6f 66 20 74 69 6d 65 20 65 6c 61 70 73 65 73 20 28 | defined.amount.of.time.elapses.( |
df760 | 68 61 6c 66 2d 6c 69 66 65 2d 74 69 6d 65 29 2e 20 57 68 65 6e 20 74 68 65 20 61 63 63 75 6d 75 | half-life-time)..When.the.accumu |
df780 | 6c 61 74 65 64 20 70 65 6e 61 6c 74 69 65 73 20 66 61 6c 6c 20 62 65 6c 6f 77 20 61 20 70 72 65 | lated.penalties.fall.below.a.pre |
df7a0 | 64 65 66 69 6e 65 64 20 74 68 72 65 73 68 6f 6c 64 20 28 72 65 75 73 65 2d 76 61 6c 75 65 29 2c | defined.threshold.(reuse-value), |
df7c0 | 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 75 6e 73 75 70 70 72 65 73 73 65 64 20 61 6e 64 20 61 | .the.route.is.unsuppressed.and.a |
df7e0 | 64 64 65 64 20 62 61 63 6b 20 69 6e 74 6f 20 74 68 65 20 42 47 50 20 72 6f 75 74 69 6e 67 20 74 | dded.back.into.the.BGP.routing.t |
df800 | 61 62 6c 65 2e 00 4f 6e 63 65 20 61 20 74 72 61 66 66 69 63 2d 70 6f 6c 69 63 79 20 69 73 20 63 | able..Once.a.traffic-policy.is.c |
df820 | 72 65 61 74 65 64 2c 20 79 6f 75 20 63 61 6e 20 61 70 70 6c 79 20 69 74 20 74 6f 20 61 6e 20 69 | reated,.you.can.apply.it.to.an.i |
df840 | 6e 74 65 72 66 61 63 65 3a 00 4f 6e 63 65 20 63 72 65 61 74 65 64 20 69 6e 20 74 68 65 20 73 79 | nterface:.Once.created.in.the.sy |
df860 | 73 74 65 6d 2c 20 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 | stem,.Pseudo-Ethernet.interfaces |
df880 | 20 63 61 6e 20 62 65 20 72 65 66 65 72 65 6e 63 65 64 20 69 6e 20 74 68 65 20 65 78 61 63 74 20 | .can.be.referenced.in.the.exact. |
df8a0 | 73 61 6d 65 20 77 61 79 20 61 73 20 6f 74 68 65 72 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 | same.way.as.other.Ethernet.inter |
df8c0 | 66 61 63 65 73 2e 20 4e 6f 74 65 73 20 61 62 6f 75 74 20 75 73 69 6e 67 20 50 73 65 75 64 6f 2d | faces..Notes.about.using.Pseudo- |
df8e0 | 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 3a 00 4f 6e 63 65 20 66 6c 6f 77 20 | .Ethernet.interfaces:.Once.flow. |
df900 | 61 63 63 6f 75 6e 74 69 6e 67 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 6e 20 69 | accounting.is.configured.on.an.i |
df920 | 6e 74 65 72 66 61 63 65 73 20 69 74 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 61 62 69 6c 69 74 | nterfaces.it.provides.the.abilit |
df940 | 79 20 74 6f 20 64 69 73 70 6c 61 79 20 63 61 70 74 75 72 65 64 20 6e 65 74 77 6f 72 6b 20 74 72 | y.to.display.captured.network.tr |
df960 | 61 66 66 69 63 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 61 6c 6c 20 63 6f 6e 66 69 67 | affic.information.for.all.config |
df980 | 75 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 2e 00 4f 6e 63 65 20 74 68 65 20 63 6f 6d 6d 61 6e | ured.interfaces..Once.the.comman |
df9a0 | 64 20 69 73 20 63 6f 6d 70 6c 65 74 65 64 2c 20 69 74 20 77 69 6c 6c 20 61 64 64 20 74 68 65 20 | d.is.completed,.it.will.add.the. |
df9c0 | 63 65 72 74 69 66 69 63 61 74 65 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | certificate.to.the.configuration |
df9e0 | 20 73 65 73 73 69 6f 6e 2c 20 74 6f 20 74 68 65 20 70 6b 69 20 73 75 62 74 72 65 65 2e 20 59 6f | .session,.to.the.pki.subtree..Yo |
dfa00 | 75 20 63 61 6e 20 74 68 65 6e 20 72 65 76 69 65 77 20 74 68 65 20 70 72 6f 70 6f 73 65 64 20 63 | u.can.then.review.the.proposed.c |
dfa20 | 68 61 6e 67 65 73 20 61 6e 64 20 63 6f 6d 6d 69 74 20 74 68 65 6d 2e 00 4f 6e 63 65 20 74 68 65 | hanges.and.commit.them..Once.the |
dfa40 | 20 66 69 72 73 74 20 70 61 63 6b 65 74 20 6f 66 20 74 68 65 20 66 6c 6f 77 20 73 75 63 63 65 73 | .first.packet.of.the.flow.succes |
dfa60 | 73 66 75 6c 6c 79 20 67 6f 65 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 49 50 20 66 6f 72 77 61 | sfully.goes.through.the.IP.forwa |
dfa80 | 72 64 69 6e 67 20 70 61 74 68 20 28 62 6c 61 63 6b 20 63 69 72 63 6c 65 73 20 70 61 74 68 29 2c | rding.path.(black.circles.path), |
dfaa0 | 20 66 72 6f 6d 20 74 68 65 20 73 65 63 6f 6e 64 20 70 61 63 6b 65 74 20 6f 6e 2c 20 79 6f 75 20 | .from.the.second.packet.on,.you. |
dfac0 | 6d 69 67 68 74 20 64 65 63 69 64 65 20 74 6f 20 6f 66 66 6c 6f 61 64 20 74 68 65 20 66 6c 6f 77 | might.decide.to.offload.the.flow |
dfae0 | 20 74 6f 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 74 68 72 6f 75 67 68 20 79 6f 75 72 20 72 | .to.the.flowtable.through.your.r |
dfb00 | 75 6c 65 73 65 74 2e 20 54 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 69 6e 66 72 61 73 74 72 75 63 | uleset..The.flowtable.infrastruc |
dfb20 | 74 75 72 65 20 70 72 6f 76 69 64 65 73 20 61 20 72 75 6c 65 20 61 63 74 69 6f 6e 20 74 68 61 74 | ture.provides.a.rule.action.that |
dfb40 | 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 73 70 65 63 69 66 79 20 77 68 65 6e 20 74 6f 20 61 | .allows.you.to.specify.when.to.a |
dfb60 | 64 64 20 61 20 66 6c 6f 77 20 74 6f 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 28 4f 6e 20 66 | dd.a.flow.to.the.flowtable.(On.f |
dfb80 | 6f 72 77 61 72 64 20 66 69 6c 74 65 72 69 6e 67 2c 20 72 65 64 20 63 69 72 63 6c 65 20 6e 75 6d | orward.filtering,.red.circle.num |
dfba0 | 62 65 72 20 36 29 00 4f 6e 63 65 20 74 68 65 20 6c 6f 63 61 6c 20 74 75 6e 6e 65 6c 20 65 6e 64 | ber.6).Once.the.local.tunnel.end |
dfbc0 | 70 6f 69 6e 74 20 60 60 73 65 74 20 73 65 72 76 69 63 65 20 70 70 70 6f 65 2d 73 65 72 76 65 72 | point.``set.service.pppoe-server |
dfbe0 | 20 67 61 74 65 77 61 79 2d 61 64 64 72 65 73 73 20 27 31 30 2e 31 2e 31 2e 32 27 60 60 20 68 61 | .gateway-address.'10.1.1.2'``.ha |
dfc00 | 73 20 62 65 65 6e 20 64 65 66 69 6e 65 64 2c 20 74 68 65 20 63 6c 69 65 6e 74 20 49 50 20 70 6f | s.been.defined,.the.client.IP.po |
dfc20 | 6f 6c 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 20 64 65 66 69 6e 65 64 20 61 73 20 61 20 72 61 | ol.can.be.either.defined.as.a.ra |
dfc40 | 6e 67 65 20 6f 72 20 61 73 20 73 75 62 6e 65 74 20 75 73 69 6e 67 20 43 49 44 52 20 6e 6f 74 61 | nge.or.as.subnet.using.CIDR.nota |
dfc60 | 74 69 6f 6e 2e 20 49 66 20 74 68 65 20 43 49 44 52 20 6e 6f 74 61 74 69 6f 6e 20 69 73 20 75 73 | tion..If.the.CIDR.notation.is.us |
dfc80 | 65 64 2c 20 6d 75 6c 74 69 70 6c 65 20 73 75 62 6e 65 74 73 20 63 61 6e 20 62 65 20 73 65 74 75 | ed,.multiple.subnets.can.be.setu |
dfca0 | 70 20 77 68 69 63 68 20 61 72 65 20 75 73 65 64 20 73 65 71 75 65 6e 74 69 61 6c 6c 79 2e 00 4f | p.which.are.used.sequentially..O |
dfcc0 | 6e 63 65 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 73 20 61 72 65 20 73 65 74 20 66 | nce.the.matching.rules.are.set.f |
dfce0 | 6f 72 20 61 20 63 6c 61 73 73 2c 20 79 6f 75 20 63 61 6e 20 73 74 61 72 74 20 63 6f 6e 66 69 67 | or.a.class,.you.can.start.config |
dfd00 | 75 72 69 6e 67 20 68 6f 77 20 79 6f 75 20 77 61 6e 74 20 6d 61 74 63 68 69 6e 67 20 74 72 61 66 | uring.how.you.want.matching.traf |
dfd20 | 66 69 63 20 74 6f 20 62 65 68 61 76 65 2e 00 4f 6e 63 65 20 74 68 65 20 75 73 65 72 20 69 73 20 | fic.to.behave..Once.the.user.is. |
dfd40 | 63 6f 6e 6e 65 63 74 65 64 2c 20 74 68 65 20 75 73 65 72 20 73 65 73 73 69 6f 6e 20 69 73 20 75 | connected,.the.user.session.is.u |
dfd60 | 73 69 6e 67 20 74 68 65 20 73 65 74 20 6c 69 6d 69 74 73 20 61 6e 64 20 63 61 6e 20 62 65 20 64 | sing.the.set.limits.and.can.be.d |
dfd80 | 69 73 70 6c 61 79 65 64 20 76 69 61 20 27 73 68 6f 77 20 70 70 70 6f 65 2d 73 65 72 76 65 72 20 | isplayed.via.'show.pppoe-server. |
dfda0 | 73 65 73 73 69 6f 6e 73 27 2e 00 4f 6e 63 65 20 74 68 65 20 75 73 65 72 20 69 73 20 63 6f 6e 6e | sessions'..Once.the.user.is.conn |
dfdc0 | 65 63 74 65 64 2c 20 74 68 65 20 75 73 65 72 20 73 65 73 73 69 6f 6e 20 69 73 20 75 73 69 6e 67 | ected,.the.user.session.is.using |
dfde0 | 20 74 68 65 20 73 65 74 20 6c 69 6d 69 74 73 20 61 6e 64 20 63 61 6e 20 62 65 20 64 69 73 70 6c | .the.set.limits.and.can.be.displ |
dfe00 | 61 79 65 64 20 76 69 61 20 60 60 73 68 6f 77 20 70 70 70 6f 65 2d 73 65 72 76 65 72 20 73 65 73 | ayed.via.``show.pppoe-server.ses |
dfe20 | 73 69 6f 6e 73 60 60 2e 00 4f 6e 63 65 20 79 6f 75 20 63 6f 6d 6d 69 74 20 74 68 65 20 61 62 6f | sions``..Once.you.commit.the.abo |
dfe40 | 76 65 20 63 68 61 6e 67 65 73 20 79 6f 75 20 63 61 6e 20 63 72 65 61 74 65 20 61 20 63 6f 6e 66 | ve.changes.you.can.create.a.conf |
dfe60 | 69 67 20 66 69 6c 65 20 69 6e 20 74 68 65 20 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2f 6f 63 73 65 | ig.file.in.the./config/auth/ocse |
dfe80 | 72 76 2f 63 6f 6e 66 69 67 2d 70 65 72 2d 75 73 65 72 20 64 69 72 65 63 74 6f 72 79 20 74 68 61 | rv/config-per-user.directory.tha |
dfea0 | 74 20 6d 61 74 63 68 65 73 20 61 20 75 73 65 72 6e 61 6d 65 20 6f 66 20 61 20 75 73 65 72 20 79 | t.matches.a.username.of.a.user.y |
dfec0 | 6f 75 20 68 61 76 65 20 63 72 65 61 74 65 64 20 65 2e 67 2e 20 22 74 73 74 22 2e 20 4e 6f 77 20 | ou.have.created.e.g.."tst"..Now. |
dfee0 | 77 68 65 6e 20 6c 6f 67 67 69 6e 67 20 69 6e 20 77 69 74 68 20 74 68 65 20 22 74 73 74 22 20 75 | when.logging.in.with.the."tst".u |
dff00 | 73 65 72 20 74 68 65 20 63 6f 6e 66 69 67 20 6f 70 74 69 6f 6e 73 20 79 6f 75 20 73 65 74 20 69 | ser.the.config.options.you.set.i |
dff20 | 6e 20 74 68 69 73 20 66 69 6c 65 20 77 69 6c 6c 20 62 65 20 6c 6f 61 64 65 64 2e 00 4f 6e 63 65 | n.this.file.will.be.loaded..Once |
dff40 | 20 79 6f 75 20 68 61 76 65 20 61 6e 20 45 74 68 65 72 6e 65 74 20 64 65 76 69 63 65 20 63 6f 6e | .you.have.an.Ethernet.device.con |
dff60 | 6e 65 63 74 65 64 2c 20 69 2e 65 2e 20 60 65 74 68 30 60 2c 20 74 68 65 6e 20 79 6f 75 20 63 61 | nected,.i.e..`eth0`,.then.you.ca |
dff80 | 6e 20 63 6f 6e 66 69 67 75 72 65 20 69 74 20 74 6f 20 6f 70 65 6e 20 74 68 65 20 50 50 50 6f 45 | n.configure.it.to.open.the.PPPoE |
dffa0 | 20 73 65 73 73 69 6f 6e 20 66 6f 72 20 79 6f 75 20 61 6e 64 20 79 6f 75 72 20 44 53 4c 20 54 72 | .session.for.you.and.your.DSL.Tr |
dffc0 | 61 6e 73 63 65 69 76 65 72 20 28 4d 6f 64 65 6d 2f 52 6f 75 74 65 72 29 20 6a 75 73 74 20 61 63 | ansceiver.(Modem/Router).just.ac |
dffe0 | 74 73 20 74 6f 20 74 72 61 6e 73 6c 61 74 65 20 79 6f 75 72 20 6d 65 73 73 61 67 65 73 20 69 6e | ts.to.translate.your.messages.in |
e0000 | 20 61 20 77 61 79 20 74 68 61 74 20 76 44 53 4c 2f 61 44 53 4c 20 75 6e 64 65 72 73 74 61 6e 64 | .a.way.that.vDSL/aDSL.understand |
e0020 | 73 2e 00 4f 6e 63 65 20 79 6f 75 20 68 61 76 65 20 73 65 74 75 70 20 79 6f 75 72 20 53 53 54 50 | s..Once.you.have.setup.your.SSTP |
e0040 | 20 73 65 72 76 65 72 20 74 68 65 72 65 20 63 6f 6d 65 73 20 74 68 65 20 74 69 6d 65 20 74 6f 20 | .server.there.comes.the.time.to. |
e0060 | 64 6f 20 73 6f 6d 65 20 62 61 73 69 63 20 74 65 73 74 69 6e 67 2e 20 54 68 65 20 4c 69 6e 75 78 | do.some.basic.testing..The.Linux |
e0080 | 20 63 6c 69 65 6e 74 20 75 73 65 64 20 66 6f 72 20 74 65 73 74 69 6e 67 20 69 73 20 63 61 6c 6c | .client.used.for.testing.is.call |
e00a0 | 65 64 20 73 73 74 70 63 5f 2e 20 73 73 74 70 63 5f 20 72 65 71 75 69 72 65 73 20 61 20 50 50 50 | ed.sstpc_..sstpc_.requires.a.PPP |
e00c0 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 70 65 65 72 20 66 69 6c 65 2e 00 4f 6e 63 65 20 79 | .configuration/peer.file..Once.y |
e00e0 | 6f 75 72 20 72 6f 75 74 65 72 73 20 61 72 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 72 65 | our.routers.are.configured.to.re |
e0100 | 6a 65 63 74 20 52 50 4b 49 2d 69 6e 76 61 6c 69 64 20 70 72 65 66 69 78 65 73 2c 20 79 6f 75 20 | ject.RPKI-invalid.prefixes,.you. |
e0120 | 63 61 6e 20 74 65 73 74 20 77 68 65 74 68 65 72 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 | can.test.whether.the.configurati |
e0140 | 6f 6e 20 69 73 20 77 6f 72 6b 69 6e 67 20 63 6f 72 72 65 63 74 6c 79 20 75 73 69 6e 67 20 74 68 | on.is.working.correctly.using.th |
e0160 | 65 20 60 52 49 50 45 20 4c 61 62 73 20 52 50 4b 49 20 54 65 73 74 60 5f 20 65 78 70 65 72 69 6d | e.`RIPE.Labs.RPKI.Test`_.experim |
e0180 | 65 6e 74 61 6c 20 74 6f 6f 6c 2e 00 4f 6e 65 20 54 79 70 65 2d 33 20 73 75 6d 6d 61 72 79 2d 4c | ental.tool..One.Type-3.summary-L |
e01a0 | 53 41 20 77 69 74 68 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 20 3c 45 2e 46 2e 47 2e 48 2f 4d 3e | SA.with.routing.info.<E.F.G.H/M> |
e01c0 | 20 69 73 20 61 6e 6e 6f 75 6e 63 65 64 20 69 6e 74 6f 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 | .is.announced.into.backbone.area |
e01e0 | 20 69 66 20 64 65 66 69 6e 65 64 20 61 72 65 61 20 63 6f 6e 74 61 69 6e 73 20 61 74 20 6c 65 61 | .if.defined.area.contains.at.lea |
e0200 | 73 74 20 6f 6e 65 20 69 6e 74 72 61 2d 61 72 65 61 20 6e 65 74 77 6f 72 6b 20 28 69 2e 65 2e 20 | st.one.intra-area.network.(i.e.. |
e0220 | 64 65 73 63 72 69 62 65 64 20 77 69 74 68 20 72 6f 75 74 65 72 2d 4c 53 41 20 6f 72 20 6e 65 74 | described.with.router-LSA.or.net |
e0240 | 77 6f 72 6b 2d 4c 53 41 29 20 66 72 6f 6d 20 72 61 6e 67 65 20 3c 41 2e 42 2e 43 2e 44 2f 4d 3e | work-LSA).from.range.<A.B.C.D/M> |
e0260 | 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6d 61 6b 65 73 20 73 65 6e 73 65 20 69 6e 20 41 42 | ..This.command.makes.sense.in.AB |
e0280 | 52 20 6f 6e 6c 79 2e 00 4f 6e 65 20 69 6d 70 6c 69 63 69 74 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 | R.only..One.implicit.environment |
e02a0 | 20 65 78 69 73 74 73 2e 00 4f 6e 65 20 6f 66 20 74 68 65 20 69 6d 70 6f 72 74 61 6e 74 20 66 65 | .exists..One.of.the.important.fe |
e02c0 | 61 74 75 72 65 73 20 62 75 69 6c 74 20 6f 6e 20 74 6f 70 20 6f 66 20 74 68 65 20 4e 65 74 66 69 | atures.built.on.top.of.the.Netfi |
e02e0 | 6c 74 65 72 20 66 72 61 6d 65 77 6f 72 6b 20 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 | lter.framework.is.connection.tra |
e0300 | 63 6b 69 6e 67 2e 20 43 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 61 6c 6c 6f 77 | cking..Connection.tracking.allow |
e0320 | 73 20 74 68 65 20 6b 65 72 6e 65 6c 20 74 6f 20 6b 65 65 70 20 74 72 61 63 6b 20 6f 66 20 61 6c | s.the.kernel.to.keep.track.of.al |
e0340 | 6c 20 6c 6f 67 69 63 61 6c 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 6f 72 | l.logical.network.connections.or |
e0360 | 20 73 65 73 73 69 6f 6e 73 2c 20 61 6e 64 20 74 68 65 72 65 62 79 20 72 65 6c 61 74 65 20 61 6c | .sessions,.and.thereby.relate.al |
e0380 | 6c 20 6f 66 20 74 68 65 20 70 61 63 6b 65 74 73 20 77 68 69 63 68 20 6d 61 79 20 6d 61 6b 65 20 | l.of.the.packets.which.may.make. |
e03a0 | 75 70 20 74 68 61 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 4e 41 54 20 72 65 6c 69 65 73 20 6f | up.that.connection..NAT.relies.o |
e03c0 | 6e 20 74 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 74 72 61 6e 73 6c 61 74 65 20 | n.this.information.to.translate. |
e03e0 | 61 6c 6c 20 72 65 6c 61 74 65 64 20 70 61 63 6b 65 74 73 20 69 6e 20 74 68 65 20 73 61 6d 65 20 | all.related.packets.in.the.same. |
e0400 | 77 61 79 2c 20 61 6e 64 20 69 70 74 61 62 6c 65 73 20 63 61 6e 20 75 73 65 20 74 68 69 73 20 69 | way,.and.iptables.can.use.this.i |
e0420 | 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 61 63 74 20 61 73 20 61 20 73 74 61 74 65 66 75 6c 20 | nformation.to.act.as.a.stateful. |
e0440 | 66 69 72 65 77 61 6c 6c 2e 00 4f 6e 65 20 6f 66 20 74 68 65 20 75 73 65 73 20 6f 66 20 46 61 69 | firewall..One.of.the.uses.of.Fai |
e0460 | 72 20 51 75 65 75 65 20 6d 69 67 68 74 20 62 65 20 74 68 65 20 6d 69 74 69 67 61 74 69 6f 6e 20 | r.Queue.might.be.the.mitigation. |
e0480 | 6f 66 20 44 65 6e 69 61 6c 20 6f 66 20 53 65 72 76 69 63 65 20 61 74 74 61 63 6b 73 2e 00 4f 6e | of.Denial.of.Service.attacks..On |
e04a0 | 6c 79 20 38 30 32 2e 31 51 2d 74 61 67 67 65 64 20 70 61 63 6b 65 74 73 20 61 72 65 20 61 63 63 | ly.802.1Q-tagged.packets.are.acc |
e04c0 | 65 70 74 65 64 20 6f 6e 20 45 74 68 65 72 6e 65 74 20 76 69 66 73 2e 00 4f 6e 6c 79 20 56 52 52 | epted.on.Ethernet.vifs..Only.VRR |
e04e0 | 50 20 69 73 20 73 75 70 70 6f 72 74 65 64 2e 20 52 65 71 75 69 72 65 64 20 6f 70 74 69 6f 6e 2e | P.is.supported..Required.option. |
e0500 | 00 4f 6e 6c 79 20 61 6c 6c 6f 77 20 63 65 72 74 61 69 6e 20 49 50 20 61 64 64 72 65 73 73 65 73 | .Only.allow.certain.IP.addresses |
e0520 | 20 6f 72 20 70 72 65 66 69 78 65 73 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 68 74 74 70 73 | .or.prefixes.to.access.the.https |
e0540 | 20 77 65 62 73 65 72 76 65 72 2e 00 4f 6e 6c 79 20 69 6e 20 74 68 65 20 73 6f 75 72 63 65 20 63 | .webserver..Only.in.the.source.c |
e0560 | 72 69 74 65 72 69 61 2c 20 79 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 61 20 6d 61 63 2d 61 | riteria,.you.can.specify.a.mac-a |
e0580 | 64 64 72 65 73 73 2e 00 4f 6e 6c 79 20 6f 6e 65 20 53 52 47 42 20 61 6e 64 20 64 65 66 61 75 6c | ddress..Only.one.SRGB.and.defaul |
e05a0 | 74 20 53 50 46 20 41 6c 67 6f 72 69 74 68 6d 20 69 73 20 73 75 70 70 6f 72 74 65 64 00 4f 6e 6c | t.SPF.Algorithm.is.supported.Onl |
e05c0 | 79 20 72 65 71 75 65 73 74 20 61 6e 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 44 48 | y.request.an.address.from.the.DH |
e05e0 | 43 50 20 73 65 72 76 65 72 20 62 75 74 20 64 6f 20 6e 6f 74 20 72 65 71 75 65 73 74 20 61 20 64 | CP.server.but.do.not.request.a.d |
e0600 | 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 2e 00 4f 6e 6c 79 20 72 65 71 75 65 73 74 20 61 6e 20 | efault.gateway..Only.request.an. |
e0620 | 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 50 50 50 6f 45 20 73 65 72 76 65 72 20 62 75 | address.from.the.PPPoE.server.bu |
e0640 | 74 20 64 6f 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 20 61 6e 79 20 64 65 66 61 75 6c 74 20 72 6f 75 | t.do.not.install.any.default.rou |
e0660 | 74 65 2e 00 4f 6e 6c 79 20 72 65 71 75 65 73 74 20 61 6e 20 61 64 64 72 65 73 73 20 66 72 6f 6d | te..Only.request.an.address.from |
e0680 | 20 74 68 65 20 53 53 54 50 20 73 65 72 76 65 72 20 62 75 74 20 64 6f 20 6e 6f 74 20 69 6e 73 74 | .the.SSTP.server.but.do.not.inst |
e06a0 | 61 6c 6c 20 61 6e 79 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 2e 00 4f 6e 6c 79 20 74 68 65 20 | all.any.default.route..Only.the. |
e06c0 | 74 79 70 65 20 28 60 60 73 73 68 2d 72 73 61 60 60 29 20 61 6e 64 20 74 68 65 20 6b 65 79 20 28 | type.(``ssh-rsa``).and.the.key.( |
e06e0 | 60 60 41 41 41 42 33 4e 2e 2e 2e 60 60 29 20 61 72 65 20 75 73 65 64 2e 20 4e 6f 74 65 20 74 68 | ``AAAB3N...``).are.used..Note.th |
e0700 | 61 74 20 74 68 65 20 6b 65 79 20 77 69 6c 6c 20 75 73 75 61 6c 6c 79 20 62 65 20 73 65 76 65 72 | at.the.key.will.usually.be.sever |
e0720 | 61 6c 20 68 75 6e 64 72 65 64 20 63 68 61 72 61 63 74 65 72 73 20 6c 6f 6e 67 2c 20 61 6e 64 20 | al.hundred.characters.long,.and. |
e0740 | 79 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 63 6f 70 79 20 61 6e 64 20 70 61 73 74 65 20 | you.will.need.to.copy.and.paste. |
e0760 | 69 74 2e 20 53 6f 6d 65 20 74 65 72 6d 69 6e 61 6c 20 65 6d 75 6c 61 74 6f 72 73 20 6d 61 79 20 | it..Some.terminal.emulators.may. |
e0780 | 61 63 63 69 64 65 6e 74 61 6c 6c 79 20 73 70 6c 69 74 20 74 68 69 73 20 6f 76 65 72 20 73 65 76 | accidentally.split.this.over.sev |
e07a0 | 65 72 61 6c 20 6c 69 6e 65 73 2e 20 42 65 20 61 74 74 65 6e 74 69 76 65 20 77 68 65 6e 20 79 6f | eral.lines..Be.attentive.when.yo |
e07c0 | 75 20 70 61 73 74 65 20 69 74 20 74 68 61 74 20 69 74 20 6f 6e 6c 79 20 70 61 73 74 65 73 20 61 | u.paste.it.that.it.only.pastes.a |
e07e0 | 73 20 61 20 73 69 6e 67 6c 65 20 6c 69 6e 65 2e 20 54 68 65 20 74 68 69 72 64 20 70 61 72 74 20 | s.a.single.line..The.third.part. |
e0800 | 69 73 20 73 69 6d 70 6c 79 20 61 6e 20 69 64 65 6e 74 69 66 69 65 72 2c 20 61 6e 64 20 69 73 20 | is.simply.an.identifier,.and.is. |
e0820 | 66 6f 72 20 79 6f 75 72 20 6f 77 6e 20 72 65 66 65 72 65 6e 63 65 2e 00 4f 6e 6c 79 20 77 6f 72 | for.your.own.reference..Only.wor |
e0840 | 6b 73 20 77 69 74 68 20 61 20 56 58 4c 41 4e 20 64 65 76 69 63 65 20 77 69 74 68 20 65 78 74 65 | ks.with.a.VXLAN.device.with.exte |
e0860 | 72 6e 61 6c 20 66 6c 61 67 20 73 65 74 2e 00 4f 70 2d 6d 6f 64 65 20 63 68 65 63 6b 20 76 69 72 | rnal.flag.set..Op-mode.check.vir |
e0880 | 74 75 61 6c 2d 73 65 72 76 65 72 20 73 74 61 74 75 73 00 4f 70 65 6e 43 6f 6e 6e 65 63 74 00 4f | tual-server.status.OpenConnect.O |
e08a0 | 70 65 6e 43 6f 6e 6e 65 63 74 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 | penConnect.can.be.configured.to. |
e08c0 | 73 65 6e 64 20 61 63 63 6f 75 6e 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 61 | send.accounting.information.to.a |
e08e0 | 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 74 6f 20 63 61 70 74 75 72 65 20 75 73 65 72 20 73 | .RADIUS.server.to.capture.user.s |
e0900 | 65 73 73 69 6f 6e 20 64 61 74 61 20 73 75 63 68 20 61 73 20 74 69 6d 65 20 6f 66 20 63 6f 6e 6e | ession.data.such.as.time.of.conn |
e0920 | 65 63 74 2f 64 69 73 63 6f 6e 6e 65 63 74 2c 20 64 61 74 61 20 74 72 61 6e 73 66 65 72 72 65 64 | ect/disconnect,.data.transferred |
e0940 | 2c 20 61 6e 64 20 73 6f 20 6f 6e 2e 00 4f 70 65 6e 43 6f 6e 6e 65 63 74 20 73 65 72 76 65 72 20 | ,.and.so.on..OpenConnect.server. |
e0960 | 6d 61 74 63 68 65 73 20 74 68 65 20 66 69 6c 65 6e 61 6d 65 20 69 6e 20 61 20 63 61 73 65 20 73 | matches.the.filename.in.a.case.s |
e0980 | 65 6e 73 69 74 69 76 65 20 6d 61 6e 6e 65 72 2c 20 6d 61 6b 65 20 73 75 72 65 20 74 68 65 20 75 | ensitive.manner,.make.sure.the.u |
e09a0 | 73 65 72 6e 61 6d 65 2f 67 72 6f 75 70 20 6e 61 6d 65 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 | sername/group.name.you.configure |
e09c0 | 20 6d 61 74 63 68 65 73 20 74 68 65 20 66 69 6c 65 6e 61 6d 65 20 65 78 61 63 74 6c 79 2e 00 4f | .matches.the.filename.exactly..O |
e09e0 | 70 65 6e 43 6f 6e 6e 65 63 74 20 73 75 70 70 6f 72 74 73 20 61 20 73 75 62 73 65 74 20 6f 66 20 | penConnect.supports.a.subset.of. |
e0a00 | 69 74 27 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 74 6f 20 62 65 | it's.configuration.options.to.be |
e0a20 | 20 61 70 70 6c 69 65 64 20 6f 6e 20 61 20 70 65 72 20 75 73 65 72 2f 67 72 6f 75 70 20 62 61 73 | .applied.on.a.per.user/group.bas |
e0a40 | 69 73 2c 20 66 6f 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 75 72 70 6f 73 65 73 20 77 | is,.for.configuration.purposes.w |
e0a60 | 65 20 72 65 66 65 72 20 74 6f 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 73 | e.refer.to.this.functionality.as |
e0a80 | 20 22 49 64 65 6e 74 69 74 79 20 62 61 73 65 64 20 63 6f 6e 66 69 67 22 2e 20 54 68 65 20 66 6f | ."Identity.based.config"..The.fo |
e0aa0 | 6c 6c 6f 77 69 6e 67 20 60 4f 70 65 6e 43 6f 6e 6e 65 63 74 20 53 65 72 76 65 72 20 4d 61 6e 75 | llowing.`OpenConnect.Server.Manu |
e0ac0 | 61 6c 20 3c 68 74 74 70 73 3a 2f 2f 6f 63 73 65 72 76 2e 67 69 74 6c 61 62 2e 69 6f 2f 77 77 77 | al.<https://ocserv.gitlab.io/www |
e0ae0 | 2f 6d 61 6e 75 61 6c 2e 68 74 6d 6c 23 3a 7e 3a 74 65 78 74 3d 43 6f 6e 66 69 67 75 72 61 74 69 | /manual.html#:~:text=Configurati |
e0b00 | 6f 6e 25 32 30 66 69 6c 65 73 25 32 30 74 68 61 74 25 20 32 30 77 69 6c 6c 25 32 30 62 65 25 32 | on%20files%20that%.20will%20be%2 |
e0b20 | 30 61 70 70 6c 69 65 64 25 32 30 70 65 72 25 32 30 75 73 65 72 25 32 30 63 6f 6e 6e 65 63 74 69 | 0applied%20per%20user%20connecti |
e0b40 | 6f 6e 25 32 30 6f 72 25 30 41 25 32 33 25 32 30 70 65 72 25 32 30 67 72 6f 75 70 3e 60 5f 20 6f | on%20or%0A%23%20per%20group>`_.o |
e0b60 | 75 74 6c 69 6e 65 73 20 74 68 65 20 73 65 74 20 6f 66 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | utlines.the.set.of.configuration |
e0b80 | 20 6f 70 74 69 6f 6e 73 20 74 68 61 74 20 61 72 65 20 61 6c 6c 6f 77 65 64 2e 20 54 68 69 73 20 | .options.that.are.allowed..This. |
e0ba0 | 63 61 6e 20 62 65 20 6c 65 76 65 72 61 67 65 64 20 74 6f 20 61 70 70 6c 79 20 64 69 66 66 65 72 | can.be.leveraged.to.apply.differ |
e0bc0 | 65 6e 74 20 73 65 74 73 20 6f 66 20 63 6f 6e 66 69 67 73 20 74 6f 20 64 69 66 66 65 72 65 6e 74 | ent.sets.of.configs.to.different |
e0be0 | 20 75 73 65 72 73 20 6f 72 20 67 72 6f 75 70 73 20 6f 66 20 75 73 65 72 73 2e 00 4f 70 65 6e 43 | .users.or.groups.of.users..OpenC |
e0c00 | 6f 6e 6e 65 63 74 2d 63 6f 6d 70 61 74 69 62 6c 65 20 73 65 72 76 65 72 20 66 65 61 74 75 72 65 | onnect-compatible.server.feature |
e0c20 | 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 66 72 6f 6d 20 74 68 69 73 20 72 65 6c 65 61 73 65 2e | .is.available.from.this.release. |
e0c40 | 20 4f 70 65 6e 63 6f 6e 6e 65 63 74 20 56 50 4e 20 73 75 70 70 6f 72 74 73 20 53 53 4c 20 63 6f | .Openconnect.VPN.supports.SSL.co |
e0c60 | 6e 6e 65 63 74 69 6f 6e 20 61 6e 64 20 6f 66 66 65 72 73 20 66 75 6c 6c 20 6e 65 74 77 6f 72 6b | nnection.and.offers.full.network |
e0c80 | 20 61 63 63 65 73 73 2e 20 53 53 4c 20 56 50 4e 20 6e 65 74 77 6f 72 6b 20 65 78 74 65 6e 73 69 | .access..SSL.VPN.network.extensi |
e0ca0 | 6f 6e 20 63 6f 6e 6e 65 63 74 73 20 74 68 65 20 65 6e 64 2d 75 73 65 72 20 73 79 73 74 65 6d 20 | on.connects.the.end-user.system. |
e0cc0 | 74 6f 20 74 68 65 20 63 6f 72 70 6f 72 61 74 65 20 6e 65 74 77 6f 72 6b 20 77 69 74 68 20 61 63 | to.the.corporate.network.with.ac |
e0ce0 | 63 65 73 73 20 63 6f 6e 74 72 6f 6c 73 20 62 61 73 65 64 20 6f 6e 6c 79 20 6f 6e 20 6e 65 74 77 | cess.controls.based.only.on.netw |
e0d00 | 6f 72 6b 20 6c 61 79 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 75 63 68 20 61 73 20 64 | ork.layer.information,.such.as.d |
e0d20 | 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 20 70 6f 72 74 20 6e | estination.IP.address.and.port.n |
e0d40 | 75 6d 62 65 72 2e 20 53 6f 2c 20 69 74 20 70 72 6f 76 69 64 65 73 20 73 61 66 65 20 63 6f 6d 6d | umber..So,.it.provides.safe.comm |
e0d60 | 75 6e 69 63 61 74 69 6f 6e 20 66 6f 72 20 61 6c 6c 20 74 79 70 65 73 20 6f 66 20 64 65 76 69 63 | unication.for.all.types.of.devic |
e0d80 | 65 20 74 72 61 66 66 69 63 20 61 63 72 6f 73 73 20 70 75 62 6c 69 63 20 6e 65 74 77 6f 72 6b 73 | e.traffic.across.public.networks |
e0da0 | 20 61 6e 64 20 70 72 69 76 61 74 65 20 6e 65 74 77 6f 72 6b 73 2c 20 61 6c 73 6f 20 65 6e 63 72 | .and.private.networks,.also.encr |
e0dc0 | 79 70 74 73 20 74 68 65 20 74 72 61 66 66 69 63 20 77 69 74 68 20 53 53 4c 20 70 72 6f 74 6f 63 | ypts.the.traffic.with.SSL.protoc |
e0de0 | 6f 6c 2e 00 4f 70 65 6e 56 50 4e 00 4f 70 65 6e 56 50 4e 20 2a 2a 77 69 6c 6c 20 6e 6f 74 2a 2a | ol..OpenVPN.OpenVPN.**will.not** |
e0e00 | 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 63 72 65 61 74 65 20 72 6f 75 74 65 73 20 69 6e 20 | .automatically.create.routes.in. |
e0e20 | 74 68 65 20 6b 65 72 6e 65 6c 20 66 6f 72 20 63 6c 69 65 6e 74 20 73 75 62 6e 65 74 73 20 77 68 | the.kernel.for.client.subnets.wh |
e0e40 | 65 6e 20 74 68 65 79 20 63 6f 6e 6e 65 63 74 20 61 6e 64 20 77 69 6c 6c 20 6f 6e 6c 79 20 75 73 | en.they.connect.and.will.only.us |
e0e60 | 65 20 63 6c 69 65 6e 74 2d 73 75 62 6e 65 74 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 69 6e 74 65 | e.client-subnet.association.inte |
e0e80 | 72 6e 61 6c 6c 79 2c 20 73 6f 20 77 65 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 20 72 | rnally,.so.we.need.to.create.a.r |
e0ea0 | 6f 75 74 65 20 74 6f 20 74 68 65 20 31 30 2e 32 33 2e 30 2e 30 2f 32 30 20 6e 65 74 77 6f 72 6b | oute.to.the.10.23.0.0/20.network |
e0ec0 | 20 6f 75 72 73 65 6c 76 65 73 3a 00 4f 70 65 6e 56 50 4e 20 44 43 4f 20 69 73 20 6e 6f 74 20 66 | .ourselves:.OpenVPN.DCO.is.not.f |
e0ee0 | 75 6c 6c 20 4f 70 65 6e 56 50 4e 20 66 65 61 74 75 72 65 73 20 73 75 70 70 6f 72 74 65 64 20 2c | ull.OpenVPN.features.supported., |
e0f00 | 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 63 6f 6e 73 69 64 65 72 65 64 20 65 78 70 65 72 69 6d | .is.currently.considered.experim |
e0f20 | 65 6e 74 61 6c 2e 20 46 75 72 74 68 65 72 6d 6f 72 65 2c 20 74 68 65 72 65 20 61 72 65 20 63 65 | ental..Furthermore,.there.are.ce |
e0f40 | 72 74 61 69 6e 20 4f 70 65 6e 56 50 4e 20 66 65 61 74 75 72 65 73 20 61 6e 64 20 75 73 65 20 63 | rtain.OpenVPN.features.and.use.c |
e0f60 | 61 73 65 73 20 74 68 61 74 20 72 65 6d 61 69 6e 20 69 6e 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 | ases.that.remain.incompatible.wi |
e0f80 | 74 68 20 44 43 4f 2e 20 54 6f 20 67 65 74 20 61 20 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 20 75 | th.DCO..To.get.a.comprehensive.u |
e0fa0 | 6e 64 65 72 73 74 61 6e 64 69 6e 67 20 6f 66 20 74 68 65 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 | nderstanding.of.the.limitations. |
e0fc0 | 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 44 43 4f 2c 20 72 65 66 65 72 20 74 6f 20 74 68 | associated.with.DCO,.refer.to.th |
e0fe0 | 65 20 6c 69 73 74 20 6f 66 20 6b 6e 6f 77 6e 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 69 6e 20 74 | e.list.of.known.limitations.in.t |
e1000 | 68 65 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 00 4f 70 65 6e 56 50 4e 20 44 61 74 61 20 43 | he.documentation..OpenVPN.Data.C |
e1020 | 68 61 6e 6e 65 6c 20 4f 66 66 6c 6f 61 64 20 28 44 43 4f 29 00 4f 70 65 6e 56 50 4e 20 44 61 74 | hannel.Offload.(DCO).OpenVPN.Dat |
e1040 | 61 20 43 68 61 6e 6e 65 6c 20 4f 66 66 6c 6f 61 64 20 28 44 43 4f 29 20 65 6e 61 62 6c 65 73 20 | a.Channel.Offload.(DCO).enables. |
e1060 | 73 69 67 6e 69 66 69 63 61 6e 74 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 65 6e 68 61 6e 63 65 6d | significant.performance.enhancem |
e1080 | 65 6e 74 20 69 6e 20 65 6e 63 72 79 70 74 65 64 20 4f 70 65 6e 56 50 4e 20 64 61 74 61 20 70 72 | ent.in.encrypted.OpenVPN.data.pr |
e10a0 | 6f 63 65 73 73 69 6e 67 2e 20 42 79 20 6d 69 6e 69 6d 69 7a 69 6e 67 20 63 6f 6e 74 65 78 74 20 | ocessing..By.minimizing.context. |
e10c0 | 73 77 69 74 63 68 69 6e 67 20 66 6f 72 20 65 61 63 68 20 70 61 63 6b 65 74 2c 20 44 43 4f 20 65 | switching.for.each.packet,.DCO.e |
e10e0 | 66 66 65 63 74 69 76 65 6c 79 20 72 65 64 75 63 65 73 20 6f 76 65 72 68 65 61 64 2e 20 54 68 69 | ffectively.reduces.overhead..Thi |
e1100 | 73 20 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 20 69 73 20 61 63 68 69 65 76 65 64 20 62 79 20 6b 65 | s.optimization.is.achieved.by.ke |
e1120 | 65 70 69 6e 67 20 6d 6f 73 74 20 64 61 74 61 20 68 61 6e 64 6c 69 6e 67 20 74 61 73 6b 73 20 77 | eping.most.data.handling.tasks.w |
e1140 | 69 74 68 69 6e 20 74 68 65 20 6b 65 72 6e 65 6c 2c 20 61 76 6f 69 64 69 6e 67 20 66 72 65 71 75 | ithin.the.kernel,.avoiding.frequ |
e1160 | 65 6e 74 20 73 77 69 74 63 68 65 73 20 62 65 74 77 65 65 6e 20 6b 65 72 6e 65 6c 20 61 6e 64 20 | ent.switches.between.kernel.and. |
e1180 | 75 73 65 72 20 73 70 61 63 65 20 66 6f 72 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6e 64 20 70 61 | user.space.for.encryption.and.pa |
e11a0 | 63 6b 65 74 20 68 61 6e 64 6c 69 6e 67 2e 00 4f 70 65 6e 56 50 4e 20 61 6c 6c 6f 77 73 20 66 6f | cket.handling..OpenVPN.allows.fo |
e11c0 | 72 20 65 69 74 68 65 72 20 54 43 50 20 6f 72 20 55 44 50 2e 20 55 44 50 20 77 69 6c 6c 20 70 72 | r.either.TCP.or.UDP..UDP.will.pr |
e11e0 | 6f 76 69 64 65 20 74 68 65 20 6c 6f 77 65 73 74 20 6c 61 74 65 6e 63 79 2c 20 77 68 69 6c 65 20 | ovide.the.lowest.latency,.while. |
e1200 | 54 43 50 20 77 69 6c 6c 20 77 6f 72 6b 20 62 65 74 74 65 72 20 66 6f 72 20 6c 6f 73 73 79 20 63 | TCP.will.work.better.for.lossy.c |
e1220 | 6f 6e 6e 65 63 74 69 6f 6e 73 3b 20 67 65 6e 65 72 61 6c 6c 79 20 55 44 50 20 69 73 20 70 72 65 | onnections;.generally.UDP.is.pre |
e1240 | 66 65 72 72 65 64 20 77 68 65 6e 20 70 6f 73 73 69 62 6c 65 2e 00 4f 70 65 6e 56 50 4e 20 69 73 | ferred.when.possible..OpenVPN.is |
e1260 | 20 70 6f 70 75 6c 61 72 20 66 6f 72 20 63 6c 69 65 6e 74 2d 73 65 72 76 65 72 20 73 65 74 75 70 | .popular.for.client-server.setup |
e1280 | 73 2c 20 62 75 74 20 69 74 73 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 6d 6f 64 65 20 72 65 6d | s,.but.its.site-to-site.mode.rem |
e12a0 | 61 69 6e 73 20 61 20 72 65 6c 61 74 69 76 65 6c 79 20 6f 62 73 63 75 72 65 20 66 65 61 74 75 72 | ains.a.relatively.obscure.featur |
e12c0 | 65 2c 20 61 6e 64 20 6d 61 6e 79 20 72 6f 75 74 65 72 20 61 70 70 6c 69 61 6e 63 65 73 20 73 74 | e,.and.many.router.appliances.st |
e12e0 | 69 6c 6c 20 64 6f 6e 27 74 20 73 75 70 70 6f 72 74 20 69 74 2e 20 48 6f 77 65 76 65 72 2c 20 69 | ill.don't.support.it..However,.i |
e1300 | 74 27 73 20 76 65 72 79 20 75 73 65 66 75 6c 20 66 6f 72 20 71 75 69 63 6b 6c 79 20 73 65 74 74 | t's.very.useful.for.quickly.sett |
e1320 | 69 6e 67 20 75 70 20 74 75 6e 6e 65 6c 73 20 62 65 74 77 65 65 6e 20 72 6f 75 74 65 72 73 2e 00 | ing.up.tunnels.between.routers.. |
e1340 | 4f 70 65 6e 56 50 4e 20 73 74 61 74 75 73 20 63 61 6e 20 62 65 20 76 65 72 69 66 69 65 64 20 75 | OpenVPN.status.can.be.verified.u |
e1360 | 73 69 6e 67 20 74 68 65 20 60 73 68 6f 77 20 6f 70 65 6e 76 70 6e 60 20 6f 70 65 72 61 74 69 6f | sing.the.`show.openvpn`.operatio |
e1380 | 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 2e 20 53 65 65 20 74 68 65 20 62 75 69 6c 74 2d 69 6e 20 68 | nal.commands..See.the.built-in.h |
e13a0 | 65 6c 70 20 66 6f 72 20 61 20 63 6f 6d 70 6c 65 74 65 20 6c 69 73 74 20 6f 66 20 6f 70 74 69 6f | elp.for.a.complete.list.of.optio |
e13c0 | 6e 73 2e 00 4f 70 65 6e 63 6f 6e 6e 65 63 74 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 4f 70 | ns..Openconnect.Configuration.Op |
e13e0 | 65 72 61 74 69 6e 67 20 4d 6f 64 65 73 00 4f 70 65 72 61 74 69 6f 6e 00 4f 70 65 72 61 74 69 6f | erating.Modes.Operation.Operatio |
e1400 | 6e 20 43 6f 6d 6d 61 6e 64 73 00 4f 70 65 72 61 74 69 6f 6e 20 4d 6f 64 65 00 4f 70 65 72 61 74 | n.Commands.Operation.Mode.Operat |
e1420 | 69 6f 6e 20 6d 6f 64 65 20 6f 66 20 77 69 72 65 6c 65 73 73 20 72 61 64 69 6f 2e 00 4f 70 65 72 | ion.mode.of.wireless.radio..Oper |
e1440 | 61 74 69 6f 6e 2d 6d 6f 64 65 00 4f 70 65 72 61 74 69 6f 6e 2d 6d 6f 64 65 20 46 69 72 65 77 61 | ation-mode.Operation-mode.Firewa |
e1460 | 6c 6c 00 4f 70 65 72 61 74 69 6f 6e 61 6c 20 43 6f 6d 6d 61 6e 64 73 00 4f 70 65 72 61 74 69 6f | ll.Operational.Commands.Operatio |
e1480 | 6e 61 6c 20 4d 6f 64 65 20 43 6f 6d 6d 61 6e 64 73 00 4f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f | nal.Mode.Commands.Operational.co |
e14a0 | 6d 6d 61 6e 64 73 00 4f 70 74 69 6f 6e 00 4f 70 74 69 6f 6e 20 34 33 20 66 6f 72 20 55 6e 69 46 | mmands.Option.Option.43.for.UniF |
e14c0 | 49 00 4f 70 74 69 6f 6e 20 64 65 73 63 72 69 70 74 69 6f 6e 00 4f 70 74 69 6f 6e 20 6e 75 6d 62 | I.Option.description.Option.numb |
e14e0 | 65 72 00 4f 70 74 69 6f 6e 20 73 70 65 63 69 66 79 69 6e 67 20 74 68 65 20 72 61 74 65 20 69 6e | er.Option.specifying.the.rate.in |
e1500 | 20 77 68 69 63 68 20 77 65 27 6c 6c 20 61 73 6b 20 6f 75 72 20 6c 69 6e 6b 20 70 61 72 74 6e 65 | .which.we'll.ask.our.link.partne |
e1520 | 72 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 4c 41 43 50 44 55 20 70 61 63 6b 65 74 73 20 69 6e 20 | r.to.transmit.LACPDU.packets.in. |
e1540 | 38 30 32 2e 33 61 64 20 6d 6f 64 65 2e 00 4f 70 74 69 6f 6e 20 74 6f 20 64 69 73 61 62 6c 65 20 | 802.3ad.mode..Option.to.disable. |
e1560 | 72 75 6c 65 2e 00 4f 70 74 69 6f 6e 20 74 6f 20 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c | rule..Option.to.enable.or.disabl |
e1580 | 65 20 6c 6f 67 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 2e 00 4f 70 74 69 6f 6e 20 74 6f 20 6c | e.log.matching.rule..Option.to.l |
e15a0 | 6f 67 20 70 61 63 6b 65 74 73 20 68 69 74 74 69 6e 67 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f | og.packets.hitting.default-actio |
e15c0 | 6e 2e 00 4f 70 74 69 6f 6e 61 6c 00 4f 70 74 69 6f 6e 61 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 | n..Optional.Optional.Configurati |
e15e0 | 6f 6e 00 4f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 20 70 72 65 66 69 78 2d 6c 69 73 | on.Optional.parameter.prefix-lis |
e1600 | 74 20 63 61 6e 20 62 65 20 75 73 65 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 77 68 69 63 68 20 67 72 | t.can.be.use.to.control.which.gr |
e1620 | 6f 75 70 73 20 74 6f 20 73 77 69 74 63 68 20 6f 72 20 6e 6f 74 20 73 77 69 74 63 68 2e 20 49 66 | oups.to.switch.or.not.switch..If |
e1640 | 20 61 20 67 72 6f 75 70 20 69 73 20 50 45 52 4d 49 54 20 61 73 20 70 65 72 20 74 68 65 20 70 72 | .a.group.is.PERMIT.as.per.the.pr |
e1660 | 65 66 69 78 2d 6c 69 73 74 2c 20 74 68 65 6e 20 74 68 65 20 53 50 54 20 73 77 69 74 63 68 6f 76 | efix-list,.then.the.SPT.switchov |
e1680 | 65 72 20 64 6f 65 73 20 6e 6f 74 20 68 61 70 70 65 6e 20 66 6f 72 20 69 74 20 61 6e 64 20 69 66 | er.does.not.happen.for.it.and.if |
e16a0 | 20 69 74 20 69 73 20 44 45 4e 59 2c 20 74 68 65 6e 20 74 68 65 20 53 50 54 20 73 77 69 74 63 68 | .it.is.DENY,.then.the.SPT.switch |
e16c0 | 6f 76 65 72 20 68 61 70 70 65 6e 73 2e 00 4f 70 74 69 6f 6e 61 6c 2c 20 69 66 20 79 6f 75 20 77 | over.happens..Optional,.if.you.w |
e16e0 | 61 6e 74 20 74 6f 20 65 6e 61 62 6c 65 20 75 70 6c 6f 61 64 73 2c 20 65 6c 73 65 20 54 46 54 50 | ant.to.enable.uploads,.else.TFTP |
e1700 | 20 73 65 72 76 65 72 20 77 69 6c 6c 20 61 63 74 20 61 73 20 61 20 72 65 61 64 2d 6f 6e 6c 79 20 | .server.will.act.as.a.read-only. |
e1720 | 73 65 72 76 65 72 2e 00 4f 70 74 69 6f 6e 61 6c 2f 64 65 66 61 75 6c 74 20 73 65 74 74 69 6e 67 | server..Optional/default.setting |
e1740 | 73 00 4f 70 74 69 6f 6e 61 6c 6c 79 20 73 65 74 20 61 20 73 70 65 63 69 66 69 63 20 73 74 61 74 | s.Optionally.set.a.specific.stat |
e1760 | 69 63 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 20 66 6f 72 20 74 68 65 20 | ic.IPv4.or.IPv6.address.for.the. |
e1780 | 63 6f 6e 74 61 69 6e 65 72 2e 20 54 68 69 73 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 | container..This.address.must.be. |
e17a0 | 77 69 74 68 69 6e 20 74 68 65 20 6e 61 6d 65 64 20 6e 65 74 77 6f 72 6b 20 70 72 65 66 69 78 2e | within.the.named.network.prefix. |
e17c0 | 00 4f 70 74 69 6f 6e 73 00 4f 70 74 69 6f 6e 73 20 28 47 6c 6f 62 61 6c 20 49 50 73 65 63 20 73 | .Options.Options.(Global.IPsec.s |
e17e0 | 65 74 74 69 6e 67 73 29 20 41 74 74 72 69 62 75 74 65 73 00 4f 70 74 69 6f 6e 73 20 75 73 65 64 | ettings).Attributes.Options.used |
e1800 | 20 66 6f 72 20 71 75 65 75 65 20 74 61 72 67 65 74 2e 20 41 63 74 69 6f 6e 20 71 75 65 75 65 20 | .for.queue.target..Action.queue. |
e1820 | 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 73 65 74 74 | must.be.defined.to.use.this.sett |
e1840 | 69 6e 67 00 4f 72 20 2a 2a 62 69 6e 61 72 79 2a 2a 20 70 72 65 66 69 78 65 73 2e 00 4f 72 2c 20 | ing.Or.**binary**.prefixes..Or,. |
e1860 | 66 6f 72 20 65 78 61 6d 70 6c 65 20 66 74 70 2c 20 60 64 65 6c 65 74 65 20 73 79 73 74 65 6d 20 | for.example.ftp,.`delete.system. |
e1880 | 63 6f 6e 6e 74 72 61 63 6b 20 6d 6f 64 75 6c 65 73 20 66 74 70 60 2e 00 4f 72 64 65 72 20 63 6f | conntrack.modules.ftp`..Order.co |
e18a0 | 6e 6e 74 72 61 63 6b 64 20 74 6f 20 72 65 71 75 65 73 74 20 61 20 63 6f 6d 70 6c 65 74 65 20 63 | nntrackd.to.request.a.complete.c |
e18c0 | 6f 6e 6e 74 72 61 63 6b 20 74 61 62 6c 65 20 72 65 73 79 6e 63 20 61 67 61 69 6e 73 74 20 74 68 | onntrack.table.resync.against.th |
e18e0 | 65 20 6f 74 68 65 72 20 6e 6f 64 65 20 61 74 20 73 74 61 72 74 75 70 2e 00 4f 72 69 67 69 6e 61 | e.other.node.at.startup..Origina |
e1900 | 74 65 20 61 6e 20 41 53 2d 45 78 74 65 72 6e 61 6c 20 28 74 79 70 65 2d 35 29 20 4c 53 41 20 64 | te.an.AS-External.(type-5).LSA.d |
e1920 | 65 73 63 72 69 62 69 6e 67 20 61 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 69 6e 74 6f 20 61 | escribing.a.default.route.into.a |
e1940 | 6c 6c 20 65 78 74 65 72 6e 61 6c 2d 72 6f 75 74 69 6e 67 20 63 61 70 61 62 6c 65 20 61 72 65 61 | ll.external-routing.capable.area |
e1960 | 73 2c 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 6d 65 74 72 69 63 20 61 6e 64 20 6d | s,.of.the.specified.metric.and.m |
e1980 | 65 74 72 69 63 20 74 79 70 65 2e 20 49 66 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 61 6c 77 61 | etric.type..If.the.:cfgcmd:`alwa |
e19a0 | 79 73 60 20 6b 65 79 77 6f 72 64 20 69 73 20 67 69 76 65 6e 20 74 68 65 6e 20 74 68 65 20 64 65 | ys`.keyword.is.given.then.the.de |
e19c0 | 66 61 75 6c 74 20 69 73 20 61 6c 77 61 79 73 20 61 64 76 65 72 74 69 73 65 64 2c 20 65 76 65 6e | fault.is.always.advertised,.even |
e19e0 | 20 77 68 65 6e 20 74 68 65 72 65 20 69 73 20 6e 6f 20 64 65 66 61 75 6c 74 20 70 72 65 73 65 6e | .when.there.is.no.default.presen |
e1a00 | 74 20 69 6e 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 54 68 65 20 61 72 67 75 | t.in.the.routing.table..The.argu |
e1a20 | 6d 65 6e 74 20 3a 63 66 67 63 6d 64 3a 60 72 6f 75 74 65 2d 6d 61 70 60 20 73 70 65 63 69 66 69 | ment.:cfgcmd:`route-map`.specifi |
e1a40 | 65 73 20 74 6f 20 61 64 76 65 72 74 69 73 65 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 | es.to.advertise.the.default.rout |
e1a60 | 65 20 69 66 20 74 68 65 20 72 6f 75 74 65 20 6d 61 70 20 69 73 20 73 61 74 69 73 66 69 65 64 2e | e.if.the.route.map.is.satisfied. |
e1a80 | 00 4f 74 68 65 72 20 61 74 74 72 69 62 75 74 65 73 20 63 61 6e 20 62 65 20 75 73 65 64 2c 20 62 | .Other.attributes.can.be.used,.b |
e1aa0 | 75 74 20 74 68 65 79 20 68 61 76 65 20 74 6f 20 62 65 20 69 6e 20 6f 6e 65 20 6f 66 20 74 68 65 | ut.they.have.to.be.in.one.of.the |
e1ac0 | 20 64 69 63 74 69 6f 6e 61 72 69 65 73 20 69 6e 20 2a 2f 75 73 72 2f 73 68 61 72 65 2f 61 63 63 | .dictionaries.in.*/usr/share/acc |
e1ae0 | 65 6c 2d 70 70 70 2f 72 61 64 69 75 73 2a 2e 00 4f 75 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | el-ppp/radius*..Our.configuratio |
e1b00 | 6e 20 63 6f 6d 6d 61 6e 64 73 20 77 6f 75 6c 64 20 62 65 3a 00 4f 75 72 20 72 65 6d 6f 74 65 20 | n.commands.would.be:.Our.remote. |
e1b20 | 65 6e 64 20 6f 66 20 74 68 65 20 74 75 6e 6e 65 6c 20 66 6f 72 20 70 65 65 72 20 60 74 6f 2d 77 | end.of.the.tunnel.for.peer.`to-w |
e1b40 | 67 30 32 60 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 61 74 20 31 39 32 2e 30 2e 32 2e 31 20 70 | g02`.is.reachable.at.192.0.2.1.p |
e1b60 | 6f 72 74 20 35 31 38 32 30 00 4f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 | ort.51820.Outbound.traffic.can.b |
e1b80 | 65 20 62 61 6c 61 6e 63 65 64 20 62 65 74 77 65 65 6e 20 74 77 6f 20 6f 72 20 6d 6f 72 65 20 6f | e.balanced.between.two.or.more.o |
e1ba0 | 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 73 2e 20 49 66 20 61 20 70 61 74 68 20 66 61 | utbound.interfaces..If.a.path.fa |
e1bc0 | 69 6c 73 2c 20 74 72 61 66 66 69 63 20 69 73 20 62 61 6c 61 6e 63 65 64 20 61 63 72 6f 73 73 20 | ils,.traffic.is.balanced.across. |
e1be0 | 74 68 65 20 72 65 6d 61 69 6e 69 6e 67 20 68 65 61 6c 74 68 79 20 70 61 74 68 73 2c 20 61 20 72 | the.remaining.healthy.paths,.a.r |
e1c00 | 65 63 6f 76 65 72 65 64 20 70 61 74 68 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 | ecovered.path.is.automatically.a |
e1c20 | 64 64 65 64 20 62 61 63 6b 20 74 6f 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 61 | dded.back.to.the.routing.table.a |
e1c40 | 6e 64 20 75 73 65 64 20 62 79 20 74 68 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 2e 20 54 68 | nd.used.by.the.load.balancer..Th |
e1c60 | 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 64 | e.load.balancer.automatically.ad |
e1c80 | 64 73 20 72 6f 75 74 65 73 20 66 6f 72 20 65 61 63 68 20 70 61 74 68 20 74 6f 20 74 68 65 20 72 | ds.routes.for.each.path.to.the.r |
e1ca0 | 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 61 6e 64 20 62 61 6c 61 6e 63 65 73 20 74 72 61 66 66 69 | outing.table.and.balances.traffi |
e1cc0 | 63 20 61 63 72 6f 73 73 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 74 65 72 66 61 63 | c.across.the.configured.interfac |
e1ce0 | 65 73 2c 20 64 65 74 65 72 6d 69 6e 65 64 20 62 79 20 69 6e 74 65 72 66 61 63 65 20 68 65 61 6c | es,.determined.by.interface.heal |
e1d00 | 74 68 20 61 6e 64 20 77 65 69 67 68 74 2e 00 4f 75 74 67 6f 69 6e 67 20 74 72 61 66 66 69 63 20 | th.and.weight..Outgoing.traffic. |
e1d20 | 69 73 20 62 61 6c 61 6e 63 65 64 20 69 6e 20 61 20 66 6c 6f 77 2d 62 61 73 65 64 20 6d 61 6e 6e | is.balanced.in.a.flow-based.mann |
e1d40 | 65 72 2e 20 41 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 74 61 62 6c 65 20 | er..A.connection.tracking.table. |
e1d60 | 69 73 20 75 73 65 64 20 74 6f 20 74 72 61 63 6b 20 66 6c 6f 77 73 20 62 79 20 74 68 65 69 72 20 | is.used.to.track.flows.by.their. |
e1d80 | 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 | source.address,.destination.addr |
e1da0 | 65 73 73 20 61 6e 64 20 70 6f 72 74 2e 20 45 61 63 68 20 66 6c 6f 77 20 69 73 20 61 73 73 69 67 | ess.and.port..Each.flow.is.assig |
e1dc0 | 6e 65 64 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 61 63 63 6f 72 64 69 6e 67 20 74 6f | ned.to.an.interface.according.to |
e1de0 | 20 74 68 65 20 64 65 66 69 6e 65 64 20 62 61 6c 61 6e 63 69 6e 67 20 72 75 6c 65 73 20 61 6e 64 | .the.defined.balancing.rules.and |
e1e00 | 20 73 75 62 73 65 71 75 65 6e 74 20 70 61 63 6b 65 74 73 20 61 72 65 20 73 65 6e 74 20 74 68 72 | .subsequent.packets.are.sent.thr |
e1e20 | 6f 75 67 68 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 68 61 | ough.the.same.interface..This.ha |
e1e40 | 73 20 74 68 65 20 61 64 76 61 6e 74 61 67 65 20 74 68 61 74 20 70 61 63 6b 65 74 73 20 61 6c 77 | s.the.advantage.that.packets.alw |
e1e60 | 61 79 73 20 61 72 72 69 76 65 20 69 6e 20 6f 72 64 65 72 20 69 66 20 6c 69 6e 6b 73 20 77 69 74 | ays.arrive.in.order.if.links.wit |
e1e80 | 68 20 64 69 66 66 65 72 65 6e 74 20 73 70 65 65 64 73 20 61 72 65 20 69 6e 20 75 73 65 2e 00 4f | h.different.speeds.are.in.use..O |
e1ea0 | 75 74 70 75 74 20 66 72 6f 6d 20 60 65 74 68 30 60 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 | utput.from.`eth0`.network.interf |
e1ec0 | 61 63 65 00 4f 75 74 70 75 74 20 70 6c 75 67 69 6e 20 50 72 6f 6d 65 74 68 65 75 73 20 63 6c 69 | ace.Output.plugin.Prometheus.cli |
e1ee0 | 65 6e 74 00 4f 76 65 72 20 49 50 00 4f 76 65 72 20 49 50 53 65 63 2c 20 4c 32 20 56 50 4e 20 28 | ent.Over.IP.Over.IPSec,.L2.VPN.( |
e1f00 | 62 72 69 64 67 65 29 00 4f 76 65 72 20 55 44 50 00 4f 76 65 72 72 69 64 65 20 73 74 61 74 69 63 | bridge).Over.UDP.Override.static |
e1f20 | 2d 6d 61 70 70 69 6e 67 27 73 20 6e 61 6d 65 2d 73 65 72 76 65 72 20 77 69 74 68 20 61 20 63 75 | -mapping's.name-server.with.a.cu |
e1f40 | 73 74 6f 6d 20 6f 6e 65 20 74 68 61 74 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 6f 6e 6c 79 20 | stom.one.that.will.be.sent.only. |
e1f60 | 74 6f 20 74 68 69 73 20 68 6f 73 74 2e 00 4f 76 65 72 76 69 65 77 00 4f 76 65 72 76 69 65 77 20 | to.this.host..Overview.Overview. |
e1f80 | 61 6e 64 20 62 61 73 69 63 20 63 6f 6e 63 65 70 74 73 00 4f 76 65 72 76 69 65 77 20 6f 66 20 64 | and.basic.concepts.Overview.of.d |
e1fa0 | 65 66 69 6e 65 64 20 67 72 6f 75 70 73 2e 20 59 6f 75 20 73 65 65 20 74 68 65 20 74 79 70 65 2c | efined.groups..You.see.the.type, |
e1fc0 | 20 74 68 65 20 6d 65 6d 62 65 72 73 2c 20 61 6e 64 20 77 68 65 72 65 20 74 68 65 20 67 72 6f 75 | .the.members,.and.where.the.grou |
e1fe0 | 70 20 69 73 20 75 73 65 64 2e 00 50 42 52 20 6d 75 6c 74 69 70 6c 65 20 75 70 6c 69 6e 6b 73 00 | p.is.used..PBR.multiple.uplinks. |
e2000 | 50 43 31 20 69 73 20 69 6e 20 74 68 65 20 60 60 64 65 66 61 75 6c 74 60 60 20 56 52 46 20 61 6e | PC1.is.in.the.``default``.VRF.an |
e2020 | 64 20 61 63 74 69 6e 67 20 61 73 20 65 2e 67 2e 20 61 20 22 66 69 6c 65 73 65 72 76 65 72 22 00 | d.acting.as.e.g..a."fileserver". |
e2040 | 50 43 32 20 69 73 20 69 6e 20 56 52 46 20 60 60 62 6c 75 65 60 60 20 77 68 69 63 68 20 69 73 20 | PC2.is.in.VRF.``blue``.which.is. |
e2060 | 74 68 65 20 64 65 76 65 6c 6f 70 6d 65 6e 74 20 64 65 70 61 72 74 6d 65 6e 74 00 50 43 33 20 61 | the.development.department.PC3.a |
e2080 | 6e 64 20 50 43 34 20 61 72 65 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 20 62 72 69 64 67 65 | nd.PC4.are.connected.to.a.bridge |
e20a0 | 20 64 65 76 69 63 65 20 6f 6e 20 72 6f 75 74 65 72 20 60 60 52 31 60 60 20 77 68 69 63 68 20 69 | .device.on.router.``R1``.which.i |
e20c0 | 73 20 69 6e 20 56 52 46 20 60 60 72 65 64 60 60 2e 20 53 61 79 20 74 68 69 73 20 69 73 20 74 68 | s.in.VRF.``red``..Say.this.is.th |
e20e0 | 65 20 48 52 20 64 65 70 61 72 74 6d 65 6e 74 2e 00 50 43 34 20 68 61 73 20 49 50 20 31 30 2e 30 | e.HR.department..PC4.has.IP.10.0 |
e2100 | 2e 30 2e 34 2f 32 34 20 61 6e 64 20 50 43 35 20 68 61 73 20 49 50 20 31 30 2e 30 2e 30 2e 35 2f | .0.4/24.and.PC5.has.IP.10.0.0.5/ |
e2120 | 32 34 2c 20 73 6f 20 74 68 65 79 20 62 65 6c 69 65 76 65 20 74 68 65 79 20 61 72 65 20 69 6e 20 | 24,.so.they.believe.they.are.in. |
e2140 | 74 68 65 20 73 61 6d 65 20 62 72 6f 61 64 63 61 73 74 20 64 6f 6d 61 69 6e 2e 00 50 43 35 20 72 | the.same.broadcast.domain..PC5.r |
e2160 | 65 63 65 69 76 65 73 20 74 68 65 20 70 69 6e 67 20 65 63 68 6f 2c 20 72 65 73 70 6f 6e 64 73 20 | eceives.the.ping.echo,.responds. |
e2180 | 77 69 74 68 20 61 6e 20 65 63 68 6f 20 72 65 70 6c 79 20 74 68 61 74 20 4c 65 61 66 33 20 72 65 | with.an.echo.reply.that.Leaf3.re |
e21a0 | 63 65 69 76 65 73 20 61 6e 64 20 74 68 69 73 20 74 69 6d 65 20 66 6f 72 77 61 72 64 73 20 74 6f | ceives.and.this.time.forwards.to |
e21c0 | 20 4c 65 61 66 32 27 73 20 75 6e 69 63 61 73 74 20 61 64 64 72 65 73 73 20 64 69 72 65 63 74 6c | .Leaf2's.unicast.address.directl |
e21e0 | 79 20 62 65 63 61 75 73 65 20 69 74 20 6c 65 61 72 6e 65 64 20 74 68 65 20 6c 6f 63 61 74 69 6f | y.because.it.learned.the.locatio |
e2200 | 6e 20 6f 66 20 50 43 34 20 61 62 6f 76 65 2e 20 57 68 65 6e 20 4c 65 61 66 32 20 72 65 63 65 69 | n.of.PC4.above..When.Leaf2.recei |
e2220 | 76 65 73 20 74 68 65 20 65 63 68 6f 20 72 65 70 6c 79 20 66 72 6f 6d 20 50 43 35 20 69 74 20 73 | ves.the.echo.reply.from.PC5.it.s |
e2240 | 65 65 73 20 74 68 61 74 20 69 74 20 63 61 6d 65 20 66 72 6f 6d 20 4c 65 61 66 33 20 61 6e 64 20 | ees.that.it.came.from.Leaf3.and. |
e2260 | 73 6f 20 72 65 6d 65 6d 62 65 72 73 20 74 68 61 74 20 50 43 35 20 69 73 20 72 65 61 63 68 61 62 | so.remembers.that.PC5.is.reachab |
e2280 | 6c 65 20 76 69 61 20 4c 65 61 66 33 2e 00 50 49 4d 20 28 50 72 6f 74 6f 63 6f 6c 20 49 6e 64 65 | le.via.Leaf3..PIM.(Protocol.Inde |
e22a0 | 70 65 6e 64 65 6e 74 20 4d 75 6c 74 69 63 61 73 74 29 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 | pendent.Multicast).must.be.confi |
e22c0 | 67 75 72 65 64 20 69 6e 20 65 76 65 72 79 20 69 6e 74 65 72 66 61 63 65 20 6f 66 20 65 76 65 72 | gured.in.every.interface.of.ever |
e22e0 | 79 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 72 6f 75 74 65 72 2e 20 45 76 65 72 79 20 72 6f | y.participating.router..Every.ro |
e2300 | 75 74 65 72 20 6d 75 73 74 20 61 6c 73 6f 20 68 61 76 65 20 74 68 65 20 6c 6f 63 61 74 69 6f 6e | uter.must.also.have.the.location |
e2320 | 20 6f 66 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 6d 61 6e 75 61 6c 6c 79 | .of.the.Rendevouz.Point.manually |
e2340 | 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 54 68 65 6e 2c 20 75 6e 69 64 69 72 65 63 74 69 6f 6e 61 | .configured..Then,.unidirectiona |
e2360 | 6c 20 73 68 61 72 65 64 20 74 72 65 65 73 20 72 6f 6f 74 65 64 20 61 74 20 74 68 65 20 52 65 6e | l.shared.trees.rooted.at.the.Ren |
e2380 | 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 | devouz.Point.will.automatically. |
e23a0 | 62 65 20 62 75 69 6c 74 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 64 69 73 74 72 69 62 75 74 | be.built.for.multicast.distribut |
e23c0 | 69 6f 6e 2e 00 50 49 4d 20 61 6e 64 20 49 47 4d 50 00 50 49 4d 20 e2 80 93 20 50 72 6f 74 6f 63 | ion..PIM.and.IGMP.PIM.....Protoc |
e23e0 | 6f 6c 20 49 6e 64 65 70 65 6e 64 65 6e 74 20 4d 75 6c 74 69 63 61 73 74 00 50 49 4d 2d 53 4d 20 | ol.Independent.Multicast.PIM-SM. |
e2400 | 2d 20 50 49 4d 20 53 70 61 72 73 65 20 4d 6f 64 65 00 50 49 4d 36 20 2d 20 50 72 6f 74 6f 63 6f | -.PIM.Sparse.Mode.PIM6.-.Protoco |
e2420 | 6c 20 49 6e 64 65 70 65 6e 64 65 6e 74 20 4d 75 6c 74 69 63 61 73 74 20 66 6f 72 20 49 50 76 36 | l.Independent.Multicast.for.IPv6 |
e2440 | 00 50 49 4d 76 36 20 28 50 72 6f 74 6f 63 6f 6c 20 49 6e 64 65 70 65 6e 64 65 6e 74 20 4d 75 6c | .PIMv6.(Protocol.Independent.Mul |
e2460 | 74 69 63 61 73 74 20 66 6f 72 20 49 50 76 36 29 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 | ticast.for.IPv6).must.be.configu |
e2480 | 72 65 64 20 69 6e 20 65 76 65 72 79 20 69 6e 74 65 72 66 61 63 65 20 6f 66 20 65 76 65 72 79 20 | red.in.every.interface.of.every. |
e24a0 | 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 72 6f 75 74 65 72 2e 20 45 76 65 72 79 20 72 6f 75 74 | participating.router..Every.rout |
e24c0 | 65 72 20 6d 75 73 74 20 61 6c 73 6f 20 68 61 76 65 20 74 68 65 20 6c 6f 63 61 74 69 6f 6e 20 6f | er.must.also.have.the.location.o |
e24e0 | 66 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 6d 61 6e 75 61 6c 6c 79 20 63 | f.the.Rendevouz.Point.manually.c |
e2500 | 6f 6e 66 69 67 75 72 65 64 2e 20 54 68 65 6e 2c 20 75 6e 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 | onfigured..Then,.unidirectional. |
e2520 | 73 68 61 72 65 64 20 74 72 65 65 73 20 72 6f 6f 74 65 64 20 61 74 20 74 68 65 20 52 65 6e 64 65 | shared.trees.rooted.at.the.Rende |
e2540 | 76 6f 75 7a 20 50 6f 69 6e 74 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 62 65 | vouz.Point.will.automatically.be |
e2560 | 20 62 75 69 6c 74 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 64 69 73 74 72 69 62 75 74 69 6f | .built.for.multicast.distributio |
e2580 | 6e 2e 00 50 4b 49 00 50 50 44 55 00 50 50 50 20 41 64 76 61 6e 63 65 64 20 4f 70 74 69 6f 6e 73 | n..PKI.PPDU.PPP.Advanced.Options |
e25a0 | 00 50 50 50 20 53 65 74 74 69 6e 67 73 00 50 50 50 6f 45 00 50 50 50 6f 45 20 53 65 72 76 65 72 | .PPP.Settings.PPPoE.PPPoE.Server |
e25c0 | 00 50 50 50 6f 45 20 6f 70 74 69 6f 6e 73 00 50 50 54 50 2d 53 65 72 76 65 72 00 50 61 63 6b 65 | .PPPoE.options.PPTP-Server.Packe |
e25e0 | 74 2d 62 61 73 65 64 20 62 61 6c 61 6e 63 69 6e 67 20 63 61 6e 20 6c 65 61 64 20 74 6f 20 61 20 | t-based.balancing.can.lead.to.a. |
e2600 | 62 65 74 74 65 72 20 62 61 6c 61 6e 63 65 20 61 63 72 6f 73 73 20 69 6e 74 65 72 66 61 63 65 73 | better.balance.across.interfaces |
e2620 | 20 77 68 65 6e 20 6f 75 74 20 6f 66 20 6f 72 64 65 72 20 70 61 63 6b 65 74 73 20 61 72 65 20 6e | .when.out.of.order.packets.are.n |
e2640 | 6f 20 69 73 73 75 65 2e 20 50 65 72 2d 70 61 63 6b 65 74 2d 62 61 73 65 64 20 62 61 6c 61 6e 63 | o.issue..Per-packet-based.balanc |
e2660 | 69 6e 67 20 63 61 6e 20 62 65 20 73 65 74 20 66 6f 72 20 61 20 62 61 6c 61 6e 63 69 6e 67 20 72 | ing.can.be.set.for.a.balancing.r |
e2680 | 75 6c 65 20 77 69 74 68 3a 00 50 61 72 74 69 63 75 6c 61 72 6c 79 20 6c 61 72 67 65 20 6e 65 74 | ule.with:.Particularly.large.net |
e26a0 | 77 6f 72 6b 73 20 6d 61 79 20 77 69 73 68 20 74 6f 20 72 75 6e 20 74 68 65 69 72 20 6f 77 6e 20 | works.may.wish.to.run.their.own. |
e26c0 | 52 50 4b 49 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 20 61 6e 64 20 70 | RPKI.certificate.authority.and.p |
e26e0 | 75 62 6c 69 63 61 74 69 6f 6e 20 73 65 72 76 65 72 20 69 6e 73 74 65 61 64 20 6f 66 20 70 75 62 | ublication.server.instead.of.pub |
e2700 | 6c 69 73 68 69 6e 67 20 52 4f 41 73 20 76 69 61 20 74 68 65 69 72 20 52 49 52 2e 20 54 68 69 73 | lishing.ROAs.via.their.RIR..This |
e2720 | 20 69 73 20 61 20 73 75 62 6a 65 63 74 20 66 61 72 20 62 65 79 6f 6e 64 20 74 68 65 20 73 63 6f | .is.a.subject.far.beyond.the.sco |
e2740 | 70 65 20 6f 66 20 56 79 4f 53 27 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 20 43 6f 6e 73 69 | pe.of.VyOS'.documentation..Consi |
e2760 | 64 65 72 20 72 65 61 64 69 6e 67 20 61 62 6f 75 74 20 4b 72 69 6c 6c 5f 20 69 66 20 74 68 69 73 | der.reading.about.Krill_.if.this |
e2780 | 20 69 73 20 61 20 72 61 62 62 69 74 20 68 6f 6c 65 20 79 6f 75 20 6e 65 65 64 20 6f 72 20 65 73 | .is.a.rabbit.hole.you.need.or.es |
e27a0 | 70 65 63 69 61 6c 6c 79 20 77 61 6e 74 20 74 6f 20 64 69 76 65 20 64 6f 77 6e 2e 00 50 61 73 73 | pecially.want.to.dive.down..Pass |
e27c0 | 20 61 64 64 72 65 73 73 20 6f 66 20 55 6e 69 66 69 20 63 6f 6e 74 72 6f 6c 6c 65 72 20 61 74 20 | .address.of.Unifi.controller.at. |
e27e0 | 60 60 31 37 32 2e 31 36 2e 31 30 30 2e 31 60 60 20 74 6f 20 61 6c 6c 20 63 6c 69 65 6e 74 73 20 | ``172.16.100.1``.to.all.clients. |
e2800 | 6f 66 20 60 60 4e 45 54 31 60 60 00 50 61 74 68 20 60 3c 63 6f 73 74 3e 60 20 76 61 6c 75 65 20 | of.``NET1``.Path.`<cost>`.value. |
e2820 | 66 6f 72 20 53 70 61 6e 6e 69 6e 67 20 54 72 65 65 20 50 72 6f 74 6f 63 6f 6c 2e 20 45 61 63 68 | for.Spanning.Tree.Protocol..Each |
e2840 | 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 61 20 62 72 69 64 67 65 20 63 6f 75 6c 64 20 68 61 76 | .interface.in.a.bridge.could.hav |
e2860 | 65 20 61 20 64 69 66 66 65 72 65 6e 74 20 73 70 65 65 64 20 61 6e 64 20 74 68 69 73 20 76 61 6c | e.a.different.speed.and.this.val |
e2880 | 75 65 20 69 73 20 75 73 65 64 20 77 68 65 6e 20 64 65 63 69 64 69 6e 67 20 77 68 69 63 68 20 6c | ue.is.used.when.deciding.which.l |
e28a0 | 69 6e 6b 20 74 6f 20 75 73 65 2e 20 46 61 73 74 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 73 68 | ink.to.use..Faster.interfaces.sh |
e28c0 | 6f 75 6c 64 20 68 61 76 65 20 6c 6f 77 65 72 20 63 6f 73 74 73 2e 00 50 61 74 68 20 74 6f 20 60 | ould.have.lower.costs..Path.to.` |
e28e0 | 3c 66 69 6c 65 3e 60 20 70 6f 69 6e 74 69 6e 67 20 74 6f 20 74 68 65 20 63 65 72 74 69 66 69 63 | <file>`.pointing.to.the.certific |
e2900 | 61 74 65 20 61 75 74 68 6f 72 69 74 79 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 50 61 74 68 20 | ate.authority.certificate..Path. |
e2920 | 74 6f 20 60 3c 66 69 6c 65 3e 60 20 70 6f 69 6e 74 69 6e 67 20 74 6f 20 74 68 65 20 73 65 72 76 | to.`<file>`.pointing.to.the.serv |
e2940 | 65 72 73 20 63 65 72 74 69 66 69 63 61 74 65 20 28 70 75 62 6c 69 63 20 70 6f 72 74 69 6f 6e 29 | ers.certificate.(public.portion) |
e2960 | 2e 00 50 65 65 72 20 2d 20 50 65 65 72 00 50 65 65 72 20 47 72 6f 75 70 73 00 50 65 65 72 20 49 | ..Peer.-.Peer.Peer.Groups.Peer.I |
e2980 | 50 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 50 65 65 72 20 50 61 72 61 6d 65 74 | P.address.to.match..Peer.Paramet |
e29a0 | 65 72 73 00 50 65 65 72 20 67 72 6f 75 70 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 68 65 6c 70 | ers.Peer.groups.are.used.to.help |
e29c0 | 20 69 6d 70 72 6f 76 65 20 73 63 61 6c 69 6e 67 20 62 79 20 67 65 6e 65 72 61 74 69 6e 67 20 74 | .improve.scaling.by.generating.t |
e29e0 | 68 65 20 73 61 6d 65 20 75 70 64 61 74 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 61 6c | he.same.update.information.to.al |
e2a00 | 6c 20 6d 65 6d 62 65 72 73 20 6f 66 20 61 20 70 65 65 72 20 67 72 6f 75 70 2e 20 4e 6f 74 65 20 | l.members.of.a.peer.group..Note. |
e2a20 | 74 68 61 74 20 74 68 69 73 20 6d 65 61 6e 73 20 74 68 61 74 20 74 68 65 20 72 6f 75 74 65 73 20 | that.this.means.that.the.routes. |
e2a40 | 67 65 6e 65 72 61 74 65 64 20 62 79 20 61 20 6d 65 6d 62 65 72 20 6f 66 20 61 20 70 65 65 72 20 | generated.by.a.member.of.a.peer. |
e2a60 | 67 72 6f 75 70 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 62 61 63 6b 20 74 6f 20 74 68 61 74 20 | group.will.be.sent.back.to.that. |
e2a80 | 6f 72 69 67 69 6e 61 74 69 6e 67 20 70 65 65 72 20 77 69 74 68 20 74 68 65 20 6f 72 69 67 69 6e | originating.peer.with.the.origin |
e2aa0 | 61 74 6f 72 20 69 64 65 6e 74 69 66 69 65 72 20 61 74 74 72 69 62 75 74 65 20 73 65 74 20 74 6f | ator.identifier.attribute.set.to |
e2ac0 | 20 69 6e 64 69 63 61 74 65 64 20 74 68 65 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 70 65 65 72 2e | .indicated.the.originating.peer. |
e2ae0 | 20 41 6c 6c 20 70 65 65 72 73 20 6e 6f 74 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 61 | .All.peers.not.associated.with.a |
e2b00 | 20 73 70 65 63 69 66 69 63 20 70 65 65 72 20 67 72 6f 75 70 20 61 72 65 20 74 72 65 61 74 65 64 | .specific.peer.group.are.treated |
e2b20 | 20 61 73 20 62 65 6c 6f 6e 67 69 6e 67 20 74 6f 20 61 20 64 65 66 61 75 6c 74 20 70 65 65 72 20 | .as.belonging.to.a.default.peer. |
e2b40 | 67 72 6f 75 70 2c 20 61 6e 64 20 77 69 6c 6c 20 73 68 61 72 65 20 75 70 64 61 74 65 73 2e 00 50 | group,.and.will.share.updates..P |
e2b60 | 65 65 72 20 74 6f 20 73 65 6e 64 20 75 6e 69 63 61 73 74 20 55 44 50 20 63 6f 6e 6e 74 72 61 63 | eer.to.send.unicast.UDP.conntrac |
e2b80 | 6b 20 73 79 6e 63 20 65 6e 74 69 72 65 73 20 74 6f 2c 20 69 66 20 6e 6f 74 20 75 73 69 6e 67 20 | k.sync.entires.to,.if.not.using. |
e2ba0 | 4d 75 6c 74 69 63 61 73 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 72 6f 6d 20 61 62 6f | Multicast.configuration.from.abo |
e2bc0 | 76 65 20 61 62 6f 76 65 2e 00 50 65 65 72 73 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 50 65 | ve.above..Peers.Configuration.Pe |
e2be0 | 72 20 64 65 66 61 75 6c 74 20 56 79 4f 53 73 20 68 61 73 20 6d 69 6e 69 6d 61 6c 20 73 79 73 6c | r.default.VyOSs.has.minimal.sysl |
e2c00 | 6f 67 20 6c 6f 67 67 69 6e 67 20 65 6e 61 62 6c 65 64 20 77 68 69 63 68 20 69 73 20 73 74 6f 72 | og.logging.enabled.which.is.stor |
e2c20 | 65 64 20 61 6e 64 20 72 6f 74 61 74 65 64 20 6c 6f 63 61 6c 6c 79 2e 20 45 72 72 6f 72 73 20 77 | ed.and.rotated.locally..Errors.w |
e2c40 | 69 6c 6c 20 62 65 20 61 6c 77 61 79 73 20 6c 6f 67 67 65 64 20 74 6f 20 61 20 6c 6f 63 61 6c 20 | ill.be.always.logged.to.a.local. |
e2c60 | 66 69 6c 65 2c 20 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 20 60 6c 6f 63 61 6c 37 60 20 65 72 | file,.which.includes.`local7`.er |
e2c80 | 72 6f 72 20 6d 65 73 73 61 67 65 73 2c 20 65 6d 65 72 67 65 6e 63 79 20 6d 65 73 73 61 67 65 73 | ror.messages,.emergency.messages |
e2ca0 | 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2c 20 74 6f | .will.be.sent.to.the.console,.to |
e2cc0 | 6f 2e 00 50 65 72 20 64 65 66 61 75 6c 74 20 65 76 65 72 79 20 70 61 63 6b 65 74 20 69 73 20 73 | o..Per.default.every.packet.is.s |
e2ce0 | 61 6d 70 6c 65 64 20 28 74 68 61 74 20 69 73 2c 20 74 68 65 20 73 61 6d 70 6c 69 6e 67 20 72 61 | ampled.(that.is,.the.sampling.ra |
e2d00 | 74 65 20 69 73 20 31 29 2e 00 50 65 72 20 64 65 66 61 75 6c 74 20 74 68 65 20 75 73 65 72 20 73 | te.is.1)..Per.default.the.user.s |
e2d20 | 65 73 73 69 6f 6e 20 69 73 20 62 65 69 6e 67 20 72 65 70 6c 61 63 65 64 20 69 66 20 61 20 73 65 | ession.is.being.replaced.if.a.se |
e2d40 | 63 6f 6e 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 72 65 71 75 65 73 74 20 73 75 63 63 | cond.authentication.request.succ |
e2d60 | 65 65 64 73 2e 20 53 75 63 68 20 73 65 73 73 69 6f 6e 20 72 65 71 75 65 73 74 73 20 63 61 6e 20 | eeds..Such.session.requests.can. |
e2d80 | 62 65 20 65 69 74 68 65 72 20 64 65 6e 69 65 64 20 6f 72 20 61 6c 6c 6f 77 65 64 20 65 6e 74 69 | be.either.denied.or.allowed.enti |
e2da0 | 72 65 6c 79 2c 20 77 68 69 63 68 20 77 6f 75 6c 64 20 61 6c 6c 6f 77 20 6d 75 6c 74 69 70 6c 65 | rely,.which.would.allow.multiple |
e2dc0 | 20 73 65 73 73 69 6f 6e 73 20 66 6f 72 20 61 20 75 73 65 72 20 69 6e 20 74 68 65 20 6c 61 74 74 | .sessions.for.a.user.in.the.latt |
e2de0 | 65 72 20 63 61 73 65 2e 20 49 66 20 69 74 20 69 73 20 64 65 6e 69 65 64 2c 20 74 68 65 20 73 65 | er.case..If.it.is.denied,.the.se |
e2e00 | 63 6f 6e 64 20 73 65 73 73 69 6f 6e 20 69 73 20 62 65 69 6e 67 20 72 65 6a 65 63 74 65 64 20 65 | cond.session.is.being.rejected.e |
e2e20 | 76 65 6e 20 69 66 20 74 68 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 75 63 63 65 65 | ven.if.the.authentication.succee |
e2e40 | 64 73 2c 20 74 68 65 20 75 73 65 72 20 68 61 73 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 69 74 | ds,.the.user.has.to.terminate.it |
e2e60 | 73 20 66 69 72 73 74 20 73 65 73 73 69 6f 6e 20 61 6e 64 20 63 61 6e 20 74 68 65 6e 20 61 75 74 | s.first.session.and.can.then.aut |
e2e80 | 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 67 61 69 6e 2e 00 50 65 72 20 64 65 66 61 75 6c 74 2c 20 | hentication.again..Per.default,. |
e2ea0 | 69 6e 74 65 72 66 61 63 65 73 20 75 73 65 64 20 69 6e 20 61 20 6c 6f 61 64 20 62 61 6c 61 6e 63 | interfaces.used.in.a.load.balanc |
e2ec0 | 69 6e 67 20 70 6f 6f 6c 20 72 65 70 6c 61 63 65 20 74 68 65 20 73 6f 75 72 63 65 20 49 50 20 6f | ing.pool.replace.the.source.IP.o |
e2ee0 | 66 20 65 61 63 68 20 6f 75 74 67 6f 69 6e 67 20 70 61 63 6b 65 74 20 77 69 74 68 20 69 74 73 20 | f.each.outgoing.packet.with.its. |
e2f00 | 6f 77 6e 20 61 64 64 72 65 73 73 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 72 65 70 6c 69 | own.address.to.ensure.that.repli |
e2f20 | 65 73 20 61 72 72 69 76 65 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 2e | es.arrive.on.the.same.interface. |
e2f40 | 20 54 68 69 73 20 77 6f 72 6b 73 20 74 68 72 6f 75 67 68 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c | .This.works.through.automaticall |
e2f60 | 79 20 67 65 6e 65 72 61 74 65 64 20 73 6f 75 72 63 65 20 4e 41 54 20 28 53 4e 41 54 29 20 72 75 | y.generated.source.NAT.(SNAT).ru |
e2f80 | 6c 65 73 2c 20 74 68 65 73 65 20 72 75 6c 65 73 20 61 72 65 20 6f 6e 6c 79 20 61 70 70 6c 69 65 | les,.these.rules.are.only.applie |
e2fa0 | 64 20 74 6f 20 62 61 6c 61 6e 63 65 64 20 74 72 61 66 66 69 63 2e 20 49 6e 20 63 61 73 65 73 20 | d.to.balanced.traffic..In.cases. |
e2fc0 | 77 68 65 72 65 20 74 68 69 73 20 62 65 68 61 76 69 6f 75 72 20 69 73 20 6e 6f 74 20 64 65 73 69 | where.this.behaviour.is.not.desi |
e2fe0 | 72 65 64 2c 20 74 68 65 20 61 75 74 6f 6d 61 74 69 63 20 67 65 6e 65 72 61 74 69 6f 6e 20 6f 66 | red,.the.automatic.generation.of |
e3000 | 20 53 4e 41 54 20 72 75 6c 65 73 20 63 61 6e 20 62 65 20 64 69 73 61 62 6c 65 64 3a 00 50 65 72 | .SNAT.rules.can.be.disabled:.Per |
e3020 | 66 6f 72 6d 61 6e 63 65 00 50 65 72 69 6f 64 69 63 61 6c 6c 79 2c 20 61 20 68 65 6c 6c 6f 20 70 | formance.Periodically,.a.hello.p |
e3040 | 61 63 6b 65 74 20 69 73 20 73 65 6e 74 20 6f 75 74 20 62 79 20 74 68 65 20 52 6f 6f 74 20 42 72 | acket.is.sent.out.by.the.Root.Br |
e3060 | 69 64 67 65 20 61 6e 64 20 74 68 65 20 44 65 73 69 67 6e 61 74 65 64 20 42 72 69 64 67 65 73 2e | idge.and.the.Designated.Bridges. |
e3080 | 20 48 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 63 6f 6d 6d 75 | .Hello.packets.are.used.to.commu |
e30a0 | 6e 69 63 61 74 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 74 6f 70 | nicate.information.about.the.top |
e30c0 | 6f 6c 6f 67 79 20 74 68 72 6f 75 67 68 6f 75 74 20 74 68 65 20 65 6e 74 69 72 65 20 42 72 69 64 | ology.throughout.the.entire.Brid |
e30e0 | 67 65 64 20 4c 6f 63 61 6c 20 41 72 65 61 20 4e 65 74 77 6f 72 6b 2e 00 50 69 6e 67 20 63 6f 6d | ged.Local.Area.Network..Ping.com |
e3100 | 6d 61 6e 64 20 63 61 6e 20 62 65 20 69 6e 74 65 72 72 75 70 74 65 64 20 61 74 20 61 6e 79 20 67 | mand.can.be.interrupted.at.any.g |
e3120 | 69 76 65 6e 20 74 69 6d 65 20 75 73 69 6e 67 20 60 60 3c 43 74 72 6c 3e 2b 63 60 60 2e 20 41 20 | iven.time.using.``<Ctrl>+c``..A. |
e3140 | 62 72 69 65 66 20 73 74 61 74 69 73 74 69 63 20 69 73 20 73 68 6f 77 6e 20 61 66 74 65 72 77 61 | brief.statistic.is.shown.afterwa |
e3160 | 72 64 73 2e 00 50 69 6e 67 20 75 73 65 73 20 49 43 4d 50 20 70 72 6f 74 6f 63 6f 6c 27 73 20 6d | rds..Ping.uses.ICMP.protocol's.m |
e3180 | 61 6e 64 61 74 6f 72 79 20 45 43 48 4f 5f 52 45 51 55 45 53 54 20 64 61 74 61 67 72 61 6d 20 74 | andatory.ECHO_REQUEST.datagram.t |
e31a0 | 6f 20 65 6c 69 63 69 74 20 61 6e 20 49 43 4d 50 20 45 43 48 4f 5f 52 45 53 50 4f 4e 53 45 20 66 | o.elicit.an.ICMP.ECHO_RESPONSE.f |
e31c0 | 72 6f 6d 20 61 20 68 6f 73 74 20 6f 72 20 67 61 74 65 77 61 79 2e 20 45 43 48 4f 5f 52 45 51 55 | rom.a.host.or.gateway..ECHO_REQU |
e31e0 | 45 53 54 20 64 61 74 61 67 72 61 6d 73 20 28 70 69 6e 67 73 29 20 77 69 6c 6c 20 68 61 76 65 20 | EST.datagrams.(pings).will.have. |
e3200 | 61 6e 20 49 50 20 61 6e 64 20 49 43 4d 50 20 68 65 61 64 65 72 2c 20 66 6f 6c 6c 6f 77 65 64 20 | an.IP.and.ICMP.header,.followed. |
e3220 | 62 79 20 22 73 74 72 75 63 74 20 74 69 6d 65 76 61 6c 22 20 61 6e 64 20 61 6e 20 61 72 62 69 74 | by."struct.timeval".and.an.arbit |
e3240 | 72 61 72 79 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 64 20 62 79 74 65 73 20 75 73 65 64 20 74 6f | rary.number.of.pad.bytes.used.to |
e3260 | 20 66 69 6c 6c 20 6f 75 74 20 74 68 65 20 70 61 63 6b 65 74 2e 00 50 69 6e 67 69 6e 67 20 28 49 | .fill.out.the.packet..Pinging.(I |
e3280 | 50 76 36 29 20 74 68 65 20 6f 74 68 65 72 20 68 6f 73 74 20 61 6e 64 20 69 6e 74 65 72 63 65 70 | Pv6).the.other.host.and.intercep |
e32a0 | 74 69 6e 67 20 74 68 65 20 74 72 61 66 66 69 63 20 69 6e 20 60 60 65 74 68 31 60 60 20 77 69 6c | ting.the.traffic.in.``eth1``.wil |
e32c0 | 6c 20 73 68 6f 77 20 79 6f 75 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 69 73 20 65 6e 63 72 79 70 | l.show.you.the.content.is.encryp |
e32e0 | 74 65 64 2e 00 50 6c 61 63 65 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 67 69 76 65 6e 20 56 52 | ted..Place.interface.in.given.VR |
e3300 | 46 20 69 6e 73 74 61 6e 63 65 2e 00 50 6c 61 79 20 61 6e 20 61 75 64 69 62 6c 65 20 62 65 65 70 | F.instance..Play.an.audible.beep |
e3320 | 20 74 6f 20 74 68 65 20 73 79 73 74 65 6d 20 73 70 65 61 6b 65 72 20 77 68 65 6e 20 73 79 73 74 | .to.the.system.speaker.when.syst |
e3340 | 65 6d 20 69 73 20 72 65 61 64 79 2e 00 50 6c 65 61 73 65 20 62 65 20 61 77 61 72 65 2c 20 64 75 | em.is.ready..Please.be.aware,.du |
e3360 | 65 20 74 6f 20 61 6e 20 75 70 73 74 72 65 61 6d 20 62 75 67 2c 20 63 6f 6e 66 69 67 20 63 68 61 | e.to.an.upstream.bug,.config.cha |
e3380 | 6e 67 65 73 2f 63 6f 6d 6d 69 74 73 20 77 69 6c 6c 20 72 65 73 74 61 72 74 20 74 68 65 20 70 70 | nges/commits.will.restart.the.pp |
e33a0 | 70 20 64 61 65 6d 6f 6e 20 61 6e 64 20 77 69 6c 6c 20 72 65 73 65 74 20 65 78 69 73 74 69 6e 67 | p.daemon.and.will.reset.existing |
e33c0 | 20 49 50 6f 45 20 73 65 73 73 69 6f 6e 73 2c 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 63 6f | .IPoE.sessions,.in.order.to.beco |
e33e0 | 6d 65 20 65 66 66 65 63 74 69 76 65 2e 00 50 6c 65 61 73 65 20 62 65 20 61 77 61 72 65 2c 20 64 | me.effective..Please.be.aware,.d |
e3400 | 75 65 20 74 6f 20 61 6e 20 75 70 73 74 72 65 61 6d 20 62 75 67 2c 20 63 6f 6e 66 69 67 20 63 68 | ue.to.an.upstream.bug,.config.ch |
e3420 | 61 6e 67 65 73 2f 63 6f 6d 6d 69 74 73 20 77 69 6c 6c 20 72 65 73 74 61 72 74 20 74 68 65 20 70 | anges/commits.will.restart.the.p |
e3440 | 70 70 20 64 61 65 6d 6f 6e 20 61 6e 64 20 77 69 6c 6c 20 72 65 73 65 74 20 65 78 69 73 74 69 6e | pp.daemon.and.will.reset.existin |
e3460 | 67 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 20 63 6f 6e 6e 65 63 74 | g.PPPoE.connections.from.connect |
e3480 | 65 64 20 75 73 65 72 73 2c 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 63 6f 6d 65 20 65 66 66 | ed.users,.in.order.to.become.eff |
e34a0 | 65 63 74 69 76 65 2e 00 50 6c 65 61 73 65 20 72 65 66 65 72 20 74 6f 20 74 68 65 20 3a 72 65 66 | ective..Please.refer.to.the.:ref |
e34c0 | 3a 60 69 70 73 65 63 60 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 69 | :`ipsec`.documentation.for.the.i |
e34e0 | 6e 64 69 76 69 64 75 61 6c 20 49 50 53 65 63 20 72 65 6c 61 74 65 64 20 6f 70 74 69 6f 6e 73 2e | ndividual.IPSec.related.options. |
e3500 | 00 50 6c 65 61 73 65 20 72 65 66 65 72 20 74 6f 20 74 68 65 20 3a 72 65 66 3a 60 74 75 6e 6e 65 | .Please.refer.to.the.:ref:`tunne |
e3520 | 6c 2d 69 6e 74 65 72 66 61 63 65 60 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 6f 72 20 74 | l-interface`.documentation.for.t |
e3540 | 68 65 20 69 6e 64 69 76 69 64 75 61 6c 20 74 75 6e 6e 65 6c 20 72 65 6c 61 74 65 64 20 6f 70 74 | he.individual.tunnel.related.opt |
e3560 | 69 6f 6e 73 2e 00 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 3a 72 65 66 3a 60 64 68 63 70 2d | ions..Please.see.the.:ref:`dhcp- |
e3580 | 64 6e 73 2d 71 75 69 63 6b 2d 73 74 61 72 74 60 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 | dns-quick-start`.configuration.. |
e35a0 | 50 6c 65 61 73 65 20 74 61 6b 65 20 61 20 6c 6f 6f 6b 20 61 74 20 74 68 65 20 3a 72 65 66 3a 60 | Please.take.a.look.at.the.:ref:` |
e35c0 | 76 79 6f 73 61 70 69 60 20 70 61 67 65 20 66 6f 72 20 61 6e 20 64 65 74 61 69 6c 65 64 20 68 6f | vyosapi`.page.for.an.detailed.ho |
e35e0 | 77 2d 74 6f 2e 00 50 6c 65 61 73 65 20 74 61 6b 65 20 61 20 6c 6f 6f 6b 20 61 74 20 74 68 65 20 | w-to..Please.take.a.look.at.the. |
e3600 | 43 6f 6e 74 72 69 62 75 74 69 6e 67 20 47 75 69 64 65 20 66 6f 72 20 6f 75 72 20 3a 72 65 66 3a | Contributing.Guide.for.our.:ref: |
e3620 | 60 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 60 2e 00 50 6c 65 61 73 65 20 74 61 6b 65 20 61 20 6c | `documentation`..Please.take.a.l |
e3640 | 6f 6f 6b 20 69 6e 20 74 68 65 20 41 75 74 6f 6d 61 74 69 6f 6e 20 73 65 63 74 69 6f 6e 20 74 6f | ook.in.the.Automation.section.to |
e3660 | 20 66 69 6e 64 20 73 6f 6d 65 20 75 73 65 66 75 6c 6c 20 45 78 61 6d 70 6c 65 73 2e 00 50 6c 65 | .find.some.usefull.Examples..Ple |
e3680 | 61 73 65 2c 20 72 65 66 65 72 20 74 6f 20 61 70 70 72 6f 70 69 61 74 65 20 73 65 63 74 69 6f 6e | ase,.refer.to.appropiate.section |
e36a0 | 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 66 69 72 65 | .for.more.information.about.fire |
e36c0 | 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 50 6c 65 61 73 65 2c 20 72 65 66 65 | wall.configuration:.Please,.refe |
e36e0 | 72 20 74 6f 20 61 70 70 72 6f 70 72 69 61 74 65 20 73 65 63 74 69 6f 6e 20 66 6f 72 20 6d 6f 72 | r.to.appropriate.section.for.mor |
e3700 | 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e | e.information.about.firewall.con |
e3720 | 66 69 67 75 72 61 74 69 6f 6e 3a 00 50 6f 6c 69 63 69 65 73 20 61 72 65 20 75 73 65 64 20 66 6f | figuration:.Policies.are.used.fo |
e3740 | 72 20 66 69 6c 74 65 72 69 6e 67 20 61 6e 64 20 74 72 61 66 66 69 63 20 6d 61 6e 61 67 65 6d 65 | r.filtering.and.traffic.manageme |
e3760 | 6e 74 2e 20 57 69 74 68 20 70 6f 6c 69 63 69 65 73 2c 20 6e 65 74 77 6f 72 6b 20 61 64 6d 69 6e | nt..With.policies,.network.admin |
e3780 | 69 73 74 72 61 74 6f 72 73 20 63 6f 75 6c 64 20 66 69 6c 74 65 72 20 61 6e 64 20 74 72 65 61 74 | istrators.could.filter.and.treat |
e37a0 | 20 74 72 61 66 66 69 63 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 69 72 20 6e 65 65 64 | .traffic.according.to.their.need |
e37c0 | 73 2e 00 50 6f 6c 69 63 69 65 73 20 66 6f 72 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 20 61 72 | s..Policies.for.local.traffic.ar |
e37e0 | 65 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 00 50 6f 6c 69 63 | e.defined.in.this.section..Polic |
e3800 | 69 65 73 2c 20 69 6e 20 56 79 4f 53 2c 20 61 72 65 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 75 73 | ies,.in.VyOS,.are.implemented.us |
e3820 | 69 6e 67 20 46 52 52 20 66 69 6c 74 65 72 69 6e 67 20 61 6e 64 20 72 6f 75 74 65 20 6d 61 70 73 | ing.FRR.filtering.and.route.maps |
e3840 | 2e 20 44 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 46 52 52 20 63 6f | ..Detailed.information.of.FRR.co |
e3860 | 75 6c 64 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 66 72 72 6f | uld.be.found.in.http://docs.frro |
e3880 | 75 74 69 6e 67 2e 6f 72 67 2f 00 50 6f 6c 69 63 79 00 50 6f 6c 69 63 79 20 53 65 63 74 69 6f 6e | uting.org/.Policy.Policy.Section |
e38a0 | 73 00 50 6f 6c 69 63 79 20 66 6f 72 20 63 68 65 63 6b 69 6e 67 20 74 61 72 67 65 74 73 00 50 6f | s.Policy.for.checking.targets.Po |
e38c0 | 6c 69 63 79 20 74 6f 20 74 72 61 63 6b 20 70 72 65 76 69 6f 75 73 6c 79 20 65 73 74 61 62 6c 69 | licy.to.track.previously.establi |
e38e0 | 73 68 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 50 6f 6c 69 63 79 2d 42 61 73 65 64 20 52 | shed.connections..Policy-Based.R |
e3900 | 6f 75 74 69 6e 67 20 77 69 74 68 20 6d 75 6c 74 69 70 6c 65 20 49 53 50 20 75 70 6c 69 6e 6b 73 | outing.with.multiple.ISP.uplinks |
e3920 | 20 28 73 6f 75 72 63 65 20 2e 2f 64 72 61 77 2e 69 6f 2f 70 62 72 5f 65 78 61 6d 70 6c 65 5f 31 | .(source../draw.io/pbr_example_1 |
e3940 | 2e 64 72 61 77 69 6f 29 00 50 6f 72 74 20 47 72 6f 75 70 73 00 50 6f 72 74 20 4d 69 72 72 6f 72 | .drawio).Port.Groups.Port.Mirror |
e3960 | 20 28 53 50 41 4e 29 00 50 6f 72 74 20 66 6f 72 20 44 79 6e 61 6d 69 63 20 41 75 74 68 6f 72 69 | .(SPAN).Port.for.Dynamic.Authori |
e3980 | 7a 61 74 69 6f 6e 20 45 78 74 65 6e 73 69 6f 6e 20 73 65 72 76 65 72 20 28 44 4d 2f 43 6f 41 29 | zation.Extension.server.(DM/CoA) |
e39a0 | 00 50 6f 72 74 20 6e 61 6d 65 20 61 6e 64 20 64 65 73 63 72 69 70 74 69 6f 6e 00 50 6f 72 74 20 | .Port.name.and.description.Port. |
e39c0 | 6e 75 6d 62 65 72 20 75 73 65 64 20 62 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 2c 20 64 65 66 61 75 | number.used.by.connection,.defau |
e39e0 | 6c 74 20 69 73 20 60 60 39 32 37 33 60 60 00 50 6f 72 74 20 6e 75 6d 62 65 72 20 75 73 65 64 20 | lt.is.``9273``.Port.number.used. |
e3a00 | 62 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 50 6f 72 74 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f | by.connection..Port.to.listen.fo |
e3a20 | 72 20 48 54 54 50 53 20 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 20 34 34 33 00 50 6f | r.HTTPS.requests;.default.443.Po |
e3a40 | 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 72 65 20 | rtions.of.the.network.which.are. |
e3a60 | 56 4c 41 4e 2d 61 77 61 72 65 20 28 69 2e 65 2e 2c 20 49 45 45 45 20 38 30 32 2e 31 71 5f 20 63 | VLAN-aware.(i.e.,.IEEE.802.1q_.c |
e3a80 | 6f 6e 66 6f 72 6d 61 6e 74 29 20 63 61 6e 20 69 6e 63 6c 75 64 65 20 56 4c 41 4e 20 74 61 67 73 | onformant).can.include.VLAN.tags |
e3aa0 | 2e 20 57 68 65 6e 20 61 20 66 72 61 6d 65 20 65 6e 74 65 72 73 20 74 68 65 20 56 4c 41 4e 2d 61 | ..When.a.frame.enters.the.VLAN-a |
e3ac0 | 77 61 72 65 20 70 6f 72 74 69 6f 6e 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 2c 20 61 20 74 | ware.portion.of.the.network,.a.t |
e3ae0 | 61 67 20 69 73 20 61 64 64 65 64 20 74 6f 20 72 65 70 72 65 73 65 6e 74 20 74 68 65 20 56 4c 41 | ag.is.added.to.represent.the.VLA |
e3b00 | 4e 20 6d 65 6d 62 65 72 73 68 69 70 2e 20 45 61 63 68 20 66 72 61 6d 65 20 6d 75 73 74 20 62 65 | N.membership..Each.frame.must.be |
e3b20 | 20 64 69 73 74 69 6e 67 75 69 73 68 61 62 6c 65 20 61 73 20 62 65 69 6e 67 20 77 69 74 68 69 6e | .distinguishable.as.being.within |
e3b40 | 20 65 78 61 63 74 6c 79 20 6f 6e 65 20 56 4c 41 4e 2e 20 41 20 66 72 61 6d 65 20 69 6e 20 74 68 | .exactly.one.VLAN..A.frame.in.th |
e3b60 | 65 20 56 4c 41 4e 2d 61 77 61 72 65 20 70 6f 72 74 69 6f 6e 20 6f 66 20 74 68 65 20 6e 65 74 77 | e.VLAN-aware.portion.of.the.netw |
e3b80 | 6f 72 6b 20 74 68 61 74 20 64 6f 65 73 20 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 61 20 56 4c 41 4e | ork.that.does.not.contain.a.VLAN |
e3ba0 | 20 74 61 67 20 69 73 20 61 73 73 75 6d 65 64 20 74 6f 20 62 65 20 66 6c 6f 77 69 6e 67 20 6f 6e | .tag.is.assumed.to.be.flowing.on |
e3bc0 | 20 74 68 65 20 6e 61 74 69 76 65 20 56 4c 41 4e 2e 00 50 72 65 2d 73 68 61 72 65 64 20 6b 65 79 | .the.native.VLAN..Pre-shared.key |
e3be0 | 73 00 50 72 65 63 65 64 65 6e 63 65 00 50 72 65 65 6d 70 74 69 6f 6e 00 50 72 65 66 65 72 20 61 | s.Precedence.Preemption.Prefer.a |
e3c00 | 20 73 70 65 63 69 66 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 72 6f 75 74 65 | .specific.routing.protocol.route |
e3c20 | 73 20 6f 76 65 72 20 61 6e 6f 74 68 65 72 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 | s.over.another.routing.protocol. |
e3c40 | 72 75 6e 6e 69 6e 67 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 72 6f 75 74 65 72 2e 00 50 72 65 66 | running.on.the.same.router..Pref |
e3c60 | 65 72 20 68 69 67 68 65 72 20 6c 6f 63 61 6c 20 70 72 65 66 65 72 65 6e 63 65 20 72 6f 75 74 65 | er.higher.local.preference.route |
e3c80 | 73 20 74 6f 20 6c 6f 77 65 72 2e 00 50 72 65 66 65 72 20 68 69 67 68 65 72 20 6c 6f 63 61 6c 20 | s.to.lower..Prefer.higher.local. |
e3ca0 | 77 65 69 67 68 74 20 72 6f 75 74 65 73 20 74 6f 20 6c 6f 77 65 72 20 72 6f 75 74 65 73 2e 00 50 | weight.routes.to.lower.routes..P |
e3cc0 | 72 65 66 65 72 20 6c 6f 63 61 6c 20 72 6f 75 74 65 73 20 28 73 74 61 74 69 63 73 2c 20 61 67 67 | refer.local.routes.(statics,.agg |
e3ce0 | 72 65 67 61 74 65 73 2c 20 72 65 64 69 73 74 72 69 62 75 74 65 64 29 20 74 6f 20 72 65 63 65 69 | regates,.redistributed).to.recei |
e3d00 | 76 65 64 20 72 6f 75 74 65 73 2e 00 50 72 65 66 65 72 20 73 68 6f 72 74 65 73 74 20 68 6f 70 2d | ved.routes..Prefer.shortest.hop- |
e3d20 | 63 6f 75 6e 74 20 41 53 5f 50 41 54 48 73 2e 00 50 72 65 66 65 72 20 74 68 65 20 6c 6f 77 65 73 | count.AS_PATHs..Prefer.the.lowes |
e3d40 | 74 20 6f 72 69 67 69 6e 20 74 79 70 65 20 72 6f 75 74 65 2e 20 54 68 61 74 20 69 73 2c 20 70 72 | t.origin.type.route..That.is,.pr |
e3d60 | 65 66 65 72 20 49 47 50 20 6f 72 69 67 69 6e 20 72 6f 75 74 65 73 20 74 6f 20 45 47 50 2c 20 74 | efer.IGP.origin.routes.to.EGP,.t |
e3d80 | 6f 20 49 6e 63 6f 6d 70 6c 65 74 65 20 72 6f 75 74 65 73 2e 00 50 72 65 66 65 72 20 74 68 65 20 | o.Incomplete.routes..Prefer.the. |
e3da0 | 72 6f 75 74 65 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 61 6e 20 65 78 74 65 72 6e 61 6c 2c | route.received.from.an.external, |
e3dc0 | 20 65 42 47 50 20 70 65 65 72 20 6f 76 65 72 20 72 6f 75 74 65 73 20 72 65 63 65 69 76 65 64 20 | .eBGP.peer.over.routes.received. |
e3de0 | 66 72 6f 6d 20 6f 74 68 65 72 20 74 79 70 65 73 20 6f 66 20 70 65 65 72 73 2e 00 50 72 65 66 65 | from.other.types.of.peers..Prefe |
e3e00 | 72 20 74 68 65 20 72 6f 75 74 65 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 74 68 65 20 70 65 | r.the.route.received.from.the.pe |
e3e20 | 65 72 20 77 69 74 68 20 74 68 65 20 68 69 67 68 65 72 20 74 72 61 6e 73 70 6f 72 74 20 6c 61 79 | er.with.the.higher.transport.lay |
e3e40 | 65 72 20 61 64 64 72 65 73 73 2c 20 61 73 20 61 20 6c 61 73 74 2d 72 65 73 6f 72 74 20 74 69 65 | er.address,.as.a.last-resort.tie |
e3e60 | 2d 62 72 65 61 6b 65 72 2e 00 50 72 65 66 65 72 20 74 68 65 20 72 6f 75 74 65 20 77 69 74 68 20 | -breaker..Prefer.the.route.with. |
e3e80 | 74 68 65 20 6c 6f 77 65 72 20 49 47 50 20 63 6f 73 74 2e 00 50 72 65 66 65 72 20 74 68 65 20 72 | the.lower.IGP.cost..Prefer.the.r |
e3ea0 | 6f 75 74 65 20 77 69 74 68 20 74 68 65 20 6c 6f 77 65 73 74 20 60 72 6f 75 74 65 72 2d 49 44 60 | oute.with.the.lowest.`router-ID` |
e3ec0 | 2e 20 49 66 20 74 68 65 20 72 6f 75 74 65 20 68 61 73 20 61 6e 20 60 4f 52 49 47 49 4e 41 54 4f | ..If.the.route.has.an.`ORIGINATO |
e3ee0 | 52 5f 49 44 60 20 61 74 74 72 69 62 75 74 65 2c 20 74 68 72 6f 75 67 68 20 69 42 47 50 20 72 65 | R_ID`.attribute,.through.iBGP.re |
e3f00 | 66 6c 65 63 74 69 6f 6e 2c 20 74 68 65 6e 20 74 68 61 74 20 72 6f 75 74 65 72 20 49 44 20 69 73 | flection,.then.that.router.ID.is |
e3f20 | 20 75 73 65 64 2c 20 6f 74 68 65 72 77 69 73 65 20 74 68 65 20 60 72 6f 75 74 65 72 2d 49 44 60 | .used,.otherwise.the.`router-ID` |
e3f40 | 20 6f 66 20 74 68 65 20 70 65 65 72 20 74 68 65 20 72 6f 75 74 65 20 77 61 73 20 72 65 63 65 69 | .of.the.peer.the.route.was.recei |
e3f60 | 76 65 64 20 66 72 6f 6d 20 69 73 20 75 73 65 64 2e 00 50 72 65 66 65 72 65 6e 63 65 20 61 73 73 | ved.from.is.used..Preference.ass |
e3f80 | 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 72 00 | ociated.with.the.default.router. |
e3fa0 | 50 72 65 66 69 78 20 43 6f 6e 76 65 72 73 69 6f 6e 00 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 | Prefix.Conversion.Prefix.Delegat |
e3fc0 | 69 6f 6e 00 50 72 65 66 69 78 20 4c 69 73 74 20 50 6f 6c 69 63 79 00 50 72 65 66 69 78 20 4c 69 | ion.Prefix.List.Policy.Prefix.Li |
e3fe0 | 73 74 73 00 50 72 65 66 69 78 20 63 61 6e 20 6e 6f 74 20 62 65 20 75 73 65 64 20 66 6f 72 20 6f | sts.Prefix.can.not.be.used.for.o |
e4000 | 6e 2d 6c 69 6e 6b 20 64 65 74 65 72 6d 69 6e 61 74 69 6f 6e 00 50 72 65 66 69 78 20 63 61 6e 20 | n-link.determination.Prefix.can. |
e4020 | 6e 6f 74 20 62 65 20 75 73 65 64 20 66 6f 72 20 73 74 61 74 65 6c 65 73 73 20 61 64 64 72 65 73 | not.be.used.for.stateless.addres |
e4040 | 73 20 61 75 74 6f 2d 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 50 72 65 66 69 78 20 66 69 6c 74 | s.auto-configuration.Prefix.filt |
e4060 | 65 72 69 6e 67 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 75 73 69 6e 67 20 70 72 65 66 69 78 2d 6c | ering.can.be.done.using.prefix-l |
e4080 | 69 73 74 20 61 6e 64 20 70 72 65 66 69 78 2d 6c 69 73 74 36 2e 00 50 72 65 66 69 78 20 6c 65 6e | ist.and.prefix-list6..Prefix.len |
e40a0 | 67 74 68 20 69 6e 20 69 6e 74 65 72 66 61 63 65 20 6d 75 73 74 20 62 65 20 65 71 75 61 6c 20 6f | gth.in.interface.must.be.equal.o |
e40c0 | 72 20 62 69 67 67 65 72 20 28 69 2e 65 2e 20 73 6d 61 6c 6c 65 72 20 6e 65 74 77 6f 72 6b 29 20 | r.bigger.(i.e..smaller.network). |
e40e0 | 74 68 61 6e 20 70 72 65 66 69 78 20 6c 65 6e 67 74 68 20 69 6e 20 6e 65 74 77 6f 72 6b 20 73 74 | than.prefix.length.in.network.st |
e4100 | 61 74 65 6d 65 6e 74 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 73 74 61 74 65 6d 65 6e 74 20 61 | atement..For.example.statement.a |
e4120 | 62 6f 76 65 20 64 6f 65 73 6e 27 74 20 65 6e 61 62 6c 65 20 6f 73 70 66 20 6f 6e 20 69 6e 74 65 | bove.doesn't.enable.ospf.on.inte |
e4140 | 72 66 61 63 65 20 77 69 74 68 20 61 64 64 72 65 73 73 20 31 39 32 2e 31 36 38 2e 31 2e 31 2f 32 | rface.with.address.192.168.1.1/2 |
e4160 | 33 2c 20 62 75 74 20 69 74 20 64 6f 65 73 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 | 3,.but.it.does.on.interface.with |
e4180 | 20 61 64 64 72 65 73 73 20 31 39 32 2e 31 36 38 2e 31 2e 31 32 39 2f 32 35 2e 00 50 72 65 66 69 | .address.192.168.1.129/25..Prefi |
e41a0 | 78 20 6c 69 73 74 73 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 6d 6f 73 74 20 70 6f 77 65 72 66 | x.lists.provides.the.most.powerf |
e41c0 | 75 6c 20 70 72 65 66 69 78 20 62 61 73 65 64 20 66 69 6c 74 65 72 69 6e 67 20 6d 65 63 68 61 6e | ul.prefix.based.filtering.mechan |
e41e0 | 69 73 6d 2e 20 49 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 2d 6c 69 73 74 20 | ism..In.addition.to.access-list. |
e4200 | 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2c 20 69 70 20 70 72 65 66 69 78 2d 6c 69 73 74 20 68 61 | functionality,.ip.prefix-list.ha |
e4220 | 73 20 70 72 65 66 69 78 20 6c 65 6e 67 74 68 20 72 61 6e 67 65 20 73 70 65 63 69 66 69 63 61 74 | s.prefix.length.range.specificat |
e4240 | 69 6f 6e 2e 00 50 72 65 66 69 78 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 2e 00 50 72 | ion..Prefix.to.match.against..Pr |
e4260 | 65 66 69 78 65 73 00 50 72 65 70 65 6e 64 20 74 68 65 20 65 78 69 73 74 69 6e 67 20 6c 61 73 74 | efixes.Prepend.the.existing.last |
e4280 | 20 41 53 20 6e 75 6d 62 65 72 20 28 74 68 65 20 6c 65 66 74 6d 6f 73 74 20 41 53 4e 29 20 74 6f | .AS.number.(the.leftmost.ASN).to |
e42a0 | 20 74 68 65 20 41 53 5f 50 41 54 48 2e 00 50 72 65 70 65 6e 64 20 74 68 65 20 67 69 76 65 6e 20 | .the.AS_PATH..Prepend.the.given. |
e42c0 | 73 74 72 69 6e 67 20 6f 66 20 41 53 20 6e 75 6d 62 65 72 73 20 74 6f 20 74 68 65 20 41 53 5f 50 | string.of.AS.numbers.to.the.AS_P |
e42e0 | 41 54 48 20 6f 66 20 74 68 65 20 42 47 50 20 70 61 74 68 27 73 20 4e 4c 52 49 2e 00 50 72 69 6e | ATH.of.the.BGP.path's.NLRI..Prin |
e4300 | 63 69 70 6c 65 20 6f 66 20 53 4e 4d 50 20 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 00 50 72 69 6e | ciple.of.SNMP.Communication.Prin |
e4320 | 74 20 61 20 73 75 6d 6d 61 72 79 20 6f 66 20 6e 65 69 67 68 62 6f 72 20 63 6f 6e 6e 65 63 74 69 | t.a.summary.of.neighbor.connecti |
e4340 | 6f 6e 73 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 41 46 49 2f 53 41 46 49 20 63 | ons.for.the.specified.AFI/SAFI.c |
e4360 | 6f 6d 62 69 6e 61 74 69 6f 6e 2e 00 50 72 69 6e 74 20 61 63 74 69 76 65 20 49 50 56 34 20 6f 72 | ombination..Print.active.IPV4.or |
e4380 | 20 49 50 56 36 20 72 6f 75 74 65 73 20 61 64 76 65 72 74 69 73 65 64 20 76 69 61 20 74 68 65 20 | .IPV6.routes.advertised.via.the. |
e43a0 | 56 50 4e 20 53 41 46 49 2e 00 50 72 69 6f 72 69 74 79 00 50 72 69 6f 72 69 74 79 20 51 75 65 75 | VPN.SAFI..Priority.Priority.Queu |
e43c0 | 65 00 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 2c 20 61 73 20 6f 74 68 65 72 20 6e 6f 6e 2d 73 | e.Priority.Queue,.as.other.non-s |
e43e0 | 68 61 70 69 6e 67 20 70 6f 6c 69 63 69 65 73 2c 20 69 73 20 6f 6e 6c 79 20 75 73 65 66 75 6c 20 | haping.policies,.is.only.useful. |
e4400 | 69 66 20 79 6f 75 72 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 72 65 | if.your.outgoing.interface.is.re |
e4420 | 61 6c 6c 79 20 66 75 6c 6c 2e 20 49 66 20 69 74 20 69 73 20 6e 6f 74 2c 20 56 79 4f 53 20 77 69 | ally.full..If.it.is.not,.VyOS.wi |
e4440 | 6c 6c 20 6e 6f 74 20 6f 77 6e 20 74 68 65 20 71 75 65 75 65 20 61 6e 64 20 50 72 69 6f 72 69 74 | ll.not.own.the.queue.and.Priorit |
e4460 | 79 20 51 75 65 75 65 20 77 69 6c 6c 20 68 61 76 65 20 6e 6f 20 65 66 66 65 63 74 2e 20 49 66 20 | y.Queue.will.have.no.effect..If. |
e4480 | 74 68 65 72 65 20 69 73 20 62 61 6e 64 77 69 64 74 68 20 61 76 61 69 6c 61 62 6c 65 20 6f 6e 20 | there.is.bandwidth.available.on. |
e44a0 | 74 68 65 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 2c 20 79 6f 75 20 63 61 6e 20 65 6d 62 65 64 | the.physical.link,.you.can.embed |
e44c0 | 5f 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 66 75 6c | _.Priority.Queue.into.a.classful |
e44e0 | 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 69 74 20 | .shaping.policy.to.make.sure.it. |
e4500 | 6f 77 6e 73 20 74 68 65 20 71 75 65 75 65 2e 20 49 6e 20 74 68 61 74 20 63 61 73 65 20 70 61 63 | owns.the.queue..In.that.case.pac |
e4520 | 6b 65 74 73 20 63 61 6e 20 62 65 20 70 72 69 6f 72 69 74 69 7a 65 64 20 62 61 73 65 64 20 6f 6e | kets.can.be.prioritized.based.on |
e4540 | 20 44 53 43 50 2e 00 50 72 69 76 61 74 65 20 56 4c 41 4e 20 70 72 6f 78 79 20 61 72 70 2e 20 42 | .DSCP..Private.VLAN.proxy.arp..B |
e4560 | 61 73 69 63 61 6c 6c 79 20 61 6c 6c 6f 77 20 70 72 6f 78 79 20 61 72 70 20 72 65 70 6c 69 65 73 | asically.allow.proxy.arp.replies |
e4580 | 20 62 61 63 6b 20 74 6f 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 20 28 66 72 6f | .back.to.the.same.interface.(fro |
e45a0 | 6d 20 77 68 69 63 68 20 74 68 65 20 41 52 50 20 72 65 71 75 65 73 74 2f 73 6f 6c 69 63 69 74 61 | m.which.the.ARP.request/solicita |
e45c0 | 74 69 6f 6e 20 77 61 73 20 72 65 63 65 69 76 65 64 29 2e 00 50 72 6f 66 69 6c 65 20 67 65 6e 65 | tion.was.received)..Profile.gene |
e45e0 | 72 61 74 69 6f 6e 20 68 61 70 70 65 6e 73 20 66 72 6f 6d 20 74 68 65 20 6f 70 65 72 61 74 69 6f | ration.happens.from.the.operatio |
e4600 | 6e 61 6c 20 6c 65 76 65 6c 20 61 6e 64 20 69 73 20 61 73 20 73 69 6d 70 6c 65 20 61 73 20 69 73 | nal.level.and.is.as.simple.as.is |
e4620 | 73 75 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 | suing.the.following.command.to.c |
e4640 | 72 65 61 74 65 20 61 20 70 72 6f 66 69 6c 65 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 | reate.a.profile.to.connect.to.th |
e4660 | 65 20 49 4b 45 76 32 20 61 63 63 65 73 73 20 73 65 72 76 65 72 20 61 74 20 60 60 76 70 6e 2e 76 | e.IKEv2.access.server.at.``vpn.v |
e4680 | 79 6f 73 2e 6e 65 74 60 60 20 77 69 74 68 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | yos.net``.with.the.configuration |
e46a0 | 20 66 6f 72 20 74 68 65 20 60 60 72 77 60 60 20 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 20 63 6f | .for.the.``rw``.remote-access.co |
e46c0 | 6e 6e 65 63 74 69 6f 6e 20 67 72 6f 75 70 2e 00 50 72 6f 6d 65 74 68 65 75 73 2d 63 6c 69 65 6e | nnection.group..Prometheus-clien |
e46e0 | 74 00 50 72 6f 74 65 63 74 73 20 68 6f 73 74 20 66 72 6f 6d 20 62 72 75 74 65 2d 66 6f 72 63 65 | t.Protects.host.from.brute-force |
e4700 | 20 61 74 74 61 63 6b 73 20 61 67 61 69 6e 73 74 20 53 53 48 2e 20 4c 6f 67 20 6d 65 73 73 61 67 | .attacks.against.SSH..Log.messag |
e4720 | 65 73 20 61 72 65 20 70 61 72 73 65 64 2c 20 6c 69 6e 65 2d 62 79 2d 6c 69 6e 65 2c 20 66 6f 72 | es.are.parsed,.line-by-line,.for |
e4740 | 20 72 65 63 6f 67 6e 69 7a 65 64 20 70 61 74 74 65 72 6e 73 2e 20 49 66 20 61 6e 20 61 74 74 61 | .recognized.patterns..If.an.atta |
e4760 | 63 6b 2c 20 73 75 63 68 20 61 73 20 73 65 76 65 72 61 6c 20 6c 6f 67 69 6e 20 66 61 69 6c 75 72 | ck,.such.as.several.login.failur |
e4780 | 65 73 20 77 69 74 68 69 6e 20 61 20 66 65 77 20 73 65 63 6f 6e 64 73 2c 20 69 73 20 64 65 74 65 | es.within.a.few.seconds,.is.dete |
e47a0 | 63 74 65 64 2c 20 74 68 65 20 6f 66 66 65 6e 64 69 6e 67 20 49 50 20 69 73 20 62 6c 6f 63 6b 65 | cted,.the.offending.IP.is.blocke |
e47c0 | 64 2e 20 4f 66 66 65 6e 64 65 72 73 20 61 72 65 20 75 6e 62 6c 6f 63 6b 65 64 20 61 66 74 65 72 | d..Offenders.are.unblocked.after |
e47e0 | 20 61 20 73 65 74 20 69 6e 74 65 72 76 61 6c 2e 00 50 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 77 68 | .a.set.interval..Protocol.for.wh |
e4800 | 69 63 68 20 65 78 70 65 63 74 20 65 6e 74 72 69 65 73 20 6e 65 65 64 20 74 6f 20 62 65 20 73 79 | ich.expect.entries.need.to.be.sy |
e4820 | 6e 63 68 72 6f 6e 69 7a 65 64 2e 00 50 72 6f 74 6f 63 6f 6c 73 00 50 72 6f 74 6f 63 6f 6c 73 20 | nchronized..Protocols.Protocols. |
e4840 | 61 72 65 3a 20 74 63 70 2c 20 73 63 74 70 2c 20 64 63 63 70 2c 20 75 64 70 2c 20 69 63 6d 70 20 | are:.tcp,.sctp,.dccp,.udp,.icmp. |
e4860 | 61 6e 64 20 69 70 76 36 2d 69 63 6d 70 2e 00 50 72 6f 76 69 64 65 20 54 46 54 50 20 73 65 72 76 | and.ipv6-icmp..Provide.TFTP.serv |
e4880 | 65 72 20 6c 69 73 74 65 6e 69 6e 67 20 6f 6e 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 | er.listening.on.both.IPv4.and.IP |
e48a0 | 76 36 20 61 64 64 72 65 73 73 65 73 20 60 60 31 39 32 2e 30 2e 32 2e 31 60 60 20 61 6e 64 20 60 | v6.addresses.``192.0.2.1``.and.` |
e48c0 | 60 32 30 30 31 3a 64 62 38 3a 3a 31 60 60 20 73 65 72 76 69 6e 67 20 74 68 65 20 63 6f 6e 74 65 | `2001:db8::1``.serving.the.conte |
e48e0 | 6e 74 20 66 72 6f 6d 20 60 60 2f 63 6f 6e 66 69 67 2f 74 66 74 70 62 6f 6f 74 60 60 2e 20 55 70 | nt.from.``/config/tftpboot``..Up |
e4900 | 6c 6f 61 64 69 6e 67 20 76 69 61 20 54 46 54 50 20 74 6f 20 74 68 69 73 20 73 65 72 76 65 72 20 | loading.via.TFTP.to.this.server. |
e4920 | 69 73 20 64 69 73 61 62 6c 65 64 2e 00 50 72 6f 76 69 64 65 20 61 20 49 50 76 34 20 6f 72 20 49 | is.disabled..Provide.a.IPv4.or.I |
e4940 | 50 76 36 20 61 64 64 72 65 73 73 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 00 50 72 | Pv6.address.group.description.Pr |
e4960 | 6f 76 69 64 65 20 61 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 20 67 72 6f | ovide.a.IPv4.or.IPv6.network.gro |
e4980 | 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 50 72 6f 76 69 64 65 20 61 20 64 65 73 63 72 69 | up.description..Provide.a.descri |
e49a0 | 70 74 69 6f 6e 20 66 6f 72 20 65 61 63 68 20 72 75 6c 65 2e 00 50 72 6f 76 69 64 65 20 61 20 64 | ption.for.each.rule..Provide.a.d |
e49c0 | 65 73 63 72 69 70 74 69 6f 6e 20 74 6f 20 74 68 65 20 66 6c 6f 77 20 74 61 62 6c 65 2e 00 50 72 | escription.to.the.flow.table..Pr |
e49e0 | 6f 76 69 64 65 20 61 20 64 6f 6d 61 69 6e 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e | ovide.a.domain.group.description |
e4a00 | 2e 00 50 72 6f 76 69 64 65 20 61 20 6d 61 63 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f | ..Provide.a.mac.group.descriptio |
e4a20 | 6e 2e 00 50 72 6f 76 69 64 65 20 61 20 70 6f 72 74 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 | n..Provide.a.port.group.descript |
e4a40 | 69 6f 6e 2e 00 50 72 6f 76 69 64 65 20 61 20 72 75 6c 65 2d 73 65 74 20 64 65 73 63 72 69 70 74 | ion..Provide.a.rule-set.descript |
e4a60 | 69 6f 6e 20 74 6f 20 61 20 63 75 73 74 6f 6d 20 66 69 72 65 77 61 6c 6c 20 63 68 61 69 6e 2e 00 | ion.to.a.custom.firewall.chain.. |
e4a80 | 50 72 6f 76 69 64 65 20 61 20 72 75 6c 65 2d 73 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 | Provide.a.rule-set.description.. |
e4aa0 | 50 72 6f 76 69 64 65 20 61 6e 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 20 | Provide.an.IPv4.or.IPv6.network. |
e4ac0 | 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 50 72 6f 76 69 64 65 20 61 6e 20 69 6e | group.description..Provide.an.in |
e4ae0 | 74 65 72 66 61 63 65 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 00 50 72 6f 76 69 64 | terface.group.description.Provid |
e4b00 | 65 72 20 2d 20 43 75 73 74 6f 6d 65 72 00 50 72 6f 76 69 64 65 73 20 61 20 62 61 63 6b 62 6f 6e | er.-.Customer.Provides.a.backbon |
e4b20 | 65 20 61 72 65 61 20 63 6f 68 65 72 65 6e 63 65 20 62 79 20 76 69 72 74 75 61 6c 20 6c 69 6e 6b | e.area.coherence.by.virtual.link |
e4b40 | 20 65 73 74 61 62 6c 69 73 68 6d 65 6e 74 2e 00 50 72 6f 76 69 64 65 73 20 61 20 70 65 72 2d 64 | .establishment..Provides.a.per-d |
e4b60 | 65 76 69 63 65 20 63 6f 6e 74 72 6f 6c 20 74 6f 20 65 6e 61 62 6c 65 2f 64 69 73 61 62 6c 65 20 | evice.control.to.enable/disable. |
e4b80 | 74 68 65 20 74 68 72 65 61 64 65 64 20 6d 6f 64 65 20 66 6f 72 20 61 6c 6c 20 74 68 65 20 4e 41 | the.threaded.mode.for.all.the.NA |
e4ba0 | 50 49 20 69 6e 73 74 61 6e 63 65 73 20 6f 66 20 74 68 65 20 67 69 76 65 6e 20 6e 65 74 77 6f 72 | PI.instances.of.the.given.networ |
e4bc0 | 6b 20 64 65 76 69 63 65 2c 20 77 69 74 68 6f 75 74 20 74 68 65 20 6e 65 65 64 20 66 6f 72 20 61 | k.device,.without.the.need.for.a |
e4be0 | 20 64 65 76 69 63 65 20 75 70 2f 64 6f 77 6e 2e 00 50 72 6f 78 79 20 61 75 74 68 65 6e 74 69 63 | .device.up/down..Proxy.authentic |
e4c00 | 61 74 69 6f 6e 20 6d 65 74 68 6f 64 2c 20 63 75 72 72 65 6e 74 6c 79 20 6f 6e 6c 79 20 4c 44 41 | ation.method,.currently.only.LDA |
e4c20 | 50 20 69 73 20 73 75 70 70 6f 72 74 65 64 2e 00 50 73 65 75 64 6f 20 45 74 68 65 72 6e 65 74 2f | P.is.supported..Pseudo.Ethernet/ |
e4c40 | 4d 41 43 56 4c 41 4e 20 6f 70 74 69 6f 6e 73 00 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 | MACVLAN.options.Pseudo-Ethernet. |
e4c60 | 69 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 6e 6f 74 20 62 65 20 72 65 61 63 68 65 64 20 66 72 | interfaces.can.not.be.reached.fr |
e4c80 | 6f 6d 20 79 6f 75 72 20 69 6e 74 65 72 6e 61 6c 20 68 6f 73 74 2e 20 54 68 69 73 20 6d 65 61 6e | om.your.internal.host..This.mean |
e4ca0 | 73 20 74 68 61 74 20 79 6f 75 20 63 61 6e 20 6e 6f 74 20 74 72 79 20 74 6f 20 70 69 6e 67 20 61 | s.that.you.can.not.try.to.ping.a |
e4cc0 | 20 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 20 66 72 6f 6d 20 | .Pseudo-Ethernet.interface.from. |
e4ce0 | 74 68 65 20 68 6f 73 74 20 73 79 73 74 65 6d 20 6f 6e 20 77 68 69 63 68 20 69 74 20 69 73 20 64 | the.host.system.on.which.it.is.d |
e4d00 | 65 66 69 6e 65 64 2e 20 54 68 65 20 70 69 6e 67 20 77 69 6c 6c 20 62 65 20 6c 6f 73 74 2e 00 50 | efined..The.ping.will.be.lost..P |
e4d20 | 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 6d 61 79 20 6e 6f | seudo-Ethernet.interfaces.may.no |
e4d40 | 74 20 77 6f 72 6b 20 69 6e 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 77 68 69 63 68 20 65 78 70 | t.work.in.environments.which.exp |
e4d60 | 65 63 74 20 61 20 3a 61 62 62 72 3a 60 4e 49 43 20 28 4e 65 74 77 6f 72 6b 20 49 6e 74 65 72 66 | ect.a.:abbr:`NIC.(Network.Interf |
e4d80 | 61 63 65 20 43 61 72 64 29 60 20 74 6f 20 6f 6e 6c 79 20 68 61 76 65 20 61 20 73 69 6e 67 6c 65 | ace.Card)`.to.only.have.a.single |
e4da0 | 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 61 70 70 6c 69 65 73 20 74 6f 3a 20 2d 20 56 4d 77 | .address..This.applies.to:.-.VMw |
e4dc0 | 61 72 65 20 6d 61 63 68 69 6e 65 73 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 73 65 74 74 69 | are.machines.using.default.setti |
e4de0 | 6e 67 73 20 2d 20 4e 65 74 77 6f 72 6b 20 73 77 69 74 63 68 65 73 20 77 69 74 68 20 73 65 63 75 | ngs.-.Network.switches.with.secu |
e4e00 | 72 69 74 79 20 73 65 74 74 69 6e 67 73 20 61 6c 6c 6f 77 69 6e 67 20 6f 6e 6c 79 20 61 20 73 69 | rity.settings.allowing.only.a.si |
e4e20 | 6e 67 6c 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 2d 20 78 44 53 4c 20 6d 6f 64 65 6d 73 20 74 | ngle.MAC.address.-.xDSL.modems.t |
e4e40 | 68 61 74 20 74 72 79 20 74 6f 20 6c 65 61 72 6e 20 74 68 65 20 4d 41 43 20 61 64 64 72 65 73 73 | hat.try.to.learn.the.MAC.address |
e4e60 | 20 6f 66 20 74 68 65 20 4e 49 43 00 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 6f 72 20 4d | .of.the.NIC.Pseudo-Ethernet.or.M |
e4e80 | 41 43 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 62 65 20 73 65 65 6e 20 61 73 | ACVLAN.interfaces.can.be.seen.as |
e4ea0 | 20 73 75 62 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 72 65 67 75 6c 61 72 20 65 74 68 65 72 6e | .subinterfaces.to.regular.ethern |
e4ec0 | 65 74 20 69 6e 74 65 72 66 61 63 65 73 2e 20 45 61 63 68 20 61 6e 64 20 65 76 65 72 79 20 73 75 | et.interfaces..Each.and.every.su |
e4ee0 | 62 69 6e 74 65 72 66 61 63 65 20 69 73 20 63 72 65 61 74 65 64 20 61 20 64 69 66 66 65 72 65 6e | binterface.is.created.a.differen |
e4f00 | 74 20 6d 65 64 69 61 20 61 63 63 65 73 73 20 63 6f 6e 74 72 6f 6c 20 28 4d 41 43 29 20 61 64 64 | t.media.access.control.(MAC).add |
e4f20 | 72 65 73 73 2c 20 66 6f 72 20 61 20 73 69 6e 67 6c 65 20 70 68 79 73 69 63 61 6c 20 45 74 68 65 | ress,.for.a.single.physical.Ethe |
e4f40 | 72 6e 65 74 20 70 6f 72 74 2e 20 50 73 65 75 64 6f 2d 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 | rnet.port..Pseudo-.Ethernet.inte |
e4f60 | 72 66 61 63 65 73 20 68 61 76 65 20 6d 6f 73 74 20 6f 66 20 74 68 65 69 72 20 61 70 70 6c 69 63 | rfaces.have.most.of.their.applic |
e4f80 | 61 74 69 6f 6e 20 69 6e 20 76 69 72 74 75 61 6c 69 7a 65 64 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 | ation.in.virtualized.environment |
e4fa0 | 73 2c 00 50 75 62 6c 69 73 68 20 61 20 70 6f 72 74 20 66 6f 72 20 74 68 65 20 63 6f 6e 74 61 69 | s,.Publish.a.port.for.the.contai |
e4fc0 | 6e 65 72 2e 00 50 75 6c 6c 20 61 20 6e 65 77 20 69 6d 61 67 65 20 66 6f 72 20 63 6f 6e 74 61 69 | ner..Pull.a.new.image.for.contai |
e4fe0 | 6e 65 72 00 51 69 6e 51 20 28 38 30 32 2e 31 61 64 29 00 51 6f 53 00 51 75 65 75 65 20 73 69 7a | ner.QinQ.(802.1ad).QoS.Queue.siz |
e5000 | 65 20 66 6f 72 20 6c 69 73 74 65 6e 69 6e 67 20 74 6f 20 6c 6f 63 61 6c 20 63 6f 6e 6e 74 72 61 | e.for.listening.to.local.conntra |
e5020 | 63 6b 20 65 76 65 6e 74 73 20 69 6e 20 4d 42 2e 00 51 75 65 75 65 20 73 69 7a 65 20 66 6f 72 20 | ck.events.in.MB..Queue.size.for. |
e5040 | 73 79 6e 63 69 6e 67 20 63 6f 6e 6e 74 72 61 63 6b 20 65 6e 74 72 69 65 73 20 69 6e 20 4d 42 2e | syncing.conntrack.entries.in.MB. |
e5060 | 00 51 75 6f 74 65 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 73 69 64 65 20 70 61 72 61 6d | .Quotes.can.be.used.inside.param |
e5080 | 65 74 65 72 20 76 61 6c 75 65 73 20 62 79 20 72 65 70 6c 61 63 69 6e 67 20 61 6c 6c 20 71 75 6f | eter.values.by.replacing.all.quo |
e50a0 | 74 65 20 63 68 61 72 61 63 74 65 72 73 20 77 69 74 68 20 74 68 65 20 73 74 72 69 6e 67 20 60 60 | te.characters.with.the.string.`` |
e50c0 | 26 71 75 6f 74 3b 60 60 2e 20 54 68 65 79 20 77 69 6c 6c 20 62 65 20 72 65 70 6c 61 63 65 64 20 | "``..They.will.be.replaced. |
e50e0 | 77 69 74 68 20 6c 69 74 65 72 61 6c 20 71 75 6f 74 65 20 63 68 61 72 61 63 74 65 72 73 20 77 68 | with.literal.quote.characters.wh |
e5100 | 65 6e 20 67 65 6e 65 72 61 74 69 6e 67 20 64 68 63 70 64 2e 63 6f 6e 66 2e 00 52 31 20 68 61 73 | en.generating.dhcpd.conf..R1.has |
e5120 | 20 31 39 32 2e 30 2e 32 2e 31 2f 32 34 20 26 20 32 30 30 31 3a 64 62 38 3a 3a 31 2f 36 34 00 52 | .192.0.2.1/24.&.2001:db8::1/64.R |
e5140 | 31 20 69 73 20 6d 61 6e 61 67 65 64 20 74 68 72 6f 75 67 68 20 61 6e 20 6f 75 74 2d 6f 66 2d 62 | 1.is.managed.through.an.out-of-b |
e5160 | 61 6e 64 20 6e 65 74 77 6f 72 6b 20 74 68 61 74 20 72 65 73 69 64 65 73 20 69 6e 20 56 52 46 20 | and.network.that.resides.in.VRF. |
e5180 | 60 60 6d 67 6d 74 60 60 00 52 31 3a 00 52 32 20 68 61 73 20 31 39 32 2e 30 2e 32 2e 32 2f 32 34 | ``mgmt``.R1:.R2.has.192.0.2.2/24 |
e51a0 | 20 26 20 32 30 30 31 3a 64 62 38 3a 3a 32 2f 36 34 00 52 32 3a 00 52 41 44 49 55 53 00 52 41 44 | .&.2001:db8::2/64.R2:.RADIUS.RAD |
e51c0 | 49 55 53 20 53 65 74 75 70 00 52 41 44 49 55 53 20 61 64 76 61 6e 63 65 64 20 66 65 61 74 75 72 | IUS.Setup.RADIUS.advanced.featur |
e51e0 | 65 73 00 52 41 44 49 55 53 20 61 64 76 61 6e 63 65 64 20 6f 70 74 69 6f 6e 73 00 52 41 44 49 55 | es.RADIUS.advanced.options.RADIU |
e5200 | 53 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 00 52 41 44 49 55 53 20 62 61 6e 64 77 69 64 74 | S.authentication.RADIUS.bandwidt |
e5220 | 68 20 73 68 61 70 69 6e 67 20 61 74 74 72 69 62 75 74 65 00 52 41 44 49 55 53 20 70 72 6f 76 69 | h.shaping.attribute.RADIUS.provi |
e5240 | 64 65 73 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 65 73 20 69 6e 20 74 68 65 20 65 78 61 6d | des.the.IP.addresses.in.the.exam |
e5260 | 70 6c 65 20 61 62 6f 76 65 20 76 69 61 20 46 72 61 6d 65 64 2d 49 50 2d 41 64 64 72 65 73 73 2e | ple.above.via.Framed-IP-Address. |
e5280 | 00 52 41 44 49 55 53 20 73 65 72 76 65 72 20 61 74 20 60 60 31 39 32 2e 31 36 38 2e 33 2e 31 30 | .RADIUS.server.at.``192.168.3.10 |
e52a0 | 60 60 20 77 69 74 68 20 73 68 61 72 65 64 2d 73 65 63 72 65 74 20 60 60 56 79 4f 53 50 61 73 73 | ``.with.shared-secret.``VyOSPass |
e52c0 | 77 6f 72 64 60 60 00 52 41 44 49 55 53 20 73 65 72 76 65 72 73 20 63 6f 75 6c 64 20 62 65 20 68 | word``.RADIUS.servers.could.be.h |
e52e0 | 61 72 64 65 6e 65 64 20 62 79 20 6f 6e 6c 79 20 61 6c 6c 6f 77 69 6e 67 20 63 65 72 74 61 69 6e | ardened.by.only.allowing.certain |
e5300 | 20 49 50 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 63 6f 6e 6e 65 63 74 2e 20 41 73 20 6f 66 20 | .IP.addresses.to.connect..As.of. |
e5320 | 74 68 69 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 65 61 63 68 20 | this.the.source.address.of.each. |
e5340 | 52 41 44 49 55 53 20 71 75 65 72 79 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 | RADIUS.query.can.be.configured.. |
e5360 | 52 41 44 49 55 53 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 00 52 46 43 20 33 37 36 38 20 64 | RADIUS.source.address.RFC.3768.d |
e5380 | 65 66 69 6e 65 73 20 61 20 76 69 72 74 75 61 6c 20 4d 41 43 20 61 64 64 72 65 73 73 20 74 6f 20 | efines.a.virtual.MAC.address.to. |
e53a0 | 65 61 63 68 20 56 52 52 50 20 76 69 72 74 75 61 6c 20 72 6f 75 74 65 72 2e 20 54 68 69 73 20 76 | each.VRRP.virtual.router..This.v |
e53c0 | 69 72 74 75 61 6c 20 72 6f 75 74 65 72 20 4d 41 43 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 | irtual.router.MAC.address.will.b |
e53e0 | 65 20 75 73 65 64 20 61 73 20 74 68 65 20 73 6f 75 72 63 65 20 69 6e 20 61 6c 6c 20 70 65 72 69 | e.used.as.the.source.in.all.peri |
e5400 | 6f 64 69 63 20 56 52 52 50 20 6d 65 73 73 61 67 65 73 20 73 65 6e 74 20 62 79 20 74 68 65 20 61 | odic.VRRP.messages.sent.by.the.a |
e5420 | 63 74 69 76 65 20 6e 6f 64 65 2e 20 57 68 65 6e 20 74 68 65 20 72 66 63 33 37 36 38 2d 63 6f 6d | ctive.node..When.the.rfc3768-com |
e5440 | 70 61 74 69 62 69 6c 69 74 79 20 6f 70 74 69 6f 6e 20 69 73 20 73 65 74 2c 20 61 20 6e 65 77 20 | patibility.option.is.set,.a.new. |
e5460 | 56 52 52 50 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 63 72 65 61 74 65 64 2c 20 74 6f 20 77 68 | VRRP.interface.is.created,.to.wh |
e5480 | 69 63 68 20 74 68 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 76 69 72 74 | ich.the.MAC.address.and.the.virt |
e54a0 | 75 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 | ual.IP.address.is.automatically. |
e54c0 | 61 73 73 69 67 6e 65 64 2e 00 52 46 43 20 38 36 38 20 74 69 6d 65 20 73 65 72 76 65 72 20 49 50 | assigned..RFC.868.time.server.IP |
e54e0 | 76 34 20 61 64 64 72 65 73 73 00 52 49 50 00 52 49 50 76 31 20 61 73 20 64 65 73 63 72 69 62 65 | v4.address.RIP.RIPv1.as.describe |
e5500 | 64 20 69 6e 20 3a 72 66 63 3a 60 31 30 35 38 60 00 52 49 50 76 32 20 61 73 20 64 65 73 63 72 69 | d.in.:rfc:`1058`.RIPv2.as.descri |
e5520 | 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 32 34 35 33 60 00 52 50 4b 49 00 52 53 2d 53 65 72 76 65 | bed.in.:rfc:`2453`.RPKI.RS-Serve |
e5540 | 72 20 2d 20 52 53 2d 43 6c 69 65 6e 74 00 52 53 41 20 63 61 6e 20 62 65 20 75 73 65 64 20 66 6f | r.-.RS-Client.RSA.can.be.used.fo |
e5560 | 72 20 73 65 72 76 69 63 65 73 20 73 75 63 68 20 61 73 20 6b 65 79 20 65 78 63 68 61 6e 67 65 73 | r.services.such.as.key.exchanges |
e5580 | 20 61 6e 64 20 66 6f 72 20 65 6e 63 72 79 70 74 69 6f 6e 20 70 75 72 70 6f 73 65 73 2e 20 54 6f | .and.for.encryption.purposes..To |
e55a0 | 20 6d 61 6b 65 20 49 50 53 65 63 20 77 6f 72 6b 20 77 69 74 68 20 64 79 6e 61 6d 69 63 20 61 64 | .make.IPSec.work.with.dynamic.ad |
e55c0 | 64 72 65 73 73 20 6f 6e 20 6f 6e 65 2f 62 6f 74 68 20 73 69 64 65 73 2c 20 77 65 20 77 69 6c 6c | dress.on.one/both.sides,.we.will |
e55e0 | 20 68 61 76 65 20 74 6f 20 75 73 65 20 52 53 41 20 6b 65 79 73 20 66 6f 72 20 61 75 74 68 65 6e | .have.to.use.RSA.keys.for.authen |
e5600 | 74 69 63 61 74 69 6f 6e 2e 20 54 68 65 79 20 61 72 65 20 76 65 72 79 20 66 61 73 74 20 61 6e 64 | tication..They.are.very.fast.and |
e5620 | 20 65 61 73 79 20 74 6f 20 73 65 74 75 70 2e 00 52 53 41 2d 4b 65 79 73 00 52 61 6e 64 6f 6d 2d | .easy.to.setup..RSA-Keys.Random- |
e5640 | 44 65 74 65 63 74 00 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 63 6f 75 6c 64 20 62 65 20 75 73 | Detect.Random-Detect.could.be.us |
e5660 | 65 66 75 6c 20 66 6f 72 20 68 65 61 76 79 20 74 72 61 66 66 69 63 2e 20 4f 6e 65 20 75 73 65 20 | eful.for.heavy.traffic..One.use. |
e5680 | 6f 66 20 74 68 69 73 20 61 6c 67 6f 72 69 74 68 6d 20 6d 69 67 68 74 20 62 65 20 74 6f 20 70 72 | of.this.algorithm.might.be.to.pr |
e56a0 | 65 76 65 6e 74 20 61 20 62 61 63 6b 62 6f 6e 65 20 6f 76 65 72 6c 6f 61 64 2e 20 42 75 74 20 6f | event.a.backbone.overload..But.o |
e56c0 | 6e 6c 79 20 66 6f 72 20 54 43 50 20 28 62 65 63 61 75 73 65 20 64 72 6f 70 70 65 64 20 70 61 63 | nly.for.TCP.(because.dropped.pac |
e56e0 | 6b 65 74 73 20 63 6f 75 6c 64 20 62 65 20 72 65 74 72 61 6e 73 6d 69 74 74 65 64 29 2c 20 6e 6f | kets.could.be.retransmitted),.no |
e5700 | 74 20 66 6f 72 20 55 44 50 2e 00 52 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2c 20 64 65 | t.for.UDP..Range.is.1.to.255,.de |
e5720 | 66 61 75 6c 74 20 69 73 20 31 2e 00 52 61 6e 67 65 20 69 73 20 31 20 74 6f 20 33 30 30 2c 20 64 | fault.is.1..Range.is.1.to.300,.d |
e5740 | 65 66 61 75 6c 74 20 69 73 20 31 30 2e 00 52 61 74 65 20 43 6f 6e 74 72 6f 6c 00 52 61 74 65 20 | efault.is.10..Rate.Control.Rate. |
e5760 | 6c 69 6d 69 74 00 52 61 74 65 2d 43 6f 6e 74 72 6f 6c 20 69 73 20 61 20 43 50 55 2d 66 72 69 65 | limit.Rate-Control.is.a.CPU-frie |
e5780 | 6e 64 6c 79 20 70 6f 6c 69 63 79 2e 20 59 6f 75 20 6d 69 67 68 74 20 63 6f 6e 73 69 64 65 72 20 | ndly.policy..You.might.consider. |
e57a0 | 75 73 69 6e 67 20 69 74 20 77 68 65 6e 20 79 6f 75 20 6a 75 73 74 20 73 69 6d 70 6c 79 20 77 61 | using.it.when.you.just.simply.wa |
e57c0 | 6e 74 20 74 6f 20 73 6c 6f 77 20 74 72 61 66 66 69 63 20 64 6f 77 6e 2e 00 52 61 74 65 2d 43 6f | nt.to.slow.traffic.down..Rate-Co |
e57e0 | 6e 74 72 6f 6c 20 69 73 20 61 20 63 6c 61 73 73 6c 65 73 73 20 70 6f 6c 69 63 79 20 74 68 61 74 | ntrol.is.a.classless.policy.that |
e5800 | 20 6c 69 6d 69 74 73 20 74 68 65 20 70 61 63 6b 65 74 20 66 6c 6f 77 20 74 6f 20 61 20 73 65 74 | .limits.the.packet.flow.to.a.set |
e5820 | 20 72 61 74 65 2e 20 49 74 20 69 73 20 61 20 70 75 72 65 20 73 68 61 70 65 72 2c 20 69 74 20 64 | .rate..It.is.a.pure.shaper,.it.d |
e5840 | 6f 65 73 20 6e 6f 74 20 73 63 68 65 64 75 6c 65 20 74 72 61 66 66 69 63 2e 20 54 72 61 66 66 69 | oes.not.schedule.traffic..Traffi |
e5860 | 63 20 69 73 20 66 69 6c 74 65 72 65 64 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 65 78 70 65 6e | c.is.filtered.based.on.the.expen |
e5880 | 64 69 74 75 72 65 20 6f 66 20 74 6f 6b 65 6e 73 2e 20 54 6f 6b 65 6e 73 20 72 6f 75 67 68 6c 79 | diture.of.tokens..Tokens.roughly |
e58a0 | 20 63 6f 72 72 65 73 70 6f 6e 64 20 74 6f 20 62 79 74 65 73 2e 00 52 61 77 20 50 61 72 61 6d 65 | .correspond.to.bytes..Raw.Parame |
e58c0 | 74 65 72 73 00 52 61 77 20 70 61 72 61 6d 65 74 65 72 73 20 63 61 6e 20 62 65 20 70 61 73 73 65 | ters.Raw.parameters.can.be.passe |
e58e0 | 64 20 74 6f 20 73 68 61 72 65 64 2d 6e 65 74 77 6f 72 6b 2d 6e 61 6d 65 2c 20 73 75 62 6e 65 74 | d.to.shared-network-name,.subnet |
e5900 | 20 61 6e 64 20 73 74 61 74 69 63 2d 6d 61 70 70 69 6e 67 3a 00 52 65 2d 67 65 6e 65 72 61 74 65 | .and.static-mapping:.Re-generate |
e5920 | 64 20 61 20 6b 6e 6f 77 6e 20 70 75 62 2f 70 72 69 76 61 74 65 20 6b 65 79 66 69 6c 65 20 77 68 | d.a.known.pub/private.keyfile.wh |
e5940 | 69 63 68 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 6f 74 | ich.can.be.used.to.connect.to.ot |
e5960 | 68 65 72 20 73 65 72 76 69 63 65 73 20 28 65 2e 67 2e 20 52 50 4b 49 20 63 61 63 68 65 29 2e 00 | her.services.(e.g..RPKI.cache).. |
e5980 | 52 65 2d 67 65 6e 65 72 61 74 65 64 20 74 68 65 20 70 75 62 6c 69 63 2f 70 72 69 76 61 74 65 20 | Re-generated.the.public/private. |
e59a0 | 6b 65 79 70 6f 72 74 69 6f 6e 20 77 68 69 63 68 20 53 53 48 20 75 73 65 73 20 74 6f 20 73 65 63 | keyportion.which.SSH.uses.to.sec |
e59c0 | 75 72 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 52 65 61 63 68 61 62 6c 65 20 54 69 6d 65 00 | ure.connections..Reachable.Time. |
e59e0 | 52 65 61 6c 20 73 65 72 76 65 72 00 52 65 61 6c 20 73 65 72 76 65 72 20 49 50 20 61 64 64 72 65 | Real.server.Real.server.IP.addre |
e5a00 | 73 73 20 61 6e 64 20 70 6f 72 74 00 52 65 61 6c 20 73 65 72 76 65 72 20 69 73 20 61 75 74 6f 2d | ss.and.port.Real.server.is.auto- |
e5a20 | 65 78 63 6c 75 64 65 64 20 69 66 20 70 6f 72 74 20 63 68 65 63 6b 20 77 69 74 68 20 74 68 69 73 | excluded.if.port.check.with.this |
e5a40 | 20 73 65 72 76 65 72 20 66 61 69 6c 2e 00 52 65 63 65 69 76 65 20 74 72 61 66 66 69 63 20 66 72 | .server.fail..Receive.traffic.fr |
e5a60 | 6f 6d 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 63 72 65 61 74 65 64 20 62 79 20 74 68 65 20 73 65 | om.connections.created.by.the.se |
e5a80 | 72 76 65 72 20 69 73 20 61 6c 73 6f 20 62 61 6c 61 6e 63 65 64 2e 20 57 68 65 6e 20 74 68 65 20 | rver.is.also.balanced..When.the. |
e5aa0 | 6c 6f 63 61 6c 20 73 79 73 74 65 6d 20 73 65 6e 64 73 20 61 6e 20 41 52 50 20 52 65 71 75 65 73 | local.system.sends.an.ARP.Reques |
e5ac0 | 74 20 74 68 65 20 62 6f 6e 64 69 6e 67 20 64 72 69 76 65 72 20 63 6f 70 69 65 73 20 61 6e 64 20 | t.the.bonding.driver.copies.and. |
e5ae0 | 73 61 76 65 73 20 74 68 65 20 70 65 65 72 27 73 20 49 50 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | saves.the.peer's.IP.information. |
e5b00 | 66 72 6f 6d 20 74 68 65 20 41 52 50 20 70 61 63 6b 65 74 2e 20 57 68 65 6e 20 74 68 65 20 41 52 | from.the.ARP.packet..When.the.AR |
e5b20 | 50 20 52 65 70 6c 79 20 61 72 72 69 76 65 73 20 66 72 6f 6d 20 74 68 65 20 70 65 65 72 2c 20 69 | P.Reply.arrives.from.the.peer,.i |
e5b40 | 74 73 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 73 73 20 69 73 20 72 65 74 72 69 65 76 65 64 | ts.hardware.address.is.retrieved |
e5b60 | 20 61 6e 64 20 74 68 65 20 62 6f 6e 64 69 6e 67 20 64 72 69 76 65 72 20 69 6e 69 74 69 61 74 65 | .and.the.bonding.driver.initiate |
e5b80 | 73 20 61 6e 20 41 52 50 20 72 65 70 6c 79 20 74 6f 20 74 68 69 73 20 70 65 65 72 20 61 73 73 69 | s.an.ARP.reply.to.this.peer.assi |
e5ba0 | 67 6e 69 6e 67 20 69 74 20 74 6f 20 6f 6e 65 20 6f 66 20 74 68 65 20 73 6c 61 76 65 73 20 69 6e | gning.it.to.one.of.the.slaves.in |
e5bc0 | 20 74 68 65 20 62 6f 6e 64 2e 20 41 20 70 72 6f 62 6c 65 6d 61 74 69 63 20 6f 75 74 63 6f 6d 65 | .the.bond..A.problematic.outcome |
e5be0 | 20 6f 66 20 75 73 69 6e 67 20 41 52 50 20 6e 65 67 6f 74 69 61 74 69 6f 6e 20 66 6f 72 20 62 61 | .of.using.ARP.negotiation.for.ba |
e5c00 | 6c 61 6e 63 69 6e 67 20 69 73 20 74 68 61 74 20 65 61 63 68 20 74 69 6d 65 20 74 68 61 74 20 61 | lancing.is.that.each.time.that.a |
e5c20 | 6e 20 41 52 50 20 72 65 71 75 65 73 74 20 69 73 20 62 72 6f 61 64 63 61 73 74 20 69 74 20 75 73 | n.ARP.request.is.broadcast.it.us |
e5c40 | 65 73 20 74 68 65 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 62 | es.the.hardware.address.of.the.b |
e5c60 | 6f 6e 64 2e 20 48 65 6e 63 65 2c 20 70 65 65 72 73 20 6c 65 61 72 6e 20 74 68 65 20 68 61 72 64 | ond..Hence,.peers.learn.the.hard |
e5c80 | 77 61 72 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 62 6f 6e 64 20 61 6e 64 20 74 68 65 | ware.address.of.the.bond.and.the |
e5ca0 | 20 62 61 6c 61 6e 63 69 6e 67 20 6f 66 20 72 65 63 65 69 76 65 20 74 72 61 66 66 69 63 20 63 6f | .balancing.of.receive.traffic.co |
e5cc0 | 6c 6c 61 70 73 65 73 20 74 6f 20 74 68 65 20 63 75 72 72 65 6e 74 20 73 6c 61 76 65 2e 20 54 68 | llapses.to.the.current.slave..Th |
e5ce0 | 69 73 20 69 73 20 68 61 6e 64 6c 65 64 20 62 79 20 73 65 6e 64 69 6e 67 20 75 70 64 61 74 65 73 | is.is.handled.by.sending.updates |
e5d00 | 20 28 41 52 50 20 52 65 70 6c 69 65 73 29 20 74 6f 20 61 6c 6c 20 74 68 65 20 70 65 65 72 73 20 | .(ARP.Replies).to.all.the.peers. |
e5d20 | 77 69 74 68 20 74 68 65 69 72 20 69 6e 64 69 76 69 64 75 61 6c 6c 79 20 61 73 73 69 67 6e 65 64 | with.their.individually.assigned |
e5d40 | 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 73 73 20 73 75 63 68 20 74 68 61 74 20 74 68 65 20 | .hardware.address.such.that.the. |
e5d60 | 74 72 61 66 66 69 63 20 69 73 20 72 65 64 69 73 74 72 69 62 75 74 65 64 2e 20 52 65 63 65 69 76 | traffic.is.redistributed..Receiv |
e5d80 | 65 20 74 72 61 66 66 69 63 20 69 73 20 61 6c 73 6f 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 | e.traffic.is.also.redistributed. |
e5da0 | 77 68 65 6e 20 61 20 6e 65 77 20 73 6c 61 76 65 20 69 73 20 61 64 64 65 64 20 74 6f 20 74 68 65 | when.a.new.slave.is.added.to.the |
e5dc0 | 20 62 6f 6e 64 20 61 6e 64 20 77 68 65 6e 20 61 6e 20 69 6e 61 63 74 69 76 65 20 73 6c 61 76 65 | .bond.and.when.an.inactive.slave |
e5de0 | 20 69 73 20 72 65 2d 61 63 74 69 76 61 74 65 64 2e 20 54 68 65 20 72 65 63 65 69 76 65 20 6c 6f | .is.re-activated..The.receive.lo |
e5e00 | 61 64 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 73 65 71 75 65 6e 74 69 61 6c 6c 79 20 28 | ad.is.distributed.sequentially.( |
e5e20 | 72 6f 75 6e 64 20 72 6f 62 69 6e 29 20 61 6d 6f 6e 67 20 74 68 65 20 67 72 6f 75 70 20 6f 66 20 | round.robin).among.the.group.of. |
e5e40 | 68 69 67 68 65 73 74 20 73 70 65 65 64 20 73 6c 61 76 65 73 20 69 6e 20 74 68 65 20 62 6f 6e 64 | highest.speed.slaves.in.the.bond |
e5e60 | 2e 00 52 65 63 65 69 76 65 64 20 52 41 44 49 55 53 20 61 74 74 72 69 62 75 74 65 73 20 68 61 76 | ..Received.RADIUS.attributes.hav |
e5e80 | 65 20 61 20 68 69 67 68 65 72 20 70 72 69 6f 72 69 74 79 20 74 68 61 6e 20 70 61 72 61 6d 65 74 | e.a.higher.priority.than.paramet |
e5ea0 | 65 72 73 20 64 65 66 69 6e 65 64 20 77 69 74 68 69 6e 20 74 68 65 20 43 4c 49 20 63 6f 6e 66 69 | ers.defined.within.the.CLI.confi |
e5ec0 | 67 75 72 61 74 69 6f 6e 2c 20 72 65 66 65 72 20 74 6f 20 74 68 65 20 65 78 70 6c 61 6e 61 74 69 | guration,.refer.to.the.explanati |
e5ee0 | 6f 6e 20 62 65 6c 6f 77 2e 00 52 65 63 6f 6d 6d 65 6e 64 65 64 20 66 6f 72 20 6c 61 72 67 65 72 | on.below..Recommended.for.larger |
e5f00 | 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 73 2e 00 52 65 64 69 72 65 63 74 20 48 54 54 50 20 74 6f | .installations..Redirect.HTTP.to |
e5f20 | 20 48 54 54 50 53 00 52 65 64 69 72 65 63 74 20 4d 69 63 72 6f 73 6f 66 74 20 52 44 50 20 74 72 | .HTTPS.Redirect.Microsoft.RDP.tr |
e5f40 | 61 66 66 69 63 20 66 72 6f 6d 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 28 4c 41 4e 2c 20 70 72 | affic.from.the.internal.(LAN,.pr |
e5f60 | 69 76 61 74 65 29 20 6e 65 74 77 6f 72 6b 20 76 69 61 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 | ivate).network.via.:ref:`destina |
e5f80 | 74 69 6f 6e 2d 6e 61 74 60 20 69 6e 20 72 75 6c 65 20 31 31 30 20 74 6f 20 74 68 65 20 69 6e 74 | tion-nat`.in.rule.110.to.the.int |
e5fa0 | 65 72 6e 61 6c 2c 20 70 72 69 76 61 74 65 20 68 6f 73 74 20 31 39 32 2e 30 2e 32 2e 34 30 2e 20 | ernal,.private.host.192.0.2.40.. |
e5fc0 | 57 65 20 61 6c 73 6f 20 6e 65 65 64 20 61 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 | We.also.need.a.:ref:`source-nat` |
e5fe0 | 20 72 75 6c 65 20 31 31 30 20 66 6f 72 20 74 68 65 20 72 65 76 65 72 73 65 20 70 61 74 68 20 6f | .rule.110.for.the.reverse.path.o |
e6000 | 66 20 74 68 65 20 74 72 61 66 66 69 63 2e 20 54 68 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 | f.the.traffic..The.internal.netw |
e6020 | 6f 72 6b 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 76 69 | ork.192.0.2.0/24.is.reachable.vi |
e6040 | 61 20 69 6e 74 65 72 66 61 63 65 20 60 65 74 68 30 2e 31 30 60 2e 00 52 65 64 69 72 65 63 74 20 | a.interface.`eth0.10`..Redirect. |
e6060 | 4d 69 63 72 6f 73 6f 66 74 20 52 44 50 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 74 68 65 20 6f | Microsoft.RDP.traffic.from.the.o |
e6080 | 75 74 73 69 64 65 20 28 57 41 4e 2c 20 65 78 74 65 72 6e 61 6c 29 20 77 6f 72 6c 64 20 76 69 61 | utside.(WAN,.external).world.via |
e60a0 | 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 20 69 6e 20 72 75 6c 65 20 | .:ref:`destination-nat`.in.rule. |
e60c0 | 31 30 30 20 74 6f 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 2c 20 70 72 69 76 61 74 65 20 68 6f 73 | 100.to.the.internal,.private.hos |
e60e0 | 74 20 31 39 32 2e 30 2e 32 2e 34 30 2e 00 52 65 64 69 72 65 63 74 20 55 52 4c 20 74 6f 20 61 20 | t.192.0.2.40..Redirect.URL.to.a. |
e6100 | 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 00 52 65 64 69 73 74 72 69 62 75 74 69 6f 6e 20 43 6f 6e 66 | new.location.Redistribution.Conf |
e6120 | 69 67 75 72 61 74 69 6f 6e 00 52 65 64 75 6e 64 61 6e 63 79 20 61 6e 64 20 6c 6f 61 64 20 73 68 | iguration.Redundancy.and.load.sh |
e6140 | 61 72 69 6e 67 2e 20 54 68 65 72 65 20 61 72 65 20 6d 75 6c 74 69 70 6c 65 20 4e 41 54 36 36 20 | aring..There.are.multiple.NAT66. |
e6160 | 64 65 76 69 63 65 73 20 61 74 20 74 68 65 20 65 64 67 65 20 6f 66 20 61 6e 20 49 50 76 36 20 6e | devices.at.the.edge.of.an.IPv6.n |
e6180 | 65 74 77 6f 72 6b 20 74 6f 20 61 6e 6f 74 68 65 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 2e 20 | etwork.to.another.IPv6.network.. |
e61a0 | 54 68 65 20 70 61 74 68 20 74 68 72 6f 75 67 68 20 74 68 65 20 4e 41 54 36 36 20 64 65 76 69 63 | The.path.through.the.NAT66.devic |
e61c0 | 65 20 74 6f 20 61 6e 6f 74 68 65 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 20 66 6f 72 6d 73 20 | e.to.another.IPv6.network.forms. |
e61e0 | 61 6e 20 65 71 75 69 76 61 6c 65 6e 74 20 72 6f 75 74 65 2c 20 61 6e 64 20 74 72 61 66 66 69 63 | an.equivalent.route,.and.traffic |
e6200 | 20 63 61 6e 20 62 65 20 6c 6f 61 64 2d 73 68 61 72 65 64 20 6f 6e 20 74 68 65 73 65 20 4e 41 54 | .can.be.load-shared.on.these.NAT |
e6220 | 36 36 20 64 65 76 69 63 65 73 2e 20 49 6e 20 74 68 69 73 20 63 61 73 65 2c 20 79 6f 75 20 63 61 | 66.devices..In.this.case,.you.ca |
e6240 | 6e 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 73 61 6d 65 20 73 6f 75 72 63 65 20 61 64 64 72 | n.configure.the.same.source.addr |
e6260 | 65 73 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 73 20 6f 6e 20 74 68 65 73 65 20 4e | ess.translation.rules.on.these.N |
e6280 | 41 54 36 36 20 64 65 76 69 63 65 73 2c 20 73 6f 20 74 68 61 74 20 61 6e 79 20 4e 41 54 36 36 20 | AT66.devices,.so.that.any.NAT66. |
e62a0 | 64 65 76 69 63 65 20 63 61 6e 20 68 61 6e 64 6c 65 20 49 50 76 36 20 74 72 61 66 66 69 63 20 62 | device.can.handle.IPv6.traffic.b |
e62c0 | 65 74 77 65 65 6e 20 64 69 66 66 65 72 65 6e 74 20 73 69 74 65 73 2e 00 52 65 67 69 73 74 65 72 | etween.different.sites..Register |
e62e0 | 20 44 4e 53 20 72 65 63 6f 72 64 20 60 60 65 78 61 6d 70 6c 65 2e 76 79 6f 73 2e 69 6f 60 60 20 | .DNS.record.``example.vyos.io``. |
e6300 | 6f 6e 20 44 4e 53 20 73 65 72 76 65 72 20 60 60 6e 73 31 2e 76 79 6f 73 2e 69 6f 60 60 00 52 65 | on.DNS.server.``ns1.vyos.io``.Re |
e6320 | 67 75 6c 61 72 20 56 4c 41 4e 73 20 28 38 30 32 2e 31 71 29 00 52 65 67 75 6c 61 72 20 65 78 70 | gular.VLANs.(802.1q).Regular.exp |
e6340 | 72 65 73 73 69 6f 6e 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 20 63 6f 6d 6d 75 | ression.to.match.against.a.commu |
e6360 | 6e 69 74 79 2d 6c 69 73 74 2e 00 52 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 74 6f | nity-list..Regular.expression.to |
e6380 | 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 20 6c 61 72 67 65 20 63 6f 6d 6d 75 6e 69 74 79 | .match.against.a.large.community |
e63a0 | 20 6c 69 73 74 2e 00 52 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 74 6f 20 6d 61 74 | .list..Regular.expression.to.mat |
e63c0 | 63 68 20 61 67 61 69 6e 73 74 20 61 6e 20 41 53 20 70 61 74 68 2e 20 46 6f 72 20 65 78 61 6d 70 | ch.against.an.AS.path..For.examp |
e63e0 | 6c 65 20 22 36 34 35 30 31 20 36 34 35 30 32 22 2e 00 52 65 67 75 6c 61 72 20 65 78 70 72 65 73 | le."64501.64502"..Regular.expres |
e6400 | 73 69 6f 6e 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 6e 20 65 78 74 65 6e 64 65 | sion.to.match.against.an.extende |
e6420 | 64 20 63 6f 6d 6d 75 6e 69 74 79 20 6c 69 73 74 2c 20 77 68 65 72 65 20 74 65 78 74 20 63 6f 75 | d.community.list,.where.text.cou |
e6440 | 6c 64 20 62 65 3a 00 52 65 6a 65 63 74 20 44 48 43 50 20 6c 65 61 73 65 73 20 66 72 6f 6d 20 61 | ld.be:.Reject.DHCP.leases.from.a |
e6460 | 20 67 69 76 65 6e 20 61 64 64 72 65 73 73 20 6f 72 20 72 61 6e 67 65 2e 20 54 68 69 73 20 69 73 | .given.address.or.range..This.is |
e6480 | 20 75 73 65 66 75 6c 20 77 68 65 6e 20 61 20 6d 6f 64 65 6d 20 67 69 76 65 73 20 61 20 6c 6f 63 | .useful.when.a.modem.gives.a.loc |
e64a0 | 61 6c 20 49 50 20 77 68 65 6e 20 66 69 72 73 74 20 73 74 61 72 74 69 6e 67 2e 00 52 65 6d 65 6d | al.IP.when.first.starting..Remem |
e64c0 | 62 65 72 20 73 6f 75 72 63 65 20 49 50 20 69 6e 20 73 65 63 6f 6e 64 73 20 62 65 66 6f 72 65 20 | ber.source.IP.in.seconds.before. |
e64e0 | 72 65 73 65 74 20 74 68 65 69 72 20 73 63 6f 72 65 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 | reset.their.score..The.default.i |
e6500 | 73 20 31 38 30 30 2e 00 52 65 6d 6f 74 65 20 41 63 63 65 73 73 00 52 65 6d 6f 74 65 20 41 63 63 | s.1800..Remote.Access.Remote.Acc |
e6520 | 65 73 73 20 22 52 6f 61 64 57 61 72 72 69 6f 72 22 20 45 78 61 6d 70 6c 65 00 52 65 6d 6f 74 65 | ess."RoadWarrior".Example.Remote |
e6540 | 20 41 63 63 65 73 73 20 22 52 6f 61 64 57 61 72 72 69 6f 72 22 20 63 6c 69 65 6e 74 73 00 52 65 | .Access."RoadWarrior".clients.Re |
e6560 | 6d 6f 74 65 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 2d 20 41 6e 6e 6f 74 61 74 65 64 3a 00 | mote.Configuration.-.Annotated:. |
e6580 | 52 65 6d 6f 74 65 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 52 65 6d 6f 74 65 20 48 6f 73 | Remote.Configuration:.Remote.Hos |
e65a0 | 74 00 52 65 6d 6f 74 65 20 55 52 4c 00 52 65 6d 6f 74 65 20 55 52 4c 20 74 6f 20 53 70 6c 75 6e | t.Remote.URL.Remote.URL.to.Splun |
e65c0 | 6b 20 63 6f 6c 6c 65 63 74 6f 72 00 52 65 6d 6f 74 65 20 55 52 4c 2e 00 52 65 6d 6f 74 65 20 60 | k.collector.Remote.URL..Remote.` |
e65e0 | 60 49 6e 66 6c 75 78 44 42 60 60 20 62 75 63 6b 65 74 20 6e 61 6d 65 00 52 65 6d 6f 74 65 20 64 | `InfluxDB``.bucket.name.Remote.d |
e6600 | 61 74 61 62 61 73 65 20 6e 61 6d 65 2e 00 52 65 6d 6f 74 65 20 70 65 65 72 20 49 50 20 60 3c 61 | atabase.name..Remote.peer.IP.`<a |
e6620 | 64 64 72 65 73 73 3e 60 20 6f 66 20 74 68 65 20 73 65 63 6f 6e 64 20 44 48 43 50 20 73 65 72 76 | ddress>`.of.the.second.DHCP.serv |
e6640 | 65 72 20 69 6e 20 74 68 69 73 20 48 41 20 63 6c 75 73 74 65 72 2e 00 52 65 6d 6f 74 65 20 70 65 | er.in.this.HA.cluster..Remote.pe |
e6660 | 65 72 20 49 50 20 60 3c 61 64 64 72 65 73 73 3e 60 20 6f 66 20 74 68 65 20 73 65 63 6f 6e 64 20 | er.IP.`<address>`.of.the.second. |
e6680 | 44 48 43 50 20 73 65 72 76 65 72 20 69 6e 20 74 68 69 73 20 66 61 69 6c 6f 76 65 72 20 63 6c 75 | DHCP.server.in.this.failover.clu |
e66a0 | 73 74 65 72 2e 00 52 65 6d 6f 74 65 20 70 6f 72 74 00 52 65 6d 6f 74 65 20 74 72 61 6e 73 6d 69 | ster..Remote.port.Remote.transmi |
e66c0 | 73 73 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 77 69 6c 6c 20 62 65 20 6d 75 6c 74 69 70 6c 69 65 | ssion.interval.will.be.multiplie |
e66e0 | 64 20 62 79 20 74 68 69 73 20 76 61 6c 75 65 00 52 65 6e 61 6d 69 6e 67 20 63 6c 69 65 6e 74 73 | d.by.this.value.Renaming.clients |
e6700 | 20 69 6e 74 65 72 66 61 63 65 73 20 62 79 20 52 41 44 49 55 53 00 52 65 70 65 61 74 20 74 68 65 | .interfaces.by.RADIUS.Repeat.the |
e6720 | 20 70 72 6f 63 65 64 75 72 65 20 6f 6e 20 74 68 65 20 6f 74 68 65 72 20 72 6f 75 74 65 72 2e 00 | .procedure.on.the.other.router.. |
e6740 | 52 65 70 6c 61 79 20 70 72 6f 74 65 63 74 69 6f 6e 00 52 65 71 75 65 73 74 20 6f 6e 6c 79 20 61 | Replay.protection.Request.only.a |
e6760 | 20 74 65 6d 70 6f 72 61 72 79 20 61 64 64 72 65 73 73 20 61 6e 64 20 6e 6f 74 20 66 6f 72 6d 20 | .temporary.address.and.not.form. |
e6780 | 61 6e 20 49 41 5f 4e 41 20 28 49 64 65 6e 74 69 74 79 20 41 73 73 6f 63 69 61 74 69 6f 6e 20 66 | an.IA_NA.(Identity.Association.f |
e67a0 | 6f 72 20 4e 6f 6e 2d 74 65 6d 70 6f 72 61 72 79 20 41 64 64 72 65 73 73 65 73 29 20 70 61 72 74 | or.Non-temporary.Addresses).part |
e67c0 | 6e 65 72 73 68 69 70 2e 00 52 65 71 75 65 73 74 73 20 61 72 65 20 66 6f 72 77 61 72 64 65 64 20 | nership..Requests.are.forwarded. |
e67e0 | 74 68 72 6f 75 67 68 20 60 60 65 74 68 32 60 60 20 61 73 20 74 68 65 20 60 75 70 73 74 72 65 61 | through.``eth2``.as.the.`upstrea |
e6800 | 6d 20 69 6e 74 65 72 66 61 63 65 60 00 52 65 71 75 69 72 65 20 74 68 65 20 70 65 65 72 20 74 6f | m.interface`.Require.the.peer.to |
e6820 | 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 69 74 73 65 6c 66 20 75 73 69 6e 67 20 6f 6e 65 20 6f | .authenticate.itself.using.one.o |
e6840 | 66 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 3a 20 70 61 70 2c 20 | f.the.following.protocols:.pap,. |
e6860 | 63 68 61 70 2c 20 6d 73 63 68 61 70 2c 20 6d 73 63 68 61 70 2d 76 32 2e 00 52 65 71 75 69 72 65 | chap,.mschap,.mschap-v2..Require |
e6880 | 6d 65 6e 74 73 00 52 65 71 75 69 72 65 6d 65 6e 74 73 20 74 6f 20 65 6e 61 62 6c 65 20 73 79 6e | ments.Requirements.to.enable.syn |
e68a0 | 70 72 6f 78 79 3a 00 52 65 71 75 69 72 65 6d 65 6e 74 73 3a 00 52 65 73 65 74 00 52 65 73 65 74 | proxy:.Requirements:.Reset.Reset |
e68c0 | 20 4f 70 65 6e 56 50 4e 00 52 65 73 65 74 20 63 6f 6d 6d 61 6e 64 73 00 52 65 73 65 74 73 20 74 | .OpenVPN.Reset.commands.Resets.t |
e68e0 | 68 65 20 6c 6f 63 61 6c 20 44 4e 53 20 66 6f 72 77 61 72 64 69 6e 67 20 63 61 63 68 65 20 64 61 | he.local.DNS.forwarding.cache.da |
e6900 | 74 61 62 61 73 65 2e 20 59 6f 75 20 63 61 6e 20 72 65 73 65 74 20 74 68 65 20 63 61 63 68 65 20 | tabase..You.can.reset.the.cache. |
e6920 | 66 6f 72 20 61 6c 6c 20 65 6e 74 72 69 65 73 20 6f 72 20 6f 6e 6c 79 20 66 6f 72 20 65 6e 74 72 | for.all.entries.or.only.for.entr |
e6940 | 69 65 73 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 64 6f 6d 61 69 6e 2e 00 52 65 73 74 61 72 | ies.to.a.specific.domain..Restar |
e6960 | 74 00 52 65 73 74 61 72 74 20 44 48 43 50 20 72 65 6c 61 79 20 73 65 72 76 69 63 65 00 52 65 73 | t.Restart.DHCP.relay.service.Res |
e6980 | 74 61 72 74 20 44 48 43 50 76 36 20 72 65 6c 61 79 20 61 67 65 6e 74 20 69 6d 6d 65 64 69 61 74 | tart.DHCPv6.relay.agent.immediat |
e69a0 | 65 6c 79 2e 00 52 65 73 74 61 72 74 20 61 20 67 69 76 65 6e 20 63 6f 6e 74 61 69 6e 65 72 00 52 | ely..Restart.a.given.container.R |
e69c0 | 65 73 74 61 72 74 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 73 65 72 76 69 63 65 2e 00 52 65 | estart.mDNS.repeater.service..Re |
e69e0 | 73 74 61 72 74 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 00 52 65 73 74 61 72 74 20 74 68 | start.the.DHCP.server.Restart.th |
e6a00 | 65 20 49 47 4d 50 20 70 72 6f 78 79 20 70 72 6f 63 65 73 73 2e 00 52 65 73 74 61 72 74 20 74 68 | e.IGMP.proxy.process..Restart.th |
e6a20 | 65 20 53 53 48 20 64 61 65 6d 6f 6e 20 70 72 6f 63 65 73 73 2c 20 74 68 65 20 63 75 72 72 65 6e | e.SSH.daemon.process,.the.curren |
e6a40 | 74 20 73 65 73 73 69 6f 6e 20 69 73 20 6e 6f 74 20 61 66 66 65 63 74 65 64 2c 20 6f 6e 6c 79 20 | t.session.is.not.affected,.only. |
e6a60 | 74 68 65 20 62 61 63 6b 67 72 6f 75 6e 64 20 64 61 65 6d 6f 6e 20 69 73 20 72 65 73 74 61 72 74 | the.background.daemon.is.restart |
e6a80 | 65 64 2e 00 52 65 73 74 61 72 74 73 20 74 68 65 20 44 4e 53 20 72 65 63 75 72 73 6f 72 20 70 72 | ed..Restarts.the.DNS.recursor.pr |
e6aa0 | 6f 63 65 73 73 2e 20 54 68 69 73 20 61 6c 73 6f 20 69 6e 76 61 6c 69 64 61 74 65 73 20 74 68 65 | ocess..This.also.invalidates.the |
e6ac0 | 20 6c 6f 63 61 6c 20 44 4e 53 20 66 6f 72 77 61 72 64 69 6e 67 20 63 61 63 68 65 2e 00 52 65 73 | .local.DNS.forwarding.cache..Res |
e6ae0 | 75 6c 74 69 6e 67 20 69 6e 00 52 65 73 75 6c 74 73 20 69 6e 3a 00 52 65 74 72 61 6e 73 6d 69 74 | ulting.in.Results.in:.Retransmit |
e6b00 | 20 54 69 6d 65 72 00 52 65 74 72 69 65 76 65 20 63 75 72 72 65 6e 74 20 73 74 61 74 69 73 74 69 | .Timer.Retrieve.current.statisti |
e6b20 | 63 73 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 73 75 62 73 79 73 | cs.of.connection.tracking.subsys |
e6b40 | 74 65 6d 2e 00 52 65 74 72 69 65 76 65 20 63 75 72 72 65 6e 74 20 73 74 61 74 75 73 20 6f 66 20 | tem..Retrieve.current.status.of. |
e6b60 | 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 73 75 62 73 79 73 74 65 6d 2e 00 52 | connection.tracking.subsystem..R |
e6b80 | 65 74 72 69 65 76 65 20 70 75 62 6c 69 63 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 66 72 6f 6d 20 | etrieve.public.key.portion.from. |
e6ba0 | 63 6f 6e 66 69 67 75 72 65 64 20 57 49 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 2e 00 | configured.WIreGuard.interface.. |
e6bc0 | 52 65 76 65 72 73 65 2d 70 72 6f 78 79 00 52 6f 75 6e 64 20 52 6f 62 69 6e 00 52 6f 75 74 65 20 | Reverse-proxy.Round.Robin.Route. |
e6be0 | 41 67 67 72 65 67 61 74 69 6f 6e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 52 6f 75 74 65 20 | Aggregation.Configuration.Route. |
e6c00 | 44 61 6d 70 65 6e 69 6e 67 00 52 6f 75 74 65 20 46 69 6c 74 65 72 69 6e 67 00 52 6f 75 74 65 20 | Dampening.Route.Filtering.Route. |
e6c20 | 46 69 6c 74 65 72 69 6e 67 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 52 6f 75 74 65 20 4d 61 | Filtering.Configuration.Route.Ma |
e6c40 | 70 00 52 6f 75 74 65 20 4d 61 70 20 50 6f 6c 69 63 79 00 52 6f 75 74 65 20 52 65 64 69 73 74 72 | p.Route.Map.Policy.Route.Redistr |
e6c60 | 69 62 75 74 69 6f 6e 00 52 6f 75 74 65 20 52 65 66 6c 65 63 74 6f 72 20 43 6f 6e 66 69 67 75 72 | ibution.Route.Reflector.Configur |
e6c80 | 61 74 69 6f 6e 00 52 6f 75 74 65 20 53 65 6c 65 63 74 69 6f 6e 00 52 6f 75 74 65 20 53 65 6c 65 | ation.Route.Selection.Route.Sele |
e6ca0 | 63 74 69 6f 6e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 52 6f 75 74 65 20 61 6e 64 20 52 6f | ction.Configuration.Route.and.Ro |
e6cc0 | 75 74 65 36 20 50 6f 6c 69 63 79 00 52 6f 75 74 65 20 64 61 6d 70 65 6e 69 6e 67 20 77 69 63 68 | ute6.Policy.Route.dampening.wich |
e6ce0 | 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 32 34 33 39 60 20 65 6e 61 62 6c 65 | .described.in.:rfc:`2439`.enable |
e6d00 | 73 20 79 6f 75 20 74 6f 20 69 64 65 6e 74 69 66 79 20 72 6f 75 74 65 73 20 74 68 61 74 20 72 65 | s.you.to.identify.routes.that.re |
e6d20 | 70 65 61 74 65 64 6c 79 20 66 61 69 6c 20 61 6e 64 20 72 65 74 75 72 6e 2e 20 49 66 20 72 6f 75 | peatedly.fail.and.return..If.rou |
e6d40 | 74 65 20 64 61 6d 70 65 6e 69 6e 67 20 69 73 20 65 6e 61 62 6c 65 64 2c 20 61 6e 20 75 6e 73 74 | te.dampening.is.enabled,.an.unst |
e6d60 | 61 62 6c 65 20 72 6f 75 74 65 20 61 63 63 75 6d 75 6c 61 74 65 73 20 70 65 6e 61 6c 74 69 65 73 | able.route.accumulates.penalties |
e6d80 | 20 65 61 63 68 20 74 69 6d 65 20 74 68 65 20 72 6f 75 74 65 20 66 61 69 6c 73 20 61 6e 64 20 72 | .each.time.the.route.fails.and.r |
e6da0 | 65 74 75 72 6e 73 2e 20 49 66 20 74 68 65 20 61 63 63 75 6d 75 6c 61 74 65 64 20 70 65 6e 61 6c | eturns..If.the.accumulated.penal |
e6dc0 | 74 69 65 73 20 65 78 63 65 65 64 20 61 20 74 68 72 65 73 68 6f 6c 64 2c 20 74 68 65 20 72 6f 75 | ties.exceed.a.threshold,.the.rou |
e6de0 | 74 65 20 69 73 20 6e 6f 20 6c 6f 6e 67 65 72 20 61 64 76 65 72 74 69 73 65 64 2e 20 54 68 69 73 | te.is.no.longer.advertised..This |
e6e00 | 20 69 73 20 72 6f 75 74 65 20 73 75 70 70 72 65 73 73 69 6f 6e 2e 20 52 6f 75 74 65 73 20 74 68 | .is.route.suppression..Routes.th |
e6e20 | 61 74 20 68 61 76 65 20 62 65 65 6e 20 73 75 70 70 72 65 73 73 65 64 20 61 72 65 20 72 65 2d 65 | at.have.been.suppressed.are.re-e |
e6e40 | 6e 74 65 72 65 64 20 69 6e 74 6f 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 6f 6e | ntered.into.the.routing.table.on |
e6e60 | 6c 79 20 77 68 65 6e 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 74 68 65 69 72 20 70 65 6e 61 | ly.when.the.amount.of.their.pena |
e6e80 | 6c 74 79 20 66 61 6c 6c 73 20 62 65 6c 6f 77 20 61 20 74 68 72 65 73 68 6f 6c 64 2e 00 52 6f 75 | lty.falls.below.a.threshold..Rou |
e6ea0 | 74 65 20 66 69 6c 74 65 72 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 75 73 69 6e 67 20 61 | te.filter.can.be.applied.using.a |
e6ec0 | 20 72 6f 75 74 65 2d 6d 61 70 3a 00 52 6f 75 74 65 20 6d 61 70 20 69 73 20 61 20 70 6f 77 65 72 | .route-map:.Route.map.is.a.power |
e6ee0 | 66 75 6c 6c 20 63 6f 6d 6d 61 6e 64 2c 20 74 68 61 74 20 67 69 76 65 73 20 6e 65 74 77 6f 72 6b | full.command,.that.gives.network |
e6f00 | 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 73 20 61 20 76 65 72 79 20 75 73 65 66 75 6c 20 61 6e | .administrators.a.very.useful.an |
e6f20 | 64 20 66 6c 65 78 69 62 6c 65 20 74 6f 6f 6c 20 66 6f 72 20 74 72 61 66 66 69 63 20 6d 61 6e 69 | d.flexible.tool.for.traffic.mani |
e6f40 | 70 75 6c 61 74 69 6f 6e 2e 00 52 6f 75 74 65 20 6d 61 70 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 | pulation..Route.maps.can.be.conf |
e6f60 | 69 67 75 72 65 64 20 74 6f 20 6d 61 74 63 68 20 61 20 73 70 65 63 69 66 69 63 20 52 50 4b 49 20 | igured.to.match.a.specific.RPKI. |
e6f80 | 76 61 6c 69 64 61 74 69 6f 6e 20 73 74 61 74 65 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 74 68 | validation.state..This.allows.th |
e6fa0 | 65 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 6c 6f 63 61 6c 20 70 6f 6c 69 63 69 65 73 2c 20 77 68 | e.creation.of.local.policies,.wh |
e6fc0 | 69 63 68 20 68 61 6e 64 6c 65 20 42 47 50 20 72 6f 75 74 65 73 20 62 61 73 65 64 20 6f 6e 20 74 | ich.handle.BGP.routes.based.on.t |
e6fe0 | 68 65 20 6f 75 74 63 6f 6d 65 20 6f 66 20 74 68 65 20 50 72 65 66 69 78 20 4f 72 69 67 69 6e 20 | he.outcome.of.the.Prefix.Origin. |
e7000 | 56 61 6c 69 64 61 74 69 6f 6e 2e 00 52 6f 75 74 65 20 6d 65 74 72 69 63 00 52 6f 75 74 65 20 74 | Validation..Route.metric.Route.t |
e7020 | 61 67 20 74 6f 20 6d 61 74 63 68 2e 00 52 6f 75 74 65 72 20 41 64 76 65 72 74 69 73 65 6d 65 6e | ag.to.match..Router.Advertisemen |
e7040 | 74 73 00 52 6f 75 74 65 72 20 4c 69 66 65 74 69 6d 65 00 52 6f 75 74 65 72 20 72 65 63 65 69 76 | ts.Router.Lifetime.Router.receiv |
e7060 | 65 73 20 44 48 43 50 20 63 6c 69 65 6e 74 20 72 65 71 75 65 73 74 73 20 6f 6e 20 60 60 65 74 68 | es.DHCP.client.requests.on.``eth |
e7080 | 31 60 60 20 61 6e 64 20 72 65 6c 61 79 73 20 74 68 65 6d 20 74 6f 20 74 68 65 20 73 65 72 76 65 | 1``.and.relays.them.to.the.serve |
e70a0 | 72 20 61 74 20 31 30 2e 30 2e 31 2e 34 20 6f 6e 20 60 60 65 74 68 32 60 60 2e 00 52 6f 75 74 65 | r.at.10.0.1.4.on.``eth2``..Route |
e70c0 | 73 20 65 78 70 6f 72 74 65 64 20 66 72 6f 6d 20 61 20 75 6e 69 63 61 73 74 20 56 52 46 20 74 6f | s.exported.from.a.unicast.VRF.to |
e70e0 | 20 74 68 65 20 56 50 4e 20 52 49 42 20 6d 75 73 74 20 62 65 20 61 75 67 6d 65 6e 74 65 64 20 62 | .the.VPN.RIB.must.be.augmented.b |
e7100 | 79 20 74 77 6f 20 70 61 72 61 6d 65 74 65 72 73 3a 00 52 6f 75 74 65 73 20 6f 6e 20 4e 6f 64 65 | y.two.parameters:.Routes.on.Node |
e7120 | 20 32 3a 00 52 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 73 65 6e 74 20 66 72 6f 6d 20 70 72 | .2:.Routes.that.are.sent.from.pr |
e7140 | 6f 76 69 64 65 72 2c 20 72 73 2d 73 65 72 76 65 72 2c 20 6f 72 20 74 68 65 20 70 65 65 72 20 6c | ovider,.rs-server,.or.the.peer.l |
e7160 | 6f 63 61 6c 2d 72 6f 6c 65 20 28 6f 72 20 69 66 20 72 65 63 65 69 76 65 64 20 62 79 20 63 75 73 | ocal-role.(or.if.received.by.cus |
e7180 | 74 6f 6d 65 72 2c 20 72 73 2d 63 6c 69 65 6e 74 2c 20 6f 72 20 74 68 65 20 70 65 65 72 20 6c 6f | tomer,.rs-client,.or.the.peer.lo |
e71a0 | 63 61 6c 2d 72 6f 6c 65 29 20 77 69 6c 6c 20 62 65 20 6d 61 72 6b 65 64 20 77 69 74 68 20 61 20 | cal-role).will.be.marked.with.a. |
e71c0 | 6e 65 77 20 4f 6e 6c 79 20 74 6f 20 43 75 73 74 6f 6d 65 72 20 28 4f 54 43 29 20 61 74 74 72 69 | new.Only.to.Customer.(OTC).attri |
e71e0 | 62 75 74 65 2e 00 52 6f 75 74 65 73 20 77 69 74 68 20 61 20 64 69 73 74 61 6e 63 65 20 6f 66 20 | bute..Routes.with.a.distance.of. |
e7200 | 32 35 35 20 61 72 65 20 65 66 66 65 63 74 69 76 65 6c 79 20 64 69 73 61 62 6c 65 64 20 61 6e 64 | 255.are.effectively.disabled.and |
e7220 | 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 69 6e 74 6f 20 74 68 65 20 6b 65 72 6e 65 6c 2e 00 | .not.installed.into.the.kernel.. |
e7240 | 52 6f 75 74 65 73 20 77 69 74 68 20 74 68 69 73 20 61 74 74 72 69 62 75 74 65 20 63 61 6e 20 6f | Routes.with.this.attribute.can.o |
e7260 | 6e 6c 79 20 62 65 20 73 65 6e 74 20 74 6f 20 79 6f 75 72 20 6e 65 69 67 68 62 6f 72 20 69 66 20 | nly.be.sent.to.your.neighbor.if. |
e7280 | 79 6f 75 72 20 6c 6f 63 61 6c 2d 72 6f 6c 65 20 69 73 20 70 72 6f 76 69 64 65 72 20 6f 72 20 72 | your.local-role.is.provider.or.r |
e72a0 | 73 2d 73 65 72 76 65 72 2e 20 52 6f 75 74 65 73 20 77 69 74 68 20 74 68 69 73 20 61 74 74 72 69 | s-server..Routes.with.this.attri |
e72c0 | 62 75 74 65 20 63 61 6e 20 62 65 20 72 65 63 65 69 76 65 64 20 6f 6e 6c 79 20 69 66 20 79 6f 75 | bute.can.be.received.only.if.you |
e72e0 | 72 20 6c 6f 63 61 6c 2d 72 6f 6c 65 20 69 73 20 63 75 73 74 6f 6d 65 72 20 6f 72 20 72 73 2d 63 | r.local-role.is.customer.or.rs-c |
e7300 | 6c 69 65 6e 74 2e 00 52 6f 75 74 69 6e 65 00 52 6f 75 74 69 6e 67 00 52 6f 75 74 69 6e 67 20 74 | lient..Routine.Routing.Routing.t |
e7320 | 61 62 6c 65 73 20 74 68 61 74 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 69 6e 20 74 68 69 73 20 | ables.that.will.be.used.in.this. |
e7340 | 65 78 61 6d 70 6c 65 20 61 72 65 3a 00 52 75 6c 65 20 31 30 20 6d 61 74 63 68 65 73 20 72 65 71 | example.are:.Rule.10.matches.req |
e7360 | 75 65 73 74 73 20 77 69 74 68 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 60 60 6e 6f 64 | uests.with.the.domain.name.``nod |
e7380 | 65 31 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 60 60 20 66 6f 72 77 61 72 64 73 20 74 6f 20 74 68 65 | e1.example.com``.forwards.to.the |
e73a0 | 20 62 61 63 6b 65 6e 64 20 60 60 62 6b 2d 61 70 69 2d 30 31 60 60 00 52 75 6c 65 20 31 30 20 6d | .backend.``bk-api-01``.Rule.10.m |
e73c0 | 61 74 63 68 65 73 20 72 65 71 75 65 73 74 73 20 77 69 74 68 20 74 68 65 20 65 78 61 63 74 20 55 | atches.requests.with.the.exact.U |
e73e0 | 52 4c 20 70 61 74 68 20 60 60 2f 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e 2f 78 78 78 60 60 20 61 6e 64 | RL.path.``/.well-known/xxx``.and |
e7400 | 20 72 65 64 69 72 65 63 74 73 20 74 6f 20 6c 6f 63 61 74 69 6f 6e 20 60 60 2f 63 65 72 74 73 2f | .redirects.to.location.``/certs/ |
e7420 | 60 60 2e 00 52 75 6c 65 20 31 31 30 20 69 73 20 68 69 74 2c 20 73 6f 20 63 6f 6e 6e 65 63 74 69 | ``..Rule.110.is.hit,.so.connecti |
e7440 | 6f 6e 20 69 73 20 61 63 63 65 70 74 65 64 2e 00 52 75 6c 65 20 32 30 20 6d 61 74 63 68 65 73 20 | on.is.accepted..Rule.20.matches. |
e7460 | 72 65 71 75 65 73 74 73 20 77 69 74 68 20 55 52 4c 20 70 61 74 68 73 20 65 6e 64 69 6e 67 20 69 | requests.with.URL.paths.ending.i |
e7480 | 6e 20 60 60 2f 6d 61 69 6c 60 60 20 6f 72 20 65 78 61 63 74 20 70 61 74 68 20 60 60 2f 65 6d 61 | n.``/mail``.or.exact.path.``/ema |
e74a0 | 69 6c 2f 62 61 72 60 60 20 72 65 64 69 72 65 63 74 20 74 6f 20 6c 6f 63 61 74 69 6f 6e 20 60 60 | il/bar``.redirect.to.location.`` |
e74c0 | 2f 70 6f 73 74 66 69 78 2f 60 60 2e 00 52 75 6c 65 20 32 30 20 6d 61 74 63 68 65 73 20 72 65 71 | /postfix/``..Rule.20.matches.req |
e74e0 | 75 65 73 74 73 20 77 69 74 68 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 60 60 6e 6f 64 | uests.with.the.domain.name.``nod |
e7500 | 65 32 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 60 60 20 66 6f 72 77 61 72 64 73 20 74 6f 20 74 68 65 | e2.example.com``.forwards.to.the |
e7520 | 20 62 61 63 6b 65 6e 64 20 60 60 62 6b 2d 61 70 69 2d 30 32 60 60 00 52 75 6c 65 20 53 74 61 74 | .backend.``bk-api-02``.Rule.Stat |
e7540 | 75 73 00 52 75 6c 65 2d 53 65 74 73 00 52 75 6c 65 2d 73 65 74 20 6f 76 65 72 76 69 65 77 00 52 | us.Rule-Sets.Rule-set.overview.R |
e7560 | 75 6c 65 73 00 52 75 6c 65 73 20 61 6c 6c 6f 77 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 61 6e 64 20 | ules.Rules.allow.to.control.and. |
e7580 | 72 6f 75 74 65 20 69 6e 63 6f 6d 69 6e 67 20 74 72 61 66 66 69 63 20 74 6f 20 73 70 65 63 69 66 | route.incoming.traffic.to.specif |
e75a0 | 69 63 20 62 61 63 6b 65 6e 64 20 62 61 73 65 64 20 6f 6e 20 70 72 65 64 65 66 69 6e 65 64 20 63 | ic.backend.based.on.predefined.c |
e75c0 | 6f 6e 64 69 74 69 6f 6e 73 2e 20 52 75 6c 65 73 20 61 6c 6c 6f 77 20 74 6f 20 64 65 66 69 6e 65 | onditions..Rules.allow.to.define |
e75e0 | 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 61 6e 64 20 70 65 72 66 6f 72 6d 20 61 | .matching.criteria.and.perform.a |
e7600 | 63 74 69 6f 6e 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 00 52 75 6c 65 73 20 77 69 6c 6c 20 62 65 | ction.accordingly..Rules.will.be |
e7620 | 20 63 72 65 61 74 65 64 20 66 6f 72 20 62 6f 74 68 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e | .created.for.both.:ref:`source-n |
e7640 | 61 74 60 20 61 6e 64 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 2e 00 | at`.and.:ref:`destination-nat`.. |
e7660 | 52 75 6e 6e 69 6e 67 20 42 65 68 69 6e 64 20 4e 41 54 00 53 4e 41 54 00 53 4e 41 54 36 34 00 53 | Running.Behind.NAT.SNAT.SNAT64.S |
e7680 | 4e 41 54 36 36 00 53 4e 4d 50 00 53 4e 4d 50 20 45 78 74 65 6e 73 69 6f 6e 73 00 53 4e 4d 50 20 | NAT66.SNMP.SNMP.Extensions.SNMP. |
e76a0 | 50 72 6f 74 6f 63 6f 6c 20 56 65 72 73 69 6f 6e 73 00 53 4e 4d 50 20 63 61 6e 20 77 6f 72 6b 20 | Protocol.Versions.SNMP.can.work. |
e76c0 | 73 79 6e 63 68 72 6f 6e 6f 75 73 6c 79 20 6f 72 20 61 73 79 6e 63 68 72 6f 6e 6f 75 73 6c 79 2e | synchronously.or.asynchronously. |
e76e0 | 20 49 6e 20 73 79 6e 63 68 72 6f 6e 6f 75 73 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 2c 20 74 | .In.synchronous.communication,.t |
e7700 | 68 65 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 73 79 73 74 65 6d 20 71 75 65 72 69 65 73 20 74 68 65 | he.monitoring.system.queries.the |
e7720 | 20 72 6f 75 74 65 72 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 2e 20 49 6e 20 61 73 79 6e 63 68 72 | .router.periodically..In.asynchr |
e7740 | 6f 6e 6f 75 73 2c 20 74 68 65 20 72 6f 75 74 65 72 20 73 65 6e 64 73 20 6e 6f 74 69 66 69 63 61 | onous,.the.router.sends.notifica |
e7760 | 74 69 6f 6e 20 74 6f 20 74 68 65 20 22 74 72 61 70 22 20 28 74 68 65 20 6d 6f 6e 69 74 6f 72 69 | tion.to.the."trap".(the.monitori |
e7780 | 6e 67 20 68 6f 73 74 29 2e 00 53 4e 4d 50 20 69 73 20 61 20 63 6f 6d 70 6f 6e 65 6e 74 20 6f 66 | ng.host)..SNMP.is.a.component.of |
e77a0 | 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 6f 6c 20 53 75 69 74 65 20 61 73 20 | .the.Internet.Protocol.Suite.as. |
e77c0 | 64 65 66 69 6e 65 64 20 62 79 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 45 6e 67 69 6e 65 65 72 | defined.by.the.Internet.Engineer |
e77e0 | 69 6e 67 20 54 61 73 6b 20 46 6f 72 63 65 20 28 49 45 54 46 29 2e 20 49 74 20 63 6f 6e 73 69 73 | ing.Task.Force.(IETF)..It.consis |
e7800 | 74 73 20 6f 66 20 61 20 73 65 74 20 6f 66 20 73 74 61 6e 64 61 72 64 73 20 66 6f 72 20 6e 65 74 | ts.of.a.set.of.standards.for.net |
e7820 | 77 6f 72 6b 20 6d 61 6e 61 67 65 6d 65 6e 74 2c 20 69 6e 63 6c 75 64 69 6e 67 20 61 6e 20 61 70 | work.management,.including.an.ap |
e7840 | 70 6c 69 63 61 74 69 6f 6e 20 6c 61 79 65 72 20 70 72 6f 74 6f 63 6f 6c 2c 20 61 20 64 61 74 61 | plication.layer.protocol,.a.data |
e7860 | 62 61 73 65 20 73 63 68 65 6d 61 2c 20 61 6e 64 20 61 20 73 65 74 20 6f 66 20 64 61 74 61 20 6f | base.schema,.and.a.set.of.data.o |
e7880 | 62 6a 65 63 74 73 2e 00 53 4e 4d 50 20 69 73 20 77 69 64 65 6c 79 20 75 73 65 64 20 69 6e 20 6e | bjects..SNMP.is.widely.used.in.n |
e78a0 | 65 74 77 6f 72 6b 20 6d 61 6e 61 67 65 6d 65 6e 74 20 66 6f 72 20 6e 65 74 77 6f 72 6b 20 6d 6f | etwork.management.for.network.mo |
e78c0 | 6e 69 74 6f 72 69 6e 67 2e 20 53 4e 4d 50 20 65 78 70 6f 73 65 73 20 6d 61 6e 61 67 65 6d 65 6e | nitoring..SNMP.exposes.managemen |
e78e0 | 74 20 64 61 74 61 20 69 6e 20 74 68 65 20 66 6f 72 6d 20 6f 66 20 76 61 72 69 61 62 6c 65 73 20 | t.data.in.the.form.of.variables. |
e7900 | 6f 6e 20 74 68 65 20 6d 61 6e 61 67 65 64 20 73 79 73 74 65 6d 73 20 6f 72 67 61 6e 69 7a 65 64 | on.the.managed.systems.organized |
e7920 | 20 69 6e 20 61 20 6d 61 6e 61 67 65 6d 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 62 61 73 | .in.a.management.information.bas |
e7940 | 65 20 28 4d 49 42 5f 29 20 77 68 69 63 68 20 64 65 73 63 72 69 62 65 20 74 68 65 20 73 79 73 74 | e.(MIB_).which.describe.the.syst |
e7960 | 65 6d 20 73 74 61 74 75 73 20 61 6e 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 54 68 65 | em.status.and.configuration..The |
e7980 | 73 65 20 76 61 72 69 61 62 6c 65 73 20 63 61 6e 20 74 68 65 6e 20 62 65 20 72 65 6d 6f 74 65 6c | se.variables.can.then.be.remotel |
e79a0 | 79 20 71 75 65 72 69 65 64 20 28 61 6e 64 2c 20 69 6e 20 73 6f 6d 65 20 63 69 72 63 75 6d 73 74 | y.queried.(and,.in.some.circumst |
e79c0 | 61 6e 63 65 73 2c 20 6d 61 6e 69 70 75 6c 61 74 65 64 29 20 62 79 20 6d 61 6e 61 67 69 6e 67 20 | ances,.manipulated).by.managing. |
e79e0 | 61 70 70 6c 69 63 61 74 69 6f 6e 73 2e 00 53 4e 4d 50 76 32 00 53 4e 4d 50 76 32 20 64 6f 65 73 | applications..SNMPv2.SNMPv2.does |
e7a00 | 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 61 6e 79 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 | .not.support.any.authentication. |
e7a20 | 6d 65 63 68 61 6e 69 73 6d 73 2c 20 6f 74 68 65 72 20 74 68 61 6e 20 63 6c 69 65 6e 74 20 73 6f | mechanisms,.other.than.client.so |
e7a40 | 75 72 63 65 20 61 64 64 72 65 73 73 2c 20 73 6f 20 79 6f 75 20 73 68 6f 75 6c 64 20 73 70 65 63 | urce.address,.so.you.should.spec |
e7a60 | 69 66 79 20 61 64 64 72 65 73 73 65 73 20 6f 66 20 63 6c 69 65 6e 74 73 20 61 6c 6c 6f 77 65 64 | ify.addresses.of.clients.allowed |
e7a80 | 20 74 6f 20 6d 6f 6e 69 74 6f 72 20 74 68 65 20 72 6f 75 74 65 72 2e 20 4e 6f 74 65 20 74 68 61 | .to.monitor.the.router..Note.tha |
e7aa0 | 74 20 53 4e 4d 50 76 32 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 73 20 6e 6f 20 65 6e 63 72 79 70 | t.SNMPv2.also.supports.no.encryp |
e7ac0 | 74 69 6f 6e 20 61 6e 64 20 61 6c 77 61 79 73 20 73 65 6e 64 73 20 64 61 74 61 20 69 6e 20 70 6c | tion.and.always.sends.data.in.pl |
e7ae0 | 61 69 6e 20 74 65 78 74 2e 00 53 4e 4d 50 76 32 20 69 73 20 74 68 65 20 6f 72 69 67 69 6e 61 6c | ain.text..SNMPv2.is.the.original |
e7b00 | 20 61 6e 64 20 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 6c 79 20 75 73 65 64 20 76 65 72 73 69 6f 6e 2e | .and.most.commonly.used.version. |
e7b20 | 20 46 6f 72 20 61 75 74 68 6f 72 69 7a 69 6e 67 20 63 6c 69 65 6e 74 73 2c 20 53 4e 4d 50 20 75 | .For.authorizing.clients,.SNMP.u |
e7b40 | 73 65 73 20 74 68 65 20 63 6f 6e 63 65 70 74 20 6f 66 20 63 6f 6d 6d 75 6e 69 74 69 65 73 2e 20 | ses.the.concept.of.communities.. |
e7b60 | 43 6f 6d 6d 75 6e 69 74 69 65 73 20 6d 61 79 20 68 61 76 65 20 61 75 74 68 6f 72 69 7a 61 74 69 | Communities.may.have.authorizati |
e7b80 | 6f 6e 20 73 65 74 20 74 6f 20 72 65 61 64 20 6f 6e 6c 79 20 28 74 68 69 73 20 69 73 20 6d 6f 73 | on.set.to.read.only.(this.is.mos |
e7ba0 | 74 20 63 6f 6d 6d 6f 6e 29 20 6f 72 20 74 6f 20 72 65 61 64 20 61 6e 64 20 77 72 69 74 65 20 28 | t.common).or.to.read.and.write.( |
e7bc0 | 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 6e 6f 74 20 61 63 74 69 76 65 6c 79 20 75 73 65 64 | this.option.is.not.actively.used |
e7be0 | 20 69 6e 20 56 79 4f 53 29 2e 00 53 4e 4d 50 76 33 00 53 4e 4d 50 76 33 20 28 76 65 72 73 69 6f | .in.VyOS)..SNMPv3.SNMPv3.(versio |
e7c00 | 6e 20 33 20 6f 66 20 74 68 65 20 53 4e 4d 50 20 70 72 6f 74 6f 63 6f 6c 29 20 69 6e 74 72 6f 64 | n.3.of.the.SNMP.protocol).introd |
e7c20 | 75 63 65 64 20 61 20 77 68 6f 6c 65 20 73 6c 65 77 20 6f 66 20 6e 65 77 20 73 65 63 75 72 69 74 | uced.a.whole.slew.of.new.securit |
e7c40 | 79 20 72 65 6c 61 74 65 64 20 66 65 61 74 75 72 65 73 20 74 68 61 74 20 68 61 76 65 20 62 65 65 | y.related.features.that.have.bee |
e7c60 | 6e 20 6d 69 73 73 69 6e 67 20 66 72 6f 6d 20 74 68 65 20 70 72 65 76 69 6f 75 73 20 76 65 72 73 | n.missing.from.the.previous.vers |
e7c80 | 69 6f 6e 73 2e 20 53 65 63 75 72 69 74 79 20 77 61 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 62 69 | ions..Security.was.one.of.the.bi |
e7ca0 | 67 67 65 73 74 20 77 65 61 6b 6e 65 73 73 20 6f 66 20 53 4e 4d 50 20 75 6e 74 69 6c 20 76 33 2e | ggest.weakness.of.SNMP.until.v3. |
e7cc0 | 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 6e 20 53 4e 4d 50 20 56 65 72 73 69 6f 6e 73 | .Authentication.in.SNMP.Versions |
e7ce0 | 20 31 20 61 6e 64 20 32 20 61 6d 6f 75 6e 74 73 20 74 6f 20 6e 6f 74 68 69 6e 67 20 6d 6f 72 65 | .1.and.2.amounts.to.nothing.more |
e7d00 | 20 74 68 61 6e 20 61 20 70 61 73 73 77 6f 72 64 20 28 63 6f 6d 6d 75 6e 69 74 79 20 73 74 72 69 | .than.a.password.(community.stri |
e7d20 | 6e 67 29 20 73 65 6e 74 20 69 6e 20 63 6c 65 61 72 20 74 65 78 74 20 62 65 74 77 65 65 6e 20 61 | ng).sent.in.clear.text.between.a |
e7d40 | 20 6d 61 6e 61 67 65 72 20 61 6e 64 20 61 67 65 6e 74 2e 20 45 61 63 68 20 53 4e 4d 50 76 33 20 | .manager.and.agent..Each.SNMPv3. |
e7d60 | 6d 65 73 73 61 67 65 20 63 6f 6e 74 61 69 6e 73 20 73 65 63 75 72 69 74 79 20 70 61 72 61 6d 65 | message.contains.security.parame |
e7d80 | 74 65 72 73 20 77 68 69 63 68 20 61 72 65 20 65 6e 63 6f 64 65 64 20 61 73 20 61 6e 20 6f 63 74 | ters.which.are.encoded.as.an.oct |
e7da0 | 65 74 20 73 74 72 69 6e 67 2e 20 54 68 65 20 6d 65 61 6e 69 6e 67 20 6f 66 20 74 68 65 73 65 20 | et.string..The.meaning.of.these. |
e7dc0 | 73 65 63 75 72 69 74 79 20 70 61 72 61 6d 65 74 65 72 73 20 64 65 70 65 6e 64 73 20 6f 6e 20 74 | security.parameters.depends.on.t |
e7de0 | 68 65 20 73 65 63 75 72 69 74 79 20 6d 6f 64 65 6c 20 62 65 69 6e 67 20 75 73 65 64 2e 00 53 50 | he.security.model.being.used..SP |
e7e00 | 41 4e 20 70 6f 72 74 20 6d 69 72 72 6f 72 69 6e 67 20 63 61 6e 20 63 6f 70 79 20 74 68 65 20 69 | AN.port.mirroring.can.copy.the.i |
e7e20 | 6e 62 6f 75 6e 64 2f 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 20 74 68 65 20 69 | nbound/outbound.traffic.of.the.i |
e7e40 | 6e 74 65 72 66 61 63 65 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 | nterface.to.the.specified.interf |
e7e60 | 61 63 65 2c 20 75 73 75 61 6c 6c 79 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 62 | ace,.usually.the.interface.can.b |
e7e80 | 65 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 73 6f 6d 65 20 73 70 65 63 69 61 6c 20 65 71 75 69 | e.connected.to.some.special.equi |
e7ea0 | 70 6d 65 6e 74 2c 20 73 75 63 68 20 61 73 20 62 65 68 61 76 69 6f 72 20 63 6f 6e 74 72 6f 6c 20 | pment,.such.as.behavior.control. |
e7ec0 | 73 79 73 74 65 6d 2c 20 69 6e 74 72 75 73 69 6f 6e 20 64 65 74 65 63 74 69 6f 6e 20 73 79 73 74 | system,.intrusion.detection.syst |
e7ee0 | 65 6d 20 61 6e 64 20 74 72 61 66 66 69 63 20 63 6f 6c 6c 65 63 74 6f 72 2c 20 61 6e 64 20 63 61 | em.and.traffic.collector,.and.ca |
e7f00 | 6e 20 63 6f 70 79 20 61 6c 6c 20 72 65 6c 61 74 65 64 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 | n.copy.all.related.traffic.from. |
e7f20 | 74 68 69 73 20 70 6f 72 74 2e 20 54 68 65 20 62 65 6e 65 66 69 74 20 6f 66 20 6d 69 72 72 6f 72 | this.port..The.benefit.of.mirror |
e7f40 | 69 6e 67 20 74 68 65 20 74 72 61 66 66 69 63 20 69 73 20 74 68 61 74 20 74 68 65 20 61 70 70 6c | ing.the.traffic.is.that.the.appl |
e7f60 | 69 63 61 74 69 6f 6e 20 69 73 20 69 73 6f 6c 61 74 65 64 20 66 72 6f 6d 20 74 68 65 20 73 6f 75 | ication.is.isolated.from.the.sou |
e7f80 | 72 63 65 20 74 72 61 66 66 69 63 20 61 6e 64 20 73 6f 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 70 | rce.traffic.and.so.application.p |
e7fa0 | 72 6f 63 65 73 73 69 6e 67 20 64 6f 65 73 20 6e 6f 74 20 61 66 66 65 63 74 20 74 68 65 20 74 72 | rocessing.does.not.affect.the.tr |
e7fc0 | 61 66 66 69 63 20 6f 72 20 74 68 65 20 73 79 73 74 65 6d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e | affic.or.the.system.performance. |
e7fe0 | 00 53 53 48 00 53 53 48 20 3a 72 65 66 3a 60 73 73 68 5f 6b 65 79 5f 62 61 73 65 64 5f 61 75 74 | .SSH.SSH.:ref:`ssh_key_based_aut |
e8000 | 68 65 6e 74 69 63 61 74 69 6f 6e 60 00 53 53 48 20 3a 72 65 66 3a 60 73 73 68 5f 6f 70 65 72 61 | hentication`.SSH.:ref:`ssh_opera |
e8020 | 74 69 6f 6e 60 00 53 53 48 20 63 6c 69 65 6e 74 00 53 53 48 20 70 72 6f 76 69 64 65 73 20 61 20 | tion`.SSH.client.SSH.provides.a. |
e8040 | 73 65 63 75 72 65 20 63 68 61 6e 6e 65 6c 20 6f 76 65 72 20 61 6e 20 75 6e 73 65 63 75 72 65 64 | secure.channel.over.an.unsecured |
e8060 | 20 6e 65 74 77 6f 72 6b 20 69 6e 20 61 20 63 6c 69 65 6e 74 2d 73 65 72 76 65 72 20 61 72 63 68 | .network.in.a.client-server.arch |
e8080 | 69 74 65 63 74 75 72 65 2c 20 63 6f 6e 6e 65 63 74 69 6e 67 20 61 6e 20 53 53 48 20 63 6c 69 65 | itecture,.connecting.an.SSH.clie |
e80a0 | 6e 74 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 77 69 74 68 20 61 6e 20 53 53 48 20 73 65 72 76 65 | nt.application.with.an.SSH.serve |
e80c0 | 72 2e 20 43 6f 6d 6d 6f 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 69 6e 63 6c 75 64 65 20 72 | r..Common.applications.include.r |
e80e0 | 65 6d 6f 74 65 20 63 6f 6d 6d 61 6e 64 2d 6c 69 6e 65 20 6c 6f 67 69 6e 20 61 6e 64 20 72 65 6d | emote.command-line.login.and.rem |
e8100 | 6f 74 65 20 63 6f 6d 6d 61 6e 64 20 65 78 65 63 75 74 69 6f 6e 2c 20 62 75 74 20 61 6e 79 20 6e | ote.command.execution,.but.any.n |
e8120 | 65 74 77 6f 72 6b 20 73 65 72 76 69 63 65 20 63 61 6e 20 62 65 20 73 65 63 75 72 65 64 20 77 69 | etwork.service.can.be.secured.wi |
e8140 | 74 68 20 53 53 48 2e 20 54 68 65 20 70 72 6f 74 6f 63 6f 6c 20 73 70 65 63 69 66 69 63 61 74 69 | th.SSH..The.protocol.specificati |
e8160 | 6f 6e 20 64 69 73 74 69 6e 67 75 69 73 68 65 73 20 62 65 74 77 65 65 6e 20 74 77 6f 20 6d 61 6a | on.distinguishes.between.two.maj |
e8180 | 6f 72 20 76 65 72 73 69 6f 6e 73 2c 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 53 53 48 2d | or.versions,.referred.to.as.SSH- |
e81a0 | 31 20 61 6e 64 20 53 53 48 2d 32 2e 00 53 53 48 20 75 73 65 72 6e 61 6d 65 20 74 6f 20 65 73 74 | 1.and.SSH-2..SSH.username.to.est |
e81c0 | 61 62 6c 69 73 68 20 61 6e 20 53 53 48 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 74 68 65 20 | ablish.an.SSH.connection.to.the. |
e81e0 | 63 61 63 68 65 20 73 65 72 76 65 72 2e 00 53 53 48 20 77 61 73 20 64 65 73 69 67 6e 65 64 20 61 | cache.server..SSH.was.designed.a |
e8200 | 73 20 61 20 72 65 70 6c 61 63 65 6d 65 6e 74 20 66 6f 72 20 54 65 6c 6e 65 74 20 61 6e 64 20 66 | s.a.replacement.for.Telnet.and.f |
e8220 | 6f 72 20 75 6e 73 65 63 75 72 65 64 20 72 65 6d 6f 74 65 20 73 68 65 6c 6c 20 70 72 6f 74 6f 63 | or.unsecured.remote.shell.protoc |
e8240 | 6f 6c 73 20 73 75 63 68 20 61 73 20 74 68 65 20 42 65 72 6b 65 6c 65 79 20 72 6c 6f 67 69 6e 2c | ols.such.as.the.Berkeley.rlogin, |
e8260 | 20 72 73 68 2c 20 61 6e 64 20 72 65 78 65 63 20 70 72 6f 74 6f 63 6f 6c 73 2e 20 54 68 6f 73 65 | .rsh,.and.rexec.protocols..Those |
e8280 | 20 70 72 6f 74 6f 63 6f 6c 73 20 73 65 6e 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 6e 6f 74 | .protocols.send.information,.not |
e82a0 | 61 62 6c 79 20 70 61 73 73 77 6f 72 64 73 2c 20 69 6e 20 70 6c 61 69 6e 74 65 78 74 2c 20 72 65 | ably.passwords,.in.plaintext,.re |
e82c0 | 6e 64 65 72 69 6e 67 20 74 68 65 6d 20 73 75 73 63 65 70 74 69 62 6c 65 20 74 6f 20 69 6e 74 65 | ndering.them.susceptible.to.inte |
e82e0 | 72 63 65 70 74 69 6f 6e 20 61 6e 64 20 64 69 73 63 6c 6f 73 75 72 65 20 75 73 69 6e 67 20 70 61 | rception.and.disclosure.using.pa |
e8300 | 63 6b 65 74 20 61 6e 61 6c 79 73 69 73 2e 20 54 68 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 75 73 | cket.analysis..The.encryption.us |
e8320 | 65 64 20 62 79 20 53 53 48 20 69 73 20 69 6e 74 65 6e 64 65 64 20 74 6f 20 70 72 6f 76 69 64 65 | ed.by.SSH.is.intended.to.provide |
e8340 | 20 63 6f 6e 66 69 64 65 6e 74 69 61 6c 69 74 79 20 61 6e 64 20 69 6e 74 65 67 72 69 74 79 20 6f | .confidentiality.and.integrity.o |
e8360 | 66 20 64 61 74 61 20 6f 76 65 72 20 61 6e 20 75 6e 73 65 63 75 72 65 64 20 6e 65 74 77 6f 72 6b | f.data.over.an.unsecured.network |
e8380 | 2c 20 73 75 63 68 20 61 73 20 74 68 65 20 49 6e 74 65 72 6e 65 74 2e 00 53 53 49 44 20 74 6f 20 | ,.such.as.the.Internet..SSID.to. |
e83a0 | 62 65 20 75 73 65 64 20 69 6e 20 49 45 45 45 20 38 30 32 2e 31 31 20 6d 61 6e 61 67 65 6d 65 6e | be.used.in.IEEE.802.11.managemen |
e83c0 | 74 20 66 72 61 6d 65 73 00 53 53 4c 20 43 65 72 74 69 66 69 63 61 74 65 73 00 53 53 4c 20 43 65 | t.frames.SSL.Certificates.SSL.Ce |
e83e0 | 72 74 69 66 69 63 61 74 65 73 20 67 65 6e 65 72 61 74 69 6f 6e 00 53 53 4c 20 6d 61 74 63 68 20 | rtificates.generation.SSL.match. |
e8400 | 53 65 72 76 65 72 20 4e 61 6d 65 20 49 6e 64 69 63 61 74 69 6f 6e 20 28 53 4e 49 29 20 6f 70 74 | Server.Name.Indication.(SNI).opt |
e8420 | 69 6f 6e 3a 00 53 53 54 50 20 43 6c 69 65 6e 74 00 53 53 54 50 20 43 6c 69 65 6e 74 20 4f 70 74 | ion:.SSTP.Client.SSTP.Client.Opt |
e8440 | 69 6f 6e 73 00 53 53 54 50 20 53 65 72 76 65 72 00 53 53 54 50 20 69 73 20 61 76 61 69 6c 61 62 | ions.SSTP.Server.SSTP.is.availab |
e8460 | 6c 65 20 66 6f 72 20 4c 69 6e 75 78 2c 20 42 53 44 2c 20 61 6e 64 20 57 69 6e 64 6f 77 73 2e 00 | le.for.Linux,.BSD,.and.Windows.. |
e8480 | 53 53 54 50 20 72 65 6d 6f 74 65 20 73 65 72 76 65 72 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f | SSTP.remote.server.to.connect.to |
e84a0 | 2e 20 43 61 6e 20 62 65 20 65 69 74 68 65 72 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 | ..Can.be.either.an.IP.address.or |
e84c0 | 20 46 51 44 4e 2e 00 53 54 50 20 50 61 72 61 6d 65 74 65 72 00 53 61 6c 74 2d 4d 69 6e 69 6f 6e | .FQDN..STP.Parameter.Salt-Minion |
e84e0 | 00 53 61 6c 74 53 74 61 63 6b 5f 20 69 73 20 50 79 74 68 6f 6e 2d 62 61 73 65 64 2c 20 6f 70 65 | .SaltStack_.is.Python-based,.ope |
e8500 | 6e 2d 73 6f 75 72 63 65 20 73 6f 66 74 77 61 72 65 20 66 6f 72 20 65 76 65 6e 74 2d 64 72 69 76 | n-source.software.for.event-driv |
e8520 | 65 6e 20 49 54 20 61 75 74 6f 6d 61 74 69 6f 6e 2c 20 72 65 6d 6f 74 65 20 74 61 73 6b 20 65 78 | en.IT.automation,.remote.task.ex |
e8540 | 65 63 75 74 69 6f 6e 2c 20 61 6e 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 61 6e 61 67 | ecution,.and.configuration.manag |
e8560 | 65 6d 65 6e 74 2e 20 53 75 70 70 6f 72 74 69 6e 67 20 74 68 65 20 22 69 6e 66 72 61 73 74 72 75 | ement..Supporting.the."infrastru |
e8580 | 63 74 75 72 65 20 61 73 20 63 6f 64 65 22 20 61 70 70 72 6f 61 63 68 20 74 6f 20 64 61 74 61 20 | cture.as.code".approach.to.data. |
e85a0 | 63 65 6e 74 65 72 20 73 79 73 74 65 6d 20 61 6e 64 20 6e 65 74 77 6f 72 6b 20 64 65 70 6c 6f 79 | center.system.and.network.deploy |
e85c0 | 6d 65 6e 74 20 61 6e 64 20 6d 61 6e 61 67 65 6d 65 6e 74 2c 20 63 6f 6e 66 69 67 75 72 61 74 69 | ment.and.management,.configurati |
e85e0 | 6f 6e 20 61 75 74 6f 6d 61 74 69 6f 6e 2c 20 53 65 63 4f 70 73 20 6f 72 63 68 65 73 74 72 61 74 | on.automation,.SecOps.orchestrat |
e8600 | 69 6f 6e 2c 20 76 75 6c 6e 65 72 61 62 69 6c 69 74 79 20 72 65 6d 65 64 69 61 74 69 6f 6e 2c 20 | ion,.vulnerability.remediation,. |
e8620 | 61 6e 64 20 68 79 62 72 69 64 20 63 6c 6f 75 64 20 63 6f 6e 74 72 6f 6c 2e 00 53 61 6d 65 20 61 | and.hybrid.cloud.control..Same.a |
e8640 | 73 20 65 78 70 6f 72 74 2d 6c 69 73 74 2c 20 62 75 74 20 69 74 20 61 70 70 6c 69 65 73 20 74 6f | s.export-list,.but.it.applies.to |
e8660 | 20 70 61 74 68 73 20 61 6e 6e 6f 75 6e 63 65 64 20 69 6e 74 6f 20 73 70 65 63 69 66 69 65 64 20 | .paths.announced.into.specified. |
e8680 | 61 72 65 61 20 61 73 20 54 79 70 65 2d 33 20 73 75 6d 6d 61 72 79 2d 4c 53 41 73 2e 20 54 68 69 | area.as.Type-3.summary-LSAs..Thi |
e86a0 | 73 20 63 6f 6d 6d 61 6e 64 20 6d 61 6b 65 73 20 73 65 6e 73 65 20 69 6e 20 41 42 52 20 6f 6e 6c | s.command.makes.sense.in.ABR.onl |
e86c0 | 79 2e 00 53 61 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 53 56 44 20 77 | y..Sample.configuration.of.SVD.w |
e86e0 | 69 74 68 20 56 4c 41 4e 20 74 6f 20 56 4e 49 20 6d 61 70 70 69 6e 67 73 20 69 73 20 73 68 6f 77 | ith.VLAN.to.VNI.mappings.is.show |
e8700 | 6e 20 62 65 6c 6f 77 2e 00 53 61 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 6f | n.below..Sample.configuration.to |
e8720 | 20 73 65 74 75 70 20 4c 44 50 20 6f 6e 20 56 79 4f 53 00 53 63 61 6e 6e 69 6e 67 20 69 73 20 6e | .setup.LDP.on.VyOS.Scanning.is.n |
e8740 | 6f 74 20 73 75 70 70 6f 72 74 65 64 20 6f 6e 20 61 6c 6c 20 77 69 72 65 6c 65 73 73 20 64 72 69 | ot.supported.on.all.wireless.dri |
e8760 | 76 65 72 73 20 61 6e 64 20 77 69 72 65 6c 65 73 73 20 68 61 72 64 77 61 72 65 2e 20 52 65 66 65 | vers.and.wireless.hardware..Refe |
e8780 | 72 20 74 6f 20 79 6f 75 72 20 64 72 69 76 65 72 20 61 6e 64 20 77 69 72 65 6c 65 73 73 20 68 61 | r.to.your.driver.and.wireless.ha |
e87a0 | 72 64 77 61 72 65 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 6f 72 20 66 75 72 74 68 65 72 | rdware.documentation.for.further |
e87c0 | 20 64 65 74 61 69 6c 73 2e 00 53 63 72 69 70 74 20 65 78 65 63 75 74 69 6f 6e 00 53 63 72 69 70 | .details..Script.execution.Scrip |
e87e0 | 74 20 74 6f 20 72 75 6e 20 62 65 66 6f 72 65 20 73 65 73 73 69 6f 6e 20 69 6e 74 65 72 66 61 63 | t.to.run.before.session.interfac |
e8800 | 65 20 63 6f 6d 65 73 20 75 70 00 53 63 72 69 70 74 20 74 6f 20 72 75 6e 20 77 68 65 6e 20 73 65 | e.comes.up.Script.to.run.when.se |
e8820 | 73 73 69 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 63 68 61 6e 67 65 64 20 62 79 20 52 41 44 49 55 | ssion.interface.changed.by.RADIU |
e8840 | 53 20 43 6f 41 20 68 61 6e 64 6c 69 6e 67 00 53 63 72 69 70 74 20 74 6f 20 72 75 6e 20 77 68 65 | S.CoA.handling.Script.to.run.whe |
e8860 | 6e 20 73 65 73 73 69 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 67 6f 69 6e 67 20 74 6f 20 74 65 72 | n.session.interface.going.to.ter |
e8880 | 6d 69 6e 61 74 65 00 53 63 72 69 70 74 20 74 6f 20 72 75 6e 20 77 68 65 6e 20 73 65 73 73 69 6f | minate.Script.to.run.when.sessio |
e88a0 | 6e 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 63 6f 6d 70 6c 65 74 65 6c 79 20 63 6f 6e 66 69 67 | n.interface.is.completely.config |
e88c0 | 75 72 65 64 20 61 6e 64 20 73 74 61 72 74 65 64 00 53 63 72 69 70 74 69 6e 67 00 53 65 63 6f 6e | ured.and.started.Scripting.Secon |
e88e0 | 64 20 73 63 65 6e 61 72 69 6f 3a 20 61 70 70 6c 79 20 73 6f 75 72 63 65 20 4e 41 54 20 66 6f 72 | d.scenario:.apply.source.NAT.for |
e8900 | 20 61 6c 6c 20 6f 75 74 67 6f 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 20 4c | .all.outgoing.connections.from.L |
e8920 | 41 4e 20 31 30 2e 30 2e 30 2e 30 2f 38 2c 20 75 73 69 6e 67 20 33 20 70 75 62 6c 69 63 20 61 64 | AN.10.0.0.0/8,.using.3.public.ad |
e8940 | 64 72 65 73 73 65 73 20 61 6e 64 20 65 71 75 61 6c 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 20 | dresses.and.equal.distribution.. |
e8960 | 57 65 20 77 69 6c 6c 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 73 68 20 72 61 6e 64 6f 6d | We.will.generate.the.hash.random |
e8980 | 6c 79 2e 00 53 65 63 72 65 74 20 66 6f 72 20 44 79 6e 61 6d 69 63 20 41 75 74 68 6f 72 69 7a 61 | ly..Secret.for.Dynamic.Authoriza |
e89a0 | 74 69 6f 6e 20 45 78 74 65 6e 73 69 6f 6e 20 73 65 72 76 65 72 20 28 44 4d 2f 43 6f 41 29 00 53 | tion.Extension.server.(DM/CoA).S |
e89c0 | 65 63 75 72 69 74 79 00 53 65 63 75 72 69 74 79 2f 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 | ecurity.Security/authentication. |
e89e0 | 6d 65 73 73 61 67 65 73 00 53 65 65 20 3a 72 66 63 3a 60 37 37 36 31 23 73 65 63 74 69 6f 6e 2d | messages.See.:rfc:`7761#section- |
e8a00 | 34 2e 31 60 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 00 53 65 65 20 62 65 6c 6f 77 20 74 68 65 20 | 4.1`.for.details..See.below.the. |
e8a20 | 64 69 66 66 65 72 65 6e 74 20 70 61 72 61 6d 65 74 65 72 73 20 61 76 61 69 6c 61 62 6c 65 20 66 | different.parameters.available.f |
e8a40 | 6f 72 20 74 68 65 20 49 50 76 34 20 2a 2a 73 68 6f 77 2a 2a 20 63 6f 6d 6d 61 6e 64 3a 00 53 65 | or.the.IPv4.**show**.command:.Se |
e8a60 | 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 00 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 28 53 | gment.Routing.Segment.Routing.(S |
e8a80 | 52 29 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 61 72 63 68 69 74 65 63 74 75 72 65 20 74 68 61 | R).is.a.network.architecture.tha |
e8aa0 | 74 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 73 6f 75 72 63 65 2d 72 6f 75 74 69 6e 67 20 2e | t.is.similar.to.source-routing.. |
e8ac0 | 20 49 6e 20 74 68 69 73 20 61 72 63 68 69 74 65 63 74 75 72 65 2c 20 74 68 65 20 69 6e 67 72 65 | .In.this.architecture,.the.ingre |
e8ae0 | 73 73 20 72 6f 75 74 65 72 20 61 64 64 73 20 61 20 6c 69 73 74 20 6f 66 20 73 65 67 6d 65 6e 74 | ss.router.adds.a.list.of.segment |
e8b00 | 73 2c 20 6b 6e 6f 77 6e 20 61 73 20 53 49 44 73 2c 20 74 6f 20 74 68 65 20 70 61 63 6b 65 74 20 | s,.known.as.SIDs,.to.the.packet. |
e8b20 | 61 73 20 69 74 20 65 6e 74 65 72 73 20 74 68 65 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 73 65 20 | as.it.enters.the.network..These. |
e8b40 | 73 65 67 6d 65 6e 74 73 20 72 65 70 72 65 73 65 6e 74 20 64 69 66 66 65 72 65 6e 74 20 70 6f 72 | segments.represent.different.por |
e8b60 | 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 61 74 68 20 74 68 61 74 20 74 | tions.of.the.network.path.that.t |
e8b80 | 68 65 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 74 61 6b 65 2e 00 53 65 67 6d 65 6e 74 20 52 6f 75 | he.packet.will.take..Segment.Rou |
e8ba0 | 74 69 6e 67 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 6e 20 65 78 69 73 74 69 | ting.can.be.applied.to.an.existi |
e8bc0 | 6e 67 20 4d 50 4c 53 2d 62 61 73 65 64 20 64 61 74 61 20 70 6c 61 6e 65 20 61 6e 64 20 64 65 66 | ng.MPLS-based.data.plane.and.def |
e8be0 | 69 6e 65 73 20 61 20 63 6f 6e 74 72 6f 6c 20 70 6c 61 6e 65 20 6e 65 74 77 6f 72 6b 20 61 72 63 | ines.a.control.plane.network.arc |
e8c00 | 68 69 74 65 63 74 75 72 65 2e 20 49 6e 20 4d 50 4c 53 20 6e 65 74 77 6f 72 6b 73 2c 20 73 65 67 | hitecture..In.MPLS.networks,.seg |
e8c20 | 6d 65 6e 74 73 20 61 72 65 20 65 6e 63 6f 64 65 64 20 61 73 20 4d 50 4c 53 20 6c 61 62 65 6c 73 | ments.are.encoded.as.MPLS.labels |
e8c40 | 20 61 6e 64 20 61 72 65 20 61 64 64 65 64 20 61 74 20 74 68 65 20 69 6e 67 72 65 73 73 20 72 6f | .and.are.added.at.the.ingress.ro |
e8c60 | 75 74 65 72 2e 20 54 68 65 73 65 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 61 72 65 20 74 68 65 6e | uter..These.MPLS.labels.are.then |
e8c80 | 20 65 78 63 68 61 6e 67 65 64 20 61 6e 64 20 70 6f 70 75 6c 61 74 65 64 20 62 79 20 49 6e 74 65 | .exchanged.and.populated.by.Inte |
e8ca0 | 72 69 6f 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 73 20 28 49 47 50 73 29 20 6c 69 | rior.Gateway.Protocols.(IGPs).li |
e8cc0 | 6b 65 20 49 53 2d 49 53 20 6f 72 20 4f 53 50 46 20 77 68 69 63 68 20 61 72 65 20 72 75 6e 6e 69 | ke.IS-IS.or.OSPF.which.are.runni |
e8ce0 | 6e 67 20 6f 6e 20 6d 6f 73 74 20 49 53 50 73 2e 00 53 65 67 6d 65 6e 74 20 72 6f 75 74 69 6e 67 | ng.on.most.ISPs..Segment.routing |
e8d00 | 20 28 53 52 29 20 69 73 20 75 73 65 64 20 62 79 20 74 68 65 20 49 47 50 20 70 72 6f 74 6f 63 6f | .(SR).is.used.by.the.IGP.protoco |
e8d20 | 6c 73 20 74 6f 20 69 6e 74 65 72 63 6f 6e 6e 65 63 74 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 | ls.to.interconnect.network.devic |
e8d40 | 65 73 2c 20 62 65 6c 6f 77 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 68 6f 77 73 20 68 6f | es,.below.configuration.shows.ho |
e8d60 | 77 20 74 6f 20 65 6e 61 62 6c 65 20 53 52 20 6f 6e 20 49 53 2d 49 53 3a 00 53 65 67 6d 65 6e 74 | w.to.enable.SR.on.IS-IS:.Segment |
e8d80 | 20 72 6f 75 74 69 6e 67 20 28 53 52 29 20 69 73 20 75 73 65 64 20 62 79 20 74 68 65 20 49 47 50 | .routing.(SR).is.used.by.the.IGP |
e8da0 | 20 70 72 6f 74 6f 63 6f 6c 73 20 74 6f 20 69 6e 74 65 72 63 6f 6e 6e 65 63 74 20 6e 65 74 77 6f | .protocols.to.interconnect.netwo |
e8dc0 | 72 6b 20 64 65 76 69 63 65 73 2c 20 62 65 6c 6f 77 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | rk.devices,.below.configuration. |
e8de0 | 73 68 6f 77 73 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 20 53 52 20 6f 6e 20 4f 53 50 46 3a 00 | shows.how.to.enable.SR.on.OSPF:. |
e8e00 | 53 65 67 6d 65 6e 74 20 72 6f 75 74 69 6e 67 20 64 65 66 69 6e 65 73 20 61 20 63 6f 6e 74 72 6f | Segment.routing.defines.a.contro |
e8e20 | 6c 20 70 6c 61 6e 65 20 6e 65 74 77 6f 72 6b 20 61 72 63 68 69 74 65 63 74 75 72 65 20 61 6e 64 | l.plane.network.architecture.and |
e8e40 | 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 6e 20 65 78 69 73 74 69 6e 67 20 4d | .can.be.applied.to.an.existing.M |
e8e60 | 50 4c 53 20 62 61 73 65 64 20 64 61 74 61 70 6c 61 6e 65 2e 20 49 6e 20 74 68 65 20 4d 50 4c 53 | PLS.based.dataplane..In.the.MPLS |
e8e80 | 20 6e 65 74 77 6f 72 6b 73 2c 20 73 65 67 6d 65 6e 74 73 20 61 72 65 20 65 6e 63 6f 64 65 64 20 | .networks,.segments.are.encoded. |
e8ea0 | 61 73 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 61 6e 64 20 61 72 65 20 69 6d 70 6f 73 65 64 20 61 | as.MPLS.labels.and.are.imposed.a |
e8ec0 | 74 20 74 68 65 20 69 6e 67 72 65 73 73 20 72 6f 75 74 65 72 2e 20 4d 50 4c 53 20 6c 61 62 65 6c | t.the.ingress.router..MPLS.label |
e8ee0 | 73 20 61 72 65 20 65 78 63 68 61 6e 67 65 64 20 61 6e 64 20 70 6f 70 75 6c 61 74 65 64 20 62 79 | s.are.exchanged.and.populated.by |
e8f00 | 20 49 47 50 73 20 6c 69 6b 65 20 49 53 2d 49 53 2e 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 | .IGPs.like.IS-IS.Segment.Routing |
e8f20 | 20 61 73 20 70 65 72 20 52 46 43 38 36 36 37 20 66 6f 72 20 4d 50 4c 53 20 64 61 74 61 70 6c 61 | .as.per.RFC8667.for.MPLS.datapla |
e8f40 | 6e 65 2e 20 49 74 20 73 75 70 70 6f 72 74 73 20 49 50 76 34 2c 20 49 50 76 36 20 61 6e 64 20 45 | ne..It.supports.IPv4,.IPv6.and.E |
e8f60 | 43 4d 50 20 61 6e 64 20 68 61 73 20 62 65 65 6e 20 74 65 73 74 65 64 20 61 67 61 69 6e 73 74 20 | CMP.and.has.been.tested.against. |
e8f80 | 43 69 73 63 6f 20 26 20 4a 75 6e 69 70 65 72 20 72 6f 75 74 65 72 73 2e 68 6f 77 65 76 65 72 2c | Cisco.&.Juniper.routers.however, |
e8fa0 | 74 68 69 73 20 64 65 70 6c 6f 79 6d 65 6e 74 20 69 73 20 73 74 69 6c 6c 20 45 58 50 45 52 49 4d | this.deployment.is.still.EXPERIM |
e8fc0 | 45 4e 54 41 4c 20 66 6f 72 20 46 52 52 2e 00 53 65 6c 65 63 74 20 54 4c 53 20 76 65 72 73 69 6f | ENTAL.for.FRR..Select.TLS.versio |
e8fe0 | 6e 20 75 73 65 64 2e 00 53 65 6c 65 63 74 20 63 69 70 68 65 72 20 73 75 69 74 65 20 75 73 65 64 | n.used..Select.cipher.suite.used |
e9000 | 20 66 6f 72 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 6f 70 65 72 61 74 69 6f 6e 73 2e 20 54 | .for.cryptographic.operations..T |
e9020 | 68 69 73 20 73 65 74 74 69 6e 67 20 69 73 20 6d 61 6e 64 61 74 6f 72 79 2e 00 53 65 6c 65 63 74 | his.setting.is.mandatory..Select |
e9040 | 20 68 6f 77 20 6c 61 62 65 6c 73 20 61 72 65 20 61 6c 6c 6f 63 61 74 65 64 20 69 6e 20 74 68 65 | .how.labels.are.allocated.in.the |
e9060 | 20 67 69 76 65 6e 20 56 52 46 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 74 68 65 20 70 65 72 2d | .given.VRF..By.default,.the.per- |
e9080 | 76 72 66 20 6d 6f 64 65 20 69 73 20 73 65 6c 65 63 74 65 64 2c 20 61 6e 64 20 6f 6e 65 20 6c 61 | vrf.mode.is.selected,.and.one.la |
e90a0 | 62 65 6c 20 69 73 20 75 73 65 64 20 66 6f 72 20 61 6c 6c 20 70 72 65 66 69 78 65 73 20 66 72 6f | bel.is.used.for.all.prefixes.fro |
e90c0 | 6d 20 74 68 65 20 56 52 46 2e 20 54 68 65 20 70 65 72 2d 6e 65 78 74 68 6f 70 20 77 69 6c 6c 20 | m.the.VRF..The.per-nexthop.will. |
e90e0 | 75 73 65 20 61 20 75 6e 69 71 75 65 20 6c 61 62 65 6c 20 66 6f 72 20 61 6c 6c 20 70 72 65 66 69 | use.a.unique.label.for.all.prefi |
e9100 | 78 65 73 20 74 68 61 74 20 61 72 65 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 74 68 65 20 73 | xes.that.are.reachable.via.the.s |
e9120 | 61 6d 65 20 6e 65 78 74 68 6f 70 2e 00 53 65 6c 66 20 53 69 67 6e 65 64 20 43 41 00 53 65 6e 64 | ame.nexthop..Self.Signed.CA.Send |
e9140 | 20 61 20 50 72 6f 78 79 20 50 72 6f 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e 20 31 20 68 65 61 64 | .a.Proxy.Protocol.version.1.head |
e9160 | 65 72 20 28 74 65 78 74 20 66 6f 72 6d 61 74 29 00 53 65 6e 64 20 61 20 50 72 6f 78 79 20 50 72 | er.(text.format).Send.a.Proxy.Pr |
e9180 | 6f 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e 20 32 20 68 65 61 64 65 72 20 28 62 69 6e 61 72 79 20 | otocol.version.2.header.(binary. |
e91a0 | 66 6f 72 6d 61 74 29 00 53 65 6e 64 20 61 6c 6c 20 44 4e 53 20 71 75 65 72 69 65 73 20 74 6f 20 | format).Send.all.DNS.queries.to. |
e91c0 | 74 68 65 20 49 50 76 34 2f 49 50 76 36 20 44 4e 53 20 73 65 72 76 65 72 20 73 70 65 63 69 66 69 | the.IPv4/IPv6.DNS.server.specifi |
e91e0 | 65 64 20 75 6e 64 65 72 20 60 3c 61 64 64 72 65 73 73 3e 60 20 6f 6e 20 6f 70 74 69 6f 6e 61 6c | ed.under.`<address>`.on.optional |
e9200 | 20 70 6f 72 74 20 73 70 65 63 69 66 69 65 64 20 75 6e 64 65 72 20 60 3c 70 6f 72 74 3e 60 2e 20 | .port.specified.under.`<port>`.. |
e9220 | 54 68 65 20 70 6f 72 74 20 64 65 66 61 75 6c 74 73 20 74 6f 20 35 33 2e 20 59 6f 75 20 63 61 6e | The.port.defaults.to.53..You.can |
e9240 | 20 63 6f 6e 66 69 67 75 72 65 20 6d 75 6c 74 69 70 6c 65 20 6e 61 6d 65 73 65 72 76 65 72 73 20 | .configure.multiple.nameservers. |
e9260 | 68 65 72 65 2e 00 53 65 6e 64 20 65 6d 70 74 79 20 53 53 49 44 20 69 6e 20 62 65 61 63 6f 6e 73 | here..Send.empty.SSID.in.beacons |
e9280 | 20 61 6e 64 20 69 67 6e 6f 72 65 20 70 72 6f 62 65 20 72 65 71 75 65 73 74 20 66 72 61 6d 65 73 | .and.ignore.probe.request.frames |
e92a0 | 20 74 68 61 74 20 64 6f 20 6e 6f 74 20 73 70 65 63 69 66 79 20 66 75 6c 6c 20 53 53 49 44 2c 20 | .that.do.not.specify.full.SSID,. |
e92c0 | 69 2e 65 2e 2c 20 72 65 71 75 69 72 65 20 73 74 61 74 69 6f 6e 73 20 74 6f 20 6b 6e 6f 77 20 53 | i.e.,.require.stations.to.know.S |
e92e0 | 53 49 44 2e 00 53 65 6e 74 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 20 28 4c 41 43 29 20 69 6e | SID..Sent.to.the.client.(LAC).in |
e9300 | 20 74 68 65 20 48 6f 73 74 2d 4e 61 6d 65 20 61 74 74 72 69 62 75 74 65 00 53 65 72 69 61 6c 20 | .the.Host-Name.attribute.Serial. |
e9320 | 43 6f 6e 73 6f 6c 65 00 53 65 72 69 61 6c 20 69 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 62 65 | Console.Serial.interfaces.can.be |
e9340 | 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 64 69 72 65 63 74 6c 79 | .any.interface.which.is.directly |
e9360 | 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 43 50 55 20 6f 72 20 63 68 69 70 73 65 74 | .connected.to.the.CPU.or.chipset |
e9380 | 20 28 6d 6f 73 74 6c 79 20 6b 6e 6f 77 6e 20 61 73 20 61 20 74 74 79 53 20 69 6e 74 65 72 66 61 | .(mostly.known.as.a.ttyS.interfa |
e93a0 | 63 65 20 69 6e 20 4c 69 6e 75 78 29 20 6f 72 20 61 6e 79 20 6f 74 68 65 72 20 55 53 42 20 74 6f | ce.in.Linux).or.any.other.USB.to |
e93c0 | 20 73 65 72 69 61 6c 20 63 6f 6e 76 65 72 74 65 72 20 28 50 72 6f 6c 69 66 69 63 20 50 4c 32 33 | .serial.converter.(Prolific.PL23 |
e93e0 | 30 33 20 6f 72 20 46 54 44 49 20 46 54 32 33 32 2f 46 54 34 32 33 32 20 62 61 73 65 64 20 63 68 | 03.or.FTDI.FT232/FT4232.based.ch |
e9400 | 69 70 73 29 2e 00 53 65 72 76 65 72 00 53 65 72 76 65 72 20 43 65 72 74 69 66 69 63 61 74 65 00 | ips)..Server.Server.Certificate. |
e9420 | 53 65 72 76 65 72 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 53 65 72 76 65 72 20 53 69 64 65 | Server.Configuration.Server.Side |
e9440 | 00 53 65 72 76 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 53 65 72 76 65 72 20 6e 61 6d | .Server.configuration.Server.nam |
e9460 | 65 73 20 66 6f 72 20 76 69 72 74 75 61 6c 20 68 6f 73 74 73 20 69 74 20 63 61 6e 20 62 65 20 65 | es.for.virtual.hosts.it.can.be.e |
e9480 | 78 61 63 74 2c 20 77 69 6c 64 63 61 72 64 20 6f 72 20 72 65 67 65 78 2e 00 53 65 72 76 65 72 3a | xact,.wildcard.or.regex..Server: |
e94a0 | 00 53 65 72 76 69 63 65 00 53 65 72 76 69 63 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 | .Service.Service.configuration.i |
e94c0 | 73 20 72 65 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 62 69 6e 64 69 6e 67 20 74 6f 20 61 20 73 | s.responsible.for.binding.to.a.s |
e94e0 | 70 65 63 69 66 69 63 20 70 6f 72 74 2c 20 77 68 69 6c 65 20 74 68 65 20 62 61 63 6b 65 6e 64 20 | pecific.port,.while.the.backend. |
e9500 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 64 65 74 65 72 6d 69 6e 65 73 20 74 68 65 20 74 79 70 | configuration.determines.the.typ |
e9520 | 65 20 6f 66 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 74 6f 20 62 65 20 61 70 70 6c 69 65 | e.of.load.balancing.to.be.applie |
e9540 | 64 20 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 72 65 61 6c 20 73 65 72 76 65 72 73 | d.and.specifies.the.real.servers |
e9560 | 20 74 6f 20 62 65 20 75 74 69 6c 69 7a 65 64 2e 00 53 65 74 20 42 46 44 20 70 65 65 72 20 49 50 | .to.be.utilized..Set.BFD.peer.IP |
e9580 | 76 34 20 61 64 64 72 65 73 73 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 00 53 65 74 20 42 | v4.address.or.IPv6.address.Set.B |
e95a0 | 47 50 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 74 6f 20 65 78 61 63 74 6c 79 20 6d 61 74 | GP.community-list.to.exactly.mat |
e95c0 | 63 68 2e 00 53 65 74 20 42 47 50 20 6c 6f 63 61 6c 20 70 72 65 66 65 72 65 6e 63 65 20 61 74 74 | ch..Set.BGP.local.preference.att |
e95e0 | 72 69 62 75 74 65 2e 00 53 65 74 20 42 47 50 20 6f 72 69 67 69 6e 20 63 6f 64 65 2e 00 53 65 74 | ribute..Set.BGP.origin.code..Set |
e9600 | 20 42 47 50 20 6f 72 69 67 69 6e 61 74 6f 72 20 49 44 20 61 74 74 72 69 62 75 74 65 2e 00 53 65 | .BGP.originator.ID.attribute..Se |
e9620 | 74 20 42 47 50 20 77 65 69 67 68 74 20 61 74 74 72 69 62 75 74 65 00 53 65 74 20 44 4e 41 54 20 | t.BGP.weight.attribute.Set.DNAT. |
e9640 | 72 75 6c 65 20 32 30 20 74 6f 20 6f 6e 6c 79 20 4e 41 54 20 55 44 50 20 70 61 63 6b 65 74 73 00 | rule.20.to.only.NAT.UDP.packets. |
e9660 | 53 65 74 20 49 50 20 66 72 61 67 6d 65 6e 74 20 6d 61 74 63 68 2c 20 77 68 65 72 65 3a 00 53 65 | Set.IP.fragment.match,.where:.Se |
e9680 | 74 20 49 50 53 65 63 20 69 6e 62 6f 75 6e 64 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 73 2c | t.IPSec.inbound.match.criterias, |
e96a0 | 20 77 68 65 72 65 3a 00 53 65 74 20 4f 53 50 46 20 65 78 74 65 72 6e 61 6c 20 6d 65 74 72 69 63 | .where:.Set.OSPF.external.metric |
e96c0 | 2d 74 79 70 65 2e 00 53 65 74 20 53 4e 41 54 20 72 75 6c 65 20 32 30 20 74 6f 20 6f 6e 6c 79 20 | -type..Set.SNAT.rule.20.to.only. |
e96e0 | 4e 41 54 20 54 43 50 20 61 6e 64 20 55 44 50 20 70 61 63 6b 65 74 73 00 53 65 74 20 53 4e 41 54 | NAT.TCP.and.UDP.packets.Set.SNAT |
e9700 | 20 72 75 6c 65 20 32 30 20 74 6f 20 6f 6e 6c 79 20 4e 41 54 20 70 61 63 6b 65 74 73 20 61 72 72 | .rule.20.to.only.NAT.packets.arr |
e9720 | 69 76 69 6e 67 20 66 72 6f 6d 20 74 68 65 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 20 6e 65 74 77 | iving.from.the.192.0.2.0/24.netw |
e9740 | 6f 72 6b 00 53 65 74 20 53 4e 41 54 20 72 75 6c 65 20 33 30 20 74 6f 20 6f 6e 6c 79 20 4e 41 54 | ork.Set.SNAT.rule.30.to.only.NAT |
e9760 | 20 70 61 63 6b 65 74 73 20 61 72 72 69 76 69 6e 67 20 66 72 6f 6d 20 74 68 65 20 32 30 33 2e 30 | .packets.arriving.from.the.203.0 |
e9780 | 2e 31 31 33 2e 30 2f 32 34 20 6e 65 74 77 6f 72 6b 20 77 69 74 68 20 61 20 73 6f 75 72 63 65 20 | .113.0/24.network.with.a.source. |
e97a0 | 70 6f 72 74 20 6f 66 20 38 30 20 61 6e 64 20 34 34 33 00 53 65 74 20 53 53 4c 20 63 65 72 74 65 | port.of.80.and.443.Set.SSL.certe |
e97c0 | 66 69 63 61 74 65 20 3c 6e 61 6d 65 3e 20 66 6f 72 20 73 65 72 76 69 63 65 20 3c 6e 61 6d 65 3e | ficate.<name>.for.service.<name> |
e97e0 | 00 53 65 74 20 54 43 50 2d 4d 53 53 20 28 6d 61 78 69 6d 75 6d 20 73 65 67 6d 65 6e 74 20 73 69 | .Set.TCP-MSS.(maximum.segment.si |
e9800 | 7a 65 29 20 66 6f 72 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 00 53 65 74 20 54 54 4c 20 74 | ze).for.the.connection.Set.TTL.t |
e9820 | 6f 20 33 30 30 20 73 65 63 6f 6e 64 73 00 53 65 74 20 56 69 72 74 75 61 6c 20 54 75 6e 6e 65 6c | o.300.seconds.Set.Virtual.Tunnel |
e9840 | 20 49 6e 74 65 72 66 61 63 65 00 53 65 74 20 61 20 63 6f 6e 74 61 69 6e 65 72 20 64 65 73 63 72 | .Interface.Set.a.container.descr |
e9860 | 69 70 74 69 6f 6e 00 53 65 74 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 6e 64 2f 6f 72 20 | iption.Set.a.destination.and/or. |
e9880 | 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2e 20 41 63 63 65 70 74 65 64 20 69 6e 70 75 74 20 66 | source.address..Accepted.input.f |
e98a0 | 6f 72 20 69 70 76 34 3a 00 53 65 74 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 6e 64 2f 6f | or.ipv4:.Set.a.destination.and/o |
e98c0 | 72 20 73 6f 75 72 63 65 20 70 6f 72 74 2e 20 41 63 63 65 70 74 65 64 20 69 6e 70 75 74 3a 00 53 | r.source.port..Accepted.input:.S |
e98e0 | 65 74 20 61 20 68 75 6d 61 6e 20 72 65 61 64 61 62 6c 65 2c 20 64 65 73 63 72 69 70 74 69 76 65 | et.a.human.readable,.descriptive |
e9900 | 20 61 6c 69 61 73 20 66 6f 72 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 41 6c 69 61 | .alias.for.this.connection..Alia |
e9920 | 73 20 69 73 20 75 73 65 64 20 62 79 20 65 2e 67 2e 20 74 68 65 20 3a 6f 70 63 6d 64 3a 60 73 68 | s.is.used.by.e.g..the.:opcmd:`sh |
e9940 | 6f 77 20 69 6e 74 65 72 66 61 63 65 73 60 20 63 6f 6d 6d 61 6e 64 20 6f 72 20 53 4e 4d 50 20 62 | ow.interfaces`.command.or.SNMP.b |
e9960 | 61 73 65 64 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 74 6f 6f 6c 73 2e 00 53 65 74 20 61 20 6c 69 6d | ased.monitoring.tools..Set.a.lim |
e9980 | 69 74 20 6f 6e 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 63 6f 6e 63 | it.on.the.maximum.number.of.conc |
e99a0 | 75 72 72 65 6e 74 20 6c 6f 67 67 65 64 2d 69 6e 20 75 73 65 72 73 20 6f 6e 20 74 68 65 20 73 79 | urrent.logged-in.users.on.the.sy |
e99c0 | 73 74 65 6d 2e 00 53 65 74 20 61 20 6d 65 61 6e 69 6e 67 66 75 6c 20 64 65 73 63 72 69 70 74 69 | stem..Set.a.meaningful.descripti |
e99e0 | 6f 6e 2e 00 53 65 74 20 61 20 6e 61 6d 65 64 20 61 70 69 20 6b 65 79 2e 20 45 76 65 72 79 20 6b | on..Set.a.named.api.key..Every.k |
e9a00 | 65 79 20 68 61 73 20 74 68 65 20 73 61 6d 65 2c 20 66 75 6c 6c 20 70 65 72 6d 69 73 73 69 6f 6e | ey.has.the.same,.full.permission |
e9a20 | 73 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 00 53 65 74 20 61 20 72 75 6c 65 20 64 65 73 63 | s.on.the.system..Set.a.rule.desc |
e9a40 | 72 69 70 74 69 6f 6e 2e 00 53 65 74 20 61 20 73 70 65 63 69 66 69 63 20 63 6f 6e 6e 65 63 74 69 | ription..Set.a.specific.connecti |
e9a60 | 6f 6e 20 6d 61 72 6b 2e 00 53 65 74 20 61 20 73 70 65 63 69 66 69 63 20 70 61 63 6b 65 74 20 6d | on.mark..Set.a.specific.packet.m |
e9a80 | 61 72 6b 2e 00 53 65 74 20 61 63 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 2d 6d 61 | ark..Set.action.for.the.route-ma |
e9aa0 | 70 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 74 61 6b 65 20 6f 6e 20 | p.policy..Set.action.to.take.on. |
e9ac0 | 65 6e 74 72 69 65 73 20 6d 61 74 63 68 69 6e 67 20 74 68 69 73 20 72 75 6c 65 2e 00 53 65 74 20 | entries.matching.this.rule..Set. |
e9ae0 | 61 6e 20 41 50 49 2d 4b 45 59 20 69 73 20 74 68 65 20 6d 69 6e 69 6d 61 6c 20 63 6f 6e 66 69 67 | an.API-KEY.is.the.minimal.config |
e9b00 | 75 72 61 74 69 6f 6e 20 74 6f 20 67 65 74 20 61 20 77 6f 72 6b 69 6e 67 20 41 50 49 20 45 6e 64 | uration.to.get.a.working.API.End |
e9b20 | 70 6f 69 6e 74 2e 00 53 65 74 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 61 63 6b 65 6e | point..Set.authentication.backen |
e9b40 | 64 2e 20 54 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | d..The.configured.authentication |
e9b60 | 20 62 61 63 6b 65 6e 64 20 69 73 20 75 73 65 64 20 66 6f 72 20 61 6c 6c 20 71 75 65 72 69 65 73 | .backend.is.used.for.all.queries |
e9b80 | 2e 00 53 65 74 20 63 6f 6e 74 61 69 6e 65 72 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 6f 72 20 | ..Set.container.capabilities.or. |
e9ba0 | 70 65 72 6d 69 73 73 69 6f 6e 73 2e 00 53 65 74 20 64 65 6c 61 79 20 62 65 74 77 65 65 6e 20 67 | permissions..Set.delay.between.g |
e9bc0 | 72 61 74 75 69 74 6f 75 73 20 41 52 50 20 6d 65 73 73 61 67 65 73 20 73 65 6e 74 20 6f 6e 20 61 | ratuitous.ARP.messages.sent.on.a |
e9be0 | 6e 20 69 6e 74 65 72 66 61 63 65 2e 00 53 65 74 20 64 65 6c 61 79 20 66 6f 72 20 73 65 63 6f 6e | n.interface..Set.delay.for.secon |
e9c00 | 64 20 73 65 74 20 6f 66 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 73 20 61 66 74 65 72 20 74 | d.set.of.gratuitous.ARPs.after.t |
e9c20 | 72 61 6e 73 69 74 69 6f 6e 20 74 6f 20 4d 41 53 54 45 52 2e 00 53 65 74 20 64 65 73 63 72 69 70 | ransition.to.MASTER..Set.descrip |
e9c40 | 74 69 6f 6e 20 60 3c 74 65 78 74 3e 60 20 66 6f 72 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 73 65 | tion.`<text>`.for.dynamic.DNS.se |
e9c60 | 72 76 69 63 65 20 62 65 69 6e 67 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 53 65 74 20 64 65 73 63 | rvice.being.configured..Set.desc |
e9c80 | 72 69 70 74 69 6f 6e 20 66 6f 72 20 61 73 2d 70 61 74 68 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e | ription.for.as-path-list.policy. |
e9ca0 | 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c | .Set.description.for.community-l |
e9cc0 | 69 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 | ist.policy..Set.description.for. |
e9ce0 | 65 78 74 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 | extcommunity-list.policy..Set.de |
e9d00 | 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 | scription.for.large-community-li |
e9d20 | 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 72 | st.policy..Set.description.for.r |
e9d40 | 75 6c 65 20 69 6e 20 49 50 76 36 20 70 72 65 66 69 78 2d 6c 69 73 74 2e 00 53 65 74 20 64 65 73 | ule.in.IPv6.prefix-list..Set.des |
e9d60 | 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 72 75 6c 65 20 69 6e 20 74 68 65 20 70 72 65 66 69 78 2d | cription.for.rule.in.the.prefix- |
e9d80 | 6c 69 73 74 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 72 75 6c 65 2e 00 | list..Set.description.for.rule.. |
e9da0 | 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 49 50 76 36 20 61 63 63 | Set.description.for.the.IPv6.acc |
e9dc0 | 65 73 73 20 6c 69 73 74 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 | ess.list..Set.description.for.th |
e9de0 | 65 20 49 50 76 36 20 70 72 65 66 69 78 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 | e.IPv6.prefix-list.policy..Set.d |
e9e00 | 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 61 63 63 65 73 73 20 6c 69 73 74 2e 00 | escription.for.the.access.list.. |
e9e20 | 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 70 72 65 66 69 78 2d 6c | Set.description.for.the.prefix-l |
e9e40 | 69 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 | ist.policy..Set.description.for. |
e9e60 | 74 68 65 20 72 6f 75 74 65 2d 6d 61 70 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 | the.route-map.policy..Set.descri |
e9e80 | 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 72 75 6c 65 20 69 6e 20 74 68 65 20 72 6f 75 74 65 2d | ption.for.the.rule.in.the.route- |
e9ea0 | 6d 61 70 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 6f 66 20 74 | map.policy..Set.description.of.t |
e9ec0 | 68 65 20 70 65 65 72 20 6f 72 20 70 65 65 72 20 67 72 6f 75 70 2e 00 53 65 74 20 64 65 73 63 72 | he.peer.or.peer.group..Set.descr |
e9ee0 | 69 70 74 69 6f 6e 2e 00 53 65 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 | iption..Set.destination.address. |
e9f00 | 6f 72 20 70 72 65 66 69 78 20 74 6f 20 6d 61 74 63 68 2e 00 53 65 74 20 64 65 73 74 69 6e 61 74 | or.prefix.to.match..Set.destinat |
e9f20 | 69 6f 6e 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 6d 65 74 72 69 63 2e 20 41 64 64 | ion.routing.protocol.metric..Add |
e9f40 | 20 6f 72 20 73 75 62 74 72 61 63 74 20 6d 65 74 72 69 63 2c 20 6f 72 20 73 65 74 20 6d 65 74 72 | .or.subtract.metric,.or.set.metr |
e9f60 | 69 63 20 76 61 6c 75 65 2e 00 53 65 74 20 65 74 68 31 20 74 6f 20 62 65 20 74 68 65 20 6c 69 73 | ic.value..Set.eth1.to.be.the.lis |
e9f80 | 74 65 6e 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 74 68 65 20 44 48 43 50 76 36 20 | tening.interface.for.the.DHCPv6. |
e9fa0 | 72 65 6c 61 79 2e 00 53 65 74 20 65 78 65 63 75 74 69 6f 6e 20 74 69 6d 65 20 69 6e 20 63 6f 6d | relay..Set.execution.time.in.com |
e9fc0 | 6d 6f 6e 20 63 72 6f 6e 5f 20 74 69 6d 65 20 66 6f 72 6d 61 74 2e 20 41 20 63 72 6f 6e 20 60 3c | mon.cron_.time.format..A.cron.`< |
e9fe0 | 73 70 65 63 3e 60 20 6f 66 20 60 60 33 30 20 2a 2f 36 20 2a 20 2a 20 2a 60 60 20 77 6f 75 6c 64 | spec>`.of.``30.*/6.*.*.*``.would |
ea000 | 20 65 78 65 63 75 74 65 20 74 68 65 20 60 3c 74 61 73 6b 3e 60 20 61 74 20 6d 69 6e 75 74 65 20 | .execute.the.`<task>`.at.minute. |
ea020 | 33 30 20 70 61 73 74 20 65 76 65 72 79 20 36 74 68 20 68 6f 75 72 2e 00 53 65 74 20 65 78 74 63 | 30.past.every.6th.hour..Set.extc |
ea040 | 6f 6d 6d 75 6e 69 74 79 20 62 61 6e 64 77 69 64 74 68 00 53 65 74 20 69 66 20 61 6e 74 65 6e 6e | ommunity.bandwidth.Set.if.antenn |
ea060 | 61 20 70 61 74 74 65 72 6e 20 64 6f 65 73 20 6e 6f 74 20 63 68 61 6e 67 65 20 64 75 72 69 6e 67 | a.pattern.does.not.change.during |
ea080 | 20 74 68 65 20 6c 69 66 65 74 69 6d 65 20 6f 66 20 61 6e 20 61 73 73 6f 63 69 61 74 69 6f 6e 00 | .the.lifetime.of.an.association. |
ea0a0 | 53 65 74 20 69 6e 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6d 61 74 63 68 2e 00 | Set.inbound.interface.to.match.. |
ea0c0 | 53 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 61 20 7a 6f 6e 65 2e 20 41 20 7a 6f 6e 65 | Set.interfaces.to.a.zone..A.zone |
ea0e0 | 20 63 61 6e 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 66 61 63 65 73 2e 20 42 | .can.have.multiple.interfaces..B |
ea100 | 75 74 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 61 20 6d 65 | ut.an.interface.can.only.be.a.me |
ea120 | 6d 62 65 72 20 69 6e 20 6f 6e 65 20 7a 6f 6e 65 2e 00 53 65 74 20 6c 6f 63 61 6c 20 3a 61 62 62 | mber.in.one.zone..Set.local.:abb |
ea140 | 72 3a 60 41 53 4e 20 28 41 75 74 6f 6e 6f 6d 6f 75 73 20 53 79 73 74 65 6d 20 4e 75 6d 62 65 72 | r:`ASN.(Autonomous.System.Number |
ea160 | 29 60 20 74 68 61 74 20 74 68 69 73 20 72 6f 75 74 65 72 20 72 65 70 72 65 73 65 6e 74 73 2e 20 | )`.that.this.router.represents.. |
ea180 | 54 68 69 73 20 69 73 20 61 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 6f 70 74 69 6f 6e 21 00 53 65 | This.is.a.a.mandatory.option!.Se |
ea1a0 | 74 20 6c 6f 63 61 6c 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 6e 75 6d 62 65 72 | t.local.autonomous.system.number |
ea1c0 | 20 74 68 61 74 20 74 68 69 73 20 72 6f 75 74 65 72 20 72 65 70 72 65 73 65 6e 74 73 2e 20 54 68 | .that.this.router.represents..Th |
ea1e0 | 69 73 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 6f 70 74 69 6f 6e 21 00 53 65 74 20 6d 61 | is.is.a.mandatory.option!.Set.ma |
ea200 | 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e | tch.criteria.based.on.connection |
ea220 | 20 6d 61 72 6b 2e 00 53 65 74 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 | .mark..Set.match.criteria.based. |
ea240 | 6f 6e 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 2c 20 77 68 65 72 65 20 3c 6d 61 74 63 | on.destination.port,.where.<matc |
ea260 | 68 5f 63 72 69 74 65 72 69 61 3e 20 63 6f 75 6c 64 20 62 65 3a 00 53 65 74 20 6d 61 74 63 68 20 | h_criteria>.could.be:.Set.match. |
ea280 | 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 73 65 73 73 69 6f 6e 20 73 74 61 74 65 2e | criteria.based.on.session.state. |
ea2a0 | 00 53 65 74 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 | .Set.match.criteria.based.on.sou |
ea2c0 | 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 67 72 6f 75 70 73 2c 20 77 68 65 72 65 | rce.or.destination.groups,.where |
ea2e0 | 20 3c 74 65 78 74 3e 20 77 6f 75 6c 64 20 62 65 20 74 68 65 20 67 72 6f 75 70 20 6e 61 6d 65 2f | .<text>.would.be.the.group.name/ |
ea300 | 69 64 65 6e 74 69 66 69 65 72 2e 20 50 72 65 70 65 6e 64 20 63 68 61 72 61 63 74 65 72 20 27 21 | identifier..Prepend.character.'! |
ea320 | 27 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 | '.for.inverted.matching.criteria |
ea340 | 2e 00 53 65 74 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 73 6f | ..Set.match.criteria.based.on.so |
ea360 | 75 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 69 70 76 34 7c 69 70 76 36 20 61 64 | urce.or.destination.ipv4|ipv6.ad |
ea380 | 64 72 65 73 73 2c 20 77 68 65 72 65 20 3c 6d 61 74 63 68 5f 63 72 69 74 65 72 69 61 3e 20 63 6f | dress,.where.<match_criteria>.co |
ea3a0 | 75 6c 64 20 62 65 3a 00 53 65 74 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 | uld.be:.Set.match.criteria.based |
ea3c0 | 20 6f 6e 20 74 63 70 20 66 6c 61 67 73 2e 20 41 6c 6c 6f 77 65 64 20 76 61 6c 75 65 73 20 66 6f | .on.tcp.flags..Allowed.values.fo |
ea3e0 | 72 20 54 43 50 20 66 6c 61 67 73 3a 20 53 59 4e 20 41 43 4b 20 46 49 4e 20 52 53 54 20 55 52 47 | r.TCP.flags:.SYN.ACK.FIN.RST.URG |
ea400 | 20 50 53 48 20 41 4c 4c 2e 20 57 68 65 6e 20 73 70 65 63 69 66 79 69 6e 67 20 6d 6f 72 65 20 74 | .PSH.ALL..When.specifying.more.t |
ea420 | 68 61 6e 20 6f 6e 65 20 66 6c 61 67 2c 20 66 6c 61 67 73 20 73 68 6f 75 6c 64 20 62 65 20 63 6f | han.one.flag,.flags.should.be.co |
ea440 | 6d 6d 61 2d 73 65 70 61 72 61 74 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 3a 20 76 61 6c | mma-separated..For.example.:.val |
ea460 | 75 65 20 6f 66 20 27 53 59 4e 2c 21 41 43 4b 2c 21 46 49 4e 2c 21 52 53 54 27 20 77 69 6c 6c 20 | ue.of.'SYN,!ACK,!FIN,!RST'.will. |
ea480 | 6f 6e 6c 79 20 6d 61 74 63 68 20 70 61 63 6b 65 74 73 20 77 69 74 68 20 74 68 65 20 53 59 4e 20 | only.match.packets.with.the.SYN. |
ea4a0 | 66 6c 61 67 20 73 65 74 2c 20 61 6e 64 20 74 68 65 20 41 43 4b 2c 20 46 49 4e 20 61 6e 64 20 52 | flag.set,.and.the.ACK,.FIN.and.R |
ea4c0 | 53 54 20 66 6c 61 67 73 20 75 6e 73 65 74 2e 00 53 65 74 20 6d 61 78 69 6d 75 6d 20 60 3c 73 69 | ST.flags.unset..Set.maximum.`<si |
ea4e0 | 7a 65 3e 60 20 6f 66 20 44 48 43 50 20 70 61 63 6b 65 74 73 20 69 6e 63 6c 75 64 69 6e 67 20 72 | ze>`.of.DHCP.packets.including.r |
ea500 | 65 6c 61 79 20 61 67 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 49 66 20 61 20 44 48 43 | elay.agent.information..If.a.DHC |
ea520 | 50 20 70 61 63 6b 65 74 20 73 69 7a 65 20 73 75 72 70 61 73 73 65 73 20 74 68 69 73 20 76 61 6c | P.packet.size.surpasses.this.val |
ea540 | 75 65 20 69 74 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 64 65 64 20 77 69 74 68 6f 75 74 20 | ue.it.will.be.forwarded.without. |
ea560 | 61 70 70 65 6e 64 69 6e 67 20 72 65 6c 61 79 20 61 67 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f | appending.relay.agent.informatio |
ea580 | 6e 2e 20 52 61 6e 67 65 20 36 34 2e 2e 2e 31 34 30 30 2c 20 64 65 66 61 75 6c 74 20 35 37 36 2e | n..Range.64...1400,.default.576. |
ea5a0 | 00 53 65 74 20 6d 61 78 69 6d 75 6d 20 61 76 65 72 61 67 65 20 6d 61 74 63 68 69 6e 67 20 72 61 | .Set.maximum.average.matching.ra |
ea5c0 | 74 65 2e 20 46 6f 72 6d 61 74 20 66 6f 72 20 72 61 74 65 3a 20 69 6e 74 65 67 65 72 2f 74 69 6d | te..Format.for.rate:.integer/tim |
ea5e0 | 65 5f 75 6e 69 74 2c 20 77 68 65 72 65 20 74 69 6d 65 5f 75 6e 69 74 20 63 6f 75 6c 64 20 62 65 | e_unit,.where.time_unit.could.be |
ea600 | 20 61 6e 79 20 6f 6e 65 20 6f 66 20 73 65 63 6f 6e 64 2c 20 6d 69 6e 75 74 65 2c 20 68 6f 75 72 | .any.one.of.second,.minute,.hour |
ea620 | 20 6f 72 20 64 61 79 2e 46 6f 72 20 65 78 61 6d 70 6c 65 20 31 2f 73 65 63 6f 6e 64 20 69 6d 70 | .or.day.For.example.1/second.imp |
ea640 | 6c 69 65 73 20 72 75 6c 65 20 74 6f 20 62 65 20 6d 61 74 63 68 65 64 20 61 74 20 61 6e 20 61 76 | lies.rule.to.be.matched.at.an.av |
ea660 | 65 72 61 67 65 20 6f 66 20 6f 6e 63 65 20 70 65 72 20 73 65 63 6f 6e 64 2e 00 53 65 74 20 6d 61 | erage.of.once.per.second..Set.ma |
ea680 | 78 69 6d 75 6d 20 68 6f 70 20 63 6f 75 6e 74 20 62 65 66 6f 72 65 20 70 61 63 6b 65 74 73 20 61 | ximum.hop.count.before.packets.a |
ea6a0 | 72 65 20 64 69 73 63 61 72 64 65 64 2c 20 64 65 66 61 75 6c 74 3a 20 31 30 00 53 65 74 20 6d 61 | re.discarded,.default:.10.Set.ma |
ea6c0 | 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 74 6f 20 61 6c 6f 77 20 | ximum.number.of.packets.to.alow. |
ea6e0 | 69 6e 20 65 78 63 65 73 73 20 6f 66 20 72 61 74 65 2e 00 53 65 74 20 6d 69 6e 69 6d 75 6d 20 74 | in.excess.of.rate..Set.minimum.t |
ea700 | 69 6d 65 20 69 6e 74 65 72 76 61 6c 20 66 6f 72 20 72 65 66 72 65 73 68 69 6e 67 20 67 72 61 74 | ime.interval.for.refreshing.grat |
ea720 | 75 69 74 6f 75 73 20 41 52 50 73 20 77 68 69 6c 65 20 4d 41 53 54 45 52 2e 00 53 65 74 20 6d 6f | uitous.ARPs.while.MASTER..Set.mo |
ea740 | 64 65 20 66 6f 72 20 49 50 73 65 63 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 65 74 77 | de.for.IPsec.authentication.betw |
ea760 | 65 65 6e 20 56 79 4f 53 20 61 6e 64 20 4c 32 54 50 20 63 6c 69 65 6e 74 73 2e 00 53 65 74 20 6e | een.VyOS.and.L2TP.clients..Set.n |
ea780 | 75 6d 62 65 72 20 6f 66 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 20 6d 65 73 73 61 67 65 73 | umber.of.gratuitous.ARP.messages |
ea7a0 | 20 74 6f 20 73 65 6e 64 20 61 74 20 61 20 74 69 6d 65 20 61 66 74 65 72 20 74 72 61 6e 73 69 74 | .to.send.at.a.time.after.transit |
ea7c0 | 69 6f 6e 20 74 6f 20 4d 41 53 54 45 52 2e 00 53 65 74 20 6e 75 6d 62 65 72 20 6f 66 20 67 72 61 | ion.to.MASTER..Set.number.of.gra |
ea7e0 | 74 75 69 74 6f 75 73 20 41 52 50 20 6d 65 73 73 61 67 65 73 20 74 6f 20 73 65 6e 64 20 61 74 20 | tuitous.ARP.messages.to.send.at. |
ea800 | 61 20 74 69 6d 65 20 77 68 69 6c 65 20 4d 41 53 54 45 52 2e 00 53 65 74 20 6e 75 6d 62 65 72 20 | a.time.while.MASTER..Set.number. |
ea820 | 6f 66 20 73 65 63 6f 6e 64 73 20 66 6f 72 20 48 65 6c 6c 6f 20 49 6e 74 65 72 76 61 6c 20 74 69 | of.seconds.for.Hello.Interval.ti |
ea840 | 6d 65 72 20 76 61 6c 75 65 2e 20 53 65 74 74 69 6e 67 20 74 68 69 73 20 76 61 6c 75 65 2c 20 48 | mer.value..Setting.this.value,.H |
ea860 | 65 6c 6c 6f 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 65 76 65 72 79 20 74 | ello.packet.will.be.sent.every.t |
ea880 | 69 6d 65 72 20 76 61 6c 75 65 20 73 65 63 6f 6e 64 73 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 | imer.value.seconds.on.the.specif |
ea8a0 | 69 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 76 61 6c 75 65 20 6d 75 73 74 20 62 | ied.interface..This.value.must.b |
ea8c0 | 65 20 74 68 65 20 73 61 6d 65 20 66 6f 72 20 61 6c 6c 20 72 6f 75 74 65 72 73 20 61 74 74 61 63 | e.the.same.for.all.routers.attac |
ea8e0 | 68 65 64 20 74 6f 20 61 20 63 6f 6d 6d 6f 6e 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 20 64 65 66 | hed.to.a.common.network..The.def |
ea900 | 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 30 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e | ault.value.is.10.seconds..The.in |
ea920 | 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 36 35 35 33 35 2e 00 53 65 74 20 | terval.range.is.1.to.65535..Set. |
ea940 | 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 66 6f 72 20 72 6f 75 74 65 72 20 44 65 61 | number.of.seconds.for.router.Dea |
ea960 | 64 20 49 6e 74 65 72 76 61 6c 20 74 69 6d 65 72 20 76 61 6c 75 65 20 75 73 65 64 20 66 6f 72 20 | d.Interval.timer.value.used.for. |
ea980 | 57 61 69 74 20 54 69 6d 65 72 20 61 6e 64 20 49 6e 61 63 74 69 76 69 74 79 20 54 69 6d 65 72 2e | Wait.Timer.and.Inactivity.Timer. |
ea9a0 | 20 54 68 69 73 20 76 61 6c 75 65 20 6d 75 73 74 20 62 65 20 74 68 65 20 73 61 6d 65 20 66 6f 72 | .This.value.must.be.the.same.for |
ea9c0 | 20 61 6c 6c 20 72 6f 75 74 65 72 73 20 61 74 74 61 63 68 65 64 20 74 6f 20 61 20 63 6f 6d 6d 6f | .all.routers.attached.to.a.commo |
ea9e0 | 6e 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 | n.network..The.default.value.is. |
eaa00 | 34 30 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 | 40.seconds..The.interval.range.i |
eaa20 | 73 20 31 20 74 6f 20 36 35 35 33 35 2e 00 53 65 74 20 70 61 63 6b 65 74 20 6d 6f 64 69 66 69 63 | s.1.to.65535..Set.packet.modific |
eaa40 | 61 74 69 6f 6e 73 3a 20 45 78 70 6c 69 63 69 74 6c 79 20 73 65 74 20 54 43 50 20 4d 61 78 69 6d | ations:.Explicitly.set.TCP.Maxim |
eaa60 | 75 6d 20 73 65 67 6d 65 6e 74 20 73 69 7a 65 20 76 61 6c 75 65 2e 00 53 65 74 20 70 61 63 6b 65 | um.segment.size.value..Set.packe |
eaa80 | 74 20 6d 6f 64 69 66 69 63 61 74 69 6f 6e 73 3a 20 50 61 63 6b 65 74 20 44 69 66 66 65 72 65 6e | t.modifications:.Packet.Differen |
eaaa0 | 74 69 61 74 65 64 20 53 65 72 76 69 63 65 73 20 43 6f 64 65 70 6f 69 6e 74 20 28 44 53 43 50 29 | tiated.Services.Codepoint.(DSCP) |
eaac0 | 00 53 65 74 20 70 61 72 61 6d 65 74 65 72 73 20 66 6f 72 20 6d 61 74 63 68 69 6e 67 20 72 65 63 | .Set.parameters.for.matching.rec |
eaae0 | 65 6e 74 6c 79 20 73 65 65 6e 20 73 6f 75 72 63 65 73 2e 20 54 68 69 73 20 6d 61 74 63 68 20 63 | ently.seen.sources..This.match.c |
eab00 | 6f 75 6c 64 20 62 65 20 75 73 65 64 20 62 79 20 73 65 65 74 69 6e 67 20 63 6f 75 6e 74 20 28 73 | ould.be.used.by.seeting.count.(s |
eab20 | 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 73 65 65 6e 20 6d 6f 72 65 20 74 68 61 6e 20 3c 31 2d | ource.address.seen.more.than.<1- |
eab40 | 32 35 35 3e 20 74 69 6d 65 73 29 20 61 6e 64 2f 6f 72 20 74 69 6d 65 20 28 73 6f 75 72 63 65 20 | 255>.times).and/or.time.(source. |
eab60 | 61 64 64 72 65 73 73 20 73 65 65 6e 20 69 6e 20 74 68 65 20 6c 61 73 74 20 3c 30 2d 34 32 39 34 | address.seen.in.the.last.<0-4294 |
eab80 | 39 36 37 32 39 35 3e 20 73 65 63 6f 6e 64 73 29 2e 00 53 65 74 20 70 72 65 64 65 66 69 6e 65 64 | 967295>.seconds)..Set.predefined |
eaba0 | 20 73 68 61 72 65 64 20 73 65 63 72 65 74 20 70 68 72 61 73 65 2e 00 53 65 74 20 70 72 65 66 69 | .shared.secret.phrase..Set.prefi |
eabc0 | 78 65 73 20 74 6f 20 74 61 62 6c 65 2e 00 53 65 74 20 70 72 6f 78 79 20 66 6f 72 20 61 6c 6c 20 | xes.to.table..Set.proxy.for.all. |
eabe0 | 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 69 6e 69 74 69 61 74 65 64 20 62 79 20 56 79 4f 53 2c 20 69 | connections.initiated.by.VyOS,.i |
eac00 | 6e 63 6c 75 64 69 6e 67 20 48 54 54 50 2c 20 48 54 54 50 53 2c 20 61 6e 64 20 46 54 50 20 28 61 | ncluding.HTTP,.HTTPS,.and.FTP.(a |
eac20 | 6e 6f 6e 79 6d 6f 75 73 20 66 74 70 29 2e 00 53 65 74 20 72 6f 75 74 65 20 74 61 72 67 65 74 20 | nonymous.ftp)..Set.route.target. |
eac40 | 76 61 6c 75 65 20 69 6e 20 66 6f 72 6d 61 74 20 60 60 3c 30 2d 36 35 35 33 35 3a 30 2d 34 32 39 | value.in.format.``<0-65535:0-429 |
eac60 | 34 39 36 37 32 39 35 3e 60 60 20 6f 72 20 60 60 3c 49 50 3a 30 2d 36 35 35 33 35 3e 60 60 2e 00 | 4967295>``.or.``<IP:0-65535>``.. |
eac80 | 53 65 74 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 74 6f 20 66 6f 72 77 61 72 64 20 70 61 63 | Set.routing.table.to.forward.pac |
eaca0 | 6b 65 74 20 74 6f 2e 00 53 65 74 20 72 75 6c 65 20 61 63 74 69 6f 6e 20 74 6f 20 64 72 6f 70 2e | ket.to..Set.rule.action.to.drop. |
eacc0 | 00 53 65 74 20 73 65 72 76 69 63 65 20 74 6f 20 62 69 6e 64 20 6f 6e 20 49 50 20 61 64 64 72 65 | .Set.service.to.bind.on.IP.addre |
eace0 | 73 73 2c 20 62 79 20 64 65 66 61 75 6c 74 20 6c 69 73 74 65 6e 20 6f 6e 20 61 6e 79 20 49 50 76 | ss,.by.default.listen.on.any.IPv |
ead00 | 34 20 61 6e 64 20 49 50 76 36 00 53 65 74 20 73 69 74 65 20 6f 66 20 6f 72 69 67 69 6e 20 76 61 | 4.and.IPv6.Set.site.of.origin.va |
ead20 | 6c 75 65 20 69 6e 20 66 6f 72 6d 61 74 20 60 60 3c 30 2d 36 35 35 33 35 3a 30 2d 34 32 39 34 39 | lue.in.format.``<0-65535:0-42949 |
ead40 | 36 37 32 39 35 3e 60 60 20 6f 72 20 60 60 3c 49 50 3a 30 2d 36 35 35 33 35 3e 60 60 2e 00 53 65 | 67295>``.or.``<IP:0-65535>``..Se |
ead60 | 74 20 73 6f 6d 65 20 61 74 74 72 69 62 75 74 65 73 20 28 6c 69 6b 65 20 41 53 20 50 41 54 48 20 | t.some.attributes.(like.AS.PATH. |
ead80 | 6f 72 20 43 6f 6d 6d 75 6e 69 74 79 20 76 61 6c 75 65 29 20 74 6f 20 61 64 76 65 72 74 69 73 65 | or.Community.value).to.advertise |
eada0 | 64 20 72 6f 75 74 65 73 20 74 6f 20 6e 65 69 67 68 62 6f 72 73 2e 00 53 65 74 20 73 6f 6d 65 20 | d.routes.to.neighbors..Set.some. |
eadc0 | 6d 65 74 72 69 63 20 74 6f 20 72 6f 75 74 65 73 20 6c 65 61 72 6e 65 64 20 66 72 6f 6d 20 61 20 | metric.to.routes.learned.from.a. |
eade0 | 70 61 72 74 69 63 75 6c 61 72 20 6e 65 69 67 68 62 6f 72 2e 00 53 65 74 20 73 6f 75 72 63 65 20 | particular.neighbor..Set.source. |
eae00 | 49 50 2f 49 50 76 36 20 61 64 64 72 65 73 73 20 66 6f 72 20 72 6f 75 74 65 2e 00 53 65 74 20 73 | IP/IPv6.address.for.route..Set.s |
eae20 | 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 72 20 70 72 65 66 69 78 20 74 6f 20 6d 61 74 63 68 | ource.address.or.prefix.to.match |
eae40 | 2e 00 53 65 74 20 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 20 74 6f 20 79 6f 75 72 20 6c 6f 63 | ..Set.source-address.to.your.loc |
eae60 | 61 6c 20 49 50 20 28 4c 41 4e 29 2e 00 53 65 74 20 74 61 67 20 76 61 6c 75 65 20 66 6f 72 20 72 | al.IP.(LAN)..Set.tag.value.for.r |
eae80 | 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2e 00 53 65 74 20 74 68 65 20 22 72 65 63 75 72 73 | outing.protocol..Set.the."recurs |
eaea0 | 69 6f 6e 20 64 65 73 69 72 65 64 22 20 62 69 74 20 69 6e 20 72 65 71 75 65 73 74 73 20 74 6f 20 | ion.desired".bit.in.requests.to. |
eaec0 | 74 68 65 20 75 70 73 74 72 65 61 6d 20 6e 61 6d 65 73 65 72 76 65 72 2e 00 53 65 74 20 74 68 65 | the.upstream.nameserver..Set.the |
eaee0 | 20 3a 61 62 62 72 3a 60 44 52 20 28 44 65 73 69 67 6e 61 74 65 64 20 52 6f 75 74 65 72 29 60 20 | .:abbr:`DR.(Designated.Router)`. |
eaf00 | 50 72 69 6f 72 69 74 79 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 | Priority.for.the.interface..This |
eaf20 | 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 66 75 6c 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 20 | .command.is.useful.to.allow.the. |
eaf40 | 75 73 65 72 20 74 6f 20 69 6e 66 6c 75 65 6e 63 65 20 77 68 61 74 20 6e 6f 64 65 20 62 65 63 6f | user.to.influence.what.node.beco |
eaf60 | 6d 65 73 20 74 68 65 20 44 52 20 66 6f 72 20 61 20 4c 41 4e 20 73 65 67 6d 65 6e 74 2e 00 53 65 | mes.the.DR.for.a.LAN.segment..Se |
eaf80 | 74 20 74 68 65 20 3a 61 62 62 72 3a 60 4d 52 55 20 28 4d 61 78 69 6d 75 6d 20 52 65 63 65 69 76 | t.the.:abbr:`MRU.(Maximum.Receiv |
eafa0 | 65 20 55 6e 69 74 29 60 20 74 6f 20 60 6d 72 75 60 2e 20 50 50 50 64 20 77 69 6c 6c 20 61 73 6b | e.Unit)`.to.`mru`..PPPd.will.ask |
eafc0 | 20 74 68 65 20 70 65 65 72 20 74 6f 20 73 65 6e 64 20 70 61 63 6b 65 74 73 20 6f 66 20 6e 6f 20 | .the.peer.to.send.packets.of.no. |
eafe0 | 6d 6f 72 65 20 74 68 61 6e 20 60 6d 72 75 60 20 62 79 74 65 73 2e 20 54 68 65 20 76 61 6c 75 65 | more.than.`mru`.bytes..The.value |
eb000 | 20 6f 66 20 60 6d 72 75 60 20 6d 75 73 74 20 62 65 20 62 65 74 77 65 65 6e 20 31 32 38 20 61 6e | .of.`mru`.must.be.between.128.an |
eb020 | 64 20 31 36 33 38 34 2e 00 53 65 74 20 74 68 65 20 42 47 50 20 6e 65 78 74 68 6f 70 20 61 64 64 | d.16384..Set.the.BGP.nexthop.add |
eb040 | 72 65 73 73 20 74 6f 20 74 68 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 70 65 65 72 2e | ress.to.the.address.of.the.peer. |
eb060 | 20 46 6f 72 20 61 6e 20 69 6e 63 6f 6d 69 6e 67 20 72 6f 75 74 65 2d 6d 61 70 20 74 68 69 73 20 | .For.an.incoming.route-map.this. |
eb080 | 6d 65 61 6e 73 20 74 68 65 20 69 70 20 61 64 64 72 65 73 73 20 6f 66 20 6f 75 72 20 70 65 65 72 | means.the.ip.address.of.our.peer |
eb0a0 | 20 69 73 20 75 73 65 64 2e 20 46 6f 72 20 61 6e 20 6f 75 74 67 6f 69 6e 67 20 72 6f 75 74 65 2d | .is.used..For.an.outgoing.route- |
eb0c0 | 6d 61 70 20 74 68 69 73 20 6d 65 61 6e 73 20 74 68 65 20 69 70 20 61 64 64 72 65 73 73 20 6f 66 | map.this.means.the.ip.address.of |
eb0e0 | 20 6f 75 72 20 73 65 6c 66 20 69 73 20 75 73 65 64 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 74 | .our.self.is.used.to.establish.t |
eb100 | 68 65 20 70 65 65 72 69 6e 67 20 77 69 74 68 20 6f 75 72 20 6e 65 69 67 68 62 6f 72 2e 00 53 65 | he.peering.with.our.neighbor..Se |
eb120 | 74 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 69 6e | t.the.IP.address.of.the.local.in |
eb140 | 74 65 72 66 61 63 65 20 74 6f 20 62 65 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 74 75 6e 6e 65 | terface.to.be.used.for.the.tunne |
eb160 | 6c 2e 00 53 65 74 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 65 6d | l..Set.the.IP.address.of.the.rem |
eb180 | 6f 74 65 20 70 65 65 72 2e 20 49 74 20 6d 61 79 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 73 | ote.peer..It.may.be.specified.as |
eb1a0 | 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 72 20 61 6e 20 49 50 76 36 20 61 64 64 72 | .an.IPv4.address.or.an.IPv6.addr |
eb1c0 | 65 73 73 2e 00 53 65 74 20 74 68 65 20 49 50 76 34 20 73 6f 75 72 63 65 20 76 61 6c 69 64 61 74 | ess..Set.the.IPv4.source.validat |
eb1e0 | 69 6f 6e 20 6d 6f 64 65 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 | ion.mode..The.following.system.p |
eb200 | 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 53 65 74 20 74 68 | arameter.will.be.altered:.Set.th |
eb220 | 65 20 4d 4c 44 20 6c 61 73 74 20 6d 65 6d 62 65 72 20 71 75 65 72 79 20 63 6f 75 6e 74 2e 20 54 | e.MLD.last.member.query.count..T |
eb240 | 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 32 2e 00 53 65 74 20 74 68 65 20 4d | he.default.value.is.2..Set.the.M |
eb260 | 4c 44 20 6c 61 73 74 20 6d 65 6d 62 65 72 20 71 75 65 72 79 20 69 6e 74 65 72 76 61 6c 20 69 6e | LD.last.member.query.interval.in |
eb280 | 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 28 31 30 30 2d 36 35 35 33 35 30 30 29 2e 20 54 68 65 | .milliseconds.(100-6553500)..The |
eb2a0 | 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 30 30 30 20 6d 69 6c 6c 69 73 65 63 6f | .default.value.is.1000.milliseco |
eb2c0 | 6e 64 73 2e 00 53 65 74 20 74 68 65 20 4d 4c 44 20 71 75 65 72 79 20 72 65 73 70 6f 6e 73 65 20 | nds..Set.the.MLD.query.response. |
eb2e0 | 74 69 6d 65 6f 75 74 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 28 31 30 30 2d 36 35 35 | timeout.in.milliseconds.(100-655 |
eb300 | 33 35 30 30 29 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 30 30 30 | 3500)..The.default.value.is.1000 |
eb320 | 30 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2e 00 53 65 74 20 74 68 65 20 4d 4c 44 20 76 65 72 73 | 0.milliseconds..Set.the.MLD.vers |
eb340 | 69 6f 6e 20 75 73 65 64 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 | ion.used.on.this.interface..The. |
eb360 | 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 32 2e 00 53 65 74 20 74 68 65 20 4d 61 78 69 | default.value.is.2..Set.the.Maxi |
eb380 | 6d 75 6d 20 53 74 61 63 6b 20 44 65 70 74 68 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 65 | mum.Stack.Depth.supported.by.the |
eb3a0 | 20 72 6f 75 74 65 72 2e 20 54 68 65 20 76 61 6c 75 65 20 64 65 70 65 6e 64 20 6f 66 20 74 68 65 | .router..The.value.depend.of.the |
eb3c0 | 20 4d 50 4c 53 20 64 61 74 61 70 6c 61 6e 65 2e 00 53 65 74 20 74 68 65 20 50 49 4d 20 68 65 6c | .MPLS.dataplane..Set.the.PIM.hel |
eb3e0 | 6c 6f 20 61 6e 64 20 68 6f 6c 64 20 69 6e 74 65 72 76 61 6c 20 66 6f 72 20 61 20 69 6e 74 65 72 | lo.and.hold.interval.for.a.inter |
eb400 | 66 61 63 65 2e 00 53 65 74 20 74 68 65 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 47 6c | face..Set.the.Segment.Routing.Gl |
eb420 | 6f 62 61 6c 20 42 6c 6f 63 6b 20 69 2e 65 2e 20 74 68 65 20 6c 61 62 65 6c 20 72 61 6e 67 65 20 | obal.Block.i.e..the.label.range. |
eb440 | 75 73 65 64 20 62 79 20 4d 50 4c 53 20 74 6f 20 73 74 6f 72 65 20 6c 61 62 65 6c 20 69 6e 20 74 | used.by.MPLS.to.store.label.in.t |
eb460 | 68 65 20 4d 50 4c 53 20 46 49 42 20 66 6f 72 20 50 72 65 66 69 78 20 53 49 44 2e 20 4e 6f 74 65 | he.MPLS.FIB.for.Prefix.SID..Note |
eb480 | 20 74 68 61 74 20 74 68 65 20 62 6c 6f 63 6b 20 73 69 7a 65 20 6d 61 79 20 6e 6f 74 20 65 78 63 | .that.the.block.size.may.not.exc |
eb4a0 | 65 65 64 20 36 35 35 33 35 2e 00 53 65 74 20 74 68 65 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 | eed.65535..Set.the.Segment.Routi |
eb4c0 | 6e 67 20 47 6c 6f 62 61 6c 20 42 6c 6f 63 6b 20 69 2e 65 2e 20 74 68 65 20 6c 6f 77 20 6c 61 62 | ng.Global.Block.i.e..the.low.lab |
eb4e0 | 65 6c 20 72 61 6e 67 65 20 75 73 65 64 20 62 79 20 4d 50 4c 53 20 74 6f 20 73 74 6f 72 65 20 6c | el.range.used.by.MPLS.to.store.l |
eb500 | 61 62 65 6c 20 69 6e 20 74 68 65 20 4d 50 4c 53 20 46 49 42 20 66 6f 72 20 50 72 65 66 69 78 20 | abel.in.the.MPLS.FIB.for.Prefix. |
eb520 | 53 49 44 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 20 62 6c 6f 63 6b 20 73 69 7a 65 20 6d 61 | SID..Note.that.the.block.size.ma |
eb540 | 79 20 6e 6f 74 20 65 78 63 65 65 64 20 36 35 35 33 35 2e 00 53 65 74 20 74 68 65 20 53 65 67 6d | y.not.exceed.65535..Set.the.Segm |
eb560 | 65 6e 74 20 52 6f 75 74 69 6e 67 20 4c 6f 63 61 6c 20 42 6c 6f 63 6b 20 69 2e 65 2e 20 74 68 65 | ent.Routing.Local.Block.i.e..the |
eb580 | 20 6c 61 62 65 6c 20 72 61 6e 67 65 20 75 73 65 64 20 62 79 20 4d 50 4c 53 20 74 6f 20 73 74 6f | .label.range.used.by.MPLS.to.sto |
eb5a0 | 72 65 20 6c 61 62 65 6c 20 69 6e 20 74 68 65 20 4d 50 4c 53 20 46 49 42 20 66 6f 72 20 50 72 65 | re.label.in.the.MPLS.FIB.for.Pre |
eb5c0 | 66 69 78 20 53 49 44 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 20 62 6c 6f 63 6b 20 73 69 7a | fix.SID..Note.that.the.block.siz |
eb5e0 | 65 20 6d 61 79 20 6e 6f 74 20 65 78 63 65 65 64 20 36 35 35 33 35 2e 53 65 67 6d 65 6e 74 20 52 | e.may.not.exceed.65535.Segment.R |
eb600 | 6f 75 74 69 6e 67 20 4c 6f 63 61 6c 20 42 6c 6f 63 6b 2c 20 54 68 65 20 6e 65 67 61 74 69 76 65 | outing.Local.Block,.The.negative |
eb620 | 20 63 6f 6d 6d 61 6e 64 20 61 6c 77 61 79 73 20 75 6e 73 65 74 73 20 62 6f 74 68 2e 00 53 65 74 | .command.always.unsets.both..Set |
eb640 | 20 74 68 65 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 4c 6f 63 61 6c 20 42 6c 6f 63 6b | .the.Segment.Routing.Local.Block |
eb660 | 20 69 2e 65 2e 20 74 68 65 20 6c 6f 77 20 6c 61 62 65 6c 20 72 61 6e 67 65 20 75 73 65 64 20 62 | .i.e..the.low.label.range.used.b |
eb680 | 79 20 4d 50 4c 53 20 74 6f 20 73 74 6f 72 65 20 6c 61 62 65 6c 20 69 6e 20 74 68 65 20 4d 50 4c | y.MPLS.to.store.label.in.the.MPL |
eb6a0 | 53 20 46 49 42 20 66 6f 72 20 50 72 65 66 69 78 20 53 49 44 2e 20 4e 6f 74 65 20 74 68 61 74 20 | S.FIB.for.Prefix.SID..Note.that. |
eb6c0 | 74 68 65 20 62 6c 6f 63 6b 20 73 69 7a 65 20 6d 61 79 20 6e 6f 74 20 65 78 63 65 65 64 20 36 35 | the.block.size.may.not.exceed.65 |
eb6e0 | 35 33 35 2e 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 4c 6f 63 61 6c 20 42 6c 6f 63 6b 2c | 535.Segment.Routing.Local.Block, |
eb700 | 20 54 68 65 20 6e 65 67 61 74 69 76 65 20 63 6f 6d 6d 61 6e 64 20 61 6c 77 61 79 73 20 75 6e 73 | .The.negative.command.always.uns |
eb720 | 65 74 73 20 62 6f 74 68 2e 00 53 65 74 20 74 68 65 20 55 73 65 72 20 49 44 20 6f 72 20 47 72 6f | ets.both..Set.the.User.ID.or.Gro |
eb740 | 75 70 20 49 44 20 6f 66 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 00 53 65 74 20 74 68 65 20 60 | up.ID.of.the.container.Set.the.` |
eb760 | 60 73 73 68 64 60 60 20 6c 6f 67 20 6c 65 76 65 6c 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 | `sshd``.log.level..The.default.i |
eb780 | 73 20 60 60 69 6e 66 6f 60 60 2e 00 53 65 74 20 74 68 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 | s.``info``..Set.the.address.of.t |
eb7a0 | 68 65 20 62 61 63 6b 65 6e 64 20 70 6f 72 74 00 53 65 74 20 74 68 65 20 61 64 64 72 65 73 73 20 | he.backend.port.Set.the.address. |
eb7c0 | 6f 66 20 74 68 65 20 62 61 63 6b 65 6e 64 20 73 65 72 76 65 72 20 74 6f 20 77 68 69 63 68 20 74 | of.the.backend.server.to.which.t |
eb7e0 | 68 65 20 69 6e 63 6f 6d 69 6e 67 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 | he.incoming.traffic.will.be.forw |
eb800 | 61 72 64 65 64 00 53 65 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 52 52 50 20 76 65 72 73 69 | arded.Set.the.default.VRRP.versi |
eb820 | 6f 6e 20 74 6f 20 75 73 65 2e 20 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 32 2c 20 62 | on.to.use..This.defaults.to.2,.b |
eb840 | 75 74 20 49 50 76 36 20 69 6e 73 74 61 6e 63 65 73 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 75 73 | ut.IPv6.instances.will.always.us |
eb860 | 65 20 76 65 72 73 69 6f 6e 20 33 2e 00 53 65 74 20 74 68 65 20 64 65 76 69 63 65 27 73 20 74 72 | e.version.3..Set.the.device's.tr |
eb880 | 61 6e 73 6d 69 74 20 28 54 58 29 20 6b 65 79 2e 20 54 68 69 73 20 6b 65 79 20 6d 75 73 74 20 62 | ansmit.(TX).key..This.key.must.b |
eb8a0 | 65 20 61 20 68 65 78 20 73 74 72 69 6e 67 20 74 68 61 74 20 69 73 20 31 36 2d 62 79 74 65 73 20 | e.a.hex.string.that.is.16-bytes. |
eb8c0 | 28 47 43 4d 2d 41 45 53 2d 31 32 38 29 20 6f 72 20 33 32 2d 62 79 74 65 73 20 28 47 43 4d 2d 41 | (GCM-AES-128).or.32-bytes.(GCM-A |
eb8e0 | 45 53 2d 32 35 36 29 2e 00 53 65 74 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 66 6f 72 20 74 68 | ES-256)..Set.the.distance.for.th |
eb900 | 65 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 73 65 6e 74 20 62 79 20 74 68 65 20 44 48 | e.default.gateway.sent.by.the.DH |
eb920 | 43 50 20 73 65 72 76 65 72 2e 00 53 65 74 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 66 6f 72 20 | CP.server..Set.the.distance.for. |
eb940 | 74 68 65 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 73 65 6e 74 20 62 79 20 74 68 65 20 | the.default.gateway.sent.by.the. |
eb960 | 50 50 50 6f 45 20 73 65 72 76 65 72 2e 00 53 65 74 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 66 | PPPoE.server..Set.the.distance.f |
eb980 | 6f 72 20 74 68 65 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 73 65 6e 74 20 62 79 20 74 | or.the.default.gateway.sent.by.t |
eb9a0 | 68 65 20 53 53 54 50 20 73 65 72 76 65 72 2e 00 53 65 74 20 74 68 65 20 65 6e 63 61 70 73 75 6c | he.SSTP.server..Set.the.encapsul |
eb9c0 | 61 74 69 6f 6e 20 74 79 70 65 20 6f 66 20 74 68 65 20 74 75 6e 6e 65 6c 2e 20 56 61 6c 69 64 20 | ation.type.of.the.tunnel..Valid. |
eb9e0 | 76 61 6c 75 65 73 20 66 6f 72 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 61 72 65 3a 20 75 64 | values.for.encapsulation.are:.ud |
eba00 | 70 2c 20 69 70 2e 00 53 65 74 20 74 68 65 20 67 6c 6f 62 61 6c 20 73 65 74 74 69 6e 67 20 66 6f | p,.ip..Set.the.global.setting.fo |
eba20 | 72 20 61 6e 20 65 73 74 61 62 6c 69 73 68 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 53 65 74 | r.an.established.connection..Set |
eba40 | 20 74 68 65 20 67 6c 6f 62 61 6c 20 73 65 74 74 69 6e 67 20 66 6f 72 20 69 6e 76 61 6c 69 64 20 | .the.global.setting.for.invalid. |
eba60 | 70 61 63 6b 65 74 73 2e 00 53 65 74 20 74 68 65 20 67 6c 6f 62 61 6c 20 73 65 74 74 69 6e 67 20 | packets..Set.the.global.setting. |
eba80 | 66 6f 72 20 72 65 6c 61 74 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 53 65 74 20 74 68 65 | for.related.connections..Set.the |
ebaa0 | 20 6c 69 73 74 65 6e 20 70 6f 72 74 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 41 50 49 2c 20 74 | .listen.port.of.the.local.API,.t |
ebac0 | 68 69 73 20 68 61 73 20 6e 6f 20 65 66 66 65 63 74 20 6f 6e 20 74 68 65 20 77 65 62 73 65 72 76 | his.has.no.effect.on.the.webserv |
ebae0 | 65 72 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 70 6f 72 74 20 38 30 38 30 00 53 65 74 | er..The.default.is.port.8080.Set |
ebb00 | 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 68 6f 70 20 60 3c 63 6f 75 6e 74 3e 60 20 62 65 66 6f 72 | .the.maximum.hop.`<count>`.befor |
ebb20 | 65 20 70 61 63 6b 65 74 73 20 61 72 65 20 64 69 73 63 61 72 64 65 64 2e 20 52 61 6e 67 65 20 30 | e.packets.are.discarded..Range.0 |
ebb40 | 2e 2e 2e 32 35 35 2c 20 64 65 66 61 75 6c 74 20 31 30 2e 00 53 65 74 20 74 68 65 20 6d 61 78 69 | ...255,.default.10..Set.the.maxi |
ebb60 | 6d 75 6d 20 6c 65 6e 67 74 68 20 6f 66 20 41 2d 4d 50 44 55 20 70 72 65 2d 45 4f 46 20 70 61 64 | mum.length.of.A-MPDU.pre-EOF.pad |
ebb80 | 64 69 6e 67 20 74 68 61 74 20 74 68 65 20 73 74 61 74 69 6f 6e 20 63 61 6e 20 72 65 63 65 69 76 | ding.that.the.station.can.receiv |
ebba0 | 65 00 53 65 74 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 54 43 50 20 | e.Set.the.maximum.number.of.TCP. |
ebbc0 | 68 61 6c 66 2d 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 53 65 74 20 74 68 65 20 6e | half-open.connections..Set.the.n |
ebbe0 | 61 6d 65 20 6f 66 20 74 68 65 20 53 53 4c 20 3a 61 62 62 72 3a 60 43 41 20 28 43 65 72 74 69 66 | ame.of.the.SSL.:abbr:`CA.(Certif |
ebc00 | 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 29 60 20 50 4b 49 20 65 6e 74 72 79 20 75 73 65 64 | icate.Authority)`.PKI.entry.used |
ebc20 | 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 | .for.authentication.of.the.remot |
ebc40 | 65 20 73 69 64 65 2e 20 49 66 20 61 6e 20 69 6e 74 65 72 6d 65 64 69 61 74 65 20 43 41 20 63 65 | e.side..If.an.intermediate.CA.ce |
ebc60 | 72 74 69 66 69 63 61 74 65 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 74 68 65 6e 20 61 6c 6c | rtificate.is.specified,.then.all |
ebc80 | 20 70 61 72 65 6e 74 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 73 20 74 68 61 74 20 65 78 69 | .parent.CA.certificates.that.exi |
ebca0 | 73 74 20 69 6e 20 74 68 65 20 50 4b 49 2c 20 73 75 63 68 20 61 73 20 74 68 65 20 72 6f 6f 74 20 | st.in.the.PKI,.such.as.the.root. |
ebcc0 | 43 41 20 6f 72 20 61 64 64 69 74 69 6f 6e 61 6c 20 69 6e 74 65 72 6d 65 64 69 61 74 65 20 43 41 | CA.or.additional.intermediate.CA |
ebce0 | 73 2c 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 62 65 20 75 73 65 64 20 64 75 | s,.will.automatically.be.used.du |
ebd00 | 72 69 6e 67 20 63 65 72 74 69 66 69 63 61 74 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 74 6f 20 65 | ring.certificate.validation.to.e |
ebd20 | 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 20 66 75 6c 6c 20 63 68 61 69 6e 20 6f 66 20 74 72 75 | nsure.that.the.full.chain.of.tru |
ebd40 | 73 74 20 69 73 20 61 76 61 69 6c 61 62 6c 65 2e 00 53 65 74 20 74 68 65 20 6e 61 6d 65 20 6f 66 | st.is.available..Set.the.name.of |
ebd60 | 20 74 68 65 20 78 35 30 39 20 63 6c 69 65 6e 74 20 6b 65 79 70 61 69 72 20 75 73 65 64 20 74 6f | .the.x509.client.keypair.used.to |
ebd80 | 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 61 67 61 69 6e 73 74 20 74 68 65 20 38 30 32 2e 31 78 | .authenticate.against.the.802.1x |
ebda0 | 20 73 79 73 74 65 6d 2e 20 41 6c 6c 20 70 61 72 65 6e 74 20 43 41 20 63 65 72 74 69 66 69 63 61 | .system..All.parent.CA.certifica |
ebdc0 | 74 65 73 20 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 20 63 65 72 74 69 66 69 63 61 74 65 2c 20 73 | tes.of.the.client.certificate,.s |
ebde0 | 75 63 68 20 61 73 20 69 6e 74 65 72 6d 65 64 69 61 74 65 20 61 6e 64 20 72 6f 6f 74 20 43 41 73 | uch.as.intermediate.and.root.CAs |
ebe00 | 2c 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 45 41 | ,.will.be.sent.as.part.of.the.EA |
ebe20 | 50 2d 54 4c 53 20 68 61 6e 64 73 68 61 6b 65 2e 00 53 65 74 20 74 68 65 20 6e 61 74 69 76 65 20 | P-TLS.handshake..Set.the.native. |
ebe40 | 56 4c 41 4e 20 49 44 20 66 6c 61 67 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 57 | VLAN.ID.flag.of.the.interface..W |
ebe60 | 68 65 6e 20 61 20 64 61 74 61 20 70 61 63 6b 65 74 20 77 69 74 68 6f 75 74 20 61 20 56 4c 41 4e | hen.a.data.packet.without.a.VLAN |
ebe80 | 20 74 61 67 20 65 6e 74 65 72 73 20 74 68 65 20 70 6f 72 74 2c 20 74 68 65 20 64 61 74 61 20 70 | .tag.enters.the.port,.the.data.p |
ebea0 | 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 66 6f 72 63 65 64 20 74 6f 20 61 64 64 20 61 20 74 61 | acket.will.be.forced.to.add.a.ta |
ebec0 | 67 20 6f 66 20 61 20 73 70 65 63 69 66 69 63 20 76 6c 61 6e 20 69 64 2e 20 57 68 65 6e 20 74 68 | g.of.a.specific.vlan.id..When.th |
ebee0 | 65 20 76 6c 61 6e 20 69 64 20 66 6c 61 67 20 66 6c 6f 77 73 20 6f 75 74 2c 20 74 68 65 20 74 61 | e.vlan.id.flag.flows.out,.the.ta |
ebf00 | 67 20 6f 66 20 74 68 65 20 76 6c 61 6e 20 69 64 20 77 69 6c 6c 20 62 65 20 73 74 72 69 70 70 65 | g.of.the.vlan.id.will.be.strippe |
ebf20 | 64 00 53 65 74 20 74 68 65 20 6e 65 78 74 2d 68 6f 70 20 61 73 20 75 6e 63 68 61 6e 67 65 64 2e | d.Set.the.next-hop.as.unchanged. |
ebf40 | 20 50 61 73 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f 75 74 65 2d 6d 61 70 20 77 69 74 68 | .Pass.through.the.route-map.with |
ebf60 | 6f 75 74 20 63 68 61 6e 67 69 6e 67 20 69 74 73 20 76 61 6c 75 65 00 53 65 74 20 74 68 65 20 6e | out.changing.its.value.Set.the.n |
ebf80 | 75 6d 62 65 72 20 6f 66 20 54 43 50 20 6d 61 78 69 6d 75 6d 20 72 65 74 72 61 6e 73 6d 69 74 20 | umber.of.TCP.maximum.retransmit. |
ebfa0 | 61 74 74 65 6d 70 74 73 2e 00 53 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 68 65 61 6c | attempts..Set.the.number.of.heal |
ebfc0 | 74 68 20 63 68 65 63 6b 20 66 61 69 6c 75 72 65 73 20 62 65 66 6f 72 65 20 61 6e 20 69 6e 74 65 | th.check.failures.before.an.inte |
ebfe0 | 72 66 61 63 65 20 69 73 20 6d 61 72 6b 65 64 20 61 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 2c 20 | rface.is.marked.as.unavailable,. |
ec000 | 72 61 6e 67 65 20 66 6f 72 20 6e 75 6d 62 65 72 20 69 73 20 31 20 74 6f 20 31 30 2c 20 64 65 66 | range.for.number.is.1.to.10,.def |
ec020 | 61 75 6c 74 20 31 2e 20 4f 72 20 73 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 75 63 | ault.1..Or.set.the.number.of.suc |
ec040 | 63 65 73 73 66 75 6c 20 68 65 61 6c 74 68 20 63 68 65 63 6b 73 20 62 65 66 6f 72 65 20 61 6e 20 | cessful.health.checks.before.an. |
ec060 | 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 64 64 65 64 20 62 61 63 6b 20 74 6f 20 74 68 65 20 69 | interface.is.added.back.to.the.i |
ec080 | 6e 74 65 72 66 61 63 65 20 70 6f 6f 6c 2c 20 72 61 6e 67 65 20 66 6f 72 20 6e 75 6d 62 65 72 20 | nterface.pool,.range.for.number. |
ec0a0 | 69 73 20 31 20 74 6f 20 31 30 2c 20 64 65 66 61 75 6c 74 20 31 2e 00 53 65 74 20 74 68 65 20 6e | is.1.to.10,.default.1..Set.the.n |
ec0c0 | 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 74 68 65 20 72 6f 75 74 65 72 20 77 61 69 74 | umber.of.seconds.the.router.wait |
ec0e0 | 73 20 75 6e 74 69 6c 20 72 65 74 72 79 69 6e 67 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 | s.until.retrying.to.connect.to.t |
ec100 | 68 65 20 63 61 63 68 65 20 73 65 72 76 65 72 2e 00 53 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 | he.cache.server..Set.the.number. |
ec120 | 6f 66 20 73 65 63 6f 6e 64 73 20 74 68 65 20 72 6f 75 74 65 72 20 77 61 69 74 73 20 75 6e 74 69 | of.seconds.the.router.waits.unti |
ec140 | 6c 20 74 68 65 20 72 6f 75 74 65 72 20 65 78 70 69 72 65 73 20 74 68 65 20 63 61 63 68 65 2e 00 | l.the.router.expires.the.cache.. |
ec160 | 53 65 74 20 74 68 65 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 74 68 69 73 20 70 75 62 6c 69 63 20 | Set.the.options.for.this.public. |
ec180 | 6b 65 79 2e 20 53 65 65 20 74 68 65 20 73 73 68 20 60 60 61 75 74 68 6f 72 69 7a 65 64 5f 6b 65 | key..See.the.ssh.``authorized_ke |
ec1a0 | 79 73 60 60 20 6d 61 6e 20 70 61 67 65 20 66 6f 72 20 64 65 74 61 69 6c 73 20 6f 66 20 77 68 61 | ys``.man.page.for.details.of.wha |
ec1c0 | 74 20 79 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 68 65 72 65 2e 20 54 6f 20 70 6c 61 63 65 | t.you.can.specify.here..To.place |
ec1e0 | 20 61 20 60 60 22 60 60 20 63 68 61 72 61 63 74 65 72 20 69 6e 20 74 68 65 20 6f 70 74 69 6f 6e | .a.``"``.character.in.the.option |
ec200 | 73 20 66 69 65 6c 64 2c 20 75 73 65 20 60 60 26 71 75 6f 74 3b 60 60 2c 20 66 6f 72 20 65 78 61 | s.field,.use.``"``,.for.exa |
ec220 | 6d 70 6c 65 20 60 60 66 72 6f 6d 3d 26 71 75 6f 74 3b 31 30 2e 30 2e 30 2e 30 2f 32 34 26 71 75 | mple.``from="10.0.0.0/24&qu |
ec240 | 6f 74 3b 60 60 20 74 6f 20 72 65 73 74 72 69 63 74 20 77 68 65 72 65 20 74 68 65 20 75 73 65 72 | ot;``.to.restrict.where.the.user |
ec260 | 20 6d 61 79 20 63 6f 6e 6e 65 63 74 20 66 72 6f 6d 20 77 68 65 6e 20 75 73 69 6e 67 20 74 68 69 | .may.connect.from.when.using.thi |
ec280 | 73 20 6b 65 79 2e 00 53 65 74 20 74 68 65 20 70 61 72 69 74 79 20 6f 70 74 69 6f 6e 20 66 6f 72 | s.key..Set.the.parity.option.for |
ec2a0 | 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 20 49 66 20 75 6e 73 65 74 20 74 68 69 73 20 77 69 6c 6c | .the.console..If.unset.this.will |
ec2c0 | 20 64 65 66 61 75 6c 74 20 74 6f 20 6e 6f 6e 65 2e 00 53 65 74 20 74 68 65 20 70 65 65 72 27 73 | .default.to.none..Set.the.peer's |
ec2e0 | 20 4d 41 43 20 61 64 64 72 65 73 73 00 53 65 74 20 74 68 65 20 70 65 65 72 27 73 20 6b 65 79 20 | .MAC.address.Set.the.peer's.key. |
ec300 | 75 73 65 64 20 74 6f 20 72 65 63 65 69 76 65 20 28 52 58 29 20 74 72 61 66 66 69 63 00 53 65 74 | used.to.receive.(RX).traffic.Set |
ec320 | 20 74 68 65 20 70 65 65 72 2d 73 65 73 73 69 6f 6e 2d 69 64 2c 20 77 68 69 63 68 20 69 73 20 61 | .the.peer-session-id,.which.is.a |
ec340 | 20 33 32 2d 62 69 74 20 69 6e 74 65 67 65 72 20 76 61 6c 75 65 20 61 73 73 69 67 6e 65 64 20 74 | .32-bit.integer.value.assigned.t |
ec360 | 6f 20 74 68 65 20 73 65 73 73 69 6f 6e 20 62 79 20 74 68 65 20 70 65 65 72 2e 20 54 68 65 20 76 | o.the.session.by.the.peer..The.v |
ec380 | 61 6c 75 65 20 75 73 65 64 20 6d 75 73 74 20 6d 61 74 63 68 20 74 68 65 20 73 65 73 73 69 6f 6e | alue.used.must.match.the.session |
ec3a0 | 5f 69 64 20 76 61 6c 75 65 20 62 65 69 6e 67 20 75 73 65 64 20 61 74 20 74 68 65 20 70 65 65 72 | _id.value.being.used.at.the.peer |
ec3c0 | 2e 00 53 65 74 20 74 68 65 20 72 65 73 74 61 72 74 20 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 | ..Set.the.restart.behavior.of.th |
ec3e0 | 65 20 63 6f 6e 74 61 69 6e 65 72 2e 00 53 65 74 20 74 68 65 20 72 6f 75 74 65 20 6d 65 74 72 69 | e.container..Set.the.route.metri |
ec400 | 63 2e 20 57 68 65 6e 20 75 73 65 64 20 77 69 74 68 20 42 47 50 2c 20 73 65 74 20 74 68 65 20 42 | c..When.used.with.BGP,.set.the.B |
ec420 | 47 50 20 61 74 74 72 69 62 75 74 65 20 4d 45 44 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 76 | GP.attribute.MED.to.a.specific.v |
ec440 | 61 6c 75 65 2e 20 55 73 65 20 60 60 2b 2f 2d 60 60 20 74 6f 20 61 64 64 20 6f 72 20 73 75 62 74 | alue..Use.``+/-``.to.add.or.subt |
ec460 | 72 61 63 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 76 61 6c 75 65 20 74 6f 2f 66 72 6f 6d | ract.the.specified.value.to/from |
ec480 | 20 74 68 65 20 65 78 69 73 74 69 6e 67 2f 4d 45 44 2e 20 55 73 65 20 60 60 72 74 74 60 60 20 74 | .the.existing/MED..Use.``rtt``.t |
ec4a0 | 6f 20 73 65 74 20 74 68 65 20 4d 45 44 20 74 6f 20 74 68 65 20 72 6f 75 6e 64 20 74 72 69 70 20 | o.set.the.MED.to.the.round.trip. |
ec4c0 | 74 69 6d 65 20 6f 72 20 60 60 2b 72 74 74 2f 2d 72 74 74 60 60 20 74 6f 20 61 64 64 2f 73 75 62 | time.or.``+rtt/-rtt``.to.add/sub |
ec4e0 | 74 72 61 63 74 20 74 68 65 20 72 6f 75 6e 64 20 74 72 69 70 20 74 69 6d 65 20 74 6f 2f 66 72 6f | tract.the.round.trip.time.to/fro |
ec500 | 6d 20 74 68 65 20 4d 45 44 2e 00 53 65 74 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 | m.the.MED..Set.the.routing.table |
ec520 | 20 74 6f 20 66 6f 72 77 61 72 64 20 70 61 63 6b 65 74 20 77 69 74 68 2e 00 53 65 74 20 74 68 65 | .to.forward.packet.with..Set.the |
ec540 | 20 73 65 73 73 69 6f 6e 20 69 64 2c 20 77 68 69 63 68 20 69 73 20 61 20 33 32 2d 62 69 74 20 69 | .session.id,.which.is.a.32-bit.i |
ec560 | 6e 74 65 67 65 72 20 76 61 6c 75 65 2e 20 55 6e 69 71 75 65 6c 79 20 69 64 65 6e 74 69 66 69 65 | nteger.value..Uniquely.identifie |
ec580 | 73 20 74 68 65 20 73 65 73 73 69 6f 6e 20 62 65 69 6e 67 20 63 72 65 61 74 65 64 2e 20 54 68 65 | s.the.session.being.created..The |
ec5a0 | 20 76 61 6c 75 65 20 75 73 65 64 20 6d 75 73 74 20 6d 61 74 63 68 20 74 68 65 20 70 65 65 72 5f | .value.used.must.match.the.peer_ |
ec5c0 | 73 65 73 73 69 6f 6e 5f 69 64 20 76 61 6c 75 65 20 62 65 69 6e 67 20 75 73 65 64 20 61 74 20 74 | session_id.value.being.used.at.t |
ec5e0 | 68 65 20 70 65 65 72 2e 00 53 65 74 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 68 61 73 | he.peer..Set.the.size.of.the.has |
ec600 | 68 20 74 61 62 6c 65 2e 20 54 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 | h.table..The.connection.tracking |
ec620 | 20 68 61 73 68 20 74 61 62 6c 65 20 6d 61 6b 65 73 20 73 65 61 72 63 68 69 6e 67 20 74 68 65 20 | .hash.table.makes.searching.the. |
ec640 | 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 74 61 62 6c 65 20 66 61 73 74 65 72 | connection.tracking.table.faster |
ec660 | 2e 20 54 68 65 20 68 61 73 68 20 74 61 62 6c 65 20 75 73 65 73 20 e2 80 9c 62 75 63 6b 65 74 73 | ..The.hash.table.uses....buckets |
ec680 | e2 80 9d 20 74 6f 20 72 65 63 6f 72 64 20 65 6e 74 72 69 65 73 20 69 6e 20 74 68 65 20 63 6f 6e | ....to.record.entries.in.the.con |
ec6a0 | 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 74 61 62 6c 65 2e 00 53 65 74 20 74 68 65 20 | nection.tracking.table..Set.the. |
ec6c0 | 73 6f 75 72 63 65 20 49 50 20 6f 66 20 66 6f 72 77 61 72 64 65 64 20 70 61 63 6b 65 74 73 2c 20 | source.IP.of.forwarded.packets,. |
ec6e0 | 6f 74 68 65 72 77 69 73 65 20 6f 72 69 67 69 6e 61 6c 20 73 65 6e 64 65 72 73 20 61 64 64 72 65 | otherwise.original.senders.addre |
ec700 | 73 73 20 69 73 20 75 73 65 64 2e 00 53 65 74 20 74 68 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 73 | ss.is.used..Set.the.timeout.in.s |
ec720 | 65 63 6f 75 6e 64 73 20 66 6f 72 20 61 20 70 72 6f 74 6f 63 6f 6c 20 6f 72 20 73 74 61 74 65 20 | ecounds.for.a.protocol.or.state. |
ec740 | 69 6e 20 61 20 63 75 73 74 6f 6d 20 72 75 6c 65 2e 00 53 65 74 20 74 68 65 20 74 69 6d 65 6f 75 | in.a.custom.rule..Set.the.timeou |
ec760 | 74 20 69 6e 20 73 65 63 6f 75 6e 64 73 20 66 6f 72 20 61 20 70 72 6f 74 6f 63 6f 6c 20 6f 72 20 | t.in.secounds.for.a.protocol.or. |
ec780 | 73 74 61 74 65 2e 00 53 65 74 20 74 68 65 20 74 75 6e 6e 65 6c 20 69 64 2c 20 77 68 69 63 68 20 | state..Set.the.tunnel.id,.which. |
ec7a0 | 69 73 20 61 20 33 32 2d 62 69 74 20 69 6e 74 65 67 65 72 20 76 61 6c 75 65 2e 20 55 6e 69 71 75 | is.a.32-bit.integer.value..Uniqu |
ec7c0 | 65 6c 79 20 69 64 65 6e 74 69 66 69 65 73 20 74 68 65 20 74 75 6e 6e 65 6c 20 69 6e 74 6f 20 77 | ely.identifies.the.tunnel.into.w |
ec7e0 | 68 69 63 68 20 74 68 65 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 63 72 65 61 74 65 64 | hich.the.session.will.be.created |
ec800 | 2e 00 53 65 74 20 74 68 65 20 77 69 6e 64 6f 77 20 73 63 61 6c 65 20 66 61 63 74 6f 72 20 66 6f | ..Set.the.window.scale.factor.fo |
ec820 | 72 20 54 43 50 20 77 69 6e 64 6f 77 20 73 63 61 6c 69 6e 67 00 53 65 74 20 77 69 6e 64 6f 77 20 | r.TCP.window.scaling.Set.window. |
ec840 | 6f 66 20 63 6f 6e 63 75 72 72 65 6e 74 6c 79 20 76 61 6c 69 64 20 63 6f 64 65 73 2e 00 53 65 74 | of.concurrently.valid.codes..Set |
ec860 | 73 20 74 68 65 20 69 6d 61 67 65 20 6e 61 6d 65 20 69 6e 20 74 68 65 20 68 75 62 20 72 65 67 69 | s.the.image.name.in.the.hub.regi |
ec880 | 73 74 72 79 00 53 65 74 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6c 69 73 74 65 | stry.Sets.the.interface.to.liste |
ec8a0 | 6e 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 70 61 63 6b 65 74 73 20 6f 6e 2e 20 43 6f 75 6c | n.for.multicast.packets.on..Coul |
ec8c0 | 64 20 62 65 20 61 20 6c 6f 6f 70 62 61 63 6b 2c 20 6e 6f 74 20 79 65 74 20 74 65 73 74 65 64 2e | d.be.a.loopback,.not.yet.tested. |
ec8e0 | 00 53 65 74 73 20 74 68 65 20 6c 69 73 74 65 6e 69 6e 67 20 70 6f 72 74 20 66 6f 72 20 61 20 6c | .Sets.the.listening.port.for.a.l |
ec900 | 69 73 74 65 6e 69 6e 67 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 6f 76 65 72 72 69 64 65 73 | istening.address..This.overrides |
ec920 | 20 74 68 65 20 64 65 66 61 75 6c 74 20 70 6f 72 74 20 6f 66 20 33 31 32 38 20 6f 6e 20 74 68 65 | .the.default.port.of.3128.on.the |
ec940 | 20 73 70 65 63 69 66 69 63 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 2e 00 53 65 74 73 20 74 | .specific.listen.address..Sets.t |
ec960 | 68 65 20 75 6e 69 71 75 65 20 69 64 20 66 6f 72 20 74 68 69 73 20 76 78 6c 61 6e 2d 69 6e 74 65 | he.unique.id.for.this.vxlan-inte |
ec980 | 72 66 61 63 65 2e 20 4e 6f 74 20 73 75 72 65 20 68 6f 77 20 69 74 20 63 6f 72 72 65 6c 61 74 65 | rface..Not.sure.how.it.correlate |
ec9a0 | 73 20 77 69 74 68 20 6d 75 6c 74 69 63 61 73 74 2d 61 64 64 72 65 73 73 2e 00 53 65 74 74 69 6e | s.with.multicast-address..Settin |
ec9c0 | 67 20 56 52 52 50 20 67 72 6f 75 70 20 70 72 69 6f 72 69 74 79 00 53 65 74 74 69 6e 67 20 6e 61 | g.VRRP.group.priority.Setting.na |
ec9e0 | 6d 65 00 53 65 74 74 69 6e 67 20 74 68 69 73 20 75 70 20 6f 6e 20 41 57 53 20 77 69 6c 6c 20 72 | me.Setting.this.up.on.AWS.will.r |
eca00 | 65 71 75 69 72 65 20 61 20 22 43 75 73 74 6f 6d 20 50 72 6f 74 6f 63 6f 6c 20 52 75 6c 65 22 20 | equire.a."Custom.Protocol.Rule". |
eca20 | 66 6f 72 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 6d 62 65 72 20 22 34 37 22 20 28 47 52 45 29 20 41 | for.protocol.number."47".(GRE).A |
eca40 | 6c 6c 6f 77 20 52 75 6c 65 20 69 6e 20 54 57 4f 20 70 6c 61 63 65 73 2e 20 46 69 72 73 74 6c 79 | llow.Rule.in.TWO.places..Firstly |
eca60 | 20 6f 6e 20 74 68 65 20 56 50 43 20 4e 65 74 77 6f 72 6b 20 41 43 4c 2c 20 61 6e 64 20 73 65 63 | .on.the.VPC.Network.ACL,.and.sec |
eca80 | 6f 6e 64 6c 79 20 6f 6e 20 74 68 65 20 73 65 63 75 72 69 74 79 20 67 72 6f 75 70 20 6e 65 74 77 | ondly.on.the.security.group.netw |
ecaa0 | 6f 72 6b 20 41 43 4c 20 61 74 74 61 63 68 65 64 20 74 6f 20 74 68 65 20 45 43 32 20 69 6e 73 74 | ork.ACL.attached.to.the.EC2.inst |
ecac0 | 61 6e 63 65 2e 20 54 68 69 73 20 68 61 73 20 62 65 65 6e 20 74 65 73 74 65 64 20 61 73 20 77 6f | ance..This.has.been.tested.as.wo |
ecae0 | 72 6b 69 6e 67 20 66 6f 72 20 74 68 65 20 6f 66 66 69 63 69 61 6c 20 41 4d 49 20 69 6d 61 67 65 | rking.for.the.official.AMI.image |
ecb00 | 20 6f 6e 20 74 68 65 20 41 57 53 20 4d 61 72 6b 65 74 70 6c 61 63 65 2e 20 28 4c 6f 63 61 74 65 | .on.the.AWS.Marketplace..(Locate |
ecb20 | 20 74 68 65 20 63 6f 72 72 65 63 74 20 56 50 43 20 61 6e 64 20 73 65 63 75 72 69 74 79 20 67 72 | .the.correct.VPC.and.security.gr |
ecb40 | 6f 75 70 20 62 79 20 6e 61 76 69 67 61 74 69 6e 67 20 74 68 72 6f 75 67 68 20 74 68 65 20 64 65 | oup.by.navigating.through.the.de |
ecb60 | 74 61 69 6c 73 20 70 61 6e 65 20 62 65 6c 6f 77 20 79 6f 75 72 20 45 43 32 20 69 6e 73 74 61 6e | tails.pane.below.your.EC2.instan |
ecb80 | 63 65 20 69 6e 20 74 68 65 20 41 57 53 20 63 6f 6e 73 6f 6c 65 29 2e 00 53 65 74 74 69 6e 67 20 | ce.in.the.AWS.console)..Setting. |
ecba0 | 75 70 20 49 50 53 65 63 3a 00 53 65 74 74 69 6e 67 20 75 70 20 4f 70 65 6e 56 50 4e 00 53 65 74 | up.IPSec:.Setting.up.OpenVPN.Set |
ecbc0 | 74 69 6e 67 20 75 70 20 61 20 66 75 6c 6c 2d 62 6c 6f 77 6e 20 50 4b 49 20 77 69 74 68 20 61 20 | ting.up.a.full-blown.PKI.with.a. |
ecbe0 | 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 77 6f 75 6c 64 20 61 72 67 75 61 62 6c 79 20 64 65 | CA.certificate.would.arguably.de |
ecc00 | 66 65 61 74 20 74 68 65 20 70 75 72 70 6f 73 65 20 6f 66 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 | feat.the.purpose.of.site-to-site |
ecc20 | 20 4f 70 65 6e 56 50 4e 2c 20 73 69 6e 63 65 20 69 74 73 20 6d 61 69 6e 20 67 6f 61 6c 20 69 73 | .OpenVPN,.since.its.main.goal.is |
ecc40 | 20 73 75 70 70 6f 73 65 64 20 74 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 69 | .supposed.to.be.configuration.si |
ecc60 | 6d 70 6c 69 63 69 74 79 2c 20 63 6f 6d 70 61 72 65 64 20 74 6f 20 73 65 72 76 65 72 20 73 65 74 | mplicity,.compared.to.server.set |
ecc80 | 75 70 73 20 74 68 61 74 20 6e 65 65 64 20 74 6f 20 73 75 70 70 6f 72 74 20 6d 75 6c 74 69 70 6c | ups.that.need.to.support.multipl |
ecca0 | 65 20 63 6c 69 65 6e 74 73 2e 00 53 65 74 74 69 6e 67 20 75 70 20 63 65 72 74 69 66 69 63 61 74 | e.clients..Setting.up.certificat |
eccc0 | 65 73 00 53 65 74 74 69 6e 67 20 75 70 20 63 65 72 74 69 66 69 63 61 74 65 73 3a 00 53 65 74 74 | es.Setting.up.certificates:.Sett |
ecce0 | 69 6e 67 20 75 70 20 74 75 6e 6e 65 6c 3a 00 53 65 74 74 69 6e 67 20 77 69 6c 6c 20 6f 6e 6c 79 | ing.up.tunnel:.Setting.will.only |
ecd00 | 20 62 65 63 6f 6d 65 20 61 63 74 69 76 65 20 77 69 74 68 20 74 68 65 20 6e 65 78 74 20 72 65 62 | .become.active.with.the.next.reb |
ecd20 | 6f 6f 74 21 00 53 65 74 75 70 20 44 48 43 50 20 48 41 20 66 6f 72 20 6e 65 74 77 6f 72 6b 20 31 | oot!.Setup.DHCP.HA.for.network.1 |
ecd40 | 39 32 2e 30 2e 32 2e 30 2f 32 34 00 53 65 74 75 70 20 44 48 43 50 20 66 61 69 6c 6f 76 65 72 20 | 92.0.2.0/24.Setup.DHCP.failover. |
ecd60 | 66 6f 72 20 6e 65 74 77 6f 72 6b 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 00 53 65 74 75 70 20 65 | for.network.192.0.2.0/24.Setup.e |
ecd80 | 6e 63 72 79 70 74 65 64 20 70 61 73 73 77 6f 72 64 20 66 6f 72 20 67 69 76 65 6e 20 75 73 65 72 | ncrypted.password.for.given.user |
ecda0 | 6e 61 6d 65 2e 20 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 66 6f 72 20 74 72 61 6e 73 66 65 | name..This.is.useful.for.transfe |
ecdc0 | 72 72 69 6e 67 20 61 20 68 61 73 68 65 64 20 70 61 73 73 77 6f 72 64 20 66 72 6f 6d 20 73 79 73 | rring.a.hashed.password.from.sys |
ecde0 | 74 65 6d 20 74 6f 20 73 79 73 74 65 6d 2e 00 53 65 74 75 70 20 74 68 65 20 60 3c 74 69 6d 65 6f | tem.to.system..Setup.the.`<timeo |
ece00 | 75 74 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 20 77 68 65 6e 20 71 75 65 72 79 69 6e 67 20 74 68 | ut>`.in.seconds.when.querying.th |
ece20 | 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 53 65 74 75 70 20 74 68 65 20 60 3c 74 69 6d | e.RADIUS.server..Setup.the.`<tim |
ece40 | 65 6f 75 74 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 20 77 68 65 6e 20 71 75 65 72 79 69 6e 67 20 | eout>`.in.seconds.when.querying. |
ece60 | 74 68 65 20 54 41 43 41 43 53 20 73 65 72 76 65 72 2e 00 53 65 74 75 70 20 74 68 65 20 64 79 6e | the.TACACS.server..Setup.the.dyn |
ece80 | 61 6d 69 63 20 44 4e 53 20 68 6f 73 74 6e 61 6d 65 20 60 3c 68 6f 73 74 6e 61 6d 65 3e 60 20 61 | amic.DNS.hostname.`<hostname>`.a |
ecea0 | 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 44 79 6e 44 4e 53 20 70 72 6f 76 69 64 | ssociated.with.the.DynDNS.provid |
ecec0 | 65 72 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 2d 6e 61 6d 65 3e | er.identified.by.`<service-name> |
ecee0 | 60 2e 00 53 65 74 75 70 20 74 68 65 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 68 6f 73 74 6e 61 6d | `..Setup.the.dynamic.DNS.hostnam |
ecf00 | 65 20 60 3c 68 6f 73 74 6e 61 6d 65 3e 60 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 | e.`<hostname>`.associated.with.t |
ecf20 | 68 65 20 44 79 6e 44 4e 53 20 70 72 6f 76 69 64 65 72 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 | he.DynDNS.provider.identified.by |
ecf40 | 20 60 3c 73 65 72 76 69 63 65 3e 60 20 77 68 65 6e 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 | .`<service>`.when.the.IP.address |
ecf60 | 20 6f 6e 20 61 64 64 72 65 73 73 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 63 68 61 6e 67 65 | .on.address.`<interface>`.change |
ecf80 | 73 2e 00 53 65 74 75 70 20 74 68 65 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 68 6f 73 74 6e 61 6d | s..Setup.the.dynamic.DNS.hostnam |
ecfa0 | 65 20 60 3c 68 6f 73 74 6e 61 6d 65 3e 60 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 | e.`<hostname>`.associated.with.t |
ecfc0 | 68 65 20 44 79 6e 44 4e 53 20 70 72 6f 76 69 64 65 72 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 | he.DynDNS.provider.identified.by |
ecfe0 | 20 60 3c 73 65 72 76 69 63 65 3e 60 20 77 68 65 6e 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 | .`<service>`.when.the.IP.address |
ed000 | 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 63 68 61 6e | .on.interface.`<interface>`.chan |
ed020 | 67 65 73 2e 00 53 65 76 65 72 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 75 74 69 6c 69 7a 65 20 63 55 | ges..Several.commands.utilize.cU |
ed040 | 52 4c 20 74 6f 20 69 6e 69 74 69 61 74 65 20 74 72 61 6e 73 66 65 72 73 2e 20 43 6f 6e 66 69 67 | RL.to.initiate.transfers..Config |
ed060 | 75 72 65 20 74 68 65 20 6c 6f 63 61 6c 20 73 6f 75 72 63 65 20 49 50 76 34 2f 49 50 76 36 20 61 | ure.the.local.source.IPv4/IPv6.a |
ed080 | 64 64 72 65 73 73 20 75 73 65 64 20 66 6f 72 20 61 6c 6c 20 63 55 52 4c 20 6f 70 65 72 61 74 69 | ddress.used.for.all.cURL.operati |
ed0a0 | 6f 6e 73 2e 00 53 65 76 65 72 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 75 74 69 6c 69 7a 65 20 63 75 | ons..Several.commands.utilize.cu |
ed0c0 | 72 6c 20 74 6f 20 69 6e 69 74 69 61 74 65 20 74 72 61 6e 73 66 65 72 73 2e 20 43 6f 6e 66 69 67 | rl.to.initiate.transfers..Config |
ed0e0 | 75 72 65 20 74 68 65 20 6c 6f 63 61 6c 20 73 6f 75 72 63 65 20 69 6e 74 65 72 66 61 63 65 20 75 | ure.the.local.source.interface.u |
ed100 | 73 65 64 20 66 6f 72 20 61 6c 6c 20 43 55 52 4c 20 6f 70 65 72 61 74 69 6f 6e 73 2e 00 53 65 76 | sed.for.all.CURL.operations..Sev |
ed120 | 65 72 69 74 79 00 53 65 76 65 72 69 74 79 20 4c 65 76 65 6c 00 53 68 61 70 65 72 00 53 68 6f 72 | erity.Severity.Level.Shaper.Shor |
ed140 | 74 20 47 49 20 63 61 70 61 62 69 6c 69 74 69 65 73 00 53 68 6f 72 74 20 47 49 20 63 61 70 61 62 | t.GI.capabilities.Short.GI.capab |
ed160 | 69 6c 69 74 69 65 73 20 66 6f 72 20 32 30 20 61 6e 64 20 34 30 20 4d 48 7a 00 53 68 6f 72 74 20 | ilities.for.20.and.40.MHz.Short. |
ed180 | 62 75 72 73 74 73 20 63 61 6e 20 62 65 20 61 6c 6c 6f 77 65 64 20 74 6f 20 65 78 63 65 65 64 20 | bursts.can.be.allowed.to.exceed. |
ed1a0 | 74 68 65 20 6c 69 6d 69 74 2e 20 4f 6e 20 63 72 65 61 74 69 6f 6e 2c 20 74 68 65 20 52 61 74 65 | the.limit..On.creation,.the.Rate |
ed1c0 | 2d 43 6f 6e 74 72 6f 6c 20 74 72 61 66 66 69 63 20 69 73 20 73 74 6f 63 6b 65 64 20 77 69 74 68 | -Control.traffic.is.stocked.with |
ed1e0 | 20 74 6f 6b 65 6e 73 20 77 68 69 63 68 20 63 6f 72 72 65 73 70 6f 6e 64 20 74 6f 20 74 68 65 20 | .tokens.which.correspond.to.the. |
ed200 | 61 6d 6f 75 6e 74 20 6f 66 20 74 72 61 66 66 69 63 20 74 68 61 74 20 63 61 6e 20 62 65 20 62 75 | amount.of.traffic.that.can.be.bu |
ed220 | 72 73 74 20 69 6e 20 6f 6e 65 20 67 6f 2e 20 54 6f 6b 65 6e 73 20 61 72 72 69 76 65 20 61 74 20 | rst.in.one.go..Tokens.arrive.at. |
ed240 | 61 20 73 74 65 61 64 79 20 72 61 74 65 2c 20 75 6e 74 69 6c 20 74 68 65 20 62 75 63 6b 65 74 20 | a.steady.rate,.until.the.bucket. |
ed260 | 69 73 20 66 75 6c 6c 2e 00 53 68 6f 72 74 63 75 74 20 73 79 6e 74 61 78 20 66 6f 72 20 73 70 65 | is.full..Shortcut.syntax.for.spe |
ed280 | 63 69 66 79 69 6e 67 20 61 75 74 6f 6d 61 74 69 63 20 6c 65 61 6b 69 6e 67 20 66 72 6f 6d 20 76 | cifying.automatic.leaking.from.v |
ed2a0 | 72 66 20 56 52 46 4e 41 4d 45 20 74 6f 20 74 68 65 20 63 75 72 72 65 6e 74 20 56 52 46 20 75 73 | rf.VRFNAME.to.the.current.VRF.us |
ed2c0 | 69 6e 67 20 74 68 65 20 56 50 4e 20 52 49 42 20 61 73 20 69 6e 74 65 72 6d 65 64 69 61 72 79 2e | ing.the.VPN.RIB.as.intermediary. |
ed2e0 | 20 54 68 65 20 52 44 20 61 6e 64 20 52 54 20 61 72 65 20 61 75 74 6f 20 64 65 72 69 76 65 64 20 | .The.RD.and.RT.are.auto.derived. |
ed300 | 61 6e 64 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 73 70 65 63 69 66 69 65 64 20 65 78 70 6c | and.should.not.be.specified.expl |
ed320 | 69 63 69 74 6c 79 20 66 6f 72 20 65 69 74 68 65 72 20 74 68 65 20 73 6f 75 72 63 65 20 6f 72 20 | icitly.for.either.the.source.or. |
ed340 | 64 65 73 74 69 6e 61 74 69 6f 6e 20 56 52 46 e2 80 99 73 2e 00 53 68 6f 77 00 53 68 6f 77 20 44 | destination.VRF...s..Show.Show.D |
ed360 | 48 43 50 20 73 65 72 76 65 72 20 64 61 65 6d 6f 6e 20 6c 6f 67 20 66 69 6c 65 00 53 68 6f 77 20 | HCP.server.daemon.log.file.Show. |
ed380 | 44 48 43 50 76 36 20 73 65 72 76 65 72 20 64 61 65 6d 6f 6e 20 6c 6f 67 20 66 69 6c 65 00 53 68 | DHCPv6.server.daemon.log.file.Sh |
ed3a0 | 6f 77 20 46 69 72 65 77 61 6c 6c 20 6c 6f 67 00 53 68 6f 77 20 4c 4c 44 50 20 6e 65 69 67 68 62 | ow.Firewall.log.Show.LLDP.neighb |
ed3c0 | 6f 72 73 20 63 6f 6e 6e 65 63 74 65 64 20 76 69 61 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e | ors.connected.via.interface.`<in |
ed3e0 | 74 65 72 66 61 63 65 3e 60 2e 00 53 68 6f 77 20 53 53 48 20 64 79 6e 61 6d 69 63 2d 70 72 6f 74 | terface>`..Show.SSH.dynamic-prot |
ed400 | 65 63 74 69 6f 6e 20 6c 6f 67 2e 00 53 68 6f 77 20 53 53 48 20 73 65 72 76 65 72 20 6c 6f 67 2e | ection.log..Show.SSH.server.log. |
ed420 | 00 53 68 6f 77 20 53 53 48 20 73 65 72 76 65 72 20 70 75 62 6c 69 63 20 6b 65 79 20 66 69 6e 67 | .Show.SSH.server.public.key.fing |
ed440 | 65 72 70 72 69 6e 74 73 2c 20 69 6e 63 6c 75 64 69 6e 67 20 61 20 76 69 73 75 61 6c 20 41 53 43 | erprints,.including.a.visual.ASC |
ed460 | 49 49 20 61 72 74 20 72 65 70 72 65 73 65 6e 74 61 74 69 6f 6e 2e 00 53 68 6f 77 20 53 53 48 20 | II.art.representation..Show.SSH. |
ed480 | 73 65 72 76 65 72 20 70 75 62 6c 69 63 20 6b 65 79 20 66 69 6e 67 65 72 70 72 69 6e 74 73 2e 00 | server.public.key.fingerprints.. |
ed4a0 | 53 68 6f 77 20 57 41 4e 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 20 69 6e 66 6f 72 6d 61 74 69 | Show.WAN.load.balancer.informati |
ed4c0 | 6f 6e 20 69 6e 63 6c 75 64 69 6e 67 20 74 65 73 74 20 74 79 70 65 73 20 61 6e 64 20 74 61 72 67 | on.including.test.types.and.targ |
ed4e0 | 65 74 73 2e 20 41 20 63 68 61 72 61 63 74 65 72 20 61 74 20 74 68 65 20 73 74 61 72 74 20 6f 66 | ets..A.character.at.the.start.of |
ed500 | 20 65 61 63 68 20 6c 69 6e 65 20 64 65 70 69 63 74 73 20 74 68 65 20 73 74 61 74 65 20 6f 66 20 | .each.line.depicts.the.state.of. |
ed520 | 74 68 65 20 74 65 73 74 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 49 4d 45 49 2e 00 | the.test.Show.WWAN.module.IMEI.. |
ed540 | 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 49 4d 53 49 2e 00 53 68 6f 77 20 57 57 41 4e | Show.WWAN.module.IMSI..Show.WWAN |
ed560 | 20 6d 6f 64 75 6c 65 20 4d 53 49 53 44 4e 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 | .module.MSISDN..Show.WWAN.module |
ed580 | 20 53 49 4d 20 63 61 72 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 53 68 6f 77 20 57 57 41 4e | .SIM.card.information..Show.WWAN |
ed5a0 | 20 6d 6f 64 75 6c 65 20 66 69 72 6d 77 61 72 65 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 | .module.firmware..Show.WWAN.modu |
ed5c0 | 6c 65 20 68 61 72 64 77 61 72 65 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 00 53 68 6f 77 20 57 | le.hardware.capabilities..Show.W |
ed5e0 | 57 41 4e 20 6d 6f 64 75 6c 65 20 68 61 72 64 77 61 72 65 20 72 65 76 69 73 69 6f 6e 2e 00 53 68 | WAN.module.hardware.revision..Sh |
ed600 | 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 6d 6f 64 65 6c 2e 00 53 68 6f 77 20 57 57 41 4e 20 | ow.WWAN.module.model..Show.WWAN. |
ed620 | 6d 6f 64 75 6c 65 20 73 69 67 6e 61 6c 20 73 74 72 65 6e 67 74 68 2e 00 53 68 6f 77 20 61 20 6c | module.signal.strength..Show.a.l |
ed640 | 69 73 74 20 61 76 61 69 6c 61 62 6c 65 20 63 6f 6e 74 61 69 6e 65 72 20 6e 65 74 77 6f 72 6b 73 | ist.available.container.networks |
ed660 | 00 53 68 6f 77 20 61 20 6c 69 73 74 20 6f 66 20 69 6e 73 74 61 6c 6c 65 64 20 3a 61 62 62 72 3a | .Show.a.list.of.installed.:abbr: |
ed680 | 60 43 41 20 28 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 29 60 20 63 65 72 | `CA.(Certificate.Authority)`.cer |
ed6a0 | 74 69 66 69 63 61 74 65 73 2e 00 53 68 6f 77 20 61 20 6c 69 73 74 20 6f 66 20 69 6e 73 74 61 6c | tificates..Show.a.list.of.instal |
ed6c0 | 6c 65 64 20 3a 61 62 62 72 3a 60 43 52 4c 73 20 28 43 65 72 74 69 66 69 63 61 74 65 20 52 65 76 | led.:abbr:`CRLs.(Certificate.Rev |
ed6e0 | 6f 63 61 74 69 6f 6e 20 4c 69 73 74 29 60 2e 00 53 68 6f 77 20 61 20 6c 69 73 74 20 6f 66 20 69 | ocation.List)`..Show.a.list.of.i |
ed700 | 6e 73 74 61 6c 6c 65 64 20 63 65 72 74 69 66 69 63 61 74 65 73 00 53 68 6f 77 20 61 6c 6c 20 42 | nstalled.certificates.Show.all.B |
ed720 | 46 44 20 70 65 65 72 73 00 53 68 6f 77 20 61 76 61 69 6c 61 62 6c 65 20 6f 66 66 6c 6f 61 64 69 | FD.peers.Show.available.offloadi |
ed740 | 6e 67 20 66 75 6e 63 74 69 6f 6e 73 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 | ng.functions.on.given.`<interfac |
ed760 | 65 3e 60 00 53 68 6f 77 20 62 69 6e 64 65 64 20 71 61 74 20 64 65 76 69 63 65 20 69 6e 74 65 72 | e>`.Show.binded.qat.device.inter |
ed780 | 72 75 70 74 73 20 74 6f 20 63 65 72 74 61 69 6e 20 63 6f 72 65 2e 00 53 68 6f 77 20 62 72 69 64 | rupts.to.certain.core..Show.brid |
ed7a0 | 67 65 20 60 3c 6e 61 6d 65 3e 60 20 66 64 62 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 63 75 72 | ge.`<name>`.fdb.displays.the.cur |
ed7c0 | 72 65 6e 74 20 66 6f 72 77 61 72 64 69 6e 67 20 74 61 62 6c 65 3a 00 53 68 6f 77 20 62 72 69 64 | rent.forwarding.table:.Show.brid |
ed7e0 | 67 65 20 60 3c 6e 61 6d 65 3e 60 20 6d 64 62 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 63 75 72 | ge.`<name>`.mdb.displays.the.cur |
ed800 | 72 65 6e 74 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 6d 65 6d 62 65 72 73 68 69 70 20 | rent.multicast.group.membership. |
ed820 | 74 61 62 6c 65 2e 54 68 65 20 74 61 62 6c 65 20 69 73 20 70 6f 70 75 6c 61 74 65 64 20 62 79 20 | table.The.table.is.populated.by. |
ed840 | 49 47 4d 50 20 61 6e 64 20 4d 4c 44 20 73 6e 6f 6f 70 69 6e 67 20 69 6e 20 74 68 65 20 62 72 69 | IGMP.and.MLD.snooping.in.the.bri |
ed860 | 64 67 65 20 64 72 69 76 65 72 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 00 53 68 6f 77 20 62 | dge.driver.automatically..Show.b |
ed880 | 72 69 65 66 20 69 6e 74 65 72 66 61 63 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 53 68 6f 77 | rief.interface.information..Show |
ed8a0 | 20 63 6f 6d 6d 61 6e 64 73 00 53 68 6f 77 20 63 6f 6e 66 69 67 75 72 65 64 20 73 65 72 69 61 6c | .commands.Show.configured.serial |
ed8c0 | 20 70 6f 72 74 73 20 61 6e 64 20 74 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 20 69 6e 74 65 | .ports.and.their.respective.inte |
ed8e0 | 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 53 68 6f 77 20 63 6f 6e 6e 65 63 | rface.configuration..Show.connec |
ed900 | 74 69 6f 6e 20 64 61 74 61 20 6f 66 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 64 20 74 72 61 66 66 | tion.data.of.load.balanced.traff |
ed920 | 69 63 3a 00 53 68 6f 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 79 6e 63 69 6e 67 20 65 78 74 65 | ic:.Show.connection.syncing.exte |
ed940 | 72 6e 61 6c 20 63 61 63 68 65 20 65 6e 74 72 69 65 73 00 53 68 6f 77 20 63 6f 6e 6e 65 63 74 69 | rnal.cache.entries.Show.connecti |
ed960 | 6f 6e 20 73 79 6e 63 69 6e 67 20 69 6e 74 65 72 6e 61 6c 20 63 61 63 68 65 20 65 6e 74 72 69 65 | on.syncing.internal.cache.entrie |
ed980 | 73 00 53 68 6f 77 20 63 75 72 72 65 6e 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 75 73 65 72 73 | s.Show.currently.connected.users |
ed9a0 | 2e 00 53 68 6f 77 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 | ..Show.detailed.information.abou |
ed9c0 | 74 20 61 6c 6c 20 6c 65 61 72 6e 65 64 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 4e 6f | t.all.learned.Segment.Routing.No |
ed9e0 | 64 65 73 00 53 68 6f 77 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 | des.Show.detailed.information.ab |
eda00 | 6f 75 74 20 70 72 65 66 69 78 2d 73 69 64 20 61 6e 64 20 6c 61 62 65 6c 20 6c 65 61 72 6e 65 64 | out.prefix-sid.and.label.learned |
eda20 | 00 53 68 6f 77 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 | .Show.detailed.information.about |
eda40 | 20 74 68 65 20 75 6e 64 65 72 6c 61 79 69 6e 67 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 73 20 | .the.underlaying.physical.links. |
eda60 | 6f 6e 20 67 69 76 65 6e 20 62 6f 6e 64 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 53 68 6f | on.given.bond.`<interface>`..Sho |
eda80 | 77 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 67 69 76 65 6e 20 | w.detailed.information.on.given. |
edaa0 | 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 00 53 68 6f 77 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f | `<interface>`.Show.detailed.info |
edac0 | 72 6d 61 74 69 6f 6e 20 6f 6e 20 74 68 65 20 67 69 76 65 6e 20 6c 6f 6f 70 62 61 63 6b 20 69 6e | rmation.on.the.given.loopback.in |
edae0 | 74 65 72 66 61 63 65 20 60 6c 6f 60 2e 00 53 68 6f 77 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f | terface.`lo`..Show.detailed.info |
edb00 | 72 6d 61 74 69 6f 6e 20 73 75 6d 6d 61 72 79 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 | rmation.summary.on.given.`<inter |
edb20 | 66 61 63 65 3e 60 00 53 68 6f 77 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 69 6e 66 6f | face>`.Show.flow.accounting.info |
edb40 | 72 6d 61 74 69 6f 6e 20 66 6f 72 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 | rmation.for.given.`<interface>`. |
edb60 | 66 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 68 6f 73 74 20 6f 6e 6c 79 2e 00 53 68 6f 77 20 66 | for.a.specific.host.only..Show.f |
edb80 | 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 67 | low.accounting.information.for.g |
edba0 | 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 53 68 6f 77 20 67 65 6e 65 72 61 6c | iven.`<interface>`..Show.general |
edbc0 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 73 70 65 63 69 66 69 63 20 57 69 72 65 | .information.about.specific.Wire |
edbe0 | 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 00 53 68 6f 77 20 69 6e 66 6f 20 61 62 6f 75 74 20 | Guard.interface.Show.info.about. |
edc00 | 74 68 65 20 57 69 72 65 67 75 61 72 64 20 73 65 72 76 69 63 65 2e 20 49 74 20 61 6c 73 6f 20 73 | the.Wireguard.service..It.also.s |
edc20 | 68 6f 77 73 20 74 68 65 20 6c 61 74 65 73 74 20 68 61 6e 64 73 68 61 6b 65 2e 00 53 68 6f 77 20 | hows.the.latest.handshake..Show. |
edc40 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 70 68 79 73 69 63 61 6c 20 60 3c 69 6e 74 | information.about.physical.`<int |
edc60 | 65 72 66 61 63 65 3e 60 00 53 68 6f 77 20 6c 69 73 74 20 6f 66 20 49 50 73 20 63 75 72 72 65 6e | erface>`.Show.list.of.IPs.curren |
edc80 | 74 6c 79 20 62 6c 6f 63 6b 65 64 20 62 79 20 53 53 48 20 64 79 6e 61 6d 69 63 2d 70 72 6f 74 65 | tly.blocked.by.SSH.dynamic-prote |
edca0 | 63 74 69 6f 6e 2e 00 53 68 6f 77 20 6c 6f 67 73 20 66 6f 72 20 6d 44 4e 53 20 72 65 70 65 61 74 | ction..Show.logs.for.mDNS.repeat |
edcc0 | 65 72 20 73 65 72 76 69 63 65 2e 00 53 68 6f 77 20 6c 6f 67 73 20 66 72 6f 6d 20 61 20 67 69 76 | er.service..Show.logs.from.a.giv |
edce0 | 65 6e 20 63 6f 6e 74 61 69 6e 65 72 00 53 68 6f 77 20 6c 6f 67 73 20 66 72 6f 6d 20 61 6c 6c 20 | en.container.Show.logs.from.all. |
edd00 | 44 48 43 50 20 63 6c 69 65 6e 74 20 70 72 6f 63 65 73 73 65 73 2e 00 53 68 6f 77 20 6c 6f 67 73 | DHCP.client.processes..Show.logs |
edd20 | 20 66 72 6f 6d 20 61 6c 6c 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 20 70 72 6f 63 65 73 73 65 | .from.all.DHCPv6.client.processe |
edd40 | 73 2e 00 53 68 6f 77 20 6c 6f 67 73 20 66 72 6f 6d 20 73 70 65 63 69 66 69 63 20 60 69 6e 74 65 | s..Show.logs.from.specific.`inte |
edd60 | 72 66 61 63 65 60 20 44 48 43 50 20 63 6c 69 65 6e 74 20 70 72 6f 63 65 73 73 2e 00 53 68 6f 77 | rface`.DHCP.client.process..Show |
edd80 | 20 6c 6f 67 73 20 66 72 6f 6d 20 73 70 65 63 69 66 69 63 20 60 69 6e 74 65 72 66 61 63 65 60 20 | .logs.from.specific.`interface`. |
edda0 | 44 48 43 50 76 36 20 63 6c 69 65 6e 74 20 70 72 6f 63 65 73 73 2e 00 53 68 6f 77 20 6f 6e 6c 79 | DHCPv6.client.process..Show.only |
eddc0 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 73 70 65 63 69 66 69 65 64 20 43 65 72 74 69 | .information.for.specified.Certi |
edde0 | 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 2e 00 53 68 6f 77 20 6f 6e 6c 79 20 69 6e 66 6f | ficate.Authority..Show.only.info |
ede00 | 72 6d 61 74 69 6f 6e 20 66 6f 72 20 73 70 65 63 69 66 69 65 64 20 63 65 72 74 69 66 69 63 61 74 | rmation.for.specified.certificat |
ede20 | 65 2e 00 53 68 6f 77 20 6f 6e 6c 79 20 6c 65 61 73 65 73 20 69 6e 20 74 68 65 20 73 70 65 63 69 | e..Show.only.leases.in.the.speci |
ede40 | 66 69 65 64 20 70 6f 6f 6c 2e 00 53 68 6f 77 20 6f 6e 6c 79 20 6c 65 61 73 65 73 20 77 69 74 68 | fied.pool..Show.only.leases.with |
ede60 | 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 73 74 61 74 65 2e 20 50 6f 73 73 69 62 6c 65 20 73 | .the.specified.state..Possible.s |
ede80 | 74 61 74 65 73 3a 20 61 62 61 6e 64 6f 6e 65 64 2c 20 61 63 74 69 76 65 2c 20 61 6c 6c 2c 20 62 | tates:.abandoned,.active,.all,.b |
edea0 | 61 63 6b 75 70 2c 20 65 78 70 69 72 65 64 2c 20 66 72 65 65 2c 20 72 65 6c 65 61 73 65 64 2c 20 | ackup,.expired,.free,.released,. |
edec0 | 72 65 73 65 74 20 28 64 65 66 61 75 6c 74 20 3d 20 61 63 74 69 76 65 29 00 53 68 6f 77 20 6f 6e | reset.(default.=.active).Show.on |
edee0 | 6c 79 20 6c 65 61 73 65 73 20 77 69 74 68 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 73 74 61 | ly.leases.with.the.specified.sta |
edf00 | 74 65 2e 20 50 6f 73 73 69 62 6c 65 20 73 74 61 74 65 73 3a 20 61 6c 6c 2c 20 61 63 74 69 76 65 | te..Possible.states:.all,.active |
edf20 | 2c 20 66 72 65 65 2c 20 65 78 70 69 72 65 64 2c 20 72 65 6c 65 61 73 65 64 2c 20 61 62 61 6e 64 | ,.free,.expired,.released,.aband |
edf40 | 6f 6e 65 64 2c 20 72 65 73 65 74 2c 20 62 61 63 6b 75 70 20 28 64 65 66 61 75 6c 74 20 3d 20 61 | oned,.reset,.backup.(default.=.a |
edf60 | 63 74 69 76 65 29 00 53 68 6f 77 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 65 6e 74 72 79 20 | ctive).Show.routing.table.entry. |
edf80 | 66 6f 72 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 2e 00 53 68 6f 77 20 73 70 65 63 | for.the.default.route..Show.spec |
edfa0 | 69 66 69 63 20 4d 41 43 73 65 63 20 69 6e 74 65 72 66 61 63 65 20 69 6e 66 6f 72 6d 61 74 69 6f | ific.MACsec.interface.informatio |
edfc0 | 6e 00 53 68 6f 77 20 73 74 61 74 75 73 20 6f 66 20 6e 65 77 20 73 65 74 75 70 3a 00 53 68 6f 77 | n.Show.status.of.new.setup:.Show |
edfe0 | 20 73 74 61 74 75 73 65 73 20 6f 66 20 61 6c 6c 20 61 63 74 69 76 65 20 6c 65 61 73 65 73 20 67 | .statuses.of.all.active.leases.g |
ee000 | 72 61 6e 74 65 64 20 62 79 20 6c 6f 63 61 6c 20 28 74 68 69 73 20 73 65 72 76 65 72 29 20 6f 72 | ranted.by.local.(this.server).or |
ee020 | 20 72 65 6d 6f 74 65 20 28 66 61 69 6c 6f 76 65 72 20 73 65 72 76 65 72 29 3a 00 53 68 6f 77 20 | .remote.(failover.server):.Show. |
ee040 | 73 74 61 74 75 73 65 73 20 6f 66 20 61 6c 6c 20 61 63 74 69 76 65 20 6c 65 61 73 65 73 3a 00 53 | statuses.of.all.active.leases:.S |
ee060 | 68 6f 77 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 20 73 74 61 74 69 73 74 69 63 73 20 66 | how.the.DHCP.server.statistics.f |
ee080 | 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 6f 6f 6c 2e 00 53 68 6f 77 20 74 68 65 20 | or.the.specified.pool..Show.the. |
ee0a0 | 44 48 43 50 20 73 65 72 76 65 72 20 73 74 61 74 69 73 74 69 63 73 3a 00 53 68 6f 77 20 74 68 65 | DHCP.server.statistics:.Show.the |
ee0c0 | 20 63 6f 6e 73 6f 6c 65 20 73 65 72 76 65 72 20 6c 6f 67 2e 00 53 68 6f 77 20 74 68 65 20 66 75 | .console.server.log..Show.the.fu |
ee0e0 | 6c 6c 20 63 6f 6e 66 69 67 20 75 70 6c 6f 61 64 65 64 20 74 6f 20 74 68 65 20 51 41 54 20 64 65 | ll.config.uploaded.to.the.QAT.de |
ee100 | 76 69 63 65 2e 00 53 68 6f 77 20 74 68 65 20 6c 69 73 74 20 6f 66 20 61 6c 6c 20 61 63 74 69 76 | vice..Show.the.list.of.all.activ |
ee120 | 65 20 63 6f 6e 74 61 69 6e 65 72 73 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f 63 61 6c 20 63 6f 6e | e.containers..Show.the.local.con |
ee140 | 74 61 69 6e 65 72 20 69 6d 61 67 65 73 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f 67 73 20 6f 66 20 | tainer.images..Show.the.logs.of. |
ee160 | 61 20 73 70 65 63 69 66 69 63 20 52 75 6c 65 2d 53 65 74 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f | a.specific.Rule-Set..Show.the.lo |
ee180 | 67 73 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 3b 20 73 68 6f 77 20 61 6c 6c 20 62 72 69 | gs.of.all.firewall;.show.all.bri |
ee1a0 | 64 67 65 20 66 69 72 65 77 61 6c 6c 20 6c 6f 67 73 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 | dge.firewall.logs;.show.all.logs |
ee1c0 | 20 66 6f 72 20 66 6f 72 77 61 72 64 20 68 6f 6f 6b 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 | .for.forward.hook;.show.all.logs |
ee1e0 | 20 66 6f 72 20 66 6f 72 77 61 72 64 20 68 6f 6f 6b 20 61 6e 64 20 70 72 69 6f 72 69 74 79 20 66 | .for.forward.hook.and.priority.f |
ee200 | 69 6c 74 65 72 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 | ilter;.show.all.logs.for.particu |
ee220 | 6c 61 72 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 3b 20 73 68 6f 77 20 6c 6f 67 73 20 66 6f 72 20 | lar.custom.chain;.show.logs.for. |
ee240 | 73 70 65 63 69 66 69 63 20 52 75 6c 65 2d 53 65 74 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f 67 73 | specific.Rule-Set..Show.the.logs |
ee260 | 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 3b 20 73 68 6f 77 20 61 6c 6c 20 69 70 76 34 20 | .of.all.firewall;.show.all.ipv4. |
ee280 | 66 69 72 65 77 61 6c 6c 20 6c 6f 67 73 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 | firewall.logs;.show.all.logs.for |
ee2a0 | 20 70 61 72 74 69 63 75 6c 61 72 20 68 6f 6f 6b 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 | .particular.hook;.show.all.logs. |
ee2c0 | 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 68 6f 6f 6b 20 61 6e 64 20 70 72 69 6f 72 69 74 79 | for.particular.hook.and.priority |
ee2e0 | 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 63 | ;.show.all.logs.for.particular.c |
ee300 | 75 73 74 6f 6d 20 63 68 61 69 6e 3b 20 73 68 6f 77 20 6c 6f 67 73 20 66 6f 72 20 73 70 65 63 69 | ustom.chain;.show.logs.for.speci |
ee320 | 66 69 63 20 52 75 6c 65 2d 53 65 74 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f 67 73 20 6f 66 20 61 | fic.Rule-Set..Show.the.logs.of.a |
ee340 | 6c 6c 20 66 69 72 65 77 61 6c 6c 3b 20 73 68 6f 77 20 61 6c 6c 20 69 70 76 36 20 66 69 72 65 77 | ll.firewall;.show.all.ipv6.firew |
ee360 | 61 6c 6c 20 6c 6f 67 73 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 | all.logs;.show.all.logs.for.part |
ee380 | 69 63 75 6c 61 72 20 68 6f 6f 6b 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 | icular.hook;.show.all.logs.for.p |
ee3a0 | 61 72 74 69 63 75 6c 61 72 20 68 6f 6f 6b 20 61 6e 64 20 70 72 69 6f 72 69 74 79 3b 20 73 68 6f | articular.hook.and.priority;.sho |
ee3c0 | 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 63 75 73 74 6f 6d | w.all.logs.for.particular.custom |
ee3e0 | 20 63 68 61 69 6e 3b 20 73 68 6f 77 20 6c 6f 67 73 20 66 6f 72 20 73 70 65 63 69 66 69 63 20 52 | .chain;.show.logs.for.specific.R |
ee400 | 75 6c 65 2d 53 65 74 2e 00 53 68 6f 77 20 74 68 65 20 72 6f 75 74 65 00 53 68 6f 77 20 74 72 61 | ule-Set..Show.the.route.Show.tra |
ee420 | 6e 73 63 65 69 76 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 70 6c 75 67 69 6e | nsceiver.information.from.plugin |
ee440 | 20 6d 6f 64 75 6c 65 73 2c 20 65 2e 67 20 53 46 50 2b 2c 20 51 53 46 50 00 53 68 6f 77 69 6e 67 | .modules,.e.g.SFP+,.QSFP.Showing |
ee460 | 20 42 46 44 20 6d 6f 6e 69 74 6f 72 65 64 20 73 74 61 74 69 63 20 72 6f 75 74 65 73 00 53 68 6f | .BFD.monitored.static.routes.Sho |
ee480 | 77 73 20 73 74 61 74 75 73 20 6f 66 20 61 6c 6c 20 61 73 73 69 67 6e 65 64 20 6c 65 61 73 65 73 | ws.status.of.all.assigned.leases |
ee4a0 | 3a 00 53 69 64 65 20 41 3a 00 53 69 64 65 20 42 3a 00 53 69 65 72 72 61 20 57 69 72 65 6c 65 73 | :.Side.A:.Side.B:.Sierra.Wireles |
ee4c0 | 73 20 41 69 72 50 72 69 6d 65 20 4d 43 37 33 30 34 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 | s.AirPrime.MC7304.miniPCIe.card. |
ee4e0 | 28 4c 54 45 29 00 53 69 65 72 72 61 20 57 69 72 65 6c 65 73 73 20 41 69 72 50 72 69 6d 65 20 4d | (LTE).Sierra.Wireless.AirPrime.M |
ee500 | 43 37 34 33 30 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c 54 45 29 00 53 69 65 72 72 61 | C7430.miniPCIe.card.(LTE).Sierra |
ee520 | 20 57 69 72 65 6c 65 73 73 20 41 69 72 50 72 69 6d 65 20 4d 43 37 34 35 35 20 6d 69 6e 69 50 43 | .Wireless.AirPrime.MC7455.miniPC |
ee540 | 49 65 20 63 61 72 64 20 28 4c 54 45 29 00 53 69 65 72 72 61 20 57 69 72 65 6c 65 73 73 20 41 69 | Ie.card.(LTE).Sierra.Wireless.Ai |
ee560 | 72 50 72 69 6d 65 20 4d 43 37 37 31 30 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c 54 45 | rPrime.MC7710.miniPCIe.card.(LTE |
ee580 | 29 00 53 69 6d 69 6c 61 72 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 73 20 61 72 65 20 61 70 70 6c 69 | ).Similar.combinations.are.appli |
ee5a0 | 63 61 62 6c 65 20 66 6f 72 20 74 68 65 20 64 65 61 64 2d 70 65 65 72 2d 64 65 74 65 63 74 69 6f | cable.for.the.dead-peer-detectio |
ee5c0 | 6e 2e 00 53 69 6d 70 6c 65 20 42 61 62 65 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 75 73 | n..Simple.Babel.configuration.us |
ee5e0 | 69 6e 67 20 32 20 6e 6f 64 65 73 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 69 6e 67 20 63 | ing.2.nodes.and.redistributing.c |
ee600 | 6f 6e 6e 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 73 2e 00 53 69 6d 70 6c 65 20 52 49 50 20 | onnected.interfaces..Simple.RIP. |
ee620 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 75 73 69 6e 67 20 32 20 6e 6f 64 65 73 20 61 6e 64 20 | configuration.using.2.nodes.and. |
ee640 | 72 65 64 69 73 74 72 69 62 75 74 69 6e 67 20 63 6f 6e 6e 65 63 74 65 64 20 69 6e 74 65 72 66 61 | redistributing.connected.interfa |
ee660 | 63 65 73 2e 00 53 69 6d 70 6c 65 20 73 65 74 75 70 20 77 69 74 68 20 6f 6e 65 20 75 73 65 72 20 | ces..Simple.setup.with.one.user. |
ee680 | 61 64 64 65 64 20 61 6e 64 20 70 61 73 73 77 6f 72 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | added.and.password.authenticatio |
ee6a0 | 6e 3a 00 53 69 6d 70 6c 65 20 74 65 78 74 20 70 61 73 73 77 6f 72 64 20 61 75 74 68 65 6e 74 69 | n:.Simple.text.password.authenti |
ee6c0 | 63 61 74 69 6f 6e 20 69 73 20 69 6e 73 65 63 75 72 65 20 61 6e 64 20 64 65 70 72 65 63 61 74 65 | cation.is.insecure.and.deprecate |
ee6e0 | 64 20 69 6e 20 66 61 76 6f 75 72 20 6f 66 20 4d 44 35 20 48 4d 41 43 20 61 75 74 68 65 6e 74 69 | d.in.favour.of.MD5.HMAC.authenti |
ee700 | 63 61 74 69 6f 6e 2e 00 53 69 6e 63 65 20 62 6f 74 68 20 72 6f 75 74 65 72 73 20 64 6f 20 6e 6f | cation..Since.both.routers.do.no |
ee720 | 74 20 6b 6e 6f 77 20 74 68 65 69 72 20 65 66 66 65 63 74 69 76 65 20 70 75 62 6c 69 63 20 61 64 | t.know.their.effective.public.ad |
ee740 | 64 72 65 73 73 65 73 2c 20 77 65 20 73 65 74 20 74 68 65 20 6c 6f 63 61 6c 2d 61 64 64 72 65 73 | dresses,.we.set.the.local-addres |
ee760 | 73 20 6f 66 20 74 68 65 20 70 65 65 72 20 74 6f 20 22 61 6e 79 22 2e 00 53 69 6e 63 65 20 69 74 | s.of.the.peer.to."any"..Since.it |
ee780 | 27 73 20 61 20 48 51 20 61 6e 64 20 62 72 61 6e 63 68 20 6f 66 66 69 63 65 73 20 73 65 74 75 70 | 's.a.HQ.and.branch.offices.setup |
ee7a0 | 2c 20 77 65 20 77 69 6c 6c 20 77 61 6e 74 20 61 6c 6c 20 63 6c 69 65 6e 74 73 20 74 6f 20 68 61 | ,.we.will.want.all.clients.to.ha |
ee7c0 | 76 65 20 66 69 78 65 64 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 77 65 20 77 69 6c 6c 20 72 | ve.fixed.addresses.and.we.will.r |
ee7e0 | 6f 75 74 65 20 74 72 61 66 66 69 63 20 74 6f 20 73 70 65 63 69 66 69 63 20 73 75 62 6e 65 74 73 | oute.traffic.to.specific.subnets |
ee800 | 20 74 68 72 6f 75 67 68 20 74 68 65 6d 2e 20 57 65 20 6e 65 65 64 20 63 6f 6e 66 69 67 75 72 61 | .through.them..We.need.configura |
ee820 | 74 69 6f 6e 20 66 6f 72 20 65 61 63 68 20 63 6c 69 65 6e 74 20 74 6f 20 61 63 68 69 65 76 65 20 | tion.for.each.client.to.achieve. |
ee840 | 74 68 69 73 2e 00 53 69 6e 63 65 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 77 6f | this..Since.the.RADIUS.server.wo |
ee860 | 75 6c 64 20 62 65 20 61 20 73 69 6e 67 6c 65 20 70 6f 69 6e 74 20 6f 66 20 66 61 69 6c 75 72 65 | uld.be.a.single.point.of.failure |
ee880 | 2c 20 6d 75 6c 74 69 70 6c 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 73 20 63 61 6e 20 62 65 | ,.multiple.RADIUS.servers.can.be |
ee8a0 | 20 73 65 74 75 70 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 73 75 62 73 65 71 75 65 | .setup.and.will.be.used.subseque |
ee8c0 | 6e 74 69 61 6c 6c 79 2e 00 53 69 6e 63 65 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 | ntially..Since.the.RADIUS.server |
ee8e0 | 20 77 6f 75 6c 64 20 62 65 20 61 20 73 69 6e 67 6c 65 20 70 6f 69 6e 74 20 6f 66 20 66 61 69 6c | .would.be.a.single.point.of.fail |
ee900 | 75 72 65 2c 20 6d 75 6c 74 69 70 6c 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 73 20 63 61 6e | ure,.multiple.RADIUS.servers.can |
ee920 | 20 62 65 20 73 65 74 75 70 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 73 75 62 73 65 | .be.setup.and.will.be.used.subse |
ee940 | 71 75 65 6e 74 69 61 6c 6c 79 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 00 53 69 6e 63 65 20 74 | quentially..For.example:.Since.t |
ee960 | 68 65 20 6d 44 4e 53 20 70 72 6f 74 6f 63 6f 6c 20 73 65 6e 64 73 20 74 68 65 20 3a 61 62 62 72 | he.mDNS.protocol.sends.the.:abbr |
ee980 | 3a 60 41 41 28 41 75 74 68 6f 72 69 74 61 74 69 76 65 20 41 6e 73 77 65 72 29 60 20 72 65 63 6f | :`AA(Authoritative.Answer)`.reco |
ee9a0 | 72 64 73 20 69 6e 20 74 68 65 20 70 61 63 6b 65 74 20 69 74 73 65 6c 66 2c 20 74 68 65 20 72 65 | rds.in.the.packet.itself,.the.re |
ee9c0 | 70 65 61 74 65 72 20 64 6f 65 73 20 6e 6f 74 20 6e 65 65 64 20 74 6f 20 66 6f 72 67 65 20 74 68 | peater.does.not.need.to.forge.th |
ee9e0 | 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2e 20 49 6e 73 74 65 61 64 2c 20 74 68 65 20 73 | e.source.address..Instead,.the.s |
eea00 | 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 69 73 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 | ource.address.is.of.the.interfac |
eea20 | 65 20 74 68 61 74 20 72 65 70 65 61 74 73 20 74 68 65 20 70 61 63 6b 65 74 2e 00 53 69 6e 63 65 | e.that.repeats.the.packet..Since |
eea40 | 20 74 68 65 20 6d 44 4e 53 20 70 72 6f 74 6f 63 6f 6c 20 73 65 6e 64 73 20 74 68 65 20 41 41 20 | .the.mDNS.protocol.sends.the.AA. |
eea60 | 72 65 63 6f 72 64 73 20 69 6e 20 74 68 65 20 70 61 63 6b 65 74 20 69 74 73 65 6c 66 2c 20 74 68 | records.in.the.packet.itself,.th |
eea80 | 65 20 72 65 70 65 61 74 65 72 20 64 6f 65 73 20 6e 6f 74 20 6e 65 65 64 20 74 6f 20 66 6f 72 67 | e.repeater.does.not.need.to.forg |
eeaa0 | 65 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2e 20 49 6e 73 74 65 61 64 2c 20 74 | e.the.source.address..Instead,.t |
eeac0 | 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 69 73 20 6f 66 20 74 68 65 20 69 6e 74 65 | he.source.address.is.of.the.inte |
eeae0 | 72 66 61 63 65 20 74 68 61 74 20 72 65 70 65 61 74 73 20 74 68 65 20 70 61 63 6b 65 74 2e 00 53 | rface.that.repeats.the.packet..S |
eeb00 | 69 6e 63 65 20 77 65 20 61 72 65 20 61 6e 61 6c 79 7a 69 6e 67 20 61 74 74 61 63 6b 73 20 74 6f | ince.we.are.analyzing.attacks.to |
eeb20 | 20 61 6e 64 20 66 72 6f 6d 20 6f 75 72 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 2c 20 | .and.from.our.internal.network,. |
eeb40 | 74 77 6f 20 74 79 70 65 73 20 6f 66 20 61 74 74 61 63 6b 73 20 63 61 6e 20 62 65 20 69 64 65 6e | two.types.of.attacks.can.be.iden |
eeb60 | 74 69 66 69 65 64 2c 20 61 6e 64 20 64 69 66 66 65 72 65 6e 74 73 20 61 63 74 69 6f 6e 73 20 61 | tified,.and.differents.actions.a |
eeb80 | 72 65 20 6e 65 65 64 65 64 3a 00 53 69 6e 67 6c 65 20 56 58 4c 41 4e 20 64 65 76 69 63 65 20 28 | re.needed:.Single.VXLAN.device.( |
eeba0 | 53 56 44 29 00 53 69 74 65 20 74 6f 20 53 69 74 65 20 56 50 4e 00 53 69 74 65 2d 74 6f 2d 53 69 | SVD).Site.to.Site.VPN.Site-to-Si |
eebc0 | 74 65 00 53 69 74 65 2d 74 6f 2d 73 69 74 65 20 6d 6f 64 65 20 70 72 6f 76 69 64 65 73 20 61 20 | te.Site-to-site.mode.provides.a. |
eebe0 | 77 61 79 20 74 6f 20 61 64 64 20 72 65 6d 6f 74 65 20 70 65 65 72 73 2c 20 77 68 69 63 68 20 63 | way.to.add.remote.peers,.which.c |
eec00 | 6f 75 6c 64 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 65 78 63 68 61 6e 67 65 20 65 | ould.be.configured.to.exchange.e |
eec20 | 6e 63 72 79 70 74 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 74 68 65 | ncrypted.information.between.the |
eec40 | 6d 20 61 6e 64 20 56 79 4f 53 20 69 74 73 65 6c 66 20 6f 72 20 63 6f 6e 6e 65 63 74 65 64 2f 72 | m.and.VyOS.itself.or.connected/r |
eec60 | 6f 75 74 65 64 20 6e 65 74 77 6f 72 6b 73 2e 00 53 69 74 65 2d 74 6f 2d 73 69 74 65 20 6d 6f 64 | outed.networks..Site-to-site.mod |
eec80 | 65 20 73 75 70 70 6f 72 74 73 20 78 2e 35 30 39 20 62 75 74 20 64 6f 65 73 6e 27 74 20 72 65 71 | e.supports.x.509.but.doesn't.req |
eeca0 | 75 69 72 65 20 69 74 20 61 6e 64 20 63 61 6e 20 61 6c 73 6f 20 77 6f 72 6b 20 77 69 74 68 20 73 | uire.it.and.can.also.work.with.s |
eecc0 | 74 61 74 69 63 20 6b 65 79 73 2c 20 77 68 69 63 68 20 69 73 20 73 69 6d 70 6c 65 72 20 69 6e 20 | tatic.keys,.which.is.simpler.in. |
eece0 | 6d 61 6e 79 20 63 61 73 65 73 2e 20 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 2c 20 77 65 27 | many.cases..In.this.example,.we' |
eed00 | 6c 6c 20 63 6f 6e 66 69 67 75 72 65 20 61 20 73 69 6d 70 6c 65 20 73 69 74 65 2d 74 6f 2d 73 69 | ll.configure.a.simple.site-to-si |
eed20 | 74 65 20 4f 70 65 6e 56 50 4e 20 74 75 6e 6e 65 6c 20 75 73 69 6e 67 20 61 20 32 30 34 38 2d 62 | te.OpenVPN.tunnel.using.a.2048-b |
eed40 | 69 74 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 2e 00 53 69 7a 65 20 6f 66 20 74 68 65 20 52 | it.pre-shared.key..Size.of.the.R |
eed60 | 53 41 20 6b 65 79 2e 00 53 6c 61 76 65 20 73 65 6c 65 63 74 69 6f 6e 20 66 6f 72 20 6f 75 74 67 | SA.key..Slave.selection.for.outg |
eed80 | 6f 69 6e 67 20 74 72 61 66 66 69 63 20 69 73 20 64 6f 6e 65 20 61 63 63 6f 72 64 69 6e 67 20 74 | oing.traffic.is.done.according.t |
eeda0 | 6f 20 74 68 65 20 74 72 61 6e 73 6d 69 74 20 68 61 73 68 20 70 6f 6c 69 63 79 2c 20 77 68 69 63 | o.the.transmit.hash.policy,.whic |
eedc0 | 68 20 6d 61 79 20 62 65 20 63 68 61 6e 67 65 64 20 66 72 6f 6d 20 74 68 65 20 64 65 66 61 75 6c | h.may.be.changed.from.the.defaul |
eede0 | 74 20 73 69 6d 70 6c 65 20 58 4f 52 20 70 6f 6c 69 63 79 20 76 69 61 20 74 68 65 20 3a 63 66 67 | t.simple.XOR.policy.via.the.:cfg |
eee00 | 63 6d 64 3a 60 68 61 73 68 2d 70 6f 6c 69 63 79 60 20 6f 70 74 69 6f 6e 2c 20 64 6f 63 75 6d 65 | cmd:`hash-policy`.option,.docume |
eee20 | 6e 74 65 64 20 62 65 6c 6f 77 2e 00 53 6f 20 69 6e 20 6f 75 72 20 66 69 72 65 77 61 6c 6c 20 70 | nted.below..So.in.our.firewall.p |
eee40 | 6f 6c 69 63 79 2c 20 77 65 20 77 61 6e 74 20 74 6f 20 61 6c 6c 6f 77 20 74 72 61 66 66 69 63 20 | olicy,.we.want.to.allow.traffic. |
eee60 | 63 6f 6d 69 6e 67 20 69 6e 20 6f 6e 20 74 68 65 20 6f 75 74 73 69 64 65 20 69 6e 74 65 72 66 61 | coming.in.on.the.outside.interfa |
eee80 | 63 65 2c 20 64 65 73 74 69 6e 65 64 20 66 6f 72 20 54 43 50 20 70 6f 72 74 20 38 30 20 61 6e 64 | ce,.destined.for.TCP.port.80.and |
eeea0 | 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 | .the.IP.address.of.192.168.0.100 |
eeec0 | 2e 00 53 6f 20 69 6e 20 6f 75 72 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 65 74 2c 20 77 65 | ..So.in.our.firewall.ruleset,.we |
eeee0 | 20 77 61 6e 74 20 74 6f 20 61 6c 6c 6f 77 20 74 72 61 66 66 69 63 20 77 68 69 63 68 20 70 72 65 | .want.to.allow.traffic.which.pre |
eef00 | 76 69 6f 75 73 6c 79 20 6d 61 74 63 68 65 64 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6e 61 | viously.matched.a.destination.na |
eef20 | 74 20 72 75 6c 65 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 61 76 6f 69 64 20 63 72 65 61 74 69 | t.rule..In.order.to.avoid.creati |
eef40 | 6e 67 20 6d 61 6e 79 20 72 75 6c 65 73 2c 20 6f 6e 65 20 66 6f 72 20 65 61 63 68 20 64 65 73 74 | ng.many.rules,.one.for.each.dest |
eef60 | 69 6e 61 74 69 6f 6e 20 6e 61 74 20 72 75 6c 65 2c 20 77 65 20 63 61 6e 20 61 63 63 65 70 74 20 | ination.nat.rule,.we.can.accept. |
eef80 | 61 6c 6c 20 2a 2a 27 64 6e 61 74 27 2a 2a 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 77 69 74 68 20 | all.**'dnat'**.connections.with. |
eefa0 | 6f 6e 65 20 73 69 6d 70 6c 65 20 72 75 6c 65 2c 20 75 73 69 6e 67 20 60 60 63 6f 6e 6e 65 63 74 | one.simple.rule,.using.``connect |
eefc0 | 69 6f 6e 2d 73 74 61 74 75 73 60 60 20 6d 61 74 63 68 65 72 3a 00 53 6f 2c 20 66 69 72 65 77 61 | ion-status``.matcher:.So,.firewa |
eefe0 | 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6e 65 65 64 65 64 20 66 6f 72 20 74 68 69 73 | ll.configuration.needed.for.this |
ef000 | 20 73 65 74 75 70 3a 00 53 6f 6c 61 72 57 69 6e 64 73 00 53 6f 6d 65 20 49 53 50 73 20 62 79 20 | .setup:.SolarWinds.Some.ISPs.by. |
ef020 | 64 65 66 61 75 6c 74 20 6f 6e 6c 79 20 64 65 6c 65 67 61 74 65 20 61 20 2f 36 34 20 70 72 65 66 | default.only.delegate.a./64.pref |
ef040 | 69 78 2e 20 54 6f 20 72 65 71 75 65 73 74 20 66 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 70 72 | ix..To.request.for.a.specific.pr |
ef060 | 65 66 69 78 20 73 69 7a 65 20 75 73 65 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 74 6f 20 72 65 71 | efix.size.use.this.option.to.req |
ef080 | 75 65 73 74 20 66 6f 72 20 61 20 62 69 67 67 65 72 20 64 65 6c 65 67 61 74 69 6f 6e 20 66 6f 72 | uest.for.a.bigger.delegation.for |
ef0a0 | 20 74 68 69 73 20 70 64 20 60 3c 69 64 3e 60 2e 20 54 68 69 73 20 76 61 6c 75 65 20 69 73 20 69 | .this.pd.`<id>`..This.value.is.i |
ef0c0 | 6e 20 74 68 65 20 72 61 6e 67 65 20 66 72 6f 6d 20 33 32 20 2d 20 36 34 20 73 6f 20 79 6f 75 20 | n.the.range.from.32.-.64.so.you. |
ef0e0 | 63 6f 75 6c 64 20 72 65 71 75 65 73 74 20 75 70 20 74 6f 20 61 20 2f 33 32 20 70 72 65 66 69 78 | could.request.up.to.a./32.prefix |
ef100 | 20 28 69 66 20 79 6f 75 72 20 49 53 50 20 61 6c 6c 6f 77 73 20 74 68 69 73 29 20 64 6f 77 6e 20 | .(if.your.ISP.allows.this).down. |
ef120 | 74 6f 20 61 20 2f 36 34 20 64 65 6c 65 67 61 74 69 6f 6e 2e 00 53 6f 6d 65 20 49 54 20 65 6e 76 | to.a./64.delegation..Some.IT.env |
ef140 | 69 72 6f 6e 6d 65 6e 74 73 20 72 65 71 75 69 72 65 20 74 68 65 20 75 73 65 20 6f 66 20 61 20 70 | ironments.require.the.use.of.a.p |
ef160 | 72 6f 78 79 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 49 6e 74 65 72 6e 65 74 2e | roxy.to.connect.to.the.Internet. |
ef180 | 20 57 69 74 68 6f 75 74 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 56 79 4f 53 | .Without.this.configuration.VyOS |
ef1a0 | 20 75 70 64 61 74 65 73 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 69 6e 73 74 61 6c 6c 65 64 20 | .updates.could.not.be.installed. |
ef1c0 | 64 69 72 65 63 74 6c 79 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 3a 6f 70 63 6d 64 3a 60 61 64 | directly.by.using.the.:opcmd:`ad |
ef1e0 | 64 20 73 79 73 74 65 6d 20 69 6d 61 67 65 60 20 63 6f 6d 6d 61 6e 64 20 28 3a 72 65 66 3a 60 75 | d.system.image`.command.(:ref:`u |
ef200 | 70 64 61 74 65 5f 76 79 6f 73 60 29 2e 00 53 6f 6d 65 20 52 41 44 49 55 53 20 73 65 76 65 72 73 | pdate_vyos`)..Some.RADIUS.severs |
ef220 | 20 75 73 65 20 61 6e 20 61 63 63 65 73 73 20 63 6f 6e 74 72 6f 6c 20 6c 69 73 74 20 77 68 69 63 | .use.an.access.control.list.whic |
ef240 | 68 20 61 6c 6c 6f 77 73 20 6f 72 20 64 65 6e 69 65 73 20 71 75 65 72 69 65 73 2c 20 6d 61 6b 65 | h.allows.or.denies.queries,.make |
ef260 | 20 73 75 72 65 20 74 6f 20 61 64 64 20 79 6f 75 72 20 56 79 4f 53 20 72 6f 75 74 65 72 20 74 6f | .sure.to.add.your.VyOS.router.to |
ef280 | 20 74 68 65 20 61 6c 6c 6f 77 65 64 20 63 6c 69 65 6e 74 20 6c 69 73 74 2e 00 53 6f 6d 65 20 52 | .the.allowed.client.list..Some.R |
ef2a0 | 41 44 49 55 53 5f 20 73 65 76 65 72 73 20 75 73 65 20 61 6e 20 61 63 63 65 73 73 20 63 6f 6e 74 | ADIUS_.severs.use.an.access.cont |
ef2c0 | 72 6f 6c 20 6c 69 73 74 20 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 6f 72 20 64 65 6e 69 65 73 20 | rol.list.which.allows.or.denies. |
ef2e0 | 71 75 65 72 69 65 73 2c 20 6d 61 6b 65 20 73 75 72 65 20 74 6f 20 61 64 64 20 79 6f 75 72 20 56 | queries,.make.sure.to.add.your.V |
ef300 | 79 4f 53 20 72 6f 75 74 65 72 20 74 6f 20 74 68 65 20 61 6c 6c 6f 77 65 64 20 63 6c 69 65 6e 74 | yOS.router.to.the.allowed.client |
ef320 | 20 6c 69 73 74 2e 00 53 6f 6d 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 73 65 72 76 69 63 65 20 | .list..Some.application.service. |
ef340 | 70 72 6f 76 69 64 65 72 73 20 28 41 53 50 73 29 20 6f 70 65 72 61 74 65 20 61 20 56 50 4e 20 67 | providers.(ASPs).operate.a.VPN.g |
ef360 | 61 74 65 77 61 79 20 74 6f 20 70 72 6f 76 69 64 65 20 61 63 63 65 73 73 20 74 6f 20 74 68 65 69 | ateway.to.provide.access.to.thei |
ef380 | 72 20 69 6e 74 65 72 6e 61 6c 20 72 65 73 6f 75 72 63 65 73 2c 20 61 6e 64 20 72 65 71 75 69 72 | r.internal.resources,.and.requir |
ef3a0 | 65 20 74 68 61 74 20 61 20 63 6f 6e 6e 65 63 74 69 6e 67 20 6f 72 67 61 6e 69 73 61 74 69 6f 6e | e.that.a.connecting.organisation |
ef3c0 | 20 74 72 61 6e 73 6c 61 74 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 74 6f 20 74 68 65 20 73 65 | .translate.all.traffic.to.the.se |
ef3e0 | 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 6e 65 74 77 6f 72 6b 20 74 6f 20 61 20 73 6f 75 72 | rvice.provider.network.to.a.sour |
ef400 | 63 65 20 61 64 64 72 65 73 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 74 68 65 20 41 53 50 2e 00 | ce.address.provided.by.the.ASP.. |
ef420 | 53 6f 6d 65 20 63 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 73 74 72 69 65 73 20 72 65 71 75 69 72 | Some.container.registries.requir |
ef440 | 65 20 63 72 65 64 65 6e 74 69 61 6c 73 20 74 6f 20 62 65 20 75 73 65 64 2e 00 53 6f 6d 65 20 66 | e.credentials.to.be.used..Some.f |
ef460 | 69 72 65 77 61 6c 6c 20 73 65 74 74 69 6e 67 73 20 61 72 65 20 67 6c 6f 62 61 6c 20 61 6e 64 20 | irewall.settings.are.global.and. |
ef480 | 68 61 76 65 20 61 6e 20 61 66 66 65 63 74 20 6f 6e 20 74 68 65 20 77 68 6f 6c 65 20 73 79 73 74 | have.an.affect.on.the.whole.syst |
ef4a0 | 65 6d 2e 00 53 6f 6d 65 20 66 69 72 65 77 61 6c 6c 20 73 65 74 74 69 6e 67 73 20 61 72 65 20 67 | em..Some.firewall.settings.are.g |
ef4c0 | 6c 6f 62 61 6c 20 61 6e 64 20 68 61 76 65 20 61 6e 20 61 66 66 65 63 74 20 6f 6e 20 74 68 65 20 | lobal.and.have.an.affect.on.the. |
ef4e0 | 77 68 6f 6c 65 20 73 79 73 74 65 6d 2e 20 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 | whole.system..In.this.section.th |
ef500 | 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 | ere's.useful.information.about.t |
ef520 | 68 65 73 65 20 67 6c 6f 62 61 6c 2d 6f 70 74 69 6f 6e 73 20 74 68 61 74 20 63 61 6e 20 62 65 20 | hese.global-options.that.can.be. |
ef540 | 63 6f 6e 66 69 67 75 72 65 64 20 75 73 69 6e 67 20 76 79 6f 73 20 63 6c 69 2e 00 53 6f 6d 65 20 | configured.using.vyos.cli..Some. |
ef560 | 70 6f 6c 69 63 69 65 73 20 61 6c 72 65 61 64 79 20 69 6e 63 6c 75 64 65 20 6f 74 68 65 72 20 65 | policies.already.include.other.e |
ef580 | 6d 62 65 64 64 65 64 20 70 6f 6c 69 63 69 65 73 20 69 6e 73 69 64 65 2e 20 54 68 61 74 20 69 73 | mbedded.policies.inside..That.is |
ef5a0 | 20 74 68 65 20 63 61 73 65 20 6f 66 20 53 68 61 70 65 72 5f 3a 20 65 61 63 68 20 6f 66 20 69 74 | .the.case.of.Shaper_:.each.of.it |
ef5c0 | 73 20 63 6c 61 73 73 65 73 20 75 73 65 20 66 61 69 72 2d 71 75 65 75 65 20 75 6e 6c 65 73 73 20 | s.classes.use.fair-queue.unless. |
ef5e0 | 79 6f 75 20 63 68 61 6e 67 65 20 69 74 2e 00 53 6f 6d 65 20 70 6f 6c 69 63 69 65 73 20 63 61 6e | you.change.it..Some.policies.can |
ef600 | 20 62 65 20 63 6f 6d 62 69 6e 65 64 2c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 | .be.combined,.you.will.be.able.t |
ef620 | 6f 20 65 6d 62 65 64 5f 20 61 20 64 69 66 66 65 72 65 6e 74 20 70 6f 6c 69 63 79 20 74 68 61 74 | o.embed_.a.different.policy.that |
ef640 | 20 77 69 6c 6c 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 20 63 6c 61 73 73 20 6f 66 20 74 | .will.be.applied.to.a.class.of.t |
ef660 | 68 65 20 6d 61 69 6e 20 70 6f 6c 69 63 79 2e 00 53 6f 6d 65 20 70 72 6f 78 79 73 20 72 65 71 75 | he.main.policy..Some.proxys.requ |
ef680 | 69 72 65 2f 73 75 70 70 6f 72 74 20 74 68 65 20 22 62 61 73 69 63 22 20 48 54 54 50 20 61 75 74 | ire/support.the."basic".HTTP.aut |
ef6a0 | 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 63 68 65 6d 65 20 61 73 20 70 65 72 20 3a 72 66 63 3a 60 | hentication.scheme.as.per.:rfc:` |
ef6c0 | 37 36 31 37 60 2c 20 74 68 75 73 20 61 20 70 61 73 73 77 6f 72 64 20 63 61 6e 20 62 65 20 63 6f | 7617`,.thus.a.password.can.be.co |
ef6e0 | 6e 66 69 67 75 72 65 64 2e 00 53 6f 6d 65 20 70 72 6f 78 79 73 20 72 65 71 75 69 72 65 2f 73 75 | nfigured..Some.proxys.require/su |
ef700 | 70 70 6f 72 74 20 74 68 65 20 22 62 61 73 69 63 22 20 48 54 54 50 20 61 75 74 68 65 6e 74 69 63 | pport.the."basic".HTTP.authentic |
ef720 | 61 74 69 6f 6e 20 73 63 68 65 6d 65 20 61 73 20 70 65 72 20 3a 72 66 63 3a 60 37 36 31 37 60 2c | ation.scheme.as.per.:rfc:`7617`, |
ef740 | 20 74 68 75 73 20 61 20 75 73 65 72 6e 61 6d 65 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 | .thus.a.username.can.be.configur |
ef760 | 65 64 2e 00 53 6f 6d 65 20 72 65 63 65 6e 74 20 49 53 50 73 20 72 65 71 75 69 72 65 20 79 6f 75 | ed..Some.recent.ISPs.require.you |
ef780 | 20 74 6f 20 62 75 69 6c 64 20 74 68 65 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 | .to.build.the.PPPoE.connection.t |
ef7a0 | 68 72 6f 75 67 68 20 61 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 2e 20 4f 6e 65 20 6f 66 20 | hrough.a.VLAN.interface..One.of. |
ef7c0 | 74 68 6f 73 65 20 49 53 50 73 20 69 73 20 65 2e 67 2e 20 44 65 75 74 73 63 68 65 20 54 65 6c 65 | those.ISPs.is.e.g..Deutsche.Tele |
ef7e0 | 6b 6f 6d 20 69 6e 20 47 65 72 6d 61 6e 79 2e 20 56 79 4f 53 20 63 61 6e 20 65 61 73 69 6c 79 20 | kom.in.Germany..VyOS.can.easily. |
ef800 | 63 72 65 61 74 65 20 61 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 20 74 68 72 6f 75 67 68 20 61 | create.a.PPPoE.session.through.a |
ef820 | 6e 20 65 6e 63 61 70 73 75 6c 61 74 65 64 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 2e 20 54 | n.encapsulated.VLAN.interface..T |
ef840 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 | he.following.configuration.will. |
ef860 | 72 75 6e 20 79 6f 75 72 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 68 72 6f 75 67 | run.your.PPPoE.connection.throug |
ef880 | 68 20 56 4c 41 4e 37 20 77 68 69 63 68 20 69 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 4c 41 | h.VLAN7.which.is.the.default.VLA |
ef8a0 | 4e 20 66 6f 72 20 44 65 75 74 73 63 68 65 20 54 65 6c 65 6b 6f 6d 3a 00 53 6f 6d 65 20 73 65 72 | N.for.Deutsche.Telekom:.Some.ser |
ef8c0 | 76 69 63 65 73 20 64 6f 6e 27 74 20 77 6f 72 6b 20 63 6f 72 72 65 63 74 6c 79 20 77 68 65 6e 20 | vices.don't.work.correctly.when. |
ef8e0 | 62 65 69 6e 67 20 68 61 6e 64 6c 65 64 20 76 69 61 20 61 20 77 65 62 20 70 72 6f 78 79 2e 20 53 | being.handled.via.a.web.proxy..S |
ef900 | 6f 20 73 6f 6d 65 74 69 6d 65 73 20 69 74 20 69 73 20 75 73 65 66 75 6c 20 74 6f 20 62 79 70 61 | o.sometimes.it.is.useful.to.bypa |
ef920 | 73 73 20 61 20 74 72 61 6e 73 70 61 72 65 6e 74 20 70 72 6f 78 79 3a 00 53 6f 6d 65 20 75 73 65 | ss.a.transparent.proxy:.Some.use |
ef940 | 72 73 20 74 65 6e 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 68 65 69 72 20 6d 6f 62 69 6c 65 20 | rs.tend.to.connect.their.mobile. |
ef960 | 64 65 76 69 63 65 73 20 75 73 69 6e 67 20 57 69 72 65 47 75 61 72 64 20 74 6f 20 74 68 65 69 72 | devices.using.WireGuard.to.their |
ef980 | 20 56 79 4f 53 20 72 6f 75 74 65 72 2e 20 54 6f 20 65 61 73 65 20 64 65 70 6c 6f 79 6d 65 6e 74 | .VyOS.router..To.ease.deployment |
ef9a0 | 20 6f 6e 65 20 63 61 6e 20 67 65 6e 65 72 61 74 65 20 61 20 22 70 65 72 20 6d 6f 62 69 6c 65 22 | .one.can.generate.a."per.mobile" |
ef9c0 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 56 79 4f 53 20 43 4c 49 | .configuration.from.the.VyOS.CLI |
ef9e0 | 2e 00 53 6f 6d 65 74 69 6d 65 73 20 6f 70 74 69 6f 6e 20 6c 69 6e 65 73 20 69 6e 20 74 68 65 20 | ..Sometimes.option.lines.in.the. |
efa00 | 67 65 6e 65 72 61 74 65 64 20 4f 70 65 6e 56 50 4e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | generated.OpenVPN.configuration. |
efa20 | 72 65 71 75 69 72 65 20 71 75 6f 74 65 73 2e 20 54 68 69 73 20 69 73 20 64 6f 6e 65 20 74 68 72 | require.quotes..This.is.done.thr |
efa40 | 6f 75 67 68 20 61 20 68 61 63 6b 20 6f 6e 20 6f 75 72 20 63 6f 6e 66 69 67 20 67 65 6e 65 72 61 | ough.a.hack.on.our.config.genera |
efa60 | 74 6f 72 2e 20 59 6f 75 20 63 61 6e 20 70 61 73 73 20 71 75 6f 74 65 73 20 75 73 69 6e 67 20 74 | tor..You.can.pass.quotes.using.t |
efa80 | 68 65 20 60 60 26 71 75 6f 74 3b 60 60 20 73 74 61 74 65 6d 65 6e 74 2e 00 53 6f 72 74 20 74 68 | he.``"``.statement..Sort.th |
efaa0 | 65 20 6f 75 74 70 75 74 20 62 79 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 6b 65 79 2e 20 50 | e.output.by.the.specified.key..P |
efac0 | 6f 73 73 69 62 6c 65 20 6b 65 79 73 3a 20 65 78 70 69 72 65 73 2c 20 69 61 69 64 5f 64 75 69 64 | ossible.keys:.expires,.iaid_duid |
efae0 | 2c 20 69 70 2c 20 6c 61 73 74 5f 63 6f 6d 6d 2c 20 70 6f 6f 6c 2c 20 72 65 6d 61 69 6e 69 6e 67 | ,.ip,.last_comm,.pool,.remaining |
efb00 | 2c 20 73 74 61 74 65 2c 20 74 79 70 65 20 28 64 65 66 61 75 6c 74 20 3d 20 69 70 29 00 53 6f 72 | ,.state,.type.(default.=.ip).Sor |
efb20 | 74 20 74 68 65 20 6f 75 74 70 75 74 20 62 79 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 6b 65 | t.the.output.by.the.specified.ke |
efb40 | 79 2e 20 50 6f 73 73 69 62 6c 65 20 6b 65 79 73 3a 20 69 70 2c 20 68 61 72 64 77 61 72 65 5f 61 | y..Possible.keys:.ip,.hardware_a |
efb60 | 64 64 72 65 73 73 2c 20 73 74 61 74 65 2c 20 73 74 61 72 74 2c 20 65 6e 64 2c 20 72 65 6d 61 69 | ddress,.state,.start,.end,.remai |
efb80 | 6e 69 6e 67 2c 20 70 6f 6f 6c 2c 20 68 6f 73 74 6e 61 6d 65 20 28 64 65 66 61 75 6c 74 20 3d 20 | ning,.pool,.hostname.(default.=. |
efba0 | 69 70 29 00 53 6f 75 72 63 65 20 41 64 64 72 65 73 73 00 53 6f 75 72 63 65 20 49 50 20 61 64 64 | ip).Source.Address.Source.IP.add |
efbc0 | 72 65 73 73 20 75 73 65 64 20 66 6f 72 20 56 58 4c 41 4e 20 75 6e 64 65 72 6c 61 79 2e 20 54 68 | ress.used.for.VXLAN.underlay..Th |
efbe0 | 69 73 20 69 73 20 6d 61 6e 64 61 74 6f 72 79 20 77 68 65 6e 20 75 73 69 6e 67 20 56 58 4c 41 4e | is.is.mandatory.when.using.VXLAN |
efc00 | 20 76 69 61 20 4c 32 56 50 4e 2f 45 56 50 4e 2e 00 53 6f 75 72 63 65 20 49 50 76 34 20 61 64 64 | .via.L2VPN/EVPN..Source.IPv4.add |
efc20 | 72 65 73 73 20 75 73 65 64 20 69 6e 20 61 6c 6c 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 71 | ress.used.in.all.RADIUS.server.q |
efc40 | 75 65 69 72 65 73 2e 00 53 6f 75 72 63 65 20 4e 41 54 20 72 75 6c 65 73 00 53 6f 75 72 63 65 20 | ueires..Source.NAT.rules.Source. |
efc60 | 50 72 65 66 69 78 00 53 6f 75 72 63 65 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f | Prefix.Source.all.connections.to |
efc80 | 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 73 20 66 72 6f 6d 20 67 69 76 65 6e 20 56 | .the.RADIUS.servers.from.given.V |
efca0 | 52 46 20 60 3c 6e 61 6d 65 3e 60 2e 00 53 6f 75 72 63 65 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 | RF.`<name>`..Source.all.connecti |
efcc0 | 6f 6e 73 20 74 6f 20 74 68 65 20 54 41 43 41 43 53 20 73 65 72 76 65 72 73 20 66 72 6f 6d 20 67 | ons.to.the.TACACS.servers.from.g |
efce0 | 69 76 65 6e 20 56 52 46 20 60 3c 6e 61 6d 65 3e 60 2e 00 53 6f 75 72 63 65 20 70 72 6f 74 6f 63 | iven.VRF.`<name>`..Source.protoc |
efd00 | 6f 6c 20 74 6f 20 6d 61 74 63 68 2e 00 53 6f 75 72 63 65 20 74 75 6e 6e 65 6c 20 66 72 6f 6d 20 | ol.to.match..Source.tunnel.from. |
efd20 | 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 00 53 6f 75 72 63 65 20 74 75 6e 6e 65 6c 20 66 72 | dummy.interface.Source.tunnel.fr |
efd40 | 6f 6d 20 6c 6f 6f 70 62 61 63 6b 73 00 53 70 61 6e 6e 69 6e 67 20 54 72 65 65 20 50 72 6f 74 6f | om.loopbacks.Spanning.Tree.Proto |
efd60 | 63 6f 6c 20 66 6f 72 77 61 72 64 69 6e 67 20 60 3c 64 65 6c 61 79 3e 60 20 69 6e 20 73 65 63 6f | col.forwarding.`<delay>`.in.seco |
efd80 | 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 31 35 29 2e 00 53 70 61 6e 6e 69 6e 67 20 54 72 65 65 | nds.(default:.15)..Spanning.Tree |
efda0 | 20 50 72 6f 74 6f 63 6f 6c 20 68 65 6c 6c 6f 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 20 60 3c | .Protocol.hello.advertisement.`< |
efdc0 | 69 6e 74 65 72 76 61 6c 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 | interval>`.in.seconds.(default:. |
efde0 | 32 29 2e 00 53 70 61 6e 6e 69 6e 67 20 54 72 65 65 20 50 72 6f 74 6f 63 6f 6c 20 69 73 20 6e 6f | 2)..Spanning.Tree.Protocol.is.no |
efe00 | 74 20 65 6e 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 69 6e 20 56 79 4f 53 2e 20 3a 72 | t.enabled.by.default.in.VyOS..:r |
efe20 | 65 66 3a 60 73 74 70 60 20 63 61 6e 20 62 65 20 65 61 73 69 6c 79 20 65 6e 61 62 6c 65 64 20 69 | ef:`stp`.can.be.easily.enabled.i |
efe40 | 66 20 6e 65 65 64 65 64 2e 00 53 70 61 74 69 61 6c 20 4d 75 6c 74 69 70 6c 65 78 69 6e 67 20 50 | f.needed..Spatial.Multiplexing.P |
efe60 | 6f 77 65 72 20 53 61 76 65 20 28 53 4d 50 53 29 20 73 65 74 74 69 6e 67 73 00 53 70 65 63 66 79 | ower.Save.(SMPS).settings.Specfy |
efe80 | 69 6e 67 20 6e 68 73 20 6d 61 6b 65 73 20 61 6c 6c 20 6d 75 6c 74 69 63 61 73 74 20 70 61 63 6b | ing.nhs.makes.all.multicast.pack |
efea0 | 65 74 73 20 74 6f 20 62 65 20 72 65 70 65 61 74 65 64 20 74 6f 20 65 61 63 68 20 73 74 61 74 69 | ets.to.be.repeated.to.each.stati |
efec0 | 63 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 6e 65 78 74 20 68 6f 70 2e 00 53 70 65 63 69 | cally.configured.next.hop..Speci |
efee0 | 66 69 65 73 20 3a 61 62 62 72 3a 60 4d 50 50 45 20 28 4d 69 63 72 6f 73 6f 66 74 20 50 6f 69 6e | fies.:abbr:`MPPE.(Microsoft.Poin |
eff00 | 74 2d 74 6f 2d 50 6f 69 6e 74 20 45 6e 63 72 79 70 74 69 6f 6e 29 60 20 6e 65 67 6f 74 69 61 74 | t-to-Point.Encryption)`.negotiat |
eff20 | 69 6f 6e 20 70 72 65 66 65 72 65 6e 63 65 2e 00 53 70 65 63 69 66 69 65 73 20 3a 61 62 62 72 3a | ion.preference..Specifies.:abbr: |
eff40 | 60 4d 50 50 45 20 28 4d 69 63 72 6f 73 6f 66 74 20 50 6f 69 6e 74 2d 74 6f 2d 50 6f 69 6e 74 20 | `MPPE.(Microsoft.Point-to-Point. |
eff60 | 45 6e 63 72 79 70 74 69 6f 6e 29 60 20 6e 65 67 6f 74 69 6f 61 74 69 6f 6e 20 70 72 65 66 65 72 | Encryption)`.negotioation.prefer |
eff80 | 65 6e 63 65 2e 00 53 70 65 63 69 66 69 65 73 20 49 50 20 61 64 64 72 65 73 73 20 66 6f 72 20 44 | ence..Specifies.IP.address.for.D |
effa0 | 79 6e 61 6d 69 63 20 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 45 78 74 65 6e 73 69 6f 6e 20 73 | ynamic.Authorization.Extension.s |
effc0 | 65 72 76 65 72 20 28 44 4d 2f 43 6f 41 29 00 53 70 65 63 69 66 69 65 73 20 49 50 76 34 20 6e 65 | erver.(DM/CoA).Specifies.IPv4.ne |
effe0 | 67 6f 74 69 61 74 69 6f 6e 20 70 72 65 66 65 72 65 6e 63 65 2e 00 53 70 65 63 69 66 69 65 73 20 | gotiation.preference..Specifies. |
f0000 | 49 50 76 36 20 6e 65 67 6f 74 69 61 74 69 6f 6e 20 70 72 65 66 65 72 65 6e 63 65 2e 00 53 70 65 | IPv6.negotiation.preference..Spe |
f0020 | 63 69 66 69 65 73 20 53 65 72 76 69 63 65 2d 4e 61 6d 65 20 74 6f 20 72 65 73 70 6f 6e 64 2e 20 | cifies.Service-Name.to.respond.. |
f0040 | 49 66 20 61 62 73 65 6e 74 20 61 6e 79 20 53 65 72 76 69 63 65 2d 4e 61 6d 65 20 69 73 20 61 63 | If.absent.any.Service-Name.is.ac |
f0060 | 63 65 70 74 61 62 6c 65 20 61 6e 64 20 63 6c 69 65 6e 74 e2 80 99 73 20 53 65 72 76 69 63 65 2d | ceptable.and.client...s.Service- |
f0080 | 4e 61 6d 65 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 62 61 63 6b 2e 20 41 6c 73 6f 20 70 6f 73 | Name.will.be.sent.back..Also.pos |
f00a0 | 73 69 62 6c 65 20 73 65 74 20 6d 75 6c 74 69 70 6c 65 20 73 65 72 76 69 63 65 2d 6e 61 6d 65 73 | sible.set.multiple.service-names |
f00c0 | 3a 20 60 73 6e 31 2c 73 6e 32 2c 73 6e 33 60 00 53 70 65 63 69 66 69 65 73 20 61 64 64 72 65 73 | :.`sn1,sn2,sn3`.Specifies.addres |
f00e0 | 73 20 74 6f 20 62 65 20 75 73 65 64 20 61 73 20 73 65 72 76 65 72 20 69 70 20 61 64 64 72 65 73 | s.to.be.used.as.server.ip.addres |
f0100 | 73 20 69 66 20 72 61 64 69 75 73 20 63 61 6e 20 61 73 73 69 67 6e 20 6f 6e 6c 79 20 63 6c 69 65 | s.if.radius.can.assign.only.clie |
f0120 | 6e 74 20 61 64 64 72 65 73 73 2e 20 49 6e 20 73 75 63 68 20 63 61 73 65 20 69 66 20 63 6c 69 65 | nt.address..In.such.case.if.clie |
f0140 | 6e 74 20 61 64 64 72 65 73 73 20 69 73 20 6d 61 74 63 68 65 64 20 6e 65 74 77 6f 72 6b 20 61 6e | nt.address.is.matched.network.an |
f0160 | 64 20 6d 61 73 6b 20 74 68 65 6e 20 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 20 61 6e | d.mask.then.specified.address.an |
f0180 | 64 20 6d 61 73 6b 20 77 69 6c 6c 20 62 65 20 75 73 65 64 2e 20 59 6f 75 20 63 61 6e 20 73 70 65 | d.mask.will.be.used..You.can.spe |
f01a0 | 63 69 66 79 20 6d 75 6c 74 69 70 6c 65 20 73 75 63 68 20 6f 70 74 69 6f 6e 73 2e 00 53 70 65 63 | cify.multiple.such.options..Spec |
f01c0 | 69 66 69 65 73 20 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 72 6f 75 74 65 2d 6d 61 70 20 74 6f 20 62 | ifies.an.optional.route-map.to.b |
f01e0 | 65 20 61 70 70 6c 69 65 64 20 74 6f 20 72 6f 75 74 65 73 20 69 6d 70 6f 72 74 65 64 20 6f 72 20 | e.applied.to.routes.imported.or. |
f0200 | 65 78 70 6f 72 74 65 64 20 62 65 74 77 65 65 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 75 6e 69 | exported.between.the.current.uni |
f0220 | 63 61 73 74 20 56 52 46 20 61 6e 64 20 56 50 4e 2e 00 53 70 65 63 69 66 69 65 73 20 61 6e 20 75 | cast.VRF.and.VPN..Specifies.an.u |
f0240 | 70 73 74 72 65 61 6d 20 6e 65 74 77 6f 72 6b 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 66 72 | pstream.network.`<interface>`.fr |
f0260 | 6f 6d 20 77 68 69 63 68 20 72 65 70 6c 69 65 73 20 66 72 6f 6d 20 60 3c 73 65 72 76 65 72 3e 60 | om.which.replies.from.`<server>` |
f0280 | 20 61 6e 64 20 6f 74 68 65 72 20 72 65 6c 61 79 20 61 67 65 6e 74 73 20 77 69 6c 6c 20 62 65 20 | .and.other.relay.agents.will.be. |
f02a0 | 61 63 63 65 70 74 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 66 69 78 65 64 20 6f 72 20 72 61 6e | accepted..Specifies.fixed.or.ran |
f02c0 | 64 6f 6d 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 49 50 76 | dom.interface.identifier.for.IPv |
f02e0 | 36 2e 20 42 79 20 64 65 66 61 75 6c 74 20 69 73 20 66 69 78 65 64 2e 00 53 70 65 63 69 66 69 65 | 6..By.default.is.fixed..Specifie |
f0300 | 73 20 68 6f 77 20 6c 6f 6e 67 20 73 71 75 69 64 20 61 73 73 75 6d 65 73 20 61 6e 20 65 78 74 65 | s.how.long.squid.assumes.an.exte |
f0320 | 72 6e 61 6c 6c 79 20 76 61 6c 69 64 61 74 65 64 20 75 73 65 72 6e 61 6d 65 3a 70 61 73 73 77 6f | rnally.validated.username:passwo |
f0340 | 72 64 20 70 61 69 72 20 69 73 20 76 61 6c 69 64 20 66 6f 72 20 2d 20 69 6e 20 6f 74 68 65 72 20 | rd.pair.is.valid.for.-.in.other. |
f0360 | 77 6f 72 64 73 20 68 6f 77 20 6f 66 74 65 6e 20 74 68 65 20 68 65 6c 70 65 72 20 70 72 6f 67 72 | words.how.often.the.helper.progr |
f0380 | 61 6d 20 69 73 20 63 61 6c 6c 65 64 20 66 6f 72 20 74 68 61 74 20 75 73 65 72 2e 20 53 65 74 20 | am.is.called.for.that.user..Set. |
f03a0 | 74 68 69 73 20 6c 6f 77 20 74 6f 20 66 6f 72 63 65 20 72 65 76 61 6c 69 64 61 74 69 6f 6e 20 77 | this.low.to.force.revalidation.w |
f03c0 | 69 74 68 20 73 68 6f 72 74 20 6c 69 76 65 64 20 70 61 73 73 77 6f 72 64 73 2e 00 53 70 65 63 69 | ith.short.lived.passwords..Speci |
f03e0 | 66 69 65 73 20 69 66 20 75 6e 6b 6e 6f 77 6e 20 73 6f 75 72 63 65 20 6c 69 6e 6b 20 6c 61 79 65 | fies.if.unknown.source.link.laye |
f0400 | 72 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 49 50 20 61 64 64 72 65 73 73 65 73 20 61 72 65 | r.addresses.and.IP.addresses.are |
f0420 | 20 65 6e 74 65 72 65 64 20 69 6e 74 6f 20 74 68 65 20 56 58 4c 41 4e 20 64 65 76 69 63 65 20 66 | .entered.into.the.VXLAN.device.f |
f0440 | 6f 72 77 61 72 64 69 6e 67 20 64 61 74 61 62 61 73 65 2e 00 53 70 65 63 69 66 69 65 73 20 6e 75 | orwarding.database..Specifies.nu |
f0460 | 6d 62 65 72 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 6b 65 65 70 20 69 6e 20 63 61 | mber.of.interfaces.to.keep.in.ca |
f0480 | 63 68 65 2e 20 49 74 20 6d 65 61 6e 73 20 74 68 61 74 20 64 6f 6e e2 80 99 74 20 64 65 73 74 72 | che..It.means.that.don...t.destr |
f04a0 | 6f 79 20 69 6e 74 65 72 66 61 63 65 20 61 66 74 65 72 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 | oy.interface.after.corresponding |
f04c0 | 20 73 65 73 73 69 6f 6e 20 69 73 20 64 65 73 74 72 6f 79 65 64 2c 20 69 6e 73 74 65 61 64 20 70 | .session.is.destroyed,.instead.p |
f04e0 | 6c 61 63 65 20 69 74 20 74 6f 20 63 61 63 68 65 20 61 6e 64 20 75 73 65 20 69 74 20 6c 61 74 65 | lace.it.to.cache.and.use.it.late |
f0500 | 72 20 66 6f 72 20 6e 65 77 20 73 65 73 73 69 6f 6e 73 20 72 65 70 65 61 74 65 64 6c 79 2e 20 54 | r.for.new.sessions.repeatedly..T |
f0520 | 68 69 73 20 73 68 6f 75 6c 64 20 72 65 64 75 63 65 20 6b 65 72 6e 65 6c 2d 6c 65 76 65 6c 20 69 | his.should.reduce.kernel-level.i |
f0540 | 6e 74 65 72 66 61 63 65 20 63 72 65 61 74 69 6f 6e 2f 64 65 6c 65 74 69 6f 6e 20 72 61 74 65 20 | nterface.creation/deletion.rate. |
f0560 | 6c 61 63 6b 2e 20 44 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 2a 2a 30 2a 2a 2e 00 53 70 | lack..Default.value.is.**0**..Sp |
f0580 | 65 63 69 66 69 65 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 62 6f 6e 64 69 6e 67 20 70 6f 6c 69 63 | ecifies.one.of.the.bonding.polic |
f05a0 | 69 65 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 38 30 32 2e 33 61 64 2e 20 50 6f 73 | ies..The.default.is.802.3ad..Pos |
f05c0 | 73 69 62 6c 65 20 76 61 6c 75 65 73 20 61 72 65 3a 00 53 70 65 63 69 66 69 65 73 20 70 65 65 72 | sible.values.are:.Specifies.peer |
f05e0 | 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 49 50 76 36 2e 20 | .interface.identifier.for.IPv6.. |
f0600 | 42 79 20 64 65 66 61 75 6c 74 20 69 73 20 66 69 78 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 70 | By.default.is.fixed..Specifies.p |
f0620 | 72 6f 78 79 20 73 65 72 76 69 63 65 20 6c 69 73 74 65 6e 69 6e 67 20 61 64 64 72 65 73 73 2e 20 | roxy.service.listening.address.. |
f0640 | 54 68 65 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 20 69 73 20 74 68 65 20 49 50 20 61 64 64 | The.listen.address.is.the.IP.add |
f0660 | 72 65 73 73 20 6f 6e 20 77 68 69 63 68 20 74 68 65 20 77 65 62 20 70 72 6f 78 79 20 73 65 72 76 | ress.on.which.the.web.proxy.serv |
f0680 | 69 63 65 20 6c 69 73 74 65 6e 73 20 66 6f 72 20 63 6c 69 65 6e 74 20 72 65 71 75 65 73 74 73 2e | ice.listens.for.client.requests. |
f06a0 | 00 53 70 65 63 69 66 69 65 73 20 72 65 6c 61 79 20 61 67 65 6e 74 20 49 50 20 61 64 64 72 65 00 | .Specifies.relay.agent.IP.addre. |
f06c0 | 53 70 65 63 69 66 69 65 73 20 73 69 6e 67 6c 65 20 60 3c 67 61 74 65 77 61 79 3e 60 20 49 50 20 | Specifies.single.`<gateway>`.IP. |
f06e0 | 61 64 64 72 65 73 73 20 74 6f 20 62 65 20 75 73 65 64 20 61 73 20 6c 6f 63 61 6c 20 61 64 64 72 | address.to.be.used.as.local.addr |
f0700 | 65 73 73 20 6f 66 20 50 50 50 20 69 6e 74 65 72 66 61 63 65 73 2e 00 53 70 65 63 69 66 69 65 73 | ess.of.PPP.interfaces..Specifies |
f0720 | 20 74 68 61 74 20 74 68 65 20 3a 61 62 62 72 3a 60 4e 42 4d 41 20 28 4e 6f 6e 2d 62 72 6f 61 64 | .that.the.:abbr:`NBMA.(Non-broad |
f0740 | 63 61 73 74 20 6d 75 6c 74 69 70 6c 65 2d 61 63 63 65 73 73 20 6e 65 74 77 6f 72 6b 29 60 20 61 | cast.multiple-access.network)`.a |
f0760 | 64 64 72 65 73 73 65 73 20 6f 66 20 74 68 65 20 6e 65 78 74 20 68 6f 70 20 73 65 72 76 65 72 73 | ddresses.of.the.next.hop.servers |
f0780 | 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 | .are.defined.in.the.domain.name. |
f07a0 | 6e 62 6d 61 2d 64 6f 6d 61 69 6e 2d 6e 61 6d 65 2e 20 46 6f 72 20 65 61 63 68 20 41 20 72 65 63 | nbma-domain-name..For.each.A.rec |
f07c0 | 6f 72 64 20 6f 70 65 6e 6e 68 72 70 20 63 72 65 61 74 65 73 20 61 20 64 79 6e 61 6d 69 63 20 4e | ord.opennhrp.creates.a.dynamic.N |
f07e0 | 48 53 20 65 6e 74 72 79 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 41 52 50 20 6c 69 6e 6b | HS.entry..Specifies.the.ARP.link |
f0800 | 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 60 3c 74 69 6d 65 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 2e | .monitoring.`<time>`.in.seconds. |
f0820 | 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 75 | .Specifies.the.IP.addresses.to.u |
f0840 | 73 65 20 61 73 20 41 52 50 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 70 65 65 72 73 20 77 68 65 6e 20 | se.as.ARP.monitoring.peers.when. |
f0860 | 3a 63 66 67 63 6d 64 3a 60 61 72 70 2d 6d 6f 6e 69 74 6f 72 20 69 6e 74 65 72 76 61 6c 60 20 6f | :cfgcmd:`arp-monitor.interval`.o |
f0880 | 70 74 69 6f 6e 20 69 73 20 3e 20 30 2e 20 54 68 65 73 65 20 61 72 65 20 74 68 65 20 74 61 72 67 | ption.is.>.0..These.are.the.targ |
f08a0 | 65 74 73 20 6f 66 20 74 68 65 20 41 52 50 20 72 65 71 75 65 73 74 20 73 65 6e 74 20 74 6f 20 64 | ets.of.the.ARP.request.sent.to.d |
f08c0 | 65 74 65 72 6d 69 6e 65 20 74 68 65 20 68 65 61 6c 74 68 20 6f 66 20 74 68 65 20 6c 69 6e 6b 20 | etermine.the.health.of.the.link. |
f08e0 | 74 6f 20 74 68 65 20 74 61 72 67 65 74 73 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 61 76 | to.the.targets..Specifies.the.av |
f0900 | 61 69 6c 61 62 6c 65 20 3a 61 62 62 72 3a 60 4d 41 43 20 28 4d 65 73 73 61 67 65 20 41 75 74 68 | ailable.:abbr:`MAC.(Message.Auth |
f0920 | 65 6e 74 69 63 61 74 69 6f 6e 20 43 6f 64 65 29 60 20 61 6c 67 6f 72 69 74 68 6d 73 2e 20 54 68 | entication.Code)`.algorithms..Th |
f0940 | 65 20 4d 41 43 20 61 6c 67 6f 72 69 74 68 6d 20 69 73 20 75 73 65 64 20 69 6e 20 70 72 6f 74 6f | e.MAC.algorithm.is.used.in.proto |
f0960 | 63 6f 6c 20 76 65 72 73 69 6f 6e 20 32 20 66 6f 72 20 64 61 74 61 20 69 6e 74 65 67 72 69 74 79 | col.version.2.for.data.integrity |
f0980 | 20 70 72 6f 74 65 63 74 69 6f 6e 2e 20 4d 75 6c 74 69 70 6c 65 20 61 6c 67 6f 72 69 74 68 6d 73 | .protection..Multiple.algorithms |
f09a0 | 20 63 61 6e 20 62 65 20 70 72 6f 76 69 64 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 | .can.be.provided..Specifies.the. |
f09c0 | 62 61 73 65 20 44 4e 20 75 6e 64 65 72 20 77 68 69 63 68 20 74 68 65 20 75 73 65 72 73 20 61 72 | base.DN.under.which.the.users.ar |
f09e0 | 65 20 6c 6f 63 61 74 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 63 6c 69 65 6e 74 73 | e.located..Specifies.the.clients |
f0a00 | 20 73 75 62 6e 65 74 20 6d 61 73 6b 20 61 73 20 70 65 72 20 52 46 43 20 39 35 30 2e 20 49 66 20 | .subnet.mask.as.per.RFC.950..If. |
f0a20 | 75 6e 73 65 74 2c 20 73 75 62 6e 65 74 20 64 65 63 6c 61 72 61 74 69 6f 6e 20 69 73 20 75 73 65 | unset,.subnet.declaration.is.use |
f0a40 | 64 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 68 6f 6c 64 69 6e 67 20 74 69 6d 65 20 66 6f | d..Specifies.the.holding.time.fo |
f0a60 | 72 20 4e 48 52 50 20 52 65 67 69 73 74 72 61 74 69 6f 6e 20 52 65 71 75 65 73 74 73 20 61 6e 64 | r.NHRP.Registration.Requests.and |
f0a80 | 20 52 65 73 6f 6c 75 74 69 6f 6e 20 52 65 70 6c 69 65 73 20 73 65 6e 74 20 66 72 6f 6d 20 74 68 | .Resolution.Replies.sent.from.th |
f0aa0 | 69 73 20 69 6e 74 65 72 66 61 63 65 20 6f 72 20 73 68 6f 72 74 63 75 74 2d 74 61 72 67 65 74 2e | is.interface.or.shortcut-target. |
f0ac0 | 20 54 68 65 20 68 6f 6c 64 74 69 6d 65 20 69 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 73 65 | .The.holdtime.is.specified.in.se |
f0ae0 | 63 6f 6e 64 73 20 61 6e 64 20 64 65 66 61 75 6c 74 73 20 74 6f 20 74 77 6f 20 68 6f 75 72 73 2e | conds.and.defaults.to.two.hours. |
f0b00 | 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 69 6e 74 65 72 76 61 6c 20 61 74 20 77 68 69 63 68 | .Specifies.the.interval.at.which |
f0b20 | 20 4e 65 74 66 6c 6f 77 20 64 61 74 61 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 74 6f 20 61 20 | .Netflow.data.will.be.sent.to.a. |
f0b40 | 63 6f 6c 6c 65 63 74 6f 72 2e 20 41 73 20 70 65 72 20 64 65 66 61 75 6c 74 2c 20 4e 65 74 66 6c | collector..As.per.default,.Netfl |
f0b60 | 6f 77 20 64 61 74 61 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 65 76 65 72 79 20 36 30 20 73 65 | ow.data.will.be.sent.every.60.se |
f0b80 | 63 6f 6e 64 73 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 73 69 7a | conds..Specifies.the.maximum.siz |
f0ba0 | 65 20 6f 66 20 61 20 72 65 70 6c 79 20 62 6f 64 79 20 69 6e 20 4b 42 2c 20 75 73 65 64 20 74 6f | e.of.a.reply.body.in.KB,.used.to |
f0bc0 | 20 6c 69 6d 69 74 20 74 68 65 20 72 65 70 6c 79 20 73 69 7a 65 2e 00 53 70 65 63 69 66 69 65 73 | .limit.the.reply.size..Specifies |
f0be0 | 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6c 69 6e 6b 73 20 74 68 61 | .the.minimum.number.of.links.tha |
f0c00 | 74 20 6d 75 73 74 20 62 65 20 61 63 74 69 76 65 20 62 65 66 6f 72 65 20 61 73 73 65 72 74 69 6e | t.must.be.active.before.assertin |
f0c20 | 67 20 63 61 72 72 69 65 72 2e 20 49 74 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 74 68 65 20 | g.carrier..It.is.similar.to.the. |
f0c40 | 43 69 73 63 6f 20 45 74 68 65 72 43 68 61 6e 6e 65 6c 20 6d 69 6e 2d 6c 69 6e 6b 73 20 66 65 61 | Cisco.EtherChannel.min-links.fea |
f0c60 | 74 75 72 65 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 73 65 74 74 69 6e 67 20 74 68 65 20 6d 69 | ture..This.allows.setting.the.mi |
f0c80 | 6e 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6d 65 6d 62 65 72 20 70 6f 72 74 73 20 74 68 61 | nimum.number.of.member.ports.tha |
f0ca0 | 74 20 6d 75 73 74 20 62 65 20 75 70 20 28 6c 69 6e 6b 2d 75 70 20 73 74 61 74 65 29 20 62 65 66 | t.must.be.up.(link-up.state).bef |
f0cc0 | 6f 72 65 20 6d 61 72 6b 69 6e 67 20 74 68 65 20 62 6f 6e 64 20 64 65 76 69 63 65 20 61 73 20 75 | ore.marking.the.bond.device.as.u |
f0ce0 | 70 20 28 63 61 72 72 69 65 72 20 6f 6e 29 2e 20 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 66 | p.(carrier.on)..This.is.useful.f |
f0d00 | 6f 72 20 73 69 74 75 61 74 69 6f 6e 73 20 77 68 65 72 65 20 68 69 67 68 65 72 20 6c 65 76 65 6c | or.situations.where.higher.level |
f0d20 | 20 73 65 72 76 69 63 65 73 20 73 75 63 68 20 61 73 20 63 6c 75 73 74 65 72 69 6e 67 20 77 61 6e | .services.such.as.clustering.wan |
f0d40 | 74 20 74 6f 20 65 6e 73 75 72 65 20 61 20 6d 69 6e 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 | t.to.ensure.a.minimum.number.of. |
f0d60 | 6c 6f 77 20 62 61 6e 64 77 69 64 74 68 20 6c 69 6e 6b 73 20 61 72 65 20 61 63 74 69 76 65 20 62 | low.bandwidth.links.are.active.b |
f0d80 | 65 66 6f 72 65 20 73 77 69 74 63 68 6f 76 65 72 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 | efore.switchover..Specifies.the. |
f0da0 | 6e 61 6d 65 20 6f 66 20 74 68 65 20 44 4e 20 61 74 74 72 69 62 75 74 65 20 74 68 61 74 20 63 6f | name.of.the.DN.attribute.that.co |
f0dc0 | 6e 74 61 69 6e 73 20 74 68 65 20 75 73 65 72 6e 61 6d 65 2f 6c 6f 67 69 6e 2e 20 43 6f 6d 62 69 | ntains.the.username/login..Combi |
f0de0 | 6e 65 64 20 77 69 74 68 20 74 68 65 20 62 61 73 65 20 44 4e 20 74 6f 20 63 6f 6e 73 74 72 75 63 | ned.with.the.base.DN.to.construc |
f0e00 | 74 20 74 68 65 20 75 73 65 72 73 20 44 4e 20 77 68 65 6e 20 6e 6f 20 73 65 61 72 63 68 20 66 69 | t.the.users.DN.when.no.search.fi |
f0e20 | 6c 74 65 72 20 69 73 20 73 70 65 63 69 66 69 65 64 20 28 60 66 69 6c 74 65 72 2d 65 78 70 72 65 | lter.is.specified.(`filter-expre |
f0e40 | 73 73 69 6f 6e 60 29 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 70 68 79 73 69 63 61 6c 20 | ssion`)..Specifies.the.physical. |
f0e60 | 60 3c 65 74 68 58 3e 60 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 20 61 73 73 6f | `<ethX>`.Ethernet.interface.asso |
f0e80 | 63 69 61 74 65 64 20 77 69 74 68 20 61 20 50 73 65 75 64 6f 20 45 74 68 65 72 6e 65 74 20 60 3c | ciated.with.a.Pseudo.Ethernet.`< |
f0ea0 | 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 70 6f 72 74 20 | interface>`..Specifies.the.port. |
f0ec0 | 60 3c 70 6f 72 74 3e 60 20 74 68 61 74 20 74 68 65 20 53 53 54 50 20 70 6f 72 74 20 77 69 6c 6c | `<port>`.that.the.SSTP.port.will |
f0ee0 | 20 6c 69 73 74 65 6e 20 6f 6e 20 28 64 65 66 61 75 6c 74 20 34 34 33 29 2e 00 53 70 65 63 69 66 | .listen.on.(default.443)..Specif |
f0f00 | 69 65 73 20 74 68 65 20 70 72 6f 74 65 63 74 69 6f 6e 20 73 63 6f 70 65 20 28 61 6b 61 20 72 65 | ies.the.protection.scope.(aka.re |
f0f20 | 61 6c 6d 20 6e 61 6d 65 29 20 77 68 69 63 68 20 69 73 20 74 6f 20 62 65 20 72 65 70 6f 72 74 65 | alm.name).which.is.to.be.reporte |
f0f40 | 64 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 20 66 6f 72 20 74 68 65 20 61 75 74 68 65 6e 74 69 | d.to.the.client.for.the.authenti |
f0f60 | 63 61 74 69 6f 6e 20 73 63 68 65 6d 65 2e 20 49 74 20 69 73 20 63 6f 6d 6d 6f 6e 6c 79 20 70 61 | cation.scheme..It.is.commonly.pa |
f0f80 | 72 74 20 6f 66 20 74 68 65 20 74 65 78 74 20 74 68 65 20 75 73 65 72 20 77 69 6c 6c 20 73 65 65 | rt.of.the.text.the.user.will.see |
f0fa0 | 20 77 68 65 6e 20 70 72 6f 6d 70 74 65 64 20 66 6f 72 20 74 68 65 69 72 20 75 73 65 72 6e 61 6d | .when.prompted.for.their.usernam |
f0fc0 | 65 20 61 6e 64 20 70 61 73 73 77 6f 72 64 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 72 6f | e.and.password..Specifies.the.ro |
f0fe0 | 75 74 65 20 64 69 73 74 69 6e 67 75 69 73 68 65 72 20 74 6f 20 62 65 20 61 64 64 65 64 20 74 6f | ute.distinguisher.to.be.added.to |
f1000 | 20 61 20 72 6f 75 74 65 20 65 78 70 6f 72 74 65 64 20 66 72 6f 6d 20 74 68 65 20 63 75 72 72 65 | .a.route.exported.from.the.curre |
f1020 | 6e 74 20 75 6e 69 63 61 73 74 20 56 52 46 20 74 6f 20 56 50 4e 2e 00 53 70 65 63 69 66 69 65 73 | nt.unicast.VRF.to.VPN..Specifies |
f1040 | 20 74 68 65 20 72 6f 75 74 65 2d 74 61 72 67 65 74 20 6c 69 73 74 20 74 6f 20 62 65 20 61 74 74 | .the.route-target.list.to.be.att |
f1060 | 61 63 68 65 64 20 74 6f 20 61 20 72 6f 75 74 65 20 28 65 78 70 6f 72 74 29 20 6f 72 20 74 68 65 | ached.to.a.route.(export).or.the |
f1080 | 20 72 6f 75 74 65 2d 74 61 72 67 65 74 20 6c 69 73 74 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 | .route-target.list.to.match.agai |
f10a0 | 6e 73 74 20 28 69 6d 70 6f 72 74 29 20 77 68 65 6e 20 65 78 70 6f 72 74 69 6e 67 2f 69 6d 70 6f | nst.(import).when.exporting/impo |
f10c0 | 72 74 69 6e 67 20 62 65 74 77 65 65 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 75 6e 69 63 61 73 | rting.between.the.current.unicas |
f10e0 | 74 20 56 52 46 20 61 6e 64 20 56 50 4e 2e 54 68 65 20 52 54 4c 49 53 54 20 69 73 20 61 20 73 70 | t.VRF.and.VPN.The.RTLIST.is.a.sp |
f1100 | 61 63 65 2d 73 65 70 61 72 61 74 65 64 20 6c 69 73 74 20 6f 66 20 72 6f 75 74 65 2d 74 61 72 67 | ace-separated.list.of.route-targ |
f1120 | 65 74 73 2c 20 77 68 69 63 68 20 61 72 65 20 42 47 50 20 65 78 74 65 6e 64 65 64 20 63 6f 6d 6d | ets,.which.are.BGP.extended.comm |
f1140 | 75 6e 69 74 79 20 76 61 6c 75 65 73 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 45 78 74 | unity.values.as.described.in.Ext |
f1160 | 65 6e 64 65 64 20 43 6f 6d 6d 75 6e 69 74 69 65 73 20 41 74 74 72 69 62 75 74 65 2e 00 53 70 65 | ended.Communities.Attribute..Spe |
f1180 | 63 69 66 69 65 73 20 74 68 65 20 76 65 6e 64 6f 72 20 64 69 63 74 69 6f 6e 61 72 79 2c 20 64 69 | cifies.the.vendor.dictionary,.di |
f11a0 | 63 74 69 6f 6e 61 72 79 20 6e 65 65 64 73 20 74 6f 20 62 65 20 69 6e 20 2f 75 73 72 2f 73 68 61 | ctionary.needs.to.be.in./usr/sha |
f11c0 | 72 65 2f 61 63 63 65 6c 2d 70 70 70 2f 72 61 64 69 75 73 2e 00 53 70 65 63 69 66 69 65 73 20 74 | re/accel-ppp/radius..Specifies.t |
f11e0 | 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 6f 20 77 61 69 74 20 66 6f 72 20 61 6e | imeout.in.seconds.to.wait.for.an |
f1200 | 79 20 70 65 65 72 20 61 63 74 69 76 69 74 79 2e 20 49 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 | y.peer.activity..If.this.option. |
f1220 | 73 70 65 63 69 66 69 65 64 20 69 74 20 74 75 72 6e 73 20 6f 6e 20 61 64 61 70 74 69 76 65 20 6c | specified.it.turns.on.adaptive.l |
f1240 | 63 70 20 65 63 68 6f 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 6e 64 20 22 6c 63 70 2d 65 | cp.echo.functionality.and."lcp-e |
f1260 | 63 68 6f 2d 66 61 69 6c 75 72 65 22 20 69 73 20 6e 6f 74 20 75 73 65 64 2e 00 53 70 65 63 69 66 | cho-failure".is.not.used..Specif |
f1280 | 69 65 73 20 74 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 6f 20 77 61 69 74 20 66 | ies.timeout.in.seconds.to.wait.f |
f12a0 | 6f 72 20 61 6e 79 20 70 65 65 72 20 61 63 74 69 76 69 74 79 2e 20 49 66 20 74 68 69 73 20 6f 70 | or.any.peer.activity..If.this.op |
f12c0 | 74 69 6f 6e 20 73 70 65 63 69 66 69 65 64 20 69 74 20 74 75 72 6e 73 20 6f 6e 20 61 64 61 70 74 | tion.specified.it.turns.on.adapt |
f12e0 | 69 76 65 20 6c 63 70 20 65 63 68 6f 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 6e 64 20 22 | ive.lcp.echo.functionality.and." |
f1300 | 6c 63 70 2d 65 63 68 6f 2d 66 61 69 6c 75 72 65 22 20 69 73 20 6e 6f 74 20 75 73 65 64 2e 20 44 | lcp-echo-failure".is.not.used..D |
f1320 | 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 2a 2a 30 2a 2a 2e 00 53 70 65 63 69 66 69 65 73 | efault.value.is.**0**..Specifies |
f1340 | 20 77 68 65 74 68 65 72 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 63 6f 6e 74 72 6f 6c 20 70 6c 61 | .whether.an.external.control.pla |
f1360 | 6e 65 20 28 65 2e 67 2e 20 42 47 50 20 4c 32 56 50 4e 2f 45 56 50 4e 29 20 6f 72 20 74 68 65 20 | ne.(e.g..BGP.L2VPN/EVPN).or.the. |
f1380 | 69 6e 74 65 72 6e 61 6c 20 46 44 42 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 2e 00 53 70 65 | internal.FDB.should.be.used..Spe |
f13a0 | 63 69 66 69 65 73 20 77 68 65 74 68 65 72 20 74 68 65 20 56 58 4c 41 4e 20 64 65 76 69 63 65 20 | cifies.whether.the.VXLAN.device. |
f13c0 | 69 73 20 63 61 70 61 62 6c 65 20 6f 66 20 76 6e 69 20 66 69 6c 74 65 72 69 6e 67 2e 00 53 70 65 | is.capable.of.vni.filtering..Spe |
f13e0 | 63 69 66 69 65 73 20 77 68 65 74 68 65 72 20 74 68 69 73 20 4e 53 53 41 20 62 6f 72 64 65 72 20 | cifies.whether.this.NSSA.border. |
f1400 | 72 6f 75 74 65 72 20 77 69 6c 6c 20 75 6e 63 6f 6e 64 69 74 69 6f 6e 61 6c 6c 79 20 74 72 61 6e | router.will.unconditionally.tran |
f1420 | 73 6c 61 74 65 20 54 79 70 65 2d 37 20 4c 53 41 73 20 69 6e 74 6f 20 54 79 70 65 2d 35 20 4c 53 | slate.Type-7.LSAs.into.Type-5.LS |
f1440 | 41 73 2e 20 57 68 65 6e 20 72 6f 6c 65 20 69 73 20 41 6c 77 61 79 73 2c 20 54 79 70 65 2d 37 20 | As..When.role.is.Always,.Type-7. |
f1460 | 4c 53 41 73 20 61 72 65 20 74 72 61 6e 73 6c 61 74 65 64 20 69 6e 74 6f 20 54 79 70 65 2d 35 20 | LSAs.are.translated.into.Type-5. |
f1480 | 4c 53 41 73 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 74 72 61 6e 73 6c 61 74 6f | LSAs.regardless.of.the.translato |
f14a0 | 72 20 73 74 61 74 65 20 6f 66 20 6f 74 68 65 72 20 4e 53 53 41 20 62 6f 72 64 65 72 20 72 6f 75 | r.state.of.other.NSSA.border.rou |
f14c0 | 74 65 72 73 2e 20 57 68 65 6e 20 72 6f 6c 65 20 69 73 20 43 61 6e 64 69 64 61 74 65 2c 20 74 68 | ters..When.role.is.Candidate,.th |
f14e0 | 69 73 20 72 6f 75 74 65 72 20 70 61 72 74 69 63 69 70 61 74 65 73 20 69 6e 20 74 68 65 20 74 72 | is.router.participates.in.the.tr |
f1500 | 61 6e 73 6c 61 74 6f 72 20 65 6c 65 63 74 69 6f 6e 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 69 | anslator.election.to.determine.i |
f1520 | 66 20 69 74 20 77 69 6c 6c 20 70 65 72 66 6f 72 6d 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f | f.it.will.perform.the.translatio |
f1540 | 6e 73 20 64 75 74 69 65 73 2e 20 57 68 65 6e 20 72 6f 6c 65 20 69 73 20 4e 65 76 65 72 2c 20 74 | ns.duties..When.role.is.Never,.t |
f1560 | 68 69 73 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 6e 65 76 65 72 20 74 72 61 6e 73 6c 61 74 65 20 | his.router.will.never.translate. |
f1580 | 54 79 70 65 2d 37 20 4c 53 41 73 20 69 6e 74 6f 20 54 79 70 65 2d 35 20 4c 53 41 73 2e 00 53 70 | Type-7.LSAs.into.Type-5.LSAs..Sp |
f15a0 | 65 63 69 66 69 65 73 20 77 68 69 63 68 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 61 74 74 72 | ecifies.which.RADIUS.server.attr |
f15c0 | 69 62 75 74 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 72 61 74 65 20 6c 69 6d 69 74 20 69 6e | ibute.contains.the.rate.limit.in |
f15e0 | 66 6f 72 6d 61 74 69 6f 6e 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 61 74 74 72 69 62 75 74 65 | formation..The.default.attribute |
f1600 | 20 69 73 20 60 46 69 6c 74 65 72 2d 49 64 60 2e 00 53 70 65 63 69 66 69 65 73 20 77 68 69 63 68 | .is.`Filter-Id`..Specifies.which |
f1620 | 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 61 74 74 72 69 62 75 74 65 20 63 6f 6e 74 61 69 6e | .RADIUS.server.attribute.contain |
f1640 | 73 20 74 68 65 20 72 61 74 65 20 6c 69 6d 69 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 54 68 | s.the.rate.limit.information..Th |
f1660 | 65 20 64 65 66 61 75 6c 74 20 61 74 74 72 69 62 75 74 65 20 69 73 20 60 60 46 69 6c 74 65 72 2d | e.default.attribute.is.``Filter- |
f1680 | 49 64 60 60 2e 00 53 70 65 63 69 66 79 20 44 48 43 50 76 34 20 72 65 6c 61 79 20 49 50 20 61 64 | Id``..Specify.DHCPv4.relay.IP.ad |
f16a0 | 64 72 65 73 73 20 74 6f 20 70 61 73 73 20 72 65 71 75 65 73 74 73 20 74 6f 2e 20 49 66 20 73 70 | dress.to.pass.requests.to..If.sp |
f16c0 | 65 63 69 66 69 65 64 20 67 69 61 64 64 72 20 69 73 20 61 6c 73 6f 20 6e 65 65 64 65 64 2e 00 53 | ecified.giaddr.is.also.needed..S |
f16e0 | 70 65 63 69 66 79 20 49 50 76 34 20 61 6e 64 2f 6f 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 73 | pecify.IPv4.and/or.IPv6.networks |
f1700 | 20 74 68 61 74 20 73 68 6f 75 6c 64 20 62 65 20 70 72 6f 74 65 63 74 65 64 2f 6d 6f 6e 69 74 6f | .that.should.be.protected/monito |
f1720 | 72 65 64 2e 00 53 70 65 63 69 66 79 20 49 50 76 34 20 61 6e 64 2f 6f 72 20 49 50 76 36 20 6e 65 | red..Specify.IPv4.and/or.IPv6.ne |
f1740 | 74 77 6f 72 6b 73 20 77 68 69 63 68 20 61 72 65 20 67 6f 69 6e 67 20 74 6f 20 62 65 20 65 78 63 | tworks.which.are.going.to.be.exc |
f1760 | 6c 75 64 65 64 2e 00 53 70 65 63 69 66 79 20 49 50 76 34 2f 49 50 76 36 20 6c 69 73 74 65 6e 20 | luded..Specify.IPv4/IPv6.listen. |
f1780 | 61 64 64 72 65 73 73 20 6f 66 20 53 53 48 20 73 65 72 76 65 72 2e 20 4d 75 6c 74 69 70 6c 65 20 | address.of.SSH.server..Multiple. |
f17a0 | 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 2e 00 53 70 65 63 69 66 | addresses.can.be.defined..Specif |
f17c0 | 79 20 61 20 3a 61 62 62 72 3a 60 53 49 50 20 28 53 65 73 73 69 6f 6e 20 49 6e 69 74 69 61 74 69 | y.a.:abbr:`SIP.(Session.Initiati |
f17e0 | 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 73 65 72 76 65 72 20 62 79 20 49 50 76 36 20 61 64 64 | on.Protocol)`.server.by.IPv6.add |
f1800 | 72 65 73 73 20 6f 66 20 46 75 6c 6c 79 20 51 75 61 6c 69 66 69 65 64 20 44 6f 6d 61 69 6e 20 4e | ress.of.Fully.Qualified.Domain.N |
f1820 | 61 6d 65 20 66 6f 72 20 61 6c 6c 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 73 2e 00 53 70 65 63 | ame.for.all.DHCPv6.clients..Spec |
f1840 | 69 66 79 20 61 20 46 75 6c 6c 79 20 51 75 61 6c 69 66 69 65 64 20 44 6f 6d 61 69 6e 20 4e 61 6d | ify.a.Fully.Qualified.Domain.Nam |
f1860 | 65 20 61 73 20 73 6f 75 72 63 65 2f 64 65 73 74 69 6e 61 74 69 6f 6e 20 6d 61 74 63 68 65 72 2e | e.as.source/destination.matcher. |
f1880 | 20 45 6e 73 75 72 65 20 72 6f 75 74 65 72 20 69 73 20 61 62 6c 65 20 74 6f 20 72 65 73 6f 6c 76 | .Ensure.router.is.able.to.resolv |
f18a0 | 65 20 73 75 63 68 20 64 6e 73 20 71 75 65 72 79 2e 00 53 70 65 63 69 66 79 20 61 20 4e 49 53 20 | e.such.dns.query..Specify.a.NIS. |
f18c0 | 73 65 72 76 65 72 20 61 64 64 72 65 73 73 20 66 6f 72 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 | server.address.for.DHCPv6.client |
f18e0 | 73 2e 00 53 70 65 63 69 66 79 20 61 20 4e 49 53 2b 20 73 65 72 76 65 72 20 61 64 64 72 65 73 73 | s..Specify.a.NIS+.server.address |
f1900 | 20 66 6f 72 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 73 2e 00 53 70 65 63 69 66 79 20 61 20 72 | .for.DHCPv6.clients..Specify.a.r |
f1920 | 61 6e 67 65 20 6f 66 20 67 72 6f 75 70 20 61 64 64 72 65 73 73 65 73 20 76 69 61 20 61 20 70 72 | ange.of.group.addresses.via.a.pr |
f1940 | 65 66 69 78 2d 6c 69 73 74 20 74 68 61 74 20 66 6f 72 63 65 73 20 50 49 4d 20 74 6f 20 6e 65 76 | efix-list.that.forces.PIM.to.nev |
f1960 | 65 72 20 64 6f 20 3a 61 62 62 72 3a 60 53 53 4d 20 28 53 6f 75 72 63 65 2d 53 70 65 63 69 66 69 | er.do.:abbr:`SSM.(Source-Specifi |
f1980 | 63 20 4d 75 6c 74 69 63 61 73 74 29 60 20 6f 76 65 72 2e 00 53 70 65 63 69 66 79 20 61 62 73 6f | c.Multicast)`.over..Specify.abso |
f19a0 | 6c 75 74 65 20 60 3c 70 61 74 68 3e 60 20 74 6f 20 73 63 72 69 70 74 20 77 68 69 63 68 20 77 69 | lute.`<path>`.to.script.which.wi |
f19c0 | 6c 6c 20 62 65 20 72 75 6e 20 77 68 65 6e 20 60 3c 74 61 73 6b 3e 60 20 69 73 20 65 78 65 63 75 | ll.be.run.when.`<task>`.is.execu |
f19e0 | 74 65 64 2e 00 53 70 65 63 69 66 79 20 61 6c 6c 6f 77 65 64 20 3a 61 62 62 72 3a 60 4b 45 58 20 | ted..Specify.allowed.:abbr:`KEX. |
f1a00 | 28 4b 65 79 20 45 78 63 68 61 6e 67 65 29 60 20 61 6c 67 6f 72 69 74 68 6d 73 2e 00 53 70 65 63 | (Key.Exchange)`.algorithms..Spec |
f1a20 | 69 66 79 20 61 6e 20 61 6c 74 65 72 6e 61 74 65 20 41 53 20 66 6f 72 20 74 68 69 73 20 42 47 50 | ify.an.alternate.AS.for.this.BGP |
f1a40 | 20 70 72 6f 63 65 73 73 20 77 68 65 6e 20 69 6e 74 65 72 61 63 74 69 6e 67 20 77 69 74 68 20 74 | .process.when.interacting.with.t |
f1a60 | 68 65 20 73 70 65 63 69 66 69 65 64 20 70 65 65 72 20 6f 72 20 70 65 65 72 20 67 72 6f 75 70 2e | he.specified.peer.or.peer.group. |
f1a80 | 20 57 69 74 68 20 6e 6f 20 6d 6f 64 69 66 69 65 72 73 2c 20 74 68 65 20 73 70 65 63 69 66 69 65 | .With.no.modifiers,.the.specifie |
f1aa0 | 64 20 6c 6f 63 61 6c 2d 61 73 20 69 73 20 70 72 65 70 65 6e 64 65 64 20 74 6f 20 74 68 65 20 72 | d.local-as.is.prepended.to.the.r |
f1ac0 | 65 63 65 69 76 65 64 20 41 53 5f 50 41 54 48 20 77 68 65 6e 20 72 65 63 65 69 76 69 6e 67 20 72 | eceived.AS_PATH.when.receiving.r |
f1ae0 | 6f 75 74 69 6e 67 20 75 70 64 61 74 65 73 20 66 72 6f 6d 20 74 68 65 20 70 65 65 72 2c 20 61 6e | outing.updates.from.the.peer,.an |
f1b00 | 64 20 70 72 65 70 65 6e 64 65 64 20 74 6f 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 41 53 5f 50 | d.prepended.to.the.outgoing.AS_P |
f1b20 | 41 54 48 20 28 61 66 74 65 72 20 74 68 65 20 70 72 6f 63 65 73 73 20 6c 6f 63 61 6c 20 41 53 29 | ATH.(after.the.process.local.AS) |
f1b40 | 20 77 68 65 6e 20 74 72 61 6e 73 6d 69 74 74 69 6e 67 20 6c 6f 63 61 6c 20 72 6f 75 74 65 73 20 | .when.transmitting.local.routes. |
f1b60 | 74 6f 20 74 68 65 20 70 65 65 72 2e 00 53 70 65 63 69 66 79 20 61 6e 20 61 6c 74 65 72 6e 61 74 | to.the.peer..Specify.an.alternat |
f1b80 | 65 20 54 43 50 20 70 6f 72 74 20 77 68 65 72 65 20 74 68 65 20 6c 64 61 70 20 73 65 72 76 65 72 | e.TCP.port.where.the.ldap.server |
f1ba0 | 20 69 73 20 6c 69 73 74 65 6e 69 6e 67 20 69 66 20 6f 74 68 65 72 20 74 68 61 6e 20 74 68 65 20 | .is.listening.if.other.than.the. |
f1bc0 | 64 65 66 61 75 6c 74 20 4c 44 41 50 20 70 6f 72 74 20 33 38 39 2e 00 53 70 65 63 69 66 79 20 69 | default.LDAP.port.389..Specify.i |
f1be0 | 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 6f 20 77 61 69 74 20 62 65 74 77 65 | nterval.in.seconds.to.wait.betwe |
f1c00 | 65 6e 20 44 79 6e 61 6d 69 63 20 44 4e 53 20 75 70 64 61 74 65 73 2e 20 54 68 65 20 64 65 66 61 | en.Dynamic.DNS.updates..The.defa |
f1c20 | 75 6c 74 20 69 73 20 20 33 30 30 20 73 65 63 6f 6e 64 73 2e 00 53 70 65 63 69 66 79 20 6c 6f 63 | ult.is..300.seconds..Specify.loc |
f1c40 | 61 6c 20 72 61 6e 67 65 20 6f 66 20 69 70 20 61 64 64 72 65 73 73 20 74 6f 20 67 69 76 65 20 74 | al.range.of.ip.address.to.give.t |
f1c60 | 6f 20 64 68 63 70 20 63 6c 69 65 6e 74 73 2e 20 46 69 72 73 74 20 49 50 20 69 6e 20 72 61 6e 67 | o.dhcp.clients..First.IP.in.rang |
f1c80 | 65 20 69 73 20 72 6f 75 74 65 72 20 49 50 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 6d 6f 72 65 | e.is.router.IP..If.you.need.more |
f1ca0 | 20 63 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 20 75 73 65 20 60 63 6c 69 65 6e 74 2d 69 70 2d 70 6f | .customization.use.`client-ip-po |
f1cc0 | 6f 6c 60 00 53 70 65 63 69 66 79 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 3a 61 62 62 72 3a 60 56 | ol`.Specify.name.of.the.:abbr:`V |
f1ce0 | 52 46 20 28 56 69 72 74 75 61 6c 20 52 6f 75 74 69 6e 67 20 61 6e 64 20 46 6f 72 77 61 72 64 69 | RF.(Virtual.Routing.and.Forwardi |
f1d00 | 6e 67 29 60 20 69 6e 73 74 61 6e 63 65 2e 00 53 70 65 63 69 66 79 20 6e 65 78 74 68 6f 70 20 6f | ng)`.instance..Specify.nexthop.o |
f1d20 | 6e 20 74 68 65 20 70 61 74 68 20 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 2c 20 60 | n.the.path.to.the.destination,.` |
f1d40 | 60 69 70 76 34 2d 61 64 64 72 65 73 73 60 60 20 63 61 6e 20 62 65 20 73 65 74 20 74 6f 20 60 60 | `ipv4-address``.can.be.set.to.`` |
f1d60 | 64 68 63 70 60 60 00 53 70 65 63 69 66 79 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 69 6e 74 6f | dhcp``.Specify.static.route.into |
f1d80 | 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 73 65 6e 64 69 6e 67 20 61 6c 6c 20 6e | .the.routing.table.sending.all.n |
f1da0 | 6f 6e 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 20 74 6f 20 74 68 65 20 6e 65 78 74 68 6f 70 20 | on.local.traffic.to.the.nexthop. |
f1dc0 | 61 64 64 72 65 73 73 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 53 70 65 63 69 66 79 20 74 68 65 | address.`<address>`..Specify.the |
f1de0 | 20 49 50 20 60 3c 61 64 64 72 65 73 73 3e 60 20 6f 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 | .IP.`<address>`.of.the.RADIUS.se |
f1e00 | 72 76 65 72 20 75 73 65 72 20 77 69 74 68 20 74 68 65 20 70 72 65 2d 73 68 61 72 65 64 2d 73 65 | rver.user.with.the.pre-shared-se |
f1e20 | 63 72 65 74 20 67 69 76 65 6e 20 69 6e 20 60 3c 73 65 63 72 65 74 3e 60 2e 00 53 70 65 63 69 66 | cret.given.in.`<secret>`..Specif |
f1e40 | 79 20 74 68 65 20 49 50 20 60 3c 61 64 64 72 65 73 73 3e 60 20 6f 66 20 74 68 65 20 54 41 43 41 | y.the.IP.`<address>`.of.the.TACA |
f1e60 | 43 53 20 73 65 72 76 65 72 20 75 73 65 72 20 77 69 74 68 20 74 68 65 20 70 72 65 2d 73 68 61 72 | CS.server.user.with.the.pre-shar |
f1e80 | 65 64 2d 73 65 63 72 65 74 20 67 69 76 65 6e 20 69 6e 20 60 3c 73 65 63 72 65 74 3e 60 2e 00 53 | ed-secret.given.in.`<secret>`..S |
f1ea0 | 70 65 63 69 66 79 20 74 68 65 20 49 50 76 34 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 74 | pecify.the.IPv4.source.address.t |
f1ec0 | 6f 20 75 73 65 20 66 6f 72 20 74 68 65 20 42 47 50 20 73 65 73 73 69 6f 6e 20 74 6f 20 74 68 69 | o.use.for.the.BGP.session.to.thi |
f1ee0 | 73 20 6e 65 69 67 68 62 6f 72 2c 20 6d 61 79 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 73 20 | s.neighbor,.may.be.specified.as. |
f1f00 | 65 69 74 68 65 72 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 64 69 72 65 63 74 6c 79 20 | either.an.IPv4.address.directly. |
f1f20 | 6f 72 20 61 73 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 6e 61 6d 65 2e 00 53 70 65 63 69 66 79 | or.as.an.interface.name..Specify |
f1f40 | 20 74 68 65 20 4c 44 41 50 20 73 65 72 76 65 72 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 2e 00 | .the.LDAP.server.to.connect.to.. |
f1f60 | 53 70 65 63 69 66 79 20 74 68 65 20 69 64 65 6e 74 69 66 69 65 72 20 76 61 6c 75 65 20 6f 66 20 | Specify.the.identifier.value.of. |
f1f80 | 74 68 65 20 73 69 74 65 2d 6c 65 76 65 6c 20 61 67 67 72 65 67 61 74 6f 72 20 28 53 4c 41 29 20 | the.site-level.aggregator.(SLA). |
f1fa0 | 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 49 44 20 6d 75 73 74 20 62 65 20 61 20 64 | on.the.interface..ID.must.be.a.d |
f1fc0 | 65 63 69 6d 61 6c 20 6e 75 6d 62 65 72 20 67 72 65 61 74 65 72 20 74 68 65 6e 20 30 20 77 68 69 | ecimal.number.greater.then.0.whi |
f1fe0 | 63 68 20 66 69 74 73 20 69 6e 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 53 4c 41 20 49 44 73 | ch.fits.in.the.length.of.SLA.IDs |
f2000 | 20 28 73 65 65 20 62 65 6c 6f 77 29 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 69 6e 74 65 72 66 | .(see.below)..Specify.the.interf |
f2020 | 61 63 65 20 61 64 64 72 65 73 73 20 75 73 65 64 20 6c 6f 63 61 6c 6c 79 20 6f 6e 20 74 68 65 20 | ace.address.used.locally.on.the. |
f2040 | 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 68 65 20 70 72 65 66 69 78 20 68 61 73 20 62 | interface.where.the.prefix.has.b |
f2060 | 65 65 6e 20 64 65 6c 65 67 61 74 65 64 20 74 6f 2e 20 49 44 20 6d 75 73 74 20 62 65 20 61 20 64 | een.delegated.to..ID.must.be.a.d |
f2080 | 65 63 69 6d 61 6c 20 69 6e 74 65 67 65 72 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 6d 69 6e 69 | ecimal.integer..Specify.the.mini |
f20a0 | 6d 75 6d 20 72 65 71 75 69 72 65 64 20 54 4c 53 20 76 65 72 73 69 6f 6e 20 31 2e 32 20 6f 72 20 | mum.required.TLS.version.1.2.or. |
f20c0 | 31 2e 33 00 53 70 65 63 69 66 79 20 74 68 65 20 70 6c 61 69 6e 74 65 78 74 20 70 61 73 73 77 6f | 1.3.Specify.the.plaintext.passwo |
f20e0 | 72 64 20 75 73 65 72 20 62 79 20 75 73 65 72 20 60 3c 6e 61 6d 65 3e 60 20 6f 6e 20 74 68 69 73 | rd.user.by.user.`<name>`.on.this |
f2100 | 20 73 79 73 74 65 6d 2e 20 54 68 65 20 70 6c 61 69 6e 74 65 78 74 20 70 61 73 73 77 6f 72 64 20 | .system..The.plaintext.password. |
f2120 | 77 69 6c 6c 20 62 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 72 61 6e 73 66 65 72 72 65 | will.be.automatically.transferre |
f2140 | 64 20 69 6e 74 6f 20 61 20 73 65 63 75 72 65 20 68 61 73 68 65 64 20 70 61 73 73 77 6f 72 64 20 | d.into.a.secure.hashed.password. |
f2160 | 61 6e 64 20 6e 6f 74 20 73 61 76 65 64 20 61 6e 79 77 68 65 72 65 20 69 6e 20 70 6c 61 69 6e 74 | and.not.saved.anywhere.in.plaint |
f2180 | 65 78 74 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 70 6f 72 74 20 75 73 65 64 20 6f 6e 20 77 68 | ext..Specify.the.port.used.on.wh |
f21a0 | 69 63 68 20 74 68 65 20 70 72 6f 78 79 20 73 65 72 76 69 63 65 20 69 73 20 6c 69 73 74 65 6e 69 | ich.the.proxy.service.is.listeni |
f21c0 | 6e 67 20 66 6f 72 20 72 65 71 75 65 73 74 73 2e 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 74 68 | ng.for.requests..This.port.is.th |
f21e0 | 65 20 64 65 66 61 75 6c 74 20 70 6f 72 74 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 73 70 65 63 | e.default.port.used.for.the.spec |
f2200 | 69 66 69 65 64 20 6c 69 73 74 65 6e 2d 61 64 64 72 65 73 73 2e 00 53 70 65 63 69 66 79 20 74 68 | ified.listen-address..Specify.th |
f2220 | 65 20 73 79 73 74 65 6d 73 20 60 3c 74 69 6d 65 7a 6f 6e 65 3e 60 20 61 73 20 74 68 65 20 52 65 | e.systems.`<timezone>`.as.the.Re |
f2240 | 67 69 6f 6e 2f 4c 6f 63 61 74 69 6f 6e 20 74 68 61 74 20 62 65 73 74 20 64 65 66 69 6e 65 73 20 | gion/Location.that.best.defines. |
f2260 | 79 6f 75 72 20 6c 6f 63 61 74 69 6f 6e 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 73 70 65 63 | your.location..For.example,.spec |
f2280 | 69 66 79 69 6e 67 20 55 53 2f 50 61 63 69 66 69 63 20 73 65 74 73 20 74 68 65 20 74 69 6d 65 20 | ifying.US/Pacific.sets.the.time. |
f22a0 | 7a 6f 6e 65 20 74 6f 20 55 53 20 50 61 63 69 66 69 63 20 74 69 6d 65 2e 00 53 70 65 63 69 66 79 | zone.to.US.Pacific.time..Specify |
f22c0 | 20 74 68 65 20 74 69 6d 65 20 69 6e 74 65 72 76 61 6c 20 77 68 65 6e 20 60 3c 74 61 73 6b 3e 60 | .the.time.interval.when.`<task>` |
f22e0 | 20 73 68 6f 75 6c 64 20 62 65 20 65 78 65 63 75 74 65 64 2e 20 54 68 65 20 69 6e 74 65 72 76 61 | .should.be.executed..The.interva |
f2300 | 6c 20 69 73 20 73 70 65 63 69 66 69 65 64 20 61 73 20 6e 75 6d 62 65 72 20 77 69 74 68 20 6f 6e | l.is.specified.as.number.with.on |
f2320 | 65 20 6f 66 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 75 66 66 69 78 65 73 3a 00 53 70 65 | e.of.the.following.suffixes:.Spe |
f2340 | 63 69 66 79 20 74 69 6d 65 6f 75 74 20 2f 20 75 70 64 61 74 65 20 69 6e 74 65 72 76 61 6c 20 74 | cify.timeout./.update.interval.t |
f2360 | 6f 20 63 68 65 63 6b 20 69 66 20 49 50 20 61 64 64 72 65 73 73 20 63 68 61 6e 67 65 64 2e 00 53 | o.check.if.IP.address.changed..S |
f2380 | 70 65 63 69 66 79 20 74 69 6d 65 6f 75 74 20 69 6e 74 65 72 76 61 6c 20 66 6f 72 20 6b 65 65 70 | pecify.timeout.interval.for.keep |
f23a0 | 61 6c 69 76 65 20 6d 65 73 73 61 67 65 20 69 6e 20 73 65 63 6f 6e 64 73 2e 00 53 70 65 63 69 66 | alive.message.in.seconds..Specif |
f23c0 | 79 20 77 68 65 72 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 73 68 61 72 65 64 20 62 79 20 6d | y.where.interface.is.shared.by.m |
f23e0 | 75 6c 74 69 70 6c 65 20 75 73 65 72 73 20 6f 72 20 69 74 20 69 73 20 76 6c 61 6e 2d 70 65 72 2d | ultiple.users.or.it.is.vlan-per- |
f2400 | 75 73 65 72 2e 00 53 70 69 6e 65 31 20 69 73 20 61 20 43 69 73 63 6f 20 49 4f 53 20 72 6f 75 74 | user..Spine1.is.a.Cisco.IOS.rout |
f2420 | 65 72 20 72 75 6e 6e 69 6e 67 20 76 65 72 73 69 6f 6e 20 31 35 2e 34 2c 20 4c 65 61 66 32 20 61 | er.running.version.15.4,.Leaf2.a |
f2440 | 6e 64 20 4c 65 61 66 33 20 69 73 20 65 61 63 68 20 61 20 56 79 4f 53 20 72 6f 75 74 65 72 20 72 | nd.Leaf3.is.each.a.VyOS.router.r |
f2460 | 75 6e 6e 69 6e 67 20 31 2e 32 2e 00 53 70 6c 75 6e 6b 00 53 70 6f 6b 65 00 53 71 75 69 64 5f 20 | unning.1.2..Splunk.Spoke.Squid_. |
f2480 | 69 73 20 61 20 63 61 63 68 69 6e 67 20 61 6e 64 20 66 6f 72 77 61 72 64 69 6e 67 20 48 54 54 50 | is.a.caching.and.forwarding.HTTP |
f24a0 | 20 77 65 62 20 70 72 6f 78 79 2e 20 49 74 20 68 61 73 20 61 20 77 69 64 65 20 76 61 72 69 65 74 | .web.proxy..It.has.a.wide.variet |
f24c0 | 79 20 6f 66 20 75 73 65 73 2c 20 69 6e 63 6c 75 64 69 6e 67 20 73 70 65 65 64 69 6e 67 20 75 70 | y.of.uses,.including.speeding.up |
f24e0 | 20 61 20 77 65 62 20 73 65 72 76 65 72 20 62 79 20 63 61 63 68 69 6e 67 20 72 65 70 65 61 74 65 | .a.web.server.by.caching.repeate |
f2500 | 64 20 72 65 71 75 65 73 74 73 2c 20 63 61 63 68 69 6e 67 20 77 65 62 2c 20 44 4e 53 20 61 6e 64 | d.requests,.caching.web,.DNS.and |
f2520 | 20 6f 74 68 65 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 6c 6f 6f 6b 75 70 73 20 | .other.computer.network.lookups. |
f2540 | 66 6f 72 20 61 20 67 72 6f 75 70 20 6f 66 20 70 65 6f 70 6c 65 20 73 68 61 72 69 6e 67 20 6e 65 | for.a.group.of.people.sharing.ne |
f2560 | 74 77 6f 72 6b 20 72 65 73 6f 75 72 63 65 73 2c 20 61 6e 64 20 61 69 64 69 6e 67 20 73 65 63 75 | twork.resources,.and.aiding.secu |
f2580 | 72 69 74 79 20 62 79 20 66 69 6c 74 65 72 69 6e 67 20 74 72 61 66 66 69 63 2e 20 41 6c 74 68 6f | rity.by.filtering.traffic..Altho |
f25a0 | 75 67 68 20 70 72 69 6d 61 72 69 6c 79 20 75 73 65 64 20 66 6f 72 20 48 54 54 50 20 61 6e 64 20 | ugh.primarily.used.for.HTTP.and. |
f25c0 | 46 54 50 2c 20 53 71 75 69 64 20 69 6e 63 6c 75 64 65 73 20 6c 69 6d 69 74 65 64 20 73 75 70 70 | FTP,.Squid.includes.limited.supp |
f25e0 | 6f 72 74 20 66 6f 72 20 73 65 76 65 72 61 6c 20 6f 74 68 65 72 20 70 72 6f 74 6f 63 6f 6c 73 20 | ort.for.several.other.protocols. |
f2600 | 69 6e 63 6c 75 64 69 6e 67 20 49 6e 74 65 72 6e 65 74 20 47 6f 70 68 65 72 2c 20 53 53 4c 2c 5b | including.Internet.Gopher,.SSL,[ |
f2620 | 36 5d 20 54 4c 53 20 61 6e 64 20 48 54 54 50 53 2e 20 53 71 75 69 64 20 64 6f 65 73 20 6e 6f 74 | 6].TLS.and.HTTPS..Squid.does.not |
f2640 | 20 73 75 70 70 6f 72 74 20 74 68 65 20 53 4f 43 4b 53 20 70 72 6f 74 6f 63 6f 6c 2e 00 53 74 61 | .support.the.SOCKS.protocol..Sta |
f2660 | 72 74 20 57 65 62 73 65 72 76 65 72 20 69 6e 20 67 69 76 65 6e 20 20 56 52 46 2e 00 53 74 61 72 | rt.Webserver.in.given..VRF..Star |
f2680 | 74 20 62 79 20 63 68 65 63 6b 69 6e 67 20 66 6f 72 20 49 50 53 65 63 20 53 41 73 20 28 53 65 63 | t.by.checking.for.IPSec.SAs.(Sec |
f26a0 | 75 72 69 74 79 20 41 73 73 6f 63 69 61 74 69 6f 6e 73 29 20 77 69 74 68 3a 00 53 74 61 72 74 69 | urity.Associations).with:.Starti |
f26c0 | 6e 67 20 66 72 6f 6d 20 56 79 4f 53 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 | ng.from.VyOS.1.4-rolling-2023080 |
f26e0 | 34 30 35 35 37 2c 20 61 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 73 74 72 75 63 74 75 72 65 20 | 40557,.a.new.firewall.structure. |
f2700 | 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 61 6c 6c 20 76 79 6f 73 20 69 6e 73 74 61 6c 61 | can.be.found.on.all.vyos.instala |
f2720 | 74 69 6f 6e 73 2c 20 61 6e 64 20 7a 6f 6e 65 20 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 69 | tions,.and.zone.based.firewall.i |
f2740 | 73 20 6e 6f 20 6c 6f 6e 67 65 72 20 73 75 70 70 6f 72 74 65 64 2e 20 44 6f 63 75 6d 65 6e 74 61 | s.no.longer.supported..Documenta |
f2760 | 74 69 6f 6e 20 66 6f 72 20 6d 6f 73 74 20 6f 66 20 74 68 65 20 6e 65 77 20 66 69 72 65 77 61 6c | tion.for.most.of.the.new.firewal |
f2780 | 6c 20 43 4c 49 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 60 66 69 72 65 77 | l.CLI.can.be.found.in.the.`firew |
f27a0 | 61 6c 6c 20 3c 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 76 79 6f 73 2e 69 6f 2f 65 6e 2f 6c 61 74 | all.<https://docs.vyos.io/en/lat |
f27c0 | 65 73 74 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 | est/configuration/firewall/gener |
f27e0 | 61 6c 2e 68 74 6d 6c 3e 60 5f 20 63 68 61 70 74 65 72 2e 20 54 68 65 20 6c 65 67 61 63 79 20 66 | al.html>`_.chapter..The.legacy.f |
f2800 | 69 72 65 77 61 6c 6c 20 69 73 20 73 74 69 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 76 | irewall.is.still.available.for.v |
f2820 | 65 72 73 69 6f 6e 73 20 62 65 66 6f 72 65 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 | ersions.before.1.4-rolling-20230 |
f2840 | 38 30 34 30 35 35 37 20 61 6e 64 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 | 8040557.and.can.be.found.in.the. |
f2860 | 3a 72 65 66 3a 60 66 69 72 65 77 61 6c 6c 2d 6c 65 67 61 63 79 60 20 63 68 61 70 74 65 72 2e 20 | :ref:`firewall-legacy`.chapter.. |
f2880 | 54 68 65 20 65 78 61 6d 70 6c 65 73 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 75 73 65 | The.examples.in.this.section.use |
f28a0 | 20 74 68 65 20 6c 65 67 61 63 79 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 | .the.legacy.firewall.configurati |
f28c0 | 6f 6e 20 63 6f 6d 6d 61 6e 64 73 2c 20 73 69 6e 63 65 20 74 68 69 73 20 66 65 61 74 75 72 65 20 | on.commands,.since.this.feature. |
f28e0 | 68 61 73 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 20 69 6e 20 65 61 72 6c 69 65 72 20 72 65 6c 65 | has.been.removed.in.earlier.rele |
f2900 | 61 73 65 73 2e 00 53 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 56 79 4f 53 20 31 2e 34 2d 72 6f 6c | ases..Starting.from.VyOS.1.4-rol |
f2920 | 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 2c 20 61 20 6e 65 77 20 66 69 72 65 77 61 6c | ling-202308040557,.a.new.firewal |
f2940 | 6c 20 73 74 72 75 63 74 75 72 65 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 61 6c 6c 20 | l.structure.can.be.found.on.all. |
f2960 | 76 79 6f 73 20 69 6e 73 74 61 6c 61 74 69 6f 6e 73 2e 20 5a 6f 6e 65 20 62 61 73 65 64 20 66 69 | vyos.instalations..Zone.based.fi |
f2980 | 72 65 77 61 6c 6c 20 77 61 73 20 72 65 6d 6f 76 65 64 20 69 6e 20 74 68 61 74 20 76 65 72 73 69 | rewall.was.removed.in.that.versi |
f29a0 | 6f 6e 2c 20 62 75 74 20 72 65 20 69 6e 74 72 6f 64 75 63 65 64 20 69 6e 20 56 79 4f 53 20 31 2e | on,.but.re.introduced.in.VyOS.1. |
f29c0 | 34 20 61 6e 64 20 31 2e 35 2e 20 41 6c 6c 20 76 65 72 73 69 6f 6e 73 20 62 75 69 6c 74 20 61 66 | 4.and.1.5..All.versions.built.af |
f29e0 | 74 65 72 20 32 30 32 33 2d 31 30 2d 32 32 20 68 61 73 20 74 68 69 73 20 66 65 61 74 75 72 65 2e | ter.2023-10-22.has.this.feature. |
f2a00 | 20 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 6f 72 20 6d 6f 73 74 20 6f 66 20 74 68 65 20 6e | .Documentation.for.most.of.the.n |
f2a20 | 65 77 20 66 69 72 65 77 61 6c 6c 20 43 4c 49 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 | ew.firewall.CLI.can.be.found.in. |
f2a40 | 74 68 65 20 60 66 69 72 65 77 61 6c 6c 20 3c 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 76 79 6f 73 | the.`firewall.<https://docs.vyos |
f2a60 | 2e 69 6f 2f 65 6e 2f 6c 61 74 65 73 74 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 | .io/en/latest/configuration/fire |
f2a80 | 77 61 6c 6c 2f 67 65 6e 65 72 61 6c 2e 68 74 6d 6c 3e 60 5f 20 63 68 61 70 74 65 72 2e 20 54 68 | wall/general.html>`_.chapter..Th |
f2aa0 | 65 20 6c 65 67 61 63 79 20 66 69 72 65 77 61 6c 6c 20 69 73 20 73 74 69 6c 6c 20 61 76 61 69 6c | e.legacy.firewall.is.still.avail |
f2ac0 | 61 62 6c 65 20 66 6f 72 20 76 65 72 73 69 6f 6e 73 20 62 65 66 6f 72 65 20 31 2e 34 2d 72 6f 6c | able.for.versions.before.1.4-rol |
f2ae0 | 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 20 61 6e 64 20 63 61 6e 20 62 65 20 66 6f 75 | ling-202308040557.and.can.be.fou |
f2b00 | 6e 64 20 69 6e 20 74 68 65 20 3a 64 6f 63 3a 60 6c 65 67 61 63 79 20 66 69 72 65 77 61 6c 6c 20 | nd.in.the.:doc:`legacy.firewall. |
f2b20 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 3c 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 | configuration.</configuration/fi |
f2b40 | 72 65 77 61 6c 6c 2f 67 65 6e 65 72 61 6c 2d 6c 65 67 61 63 79 3e 60 20 63 68 61 70 74 65 72 2e | rewall/general-legacy>`.chapter. |
f2b60 | 00 53 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 56 79 4f 53 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d | .Starting.from.VyOS.1.4-rolling- |
f2b80 | 32 30 32 33 30 38 30 34 30 35 35 37 2c 20 61 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 73 74 72 | 202308040557,.a.new.firewall.str |
f2ba0 | 75 63 74 75 72 65 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 61 6c 6c 20 76 79 6f 73 20 | ucture.can.be.found.on.all.vyos. |
f2bc0 | 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 73 2e 00 53 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 56 79 4f | installations..Starting.from.VyO |
f2be0 | 53 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 2c 20 61 20 6e 65 | S.1.4-rolling-202308040557,.a.ne |
f2c00 | 77 20 66 69 72 65 77 61 6c 6c 20 73 74 72 75 63 74 75 72 65 20 63 61 6e 20 62 65 20 66 6f 75 6e | w.firewall.structure.can.be.foun |
f2c20 | 64 20 6f 6e 20 61 6c 6c 20 76 79 6f 73 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 73 2e 20 44 6f 63 | d.on.all.vyos.installations..Doc |
f2c40 | 75 6d 65 6e 74 61 74 69 6f 6e 20 66 6f 72 20 6d 6f 73 74 20 6e 65 77 20 66 69 72 65 77 61 6c 6c | umentation.for.most.new.firewall |
f2c60 | 20 63 6c 69 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 68 65 72 65 3a 00 53 74 61 72 74 69 6e 67 | .cli.can.be.found.here:.Starting |
f2c80 | 20 6f 66 20 77 69 74 68 20 56 79 4f 53 20 31 2e 33 20 28 65 71 75 75 6c 65 75 73 29 20 77 65 20 | .of.with.VyOS.1.3.(equuleus).we. |
f2ca0 | 61 64 64 65 64 20 73 75 70 70 6f 72 74 20 66 6f 72 20 72 75 6e 6e 69 6e 67 20 56 79 4f 53 20 61 | added.support.for.running.VyOS.a |
f2cc0 | 73 20 61 6e 20 4f 75 74 2d 6f 66 2d 42 61 6e 64 20 4d 61 6e 61 67 65 6d 65 6e 74 20 64 65 76 69 | s.an.Out-of-Band.Management.devi |
f2ce0 | 63 65 20 77 68 69 63 68 20 70 72 6f 76 69 64 65 73 20 72 65 6d 6f 74 65 20 61 63 63 65 73 73 20 | ce.which.provides.remote.access. |
f2d00 | 62 79 20 6d 65 61 6e 73 20 6f 66 20 53 53 48 20 74 6f 20 64 69 72 65 63 74 6c 79 20 61 74 74 61 | by.means.of.SSH.to.directly.atta |
f2d20 | 63 68 65 64 20 73 65 72 69 61 6c 20 69 6e 74 65 72 66 61 63 65 73 2e 00 53 74 61 72 74 69 6e 67 | ched.serial.interfaces..Starting |
f2d40 | 20 77 69 74 68 20 56 79 4f 53 20 31 2e 32 20 61 20 3a 61 62 62 72 3a 60 6d 44 4e 53 20 28 4d 75 | .with.VyOS.1.2.a.:abbr:`mDNS.(Mu |
f2d60 | 6c 74 69 63 61 73 74 20 44 4e 53 29 60 20 72 65 70 65 61 74 65 72 20 66 75 6e 63 74 69 6f 6e 61 | lticast.DNS)`.repeater.functiona |
f2d80 | 6c 69 74 79 20 69 73 20 70 72 6f 76 69 64 65 64 2e 20 41 64 64 69 74 69 6f 6e 61 6c 20 69 6e 66 | lity.is.provided..Additional.inf |
f2da0 | 6f 72 6d 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 6f 62 74 61 69 6e 65 64 20 66 72 6f 6d 20 68 74 | ormation.can.be.obtained.from.ht |
f2dc0 | 74 70 73 3a 2f 2f 65 6e 2e 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 4d 75 6c 74 | tps://en.wikipedia.org/wiki/Mult |
f2de0 | 69 63 61 73 74 5f 44 4e 53 2e 00 53 74 61 74 69 63 00 53 74 61 74 69 63 20 3a 61 62 62 72 3a 60 | icast_DNS..Static.Static.:abbr:` |
f2e00 | 53 41 4b 20 28 53 65 63 75 72 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 4b 65 79 29 60 | SAK.(Secure.Authentication.Key)` |
f2e20 | 20 6d 6f 64 65 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6d 61 6e 75 61 6c 6c 79 | .mode.can.be.configured.manually |
f2e40 | 20 6f 6e 20 65 61 63 68 20 64 65 76 69 63 65 20 77 69 73 68 69 6e 67 20 74 6f 20 75 73 65 20 4d | .on.each.device.wishing.to.use.M |
f2e60 | 41 43 73 65 63 2e 20 4b 65 79 73 20 6d 75 73 74 20 62 65 20 73 65 74 20 73 74 61 74 69 63 61 6c | ACsec..Keys.must.be.set.statical |
f2e80 | 6c 79 20 6f 6e 20 61 6c 6c 20 64 65 76 69 63 65 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 74 6f | ly.on.all.devices.for.traffic.to |
f2ea0 | 20 66 6c 6f 77 20 70 72 6f 70 65 72 6c 79 2e 20 4b 65 79 20 72 6f 74 61 74 69 6f 6e 20 69 73 20 | .flow.properly..Key.rotation.is. |
f2ec0 | 64 65 70 65 6e 64 65 6e 74 20 6f 6e 20 74 68 65 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 75 | dependent.on.the.administrator.u |
f2ee0 | 70 64 61 74 69 6e 67 20 61 6c 6c 20 6b 65 79 73 20 6d 61 6e 75 61 6c 6c 79 20 61 63 72 6f 73 73 | pdating.all.keys.manually.across |
f2f00 | 20 63 6f 6e 6e 65 63 74 65 64 20 64 65 76 69 63 65 73 2e 20 53 74 61 74 69 63 20 53 41 4b 20 6d | .connected.devices..Static.SAK.m |
f2f20 | 6f 64 65 20 63 61 6e 20 6e 6f 74 20 62 65 20 75 73 65 64 20 77 69 74 68 20 4d 4b 41 2e 00 53 74 | ode.can.not.be.used.with.MKA..St |
f2f40 | 61 74 69 63 20 44 48 43 50 20 49 50 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e 20 74 6f 20 68 | atic.DHCP.IP.address.assign.to.h |
f2f60 | 6f 73 74 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 64 65 73 63 72 69 70 74 69 6f 6e 3e | ost.identified.by.`<description> |
f2f80 | 60 2e 20 49 50 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 69 6e 73 69 64 65 20 74 68 65 | `..IP.address.must.be.inside.the |
f2fa0 | 20 60 3c 73 75 62 6e 65 74 3e 60 20 77 68 69 63 68 20 69 73 20 64 65 66 69 6e 65 64 20 62 75 74 | .`<subnet>`.which.is.defined.but |
f2fc0 | 20 63 61 6e 20 62 65 20 6f 75 74 73 69 64 65 20 74 68 65 20 64 79 6e 61 6d 69 63 20 72 61 6e 67 | .can.be.outside.the.dynamic.rang |
f2fe0 | 65 20 63 72 65 61 74 65 64 20 77 69 74 68 20 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 73 65 72 76 | e.created.with.:cfgcmd:`set.serv |
f3000 | 69 63 65 20 64 68 63 70 2d 73 65 72 76 65 72 20 73 68 61 72 65 64 2d 6e 65 74 77 6f 72 6b 2d 6e | ice.dhcp-server.shared-network-n |
f3020 | 61 6d 65 20 3c 6e 61 6d 65 3e 20 73 75 62 6e 65 74 20 3c 73 75 62 6e 65 74 3e 20 72 61 6e 67 65 | ame.<name>.subnet.<subnet>.range |
f3040 | 20 3c 6e 3e 60 2e 20 49 66 20 6e 6f 20 69 70 2d 61 64 64 72 65 73 73 20 69 73 20 73 70 65 63 69 | .<n>`..If.no.ip-address.is.speci |
f3060 | 66 69 65 64 2c 20 61 6e 20 49 50 20 66 72 6f 6d 20 74 68 65 20 64 79 6e 61 6d 69 63 20 70 6f 6f | fied,.an.IP.from.the.dynamic.poo |
f3080 | 6c 20 69 73 20 75 73 65 64 2e 00 53 74 61 74 69 63 20 48 6f 73 74 6e 61 6d 65 20 4d 61 70 70 69 | l.is.used..Static.Hostname.Mappi |
f30a0 | 6e 67 00 53 74 61 74 69 63 20 4b 65 79 73 00 53 74 61 74 69 63 20 52 6f 75 74 65 73 00 53 74 61 | ng.Static.Keys.Static.Routes.Sta |
f30c0 | 74 69 63 20 52 6f 75 74 69 6e 67 20 6f 72 20 6f 74 68 65 72 20 64 79 6e 61 6d 69 63 20 72 6f 75 | tic.Routing.or.other.dynamic.rou |
f30e0 | 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 6f 76 65 72 20 | ting.protocols.can.be.used.over. |
f3100 | 74 68 65 20 76 74 75 6e 20 69 6e 74 65 72 66 61 63 65 00 53 74 61 74 69 63 20 52 6f 75 74 69 6e | the.vtun.interface.Static.Routin |
f3120 | 67 3a 00 53 74 61 74 69 63 20 6d 61 70 70 69 6e 67 73 00 53 74 61 74 69 63 20 6d 61 70 70 69 6e | g:.Static.mappings.Static.mappin |
f3140 | 67 73 20 61 72 65 6e 27 74 20 73 68 6f 77 6e 2e 20 54 6f 20 73 68 6f 77 20 61 6c 6c 20 73 74 61 | gs.aren't.shown..To.show.all.sta |
f3160 | 74 65 73 2c 20 75 73 65 20 60 60 73 68 6f 77 20 64 68 63 70 20 73 65 72 76 65 72 20 6c 65 61 73 | tes,.use.``show.dhcp.server.leas |
f3180 | 65 73 20 73 74 61 74 65 20 61 6c 6c 60 60 2e 00 53 74 61 74 69 63 20 72 6f 75 74 65 73 20 61 72 | es.state.all``..Static.routes.ar |
f31a0 | 65 20 6d 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 72 6f 75 74 65 73 2c 20 77 68 | e.manually.configured.routes,.wh |
f31c0 | 69 63 68 2c 20 69 6e 20 67 65 6e 65 72 61 6c 2c 20 63 61 6e 6e 6f 74 20 62 65 20 75 70 64 61 74 | ich,.in.general,.cannot.be.updat |
f31e0 | 65 64 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 66 72 6f 6d 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | ed.dynamically.from.information. |
f3200 | 56 79 4f 53 20 6c 65 61 72 6e 73 20 61 62 6f 75 74 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 74 6f | VyOS.learns.about.the.network.to |
f3220 | 70 6f 6c 6f 67 79 20 66 72 6f 6d 20 6f 74 68 65 72 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 | pology.from.other.routing.protoc |
f3240 | 6f 6c 73 2e 20 48 6f 77 65 76 65 72 2c 20 69 66 20 61 20 6c 69 6e 6b 20 66 61 69 6c 73 2c 20 74 | ols..However,.if.a.link.fails,.t |
f3260 | 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 72 65 6d 6f 76 65 20 72 6f 75 74 65 73 2c 20 69 6e | he.router.will.remove.routes,.in |
f3280 | 63 6c 75 64 69 6e 67 20 73 74 61 74 69 63 20 72 6f 75 74 65 73 2c 20 66 72 6f 6d 20 74 68 65 20 | cluding.static.routes,.from.the. |
f32a0 | 3a 61 62 62 72 3a 60 52 49 50 42 20 28 52 6f 75 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 6f 6e | :abbr:`RIPB.(Routing.Information |
f32c0 | 20 42 61 73 65 29 60 20 74 68 61 74 20 75 73 65 64 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 | .Base)`.that.used.this.interface |
f32e0 | 20 74 6f 20 72 65 61 63 68 20 74 68 65 20 6e 65 78 74 20 68 6f 70 2e 20 49 6e 20 67 65 6e 65 72 | .to.reach.the.next.hop..In.gener |
f3300 | 61 6c 2c 20 73 74 61 74 69 63 20 72 6f 75 74 65 73 20 73 68 6f 75 6c 64 20 6f 6e 6c 79 20 62 65 | al,.static.routes.should.only.be |
f3320 | 20 75 73 65 64 20 66 6f 72 20 76 65 72 79 20 73 69 6d 70 6c 65 20 6e 65 74 77 6f 72 6b 20 74 6f | .used.for.very.simple.network.to |
f3340 | 70 6f 6c 6f 67 69 65 73 2c 20 6f 72 20 74 6f 20 6f 76 65 72 72 69 64 65 20 74 68 65 20 62 65 68 | pologies,.or.to.override.the.beh |
f3360 | 61 76 69 6f 72 20 6f 66 20 61 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f | avior.of.a.dynamic.routing.proto |
f3380 | 63 6f 6c 20 66 6f 72 20 61 20 73 6d 61 6c 6c 20 6e 75 6d 62 65 72 20 6f 66 20 72 6f 75 74 65 73 | col.for.a.small.number.of.routes |
f33a0 | 2e 20 54 68 65 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 72 6f 75 74 65 73 20 74 | ..The.collection.of.all.routes.t |
f33c0 | 68 65 20 72 6f 75 74 65 72 20 68 61 73 20 6c 65 61 72 6e 65 64 20 66 72 6f 6d 20 69 74 73 20 63 | he.router.has.learned.from.its.c |
f33e0 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 72 20 66 72 6f 6d 20 69 74 73 20 64 79 6e 61 6d 69 63 | onfiguration.or.from.its.dynamic |
f3400 | 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 69 73 20 73 74 6f 72 65 64 20 69 6e 20 | .routing.protocols.is.stored.in. |
f3420 | 74 68 65 20 52 49 42 2e 20 55 6e 69 63 61 73 74 20 72 6f 75 74 65 73 20 61 72 65 20 64 69 72 65 | the.RIB..Unicast.routes.are.dire |
f3440 | 63 74 6c 79 20 75 73 65 64 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 66 6f 72 77 61 | ctly.used.to.determine.the.forwa |
f3460 | 72 64 69 6e 67 20 74 61 62 6c 65 20 75 73 65 64 20 66 6f 72 20 75 6e 69 63 61 73 74 20 70 61 63 | rding.table.used.for.unicast.pac |
f3480 | 6b 65 74 20 66 6f 72 77 61 72 64 69 6e 67 2e 00 53 74 61 74 69 63 20 72 6f 75 74 65 73 20 63 61 | ket.forwarding..Static.routes.ca |
f34a0 | 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 72 65 66 65 72 65 6e 63 69 6e 67 20 74 68 65 20 | n.be.configured.referencing.the. |
f34c0 | 74 75 6e 6e 65 6c 20 69 6e 74 65 72 66 61 63 65 3b 20 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 74 | tunnel.interface;.for.example,.t |
f34e0 | 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 75 73 65 20 61 20 6e 65 74 77 6f | he.local.router.will.use.a.netwo |
f3500 | 72 6b 20 6f 66 20 31 30 2e 30 2e 30 2e 30 2f 31 36 2c 20 77 68 69 6c 65 20 74 68 65 20 72 65 6d | rk.of.10.0.0.0/16,.while.the.rem |
f3520 | 6f 74 65 20 68 61 73 20 61 20 6e 65 74 77 6f 72 6b 20 6f 66 20 31 30 2e 31 2e 30 2e 30 2f 31 36 | ote.has.a.network.of.10.1.0.0/16 |
f3540 | 3a 00 53 74 61 74 69 6f 6e 20 73 75 70 70 6f 72 74 73 20 72 65 63 65 69 76 69 6e 67 20 56 48 54 | :.Station.supports.receiving.VHT |
f3560 | 20 76 61 72 69 61 6e 74 20 48 54 20 43 6f 6e 74 72 6f 6c 20 66 69 65 6c 64 00 53 74 61 74 75 73 | .variant.HT.Control.field.Status |
f3580 | 00 53 74 69 63 6b 79 20 43 6f 6e 6e 65 63 74 69 6f 6e 73 00 53 74 6f 72 61 67 65 20 6f 66 20 72 | .Sticky.Connections.Storage.of.r |
f35a0 | 6f 75 74 65 20 75 70 64 61 74 65 73 20 75 73 65 73 20 6d 65 6d 6f 72 79 2e 20 49 66 20 79 6f 75 | oute.updates.uses.memory..If.you |
f35c0 | 20 65 6e 61 62 6c 65 20 73 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 6e 62 | .enable.soft.reconfiguration.inb |
f35e0 | 6f 75 6e 64 20 66 6f 72 20 6d 75 6c 74 69 70 6c 65 20 6e 65 69 67 68 62 6f 72 73 2c 20 74 68 65 | ound.for.multiple.neighbors,.the |
f3600 | 20 61 6d 6f 75 6e 74 20 6f 66 20 6d 65 6d 6f 72 79 20 75 73 65 64 20 63 61 6e 20 62 65 63 6f 6d | .amount.of.memory.used.can.becom |
f3620 | 65 20 73 69 67 6e 69 66 69 63 61 6e 74 2e 00 53 75 66 66 69 78 65 73 00 53 75 6d 6d 61 72 69 73 | e.significant..Suffixes.Summaris |
f3640 | 61 74 69 6f 6e 20 73 74 61 72 74 73 20 6f 6e 6c 79 20 61 66 74 65 72 20 74 68 69 73 20 64 65 6c | ation.starts.only.after.this.del |
f3660 | 61 79 20 74 69 6d 65 72 20 65 78 70 69 72 79 2e 00 53 75 70 70 6f 72 74 65 64 20 4d 6f 64 75 6c | ay.timer.expiry..Supported.Modul |
f3680 | 65 73 00 53 75 70 70 6f 72 74 65 64 20 63 68 61 6e 6e 65 6c 20 77 69 64 74 68 20 73 65 74 2e 00 | es.Supported.channel.width.set.. |
f36a0 | 53 75 70 70 6f 72 74 65 64 20 64 61 65 6d 6f 6e 73 3a 00 53 75 70 70 6f 72 74 65 64 20 69 6e 74 | Supported.daemons:.Supported.int |
f36c0 | 65 72 66 61 63 65 20 74 79 70 65 73 3a 00 53 75 70 70 6f 72 74 65 64 20 72 65 6d 6f 74 65 20 70 | erface.types:.Supported.remote.p |
f36e0 | 72 6f 74 6f 63 6f 6c 73 20 61 72 65 20 46 54 50 2c 20 46 54 50 53 2c 20 48 54 54 50 2c 20 48 54 | rotocols.are.FTP,.FTPS,.HTTP,.HT |
f3700 | 54 50 53 2c 20 53 43 50 2f 53 46 54 50 20 61 6e 64 20 54 46 54 50 2e 00 53 75 70 70 6f 72 74 65 | TPS,.SCP/SFTP.and.TFTP..Supporte |
f3720 | 64 20 76 65 72 73 69 6f 6e 73 20 6f 66 20 52 49 50 20 61 72 65 3a 00 53 75 70 70 6f 72 74 73 20 | d.versions.of.RIP.are:.Supports. |
f3740 | 61 73 20 48 45 4c 50 45 52 20 66 6f 72 20 63 6f 6e 66 69 67 75 72 65 64 20 67 72 61 63 65 20 70 | as.HELPER.for.configured.grace.p |
f3760 | 65 72 69 6f 64 2e 00 53 75 70 70 6f 73 65 20 74 68 65 20 4c 45 46 54 20 72 6f 75 74 65 72 20 68 | eriod..Suppose.the.LEFT.router.h |
f3780 | 61 73 20 65 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 20 31 39 32 2e 30 2e 32 2e 31 30 20 6f | as.external.address.192.0.2.10.o |
f37a0 | 6e 20 69 74 73 20 65 74 68 30 20 69 6e 74 65 72 66 61 63 65 2c 20 61 6e 64 20 74 68 65 20 52 49 | n.its.eth0.interface,.and.the.RI |
f37c0 | 47 48 54 20 72 6f 75 74 65 72 20 69 73 20 32 30 33 2e 30 2e 31 31 33 2e 34 35 00 53 75 70 70 6f | GHT.router.is.203.0.113.45.Suppo |
f37e0 | 73 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 75 73 65 20 31 30 2e 32 33 2e 31 2e 30 2f 32 34 20 | se.you.want.to.use.10.23.1.0/24. |
f3800 | 6e 65 74 77 6f 72 6b 20 66 6f 72 20 63 6c 69 65 6e 74 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 | network.for.client.tunnel.endpoi |
f3820 | 6e 74 73 20 61 6e 64 20 61 6c 6c 20 63 6c 69 65 6e 74 20 73 75 62 6e 65 74 73 20 62 65 6c 6f 6e | nts.and.all.client.subnets.belon |
f3840 | 67 20 74 6f 20 31 30 2e 32 33 2e 30 2e 30 2f 32 30 2e 20 41 6c 6c 20 63 6c 69 65 6e 74 73 20 6e | g.to.10.23.0.0/20..All.clients.n |
f3860 | 65 65 64 20 61 63 63 65 73 73 20 74 6f 20 74 68 65 20 31 39 32 2e 31 36 38 2e 30 2e 30 2f 31 36 | eed.access.to.the.192.168.0.0/16 |
f3880 | 20 6e 65 74 77 6f 72 6b 2e 00 53 75 70 70 72 65 73 73 20 73 65 6e 64 69 6e 67 20 43 61 70 61 62 | .network..Suppress.sending.Capab |
f38a0 | 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 20 61 73 20 4f 50 45 4e 20 6d 65 73 73 61 67 | ility.Negotiation.as.OPEN.messag |
f38c0 | 65 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 74 68 65 20 70 65 65 72 | e.optional.parameter.to.the.peer |
f38e0 | 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6f 6e 6c 79 20 61 66 66 65 63 74 73 20 74 68 65 20 | ..This.command.only.affects.the. |
f3900 | 70 65 65 72 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 74 68 65 72 20 74 68 61 6e 20 49 50 | peer.is.configured.other.than.IP |
f3920 | 76 34 20 75 6e 69 63 61 73 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 53 79 6e 61 6d 69 | v4.unicast.configuration..Synami |
f3940 | 63 20 69 6e 73 74 72 75 63 74 73 20 74 6f 20 66 6f 72 77 61 72 64 20 74 6f 20 61 6c 6c 20 70 65 | c.instructs.to.forward.to.all.pe |
f3960 | 65 72 73 20 77 68 69 63 68 20 77 65 20 68 61 76 65 20 61 20 64 69 72 65 63 74 20 63 6f 6e 6e 65 | ers.which.we.have.a.direct.conne |
f3980 | 63 74 69 6f 6e 20 77 69 74 68 2e 20 41 6c 74 65 72 6e 61 74 69 76 65 6c 79 2c 20 79 6f 75 20 63 | ction.with..Alternatively,.you.c |
f39a0 | 61 6e 20 73 70 65 63 69 66 79 20 74 68 65 20 64 69 72 65 63 74 69 76 65 20 6d 75 6c 74 69 70 6c | an.specify.the.directive.multipl |
f39c0 | 65 20 74 69 6d 65 73 20 66 6f 72 20 65 61 63 68 20 70 72 6f 74 6f 63 6f 6c 2d 61 64 64 72 65 73 | e.times.for.each.protocol-addres |
f39e0 | 73 20 74 68 65 20 6d 75 6c 74 69 63 61 73 74 20 74 72 61 66 66 69 63 20 73 68 6f 75 6c 64 20 62 | s.the.multicast.traffic.should.b |
f3a00 | 65 20 73 65 6e 74 20 74 6f 2e 00 53 79 6e 63 20 67 72 6f 75 70 73 00 53 79 6e 70 72 6f 78 79 00 | e.sent.to..Sync.groups.Synproxy. |
f3a20 | 53 79 6e 70 72 6f 78 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 53 79 6e 70 72 6f 78 79 20 72 65 | Synproxy.connections.Synproxy.re |
f3a40 | 6c 69 65 73 20 6f 6e 20 73 79 6e 63 6f 6f 6b 69 65 73 20 61 6e 64 20 54 43 50 20 74 69 6d 65 73 | lies.on.syncookies.and.TCP.times |
f3a60 | 74 61 6d 70 73 2c 20 65 6e 73 75 72 65 20 74 68 65 73 65 20 61 72 65 20 65 6e 61 62 6c 65 64 00 | tamps,.ensure.these.are.enabled. |
f3a80 | 53 79 6e 74 61 78 20 68 61 73 20 63 68 61 6e 67 65 64 20 66 72 6f 6d 20 56 79 4f 53 20 31 2e 32 | Syntax.has.changed.from.VyOS.1.2 |
f3aa0 | 20 28 63 72 75 78 29 20 61 6e 64 20 69 74 20 77 69 6c 6c 20 62 65 20 61 75 74 6f 6d 61 74 69 63 | .(crux).and.it.will.be.automatic |
f3ac0 | 61 6c 6c 79 20 6d 69 67 72 61 74 65 64 20 64 75 72 69 6e 67 20 61 6e 20 75 70 67 72 61 64 65 2e | ally.migrated.during.an.upgrade. |
f3ae0 | 00 53 79 73 63 74 6c 00 53 79 73 6c 6f 67 00 53 79 73 6c 6f 67 20 73 75 70 70 6f 72 74 73 20 6c | .Sysctl.Syslog.Syslog.supports.l |
f3b00 | 6f 67 67 69 6e 67 20 74 6f 20 6d 75 6c 74 69 70 6c 65 20 74 61 72 67 65 74 73 2c 20 74 68 6f 73 | ogging.to.multiple.targets,.thos |
f3b20 | 65 20 74 61 72 67 65 74 73 20 63 6f 75 6c 64 20 62 65 20 61 20 70 6c 61 69 6e 20 66 69 6c 65 20 | e.targets.could.be.a.plain.file. |
f3b40 | 6f 6e 20 79 6f 75 72 20 56 79 4f 53 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 20 69 74 73 65 6c 66 | on.your.VyOS.installation.itself |
f3b60 | 2c 20 61 20 73 65 72 69 61 6c 20 63 6f 6e 73 6f 6c 65 20 6f 72 20 61 20 72 65 6d 6f 74 65 20 73 | ,.a.serial.console.or.a.remote.s |
f3b80 | 79 73 6c 6f 67 20 73 65 72 76 65 72 20 77 68 69 63 68 20 69 73 20 72 65 61 63 68 65 64 20 76 69 | yslog.server.which.is.reached.vi |
f3ba0 | 61 20 3a 61 62 62 72 3a 60 49 50 20 28 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 6f 6c 29 60 | a.:abbr:`IP.(Internet.Protocol)` |
f3bc0 | 20 55 44 50 2f 54 43 50 2e 00 53 79 73 6c 6f 67 20 75 73 65 73 20 6c 6f 67 72 6f 74 61 74 65 20 | .UDP/TCP..Syslog.uses.logrotate. |
f3be0 | 74 6f 20 72 6f 74 61 74 65 20 6c 6f 67 69 6c 65 73 20 61 66 74 65 72 20 61 20 6e 75 6d 62 65 72 | to.rotate.logiles.after.a.number |
f3c00 | 20 6f 66 20 67 69 76 65 73 20 62 79 74 65 73 2e 20 57 65 20 6b 65 65 70 20 61 73 20 6d 61 6e 79 | .of.gives.bytes..We.keep.as.many |
f3c20 | 20 61 73 20 60 3c 6e 75 6d 62 65 72 3e 60 20 72 6f 74 61 74 65 64 20 66 69 6c 65 20 62 65 66 6f | .as.`<number>`.rotated.file.befo |
f3c40 | 72 65 20 74 68 65 79 20 61 72 65 20 64 65 6c 65 74 65 64 20 6f 6e 20 74 68 65 20 73 79 73 74 65 | re.they.are.deleted.on.the.syste |
f3c60 | 6d 2e 00 53 79 73 6c 6f 67 20 77 69 6c 6c 20 77 72 69 74 65 20 60 3c 73 69 7a 65 3e 60 20 6b 69 | m..Syslog.will.write.`<size>`.ki |
f3c80 | 6c 6f 62 79 74 65 73 20 69 6e 74 6f 20 74 68 65 20 66 69 6c 65 20 73 70 65 63 69 66 69 65 64 20 | lobytes.into.the.file.specified. |
f3ca0 | 62 79 20 60 3c 66 69 6c 65 6e 61 6d 65 3e 60 2e 20 41 66 74 65 72 20 74 68 69 73 20 6c 69 6d 69 | by.`<filename>`..After.this.limi |
f3cc0 | 74 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2c 20 74 68 65 20 63 75 73 74 6f 6d 20 66 | t.has.been.reached,.the.custom.f |
f3ce0 | 69 6c 65 20 69 73 20 22 72 6f 74 61 74 65 64 22 20 62 79 20 6c 6f 67 72 6f 74 61 74 65 20 61 6e | ile.is."rotated".by.logrotate.an |
f3d00 | 64 20 61 20 6e 65 77 20 63 75 73 74 6f 6d 20 66 69 6c 65 20 69 73 20 63 72 65 61 74 65 64 2e 00 | d.a.new.custom.file.is.created.. |
f3d20 | 53 79 73 74 65 6d 00 53 79 73 74 65 6d 20 44 4e 53 00 53 79 73 74 65 6d 20 44 69 73 70 6c 61 79 | System.System.DNS.System.Display |
f3d40 | 20 28 4c 43 44 29 00 53 79 73 74 65 6d 20 4e 61 6d 65 20 61 6e 64 20 44 65 73 63 72 69 70 74 69 | .(LCD).System.Name.and.Descripti |
f3d60 | 6f 6e 00 53 79 73 74 65 6d 20 50 72 6f 78 79 00 53 79 73 74 65 6d 20 63 61 70 61 62 69 6c 69 74 | on.System.Proxy.System.capabilit |
f3d80 | 69 65 73 20 28 73 77 69 74 63 68 69 6e 67 2c 20 72 6f 75 74 69 6e 67 2c 20 65 74 63 2e 29 00 53 | ies.(switching,.routing,.etc.).S |
f3da0 | 79 73 74 65 6d 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 00 53 79 73 | ystem.configuration.commands.Sys |
f3dc0 | 74 65 6d 20 64 61 65 6d 6f 6e 73 00 53 79 73 74 65 6d 20 69 64 65 6e 74 69 66 69 65 72 3a 20 60 | tem.daemons.System.identifier:.` |
f3de0 | 60 31 39 32 31 2e 36 38 30 30 2e 31 30 30 32 60 60 20 2d 20 66 6f 72 20 73 79 73 74 65 6d 20 69 | `1921.6800.1002``.-.for.system.i |
f3e00 | 64 65 74 69 66 69 65 72 73 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 74 6f 20 75 73 65 20 49 50 | detifiers.we.recommend.to.use.IP |
f3e20 | 20 61 64 64 72 65 73 73 20 6f 72 20 4d 41 43 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 | .address.or.MAC.address.of.the.r |
f3e40 | 6f 75 74 65 72 20 69 74 73 65 6c 66 2e 20 54 68 65 20 77 61 79 20 74 6f 20 63 6f 6e 73 74 72 75 | outer.itself..The.way.to.constru |
f3e60 | 63 74 20 74 68 69 73 20 69 73 20 74 6f 20 6b 65 65 70 20 61 6c 6c 20 6f 66 20 74 68 65 20 7a 65 | ct.this.is.to.keep.all.of.the.ze |
f3e80 | 72 6f 65 73 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 20 49 50 20 61 64 64 72 65 73 73 2c 20 61 | roes.of.the.router.IP.address,.a |
f3ea0 | 6e 64 20 74 68 65 6e 20 63 68 61 6e 67 65 20 74 68 65 20 70 65 72 69 6f 64 73 20 66 72 6f 6d 20 | nd.then.change.the.periods.from. |
f3ec0 | 62 65 69 6e 67 20 65 76 65 72 79 20 74 68 72 65 65 20 6e 75 6d 62 65 72 73 20 74 6f 20 65 76 65 | being.every.three.numbers.to.eve |
f3ee0 | 72 79 20 66 6f 75 72 20 6e 75 6d 62 65 72 73 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 74 68 61 | ry.four.numbers..The.address.tha |
f3f00 | 74 20 69 73 20 6c 69 73 74 65 64 20 68 65 72 65 20 69 73 20 60 60 31 39 32 2e 31 36 38 2e 31 2e | t.is.listed.here.is.``192.168.1. |
f3f20 | 32 60 60 2c 20 77 68 69 63 68 20 69 66 20 65 78 70 61 6e 64 65 64 20 77 69 6c 6c 20 74 75 72 6e | 2``,.which.if.expanded.will.turn |
f3f40 | 20 69 6e 74 6f 20 60 60 31 39 32 2e 31 36 38 2e 30 30 31 2e 30 30 32 60 60 2e 20 54 68 65 6e 20 | .into.``192.168.001.002``..Then. |
f3f60 | 61 6c 6c 20 6f 6e 65 20 68 61 73 20 74 6f 20 64 6f 20 69 73 20 6d 6f 76 65 20 74 68 65 20 64 6f | all.one.has.to.do.is.move.the.do |
f3f80 | 74 73 20 74 6f 20 68 61 76 65 20 66 6f 75 72 20 6e 75 6d 62 65 72 73 20 69 6e 73 74 65 61 64 20 | ts.to.have.four.numbers.instead. |
f3fa0 | 6f 66 20 74 68 72 65 65 2e 20 54 68 69 73 20 67 69 76 65 73 20 75 73 20 60 60 31 39 32 31 2e 36 | of.three..This.gives.us.``1921.6 |
f3fc0 | 38 30 30 2e 31 30 30 32 60 60 2e 00 53 79 73 74 65 6d 20 69 73 20 75 6e 75 73 61 62 6c 65 20 2d | 800.1002``..System.is.unusable.- |
f3fe0 | 20 61 20 70 61 6e 69 63 20 63 6f 6e 64 69 74 69 6f 6e 00 54 41 43 41 43 53 20 45 78 61 6d 70 6c | .a.panic.condition.TACACS.Exampl |
f4000 | 65 00 54 41 43 41 43 53 20 69 73 20 64 65 66 69 6e 65 64 20 69 6e 20 3a 72 66 63 3a 60 38 39 30 | e.TACACS.is.defined.in.:rfc:`890 |
f4020 | 37 60 2e 00 54 41 43 41 43 53 20 73 65 72 76 65 72 73 20 63 6f 75 6c 64 20 62 65 20 68 61 72 64 | 7`..TACACS.servers.could.be.hard |
f4040 | 65 6e 65 64 20 62 79 20 6f 6e 6c 79 20 61 6c 6c 6f 77 69 6e 67 20 63 65 72 74 61 69 6e 20 49 50 | ened.by.only.allowing.certain.IP |
f4060 | 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 63 6f 6e 6e 65 63 74 2e 20 41 73 20 6f 66 20 74 68 69 | .addresses.to.connect..As.of.thi |
f4080 | 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 65 61 63 68 20 54 41 43 | s.the.source.address.of.each.TAC |
f40a0 | 41 43 53 20 71 75 65 72 79 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 54 41 43 | ACS.query.can.be.configured..TAC |
f40c0 | 41 43 53 2b 00 54 42 44 00 54 43 50 20 26 20 55 44 50 20 73 65 72 76 69 63 65 73 20 72 75 6e 6e | ACS+.TBD.TCP.&.UDP.services.runn |
f40e0 | 69 6e 67 20 69 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 52 46 20 63 6f 6e 74 65 78 74 20 28 | ing.in.the.default.VRF.context.( |
f4100 | 69 65 2e 2c 20 6e 6f 74 20 62 6f 75 6e 64 20 74 6f 20 61 6e 79 20 56 52 46 20 64 65 76 69 63 65 | ie.,.not.bound.to.any.VRF.device |
f4120 | 29 20 63 61 6e 20 77 6f 72 6b 20 61 63 72 6f 73 73 20 61 6c 6c 20 56 52 46 20 64 6f 6d 61 69 6e | ).can.work.across.all.VRF.domain |
f4140 | 73 20 62 79 20 65 6e 61 62 6c 69 6e 67 20 74 68 69 73 20 6f 70 74 69 6f 6e 2e 00 54 46 54 50 20 | s.by.enabling.this.option..TFTP. |
f4160 | 53 65 72 76 65 72 00 54 61 67 20 69 73 20 74 68 65 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d | Server.Tag.is.the.optional.param |
f4180 | 65 74 65 72 2e 20 49 66 20 74 61 67 20 63 6f 6e 66 69 67 75 72 65 64 20 53 75 6d 6d 61 72 79 20 | eter..If.tag.configured.Summary. |
f41a0 | 72 6f 75 74 65 20 77 69 6c 6c 20 62 65 20 6f 72 69 67 69 6e 61 74 65 64 20 77 69 74 68 20 74 68 | route.will.be.originated.with.th |
f41c0 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 61 67 2e 00 54 61 73 6b 20 53 63 68 65 64 75 6c 65 72 | e.configured.tag..Task.Scheduler |
f41e0 | 00 54 65 6c 65 67 72 61 66 00 54 65 6c 65 67 72 61 66 20 6f 75 74 70 75 74 20 70 6c 75 67 69 6e | .Telegraf.Telegraf.output.plugin |
f4200 | 20 61 7a 75 72 65 2d 64 61 74 61 2d 65 78 70 6c 6f 72 65 72 5f 00 54 65 6c 65 67 72 61 66 20 6f | .azure-data-explorer_.Telegraf.o |
f4220 | 75 74 70 75 74 20 70 6c 75 67 69 6e 20 70 72 6f 6d 65 74 68 65 75 73 2d 63 6c 69 65 6e 74 5f 00 | utput.plugin.prometheus-client_. |
f4240 | 54 65 6c 65 67 72 61 66 20 6f 75 74 70 75 74 20 70 6c 75 67 69 6e 20 73 70 6c 75 6e 6b 5f 2e 20 | Telegraf.output.plugin.splunk_.. |
f4260 | 48 54 54 50 20 45 76 65 6e 74 20 43 6f 6c 6c 65 63 74 6f 72 2e 00 54 65 6c 6c 20 50 49 4d 20 74 | HTTP.Event.Collector..Tell.PIM.t |
f4280 | 68 61 74 20 77 65 20 77 6f 75 6c 64 20 6e 6f 74 20 6c 69 6b 65 20 74 6f 20 75 73 65 20 74 68 69 | hat.we.would.not.like.to.use.thi |
f42a0 | 73 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 70 72 6f 63 65 73 73 20 62 6f 6f 74 73 74 72 61 70 | s.interface.to.process.bootstrap |
f42c0 | 20 6d 65 73 73 61 67 65 73 2e 00 54 65 6c 6c 20 50 49 4d 20 74 68 61 74 20 77 65 20 77 6f 75 6c | .messages..Tell.PIM.that.we.woul |
f42e0 | 64 20 6e 6f 74 20 6c 69 6b 65 20 74 6f 20 75 73 65 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 | d.not.like.to.use.this.interface |
f4300 | 20 74 6f 20 70 72 6f 63 65 73 73 20 75 6e 69 63 61 73 74 20 62 6f 6f 74 73 74 72 61 70 20 6d 65 | .to.process.unicast.bootstrap.me |
f4320 | 73 73 61 67 65 73 2e 00 54 65 6c 6c 20 68 6f 73 74 73 20 74 6f 20 75 73 65 20 74 68 65 20 61 64 | ssages..Tell.hosts.to.use.the.ad |
f4340 | 6d 69 6e 69 73 74 65 72 65 64 20 28 73 74 61 74 65 66 75 6c 29 20 70 72 6f 74 6f 63 6f 6c 20 28 | ministered.(stateful).protocol.( |
f4360 | 69 2e 65 2e 20 44 48 43 50 29 20 66 6f 72 20 61 75 74 6f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | i.e..DHCP).for.autoconfiguration |
f4380 | 20 6f 66 20 6f 74 68 65 72 20 28 6e 6f 6e 2d 61 64 64 72 65 73 73 29 20 69 6e 66 6f 72 6d 61 74 | .of.other.(non-address).informat |
f43a0 | 69 6f 6e 00 54 65 6c 6c 20 68 6f 73 74 73 20 74 6f 20 75 73 65 20 74 68 65 20 61 64 6d 69 6e 69 | ion.Tell.hosts.to.use.the.admini |
f43c0 | 73 74 65 72 65 64 20 73 74 61 74 65 66 75 6c 20 70 72 6f 74 6f 63 6f 6c 20 28 69 2e 65 2e 20 44 | stered.stateful.protocol.(i.e..D |
f43e0 | 48 43 50 29 20 66 6f 72 20 61 75 74 6f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 54 65 6d 70 6f | HCP).for.autoconfiguration.Tempo |
f4400 | 72 61 72 79 20 64 69 73 61 62 6c 65 20 74 68 69 73 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e | rary.disable.this.RADIUS.server. |
f4420 | 00 54 65 6d 70 6f 72 61 72 79 20 64 69 73 61 62 6c 65 20 74 68 69 73 20 52 41 44 49 55 53 20 73 | .Temporary.disable.this.RADIUS.s |
f4440 | 65 72 76 65 72 2e 20 49 74 20 77 6f 6e 27 74 20 62 65 20 71 75 65 72 69 65 64 2e 00 54 65 6d 70 | erver..It.won't.be.queried..Temp |
f4460 | 6f 72 61 72 79 20 64 69 73 61 62 6c 65 20 74 68 69 73 20 54 41 43 41 43 53 20 73 65 72 76 65 72 | orary.disable.this.TACACS.server |
f4480 | 2e 20 49 74 20 77 6f 6e 27 74 20 62 65 20 71 75 65 72 69 65 64 2e 00 54 65 72 6d 69 6e 61 74 65 | ..It.won't.be.queried..Terminate |
f44a0 | 20 53 53 4c 00 54 65 73 74 20 63 6f 6e 6e 65 63 74 69 6e 67 20 67 69 76 65 6e 20 63 6f 6e 6e 65 | .SSL.Test.connecting.given.conne |
f44c0 | 63 74 69 6f 6e 2d 6f 72 69 65 6e 74 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 60 3c 69 6e 74 65 | ction-oriented.interface..`<inte |
f44e0 | 72 66 61 63 65 3e 60 20 63 61 6e 20 62 65 20 60 60 70 70 70 6f 65 30 60 60 20 61 73 20 74 68 65 | rface>`.can.be.``pppoe0``.as.the |
f4500 | 20 65 78 61 6d 70 6c 65 2e 00 54 65 73 74 20 63 6f 6e 6e 65 63 74 69 6e 67 20 67 69 76 65 6e 20 | .example..Test.connecting.given. |
f4520 | 63 6f 6e 6e 65 63 74 69 6f 6e 2d 6f 72 69 65 6e 74 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 60 | connection-oriented.interface..` |
f4540 | 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 63 61 6e 20 62 65 20 60 60 73 73 74 70 63 30 60 60 20 61 | <interface>`.can.be.``sstpc0``.a |
f4560 | 73 20 74 68 65 20 65 78 61 6d 70 6c 65 2e 00 54 65 73 74 20 64 69 73 63 6f 6e 6e 65 63 74 69 6e | s.the.example..Test.disconnectin |
f4580 | 67 20 67 69 76 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2d 6f 72 69 65 6e 74 65 64 20 69 6e 74 65 | g.given.connection-oriented.inte |
f45a0 | 72 66 61 63 65 2e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 63 61 6e 20 62 65 20 60 60 70 70 | rface..`<interface>`.can.be.``pp |
f45c0 | 70 6f 65 30 60 60 20 61 73 20 74 68 65 20 65 78 61 6d 70 6c 65 2e 00 54 65 73 74 20 64 69 73 63 | poe0``.as.the.example..Test.disc |
f45e0 | 6f 6e 6e 65 63 74 69 6e 67 20 67 69 76 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2d 6f 72 69 65 6e | onnecting.given.connection-orien |
f4600 | 74 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 63 61 6e | ted.interface..`<interface>`.can |
f4620 | 20 62 65 20 60 60 73 73 74 70 63 30 60 60 20 61 73 20 74 68 65 20 65 78 61 6d 70 6c 65 2e 00 54 | .be.``sstpc0``.as.the.example..T |
f4640 | 65 73 74 20 66 72 6f 6d 20 74 68 65 20 49 50 76 36 20 6f 6e 6c 79 20 63 6c 69 65 6e 74 3a 00 54 | est.from.the.IPv6.only.client:.T |
f4660 | 65 73 74 69 6e 67 20 53 53 54 50 00 54 65 73 74 69 6e 67 20 61 6e 64 20 56 61 6c 69 64 61 74 69 | esting.SSTP.Testing.and.Validati |
f4680 | 6f 6e 00 54 68 61 6e 6b 73 20 74 6f 20 74 68 69 73 20 64 69 73 63 6f 76 65 72 79 2c 20 61 6e 79 | on.Thanks.to.this.discovery,.any |
f46a0 | 20 73 75 62 73 65 71 75 65 6e 74 20 74 72 61 66 66 69 63 20 62 65 74 77 65 65 6e 20 50 43 34 20 | .subsequent.traffic.between.PC4. |
f46c0 | 61 6e 64 20 50 43 35 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 75 73 69 6e 67 20 74 68 65 20 6d 75 | and.PC5.will.not.be.using.the.mu |
f46e0 | 6c 74 69 63 61 73 74 2d 61 64 64 72 65 73 73 20 62 65 74 77 65 65 6e 20 74 68 65 20 6c 65 61 76 | lticast-address.between.the.leav |
f4700 | 65 73 20 61 73 20 74 68 65 79 20 62 6f 74 68 20 6b 6e 6f 77 20 62 65 68 69 6e 64 20 77 68 69 63 | es.as.they.both.know.behind.whic |
f4720 | 68 20 4c 65 61 66 20 74 68 65 20 50 43 73 20 61 72 65 20 63 6f 6e 6e 65 63 74 65 64 2e 20 54 68 | h.Leaf.the.PCs.are.connected..Th |
f4740 | 69 73 20 73 61 76 65 73 20 74 72 61 66 66 69 63 20 61 73 20 6c 65 73 73 20 6d 75 6c 74 69 63 61 | is.saves.traffic.as.less.multica |
f4760 | 73 74 20 70 61 63 6b 65 74 73 20 73 65 6e 74 20 72 65 64 75 63 65 73 20 74 68 65 20 6c 6f 61 64 | st.packets.sent.reduces.the.load |
f4780 | 20 6f 6e 20 74 68 65 20 6e 65 74 77 6f 72 6b 2c 20 77 68 69 63 68 20 69 6d 70 72 6f 76 65 73 20 | .on.the.network,.which.improves. |
f47a0 | 73 63 61 6c 61 62 69 6c 69 74 79 20 77 68 65 6e 20 6d 6f 72 65 20 6c 65 61 76 65 73 20 61 72 65 | scalability.when.more.leaves.are |
f47c0 | 20 61 64 64 65 64 2e 00 54 68 61 74 20 69 73 20 68 6f 77 20 69 74 20 69 73 20 70 6f 73 73 69 62 | .added..That.is.how.it.is.possib |
f47e0 | 6c 65 20 74 6f 20 64 6f 20 74 68 65 20 73 6f 2d 63 61 6c 6c 65 64 20 22 69 6e 67 72 65 73 73 20 | le.to.do.the.so-called."ingress. |
f4800 | 73 68 61 70 69 6e 67 22 2e 00 54 68 61 74 20 6c 6f 6f 6b 73 20 67 6f 6f 64 20 2d 20 77 65 20 64 | shaping"..That.looks.good.-.we.d |
f4820 | 65 66 69 6e 65 64 20 32 20 74 75 6e 6e 65 6c 73 20 61 6e 64 20 74 68 65 79 27 72 65 20 62 6f 74 | efined.2.tunnels.and.they're.bot |
f4840 | 68 20 75 70 20 61 6e 64 20 72 75 6e 6e 69 6e 67 2e 00 54 68 65 20 3a 61 62 62 72 3a 60 41 53 4e | h.up.and.running..The.:abbr:`ASN |
f4860 | 20 28 41 75 74 6f 6e 6f 6d 6f 75 73 20 53 79 73 74 65 6d 20 4e 75 6d 62 65 72 29 60 20 69 73 20 | .(Autonomous.System.Number)`.is. |
f4880 | 6f 6e 65 20 6f 66 20 74 68 65 20 65 73 73 65 6e 74 69 61 6c 20 65 6c 65 6d 65 6e 74 73 20 6f 66 | one.of.the.essential.elements.of |
f48a0 | 20 42 47 50 2e 20 42 47 50 20 69 73 20 61 20 64 69 73 74 61 6e 63 65 20 76 65 63 74 6f 72 20 72 | .BGP..BGP.is.a.distance.vector.r |
f48c0 | 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2c 20 61 6e 64 20 74 68 65 20 41 53 2d 50 61 74 68 | outing.protocol,.and.the.AS-Path |
f48e0 | 20 66 72 61 6d 65 77 6f 72 6b 20 70 72 6f 76 69 64 65 73 20 64 69 73 74 61 6e 63 65 20 76 65 63 | .framework.provides.distance.vec |
f4900 | 74 6f 72 20 6d 65 74 72 69 63 20 61 6e 64 20 6c 6f 6f 70 20 64 65 74 65 63 74 69 6f 6e 20 74 6f | tor.metric.and.loop.detection.to |
f4920 | 20 42 47 50 2e 00 54 68 65 20 3a 61 62 62 72 3a 60 44 4e 50 54 76 36 20 28 44 65 73 74 69 6e 61 | .BGP..The.:abbr:`DNPTv6.(Destina |
f4940 | 74 69 6f 6e 20 49 50 76 36 2d 74 6f 2d 49 50 76 36 20 4e 65 74 77 6f 72 6b 20 50 72 65 66 69 78 | tion.IPv6-to-IPv6.Network.Prefix |
f4960 | 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 | .Translation)`.destination.addre |
f4980 | 73 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 66 75 6e 63 74 69 6f 6e 20 69 73 20 75 73 65 64 20 | ss.translation.function.is.used. |
f49a0 | 69 6e 20 73 63 65 6e 61 72 69 6f 73 20 77 68 65 72 65 20 74 68 65 20 73 65 72 76 65 72 20 69 6e | in.scenarios.where.the.server.in |
f49c0 | 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 70 72 6f 76 69 64 65 73 20 73 | .the.internal.network.provides.s |
f49e0 | 65 72 76 69 63 65 73 20 74 6f 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 2c | ervices.to.the.external.network, |
f4a00 | 20 73 75 63 68 20 61 73 20 70 72 6f 76 69 64 69 6e 67 20 57 65 62 20 73 65 72 76 69 63 65 73 20 | .such.as.providing.Web.services. |
f4a20 | 6f 72 20 46 54 50 20 73 65 72 76 69 63 65 73 20 74 6f 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 | or.FTP.services.to.the.external. |
f4a40 | 6e 65 74 77 6f 72 6b 2e 20 42 79 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 74 68 65 20 6d 61 70 70 | network..By.configuring.the.mapp |
f4a60 | 69 6e 67 20 72 65 6c 61 74 69 6f 6e 73 68 69 70 20 62 65 74 77 65 65 6e 20 74 68 65 20 69 6e 74 | ing.relationship.between.the.int |
f4a80 | 65 72 6e 61 6c 20 73 65 72 76 65 72 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 65 78 74 | ernal.server.address.and.the.ext |
f4aa0 | 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 20 6f 6e 20 74 68 65 20 65 78 74 | ernal.network.address.on.the.ext |
f4ac0 | 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 73 69 64 65 20 69 6e 74 65 72 66 61 63 65 20 6f 66 20 | ernal.network.side.interface.of. |
f4ae0 | 74 68 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 2c 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f | the.NAT66.device,.external.netwo |
f4b00 | 72 6b 20 75 73 65 72 73 20 63 61 6e 20 61 63 63 65 73 73 20 74 68 65 20 69 6e 74 65 72 6e 61 6c | rk.users.can.access.the.internal |
f4b20 | 20 6e 65 74 77 6f 72 6b 20 73 65 72 76 65 72 20 74 68 72 6f 75 67 68 20 74 68 65 20 64 65 73 69 | .network.server.through.the.desi |
f4b40 | 67 6e 61 74 65 64 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 2e | gnated.external.network.address. |
f4b60 | 00 54 68 65 20 3a 61 62 62 72 3a 60 4d 50 4c 53 20 28 4d 75 6c 74 69 2d 50 72 6f 74 6f 63 6f 6c | .The.:abbr:`MPLS.(Multi-Protocol |
f4b80 | 20 4c 61 62 65 6c 20 53 77 69 74 63 68 69 6e 67 29 60 20 61 72 63 68 69 74 65 63 74 75 72 65 20 | .Label.Switching)`.architecture. |
f4ba0 | 64 6f 65 73 20 6e 6f 74 20 61 73 73 75 6d 65 20 61 20 73 69 6e 67 6c 65 20 70 72 6f 74 6f 63 6f | does.not.assume.a.single.protoco |
f4bc0 | 6c 20 74 6f 20 63 72 65 61 74 65 20 4d 50 4c 53 20 70 61 74 68 73 2e 20 56 79 4f 53 20 73 75 70 | l.to.create.MPLS.paths..VyOS.sup |
f4be0 | 70 6f 72 74 73 20 74 68 65 20 4c 61 62 65 6c 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 50 72 6f | ports.the.Label.Distribution.Pro |
f4c00 | 74 6f 63 6f 6c 20 28 4c 44 50 29 20 61 73 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 62 79 20 46 52 | tocol.(LDP).as.implemented.by.FR |
f4c20 | 52 2c 20 62 61 73 65 64 20 6f 6e 20 3a 72 66 63 3a 60 35 30 33 36 60 2e 00 54 68 65 20 3a 72 65 | R,.based.on.:rfc:`5036`..The.:re |
f4c40 | 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 36 36 60 20 72 75 6c 65 20 72 65 70 6c 61 63 65 73 20 74 | f:`source-nat66`.rule.replaces.t |
f4c60 | 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 70 61 63 6b 65 74 20 | he.source.address.of.the.packet. |
f4c80 | 61 6e 64 20 63 61 6c 63 75 6c 61 74 65 73 20 74 68 65 20 63 6f 6e 76 65 72 74 65 64 20 61 64 64 | and.calculates.the.converted.add |
f4ca0 | 72 65 73 73 20 75 73 69 6e 67 20 74 68 65 20 70 72 65 66 69 78 20 73 70 65 63 69 66 69 65 64 20 | ress.using.the.prefix.specified. |
f4cc0 | 69 6e 20 74 68 65 20 72 75 6c 65 2e 00 54 68 65 20 41 52 50 20 6d 6f 6e 69 74 6f 72 20 77 6f 72 | in.the.rule..The.ARP.monitor.wor |
f4ce0 | 6b 73 20 62 79 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 63 68 65 63 6b 69 6e 67 20 74 68 65 20 | ks.by.periodically.checking.the. |
f4d00 | 73 6c 61 76 65 20 64 65 76 69 63 65 73 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 77 68 65 74 68 | slave.devices.to.determine.wheth |
f4d20 | 65 72 20 74 68 65 79 20 68 61 76 65 20 73 65 6e 74 20 6f 72 20 72 65 63 65 69 76 65 64 20 74 72 | er.they.have.sent.or.received.tr |
f4d40 | 61 66 66 69 63 20 72 65 63 65 6e 74 6c 79 20 28 74 68 65 20 70 72 65 63 69 73 65 20 63 72 69 74 | affic.recently.(the.precise.crit |
f4d60 | 65 72 69 61 20 64 65 70 65 6e 64 73 20 75 70 6f 6e 20 74 68 65 20 62 6f 6e 64 69 6e 67 20 6d 6f | eria.depends.upon.the.bonding.mo |
f4d80 | 64 65 2c 20 61 6e 64 20 74 68 65 20 73 74 61 74 65 20 6f 66 20 74 68 65 20 73 6c 61 76 65 29 2e | de,.and.the.state.of.the.slave). |
f4da0 | 20 52 65 67 75 6c 61 72 20 74 72 61 66 66 69 63 20 69 73 20 67 65 6e 65 72 61 74 65 64 20 76 69 | .Regular.traffic.is.generated.vi |
f4dc0 | 61 20 41 52 50 20 70 72 6f 62 65 73 20 69 73 73 75 65 64 20 66 6f 72 20 74 68 65 20 61 64 64 72 | a.ARP.probes.issued.for.the.addr |
f4de0 | 65 73 73 65 73 20 73 70 65 63 69 66 69 65 64 20 62 79 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 | esses.specified.by.the.:cfgcmd:` |
f4e00 | 61 72 70 2d 6d 6f 6e 69 74 6f 72 20 74 61 72 67 65 74 60 20 6f 70 74 69 6f 6e 2e 00 54 68 65 20 | arp-monitor.target`.option..The. |
f4e20 | 41 53 50 20 68 61 73 20 64 6f 63 75 6d 65 6e 74 65 64 20 74 68 65 69 72 20 49 50 53 65 63 20 72 | ASP.has.documented.their.IPSec.r |
f4e40 | 65 71 75 69 72 65 6d 65 6e 74 73 3a 00 54 68 65 20 42 47 50 20 72 6f 75 74 65 72 20 63 61 6e 20 | equirements:.The.BGP.router.can. |
f4e60 | 63 6f 6e 6e 65 63 74 20 74 6f 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 52 50 4b 49 20 63 61 63 68 | connect.to.one.or.more.RPKI.cach |
f4e80 | 65 20 73 65 72 76 65 72 73 20 74 6f 20 72 65 63 65 69 76 65 20 76 61 6c 69 64 61 74 65 64 20 70 | e.servers.to.receive.validated.p |
f4ea0 | 72 65 66 69 78 20 74 6f 20 6f 72 69 67 69 6e 20 41 53 20 6d 61 70 70 69 6e 67 73 2e 20 41 64 76 | refix.to.origin.AS.mappings..Adv |
f4ec0 | 61 6e 63 65 64 20 66 61 69 6c 6f 76 65 72 20 63 61 6e 20 62 65 20 69 6d 70 6c 65 6d 65 6e 74 65 | anced.failover.can.be.implemente |
f4ee0 | 64 20 62 79 20 73 65 72 76 65 72 20 73 6f 63 6b 65 74 73 20 77 69 74 68 20 64 69 66 66 65 72 65 | d.by.server.sockets.with.differe |
f4f00 | 6e 74 20 70 72 65 66 65 72 65 6e 63 65 20 76 61 6c 75 65 73 2e 00 54 68 65 20 43 4c 49 20 63 6f | nt.preference.values..The.CLI.co |
f4f20 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 73 61 6d 65 20 61 73 20 6d 65 6e 74 69 6f 6e 65 64 | nfiguration.is.same.as.mentioned |
f4f40 | 20 69 6e 20 61 62 6f 76 65 20 61 72 74 69 63 6c 65 73 2e 20 54 68 65 20 6f 6e 6c 79 20 64 69 66 | .in.above.articles..The.only.dif |
f4f60 | 66 65 72 65 6e 63 65 20 69 73 2c 20 74 68 61 74 20 65 61 63 68 20 72 6f 75 74 69 6e 67 20 70 72 | ference.is,.that.each.routing.pr |
f4f80 | 6f 74 6f 63 6f 6c 20 75 73 65 64 2c 20 6d 75 73 74 20 62 65 20 70 72 65 66 69 78 65 64 20 77 69 | otocol.used,.must.be.prefixed.wi |
f4fa0 | 74 68 20 74 68 65 20 60 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 60 20 63 6f 6d 6d 61 6e 64 | th.the.`vrf.name.<name>`.command |
f4fc0 | 2e 00 54 68 65 20 43 4c 4e 53 20 61 64 64 72 65 73 73 20 63 6f 6e 73 69 73 74 73 20 6f 66 20 74 | ..The.CLNS.address.consists.of.t |
f4fe0 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 61 72 74 73 3a 00 54 68 65 20 44 48 43 50 20 75 6e 69 | he.following.parts:.The.DHCP.uni |
f5000 | 71 75 65 20 69 64 65 6e 74 69 66 69 65 72 20 28 44 55 49 44 29 20 69 73 20 75 73 65 64 20 62 79 | que.identifier.(DUID).is.used.by |
f5020 | 20 61 20 63 6c 69 65 6e 74 20 74 6f 20 67 65 74 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 66 | .a.client.to.get.an.IP.address.f |
f5040 | 72 6f 6d 20 61 20 44 48 43 50 76 36 20 73 65 72 76 65 72 2e 20 49 74 20 68 61 73 20 61 20 32 2d | rom.a.DHCPv6.server..It.has.a.2- |
f5060 | 62 79 74 65 20 44 55 49 44 20 74 79 70 65 20 66 69 65 6c 64 2c 20 61 6e 64 20 61 20 76 61 72 69 | byte.DUID.type.field,.and.a.vari |
f5080 | 61 62 6c 65 2d 6c 65 6e 67 74 68 20 69 64 65 6e 74 69 66 69 65 72 20 66 69 65 6c 64 20 75 70 20 | able-length.identifier.field.up. |
f50a0 | 74 6f 20 31 32 38 20 62 79 74 65 73 2e 20 49 74 73 20 61 63 74 75 61 6c 20 6c 65 6e 67 74 68 20 | to.128.bytes..Its.actual.length. |
f50c0 | 64 65 70 65 6e 64 73 20 6f 6e 20 69 74 73 20 74 79 70 65 2e 20 54 68 65 20 73 65 72 76 65 72 20 | depends.on.its.type..The.server. |
f50e0 | 63 6f 6d 70 61 72 65 73 20 74 68 65 20 44 55 49 44 20 77 69 74 68 20 69 74 73 20 64 61 74 61 62 | compares.the.DUID.with.its.datab |
f5100 | 61 73 65 20 61 6e 64 20 64 65 6c 69 76 65 72 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 64 | ase.and.delivers.configuration.d |
f5120 | 61 74 61 20 28 61 64 64 72 65 73 73 2c 20 6c 65 61 73 65 20 74 69 6d 65 73 2c 20 44 4e 53 20 73 | ata.(address,.lease.times,.DNS.s |
f5140 | 65 72 76 65 72 73 2c 20 65 74 63 2e 29 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 2e 00 54 68 65 | ervers,.etc.).to.the.client..The |
f5160 | 20 44 4e 20 61 6e 64 20 70 61 73 73 77 6f 72 64 20 74 6f 20 62 69 6e 64 20 61 73 20 77 68 69 6c | .DN.and.password.to.bind.as.whil |
f5180 | 65 20 70 65 72 66 6f 72 6d 69 6e 67 20 73 65 61 72 63 68 65 73 2e 00 54 68 65 20 44 4e 20 61 6e | e.performing.searches..The.DN.an |
f51a0 | 64 20 70 61 73 73 77 6f 72 64 20 74 6f 20 62 69 6e 64 20 61 73 20 77 68 69 6c 65 20 70 65 72 66 | d.password.to.bind.as.while.perf |
f51c0 | 6f 72 6d 69 6e 67 20 73 65 61 72 63 68 65 73 2e 20 41 73 20 74 68 65 20 70 61 73 73 77 6f 72 64 | orming.searches..As.the.password |
f51e0 | 20 6e 65 65 64 73 20 74 6f 20 62 65 20 70 72 69 6e 74 65 64 20 69 6e 20 70 6c 61 69 6e 20 74 65 | .needs.to.be.printed.in.plain.te |
f5200 | 78 74 20 69 6e 20 79 6f 75 72 20 53 71 75 69 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 | xt.in.your.Squid.configuration.i |
f5220 | 74 20 69 73 20 73 74 72 6f 6e 67 6c 79 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 75 73 65 | t.is.strongly.recommended.to.use |
f5240 | 20 61 20 61 63 63 6f 75 6e 74 20 77 69 74 68 20 6d 69 6e 69 6d 61 6c 20 61 73 73 6f 63 69 61 74 | .a.account.with.minimal.associat |
f5260 | 65 64 20 70 72 69 76 69 6c 65 67 65 73 2e 20 54 68 69 73 20 74 6f 20 6c 69 6d 69 74 20 74 68 65 | ed.privileges..This.to.limit.the |
f5280 | 20 64 61 6d 61 67 65 20 69 6e 20 63 61 73 65 20 73 6f 6d 65 6f 6e 65 20 63 6f 75 6c 64 20 67 65 | .damage.in.case.someone.could.ge |
f52a0 | 74 20 68 6f 6c 64 20 6f 66 20 61 20 63 6f 70 79 20 6f 66 20 79 6f 75 72 20 53 71 75 69 64 20 63 | t.hold.of.a.copy.of.your.Squid.c |
f52c0 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 2e 00 54 68 65 20 46 51 2d 43 6f 44 65 6c 20 | onfiguration.file..The.FQ-CoDel. |
f52e0 | 70 6f 6c 69 63 79 20 64 69 73 74 72 69 62 75 74 65 73 20 74 68 65 20 74 72 61 66 66 69 63 20 69 | policy.distributes.the.traffic.i |
f5300 | 6e 74 6f 20 31 30 32 34 20 46 49 46 4f 20 71 75 65 75 65 73 20 61 6e 64 20 74 72 69 65 73 20 74 | nto.1024.FIFO.queues.and.tries.t |
f5320 | 6f 20 70 72 6f 76 69 64 65 20 67 6f 6f 64 20 73 65 72 76 69 63 65 20 62 65 74 77 65 65 6e 20 61 | o.provide.good.service.between.a |
f5340 | 6c 6c 20 6f 66 20 74 68 65 6d 2e 20 49 74 20 61 6c 73 6f 20 74 72 69 65 73 20 74 6f 20 6b 65 65 | ll.of.them..It.also.tries.to.kee |
f5360 | 70 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 61 6c 6c 20 74 68 65 20 71 75 65 75 65 73 20 73 | p.the.length.of.all.the.queues.s |
f5380 | 68 6f 72 74 2e 00 54 68 65 20 48 54 54 50 20 73 65 72 76 69 63 65 20 6c 69 73 74 65 6e 20 6f 6e | hort..The.HTTP.service.listen.on |
f53a0 | 20 54 43 50 20 70 6f 72 74 20 38 30 2e 00 54 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 | .TCP.port.80..The.IP.address.of. |
f53c0 | 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 73 79 73 74 65 6d 20 77 65 20 77 69 73 68 20 74 6f 20 66 | the.internal.system.we.wish.to.f |
f53e0 | 6f 72 77 61 72 64 20 74 72 61 66 66 69 63 20 74 6f 2e 00 54 68 65 20 49 6e 74 65 6c 20 41 58 32 | orward.traffic.to..The.Intel.AX2 |
f5400 | 30 30 20 63 61 72 64 20 64 6f 65 73 20 6e 6f 74 20 77 6f 72 6b 20 6f 75 74 20 6f 66 20 74 68 65 | 00.card.does.not.work.out.of.the |
f5420 | 20 62 6f 78 20 69 6e 20 41 50 20 6d 6f 64 65 2c 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 75 6e 69 | .box.in.AP.mode,.see.https://uni |
f5440 | 78 2e 73 74 61 63 6b 65 78 63 68 61 6e 67 65 2e 63 6f 6d 2f 71 75 65 73 74 69 6f 6e 73 2f 35 39 | x.stackexchange.com/questions/59 |
f5460 | 38 32 37 35 2f 69 6e 74 65 6c 2d 61 78 32 30 30 2d 61 70 2d 6d 6f 64 65 2e 20 59 6f 75 20 63 61 | 8275/intel-ax200-ap-mode..You.ca |
f5480 | 6e 20 73 74 69 6c 6c 20 70 75 74 20 74 68 69 73 20 63 61 72 64 20 69 6e 74 6f 20 41 50 20 6d 6f | n.still.put.this.card.into.AP.mo |
f54a0 | 64 65 20 75 73 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 | de.using.the.following.configura |
f54c0 | 74 69 6f 6e 3a 00 54 68 65 20 4f 49 44 20 60 60 2e 31 2e 33 2e 36 2e 31 2e 34 2e 31 2e 38 30 37 | tion:.The.OID.``.1.3.6.1.4.1.807 |
f54e0 | 32 2e 31 2e 33 2e 32 2e 33 2e 31 2e 31 2e 34 2e 31 31 36 2e 31 30 31 2e 31 31 35 2e 31 31 36 60 | 2.1.3.2.3.1.1.4.116.101.115.116` |
f5500 | 60 2c 20 6f 6e 63 65 20 63 61 6c 6c 65 64 2c 20 77 69 6c 6c 20 63 6f 6e 74 61 69 6e 20 74 68 65 | `,.once.called,.will.contain.the |
f5520 | 20 6f 75 74 70 75 74 20 6f 66 20 74 68 65 20 65 78 74 65 6e 73 69 6f 6e 2e 00 54 68 65 20 50 6f | .output.of.the.extension..The.Po |
f5540 | 69 6e 74 2d 74 6f 2d 50 6f 69 6e 74 20 54 75 6e 6e 65 6c 69 6e 67 20 50 72 6f 74 6f 63 6f 6c 20 | int-to-Point.Tunneling.Protocol. |
f5560 | 28 50 50 54 50 5f 29 20 68 61 73 20 62 65 65 6e 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 69 6e 20 | (PPTP_).has.been.implemented.in. |
f5580 | 56 79 4f 53 20 6f 6e 6c 79 20 66 6f 72 20 62 61 63 6b 77 61 72 64 73 20 63 6f 6d 70 61 74 69 62 | VyOS.only.for.backwards.compatib |
f55a0 | 69 6c 69 74 79 2e 20 50 50 54 50 20 68 61 73 20 6d 61 6e 79 20 77 65 6c 6c 20 6b 6e 6f 77 6e 20 | ility..PPTP.has.many.well.known. |
f55c0 | 73 65 63 75 72 69 74 79 20 69 73 73 75 65 73 20 61 6e 64 20 79 6f 75 20 73 68 6f 75 6c 64 20 75 | security.issues.and.you.should.u |
f55e0 | 73 65 20 6f 6e 65 20 6f 66 20 74 68 65 20 6d 61 6e 79 20 6f 74 68 65 72 20 6e 65 77 20 56 50 4e | se.one.of.the.many.other.new.VPN |
f5600 | 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 2e 00 54 68 65 20 50 6f 77 65 72 44 4e 53 20 72 | .implementations..The.PowerDNS.r |
f5620 | 65 63 75 72 73 6f 72 20 68 61 73 20 35 20 64 69 66 66 65 72 65 6e 74 20 6c 65 76 65 6c 73 20 6f | ecursor.has.5.different.levels.o |
f5640 | 66 20 44 4e 53 53 45 43 20 70 72 6f 63 65 73 73 69 6e 67 2c 20 77 68 69 63 68 20 63 61 6e 20 62 | f.DNSSEC.processing,.which.can.b |
f5660 | 65 20 73 65 74 20 77 69 74 68 20 74 68 65 20 64 6e 73 73 65 63 20 73 65 74 74 69 6e 67 2e 20 49 | e.set.with.the.dnssec.setting..I |
f5680 | 6e 20 6f 72 64 65 72 20 66 72 6f 6d 20 6c 65 61 73 74 20 74 6f 20 6d 6f 73 74 20 70 72 6f 63 65 | n.order.from.least.to.most.proce |
f56a0 | 73 73 69 6e 67 2c 20 74 68 65 73 65 20 61 72 65 3a 00 54 68 65 20 50 72 69 6f 72 69 74 79 20 51 | ssing,.these.are:.The.Priority.Q |
f56c0 | 75 65 75 65 20 69 73 20 61 20 63 6c 61 73 73 66 75 6c 20 73 63 68 65 64 75 6c 69 6e 67 20 70 6f | ueue.is.a.classful.scheduling.po |
f56e0 | 6c 69 63 79 2e 20 49 74 20 64 6f 65 73 20 6e 6f 74 20 64 65 6c 61 79 20 70 61 63 6b 65 74 73 20 | licy..It.does.not.delay.packets. |
f5700 | 28 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 69 73 20 6e 6f 74 20 61 20 73 68 61 70 69 6e 67 | (Priority.Queue.is.not.a.shaping |
f5720 | 20 70 6f 6c 69 63 79 29 2c 20 69 74 20 73 69 6d 70 6c 79 20 64 65 71 75 65 75 65 73 20 70 61 63 | .policy),.it.simply.dequeues.pac |
f5740 | 6b 65 74 73 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 69 72 20 70 72 69 6f 72 69 74 79 | kets.according.to.their.priority |
f5760 | 2e 00 54 68 65 20 52 41 44 49 55 53 20 61 63 63 6f 75 6e 74 69 6e 67 20 66 65 61 74 75 72 65 20 | ..The.RADIUS.accounting.feature. |
f5780 | 6d 75 73 74 20 62 65 20 75 73 65 64 20 77 69 74 68 20 74 68 65 20 4f 70 65 6e 43 6f 6e 6e 65 63 | must.be.used.with.the.OpenConnec |
f57a0 | 74 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 6f 64 65 20 52 41 44 49 55 53 2e 20 49 74 | t.authentication.mode.RADIUS..It |
f57c0 | 20 63 61 6e 6e 6f 74 20 62 65 20 75 73 65 64 20 77 69 74 68 20 6c 6f 63 61 6c 20 61 75 74 68 65 | .cannot.be.used.with.local.authe |
f57e0 | 6e 74 69 63 61 74 69 6f 6e 2e 20 59 6f 75 20 6d 75 73 74 20 63 6f 6e 66 69 67 75 72 65 20 74 68 | ntication..You.must.configure.th |
f5800 | 65 20 4f 70 65 6e 43 6f 6e 6e 65 63 74 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 6f 64 | e.OpenConnect.authentication.mod |
f5820 | 65 20 74 6f 20 22 72 61 64 69 75 73 22 2e 00 54 68 65 20 52 41 44 49 55 53 20 64 69 63 74 69 6f | e.to."radius"..The.RADIUS.dictio |
f5840 | 6e 61 72 69 65 73 20 69 6e 20 56 79 4f 53 20 61 72 65 20 6c 6f 63 61 74 65 64 20 61 74 20 60 60 | naries.in.VyOS.are.located.at.`` |
f5860 | 2f 75 73 72 2f 73 68 61 72 65 2f 61 63 63 65 6c 2d 70 70 70 2f 72 61 64 69 75 73 2f 60 60 00 54 | /usr/share/accel-ppp/radius/``.T |
f5880 | 68 65 20 53 52 20 73 65 67 6d 65 6e 74 73 20 61 72 65 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 | he.SR.segments.are.portions.of.t |
f58a0 | 68 65 20 6e 65 74 77 6f 72 6b 20 70 61 74 68 20 74 61 6b 65 6e 20 62 79 20 74 68 65 20 70 61 63 | he.network.path.taken.by.the.pac |
f58c0 | 6b 65 74 2c 20 61 6e 64 20 61 72 65 20 63 61 6c 6c 65 64 20 53 49 44 73 2e 20 41 74 20 65 61 63 | ket,.and.are.called.SIDs..At.eac |
f58e0 | 68 20 6e 6f 64 65 2c 20 74 68 65 20 66 69 72 73 74 20 53 49 44 20 6f 66 20 74 68 65 20 6c 69 73 | h.node,.the.first.SID.of.the.lis |
f5900 | 74 20 69 73 20 72 65 61 64 2c 20 65 78 65 63 75 74 65 64 20 61 73 20 61 20 66 6f 72 77 61 72 64 | t.is.read,.executed.as.a.forward |
f5920 | 69 6e 67 20 66 75 6e 63 74 69 6f 6e 2c 20 61 6e 64 20 6d 61 79 20 62 65 20 70 6f 70 70 65 64 20 | ing.function,.and.may.be.popped. |
f5940 | 74 6f 20 6c 65 74 20 74 68 65 20 6e 65 78 74 20 6e 6f 64 65 20 72 65 61 64 20 74 68 65 20 6e 65 | to.let.the.next.node.read.the.ne |
f5960 | 78 74 20 53 49 44 20 6f 66 20 74 68 65 20 6c 69 73 74 2e 20 54 68 65 20 53 49 44 20 6c 69 73 74 | xt.SID.of.the.list..The.SID.list |
f5980 | 20 63 6f 6d 70 6c 65 74 65 6c 79 20 64 65 74 65 72 6d 69 6e 65 73 20 74 68 65 20 70 61 74 68 20 | .completely.determines.the.path. |
f59a0 | 77 68 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 69 73 20 66 6f 72 77 61 72 64 65 64 2e 00 54 | where.the.packet.is.forwarded..T |
f59c0 | 68 65 20 53 68 61 70 65 72 20 70 6f 6c 69 63 79 20 64 6f 65 73 20 6e 6f 74 20 67 75 61 72 61 6e | he.Shaper.policy.does.not.guaran |
f59e0 | 74 65 65 20 61 20 6c 6f 77 20 64 65 6c 61 79 2c 20 62 75 74 20 69 74 20 64 6f 65 73 20 67 75 61 | tee.a.low.delay,.but.it.does.gua |
f5a00 | 72 61 6e 74 65 65 20 62 61 6e 64 77 69 64 74 68 20 74 6f 20 64 69 66 66 65 72 65 6e 74 20 74 72 | rantee.bandwidth.to.different.tr |
f5a20 | 61 66 66 69 63 20 63 6c 61 73 73 65 73 20 61 6e 64 20 61 6c 73 6f 20 6c 65 74 73 20 79 6f 75 20 | affic.classes.and.also.lets.you. |
f5a40 | 64 65 63 69 64 65 20 68 6f 77 20 74 6f 20 61 6c 6c 6f 63 61 74 65 20 6d 6f 72 65 20 74 72 61 66 | decide.how.to.allocate.more.traf |
f5a60 | 66 69 63 20 6f 6e 63 65 20 74 68 65 20 67 75 61 72 61 6e 74 65 65 73 20 61 72 65 20 6d 65 74 2e | fic.once.the.guarantees.are.met. |
f5a80 | 00 54 68 65 20 55 44 50 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 75 73 65 64 20 62 79 20 79 6f 75 | .The.UDP.port.number.used.by.you |
f5aa0 | 72 20 61 70 6c 6c 69 63 61 74 69 6f 6e 2e 20 49 74 20 69 73 20 6d 61 6e 64 61 74 6f 72 79 20 66 | r.apllication..It.is.mandatory.f |
f5ac0 | 6f 72 20 74 68 69 73 20 6b 69 6e 64 20 6f 66 20 6f 70 65 72 61 74 69 6f 6e 2e 00 54 68 65 20 56 | or.this.kind.of.operation..The.V |
f5ae0 | 58 4c 41 4e 20 73 70 65 63 69 66 69 63 61 74 69 6f 6e 20 77 61 73 20 6f 72 69 67 69 6e 61 6c 6c | XLAN.specification.was.originall |
f5b00 | 79 20 63 72 65 61 74 65 64 20 62 79 20 56 4d 77 61 72 65 2c 20 41 72 69 73 74 61 20 4e 65 74 77 | y.created.by.VMware,.Arista.Netw |
f5b20 | 6f 72 6b 73 20 61 6e 64 20 43 69 73 63 6f 2e 20 4f 74 68 65 72 20 62 61 63 6b 65 72 73 20 6f 66 | orks.and.Cisco..Other.backers.of |
f5b40 | 20 74 68 65 20 56 58 4c 41 4e 20 74 65 63 68 6e 6f 6c 6f 67 79 20 69 6e 63 6c 75 64 65 20 48 75 | .the.VXLAN.technology.include.Hu |
f5b60 | 61 77 65 69 2c 20 42 72 6f 61 64 63 6f 6d 2c 20 43 69 74 72 69 78 2c 20 50 69 63 61 38 2c 20 42 | awei,.Broadcom,.Citrix,.Pica8,.B |
f5b80 | 69 67 20 53 77 69 74 63 68 20 4e 65 74 77 6f 72 6b 73 2c 20 43 75 6d 75 6c 75 73 20 4e 65 74 77 | ig.Switch.Networks,.Cumulus.Netw |
f5ba0 | 6f 72 6b 73 2c 20 44 65 6c 6c 20 45 4d 43 2c 20 45 72 69 63 73 73 6f 6e 2c 20 4d 65 6c 6c 61 6e | orks,.Dell.EMC,.Ericsson,.Mellan |
f5bc0 | 6f 78 2c 20 46 72 65 65 42 53 44 2c 20 4f 70 65 6e 42 53 44 2c 20 52 65 64 20 48 61 74 2c 20 4a | ox,.FreeBSD,.OpenBSD,.Red.Hat,.J |
f5be0 | 6f 79 65 6e 74 2c 20 61 6e 64 20 4a 75 6e 69 70 65 72 20 4e 65 74 77 6f 72 6b 73 2e 00 54 68 65 | oyent,.and.Juniper.Networks..The |
f5c00 | 20 56 79 4f 53 20 44 4e 53 20 66 6f 72 77 61 72 64 65 72 20 64 6f 65 73 20 6e 6f 74 20 72 65 71 | .VyOS.DNS.forwarder.does.not.req |
f5c20 | 75 69 72 65 20 61 6e 20 75 70 73 74 72 65 61 6d 20 44 4e 53 20 73 65 72 76 65 72 2e 20 49 74 20 | uire.an.upstream.DNS.server..It. |
f5c40 | 63 61 6e 20 73 65 72 76 65 20 61 73 20 61 20 66 75 6c 6c 20 72 65 63 75 72 73 69 76 65 20 44 4e | can.serve.as.a.full.recursive.DN |
f5c60 | 53 20 73 65 72 76 65 72 20 2d 20 62 75 74 20 69 74 20 63 61 6e 20 61 6c 73 6f 20 66 6f 72 77 61 | S.server.-.but.it.can.also.forwa |
f5c80 | 72 64 20 71 75 65 72 69 65 73 20 74 6f 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 75 70 73 74 72 | rd.queries.to.configurable.upstr |
f5ca0 | 65 61 6d 20 44 4e 53 20 73 65 72 76 65 72 73 2e 20 42 79 20 6e 6f 74 20 63 6f 6e 66 69 67 75 72 | eam.DNS.servers..By.not.configur |
f5cc0 | 69 6e 67 20 61 6e 79 20 75 70 73 74 72 65 61 6d 20 44 4e 53 20 73 65 72 76 65 72 73 20 79 6f 75 | ing.any.upstream.DNS.servers.you |
f5ce0 | 20 61 6c 73 6f 20 61 76 6f 69 64 20 62 65 69 6e 67 20 74 72 61 63 6b 65 64 20 62 79 20 74 68 65 | .also.avoid.being.tracked.by.the |
f5d00 | 20 70 72 6f 76 69 64 65 72 20 6f 66 20 79 6f 75 72 20 75 70 73 74 72 65 61 6d 20 44 4e 53 20 73 | .provider.of.your.upstream.DNS.s |
f5d20 | 65 72 76 65 72 2e 00 54 68 65 20 56 79 4f 53 20 44 4e 53 20 66 6f 72 77 61 72 64 65 72 20 77 69 | erver..The.VyOS.DNS.forwarder.wi |
f5d40 | 6c 6c 20 6f 6e 6c 79 20 61 63 63 65 70 74 20 6c 6f 6f 6b 75 70 20 72 65 71 75 65 73 74 73 20 66 | ll.only.accept.lookup.requests.f |
f5d60 | 72 6f 6d 20 74 68 65 20 4c 41 4e 20 73 75 62 6e 65 74 73 20 2d 20 31 39 32 2e 31 36 38 2e 31 2e | rom.the.LAN.subnets.-.192.168.1. |
f5d80 | 30 2f 32 34 20 61 6e 64 20 32 30 30 31 3a 64 62 38 3a 3a 2f 36 34 00 54 68 65 20 56 79 4f 53 20 | 0/24.and.2001:db8::/64.The.VyOS. |
f5da0 | 44 4e 53 20 66 6f 72 77 61 72 64 65 72 20 77 69 6c 6c 20 6f 6e 6c 79 20 6c 69 73 74 65 6e 20 66 | DNS.forwarder.will.only.listen.f |
f5dc0 | 6f 72 20 72 65 71 75 65 73 74 73 20 6f 6e 20 74 68 65 20 65 74 68 31 20 28 4c 41 4e 29 20 69 6e | or.requests.on.the.eth1.(LAN).in |
f5de0 | 74 65 72 66 61 63 65 20 61 64 64 72 65 73 73 65 73 20 2d 20 31 39 32 2e 31 36 38 2e 31 2e 32 35 | terface.addresses.-.192.168.1.25 |
f5e00 | 34 20 66 6f 72 20 49 50 76 34 20 61 6e 64 20 32 30 30 31 3a 64 62 38 3a 3a 66 66 66 66 20 66 6f | 4.for.IPv4.and.2001:db8::ffff.fo |
f5e20 | 72 20 49 50 76 36 00 54 68 65 20 56 79 4f 53 20 44 4e 53 20 66 6f 72 77 61 72 64 65 72 20 77 69 | r.IPv6.The.VyOS.DNS.forwarder.wi |
f5e40 | 6c 6c 20 70 61 73 73 20 72 65 76 65 72 73 65 20 6c 6f 6f 6b 75 70 73 20 66 6f 72 20 20 31 30 2e | ll.pass.reverse.lookups.for..10. |
f5e60 | 69 6e 2d 61 64 64 72 2e 61 72 70 61 2c 20 31 36 38 2e 31 39 32 2e 69 6e 2d 61 64 64 72 2e 61 72 | in-addr.arpa,.168.192.in-addr.ar |
f5e80 | 70 61 2c 20 31 36 2d 33 31 2e 31 37 32 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 20 7a 6f 6e 65 73 | pa,.16-31.172.in-addr.arpa.zones |
f5ea0 | 20 74 6f 20 75 70 73 74 72 65 61 6d 20 73 65 72 76 65 72 2e 00 54 68 65 20 56 79 4f 53 20 50 4b | .to.upstream.server..The.VyOS.PK |
f5ec0 | 49 20 73 75 62 73 79 73 74 65 6d 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 75 73 65 64 20 74 6f 20 | I.subsystem.can.also.be.used.to. |
f5ee0 | 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 72 65 74 72 69 65 76 65 20 43 65 72 74 69 66 69 63 61 | automatically.retrieve.Certifica |
f5f00 | 74 65 73 20 75 73 69 6e 67 20 74 68 65 20 3a 61 62 62 72 3a 60 41 43 4d 45 20 28 41 75 74 6f 6d | tes.using.the.:abbr:`ACME.(Autom |
f5f20 | 61 74 69 63 20 43 65 72 74 69 66 69 63 61 74 65 20 4d 61 6e 61 67 65 6d 65 6e 74 20 45 6e 76 69 | atic.Certificate.Management.Envi |
f5f40 | 72 6f 6e 6d 65 6e 74 29 60 20 70 72 6f 74 6f 63 6f 6c 2e 00 54 68 65 20 56 79 4f 53 20 63 6f 6e | ronment)`.protocol..The.VyOS.con |
f5f60 | 74 61 69 6e 65 72 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 69 73 20 62 61 73 65 64 20 6f | tainer.implementation.is.based.o |
f5f80 | 6e 20 60 50 6f 64 6d 61 6e 3c 68 74 74 70 73 3a 2f 2f 70 6f 64 6d 61 6e 2e 69 6f 2f 3e 60 20 61 | n.`Podman<https://podman.io/>`.a |
f5fa0 | 73 20 61 20 64 65 61 6d 6f 6e 6c 65 73 73 20 63 6f 6e 74 61 69 6e 65 72 20 65 6e 67 69 6e 65 2e | s.a.deamonless.container.engine. |
f5fc0 | 00 54 68 65 20 57 41 50 20 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 68 61 73 20 74 68 65 | .The.WAP.in.this.example.has.the |
f5fe0 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 68 61 72 61 63 74 65 72 69 73 74 69 63 73 3a 00 54 68 65 20 | .following.characteristics:.The. |
f6000 | 57 69 72 65 6c 65 73 73 20 57 69 64 65 2d 41 72 65 61 2d 4e 65 74 77 6f 72 6b 20 69 6e 74 65 72 | Wireless.Wide-Area-Network.inter |
f6020 | 66 61 63 65 20 70 72 6f 76 69 64 65 73 20 61 63 63 65 73 73 20 28 74 68 72 6f 75 67 68 20 61 20 | face.provides.access.(through.a. |
f6040 | 77 69 72 65 6c 65 73 73 20 6d 6f 64 65 6d 2f 77 77 61 6e 29 20 74 6f 20 77 69 72 65 6c 65 73 73 | wireless.modem/wwan).to.wireless |
f6060 | 20 6e 65 74 77 6f 72 6b 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 76 61 72 69 6f 75 73 20 63 65 | .networks.provided.by.various.ce |
f6080 | 6c 6c 75 6c 61 72 20 70 72 6f 76 69 64 65 72 73 2e 00 54 68 65 20 60 60 43 44 60 60 2d 62 69 74 | llular.providers..The.``CD``-bit |
f60a0 | 20 69 73 20 68 6f 6e 6f 72 65 64 20 63 6f 72 72 65 63 74 6c 79 20 66 6f 72 20 70 72 6f 63 65 73 | .is.honored.correctly.for.proces |
f60c0 | 73 20 61 6e 64 20 76 61 6c 69 64 61 74 65 2e 20 46 6f 72 20 6c 6f 67 2d 66 61 69 6c 2c 20 66 61 | s.and.validate..For.log-fail,.fa |
f60e0 | 69 6c 75 72 65 73 20 77 69 6c 6c 20 62 65 20 6c 6f 67 67 65 64 20 74 6f 6f 2e 00 54 68 65 20 60 | ilures.will.be.logged.too..The.` |
f6100 | 60 61 64 64 72 65 73 73 60 60 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 65 69 74 | `address``.can.be.configured.eit |
f6120 | 68 65 72 20 6f 6e 20 74 68 65 20 56 52 52 50 20 69 6e 74 65 72 66 61 63 65 20 6f 72 20 6f 6e 20 | her.on.the.VRRP.interface.or.on. |
f6140 | 6e 6f 74 20 56 52 52 50 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 65 20 60 60 61 64 64 72 65 73 | not.VRRP.interface..The.``addres |
f6160 | 73 60 60 20 70 61 72 61 6d 65 74 65 72 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 20 61 6e 20 49 | s``.parameter.can.be.either.an.I |
f6180 | 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 2c 20 62 75 74 20 79 6f 75 20 63 61 6e | Pv4.or.IPv6.address,.but.you.can |
f61a0 | 20 6e 6f 74 20 6d 69 78 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 69 6e 20 74 68 65 20 73 61 | .not.mix.IPv4.and.IPv6.in.the.sa |
f61c0 | 6d 65 20 67 72 6f 75 70 2c 20 61 6e 64 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 | me.group,.and.will.need.to.creat |
f61e0 | 65 20 67 72 6f 75 70 73 20 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 20 56 52 49 44 73 20 73 70 | e.groups.with.different.VRIDs.sp |
f6200 | 65 63 69 61 6c 6c 79 20 66 6f 72 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 2e 20 49 66 20 79 6f | ecially.for.IPv4.and.IPv6..If.yo |
f6220 | 75 20 77 61 6e 74 20 74 6f 20 75 73 65 20 49 50 76 34 20 2b 20 49 50 76 36 20 61 64 64 72 65 73 | u.want.to.use.IPv4.+.IPv6.addres |
f6240 | 73 20 79 6f 75 20 63 61 6e 20 75 73 65 20 6f 70 74 69 6f 6e 20 60 60 65 78 63 6c 75 64 65 64 2d | s.you.can.use.option.``excluded- |
f6260 | 61 64 64 72 65 73 73 60 60 00 54 68 65 20 60 60 68 74 74 70 60 60 20 73 65 72 76 69 63 65 20 69 | address``.The.``http``.service.i |
f6280 | 73 20 6c 65 73 74 65 6e 73 20 6f 6e 20 70 6f 72 74 20 38 30 20 61 6e 64 20 66 6f 72 63 65 20 72 | s.lestens.on.port.80.and.force.r |
f62a0 | 65 64 69 72 65 63 74 73 20 66 72 6f 6d 20 48 54 54 50 20 74 6f 20 48 54 54 50 53 2e 00 54 68 65 | edirects.from.HTTP.to.HTTPS..The |
f62c0 | 20 60 60 68 74 74 70 73 60 60 20 73 65 72 76 69 63 65 20 6c 69 73 74 65 6e 73 20 6f 6e 20 70 6f | .``https``.service.listens.on.po |
f62e0 | 72 74 20 34 34 33 20 77 69 74 68 20 62 61 63 6b 65 6e 64 20 60 62 6b 2d 64 65 66 61 75 6c 74 60 | rt.443.with.backend.`bk-default` |
f6300 | 20 74 6f 20 68 61 6e 64 6c 65 20 48 54 54 50 53 20 74 72 61 66 66 69 63 2e 20 49 74 20 75 73 65 | .to.handle.HTTPS.traffic..It.use |
f6320 | 73 20 63 65 72 74 69 66 69 63 61 74 65 20 6e 61 6d 65 64 20 60 60 63 65 72 74 60 60 20 66 6f 72 | s.certificate.named.``cert``.for |
f6340 | 20 53 53 4c 20 74 65 72 6d 69 6e 61 74 69 6f 6e 2e 00 54 68 65 20 60 60 70 65 72 73 69 73 74 65 | .SSL.termination..The.``persiste |
f6360 | 6e 74 2d 74 75 6e 6e 65 6c 60 60 20 64 69 72 65 63 74 69 76 65 20 77 69 6c 6c 20 61 6c 6c 6f 77 | nt-tunnel``.directive.will.allow |
f6380 | 20 75 73 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 75 6e 6e 65 6c 2d 72 65 6c 61 74 65 64 20 | .us.to.configure.tunnel-related. |
f63a0 | 61 74 74 72 69 62 75 74 65 73 2c 20 73 75 63 68 20 61 73 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c | attributes,.such.as.firewall.pol |
f63c0 | 69 63 79 20 61 73 20 77 65 20 77 6f 75 6c 64 20 6f 6e 20 61 6e 79 20 6e 6f 72 6d 61 6c 20 6e 65 | icy.as.we.would.on.any.normal.ne |
f63e0 | 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 65 20 60 60 73 6f 75 72 63 65 2d 61 64 | twork.interface..The.``source-ad |
f6400 | 64 72 65 73 73 60 60 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 6f 6e | dress``.must.be.configured.on.on |
f6420 | 65 20 6f 66 20 56 79 4f 53 20 69 6e 74 65 72 66 61 63 65 2e 20 42 65 73 74 20 70 72 61 63 74 69 | e.of.VyOS.interface..Best.practi |
f6440 | 63 65 20 77 6f 75 6c 64 20 62 65 20 61 20 6c 6f 6f 70 62 61 63 6b 20 6f 72 20 64 75 6d 6d 79 20 | ce.would.be.a.loopback.or.dummy. |
f6460 | 69 6e 74 65 72 66 61 63 65 2e 00 54 68 65 20 60 73 68 6f 77 20 62 72 69 64 67 65 60 20 6f 70 65 | interface..The.`show.bridge`.ope |
f6480 | 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 | rational.command.can.be.used.to. |
f64a0 | 64 69 73 70 6c 61 79 20 63 6f 6e 66 69 67 75 72 65 64 20 62 72 69 64 67 65 73 3a 00 54 68 65 20 | display.configured.bridges:.The. |
f64c0 | 61 62 6f 76 65 20 64 69 72 65 63 74 6f 72 79 20 61 6e 64 20 64 65 66 61 75 6c 74 2d 63 6f 6e 66 | above.directory.and.default-conf |
f64e0 | 69 67 20 6d 75 73 74 20 62 65 20 61 20 63 68 69 6c 64 20 64 69 72 65 63 74 6f 72 79 20 6f 66 20 | ig.must.be.a.child.directory.of. |
f6500 | 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2c 20 73 69 6e 63 65 20 66 69 6c 65 73 20 6f 75 74 73 69 64 | /config/auth,.since.files.outsid |
f6520 | 65 20 74 68 69 73 20 64 69 72 65 63 74 6f 72 79 20 61 72 65 20 6e 6f 74 20 70 65 72 73 69 73 74 | e.this.directory.are.not.persist |
f6540 | 65 64 20 61 66 74 65 72 20 61 6e 20 69 6d 61 67 65 20 75 70 67 72 61 64 65 2e 00 54 68 65 20 61 | ed.after.an.image.upgrade..The.a |
f6560 | 63 74 69 6f 6e 20 63 61 6e 20 62 65 20 3a 00 54 68 65 20 61 64 64 72 65 73 73 20 74 68 65 20 73 | ction.can.be.:.The.address.the.s |
f6580 | 65 72 76 65 72 20 6c 69 73 74 65 6e 73 20 74 6f 20 64 75 72 69 6e 67 20 68 74 74 70 2d 30 31 20 | erver.listens.to.during.http-01. |
f65a0 | 63 68 61 6c 6c 65 6e 67 65 00 54 68 65 20 61 64 76 61 6e 74 61 67 65 20 6f 66 20 74 68 69 73 20 | challenge.The.advantage.of.this. |
f65c0 | 69 73 20 74 68 61 74 20 74 68 65 20 72 6f 75 74 65 2d 73 65 6c 65 63 74 69 6f 6e 20 28 61 74 20 | is.that.the.route-selection.(at. |
f65e0 | 74 68 69 73 20 70 6f 69 6e 74 29 20 77 69 6c 6c 20 62 65 20 6d 6f 72 65 20 64 65 74 65 72 6d 69 | this.point).will.be.more.determi |
f6600 | 6e 69 73 74 69 63 2e 20 54 68 65 20 64 69 73 61 64 76 61 6e 74 61 67 65 20 69 73 20 74 68 61 74 | nistic..The.disadvantage.is.that |
f6620 | 20 61 20 66 65 77 20 6f 72 20 65 76 65 6e 20 6f 6e 65 20 6c 6f 77 65 73 74 2d 49 44 20 72 6f 75 | .a.few.or.even.one.lowest-ID.rou |
f6640 | 74 65 72 20 6d 61 79 20 61 74 74 72 61 63 74 20 61 6c 6c 20 74 72 61 66 66 69 63 20 74 6f 20 6f | ter.may.attract.all.traffic.to.o |
f6660 | 74 68 65 72 77 69 73 65 2d 65 71 75 61 6c 20 70 61 74 68 73 20 62 65 63 61 75 73 65 20 6f 66 20 | therwise-equal.paths.because.of. |
f6680 | 74 68 69 73 20 63 68 65 63 6b 2e 20 49 74 20 6d 61 79 20 69 6e 63 72 65 61 73 65 20 74 68 65 20 | this.check..It.may.increase.the. |
f66a0 | 70 6f 73 73 69 62 69 6c 69 74 79 20 6f 66 20 4d 45 44 20 6f 72 20 49 47 50 20 6f 73 63 69 6c 6c | possibility.of.MED.or.IGP.oscill |
f66c0 | 61 74 69 6f 6e 2c 20 75 6e 6c 65 73 73 20 6f 74 68 65 72 20 6d 65 61 73 75 72 65 73 20 77 65 72 | ation,.unless.other.measures.wer |
f66e0 | 65 20 74 61 6b 65 6e 20 74 6f 20 61 76 6f 69 64 20 74 68 65 73 65 2e 20 54 68 65 20 65 78 61 63 | e.taken.to.avoid.these..The.exac |
f6700 | 74 20 62 65 68 61 76 69 6f 75 72 20 77 69 6c 6c 20 62 65 20 73 65 6e 73 69 74 69 76 65 20 74 6f | t.behaviour.will.be.sensitive.to |
f6720 | 20 74 68 65 20 69 42 47 50 20 61 6e 64 20 72 65 66 6c 65 63 74 69 6f 6e 20 74 6f 70 6f 6c 6f 67 | .the.iBGP.and.reflection.topolog |
f6740 | 79 2e 00 54 68 65 20 61 6c 6c 6f 63 61 74 65 64 20 61 64 64 72 65 73 73 20 62 6c 6f 63 6b 20 69 | y..The.allocated.address.block.i |
f6760 | 73 20 31 30 30 2e 36 34 2e 30 2e 30 2f 31 30 2e 00 54 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 44 | s.100.64.0.0/10..The.amount.of.D |
f6780 | 75 70 6c 69 63 61 74 65 20 41 64 64 72 65 73 73 20 44 65 74 65 63 74 69 6f 6e 20 70 72 6f 62 65 | uplicate.Address.Detection.probe |
f67a0 | 73 20 74 6f 20 73 65 6e 64 2e 00 54 68 65 20 61 74 74 72 69 62 75 74 65 73 20 3a 63 66 67 63 6d | s.to.send..The.attributes.:cfgcm |
f67c0 | 64 3a 60 70 72 65 66 69 78 2d 6c 69 73 74 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 64 69 73 | d:`prefix-list`.and.:cfgcmd:`dis |
f67e0 | 74 72 69 62 75 74 65 2d 6c 69 73 74 60 20 61 72 65 20 6d 75 74 75 61 6c 6c 79 20 65 78 63 6c 75 | tribute-list`.are.mutually.exclu |
f6800 | 73 69 76 65 2c 20 61 6e 64 20 6f 6e 6c 79 20 6f 6e 65 20 63 6f 6d 6d 61 6e 64 20 28 64 69 73 74 | sive,.and.only.one.command.(dist |
f6820 | 72 69 62 75 74 65 2d 6c 69 73 74 20 6f 72 20 70 72 65 66 69 78 2d 6c 69 73 74 29 20 63 61 6e 20 | ribute-list.or.prefix-list).can. |
f6840 | 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 65 61 63 68 20 69 6e 62 6f 75 6e 64 20 6f 72 20 6f 75 | be.applied.to.each.inbound.or.ou |
f6860 | 74 62 6f 75 6e 64 20 64 69 72 65 63 74 69 6f 6e 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 | tbound.direction.for.a.particula |
f6880 | 72 20 6e 65 69 67 68 62 6f 72 2e 00 54 68 65 20 61 76 61 69 6c 61 62 6c 65 20 6f 70 74 69 6f 6e | r.neighbor..The.available.option |
f68a0 | 73 20 66 6f 72 20 3c 6d 61 74 63 68 3e 20 61 72 65 3a 00 54 68 65 20 62 65 6c 6f 77 20 72 65 66 | s.for.<match>.are:.The.below.ref |
f68c0 | 65 72 65 6e 63 65 64 20 49 50 20 61 64 64 72 65 73 73 20 60 31 39 32 2e 30 2e 32 2e 31 60 20 69 | erenced.IP.address.`192.0.2.1`.i |
f68e0 | 73 20 75 73 65 64 20 61 73 20 65 78 61 6d 70 6c 65 20 61 64 64 72 65 73 73 20 72 65 70 72 65 73 | s.used.as.example.address.repres |
f6900 | 65 6e 74 69 6e 67 20 61 20 67 6c 6f 62 61 6c 20 75 6e 69 63 61 73 74 20 61 64 64 72 65 73 73 20 | enting.a.global.unicast.address. |
f6920 | 75 6e 64 65 72 20 77 68 69 63 68 20 74 68 65 20 48 55 42 20 63 61 6e 20 62 65 20 63 6f 6e 74 61 | under.which.the.HUB.can.be.conta |
f6940 | 63 74 65 64 20 62 79 20 65 61 63 68 20 61 6e 64 20 65 76 65 72 79 20 69 6e 64 69 76 69 64 75 61 | cted.by.each.and.every.individua |
f6960 | 6c 20 73 70 6f 6b 65 2e 00 54 68 65 20 62 6f 6e 64 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 70 | l.spoke..The.bonding.interface.p |
f6980 | 72 6f 76 69 64 65 73 20 61 20 6d 65 74 68 6f 64 20 66 6f 72 20 61 67 67 72 65 67 61 74 69 6e 67 | rovides.a.method.for.aggregating |
f69a0 | 20 6d 75 6c 74 69 70 6c 65 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 73 20 69 6e 74 | .multiple.network.interfaces.int |
f69c0 | 6f 20 61 20 73 69 6e 67 6c 65 20 6c 6f 67 69 63 61 6c 20 22 62 6f 6e 64 65 64 22 20 69 6e 74 65 | o.a.single.logical."bonded".inte |
f69e0 | 72 66 61 63 65 2c 20 6f 72 20 4c 41 47 2c 20 6f 72 20 65 74 68 65 72 2d 63 68 61 6e 6e 65 6c 2c | rface,.or.LAG,.or.ether-channel, |
f6a00 | 20 6f 72 20 70 6f 72 74 2d 63 68 61 6e 6e 65 6c 2e 20 54 68 65 20 62 65 68 61 76 69 6f 72 20 6f | .or.port-channel..The.behavior.o |
f6a20 | 66 20 74 68 65 20 62 6f 6e 64 65 64 20 69 6e 74 65 72 66 61 63 65 73 20 64 65 70 65 6e 64 73 20 | f.the.bonded.interfaces.depends. |
f6a40 | 75 70 6f 6e 20 74 68 65 20 6d 6f 64 65 3b 20 67 65 6e 65 72 61 6c 6c 79 20 73 70 65 61 6b 69 6e | upon.the.mode;.generally.speakin |
f6a60 | 67 2c 20 6d 6f 64 65 73 20 70 72 6f 76 69 64 65 20 65 69 74 68 65 72 20 68 6f 74 20 73 74 61 6e | g,.modes.provide.either.hot.stan |
f6a80 | 64 62 79 20 6f 72 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 73 65 72 76 69 63 65 73 2e 20 | dby.or.load.balancing.services.. |
f6aa0 | 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 6c 69 6e 6b 20 69 6e 74 65 67 72 69 74 79 20 6d 6f 6e | Additionally,.link.integrity.mon |
f6ac0 | 69 74 6f 72 69 6e 67 20 6d 61 79 20 62 65 20 70 65 72 66 6f 72 6d 65 64 2e 00 54 68 65 20 63 61 | itoring.may.be.performed..The.ca |
f6ae0 | 73 65 20 6f 66 20 69 6e 67 72 65 73 73 20 73 68 61 70 69 6e 67 00 54 68 65 20 63 6c 69 65 6e 74 | se.of.ingress.shaping.The.client |
f6b00 | 2c 20 6f 6e 63 65 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 61 75 74 68 65 6e 74 69 63 61 74 65 | ,.once.successfully.authenticate |
f6b20 | 64 2c 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 61 6e 20 49 50 76 34 20 61 6e 64 20 61 6e 20 49 | d,.will.receive.an.IPv4.and.an.I |
f6b40 | 50 76 36 20 2f 36 34 20 61 64 64 72 65 73 73 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 | Pv6./64.address.to.terminate.the |
f6b60 | 20 50 50 50 6f 45 20 65 6e 64 70 6f 69 6e 74 20 6f 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 73 69 | .PPPoE.endpoint.on.the.client.si |
f6b80 | 64 65 20 61 6e 64 20 61 20 2f 35 36 20 73 75 62 6e 65 74 20 66 6f 72 20 74 68 65 20 63 6c 69 65 | de.and.a./56.subnet.for.the.clie |
f6ba0 | 6e 74 73 20 69 6e 74 65 72 6e 61 6c 20 75 73 65 2e 00 54 68 65 20 63 6c 69 65 6e 74 2c 20 6f 6e | nts.internal.use..The.client,.on |
f6bc0 | 63 65 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 2c 20 77 | ce.successfully.authenticated,.w |
f6be0 | 69 6c 6c 20 72 65 63 65 69 76 65 20 61 6e 20 49 50 76 34 20 61 6e 64 20 61 6e 20 49 50 76 36 20 | ill.receive.an.IPv4.and.an.IPv6. |
f6c00 | 2f 36 34 20 61 64 64 72 65 73 73 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 70 70 70 | /64.address.to.terminate.the.ppp |
f6c20 | 6f 65 20 65 6e 64 70 6f 69 6e 74 20 6f 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 73 69 64 65 20 61 | oe.endpoint.on.the.client.side.a |
f6c40 | 6e 64 20 61 20 2f 35 36 20 73 75 62 6e 65 74 20 66 6f 72 20 74 68 65 20 63 6c 69 65 6e 74 73 20 | nd.a./56.subnet.for.the.clients. |
f6c60 | 69 6e 74 65 72 6e 61 6c 20 75 73 65 2e 00 54 68 65 20 63 6c 69 65 6e 74 73 20 3a 61 62 62 72 3a | internal.use..The.clients.:abbr: |
f6c80 | 60 43 50 45 20 28 43 75 73 74 6f 6d 65 72 20 50 72 65 6d 69 73 65 73 20 45 71 75 69 70 6d 65 6e | `CPE.(Customer.Premises.Equipmen |
f6ca0 | 74 29 60 20 63 61 6e 20 6e 6f 77 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 76 69 61 20 49 50 76 34 | t)`.can.now.communicate.via.IPv4 |
f6cc0 | 20 6f 72 20 49 50 76 36 2e 20 41 6c 6c 20 64 65 76 69 63 65 73 20 62 65 68 69 6e 64 20 60 60 32 | .or.IPv6..All.devices.behind.``2 |
f6ce0 | 30 30 31 3a 64 62 38 3a 3a 61 30 30 3a 32 37 66 66 3a 66 65 32 66 3a 64 38 30 36 2f 36 34 60 60 | 001:db8::a00:27ff:fe2f:d806/64`` |
f6d00 | 20 63 61 6e 20 75 73 65 20 61 64 64 72 65 73 73 65 73 20 66 72 6f 6d 20 60 60 32 30 30 31 3a 64 | .can.use.addresses.from.``2001:d |
f6d20 | 62 38 3a 31 3a 3a 2f 35 36 60 60 20 61 6e 64 20 63 61 6e 20 67 6c 6f 62 61 6c 6c 79 20 63 6f 6d | b8:1::/56``.and.can.globally.com |
f6d40 | 6d 75 6e 69 63 61 74 65 20 77 69 74 68 6f 75 74 20 74 68 65 20 6e 65 65 64 20 6f 66 20 61 6e 79 | municate.without.the.need.of.any |
f6d60 | 20 4e 41 54 20 72 75 6c 65 73 2e 00 54 68 65 20 63 6f 6d 6d 61 6e 64 20 3a 6f 70 63 6d 64 3a 60 | .NAT.rules..The.command.:opcmd:` |
f6d80 | 73 68 6f 77 20 69 6e 74 65 72 66 61 63 65 73 20 77 69 72 65 67 75 61 72 64 20 77 67 30 31 20 70 | show.interfaces.wireguard.wg01.p |
f6da0 | 75 62 6c 69 63 2d 6b 65 79 60 20 77 69 6c 6c 20 74 68 65 6e 20 73 68 6f 77 20 74 68 65 20 70 75 | ublic-key`.will.then.show.the.pu |
f6dc0 | 62 6c 69 63 20 6b 65 79 2c 20 77 68 69 63 68 20 6e 65 65 64 73 20 74 6f 20 62 65 20 73 68 61 72 | blic.key,.which.needs.to.be.shar |
f6de0 | 65 64 20 77 69 74 68 20 74 68 65 20 70 65 65 72 2e 00 54 68 65 20 63 6f 6d 6d 61 6e 64 20 61 6c | ed.with.the.peer..The.command.al |
f6e00 | 73 6f 20 67 65 6e 65 72 61 74 65 73 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 6e 69 | so.generates.a.configuration.sni |
f6e20 | 70 70 65 64 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 63 6f 70 79 2f 70 61 73 74 65 64 20 69 6e | pped.which.can.be.copy/pasted.in |
f6e40 | 74 6f 20 74 68 65 20 56 79 4f 53 20 43 4c 49 20 69 66 20 6e 65 65 64 65 64 2e 20 54 68 65 20 73 | to.the.VyOS.CLI.if.needed..The.s |
f6e60 | 75 70 70 6c 69 65 64 20 60 60 3c 6e 61 6d 65 3e 60 60 20 6f 6e 20 74 68 65 20 43 4c 49 20 77 69 | upplied.``<name>``.on.the.CLI.wi |
f6e80 | 6c 6c 20 62 65 63 6f 6d 65 20 74 68 65 20 70 65 65 72 20 6e 61 6d 65 20 69 6e 20 74 68 65 20 73 | ll.become.the.peer.name.in.the.s |
f6ea0 | 6e 69 70 70 65 74 2e 00 54 68 65 20 63 6f 6d 6d 61 6e 64 20 62 65 6c 6f 77 20 65 6e 61 62 6c 65 | nippet..The.command.below.enable |
f6ec0 | 73 20 69 74 2c 20 61 73 73 75 6d 69 6e 67 20 74 68 65 20 52 41 44 49 55 53 20 63 6f 6e 6e 65 63 | s.it,.assuming.the.RADIUS.connec |
f6ee0 | 74 69 6f 6e 20 68 61 73 20 62 65 65 6e 20 73 65 74 75 70 20 61 6e 64 20 69 73 20 77 6f 72 6b 69 | tion.has.been.setup.and.is.worki |
f6f00 | 6e 67 2e 00 54 68 65 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 63 75 72 72 65 6e 74 | ng..The.command.displays.current |
f6f20 | 20 52 49 50 20 73 74 61 74 75 73 2e 20 49 74 20 69 6e 63 6c 75 64 65 73 20 52 49 50 20 74 69 6d | .RIP.status..It.includes.RIP.tim |
f6f40 | 65 72 2c 20 66 69 6c 74 65 72 69 6e 67 2c 20 76 65 72 73 69 6f 6e 2c 20 52 49 50 20 65 6e 61 62 | er,.filtering,.version,.RIP.enab |
f6f60 | 6c 65 64 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 52 49 50 20 70 65 65 72 20 69 6e 66 6f 72 | led.interface.and.RIP.peer.infor |
f6f80 | 6d 61 74 69 6f 6e 2e 00 54 68 65 20 63 6f 6d 6d 61 6e 64 20 70 6f 6e 20 54 45 53 54 55 4e 4e 45 | mation..The.command.pon.TESTUNNE |
f6fa0 | 4c 20 65 73 74 61 62 6c 69 73 68 65 73 20 74 68 65 20 50 50 54 50 20 74 75 6e 6e 65 6c 20 74 6f | L.establishes.the.PPTP.tunnel.to |
f6fc0 | 20 74 68 65 20 72 65 6d 6f 74 65 20 73 79 73 74 65 6d 2e 00 54 68 65 20 63 6f 6d 70 75 74 65 72 | .the.remote.system..The.computer |
f6fe0 | 73 20 6f 6e 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 63 61 6e 20 75 73 65 | s.on.an.internal.network.can.use |
f7000 | 20 61 6e 79 20 6f 66 20 74 68 65 20 61 64 64 72 65 73 73 65 73 20 73 65 74 20 61 73 69 64 65 20 | .any.of.the.addresses.set.aside. |
f7020 | 62 79 20 74 68 65 20 3a 61 62 62 72 3a 60 49 41 4e 41 20 28 49 6e 74 65 72 6e 65 74 20 41 73 73 | by.the.:abbr:`IANA.(Internet.Ass |
f7040 | 69 67 6e 65 64 20 4e 75 6d 62 65 72 73 20 41 75 74 68 6f 72 69 74 79 29 60 20 66 6f 72 20 70 72 | igned.Numbers.Authority)`.for.pr |
f7060 | 69 76 61 74 65 20 61 64 64 72 65 73 73 69 6e 67 20 28 73 65 65 20 3a 72 66 63 3a 60 31 39 31 38 | ivate.addressing.(see.:rfc:`1918 |
f7080 | 60 29 2e 20 54 68 65 73 65 20 72 65 73 65 72 76 65 64 20 49 50 20 61 64 64 72 65 73 73 65 73 20 | `)..These.reserved.IP.addresses. |
f70a0 | 61 72 65 20 6e 6f 74 20 69 6e 20 75 73 65 20 6f 6e 20 74 68 65 20 49 6e 74 65 72 6e 65 74 2c 20 | are.not.in.use.on.the.Internet,. |
f70c0 | 73 6f 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 6d 61 63 68 69 6e 65 20 77 69 6c 6c 20 6e 6f 74 20 | so.an.external.machine.will.not. |
f70e0 | 64 69 72 65 63 74 6c 79 20 72 6f 75 74 65 20 74 6f 20 74 68 65 6d 2e 20 54 68 65 20 66 6f 6c 6c | directly.route.to.them..The.foll |
f7100 | 6f 77 69 6e 67 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 72 65 73 65 72 76 65 64 20 66 6f 72 | owing.addresses.are.reserved.for |
f7120 | 20 70 72 69 76 61 74 65 20 75 73 65 3a 00 54 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | .private.use:.The.configuration. |
f7140 | 77 69 6c 6c 20 6c 6f 6f 6b 20 61 73 20 66 6f 6c 6c 6f 77 73 3a 00 54 68 65 20 63 6f 6e 66 69 67 | will.look.as.follows:.The.config |
f7160 | 75 72 61 74 69 6f 6e 73 20 61 62 6f 76 65 20 77 69 6c 6c 20 64 65 66 61 75 6c 74 20 74 6f 20 75 | urations.above.will.default.to.u |
f7180 | 73 69 6e 67 20 32 35 36 2d 62 69 74 20 41 45 53 20 69 6e 20 47 43 4d 20 6d 6f 64 65 20 66 6f 72 | sing.256-bit.AES.in.GCM.mode.for |
f71a0 | 20 65 6e 63 72 79 70 74 69 6f 6e 20 28 69 66 20 62 6f 74 68 20 73 69 64 65 73 20 73 75 70 70 6f | .encryption.(if.both.sides.suppo |
f71c0 | 72 74 20 4e 43 50 29 20 61 6e 64 20 53 48 41 2d 31 20 66 6f 72 20 48 4d 41 43 20 61 75 74 68 65 | rt.NCP).and.SHA-1.for.HMAC.authe |
f71e0 | 6e 74 69 63 61 74 69 6f 6e 2e 20 53 48 41 2d 31 20 69 73 20 63 6f 6e 73 69 64 65 72 65 64 20 77 | ntication..SHA-1.is.considered.w |
f7200 | 65 61 6b 2c 20 62 75 74 20 6f 74 68 65 72 20 68 61 73 68 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d | eak,.but.other.hashing.algorithm |
f7220 | 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 2c 20 61 73 20 61 72 65 20 65 6e 63 72 79 70 74 69 | s.are.available,.as.are.encrypti |
f7240 | 6f 6e 20 61 6c 67 6f 72 69 74 68 6d 73 3a 00 54 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 | on.algorithms:.The.connection.st |
f7260 | 61 74 65 20 68 6f 77 65 76 65 72 20 69 73 20 63 6f 6d 70 6c 65 74 65 6c 79 20 69 6e 64 65 70 65 | ate.however.is.completely.indepe |
f7280 | 6e 64 65 6e 74 20 6f 66 20 61 6e 79 20 75 70 70 65 72 2d 6c 65 76 65 6c 20 73 74 61 74 65 2c 20 | ndent.of.any.upper-level.state,. |
f72a0 | 73 75 63 68 20 61 73 20 54 43 50 27 73 20 6f 72 20 53 43 54 50 27 73 20 73 74 61 74 65 2e 20 50 | such.as.TCP's.or.SCTP's.state..P |
f72c0 | 61 72 74 20 6f 66 20 74 68 65 20 72 65 61 73 6f 6e 20 66 6f 72 20 74 68 69 73 20 69 73 20 74 68 | art.of.the.reason.for.this.is.th |
f72e0 | 61 74 20 77 68 65 6e 20 6d 65 72 65 6c 79 20 66 6f 72 77 61 72 64 69 6e 67 20 70 61 63 6b 65 74 | at.when.merely.forwarding.packet |
f7300 | 73 2c 20 69 2e 65 2e 20 6e 6f 20 6c 6f 63 61 6c 20 64 65 6c 69 76 65 72 79 2c 20 74 68 65 20 54 | s,.i.e..no.local.delivery,.the.T |
f7320 | 43 50 20 65 6e 67 69 6e 65 20 6d 61 79 20 6e 6f 74 20 6e 65 63 65 73 73 61 72 69 6c 79 20 62 65 | CP.engine.may.not.necessarily.be |
f7340 | 20 69 6e 76 6f 6b 65 64 20 61 74 20 61 6c 6c 2e 20 45 76 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e | .invoked.at.all..Even.connection |
f7360 | 6c 65 73 73 2d 6d 6f 64 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 73 20 73 75 63 68 20 61 73 20 | less-mode.transmissions.such.as. |
f7380 | 55 44 50 2c 20 49 50 73 65 63 20 28 41 48 2f 45 53 50 29 2c 20 47 52 45 20 61 6e 64 20 6f 74 68 | UDP,.IPsec.(AH/ESP),.GRE.and.oth |
f73a0 | 65 72 20 74 75 6e 6e 65 6c 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 68 61 76 65 2c 20 61 74 20 | er.tunneling.protocols.have,.at. |
f73c0 | 6c 65 61 73 74 2c 20 61 20 70 73 65 75 64 6f 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 65 | least,.a.pseudo.connection.state |
f73e0 | 2e 20 54 68 65 20 68 65 75 72 69 73 74 69 63 20 66 6f 72 20 73 75 63 68 20 70 72 6f 74 6f 63 6f | ..The.heuristic.for.such.protoco |
f7400 | 6c 73 20 69 73 20 6f 66 74 65 6e 20 62 61 73 65 64 20 75 70 6f 6e 20 61 20 70 72 65 73 65 74 20 | ls.is.often.based.upon.a.preset. |
f7420 | 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 20 66 6f 72 20 69 6e 61 63 74 69 76 69 74 79 2c 20 61 66 | timeout.value.for.inactivity,.af |
f7440 | 74 65 72 20 77 68 6f 73 65 20 65 78 70 69 72 61 74 69 6f 6e 20 61 20 4e 65 74 66 69 6c 74 65 72 | ter.whose.expiration.a.Netfilter |
f7460 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 64 72 6f 70 70 65 64 2e 00 54 68 65 20 63 6f 6e 6e | .connection.is.dropped..The.conn |
f7480 | 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 65 78 70 65 63 74 20 74 61 62 6c 65 20 63 6f 6e | ection.tracking.expect.table.con |
f74a0 | 74 61 69 6e 73 20 6f 6e 65 20 65 6e 74 72 79 20 66 6f 72 20 65 61 63 68 20 65 78 70 65 63 74 65 | tains.one.entry.for.each.expecte |
f74c0 | 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 72 65 6c 61 74 65 64 20 74 6f 20 61 6e 20 65 78 69 73 74 | d.connection.related.to.an.exist |
f74e0 | 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 54 68 65 73 65 20 61 72 65 20 67 65 6e 65 72 61 | ing.connection..These.are.genera |
f7500 | 6c 6c 79 20 75 73 65 64 20 62 79 20 e2 80 9c 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 | lly.used.by....connection.tracki |
f7520 | 6e 67 20 68 65 6c 70 65 72 e2 80 9d 20 6d 6f 64 75 6c 65 73 20 73 75 63 68 20 61 73 20 46 54 50 | ng.helper....modules.such.as.FTP |
f7540 | 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 73 69 7a 65 20 6f 66 20 74 68 65 20 65 78 70 65 63 74 | ..The.default.size.of.the.expect |
f7560 | 20 74 61 62 6c 65 20 69 73 20 32 30 34 38 20 65 6e 74 72 69 65 73 2e 00 54 68 65 20 63 6f 6e 6e | .table.is.2048.entries..The.conn |
f7580 | 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 74 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 6f | ection.tracking.table.contains.o |
f75a0 | 6e 65 20 65 6e 74 72 79 20 66 6f 72 20 65 61 63 68 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 62 65 69 | ne.entry.for.each.connection.bei |
f75c0 | 6e 67 20 74 72 61 63 6b 65 64 20 62 79 20 74 68 65 20 73 79 73 74 65 6d 2e 00 54 68 65 20 63 75 | ng.tracked.by.the.system..The.cu |
f75e0 | 72 72 65 6e 74 20 61 74 74 72 69 62 75 74 65 20 27 46 69 6c 74 65 72 2d 49 64 27 20 69 73 20 62 | rrent.attribute.'Filter-Id'.is.b |
f7600 | 65 69 6e 67 20 75 73 65 64 20 61 73 20 64 65 66 61 75 6c 74 20 61 6e 64 20 63 61 6e 20 62 65 20 | eing.used.as.default.and.can.be. |
f7620 | 73 65 74 75 70 20 77 69 74 68 69 6e 20 52 41 44 49 55 53 3a 00 54 68 65 20 63 75 72 72 65 6e 74 | setup.within.RADIUS:.The.current |
f7640 | 20 61 74 74 72 69 62 75 74 65 20 60 60 46 69 6c 74 65 72 2d 49 64 60 60 20 69 73 20 62 65 69 6e | .attribute.``Filter-Id``.is.bein |
f7660 | 67 20 75 73 65 64 20 61 73 20 64 65 66 61 75 6c 74 20 61 6e 64 20 63 61 6e 20 62 65 20 73 65 74 | g.used.as.default.and.can.be.set |
f7680 | 75 70 20 77 69 74 68 69 6e 20 52 41 44 49 55 53 3a 00 54 68 65 20 63 75 72 72 65 6e 74 20 70 72 | up.within.RADIUS:.The.current.pr |
f76a0 | 6f 74 6f 63 6f 6c 20 69 73 20 76 65 72 73 69 6f 6e 20 34 20 28 4e 54 50 76 34 29 2c 20 77 68 69 | otocol.is.version.4.(NTPv4),.whi |
f76c0 | 63 68 20 69 73 20 61 20 70 72 6f 70 6f 73 65 64 20 73 74 61 6e 64 61 72 64 20 61 73 20 64 6f 63 | ch.is.a.proposed.standard.as.doc |
f76e0 | 75 6d 65 6e 74 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 39 30 35 60 2e 20 49 74 20 69 73 20 62 61 | umented.in.:rfc:`5905`..It.is.ba |
f7700 | 63 6b 77 61 72 64 20 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 76 65 72 73 69 6f 6e 20 33 | ckward.compatible.with.version.3 |
f7720 | 2c 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 31 33 30 35 60 2e 00 54 68 65 20 | ,.specified.in.:rfc:`1305`..The. |
f7740 | 64 61 65 6d 6f 6e 20 64 6f 75 62 6c 65 73 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 6e | daemon.doubles.the.size.of.the.n |
f7760 | 65 74 6c 69 6e 6b 20 65 76 65 6e 74 20 73 6f 63 6b 65 74 20 62 75 66 66 65 72 20 73 69 7a 65 20 | etlink.event.socket.buffer.size. |
f7780 | 69 66 20 69 74 20 64 65 74 65 63 74 73 20 6e 65 74 6c 69 6e 6b 20 65 76 65 6e 74 20 6d 65 73 73 | if.it.detects.netlink.event.mess |
f77a0 | 61 67 65 20 64 72 6f 70 70 69 6e 67 2e 20 54 68 69 73 20 63 6c 61 75 73 65 20 73 65 74 73 20 74 | age.dropping..This.clause.sets.t |
f77c0 | 68 65 20 6d 61 78 69 6d 75 6d 20 62 75 66 66 65 72 20 73 69 7a 65 20 67 72 6f 77 74 68 20 74 68 | he.maximum.buffer.size.growth.th |
f77e0 | 61 74 20 63 61 6e 20 62 65 20 72 65 61 63 68 65 64 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 52 | at.can.be.reached..The.default.R |
f7800 | 41 44 49 55 53 20 61 74 74 72 69 62 75 74 65 20 66 6f 72 20 72 61 74 65 20 6c 69 6d 69 74 69 6e | ADIUS.attribute.for.rate.limitin |
f7820 | 67 20 69 73 20 60 60 46 69 6c 74 65 72 2d 49 64 60 60 2c 20 62 75 74 20 79 6f 75 20 6d 61 79 20 | g.is.``Filter-Id``,.but.you.may. |
f7840 | 61 6c 73 6f 20 72 65 64 65 66 69 6e 65 20 69 74 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 56 79 | also.redefine.it..The.default.Vy |
f7860 | 4f 53 20 75 73 65 72 20 61 63 63 6f 75 6e 74 20 28 60 76 79 6f 73 60 29 2c 20 61 73 20 77 65 6c | OS.user.account.(`vyos`),.as.wel |
f7880 | 6c 20 61 73 20 6e 65 77 6c 79 20 63 72 65 61 74 65 64 20 75 73 65 72 20 61 63 63 6f 75 6e 74 73 | l.as.newly.created.user.accounts |
f78a0 | 2c 20 68 61 76 65 20 61 6c 6c 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 74 6f 20 63 6f 6e 66 69 | ,.have.all.capabilities.to.confi |
f78c0 | 67 75 72 65 20 74 68 65 20 73 79 73 74 65 6d 2e 20 41 6c 6c 20 61 63 63 6f 75 6e 74 73 20 68 61 | gure.the.system..All.accounts.ha |
f78e0 | 76 65 20 73 75 64 6f 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 61 6e 64 20 74 68 65 72 65 66 6f | ve.sudo.capabilities.and.therefo |
f7900 | 72 65 20 63 61 6e 20 6f 70 65 72 61 74 65 20 61 73 20 72 6f 6f 74 20 6f 6e 20 74 68 65 20 73 79 | re.can.operate.as.root.on.the.sy |
f7920 | 73 74 65 6d 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 68 6f 73 74 6e 61 6d 65 20 75 73 65 64 20 | stem..The.default.hostname.used. |
f7940 | 69 73 20 60 76 79 6f 73 60 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 34 39 32 2e 00 | is.`vyos`..The.default.is.1492.. |
f7960 | 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 60 60 38 30 32 2e 31 71 60 60 2e 00 54 68 65 20 64 | The.default.is.``802.1q``..The.d |
f7980 | 65 66 61 75 6c 74 20 6c 65 61 73 65 20 74 69 6d 65 20 66 6f 72 20 44 48 43 50 76 36 20 6c 65 61 | efault.lease.time.for.DHCPv6.lea |
f79a0 | 73 65 73 20 69 73 20 32 34 20 68 6f 75 72 73 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 63 68 61 | ses.is.24.hours..This.can.be.cha |
f79c0 | 6e 67 65 64 20 62 79 20 73 75 70 70 6c 79 69 6e 67 20 61 20 60 60 64 65 66 61 75 6c 74 2d 74 69 | nged.by.supplying.a.``default-ti |
f79e0 | 6d 65 60 60 2c 20 60 60 6d 61 78 69 6d 75 6d 2d 74 69 6d 65 60 60 20 61 6e 64 20 60 60 6d 69 6e | me``,.``maximum-time``.and.``min |
f7a00 | 69 6d 75 6d 2d 74 69 6d 65 60 60 2e 20 41 6c 6c 20 76 61 6c 75 65 73 20 6e 65 65 64 20 74 6f 20 | imum-time``..All.values.need.to. |
f7a20 | 62 65 20 73 75 70 70 6c 69 65 64 20 69 6e 20 73 65 63 6f 6e 64 73 2e 00 54 68 65 20 64 65 66 61 | be.supplied.in.seconds..The.defa |
f7a40 | 75 6c 74 20 70 6f 72 74 20 75 64 70 20 69 73 20 73 65 74 20 74 6f 20 38 34 37 32 2e 20 49 74 20 | ult.port.udp.is.set.to.8472..It. |
f7a60 | 63 61 6e 20 62 65 20 63 68 61 6e 67 65 64 20 77 69 74 68 20 60 60 73 65 74 20 69 6e 74 65 72 66 | can.be.changed.with.``set.interf |
f7a80 | 61 63 65 20 76 78 6c 61 6e 20 3c 76 78 6c 61 6e 4e 3e 20 70 6f 72 74 20 3c 70 6f 72 74 3e 60 60 | ace.vxlan.<vxlanN>.port.<port>`` |
f7aa0 | 00 54 68 65 20 64 65 66 61 75 6c 74 20 74 69 6d 65 20 69 73 20 36 30 20 73 65 63 6f 6e 64 73 2e | .The.default.time.is.60.seconds. |
f7ac0 | 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 63 6f 72 72 65 73 70 6f 6e 64 73 20 74 | .The.default.value.corresponds.t |
f7ae0 | 6f 20 36 34 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 30 2e 20 54 68 | o.64..The.default.value.is.0..Th |
f7b00 | 69 73 20 77 69 6c 6c 20 63 61 75 73 65 20 74 68 65 20 63 61 72 72 69 65 72 20 74 6f 20 62 65 20 | is.will.cause.the.carrier.to.be. |
f7b20 | 61 73 73 65 72 74 65 64 20 28 66 6f 72 20 38 30 32 2e 33 61 64 20 6d 6f 64 65 29 20 77 68 65 6e | asserted.(for.802.3ad.mode).when |
f7b40 | 65 76 65 72 20 74 68 65 72 65 20 69 73 20 61 6e 20 61 63 74 69 76 65 20 61 67 67 72 65 67 61 74 | ever.there.is.an.active.aggregat |
f7b60 | 6f 72 2c 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 | or,.regardless.of.the.number.of. |
f7b80 | 61 76 61 69 6c 61 62 6c 65 20 6c 69 6e 6b 73 20 69 6e 20 74 68 61 74 20 61 67 67 72 65 67 61 74 | available.links.in.that.aggregat |
f7ba0 | 6f 72 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 33 20 70 61 63 6b 65 | or..The.default.value.is.3.packe |
f7bc0 | 74 73 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 33 2e 00 54 68 65 20 | ts..The.default.value.is.3..The. |
f7be0 | 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 33 30 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 | default.value.is.300.seconds..Th |
f7c00 | 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 30 30 20 73 65 63 6f 6e 64 73 2e 00 | e.default.value.is.600.seconds.. |
f7c20 | 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 37 32 30 30 20 73 65 63 6f 6e 64 | The.default.value.is.7200.second |
f7c40 | 73 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 38 36 34 30 30 20 73 65 | s..The.default.value.is.86400.se |
f7c60 | 63 6f 6e 64 73 20 77 68 69 63 68 20 63 6f 72 72 65 73 70 6f 6e 64 73 20 74 6f 20 6f 6e 65 20 64 | conds.which.corresponds.to.one.d |
f7c80 | 61 79 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 73 6c 6f 77 2e 00 54 | ay..The.default.value.is.slow..T |
f7ca0 | 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 73 20 66 6f 72 20 74 68 65 20 6d 69 6e 69 6d 75 | he.default.values.for.the.minimu |
f7cc0 | 6d 2d 74 68 72 65 73 68 6f 6c 64 20 64 65 70 65 6e 64 20 6f 6e 20 49 50 20 70 72 65 63 65 64 65 | m-threshold.depend.on.IP.precede |
f7ce0 | 6e 63 65 3a 00 54 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 75 73 65 64 20 66 | nce:.The.destination.port.used.f |
f7d00 | 6f 72 20 63 72 65 61 74 69 6e 67 20 61 20 56 58 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 20 69 6e | or.creating.a.VXLAN.interface.in |
f7d20 | 20 4c 69 6e 75 78 20 64 65 66 61 75 6c 74 73 20 74 6f 20 69 74 73 20 70 72 65 2d 73 74 61 6e 64 | .Linux.defaults.to.its.pre-stand |
f7d40 | 61 72 64 20 76 61 6c 75 65 20 6f 66 20 38 34 37 32 20 74 6f 20 70 72 65 73 65 72 76 65 20 62 61 | ard.value.of.8472.to.preserve.ba |
f7d60 | 63 6b 77 61 72 64 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 2e 20 41 20 63 6f 6e 66 69 67 75 72 | ckward.compatibility..A.configur |
f7d80 | 61 74 69 6f 6e 20 64 69 72 65 63 74 69 76 65 20 74 6f 20 73 75 70 70 6f 72 74 20 61 20 75 73 65 | ation.directive.to.support.a.use |
f7da0 | 72 2d 73 70 65 63 69 66 69 65 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 74 6f 20 | r-specified.destination.port.to. |
f7dc0 | 6f 76 65 72 72 69 64 65 20 74 68 61 74 20 62 65 68 61 76 69 6f 72 20 69 73 20 61 76 61 69 6c 61 | override.that.behavior.is.availa |
f7de0 | 62 6c 65 20 75 73 69 6e 67 20 74 68 65 20 61 62 6f 76 65 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 65 | ble.using.the.above.command..The |
f7e00 | 20 64 65 76 69 63 65 20 63 61 6e 20 6f 6e 6c 79 20 72 65 63 65 69 76 65 20 70 61 63 6b 65 74 73 | .device.can.only.receive.packets |
f7e20 | 20 77 69 74 68 20 56 4e 49 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 74 68 65 20 56 4e 49 | .with.VNIs.configured.in.the.VNI |
f7e40 | 20 66 69 6c 74 65 72 69 6e 67 20 74 61 62 6c 65 2e 00 54 68 65 20 64 69 61 6c 6f 67 75 65 20 62 | .filtering.table..The.dialogue.b |
f7e60 | 65 74 77 65 65 6e 20 48 41 20 70 61 72 74 6e 65 72 73 20 69 73 20 6e 65 69 74 68 65 72 20 65 6e | etween.HA.partners.is.neither.en |
f7e80 | 63 72 79 70 74 65 64 20 6e 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 2e 20 53 69 6e 63 65 | crypted.nor.authenticated..Since |
f7ea0 | 20 6d 6f 73 74 20 44 48 43 50 20 73 65 72 76 65 72 73 20 65 78 69 73 74 20 77 69 74 68 69 6e 20 | .most.DHCP.servers.exist.within. |
f7ec0 | 61 6e 20 6f 72 67 61 6e 69 73 61 74 69 6f 6e 27 73 20 6f 77 6e 20 73 65 63 75 72 65 20 49 6e 74 | an.organisation's.own.secure.Int |
f7ee0 | 72 61 6e 65 74 2c 20 74 68 69 73 20 77 6f 75 6c 64 20 62 65 20 61 6e 20 75 6e 6e 65 63 65 73 73 | ranet,.this.would.be.an.unnecess |
f7f00 | 61 72 79 20 6f 76 65 72 68 65 61 64 2e 20 48 6f 77 65 76 65 72 2c 20 69 66 20 79 6f 75 20 68 61 | ary.overhead..However,.if.you.ha |
f7f20 | 76 65 20 44 48 43 50 20 48 41 20 70 65 65 72 73 20 77 68 6f 73 65 20 63 6f 6d 6d 75 6e 69 63 61 | ve.DHCP.HA.peers.whose.communica |
f7f40 | 74 69 6f 6e 73 20 74 72 61 76 65 72 73 65 20 69 6e 73 65 63 75 72 65 20 6e 65 74 77 6f 72 6b 73 | tions.traverse.insecure.networks |
f7f60 | 2c 20 74 68 65 6e 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 74 68 61 74 20 79 6f 75 20 63 6f 6e | ,.then.we.recommend.that.you.con |
f7f80 | 73 69 64 65 72 20 74 68 65 20 75 73 65 20 6f 66 20 56 50 4e 20 74 75 6e 6e 65 6c 69 6e 67 20 62 | sider.the.use.of.VPN.tunneling.b |
f7fa0 | 65 74 77 65 65 6e 20 74 68 65 6d 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 20 48 | etween.them.to.ensure.that.the.H |
f7fc0 | 41 20 70 61 72 74 6e 65 72 73 68 69 70 20 69 73 20 69 6d 6d 75 6e 65 20 74 6f 20 64 69 73 72 75 | A.partnership.is.immune.to.disru |
f7fe0 | 70 74 69 6f 6e 20 28 61 63 63 69 64 65 6e 74 61 6c 20 6f 72 20 6f 74 68 65 72 77 69 73 65 29 20 | ption.(accidental.or.otherwise). |
f8000 | 76 69 61 20 74 68 69 72 64 20 70 61 72 74 69 65 73 2e 00 54 68 65 20 64 69 61 6c 6f 67 75 65 20 | via.third.parties..The.dialogue. |
f8020 | 62 65 74 77 65 65 6e 20 66 61 69 6c 6f 76 65 72 20 70 61 72 74 6e 65 72 73 20 69 73 20 6e 65 69 | between.failover.partners.is.nei |
f8040 | 74 68 65 72 20 65 6e 63 72 79 70 74 65 64 20 6e 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 | ther.encrypted.nor.authenticated |
f8060 | 2e 20 53 69 6e 63 65 20 6d 6f 73 74 20 44 48 43 50 20 73 65 72 76 65 72 73 20 65 78 69 73 74 20 | ..Since.most.DHCP.servers.exist. |
f8080 | 77 69 74 68 69 6e 20 61 6e 20 6f 72 67 61 6e 69 73 61 74 69 6f 6e 27 73 20 6f 77 6e 20 73 65 63 | within.an.organisation's.own.sec |
f80a0 | 75 72 65 20 49 6e 74 72 61 6e 65 74 2c 20 74 68 69 73 20 77 6f 75 6c 64 20 62 65 20 61 6e 20 75 | ure.Intranet,.this.would.be.an.u |
f80c0 | 6e 6e 65 63 65 73 73 61 72 79 20 6f 76 65 72 68 65 61 64 2e 20 48 6f 77 65 76 65 72 2c 20 69 66 | nnecessary.overhead..However,.if |
f80e0 | 20 79 6f 75 20 68 61 76 65 20 44 48 43 50 20 66 61 69 6c 6f 76 65 72 20 70 65 65 72 73 20 77 68 | .you.have.DHCP.failover.peers.wh |
f8100 | 6f 73 65 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 20 74 72 61 76 65 72 73 65 20 69 6e 73 65 | ose.communications.traverse.inse |
f8120 | 63 75 72 65 20 6e 65 74 77 6f 72 6b 73 2c 20 74 68 65 6e 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 | cure.networks,.then.we.recommend |
f8140 | 20 74 68 61 74 20 79 6f 75 20 63 6f 6e 73 69 64 65 72 20 74 68 65 20 75 73 65 20 6f 66 20 56 50 | .that.you.consider.the.use.of.VP |
f8160 | 4e 20 74 75 6e 6e 65 6c 69 6e 67 20 62 65 74 77 65 65 6e 20 74 68 65 6d 20 74 6f 20 65 6e 73 75 | N.tunneling.between.them.to.ensu |
f8180 | 72 65 20 74 68 61 74 20 74 68 65 20 66 61 69 6c 6f 76 65 72 20 70 61 72 74 6e 65 72 73 68 69 70 | re.that.the.failover.partnership |
f81a0 | 20 69 73 20 69 6d 6d 75 6e 65 20 74 6f 20 64 69 73 72 75 70 74 69 6f 6e 20 28 61 63 63 69 64 65 | .is.immune.to.disruption.(accide |
f81c0 | 6e 74 61 6c 20 6f 72 20 6f 74 68 65 72 77 69 73 65 29 20 76 69 61 20 74 68 69 72 64 20 70 61 72 | ntal.or.otherwise).via.third.par |
f81e0 | 74 69 65 73 2e 00 54 68 65 20 64 6f 6d 61 69 6e 2d 6e 61 6d 65 20 70 61 72 61 6d 65 74 65 72 20 | ties..The.domain-name.parameter. |
f8200 | 73 68 6f 75 6c 64 20 62 65 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 74 68 61 74 20 77 | should.be.the.domain.name.that.w |
f8220 | 69 6c 6c 20 62 65 20 61 70 70 65 6e 64 65 64 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 27 73 20 | ill.be.appended.to.the.client's. |
f8240 | 68 6f 73 74 6e 61 6d 65 20 74 6f 20 66 6f 72 6d 20 61 20 66 75 6c 6c 79 2d 71 75 61 6c 69 66 69 | hostname.to.form.a.fully-qualifi |
f8260 | 65 64 20 64 6f 6d 61 69 6e 2d 6e 61 6d 65 20 28 46 51 44 4e 29 20 28 44 48 43 50 20 4f 70 74 69 | ed.domain-name.(FQDN).(DHCP.Opti |
f8280 | 6f 6e 20 30 31 35 29 2e 00 54 68 65 20 64 6f 6d 61 69 6e 2d 6e 61 6d 65 20 70 61 72 61 6d 65 74 | on.015)..The.domain-name.paramet |
f82a0 | 65 72 20 73 68 6f 75 6c 64 20 62 65 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 75 73 65 | er.should.be.the.domain.name.use |
f82c0 | 64 20 77 68 65 6e 20 63 6f 6d 70 6c 65 74 69 6e 67 20 44 4e 53 20 72 65 71 75 65 73 74 20 77 68 | d.when.completing.DNS.request.wh |
f82e0 | 65 72 65 20 6e 6f 20 66 75 6c 6c 20 46 51 44 4e 20 69 73 20 70 61 73 73 65 64 2e 20 54 68 69 73 | ere.no.full.FQDN.is.passed..This |
f8300 | 20 6f 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 67 69 76 65 6e 20 6d 75 6c 74 69 70 6c 65 20 74 69 | .option.can.be.given.multiple.ti |
f8320 | 6d 65 73 20 69 66 20 79 6f 75 20 6e 65 65 64 20 6d 75 6c 74 69 70 6c 65 20 73 65 61 72 63 68 20 | mes.if.you.need.multiple.search. |
f8340 | 64 6f 6d 61 69 6e 73 20 28 44 48 43 50 20 4f 70 74 69 6f 6e 20 31 31 39 29 2e 00 54 68 65 20 64 | domains.(DHCP.Option.119)..The.d |
f8360 | 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 20 61 6c 6c 6f 77 73 20 75 73 20 74 6f 20 68 61 76 65 | ummy.interface.allows.us.to.have |
f8380 | 20 61 6e 20 65 71 75 69 76 61 6c 65 6e 74 20 6f 66 20 74 68 65 20 43 69 73 63 6f 20 49 4f 53 20 | .an.equivalent.of.the.Cisco.IOS. |
f83a0 | 4c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 20 2d 20 61 20 72 6f 75 74 65 72 2d 69 6e | Loopback.interface.-.a.router-in |
f83c0 | 74 65 72 6e 61 6c 20 69 6e 74 65 72 66 61 63 65 20 77 65 20 63 61 6e 20 75 73 65 20 66 6f 72 20 | ternal.interface.we.can.use.for. |
f83e0 | 49 50 20 61 64 64 72 65 73 73 65 73 20 74 68 65 20 72 6f 75 74 65 72 20 6d 75 73 74 20 6b 6e 6f | IP.addresses.the.router.must.kno |
f8400 | 77 20 61 62 6f 75 74 2c 20 62 75 74 20 77 68 69 63 68 20 61 72 65 20 6e 6f 74 20 61 63 74 75 61 | w.about,.but.which.are.not.actua |
f8420 | 6c 6c 79 20 61 73 73 69 67 6e 65 64 20 74 6f 20 61 20 72 65 61 6c 20 6e 65 74 77 6f 72 6b 2e 00 | lly.assigned.to.a.real.network.. |
f8440 | 54 68 65 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 72 65 61 6c 6c 79 20 61 20 | The.dummy.interface.is.really.a. |
f8460 | 6c 69 74 74 6c 65 20 65 78 6f 74 69 63 2c 20 62 75 74 20 72 61 74 68 65 72 20 75 73 65 66 75 6c | little.exotic,.but.rather.useful |
f8480 | 20 6e 65 76 65 72 74 68 65 6c 65 73 73 2e 20 44 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 73 20 | .nevertheless..Dummy.interfaces. |
f84a0 | 61 72 65 20 6d 75 63 68 20 6c 69 6b 65 20 74 68 65 20 3a 72 65 66 3a 60 6c 6f 6f 70 62 61 63 6b | are.much.like.the.:ref:`loopback |
f84c0 | 2d 69 6e 74 65 72 66 61 63 65 60 20 69 6e 74 65 72 66 61 63 65 2c 20 65 78 63 65 70 74 20 79 6f | -interface`.interface,.except.yo |
f84e0 | 75 20 63 61 6e 20 68 61 76 65 20 61 73 20 6d 61 6e 79 20 61 73 20 79 6f 75 20 77 61 6e 74 2e 00 | u.can.have.as.many.as.you.want.. |
f8500 | 54 68 65 20 65 6d 62 65 64 64 65 64 20 53 71 75 69 64 20 70 72 6f 78 79 20 63 61 6e 20 75 73 65 | The.embedded.Squid.proxy.can.use |
f8520 | 20 4c 44 41 50 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 75 73 65 72 73 20 61 67 61 69 | .LDAP.to.authenticate.users.agai |
f8540 | 6e 73 74 20 61 20 63 6f 6d 70 61 6e 79 20 77 69 64 65 20 64 69 72 65 63 74 6f 72 79 2e 20 54 68 | nst.a.company.wide.directory..Th |
f8560 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 61 6e 20 | e.following.configuration.is.an. |
f8580 | 65 78 61 6d 70 6c 65 20 6f 66 20 68 6f 77 20 74 6f 20 75 73 65 20 41 63 74 69 76 65 20 44 69 72 | example.of.how.to.use.Active.Dir |
f85a0 | 65 63 74 6f 72 79 20 61 73 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 61 63 6b 65 6e 64 | ectory.as.authentication.backend |
f85c0 | 2e 20 51 75 65 72 69 65 73 20 61 72 65 20 64 6f 6e 65 20 76 69 61 20 4c 44 41 50 2e 00 54 68 65 | ..Queries.are.done.via.LDAP..The |
f85e0 | 20 65 78 61 6d 70 6c 65 20 61 62 6f 76 65 20 75 73 65 73 20 31 39 32 2e 30 2e 32 2e 32 20 61 73 | .example.above.uses.192.0.2.2.as |
f8600 | 20 65 78 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 2e 20 41 20 4c 41 43 20 6e 6f 72 6d | .external.IP.address..A.LAC.norm |
f8620 | 61 6c 6c 79 20 72 65 71 75 69 72 65 73 20 61 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 | ally.requires.an.authentication. |
f8640 | 70 61 73 73 77 6f 72 64 2c 20 77 68 69 63 68 20 69 73 20 73 65 74 20 69 6e 20 74 68 65 20 65 78 | password,.which.is.set.in.the.ex |
f8660 | 61 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 6f 20 60 60 6c 6e 73 20 73 68 61 | ample.configuration.to.``lns.sha |
f8680 | 72 65 64 2d 73 65 63 72 65 74 20 27 73 65 63 72 65 74 27 60 60 2e 20 54 68 69 73 20 73 65 74 75 | red-secret.'secret'``..This.setu |
f86a0 | 70 20 72 65 71 75 69 72 65 73 20 74 68 65 20 43 6f 6d 70 72 65 73 73 69 6f 6e 20 43 6f 6e 74 72 | p.requires.the.Compression.Contr |
f86c0 | 6f 6c 20 50 72 6f 74 6f 63 6f 6c 20 28 43 43 50 29 20 62 65 69 6e 67 20 64 69 73 61 62 6c 65 64 | ol.Protocol.(CCP).being.disabled |
f86e0 | 2c 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 60 60 73 65 74 20 76 70 6e 20 6c 32 74 70 20 72 65 6d | ,.the.command.``set.vpn.l2tp.rem |
f8700 | 6f 74 65 2d 61 63 63 65 73 73 20 63 63 70 2d 64 69 73 61 62 6c 65 60 60 20 61 63 63 6f 6d 70 6c | ote-access.ccp-disable``.accompl |
f8720 | 69 73 68 65 73 20 74 68 61 74 2e 00 54 68 65 20 65 78 61 6d 70 6c 65 20 62 65 6c 6f 77 20 63 6f | ishes.that..The.example.below.co |
f8740 | 76 65 72 73 20 61 20 64 75 61 6c 2d 73 74 61 63 6b 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | vers.a.dual-stack.configuration. |
f8760 | 76 69 61 20 70 70 70 6f 65 2d 73 65 72 76 65 72 2e 00 54 68 65 20 65 78 61 6d 70 6c 65 20 62 65 | via.pppoe-server..The.example.be |
f8780 | 6c 6f 77 20 63 6f 76 65 72 73 20 61 20 64 75 61 6c 2d 73 74 61 63 6b 20 63 6f 6e 66 69 67 75 72 | low.covers.a.dual-stack.configur |
f87a0 | 61 74 69 6f 6e 2e 00 54 68 65 20 65 78 61 6d 70 6c 65 20 62 65 6c 6f 77 20 75 73 65 73 20 41 43 | ation..The.example.below.uses.AC |
f87c0 | 4e 20 61 73 20 61 63 63 65 73 73 2d 63 6f 6e 63 65 6e 74 72 61 74 6f 72 20 6e 61 6d 65 2c 20 61 | N.as.access-concentrator.name,.a |
f87e0 | 73 73 69 67 6e 73 20 61 6e 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 70 6f 6f 6c 20 | ssigns.an.address.from.the.pool. |
f8800 | 31 30 2e 31 2e 31 2e 31 30 30 2d 31 31 31 2c 20 74 65 72 6d 69 6e 61 74 65 73 20 61 74 20 74 68 | 10.1.1.100-111,.terminates.at.th |
f8820 | 65 20 6c 6f 63 61 6c 20 65 6e 64 70 6f 69 6e 74 20 31 30 2e 31 2e 31 2e 31 20 61 6e 64 20 73 65 | e.local.endpoint.10.1.1.1.and.se |
f8840 | 72 76 65 73 20 72 65 71 75 65 73 74 73 20 6f 6e 6c 79 20 6f 6e 20 65 74 68 31 2e 00 54 68 65 20 | rves.requests.only.on.eth1..The. |
f8860 | 65 78 61 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 62 65 6c 6f 77 20 77 69 6c 6c | example.configuration.below.will |
f8880 | 20 61 73 73 69 67 6e 20 61 6e 20 49 50 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 20 6f 6e 20 74 | .assign.an.IP.to.the.client.on.t |
f88a0 | 68 65 20 69 6e 63 6f 6d 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 32 20 77 69 74 68 20 | he.incoming.interface.eth2.with. |
f88c0 | 74 68 65 20 63 6c 69 65 6e 74 20 6d 61 63 20 61 64 64 72 65 73 73 20 30 38 3a 30 30 3a 32 37 3a | the.client.mac.address.08:00:27: |
f88e0 | 32 66 3a 64 38 3a 30 36 2e 20 4f 74 68 65 72 20 44 48 43 50 20 64 69 73 63 6f 76 65 72 79 20 72 | 2f:d8:06..Other.DHCP.discovery.r |
f8900 | 65 71 75 65 73 74 73 20 77 69 6c 6c 20 62 65 20 69 67 6e 6f 72 65 64 2c 20 75 6e 6c 65 73 73 20 | equests.will.be.ignored,.unless. |
f8920 | 74 68 65 20 63 6c 69 65 6e 74 20 6d 61 63 20 68 61 73 20 62 65 65 6e 20 65 6e 61 62 6c 65 64 20 | the.client.mac.has.been.enabled. |
f8940 | 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 54 68 65 20 65 78 61 6d 70 6c | in.the.configuration..The.exampl |
f8960 | 65 20 63 72 65 61 74 65 73 20 61 20 77 69 72 65 6c 65 73 73 20 73 74 61 74 69 6f 6e 20 28 63 6f | e.creates.a.wireless.station.(co |
f8980 | 6d 6d 6f 6e 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 57 69 2d 46 69 20 63 6c 69 65 | mmonly.referred.to.as.Wi-Fi.clie |
f89a0 | 6e 74 29 20 74 68 61 74 20 61 63 63 65 73 73 65 73 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 74 68 | nt).that.accesses.the.network.th |
f89c0 | 72 6f 75 67 68 20 74 68 65 20 57 41 50 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 65 20 61 62 6f | rough.the.WAP.defined.in.the.abo |
f89e0 | 76 65 20 65 78 61 6d 70 6c 65 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 70 68 79 73 69 63 61 6c | ve.example..The.default.physical |
f8a00 | 20 64 65 76 69 63 65 20 28 60 60 70 68 79 30 60 60 29 20 69 73 20 75 73 65 64 2e 00 54 68 65 20 | .device.(``phy0``).is.used..The. |
f8a20 | 65 78 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 74 72 61 6e 73 6c 61 74 65 | external.IP.address.to.translate |
f8a40 | 20 74 6f 00 54 68 65 20 66 69 72 65 77 61 6c 6c 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 63 72 | .to.The.firewall.supports.the.cr |
f8a60 | 65 61 74 69 6f 6e 20 6f 66 20 67 72 6f 75 70 73 20 66 6f 72 20 61 64 64 72 65 73 73 65 73 2c 20 | eation.of.groups.for.addresses,. |
f8a80 | 64 6f 6d 61 69 6e 73 2c 20 69 6e 74 65 72 66 61 63 65 73 2c 20 6d 61 63 2d 61 64 64 72 65 73 73 | domains,.interfaces,.mac-address |
f8aa0 | 65 73 2c 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 70 6f 72 74 20 67 72 6f 75 70 73 2e 20 54 68 | es,.networks.and.port.groups..Th |
f8ac0 | 69 73 20 67 72 6f 75 70 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 6c 61 74 65 72 20 69 6e 20 66 | is.groups.can.be.used.later.in.f |
f8ae0 | 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 65 74 20 61 73 20 64 65 73 69 72 65 64 2e 00 54 68 65 20 | irewall.ruleset.as.desired..The. |
f8b00 | 66 69 72 65 77 61 6c 6c 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 63 72 65 61 74 69 6f 6e 20 6f | firewall.supports.the.creation.o |
f8b20 | 66 20 67 72 6f 75 70 73 20 66 6f 72 20 70 6f 72 74 73 2c 20 61 64 64 72 65 73 73 65 73 2c 20 61 | f.groups.for.ports,.addresses,.a |
f8b40 | 6e 64 20 6e 65 74 77 6f 72 6b 73 20 28 69 6d 70 6c 65 6d 65 6e 74 65 64 20 75 73 69 6e 67 20 6e | nd.networks.(implemented.using.n |
f8b60 | 65 74 66 69 6c 74 65 72 20 69 70 73 65 74 29 20 61 6e 64 20 74 68 65 20 6f 70 74 69 6f 6e 20 6f | etfilter.ipset).and.the.option.o |
f8b80 | 66 20 69 6e 74 65 72 66 61 63 65 20 6f 72 20 7a 6f 6e 65 20 62 61 73 65 64 20 66 69 72 65 77 61 | f.interface.or.zone.based.firewa |
f8ba0 | 6c 6c 20 70 6f 6c 69 63 79 2e 00 54 68 65 20 66 69 72 73 74 20 49 50 20 69 6e 20 74 68 65 20 63 | ll.policy..The.first.IP.in.the.c |
f8bc0 | 6f 6e 74 61 69 6e 65 72 20 6e 65 74 77 6f 72 6b 20 69 73 20 72 65 73 65 72 76 65 64 20 62 79 20 | ontainer.network.is.reserved.by. |
f8be0 | 74 68 65 20 65 6e 67 69 6e 65 20 61 6e 64 20 63 61 6e 6e 6f 74 20 62 65 20 75 73 65 64 00 54 68 | the.engine.and.cannot.be.used.Th |
f8c00 | 65 20 66 69 72 73 74 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 70 61 72 61 6d 65 74 65 72 | e.first.address.of.the.parameter |
f8c20 | 20 60 60 63 6c 69 65 6e 74 2d 73 75 62 6e 65 74 60 60 2c 20 77 69 6c 6c 20 62 65 20 75 73 65 64 | .``client-subnet``,.will.be.used |
f8c40 | 20 61 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 2e 20 43 6f 6e 6e 65 63 74 | .as.the.default.gateway..Connect |
f8c60 | 65 64 20 73 65 73 73 69 6f 6e 73 20 63 61 6e 20 62 65 20 63 68 65 63 6b 65 64 20 76 69 61 20 74 | ed.sessions.can.be.checked.via.t |
f8c80 | 68 65 20 60 60 73 68 6f 77 20 69 70 6f 65 2d 73 65 72 76 65 72 20 73 65 73 73 69 6f 6e 73 60 60 | he.``show.ipoe-server.sessions`` |
f8ca0 | 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 65 20 66 69 72 73 74 20 61 6e 64 20 61 72 67 75 61 62 6c 79 | .command..The.first.and.arguably |
f8cc0 | 20 63 6c 65 61 6e 65 72 20 6f 70 74 69 6f 6e 20 69 73 20 74 6f 20 6d 61 6b 65 20 79 6f 75 72 20 | .cleaner.option.is.to.make.your. |
f8ce0 | 49 50 73 65 63 20 70 6f 6c 69 63 79 20 6d 61 74 63 68 20 47 52 45 20 70 61 63 6b 65 74 73 20 62 | IPsec.policy.match.GRE.packets.b |
f8d00 | 65 74 77 65 65 6e 20 65 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 65 73 20 6f 66 20 79 6f 75 | etween.external.addresses.of.you |
f8d20 | 72 20 72 6f 75 74 65 72 73 2e 20 54 68 69 73 20 69 73 20 74 68 65 20 62 65 73 74 20 6f 70 74 69 | r.routers..This.is.the.best.opti |
f8d40 | 6f 6e 20 69 66 20 62 6f 74 68 20 72 6f 75 74 65 72 73 20 68 61 76 65 20 73 74 61 74 69 63 20 65 | on.if.both.routers.have.static.e |
f8d60 | 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 65 73 2e 00 54 68 65 20 66 69 72 73 74 20 66 6c 6f | xternal.addresses..The.first.flo |
f8d80 | 77 20 63 6f 6e 74 72 6f 6c 20 6d 65 63 68 61 6e 69 73 6d 2c 20 74 68 65 20 70 61 75 73 65 20 66 | w.control.mechanism,.the.pause.f |
f8da0 | 72 61 6d 65 2c 20 77 61 73 20 64 65 66 69 6e 65 64 20 62 79 20 74 68 65 20 49 45 45 45 20 38 30 | rame,.was.defined.by.the.IEEE.80 |
f8dc0 | 32 2e 33 78 20 73 74 61 6e 64 61 72 64 2e 00 54 68 65 20 66 69 72 73 74 20 69 70 20 61 64 64 72 | 2.3x.standard..The.first.ip.addr |
f8de0 | 65 73 73 20 69 73 20 74 68 65 20 52 50 27 73 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 | ess.is.the.RP's.address.and.the. |
f8e00 | 73 65 63 6f 6e 64 20 76 61 6c 75 65 20 69 73 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 70 72 65 | second.value.is.the.matching.pre |
f8e20 | 66 69 78 20 6f 66 20 67 72 6f 75 70 20 72 61 6e 67 65 73 20 63 6f 76 65 72 65 64 2e 00 54 68 65 | fix.of.group.ranges.covered..The |
f8e40 | 20 66 69 72 73 74 20 72 65 67 69 73 74 72 61 74 69 6f 6e 20 72 65 71 75 65 73 74 20 69 73 20 73 | .first.registration.request.is.s |
f8e60 | 65 6e 74 20 74 6f 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 62 72 6f 61 64 63 61 73 74 20 61 64 | ent.to.the.protocol.broadcast.ad |
f8e80 | 64 72 65 73 73 2c 20 61 6e 64 20 74 68 65 20 73 65 72 76 65 72 27 73 20 72 65 61 6c 20 70 72 6f | dress,.and.the.server's.real.pro |
f8ea0 | 74 6f 63 6f 6c 20 61 64 64 72 65 73 73 20 69 73 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 64 65 74 | tocol.address.is.dynamically.det |
f8ec0 | 65 63 74 65 64 20 66 72 6f 6d 20 74 68 65 20 66 69 72 73 74 20 72 65 67 69 73 74 72 61 74 69 6f | ected.from.the.first.registratio |
f8ee0 | 6e 20 72 65 70 6c 79 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 50 50 50 20 63 6f 6e 66 69 | n.reply..The.following.PPP.confi |
f8f00 | 67 75 72 61 74 69 6f 6e 20 74 65 73 74 73 20 4d 53 43 48 41 50 2d 76 32 3a 00 54 68 65 20 66 6f | guration.tests.MSCHAP-v2:.The.fo |
f8f20 | 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 67 | llowing.command.can.be.used.to.g |
f8f40 | 65 6e 65 72 61 74 65 20 74 68 65 20 4f 54 50 20 6b 65 79 20 61 73 20 77 65 6c 6c 20 61 73 20 74 | enerate.the.OTP.key.as.well.as.t |
f8f60 | 68 65 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 73 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 | he.CLI.commands.to.configure.the |
f8f80 | 6d 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 20 75 73 65 73 20 74 68 | m:.The.following.command.uses.th |
f8fa0 | 65 20 65 78 70 6c 69 63 69 74 2d 6e 75 6c 6c 20 6c 61 62 65 6c 20 76 61 6c 75 65 20 66 6f 72 20 | e.explicit-null.label.value.for. |
f8fc0 | 61 6c 6c 20 74 68 65 20 42 47 50 20 69 6e 73 74 61 6e 63 65 73 2e 00 54 68 65 20 66 6f 6c 6c 6f | all.the.BGP.instances..The.follo |
f8fe0 | 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 6c 65 74 20 79 6f 75 20 63 68 65 63 6b 20 74 75 6e 6e | wing.commands.let.you.check.tunn |
f9000 | 65 6c 20 73 74 61 74 75 73 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 | el.status..The.following.command |
f9020 | 73 20 6c 65 74 20 79 6f 75 20 72 65 73 65 74 20 4f 70 65 6e 56 50 4e 2e 00 54 68 65 20 66 6f 6c | s.let.you.reset.OpenVPN..The.fol |
f9040 | 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 74 72 61 6e 73 6c 61 74 65 20 74 6f 20 22 2d 2d | lowing.commands.translate.to."-- |
f9060 | 6e 65 74 20 68 6f 73 74 22 20 77 68 65 6e 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 69 73 20 | net.host".when.the.container.is. |
f9080 | 63 72 65 61 74 65 64 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 77 | created.The.following.commands.w |
f90a0 | 6f 75 6c 64 20 62 65 20 72 65 71 75 69 72 65 64 20 74 6f 20 73 65 74 20 6f 70 74 69 6f 6e 73 20 | ould.be.required.to.set.options. |
f90c0 | 66 6f 72 20 61 20 67 69 76 65 6e 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 | for.a.given.dynamic.routing.prot |
f90e0 | 6f 63 6f 6c 20 69 6e 73 69 64 65 20 61 20 67 69 76 65 6e 20 76 72 66 3a 00 54 68 65 20 66 6f 6c | ocol.inside.a.given.vrf:.The.fol |
f9100 | 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 64 65 6d 6f 6e 73 74 72 61 74 65 | lowing.configuration.demonstrate |
f9120 | 73 20 68 6f 77 20 74 6f 20 75 73 65 20 56 79 4f 53 20 74 6f 20 61 63 68 69 65 76 65 20 6c 6f 61 | s.how.to.use.VyOS.to.achieve.loa |
f9140 | 64 20 62 61 6c 61 6e 63 69 6e 67 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 64 6f 6d 61 69 6e 20 | d.balancing.based.on.the.domain. |
f9160 | 6e 61 6d 65 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | name..The.following.configuratio |
f9180 | 6e 20 65 78 70 6c 69 63 69 74 6c 79 20 6a 6f 69 6e 73 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f | n.explicitly.joins.multicast.gro |
f91a0 | 75 70 20 60 66 66 31 35 3a 3a 31 32 33 34 60 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 65 74 | up.`ff15::1234`.on.interface.`et |
f91c0 | 68 31 60 20 61 6e 64 20 73 6f 75 72 63 65 2d 73 70 65 63 69 66 69 63 20 6d 75 6c 74 69 63 61 73 | h1`.and.source-specific.multicas |
f91e0 | 74 20 67 72 6f 75 70 20 60 66 66 31 35 3a 3a 35 36 37 38 60 20 77 69 74 68 20 73 6f 75 72 63 65 | t.group.`ff15::5678`.with.source |
f9200 | 20 61 64 64 72 65 73 73 20 60 32 30 30 31 3a 64 62 38 3a 3a 31 60 20 6f 6e 20 69 6e 74 65 72 66 | .address.`2001:db8::1`.on.interf |
f9220 | 61 63 65 20 60 65 74 68 31 60 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 | ace.`eth1`:.The.following.config |
f9240 | 75 72 61 74 69 6f 6e 20 6f 6e 20 56 79 4f 53 20 61 70 70 6c 69 65 73 20 74 6f 20 61 6c 6c 20 66 | uration.on.VyOS.applies.to.all.f |
f9260 | 6f 6c 6c 6f 77 69 6e 67 20 33 72 64 20 70 61 72 74 79 20 76 65 6e 64 6f 72 73 2e 20 49 74 20 63 | ollowing.3rd.party.vendors..It.c |
f9280 | 72 65 61 74 65 73 20 61 20 62 6f 6e 64 20 77 69 74 68 20 74 77 6f 20 6c 69 6e 6b 73 20 61 6e 64 | reates.a.bond.with.two.links.and |
f92a0 | 20 56 4c 41 4e 20 31 30 2c 20 31 30 30 20 6f 6e 20 74 68 65 20 62 6f 6e 64 65 64 20 69 6e 74 65 | .VLAN.10,.100.on.the.bonded.inte |
f92c0 | 72 66 61 63 65 73 20 77 69 74 68 20 61 20 70 65 72 20 56 49 46 20 49 50 76 34 20 61 64 64 72 65 | rfaces.with.a.per.VIF.IPv4.addre |
f92e0 | 73 73 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | ss..The.following.configuration. |
f9300 | 72 65 76 65 72 73 65 2d 70 72 6f 78 79 20 74 65 72 6d 69 6e 61 74 65 20 53 53 4c 2e 00 54 68 65 | reverse-proxy.terminate.SSL..The |
f9320 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 61 73 | .following.configuration.will.as |
f9340 | 73 69 67 6e 20 61 20 2f 36 34 20 70 72 65 66 69 78 20 6f 75 74 20 6f 66 20 61 20 2f 35 36 20 64 | sign.a./64.prefix.out.of.a./56.d |
f9360 | 65 6c 65 67 61 74 69 6f 6e 20 74 6f 20 65 74 68 30 2e 20 54 68 65 20 49 50 76 36 20 61 64 64 72 | elegation.to.eth0..The.IPv6.addr |
f9380 | 65 73 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 65 74 68 30 20 77 69 6c 6c 20 62 65 20 3c 70 72 | ess.assigned.to.eth0.will.be.<pr |
f93a0 | 65 66 69 78 3e 3a 3a 66 66 66 66 2f 36 34 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 6b 6e | efix>::ffff/64..If.you.do.not.kn |
f93c0 | 6f 77 20 74 68 65 20 70 72 65 66 69 78 20 73 69 7a 65 20 64 65 6c 65 67 61 74 65 64 20 74 6f 20 | ow.the.prefix.size.delegated.to. |
f93e0 | 79 6f 75 2c 20 73 74 61 72 74 20 77 69 74 68 20 73 6c 61 2d 6c 65 6e 20 30 2e 00 54 68 65 20 66 | you,.start.with.sla-len.0..The.f |
f9400 | 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 73 65 74 75 | ollowing.configuration.will.setu |
f9420 | 70 20 61 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 20 73 6f 75 72 63 65 20 66 72 6f 6d 20 65 74 | p.a.PPPoE.session.source.from.et |
f9440 | 68 31 20 61 6e 64 20 61 73 73 69 67 6e 20 61 20 2f 36 34 20 70 72 65 66 69 78 20 6f 75 74 20 6f | h1.and.assign.a./64.prefix.out.o |
f9460 | 66 20 61 20 2f 35 36 20 64 65 6c 65 67 61 74 69 6f 6e 20 28 72 65 71 75 65 73 74 65 64 20 66 72 | f.a./56.delegation.(requested.fr |
f9480 | 6f 6d 20 74 68 65 20 49 53 50 29 20 74 6f 20 65 74 68 30 2e 20 54 68 65 20 49 50 76 36 20 61 64 | om.the.ISP).to.eth0..The.IPv6.ad |
f94a0 | 64 72 65 73 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 65 74 68 30 20 77 69 6c 6c 20 62 65 20 3c | dress.assigned.to.eth0.will.be.< |
f94c0 | 70 72 65 66 69 78 3e 3a 3a 31 2f 36 34 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 6b 6e 6f | prefix>::1/64..If.you.do.not.kno |
f94e0 | 77 20 74 68 65 20 70 72 65 66 69 78 20 73 69 7a 65 20 64 65 6c 65 67 61 74 65 64 20 74 6f 20 79 | w.the.prefix.size.delegated.to.y |
f9500 | 6f 75 2c 20 73 74 61 72 74 20 77 69 74 68 20 73 6c 61 2d 6c 65 6e 20 30 2e 00 54 68 65 20 66 6f | ou,.start.with.sla-len.0..The.fo |
f9520 | 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 61 6c 6c 6f 77 73 20 56 79 4f 53 20 74 6f 20 75 | llowing.example.allows.VyOS.to.u |
f9540 | 73 65 20 3a 61 62 62 72 3a 60 50 42 52 20 28 50 6f 6c 69 63 79 2d 42 61 73 65 64 20 52 6f 75 74 | se.:abbr:`PBR.(Policy-Based.Rout |
f9560 | 69 6e 67 29 60 20 66 6f 72 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 6f 72 69 67 69 6e 61 | ing)`.for.traffic,.which.origina |
f9580 | 74 65 64 20 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2e 20 54 68 61 74 | ted.from.the.router.itself..That |
f95a0 | 20 73 6f 6c 75 74 69 6f 6e 20 66 6f 72 20 6d 75 6c 74 69 70 6c 65 20 49 53 50 27 73 20 61 6e 64 | .solution.for.multiple.ISP's.and |
f95c0 | 20 56 79 4f 53 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 72 65 73 70 6f 6e 64 20 66 72 6f 6d 20 74 | .VyOS.router.will.respond.from.t |
f95e0 | 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 74 68 65 20 70 61 63 6b 65 | he.same.interface.that.the.packe |
f9600 | 74 20 77 61 73 20 72 65 63 65 69 76 65 64 2e 20 41 6c 73 6f 2c 20 69 74 20 75 73 65 64 2c 20 69 | t.was.received..Also,.it.used,.i |
f9620 | 66 20 77 65 20 77 61 6e 74 20 74 68 61 74 20 6f 6e 65 20 56 50 4e 20 74 75 6e 6e 65 6c 20 74 6f | f.we.want.that.one.VPN.tunnel.to |
f9640 | 20 62 65 20 74 68 72 6f 75 67 68 20 6f 6e 65 20 70 72 6f 76 69 64 65 72 2c 20 61 6e 64 20 74 68 | .be.through.one.provider,.and.th |
f9660 | 65 20 73 65 63 6f 6e 64 20 74 68 72 6f 75 67 68 20 61 6e 6f 74 68 65 72 2e 00 54 68 65 20 66 6f | e.second.through.another..The.fo |
f9680 | 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 63 72 65 61 74 65 73 20 61 20 57 41 50 2e 20 57 | llowing.example.creates.a.WAP..W |
f96a0 | 68 65 6e 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 57 41 50 20 69 6e 74 | hen.configuring.multiple.WAP.int |
f96c0 | 65 72 66 61 63 65 73 2c 20 79 6f 75 20 6d 75 73 74 20 73 70 65 63 69 66 79 20 75 6e 69 71 75 65 | erfaces,.you.must.specify.unique |
f96e0 | 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 63 68 61 6e 6e 65 6c 73 2c 20 4e 65 74 77 6f 72 6b | .IP.addresses,.channels,.Network |
f9700 | 20 49 44 73 20 63 6f 6d 6d 6f 6e 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 3a 61 62 | .IDs.commonly.referred.to.as.:ab |
f9720 | 62 72 3a 60 53 53 49 44 20 28 53 65 72 76 69 63 65 20 53 65 74 20 49 64 65 6e 74 69 66 69 65 72 | br:`SSID.(Service.Set.Identifier |
f9740 | 29 60 2c 20 61 6e 64 20 4d 41 43 20 61 64 64 72 65 73 73 65 73 2e 00 54 68 65 20 66 6f 6c 6c 6f | )`,.and.MAC.addresses..The.follo |
f9760 | 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 61 20 53 69 65 72 72 | wing.example.is.based.on.a.Sierr |
f9780 | 61 20 57 69 72 65 6c 65 73 73 20 4d 43 37 37 31 30 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 | a.Wireless.MC7710.miniPCIe.card. |
f97a0 | 28 6f 6e 6c 79 20 74 68 65 20 66 6f 72 6d 20 66 61 63 74 6f 72 20 69 6e 20 72 65 61 6c 69 74 79 | (only.the.form.factor.in.reality |
f97c0 | 20 69 74 20 72 75 6e 73 20 55 42 53 29 20 61 6e 64 20 44 65 75 74 73 63 68 65 20 54 65 6c 65 6b | .it.runs.UBS).and.Deutsche.Telek |
f97e0 | 6f 6d 20 61 73 20 49 53 50 2e 20 54 68 65 20 63 61 72 64 20 69 73 20 61 73 73 65 6d 62 6c 65 64 | om.as.ISP..The.card.is.assembled |
f9800 | 20 69 6e 74 6f 20 61 20 3a 72 65 66 3a 60 70 63 2d 65 6e 67 69 6e 65 73 2d 61 70 75 34 60 2e 00 | .into.a.:ref:`pc-engines-apu4`.. |
f9820 | 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 74 6f 70 6f 6c 6f 67 79 20 77 | The.following.example.topology.w |
f9840 | 61 73 20 62 75 69 6c 74 20 75 73 69 6e 67 20 45 56 45 2d 4e 47 2e 00 54 68 65 20 66 6f 6c 6c 6f | as.built.using.EVE-NG..The.follo |
f9860 | 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 77 69 6c 6c 20 73 68 6f 77 20 68 6f 77 20 56 79 4f 53 20 | wing.example.will.show.how.VyOS. |
f9880 | 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 72 65 64 69 72 65 63 74 20 77 65 62 20 74 72 61 66 | can.be.used.to.redirect.web.traf |
f98a0 | 66 69 63 20 74 6f 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 74 72 61 6e 73 70 61 72 65 6e 74 20 70 | fic.to.an.external.transparent.p |
f98c0 | 72 6f 78 79 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 73 20 73 68 6f | roxy:.The.following.examples.sho |
f98e0 | 77 20 68 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 4e 41 54 36 34 20 6f 6e 20 61 20 56 79 | w.how.to.configure.NAT64.on.a.Vy |
f9900 | 4f 53 20 72 6f 75 74 65 72 2e 20 54 68 65 20 31 39 32 2e 30 2e 32 2e 31 30 20 61 64 64 72 65 73 | OS.router..The.192.0.2.10.addres |
f9920 | 73 20 69 73 20 75 73 65 64 20 61 73 20 74 68 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 66 6f | s.is.used.as.the.IPv4.address.fo |
f9940 | 72 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 70 6f 6f 6c 2e 00 54 68 65 20 66 6f 6c 6c | r.the.translation.pool..The.foll |
f9960 | 6f 77 69 6e 67 20 68 61 72 64 77 61 72 65 20 6d 6f 64 75 6c 65 73 20 68 61 76 65 20 62 65 65 6e | owing.hardware.modules.have.been |
f9980 | 20 74 65 73 74 65 64 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 69 6e 20 61 6e 20 3a 72 65 66 3a | .tested.successfully.in.an.:ref: |
f99a0 | 60 70 63 2d 65 6e 67 69 6e 65 73 2d 61 70 75 34 60 20 62 6f 61 72 64 3a 00 54 68 65 20 66 6f 6c | `pc-engines-apu4`.board:.The.fol |
f99c0 | 6c 6f 77 69 6e 67 20 69 73 20 74 68 65 20 63 6f 6e 66 69 67 20 66 6f 72 20 74 68 65 20 69 50 68 | lowing.is.the.config.for.the.iPh |
f99e0 | 6f 6e 65 20 70 65 65 72 20 61 62 6f 76 65 2e 20 49 74 27 73 20 69 6d 70 6f 72 74 61 6e 74 20 74 | one.peer.above..It's.important.t |
f9a00 | 6f 20 6e 6f 74 65 20 74 68 61 74 20 74 68 65 20 60 60 41 6c 6c 6f 77 65 64 49 50 73 60 60 20 77 | o.note.that.the.``AllowedIPs``.w |
f9a20 | 69 6c 64 63 61 72 64 20 73 65 74 74 69 6e 67 20 64 69 72 65 63 74 73 20 61 6c 6c 20 49 50 76 34 | ildcard.setting.directs.all.IPv4 |
f9a40 | 20 61 6e 64 20 49 50 76 36 20 74 72 61 66 66 69 63 20 74 68 72 6f 75 67 68 20 74 68 65 20 63 6f | .and.IPv6.traffic.through.the.co |
f9a60 | 6e 6e 65 63 74 69 6f 6e 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f 63 6f 6c | nnection..The.following.protocol |
f9a80 | 73 20 63 61 6e 20 62 65 20 75 73 65 64 3a 20 61 6e 79 2c 20 62 61 62 65 6c 2c 20 62 67 70 2c 20 | s.can.be.used:.any,.babel,.bgp,. |
f9aa0 | 63 6f 6e 6e 65 63 74 65 64 2c 20 65 69 67 72 70 2c 20 69 73 69 73 2c 20 6b 65 72 6e 65 6c 2c 20 | connected,.eigrp,.isis,.kernel,. |
f9ac0 | 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 00 54 68 65 20 66 6f 6c | ospf,.rip,.static,.table.The.fol |
f9ae0 | 6c 6f 77 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 63 61 6e 20 62 65 20 75 73 65 64 3a 20 61 6e | lowing.protocols.can.be.used:.an |
f9b00 | 79 2c 20 62 61 62 65 6c 2c 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 69 73 69 73 2c 20 | y,.babel,.bgp,.connected,.isis,. |
f9b20 | 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 76 33 2c 20 72 69 70 6e 67 2c 20 73 74 61 74 69 63 2c 20 74 | kernel,.ospfv3,.ripng,.static,.t |
f9b40 | 61 62 6c 65 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 74 72 75 63 74 75 72 65 20 72 65 73 | able.The.following.structure.res |
f9b60 | 70 72 65 73 65 6e 74 20 74 68 65 20 63 6c 69 20 73 74 72 75 63 74 75 72 65 2e 00 54 68 65 20 66 | present.the.cli.structure..The.f |
f9b80 | 6f 72 6d 75 6c 61 20 66 6f 72 20 75 6e 66 72 61 67 6d 65 6e 74 65 64 20 54 43 50 20 61 6e 64 20 | ormula.for.unfragmented.TCP.and. |
f9ba0 | 55 44 50 20 70 61 63 6b 65 74 73 20 69 73 00 54 68 65 20 66 6f 72 77 61 72 64 69 6e 67 20 64 65 | UDP.packets.is.The.forwarding.de |
f9bc0 | 6c 61 79 20 74 69 6d 65 20 69 73 20 74 68 65 20 74 69 6d 65 20 73 70 65 6e 74 20 69 6e 20 65 61 | lay.time.is.the.time.spent.in.ea |
f9be0 | 63 68 20 6f 66 20 74 68 65 20 6c 69 73 74 65 6e 69 6e 67 20 61 6e 64 20 6c 65 61 72 6e 69 6e 67 | ch.of.the.listening.and.learning |
f9c00 | 20 73 74 61 74 65 73 20 62 65 66 6f 72 65 20 74 68 65 20 46 6f 72 77 61 72 64 69 6e 67 20 73 74 | .states.before.the.Forwarding.st |
f9c20 | 61 74 65 20 69 73 20 65 6e 74 65 72 65 64 2e 20 54 68 69 73 20 64 65 6c 61 79 20 69 73 20 73 6f | ate.is.entered..This.delay.is.so |
f9c40 | 20 74 68 61 74 20 77 68 65 6e 20 61 20 6e 65 77 20 62 72 69 64 67 65 20 63 6f 6d 65 73 20 6f 6e | .that.when.a.new.bridge.comes.on |
f9c60 | 74 6f 20 61 20 62 75 73 79 20 6e 65 74 77 6f 72 6b 20 69 74 20 6c 6f 6f 6b 73 20 61 74 20 73 6f | to.a.busy.network.it.looks.at.so |
f9c80 | 6d 65 20 74 72 61 66 66 69 63 20 62 65 66 6f 72 65 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 2e | me.traffic.before.participating. |
f9ca0 | 00 54 68 65 20 67 65 6e 65 72 61 74 65 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c | .The.generated.configuration.wil |
f9cc0 | 6c 20 6c 6f 6f 6b 20 6c 69 6b 65 3a 00 54 68 65 20 67 65 6e 65 72 61 74 65 64 20 70 61 72 61 6d | l.look.like:.The.generated.param |
f9ce0 | 65 74 65 72 73 20 61 72 65 20 74 68 65 6e 20 6f 75 74 70 75 74 20 74 6f 20 74 68 65 20 63 6f 6e | eters.are.then.output.to.the.con |
f9d00 | 73 6f 6c 65 2e 00 54 68 65 20 67 65 6e 65 72 69 63 20 6e 61 6d 65 20 6f 66 20 51 75 61 6c 69 74 | sole..The.generic.name.of.Qualit |
f9d20 | 79 20 6f 66 20 53 65 72 76 69 63 65 20 6f 72 20 54 72 61 66 66 69 63 20 43 6f 6e 74 72 6f 6c 20 | y.of.Service.or.Traffic.Control. |
f9d40 | 69 6e 76 6f 6c 76 65 73 20 74 68 69 6e 67 73 20 6c 69 6b 65 20 73 68 61 70 69 6e 67 20 74 72 61 | involves.things.like.shaping.tra |
f9d60 | 66 66 69 63 2c 20 73 63 68 65 64 75 6c 69 6e 67 20 6f 72 20 64 72 6f 70 70 69 6e 67 20 70 61 63 | ffic,.scheduling.or.dropping.pac |
f9d80 | 6b 65 74 73 2c 20 77 68 69 63 68 20 61 72 65 20 74 68 65 20 6b 69 6e 64 20 6f 66 20 74 68 69 6e | kets,.which.are.the.kind.of.thin |
f9da0 | 67 73 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 70 6c 61 79 20 77 69 74 68 20 77 68 65 | gs.you.may.want.to.play.with.whe |
f9dc0 | 6e 20 79 6f 75 20 68 61 76 65 2c 20 66 6f 72 20 69 6e 73 74 61 6e 63 65 2c 20 61 20 62 61 6e 64 | n.you.have,.for.instance,.a.band |
f9de0 | 77 69 64 74 68 20 62 6f 74 74 6c 65 6e 65 63 6b 20 69 6e 20 61 20 6c 69 6e 6b 20 61 6e 64 20 79 | width.bottleneck.in.a.link.and.y |
f9e00 | 6f 75 20 77 61 6e 74 20 74 6f 20 73 6f 6d 65 68 6f 77 20 70 72 69 6f 72 69 74 69 7a 65 20 73 6f | ou.want.to.somehow.prioritize.so |
f9e20 | 6d 65 20 74 79 70 65 20 6f 66 20 74 72 61 66 66 69 63 20 6f 76 65 72 20 61 6e 6f 74 68 65 72 2e | me.type.of.traffic.over.another. |
f9e40 | 00 54 68 65 20 68 61 73 68 20 74 79 70 65 20 75 73 65 64 20 77 68 65 6e 20 64 69 73 63 6f 76 65 | .The.hash.type.used.when.discove |
f9e60 | 72 69 6e 67 20 66 69 6c 65 20 6f 6e 20 6d 61 73 74 65 72 20 73 65 72 76 65 72 20 28 64 65 66 61 | ring.file.on.master.server.(defa |
f9e80 | 75 6c 74 3a 20 73 68 61 32 35 36 29 00 54 68 65 20 68 65 61 6c 74 68 20 6f 66 20 69 6e 74 65 72 | ult:.sha256).The.health.of.inter |
f9ea0 | 66 61 63 65 73 20 61 6e 64 20 70 61 74 68 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 74 68 65 20 | faces.and.paths.assigned.to.the. |
f9ec0 | 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 20 69 73 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 63 68 | load.balancer.is.periodically.ch |
f9ee0 | 65 63 6b 65 64 20 62 79 20 73 65 6e 64 69 6e 67 20 49 43 4d 50 20 70 61 63 6b 65 74 73 20 28 70 | ecked.by.sending.ICMP.packets.(p |
f9f00 | 69 6e 67 29 20 74 6f 20 72 65 6d 6f 74 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 73 2c 20 61 20 54 | ing).to.remote.destinations,.a.T |
f9f20 | 54 4c 20 74 65 73 74 20 6f 72 20 74 68 65 20 65 78 65 63 75 74 69 6f 6e 20 6f 66 20 61 20 75 73 | TL.test.or.the.execution.of.a.us |
f9f40 | 65 72 20 64 65 66 69 6e 65 64 20 73 63 72 69 70 74 2e 20 49 66 20 61 6e 20 69 6e 74 65 72 66 61 | er.defined.script..If.an.interfa |
f9f60 | 63 65 20 66 61 69 6c 73 20 74 68 65 20 68 65 61 6c 74 68 20 63 68 65 63 6b 20 69 74 20 69 73 20 | ce.fails.the.health.check.it.is. |
f9f80 | 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 27 73 | removed.from.the.load.balancer's |
f9fa0 | 20 70 6f 6f 6c 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 6f 20 65 6e 61 62 6c 65 20 68 | .pool.of.interfaces..To.enable.h |
f9fc0 | 65 61 6c 74 68 20 63 68 65 63 6b 69 6e 67 20 66 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 3a | ealth.checking.for.an.interface: |
f9fe0 | 00 54 68 65 20 68 65 6c 6c 6f 2d 6d 75 6c 74 69 70 6c 69 65 72 20 73 70 65 63 69 66 69 65 73 20 | .The.hello-multiplier.specifies. |
fa000 | 68 6f 77 20 6d 61 6e 79 20 48 65 6c 6c 6f 73 20 74 6f 20 73 65 6e 64 20 70 65 72 20 73 65 63 6f | how.many.Hellos.to.send.per.seco |
fa020 | 6e 64 2c 20 66 72 6f 6d 20 31 20 28 65 76 65 72 79 20 73 65 63 6f 6e 64 29 20 74 6f 20 31 30 20 | nd,.from.1.(every.second).to.10. |
fa040 | 28 65 76 65 72 79 20 31 30 30 6d 73 29 2e 20 54 68 75 73 20 6f 6e 65 20 63 61 6e 20 68 61 76 65 | (every.100ms)..Thus.one.can.have |
fa060 | 20 31 73 20 63 6f 6e 76 65 72 67 65 6e 63 65 20 74 69 6d 65 20 66 6f 72 20 4f 53 50 46 2e 20 49 | .1s.convergence.time.for.OSPF..I |
fa080 | 66 20 74 68 69 73 20 66 6f 72 6d 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 74 68 65 6e 20 74 | f.this.form.is.specified,.then.t |
fa0a0 | 68 65 20 68 65 6c 6c 6f 2d 69 6e 74 65 72 76 61 6c 20 61 64 76 65 72 74 69 73 65 64 20 69 6e 20 | he.hello-interval.advertised.in. |
fa0c0 | 48 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 69 73 20 73 65 74 20 74 6f 20 30 20 61 6e 64 20 74 68 | Hello.packets.is.set.to.0.and.th |
fa0e0 | 65 20 68 65 6c 6c 6f 2d 69 6e 74 65 72 76 61 6c 20 6f 6e 20 72 65 63 65 69 76 65 64 20 48 65 6c | e.hello-interval.on.received.Hel |
fa100 | 6c 6f 20 70 61 63 6b 65 74 73 20 69 73 20 6e 6f 74 20 63 68 65 63 6b 65 64 2c 20 74 68 75 73 20 | lo.packets.is.not.checked,.thus. |
fa120 | 74 68 65 20 68 65 6c 6c 6f 2d 6d 75 6c 74 69 70 6c 69 65 72 20 6e 65 65 64 20 4e 4f 54 20 62 65 | the.hello-multiplier.need.NOT.be |
fa140 | 20 74 68 65 20 73 61 6d 65 20 61 63 72 6f 73 73 20 6d 75 6c 74 69 70 6c 65 20 72 6f 75 74 65 72 | .the.same.across.multiple.router |
fa160 | 73 20 6f 6e 20 61 20 63 6f 6d 6d 6f 6e 20 6c 69 6e 6b 2e 00 54 68 65 20 68 6f 73 74 6e 61 6d 65 | s.on.a.common.link..The.hostname |
fa180 | 20 63 61 6e 20 62 65 20 75 70 20 74 6f 20 36 33 20 63 68 61 72 61 63 74 65 72 73 2e 20 41 20 68 | .can.be.up.to.63.characters..A.h |
fa1a0 | 6f 73 74 6e 61 6d 65 20 6d 75 73 74 20 73 74 61 72 74 20 61 6e 64 20 65 6e 64 20 77 69 74 68 20 | ostname.must.start.and.end.with. |
fa1c0 | 61 20 6c 65 74 74 65 72 20 6f 72 20 64 69 67 69 74 2c 20 61 6e 64 20 68 61 76 65 20 61 73 20 69 | a.letter.or.digit,.and.have.as.i |
fa1e0 | 6e 74 65 72 69 6f 72 20 63 68 61 72 61 63 74 65 72 73 20 6f 6e 6c 79 20 6c 65 74 74 65 72 73 2c | nterior.characters.only.letters, |
fa200 | 20 64 69 67 69 74 73 2c 20 6f 72 20 61 20 68 79 70 68 65 6e 2e 00 54 68 65 20 68 6f 73 74 6e 61 | .digits,.or.a.hyphen..The.hostna |
fa220 | 6d 65 20 6f 72 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 6d 61 73 74 65 72 00 54 | me.or.IP.address.of.the.master.T |
fa240 | 68 65 20 69 64 65 6e 74 69 66 69 65 72 20 69 73 20 74 68 65 20 64 65 76 69 63 65 27 73 20 44 55 | he.identifier.is.the.device's.DU |
fa260 | 49 44 3a 20 63 6f 6c 6f 6e 2d 73 65 70 61 72 61 74 65 64 20 68 65 78 20 6c 69 73 74 20 28 61 73 | ID:.colon-separated.hex.list.(as |
fa280 | 20 75 73 65 64 20 62 79 20 69 73 63 2d 64 68 63 70 20 6f 70 74 69 6f 6e 20 64 68 63 70 76 36 2e | .used.by.isc-dhcp.option.dhcpv6. |
fa2a0 | 63 6c 69 65 6e 74 2d 69 64 29 2e 20 49 66 20 74 68 65 20 64 65 76 69 63 65 20 61 6c 72 65 61 64 | client-id)..If.the.device.alread |
fa2c0 | 79 20 68 61 73 20 61 20 64 79 6e 61 6d 69 63 20 6c 65 61 73 65 20 66 72 6f 6d 20 74 68 65 20 44 | y.has.a.dynamic.lease.from.the.D |
fa2e0 | 48 43 50 76 36 20 73 65 72 76 65 72 2c 20 69 74 73 20 44 55 49 44 20 63 61 6e 20 62 65 20 66 6f | HCPv6.server,.its.DUID.can.be.fo |
fa300 | 75 6e 64 20 77 69 74 68 20 60 60 73 68 6f 77 20 73 65 72 76 69 63 65 20 64 68 63 70 76 36 20 73 | und.with.``show.service.dhcpv6.s |
fa320 | 65 72 76 65 72 20 6c 65 61 73 65 73 60 60 2e 20 54 68 65 20 44 55 49 44 20 62 65 67 69 6e 73 20 | erver.leases``..The.DUID.begins. |
fa340 | 61 74 20 74 68 65 20 35 74 68 20 6f 63 74 65 74 20 28 61 66 74 65 72 20 74 68 65 20 34 74 68 20 | at.the.5th.octet.(after.the.4th. |
fa360 | 63 6f 6c 6f 6e 29 20 6f 66 20 49 41 49 44 5f 44 55 49 44 2e 00 54 68 65 20 69 6e 64 69 76 69 64 | colon).of.IAID_DUID..The.individ |
fa380 | 75 61 6c 20 73 70 6f 6b 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 20 6f 6e 6c 79 20 64 69 | ual.spoke.configurations.only.di |
fa3a0 | 66 66 65 72 20 69 6e 20 74 68 65 20 6c 6f 63 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 6f 6e 20 | ffer.in.the.local.IP.address.on. |
fa3c0 | 74 68 65 20 60 60 74 75 6e 31 30 60 60 20 69 6e 74 65 72 66 61 63 65 2e 20 53 65 65 20 74 68 65 | the.``tun10``.interface..See.the |
fa3e0 | 20 61 62 6f 76 65 20 64 69 61 67 72 61 6d 20 66 6f 72 20 74 68 65 20 69 6e 64 69 76 69 64 75 61 | .above.diagram.for.the.individua |
fa400 | 6c 20 49 50 20 61 64 64 72 65 73 73 65 73 2e 00 54 68 65 20 69 6e 6e 65 72 20 74 61 67 20 69 73 | l.IP.addresses..The.inner.tag.is |
fa420 | 20 74 68 65 20 74 61 67 20 77 68 69 63 68 20 69 73 20 63 6c 6f 73 65 73 74 20 74 6f 20 74 68 65 | .the.tag.which.is.closest.to.the |
fa440 | 20 70 61 79 6c 6f 61 64 20 70 6f 72 74 69 6f 6e 20 6f 66 20 74 68 65 20 66 72 61 6d 65 2e 20 49 | .payload.portion.of.the.frame..I |
fa460 | 74 20 69 73 20 6f 66 66 69 63 69 61 6c 6c 79 20 63 61 6c 6c 65 64 20 43 2d 54 41 47 20 28 63 75 | t.is.officially.called.C-TAG.(cu |
fa480 | 73 74 6f 6d 65 72 20 74 61 67 2c 20 77 69 74 68 20 65 74 68 65 72 74 79 70 65 20 30 78 38 31 30 | stomer.tag,.with.ethertype.0x810 |
fa4a0 | 30 29 2e 20 54 68 65 20 6f 75 74 65 72 20 74 61 67 20 69 73 20 74 68 65 20 6f 6e 65 20 63 6c 6f | 0)..The.outer.tag.is.the.one.clo |
fa4c0 | 73 65 72 2f 63 6c 6f 73 65 73 74 20 74 6f 20 74 68 65 20 45 74 68 65 72 6e 65 74 20 68 65 61 64 | ser/closest.to.the.Ethernet.head |
fa4e0 | 65 72 2c 20 69 74 73 20 6e 61 6d 65 20 69 73 20 53 2d 54 41 47 20 28 73 65 72 76 69 63 65 20 74 | er,.its.name.is.S-TAG.(service.t |
fa500 | 61 67 20 77 69 74 68 20 45 74 68 65 72 6e 65 74 20 54 79 70 65 20 3d 20 30 78 38 38 61 38 29 2e | ag.with.Ethernet.Type.=.0x88a8). |
fa520 | 00 54 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 62 65 20 63 | .The.interface.traffic.will.be.c |
fa540 | 6f 6d 69 6e 67 20 69 6e 20 6f 6e 3b 00 54 68 65 20 69 6e 74 65 72 66 61 63 65 20 75 73 65 64 20 | oming.in.on;.The.interface.used. |
fa560 | 74 6f 20 72 65 63 65 69 76 65 20 61 6e 64 20 72 65 6c 61 79 20 69 6e 64 69 76 69 64 75 61 6c 20 | to.receive.and.relay.individual. |
fa580 | 62 72 6f 61 64 63 61 73 74 20 70 61 63 6b 65 74 73 2e 20 49 66 20 79 6f 75 20 77 61 6e 74 20 74 | broadcast.packets..If.you.want.t |
fa5a0 | 6f 20 72 65 63 65 69 76 65 2f 72 65 6c 61 79 20 70 61 63 6b 65 74 73 20 6f 6e 20 62 6f 74 68 20 | o.receive/relay.packets.on.both. |
fa5c0 | 60 65 74 68 31 60 20 61 6e 64 20 60 65 74 68 32 60 20 62 6f 74 68 20 69 6e 74 65 72 66 61 63 65 | `eth1`.and.`eth2`.both.interface |
fa5e0 | 73 20 6e 65 65 64 20 74 6f 20 62 65 20 61 64 64 65 64 2e 00 54 68 65 20 69 6e 74 65 72 6e 61 6c | s.need.to.be.added..The.internal |
fa600 | 20 49 50 20 61 64 64 72 65 73 73 65 73 20 77 65 20 77 61 6e 74 20 74 6f 20 74 72 61 6e 73 6c 61 | .IP.addresses.we.want.to.transla |
fa620 | 74 65 00 54 68 65 20 69 6e 76 65 72 73 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 68 61 73 | te.The.inverse.configuration.has |
fa640 | 20 74 6f 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 72 65 6d 6f 74 65 20 73 69 64 | .to.be.applied.to.the.remote.sid |
fa660 | 65 2e 00 54 68 65 20 6c 61 72 67 65 73 74 20 4d 54 55 20 73 69 7a 65 20 79 6f 75 20 63 61 6e 20 | e..The.largest.MTU.size.you.can. |
fa680 | 75 73 65 20 77 69 74 68 20 44 53 4c 20 69 73 20 31 34 39 32 20 64 75 65 20 74 6f 20 50 50 50 6f | use.with.DSL.is.1492.due.to.PPPo |
fa6a0 | 45 20 6f 76 65 72 68 65 61 64 2e 20 49 66 20 79 6f 75 20 61 72 65 20 73 77 69 74 63 68 69 6e 67 | E.overhead..If.you.are.switching |
fa6c0 | 20 66 72 6f 6d 20 61 20 44 48 43 50 20 62 61 73 65 64 20 49 53 50 20 6c 69 6b 65 20 63 61 62 6c | .from.a.DHCP.based.ISP.like.cabl |
fa6e0 | 65 20 74 68 65 6e 20 62 65 20 61 77 61 72 65 20 74 68 61 74 20 74 68 69 6e 67 73 20 6c 69 6b 65 | e.then.be.aware.that.things.like |
fa700 | 20 56 50 4e 20 6c 69 6e 6b 73 20 6d 61 79 20 6e 65 65 64 20 74 6f 20 68 61 76 65 20 74 68 65 69 | .VPN.links.may.need.to.have.thei |
fa720 | 72 20 4d 54 55 20 73 69 7a 65 73 20 61 64 6a 75 73 74 65 64 20 74 6f 20 77 6f 72 6b 20 77 69 74 | r.MTU.sizes.adjusted.to.work.wit |
fa740 | 68 69 6e 20 74 68 69 73 20 6c 69 6d 69 74 2e 00 54 68 65 20 6c 61 73 74 20 73 74 65 70 20 69 73 | hin.this.limit..The.last.step.is |
fa760 | 20 74 6f 20 64 65 66 69 6e 65 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 72 6f 75 74 65 20 66 6f | .to.define.an.interface.route.fo |
fa780 | 72 20 31 39 32 2e 31 36 38 2e 32 2e 30 2f 32 34 20 74 6f 20 67 65 74 20 74 68 72 6f 75 67 68 20 | r.192.168.2.0/24.to.get.through. |
fa7a0 | 74 68 65 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 20 60 77 67 30 31 60 2e 20 | the.WireGuard.interface.`wg01`.. |
fa7c0 | 4d 75 6c 74 69 70 6c 65 20 49 50 73 20 6f 72 20 6e 65 74 77 6f 72 6b 73 20 63 61 6e 20 62 65 20 | Multiple.IPs.or.networks.can.be. |
fa7e0 | 64 65 66 69 6e 65 64 20 61 6e 64 20 72 6f 75 74 65 64 2e 20 54 68 65 20 6c 61 73 74 20 63 68 65 | defined.and.routed..The.last.che |
fa800 | 63 6b 20 69 73 20 61 6c 6c 6f 77 65 64 2d 69 70 73 20 77 68 69 63 68 20 65 69 74 68 65 72 20 70 | ck.is.allowed-ips.which.either.p |
fa820 | 72 65 76 65 6e 74 73 20 6f 72 20 61 6c 6c 6f 77 73 20 74 68 65 20 74 72 61 66 66 69 63 2e 00 54 | revents.or.allows.the.traffic..T |
fa840 | 68 65 20 6c 65 67 61 63 79 20 61 6e 64 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c | he.legacy.and.zone-based.firewal |
fa860 | 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 69 73 20 6e 6f 74 20 6c | l.configuration.options.is.not.l |
fa880 | 6f 6e 67 65 72 20 73 75 70 70 6f 72 74 65 64 2e 20 54 68 65 79 20 61 72 65 20 68 65 72 65 20 66 | onger.supported..They.are.here.f |
fa8a0 | 6f 72 20 72 65 66 65 72 65 6e 63 65 20 70 75 72 70 6f 73 65 73 20 6f 6e 6c 79 2e 00 54 68 65 20 | or.reference.purposes.only..The. |
fa8c0 | 6c 69 6d 69 74 65 72 20 70 65 72 66 6f 72 6d 73 20 62 61 73 69 63 20 69 6e 67 72 65 73 73 20 70 | limiter.performs.basic.ingress.p |
fa8e0 | 6f 6c 69 63 69 6e 67 20 6f 66 20 74 72 61 66 66 69 63 20 66 6c 6f 77 73 2e 20 4d 75 6c 74 69 70 | olicing.of.traffic.flows..Multip |
fa900 | 6c 65 20 63 6c 61 73 73 65 73 20 6f 66 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 64 65 66 | le.classes.of.traffic.can.be.def |
fa920 | 69 6e 65 64 20 61 6e 64 20 74 72 61 66 66 69 63 20 6c 69 6d 69 74 73 20 63 61 6e 20 62 65 20 61 | ined.and.traffic.limits.can.be.a |
fa940 | 70 70 6c 69 65 64 20 74 6f 20 65 61 63 68 20 63 6c 61 73 73 2e 20 41 6c 74 68 6f 75 67 68 20 74 | pplied.to.each.class..Although.t |
fa960 | 68 65 20 70 6f 6c 69 63 65 72 20 75 73 65 73 20 61 20 74 6f 6b 65 6e 20 62 75 63 6b 65 74 20 6d | he.policer.uses.a.token.bucket.m |
fa980 | 65 63 68 61 6e 69 73 6d 20 69 6e 74 65 72 6e 61 6c 6c 79 2c 20 69 74 20 64 6f 65 73 20 6e 6f 74 | echanism.internally,.it.does.not |
fa9a0 | 20 68 61 76 65 20 74 68 65 20 63 61 70 61 62 69 6c 69 74 79 20 74 6f 20 64 65 6c 61 79 20 61 20 | .have.the.capability.to.delay.a. |
fa9c0 | 70 61 63 6b 65 74 20 61 73 20 61 20 73 68 61 70 69 6e 67 20 6d 65 63 68 61 6e 69 73 6d 20 64 6f | packet.as.a.shaping.mechanism.do |
fa9e0 | 65 73 2e 20 54 72 61 66 66 69 63 20 65 78 63 65 65 64 69 6e 67 20 74 68 65 20 64 65 66 69 6e 65 | es..Traffic.exceeding.the.define |
faa00 | 64 20 62 61 6e 64 77 69 64 74 68 20 6c 69 6d 69 74 73 20 69 73 20 64 69 72 65 63 74 6c 79 20 64 | d.bandwidth.limits.is.directly.d |
faa20 | 72 6f 70 70 65 64 2e 20 41 20 6d 61 78 69 6d 75 6d 20 61 6c 6c 6f 77 65 64 20 62 75 72 73 74 20 | ropped..A.maximum.allowed.burst. |
faa40 | 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 6f 2e 00 54 68 65 20 6c 69 6e 6b 20 | can.be.configured.too..The.link. |
faa60 | 62 61 6e 64 77 69 64 74 68 20 65 78 74 65 6e 64 65 64 20 63 6f 6d 6d 75 6e 69 74 79 20 69 73 20 | bandwidth.extended.community.is. |
faa80 | 65 6e 63 6f 64 65 64 20 61 73 20 6e 6f 6e 2d 74 72 61 6e 73 69 74 69 76 65 00 54 68 65 20 6c 6f | encoded.as.non-transitive.The.lo |
faaa0 | 63 61 6c 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 69 | cal.IPv4.or.IPv6.addresses.to.bi |
faac0 | 6e 64 20 74 68 65 20 44 4e 53 20 66 6f 72 77 61 72 64 65 72 20 74 6f 2e 20 54 68 65 20 66 6f 72 | nd.the.DNS.forwarder.to..The.for |
faae0 | 77 61 72 64 65 72 20 77 69 6c 6c 20 6c 69 73 74 65 6e 20 6f 6e 20 74 68 69 73 20 61 64 64 72 65 | warder.will.listen.on.this.addre |
fab00 | 73 73 20 66 6f 72 20 69 6e 63 6f 6d 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 54 68 65 | ss.for.incoming.connections..The |
fab20 | 20 6c 6f 63 61 6c 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 74 6f | .local.IPv4.or.IPv6.addresses.to |
fab40 | 20 75 73 65 20 61 73 20 61 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 66 6f 72 20 73 65 6e | .use.as.a.source.address.for.sen |
fab60 | 64 69 6e 67 20 71 75 65 72 69 65 73 2e 20 54 68 65 20 66 6f 72 77 61 72 64 65 72 20 77 69 6c 6c | ding.queries..The.forwarder.will |
fab80 | 20 73 65 6e 64 20 66 6f 72 77 61 72 64 65 64 20 6f 75 74 62 6f 75 6e 64 20 44 4e 53 20 72 65 71 | .send.forwarded.outbound.DNS.req |
faba0 | 75 65 73 74 73 20 66 72 6f 6d 20 74 68 69 73 20 61 64 64 72 65 73 73 2e 00 54 68 65 20 6c 6f 63 | uests.from.this.address..The.loc |
fabc0 | 61 6c 20 73 69 74 65 20 77 69 6c 6c 20 68 61 76 65 20 61 20 73 75 62 6e 65 74 20 6f 66 20 31 30 | al.site.will.have.a.subnet.of.10 |
fabe0 | 2e 30 2e 30 2e 30 2f 31 36 2e 00 54 68 65 20 6c 6f 6f 70 62 61 63 6b 20 6e 65 74 77 6f 72 6b 69 | .0.0.0/16..The.loopback.networki |
fac00 | 6e 67 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 20 76 69 72 74 75 61 6c 20 6e 65 74 77 6f 72 | ng.interface.is.a.virtual.networ |
fac20 | 6b 20 64 65 76 69 63 65 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 65 6e 74 69 72 65 6c 79 20 69 6e | k.device.implemented.entirely.in |
fac40 | 20 73 6f 66 74 77 61 72 65 2e 20 41 6c 6c 20 74 72 61 66 66 69 63 20 73 65 6e 74 20 74 6f 20 69 | .software..All.traffic.sent.to.i |
fac60 | 74 20 22 6c 6f 6f 70 73 20 62 61 63 6b 22 20 61 6e 64 20 6a 75 73 74 20 74 61 72 67 65 74 73 20 | t."loops.back".and.just.targets. |
fac80 | 73 65 72 76 69 63 65 73 20 6f 6e 20 79 6f 75 72 20 6c 6f 63 61 6c 20 6d 61 63 68 69 6e 65 2e 00 | services.on.your.local.machine.. |
faca0 | 54 68 65 20 6d 61 69 6e 20 70 6f 69 6e 74 73 20 72 65 67 61 72 64 69 6e 67 20 74 68 69 73 20 70 | The.main.points.regarding.this.p |
facc0 | 61 63 6b 65 74 20 66 6c 6f 77 20 61 6e 64 20 74 65 72 6d 69 6e 6f 6c 6f 67 79 20 75 73 65 64 20 | acket.flow.and.terminology.used. |
face0 | 69 6e 20 56 79 4f 53 20 66 69 72 65 77 61 6c 6c 20 61 72 65 20 63 6f 76 65 72 65 64 20 62 65 6c | in.VyOS.firewall.are.covered.bel |
fad00 | 6f 77 3a 00 54 68 65 20 6d 61 69 6e 20 73 74 72 75 63 74 75 72 65 20 56 79 4f 53 20 66 69 72 65 | ow:.The.main.structure.VyOS.fire |
fad20 | 77 61 6c 6c 20 63 6c 69 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 54 68 65 20 6d 61 69 6e | wall.cli.is.shown.next:.The.main |
fad40 | 20 73 74 72 75 63 74 75 72 65 20 6f 66 20 74 68 65 20 56 79 4f 53 20 66 69 72 65 77 61 6c 6c 20 | .structure.of.the.VyOS.firewall. |
fad60 | 43 4c 49 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 54 68 65 20 6d 61 78 69 6d 75 6d 20 6e | CLI.is.shown.next:.The.maximum.n |
fad80 | 75 6d 62 65 72 20 6f 66 20 74 61 72 67 65 74 73 20 74 68 61 74 20 63 61 6e 20 62 65 20 73 70 65 | umber.of.targets.that.can.be.spe |
fada0 | 63 69 66 69 65 64 20 69 73 20 31 36 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 | cified.is.16..The.default.value. |
fadc0 | 69 73 20 6e 6f 20 49 50 20 61 64 64 72 65 73 73 2e 00 54 68 65 20 6d 65 61 6e 69 6e 67 20 6f 66 | is.no.IP.address..The.meaning.of |
fade0 | 20 74 68 65 20 43 6c 61 73 73 20 49 44 20 69 73 20 6e 6f 74 20 74 68 65 20 73 61 6d 65 20 66 6f | .the.Class.ID.is.not.the.same.fo |
fae00 | 72 20 65 76 65 72 79 20 74 79 70 65 20 6f 66 20 70 6f 6c 69 63 79 2e 20 4e 6f 72 6d 61 6c 6c 79 | r.every.type.of.policy..Normally |
fae20 | 20 70 6f 6c 69 63 69 65 73 20 6a 75 73 74 20 6e 65 65 64 20 61 20 6d 65 61 6e 69 6e 67 6c 65 73 | .policies.just.need.a.meaningles |
fae40 | 73 20 6e 75 6d 62 65 72 20 74 6f 20 69 64 65 6e 74 69 66 79 20 61 20 63 6c 61 73 73 20 28 43 6c | s.number.to.identify.a.class.(Cl |
fae60 | 61 73 73 20 49 44 29 2c 20 62 75 74 20 74 68 61 74 20 64 6f 65 73 20 6e 6f 74 20 61 70 70 6c 79 | ass.ID),.but.that.does.not.apply |
fae80 | 20 74 6f 20 65 76 65 72 79 20 70 6f 6c 69 63 79 2e 20 54 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 | .to.every.policy..The.number.of. |
faea0 | 61 20 63 6c 61 73 73 20 69 6e 20 61 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 69 74 20 64 | a.class.in.a.Priority.Queue.it.d |
faec0 | 6f 65 73 20 6e 6f 74 20 6f 6e 6c 79 20 69 64 65 6e 74 69 66 79 20 69 74 2c 20 69 74 20 61 6c 73 | oes.not.only.identify.it,.it.als |
faee0 | 6f 20 64 65 66 69 6e 65 73 20 69 74 73 20 70 72 69 6f 72 69 74 79 2e 00 54 68 65 20 6d 65 6d 62 | o.defines.its.priority..The.memb |
faf00 | 65 72 20 69 6e 74 65 72 66 61 63 65 20 60 65 74 68 31 60 20 69 73 20 61 20 74 72 75 6e 6b 20 74 | er.interface.`eth1`.is.a.trunk.t |
faf20 | 68 61 74 20 61 6c 6c 6f 77 73 20 56 4c 41 4e 20 31 30 20 74 6f 20 70 61 73 73 00 54 68 65 20 6d | hat.allows.VLAN.10.to.pass.The.m |
faf40 | 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 36 37 37 37 32 31 35 20 28 4d 61 | etric.range.is.1.to.16777215.(Ma |
faf60 | 78 20 76 61 6c 75 65 20 64 65 70 65 6e 64 20 69 66 20 6d 65 74 72 69 63 20 73 75 70 70 6f 72 74 | x.value.depend.if.metric.support |
faf80 | 20 6e 61 72 72 6f 77 20 6f 72 20 77 69 64 65 20 76 61 6c 75 65 29 2e 00 54 68 65 20 6d 69 6e 69 | .narrow.or.wide.value)..The.mini |
fafa0 | 6d 61 6c 20 65 63 68 6f 20 72 65 63 65 69 76 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 69 6e | mal.echo.receive.transmission.in |
fafc0 | 74 65 72 76 61 6c 20 74 68 61 74 20 74 68 69 73 20 73 79 73 74 65 6d 20 69 73 20 63 61 70 61 62 | terval.that.this.system.is.capab |
fafe0 | 6c 65 20 6f 66 20 68 61 6e 64 6c 69 6e 67 00 54 68 65 20 6d 6f 73 74 20 76 69 73 69 62 6c 65 20 | le.of.handling.The.most.visible. |
fb000 | 61 70 70 6c 69 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 66 | application.of.the.protocol.is.f |
fb020 | 6f 72 20 61 63 63 65 73 73 20 74 6f 20 73 68 65 6c 6c 20 61 63 63 6f 75 6e 74 73 20 6f 6e 20 55 | or.access.to.shell.accounts.on.U |
fb040 | 6e 69 78 2d 6c 69 6b 65 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d 73 2c 20 62 75 74 20 | nix-like.operating.systems,.but. |
fb060 | 69 74 20 73 65 65 73 20 73 6f 6d 65 20 6c 69 6d 69 74 65 64 20 75 73 65 20 6f 6e 20 57 69 6e 64 | it.sees.some.limited.use.on.Wind |
fb080 | 6f 77 73 20 61 73 20 77 65 6c 6c 2e 20 49 6e 20 32 30 31 35 2c 20 4d 69 63 72 6f 73 6f 66 74 20 | ows.as.well..In.2015,.Microsoft. |
fb0a0 | 61 6e 6e 6f 75 6e 63 65 64 20 74 68 61 74 20 74 68 65 79 20 77 6f 75 6c 64 20 69 6e 63 6c 75 64 | announced.that.they.would.includ |
fb0c0 | 65 20 6e 61 74 69 76 65 20 73 75 70 70 6f 72 74 20 66 6f 72 20 53 53 48 20 69 6e 20 61 20 66 75 | e.native.support.for.SSH.in.a.fu |
fb0e0 | 74 75 72 65 20 72 65 6c 65 61 73 65 2e 00 54 68 65 20 6d 75 6c 74 69 63 61 73 74 2d 67 72 6f 75 | ture.release..The.multicast-grou |
fb100 | 70 20 75 73 65 64 20 62 79 20 61 6c 6c 20 6c 65 61 76 65 73 20 66 6f 72 20 74 68 69 73 20 76 6c | p.used.by.all.leaves.for.this.vl |
fb120 | 61 6e 20 65 78 74 65 6e 73 69 6f 6e 2e 20 48 61 73 20 74 6f 20 62 65 20 74 68 65 20 73 61 6d 65 | an.extension..Has.to.be.the.same |
fb140 | 20 6f 6e 20 61 6c 6c 20 6c 65 61 76 65 73 20 74 68 61 74 20 68 61 73 20 74 68 69 73 20 69 6e 74 | .on.all.leaves.that.has.this.int |
fb160 | 65 72 66 61 63 65 2e 00 54 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 73 65 72 76 69 63 65 20 | erface..The.name.of.the.service. |
fb180 | 63 61 6e 20 62 65 20 64 69 66 66 65 72 65 6e 74 2c 20 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c | can.be.different,.in.this.exampl |
fb1a0 | 65 20 69 74 20 69 73 20 6f 6e 6c 79 20 66 6f 72 20 63 6f 6e 76 65 6e 69 65 6e 63 65 2e 00 54 68 | e.it.is.only.for.convenience..Th |
fb1c0 | 65 20 6e 65 74 6d 61 73 6b 20 6f 72 20 64 6f 6d 61 69 6e 20 74 68 61 74 20 45 44 4e 53 20 43 6c | e.netmask.or.domain.that.EDNS.Cl |
fb1e0 | 69 65 6e 74 20 53 75 62 6e 65 74 20 73 68 6f 75 6c 64 20 62 65 20 65 6e 61 62 6c 65 64 20 66 6f | ient.Subnet.should.be.enabled.fo |
fb200 | 72 20 69 6e 20 6f 75 74 67 6f 69 6e 67 20 71 75 65 72 69 65 73 2e 00 54 68 65 20 6e 65 74 77 6f | r.in.outgoing.queries..The.netwo |
fb220 | 72 6b 20 74 6f 70 6f 6c 6f 67 79 20 69 73 20 64 65 63 6c 61 72 65 64 20 62 79 20 73 68 61 72 65 | rk.topology.is.declared.by.share |
fb240 | 64 2d 6e 65 74 77 6f 72 6b 2d 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 73 75 62 6e 65 74 20 64 65 | d-network-name.and.the.subnet.de |
fb260 | 63 6c 61 72 61 74 69 6f 6e 73 2e 20 54 68 65 20 44 48 43 50 20 73 65 72 76 69 63 65 20 63 61 6e | clarations..The.DHCP.service.can |
fb280 | 20 73 65 72 76 65 20 6d 75 6c 74 69 70 6c 65 20 73 68 61 72 65 64 20 6e 65 74 77 6f 72 6b 73 2c | .serve.multiple.shared.networks, |
fb2a0 | 20 77 69 74 68 20 65 61 63 68 20 73 68 61 72 65 64 20 6e 65 74 77 6f 72 6b 20 68 61 76 69 6e 67 | .with.each.shared.network.having |
fb2c0 | 20 31 20 6f 72 20 6d 6f 72 65 20 73 75 62 6e 65 74 73 2e 20 45 61 63 68 20 73 75 62 6e 65 74 20 | .1.or.more.subnets..Each.subnet. |
fb2e0 | 6d 75 73 74 20 62 65 20 70 72 65 73 65 6e 74 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e | must.be.present.on.an.interface. |
fb300 | 20 41 20 72 61 6e 67 65 20 63 61 6e 20 62 65 20 64 65 63 6c 61 72 65 64 20 69 6e 73 69 64 65 20 | .A.range.can.be.declared.inside. |
fb320 | 61 20 73 75 62 6e 65 74 20 74 6f 20 64 65 66 69 6e 65 20 61 20 70 6f 6f 6c 20 6f 66 20 64 79 6e | a.subnet.to.define.a.pool.of.dyn |
fb340 | 61 6d 69 63 20 61 64 64 72 65 73 73 65 73 2e 20 4d 75 6c 74 69 70 6c 65 20 72 61 6e 67 65 73 20 | amic.addresses..Multiple.ranges. |
fb360 | 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 61 6e 64 20 63 61 6e 20 63 6f 6e 74 61 69 6e 20 68 | can.be.defined.and.can.contain.h |
fb380 | 6f 6c 65 73 2e 20 53 74 61 74 69 63 20 6d 61 70 70 69 6e 67 73 20 63 61 6e 20 62 65 20 73 65 74 | oles..Static.mappings.can.be.set |
fb3a0 | 20 74 6f 20 61 73 73 69 67 6e 20 22 73 74 61 74 69 63 22 20 61 64 64 72 65 73 73 65 73 20 74 6f | .to.assign."static".addresses.to |
fb3c0 | 20 63 6c 69 65 6e 74 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 69 72 20 4d 41 43 20 61 64 64 72 | .clients.based.on.their.MAC.addr |
fb3e0 | 65 73 73 2e 00 54 68 65 20 6e 65 78 74 20 65 78 61 6d 70 6c 65 20 69 73 20 61 20 73 69 6d 70 6c | ess..The.next.example.is.a.simpl |
fb400 | 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e | e.configuration.of.conntrack-syn |
fb420 | 63 2e 00 54 68 65 20 6e 65 78 74 20 73 74 65 70 20 69 73 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 | c..The.next.step.is.to.configure |
fb440 | 20 79 6f 75 72 20 6c 6f 63 61 6c 20 73 69 64 65 20 61 73 20 77 65 6c 6c 20 61 73 20 74 68 65 20 | .your.local.side.as.well.as.the. |
fb460 | 70 6f 6c 69 63 79 20 62 61 73 65 64 20 74 72 75 73 74 65 64 20 64 65 73 74 69 6e 61 74 69 6f 6e | policy.based.trusted.destination |
fb480 | 20 61 64 64 72 65 73 73 65 73 2e 20 49 66 20 79 6f 75 20 6f 6e 6c 79 20 69 6e 69 74 69 61 74 65 | .addresses..If.you.only.initiate |
fb4a0 | 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 2c 20 74 68 65 20 6c 69 73 74 65 6e 20 70 6f 72 74 20 61 | .a.connection,.the.listen.port.a |
fb4c0 | 6e 64 20 61 64 64 72 65 73 73 2f 70 6f 72 74 20 69 73 20 6f 70 74 69 6f 6e 61 6c 3b 20 68 6f 77 | nd.address/port.is.optional;.how |
fb4e0 | 65 76 65 72 2c 20 69 66 20 79 6f 75 20 61 63 74 20 6c 69 6b 65 20 61 20 73 65 72 76 65 72 20 61 | ever,.if.you.act.like.a.server.a |
fb500 | 6e 64 20 65 6e 64 70 6f 69 6e 74 73 20 69 6e 69 74 69 61 74 65 20 74 68 65 20 63 6f 6e 6e 65 63 | nd.endpoints.initiate.the.connec |
fb520 | 74 69 6f 6e 73 20 74 6f 20 79 6f 75 72 20 73 79 73 74 65 6d 2c 20 79 6f 75 20 6e 65 65 64 20 74 | tions.to.your.system,.you.need.t |
fb540 | 6f 20 64 65 66 69 6e 65 20 61 20 70 6f 72 74 20 79 6f 75 72 20 63 6c 69 65 6e 74 73 20 63 61 6e | o.define.a.port.your.clients.can |
fb560 | 20 63 6f 6e 6e 65 63 74 20 74 6f 2c 20 6f 74 68 65 72 77 69 73 65 20 74 68 65 20 70 6f 72 74 20 | .connect.to,.otherwise.the.port. |
fb580 | 69 73 20 72 61 6e 64 6f 6d 6c 79 20 63 68 6f 73 65 6e 20 61 6e 64 20 6d 61 79 20 6d 61 6b 65 20 | is.randomly.chosen.and.may.make. |
fb5a0 | 63 6f 6e 6e 65 63 74 69 6f 6e 20 64 69 66 66 69 63 75 6c 74 20 77 69 74 68 20 66 69 72 65 77 61 | connection.difficult.with.firewa |
fb5c0 | 6c 6c 20 72 75 6c 65 73 2c 20 73 69 6e 63 65 20 74 68 65 20 70 6f 72 74 20 6d 61 79 20 62 65 20 | ll.rules,.since.the.port.may.be. |
fb5e0 | 64 69 66 66 65 72 65 6e 74 20 65 61 63 68 20 74 69 6d 65 20 74 68 65 20 73 79 73 74 65 6d 20 69 | different.each.time.the.system.i |
fb600 | 73 20 72 65 62 6f 6f 74 65 64 2e 00 54 68 65 20 6e 6f 74 65 64 20 70 75 62 6c 69 63 20 6b 65 79 | s.rebooted..The.noted.public.key |
fb620 | 73 20 73 68 6f 75 6c 64 20 62 65 20 65 6e 74 65 72 65 64 20 6f 6e 20 74 68 65 20 6f 70 70 6f 73 | s.should.be.entered.on.the.oppos |
fb640 | 69 74 65 20 72 6f 75 74 65 72 73 2e 00 54 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 6d 69 6c 6c 69 | ite.routers..The.number.of.milli |
fb660 | 73 65 63 6f 6e 64 73 20 74 6f 20 77 61 69 74 20 66 6f 72 20 61 20 72 65 6d 6f 74 65 20 61 75 74 | seconds.to.wait.for.a.remote.aut |
fb680 | 68 6f 72 69 74 61 74 69 76 65 20 73 65 72 76 65 72 20 74 6f 20 72 65 73 70 6f 6e 64 20 62 65 66 | horitative.server.to.respond.bef |
fb6a0 | 6f 72 65 20 74 69 6d 69 6e 67 20 6f 75 74 20 61 6e 64 20 72 65 73 70 6f 6e 64 69 6e 67 20 77 69 | ore.timing.out.and.responding.wi |
fb6c0 | 74 68 20 53 45 52 56 46 41 49 4c 2e 00 54 68 65 20 6e 75 6d 62 65 72 20 70 61 72 61 6d 65 74 65 | th.SERVFAIL..The.number.paramete |
fb6e0 | 72 20 28 31 2d 31 30 29 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f | r.(1-10).configures.the.amount.o |
fb700 | 66 20 61 63 63 65 70 74 65 64 20 6f 63 63 75 72 65 6e 63 65 73 20 6f 66 20 74 68 65 20 73 79 73 | f.accepted.occurences.of.the.sys |
fb720 | 74 65 6d 20 41 53 20 6e 75 6d 62 65 72 20 69 6e 20 41 53 20 70 61 74 68 2e 00 54 68 65 20 6f 66 | tem.AS.number.in.AS.path..The.of |
fb740 | 66 69 63 69 61 6c 20 70 6f 72 74 20 66 6f 72 20 4f 70 65 6e 56 50 4e 20 69 73 20 31 31 39 34 2c | ficial.port.for.OpenVPN.is.1194, |
fb760 | 20 77 68 69 63 68 20 77 65 20 72 65 73 65 72 76 65 20 66 6f 72 20 63 6c 69 65 6e 74 20 56 50 4e | .which.we.reserve.for.client.VPN |
fb780 | 3b 20 77 65 20 77 69 6c 6c 20 75 73 65 20 31 31 39 35 20 66 6f 72 20 73 69 74 65 2d 74 6f 2d 73 | ;.we.will.use.1195.for.site-to-s |
fb7a0 | 69 74 65 20 56 50 4e 2e 00 54 68 65 20 6f 6e 6c 79 20 73 74 61 67 65 73 20 56 79 4f 53 20 77 69 | ite.VPN..The.only.stages.VyOS.wi |
fb7c0 | 6c 6c 20 70 72 6f 63 65 73 73 20 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 66 69 72 65 77 61 | ll.process.as.part.of.the.firewa |
fb7e0 | 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 74 68 65 20 60 66 6f 72 77 61 72 64 | ll.configuration.is.the.`forward |
fb800 | 60 20 28 46 34 20 73 74 61 67 65 29 2c 20 60 69 6e 70 75 74 60 20 28 4c 34 20 73 74 61 67 65 29 | `.(F4.stage),.`input`.(L4.stage) |
fb820 | 2c 20 61 6e 64 20 60 6f 75 74 70 75 74 60 20 28 4c 35 20 73 74 61 67 65 29 2e 20 41 6c 6c 20 74 | ,.and.`output`.(L5.stage)..All.t |
fb840 | 68 65 20 6f 74 68 65 72 20 73 74 61 67 65 73 20 61 6e 64 20 73 74 65 70 73 20 61 72 65 20 66 6f | he.other.stages.and.steps.are.fo |
fb860 | 72 20 72 65 66 65 72 65 6e 63 65 20 61 6e 64 20 63 61 6e 74 20 62 65 20 6d 61 6e 69 70 75 6c 61 | r.reference.and.cant.be.manipula |
fb880 | 74 65 64 20 74 68 72 6f 75 67 68 20 56 79 4f 53 2e 00 54 68 65 20 6f 70 74 69 6f 6e 61 6c 20 60 | ted.through.VyOS..The.optional.` |
fb8a0 | 64 69 73 61 62 6c 65 60 20 6f 70 74 69 6f 6e 20 61 6c 6c 6f 77 73 20 74 6f 20 65 78 63 6c 75 64 | disable`.option.allows.to.exclud |
fb8c0 | 65 20 69 6e 74 65 72 66 61 63 65 20 66 72 6f 6d 20 70 61 73 73 69 76 65 20 73 74 61 74 65 2e 20 | e.interface.from.passive.state.. |
fb8e0 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 20 69 66 20 74 68 65 20 63 6f 6d 6d | This.command.is.used.if.the.comm |
fb900 | 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 70 61 73 73 69 76 65 2d 69 6e 74 65 72 66 61 63 65 20 64 | and.:cfgcmd:`passive-interface.d |
fb920 | 65 66 61 75 6c 74 60 20 77 61 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 54 68 65 20 6f 70 74 69 | efault`.was.configured..The.opti |
fb940 | 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 20 72 65 67 69 73 74 65 72 20 73 70 65 63 69 66 69 65 | onal.parameter.register.specifie |
fb960 | 73 20 74 68 61 74 20 52 65 67 69 73 74 72 61 74 69 6f 6e 20 52 65 71 75 65 73 74 20 73 68 6f 75 | s.that.Registration.Request.shou |
fb980 | 6c 64 20 62 65 20 73 65 6e 74 20 74 6f 20 74 68 69 73 20 70 65 65 72 20 6f 6e 20 73 74 61 72 74 | ld.be.sent.to.this.peer.on.start |
fb9a0 | 75 70 2e 00 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 38 30 32 2e 31 71 5f 20 73 70 65 63 69 66 69 | up..The.original.802.1q_.specifi |
fb9c0 | 63 61 74 69 6f 6e 20 61 6c 6c 6f 77 73 20 61 20 73 69 6e 67 6c 65 20 56 69 72 74 75 61 6c 20 4c | cation.allows.a.single.Virtual.L |
fb9e0 | 6f 63 61 6c 20 41 72 65 61 20 4e 65 74 77 6f 72 6b 20 28 56 4c 41 4e 29 20 68 65 61 64 65 72 20 | ocal.Area.Network.(VLAN).header. |
fba00 | 74 6f 20 62 65 20 69 6e 73 65 72 74 65 64 20 69 6e 74 6f 20 61 6e 20 45 74 68 65 72 6e 65 74 20 | to.be.inserted.into.an.Ethernet. |
fba20 | 66 72 61 6d 65 2e 20 51 69 6e 51 20 61 6c 6c 6f 77 73 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e | frame..QinQ.allows.multiple.VLAN |
fba40 | 20 74 61 67 73 20 74 6f 20 62 65 20 69 6e 73 65 72 74 65 64 20 69 6e 74 6f 20 61 20 73 69 6e 67 | .tags.to.be.inserted.into.a.sing |
fba60 | 6c 65 20 66 72 61 6d 65 2c 20 61 6e 20 65 73 73 65 6e 74 69 61 6c 20 63 61 70 61 62 69 6c 69 74 | le.frame,.an.essential.capabilit |
fba80 | 79 20 66 6f 72 20 69 6d 70 6c 65 6d 65 6e 74 69 6e 67 20 4d 65 74 72 6f 20 45 74 68 65 72 6e 65 | y.for.implementing.Metro.Etherne |
fbaa0 | 74 20 6e 65 74 77 6f 72 6b 20 74 6f 70 6f 6c 6f 67 69 65 73 2e 20 4a 75 73 74 20 61 73 20 51 69 | t.network.topologies..Just.as.Qi |
fbac0 | 6e 51 20 65 78 74 65 6e 64 73 20 38 30 32 2e 31 51 2c 20 51 69 6e 51 20 69 74 73 65 6c 66 20 69 | nQ.extends.802.1Q,.QinQ.itself.i |
fbae0 | 73 20 65 78 74 65 6e 64 65 64 20 62 79 20 6f 74 68 65 72 20 4d 65 74 72 6f 20 45 74 68 65 72 6e | s.extended.by.other.Metro.Ethern |
fbb00 | 65 74 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 54 68 65 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 | et.protocols..The.outgoing.inter |
fbb20 | 66 61 63 65 20 74 6f 20 70 65 72 66 6f 72 6d 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 | face.to.perform.the.translation. |
fbb40 | 6f 6e 00 54 68 65 20 70 65 65 72 20 6e 61 6d 65 20 6d 75 73 74 20 62 65 20 61 6e 20 61 6c 70 68 | on.The.peer.name.must.be.an.alph |
fbb60 | 61 6e 75 6d 65 72 69 63 20 61 6e 64 20 63 61 6e 20 68 61 76 65 20 68 79 70 65 6e 20 6f 72 20 75 | anumeric.and.can.have.hypen.or.u |
fbb80 | 6e 64 65 72 73 63 6f 72 65 20 61 73 20 73 70 65 63 69 61 6c 20 63 68 61 72 61 63 74 65 72 73 2e | nderscore.as.special.characters. |
fbba0 | 20 49 74 20 69 73 20 70 75 72 65 6c 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 61 6c 2e 00 54 68 65 | .It.is.purely.informational..The |
fbbc0 | 20 70 65 65 72 20 6e 61 6d 65 73 20 52 49 47 48 54 20 61 6e 64 20 4c 45 46 54 20 61 72 65 20 75 | .peer.names.RIGHT.and.LEFT.are.u |
fbbe0 | 73 65 64 20 61 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 61 6c 20 74 65 78 74 2e 00 54 68 65 20 70 | sed.as.informational.text..The.p |
fbc00 | 65 65 72 20 77 69 74 68 20 6c 6f 77 65 72 20 70 72 69 6f 72 69 74 79 20 77 69 6c 6c 20 62 65 63 | eer.with.lower.priority.will.bec |
fbc20 | 6f 6d 65 20 74 68 65 20 6b 65 79 20 73 65 72 76 65 72 20 61 6e 64 20 73 74 61 72 74 20 64 69 73 | ome.the.key.server.and.start.dis |
fbc40 | 74 72 69 62 75 74 69 6e 67 20 53 41 4b 73 2e 00 54 68 65 20 70 69 6e 67 20 63 6f 6d 6d 61 6e 64 | tributing.SAKs..The.ping.command |
fbc60 | 20 69 73 20 75 73 65 64 20 74 6f 20 74 65 73 74 20 77 68 65 74 68 65 72 20 61 20 6e 65 74 77 6f | .is.used.to.test.whether.a.netwo |
fbc80 | 72 6b 20 68 6f 73 74 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 6f 72 20 6e 6f 74 2e 00 54 68 65 | rk.host.is.reachable.or.not..The |
fbca0 | 20 70 6f 70 75 6c 61 72 20 55 6e 69 78 2f 4c 69 6e 75 78 20 60 60 64 69 67 60 60 20 74 6f 6f 6c | .popular.Unix/Linux.``dig``.tool |
fbcc0 | 20 73 65 74 73 20 74 68 65 20 41 44 2d 62 69 74 20 69 6e 20 74 68 65 20 71 75 65 72 79 2e 20 54 | .sets.the.AD-bit.in.the.query..T |
fbce0 | 68 69 73 20 6d 69 67 68 74 20 6c 65 61 64 20 74 6f 20 75 6e 65 78 70 65 63 74 65 64 20 71 75 65 | his.might.lead.to.unexpected.que |
fbd00 | 72 79 20 72 65 73 75 6c 74 73 20 77 68 65 6e 20 74 65 73 74 69 6e 67 2e 20 53 65 74 20 60 60 2b | ry.results.when.testing..Set.``+ |
fbd20 | 6e 6f 61 64 60 60 20 6f 6e 20 74 68 65 20 60 60 64 69 67 60 60 20 63 6f 6d 6d 61 6e 64 20 6c 69 | noad``.on.the.``dig``.command.li |
fbd40 | 6e 65 20 77 68 65 6e 20 74 68 69 73 20 69 73 20 74 68 65 20 63 61 73 65 2e 00 54 68 65 20 70 72 | ne.when.this.is.the.case..The.pr |
fbd60 | 65 2d 73 68 61 72 65 64 20 6b 65 79 20 6d 6f 64 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 | e-shared.key.mode.is.deprecated. |
fbd80 | 61 6e 64 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 66 75 74 75 72 65 20 | and.will.be.removed.from.future. |
fbda0 | 4f 70 65 6e 56 50 4e 20 76 65 72 73 69 6f 6e 73 2c 20 73 6f 20 56 79 4f 53 20 77 69 6c 6c 20 68 | OpenVPN.versions,.so.VyOS.will.h |
fbdc0 | 61 76 65 20 74 6f 20 72 65 6d 6f 76 65 20 73 75 70 70 6f 72 74 20 66 6f 72 20 74 68 61 74 20 6f | ave.to.remove.support.for.that.o |
fbde0 | 70 74 69 6f 6e 20 61 73 20 77 65 6c 6c 2e 20 54 68 65 20 72 65 61 73 6f 6e 20 69 73 20 74 68 61 | ption.as.well..The.reason.is.tha |
fbe00 | 74 20 75 73 69 6e 67 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 73 20 69 73 20 73 69 67 6e 69 | t.using.pre-shared.keys.is.signi |
fbe20 | 66 69 63 61 6e 74 6c 79 20 6c 65 73 73 20 73 65 63 75 72 65 20 74 68 61 6e 20 75 73 69 6e 67 20 | ficantly.less.secure.than.using. |
fbe40 | 54 4c 53 2e 00 54 68 65 20 70 72 65 66 69 78 20 61 6e 64 20 41 53 4e 20 74 68 61 74 20 6f 72 69 | TLS..The.prefix.and.ASN.that.ori |
fbe60 | 67 69 6e 61 74 65 64 20 69 74 20 6d 61 74 63 68 20 61 20 73 69 67 6e 65 64 20 52 4f 41 2e 20 54 | ginated.it.match.a.signed.ROA..T |
fbe80 | 68 65 73 65 20 61 72 65 20 70 72 6f 62 61 62 6c 79 20 74 72 75 73 74 77 6f 72 74 68 79 20 72 6f | hese.are.probably.trustworthy.ro |
fbea0 | 75 74 65 20 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 2e 00 54 68 65 20 70 72 65 66 69 78 20 6f 72 | ute.announcements..The.prefix.or |
fbec0 | 20 70 72 65 66 69 78 20 6c 65 6e 67 74 68 20 61 6e 64 20 41 53 4e 20 74 68 61 74 20 6f 72 69 67 | .prefix.length.and.ASN.that.orig |
fbee0 | 69 6e 61 74 65 64 20 69 74 20 64 6f 65 73 6e 27 74 20 6d 61 74 63 68 20 61 6e 79 20 65 78 69 73 | inated.it.doesn't.match.any.exis |
fbf00 | 74 69 6e 67 20 52 4f 41 2e 20 54 68 69 73 20 63 6f 75 6c 64 20 62 65 20 74 68 65 20 72 65 73 75 | ting.ROA..This.could.be.the.resu |
fbf20 | 6c 74 20 6f 66 20 61 20 70 72 65 66 69 78 20 68 69 6a 61 63 6b 2c 20 6f 72 20 6d 65 72 65 6c 79 | lt.of.a.prefix.hijack,.or.merely |
fbf40 | 20 61 20 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 62 75 74 20 73 68 6f 75 6c 64 20 | .a.misconfiguration,.but.should. |
fbf60 | 70 72 6f 62 61 62 6c 79 20 62 65 20 74 72 65 61 74 65 64 20 61 73 20 75 6e 74 72 75 73 74 77 6f | probably.be.treated.as.untrustwo |
fbf80 | 72 74 68 79 20 72 6f 75 74 65 20 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 2e 00 54 68 65 20 70 72 | rthy.route.announcements..The.pr |
fbfa0 | 69 6d 61 72 79 20 44 48 43 50 20 73 65 72 76 65 72 20 75 73 65 73 20 61 64 64 72 65 73 73 20 60 | imary.DHCP.server.uses.address.` |
fbfc0 | 31 39 32 2e 31 36 38 2e 31 38 39 2e 32 35 32 60 00 54 68 65 20 70 72 69 6d 61 72 79 20 61 6e 64 | 192.168.189.252`.The.primary.and |
fbfe0 | 20 73 65 63 6f 6e 64 61 72 79 20 73 74 61 74 65 6d 65 6e 74 73 20 64 65 74 65 72 6d 69 6e 65 73 | .secondary.statements.determines |
fc000 | 20 77 68 65 74 68 65 72 20 74 68 65 20 73 65 72 76 65 72 20 69 73 20 70 72 69 6d 61 72 79 20 6f | .whether.the.server.is.primary.o |
fc020 | 72 20 73 65 63 6f 6e 64 61 72 79 2e 00 54 68 65 20 70 72 69 6d 61 72 79 20 6f 70 74 69 6f 6e 20 | r.secondary..The.primary.option. |
fc040 | 69 73 20 6f 6e 6c 79 20 76 61 6c 69 64 20 66 6f 72 20 61 63 74 69 76 65 2d 62 61 63 6b 75 70 2c | is.only.valid.for.active-backup, |
fc060 | 20 74 72 61 6e 73 6d 69 74 2d 6c 6f 61 64 2d 62 61 6c 61 6e 63 65 2c 20 61 6e 64 20 61 64 61 70 | .transmit-load-balance,.and.adap |
fc080 | 74 69 76 65 2d 6c 6f 61 64 2d 62 61 6c 61 6e 63 65 20 6d 6f 64 65 2e 00 54 68 65 20 70 72 69 6f | tive-load-balance.mode..The.prio |
fc0a0 | 72 69 74 79 20 6d 75 73 74 20 62 65 20 61 6e 20 69 6e 74 65 67 65 72 20 6e 75 6d 62 65 72 20 66 | rity.must.be.an.integer.number.f |
fc0c0 | 72 6f 6d 20 31 20 74 6f 20 32 35 35 2e 20 48 69 67 68 65 72 20 70 72 69 6f 72 69 74 79 20 76 61 | rom.1.to.255..Higher.priority.va |
fc0e0 | 6c 75 65 20 69 6e 63 72 65 61 73 65 73 20 72 6f 75 74 65 72 27 73 20 70 72 65 63 65 64 65 6e 63 | lue.increases.router's.precedenc |
fc100 | 65 20 69 6e 20 74 68 65 20 6d 61 73 74 65 72 20 65 6c 65 63 74 69 6f 6e 73 2e 00 54 68 65 20 70 | e.in.the.master.elections..The.p |
fc120 | 72 6f 63 65 64 75 72 65 20 74 6f 20 73 70 65 63 69 66 79 20 61 20 3a 61 62 62 72 3a 60 4e 49 53 | rocedure.to.specify.a.:abbr:`NIS |
fc140 | 2b 20 28 4e 65 74 77 6f 72 6b 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 53 65 72 76 69 63 65 20 50 | +.(Network.Information.Service.P |
fc160 | 6c 75 73 29 60 20 64 6f 6d 61 69 6e 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 74 68 65 20 4e | lus)`.domain.is.similar.to.the.N |
fc180 | 49 53 20 64 6f 6d 61 69 6e 20 6f 6e 65 3a 00 54 68 65 20 70 72 6f 6d 70 74 20 69 73 20 61 64 6a | IS.domain.one:.The.prompt.is.adj |
fc1a0 | 75 73 74 65 64 20 74 6f 20 72 65 66 6c 65 63 74 20 74 68 69 73 20 63 68 61 6e 67 65 20 69 6e 20 | usted.to.reflect.this.change.in. |
fc1c0 | 62 6f 74 68 20 63 6f 6e 66 69 67 20 61 6e 64 20 6f 70 2d 6d 6f 64 65 2e 00 54 68 65 20 70 72 6f | both.config.and.op-mode..The.pro |
fc1e0 | 74 6f 63 6f 6c 20 61 6e 64 20 70 6f 72 74 20 77 65 20 77 69 73 68 20 74 6f 20 66 6f 72 77 61 72 | tocol.and.port.we.wish.to.forwar |
fc200 | 64 3b 00 54 68 65 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 75 73 75 61 6c 6c 79 20 64 65 73 63 72 | d;.The.protocol.is.usually.descr |
fc220 | 69 62 65 64 20 69 6e 20 74 65 72 6d 73 20 6f 66 20 61 20 63 6c 69 65 6e 74 2d 73 65 72 76 65 72 | ibed.in.terms.of.a.client-server |
fc240 | 20 6d 6f 64 65 6c 2c 20 62 75 74 20 63 61 6e 20 61 73 20 65 61 73 69 6c 79 20 62 65 20 75 73 65 | .model,.but.can.as.easily.be.use |
fc260 | 64 20 69 6e 20 70 65 65 72 2d 74 6f 2d 70 65 65 72 20 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 20 | d.in.peer-to-peer.relationships. |
fc280 | 77 68 65 72 65 20 62 6f 74 68 20 70 65 65 72 73 20 63 6f 6e 73 69 64 65 72 20 74 68 65 20 6f 74 | where.both.peers.consider.the.ot |
fc2a0 | 68 65 72 20 74 6f 20 62 65 20 61 20 70 6f 74 65 6e 74 69 61 6c 20 74 69 6d 65 20 73 6f 75 72 63 | her.to.be.a.potential.time.sourc |
fc2c0 | 65 2e 20 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 73 65 6e 64 20 61 6e 64 20 72 65 63 65 | e..Implementations.send.and.rece |
fc2e0 | 69 76 65 20 74 69 6d 65 73 74 61 6d 70 73 20 75 73 69 6e 67 20 3a 61 62 62 72 3a 60 55 44 50 20 | ive.timestamps.using.:abbr:`UDP. |
fc300 | 28 55 73 65 72 20 44 61 74 61 67 72 61 6d 20 50 72 6f 74 6f 63 6f 6c 29 60 20 6f 6e 20 70 6f 72 | (User.Datagram.Protocol)`.on.por |
fc320 | 74 20 6e 75 6d 62 65 72 20 31 32 33 2e 00 54 68 65 20 70 72 6f 74 6f 63 6f 6c 20 6f 76 65 72 68 | t.number.123..The.protocol.overh |
fc340 | 65 61 64 20 6f 66 20 4c 32 54 50 76 33 20 69 73 20 61 6c 73 6f 20 73 69 67 6e 69 66 69 63 61 6e | ead.of.L2TPv3.is.also.significan |
fc360 | 74 6c 79 20 62 69 67 67 65 72 20 74 68 61 6e 20 4d 50 4c 53 2e 00 54 68 65 20 70 72 6f 78 79 20 | tly.bigger.than.MPLS..The.proxy. |
fc380 | 73 65 72 76 69 63 65 20 69 6e 20 56 79 4f 53 20 69 73 20 62 61 73 65 64 20 6f 6e 20 53 71 75 69 | service.in.VyOS.is.based.on.Squi |
fc3a0 | 64 5f 20 61 6e 64 20 73 6f 6d 65 20 72 65 6c 61 74 65 64 20 6d 6f 64 75 6c 65 73 2e 00 54 68 65 | d_.and.some.related.modules..The |
fc3c0 | 20 70 75 62 6c 69 63 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 | .public.IP.address.of.the.local. |
fc3e0 | 73 69 64 65 20 6f 66 20 74 68 65 20 56 50 4e 20 77 69 6c 6c 20 62 65 20 31 39 38 2e 35 31 2e 31 | side.of.the.VPN.will.be.198.51.1 |
fc400 | 30 30 2e 31 30 2e 00 54 68 65 20 70 75 62 6c 69 63 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 | 00.10..The.public.IP.address.of. |
fc420 | 74 68 65 20 72 65 6d 6f 74 65 20 73 69 64 65 20 6f 66 20 74 68 65 20 56 50 4e 20 77 69 6c 6c 20 | the.remote.side.of.the.VPN.will. |
fc440 | 62 65 20 32 30 33 2e 30 2e 31 31 33 2e 31 31 2e 00 54 68 65 20 72 61 74 65 2d 6c 69 6d 69 74 20 | be.203.0.113.11..The.rate-limit. |
fc460 | 69 73 20 73 65 74 20 69 6e 20 6b 62 69 74 2f 73 65 63 2e 00 54 68 65 20 72 65 67 75 6c 61 72 20 | is.set.in.kbit/sec..The.regular. |
fc480 | 65 78 70 72 65 73 73 69 6f 6e 20 6d 61 74 63 68 65 73 20 69 66 20 61 6e 64 20 6f 6e 6c 79 20 69 | expression.matches.if.and.only.i |
fc4a0 | 66 20 74 68 65 20 65 6e 74 69 72 65 20 73 74 72 69 6e 67 20 6d 61 74 63 68 65 73 20 74 68 65 20 | f.the.entire.string.matches.the. |
fc4c0 | 70 61 74 74 65 72 6e 2e 00 54 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 60 74 6f 2d 77 67 30 | pattern..The.remote.peer.`to-wg0 |
fc4e0 | 32 60 20 75 73 65 73 20 58 4d 72 6c 50 79 6b 61 78 68 64 41 41 69 53 6a 68 74 50 6c 76 69 33 30 | 2`.uses.XMrlPykaxhdAAiSjhtPlvi30 |
fc500 | 4e 56 6b 76 4c 51 6c 69 51 75 4b 50 37 41 49 37 43 79 49 3d 20 61 73 20 69 74 73 20 70 75 62 6c | NVkvLQliQuKP7AI7CyI=.as.its.publ |
fc520 | 69 63 20 6b 65 79 20 70 6f 72 74 69 6f 6e 00 54 68 65 20 72 65 6d 6f 74 65 20 73 69 74 65 20 77 | ic.key.portion.The.remote.site.w |
fc540 | 69 6c 6c 20 68 61 76 65 20 61 20 73 75 62 6e 65 74 20 6f 66 20 31 30 2e 31 2e 30 2e 30 2f 31 36 | ill.have.a.subnet.of.10.1.0.0/16 |
fc560 | 2e 00 54 68 65 20 72 65 6d 6f 74 65 20 75 73 65 72 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 6f | ..The.remote.user.will.use.the.o |
fc580 | 70 65 6e 63 6f 6e 6e 65 63 74 20 63 6c 69 65 6e 74 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 | penconnect.client.to.connect.to. |
fc5a0 | 74 68 65 20 72 6f 75 74 65 72 20 61 6e 64 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 61 6e 20 49 | the.router.and.will.receive.an.I |
fc5c0 | 50 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 61 20 56 50 4e 20 70 6f 6f 6c 2c 20 61 6c 6c 6f 77 | P.address.from.a.VPN.pool,.allow |
fc5e0 | 69 6e 67 20 66 75 6c 6c 20 61 63 63 65 73 73 20 74 6f 20 74 68 65 20 6e 65 74 77 6f 72 6b 2e 00 | ing.full.access.to.the.network.. |
fc600 | 54 68 65 20 72 65 71 75 65 73 74 6f 72 20 6e 65 74 6d 61 73 6b 20 66 6f 72 20 77 68 69 63 68 20 | The.requestor.netmask.for.which. |
fc620 | 74 68 65 20 72 65 71 75 65 73 74 6f 72 20 49 50 20 41 64 64 72 65 73 73 20 73 68 6f 75 6c 64 20 | the.requestor.IP.Address.should. |
fc640 | 62 65 20 75 73 65 64 20 61 73 20 74 68 65 20 45 44 4e 53 20 43 6c 69 65 6e 74 20 53 75 62 6e 65 | be.used.as.the.EDNS.Client.Subne |
fc660 | 74 20 66 6f 72 20 6f 75 74 67 6f 69 6e 67 20 71 75 65 72 69 65 73 2e 00 54 68 65 20 72 65 71 75 | t.for.outgoing.queries..The.requ |
fc680 | 69 72 65 64 20 63 6f 6e 66 69 67 20 66 69 6c 65 20 6d 61 79 20 6c 6f 6f 6b 20 6c 69 6b 65 20 74 | ired.config.file.may.look.like.t |
fc6a0 | 68 69 73 3a 00 54 68 65 20 72 65 71 75 69 72 65 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | his:.The.required.configuration. |
fc6c0 | 63 61 6e 20 62 65 20 62 72 6f 6b 65 6e 20 64 6f 77 6e 20 69 6e 74 6f 20 34 20 6d 61 6a 6f 72 20 | can.be.broken.down.into.4.major. |
fc6e0 | 70 69 65 63 65 73 3a 00 54 68 65 20 72 65 73 75 6c 74 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 | pieces:.The.resulting.configurat |
fc700 | 69 6f 6e 20 77 69 6c 6c 20 6c 6f 6f 6b 20 6c 69 6b 65 3a 00 54 68 65 20 72 6f 6f 74 20 63 61 75 | ion.will.look.like:.The.root.cau |
fc720 | 73 65 20 6f 66 20 74 68 65 20 70 72 6f 62 6c 65 6d 20 69 73 20 74 68 61 74 20 66 6f 72 20 56 54 | se.of.the.problem.is.that.for.VT |
fc740 | 49 20 74 75 6e 6e 65 6c 73 20 74 6f 20 77 6f 72 6b 2c 20 74 68 65 69 72 20 74 72 61 66 66 69 63 | I.tunnels.to.work,.their.traffic |
fc760 | 20 73 65 6c 65 63 74 6f 72 73 20 68 61 76 65 20 74 6f 20 62 65 20 73 65 74 20 74 6f 20 30 2e 30 | .selectors.have.to.be.set.to.0.0 |
fc780 | 2e 30 2e 30 2f 30 20 66 6f 72 20 74 72 61 66 66 69 63 20 74 6f 20 6d 61 74 63 68 20 74 68 65 20 | .0.0/0.for.traffic.to.match.the. |
fc7a0 | 74 75 6e 6e 65 6c 2c 20 65 76 65 6e 20 74 68 6f 75 67 68 20 61 63 74 75 61 6c 20 72 6f 75 74 69 | tunnel,.even.though.actual.routi |
fc7c0 | 6e 67 20 64 65 63 69 73 69 6f 6e 20 69 73 20 6d 61 64 65 20 61 63 63 6f 72 64 69 6e 67 20 74 6f | ng.decision.is.made.according.to |
fc7e0 | 20 6e 65 74 66 69 6c 74 65 72 20 6d 61 72 6b 73 2e 20 55 6e 6c 65 73 73 20 72 6f 75 74 65 20 69 | .netfilter.marks..Unless.route.i |
fc800 | 6e 73 65 72 74 69 6f 6e 20 69 73 20 64 69 73 61 62 6c 65 64 20 65 6e 74 69 72 65 6c 79 2c 20 53 | nsertion.is.disabled.entirely,.S |
fc820 | 74 72 6f 6e 67 53 57 41 4e 20 74 68 75 73 20 6d 69 73 74 61 6b 65 6e 6c 79 20 69 6e 73 65 72 74 | trongSWAN.thus.mistakenly.insert |
fc840 | 73 20 61 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 74 68 72 6f 75 67 68 20 74 68 65 20 56 54 | s.a.default.route.through.the.VT |
fc860 | 49 20 70 65 65 72 20 61 64 64 72 65 73 73 2c 20 77 68 69 63 68 20 6d 61 6b 65 73 20 61 6c 6c 20 | I.peer.address,.which.makes.all. |
fc880 | 74 72 61 66 66 69 63 20 72 6f 75 74 65 64 20 74 6f 20 6e 6f 77 68 65 72 65 2e 00 54 68 65 20 72 | traffic.routed.to.nowhere..The.r |
fc8a0 | 6f 75 6e 64 2d 72 6f 62 69 6e 20 70 6f 6c 69 63 79 20 69 73 20 61 20 63 6c 61 73 73 66 75 6c 20 | ound-robin.policy.is.a.classful. |
fc8c0 | 73 63 68 65 64 75 6c 65 72 20 74 68 61 74 20 64 69 76 69 64 65 73 20 74 72 61 66 66 69 63 20 69 | scheduler.that.divides.traffic.i |
fc8e0 | 6e 20 64 69 66 66 65 72 65 6e 74 20 63 6c 61 73 73 65 73 5f 20 79 6f 75 20 63 61 6e 20 63 6f 6e | n.different.classes_.you.can.con |
fc900 | 66 69 67 75 72 65 20 28 75 70 20 74 6f 20 34 30 39 36 29 2e 20 59 6f 75 20 63 61 6e 20 65 6d 62 | figure.(up.to.4096)..You.can.emb |
fc920 | 65 64 5f 20 61 20 6e 65 77 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 65 61 63 68 20 6f 66 20 74 68 | ed_.a.new.policy.into.each.of.th |
fc940 | 6f 73 65 20 63 6c 61 73 73 65 73 20 28 64 65 66 61 75 6c 74 20 69 6e 63 6c 75 64 65 64 29 2e 00 | ose.classes.(default.included).. |
fc960 | 54 68 65 20 72 6f 75 74 65 20 73 65 6c 65 63 74 69 6f 6e 20 70 72 6f 63 65 73 73 20 75 73 65 64 | The.route.selection.process.used |
fc980 | 20 62 79 20 46 52 52 27 73 20 42 47 50 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 75 73 65 | .by.FRR's.BGP.implementation.use |
fc9a0 | 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 64 65 63 69 73 69 6f 6e 20 63 72 69 74 65 72 69 | s.the.following.decision.criteri |
fc9c0 | 6f 6e 2c 20 73 74 61 72 74 69 6e 67 20 61 74 20 74 68 65 20 74 6f 70 20 6f 66 20 74 68 65 20 6c | on,.starting.at.the.top.of.the.l |
fc9e0 | 69 73 74 20 61 6e 64 20 67 6f 69 6e 67 20 74 6f 77 61 72 64 73 20 74 68 65 20 62 6f 74 74 6f 6d | ist.and.going.towards.the.bottom |
fca00 | 20 75 6e 74 69 6c 20 6f 6e 65 20 6f 66 20 74 68 65 20 66 61 63 74 6f 72 73 20 63 61 6e 20 62 65 | .until.one.of.the.factors.can.be |
fca20 | 20 75 73 65 64 2e 00 54 68 65 20 72 6f 75 74 65 20 77 69 74 68 20 74 68 65 20 73 68 6f 72 74 65 | .used..The.route.with.the.shorte |
fca40 | 73 74 20 63 6c 75 73 74 65 72 2d 6c 69 73 74 20 6c 65 6e 67 74 68 20 69 73 20 75 73 65 64 2e 20 | st.cluster-list.length.is.used.. |
fca60 | 54 68 65 20 63 6c 75 73 74 65 72 2d 6c 69 73 74 20 72 65 66 6c 65 63 74 73 20 74 68 65 20 69 42 | The.cluster-list.reflects.the.iB |
fca80 | 47 50 20 72 65 66 6c 65 63 74 69 6f 6e 20 70 61 74 68 20 74 68 65 20 72 6f 75 74 65 20 68 61 73 | GP.reflection.path.the.route.has |
fcaa0 | 20 74 61 6b 65 6e 2e 00 54 68 65 20 72 6f 75 74 65 72 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 | .taken..The.router.automatically |
fcac0 | 20 75 70 64 61 74 65 73 20 6c 69 6e 6b 2d 73 74 61 74 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | .updates.link-state.information. |
fcae0 | 77 69 74 68 20 69 74 73 20 6e 65 69 67 68 62 6f 72 73 2e 20 4f 6e 6c 79 20 61 6e 20 6f 62 73 6f | with.its.neighbors..Only.an.obso |
fcb00 | 6c 65 74 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 75 70 64 61 74 65 64 20 77 68 69 63 | lete.information.is.updated.whic |
fcb20 | 68 20 61 67 65 20 68 61 73 20 65 78 63 65 65 64 65 64 20 61 20 73 70 65 63 69 66 69 63 20 74 68 | h.age.has.exceeded.a.specific.th |
fcb40 | 72 65 73 68 6f 6c 64 2e 20 54 68 69 73 20 70 61 72 61 6d 65 74 65 72 20 63 68 61 6e 67 65 73 20 | reshold..This.parameter.changes. |
fcb60 | 61 20 74 68 72 65 73 68 6f 6c 64 20 76 61 6c 75 65 2c 20 77 68 69 63 68 20 62 79 20 64 65 66 61 | a.threshold.value,.which.by.defa |
fcb80 | 75 6c 74 20 69 73 20 31 38 30 30 20 73 65 63 6f 6e 64 73 20 28 68 61 6c 66 20 61 6e 20 68 6f 75 | ult.is.1800.seconds.(half.an.hou |
fcba0 | 72 29 2e 20 54 68 65 20 76 61 6c 75 65 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 | r)..The.value.is.applied.to.the. |
fcbc0 | 77 68 6f 6c 65 20 4f 53 50 46 20 72 6f 75 74 65 72 2e 20 54 68 65 20 74 69 6d 65 72 20 72 61 6e | whole.OSPF.router..The.timer.ran |
fcbe0 | 67 65 20 69 73 20 31 30 20 74 6f 20 31 38 30 30 2e 00 54 68 65 20 72 6f 75 74 65 72 20 73 68 6f | ge.is.10.to.1800..The.router.sho |
fcc00 | 75 6c 64 20 64 69 73 63 61 72 64 20 44 48 43 50 20 70 61 63 6b 61 67 65 73 20 61 6c 72 65 61 64 | uld.discard.DHCP.packages.alread |
fcc20 | 79 20 63 6f 6e 74 61 69 6e 69 6e 67 20 72 65 6c 61 79 20 61 67 65 6e 74 20 69 6e 66 6f 72 6d 61 | y.containing.relay.agent.informa |
fcc40 | 74 69 6f 6e 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 6f 6e 6c 79 20 72 65 71 75 65 73 74 | tion.to.ensure.that.only.request |
fcc60 | 73 20 66 72 6f 6d 20 44 48 43 50 20 63 6c 69 65 6e 74 73 20 61 72 65 20 66 6f 72 77 61 72 64 65 | s.from.DHCP.clients.are.forwarde |
fcc80 | 64 2e 00 54 68 65 20 73 46 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 62 61 73 65 64 20 6f 6e | d..The.sFlow.accounting.based.on |
fcca0 | 20 68 73 66 6c 6f 77 64 20 68 74 74 70 73 3a 2f 2f 73 66 6c 6f 77 2e 6e 65 74 2f 00 54 68 65 20 | .hsflowd.https://sflow.net/.The. |
fccc0 | 73 61 6d 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 61 70 70 6c 79 | same.configuration.options.apply |
fcce0 | 20 77 68 65 6e 20 49 64 65 6e 74 69 74 79 20 62 61 73 65 64 20 63 6f 6e 66 69 67 20 69 73 20 63 | .when.Identity.based.config.is.c |
fcd00 | 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 67 72 6f 75 70 20 6d 6f 64 65 20 65 78 63 65 70 74 20 74 | onfigured.in.group.mode.except.t |
fcd20 | 68 61 74 20 67 72 6f 75 70 20 6d 6f 64 65 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 | hat.group.mode.can.only.be.used. |
fcd40 | 77 69 74 68 20 52 41 44 49 55 53 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 00 54 68 65 20 | with.RADIUS.authentication..The. |
fcd60 | 73 63 68 65 6d 65 20 61 62 6f 76 65 20 64 6f 65 73 6e 27 74 20 77 6f 72 6b 20 77 68 65 6e 20 6f | scheme.above.doesn't.work.when.o |
fcd80 | 6e 65 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 73 20 68 61 73 20 61 20 64 79 6e 61 6d 69 63 20 | ne.of.the.routers.has.a.dynamic. |
fcda0 | 65 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 20 74 68 6f 75 67 68 2e 20 54 68 65 20 63 6c 61 | external.address.though..The.cla |
fcdc0 | 73 73 69 63 20 77 6f 72 6b 61 72 6f 75 6e 64 20 66 6f 72 20 74 68 69 73 20 69 73 20 74 6f 20 73 | ssic.workaround.for.this.is.to.s |
fcde0 | 65 74 75 70 20 61 6e 20 61 64 64 72 65 73 73 20 6f 6e 20 61 20 6c 6f 6f 70 62 61 63 6b 20 69 6e | etup.an.address.on.a.loopback.in |
fce00 | 74 65 72 66 61 63 65 20 61 6e 64 20 75 73 65 20 69 74 20 61 73 20 61 20 73 6f 75 72 63 65 20 61 | terface.and.use.it.as.a.source.a |
fce20 | 64 64 72 65 73 73 20 66 6f 72 20 74 68 65 20 47 52 45 20 74 75 6e 6e 65 6c 2c 20 74 68 65 6e 20 | ddress.for.the.GRE.tunnel,.then. |
fce40 | 73 65 74 75 70 20 61 6e 20 49 50 73 65 63 20 70 6f 6c 69 63 79 20 74 6f 20 6d 61 74 63 68 20 74 | setup.an.IPsec.policy.to.match.t |
fce60 | 68 6f 73 65 20 6c 6f 6f 70 62 61 63 6b 20 61 64 64 72 65 73 73 65 73 2e 00 54 68 65 20 73 65 61 | hose.loopback.addresses..The.sea |
fce80 | 72 63 68 20 66 69 6c 74 65 72 20 63 61 6e 20 63 6f 6e 74 61 69 6e 20 75 70 20 74 6f 20 31 35 20 | rch.filter.can.contain.up.to.15. |
fcea0 | 6f 63 63 75 72 72 65 6e 63 65 73 20 6f 66 20 25 73 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 | occurrences.of.%s.which.will.be. |
fcec0 | 72 65 70 6c 61 63 65 64 20 62 79 20 74 68 65 20 75 73 65 72 6e 61 6d 65 2c 20 61 73 20 69 6e 20 | replaced.by.the.username,.as.in. |
fcee0 | 22 75 69 64 3d 25 73 22 20 66 6f 72 20 3a 72 66 63 3a 60 32 30 33 37 60 20 64 69 72 65 63 74 6f | "uid=%s".for.:rfc:`2037`.directo |
fcf00 | 72 69 65 73 2e 20 46 6f 72 20 61 20 64 65 74 61 69 6c 65 64 20 64 65 73 63 72 69 70 74 69 6f 6e | ries..For.a.detailed.description |
fcf20 | 20 6f 66 20 4c 44 41 50 20 73 65 61 72 63 68 20 66 69 6c 74 65 72 20 73 79 6e 74 61 78 20 73 65 | .of.LDAP.search.filter.syntax.se |
fcf40 | 65 20 3a 72 66 63 3a 60 32 32 35 34 60 2e 00 54 68 65 20 73 65 63 6f 6e 64 61 72 79 20 44 48 43 | e.:rfc:`2254`..The.secondary.DHC |
fcf60 | 50 20 73 65 72 76 65 72 20 75 73 65 73 20 61 64 64 72 65 73 73 20 60 31 39 32 2e 31 36 38 2e 31 | P.server.uses.address.`192.168.1 |
fcf80 | 38 39 2e 32 35 33 60 00 54 68 65 20 73 65 63 75 72 69 74 79 20 61 70 70 72 6f 61 63 68 20 69 6e | 89.253`.The.security.approach.in |
fcfa0 | 20 53 4e 4d 50 76 33 20 74 61 72 67 65 74 73 3a 00 54 68 65 20 73 65 71 75 65 6e 63 65 20 60 60 | .SNMPv3.targets:.The.sequence.`` |
fcfc0 | 5e 45 63 3f 60 60 20 74 72 61 6e 73 6c 61 74 65 73 20 74 6f 3a 20 60 60 43 74 72 6c 2b 45 20 63 | ^Ec?``.translates.to:.``Ctrl+E.c |
fcfe0 | 20 3f 60 60 2e 20 54 6f 20 71 75 69 74 20 74 68 65 20 73 65 73 73 69 6f 6e 20 75 73 65 3a 20 60 | .?``..To.quit.the.session.use:.` |
fd000 | 60 43 74 72 6c 2b 45 20 63 20 2e 60 60 00 54 68 65 20 73 65 74 75 70 20 69 73 20 74 68 69 73 3a | `Ctrl+E.c..``.The.setup.is.this: |
fd020 | 20 4c 65 61 66 32 20 2d 20 53 70 69 6e 65 31 20 2d 20 4c 65 61 66 33 00 54 68 65 20 73 69 7a 65 | .Leaf2.-.Spine1.-.Leaf3.The.size |
fd040 | 20 6f 66 20 74 68 65 20 6f 6e 2d 64 69 73 6b 20 50 72 6f 78 79 20 63 61 63 68 65 20 69 73 20 75 | .of.the.on-disk.Proxy.cache.is.u |
fd060 | 73 65 72 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 2e 20 54 68 65 20 50 72 6f 78 69 65 73 20 64 65 | ser.configurable..The.Proxies.de |
fd080 | 66 61 75 6c 74 20 63 61 63 68 65 2d 73 69 7a 65 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 74 | fault.cache-size.is.configured.t |
fd0a0 | 6f 20 31 30 30 20 4d 42 2e 00 54 68 65 20 73 70 65 65 64 20 28 62 61 75 64 72 61 74 65 29 20 6f | o.100.MB..The.speed.(baudrate).o |
fd0c0 | 66 20 74 68 65 20 63 6f 6e 73 6f 6c 65 20 64 65 76 69 63 65 2e 20 53 75 70 70 6f 72 74 65 64 20 | f.the.console.device..Supported. |
fd0e0 | 76 61 6c 75 65 73 20 61 72 65 3a 00 54 68 65 20 73 74 61 6e 64 61 72 64 20 77 61 73 20 64 65 76 | values.are:.The.standard.was.dev |
fd100 | 65 6c 6f 70 65 64 20 62 79 20 49 45 45 45 20 38 30 32 2e 31 2c 20 61 20 77 6f 72 6b 69 6e 67 20 | eloped.by.IEEE.802.1,.a.working. |
fd120 | 67 72 6f 75 70 20 6f 66 20 74 68 65 20 49 45 45 45 20 38 30 32 20 73 74 61 6e 64 61 72 64 73 20 | group.of.the.IEEE.802.standards. |
fd140 | 63 6f 6d 6d 69 74 74 65 65 2c 20 61 6e 64 20 63 6f 6e 74 69 6e 75 65 73 20 74 6f 20 62 65 20 61 | committee,.and.continues.to.be.a |
fd160 | 63 74 69 76 65 6c 79 20 72 65 76 69 73 65 64 2e 20 4f 6e 65 20 6f 66 20 74 68 65 20 6e 6f 74 61 | ctively.revised..One.of.the.nota |
fd180 | 62 6c 65 20 72 65 76 69 73 69 6f 6e 73 20 69 73 20 38 30 32 2e 31 51 2d 32 30 31 34 20 77 68 69 | ble.revisions.is.802.1Q-2014.whi |
fd1a0 | 63 68 20 69 6e 63 6f 72 70 6f 72 61 74 65 64 20 49 45 45 45 20 38 30 32 2e 31 61 71 20 28 53 68 | ch.incorporated.IEEE.802.1aq.(Sh |
fd1c0 | 6f 72 74 65 73 74 20 50 61 74 68 20 42 72 69 64 67 69 6e 67 29 20 61 6e 64 20 6d 75 63 68 20 6f | ortest.Path.Bridging).and.much.o |
fd1e0 | 66 20 74 68 65 20 49 45 45 45 20 38 30 32 2e 31 64 20 73 74 61 6e 64 61 72 64 2e 00 54 68 65 20 | f.the.IEEE.802.1d.standard..The. |
fd200 | 73 79 73 74 65 6d 20 4c 43 44 20 3a 61 62 62 72 3a 60 4c 43 44 20 28 4c 69 71 75 69 64 2d 63 72 | system.LCD.:abbr:`LCD.(Liquid-cr |
fd220 | 79 73 74 61 6c 20 64 69 73 70 6c 61 79 29 60 20 6f 70 74 69 6f 6e 20 69 73 20 66 6f 72 20 75 73 | ystal.display)`.option.is.for.us |
fd240 | 65 72 73 20 72 75 6e 6e 69 6e 67 20 56 79 4f 53 20 6f 6e 20 68 61 72 64 77 61 72 65 20 74 68 61 | ers.running.VyOS.on.hardware.tha |
fd260 | 74 20 66 65 61 74 75 72 65 73 20 61 6e 20 4c 43 44 20 64 69 73 70 6c 61 79 2e 20 54 68 69 73 20 | t.features.an.LCD.display..This. |
fd280 | 69 73 20 74 79 70 69 63 61 6c 6c 79 20 61 20 73 6d 61 6c 6c 20 64 69 73 70 6c 61 79 20 62 75 69 | is.typically.a.small.display.bui |
fd2a0 | 6c 74 20 69 6e 20 61 6e 20 31 39 20 69 6e 63 68 20 72 61 63 6b 2d 6d 6f 75 6e 74 61 62 6c 65 20 | lt.in.an.19.inch.rack-mountable. |
fd2c0 | 61 70 70 6c 69 61 6e 63 65 2e 20 54 68 6f 73 65 20 64 69 73 70 6c 61 79 73 20 61 72 65 20 75 73 | appliance..Those.displays.are.us |
fd2e0 | 65 64 20 74 6f 20 73 68 6f 77 20 72 75 6e 74 69 6d 65 20 64 61 74 61 2e 00 54 68 65 20 73 79 73 | ed.to.show.runtime.data..The.sys |
fd300 | 74 65 6d 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 61 74 74 65 6d 70 74 20 64 6f 6d | tem.is.configured.to.attempt.dom |
fd320 | 61 69 6e 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 69 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 | ain.completion.in.the.following. |
fd340 | 6f 72 64 65 72 3a 20 76 79 6f 73 2e 69 6f 20 28 66 69 72 73 74 29 2c 20 76 79 6f 73 2e 6e 65 74 | order:.vyos.io.(first),.vyos.net |
fd360 | 20 28 73 65 63 6f 6e 64 29 20 61 6e 64 20 76 79 6f 73 2e 6e 65 74 77 6f 72 6b 20 28 6c 61 73 74 | .(second).and.vyos.network.(last |
fd380 | 29 3a 00 54 68 65 20 74 61 62 6c 65 20 63 6f 6e 73 69 73 74 73 20 6f 66 20 66 6f 6c 6c 6f 77 69 | ):.The.table.consists.of.followi |
fd3a0 | 6e 67 20 64 61 74 61 3a 00 54 68 65 20 74 61 73 6b 20 73 63 68 65 64 75 6c 65 72 20 61 6c 6c 6f | ng.data:.The.task.scheduler.allo |
fd3c0 | 77 73 20 79 6f 75 20 74 6f 20 65 78 65 63 75 74 65 20 74 61 73 6b 73 20 6f 6e 20 61 20 67 69 76 | ws.you.to.execute.tasks.on.a.giv |
fd3e0 | 65 6e 20 73 63 68 65 64 75 6c 65 2e 20 49 74 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 55 4e 49 | en.schedule..It.makes.use.of.UNI |
fd400 | 58 20 63 72 6f 6e 5f 2e 00 54 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 | X.cron_..The.translation.address |
fd420 | 20 6d 75 73 74 20 62 65 20 73 65 74 20 74 6f 20 6f 6e 65 20 6f 66 20 74 68 65 20 61 76 61 69 6c | .must.be.set.to.one.of.the.avail |
fd440 | 61 62 6c 65 20 61 64 64 72 65 73 73 65 73 20 6f 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 | able.addresses.on.the.configured |
fd460 | 20 60 6f 75 74 62 6f 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 60 20 6f 72 20 69 74 20 6d 75 73 74 | .`outbound-interface`.or.it.must |
fd480 | 20 62 65 20 73 65 74 20 74 6f 20 60 6d 61 73 71 75 65 72 61 64 65 60 20 77 68 69 63 68 20 77 69 | .be.set.to.`masquerade`.which.wi |
fd4a0 | 6c 6c 20 75 73 65 20 74 68 65 20 70 72 69 6d 61 72 79 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 | ll.use.the.primary.IP.address.of |
fd4c0 | 20 74 68 65 20 60 6f 75 74 62 6f 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 60 20 61 73 20 69 74 73 | .the.`outbound-interface`.as.its |
fd4e0 | 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 00 54 68 65 20 74 75 6e 6e 65 6c | .translation.address..The.tunnel |
fd500 | 20 77 69 6c 6c 20 75 73 65 20 31 30 2e 32 35 35 2e 31 2e 31 20 66 6f 72 20 74 68 65 20 6c 6f 63 | .will.use.10.255.1.1.for.the.loc |
fd520 | 61 6c 20 49 50 20 61 6e 64 20 31 30 2e 32 35 35 2e 31 2e 32 20 66 6f 72 20 74 68 65 20 72 65 6d | al.IP.and.10.255.1.2.for.the.rem |
fd540 | 6f 74 65 2e 00 54 68 65 20 74 79 70 65 20 63 61 6e 20 62 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 | ote..The.type.can.be.the.followi |
fd560 | 6e 67 3a 20 61 73 62 72 2d 73 75 6d 6d 61 72 79 2c 20 65 78 74 65 72 6e 61 6c 2c 20 6e 65 74 77 | ng:.asbr-summary,.external,.netw |
fd580 | 6f 72 6b 2c 20 6e 73 73 61 2d 65 78 74 65 72 6e 61 6c 2c 20 6f 70 61 71 75 65 2d 61 72 65 61 2c | ork,.nssa-external,.opaque-area, |
fd5a0 | 20 6f 70 61 71 75 65 2d 61 73 2c 20 6f 70 61 71 75 65 2d 6c 69 6e 6b 2c 20 72 6f 75 74 65 72 2c | .opaque-as,.opaque-link,.router, |
fd5c0 | 20 73 75 6d 6d 61 72 79 2e 00 54 68 65 20 75 6c 74 69 6d 61 74 65 20 67 6f 61 6c 20 6f 66 20 63 | .summary..The.ultimate.goal.of.c |
fd5e0 | 6c 61 73 73 69 66 79 69 6e 67 20 74 72 61 66 66 69 63 20 69 73 20 74 6f 20 67 69 76 65 20 65 61 | lassifying.traffic.is.to.give.ea |
fd600 | 63 68 20 63 6c 61 73 73 20 61 20 64 69 66 66 65 72 65 6e 74 20 74 72 65 61 74 6d 65 6e 74 2e 00 | ch.class.a.different.treatment.. |
fd620 | 54 68 65 20 75 73 65 20 6f 66 20 49 50 6f 45 20 61 64 64 72 65 73 73 65 73 20 74 68 65 20 64 69 | The.use.of.IPoE.addresses.the.di |
fd640 | 73 61 64 76 61 6e 74 61 67 65 20 74 68 61 74 20 50 50 50 20 69 73 20 75 6e 73 75 69 74 65 64 20 | sadvantage.that.PPP.is.unsuited. |
fd660 | 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 64 65 6c 69 76 65 72 79 20 74 6f 20 6d 75 6c 74 69 70 | for.multicast.delivery.to.multip |
fd680 | 6c 65 20 75 73 65 72 73 2e 20 54 79 70 69 63 61 6c 6c 79 2c 20 49 50 6f 45 20 75 73 65 73 20 44 | le.users..Typically,.IPoE.uses.D |
fd6a0 | 79 6e 61 6d 69 63 20 48 6f 73 74 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 50 72 6f 74 6f 63 | ynamic.Host.Configuration.Protoc |
fd6c0 | 6f 6c 20 61 6e 64 20 45 78 74 65 6e 73 69 62 6c 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | ol.and.Extensible.Authentication |
fd6e0 | 20 50 72 6f 74 6f 63 6f 6c 20 74 6f 20 70 72 6f 76 69 64 65 20 74 68 65 20 73 61 6d 65 20 66 75 | .Protocol.to.provide.the.same.fu |
fd700 | 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 73 20 50 50 50 6f 45 2c 20 62 75 74 20 69 6e 20 61 20 6c | nctionality.as.PPPoE,.but.in.a.l |
fd720 | 65 73 73 20 72 6f 62 75 73 74 20 6d 61 6e 6e 65 72 2e 00 54 68 65 20 76 61 6c 75 65 20 6f 66 20 | ess.robust.manner..The.value.of. |
fd740 | 74 68 65 20 61 74 74 72 69 62 75 74 65 20 60 60 4e 41 53 2d 50 6f 72 74 2d 49 64 60 60 20 6d 75 | the.attribute.``NAS-Port-Id``.mu |
fd760 | 73 74 20 62 65 20 6c 65 73 73 20 74 68 61 6e 20 31 36 20 63 68 61 72 61 63 74 65 72 73 2c 20 6f | st.be.less.than.16.characters,.o |
fd780 | 74 68 65 72 77 69 73 65 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 6f 6e 27 74 20 62 65 20 | therwise.the.interface.won't.be. |
fd7a0 | 72 65 6e 61 6d 65 64 2e 00 54 68 65 20 76 65 6e 64 6f 72 2d 63 6c 61 73 73 2d 69 64 20 6f 70 74 | renamed..The.vendor-class-id.opt |
fd7c0 | 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 72 65 71 75 65 73 74 20 61 20 73 70 65 | ion.can.be.used.to.request.a.spe |
fd7e0 | 63 69 66 69 63 20 63 6c 61 73 73 20 6f 66 20 76 65 6e 64 6f 72 20 6f 70 74 69 6f 6e 73 20 66 72 | cific.class.of.vendor.options.fr |
fd800 | 6f 6d 20 74 68 65 20 73 65 72 76 65 72 2e 00 54 68 65 20 76 65 74 68 20 64 65 76 69 63 65 73 20 | om.the.server..The.veth.devices. |
fd820 | 61 72 65 20 76 69 72 74 75 61 6c 20 45 74 68 65 72 6e 65 74 20 64 65 76 69 63 65 73 2e 20 54 68 | are.virtual.Ethernet.devices..Th |
fd840 | 65 79 20 63 61 6e 20 61 63 74 20 61 73 20 74 75 6e 6e 65 6c 73 20 62 65 74 77 65 65 6e 20 6e 65 | ey.can.act.as.tunnels.between.ne |
fd860 | 74 77 6f 72 6b 20 6e 61 6d 65 73 70 61 63 65 73 20 74 6f 20 63 72 65 61 74 65 20 61 20 62 72 69 | twork.namespaces.to.create.a.bri |
fd880 | 64 67 65 20 74 6f 20 61 20 70 68 79 73 69 63 61 6c 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 | dge.to.a.physical.network.device |
fd8a0 | 20 69 6e 20 61 6e 6f 74 68 65 72 20 6e 61 6d 65 73 70 61 63 65 20 6f 72 20 56 52 46 2c 20 62 75 | .in.another.namespace.or.VRF,.bu |
fd8c0 | 74 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 75 73 65 64 20 61 73 20 73 74 61 6e 64 61 6c 6f 6e 65 | t.can.also.be.used.as.standalone |
fd8e0 | 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 73 2e 00 54 68 65 20 77 65 6c 6c 20 6b 6e 6f 77 6e | .network.devices..The.well.known |
fd900 | 20 4e 41 54 36 34 20 70 72 65 66 69 78 20 69 73 20 60 60 36 34 3a 66 66 39 62 3a 3a 2f 39 36 60 | .NAT64.prefix.is.``64:ff9b::/96` |
fd920 | 60 00 54 68 65 20 77 69 6e 64 6f 77 20 73 69 7a 65 20 6d 75 73 74 20 62 65 20 62 65 74 77 65 65 | `.The.window.size.must.be.betwee |
fd940 | 6e 20 31 20 61 6e 64 20 32 31 2e 00 54 68 65 20 77 69 72 65 6c 65 73 73 20 63 6c 69 65 6e 74 20 | n.1.and.21..The.wireless.client. |
fd960 | 28 73 75 70 70 6c 69 63 61 6e 74 29 20 61 75 74 68 65 6e 74 69 63 61 74 65 73 20 61 67 61 69 6e | (supplicant).authenticates.again |
fd980 | 73 74 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 28 61 75 74 68 65 6e 74 69 63 61 | st.the.RADIUS.server.(authentica |
fd9a0 | 74 69 6f 6e 20 73 65 72 76 65 72 29 20 75 73 69 6e 67 20 61 6e 20 3a 61 62 62 72 3a 60 45 41 50 | tion.server).using.an.:abbr:`EAP |
fd9c0 | 20 28 45 78 74 65 6e 73 69 62 6c 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 50 72 6f 74 | .(Extensible.Authentication.Prot |
fd9e0 | 6f 63 6f 6c 29 60 20 20 6d 65 74 68 6f 64 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 | ocol)`..method.configured.on.the |
fda00 | 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 20 54 68 65 20 57 41 50 20 28 61 6c 73 6f 20 72 65 | .RADIUS.server..The.WAP.(also.re |
fda20 | 66 65 72 72 65 64 20 74 6f 20 61 73 20 61 75 74 68 65 6e 74 69 63 61 74 6f 72 29 20 72 6f 6c 65 | ferred.to.as.authenticator).role |
fda40 | 20 69 73 20 74 6f 20 73 65 6e 64 20 61 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d | .is.to.send.all.authentication.m |
fda60 | 65 73 73 61 67 65 73 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 75 70 70 6c 69 63 61 6e 74 20 61 | essages.between.the.supplicant.a |
fda80 | 6e 64 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | nd.the.configured.authentication |
fdaa0 | 20 73 65 72 76 65 72 2c 20 74 68 75 73 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 | .server,.thus.the.RADIUS.server. |
fdac0 | 69 73 20 72 65 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e | is.responsible.for.authenticatin |
fdae0 | 67 20 74 68 65 20 75 73 65 72 73 2e 00 54 68 65 6e 20 61 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e | g.the.users..Then.a.correspondin |
fdb00 | 67 20 53 4e 41 54 20 72 75 6c 65 20 69 73 20 63 72 65 61 74 65 64 20 74 6f 20 4e 41 54 20 6f 75 | g.SNAT.rule.is.created.to.NAT.ou |
fdb20 | 74 67 6f 69 6e 67 20 74 72 61 66 66 69 63 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 | tgoing.traffic.for.the.internal. |
fdb40 | 49 50 20 74 6f 20 61 20 72 65 73 65 72 76 65 64 20 65 78 74 65 72 6e 61 6c 20 49 50 2e 20 54 68 | IP.to.a.reserved.external.IP..Th |
fdb60 | 69 73 20 64 65 64 69 63 61 74 65 73 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 | is.dedicates.an.external.IP.addr |
fdb80 | 65 73 73 20 74 6f 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 61 6e | ess.to.an.internal.IP.address.an |
fdba0 | 64 20 69 73 20 75 73 65 66 75 6c 20 66 6f 72 20 70 72 6f 74 6f 63 6f 6c 73 20 77 68 69 63 68 20 | d.is.useful.for.protocols.which. |
fdbc0 | 64 6f 6e 27 74 20 68 61 76 65 20 74 68 65 20 6e 6f 74 69 6f 6e 20 6f 66 20 70 6f 72 74 73 2c 20 | don't.have.the.notion.of.ports,. |
fdbe0 | 73 75 63 68 20 61 73 20 47 52 45 2e 00 54 68 65 6e 20 77 65 20 6e 65 65 64 20 74 6f 20 67 65 6e | such.as.GRE..Then.we.need.to.gen |
fdc00 | 65 72 61 74 65 2c 20 61 64 64 20 61 6e 64 20 73 70 65 63 69 66 79 20 74 68 65 20 6e 61 6d 65 73 | erate,.add.and.specify.the.names |
fdc20 | 20 6f 66 20 74 68 65 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 6d 61 74 65 72 69 61 6c 73 2e | .of.the.cryptographic.materials. |
fdc40 | 20 45 61 63 68 20 6f 66 20 74 68 65 20 69 6e 73 74 61 6c 6c 20 63 6f 6d 6d 61 6e 64 20 73 68 6f | .Each.of.the.install.command.sho |
fdc60 | 75 6c 64 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 | uld.be.applied.to.the.configurat |
fdc80 | 69 6f 6e 20 61 6e 64 20 63 6f 6d 6d 69 74 65 64 20 62 65 66 6f 72 65 20 75 73 69 6e 67 20 75 6e | ion.and.commited.before.using.un |
fdca0 | 64 65 72 20 74 68 65 20 6f 70 65 6e 76 70 6e 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 | der.the.openvpn.interface.config |
fdcc0 | 75 72 61 74 69 6f 6e 2e 00 54 68 65 6e 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 69 6e 73 74 61 6c | uration..Then.you.need.to.instal |
fdce0 | 6c 20 74 68 65 20 6b 65 79 20 6f 6e 20 74 68 65 20 72 65 6d 6f 74 65 20 72 6f 75 74 65 72 3a 00 | l.the.key.on.the.remote.router:. |
fdd00 | 54 68 65 6e 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 65 74 20 74 68 65 20 6b 65 79 20 69 6e 20 | Then.you.need.to.set.the.key.in. |
fdd20 | 79 6f 75 72 20 4f 70 65 6e 56 50 4e 20 69 6e 74 65 72 66 61 63 65 20 73 65 74 74 69 6e 67 73 3a | your.OpenVPN.interface.settings: |
fdd40 | 00 54 68 65 6e 2c 20 46 61 73 74 4e 65 74 4d 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a | .Then,.FastNetMon.configuration: |
fdd60 | 00 54 68 65 72 65 20 61 72 65 20 33 20 64 65 66 61 75 6c 74 20 4e 54 50 20 73 65 72 76 65 72 20 | .There.are.3.default.NTP.server. |
fdd80 | 73 65 74 2e 20 59 6f 75 20 61 72 65 20 61 62 6c 65 20 74 6f 20 63 68 61 6e 67 65 20 74 68 65 6d | set..You.are.able.to.change.them |
fdda0 | 2e 00 54 68 65 72 65 20 61 72 65 20 61 20 6c 6f 74 20 6f 66 20 6d 61 74 63 68 69 6e 67 20 63 72 | ..There.are.a.lot.of.matching.cr |
fddc0 | 69 74 65 72 69 61 20 61 67 61 69 6e 73 74 20 77 68 69 63 68 20 74 68 65 20 70 61 63 6b 61 67 65 | iteria.against.which.the.package |
fdde0 | 20 63 61 6e 20 62 65 20 74 65 73 74 65 64 2e 00 54 68 65 72 65 20 61 72 65 20 61 20 6c 6f 74 20 | .can.be.tested..There.are.a.lot. |
fde00 | 6f 66 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 61 67 61 69 6e 73 74 20 77 68 69 | of.matching.criteria.against.whi |
fde20 | 63 68 20 74 68 65 20 70 61 63 6b 65 74 20 63 61 6e 20 62 65 20 74 65 73 74 65 64 2e 00 54 68 65 | ch.the.packet.can.be.tested..The |
fde40 | 72 65 20 61 72 65 20 61 20 6c 6f 74 20 6f 66 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 | re.are.a.lot.of.matching.criteri |
fde60 | 61 20 6f 70 74 69 6f 6e 73 20 61 76 61 69 6c 61 62 6c 65 2c 20 62 6f 74 68 20 66 6f 72 20 60 60 | a.options.available,.both.for.`` |
fde80 | 70 6f 6c 69 63 79 20 72 6f 75 74 65 60 60 20 61 6e 64 20 60 60 70 6f 6c 69 63 79 20 72 6f 75 74 | policy.route``.and.``policy.rout |
fdea0 | 65 36 60 60 2e 20 54 68 65 73 65 20 6f 70 74 69 6f 6e 73 20 61 72 65 20 6c 69 73 74 65 64 20 69 | e6``..These.options.are.listed.i |
fdec0 | 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 00 54 68 65 72 65 20 61 72 65 20 64 69 66 66 65 72 | n.this.section..There.are.differ |
fdee0 | 65 6e 74 20 70 61 72 61 6d 65 74 65 72 73 20 66 6f 72 20 67 65 74 74 69 6e 67 20 70 72 65 66 69 | ent.parameters.for.getting.prefi |
fdf00 | 78 2d 6c 69 73 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 00 54 68 65 72 65 20 61 72 65 20 6c 69 | x-list.information:.There.are.li |
fdf20 | 6d 69 74 73 20 6f 6e 20 77 68 69 63 68 20 63 68 61 6e 6e 65 6c 73 20 63 61 6e 20 62 65 20 75 73 | mits.on.which.channels.can.be.us |
fdf40 | 65 64 20 77 69 74 68 20 48 54 34 30 2d 20 61 6e 64 20 48 54 34 30 2b 2e 20 46 6f 6c 6c 6f 77 69 | ed.with.HT40-.and.HT40+..Followi |
fdf60 | 6e 67 20 74 61 62 6c 65 20 73 68 6f 77 73 20 74 68 65 20 63 68 61 6e 6e 65 6c 73 20 74 68 61 74 | ng.table.shows.the.channels.that |
fdf80 | 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 48 54 34 30 2d 20 61 6e 64 20 | .may.be.available.for.HT40-.and. |
fdfa0 | 48 54 34 30 2b 20 75 73 65 20 70 65 72 20 49 45 45 45 20 38 30 32 2e 31 31 6e 20 41 6e 6e 65 78 | HT40+.use.per.IEEE.802.11n.Annex |
fdfc0 | 20 4a 3a 00 54 68 65 72 65 20 61 72 65 20 6d 61 6e 79 20 70 61 72 61 6d 65 74 65 72 73 20 79 6f | .J:.There.are.many.parameters.yo |
fdfe0 | 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 75 73 65 20 69 6e 20 6f 72 64 65 72 20 74 | u.will.be.able.to.use.in.order.t |
fe000 | 6f 20 6d 61 74 63 68 20 74 68 65 20 74 72 61 66 66 69 63 20 79 6f 75 20 77 61 6e 74 20 66 6f 72 | o.match.the.traffic.you.want.for |
fe020 | 20 61 20 63 6c 61 73 73 3a 00 54 68 65 72 65 20 61 72 65 20 6d 75 6c 74 69 70 6c 65 20 76 65 72 | .a.class:.There.are.multiple.ver |
fe040 | 73 69 6f 6e 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 74 68 65 20 4e 65 74 46 6c 6f 77 20 | sions.available.for.the.NetFlow. |
fe060 | 64 61 74 61 2e 20 54 68 65 20 60 3c 76 65 72 73 69 6f 6e 3e 60 20 75 73 65 64 20 69 6e 20 74 68 | data..The.`<version>`.used.in.th |
fe080 | 65 20 65 78 70 6f 72 74 65 64 20 66 6c 6f 77 20 64 61 74 61 20 63 61 6e 20 62 65 20 63 6f 6e 66 | e.exported.flow.data.can.be.conf |
fe0a0 | 69 67 75 72 65 64 20 68 65 72 65 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 76 65 72 73 69 | igured.here..The.following.versi |
fe0c0 | 6f 6e 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 3a 00 54 68 65 72 65 20 61 72 65 20 72 61 74 | ons.are.supported:.There.are.rat |
fe0e0 | 65 2d 6c 69 6d 69 74 65 64 20 61 6e 64 20 6e 6f 6e 20 72 61 74 65 2d 6c 69 6d 69 74 65 64 20 75 | e-limited.and.non.rate-limited.u |
fe100 | 73 65 72 73 20 28 4d 41 43 73 29 00 54 68 65 72 65 20 61 72 65 20 73 6f 6d 65 20 73 63 65 6e 61 | sers.(MACs).There.are.some.scena |
fe120 | 72 69 6f 73 20 77 68 65 72 65 20 73 65 72 69 61 6c 20 63 6f 6e 73 6f 6c 65 73 20 61 72 65 20 75 | rios.where.serial.consoles.are.u |
fe140 | 73 65 66 75 6c 2e 20 53 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 69 6f 6e 20 6f 66 20 | seful..System.administration.of. |
fe160 | 72 65 6d 6f 74 65 20 63 6f 6d 70 75 74 65 72 73 20 69 73 20 75 73 75 61 6c 6c 79 20 64 6f 6e 65 | remote.computers.is.usually.done |
fe180 | 20 75 73 69 6e 67 20 3a 72 65 66 3a 60 73 73 68 60 2c 20 62 75 74 20 74 68 65 72 65 20 61 72 65 | .using.:ref:`ssh`,.but.there.are |
fe1a0 | 20 74 69 6d 65 73 20 77 68 65 6e 20 61 63 63 65 73 73 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c | .times.when.access.to.the.consol |
fe1c0 | 65 20 69 73 20 74 68 65 20 6f 6e 6c 79 20 77 61 79 20 74 6f 20 64 69 61 67 6e 6f 73 65 20 61 6e | e.is.the.only.way.to.diagnose.an |
fe1e0 | 64 20 63 6f 72 72 65 63 74 20 73 6f 66 74 77 61 72 65 20 66 61 69 6c 75 72 65 73 2e 20 4d 61 6a | d.correct.software.failures..Maj |
fe200 | 6f 72 20 75 70 67 72 61 64 65 73 20 74 6f 20 74 68 65 20 69 6e 73 74 61 6c 6c 65 64 20 64 69 73 | or.upgrades.to.the.installed.dis |
fe220 | 74 72 69 62 75 74 69 6f 6e 20 6d 61 79 20 61 6c 73 6f 20 72 65 71 75 69 72 65 20 63 6f 6e 73 6f | tribution.may.also.require.conso |
fe240 | 6c 65 20 61 63 63 65 73 73 2e 00 54 68 65 72 65 20 61 72 65 20 74 68 72 65 65 20 6d 6f 64 65 73 | le.access..There.are.three.modes |
fe260 | 20 6f 66 20 6f 70 65 72 61 74 69 6f 6e 20 66 6f 72 20 61 20 77 69 72 65 6c 65 73 73 20 69 6e 74 | .of.operation.for.a.wireless.int |
fe280 | 65 72 66 61 63 65 3a 00 54 68 65 72 65 20 61 72 65 20 74 77 6f 20 74 79 70 65 73 20 6f 66 20 4e | erface:.There.are.two.types.of.N |
fe2a0 | 65 74 77 6f 72 6b 20 41 64 6d 69 6e 73 20 77 68 6f 20 64 65 61 6c 20 77 69 74 68 20 42 47 50 2c | etwork.Admins.who.deal.with.BGP, |
fe2c0 | 20 74 68 6f 73 65 20 77 68 6f 20 68 61 76 65 20 63 72 65 61 74 65 64 20 61 6e 20 69 6e 74 65 72 | .those.who.have.created.an.inter |
fe2e0 | 6e 61 74 69 6f 6e 61 6c 20 69 6e 63 69 64 65 6e 74 20 61 6e 64 2f 6f 72 20 6f 75 74 61 67 65 2c | national.incident.and/or.outage, |
fe300 | 20 61 6e 64 20 74 68 6f 73 65 20 77 68 6f 20 61 72 65 20 6c 79 69 6e 67 00 54 68 65 72 65 20 61 | .and.those.who.are.lying.There.a |
fe320 | 72 65 20 74 77 6f 20 77 61 79 73 20 74 68 61 74 20 68 65 6c 70 20 75 73 20 74 6f 20 6d 69 74 69 | re.two.ways.that.help.us.to.miti |
fe340 | 67 61 74 65 20 74 68 65 20 42 47 50 73 20 66 75 6c 6c 2d 6d 65 73 68 20 72 65 71 75 69 72 65 6d | gate.the.BGPs.full-mesh.requirem |
fe360 | 65 6e 74 20 69 6e 20 61 20 6e 65 74 77 6f 72 6b 3a 00 54 68 65 72 65 20 63 61 6e 20 6f 6e 6c 79 | ent.in.a.network:.There.can.only |
fe380 | 20 62 65 20 6f 6e 65 20 6c 6f 6f 70 62 61 63 6b 20 60 60 6c 6f 60 60 20 69 6e 74 65 72 66 61 63 | .be.one.loopback.``lo``.interfac |
fe3a0 | 65 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 6d 75 6c | e.on.the.system..If.you.need.mul |
fe3c0 | 74 69 70 6c 65 20 69 6e 74 65 72 66 61 63 65 73 2c 20 70 6c 65 61 73 65 20 75 73 65 20 74 68 65 | tiple.interfaces,.please.use.the |
fe3e0 | 20 3a 72 65 66 3a 60 64 75 6d 6d 79 2d 69 6e 74 65 72 66 61 63 65 60 20 69 6e 74 65 72 66 61 63 | .:ref:`dummy-interface`.interfac |
fe400 | 65 20 74 79 70 65 2e 00 54 68 65 72 65 20 63 6f 75 6c 64 20 62 65 20 61 20 77 69 64 65 20 72 61 | e.type..There.could.be.a.wide.ra |
fe420 | 6e 67 65 20 6f 66 20 72 6f 75 74 69 6e 67 20 70 6f 6c 69 63 69 65 73 2e 20 53 6f 6d 65 20 65 78 | nge.of.routing.policies..Some.ex |
fe440 | 61 6d 70 6c 65 73 20 61 72 65 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 3a 00 54 68 65 72 65 20 69 | amples.are.listed.below:.There.i |
fe460 | 73 20 61 20 76 65 72 79 20 6e 69 63 65 20 70 69 63 74 75 72 65 2f 65 78 70 6c 61 6e 61 74 69 6f | s.a.very.nice.picture/explanatio |
fe480 | 6e 20 69 6e 20 74 68 65 20 56 79 61 74 74 61 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 77 68 | n.in.the.Vyatta.documentation.wh |
fe4a0 | 69 63 68 20 73 68 6f 75 6c 64 20 62 65 20 72 65 77 72 69 74 74 65 6e 20 68 65 72 65 2e 00 54 68 | ich.should.be.rewritten.here..Th |
fe4c0 | 65 72 65 20 69 73 20 61 6c 73 6f 20 61 20 47 52 45 20 6f 76 65 72 20 49 50 76 36 20 65 6e 63 61 | ere.is.also.a.GRE.over.IPv6.enca |
fe4e0 | 70 73 75 6c 61 74 69 6f 6e 20 61 76 61 69 6c 61 62 6c 65 2c 20 69 74 20 69 73 20 63 61 6c 6c 65 | psulation.available,.it.is.calle |
fe500 | 64 3a 20 60 60 69 70 36 67 72 65 60 60 2e 00 54 68 65 72 65 20 69 73 20 61 6e 20 65 6e 74 69 72 | d:.``ip6gre``..There.is.an.entir |
fe520 | 65 20 63 68 61 70 74 65 72 20 61 62 6f 75 74 20 68 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 | e.chapter.about.how.to.configure |
fe540 | 20 61 20 3a 72 65 66 3a 60 76 72 66 60 2c 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 69 73 | .a.:ref:`vrf`,.please.check.this |
fe560 | 20 66 6f 72 20 61 64 64 69 74 69 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 54 68 65 | .for.additional.information..The |
fe580 | 72 65 27 73 20 61 20 76 61 72 69 65 74 79 20 6f 66 20 63 6c 69 65 6e 74 20 47 55 49 20 66 72 6f | re's.a.variety.of.client.GUI.fro |
fe5a0 | 6e 74 65 6e 64 73 20 66 6f 72 20 61 6e 79 20 70 6c 61 74 66 6f 72 6d 00 54 68 65 73 65 20 61 72 | ntends.for.any.platform.These.ar |
fe5c0 | 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 73 20 66 6f 72 20 61 20 62 61 73 69 63 20 73 65 74 75 70 | e.the.commands.for.a.basic.setup |
fe5e0 | 2e 00 54 68 65 73 65 20 63 6f 6d 6d 61 6e 64 73 20 61 6c 6c 6f 77 20 74 68 65 20 56 4c 41 4e 31 | ..These.commands.allow.the.VLAN1 |
fe600 | 30 20 61 6e 64 20 56 4c 41 4e 31 31 20 68 6f 73 74 73 20 74 6f 20 63 6f 6d 6d 75 6e 69 63 61 74 | 0.and.VLAN11.hosts.to.communicat |
fe620 | 65 20 77 69 74 68 20 65 61 63 68 20 6f 74 68 65 72 20 75 73 69 6e 67 20 74 68 65 20 6d 61 69 6e | e.with.each.other.using.the.main |
fe640 | 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 54 68 65 73 65 20 63 6f 6e 66 69 67 75 72 61 74 | .routing.table..These.configurat |
fe660 | 69 6f 6e 20 69 73 20 6e 6f 74 20 6d 61 6e 64 61 74 6f 72 79 20 61 6e 64 20 69 6e 20 6d 6f 73 74 | ion.is.not.mandatory.and.in.most |
fe680 | 20 63 61 73 65 73 20 74 68 65 72 65 27 73 20 6e 6f 20 6e 65 65 64 20 74 6f 20 63 6f 6e 66 69 67 | .cases.there's.no.need.to.config |
fe6a0 | 75 72 65 20 69 74 2e 20 42 75 74 20 69 66 20 6e 65 63 65 73 73 61 72 79 2c 20 47 72 61 74 75 69 | ure.it..But.if.necessary,.Gratui |
fe6c0 | 74 6f 75 73 20 41 52 50 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 60 60 | tous.ARP.can.be.configured.in.`` |
fe6e0 | 67 6c 6f 62 61 6c 2d 70 61 72 61 6d 65 74 65 72 73 60 60 20 61 6e 64 2f 6f 72 20 69 6e 20 60 60 | global-parameters``.and/or.in.`` |
fe700 | 67 72 6f 75 70 60 60 20 73 65 63 74 69 6f 6e 2e 00 54 68 65 73 65 20 70 61 72 61 6d 65 74 65 72 | group``.section..These.parameter |
fe720 | 73 20 61 72 65 20 70 61 73 73 65 64 20 61 73 2d 69 73 20 74 6f 20 69 73 63 2d 64 68 63 70 27 73 | s.are.passed.as-is.to.isc-dhcp's |
fe740 | 20 64 68 63 70 64 2e 63 6f 6e 66 20 75 6e 64 65 72 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 | .dhcpd.conf.under.the.configurat |
fe760 | 69 6f 6e 20 6e 6f 64 65 20 74 68 65 79 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 2e 20 54 68 | ion.node.they.are.defined.in..Th |
fe780 | 65 79 20 61 72 65 20 6e 6f 74 20 76 61 6c 69 64 61 74 65 64 20 73 6f 20 61 6e 20 65 72 72 6f 72 | ey.are.not.validated.so.an.error |
fe7a0 | 20 69 6e 20 74 68 65 20 72 61 77 20 70 61 72 61 6d 65 74 65 72 73 20 77 6f 6e 27 74 20 62 65 20 | .in.the.raw.parameters.won't.be. |
fe7c0 | 63 61 75 67 68 74 20 62 79 20 76 79 6f 73 27 73 20 73 63 72 69 70 74 73 20 61 6e 64 20 77 69 6c | caught.by.vyos's.scripts.and.wil |
fe7e0 | 6c 20 63 61 75 73 65 20 64 68 63 70 64 20 74 6f 20 66 61 69 6c 20 74 6f 20 73 74 61 72 74 2e 20 | l.cause.dhcpd.to.fail.to.start.. |
fe800 | 41 6c 77 61 79 73 20 76 65 72 69 66 79 20 74 68 61 74 20 74 68 65 20 70 61 72 61 6d 65 74 65 72 | Always.verify.that.the.parameter |
fe820 | 73 20 61 72 65 20 63 6f 72 72 65 63 74 20 62 65 66 6f 72 65 20 63 6f 6d 6d 69 74 74 69 6e 67 20 | s.are.correct.before.committing. |
fe840 | 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 52 65 66 65 72 20 74 6f 20 69 73 63 2d | the.configuration..Refer.to.isc- |
fe860 | 64 68 63 70 27 73 20 64 68 63 70 64 2e 63 6f 6e 66 20 6d 61 6e 75 61 6c 20 66 6f 72 20 6d 6f 72 | dhcp's.dhcpd.conf.manual.for.mor |
fe880 | 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 6b 62 2e 69 73 63 2e 6f 72 | e.information:.https://kb.isc.or |
fe8a0 | 67 2f 64 6f 63 73 2f 69 73 63 2d 64 68 63 70 2d 34 34 2d 6d 61 6e 75 61 6c 2d 70 61 67 65 73 2d | g/docs/isc-dhcp-44-manual-pages- |
fe8c0 | 64 68 63 70 64 63 6f 6e 66 00 54 68 65 73 65 20 70 61 72 61 6d 65 74 65 72 73 20 6e 65 65 64 20 | dhcpdconf.These.parameters.need. |
fe8e0 | 74 6f 20 62 65 20 70 61 72 74 20 6f 66 20 74 68 65 20 44 48 43 50 20 67 6c 6f 62 61 6c 20 6f 70 | to.be.part.of.the.DHCP.global.op |
fe900 | 74 69 6f 6e 73 2e 20 54 68 65 79 20 73 74 61 79 20 75 6e 63 68 61 6e 67 65 64 2e 00 54 68 65 79 | tions..They.stay.unchanged..They |
fe920 | 20 63 61 6e 20 62 65 20 2a 2a 64 65 63 69 6d 61 6c 2a 2a 20 70 72 65 66 69 78 65 73 2e 00 54 68 | .can.be.**decimal**.prefixes..Th |
fe940 | 69 6e 67 73 20 74 6f 20 62 65 20 63 6f 6e 73 69 64 72 65 64 20 69 6e 20 74 68 69 73 20 73 65 74 | ings.to.be.considred.in.this.set |
fe960 | 75 70 3a 00 54 68 69 73 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 74 68 65 20 61 64 64 | up:.This.address.must.be.the.add |
fe980 | 72 65 73 73 20 6f 66 20 61 20 6c 6f 63 61 6c 20 69 6e 74 65 72 66 61 63 65 2e 20 49 74 20 6d 61 | ress.of.a.local.interface..It.ma |
fe9a0 | 79 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 73 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 | y.be.specified.as.an.IPv4.addres |
fe9c0 | 73 20 6f 72 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 00 54 68 69 73 20 61 6c 67 6f 72 | s.or.an.IPv6.address..This.algor |
fe9e0 | 69 74 68 6d 20 69 73 20 38 30 32 2e 33 61 64 20 63 6f 6d 70 6c 69 61 6e 74 2e 00 54 68 69 73 20 | ithm.is.802.3ad.compliant..This. |
fea00 | 61 6c 67 6f 72 69 74 68 6d 20 69 73 20 6e 6f 74 20 66 75 6c 6c 79 20 38 30 32 2e 33 61 64 20 63 | algorithm.is.not.fully.802.3ad.c |
fea20 | 6f 6d 70 6c 69 61 6e 74 2e 20 41 20 73 69 6e 67 6c 65 20 54 43 50 20 6f 72 20 55 44 50 20 63 6f | ompliant..A.single.TCP.or.UDP.co |
fea40 | 6e 76 65 72 73 61 74 69 6f 6e 20 63 6f 6e 74 61 69 6e 69 6e 67 20 62 6f 74 68 20 66 72 61 67 6d | nversation.containing.both.fragm |
fea60 | 65 6e 74 65 64 20 61 6e 64 20 75 6e 66 72 61 67 6d 65 6e 74 65 64 20 70 61 63 6b 65 74 73 20 77 | ented.and.unfragmented.packets.w |
fea80 | 69 6c 6c 20 73 65 65 20 70 61 63 6b 65 74 73 20 73 74 72 69 70 65 64 20 61 63 72 6f 73 73 20 74 | ill.see.packets.striped.across.t |
feaa0 | 77 6f 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 68 69 73 20 6d 61 79 20 72 65 73 75 6c 74 20 69 | wo.interfaces..This.may.result.i |
feac0 | 6e 20 6f 75 74 20 6f 66 20 6f 72 64 65 72 20 64 65 6c 69 76 65 72 79 2e 20 4d 6f 73 74 20 74 72 | n.out.of.order.delivery..Most.tr |
feae0 | 61 66 66 69 63 20 74 79 70 65 73 20 77 69 6c 6c 20 6e 6f 74 20 6d 65 65 74 20 74 68 65 73 65 20 | affic.types.will.not.meet.these. |
feb00 | 63 72 69 74 65 72 69 61 2c 20 61 73 20 54 43 50 20 72 61 72 65 6c 79 20 66 72 61 67 6d 65 6e 74 | criteria,.as.TCP.rarely.fragment |
feb20 | 73 20 74 72 61 66 66 69 63 2c 20 61 6e 64 20 6d 6f 73 74 20 55 44 50 20 74 72 61 66 66 69 63 20 | s.traffic,.and.most.UDP.traffic. |
feb40 | 69 73 20 6e 6f 74 20 69 6e 76 6f 6c 76 65 64 20 69 6e 20 65 78 74 65 6e 64 65 64 20 63 6f 6e 76 | is.not.involved.in.extended.conv |
feb60 | 65 72 73 61 74 69 6f 6e 73 2e 20 4f 74 68 65 72 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 | ersations..Other.implementations |
feb80 | 20 6f 66 20 38 30 32 2e 33 61 64 20 6d 61 79 20 6f 72 20 6d 61 79 20 6e 6f 74 20 74 6f 6c 65 72 | .of.802.3ad.may.or.may.not.toler |
feba0 | 61 74 65 20 74 68 69 73 20 6e 6f 6e 63 6f 6d 70 6c 69 61 6e 63 65 2e 00 54 68 69 73 20 61 6c 67 | ate.this.noncompliance..This.alg |
febc0 | 6f 72 69 74 68 6d 20 77 69 6c 6c 20 70 6c 61 63 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 74 6f | orithm.will.place.all.traffic.to |
febe0 | 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 6e 65 74 77 6f 72 6b 20 70 65 65 72 20 6f 6e 20 74 68 | .a.particular.network.peer.on.th |
fec00 | 65 20 73 61 6d 65 20 73 6c 61 76 65 2e 00 54 68 69 73 20 61 6c 67 6f 72 69 74 68 6d 20 77 69 6c | e.same.slave..This.algorithm.wil |
fec20 | 6c 20 70 6c 61 63 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 74 6f 20 61 20 70 61 72 74 69 63 75 | l.place.all.traffic.to.a.particu |
fec40 | 6c 61 72 20 6e 65 74 77 6f 72 6b 20 70 65 65 72 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 73 6c 61 | lar.network.peer.on.the.same.sla |
fec60 | 76 65 2e 20 46 6f 72 20 6e 6f 6e 2d 49 50 20 74 72 61 66 66 69 63 2c 20 74 68 65 20 66 6f 72 6d | ve..For.non-IP.traffic,.the.form |
fec80 | 75 6c 61 20 69 73 20 74 68 65 20 73 61 6d 65 20 61 73 20 66 6f 72 20 74 68 65 20 6c 61 79 65 72 | ula.is.the.same.as.for.the.layer |
feca0 | 32 20 74 72 61 6e 73 6d 69 74 20 68 61 73 68 20 70 6f 6c 69 63 79 2e 00 54 68 69 73 20 61 6c 6c | 2.transmit.hash.policy..This.all |
fecc0 | 6f 77 73 20 61 76 6f 69 64 69 6e 67 20 74 68 65 20 74 69 6d 65 72 73 20 64 65 66 69 6e 65 64 20 | ows.avoiding.the.timers.defined. |
fece0 | 69 6e 20 42 47 50 20 61 6e 64 20 4f 53 50 46 20 70 72 6f 74 6f 63 6f 6c 20 74 6f 20 65 78 70 69 | in.BGP.and.OSPF.protocol.to.expi |
fed00 | 72 65 73 2e 00 54 68 69 73 20 61 6c 6c 6f 77 73 20 74 68 65 20 6f 70 65 72 61 74 6f 72 20 74 6f | res..This.allows.the.operator.to |
fed20 | 20 63 6f 6e 74 72 6f 6c 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 66 69 6c 65 | .control.the.number.of.open.file |
fed40 | 20 64 65 73 63 72 69 70 74 6f 72 73 20 65 61 63 68 20 64 61 65 6d 6f 6e 20 69 73 20 61 6c 6c 6f | .descriptors.each.daemon.is.allo |
fed60 | 77 65 64 20 74 6f 20 73 74 61 72 74 20 77 69 74 68 2e 20 49 66 20 74 68 65 20 6f 70 65 72 61 74 | wed.to.start.with..If.the.operat |
fed80 | 6f 72 20 70 6c 61 6e 73 20 74 6f 20 72 75 6e 20 62 67 70 20 77 69 74 68 20 73 65 76 65 72 61 6c | or.plans.to.run.bgp.with.several |
feda0 | 20 74 68 6f 75 73 61 6e 64 73 20 6f 66 20 70 65 65 72 73 20 74 68 65 6e 20 74 68 69 73 20 69 73 | .thousands.of.peers.then.this.is |
fedc0 | 20 77 68 65 72 65 20 77 65 20 77 6f 75 6c 64 20 6d 6f 64 69 66 79 20 46 52 52 20 74 6f 20 61 6c | .where.we.would.modify.FRR.to.al |
fede0 | 6c 6f 77 20 74 68 69 73 20 74 6f 20 68 61 70 70 65 6e 2e 00 54 68 69 73 20 61 6c 73 6f 20 77 6f | low.this.to.happen..This.also.wo |
fee00 | 72 6b 73 20 66 6f 72 20 72 65 76 65 72 73 65 2d 6c 6f 6f 6b 75 70 20 7a 6f 6e 65 73 20 28 60 60 | rks.for.reverse-lookup.zones.(`` |
fee20 | 31 38 2e 31 37 32 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 60 60 29 2e 00 54 68 69 73 20 61 72 74 | 18.172.in-addr.arpa``)..This.art |
fee40 | 69 63 6c 65 20 74 6f 75 63 68 65 73 20 6f 6e 20 27 63 6c 61 73 73 69 63 27 20 49 50 20 74 75 6e | icle.touches.on.'classic'.IP.tun |
fee60 | 6e 65 6c 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 54 68 69 73 20 62 6c 75 65 70 72 69 6e 74 | neling.protocols..This.blueprint |
fee80 | 20 75 73 65 73 20 56 79 4f 53 20 61 73 20 74 68 65 20 44 4d 56 50 4e 20 48 75 62 20 61 6e 64 20 | .uses.VyOS.as.the.DMVPN.Hub.and. |
feea0 | 43 69 73 63 6f 20 28 37 32 30 36 56 58 52 29 20 61 6e 64 20 56 79 4f 53 20 61 73 20 6d 75 6c 74 | Cisco.(7206VXR).and.VyOS.as.mult |
feec0 | 69 70 6c 65 20 73 70 6f 6b 65 20 73 69 74 65 73 2e 20 54 68 65 20 6c 61 62 20 77 61 73 20 62 75 | iple.spoke.sites..The.lab.was.bu |
feee0 | 69 6c 64 20 75 73 69 6e 67 20 3a 61 62 62 72 3a 60 45 56 45 2d 4e 47 20 28 45 6d 75 6c 61 74 65 | ild.using.:abbr:`EVE-NG.(Emulate |
fef00 | 64 20 56 69 72 74 75 61 6c 20 45 6e 76 69 72 6f 6e 6d 65 6e 74 20 4e 47 29 60 2e 00 54 68 69 73 | d.Virtual.Environment.NG)`..This |
fef20 | 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 72 6d 65 64 20 75 73 69 6e 67 20 74 68 65 20 60 60 73 68 | .can.be.confirmed.using.the.``sh |
fef40 | 6f 77 20 69 70 20 72 6f 75 74 65 20 74 61 62 6c 65 20 31 30 30 60 60 20 6f 70 65 72 61 74 69 6f | ow.ip.route.table.100``.operatio |
fef60 | 6e 61 6c 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 64 6f | nal.command..This.can.only.be.do |
fef80 | 6e 65 20 69 66 20 61 6c 6c 20 79 6f 75 72 20 75 73 65 72 73 20 61 72 65 20 6c 6f 63 61 74 65 64 | ne.if.all.your.users.are.located |
fefa0 | 20 64 69 72 65 63 74 6c 79 20 75 6e 64 65 72 20 74 68 65 20 73 61 6d 65 20 70 6f 73 69 74 69 6f | .directly.under.the.same.positio |
fefc0 | 6e 20 69 6e 20 74 68 65 20 4c 44 41 50 20 74 72 65 65 20 61 6e 64 20 74 68 65 20 6c 6f 67 69 6e | n.in.the.LDAP.tree.and.the.login |
fefe0 | 20 6e 61 6d 65 20 69 73 20 75 73 65 64 20 66 6f 72 20 6e 61 6d 69 6e 67 20 65 61 63 68 20 75 73 | .name.is.used.for.naming.each.us |
ff000 | 65 72 20 6f 62 6a 65 63 74 2e 20 49 66 20 79 6f 75 72 20 4c 44 41 50 20 74 72 65 65 20 64 6f 65 | er.object..If.your.LDAP.tree.doe |
ff020 | 73 20 6e 6f 74 20 6d 61 74 63 68 20 74 68 65 73 65 20 63 72 69 74 65 72 69 61 73 20 6f 72 20 69 | s.not.match.these.criterias.or.i |
ff040 | 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 66 69 6c 74 65 72 20 77 68 6f 20 61 72 65 20 76 61 6c | f.you.want.to.filter.who.are.val |
ff060 | 69 64 20 75 73 65 72 73 20 74 68 65 6e 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 75 73 65 20 61 20 | id.users.then.you.need.to.use.a. |
ff080 | 73 65 61 72 63 68 20 66 69 6c 74 65 72 20 74 6f 20 73 65 61 72 63 68 20 66 6f 72 20 79 6f 75 72 | search.filter.to.search.for.your |
ff0a0 | 20 75 73 65 72 73 20 44 4e 20 28 60 66 69 6c 74 65 72 2d 65 78 70 72 65 73 73 69 6f 6e 60 29 2e | .users.DN.(`filter-expression`). |
ff0c0 | 00 54 68 69 73 20 63 68 61 70 65 74 65 72 20 64 65 73 63 72 69 62 65 73 20 68 6f 77 20 74 6f 20 | .This.chapeter.describes.how.to. |
ff0e0 | 63 6f 6e 66 69 67 75 72 65 20 6b 65 72 6e 65 6c 20 70 61 72 61 6d 65 74 65 72 73 20 61 74 20 72 | configure.kernel.parameters.at.r |
ff100 | 75 6e 74 69 6d 65 2e 00 54 68 69 73 20 63 68 61 70 74 65 72 20 64 65 73 63 72 69 62 65 20 74 68 | untime..This.chapter.describe.th |
ff120 | 65 20 70 6f 73 73 69 62 69 6c 69 74 69 65 73 20 6f 66 20 61 64 76 61 6e 63 65 64 20 73 79 73 74 | e.possibilities.of.advanced.syst |
ff140 | 65 6d 20 62 65 68 61 76 69 6f 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 64 20 73 65 74 73 20 6e 65 | em.behavior..This.commad.sets.ne |
ff160 | 74 77 6f 72 6b 20 65 6e 74 69 74 79 20 74 69 74 6c 65 20 28 4e 45 54 29 20 70 72 6f 76 69 64 65 | twork.entity.title.(NET).provide |
ff180 | 64 20 69 6e 20 49 53 4f 20 66 6f 72 6d 61 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 63 | d.in.ISO.format..This.command.ac |
ff1a0 | 63 65 70 74 20 69 6e 63 6f 6d 69 6e 67 20 72 6f 75 74 65 73 20 77 69 74 68 20 41 53 20 70 61 74 | cept.incoming.routes.with.AS.pat |
ff1c0 | 68 20 63 6f 6e 74 61 69 6e 69 6e 67 20 41 53 20 6e 75 6d 62 65 72 20 77 69 74 68 20 74 68 65 20 | h.containing.AS.number.with.the. |
ff1e0 | 73 61 6d 65 20 76 61 6c 75 65 20 61 73 20 74 68 65 20 63 75 72 72 65 6e 74 20 73 79 73 74 65 6d | same.value.as.the.current.system |
ff200 | 20 41 53 2e 20 54 68 69 73 20 69 73 20 75 73 65 64 20 77 68 65 6e 20 79 6f 75 20 77 61 6e 74 20 | .AS..This.is.used.when.you.want. |
ff220 | 74 6f 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 41 53 20 6e 75 6d 62 65 72 20 69 6e 20 79 6f 75 | to.use.the.same.AS.number.in.you |
ff240 | 72 20 73 69 74 65 73 2c 20 62 75 74 20 79 6f 75 20 63 61 6e e2 80 99 74 20 63 6f 6e 6e 65 63 74 | r.sites,.but.you.can...t.connect |
ff260 | 20 74 68 65 6d 20 64 69 72 65 63 74 6c 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c | .them.directly..This.command.all |
ff280 | 6f 77 20 6f 76 65 72 72 69 64 65 20 74 68 65 20 72 65 73 75 6c 74 20 6f 66 20 43 61 70 61 62 69 | ow.override.the.result.of.Capabi |
ff2a0 | 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 20 77 69 74 68 20 6c 6f 63 61 6c 20 63 6f 6e 66 | lity.Negotiation.with.local.conf |
ff2c0 | 69 67 75 72 61 74 69 6f 6e 2e 20 49 67 6e 6f 72 65 20 72 65 6d 6f 74 65 20 70 65 65 72 e2 80 99 | iguration..Ignore.remote.peer... |
ff2e0 | 73 20 63 61 70 61 62 69 6c 69 74 79 20 76 61 6c 75 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | s.capability.value..This.command |
ff300 | 20 61 6c 6c 6f 77 73 20 70 65 65 72 69 6e 67 73 20 62 65 74 77 65 65 6e 20 64 69 72 65 63 74 6c | .allows.peerings.between.directl |
ff320 | 79 20 63 6f 6e 6e 65 63 74 65 64 20 65 42 47 50 20 70 65 65 72 73 20 75 73 69 6e 67 20 6c 6f 6f | y.connected.eBGP.peers.using.loo |
ff340 | 70 62 61 63 6b 20 61 64 64 72 65 73 73 65 73 20 77 69 74 68 6f 75 74 20 61 64 6a 75 73 74 69 6e | pback.addresses.without.adjustin |
ff360 | 67 20 74 68 65 20 64 65 66 61 75 6c 74 20 54 54 4c 20 6f 66 20 31 2e 00 54 68 69 73 20 63 6f 6d | g.the.default.TTL.of.1..This.com |
ff380 | 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 73 65 73 73 69 6f 6e 73 20 74 6f 20 62 65 20 65 73 74 61 62 | mand.allows.sessions.to.be.estab |
ff3a0 | 6c 69 73 68 65 64 20 77 69 74 68 20 65 42 47 50 20 6e 65 69 67 68 62 6f 72 73 20 77 68 65 6e 20 | lished.with.eBGP.neighbors.when. |
ff3c0 | 74 68 65 79 20 61 72 65 20 6d 75 6c 74 69 70 6c 65 20 68 6f 70 73 20 61 77 61 79 2e 20 57 68 65 | they.are.multiple.hops.away..Whe |
ff3e0 | 6e 20 74 68 65 20 6e 65 69 67 68 62 6f 72 20 69 73 20 6e 6f 74 20 64 69 72 65 63 74 6c 79 20 63 | n.the.neighbor.is.not.directly.c |
ff400 | 6f 6e 6e 65 63 74 65 64 20 61 6e 64 20 74 68 69 73 20 6b 6e 6f 62 20 69 73 20 6e 6f 74 20 65 6e | onnected.and.this.knob.is.not.en |
ff420 | 61 62 6c 65 64 2c 20 74 68 65 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 65 73 74 61 | abled,.the.session.will.not.esta |
ff440 | 62 6c 69 73 68 2e 20 54 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 68 6f 70 73 20 72 61 6e 67 65 20 | blish..The.number.of.hops.range. |
ff460 | 69 73 20 31 20 74 6f 20 32 35 35 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6d 75 74 | is.1.to.255..This.command.is.mut |
ff480 | 75 61 6c 6c 79 20 65 78 63 6c 75 73 69 76 65 20 77 69 74 68 20 3a 63 66 67 63 6d 64 3a 60 74 74 | ually.exclusive.with.:cfgcmd:`tt |
ff4a0 | 6c 2d 73 65 63 75 72 69 74 79 20 68 6f 70 73 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 | l-security.hops`..This.command.a |
ff4c0 | 6c 6c 6f 77 73 20 74 68 65 20 72 6f 75 74 65 72 20 74 6f 20 70 72 65 66 65 72 20 72 6f 75 74 65 | llows.the.router.to.prefer.route |
ff4e0 | 20 74 6f 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 20 6c 65 61 72 6e 65 64 20 76 69 61 | .to.specified.prefix.learned.via |
ff500 | 20 49 47 50 20 74 68 72 6f 75 67 68 20 62 61 63 6b 64 6f 6f 72 20 6c 69 6e 6b 20 69 6e 73 74 65 | .IGP.through.backdoor.link.inste |
ff520 | 61 64 20 6f 66 20 61 20 72 6f 75 74 65 20 74 6f 20 74 68 65 20 73 61 6d 65 20 70 72 65 66 69 78 | ad.of.a.route.to.the.same.prefix |
ff540 | 20 6c 65 61 72 6e 65 64 20 76 69 61 20 45 42 47 50 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | .learned.via.EBGP..This.command. |
ff560 | 61 6c 6c 6f 77 73 20 74 6f 20 6c 6f 67 20 63 68 61 6e 67 65 73 20 69 6e 20 61 64 6a 61 63 65 6e | allows.to.log.changes.in.adjacen |
ff580 | 63 79 2e 20 57 69 74 68 20 74 68 65 20 6f 70 74 69 6f 6e 61 6c 20 3a 63 66 67 63 6d 64 3a 60 64 | cy..With.the.optional.:cfgcmd:`d |
ff5a0 | 65 74 61 69 6c 60 20 61 72 67 75 6d 65 6e 74 2c 20 61 6c 6c 20 63 68 61 6e 67 65 73 20 69 6e 20 | etail`.argument,.all.changes.in. |
ff5c0 | 61 64 6a 61 63 65 6e 63 79 20 73 74 61 74 75 73 20 61 72 65 20 73 68 6f 77 6e 2e 20 57 69 74 68 | adjacency.status.are.shown..With |
ff5e0 | 6f 75 74 20 3a 63 66 67 63 6d 64 3a 60 64 65 74 61 69 6c 60 2c 20 6f 6e 6c 79 20 63 68 61 6e 67 | out.:cfgcmd:`detail`,.only.chang |
ff600 | 65 73 20 74 6f 20 66 75 6c 6c 20 6f 72 20 72 65 67 72 65 73 73 69 6f 6e 73 20 61 72 65 20 73 68 | es.to.full.or.regressions.are.sh |
ff620 | 6f 77 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 73 70 65 63 | own..This.command.allows.to.spec |
ff640 | 69 66 79 20 74 68 65 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 74 79 70 65 20 66 6f 72 20 74 68 | ify.the.distribution.type.for.th |
ff660 | 65 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 69 73 20 69 6e 74 65 | e.network.connected.to.this.inte |
ff680 | 72 66 61 63 65 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 75 73 | rface:.This.command.allows.to.us |
ff6a0 | 65 20 72 6f 75 74 65 20 6d 61 70 20 74 6f 20 66 69 6c 74 65 72 20 72 65 64 69 73 74 72 69 62 75 | e.route.map.to.filter.redistribu |
ff6c0 | 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 | ted.routes.from.given.route.sour |
ff6e0 | 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 | ce..There.are.five.modes.availab |
ff700 | 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 | le.for.route.source:.bgp,.connec |
ff720 | 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 72 69 70 6e 67 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 | ted,.kernel,.ripng,.static..This |
ff740 | 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 75 73 65 20 72 6f 75 74 65 20 6d 61 70 | .command.allows.to.use.route.map |
ff760 | 20 74 6f 20 66 69 6c 74 65 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 | .to.filter.redistributed.routes. |
ff780 | 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 | from.the.given.route.source..The |
ff7a0 | 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 | re.are.five.modes.available.for. |
ff7c0 | 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 | route.source:.bgp,.connected,.ke |
ff7e0 | 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | rnel,.ospf,.static..This.command |
ff800 | 20 61 6c 6c 6f 77 73 20 74 6f 20 75 73 65 20 72 6f 75 74 65 20 6d 61 70 20 74 6f 20 66 69 6c 74 | .allows.to.use.route.map.to.filt |
ff820 | 65 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 | er.redistributed.routes.from.the |
ff840 | 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 66 | .given.route.source..There.are.f |
ff860 | 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f | ive.modes.available.for.route.so |
ff880 | 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 72 69 | urce:.bgp,.connected,.kernel,.ri |
ff8a0 | 70 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 | p,.static..This.command.allows.t |
ff8c0 | 6f 20 75 73 65 20 72 6f 75 74 65 20 6d 61 70 20 74 6f 20 66 69 6c 74 65 72 20 72 65 64 69 73 74 | o.use.route.map.to.filter.redist |
ff8e0 | 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f | ributed.routes.from.the.given.ro |
ff900 | 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 | ute.source..There.are.six.modes. |
ff920 | 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c | available.for.route.source:.bgp, |
ff940 | 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 | .connected,.kernel,.ospf,.rip,.s |
ff960 | 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 75 73 | tatic..This.command.allows.to.us |
ff980 | 65 20 72 6f 75 74 65 20 6d 61 70 20 74 6f 20 66 69 6c 74 65 72 20 72 65 64 69 73 74 72 69 62 75 | e.route.map.to.filter.redistribu |
ff9a0 | 74 65 64 20 72 6f 75 74 65 73 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 | ted.routes..There.are.six.modes. |
ff9c0 | 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 63 6f 6e 6e | available.for.route.source:.conn |
ff9e0 | 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 | ected,.kernel,.ospf,.rip,.static |
ffa00 | 2c 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 79 6f 75 | ,.table..This.command.allows.you |
ffa20 | 20 61 70 70 6c 79 20 61 63 63 65 73 73 20 6c 69 73 74 73 20 74 6f 20 61 20 63 68 6f 73 65 6e 20 | .apply.access.lists.to.a.chosen. |
ffa40 | 69 6e 74 65 72 66 61 63 65 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 42 61 62 65 6c 20 72 6f | interface.to.filter.the.Babel.ro |
ffa60 | 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 79 6f 75 20 61 70 | utes..This.command.allows.you.ap |
ffa80 | 70 6c 79 20 61 63 63 65 73 73 20 6c 69 73 74 73 20 74 6f 20 61 20 63 68 6f 73 65 6e 20 69 6e 74 | ply.access.lists.to.a.chosen.int |
ffaa0 | 65 72 66 61 63 65 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 52 49 50 20 70 61 74 68 2e 00 54 | erface.to.filter.the.RIP.path..T |
ffac0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 79 6f 75 20 61 70 70 6c 79 20 70 72 65 | his.command.allows.you.apply.pre |
ffae0 | 66 69 78 20 6c 69 73 74 73 20 74 6f 20 61 20 63 68 6f 73 65 6e 20 69 6e 74 65 72 66 61 63 65 20 | fix.lists.to.a.chosen.interface. |
ffb00 | 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 42 61 62 65 6c 20 72 6f 75 74 65 73 2e 00 54 68 69 73 | to.filter.the.Babel.routes..This |
ffb20 | 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 79 6f 75 20 61 70 70 6c 79 20 70 72 65 66 69 78 | .command.allows.you.apply.prefix |
ffb40 | 20 6c 69 73 74 73 20 74 6f 20 61 20 63 68 6f 73 65 6e 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 | .lists.to.a.chosen.interface.to. |
ffb60 | 66 69 6c 74 65 72 20 74 68 65 20 52 49 50 20 70 61 74 68 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | filter.the.RIP.path..This.comman |
ffb80 | 64 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 73 65 6c 65 63 74 20 61 20 73 70 65 63 69 66 69 | d.allows.you.to.select.a.specifi |
ffba0 | 63 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 20 77 68 65 6e 20 79 6f 75 20 6b | c.access.concentrator.when.you.k |
ffbc0 | 6e 6f 77 20 74 68 65 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 73 20 60 3c 6e | now.the.access.concentrators.`<n |
ffbe0 | 61 6d 65 3e 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 70 70 6c 69 65 73 20 72 6f 75 74 | ame>`..This.command.applies.rout |
ffc00 | 65 2d 6d 61 70 20 74 6f 20 73 65 6c 65 63 74 69 76 65 6c 79 20 75 6e 73 75 70 70 72 65 73 73 20 | e-map.to.selectively.unsuppress. |
ffc20 | 70 72 65 66 69 78 65 73 20 73 75 70 70 72 65 73 73 65 64 20 62 79 20 73 75 6d 6d 61 72 69 73 61 | prefixes.suppressed.by.summarisa |
ffc40 | 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 70 70 6c 69 65 73 20 74 68 65 20 41 | tion..This.command.applies.the.A |
ffc60 | 53 20 70 61 74 68 20 61 63 63 65 73 73 20 6c 69 73 74 20 66 69 6c 74 65 72 73 20 6e 61 6d 65 64 | S.path.access.list.filters.named |
ffc80 | 20 69 6e 20 3c 6e 61 6d 65 3e 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 | .in.<name>.to.the.specified.BGP. |
ffca0 | 6e 65 69 67 68 62 6f 72 20 74 6f 20 72 65 73 74 72 69 63 74 20 74 68 65 20 72 6f 75 74 69 6e 67 | neighbor.to.restrict.the.routing |
ffcc0 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 42 47 50 20 6c 65 61 72 6e 73 20 61 6e 64 | .information.that.BGP.learns.and |
ffce0 | 2f 6f 72 20 61 64 76 65 72 74 69 73 65 73 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 73 20 3a 63 | /or.advertises..The.arguments.:c |
ffd00 | 66 67 63 6d 64 3a 60 65 78 70 6f 72 74 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 69 6d 70 6f | fgcmd:`export`.and.:cfgcmd:`impo |
ffd20 | 72 74 60 20 73 70 65 63 69 66 79 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 | rt`.specify.the.direction.in.whi |
ffd40 | 63 68 20 74 68 65 20 41 53 20 70 61 74 68 20 61 63 63 65 73 73 20 6c 69 73 74 20 61 72 65 20 61 | ch.the.AS.path.access.list.are.a |
ffd60 | 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 70 70 6c 69 65 73 20 74 68 65 | pplied..This.command.applies.the |
ffd80 | 20 61 63 63 65 73 73 20 6c 69 73 74 20 66 69 6c 74 65 72 73 20 6e 61 6d 65 64 20 69 6e 20 3c 6e | .access.list.filters.named.in.<n |
ffda0 | 75 6d 62 65 72 3e 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 6e 65 69 67 | umber>.to.the.specified.BGP.neig |
ffdc0 | 68 62 6f 72 20 74 6f 20 72 65 73 74 72 69 63 74 20 74 68 65 20 72 6f 75 74 69 6e 67 20 69 6e 66 | hbor.to.restrict.the.routing.inf |
ffde0 | 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 42 47 50 20 6c 65 61 72 6e 73 20 61 6e 64 2f 6f 72 20 | ormation.that.BGP.learns.and/or. |
ffe00 | 61 64 76 65 72 74 69 73 65 73 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 73 20 3a 63 66 67 63 6d | advertises..The.arguments.:cfgcm |
ffe20 | 64 3a 60 65 78 70 6f 72 74 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 69 6d 70 6f 72 74 60 20 | d:`export`.and.:cfgcmd:`import`. |
ffe40 | 73 70 65 63 69 66 79 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 | specify.the.direction.in.which.t |
ffe60 | 68 65 20 61 63 63 65 73 73 20 6c 69 73 74 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 | he.access.list.are.applied..This |
ffe80 | 20 63 6f 6d 6d 61 6e 64 20 61 70 70 6c 69 65 73 20 74 68 65 20 70 72 66 65 66 69 78 20 6c 69 73 | .command.applies.the.prfefix.lis |
ffea0 | 74 20 66 69 6c 74 65 72 73 20 6e 61 6d 65 64 20 69 6e 20 3c 6e 61 6d 65 3e 20 74 6f 20 74 68 65 | t.filters.named.in.<name>.to.the |
ffec0 | 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 6e 65 69 67 68 62 6f 72 20 74 6f 20 72 65 73 74 72 | .specified.BGP.neighbor.to.restr |
ffee0 | 69 63 74 20 74 68 65 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 | ict.the.routing.information.that |
fff00 | 20 42 47 50 20 6c 65 61 72 6e 73 20 61 6e 64 2f 6f 72 20 61 64 76 65 72 74 69 73 65 73 2e 20 54 | .BGP.learns.and/or.advertises..T |
fff20 | 68 65 20 61 72 67 75 6d 65 6e 74 73 20 3a 63 66 67 63 6d 64 3a 60 65 78 70 6f 72 74 60 20 61 6e | he.arguments.:cfgcmd:`export`.an |
fff40 | 64 20 3a 63 66 67 63 6d 64 3a 60 69 6d 70 6f 72 74 60 20 73 70 65 63 69 66 79 20 74 68 65 20 64 | d.:cfgcmd:`import`.specify.the.d |
fff60 | 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 70 72 65 66 69 78 20 6c 69 73 | irection.in.which.the.prefix.lis |
fff80 | 74 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 70 70 6c | t.are.applied..This.command.appl |
fffa0 | 69 65 73 20 74 68 65 20 72 6f 75 74 65 20 6d 61 70 20 6e 61 6d 65 64 20 69 6e 20 3c 6e 61 6d 65 | ies.the.route.map.named.in.<name |
fffc0 | 3e 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 6e 65 69 67 68 62 6f 72 20 | >.to.the.specified.BGP.neighbor. |
fffe0 | 74 6f 20 63 6f 6e 74 72 6f 6c 20 61 6e 64 20 6d 6f 64 69 66 79 20 72 6f 75 74 69 6e 67 20 69 6e | to.control.and.modify.routing.in |
100000 | 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 69 73 20 65 78 63 68 61 6e 67 65 64 20 62 65 74 77 | formation.that.is.exchanged.betw |
100020 | 65 65 6e 20 70 65 65 72 73 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 73 20 3a 63 66 67 63 6d 64 | een.peers..The.arguments.:cfgcmd |
100040 | 3a 60 65 78 70 6f 72 74 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 69 6d 70 6f 72 74 60 20 73 | :`export`.and.:cfgcmd:`import`.s |
100060 | 70 65 63 69 66 79 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 | pecify.the.direction.in.which.th |
100080 | 65 20 72 6f 75 74 65 20 6d 61 70 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f | e.route.map.are.applied..This.co |
1000a0 | 6d 6d 61 6e 64 20 62 69 6e 64 20 73 70 65 63 69 66 69 63 20 70 65 65 72 20 74 6f 20 70 65 65 72 | mmand.bind.specific.peer.to.peer |
1000c0 | 20 67 72 6f 75 70 20 77 69 74 68 20 61 20 67 69 76 65 6e 20 6e 61 6d 65 2e 00 54 68 69 73 20 63 | .group.with.a.given.name..This.c |
1000e0 | 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 | ommand.can.be.used.to.filter.the |
100100 | 20 42 61 62 65 6c 20 72 6f 75 74 65 73 20 75 73 69 6e 67 20 61 63 63 65 73 73 20 6c 69 73 74 73 | .Babel.routes.using.access.lists |
100120 | 2e 20 3a 63 66 67 63 6d 64 3a 60 69 6e 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 6f 75 74 60 | ..:cfgcmd:`in`.and.:cfgcmd:`out` |
100140 | 20 74 68 69 73 20 69 73 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 | .this.is.the.direction.in.which. |
100160 | 74 68 65 20 61 63 63 65 73 73 20 6c 69 73 74 73 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 | the.access.lists.are.applied..Th |
100180 | 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 66 69 6c 74 65 72 | is.command.can.be.used.to.filter |
1001a0 | 20 74 68 65 20 42 61 62 65 6c 20 72 6f 75 74 65 73 20 75 73 69 6e 67 20 70 72 65 66 69 78 20 6c | .the.Babel.routes.using.prefix.l |
1001c0 | 69 73 74 73 2e 20 3a 63 66 67 63 6d 64 3a 60 69 6e 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 | ists..:cfgcmd:`in`.and.:cfgcmd:` |
1001e0 | 6f 75 74 60 20 74 68 69 73 20 69 73 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 | out`.this.is.the.direction.in.wh |
100200 | 69 63 68 20 74 68 65 20 70 72 65 66 69 78 20 6c 69 73 74 73 20 61 72 65 20 61 70 70 6c 69 65 64 | ich.the.prefix.lists.are.applied |
100220 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 66 69 | ..This.command.can.be.used.to.fi |
100240 | 6c 74 65 72 20 74 68 65 20 52 49 50 20 70 61 74 68 20 75 73 69 6e 67 20 61 63 63 65 73 73 20 6c | lter.the.RIP.path.using.access.l |
100260 | 69 73 74 73 2e 20 3a 63 66 67 63 6d 64 3a 60 69 6e 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 | ists..:cfgcmd:`in`.and.:cfgcmd:` |
100280 | 6f 75 74 60 20 74 68 69 73 20 69 73 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 | out`.this.is.the.direction.in.wh |
1002a0 | 69 63 68 20 74 68 65 20 61 63 63 65 73 73 20 6c 69 73 74 73 20 61 72 65 20 61 70 70 6c 69 65 64 | ich.the.access.lists.are.applied |
1002c0 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 66 69 | ..This.command.can.be.used.to.fi |
1002e0 | 6c 74 65 72 20 74 68 65 20 52 49 50 20 70 61 74 68 20 75 73 69 6e 67 20 70 72 65 66 69 78 20 6c | lter.the.RIP.path.using.prefix.l |
100300 | 69 73 74 73 2e 20 3a 63 66 67 63 6d 64 3a 60 69 6e 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 | ists..:cfgcmd:`in`.and.:cfgcmd:` |
100320 | 6f 75 74 60 20 74 68 69 73 20 69 73 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 | out`.this.is.the.direction.in.wh |
100340 | 69 63 68 20 74 68 65 20 70 72 65 66 69 78 20 6c 69 73 74 73 20 61 72 65 20 61 70 70 6c 69 65 64 | ich.the.prefix.lists.are.applied |
100360 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 69 74 68 20 | ..This.command.can.be.used.with. |
100380 | 70 72 65 76 69 6f 75 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 73 20 64 65 66 61 75 6c 74 | previous.command.to.sets.default |
1003a0 | 20 52 49 50 20 64 69 73 74 61 6e 63 65 20 74 6f 20 73 70 65 63 69 66 69 65 64 20 76 61 6c 75 65 | .RIP.distance.to.specified.value |
1003c0 | 20 77 68 65 6e 20 74 68 65 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 | .when.the.route.source.IP.addres |
1003e0 | 73 20 6d 61 74 63 68 65 73 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 20 61 | s.matches.the.specified.prefix.a |
100400 | 6e 64 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 63 63 65 73 73 2d 6c 69 73 74 2e 00 54 68 | nd.the.specified.access-list..Th |
100420 | 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 | is.command.change.distance.value |
100440 | 20 6f 66 20 42 47 50 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 73 20 61 72 65 20 74 68 65 20 64 | .of.BGP..The.arguments.are.the.d |
100460 | 69 73 74 61 6e 63 65 20 76 61 6c 75 65 73 20 66 6f 72 20 65 78 74 65 72 6e 61 6c 20 72 6f 75 74 | istance.values.for.external.rout |
100480 | 65 73 2c 20 69 6e 74 65 72 6e 61 6c 20 72 6f 75 74 65 73 20 61 6e 64 20 6c 6f 63 61 6c 20 72 6f | es,.internal.routes.and.local.ro |
1004a0 | 75 74 65 73 20 72 65 73 70 65 63 74 69 76 65 6c 79 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 | utes.respectively..The.distance. |
1004c0 | 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | range.is.1.to.255..This.command. |
1004e0 | 63 68 61 6e 67 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 20 6f 66 20 4f 53 50 46 20 67 6c | change.distance.value.of.OSPF.gl |
100500 | 6f 62 61 6c 6c 79 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 | obally..The.distance.range.is.1. |
100520 | 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 20 64 69 73 74 | to.255..This.command.change.dist |
100540 | 61 6e 63 65 20 76 61 6c 75 65 20 6f 66 20 4f 53 50 46 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 | ance.value.of.OSPF..The.argument |
100560 | 73 20 61 72 65 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 73 20 66 6f 72 20 65 78 | s.are.the.distance.values.for.ex |
100580 | 74 65 72 6e 61 6c 20 72 6f 75 74 65 73 2c 20 69 6e 74 65 72 2d 61 72 65 61 20 72 6f 75 74 65 73 | ternal.routes,.inter-area.routes |
1005a0 | 20 61 6e 64 20 69 6e 74 72 61 2d 61 72 65 61 20 72 6f 75 74 65 73 20 72 65 73 70 65 63 74 69 76 | .and.intra-area.routes.respectiv |
1005c0 | 65 6c 79 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 | ely..The.distance.range.is.1.to. |
1005e0 | 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 20 64 69 73 74 61 6e 63 | 255..This.command.change.distanc |
100600 | 65 20 76 61 6c 75 65 20 6f 66 20 4f 53 50 46 76 33 20 67 6c 6f 62 61 6c 6c 79 2e 20 54 68 65 20 | e.value.of.OSPFv3.globally..The. |
100620 | 64 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 | distance.range.is.1.to.255..This |
100640 | 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 20 6f | .command.change.distance.value.o |
100660 | 66 20 4f 53 50 46 76 33 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 73 20 61 72 65 20 74 68 65 20 | f.OSPFv3..The.arguments.are.the. |
100680 | 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 73 20 66 6f 72 20 65 78 74 65 72 6e 61 6c 20 72 6f 75 | distance.values.for.external.rou |
1006a0 | 74 65 73 2c 20 69 6e 74 65 72 2d 61 72 65 61 20 72 6f 75 74 65 73 20 61 6e 64 20 69 6e 74 72 61 | tes,.inter-area.routes.and.intra |
1006c0 | 2d 61 72 65 61 20 72 6f 75 74 65 73 20 72 65 73 70 65 63 74 69 76 65 6c 79 2e 20 54 68 65 20 64 | -area.routes.respectively..The.d |
1006e0 | 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 | istance.range.is.1.to.255..This. |
100700 | 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 | command.change.the.distance.valu |
100720 | 65 20 6f 66 20 52 49 50 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 | e.of.RIP..The.distance.range.is. |
100740 | 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 73 20 74 | 1.to.255..This.command.changes.t |
100760 | 68 65 20 65 42 47 50 20 62 65 68 61 76 69 6f 72 20 6f 66 20 46 52 52 2e 20 42 79 20 64 65 66 61 | he.eBGP.behavior.of.FRR..By.defa |
100780 | 75 6c 74 20 46 52 52 20 65 6e 61 62 6c 65 73 20 3a 72 66 63 3a 60 38 32 31 32 60 20 66 75 6e 63 | ult.FRR.enables.:rfc:`8212`.func |
1007a0 | 74 69 6f 6e 61 6c 69 74 79 20 77 68 69 63 68 20 61 66 66 65 63 74 73 20 68 6f 77 20 65 42 47 50 | tionality.which.affects.how.eBGP |
1007c0 | 20 72 6f 75 74 65 73 20 61 72 65 20 61 64 76 65 72 74 69 73 65 64 2c 20 6e 61 6d 65 6c 79 20 6e | .routes.are.advertised,.namely.n |
1007e0 | 6f 20 72 6f 75 74 65 73 20 61 72 65 20 61 64 76 65 72 74 69 73 65 64 20 61 63 72 6f 73 73 20 65 | o.routes.are.advertised.across.e |
100800 | 42 47 50 20 73 65 73 73 69 6f 6e 73 20 77 69 74 68 6f 75 74 20 73 6f 6d 65 20 73 6f 72 74 20 6f | BGP.sessions.without.some.sort.o |
100820 | 66 20 65 67 72 65 73 73 20 72 6f 75 74 65 2d 6d 61 70 2f 70 6f 6c 69 63 79 20 69 6e 20 70 6c 61 | f.egress.route-map/policy.in.pla |
100840 | 63 65 2e 20 49 6e 20 56 79 4f 53 20 68 6f 77 65 76 65 72 20 77 65 20 68 61 76 65 20 74 68 69 73 | ce..In.VyOS.however.we.have.this |
100860 | 20 52 46 43 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 64 69 73 61 62 6c 65 64 20 62 79 20 64 | .RFC.functionality.disabled.by.d |
100880 | 65 66 61 75 6c 74 20 73 6f 20 74 68 61 74 20 77 65 20 63 61 6e 20 70 72 65 73 65 72 76 65 20 62 | efault.so.that.we.can.preserve.b |
1008a0 | 61 63 6b 77 61 72 64 73 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 20 77 69 74 68 20 6f 6c 64 65 | ackwards.compatibility.with.olde |
1008c0 | 72 20 76 65 72 73 69 6f 6e 73 20 6f 66 20 56 79 4f 53 2e 20 57 69 74 68 20 74 68 69 73 20 6f 70 | r.versions.of.VyOS..With.this.op |
1008e0 | 74 69 6f 6e 20 6f 6e 65 20 63 61 6e 20 65 6e 61 62 6c 65 20 3a 72 66 63 3a 60 38 32 31 32 60 20 | tion.one.can.enable.:rfc:`8212`. |
100900 | 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 74 6f 20 6f 70 65 72 61 74 65 2e 00 54 68 69 73 20 63 | functionality.to.operate..This.c |
100920 | 6f 6d 6d 61 6e 64 20 63 6f 6e 66 69 67 75 72 65 73 20 70 61 64 64 69 6e 67 20 6f 6e 20 68 65 6c | ommand.configures.padding.on.hel |
100940 | 6c 6f 20 70 61 63 6b 65 74 73 20 74 6f 20 61 63 63 6f 6d 6d 6f 64 61 74 65 20 61 73 79 6d 6d 65 | lo.packets.to.accommodate.asymme |
100960 | 74 72 69 63 61 6c 20 6d 61 78 69 6d 75 6d 20 74 72 61 6e 73 66 65 72 20 75 6e 69 74 73 20 28 4d | trical.maximum.transfer.units.(M |
100980 | 54 55 73 29 20 66 72 6f 6d 20 64 69 66 66 65 72 65 6e 74 20 68 6f 73 74 73 20 61 73 20 64 65 73 | TUs).from.different.hosts.as.des |
1009a0 | 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 37 31 39 60 2e 20 54 68 69 73 20 68 65 6c 70 | cribed.in.:rfc:`3719`..This.help |
1009c0 | 73 20 74 6f 20 70 72 65 76 65 6e 74 20 61 20 70 72 65 6d 61 74 75 72 65 20 61 64 6a 61 63 65 6e | s.to.prevent.a.premature.adjacen |
1009e0 | 63 79 20 55 70 20 73 74 61 74 65 20 77 68 65 6e 20 6f 6e 65 20 72 6f 75 74 69 6e 67 20 64 65 76 | cy.Up.state.when.one.routing.dev |
100a00 | 69 63 65 73 20 4d 54 55 20 64 6f 65 73 20 6e 6f 74 20 6d 65 65 74 20 74 68 65 20 72 65 71 75 69 | ices.MTU.does.not.meet.the.requi |
100a20 | 72 65 6d 65 6e 74 73 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 74 68 65 20 61 64 6a 61 63 65 6e | rements.to.establish.the.adjacen |
100a40 | 63 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 | cy..This.command.configures.the. |
100a60 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 70 61 73 73 77 6f 72 64 20 66 6f 72 20 74 68 65 20 | authentication.password.for.the. |
100a80 | 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 6f 6e 66 69 67 75 72 | interface..This.command.configur |
100aa0 | 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 73 69 7a 65 20 6f 66 20 67 65 6e 65 72 61 74 65 64 | es.the.maximum.size.of.generated |
100ac0 | 20 3a 61 62 62 72 3a 60 4c 53 50 73 20 28 4c 69 6e 6b 20 53 74 61 74 65 20 50 44 55 73 29 60 2c | .:abbr:`LSPs.(Link.State.PDUs)`, |
100ae0 | 20 69 6e 20 62 79 74 65 73 2e 20 54 68 65 20 73 69 7a 65 20 72 61 6e 67 65 20 69 73 20 31 32 38 | .in.bytes..The.size.range.is.128 |
100b00 | 20 74 6f 20 34 33 35 32 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 6f 6e 66 69 67 75 72 65 | .to.4352..This.command.configure |
100b20 | 73 20 74 68 65 20 70 61 73 73 69 76 65 20 6d 6f 64 65 20 66 6f 72 20 74 68 69 73 20 69 6e 74 65 | s.the.passive.mode.for.this.inte |
100b40 | 72 66 61 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 20 6e 65 | rface..This.command.creates.a.ne |
100b60 | 77 20 6e 65 69 67 68 62 6f 72 20 77 68 6f 73 65 20 72 65 6d 6f 74 65 2d 61 73 20 69 73 20 3c 6e | w.neighbor.whose.remote-as.is.<n |
100b80 | 61 73 6e 3e 2e 20 54 68 65 20 6e 65 69 67 68 62 6f 72 20 61 64 64 72 65 73 73 20 63 61 6e 20 62 | asn>..The.neighbor.address.can.b |
100ba0 | 65 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 72 20 61 6e 20 49 50 76 36 20 61 64 64 | e.an.IPv4.address.or.an.IPv6.add |
100bc0 | 72 65 73 73 20 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 75 73 65 20 66 6f 72 20 | ress.or.an.interface.to.use.for. |
100be0 | 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 54 68 65 20 63 6f 6d 6d 61 6e 64 20 69 73 20 61 | the.connection..The.command.is.a |
100c00 | 70 70 6c 69 63 61 62 6c 65 20 66 6f 72 20 70 65 65 72 20 61 6e 64 20 70 65 65 72 20 67 72 6f 75 | pplicable.for.peer.and.peer.grou |
100c20 | 70 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 20 6e 65 77 20 72 6f | p..This.command.creates.a.new.ro |
100c40 | 75 74 65 2d 6d 61 70 20 70 6f 6c 69 63 79 2c 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 3c 74 | ute-map.policy,.identified.by.<t |
100c60 | 65 78 74 3e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 20 6e 65 77 | ext>..This.command.creates.a.new |
100c80 | 20 72 75 6c 65 20 69 6e 20 74 68 65 20 49 50 76 36 20 61 63 63 65 73 73 20 6c 69 73 74 20 61 6e | .rule.in.the.IPv6.access.list.an |
100ca0 | 64 20 64 65 66 69 6e 65 73 20 61 6e 20 61 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | d.defines.an.action..This.comman |
100cc0 | 64 20 63 72 65 61 74 65 73 20 61 20 6e 65 77 20 72 75 6c 65 20 69 6e 20 74 68 65 20 49 50 76 36 | d.creates.a.new.rule.in.the.IPv6 |
100ce0 | 20 70 72 65 66 69 78 2d 6c 69 73 74 20 61 6e 64 20 64 65 66 69 6e 65 73 20 61 6e 20 61 63 74 69 | .prefix-list.and.defines.an.acti |
100d00 | 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 20 6e 65 77 20 72 | on..This.command.creates.a.new.r |
100d20 | 75 6c 65 20 69 6e 20 74 68 65 20 61 63 63 65 73 73 20 6c 69 73 74 20 61 6e 64 20 64 65 66 69 6e | ule.in.the.access.list.and.defin |
100d40 | 65 73 20 61 6e 20 61 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 | es.an.action..This.command.creat |
100d60 | 65 73 20 61 20 6e 65 77 20 72 75 6c 65 20 69 6e 20 74 68 65 20 70 72 65 66 69 78 2d 6c 69 73 74 | es.a.new.rule.in.the.prefix-list |
100d80 | 20 61 6e 64 20 64 65 66 69 6e 65 73 20 61 6e 20 61 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d | .and.defines.an.action..This.com |
100da0 | 6d 61 6e 64 20 63 72 65 61 74 65 73 20 74 68 65 20 6e 65 77 20 49 50 76 36 20 61 63 63 65 73 73 | mand.creates.the.new.IPv6.access |
100dc0 | 20 6c 69 73 74 2c 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 3c 74 65 78 74 3e 00 54 68 69 73 | .list,.identified.by.<text>.This |
100de0 | 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 74 68 65 20 6e 65 77 20 49 50 76 36 20 70 72 | .command.creates.the.new.IPv6.pr |
100e00 | 65 66 69 78 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2c 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 | efix-list.policy,.identified.by. |
100e20 | 3c 74 65 78 74 3e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 74 68 65 | <text>..This.command.creates.the |
100e40 | 20 6e 65 77 20 61 63 63 65 73 73 20 6c 69 73 74 20 70 6f 6c 69 63 79 2c 20 77 68 65 72 65 20 3c | .new.access.list.policy,.where.< |
100e60 | 61 63 6c 5f 6e 75 6d 62 65 72 3e 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 20 66 72 6f | acl_number>.must.be.a.number.fro |
100e80 | 6d 20 31 20 74 6f 20 32 36 39 39 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 | m.1.to.2699..This.command.create |
100ea0 | 73 20 74 68 65 20 6e 65 77 20 70 72 65 66 69 78 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2c 20 69 64 | s.the.new.prefix-list.policy,.id |
100ec0 | 65 6e 74 69 66 69 65 64 20 62 79 20 3c 74 65 78 74 3e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | entified.by.<text>..This.command |
100ee0 | 20 64 65 66 69 6e 65 73 20 61 20 6e 65 77 20 70 65 65 72 20 67 72 6f 75 70 2e 20 59 6f 75 20 63 | .defines.a.new.peer.group..You.c |
100f00 | 61 6e 20 73 70 65 63 69 66 79 20 74 6f 20 74 68 65 20 67 72 6f 75 70 20 74 68 65 20 73 61 6d 65 | an.specify.to.the.group.the.same |
100f20 | 20 70 61 72 61 6d 65 74 65 72 73 20 74 68 61 74 20 79 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 | .parameters.that.you.can.specify |
100f40 | 20 66 6f 72 20 73 70 65 63 69 66 69 63 20 6e 65 69 67 68 62 6f 72 73 2e 00 54 68 69 73 20 63 6f | .for.specific.neighbors..This.co |
100f60 | 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 6d 61 74 63 68 69 6e 67 20 70 61 72 61 6d 65 74 65 72 | mmand.defines.matching.parameter |
100f80 | 73 20 66 6f 72 20 49 50 76 36 20 61 63 63 65 73 73 20 6c 69 73 74 20 72 75 6c 65 2e 20 4d 61 74 | s.for.IPv6.access.list.rule..Mat |
100fa0 | 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 63 6f 75 6c 64 20 62 65 20 61 70 70 6c 69 65 64 20 | ching.criteria.could.be.applied. |
100fc0 | 74 6f 20 73 6f 75 72 63 65 20 70 61 72 61 6d 65 74 65 72 73 3a 00 54 68 69 73 20 63 6f 6d 6d 61 | to.source.parameters:.This.comma |
100fe0 | 6e 64 20 64 65 66 69 6e 65 73 20 6d 61 74 63 68 69 6e 67 20 70 61 72 61 6d 65 74 65 72 73 20 66 | nd.defines.matching.parameters.f |
101000 | 6f 72 20 61 63 63 65 73 73 20 6c 69 73 74 20 72 75 6c 65 2e 20 4d 61 74 63 68 69 6e 67 20 63 72 | or.access.list.rule..Matching.cr |
101020 | 69 74 65 72 69 61 20 63 6f 75 6c 64 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 64 65 73 74 69 | iteria.could.be.applied.to.desti |
101040 | 6e 61 74 69 6f 6e 20 6f 72 20 73 6f 75 72 63 65 20 70 61 72 61 6d 65 74 65 72 73 3a 00 54 68 69 | nation.or.source.parameters:.Thi |
101060 | 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 49 53 2d 49 53 20 72 6f 75 74 | s.command.defines.the.IS-IS.rout |
101080 | 65 72 20 62 65 68 61 76 69 6f 72 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 | er.behavior:.This.command.define |
1010a0 | 73 20 74 68 65 20 61 63 63 75 6d 75 6c 61 74 65 64 20 70 65 6e 61 6c 74 79 20 61 6d 6f 75 6e 74 | s.the.accumulated.penalty.amount |
1010c0 | 20 61 74 20 77 68 69 63 68 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 72 65 2d 61 64 76 65 72 74 | .at.which.the.route.is.re-advert |
1010e0 | 69 73 65 64 2e 20 54 68 65 20 70 65 6e 61 6c 74 79 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 | ised..The.penalty.range.is.1.to. |
101100 | 32 30 30 30 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 | 20000..This.command.defines.the. |
101120 | 61 63 63 75 6d 75 6c 61 74 65 64 20 70 65 6e 61 6c 74 79 20 61 6d 6f 75 6e 74 20 61 74 20 77 68 | accumulated.penalty.amount.at.wh |
101140 | 69 63 68 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 73 75 70 70 72 65 73 73 65 64 2e 20 54 68 65 | ich.the.route.is.suppressed..The |
101160 | 20 70 65 6e 61 6c 74 79 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 30 30 30 30 2e 00 54 68 | .penalty.range.is.1.to.20000..Th |
101180 | 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 | is.command.defines.the.amount.of |
1011a0 | 20 74 69 6d 65 20 69 6e 20 6d 69 6e 75 74 65 73 20 61 66 74 65 72 20 77 68 69 63 68 20 61 20 70 | .time.in.minutes.after.which.a.p |
1011c0 | 65 6e 61 6c 74 79 20 69 73 20 72 65 64 75 63 65 64 20 62 79 20 68 61 6c 66 2e 20 54 68 65 20 74 | enalty.is.reduced.by.half..The.t |
1011e0 | 69 6d 65 72 20 72 61 6e 67 65 20 69 73 20 31 30 20 74 6f 20 34 35 20 6d 69 6e 75 74 65 73 2e 00 | imer.range.is.10.to.45.minutes.. |
101200 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d | This.command.defines.the.maximum |
101220 | 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 72 61 6c 6c 65 6c 20 72 6f 75 74 65 73 20 74 68 61 74 20 | .number.of.parallel.routes.that. |
101240 | 74 68 65 20 42 47 50 20 63 61 6e 20 73 75 70 70 6f 72 74 2e 20 49 6e 20 6f 72 64 65 72 20 66 6f | the.BGP.can.support..In.order.fo |
101260 | 72 20 42 47 50 20 74 6f 20 75 73 65 20 74 68 65 20 73 65 63 6f 6e 64 20 70 61 74 68 2c 20 74 68 | r.BGP.to.use.the.second.path,.th |
101280 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 61 74 74 72 69 62 75 74 65 73 20 68 61 76 65 20 74 6f 20 6d | e.following.attributes.have.to.m |
1012a0 | 61 74 63 68 3a 20 57 65 69 67 68 74 2c 20 4c 6f 63 61 6c 20 50 72 65 66 65 72 65 6e 63 65 2c 20 | atch:.Weight,.Local.Preference,. |
1012c0 | 41 53 20 50 61 74 68 20 28 62 6f 74 68 20 41 53 20 6e 75 6d 62 65 72 20 61 6e 64 20 41 53 20 70 | AS.Path.(both.AS.number.and.AS.p |
1012e0 | 61 74 68 20 6c 65 6e 67 74 68 29 2c 20 4f 72 69 67 69 6e 20 63 6f 64 65 2c 20 4d 45 44 2c 20 49 | ath.length),.Origin.code,.MED,.I |
101300 | 47 50 20 6d 65 74 72 69 63 2e 20 41 6c 73 6f 2c 20 74 68 65 20 6e 65 78 74 20 68 6f 70 20 61 64 | GP.metric..Also,.the.next.hop.ad |
101320 | 64 72 65 73 73 20 66 6f 72 20 65 61 63 68 20 70 61 74 68 20 6d 75 73 74 20 62 65 20 64 69 66 66 | dress.for.each.path.must.be.diff |
101340 | 65 72 65 6e 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 | erent..This.command.defines.the. |
101360 | 6d 61 78 69 6d 75 6d 20 74 69 6d 65 20 69 6e 20 6d 69 6e 75 74 65 73 20 74 68 61 74 20 61 20 72 | maximum.time.in.minutes.that.a.r |
101380 | 6f 75 74 65 20 69 73 20 73 75 70 70 72 65 73 73 65 64 2e 20 54 68 65 20 74 69 6d 65 72 20 72 61 | oute.is.suppressed..The.timer.ra |
1013a0 | 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 20 6d 69 6e 75 74 65 73 2e 00 54 68 69 73 20 63 6f | nge.is.1.to.255.minutes..This.co |
1013c0 | 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 20 74 68 65 20 70 65 65 72 20 6f 72 20 70 65 65 72 20 67 | mmand.disable.the.peer.or.peer.g |
1013e0 | 72 6f 75 70 2e 20 54 6f 20 72 65 65 6e 61 62 6c 65 20 74 68 65 20 70 65 65 72 20 75 73 65 20 74 | roup..To.reenable.the.peer.use.t |
101400 | 68 65 20 64 65 6c 65 74 65 20 66 6f 72 6d 20 6f 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2e 00 | he.delete.form.of.this.command.. |
101420 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 49 47 50 2d 4c 44 50 20 73 79 | This.command.disables.IGP-LDP.sy |
101440 | 6e 63 20 66 6f 72 20 74 68 69 73 20 73 70 65 63 69 66 69 63 20 69 6e 74 65 72 66 61 63 65 2e 00 | nc.for.this.specific.interface.. |
101460 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 54 68 72 65 65 2d 57 61 79 20 | This.command.disables.Three-Way. |
101480 | 48 61 6e 64 73 68 61 6b 65 20 66 6f 72 20 50 32 50 20 61 64 6a 61 63 65 6e 63 69 65 73 20 77 68 | Handshake.for.P2P.adjacencies.wh |
1014a0 | 69 63 68 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 33 30 33 60 2e 20 54 68 | ich.described.in.:rfc:`5303`..Th |
1014c0 | 72 65 65 2d 57 61 79 20 48 61 6e 64 73 68 61 6b 65 20 69 73 20 65 6e 61 62 6c 65 64 20 62 79 20 | ree-Way.Handshake.is.enabled.by. |
1014e0 | 64 65 66 61 75 6c 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 63 | default..This.command.disables.c |
101500 | 68 65 63 6b 20 6f 66 20 74 68 65 20 4d 54 55 20 76 61 6c 75 65 20 69 6e 20 74 68 65 20 4f 53 50 | heck.of.the.MTU.value.in.the.OSP |
101520 | 46 20 44 42 44 20 70 61 63 6b 65 74 73 2e 20 54 68 75 73 2c 20 75 73 65 20 6f 66 20 74 68 69 73 | F.DBD.packets..Thus,.use.of.this |
101540 | 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 68 65 20 4f 53 50 46 20 61 64 6a 61 63 65 6e | .command.allows.the.OSPF.adjacen |
101560 | 63 79 20 74 6f 20 72 65 61 63 68 20 74 68 65 20 46 55 4c 4c 20 73 74 61 74 65 20 65 76 65 6e 20 | cy.to.reach.the.FULL.state.even. |
101580 | 74 68 6f 75 67 68 20 74 68 65 72 65 20 69 73 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 4d 54 55 | though.there.is.an.interface.MTU |
1015a0 | 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 77 6f 20 4f 53 50 46 20 72 6f 75 74 65 | .mismatch.between.two.OSPF.route |
1015c0 | 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 69 74 2e 00 54 68 | rs..This.command.disables.it..Th |
1015e0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 72 6f 75 74 65 20 72 65 66 6c 65 63 | is.command.disables.route.reflec |
101600 | 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 20 63 6c 69 | tion.between.route.reflector.cli |
101620 | 65 6e 74 73 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 74 68 65 20 63 6c 69 65 6e 74 73 20 6f 66 | ents..By.default,.the.clients.of |
101640 | 20 61 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 20 61 72 65 20 6e 6f 74 20 72 65 71 75 69 | .a.route.reflector.are.not.requi |
101660 | 72 65 64 20 74 6f 20 62 65 20 66 75 6c 6c 79 20 6d 65 73 68 65 64 20 61 6e 64 20 74 68 65 20 72 | red.to.be.fully.meshed.and.the.r |
101680 | 6f 75 74 65 73 20 66 72 6f 6d 20 61 20 63 6c 69 65 6e 74 20 61 72 65 20 72 65 66 6c 65 63 74 65 | outes.from.a.client.are.reflecte |
1016a0 | 64 20 74 6f 20 6f 74 68 65 72 20 63 6c 69 65 6e 74 73 2e 20 48 6f 77 65 76 65 72 2c 20 69 66 20 | d.to.other.clients..However,.if. |
1016c0 | 74 68 65 20 63 6c 69 65 6e 74 73 20 61 72 65 20 66 75 6c 6c 79 20 6d 65 73 68 65 64 2c 20 72 6f | the.clients.are.fully.meshed,.ro |
1016e0 | 75 74 65 20 72 65 66 6c 65 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 72 65 71 75 69 72 65 64 2e 20 | ute.reflection.is.not.required.. |
101700 | 49 6e 20 74 68 69 73 20 63 61 73 65 2c 20 75 73 65 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 6e | In.this.case,.use.the.:cfgcmd:`n |
101720 | 6f 2d 63 6c 69 65 6e 74 2d 74 6f 2d 63 6c 69 65 6e 74 2d 72 65 66 6c 65 63 74 69 6f 6e 60 20 63 | o-client-to-client-reflection`.c |
101740 | 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 20 63 6c 69 65 6e 74 2d 74 6f 2d 63 6c 69 65 | ommand.to.disable.client-to-clie |
101760 | 6e 74 20 72 65 66 6c 65 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 | nt.reflection..This.command.disa |
101780 | 62 6c 65 73 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 | bles.split-horizon.on.the.interf |
1017a0 | 61 63 65 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 61 | ace..By.default,.VyOS.does.not.a |
1017c0 | 64 76 65 72 74 69 73 65 20 52 49 50 20 72 6f 75 74 65 73 20 6f 75 74 20 74 68 65 20 69 6e 74 65 | dvertise.RIP.routes.out.the.inte |
1017e0 | 72 66 61 63 65 20 6f 76 65 72 20 77 68 69 63 68 20 74 68 65 79 20 77 65 72 65 20 6c 65 61 72 6e | rface.over.which.they.were.learn |
101800 | 65 64 20 28 73 70 6c 69 74 20 68 6f 72 69 7a 6f 6e 29 2e 33 00 54 68 69 73 20 63 6f 6d 6d 61 6e | ed.(split.horizon).3.This.comman |
101820 | 64 20 64 69 73 61 62 6c 65 73 20 74 68 65 20 6c 6f 61 64 20 73 68 61 72 69 6e 67 20 61 63 72 6f | d.disables.the.load.sharing.acro |
101840 | 73 73 20 6d 75 6c 74 69 70 6c 65 20 4c 46 41 20 62 61 63 6b 75 70 73 2e 00 54 68 69 73 20 63 6f | ss.multiple.LFA.backups..This.co |
101860 | 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 42 47 50 20 64 61 6d 70 65 6e 65 64 20 72 6f 75 74 | mmand.displays.BGP.dampened.rout |
101880 | 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 42 47 50 20 72 65 | es..This.command.displays.BGP.re |
1018a0 | 63 65 69 76 65 64 2d 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 61 63 63 65 70 74 65 64 20 | ceived-routes.that.are.accepted. |
1018c0 | 61 66 74 65 72 20 66 69 6c 74 65 72 69 6e 67 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 | after.filtering..This.command.di |
1018e0 | 73 70 6c 61 79 73 20 42 47 50 20 72 6f 75 74 65 73 20 61 64 76 65 72 74 69 73 65 64 20 74 6f 20 | splays.BGP.routes.advertised.to. |
101900 | 61 20 6e 65 69 67 68 62 6f 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 | a.neighbor..This.command.display |
101920 | 73 20 42 47 50 20 72 6f 75 74 65 73 20 61 6c 6c 6f 77 65 64 20 62 79 20 74 68 65 20 73 70 65 63 | s.BGP.routes.allowed.by.the.spec |
101940 | 69 66 69 65 64 20 41 53 20 50 61 74 68 20 61 63 63 65 73 73 20 6c 69 73 74 2e 00 54 68 69 73 20 | ified.AS.Path.access.list..This. |
101960 | 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 42 47 50 20 72 6f 75 74 65 73 20 6f 72 69 67 | command.displays.BGP.routes.orig |
101980 | 69 6e 61 74 69 6e 67 20 66 72 6f 6d 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 6e | inating.from.the.specified.BGP.n |
1019a0 | 65 69 67 68 62 6f 72 20 62 65 66 6f 72 65 20 69 6e 62 6f 75 6e 64 20 70 6f 6c 69 63 79 20 69 73 | eighbor.before.inbound.policy.is |
1019c0 | 20 61 70 70 6c 69 65 64 2e 20 54 6f 20 75 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 6e | .applied..To.use.this.command.in |
1019e0 | 62 6f 75 6e 64 20 73 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 75 73 74 20 | bound.soft.reconfiguration.must. |
101a00 | 62 65 20 65 6e 61 62 6c 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 | be.enabled..This.command.display |
101a20 | 73 20 4c 53 41 73 20 69 6e 20 4d 61 78 41 67 65 20 6c 69 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d | s.LSAs.in.MaxAge.list..This.comm |
101a40 | 61 6e 64 20 64 69 73 70 6c 61 79 73 20 52 49 50 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f | and.displays.RIP.routes..This.co |
101a60 | 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 61 20 64 61 74 61 62 61 73 65 20 63 6f 6e 74 65 6e | mmand.displays.a.database.conten |
101a80 | 74 73 20 66 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 6c 69 6e 6b 20 61 64 76 65 72 74 69 73 65 | ts.for.a.specific.link.advertise |
101aa0 | 6d 65 6e 74 20 74 79 70 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 | ment.type..This.command.displays |
101ac0 | 20 61 20 73 75 6d 6d 61 72 79 20 74 61 62 6c 65 20 77 69 74 68 20 61 20 64 61 74 61 62 61 73 65 | .a.summary.table.with.a.database |
101ae0 | 20 63 6f 6e 74 65 6e 74 73 20 28 4c 53 41 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 | .contents.(LSA)..This.command.di |
101b00 | 73 70 6c 61 79 73 20 61 20 74 61 62 6c 65 20 6f 66 20 70 61 74 68 73 20 74 6f 20 61 72 65 61 20 | splays.a.table.of.paths.to.area. |
101b20 | 62 6f 75 6e 64 61 72 79 20 61 6e 64 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 62 | boundary.and.autonomous.system.b |
101b40 | 6f 75 6e 64 61 72 79 20 72 6f 75 74 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 | oundary.routers..This.command.di |
101b60 | 73 70 6c 61 79 73 20 61 6c 6c 20 65 6e 74 72 69 65 73 20 69 6e 20 42 47 50 20 72 6f 75 74 69 6e | splays.all.entries.in.BGP.routin |
101b80 | 67 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 64 | g.table..This.command.displays.d |
101ba0 | 61 6d 70 65 6e 65 64 20 72 6f 75 74 65 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 42 47 50 | ampened.routes.received.from.BGP |
101bc0 | 20 6e 65 69 67 68 62 6f 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 | .neighbor..This.command.displays |
101be0 | 20 65 78 74 65 72 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 72 65 64 69 73 74 72 69 62 75 | .external.information.redistribu |
101c00 | 74 65 64 20 69 6e 74 6f 20 4f 53 50 46 76 33 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 | ted.into.OSPFv3.This.command.dis |
101c20 | 70 6c 61 79 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 42 47 50 20 72 6f 75 74 | plays.information.about.BGP.rout |
101c40 | 65 73 20 77 68 6f 73 65 20 41 53 20 70 61 74 68 20 6d 61 74 63 68 65 73 20 74 68 65 20 73 70 65 | es.whose.AS.path.matches.the.spe |
101c60 | 63 69 66 69 65 64 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 2e 00 54 68 69 73 20 | cified.regular.expression..This. |
101c80 | 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f | command.displays.information.abo |
101ca0 | 75 74 20 66 6c 61 70 70 69 6e 67 20 42 47 50 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d | ut.flapping.BGP.routes..This.com |
101cc0 | 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 | mand.displays.information.about. |
101ce0 | 74 68 65 20 70 61 72 74 69 63 75 6c 61 72 20 65 6e 74 72 79 20 69 6e 20 74 68 65 20 42 47 50 20 | the.particular.entry.in.the.BGP. |
101d00 | 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 | routing.table..This.command.disp |
101d20 | 6c 61 79 73 20 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 70 65 72 6d 69 74 74 65 64 20 62 | lays.routes.that.are.permitted.b |
101d40 | 79 20 74 68 65 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 79 20 6c 69 73 74 2e 00 54 68 69 73 20 63 | y.the.BGP.community.list..This.c |
101d60 | 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 72 6f 75 74 65 73 20 74 68 61 74 20 62 65 6c 6f | ommand.displays.routes.that.belo |
101d80 | 6e 67 20 74 6f 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 69 65 73 2e | ng.to.specified.BGP.communities. |
101da0 | 20 56 61 6c 69 64 20 76 61 6c 75 65 20 69 73 20 61 20 63 6f 6d 6d 75 6e 69 74 79 20 6e 75 6d 62 | .Valid.value.is.a.community.numb |
101dc0 | 65 72 20 69 6e 20 74 68 65 20 72 61 6e 67 65 20 66 72 6f 6d 20 31 20 74 6f 20 34 32 39 34 39 36 | er.in.the.range.from.1.to.429496 |
101de0 | 37 32 30 30 2c 20 6f 72 20 41 41 3a 4e 4e 20 28 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 | 7200,.or.AA:NN.(autonomous.syste |
101e00 | 6d 2d 63 6f 6d 6d 75 6e 69 74 79 20 6e 75 6d 62 65 72 2f 32 2d 62 79 74 65 20 6e 75 6d 62 65 72 | m-community.number/2-byte.number |
101e20 | 29 2c 20 6e 6f 2d 65 78 70 6f 72 74 2c 20 6c 6f 63 61 6c 2d 61 73 2c 20 6f 72 20 6e 6f 2d 61 64 | ),.no-export,.local-as,.or.no-ad |
101e40 | 76 65 72 74 69 73 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 72 | vertise..This.command.displays.r |
101e60 | 6f 75 74 65 73 20 77 69 74 68 20 63 6c 61 73 73 6c 65 73 73 20 69 6e 74 65 72 64 6f 6d 61 69 6e | outes.with.classless.interdomain |
101e80 | 20 72 6f 75 74 69 6e 67 20 28 43 49 44 52 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 | .routing.(CIDR)..This.command.di |
101ea0 | 73 70 6c 61 79 73 20 73 74 61 74 65 20 61 6e 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f | splays.state.and.configuration.o |
101ec0 | 66 20 4f 53 50 46 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2c 20 | f.OSPF.the.specified.interface,. |
101ee0 | 6f 72 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 20 69 66 20 6e 6f 20 69 6e 74 65 72 66 61 63 | or.all.interfaces.if.no.interfac |
101f00 | 65 20 69 73 20 67 69 76 65 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 | e.is.given..This.command.display |
101f20 | 73 20 73 74 61 74 65 20 61 6e 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 4f 53 50 | s.state.and.configuration.of.OSP |
101f40 | 46 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2c 20 6f 72 20 61 6c | F.the.specified.interface,.or.al |
101f60 | 6c 20 69 6e 74 65 72 66 61 63 65 73 20 69 66 20 6e 6f 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 | l.interfaces.if.no.interface.is. |
101f80 | 67 69 76 65 6e 2e 20 57 68 69 74 68 20 74 68 65 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d | given..Whith.the.argument.:cfgcm |
101fa0 | 64 3a 60 70 72 65 66 69 78 60 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 68 6f 77 73 20 63 6f | d:`prefix`.this.command.shows.co |
101fc0 | 6e 6e 65 63 74 65 64 20 70 72 65 66 69 78 65 73 20 74 6f 20 61 64 76 65 72 74 69 73 65 2e 00 54 | nnected.prefixes.to.advertise..T |
101fe0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 4f 53 50 46 20 72 6f | his.command.displays.the.OSPF.ro |
102000 | 75 74 69 6e 67 20 74 61 62 6c 65 2c 20 61 73 20 64 65 74 65 72 6d 69 6e 65 64 20 62 79 20 74 68 | uting.table,.as.determined.by.th |
102020 | 65 20 6d 6f 73 74 20 72 65 63 65 6e 74 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 2e 00 54 | e.most.recent.SPF.calculation..T |
102040 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 4f 53 50 46 20 72 6f | his.command.displays.the.OSPF.ro |
102060 | 75 74 69 6e 67 20 74 61 62 6c 65 2c 20 61 73 20 64 65 74 65 72 6d 69 6e 65 64 20 62 79 20 74 68 | uting.table,.as.determined.by.th |
102080 | 65 20 6d 6f 73 74 20 72 65 63 65 6e 74 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 2e 20 57 | e.most.recent.SPF.calculation..W |
1020a0 | 69 74 68 20 74 68 65 20 6f 70 74 69 6f 6e 61 6c 20 3a 63 66 67 63 6d 64 3a 60 64 65 74 61 69 6c | ith.the.optional.:cfgcmd:`detail |
1020c0 | 60 20 61 72 67 75 6d 65 6e 74 2c 20 65 61 63 68 20 72 6f 75 74 65 20 69 74 65 6d 27 73 20 61 64 | `.argument,.each.route.item's.ad |
1020e0 | 76 65 72 74 69 73 65 72 20 72 6f 75 74 65 72 20 61 6e 64 20 6e 65 74 77 6f 72 6b 20 61 74 74 72 | vertiser.router.and.network.attr |
102100 | 69 62 75 74 65 20 77 69 6c 6c 20 62 65 20 73 68 6f 77 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | ibute.will.be.shown..This.comman |
102120 | 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 6e 65 69 67 68 62 6f 72 20 44 52 20 63 68 6f 69 63 | d.displays.the.neighbor.DR.choic |
102140 | 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 | e.information..This.command.disp |
102160 | 6c 61 79 73 20 74 68 65 20 6e 65 69 67 68 62 6f 72 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 | lays.the.neighbors.information.i |
102180 | 6e 20 61 20 64 65 74 61 69 6c 65 64 20 66 6f 72 6d 20 66 6f 72 20 61 20 6e 65 69 67 68 62 6f 72 | n.a.detailed.form.for.a.neighbor |
1021a0 | 20 77 68 6f 73 65 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 73 70 65 63 69 66 69 65 64 2e 00 | .whose.IP.address.is.specified.. |
1021c0 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 6e 65 69 67 68 62 | This.command.displays.the.neighb |
1021e0 | 6f 72 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 61 20 64 65 74 61 69 6c 65 64 20 66 6f | ors.information.in.a.detailed.fo |
102200 | 72 6d 2c 20 6e 6f 74 20 6a 75 73 74 20 61 20 73 75 6d 6d 61 72 79 20 74 61 62 6c 65 2e 00 54 68 | rm,.not.just.a.summary.table..Th |
102220 | 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 6e 65 69 67 68 62 6f 72 | is.command.displays.the.neighbor |
102240 | 73 20 73 74 61 74 75 73 20 66 6f 72 20 61 20 6e 65 69 67 68 62 6f 72 20 6f 6e 20 74 68 65 20 73 | s.status.for.a.neighbor.on.the.s |
102260 | 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | pecified.interface..This.command |
102280 | 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 6e 65 69 67 68 62 6f 72 73 20 73 74 61 74 75 73 2e 00 | .displays.the.neighbors.status.. |
1022a0 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 73 74 61 74 75 73 | This.command.displays.the.status |
1022c0 | 20 6f 66 20 61 6c 6c 20 42 47 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 54 68 69 73 20 63 6f | .of.all.BGP.connections..This.co |
1022e0 | 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 20 6c 6f 67 67 69 6e 67 20 6e 65 69 67 68 62 6f 72 20 75 70 | mmand.enable.logging.neighbor.up |
102300 | 2f 64 6f 77 6e 20 63 68 61 6e 67 65 73 20 61 6e 64 20 72 65 73 65 74 20 72 65 61 73 6f 6e 2e 00 | /down.changes.and.reset.reason.. |
102320 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 2f 64 69 73 61 62 6c 65 73 20 73 75 6d | This.command.enable/disables.sum |
102340 | 6d 61 72 69 73 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 61 64 | marisation.for.the.configured.ad |
102360 | 64 72 65 73 73 20 72 61 6e 67 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 | dress.range..This.command.enable |
102380 | 73 20 3a 61 62 62 72 3a 60 42 46 44 20 28 42 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 46 6f 72 77 | s.:abbr:`BFD.(Bidirectional.Forw |
1023a0 | 61 72 64 69 6e 67 20 44 65 74 65 63 74 69 6f 6e 29 60 20 6f 6e 20 74 68 69 73 20 4f 53 50 46 20 | arding.Detection)`.on.this.OSPF. |
1023c0 | 6c 69 6e 6b 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 | link.interface..This.command.ena |
1023e0 | 62 6c 65 73 20 3a 72 66 63 3a 60 36 32 33 32 60 20 70 75 72 67 65 20 6f 72 69 67 69 6e 61 74 6f | bles.:rfc:`6232`.purge.originato |
102400 | 72 20 69 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 2e 20 45 6e 61 62 6c 65 20 70 75 72 67 65 20 6f | r.identification..Enable.purge.o |
102420 | 72 69 67 69 6e 61 74 6f 72 20 69 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 20 28 50 4f 49 29 20 62 | riginator.identification.(POI).b |
102440 | 79 20 61 64 64 69 6e 67 20 74 68 65 20 74 79 70 65 2c 20 6c 65 6e 67 74 68 20 61 6e 64 20 76 61 | y.adding.the.type,.length.and.va |
102460 | 6c 75 65 20 28 54 4c 56 29 20 77 69 74 68 20 74 68 65 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 | lue.(TLV).with.the.Intermediate. |
102480 | 53 79 73 74 65 6d 20 28 49 53 29 20 69 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 20 74 6f 20 74 68 | System.(IS).identification.to.th |
1024a0 | 65 20 4c 53 50 73 20 74 68 61 74 20 64 6f 20 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 50 4f 49 20 69 | e.LSPs.that.do.not.contain.POI.i |
1024c0 | 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 49 66 20 61 6e 20 49 53 20 67 65 6e 65 72 61 74 65 73 20 61 | nformation..If.an.IS.generates.a |
1024e0 | 20 70 75 72 67 65 2c 20 56 79 4f 53 20 61 64 64 73 20 74 68 69 73 20 54 4c 56 20 77 69 74 68 20 | .purge,.VyOS.adds.this.TLV.with. |
102500 | 74 68 65 20 73 79 73 74 65 6d 20 49 44 20 6f 66 20 74 68 65 20 49 53 20 74 6f 20 74 68 65 20 70 | the.system.ID.of.the.IS.to.the.p |
102520 | 75 72 67 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 49 50 20 66 61 | urge..This.command.enables.IP.fa |
102540 | 73 74 20 72 65 2d 72 6f 75 74 69 6e 67 20 74 68 61 74 20 69 73 20 70 61 72 74 20 6f 66 20 3a 72 | st.re-routing.that.is.part.of.:r |
102560 | 66 63 3a 60 35 32 38 36 60 2e 20 53 70 65 63 69 66 69 63 61 6c 6c 79 20 74 68 69 73 20 69 73 20 | fc:`5286`..Specifically.this.is. |
102580 | 61 20 70 72 65 66 69 78 20 6c 69 73 74 20 77 68 69 63 68 20 72 65 66 65 72 65 6e 63 65 73 20 61 | a.prefix.list.which.references.a |
1025a0 | 20 70 72 65 66 69 78 20 69 6e 20 77 68 69 63 68 20 77 69 6c 6c 20 73 65 6c 65 63 74 20 65 6c 69 | .prefix.in.which.will.select.eli |
1025c0 | 67 69 62 6c 65 20 50 51 20 6e 6f 64 65 73 20 66 6f 72 20 72 65 6d 6f 74 65 20 4c 46 41 20 62 61 | gible.PQ.nodes.for.remote.LFA.ba |
1025e0 | 63 6b 75 70 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 49 53 2d 49 | ckups..This.command.enables.IS-I |
102600 | 53 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2c 20 61 6e 64 20 61 6c 6c 6f 77 73 20 | S.on.this.interface,.and.allows. |
102620 | 66 6f 72 20 61 64 6a 61 63 65 6e 63 79 20 74 6f 20 6f 63 63 75 72 2e 20 4e 6f 74 65 20 74 68 61 | for.adjacency.to.occur..Note.tha |
102640 | 74 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 49 53 2d 49 53 20 69 6e 73 74 61 6e 63 65 20 6d 75 73 | t.the.name.of.IS-IS.instance.mus |
102660 | 74 20 62 65 20 74 68 65 20 73 61 6d 65 20 61 73 20 74 68 65 20 6f 6e 65 20 75 73 65 64 20 74 6f | t.be.the.same.as.the.one.used.to |
102680 | 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 49 53 2d 49 53 20 70 72 6f 63 65 73 73 2e 00 54 68 | .configure.the.IS-IS.process..Th |
1026a0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 52 49 50 20 61 6e 64 20 73 65 74 73 20 | is.command.enables.RIP.and.sets. |
1026c0 | 74 68 65 20 52 49 50 20 65 6e 61 62 6c 65 20 69 6e 74 65 72 66 61 63 65 20 62 79 20 4e 45 54 57 | the.RIP.enable.interface.by.NETW |
1026e0 | 4f 52 4b 2e 20 54 68 65 20 69 6e 74 65 72 66 61 63 65 73 20 77 68 69 63 68 20 68 61 76 65 20 61 | ORK..The.interfaces.which.have.a |
102700 | 64 64 72 65 73 73 65 73 20 6d 61 74 63 68 69 6e 67 20 77 69 74 68 20 4e 45 54 57 4f 52 4b 20 61 | ddresses.matching.with.NETWORK.a |
102720 | 72 65 20 65 6e 61 62 6c 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 | re.enabled..This.command.enables |
102740 | 20 70 6f 69 73 6f 6e 2d 72 65 76 65 72 73 65 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 | .poison-reverse.on.the.interface |
102760 | 2e 20 49 66 20 62 6f 74 68 20 70 6f 69 73 6f 6e 20 72 65 76 65 72 73 65 20 61 6e 64 20 73 70 6c | ..If.both.poison.reverse.and.spl |
102780 | 69 74 20 68 6f 72 69 7a 6f 6e 20 61 72 65 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 6e 20 56 79 4f | it.horizon.are.enabled,.then.VyO |
1027a0 | 53 20 61 64 76 65 72 74 69 73 65 73 20 74 68 65 20 6c 65 61 72 6e 65 64 20 72 6f 75 74 65 73 20 | S.advertises.the.learned.routes. |
1027c0 | 61 73 20 75 6e 72 65 61 63 68 61 62 6c 65 20 6f 76 65 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 | as.unreachable.over.the.interfac |
1027e0 | 65 20 6f 6e 20 77 68 69 63 68 20 74 68 65 20 72 6f 75 74 65 20 77 61 73 20 6c 65 61 72 6e 65 64 | e.on.which.the.route.was.learned |
102800 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 72 6f 75 74 69 6e 67 20 75 | ..This.command.enables.routing.u |
102820 | 73 69 6e 67 20 72 61 64 69 6f 20 66 72 65 71 75 65 6e 63 79 20 64 69 76 65 72 73 69 74 79 2e 20 | sing.radio.frequency.diversity.. |
102840 | 54 68 69 73 20 69 73 20 68 69 67 68 6c 79 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 69 6e 20 6e 65 | This.is.highly.recommended.in.ne |
102860 | 74 77 6f 72 6b 73 20 77 69 74 68 20 6d 61 6e 79 20 77 69 72 65 6c 65 73 73 20 6e 6f 64 65 73 2e | tworks.with.many.wireless.nodes. |
102880 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 73 65 6e 64 69 6e 67 20 74 69 | .This.command.enables.sending.ti |
1028a0 | 6d 65 73 74 61 6d 70 73 20 77 69 74 68 20 65 61 63 68 20 48 65 6c 6c 6f 20 61 6e 64 20 49 48 55 | mestamps.with.each.Hello.and.IHU |
1028c0 | 20 6d 65 73 73 61 67 65 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 63 6f 6d 70 75 74 65 20 52 54 54 | .message.in.order.to.compute.RTT |
1028e0 | 20 76 61 6c 75 65 73 2e 20 49 74 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 65 6e | .values..It.is.recommended.to.en |
102900 | 61 62 6c 65 20 74 69 6d 65 73 74 61 6d 70 73 20 6f 6e 20 74 75 6e 6e 65 6c 20 69 6e 74 65 72 66 | able.timestamps.on.tunnel.interf |
102920 | 61 63 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 73 75 70 70 6f | aces..This.command.enables.suppo |
102940 | 72 74 20 66 6f 72 20 64 79 6e 61 6d 69 63 20 68 6f 73 74 6e 61 6d 65 20 54 4c 56 2e 20 44 79 6e | rt.for.dynamic.hostname.TLV..Dyn |
102960 | 61 6d 69 63 20 68 6f 73 74 6e 61 6d 65 20 6d 61 70 70 69 6e 67 20 64 65 74 65 72 6d 69 6e 65 64 | amic.hostname.mapping.determined |
102980 | 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 32 37 36 33 60 2c 20 44 79 | .as.described.in.:rfc:`2763`,.Dy |
1029a0 | 6e 61 6d 69 63 20 48 6f 73 74 6e 61 6d 65 20 45 78 63 68 61 6e 67 65 20 4d 65 63 68 61 6e 69 73 | namic.Hostname.Exchange.Mechanis |
1029c0 | 6d 20 66 6f 72 20 49 53 2d 49 53 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 | m.for.IS-IS..This.command.enable |
1029e0 | 73 20 74 68 65 20 4f 52 46 20 63 61 70 61 62 69 6c 69 74 79 20 28 64 65 73 63 72 69 62 65 64 20 | s.the.ORF.capability.(described. |
102a00 | 69 6e 20 3a 72 66 63 3a 60 35 32 39 31 60 29 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 | in.:rfc:`5291`).on.the.local.rou |
102a20 | 74 65 72 2c 20 61 6e 64 20 65 6e 61 62 6c 65 73 20 4f 52 46 20 63 61 70 61 62 69 6c 69 74 79 20 | ter,.and.enables.ORF.capability. |
102a40 | 61 64 76 65 72 74 69 73 65 6d 65 6e 74 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 | advertisement.to.the.specified.B |
102a60 | 47 50 20 70 65 65 72 2e 20 54 68 65 20 3a 63 66 67 63 6d 64 3a 60 72 65 63 65 69 76 65 60 20 6b | GP.peer..The.:cfgcmd:`receive`.k |
102a80 | 65 79 77 6f 72 64 20 63 6f 6e 66 69 67 75 72 65 73 20 61 20 72 6f 75 74 65 72 20 74 6f 20 61 64 | eyword.configures.a.router.to.ad |
102aa0 | 76 65 72 74 69 73 65 20 4f 52 46 20 72 65 63 65 69 76 65 20 63 61 70 61 62 69 6c 69 74 69 65 73 | vertise.ORF.receive.capabilities |
102ac0 | 2e 20 54 68 65 20 3a 63 66 67 63 6d 64 3a 60 73 65 6e 64 60 20 6b 65 79 77 6f 72 64 20 63 6f 6e | ..The.:cfgcmd:`send`.keyword.con |
102ae0 | 66 69 67 75 72 65 73 20 61 20 72 6f 75 74 65 72 20 74 6f 20 61 64 76 65 72 74 69 73 65 20 4f 52 | figures.a.router.to.advertise.OR |
102b00 | 46 20 73 65 6e 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 20 54 6f 20 61 64 76 65 72 74 69 73 | F.send.capabilities..To.advertis |
102b20 | 65 20 61 20 66 69 6c 74 65 72 20 66 72 6f 6d 20 61 20 73 65 6e 64 65 72 2c 20 79 6f 75 20 6d 75 | e.a.filter.from.a.sender,.you.mu |
102b40 | 73 74 20 63 72 65 61 74 65 20 61 6e 20 49 50 20 70 72 65 66 69 78 20 6c 69 73 74 20 66 6f 72 20 | st.create.an.IP.prefix.list.for. |
102b60 | 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 70 65 65 72 20 61 70 70 6c 69 65 64 20 69 | the.specified.BGP.peer.applied.i |
102b80 | 6e 20 69 6e 62 6f 75 6e 64 20 64 65 72 65 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | n.inbound.derection..This.comman |
102ba0 | 64 20 65 6e 66 6f 72 63 65 73 20 47 65 6e 65 72 61 6c 69 7a 65 64 20 54 54 4c 20 53 65 63 75 72 | d.enforces.Generalized.TTL.Secur |
102bc0 | 69 74 79 20 4d 65 63 68 61 6e 69 73 6d 20 28 47 54 53 4d 29 2c 20 61 73 20 73 70 65 63 69 66 69 | ity.Mechanism.(GTSM),.as.specifi |
102be0 | 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 30 38 32 60 2e 20 57 69 74 68 20 74 68 69 73 20 63 6f 6d | ed.in.:rfc:`5082`..With.this.com |
102c00 | 6d 61 6e 64 2c 20 6f 6e 6c 79 20 6e 65 69 67 68 62 6f 72 73 20 74 68 61 74 20 61 72 65 20 73 70 | mand,.only.neighbors.that.are.sp |
102c20 | 65 63 69 66 69 65 64 20 6e 75 6d 62 65 72 20 6f 66 20 68 6f 70 73 20 61 77 61 79 20 77 69 6c 6c | ecified.number.of.hops.away.will |
102c40 | 20 62 65 20 61 6c 6c 6f 77 65 64 20 74 6f 20 62 65 63 6f 6d 65 20 6e 65 69 67 68 62 6f 72 73 2e | .be.allowed.to.become.neighbors. |
102c60 | 20 54 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 68 6f 70 73 20 72 61 6e 67 65 20 69 73 20 31 20 74 | .The.number.of.hops.range.is.1.t |
102c80 | 6f 20 32 35 34 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6d 75 74 75 61 6c 6c 79 20 | o.254..This.command.is.mutually. |
102ca0 | 65 78 63 6c 75 73 69 76 65 20 77 69 74 68 20 3a 63 66 67 63 6d 64 3a 60 65 62 67 70 2d 6d 75 6c | exclusive.with.:cfgcmd:`ebgp-mul |
102cc0 | 74 69 68 6f 70 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 63 65 73 20 73 74 72 69 | tihop`..This.command.forces.stri |
102ce0 | 63 74 6c 79 20 63 6f 6d 70 61 72 65 20 72 65 6d 6f 74 65 20 63 61 70 61 62 69 6c 69 74 69 65 73 | ctly.compare.remote.capabilities |
102d00 | 20 61 6e 64 20 6c 6f 63 61 6c 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 20 49 66 20 63 61 70 61 | .and.local.capabilities..If.capa |
102d20 | 62 69 6c 69 74 69 65 73 20 61 72 65 20 64 69 66 66 65 72 65 6e 74 2c 20 73 65 6e 64 20 55 6e 73 | bilities.are.different,.send.Uns |
102d40 | 75 70 70 6f 72 74 65 64 20 43 61 70 61 62 69 6c 69 74 79 20 65 72 72 6f 72 20 74 68 65 6e 20 72 | upported.Capability.error.then.r |
102d60 | 65 73 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 66 6f | eset.connection..This.command.fo |
102d80 | 72 63 65 73 20 74 68 65 20 42 47 50 20 73 70 65 61 6b 65 72 20 74 6f 20 72 65 70 6f 72 74 20 69 | rces.the.BGP.speaker.to.report.i |
102da0 | 74 73 65 6c 66 20 61 73 20 74 68 65 20 6e 65 78 74 20 68 6f 70 20 66 6f 72 20 61 6e 20 61 64 76 | tself.as.the.next.hop.for.an.adv |
102dc0 | 65 72 74 69 73 65 64 20 72 6f 75 74 65 20 69 74 20 61 64 76 65 72 74 69 73 65 64 20 74 6f 20 61 | ertised.route.it.advertised.to.a |
102de0 | 20 6e 65 69 67 68 62 6f 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 67 65 6e 65 72 61 74 65 | .neighbor..This.command.generate |
102e00 | 20 61 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 69 6e 74 6f 20 74 68 65 20 52 49 50 2e 00 54 | .a.default.route.into.the.RIP..T |
102e20 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 67 69 76 65 73 20 61 20 62 72 69 65 66 20 73 74 61 74 75 73 | his.command.gives.a.brief.status |
102e40 | 20 6f 76 65 72 76 69 65 77 20 6f 66 20 61 20 73 70 65 63 69 66 69 65 64 20 77 69 72 65 6c 65 73 | .overview.of.a.specified.wireles |
102e60 | 73 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 | s.interface..The.wireless.interf |
102e80 | 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 63 61 6e 20 72 61 6e 67 65 20 66 72 6f 6d 20 77 6c | ace.identifier.can.range.from.wl |
102ea0 | 61 6e 30 20 74 6f 20 77 6c 61 6e 39 39 39 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 67 6f 65 | an0.to.wlan999..This.command.goe |
102ec0 | 73 20 68 61 6e 64 20 69 6e 20 68 61 6e 64 20 77 69 74 68 20 74 68 65 20 6c 69 73 74 65 6e 20 72 | s.hand.in.hand.with.the.listen.r |
102ee0 | 61 6e 67 65 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 69 6d 69 74 20 74 68 65 20 61 6d 6f 75 6e 74 | ange.command.to.limit.the.amount |
102f00 | 20 6f 66 20 42 47 50 20 6e 65 69 67 68 62 6f 72 73 20 74 68 61 74 20 61 72 65 20 61 6c 6c 6f 77 | .of.BGP.neighbors.that.are.allow |
102f20 | 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 | ed.to.connect.to.the.local.route |
102f40 | 72 2e 20 54 68 65 20 6c 69 6d 69 74 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 35 30 30 30 2e | r..The.limit.range.is.1.to.5000. |
102f60 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 67 6f 74 20 61 64 64 65 64 20 69 6e 20 56 79 4f 53 20 | .This.command.got.added.in.VyOS. |
102f80 | 31 2e 34 20 61 6e 64 20 69 6e 76 65 72 74 73 20 74 68 65 20 6c 6f 67 69 63 20 66 72 6f 6d 20 74 | 1.4.and.inverts.the.logic.from.t |
102fa0 | 68 65 20 6f 6c 64 20 60 60 64 65 66 61 75 6c 74 2d 72 6f 75 74 65 60 60 20 43 4c 49 20 6f 70 74 | he.old.``default-route``.CLI.opt |
102fc0 | 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 6e 73 74 65 61 64 20 6f 66 20 73 75 6d | ion..This.command.instead.of.sum |
102fe0 | 6d 61 72 69 7a 69 6e 67 20 69 6e 74 72 61 20 61 72 65 61 20 70 61 74 68 73 20 66 69 6c 74 65 72 | marizing.intra.area.paths.filter |
103000 | 20 74 68 65 6d 20 2d 20 69 2e 65 2e 20 69 6e 74 72 61 20 61 72 65 61 20 70 61 74 68 73 20 66 72 | .them.-.i.e..intra.area.paths.fr |
103020 | 6f 6d 20 74 68 69 73 20 72 61 6e 67 65 20 61 72 65 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 64 | om.this.range.are.not.advertised |
103040 | 20 69 6e 74 6f 20 6f 74 68 65 72 20 61 72 65 61 73 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | .into.other.areas..This.command. |
103060 | 6d 61 6b 65 73 20 73 65 6e 73 65 20 69 6e 20 41 42 52 20 6f 6e 6c 79 2e 00 54 68 69 73 20 63 6f | makes.sense.in.ABR.only..This.co |
103080 | 6d 6d 61 6e 64 20 69 73 20 61 6c 73 6f 20 75 73 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 | mmand.is.also.used.to.enable.the |
1030a0 | 20 4f 53 50 46 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 61 72 65 61 20 6e 75 6d 62 65 72 20 63 | .OSPF.process..The.area.number.c |
1030c0 | 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 64 65 63 69 6d 61 6c 20 6e 6f 74 61 74 | an.be.specified.in.decimal.notat |
1030e0 | 69 6f 6e 20 69 6e 20 74 68 65 20 72 61 6e 67 65 20 66 72 6f 6d 20 30 20 74 6f 20 34 32 39 34 39 | ion.in.the.range.from.0.to.42949 |
103100 | 36 37 32 39 35 2e 20 4f 72 20 69 74 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 6e | 67295..Or.it.can.be.specified.in |
103120 | 20 64 6f 74 74 65 64 20 64 65 63 69 6d 61 6c 20 6e 6f 74 61 74 69 6f 6e 20 73 69 6d 69 6c 61 72 | .dotted.decimal.notation.similar |
103140 | 20 74 6f 20 69 70 20 61 64 64 72 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 | .to.ip.address..This.command.is. |
103160 | 6f 6e 6c 79 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 65 42 47 50 20 70 65 65 72 73 2e 00 54 68 69 | only.allowed.for.eBGP.peers..Thi |
103180 | 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6f 6e 6c 79 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 65 42 | s.command.is.only.allowed.for.eB |
1031a0 | 47 50 20 70 65 65 72 73 2e 20 49 74 20 69 73 20 6e 6f 74 20 61 70 70 6c 69 63 61 62 6c 65 20 66 | GP.peers..It.is.not.applicable.f |
1031c0 | 6f 72 20 70 65 65 72 20 67 72 6f 75 70 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 | or.peer.groups..This.command.is. |
1031e0 | 6f 6e 6c 79 20 75 73 65 66 75 6c 20 61 74 20 73 63 61 6c 65 20 77 68 65 6e 20 79 6f 75 20 63 61 | only.useful.at.scale.when.you.ca |
103200 | 6e 20 70 6f 73 73 69 62 6c 79 20 68 61 76 65 20 61 20 6c 61 72 67 65 20 6e 75 6d 62 65 72 20 6f | n.possibly.have.a.large.number.o |
103220 | 66 20 50 49 4d 20 63 6f 6e 74 72 6f 6c 20 70 61 63 6b 65 74 73 20 66 6c 6f 77 69 6e 67 2e 00 54 | f.PIM.control.packets.flowing..T |
103240 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 73 70 65 63 69 66 69 63 20 74 6f 20 46 52 52 20 61 | his.command.is.specific.to.FRR.a |
103260 | 6e 64 20 56 79 4f 53 2e 20 54 68 65 20 72 6f 75 74 65 20 63 6f 6d 6d 61 6e 64 20 6d 61 6b 65 73 | nd.VyOS..The.route.command.makes |
103280 | 20 61 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 6f 6e 6c 79 20 69 6e 73 69 64 65 20 52 49 50 2e | .a.static.route.only.inside.RIP. |
1032a0 | 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 20 6f 6e 6c | .This.command.should.be.used.onl |
1032c0 | 79 20 62 79 20 61 64 76 61 6e 63 65 64 20 75 73 65 72 73 20 77 68 6f 20 61 72 65 20 70 61 72 74 | y.by.advanced.users.who.are.part |
1032e0 | 69 63 75 6c 61 72 6c 79 20 6b 6e 6f 77 6c 65 64 67 65 61 62 6c 65 20 61 62 6f 75 74 20 74 68 65 | icularly.knowledgeable.about.the |
103300 | 20 52 49 50 20 70 72 6f 74 6f 63 6f 6c 2e 20 49 6e 20 6d 6f 73 74 20 63 61 73 65 73 2c 20 77 65 | .RIP.protocol..In.most.cases,.we |
103320 | 20 72 65 63 6f 6d 6d 65 6e 64 20 63 72 65 61 74 69 6e 67 20 61 20 73 74 61 74 69 63 20 72 6f 75 | .recommend.creating.a.static.rou |
103340 | 74 65 20 69 6e 20 56 79 4f 53 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 69 6e 67 20 69 74 | te.in.VyOS.and.redistributing.it |
103360 | 20 69 6e 20 52 49 50 20 75 73 69 6e 67 20 3a 63 66 67 63 6d 64 3a 60 72 65 64 69 73 74 72 69 62 | .in.RIP.using.:cfgcmd:`redistrib |
103380 | 75 74 65 20 73 74 61 74 69 63 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 | ute.static`..This.command.is.use |
1033a0 | 64 20 66 6f 72 20 61 64 76 65 72 74 69 73 69 6e 67 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 6e | d.for.advertising.IPv4.or.IPv6.n |
1033c0 | 65 74 77 6f 72 6b 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f | etworks..This.command.is.used.to |
1033e0 | 20 72 65 74 72 69 65 76 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 57 41 50 20 | .retrieve.information.about.WAP. |
103400 | 77 69 74 68 69 6e 20 74 68 65 20 72 61 6e 67 65 20 6f 66 20 79 6f 75 72 20 77 69 72 65 6c 65 73 | within.the.range.of.your.wireles |
103420 | 73 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 | s.interface..This.command.is.use |
103440 | 66 75 6c 20 6f 6e 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 73 20 63 6f 6e 66 69 | ful.on.wireless.interfaces.confi |
103460 | 67 75 72 65 64 20 69 6e 20 73 74 61 74 69 6f 6e 20 6d 6f 64 65 2e 00 54 68 69 73 20 63 6f 6d 6d | gured.in.station.mode..This.comm |
103480 | 61 6e 64 20 69 73 20 75 73 65 66 75 6c 20 69 66 20 6f 6e 65 20 64 65 73 69 72 65 73 20 74 6f 20 | and.is.useful.if.one.desires.to. |
1034a0 | 6c 6f 6f 73 65 6e 20 74 68 65 20 72 65 71 75 69 72 65 6d 65 6e 74 20 66 6f 72 20 42 47 50 20 74 | loosen.the.requirement.for.BGP.t |
1034c0 | 6f 20 68 61 76 65 20 73 74 72 69 63 74 6c 79 20 64 65 66 69 6e 65 64 20 6e 65 69 67 68 62 6f 72 | o.have.strictly.defined.neighbor |
1034e0 | 73 2e 20 53 70 65 63 69 66 69 63 61 6c 6c 79 20 77 68 61 74 20 69 73 20 61 6c 6c 6f 77 65 64 20 | s..Specifically.what.is.allowed. |
103500 | 69 73 20 66 6f 72 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 74 6f 20 6c 69 73 74 65 | is.for.the.local.router.to.liste |
103520 | 6e 20 74 6f 20 61 20 72 61 6e 67 65 20 6f 66 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 | n.to.a.range.of.IPv4.or.IPv6.add |
103540 | 72 65 73 73 65 73 20 64 65 66 69 6e 65 64 20 62 79 20 61 20 70 72 65 66 69 78 20 61 6e 64 20 74 | resses.defined.by.a.prefix.and.t |
103560 | 6f 20 61 63 63 65 70 74 20 42 47 50 20 6f 70 65 6e 20 6d 65 73 73 61 67 65 73 2e 20 57 68 65 6e | o.accept.BGP.open.messages..When |
103580 | 20 61 20 54 43 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 28 61 6e 64 20 73 75 62 73 65 71 75 65 6e | .a.TCP.connection.(and.subsequen |
1035a0 | 74 6c 79 20 61 20 42 47 50 20 6f 70 65 6e 20 6d 65 73 73 61 67 65 29 20 66 72 6f 6d 20 77 69 74 | tly.a.BGP.open.message).from.wit |
1035c0 | 68 69 6e 20 74 68 69 73 20 72 61 6e 67 65 20 74 72 69 65 73 20 74 6f 20 63 6f 6e 6e 65 63 74 20 | hin.this.range.tries.to.connect. |
1035e0 | 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 74 68 65 6e 20 74 68 65 20 6c 6f 63 61 6c 20 | the.local.router.then.the.local. |
103600 | 72 6f 75 74 65 72 20 77 69 6c 6c 20 72 65 73 70 6f 6e 64 20 61 6e 64 20 63 6f 6e 6e 65 63 74 20 | router.will.respond.and.connect. |
103620 | 77 69 74 68 20 74 68 65 20 70 61 72 61 6d 65 74 65 72 73 20 74 68 61 74 20 61 72 65 20 64 65 66 | with.the.parameters.that.are.def |
103640 | 69 6e 65 64 20 77 69 74 68 69 6e 20 74 68 65 20 70 65 65 72 20 67 72 6f 75 70 2e 20 4f 6e 65 20 | ined.within.the.peer.group..One. |
103660 | 6d 75 73 74 20 64 65 66 69 6e 65 20 61 20 70 65 65 72 2d 67 72 6f 75 70 20 66 6f 72 20 65 61 63 | must.define.a.peer-group.for.eac |
103680 | 68 20 72 61 6e 67 65 20 74 68 61 74 20 69 73 20 6c 69 73 74 65 64 2e 20 49 66 20 6e 6f 20 70 65 | h.range.that.is.listed..If.no.pe |
1036a0 | 65 72 2d 67 72 6f 75 70 20 69 73 20 64 65 66 69 6e 65 64 20 74 68 65 6e 20 61 6e 20 65 72 72 6f | er-group.is.defined.then.an.erro |
1036c0 | 72 20 77 69 6c 6c 20 6b 65 65 70 20 79 6f 75 20 66 72 6f 6d 20 63 6f 6d 6d 69 74 74 69 6e 67 20 | r.will.keep.you.from.committing. |
1036e0 | 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | the.configuration..This.command. |
103700 | 6d 6f 64 69 66 69 65 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 6d 65 74 72 69 63 20 28 68 6f 70 | modifies.the.default.metric.(hop |
103720 | 20 63 6f 75 6e 74 29 20 76 61 6c 75 65 20 66 6f 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 | .count).value.for.redistributed. |
103740 | 72 6f 75 74 65 73 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f | routes..The.metric.range.is.1.to |
103760 | 20 31 36 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 2e 20 54 68 69 | .16..The.default.value.is.1..Thi |
103780 | 73 20 63 6f 6d 6d 61 6e 64 20 64 6f 65 73 20 6e 6f 74 20 61 66 66 65 63 74 20 63 6f 6e 6e 65 63 | s.command.does.not.affect.connec |
1037a0 | 74 65 64 20 72 6f 75 74 65 20 65 76 65 6e 20 69 66 20 69 74 20 69 73 20 72 65 64 69 73 74 72 69 | ted.route.even.if.it.is.redistri |
1037c0 | 62 75 74 65 64 20 62 79 20 3a 63 66 67 63 6d 64 3a 60 72 65 64 69 73 74 72 69 62 75 74 65 20 63 | buted.by.:cfgcmd:`redistribute.c |
1037e0 | 6f 6e 6e 65 63 74 65 64 60 2e 20 54 6f 20 6d 6f 64 69 66 79 20 63 6f 6e 6e 65 63 74 65 64 20 72 | onnected`..To.modify.connected.r |
103800 | 6f 75 74 65 73 20 6d 65 74 72 69 63 20 76 61 6c 75 65 2c 20 70 6c 65 61 73 65 20 75 73 65 20 3a | outes.metric.value,.please.use.: |
103820 | 63 66 67 63 6d 64 3a 60 72 65 64 69 73 74 72 69 62 75 74 65 20 63 6f 6e 6e 65 63 74 65 64 20 6d | cfgcmd:`redistribute.connected.m |
103840 | 65 74 72 69 63 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6f 76 65 72 72 69 64 65 20 41 53 | etric`..This.command.override.AS |
103860 | 20 6e 75 6d 62 65 72 20 6f 66 20 74 68 65 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 72 6f 75 74 65 | .number.of.the.originating.route |
103880 | 72 20 77 69 74 68 20 74 68 65 20 6c 6f 63 61 6c 20 41 53 20 6e 75 6d 62 65 72 2e 00 54 68 69 73 | r.with.the.local.AS.number..This |
1038a0 | 20 63 6f 6d 6d 61 6e 64 20 70 72 65 76 65 6e 74 73 20 66 72 6f 6d 20 73 65 6e 64 69 6e 67 20 62 | .command.prevents.from.sending.b |
1038c0 | 61 63 6b 20 70 72 65 66 69 78 65 73 20 6c 65 61 72 6e 65 64 20 66 72 6f 6d 20 74 68 65 20 6e 65 | ack.prefixes.learned.from.the.ne |
1038e0 | 69 67 68 62 6f 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 70 72 6f 76 69 64 65 73 20 74 6f | ighbor..This.command.provides.to |
103900 | 20 63 6f 6d 70 61 72 65 20 64 69 66 66 65 72 65 6e 74 20 4d 45 44 20 76 61 6c 75 65 73 20 74 68 | .compare.different.MED.values.th |
103920 | 61 74 20 61 64 76 65 72 74 69 73 65 64 20 62 79 20 6e 65 69 67 68 62 6f 75 72 73 20 69 6e 20 74 | at.advertised.by.neighbours.in.t |
103940 | 68 65 20 73 61 6d 65 20 41 53 20 66 6f 72 20 72 6f 75 74 65 73 20 73 65 6c 65 63 74 69 6f 6e 2e | he.same.AS.for.routes.selection. |
103960 | 20 57 68 65 6e 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 65 6e 61 62 6c 65 64 2c 20 72 | .When.this.command.is.enabled,.r |
103980 | 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 73 61 6d 65 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 | outes.from.the.same.autonomous.s |
1039a0 | 79 73 74 65 6d 20 61 72 65 20 67 72 6f 75 70 65 64 20 74 6f 67 65 74 68 65 72 2c 20 61 6e 64 20 | ystem.are.grouped.together,.and. |
1039c0 | 74 68 65 20 62 65 73 74 20 65 6e 74 72 69 65 73 20 6f 66 20 65 61 63 68 20 67 72 6f 75 70 20 61 | the.best.entries.of.each.group.a |
1039e0 | 72 65 20 63 6f 6d 70 61 72 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 70 72 6f 76 69 64 | re.compared..This.command.provid |
103a00 | 65 73 20 74 6f 20 63 6f 6d 70 61 72 65 20 74 68 65 20 4d 45 44 20 6f 6e 20 72 6f 75 74 65 73 2c | es.to.compare.the.MED.on.routes, |
103a20 | 20 65 76 65 6e 20 77 68 65 6e 20 74 68 65 79 20 77 65 72 65 20 72 65 63 65 69 76 65 64 20 66 72 | .even.when.they.were.received.fr |
103a40 | 6f 6d 20 64 69 66 66 65 72 65 6e 74 20 6e 65 69 67 68 62 6f 75 72 69 6e 67 20 41 53 65 73 2e 20 | om.different.neighbouring.ASes.. |
103a60 | 53 65 74 74 69 6e 67 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 6d 61 6b 65 73 20 74 68 65 20 6f 72 | Setting.this.option.makes.the.or |
103a80 | 64 65 72 20 6f 66 20 70 72 65 66 65 72 65 6e 63 65 20 6f 66 20 72 6f 75 74 65 73 20 6d 6f 72 65 | der.of.preference.of.routes.more |
103aa0 | 20 64 65 66 69 6e 65 64 2c 20 61 6e 64 20 73 68 6f 75 6c 64 20 65 6c 69 6d 69 6e 61 74 65 20 4d | .defined,.and.should.eliminate.M |
103ac0 | 45 44 20 69 6e 64 75 63 65 64 20 6f 73 63 69 6c 6c 61 74 69 6f 6e 73 2e 00 54 68 69 73 20 63 6f | ED.induced.oscillations..This.co |
103ae0 | 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f | mmand.redistributes.routing.info |
103b00 | 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 | rmation.from.the.given.route.sou |
103b20 | 72 63 65 20 69 6e 74 6f 20 74 68 65 20 49 53 49 53 20 64 61 74 61 62 61 73 65 20 61 73 20 4c 65 | rce.into.the.ISIS.database.as.Le |
103b40 | 76 65 6c 2d 31 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c | vel-1..There.are.six.modes.avail |
103b60 | 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e | able.for.route.source:.bgp,.conn |
103b80 | 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 | ected,.kernel,.ospf,.rip,.static |
103ba0 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 | ..This.command.redistributes.rou |
103bc0 | 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 | ting.information.from.the.given. |
103be0 | 72 6f 75 74 65 20 73 6f 75 72 63 65 20 69 6e 74 6f 20 74 68 65 20 49 53 49 53 20 64 61 74 61 62 | route.source.into.the.ISIS.datab |
103c00 | 61 73 65 20 61 73 20 4c 65 76 65 6c 2d 32 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f | ase.as.Level-2..There.are.six.mo |
103c20 | 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 | des.available.for.route.source:. |
103c40 | 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 | bgp,.connected,.kernel,.ospf,.ri |
103c60 | 70 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 | p,.static..This.command.redistri |
103c80 | 62 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 | butes.routing.information.from.t |
103ca0 | 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 69 6e 74 6f 20 74 68 65 20 52 | he.given.route.source.into.the.R |
103cc0 | 49 50 20 74 61 62 6c 65 73 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 | IP.tables..There.are.five.modes. |
103ce0 | 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c | available.for.route.source:.bgp, |
103d00 | 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 73 74 61 74 69 63 | .connected,.kernel,.ospf,.static |
103d20 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 | ..This.command.redistributes.rou |
103d40 | 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 | ting.information.from.the.given. |
103d60 | 72 6f 75 74 65 20 73 6f 75 72 63 65 20 74 6f 20 74 68 65 20 42 47 50 20 70 72 6f 63 65 73 73 2e | route.source.to.the.BGP.process. |
103d80 | 20 54 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 | .There.are.six.modes.available.f |
103da0 | 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e | or.route.source:.connected,.kern |
103dc0 | 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 2e 00 54 68 | el,.ospf,.rip,.static,.table..Th |
103de0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 | is.command.redistributes.routing |
103e00 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 | .information.from.the.given.rout |
103e20 | 65 20 73 6f 75 72 63 65 20 74 6f 20 74 68 65 20 42 61 62 65 6c 20 70 72 6f 63 65 73 73 2e 00 54 | e.source.to.the.Babel.process..T |
103e40 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e | his.command.redistributes.routin |
103e60 | 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 | g.information.from.the.given.rou |
103e80 | 74 65 20 73 6f 75 72 63 65 20 74 6f 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 2e 20 54 | te.source.to.the.OSPF.process..T |
103ea0 | 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f | here.are.five.modes.available.fo |
103ec0 | 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 | r.route.source:.bgp,.connected,. |
103ee0 | 6b 65 72 6e 65 6c 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | kernel,.rip,.static..This.comman |
103f00 | 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 | d.redistributes.routing.informat |
103f20 | 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 | ion.from.the.given.route.source. |
103f40 | 74 6f 20 74 68 65 20 4f 53 50 46 76 33 20 70 72 6f 63 65 73 73 2e 20 54 68 65 72 65 20 61 72 65 | to.the.OSPFv3.process..There.are |
103f60 | 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 | .five.modes.available.for.route. |
103f80 | 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 | source:.bgp,.connected,.kernel,. |
103fa0 | 72 69 70 6e 67 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 6d 6f | ripng,.static..This.command.remo |
103fc0 | 76 65 73 20 74 68 65 20 70 72 69 76 61 74 65 20 41 53 4e 20 6f 66 20 72 6f 75 74 65 73 20 74 68 | ves.the.private.ASN.of.routes.th |
103fe0 | 61 74 20 61 72 65 20 61 64 76 65 72 74 69 73 65 64 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 | at.are.advertised.to.the.configu |
104000 | 72 65 64 20 70 65 65 72 2e 20 49 74 20 72 65 6d 6f 76 65 73 20 6f 6e 6c 79 20 70 72 69 76 61 74 | red.peer..It.removes.only.privat |
104020 | 65 20 41 53 4e 73 20 6f 6e 20 72 6f 75 74 65 73 20 61 64 76 65 72 74 69 73 65 64 20 74 6f 20 45 | e.ASNs.on.routes.advertised.to.E |
104040 | 42 47 50 20 70 65 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 73 65 74 73 20 42 | BGP.peers..This.command.resets.B |
104060 | 47 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 | GP.connections.to.the.specified. |
104080 | 6e 65 69 67 68 62 6f 72 20 49 50 20 61 64 64 72 65 73 73 2e 20 57 69 74 68 20 61 72 67 75 6d 65 | neighbor.IP.address..With.argume |
1040a0 | 6e 74 20 3a 63 66 67 63 6d 64 3a 60 73 6f 66 74 60 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 | nt.:cfgcmd:`soft`.this.command.i |
1040c0 | 6e 69 74 69 61 74 65 73 20 61 20 73 6f 66 74 20 72 65 73 65 74 2e 20 49 66 20 79 6f 75 20 64 6f | nitiates.a.soft.reset..If.you.do |
1040e0 | 20 6e 6f 74 20 73 70 65 63 69 66 79 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 69 6e 60 20 6f 72 | .not.specify.the.:cfgcmd:`in`.or |
104100 | 20 3a 63 66 67 63 6d 64 3a 60 6f 75 74 60 20 6f 70 74 69 6f 6e 73 2c 20 62 6f 74 68 20 69 6e 62 | .:cfgcmd:`out`.options,.both.inb |
104120 | 6f 75 6e 64 20 61 6e 64 20 6f 75 74 62 6f 75 6e 64 20 73 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 | ound.and.outbound.soft.reconfigu |
104140 | 72 61 74 69 6f 6e 20 61 72 65 20 74 72 69 67 67 65 72 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | ration.are.triggered..This.comma |
104160 | 6e 64 20 72 65 73 65 74 73 20 42 47 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 | nd.resets.BGP.connections.to.the |
104180 | 20 73 70 65 63 69 66 69 65 64 20 70 65 65 72 20 67 72 6f 75 70 2e 20 57 69 74 68 20 61 72 67 75 | .specified.peer.group..With.argu |
1041a0 | 6d 65 6e 74 20 3a 63 66 67 63 6d 64 3a 60 73 6f 66 74 60 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | ment.:cfgcmd:`soft`.this.command |
1041c0 | 20 69 6e 69 74 69 61 74 65 73 20 61 20 73 6f 66 74 20 72 65 73 65 74 2e 20 49 66 20 79 6f 75 20 | .initiates.a.soft.reset..If.you. |
1041e0 | 64 6f 20 6e 6f 74 20 73 70 65 63 69 66 79 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 69 6e 60 20 | do.not.specify.the.:cfgcmd:`in`. |
104200 | 6f 72 20 3a 63 66 67 63 6d 64 3a 60 6f 75 74 60 20 6f 70 74 69 6f 6e 73 2c 20 62 6f 74 68 20 69 | or.:cfgcmd:`out`.options,.both.i |
104220 | 6e 62 6f 75 6e 64 20 61 6e 64 20 6f 75 74 62 6f 75 6e 64 20 73 6f 66 74 20 72 65 63 6f 6e 66 69 | nbound.and.outbound.soft.reconfi |
104240 | 67 75 72 61 74 69 6f 6e 20 61 72 65 20 74 72 69 67 67 65 72 65 64 2e 00 54 68 69 73 20 63 6f 6d | guration.are.triggered..This.com |
104260 | 6d 61 6e 64 20 72 65 73 65 74 73 20 61 6c 6c 20 42 47 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 | mand.resets.all.BGP.connections. |
104280 | 6f 66 20 67 69 76 65 6e 20 72 6f 75 74 65 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 | of.given.router..This.command.re |
1042a0 | 73 65 74 73 20 61 6c 6c 20 65 78 74 65 72 6e 61 6c 20 42 47 50 20 70 65 65 72 73 20 6f 66 20 67 | sets.all.external.BGP.peers.of.g |
1042c0 | 69 76 65 6e 20 72 6f 75 74 65 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 6c 65 63 74 | iven.router..This.command.select |
1042e0 | 73 20 41 42 52 20 6d 6f 64 65 6c 2e 20 4f 53 50 46 20 72 6f 75 74 65 72 20 73 75 70 70 6f 72 74 | s.ABR.model..OSPF.router.support |
104300 | 73 20 66 6f 75 72 20 41 42 52 20 6d 6f 64 65 6c 73 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | s.four.ABR.models:.This.command. |
104320 | 73 65 74 20 64 65 66 61 75 6c 74 20 6d 65 74 72 69 63 20 66 6f 72 20 63 69 72 63 75 69 74 2e 00 | set.default.metric.for.circuit.. |
104340 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 20 74 68 65 20 63 68 61 6e 6e 65 6c 20 6e 75 6d | This.command.set.the.channel.num |
104360 | 62 65 72 20 74 68 61 74 20 64 69 76 65 72 73 69 74 79 20 72 6f 75 74 69 6e 67 20 75 73 65 73 20 | ber.that.diversity.routing.uses. |
104380 | 66 6f 72 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 28 73 65 65 20 64 69 76 65 72 73 69 74 | for.this.interface.(see.diversit |
1043a0 | 79 20 6f 70 74 69 6f 6e 20 61 62 6f 76 65 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 | y.option.above)..This.command.se |
1043c0 | 74 73 20 41 54 54 20 62 69 74 20 74 6f 20 31 20 69 6e 20 4c 65 76 65 6c 31 20 4c 53 50 73 2e 20 | ts.ATT.bit.to.1.in.Level1.LSPs.. |
1043e0 | 49 74 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 37 38 37 60 2e 00 | It.is.described.in.:rfc:`3787`.. |
104400 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 4c 53 50 20 6d 61 78 69 6d 75 6d 20 4c 53 | This.command.sets.LSP.maximum.LS |
104420 | 50 20 6c 69 66 65 74 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e 74 65 72 | P.lifetime.in.seconds..The.inter |
104440 | 76 61 6c 20 72 61 6e 67 65 20 69 73 20 33 35 30 20 74 6f 20 36 35 35 33 35 2e 20 4c 53 50 73 20 | val.range.is.350.to.65535..LSPs. |
104460 | 72 65 6d 61 69 6e 20 69 6e 20 61 20 64 61 74 61 62 61 73 65 20 66 6f 72 20 31 32 30 30 20 73 65 | remain.in.a.database.for.1200.se |
104480 | 63 6f 6e 64 73 20 62 79 20 64 65 66 61 75 6c 74 2e 20 49 66 20 74 68 65 79 20 61 72 65 20 6e 6f | conds.by.default..If.they.are.no |
1044a0 | 74 20 72 65 66 72 65 73 68 65 64 20 62 79 20 74 68 61 74 20 74 69 6d 65 2c 20 74 68 65 79 20 61 | t.refreshed.by.that.time,.they.a |
1044c0 | 72 65 20 64 65 6c 65 74 65 64 2e 20 59 6f 75 20 63 61 6e 20 63 68 61 6e 67 65 20 74 68 65 20 4c | re.deleted..You.can.change.the.L |
1044e0 | 53 50 20 72 65 66 72 65 73 68 20 69 6e 74 65 72 76 61 6c 20 6f 72 20 74 68 65 20 4c 53 50 20 6c | SP.refresh.interval.or.the.LSP.l |
104500 | 69 66 65 74 69 6d 65 2e 20 54 68 65 20 4c 53 50 20 72 65 66 72 65 73 68 20 69 6e 74 65 72 76 61 | ifetime..The.LSP.refresh.interva |
104520 | 6c 20 73 68 6f 75 6c 64 20 62 65 20 6c 65 73 73 20 74 68 61 6e 20 74 68 65 20 4c 53 50 20 6c 69 | l.should.be.less.than.the.LSP.li |
104540 | 66 65 74 69 6d 65 20 6f 72 20 65 6c 73 65 20 4c 53 50 73 20 77 69 6c 6c 20 74 69 6d 65 20 6f 75 | fetime.or.else.LSPs.will.time.ou |
104560 | 74 20 62 65 66 6f 72 65 20 74 68 65 79 20 61 72 65 20 72 65 66 72 65 73 68 65 64 2e 00 54 68 69 | t.before.they.are.refreshed..Thi |
104580 | 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 4c 53 50 20 72 65 66 72 65 73 68 20 69 6e 74 65 72 | s.command.sets.LSP.refresh.inter |
1045a0 | 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 49 53 2d 49 53 20 67 65 6e 65 72 61 74 65 73 20 | val.in.seconds..IS-IS.generates. |
1045c0 | 4c 53 50 73 20 77 68 65 6e 20 74 68 65 20 73 74 61 74 65 20 6f 66 20 61 20 6c 69 6e 6b 20 63 68 | LSPs.when.the.state.of.a.link.ch |
1045e0 | 61 6e 67 65 73 2e 20 48 6f 77 65 76 65 72 2c 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 72 | anges..However,.to.ensure.that.r |
104600 | 6f 75 74 69 6e 67 20 64 61 74 61 62 61 73 65 73 20 6f 6e 20 61 6c 6c 20 72 6f 75 74 65 72 73 20 | outing.databases.on.all.routers. |
104620 | 72 65 6d 61 69 6e 20 63 6f 6e 76 65 72 67 65 64 2c 20 4c 53 50 73 20 69 6e 20 73 74 61 62 6c 65 | remain.converged,.LSPs.in.stable |
104640 | 20 6e 65 74 77 6f 72 6b 73 20 61 72 65 20 67 65 6e 65 72 61 74 65 64 20 6f 6e 20 61 20 72 65 67 | .networks.are.generated.on.a.reg |
104660 | 75 6c 61 72 20 62 61 73 69 73 20 65 76 65 6e 20 74 68 6f 75 67 68 20 74 68 65 72 65 20 68 61 73 | ular.basis.even.though.there.has |
104680 | 20 62 65 65 6e 20 6e 6f 20 63 68 61 6e 67 65 20 74 6f 20 74 68 65 20 73 74 61 74 65 20 6f 66 20 | .been.no.change.to.the.state.of. |
1046a0 | 74 68 65 20 6c 69 6e 6b 73 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 | the.links..The.interval.range.is |
1046c0 | 20 31 20 74 6f 20 36 35 32 33 35 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 | .1.to.65235..The.default.value.i |
1046e0 | 73 20 39 30 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 | s.900.seconds..This.command.sets |
104700 | 20 4f 53 50 46 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6b 65 79 20 74 6f 20 61 20 73 69 | .OSPF.authentication.key.to.a.si |
104720 | 6d 70 6c 65 20 70 61 73 73 77 6f 72 64 2e 20 41 66 74 65 72 20 73 65 74 74 69 6e 67 2c 20 61 6c | mple.password..After.setting,.al |
104740 | 6c 20 4f 53 50 46 20 70 61 63 6b 65 74 73 20 61 72 65 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 | l.OSPF.packets.are.authenticated |
104760 | 2e 20 4b 65 79 20 68 61 73 20 6c 65 6e 67 74 68 20 75 70 20 74 6f 20 38 20 63 68 61 72 73 2e 00 | ..Key.has.length.up.to.8.chars.. |
104780 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 50 53 4e 50 20 69 6e 74 65 72 76 61 6c 20 | This.command.sets.PSNP.interval. |
1047a0 | 69 6e 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 | in.seconds..The.interval.range.i |
1047c0 | 73 20 30 20 74 6f 20 31 32 37 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 52 6f | s.0.to.127..This.command.sets.Ro |
1047e0 | 75 74 65 72 20 50 72 69 6f 72 69 74 79 20 69 6e 74 65 67 65 72 20 76 61 6c 75 65 2e 20 54 68 65 | uter.Priority.integer.value..The |
104800 | 20 72 6f 75 74 65 72 20 77 69 74 68 20 74 68 65 20 68 69 67 68 65 73 74 20 70 72 69 6f 72 69 74 | .router.with.the.highest.priorit |
104820 | 79 20 77 69 6c 6c 20 62 65 20 6d 6f 72 65 20 65 6c 69 67 69 62 6c 65 20 74 6f 20 62 65 63 6f 6d | y.will.be.more.eligible.to.becom |
104840 | 65 20 44 65 73 69 67 6e 61 74 65 64 20 52 6f 75 74 65 72 2e 20 53 65 74 74 69 6e 67 20 74 68 65 | e.Designated.Router..Setting.the |
104860 | 20 76 61 6c 75 65 20 74 6f 20 30 2c 20 6d 61 6b 65 73 20 74 68 65 20 72 6f 75 74 65 72 20 69 6e | .value.to.0,.makes.the.router.in |
104880 | 65 6c 69 67 69 62 6c 65 20 74 6f 20 62 65 63 6f 6d 65 20 44 65 73 69 67 6e 61 74 65 64 20 52 6f | eligible.to.become.Designated.Ro |
1048a0 | 75 74 65 72 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 2e 20 54 68 | uter..The.default.value.is.1..Th |
1048c0 | 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 32 35 35 2e 00 54 68 | e.interval.range.is.0.to.255..Th |
1048e0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 64 65 66 61 75 6c 74 20 52 49 50 20 64 69 73 74 | is.command.sets.default.RIP.dist |
104900 | 61 6e 63 65 20 74 6f 20 61 20 73 70 65 63 69 66 69 65 64 20 76 61 6c 75 65 20 77 68 65 6e 20 74 | ance.to.a.specified.value.when.t |
104920 | 68 65 20 72 6f 75 74 65 73 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 6d 61 74 63 | he.routes.source.IP.address.matc |
104940 | 68 65 73 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 2e 00 54 68 69 73 20 63 | hes.the.specified.prefix..This.c |
104960 | 6f 6d 6d 61 6e 64 20 73 65 74 73 20 68 65 6c 6c 6f 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 | ommand.sets.hello.interval.in.se |
104980 | 63 6f 6e 64 73 20 6f 6e 20 61 20 67 69 76 65 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 | conds.on.a.given.interface..The. |
1049a0 | 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 36 30 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | range.is.1.to.600..This.command. |
1049c0 | 73 65 74 73 20 6c 69 6e 6b 20 63 6f 73 74 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 | sets.link.cost.for.the.specified |
1049e0 | 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 63 6f 73 74 20 76 61 6c 75 65 20 69 73 20 73 65 | .interface..The.cost.value.is.se |
104a00 | 74 20 74 6f 20 72 6f 75 74 65 72 2d 4c 53 41 e2 80 99 73 20 6d 65 74 72 69 63 20 66 69 65 6c 64 | t.to.router-LSA...s.metric.field |
104a20 | 20 61 6e 64 20 75 73 65 64 20 66 6f 72 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 2e 20 54 | .and.used.for.SPF.calculation..T |
104a40 | 68 65 20 63 6f 73 74 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 36 35 35 33 35 2e 00 54 68 69 | he.cost.range.is.1.to.65535..Thi |
104a60 | 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6d 69 6e 69 6d 75 6d 20 69 6e 74 65 72 76 61 6c 20 | s.command.sets.minimum.interval. |
104a80 | 62 65 74 77 65 65 6e 20 63 6f 6e 73 65 63 75 74 69 76 65 20 53 50 46 20 63 61 6c 63 75 6c 61 74 | between.consecutive.SPF.calculat |
104aa0 | 69 6f 6e 73 20 69 6e 20 73 65 63 6f 6e 64 73 2e 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e | ions.in.seconds.The.interval.ran |
104ac0 | 67 65 20 69 73 20 31 20 74 6f 20 31 32 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 | ge.is.1.to.120..This.command.set |
104ae0 | 73 20 6d 69 6e 69 6d 75 6d 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 20 62 65 | s.minimum.interval.in.seconds.be |
104b00 | 74 77 65 65 6e 20 72 65 67 65 6e 65 72 61 74 69 6e 67 20 73 61 6d 65 20 4c 53 50 2e 20 54 68 65 | tween.regenerating.same.LSP..The |
104b20 | 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 32 30 2e 00 54 68 69 | .interval.range.is.1.to.120..Thi |
104b40 | 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6d 75 6c 74 69 70 6c 69 65 72 20 66 6f 72 20 68 65 | s.command.sets.multiplier.for.he |
104b60 | 6c 6c 6f 20 68 6f 6c 64 69 6e 67 20 74 69 6d 65 20 6f 6e 20 61 20 67 69 76 65 6e 20 69 6e 74 65 | llo.holding.time.on.a.given.inte |
104b80 | 72 66 61 63 65 2e 20 54 68 65 20 72 61 6e 67 65 20 69 73 20 32 20 74 6f 20 31 30 30 2e 00 54 68 | rface..The.range.is.2.to.100..Th |
104ba0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 | is.command.sets.number.of.second |
104bc0 | 73 20 66 6f 72 20 49 6e 66 54 72 61 6e 73 44 65 6c 61 79 20 76 61 6c 75 65 2e 20 49 74 20 61 6c | s.for.InfTransDelay.value..It.al |
104be0 | 6c 6f 77 73 20 74 6f 20 73 65 74 20 61 6e 64 20 61 64 6a 75 73 74 20 66 6f 72 20 65 61 63 68 20 | lows.to.set.and.adjust.for.each. |
104c00 | 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 64 65 6c 61 79 20 69 6e 74 65 72 76 61 6c 20 62 65 66 | interface.the.delay.interval.bef |
104c20 | 6f 72 65 20 73 74 61 72 74 69 6e 67 20 74 68 65 20 73 79 6e 63 68 72 6f 6e 69 7a 69 6e 67 20 70 | ore.starting.the.synchronizing.p |
104c40 | 72 6f 63 65 73 73 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 27 73 20 64 61 74 61 62 61 73 65 20 | rocess.of.the.router's.database. |
104c60 | 77 69 74 68 20 61 6c 6c 20 6e 65 69 67 68 62 6f 72 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 | with.all.neighbors..The.default. |
104c80 | 76 61 6c 75 65 20 69 73 20 31 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c | value.is.1.seconds..The.interval |
104ca0 | 20 72 61 6e 67 65 20 69 73 20 33 20 74 6f 20 36 35 35 33 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | .range.is.3.to.65535..This.comma |
104cc0 | 6e 64 20 73 65 74 73 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 66 6f 72 20 52 78 | nd.sets.number.of.seconds.for.Rx |
104ce0 | 6d 74 49 6e 74 65 72 76 61 6c 20 74 69 6d 65 72 20 76 61 6c 75 65 2e 20 54 68 69 73 20 76 61 6c | mtInterval.timer.value..This.val |
104d00 | 75 65 20 69 73 20 75 73 65 64 20 77 68 65 6e 20 72 65 74 72 61 6e 73 6d 69 74 74 69 6e 67 20 44 | ue.is.used.when.retransmitting.D |
104d20 | 61 74 61 62 61 73 65 20 44 65 73 63 72 69 70 74 69 6f 6e 20 61 6e 64 20 4c 69 6e 6b 20 53 74 61 | atabase.Description.and.Link.Sta |
104d40 | 74 65 20 52 65 71 75 65 73 74 20 70 61 63 6b 65 74 73 20 69 66 20 61 63 6b 6e 6f 77 6c 65 64 67 | te.Request.packets.if.acknowledg |
104d60 | 65 20 77 61 73 20 6e 6f 74 20 72 65 63 65 69 76 65 64 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 | e.was.not.received..The.default. |
104d80 | 76 61 6c 75 65 20 69 73 20 35 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c | value.is.5.seconds..The.interval |
104da0 | 20 72 61 6e 67 65 20 69 73 20 33 20 74 6f 20 36 35 35 33 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | .range.is.3.to.65535..This.comma |
104dc0 | 6e 64 20 73 65 74 73 20 6f 6c 64 2d 73 74 79 6c 65 20 28 49 53 4f 20 31 30 35 38 39 29 20 6f 72 | nd.sets.old-style.(ISO.10589).or |
104de0 | 20 6e 65 77 20 73 74 79 6c 65 20 70 61 63 6b 65 74 20 66 6f 72 6d 61 74 73 3a 00 54 68 69 73 20 | .new.style.packet.formats:.This. |
104e00 | 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6f 74 68 65 72 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e | command.sets.other.confederation |
104e20 | 73 20 3c 6e 73 75 62 61 73 6e 3e 20 61 73 20 6d 65 6d 62 65 72 73 20 6f 66 20 61 75 74 6f 6e 6f | s.<nsubasn>.as.members.of.autono |
104e40 | 6d 6f 75 73 20 73 79 73 74 65 6d 20 73 70 65 63 69 66 69 65 64 20 62 79 20 3a 63 66 67 63 6d 64 | mous.system.specified.by.:cfgcmd |
104e60 | 3a 60 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 69 64 65 6e 74 69 66 69 65 72 20 3c 61 73 6e 3e | :`confederation.identifier.<asn> |
104e80 | 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6f 76 65 72 6c 6f 61 64 20 62 69 | `..This.command.sets.overload.bi |
104ea0 | 74 20 74 6f 20 61 76 6f 69 64 20 61 6e 79 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 20 74 | t.to.avoid.any.transit.traffic.t |
104ec0 | 68 72 6f 75 67 68 20 74 68 69 73 20 72 6f 75 74 65 72 2e 20 49 74 20 69 73 20 64 65 73 63 72 69 | hrough.this.router..It.is.descri |
104ee0 | 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 37 38 37 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | bed.in.:rfc:`3787`..This.command |
104f00 | 20 73 65 74 73 20 70 72 69 6f 72 69 74 79 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 | .sets.priority.for.the.interface |
104f20 | 20 66 6f 72 20 3a 61 62 62 72 3a 60 44 49 53 20 28 44 65 73 69 67 6e 61 74 65 64 20 49 6e 74 65 | .for.:abbr:`DIS.(Designated.Inte |
104f40 | 72 6d 65 64 69 61 74 65 20 53 79 73 74 65 6d 29 60 20 65 6c 65 63 74 69 6f 6e 2e 20 54 68 65 20 | rmediate.System)`.election..The. |
104f60 | 70 72 69 6f 72 69 74 79 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 31 32 37 2e 00 54 68 69 73 | priority.range.is.0.to.127..This |
104f80 | 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 | .command.sets.the.administrative |
104fa0 | 20 64 69 73 74 61 6e 63 65 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 72 6f 75 74 65 | .distance.for.a.particular.route |
104fc0 | 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 | ..The.distance.range.is.1.to.255 |
104fe0 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 63 6f 73 74 20 6f 66 20 | ..This.command.sets.the.cost.of. |
105000 | 64 65 66 61 75 6c 74 2d 73 75 6d 6d 61 72 79 20 4c 53 41 73 20 61 6e 6e 6f 75 6e 63 65 64 20 74 | default-summary.LSAs.announced.t |
105020 | 6f 20 73 74 75 62 62 79 20 61 72 65 61 73 2e 20 54 68 65 20 63 6f 73 74 20 72 61 6e 67 65 20 69 | o.stubby.areas..The.cost.range.i |
105040 | 73 20 30 20 74 6f 20 31 36 37 37 37 32 31 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 | s.0.to.16777215..This.command.se |
105060 | 74 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 63 6f 73 74 20 6f 66 20 4c 53 41 73 20 61 6e 6e 6f | ts.the.default.cost.of.LSAs.anno |
105080 | 75 6e 63 65 64 20 74 6f 20 4e 53 53 41 20 61 72 65 61 73 2e 20 54 68 65 20 63 6f 73 74 20 72 61 | unced.to.NSSA.areas..The.cost.ra |
1050a0 | 6e 67 65 20 69 73 20 30 20 74 6f 20 31 36 37 37 37 32 31 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | nge.is.0.to.16777215..This.comma |
1050c0 | 6e 64 20 73 65 74 73 20 74 68 65 20 69 6e 69 74 69 61 6c 20 64 65 6c 61 79 2c 20 74 68 65 20 69 | nd.sets.the.initial.delay,.the.i |
1050e0 | 6e 69 74 69 61 6c 2d 68 6f 6c 64 74 69 6d 65 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 2d | nitial-holdtime.and.the.maximum- |
105100 | 68 6f 6c 64 74 69 6d 65 20 62 65 74 77 65 65 6e 20 77 68 65 6e 20 53 50 46 20 69 73 20 63 61 6c | holdtime.between.when.SPF.is.cal |
105120 | 63 75 6c 61 74 65 64 20 61 6e 64 20 74 68 65 20 65 76 65 6e 74 20 77 68 69 63 68 20 74 72 69 67 | culated.and.the.event.which.trig |
105140 | 67 65 72 65 64 20 74 68 65 20 63 61 6c 63 75 6c 61 74 69 6f 6e 2e 20 54 68 65 20 74 69 6d 65 73 | gered.the.calculation..The.times |
105160 | 20 61 72 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 61 | .are.specified.in.milliseconds.a |
105180 | 6e 64 20 6d 75 73 74 20 62 65 20 69 6e 20 74 68 65 20 72 61 6e 67 65 20 6f 66 20 30 20 74 6f 20 | nd.must.be.in.the.range.of.0.to. |
1051a0 | 36 30 30 30 30 30 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2e 20 3a 63 66 67 63 6d 64 3a 60 64 65 | 600000.milliseconds..:cfgcmd:`de |
1051c0 | 6c 61 79 60 20 73 65 74 73 20 74 68 65 20 69 6e 69 74 69 61 6c 20 53 50 46 20 73 63 68 65 64 75 | lay`.sets.the.initial.SPF.schedu |
1051e0 | 6c 65 20 64 65 6c 61 79 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 64 65 | le.delay.in.milliseconds..The.de |
105200 | 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 32 30 30 20 6d 73 2e 20 3a 63 66 67 63 6d 64 3a 60 | fault.value.is.200.ms..:cfgcmd:` |
105220 | 69 6e 69 74 69 61 6c 2d 68 6f 6c 64 74 69 6d 65 60 20 73 65 74 73 20 74 68 65 20 6d 69 6e 69 6d | initial-holdtime`.sets.the.minim |
105240 | 75 6d 20 68 6f 6c 64 20 74 69 6d 65 20 62 65 74 77 65 65 6e 20 74 77 6f 20 63 6f 6e 73 65 63 75 | um.hold.time.between.two.consecu |
105260 | 74 69 76 65 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 73 2e 20 54 68 65 20 64 65 66 61 75 | tive.SPF.calculations..The.defau |
105280 | 6c 74 20 76 61 6c 75 65 20 69 73 20 31 30 30 30 20 6d 73 2e 20 3a 63 66 67 63 6d 64 3a 60 6d 61 | lt.value.is.1000.ms..:cfgcmd:`ma |
1052a0 | 78 2d 68 6f 6c 64 74 69 6d 65 60 20 73 65 74 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 77 61 69 | x-holdtime`.sets.the.maximum.wai |
1052c0 | 74 20 74 69 6d 65 20 62 65 74 77 65 65 6e 20 74 77 6f 20 63 6f 6e 73 65 63 75 74 69 76 65 20 53 | t.time.between.two.consecutive.S |
1052e0 | 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c | PF.calculations..The.default.val |
105300 | 75 65 20 69 73 20 31 30 30 30 30 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 | ue.is.10000.ms..This.command.set |
105320 | 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 62 61 6e 64 77 69 64 74 68 20 66 6f 72 20 63 6f | s.the.interface.bandwidth.for.co |
105340 | 73 74 20 63 61 6c 63 75 6c 61 74 69 6f 6e 73 2c 20 77 68 65 72 65 20 62 61 6e 64 77 69 64 74 68 | st.calculations,.where.bandwidth |
105360 | 20 63 61 6e 20 62 65 20 69 6e 20 72 61 6e 67 65 20 66 72 6f 6d 20 31 20 74 6f 20 31 30 30 30 30 | .can.be.in.range.from.1.to.10000 |
105380 | 30 2c 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 4d 62 69 74 73 2f 73 2e 00 54 68 69 73 20 63 6f | 0,.specified.in.Mbits/s..This.co |
1053a0 | 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 79 70 65 3a 00 54 | mmand.sets.the.interface.type:.T |
1053c0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 | his.command.sets.the.interface.w |
1053e0 | 69 74 68 20 52 49 50 20 4d 44 35 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 54 68 69 73 | ith.RIP.MD5.authentication..This |
105400 | 20 63 6f 6d 6d 61 6e 64 20 61 6c 73 6f 20 73 65 74 73 20 4d 44 35 20 4b 65 79 2e 20 54 68 65 20 | .command.also.sets.MD5.Key..The. |
105420 | 6b 65 79 20 6d 75 73 74 20 62 65 20 73 68 6f 72 74 65 72 20 74 68 61 6e 20 31 36 20 63 68 61 72 | key.must.be.shorter.than.16.char |
105440 | 61 63 74 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 69 6e | acters..This.command.sets.the.in |
105460 | 74 65 72 66 61 63 65 20 77 69 74 68 20 52 49 50 20 73 69 6d 70 6c 65 20 70 61 73 73 77 6f 72 64 | terface.with.RIP.simple.password |
105480 | 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c | .authentication..This.command.al |
1054a0 | 73 6f 20 73 65 74 73 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 74 72 69 6e 67 2e 20 54 | so.sets.authentication.string..T |
1054c0 | 68 65 20 73 74 72 69 6e 67 20 6d 75 73 74 20 62 65 20 73 68 6f 72 74 65 72 20 74 68 61 6e 20 31 | he.string.must.be.shorter.than.1 |
1054e0 | 36 20 63 68 61 72 61 63 74 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 | 6.characters..This.command.sets. |
105500 | 74 68 65 20 6d 75 6c 74 69 70 6c 69 63 61 74 69 76 65 20 66 61 63 74 6f 72 20 75 73 65 64 20 66 | the.multiplicative.factor.used.f |
105520 | 6f 72 20 64 69 76 65 72 73 69 74 79 20 72 6f 75 74 69 6e 67 2c 20 69 6e 20 75 6e 69 74 73 20 6f | or.diversity.routing,.in.units.o |
105540 | 66 20 31 2f 32 35 36 3b 20 6c 6f 77 65 72 20 76 61 6c 75 65 73 20 63 61 75 73 65 20 64 69 76 65 | f.1/256;.lower.values.cause.dive |
105560 | 72 73 69 74 79 20 74 6f 20 70 6c 61 79 20 61 20 6d 6f 72 65 20 69 6d 70 6f 72 74 61 6e 74 20 72 | rsity.to.play.a.more.important.r |
105580 | 6f 6c 65 20 69 6e 20 72 6f 75 74 65 20 73 65 6c 65 63 74 69 6f 6e 2e 20 54 68 65 20 64 65 66 61 | ole.in.route.selection..The.defa |
1055a0 | 75 6c 74 20 69 74 20 32 35 36 2c 20 77 68 69 63 68 20 6d 65 61 6e 73 20 74 68 61 74 20 64 69 76 | ult.it.256,.which.means.that.div |
1055c0 | 65 72 73 69 74 79 20 70 6c 61 79 73 20 6e 6f 20 72 6f 6c 65 20 69 6e 20 72 6f 75 74 65 20 73 65 | ersity.plays.no.role.in.route.se |
1055e0 | 6c 65 63 74 69 6f 6e 3b 20 79 6f 75 20 77 69 6c 6c 20 70 72 6f 62 61 62 6c 79 20 77 61 6e 74 20 | lection;.you.will.probably.want. |
105600 | 74 6f 20 73 65 74 20 74 68 61 74 20 74 6f 20 31 32 38 20 6f 72 20 6c 65 73 73 20 6f 6e 20 6e 6f | to.set.that.to.128.or.less.on.no |
105620 | 64 65 73 20 77 69 74 68 20 6d 75 6c 74 69 70 6c 65 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 72 61 | des.with.multiple.independent.ra |
105640 | 64 69 6f 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 72 65 66 65 | dios..This.command.sets.the.refe |
105660 | 72 65 6e 63 65 20 62 61 6e 64 77 69 64 74 68 20 66 6f 72 20 63 6f 73 74 20 63 61 6c 63 75 6c 61 | rence.bandwidth.for.cost.calcula |
105680 | 74 69 6f 6e 73 2c 20 77 68 65 72 65 20 62 61 6e 64 77 69 64 74 68 20 63 61 6e 20 62 65 20 69 6e | tions,.where.bandwidth.can.be.in |
1056a0 | 20 72 61 6e 67 65 20 66 72 6f 6d 20 31 20 74 6f 20 34 32 39 34 39 36 37 2c 20 73 70 65 63 69 66 | .range.from.1.to.4294967,.specif |
1056c0 | 69 65 64 20 69 6e 20 4d 62 69 74 73 2f 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 | ied.in.Mbits/s..The.default.is.1 |
1056e0 | 30 30 4d 62 69 74 2f 73 20 28 69 2e 65 2e 20 61 20 6c 69 6e 6b 20 6f 66 20 62 61 6e 64 77 69 64 | 00Mbit/s.(i.e..a.link.of.bandwid |
105700 | 74 68 20 31 30 30 4d 62 69 74 2f 73 20 6f 72 20 68 69 67 68 65 72 20 77 69 6c 6c 20 68 61 76 65 | th.100Mbit/s.or.higher.will.have |
105720 | 20 61 20 63 6f 73 74 20 6f 66 20 31 2e 20 43 6f 73 74 20 6f 66 20 6c 6f 77 65 72 20 62 61 6e 64 | .a.cost.of.1..Cost.of.lower.band |
105740 | 77 69 64 74 68 20 6c 69 6e 6b 73 20 77 69 6c 6c 20 62 65 20 73 63 61 6c 65 64 20 77 69 74 68 20 | width.links.will.be.scaled.with. |
105760 | 72 65 66 65 72 65 6e 63 65 20 74 6f 20 74 68 69 73 20 63 6f 73 74 29 2e 00 54 68 69 73 20 63 6f | reference.to.this.cost)..This.co |
105780 | 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 72 6f 75 74 65 72 2d 49 44 20 6f 66 20 74 68 65 20 | mmand.sets.the.router-ID.of.the. |
1057a0 | 4f 53 50 46 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 72 6f 75 74 65 72 2d 49 44 20 6d 61 79 20 | OSPF.process..The.router-ID.may. |
1057c0 | 62 65 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 2c 20 | be.an.IP.address.of.the.router,. |
1057e0 | 62 75 74 20 6e 65 65 64 20 6e 6f 74 20 62 65 20 e2 80 93 20 69 74 20 63 61 6e 20 62 65 20 61 6e | but.need.not.be.....it.can.be.an |
105800 | 79 20 61 72 62 69 74 72 61 72 79 20 33 32 62 69 74 20 6e 75 6d 62 65 72 2e 20 48 6f 77 65 76 65 | y.arbitrary.32bit.number..Howeve |
105820 | 72 20 69 74 20 4d 55 53 54 20 62 65 20 75 6e 69 71 75 65 20 77 69 74 68 69 6e 20 74 68 65 20 65 | r.it.MUST.be.unique.within.the.e |
105840 | 6e 74 69 72 65 20 4f 53 50 46 20 64 6f 6d 61 69 6e 20 74 6f 20 74 68 65 20 4f 53 50 46 20 73 70 | ntire.OSPF.domain.to.the.OSPF.sp |
105860 | 65 61 6b 65 72 20 e2 80 93 20 62 61 64 20 74 68 69 6e 67 73 20 77 69 6c 6c 20 68 61 70 70 65 6e | eaker.....bad.things.will.happen |
105880 | 20 69 66 20 6d 75 6c 74 69 70 6c 65 20 4f 53 50 46 20 73 70 65 61 6b 65 72 73 20 61 72 65 20 63 | .if.multiple.OSPF.speakers.are.c |
1058a0 | 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 20 74 68 65 20 73 61 6d 65 20 72 6f 75 74 65 72 2d 49 | onfigured.with.the.same.router-I |
1058c0 | 44 21 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 72 6f 75 74 65 72 2d | D!.This.command.sets.the.router- |
1058e0 | 49 44 20 6f 66 20 74 68 65 20 4f 53 50 46 76 33 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 72 6f | ID.of.the.OSPFv3.process..The.ro |
105900 | 75 74 65 72 2d 49 44 20 6d 61 79 20 62 65 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 | uter-ID.may.be.an.IP.address.of. |
105920 | 74 68 65 20 72 6f 75 74 65 72 2c 20 62 75 74 20 6e 65 65 64 20 6e 6f 74 20 62 65 20 e2 80 93 20 | the.router,.but.need.not.be..... |
105940 | 69 74 20 63 61 6e 20 62 65 20 61 6e 79 20 61 72 62 69 74 72 61 72 79 20 33 32 62 69 74 20 6e 75 | it.can.be.any.arbitrary.32bit.nu |
105960 | 6d 62 65 72 2e 20 48 6f 77 65 76 65 72 20 69 74 20 4d 55 53 54 20 62 65 20 75 6e 69 71 75 65 20 | mber..However.it.MUST.be.unique. |
105980 | 77 69 74 68 69 6e 20 74 68 65 20 65 6e 74 69 72 65 20 4f 53 50 46 76 33 20 64 6f 6d 61 69 6e 20 | within.the.entire.OSPFv3.domain. |
1059a0 | 74 6f 20 74 68 65 20 4f 53 50 46 76 33 20 73 70 65 61 6b 65 72 20 e2 80 93 20 62 61 64 20 74 68 | to.the.OSPFv3.speaker.....bad.th |
1059c0 | 69 6e 67 73 20 77 69 6c 6c 20 68 61 70 70 65 6e 20 69 66 20 6d 75 6c 74 69 70 6c 65 20 4f 53 50 | ings.will.happen.if.multiple.OSP |
1059e0 | 46 76 33 20 73 70 65 61 6b 65 72 73 20 61 72 65 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 | Fv3.speakers.are.configured.with |
105a00 | 20 74 68 65 20 73 61 6d 65 20 72 6f 75 74 65 72 2d 49 44 21 00 54 68 69 73 20 63 6f 6d 6d 61 6e | .the.same.router-ID!.This.comman |
105a20 | 64 20 73 65 74 73 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 | d.sets.the.specified.interface.t |
105a40 | 6f 20 70 61 73 73 69 76 65 20 6d 6f 64 65 2e 20 4f 6e 20 70 61 73 73 69 76 65 20 6d 6f 64 65 20 | o.passive.mode..On.passive.mode. |
105a60 | 69 6e 74 65 72 66 61 63 65 2c 20 61 6c 6c 20 72 65 63 65 69 76 69 6e 67 20 70 61 63 6b 65 74 73 | interface,.all.receiving.packets |
105a80 | 20 61 72 65 20 70 72 6f 63 65 73 73 65 64 20 61 73 20 6e 6f 72 6d 61 6c 20 61 6e 64 20 56 79 4f | .are.processed.as.normal.and.VyO |
105aa0 | 53 20 64 6f 65 73 20 6e 6f 74 20 73 65 6e 64 20 65 69 74 68 65 72 20 6d 75 6c 74 69 63 61 73 74 | S.does.not.send.either.multicast |
105ac0 | 20 6f 72 20 75 6e 69 63 61 73 74 20 52 49 50 20 70 61 63 6b 65 74 73 20 65 78 63 65 70 74 20 74 | .or.unicast.RIP.packets.except.t |
105ae0 | 6f 20 52 49 50 20 6e 65 69 67 68 62 6f 72 73 20 73 70 65 63 69 66 69 65 64 20 77 69 74 68 20 6e | o.RIP.neighbors.specified.with.n |
105b00 | 65 69 67 68 62 6f 72 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 68 | eighbor.command..This.command.sh |
105b20 | 6f 75 6c 64 20 4e 4f 54 20 62 65 20 73 65 74 20 6e 6f 72 6d 61 6c 6c 79 2e 00 54 68 69 73 20 63 | ould.NOT.be.set.normally..This.c |
105b40 | 6f 6d 6d 61 6e 64 20 73 68 6f 77 73 20 62 6f 74 68 20 73 74 61 74 75 73 20 61 6e 64 20 73 74 61 | ommand.shows.both.status.and.sta |
105b60 | 74 69 73 74 69 63 73 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 77 69 72 65 6c 65 73 | tistics.on.the.specified.wireles |
105b80 | 73 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 | s.interface..The.wireless.interf |
105ba0 | 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 63 61 6e 20 72 61 6e 67 65 20 66 72 6f 6d 20 77 6c | ace.identifier.can.range.from.wl |
105bc0 | 61 6e 30 20 74 6f 20 77 6c 61 6e 39 39 39 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 | an0.to.wlan999..This.command.spe |
105be0 | 63 69 66 69 65 73 20 61 20 42 47 50 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 69 64 65 6e 74 | cifies.a.BGP.confederation.ident |
105c00 | 69 66 69 65 72 2e 20 3c 61 73 6e 3e 20 69 73 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 74 68 | ifier..<asn>.is.the.number.of.th |
105c20 | 65 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 74 68 61 74 20 69 6e 74 65 72 6e 61 | e.autonomous.system.that.interna |
105c40 | 6c 6c 79 20 69 6e 63 6c 75 64 65 73 20 6d 75 6c 74 69 70 6c 65 20 73 75 62 2d 61 75 74 6f 6e 6f | lly.includes.multiple.sub-autono |
105c60 | 6d 6f 75 73 20 73 79 73 74 65 6d 73 20 28 61 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 29 2e 00 | mous.systems.(a.confederation).. |
105c80 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 42 61 62 65 6c 20 65 | This.command.specifies.a.Babel.e |
105ca0 | 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 20 62 79 20 69 6e 74 65 72 66 61 63 65 20 6e 61 | nabled.interface.by.interface.na |
105cc0 | 6d 65 2e 20 42 6f 74 68 20 74 68 65 20 73 65 6e 64 69 6e 67 20 61 6e 64 20 72 65 63 65 69 76 69 | me..Both.the.sending.and.receivi |
105ce0 | 6e 67 20 6f 66 20 42 61 62 65 6c 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 62 65 20 65 6e 61 62 | ng.of.Babel.packets.will.be.enab |
105d00 | 6c 65 64 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 73 70 65 63 69 66 69 65 64 20 69 | led.on.the.interface.specified.i |
105d20 | 6e 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 | n.this.command..This.command.spe |
105d40 | 63 69 66 69 65 73 20 61 20 4d 44 35 20 70 61 73 73 77 6f 72 64 20 74 6f 20 62 65 20 75 73 65 64 | cifies.a.MD5.password.to.be.used |
105d60 | 20 77 69 74 68 20 74 68 65 20 74 63 70 20 73 6f 63 6b 65 74 20 74 68 61 74 20 69 73 20 62 65 69 | .with.the.tcp.socket.that.is.bei |
105d80 | 6e 67 20 75 73 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 72 65 6d 6f 74 65 | ng.used.to.connect.to.the.remote |
105da0 | 20 70 65 65 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 | .peer..This.command.specifies.a. |
105dc0 | 52 49 50 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 20 62 79 20 69 6e 74 65 72 66 61 | RIP.enabled.interface.by.interfa |
105de0 | 63 65 20 6e 61 6d 65 2e 20 42 6f 74 68 20 74 68 65 20 73 65 6e 64 69 6e 67 20 61 6e 64 20 72 65 | ce.name..Both.the.sending.and.re |
105e00 | 63 65 69 76 69 6e 67 20 6f 66 20 52 49 50 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 62 65 20 65 | ceiving.of.RIP.packets.will.be.e |
105e20 | 6e 61 62 6c 65 64 20 6f 6e 20 74 68 65 20 70 6f 72 74 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 | nabled.on.the.port.specified.in. |
105e40 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 | this.command..This.command.speci |
105e60 | 66 69 65 73 20 61 20 52 49 50 20 6e 65 69 67 68 62 6f 72 2e 20 57 68 65 6e 20 61 20 6e 65 69 67 | fies.a.RIP.neighbor..When.a.neig |
105e80 | 68 62 6f 72 20 64 6f 65 73 6e e2 80 99 74 20 75 6e 64 65 72 73 74 61 6e 64 20 6d 75 6c 74 69 63 | hbor.doesn...t.understand.multic |
105ea0 | 61 73 74 2c 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 73 70 65 | ast,.this.command.is.used.to.spe |
105ec0 | 63 69 66 79 20 6e 65 69 67 68 62 6f 72 73 2e 20 49 6e 20 73 6f 6d 65 20 63 61 73 65 73 2c 20 6e | cify.neighbors..In.some.cases,.n |
105ee0 | 6f 74 20 61 6c 6c 20 72 6f 75 74 65 72 73 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 75 | ot.all.routers.will.be.able.to.u |
105f00 | 6e 64 65 72 73 74 61 6e 64 20 6d 75 6c 74 69 63 61 73 74 69 6e 67 2c 20 77 68 65 72 65 20 70 61 | nderstand.multicasting,.where.pa |
105f20 | 63 6b 65 74 73 20 61 72 65 20 73 65 6e 74 20 74 6f 20 61 20 6e 65 74 77 6f 72 6b 20 6f 72 20 61 | ckets.are.sent.to.a.network.or.a |
105f40 | 20 67 72 6f 75 70 20 6f 66 20 61 64 64 72 65 73 73 65 73 2e 20 49 6e 20 61 20 73 69 74 75 61 74 | .group.of.addresses..In.a.situat |
105f60 | 69 6f 6e 20 77 68 65 72 65 20 61 20 6e 65 69 67 68 62 6f 72 20 63 61 6e 6e 6f 74 20 70 72 6f 63 | ion.where.a.neighbor.cannot.proc |
105f80 | 65 73 73 20 6d 75 6c 74 69 63 61 73 74 20 70 61 63 6b 65 74 73 2c 20 69 74 20 69 73 20 6e 65 63 | ess.multicast.packets,.it.is.nec |
105fa0 | 65 73 73 61 72 79 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 20 64 69 72 65 63 74 20 6c 69 6e | essary.to.establish.a.direct.lin |
105fc0 | 6b 20 62 65 74 77 65 65 6e 20 72 6f 75 74 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | k.between.routers..This.command. |
105fe0 | 73 70 65 63 69 66 69 65 73 20 61 20 64 65 66 61 75 6c 74 20 77 65 69 67 68 74 20 76 61 6c 75 65 | specifies.a.default.weight.value |
106000 | 20 66 6f 72 20 74 68 65 20 6e 65 69 67 68 62 6f 72 e2 80 99 73 20 72 6f 75 74 65 73 2e 20 54 68 | .for.the.neighbor...s.routes..Th |
106020 | 65 20 6e 75 6d 62 65 72 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 36 35 35 33 35 2e 00 54 68 | e.number.range.is.1.to.65535..Th |
106040 | 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 6d 61 78 69 6d 75 6d 20 6e | is.command.specifies.a.maximum.n |
106060 | 75 6d 62 65 72 20 6f 66 20 70 72 65 66 69 78 65 73 20 77 65 20 63 61 6e 20 72 65 63 65 69 76 65 | umber.of.prefixes.we.can.receive |
106080 | 20 66 72 6f 6d 20 61 20 67 69 76 65 6e 20 70 65 65 72 2e 20 49 66 20 74 68 69 73 20 6e 75 6d 62 | .from.a.given.peer..If.this.numb |
1060a0 | 65 72 20 69 73 20 65 78 63 65 65 64 65 64 2c 20 74 68 65 20 42 47 50 20 73 65 73 73 69 6f 6e 20 | er.is.exceeded,.the.BGP.session. |
1060c0 | 77 69 6c 6c 20 62 65 20 64 65 73 74 72 6f 79 65 64 2e 20 54 68 65 20 6e 75 6d 62 65 72 20 72 61 | will.be.destroyed..The.number.ra |
1060e0 | 6e 67 65 20 69 73 20 31 20 74 6f 20 34 32 39 34 39 36 37 32 39 35 2e 00 54 68 69 73 20 63 6f 6d | nge.is.1.to.4294967295..This.com |
106100 | 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 20 61 73 | mand.specifies.all.interfaces.as |
106120 | 20 70 61 73 73 69 76 65 20 62 79 20 64 65 66 61 75 6c 74 2e 20 42 65 63 61 75 73 65 20 74 68 69 | .passive.by.default..Because.thi |
106140 | 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 73 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 | s.command.changes.the.configurat |
106160 | 69 6f 6e 20 6c 6f 67 69 63 20 74 6f 20 61 20 64 65 66 61 75 6c 74 20 70 61 73 73 69 76 65 3b 20 | ion.logic.to.a.default.passive;. |
106180 | 74 68 65 72 65 66 6f 72 65 2c 20 69 6e 74 65 72 66 61 63 65 73 20 77 68 65 72 65 20 72 6f 75 74 | therefore,.interfaces.where.rout |
1061a0 | 65 72 20 61 64 6a 61 63 65 6e 63 69 65 73 20 61 72 65 20 65 78 70 65 63 74 65 64 20 6e 65 65 64 | er.adjacencies.are.expected.need |
1061c0 | 20 74 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 20 74 68 65 20 3a 63 66 67 63 | .to.be.configured.with.the.:cfgc |
1061e0 | 6d 64 3a 60 70 61 73 73 69 76 65 2d 69 6e 74 65 72 66 61 63 65 2d 65 78 63 6c 75 64 65 60 20 63 | md:`passive-interface-exclude`.c |
106200 | 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 | ommand..This.command.specifies.a |
106220 | 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 70 61 73 73 69 76 65 20 6d 6f 64 65 2e 00 54 | ll.interfaces.to.passive.mode..T |
106240 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 6e 20 61 67 67 72 65 67 61 | his.command.specifies.an.aggrega |
106260 | 74 65 20 61 64 64 72 65 73 73 20 61 6e 64 20 70 72 6f 76 69 64 65 73 20 74 68 61 74 20 6c 6f 6e | te.address.and.provides.that.lon |
106280 | 67 65 72 2d 70 72 65 66 69 78 65 73 20 69 6e 73 69 64 65 20 6f 66 20 74 68 65 20 61 67 67 72 65 | ger-prefixes.inside.of.the.aggre |
1062a0 | 67 61 74 65 20 61 64 64 72 65 73 73 20 61 72 65 20 73 75 70 70 72 65 73 73 65 64 20 62 65 66 6f | gate.address.are.suppressed.befo |
1062c0 | 72 65 20 73 65 6e 64 69 6e 67 20 42 47 50 20 75 70 64 61 74 65 73 20 6f 75 74 20 74 6f 20 70 65 | re.sending.BGP.updates.out.to.pe |
1062e0 | 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 6e 20 61 | ers..This.command.specifies.an.a |
106300 | 67 67 72 65 67 61 74 65 20 61 64 64 72 65 73 73 20 77 69 74 68 20 61 20 6d 61 74 68 65 6d 61 74 | ggregate.address.with.a.mathemat |
106320 | 69 63 61 6c 20 73 65 74 20 6f 66 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 73 2e 20 | ical.set.of.autonomous.systems.. |
106340 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 75 6d 6d 61 72 69 7a 65 73 20 74 68 65 20 41 53 5f 50 | This.command.summarizes.the.AS_P |
106360 | 41 54 48 20 61 74 74 72 69 62 75 74 65 73 20 6f 66 20 61 6c 6c 20 74 68 65 20 69 6e 64 69 76 69 | ATH.attributes.of.all.the.indivi |
106380 | 64 75 61 6c 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 | dual.routes..This.command.specif |
1063a0 | 69 65 73 20 61 6e 20 61 67 67 72 65 67 61 74 65 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 72 6f | ies.an.aggregate.address..The.ro |
1063c0 | 75 74 65 72 20 77 69 6c 6c 20 61 6c 73 6f 20 61 6e 6e 6f 75 6e 63 65 20 6c 6f 6e 67 65 72 2d 70 | uter.will.also.announce.longer-p |
1063e0 | 72 65 66 69 78 65 73 20 69 6e 73 69 64 65 20 6f 66 20 74 68 65 20 61 67 67 72 65 67 61 74 65 20 | refixes.inside.of.the.aggregate. |
106400 | 61 64 64 72 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 | address..This.command.specifies. |
106420 | 61 74 74 72 69 62 75 74 65 73 20 74 6f 20 62 65 20 6c 65 66 74 20 75 6e 63 68 61 6e 67 65 64 20 | attributes.to.be.left.unchanged. |
106440 | 66 6f 72 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 20 73 65 6e 74 20 74 6f 20 61 20 70 65 65 | for.advertisements.sent.to.a.pee |
106460 | 72 20 6f 72 20 70 65 65 72 20 67 72 6f 75 70 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 | r.or.peer.group..This.command.sp |
106480 | 65 63 69 66 69 65 73 20 63 69 72 63 75 69 74 20 74 79 70 65 20 66 6f 72 20 69 6e 74 65 72 66 61 | ecifies.circuit.type.for.interfa |
1064a0 | 63 65 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 63 6c 75 73 74 | ce:.This.command.specifies.clust |
1064c0 | 65 72 20 49 44 20 77 68 69 63 68 20 69 64 65 6e 74 69 66 69 65 73 20 61 20 63 6f 6c 6c 65 63 74 | er.ID.which.identifies.a.collect |
1064e0 | 69 6f 6e 20 6f 66 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 73 20 61 6e 64 20 74 68 65 69 | ion.of.route.reflectors.and.thei |
106500 | 72 20 63 6c 69 65 6e 74 73 2c 20 61 6e 64 20 69 73 20 75 73 65 64 20 62 79 20 72 6f 75 74 65 20 | r.clients,.and.is.used.by.route. |
106520 | 72 65 66 6c 65 63 74 6f 72 73 20 74 6f 20 61 76 6f 69 64 20 6c 6f 6f 70 69 6e 67 2e 20 42 79 20 | reflectors.to.avoid.looping..By. |
106540 | 64 65 66 61 75 6c 74 20 63 6c 75 73 74 65 72 20 49 44 20 69 73 20 73 65 74 20 74 6f 20 74 68 65 | default.cluster.ID.is.set.to.the |
106560 | 20 42 47 50 20 72 6f 75 74 65 72 20 69 64 20 76 61 6c 75 65 2c 20 62 75 74 20 63 61 6e 20 62 65 | .BGP.router.id.value,.but.can.be |
106580 | 20 73 65 74 20 74 6f 20 61 6e 20 61 72 62 69 74 72 61 72 79 20 33 32 2d 62 69 74 20 76 61 6c 75 | .set.to.an.arbitrary.32-bit.valu |
1065a0 | 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 68 6f 6c 64 2d 74 | e..This.command.specifies.hold-t |
1065c0 | 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 74 69 6d 65 72 20 72 61 6e 67 65 20 | ime.in.seconds..The.timer.range. |
1065e0 | 69 73 20 34 20 74 6f 20 36 35 35 33 35 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 | is.4.to.65535..The.default.value |
106600 | 20 69 73 20 31 38 30 20 73 65 63 6f 6e 64 2e 20 49 66 20 79 6f 75 20 73 65 74 20 76 61 6c 75 65 | .is.180.second..If.you.set.value |
106620 | 20 74 6f 20 30 20 56 79 4f 53 20 77 69 6c 6c 20 6e 6f 74 20 68 6f 6c 64 20 72 6f 75 74 65 73 2e | .to.0.VyOS.will.not.hold.routes. |
106640 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 69 6e 74 65 72 66 61 63 | .This.command.specifies.interfac |
106660 | 65 20 61 73 20 70 61 73 73 69 76 65 2e 20 50 61 73 73 69 76 65 20 69 6e 74 65 72 66 61 63 65 20 | e.as.passive..Passive.interface. |
106680 | 61 64 76 65 72 74 69 73 65 73 20 69 74 73 20 61 64 64 72 65 73 73 2c 20 62 75 74 20 64 6f 65 73 | advertises.its.address,.but.does |
1066a0 | 20 6e 6f 74 20 72 75 6e 20 74 68 65 20 4f 53 50 46 20 70 72 6f 74 6f 63 6f 6c 20 28 61 64 6a 61 | .not.run.the.OSPF.protocol.(adja |
1066c0 | 63 65 6e 63 69 65 73 20 61 72 65 20 6e 6f 74 20 66 6f 72 6d 65 64 20 61 6e 64 20 68 65 6c 6c 6f | cencies.are.not.formed.and.hello |
1066e0 | 20 70 61 63 6b 65 74 73 20 61 72 65 20 6e 6f 74 20 67 65 6e 65 72 61 74 65 64 29 2e 00 54 68 69 | .packets.are.not.generated)..Thi |
106700 | 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 6b 65 65 70 2d 61 6c 69 76 65 20 74 | s.command.specifies.keep-alive.t |
106720 | 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 74 69 6d 65 72 20 63 61 6e 20 72 61 | ime.in.seconds..The.timer.can.ra |
106740 | 6e 67 65 20 66 72 6f 6d 20 34 20 74 6f 20 36 35 35 33 35 2e 20 54 68 65 20 64 65 66 61 75 6c 74 | nge.from.4.to.65535..The.default |
106760 | 20 76 61 6c 75 65 20 69 73 20 36 30 20 73 65 63 6f 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | .value.is.60.second..This.comman |
106780 | 64 20 73 70 65 63 69 66 69 65 73 20 6d 65 74 72 69 63 20 28 4d 45 44 29 20 66 6f 72 20 72 65 64 | d.specifies.metric.(MED).for.red |
1067a0 | 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 | istributed.routes..The.metric.ra |
1067c0 | 6e 67 65 20 69 73 20 30 20 74 6f 20 34 32 39 34 39 36 37 32 39 35 2e 20 54 68 65 72 65 20 61 72 | nge.is.0.to.4294967295..There.ar |
1067e0 | 65 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 | e.six.modes.available.for.route. |
106800 | 73 6f 75 72 63 65 3a 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c | source:.connected,.kernel,.ospf, |
106820 | 20 72 69 70 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | .rip,.static,.table..This.comman |
106840 | 64 20 73 70 65 63 69 66 69 65 73 20 6d 65 74 72 69 63 20 66 6f 72 20 72 65 64 69 73 74 72 69 62 | d.specifies.metric.for.redistrib |
106860 | 75 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 | uted.routes.from.the.given.route |
106880 | 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 | .source..There.are.five.modes.av |
1068a0 | 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 | ailable.for.route.source:.bgp,.c |
1068c0 | 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 73 74 61 74 69 63 2e 20 | onnected,.kernel,.ospf,.static.. |
1068e0 | 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 36 2e 00 54 68 69 | The.metric.range.is.1.to.16..Thi |
106900 | 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 6d 65 74 72 69 63 20 66 6f 72 20 72 | s.command.specifies.metric.for.r |
106920 | 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 67 69 76 | edistributed.routes.from.the.giv |
106940 | 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 | en.route.source..There.are.five. |
106960 | 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 | modes.available.for.route.source |
106980 | 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 72 69 70 2c 20 73 | :.bgp,.connected,.kernel,.rip,.s |
1069a0 | 74 61 74 69 63 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 | tatic..The.metric.range.is.1.to. |
1069c0 | 31 36 37 37 37 32 31 34 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 | 16777214..This.command.specifies |
1069e0 | 20 6d 65 74 72 69 63 20 66 6f 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 | .metric.for.redistributed.routes |
106a00 | 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 | .from.the.given.route.source..Th |
106a20 | 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 | ere.are.six.modes.available.for. |
106a40 | 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 | route.source:.bgp,.connected,.ke |
106a60 | 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 20 54 68 65 20 6d 65 74 | rnel,.ospf,.rip,.static..The.met |
106a80 | 72 69 63 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 36 37 37 37 32 31 35 2e 00 54 68 69 73 | ric.range.is.1.to.16777215..This |
106aa0 | 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 6d 65 74 72 69 63 20 74 79 70 65 20 66 | .command.specifies.metric.type.f |
106ac0 | 6f 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 2e 20 44 69 66 66 65 72 65 | or.redistributed.routes..Differe |
106ae0 | 6e 63 65 20 62 65 74 77 65 65 6e 20 74 77 6f 20 6d 65 74 72 69 63 20 74 79 70 65 73 20 74 68 61 | nce.between.two.metric.types.tha |
106b00 | 74 20 6d 65 74 72 69 63 20 74 79 70 65 20 31 20 69 73 20 61 20 6d 65 74 72 69 63 20 77 68 69 63 | t.metric.type.1.is.a.metric.whic |
106b20 | 68 20 69 73 20 22 63 6f 6d 6d 65 6e 73 75 72 61 62 6c 65 22 20 77 69 74 68 20 69 6e 6e 65 72 20 | h.is."commensurable".with.inner. |
106b40 | 4f 53 50 46 20 6c 69 6e 6b 73 2e 20 57 68 65 6e 20 63 61 6c 63 75 6c 61 74 69 6e 67 20 61 20 6d | OSPF.links..When.calculating.a.m |
106b60 | 65 74 72 69 63 20 74 6f 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 64 65 73 74 69 6e 61 74 69 6f | etric.to.the.external.destinatio |
106b80 | 6e 2c 20 74 68 65 20 66 75 6c 6c 20 70 61 74 68 20 6d 65 74 72 69 63 20 69 73 20 63 61 6c 63 75 | n,.the.full.path.metric.is.calcu |
106ba0 | 6c 61 74 65 64 20 61 73 20 61 20 6d 65 74 72 69 63 20 73 75 6d 20 70 61 74 68 20 6f 66 20 61 20 | lated.as.a.metric.sum.path.of.a. |
106bc0 | 72 6f 75 74 65 72 20 77 68 69 63 68 20 68 61 64 20 61 64 76 65 72 74 69 73 65 64 20 74 68 69 73 | router.which.had.advertised.this |
106be0 | 20 6c 69 6e 6b 20 70 6c 75 73 20 74 68 65 20 6c 69 6e 6b 20 6d 65 74 72 69 63 2e 20 54 68 75 73 | .link.plus.the.link.metric..Thus |
106c00 | 2c 20 61 20 72 6f 75 74 65 20 77 69 74 68 20 74 68 65 20 6c 65 61 73 74 20 73 75 6d 6d 61 72 79 | ,.a.route.with.the.least.summary |
106c20 | 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 62 65 20 73 65 6c 65 63 74 65 64 2e 20 49 66 20 65 78 74 | .metric.will.be.selected..If.ext |
106c40 | 65 72 6e 61 6c 20 6c 69 6e 6b 20 69 73 20 61 64 76 65 72 74 69 73 65 64 20 77 69 74 68 20 6d 65 | ernal.link.is.advertised.with.me |
106c60 | 74 72 69 63 20 74 79 70 65 20 32 20 74 68 65 20 70 61 74 68 20 69 73 20 73 65 6c 65 63 74 65 64 | tric.type.2.the.path.is.selected |
106c80 | 20 77 68 69 63 68 20 6c 69 65 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f 75 74 65 72 20 77 | .which.lies.through.the.router.w |
106ca0 | 68 69 63 68 20 61 64 76 65 72 74 69 73 65 64 20 74 68 69 73 20 6c 69 6e 6b 20 77 69 74 68 20 74 | hich.advertised.this.link.with.t |
106cc0 | 68 65 20 6c 65 61 73 74 20 6d 65 74 72 69 63 20 64 65 73 70 69 74 65 20 6f 66 20 74 68 65 20 66 | he.least.metric.despite.of.the.f |
106ce0 | 61 63 74 20 74 68 61 74 20 69 6e 74 65 72 6e 61 6c 20 70 61 74 68 20 74 6f 20 74 68 69 73 20 72 | act.that.internal.path.to.this.r |
106d00 | 6f 75 74 65 72 20 69 73 20 6c 6f 6e 67 65 72 20 28 77 69 74 68 20 6d 6f 72 65 20 63 6f 73 74 29 | outer.is.longer.(with.more.cost) |
106d20 | 2e 20 48 6f 77 65 76 65 72 2c 20 69 66 20 74 77 6f 20 72 6f 75 74 65 72 73 20 61 64 76 65 72 74 | ..However,.if.two.routers.advert |
106d40 | 69 73 65 64 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 6c 69 6e 6b 20 61 6e 64 20 77 69 74 68 20 6d | ised.an.external.link.and.with.m |
106d60 | 65 74 72 69 63 20 74 79 70 65 20 32 20 74 68 65 20 70 72 65 66 65 72 65 6e 63 65 20 69 73 20 67 | etric.type.2.the.preference.is.g |
106d80 | 69 76 65 6e 20 74 6f 20 74 68 65 20 70 61 74 68 20 77 68 69 63 68 20 6c 69 65 73 20 74 68 72 6f | iven.to.the.path.which.lies.thro |
106da0 | 75 67 68 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 74 68 20 61 20 73 68 6f 72 74 65 72 20 69 6e | ugh.the.router.with.a.shorter.in |
106dc0 | 74 65 72 6e 61 6c 20 70 61 74 68 2e 20 49 66 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 72 6f | ternal.path..If.two.different.ro |
106de0 | 75 74 65 72 73 20 61 64 76 65 72 74 69 73 65 64 20 74 77 6f 20 6c 69 6e 6b 73 20 74 6f 20 74 68 | uters.advertised.two.links.to.th |
106e00 | 65 20 73 61 6d 65 20 65 78 74 65 72 6e 61 6c 20 64 65 73 74 69 6d 61 74 69 6f 6e 20 62 75 74 20 | e.same.external.destimation.but. |
106e20 | 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 20 6d 65 74 72 69 63 20 74 79 70 65 2c 20 6d 65 74 72 | with.different.metric.type,.metr |
106e40 | 69 63 20 74 79 70 65 20 31 20 69 73 20 70 72 65 66 65 72 72 65 64 2e 20 49 66 20 74 79 70 65 20 | ic.type.1.is.preferred..If.type. |
106e60 | 6f 66 20 61 20 6d 65 74 72 69 63 20 6c 65 66 74 20 75 6e 64 65 66 69 6e 65 64 20 74 68 65 20 72 | of.a.metric.left.undefined.the.r |
106e80 | 6f 75 74 65 72 20 77 69 6c 6c 20 63 6f 6e 73 69 64 65 72 20 74 68 65 73 65 20 65 78 74 65 72 6e | outer.will.consider.these.extern |
106ea0 | 61 6c 20 6c 69 6e 6b 73 20 74 6f 20 68 61 76 65 20 61 20 64 65 66 61 75 6c 74 20 6d 65 74 72 69 | al.links.to.have.a.default.metri |
106ec0 | 63 20 74 79 70 65 20 32 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 | c.type.2..This.command.specifies |
106ee0 | 20 6e 65 74 77 6f 72 6b 20 74 79 70 65 20 74 6f 20 50 6f 69 6e 74 2d 74 6f 2d 50 6f 69 6e 74 2e | .network.type.to.Point-to-Point. |
106f00 | 20 54 68 65 20 64 65 66 61 75 6c 74 20 6e 65 74 77 6f 72 6b 20 74 79 70 65 20 69 73 20 62 72 6f | .The.default.network.type.is.bro |
106f20 | 61 64 63 61 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 | adcast..This.command.specifies.t |
106f40 | 68 61 74 20 42 47 50 20 63 6f 6e 73 69 64 65 72 73 20 74 68 65 20 4d 45 44 20 77 68 65 6e 20 63 | hat.BGP.considers.the.MED.when.c |
106f60 | 6f 6d 70 61 72 69 6e 67 20 72 6f 75 74 65 73 20 6f 72 69 67 69 6e 61 74 65 64 20 66 72 6f 6d 20 | omparing.routes.originated.from. |
106f80 | 64 69 66 66 65 72 65 6e 74 20 73 75 62 2d 41 53 73 20 77 69 74 68 69 6e 20 74 68 65 20 63 6f 6e | different.sub-ASs.within.the.con |
106fa0 | 66 65 64 65 72 61 74 69 6f 6e 20 74 6f 20 77 68 69 63 68 20 74 68 69 73 20 42 47 50 20 73 70 65 | federation.to.which.this.BGP.spe |
106fc0 | 61 6b 65 72 20 62 65 6c 6f 6e 67 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 73 74 61 74 65 2c | aker.belongs..The.default.state, |
106fe0 | 20 77 68 65 72 65 20 74 68 65 20 4d 45 44 20 61 74 74 72 69 62 75 74 65 20 69 73 20 6e 6f 74 20 | .where.the.MED.attribute.is.not. |
107000 | 63 6f 6e 73 69 64 65 72 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 | considered..This.command.specifi |
107020 | 65 73 20 74 68 61 74 20 42 47 50 20 64 65 63 69 73 69 6f 6e 20 70 72 6f 63 65 73 73 20 73 68 6f | es.that.BGP.decision.process.sho |
107040 | 75 6c 64 20 63 6f 6e 73 69 64 65 72 20 70 61 74 68 73 20 6f 66 20 65 71 75 61 6c 20 41 53 5f 50 | uld.consider.paths.of.equal.AS_P |
107060 | 41 54 48 20 6c 65 6e 67 74 68 20 63 61 6e 64 69 64 61 74 65 73 20 66 6f 72 20 6d 75 6c 74 69 70 | ATH.length.candidates.for.multip |
107080 | 61 74 68 20 63 6f 6d 70 75 74 61 74 69 6f 6e 2e 20 57 69 74 68 6f 75 74 20 74 68 65 20 6b 6e 6f | ath.computation..Without.the.kno |
1070a0 | 62 2c 20 74 68 65 20 65 6e 74 69 72 65 20 41 53 5f 50 41 54 48 20 6d 75 73 74 20 6d 61 74 63 68 | b,.the.entire.AS_PATH.must.match |
1070c0 | 20 66 6f 72 20 6d 75 6c 74 69 70 61 74 68 20 63 6f 6d 70 75 74 61 74 69 6f 6e 2e 00 54 68 69 73 | .for.multipath.computation..This |
1070e0 | 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 61 20 72 6f 75 74 65 20 | .command.specifies.that.a.route. |
107100 | 77 69 74 68 20 61 20 4d 45 44 20 69 73 20 61 6c 77 61 79 73 20 63 6f 6e 73 69 64 65 72 65 64 20 | with.a.MED.is.always.considered. |
107120 | 74 6f 20 62 65 20 62 65 74 74 65 72 20 74 68 61 6e 20 61 20 72 6f 75 74 65 20 77 69 74 68 6f 75 | to.be.better.than.a.route.withou |
107140 | 74 20 61 20 4d 45 44 20 62 79 20 63 61 75 73 69 6e 67 20 74 68 65 20 6d 69 73 73 69 6e 67 20 4d | t.a.MED.by.causing.the.missing.M |
107160 | 45 44 20 61 74 74 72 69 62 75 74 65 20 74 6f 20 68 61 76 65 20 61 20 76 61 6c 75 65 20 6f 66 20 | ED.attribute.to.have.a.value.of. |
107180 | 69 6e 66 69 6e 69 74 79 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 73 74 61 74 65 2c 20 77 68 65 | infinity..The.default.state,.whe |
1071a0 | 72 65 20 74 68 65 20 6d 69 73 73 69 6e 67 20 4d 45 44 20 61 74 74 72 69 62 75 74 65 20 69 73 20 | re.the.missing.MED.attribute.is. |
1071c0 | 63 6f 6e 73 69 64 65 72 65 64 20 74 6f 20 68 61 76 65 20 61 20 76 61 6c 75 65 20 6f 66 20 7a 65 | considered.to.have.a.value.of.ze |
1071e0 | 72 6f 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 | ro..This.command.specifies.that. |
107200 | 72 6f 75 74 65 20 75 70 64 61 74 65 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 74 68 69 73 | route.updates.received.from.this |
107220 | 20 6e 65 69 67 68 62 6f 72 20 77 69 6c 6c 20 62 65 20 73 74 6f 72 65 64 20 75 6e 6d 6f 64 69 66 | .neighbor.will.be.stored.unmodif |
107240 | 69 65 64 2c 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 69 6e 62 6f 75 6e 64 20 70 | ied,.regardless.of.the.inbound.p |
107260 | 6f 6c 69 63 79 2e 20 57 68 65 6e 20 69 6e 62 6f 75 6e 64 20 73 6f 66 74 20 72 65 63 6f 6e 66 69 | olicy..When.inbound.soft.reconfi |
107280 | 67 75 72 61 74 69 6f 6e 20 69 73 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 20 73 74 6f 72 65 64 20 | guration.is.enabled,.the.stored. |
1072a0 | 75 70 64 61 74 65 73 20 61 72 65 20 70 72 6f 63 65 73 73 65 64 20 62 79 20 74 68 65 20 6e 65 77 | updates.are.processed.by.the.new |
1072c0 | 20 70 6f 6c 69 63 79 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 6f 20 63 72 65 61 74 65 20 | .policy.configuration.to.create. |
1072e0 | 6e 65 77 20 69 6e 62 6f 75 6e 64 20 75 70 64 61 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | new.inbound.updates..This.comman |
107300 | 64 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 73 69 6d 70 6c 65 20 70 61 73 73 77 6f 72 64 | d.specifies.that.simple.password |
107320 | 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 20 66 | .authentication.should.be.used.f |
107340 | 6f 72 20 74 68 65 20 67 69 76 65 6e 20 61 72 65 61 2e 20 54 68 65 20 70 61 73 73 77 6f 72 64 20 | or.the.given.area..The.password. |
107360 | 6d 75 73 74 20 61 6c 73 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 20 70 65 72 | must.also.be.configured.on.a.per |
107380 | 2d 69 6e 74 65 72 66 61 63 65 20 62 61 73 69 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | -interface.basis..This.command.s |
1073a0 | 70 65 63 69 66 69 65 73 20 74 68 61 74 20 74 68 65 20 63 6f 6d 6d 75 6e 69 74 79 20 61 74 74 72 | pecifies.that.the.community.attr |
1073c0 | 69 62 75 74 65 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 73 65 6e 74 20 69 6e 20 72 6f 75 74 | ibute.should.not.be.sent.in.rout |
1073e0 | 65 20 75 70 64 61 74 65 73 20 74 6f 20 61 20 70 65 65 72 2e 20 42 79 20 64 65 66 61 75 6c 74 20 | e.updates.to.a.peer..By.default. |
107400 | 63 6f 6d 6d 75 6e 69 74 79 20 61 74 74 72 69 62 75 74 65 20 69 73 20 73 65 6e 74 2e 00 54 68 69 | community.attribute.is.sent..Thi |
107420 | 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 74 68 65 20 6c 65 6e | s.command.specifies.that.the.len |
107440 | 67 74 68 20 6f 66 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 70 61 74 68 20 73 65 74 73 20 61 | gth.of.confederation.path.sets.a |
107460 | 6e 64 20 73 65 71 75 65 6e 63 65 73 20 73 68 6f 75 6c 64 20 62 65 20 74 61 6b 65 6e 20 69 6e 74 | nd.sequences.should.be.taken.int |
107480 | 6f 20 61 63 63 6f 75 6e 74 20 64 75 72 69 6e 67 20 74 68 65 20 42 47 50 20 62 65 73 74 20 70 61 | o.account.during.the.BGP.best.pa |
1074a0 | 74 68 20 64 65 63 69 73 69 6f 6e 20 70 72 6f 63 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | th.decision.process..This.comman |
1074c0 | 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 | d.specifies.the.IP.address.of.th |
1074e0 | 65 20 6e 65 69 67 68 62 6f 72 69 6e 67 20 64 65 76 69 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | e.neighboring.device..This.comma |
107500 | 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 4f 53 50 46 20 65 6e 61 62 6c 65 64 20 69 6e | nd.specifies.the.OSPF.enabled.in |
107520 | 74 65 72 66 61 63 65 28 73 29 2e 20 49 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 68 61 73 | terface(s)..If.the.interface.has |
107540 | 20 61 6e 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 64 65 66 69 6e 65 64 20 72 61 6e 67 65 20 74 | .an.address.from.defined.range.t |
107560 | 68 65 6e 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 4f 53 50 46 20 6f 6e 20 | hen.the.command.enables.OSPF.on. |
107580 | 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 73 6f 20 72 6f 75 74 65 72 20 63 61 6e 20 70 72 6f | this.interface.so.router.can.pro |
1075a0 | 76 69 64 65 20 6e 65 74 77 6f 72 6b 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 74 68 65 20 | vide.network.information.to.the. |
1075c0 | 6f 74 68 65 72 20 6f 73 70 66 20 72 6f 75 74 65 72 73 20 76 69 61 20 74 68 69 73 20 69 6e 74 65 | other.ospf.routers.via.this.inte |
1075e0 | 72 66 61 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 | rface..This.command.specifies.th |
107600 | 65 20 4f 53 50 46 76 33 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 | e.OSPFv3.enabled.interface..This |
107620 | 20 63 6f 6d 6d 61 6e 64 20 69 73 20 61 6c 73 6f 20 75 73 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 | .command.is.also.used.to.enable. |
107640 | 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 61 72 65 61 20 6e 75 6d 62 65 | the.OSPF.process..The.area.numbe |
107660 | 72 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 64 65 63 69 6d 61 6c 20 6e 6f | r.can.be.specified.in.decimal.no |
107680 | 74 61 74 69 6f 6e 20 69 6e 20 74 68 65 20 72 61 6e 67 65 20 66 72 6f 6d 20 30 20 74 6f 20 34 32 | tation.in.the.range.from.0.to.42 |
1076a0 | 39 34 39 36 37 32 39 35 2e 20 4f 72 20 69 74 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 | 94967295..Or.it.can.be.specified |
1076c0 | 20 69 6e 20 64 6f 74 74 65 64 20 64 65 63 69 6d 61 6c 20 6e 6f 74 61 74 69 6f 6e 20 73 69 6d 69 | .in.dotted.decimal.notation.simi |
1076e0 | 6c 61 72 20 74 6f 20 69 70 20 61 64 64 72 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | lar.to.ip.address..This.command. |
107700 | 73 70 65 63 69 66 69 65 73 20 74 68 65 20 61 72 65 61 20 74 6f 20 62 65 20 61 20 4e 53 53 41 20 | specifies.the.area.to.be.a.NSSA. |
107720 | 54 6f 74 61 6c 6c 79 20 53 74 75 62 20 41 72 65 61 2e 20 41 42 52 73 20 66 6f 72 20 73 75 63 68 | Totally.Stub.Area..ABRs.for.such |
107740 | 20 61 6e 20 61 72 65 61 20 64 6f 20 6e 6f 74 20 6e 65 65 64 20 74 6f 20 70 61 73 73 20 4e 65 74 | .an.area.do.not.need.to.pass.Net |
107760 | 77 6f 72 6b 2d 53 75 6d 6d 61 72 79 20 28 74 79 70 65 2d 33 29 20 4c 53 41 73 20 28 65 78 63 65 | work-Summary.(type-3).LSAs.(exce |
107780 | 70 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 73 75 6d 6d 61 72 79 20 72 6f 75 74 65 29 2c 20 41 | pt.the.default.summary.route),.A |
1077a0 | 53 42 52 2d 53 75 6d 6d 61 72 79 20 4c 53 41 73 20 28 74 79 70 65 2d 34 29 20 61 6e 64 20 41 53 | SBR-Summary.LSAs.(type-4).and.AS |
1077c0 | 2d 45 78 74 65 72 6e 61 6c 20 4c 53 41 73 20 28 74 79 70 65 2d 35 29 20 69 6e 74 6f 20 74 68 65 | -External.LSAs.(type-5).into.the |
1077e0 | 20 61 72 65 61 2e 20 42 75 74 20 54 79 70 65 2d 37 20 4c 53 41 73 20 74 68 61 74 20 63 6f 6e 76 | .area..But.Type-7.LSAs.that.conv |
107800 | 65 72 74 20 74 6f 20 54 79 70 65 2d 35 20 61 74 20 74 68 65 20 4e 53 53 41 20 41 42 52 20 61 72 | ert.to.Type-5.at.the.NSSA.ABR.ar |
107820 | 65 20 61 6c 6c 6f 77 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 | e.allowed..This.command.specifie |
107840 | 73 20 74 68 65 20 61 72 65 61 20 74 6f 20 62 65 20 61 20 4e 6f 74 20 53 6f 20 53 74 75 62 62 79 | s.the.area.to.be.a.Not.So.Stubby |
107860 | 20 41 72 65 61 2e 20 45 78 74 65 72 6e 61 6c 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 | .Area..External.routing.informat |
107880 | 69 6f 6e 20 69 73 20 69 6d 70 6f 72 74 65 64 20 69 6e 74 6f 20 61 6e 20 4e 53 53 41 20 69 6e 20 | ion.is.imported.into.an.NSSA.in. |
1078a0 | 54 79 70 65 2d 37 20 4c 53 41 73 2e 20 54 79 70 65 2d 37 20 4c 53 41 73 20 61 72 65 20 73 69 6d | Type-7.LSAs..Type-7.LSAs.are.sim |
1078c0 | 69 6c 61 72 20 74 6f 20 54 79 70 65 2d 35 20 41 53 2d 65 78 74 65 72 6e 61 6c 20 4c 53 41 73 2c | ilar.to.Type-5.AS-external.LSAs, |
1078e0 | 20 65 78 63 65 70 74 20 74 68 61 74 20 74 68 65 79 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 66 6c | .except.that.they.can.only.be.fl |
107900 | 6f 6f 64 65 64 20 69 6e 74 6f 20 74 68 65 20 4e 53 53 41 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f | ooded.into.the.NSSA..In.order.to |
107920 | 20 66 75 72 74 68 65 72 20 70 72 6f 70 61 67 61 74 65 20 74 68 65 20 4e 53 53 41 20 65 78 74 65 | .further.propagate.the.NSSA.exte |
107940 | 72 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 74 68 65 20 54 79 70 65 2d 37 20 4c 53 41 | rnal.information,.the.Type-7.LSA |
107960 | 20 6d 75 73 74 20 62 65 20 74 72 61 6e 73 6c 61 74 65 64 20 74 6f 20 61 20 54 79 70 65 2d 35 20 | .must.be.translated.to.a.Type-5. |
107980 | 41 53 2d 65 78 74 65 72 6e 61 6c 2d 4c 53 41 20 62 79 20 74 68 65 20 4e 53 53 41 20 41 42 52 2e | AS-external-LSA.by.the.NSSA.ABR. |
1079a0 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 61 72 65 61 | .This.command.specifies.the.area |
1079c0 | 20 74 6f 20 62 65 20 61 20 53 74 75 62 20 41 72 65 61 2e 20 54 68 61 74 20 69 73 2c 20 61 6e 20 | .to.be.a.Stub.Area..That.is,.an. |
1079e0 | 61 72 65 61 20 77 68 65 72 65 20 6e 6f 20 72 6f 75 74 65 72 20 6f 72 69 67 69 6e 61 74 65 73 20 | area.where.no.router.originates. |
107a00 | 72 6f 75 74 65 73 20 65 78 74 65 72 6e 61 6c 20 74 6f 20 4f 53 50 46 20 61 6e 64 20 68 65 6e 63 | routes.external.to.OSPF.and.henc |
107a20 | 65 20 61 6e 20 61 72 65 61 20 77 68 65 72 65 20 61 6c 6c 20 65 78 74 65 72 6e 61 6c 20 72 6f 75 | e.an.area.where.all.external.rou |
107a40 | 74 65 73 20 61 72 65 20 76 69 61 20 74 68 65 20 41 42 52 28 73 29 2e 20 48 65 6e 63 65 2c 20 41 | tes.are.via.the.ABR(s)..Hence,.A |
107a60 | 42 52 73 20 66 6f 72 20 73 75 63 68 20 61 6e 20 61 72 65 61 20 64 6f 20 6e 6f 74 20 6e 65 65 64 | BRs.for.such.an.area.do.not.need |
107a80 | 20 74 6f 20 70 61 73 73 20 41 53 2d 45 78 74 65 72 6e 61 6c 20 4c 53 41 73 20 28 74 79 70 65 2d | .to.pass.AS-External.LSAs.(type- |
107aa0 | 35 29 20 6f 72 20 41 53 42 52 2d 53 75 6d 6d 61 72 79 20 4c 53 41 73 20 28 74 79 70 65 2d 34 29 | 5).or.ASBR-Summary.LSAs.(type-4) |
107ac0 | 20 69 6e 74 6f 20 74 68 65 20 61 72 65 61 2e 20 54 68 65 79 20 6e 65 65 64 20 6f 6e 6c 79 20 70 | .into.the.area..They.need.only.p |
107ae0 | 61 73 73 20 4e 65 74 77 6f 72 6b 2d 53 75 6d 6d 61 72 79 20 28 74 79 70 65 2d 33 29 20 4c 53 41 | ass.Network-Summary.(type-3).LSA |
107b00 | 73 20 69 6e 74 6f 20 73 75 63 68 20 61 6e 20 61 72 65 61 2c 20 61 6c 6f 6e 67 20 77 69 74 68 20 | s.into.such.an.area,.along.with. |
107b20 | 61 20 64 65 66 61 75 6c 74 2d 72 6f 75 74 65 20 73 75 6d 6d 61 72 79 2e 00 54 68 69 73 20 63 6f | a.default-route.summary..This.co |
107b40 | 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 61 72 65 61 20 74 6f 20 62 65 20 61 | mmand.specifies.the.area.to.be.a |
107b60 | 20 54 6f 74 61 6c 6c 79 20 53 74 75 62 20 41 72 65 61 2e 20 49 6e 20 61 64 64 69 74 69 6f 6e 20 | .Totally.Stub.Area..In.addition. |
107b80 | 74 6f 20 73 74 75 62 20 61 72 65 61 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 74 68 69 73 20 61 72 | to.stub.area.limitations.this.ar |
107ba0 | 65 61 20 74 79 70 65 20 70 72 65 76 65 6e 74 73 20 61 6e 20 41 42 52 20 66 72 6f 6d 20 69 6e 6a | ea.type.prevents.an.ABR.from.inj |
107bc0 | 65 63 74 69 6e 67 20 4e 65 74 77 6f 72 6b 2d 53 75 6d 6d 61 72 79 20 28 74 79 70 65 2d 33 29 20 | ecting.Network-Summary.(type-3). |
107be0 | 4c 53 41 73 20 69 6e 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 73 74 75 62 20 61 72 65 | LSAs.into.the.specified.stub.are |
107c00 | 61 2e 20 4f 6e 6c 79 20 64 65 66 61 75 6c 74 20 73 75 6d 6d 61 72 79 20 72 6f 75 74 65 20 69 73 | a..Only.default.summary.route.is |
107c20 | 20 61 6c 6c 6f 77 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 | .allowed..This.command.specifies |
107c40 | 20 74 68 65 20 62 61 73 65 20 72 65 63 65 69 76 65 20 63 6f 73 74 20 66 6f 72 20 74 68 69 73 20 | .the.base.receive.cost.for.this. |
107c60 | 69 6e 74 65 72 66 61 63 65 2e 20 46 6f 72 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 | interface..For.wireless.interfac |
107c80 | 65 73 2c 20 69 74 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 75 6c 74 69 70 6c 69 65 72 20 | es,.it.specifies.the.multiplier. |
107ca0 | 75 73 65 64 20 66 6f 72 20 63 6f 6d 70 75 74 69 6e 67 20 74 68 65 20 45 54 58 20 72 65 63 65 70 | used.for.computing.the.ETX.recep |
107cc0 | 74 69 6f 6e 20 63 6f 73 74 20 28 64 65 66 61 75 6c 74 20 32 35 36 29 3b 20 66 6f 72 20 77 69 72 | tion.cost.(default.256);.for.wir |
107ce0 | 65 64 20 69 6e 74 65 72 66 61 63 65 73 2c 20 69 74 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 | ed.interfaces,.it.specifies.the. |
107d00 | 63 6f 73 74 20 74 68 61 74 20 77 69 6c 6c 20 62 65 20 61 64 76 65 72 74 69 73 65 64 20 74 6f 20 | cost.that.will.be.advertised.to. |
107d20 | 6e 65 69 67 68 62 6f 75 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 | neighbours..This.command.specifi |
107d40 | 65 73 20 74 68 65 20 64 65 63 61 79 20 66 61 63 74 6f 72 20 66 6f 72 20 74 68 65 20 65 78 70 6f | es.the.decay.factor.for.the.expo |
107d60 | 6e 65 6e 74 69 61 6c 20 6d 6f 76 69 6e 67 20 61 76 65 72 61 67 65 20 6f 66 20 52 54 54 20 73 61 | nential.moving.average.of.RTT.sa |
107d80 | 6d 70 6c 65 73 2c 20 69 6e 20 75 6e 69 74 73 20 6f 66 20 31 2f 32 35 36 2e 20 48 69 67 68 65 72 | mples,.in.units.of.1/256..Higher |
107da0 | 20 76 61 6c 75 65 73 20 64 69 73 63 61 72 64 20 6f 6c 64 20 73 61 6d 70 6c 65 73 20 66 61 73 74 | .values.discard.old.samples.fast |
107dc0 | 65 72 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 34 32 2e 00 54 68 69 73 20 63 6f 6d 6d | er..The.default.is.42..This.comm |
107de0 | 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 6c 6f 63 61 6c 20 | and.specifies.the.default.local. |
107e00 | 70 72 65 66 65 72 65 6e 63 65 20 76 61 6c 75 65 2e 20 54 68 65 20 6c 6f 63 61 6c 20 70 72 65 66 | preference.value..The.local.pref |
107e20 | 65 72 65 6e 63 65 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 34 32 39 34 39 36 37 32 39 35 2e | erence.range.is.0.to.4294967295. |
107e40 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 64 65 66 61 | .This.command.specifies.the.defa |
107e60 | 75 6c 74 20 6d 65 74 72 69 63 20 76 61 6c 75 65 20 6f 66 20 72 65 64 69 73 74 72 69 62 75 74 65 | ult.metric.value.of.redistribute |
107e80 | 64 20 72 6f 75 74 65 73 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 30 20 | d.routes..The.metric.range.is.0. |
107ea0 | 74 6f 20 31 36 37 37 37 32 31 34 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 | to.16777214..This.command.specif |
107ec0 | 69 65 73 20 74 68 65 20 67 61 72 62 61 67 65 2d 63 6f 6c 6c 65 63 74 69 6f 6e 20 74 69 6d 65 72 | ies.the.garbage-collection.timer |
107ee0 | 2e 20 55 70 6f 6e 20 65 78 70 69 72 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 67 61 72 62 61 67 65 | ..Upon.expiration.of.the.garbage |
107f00 | 2d 63 6f 6c 6c 65 63 74 69 6f 6e 20 74 69 6d 65 72 2c 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 | -collection.timer,.the.route.is. |
107f20 | 66 69 6e 61 6c 6c 79 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 69 6e 67 | finally.removed.from.the.routing |
107f40 | 20 74 61 62 6c 65 2e 20 54 68 65 20 74 69 6d 65 20 72 61 6e 67 65 20 69 73 20 35 20 74 6f 20 32 | .table..The.time.range.is.5.to.2 |
107f60 | 31 34 37 34 38 33 36 34 37 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 | 147483647..The.default.value.is. |
107f80 | 31 32 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 | 120.seconds..This.command.specif |
107fa0 | 69 65 73 20 74 68 65 20 67 69 76 65 6e 20 6e 65 69 67 68 62 6f 72 20 61 73 20 72 6f 75 74 65 20 | ies.the.given.neighbor.as.route. |
107fc0 | 72 65 66 6c 65 63 74 6f 72 20 63 6c 69 65 6e 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | reflector.client..This.command.s |
107fe0 | 70 65 63 69 66 69 65 73 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 69 6d 65 2c 20 69 6e 20 | pecifies.the.length.of.time,.in. |
108000 | 73 65 63 6f 6e 64 73 2c 20 62 65 66 6f 72 65 20 74 68 65 20 72 6f 75 74 69 6e 67 20 64 65 76 69 | seconds,.before.the.routing.devi |
108020 | 63 65 20 73 65 6e 64 73 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 6f 75 74 20 6f 66 20 74 68 | ce.sends.hello.packets.out.of.th |
108040 | 65 20 69 6e 74 65 72 66 61 63 65 20 62 65 66 6f 72 65 20 69 74 20 65 73 74 61 62 6c 69 73 68 65 | e.interface.before.it.establishe |
108060 | 73 20 61 64 6a 61 63 65 6e 63 79 20 77 69 74 68 20 61 20 6e 65 69 67 68 62 6f 72 2e 20 54 68 65 | s.adjacency.with.a.neighbor..The |
108080 | 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 36 35 35 33 35 20 73 65 63 6f 6e 64 73 2e 20 54 68 | .range.is.1.to.65535.seconds..Th |
1080a0 | 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 30 20 73 65 63 6f 6e 64 73 2e 00 54 | e.default.value.is.60.seconds..T |
1080c0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 61 78 69 6d 75 | his.command.specifies.the.maximu |
1080e0 | 6d 20 52 54 54 2c 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2c 20 61 62 6f 76 65 20 77 68 | m.RTT,.in.milliseconds,.above.wh |
108100 | 69 63 68 20 77 65 20 64 6f 6e 27 74 20 69 6e 63 72 65 61 73 65 20 74 68 65 20 63 6f 73 74 20 74 | ich.we.don't.increase.the.cost.t |
108120 | 6f 20 61 20 6e 65 69 67 68 62 6f 75 72 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 32 | o.a.neighbour..The.default.is.12 |
108140 | 30 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 | 0.ms..This.command.specifies.the |
108160 | 20 6d 61 78 69 6d 75 6d 20 63 6f 73 74 20 61 64 64 65 64 20 74 6f 20 61 20 6e 65 69 67 68 62 6f | .maximum.cost.added.to.a.neighbo |
108180 | 75 72 20 62 65 63 61 75 73 65 20 6f 66 20 52 54 54 2c 20 69 2e 65 2e 20 77 68 65 6e 20 74 68 65 | ur.because.of.RTT,.i.e..when.the |
1081a0 | 20 52 54 54 20 69 73 20 68 69 67 68 65 72 20 6f 72 20 65 71 75 61 6c 20 74 68 61 6e 20 72 74 74 | .RTT.is.higher.or.equal.than.rtt |
1081c0 | 2d 6d 61 78 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 35 30 2e 20 53 65 74 74 69 6e | -max..The.default.is.150..Settin |
1081e0 | 67 20 69 74 20 74 6f 20 30 20 65 66 66 65 63 74 69 76 65 6c 79 20 64 69 73 61 62 6c 65 73 20 74 | g.it.to.0.effectively.disables.t |
108200 | 68 65 20 75 73 65 20 6f 66 20 61 20 52 54 54 2d 62 61 73 65 64 20 63 6f 73 74 2e 00 54 68 69 73 | he.use.of.a.RTT-based.cost..This |
108220 | 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 52 | .command.specifies.the.minimum.R |
108240 | 54 54 2c 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2c 20 73 74 61 72 74 69 6e 67 20 66 72 | TT,.in.milliseconds,.starting.fr |
108260 | 6f 6d 20 77 68 69 63 68 20 77 65 20 69 6e 63 72 65 61 73 65 20 74 68 65 20 63 6f 73 74 20 74 6f | om.which.we.increase.the.cost.to |
108280 | 20 61 20 6e 65 69 67 68 62 6f 75 72 2e 20 54 68 65 20 61 64 64 69 74 69 6f 6e 61 6c 20 63 6f 73 | .a.neighbour..The.additional.cos |
1082a0 | 74 20 69 73 20 6c 69 6e 65 61 72 20 69 6e 20 28 72 74 74 20 2d 20 72 74 74 2d 6d 69 6e 29 2e 20 | t.is.linear.in.(rtt.-.rtt-min).. |
1082c0 | 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 30 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | The.default.is.10.ms..This.comma |
1082e0 | 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 72 6f 75 74 65 20 61 | nd.specifies.the.minimum.route.a |
108300 | 64 76 65 72 74 69 73 65 6d 65 6e 74 20 69 6e 74 65 72 76 61 6c 20 66 6f 72 20 74 68 65 20 70 65 | dvertisement.interval.for.the.pe |
108320 | 65 72 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 76 61 6c 75 65 20 69 73 20 30 20 74 6f 20 36 | er..The.interval.value.is.0.to.6 |
108340 | 30 30 20 73 65 63 6f 6e 64 73 2c 20 77 69 74 68 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 64 76 | 00.seconds,.with.the.default.adv |
108360 | 65 72 74 69 73 65 6d 65 6e 74 20 69 6e 74 65 72 76 61 6c 20 62 65 69 6e 67 20 30 2e 00 54 68 69 | ertisement.interval.being.0..Thi |
108380 | 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 72 6f 75 74 65 72 20 70 | s.command.specifies.the.router.p |
1083a0 | 72 69 6f 72 69 74 79 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 6e 6f 6e 62 72 6f 61 64 63 61 73 | riority.value.of.the.nonbroadcas |
1083c0 | 74 20 6e 65 69 67 68 62 6f 72 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 49 | t.neighbor.associated.with.the.I |
1083e0 | 50 20 61 64 64 72 65 73 73 20 73 70 65 63 69 66 69 65 64 2e 20 54 68 65 20 64 65 66 61 75 6c 74 | P.address.specified..The.default |
108400 | 20 69 73 20 30 2e 20 54 68 69 73 20 6b 65 79 77 6f 72 64 20 64 6f 65 73 20 6e 6f 74 20 61 70 70 | .is.0..This.keyword.does.not.app |
108420 | 6c 79 20 74 6f 20 70 6f 69 6e 74 2d 74 6f 2d 6d 75 6c 74 69 70 6f 69 6e 74 20 69 6e 74 65 72 66 | ly.to.point-to-multipoint.interf |
108440 | 61 63 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 | aces..This.command.specifies.the |
108460 | 20 72 6f 75 74 65 72 2d 49 44 2e 20 49 66 20 72 6f 75 74 65 72 20 49 44 20 69 73 20 6e 6f 74 20 | .router-ID..If.router.ID.is.not. |
108480 | 73 70 65 63 69 66 69 65 64 20 69 74 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 68 69 67 68 65 73 | specified.it.will.use.the.highes |
1084a0 | 74 20 69 6e 74 65 72 66 61 63 65 20 49 50 20 61 64 64 72 65 73 73 2e 00 54 68 69 73 20 63 6f 6d | t.interface.IP.address..This.com |
1084c0 | 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 74 69 6d 65 20 63 6f 6e 73 74 61 6e 74 | mand.specifies.the.time.constant |
1084e0 | 2c 20 69 6e 20 73 65 63 6f 6e 64 73 2c 20 6f 66 20 74 68 65 20 73 6d 6f 6f 74 68 69 6e 67 20 61 | ,.in.seconds,.of.the.smoothing.a |
108500 | 6c 67 6f 72 69 74 68 6d 20 75 73 65 64 20 66 6f 72 20 69 6d 70 6c 65 6d 65 6e 74 69 6e 67 20 68 | lgorithm.used.for.implementing.h |
108520 | 79 73 74 65 72 65 73 69 73 2e 20 4c 61 72 67 65 72 20 76 61 6c 75 65 73 20 72 65 64 75 63 65 20 | ysteresis..Larger.values.reduce. |
108540 | 72 6f 75 74 65 20 6f 73 63 69 6c 6c 61 74 69 6f 6e 20 61 74 20 74 68 65 20 63 6f 73 74 20 6f 66 | route.oscillation.at.the.cost.of |
108560 | 20 76 65 72 79 20 73 6c 69 67 68 74 6c 79 20 69 6e 63 72 65 61 73 69 6e 67 20 63 6f 6e 76 65 72 | .very.slightly.increasing.conver |
108580 | 67 65 6e 63 65 20 74 69 6d 65 2e 20 54 68 65 20 76 61 6c 75 65 20 30 20 64 69 73 61 62 6c 65 73 | gence.time..The.value.0.disables |
1085a0 | 20 68 79 73 74 65 72 65 73 69 73 2c 20 61 6e 64 20 69 73 20 73 75 69 74 61 62 6c 65 20 66 6f 72 | .hysteresis,.and.is.suitable.for |
1085c0 | 20 77 69 72 65 64 20 6e 65 74 77 6f 72 6b 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 | .wired.networks..The.default.is. |
1085e0 | 34 20 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 | 4.s..This.command.specifies.the. |
108600 | 74 69 6d 65 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 61 66 74 65 72 20 77 68 69 63 68 | time.in.milliseconds.after.which |
108620 | 20 61 6e 20 27 69 6d 70 6f 72 74 61 6e 74 27 20 72 65 71 75 65 73 74 20 6f 72 20 75 70 64 61 74 | .an.'important'.request.or.updat |
108640 | 65 20 77 69 6c 6c 20 62 65 20 72 65 73 65 6e 74 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 | e.will.be.resent..The.default.is |
108660 | 20 32 30 30 30 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 | .2000.ms..This.command.specifies |
108680 | 20 74 68 65 20 74 69 6d 65 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 62 65 74 77 65 65 | .the.time.in.milliseconds.betwee |
1086a0 | 6e 20 74 77 6f 20 73 63 68 65 64 75 6c 65 64 20 68 65 6c 6c 6f 73 2e 20 4f 6e 20 77 69 72 65 64 | n.two.scheduled.hellos..On.wired |
1086c0 | 20 6c 69 6e 6b 73 2c 20 42 61 62 65 6c 20 6e 6f 74 69 63 65 73 20 61 20 6c 69 6e 6b 20 66 61 69 | .links,.Babel.notices.a.link.fai |
1086e0 | 6c 75 72 65 20 77 69 74 68 69 6e 20 74 77 6f 20 68 65 6c 6c 6f 20 69 6e 74 65 72 76 61 6c 73 3b | lure.within.two.hello.intervals; |
108700 | 20 6f 6e 20 77 69 72 65 6c 65 73 73 20 6c 69 6e 6b 73 2c 20 74 68 65 20 6c 69 6e 6b 20 71 75 61 | .on.wireless.links,.the.link.qua |
108720 | 6c 69 74 79 20 76 61 6c 75 65 20 69 73 20 72 65 65 73 74 69 6d 61 74 65 64 20 61 74 20 65 76 65 | lity.value.is.reestimated.at.eve |
108740 | 72 79 20 68 65 6c 6c 6f 20 69 6e 74 65 72 76 61 6c 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 | ry.hello.interval..The.default.i |
108760 | 73 20 34 30 30 30 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 | s.4000.ms..This.command.specifie |
108780 | 73 20 74 68 65 20 74 69 6d 65 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 62 65 74 77 65 | s.the.time.in.milliseconds.betwe |
1087a0 | 65 6e 20 74 77 6f 20 73 63 68 65 64 75 6c 65 64 20 75 70 64 61 74 65 73 2e 20 53 69 6e 63 65 20 | en.two.scheduled.updates..Since. |
1087c0 | 42 61 62 65 6c 20 6d 61 6b 65 73 20 65 78 74 65 6e 73 69 76 65 20 75 73 65 20 6f 66 20 74 72 69 | Babel.makes.extensive.use.of.tri |
1087e0 | 67 67 65 72 65 64 20 75 70 64 61 74 65 73 2c 20 74 68 69 73 20 63 61 6e 20 62 65 20 73 65 74 20 | ggered.updates,.this.can.be.set. |
108800 | 74 6f 20 66 61 69 72 6c 79 20 68 69 67 68 20 76 61 6c 75 65 73 20 6f 6e 20 6c 69 6e 6b 73 20 77 | to.fairly.high.values.on.links.w |
108820 | 69 74 68 20 6c 69 74 74 6c 65 20 70 61 63 6b 65 74 20 6c 6f 73 73 2e 20 54 68 65 20 64 65 66 61 | ith.little.packet.loss..The.defa |
108840 | 75 6c 74 20 69 73 20 32 30 30 30 30 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 | ult.is.20000.ms..This.command.sp |
108860 | 65 63 69 66 69 65 73 20 74 68 65 20 74 69 6d 65 6f 75 74 20 74 69 6d 65 72 2e 20 55 70 6f 6e 20 | ecifies.the.timeout.timer..Upon. |
108880 | 65 78 70 69 72 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 74 69 6d 65 6f 75 74 2c 20 74 68 65 20 72 | expiration.of.the.timeout,.the.r |
1088a0 | 6f 75 74 65 20 69 73 20 6e 6f 20 6c 6f 6e 67 65 72 20 76 61 6c 69 64 3b 20 68 6f 77 65 76 65 72 | oute.is.no.longer.valid;.however |
1088c0 | 2c 20 69 74 20 69 73 20 72 65 74 61 69 6e 65 64 20 69 6e 20 74 68 65 20 72 6f 75 74 69 6e 67 20 | ,.it.is.retained.in.the.routing. |
1088e0 | 74 61 62 6c 65 20 66 6f 72 20 61 20 73 68 6f 72 74 20 74 69 6d 65 20 73 6f 20 74 68 61 74 20 6e | table.for.a.short.time.so.that.n |
108900 | 65 69 67 68 62 6f 72 73 20 63 61 6e 20 62 65 20 6e 6f 74 69 66 69 65 64 20 74 68 61 74 20 74 68 | eighbors.can.be.notified.that.th |
108920 | 65 20 72 6f 75 74 65 20 68 61 73 20 62 65 65 6e 20 64 72 6f 70 70 65 64 2e 20 54 68 65 20 74 69 | e.route.has.been.dropped..The.ti |
108940 | 6d 65 20 72 61 6e 67 65 20 69 73 20 35 20 74 6f 20 32 31 34 37 34 38 33 36 34 37 2e 20 54 68 65 | me.range.is.5.to.2147483647..The |
108960 | 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 38 30 20 73 65 63 6f 6e 64 73 2e 00 54 | .default.value.is.180.seconds..T |
108980 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 75 70 64 61 74 65 | his.command.specifies.the.update |
1089a0 | 20 74 69 6d 65 72 2e 20 45 76 65 72 79 20 75 70 64 61 74 65 20 74 69 6d 65 72 20 73 65 63 6f 6e | .timer..Every.update.timer.secon |
1089c0 | 64 73 2c 20 74 68 65 20 52 49 50 20 70 72 6f 63 65 73 73 20 69 73 20 61 77 61 6b 65 6e 65 64 20 | ds,.the.RIP.process.is.awakened. |
1089e0 | 74 6f 20 73 65 6e 64 20 61 6e 20 75 6e 73 6f 6c 69 63 69 74 65 64 20 72 65 73 70 6f 6e 73 65 20 | to.send.an.unsolicited.response. |
108a00 | 6d 65 73 73 61 67 65 20 63 6f 6e 74 61 69 6e 69 6e 67 20 74 68 65 20 63 6f 6d 70 6c 65 74 65 20 | message.containing.the.complete. |
108a20 | 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 74 6f 20 61 6c 6c 20 6e 65 69 67 68 62 6f 72 69 6e 67 | routing.table.to.all.neighboring |
108a40 | 20 52 49 50 20 72 6f 75 74 65 72 73 2e 20 54 68 65 20 74 69 6d 65 20 72 61 6e 67 65 20 69 73 20 | .RIP.routers..The.time.range.is. |
108a60 | 35 20 74 6f 20 32 31 34 37 34 38 33 36 34 37 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c | 5.to.2147483647..The.default.val |
108a80 | 75 65 20 69 73 20 33 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | ue.is.30.seconds..This.command.s |
108aa0 | 70 65 63 69 66 69 65 73 20 77 68 65 74 68 65 72 20 74 6f 20 70 65 72 66 6f 72 6d 20 73 70 6c 69 | pecifies.whether.to.perform.spli |
108ac0 | 74 2d 68 6f 72 69 7a 6f 6e 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 53 70 65 63 | t-horizon.on.the.interface..Spec |
108ae0 | 69 66 79 69 6e 67 20 6e 6f 20 62 61 62 65 6c 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 69 73 | ifying.no.babel.split-horizon.is |
108b00 | 20 61 6c 77 61 79 73 20 63 6f 72 72 65 63 74 2c 20 77 68 69 6c 65 20 62 61 62 65 6c 20 73 70 6c | .always.correct,.while.babel.spl |
108b20 | 69 74 2d 68 6f 72 69 7a 6f 6e 20 69 73 20 61 6e 20 6f 70 74 69 6d 69 73 61 74 69 6f 6e 20 74 68 | it-horizon.is.an.optimisation.th |
108b40 | 61 74 20 73 68 6f 75 6c 64 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 6f 6e 20 73 79 6d 6d 65 74 | at.should.only.be.used.on.symmet |
108b60 | 72 69 63 20 61 6e 64 20 74 72 61 6e 73 69 74 69 76 65 20 28 77 69 72 65 64 29 20 6e 65 74 77 6f | ric.and.transitive.(wired).netwo |
108b80 | 72 6b 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 79 20 74 68 61 74 20 4f | rks..This.command.specify.that.O |
108ba0 | 53 50 46 20 70 61 63 6b 65 74 73 20 6d 75 73 74 20 62 65 20 61 75 74 68 65 6e 74 69 63 61 74 65 | SPF.packets.must.be.authenticate |
108bc0 | 64 20 77 69 74 68 20 4d 44 35 20 48 4d 41 43 73 20 77 69 74 68 69 6e 20 74 68 65 20 67 69 76 65 | d.with.MD5.HMACs.within.the.give |
108be0 | 6e 20 61 72 65 61 2e 20 4b 65 79 69 6e 67 20 6d 61 74 65 72 69 61 6c 20 6d 75 73 74 20 61 6c 73 | n.area..Keying.material.must.als |
108c00 | 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 20 70 65 72 2d 69 6e 74 65 72 66 61 | o.be.configured.on.a.per-interfa |
108c20 | 63 65 20 62 61 73 69 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 79 73 20 | ce.basis..This.command.specifys. |
108c40 | 74 68 61 74 20 4d 44 35 20 48 4d 41 43 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 75 73 | that.MD5.HMAC.authentication.mus |
108c60 | 74 20 62 65 20 75 73 65 64 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 20 49 74 20 | t.be.used.on.this.interface..It. |
108c80 | 73 65 74 73 20 4f 53 50 46 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6b 65 79 20 74 6f 20 | sets.OSPF.authentication.key.to. |
108ca0 | 61 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 70 61 73 73 77 6f 72 64 2e 20 4b 65 79 2d 69 64 | a.cryptographic.password..Key-id |
108cc0 | 20 69 64 65 6e 74 69 66 69 65 73 20 73 65 63 72 65 74 20 6b 65 79 20 75 73 65 64 20 74 6f 20 63 | .identifies.secret.key.used.to.c |
108ce0 | 72 65 61 74 65 20 74 68 65 20 6d 65 73 73 61 67 65 20 64 69 67 65 73 74 2e 20 54 68 69 73 20 49 | reate.the.message.digest..This.I |
108d00 | 44 20 69 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 61 6e 64 20 6d 75 | D.is.part.of.the.protocol.and.mu |
108d20 | 73 74 20 62 65 20 63 6f 6e 73 69 73 74 65 6e 74 20 61 63 72 6f 73 73 20 72 6f 75 74 65 72 73 20 | st.be.consistent.across.routers. |
108d40 | 6f 6e 20 61 20 6c 69 6e 6b 2e 20 54 68 65 20 6b 65 79 20 63 61 6e 20 62 65 20 6c 6f 6e 67 20 75 | on.a.link..The.key.can.be.long.u |
108d60 | 70 20 74 6f 20 31 36 20 63 68 61 72 73 20 28 6c 61 72 67 65 72 20 73 74 72 69 6e 67 73 20 77 69 | p.to.16.chars.(larger.strings.wi |
108d80 | 6c 6c 20 62 65 20 74 72 75 6e 63 61 74 65 64 29 2c 20 61 6e 64 20 69 73 20 61 73 73 6f 63 69 61 | ll.be.truncated),.and.is.associa |
108da0 | 74 65 64 20 77 69 74 68 20 74 68 65 20 67 69 76 65 6e 20 6b 65 79 2d 69 64 2e 00 54 68 69 73 20 | ted.with.the.given.key-id..This. |
108dc0 | 63 6f 6d 6d 61 6e 64 20 73 75 6d 6d 61 72 69 7a 65 73 20 69 6e 74 72 61 20 61 72 65 61 20 70 61 | command.summarizes.intra.area.pa |
108de0 | 74 68 73 20 66 72 6f 6d 20 73 70 65 63 69 66 69 65 64 20 61 72 65 61 20 69 6e 74 6f 20 6f 6e 65 | ths.from.specified.area.into.one |
108e00 | 20 54 79 70 65 2d 33 20 49 6e 74 65 72 2d 41 72 65 61 20 50 72 65 66 69 78 20 4c 53 41 20 61 6e | .Type-3.Inter-Area.Prefix.LSA.an |
108e20 | 6e 6f 75 6e 63 65 64 20 74 6f 20 6f 74 68 65 72 20 61 72 65 61 73 2e 20 54 68 69 73 20 63 6f 6d | nounced.to.other.areas..This.com |
108e40 | 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 69 6e 20 41 42 52 2e 00 54 68 | mand.can.be.used.only.in.ABR..Th |
108e60 | 69 73 20 63 6f 6d 6d 61 6e 64 20 73 75 6d 6d 61 72 69 7a 65 73 20 69 6e 74 72 61 20 61 72 65 61 | is.command.summarizes.intra.area |
108e80 | 20 70 61 74 68 73 20 66 72 6f 6d 20 73 70 65 63 69 66 69 65 64 20 61 72 65 61 20 69 6e 74 6f 20 | .paths.from.specified.area.into. |
108ea0 | 6f 6e 65 20 73 75 6d 6d 61 72 79 2d 4c 53 41 20 28 54 79 70 65 2d 33 29 20 61 6e 6e 6f 75 6e 63 | one.summary-LSA.(Type-3).announc |
108ec0 | 65 64 20 74 6f 20 6f 74 68 65 72 20 61 72 65 61 73 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | ed.to.other.areas..This.command. |
108ee0 | 63 61 6e 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 69 6e 20 41 42 52 20 61 6e 64 20 4f 4e 4c 59 | can.be.used.only.in.ABR.and.ONLY |
108f00 | 20 72 6f 75 74 65 72 2d 4c 53 41 73 20 28 54 79 70 65 2d 31 29 20 61 6e 64 20 6e 65 74 77 6f 72 | .router-LSAs.(Type-1).and.networ |
108f20 | 6b 2d 4c 53 41 73 20 28 54 79 70 65 2d 32 29 20 28 69 2e 65 2e 20 4c 53 41 73 20 77 69 74 68 20 | k-LSAs.(Type-2).(i.e..LSAs.with. |
108f40 | 73 63 6f 70 65 20 61 72 65 61 29 20 63 61 6e 20 62 65 20 73 75 6d 6d 61 72 69 7a 65 64 2e 20 41 | scope.area).can.be.summarized..A |
108f60 | 53 2d 65 78 74 65 72 6e 61 6c 2d 4c 53 41 73 20 28 54 79 70 65 2d 35 29 20 63 61 6e e2 80 99 74 | S-external-LSAs.(Type-5).can...t |
108f80 | 20 62 65 20 73 75 6d 6d 61 72 69 7a 65 64 20 2d 20 74 68 65 69 72 20 73 63 6f 70 65 20 69 73 20 | .be.summarized.-.their.scope.is. |
108fa0 | 41 53 2e 20 54 68 65 20 6f 70 74 69 6f 6e 61 6c 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d | AS..The.optional.argument.:cfgcm |
108fc0 | 64 3a 60 63 6f 73 74 60 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 61 67 67 72 65 67 61 74 65 | d:`cost`.specifies.the.aggregate |
108fe0 | 64 20 6c 69 6e 6b 20 6d 65 74 72 69 63 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 | d.link.metric..The.metric.range. |
109000 | 69 73 20 30 20 74 6f 20 31 36 37 37 37 32 31 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | is.0.to.16777215..This.command.t |
109020 | 6f 20 65 6e 73 75 72 65 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 20 74 68 65 20 73 75 6d 6d 61 | o.ensure.not.advertise.the.summa |
109040 | 72 79 20 6c 73 61 20 66 6f 72 20 74 68 65 20 6d 61 74 63 68 65 64 20 65 78 74 65 72 6e 61 6c 20 | ry.lsa.for.the.matched.external. |
109060 | 4c 53 41 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 75 73 65 73 20 74 6f 20 63 6c 65 61 72 | LSAs..This.command.uses.to.clear |
109080 | 20 42 47 50 20 72 6f 75 74 65 20 64 61 6d 70 65 6e 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | .BGP.route.dampening.information |
1090a0 | 20 61 6e 64 20 74 6f 20 75 6e 73 75 70 70 72 65 73 73 20 73 75 70 70 72 65 73 73 65 64 20 72 6f | .and.to.unsuppress.suppressed.ro |
1090c0 | 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 61 73 20 69 6e 74 72 6f 64 75 63 65 | utes..This.command.was.introduce |
1090e0 | 64 20 69 6e 20 56 79 4f 53 20 31 2e 34 20 2d 20 69 74 20 77 61 73 20 70 72 65 76 69 6f 75 73 6c | d.in.VyOS.1.4.-.it.was.previousl |
109100 | 79 20 63 61 6c 6c 65 64 3a 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 6f 70 74 69 6f 6e 73 | y.called:.``set.firewall.options |
109120 | 20 69 6e 74 65 72 66 61 63 65 20 3c 6e 61 6d 65 3e 20 61 64 6a 75 73 74 2d 6d 73 73 20 3c 76 61 | .interface.<name>.adjust-mss.<va |
109140 | 6c 75 65 3e 60 60 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 61 73 20 69 6e 74 72 6f 64 75 63 | lue>``.This.command.was.introduc |
109160 | 65 64 20 69 6e 20 56 79 4f 53 20 31 2e 34 20 2d 20 69 74 20 77 61 73 20 70 72 65 76 69 6f 75 73 | ed.in.VyOS.1.4.-.it.was.previous |
109180 | 6c 79 20 63 61 6c 6c 65 64 3a 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 6f 70 74 69 6f 6e | ly.called:.``set.firewall.option |
1091a0 | 73 20 69 6e 74 65 72 66 61 63 65 20 3c 6e 61 6d 65 3e 20 61 64 6a 75 73 74 2d 6d 73 73 36 20 3c | s.interface.<name>.adjust-mss6.< |
1091c0 | 76 61 6c 75 65 3e 60 60 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 63 68 61 6e 67 | value>``.This.command.will.chang |
1091e0 | 65 20 74 68 65 20 68 6f 6c 64 20 64 6f 77 6e 20 76 61 6c 75 65 20 66 6f 72 20 49 47 50 2d 4c 44 | e.the.hold.down.value.for.IGP-LD |
109200 | 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 64 75 72 69 6e 67 20 63 6f 6e 76 65 72 67 | P.synchronization.during.converg |
109220 | 65 6e 63 65 2f 69 6e 74 65 72 66 61 63 65 20 66 6c 61 70 20 65 76 65 6e 74 73 2c 20 62 75 74 20 | ence/interface.flap.events,.but. |
109240 | 66 6f 72 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 6c 79 2e 00 54 68 69 73 20 63 6f | for.this.interface.only..This.co |
109260 | 6d 6d 61 6e 64 20 77 69 6c 6c 20 63 68 61 6e 67 65 20 74 68 65 20 68 6f 6c 64 20 64 6f 77 6e 20 | mmand.will.change.the.hold.down. |
109280 | 76 61 6c 75 65 20 67 6c 6f 62 61 6c 6c 79 20 66 6f 72 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 68 | value.globally.for.IGP-LDP.synch |
1092a0 | 72 6f 6e 69 7a 61 74 69 6f 6e 20 64 75 72 69 6e 67 20 63 6f 6e 76 65 72 67 65 6e 63 65 2f 69 6e | ronization.during.convergence/in |
1092c0 | 74 65 72 66 61 63 65 20 66 6c 61 70 20 65 76 65 6e 74 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | terface.flap.events..This.comman |
1092e0 | 64 20 77 69 6c 6c 20 63 6f 6e 66 69 67 75 72 65 20 61 20 74 69 65 2d 62 72 65 61 6b 65 72 20 66 | d.will.configure.a.tie-breaker.f |
109300 | 6f 72 20 6d 75 6c 74 69 70 6c 65 20 6c 6f 63 61 6c 20 4c 46 41 20 62 61 63 6b 75 70 73 2e 20 54 | or.multiple.local.LFA.backups..T |
109320 | 68 65 20 6c 6f 77 65 72 20 69 6e 64 65 78 20 6e 75 6d 62 65 72 73 20 77 69 6c 6c 20 62 65 20 70 | he.lower.index.numbers.will.be.p |
109340 | 72 6f 63 65 73 73 65 64 20 66 69 72 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c | rocessed.first..This.command.wil |
109360 | 6c 20 65 6e 61 62 6c 65 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e | l.enable.IGP-LDP.synchronization |
109380 | 20 67 6c 6f 62 61 6c 6c 79 20 66 6f 72 20 49 53 49 53 2e 20 54 68 69 73 20 72 65 71 75 69 72 65 | .globally.for.ISIS..This.require |
1093a0 | 73 20 66 6f 72 20 4c 44 50 20 74 6f 20 62 65 20 66 75 6e 63 74 69 6f 6e 61 6c 2e 20 54 68 69 73 | s.for.LDP.to.be.functional..This |
1093c0 | 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 34 34 33 60 2e 20 42 79 | .is.described.in.:rfc:`5443`..By |
1093e0 | 20 64 65 66 61 75 6c 74 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 20 6f 70 65 72 61 74 69 6f | .default.all.interfaces.operatio |
109400 | 6e 61 6c 20 69 6e 20 49 53 2d 49 53 20 61 72 65 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 73 79 6e | nal.in.IS-IS.are.enabled.for.syn |
109420 | 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 2e 20 4c 6f 6f 70 62 61 63 6b 73 20 61 72 65 20 65 78 65 6d | chronization..Loopbacks.are.exem |
109440 | 70 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 65 6e 61 62 6c 65 20 49 47 50 | pt..This.command.will.enable.IGP |
109460 | 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 67 6c 6f 62 61 6c 6c 79 20 66 6f | -LDP.synchronization.globally.fo |
109480 | 72 20 4f 53 50 46 2e 20 54 68 69 73 20 72 65 71 75 69 72 65 73 20 66 6f 72 20 4c 44 50 20 74 6f | r.OSPF..This.requires.for.LDP.to |
1094a0 | 20 62 65 20 66 75 6e 63 74 69 6f 6e 61 6c 2e 20 54 68 69 73 20 69 73 20 64 65 73 63 72 69 62 65 | .be.functional..This.is.describe |
1094c0 | 64 20 69 6e 20 3a 72 66 63 3a 60 35 34 34 33 60 2e 20 42 79 20 64 65 66 61 75 6c 74 20 61 6c 6c | d.in.:rfc:`5443`..By.default.all |
1094e0 | 20 69 6e 74 65 72 66 61 63 65 73 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 69 6e 20 4f 53 50 46 20 | .interfaces.operational.in.OSPF. |
109500 | 61 72 65 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 2e | are.enabled.for.synchronization. |
109520 | 20 4c 6f 6f 70 62 61 63 6b 73 20 61 72 65 20 65 78 65 6d 70 74 2e 00 54 68 69 73 20 63 6f 6d 6d | .Loopbacks.are.exempt..This.comm |
109540 | 61 6e 64 20 77 69 6c 6c 20 67 65 6e 65 72 61 74 65 20 61 20 64 65 66 61 75 6c 74 2d 72 6f 75 74 | and.will.generate.a.default-rout |
109560 | 65 20 69 6e 20 4c 31 20 64 61 74 61 62 61 73 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 | e.in.L1.database..This.command.w |
109580 | 69 6c 6c 20 67 65 6e 65 72 61 74 65 20 61 20 64 65 66 61 75 6c 74 2d 72 6f 75 74 65 20 69 6e 20 | ill.generate.a.default-route.in. |
1095a0 | 4c 32 20 64 61 74 61 62 61 73 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 67 | L2.database..This.command.will.g |
1095c0 | 69 76 65 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 61 20 72 75 6c 65 20 69 6e 20 61 20 73 | ive.an.overview.of.a.rule.in.a.s |
1095e0 | 69 6e 67 6c 65 20 72 75 6c 65 2d 73 65 74 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c | ingle.rule-set.This.command.will |
109600 | 20 67 69 76 65 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 61 20 72 75 6c 65 20 69 6e 20 61 | .give.an.overview.of.a.rule.in.a |
109620 | 20 73 69 6e 67 6c 65 20 72 75 6c 65 2d 73 65 74 2c 20 70 6c 75 73 20 69 6e 66 6f 72 6d 61 74 69 | .single.rule-set,.plus.informati |
109640 | 6f 6e 20 66 6f 72 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d | on.for.default.action..This.comm |
109660 | 61 6e 64 20 77 69 6c 6c 20 67 69 76 65 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 61 20 72 | and.will.give.an.overview.of.a.r |
109680 | 75 6c 65 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 72 75 6c 65 2d 73 65 74 2e 00 54 68 69 73 20 63 | ule.in.a.single.rule-set..This.c |
1096a0 | 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 67 69 76 65 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 | ommand.will.give.an.overview.of. |
1096c0 | 61 20 73 69 6e 67 6c 65 20 72 75 6c 65 2d 73 65 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | a.single.rule-set..This.command. |
1096e0 | 77 69 6c 6c 20 6c 69 6d 69 74 20 4c 46 41 20 62 61 63 6b 75 70 20 63 6f 6d 70 75 74 61 74 69 6f | will.limit.LFA.backup.computatio |
109700 | 6e 20 75 70 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 20 70 72 69 | n.up.to.the.specified.prefix.pri |
109720 | 6f 72 69 74 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 6f 75 6c 64 20 61 6c 6c 6f 77 20 | ority..This.command.would.allow. |
109740 | 74 68 65 20 64 79 6e 61 6d 69 63 20 75 70 64 61 74 65 20 6f 66 20 63 61 70 61 62 69 6c 69 74 69 | the.dynamic.update.of.capabiliti |
109760 | 65 73 20 6f 76 65 72 20 61 6e 20 65 73 74 61 62 6c 69 73 68 65 64 20 42 47 50 20 73 65 73 73 69 | es.over.an.established.BGP.sessi |
109780 | 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 73 20 63 72 65 61 74 65 73 20 61 20 62 72 69 64 | on..This.commands.creates.a.brid |
1097a0 | 67 65 20 74 68 61 74 20 69 73 20 75 73 65 64 20 74 6f 20 62 69 6e 64 20 74 72 61 66 66 69 63 20 | ge.that.is.used.to.bind.traffic. |
1097c0 | 6f 6e 20 65 74 68 31 20 76 6c 61 6e 20 32 34 31 20 77 69 74 68 20 74 68 65 20 76 78 6c 61 6e 32 | on.eth1.vlan.241.with.the.vxlan2 |
1097e0 | 34 31 2d 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 | 41-interface..The.IP.address.is. |
109800 | 6e 6f 74 20 72 65 71 75 69 72 65 64 2e 20 49 74 20 6d 61 79 20 68 6f 77 65 76 65 72 20 62 65 20 | not.required..It.may.however.be. |
109820 | 75 73 65 64 20 61 73 20 61 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 66 6f 72 20 65 61 | used.as.a.default.gateway.for.ea |
109840 | 63 68 20 4c 65 61 66 20 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 64 65 76 69 63 65 73 20 6f 6e 20 | ch.Leaf.which.allows.devices.on. |
109860 | 74 68 65 20 76 6c 61 6e 20 74 6f 20 72 65 61 63 68 20 6f 74 68 65 72 20 73 75 62 6e 65 74 73 2e | the.vlan.to.reach.other.subnets. |
109880 | 20 54 68 69 73 20 72 65 71 75 69 72 65 73 20 74 68 61 74 20 74 68 65 20 73 75 62 6e 65 74 73 20 | .This.requires.that.the.subnets. |
1098a0 | 61 72 65 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 62 79 20 4f 53 50 46 20 73 6f 20 74 68 61 | are.redistributed.by.OSPF.so.tha |
1098c0 | 74 20 74 68 65 20 53 70 69 6e 65 20 77 69 6c 6c 20 6c 65 61 72 6e 20 68 6f 77 20 74 6f 20 72 65 | t.the.Spine.will.learn.how.to.re |
1098e0 | 61 63 68 20 69 74 2e 20 54 6f 20 64 6f 20 74 68 69 73 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 | ach.it..To.do.this.you.need.to.c |
109900 | 68 61 6e 67 65 20 74 68 65 20 4f 53 50 46 20 6e 65 74 77 6f 72 6b 20 66 72 6f 6d 20 27 31 30 2e | hange.the.OSPF.network.from.'10. |
109920 | 30 2e 30 2e 30 2f 38 27 20 74 6f 20 27 30 2e 30 2e 30 2e 30 2f 30 27 20 74 6f 20 61 6c 6c 6f 77 | 0.0.0/8'.to.'0.0.0.0/0'.to.allow |
109940 | 20 31 37 32 2e 31 36 2f 31 32 2d 6e 65 74 77 6f 72 6b 73 20 74 6f 20 62 65 20 61 64 76 65 72 74 | .172.16/12-networks.to.be.advert |
109960 | 69 73 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 73 20 73 70 65 63 69 66 69 65 73 20 74 68 | ised..This.commands.specifies.th |
109980 | 65 20 46 69 6e 69 74 65 20 53 74 61 74 65 20 4d 61 63 68 69 6e 65 20 28 46 53 4d 29 20 69 6e 74 | e.Finite.State.Machine.(FSM).int |
1099a0 | 65 6e 64 65 64 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 65 20 74 69 6d 69 6e 67 20 6f 66 20 74 | ended.to.control.the.timing.of.t |
1099c0 | 68 65 20 65 78 65 63 75 74 69 6f 6e 20 6f 66 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 73 | he.execution.of.SPF.calculations |
1099e0 | 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 49 47 50 20 65 76 65 6e 74 73 2e 20 54 68 65 20 | .in.response.to.IGP.events..The. |
109a00 | 70 72 6f 63 65 73 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 38 34 30 35 60 | process.described.in.:rfc:`8405` |
109a20 | 2e 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 6e 61 62 6c 65 73 20 74 68 65 | ..This.configuration.enables.the |
109a40 | 20 54 43 50 20 72 65 76 65 72 73 65 20 70 72 6f 78 79 20 66 6f 72 20 74 68 65 20 22 6d 79 2d 74 | .TCP.reverse.proxy.for.the."my-t |
109a60 | 63 70 2d 61 70 69 22 20 73 65 72 76 69 63 65 2e 20 49 6e 63 6f 6d 69 6e 67 20 54 43 50 20 63 6f | cp-api".service..Incoming.TCP.co |
109a80 | 6e 6e 65 63 74 69 6f 6e 73 20 6f 6e 20 70 6f 72 74 20 38 38 38 38 20 77 69 6c 6c 20 62 65 20 6c | nnections.on.port.8888.will.be.l |
109aa0 | 6f 61 64 20 62 61 6c 61 6e 63 65 64 20 61 63 72 6f 73 73 20 74 68 65 20 62 61 63 6b 65 6e 64 20 | oad.balanced.across.the.backend. |
109ac0 | 73 65 72 76 65 72 73 20 28 73 72 76 30 31 20 61 6e 64 20 73 72 76 30 32 29 20 75 73 69 6e 67 20 | servers.(srv01.and.srv02).using. |
109ae0 | 74 68 65 20 72 6f 75 6e 64 2d 72 6f 62 69 6e 20 6c 6f 61 64 2d 62 61 6c 61 6e 63 69 6e 67 20 61 | the.round-robin.load-balancing.a |
109b00 | 6c 67 6f 72 69 74 68 6d 2e 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6c 69 73 | lgorithm..This.configuration.lis |
109b20 | 74 65 6e 20 6f 6e 20 70 6f 72 74 20 38 30 20 61 6e 64 20 72 65 64 69 72 65 63 74 20 69 6e 63 6f | ten.on.port.80.and.redirect.inco |
109b40 | 6d 69 6e 67 20 72 65 71 75 65 73 74 73 20 74 6f 20 48 54 54 50 53 3a 00 54 68 69 73 20 63 6f 6e | ming.requests.to.HTTPS:.This.con |
109b60 | 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 69 66 69 65 73 20 74 68 65 20 62 65 68 61 76 69 6f 72 | figuration.modifies.the.behavior |
109b80 | 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 73 74 61 74 65 6d 65 6e 74 2e 20 49 66 20 79 6f | .of.the.network.statement..If.yo |
109ba0 | 75 20 68 61 76 65 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 74 68 65 20 75 6e 64 65 72 | u.have.this.configured.the.under |
109bc0 | 6c 79 69 6e 67 20 6e 65 74 77 6f 72 6b 20 6d 75 73 74 20 65 78 69 73 74 20 69 6e 20 74 68 65 20 | lying.network.must.exist.in.the. |
109be0 | 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | routing.table..This.configuratio |
109c00 | 6e 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 61 6e 64 20 6d 75 73 74 | n.parameter.is.required.and.must |
109c20 | 20 62 65 20 75 6e 69 71 75 65 20 74 6f 20 65 61 63 68 20 73 75 62 6e 65 74 2e 20 49 74 20 69 73 | .be.unique.to.each.subnet..It.is |
109c40 | 20 72 65 71 75 69 72 65 64 20 74 6f 20 6d 61 70 20 73 75 62 6e 65 74 73 20 74 6f 20 6c 65 61 73 | .required.to.map.subnets.to.leas |
109c60 | 65 20 66 69 6c 65 20 65 6e 74 72 69 65 73 2e 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 | e.file.entries..This.configurati |
109c80 | 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 6c 65 74 73 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 | on.parameter.lets.the.DHCP.serve |
109ca0 | 72 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f 72 20 44 48 43 50 20 72 65 71 75 65 73 74 73 20 73 65 | r.to.listen.for.DHCP.requests.se |
109cc0 | 6e 74 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 2c 20 69 74 20 | nt.to.the.specified.address,.it. |
109ce0 | 69 73 20 6f 6e 6c 79 20 72 65 61 6c 69 73 74 69 63 61 6c 6c 79 20 75 73 65 66 75 6c 20 66 6f 72 | is.only.realistically.useful.for |
109d00 | 20 61 20 73 65 72 76 65 72 20 77 68 6f 73 65 20 6f 6e 6c 79 20 63 6c 69 65 6e 74 73 20 61 72 65 | .a.server.whose.only.clients.are |
109d20 | 20 72 65 61 63 68 65 64 20 76 69 61 20 75 6e 69 63 61 73 74 73 2c 20 73 75 63 68 20 61 73 20 76 | .reached.via.unicasts,.such.as.v |
109d40 | 69 61 20 44 48 43 50 20 72 65 6c 61 79 20 61 67 65 6e 74 73 2e 00 54 68 69 73 20 63 6f 6e 66 69 | ia.DHCP.relay.agents..This.confi |
109d60 | 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 6c 65 74 73 20 79 6f 75 20 73 70 65 63 | guration.parameter.lets.you.spec |
109d80 | 69 66 79 20 61 20 76 65 6e 64 6f 72 2d 6f 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 65 6e 74 69 | ify.a.vendor-option.for.the.enti |
109da0 | 72 65 20 73 68 61 72 65 64 20 6e 65 74 77 6f 72 6b 20 64 65 66 69 6e 69 74 69 6f 6e 2e 20 41 6c | re.shared.network.definition..Al |
109dc0 | 6c 20 73 75 62 6e 65 74 73 20 77 69 6c 6c 20 69 6e 68 65 72 69 74 20 74 68 69 73 20 63 6f 6e 66 | l.subnets.will.inherit.this.conf |
109de0 | 69 67 75 72 61 74 69 6f 6e 20 69 74 65 6d 20 69 66 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 | iguration.item.if.not.specified. |
109e00 | 6c 6f 63 61 6c 6c 79 2e 20 41 6e 20 65 78 61 6d 70 6c 65 20 66 6f 72 20 55 62 69 71 75 69 74 69 | locally..An.example.for.Ubiquiti |
109e20 | 20 69 73 20 73 68 6f 77 6e 20 62 65 6c 6f 77 3a 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 | .is.shown.below:.This.configurat |
109e40 | 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 6c 65 74 73 20 79 6f 75 20 73 70 65 63 69 66 79 20 61 | ion.parameter.lets.you.specify.a |
109e60 | 20 76 65 6e 64 6f 72 2d 6f 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 73 75 62 6e 65 74 20 73 70 | .vendor-option.for.the.subnet.sp |
109e80 | 65 63 69 66 69 65 64 20 77 69 74 68 69 6e 20 74 68 65 20 73 68 61 72 65 64 20 6e 65 74 77 6f 72 | ecified.within.the.shared.networ |
109ea0 | 6b 20 64 65 66 69 6e 69 74 69 6f 6e 2e 20 41 6e 20 65 78 61 6d 70 6c 65 20 66 6f 72 20 55 62 69 | k.definition..An.example.for.Ubi |
109ec0 | 71 75 69 74 69 20 69 73 20 73 68 6f 77 6e 20 62 65 6c 6f 77 3a 00 54 68 69 73 20 63 6f 75 6c 64 | quiti.is.shown.below:.This.could |
109ee0 | 20 62 65 20 68 65 6c 70 66 75 6c 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 74 65 73 74 20 | .be.helpful.if.you.want.to.test. |
109f00 | 68 6f 77 20 61 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 62 65 68 61 76 65 73 20 75 6e 64 65 72 | how.an.application.behaves.under |
109f20 | 20 63 65 72 74 61 69 6e 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 64 69 74 69 6f 6e 73 2e 00 54 68 69 | .certain.network.conditions..Thi |
109f40 | 73 20 63 72 65 61 74 65 73 20 61 20 72 6f 75 74 65 20 70 6f 6c 69 63 79 20 63 61 6c 6c 65 64 20 | s.creates.a.route.policy.called. |
109f60 | 46 49 4c 54 45 52 2d 57 45 42 20 77 69 74 68 20 6f 6e 65 20 72 75 6c 65 20 74 6f 20 73 65 74 20 | FILTER-WEB.with.one.rule.to.set. |
109f80 | 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 66 6f 72 20 6d 61 74 63 68 69 6e 67 20 74 | the.routing.table.for.matching.t |
109fa0 | 72 61 66 66 69 63 20 28 54 43 50 20 70 6f 72 74 20 38 30 29 20 74 6f 20 74 61 62 6c 65 20 49 44 | raffic.(TCP.port.80).to.table.ID |
109fc0 | 20 31 30 30 20 69 6e 73 74 65 61 64 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 | .100.instead.of.the.default.rout |
109fe0 | 69 6e 67 20 74 61 62 6c 65 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 31 30 30 30 | ing.table..This.defaults.to.1000 |
10a000 | 30 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 31 38 31 32 2e 00 54 68 69 73 20 64 | 0..This.defaults.to.1812..This.d |
10a020 | 65 66 61 75 6c 74 73 20 74 6f 20 32 30 30 37 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 | efaults.to.2007..This.defaults.t |
10a040 | 6f 20 33 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 33 | o.30.seconds..This.defaults.to.3 |
10a060 | 30 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 34 39 2e | 00.seconds..This.defaults.to.49. |
10a080 | 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 35 2e 00 54 68 69 73 20 64 65 66 61 75 6c | .This.defaults.to.5..This.defaul |
10a0a0 | 74 73 20 74 6f 20 55 44 50 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 62 6f 74 68 20 | ts.to.UDP.This.defaults.to.both. |
10a0c0 | 31 2e 32 20 61 6e 64 20 31 2e 33 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 68 74 | 1.2.and.1.3..This.defaults.to.ht |
10a0e0 | 74 70 73 3a 2f 2f 61 63 6d 65 2d 76 30 32 2e 61 70 69 2e 6c 65 74 73 65 6e 63 72 79 70 74 2e 6f | tps://acme-v02.api.letsencrypt.o |
10a100 | 72 67 2f 64 69 72 65 63 74 6f 72 79 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 70 68 | rg/directory.This.defaults.to.ph |
10a120 | 79 30 2e 00 54 68 69 73 20 64 65 70 65 6e 64 73 20 6f 6e 20 74 68 65 20 64 72 69 76 65 72 20 63 | y0..This.depends.on.the.driver.c |
10a140 | 61 70 61 62 69 6c 69 74 69 65 73 20 61 6e 64 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c | apabilities.and.may.not.be.avail |
10a160 | 61 62 6c 65 20 77 69 74 68 20 61 6c 6c 20 64 72 69 76 65 72 73 2e 00 54 68 69 73 20 64 69 61 62 | able.with.all.drivers..This.diab |
10a180 | 6c 65 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 63 61 63 68 65 20 61 6e 64 20 64 69 72 65 63 74 | le.the.external.cache.and.direct |
10a1a0 | 6c 79 20 69 6e 6a 65 63 74 73 20 74 68 65 20 66 6c 6f 77 2d 73 74 61 74 65 73 20 69 6e 74 6f 20 | ly.injects.the.flow-states.into. |
10a1c0 | 74 68 65 20 69 6e 2d 6b 65 72 6e 65 6c 20 43 6f 6e 6e 65 63 74 69 6f 6e 20 54 72 61 63 6b 69 6e | the.in-kernel.Connection.Trackin |
10a1e0 | 67 20 53 79 73 74 65 6d 20 6f 66 20 74 68 65 20 62 61 63 6b 75 70 20 66 69 72 65 77 61 6c 6c 2e | g.System.of.the.backup.firewall. |
10a200 | 00 54 68 69 73 20 64 69 61 67 72 61 6d 20 63 6f 72 72 65 73 70 6f 6e 64 73 20 77 69 74 68 20 74 | .This.diagram.corresponds.with.t |
10a220 | 68 65 20 65 78 61 6d 70 6c 65 20 73 69 74 65 20 74 6f 20 73 69 74 65 20 63 6f 6e 66 69 67 75 72 | he.example.site.to.site.configur |
10a240 | 61 74 69 6f 6e 20 62 65 6c 6f 77 2e 00 54 68 69 73 20 65 6e 61 62 6c 65 73 20 3a 72 66 63 3a 60 | ation.below..This.enables.:rfc:` |
10a260 | 33 31 33 37 60 20 73 75 70 70 6f 72 74 2c 20 77 68 65 72 65 20 74 68 65 20 4f 53 50 46 20 70 72 | 3137`.support,.where.the.OSPF.pr |
10a280 | 6f 63 65 73 73 20 64 65 73 63 72 69 62 65 73 20 69 74 73 20 74 72 61 6e 73 69 74 20 6c 69 6e 6b | ocess.describes.its.transit.link |
10a2a0 | 73 20 69 6e 20 69 74 73 20 72 6f 75 74 65 72 2d 4c 53 41 20 61 73 20 68 61 76 69 6e 67 20 69 6e | s.in.its.router-LSA.as.having.in |
10a2c0 | 66 69 6e 69 74 65 20 64 69 73 74 61 6e 63 65 20 73 6f 20 74 68 61 74 20 6f 74 68 65 72 20 72 6f | finite.distance.so.that.other.ro |
10a2e0 | 75 74 65 72 73 20 77 69 6c 6c 20 61 76 6f 69 64 20 63 61 6c 63 75 6c 61 74 69 6e 67 20 74 72 61 | uters.will.avoid.calculating.tra |
10a300 | 6e 73 69 74 20 70 61 74 68 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f 75 74 65 72 20 77 68 | nsit.paths.through.the.router.wh |
10a320 | 69 6c 65 20 73 74 69 6c 6c 20 62 65 69 6e 67 20 61 62 6c 65 20 74 6f 20 72 65 61 63 68 20 6e 65 | ile.still.being.able.to.reach.ne |
10a340 | 74 77 6f 72 6b 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f 75 74 65 72 2e 00 54 68 69 73 20 | tworks.through.the.router..This. |
10a360 | 65 6e 61 62 6c 65 73 20 74 68 65 20 67 72 65 65 6e 66 69 65 6c 64 20 6f 70 74 69 6f 6e 20 77 68 | enables.the.greenfield.option.wh |
10a380 | 69 63 68 20 73 65 74 73 20 74 68 65 20 60 60 5b 47 46 5d 60 60 20 6f 70 74 69 6f 6e 00 54 68 69 | ich.sets.the.``[GF]``.option.Thi |
10a3a0 | 73 20 65 73 74 61 62 6c 69 73 68 65 73 20 6f 75 72 20 50 6f 72 74 20 46 6f 72 77 61 72 64 20 72 | s.establishes.our.Port.Forward.r |
10a3c0 | 75 6c 65 2c 20 62 75 74 20 69 66 20 77 65 20 63 72 65 61 74 65 64 20 61 20 66 69 72 65 77 61 6c | ule,.but.if.we.created.a.firewal |
10a3e0 | 6c 20 70 6f 6c 69 63 79 20 69 74 20 77 69 6c 6c 20 6c 69 6b 65 6c 79 20 62 6c 6f 63 6b 20 74 68 | l.policy.it.will.likely.block.th |
10a400 | 65 20 74 72 61 66 66 69 63 2e 00 54 68 69 73 20 65 78 61 6d 70 6c 65 20 73 68 6f 77 73 20 68 6f | e.traffic..This.example.shows.ho |
10a420 | 77 20 74 6f 20 74 61 72 67 65 74 20 61 6e 20 4d 53 53 20 63 6c 61 6d 70 20 28 69 6e 20 6f 75 72 | w.to.target.an.MSS.clamp.(in.our |
10a440 | 20 65 78 61 6d 70 6c 65 20 74 6f 20 31 33 36 30 20 62 79 74 65 73 29 20 74 6f 20 61 20 73 70 65 | .example.to.1360.bytes).to.a.spe |
10a460 | 63 69 66 69 63 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 2e 00 54 68 69 73 20 65 78 61 6d 70 | cific.destination.IP..This.examp |
10a480 | 6c 65 20 75 73 65 73 20 43 41 43 65 72 74 20 61 73 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 | le.uses.CACert.as.certificate.au |
10a4a0 | 74 68 6f 72 69 74 79 2e 00 54 68 69 73 20 66 65 61 74 75 72 65 20 63 6c 6f 73 65 6c 79 20 77 6f | thority..This.feature.closely.wo |
10a4c0 | 72 6b 73 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 3a 72 65 66 3a 60 70 6b 69 60 20 73 75 62 | rks.together.with.:ref:`pki`.sub |
10a4e0 | 73 79 73 74 65 6d 20 61 73 20 79 6f 75 20 72 65 71 75 69 72 65 64 20 61 20 78 35 30 39 20 63 65 | system.as.you.required.a.x509.ce |
10a500 | 72 74 69 66 69 63 61 74 65 2e 00 54 68 69 73 20 66 65 61 74 75 72 65 20 73 65 72 76 65 73 20 74 | rtificate..This.feature.serves.t |
10a520 | 68 65 20 70 75 72 70 6f 73 65 20 6f 66 20 74 68 69 67 68 74 65 6e 69 6e 67 20 74 68 65 20 70 61 | he.purpose.of.thightening.the.pa |
10a540 | 63 6b 65 74 20 76 61 6c 69 64 61 74 69 6f 6e 20 72 65 71 75 69 72 65 6d 65 6e 74 73 20 74 6f 20 | cket.validation.requirements.to. |
10a560 | 61 76 6f 69 64 20 72 65 63 65 69 76 69 6e 67 20 42 46 44 20 63 6f 6e 74 72 6f 6c 20 70 61 63 6b | avoid.receiving.BFD.control.pack |
10a580 | 65 74 73 20 66 72 6f 6d 20 6f 74 68 65 72 20 73 65 73 73 69 6f 6e 73 2e 00 54 68 69 73 20 66 65 | ets.from.other.sessions..This.fe |
10a5a0 | 61 74 75 72 65 20 73 75 6d 6d 61 72 69 73 65 73 20 6f 72 69 67 69 6e 61 74 65 64 20 65 78 74 65 | ature.summarises.originated.exte |
10a5c0 | 72 6e 61 6c 20 4c 53 41 73 20 28 54 79 70 65 2d 35 20 61 6e 64 20 54 79 70 65 2d 37 29 2e 20 53 | rnal.LSAs.(Type-5.and.Type-7)..S |
10a5e0 | 75 6d 6d 61 72 79 20 52 6f 75 74 65 20 77 69 6c 6c 20 62 65 20 6f 72 69 67 69 6e 61 74 65 64 20 | ummary.Route.will.be.originated. |
10a600 | 6f 6e 2d 62 65 68 61 6c 66 20 6f 66 20 61 6c 6c 20 6d 61 74 63 68 65 64 20 65 78 74 65 72 6e 61 | on-behalf.of.all.matched.externa |
10a620 | 6c 20 4c 53 41 73 2e 00 54 68 69 73 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 69 73 20 63 6f | l.LSAs..This.functionality.is.co |
10a640 | 6e 74 72 6f 6c 6c 65 64 20 62 79 20 61 64 64 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | ntrolled.by.adding.the.following |
10a660 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 54 68 69 73 20 66 75 6e 63 74 69 6f 6e 73 20 66 | .configuration:.This.functions.f |
10a680 | 6f 72 20 62 6f 74 68 20 69 6e 64 69 76 69 64 75 61 6c 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 | or.both.individual.addresses.and |
10a6a0 | 20 61 64 64 72 65 73 73 20 67 72 6f 75 70 73 2e 00 54 68 69 73 20 67 69 76 65 73 20 75 73 20 49 | .address.groups..This.gives.us.I |
10a6c0 | 47 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 66 6f 72 20 61 6c 6c 20 6e | GP-LDP.synchronization.for.all.n |
10a6e0 | 6f 6e 2d 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 73 20 77 69 74 68 20 61 20 68 6f | on-loopback.interfaces.with.a.ho |
10a700 | 6c 64 64 6f 77 6e 20 74 69 6d 65 72 20 6f 66 20 7a 65 72 6f 20 73 65 63 6f 6e 64 73 3a 00 54 68 | lddown.timer.of.zero.seconds:.Th |
10a720 | 69 73 20 67 69 76 65 73 20 75 73 20 4d 50 4c 53 20 73 65 67 6d 65 6e 74 20 72 6f 75 74 69 6e 67 | is.gives.us.MPLS.segment.routing |
10a740 | 20 65 6e 61 62 6c 65 64 20 61 6e 64 20 6c 61 62 65 6c 73 20 66 6f 72 20 66 61 72 20 65 6e 64 20 | .enabled.and.labels.for.far.end. |
10a760 | 6c 6f 6f 70 62 61 63 6b 73 3a 00 54 68 69 73 20 67 69 76 65 73 20 75 73 20 74 68 65 20 66 6f 6c | loopbacks:.This.gives.us.the.fol |
10a780 | 6c 6f 77 69 6e 67 20 6e 65 69 67 68 62 6f 72 73 68 69 70 73 2c 20 4c 65 76 65 6c 20 31 20 61 6e | lowing.neighborships,.Level.1.an |
10a7a0 | 64 20 4c 65 76 65 6c 20 32 3a 00 54 68 69 73 20 69 6e 73 74 72 75 63 74 73 20 6f 70 65 6e 6e 68 | d.Level.2:.This.instructs.opennh |
10a7c0 | 72 70 20 74 6f 20 72 65 70 6c 79 20 77 69 74 68 20 61 75 74 68 6f 72 61 74 69 76 65 20 61 6e 73 | rp.to.reply.with.authorative.ans |
10a7e0 | 77 65 72 73 20 6f 6e 20 4e 48 52 50 20 52 65 73 6f 6c 75 74 69 6f 6e 20 52 65 71 75 65 73 74 73 | wers.on.NHRP.Resolution.Requests |
10a800 | 20 64 65 73 74 69 6e 69 65 64 20 74 6f 20 61 64 64 72 65 73 73 65 73 20 69 6e 20 74 68 69 73 20 | .destinied.to.addresses.in.this. |
10a820 | 69 6e 74 65 72 66 61 63 65 20 28 69 6e 73 74 65 61 64 20 6f 66 20 66 6f 72 77 61 72 64 69 6e 67 | interface.(instead.of.forwarding |
10a840 | 20 74 68 65 20 70 61 63 6b 65 74 73 29 2e 20 54 68 69 73 20 65 66 66 65 63 74 69 76 65 6c 79 20 | .the.packets)..This.effectively. |
10a860 | 61 6c 6c 6f 77 73 20 74 68 65 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 73 68 6f 72 74 63 75 74 20 | allows.the.creation.of.shortcut. |
10a880 | 72 6f 75 74 65 73 20 74 6f 20 73 75 62 6e 65 74 73 20 6c 6f 63 61 74 65 64 20 6f 6e 20 74 68 65 | routes.to.subnets.located.on.the |
10a8a0 | 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 69 73 20 61 20 63 6f 6d 6d 6f 6e 20 73 63 65 | .interface..This.is.a.common.sce |
10a8c0 | 6e 61 72 69 6f 20 77 68 65 72 65 20 62 6f 74 68 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 | nario.where.both.:ref:`source-na |
10a8e0 | 74 60 20 61 6e 64 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 20 61 72 | t`.and.:ref:`destination-nat`.ar |
10a900 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 2e 20 49 | e.configured.at.the.same.time..I |
10a920 | 74 27 73 20 63 6f 6d 6d 6f 6e 6c 79 20 75 73 65 64 20 77 68 65 6e 20 69 6e 74 65 72 6e 61 6c 20 | t's.commonly.used.when.internal. |
10a940 | 28 70 72 69 76 61 74 65 29 20 68 6f 73 74 73 20 6e 65 65 64 20 74 6f 20 65 73 74 61 62 6c 69 73 | (private).hosts.need.to.establis |
10a960 | 68 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 65 78 74 65 72 6e 61 6c 20 72 65 73 | h.a.connection.with.external.res |
10a980 | 6f 75 72 63 65 73 20 61 6e 64 20 65 78 74 65 72 6e 61 6c 20 73 79 73 74 65 6d 73 20 6e 65 65 64 | ources.and.external.systems.need |
10a9a0 | 20 74 6f 20 61 63 63 65 73 73 20 69 6e 74 65 72 6e 61 6c 20 28 70 72 69 76 61 74 65 29 20 72 65 | .to.access.internal.(private).re |
10a9c0 | 73 6f 75 72 63 65 73 2e 00 54 68 69 73 20 69 73 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | sources..This.is.a.configuration |
10a9e0 | 20 70 61 72 61 6d 65 74 65 72 20 66 6f 72 20 74 68 65 20 60 3c 73 75 62 6e 65 74 3e 60 2c 20 73 | .parameter.for.the.`<subnet>`,.s |
10aa00 | 61 79 69 6e 67 20 74 68 61 74 20 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 72 65 73 70 6f 6e | aying.that.as.part.of.the.respon |
10aa20 | 73 65 2c 20 74 65 6c 6c 20 74 68 65 20 63 6c 69 65 6e 74 20 74 68 61 74 20 74 68 65 20 64 65 66 | se,.tell.the.client.that.the.def |
10aa40 | 61 75 6c 74 20 67 61 74 65 77 61 79 20 63 61 6e 20 62 65 20 72 65 61 63 68 65 64 20 61 74 20 60 | ault.gateway.can.be.reached.at.` |
10aa60 | 3c 61 64 64 72 65 73 73 3e 60 2e 00 54 68 69 73 20 69 73 20 61 20 63 6f 6e 66 69 67 75 72 61 74 | <address>`..This.is.a.configurat |
10aa80 | 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 66 6f 72 20 74 68 65 20 73 75 62 6e 65 74 2c 20 73 61 | ion.parameter.for.the.subnet,.sa |
10aaa0 | 79 69 6e 67 20 74 68 61 74 20 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 72 65 73 70 6f 6e 73 | ying.that.as.part.of.the.respons |
10aac0 | 65 2c 20 74 65 6c 6c 20 74 68 65 20 63 6c 69 65 6e 74 20 74 68 61 74 20 74 68 65 20 44 4e 53 20 | e,.tell.the.client.that.the.DNS. |
10aae0 | 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 61 74 20 60 3c 61 64 64 72 65 73 73 | server.can.be.found.at.`<address |
10ab00 | 3e 60 2e 00 54 68 69 73 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 63 6f 6d 6d 61 6e 64 2e | >`..This.is.a.mandatory.command. |
10ab20 | 20 53 65 74 73 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 74 6f 20 6d 61 74 63 | .Sets.regular.expression.to.matc |
10ab40 | 68 20 61 67 61 69 6e 73 74 20 6c 6f 67 20 73 74 72 69 6e 67 20 6d 65 73 73 61 67 65 2e 00 54 68 | h.against.log.string.message..Th |
10ab60 | 69 73 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 63 6f 6d 6d 61 6e 64 2e 20 53 65 74 73 20 | is.is.a.mandatory.command..Sets. |
10ab80 | 74 68 65 20 66 75 6c 6c 20 70 61 74 68 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 2e 20 54 68 65 | the.full.path.to.the.script..The |
10aba0 | 20 73 63 72 69 70 74 20 66 69 6c 65 20 6d 75 73 74 20 62 65 20 65 78 65 63 75 74 61 62 6c 65 2e | .script.file.must.be.executable. |
10abc0 | 00 54 68 69 73 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 6f 70 74 69 6f 6e 00 54 68 69 73 | .This.is.a.mandatory.option.This |
10abe0 | 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 73 65 74 74 69 6e 67 2e 00 54 68 69 73 20 69 73 | .is.a.mandatory.setting..This.is |
10ac00 | 20 61 63 68 69 65 76 65 64 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 66 69 72 73 74 20 74 68 72 | .achieved.by.using.the.first.thr |
10ac20 | 65 65 20 62 69 74 73 20 6f 66 20 74 68 65 20 54 6f 53 20 28 54 79 70 65 20 6f 66 20 53 65 72 76 | ee.bits.of.the.ToS.(Type.of.Serv |
10ac40 | 69 63 65 29 20 66 69 65 6c 64 20 74 6f 20 63 61 74 65 67 6f 72 69 7a 65 20 64 61 74 61 20 73 74 | ice).field.to.categorize.data.st |
10ac60 | 72 65 61 6d 73 20 61 6e 64 2c 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 | reams.and,.in.accordance.with.th |
10ac80 | 65 20 64 65 66 69 6e 65 64 20 70 72 65 63 65 64 65 6e 63 65 20 70 61 72 61 6d 65 74 65 72 73 2c | e.defined.precedence.parameters, |
10aca0 | 20 61 20 64 65 63 69 73 69 6f 6e 20 69 73 20 6d 61 64 65 2e 00 54 68 69 73 20 69 73 20 61 6c 73 | .a.decision.is.made..This.is.als |
10acc0 | 6f 20 6b 6e 6f 77 6e 20 61 73 20 74 68 65 20 48 55 42 73 20 49 50 20 61 64 64 72 65 73 73 20 6f | o.known.as.the.HUBs.IP.address.o |
10ace0 | 72 20 46 51 44 4e 2e 00 54 68 69 73 20 69 73 20 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 63 6f 6d 6d | r.FQDN..This.is.an.optional.comm |
10ad00 | 61 6e 64 20 62 65 63 61 75 73 65 20 74 68 65 20 65 76 65 6e 74 20 68 61 6e 64 6c 65 72 20 77 69 | and.because.the.event.handler.wi |
10ad20 | 6c 6c 20 62 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 63 72 65 61 74 65 64 20 61 66 74 65 | ll.be.automatically.created.afte |
10ad40 | 72 20 61 6e 79 20 6f 66 20 74 68 65 20 6e 65 78 74 20 63 6f 6d 6d 61 6e 64 73 2e 00 54 68 69 73 | r.any.of.the.next.commands..This |
10ad60 | 20 69 73 20 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 2e 20 41 64 64 73 20 61 72 | .is.an.optional.command..Adds.ar |
10ad80 | 67 75 6d 65 6e 74 73 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 2e 20 41 72 67 75 6d 65 6e 74 73 | guments.to.the.script..Arguments |
10ada0 | 20 6d 75 73 74 20 62 65 20 73 65 70 61 72 61 74 65 64 20 62 79 20 73 70 61 63 65 73 2e 00 54 68 | .must.be.separated.by.spaces..Th |
10adc0 | 69 73 20 69 73 20 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 2e 20 41 64 64 73 20 | is.is.an.optional.command..Adds. |
10ade0 | 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 61 6e 64 20 69 74 73 20 76 61 6c 75 65 20 74 6f 20 74 68 65 | environment.and.its.value.to.the |
10ae00 | 20 73 63 72 69 70 74 2e 20 55 73 65 20 73 65 70 61 72 61 74 65 20 63 6f 6d 6d 61 6e 64 73 20 66 | .script..Use.separate.commands.f |
10ae20 | 6f 72 20 65 61 63 68 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 00 54 68 69 73 20 69 73 20 61 6e 20 | or.each.environment..This.is.an. |
10ae40 | 6f 70 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 2e 20 46 69 6c 74 65 72 73 20 6c 6f 67 20 6d 65 | optional.command..Filters.log.me |
10ae60 | 73 73 61 67 65 73 20 62 79 20 73 79 73 6c 6f 67 2d 69 64 65 6e 74 69 66 69 65 72 2e 00 54 68 69 | ssages.by.syslog-identifier..Thi |
10ae80 | 73 20 69 73 20 64 6f 6e 65 20 74 6f 20 73 75 70 70 6f 72 74 20 28 65 74 68 65 72 6e 65 74 29 20 | s.is.done.to.support.(ethernet). |
10aea0 | 73 77 69 74 63 68 20 66 65 61 74 75 72 65 73 2c 20 6c 69 6b 65 20 3a 72 66 63 3a 60 33 30 36 39 | switch.features,.like.:rfc:`3069 |
10aec0 | 60 2c 20 77 68 65 72 65 20 74 68 65 20 69 6e 64 69 76 69 64 75 61 6c 20 70 6f 72 74 73 20 61 72 | `,.where.the.individual.ports.ar |
10aee0 | 65 20 4e 4f 54 20 61 6c 6c 6f 77 65 64 20 74 6f 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 77 69 74 | e.NOT.allowed.to.communicate.wit |
10af00 | 68 20 65 61 63 68 20 6f 74 68 65 72 2c 20 62 75 74 20 74 68 65 79 20 61 72 65 20 61 6c 6c 6f 77 | h.each.other,.but.they.are.allow |
10af20 | 65 64 20 74 6f 20 74 61 6c 6b 20 74 6f 20 74 68 65 20 75 70 73 74 72 65 61 6d 20 72 6f 75 74 65 | ed.to.talk.to.the.upstream.route |
10af40 | 72 2e 20 41 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 30 36 39 60 2c 20 | r..As.described.in.:rfc:`3069`,. |
10af60 | 69 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 73 65 20 68 6f | it.is.possible.to.allow.these.ho |
10af80 | 73 74 73 20 74 6f 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 74 68 72 6f 75 67 68 20 74 68 65 20 75 | sts.to.communicate.through.the.u |
10afa0 | 70 73 74 72 65 61 6d 20 72 6f 75 74 65 72 20 62 79 20 70 72 6f 78 79 5f 61 72 70 27 69 6e 67 2e | pstream.router.by.proxy_arp'ing. |
10afc0 | 00 54 68 69 73 20 69 73 20 65 73 70 65 63 69 61 6c 6c 79 20 75 73 65 66 75 6c 20 66 6f 72 20 74 | .This.is.especially.useful.for.t |
10afe0 | 68 65 20 75 70 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 2c 20 73 69 6e 63 65 20 74 68 65 | he.upstream.interface,.since.the |
10b000 | 20 73 6f 75 72 63 65 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 74 72 61 66 66 69 63 20 69 73 | .source.for.multicast.traffic.is |
10b020 | 20 6f 66 74 65 6e 20 66 72 6f 6d 20 61 20 72 65 6d 6f 74 65 20 6c 6f 63 61 74 69 6f 6e 2e 00 54 | .often.from.a.remote.location..T |
10b040 | 68 69 73 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 73 69 6d 70 6c 65 73 74 20 74 79 70 65 73 | his.is.one.of.the.simplest.types |
10b060 | 20 6f 66 20 74 75 6e 6e 65 6c 73 2c 20 61 73 20 64 65 66 69 6e 65 64 20 62 79 20 3a 72 66 63 3a | .of.tunnels,.as.defined.by.:rfc: |
10b080 | 60 32 30 30 33 60 2e 20 49 74 20 74 61 6b 65 73 20 61 6e 20 49 50 76 34 20 70 61 63 6b 65 74 20 | `2003`..It.takes.an.IPv4.packet. |
10b0a0 | 61 6e 64 20 73 65 6e 64 73 20 69 74 20 61 73 20 61 20 70 61 79 6c 6f 61 64 20 6f 66 20 61 6e 6f | and.sends.it.as.a.payload.of.ano |
10b0c0 | 74 68 65 72 20 49 50 76 34 20 70 61 63 6b 65 74 2e 20 46 6f 72 20 74 68 69 73 20 72 65 61 73 6f | ther.IPv4.packet..For.this.reaso |
10b0e0 | 6e 2c 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 6f 74 68 65 72 20 63 6f 6e 66 69 67 75 72 61 74 | n,.there.are.no.other.configurat |
10b100 | 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 74 68 69 73 20 6b 69 6e 64 20 6f 66 20 74 75 6e | ion.options.for.this.kind.of.tun |
10b120 | 6e 65 6c 2e 00 54 68 69 73 20 69 73 20 6f 70 74 69 6f 6e 61 6c 2e 00 54 68 69 73 20 69 73 20 73 | nel..This.is.optional..This.is.s |
10b140 | 69 6d 69 6c 61 72 20 74 6f 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 67 72 6f 75 70 73 20 70 61 72 | imilar.to.the.network.groups.par |
10b160 | 74 2c 20 62 75 74 20 68 65 72 65 20 79 6f 75 20 61 72 65 20 61 62 6c 65 20 74 6f 20 6e 65 67 61 | t,.but.here.you.are.able.to.nega |
10b180 | 74 65 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 61 64 64 72 65 73 73 65 73 2e 00 54 68 69 73 20 | te.the.matching.addresses..This. |
10b1a0 | 69 73 20 74 68 65 20 49 50 76 36 20 63 6f 75 6e 74 65 72 70 61 72 74 20 6f 66 20 49 50 49 50 2e | is.the.IPv6.counterpart.of.IPIP. |
10b1c0 | 20 49 27 6d 20 6e 6f 74 20 61 77 61 72 65 20 6f 66 20 61 6e 20 52 46 43 20 74 68 61 74 20 64 65 | .I'm.not.aware.of.an.RFC.that.de |
10b1e0 | 66 69 6e 65 73 20 74 68 69 73 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 73 70 65 63 69 66 69 | fines.this.encapsulation.specifi |
10b200 | 63 61 6c 6c 79 2c 20 62 75 74 20 69 74 27 73 20 61 20 6e 61 74 75 72 61 6c 20 73 70 65 63 69 66 | cally,.but.it's.a.natural.specif |
10b220 | 69 63 20 63 61 73 65 20 6f 66 20 49 50 76 36 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 6d 65 | ic.case.of.IPv6.encapsulation.me |
10b240 | 63 68 61 6e 69 73 6d 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 32 34 37 33 60 | chanisms.described.in.:rfc:2473` |
10b260 | 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 4c 41 4e 20 65 78 74 65 6e 73 69 6f 6e 20 75 73 65 20 | ..This.is.the.LAN.extension.use. |
10b280 | 63 61 73 65 2e 20 54 68 65 20 65 74 68 30 20 70 6f 72 74 20 6f 66 20 74 68 65 20 64 69 73 74 61 | case..The.eth0.port.of.the.dista |
10b2a0 | 6e 74 20 56 50 4e 20 70 65 65 72 73 20 77 69 6c 6c 20 62 65 20 64 69 72 65 63 74 6c 79 20 63 6f | nt.VPN.peers.will.be.directly.co |
10b2c0 | 6e 6e 65 63 74 65 64 20 6c 69 6b 65 20 69 66 20 74 68 65 72 65 20 77 61 73 20 61 20 73 77 69 74 | nnected.like.if.there.was.a.swit |
10b2e0 | 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 6d 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 4c 43 44 | ch.between.them..This.is.the.LCD |
10b300 | 20 6d 6f 64 65 6c 20 75 73 65 64 20 69 6e 20 79 6f 75 72 20 73 79 73 74 65 6d 2e 00 54 68 69 73 | .model.used.in.your.system..This |
10b320 | 20 69 73 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 | .is.the.configuration.parameter. |
10b340 | 66 6f 72 20 74 68 65 20 65 6e 74 69 72 65 20 73 68 61 72 65 64 20 6e 65 74 77 6f 72 6b 20 64 65 | for.the.entire.shared.network.de |
10b360 | 66 69 6e 69 74 69 6f 6e 2e 20 41 6c 6c 20 73 75 62 6e 65 74 73 20 77 69 6c 6c 20 69 6e 68 65 72 | finition..All.subnets.will.inher |
10b380 | 69 74 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 74 65 6d 20 69 66 20 6e 6f | it.this.configuration.item.if.no |
10b3a0 | 74 20 73 70 65 63 69 66 69 65 64 20 6c 6f 63 61 6c 6c 79 2e 00 54 68 69 73 20 69 73 20 74 68 65 | t.specified.locally..This.is.the |
10b3c0 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 66 6f 72 20 74 68 65 | .configuration.parameter.for.the |
10b3e0 | 20 65 6e 74 69 72 65 20 73 68 61 72 65 64 20 6e 65 74 77 6f 72 6b 20 64 65 66 69 6e 69 74 69 6f | .entire.shared.network.definitio |
10b400 | 6e 2e 20 41 6c 6c 20 73 75 62 6e 65 74 73 20 77 69 6c 6c 20 69 6e 68 65 72 69 74 20 74 68 69 73 | n..All.subnets.will.inherit.this |
10b420 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 74 65 6d 20 69 66 20 6e 6f 74 20 73 70 65 63 69 | .configuration.item.if.not.speci |
10b440 | 66 69 65 64 20 6c 6f 63 61 6c 6c 79 2e 20 4d 75 6c 74 69 70 6c 65 20 44 4e 53 20 73 65 72 76 65 | fied.locally..Multiple.DNS.serve |
10b460 | 72 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 65 | rs.can.be.defined..This.is.the.e |
10b480 | 71 75 69 76 61 6c 65 6e 74 20 6f 66 20 74 68 65 20 68 6f 73 74 20 62 6c 6f 63 6b 20 69 6e 20 64 | quivalent.of.the.host.block.in.d |
10b4a0 | 68 63 70 64 2e 63 6f 6e 66 20 6f 66 20 69 73 63 2d 64 68 63 70 64 2e 00 54 68 69 73 20 69 73 20 | hcpd.conf.of.isc-dhcpd..This.is. |
10b4c0 | 74 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 | the.name.of.the.physical.interfa |
10b4e0 | 63 65 20 75 73 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 79 6f 75 72 20 4c 43 44 20 64 | ce.used.to.connect.to.your.LCD.d |
10b500 | 69 73 70 6c 61 79 2e 20 54 61 62 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 69 73 20 73 75 70 70 6f 72 | isplay..Tab.completion.is.suppor |
10b520 | 74 65 64 20 61 6e 64 20 69 74 20 77 69 6c 6c 20 6c 69 73 74 20 79 6f 75 20 61 6c 6c 20 61 76 61 | ted.and.it.will.list.you.all.ava |
10b540 | 69 6c 61 62 6c 65 20 73 65 72 69 61 6c 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 69 73 | ilable.serial.interface..This.is |
10b560 | 20 74 68 65 20 70 6f 6c 69 63 79 20 74 68 61 74 20 72 65 71 75 69 65 72 65 73 20 74 68 65 20 6c | .the.policy.that.requieres.the.l |
10b580 | 6f 77 65 73 74 20 72 65 73 6f 75 72 63 65 73 20 66 6f 72 20 74 68 65 20 73 61 6d 65 20 61 6d 6f | owest.resources.for.the.same.amo |
10b5a0 | 75 6e 74 20 6f 66 20 74 72 61 66 66 69 63 2e 20 42 75 74 20 2a 2a 76 65 72 79 20 6c 69 6b 65 6c | unt.of.traffic..But.**very.likel |
10b5c0 | 79 20 79 6f 75 20 64 6f 20 6e 6f 74 20 6e 65 65 64 20 69 74 20 61 73 20 79 6f 75 20 63 61 6e 6e | y.you.do.not.need.it.as.you.cann |
10b5e0 | 6f 74 20 67 65 74 20 6d 75 63 68 20 66 72 6f 6d 20 69 74 2e 20 53 6f 6d 65 74 69 6d 65 73 20 69 | ot.get.much.from.it..Sometimes.i |
10b600 | 74 20 69 73 20 75 73 65 64 20 6a 75 73 74 20 74 6f 20 65 6e 61 62 6c 65 20 6c 6f 67 67 69 6e 67 | t.is.used.just.to.enable.logging |
10b620 | 2e 2a 2a 00 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 2c | .**.This.is.useful,.for.example, |
10b640 | 20 69 6e 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 20 77 69 74 68 20 68 6f 73 74 66 69 6c 65 20 75 70 | .in.combination.with.hostfile.up |
10b660 | 64 61 74 65 2e 00 54 68 69 73 20 69 73 20 77 68 65 72 65 20 22 55 44 50 20 62 72 6f 61 64 63 61 | date..This.is.where."UDP.broadca |
10b680 | 73 74 20 72 65 6c 61 79 22 20 63 6f 6d 65 73 20 69 6e 74 6f 20 70 6c 61 79 21 20 49 74 20 77 69 | st.relay".comes.into.play!.It.wi |
10b6a0 | 6c 6c 20 66 6f 72 77 61 72 64 20 72 65 63 65 69 76 65 64 20 62 72 6f 61 64 63 61 73 74 73 20 74 | ll.forward.received.broadcasts.t |
10b6c0 | 6f 20 6f 74 68 65 72 20 63 6f 6e 66 69 67 75 72 65 64 20 6e 65 74 77 6f 72 6b 73 2e 00 54 68 69 | o.other.configured.networks..Thi |
10b6e0 | 73 20 6d 61 6b 65 73 20 74 68 65 20 73 65 72 76 65 72 20 61 75 74 68 6f 72 69 74 61 74 69 76 65 | s.makes.the.server.authoritative |
10b700 | 6c 79 20 6e 6f 74 20 61 77 61 72 65 20 6f 66 3a 20 31 30 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 | ly.not.aware.of:.10.in-addr.arpa |
10b720 | 2c 20 31 36 38 2e 31 39 32 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 2c 20 31 36 2d 33 31 2e 31 37 | ,.168.192.in-addr.arpa,.16-31.17 |
10b740 | 32 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 2c 20 77 68 69 63 68 20 65 6e 61 62 6c 69 6e 67 20 75 | 2.in-addr.arpa,.which.enabling.u |
10b760 | 70 73 74 72 65 61 6d 20 44 4e 53 20 73 65 72 76 65 72 28 73 29 20 74 6f 20 62 65 20 75 73 65 64 | pstream.DNS.server(s).to.be.used |
10b780 | 20 66 6f 72 20 72 65 76 65 72 73 65 20 6c 6f 6f 6b 75 70 73 20 6f 66 20 74 68 65 73 65 20 7a 6f | .for.reverse.lookups.of.these.zo |
10b7a0 | 6e 65 73 2e 00 54 68 69 73 20 6d 65 74 68 6f 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 | nes..This.method.automatically.d |
10b7c0 | 69 73 61 62 6c 65 73 20 49 50 76 36 20 74 72 61 66 66 69 63 20 66 6f 72 77 61 72 64 69 6e 67 20 | isables.IPv6.traffic.forwarding. |
10b7e0 | 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 71 75 65 73 74 69 6f 6e 2e 00 54 68 | on.the.interface.in.question..Th |
10b800 | 69 73 20 6d 6f 64 65 20 70 72 6f 76 69 64 65 73 20 66 61 75 6c 74 20 74 6f 6c 65 72 61 6e 63 65 | is.mode.provides.fault.tolerance |
10b820 | 2e 00 54 68 69 73 20 6d 6f 64 65 20 70 72 6f 76 69 64 65 73 20 66 61 75 6c 74 20 74 6f 6c 65 72 | ..This.mode.provides.fault.toler |
10b840 | 61 6e 63 65 2e 20 54 68 65 20 3a 63 66 67 63 6d 64 3a 60 70 72 69 6d 61 72 79 60 20 6f 70 74 69 | ance..The.:cfgcmd:`primary`.opti |
10b860 | 6f 6e 2c 20 64 6f 63 75 6d 65 6e 74 65 64 20 62 65 6c 6f 77 2c 20 61 66 66 65 63 74 73 20 74 68 | on,.documented.below,.affects.th |
10b880 | 65 20 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 69 73 20 6d 6f 64 65 2e 00 54 68 69 73 20 6d 6f | e.behavior.of.this.mode..This.mo |
10b8a0 | 64 65 20 70 72 6f 76 69 64 65 73 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 61 6e 64 20 66 | de.provides.load.balancing.and.f |
10b8c0 | 61 75 6c 74 20 74 6f 6c 65 72 61 6e 63 65 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 61 64 64 73 | ault.tolerance..This.option.adds |
10b8e0 | 20 50 6f 77 65 72 20 43 6f 6e 73 74 72 61 69 6e 74 20 65 6c 65 6d 65 6e 74 20 77 68 65 6e 20 61 | .Power.Constraint.element.when.a |
10b900 | 70 70 6c 69 63 61 62 6c 65 20 61 6e 64 20 43 6f 75 6e 74 72 79 20 65 6c 65 6d 65 6e 74 20 69 73 | pplicable.and.Country.element.is |
10b920 | 20 61 64 64 65 64 2e 20 50 6f 77 65 72 20 43 6f 6e 73 74 72 61 69 6e 74 20 65 6c 65 6d 65 6e 74 | .added..Power.Constraint.element |
10b940 | 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 54 72 61 6e 73 6d 69 74 20 50 6f 77 65 72 20 43 | .is.required.by.Transmit.Power.C |
10b960 | 6f 6e 74 72 6f 6c 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 73 70 65 63 69 | ontrol..This.option.can.be.speci |
10b980 | 66 69 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e | fied.multiple.times..This.option |
10b9a0 | 20 63 61 6e 20 62 65 20 73 75 70 70 6c 69 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e | .can.be.supplied.multiple.times. |
10b9c0 | 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 6d 61 6e 64 61 74 6f 72 79 20 69 6e 20 41 63 63 | .This.option.is.mandatory.in.Acc |
10b9e0 | 65 73 73 2d 50 6f 69 6e 74 20 6d 6f 64 65 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 72 | ess-Point.mode..This.option.is.r |
10ba00 | 65 71 75 69 72 65 64 20 77 68 65 6e 20 72 75 6e 6e 69 6e 67 20 61 20 44 4d 56 50 4e 20 73 70 6f | equired.when.running.a.DMVPN.spo |
10ba20 | 6b 65 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 75 73 65 64 20 62 79 20 73 6f 6d 65 20 | ke..This.option.is.used.by.some. |
10ba40 | 44 48 43 50 20 63 6c 69 65 6e 74 73 20 61 73 20 61 20 77 61 79 20 66 6f 72 20 75 73 65 72 73 20 | DHCP.clients.as.a.way.for.users. |
10ba60 | 74 6f 20 73 70 65 63 69 66 79 20 69 64 65 6e 74 69 66 79 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 | to.specify.identifying.informati |
10ba80 | 6f 6e 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 75 73 | on.to.the.client..This.can.be.us |
10baa0 | 65 64 20 69 6e 20 61 20 73 69 6d 69 6c 61 72 20 77 61 79 20 74 6f 20 74 68 65 20 76 65 6e 64 6f | ed.in.a.similar.way.to.the.vendo |
10bac0 | 72 2d 63 6c 61 73 73 2d 69 64 65 6e 74 69 66 69 65 72 20 6f 70 74 69 6f 6e 2c 20 62 75 74 20 74 | r-class-identifier.option,.but.t |
10bae0 | 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 6f 70 74 69 6f 6e 20 69 73 20 73 70 65 63 69 66 | he.value.of.the.option.is.specif |
10bb00 | 69 65 64 20 62 79 20 74 68 65 20 75 73 65 72 2c 20 6e 6f 74 20 74 68 65 20 76 65 6e 64 6f 72 2e | ied.by.the.user,.not.the.vendor. |
10bb20 | 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 75 73 65 64 20 62 79 20 73 6f 6d 65 20 44 48 43 | .This.option.is.used.by.some.DHC |
10bb40 | 50 20 63 6c 69 65 6e 74 73 20 74 6f 20 69 64 65 6e 74 69 66 79 20 74 68 65 20 76 65 6e 64 6f 72 | P.clients.to.identify.the.vendor |
10bb60 | 20 74 79 70 65 20 61 6e 64 20 70 6f 73 73 69 62 6c 79 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 | .type.and.possibly.the.configura |
10bb80 | 74 69 6f 6e 20 6f 66 20 61 20 44 48 43 50 20 63 6c 69 65 6e 74 2e 20 54 68 65 20 69 6e 66 6f 72 | tion.of.a.DHCP.client..The.infor |
10bba0 | 6d 61 74 69 6f 6e 20 69 73 20 61 20 73 74 72 69 6e 67 20 6f 66 20 62 79 74 65 73 20 77 68 6f 73 | mation.is.a.string.of.bytes.whos |
10bbc0 | 65 20 63 6f 6e 74 65 6e 74 73 20 61 72 65 20 73 70 65 63 69 66 69 63 20 74 6f 20 74 68 65 20 76 | e.contents.are.specific.to.the.v |
10bbe0 | 65 6e 64 6f 72 20 61 6e 64 20 61 72 65 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 61 | endor.and.are.not.specified.in.a |
10bc00 | 20 73 74 61 6e 64 61 72 64 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 75 | .standard..This.option.must.be.u |
10bc20 | 73 65 64 20 77 69 74 68 20 60 60 74 69 6d 65 6f 75 74 60 60 20 6f 70 74 69 6f 6e 2e 00 54 68 69 | sed.with.``timeout``.option..Thi |
10bc40 | 73 20 6f 70 74 69 6f 6e 20 6f 6e 6c 79 20 61 66 66 65 63 74 73 20 38 30 32 2e 33 61 64 20 6d 6f | s.option.only.affects.802.3ad.mo |
10bc60 | 64 65 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 73 70 65 63 69 66 69 65 73 20 61 20 64 65 6c 61 | de..This.option.specifies.a.dela |
10bc80 | 79 20 69 6e 20 73 65 63 6f 6e 64 73 20 62 65 66 6f 72 65 20 76 72 72 70 20 69 6e 73 74 61 6e 63 | y.in.seconds.before.vrrp.instanc |
10bca0 | 65 73 20 73 74 61 72 74 20 75 70 20 61 66 74 65 72 20 6b 65 65 70 61 6c 69 76 65 64 20 73 74 61 | es.start.up.after.keepalived.sta |
10bcc0 | 72 74 73 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 32 30 | rts..This.options.defaults.to.20 |
10bce0 | 34 38 00 54 68 69 73 20 70 61 72 61 6d 65 74 65 72 20 61 6c 6c 6f 77 73 20 74 6f 20 22 73 68 6f | 48.This.parameter.allows.to."sho |
10bd00 | 72 74 63 75 74 22 20 72 6f 75 74 65 73 20 28 6e 6f 6e 2d 62 61 63 6b 62 6f 6e 65 29 20 66 6f 72 | rtcut".routes.(non-backbone).for |
10bd20 | 20 69 6e 74 65 72 2d 61 72 65 61 20 72 6f 75 74 65 73 2e 20 54 68 65 72 65 20 61 72 65 20 74 68 | .inter-area.routes..There.are.th |
10bd40 | 72 65 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 73 20 73 | ree.modes.available.for.routes.s |
10bd60 | 68 6f 72 74 63 75 74 74 69 6e 67 3a 00 54 68 69 73 20 70 6f 6c 69 63 79 20 69 73 20 69 6e 74 65 | hortcutting:.This.policy.is.inte |
10bd80 | 6e 64 65 64 20 74 6f 20 70 72 6f 76 69 64 65 20 61 20 6d 6f 72 65 20 62 61 6c 61 6e 63 65 64 20 | nded.to.provide.a.more.balanced. |
10bda0 | 64 69 73 74 72 69 62 75 74 69 6f 6e 20 6f 66 20 74 72 61 66 66 69 63 20 74 68 61 6e 20 6c 61 79 | distribution.of.traffic.than.lay |
10bdc0 | 65 72 32 20 61 6c 6f 6e 65 2c 20 65 73 70 65 63 69 61 6c 6c 79 20 69 6e 20 65 6e 76 69 72 6f 6e | er2.alone,.especially.in.environ |
10bde0 | 6d 65 6e 74 73 20 77 68 65 72 65 20 61 20 6c 61 79 65 72 33 20 67 61 74 65 77 61 79 20 64 65 76 | ments.where.a.layer3.gateway.dev |
10be00 | 69 63 65 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 72 65 61 63 68 20 6d 6f 73 74 20 64 65 | ice.is.required.to.reach.most.de |
10be20 | 73 74 69 6e 61 74 69 6f 6e 73 2e 00 54 68 69 73 20 70 72 6f 6d 70 74 65 64 20 73 6f 6d 65 20 49 | stinations..This.prompted.some.I |
10be40 | 53 50 73 20 74 6f 20 64 65 76 65 6c 6f 70 20 61 20 70 6f 6c 69 63 79 20 77 69 74 68 69 6e 20 74 | SPs.to.develop.a.policy.within.t |
10be60 | 68 65 20 3a 61 62 62 72 3a 60 41 52 49 4e 20 28 41 6d 65 72 69 63 61 6e 20 52 65 67 69 73 74 72 | he.:abbr:`ARIN.(American.Registr |
10be80 | 79 20 66 6f 72 20 49 6e 74 65 72 6e 65 74 20 4e 75 6d 62 65 72 73 29 60 20 74 6f 20 61 6c 6c 6f | y.for.Internet.Numbers)`.to.allo |
10bea0 | 63 61 74 65 20 6e 65 77 20 70 72 69 76 61 74 65 20 61 64 64 72 65 73 73 20 73 70 61 63 65 20 66 | cate.new.private.address.space.f |
10bec0 | 6f 72 20 43 47 4e 73 2c 20 62 75 74 20 41 52 49 4e 20 64 65 66 65 72 72 65 64 20 74 6f 20 74 68 | or.CGNs,.but.ARIN.deferred.to.th |
10bee0 | 65 20 49 45 54 46 20 62 65 66 6f 72 65 20 69 6d 70 6c 65 6d 65 6e 74 69 6e 67 20 74 68 65 20 70 | e.IETF.before.implementing.the.p |
10bf00 | 6f 6c 69 63 79 20 69 6e 64 69 63 61 74 69 6e 67 20 74 68 61 74 20 74 68 65 20 6d 61 74 74 65 72 | olicy.indicating.that.the.matter |
10bf20 | 20 77 61 73 20 6e 6f 74 20 61 20 74 79 70 69 63 61 6c 20 61 6c 6c 6f 63 61 74 69 6f 6e 20 69 73 | .was.not.a.typical.allocation.is |
10bf40 | 73 75 65 20 62 75 74 20 61 20 72 65 73 65 72 76 61 74 69 6f 6e 20 6f 66 20 61 64 64 72 65 73 73 | sue.but.a.reservation.of.address |
10bf60 | 65 73 20 66 6f 72 20 74 65 63 68 6e 69 63 61 6c 20 70 75 72 70 6f 73 65 73 20 28 70 65 72 20 3a | es.for.technical.purposes.(per.: |
10bf80 | 72 66 63 3a 60 32 38 36 30 60 29 2e 00 54 68 69 73 20 72 65 71 75 69 72 65 64 20 73 65 74 74 69 | rfc:`2860`)..This.required.setti |
10bfa0 | 6e 67 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 63 75 72 | ng.defines.the.action.of.the.cur |
10bfc0 | 72 65 6e 74 20 72 75 6c 65 2e 20 49 66 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 | rent.rule..If.action.is.set.to.` |
10bfe0 | 60 6a 75 6d 70 60 60 2c 20 74 68 65 6e 20 60 60 6a 75 6d 70 2d 74 61 72 67 65 74 60 60 20 69 73 | `jump``,.then.``jump-target``.is |
10c000 | 20 61 6c 73 6f 20 6e 65 65 64 65 64 2e 00 54 68 69 73 20 72 65 71 75 69 72 65 64 20 73 65 74 74 | .also.needed..This.required.sett |
10c020 | 69 6e 67 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 63 75 | ing.defines.the.action.of.the.cu |
10c040 | 72 72 65 6e 74 20 72 75 6c 65 2e 20 49 66 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 | rrent.rule..If.action.is.set.to. |
10c060 | 6a 75 6d 70 2c 20 74 68 65 6e 20 6a 75 6d 70 2d 74 61 72 67 65 74 20 69 73 20 61 6c 73 6f 20 6e | jump,.then.jump-target.is.also.n |
10c080 | 65 65 64 65 64 2e 00 54 68 69 73 20 72 65 71 75 69 72 65 73 20 74 77 6f 20 66 69 6c 65 73 2c 20 | eeded..This.requires.two.files,. |
10c0a0 | 6f 6e 65 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 64 65 76 69 63 65 20 28 58 58 58 2e 6e 65 | one.to.create.the.device.(XXX.ne |
10c0c0 | 74 64 65 76 29 20 61 6e 64 20 6f 6e 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6e | tdev).and.one.to.configure.the.n |
10c0e0 | 65 74 77 6f 72 6b 20 6f 6e 20 74 68 65 20 64 65 76 69 63 65 20 28 58 58 58 2e 6e 65 74 77 6f 72 | etwork.on.the.device.(XXX.networ |
10c100 | 6b 29 00 54 68 69 73 20 72 65 73 75 6c 74 73 20 69 6e 20 74 68 65 20 61 63 74 69 76 65 20 63 6f | k).This.results.in.the.active.co |
10c120 | 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 54 68 69 73 20 73 61 79 73 20 74 68 61 74 20 74 68 69 73 | nfiguration:.This.says.that.this |
10c140 | 20 64 65 76 69 63 65 20 69 73 20 74 68 65 20 6f 6e 6c 79 20 44 48 43 50 20 73 65 72 76 65 72 20 | .device.is.the.only.DHCP.server. |
10c160 | 66 6f 72 20 74 68 69 73 20 6e 65 74 77 6f 72 6b 2e 20 49 66 20 6f 74 68 65 72 20 64 65 76 69 63 | for.this.network..If.other.devic |
10c180 | 65 73 20 61 72 65 20 74 72 79 69 6e 67 20 74 6f 20 6f 66 66 65 72 20 44 48 43 50 20 6c 65 61 73 | es.are.trying.to.offer.DHCP.leas |
10c1a0 | 65 73 2c 20 74 68 69 73 20 6d 61 63 68 69 6e 65 20 77 69 6c 6c 20 73 65 6e 64 20 27 44 48 43 50 | es,.this.machine.will.send.'DHCP |
10c1c0 | 4e 41 4b 27 20 74 6f 20 61 6e 79 20 64 65 76 69 63 65 20 74 72 79 69 6e 67 20 74 6f 20 72 65 71 | NAK'.to.any.device.trying.to.req |
10c1e0 | 75 65 73 74 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 74 68 61 74 20 69 73 20 6e 6f 74 20 76 | uest.an.IP.address.that.is.not.v |
10c200 | 61 6c 69 64 20 66 6f 72 20 74 68 69 73 20 6e 65 74 77 6f 72 6b 2e 00 54 68 69 73 20 73 65 63 74 | alid.for.this.network..This.sect |
10c220 | 69 6f 6e 20 64 65 73 63 72 69 62 65 73 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 44 4e 53 20 6f 6e | ion.describes.configuring.DNS.on |
10c240 | 20 74 68 65 20 73 79 73 74 65 6d 2c 20 6e 61 6d 65 6c 79 3a 00 54 68 69 73 20 73 65 63 74 69 6f | .the.system,.namely:.This.sectio |
10c260 | 6e 20 64 65 73 63 72 69 62 65 73 20 74 68 65 20 73 79 73 74 65 6d 27 73 20 68 6f 73 74 20 69 6e | n.describes.the.system's.host.in |
10c280 | 66 6f 72 6d 61 74 69 6f 6e 20 61 6e 64 20 68 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 | formation.and.how.to.configure.t |
10c2a0 | 68 65 6d 2c 20 69 74 20 63 6f 76 65 72 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 70 | hem,.it.covers.the.following.top |
10c2c0 | 69 63 73 3a 00 54 68 69 73 20 73 65 63 74 69 6f 6e 20 6e 65 65 64 73 20 69 6d 70 72 6f 76 65 6d | ics:.This.section.needs.improvem |
10c2e0 | 65 6e 74 73 2c 20 65 78 61 6d 70 6c 65 73 20 61 6e 64 20 65 78 70 6c 61 6e 61 74 69 6f 6e 73 2e | ents,.examples.and.explanations. |
10c300 | 00 54 68 69 73 20 73 65 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 6f 66 20 | .This.set.the.default.action.of. |
10c320 | 74 68 65 20 72 75 6c 65 2d 73 65 74 20 69 66 20 6e 6f 20 72 75 6c 65 20 6d 61 74 63 68 65 64 20 | the.rule-set.if.no.rule.matched. |
10c340 | 61 20 70 61 63 6b 65 74 20 63 72 69 74 65 72 69 61 2e 20 49 66 20 64 65 66 61 63 75 6c 74 2d 61 | a.packet.criteria..If.defacult-a |
10c360 | 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2c 20 74 68 65 6e 20 60 | ction.is.set.to.``jump``,.then.` |
10c380 | 60 64 65 66 61 75 6c 74 2d 6a 75 6d 70 2d 74 61 72 67 65 74 60 60 20 69 73 20 61 6c 73 6f 20 6e | `default-jump-target``.is.also.n |
10c3a0 | 65 65 64 65 64 2e 00 54 68 69 73 20 73 65 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 | eeded..This.set.the.default.acti |
10c3c0 | 6f 6e 20 6f 66 20 74 68 65 20 72 75 6c 65 2d 73 65 74 20 69 66 20 6e 6f 20 72 75 6c 65 20 6d 61 | on.of.the.rule-set.if.no.rule.ma |
10c3e0 | 74 63 68 65 64 20 61 20 70 61 63 6b 65 74 20 63 72 69 74 65 72 69 61 2e 20 49 66 20 64 65 66 61 | tched.a.packet.criteria..If.defa |
10c400 | 63 75 6c 74 2d 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2c 20 | cult-action.is.set.to.``jump``,. |
10c420 | 74 68 65 6e 20 60 60 64 65 66 61 75 6c 74 2d 6a 75 6d 70 2d 74 61 72 67 65 74 60 60 20 69 73 20 | then.``default-jump-target``.is. |
10c440 | 61 6c 73 6f 20 6e 65 65 64 65 64 2e 20 4e 6f 74 65 20 74 68 61 74 20 66 6f 72 20 62 61 73 65 20 | also.needed..Note.that.for.base. |
10c460 | 63 68 61 69 6e 73 2c 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 63 61 6e 20 6f 6e 6c 79 20 | chains,.default.action.can.only. |
10c480 | 62 65 20 73 65 74 20 74 6f 20 60 60 61 63 63 65 70 74 60 60 20 6f 72 20 60 60 64 72 6f 70 60 60 | be.set.to.``accept``.or.``drop`` |
10c4a0 | 2c 20 77 68 69 6c 65 20 6f 6e 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2c 20 6d 6f 72 65 20 61 63 | ,.while.on.custom.chain,.more.ac |
10c4c0 | 74 69 6f 6e 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 2e 00 54 68 69 73 20 73 65 74 20 74 68 | tions.are.available..This.set.th |
10c4e0 | 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 75 6c 65 2d 73 65 74 | e.default.action.of.the.rule-set |
10c500 | 20 69 66 20 6e 6f 20 72 75 6c 65 20 6d 61 74 63 68 65 64 20 61 20 70 61 63 6b 65 74 20 63 72 69 | .if.no.rule.matched.a.packet.cri |
10c520 | 74 65 72 69 61 2e 20 49 66 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 | teria..If.default-action.is.set. |
10c540 | 74 6f 20 60 60 6a 75 6d 70 60 60 2c 20 74 68 65 6e 20 60 60 64 65 66 61 75 6c 74 2d 6a 75 6d 70 | to.``jump``,.then.``default-jump |
10c560 | 2d 74 61 72 67 65 74 60 60 20 69 73 20 61 6c 73 6f 20 6e 65 65 64 65 64 2e 20 4e 6f 74 65 20 74 | -target``.is.also.needed..Note.t |
10c580 | 68 61 74 20 66 6f 72 20 62 61 73 65 20 63 68 61 69 6e 73 2c 20 64 65 66 61 75 6c 74 20 61 63 74 | hat.for.base.chains,.default.act |
10c5a0 | 69 6f 6e 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 73 65 74 20 74 6f 20 60 60 61 63 63 65 70 74 60 | ion.can.only.be.set.to.``accept` |
10c5c0 | 60 20 6f 72 20 60 60 64 72 6f 70 60 60 2c 20 77 68 69 6c 65 20 6f 6e 20 63 75 73 74 6f 6d 20 63 | `.or.``drop``,.while.on.custom.c |
10c5e0 | 68 61 69 6e 2c 20 6d 6f 72 65 20 61 63 74 69 6f 6e 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 | hain,.more.actions.are.available |
10c600 | 2e 00 54 68 69 73 20 73 65 74 73 20 74 68 65 20 61 63 63 65 70 74 65 64 20 63 69 70 68 65 72 73 | ..This.sets.the.accepted.ciphers |
10c620 | 20 74 6f 20 75 73 65 20 77 68 65 6e 20 76 65 72 73 69 6f 6e 20 3d 3e 20 32 2e 34 2e 30 20 61 6e | .to.use.when.version.=>.2.4.0.an |
10c640 | 64 20 4e 43 50 20 69 73 20 65 6e 61 62 6c 65 64 20 28 77 68 69 63 68 20 69 73 20 74 68 65 20 64 | d.NCP.is.enabled.(which.is.the.d |
10c660 | 65 66 61 75 6c 74 29 2e 20 44 65 66 61 75 6c 74 20 4e 43 50 20 63 69 70 68 65 72 20 66 6f 72 20 | efault)..Default.NCP.cipher.for. |
10c680 | 76 65 72 73 69 6f 6e 73 20 3e 3d 20 32 2e 34 2e 30 20 69 73 20 61 65 73 32 35 36 67 63 6d 2e 20 | versions.>=.2.4.0.is.aes256gcm.. |
10c6a0 | 54 68 65 20 66 69 72 73 74 20 63 69 70 68 65 72 20 69 6e 20 74 68 69 73 20 6c 69 73 74 20 69 73 | The.first.cipher.in.this.list.is |
10c6c0 | 20 77 68 61 74 20 73 65 72 76 65 72 20 70 75 73 68 65 73 20 74 6f 20 63 6c 69 65 6e 74 73 2e 00 | .what.server.pushes.to.clients.. |
10c6e0 | 54 68 69 73 20 73 65 74 73 20 74 68 65 20 63 69 70 68 65 72 20 77 68 65 6e 20 4e 43 50 20 28 4e | This.sets.the.cipher.when.NCP.(N |
10c700 | 65 67 6f 74 69 61 62 6c 65 20 43 72 79 70 74 6f 20 50 61 72 61 6d 65 74 65 72 73 29 20 69 73 20 | egotiable.Crypto.Parameters).is. |
10c720 | 64 69 73 61 62 6c 65 64 20 6f 72 20 4f 70 65 6e 56 50 4e 20 76 65 72 73 69 6f 6e 20 3c 20 32 2e | disabled.or.OpenVPN.version.<.2. |
10c740 | 34 2e 30 2e 00 54 68 69 73 20 73 65 74 74 69 6e 67 20 64 65 66 61 75 6c 74 73 20 74 6f 20 31 35 | 4.0..This.setting.defaults.to.15 |
10c760 | 30 30 20 61 6e 64 20 69 73 20 76 61 6c 69 64 20 62 65 74 77 65 65 6e 20 31 30 20 61 6e 64 20 36 | 00.and.is.valid.between.10.and.6 |
10c780 | 30 30 30 30 2e 00 54 68 69 73 20 73 65 74 74 69 6e 67 20 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 | 0000..This.setting.enable.or.dis |
10c7a0 | 61 62 6c 65 20 74 68 65 20 72 65 73 70 6f 6e 73 65 20 6f 66 20 69 63 6d 70 20 62 72 6f 61 64 63 | able.the.response.of.icmp.broadc |
10c7c0 | 61 73 74 20 6d 65 73 73 61 67 65 73 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 | ast.messages..The.following.syst |
10c7e0 | 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 54 68 | em.parameter.will.be.altered:.Th |
10c800 | 69 73 20 73 65 74 74 69 6e 67 20 68 61 6e 64 6c 65 20 69 66 20 56 79 4f 53 20 61 63 63 65 70 74 | is.setting.handle.if.VyOS.accept |
10c820 | 20 70 61 63 6b 65 74 73 20 77 69 74 68 20 61 20 73 6f 75 72 63 65 20 72 6f 75 74 65 20 6f 70 74 | .packets.with.a.source.route.opt |
10c840 | 69 6f 6e 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 | ion..The.following.system.parame |
10c860 | 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 54 68 69 73 20 73 65 74 74 69 6e | ter.will.be.altered:.This.settin |
10c880 | 67 2c 20 77 68 69 63 68 20 64 65 66 61 75 6c 74 73 20 74 6f 20 33 36 30 30 20 73 65 63 6f 6e 64 | g,.which.defaults.to.3600.second |
10c8a0 | 73 2c 20 70 75 74 73 20 61 20 6d 61 78 69 6d 75 6d 20 6f 6e 20 74 68 65 20 61 6d 6f 75 6e 74 20 | s,.puts.a.maximum.on.the.amount. |
10c8c0 | 6f 66 20 74 69 6d 65 20 6e 65 67 61 74 69 76 65 20 65 6e 74 72 69 65 73 20 61 72 65 20 63 61 63 | of.time.negative.entries.are.cac |
10c8e0 | 68 65 64 2e 00 54 68 69 73 20 73 65 74 75 70 20 77 69 6c 6c 20 6d 61 6b 65 20 74 68 65 20 56 52 | hed..This.setup.will.make.the.VR |
10c900 | 52 50 20 70 72 6f 63 65 73 73 20 65 78 65 63 75 74 65 20 74 68 65 20 60 60 2f 63 6f 6e 66 69 67 | RP.process.execute.the.``/config |
10c920 | 2f 73 63 72 69 70 74 73 2f 76 72 72 70 2d 63 68 65 63 6b 2e 73 68 20 73 63 72 69 70 74 60 60 20 | /scripts/vrrp-check.sh.script``. |
10c940 | 65 76 65 72 79 20 36 30 20 73 65 63 6f 6e 64 73 2c 20 61 6e 64 20 74 72 61 6e 73 69 74 69 6f 6e | every.60.seconds,.and.transition |
10c960 | 20 74 68 65 20 67 72 6f 75 70 20 74 6f 20 74 68 65 20 66 61 75 6c 74 20 73 74 61 74 65 20 69 66 | .the.group.to.the.fault.state.if |
10c980 | 20 69 74 20 66 61 69 6c 73 20 28 69 2e 65 2e 20 65 78 69 74 73 20 77 69 74 68 20 6e 6f 6e 2d 7a | .it.fails.(i.e..exits.with.non-z |
10c9a0 | 65 72 6f 20 73 74 61 74 75 73 29 20 74 68 72 65 65 20 74 69 6d 65 73 3a 00 54 68 69 73 20 73 74 | ero.status).three.times:.This.st |
10c9c0 | 61 74 65 6d 65 6e 74 20 73 70 65 63 69 66 69 65 73 20 64 68 63 70 36 63 20 74 6f 20 6f 6e 6c 79 | atement.specifies.dhcp6c.to.only |
10c9e0 | 20 65 78 63 68 61 6e 67 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 61 6c 20 63 6f 6e 66 69 67 75 72 | .exchange.informational.configur |
10ca00 | 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 20 77 69 74 68 20 73 65 72 76 65 72 73 2e 20 41 | ation.parameters.with.servers..A |
10ca20 | 20 6c 69 73 74 20 6f 66 20 44 4e 53 20 73 65 72 76 65 72 20 61 64 64 72 65 73 73 65 73 20 69 73 | .list.of.DNS.server.addresses.is |
10ca40 | 20 61 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 73 75 63 68 20 70 61 72 61 6d 65 74 65 72 73 2e 20 | .an.example.of.such.parameters.. |
10ca60 | 54 68 69 73 20 73 74 61 74 65 6d 65 6e 74 20 69 73 20 75 73 65 66 75 6c 20 77 68 65 6e 20 74 68 | This.statement.is.useful.when.th |
10ca80 | 65 20 63 6c 69 65 6e 74 20 64 6f 65 73 20 6e 6f 74 20 6e 65 65 64 20 73 74 61 74 65 66 75 6c 20 | e.client.does.not.need.stateful. |
10caa0 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 20 73 75 63 68 20 61 73 | configuration.parameters.such.as |
10cac0 | 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 6f 72 20 70 72 65 66 69 78 65 73 2e 00 54 68 69 | .IPv6.addresses.or.prefixes..Thi |
10cae0 | 73 20 73 75 70 70 6f 72 74 20 6d 61 79 20 62 65 20 65 6e 61 62 6c 65 64 20 61 64 6d 69 6e 69 73 | s.support.may.be.enabled.adminis |
10cb00 | 74 72 61 74 69 76 65 6c 79 20 28 61 6e 64 20 69 6e 64 65 66 69 6e 69 74 65 6c 79 29 20 77 69 74 | tratively.(and.indefinitely).wit |
10cb20 | 68 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 60 20 63 | h.the.:cfgcmd:`administrative`.c |
10cb40 | 6f 6d 6d 61 6e 64 2e 20 49 74 20 6d 61 79 20 61 6c 73 6f 20 62 65 20 65 6e 61 62 6c 65 64 20 63 | ommand..It.may.also.be.enabled.c |
10cb60 | 6f 6e 64 69 74 69 6f 6e 61 6c 6c 79 2e 20 43 6f 6e 64 69 74 69 6f 6e 61 6c 20 65 6e 61 62 6c 69 | onditionally..Conditional.enabli |
10cb80 | 6e 67 20 6f 66 20 6d 61 78 2d 6d 65 74 72 69 63 20 72 6f 75 74 65 72 2d 6c 73 61 73 20 63 61 6e | ng.of.max-metric.router-lsas.can |
10cba0 | 20 62 65 20 66 6f 72 20 61 20 70 65 72 69 6f 64 20 6f 66 20 73 65 63 6f 6e 64 73 20 61 66 74 65 | .be.for.a.period.of.seconds.afte |
10cbc0 | 72 20 73 74 61 72 74 75 70 20 77 69 74 68 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 6f 6e 2d 73 | r.startup.with.the.:cfgcmd:`on-s |
10cbe0 | 74 61 72 74 75 70 20 3c 73 65 63 6f 6e 64 73 3e 60 20 63 6f 6d 6d 61 6e 64 20 61 6e 64 2f 6f 72 | tartup.<seconds>`.command.and/or |
10cc00 | 20 66 6f 72 20 61 20 70 65 72 69 6f 64 20 6f 66 20 73 65 63 6f 6e 64 73 20 70 72 69 6f 72 20 74 | .for.a.period.of.seconds.prior.t |
10cc20 | 6f 20 73 68 75 74 64 6f 77 6e 20 77 69 74 68 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 6f 6e 2d | o.shutdown.with.the.:cfgcmd:`on- |
10cc40 | 73 68 75 74 64 6f 77 6e 20 3c 73 65 63 6f 6e 64 73 3e 60 20 63 6f 6d 6d 61 6e 64 2e 20 54 68 65 | shutdown.<seconds>`.command..The |
10cc60 | 20 74 69 6d 65 20 72 61 6e 67 65 20 69 73 20 35 20 74 6f 20 38 36 34 30 30 2e 00 54 68 69 73 20 | .time.range.is.5.to.86400..This. |
10cc80 | 74 65 63 68 6e 69 71 75 65 20 69 73 20 63 6f 6d 6d 6f 6e 6c 79 20 72 65 66 65 72 72 65 64 20 74 | technique.is.commonly.referred.t |
10cca0 | 6f 20 61 73 20 4e 41 54 20 52 65 66 6c 65 63 74 69 6f 6e 20 6f 72 20 48 61 69 72 70 69 6e 20 4e | o.as.NAT.Reflection.or.Hairpin.N |
10ccc0 | 41 54 2e 00 54 68 69 73 20 74 65 63 68 6e 6f 6c 6f 67 79 20 69 73 20 6b 6e 6f 77 6e 20 62 79 20 | AT..This.technology.is.known.by. |
10cce0 | 64 69 66 66 65 72 65 6e 74 20 6e 61 6d 65 73 3a 00 54 68 69 73 20 74 68 65 20 73 69 6d 70 6c 65 | different.names:.This.the.simple |
10cd00 | 73 74 20 71 75 65 75 65 20 70 6f 73 73 69 62 6c 65 20 79 6f 75 20 63 61 6e 20 61 70 70 6c 79 20 | st.queue.possible.you.can.apply. |
10cd20 | 74 6f 20 79 6f 75 72 20 74 72 61 66 66 69 63 2e 20 54 72 61 66 66 69 63 20 6d 75 73 74 20 67 6f | to.your.traffic..Traffic.must.go |
10cd40 | 20 74 68 72 6f 75 67 68 20 61 20 66 69 6e 69 74 65 20 71 75 65 75 65 20 62 65 66 6f 72 65 20 69 | .through.a.finite.queue.before.i |
10cd60 | 74 20 69 73 20 61 63 74 75 61 6c 6c 79 20 73 65 6e 74 2e 20 59 6f 75 20 6d 75 73 74 20 64 65 66 | t.is.actually.sent..You.must.def |
10cd80 | 69 6e 65 20 68 6f 77 20 6d 61 6e 79 20 70 61 63 6b 65 74 73 20 74 68 61 74 20 71 75 65 75 65 20 | ine.how.many.packets.that.queue. |
10cda0 | 63 61 6e 20 63 6f 6e 74 61 69 6e 2e 00 54 68 69 73 20 74 6f 70 6f 6c 6f 67 79 20 77 61 73 20 62 | can.contain..This.topology.was.b |
10cdc0 | 75 69 6c 74 20 75 73 69 6e 67 20 47 4e 53 33 2e 00 54 68 69 73 20 77 69 6c 6c 20 61 64 64 20 74 | uilt.using.GNS3..This.will.add.t |
10cde0 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 70 74 69 6f 6e 20 74 6f 20 74 68 65 20 4b 65 72 6e 65 | he.following.option.to.the.Kerne |
10ce00 | 6c 20 63 6f 6d 6d 61 6e 64 6c 69 6e 65 3a 00 54 68 69 73 20 77 69 6c 6c 20 61 64 64 20 74 68 65 | l.commandline:.This.will.add.the |
10ce20 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 77 6f 20 6f 70 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 4b 65 | .following.two.options.to.the.Ke |
10ce40 | 72 6e 65 6c 20 63 6f 6d 6d 61 6e 64 6c 69 6e 65 3a 00 54 68 69 73 20 77 69 6c 6c 20 62 65 20 74 | rnel.commandline:.This.will.be.t |
10ce60 | 68 65 20 6d 6f 73 74 20 77 69 64 65 6c 79 20 75 73 65 64 20 69 6e 74 65 72 66 61 63 65 20 6f 6e | he.most.widely.used.interface.on |
10ce80 | 20 61 20 72 6f 75 74 65 72 20 63 61 72 72 79 69 6e 67 20 74 72 61 66 66 69 63 20 74 6f 20 74 68 | .a.router.carrying.traffic.to.th |
10cea0 | 65 20 72 65 61 6c 20 77 6f 72 6c 64 2e 00 54 68 69 73 20 77 69 6c 6c 20 63 6f 6e 66 69 67 75 72 | e.real.world..This.will.configur |
10cec0 | 65 20 61 20 73 74 61 74 69 63 20 41 52 50 20 65 6e 74 72 79 20 61 6c 77 61 79 73 20 72 65 73 6f | e.a.static.ARP.entry.always.reso |
10cee0 | 6c 76 69 6e 67 20 60 3c 61 64 64 72 65 73 73 3e 60 20 74 6f 20 60 3c 6d 61 63 3e 60 20 66 6f 72 | lving.`<address>`.to.`<mac>`.for |
10cf00 | 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 54 68 69 73 20 77 | .interface.`<interface>`..This.w |
10cf20 | 69 6c 6c 20 6d 61 74 63 68 20 54 43 50 20 74 72 61 66 66 69 63 20 77 69 74 68 20 73 6f 75 72 63 | ill.match.TCP.traffic.with.sourc |
10cf40 | 65 20 70 6f 72 74 20 38 30 2e 00 54 68 69 73 20 77 69 6c 6c 20 72 65 6e 64 65 72 20 74 68 65 20 | e.port.80..This.will.render.the. |
10cf60 | 66 6f 6c 6c 6f 77 69 6e 67 20 64 64 63 6c 69 65 6e 74 5f 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | following.ddclient_.configuratio |
10cf80 | 6e 20 65 6e 74 72 79 3a 00 54 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 62 61 | n.entry:.This.will.show.you.a.ba |
10cfa0 | 73 69 63 20 66 69 72 65 77 61 6c 6c 20 6f 76 65 72 76 69 65 77 00 54 68 69 73 20 77 69 6c 6c 20 | sic.firewall.overview.This.will. |
10cfc0 | 73 68 6f 77 20 79 6f 75 20 61 20 62 61 73 69 63 20 66 69 72 65 77 61 6c 6c 20 6f 76 65 72 76 69 | show.you.a.basic.firewall.overvi |
10cfe0 | 65 77 2c 20 66 6f 72 20 61 6c 6c 20 72 75 6c 65 73 65 74 2c 20 61 6e 64 20 6e 6f 74 20 6f 6e 6c | ew,.for.all.ruleset,.and.not.onl |
10d000 | 79 20 66 6f 72 20 69 70 76 34 00 54 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 | y.for.ipv4.This.will.show.you.a. |
10d020 | 62 61 73 69 63 20 73 75 6d 6d 61 72 79 20 6f 66 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 7a 6f | basic.summary.of.a.particular.zo |
10d040 | 6e 65 2e 00 54 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 62 61 73 69 63 20 73 | ne..This.will.show.you.a.basic.s |
10d060 | 75 6d 6d 61 72 79 20 6f 66 20 7a 6f 6e 65 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 54 | ummary.of.zones.configuration..T |
10d080 | 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 72 75 6c 65 2d 73 65 74 20 73 74 61 | his.will.show.you.a.rule-set.sta |
10d0a0 | 74 69 73 74 69 63 20 73 69 6e 63 65 20 74 68 65 20 6c 61 73 74 20 62 6f 6f 74 2e 00 54 68 69 73 | tistic.since.the.last.boot..This |
10d0c0 | 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 73 74 61 74 69 73 74 69 63 20 6f 66 20 61 6c | .will.show.you.a.statistic.of.al |
10d0e0 | 6c 20 72 75 6c 65 2d 73 65 74 73 20 73 69 6e 63 65 20 74 68 65 20 6c 61 73 74 20 62 6f 6f 74 2e | l.rule-sets.since.the.last.boot. |
10d100 | 00 54 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 73 75 6d 6d 61 72 79 20 6f 66 | .This.will.show.you.a.summary.of |
10d120 | 20 72 75 6c 65 2d 73 65 74 73 20 61 6e 64 20 67 72 6f 75 70 73 00 54 68 69 73 20 77 6f 72 6b 61 | .rule-sets.and.groups.This.worka |
10d140 | 72 6f 75 6e 64 20 6c 65 74 73 20 79 6f 75 20 61 70 70 6c 79 20 61 20 73 68 61 70 69 6e 67 20 70 | round.lets.you.apply.a.shaping.p |
10d160 | 6f 6c 69 63 79 20 74 6f 20 74 68 65 20 69 6e 67 72 65 73 73 20 74 72 61 66 66 69 63 20 62 79 20 | olicy.to.the.ingress.traffic.by. |
10d180 | 66 69 72 73 74 20 72 65 64 69 72 65 63 74 69 6e 67 20 69 74 20 74 6f 20 61 6e 20 69 6e 2d 62 65 | first.redirecting.it.to.an.in-be |
10d1a0 | 74 77 65 65 6e 20 76 69 72 74 75 61 6c 20 69 6e 74 65 72 66 61 63 65 20 28 60 49 6e 74 65 72 6d | tween.virtual.interface.(`Interm |
10d1c0 | 65 64 69 61 74 65 20 46 75 6e 63 74 69 6f 6e 61 6c 20 42 6c 6f 63 6b 60 5f 29 2e 20 54 68 65 72 | ediate.Functional.Block`_)..Ther |
10d1e0 | 65 2c 20 69 6e 20 74 68 61 74 20 76 69 72 74 75 61 6c 20 69 6e 74 65 72 66 61 63 65 2c 20 79 6f | e,.in.that.virtual.interface,.yo |
10d200 | 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 61 70 70 6c 79 20 61 6e 79 20 6f 66 20 74 | u.will.be.able.to.apply.any.of.t |
10d220 | 68 65 20 70 6f 6c 69 63 69 65 73 20 74 68 61 74 20 77 6f 72 6b 20 66 6f 72 20 6f 75 74 62 6f 75 | he.policies.that.work.for.outbou |
10d240 | 6e 64 20 74 72 61 66 66 69 63 2c 20 66 6f 72 20 69 6e 73 74 61 6e 63 65 2c 20 61 20 73 68 61 70 | nd.traffic,.for.instance,.a.shap |
10d260 | 69 6e 67 20 6f 6e 65 2e 00 54 68 69 73 20 77 6f 75 6c 64 20 67 65 6e 65 72 61 74 65 20 74 68 65 | ing.one..This.would.generate.the |
10d280 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 54 68 72 65 65 20 | .following.configuration:.Three. |
10d2a0 | 73 69 67 6e 69 66 69 63 61 6e 74 20 76 65 72 73 69 6f 6e 73 20 6f 66 20 53 4e 4d 50 20 68 61 76 | significant.versions.of.SNMP.hav |
10d2c0 | 65 20 62 65 65 6e 20 64 65 76 65 6c 6f 70 65 64 20 61 6e 64 20 64 65 70 6c 6f 79 65 64 2e 20 53 | e.been.developed.and.deployed..S |
10d2e0 | 4e 4d 50 76 31 20 69 73 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 76 65 72 73 69 6f 6e 20 6f 66 | NMPv1.is.the.original.version.of |
10d300 | 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 2e 20 4d 6f 72 65 20 72 65 63 65 6e 74 20 76 65 72 73 69 | .the.protocol..More.recent.versi |
10d320 | 6f 6e 73 2c 20 53 4e 4d 50 76 32 63 20 61 6e 64 20 53 4e 4d 50 76 33 2c 20 66 65 61 74 75 72 65 | ons,.SNMPv2c.and.SNMPv3,.feature |
10d340 | 20 69 6d 70 72 6f 76 65 6d 65 6e 74 73 20 69 6e 20 70 65 72 66 6f 72 6d 61 6e 63 65 2c 20 66 6c | .improvements.in.performance,.fl |
10d360 | 65 78 69 62 69 6c 69 74 79 20 61 6e 64 20 73 65 63 75 72 69 74 79 2e 00 54 69 6d 65 20 5a 6f 6e | exibility.and.security..Time.Zon |
10d380 | 65 00 54 69 6d 65 20 5a 6f 6e 65 20 73 65 74 74 69 6e 67 20 69 73 20 76 65 72 79 20 69 6d 70 6f | e.Time.Zone.setting.is.very.impo |
10d3a0 | 72 74 61 6e 74 20 61 73 20 65 2e 67 20 61 6c 6c 20 79 6f 75 72 20 6c 6f 67 66 69 6c 65 20 65 6e | rtant.as.e.g.all.your.logfile.en |
10d3c0 | 74 72 69 65 73 20 77 69 6c 6c 20 62 65 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 63 6f 6e 66 69 | tries.will.be.based.on.the.confi |
10d3e0 | 67 75 72 65 64 20 7a 6f 6e 65 2e 20 57 69 74 68 6f 75 74 20 70 72 6f 70 65 72 20 74 69 6d 65 20 | gured.zone..Without.proper.time. |
10d400 | 7a 6f 6e 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 74 20 77 69 6c 6c 20 62 65 20 76 65 | zone.configuration.it.will.be.ve |
10d420 | 72 79 20 64 69 66 66 69 63 75 6c 74 20 74 6f 20 63 6f 6d 70 61 72 65 20 6c 6f 67 66 69 6c 65 73 | ry.difficult.to.compare.logfiles |
10d440 | 20 66 72 6f 6d 20 64 69 66 66 65 72 65 6e 74 20 73 79 73 74 65 6d 73 2e 00 54 69 6d 65 20 69 6e | .from.different.systems..Time.in |
10d460 | 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 62 65 74 77 65 65 6e 20 72 65 74 72 61 6e 73 6d 69 74 | .milliseconds.between.retransmit |
10d480 | 74 65 64 20 4e 65 69 67 68 62 6f 72 20 53 6f 6c 69 63 69 74 61 74 69 6f 6e 20 6d 65 73 73 61 67 | ted.Neighbor.Solicitation.messag |
10d4a0 | 65 73 00 54 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 68 61 74 20 74 68 65 20 70 72 65 66 | es.Time.in.seconds.that.the.pref |
10d4c0 | 69 78 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 70 72 65 66 65 72 72 65 64 20 28 64 65 66 61 75 6c | ix.will.remain.preferred.(defaul |
10d4e0 | 74 20 34 20 68 6f 75 72 73 29 00 54 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 68 61 74 20 | t.4.hours).Time.in.seconds.that. |
10d500 | 74 68 65 20 70 72 65 66 69 78 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 76 61 6c 69 64 20 28 64 65 | the.prefix.will.remain.valid.(de |
10d520 | 66 61 75 6c 74 3a 20 33 30 20 64 61 79 73 29 00 54 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 20 | fault:.30.days).Time.in.seconds. |
10d540 | 74 68 61 74 20 74 68 65 20 70 72 65 66 69 78 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 76 61 6c 69 | that.the.prefix.will.remain.vali |
10d560 | 64 20 28 64 65 66 61 75 6c 74 3a 20 36 35 35 32 38 20 73 65 63 6f 6e 64 73 29 00 54 69 6d 65 20 | d.(default:.65528.seconds).Time. |
10d580 | 69 73 20 69 6e 20 6d 69 6e 75 74 65 73 20 61 6e 64 20 64 65 66 61 75 6c 74 73 20 74 6f 20 36 30 | is.in.minutes.and.defaults.to.60 |
10d5a0 | 2e 00 54 69 6d 65 20 74 6f 20 6d 61 74 63 68 20 74 68 65 20 64 65 66 69 6e 65 64 20 72 75 6c 65 | ..Time.to.match.the.defined.rule |
10d5c0 | 2e 00 54 69 6d 65 2c 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2c 20 74 68 61 74 20 61 20 | ..Time,.in.milliseconds,.that.a. |
10d5e0 | 6e 6f 64 65 20 61 73 73 75 6d 65 73 20 61 20 6e 65 69 67 68 62 6f 72 20 69 73 20 72 65 61 63 68 | node.assumes.a.neighbor.is.reach |
10d600 | 61 62 6c 65 20 61 66 74 65 72 20 68 61 76 69 6e 67 20 72 65 63 65 69 76 65 64 20 61 20 72 65 61 | able.after.having.received.a.rea |
10d620 | 63 68 61 62 69 6c 69 74 79 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 00 54 69 6d 65 6f 75 74 20 69 | chability.confirmation.Timeout.i |
10d640 | 6e 20 73 65 63 6f 6e 64 73 00 54 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 6e 64 73 20 62 65 74 | n.seconds.Timeout.in.seconds.bet |
10d660 | 77 65 65 6e 20 68 65 61 6c 74 68 20 74 61 72 67 65 74 20 63 68 65 63 6b 73 2e 00 54 69 6d 65 6f | ween.health.target.checks..Timeo |
10d680 | 75 74 20 74 6f 20 77 61 69 74 20 72 65 70 6c 79 20 66 6f 72 20 49 6e 74 65 72 69 6d 2d 55 70 64 | ut.to.wait.reply.for.Interim-Upd |
10d6a0 | 61 74 65 20 70 61 63 6b 65 74 73 2e 20 28 64 65 66 61 75 6c 74 20 33 20 73 65 63 6f 6e 64 73 29 | ate.packets..(default.3.seconds) |
10d6c0 | 00 54 69 6d 65 6f 75 74 20 74 6f 20 77 61 69 74 20 72 65 73 70 6f 6e 73 65 20 66 72 6f 6d 20 73 | .Timeout.to.wait.response.from.s |
10d6e0 | 65 72 76 65 72 20 28 73 65 63 6f 6e 64 73 29 00 54 69 6d 65 72 73 00 54 6f 20 61 63 74 69 76 61 | erver.(seconds).Timers.To.activa |
10d700 | 74 65 20 74 68 65 20 56 4c 41 4e 20 61 77 61 72 65 20 62 72 69 64 67 65 2c 20 79 6f 75 20 6d 75 | te.the.VLAN.aware.bridge,.you.mu |
10d720 | 73 74 20 61 63 74 69 76 61 74 65 20 74 68 69 73 20 73 65 74 74 69 6e 67 20 74 6f 20 75 73 65 20 | st.activate.this.setting.to.use. |
10d740 | 56 4c 41 4e 20 73 65 74 74 69 6e 67 73 20 66 6f 72 20 74 68 65 20 62 72 69 64 67 65 00 54 6f 20 | VLAN.settings.for.the.bridge.To. |
10d760 | 61 6c 6c 6f 77 20 56 50 4e 2d 63 6c 69 65 6e 74 73 20 61 63 63 65 73 73 20 76 69 61 20 79 6f 75 | allow.VPN-clients.access.via.you |
10d780 | 72 20 65 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 2c 20 61 20 4e 41 54 20 72 75 6c 65 20 69 | r.external.address,.a.NAT.rule.i |
10d7a0 | 73 20 72 65 71 75 69 72 65 64 3a 00 54 6f 20 61 6c 6c 6f 77 20 6c 69 73 74 69 6e 67 20 61 64 64 | s.required:.To.allow.listing.add |
10d7c0 | 69 74 69 6f 6e 61 6c 20 63 75 73 74 6f 6d 20 64 6f 6d 61 69 6e 2c 20 66 6f 72 20 65 78 61 6d 70 | itional.custom.domain,.for.examp |
10d7e0 | 6c 65 20 60 60 6f 70 65 6e 74 68 72 65 61 64 2e 74 68 72 65 61 64 2e 68 6f 6d 65 2e 61 72 70 61 | le.``openthread.thread.home.arpa |
10d800 | 60 60 2c 20 73 6f 20 74 68 61 74 20 69 74 20 63 61 6e 20 72 65 66 6c 65 63 74 65 64 20 69 6e 20 | ``,.so.that.it.can.reflected.in. |
10d820 | 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 64 65 66 61 75 6c 74 20 60 60 6c 6f 63 61 6c 60 | addition.to.the.default.``local` |
10d840 | 60 2c 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f | `,.use.the.following.command:.To |
10d860 | 20 61 6c 6c 6f 77 20 6f 6e 6c 79 20 73 70 65 63 69 66 69 63 20 73 65 72 76 69 63 65 73 2c 20 66 | .allow.only.specific.services,.f |
10d880 | 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 5f 61 69 72 70 6c 61 79 2e 5f 74 63 70 60 60 20 6f 72 20 | or.example.``_airplay._tcp``.or. |
10d8a0 | 60 60 5f 69 70 70 2e 5f 74 63 70 60 60 2c 20 28 69 6e 73 74 65 61 64 20 6f 66 20 61 6c 6c 20 73 | ``_ipp._tcp``,.(instead.of.all.s |
10d8c0 | 65 72 76 69 63 65 73 29 20 74 6f 20 62 65 20 72 65 2d 62 72 6f 61 64 63 61 73 74 65 64 2c 20 75 | ervices).to.be.re-broadcasted,.u |
10d8e0 | 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 61 6c 6c | se.the.following.command:.To.all |
10d900 | 6f 77 20 74 72 61 66 66 69 63 20 74 6f 20 70 61 73 73 20 74 68 72 6f 75 67 68 20 74 6f 20 63 6c | ow.traffic.to.pass.through.to.cl |
10d920 | 69 65 6e 74 73 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 61 64 64 20 74 68 65 20 66 6f 6c 6c 6f | ients,.you.need.to.add.the.follo |
10d940 | 77 69 6e 67 20 72 75 6c 65 73 2e 20 28 69 66 20 79 6f 75 20 75 73 65 64 20 74 68 65 20 64 65 66 | wing.rules..(if.you.used.the.def |
10d960 | 61 75 6c 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 74 20 74 68 65 20 74 6f 70 20 6f 66 | ault.configuration.at.the.top.of |
10d980 | 20 74 68 69 73 20 70 61 67 65 29 00 54 6f 20 61 70 70 6c 79 20 74 68 69 73 20 70 6f 6c 69 63 79 | .this.page).To.apply.this.policy |
10d9a0 | 20 74 6f 20 74 68 65 20 63 6f 72 72 65 63 74 20 69 6e 74 65 72 66 61 63 65 2c 20 63 6f 6e 66 69 | .to.the.correct.interface,.confi |
10d9c0 | 67 75 72 65 20 69 74 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 69 6e 62 | gure.it.on.the.interface.the.inb |
10d9e0 | 6f 75 6e 64 20 6c 6f 63 61 6c 20 68 6f 73 74 20 77 69 6c 6c 20 73 65 6e 64 20 74 68 72 6f 75 67 | ound.local.host.will.send.throug |
10da00 | 68 20 74 6f 20 72 65 61 63 68 20 6f 75 72 20 64 65 73 74 69 6e 65 64 20 74 61 72 67 65 74 20 68 | h.to.reach.our.destined.target.h |
10da20 | 6f 73 74 20 28 69 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 20 65 74 68 31 29 2e 00 54 6f 20 61 75 | ost.(in.our.example.eth1)..To.au |
10da40 | 74 6f 20 75 70 64 61 74 65 20 74 68 65 20 62 6c 61 63 6b 6c 69 73 74 20 66 69 6c 65 73 00 54 6f | to.update.the.blacklist.files.To |
10da60 | 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 73 73 69 67 6e 20 74 68 65 20 63 6c 69 65 6e 74 | .automatically.assign.the.client |
10da80 | 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 61 73 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e | .an.IP.address.as.tunnel.endpoin |
10daa0 | 74 2c 20 61 20 63 6c 69 65 6e 74 20 49 50 20 70 6f 6f 6c 20 69 73 20 6e 65 65 64 65 64 2e 20 54 | t,.a.client.IP.pool.is.needed..T |
10dac0 | 68 65 20 73 6f 75 72 63 65 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 20 52 41 44 49 55 53 20 6f | he.source.can.be.either.RADIUS.o |
10dae0 | 72 20 61 20 6c 6f 63 61 6c 20 73 75 62 6e 65 74 20 6f 72 20 49 50 20 72 61 6e 67 65 20 64 65 66 | r.a.local.subnet.or.IP.range.def |
10db00 | 69 6e 69 74 69 6f 6e 2e 00 54 6f 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 73 73 69 67 6e | inition..To.automatically.assign |
10db20 | 20 74 68 65 20 63 6c 69 65 6e 74 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 61 73 20 74 75 6e | .the.client.an.IP.address.as.tun |
10db40 | 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 2c 20 61 20 63 6c 69 65 6e 74 20 49 50 20 70 6f 6f 6c 20 69 | nel.endpoint,.a.client.IP.pool.i |
10db60 | 73 20 6e 65 65 64 65 64 2e 20 54 68 65 20 73 6f 75 72 63 65 20 63 61 6e 20 62 65 20 65 69 74 68 | s.needed..The.source.can.be.eith |
10db80 | 65 72 20 52 41 44 49 55 53 20 6f 72 20 61 20 6e 61 6d 65 64 20 70 6f 6f 6c 2e 20 54 68 65 72 65 | er.RADIUS.or.a.named.pool..There |
10dba0 | 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 63 72 65 61 74 65 20 6d 75 6c 74 69 70 | .is.possibility.to.create.multip |
10dbc0 | 6c 65 20 6e 61 6d 65 64 20 70 6f 6f 6c 73 2e 20 45 61 63 68 20 6e 61 6d 65 64 20 70 6f 6f 6c 20 | le.named.pools..Each.named.pool. |
10dbe0 | 63 61 6e 20 69 6e 63 6c 75 64 65 20 6f 6e 6c 79 20 6f 6e 65 20 61 64 64 72 65 73 73 20 72 61 6e | can.include.only.one.address.ran |
10dc00 | 67 65 2e 20 54 6f 20 75 73 65 20 6d 75 6c 74 69 70 6c 65 20 61 64 64 72 65 73 73 20 72 61 6e 67 | ge..To.use.multiple.address.rang |
10dc20 | 65 73 20 63 6f 6e 66 69 67 75 72 65 20 60 60 6e 65 78 74 2d 70 6f 6f 6c 60 60 20 6f 70 74 69 6f | es.configure.``next-pool``.optio |
10dc40 | 6e 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 60 60 61 63 74 69 6f 6e | n..To.be.used.only.when.``action |
10dc60 | 60 60 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2e 20 55 73 65 20 74 68 69 73 20 | ``.is.set.to.``jump``..Use.this. |
10dc80 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 6a 75 6d 70 20 74 61 72 67 65 74 2e 00 | command.to.specify.jump.target.. |
10dca0 | 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 60 60 64 65 66 75 6c 74 2d 61 63 | To.be.used.only.when.``defult-ac |
10dcc0 | 74 69 6f 6e 60 60 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2e 20 55 73 65 20 74 | tion``.is.set.to.``jump``..Use.t |
10dce0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 6a 75 6d 70 20 74 61 72 67 | his.command.to.specify.jump.targ |
10dd00 | 65 74 20 66 6f 72 20 64 65 66 61 75 6c 74 20 72 75 6c 65 2e 00 54 6f 20 62 65 20 75 73 65 64 20 | et.for.default.rule..To.be.used. |
10dd20 | 6f 6e 6c 79 20 77 68 65 6e 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d | only.when.action.is.set.to.``jum |
10dd40 | 70 60 60 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 | p``..Use.this.command.to.specify |
10dd60 | 20 6a 75 6d 70 20 74 61 72 67 65 74 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 | .jump.target..To.be.used.only.wh |
10dd80 | 65 6e 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 71 75 65 75 65 60 60 2e 20 55 | en.action.is.set.to.``queue``..U |
10dda0 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 74 72 69 62 75 74 65 20 70 61 | se.this.command.to.distribute.pa |
10ddc0 | 63 6b 65 74 73 20 62 65 74 77 65 65 6e 20 73 65 76 65 72 61 6c 20 71 75 65 75 65 73 2e 00 54 6f | ckets.between.several.queues..To |
10dde0 | 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 | .be.used.only.when.action.is.set |
10de00 | 20 74 6f 20 60 60 71 75 65 75 65 60 60 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | .to.``queue``..Use.this.command. |
10de20 | 74 6f 20 6c 65 74 20 70 61 63 6b 65 74 20 67 6f 20 74 68 72 6f 75 67 68 20 66 69 72 65 77 61 6c | to.let.packet.go.through.firewal |
10de40 | 6c 20 77 68 65 6e 20 6e 6f 20 75 73 65 72 73 70 61 63 65 20 73 6f 66 74 77 61 72 65 20 69 73 20 | l.when.no.userspace.software.is. |
10de60 | 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 71 75 65 75 65 2e 00 54 6f 20 62 65 20 75 73 | connected.to.the.queue..To.be.us |
10de80 | 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 | ed.only.when.action.is.set.to.`` |
10dea0 | 71 75 65 75 65 60 60 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 | queue``..Use.this.command.to.spe |
10dec0 | 63 69 66 79 20 71 75 65 75 65 20 74 61 72 67 65 74 20 74 6f 20 75 73 65 2e 20 51 75 65 75 65 20 | cify.queue.target.to.use..Queue. |
10dee0 | 72 61 6e 67 65 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 65 64 2e 00 54 6f 20 62 65 20 75 | range.is.also.supported..To.be.u |
10df00 | 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 6a | sed.only.when.action.is.set.to.j |
10df20 | 75 6d 70 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 | ump..Use.this.command.to.specify |
10df40 | 20 6a 75 6d 70 20 74 61 72 67 65 74 2e 00 54 6f 20 62 79 70 61 73 73 20 74 68 65 20 70 72 6f 78 | .jump.target..To.bypass.the.prox |
10df60 | 79 20 66 6f 72 20 65 76 65 72 79 20 72 65 71 75 65 73 74 20 74 68 61 74 20 69 73 20 63 6f 6d 69 | y.for.every.request.that.is.comi |
10df80 | 6e 67 20 66 72 6f 6d 20 61 20 73 70 65 63 69 66 69 63 20 73 6f 75 72 63 65 3a 00 54 6f 20 62 79 | ng.from.a.specific.source:.To.by |
10dfa0 | 70 61 73 73 20 74 68 65 20 70 72 6f 78 79 20 66 6f 72 20 65 76 65 72 79 20 72 65 71 75 65 73 74 | pass.the.proxy.for.every.request |
10dfc0 | 20 74 68 61 74 20 69 73 20 64 69 72 65 63 74 65 64 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 | .that.is.directed.to.a.specific. |
10dfe0 | 64 65 73 74 69 6e 61 74 69 6f 6e 3a 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 49 50 76 36 20 61 | destination:.To.configure.IPv6.a |
10e000 | 73 73 69 67 6e 6d 65 6e 74 73 20 66 6f 72 20 63 6c 69 65 6e 74 73 2c 20 74 77 6f 20 6f 70 74 69 | ssignments.for.clients,.two.opti |
10e020 | 6f 6e 73 20 6e 65 65 64 20 74 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 41 20 67 6c 6f | ons.need.to.be.configured..A.glo |
10e040 | 62 61 6c 20 70 72 65 66 69 78 20 77 68 69 63 68 20 69 73 20 74 65 72 6d 69 6e 61 74 65 64 20 6f | bal.prefix.which.is.terminated.o |
10e060 | 6e 20 74 68 65 20 63 6c 69 65 6e 74 73 20 63 70 65 20 61 6e 64 20 61 20 64 65 6c 65 67 61 74 65 | n.the.clients.cpe.and.a.delegate |
10e080 | 64 20 70 72 65 66 69 78 2c 20 74 68 65 20 63 6c 69 65 6e 74 20 63 61 6e 20 75 73 65 20 66 6f 72 | d.prefix,.the.client.can.use.for |
10e0a0 | 20 64 65 76 69 63 65 73 20 72 6f 75 74 65 64 20 76 69 61 20 74 68 65 20 63 6c 69 65 6e 74 73 20 | .devices.routed.via.the.clients. |
10e0c0 | 63 70 65 2e 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 56 79 4f 53 20 77 69 74 68 20 74 68 65 20 | cpe..To.configure.VyOS.with.the. |
10e0e0 | 3a 64 6f 63 3a 60 6c 65 67 61 63 79 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 | :doc:`legacy.firewall.configurat |
10e100 | 69 6f 6e 20 3c 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e | ion.</configuration/firewall/gen |
10e120 | 65 72 61 6c 2d 6c 65 67 61 63 79 3e 60 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 56 79 4f 53 20 | eral-legacy>`.To.configure.VyOS. |
10e140 | 77 69 74 68 20 74 68 65 20 3a 64 6f 63 3a 60 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 | with.the.:doc:`zone-based.firewa |
10e160 | 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 3c 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | ll.configuration.</configuration |
10e180 | 2f 66 69 72 65 77 61 6c 6c 2f 7a 6f 6e 65 3e 60 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 56 79 | /firewall/zone>`.To.configure.Vy |
10e1a0 | 4f 53 20 77 69 74 68 20 74 68 65 20 6e 65 77 20 3a 64 6f 63 3a 60 66 69 72 65 77 61 6c 6c 20 63 | OS.with.the.new.:doc:`firewall.c |
10e1c0 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 3c 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 | onfiguration.</configuration/fir |
10e1e0 | 65 77 61 6c 6c 2f 67 65 6e 65 72 61 6c 3e 60 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 62 6c 6f | ewall/general>`.To.configure.blo |
10e200 | 63 6b 69 6e 67 20 61 64 64 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 20 74 68 65 20 63 | cking.add.the.following.to.the.c |
10e220 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 73 69 74 65 2d 74 | onfiguration.To.configure.site-t |
10e240 | 6f 2d 73 69 74 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 61 64 | o-site.connection.you.need.to.ad |
10e260 | 64 20 70 65 65 72 73 20 77 69 74 68 20 74 68 65 20 60 60 73 65 74 20 76 70 6e 20 69 70 73 65 63 | d.peers.with.the.``set.vpn.ipsec |
10e280 | 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 70 65 65 72 20 3c 6e 61 6d 65 3e 60 60 20 63 6f 6d 6d | .site-to-site.peer.<name>``.comm |
10e2a0 | 61 6e 64 2e 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 73 79 73 6c 6f 67 2c 20 79 6f 75 20 6e 65 | and..To.configure.syslog,.you.ne |
10e2c0 | 65 64 20 74 6f 20 73 77 69 74 63 68 20 69 6e 74 6f 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | ed.to.switch.into.configuration. |
10e2e0 | 6d 6f 64 65 2e 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 4c 43 44 20 64 69 73 70 | mode..To.configure.your.LCD.disp |
10e300 | 6c 61 79 20 79 6f 75 20 6d 75 73 74 20 66 69 72 73 74 20 69 64 65 6e 74 69 66 79 20 74 68 65 20 | lay.you.must.first.identify.the. |
10e320 | 75 73 65 64 20 68 61 72 64 77 61 72 65 2c 20 61 6e 64 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 | used.hardware,.and.connectivity. |
10e340 | 6f 66 20 74 68 65 20 64 69 73 70 6c 61 79 20 74 6f 20 79 6f 75 72 20 73 79 73 74 65 6d 2e 20 54 | of.the.display.to.your.system..T |
10e360 | 68 69 73 20 63 61 6e 20 62 65 20 61 6e 79 20 73 65 72 69 61 6c 20 70 6f 72 74 20 28 60 74 74 79 | his.can.be.any.serial.port.(`tty |
10e380 | 53 78 78 60 29 20 6f 72 20 73 65 72 69 61 6c 20 76 69 61 20 55 53 42 20 6f 72 20 65 76 65 6e 20 | Sxx`).or.serial.via.USB.or.even. |
10e3a0 | 6f 6c 64 20 70 61 72 61 6c 6c 65 6c 20 70 6f 72 74 20 69 6e 74 65 72 66 61 63 65 73 2e 00 54 6f | old.parallel.port.interfaces..To |
10e3c0 | 20 63 72 65 61 74 65 20 56 4c 41 4e 73 20 70 65 72 20 75 73 65 72 20 64 75 72 69 6e 67 20 72 75 | .create.VLANs.per.user.during.ru |
10e3e0 | 6e 74 69 6d 65 2c 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 65 74 74 69 6e 67 73 20 61 72 | ntime,.the.following.settings.ar |
10e400 | 65 20 72 65 71 75 69 72 65 64 20 6f 6e 20 61 20 70 65 72 20 69 6e 74 65 72 66 61 63 65 20 62 61 | e.required.on.a.per.interface.ba |
10e420 | 73 69 73 2e 20 56 4c 41 4e 20 49 44 20 61 6e 64 20 56 4c 41 4e 20 72 61 6e 67 65 20 63 61 6e 20 | sis..VLAN.ID.and.VLAN.range.can. |
10e440 | 62 65 20 70 72 65 73 65 6e 74 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | be.present.in.the.configuration. |
10e460 | 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 2e 00 54 6f 20 63 72 65 61 74 65 20 61 20 6e 65 | at.the.same.time..To.create.a.ne |
10e480 | 77 20 6c 69 6e 65 20 69 6e 20 79 6f 75 72 20 6c 6f 67 69 6e 20 6d 65 73 73 61 67 65 20 79 6f 75 | w.line.in.your.login.message.you |
10e4a0 | 20 6e 65 65 64 20 74 6f 20 65 73 63 61 70 65 20 74 68 65 20 6e 65 77 20 6c 69 6e 65 20 63 68 61 | .need.to.escape.the.new.line.cha |
10e4c0 | 72 61 63 74 65 72 20 62 79 20 75 73 69 6e 67 20 60 60 5c 5c 6e 60 60 2e 00 54 6f 20 63 72 65 61 | racter.by.using.``\\n``..To.crea |
10e4e0 | 74 65 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 64 69 73 | te.more.than.one.tunnel,.use.dis |
10e500 | 74 69 6e 63 74 20 55 44 50 20 70 6f 72 74 73 2e 00 54 6f 20 63 72 65 61 74 65 20 72 6f 75 74 69 | tinct.UDP.ports..To.create.routi |
10e520 | 6e 67 20 74 61 62 6c 65 20 31 30 30 20 61 6e 64 20 61 64 64 20 61 20 6e 65 77 20 64 65 66 61 75 | ng.table.100.and.add.a.new.defau |
10e540 | 6c 74 20 67 61 74 65 77 61 79 20 74 6f 20 62 65 20 75 73 65 64 20 62 79 20 74 72 61 66 66 69 63 | lt.gateway.to.be.used.by.traffic |
10e560 | 20 6d 61 74 63 68 69 6e 67 20 6f 75 72 20 72 6f 75 74 65 20 70 6f 6c 69 63 79 3a 00 54 6f 20 64 | .matching.our.route.policy:.To.d |
10e580 | 65 66 69 6e 65 20 61 20 7a 6f 6e 65 20 73 65 74 75 70 20 65 69 74 68 65 72 20 6f 6e 65 20 77 69 | efine.a.zone.setup.either.one.wi |
10e5a0 | 74 68 20 69 6e 74 65 72 66 61 63 65 73 20 6f 72 20 61 20 6c 6f 63 61 6c 20 7a 6f 6e 65 2e 00 54 | th.interfaces.or.a.local.zone..T |
10e5c0 | 6f 20 64 69 73 61 62 6c 65 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 20 77 69 74 68 6f 75 74 | o.disable.advertisements.without |
10e5e0 | 20 64 65 6c 65 74 69 6e 67 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 54 6f 20 | .deleting.the.configuration:.To. |
10e600 | 64 69 73 70 6c 61 79 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 4f 54 50 20 75 73 65 72 20 | display.the.configured.OTP.user. |
10e620 | 6b 65 79 2c 20 75 73 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 64 69 73 70 6c 61 79 | key,.use.the.command:.To.display |
10e640 | 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 4f 54 50 20 75 73 65 72 20 73 65 74 74 69 6e 67 | .the.configured.OTP.user.setting |
10e660 | 73 2c 20 75 73 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 65 6e 61 62 6c 65 20 4d 4c | s,.use.the.command:.To.enable.ML |
10e680 | 44 20 72 65 70 6f 72 74 73 20 61 6e 64 20 71 75 65 72 79 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 | D.reports.and.query.on.interface |
10e6a0 | 73 20 60 65 74 68 30 60 20 61 6e 64 20 60 65 74 68 31 60 3a 00 54 6f 20 65 6e 61 62 6c 65 20 52 | s.`eth0`.and.`eth1`:.To.enable.R |
10e6c0 | 41 44 49 55 53 20 62 61 73 65 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2c 20 74 68 65 20 | ADIUS.based.authentication,.the. |
10e6e0 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 6f 64 65 20 6e 65 65 64 73 20 74 6f 20 62 65 20 | authentication.mode.needs.to.be. |
10e700 | 63 68 61 6e 67 65 64 20 77 69 74 68 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | changed.within.the.configuration |
10e720 | 2e 20 50 72 65 76 69 6f 75 73 20 73 65 74 74 69 6e 67 73 20 6c 69 6b 65 20 74 68 65 20 6c 6f 63 | ..Previous.settings.like.the.loc |
10e740 | 61 6c 20 75 73 65 72 73 2c 20 73 74 69 6c 6c 20 65 78 69 73 74 73 20 77 69 74 68 69 6e 20 74 68 | al.users,.still.exists.within.th |
10e760 | 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 68 6f 77 65 76 65 72 20 74 68 65 79 20 61 72 | e.configuration,.however.they.ar |
10e780 | 65 20 6e 6f 74 20 75 73 65 64 20 69 66 20 74 68 65 20 6d 6f 64 65 20 68 61 73 20 62 65 65 6e 20 | e.not.used.if.the.mode.has.been. |
10e7a0 | 63 68 61 6e 67 65 64 20 66 72 6f 6d 20 6c 6f 63 61 6c 20 74 6f 20 72 61 64 69 75 73 2e 20 4f 6e | changed.from.local.to.radius..On |
10e7c0 | 63 65 20 63 68 61 6e 67 65 64 20 62 61 63 6b 20 74 6f 20 6c 6f 63 61 6c 2c 20 69 74 20 77 69 6c | ce.changed.back.to.local,.it.wil |
10e7e0 | 6c 20 75 73 65 20 61 6c 6c 20 6c 6f 63 61 6c 20 61 63 63 6f 75 6e 74 73 20 61 67 61 69 6e 2e 00 | l.use.all.local.accounts.again.. |
10e800 | 54 6f 20 65 6e 61 62 6c 65 20 62 61 6e 64 77 69 64 74 68 20 73 68 61 70 69 6e 67 20 76 69 61 20 | To.enable.bandwidth.shaping.via. |
10e820 | 52 41 44 49 55 53 2c 20 74 68 65 20 6f 70 74 69 6f 6e 20 72 61 74 65 2d 6c 69 6d 69 74 20 6e 65 | RADIUS,.the.option.rate-limit.ne |
10e840 | 65 64 73 20 74 6f 20 62 65 20 65 6e 61 62 6c 65 64 2e 00 54 6f 20 65 6e 61 62 6c 65 20 64 65 62 | eds.to.be.enabled..To.enable.deb |
10e860 | 75 67 20 6d 65 73 73 61 67 65 73 2e 20 41 76 61 69 6c 61 62 6c 65 20 76 69 61 20 3a 6f 70 63 6d | ug.messages..Available.via.:opcm |
10e880 | 64 3a 60 73 68 6f 77 20 6c 6f 67 60 20 6f 72 20 3a 6f 70 63 6d 64 3a 60 6d 6f 6e 69 74 6f 72 20 | d:`show.log`.or.:opcmd:`monitor. |
10e8a0 | 6c 6f 67 60 00 54 6f 20 65 6e 61 62 6c 65 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 79 6f 75 | log`.To.enable.mDNS.repeater.you |
10e8c0 | 20 6e 65 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 74 20 6c 65 61 73 74 20 74 77 6f 20 | .need.to.configure.at.least.two. |
10e8e0 | 69 6e 74 65 72 66 61 63 65 73 20 73 6f 20 74 68 61 74 20 61 6c 6c 20 69 6e 63 6f 6d 69 6e 67 20 | interfaces.so.that.all.incoming. |
10e900 | 6d 44 4e 53 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 6f 6e 65 20 69 6e 74 65 72 66 61 63 65 20 | mDNS.packets.from.one.interface. |
10e920 | 63 6f 6e 66 69 67 75 72 65 64 20 68 65 72 65 20 63 61 6e 20 62 65 20 72 65 2d 62 72 6f 61 64 63 | configured.here.can.be.re-broadc |
10e940 | 61 73 74 65 64 20 74 6f 20 61 6e 79 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 28 73 29 20 | asted.to.any.other.interface(s). |
10e960 | 63 6f 6e 66 69 67 75 72 65 64 20 75 6e 64 65 72 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 00 54 | configured.under.this.section..T |
10e980 | 6f 20 65 6e 61 62 6c 65 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 79 6f 75 20 6e 65 65 64 20 | o.enable.mDNS.repeater.you.need. |
10e9a0 | 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 74 20 6c 65 61 73 74 20 74 77 6f 20 69 6e 74 65 72 66 | to.configure.at.least.two.interf |
10e9c0 | 61 63 65 73 2e 20 54 6f 20 72 65 2d 62 72 6f 61 64 63 61 73 74 20 61 6c 6c 20 69 6e 63 6f 6d 69 | aces..To.re-broadcast.all.incomi |
10e9e0 | 6e 67 20 6d 44 4e 53 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 61 6e 79 20 69 6e 74 65 72 66 61 | ng.mDNS.packets.from.any.interfa |
10ea00 | 63 65 20 63 6f 6e 66 69 67 75 72 65 64 20 68 65 72 65 20 74 6f 20 61 6e 79 20 6f 74 68 65 72 20 | ce.configured.here.to.any.other. |
10ea20 | 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 65 64 20 75 6e 64 65 72 20 74 68 69 73 20 | interface.configured.under.this. |
10ea40 | 73 65 63 74 69 6f 6e 2e 00 54 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 48 54 54 50 20 73 65 63 75 | section..To.enable.the.HTTP.secu |
10ea60 | 72 69 74 79 20 68 65 61 64 65 72 73 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | rity.headers.in.the.configuratio |
10ea80 | 6e 20 66 69 6c 65 2c 20 75 73 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 65 6e 61 62 | n.file,.use.the.command:.To.enab |
10eaa0 | 6c 65 2f 64 69 73 61 62 6c 65 20 68 65 6c 70 65 72 20 73 75 70 70 6f 72 74 20 66 6f 72 20 61 20 | le/disable.helper.support.for.a. |
10eac0 | 73 70 65 63 69 66 69 63 20 6e 65 69 67 68 62 6f 75 72 2c 20 74 68 65 20 72 6f 75 74 65 72 2d 69 | specific.neighbour,.the.router-i |
10eae0 | 64 20 28 41 2e 42 2e 43 2e 44 29 20 68 61 73 20 74 6f 20 62 65 20 73 70 65 63 69 66 69 65 64 2e | d.(A.B.C.D).has.to.be.specified. |
10eb00 | 00 54 6f 20 65 78 63 6c 75 64 65 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 6c 6f 61 64 20 62 61 | .To.exclude.traffic.from.load.ba |
10eb20 | 6c 61 6e 63 69 6e 67 2c 20 74 72 61 66 66 69 63 20 6d 61 74 63 68 69 6e 67 20 61 6e 20 65 78 63 | lancing,.traffic.matching.an.exc |
10eb40 | 6c 75 64 65 20 72 75 6c 65 20 69 73 20 6e 6f 74 20 62 61 6c 61 6e 63 65 64 20 62 75 74 20 72 6f | lude.rule.is.not.balanced.but.ro |
10eb60 | 75 74 65 64 20 74 68 72 6f 75 67 68 20 74 68 65 20 73 79 73 74 65 6d 20 72 6f 75 74 69 6e 67 20 | uted.through.the.system.routing. |
10eb80 | 74 61 62 6c 65 20 69 6e 73 74 65 61 64 3a 00 54 6f 20 65 78 70 6c 61 69 6e 20 74 68 65 20 75 73 | table.instead:.To.explain.the.us |
10eba0 | 61 67 65 20 6f 66 20 4c 4e 53 20 66 6f 6c 6c 6f 77 20 6f 75 72 20 62 6c 75 65 70 72 69 6e 74 20 | age.of.LNS.follow.our.blueprint. |
10ebc0 | 3a 72 65 66 3a 60 65 78 61 6d 70 6c 65 73 2d 6c 61 63 2d 6c 6e 73 60 2e 00 54 6f 20 65 78 74 65 | :ref:`examples-lac-lns`..To.exte |
10ebe0 | 6e 64 20 53 4e 4d 50 20 61 67 65 6e 74 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2c 20 63 75 73 | nd.SNMP.agent.functionality,.cus |
10ec00 | 74 6f 6d 20 73 63 72 69 70 74 73 20 63 61 6e 20 62 65 20 65 78 65 63 75 74 65 64 20 65 76 65 72 | tom.scripts.can.be.executed.ever |
10ec20 | 79 20 74 69 6d 65 20 74 68 65 20 61 67 65 6e 74 20 69 73 20 62 65 69 6e 67 20 63 61 6c 6c 65 64 | y.time.the.agent.is.being.called |
10ec40 | 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 61 63 68 69 65 76 65 64 20 62 79 20 75 73 69 6e 67 20 | ..This.can.be.achieved.by.using. |
10ec60 | 60 60 61 72 62 69 74 72 61 72 79 20 65 78 74 65 6e 73 69 6f 6e 63 6f 6d 6d 61 6e 64 73 60 60 2e | ``arbitrary.extensioncommands``. |
10ec80 | 20 54 68 65 20 66 69 72 73 74 20 73 74 65 70 20 69 73 20 74 6f 20 63 72 65 61 74 65 20 61 20 66 | .The.first.step.is.to.create.a.f |
10eca0 | 75 6e 63 74 69 6f 6e 61 6c 20 73 63 72 69 70 74 20 6f 66 20 63 6f 75 72 73 65 2c 20 74 68 65 6e | unctional.script.of.course,.then |
10ecc0 | 20 75 70 6c 6f 61 64 20 69 74 20 74 6f 20 79 6f 75 72 20 56 79 4f 53 20 69 6e 73 74 61 6e 63 65 | .upload.it.to.your.VyOS.instance |
10ece0 | 20 76 69 61 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 60 60 73 63 70 20 79 6f 75 72 5f 73 63 72 69 | .via.the.command.``scp.your_scri |
10ed00 | 70 74 2e 73 68 20 76 79 6f 73 40 79 6f 75 72 5f 72 6f 75 74 65 72 3a 2f 63 6f 6e 66 69 67 2f 75 | pt.sh.vyos@your_router:/config/u |
10ed20 | 73 65 72 2d 64 61 74 61 60 60 2e 20 4f 6e 63 65 20 74 68 65 20 73 63 72 69 70 74 20 69 73 20 75 | ser-data``..Once.the.script.is.u |
10ed40 | 70 6c 6f 61 64 65 64 2c 20 69 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 | ploaded,.it.needs.to.be.configur |
10ed60 | 65 64 20 76 69 61 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 62 65 6c 6f 77 2e 00 54 6f 20 66 6f 72 | ed.via.the.command.below..To.for |
10ed80 | 77 61 72 64 20 61 6c 6c 20 62 72 6f 61 64 63 61 73 74 20 70 61 63 6b 65 74 73 20 72 65 63 65 69 | ward.all.broadcast.packets.recei |
10eda0 | 76 65 64 20 6f 6e 20 60 55 44 50 20 70 6f 72 74 20 31 39 30 30 60 20 6f 6e 20 60 65 74 68 33 60 | ved.on.`UDP.port.1900`.on.`eth3` |
10edc0 | 2c 20 60 65 74 68 34 60 20 6f 72 20 60 65 74 68 35 60 20 74 6f 20 61 6c 6c 20 6f 74 68 65 72 20 | ,.`eth4`.or.`eth5`.to.all.other. |
10ede0 | 69 6e 74 65 72 66 61 63 65 73 20 69 6e 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | interfaces.in.this.configuration |
10ee00 | 2e 00 54 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 43 41 2c 20 74 68 65 20 73 65 72 76 65 72 | ..To.generate.the.CA,.the.server |
10ee20 | 20 70 72 69 76 61 74 65 20 6b 65 79 20 61 6e 64 20 63 65 72 74 69 66 69 63 61 74 65 73 20 74 68 | .private.key.and.certificates.th |
10ee40 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 63 61 6e 20 62 65 20 75 73 65 64 | e.following.commands.can.be.used |
10ee60 | 2e 00 54 6f 20 67 65 74 20 69 74 20 74 6f 20 77 6f 72 6b 20 61 73 20 61 6e 20 61 63 63 65 73 73 | ..To.get.it.to.work.as.an.access |
10ee80 | 20 70 6f 69 6e 74 20 77 69 74 68 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 79 | .point.with.this.configuration.y |
10eea0 | 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 73 65 74 20 75 70 20 61 20 44 48 43 50 20 73 65 | ou.will.need.to.set.up.a.DHCP.se |
10eec0 | 72 76 65 72 20 74 6f 20 77 6f 72 6b 20 77 69 74 68 20 74 68 61 74 20 6e 65 74 77 6f 72 6b 2e 20 | rver.to.work.with.that.network.. |
10eee0 | 59 6f 75 20 63 61 6e 20 2d 20 6f 66 20 63 6f 75 72 73 65 20 2d 20 61 6c 73 6f 20 62 72 69 64 67 | You.can.-.of.course.-.also.bridg |
10ef00 | 65 20 74 68 65 20 57 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 61 6e | e.the.Wireless.interface.with.an |
10ef20 | 79 20 63 6f 6e 66 69 67 75 72 65 64 20 62 72 69 64 67 65 20 28 3a 72 65 66 3a 60 62 72 69 64 67 | y.configured.bridge.(:ref:`bridg |
10ef40 | 65 2d 69 6e 74 65 72 66 61 63 65 60 29 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 00 54 6f 20 | e-interface`).on.the.system..To. |
10ef60 | 68 61 6e 64 20 6f 75 74 20 69 6e 64 69 76 69 64 75 61 6c 20 70 72 65 66 69 78 65 73 20 74 6f 20 | hand.out.individual.prefixes.to. |
10ef80 | 79 6f 75 72 20 63 6c 69 65 6e 74 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 | your.clients.the.following.confi |
10efa0 | 67 75 72 61 74 69 6f 6e 20 69 73 20 75 73 65 64 3a 00 54 6f 20 69 6d 70 6f 72 74 20 69 74 20 66 | guration.is.used:.To.import.it.f |
10efc0 | 72 6f 6d 20 74 68 65 20 66 69 6c 65 73 79 73 74 65 6d 20 75 73 65 3a 00 54 6f 20 6b 6e 6f 77 20 | rom.the.filesystem.use:.To.know. |
10efe0 | 6d 6f 72 65 20 61 62 6f 75 74 20 73 63 72 69 70 74 69 6e 67 2c 20 63 68 65 63 6b 20 74 68 65 20 | more.about.scripting,.check.the. |
10f000 | 3a 72 65 66 3a 60 63 6f 6d 6d 61 6e 64 2d 73 63 72 69 70 74 69 6e 67 60 20 73 65 63 74 69 6f 6e | :ref:`command-scripting`.section |
10f020 | 2e 00 54 6f 20 6c 69 73 74 65 6e 20 6f 6e 20 62 6f 74 68 20 60 65 74 68 30 60 20 61 6e 64 20 60 | ..To.listen.on.both.`eth0`.and.` |
10f040 | 65 74 68 31 60 20 6d 44 4e 53 20 70 61 63 6b 65 74 73 20 61 6e 64 20 61 6c 73 6f 20 72 65 70 65 | eth1`.mDNS.packets.and.also.repe |
10f060 | 61 74 20 70 61 63 6b 65 74 73 20 72 65 63 65 69 76 65 64 20 6f 6e 20 60 65 74 68 30 60 20 74 6f | at.packets.received.on.`eth0`.to |
10f080 | 20 60 65 74 68 31 60 20 28 61 6e 64 20 76 69 63 65 2d 76 65 72 73 61 29 20 75 73 65 20 74 68 65 | .`eth1`.(and.vice-versa).use.the |
10f0a0 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 3a 00 54 6f 20 6d 61 6e 69 70 75 6c 61 | .following.commands:.To.manipula |
10f0c0 | 74 65 20 6f 72 20 64 69 73 70 6c 61 79 20 41 52 50 5f 20 74 61 62 6c 65 20 65 6e 74 72 69 65 73 | te.or.display.ARP_.table.entries |
10f0e0 | 2c 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 61 72 65 20 69 6d 70 | ,.the.following.commands.are.imp |
10f100 | 6c 65 6d 65 6e 74 65 64 2e 00 54 6f 20 70 65 72 66 6f 72 6d 20 61 20 67 72 61 63 65 66 75 6c 20 | lemented..To.perform.a.graceful. |
10f120 | 73 68 75 74 64 6f 77 6e 2c 20 74 68 65 20 46 52 52 20 60 60 67 72 61 63 65 66 75 6c 2d 72 65 73 | shutdown,.the.FRR.``graceful-res |
10f140 | 74 61 72 74 20 70 72 65 70 61 72 65 20 69 70 20 6f 73 70 66 60 60 20 45 58 45 43 2d 6c 65 76 65 | tart.prepare.ip.ospf``.EXEC-leve |
10f160 | 6c 20 63 6f 6d 6d 61 6e 64 20 6e 65 65 64 73 20 74 6f 20 62 65 20 69 73 73 75 65 64 20 62 65 66 | l.command.needs.to.be.issued.bef |
10f180 | 6f 72 65 20 72 65 73 74 61 72 74 69 6e 67 20 74 68 65 20 6f 73 70 66 64 20 64 61 65 6d 6f 6e 2e | ore.restarting.the.ospfd.daemon. |
10f1a0 | 00 54 6f 20 72 65 71 75 65 73 74 20 61 20 2f 35 36 20 70 72 65 66 69 78 20 66 72 6f 6d 20 79 6f | .To.request.a./56.prefix.from.yo |
10f1c0 | 75 72 20 49 53 50 20 75 73 65 3a 00 54 6f 20 72 65 73 74 61 72 74 20 74 68 65 20 44 48 43 50 76 | ur.ISP.use:.To.restart.the.DHCPv |
10f1e0 | 36 20 73 65 72 76 65 72 00 54 6f 20 73 65 74 75 70 20 53 4e 41 54 2c 20 77 65 20 6e 65 65 64 20 | 6.server.To.setup.SNAT,.we.need. |
10f200 | 74 6f 20 6b 6e 6f 77 3a 00 54 6f 20 73 65 74 75 70 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 | to.know:.To.setup.a.destination. |
10f220 | 4e 41 54 20 72 75 6c 65 20 77 65 20 6e 65 65 64 20 74 6f 20 67 61 74 68 65 72 3a 00 54 6f 20 75 | NAT.rule.we.need.to.gather:.To.u |
10f240 | 70 64 61 74 65 20 74 68 65 20 66 69 72 6d 77 61 72 65 2c 20 56 79 4f 53 20 61 6c 73 6f 20 73 68 | pdate.the.firmware,.VyOS.also.sh |
10f260 | 69 70 73 20 74 68 65 20 60 71 6d 69 2d 66 69 72 6d 77 61 72 65 2d 75 70 64 61 74 65 60 20 62 69 | ips.the.`qmi-firmware-update`.bi |
10f280 | 6e 61 72 79 2e 20 54 6f 20 75 70 67 72 61 64 65 20 74 68 65 20 66 69 72 6d 77 61 72 65 20 6f 66 | nary..To.upgrade.the.firmware.of |
10f2a0 | 20 61 6e 20 65 2e 67 2e 20 53 69 65 72 72 61 20 57 69 72 65 6c 65 73 73 20 4d 43 37 37 31 30 20 | .an.e.g..Sierra.Wireless.MC7710. |
10f2c0 | 6d 6f 64 75 6c 65 20 74 6f 20 74 68 65 20 66 69 72 6d 77 61 72 65 20 70 72 6f 76 69 64 65 64 20 | module.to.the.firmware.provided. |
10f2e0 | 69 6e 20 74 68 65 20 66 69 6c 65 20 60 60 39 39 39 39 39 39 39 5f 39 39 39 39 39 39 39 5f 39 32 | in.the.file.``9999999_9999999_92 |
10f300 | 30 30 5f 30 33 2e 30 35 2e 31 34 2e 30 30 5f 30 30 5f 67 65 6e 65 72 69 63 5f 30 30 30 2e 30 30 | 00_03.05.14.00_00_generic_000.00 |
10f320 | 30 5f 30 30 31 5f 53 50 4b 47 5f 4d 43 2e 63 77 65 60 60 20 75 73 65 20 74 68 65 20 66 6f 6c 6c | 0_001_SPKG_MC.cwe``.use.the.foll |
10f340 | 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 75 73 65 20 61 20 52 41 44 49 55 53 20 73 | owing.command:.To.use.a.RADIUS.s |
10f360 | 65 72 76 65 72 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 6e 64 20 62 61 6e | erver.for.authentication.and.ban |
10f380 | 64 77 69 64 74 68 2d 73 68 61 70 69 6e 67 2c 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 | dwidth-shaping,.the.following.ex |
10f3a0 | 61 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 2e | ample.configuration.can.be.used. |
10f3c0 | 00 54 6f 20 75 73 65 20 61 20 72 61 64 69 75 73 20 73 65 72 76 65 72 2c 20 79 6f 75 20 6e 65 65 | .To.use.a.radius.server,.you.nee |
10f3e0 | 64 20 74 6f 20 73 77 69 74 63 68 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 6f | d.to.switch.to.authentication.mo |
10f400 | 64 65 20 52 41 44 49 55 53 20 61 6e 64 20 74 68 65 6e 20 63 6f 6e 66 69 67 75 72 65 20 69 74 2e | de.RADIUS.and.then.configure.it. |
10f420 | 00 54 6f 20 75 73 65 20 73 75 63 68 20 61 20 73 65 72 76 69 63 65 2c 20 6f 6e 65 20 6d 75 73 74 | .To.use.such.a.service,.one.must |
10f440 | 20 64 65 66 69 6e 65 20 61 20 6c 6f 67 69 6e 2c 20 70 61 73 73 77 6f 72 64 2c 20 6f 6e 65 20 6f | .define.a.login,.password,.one.o |
10f460 | 72 20 6d 75 6c 74 69 70 6c 65 20 68 6f 73 74 6e 61 6d 65 73 2c 20 70 72 6f 74 6f 63 6f 6c 20 61 | r.multiple.hostnames,.protocol.a |
10f480 | 6e 64 20 73 65 72 76 65 72 2e 00 54 6f 20 75 73 65 20 74 68 65 20 53 61 6c 74 2d 4d 69 6e 69 6f | nd.server..To.use.the.Salt-Minio |
10f4a0 | 6e 2c 20 61 20 72 75 6e 6e 69 6e 67 20 53 61 6c 74 2d 4d 61 73 74 65 72 20 69 73 20 72 65 71 75 | n,.a.running.Salt-Master.is.requ |
10f4c0 | 69 72 65 64 2e 20 59 6f 75 20 63 61 6e 20 66 69 6e 64 20 6d 6f 72 65 20 69 6e 20 74 68 65 20 60 | ired..You.can.find.more.in.the.` |
10f4e0 | 53 61 6c 74 20 50 6f 6a 65 63 74 20 44 6f 63 75 6d 65 6e 74 61 69 6f 6e 20 3c 68 74 74 70 73 3a | Salt.Poject.Documentaion.<https: |
10f500 | 2f 2f 64 6f 63 73 2e 73 61 6c 74 70 72 6f 6a 65 63 74 2e 69 6f 2f 65 6e 2f 6c 61 74 65 73 74 2f | //docs.saltproject.io/en/latest/ |
10f520 | 63 6f 6e 74 65 6e 74 73 2e 68 74 6d 6c 3e 60 5f 00 54 6f 20 75 73 65 20 74 68 69 73 20 66 75 6c | contents.html>`_.To.use.this.ful |
10f540 | 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 65 20 61 73 75 6d 65 20 61 20 70 75 62 6c 69 | l.configuration.we.asume.a.publi |
10f560 | 63 20 61 63 63 65 73 73 69 62 6c 65 20 68 6f 73 74 6e 61 6d 65 2e 00 54 6f 70 6f 6c 6f 67 79 3a | c.accessible.hostname..Topology: |
10f580 | 00 54 6f 70 6f 6c 6f 67 79 3a 20 50 43 34 20 2d 20 4c 65 61 66 32 20 2d 20 53 70 69 6e 65 31 20 | .Topology:.PC4.-.Leaf2.-.Spine1. |
10f5a0 | 2d 20 4c 65 61 66 33 20 2d 20 50 43 35 00 54 6f 75 62 6c 65 73 68 6f 6f 74 69 6e 67 00 54 72 61 | -.Leaf3.-.PC5.Toubleshooting.Tra |
10f5c0 | 63 6b 00 54 72 61 63 6b 20 6f 70 74 69 6f 6e 20 74 6f 20 74 72 61 63 6b 20 6e 6f 6e 20 56 52 52 | ck.Track.option.to.track.non.VRR |
10f5e0 | 50 20 69 6e 74 65 72 66 61 63 65 20 73 74 61 74 65 73 2e 20 56 52 52 50 20 63 68 61 6e 67 65 73 | P.interface.states..VRRP.changes |
10f600 | 20 73 74 61 74 75 73 20 74 6f 20 60 60 46 41 55 4c 54 60 60 20 69 66 20 6f 6e 65 20 6f 66 20 74 | .status.to.``FAULT``.if.one.of.t |
10f620 | 68 65 20 74 72 61 63 6b 20 69 6e 74 65 72 66 61 63 65 73 20 69 6e 20 73 74 61 74 65 20 60 60 64 | he.track.interfaces.in.state.``d |
10f640 | 6f 77 6e 60 60 2e 00 54 72 61 64 69 74 69 6f 6e 61 6c 20 42 47 50 20 64 69 64 20 6e 6f 74 20 68 | own``..Traditional.BGP.did.not.h |
10f660 | 61 76 65 20 74 68 65 20 66 65 61 74 75 72 65 20 74 6f 20 64 65 74 65 63 74 20 61 20 72 65 6d 6f | ave.the.feature.to.detect.a.remo |
10f680 | 74 65 20 70 65 65 72 27 73 20 63 61 70 61 62 69 6c 69 74 69 65 73 2c 20 65 2e 67 2e 20 77 68 65 | te.peer's.capabilities,.e.g..whe |
10f6a0 | 74 68 65 72 20 69 74 20 63 61 6e 20 68 61 6e 64 6c 65 20 70 72 65 66 69 78 20 74 79 70 65 73 20 | ther.it.can.handle.prefix.types. |
10f6c0 | 6f 74 68 65 72 20 74 68 61 6e 20 49 50 76 34 20 75 6e 69 63 61 73 74 20 72 6f 75 74 65 73 2e 20 | other.than.IPv4.unicast.routes.. |
10f6e0 | 54 68 69 73 20 77 61 73 20 61 20 62 69 67 20 70 72 6f 62 6c 65 6d 20 75 73 69 6e 67 20 4d 75 6c | This.was.a.big.problem.using.Mul |
10f700 | 74 69 70 72 6f 74 6f 63 6f 6c 20 45 78 74 65 6e 73 69 6f 6e 20 66 6f 72 20 42 47 50 20 69 6e 20 | tiprotocol.Extension.for.BGP.in. |
10f720 | 61 6e 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6e 65 74 77 6f 72 6b 2e 20 3a 72 66 63 3a 60 32 38 | an.operational.network..:rfc:`28 |
10f740 | 34 32 60 20 61 64 6f 70 74 65 64 20 61 20 66 65 61 74 75 72 65 20 63 61 6c 6c 65 64 20 43 61 70 | 42`.adopted.a.feature.called.Cap |
10f760 | 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 2e 20 2a 62 67 70 64 2a 20 75 73 65 20 | ability.Negotiation..*bgpd*.use. |
10f780 | 74 68 69 73 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 20 74 6f 20 64 | this.Capability.Negotiation.to.d |
10f7a0 | 65 74 65 63 74 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 27 73 20 63 61 70 61 62 69 6c 69 | etect.the.remote.peer's.capabili |
10f7c0 | 74 69 65 73 2e 20 49 66 20 61 20 70 65 65 72 20 69 73 20 6f 6e 6c 79 20 63 6f 6e 66 69 67 75 72 | ties..If.a.peer.is.only.configur |
10f7e0 | 65 64 20 61 73 20 61 6e 20 49 50 76 34 20 75 6e 69 63 61 73 74 20 6e 65 69 67 68 62 6f 72 2c 20 | ed.as.an.IPv4.unicast.neighbor,. |
10f800 | 2a 62 67 70 64 2a 20 64 6f 65 73 20 6e 6f 74 20 73 65 6e 64 20 74 68 65 73 65 20 43 61 70 61 62 | *bgpd*.does.not.send.these.Capab |
10f820 | 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 20 70 61 63 6b 65 74 73 20 28 61 74 20 6c 65 | ility.Negotiation.packets.(at.le |
10f840 | 61 73 74 20 6e 6f 74 20 75 6e 6c 65 73 73 20 6f 74 68 65 72 20 6f 70 74 69 6f 6e 61 6c 20 42 47 | ast.not.unless.other.optional.BG |
10f860 | 50 20 66 65 61 74 75 72 65 73 20 72 65 71 75 69 72 65 20 63 61 70 61 62 69 6c 69 74 79 20 6e 65 | P.features.require.capability.ne |
10f880 | 67 6f 74 69 61 74 69 6f 6e 29 2e 00 54 72 61 64 69 74 69 6f 6e 61 6c 6c 79 20 66 69 72 65 77 61 | gotiation)..Traditionally.firewa |
10f8a0 | 6c 6c 73 20 77 65 65 72 65 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 20 74 68 65 20 63 6f | lls.weere.configured.with.the.co |
10f8c0 | 6e 63 65 70 74 20 6f 66 20 64 61 74 61 20 67 6f 69 6e 67 20 69 6e 20 61 6e 64 20 6f 75 74 20 6f | ncept.of.data.going.in.and.out.o |
10f8e0 | 66 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 72 6f 75 74 65 72 20 6a 75 73 74 20 | f.an.interface..The.router.just. |
10f900 | 6c 69 73 74 65 6e 65 64 20 74 6f 20 74 68 65 20 64 61 74 61 20 66 6c 6f 77 69 6e 67 20 74 68 72 | listened.to.the.data.flowing.thr |
10f920 | 6f 75 67 68 20 61 6e 64 20 72 65 73 70 6f 6e 64 69 6e 67 20 61 73 20 72 65 71 75 69 72 65 64 20 | ough.and.responding.as.required. |
10f940 | 69 66 20 69 74 20 77 61 73 20 64 69 72 65 63 74 65 64 20 61 74 20 74 68 65 20 72 6f 75 74 65 72 | if.it.was.directed.at.the.router |
10f960 | 20 69 74 73 65 6c 66 2e 00 54 72 61 64 69 74 69 6f 6e 61 6c 6c 79 20 68 61 72 64 77 61 72 65 20 | .itself..Traditionally.hardware. |
10f980 | 72 6f 75 74 65 72 73 20 69 6d 70 6c 65 6d 65 6e 74 20 49 50 73 65 63 20 65 78 63 6c 75 73 69 76 | routers.implement.IPsec.exclusiv |
10f9a0 | 65 6c 79 20 64 75 65 20 74 6f 20 72 65 6c 61 74 69 76 65 20 65 61 73 65 20 6f 66 20 69 6d 70 6c | ely.due.to.relative.ease.of.impl |
10f9c0 | 65 6d 65 6e 74 69 6e 67 20 69 74 20 69 6e 20 68 61 72 64 77 61 72 65 20 61 6e 64 20 69 6e 73 75 | ementing.it.in.hardware.and.insu |
10f9e0 | 66 66 69 63 69 65 6e 74 20 43 50 55 20 70 6f 77 65 72 20 66 6f 72 20 64 6f 69 6e 67 20 65 6e 63 | fficient.CPU.power.for.doing.enc |
10fa00 | 72 79 70 74 69 6f 6e 20 69 6e 20 73 6f 66 74 77 61 72 65 2e 20 53 69 6e 63 65 20 56 79 4f 53 20 | ryption.in.software..Since.VyOS. |
10fa20 | 69 73 20 61 20 73 6f 66 74 77 61 72 65 20 72 6f 75 74 65 72 2c 20 74 68 69 73 20 69 73 20 6c 65 | is.a.software.router,.this.is.le |
10fa40 | 73 73 20 6f 66 20 61 20 63 6f 6e 63 65 72 6e 2e 20 4f 70 65 6e 56 50 4e 20 68 61 73 20 62 65 65 | ss.of.a.concern..OpenVPN.has.bee |
10fa60 | 6e 20 77 69 64 65 6c 79 20 75 73 65 64 20 6f 6e 20 55 4e 49 58 20 70 6c 61 74 66 6f 72 6d 20 66 | n.widely.used.on.UNIX.platform.f |
10fa80 | 6f 72 20 61 20 6c 6f 6e 67 20 74 69 6d 65 20 61 6e 64 20 69 73 20 61 20 70 6f 70 75 6c 61 72 20 | or.a.long.time.and.is.a.popular. |
10faa0 | 6f 70 74 69 6f 6e 20 66 6f 72 20 72 65 6d 6f 74 65 20 61 63 63 65 73 73 20 56 50 4e 2c 20 74 68 | option.for.remote.access.VPN,.th |
10fac0 | 6f 75 67 68 20 69 74 27 73 20 61 6c 73 6f 20 63 61 70 61 62 6c 65 20 6f 66 20 73 69 74 65 2d 74 | ough.it's.also.capable.of.site-t |
10fae0 | 6f 2d 73 69 74 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 54 72 61 66 66 69 63 20 46 69 6c 74 | o-site.connections..Traffic.Filt |
10fb00 | 65 72 73 00 54 72 61 66 66 69 63 20 46 69 6c 74 65 72 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 | ers.Traffic.Filters.are.used.to. |
10fb20 | 63 6f 6e 74 72 6f 6c 20 77 68 69 63 68 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 68 61 76 65 20 | control.which.packets.will.have. |
10fb40 | 74 68 65 20 64 65 66 69 6e 65 64 20 4e 41 54 20 72 75 6c 65 73 20 61 70 70 6c 69 65 64 2e 20 46 | the.defined.NAT.rules.applied..F |
10fb60 | 69 76 65 20 64 69 66 66 65 72 65 6e 74 20 66 69 6c 74 65 72 73 20 63 61 6e 20 62 65 20 61 70 70 | ive.different.filters.can.be.app |
10fb80 | 6c 69 65 64 20 77 69 74 68 69 6e 20 61 20 4e 41 54 20 72 75 6c 65 2e 00 54 72 61 66 66 69 63 20 | lied.within.a.NAT.rule..Traffic. |
10fba0 | 50 6f 6c 69 63 79 00 54 72 61 66 66 69 63 20 63 61 6e 6e 6f 74 20 66 6c 6f 77 20 62 65 74 77 65 | Policy.Traffic.cannot.flow.betwe |
10fbc0 | 65 6e 20 7a 6f 6e 65 20 6d 65 6d 62 65 72 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 61 6e 79 | en.zone.member.interface.and.any |
10fbe0 | 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 69 73 20 6e 6f 74 20 61 20 7a 6f 6e 65 20 6d 65 | .interface.that.is.not.a.zone.me |
10fc00 | 6d 62 65 72 2e 00 54 72 61 66 66 69 63 20 66 72 6f 6d 20 6d 75 6c 74 69 63 61 73 74 20 73 6f 75 | mber..Traffic.from.multicast.sou |
10fc20 | 72 63 65 73 20 77 69 6c 6c 20 67 6f 20 74 6f 20 74 68 65 20 52 65 6e 64 65 7a 76 6f 75 73 20 50 | rces.will.go.to.the.Rendezvous.P |
10fc40 | 6f 69 6e 74 2c 20 61 6e 64 20 72 65 63 65 69 76 65 72 73 20 77 69 6c 6c 20 70 75 6c 6c 20 69 74 | oint,.and.receivers.will.pull.it |
10fc60 | 20 66 72 6f 6d 20 61 20 73 68 61 72 65 64 20 74 72 65 65 20 75 73 69 6e 67 20 3a 61 62 62 72 3a | .from.a.shared.tree.using.:abbr: |
10fc80 | 60 49 47 4d 50 20 28 49 6e 74 65 72 6e 65 74 20 47 72 6f 75 70 20 4d 61 6e 61 67 65 6d 65 6e 74 | `IGMP.(Internet.Group.Management |
10fca0 | 20 50 72 6f 74 6f 63 6f 6c 29 60 2e 00 54 72 61 66 66 69 63 20 66 72 6f 6d 20 6d 75 6c 74 69 63 | .Protocol)`..Traffic.from.multic |
10fcc0 | 61 73 74 20 73 6f 75 72 63 65 73 20 77 69 6c 6c 20 67 6f 20 74 6f 20 74 68 65 20 52 65 6e 64 65 | ast.sources.will.go.to.the.Rende |
10fce0 | 7a 76 6f 75 73 20 50 6f 69 6e 74 2c 20 61 6e 64 20 72 65 63 65 69 76 65 72 73 20 77 69 6c 6c 20 | zvous.Point,.and.receivers.will. |
10fd00 | 70 75 6c 6c 20 69 74 20 66 72 6f 6d 20 61 20 73 68 61 72 65 64 20 74 72 65 65 20 75 73 69 6e 67 | pull.it.from.a.shared.tree.using |
10fd20 | 20 49 47 4d 50 20 28 49 6e 74 65 72 6e 65 74 20 47 72 6f 75 70 20 4d 61 6e 61 67 65 6d 65 6e 74 | .IGMP.(Internet.Group.Management |
10fd40 | 20 50 72 6f 74 6f 63 6f 6c 29 2e 00 54 72 61 66 66 69 63 20 66 72 6f 6d 20 6d 75 6c 74 69 63 61 | .Protocol)..Traffic.from.multica |
10fd60 | 73 74 20 73 6f 75 72 63 65 73 20 77 69 6c 6c 20 67 6f 20 74 6f 20 74 68 65 20 52 65 6e 64 65 7a | st.sources.will.go.to.the.Rendez |
10fd80 | 76 6f 75 73 20 50 6f 69 6e 74 2c 20 61 6e 64 20 72 65 63 65 69 76 65 72 73 20 77 69 6c 6c 20 70 | vous.Point,.and.receivers.will.p |
10fda0 | 75 6c 6c 20 69 74 20 66 72 6f 6d 20 61 20 73 68 61 72 65 64 20 74 72 65 65 20 75 73 69 6e 67 20 | ull.it.from.a.shared.tree.using. |
10fdc0 | 4d 4c 44 20 28 4d 75 6c 74 69 63 61 73 74 20 4c 69 73 74 65 6e 65 72 20 44 69 73 63 6f 76 65 72 | MLD.(Multicast.Listener.Discover |
10fde0 | 79 29 2e 00 54 72 61 66 66 69 63 20 6d 75 73 74 20 62 65 20 73 79 6d 6d 65 74 72 69 63 00 54 72 | y)..Traffic.must.be.symmetric.Tr |
10fe00 | 61 66 66 69 63 20 77 68 69 63 68 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 20 72 | affic.which.is.received.by.the.r |
10fe20 | 6f 75 74 65 72 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 6d | outer.on.an.interface.which.is.m |
10fe40 | 65 6d 62 65 72 20 6f 66 20 61 20 62 72 69 64 67 65 20 69 73 20 70 72 6f 63 65 73 73 65 64 20 6f | ember.of.a.bridge.is.processed.o |
10fe60 | 6e 20 74 68 65 20 2a 2a 42 72 69 64 67 65 20 4c 61 79 65 72 2a 2a 2e 20 41 20 73 69 6d 70 6c 69 | n.the.**Bridge.Layer**..A.simpli |
10fe80 | 66 69 65 64 20 70 61 63 6b 65 74 20 66 6c 6f 77 20 64 69 61 67 72 61 6d 20 66 6f 72 20 74 68 69 | fied.packet.flow.diagram.for.thi |
10fea0 | 73 20 6c 61 79 65 72 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 54 72 61 6e 73 69 74 69 6f | s.layer.is.shown.next:.Transitio |
10fec0 | 6e 20 73 63 72 69 70 74 73 00 54 72 61 6e 73 69 74 69 6f 6e 20 73 63 72 69 70 74 73 20 63 61 6e | n.scripts.Transition.scripts.can |
10fee0 | 20 68 65 6c 70 20 79 6f 75 20 69 6d 70 6c 65 6d 65 6e 74 20 76 61 72 69 6f 75 73 20 66 69 78 75 | .help.you.implement.various.fixu |
10ff00 | 70 73 2c 20 73 75 63 68 20 61 73 20 73 74 61 72 74 69 6e 67 20 61 6e 64 20 73 74 6f 70 70 69 6e | ps,.such.as.starting.and.stoppin |
10ff20 | 67 20 73 65 72 76 69 63 65 73 2c 20 6f 72 20 65 76 65 6e 20 6d 6f 64 69 66 79 69 6e 67 20 74 68 | g.services,.or.even.modifying.th |
10ff40 | 65 20 56 79 4f 53 20 63 6f 6e 66 69 67 20 6f 6e 20 56 52 52 50 20 74 72 61 6e 73 69 74 69 6f 6e | e.VyOS.config.on.VRRP.transition |
10ff60 | 2e 20 54 68 69 73 20 73 65 74 75 70 20 77 69 6c 6c 20 6d 61 6b 65 20 74 68 65 20 56 52 52 50 20 | ..This.setup.will.make.the.VRRP. |
10ff80 | 70 72 6f 63 65 73 73 20 65 78 65 63 75 74 65 20 74 68 65 20 60 60 2f 63 6f 6e 66 69 67 2f 73 63 | process.execute.the.``/config/sc |
10ffa0 | 72 69 70 74 73 2f 76 72 72 70 2d 66 61 69 6c 2e 73 68 60 60 20 77 69 74 68 20 61 72 67 75 6d 65 | ripts/vrrp-fail.sh``.with.argume |
10ffc0 | 6e 74 20 60 60 46 6f 6f 60 60 20 77 68 65 6e 20 56 52 52 50 20 66 61 69 6c 73 2c 20 61 6e 64 20 | nt.``Foo``.when.VRRP.fails,.and. |
10ffe0 | 74 68 65 20 60 60 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2f 76 72 72 70 2d 6d 61 73 74 65 | the.``/config/scripts/vrrp-maste |
110000 | 72 2e 73 68 60 60 20 77 68 65 6e 20 74 68 65 20 72 6f 75 74 65 72 20 62 65 63 6f 6d 65 73 20 74 | r.sh``.when.the.router.becomes.t |
110020 | 68 65 20 6d 61 73 74 65 72 3a 00 54 72 61 6e 73 70 61 72 65 6e 74 20 50 72 6f 78 79 00 54 72 6f | he.master:.Transparent.Proxy.Tro |
110040 | 75 62 6c 65 73 68 6f 6f 74 69 6e 67 00 54 75 6e 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 00 54 75 6e | ubleshooting.Tuning.commands.Tun |
110060 | 6e 65 6c 00 54 75 6e 6e 65 6c 20 6b 65 79 73 00 54 75 6e 6e 65 6c 20 70 61 73 73 77 6f 72 64 20 | nel.Tunnel.keys.Tunnel.password. |
110080 | 75 73 65 64 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 74 68 65 20 63 6c 69 65 6e 74 20 | used.to.authenticate.the.client. |
1100a0 | 28 4c 41 43 29 00 54 77 6f 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 76 61 72 69 61 62 6c 65 73 20 | (LAC).Two.environment.variables. |
1100c0 | 61 72 65 20 61 76 61 69 6c 61 62 6c 65 3a 00 54 77 6f 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 | are.available:.Two.interfaces.ar |
1100e0 | 65 20 67 6f 69 6e 67 20 74 6f 20 62 65 20 75 73 65 64 20 69 6e 20 74 68 65 20 66 6c 6f 77 74 61 | e.going.to.be.used.in.the.flowta |
110100 | 62 6c 65 73 3a 20 65 74 68 30 20 61 6e 64 20 65 74 68 31 00 54 77 6f 20 6e 65 77 20 66 69 6c 65 | bles:.eth0.and.eth1.Two.new.file |
110120 | 73 20 60 60 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2f 69 64 5f 72 73 61 5f 72 70 6b 69 60 60 20 61 | s.``/config/auth/id_rsa_rpki``.a |
110140 | 6e 64 20 60 60 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2f 69 64 5f 72 73 61 5f 72 70 6b 69 2e 70 75 | nd.``/config/auth/id_rsa_rpki.pu |
110160 | 62 60 60 20 77 69 6c 6c 20 62 65 20 63 72 65 61 74 65 64 2e 00 54 77 6f 20 72 6f 75 74 65 72 73 | b``.will.be.created..Two.routers |
110180 | 20 63 6f 6e 6e 65 63 74 65 64 20 62 6f 74 68 20 76 69 61 20 65 74 68 31 20 74 68 72 6f 75 67 68 | .connected.both.via.eth1.through |
1101a0 | 20 61 6e 20 75 6e 74 72 75 73 74 65 64 20 73 77 69 74 63 68 00 54 79 70 65 20 6f 66 20 6d 65 74 | .an.untrusted.switch.Type.of.met |
1101c0 | 72 69 63 73 20 67 72 6f 75 70 69 6e 67 20 77 68 65 6e 20 70 75 73 68 20 74 6f 20 41 7a 75 72 65 | rics.grouping.when.push.to.Azure |
1101e0 | 20 44 61 74 61 20 45 78 70 6c 6f 72 65 72 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 60 | .Data.Explorer..The.default.is.` |
110200 | 60 74 61 62 6c 65 2d 70 65 72 2d 6d 65 74 72 69 63 60 60 2e 00 54 79 70 69 63 61 6c 6c 79 2c 20 | `table-per-metric``..Typically,. |
110220 | 61 20 31 2d 74 6f 2d 31 20 4e 41 54 20 72 75 6c 65 20 6f 6d 69 74 73 20 74 68 65 20 64 65 73 74 | a.1-to-1.NAT.rule.omits.the.dest |
110240 | 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 28 61 6c 6c 20 70 6f 72 74 73 29 20 61 6e 64 20 72 65 70 | ination.port.(all.ports).and.rep |
110260 | 6c 61 63 65 73 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 77 69 74 68 20 65 69 74 68 65 72 20 2a | laces.the.protocol.with.either.* |
110280 | 2a 61 6c 6c 2a 2a 20 6f 72 20 2a 2a 69 70 2a 2a 2e 00 55 44 50 20 42 72 6f 61 64 63 61 73 74 20 | *all**.or.**ip**..UDP.Broadcast. |
1102a0 | 52 65 6c 61 79 00 55 44 50 20 6d 6f 64 65 20 77 6f 72 6b 73 20 62 65 74 74 65 72 20 77 69 74 68 | Relay.UDP.mode.works.better.with |
1102c0 | 20 4e 41 54 3a 00 55 44 50 20 70 6f 72 74 20 31 37 30 31 20 66 6f 72 20 49 50 73 65 63 00 55 44 | .NAT:.UDP.port.1701.for.IPsec.UD |
1102e0 | 50 20 70 6f 72 74 20 34 35 30 30 20 28 4e 41 54 2d 54 29 00 55 44 50 20 70 6f 72 74 20 35 30 30 | P.port.4500.(NAT-T).UDP.port.500 |
110300 | 20 28 49 4b 45 29 00 55 52 4c 20 46 69 6c 74 65 72 69 6e 67 20 69 73 20 70 72 6f 76 69 64 65 64 | .(IKE).URL.Filtering.is.provided |
110320 | 20 62 79 20 53 71 75 69 64 47 75 61 72 64 5f 2e 00 55 52 4c 20 66 69 6c 74 65 72 69 6e 67 00 55 | .by.SquidGuard_..URL.filtering.U |
110340 | 52 4c 20 77 69 74 68 20 73 69 67 6e 61 74 75 72 65 20 6f 66 20 6d 61 73 74 65 72 20 66 6f 72 20 | RL.with.signature.of.master.for. |
110360 | 61 75 74 68 20 72 65 70 6c 79 20 76 65 72 69 66 69 63 61 74 69 6f 6e 00 55 53 42 20 74 6f 20 73 | auth.reply.verification.USB.to.s |
110380 | 65 72 69 61 6c 20 63 6f 6e 76 65 72 74 65 72 73 20 77 69 6c 6c 20 68 61 6e 64 6c 65 20 6d 6f 73 | erial.converters.will.handle.mos |
1103a0 | 74 20 6f 66 20 74 68 65 69 72 20 77 6f 72 6b 20 69 6e 20 73 6f 66 74 77 61 72 65 20 73 6f 20 79 | t.of.their.work.in.software.so.y |
1103c0 | 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 63 61 72 65 66 75 6c 6c 20 77 69 74 68 20 74 68 65 20 73 | ou.should.be.carefull.with.the.s |
1103e0 | 65 6c 65 63 74 65 64 20 62 61 75 64 72 61 74 65 20 61 73 20 73 6f 6d 65 20 74 69 6d 65 73 20 74 | elected.baudrate.as.some.times.t |
110400 | 68 65 79 20 63 61 6e 27 74 20 63 6f 70 65 20 77 69 74 68 20 74 68 65 20 65 78 70 65 63 74 65 64 | hey.can't.cope.with.the.expected |
110420 | 20 73 70 65 65 64 2e 00 55 55 43 50 20 73 75 62 73 79 73 74 65 6d 00 55 6e 69 63 61 73 74 00 55 | .speed..UUCP.subsystem.Unicast.U |
110440 | 6e 69 63 61 73 74 20 56 52 52 50 00 55 6e 69 63 61 73 74 20 56 58 4c 41 4e 00 55 6e 69 74 20 6f | nicast.VRRP.Unicast.VXLAN.Unit.o |
110460 | 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 4d 42 2e 00 55 6e 69 74 73 00 55 6e 74 69 | f.this.command.is.MB..Units.Unti |
110480 | 6c 20 56 79 4f 53 20 31 2e 34 2c 20 74 68 65 20 6f 6e 6c 79 20 6f 70 74 69 6f 6e 20 66 6f 72 20 | l.VyOS.1.4,.the.only.option.for. |
1104a0 | 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 4f 70 65 6e 56 50 4e 20 77 69 74 68 6f 75 74 20 50 4b 49 | site-to-site.OpenVPN.without.PKI |
1104c0 | 20 77 61 73 20 74 6f 20 75 73 65 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 73 2e 20 54 68 61 | .was.to.use.pre-shared.keys..Tha |
1104e0 | 74 20 6f 70 74 69 6f 6e 20 69 73 20 73 74 69 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 62 75 74 20 | t.option.is.still.available.but. |
110500 | 69 74 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 72 65 6d | it.is.deprecated.and.will.be.rem |
110520 | 6f 76 65 64 20 69 6e 20 74 68 65 20 66 75 74 75 72 65 2e 20 48 6f 77 65 76 65 72 2c 20 69 66 20 | oved.in.the.future..However,.if. |
110540 | 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 65 74 20 75 70 20 61 20 74 75 6e 6e 65 6c 20 74 6f 20 61 | you.need.to.set.up.a.tunnel.to.a |
110560 | 6e 20 6f 6c 64 65 72 20 56 79 4f 53 20 76 65 72 73 69 6f 6e 20 6f 72 20 61 20 73 79 73 74 65 6d | n.older.VyOS.version.or.a.system |
110580 | 20 77 69 74 68 20 6f 6c 64 65 72 20 4f 70 65 6e 56 50 4e 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f | .with.older.OpenVPN,.you.need.to |
1105a0 | 20 73 74 69 6c 6c 20 6e 65 65 64 20 74 6f 20 6b 6e 6f 77 20 68 6f 77 20 74 6f 20 75 73 65 20 69 | .still.need.to.know.how.to.use.i |
1105c0 | 74 2e 00 55 70 20 74 6f 20 73 65 76 65 6e 20 71 75 65 75 65 73 20 2d 64 65 66 69 6e 65 64 20 61 | t..Up.to.seven.queues.-defined.a |
1105e0 | 73 20 63 6c 61 73 73 65 73 5f 20 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 20 70 72 69 6f 72 69 | s.classes_.with.different.priori |
110600 | 74 69 65 73 2d 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 50 61 63 6b 65 74 73 | ties-.can.be.configured..Packets |
110620 | 20 61 72 65 20 70 6c 61 63 65 64 20 69 6e 74 6f 20 71 75 65 75 65 73 20 62 61 73 65 64 20 6f 6e | .are.placed.into.queues.based.on |
110640 | 20 61 73 73 6f 63 69 61 74 65 64 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 2e 20 50 61 63 6b | .associated.match.criteria..Pack |
110660 | 65 74 73 20 61 72 65 20 74 72 61 6e 73 6d 69 74 74 65 64 20 66 72 6f 6d 20 74 68 65 20 71 75 65 | ets.are.transmitted.from.the.que |
110680 | 75 65 73 20 69 6e 20 70 72 69 6f 72 69 74 79 20 6f 72 64 65 72 2e 20 49 66 20 63 6c 61 73 73 65 | ues.in.priority.order..If.classe |
1106a0 | 73 20 77 69 74 68 20 61 20 68 69 67 68 65 72 20 70 72 69 6f 72 69 74 79 20 61 72 65 20 62 65 69 | s.with.a.higher.priority.are.bei |
1106c0 | 6e 67 20 66 69 6c 6c 65 64 20 77 69 74 68 20 70 61 63 6b 65 74 73 20 63 6f 6e 74 69 6e 75 6f 75 | ng.filled.with.packets.continuou |
1106e0 | 73 6c 79 2c 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 6c 6f 77 65 72 20 70 72 69 6f 72 69 74 79 | sly,.packets.from.lower.priority |
110700 | 20 63 6c 61 73 73 65 73 20 77 69 6c 6c 20 6f 6e 6c 79 20 62 65 20 74 72 61 6e 73 6d 69 74 74 65 | .classes.will.only.be.transmitte |
110720 | 64 20 61 66 74 65 72 20 74 72 61 66 66 69 63 20 76 6f 6c 75 6d 65 20 66 72 6f 6d 20 68 69 67 68 | d.after.traffic.volume.from.high |
110740 | 65 72 20 70 72 69 6f 72 69 74 79 20 63 6c 61 73 73 65 73 20 64 65 63 72 65 61 73 65 73 2e 00 55 | er.priority.classes.decreases..U |
110760 | 70 64 61 74 65 00 55 70 64 61 74 65 20 63 6f 6e 74 61 69 6e 65 72 20 69 6d 61 67 65 00 55 70 64 | pdate.Update.container.image.Upd |
110780 | 61 74 65 20 67 65 6f 69 70 20 64 61 74 61 62 61 73 65 00 55 70 64 61 74 65 73 00 55 70 64 61 74 | ate.geoip.database.Updates.Updat |
1107a0 | 65 73 20 66 72 6f 6d 20 74 68 65 20 52 50 4b 49 20 63 61 63 68 65 20 73 65 72 76 65 72 73 20 61 | es.from.the.RPKI.cache.servers.a |
1107c0 | 72 65 20 64 69 72 65 63 74 6c 79 20 61 70 70 6c 69 65 64 20 61 6e 64 20 70 61 74 68 20 73 65 6c | re.directly.applied.and.path.sel |
1107e0 | 65 63 74 69 6f 6e 20 69 73 20 75 70 64 61 74 65 64 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 20 28 | ection.is.updated.accordingly..( |
110800 | 53 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 65 6e 61 | Soft.reconfiguration.must.be.ena |
110820 | 62 6c 65 64 20 66 6f 72 20 74 68 69 73 20 74 6f 20 77 6f 72 6b 29 2e 00 55 70 6c 6f 61 64 20 62 | bled.for.this.to.work)..Upload.b |
110840 | 61 6e 64 77 69 64 74 68 20 6c 69 6d 69 74 20 69 6e 20 6b 62 69 74 2f 73 20 66 6f 72 20 60 3c 75 | andwidth.limit.in.kbit/s.for.`<u |
110860 | 73 65 72 3e 60 2e 00 55 70 6c 6f 61 64 20 62 61 6e 64 77 69 64 74 68 20 6c 69 6d 69 74 20 69 6e | ser>`..Upload.bandwidth.limit.in |
110880 | 20 6b 62 69 74 2f 73 20 66 6f 72 20 66 6f 72 20 75 73 65 72 20 6f 6e 20 69 6e 74 65 72 66 61 63 | .kbit/s.for.for.user.on.interfac |
1108a0 | 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 55 70 6f 6e 20 72 65 63 65 70 74 69 6f 6e 20 | e.`<interface>`..Upon.reception. |
1108c0 | 6f 66 20 61 6e 20 69 6e 63 6f 6d 69 6e 67 20 70 61 63 6b 65 74 2c 20 77 68 65 6e 20 61 20 72 65 | of.an.incoming.packet,.when.a.re |
1108e0 | 73 70 6f 6e 73 65 20 69 73 20 73 65 6e 74 2c 20 69 74 20 6d 69 67 68 74 20 62 65 20 64 65 73 69 | sponse.is.sent,.it.might.be.desi |
110900 | 72 65 64 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 69 74 20 6c 65 61 76 65 73 20 66 72 6f | red.to.ensure.that.it.leaves.fro |
110920 | 6d 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 20 61 73 20 74 68 65 20 69 6e 62 6f | m.the.same.interface.as.the.inbo |
110940 | 75 6e 64 20 6f 6e 65 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 61 63 68 69 65 76 65 64 20 62 79 | und.one..This.can.be.achieved.by |
110960 | 20 65 6e 61 62 6c 69 6e 67 20 73 74 69 63 6b 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 69 6e 20 | .enabling.sticky.connections.in. |
110980 | 74 68 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 3a 00 55 70 6f 6e 20 73 68 75 74 64 6f 77 | the.load.balancing:.Upon.shutdow |
1109a0 | 6e 2c 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 77 69 6c 6c 20 64 65 70 72 65 63 61 74 65 20 74 68 | n,.this.option.will.deprecate.th |
1109c0 | 65 20 70 72 65 66 69 78 20 62 79 20 61 6e 6e 6f 75 6e 63 69 6e 67 20 69 74 20 69 6e 20 74 68 65 | e.prefix.by.announcing.it.in.the |
1109e0 | 20 73 68 75 74 64 6f 77 6e 20 52 41 00 55 73 65 20 38 30 32 2e 31 31 6e 20 70 72 6f 74 6f 63 6f | .shutdown.RA.Use.802.11n.protoco |
110a00 | 6c 00 55 73 65 20 3a 61 62 62 72 3a 60 44 48 20 28 44 69 66 66 69 65 e2 80 93 48 65 6c 6c 6d 61 | l.Use.:abbr:`DH.(Diffie...Hellma |
110a20 | 6e 29 60 20 70 61 72 61 6d 65 74 65 72 73 20 66 72 6f 6d 20 50 4b 49 20 73 75 62 73 79 73 74 65 | n)`.parameters.from.PKI.subsyste |
110a40 | 6d 2e 20 4d 75 73 74 20 62 65 20 61 74 20 6c 65 61 73 74 20 32 30 34 38 20 62 69 74 73 20 69 6e | m..Must.be.at.least.2048.bits.in |
110a60 | 20 6c 65 6e 67 74 68 2e 00 55 73 65 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 66 72 6f 6d | .length..Use.CA.certificate.from |
110a80 | 20 50 4b 49 20 73 75 62 73 79 73 74 65 6d 00 55 73 65 20 44 79 6e 44 4e 53 20 61 73 20 79 6f 75 | .PKI.subsystem.Use.DynDNS.as.you |
110aa0 | 72 20 70 72 65 66 65 72 72 65 64 20 70 72 6f 76 69 64 65 72 3a 00 55 73 65 20 54 4c 53 20 62 75 | r.preferred.provider:.Use.TLS.bu |
110ac0 | 74 20 73 6b 69 70 20 68 6f 73 74 20 76 61 6c 69 64 61 74 69 6f 6e 00 55 73 65 20 54 4c 53 20 65 | t.skip.host.validation.Use.TLS.e |
110ae0 | 6e 63 72 79 70 74 69 6f 6e 2e 00 55 73 65 20 60 3c 73 75 62 6e 65 74 3e 60 20 61 73 20 74 68 65 | ncryption..Use.`<subnet>`.as.the |
110b00 | 20 49 50 20 70 6f 6f 6c 20 66 6f 72 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6e 67 20 63 6c 69 65 | .IP.pool.for.all.connecting.clie |
110b20 | 6e 74 73 2e 00 55 73 65 20 60 60 73 68 6f 77 20 6c 6f 67 20 7c 20 73 74 72 69 70 2d 70 72 69 76 | nts..Use.``show.log.|.strip-priv |
110b40 | 61 74 65 60 60 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 68 69 64 65 20 70 72 69 76 61 74 | ate``.if.you.want.to.hide.privat |
110b60 | 65 20 64 61 74 61 20 77 68 65 6e 20 73 68 61 72 69 6e 67 20 79 6f 75 72 20 6c 6f 67 73 2e 00 55 | e.data.when.sharing.your.logs..U |
110b80 | 73 65 20 60 64 65 6c 65 74 65 20 73 79 73 74 65 6d 20 63 6f 6e 6e 74 72 61 63 6b 20 6d 6f 64 75 | se.`delete.system.conntrack.modu |
110ba0 | 6c 65 73 60 20 74 6f 20 64 65 61 63 74 69 76 65 20 61 6c 6c 20 6d 6f 64 75 6c 65 73 2e 00 55 73 | les`.to.deactive.all.modules..Us |
110bc0 | 65 20 61 20 70 65 72 73 69 73 74 65 6e 74 20 4c 44 41 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 | e.a.persistent.LDAP.connection.. |
110be0 | 4e 6f 72 6d 61 6c 6c 79 20 74 68 65 20 4c 44 41 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 | Normally.the.LDAP.connection.is. |
110c00 | 6f 6e 6c 79 20 6f 70 65 6e 20 77 68 69 6c 65 20 76 61 6c 69 64 61 74 69 6e 67 20 61 20 75 73 65 | only.open.while.validating.a.use |
110c20 | 72 6e 61 6d 65 20 74 6f 20 70 72 65 73 65 72 76 65 20 72 65 73 6f 75 72 63 65 73 20 61 74 20 74 | rname.to.preserve.resources.at.t |
110c40 | 68 65 20 4c 44 41 50 20 73 65 72 76 65 72 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 63 61 75 73 | he.LDAP.server..This.option.caus |
110c60 | 65 73 20 74 68 65 20 4c 44 41 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 62 65 20 6b 65 70 | es.the.LDAP.connection.to.be.kep |
110c80 | 74 20 6f 70 65 6e 2c 20 61 6c 6c 6f 77 69 6e 67 20 69 74 20 74 6f 20 62 65 20 72 65 75 73 65 64 | t.open,.allowing.it.to.be.reused |
110ca0 | 20 66 6f 72 20 66 75 72 74 68 65 72 20 75 73 65 72 20 76 61 6c 69 64 61 74 69 6f 6e 73 2e 00 55 | .for.further.user.validations..U |
110cc0 | 73 65 20 61 20 73 70 65 63 69 66 69 63 20 61 64 64 72 65 73 73 2d 67 72 6f 75 70 2e 20 50 72 65 | se.a.specific.address-group..Pre |
110ce0 | 70 65 6e 64 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 | pend.character.``!``.for.inverte |
110d00 | 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 2e 00 55 73 65 20 61 20 73 70 65 63 69 | d.matching.criteria..Use.a.speci |
110d20 | 66 69 63 20 64 6f 6d 61 69 6e 2d 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 20 63 68 61 72 61 63 | fic.domain-group..Prepend.charac |
110d40 | 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 | ter.``!``.for.inverted.matching. |
110d60 | 63 72 69 74 65 72 69 61 2e 00 55 73 65 20 61 20 73 70 65 63 69 66 69 63 20 6d 61 63 2d 67 72 6f | criteria..Use.a.specific.mac-gro |
110d80 | 75 70 2e 20 50 72 65 70 65 6e 64 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 | up..Prepend.character.``!``.for. |
110da0 | 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 2e 00 55 73 65 20 | inverted.matching.criteria..Use. |
110dc0 | 61 20 73 70 65 63 69 66 69 63 20 6e 65 74 77 6f 72 6b 2d 67 72 6f 75 70 2e 20 50 72 65 70 65 6e | a.specific.network-group..Prepen |
110de0 | 64 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d | d.character.``!``.for.inverted.m |
110e00 | 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 2e 00 55 73 65 20 61 20 73 70 65 63 69 66 69 63 | atching.criteria..Use.a.specific |
110e20 | 20 70 6f 72 74 2d 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 20 63 68 61 72 61 63 74 65 72 20 60 | .port-group..Prepend.character.` |
110e40 | 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 | `!``.for.inverted.matching.crite |
110e60 | 72 69 61 2e 00 55 73 65 20 61 63 74 69 76 65 2d 61 63 74 69 76 65 20 48 41 20 6d 6f 64 65 2e 00 | ria..Use.active-active.HA.mode.. |
110e80 | 55 73 65 20 61 64 64 72 65 73 73 20 60 6d 61 73 71 75 65 72 61 64 65 60 20 28 74 68 65 20 69 6e | Use.address.`masquerade`.(the.in |
110ea0 | 74 65 72 66 61 63 65 73 20 70 72 69 6d 61 72 79 20 61 64 64 72 65 73 73 29 20 6f 6e 20 72 75 6c | terfaces.primary.address).on.rul |
110ec0 | 65 20 33 30 00 55 73 65 20 61 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 67 65 6e 65 72 61 | e.30.Use.an.automatically.genera |
110ee0 | 74 65 64 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 00 55 73 65 20 | ted.self-signed.certificate.Use. |
110f00 | 61 6e 79 20 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 2c 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e | any.local.address,.configured.on |
110f20 | 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 20 69 66 20 74 68 69 73 20 69 73 20 6e 6f 74 20 73 65 | .any.interface.if.this.is.not.se |
110f40 | 74 2e 00 55 73 65 20 61 75 74 68 20 6b 65 79 20 66 69 6c 65 20 61 74 20 60 60 2f 63 6f 6e 66 69 | t..Use.auth.key.file.at.``/confi |
110f60 | 67 2f 61 75 74 68 2f 6d 79 2e 6b 65 79 60 60 00 55 73 65 20 63 65 72 74 69 66 69 63 61 74 65 20 | g/auth/my.key``.Use.certificate. |
110f80 | 66 72 6f 6d 20 50 4b 49 20 73 75 62 73 79 73 74 65 6d 00 55 73 65 20 63 6f 6e 66 69 67 75 72 65 | from.PKI.subsystem.Use.configure |
110fa0 | 64 20 60 3c 75 72 6c 3e 60 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 79 6f 75 72 20 49 50 20 61 | d.`<url>`.to.determine.your.IP.a |
110fc0 | 64 64 72 65 73 73 2e 20 64 64 63 6c 69 65 6e 74 5f 20 77 69 6c 6c 20 6c 6f 61 64 20 60 3c 75 72 | ddress..ddclient_.will.load.`<ur |
110fe0 | 6c 3e 60 20 61 6e 64 20 74 72 69 65 73 20 74 6f 20 65 78 74 72 61 63 74 20 79 6f 75 72 20 49 50 | l>`.and.tries.to.extract.your.IP |
111000 | 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 72 65 73 70 6f 6e 73 65 2e 00 55 73 65 20 | .address.from.the.response..Use. |
111020 | 64 65 53 45 43 20 28 64 65 64 79 6e 2e 69 6f 29 20 61 73 20 79 6f 75 72 20 70 72 65 66 65 72 72 | deSEC.(dedyn.io).as.your.preferr |
111040 | 65 64 20 70 72 6f 76 69 64 65 72 3a 00 55 73 65 20 69 6e 76 65 72 73 65 2d 6d 61 74 63 68 20 74 | ed.provider:.Use.inverse-match.t |
111060 | 6f 20 6d 61 74 63 68 20 61 6e 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 67 69 76 65 | o.match.anything.except.the.give |
111080 | 6e 20 63 6f 75 6e 74 72 79 2d 63 6f 64 65 73 2e 00 55 73 65 20 6c 6f 63 61 6c 20 73 6f 63 6b 65 | n.country-codes..Use.local.socke |
1110a0 | 74 20 66 6f 72 20 41 50 49 00 55 73 65 20 6c 6f 63 61 6c 20 75 73 65 72 20 60 66 6f 6f 60 20 77 | t.for.API.Use.local.user.`foo`.w |
1110c0 | 69 74 68 20 70 61 73 73 77 6f 72 64 20 60 62 61 72 60 00 55 73 65 20 74 61 62 20 63 6f 6d 70 6c | ith.password.`bar`.Use.tab.compl |
1110e0 | 65 74 69 6f 6e 20 74 6f 20 67 65 74 20 61 20 6c 69 73 74 20 6f 66 20 63 61 74 65 67 6f 72 69 65 | etion.to.get.a.list.of.categorie |
111100 | 73 2e 00 55 73 65 20 74 68 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 | s..Use.the.address.of.the.specif |
111120 | 69 65 64 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 6d 61 63 68 69 | ied.interface.on.the.local.machi |
111140 | 6e 65 20 61 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 | ne.as.the.source.address.of.the. |
111160 | 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 55 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f | connection..Use.the.following.to |
111180 | 70 6f 6c 6f 67 79 20 74 6f 20 62 75 69 6c 64 20 61 20 6e 61 74 36 36 20 62 61 73 65 64 20 69 73 | pology.to.build.a.nat66.based.is |
1111a0 | 6f 6c 61 74 65 64 20 6e 65 74 77 6f 72 6b 20 62 65 74 77 65 65 6e 20 69 6e 74 65 72 6e 61 6c 20 | olated.network.between.internal. |
1111c0 | 61 6e 64 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 73 20 28 64 79 6e 61 6d 69 63 20 70 | and.external.networks.(dynamic.p |
1111e0 | 72 65 66 69 78 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 29 3a 00 55 73 65 20 74 68 65 | refix.is.not.supported):.Use.the |
111200 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 70 6f 6c 6f 67 79 20 74 6f 20 74 72 61 6e 73 6c 61 74 65 | .following.topology.to.translate |
111220 | 20 69 6e 74 65 72 6e 61 6c 20 75 73 65 72 20 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 65 73 20 28 | .internal.user.local.addresses.( |
111240 | 60 60 66 63 3a 3a 2f 37 60 60 29 20 74 6f 20 44 48 43 50 76 36 2d 50 44 20 70 72 6f 76 69 64 65 | ``fc::/7``).to.DHCPv6-PD.provide |
111260 | 64 20 70 72 65 66 69 78 65 73 20 66 72 6f 6d 20 61 6e 20 49 53 50 20 63 6f 6e 6e 65 63 74 65 64 | d.prefixes.from.an.ISP.connected |
111280 | 20 74 6f 20 61 20 56 79 4f 53 20 48 41 20 70 61 69 72 2e 00 55 73 65 20 74 68 65 20 73 70 65 63 | .to.a.VyOS.HA.pair..Use.the.spec |
1112a0 | 69 66 69 65 64 20 61 64 64 72 65 73 73 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 6d 61 63 68 69 | ified.address.on.the.local.machi |
1112c0 | 6e 65 20 61 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 | ne.as.the.source.address.of.the. |
1112e0 | 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 4f 6e 6c 79 20 75 73 65 66 75 6c 20 6f 6e 20 73 79 73 74 65 | connection..Only.useful.on.syste |
111300 | 6d 73 20 77 69 74 68 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 61 64 64 72 65 73 73 2e 00 55 | ms.with.more.than.one.address..U |
111320 | 73 65 20 74 68 65 73 65 20 63 6f 6d 6d 61 6e 64 73 20 69 66 20 79 6f 75 20 77 6f 75 6c 64 20 6c | se.these.commands.if.you.would.l |
111340 | 69 6b 65 20 74 6f 20 73 65 74 20 74 68 65 20 64 69 73 63 6f 76 65 72 79 20 68 65 6c 6c 6f 20 61 | ike.to.set.the.discovery.hello.a |
111360 | 6e 64 20 68 6f 6c 64 20 74 69 6d 65 20 70 61 72 61 6d 65 74 65 72 73 20 66 6f 72 20 74 68 65 20 | nd.hold.time.parameters.for.the. |
111380 | 74 61 72 67 65 74 65 64 20 4c 44 50 20 6e 65 69 67 68 62 6f 72 73 2e 00 55 73 65 20 74 68 65 73 | targeted.LDP.neighbors..Use.thes |
1113a0 | 65 20 63 6f 6d 6d 61 6e 64 73 20 69 66 20 79 6f 75 20 77 6f 75 6c 64 20 6c 69 6b 65 20 74 6f 20 | e.commands.if.you.would.like.to. |
1113c0 | 73 65 74 20 74 68 65 20 64 69 73 63 6f 76 65 72 79 20 68 65 6c 6c 6f 20 61 6e 64 20 68 6f 6c 64 | set.the.discovery.hello.and.hold |
1113e0 | 20 74 69 6d 65 20 70 61 72 61 6d 65 74 65 72 73 2e 00 55 73 65 20 74 68 65 73 65 20 63 6f 6d 6d | .time.parameters..Use.these.comm |
111400 | 61 6e 64 73 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 65 20 65 78 70 6f 72 74 69 6e 67 20 6f 66 | ands.to.control.the.exporting.of |
111420 | 20 66 6f 72 77 61 72 64 69 6e 67 20 65 71 75 69 76 61 6c 65 6e 63 65 20 63 6c 61 73 73 65 73 20 | .forwarding.equivalence.classes. |
111440 | 28 46 45 43 73 29 20 66 6f 72 20 4c 44 50 20 74 6f 20 6e 65 69 67 68 62 6f 72 73 2e 20 54 68 69 | (FECs).for.LDP.to.neighbors..Thi |
111460 | 73 20 77 6f 75 6c 64 20 62 65 20 75 73 65 66 75 6c 20 66 6f 72 20 65 78 61 6d 70 6c 65 20 6f 6e | s.would.be.useful.for.example.on |
111480 | 20 6f 6e 6c 79 20 61 6e 6e 6f 75 6e 63 69 6e 67 20 74 68 65 20 6c 61 62 65 6c 65 64 20 72 6f 75 | .only.announcing.the.labeled.rou |
1114a0 | 74 65 73 20 74 68 61 74 20 61 72 65 20 6e 65 65 64 65 64 20 61 6e 64 20 6e 6f 74 20 6f 6e 65 73 | tes.that.are.needed.and.not.ones |
1114c0 | 20 74 68 61 74 20 61 72 65 20 6e 6f 74 20 6e 65 65 64 65 64 2c 20 73 75 63 68 20 61 73 20 61 6e | .that.are.not.needed,.such.as.an |
1114e0 | 6e 6f 75 6e 63 69 6e 67 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 | nouncing.loopback.interfaces.and |
111500 | 20 6e 6f 20 6f 74 68 65 72 73 2e 00 55 73 65 20 74 68 65 73 65 20 63 6f 6d 6d 61 6e 64 73 20 74 | .no.others..Use.these.commands.t |
111520 | 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 65 20 69 6d 70 6f 72 74 69 6e 67 20 6f 66 20 66 6f 72 77 61 | o.control.the.importing.of.forwa |
111540 | 72 64 69 6e 67 20 65 71 75 69 76 61 6c 65 6e 63 65 20 63 6c 61 73 73 65 73 20 28 46 45 43 73 29 | rding.equivalence.classes.(FECs) |
111560 | 20 66 6f 72 20 4c 44 50 20 66 72 6f 6d 20 6e 65 69 67 68 62 6f 72 73 2e 20 54 68 69 73 20 77 6f | .for.LDP.from.neighbors..This.wo |
111580 | 75 6c 64 20 62 65 20 75 73 65 66 75 6c 20 66 6f 72 20 65 78 61 6d 70 6c 65 20 6f 6e 20 6f 6e 6c | uld.be.useful.for.example.on.onl |
1115a0 | 79 20 61 63 63 65 70 74 69 6e 67 20 74 68 65 20 6c 61 62 65 6c 65 64 20 72 6f 75 74 65 73 20 74 | y.accepting.the.labeled.routes.t |
1115c0 | 68 61 74 20 61 72 65 20 6e 65 65 64 65 64 20 61 6e 64 20 6e 6f 74 20 6f 6e 65 73 20 74 68 61 74 | hat.are.needed.and.not.ones.that |
1115e0 | 20 61 72 65 20 6e 6f 74 20 6e 65 65 64 65 64 2c 20 73 75 63 68 20 61 73 20 61 63 63 65 70 74 69 | .are.not.needed,.such.as.accepti |
111600 | 6e 67 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 72 65 6a 65 63 | ng.loopback.interfaces.and.rejec |
111620 | 74 69 6e 67 20 61 6c 6c 20 6f 74 68 65 72 73 2e 00 55 73 65 20 74 68 69 73 20 50 49 4d 20 63 6f | ting.all.others..Use.this.PIM.co |
111640 | 6d 6d 61 6e 64 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 | mmand.in.the.selected.interface. |
111660 | 74 6f 20 73 65 74 20 74 68 65 20 70 72 69 6f 72 69 74 79 20 28 31 2d 34 32 39 34 39 36 37 32 39 | to.set.the.priority.(1-429496729 |
111680 | 35 29 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 69 6e 66 6c 75 65 6e 63 65 20 69 6e 20 74 68 65 20 | 5).you.want.to.influence.in.the. |
1116a0 | 65 6c 65 63 74 69 6f 6e 20 6f 66 20 61 20 6e 6f 64 65 20 74 6f 20 62 65 63 6f 6d 65 20 74 68 65 | election.of.a.node.to.become.the |
1116c0 | 20 44 65 73 69 67 6e 61 74 65 64 20 52 6f 75 74 65 72 20 66 6f 72 20 61 20 4c 41 4e 20 73 65 67 | .Designated.Router.for.a.LAN.seg |
1116e0 | 6d 65 6e 74 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 70 72 69 6f 72 69 74 79 20 69 73 20 31 2c | ment..The.default.priority.is.1, |
111700 | 20 73 65 74 20 61 20 20 68 69 67 68 65 72 20 76 61 6c 75 65 20 74 6f 20 67 69 76 65 20 74 68 65 | .set.a..higher.value.to.give.the |
111720 | 20 72 6f 75 74 65 72 20 6d 6f 72 65 20 70 72 65 66 65 72 65 6e 63 65 20 69 6e 20 74 68 65 20 44 | .router.more.preference.in.the.D |
111740 | 52 20 65 6c 65 63 74 69 6f 6e 20 70 72 6f 63 65 73 73 2e 00 55 73 65 20 74 68 69 73 20 50 49 4d | R.election.process..Use.this.PIM |
111760 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6d 6f 64 69 66 79 20 74 68 65 20 74 69 6d 65 20 6f 75 74 20 | .command.to.modify.the.time.out. |
111780 | 76 61 6c 75 65 20 28 33 31 2d 36 30 30 30 30 20 73 65 63 6f 6e 64 73 29 20 66 6f 72 20 61 6e 20 | value.(31-60000.seconds).for.an. |
1117a0 | 60 28 53 2c 47 29 20 3c 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 | `(S,G).<https://tools.ietf.org/h |
1117c0 | 74 6d 6c 2f 72 66 63 37 37 36 31 23 73 65 63 74 69 6f 6e 2d 34 2e 31 3e 60 5f 20 66 6c 6f 77 2e | tml/rfc7761#section-4.1>`_.flow. |
1117e0 | 20 33 31 20 73 65 63 6f 6e 64 73 20 69 73 20 63 68 6f 73 65 6e 20 66 6f 72 20 61 20 6c 6f 77 65 | .31.seconds.is.chosen.for.a.lowe |
111800 | 72 20 62 6f 75 6e 64 20 61 73 20 73 6f 6d 65 20 68 61 72 64 77 61 72 65 20 70 6c 61 74 66 6f 72 | r.bound.as.some.hardware.platfor |
111820 | 6d 73 20 63 61 6e 6e 6f 74 20 73 65 65 20 64 61 74 61 20 66 6c 6f 77 69 6e 67 20 69 6e 20 62 65 | ms.cannot.see.data.flowing.in.be |
111840 | 74 74 65 72 20 74 68 61 6e 20 33 30 20 73 65 63 6f 6e 64 73 20 63 68 75 6e 6b 73 2e 00 55 73 65 | tter.than.30.seconds.chunks..Use |
111860 | 20 74 68 69 73 20 63 6f 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 36 20 61 64 64 | .this.comand.to.set.the.IPv6.add |
111880 | 72 65 73 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 63 68 20 61 20 50 50 50 6f 45 20 63 6c 69 | ress.pool.from.which.a.PPPoE.cli |
1118a0 | 65 6e 74 20 77 69 6c 6c 20 67 65 74 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 6f 66 20 79 | ent.will.get.an.IPv6.prefix.of.y |
1118c0 | 6f 75 72 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 | our.defined.length.(mask).to.ter |
1118e0 | 6d 69 6e 61 74 65 20 74 68 65 20 50 50 50 6f 45 20 65 6e 64 70 6f 69 6e 74 20 61 74 20 74 68 65 | minate.the.PPPoE.endpoint.at.the |
111900 | 69 72 20 73 69 64 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 6e 20 62 65 20 | ir.side..The.mask.length.can.be. |
111920 | 73 65 74 20 66 72 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 | set.from.48.to.128.bit.long,.the |
111940 | 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 34 2e 00 55 73 65 20 74 68 69 73 20 63 | .default.value.is.64..Use.this.c |
111960 | 6f 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 6f | omand.to.set.the.IPv6.address.po |
111980 | 6f 6c 20 66 72 6f 6d 20 77 68 69 63 68 20 61 6e 20 49 50 6f 45 20 63 6c 69 65 6e 74 20 77 69 6c | ol.from.which.an.IPoE.client.wil |
1119a0 | 6c 20 67 65 74 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 20 64 65 66 | l.get.an.IPv6.prefix.of.your.def |
1119c0 | 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 | ined.length.(mask).to.terminate. |
1119e0 | 74 68 65 20 49 50 6f 45 20 65 6e 64 70 6f 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 69 64 65 2e | the.IPoE.endpoint.at.their.side. |
111a00 | 20 54 68 65 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d | .The.mask.length.can.be.set.from |
111a20 | 20 34 38 20 74 6f 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 61 75 6c 74 | .48.to.128.bit.long,.the.default |
111a40 | 20 76 61 6c 75 65 20 69 73 20 36 34 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e 64 20 74 6f | .value.is.64..Use.this.comand.to |
111a60 | 20 73 65 74 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 | .set.the.IPv6.address.pool.from. |
111a80 | 77 68 69 63 68 20 61 6e 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 74 20 61 | which.an.PPPoE.client.will.get.a |
111aa0 | 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 20 6c 65 | n.IPv6.prefix.of.your.defined.le |
111ac0 | 6e 67 74 68 20 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 50 50 50 | ngth.(mask).to.terminate.the.PPP |
111ae0 | 6f 45 20 65 6e 64 70 6f 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 69 64 65 2e 20 54 68 65 20 6d | oE.endpoint.at.their.side..The.m |
111b00 | 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 34 38 20 74 6f | ask.length.can.be.set.from.48.to |
111b20 | 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 | .128.bit.long,.the.default.value |
111b40 | 20 69 73 20 36 34 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 | .is.64..Use.this.comand.to.set.t |
111b60 | 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 63 68 20 | he.IPv6.address.pool.from.which. |
111b80 | 61 6e 20 50 50 54 50 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 74 20 61 6e 20 49 50 76 36 20 | an.PPTP.client.will.get.an.IPv6. |
111ba0 | 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 6d | prefix.of.your.defined.length.(m |
111bc0 | 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 50 50 54 50 20 65 6e 64 70 6f | ask).to.terminate.the.PPTP.endpo |
111be0 | 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 69 64 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c 65 6e 67 | int.at.their.side..The.mask.leng |
111c00 | 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 62 69 74 | th.can.be.set.from.48.to.128.bit |
111c20 | 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 34 2e 00 | .long,.the.default.value.is.64.. |
111c40 | 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 36 20 | Use.this.comand.to.set.the.IPv6. |
111c60 | 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 63 68 20 61 6e 20 53 53 54 50 20 | address.pool.from.which.an.SSTP. |
111c80 | 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 74 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 6f | client.will.get.an.IPv6.prefix.o |
111ca0 | 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b 29 20 74 6f 20 | f.your.defined.length.(mask).to. |
111cc0 | 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 53 53 54 50 20 65 6e 64 70 6f 69 6e 74 20 61 74 20 74 | terminate.the.SSTP.endpoint.at.t |
111ce0 | 68 65 69 72 20 73 69 64 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 6e 20 62 | heir.side..The.mask.length.can.b |
111d00 | 65 20 73 65 74 20 66 72 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 2c 20 74 | e.set.from.48.to.128.bit.long,.t |
111d20 | 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 34 2e 00 55 73 65 20 74 68 69 73 | he.default.value.is.64..Use.this |
111d40 | 20 63 6f 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 | .comand.to.set.the.IPv6.address. |
111d60 | 70 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 63 68 20 61 6e 20 6c 32 74 70 20 63 6c 69 65 6e 74 20 77 | pool.from.which.an.l2tp.client.w |
111d80 | 69 6c 6c 20 67 65 74 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 20 64 | ill.get.an.IPv6.prefix.of.your.d |
111da0 | 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e 61 74 | efined.length.(mask).to.terminat |
111dc0 | 65 20 74 68 65 20 6c 32 74 70 20 65 6e 64 70 6f 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 69 64 | e.the.l2tp.endpoint.at.their.sid |
111de0 | 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 | e..The.mask.length.can.be.set.fr |
111e00 | 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 61 75 | om.48.to.128.bit.long,.the.defau |
111e20 | 6c 74 20 76 61 6c 75 65 20 69 73 20 36 34 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | lt.value.is.64..Use.this.command |
111e40 | 20 66 6f 72 20 65 76 65 72 79 20 70 6f 6f 6c 20 6f 66 20 63 6c 69 65 6e 74 20 49 50 20 61 64 64 | .for.every.pool.of.client.IP.add |
111e60 | 72 65 73 73 65 73 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 65 66 69 6e 65 2e 20 54 68 65 20 61 | resses.you.want.to.define..The.a |
111e80 | 64 64 72 65 73 73 65 73 20 6f 66 20 74 68 69 73 20 70 6f 6f 6c 20 77 69 6c 6c 20 62 65 20 67 69 | ddresses.of.this.pool.will.be.gi |
111ea0 | 76 65 6e 20 74 6f 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 59 6f 75 20 6d 75 73 74 20 75 | ven.to.PPPoE.clients..You.must.u |
111ec0 | 73 65 20 43 49 44 52 20 6e 6f 74 61 74 69 6f 6e 20 61 6e 64 20 69 74 20 6d 75 73 74 20 62 65 20 | se.CIDR.notation.and.it.must.be. |
111ee0 | 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f | within.a./24.subnet..Use.this.co |
111f00 | 6d 6d 61 6e 64 20 66 6f 72 20 65 76 65 72 79 20 70 6f 6f 6c 20 6f 66 20 63 6c 69 65 6e 74 20 49 | mmand.for.every.pool.of.client.I |
111f20 | 50 20 61 64 64 72 65 73 73 65 73 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 65 66 69 6e 65 2e 20 | P.addresses.you.want.to.define.. |
111f40 | 54 68 65 20 61 64 64 72 65 73 73 65 73 20 6f 66 20 74 68 69 73 20 70 6f 6f 6c 20 77 69 6c 6c 20 | The.addresses.of.this.pool.will. |
111f60 | 62 65 20 67 69 76 65 6e 20 74 6f 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 59 6f 75 20 6d | be.given.to.PPPoE.clients..You.m |
111f80 | 75 73 74 20 75 73 65 20 43 49 44 52 20 6e 6f 74 61 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 | ust.use.CIDR.notation..Use.this. |
111fa0 | 63 6f 6d 6d 61 6e 64 20 69 66 20 79 6f 75 20 77 6f 75 6c 64 20 6c 69 6b 65 20 66 6f 72 20 74 68 | command.if.you.would.like.for.th |
111fc0 | 65 20 72 6f 75 74 65 72 20 74 6f 20 61 64 76 65 72 74 69 73 65 20 46 45 43 73 20 77 69 74 68 20 | e.router.to.advertise.FECs.with. |
111fe0 | 61 20 6c 61 62 65 6c 20 6f 66 20 30 20 66 6f 72 20 65 78 70 6c 69 63 69 74 20 6e 75 6c 6c 20 6f | a.label.of.0.for.explicit.null.o |
112000 | 70 65 72 61 74 69 6f 6e 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 66 20 79 | perations..Use.this.command.if.y |
112020 | 6f 75 20 77 6f 75 6c 64 20 6c 69 6b 65 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 65 20 6c 6f 63 | ou.would.like.to.control.the.loc |
112040 | 61 6c 20 46 45 43 20 61 6c 6c 6f 63 61 74 69 6f 6e 73 20 66 6f 72 20 4c 44 50 2e 20 41 20 67 6f | al.FEC.allocations.for.LDP..A.go |
112060 | 6f 64 20 65 78 61 6d 70 6c 65 20 77 6f 75 6c 64 20 62 65 20 66 6f 72 20 79 6f 75 72 20 6c 6f 63 | od.example.would.be.for.your.loc |
112080 | 61 6c 20 72 6f 75 74 65 72 20 74 6f 20 6e 6f 74 20 61 6c 6c 6f 63 61 74 65 20 61 20 6c 61 62 65 | al.router.to.not.allocate.a.labe |
1120a0 | 6c 20 66 6f 72 20 65 76 65 72 79 74 68 69 6e 67 2e 20 4a 75 73 74 20 61 20 6c 61 62 65 6c 20 66 | l.for.everything..Just.a.label.f |
1120c0 | 6f 72 20 77 68 61 74 20 69 74 27 73 20 75 73 65 66 75 6c 2e 20 41 20 67 6f 6f 64 20 65 78 61 6d | or.what.it's.useful..A.good.exam |
1120e0 | 70 6c 65 20 77 6f 75 6c 64 20 62 65 20 6a 75 73 74 20 61 20 6c 6f 6f 70 62 61 63 6b 20 6c 61 62 | ple.would.be.just.a.loopback.lab |
112100 | 65 6c 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 66 20 79 6f 75 20 77 6f 75 6c | el..Use.this.command.if.you.woul |
112120 | 64 20 6c 69 6b 65 20 74 6f 20 73 65 74 20 74 68 65 20 54 43 50 20 73 65 73 73 69 6f 6e 20 68 6f | d.like.to.set.the.TCP.session.ho |
112140 | 6c 64 20 74 69 6d 65 20 69 6e 74 65 72 76 61 6c 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | ld.time.intervals..Use.this.comm |
112160 | 61 6e 64 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 | and.to.allow.the.selected.interf |
112180 | 61 63 65 20 74 6f 20 6a 6f 69 6e 20 61 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 64 65 | ace.to.join.a.multicast.group.de |
1121a0 | 66 69 6e 69 6e 67 20 74 68 65 20 6d 75 6c 74 69 63 61 73 74 20 61 64 64 72 65 73 73 20 79 6f 75 | fining.the.multicast.address.you |
1121c0 | 20 77 61 6e 74 20 74 6f 20 6a 6f 69 6e 20 61 6e 64 20 74 68 65 20 73 6f 75 72 63 65 20 49 50 20 | .want.to.join.and.the.source.IP. |
1121e0 | 61 64 64 72 65 73 73 20 74 6f 6f 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | address.too..Use.this.command.to |
112200 | 20 61 6c 6c 6f 77 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 6f | .allow.the.selected.interface.to |
112220 | 20 6a 6f 69 6e 20 61 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 2e 00 55 73 65 20 74 68 69 | .join.a.multicast.group..Use.thi |
112240 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 | s.command.to.allow.the.selected. |
112260 | 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6a 6f 69 6e 20 61 20 73 6f 75 72 63 65 2d 73 70 65 63 69 | interface.to.join.a.source-speci |
112280 | 66 69 63 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 2e 00 55 73 65 20 74 68 69 73 20 63 6f | fic.multicast.group..Use.this.co |
1122a0 | 6d 6d 61 6e 64 20 74 6f 20 63 68 65 63 6b 20 74 68 65 20 74 75 6e 6e 65 6c 20 73 74 61 74 75 73 | mmand.to.check.the.tunnel.status |
1122c0 | 20 66 6f 72 20 4f 70 65 6e 56 50 4e 20 63 6c 69 65 6e 74 20 69 6e 74 65 72 66 61 63 65 73 2e 00 | .for.OpenVPN.client.interfaces.. |
1122e0 | 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 68 65 63 6b 20 74 68 65 20 74 75 | Use.this.command.to.check.the.tu |
112300 | 6e 6e 65 6c 20 73 74 61 74 75 73 20 66 6f 72 20 4f 70 65 6e 56 50 4e 20 73 65 72 76 65 72 20 69 | nnel.status.for.OpenVPN.server.i |
112320 | 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 | nterfaces..Use.this.command.to.c |
112340 | 68 65 63 6b 20 74 68 65 20 74 75 6e 6e 65 6c 20 73 74 61 74 75 73 20 66 6f 72 20 4f 70 65 6e 56 | heck.the.tunnel.status.for.OpenV |
112360 | 50 4e 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 | PN.site-to-site.interfaces..Use. |
112380 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6c 65 61 72 20 42 6f 72 64 65 72 20 47 61 74 | this.command.to.clear.Border.Gat |
1123a0 | 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 20 73 74 61 74 69 73 74 69 63 73 20 6f 72 20 73 74 61 74 | eway.Protocol.statistics.or.stat |
1123c0 | 75 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 | us..Use.this.command.to.configur |
1123e0 | 65 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 52 46 43 33 | e.DHCPv6.Prefix.Delegation.(RFC3 |
112400 | 36 33 33 29 20 6f 6e 20 49 50 6f 45 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 | 633).on.IPoE..You.will.have.to.s |
112420 | 65 74 20 79 6f 75 72 20 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c 65 6e 67 74 68 | et.your.IPv6.pool.and.the.length |
112440 | 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 46 72 6f 6d 20 | .of.the.delegation.prefix..From. |
112460 | 74 68 65 20 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 69 6c 6c 20 62 | the.defined.IPv6.pool.you.will.b |
112480 | 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 68 65 20 64 65 | e.handing.out.networks.of.the.de |
1124a0 | 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 65 66 69 78 29 | fined.length.(delegation-prefix) |
1124c0 | 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 | ..The.length.of.the.delegation.p |
1124e0 | 72 65 66 69 78 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 33 32 20 74 6f 20 36 34 20 62 | refix.can.be.set.from.32.to.64.b |
112500 | 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e | it.long..Use.this.command.to.con |
112520 | 66 69 67 75 72 65 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 | figure.DHCPv6.Prefix.Delegation. |
112540 | 28 52 46 43 33 36 33 33 29 20 6f 6e 20 50 50 50 6f 45 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 | (RFC3633).on.PPPoE..You.will.hav |
112560 | 65 20 74 6f 20 73 65 74 20 79 6f 75 72 20 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 20 74 68 65 20 | e.to.set.your.IPv6.pool.and.the. |
112580 | 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 2e | length.of.the.delegation.prefix. |
1125a0 | 20 46 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 79 6f 75 20 | .From.the.defined.IPv6.pool.you. |
1125c0 | 77 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b 73 20 6f 66 20 | will.be.handing.out.networks.of. |
1125e0 | 74 68 65 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 64 65 6c 65 67 61 74 69 6f 6e 2d 70 | the.defined.length.(delegation-p |
112600 | 72 65 66 69 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 | refix)..The.length.of.the.delega |
112620 | 74 69 6f 6e 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 33 32 20 74 | tion.prefix.can.be.set.from.32.t |
112640 | 6f 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | o.64.bit.long..Use.this.command. |
112660 | 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 | to.configure.DHCPv6.Prefix.Deleg |
112680 | 61 74 69 6f 6e 20 28 52 46 43 33 36 33 33 29 20 6f 6e 20 50 50 54 50 2e 20 59 6f 75 20 77 69 6c | ation.(RFC3633).on.PPTP..You.wil |
1126a0 | 6c 20 68 61 76 65 20 74 6f 20 73 65 74 20 79 6f 75 72 20 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 | l.have.to.set.your.IPv6.pool.and |
1126c0 | 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 | .the.length.of.the.delegation.pr |
1126e0 | 65 66 69 78 2e 20 46 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c | efix..From.the.defined.IPv6.pool |
112700 | 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b | .you.will.be.handing.out.network |
112720 | 73 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 64 65 6c 65 67 61 74 | s.of.the.defined.length.(delegat |
112740 | 69 6f 6e 2d 70 72 65 66 69 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 | ion-prefix)..The.length.of.the.d |
112760 | 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d | elegation.prefix.can.be.set.from |
112780 | 20 33 32 20 74 6f 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | .32.to.64.bit.long..Use.this.com |
1127a0 | 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 | mand.to.configure.DHCPv6.Prefix. |
1127c0 | 44 65 6c 65 67 61 74 69 6f 6e 20 28 52 46 43 33 36 33 33 29 20 6f 6e 20 53 53 54 50 2e 20 59 6f | Delegation.(RFC3633).on.SSTP..Yo |
1127e0 | 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 65 74 20 79 6f 75 72 20 49 50 76 36 20 70 6f 6f | u.will.have.to.set.your.IPv6.poo |
112800 | 6c 20 61 6e 64 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 | l.and.the.length.of.the.delegati |
112820 | 6f 6e 20 70 72 65 66 69 78 2e 20 46 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 49 50 76 36 | on.prefix..From.the.defined.IPv6 |
112840 | 20 70 6f 6f 6c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 | .pool.you.will.be.handing.out.ne |
112860 | 74 77 6f 72 6b 73 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 64 65 | tworks.of.the.defined.length.(de |
112880 | 6c 65 67 61 74 69 6f 6e 2d 70 72 65 66 69 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 | legation-prefix)..The.length.of. |
1128a0 | 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 73 65 74 | the.delegation.prefix.can.be.set |
1128c0 | 20 66 72 6f 6d 20 33 32 20 74 6f 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 | .from.32.to.64.bit.long..Use.thi |
1128e0 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 48 43 50 76 36 20 50 72 | s.command.to.configure.DHCPv6.Pr |
112900 | 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 52 46 43 33 36 33 33 29 20 6f 6e 20 6c 32 74 | efix.Delegation.(RFC3633).on.l2t |
112920 | 70 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 65 74 20 79 6f 75 72 20 49 50 76 | p..You.will.have.to.set.your.IPv |
112940 | 36 20 70 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c | 6.pool.and.the.length.of.the.del |
112960 | 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 46 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 | egation.prefix..From.the.defined |
112980 | 20 49 50 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e 67 20 6f | .IPv6.pool.you.will.be.handing.o |
1129a0 | 75 74 20 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 | ut.networks.of.the.defined.lengt |
1129c0 | 68 20 28 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 65 66 69 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 | h.(delegation-prefix)..The.lengt |
1129e0 | 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 20 63 61 6e 20 62 | h.of.the.delegation.prefix.can.b |
112a00 | 65 20 73 65 74 20 66 72 6f 6d 20 33 32 20 74 6f 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 | e.set.from.32.to.64.bit.long..Us |
112a20 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 48 43 50 | e.this.command.to.configure.DHCP |
112a40 | 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 52 46 43 33 36 33 33 29 2e 20 | v6.Prefix.Delegation.(RFC3633).. |
112a60 | 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 65 74 20 79 6f 75 72 20 49 50 76 36 20 70 | You.will.have.to.set.your.IPv6.p |
112a80 | 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 | ool.and.the.length.of.the.delega |
112aa0 | 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 46 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 49 50 | tion.prefix..From.the.defined.IP |
112ac0 | 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 | v6.pool.you.will.be.handing.out. |
112ae0 | 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 | networks.of.the.defined.length.( |
112b00 | 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 65 66 69 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 6f | delegation-prefix)..The.length.o |
112b20 | 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 73 | f.the.delegation.prefix.can.be.s |
112b40 | 65 74 20 66 72 6f 6d 20 33 32 20 74 6f 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 | et.from.32.to.64.bit.long..Use.t |
112b60 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 79 6e 61 6d 69 63 | his.command.to.configure.Dynamic |
112b80 | 20 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 45 78 74 65 6e 73 69 6f 6e 73 20 74 6f 20 52 41 44 | .Authorization.Extensions.to.RAD |
112ba0 | 49 55 53 20 73 6f 20 74 68 61 74 20 79 6f 75 20 63 61 6e 20 72 65 6d 6f 74 65 6c 79 20 64 69 73 | IUS.so.that.you.can.remotely.dis |
112bc0 | 63 6f 6e 6e 65 63 74 20 73 65 73 73 69 6f 6e 73 20 61 6e 64 20 63 68 61 6e 67 65 20 73 6f 6d 65 | connect.sessions.and.change.some |
112be0 | 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 2e 00 55 73 65 20 | .authentication.parameters..Use. |
112c00 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 22 62 6c 61 | this.command.to.configure.a."bla |
112c20 | 63 6b 2d 68 6f 6c 65 22 20 72 6f 75 74 65 20 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 2e 20 41 20 | ck-hole".route.on.the.router..A. |
112c40 | 62 6c 61 63 6b 2d 68 6f 6c 65 20 72 6f 75 74 65 20 69 73 20 61 20 72 6f 75 74 65 20 66 6f 72 20 | black-hole.route.is.a.route.for. |
112c60 | 77 68 69 63 68 20 74 68 65 20 73 79 73 74 65 6d 20 73 69 6c 65 6e 74 6c 79 20 64 69 73 63 61 72 | which.the.system.silently.discar |
112c80 | 64 20 70 61 63 6b 65 74 73 20 74 68 61 74 20 61 72 65 20 6d 61 74 63 68 65 64 2e 20 54 68 69 73 | d.packets.that.are.matched..This |
112ca0 | 20 70 72 65 76 65 6e 74 73 20 6e 65 74 77 6f 72 6b 73 20 6c 65 61 6b 69 6e 67 20 6f 75 74 20 70 | .prevents.networks.leaking.out.p |
112cc0 | 75 62 6c 69 63 20 69 6e 74 65 72 66 61 63 65 73 2c 20 62 75 74 20 69 74 20 64 6f 65 73 20 6e 6f | ublic.interfaces,.but.it.does.no |
112ce0 | 74 20 70 72 65 76 65 6e 74 20 74 68 65 6d 20 66 72 6f 6d 20 62 65 69 6e 67 20 75 73 65 64 20 61 | t.prevent.them.from.being.used.a |
112d00 | 73 20 61 20 6d 6f 72 65 20 73 70 65 63 69 66 69 63 20 72 6f 75 74 65 20 69 6e 73 69 64 65 20 79 | s.a.more.specific.route.inside.y |
112d20 | 6f 75 72 20 6e 65 74 77 6f 72 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | our.network..Use.this.command.to |
112d40 | 20 63 6f 6e 66 69 67 75 72 65 20 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f | .configure.a.Network.Emulator.po |
112d60 | 6c 69 63 79 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 66 | licy.defining.its.name.and.the.f |
112d80 | 69 78 65 64 20 61 6d 6f 75 6e 74 20 6f 66 20 74 69 6d 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 | ixed.amount.of.time.you.want.to. |
112da0 | 61 64 64 20 74 6f 20 61 6c 6c 20 70 61 63 6b 65 74 20 67 6f 69 6e 67 20 6f 75 74 20 6f 66 20 74 | add.to.all.packet.going.out.of.t |
112dc0 | 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 6c 61 74 65 6e 63 79 20 77 69 6c 6c 20 62 | he.interface..The.latency.will.b |
112de0 | 65 20 61 64 64 65 64 20 74 68 72 6f 75 67 68 20 74 68 65 20 54 6f 6b 65 6e 20 42 75 63 6b 65 74 | e.added.through.the.Token.Bucket |
112e00 | 20 46 69 6c 74 65 72 20 71 64 69 73 63 2e 20 49 74 20 77 69 6c 6c 20 6f 6e 6c 79 20 74 61 6b 65 | .Filter.qdisc..It.will.only.take |
112e20 | 20 65 66 66 65 63 74 20 69 66 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 | .effect.if.you.have.configured.i |
112e40 | 74 73 20 62 61 6e 64 77 69 64 74 68 20 74 6f 6f 2e 20 59 6f 75 20 63 61 6e 20 75 73 65 20 73 65 | ts.bandwidth.too..You.can.use.se |
112e60 | 63 73 2c 20 6d 73 20 61 6e 64 20 75 73 2e 20 44 65 66 61 75 6c 74 3a 20 35 30 6d 73 2e 00 55 73 | cs,.ms.and.us..Default:.50ms..Us |
112e80 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 50 72 | e.this.command.to.configure.a.Pr |
112ea0 | 69 6f 72 69 74 79 20 51 75 65 75 65 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d | iority.Queue.policy,.set.its.nam |
112ec0 | 65 2c 20 73 65 74 20 61 20 63 6c 61 73 73 20 77 69 74 68 20 61 20 70 72 69 6f 72 69 74 79 20 66 | e,.set.a.class.with.a.priority.f |
112ee0 | 72 6f 6d 20 31 20 74 6f 20 37 20 61 6e 64 20 64 65 66 69 6e 65 20 61 20 68 61 72 64 20 6c 69 6d | rom.1.to.7.and.define.a.hard.lim |
112f00 | 69 74 20 6f 6e 20 74 68 65 20 72 65 61 6c 20 71 75 65 75 65 20 73 69 7a 65 2e 20 57 68 65 6e 20 | it.on.the.real.queue.size..When. |
112f20 | 74 68 69 73 20 6c 69 6d 69 74 20 69 73 20 72 65 61 63 68 65 64 2c 20 6e 65 77 20 70 61 63 6b 65 | this.limit.is.reached,.new.packe |
112f40 | 74 73 20 61 72 65 20 64 72 6f 70 70 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | ts.are.dropped..Use.this.command |
112f60 | 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f | .to.configure.a.Random-Detect.po |
112f80 | 6c 69 63 79 20 61 6e 64 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 65 6e 20 6e 61 6d 65 | licy.and.set.its.name,.then.name |
112fa0 | 20 74 68 65 20 49 50 20 50 72 65 63 65 64 65 6e 63 65 20 66 6f 72 20 74 68 65 20 76 69 72 74 75 | .the.IP.Precedence.for.the.virtu |
112fc0 | 61 6c 20 71 75 65 75 65 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 64 | al.queue.you.are.configuring.and |
112fe0 | 20 77 68 61 74 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 73 69 7a 65 20 6f 66 20 69 74 73 20 71 75 | .what.the.maximum.size.of.its.qu |
113000 | 65 75 65 20 77 69 6c 6c 20 62 65 20 28 66 72 6f 6d 20 31 20 74 6f 20 31 2d 34 32 39 34 39 36 37 | eue.will.be.(from.1.to.1-4294967 |
113020 | 32 39 35 20 70 61 63 6b 65 74 73 29 2e 20 50 61 63 6b 65 74 73 20 61 72 65 20 64 72 6f 70 70 65 | 295.packets)..Packets.are.droppe |
113040 | 64 20 77 68 65 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 71 75 65 75 65 20 6c 65 6e 67 74 68 20 | d.when.the.current.queue.length. |
113060 | 72 65 61 63 68 65 73 20 74 68 69 73 20 76 61 6c 75 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | reaches.this.value..Use.this.com |
113080 | 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 | mand.to.configure.a.Random-Detec |
1130a0 | 74 20 70 6f 6c 69 63 79 20 61 6e 64 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 65 6e 20 | t.policy.and.set.its.name,.then. |
1130c0 | 73 74 61 74 65 20 74 68 65 20 49 50 20 50 72 65 63 65 64 65 6e 63 65 20 66 6f 72 20 74 68 65 20 | state.the.IP.Precedence.for.the. |
1130e0 | 76 69 72 74 75 61 6c 20 71 75 65 75 65 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e | virtual.queue.you.are.configurin |
113100 | 67 20 61 6e 64 20 77 68 61 74 20 69 74 73 20 6d 61 72 6b 20 28 64 72 6f 70 29 20 70 72 6f 62 61 | g.and.what.its.mark.(drop).proba |
113120 | 62 69 6c 69 74 79 20 77 69 6c 6c 20 62 65 2e 20 53 65 74 20 74 68 65 20 70 72 6f 62 61 62 69 6c | bility.will.be..Set.the.probabil |
113140 | 69 74 79 20 62 79 20 67 69 76 69 6e 67 20 74 68 65 20 4e 20 76 61 6c 75 65 20 6f 66 20 74 68 65 | ity.by.giving.the.N.value.of.the |
113160 | 20 66 72 61 63 74 69 6f 6e 20 31 2f 4e 20 28 64 65 66 61 75 6c 74 3a 20 31 30 29 2e 00 55 73 65 | .fraction.1/N.(default:.10)..Use |
113180 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 6e | .this.command.to.configure.a.Ran |
1131a0 | 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 20 61 6e 64 20 73 65 74 20 69 74 73 20 6e 61 | dom-Detect.policy.and.set.its.na |
1131c0 | 6d 65 2c 20 74 68 65 6e 20 73 74 61 74 65 20 74 68 65 20 49 50 20 50 72 65 63 65 64 65 6e 63 65 | me,.then.state.the.IP.Precedence |
1131e0 | 20 66 6f 72 20 74 68 65 20 76 69 72 74 75 61 6c 20 71 75 65 75 65 20 79 6f 75 20 61 72 65 20 63 | .for.the.virtual.queue.you.are.c |
113200 | 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 64 20 77 68 61 74 20 69 74 73 20 6d 61 78 69 6d 75 6d 20 | onfiguring.and.what.its.maximum. |
113220 | 74 68 72 65 73 68 6f 6c 64 20 66 6f 72 20 72 61 6e 64 6f 6d 20 64 65 74 65 63 74 69 6f 6e 20 77 | threshold.for.random.detection.w |
113240 | 69 6c 6c 20 62 65 20 28 66 72 6f 6d 20 30 20 74 6f 20 34 30 39 36 20 70 61 63 6b 65 74 73 2c 20 | ill.be.(from.0.to.4096.packets,. |
113260 | 64 65 66 61 75 6c 74 3a 20 31 38 29 2e 20 41 74 20 74 68 69 73 20 73 69 7a 65 2c 20 74 68 65 20 | default:.18)..At.this.size,.the. |
113280 | 6d 61 72 6b 69 6e 67 20 28 64 72 6f 70 29 20 70 72 6f 62 61 62 69 6c 69 74 79 20 69 73 20 6d 61 | marking.(drop).probability.is.ma |
1132a0 | 78 69 6d 61 6c 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 | ximal..Use.this.command.to.confi |
1132c0 | 67 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 20 61 6e 64 20 | gure.a.Random-Detect.policy.and. |
1132e0 | 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 65 6e 20 73 74 61 74 65 20 74 68 65 20 49 50 20 | set.its.name,.then.state.the.IP. |
113300 | 50 72 65 63 65 64 65 6e 63 65 20 66 6f 72 20 74 68 65 20 76 69 72 74 75 61 6c 20 71 75 65 75 65 | Precedence.for.the.virtual.queue |
113320 | 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 64 20 77 68 61 74 20 69 74 | .you.are.configuring.and.what.it |
113340 | 73 20 6d 69 6e 69 6d 75 6d 20 74 68 72 65 73 68 6f 6c 64 20 66 6f 72 20 72 61 6e 64 6f 6d 20 64 | s.minimum.threshold.for.random.d |
113360 | 65 74 65 63 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 28 66 72 6f 6d 20 30 20 74 6f 20 34 30 39 36 | etection.will.be.(from.0.to.4096 |
113380 | 20 70 61 63 6b 65 74 73 29 2e 20 20 49 66 20 74 68 69 73 20 76 61 6c 75 65 20 69 73 20 65 78 63 | .packets)...If.this.value.is.exc |
1133a0 | 65 65 64 65 64 2c 20 70 61 63 6b 65 74 73 20 73 74 61 72 74 20 62 65 69 6e 67 20 65 6c 69 67 69 | eeded,.packets.start.being.eligi |
1133c0 | 62 6c 65 20 66 6f 72 20 62 65 69 6e 67 20 64 72 6f 70 70 65 64 2e 00 55 73 65 20 74 68 69 73 20 | ble.for.being.dropped..Use.this. |
1133e0 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 | command.to.configure.a.Random-De |
113400 | 74 65 63 74 20 70 6f 6c 69 63 79 20 61 6e 64 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 | tect.policy.and.set.its.name,.th |
113420 | 65 6e 20 73 74 61 74 65 20 74 68 65 20 49 50 20 50 72 65 63 65 64 65 6e 63 65 20 66 6f 72 20 74 | en.state.the.IP.Precedence.for.t |
113440 | 68 65 20 76 69 72 74 75 61 6c 20 71 75 65 75 65 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 | he.virtual.queue.you.are.configu |
113460 | 72 69 6e 67 20 61 6e 64 20 77 68 61 74 20 74 68 65 20 73 69 7a 65 20 6f 66 20 69 74 73 20 61 76 | ring.and.what.the.size.of.its.av |
113480 | 65 72 61 67 65 2d 70 61 63 6b 65 74 20 73 68 6f 75 6c 64 20 62 65 20 28 69 6e 20 62 79 74 65 73 | erage-packet.should.be.(in.bytes |
1134a0 | 2c 20 64 65 66 61 75 6c 74 3a 20 31 30 32 34 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | ,.default:.1024)..Use.this.comma |
1134c0 | 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 | nd.to.configure.a.Random-Detect. |
1134e0 | 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 73 65 74 20 74 68 65 | policy,.set.its.name.and.set.the |
113500 | 20 61 76 61 69 6c 61 62 6c 65 20 62 61 6e 64 77 69 64 74 68 20 66 6f 72 20 74 68 69 73 20 70 6f | .available.bandwidth.for.this.po |
113520 | 6c 69 63 79 2e 20 49 74 20 69 73 20 75 73 65 64 20 66 6f 72 20 63 61 6c 63 75 6c 61 74 69 6e 67 | licy..It.is.used.for.calculating |
113540 | 20 74 68 65 20 61 76 65 72 61 67 65 20 71 75 65 75 65 20 73 69 7a 65 20 61 66 74 65 72 20 73 6f | .the.average.queue.size.after.so |
113560 | 6d 65 20 69 64 6c 65 20 74 69 6d 65 2e 20 49 74 20 73 68 6f 75 6c 64 20 62 65 20 73 65 74 20 74 | me.idle.time..It.should.be.set.t |
113580 | 6f 20 74 68 65 20 62 61 6e 64 77 69 64 74 68 20 6f 66 20 79 6f 75 72 20 69 6e 74 65 72 66 61 63 | o.the.bandwidth.of.your.interfac |
1135a0 | 65 2e 20 52 61 6e 64 6f 6d 20 44 65 74 65 63 74 20 69 73 20 6e 6f 74 20 61 20 73 68 61 70 69 6e | e..Random.Detect.is.not.a.shapin |
1135c0 | 67 20 70 6f 6c 69 63 79 2c 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 6e 6f 74 20 | g.policy,.this.command.will.not. |
1135e0 | 73 68 61 70 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 | shape..Use.this.command.to.confi |
113600 | 67 75 72 65 20 61 20 52 61 74 65 2d 43 6f 6e 74 72 6f 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 | gure.a.Rate-Control.policy,.set. |
113620 | 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 61 6d 6f 75 6e 74 20 | its.name.and.the.maximum.amount. |
113640 | 6f 66 20 74 69 6d 65 20 61 20 70 61 63 6b 65 74 20 63 61 6e 20 62 65 20 71 75 65 75 65 64 20 28 | of.time.a.packet.can.be.queued.( |
113660 | 64 65 66 61 75 6c 74 3a 20 35 30 20 6d 73 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | default:.50.ms)..Use.this.comman |
113680 | 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 74 65 2d 43 6f 6e 74 72 6f 6c 20 70 6f | d.to.configure.a.Rate-Control.po |
1136a0 | 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 72 61 74 65 20 | licy,.set.its.name.and.the.rate. |
1136c0 | 6c 69 6d 69 74 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 68 61 76 65 2e 00 55 73 65 20 74 68 69 73 | limit.you.want.to.have..Use.this |
1136e0 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 74 65 2d 43 6f 6e | .command.to.configure.a.Rate-Con |
113700 | 74 72 6f 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 | trol.policy,.set.its.name.and.th |
113720 | 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 62 75 63 6b 65 74 20 69 6e 20 62 79 74 65 73 20 77 68 | e.size.of.the.bucket.in.bytes.wh |
113740 | 69 63 68 20 77 69 6c 6c 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 62 75 72 73 74 2e | ich.will.be.available.for.burst. |
113760 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 | .Use.this.command.to.configure.a |
113780 | 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d | .Round-Robin.policy,.set.its.nam |
1137a0 | 65 2c 20 73 65 74 20 61 20 63 6c 61 73 73 20 49 44 2c 20 61 6e 64 20 74 68 65 20 71 75 61 6e 74 | e,.set.a.class.ID,.and.the.quant |
1137c0 | 75 6d 20 66 6f 72 20 74 68 61 74 20 63 6c 61 73 73 2e 20 54 68 65 20 64 65 66 69 63 69 74 20 63 | um.for.that.class..The.deficit.c |
1137e0 | 6f 75 6e 74 65 72 20 77 69 6c 6c 20 61 64 64 20 74 68 61 74 20 76 61 6c 75 65 20 65 61 63 68 20 | ounter.will.add.that.value.each. |
113800 | 72 6f 75 6e 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 | round..Use.this.command.to.confi |
113820 | 67 75 72 65 20 61 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 | gure.a.Round-Robin.policy,.set.i |
113840 | 74 73 20 6e 61 6d 65 2c 20 73 65 74 20 61 20 63 6c 61 73 73 20 49 44 2c 20 61 6e 64 20 74 68 65 | ts.name,.set.a.class.ID,.and.the |
113860 | 20 71 75 65 75 65 20 73 69 7a 65 20 69 6e 20 70 61 63 6b 65 74 73 2e 00 55 73 65 20 74 68 69 73 | .queue.size.in.packets..Use.this |
113880 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 53 68 61 70 65 72 20 70 | .command.to.configure.a.Shaper.p |
1138a0 | 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 6d 61 78 69 | olicy,.set.its.name.and.the.maxi |
1138c0 | 6d 75 6d 20 62 61 6e 64 77 69 64 74 68 20 66 6f 72 20 61 6c 6c 20 63 6f 6d 62 69 6e 65 64 20 74 | mum.bandwidth.for.all.combined.t |
1138e0 | 72 61 66 66 69 63 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 | raffic..Use.this.command.to.conf |
113900 | 69 67 75 72 65 20 61 20 53 68 61 70 65 72 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e | igure.a.Shaper.policy,.set.its.n |
113920 | 61 6d 65 2c 20 64 65 66 69 6e 65 20 61 20 63 6c 61 73 73 20 61 6e 64 20 73 65 74 20 74 68 65 20 | ame,.define.a.class.and.set.the. |
113940 | 67 75 61 72 61 6e 74 65 65 64 20 74 72 61 66 66 69 63 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 | guaranteed.traffic.you.want.to.a |
113960 | 6c 6c 6f 63 61 74 65 20 74 6f 20 74 68 61 74 20 63 6c 61 73 73 2e 00 55 73 65 20 74 68 69 73 20 | llocate.to.that.class..Use.this. |
113980 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 53 68 61 70 65 72 20 70 6f | command.to.configure.a.Shaper.po |
1139a0 | 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 64 65 66 69 6e 65 20 61 20 63 6c 61 | licy,.set.its.name,.define.a.cla |
1139c0 | 73 73 20 61 6e 64 20 73 65 74 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 73 70 65 65 64 20 70 6f 73 | ss.and.set.the.maximum.speed.pos |
1139e0 | 73 69 62 6c 65 20 66 6f 72 20 74 68 69 73 20 63 6c 61 73 73 2e 20 54 68 65 20 64 65 66 61 75 6c | sible.for.this.class..The.defaul |
113a00 | 74 20 63 65 69 6c 69 6e 67 20 76 61 6c 75 65 20 69 73 20 74 68 65 20 62 61 6e 64 77 69 64 74 68 | t.ceiling.value.is.the.bandwidth |
113a20 | 20 76 61 6c 75 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 | .value..Use.this.command.to.conf |
113a40 | 69 67 75 72 65 20 61 20 53 68 61 70 65 72 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e | igure.a.Shaper.policy,.set.its.n |
113a60 | 61 6d 65 2c 20 64 65 66 69 6e 65 20 61 20 63 6c 61 73 73 20 61 6e 64 20 73 65 74 20 74 68 65 20 | ame,.define.a.class.and.set.the. |
113a80 | 70 72 69 6f 72 69 74 79 20 66 6f 72 20 75 73 61 67 65 20 6f 66 20 61 76 61 69 6c 61 62 6c 65 20 | priority.for.usage.of.available. |
113aa0 | 62 61 6e 64 77 69 64 74 68 20 6f 6e 63 65 20 67 75 61 72 61 6e 74 65 65 73 20 68 61 76 65 20 62 | bandwidth.once.guarantees.have.b |
113ac0 | 65 65 6e 20 6d 65 74 2e 20 54 68 65 20 6c 6f 77 65 72 20 74 68 65 20 70 72 69 6f 72 69 74 79 20 | een.met..The.lower.the.priority. |
113ae0 | 6e 75 6d 62 65 72 2c 20 74 68 65 20 68 69 67 68 65 72 20 74 68 65 20 70 72 69 6f 72 69 74 79 2e | number,.the.higher.the.priority. |
113b00 | 20 54 68 65 20 64 65 66 61 75 6c 74 20 70 72 69 6f 72 69 74 79 20 76 61 6c 75 65 20 69 73 20 30 | .The.default.priority.value.is.0 |
113b20 | 2c 20 74 68 65 20 68 69 67 68 65 73 74 20 70 72 69 6f 72 69 74 79 2e 00 55 73 65 20 74 68 69 73 | ,.the.highest.priority..Use.this |
113b40 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 53 68 61 70 65 72 20 70 | .command.to.configure.a.Shaper.p |
113b60 | 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 64 65 66 69 6e 65 20 61 20 63 6c | olicy,.set.its.name,.define.a.cl |
113b80 | 61 73 73 20 61 6e 64 20 73 65 74 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 60 74 6f 63 | ass.and.set.the.size.of.the.`toc |
113ba0 | 6b 65 6e 20 62 75 63 6b 65 74 60 5f 20 69 6e 20 62 79 74 65 73 2c 20 77 68 69 63 68 20 77 69 6c | ken.bucket`_.in.bytes,.which.wil |
113bc0 | 6c 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 62 65 20 73 65 6e 74 20 61 74 20 63 65 69 | l.be.available.to.be.sent.at.cei |
113be0 | 6c 69 6e 67 20 73 70 65 65 64 20 28 64 65 66 61 75 6c 74 3a 20 31 35 4b 62 29 2e 00 55 73 65 20 | ling.speed.(default:.15Kb)..Use. |
113c00 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 64 61 74 61 | this.command.to.configure.a.data |
113c20 | 2d 72 61 74 65 20 6c 69 6d 69 74 20 74 6f 20 50 50 50 4f 6f 45 20 63 6c 69 65 6e 74 73 20 66 6f | -rate.limit.to.PPPOoE.clients.fo |
113c40 | 72 20 74 72 61 66 66 69 63 20 64 6f 77 6e 6c 6f 61 64 20 6f 72 20 75 70 6c 6f 61 64 2e 20 54 68 | r.traffic.download.or.upload..Th |
113c60 | 65 20 72 61 74 65 2d 6c 69 6d 69 74 20 69 73 20 73 65 74 20 69 6e 20 6b 62 69 74 2f 73 65 63 2e | e.rate-limit.is.set.in.kbit/sec. |
113c80 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 | .Use.this.command.to.configure.a |
113ca0 | 20 64 72 6f 70 2d 74 61 69 6c 20 70 6f 6c 69 63 79 20 28 50 46 49 46 4f 29 2e 20 43 68 6f 6f 73 | .drop-tail.policy.(PFIFO)..Choos |
113cc0 | 65 20 61 20 75 6e 69 71 75 65 20 6e 61 6d 65 20 66 6f 72 20 74 68 69 73 20 70 6f 6c 69 63 79 20 | e.a.unique.name.for.this.policy. |
113ce0 | 61 6e 64 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 71 75 65 75 65 20 62 79 20 73 65 74 | and.the.size.of.the.queue.by.set |
113d00 | 74 69 6e 67 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 69 74 20 63 61 | ting.the.number.of.packets.it.ca |
113d20 | 6e 20 63 6f 6e 74 61 69 6e 20 28 6d 61 78 69 6d 75 6d 20 34 32 39 34 39 36 37 32 39 35 29 2e 00 | n.contain.(maximum.4294967295).. |
113d40 | 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 | Use.this.command.to.configure.a. |
113d60 | 73 70 65 63 69 66 69 63 20 73 65 73 73 69 6f 6e 20 68 6f 6c 64 20 74 69 6d 65 20 66 6f 72 20 4c | specific.session.hold.time.for.L |
113d80 | 44 50 20 70 65 65 72 73 2e 20 53 65 74 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 | DP.peers..Set.the.IP.address.of. |
113da0 | 74 68 65 20 4c 44 50 20 70 65 65 72 20 61 6e 64 20 61 20 73 65 73 73 69 6f 6e 20 68 6f 6c 64 20 | the.LDP.peer.and.a.session.hold. |
113dc0 | 74 69 6d 65 20 74 68 61 74 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 | time.that.should.be.configured.f |
113de0 | 6f 72 20 69 74 2e 20 59 6f 75 20 6d 61 79 20 68 61 76 65 20 74 6f 20 72 65 73 65 74 20 74 68 65 | or.it..You.may.have.to.reset.the |
113e00 | 20 6e 65 69 67 68 62 6f 72 20 66 6f 72 20 74 68 69 73 20 74 6f 20 77 6f 72 6b 2e 00 55 73 65 20 | .neighbor.for.this.to.work..Use. |
113e20 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 6e 67 | this.command.to.configure.an.Ing |
113e40 | 72 65 73 73 20 50 6f 6c 69 63 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 20 | ress.Policer,.defining.its.name. |
113e60 | 61 6e 64 20 74 68 65 20 62 75 72 73 74 20 73 69 7a 65 20 69 6e 20 62 79 74 65 73 20 28 64 65 66 | and.the.burst.size.in.bytes.(def |
113e80 | 61 75 6c 74 3a 20 31 35 29 20 66 6f 72 20 69 74 73 20 64 65 66 61 75 6c 74 20 70 6f 6c 69 63 79 | ault:.15).for.its.default.policy |
113ea0 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 | ..Use.this.command.to.configure. |
113ec0 | 61 6e 20 49 6e 67 72 65 73 73 20 50 6f 6c 69 63 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 73 | an.Ingress.Policer,.defining.its |
113ee0 | 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 61 6c 6c 6f 77 65 64 20 62 61 | .name.and.the.maximum.allowed.ba |
113f00 | 6e 64 77 69 64 74 68 20 66 6f 72 20 69 74 73 20 64 65 66 61 75 6c 74 20 70 6f 6c 69 63 79 2e 00 | ndwidth.for.its.default.policy.. |
113f20 | 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e | Use.this.command.to.configure.an |
113f40 | 20 49 6e 67 72 65 73 73 20 50 6f 6c 69 63 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e | .Ingress.Policer,.defining.its.n |
113f60 | 61 6d 65 2c 20 61 20 63 6c 61 73 73 20 69 64 65 6e 74 69 66 69 65 72 20 28 31 2d 34 30 39 30 29 | ame,.a.class.identifier.(1-4090) |
113f80 | 20 61 6e 64 20 74 68 65 20 62 75 72 73 74 20 73 69 7a 65 20 69 6e 20 62 79 74 65 73 20 66 6f 72 | .and.the.burst.size.in.bytes.for |
113fa0 | 20 74 68 69 73 20 63 6c 61 73 73 20 28 64 65 66 61 75 6c 74 3a 20 31 35 29 2e 00 55 73 65 20 74 | .this.class.(default:.15)..Use.t |
113fc0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 6e 67 72 | his.command.to.configure.an.Ingr |
113fe0 | 65 73 73 20 50 6f 6c 69 63 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 2c 20 | ess.Policer,.defining.its.name,. |
114000 | 61 20 63 6c 61 73 73 20 69 64 65 6e 74 69 66 69 65 72 20 28 31 2d 34 30 39 30 29 20 61 6e 64 20 | a.class.identifier.(1-4090).and. |
114020 | 74 68 65 20 6d 61 78 69 6d 75 6d 20 61 6c 6c 6f 77 65 64 20 62 61 6e 64 77 69 64 74 68 20 66 6f | the.maximum.allowed.bandwidth.fo |
114040 | 72 20 74 68 69 73 20 63 6c 61 73 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | r.this.class..Use.this.command.t |
114060 | 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 6e 67 72 65 73 73 20 50 6f 6c 69 63 65 72 2c 20 | o.configure.an.Ingress.Policer,. |
114080 | 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 2c 20 61 20 63 6c 61 73 73 20 69 64 65 6e 74 | defining.its.name,.a.class.ident |
1140a0 | 69 66 69 65 72 20 28 31 2d 34 30 39 30 29 2c 20 61 20 63 6c 61 73 73 20 6d 61 74 63 68 69 6e 67 | ifier.(1-4090),.a.class.matching |
1140c0 | 20 72 75 6c 65 20 6e 61 6d 65 20 61 6e 64 20 69 74 73 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 | .rule.name.and.its.description.. |
1140e0 | 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e | Use.this.command.to.configure.an |
114100 | 20 49 6e 67 72 65 73 73 20 50 6f 6c 69 63 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e | .Ingress.Policer,.defining.its.n |
114120 | 61 6d 65 2c 20 61 20 63 6c 61 73 73 20 69 64 65 6e 74 69 66 69 65 72 20 28 31 2d 34 30 39 30 29 | ame,.a.class.identifier.(1-4090) |
114140 | 2c 20 61 6e 64 20 74 68 65 20 70 72 69 6f 72 69 74 79 20 28 30 2d 32 30 2c 20 64 65 66 61 75 6c | ,.and.the.priority.(0-20,.defaul |
114160 | 74 20 32 30 29 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 72 75 6c 65 20 69 73 20 65 76 61 6c 75 | t.20).in.which.the.rule.is.evalu |
114180 | 61 74 65 64 20 28 74 68 65 20 6c 6f 77 65 72 20 74 68 65 20 6e 75 6d 62 65 72 2c 20 74 68 65 20 | ated.(the.lower.the.number,.the. |
1141a0 | 68 69 67 68 65 72 20 74 68 65 20 70 72 69 6f 72 69 74 79 29 2e 00 55 73 65 20 74 68 69 73 20 63 | higher.the.priority)..Use.this.c |
1141c0 | 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 66 71 2d 63 6f 64 65 6c 20 | ommand.to.configure.an.fq-codel. |
1141e0 | 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 6d 61 78 | policy,.set.its.name.and.the.max |
114200 | 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 62 79 74 65 73 20 28 64 65 66 61 75 6c 74 3a 20 31 | imum.number.of.bytes.(default:.1 |
114220 | 35 31 34 29 20 74 6f 20 62 65 20 64 65 71 75 65 75 65 64 20 66 72 6f 6d 20 61 20 71 75 65 75 65 | 514).to.be.dequeued.from.a.queue |
114240 | 20 61 74 20 6f 6e 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f | .at.once..Use.this.command.to.co |
114260 | 6e 66 69 67 75 72 65 20 61 6e 20 66 71 2d 63 6f 64 65 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 | nfigure.an.fq-codel.policy,.set. |
114280 | 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 75 62 2d 71 | its.name.and.the.number.of.sub-q |
1142a0 | 75 65 75 65 73 20 28 64 65 66 61 75 6c 74 3a 20 31 30 32 34 29 20 69 6e 74 6f 20 77 68 69 63 68 | ueues.(default:.1024).into.which |
1142c0 | 20 70 61 63 6b 65 74 73 20 61 72 65 20 63 6c 61 73 73 69 66 69 65 64 2e 00 55 73 65 20 74 68 69 | .packets.are.classified..Use.thi |
1142e0 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 66 71 2d 63 6f 64 | s.command.to.configure.an.fq-cod |
114300 | 65 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 | el.policy,.set.its.name.and.the. |
114320 | 74 69 6d 65 20 70 65 72 69 6f 64 20 75 73 65 64 20 62 79 20 74 68 65 20 63 6f 6e 74 72 6f 6c 20 | time.period.used.by.the.control. |
114340 | 6c 6f 6f 70 20 6f 66 20 43 6f 44 65 6c 20 74 6f 20 64 65 74 65 63 74 20 77 68 65 6e 20 61 20 70 | loop.of.CoDel.to.detect.when.a.p |
114360 | 65 72 73 69 73 74 65 6e 74 20 71 75 65 75 65 20 69 73 20 64 65 76 65 6c 6f 70 69 6e 67 2c 20 65 | ersistent.queue.is.developing,.e |
114380 | 6e 73 75 72 69 6e 67 20 74 68 61 74 20 74 68 65 20 6d 65 61 73 75 72 65 64 20 6d 69 6e 69 6d 75 | nsuring.that.the.measured.minimu |
1143a0 | 6d 20 64 65 6c 61 79 20 64 6f 65 73 20 6e 6f 74 20 62 65 63 6f 6d 65 20 74 6f 6f 20 73 74 61 6c | m.delay.does.not.become.too.stal |
1143c0 | 65 20 28 64 65 66 61 75 6c 74 3a 20 31 30 30 6d 73 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | e.(default:.100ms)..Use.this.com |
1143e0 | 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 66 71 2d 63 6f 64 65 6c 20 70 6f | mand.to.configure.an.fq-codel.po |
114400 | 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 61 6e 64 20 64 65 66 69 6e 65 20 61 | licy,.set.its.name,.and.define.a |
114420 | 20 68 61 72 64 20 6c 69 6d 69 74 20 6f 6e 20 74 68 65 20 72 65 61 6c 20 71 75 65 75 65 20 73 69 | .hard.limit.on.the.real.queue.si |
114440 | 7a 65 2e 20 57 68 65 6e 20 74 68 69 73 20 6c 69 6d 69 74 20 69 73 20 72 65 61 63 68 65 64 2c 20 | ze..When.this.limit.is.reached,. |
114460 | 6e 65 77 20 70 61 63 6b 65 74 73 20 61 72 65 20 64 72 6f 70 70 65 64 20 28 64 65 66 61 75 6c 74 | new.packets.are.dropped.(default |
114480 | 3a 20 31 30 32 34 30 20 70 61 63 6b 65 74 73 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | :.10240.packets)..Use.this.comma |
1144a0 | 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 66 71 2d 63 6f 64 65 6c 20 70 6f 6c 69 | nd.to.configure.an.fq-codel.poli |
1144c0 | 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 61 6e 64 20 64 65 66 69 6e 65 20 74 68 65 | cy,.set.its.name,.and.define.the |
1144e0 | 20 61 63 63 65 70 74 61 62 6c 65 20 6d 69 6e 69 6d 75 6d 20 73 74 61 6e 64 69 6e 67 2f 70 65 72 | .acceptable.minimum.standing/per |
114500 | 73 69 73 74 65 6e 74 20 71 75 65 75 65 20 64 65 6c 61 79 2e 20 54 68 69 73 20 6d 69 6e 69 6d 75 | sistent.queue.delay..This.minimu |
114520 | 6d 20 64 65 6c 61 79 20 69 73 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 74 72 61 63 6b 69 6e | m.delay.is.identified.by.trackin |
114540 | 67 20 74 68 65 20 6c 6f 63 61 6c 20 6d 69 6e 69 6d 75 6d 20 71 75 65 75 65 20 64 65 6c 61 79 20 | g.the.local.minimum.queue.delay. |
114560 | 74 68 61 74 20 70 61 63 6b 65 74 73 20 65 78 70 65 72 69 65 6e 63 65 20 28 64 65 66 61 75 6c 74 | that.packets.experience.(default |
114580 | 3a 20 35 6d 73 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 | :.5ms)..Use.this.command.to.conf |
1145a0 | 69 67 75 72 65 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 49 47 4d 50 20 73 6f 20 | igure.an.interface.with.IGMP.so. |
1145c0 | 74 68 61 74 20 50 49 4d 20 63 61 6e 20 72 65 63 65 69 76 65 20 49 47 4d 50 20 72 65 70 6f 72 74 | that.PIM.can.receive.IGMP.report |
1145e0 | 73 20 61 6e 64 20 71 75 65 72 79 20 6f 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 | s.and.query.on.the.selected.inte |
114600 | 72 66 61 63 65 2e 20 42 79 20 64 65 66 61 75 6c 74 20 49 47 4d 50 20 76 65 72 73 69 6f 6e 20 33 | rface..By.default.IGMP.version.3 |
114620 | 20 77 69 6c 6c 20 62 65 20 75 73 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | .will.be.used..Use.this.command. |
114640 | 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 66 6f 72 20 | to.configure.authentication.for. |
114660 | 4c 44 50 20 70 65 65 72 73 2e 20 53 65 74 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 | LDP.peers..Set.the.IP.address.of |
114680 | 20 74 68 65 20 4c 44 50 20 70 65 65 72 20 61 6e 64 20 61 20 70 61 73 73 77 6f 72 64 20 74 68 61 | .the.LDP.peer.and.a.password.tha |
1146a0 | 74 20 73 68 6f 75 6c 64 20 62 65 20 73 68 61 72 65 64 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 62 | t.should.be.shared.in.order.to.b |
1146c0 | 65 63 6f 6d 65 20 6e 65 69 67 68 62 6f 72 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | ecome.neighbors..Use.this.comman |
1146e0 | 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 | d.to.configure.in.the.selected.i |
114700 | 6e 74 65 72 66 61 63 65 20 74 68 65 20 49 47 4d 50 20 68 6f 73 74 20 71 75 65 72 79 20 69 6e 74 | nterface.the.IGMP.host.query.int |
114720 | 65 72 76 61 6c 20 28 31 2d 31 38 30 30 29 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 68 61 74 20 50 | erval.(1-1800).in.seconds.that.P |
114740 | 49 4d 20 77 69 6c 6c 20 75 73 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | IM.will.use..Use.this.command.to |
114760 | 20 63 6f 6e 66 69 67 75 72 65 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 | .configure.in.the.selected.inter |
114780 | 66 61 63 65 20 74 68 65 20 49 47 4d 50 20 71 75 65 72 79 20 72 65 73 70 6f 6e 73 65 20 74 69 6d | face.the.IGMP.query.response.tim |
1147a0 | 65 6f 75 74 20 76 61 6c 75 65 20 28 31 30 2d 32 35 30 29 20 69 6e 20 64 65 63 69 73 65 63 6f 6e | eout.value.(10-250).in.decisecon |
1147c0 | 64 73 2e 20 49 66 20 61 20 72 65 70 6f 72 74 20 69 73 20 6e 6f 74 20 72 65 74 75 72 6e 65 64 20 | ds..If.a.report.is.not.returned. |
1147e0 | 69 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 74 69 6d 65 2c 20 69 74 20 77 69 6c 6c 20 62 | in.the.specified.time,.it.will.b |
114800 | 65 20 61 73 73 75 6d 65 64 20 74 68 65 20 28 53 2c 47 29 20 6f 72 20 28 2a 2c 47 29 20 73 74 61 | e.assumed.the.(S,G).or.(*,G).sta |
114820 | 74 65 20 3a 72 66 63 3a 60 37 37 36 31 23 73 65 63 74 69 6f 6e 2d 34 2e 31 60 20 68 61 73 20 74 | te.:rfc:`7761#section-4.1`.has.t |
114840 | 69 6d 65 64 20 6f 75 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f | imed.out..Use.this.command.to.co |
114860 | 6e 66 69 67 75 72 65 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 | nfigure.in.the.selected.interfac |
114880 | 65 20 74 68 65 20 49 47 4d 50 20 71 75 65 72 79 20 72 65 73 70 6f 6e 73 65 20 74 69 6d 65 6f 75 | e.the.IGMP.query.response.timeou |
1148a0 | 74 20 76 61 6c 75 65 20 28 31 30 2d 32 35 30 29 20 69 6e 20 64 65 63 69 73 65 63 6f 6e 64 73 2e | t.value.(10-250).in.deciseconds. |
1148c0 | 20 49 66 20 61 20 72 65 70 6f 72 74 20 69 73 20 6e 6f 74 20 72 65 74 75 72 6e 65 64 20 69 6e 20 | .If.a.report.is.not.returned.in. |
1148e0 | 74 68 65 20 73 70 65 63 69 66 69 65 64 20 74 69 6d 65 2c 20 69 74 20 77 69 6c 6c 20 62 65 20 61 | the.specified.time,.it.will.be.a |
114900 | 73 73 75 6d 65 64 20 74 68 65 20 28 53 2c 47 29 20 6f 72 20 28 5c 2a 2c 47 29 20 73 74 61 74 65 | ssumed.the.(S,G).or.(\*,G).state |
114920 | 20 3a 72 66 63 3a 60 37 37 36 31 23 73 65 63 74 69 6f 6e 2d 34 2e 31 60 20 68 61 73 20 74 69 6d | .:rfc:`7761#section-4.1`.has.tim |
114940 | 65 64 20 6f 75 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 | ed.out..Use.this.command.to.conf |
114960 | 69 67 75 72 65 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 | igure.in.the.selected.interface. |
114980 | 74 68 65 20 49 47 4d 50 20 71 75 65 72 79 20 72 65 73 70 6f 6e 73 65 20 74 69 6d 65 6f 75 74 20 | the.IGMP.query.response.timeout. |
1149a0 | 76 61 6c 75 65 20 28 31 30 2d 32 35 30 29 20 69 6e 20 64 65 63 69 73 65 63 6f 6e 64 73 2e 20 49 | value.(10-250).in.deciseconds..I |
1149c0 | 66 20 61 20 72 65 70 6f 72 74 20 69 73 20 6e 6f 74 20 72 65 74 75 72 6e 65 64 20 69 6e 20 74 68 | f.a.report.is.not.returned.in.th |
1149e0 | 65 20 73 70 65 63 69 66 69 65 64 20 74 69 6d 65 2c 20 69 74 20 77 69 6c 6c 20 62 65 20 61 73 73 | e.specified.time,.it.will.be.ass |
114a00 | 75 6d 65 64 20 74 68 65 20 60 28 53 2c 47 29 20 6f 72 20 28 2a 2c 47 29 20 73 74 61 74 65 20 3c | umed.the.`(S,G).or.(*,G).state.< |
114a20 | 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 37 | https://tools.ietf.org/html/rfc7 |
114a40 | 37 36 31 23 73 65 63 74 69 6f 6e 2d 34 2e 31 3e 60 5f 20 68 61 73 20 74 69 6d 65 64 20 6f 75 74 | 761#section-4.1>`_.has.timed.out |
114a60 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 | ..Use.this.command.to.configure. |
114a80 | 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 4d 4c | in.the.selected.interface.the.ML |
114aa0 | 44 20 68 6f 73 74 20 71 75 65 72 79 20 69 6e 74 65 72 76 61 6c 20 28 31 2d 36 35 35 33 35 29 20 | D.host.query.interval.(1-65535). |
114ac0 | 69 6e 20 73 65 63 6f 6e 64 73 20 74 68 61 74 20 50 49 4d 20 77 69 6c 6c 20 75 73 65 2e 20 54 68 | in.seconds.that.PIM.will.use..Th |
114ae0 | 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 32 35 20 73 65 63 6f 6e 64 73 2e 00 | e.default.value.is.125.seconds.. |
114b00 | 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 | Use.this.command.to.configure.th |
114b20 | 65 20 20 73 61 6d 70 6c 69 6e 67 20 72 61 74 65 20 66 6f 72 20 66 6c 6f 77 20 61 63 63 6f 75 6e | e..sampling.rate.for.flow.accoun |
114b40 | 74 69 6e 67 2e 20 54 68 65 20 73 79 73 74 65 6d 20 73 61 6d 70 6c 65 73 20 6f 6e 65 20 69 6e 20 | ting..The.system.samples.one.in. |
114b60 | 65 76 65 72 79 20 60 3c 72 61 74 65 3e 60 20 70 61 63 6b 65 74 73 2c 20 77 68 65 72 65 20 60 3c | every.`<rate>`.packets,.where.`< |
114b80 | 72 61 74 65 3e 60 20 69 73 20 74 68 65 20 76 61 6c 75 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 | rate>`.is.the.value.configured.f |
114ba0 | 6f 72 20 74 68 65 20 73 61 6d 70 6c 69 6e 67 2d 72 61 74 65 20 6f 70 74 69 6f 6e 2e 20 54 68 65 | or.the.sampling-rate.option..The |
114bc0 | 20 61 64 76 61 6e 74 61 67 65 20 6f 66 20 73 61 6d 70 6c 69 6e 67 20 65 76 65 72 79 20 6e 20 70 | .advantage.of.sampling.every.n.p |
114be0 | 61 63 6b 65 74 73 2c 20 77 68 65 72 65 20 6e 20 3e 20 31 2c 20 61 6c 6c 6f 77 73 20 79 6f 75 20 | ackets,.where.n.>.1,.allows.you. |
114c00 | 74 6f 20 64 65 63 72 65 61 73 65 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 70 72 6f 63 65 73 | to.decrease.the.amount.of.proces |
114c20 | 73 69 6e 67 20 72 65 73 6f 75 72 63 65 73 20 72 65 71 75 69 72 65 64 20 66 6f 72 20 66 6c 6f 77 | sing.resources.required.for.flow |
114c40 | 20 61 63 63 6f 75 6e 74 69 6e 67 2e 20 54 68 65 20 64 69 73 61 64 76 61 6e 74 61 67 65 20 6f 66 | .accounting..The.disadvantage.of |
114c60 | 20 6e 6f 74 20 73 61 6d 70 6c 69 6e 67 20 65 76 65 72 79 20 70 61 63 6b 65 74 20 69 73 20 74 68 | .not.sampling.every.packet.is.th |
114c80 | 61 74 20 74 68 65 20 73 74 61 74 69 73 74 69 63 73 20 70 72 6f 64 75 63 65 64 20 61 72 65 20 65 | at.the.statistics.produced.are.e |
114ca0 | 73 74 69 6d 61 74 65 73 20 6f 66 20 61 63 74 75 61 6c 20 64 61 74 61 20 66 6c 6f 77 73 2e 00 55 | stimates.of.actual.data.flows..U |
114cc0 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 | se.this.command.to.configure.the |
114ce0 | 20 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 73 68 61 72 65 64 20 73 65 63 72 65 | .IP.address.and.the.shared.secre |
114d00 | 74 20 6b 65 79 20 6f 66 20 79 6f 75 72 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 20 20 59 6f | t.key.of.your.RADIUS.server...Yo |
114d20 | 75 20 63 61 6e 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 52 41 44 49 55 53 20 73 65 72 76 65 | u.can.have.multiple.RADIUS.serve |
114d40 | 72 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 66 20 79 6f 75 20 77 69 73 68 20 74 6f 20 61 63 68 | rs.configured.if.you.wish.to.ach |
114d60 | 69 65 76 65 20 72 65 64 75 6e 64 61 6e 63 79 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | ieve.redundancy..Use.this.comman |
114d80 | 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 75 73 | d.to.configure.the.IP.address.us |
114da0 | 65 64 20 61 73 20 74 68 65 20 4c 44 50 20 72 6f 75 74 65 72 2d 69 64 20 6f 66 20 74 68 65 20 6c | ed.as.the.LDP.router-id.of.the.l |
114dc0 | 6f 63 61 6c 20 64 65 76 69 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | ocal.device..Use.this.command.to |
114de0 | 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 50 49 4d 20 68 65 6c 6c 6f 20 69 6e 74 65 72 76 61 | .configure.the.PIM.hello.interva |
114e00 | 6c 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 31 2d 31 38 30 29 20 66 6f 72 20 74 68 65 20 73 65 6c | l.in.seconds.(1-180).for.the.sel |
114e20 | 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | ected.interface..Use.this.comman |
114e40 | 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 62 75 72 73 74 20 73 69 7a 65 20 6f 66 | d.to.configure.the.burst.size.of |
114e60 | 20 74 68 65 20 74 72 61 66 66 69 63 20 69 6e 20 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 | .the.traffic.in.a.Network.Emulat |
114e80 | 6f 72 20 70 6f 6c 69 63 79 2e 20 44 65 66 69 6e 65 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 | or.policy..Define.the.name.of.th |
114ea0 | 65 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 20 61 6e 64 20 69 74 | e.Network.Emulator.policy.and.it |
114ec0 | 73 20 74 72 61 66 66 69 63 20 62 75 72 73 74 20 73 69 7a 65 20 28 69 74 20 77 69 6c 6c 20 62 65 | s.traffic.burst.size.(it.will.be |
114ee0 | 20 63 6f 6e 66 69 67 75 72 65 64 20 74 68 72 6f 75 67 68 20 74 68 65 20 54 6f 6b 65 6e 20 42 75 | .configured.through.the.Token.Bu |
114f00 | 63 6b 65 74 20 46 69 6c 74 65 72 20 71 64 69 73 63 29 2e 20 44 65 66 61 75 6c 74 3a 31 35 6b 62 | cket.Filter.qdisc)..Default:15kb |
114f20 | 2e 20 49 74 20 77 69 6c 6c 20 6f 6e 6c 79 20 74 61 6b 65 20 65 66 66 65 63 74 20 69 66 20 79 6f | ..It.will.only.take.effect.if.yo |
114f40 | 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 74 73 20 62 61 6e 64 77 69 64 74 68 20 | u.have.configured.its.bandwidth. |
114f60 | 74 6f 6f 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 | too..Use.this.command.to.configu |
114f80 | 72 65 20 74 68 65 20 6c 6f 63 61 6c 20 67 61 74 65 77 61 79 20 49 50 20 61 64 64 72 65 73 73 2e | re.the.local.gateway.IP.address. |
114fa0 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 | .Use.this.command.to.configure.t |
114fc0 | 68 65 20 6d 61 78 69 6d 75 6d 20 72 61 74 65 20 61 74 20 77 68 69 63 68 20 74 72 61 66 66 69 63 | he.maximum.rate.at.which.traffic |
114fe0 | 20 77 69 6c 6c 20 62 65 20 73 68 61 70 65 64 20 69 6e 20 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 | .will.be.shaped.in.a.Network.Emu |
115000 | 6c 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 44 65 66 69 6e 65 20 74 68 65 20 6e 61 6d 65 20 6f 66 | lator.policy..Define.the.name.of |
115020 | 20 74 68 65 20 70 6f 6c 69 63 79 20 61 6e 64 20 74 68 65 20 72 61 74 65 2e 00 55 73 65 20 74 68 | .the.policy.and.the.rate..Use.th |
115040 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 73 61 6d 70 | is.command.to.configure.the.samp |
115060 | 6c 69 6e 67 20 72 61 74 65 20 66 6f 72 20 73 46 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 28 | ling.rate.for.sFlow.accounting.( |
115080 | 64 65 66 61 75 6c 74 3a 20 31 30 30 30 29 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | default:.1000).Use.this.command. |
1150a0 | 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 74 68 | to.configure.the.username.and.th |
1150c0 | 65 20 70 61 73 73 77 6f 72 64 20 6f 66 20 61 20 6c 6f 63 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 | e.password.of.a.locally.configur |
1150e0 | 65 64 20 75 73 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e | ed.user..Use.this.command.to.con |
115100 | 74 72 6f 6c 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 65 71 75 61 6c | trol.the.maximum.number.of.equal |
115120 | 20 63 6f 73 74 20 70 61 74 68 73 20 74 6f 20 72 65 61 63 68 20 61 20 73 70 65 63 69 66 69 63 20 | .cost.paths.to.reach.a.specific. |
115140 | 64 65 73 74 69 6e 61 74 69 6f 6e 2e 20 54 68 65 20 75 70 70 65 72 20 6c 69 6d 69 74 20 6d 61 79 | destination..The.upper.limit.may |
115160 | 20 64 69 66 66 65 72 20 69 66 20 79 6f 75 20 63 68 61 6e 67 65 20 74 68 65 20 76 61 6c 75 65 20 | .differ.if.you.change.the.value. |
115180 | 6f 66 20 4d 55 4c 54 49 50 41 54 48 5f 4e 55 4d 20 64 75 72 69 6e 67 20 63 6f 6d 70 69 6c 61 74 | of.MULTIPATH_NUM.during.compilat |
1151a0 | 69 6f 6e 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 4d 55 4c 54 49 50 41 54 48 5f 4e 55 | ion..The.default.is.MULTIPATH_NU |
1151c0 | 4d 20 28 36 34 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 72 65 61 | M.(64)..Use.this.command.to.crea |
1151e0 | 74 65 20 61 20 46 61 69 72 2d 51 75 65 75 65 20 70 6f 6c 69 63 79 20 61 6e 64 20 67 69 76 65 20 | te.a.Fair-Queue.policy.and.give. |
115200 | 69 74 20 61 20 6e 61 6d 65 2e 20 49 74 20 69 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 53 74 | it.a.name..It.is.based.on.the.St |
115220 | 6f 63 68 61 73 74 69 63 20 46 61 69 72 6e 65 73 73 20 51 75 65 75 65 69 6e 67 20 61 6e 64 20 63 | ochastic.Fairness.Queueing.and.c |
115240 | 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 | an.be.applied.to.outbound.traffi |
115260 | 63 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 49 50 | c..Use.this.command.to.define.IP |
115280 | 73 65 63 20 69 6e 74 65 72 66 61 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | sec.interface..Use.this.command. |
1152a0 | 74 6f 20 64 65 66 69 6e 65 20 61 20 46 61 69 72 2d 51 75 65 75 65 20 70 6f 6c 69 63 79 2c 20 62 | to.define.a.Fair-Queue.policy,.b |
1152c0 | 61 73 65 64 20 6f 6e 20 74 68 65 20 53 74 6f 63 68 61 73 74 69 63 20 46 61 69 72 6e 65 73 73 20 | ased.on.the.Stochastic.Fairness. |
1152e0 | 51 75 65 75 65 69 6e 67 2c 20 61 6e 64 20 73 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 | Queueing,.and.set.the.number.of. |
115300 | 6d 61 78 69 6d 75 6d 20 70 61 63 6b 65 74 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 77 61 69 74 20 | maximum.packets.allowed.to.wait. |
115320 | 69 6e 20 74 68 65 20 71 75 65 75 65 2e 20 41 6e 79 20 6f 74 68 65 72 20 70 61 63 6b 65 74 20 77 | in.the.queue..Any.other.packet.w |
115340 | 69 6c 6c 20 62 65 20 64 72 6f 70 70 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | ill.be.dropped..Use.this.command |
115360 | 20 74 6f 20 64 65 66 69 6e 65 20 61 20 46 61 69 72 2d 51 75 65 75 65 20 70 6f 6c 69 63 79 2c 20 | .to.define.a.Fair-Queue.policy,. |
115380 | 62 61 73 65 64 20 6f 6e 20 74 68 65 20 53 74 6f 63 68 61 73 74 69 63 20 46 61 69 72 6e 65 73 73 | based.on.the.Stochastic.Fairness |
1153a0 | 20 51 75 65 75 65 69 6e 67 2c 20 61 6e 64 20 73 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 | .Queueing,.and.set.the.number.of |
1153c0 | 20 73 65 63 6f 6e 64 73 20 61 74 20 77 68 69 63 68 20 61 20 6e 65 77 20 71 75 65 75 65 20 61 6c | .seconds.at.which.a.new.queue.al |
1153e0 | 67 6f 72 69 74 68 6d 20 70 65 72 74 75 72 62 61 74 69 6f 6e 20 77 69 6c 6c 20 6f 63 63 75 72 20 | gorithm.perturbation.will.occur. |
115400 | 28 6d 61 78 69 6d 75 6d 20 34 32 39 34 39 36 37 32 39 35 29 2e 00 55 73 65 20 74 68 69 73 20 63 | (maximum.4294967295)..Use.this.c |
115420 | 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 64 65 66 61 75 6c 74 20 49 50 76 36 20 61 64 | ommand.to.define.default.IPv6.ad |
115440 | 64 72 65 73 73 20 70 6f 6f 6c 20 6e 61 6d 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | dress.pool.name..Use.this.comman |
115460 | 64 20 74 6f 20 64 65 66 69 6e 65 20 64 65 66 61 75 6c 74 20 61 64 64 72 65 73 73 20 70 6f 6f 6c | d.to.define.default.address.pool |
115480 | 20 6e 61 6d 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e | .name..Use.this.command.to.defin |
1154a0 | 65 20 64 6f 6d 61 69 6e 73 2c 20 6f 6e 65 20 61 74 20 61 20 74 69 6d 65 2c 20 73 6f 20 74 68 61 | e.domains,.one.at.a.time,.so.tha |
1154c0 | 74 20 74 68 65 20 73 79 73 74 65 6d 20 75 73 65 73 20 74 68 65 6d 20 74 6f 20 63 6f 6d 70 6c 65 | t.the.system.uses.them.to.comple |
1154e0 | 74 65 20 75 6e 71 75 61 6c 69 66 69 65 64 20 68 6f 73 74 20 6e 61 6d 65 73 2e 20 4d 61 78 69 6d | te.unqualified.host.names..Maxim |
115500 | 75 6d 3a 20 36 20 65 6e 74 72 69 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | um:.6.entries..Use.this.command. |
115520 | 74 6f 20 64 65 66 69 6e 65 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 | to.define.in.the.selected.interf |
115540 | 61 63 65 20 77 68 65 74 68 65 72 20 79 6f 75 20 63 68 6f 6f 73 65 20 49 47 4d 50 20 76 65 72 73 | ace.whether.you.choose.IGMP.vers |
115560 | 69 6f 6e 20 32 20 6f 72 20 33 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | ion.2.or.3..Use.this.command.to. |
115580 | 64 65 66 69 6e 65 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 | define.in.the.selected.interface |
1155a0 | 20 77 68 65 74 68 65 72 20 79 6f 75 20 63 68 6f 6f 73 65 20 49 47 4d 50 20 76 65 72 73 69 6f 6e | .whether.you.choose.IGMP.version |
1155c0 | 20 32 20 6f 72 20 33 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 33 2e | .2.or.3..The.default.value.is.3. |
1155e0 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 | .Use.this.command.to.define.the. |
115600 | 49 50 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 | IP.address.range.to.be.given.to. |
115620 | 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 | PPPoE.clients..If.notation.``x.x |
115640 | 2e 78 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 | .x.x-x.x.x.x``,.it.must.be.withi |
115660 | 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e | n.a./24.subnet..If.notation.``x. |
115680 | 78 2e 78 2e 78 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 68 65 72 65 20 69 73 20 70 6f 73 73 69 | x.x.x/x``.is.used.there.is.possi |
1156a0 | 62 69 6c 69 74 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 73 65 20 | bility.to.set.host/netmask..Use. |
1156c0 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 66 69 72 73 74 | this.command.to.define.the.first |
1156e0 | 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 | .IP.address.of.a.pool.of.address |
115700 | 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 49 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 | es.to.be.given.to.IPoE.clients.. |
115720 | 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 2c | If.notation.``x.x.x.x-x.x.x.x``, |
115740 | 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e | .it.must.be.within.a./24.subnet. |
115760 | 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 69 73 20 75 73 | .If.notation.``x.x.x.x/x``.is.us |
115780 | 65 64 20 74 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 73 65 74 20 68 | ed.there.is.possibility.to.set.h |
1157a0 | 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | ost/netmask..Use.this.command.to |
1157c0 | 20 64 65 66 69 6e 65 20 74 68 65 20 66 69 72 73 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 | .define.the.first.IP.address.of. |
1157e0 | 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e 20 | a.pool.of.addresses.to.be.given. |
115800 | 74 6f 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 49 74 20 6d 75 73 74 20 62 65 20 77 69 74 | to.PPPoE.clients..It.must.be.wit |
115820 | 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | hin.a./24.subnet..Use.this.comma |
115840 | 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 66 69 72 73 74 20 49 50 20 61 64 64 72 65 73 | nd.to.define.the.first.IP.addres |
115860 | 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 | s.of.a.pool.of.addresses.to.be.g |
115880 | 69 76 65 6e 20 74 6f 20 50 50 54 50 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e 6f 74 61 74 69 6f | iven.to.PPTP.clients..If.notatio |
1158a0 | 6e 20 60 60 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 6d 75 73 74 20 62 | n.``x.x.x.x-x.x.x.x``,.it.must.b |
1158c0 | 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 6e 6f 74 61 74 69 | e.within.a./24.subnet..If.notati |
1158e0 | 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 68 65 72 65 20 69 | on.``x.x.x.x/x``.is.used.there.i |
115900 | 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f 6e 65 74 6d 61 73 | s.possibility.to.set.host/netmas |
115920 | 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 | k..Use.this.command.to.define.th |
115940 | 65 20 66 69 72 73 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 | e.first.IP.address.of.a.pool.of. |
115960 | 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 53 53 54 50 20 63 6c | addresses.to.be.given.to.SSTP.cl |
115980 | 69 65 6e 74 73 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d 78 2e 78 | ients..If.notation.``x.x.x.x-x.x |
1159a0 | 2e 78 2e 78 60 60 2c 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 | .x.x``,.it.must.be.within.a./24. |
1159c0 | 73 75 62 6e 65 74 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2f 78 60 | subnet..If.notation.``x.x.x.x/x` |
1159e0 | 60 20 69 73 20 75 73 65 64 20 74 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 | `.is.used.there.is.possibility.t |
115a00 | 6f 20 73 65 74 20 68 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | o.set.host/netmask..Use.this.com |
115a20 | 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 66 69 72 73 74 20 49 50 20 61 64 64 72 | mand.to.define.the.first.IP.addr |
115a40 | 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 | ess.of.a.pool.of.addresses.to.be |
115a60 | 20 67 69 76 65 6e 20 74 6f 20 6c 32 74 70 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e 6f 74 61 74 | .given.to.l2tp.clients..If.notat |
115a80 | 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 6d 75 73 74 | ion.``x.x.x.x-x.x.x.x``,.it.must |
115aa0 | 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 6e 6f 74 61 | .be.within.a./24.subnet..If.nota |
115ac0 | 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 68 65 72 65 | tion.``x.x.x.x/x``.is.used.there |
115ae0 | 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f 6e 65 74 6d | .is.possibility.to.set.host/netm |
115b00 | 61 73 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 | ask..Use.this.command.to.define. |
115b20 | 74 68 65 20 66 69 72 73 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f | the.first.IP.address.of.a.pool.o |
115b40 | 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 70 70 70 6f 65 | f.addresses.to.be.given.to.pppoe |
115b60 | 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d | .clients..If.notation.``x.x.x.x- |
115b80 | 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f | x.x.x.x``,.it.must.be.within.a./ |
115ba0 | 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 | 24.subnet..If.notation.``x.x.x.x |
115bc0 | 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 | /x``.is.used.there.is.possibilit |
115be0 | 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 69 73 20 | y.to.set.host/netmask..Use.this. |
115c00 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 | command.to.define.the.interface. |
115c20 | 74 68 65 20 50 50 50 6f 45 20 73 65 72 76 65 72 20 77 69 6c 6c 20 75 73 65 20 74 6f 20 6c 69 73 | the.PPPoE.server.will.use.to.lis |
115c40 | 74 65 6e 20 66 6f 72 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 00 55 73 65 20 74 68 69 73 20 | ten.for.PPPoE.clients..Use.this. |
115c60 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 6c 61 73 74 20 49 50 20 61 64 | command.to.define.the.last.IP.ad |
115c80 | 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 | dress.of.a.pool.of.addresses.to. |
115ca0 | 62 65 20 67 69 76 65 6e 20 74 6f 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 49 74 20 6d 75 | be.given.to.PPPoE.clients..It.mu |
115cc0 | 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 00 55 73 65 20 74 | st.be.within.a./24.subnet..Use.t |
115ce0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 6c 65 6e 67 74 68 | his.command.to.define.the.length |
115d00 | 20 6f 66 20 74 68 65 20 71 75 65 75 65 20 6f 66 20 79 6f 75 72 20 4e 65 74 77 6f 72 6b 20 45 6d | .of.the.queue.of.your.Network.Em |
115d20 | 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 53 65 74 20 74 68 65 20 70 6f 6c 69 63 79 20 6e 61 | ulator.policy..Set.the.policy.na |
115d40 | 6d 65 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 | me.and.the.maximum.number.of.pac |
115d60 | 6b 65 74 73 20 28 31 2d 34 32 39 34 39 36 37 32 39 35 29 20 74 68 65 20 71 75 65 75 65 20 6d 61 | kets.(1-4294967295).the.queue.ma |
115d80 | 79 20 68 6f 6c 64 20 71 75 65 75 65 64 20 61 74 20 61 20 74 69 6d 65 2e 00 55 73 65 20 74 68 69 | y.hold.queued.at.a.time..Use.thi |
115da0 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 | s.command.to.define.the.maximum. |
115dc0 | 6e 75 6d 62 65 72 20 6f 66 20 65 6e 74 72 69 65 73 20 74 6f 20 6b 65 65 70 20 69 6e 20 74 68 65 | number.of.entries.to.keep.in.the |
115de0 | 20 41 52 50 20 63 61 63 68 65 20 28 31 30 32 34 2c 20 32 30 34 38 2c 20 34 30 39 36 2c 20 38 31 | .ARP.cache.(1024,.2048,.4096,.81 |
115e00 | 39 32 2c 20 31 36 33 38 34 2c 20 33 32 37 36 38 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | 92,.16384,.32768)..Use.this.comm |
115e20 | 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 | and.to.define.the.maximum.number |
115e40 | 20 6f 66 20 65 6e 74 72 69 65 73 20 74 6f 20 6b 65 65 70 20 69 6e 20 74 68 65 20 4e 65 69 67 68 | .of.entries.to.keep.in.the.Neigh |
115e60 | 62 6f 72 20 63 61 63 68 65 20 28 31 30 32 34 2c 20 32 30 34 38 2c 20 34 30 39 36 2c 20 38 31 39 | bor.cache.(1024,.2048,.4096,.819 |
115e80 | 32 2c 20 31 36 33 38 34 2c 20 33 32 37 36 38 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | 2,.16384,.32768)..Use.this.comma |
115ea0 | 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 6e 65 78 74 20 61 64 64 72 65 73 73 20 70 6f | nd.to.define.the.next.address.po |
115ec0 | 6f 6c 20 6e 61 6d 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 | ol.name..Use.this.command.to.def |
115ee0 | 69 6e 65 20 77 68 65 74 68 65 72 20 79 6f 75 72 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 20 77 | ine.whether.your.PPPoE.clients.w |
115f00 | 69 6c 6c 20 6c 6f 63 61 6c 6c 79 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 69 6e 20 79 6f 75 72 | ill.locally.authenticate.in.your |
115f20 | 20 56 79 4f 53 20 73 79 73 74 65 6d 20 6f 72 20 69 6e 20 52 41 44 49 55 53 20 73 65 72 76 65 72 | .VyOS.system.or.in.RADIUS.server |
115f40 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 72 65 63 74 20 61 6e 20 | ..Use.this.command.to.direct.an. |
115f60 | 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6e 6f 74 20 64 65 74 65 63 74 20 61 6e 79 20 70 68 79 73 | interface.to.not.detect.any.phys |
115f80 | 69 63 61 6c 20 73 74 61 74 65 20 63 68 61 6e 67 65 73 20 6f 6e 20 61 20 6c 69 6e 6b 2c 20 66 6f | ical.state.changes.on.a.link,.fo |
115fa0 | 72 20 65 78 61 6d 70 6c 65 2c 20 77 68 65 6e 20 74 68 65 20 63 61 62 6c 65 20 69 73 20 75 6e 70 | r.example,.when.the.cable.is.unp |
115fc0 | 6c 75 67 67 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 61 | lugged..Use.this.command.to.disa |
115fe0 | 62 6c 65 20 49 50 76 34 20 64 69 72 65 63 74 65 64 20 62 72 6f 61 64 63 61 73 74 20 66 6f 72 77 | ble.IPv4.directed.broadcast.forw |
116000 | 61 72 64 69 6e 67 20 6f 6e 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 | arding.on.all.interfaces..Use.th |
116020 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 20 49 50 76 34 20 66 6f 72 77 61 | is.command.to.disable.IPv4.forwa |
116040 | 72 64 69 6e 67 20 6f 6e 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 | rding.on.all.interfaces..Use.thi |
116060 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 20 49 50 76 36 20 66 6f 72 77 61 72 | s.command.to.disable.IPv6.forwar |
116080 | 64 69 6e 67 20 6f 6e 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 | ding.on.all.interfaces..Use.this |
1160a0 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 20 49 50 76 36 20 6f 70 65 72 61 74 69 | .command.to.disable.IPv6.operati |
1160c0 | 6f 6e 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 6e 20 44 75 70 6c 69 63 61 74 65 20 41 | on.on.interface.when.Duplicate.A |
1160e0 | 64 64 72 65 73 73 20 44 65 74 65 63 74 69 6f 6e 20 66 61 69 6c 73 20 6f 6e 20 4c 69 6e 6b 2d 4c | ddress.Detection.fails.on.Link-L |
116100 | 6f 63 61 6c 20 61 64 64 72 65 73 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | ocal.address..Use.this.command.t |
116120 | 6f 20 64 69 73 61 62 6c 65 20 74 68 65 20 67 65 6e 65 72 61 74 69 6f 6e 20 6f 66 20 45 74 68 65 | o.disable.the.generation.of.Ethe |
116140 | 72 6e 65 74 20 66 6c 6f 77 20 63 6f 6e 74 72 6f 6c 20 28 70 61 75 73 65 20 66 72 61 6d 65 73 29 | rnet.flow.control.(pause.frames) |
116160 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6d 75 6c 61 74 65 20 6e 6f | ..Use.this.command.to.emulate.no |
116180 | 69 73 65 20 69 6e 20 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 | ise.in.a.Network.Emulator.policy |
1161a0 | 2e 20 53 65 74 20 74 68 65 20 70 6f 6c 69 63 79 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 70 65 | ..Set.the.policy.name.and.the.pe |
1161c0 | 72 63 65 6e 74 61 67 65 20 6f 66 20 63 6f 72 72 75 70 74 65 64 20 70 61 63 6b 65 74 73 20 79 6f | rcentage.of.corrupted.packets.yo |
1161e0 | 75 20 77 61 6e 74 2e 20 41 20 72 61 6e 64 6f 6d 20 65 72 72 6f 72 20 77 69 6c 6c 20 62 65 20 69 | u.want..A.random.error.will.be.i |
116200 | 6e 74 72 6f 64 75 63 65 64 20 69 6e 20 61 20 72 61 6e 64 6f 6d 20 70 6f 73 69 74 69 6f 6e 20 66 | ntroduced.in.a.random.position.f |
116220 | 6f 72 20 74 68 65 20 63 68 6f 73 65 6e 20 70 65 72 63 65 6e 74 20 6f 66 20 70 61 63 6b 65 74 73 | or.the.chosen.percent.of.packets |
116240 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6d 75 6c 61 74 65 20 70 61 | ..Use.this.command.to.emulate.pa |
116260 | 63 6b 65 74 2d 6c 6f 73 73 20 63 6f 6e 64 69 74 69 6f 6e 73 20 69 6e 20 61 20 4e 65 74 77 6f 72 | cket-loss.conditions.in.a.Networ |
116280 | 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 53 65 74 20 74 68 65 20 70 6f 6c 69 63 | k.Emulator.policy..Set.the.polic |
1162a0 | 79 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 70 65 72 63 65 6e 74 61 67 65 20 6f 66 20 6c 6f 73 | y.name.and.the.percentage.of.los |
1162c0 | 73 20 70 61 63 6b 65 74 73 20 79 6f 75 72 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 73 75 66 66 | s.packets.your.traffic.will.suff |
1162e0 | 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6d 75 6c 61 74 65 20 | er..Use.this.command.to.emulate. |
116300 | 70 61 63 6b 65 74 2d 72 65 6f 72 64 65 72 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 20 69 6e 20 | packet-reordering.conditions.in. |
116320 | 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 53 65 74 20 74 | a.Network.Emulator.policy..Set.t |
116340 | 68 65 20 70 6f 6c 69 63 79 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 70 65 72 63 65 6e 74 61 67 | he.policy.name.and.the.percentag |
116360 | 65 20 6f 66 20 72 65 6f 72 64 65 72 65 64 20 70 61 63 6b 65 74 73 20 79 6f 75 72 20 74 72 61 66 | e.of.reordered.packets.your.traf |
116380 | 66 69 63 20 77 69 6c 6c 20 73 75 66 66 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | fic.will.suffer..Use.this.comman |
1163a0 | 64 20 74 6f 20 65 6e 61 62 6c 65 20 4c 44 50 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 | d.to.enable.LDP.on.the.interface |
1163c0 | 20 79 6f 75 20 64 65 66 69 6e 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | .you.define..Use.this.command.to |
1163e0 | 20 65 6e 61 62 6c 65 20 4d 50 4c 53 20 70 72 6f 63 65 73 73 69 6e 67 20 6f 6e 20 74 68 65 20 69 | .enable.MPLS.processing.on.the.i |
116400 | 6e 74 65 72 66 61 63 65 20 79 6f 75 20 64 65 66 69 6e 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f | nterface.you.define..Use.this.co |
116420 | 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 50 49 4d 20 69 6e 20 74 68 65 20 73 65 6c 65 63 | mmand.to.enable.PIM.in.the.selec |
116440 | 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 73 6f 20 74 68 61 74 20 69 74 20 63 61 6e 20 63 6f 6d | ted.interface.so.that.it.can.com |
116460 | 6d 75 6e 69 63 61 74 65 20 77 69 74 68 20 50 49 4d 20 6e 65 69 67 68 62 6f 72 73 2e 00 55 73 65 | municate.with.PIM.neighbors..Use |
116480 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 50 49 4d 76 36 20 69 6e | .this.command.to.enable.PIMv6.in |
1164a0 | 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 73 6f 20 74 68 61 74 20 | .the.selected.interface.so.that. |
1164c0 | 69 74 20 63 61 6e 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 77 69 74 68 20 50 49 4d 76 36 20 6e 65 | it.can.communicate.with.PIMv6.ne |
1164e0 | 69 67 68 62 6f 72 73 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 73 6f 20 65 6e 61 62 6c | ighbors..This.command.also.enabl |
116500 | 65 73 20 4d 4c 44 20 72 65 70 6f 72 74 73 20 61 6e 64 20 71 75 65 72 79 20 6f 6e 20 74 68 65 20 | es.MLD.reports.and.query.on.the. |
116520 | 69 6e 74 65 72 66 61 63 65 20 75 6e 6c 65 73 73 20 3a 63 66 67 63 6d 64 3a 60 6d 6c 64 20 64 69 | interface.unless.:cfgcmd:`mld.di |
116540 | 73 61 62 6c 65 60 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 | sable`.is.configured..Use.this.c |
116560 | 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 61 63 71 75 69 73 69 74 69 6f 6e 20 6f 66 20 | ommand.to.enable.acquisition.of. |
116580 | 49 50 76 36 20 61 64 64 72 65 73 73 20 75 73 69 6e 67 20 73 74 61 74 65 6c 65 73 73 20 61 75 74 | IPv6.address.using.stateless.aut |
1165a0 | 6f 63 6f 6e 66 69 67 20 28 53 4c 41 41 43 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | oconfig.(SLAAC)..Use.this.comman |
1165c0 | 64 20 74 6f 20 65 6e 61 62 6c 65 20 62 61 6e 64 77 69 64 74 68 20 73 68 61 70 69 6e 67 20 76 69 | d.to.enable.bandwidth.shaping.vi |
1165e0 | 61 20 52 41 44 49 55 53 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e | a.RADIUS..Use.this.command.to.en |
116600 | 61 62 6c 65 20 70 72 6f 78 79 20 41 64 64 72 65 73 73 20 52 65 73 6f 6c 75 74 69 6f 6e 20 50 72 | able.proxy.Address.Resolution.Pr |
116620 | 6f 74 6f 63 6f 6c 20 28 41 52 50 29 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 20 | otocol.(ARP).on.this.interface.. |
116640 | 50 72 6f 78 79 20 41 52 50 20 61 6c 6c 6f 77 73 20 61 6e 20 45 74 68 65 72 6e 65 74 20 69 6e 74 | Proxy.ARP.allows.an.Ethernet.int |
116660 | 65 72 66 61 63 65 20 74 6f 20 72 65 73 70 6f 6e 64 20 77 69 74 68 20 69 74 73 20 6f 77 6e 20 3a | erface.to.respond.with.its.own.: |
116680 | 61 62 62 72 3a 60 4d 41 43 20 28 4d 65 64 69 61 20 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c 29 | abbr:`MAC.(Media.Access.Control) |
1166a0 | 60 20 61 64 64 72 65 73 73 20 74 6f 20 41 52 50 20 72 65 71 75 65 73 74 73 20 66 6f 72 20 64 65 | `.address.to.ARP.requests.for.de |
1166c0 | 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 65 73 20 6f 6e 20 73 75 62 6e 65 74 | stination.IP.addresses.on.subnet |
1166e0 | 73 20 61 74 74 61 63 68 65 64 20 74 6f 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 6f | s.attached.to.other.interfaces.o |
116700 | 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 20 53 75 62 73 65 71 75 65 6e 74 20 70 61 63 6b 65 74 73 | n.the.system..Subsequent.packets |
116720 | 20 73 65 6e 74 20 74 6f 20 74 68 6f 73 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 | .sent.to.those.destination.IP.ad |
116740 | 64 72 65 73 73 65 73 20 61 72 65 20 66 6f 72 77 61 72 64 65 64 20 61 70 70 72 6f 70 72 69 61 74 | dresses.are.forwarded.appropriat |
116760 | 65 6c 79 20 62 79 20 74 68 65 20 73 79 73 74 65 6d 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | ely.by.the.system..Use.this.comm |
116780 | 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 61 72 67 65 74 65 64 20 4c 44 50 20 73 65 73 73 69 | and.to.enable.targeted.LDP.sessi |
1167a0 | 6f 6e 73 20 74 6f 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2e 20 54 68 65 20 72 6f 75 | ons.to.the.local.router..The.rou |
1167c0 | 74 65 72 20 77 69 6c 6c 20 74 68 65 6e 20 72 65 73 70 6f 6e 64 20 74 6f 20 61 6e 79 20 73 65 73 | ter.will.then.respond.to.any.ses |
1167e0 | 73 69 6f 6e 73 20 74 68 61 74 20 61 72 65 20 74 72 79 69 6e 67 20 74 6f 20 63 6f 6e 6e 65 63 74 | sions.that.are.trying.to.connect |
116800 | 20 74 6f 20 69 74 20 74 68 61 74 20 61 72 65 20 6e 6f 74 20 61 20 6c 69 6e 6b 20 6c 6f 63 61 6c | .to.it.that.are.not.a.link.local |
116820 | 20 74 79 70 65 20 6f 66 20 54 43 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 | .type.of.TCP.connection..Use.thi |
116840 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 64 65 6c 61 79 20 6f 66 | s.command.to.enable.the.delay.of |
116860 | 20 50 41 44 4f 20 28 50 50 50 6f 45 20 41 63 74 69 76 65 20 44 69 73 63 6f 76 65 72 79 20 4f 66 | .PADO.(PPPoE.Active.Discovery.Of |
116880 | 66 65 72 29 20 70 61 63 6b 65 74 73 2c 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 75 73 65 64 20 | fer).packets,.which.can.be.used. |
1168a0 | 61 73 20 61 20 73 65 73 73 69 6f 6e 20 62 61 6c 61 6e 63 69 6e 67 20 6d 65 63 68 61 6e 69 73 6d | as.a.session.balancing.mechanism |
1168c0 | 20 77 69 74 68 20 6f 74 68 65 72 20 50 50 50 6f 45 20 73 65 72 76 65 72 73 2e 00 55 73 65 20 74 | .with.other.PPPoE.servers..Use.t |
1168e0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 6c 6f 63 61 6c 20 | his.command.to.enable.the.local. |
116900 | 72 6f 75 74 65 72 20 74 6f 20 74 72 79 20 61 6e 64 20 63 6f 6e 6e 65 63 74 20 77 69 74 68 20 61 | router.to.try.and.connect.with.a |
116920 | 20 74 61 72 67 65 74 65 64 20 4c 44 50 20 73 65 73 73 69 6f 6e 20 74 6f 20 61 6e 6f 74 68 65 72 | .targeted.LDP.session.to.another |
116940 | 20 72 6f 75 74 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 | .router..Use.this.command.to.ena |
116960 | 62 6c 65 20 74 68 65 20 6c 6f 67 67 69 6e 67 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 | ble.the.logging.of.the.default.a |
116980 | 63 74 69 6f 6e 20 6f 6e 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 73 2e 00 55 73 65 20 74 68 69 73 | ction.on.custom.chains..Use.this |
1169a0 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 6c 6f 67 67 69 6e 67 20 6f | .command.to.enable.the.logging.o |
1169c0 | 66 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 6f 6e 20 74 68 65 20 73 70 65 63 | f.the.default.action.on.the.spec |
1169e0 | 69 66 69 65 64 20 63 68 61 69 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | ified.chain..Use.this.command.to |
116a00 | 20 65 6e 61 62 6c 65 20 74 68 65 20 6c 6f 67 67 69 6e 67 20 6f 66 20 74 68 65 20 64 65 66 61 75 | .enable.the.logging.of.the.defau |
116a20 | 6c 74 20 61 63 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 | lt.action..Use.this.command.to.e |
116a40 | 6e 61 62 6c 65 2c 20 64 69 73 61 62 6c 65 2c 20 6f 72 20 73 70 65 63 69 66 79 20 68 6f 70 20 63 | nable,.disable,.or.specify.hop.c |
116a60 | 6f 75 6e 74 20 66 6f 72 20 54 54 4c 20 73 65 63 75 72 69 74 79 20 66 6f 72 20 4c 44 50 20 70 65 | ount.for.TTL.security.for.LDP.pe |
116a80 | 65 72 73 2e 20 42 79 20 64 65 66 61 75 6c 74 20 74 68 65 20 76 61 6c 75 65 20 69 73 20 73 65 74 | ers..By.default.the.value.is.set |
116aa0 | 20 74 6f 20 32 35 35 20 28 6f 72 20 6d 61 78 20 54 54 4c 29 2e 00 55 73 65 20 74 68 69 73 20 63 | .to.255.(or.max.TTL)..Use.this.c |
116ac0 | 6f 6d 6d 61 6e 64 20 74 6f 20 66 6c 75 73 68 20 74 68 65 20 6b 65 72 6e 65 6c 20 49 50 76 36 20 | ommand.to.flush.the.kernel.IPv6. |
116ae0 | 72 6f 75 74 65 20 63 61 63 68 65 2e 20 41 6e 20 61 64 64 72 65 73 73 20 63 61 6e 20 62 65 20 61 | route.cache..An.address.can.be.a |
116b00 | 64 64 65 64 20 74 6f 20 66 6c 75 73 68 20 69 74 20 6f 6e 6c 79 20 66 6f 72 20 74 68 61 74 20 72 | dded.to.flush.it.only.for.that.r |
116b20 | 6f 75 74 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 67 65 74 20 61 6e | oute..Use.this.command.to.get.an |
116b40 | 20 6f 76 65 72 76 69 65 77 20 6f 66 20 61 20 7a 6f 6e 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f | .overview.of.a.zone..Use.this.co |
116b60 | 6d 6d 61 6e 64 20 74 6f 20 67 65 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 4f | mmand.to.get.information.about.O |
116b80 | 53 50 46 76 33 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 67 65 74 20 69 | SPFv3..Use.this.command.to.get.i |
116ba0 | 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 52 49 50 4e 47 20 70 72 6f 74 6f | nformation.about.the.RIPNG.proto |
116bc0 | 63 6f 6c 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 6e 73 74 72 75 63 74 | col.Use.this.command.to.instruct |
116be0 | 20 74 68 65 20 73 79 73 74 65 6d 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 20 50 50 50 6f 45 | .the.system.to.establish.a.PPPoE |
116c00 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 6f 6e 63 65 20 74 | .connection.automatically.once.t |
116c20 | 72 61 66 66 69 63 20 70 61 73 73 65 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 69 6e 74 65 72 66 | raffic.passes.through.the.interf |
116c40 | 61 63 65 2e 20 41 20 64 69 73 61 62 6c 65 64 20 6f 6e 2d 64 65 6d 61 6e 64 20 63 6f 6e 6e 65 63 | ace..A.disabled.on-demand.connec |
116c60 | 74 69 6f 6e 20 69 73 20 65 73 74 61 62 6c 69 73 68 65 64 20 61 74 20 62 6f 6f 74 20 74 69 6d 65 | tion.is.established.at.boot.time |
116c80 | 20 61 6e 64 20 72 65 6d 61 69 6e 73 20 75 70 2e 20 49 66 20 74 68 65 20 6c 69 6e 6b 20 66 61 69 | .and.remains.up..If.the.link.fai |
116ca0 | 6c 73 20 66 6f 72 20 61 6e 79 20 72 65 61 73 6f 6e 2c 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 62 | ls.for.any.reason,.the.link.is.b |
116cc0 | 72 6f 75 67 68 74 20 62 61 63 6b 20 75 70 20 69 6d 6d 65 64 69 61 74 65 6c 79 2e 00 55 73 65 20 | rought.back.up.immediately..Use. |
116ce0 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 69 6e 6b 20 74 68 65 20 50 50 50 6f 45 20 63 | this.command.to.link.the.PPPoE.c |
116d00 | 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 61 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 | onnection.to.a.physical.interfac |
116d20 | 65 2e 20 45 61 63 68 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6d 75 73 74 20 62 65 | e..Each.PPPoE.connection.must.be |
116d40 | 20 65 73 74 61 62 6c 69 73 68 65 64 20 6f 76 65 72 20 61 20 70 68 79 73 69 63 61 6c 20 69 6e 74 | .established.over.a.physical.int |
116d60 | 65 72 66 61 63 65 2e 20 49 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 62 65 20 72 65 67 75 6c 61 | erface..Interfaces.can.be.regula |
116d80 | 72 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 2c 20 56 49 46 73 20 6f 72 20 62 | r.Ethernet.interfaces,.VIFs.or.b |
116da0 | 6f 6e 64 69 6e 67 20 69 6e 74 65 72 66 61 63 65 73 2f 56 49 46 73 2e 00 55 73 65 20 74 68 69 73 | onding.interfaces/VIFs..Use.this |
116dc0 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 6f 63 61 6c 6c 79 20 63 68 65 63 6b 20 74 68 65 20 61 63 | .command.to.locally.check.the.ac |
116de0 | 74 69 76 65 20 73 65 73 73 69 6f 6e 73 20 69 6e 20 74 68 65 20 49 50 6f 45 20 73 65 72 76 65 72 | tive.sessions.in.the.IPoE.server |
116e00 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 6f 63 61 6c 6c 79 20 63 68 | ..Use.this.command.to.locally.ch |
116e20 | 65 63 6b 20 74 68 65 20 61 63 74 69 76 65 20 73 65 73 73 69 6f 6e 73 20 69 6e 20 74 68 65 20 50 | eck.the.active.sessions.in.the.P |
116e40 | 50 50 6f 45 20 73 65 72 76 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | PPoE.server..Use.this.command.to |
116e60 | 20 6c 6f 63 61 6c 6c 79 20 63 68 65 63 6b 20 74 68 65 20 61 63 74 69 76 65 20 73 65 73 73 69 6f | .locally.check.the.active.sessio |
116e80 | 6e 73 20 69 6e 20 74 68 65 20 50 50 54 50 20 73 65 72 76 65 72 2e 00 55 73 65 20 74 68 69 73 20 | ns.in.the.PPTP.server..Use.this. |
116ea0 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 6f 63 61 6c 6c 79 20 63 68 65 63 6b 20 74 68 65 20 61 63 74 | command.to.locally.check.the.act |
116ec0 | 69 76 65 20 73 65 73 73 69 6f 6e 73 20 69 6e 20 74 68 65 20 53 53 54 50 20 73 65 72 76 65 72 2e | ive.sessions.in.the.SSTP.server. |
116ee0 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6d 61 6e 75 61 6c 6c 79 20 63 6f | .Use.this.command.to.manually.co |
116f00 | 6e 66 69 67 75 72 65 20 61 20 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 20 66 6f 72 20 50 | nfigure.a.Rendezvous.Point.for.P |
116f20 | 49 4d 20 73 6f 20 74 68 61 74 20 6a 6f 69 6e 20 6d 65 73 73 61 67 65 73 20 63 61 6e 20 62 65 20 | IM.so.that.join.messages.can.be. |
116f40 | 73 65 6e 74 20 74 68 65 72 65 2e 20 53 65 74 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f | sent.there..Set.the.Rendevouz.Po |
116f60 | 69 6e 74 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 70 72 65 | int.address.and.the.matching.pre |
116f80 | 66 69 78 20 6f 66 20 67 72 6f 75 70 20 72 61 6e 67 65 73 20 63 6f 76 65 72 65 64 2e 20 54 68 65 | fix.of.group.ranges.covered..The |
116fa0 | 73 65 20 76 61 6c 75 65 73 20 6d 75 73 74 20 62 65 20 73 68 61 72 65 64 20 77 69 74 68 20 65 76 | se.values.must.be.shared.with.ev |
116fc0 | 65 72 79 20 72 6f 75 74 65 72 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 69 6e 20 74 68 65 20 | ery.router.participating.in.the. |
116fe0 | 50 49 4d 20 6e 65 74 77 6f 72 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | PIM.network..Use.this.command.to |
117000 | 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 20 61 64 76 65 72 74 69 73 65 64 20 44 4e 53 20 6e 61 6d 65 | .not.install.advertised.DNS.name |
117020 | 73 65 72 76 65 72 73 20 69 6e 74 6f 20 74 68 65 20 6c 6f 63 61 6c 20 73 79 73 74 65 6d 2e 00 55 | servers.into.the.local.system..U |
117040 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 70 72 65 66 65 72 20 49 50 76 34 20 66 | se.this.command.to.prefer.IPv4.f |
117060 | 6f 72 20 54 43 50 20 70 65 65 72 20 74 72 61 6e 73 70 6f 72 74 20 63 6f 6e 6e 65 63 74 69 6f 6e | or.TCP.peer.transport.connection |
117080 | 20 66 6f 72 20 4c 44 50 20 77 68 65 6e 20 62 6f 74 68 20 61 6e 20 49 50 76 34 20 61 6e 64 20 49 | .for.LDP.when.both.an.IPv4.and.I |
1170a0 | 50 76 36 20 4c 44 50 20 61 64 64 72 65 73 73 20 61 72 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6f | Pv6.LDP.address.are.configured.o |
1170c0 | 6e 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 | n.the.same.interface..Use.this.c |
1170e0 | 6f 6d 6d 61 6e 64 20 74 6f 20 72 65 73 65 74 20 49 50 76 36 20 4e 65 69 67 68 62 6f 72 20 44 69 | ommand.to.reset.IPv6.Neighbor.Di |
117100 | 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 20 63 61 63 68 65 20 66 6f 72 20 61 6e 20 61 64 | scovery.Protocol.cache.for.an.ad |
117120 | 64 72 65 73 73 20 6f 72 20 69 6e 74 65 72 66 61 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | dress.or.interface..Use.this.com |
117140 | 6d 61 6e 64 20 74 6f 20 72 65 73 65 74 20 61 6e 20 4c 44 50 20 6e 65 69 67 68 62 6f 72 2f 54 43 | mand.to.reset.an.LDP.neighbor/TC |
117160 | 50 20 73 65 73 73 69 6f 6e 20 74 68 61 74 20 69 73 20 65 73 74 61 62 6c 69 73 68 65 64 00 55 73 | P.session.that.is.established.Us |
117180 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 72 65 73 65 74 20 74 68 65 20 4f 70 65 6e | e.this.command.to.reset.the.Open |
1171a0 | 56 50 4e 20 70 72 6f 63 65 73 73 20 6f 6e 20 61 20 73 70 65 63 69 66 69 63 20 69 6e 74 65 72 66 | VPN.process.on.a.specific.interf |
1171c0 | 61 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 72 65 73 65 74 20 74 | ace..Use.this.command.to.reset.t |
1171e0 | 68 65 20 73 70 65 63 69 66 69 65 64 20 4f 70 65 6e 56 50 4e 20 63 6c 69 65 6e 74 2e 00 55 73 65 | he.specified.OpenVPN.client..Use |
117200 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 72 65 73 74 72 69 63 74 20 74 68 65 20 50 50 | .this.command.to.restrict.the.PP |
117220 | 50 6f 45 20 73 65 73 73 69 6f 6e 20 6f 6e 20 61 20 67 69 76 65 6e 20 61 63 63 65 73 73 20 63 6f | PoE.session.on.a.given.access.co |
117240 | 6e 63 65 6e 74 72 61 74 6f 72 2e 20 4e 6f 72 6d 61 6c 6c 79 2c 20 61 20 68 6f 73 74 20 73 65 6e | ncentrator..Normally,.a.host.sen |
117260 | 64 73 20 61 20 50 50 50 6f 45 20 69 6e 69 74 69 61 74 69 6f 6e 20 70 61 63 6b 65 74 20 74 6f 20 | ds.a.PPPoE.initiation.packet.to. |
117280 | 73 74 61 72 74 20 74 68 65 20 50 50 50 6f 45 20 64 69 73 63 6f 76 65 72 79 20 70 72 6f 63 65 73 | start.the.PPPoE.discovery.proces |
1172a0 | 73 2c 20 61 20 6e 75 6d 62 65 72 20 6f 66 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 | s,.a.number.of.access.concentrat |
1172c0 | 6f 72 73 20 72 65 73 70 6f 6e 64 20 77 69 74 68 20 6f 66 66 65 72 20 70 61 63 6b 65 74 73 20 61 | ors.respond.with.offer.packets.a |
1172e0 | 6e 64 20 74 68 65 20 68 6f 73 74 20 73 65 6c 65 63 74 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 72 | nd.the.host.selects.one.of.the.r |
117300 | 65 73 70 6f 6e 64 69 6e 67 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 73 20 74 | esponding.access.concentrators.t |
117320 | 6f 20 73 65 72 76 65 20 74 68 69 73 20 73 65 73 73 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 | o.serve.this.session..Use.this.c |
117340 | 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 65 20 4c 44 50 20 69 6e 74 65 72 66 61 63 65 20 69 6e 66 6f | ommand.to.see.LDP.interface.info |
117360 | 72 6d 61 74 69 6f 6e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 65 20 | rmation.Use.this.command.to.see. |
117380 | 4c 44 50 20 6e 65 69 67 68 62 6f 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 55 73 65 20 74 68 69 | LDP.neighbor.information.Use.thi |
1173a0 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 65 20 64 65 74 61 69 6c 65 64 20 4c 44 50 20 6e 65 | s.command.to.see.detailed.LDP.ne |
1173c0 | 69 67 68 62 6f 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | ighbor.information.Use.this.comm |
1173e0 | 61 6e 64 20 74 6f 20 73 65 65 20 64 69 73 63 6f 76 65 72 79 20 68 65 6c 6c 6f 20 69 6e 66 6f 72 | and.to.see.discovery.hello.infor |
117400 | 6d 61 74 69 6f 6e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 65 20 74 | mation.Use.this.command.to.see.t |
117420 | 68 65 20 4c 61 62 65 6c 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 42 61 73 65 2e 00 55 73 65 20 74 | he.Label.Information.Base..Use.t |
117440 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 61 20 6e 61 6d 65 20 66 6f 72 20 74 68 | his.command.to.set.a.name.for.th |
117460 | 69 73 20 50 50 50 6f 45 2d 73 65 72 76 65 72 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 | is.PPPoE-server.access.concentra |
117480 | 74 6f 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 72 65 2d | tor..Use.this.command.to.set.re- |
1174a0 | 64 69 61 6c 20 64 65 6c 61 79 20 74 69 6d 65 20 74 6f 20 62 65 20 75 73 65 64 20 77 69 74 68 20 | dial.delay.time.to.be.used.with. |
1174c0 | 70 65 72 73 69 73 74 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 73 2e 20 57 68 65 6e 20 74 68 65 | persist.PPPoE.sessions..When.the |
1174e0 | 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 20 69 73 20 74 65 72 6d 69 6e 61 74 65 64 20 62 79 20 | .PPPoE.session.is.terminated.by. |
117500 | 70 65 65 72 2c 20 61 6e 64 20 6f 6e 2d 64 65 6d 61 6e 64 20 6f 70 74 69 6f 6e 20 69 73 20 6e 6f | peer,.and.on-demand.option.is.no |
117520 | 74 20 73 65 74 2c 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 61 74 74 65 6d 70 74 20 74 | t.set,.the.router.will.attempt.t |
117540 | 6f 20 72 65 2d 65 73 74 61 62 6c 69 73 68 20 74 68 65 20 50 50 50 6f 45 20 6c 69 6e 6b 2e 00 55 | o.re-establish.the.PPPoE.link..U |
117560 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 20 61 64 | se.this.command.to.set.the.IP.ad |
117580 | 64 72 65 73 73 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 65 6e 64 70 6f 69 6e 74 20 6f 66 20 61 | dress.of.the.local.endpoint.of.a |
1175a0 | 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 2e 20 49 66 20 69 74 20 69 73 20 6e 6f 74 20 73 65 74 | .PPPoE.session..If.it.is.not.set |
1175c0 | 20 69 74 20 77 69 6c 6c 20 62 65 20 6e 65 67 6f 74 69 61 74 65 64 2e 00 55 73 65 20 74 68 69 73 | .it.will.be.negotiated..Use.this |
1175e0 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f | .command.to.set.the.IP.address.o |
117600 | 66 20 74 68 65 20 72 65 6d 6f 74 65 20 65 6e 64 70 6f 69 6e 74 20 6f 66 20 61 20 50 50 50 6f 45 | f.the.remote.endpoint.of.a.PPPoE |
117620 | 20 73 65 73 73 69 6f 6e 2e 20 49 66 20 69 74 20 69 73 20 6e 6f 74 20 73 65 74 20 69 74 20 77 69 | .session..If.it.is.not.set.it.wi |
117640 | 6c 6c 20 62 65 20 6e 65 67 6f 74 69 61 74 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | ll.be.negotiated..Use.this.comma |
117660 | 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 | nd.to.set.the.IPv4.or.IPv6.addre |
117680 | 73 73 20 6f 66 20 65 76 65 72 79 20 44 6f 6d 61 6e 20 4e 61 6d 65 20 53 65 72 76 65 72 20 79 6f | ss.of.every.Doman.Name.Server.yo |
1176a0 | 75 20 77 61 6e 74 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 2e 20 54 68 65 79 20 77 69 6c 6c 20 62 | u.want.to.configure..They.will.b |
1176c0 | 65 20 70 72 6f 70 61 67 61 74 65 64 20 74 6f 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 00 55 | e.propagated.to.PPPoE.clients..U |
1176e0 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 34 20 | se.this.command.to.set.the.IPv4. |
117700 | 6f 72 20 49 50 76 36 20 74 72 61 6e 73 70 6f 72 74 2d 61 64 64 72 65 73 73 20 75 73 65 64 20 62 | or.IPv6.transport-address.used.b |
117720 | 79 20 4c 44 50 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 | y.LDP..Use.this.command.to.set.t |
117740 | 68 65 20 69 64 6c 65 20 74 69 6d 65 6f 75 74 20 69 6e 74 65 72 76 61 6c 20 74 6f 20 62 65 20 75 | he.idle.timeout.interval.to.be.u |
117760 | 73 65 64 20 77 69 74 68 20 6f 6e 2d 64 65 6d 61 6e 64 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e | sed.with.on-demand.PPPoE.session |
117780 | 73 2e 20 57 68 65 6e 20 61 6e 20 6f 6e 2d 64 65 6d 61 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 | s..When.an.on-demand.connection. |
1177a0 | 69 73 20 65 73 74 61 62 6c 69 73 68 65 64 2c 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 62 72 6f 75 | is.established,.the.link.is.brou |
1177c0 | 67 68 74 20 75 70 20 6f 6e 6c 79 20 77 68 65 6e 20 74 72 61 66 66 69 63 20 69 73 20 73 65 6e 74 | ght.up.only.when.traffic.is.sent |
1177e0 | 20 61 6e 64 20 69 73 20 64 69 73 61 62 6c 65 64 20 77 68 65 6e 20 74 68 65 20 6c 69 6e 6b 20 69 | .and.is.disabled.when.the.link.i |
117800 | 73 20 69 64 6c 65 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 76 61 6c 20 73 70 65 63 69 66 69 65 | s.idle.for.the.interval.specifie |
117820 | 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 70 | d..Use.this.command.to.set.the.p |
117840 | 61 73 73 77 6f 72 64 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 77 69 74 68 20 | assword.for.authenticating.with. |
117860 | 61 20 72 65 6d 6f 74 65 20 50 50 50 6f 45 20 65 6e 64 70 6f 69 6e 74 2e 20 41 75 74 68 65 6e 74 | a.remote.PPPoE.endpoint..Authent |
117880 | 69 63 61 74 69 6f 6e 20 69 73 20 6f 70 74 69 6f 6e 61 6c 20 66 72 6f 6d 20 74 68 65 20 73 79 73 | ication.is.optional.from.the.sys |
1178a0 | 74 65 6d 27 73 20 70 6f 69 6e 74 20 6f 66 20 76 69 65 77 20 62 75 74 20 6d 6f 73 74 20 73 65 72 | tem's.point.of.view.but.most.ser |
1178c0 | 76 69 63 65 20 70 72 6f 76 69 64 65 72 73 20 72 65 71 75 69 72 65 20 69 74 2e 00 55 73 65 20 74 | vice.providers.require.it..Use.t |
1178e0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 74 61 72 67 65 74 20 74 6f | his.command.to.set.the.target.to |
117900 | 20 75 73 65 2e 20 41 63 74 69 6f 6e 20 71 75 65 75 65 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e | .use..Action.queue.must.be.defin |
117920 | 65 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 73 65 74 74 69 6e 67 00 55 73 65 20 74 68 69 73 20 | ed.to.use.this.setting.Use.this. |
117940 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 75 73 65 72 6e 61 6d 65 20 66 6f 72 20 | command.to.set.the.username.for. |
117960 | 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 77 69 74 68 20 61 20 72 65 6d 6f 74 65 20 50 50 50 | authenticating.with.a.remote.PPP |
117980 | 6f 45 20 65 6e 64 70 6f 69 6e 74 2e 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 6f | oE.endpoint..Authentication.is.o |
1179a0 | 70 74 69 6f 6e 61 6c 20 66 72 6f 6d 20 74 68 65 20 73 79 73 74 65 6d 27 73 20 70 6f 69 6e 74 20 | ptional.from.the.system's.point. |
1179c0 | 6f 66 20 76 69 65 77 20 62 75 74 20 6d 6f 73 74 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 | of.view.but.most.service.provide |
1179e0 | 72 73 20 72 65 71 75 69 72 65 20 69 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | rs.require.it..Use.this.command. |
117a00 | 74 6f 20 73 68 6f 77 20 49 50 76 36 20 42 6f 72 64 65 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 | to.show.IPv6.Border.Gateway.Prot |
117a20 | 6f 63 6f 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | ocol.information..Use.this.comma |
117a40 | 6e 64 20 74 6f 20 73 68 6f 77 20 49 50 76 36 20 4e 65 69 67 68 62 6f 72 20 44 69 73 63 6f 76 65 | nd.to.show.IPv6.Neighbor.Discove |
117a60 | 72 79 20 50 72 6f 74 6f 63 6f 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 | ry.Protocol.information..Use.thi |
117a80 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 49 50 76 36 20 66 6f 72 77 61 72 64 69 6e | s.command.to.show.IPv6.forwardin |
117aa0 | 67 20 73 74 61 74 75 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 | g.status..Use.this.command.to.sh |
117ac0 | 6f 77 20 49 50 76 36 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 6d 65 6d 62 65 72 73 68 | ow.IPv6.multicast.group.membersh |
117ae0 | 69 70 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 49 50 76 | ip..Use.this.command.to.show.IPv |
117b00 | 36 20 72 6f 75 74 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 | 6.routes..Use.this.command.to.sh |
117b20 | 6f 77 20 61 6c 6c 20 49 50 76 36 20 61 63 63 65 73 73 20 6c 69 73 74 73 00 55 73 65 20 74 68 69 | ow.all.IPv6.access.lists.Use.thi |
117b40 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 61 6c 6c 20 49 50 76 36 20 70 72 65 66 69 | s.command.to.show.all.IPv6.prefi |
117b60 | 78 20 6c 69 73 74 73 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 | x.lists.Use.this.command.to.show |
117b80 | 20 74 68 65 20 73 74 61 74 75 73 20 6f 66 20 74 68 65 20 52 49 50 4e 47 20 70 72 6f 74 6f 63 6f | .the.status.of.the.RIPNG.protoco |
117ba0 | 6c 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 61 20 | l.Use.this.command.to.specify.a. |
117bc0 | 44 4e 53 20 73 65 72 76 65 72 20 66 6f 72 20 74 68 65 20 73 79 73 74 65 6d 20 74 6f 20 62 65 20 | DNS.server.for.the.system.to.be. |
117be0 | 75 73 65 64 20 66 6f 72 20 44 4e 53 20 6c 6f 6f 6b 75 70 73 2e 20 4d 6f 72 65 20 74 68 61 6e 20 | used.for.DNS.lookups..More.than. |
117c00 | 6f 6e 65 20 44 4e 53 20 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 61 64 64 65 64 2c 20 63 6f 6e | one.DNS.server.can.be.added,.con |
117c20 | 66 69 67 75 72 69 6e 67 20 6f 6e 65 20 61 74 20 61 20 74 69 6d 65 2e 20 42 6f 74 68 20 49 50 76 | figuring.one.at.a.time..Both.IPv |
117c40 | 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 73 75 70 70 6f 72 74 | 4.and.IPv6.addresses.are.support |
117c60 | 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 | ed..Use.this.command.to.specify. |
117c80 | 61 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 74 6f 20 62 65 20 61 70 70 65 6e 64 65 64 20 74 6f 20 | a.domain.name.to.be.appended.to. |
117ca0 | 64 6f 6d 61 69 6e 2d 6e 61 6d 65 73 20 77 69 74 68 69 6e 20 55 52 4c 73 20 74 68 61 74 20 64 6f | domain-names.within.URLs.that.do |
117cc0 | 20 6e 6f 74 20 69 6e 63 6c 75 64 65 20 61 20 64 6f 74 20 60 60 2e 60 60 20 74 68 65 20 64 6f 6d | .not.include.a.dot.``.``.the.dom |
117ce0 | 61 69 6e 20 69 73 20 61 70 70 65 6e 64 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | ain.is.appended..Use.this.comman |
117d00 | 64 20 74 6f 20 73 70 65 63 69 66 79 20 61 20 73 65 72 76 69 63 65 20 6e 61 6d 65 20 62 79 20 77 | d.to.specify.a.service.name.by.w |
117d20 | 68 69 63 68 20 74 68 65 20 6c 6f 63 61 6c 20 50 50 50 6f 45 20 69 6e 74 65 72 66 61 63 65 20 63 | hich.the.local.PPPoE.interface.c |
117d40 | 61 6e 20 73 65 6c 65 63 74 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 73 20 74 | an.select.access.concentrators.t |
117d60 | 6f 20 63 6f 6e 6e 65 63 74 20 77 69 74 68 2e 20 49 74 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 | o.connect.with..It.will.connect. |
117d80 | 74 6f 20 61 6e 79 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 20 69 66 20 6e 6f | to.any.access.concentrator.if.no |
117da0 | 74 20 73 65 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 75 73 65 20 4c | t.set..Use.this.command.to.use.L |
117dc0 | 61 79 65 72 20 34 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 49 50 76 34 20 45 43 4d 50 | ayer.4.information.for.IPv4.ECMP |
117de0 | 20 68 61 73 68 69 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 75 73 | .hashing..Use.this.command.to.us |
117e00 | 65 20 61 20 43 69 73 63 6f 20 6e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 74 20 66 6f 72 6d 61 74 20 74 | e.a.Cisco.non-compliant.format.t |
117e20 | 6f 20 73 65 6e 64 20 61 6e 64 20 69 6e 74 65 72 70 72 65 74 20 74 68 65 20 44 75 61 6c 2d 53 74 | o.send.and.interpret.the.Dual-St |
117e40 | 61 63 6b 20 63 61 70 61 62 69 6c 69 74 79 20 54 4c 56 20 66 6f 72 20 49 50 76 36 20 4c 44 50 20 | ack.capability.TLV.for.IPv6.LDP. |
117e60 | 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 2e 20 54 68 69 73 20 69 73 20 72 65 6c 61 74 65 64 20 | communications..This.is.related. |
117e80 | 74 6f 20 3a 72 66 63 3a 60 37 35 35 32 60 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | to.:rfc:`7552`..Use.this.command |
117ea0 | 20 74 6f 20 75 73 65 20 6f 72 64 65 72 65 64 20 6c 61 62 65 6c 20 64 69 73 74 72 69 62 75 74 69 | .to.use.ordered.label.distributi |
117ec0 | 6f 6e 20 63 6f 6e 74 72 6f 6c 20 6d 6f 64 65 2e 20 46 52 52 20 62 79 20 64 65 66 61 75 6c 74 20 | on.control.mode..FRR.by.default. |
117ee0 | 75 73 65 73 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 6c 61 62 65 6c 20 64 69 73 74 72 69 62 75 74 | uses.independent.label.distribut |
117f00 | 69 6f 6e 20 63 6f 6e 74 72 6f 6c 20 6d 6f 64 65 20 66 6f 72 20 6c 61 62 65 6c 20 64 69 73 74 72 | ion.control.mode.for.label.distr |
117f20 | 69 62 75 74 69 6f 6e 2e 20 20 54 68 69 73 20 69 73 20 72 65 6c 61 74 65 64 20 74 6f 20 3a 72 66 | ibution...This.is.related.to.:rf |
117f40 | 63 3a 60 35 30 33 36 60 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 75 73 | c:`5036`..Use.this.command.to.us |
117f60 | 65 72 20 4c 61 79 65 72 20 34 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 45 43 4d 50 20 | er.Layer.4.information.for.ECMP. |
117f80 | 68 61 73 68 69 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 76 69 65 | hashing..Use.this.command.to.vie |
117fa0 | 77 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 73 74 61 74 75 73 20 61 6e 64 20 64 65 74 61 69 6c 73 | w.operational.status.and.details |
117fc0 | 20 77 69 72 65 6c 65 73 73 2d 73 70 65 63 69 66 69 63 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 | .wireless-specific.information.a |
117fe0 | 62 6f 75 74 20 61 6c 6c 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 | bout.all.wireless.interfaces..Us |
118000 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 76 69 65 77 20 6f 70 65 72 61 74 69 6f 6e | e.this.command.to.view.operation |
118020 | 61 6c 20 73 74 61 74 75 73 20 61 6e 64 20 77 69 72 65 6c 65 73 73 2d 73 70 65 63 69 66 69 63 20 | al.status.and.wireless-specific. |
118040 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 61 6c 6c 20 77 69 72 65 6c 65 73 73 20 69 | information.about.all.wireless.i |
118060 | 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 76 | nterfaces..Use.this.command.to.v |
118080 | 69 65 77 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 20 71 75 65 75 65 20 69 6e 66 | iew.wireless.interface.queue.inf |
1180a0 | 6f 72 6d 61 74 69 6f 6e 2e 20 54 68 65 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 | ormation..The.wireless.interface |
1180c0 | 20 69 64 65 6e 74 69 66 69 65 72 20 63 61 6e 20 72 61 6e 67 65 20 66 72 6f 6d 20 77 6c 61 6e 30 | .identifier.can.range.from.wlan0 |
1180e0 | 20 74 6f 20 77 6c 61 6e 39 39 39 2e 00 55 73 65 64 20 66 6f 72 20 74 72 6f 75 62 6c 65 73 68 6f | .to.wlan999..Used.for.troublesho |
118100 | 6f 74 69 6e 67 2e 00 55 73 65 64 20 74 6f 20 62 6c 6f 63 6b 20 61 20 73 70 65 63 69 66 69 63 20 | oting..Used.to.block.a.specific. |
118120 | 6d 69 6d 65 2d 74 79 70 65 2e 00 55 73 65 64 20 74 6f 20 62 6c 6f 63 6b 20 73 70 65 63 69 66 69 | mime-type..Used.to.block.specifi |
118140 | 63 20 64 6f 6d 61 69 6e 73 20 62 79 20 74 68 65 20 50 72 6f 78 79 2e 20 53 70 65 63 69 66 79 69 | c.domains.by.the.Proxy..Specifyi |
118160 | 6e 67 20 22 76 79 6f 73 2e 6e 65 74 22 20 77 69 6c 6c 20 62 6c 6f 63 6b 20 61 6c 6c 20 61 63 63 | ng."vyos.net".will.block.all.acc |
118180 | 65 73 73 20 74 6f 20 76 79 6f 73 2e 6e 65 74 2c 20 61 6e 64 20 73 70 65 63 69 66 79 69 6e 67 20 | ess.to.vyos.net,.and.specifying. |
1181a0 | 22 2e 78 78 78 22 20 77 69 6c 6c 20 62 6c 6f 63 6b 20 61 6c 6c 20 61 63 63 65 73 73 20 74 6f 20 | ".xxx".will.block.all.access.to. |
1181c0 | 55 52 4c 73 20 68 61 76 69 6e 67 20 61 6e 20 55 52 4c 20 65 6e 64 69 6e 67 20 6f 6e 20 2e 78 78 | URLs.having.an.URL.ending.on..xx |
1181e0 | 78 2e 00 55 73 65 72 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 62 65 20 70 75 74 20 74 6f 20 | x..User.interface.can.be.put.to. |
118200 | 56 52 46 20 63 6f 6e 74 65 78 74 20 76 69 61 20 52 41 44 49 55 53 20 41 63 63 65 73 73 2d 41 63 | VRF.context.via.RADIUS.Access-Ac |
118220 | 63 65 70 74 20 70 61 63 6b 65 74 2c 20 6f 72 20 63 68 61 6e 67 65 20 69 74 20 76 69 61 20 52 41 | cept.packet,.or.change.it.via.RA |
118240 | 44 49 55 53 20 43 6f 41 2e 20 60 60 41 63 63 65 6c 2d 56 52 46 2d 4e 61 6d 65 60 60 20 69 73 20 | DIUS.CoA..``Accel-VRF-Name``.is. |
118260 | 75 73 65 64 20 66 72 6f 6d 20 74 68 65 73 65 20 70 75 72 70 6f 73 65 73 2e 20 49 74 20 69 73 20 | used.from.these.purposes..It.is. |
118280 | 63 75 73 74 6f 6d 20 60 41 43 43 45 4c 2d 50 50 50 20 61 74 74 72 69 62 75 74 65 60 5f 2e 20 44 | custom.`ACCEL-PPP.attribute`_..D |
1182a0 | 65 66 69 6e 65 20 69 74 20 69 6e 20 79 6f 75 72 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 | efine.it.in.your.RADIUS.server.. |
1182c0 | 55 73 65 72 2d 6c 65 76 65 6c 20 6d 65 73 73 61 67 65 73 00 55 73 69 6e 67 20 27 73 6f 66 74 2d | User-level.messages.Using.'soft- |
1182e0 | 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 27 20 77 65 20 67 65 74 20 74 68 65 20 70 6f 6c 69 | reconfiguration'.we.get.the.poli |
118300 | 63 79 20 75 70 64 61 74 65 20 77 69 74 68 6f 75 74 20 62 6f 75 6e 63 69 6e 67 20 74 68 65 20 6e | cy.update.without.bouncing.the.n |
118320 | 65 69 67 68 62 6f 72 2e 00 55 73 69 6e 67 20 2a 2a 6f 70 65 6e 76 70 6e 2d 6f 70 74 69 6f 6e 20 | eighbor..Using.**openvpn-option. |
118340 | 2d 72 65 6e 65 67 2d 73 65 63 2a 2a 20 63 61 6e 20 62 65 20 74 72 69 63 6b 79 2e 20 54 68 69 73 | -reneg-sec**.can.be.tricky..This |
118360 | 20 6f 70 74 69 6f 6e 20 69 73 20 75 73 65 64 20 74 6f 20 72 65 6e 65 67 6f 74 69 61 74 65 20 64 | .option.is.used.to.renegotiate.d |
118380 | 61 74 61 20 63 68 61 6e 6e 65 6c 20 61 66 74 65 72 20 6e 20 73 65 63 6f 6e 64 73 2e 20 57 68 65 | ata.channel.after.n.seconds..Whe |
1183a0 | 6e 20 75 73 65 64 20 61 74 20 62 6f 74 68 20 73 65 72 76 65 72 20 61 6e 64 20 63 6c 69 65 6e 74 | n.used.at.both.server.and.client |
1183c0 | 2c 20 74 68 65 20 6c 6f 77 65 72 20 76 61 6c 75 65 20 77 69 6c 6c 20 74 72 69 67 67 65 72 20 74 | ,.the.lower.value.will.trigger.t |
1183e0 | 68 65 20 72 65 6e 65 67 6f 74 69 61 74 69 6f 6e 2e 20 49 66 20 79 6f 75 20 73 65 74 20 69 74 20 | he.renegotiation..If.you.set.it. |
118400 | 74 6f 20 30 20 6f 6e 20 6f 6e 65 20 73 69 64 65 20 6f 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 | to.0.on.one.side.of.the.connecti |
118420 | 6f 6e 20 28 74 6f 20 64 69 73 61 62 6c 65 20 69 74 29 2c 20 74 68 65 20 63 68 6f 73 65 6e 20 76 | on.(to.disable.it),.the.chosen.v |
118440 | 61 6c 75 65 20 6f 6e 20 74 68 65 20 6f 74 68 65 72 20 73 69 64 65 20 77 69 6c 6c 20 64 65 74 65 | alue.on.the.other.side.will.dete |
118460 | 72 6d 69 6e 65 20 77 68 65 6e 20 74 68 65 20 72 65 6e 65 67 6f 74 69 61 74 69 6f 6e 20 77 69 6c | rmine.when.the.renegotiation.wil |
118480 | 6c 20 6f 63 63 75 72 2e 00 55 73 69 6e 67 20 42 47 50 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e | l.occur..Using.BGP.confederation |
1184a0 | 00 55 73 69 6e 67 20 42 47 50 20 72 6f 75 74 65 2d 72 65 66 6c 65 63 74 6f 72 73 00 55 73 69 6e | .Using.BGP.route-reflectors.Usin |
1184c0 | 67 20 56 4c 41 4e 20 61 77 61 72 65 20 42 72 69 64 67 65 00 55 73 69 6e 67 20 6f 75 72 20 64 6f | g.VLAN.aware.Bridge.Using.our.do |
1184e0 | 63 75 6d 65 6e 74 61 74 69 6f 6e 20 63 68 61 70 74 65 72 20 2d 20 3a 72 65 66 3a 60 70 6b 69 60 | cumentation.chapter.-.:ref:`pki` |
118500 | 20 67 65 6e 65 72 61 74 65 20 61 6e 64 20 69 6e 73 74 61 6c 6c 20 43 41 20 61 6e 64 20 53 65 72 | .generate.and.install.CA.and.Ser |
118520 | 76 65 72 20 63 65 72 74 69 66 69 63 61 74 65 00 55 73 69 6e 67 20 74 68 65 20 6f 70 65 72 61 74 | ver.certificate.Using.the.operat |
118540 | 69 6f 6e 20 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 76 69 65 77 20 42 72 69 64 67 65 20 | ion.mode.command.to.view.Bridge. |
118560 | 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 55 73 69 6e 67 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2c 20 | Information.Using.this.command,. |
118580 | 79 6f 75 20 77 69 6c 6c 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 63 6c 69 65 6e 74 20 63 6f 6e | you.will.create.a.new.client.con |
1185a0 | 66 69 67 75 72 61 74 69 6f 6e 20 77 68 69 63 68 20 63 61 6e 20 63 6f 6e 6e 65 63 74 20 74 6f 20 | figuration.which.can.connect.to. |
1185c0 | 60 60 69 6e 74 65 72 66 61 63 65 60 60 20 6f 6e 20 74 68 69 73 20 72 6f 75 74 65 72 2e 20 54 68 | ``interface``.on.this.router..Th |
1185e0 | 65 20 70 75 62 6c 69 63 20 6b 65 79 20 66 72 6f 6d 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 | e.public.key.from.the.specified. |
118600 | 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 65 78 74 72 61 | interface.is.automatically.extra |
118620 | 63 74 65 64 20 61 6e 64 20 65 6d 62 65 64 64 65 64 20 69 6e 74 6f 20 74 68 65 20 63 6f 6e 66 69 | cted.and.embedded.into.the.confi |
118640 | 67 75 72 61 74 69 6f 6e 2e 00 55 73 75 61 6c 6c 79 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 | guration..Usually.this.configura |
118660 | 74 69 6f 6e 20 69 73 20 75 73 65 64 20 69 6e 20 50 45 73 20 28 50 72 6f 76 69 64 65 72 20 45 64 | tion.is.used.in.PEs.(Provider.Ed |
118680 | 67 65 29 20 74 6f 20 72 65 70 6c 61 63 65 20 74 68 65 20 69 6e 63 6f 6d 69 6e 67 20 63 75 73 74 | ge).to.replace.the.incoming.cust |
1186a0 | 6f 6d 65 72 20 41 53 20 6e 75 6d 62 65 72 20 73 6f 20 74 68 65 20 63 6f 6e 6e 65 63 74 65 64 20 | omer.AS.number.so.the.connected. |
1186c0 | 43 45 20 28 20 43 75 73 74 6f 6d 65 72 20 45 64 67 65 29 20 63 61 6e 20 75 73 65 20 74 68 65 20 | CE.(.Customer.Edge).can.use.the. |
1186e0 | 73 61 6d 65 20 41 53 20 6e 75 6d 62 65 72 20 61 73 20 74 68 65 20 6f 74 68 65 72 20 63 75 73 74 | same.AS.number.as.the.other.cust |
118700 | 6f 6d 65 72 20 73 69 74 65 73 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 63 75 73 74 6f 6d 65 72 | omer.sites..This.allows.customer |
118720 | 73 20 6f 66 20 74 68 65 20 70 72 6f 76 69 64 65 72 20 6e 65 74 77 6f 72 6b 20 74 6f 20 75 73 65 | s.of.the.provider.network.to.use |
118740 | 20 74 68 65 20 73 61 6d 65 20 41 53 20 6e 75 6d 62 65 72 20 61 63 72 6f 73 73 20 74 68 65 69 72 | .the.same.AS.number.across.their |
118760 | 20 73 69 74 65 73 2e 00 56 48 54 20 28 56 65 72 79 20 48 69 67 68 20 54 68 72 6f 75 67 68 70 75 | .sites..VHT.(Very.High.Throughpu |
118780 | 74 29 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 28 38 30 32 2e 31 31 61 63 29 00 56 48 54 20 6c | t).capabilities.(802.11ac).VHT.l |
1187a0 | 69 6e 6b 20 61 64 61 70 74 61 74 69 6f 6e 20 63 61 70 61 62 69 6c 69 74 69 65 73 00 56 48 54 20 | ink.adaptation.capabilities.VHT. |
1187c0 | 6f 70 65 72 61 74 69 6e 67 20 63 68 61 6e 6e 65 6c 20 63 65 6e 74 65 72 20 66 72 65 71 75 65 6e | operating.channel.center.frequen |
1187e0 | 63 79 20 2d 20 63 65 6e 74 65 72 20 66 72 65 71 20 31 20 28 66 6f 72 20 75 73 65 20 77 69 74 68 | cy.-.center.freq.1.(for.use.with |
118800 | 20 38 30 2c 20 38 30 2b 38 30 20 61 6e 64 20 31 36 30 20 6d 6f 64 65 73 29 00 56 48 54 20 6f 70 | .80,.80+80.and.160.modes).VHT.op |
118820 | 65 72 61 74 69 6e 67 20 63 68 61 6e 6e 65 6c 20 63 65 6e 74 65 72 20 66 72 65 71 75 65 6e 63 79 | erating.channel.center.frequency |
118840 | 20 2d 20 63 65 6e 74 65 72 20 66 72 65 71 20 32 20 28 66 6f 72 20 75 73 65 20 77 69 74 68 20 74 | .-.center.freq.2.(for.use.with.t |
118860 | 68 65 20 38 30 2b 38 30 20 6d 6f 64 65 29 00 56 4c 41 4e 00 56 4c 41 4e 20 31 30 20 6f 6e 20 6d | he.80+80.mode).VLAN.VLAN.10.on.m |
118880 | 65 6d 62 65 72 20 69 6e 74 65 72 66 61 63 65 20 60 65 74 68 32 60 20 28 41 43 43 45 53 53 20 6d | ember.interface.`eth2`.(ACCESS.m |
1188a0 | 6f 64 65 29 00 56 4c 41 4e 20 45 78 61 6d 70 6c 65 00 56 4c 41 4e 20 4f 70 74 69 6f 6e 73 00 56 | ode).VLAN.Example.VLAN.Options.V |
1188c0 | 4c 41 4e 20 6d 6f 6e 69 74 6f 72 20 66 6f 72 20 61 75 74 6f 6d 61 74 69 63 20 63 72 65 61 74 69 | LAN.monitor.for.automatic.creati |
1188e0 | 6f 6e 20 6f 66 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 66 6f 72 20 73 70 65 63 69 66 | on.of.VLAN.interfaces.for.specif |
118900 | 69 63 20 75 73 65 72 20 6f 6e 20 73 70 65 63 69 66 69 63 20 3c 69 6e 74 65 72 66 61 63 65 3e 00 | ic.user.on.specific.<interface>. |
118920 | 56 4c 41 4e 20 6e 61 6d 65 00 56 4c 41 4e 27 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 20 | VLAN.name.VLAN's.can.be.created. |
118940 | 62 79 20 41 63 63 65 6c 2d 70 70 70 20 6f 6e 20 74 68 65 20 66 6c 79 20 76 69 61 20 74 68 65 20 | by.Accel-ppp.on.the.fly.via.the. |
118960 | 75 73 65 20 6f 66 20 61 20 4b 65 72 6e 65 6c 20 6d 6f 64 75 6c 65 20 6e 61 6d 65 64 20 60 60 76 | use.of.a.Kernel.module.named.``v |
118980 | 6c 61 6e 5f 6d 6f 6e 60 60 2c 20 77 68 69 63 68 20 69 73 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 69 | lan_mon``,.which.is.monitoring.i |
1189a0 | 6e 63 6f 6d 69 6e 67 20 76 6c 61 6e 73 20 61 6e 64 20 63 72 65 61 74 65 73 20 74 68 65 20 6e 65 | ncoming.vlans.and.creates.the.ne |
1189c0 | 63 65 73 73 61 72 79 20 56 4c 41 4e 20 69 66 20 72 65 71 75 69 72 65 64 20 61 6e 64 20 61 6c 6c | cessary.VLAN.if.required.and.all |
1189e0 | 6f 77 65 64 2e 20 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 75 73 65 20 6f 66 20 65 | owed..VyOS.supports.the.use.of.e |
118a00 | 69 74 68 65 72 20 56 4c 41 4e 20 49 44 27 73 20 6f 72 20 65 6e 74 69 72 65 20 72 61 6e 67 65 73 | ither.VLAN.ID's.or.entire.ranges |
118a20 | 2c 20 62 6f 74 68 20 76 61 6c 75 65 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 61 74 20 | ,.both.values.can.be.defined.at. |
118a40 | 74 68 65 20 73 61 6d 65 20 74 69 6d 65 20 66 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 00 | the.same.time.for.an.interface.. |
118a60 | 56 4c 41 4e 27 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 20 62 79 20 41 63 63 65 6c 2d 70 | VLAN's.can.be.created.by.Accel-p |
118a80 | 70 70 20 6f 6e 20 74 68 65 20 66 6c 79 20 76 69 61 20 74 68 65 20 75 73 65 20 6f 66 20 61 20 4b | pp.on.the.fly.via.the.use.of.a.K |
118aa0 | 65 72 6e 65 6c 20 6d 6f 64 75 6c 65 20 6e 61 6d 65 64 20 60 76 6c 61 6e 5f 6d 6f 6e 60 2c 20 77 | ernel.module.named.`vlan_mon`,.w |
118ac0 | 68 69 63 68 20 69 73 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 69 6e 63 6f 6d 69 6e 67 20 76 6c 61 6e | hich.is.monitoring.incoming.vlan |
118ae0 | 73 20 61 6e 64 20 63 72 65 61 74 65 73 20 74 68 65 20 6e 65 63 65 73 73 61 72 79 20 56 4c 41 4e | s.and.creates.the.necessary.VLAN |
118b00 | 20 69 66 20 72 65 71 75 69 72 65 64 20 61 6e 64 20 61 6c 6c 6f 77 65 64 2e 20 56 79 4f 53 20 73 | .if.required.and.allowed..VyOS.s |
118b20 | 75 70 70 6f 72 74 73 20 74 68 65 20 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 56 4c 41 4e 20 49 | upports.the.use.of.either.VLAN.I |
118b40 | 44 27 73 20 6f 72 20 65 6e 74 69 72 65 20 72 61 6e 67 65 73 2c 20 62 6f 74 68 20 76 61 6c 75 65 | D's.or.entire.ranges,.both.value |
118b60 | 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d | s.can.be.defined.at.the.same.tim |
118b80 | 65 20 66 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 00 56 4d 77 61 72 65 20 75 73 65 72 73 | e.for.an.interface..VMware.users |
118ba0 | 20 73 68 6f 75 6c 64 20 65 6e 73 75 72 65 20 74 68 61 74 20 61 20 56 4d 58 4e 45 54 33 20 61 64 | .should.ensure.that.a.VMXNET3.ad |
118bc0 | 61 70 74 65 72 20 69 73 20 75 73 65 64 2e 20 45 31 30 30 30 20 61 64 61 70 74 65 72 73 20 68 61 | apter.is.used..E1000.adapters.ha |
118be0 | 76 65 20 6b 6e 6f 77 6e 20 69 73 73 75 65 73 20 77 69 74 68 20 47 52 45 20 70 72 6f 63 65 73 73 | ve.known.issues.with.GRE.process |
118c00 | 69 6e 67 2e 00 56 50 4e 00 56 50 4e 2d 63 6c 69 65 6e 74 73 20 77 69 6c 6c 20 72 65 71 75 65 73 | ing..VPN.VPN-clients.will.reques |
118c20 | 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 2c 20 6f 70 74 69 | t.configuration.parameters,.opti |
118c40 | 6f 6e 61 6c 6c 79 20 79 6f 75 20 63 61 6e 20 44 4e 53 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 | onally.you.can.DNS.parameter.to. |
118c60 | 74 68 65 20 63 6c 69 65 6e 74 2e 00 56 52 46 00 56 52 46 20 52 6f 75 74 65 20 4c 65 61 6b 69 6e | the.client..VRF.VRF.Route.Leakin |
118c80 | 67 00 56 52 46 20 61 6e 64 20 4e 41 54 00 56 52 46 20 62 6c 75 65 20 72 6f 75 74 69 6e 67 20 74 | g.VRF.and.NAT.VRF.blue.routing.t |
118ca0 | 61 62 6c 65 00 56 52 46 20 64 65 66 61 75 6c 74 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 00 56 | able.VRF.default.routing.table.V |
118cc0 | 52 46 20 72 65 64 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 00 56 52 46 20 72 6f 75 74 65 20 6c | RF.red.routing.table.VRF.route.l |
118ce0 | 65 61 6b 69 6e 67 00 56 52 46 20 74 6f 70 6f 6c 6f 67 79 20 65 78 61 6d 70 6c 65 00 56 52 52 50 | eaking.VRF.topology.example.VRRP |
118d00 | 20 28 56 69 72 74 75 61 6c 20 52 6f 75 74 65 72 20 52 65 64 75 6e 64 61 6e 63 79 20 50 72 6f 74 | .(Virtual.Router.Redundancy.Prot |
118d20 | 6f 63 6f 6c 29 20 70 72 6f 76 69 64 65 73 20 61 63 74 69 76 65 2f 62 61 63 6b 75 70 20 72 65 64 | ocol).provides.active/backup.red |
118d40 | 75 6e 64 61 6e 63 79 20 66 6f 72 20 72 6f 75 74 65 72 73 2e 20 45 76 65 72 79 20 56 52 52 50 20 | undancy.for.routers..Every.VRRP. |
118d60 | 72 6f 75 74 65 72 20 68 61 73 20 61 20 70 68 79 73 69 63 61 6c 20 49 50 2f 49 50 76 36 20 61 64 | router.has.a.physical.IP/IPv6.ad |
118d80 | 64 72 65 73 73 2c 20 61 6e 64 20 61 20 76 69 72 74 75 61 6c 20 61 64 64 72 65 73 73 2e 20 4f 6e | dress,.and.a.virtual.address..On |
118da0 | 20 73 74 61 72 74 75 70 2c 20 72 6f 75 74 65 72 73 20 65 6c 65 63 74 20 74 68 65 20 6d 61 73 74 | .startup,.routers.elect.the.mast |
118dc0 | 65 72 2c 20 61 6e 64 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 74 68 20 74 68 65 20 68 69 67 68 | er,.and.the.router.with.the.high |
118de0 | 65 73 74 20 70 72 69 6f 72 69 74 79 20 62 65 63 6f 6d 65 73 20 74 68 65 20 6d 61 73 74 65 72 20 | est.priority.becomes.the.master. |
118e00 | 61 6e 64 20 61 73 73 69 67 6e 73 20 74 68 65 20 76 69 72 74 75 61 6c 20 61 64 64 72 65 73 73 20 | and.assigns.the.virtual.address. |
118e20 | 74 6f 20 69 74 73 20 69 6e 74 65 72 66 61 63 65 2e 20 41 6c 6c 20 72 6f 75 74 65 72 73 20 77 69 | to.its.interface..All.routers.wi |
118e40 | 74 68 20 6c 6f 77 65 72 20 70 72 69 6f 72 69 74 69 65 73 20 62 65 63 6f 6d 65 20 62 61 63 6b 75 | th.lower.priorities.become.backu |
118e60 | 70 20 72 6f 75 74 65 72 73 2e 20 54 68 65 20 6d 61 73 74 65 72 20 74 68 65 6e 20 73 74 61 72 74 | p.routers..The.master.then.start |
118e80 | 73 20 73 65 6e 64 69 6e 67 20 6b 65 65 70 61 6c 69 76 65 20 70 61 63 6b 65 74 73 20 74 6f 20 6e | s.sending.keepalive.packets.to.n |
118ea0 | 6f 74 69 66 79 20 6f 74 68 65 72 20 72 6f 75 74 65 72 73 20 74 68 61 74 20 69 74 27 73 20 61 76 | otify.other.routers.that.it's.av |
118ec0 | 61 69 6c 61 62 6c 65 2e 20 49 66 20 74 68 65 20 6d 61 73 74 65 72 20 66 61 69 6c 73 20 61 6e 64 | ailable..If.the.master.fails.and |
118ee0 | 20 73 74 6f 70 73 20 73 65 6e 64 69 6e 67 20 6b 65 65 70 61 6c 69 76 65 20 70 61 63 6b 65 74 73 | .stops.sending.keepalive.packets |
118f00 | 2c 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 74 68 20 74 68 65 20 6e 65 78 74 20 68 69 67 68 65 | ,.the.router.with.the.next.highe |
118f20 | 73 74 20 70 72 69 6f 72 69 74 79 20 62 65 63 6f 6d 65 73 20 74 68 65 20 6e 65 77 20 6d 61 73 74 | st.priority.becomes.the.new.mast |
118f40 | 65 72 20 61 6e 64 20 74 61 6b 65 73 20 6f 76 65 72 20 74 68 65 20 76 69 72 74 75 61 6c 20 61 64 | er.and.takes.over.the.virtual.ad |
118f60 | 64 72 65 73 73 2e 00 56 52 52 50 20 63 61 6e 20 75 73 65 20 74 77 6f 20 6d 6f 64 65 73 3a 20 70 | dress..VRRP.can.use.two.modes:.p |
118f80 | 72 65 65 6d 70 74 69 76 65 20 61 6e 64 20 6e 6f 6e 2d 70 72 65 65 6d 70 74 69 76 65 2e 20 49 6e | reemptive.and.non-preemptive..In |
118fa0 | 20 74 68 65 20 70 72 65 65 6d 70 74 69 76 65 20 6d 6f 64 65 2c 20 69 66 20 61 20 72 6f 75 74 65 | .the.preemptive.mode,.if.a.route |
118fc0 | 72 20 77 69 74 68 20 61 20 68 69 67 68 65 72 20 70 72 69 6f 72 69 74 79 20 66 61 69 6c 73 20 61 | r.with.a.higher.priority.fails.a |
118fe0 | 6e 64 20 74 68 65 6e 20 63 6f 6d 65 73 20 62 61 63 6b 2c 20 72 6f 75 74 65 72 73 20 77 69 74 68 | nd.then.comes.back,.routers.with |
119000 | 20 6c 6f 77 65 72 20 70 72 69 6f 72 69 74 79 20 77 69 6c 6c 20 67 69 76 65 20 75 70 20 74 68 65 | .lower.priority.will.give.up.the |
119020 | 69 72 20 6d 61 73 74 65 72 20 73 74 61 74 75 73 2e 20 49 6e 20 6e 6f 6e 2d 70 72 65 65 6d 70 74 | ir.master.status..In.non-preempt |
119040 | 69 76 65 20 6d 6f 64 65 2c 20 74 68 65 20 6e 65 77 6c 79 20 65 6c 65 63 74 65 64 20 6d 61 73 74 | ive.mode,.the.newly.elected.mast |
119060 | 65 72 20 77 69 6c 6c 20 6b 65 65 70 20 74 68 65 20 6d 61 73 74 65 72 20 73 74 61 74 75 73 20 61 | er.will.keep.the.master.status.a |
119080 | 6e 64 20 74 68 65 20 76 69 72 74 75 61 6c 20 61 64 64 72 65 73 73 20 69 6e 64 65 66 69 6e 69 74 | nd.the.virtual.address.indefinit |
1190a0 | 65 6c 79 2e 00 56 52 52 50 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 63 61 6e 20 62 65 20 65 | ely..VRRP.functionality.can.be.e |
1190c0 | 78 74 65 6e 64 65 64 20 77 69 74 68 20 73 63 72 69 70 74 73 2e 20 56 79 4f 53 20 73 75 70 70 6f | xtended.with.scripts..VyOS.suppo |
1190e0 | 72 74 73 20 74 77 6f 20 6b 69 6e 64 73 20 6f 66 20 73 63 72 69 70 74 73 3a 20 68 65 61 6c 74 68 | rts.two.kinds.of.scripts:.health |
119100 | 20 63 68 65 63 6b 20 73 63 72 69 70 74 73 20 61 6e 64 20 74 72 61 6e 73 69 74 69 6f 6e 20 73 63 | .check.scripts.and.transition.sc |
119120 | 72 69 70 74 73 2e 20 48 65 61 6c 74 68 20 63 68 65 63 6b 20 73 63 72 69 70 74 73 20 65 78 65 63 | ripts..Health.check.scripts.exec |
119140 | 75 74 65 20 63 75 73 74 6f 6d 20 63 68 65 63 6b 73 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f | ute.custom.checks.in.addition.to |
119160 | 20 74 68 65 20 6d 61 73 74 65 72 20 72 6f 75 74 65 72 20 72 65 61 63 68 61 62 69 6c 69 74 79 2e | .the.master.router.reachability. |
119180 | 20 54 72 61 6e 73 69 74 69 6f 6e 20 73 63 72 69 70 74 73 20 61 72 65 20 65 78 65 63 75 74 65 64 | .Transition.scripts.are.executed |
1191a0 | 20 77 68 65 6e 20 56 52 52 50 20 73 74 61 74 65 20 63 68 61 6e 67 65 73 20 66 72 6f 6d 20 6d 61 | .when.VRRP.state.changes.from.ma |
1191c0 | 73 74 65 72 20 74 6f 20 62 61 63 6b 75 70 20 6f 72 20 66 61 75 6c 74 20 61 6e 64 20 76 69 63 65 | ster.to.backup.or.fault.and.vice |
1191e0 | 20 76 65 72 73 61 20 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 65 6e 61 62 6c 65 | .versa.and.can.be.used.to.enable |
119200 | 20 6f 72 20 64 69 73 61 62 6c 65 20 63 65 72 74 61 69 6e 20 73 65 72 76 69 63 65 73 2c 20 66 6f | .or.disable.certain.services,.fo |
119220 | 72 20 65 78 61 6d 70 6c 65 2e 00 56 52 52 50 20 67 72 6f 75 70 73 20 61 72 65 20 63 72 65 61 74 | r.example..VRRP.groups.are.creat |
119240 | 65 64 20 77 69 74 68 20 74 68 65 20 60 60 73 65 74 20 68 69 67 68 2d 61 76 61 69 6c 61 62 69 6c | ed.with.the.``set.high-availabil |
119260 | 69 74 79 20 76 72 72 70 20 67 72 6f 75 70 20 24 47 52 4f 55 50 5f 4e 41 4d 45 60 60 20 63 6f 6d | ity.vrrp.group.$GROUP_NAME``.com |
119280 | 6d 61 6e 64 73 2e 20 54 68 65 20 72 65 71 75 69 72 65 64 20 70 61 72 61 6d 65 74 65 72 73 20 61 | mands..The.required.parameters.a |
1192a0 | 72 65 20 69 6e 74 65 72 66 61 63 65 2c 20 76 72 69 64 2c 20 61 6e 64 20 61 64 64 72 65 73 73 2e | re.interface,.vrid,.and.address. |
1192c0 | 00 56 52 52 50 20 6b 65 65 70 61 6c 69 76 65 20 70 61 63 6b 65 74 73 20 75 73 65 20 6d 75 6c 74 | .VRRP.keepalive.packets.use.mult |
1192e0 | 69 63 61 73 74 2c 20 61 6e 64 20 56 52 52 50 20 73 65 74 75 70 73 20 61 72 65 20 6c 69 6d 69 74 | icast,.and.VRRP.setups.are.limit |
119300 | 65 64 20 74 6f 20 61 20 73 69 6e 67 6c 65 20 64 61 74 61 6c 69 6e 6b 20 6c 61 79 65 72 20 73 65 | ed.to.a.single.datalink.layer.se |
119320 | 67 6d 65 6e 74 2e 20 59 6f 75 20 63 61 6e 20 73 65 74 75 70 20 6d 75 6c 74 69 70 6c 65 20 56 52 | gment..You.can.setup.multiple.VR |
119340 | 52 50 20 67 72 6f 75 70 73 20 28 61 6c 73 6f 20 63 61 6c 6c 65 64 20 76 69 72 74 75 61 6c 20 72 | RP.groups.(also.called.virtual.r |
119360 | 6f 75 74 65 72 73 29 2e 20 56 69 72 74 75 61 6c 20 72 6f 75 74 65 72 73 20 61 72 65 20 69 64 65 | outers)..Virtual.routers.are.ide |
119380 | 6e 74 69 66 69 65 64 20 62 79 20 61 20 56 52 49 44 20 28 56 69 72 74 75 61 6c 20 52 6f 75 74 65 | ntified.by.a.VRID.(Virtual.Route |
1193a0 | 72 20 49 44 65 6e 74 69 66 69 65 72 29 2e 20 49 66 20 79 6f 75 20 73 65 74 75 70 20 6d 75 6c 74 | r.IDentifier)..If.you.setup.mult |
1193c0 | 69 70 6c 65 20 67 72 6f 75 70 73 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 | iple.groups.on.the.same.interfac |
1193e0 | 65 2c 20 74 68 65 69 72 20 56 52 49 44 73 20 6d 75 73 74 20 62 65 20 75 6e 69 71 75 65 20 69 66 | e,.their.VRIDs.must.be.unique.if |
119400 | 20 74 68 65 79 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 61 64 64 72 65 73 73 20 66 61 6d 69 6c | .they.use.the.same.address.famil |
119420 | 79 2c 20 62 75 74 20 69 74 27 73 20 70 6f 73 73 69 62 6c 65 20 28 65 76 65 6e 20 69 66 20 6e 6f | y,.but.it's.possible.(even.if.no |
119440 | 74 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 66 6f 72 20 72 65 61 64 61 62 69 6c 69 74 79 20 72 65 | t.recommended.for.readability.re |
119460 | 61 73 6f 6e 73 29 20 74 6f 20 75 73 65 20 64 75 70 6c 69 63 61 74 65 20 56 52 49 44 73 20 6f 6e | asons).to.use.duplicate.VRIDs.on |
119480 | 20 64 69 66 66 65 72 65 6e 74 20 69 6e 74 65 72 66 61 63 65 73 2e 00 56 52 52 50 20 70 72 69 6f | .different.interfaces..VRRP.prio |
1194a0 | 72 69 74 79 20 63 61 6e 20 62 65 20 73 65 74 20 77 69 74 68 20 60 60 70 72 69 6f 72 69 74 79 60 | rity.can.be.set.with.``priority` |
1194c0 | 60 20 6f 70 74 69 6f 6e 3a 00 56 54 49 20 2d 20 56 69 72 74 75 61 6c 20 54 75 6e 6e 65 6c 20 49 | `.option:.VTI.-.Virtual.Tunnel.I |
1194e0 | 6e 74 65 72 66 61 63 65 00 56 58 4c 41 4e 00 56 58 4c 41 4e 20 69 73 20 61 6e 20 65 76 6f 6c 75 | nterface.VXLAN.VXLAN.is.an.evolu |
119500 | 74 69 6f 6e 20 6f 66 20 65 66 66 6f 72 74 73 20 74 6f 20 73 74 61 6e 64 61 72 64 69 7a 65 20 61 | tion.of.efforts.to.standardize.a |
119520 | 6e 20 6f 76 65 72 6c 61 79 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c | n.overlay.encapsulation.protocol |
119540 | 2e 20 49 74 20 69 6e 63 72 65 61 73 65 73 20 74 68 65 20 73 63 61 6c 61 62 69 6c 69 74 79 20 75 | ..It.increases.the.scalability.u |
119560 | 70 20 74 6f 20 31 36 20 6d 69 6c 6c 69 6f 6e 20 6c 6f 67 69 63 61 6c 20 6e 65 74 77 6f 72 6b 73 | p.to.16.million.logical.networks |
119580 | 20 61 6e 64 20 61 6c 6c 6f 77 73 20 66 6f 72 20 6c 61 79 65 72 20 32 20 61 64 6a 61 63 65 6e 63 | .and.allows.for.layer.2.adjacenc |
1195a0 | 79 20 61 63 72 6f 73 73 20 49 50 20 6e 65 74 77 6f 72 6b 73 2e 20 4d 75 6c 74 69 63 61 73 74 20 | y.across.IP.networks..Multicast. |
1195c0 | 6f 72 20 75 6e 69 63 61 73 74 20 77 69 74 68 20 68 65 61 64 2d 65 6e 64 20 72 65 70 6c 69 63 61 | or.unicast.with.head-end.replica |
1195e0 | 74 69 6f 6e 20 28 48 45 52 29 20 69 73 20 75 73 65 64 20 74 6f 20 66 6c 6f 6f 64 20 62 72 6f 61 | tion.(HER).is.used.to.flood.broa |
119600 | 64 63 61 73 74 2c 20 75 6e 6b 6e 6f 77 6e 20 75 6e 69 63 61 73 74 2c 20 61 6e 64 20 6d 75 6c 74 | dcast,.unknown.unicast,.and.mult |
119620 | 69 63 61 73 74 20 28 42 55 4d 29 20 74 72 61 66 66 69 63 2e 00 56 58 4c 41 4e 20 73 70 65 63 69 | icast.(BUM).traffic..VXLAN.speci |
119640 | 66 69 63 20 6f 70 74 69 6f 6e 73 00 56 58 4c 41 4e 20 77 61 73 20 6f 66 66 69 63 69 61 6c 6c 79 | fic.options.VXLAN.was.officially |
119660 | 20 64 6f 63 75 6d 65 6e 74 65 64 20 62 79 20 74 68 65 20 49 45 54 46 20 69 6e 20 3a 72 66 63 3a | .documented.by.the.IETF.in.:rfc: |
119680 | 60 37 33 34 38 60 2e 00 56 61 6c 69 64 20 76 61 6c 75 65 73 20 61 72 65 20 30 2e 2e 32 35 35 2e | `7348`..Valid.values.are.0..255. |
1196a0 | 00 56 61 6c 75 65 00 56 61 6c 75 65 20 74 6f 20 73 65 6e 64 20 74 6f 20 52 41 44 49 55 53 20 73 | .Value.Value.to.send.to.RADIUS.s |
1196c0 | 65 72 76 65 72 20 69 6e 20 4e 41 53 2d 49 50 2d 41 64 64 72 65 73 73 20 61 74 74 72 69 62 75 74 | erver.in.NAS-IP-Address.attribut |
1196e0 | 65 20 61 6e 64 20 74 6f 20 62 65 20 6d 61 74 63 68 65 64 20 69 6e 20 44 4d 2f 43 6f 41 20 72 65 | e.and.to.be.matched.in.DM/CoA.re |
119700 | 71 75 65 73 74 73 2e 20 41 6c 73 6f 20 44 4d 2f 43 6f 41 20 73 65 72 76 65 72 20 77 69 6c 6c 20 | quests..Also.DM/CoA.server.will. |
119720 | 62 69 6e 64 20 74 6f 20 74 68 61 74 20 61 64 64 72 65 73 73 2e 00 56 61 6c 75 65 20 74 6f 20 73 | bind.to.that.address..Value.to.s |
119740 | 65 6e 64 20 74 6f 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 69 6e 20 4e 41 53 2d 49 64 65 6e | end.to.RADIUS.server.in.NAS-Iden |
119760 | 74 69 66 69 65 72 20 61 74 74 72 69 62 75 74 65 20 61 6e 64 20 74 6f 20 62 65 20 6d 61 74 63 68 | tifier.attribute.and.to.be.match |
119780 | 65 64 20 69 6e 20 44 4d 2f 43 6f 41 20 72 65 71 75 65 73 74 73 2e 00 56 65 72 69 66 69 63 61 74 | ed.in.DM/CoA.requests..Verificat |
1197a0 | 69 6f 6e 00 56 65 72 69 66 69 63 61 74 69 6f 6e 3a 00 56 65 72 69 66 79 20 74 68 61 74 20 63 6f | ion.Verification:.Verify.that.co |
1197c0 | 6e 6e 65 63 74 69 6f 6e 73 20 61 72 65 20 68 69 74 74 69 6e 67 20 74 68 65 20 72 75 6c 65 20 6f | nnections.are.hitting.the.rule.o |
1197e0 | 6e 20 62 6f 74 68 20 73 69 64 65 73 3a 00 56 65 72 73 69 6f 6e 00 56 69 72 74 75 61 6c 20 45 74 | n.both.sides:.Version.Virtual.Et |
119800 | 68 65 72 6e 65 74 00 56 69 72 74 75 61 6c 20 53 65 72 76 65 72 20 61 6c 6c 6f 77 73 20 74 6f 20 | hernet.Virtual.Server.allows.to. |
119820 | 4c 6f 61 64 2d 62 61 6c 61 6e 63 65 20 74 72 61 66 66 69 63 20 64 65 73 74 69 6e 61 74 69 6f 6e | Load-balance.traffic.destination |
119840 | 20 76 69 72 74 75 61 6c 2d 61 64 64 72 65 73 73 3a 70 6f 72 74 20 62 65 74 77 65 65 6e 20 73 65 | .virtual-address:port.between.se |
119860 | 76 65 72 61 6c 20 72 65 61 6c 20 73 65 72 76 65 72 73 2e 00 56 69 72 74 75 61 6c 2d 73 65 72 76 | veral.real.servers..Virtual-serv |
119880 | 65 72 00 56 69 72 74 75 61 6c 2d 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 | er.Virtual-server.can.be.configu |
1198a0 | 72 65 64 20 77 69 74 68 20 56 52 52 50 20 76 69 72 74 75 61 6c 20 61 64 64 72 65 73 73 20 6f 72 | red.with.VRRP.virtual.address.or |
1198c0 | 20 77 69 74 68 6f 75 74 20 56 52 52 50 2e 00 56 6f 6c 75 6d 65 20 69 73 20 65 69 74 68 65 72 20 | .without.VRRP..Volume.is.either. |
1198e0 | 6d 6f 75 6e 74 65 64 20 61 73 20 72 77 20 28 72 65 61 64 2d 77 72 69 74 65 20 2d 20 64 65 66 61 | mounted.as.rw.(read-write.-.defa |
119900 | 75 6c 74 29 20 6f 72 20 72 6f 20 28 72 65 61 64 2d 6f 6e 6c 79 29 00 56 79 4f 53 20 31 2e 31 20 | ult).or.ro.(read-only).VyOS.1.1. |
119920 | 73 75 70 70 6f 72 74 65 64 20 6c 6f 67 69 6e 20 61 73 20 75 73 65 72 20 60 60 72 6f 6f 74 60 60 | supported.login.as.user.``root`` |
119940 | 2e 20 54 68 69 73 20 68 61 73 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 20 64 75 65 20 74 6f 20 74 | ..This.has.been.removed.due.to.t |
119960 | 69 67 68 74 65 72 20 73 65 63 75 72 69 74 79 20 69 6e 20 56 79 4f 53 20 31 2e 32 2e 00 56 79 4f | ighter.security.in.VyOS.1.2..VyO |
119980 | 53 20 31 2e 33 20 28 65 71 75 75 6c 65 75 73 29 20 73 75 70 70 6f 72 74 73 20 44 48 43 50 76 36 | S.1.3.(equuleus).supports.DHCPv6 |
1199a0 | 2d 50 44 20 28 3a 72 66 63 3a 60 33 36 33 33 60 29 2e 20 44 48 43 50 76 36 20 50 72 65 66 69 78 | -PD.(:rfc:`3633`)..DHCPv6.Prefix |
1199c0 | 20 44 65 6c 65 67 61 74 69 6f 6e 20 69 73 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 6d 6f 73 74 | .Delegation.is.supported.by.most |
1199e0 | 20 49 53 50 73 20 77 68 6f 20 70 72 6f 76 69 64 65 20 6e 61 74 69 76 65 20 49 50 76 36 20 66 6f | .ISPs.who.provide.native.IPv6.fo |
119a00 | 72 20 63 6f 6e 73 75 6d 65 72 73 20 6f 6e 20 66 69 78 65 64 20 6e 65 74 77 6f 72 6b 73 2e 00 56 | r.consumers.on.fixed.networks..V |
119a20 | 79 4f 53 20 31 2e 34 20 28 73 61 67 69 74 74 61 29 20 69 6e 74 72 6f 64 75 63 65 64 20 64 79 6e | yOS.1.4.(sagitta).introduced.dyn |
119a40 | 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 73 75 70 70 6f 72 74 20 66 6f 72 20 56 52 46 73 2e 00 56 | amic.routing.support.for.VRFs..V |
119a60 | 79 4f 53 20 31 2e 34 20 63 68 61 6e 67 65 64 20 74 68 65 20 77 61 79 20 69 6e 20 68 6f 77 20 65 | yOS.1.4.changed.the.way.in.how.e |
119a80 | 6e 63 72 79 74 69 6f 6e 20 6b 65 79 73 20 6f 72 20 63 65 72 74 69 66 69 63 61 74 65 73 20 61 72 | ncrytion.keys.or.certificates.ar |
119aa0 | 65 20 73 74 6f 72 65 64 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 20 49 6e 20 74 68 65 20 70 | e.stored.on.the.system..In.the.p |
119ac0 | 72 65 20 56 79 4f 53 20 31 2e 34 20 65 72 61 2c 20 63 65 72 74 69 66 69 63 61 74 65 73 20 67 6f | re.VyOS.1.4.era,.certificates.go |
119ae0 | 74 20 73 74 6f 72 65 64 20 75 6e 64 65 72 20 2f 63 6f 6e 66 69 67 20 61 6e 64 20 65 76 65 72 79 | t.stored.under./config.and.every |
119b00 | 20 73 65 72 76 69 63 65 20 72 65 66 65 72 65 6e 63 65 64 20 61 20 66 69 6c 65 2e 20 54 68 61 74 | .service.referenced.a.file..That |
119b20 | 20 6d 61 64 65 20 63 6f 70 79 69 6e 67 20 61 20 72 75 6e 6e 69 6e 67 20 63 6f 6e 66 69 67 75 72 | .made.copying.a.running.configur |
119b40 | 61 74 69 6f 6e 20 66 72 6f 6d 20 73 79 73 74 65 6d 20 41 20 74 6f 20 73 79 73 74 65 6d 20 42 20 | ation.from.system.A.to.system.B. |
119b60 | 61 20 62 69 74 20 68 61 72 64 65 72 2c 20 61 73 20 79 6f 75 20 68 61 64 20 74 6f 20 63 6f 70 79 | a.bit.harder,.as.you.had.to.copy |
119b80 | 20 74 68 65 20 66 69 6c 65 73 20 61 6e 64 20 74 68 65 69 72 20 70 65 72 6d 69 73 73 69 6f 6e 73 | .the.files.and.their.permissions |
119ba0 | 20 62 79 20 68 61 6e 64 2e 00 56 79 4f 53 20 31 2e 34 20 75 73 65 73 20 63 68 72 6f 6e 79 20 69 | .by.hand..VyOS.1.4.uses.chrony.i |
119bc0 | 6e 73 74 65 61 64 20 6f 66 20 6e 74 70 64 20 28 73 65 65 20 3a 76 79 74 61 73 6b 3a 60 54 33 30 | nstead.of.ntpd.(see.:vytask:`T30 |
119be0 | 30 38 60 29 20 77 68 69 63 68 20 77 69 6c 6c 20 6e 6f 20 6c 6f 6e 67 65 72 20 61 63 63 65 70 74 | 08`).which.will.no.longer.accept |
119c00 | 20 61 6e 6f 6e 79 6d 6f 75 73 20 4e 54 50 20 72 65 71 75 65 73 74 73 20 61 73 20 69 6e 20 56 79 | .anonymous.NTP.requests.as.in.Vy |
119c20 | 4f 53 20 31 2e 33 2e 20 41 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 20 77 69 6c 6c 20 | OS.1.3..All.configurations.will. |
119c40 | 62 65 20 6d 69 67 72 61 74 65 64 20 74 6f 20 6b 65 65 70 20 74 68 65 20 61 6e 6f 6e 79 6d 6f 75 | be.migrated.to.keep.the.anonymou |
119c60 | 73 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2e 20 46 6f 72 20 6e 65 77 20 73 65 74 75 70 73 20 | s.functionality..For.new.setups. |
119c80 | 69 66 20 79 6f 75 20 68 61 76 65 20 63 6c 69 65 6e 74 73 20 75 73 69 6e 67 20 79 6f 75 72 20 56 | if.you.have.clients.using.your.V |
119ca0 | 79 4f 53 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 20 61 73 20 4e 54 50 20 73 65 72 76 65 72 2c 20 | yOS.installation.as.NTP.server,. |
119cc0 | 79 6f 75 20 6d 75 73 74 20 73 70 65 63 69 66 79 20 74 68 65 20 60 61 6c 6c 6f 77 2d 63 6c 69 65 | you.must.specify.the.`allow-clie |
119ce0 | 6e 74 60 20 64 69 72 65 63 74 69 76 65 2e 00 56 79 4f 53 20 41 72 69 73 74 61 20 45 4f 53 20 73 | nt`.directive..VyOS.Arista.EOS.s |
119d00 | 65 74 75 70 00 56 79 4f 53 20 45 53 50 20 67 72 6f 75 70 20 68 61 73 20 74 68 65 20 6e 65 78 74 | etup.VyOS.ESP.group.has.the.next |
119d20 | 20 6f 70 74 69 6f 6e 73 3a 00 56 79 4f 53 20 46 69 65 6c 64 00 56 79 4f 53 20 49 4b 45 20 67 72 | .options:.VyOS.Field.VyOS.IKE.gr |
119d40 | 6f 75 70 20 68 61 73 20 74 68 65 20 6e 65 78 74 20 6f 70 74 69 6f 6e 73 3a 00 56 79 4f 53 20 4d | oup.has.the.next.options:.VyOS.M |
119d60 | 49 42 73 00 56 79 4f 53 20 4e 41 54 36 36 20 44 48 43 50 76 36 20 75 73 69 6e 67 20 61 20 64 75 | IBs.VyOS.NAT66.DHCPv6.using.a.du |
119d80 | 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 00 56 79 4f 53 20 4e 41 54 36 36 20 53 69 6d 70 6c 65 20 | mmy.interface.VyOS.NAT66.Simple. |
119da0 | 43 6f 6e 66 69 67 75 72 65 00 56 79 4f 53 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 | Configure.VyOS.Network.Emulator. |
119dc0 | 70 6f 6c 69 63 79 20 65 6d 75 6c 61 74 65 73 20 74 68 65 20 63 6f 6e 64 69 74 69 6f 6e 73 20 79 | policy.emulates.the.conditions.y |
119de0 | 6f 75 20 63 61 6e 20 73 75 66 66 65 72 20 69 6e 20 61 20 72 65 61 6c 20 6e 65 74 77 6f 72 6b 2e | ou.can.suffer.in.a.real.network. |
119e00 | 20 59 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 | .You.will.be.able.to.configure.t |
119e20 | 68 69 6e 67 73 20 6c 69 6b 65 20 72 61 74 65 2c 20 62 75 72 73 74 2c 20 64 65 6c 61 79 2c 20 70 | hings.like.rate,.burst,.delay,.p |
119e40 | 61 63 6b 65 74 20 6c 6f 73 73 2c 20 70 61 63 6b 65 74 20 63 6f 72 72 75 70 74 69 6f 6e 20 6f 72 | acket.loss,.packet.corruption.or |
119e60 | 20 70 61 63 6b 65 74 20 72 65 6f 72 64 65 72 69 6e 67 2e 00 56 79 4f 53 20 4f 70 74 69 6f 6e 00 | .packet.reordering..VyOS.Option. |
119e80 | 56 79 4f 53 20 50 6f 6c 69 63 79 2d 42 61 73 65 64 20 52 6f 75 74 69 6e 67 20 28 50 42 52 29 20 | VyOS.Policy-Based.Routing.(PBR). |
119ea0 | 77 6f 72 6b 73 20 62 79 20 6d 61 74 63 68 69 6e 67 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 | works.by.matching.source.IP.addr |
119ec0 | 65 73 73 20 72 61 6e 67 65 73 20 61 6e 64 20 66 6f 72 77 61 72 64 69 6e 67 20 74 68 65 20 74 72 | ess.ranges.and.forwarding.the.tr |
119ee0 | 61 66 66 69 63 20 75 73 69 6e 67 20 64 69 66 66 65 72 65 6e 74 20 72 6f 75 74 69 6e 67 20 74 61 | affic.using.different.routing.ta |
119f00 | 62 6c 65 73 2e 00 56 79 4f 53 20 53 4e 4d 50 20 73 75 70 70 6f 72 74 73 20 62 6f 74 68 20 49 50 | bles..VyOS.SNMP.supports.both.IP |
119f20 | 76 34 20 61 6e 64 20 49 50 76 36 2e 00 56 79 4f 53 20 61 6c 73 6f 20 63 6f 6d 65 73 20 77 69 74 | v4.and.IPv6..VyOS.also.comes.wit |
119f40 | 68 20 61 20 62 75 69 6c 64 20 69 6e 20 53 53 54 50 20 73 65 72 76 65 72 2c 20 73 65 65 20 3a 72 | h.a.build.in.SSTP.server,.see.:r |
119f60 | 65 66 3a 60 73 73 74 70 60 2e 00 56 79 4f 53 20 61 6c 73 6f 20 70 72 6f 76 69 64 65 73 20 44 48 | ef:`sstp`..VyOS.also.provides.DH |
119f80 | 43 50 76 36 20 73 65 72 76 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 77 68 69 63 68 20 | CPv6.server.functionality.which. |
119fa0 | 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 00 56 79 | is.described.in.this.section..Vy |
119fc0 | 4f 53 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 73 20 28 63 75 72 72 65 6e 74 6c 79 29 20 74 77 6f | OS.also.supports.(currently).two |
119fe0 | 20 64 69 66 66 65 72 65 6e 74 20 6d 6f 64 65 73 20 6f 66 20 61 75 74 68 65 6e 74 69 63 61 74 69 | .different.modes.of.authenticati |
11a000 | 6f 6e 2c 20 6c 6f 63 61 6c 20 61 6e 64 20 52 41 44 49 55 53 2e 20 54 6f 20 63 72 65 61 74 65 20 | on,.local.and.RADIUS..To.create. |
11a020 | 61 20 6e 65 77 20 6c 6f 63 61 6c 20 75 73 65 72 20 6e 61 6d 65 64 20 60 60 76 79 6f 73 60 60 20 | a.new.local.user.named.``vyos``. |
11a040 | 77 69 74 68 20 70 61 73 73 77 6f 72 64 20 60 60 76 79 6f 73 60 60 20 75 73 65 20 74 68 65 20 66 | with.password.``vyos``.use.the.f |
11a060 | 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 2e 00 56 79 4f 53 20 61 6c 73 6f 20 73 75 70 | ollowing.commands..VyOS.also.sup |
11a080 | 70 6f 72 74 73 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 6d 6f 64 65 73 20 6f 66 20 61 75 74 | ports.two.different.modes.of.aut |
11a0a0 | 68 65 6e 74 69 63 61 74 69 6f 6e 2c 20 6c 6f 63 61 6c 20 61 6e 64 20 52 41 44 49 55 53 2e 20 54 | hentication,.local.and.RADIUS..T |
11a0c0 | 6f 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 6c 6f 63 61 6c 20 75 73 65 72 20 6e 61 6d 65 64 20 | o.create.a.new.local.user.named. |
11a0e0 | 22 76 79 6f 73 22 20 77 69 74 68 20 61 20 70 61 73 73 77 6f 72 64 20 6f 66 20 22 76 79 6f 73 22 | "vyos".with.a.password.of."vyos" |
11a100 | 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 2e 00 56 79 4f | .use.the.following.commands..VyO |
11a120 | 53 20 63 61 6e 20 61 6c 73 6f 20 72 75 6e 20 69 6e 20 44 4d 56 50 4e 20 73 70 6f 6b 65 20 6d 6f | S.can.also.run.in.DMVPN.spoke.mo |
11a140 | 64 65 2e 00 56 79 4f 53 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 74 72 | de..VyOS.can.be.configured.to.tr |
11a160 | 61 63 6b 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 75 73 69 6e 67 20 74 68 65 20 63 6f 6e 6e 65 63 | ack.connections.using.the.connec |
11a180 | 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 73 75 62 73 79 73 74 65 6d 2e 20 43 6f 6e 6e 65 63 74 | tion.tracking.subsystem..Connect |
11a1a0 | 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 62 65 63 6f 6d 65 73 20 6f 70 65 72 61 74 69 6f 6e 61 6c | ion.tracking.becomes.operational |
11a1c0 | 20 6f 6e 63 65 20 65 69 74 68 65 72 20 73 74 61 74 65 66 75 6c 20 66 69 72 65 77 61 6c 6c 20 6f | .once.either.stateful.firewall.o |
11a1e0 | 72 20 4e 41 54 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 56 79 4f 53 20 63 61 6e 20 6e 6f | r.NAT.is.configured..VyOS.can.no |
11a200 | 74 20 6f 6e 6c 79 20 61 63 74 20 61 73 20 61 6e 20 4f 70 65 6e 56 50 4e 20 73 69 74 65 2d 74 6f | t.only.act.as.an.OpenVPN.site-to |
11a220 | 2d 73 69 74 65 20 6f 72 20 73 65 72 76 65 72 20 66 6f 72 20 6d 75 6c 74 69 70 6c 65 20 63 6c 69 | -site.or.server.for.multiple.cli |
11a240 | 65 6e 74 73 2e 20 59 6f 75 20 63 61 6e 20 69 6e 64 65 65 64 20 61 6c 73 6f 20 63 6f 6e 66 69 67 | ents..You.can.indeed.also.config |
11a260 | 75 72 65 20 61 6e 79 20 56 79 4f 53 20 4f 70 65 6e 56 50 4e 20 69 6e 74 65 72 66 61 63 65 20 61 | ure.any.VyOS.OpenVPN.interface.a |
11a280 | 73 20 61 6e 20 4f 70 65 6e 56 50 4e 20 63 6c 69 65 6e 74 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 | s.an.OpenVPN.client.connecting.t |
11a2a0 | 6f 20 61 20 56 79 4f 53 20 4f 70 65 6e 56 50 4e 20 73 65 72 76 65 72 20 6f 72 20 61 6e 79 20 6f | o.a.VyOS.OpenVPN.server.or.any.o |
11a2c0 | 74 68 65 72 20 4f 70 65 6e 56 50 4e 20 73 65 72 76 65 72 2e 00 56 79 4f 53 20 64 65 66 61 75 6c | ther.OpenVPN.server..VyOS.defaul |
11a2e0 | 74 20 77 69 6c 6c 20 62 65 20 60 61 75 74 6f 60 2e 00 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 | t.will.be.`auto`..VyOS.does.not. |
11a300 | 68 61 76 65 20 61 20 73 70 65 63 69 61 6c 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 74 61 72 74 20 | have.a.special.command.to.start. |
11a320 | 74 68 65 20 42 61 62 65 6c 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 42 61 62 65 6c 20 70 72 6f | the.Babel.process..The.Babel.pro |
11a340 | 63 65 73 73 20 73 74 61 72 74 73 20 77 68 65 6e 20 74 68 65 20 66 69 72 73 74 20 42 61 62 65 6c | cess.starts.when.the.first.Babel |
11a360 | 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 | .enabled.interface.is.configured |
11a380 | 2e 00 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 20 73 70 65 63 69 61 6c 20 63 | ..VyOS.does.not.have.a.special.c |
11a3a0 | 6f 6d 6d 61 6e 64 20 74 6f 20 73 74 61 72 74 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 | ommand.to.start.the.OSPF.process |
11a3c0 | 2e 20 54 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 20 73 74 61 72 74 73 20 77 68 65 6e 20 74 | ..The.OSPF.process.starts.when.t |
11a3e0 | 68 65 20 66 69 72 73 74 20 6f 73 70 66 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 20 | he.first.ospf.enabled.interface. |
11a400 | 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 | is.configured..VyOS.does.not.hav |
11a420 | 65 20 61 20 73 70 65 63 69 61 6c 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 74 61 72 74 20 74 68 65 | e.a.special.command.to.start.the |
11a440 | 20 4f 53 50 46 76 33 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 4f 53 50 46 76 33 20 70 72 6f 63 | .OSPFv3.process..The.OSPFv3.proc |
11a460 | 65 73 73 20 73 74 61 72 74 73 20 77 68 65 6e 20 74 68 65 20 66 69 72 73 74 20 6f 73 70 66 20 65 | ess.starts.when.the.first.ospf.e |
11a480 | 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 | nabled.interface.is.configured.. |
11a4a0 | 56 79 4f 53 20 66 61 63 69 6c 69 74 61 74 65 73 20 49 50 20 4d 75 6c 74 69 63 61 73 74 20 62 79 | VyOS.facilitates.IP.Multicast.by |
11a4c0 | 20 73 75 70 70 6f 72 74 69 6e 67 20 2a 2a 50 49 4d 20 53 70 61 72 73 65 20 4d 6f 64 65 2a 2a 2c | .supporting.**PIM.Sparse.Mode**, |
11a4e0 | 20 2a 2a 49 47 4d 50 2a 2a 20 61 6e 64 20 2a 2a 49 47 4d 50 2d 50 72 6f 78 79 2a 2a 2e 00 56 79 | .**IGMP**.and.**IGMP-Proxy**..Vy |
11a500 | 4f 53 20 66 61 63 69 6c 69 74 61 74 65 73 20 49 50 76 36 20 4d 75 6c 74 69 63 61 73 74 20 62 79 | OS.facilitates.IPv6.Multicast.by |
11a520 | 20 73 75 70 70 6f 72 74 69 6e 67 20 2a 2a 50 49 4d 76 36 2a 2a 20 61 6e 64 20 2a 2a 4d 4c 44 2a | .supporting.**PIMv6**.and.**MLD* |
11a540 | 2a 2e 00 56 79 4f 53 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 46 61 73 74 4e 65 74 4d 6f 6e 20 | *..VyOS.includes.the.FastNetMon. |
11a560 | 43 6f 6d 6d 75 6e 69 74 79 20 45 64 69 74 69 6f 6e 2e 00 56 79 4f 53 20 69 73 20 61 62 6c 65 20 | Community.Edition..VyOS.is.able. |
11a580 | 74 6f 20 75 70 64 61 74 65 20 61 20 72 65 6d 6f 74 65 20 44 4e 53 20 72 65 63 6f 72 64 20 77 68 | to.update.a.remote.DNS.record.wh |
11a5a0 | 65 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 67 65 74 73 20 61 20 6e 65 77 20 49 50 20 61 64 | en.an.interface.gets.a.new.IP.ad |
11a5c0 | 64 72 65 73 73 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 64 6f 20 73 6f 2c 20 56 79 4f 53 20 69 | dress..In.order.to.do.so,.VyOS.i |
11a5e0 | 6e 63 6c 75 64 65 73 20 64 64 63 6c 69 65 6e 74 5f 2c 20 61 20 50 65 72 6c 20 73 63 72 69 70 74 | ncludes.ddclient_,.a.Perl.script |
11a600 | 20 77 72 69 74 74 65 6e 20 66 6f 72 20 74 68 69 73 20 6f 6e 6c 79 20 6f 6e 65 20 70 75 72 70 6f | .written.for.this.only.one.purpo |
11a620 | 73 65 2e 00 56 79 4f 53 20 69 73 20 61 6c 73 6f 20 61 62 6c 65 20 74 6f 20 75 73 65 20 61 6e 79 | se..VyOS.is.also.able.to.use.any |
11a640 | 20 73 65 72 76 69 63 65 20 72 65 6c 79 69 6e 67 20 6f 6e 20 70 72 6f 74 6f 63 6f 6c 73 20 73 75 | .service.relying.on.protocols.su |
11a660 | 70 70 6f 72 74 65 64 20 62 79 20 64 64 63 6c 69 65 6e 74 2e 00 56 79 4f 53 20 69 74 73 65 6c 66 | pported.by.ddclient..VyOS.itself |
11a680 | 20 73 75 70 70 6f 72 74 73 20 53 4e 4d 50 76 32 5f 20 28 76 65 72 73 69 6f 6e 20 32 29 20 61 6e | .supports.SNMPv2_.(version.2).an |
11a6a0 | 64 20 53 4e 4d 50 76 33 5f 20 28 76 65 72 73 69 6f 6e 20 33 29 20 77 68 65 72 65 20 74 68 65 20 | d.SNMPv3_.(version.3).where.the. |
11a6c0 | 6c 61 74 65 72 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 62 65 63 61 75 73 65 20 6f 66 20 | later.is.recommended.because.of. |
11a6e0 | 69 6d 70 72 6f 76 65 64 20 73 65 63 75 72 69 74 79 20 28 6f 70 74 69 6f 6e 61 6c 20 61 75 74 68 | improved.security.(optional.auth |
11a700 | 65 6e 74 69 63 61 74 69 6f 6e 20 61 6e 64 20 65 6e 63 72 79 70 74 69 6f 6e 29 2e 00 56 79 4f 53 | entication.and.encryption)..VyOS |
11a720 | 20 6c 65 74 73 20 79 6f 75 20 63 6f 6e 74 72 6f 6c 20 74 72 61 66 66 69 63 20 69 6e 20 6d 61 6e | .lets.you.control.traffic.in.man |
11a740 | 79 20 64 69 66 66 65 72 65 6e 74 20 77 61 79 73 2c 20 68 65 72 65 20 77 65 20 77 69 6c 6c 20 63 | y.different.ways,.here.we.will.c |
11a760 | 6f 76 65 72 20 65 76 65 72 79 20 70 6f 73 73 69 62 69 6c 69 74 79 2e 20 59 6f 75 20 63 61 6e 20 | over.every.possibility..You.can. |
11a780 | 63 6f 6e 66 69 67 75 72 65 20 61 73 20 6d 61 6e 79 20 70 6f 6c 69 63 69 65 73 20 61 73 20 79 6f | configure.as.many.policies.as.yo |
11a7a0 | 75 20 77 61 6e 74 2c 20 62 75 74 20 79 6f 75 20 77 69 6c 6c 20 6f 6e 6c 79 20 62 65 20 61 62 6c | u.want,.but.you.will.only.be.abl |
11a7c0 | 65 20 74 6f 20 61 70 70 6c 79 20 6f 6e 65 20 70 6f 6c 69 63 79 20 70 65 72 20 69 6e 74 65 72 66 | e.to.apply.one.policy.per.interf |
11a7e0 | 61 63 65 20 61 6e 64 20 64 69 72 65 63 74 69 6f 6e 20 28 69 6e 62 6f 75 6e 64 20 6f 72 20 6f 75 | ace.and.direction.(inbound.or.ou |
11a800 | 74 62 6f 75 6e 64 29 2e 00 56 79 4f 53 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 3a 61 62 62 72 | tbound)..VyOS.makes.use.of.:abbr |
11a820 | 3a 60 46 52 52 20 28 46 72 65 65 20 52 61 6e 67 65 20 52 6f 75 74 69 6e 67 29 60 20 61 6e 64 20 | :`FRR.(Free.Range.Routing)`.and. |
11a840 | 77 65 20 77 6f 75 6c 64 20 6c 69 6b 65 20 74 6f 20 74 68 61 6e 6b 20 74 68 65 6d 20 66 6f 72 20 | we.would.like.to.thank.them.for. |
11a860 | 74 68 65 69 72 20 65 66 66 6f 72 74 21 00 56 79 4f 53 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 | their.effort!.VyOS.makes.use.of. |
11a880 | 4c 69 6e 75 78 20 60 6e 65 74 66 69 6c 74 65 72 20 3c 68 74 74 70 73 3a 2f 2f 6e 65 74 66 69 6c | Linux.`netfilter.<https://netfil |
11a8a0 | 74 65 72 2e 6f 72 67 2f 3e 60 5f 20 66 6f 72 20 70 61 63 6b 65 74 20 66 69 6c 74 65 72 69 6e 67 | ter.org/>`_.for.packet.filtering |
11a8c0 | 2e 00 56 79 4f 53 20 6e 6f 74 20 6f 6e 6c 79 20 63 61 6e 20 6e 6f 77 20 6d 61 6e 61 67 65 20 63 | ..VyOS.not.only.can.now.manage.c |
11a8e0 | 65 72 74 69 66 69 63 61 74 65 73 20 69 73 73 75 65 64 20 62 79 20 33 72 64 20 70 61 72 74 79 20 | ertificates.issued.by.3rd.party. |
11a900 | 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 69 65 73 2c 20 69 74 20 63 61 6e 20 | Certificate.Authorities,.it.can. |
11a920 | 61 6c 73 6f 20 61 63 74 20 61 73 20 61 20 43 41 20 6f 6e 20 69 74 73 20 6f 77 6e 2e 20 59 6f 75 | also.act.as.a.CA.on.its.own..You |
11a940 | 20 63 61 6e 20 63 72 65 61 74 65 20 79 6f 75 72 20 6f 77 6e 20 72 6f 6f 74 20 43 41 20 61 6e 64 | .can.create.your.own.root.CA.and |
11a960 | 20 73 69 67 6e 20 6b 65 79 73 20 77 69 74 68 20 69 74 20 62 79 20 6d 61 6b 69 6e 67 20 75 73 65 | .sign.keys.with.it.by.making.use |
11a980 | 20 6f 66 20 73 6f 6d 65 20 73 69 6d 70 6c 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 | .of.some.simple.op-mode.commands |
11a9a0 | 2e 00 56 79 4f 53 20 6e 6f 77 20 61 6c 73 6f 20 68 61 73 20 74 68 65 20 61 62 69 6c 69 74 79 20 | ..VyOS.now.also.has.the.ability. |
11a9c0 | 74 6f 20 63 72 65 61 74 65 20 43 41 73 2c 20 6b 65 79 73 2c 20 44 69 66 66 69 65 2d 48 65 6c 6c | to.create.CAs,.keys,.Diffie-Hell |
11a9e0 | 6d 61 6e 20 61 6e 64 20 6f 74 68 65 72 20 6b 65 79 70 61 69 72 73 20 66 72 6f 6d 20 61 6e 20 65 | man.and.other.keypairs.from.an.e |
11aa00 | 61 73 79 20 74 6f 20 61 63 63 65 73 73 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6c 65 76 65 6c 20 | asy.to.access.operational.level. |
11aa20 | 63 6f 6d 6d 61 6e 64 2e 00 56 79 4f 53 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6d 6f 64 65 20 63 | command..VyOS.operational.mode.c |
11aa40 | 6f 6d 6d 61 6e 64 73 20 61 72 65 20 6e 6f 74 20 6f 6e 6c 79 20 61 76 61 69 6c 61 62 6c 65 20 66 | ommands.are.not.only.available.f |
11aa60 | 6f 72 20 67 65 6e 65 72 61 74 69 6e 67 20 6b 65 79 73 20 62 75 74 20 61 6c 73 6f 20 74 6f 20 64 | or.generating.keys.but.also.to.d |
11aa80 | 69 73 70 6c 61 79 20 74 68 65 6d 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 20 61 6e 20 48 54 54 | isplay.them..VyOS.provide.an.HTT |
11aaa0 | 50 20 41 50 49 2e 20 59 6f 75 20 63 61 6e 20 75 73 65 20 69 74 20 74 6f 20 65 78 65 63 75 74 65 | P.API..You.can.use.it.to.execute |
11aac0 | 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 2c 20 75 70 64 61 74 65 20 56 79 4f 53 2c 20 | .op-mode.commands,.update.VyOS,. |
11aae0 | 73 65 74 20 6f 72 20 64 65 6c 65 74 65 20 63 6f 6e 66 69 67 2e 00 56 79 4f 53 20 70 72 6f 76 69 | set.or.delete.config..VyOS.provi |
11ab00 | 64 65 73 20 44 4e 53 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 66 6f 72 20 73 6d 61 6c 6c | des.DNS.infrastructure.for.small |
11ab20 | 20 6e 65 74 77 6f 72 6b 73 2e 20 49 74 20 69 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 62 65 20 | .networks..It.is.designed.to.be. |
11ab40 | 6c 69 67 68 74 77 65 69 67 68 74 20 61 6e 64 20 68 61 76 65 20 61 20 73 6d 61 6c 6c 20 66 6f 6f | lightweight.and.have.a.small.foo |
11ab60 | 74 70 72 69 6e 74 2c 20 73 75 69 74 61 62 6c 65 20 66 6f 72 20 72 65 73 6f 75 72 63 65 20 63 6f | tprint,.suitable.for.resource.co |
11ab80 | 6e 73 74 72 61 69 6e 65 64 20 72 6f 75 74 65 72 73 20 61 6e 64 20 66 69 72 65 77 61 6c 6c 73 2e | nstrained.routers.and.firewalls. |
11aba0 | 20 46 6f 72 20 74 68 69 73 20 77 65 20 75 74 69 6c 69 7a 65 20 50 6f 77 65 72 44 4e 53 20 72 65 | .For.this.we.utilize.PowerDNS.re |
11abc0 | 63 75 72 73 6f 72 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 48 69 67 68 20 41 76 61 69 6c | cursor..VyOS.provides.High.Avail |
11abe0 | 61 62 69 6c 69 74 79 20 73 75 70 70 6f 72 74 20 66 6f 72 20 44 48 43 50 20 73 65 72 76 65 72 2e | ability.support.for.DHCP.server. |
11ac00 | 20 44 48 43 50 20 48 69 67 68 20 41 76 61 69 6c 61 62 69 6c 69 74 79 20 63 61 6e 20 61 63 74 20 | .DHCP.High.Availability.can.act. |
11ac20 | 69 6e 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 6d 6f 64 65 73 3a 00 56 79 4f 53 20 70 72 6f | in.two.different.modes:.VyOS.pro |
11ac40 | 76 69 64 65 73 20 61 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 61 20 63 6f | vides.a.command.to.generate.a.co |
11ac60 | 6e 6e 65 63 74 69 6f 6e 20 70 72 6f 66 69 6c 65 20 75 73 65 64 20 62 79 20 57 69 6e 64 6f 77 73 | nnection.profile.used.by.Windows |
11ac80 | 20 63 6c 69 65 6e 74 73 20 74 68 61 74 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 | .clients.that.will.connect.to.th |
11aca0 | 65 20 22 72 77 22 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 6e 20 6f 75 72 20 56 79 4f 53 20 73 65 | e."rw".connection.on.our.VyOS.se |
11acc0 | 72 76 65 72 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 70 6f 6c 69 63 69 65 73 20 63 6f 6d | rver..VyOS.provides.policies.com |
11ace0 | 6d 61 6e 64 73 20 65 78 63 6c 75 73 69 76 65 6c 79 20 66 6f 72 20 42 47 50 20 74 72 61 66 66 69 | mands.exclusively.for.BGP.traffi |
11ad00 | 63 20 66 69 6c 74 65 72 69 6e 67 20 61 6e 64 20 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 3a 20 2a 2a | c.filtering.and.manipulation:.** |
11ad20 | 61 73 2d 70 61 74 68 2d 6c 69 73 74 2a 2a 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 6d 2e 00 56 | as-path-list**.is.one.of.them..V |
11ad40 | 79 4f 53 20 70 72 6f 76 69 64 65 73 20 70 6f 6c 69 63 69 65 73 20 63 6f 6d 6d 61 6e 64 73 20 65 | yOS.provides.policies.commands.e |
11ad60 | 78 63 6c 75 73 69 76 65 6c 79 20 66 6f 72 20 42 47 50 20 74 72 61 66 66 69 63 20 66 69 6c 74 65 | xclusively.for.BGP.traffic.filte |
11ad80 | 72 69 6e 67 20 61 6e 64 20 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 3a 20 2a 2a 63 6f 6d 6d 75 6e 69 | ring.and.manipulation:.**communi |
11ada0 | 74 79 2d 6c 69 73 74 2a 2a 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 6d 2e 00 56 79 4f 53 20 70 | ty-list**.is.one.of.them..VyOS.p |
11adc0 | 72 6f 76 69 64 65 73 20 70 6f 6c 69 63 69 65 73 20 63 6f 6d 6d 61 6e 64 73 20 65 78 63 6c 75 73 | rovides.policies.commands.exclus |
11ade0 | 69 76 65 6c 79 20 66 6f 72 20 42 47 50 20 74 72 61 66 66 69 63 20 66 69 6c 74 65 72 69 6e 67 20 | ively.for.BGP.traffic.filtering. |
11ae00 | 61 6e 64 20 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 3a 20 2a 2a 65 78 74 63 6f 6d 6d 75 6e 69 74 79 | and.manipulation:.**extcommunity |
11ae20 | 2d 6c 69 73 74 2a 2a 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 6d 2e 00 56 79 4f 53 20 70 72 6f | -list**.is.one.of.them..VyOS.pro |
11ae40 | 76 69 64 65 73 20 70 6f 6c 69 63 69 65 73 20 63 6f 6d 6d 61 6e 64 73 20 65 78 63 6c 75 73 69 76 | vides.policies.commands.exclusiv |
11ae60 | 65 6c 79 20 66 6f 72 20 42 47 50 20 74 72 61 66 66 69 63 20 66 69 6c 74 65 72 69 6e 67 20 61 6e | ely.for.BGP.traffic.filtering.an |
11ae80 | 64 20 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 3a 20 2a 2a 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 | d.manipulation:.**large-communit |
11aea0 | 79 2d 6c 69 73 74 2a 2a 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 6d 2e 00 56 79 4f 53 20 70 72 | y-list**.is.one.of.them..VyOS.pr |
11aec0 | 6f 76 69 64 65 73 20 73 6f 6d 65 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 | ovides.some.operational.commands |
11aee0 | 20 6f 6e 20 4f 70 65 6e 56 50 4e 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 73 75 70 70 6f | .on.OpenVPN..VyOS.provides.suppo |
11af00 | 72 74 20 66 6f 72 20 44 48 43 50 20 66 61 69 6c 6f 76 65 72 2e 20 44 48 43 50 20 66 61 69 6c 6f | rt.for.DHCP.failover..DHCP.failo |
11af20 | 76 65 72 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 65 78 70 6c 69 63 69 74 6c | ver.must.be.configured.explicitl |
11af40 | 79 20 62 79 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 74 61 74 65 6d 65 6e 74 73 2e 00 56 | y.by.the.following.statements..V |
11af60 | 79 4f 53 20 70 72 6f 76 69 64 65 73 20 74 68 69 73 20 75 74 69 6c 69 74 79 20 74 6f 20 69 6d 70 | yOS.provides.this.utility.to.imp |
11af80 | 6f 72 74 20 65 78 69 73 74 69 6e 67 20 63 65 72 74 69 66 69 63 61 74 65 73 2f 6b 65 79 20 66 69 | ort.existing.certificates/key.fi |
11afa0 | 6c 65 73 20 64 69 72 65 63 74 6c 79 20 69 6e 74 6f 20 50 4b 49 20 66 72 6f 6d 20 6f 70 2d 6d 6f | les.directly.into.PKI.from.op-mo |
11afc0 | 64 65 2e 20 50 72 65 76 69 6f 75 73 20 74 6f 20 56 79 4f 53 20 31 2e 34 2c 20 63 65 72 74 69 66 | de..Previous.to.VyOS.1.4,.certif |
11afe0 | 69 63 61 74 65 73 20 77 65 72 65 20 73 74 6f 72 65 64 20 75 6e 64 65 72 20 74 68 65 20 2f 63 6f | icates.were.stored.under.the./co |
11b000 | 6e 66 69 67 20 66 6f 6c 64 65 72 20 70 65 72 6d 61 6e 65 6e 74 6c 79 20 61 6e 64 20 77 69 6c 6c | nfig.folder.permanently.and.will |
11b020 | 20 62 65 20 72 65 74 61 69 6e 65 64 20 70 6f 73 74 20 75 70 67 72 61 64 65 2e 00 56 79 4f 53 20 | .be.retained.post.upgrade..VyOS. |
11b040 | 72 65 76 65 72 73 65 2d 70 72 6f 78 79 20 69 73 20 62 61 6c 61 6e 63 65 72 20 61 6e 64 20 70 72 | reverse-proxy.is.balancer.and.pr |
11b060 | 6f 78 79 20 73 65 72 76 65 72 20 74 68 61 74 20 70 72 6f 76 69 64 65 73 20 68 69 67 68 2d 61 76 | oxy.server.that.provides.high-av |
11b080 | 61 69 6c 61 62 69 6c 69 74 79 2c 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 61 6e 64 20 70 | ailability,.load.balancing.and.p |
11b0a0 | 72 6f 78 79 69 6e 67 20 66 6f 72 20 54 43 50 20 28 6c 65 76 65 6c 20 34 29 20 61 6e 64 20 48 54 | roxying.for.TCP.(level.4).and.HT |
11b0c0 | 54 50 2d 62 61 73 65 64 20 28 6c 65 76 65 6c 20 37 29 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2e | TP-based.(level.7).applications. |
11b0e0 | 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 3a 61 62 62 72 3a 60 50 49 4d 2d 53 4d 20 28 50 49 | .VyOS.supports.:abbr:`PIM-SM.(PI |
11b100 | 4d 20 53 70 61 72 73 65 20 4d 6f 64 65 29 60 20 61 73 20 77 65 6c 6c 20 61 73 20 3a 61 62 62 72 | M.Sparse.Mode)`.as.well.as.:abbr |
11b120 | 3a 60 49 47 4d 50 20 28 49 6e 74 65 72 6e 65 74 20 47 72 6f 75 70 20 4d 61 6e 61 67 65 6d 65 6e | :`IGMP.(Internet.Group.Managemen |
11b140 | 74 20 50 72 6f 74 6f 63 6f 6c 29 60 20 76 32 20 61 6e 64 20 76 33 00 56 79 4f 53 20 73 75 70 70 | t.Protocol)`.v2.and.v3.VyOS.supp |
11b160 | 6f 72 74 73 20 62 6f 74 68 20 49 47 4d 50 20 76 65 72 73 69 6f 6e 20 32 20 61 6e 64 20 76 65 72 | orts.both.IGMP.version.2.and.ver |
11b180 | 73 69 6f 6e 20 33 20 28 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 73 6f 75 72 63 65 2d 73 70 65 63 | sion.3.(which.allows.source-spec |
11b1a0 | 69 66 69 63 20 6d 75 6c 74 69 63 61 73 74 29 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 62 | ific.multicast)..VyOS.supports.b |
11b1c0 | 6f 74 68 20 4d 4c 44 20 76 65 72 73 69 6f 6e 20 31 20 61 6e 64 20 76 65 72 73 69 6f 6e 20 32 20 | oth.MLD.version.1.and.version.2. |
11b1e0 | 28 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 73 6f 75 72 63 65 2d 73 70 65 63 69 66 69 63 20 6d 75 | (which.allows.source-specific.mu |
11b200 | 6c 74 69 63 61 73 74 29 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 66 6c 6f 77 2d 61 63 63 | lticast)..VyOS.supports.flow-acc |
11b220 | 6f 75 6e 74 69 6e 67 20 66 6f 72 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 74 | ounting.for.both.IPv4.and.IPv6.t |
11b240 | 72 61 66 66 69 63 2e 20 54 68 65 20 73 79 73 74 65 6d 20 61 63 74 73 20 61 73 20 61 20 66 6c 6f | raffic..The.system.acts.as.a.flo |
11b260 | 77 20 65 78 70 6f 72 74 65 72 2c 20 61 6e 64 20 79 6f 75 20 61 72 65 20 66 72 65 65 20 74 6f 20 | w.exporter,.and.you.are.free.to. |
11b280 | 75 73 65 20 69 74 20 77 69 74 68 20 61 6e 79 20 63 6f 6d 70 61 74 69 62 6c 65 20 63 6f 6c 6c 65 | use.it.with.any.compatible.colle |
11b2a0 | 63 74 6f 72 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 6d 75 6c 74 69 70 6c 65 20 49 4b 45 | ctor..VyOS.supports.multiple.IKE |
11b2c0 | 76 32 20 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 20 45 76 | v2.remote-access.connections..Ev |
11b2e0 | 65 72 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 63 61 6e 20 68 61 76 65 20 69 74 73 20 64 65 64 69 | ery.connection.can.have.its.dedi |
11b300 | 63 61 74 65 64 20 49 4b 45 2f 45 53 50 20 63 69 70 68 65 72 73 2c 20 63 65 72 74 69 66 69 63 61 | cated.IKE/ESP.ciphers,.certifica |
11b320 | 74 65 73 20 6f 72 20 6c 6f 63 61 6c 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 20 66 6f 72 20 | tes.or.local.listen.address.for. |
11b340 | 65 2e 67 2e 20 69 6e 62 6f 75 6e 64 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 2e 00 56 79 4f | e.g..inbound.load.balancing..VyO |
11b360 | 53 20 73 75 70 70 6f 72 74 73 20 6f 6e 6c 69 6e 65 20 63 68 65 63 6b 69 6e 67 20 66 6f 72 20 75 | S.supports.online.checking.for.u |
11b380 | 70 64 61 74 65 73 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 73 46 6c 6f 77 20 61 63 63 6f 75 | pdates.VyOS.supports.sFlow.accou |
11b3a0 | 6e 74 69 6e 67 20 66 6f 72 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 74 72 61 | nting.for.both.IPv4.and.IPv6.tra |
11b3c0 | 66 66 69 63 2e 20 54 68 65 20 73 79 73 74 65 6d 20 61 63 74 73 20 61 73 20 61 20 66 6c 6f 77 20 | ffic..The.system.acts.as.a.flow. |
11b3e0 | 65 78 70 6f 72 74 65 72 2c 20 61 6e 64 20 79 6f 75 20 61 72 65 20 66 72 65 65 20 74 6f 20 75 73 | exporter,.and.you.are.free.to.us |
11b400 | 65 20 69 74 20 77 69 74 68 20 61 6e 79 20 63 6f 6d 70 61 74 69 62 6c 65 20 63 6f 6c 6c 65 63 74 | e.it.with.any.compatible.collect |
11b420 | 6f 72 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 73 65 74 74 69 6e 67 20 74 69 6d 65 6f 75 | or..VyOS.supports.setting.timeou |
11b440 | 74 73 20 66 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 | ts.for.connections.according.to. |
11b460 | 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 79 70 65 2e 20 59 6f 75 20 63 61 6e 20 73 65 74 | the.connection.type..You.can.set |
11b480 | 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 73 20 66 6f 72 20 67 65 6e 65 72 69 63 20 63 6f 6e 6e | .timeout.values.for.generic.conn |
11b4a0 | 65 63 74 69 6f 6e 73 2c 20 66 6f 72 20 49 43 4d 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 55 | ections,.for.ICMP.connections,.U |
11b4c0 | 44 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 6f 72 20 66 6f 72 20 54 43 50 20 63 6f 6e 6e 65 | DP.connections,.or.for.TCP.conne |
11b4e0 | 63 74 69 6f 6e 73 20 69 6e 20 61 20 6e 75 6d 62 65 72 20 6f 66 20 64 69 66 66 65 72 65 6e 74 20 | ctions.in.a.number.of.different. |
11b500 | 73 74 61 74 65 73 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 73 65 74 74 69 6e 67 20 75 70 | states..VyOS.supports.setting.up |
11b520 | 20 50 50 50 6f 45 20 69 6e 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 77 61 79 73 20 74 6f 20 | .PPPoE.in.two.different.ways.to. |
11b540 | 61 20 50 50 50 6f 45 20 69 6e 74 65 72 6e 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 54 68 69 | a.PPPoE.internet.connection..Thi |
11b560 | 73 20 69 73 20 62 65 63 61 75 73 65 20 6d 6f 73 74 20 49 53 50 73 20 70 72 6f 76 69 64 65 20 61 | s.is.because.most.ISPs.provide.a |
11b580 | 20 6d 6f 64 65 6d 20 74 68 61 74 20 69 73 20 61 6c 73 6f 20 61 20 77 69 72 65 6c 65 73 73 20 72 | .modem.that.is.also.a.wireless.r |
11b5a0 | 6f 75 74 65 72 2e 00 56 79 4f 53 20 75 73 65 73 20 49 53 43 20 44 48 43 50 20 73 65 72 76 65 72 | outer..VyOS.uses.ISC.DHCP.server |
11b5c0 | 20 66 6f 72 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 20 | .for.both.IPv4.and.IPv6.address. |
11b5e0 | 61 73 73 69 67 6e 6d 65 6e 74 2e 00 56 79 4f 53 20 75 73 65 73 20 4b 65 61 20 44 48 43 50 20 73 | assignment..VyOS.uses.Kea.DHCP.s |
11b600 | 65 72 76 65 72 20 66 6f 72 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 | erver.for.both.IPv4.and.IPv6.add |
11b620 | 72 65 73 73 20 61 73 73 69 67 6e 6d 65 6e 74 2e 00 56 79 4f 53 20 75 73 65 73 20 5b 46 52 52 6f | ress.assignment..VyOS.uses.[FRRo |
11b640 | 75 74 69 6e 67 5d 28 68 74 74 70 73 3a 2f 2f 66 72 72 6f 75 74 69 6e 67 2e 6f 72 67 2f 29 20 61 | uting](https://frrouting.org/).a |
11b660 | 73 20 74 68 65 20 63 6f 6e 74 72 6f 6c 20 70 6c 61 6e 65 20 66 6f 72 20 64 79 6e 61 6d 69 63 20 | s.the.control.plane.for.dynamic. |
11b680 | 61 6e 64 20 73 74 61 74 69 63 20 72 6f 75 74 69 6e 67 2e 20 54 68 65 20 72 6f 75 74 69 6e 67 20 | and.static.routing..The.routing. |
11b6a0 | 64 61 65 6d 6f 6e 20 62 65 68 61 76 69 6f 72 20 63 61 6e 20 62 65 20 61 64 6a 75 73 74 65 64 20 | daemon.behavior.can.be.adjusted. |
11b6c0 | 64 75 72 69 6e 67 20 72 75 6e 74 69 6d 65 2c 20 62 75 74 20 72 65 71 75 69 72 65 20 65 69 74 68 | during.runtime,.but.require.eith |
11b6e0 | 65 72 20 61 20 72 65 73 74 61 72 74 20 6f 66 20 74 68 65 20 72 6f 75 74 69 6e 67 20 64 61 65 6d | er.a.restart.of.the.routing.daem |
11b700 | 6f 6e 2c 20 6f 72 20 61 20 72 65 62 6f 6f 74 20 6f 66 20 74 68 65 20 73 79 73 74 65 6d 2e 00 56 | on,.or.a.reboot.of.the.system..V |
11b720 | 79 4f 53 20 75 73 65 73 20 74 68 65 20 60 69 6e 74 65 72 66 61 63 65 73 20 77 77 61 6e 60 20 73 | yOS.uses.the.`interfaces.wwan`.s |
11b740 | 75 62 73 79 73 74 65 6d 20 66 6f 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 56 79 4f 53 | ubsystem.for.configuration..VyOS |
11b760 | 20 75 73 65 73 20 74 68 65 20 60 6d 69 72 72 6f 72 60 20 6f 70 74 69 6f 6e 20 74 6f 20 63 6f 6e | .uses.the.`mirror`.option.to.con |
11b780 | 66 69 67 75 72 65 20 70 6f 72 74 20 6d 69 72 72 6f 72 69 6e 67 2e 20 54 68 65 20 63 6f 6e 66 69 | figure.port.mirroring..The.confi |
11b7a0 | 67 75 72 61 74 69 6f 6e 20 69 73 20 64 69 76 69 64 65 64 20 69 6e 74 6f 20 32 20 64 69 66 66 65 | guration.is.divided.into.2.diffe |
11b7c0 | 72 65 6e 74 20 64 69 72 65 63 74 69 6f 6e 73 2e 20 44 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 | rent.directions..Destination.por |
11b7e0 | 74 73 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 64 69 66 66 | ts.should.be.configured.for.diff |
11b800 | 65 72 65 6e 74 20 74 72 61 66 66 69 63 20 64 69 72 65 63 74 69 6f 6e 73 2e 00 56 79 4f 53 20 75 | erent.traffic.directions..VyOS.u |
11b820 | 74 69 6c 69 7a 65 73 20 60 61 63 63 65 6c 2d 70 70 70 60 5f 20 74 6f 20 70 72 6f 76 69 64 65 20 | tilizes.`accel-ppp`_.to.provide. |
11b840 | 3a 61 62 62 72 3a 60 49 50 6f 45 20 28 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 6f 6c 20 6f | :abbr:`IPoE.(Internet.Protocol.o |
11b860 | 76 65 72 20 45 74 68 65 72 6e 65 74 29 60 20 73 65 72 76 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c | ver.Ethernet)`.server.functional |
11b880 | 69 74 79 2e 20 49 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 69 74 68 20 6c 6f 63 61 6c 20 61 | ity..It.can.be.used.with.local.a |
11b8a0 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 28 6d 61 63 2d 61 64 64 72 65 73 73 29 20 6f 72 20 61 | uthentication.(mac-address).or.a |
11b8c0 | 20 63 6f 6e 6e 65 63 74 65 64 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 56 79 4f 53 20 75 | .connected.RADIUS.server..VyOS.u |
11b8e0 | 74 69 6c 69 7a 65 73 20 60 61 63 63 65 6c 2d 70 70 70 60 5f 20 74 6f 20 70 72 6f 76 69 64 65 20 | tilizes.`accel-ppp`_.to.provide. |
11b900 | 50 50 50 6f 45 20 73 65 72 76 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2e 20 49 74 20 63 | PPPoE.server.functionality..It.c |
11b920 | 61 6e 20 62 65 20 75 73 65 64 20 77 69 74 68 20 6c 6f 63 61 6c 20 61 75 74 68 65 6e 74 69 63 61 | an.be.used.with.local.authentica |
11b940 | 74 69 6f 6e 20 6f 72 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 52 41 44 49 55 53 20 73 65 72 76 65 | tion.or.a.connected.RADIUS.serve |
11b960 | 72 2e 00 56 79 4f 53 20 75 74 69 6c 69 7a 65 73 20 61 63 63 65 6c 2d 70 70 70 5f 20 74 6f 20 70 | r..VyOS.utilizes.accel-ppp_.to.p |
11b980 | 72 6f 76 69 64 65 20 4c 32 54 50 20 73 65 72 76 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 | rovide.L2TP.server.functionality |
11b9a0 | 2e 20 49 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 69 74 68 20 6c 6f 63 61 6c 20 61 75 74 68 | ..It.can.be.used.with.local.auth |
11b9c0 | 65 6e 74 69 63 61 74 69 6f 6e 20 6f 72 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 52 41 44 49 55 53 | entication.or.a.connected.RADIUS |
11b9e0 | 20 73 65 72 76 65 72 2e 00 56 79 4f 53 20 75 74 69 6c 69 7a 65 73 20 61 63 63 65 6c 2d 70 70 70 | .server..VyOS.utilizes.accel-ppp |
11ba00 | 5f 20 74 6f 20 70 72 6f 76 69 64 65 20 53 53 54 50 20 73 65 72 76 65 72 20 66 75 6e 63 74 69 6f | _.to.provide.SSTP.server.functio |
11ba20 | 6e 61 6c 69 74 79 2e 20 57 65 20 73 75 70 70 6f 72 74 20 62 6f 74 68 20 6c 6f 63 61 6c 20 61 6e | nality..We.support.both.local.an |
11ba40 | 64 20 52 41 44 49 55 53 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 00 57 41 4e 20 4c 6f 61 | d.RADIUS.authentication..WAN.Loa |
11ba60 | 64 20 42 61 6c 61 63 69 6e 67 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 75 73 65 64 20 77 68 | d.Balacing.should.not.be.used.wh |
11ba80 | 65 6e 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 75 | en.dynamic.routing.protocol.is.u |
11baa0 | 73 65 64 2f 6e 65 65 64 65 64 2e 20 54 68 69 73 20 66 65 61 74 75 72 65 20 63 72 65 61 74 65 73 | sed/needed..This.feature.creates |
11bac0 | 20 63 75 73 74 6f 6d 69 7a 65 64 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 20 61 6e 64 20 66 | .customized.routing.tables.and.f |
11bae0 | 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 2c 20 74 68 61 74 20 6d 61 6b 65 73 20 69 74 20 69 6e 63 | irewall.rules,.that.makes.it.inc |
11bb00 | 6f 6d 70 61 74 69 62 6c 65 20 74 6f 20 75 73 65 20 77 69 74 68 20 72 6f 75 74 69 6e 67 20 70 72 | ompatible.to.use.with.routing.pr |
11bb20 | 6f 74 6f 63 6f 6c 73 2e 00 57 41 4e 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 60 65 74 68 31 60 | otocols..WAN.interface.on.`eth1` |
11bb40 | 00 57 41 4e 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 00 57 4c 41 4e 2f 57 49 46 49 20 2d 20 | .WAN.load.balancing.WLAN/WIFI.-. |
11bb60 | 57 69 72 65 6c 65 73 73 20 4c 41 4e 00 57 4d 4d 2d 50 53 20 55 6e 73 63 68 65 64 75 6c 65 64 20 | Wireless.LAN.WMM-PS.Unscheduled. |
11bb80 | 41 75 74 6f 6d 61 74 69 63 20 50 6f 77 65 72 20 53 61 76 65 20 44 65 6c 69 76 65 72 79 20 5b 55 | Automatic.Power.Save.Delivery.[U |
11bba0 | 2d 41 50 53 44 5d 00 57 50 41 20 70 61 73 73 70 68 72 61 73 65 20 60 60 31 32 33 34 35 36 37 38 | -APSD].WPA.passphrase.``12345678 |
11bbc0 | 60 60 00 57 57 41 4e 20 2d 20 57 69 72 65 6c 65 73 73 20 57 69 64 65 2d 41 72 65 61 2d 4e 65 74 | ``.WWAN.-.Wireless.Wide-Area-Net |
11bbe0 | 77 6f 72 6b 00 57 61 72 6e 69 6e 67 00 57 61 72 6e 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 00 | work.Warning.Warning.conditions. |
11bc00 | 57 65 20 61 73 73 75 6d 65 20 74 68 61 74 20 74 68 65 20 4c 45 46 54 20 72 6f 75 74 65 72 20 68 | We.assume.that.the.LEFT.router.h |
11bc20 | 61 73 20 73 74 61 74 69 63 20 31 39 32 2e 30 2e 32 2e 31 30 20 61 64 64 72 65 73 73 20 6f 6e 20 | as.static.192.0.2.10.address.on. |
11bc40 | 65 74 68 30 2c 20 61 6e 64 20 74 68 65 20 52 49 47 48 54 20 72 6f 75 74 65 72 20 68 61 73 20 61 | eth0,.and.the.RIGHT.router.has.a |
11bc60 | 20 64 79 6e 61 6d 69 63 20 61 64 64 72 65 73 73 20 6f 6e 20 65 74 68 30 2e 00 57 65 20 63 61 6e | .dynamic.address.on.eth0..We.can |
11bc80 | 20 61 6c 73 6f 20 63 72 65 61 74 65 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 73 20 75 73 | .also.create.the.certificates.us |
11bca0 | 69 6e 67 20 43 65 72 62 6f 72 74 20 77 68 69 63 68 20 69 73 20 61 6e 20 65 61 73 79 2d 74 6f 2d | ing.Cerbort.which.is.an.easy-to- |
11bcc0 | 75 73 65 20 63 6c 69 65 6e 74 20 74 68 61 74 20 66 65 74 63 68 65 73 20 61 20 63 65 72 74 69 66 | use.client.that.fetches.a.certif |
11bce0 | 69 63 61 74 65 20 66 72 6f 6d 20 4c 65 74 27 73 20 45 6e 63 72 79 70 74 20 61 6e 20 6f 70 65 6e | icate.from.Let's.Encrypt.an.open |
11bd00 | 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 20 6c 61 75 6e 63 68 65 64 20 | .certificate.authority.launched. |
11bd20 | 62 79 20 74 68 65 20 45 46 46 2c 20 4d 6f 7a 69 6c 6c 61 2c 20 61 6e 64 20 6f 74 68 65 72 73 20 | by.the.EFF,.Mozilla,.and.others. |
11bd40 | 61 6e 64 20 64 65 70 6c 6f 79 73 20 69 74 20 74 6f 20 61 20 77 65 62 20 73 65 72 76 65 72 2e 00 | and.deploys.it.to.a.web.server.. |
11bd60 | 57 65 20 63 61 6e 20 62 75 69 6c 64 20 72 6f 75 74 65 2d 6d 61 70 73 20 66 6f 72 20 69 6d 70 6f | We.can.build.route-maps.for.impo |
11bd80 | 72 74 20 62 61 73 65 64 20 6f 6e 20 74 68 65 73 65 20 73 74 61 74 65 73 2e 20 48 65 72 65 20 69 | rt.based.on.these.states..Here.i |
11bda0 | 73 20 61 20 73 69 6d 70 6c 65 20 52 50 4b 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 77 | s.a.simple.RPKI.configuration,.w |
11bdc0 | 68 65 72 65 20 60 72 6f 75 74 69 6e 61 74 6f 72 60 20 69 73 20 74 68 65 20 52 50 4b 49 2d 76 61 | here.`routinator`.is.the.RPKI-va |
11bde0 | 6c 69 64 61 74 69 6e 67 20 22 63 61 63 68 65 22 20 73 65 72 76 65 72 20 77 69 74 68 20 69 70 20 | lidating."cache".server.with.ip. |
11be00 | 60 31 39 32 2e 30 2e 32 2e 31 60 3a 00 57 65 20 63 61 6e 27 74 20 73 75 70 70 6f 72 74 20 61 6c | `192.0.2.1`:.We.can't.support.al |
11be20 | 6c 20 64 69 73 70 6c 61 79 73 20 66 72 6f 6d 20 74 68 65 20 62 65 67 69 6e 6e 69 6e 67 2e 20 49 | l.displays.from.the.beginning..I |
11be40 | 66 20 79 6f 75 72 20 64 69 73 70 6c 61 79 20 74 79 70 65 20 69 73 20 6d 69 73 73 69 6e 67 2c 20 | f.your.display.type.is.missing,. |
11be60 | 70 6c 65 61 73 65 20 63 72 65 61 74 65 20 61 20 66 65 61 74 75 72 65 20 72 65 71 75 65 73 74 20 | please.create.a.feature.request. |
11be80 | 76 69 61 20 50 68 61 62 72 69 63 61 74 6f 72 5f 2e 00 57 65 20 63 6f 6e 66 69 67 75 72 65 20 61 | via.Phabricator_..We.configure.a |
11bea0 | 20 6e 65 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6e 61 6d 65 64 20 60 60 72 77 60 60 20 66 6f 72 | .new.connection.named.``rw``.for |
11bec0 | 20 72 6f 61 64 2d 77 61 72 72 69 6f 72 2c 20 74 68 61 74 20 69 64 65 6e 74 69 66 69 65 73 20 69 | .road-warrior,.that.identifies.i |
11bee0 | 74 73 65 6c 66 20 61 73 20 60 60 31 39 32 2e 30 2e 32 2e 31 60 60 20 74 6f 20 74 68 65 20 63 6c | tself.as.``192.0.2.1``.to.the.cl |
11bf00 | 69 65 6e 74 73 20 61 6e 64 20 75 73 65 73 20 74 68 65 20 60 60 76 79 6f 73 60 60 20 63 65 72 74 | ients.and.uses.the.``vyos``.cert |
11bf20 | 69 66 69 63 61 74 65 20 73 69 67 6e 65 64 20 62 79 20 74 68 65 20 60 43 41 63 65 72 74 5f 43 6c | ificate.signed.by.the.`CAcert_Cl |
11bf40 | 61 73 73 33 5f 52 6f 6f 74 60 60 20 69 6e 74 65 72 6d 65 64 69 61 74 65 20 43 41 2e 20 57 65 20 | ass3_Root``.intermediate.CA..We. |
11bf60 | 73 65 6c 65 63 74 20 6f 75 72 20 70 72 65 76 69 6f 75 73 6c 79 20 73 70 65 63 69 66 69 65 64 20 | select.our.previously.specified. |
11bf80 | 49 4b 45 2f 45 53 50 20 67 72 6f 75 70 73 20 61 6e 64 20 61 6c 73 6f 20 6c 69 6e 6b 20 74 68 65 | IKE/ESP.groups.and.also.link.the |
11bfa0 | 20 49 50 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 74 6f 20 64 72 61 77 20 61 64 64 72 65 73 73 | .IP.address.pool.to.draw.address |
11bfc0 | 65 73 20 66 72 6f 6d 2e 00 57 65 20 63 6f 75 6c 64 20 65 78 70 61 6e 64 20 6f 6e 20 74 68 69 73 | es.from..We.could.expand.on.this |
11bfe0 | 20 61 6e 64 20 61 6c 73 6f 20 64 65 6e 79 20 6c 69 6e 6b 20 6c 6f 63 61 6c 20 61 6e 64 20 6d 75 | .and.also.deny.link.local.and.mu |
11c000 | 6c 74 69 63 61 73 74 20 69 6e 20 74 68 65 20 72 75 6c 65 20 32 30 20 61 63 74 69 6f 6e 20 64 65 | lticast.in.the.rule.20.action.de |
11c020 | 6e 79 2e 00 57 65 20 64 6f 20 6e 6f 74 20 68 61 76 65 20 43 4c 49 20 6e 6f 64 65 73 20 66 6f 72 | ny..We.do.not.have.CLI.nodes.for |
11c040 | 20 65 76 65 72 79 20 73 69 6e 67 6c 65 20 4f 70 65 6e 56 50 4e 20 6f 70 74 69 6f 6e 2e 20 49 66 | .every.single.OpenVPN.option..If |
11c060 | 20 61 6e 20 6f 70 74 69 6f 6e 20 69 73 20 6d 69 73 73 69 6e 67 2c 20 61 20 66 65 61 74 75 72 65 | .an.option.is.missing,.a.feature |
11c080 | 20 72 65 71 75 65 73 74 20 73 68 6f 75 6c 64 20 62 65 20 6f 70 65 6e 65 64 20 61 74 20 50 68 61 | .request.should.be.opened.at.Pha |
11c0a0 | 62 72 69 63 61 74 6f 72 5f 20 73 6f 20 61 6c 6c 20 75 73 65 72 73 20 63 61 6e 20 62 65 6e 65 66 | bricator_.so.all.users.can.benef |
11c0c0 | 69 74 20 66 72 6f 6d 20 69 74 20 28 73 65 65 20 3a 72 65 66 3a 60 69 73 73 75 65 73 5f 66 65 61 | it.from.it.(see.:ref:`issues_fea |
11c0e0 | 74 75 72 65 73 60 29 2e 00 57 65 20 64 6f 6e 27 74 20 72 65 63 6f 6d 65 6e 64 20 74 6f 20 75 73 | tures`)..We.don't.recomend.to.us |
11c100 | 65 20 61 72 67 75 6d 65 6e 74 73 2e 20 55 73 69 6e 67 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 | e.arguments..Using.environments. |
11c120 | 69 73 20 6d 6f 72 65 20 70 72 65 66 66 65 72 65 62 6c 65 2e 00 57 65 20 67 65 6e 65 72 61 74 65 | is.more.preffereble..We.generate |
11c140 | 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 70 72 6f 66 69 6c 65 20 75 73 65 64 20 62 79 20 57 69 | .a.connection.profile.used.by.Wi |
11c160 | 6e 64 6f 77 73 20 63 6c 69 65 6e 74 73 20 74 68 61 74 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 | ndows.clients.that.will.connect. |
11c180 | 74 6f 20 74 68 65 20 22 72 77 22 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 6e 20 6f 75 72 20 56 79 | to.the."rw".connection.on.our.Vy |
11c1a0 | 4f 53 20 73 65 72 76 65 72 20 6f 6e 20 74 68 65 20 56 50 4e 20 73 65 72 76 65 72 73 20 49 50 20 | OS.server.on.the.VPN.servers.IP. |
11c1c0 | 61 64 64 72 65 73 73 2f 66 71 64 6e 20 60 76 70 6e 2e 76 79 6f 73 2e 6e 65 74 60 2e 00 57 65 20 | address/fqdn.`vpn.vyos.net`..We. |
11c1e0 | 6c 69 73 74 65 6e 20 6f 6e 20 70 6f 72 74 20 35 31 38 32 30 00 57 65 20 6e 65 65 64 20 74 6f 20 | listen.on.port.51820.We.need.to. |
11c200 | 67 65 6e 65 72 61 74 65 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 77 68 69 63 68 20 61 | generate.the.certificate.which.a |
11c220 | 75 74 68 65 6e 74 69 63 61 74 65 73 20 75 73 65 72 73 20 77 68 6f 20 61 74 74 65 6d 70 74 20 74 | uthenticates.users.who.attempt.t |
11c240 | 6f 20 61 63 63 65 73 73 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 72 65 73 6f 75 72 63 65 20 74 68 | o.access.the.network.resource.th |
11c260 | 72 6f 75 67 68 20 74 68 65 20 53 53 4c 20 56 50 4e 20 74 75 6e 6e 65 6c 73 2e 20 54 68 65 20 66 | rough.the.SSL.VPN.tunnels..The.f |
11c280 | 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 77 69 6c 6c 20 63 72 65 61 74 65 20 61 20 | ollowing.commands.will.create.a. |
11c2a0 | 73 65 6c 66 20 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 73 20 61 6e 64 20 77 69 6c | self.signed.certificates.and.wil |
11c2c0 | 6c 20 62 65 20 73 74 6f 72 65 64 20 69 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 57 65 | l.be.stored.in.configuration:.We |
11c2e0 | 20 6e 6f 77 20 75 74 69 6c 69 7a 65 20 60 74 75 6e 65 64 60 20 66 6f 72 20 64 79 6e 61 6d 69 63 | .now.utilize.`tuned`.for.dynamic |
11c300 | 20 72 65 73 6f 75 72 63 65 20 62 61 6c 61 6e 63 69 6e 67 20 62 61 73 65 64 20 6f 6e 20 70 72 6f | .resource.balancing.based.on.pro |
11c320 | 66 69 6c 65 73 2e 00 57 65 20 6f 6e 6c 79 20 61 6c 6c 6f 77 20 74 68 65 20 31 39 32 2e 31 36 38 | files..We.only.allow.the.192.168 |
11c340 | 2e 32 2e 30 2f 32 34 20 73 75 62 6e 65 74 20 74 6f 20 74 72 61 76 65 6c 20 6f 76 65 72 20 74 68 | .2.0/24.subnet.to.travel.over.th |
11c360 | 65 20 74 75 6e 6e 65 6c 00 57 65 20 6f 6e 6c 79 20 6e 65 65 64 20 61 20 73 69 6e 67 6c 65 20 73 | e.tunnel.We.only.need.a.single.s |
11c380 | 74 65 70 20 66 6f 72 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 3a 00 57 65 20 72 6f 75 74 65 | tep.for.this.interface:.We.route |
11c3a0 | 20 61 6c 6c 20 74 72 61 66 66 69 63 20 66 6f 72 20 74 68 65 20 31 39 32 2e 31 36 38 2e 32 2e 30 | .all.traffic.for.the.192.168.2.0 |
11c3c0 | 2f 32 34 20 6e 65 74 77 6f 72 6b 20 74 6f 20 69 6e 74 65 72 66 61 63 65 20 60 77 67 30 31 60 00 | /24.network.to.interface.`wg01`. |
11c3e0 | 57 65 20 75 73 65 20 61 20 76 6f 6e 74 61 69 6e 65 72 20 70 72 6f 76 69 64 69 6e 67 20 74 68 65 | We.use.a.vontainer.providing.the |
11c400 | 20 54 41 43 41 43 53 20 73 65 72 76 65 20 72 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 2e 00 | .TACACS.serve.rin.this.example.. |
11c420 | 57 65 20 77 69 6c 6c 20 6f 6e 6c 79 20 61 63 63 65 70 74 20 74 72 61 66 66 69 63 20 63 6f 6d 6d | We.will.only.accept.traffic.comm |
11c440 | 69 6e 67 20 66 72 6f 6d 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 30 2c 20 70 72 6f 74 6f 63 6f | ing.from.interface.eth0,.protoco |
11c460 | 6c 20 74 63 70 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 31 31 32 32 2e | l.tcp.and.destination.port.1122. |
11c480 | 20 41 6c 6c 20 6f 74 68 65 72 20 74 72 61 66 66 69 63 20 74 72 61 73 70 61 73 73 69 6e 67 20 74 | .All.other.traffic.traspassing.t |
11c4a0 | 68 65 20 72 6f 75 74 65 72 20 73 68 6f 75 6c 64 20 62 65 20 62 6c 6f 63 6b 65 64 2e 00 57 65 27 | he.router.should.be.blocked..We' |
11c4c0 | 6c 6c 20 63 6f 6e 66 69 67 75 72 65 20 4f 70 65 6e 56 50 4e 20 75 73 69 6e 67 20 73 65 6c 66 2d | ll.configure.OpenVPN.using.self- |
11c4e0 | 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 73 2c 20 61 6e 64 20 74 68 65 6e 20 64 69 | signed.certificates,.and.then.di |
11c500 | 73 63 75 73 73 20 74 68 65 20 6c 65 67 61 63 79 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 20 | scuss.the.legacy.pre-shared.key. |
11c520 | 6d 6f 64 65 2e 00 57 65 27 6c 6c 20 75 73 65 20 74 68 65 20 49 4b 45 20 61 6e 64 20 45 53 50 20 | mode..We'll.use.the.IKE.and.ESP. |
11c540 | 67 72 6f 75 70 73 20 63 72 65 61 74 65 64 20 61 62 6f 76 65 20 66 6f 72 20 74 68 69 73 20 56 50 | groups.created.above.for.this.VP |
11c560 | 4e 2e 20 42 65 63 61 75 73 65 20 77 65 20 6e 65 65 64 20 61 63 63 65 73 73 20 74 6f 20 32 20 64 | N..Because.we.need.access.to.2.d |
11c580 | 69 66 66 65 72 65 6e 74 20 73 75 62 6e 65 74 73 20 6f 6e 20 74 68 65 20 66 61 72 20 73 69 64 65 | ifferent.subnets.on.the.far.side |
11c5a0 | 2c 20 77 65 20 77 69 6c 6c 20 6e 65 65 64 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 74 75 6e | ,.we.will.need.two.different.tun |
11c5c0 | 6e 65 6c 73 2e 20 49 66 20 79 6f 75 20 63 68 61 6e 67 65 64 20 74 68 65 20 6e 61 6d 65 73 20 6f | nels..If.you.changed.the.names.o |
11c5e0 | 66 20 74 68 65 20 45 53 50 20 67 72 6f 75 70 20 61 6e 64 20 49 4b 45 20 67 72 6f 75 70 20 69 6e | f.the.ESP.group.and.IKE.group.in |
11c600 | 20 74 68 65 20 70 72 65 76 69 6f 75 73 20 73 74 65 70 2c 20 6d 61 6b 65 20 73 75 72 65 20 79 6f | .the.previous.step,.make.sure.yo |
11c620 | 75 20 75 73 65 20 74 68 65 20 63 6f 72 72 65 63 74 20 6e 61 6d 65 73 20 68 65 72 65 20 74 6f 6f | u.use.the.correct.names.here.too |
11c640 | 2e 00 57 65 62 20 50 72 6f 78 79 20 41 75 74 6f 64 69 73 63 6f 76 65 72 79 20 28 57 50 41 44 29 | ..Web.Proxy.Autodiscovery.(WPAD) |
11c660 | 20 55 52 4c 00 57 65 62 70 72 6f 78 79 00 57 65 62 73 65 72 76 65 72 20 73 68 6f 75 6c 64 20 6c | .URL.Webproxy.Webserver.should.l |
11c680 | 69 73 74 65 6e 20 6f 6e 20 73 70 65 63 69 66 69 65 64 20 70 6f 72 74 2e 00 57 65 62 73 65 72 76 | isten.on.specified.port..Webserv |
11c6a0 | 65 72 20 73 68 6f 75 6c 64 20 6f 6e 6c 79 20 6c 69 73 74 65 6e 20 6f 6e 20 73 70 65 63 69 66 69 | er.should.only.listen.on.specifi |
11c6c0 | 65 64 20 49 50 20 61 64 64 72 65 73 73 00 57 68 65 6e 20 4c 44 50 20 69 73 20 77 6f 72 6b 69 6e | ed.IP.address.When.LDP.is.workin |
11c6e0 | 67 2c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 73 65 65 20 6c 61 62 65 6c | g,.you.will.be.able.to.see.label |
11c700 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 74 68 65 20 6f 75 74 63 6f 6d 65 20 6f 66 20 60 | .information.in.the.outcome.of.` |
11c720 | 60 73 68 6f 77 20 69 70 20 72 6f 75 74 65 60 60 2e 20 42 65 73 69 64 65 73 20 74 68 61 74 20 69 | `show.ip.route``..Besides.that.i |
11c740 | 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 74 68 65 72 65 20 61 72 65 20 61 6c 73 6f 20 73 70 65 63 69 | nformation,.there.are.also.speci |
11c760 | 66 69 63 20 2a 73 68 6f 77 2a 20 63 6f 6d 6d 61 6e 64 73 20 66 6f 72 20 4c 44 50 3a 00 57 68 65 | fic.*show*.commands.for.LDP:.Whe |
11c780 | 6e 20 50 49 4d 20 72 65 63 65 69 76 65 73 20 61 20 72 65 67 69 73 74 65 72 20 70 61 63 6b 65 74 | n.PIM.receives.a.register.packet |
11c7a0 | 20 74 68 65 20 73 6f 75 72 63 65 20 6f 66 20 74 68 65 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 | .the.source.of.the.packet.will.b |
11c7c0 | 65 20 63 6f 6d 70 61 72 65 64 20 74 6f 20 74 68 65 20 70 72 65 66 69 78 2d 6c 69 73 74 20 73 70 | e.compared.to.the.prefix-list.sp |
11c7e0 | 65 63 69 66 69 65 64 2c 20 61 6e 64 20 69 66 20 61 20 70 65 72 6d 69 74 20 69 73 20 72 65 63 65 | ecified,.and.if.a.permit.is.rece |
11c800 | 69 76 65 64 20 6e 6f 72 6d 61 6c 20 70 72 6f 63 65 73 73 69 6e 67 20 63 6f 6e 74 69 6e 75 65 73 | ived.normal.processing.continues |
11c820 | 2e 20 49 66 20 61 20 64 65 6e 79 20 69 73 20 72 65 74 75 72 6e 65 64 20 66 6f 72 20 74 68 65 20 | ..If.a.deny.is.returned.for.the. |
11c840 | 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 65 67 69 73 74 65 72 20 70 | source.address.of.the.register.p |
11c860 | 61 63 6b 65 74 20 61 20 72 65 67 69 73 74 65 72 20 73 74 6f 70 20 6d 65 73 73 61 67 65 20 69 73 | acket.a.register.stop.message.is |
11c880 | 20 73 65 6e 74 20 74 6f 20 74 68 65 20 73 6f 75 72 63 65 2e 00 57 68 65 6e 20 56 52 46 73 20 61 | .sent.to.the.source..When.VRFs.a |
11c8a0 | 72 65 20 75 73 65 64 20 69 74 20 69 73 20 6e 6f 74 20 6f 6e 6c 79 20 6d 61 6e 64 61 74 6f 72 79 | re.used.it.is.not.only.mandatory |
11c8c0 | 20 74 6f 20 63 72 65 61 74 65 20 61 20 56 52 46 20 62 75 74 20 61 6c 73 6f 20 74 68 65 20 56 52 | .to.create.a.VRF.but.also.the.VR |
11c8e0 | 46 20 69 74 73 65 6c 66 20 6e 65 65 64 73 20 74 6f 20 62 65 20 61 73 73 69 67 6e 65 64 20 74 6f | F.itself.needs.to.be.assigned.to |
11c900 | 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 00 57 68 65 6e 20 61 20 60 60 63 75 73 74 6f 6d 60 60 | .an.interface..When.a.``custom`` |
11c920 | 20 44 79 6e 44 4e 53 20 70 72 6f 76 69 64 65 72 20 69 73 20 75 73 65 64 20 74 68 65 20 60 3c 73 | .DynDNS.provider.is.used.the.`<s |
11c940 | 65 72 76 65 72 3e 60 20 77 68 65 72 65 20 75 70 64 61 74 65 20 72 65 71 75 65 73 74 73 20 61 72 | erver>`.where.update.requests.ar |
11c960 | 65 20 62 65 69 6e 67 20 73 65 6e 74 20 74 6f 20 6d 75 73 74 20 62 65 20 73 70 65 63 69 66 69 65 | e.being.sent.to.must.be.specifie |
11c980 | 64 2e 00 57 68 65 6e 20 61 20 60 60 63 75 73 74 6f 6d 60 60 20 44 79 6e 44 4e 53 20 70 72 6f 76 | d..When.a.``custom``.DynDNS.prov |
11c9a0 | 69 64 65 72 20 69 73 20 75 73 65 64 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 64 20 66 | ider.is.used.the.protocol.used.f |
11c9c0 | 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6e 67 20 74 6f 20 74 68 65 20 70 72 6f 76 69 64 65 72 | or.communicating.to.the.provider |
11c9e0 | 20 6d 75 73 74 20 62 65 20 73 70 65 63 69 66 69 65 64 20 75 6e 64 65 72 20 60 3c 70 72 6f 74 6f | .must.be.specified.under.`<proto |
11ca00 | 63 6f 6c 3e 60 2e 20 53 65 65 20 74 68 65 20 65 6d 62 65 64 64 65 64 20 63 6f 6d 70 6c 65 74 69 | col>`..See.the.embedded.completi |
11ca20 | 6f 6e 20 68 65 6c 70 65 72 20 66 6f 72 20 61 76 61 69 6c 61 62 6c 65 20 70 72 6f 74 6f 63 6f 6c | on.helper.for.available.protocol |
11ca40 | 73 2e 00 57 68 65 6e 20 61 20 60 60 63 75 73 74 6f 6d 60 60 20 44 79 6e 44 4e 53 20 70 72 6f 76 | s..When.a.``custom``.DynDNS.prov |
11ca60 | 69 64 65 72 20 69 73 20 75 73 65 64 2c 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 64 20 | ider.is.used,.the.protocol.used. |
11ca80 | 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6e 67 20 74 6f 20 74 68 65 20 70 72 6f 76 69 64 65 | for.communicating.to.the.provide |
11caa0 | 72 20 6d 75 73 74 20 62 65 20 73 70 65 63 69 66 69 65 64 20 75 6e 64 65 72 20 60 3c 70 72 6f 74 | r.must.be.specified.under.`<prot |
11cac0 | 6f 63 6f 6c 3e 60 2e 20 53 65 65 20 74 68 65 20 65 6d 62 65 64 64 65 64 20 63 6f 6d 70 6c 65 74 | ocol>`..See.the.embedded.complet |
11cae0 | 69 6f 6e 20 68 65 6c 70 65 72 20 77 68 65 6e 20 65 6e 74 65 72 69 6e 67 20 61 62 6f 76 65 20 63 | ion.helper.when.entering.above.c |
11cb00 | 6f 6d 6d 61 6e 64 20 66 6f 72 20 61 76 61 69 6c 61 62 6c 65 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 | ommand.for.available.protocols.. |
11cb20 | 57 68 65 6e 20 61 20 66 61 69 6c 6f 76 65 72 20 6f 63 63 75 72 73 20 69 6e 20 61 63 74 69 76 65 | When.a.failover.occurs.in.active |
11cb40 | 2d 62 61 63 6b 75 70 20 6d 6f 64 65 2c 20 62 6f 6e 64 69 6e 67 20 77 69 6c 6c 20 69 73 73 75 65 | -backup.mode,.bonding.will.issue |
11cb60 | 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 73 20 6f 6e 20 | .one.or.more.gratuitous.ARPs.on. |
11cb80 | 74 68 65 20 6e 65 77 6c 79 20 61 63 74 69 76 65 20 73 6c 61 76 65 2e 20 4f 6e 65 20 67 72 61 74 | the.newly.active.slave..One.grat |
11cba0 | 75 69 74 6f 75 73 20 41 52 50 20 69 73 20 69 73 73 75 65 64 20 66 6f 72 20 74 68 65 20 62 6f 6e | uitous.ARP.is.issued.for.the.bon |
11cbc0 | 64 69 6e 67 20 6d 61 73 74 65 72 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 65 61 63 68 20 56 | ding.master.interface.and.each.V |
11cbe0 | 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 62 6f 76 65 20 | LAN.interfaces.configured.above. |
11cc00 | 69 74 2c 20 70 72 6f 76 69 64 65 64 20 74 68 61 74 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 | it,.provided.that.the.interface. |
11cc20 | 68 61 73 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 49 50 20 61 64 64 72 65 73 73 20 63 6f 6e 66 | has.at.least.one.IP.address.conf |
11cc40 | 69 67 75 72 65 64 2e 20 47 72 61 74 75 69 74 6f 75 73 20 41 52 50 73 20 69 73 73 75 65 64 20 66 | igured..Gratuitous.ARPs.issued.f |
11cc60 | 6f 72 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 74 61 67 67 65 64 20 77 69 | or.VLAN.interfaces.are.tagged.wi |
11cc80 | 74 68 20 74 68 65 20 61 70 70 72 6f 70 72 69 61 74 65 20 56 4c 41 4e 20 69 64 2e 00 57 68 65 6e | th.the.appropriate.VLAN.id..When |
11cca0 | 20 61 20 6c 69 6e 6b 20 69 73 20 72 65 63 6f 6e 6e 65 63 74 65 64 20 6f 72 20 61 20 6e 65 77 20 | .a.link.is.reconnected.or.a.new. |
11ccc0 | 73 6c 61 76 65 20 6a 6f 69 6e 73 20 74 68 65 20 62 6f 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 | slave.joins.the.bond.the.receive |
11cce0 | 20 74 72 61 66 66 69 63 20 69 73 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 61 6d 6f 6e 67 20 | .traffic.is.redistributed.among. |
11cd00 | 61 6c 6c 20 61 63 74 69 76 65 20 73 6c 61 76 65 73 20 69 6e 20 74 68 65 20 62 6f 6e 64 20 62 79 | all.active.slaves.in.the.bond.by |
11cd20 | 20 69 6e 69 74 69 61 74 69 6e 67 20 41 52 50 20 52 65 70 6c 69 65 73 20 77 69 74 68 20 74 68 65 | .initiating.ARP.Replies.with.the |
11cd40 | 20 73 65 6c 65 63 74 65 64 20 4d 41 43 20 61 64 64 72 65 73 73 20 74 6f 20 65 61 63 68 20 6f 66 | .selected.MAC.address.to.each.of |
11cd60 | 20 74 68 65 20 63 6c 69 65 6e 74 73 2e 20 54 68 65 20 75 70 64 65 6c 61 79 20 70 61 72 61 6d 65 | .the.clients..The.updelay.parame |
11cd80 | 74 65 72 20 28 64 65 74 61 69 6c 65 64 20 62 65 6c 6f 77 29 20 6d 75 73 74 20 62 65 20 73 65 74 | ter.(detailed.below).must.be.set |
11cda0 | 20 74 6f 20 61 20 76 61 6c 75 65 20 65 71 75 61 6c 20 6f 72 20 67 72 65 61 74 65 72 20 74 68 61 | .to.a.value.equal.or.greater.tha |
11cdc0 | 6e 20 74 68 65 20 73 77 69 74 63 68 27 73 20 66 6f 72 77 61 72 64 69 6e 67 20 64 65 6c 61 79 20 | n.the.switch's.forwarding.delay. |
11cde0 | 73 6f 20 74 68 61 74 20 74 68 65 20 41 52 50 20 52 65 70 6c 69 65 73 20 73 65 6e 74 20 74 6f 20 | so.that.the.ARP.Replies.sent.to. |
11ce00 | 74 68 65 20 70 65 65 72 73 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 62 6c 6f 63 6b 65 64 20 62 79 | the.peers.will.not.be.blocked.by |
11ce20 | 20 74 68 65 20 73 77 69 74 63 68 2e 00 57 68 65 6e 20 61 20 70 61 63 6b 65 74 20 69 73 20 74 6f | .the.switch..When.a.packet.is.to |
11ce40 | 20 62 65 20 73 65 6e 74 2c 20 69 74 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 67 6f 20 74 68 72 | .be.sent,.it.will.have.to.go.thr |
11ce60 | 6f 75 67 68 20 74 68 61 74 20 71 75 65 75 65 2c 20 73 6f 20 74 68 65 20 70 61 63 6b 65 74 20 77 | ough.that.queue,.so.the.packet.w |
11ce80 | 69 6c 6c 20 62 65 20 70 6c 61 63 65 64 20 61 74 20 74 68 65 20 74 61 69 6c 20 6f 66 20 69 74 2e | ill.be.placed.at.the.tail.of.it. |
11cea0 | 20 57 68 65 6e 20 74 68 65 20 70 61 63 6b 65 74 20 63 6f 6d 70 6c 65 74 65 6c 79 20 67 6f 65 73 | .When.the.packet.completely.goes |
11cec0 | 20 74 68 72 6f 75 67 68 20 69 74 2c 20 69 74 20 77 69 6c 6c 20 62 65 20 64 65 71 75 65 75 65 64 | .through.it,.it.will.be.dequeued |
11cee0 | 20 65 6d 70 74 79 69 6e 67 20 69 74 73 20 70 6c 61 63 65 20 69 6e 20 74 68 65 20 71 75 65 75 65 | .emptying.its.place.in.the.queue |
11cf00 | 20 61 6e 64 20 62 65 69 6e 67 20 65 76 65 6e 74 75 61 6c 6c 79 20 68 61 6e 64 65 64 20 74 6f 20 | .and.being.eventually.handed.to. |
11cf20 | 74 68 65 20 4e 49 43 20 74 6f 20 62 65 20 61 63 74 75 61 6c 6c 79 20 73 65 6e 74 20 6f 75 74 2e | the.NIC.to.be.actually.sent.out. |
11cf40 | 00 57 68 65 6e 20 61 20 70 65 65 72 20 72 65 63 65 69 76 65 73 20 61 20 6d 61 72 74 69 61 6e 20 | .When.a.peer.receives.a.martian. |
11cf60 | 6e 65 78 74 68 6f 70 20 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 4e 4c 52 49 20 66 6f 72 20 | nexthop.as.part.of.the.NLRI.for. |
11cf80 | 61 20 72 6f 75 74 65 20 70 65 72 6d 69 74 20 74 68 65 20 6e 65 78 74 68 6f 70 20 74 6f 20 62 65 | a.route.permit.the.nexthop.to.be |
11cfa0 | 20 75 73 65 64 20 61 73 20 73 75 63 68 2c 20 69 6e 73 74 65 61 64 20 6f 66 20 72 65 6a 65 63 74 | .used.as.such,.instead.of.reject |
11cfc0 | 69 6e 67 20 61 6e 64 20 72 65 73 65 74 74 69 6e 67 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e | ing.and.resetting.the.connection |
11cfe0 | 2e 00 57 68 65 6e 20 61 20 72 6f 75 74 65 20 66 61 69 6c 73 2c 20 61 20 72 6f 75 74 69 6e 67 20 | ..When.a.route.fails,.a.routing. |
11d000 | 75 70 64 61 74 65 20 69 73 20 73 65 6e 74 20 74 6f 20 77 69 74 68 64 72 61 77 20 74 68 65 20 72 | update.is.sent.to.withdraw.the.r |
11d020 | 6f 75 74 65 20 66 72 6f 6d 20 74 68 65 20 6e 65 74 77 6f 72 6b 27 73 20 72 6f 75 74 69 6e 67 20 | oute.from.the.network's.routing. |
11d040 | 74 61 62 6c 65 73 2e 20 57 68 65 6e 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 72 65 2d 65 6e 61 | tables..When.the.route.is.re-ena |
11d060 | 62 6c 65 64 2c 20 74 68 65 20 63 68 61 6e 67 65 20 69 6e 20 61 76 61 69 6c 61 62 69 6c 69 74 79 | bled,.the.change.in.availability |
11d080 | 20 69 73 20 61 6c 73 6f 20 61 64 76 65 72 74 69 73 65 64 2e 20 41 20 72 6f 75 74 65 20 74 68 61 | .is.also.advertised..A.route.tha |
11d0a0 | 74 20 63 6f 6e 74 69 6e 75 61 6c 6c 79 20 66 61 69 6c 73 20 61 6e 64 20 72 65 74 75 72 6e 73 20 | t.continually.fails.and.returns. |
11d0c0 | 72 65 71 75 69 72 65 73 20 61 20 67 72 65 61 74 20 64 65 61 6c 20 6f 66 20 6e 65 74 77 6f 72 6b | requires.a.great.deal.of.network |
11d0e0 | 20 74 72 61 66 66 69 63 20 74 6f 20 75 70 64 61 74 65 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 61 | .traffic.to.update.the.network.a |
11d100 | 62 6f 75 74 20 74 68 65 20 72 6f 75 74 65 27 73 20 73 74 61 74 75 73 2e 00 57 68 65 6e 20 61 64 | bout.the.route's.status..When.ad |
11d120 | 64 69 6e 67 20 49 50 76 36 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 65 78 | ding.IPv6.routing.information.ex |
11d140 | 63 68 61 6e 67 65 20 66 65 61 74 75 72 65 20 74 6f 20 42 47 50 2e 20 54 68 65 72 65 20 77 65 72 | change.feature.to.BGP..There.wer |
11d160 | 65 20 73 6f 6d 65 20 70 72 6f 70 6f 73 61 6c 73 2e 20 3a 61 62 62 72 3a 60 49 45 54 46 20 28 49 | e.some.proposals..:abbr:`IETF.(I |
11d180 | 6e 74 65 72 6e 65 74 20 45 6e 67 69 6e 65 65 72 69 6e 67 20 54 61 73 6b 20 46 6f 72 63 65 29 60 | nternet.Engineering.Task.Force)` |
11d1a0 | 20 3a 61 62 62 72 3a 60 49 44 52 20 28 49 6e 74 65 72 20 44 6f 6d 61 69 6e 20 52 6f 75 74 69 6e | .:abbr:`IDR.(Inter.Domain.Routin |
11d1c0 | 67 29 60 20 61 64 6f 70 74 65 64 20 61 20 70 72 6f 70 6f 73 61 6c 20 63 61 6c 6c 65 64 20 4d 75 | g)`.adopted.a.proposal.called.Mu |
11d1e0 | 6c 74 69 70 72 6f 74 6f 63 6f 6c 20 45 78 74 65 6e 73 69 6f 6e 20 66 6f 72 20 42 47 50 2e 20 54 | ltiprotocol.Extension.for.BGP..T |
11d200 | 68 65 20 73 70 65 63 69 66 69 63 61 74 69 6f 6e 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e | he.specification.is.described.in |
11d220 | 20 3a 72 66 63 3a 60 32 32 38 33 60 2e 20 54 68 65 20 70 72 6f 74 6f 63 6f 6c 20 64 6f 65 73 20 | .:rfc:`2283`..The.protocol.does. |
11d240 | 6e 6f 74 20 64 65 66 69 6e 65 20 6e 65 77 20 70 72 6f 74 6f 63 6f 6c 73 2e 20 49 74 20 64 65 66 | not.define.new.protocols..It.def |
11d260 | 69 6e 65 73 20 6e 65 77 20 61 74 74 72 69 62 75 74 65 73 20 74 6f 20 65 78 69 73 74 69 6e 67 20 | ines.new.attributes.to.existing. |
11d280 | 42 47 50 2e 20 57 68 65 6e 20 69 74 20 69 73 20 75 73 65 64 20 65 78 63 68 61 6e 67 69 6e 67 20 | BGP..When.it.is.used.exchanging. |
11d2a0 | 49 50 76 36 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 74 20 69 73 20 63 | IPv6.routing.information.it.is.c |
11d2c0 | 61 6c 6c 65 64 20 42 47 50 2d 34 2b 2e 20 57 68 65 6e 20 69 74 20 69 73 20 75 73 65 64 20 66 6f | alled.BGP-4+..When.it.is.used.fo |
11d2e0 | 72 20 65 78 63 68 61 6e 67 69 6e 67 20 6d 75 6c 74 69 63 61 73 74 20 72 6f 75 74 69 6e 67 20 69 | r.exchanging.multicast.routing.i |
11d300 | 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 74 20 69 73 20 63 61 6c 6c 65 64 20 4d 42 47 50 2e 00 57 68 | nformation.it.is.called.MBGP..Wh |
11d320 | 65 6e 20 61 6e 20 61 75 74 68 6f 72 69 74 61 74 69 76 65 20 73 65 72 76 65 72 20 64 6f 65 73 20 | en.an.authoritative.server.does. |
11d340 | 6e 6f 74 20 61 6e 73 77 65 72 20 61 20 71 75 65 72 79 20 6f 72 20 73 65 6e 64 73 20 61 20 72 65 | not.answer.a.query.or.sends.a.re |
11d360 | 70 6c 79 20 74 68 65 20 72 65 63 75 72 73 6f 72 20 64 6f 65 73 20 6e 6f 74 20 6c 69 6b 65 2c 20 | ply.the.recursor.does.not.like,. |
11d380 | 69 74 20 69 73 20 74 68 72 6f 74 74 6c 65 64 2e 20 41 6e 79 20 73 65 72 76 65 72 73 20 6d 61 74 | it.is.throttled..Any.servers.mat |
11d3a0 | 63 68 69 6e 67 20 74 68 65 20 73 75 70 70 6c 69 65 64 20 6e 65 74 6d 61 73 6b 73 20 77 69 6c 6c | ching.the.supplied.netmasks.will |
11d3c0 | 20 6e 65 76 65 72 20 62 65 20 74 68 72 6f 74 74 6c 65 64 2e 00 57 68 65 6e 20 63 6f 6e 66 69 67 | .never.be.throttled..When.config |
11d3e0 | 75 72 65 64 2c 20 50 50 50 6f 45 20 77 69 6c 6c 20 63 72 65 61 74 65 20 74 68 65 20 6e 65 63 65 | ured,.PPPoE.will.create.the.nece |
11d400 | 73 73 61 72 79 20 56 4c 41 4e 73 20 77 68 65 6e 20 72 65 71 75 69 72 65 64 2e 20 4f 6e 63 65 20 | ssary.VLANs.when.required..Once. |
11d420 | 74 68 65 20 75 73 65 72 20 73 65 73 73 69 6f 6e 20 68 61 73 20 62 65 65 6e 20 63 61 6e 63 65 6c | the.user.session.has.been.cancel |
11d440 | 6c 65 64 20 61 6e 64 20 74 68 65 20 56 4c 41 4e 20 69 73 20 6e 6f 74 20 6e 65 65 64 65 64 20 61 | led.and.the.VLAN.is.not.needed.a |
11d460 | 6e 79 6d 6f 72 65 2c 20 56 79 4f 53 20 77 69 6c 6c 20 72 65 6d 6f 76 65 20 69 74 20 61 67 61 69 | nymore,.VyOS.will.remove.it.agai |
11d480 | 6e 2e 00 57 68 65 6e 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 | n..When.configuring.a.Random-Det |
11d4a0 | 65 63 74 20 70 6f 6c 69 63 79 3a 20 2a 2a 74 68 65 20 68 69 67 68 65 72 20 74 68 65 20 70 72 65 | ect.policy:.**the.higher.the.pre |
11d4c0 | 63 65 64 65 6e 63 65 20 6e 75 6d 62 65 72 2c 20 74 68 65 20 68 69 67 68 65 72 20 74 68 65 20 70 | cedence.number,.the.higher.the.p |
11d4e0 | 72 69 6f 72 69 74 79 2a 2a 2e 00 57 68 65 6e 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 79 6f 75 72 | riority**..When.configuring.your |
11d500 | 20 66 69 6c 74 65 72 2c 20 79 6f 75 20 63 61 6e 20 75 73 65 20 74 68 65 20 60 60 54 61 62 60 60 | .filter,.you.can.use.the.``Tab`` |
11d520 | 20 6b 65 79 20 74 6f 20 73 65 65 20 74 68 65 20 6d 61 6e 79 20 64 69 66 66 65 72 65 6e 74 20 70 | .key.to.see.the.many.different.p |
11d540 | 61 72 61 6d 65 74 65 72 73 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 2e 00 57 68 65 | arameters.you.can.configure..Whe |
11d560 | 6e 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 79 6f 75 72 20 74 72 61 66 66 69 63 20 70 6f 6c 69 63 | n.configuring.your.traffic.polic |
11d580 | 79 2c 20 79 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 65 74 20 64 61 74 61 20 72 61 74 | y,.you.will.have.to.set.data.rat |
11d5a0 | 65 20 76 61 6c 75 65 73 2c 20 77 61 74 63 68 20 6f 75 74 20 74 68 65 20 75 6e 69 74 73 20 79 6f | e.values,.watch.out.the.units.yo |
11d5c0 | 75 20 61 72 65 20 6d 61 6e 61 67 69 6e 67 2c 20 69 74 20 69 73 20 65 61 73 79 20 74 6f 20 67 65 | u.are.managing,.it.is.easy.to.ge |
11d5e0 | 74 20 63 6f 6e 66 75 73 65 64 20 77 69 74 68 20 74 68 65 20 64 69 66 66 65 72 65 6e 74 20 70 72 | t.confused.with.the.different.pr |
11d600 | 65 66 69 78 65 73 20 61 6e 64 20 73 75 66 66 69 78 65 73 20 79 6f 75 20 63 61 6e 20 75 73 65 2e | efixes.and.suffixes.you.can.use. |
11d620 | 20 56 79 4f 53 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 73 68 6f 77 20 79 6f 75 20 74 68 65 20 64 | .VyOS.will.always.show.you.the.d |
11d640 | 69 66 66 65 72 65 6e 74 20 75 6e 69 74 73 20 79 6f 75 20 63 61 6e 20 75 73 65 2e 00 57 68 65 6e | ifferent.units.you.can.use..When |
11d660 | 20 64 65 66 69 6e 69 6e 67 20 61 20 72 75 6c 65 2c 20 69 74 20 69 73 20 65 6e 61 62 6c 65 20 62 | .defining.a.rule,.it.is.enable.b |
11d680 | 79 20 64 65 66 61 75 6c 74 2e 20 49 6e 20 73 6f 6d 65 20 63 61 73 65 73 2c 20 69 74 20 69 73 20 | y.default..In.some.cases,.it.is. |
11d6a0 | 75 73 65 66 75 6c 20 74 6f 20 6a 75 73 74 20 64 69 73 61 62 6c 65 20 74 68 65 20 72 75 6c 65 2c | useful.to.just.disable.the.rule, |
11d6c0 | 20 72 61 74 68 65 72 20 74 68 61 6e 20 72 65 6d 6f 76 69 6e 67 20 69 74 2e 00 57 68 65 6e 20 64 | .rather.than.removing.it..When.d |
11d6e0 | 65 66 69 6e 69 6e 67 20 74 68 65 20 74 72 61 6e 73 6c 61 74 65 64 20 61 64 64 72 65 73 73 2c 20 | efining.the.translated.address,. |
11d700 | 63 61 6c 6c 65 64 20 60 60 62 61 63 6b 65 6e 64 73 60 60 2c 20 61 20 60 60 77 65 69 67 68 74 60 | called.``backends``,.a.``weight` |
11d720 | 60 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 54 68 69 73 20 6c 65 74 73 20 | `.must.be.configured..This.lets. |
11d740 | 74 68 65 20 75 73 65 72 20 64 65 66 69 6e 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 20 64 69 73 | the.user.define.load.balance.dis |
11d760 | 74 72 69 62 75 74 69 6f 6e 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 69 72 20 6e 65 65 | tribution.according.to.their.nee |
11d780 | 64 73 2e 20 54 68 65 6d 20 73 75 6d 20 6f 66 20 61 6c 6c 20 74 68 65 20 77 65 69 67 68 74 73 20 | ds..Them.sum.of.all.the.weights. |
11d7a0 | 64 65 66 69 6e 65 64 20 66 6f 72 20 74 68 65 20 62 61 63 6b 65 6e 64 73 20 73 68 6f 75 6c 64 20 | defined.for.the.backends.should. |
11d7c0 | 62 65 20 65 71 75 61 6c 20 74 6f 20 31 30 30 2e 20 49 6e 20 6f 64 65 72 20 77 6f 72 64 73 2c 20 | be.equal.to.100..In.oder.words,. |
11d7e0 | 74 68 65 20 77 65 69 67 68 74 20 64 65 66 69 6e 65 64 20 66 6f 72 20 74 68 65 20 62 61 63 6b 65 | the.weight.defined.for.the.backe |
11d800 | 6e 64 20 69 73 20 74 68 65 20 70 65 72 63 65 6e 74 61 67 65 20 6f 66 20 74 68 65 20 63 6f 6e 6e | nd.is.the.percentage.of.the.conn |
11d820 | 65 63 74 69 6f 6e 73 20 74 68 61 74 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 73 75 63 68 20 62 | ections.that.will.receive.such.b |
11d840 | 61 63 6b 65 6e 64 2e 00 57 68 65 6e 20 64 65 71 75 65 75 69 6e 67 2c 20 65 61 63 68 20 68 61 73 | ackend..When.dequeuing,.each.has |
11d860 | 68 2d 62 75 63 6b 65 74 20 77 69 74 68 20 64 61 74 61 20 69 73 20 71 75 65 72 69 65 64 20 69 6e | h-bucket.with.data.is.queried.in |
11d880 | 20 61 20 72 6f 75 6e 64 20 72 6f 62 69 6e 20 66 61 73 68 69 6f 6e 2e 20 59 6f 75 20 63 61 6e 20 | .a.round.robin.fashion..You.can. |
11d8a0 | 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 71 75 65 75 | configure.the.length.of.the.queu |
11d8c0 | 65 2e 00 57 68 65 6e 20 64 65 73 69 67 6e 69 6e 67 20 79 6f 75 72 20 4e 41 54 20 72 75 6c 65 73 | e..When.designing.your.NAT.rules |
11d8e0 | 65 74 20 6c 65 61 76 65 20 73 6f 6d 65 20 73 70 61 63 65 20 62 65 74 77 65 65 6e 20 63 6f 6e 73 | et.leave.some.space.between.cons |
11d900 | 65 63 75 74 69 76 65 20 72 75 6c 65 73 20 66 6f 72 20 6c 61 74 65 72 20 65 78 74 65 6e 73 69 6f | ecutive.rules.for.later.extensio |
11d920 | 6e 2e 20 59 6f 75 72 20 72 75 6c 65 73 65 74 20 63 6f 75 6c 64 20 73 74 61 72 74 20 77 69 74 68 | n..Your.ruleset.could.start.with |
11d940 | 20 6e 75 6d 62 65 72 73 20 31 30 2c 20 32 30 2c 20 33 30 2e 20 59 6f 75 20 74 68 75 73 20 63 61 | .numbers.10,.20,.30..You.thus.ca |
11d960 | 6e 20 6c 61 74 65 72 20 65 78 74 65 6e 64 20 74 68 65 20 72 75 6c 65 73 65 74 20 61 6e 64 20 70 | n.later.extend.the.ruleset.and.p |
11d980 | 6c 61 63 65 20 6e 65 77 20 72 75 6c 65 73 20 62 65 74 77 65 65 6e 20 65 78 69 73 74 69 6e 67 20 | lace.new.rules.between.existing. |
11d9a0 | 6f 6e 65 73 2e 00 57 68 65 6e 20 64 6f 69 6e 67 20 66 61 75 6c 74 20 69 73 6f 6c 61 74 69 6f 6e | ones..When.doing.fault.isolation |
11d9c0 | 20 77 69 74 68 20 70 69 6e 67 2c 20 79 6f 75 20 73 68 6f 75 6c 64 20 66 69 72 73 74 20 72 75 6e | .with.ping,.you.should.first.run |
11d9e0 | 20 69 74 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 68 6f 73 74 2c 20 74 6f 20 76 65 72 69 66 79 | .it.on.the.local.host,.to.verify |
11da00 | 20 74 68 61 74 20 74 68 65 20 6c 6f 63 61 6c 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 | .that.the.local.network.interfac |
11da20 | 65 20 69 73 20 75 70 20 61 6e 64 20 72 75 6e 6e 69 6e 67 2e 20 54 68 65 6e 2c 20 63 6f 6e 74 69 | e.is.up.and.running..Then,.conti |
11da40 | 6e 75 65 20 77 69 74 68 20 68 6f 73 74 73 20 61 6e 64 20 67 61 74 65 77 61 79 73 20 66 75 72 74 | nue.with.hosts.and.gateways.furt |
11da60 | 68 65 72 20 64 6f 77 6e 20 74 68 65 20 72 6f 61 64 20 74 6f 77 61 72 64 73 20 79 6f 75 72 20 64 | her.down.the.road.towards.your.d |
11da80 | 65 73 74 69 6e 61 74 69 6f 6e 2e 20 52 6f 75 6e 64 2d 74 72 69 70 20 74 69 6d 65 20 61 6e 64 20 | estination..Round-trip.time.and. |
11daa0 | 70 61 63 6b 65 74 20 6c 6f 73 73 20 73 74 61 74 69 73 74 69 63 73 20 61 72 65 20 63 6f 6d 70 75 | packet.loss.statistics.are.compu |
11dac0 | 74 65 64 2e 00 57 68 65 6e 20 66 69 72 73 74 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 74 68 | ted..When.first.connecting.to.th |
11dae0 | 65 20 6e 65 77 20 56 50 4e 20 74 68 65 20 75 73 65 72 20 69 73 20 70 72 6f 6d 70 74 65 64 20 74 | e.new.VPN.the.user.is.prompted.t |
11db00 | 6f 20 65 6e 74 65 72 20 70 72 6f 70 65 72 20 63 72 65 64 65 6e 74 69 61 6c 73 2e 00 57 68 65 6e | o.enter.proper.credentials..When |
11db20 | 20 6c 6f 61 64 69 6e 67 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 79 6f 75 20 6e 65 65 | .loading.the.certificate.you.nee |
11db40 | 64 20 74 6f 20 6d 61 6e 75 61 6c 6c 79 20 73 74 72 69 70 20 74 68 65 20 60 60 2d 2d 2d 2d 2d 42 | d.to.manually.strip.the.``-----B |
11db60 | 45 47 49 4e 20 43 45 52 54 49 46 49 43 41 54 45 2d 2d 2d 2d 2d 60 60 20 61 6e 64 20 60 60 2d 2d | EGIN.CERTIFICATE-----``.and.``-- |
11db80 | 2d 2d 2d 45 4e 44 20 43 45 52 54 49 46 49 43 41 54 45 2d 2d 2d 2d 2d 60 60 20 74 61 67 73 2e 20 | ---END.CERTIFICATE-----``.tags.. |
11dba0 | 41 6c 73 6f 2c 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 2f 6b 65 79 20 6e 65 65 64 73 20 | Also,.the.certificate/key.needs. |
11dbc0 | 74 6f 20 62 65 20 70 72 65 73 65 6e 74 65 64 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 6c 69 6e 65 | to.be.presented.in.a.single.line |
11dbe0 | 20 77 69 74 68 6f 75 74 20 6c 69 6e 65 20 62 72 65 61 6b 73 20 28 60 60 5c 6e 60 60 29 2c 20 74 | .without.line.breaks.(``\n``),.t |
11dc00 | 68 69 73 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 75 73 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 | his.can.be.done.using.the.follow |
11dc20 | 69 6e 67 20 73 68 65 6c 6c 20 63 6f 6d 6d 61 6e 64 3a 00 57 68 65 6e 20 6c 6f 61 64 69 6e 67 20 | ing.shell.command:.When.loading. |
11dc40 | 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 6d 61 6e 75 | the.certificate.you.need.to.manu |
11dc60 | 61 6c 6c 79 20 73 74 72 69 70 20 74 68 65 20 60 60 2d 2d 2d 2d 2d 42 45 47 49 4e 20 4b 45 59 2d | ally.strip.the.``-----BEGIN.KEY- |
11dc80 | 2d 2d 2d 2d 60 60 20 61 6e 64 20 60 60 2d 2d 2d 2d 2d 45 4e 44 20 4b 45 59 2d 2d 2d 2d 2d 60 60 | ----``.and.``-----END.KEY-----`` |
11dca0 | 20 74 61 67 73 2e 20 41 6c 73 6f 2c 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 2f 6b 65 79 | .tags..Also,.the.certificate/key |
11dcc0 | 20 6e 65 65 64 73 20 74 6f 20 62 65 20 70 72 65 73 65 6e 74 65 64 20 69 6e 20 61 20 73 69 6e 67 | .needs.to.be.presented.in.a.sing |
11dce0 | 6c 65 20 6c 69 6e 65 20 77 69 74 68 6f 75 74 20 6c 69 6e 65 20 62 72 65 61 6b 73 20 28 60 60 5c | le.line.without.line.breaks.(``\ |
11dd00 | 6e 60 60 29 2c 20 74 68 69 73 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 75 73 69 6e 67 20 74 68 65 | n``),.this.can.be.done.using.the |
11dd20 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 68 65 6c 6c 20 63 6f 6d 6d 61 6e 64 3a 00 57 68 65 6e 20 6d | .following.shell.command:.When.m |
11dd40 | 61 74 68 63 69 6e 67 20 61 6c 6c 20 70 61 74 74 65 72 6e 73 20 64 65 66 69 6e 65 64 20 69 6e 20 | athcing.all.patterns.defined.in. |
11dd60 | 61 20 72 75 6c 65 2c 20 74 68 65 6e 20 64 69 66 66 65 72 65 6e 74 20 61 63 74 69 6f 6e 73 20 63 | a.rule,.then.different.actions.c |
11dd80 | 61 6e 20 62 65 20 6d 61 64 65 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 64 72 6f 70 69 6e | an.be.made..This.includes.dropin |
11dda0 | 67 20 74 68 65 20 70 61 63 6b 65 74 2c 20 6d 6f 64 69 66 79 69 6e 67 20 63 65 72 74 61 69 6e 20 | g.the.packet,.modifying.certain. |
11ddc0 | 64 61 74 61 2c 20 6f 72 20 73 65 74 74 69 6e 67 20 61 20 64 69 66 66 65 72 65 6e 74 20 72 6f 75 | data,.or.setting.a.different.rou |
11dde0 | 74 69 6e 67 20 74 61 62 6c 65 2e 00 57 68 65 6e 20 6e 6f 20 6f 70 74 69 6f 6e 73 2f 70 61 72 61 | ting.table..When.no.options/para |
11de00 | 6d 65 74 65 72 73 20 61 72 65 20 75 73 65 64 2c 20 74 68 65 20 63 6f 6e 74 65 6e 74 73 20 6f 66 | meters.are.used,.the.contents.of |
11de20 | 20 74 68 65 20 6d 61 69 6e 20 73 79 73 6c 6f 67 20 66 69 6c 65 20 61 72 65 20 64 69 73 70 6c 61 | .the.main.syslog.file.are.displa |
11de40 | 79 65 64 2e 00 57 68 65 6e 20 6e 6f 2d 72 65 6c 65 61 73 65 20 69 73 20 73 70 65 63 69 66 69 65 | yed..When.no-release.is.specifie |
11de60 | 64 2c 20 64 68 63 70 36 63 20 77 69 6c 6c 20 73 65 6e 64 20 61 20 72 65 6c 65 61 73 65 20 6d 65 | d,.dhcp6c.will.send.a.release.me |
11de80 | 73 73 61 67 65 20 6f 6e 20 63 6c 69 65 6e 74 20 65 78 69 74 20 74 6f 20 70 72 65 76 65 6e 74 20 | ssage.on.client.exit.to.prevent. |
11dea0 | 6c 6f 73 69 6e 67 20 61 6e 20 61 73 73 69 67 6e 65 64 20 61 64 64 72 65 73 73 20 6f 72 20 70 72 | losing.an.assigned.address.or.pr |
11dec0 | 65 66 69 78 2e 00 57 68 65 6e 20 70 72 6f 63 65 73 73 69 6e 67 20 70 61 63 6b 65 74 73 20 66 72 | efix..When.processing.packets.fr |
11dee0 | 6f 6d 20 61 20 6e 65 69 67 68 62 6f 72 20 70 72 6f 63 65 73 73 20 74 68 65 20 6e 75 6d 62 65 72 | om.a.neighbor.process.the.number |
11df00 | 20 6f 66 20 70 61 63 6b 65 74 73 20 69 6e 63 6f 6d 69 6e 67 20 61 74 20 6f 6e 65 20 74 69 6d 65 | .of.packets.incoming.at.one.time |
11df20 | 20 62 65 66 6f 72 65 20 6d 6f 76 69 6e 67 20 6f 6e 20 74 6f 20 74 68 65 20 6e 65 78 74 20 74 61 | .before.moving.on.to.the.next.ta |
11df40 | 73 6b 2e 00 57 68 65 6e 20 72 61 70 69 64 2d 63 6f 6d 6d 69 74 20 69 73 20 73 70 65 63 69 66 69 | sk..When.rapid-commit.is.specifi |
11df60 | 65 64 2c 20 64 68 63 70 36 63 20 77 69 6c 6c 20 69 6e 63 6c 75 64 65 20 61 20 72 61 70 69 64 2d | ed,.dhcp6c.will.include.a.rapid- |
11df80 | 63 6f 6d 6d 69 74 20 6f 70 74 69 6f 6e 20 69 6e 20 73 6f 6c 69 63 69 74 20 6d 65 73 73 61 67 65 | commit.option.in.solicit.message |
11dfa0 | 73 20 61 6e 64 20 77 61 69 74 20 66 6f 72 20 61 6e 20 69 6d 6d 65 64 69 61 74 65 20 72 65 70 6c | s.and.wait.for.an.immediate.repl |
11dfc0 | 79 20 69 6e 73 74 65 61 64 20 6f 66 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 2e 00 57 68 65 | y.instead.of.advertisements..Whe |
11dfe0 | 6e 20 72 65 6d 6f 74 65 20 70 65 65 72 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 63 61 70 61 | n.remote.peer.does.not.have.capa |
11e000 | 62 69 6c 69 74 79 20 6e 65 67 6f 74 69 61 74 69 6f 6e 20 66 65 61 74 75 72 65 2c 20 72 65 6d 6f | bility.negotiation.feature,.remo |
11e020 | 74 65 20 70 65 65 72 20 77 69 6c 6c 20 6e 6f 74 20 73 65 6e 64 20 61 6e 79 20 63 61 70 61 62 69 | te.peer.will.not.send.any.capabi |
11e040 | 6c 69 74 69 65 73 20 61 74 20 61 6c 6c 2e 20 49 6e 20 74 68 61 74 20 63 61 73 65 2c 20 62 67 70 | lities.at.all..In.that.case,.bgp |
11e060 | 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 70 65 65 72 20 77 69 74 68 20 63 6f 6e 66 69 67 | .configures.the.peer.with.config |
11e080 | 75 72 65 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 00 57 68 65 6e 20 72 75 6e 6e 69 6e 67 20 | ured.capabilities..When.running. |
11e0a0 | 69 74 20 61 74 20 31 47 62 69 74 20 61 6e 64 20 6c 6f 77 65 72 2c 20 79 6f 75 20 6d 61 79 20 77 | it.at.1Gbit.and.lower,.you.may.w |
11e0c0 | 61 6e 74 20 74 6f 20 72 65 64 75 63 65 20 74 68 65 20 60 71 75 65 75 65 2d 6c 69 6d 69 74 60 20 | ant.to.reduce.the.`queue-limit`. |
11e0e0 | 74 6f 20 31 30 30 30 20 70 61 63 6b 65 74 73 20 6f 72 20 6c 65 73 73 2e 20 49 6e 20 72 61 74 65 | to.1000.packets.or.less..In.rate |
11e100 | 73 20 6c 69 6b 65 20 31 30 4d 62 69 74 2c 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 73 | s.like.10Mbit,.you.may.want.to.s |
11e120 | 65 74 20 69 74 20 74 6f 20 36 30 30 20 70 61 63 6b 65 74 73 2e 00 57 68 65 6e 20 73 65 6e 64 69 | et.it.to.600.packets..When.sendi |
11e140 | 6e 67 20 50 49 4d 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 74 65 6c 6c 20 50 49 4d 20 74 6f | ng.PIM.hello.packets.tell.PIM.to |
11e160 | 20 6e 6f 74 20 73 65 6e 64 20 61 6e 79 20 76 36 20 73 65 63 6f 6e 64 61 72 79 20 61 64 64 72 65 | .not.send.any.v6.secondary.addre |
11e180 | 73 73 65 73 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 69 6e 66 6f | sses.on.the.interface..This.info |
11e1a0 | 72 6d 61 74 69 6f 6e 20 69 73 20 75 73 65 64 20 74 6f 20 61 6c 6c 6f 77 20 50 49 4d 20 74 6f 20 | rmation.is.used.to.allow.PIM.to. |
11e1c0 | 75 73 65 20 76 36 20 6e 65 78 74 68 6f 70 73 20 69 6e 20 69 74 27 73 20 64 65 63 69 73 69 6f 6e | use.v6.nexthops.in.it's.decision |
11e1e0 | 20 66 6f 72 20 3a 61 62 62 72 3a 60 52 50 46 20 28 52 65 76 65 72 73 65 20 50 61 74 68 20 46 6f | .for.:abbr:`RPF.(Reverse.Path.Fo |
11e200 | 72 77 61 72 64 69 6e 67 29 60 20 6c 6f 6f 6b 75 70 20 69 66 20 74 68 69 73 20 6f 70 74 69 6f 6e | rwarding)`.lookup.if.this.option |
11e220 | 20 69 73 20 6e 6f 74 20 73 65 74 20 28 64 65 66 61 75 6c 74 29 2e 00 57 68 65 6e 20 73 65 74 20 | .is.not.set.(default)..When.set. |
11e240 | 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 22 64 69 | the.interface.is.enabled.for."di |
11e260 | 61 6c 2d 6f 6e 2d 64 65 6d 61 6e 64 22 2e 00 57 68 65 6e 20 73 70 65 63 69 66 69 65 64 2c 20 74 | al-on-demand"..When.specified,.t |
11e280 | 68 69 73 20 73 68 6f 75 6c 64 20 62 65 20 74 68 65 20 6f 6e 6c 79 20 6b 65 79 77 6f 72 64 20 66 | his.should.be.the.only.keyword.f |
11e2a0 | 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 00 57 68 65 6e 20 73 74 61 72 74 69 6e 67 20 | or.the.interface..When.starting. |
11e2c0 | 61 20 56 79 4f 53 20 6c 69 76 65 20 73 79 73 74 65 6d 20 28 74 68 65 20 69 6e 73 74 61 6c 6c 61 | a.VyOS.live.system.(the.installa |
11e2e0 | 74 69 6f 6e 20 43 44 29 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6b 65 79 62 6f 61 72 64 | tion.CD).the.configured.keyboard |
11e300 | 20 6c 61 79 6f 75 74 20 64 65 66 61 75 6c 74 73 20 74 6f 20 55 53 2e 20 41 73 20 74 68 69 73 20 | .layout.defaults.to.US..As.this. |
11e320 | 6d 69 67 68 74 20 6e 6f 74 20 73 75 69 74 65 20 65 76 65 72 79 6f 6e 65 73 20 75 73 65 20 63 61 | might.not.suite.everyones.use.ca |
11e340 | 73 65 20 79 6f 75 20 63 61 6e 20 61 64 6a 75 73 74 20 74 68 65 20 75 73 65 64 20 6b 65 79 62 6f | se.you.can.adjust.the.used.keybo |
11e360 | 61 72 64 20 6c 61 79 6f 75 74 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 20 63 6f 6e 73 6f 6c 65 | ard.layout.on.the.system.console |
11e380 | 2e 00 57 68 65 6e 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 20 69 73 20 63 6f 6e 73 69 64 | ..When.the.DHCP.server.is.consid |
11e3a0 | 65 72 69 6e 67 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 61 6c 6c 6f 63 61 74 69 6e 67 20 61 6e 20 | ering.dynamically.allocating.an. |
11e3c0 | 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 61 20 63 6c 69 65 6e 74 2c 20 69 74 20 66 69 72 73 74 | IP.address.to.a.client,.it.first |
11e3e0 | 20 73 65 6e 64 73 20 61 6e 20 49 43 4d 50 20 45 63 68 6f 20 72 65 71 75 65 73 74 20 28 61 20 70 | .sends.an.ICMP.Echo.request.(a.p |
11e400 | 69 6e 67 29 20 74 6f 20 74 68 65 20 61 64 64 72 65 73 73 20 62 65 69 6e 67 20 61 73 73 69 67 6e | ing).to.the.address.being.assign |
11e420 | 65 64 2e 20 49 74 20 77 61 69 74 73 20 66 6f 72 20 61 20 73 65 63 6f 6e 64 2c 20 61 6e 64 20 69 | ed..It.waits.for.a.second,.and.i |
11e440 | 66 20 6e 6f 20 49 43 4d 50 20 45 63 68 6f 20 72 65 73 70 6f 6e 73 65 20 68 61 73 20 62 65 65 6e | f.no.ICMP.Echo.response.has.been |
11e460 | 20 68 65 61 72 64 2c 20 69 74 20 61 73 73 69 67 6e 73 20 74 68 65 20 61 64 64 72 65 73 73 2e 00 | .heard,.it.assigns.the.address.. |
11e480 | 57 68 65 6e 20 74 68 65 20 63 6c 6f 73 65 2d 61 63 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 73 20 | When.the.close-action.option.is. |
11e4a0 | 73 65 74 20 6f 6e 20 74 68 65 20 70 65 65 72 73 2c 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e | set.on.the.peers,.the.connection |
11e4c0 | 2d 74 79 70 65 20 6f 66 20 65 61 63 68 20 70 65 65 72 20 68 61 73 20 74 6f 20 63 6f 6e 73 69 64 | -type.of.each.peer.has.to.consid |
11e4e0 | 65 72 65 64 20 63 61 72 65 66 75 6c 6c 79 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 66 20 | ered.carefully..For.example,.if. |
11e500 | 74 68 65 20 6f 70 74 69 6f 6e 20 69 73 20 73 65 74 20 6f 6e 20 62 6f 74 68 20 70 65 65 72 73 2c | the.option.is.set.on.both.peers, |
11e520 | 20 74 68 65 6e 20 62 6f 74 68 20 77 6f 75 6c 64 20 61 74 74 65 6d 70 74 20 74 6f 20 69 6e 69 74 | .then.both.would.attempt.to.init |
11e540 | 69 61 74 65 20 61 6e 64 20 68 6f 6c 64 20 6f 70 65 6e 20 6d 75 6c 74 69 70 6c 65 20 63 6f 70 69 | iate.and.hold.open.multiple.copi |
11e560 | 65 73 20 6f 66 20 65 61 63 68 20 63 68 69 6c 64 20 53 41 2e 20 54 68 69 73 20 6d 69 67 68 74 20 | es.of.each.child.SA..This.might. |
11e580 | 6c 65 61 64 20 74 6f 20 69 6e 73 74 61 62 69 6c 69 74 79 20 6f 66 20 74 68 65 20 64 65 76 69 63 | lead.to.instability.of.the.devic |
11e5a0 | 65 20 6f 72 20 63 70 75 2f 6d 65 6d 6f 72 79 20 75 74 69 6c 69 7a 61 74 69 6f 6e 2e 00 57 68 65 | e.or.cpu/memory.utilization..Whe |
11e5c0 | 6e 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 61 62 6f 76 65 20 69 73 20 73 65 74 2c 20 56 79 4f 53 | n.the.command.above.is.set,.VyOS |
11e5e0 | 20 77 69 6c 6c 20 61 6e 73 77 65 72 20 65 76 65 72 79 20 49 43 4d 50 20 65 63 68 6f 20 72 65 71 | .will.answer.every.ICMP.echo.req |
11e600 | 75 65 73 74 20 61 64 64 72 65 73 73 65 64 20 74 6f 20 69 74 73 65 6c 66 2c 20 62 75 74 20 74 68 | uest.addressed.to.itself,.but.th |
11e620 | 61 74 20 77 69 6c 6c 20 6f 6e 6c 79 20 68 61 70 70 65 6e 20 69 66 20 6e 6f 20 6f 74 68 65 72 20 | at.will.only.happen.if.no.other. |
11e640 | 72 75 6c 65 20 69 73 20 61 70 70 6c 69 65 64 20 64 72 6f 70 70 69 6e 67 20 6f 72 20 72 65 6a 65 | rule.is.applied.dropping.or.reje |
11e660 | 63 74 69 6e 67 20 6c 6f 63 61 6c 20 65 63 68 6f 20 72 65 71 75 65 73 74 73 2e 20 49 6e 20 63 61 | cting.local.echo.requests..In.ca |
11e680 | 73 65 20 6f 66 20 63 6f 6e 66 6c 69 63 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 6e 6f 74 20 61 6e | se.of.conflict,.VyOS.will.not.an |
11e6a0 | 73 77 65 72 20 49 43 4d 50 20 65 63 68 6f 20 72 65 71 75 65 73 74 73 2e 00 57 68 65 6e 20 74 68 | swer.ICMP.echo.requests..When.th |
11e6c0 | 65 20 63 6f 6d 6d 61 6e 64 20 61 62 6f 76 65 20 69 73 20 73 65 74 2c 20 56 79 4f 53 20 77 69 6c | e.command.above.is.set,.VyOS.wil |
11e6e0 | 6c 20 61 6e 73 77 65 72 20 6e 6f 20 49 43 4d 50 20 65 63 68 6f 20 72 65 71 75 65 73 74 20 61 64 | l.answer.no.ICMP.echo.request.ad |
11e700 | 64 72 65 73 73 65 64 20 74 6f 20 69 74 73 65 6c 66 20 61 74 20 61 6c 6c 2c 20 6e 6f 20 6d 61 74 | dressed.to.itself.at.all,.no.mat |
11e720 | 74 65 72 20 77 68 65 72 65 20 69 74 20 63 6f 6d 65 73 20 66 72 6f 6d 20 6f 72 20 77 68 65 74 68 | ter.where.it.comes.from.or.wheth |
11e740 | 65 72 20 6d 6f 72 65 20 73 70 65 63 69 66 69 63 20 72 75 6c 65 73 20 61 72 65 20 62 65 69 6e 67 | er.more.specific.rules.are.being |
11e760 | 20 61 70 70 6c 69 65 64 20 74 6f 20 61 63 63 65 70 74 20 74 68 65 6d 2e 00 57 68 65 6e 20 74 68 | .applied.to.accept.them..When.th |
11e780 | 65 20 76 72 72 70 20 67 72 6f 75 70 20 69 73 20 61 20 6d 65 6d 62 65 72 20 6f 66 20 74 68 65 20 | e.vrrp.group.is.a.member.of.the. |
11e7a0 | 73 79 6e 63 20 67 72 6f 75 70 20 77 69 6c 6c 20 75 73 65 20 6f 6e 6c 79 20 74 68 65 20 73 79 6e | sync.group.will.use.only.the.syn |
11e7c0 | 63 20 67 72 6f 75 70 20 68 65 61 6c 74 68 20 63 68 65 63 6b 20 73 63 72 69 70 74 2e 20 54 68 69 | c.group.health.check.script..Thi |
11e7e0 | 73 20 65 78 61 6d 70 6c 65 20 73 68 6f 77 73 20 68 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 | s.example.shows.how.to.configure |
11e800 | 20 69 74 20 66 6f 72 20 74 68 65 20 73 79 6e 63 20 67 72 6f 75 70 3a 00 57 68 65 6e 20 75 73 69 | .it.for.the.sync.group:.When.usi |
11e820 | 6e 67 20 44 48 43 50 20 74 6f 20 72 65 74 72 69 65 76 65 20 49 50 76 34 20 61 64 64 72 65 73 73 | ng.DHCP.to.retrieve.IPv4.address |
11e840 | 20 61 6e 64 20 69 66 20 6c 6f 63 61 6c 20 63 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 73 20 61 72 65 | .and.if.local.customizations.are |
11e860 | 20 6e 65 65 64 65 64 2c 20 74 68 65 79 20 73 68 6f 75 6c 64 20 62 65 20 70 6f 73 73 69 62 6c 65 | .needed,.they.should.be.possible |
11e880 | 20 75 73 69 6e 67 20 74 68 65 20 65 6e 74 65 72 20 61 6e 64 20 65 78 69 74 20 68 6f 6f 6b 73 20 | .using.the.enter.and.exit.hooks. |
11e8a0 | 70 72 6f 76 69 64 65 64 2e 20 54 68 65 20 68 6f 6f 6b 20 64 69 72 73 20 61 72 65 3a 00 57 68 65 | provided..The.hook.dirs.are:.Whe |
11e8c0 | 6e 20 75 73 69 6e 67 20 45 56 45 2d 4e 47 20 74 6f 20 6c 61 62 20 74 68 69 73 20 65 6e 76 69 72 | n.using.EVE-NG.to.lab.this.envir |
11e8e0 | 6f 6e 6d 65 6e 74 20 65 6e 73 75 72 65 20 79 6f 75 20 61 72 65 20 75 73 69 6e 67 20 65 31 30 30 | onment.ensure.you.are.using.e100 |
11e900 | 30 20 61 73 20 74 68 65 20 64 65 73 69 72 65 64 20 64 72 69 76 65 72 20 66 6f 72 20 79 6f 75 72 | 0.as.the.desired.driver.for.your |
11e920 | 20 56 79 4f 53 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 73 2e 20 57 68 65 6e 20 75 | .VyOS.network.interfaces..When.u |
11e940 | 73 69 6e 67 20 74 68 65 20 72 65 67 75 6c 61 72 20 76 69 72 74 69 6f 20 6e 65 74 77 6f 72 6b 20 | sing.the.regular.virtio.network. |
11e960 | 64 72 69 76 65 72 20 6e 6f 20 4c 41 43 50 20 50 44 55 73 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 | driver.no.LACP.PDUs.will.be.sent |
11e980 | 20 62 79 20 56 79 4f 53 20 74 68 75 73 20 74 68 65 20 70 6f 72 74 2d 63 68 61 6e 6e 65 6c 20 77 | .by.VyOS.thus.the.port-channel.w |
11e9a0 | 69 6c 6c 20 6e 65 76 65 72 20 62 65 63 6f 6d 65 20 61 63 74 69 76 65 21 00 57 68 65 6e 20 75 73 | ill.never.become.active!.When.us |
11e9c0 | 69 6e 67 20 4e 41 54 20 66 6f 72 20 61 20 6c 61 72 67 65 20 6e 75 6d 62 65 72 20 6f 66 20 68 6f | ing.NAT.for.a.large.number.of.ho |
11e9e0 | 73 74 20 73 79 73 74 65 6d 73 20 69 74 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 68 61 74 20 61 | st.systems.it.recommended.that.a |
11ea00 | 20 6d 69 6e 69 6d 75 6d 20 6f 66 20 31 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 75 73 65 64 | .minimum.of.1.IP.address.is.used |
11ea20 | 20 74 6f 20 4e 41 54 20 65 76 65 72 79 20 32 35 36 20 68 6f 73 74 20 73 79 73 74 65 6d 73 2e 20 | .to.NAT.every.256.host.systems.. |
11ea40 | 54 68 69 73 20 69 73 20 64 75 65 20 74 6f 20 74 68 65 20 6c 69 6d 69 74 20 6f 66 20 36 35 2c 30 | This.is.due.to.the.limit.of.65,0 |
11ea60 | 30 30 20 70 6f 72 74 20 6e 75 6d 62 65 72 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 75 6e | 00.port.numbers.available.for.un |
11ea80 | 69 71 75 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 73 20 61 6e 64 20 61 20 72 65 73 65 72 76 69 6e | ique.translations.and.a.reservin |
11eaa0 | 67 20 61 6e 20 61 76 65 72 61 67 65 20 6f 66 20 32 30 30 2d 33 30 30 20 73 65 73 73 69 6f 6e 73 | g.an.average.of.200-300.sessions |
11eac0 | 20 70 65 72 20 68 6f 73 74 20 73 79 73 74 65 6d 2e 00 57 68 65 6e 20 75 73 69 6e 67 20 4e 41 54 | .per.host.system..When.using.NAT |
11eae0 | 20 66 6f 72 20 61 20 6c 61 72 67 65 20 6e 75 6d 62 65 72 20 6f 66 20 68 6f 73 74 20 73 79 73 74 | .for.a.large.number.of.host.syst |
11eb00 | 65 6d 73 20 69 74 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 68 61 74 20 61 20 6d 69 6e 69 6d 75 | ems.it.recommended.that.a.minimu |
11eb20 | 6d 20 6f 66 20 31 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 75 73 65 64 20 74 6f 20 4e 41 54 | m.of.1.IP.address.is.used.to.NAT |
11eb40 | 20 65 76 65 72 79 20 32 35 36 20 70 72 69 76 61 74 65 20 68 6f 73 74 20 73 79 73 74 65 6d 73 2e | .every.256.private.host.systems. |
11eb60 | 20 54 68 69 73 20 69 73 20 64 75 65 20 74 6f 20 74 68 65 20 6c 69 6d 69 74 20 6f 66 20 36 35 2c | .This.is.due.to.the.limit.of.65, |
11eb80 | 30 30 30 20 70 6f 72 74 20 6e 75 6d 62 65 72 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 75 | 000.port.numbers.available.for.u |
11eba0 | 6e 69 71 75 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 73 20 61 6e 64 20 61 20 72 65 73 65 72 76 69 | nique.translations.and.a.reservi |
11ebc0 | 6e 67 20 61 6e 20 61 76 65 72 61 67 65 20 6f 66 20 32 30 30 2d 33 30 30 20 73 65 73 73 69 6f 6e | ng.an.average.of.200-300.session |
11ebe0 | 73 20 70 65 72 20 68 6f 73 74 20 73 79 73 74 65 6d 2e 00 57 68 65 6e 20 75 73 69 6e 67 20 53 53 | s.per.host.system..When.using.SS |
11ec00 | 48 2c 20 6b 6e 6f 77 6e 2d 68 6f 73 74 73 2d 66 69 6c 65 2c 20 70 72 69 76 61 74 65 2d 6b 65 79 | H,.known-hosts-file,.private-key |
11ec20 | 2d 66 69 6c 65 20 61 6e 64 20 70 75 62 6c 69 63 2d 6b 65 79 2d 66 69 6c 65 20 61 72 65 20 6d 61 | -file.and.public-key-file.are.ma |
11ec40 | 6e 64 61 74 6f 72 79 20 6f 70 74 69 6f 6e 73 2e 00 57 68 65 6e 20 75 73 69 6e 67 20 53 53 48 2c | ndatory.options..When.using.SSH, |
11ec60 | 20 70 72 69 76 61 74 65 2d 6b 65 79 2d 66 69 6c 65 20 61 6e 64 20 70 75 62 6c 69 63 2d 6b 65 79 | .private-key-file.and.public-key |
11ec80 | 2d 66 69 6c 65 20 61 72 65 20 6d 61 6e 64 61 74 6f 72 79 20 6f 70 74 69 6f 6e 73 2e 00 57 68 65 | -file.are.mandatory.options..Whe |
11eca0 | 6e 20 75 73 69 6e 67 20 54 69 6d 65 2d 62 61 73 65 64 20 6f 6e 65 2d 74 69 6d 65 20 70 61 73 73 | n.using.Time-based.one-time.pass |
11ecc0 | 77 6f 72 64 20 28 54 4f 54 50 29 20 28 4f 54 50 20 48 4f 54 50 2d 74 69 6d 65 29 2c 20 62 65 20 | word.(TOTP).(OTP.HOTP-time),.be. |
11ece0 | 73 75 72 65 20 74 68 61 74 20 74 68 65 20 74 69 6d 65 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 | sure.that.the.time.on.the.server |
11ed00 | 20 61 6e 64 20 74 68 65 20 4f 54 50 20 74 6f 6b 65 6e 20 67 65 6e 65 72 61 74 6f 72 20 61 72 65 | .and.the.OTP.token.generator.are |
11ed20 | 20 73 79 6e 63 68 72 6f 6e 69 7a 65 64 20 62 79 20 4e 54 50 00 57 68 65 6e 20 75 73 69 6e 67 20 | .synchronized.by.NTP.When.using. |
11ed40 | 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 49 50 73 65 63 20 77 69 74 68 20 56 54 49 20 69 6e 74 65 | site-to-site.IPsec.with.VTI.inte |
11ed60 | 72 66 61 63 65 73 2c 20 62 65 20 73 75 72 65 20 74 6f 20 64 69 73 61 62 6c 65 20 72 6f 75 74 65 | rfaces,.be.sure.to.disable.route |
11ed80 | 20 61 75 74 6f 69 6e 73 74 61 6c 6c 00 57 68 65 6e 20 75 73 69 6e 67 20 74 68 65 20 49 50 76 36 | .autoinstall.When.using.the.IPv6 |
11eda0 | 20 70 72 6f 74 6f 63 6f 6c 2c 20 4d 52 55 20 6d 75 73 74 20 62 65 20 61 74 20 6c 65 61 73 74 20 | .protocol,.MRU.must.be.at.least. |
11edc0 | 31 32 38 30 20 62 79 74 65 73 2e 00 57 68 65 6e 20 75 74 69 6c 69 7a 69 6e 67 20 56 79 4f 53 20 | 1280.bytes..When.utilizing.VyOS. |
11ede0 | 69 6e 20 61 6e 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 77 69 74 68 20 41 72 69 73 74 61 20 67 65 | in.an.environment.with.Arista.ge |
11ee00 | 61 72 20 79 6f 75 20 63 61 6e 20 75 73 65 20 74 68 69 73 20 62 6c 75 65 20 70 72 69 6e 74 20 61 | ar.you.can.use.this.blue.print.a |
11ee20 | 73 20 61 6e 20 69 6e 69 74 69 61 6c 20 73 65 74 75 70 20 74 6f 20 67 65 74 20 61 6e 20 4c 41 43 | s.an.initial.setup.to.get.an.LAC |
11ee40 | 50 20 62 6f 6e 64 20 2f 20 70 6f 72 74 2d 63 68 61 6e 6e 65 6c 20 6f 70 65 72 61 74 69 6f 6e 61 | P.bond./.port-channel.operationa |
11ee60 | 6c 20 62 65 74 77 65 65 6e 20 74 68 6f 73 65 20 74 77 6f 20 64 65 76 69 63 65 73 2e 00 57 68 65 | l.between.those.two.devices..Whe |
11ee80 | 72 65 20 62 6f 74 68 20 72 6f 75 74 65 73 20 77 65 72 65 20 72 65 63 65 69 76 65 64 20 66 72 6f | re.both.routes.were.received.fro |
11eea0 | 6d 20 65 42 47 50 20 70 65 65 72 73 2c 20 74 68 65 6e 20 70 72 65 66 65 72 20 74 68 65 20 72 6f | m.eBGP.peers,.then.prefer.the.ro |
11eec0 | 75 74 65 20 77 68 69 63 68 20 69 73 20 61 6c 72 65 61 64 79 20 73 65 6c 65 63 74 65 64 2e 20 4e | ute.which.is.already.selected..N |
11eee0 | 6f 74 65 20 74 68 61 74 20 74 68 69 73 20 63 68 65 63 6b 20 69 73 20 6e 6f 74 20 61 70 70 6c 69 | ote.that.this.check.is.not.appli |
11ef00 | 65 64 20 69 66 20 3a 63 66 67 63 6d 64 3a 60 62 67 70 20 62 65 73 74 70 61 74 68 20 63 6f 6d 70 | ed.if.:cfgcmd:`bgp.bestpath.comp |
11ef20 | 61 72 65 2d 72 6f 75 74 65 72 69 64 60 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 54 68 69 | are-routerid`.is.configured..Thi |
11ef40 | 73 20 63 68 65 63 6b 20 63 61 6e 20 70 72 65 76 65 6e 74 20 73 6f 6d 65 20 63 61 73 65 73 20 6f | s.check.can.prevent.some.cases.o |
11ef60 | 66 20 6f 73 63 69 6c 6c 61 74 69 6f 6e 2e 00 57 68 65 72 65 20 66 69 72 65 77 61 6c 6c 20 62 61 | f.oscillation..Where.firewall.ba |
11ef80 | 73 65 20 63 68 61 69 6e 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 66 69 72 65 77 61 6c 6c 20 66 | se.chain.to.configure.firewall.f |
11efa0 | 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 20 66 6f 72 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 | iltering.rules.for.transit.traff |
11efc0 | 69 63 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 66 6f 72 77 61 72 | ic.is.``set.firewall.ipv4.forwar |
11efe0 | 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2c 20 77 68 69 63 68 20 68 61 70 70 65 6e 73 20 69 6e | d.filter....``,.which.happens.in |
11f000 | 20 73 74 61 67 65 20 35 2c 20 68 69 67 68 6c 69 67 68 74 65 6e 65 64 20 77 69 74 68 20 72 65 64 | .stage.5,.highlightened.with.red |
11f020 | 20 63 6f 6c 6f 72 2e 00 57 68 65 72 65 20 66 69 72 65 77 61 6c 6c 20 62 61 73 65 20 63 68 61 69 | .color..Where.firewall.base.chai |
11f040 | 6e 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 66 69 72 65 77 61 6c 6c 20 66 69 6c 74 65 72 69 6e | n.to.configure.firewall.filterin |
11f060 | 67 20 72 75 6c 65 73 20 66 6f 72 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 20 69 73 20 60 | g.rules.for.transit.traffic.is.` |
11f080 | 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 | `set.firewall.ipv6.forward.filte |
11f0a0 | 72 20 2e 2e 2e 60 60 2c 20 77 68 69 63 68 20 68 61 70 70 65 6e 73 20 69 6e 20 73 74 61 67 65 20 | r....``,.which.happens.in.stage. |
11f0c0 | 35 2c 20 68 69 67 68 6c 69 67 68 74 65 6e 65 64 20 77 69 74 68 20 72 65 64 20 63 6f 6c 6f 72 2e | 5,.highlightened.with.red.color. |
11f0e0 | 00 57 68 65 72 65 20 72 6f 75 74 65 73 20 77 69 74 68 20 61 20 4d 45 44 20 77 65 72 65 20 72 65 | .Where.routes.with.a.MED.were.re |
11f100 | 63 65 69 76 65 64 20 66 72 6f 6d 20 74 68 65 20 73 61 6d 65 20 41 53 2c 20 70 72 65 66 65 72 20 | ceived.from.the.same.AS,.prefer. |
11f120 | 74 68 65 20 72 6f 75 74 65 20 77 69 74 68 20 74 68 65 20 6c 6f 77 65 73 74 20 4d 45 44 2e 00 57 | the.route.with.the.lowest.MED..W |
11f140 | 68 65 72 65 2c 20 6d 61 69 6e 20 6b 65 79 20 77 6f 72 64 73 20 61 6e 64 20 63 6f 6e 66 69 67 75 | here,.main.key.words.and.configu |
11f160 | 72 61 74 69 6f 6e 20 70 61 74 68 73 20 74 68 61 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 75 6e | ration.paths.that.needs.to.be.un |
11f180 | 64 65 72 73 74 6f 6f 64 3a 00 57 68 65 74 68 65 72 20 74 6f 20 61 63 63 65 70 74 20 44 41 44 20 | derstood:.Whether.to.accept.DAD. |
11f1a0 | 28 44 75 70 6c 69 63 61 74 65 20 41 64 64 72 65 73 73 20 44 65 74 65 63 74 69 6f 6e 29 2e 00 57 | (Duplicate.Address.Detection)..W |
11f1c0 | 68 69 63 68 20 67 65 6e 65 72 61 74 65 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e | hich.generates.the.following.con |
11f1e0 | 66 69 67 75 72 61 74 69 6f 6e 3a 00 57 68 69 63 68 20 72 65 73 75 6c 74 73 20 69 6e 20 61 20 63 | figuration:.Which.results.in.a.c |
11f200 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 3a 00 57 68 69 63 68 20 77 6f 75 6c 64 20 67 65 6e | onfiguration.of:.Which.would.gen |
11f220 | 65 72 61 74 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 4e 41 54 20 64 65 73 74 69 6e 61 74 | erate.the.following.NAT.destinat |
11f240 | 69 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 57 68 69 6c 65 20 2a 2a 6e 65 74 77 6f | ion.configuration:.While.**netwo |
11f260 | 72 6b 20 67 72 6f 75 70 73 2a 2a 20 61 63 63 65 70 74 20 49 50 20 6e 65 74 77 6f 72 6b 73 20 69 | rk.groups**.accept.IP.networks.i |
11f280 | 6e 20 43 49 44 52 20 6e 6f 74 61 74 69 6f 6e 2c 20 73 70 65 63 69 66 69 63 20 49 50 20 61 64 64 | n.CIDR.notation,.specific.IP.add |
11f2a0 | 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 61 64 64 65 64 20 61 73 20 61 20 33 32 2d 62 69 74 20 | resses.can.be.added.as.a.32-bit. |
11f2c0 | 70 72 65 66 69 78 2e 20 49 66 20 79 6f 75 20 66 6f 72 65 73 65 65 20 74 68 65 20 6e 65 65 64 20 | prefix..If.you.foresee.the.need. |
11f2e0 | 74 6f 20 61 64 64 20 61 20 6d 69 78 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 6e 65 | to.add.a.mix.of.addresses.and.ne |
11f300 | 74 77 6f 72 6b 73 2c 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 67 72 6f 75 70 20 69 73 20 72 65 63 | tworks,.the.network.group.is.rec |
11f320 | 6f 6d 6d 65 6e 64 65 64 2e 00 57 68 69 6c 65 20 6d 61 6e 79 20 61 72 65 20 61 77 61 72 65 20 6f | ommended..While.many.are.aware.o |
11f340 | 66 20 4f 70 65 6e 56 50 4e 20 61 73 20 61 20 43 6c 69 65 6e 74 20 56 50 4e 20 73 6f 6c 75 74 69 | f.OpenVPN.as.a.Client.VPN.soluti |
11f360 | 6f 6e 2c 20 69 74 20 69 73 20 6f 66 74 65 6e 20 6f 76 65 72 6c 6f 6f 6b 65 64 20 61 73 20 61 20 | on,.it.is.often.overlooked.as.a. |
11f380 | 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 56 50 4e 20 73 6f 6c 75 74 69 6f 6e 20 64 75 65 20 74 6f | site-to-site.VPN.solution.due.to |
11f3a0 | 20 6c 61 63 6b 20 6f 66 20 73 75 70 70 6f 72 74 20 66 6f 72 20 74 68 69 73 20 6d 6f 64 65 20 69 | .lack.of.support.for.this.mode.i |
11f3c0 | 6e 20 6d 61 6e 79 20 72 6f 75 74 65 72 20 70 6c 61 74 66 6f 72 6d 73 2e 00 57 68 69 6c 65 20 6e | n.many.router.platforms..While.n |
11f3e0 | 6f 72 6d 61 6c 20 47 52 45 20 69 73 20 66 6f 72 20 6c 61 79 65 72 20 33 2c 20 47 52 45 54 41 50 | ormal.GRE.is.for.layer.3,.GRETAP |
11f400 | 20 69 73 20 66 6f 72 20 6c 61 79 65 72 20 32 2e 20 47 52 45 54 41 50 20 63 61 6e 20 65 6e 63 61 | .is.for.layer.2..GRETAP.can.enca |
11f420 | 70 73 75 6c 61 74 65 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 73 2c 20 74 68 75 73 20 69 74 | psulate.Ethernet.frames,.thus.it |
11f440 | 20 63 61 6e 20 62 65 20 62 72 69 64 67 65 64 20 77 69 74 68 20 6f 74 68 65 72 20 69 6e 74 65 72 | .can.be.bridged.with.other.inter |
11f460 | 66 61 63 65 73 20 74 6f 20 63 72 65 61 74 65 20 64 61 74 61 6c 69 6e 6b 20 6c 61 79 65 72 20 73 | faces.to.create.datalink.layer.s |
11f480 | 65 67 6d 65 6e 74 73 20 74 68 61 74 20 73 70 61 6e 20 6d 75 6c 74 69 70 6c 65 20 72 65 6d 6f 74 | egments.that.span.multiple.remot |
11f4a0 | 65 20 73 69 74 65 73 2e 00 57 68 69 74 65 6c 69 73 74 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 | e.sites..Whitelist.of.addresses. |
11f4c0 | 61 6e 64 20 6e 65 74 77 6f 72 6b 73 2e 20 41 6c 77 61 79 73 20 61 6c 6c 6f 77 20 69 6e 62 6f 75 | and.networks..Always.allow.inbou |
11f4e0 | 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 20 74 68 65 73 65 20 73 79 73 74 65 6d | nd.connections.from.these.system |
11f500 | 73 2e 00 57 69 6c 6c 20 61 64 64 20 60 60 70 65 72 73 69 73 74 65 6e 74 2d 6b 65 79 60 60 20 61 | s..Will.add.``persistent-key``.a |
11f520 | 74 20 74 68 65 20 65 6e 64 20 6f 66 20 74 68 65 20 67 65 6e 65 72 61 74 65 64 20 4f 70 65 6e 56 | t.the.end.of.the.generated.OpenV |
11f540 | 50 4e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 50 6c 65 61 73 65 20 75 73 65 20 74 68 69 | PN.configuration..Please.use.thi |
11f560 | 73 20 6f 6e 6c 79 20 61 73 20 6c 61 73 74 20 72 65 73 6f 72 74 20 2d 20 74 68 69 6e 67 73 20 6d | s.only.as.last.resort.-.things.m |
11f580 | 69 67 68 74 20 62 72 65 61 6b 20 61 6e 64 20 4f 70 65 6e 56 50 4e 20 77 6f 6e 27 74 20 73 74 61 | ight.break.and.OpenVPN.won't.sta |
11f5a0 | 72 74 20 69 66 20 79 6f 75 20 70 61 73 73 20 69 6e 76 61 6c 69 64 20 6f 70 74 69 6f 6e 73 2f 73 | rt.if.you.pass.invalid.options/s |
11f5c0 | 79 6e 74 61 78 2e 00 57 69 6c 6c 20 61 64 64 20 60 60 70 75 73 68 20 22 6b 65 65 70 61 6c 69 76 | yntax..Will.add.``push."keepaliv |
11f5e0 | 65 20 31 20 31 30 22 60 60 20 74 6f 20 74 68 65 20 67 65 6e 65 72 61 74 65 64 20 4f 70 65 6e 56 | e.1.10"``.to.the.generated.OpenV |
11f600 | 50 4e 20 63 6f 6e 66 69 67 20 66 69 6c 65 2e 00 57 69 6c 6c 20 62 65 20 72 65 63 6f 72 64 65 64 | PN.config.file..Will.be.recorded |
11f620 | 20 6f 6e 6c 79 20 70 61 63 6b 65 74 73 2f 66 6c 6f 77 73 20 6f 6e 20 2a 2a 69 6e 63 6f 6d 69 6e | .only.packets/flows.on.**incomin |
11f640 | 67 2a 2a 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 74 65 | g**.direction.in.configured.inte |
11f660 | 72 66 61 63 65 73 20 62 79 20 64 65 66 61 75 6c 74 2e 00 57 69 6c 6c 20 64 72 6f 70 20 60 3c 73 | rfaces.by.default..Will.drop.`<s |
11f680 | 68 61 72 65 64 2d 6e 65 74 77 6f 72 6b 2d 6e 61 6d 65 3e 5f 60 20 66 72 6f 6d 20 63 6c 69 65 6e | hared-network-name>_`.from.clien |
11f6a0 | 74 20 44 4e 53 20 72 65 63 6f 72 64 2c 20 75 73 69 6e 67 20 6f 6e 6c 79 20 74 68 65 20 68 6f 73 | t.DNS.record,.using.only.the.hos |
11f6c0 | 74 20 64 65 63 6c 61 72 61 74 69 6f 6e 20 6e 61 6d 65 20 61 6e 64 20 64 6f 6d 61 69 6e 3a 20 60 | t.declaration.name.and.domain:.` |
11f6e0 | 3c 68 6f 73 74 6e 61 6d 65 3e 2e 3c 64 6f 6d 61 69 6e 2d 6e 61 6d 65 3e 60 00 57 69 6e 64 6f 77 | <hostname>.<domain-name>`.Window |
11f700 | 73 20 31 30 20 64 6f 65 73 20 6e 6f 74 20 61 6c 6c 6f 77 20 61 20 75 73 65 72 20 74 6f 20 63 68 | s.10.does.not.allow.a.user.to.ch |
11f720 | 6f 6f 73 65 20 74 68 65 20 69 6e 74 65 67 72 69 74 79 20 61 6e 64 20 65 6e 63 72 79 70 74 69 6f | oose.the.integrity.and.encryptio |
11f740 | 6e 20 63 69 70 68 65 72 73 20 75 73 69 6e 67 20 74 68 65 20 47 55 49 20 61 6e 64 20 69 74 20 75 | n.ciphers.using.the.GUI.and.it.u |
11f760 | 73 65 73 20 73 6f 6d 65 20 6f 6c 64 65 72 20 70 72 6f 70 6f 73 61 6c 73 20 62 79 20 64 65 66 61 | ses.some.older.proposals.by.defa |
11f780 | 75 6c 74 2e 20 41 20 75 73 65 72 20 63 61 6e 20 6f 6e 6c 79 20 63 68 61 6e 67 65 20 74 68 65 20 | ult..A.user.can.only.change.the. |
11f7a0 | 70 72 6f 70 6f 73 61 6c 73 20 6f 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 73 69 64 65 20 62 79 20 | proposals.on.the.client.side.by. |
11f7c0 | 63 6f 6e 66 69 67 75 72 69 6e 67 20 74 68 65 20 49 50 53 65 63 20 63 6f 6e 6e 65 63 74 69 6f 6e | configuring.the.IPSec.connection |
11f7e0 | 20 70 72 6f 66 69 6c 65 20 76 69 61 20 50 6f 77 65 72 53 68 65 6c 6c 2e 00 57 69 6e 64 6f 77 73 | .profile.via.PowerShell..Windows |
11f800 | 20 49 6e 74 65 72 6e 65 74 20 4e 61 6d 65 20 53 65 72 76 69 63 65 20 28 57 49 4e 53 29 20 73 65 | .Internet.Name.Service.(WINS).se |
11f820 | 72 76 65 72 73 20 70 72 6f 70 61 67 61 74 65 64 20 74 6f 20 63 6c 69 65 6e 74 00 57 69 6e 64 6f | rvers.propagated.to.client.Windo |
11f840 | 77 73 20 65 78 70 65 63 74 73 20 74 68 65 20 73 65 72 76 65 72 20 6e 61 6d 65 20 74 6f 20 62 65 | ws.expects.the.server.name.to.be |
11f860 | 20 61 6c 73 6f 20 75 73 65 64 20 69 6e 20 74 68 65 20 73 65 72 76 65 72 27 73 20 63 65 72 74 69 | .also.used.in.the.server's.certi |
11f880 | 66 69 63 61 74 65 20 63 6f 6d 6d 6f 6e 20 6e 61 6d 65 2c 20 73 6f 20 69 74 27 73 20 62 65 73 74 | ficate.common.name,.so.it's.best |
11f8a0 | 20 74 6f 20 75 73 65 20 74 68 69 73 20 44 4e 53 20 6e 61 6d 65 20 66 6f 72 20 79 6f 75 72 20 56 | .to.use.this.DNS.name.for.your.V |
11f8c0 | 50 4e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 57 69 72 65 47 75 61 72 64 00 57 69 72 65 47 75 61 | PN.connection..WireGuard.WireGua |
11f8e0 | 72 64 20 43 6c 69 65 6e 74 20 51 52 20 63 6f 64 65 00 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 | rd.Client.QR.code.WireGuard.inte |
11f900 | 72 66 61 63 65 20 69 74 73 65 6c 66 20 75 73 65 73 20 61 64 64 72 65 73 73 20 31 30 2e 31 2e 30 | rface.itself.uses.address.10.1.0 |
11f920 | 2e 31 2f 33 30 00 57 69 72 65 47 75 61 72 64 20 69 73 20 61 6e 20 65 78 74 72 65 6d 65 6c 79 20 | .1/30.WireGuard.is.an.extremely. |
11f940 | 73 69 6d 70 6c 65 20 79 65 74 20 66 61 73 74 20 61 6e 64 20 6d 6f 64 65 72 6e 20 56 50 4e 20 74 | simple.yet.fast.and.modern.VPN.t |
11f960 | 68 61 74 20 75 74 69 6c 69 7a 65 73 20 73 74 61 74 65 2d 6f 66 2d 74 68 65 2d 61 72 74 20 63 72 | hat.utilizes.state-of-the-art.cr |
11f980 | 79 70 74 6f 67 72 61 70 68 79 2e 20 53 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 69 72 65 | yptography..See.https://www.wire |
11f9a0 | 67 75 61 72 64 2e 63 6f 6d 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 | guard.com.for.more.information.. |
11f9c0 | 57 69 72 65 47 75 61 72 64 20 72 65 71 75 69 72 65 73 20 74 68 65 20 67 65 6e 65 72 61 74 69 6f | WireGuard.requires.the.generatio |
11f9e0 | 6e 20 6f 66 20 61 20 6b 65 79 70 61 69 72 2c 20 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 20 61 | n.of.a.keypair,.which.includes.a |
11fa00 | 20 70 72 69 76 61 74 65 20 6b 65 79 20 74 6f 20 64 65 63 72 79 70 74 20 69 6e 63 6f 6d 69 6e 67 | .private.key.to.decrypt.incoming |
11fa20 | 20 74 72 61 66 66 69 63 2c 20 61 6e 64 20 61 20 70 75 62 6c 69 63 20 6b 65 79 20 66 6f 72 20 70 | .traffic,.and.a.public.key.for.p |
11fa40 | 65 65 72 28 73 29 20 74 6f 20 65 6e 63 72 79 70 74 20 74 72 61 66 66 69 63 2e 00 57 69 72 65 6c | eer(s).to.encrypt.traffic..Wirel |
11fa60 | 65 73 73 20 63 68 61 6e 6e 65 6c 20 60 60 31 60 60 00 57 69 72 65 6c 65 73 73 20 64 65 76 69 63 | ess.channel.``1``.Wireless.devic |
11fa80 | 65 20 74 79 70 65 20 66 6f 72 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 00 57 69 72 65 6c 65 | e.type.for.this.interface.Wirele |
11faa0 | 73 73 20 68 61 72 64 77 61 72 65 20 64 65 76 69 63 65 20 75 73 65 64 20 61 73 20 75 6e 64 65 72 | ss.hardware.device.used.as.under |
11fac0 | 6c 61 79 20 72 61 64 69 6f 2e 00 57 69 72 65 6c 65 73 73 20 6f 70 74 69 6f 6e 73 00 57 69 72 65 | lay.radio..Wireless.options.Wire |
11fae0 | 6c 65 73 73 20 6f 70 74 69 6f 6e 73 20 28 53 74 61 74 69 6f 6e 2f 43 6c 69 65 6e 74 29 00 57 69 | less.options.(Station/Client).Wi |
11fb00 | 72 65 6c 65 73 73 4d 6f 64 65 6d 20 28 57 57 41 4e 29 20 6f 70 74 69 6f 6e 73 00 57 69 74 68 20 | relessModem.(WWAN).options.With. |
11fb20 | 56 79 4f 53 20 62 65 69 6e 67 20 62 61 73 65 64 20 6f 6e 20 74 6f 70 20 6f 66 20 4c 69 6e 75 78 | VyOS.being.based.on.top.of.Linux |
11fb40 | 20 61 6e 64 20 69 74 73 20 6b 65 72 6e 65 6c 2c 20 74 68 65 20 4e 65 74 66 69 6c 74 65 72 20 70 | .and.its.kernel,.the.Netfilter.p |
11fb60 | 72 6f 6a 65 63 74 20 63 72 65 61 74 65 64 20 74 68 65 20 69 70 74 61 62 6c 65 73 20 61 6e 64 20 | roject.created.the.iptables.and. |
11fb80 | 6e 6f 77 20 74 68 65 20 73 75 63 63 65 73 73 6f 72 20 6e 66 74 61 62 6c 65 73 20 66 6f 72 20 74 | now.the.successor.nftables.for.t |
11fba0 | 68 65 20 4c 69 6e 75 78 20 6b 65 72 6e 65 6c 20 74 6f 20 77 6f 72 6b 20 64 69 72 65 63 74 6c 79 | he.Linux.kernel.to.work.directly |
11fbc0 | 20 6f 6e 20 74 68 65 20 64 61 74 61 20 66 6c 6f 77 73 2e 20 54 68 69 73 20 6e 6f 77 20 65 78 74 | .on.the.data.flows..This.now.ext |
11fbe0 | 65 6e 64 73 20 74 68 65 20 63 6f 6e 63 65 70 74 20 6f 66 20 7a 6f 6e 65 2d 62 61 73 65 64 20 73 | ends.the.concept.of.zone-based.s |
11fc00 | 65 63 75 72 69 74 79 20 74 6f 20 61 6c 6c 6f 77 20 66 6f 72 20 6d 61 6e 69 70 75 6c 61 74 69 6e | ecurity.to.allow.for.manipulatin |
11fc20 | 67 20 74 68 65 20 64 61 74 61 20 61 74 20 6d 75 6c 74 69 70 6c 65 20 73 74 61 67 65 73 20 6f 6e | g.the.data.at.multiple.stages.on |
11fc40 | 63 65 20 61 63 63 65 70 74 65 64 20 62 79 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 | ce.accepted.by.the.network.inter |
11fc60 | 66 61 63 65 20 61 6e 64 20 74 68 65 20 64 72 69 76 65 72 20 62 65 66 6f 72 65 20 62 65 69 6e 67 | face.and.the.driver.before.being |
11fc80 | 20 68 61 6e 64 65 64 20 6f 66 66 20 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 28 | .handed.off.to.the.destination.( |
11fca0 | 65 2e 67 2e 20 61 20 77 65 62 20 73 65 72 76 65 72 20 4f 52 20 61 6e 6f 74 68 65 72 20 64 65 76 | e.g..a.web.server.OR.another.dev |
11fcc0 | 69 63 65 29 2e 00 57 69 74 68 20 57 69 72 65 47 75 61 72 64 2c 20 61 20 52 6f 61 64 20 57 61 72 | ice)..With.WireGuard,.a.Road.War |
11fce0 | 72 69 6f 72 20 56 50 4e 20 63 6f 6e 66 69 67 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 61 20 | rior.VPN.config.is.similar.to.a. |
11fd00 | 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 56 50 4e 2e 20 49 74 20 6a 75 73 74 20 6c 61 63 6b 73 20 | site-to-site.VPN..It.just.lacks. |
11fd20 | 74 68 65 20 60 60 61 64 64 72 65 73 73 60 60 20 61 6e 64 20 60 60 70 6f 72 74 60 60 20 73 74 61 | the.``address``.and.``port``.sta |
11fd40 | 74 65 6d 65 6e 74 73 2e 00 57 69 74 68 20 74 68 65 20 60 60 6e 61 6d 65 2d 73 65 72 76 65 72 60 | tements..With.the.``name-server` |
11fd60 | 60 20 6f 70 74 69 6f 6e 20 73 65 74 20 74 6f 20 60 60 6e 6f 6e 65 60 60 2c 20 56 79 4f 53 20 77 | `.option.set.to.``none``,.VyOS.w |
11fd80 | 69 6c 6c 20 69 67 6e 6f 72 65 20 74 68 65 20 6e 61 6d 65 73 65 72 76 65 72 73 20 79 6f 75 72 20 | ill.ignore.the.nameservers.your. |
11fda0 | 49 53 50 20 73 65 6e 64 73 20 79 6f 75 20 61 6e 64 20 74 68 75 73 20 79 6f 75 20 63 61 6e 20 66 | ISP.sends.you.and.thus.you.can.f |
11fdc0 | 75 6c 6c 79 20 72 65 6c 79 20 6f 6e 20 74 68 65 20 6f 6e 65 73 20 79 6f 75 20 68 61 76 65 20 63 | ully.rely.on.the.ones.you.have.c |
11fde0 | 6f 6e 66 69 67 75 72 65 64 20 73 74 61 74 69 63 61 6c 6c 79 2e 00 57 69 74 68 20 74 68 65 20 66 | onfigured.statically..With.the.f |
11fe00 | 69 72 65 77 61 6c 6c 20 79 6f 75 20 63 61 6e 20 73 65 74 20 72 75 6c 65 73 20 74 6f 20 61 63 63 | irewall.you.can.set.rules.to.acc |
11fe20 | 65 70 74 2c 20 64 72 6f 70 20 6f 72 20 72 65 6a 65 63 74 20 49 43 4d 50 20 69 6e 2c 20 6f 75 74 | ept,.drop.or.reject.ICMP.in,.out |
11fe40 | 20 6f 72 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 2e 20 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 | .or.local.traffic..You.can.also. |
11fe60 | 75 73 65 20 74 68 65 20 67 65 6e 65 72 61 6c 20 2a 2a 66 69 72 65 77 61 6c 6c 20 61 6c 6c 2d 70 | use.the.general.**firewall.all-p |
11fe80 | 69 6e 67 2a 2a 20 63 6f 6d 6d 61 6e 64 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 66 66 65 | ing**.command..This.command.affe |
11fea0 | 63 74 73 20 6f 6e 6c 79 20 74 6f 20 4c 4f 43 41 4c 20 28 70 61 63 6b 65 74 73 20 64 65 73 74 69 | cts.only.to.LOCAL.(packets.desti |
11fec0 | 6e 65 64 20 66 6f 72 20 79 6f 75 72 20 56 79 4f 53 20 73 79 73 74 65 6d 29 2c 20 6e 6f 74 20 74 | ned.for.your.VyOS.system),.not.t |
11fee0 | 6f 20 49 4e 20 6f 72 20 4f 55 54 20 74 72 61 66 66 69 63 2e 00 57 69 74 68 20 74 68 69 73 20 63 | o.IN.or.OUT.traffic..With.this.c |
11ff00 | 6f 6d 6d 61 6e 64 2c 20 79 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 68 6f 77 20 74 68 65 20 | ommand,.you.can.specify.how.the. |
11ff20 | 55 52 4c 20 70 61 74 68 20 73 68 6f 75 6c 64 20 62 65 20 6d 61 74 63 68 65 64 20 61 67 61 69 6e | URL.path.should.be.matched.again |
11ff40 | 73 74 20 69 6e 63 6f 6d 69 6e 67 20 72 65 71 75 65 73 74 73 2e 00 57 69 74 68 20 7a 6f 6e 65 2d | st.incoming.requests..With.zone- |
11ff60 | 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 73 20 61 20 6e 65 77 20 63 6f 6e 63 65 70 74 20 77 61 | based.firewalls.a.new.concept.wa |
11ff80 | 73 20 69 6d 70 6c 65 6d 65 6e 74 65 64 2c 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 | s.implemented,.in.addition.to.th |
11ffa0 | 65 20 73 74 61 6e 64 61 72 64 20 69 6e 20 61 6e 64 20 6f 75 74 20 74 72 61 66 66 69 63 20 66 6c | e.standard.in.and.out.traffic.fl |
11ffc0 | 6f 77 73 2c 20 61 20 6c 6f 63 61 6c 20 66 6c 6f 77 20 77 61 73 20 61 64 64 65 64 2e 20 54 68 69 | ows,.a.local.flow.was.added..Thi |
11ffe0 | 73 20 6c 6f 63 61 6c 20 77 61 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 6f 72 69 67 69 6e 61 74 | s.local.was.for.traffic.originat |
120000 | 69 6e 67 20 61 6e 64 20 64 65 73 74 69 6e 65 64 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 69 | ing.and.destined.to.the.router.i |
120020 | 74 73 65 6c 66 2e 20 57 68 69 63 68 20 6d 65 61 6e 73 20 61 64 64 69 74 69 6f 6e 61 6c 20 72 75 | tself..Which.means.additional.ru |
120040 | 6c 65 73 20 77 65 72 65 20 72 65 71 75 69 72 65 64 20 74 6f 20 73 65 63 75 72 65 20 74 68 65 20 | les.were.required.to.secure.the. |
120060 | 66 69 72 65 77 61 6c 6c 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 74 68 65 20 6e 65 74 77 6f 72 6b | firewall.itself.from.the.network |
120080 | 2c 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 65 78 69 73 74 69 6e 67 20 69 6e | ,.in.addition.to.the.existing.in |
1200a0 | 62 6f 75 6e 64 20 61 6e 64 20 6f 75 74 62 6f 75 6e 64 20 72 75 6c 65 73 20 66 72 6f 6d 20 74 68 | bound.and.outbound.rules.from.th |
1200c0 | 65 20 74 72 61 64 69 74 69 6f 6e 61 6c 20 63 6f 6e 63 65 70 74 20 61 62 6f 76 65 2e 00 57 69 74 | e.traditional.concept.above..Wit |
1200e0 | 68 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 73 20 61 20 6e 65 77 20 63 6f 6e | h.zone-based.firewalls.a.new.con |
120100 | 63 65 70 74 20 77 61 73 20 69 6d 70 6c 65 6d 65 6e 74 65 64 2c 20 69 6e 20 61 64 64 74 69 6f 6e | cept.was.implemented,.in.addtion |
120120 | 20 74 6f 20 74 68 65 20 73 74 61 6e 64 61 72 64 20 69 6e 20 61 6e 64 20 6f 75 74 20 74 72 61 66 | .to.the.standard.in.and.out.traf |
120140 | 66 69 63 20 66 6c 6f 77 73 2c 20 61 20 6c 6f 63 61 6c 20 66 6c 6f 77 20 77 61 73 20 61 64 64 65 | fic.flows,.a.local.flow.was.adde |
120160 | 64 2e 20 54 68 69 73 20 6c 6f 63 61 6c 20 77 61 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 6f 72 | d..This.local.was.for.traffic.or |
120180 | 69 67 69 6e 61 74 69 6e 67 20 61 6e 64 20 64 65 73 74 69 6e 65 64 20 74 6f 20 74 68 65 20 72 6f | iginating.and.destined.to.the.ro |
1201a0 | 75 74 65 72 20 69 74 73 65 6c 66 2e 20 57 68 69 63 68 20 6d 65 61 6e 73 20 61 64 64 69 74 69 6f | uter.itself..Which.means.additio |
1201c0 | 6e 61 6c 20 72 75 6c 65 73 20 77 65 72 65 20 72 65 71 75 69 72 65 64 20 74 6f 20 73 65 63 75 72 | nal.rules.were.required.to.secur |
1201e0 | 65 20 74 68 65 20 66 69 72 65 77 61 6c 6c 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 74 68 65 20 6e | e.the.firewall.itself.from.the.n |
120200 | 65 74 77 6f 72 6b 2c 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 65 78 69 73 74 | etwork,.in.addition.to.the.exist |
120220 | 69 6e 67 20 69 6e 62 6f 75 6e 64 20 61 6e 64 20 6f 75 74 62 6f 75 6e 64 20 72 75 6c 65 73 20 66 | ing.inbound.and.outbound.rules.f |
120240 | 72 6f 6d 20 74 68 65 20 74 72 61 64 69 74 69 6f 6e 61 6c 20 63 6f 6e 63 65 70 74 20 61 62 6f 76 | rom.the.traditional.concept.abov |
120260 | 65 2e 00 59 00 59 6f 75 20 61 70 70 6c 79 20 61 20 72 75 6c 65 2d 73 65 74 20 61 6c 77 61 79 73 | e..Y.You.apply.a.rule-set.always |
120280 | 20 74 6f 20 61 20 7a 6f 6e 65 20 66 72 6f 6d 20 61 6e 20 6f 74 68 65 72 20 7a 6f 6e 65 2c 20 69 | .to.a.zone.from.an.other.zone,.i |
1202a0 | 74 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 63 72 65 61 74 65 20 6f 6e 65 20 72 | t.is.recommended.to.create.one.r |
1202c0 | 75 6c 65 2d 73 65 74 20 66 6f 72 20 65 61 63 68 20 7a 6f 6e 65 20 70 61 69 72 2e 00 59 6f 75 20 | ule-set.for.each.zone.pair..You. |
1202e0 | 61 72 65 20 61 62 6c 65 20 74 6f 20 73 65 74 20 70 6f 73 74 2d 6c 6f 67 69 6e 20 6f 72 20 70 72 | are.able.to.set.post-login.or.pr |
120300 | 65 2d 6c 6f 67 69 6e 20 62 61 6e 6e 65 72 20 6d 65 73 73 61 67 65 73 20 74 6f 20 64 69 73 70 6c | e-login.banner.messages.to.displ |
120320 | 61 79 20 63 65 72 74 61 69 6e 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 74 68 69 73 20 | ay.certain.information.for.this. |
120340 | 73 79 73 74 65 6d 2e 00 59 6f 75 20 61 72 65 20 62 65 20 61 62 6c 65 20 74 6f 20 64 6f 77 6e 6c | system..You.are.be.able.to.downl |
120360 | 6f 61 64 20 74 68 65 20 66 69 6c 65 73 20 75 73 69 6e 67 20 53 43 50 2c 20 6f 6e 63 65 20 74 68 | oad.the.files.using.SCP,.once.th |
120380 | 65 20 53 53 48 20 73 65 72 76 69 63 65 20 68 61 73 20 62 65 65 6e 20 61 63 74 69 76 61 74 65 64 | e.SSH.service.has.been.activated |
1203a0 | 20 6c 69 6b 65 20 73 6f 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 63 6f 6e 66 69 67 75 72 65 20 | .like.so.You.can.also.configure. |
1203c0 | 74 68 65 20 74 69 6d 65 20 69 6e 74 65 72 76 61 6c 20 66 6f 72 20 70 72 65 65 6d 70 74 69 6f 6e | the.time.interval.for.preemption |
1203e0 | 20 77 69 74 68 20 74 68 65 20 22 70 72 65 65 6d 70 74 2d 64 65 6c 61 79 22 20 6f 70 74 69 6f 6e | .with.the."preempt-delay".option |
120400 | 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 74 6f 20 73 65 74 20 74 68 65 20 68 69 67 68 65 72 | ..For.example,.to.set.the.higher |
120420 | 20 70 72 69 6f 72 69 74 79 20 72 6f 75 74 65 72 20 74 6f 20 74 61 6b 65 20 6f 76 65 72 20 69 6e | .priority.router.to.take.over.in |
120440 | 20 31 38 30 20 73 65 63 6f 6e 64 73 2c 20 75 73 65 3a 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 | .180.seconds,.use:.You.can.also. |
120460 | 64 65 66 69 6e 65 20 63 75 73 74 6f 6d 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 73 20 74 6f 20 | define.custom.timeout.values.to. |
120480 | 61 70 70 6c 79 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 73 75 62 73 65 74 20 6f 66 20 63 6f | apply.to.a.specific.subset.of.co |
1204a0 | 6e 6e 65 63 74 69 6f 6e 73 2c 20 62 61 73 65 64 20 6f 6e 20 61 20 70 61 63 6b 65 74 20 61 6e 64 | nnections,.based.on.a.packet.and |
1204c0 | 20 66 6c 6f 77 20 73 65 6c 65 63 74 6f 72 2e 20 54 6f 20 64 6f 20 74 68 69 73 2c 20 79 6f 75 20 | .flow.selector..To.do.this,.you. |
1204e0 | 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 20 72 75 6c 65 20 64 65 66 69 6e 69 6e 67 20 74 | need.to.create.a.rule.defining.t |
120500 | 68 65 20 70 61 63 6b 65 74 20 61 6e 64 20 66 6c 6f 77 20 73 65 6c 65 63 74 6f 72 2e 00 59 6f 75 | he.packet.and.flow.selector..You |
120520 | 20 63 61 6e 20 61 6c 73 6f 20 6b 65 65 70 20 64 69 66 66 65 72 65 6e 74 20 44 4e 53 20 7a 6f 6e | .can.also.keep.different.DNS.zon |
120540 | 65 20 75 70 64 61 74 65 64 2e 20 4a 75 73 74 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 63 6f 6e | e.updated..Just.create.a.new.con |
120560 | 66 69 67 20 6e 6f 64 65 3a 20 60 60 73 65 74 20 73 65 72 76 69 63 65 20 64 6e 73 20 64 79 6e 61 | fig.node:.``set.service.dns.dyna |
120580 | 6d 69 63 20 69 6e 74 65 72 66 61 63 65 20 3c 69 6e 74 65 72 66 61 63 65 3e 20 72 66 63 32 31 33 | mic.interface.<interface>.rfc213 |
1205a0 | 36 20 3c 6f 74 68 65 72 2d 73 65 72 76 69 63 65 2d 6e 61 6d 65 3e 60 60 00 59 6f 75 20 63 61 6e | 6.<other-service-name>``.You.can |
1205c0 | 20 61 6c 73 6f 20 6f 70 74 20 66 6f 72 20 75 73 69 6e 67 20 60 3a 3a 2f 36 34 60 20 61 73 20 70 | .also.opt.for.using.`::/64`.as.p |
1205e0 | 72 65 66 69 78 20 66 6f 72 20 79 6f 75 72 20 3a 61 62 62 72 3a 60 52 41 73 20 28 52 6f 75 74 65 | refix.for.your.:abbr:`RAs.(Route |
120600 | 72 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 73 29 60 2e 20 54 68 69 73 20 77 69 6c 6c 20 74 61 | r.Advertisements)`..This.will.ta |
120620 | 6b 65 20 74 68 65 20 49 50 76 36 20 47 55 41 20 70 72 65 66 69 78 20 61 73 73 69 67 6e 65 64 20 | ke.the.IPv6.GUA.prefix.assigned. |
120640 | 74 6f 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2c 20 77 68 69 63 68 20 63 6f 6d 65 73 20 69 6e | to.the.interface,.which.comes.in |
120660 | 20 68 61 6e 64 79 20 77 68 65 6e 20 75 73 69 6e 67 20 44 48 43 50 76 36 2d 50 44 2e 00 59 6f 75 | .handy.when.using.DHCPv6-PD..You |
120680 | 20 63 61 6e 20 61 6c 73 6f 20 73 70 65 63 69 66 79 20 77 68 69 63 68 20 49 50 76 36 20 61 63 63 | .can.also.specify.which.IPv6.acc |
1206a0 | 65 73 73 2d 6c 69 73 74 20 73 68 6f 75 6c 64 20 62 65 20 73 68 6f 77 6e 3a 00 59 6f 75 20 63 61 | ess-list.should.be.shown:.You.ca |
1206c0 | 6e 20 61 6c 73 6f 20 74 75 6e 65 20 6d 75 6c 74 69 63 61 73 74 20 77 69 74 68 20 74 68 65 20 66 | n.also.tune.multicast.with.the.f |
1206e0 | 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 2e 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 | ollowing.commands..You.can.also. |
120700 | 75 73 65 20 61 6e 6f 74 68 65 72 20 61 74 74 72 69 62 75 74 65 73 20 66 6f 72 20 69 64 65 6e 74 | use.another.attributes.for.ident |
120720 | 69 66 79 20 63 6c 69 65 6e 74 20 66 6f 72 20 64 69 73 63 6f 6e 6e 65 63 74 2c 20 6c 69 6b 65 20 | ify.client.for.disconnect,.like. |
120740 | 46 72 61 6d 65 64 2d 49 50 2d 41 64 64 72 65 73 73 2c 20 41 63 63 74 2d 53 65 73 73 69 6f 6e 2d | Framed-IP-Address,.Acct-Session- |
120760 | 49 64 2c 20 65 74 63 2e 20 52 65 73 75 6c 74 20 63 6f 6d 6d 61 6e 64 73 20 61 70 70 65 61 72 73 | Id,.etc..Result.commands.appears |
120780 | 20 69 6e 20 6c 6f 67 2e 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 77 72 69 74 65 20 61 20 64 65 | .in.log..You.can.also.write.a.de |
1207a0 | 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 61 20 66 69 6c 74 65 72 3a 00 59 6f 75 20 63 61 6e 20 | scription.for.a.filter:.You.can. |
1207c0 | 61 73 73 69 67 6e 20 6d 75 6c 74 69 70 6c 65 20 6b 65 79 73 20 74 6f 20 74 68 65 20 73 61 6d 65 | assign.multiple.keys.to.the.same |
1207e0 | 20 75 73 65 72 20 62 79 20 75 73 69 6e 67 20 61 20 75 6e 69 71 75 65 20 69 64 65 6e 74 69 66 69 | .user.by.using.a.unique.identifi |
120800 | 65 72 20 70 65 72 20 53 53 48 20 6b 65 79 2e 00 59 6f 75 20 63 61 6e 20 61 76 6f 69 64 20 74 68 | er.per.SSH.key..You.can.avoid.th |
120820 | 65 20 22 6c 65 61 6b 79 22 20 62 65 68 61 76 69 6f 72 20 62 79 20 75 73 69 6e 67 20 61 20 66 69 | e."leaky".behavior.by.using.a.fi |
120840 | 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 20 74 68 61 74 20 64 72 6f 70 73 20 22 69 6e 76 61 6c 69 | rewall.policy.that.drops."invali |
120860 | 64 22 20 73 74 61 74 65 20 70 61 63 6b 65 74 73 2e 00 59 6f 75 20 63 61 6e 20 63 68 65 63 6b 20 | d".state.packets..You.can.check. |
120880 | 79 6f 75 72 20 4e 49 43 20 64 72 69 76 65 72 20 62 79 20 69 73 73 75 69 6e 67 20 3a 6f 70 63 6d | your.NIC.driver.by.issuing.:opcm |
1208a0 | 64 3a 60 73 68 6f 77 20 69 6e 74 65 72 66 61 63 65 73 20 65 74 68 65 72 6e 65 74 20 65 74 68 30 | d:`show.interfaces.ethernet.eth0 |
1208c0 | 20 70 68 79 73 69 63 61 6c 20 7c 20 67 72 65 70 20 2d 69 20 64 72 69 76 65 72 60 00 59 6f 75 20 | .physical.|.grep.-i.driver`.You. |
1208e0 | 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 61 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 20 63 6c | can.configure.a.policy.into.a.cl |
120900 | 61 73 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 60 60 71 75 65 75 65 2d 74 79 70 65 60 60 20 73 | ass.through.the.``queue-type``.s |
120920 | 65 74 74 69 6e 67 2e 00 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 63 6c 61 73 73 65 | etting..You.can.configure.classe |
120940 | 73 20 28 75 70 20 74 6f 20 34 30 39 30 29 20 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 20 73 65 | s.(up.to.4090).with.different.se |
120960 | 74 74 69 6e 67 73 20 61 6e 64 20 61 20 64 65 66 61 75 6c 74 20 70 6f 6c 69 63 79 20 77 68 69 63 | ttings.and.a.default.policy.whic |
120980 | 68 20 77 69 6c 6c 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 6e 79 20 74 72 61 66 66 69 63 | h.will.be.applied.to.any.traffic |
1209a0 | 20 6e 6f 74 20 6d 61 74 63 68 69 6e 67 20 61 6e 79 20 6f 66 20 74 68 65 20 63 6f 6e 66 69 67 75 | .not.matching.any.of.the.configu |
1209c0 | 72 65 64 20 63 6c 61 73 73 65 73 2e 00 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 6d | red.classes..You.can.configure.m |
1209e0 | 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 66 61 63 65 73 20 77 68 69 63 68 20 77 68 6f 75 6c 64 20 | ultiple.interfaces.which.whould. |
120a00 | 70 61 72 74 69 63 69 70 61 74 65 20 69 6e 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 2e 00 | participate.in.flow.accounting.. |
120a20 | 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 6d 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 | You.can.configure.multiple.inter |
120a40 | 66 61 63 65 73 20 77 68 69 63 68 20 77 68 6f 75 6c 64 20 70 61 72 74 69 63 69 70 61 74 65 20 69 | faces.which.whould.participate.i |
120a60 | 6e 20 73 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 2e 00 59 6f 75 20 63 61 6e 20 63 72 65 61 | n.sflow.accounting..You.can.crea |
120a80 | 74 65 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 6f 6e 20 61 | te.multiple.VLAN.interfaces.on.a |
120aa0 | 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 56 4c 41 4e 20 49 44 | .physical.interface..The.VLAN.ID |
120ac0 | 20 72 61 6e 67 65 20 69 73 20 66 72 6f 6d 20 30 20 74 6f 20 34 30 39 34 2e 00 59 6f 75 20 63 61 | .range.is.from.0.to.4094..You.ca |
120ae0 | 6e 20 64 69 73 61 62 6c 65 20 61 20 56 52 52 50 20 67 72 6f 75 70 20 77 69 74 68 20 60 60 64 69 | n.disable.a.VRRP.group.with.``di |
120b00 | 73 61 62 6c 65 60 60 20 6f 70 74 69 6f 6e 3a 00 59 6f 75 20 63 61 6e 20 67 65 74 20 6d 6f 72 65 | sable``.option:.You.can.get.more |
120b20 | 20 73 70 65 63 69 66 69 63 20 4f 53 50 46 76 33 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 62 79 20 | .specific.OSPFv3.information.by. |
120b40 | 75 73 69 6e 67 20 74 68 65 20 70 61 72 61 6d 65 74 65 72 73 20 73 68 6f 77 6e 20 62 65 6c 6f 77 | using.the.parameters.shown.below |
120b60 | 3a 00 59 6f 75 20 63 61 6e 20 6e 6f 74 20 61 73 73 69 67 6e 20 74 68 65 20 73 61 6d 65 20 61 6c | :.You.can.not.assign.the.same.al |
120b80 | 6c 6f 77 65 64 2d 69 70 73 20 73 74 61 74 65 6d 65 6e 74 20 74 6f 20 6d 75 6c 74 69 70 6c 65 20 | lowed-ips.statement.to.multiple. |
120ba0 | 57 69 72 65 47 75 61 72 64 20 70 65 65 72 73 2e 20 54 68 69 73 20 61 20 64 65 73 69 67 6e 20 64 | WireGuard.peers..This.a.design.d |
120bc0 | 65 63 69 73 69 6f 6e 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c | ecision..For.more.information.pl |
120be0 | 65 61 73 65 20 63 68 65 63 6b 20 74 68 65 20 60 57 69 72 65 47 75 61 72 64 20 6d 61 69 6c 69 6e | ease.check.the.`WireGuard.mailin |
120c00 | 67 20 6c 69 73 74 60 5f 2e 00 59 6f 75 20 63 61 6e 20 6e 6f 74 20 72 75 6e 20 74 68 69 73 20 69 | g.list`_..You.can.not.run.this.i |
120c20 | 6e 20 61 20 56 52 52 50 20 73 65 74 75 70 2c 20 69 66 20 6d 75 6c 74 69 70 6c 65 20 6d 44 4e 53 | n.a.VRRP.setup,.if.multiple.mDNS |
120c40 | 20 72 65 70 65 61 74 65 72 73 20 61 72 65 20 6c 61 75 6e 63 68 65 64 20 69 6e 20 61 20 73 75 62 | .repeaters.are.launched.in.a.sub |
120c60 | 6e 65 74 20 79 6f 75 20 77 69 6c 6c 20 65 78 70 65 72 69 65 6e 63 65 20 74 68 65 20 6d 44 4e 53 | net.you.will.experience.the.mDNS |
120c80 | 20 70 61 63 6b 65 74 20 73 74 6f 72 6d 20 64 65 61 74 68 21 00 59 6f 75 20 63 61 6e 20 6e 6f 77 | .packet.storm.death!.You.can.now |
120ca0 | 20 22 64 69 61 6c 22 20 74 68 65 20 70 65 65 72 20 77 69 74 68 20 74 68 65 20 66 6f 6c 6c 77 6f | ."dial".the.peer.with.the.follwo |
120cc0 | 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 20 60 60 73 73 74 70 63 20 2d 2d 6c 6f 67 2d 6c 65 76 65 6c | ing.command:.``sstpc.--log-level |
120ce0 | 20 34 20 2d 2d 6c 6f 67 2d 73 74 64 65 72 72 20 2d 2d 75 73 65 72 20 76 79 6f 73 20 2d 2d 70 61 | .4.--log-stderr.--user.vyos.--pa |
120d00 | 73 73 77 6f 72 64 20 76 79 6f 73 20 76 70 6e 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 20 2d 2d 20 63 | ssword.vyos.vpn.example.com.--.c |
120d20 | 61 6c 6c 20 76 79 6f 73 60 60 2e 00 59 6f 75 20 63 61 6e 20 6e 6f 77 20 53 53 48 20 69 6e 74 6f | all.vyos``..You.can.now.SSH.into |
120d40 | 20 79 6f 75 72 20 73 79 73 74 65 6d 20 75 73 69 6e 67 20 61 64 6d 69 6e 2f 61 64 6d 69 6e 20 61 | .your.system.using.admin/admin.a |
120d60 | 73 20 61 20 64 65 66 61 75 6c 74 20 75 73 65 72 20 73 75 70 70 6c 69 65 64 20 66 72 6f 6d 20 74 | s.a.default.user.supplied.from.t |
120d80 | 68 65 20 60 60 6c 66 6b 65 69 74 65 6c 2f 74 61 63 61 63 73 5f 70 6c 75 73 3a 6c 61 74 65 73 74 | he.``lfkeitel/tacacs_plus:latest |
120da0 | 60 60 20 63 6f 6e 74 61 69 6e 65 72 2e 00 59 6f 75 20 63 61 6e 20 6f 6e 6c 79 20 61 70 70 6c 79 | ``.container..You.can.only.apply |
120dc0 | 20 6f 6e 65 20 70 6f 6c 69 63 79 20 70 65 72 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 64 69 | .one.policy.per.interface.and.di |
120de0 | 72 65 63 74 69 6f 6e 2c 20 62 75 74 20 79 6f 75 20 63 6f 75 6c 64 20 72 65 75 73 65 20 61 20 70 | rection,.but.you.could.reuse.a.p |
120e00 | 6f 6c 69 63 79 20 6f 6e 20 64 69 66 66 65 72 65 6e 74 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e | olicy.on.different.interfaces.an |
120e20 | 64 20 64 69 72 65 63 74 69 6f 6e 73 3a 00 59 6f 75 20 63 61 6e 20 72 75 6e 20 74 68 65 20 55 44 | d.directions:.You.can.run.the.UD |
120e40 | 50 20 62 72 6f 61 64 63 61 73 74 20 72 65 6c 61 79 20 73 65 72 76 69 63 65 20 6f 6e 20 6d 75 6c | P.broadcast.relay.service.on.mul |
120e60 | 74 69 70 6c 65 20 72 6f 75 74 65 72 73 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 20 73 75 62 | tiple.routers.connected.to.a.sub |
120e80 | 6e 65 74 2e 20 54 68 65 72 65 20 69 73 20 2a 2a 4e 4f 2a 2a 20 55 44 50 20 62 72 6f 61 64 63 61 | net..There.is.**NO**.UDP.broadca |
120ea0 | 73 74 20 72 65 6c 61 79 20 70 61 63 6b 65 74 20 73 74 6f 72 6d 21 00 59 6f 75 20 63 61 6e 20 73 | st.relay.packet.storm!.You.can.s |
120ec0 | 70 65 63 69 66 79 20 61 20 73 74 61 74 69 63 20 44 48 43 50 20 61 73 73 69 67 6e 6d 65 6e 74 20 | pecify.a.static.DHCP.assignment. |
120ee0 | 6f 6e 20 61 20 70 65 72 20 68 6f 73 74 20 62 61 73 69 73 2e 20 59 6f 75 20 77 69 6c 6c 20 6e 65 | on.a.per.host.basis..You.will.ne |
120f00 | 65 64 20 74 68 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 73 74 61 74 69 6f | ed.the.MAC.address.of.the.statio |
120f20 | 6e 20 61 6e 64 20 79 6f 75 72 20 64 65 73 69 72 65 64 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 | n.and.your.desired.IP.address..T |
120f40 | 68 65 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 69 6e 73 69 64 65 20 74 68 65 20 73 75 | he.address.must.be.inside.the.su |
120f60 | 62 6e 65 74 20 64 65 66 69 6e 69 74 69 6f 6e 20 62 75 74 20 63 61 6e 20 62 65 20 6f 75 74 73 69 | bnet.definition.but.can.be.outsi |
120f80 | 64 65 20 6f 66 20 74 68 65 20 72 61 6e 67 65 20 73 74 61 74 65 6d 65 6e 74 2e 00 59 6f 75 20 63 | de.of.the.range.statement..You.c |
120fa0 | 61 6e 20 74 65 73 74 20 74 68 65 20 53 4e 4d 50 76 33 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 | an.test.the.SNMPv3.functionality |
120fc0 | 20 66 72 6f 6d 20 61 6e 79 20 6c 69 6e 75 78 20 62 61 73 65 64 20 73 79 73 74 65 6d 2c 20 6a 75 | .from.any.linux.based.system,.ju |
120fe0 | 73 74 20 72 75 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 20 60 60 | st.run.the.following.command:.`` |
121000 | 73 6e 6d 70 77 61 6c 6b 20 2d 76 20 33 20 2d 75 20 76 79 6f 73 20 2d 61 20 53 48 41 20 2d 41 20 | snmpwalk.-v.3.-u.vyos.-a.SHA.-A. |
121020 | 76 79 6f 73 31 32 33 34 35 36 37 38 20 2d 78 20 41 45 53 20 2d 58 20 76 79 6f 73 31 32 33 34 35 | vyos12345678.-x.AES.-X.vyos12345 |
121040 | 36 37 38 20 2d 6c 20 61 75 74 68 50 72 69 76 20 31 39 32 2e 30 2e 32 2e 31 20 2e 31 60 60 00 59 | 678.-l.authPriv.192.0.2.1..1``.Y |
121060 | 6f 75 20 63 61 6e 20 75 73 65 20 77 69 6c 64 63 61 72 64 20 60 60 2a 60 60 20 74 6f 20 6d 61 74 | ou.can.use.wildcard.``*``.to.mat |
121080 | 63 68 20 61 20 67 72 6f 75 70 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 2e 00 59 6f 75 20 63 61 | ch.a.group.of.interfaces..You.ca |
1210a0 | 6e 20 76 65 72 69 66 79 20 79 6f 75 72 20 56 52 52 50 20 67 72 6f 75 70 20 73 74 61 74 75 73 20 | n.verify.your.VRRP.group.status. |
1210c0 | 77 69 74 68 20 74 68 65 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6d 6f 64 65 20 60 60 72 75 6e 20 | with.the.operational.mode.``run. |
1210e0 | 73 68 6f 77 20 76 72 72 70 60 60 20 63 6f 6d 6d 61 6e 64 3a 00 59 6f 75 20 63 61 6e 20 76 69 65 | show.vrrp``.command:.You.can.vie |
121100 | 77 20 74 68 61 74 20 74 68 65 20 70 6f 6c 69 63 79 20 69 73 20 62 65 69 6e 67 20 63 6f 72 72 65 | w.that.the.policy.is.being.corre |
121120 | 63 74 6c 79 20 28 6f 72 20 69 6e 63 6f 72 72 65 63 74 6c 79 29 20 75 74 69 6c 69 73 65 64 20 77 | ctly.(or.incorrectly).utilised.w |
121140 | 69 74 68 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 59 6f 75 20 63 | ith.the.following.command:.You.c |
121160 | 61 6e 6e 6f 74 20 65 61 73 69 6c 79 20 72 65 64 69 73 74 72 69 62 75 74 65 20 49 50 76 36 20 72 | annot.easily.redistribute.IPv6.r |
121180 | 6f 75 74 65 73 20 76 69 61 20 4f 53 50 46 76 33 20 6f 6e 20 61 20 57 69 72 65 47 75 61 72 64 20 | outes.via.OSPFv3.on.a.WireGuard. |
1211a0 | 69 6e 74 65 72 66 61 63 65 20 6c 69 6e 6b 2e 20 54 68 69 73 20 72 65 71 75 69 72 65 73 20 79 6f | interface.link..This.requires.yo |
1211c0 | 75 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 6c 69 6e 6b 2d 6c 6f 63 61 6c 20 61 64 64 72 65 73 | u.to.configure.link-local.addres |
1211e0 | 73 65 73 20 6d 61 6e 75 61 6c 6c 79 20 6f 6e 20 74 68 65 20 57 69 72 65 47 75 61 72 64 20 69 6e | ses.manually.on.the.WireGuard.in |
121200 | 74 65 72 66 61 63 65 73 2c 20 73 65 65 20 3a 76 79 74 61 73 6b 3a 60 54 31 34 38 33 60 2e 00 59 | terfaces,.see.:vytask:`T1483`..Y |
121220 | 6f 75 20 64 6f 20 2a 2a 6e 6f 74 2a 2a 20 6e 65 65 64 20 74 6f 20 63 6f 70 79 20 74 68 65 20 63 | ou.do.**not**.need.to.copy.the.c |
121240 | 65 72 74 69 66 69 63 61 74 65 20 74 6f 20 74 68 65 20 6f 74 68 65 72 20 72 6f 75 74 65 72 2e 20 | ertificate.to.the.other.router.. |
121260 | 49 6e 73 74 65 61 64 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 72 65 74 72 69 65 76 65 20 69 74 | Instead,.you.need.to.retrieve.it |
121280 | 73 20 53 48 41 2d 32 35 36 20 66 69 6e 67 65 72 70 72 69 6e 74 2e 20 4f 70 65 6e 56 50 4e 20 6f | s.SHA-256.fingerprint..OpenVPN.o |
1212a0 | 6e 6c 79 20 73 75 70 70 6f 72 74 73 20 53 48 41 2d 32 35 36 20 66 69 6e 67 65 72 70 72 69 6e 74 | nly.supports.SHA-256.fingerprint |
1212c0 | 73 20 61 74 20 74 68 65 20 6d 6f 6d 65 6e 74 2c 20 73 6f 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 | s.at.the.moment,.so.you.need.to. |
1212e0 | 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 59 6f 75 20 6d | use.the.following.command:.You.m |
121300 | 61 79 20 61 6c 73 6f 20 61 64 64 69 74 69 6f 6e 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 20 74 | ay.also.additionally.configure.t |
121320 | 69 6d 65 6f 75 74 73 20 66 6f 72 20 64 69 66 66 65 72 65 6e 74 20 74 79 70 65 73 20 6f 66 20 63 | imeouts.for.different.types.of.c |
121340 | 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 59 6f 75 20 6d 61 79 20 70 72 65 66 65 72 20 6c 6f 63 61 6c | onnections..You.may.prefer.local |
121360 | 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 6d 6f 72 65 20 | ly.configured.capabilities.more. |
121380 | 74 68 61 6e 20 74 68 65 20 6e 65 67 6f 74 69 61 74 65 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 | than.the.negotiated.capabilities |
1213a0 | 20 65 76 65 6e 20 74 68 6f 75 67 68 20 72 65 6d 6f 74 65 20 70 65 65 72 20 73 65 6e 64 73 20 63 | .even.though.remote.peer.sends.c |
1213c0 | 61 70 61 62 69 6c 69 74 69 65 73 2e 20 49 66 20 74 68 65 20 70 65 65 72 20 69 73 20 63 6f 6e 66 | apabilities..If.the.peer.is.conf |
1213e0 | 69 67 75 72 65 64 20 62 79 20 3a 63 66 67 63 6d 64 3a 60 6f 76 65 72 72 69 64 65 2d 63 61 70 61 | igured.by.:cfgcmd:`override-capa |
121400 | 62 69 6c 69 74 79 60 2c 20 56 79 4f 53 20 69 67 6e 6f 72 65 73 20 72 65 63 65 69 76 65 64 20 63 | bility`,.VyOS.ignores.received.c |
121420 | 61 70 61 62 69 6c 69 74 69 65 73 20 74 68 65 6e 20 6f 76 65 72 72 69 64 65 20 6e 65 67 6f 74 69 | apabilities.then.override.negoti |
121440 | 61 74 65 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 77 69 74 68 20 63 6f 6e 66 69 67 75 72 65 | ated.capabilities.with.configure |
121460 | 64 20 76 61 6c 75 65 73 2e 00 59 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 64 69 73 61 62 6c | d.values..You.may.want.to.disabl |
121480 | 65 20 73 65 6e 64 69 6e 67 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e | e.sending.Capability.Negotiation |
1214a0 | 20 4f 50 45 4e 20 6d 65 73 73 61 67 65 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 | .OPEN.message.optional.parameter |
1214c0 | 20 74 6f 20 74 68 65 20 70 65 65 72 20 77 68 65 6e 20 72 65 6d 6f 74 65 20 70 65 65 72 20 64 6f | .to.the.peer.when.remote.peer.do |
1214e0 | 65 73 20 6e 6f 74 20 69 6d 70 6c 65 6d 65 6e 74 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f | es.not.implement.Capability.Nego |
121500 | 74 69 61 74 69 6f 6e 2e 20 50 6c 65 61 73 65 20 75 73 65 20 3a 63 66 67 63 6d 64 3a 60 64 69 73 | tiation..Please.use.:cfgcmd:`dis |
121520 | 61 62 6c 65 2d 63 61 70 61 62 69 6c 69 74 79 2d 6e 65 67 6f 74 69 61 74 69 6f 6e 60 20 63 6f 6d | able-capability-negotiation`.com |
121540 | 6d 61 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 20 74 68 65 20 66 65 61 74 75 72 65 2e 00 59 6f 75 | mand.to.disable.the.feature..You |
121560 | 20 6e 65 65 64 20 32 20 73 65 70 61 72 61 74 65 20 66 69 72 65 77 61 6c 6c 73 20 74 6f 20 64 65 | .need.2.separate.firewalls.to.de |
121580 | 66 69 6e 65 20 74 72 61 66 66 69 63 3a 20 6f 6e 65 20 66 6f 72 20 65 61 63 68 20 64 69 72 65 63 | fine.traffic:.one.for.each.direc |
1215a0 | 74 69 6f 6e 2e 00 59 6f 75 20 6e 65 65 64 20 74 6f 20 64 69 73 61 62 6c 65 20 74 68 65 20 69 6e | tion..You.need.to.disable.the.in |
1215c0 | 2d 6d 65 6d 6f 72 79 20 74 61 62 6c 65 20 69 6e 20 70 72 6f 64 75 63 74 69 6f 6e 20 65 6e 76 69 | -memory.table.in.production.envi |
1215e0 | 72 6f 6e 6d 65 6e 74 73 21 20 55 73 69 6e 67 20 3a 61 62 62 72 3a 60 49 4d 54 20 28 49 6e 2d 4d | ronments!.Using.:abbr:`IMT.(In-M |
121600 | 65 6d 6f 72 79 20 54 61 62 6c 65 29 60 20 6d 61 79 20 6c 65 61 64 20 74 6f 20 68 65 61 76 79 20 | emory.Table)`.may.lead.to.heavy. |
121620 | 43 50 55 20 6f 76 65 72 6c 6f 61 64 69 6e 67 20 61 6e 64 20 75 6e 73 74 61 62 6c 65 20 66 6c 6f | CPU.overloading.and.unstable.flo |
121640 | 77 2d 61 63 63 6f 75 6e 74 69 6e 67 20 62 65 68 61 76 69 6f 72 2e 00 59 6f 75 20 6e 65 65 64 20 | w-accounting.behavior..You.need. |
121660 | 79 6f 75 72 20 50 50 50 6f 45 20 63 72 65 64 65 6e 74 69 61 6c 73 20 66 72 6f 6d 20 79 6f 75 72 | your.PPPoE.credentials.from.your |
121680 | 20 44 53 4c 20 49 53 50 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 | .DSL.ISP.in.order.to.configure.t |
1216a0 | 68 69 73 2e 20 54 68 65 20 75 73 75 61 6c 20 75 73 65 72 6e 61 6d 65 20 69 73 20 69 6e 20 74 68 | his..The.usual.username.is.in.th |
1216c0 | 65 20 66 6f 72 6d 20 6f 66 20 6e 61 6d 65 40 68 6f 73 74 2e 6e 65 74 20 62 75 74 20 6d 61 79 20 | e.form.of.name@host.net.but.may. |
1216e0 | 76 61 72 79 20 64 65 70 65 6e 64 69 6e 67 20 6f 6e 20 49 53 50 2e 00 59 6f 75 20 6e 6f 77 20 73 | vary.depending.on.ISP..You.now.s |
121700 | 65 65 20 74 68 65 20 6c 6f 6e 67 65 72 20 41 53 20 70 61 74 68 2e 00 59 6f 75 20 73 68 6f 75 6c | ee.the.longer.AS.path..You.shoul |
121720 | 64 20 61 64 64 20 61 20 66 69 72 65 77 61 6c 6c 20 74 6f 20 79 6f 75 72 20 63 6f 6e 66 69 67 75 | d.add.a.firewall.to.your.configu |
121740 | 72 61 74 69 6f 6e 20 61 62 6f 76 65 20 61 73 20 77 65 6c 6c 20 62 79 20 61 73 73 69 67 6e 69 6e | ration.above.as.well.by.assignin |
121760 | 67 20 69 74 20 74 6f 20 74 68 65 20 70 70 70 6f 65 30 20 69 74 73 65 6c 66 20 61 73 20 73 68 6f | g.it.to.the.pppoe0.itself.as.sho |
121780 | 77 6e 20 68 65 72 65 3a 00 59 6f 75 20 73 68 6f 75 6c 64 20 61 6c 73 6f 20 65 6e 73 75 72 65 20 | wn.here:.You.should.also.ensure. |
1217a0 | 74 68 61 74 20 74 68 65 20 4f 55 54 49 53 44 45 5f 4c 4f 43 41 4c 20 66 69 72 65 77 61 6c 6c 20 | that.the.OUTISDE_LOCAL.firewall. |
1217c0 | 67 72 6f 75 70 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 57 41 4e 20 69 6e 74 65 | group.is.applied.to.the.WAN.inte |
1217e0 | 72 66 61 63 65 20 61 6e 64 20 61 20 64 69 72 65 63 74 69 6f 6e 20 28 6c 6f 63 61 6c 29 2e 00 59 | rface.and.a.direction.(local)..Y |
121800 | 6f 75 20 73 68 6f 75 6c 64 20 61 6c 73 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 20 4f | ou.should.also.ensure.that.the.O |
121820 | 55 54 53 49 44 45 5f 4c 4f 43 41 4c 20 66 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 20 69 73 20 61 | UTSIDE_LOCAL.firewall.group.is.a |
121840 | 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 | pplied.to.the.WAN.interface.and. |
121860 | 61 20 64 69 72 65 63 74 69 6f 6e 20 28 6c 6f 63 61 6c 29 2e 00 59 6f 75 20 77 69 6c 6c 20 61 6c | a.direction.(local)..You.will.al |
121880 | 73 6f 20 6e 65 65 64 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 6f 66 20 79 6f 75 72 20 70 | so.need.the.public.key.of.your.p |
1218a0 | 65 65 72 20 61 73 20 77 65 6c 6c 20 61 73 20 74 68 65 20 6e 65 74 77 6f 72 6b 28 73 29 20 79 6f | eer.as.well.as.the.network(s).yo |
1218c0 | 75 20 77 61 6e 74 20 74 6f 20 74 75 6e 6e 65 6c 20 28 61 6c 6c 6f 77 65 64 2d 69 70 73 29 20 74 | u.want.to.tunnel.(allowed-ips).t |
1218e0 | 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 57 69 72 65 47 75 61 72 64 20 74 75 6e 6e 65 6c 2e 20 | o.configure.a.WireGuard.tunnel.. |
121900 | 54 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 62 65 6c 6f 77 20 69 73 20 61 6c 77 61 79 73 20 74 | The.public.key.below.is.always.t |
121920 | 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 66 72 6f 6d 20 79 6f 75 72 20 70 65 65 72 2c 20 6e 6f | he.public.key.from.your.peer,.no |
121940 | 74 20 79 6f 75 72 20 6c 6f 63 61 6c 20 6f 6e 65 2e 00 59 6f 75 72 20 49 53 50 73 20 6d 6f 64 65 | t.your.local.one..Your.ISPs.mode |
121960 | 6d 20 69 73 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 70 6f 72 74 20 60 60 65 74 68 30 60 60 20 | m.is.connected.to.port.``eth0``. |
121980 | 6f 66 20 79 6f 75 72 20 56 79 4f 53 20 62 6f 78 2e 00 59 6f 75 72 20 4c 41 4e 20 63 6f 6e 6e 65 | of.your.VyOS.box..Your.LAN.conne |
1219a0 | 63 74 65 64 20 6f 6e 20 65 74 68 30 20 75 73 65 73 20 70 72 65 66 69 78 20 60 60 32 30 30 31 3a | cted.on.eth0.uses.prefix.``2001: |
1219c0 | 64 62 38 3a 62 65 65 66 3a 32 3a 3a 2f 36 34 60 60 20 77 69 74 68 20 74 68 65 20 72 6f 75 74 65 | db8:beef:2::/64``.with.the.route |
1219e0 | 72 20 62 65 65 69 6e 67 20 60 60 32 30 30 31 3a 64 62 38 3a 62 65 65 66 3a 32 3a 3a 31 60 60 00 | r.beeing.``2001:db8:beef:2::1``. |
121a00 | 5a 65 62 72 61 20 73 75 70 70 6f 72 74 73 20 70 72 65 66 69 78 2d 6c 69 73 74 73 20 61 6e 64 20 | Zebra.supports.prefix-lists.and. |
121a20 | 52 6f 75 74 65 20 4d 61 70 73 73 20 74 6f 20 6d 61 74 63 68 20 72 6f 75 74 65 73 20 72 65 63 65 | Route.Mapss.to.match.routes.rece |
121a40 | 69 76 65 64 20 66 72 6f 6d 20 6f 74 68 65 72 20 46 52 52 20 63 6f 6d 70 6f 6e 65 6e 74 73 2e 20 | ived.from.other.FRR.components.. |
121a60 | 54 68 65 20 70 65 72 6d 69 74 2f 64 65 6e 79 20 66 61 63 69 6c 69 74 69 65 73 20 70 72 6f 76 69 | The.permit/deny.facilities.provi |
121a80 | 64 65 64 20 62 79 20 74 68 65 73 65 20 63 6f 6d 6d 61 6e 64 73 20 63 61 6e 20 62 65 20 75 73 65 | ded.by.these.commands.can.be.use |
121aa0 | 64 20 74 6f 20 66 69 6c 74 65 72 20 77 68 69 63 68 20 72 6f 75 74 65 73 20 7a 65 62 72 61 20 77 | d.to.filter.which.routes.zebra.w |
121ac0 | 69 6c 6c 20 69 6e 73 74 61 6c 6c 20 69 6e 20 74 68 65 20 6b 65 72 6e 65 6c 2e 00 5a 65 62 72 61 | ill.install.in.the.kernel..Zebra |
121ae0 | 2f 4b 65 72 6e 65 6c 20 72 6f 75 74 65 20 66 69 6c 74 65 72 69 6e 67 00 5a 6f 6e 65 20 42 61 73 | /Kernel.route.filtering.Zone.Bas |
121b00 | 65 64 20 46 69 72 65 77 61 6c 6c 00 5a 6f 6e 65 20 42 61 73 65 64 20 46 69 72 65 77 61 6c 6c 20 | ed.Firewall.Zone.Based.Firewall. |
121b20 | 28 44 65 70 72 65 63 61 74 65 64 29 00 5a 6f 6e 65 2d 50 6f 6c 69 63 79 20 4f 76 65 72 76 69 65 | (Deprecated).Zone-Policy.Overvie |
121b40 | 77 00 5a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 00 5b 41 2e 42 2e 43 2e 44 5d 20 | w.Zone-based.firewall.[A.B.C.D]. |
121b60 | e2 80 93 20 6c 69 6e 6b 2d 73 74 61 74 65 2d 69 64 2e 20 57 69 74 68 20 74 68 69 73 20 73 70 65 | ....link-state-id..With.this.spe |
121b80 | 63 69 66 69 65 64 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 70 6f 72 74 | cified.the.command.displays.port |
121ba0 | 69 6f 6e 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 74 | ion.of.the.network.environment.t |
121bc0 | 68 61 74 20 69 73 20 62 65 69 6e 67 20 64 65 73 63 72 69 62 65 64 20 62 79 20 74 68 65 20 61 64 | hat.is.being.described.by.the.ad |
121be0 | 76 65 72 74 69 73 65 6d 65 6e 74 2e 20 54 68 65 20 76 61 6c 75 65 20 65 6e 74 65 72 65 64 20 64 | vertisement..The.value.entered.d |
121c00 | 65 70 65 6e 64 73 20 6f 6e 20 74 68 65 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 e2 80 99 73 20 | epends.on.the.advertisement...s. |
121c20 | 4c 53 20 74 79 70 65 2e 20 49 74 20 6d 75 73 74 20 62 65 20 65 6e 74 65 72 65 64 20 69 6e 20 74 | LS.type..It.must.be.entered.in.t |
121c40 | 68 65 20 66 6f 72 6d 20 6f 66 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 2e 00 60 31 2e 20 43 72 | he.form.of.an.IP.address..`1..Cr |
121c60 | 65 61 74 65 20 61 6e 20 65 76 65 6e 74 20 68 61 6e 64 6c 65 72 60 5f 00 60 32 2e 20 41 64 64 20 | eate.an.event.handler`_.`2..Add. |
121c80 | 72 65 67 65 78 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 60 5f 00 60 33 2e 20 41 64 64 20 61 20 | regex.to.the.script`_.`3..Add.a. |
121ca0 | 66 75 6c 6c 20 70 61 74 68 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 60 5f 00 60 34 2e 20 41 64 | full.path.to.the.script`_.`4..Ad |
121cc0 | 64 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 73 60 5f 00 60 3c 6e 61 6d 65 3e 60 | d.optional.parameters`_.`<name>` |
121ce0 | 20 6d 75 73 74 20 62 65 20 69 64 65 6e 74 69 63 61 6c 20 6f 6e 20 62 6f 74 68 20 73 69 64 65 73 | .must.be.identical.on.both.sides |
121d00 | 21 00 60 60 24 20 74 61 69 6c 20 2d 6e 20 2b 32 20 63 61 2e 6b 65 79 20 7c 20 68 65 61 64 20 2d | !.``$.tail.-n.+2.ca.key.|.head.- |
121d20 | 6e 20 2d 31 20 7c 20 74 72 20 2d 64 20 27 5c 6e 27 60 60 00 60 60 24 20 74 61 69 6c 20 2d 6e 20 | n.-1.|.tr.-d.'\n'``.``$.tail.-n. |
121d40 | 2b 32 20 63 61 2e 70 65 6d 20 7c 20 68 65 61 64 20 2d 6e 20 2d 31 20 7c 20 74 72 20 2d 64 20 27 | +2.ca.pem.|.head.-n.-1.|.tr.-d.' |
121d60 | 5c 6e 27 60 60 00 60 60 24 20 74 61 69 6c 20 2d 6e 20 2b 32 20 63 65 72 74 2e 6b 65 79 20 7c 20 | \n'``.``$.tail.-n.+2.cert.key.|. |
121d80 | 68 65 61 64 20 2d 6e 20 2d 31 20 7c 20 74 72 20 2d 64 20 27 5c 6e 27 60 60 00 60 60 24 20 74 61 | head.-n.-1.|.tr.-d.'\n'``.``$.ta |
121da0 | 69 6c 20 2d 6e 20 2b 32 20 63 65 72 74 2e 70 65 6d 20 7c 20 68 65 61 64 20 2d 6e 20 2d 31 20 7c | il.-n.+2.cert.pem.|.head.-n.-1.| |
121dc0 | 20 74 72 20 2d 64 20 27 5c 6e 27 60 60 00 60 60 2b 60 60 20 73 75 63 63 65 73 73 66 75 6c 00 60 | .tr.-d.'\n'``.``+``.successful.` |
121de0 | 60 2d 60 60 20 66 61 69 6c 65 64 00 60 60 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2f 64 68 | `-``.failed.``/config/scripts/dh |
121e00 | 63 70 2d 63 6c 69 65 6e 74 2f 70 6f 73 74 2d 68 6f 6f 6b 73 2e 64 2f 60 60 00 60 60 2f 63 6f 6e | cp-client/post-hooks.d/``.``/con |
121e20 | 66 69 67 2f 73 63 72 69 70 74 73 2f 64 68 63 70 2d 63 6c 69 65 6e 74 2f 70 72 65 2d 68 6f 6f 6b | fig/scripts/dhcp-client/pre-hook |
121e40 | 73 2e 64 2f 60 60 00 60 60 30 2e 70 6f 6f 6c 2e 6e 74 70 2e 6f 72 67 60 60 00 60 60 30 60 60 20 | s.d/``.``0.pool.ntp.org``.``0``. |
121e60 | 2d 20 32 30 20 6f 72 20 34 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 20 77 69 64 74 68 20 28 64 65 | -.20.or.40.MHz.channel.width.(de |
121e80 | 66 61 75 6c 74 29 00 60 60 30 60 60 3a 20 4e 6f 20 72 65 70 6c 61 79 20 77 69 6e 64 6f 77 2c 20 | fault).``0``:.No.replay.window,. |
121ea0 | 73 74 72 69 63 74 20 63 68 65 63 6b 00 60 60 31 2d 34 32 39 34 39 36 37 32 39 35 60 60 3a 20 4e | strict.check.``1-4294967295``:.N |
121ec0 | 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 74 68 61 74 20 63 6f 75 6c 64 20 62 65 20 6d | umber.of.packets.that.could.be.m |
121ee0 | 69 73 6f 72 64 65 72 65 64 00 60 60 31 2e 70 6f 6f 6c 2e 6e 74 70 2e 6f 72 67 60 60 00 60 60 31 | isordered.``1.pool.ntp.org``.``1 |
121f00 | 31 35 32 30 30 60 60 20 2d 20 31 31 35 2c 32 30 30 20 62 70 73 20 28 64 65 66 61 75 6c 74 20 66 | 15200``.-.115,200.bps.(default.f |
121f20 | 6f 72 20 73 65 72 69 61 6c 20 63 6f 6e 73 6f 6c 65 29 00 60 60 31 32 30 30 60 60 20 2d 20 31 32 | or.serial.console).``1200``.-.12 |
121f40 | 30 30 20 62 70 73 00 60 60 31 39 32 2e 31 36 38 2e 32 2e 32 35 34 60 60 20 49 50 20 61 64 64 72 | 00.bps.``192.168.2.254``.IP.addr |
121f60 | 65 65 73 73 20 6f 6e 20 56 79 4f 53 20 65 74 68 32 20 66 72 6f 6d 20 49 53 50 32 00 60 60 31 39 | eess.on.VyOS.eth2.from.ISP2.``19 |
121f80 | 32 30 30 60 60 20 2d 20 31 39 2c 32 30 30 20 62 70 73 00 60 60 31 60 60 20 2d 20 38 30 20 4d 48 | 200``.-.19,200.bps.``1``.-.80.MH |
121fa0 | 7a 20 63 68 61 6e 6e 65 6c 20 77 69 64 74 68 00 60 60 32 2e 70 6f 6f 6c 2e 6e 74 70 2e 6f 72 67 | z.channel.width.``2.pool.ntp.org |
121fc0 | 60 60 00 60 60 32 30 33 2e 30 2e 31 31 33 2e 32 35 34 60 60 20 49 50 20 61 64 64 72 65 65 73 73 | ``.``203.0.113.254``.IP.addreess |
121fe0 | 20 6f 6e 20 56 79 4f 53 20 65 74 68 31 20 66 72 6f 6d 20 49 53 50 31 00 60 60 32 34 30 30 60 60 | .on.VyOS.eth1.from.ISP1.``2400`` |
122000 | 20 2d 20 32 34 30 30 20 62 70 73 00 60 60 32 60 60 20 2d 20 31 36 30 20 4d 48 7a 20 63 68 61 6e | .-.2400.bps.``2``.-.160.MHz.chan |
122020 | 6e 65 6c 20 77 69 64 74 68 00 60 60 33 38 34 30 30 60 60 20 2d 20 33 38 2c 34 30 30 20 62 70 73 | nel.width.``38400``.-.38,400.bps |
122040 | 20 28 64 65 66 61 75 6c 74 20 66 6f 72 20 58 65 6e 20 63 6f 6e 73 6f 6c 65 29 00 60 60 33 60 60 | .(default.for.Xen.console).``3`` |
122060 | 20 2d 20 38 30 2b 38 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 20 77 69 64 74 68 00 60 60 34 38 30 | .-.80+80.MHz.channel.width.``480 |
122080 | 30 60 60 20 2d 20 34 38 30 30 20 62 70 73 00 60 60 35 37 36 30 30 60 60 20 2d 20 35 37 2c 36 30 | 0``.-.4800.bps.``57600``.-.57,60 |
1220a0 | 30 20 62 70 73 00 60 60 36 34 3a 66 66 39 62 3a 3a 2f 39 36 60 60 20 69 73 20 74 68 65 20 77 65 | 0.bps.``64:ff9b::/96``.is.the.we |
1220c0 | 6c 6c 2d 6b 6e 6f 77 6e 20 70 72 65 66 69 78 20 66 6f 72 20 49 50 76 34 2d 65 6d 62 65 64 64 65 | ll-known.prefix.for.IPv4-embedde |
1220e0 | 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 2e 20 54 68 65 20 70 72 65 66 69 78 20 69 73 20 | d.IPv6.addresses..The.prefix.is. |
122100 | 75 73 65 64 20 74 6f 20 72 65 70 72 65 73 65 6e 74 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 | used.to.represent.IPv4.addresses |
122120 | 20 69 6e 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 20 66 6f 72 6d 61 74 2e 20 54 68 65 20 | .in.an.IPv6.address.format..The. |
122140 | 49 50 76 34 20 61 64 64 72 65 73 73 20 69 73 20 65 6e 63 6f 64 65 64 20 69 6e 20 74 68 65 20 6c | IPv4.address.is.encoded.in.the.l |
122160 | 6f 77 2d 6f 72 64 65 72 20 33 32 20 62 69 74 73 20 6f 66 20 74 68 65 20 49 50 76 36 20 61 64 64 | ow-order.32.bits.of.the.IPv6.add |
122180 | 72 65 73 73 2e 20 54 68 65 20 68 69 67 68 2d 6f 72 64 65 72 20 33 32 20 62 69 74 73 20 61 72 65 | ress..The.high-order.32.bits.are |
1221a0 | 20 73 65 74 20 74 6f 20 74 68 65 20 77 65 6c 6c 2d 6b 6e 6f 77 6e 20 70 72 65 66 69 78 20 36 34 | .set.to.the.well-known.prefix.64 |
1221c0 | 3a 66 66 39 62 3a 3a 2f 39 36 2e 00 60 60 38 30 32 2e 33 61 64 60 60 20 2d 20 49 45 45 45 20 38 | :ff9b::/96..``802.3ad``.-.IEEE.8 |
1221e0 | 30 32 2e 33 61 64 20 44 79 6e 61 6d 69 63 20 6c 69 6e 6b 20 61 67 67 72 65 67 61 74 69 6f 6e 2e | 02.3ad.Dynamic.link.aggregation. |
122200 | 20 43 72 65 61 74 65 73 20 61 67 67 72 65 67 61 74 69 6f 6e 20 67 72 6f 75 70 73 20 74 68 61 74 | .Creates.aggregation.groups.that |
122220 | 20 73 68 61 72 65 20 74 68 65 20 73 61 6d 65 20 73 70 65 65 64 20 61 6e 64 20 64 75 70 6c 65 78 | .share.the.same.speed.and.duplex |
122240 | 20 73 65 74 74 69 6e 67 73 2e 20 55 74 69 6c 69 7a 65 73 20 61 6c 6c 20 73 6c 61 76 65 73 20 69 | .settings..Utilizes.all.slaves.i |
122260 | 6e 20 74 68 65 20 61 63 74 69 76 65 20 61 67 67 72 65 67 61 74 6f 72 20 61 63 63 6f 72 64 69 6e | n.the.active.aggregator.accordin |
122280 | 67 20 74 6f 20 74 68 65 20 38 30 32 2e 33 61 64 20 73 70 65 63 69 66 69 63 61 74 69 6f 6e 2e 00 | g.to.the.802.3ad.specification.. |
1222a0 | 60 60 39 36 30 30 60 60 20 2d 20 39 36 30 30 20 62 70 73 00 60 60 3c 20 64 68 2d 67 72 6f 75 70 | ``9600``.-.9600.bps.``<.dh-group |
1222c0 | 20 3e 60 60 20 64 65 66 69 6e 65 73 20 61 20 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 67 72 | .>``.defines.a.Diffie-Hellman.gr |
1222e0 | 6f 75 70 20 66 6f 72 20 50 46 53 3b 00 60 60 4b 6e 6f 77 6e 20 6c 69 6d 69 74 61 74 69 6f 6e 73 | oup.for.PFS;.``Known.limitations |
122300 | 3a 60 60 00 60 60 53 74 61 74 65 66 75 6c 2d 49 50 76 36 2d 41 64 64 72 65 73 73 2d 50 6f 6f 6c | :``.``Stateful-IPv6-Address-Pool |
122320 | 60 60 20 61 6e 64 20 60 60 44 65 6c 65 67 61 74 65 64 2d 49 50 76 36 2d 50 72 65 66 69 78 2d 50 | ``.and.``Delegated-IPv6-Prefix-P |
122340 | 6f 6f 6c 60 60 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 52 46 43 36 39 31 31 2e 20 49 66 | ool``.are.defined.in.RFC6911..If |
122360 | 20 74 68 65 79 20 61 72 65 20 6e 6f 74 20 64 65 66 69 6e 65 64 20 69 6e 20 79 6f 75 72 20 52 41 | .they.are.not.defined.in.your.RA |
122380 | 44 49 55 53 20 73 65 72 76 65 72 2c 20 61 64 64 20 6e 65 77 20 64 69 63 74 69 6f 6e 61 72 79 5f | DIUS.server,.add.new.dictionary_ |
1223a0 | 2e 00 60 60 57 4c 42 5f 49 4e 54 45 52 46 41 43 45 5f 4e 41 4d 45 3d 5b 69 6e 74 65 72 66 61 63 | ..``WLB_INTERFACE_NAME=[interfac |
1223c0 | 65 6e 61 6d 65 5d 60 60 3a 20 49 6e 74 65 72 66 61 63 65 20 74 6f 20 62 65 20 6d 6f 6e 69 74 6f | ename]``:.Interface.to.be.monito |
1223e0 | 72 65 64 00 60 60 57 4c 42 5f 49 4e 54 45 52 46 41 43 45 5f 53 54 41 54 45 3d 5b 41 43 54 49 56 | red.``WLB_INTERFACE_STATE=[ACTIV |
122400 | 45 7c 46 41 49 4c 45 44 5d 60 60 3a 20 49 6e 74 65 72 66 61 63 65 20 73 74 61 74 65 00 60 60 61 | E|FAILED]``:.Interface.state.``a |
122420 | 60 60 20 2d 20 38 30 32 2e 31 31 61 20 2d 20 35 34 20 4d 62 69 74 73 2f 73 65 63 00 60 60 61 63 | ``.-.802.11a.-.54.Mbits/sec.``ac |
122440 | 60 60 20 2d 20 38 30 32 2e 31 31 61 63 20 2d 20 31 33 30 30 20 4d 62 69 74 73 2f 73 65 63 00 60 | ``.-.802.11ac.-.1300.Mbits/sec.` |
122460 | 60 61 63 63 65 70 74 2d 6f 77 6e 2d 6e 65 78 74 68 6f 70 60 60 20 2d 20 20 20 20 20 20 20 20 20 | `accept-own-nexthop``.-......... |
122480 | 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 61 | ..Well-known.communities.value.a |
1224a0 | 63 63 65 70 74 2d 6f 77 6e 2d 6e 65 78 74 68 6f 70 20 30 78 46 46 46 46 30 30 30 38 00 60 60 61 | ccept-own-nexthop.0xFFFF0008.``a |
1224c0 | 63 63 65 70 74 2d 6f 77 6e 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | ccept-own``.-................... |
1224e0 | 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 41 43 43 | Well-known.communities.value.ACC |
122500 | 45 50 54 5f 4f 57 4e 20 30 78 46 46 46 46 30 30 30 31 00 60 60 61 63 63 65 70 74 60 60 3a 20 61 | EPT_OWN.0xFFFF0001.``accept``:.a |
122520 | 63 63 65 70 74 20 74 68 65 20 70 61 63 6b 65 74 2e 00 60 60 61 63 63 65 73 73 2d 70 6f 69 6e 74 | ccept.the.packet..``access-point |
122540 | 60 60 20 2d 20 41 63 63 65 73 73 2d 70 6f 69 6e 74 20 66 6f 72 77 61 72 64 73 20 70 61 63 6b 65 | ``.-.Access-point.forwards.packe |
122560 | 74 73 20 62 65 74 77 65 65 6e 20 6f 74 68 65 72 20 6e 6f 64 65 73 00 60 60 61 63 74 69 6f 6e 60 | ts.between.other.nodes.``action` |
122580 | 60 20 6b 65 65 70 2d 61 6c 69 76 65 20 66 61 69 6c 75 72 65 20 61 63 74 69 6f 6e 3a 00 60 60 61 | `.keep-alive.failure.action:.``a |
1225a0 | 63 74 69 76 65 2d 62 61 63 6b 75 70 60 60 20 2d 20 41 63 74 69 76 65 2d 62 61 63 6b 75 70 20 70 | ctive-backup``.-.Active-backup.p |
1225c0 | 6f 6c 69 63 79 3a 20 4f 6e 6c 79 20 6f 6e 65 20 73 6c 61 76 65 20 69 6e 20 74 68 65 20 62 6f 6e | olicy:.Only.one.slave.in.the.bon |
1225e0 | 64 20 69 73 20 61 63 74 69 76 65 2e 20 41 20 64 69 66 66 65 72 65 6e 74 20 73 6c 61 76 65 20 62 | d.is.active..A.different.slave.b |
122600 | 65 63 6f 6d 65 73 20 61 63 74 69 76 65 20 69 66 2c 20 61 6e 64 20 6f 6e 6c 79 20 69 66 2c 20 74 | ecomes.active.if,.and.only.if,.t |
122620 | 68 65 20 61 63 74 69 76 65 20 73 6c 61 76 65 20 66 61 69 6c 73 2e 20 54 68 65 20 62 6f 6e 64 27 | he.active.slave.fails..The.bond' |
122640 | 73 20 4d 41 43 20 61 64 64 72 65 73 73 20 69 73 20 65 78 74 65 72 6e 61 6c 6c 79 20 76 69 73 69 | s.MAC.address.is.externally.visi |
122660 | 62 6c 65 20 6f 6e 20 6f 6e 6c 79 20 6f 6e 65 20 70 6f 72 74 20 28 6e 65 74 77 6f 72 6b 20 61 64 | ble.on.only.one.port.(network.ad |
122680 | 61 70 74 65 72 29 20 74 6f 20 61 76 6f 69 64 20 63 6f 6e 66 75 73 69 6e 67 20 74 68 65 20 73 77 | apter).to.avoid.confusing.the.sw |
1226a0 | 69 74 63 68 2e 00 60 60 61 64 61 70 74 69 76 65 2d 6c 6f 61 64 2d 62 61 6c 61 6e 63 65 60 60 20 | itch..``adaptive-load-balance``. |
1226c0 | 2d 20 41 64 61 70 74 69 76 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 3a 20 69 6e 63 6c 75 | -.Adaptive.load.balancing:.inclu |
1226e0 | 64 65 73 20 74 72 61 6e 73 6d 69 74 2d 6c 6f 61 64 2d 62 61 6c 61 6e 63 65 20 70 6c 75 73 20 72 | des.transmit-load-balance.plus.r |
122700 | 65 63 65 69 76 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 66 6f 72 20 49 50 56 34 20 74 | eceive.load.balancing.for.IPV4.t |
122720 | 72 61 66 66 69 63 2c 20 61 6e 64 20 64 6f 65 73 20 6e 6f 74 20 72 65 71 75 69 72 65 20 61 6e 79 | raffic,.and.does.not.require.any |
122740 | 20 73 70 65 63 69 61 6c 20 73 77 69 74 63 68 20 73 75 70 70 6f 72 74 2e 20 54 68 65 20 72 65 63 | .special.switch.support..The.rec |
122760 | 65 69 76 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 69 73 20 61 63 68 69 65 76 65 64 20 | eive.load.balancing.is.achieved. |
122780 | 62 79 20 41 52 50 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2e 20 54 68 65 20 62 6f 6e 64 69 6e 67 20 | by.ARP.negotiation..The.bonding. |
1227a0 | 64 72 69 76 65 72 20 69 6e 74 65 72 63 65 70 74 73 20 74 68 65 20 41 52 50 20 52 65 70 6c 69 65 | driver.intercepts.the.ARP.Replie |
1227c0 | 73 20 73 65 6e 74 20 62 79 20 74 68 65 20 6c 6f 63 61 6c 20 73 79 73 74 65 6d 20 6f 6e 20 74 68 | s.sent.by.the.local.system.on.th |
1227e0 | 65 69 72 20 77 61 79 20 6f 75 74 20 61 6e 64 20 6f 76 65 72 77 72 69 74 65 73 20 74 68 65 20 73 | eir.way.out.and.overwrites.the.s |
122800 | 6f 75 72 63 65 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 73 73 20 77 69 74 68 20 74 68 65 20 | ource.hardware.address.with.the. |
122820 | 75 6e 69 71 75 65 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 73 73 20 6f 66 20 6f 6e 65 20 6f | unique.hardware.address.of.one.o |
122840 | 66 20 74 68 65 20 73 6c 61 76 65 73 20 69 6e 20 74 68 65 20 62 6f 6e 64 20 73 75 63 68 20 74 68 | f.the.slaves.in.the.bond.such.th |
122860 | 61 74 20 64 69 66 66 65 72 65 6e 74 20 70 65 65 72 73 20 75 73 65 20 64 69 66 66 65 72 65 6e 74 | at.different.peers.use.different |
122880 | 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 73 73 65 73 20 66 6f 72 20 74 68 65 20 73 65 72 76 | .hardware.addresses.for.the.serv |
1228a0 | 65 72 2e 00 60 60 61 67 67 72 65 73 73 69 76 65 60 60 20 75 73 65 20 41 67 67 72 65 73 73 69 76 | er..``aggressive``.use.Aggressiv |
1228c0 | 65 20 6d 6f 64 65 20 66 6f 72 20 4b 65 79 20 45 78 63 68 61 6e 67 65 73 20 69 6e 20 74 68 65 20 | e.mode.for.Key.Exchanges.in.the. |
1228e0 | 49 4b 45 76 31 20 70 72 6f 74 6f 63 6f 6c 20 61 67 67 72 65 73 73 69 76 65 20 6d 6f 64 65 20 69 | IKEv1.protocol.aggressive.mode.i |
122900 | 73 20 6d 75 63 68 20 6d 6f 72 65 20 69 6e 73 65 63 75 72 65 20 63 6f 6d 70 61 72 65 64 20 74 6f | s.much.more.insecure.compared.to |
122920 | 20 4d 61 69 6e 20 6d 6f 64 65 3b 00 60 60 61 6c 6c 2d 61 76 61 69 6c 61 62 6c 65 60 60 20 61 6c | .Main.mode;.``all-available``.al |
122940 | 6c 20 63 68 65 63 6b 69 6e 67 20 74 61 72 67 65 74 20 61 64 64 72 65 73 73 65 73 20 6d 75 73 74 | l.checking.target.addresses.must |
122960 | 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 70 61 73 73 20 74 68 69 73 20 63 68 65 63 6b | .be.available.to.pass.this.check |
122980 | 00 60 60 61 6e 79 2d 61 76 61 69 6c 61 62 6c 65 60 60 20 61 6e 79 20 6f 66 20 74 68 65 20 63 68 | .``any-available``.any.of.the.ch |
1229a0 | 65 63 6b 69 6e 67 20 74 61 72 67 65 74 20 61 64 64 72 65 73 73 65 73 20 6d 75 73 74 20 62 65 20 | ecking.target.addresses.must.be. |
1229c0 | 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 70 61 73 73 20 74 68 69 73 20 63 68 65 63 6b 00 60 60 61 | available.to.pass.this.check.``a |
1229e0 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6c 6f 63 61 6c 2d 69 64 2f 72 65 6d 6f 74 65 2d 69 64 | uthentication.local-id/remote-id |
122a00 | 60 60 20 2d 20 49 4b 45 20 69 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 20 69 73 20 75 73 65 64 20 | ``.-.IKE.identification.is.used. |
122a20 | 66 6f 72 20 76 61 6c 69 64 61 74 69 6f 6e 20 6f 66 20 56 50 4e 20 70 65 65 72 20 64 65 76 69 63 | for.validation.of.VPN.peer.devic |
122a40 | 65 73 20 64 75 72 69 6e 67 20 49 4b 45 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2e 20 49 66 20 79 6f | es.during.IKE.negotiation..If.yo |
122a60 | 75 20 64 6f 20 6e 6f 74 20 63 6f 6e 66 69 67 75 72 65 20 6c 6f 63 61 6c 2f 72 65 6d 6f 74 65 2d | u.do.not.configure.local/remote- |
122a80 | 69 64 65 6e 74 69 74 79 2c 20 74 68 65 20 64 65 76 69 63 65 20 75 73 65 73 20 74 68 65 20 49 50 | identity,.the.device.uses.the.IP |
122aa0 | 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 20 74 68 61 74 20 63 6f 72 72 65 73 70 6f | v4.or.IPv6.address.that.correspo |
122ac0 | 6e 64 73 20 74 6f 20 74 68 65 20 6c 6f 63 61 6c 2f 72 65 6d 6f 74 65 20 70 65 65 72 20 62 79 20 | nds.to.the.local/remote.peer.by. |
122ae0 | 64 65 66 61 75 6c 74 2e 20 49 6e 20 63 65 72 74 61 69 6e 20 6e 65 74 77 6f 72 6b 20 73 65 74 75 | default..In.certain.network.setu |
122b00 | 70 73 20 28 6c 69 6b 65 20 69 70 73 65 63 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 64 79 | ps.(like.ipsec.interface.with.dy |
122b20 | 6e 61 6d 69 63 20 61 64 64 72 65 73 73 2c 20 6f 72 20 62 65 68 69 6e 64 20 74 68 65 20 4e 41 54 | namic.address,.or.behind.the.NAT |
122b40 | 20 29 2c 20 74 68 65 20 49 4b 45 20 49 44 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 74 68 65 | .),.the.IKE.ID.received.from.the |
122b60 | 20 70 65 65 72 20 64 6f 65 73 20 6e 6f 74 20 6d 61 74 63 68 20 74 68 65 20 49 4b 45 20 67 61 74 | .peer.does.not.match.the.IKE.gat |
122b80 | 65 77 61 79 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 64 65 76 69 63 65 2e 20 54 | eway.configured.on.the.device..T |
122ba0 | 68 69 73 20 63 61 6e 20 6c 65 61 64 20 74 6f 20 61 20 50 68 61 73 65 20 31 20 76 61 6c 69 64 61 | his.can.lead.to.a.Phase.1.valida |
122bc0 | 74 69 6f 6e 20 66 61 69 6c 75 72 65 2e 20 53 6f 2c 20 6d 61 6b 65 20 73 75 72 65 20 74 6f 20 63 | tion.failure..So,.make.sure.to.c |
122be0 | 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6c 6f 63 61 6c 2f 72 65 6d 6f 74 65 20 69 64 20 65 78 70 | onfigure.the.local/remote.id.exp |
122c00 | 6c 69 63 69 74 6c 79 20 61 6e 64 20 65 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 20 49 4b 45 20 | licitly.and.ensure.that.the.IKE. |
122c20 | 49 44 20 69 73 20 74 68 65 20 73 61 6d 65 20 61 73 20 74 68 65 20 72 65 6d 6f 74 65 2d 69 64 65 | ID.is.the.same.as.the.remote-ide |
122c40 | 6e 74 69 74 79 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 70 65 65 72 20 64 65 76 | ntity.configured.on.the.peer.dev |
122c60 | 69 63 65 2e 00 60 60 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 60 60 20 2d 20 63 6f 6e 66 69 67 | ice..``authentication``.-.config |
122c80 | 75 72 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 56 79 4f 53 20 | ure.authentication.between.VyOS. |
122ca0 | 61 6e 64 20 61 20 72 65 6d 6f 74 65 20 70 65 65 72 2e 20 49 66 20 70 72 65 2d 73 68 61 72 65 64 | and.a.remote.peer..If.pre-shared |
122cc0 | 2d 73 65 63 72 65 74 20 6d 6f 64 65 20 69 73 20 75 73 65 64 2c 20 74 68 65 20 73 65 63 72 65 74 | -secret.mode.is.used,.the.secret |
122ce0 | 20 6b 65 79 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 60 60 73 65 74 20 76 70 | .key.must.be.defined.in.``set.vp |
122d00 | 6e 20 69 70 73 65 63 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 60 60 20 61 6e 64 20 73 75 62 | n.ipsec.authentication``.and.sub |
122d20 | 6f 70 74 69 6f 6e 73 3a 00 60 60 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 60 60 20 2d 20 63 6f | options:.``authentication``.-.co |
122d40 | 6e 66 69 67 75 72 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 56 | nfigure.authentication.between.V |
122d60 | 79 4f 53 20 61 6e 64 20 61 20 72 65 6d 6f 74 65 20 70 65 65 72 2e 20 53 75 62 6f 70 74 69 6f 6e | yOS.and.a.remote.peer..Suboption |
122d80 | 73 3a 00 60 60 62 60 60 20 2d 20 38 30 32 2e 31 31 62 20 2d 20 31 31 20 4d 62 69 74 73 2f 73 65 | s:.``b``.-.802.11b.-.11.Mbits/se |
122da0 | 63 00 60 60 62 61 62 65 6c 60 60 20 2d 20 42 61 62 65 6c 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 | c.``babel``.-.Babel.routing.prot |
122dc0 | 6f 63 6f 6c 20 28 42 61 62 65 6c 29 00 60 60 62 65 67 69 6e 60 60 20 4d 61 74 63 68 65 73 20 74 | ocol.(Babel).``begin``.Matches.t |
122de0 | 68 65 20 62 65 67 69 6e 6e 69 6e 67 20 6f 66 20 74 68 65 20 55 52 4c 20 70 61 74 68 00 60 60 62 | he.beginning.of.the.URL.path.``b |
122e00 | 67 70 60 60 20 2d 20 42 6f 72 64 65 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 20 28 | gp``.-.Border.Gateway.Protocol.( |
122e20 | 42 47 50 29 00 60 60 62 69 6e 64 60 60 20 2d 20 73 65 6c 65 63 74 20 61 20 56 54 49 20 69 6e 74 | BGP).``bind``.-.select.a.VTI.int |
122e40 | 65 72 66 61 63 65 20 74 6f 20 62 69 6e 64 20 74 6f 20 74 68 69 73 20 70 65 65 72 3b 00 60 60 62 | erface.to.bind.to.this.peer;.``b |
122e60 | 6c 61 63 6b 68 6f 6c 65 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | lackhole``.-.................... |
122e80 | 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 42 4c 41 | Well-known.communities.value.BLA |
122ea0 | 43 4b 48 4f 4c 45 20 30 78 46 46 46 46 30 32 39 41 00 60 60 62 72 6f 61 64 63 61 73 74 60 60 20 | CKHOLE.0xFFFF029A.``broadcast``. |
122ec0 | 2d 20 42 72 6f 61 64 63 61 73 74 20 70 6f 6c 69 63 79 3a 20 74 72 61 6e 73 6d 69 74 73 20 65 76 | -.Broadcast.policy:.transmits.ev |
122ee0 | 65 72 79 74 68 69 6e 67 20 6f 6e 20 61 6c 6c 20 73 6c 61 76 65 20 69 6e 74 65 72 66 61 63 65 73 | erything.on.all.slave.interfaces |
122f00 | 2e 00 60 60 62 75 72 73 74 60 60 3a 20 4e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 61 | ..``burst``:.Number.of.packets.a |
122f20 | 6c 6c 6f 77 65 64 20 74 6f 20 6f 76 65 72 73 68 6f 6f 74 20 74 68 65 20 6c 69 6d 69 74 20 77 69 | llowed.to.overshoot.the.limit.wi |
122f40 | 74 68 69 6e 20 60 60 70 65 72 69 6f 64 60 60 2e 20 44 65 66 61 75 6c 74 20 35 2e 00 60 60 63 61 | thin.``period``..Default.5..``ca |
122f60 | 2d 63 65 72 74 2d 66 69 6c 65 60 60 20 2d 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 66 69 | -cert-file``.-.CA.certificate.fi |
122f80 | 6c 65 2e 20 55 73 69 6e 67 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 72 65 6d | le..Using.for.authenticating.rem |
122fa0 | 6f 74 65 20 70 65 65 72 3b 00 60 60 63 61 2d 63 65 72 74 69 66 69 63 61 74 65 60 60 20 2d 20 43 | ote.peer;.``ca-certificate``.-.C |
122fc0 | 41 20 63 65 72 74 69 66 69 63 61 74 65 20 69 6e 20 50 4b 49 20 63 6f 6e 66 69 67 75 72 61 74 69 | A.certificate.in.PKI.configurati |
122fe0 | 6f 6e 2e 20 55 73 69 6e 67 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 72 65 6d | on..Using.for.authenticating.rem |
123000 | 6f 74 65 20 70 65 65 72 3b 00 60 60 63 64 70 60 60 20 2d 20 4c 69 73 74 65 6e 20 66 6f 72 20 43 | ote.peer;.``cdp``.-.Listen.for.C |
123020 | 44 50 20 66 6f 72 20 43 69 73 63 6f 20 72 6f 75 74 65 72 73 2f 73 77 69 74 63 68 65 73 00 60 60 | DP.for.Cisco.routers/switches.`` |
123040 | 63 65 72 74 2d 66 69 6c 65 60 60 20 2d 20 63 65 72 74 69 66 69 63 61 74 65 20 66 69 6c 65 2c 20 | cert-file``.-.certificate.file,. |
123060 | 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 | which.will.be.used.for.authentic |
123080 | 61 74 69 6e 67 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 6f 6e 20 72 65 6d 6f 74 65 20 70 65 65 | ating.local.router.on.remote.pee |
1230a0 | 72 3b 00 60 60 63 65 72 74 69 66 69 63 61 74 65 60 60 20 2d 20 63 65 72 74 69 66 69 63 61 74 65 | r;.``certificate``.-.certificate |
1230c0 | 20 66 69 6c 65 20 69 6e 20 50 4b 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 77 68 69 63 | .file.in.PKI.configuration,.whic |
1230e0 | 68 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e | h.will.be.used.for.authenticatin |
123100 | 67 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 6f 6e 20 72 65 6d 6f 74 65 20 70 65 65 72 3b 00 60 | g.local.router.on.remote.peer;.` |
123120 | 60 63 6c 65 61 72 60 60 20 63 6c 6f 73 65 73 20 74 68 65 20 43 48 49 4c 44 5f 53 41 20 61 6e 64 | `clear``.closes.the.CHILD_SA.and |
123140 | 20 64 6f 65 73 20 6e 6f 74 20 74 61 6b 65 20 66 75 72 74 68 65 72 20 61 63 74 69 6f 6e 20 28 64 | .does.not.take.further.action.(d |
123160 | 65 66 61 75 6c 74 29 3b 00 60 60 63 6c 65 61 72 60 60 20 73 65 74 20 61 63 74 69 6f 6e 20 74 6f | efault);.``clear``.set.action.to |
123180 | 20 63 6c 65 61 72 3b 00 60 60 63 6c 6f 73 65 2d 61 63 74 69 6f 6e 20 3d 20 6e 6f 6e 65 20 7c 20 | .clear;.``close-action.=.none.|. |
1231a0 | 63 6c 65 61 72 20 7c 20 68 6f 6c 64 20 7c 20 72 65 73 74 61 72 74 60 60 20 2d 20 64 65 66 69 6e | clear.|.hold.|.restart``.-.defin |
1231c0 | 65 73 20 74 68 65 20 61 63 74 69 6f 6e 20 74 6f 20 74 61 6b 65 20 69 66 20 74 68 65 20 72 65 6d | es.the.action.to.take.if.the.rem |
1231e0 | 6f 74 65 20 70 65 65 72 20 75 6e 65 78 70 65 63 74 65 64 6c 79 20 63 6c 6f 73 65 73 20 61 20 43 | ote.peer.unexpectedly.closes.a.C |
123200 | 48 49 4c 44 5f 53 41 20 28 73 65 65 20 61 62 6f 76 65 20 66 6f 72 20 6d 65 61 6e 69 6e 67 20 6f | HILD_SA.(see.above.for.meaning.o |
123220 | 66 20 76 61 6c 75 65 73 29 2e 20 41 20 63 6c 6f 73 65 61 63 74 69 6f 6e 20 73 68 6f 75 6c 64 20 | f.values)..A.closeaction.should. |
123240 | 6e 6f 74 20 62 65 20 75 73 65 64 20 69 66 20 74 68 65 20 70 65 65 72 20 75 73 65 73 20 72 65 61 | not.be.used.if.the.peer.uses.rea |
123260 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 72 20 75 6e 69 71 75 65 69 64 73 2e 00 60 60 63 6c | uthentication.or.uniqueids..``cl |
123280 | 6f 73 65 2d 61 63 74 69 6f 6e 20 3d 20 6e 6f 6e 65 20 7c 20 63 6c 65 61 72 20 7c 20 74 72 61 70 | ose-action.=.none.|.clear.|.trap |
1232a0 | 20 7c 20 73 74 61 72 74 60 60 20 2d 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 74 69 6f 6e 20 | .|.start``.-.defines.the.action. |
1232c0 | 74 6f 20 74 61 6b 65 20 69 66 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 75 6e 65 78 70 | to.take.if.the.remote.peer.unexp |
1232e0 | 65 63 74 65 64 6c 79 20 63 6c 6f 73 65 73 20 61 20 43 48 49 4c 44 5f 53 41 20 28 73 65 65 20 61 | ectedly.closes.a.CHILD_SA.(see.a |
123300 | 62 6f 76 65 20 66 6f 72 20 6d 65 61 6e 69 6e 67 20 6f 66 20 76 61 6c 75 65 73 29 2e 20 41 20 63 | bove.for.meaning.of.values)..A.c |
123320 | 6c 6f 73 65 61 63 74 69 6f 6e 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 75 73 65 64 20 69 66 | loseaction.should.not.be.used.if |
123340 | 20 74 68 65 20 70 65 65 72 20 75 73 65 73 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 | .the.peer.uses.reauthentication. |
123360 | 6f 72 20 75 6e 69 71 75 65 69 64 73 2e 00 60 60 63 6c 6f 73 65 2d 61 63 74 69 6f 6e 60 60 20 64 | or.uniqueids..``close-action``.d |
123380 | 65 66 69 6e 65 73 20 74 68 65 20 61 63 74 69 6f 6e 20 74 6f 20 74 61 6b 65 20 69 66 20 74 68 65 | efines.the.action.to.take.if.the |
1233a0 | 20 72 65 6d 6f 74 65 20 70 65 65 72 20 75 6e 65 78 70 65 63 74 65 64 6c 79 20 63 6c 6f 73 65 73 | .remote.peer.unexpectedly.closes |
1233c0 | 20 61 20 43 48 49 4c 44 5f 53 41 3a 00 60 60 63 6f 6d 70 72 65 73 73 69 6f 6e 60 60 20 20 45 6e | .a.CHILD_SA:.``compression``..En |
1233e0 | 61 62 6c 65 73 20 74 68 65 20 20 49 50 43 6f 6d 70 28 49 50 20 50 61 79 6c 6f 61 64 20 43 6f 6d | ables.the..IPComp(IP.Payload.Com |
123400 | 70 72 65 73 73 69 6f 6e 29 20 70 72 6f 74 6f 63 6f 6c 20 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 | pression).protocol.which.allows. |
123420 | 63 6f 6d 70 72 65 73 73 69 6e 67 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 6f 66 20 49 50 20 70 61 | compressing.the.content.of.IP.pa |
123440 | 63 6b 65 74 73 2e 00 60 60 63 6f 6d 70 72 65 73 73 69 6f 6e 60 60 20 77 68 65 74 68 65 72 20 49 | ckets..``compression``.whether.I |
123460 | 50 43 6f 6d 70 20 63 6f 6d 70 72 65 73 73 69 6f 6e 20 6f 66 20 63 6f 6e 74 65 6e 74 20 69 73 20 | PComp.compression.of.content.is. |
123480 | 70 72 6f 70 6f 73 65 64 20 6f 6e 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 00 60 60 63 6f | proposed.on.the.connection:.``co |
1234a0 | 6e 6e 65 63 74 65 64 60 60 20 2d 20 43 6f 6e 6e 65 63 74 65 64 20 72 6f 75 74 65 73 20 28 64 69 | nnected``.-.Connected.routes.(di |
1234c0 | 72 65 63 74 6c 79 20 61 74 74 61 63 68 65 64 20 73 75 62 6e 65 74 20 6f 72 20 68 6f 73 74 29 00 | rectly.attached.subnet.or.host). |
1234e0 | 60 60 63 6f 6e 6e 65 63 74 69 6f 6e 2d 74 79 70 65 60 60 20 2d 20 68 6f 77 20 74 6f 20 68 61 6e | ``connection-type``.-.how.to.han |
123500 | 64 6c 65 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 70 72 6f 63 65 73 73 2e 20 50 6f 73 | dle.this.connection.process..Pos |
123520 | 73 69 62 6c 65 20 76 61 72 69 61 6e 74 73 3a 00 60 60 63 6f 6e 74 69 6e 75 65 60 60 3a 20 63 6f | sible.variants:.``continue``:.co |
123540 | 6e 74 69 6e 75 65 20 70 61 72 73 69 6e 67 20 6e 65 78 74 20 72 75 6c 65 2e 00 60 60 63 72 6c 2d | ntinue.parsing.next.rule..``crl- |
123560 | 66 69 6c 65 60 60 20 2d 20 66 69 6c 65 20 77 69 74 68 20 74 68 65 20 43 65 72 74 69 66 69 63 61 | file``.-.file.with.the.Certifica |
123580 | 74 65 20 52 65 76 6f 63 61 74 69 6f 6e 20 4c 69 73 74 2e 20 55 73 69 6e 67 20 74 6f 20 63 68 65 | te.Revocation.List..Using.to.che |
1235a0 | 63 6b 20 69 66 20 61 20 63 65 72 74 69 66 69 63 61 74 65 20 66 6f 72 20 74 68 65 20 72 65 6d 6f | ck.if.a.certificate.for.the.remo |
1235c0 | 74 65 20 70 65 65 72 20 69 73 20 76 61 6c 69 64 20 6f 72 20 72 65 76 6f 6b 65 64 3b 00 60 60 64 | te.peer.is.valid.or.revoked;.``d |
1235e0 | 60 60 20 2d 20 45 78 65 63 75 74 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 64 61 79 73 00 | ``.-.Execution.interval.in.days. |
123600 | 60 60 64 65 61 64 2d 70 65 65 72 2d 64 65 74 65 63 74 69 6f 6e 20 61 63 74 69 6f 6e 20 3d 20 63 | ``dead-peer-detection.action.=.c |
123620 | 6c 65 61 72 20 7c 20 68 6f 6c 64 20 7c 20 72 65 73 74 61 72 74 60 60 20 2d 20 52 5f 55 5f 54 48 | lear.|.hold.|.restart``.-.R_U_TH |
123640 | 45 52 45 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 28 49 4b 45 76 31 29 | ERE.notification.messages(IKEv1) |
123660 | 20 6f 72 20 65 6d 70 74 79 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 41 4c 20 6d 65 73 73 61 67 65 73 | .or.empty.INFORMATIONAL.messages |
123680 | 20 28 49 4b 45 76 32 29 20 61 72 65 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 73 65 6e 74 20 69 | .(IKEv2).are.periodically.sent.i |
1236a0 | 6e 20 6f 72 64 65 72 20 74 6f 20 63 68 65 63 6b 20 74 68 65 20 6c 69 76 65 6c 69 6e 65 73 73 20 | n.order.to.check.the.liveliness. |
1236c0 | 6f 66 20 74 68 65 20 49 50 73 65 63 20 70 65 65 72 2e 20 54 68 65 20 76 61 6c 75 65 73 20 63 6c | of.the.IPsec.peer..The.values.cl |
1236e0 | 65 61 72 2c 20 68 6f 6c 64 2c 20 61 6e 64 20 72 65 73 74 61 72 74 20 61 6c 6c 20 61 63 74 69 76 | ear,.hold,.and.restart.all.activ |
123700 | 61 74 65 20 44 50 44 20 61 6e 64 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 61 63 74 69 6f 6e | ate.DPD.and.determine.the.action |
123720 | 20 74 6f 20 70 65 72 66 6f 72 6d 20 6f 6e 20 61 20 74 69 6d 65 6f 75 74 2e 20 57 69 74 68 20 60 | .to.perform.on.a.timeout..With.` |
123740 | 60 63 6c 65 61 72 60 60 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 63 6c 6f 73 65 | `clear``.the.connection.is.close |
123760 | 64 20 77 69 74 68 20 6e 6f 20 66 75 72 74 68 65 72 20 61 63 74 69 6f 6e 73 20 74 61 6b 65 6e 2e | d.with.no.further.actions.taken. |
123780 | 20 60 60 68 6f 6c 64 60 60 20 69 6e 73 74 61 6c 6c 73 20 61 20 74 72 61 70 20 70 6f 6c 69 63 79 | .``hold``.installs.a.trap.policy |
1237a0 | 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 63 61 74 63 68 20 6d 61 74 63 68 69 6e 67 20 74 72 61 66 | ,.which.will.catch.matching.traf |
1237c0 | 66 69 63 20 61 6e 64 20 74 72 69 65 73 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 | fic.and.tries.to.re-negotiate.th |
1237e0 | 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 6e 20 64 65 6d 61 6e 64 2e 20 60 60 72 65 73 74 61 72 | e.connection.on.demand..``restar |
123800 | 74 60 60 20 77 69 6c 6c 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 74 72 69 67 67 65 72 20 61 6e 20 | t``.will.immediately.trigger.an. |
123820 | 61 74 74 65 6d 70 74 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 63 6f 6e 6e | attempt.to.re-negotiate.the.conn |
123840 | 65 63 74 69 6f 6e 2e 00 60 60 64 65 61 64 2d 70 65 65 72 2d 64 65 74 65 63 74 69 6f 6e 20 61 63 | ection..``dead-peer-detection.ac |
123860 | 74 69 6f 6e 20 3d 20 63 6c 65 61 72 20 7c 20 74 72 61 70 20 7c 20 72 65 73 74 61 72 74 60 60 20 | tion.=.clear.|.trap.|.restart``. |
123880 | 2d 20 52 5f 55 5f 54 48 45 52 45 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 6d 65 73 73 61 67 65 | -.R_U_THERE.notification.message |
1238a0 | 73 28 49 4b 45 76 31 29 20 6f 72 20 65 6d 70 74 79 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 41 4c 20 | s(IKEv1).or.empty.INFORMATIONAL. |
1238c0 | 6d 65 73 73 61 67 65 73 20 28 49 4b 45 76 32 29 20 61 72 65 20 70 65 72 69 6f 64 69 63 61 6c 6c | messages.(IKEv2).are.periodicall |
1238e0 | 79 20 73 65 6e 74 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 63 68 65 63 6b 20 74 68 65 20 6c 69 76 | y.sent.in.order.to.check.the.liv |
123900 | 65 6c 69 6e 65 73 73 20 6f 66 20 74 68 65 20 49 50 73 65 63 20 70 65 65 72 2e 20 54 68 65 20 76 | eliness.of.the.IPsec.peer..The.v |
123920 | 61 6c 75 65 73 20 63 6c 65 61 72 2c 20 74 72 61 70 2c 20 61 6e 64 20 72 65 73 74 61 72 74 20 61 | alues.clear,.trap,.and.restart.a |
123940 | 6c 6c 20 61 63 74 69 76 61 74 65 20 44 50 44 20 61 6e 64 20 64 65 74 65 72 6d 69 6e 65 20 74 68 | ll.activate.DPD.and.determine.th |
123960 | 65 20 61 63 74 69 6f 6e 20 74 6f 20 70 65 72 66 6f 72 6d 20 6f 6e 20 61 20 74 69 6d 65 6f 75 74 | e.action.to.perform.on.a.timeout |
123980 | 2e 20 57 69 74 68 20 60 60 63 6c 65 61 72 60 60 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 | ..With.``clear``.the.connection. |
1239a0 | 69 73 20 63 6c 6f 73 65 64 20 77 69 74 68 20 6e 6f 20 66 75 72 74 68 65 72 20 61 63 74 69 6f 6e | is.closed.with.no.further.action |
1239c0 | 73 20 74 61 6b 65 6e 2e 20 60 60 74 72 61 70 60 60 20 69 6e 73 74 61 6c 6c 73 20 61 20 74 72 61 | s.taken..``trap``.installs.a.tra |
1239e0 | 70 20 70 6f 6c 69 63 79 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 63 61 74 63 68 20 6d 61 74 63 68 | p.policy,.which.will.catch.match |
123a00 | 69 6e 67 20 74 72 61 66 66 69 63 20 61 6e 64 20 74 72 69 65 73 20 74 6f 20 72 65 2d 6e 65 67 6f | ing.traffic.and.tries.to.re-nego |
123a20 | 74 69 61 74 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 6e 20 64 65 6d 61 6e 64 2e 20 | tiate.the.connection.on.demand.. |
123a40 | 60 60 72 65 73 74 61 72 74 60 60 20 77 69 6c 6c 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 74 72 69 | ``restart``.will.immediately.tri |
123a60 | 67 67 65 72 20 61 6e 20 61 74 74 65 6d 70 74 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 | gger.an.attempt.to.re-negotiate. |
123a80 | 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 60 60 64 65 61 64 2d 70 65 65 72 2d 64 65 74 65 | the.connection..``dead-peer-dete |
123aa0 | 63 74 69 6f 6e 60 60 20 63 6f 6e 74 72 6f 6c 73 20 74 68 65 20 75 73 65 20 6f 66 20 74 68 65 20 | ction``.controls.the.use.of.the. |
123ac0 | 44 65 61 64 20 50 65 65 72 20 44 65 74 65 63 74 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c 20 28 44 50 | Dead.Peer.Detection.protocol.(DP |
123ae0 | 44 2c 20 52 46 43 20 33 37 30 36 29 20 77 68 65 72 65 20 52 5f 55 5f 54 48 45 52 45 20 6e 6f 74 | D,.RFC.3706).where.R_U_THERE.not |
123b00 | 69 66 69 63 61 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 20 28 49 4b 45 76 31 29 20 6f 72 20 65 6d | ification.messages.(IKEv1).or.em |
123b20 | 70 74 79 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 41 4c 20 6d 65 73 73 61 67 65 73 20 28 49 4b 45 76 | pty.INFORMATIONAL.messages.(IKEv |
123b40 | 32 29 20 61 72 65 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 73 65 6e 74 20 69 6e 20 6f 72 64 65 | 2).are.periodically.sent.in.orde |
123b60 | 72 20 74 6f 20 63 68 65 63 6b 20 74 68 65 20 6c 69 76 65 6c 69 6e 65 73 73 20 6f 66 20 74 68 65 | r.to.check.the.liveliness.of.the |
123b80 | 20 49 50 73 65 63 20 70 65 65 72 3a 00 60 60 64 65 66 61 75 6c 74 2d 65 73 70 2d 67 72 6f 75 70 | .IPsec.peer:.``default-esp-group |
123ba0 | 60 60 20 2d 20 45 53 50 20 67 72 6f 75 70 20 74 6f 20 75 73 65 20 62 79 20 64 65 66 61 75 6c 74 | ``.-.ESP.group.to.use.by.default |
123bc0 | 20 66 6f 72 20 74 72 61 66 66 69 63 20 65 6e 63 72 79 70 74 69 6f 6e 2e 20 4d 69 67 68 74 20 62 | .for.traffic.encryption..Might.b |
123be0 | 65 20 6f 76 65 72 77 72 69 74 74 65 6e 20 62 79 20 69 6e 64 69 76 69 64 75 61 6c 20 73 65 74 74 | e.overwritten.by.individual.sett |
123c00 | 69 6e 67 73 20 66 6f 72 20 74 75 6e 6e 65 6c 20 6f 72 20 56 54 49 20 69 6e 74 65 72 66 61 63 65 | ings.for.tunnel.or.VTI.interface |
123c20 | 20 62 69 6e 64 69 6e 67 3b 00 60 60 64 65 73 63 72 69 70 74 69 6f 6e 60 60 20 2d 20 64 65 73 63 | .binding;.``description``.-.desc |
123c40 | 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 69 73 20 70 65 65 72 3b 00 60 60 64 68 2d 67 72 6f 75 | ription.for.this.peer;.``dh-grou |
123c60 | 70 60 60 20 64 68 2d 67 72 6f 75 70 3b 00 60 60 64 68 63 70 2d 69 6e 74 65 72 66 61 63 65 60 60 | p``.dh-group;.``dhcp-interface`` |
123c80 | 20 2d 20 49 44 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 67 65 6e 65 72 61 74 | .-.ID.for.authentication.generat |
123ca0 | 65 64 20 66 72 6f 6d 20 44 48 43 50 20 61 64 64 72 65 73 73 20 64 79 6e 61 6d 69 63 61 6c 6c 79 | ed.from.DHCP.address.dynamically |
123cc0 | 3b 00 60 60 64 68 63 70 2d 69 6e 74 65 72 66 61 63 65 60 60 20 2d 20 75 73 65 20 61 6e 20 49 50 | ;.``dhcp-interface``.-.use.an.IP |
123ce0 | 20 61 64 64 72 65 73 73 2c 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 44 48 43 50 20 66 6f 72 | .address,.received.from.DHCP.for |
123d00 | 20 49 50 53 65 63 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 69 73 20 70 65 65 72 | .IPSec.connection.with.this.peer |
123d20 | 2c 20 69 6e 73 74 65 61 64 20 6f 66 20 60 60 6c 6f 63 61 6c 2d 61 64 64 72 65 73 73 60 60 3b 00 | ,.instead.of.``local-address``;. |
123d40 | 60 60 64 69 73 61 62 6c 65 2d 6d 6f 62 69 6b 65 60 60 20 64 69 73 61 62 6c 65 73 20 4d 4f 42 49 | ``disable-mobike``.disables.MOBI |
123d60 | 4b 45 20 53 75 70 70 6f 72 74 2e 20 4d 4f 42 49 4b 45 20 69 73 20 6f 6e 6c 79 20 61 76 61 69 6c | KE.Support..MOBIKE.is.only.avail |
123d80 | 61 62 6c 65 20 66 6f 72 20 49 4b 45 76 32 20 61 6e 64 20 65 6e 61 62 6c 65 64 20 62 79 20 64 65 | able.for.IKEv2.and.enabled.by.de |
123da0 | 66 61 75 6c 74 2e 00 60 60 64 69 73 61 62 6c 65 2d 72 6f 75 74 65 2d 61 75 74 6f 69 6e 73 74 61 | fault..``disable-route-autoinsta |
123dc0 | 6c 6c 60 60 20 2d 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 77 68 65 6e 20 63 6f 6e 66 69 67 75 72 | ll``.-.This.option.when.configur |
123de0 | 65 64 20 64 69 73 61 62 6c 65 73 20 74 68 65 20 72 6f 75 74 65 73 20 69 6e 73 74 61 6c 6c 65 64 | ed.disables.the.routes.installed |
123e00 | 20 69 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 74 61 62 6c 65 20 32 32 30 20 66 6f 72 20 73 69 | .in.the.default.table.220.for.si |
123e20 | 74 65 2d 74 6f 2d 73 69 74 65 20 69 70 73 65 63 2e 20 49 74 20 69 73 20 6d 6f 73 74 6c 79 20 75 | te-to-site.ipsec..It.is.mostly.u |
123e40 | 73 65 64 20 77 69 74 68 20 56 54 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 60 60 64 69 | sed.with.VTI.configuration..``di |
123e60 | 73 61 62 6c 65 2d 72 6f 75 74 65 2d 61 75 74 6f 69 6e 73 74 61 6c 6c 60 60 20 44 6f 20 6e 6f 74 | sable-route-autoinstall``.Do.not |
123e80 | 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 69 6e 73 74 61 6c 6c 20 72 6f 75 74 65 73 20 74 6f | .automatically.install.routes.to |
123ea0 | 20 72 65 6d 6f 74 65 20 6e 65 74 77 6f 72 6b 73 3b 00 60 60 64 69 73 61 62 6c 65 60 60 20 2d 20 | .remote.networks;.``disable``.-. |
123ec0 | 64 69 73 61 62 6c 65 20 74 68 69 73 20 74 75 6e 6e 65 6c 3b 00 60 60 64 69 73 61 62 6c 65 60 60 | disable.this.tunnel;.``disable`` |
123ee0 | 20 44 69 73 61 62 6c 65 20 50 46 53 3b 00 60 60 64 69 73 61 62 6c 65 60 60 20 64 69 73 61 62 6c | .Disable.PFS;.``disable``.disabl |
123f00 | 65 20 49 50 43 6f 6d 70 20 63 6f 6d 70 72 65 73 73 69 6f 6e 20 28 64 65 66 61 75 6c 74 29 3b 00 | e.IPComp.compression.(default);. |
123f20 | 60 60 64 69 73 61 62 6c 65 60 60 20 64 69 73 61 62 6c 65 20 4d 4f 42 49 4b 45 3b 00 60 60 64 72 | ``disable``.disable.MOBIKE;.``dr |
123f40 | 6f 70 60 60 3a 20 64 72 6f 70 20 74 68 65 20 70 61 63 6b 65 74 2e 00 60 60 65 63 64 73 61 2d 73 | op``:.drop.the.packet..``ecdsa-s |
123f60 | 68 61 32 2d 6e 69 73 74 70 32 35 36 60 60 00 60 60 65 63 64 73 61 2d 73 68 61 32 2d 6e 69 73 74 | ha2-nistp256``.``ecdsa-sha2-nist |
123f80 | 70 33 38 34 60 60 00 60 60 65 63 64 73 61 2d 73 68 61 32 2d 6e 69 73 74 70 35 32 31 60 60 00 60 | p384``.``ecdsa-sha2-nistp521``.` |
123fa0 | 60 65 64 70 60 60 20 2d 20 4c 69 73 74 65 6e 20 66 6f 72 20 45 44 50 20 66 6f 72 20 45 78 74 72 | `edp``.-.Listen.for.EDP.for.Extr |
123fc0 | 65 6d 65 20 72 6f 75 74 65 72 73 2f 73 77 69 74 63 68 65 73 00 60 60 65 6e 61 62 6c 65 60 60 20 | eme.routers/switches.``enable``. |
123fe0 | 49 6e 68 65 72 69 74 20 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 67 72 6f 75 70 20 66 72 6f | Inherit.Diffie-Hellman.group.fro |
124000 | 6d 20 49 4b 45 20 67 72 6f 75 70 20 28 64 65 66 61 75 6c 74 29 3b 00 60 60 65 6e 61 62 6c 65 60 | m.IKE.group.(default);.``enable` |
124020 | 60 20 65 6e 61 62 6c 65 20 49 50 43 6f 6d 70 20 63 6f 6d 70 72 65 73 73 69 6f 6e 3b 00 60 60 65 | `.enable.IPComp.compression;.``e |
124040 | 6e 61 62 6c 65 60 60 20 65 6e 61 62 6c 65 20 4d 4f 42 49 4b 45 20 28 64 65 66 61 75 6c 74 20 66 | nable``.enable.MOBIKE.(default.f |
124060 | 6f 72 20 49 4b 45 76 32 29 3b 00 60 60 65 6e 63 72 79 70 74 69 6f 6e 60 60 20 65 6e 63 72 79 70 | or.IKEv2);.``encryption``.encryp |
124080 | 74 69 6f 6e 20 61 6c 67 6f 72 69 74 68 6d 20 28 64 65 66 61 75 6c 74 20 31 32 38 20 62 69 74 20 | tion.algorithm.(default.128.bit. |
1240a0 | 41 45 53 2d 43 42 43 29 3b 00 60 60 65 6e 63 72 79 70 74 69 6f 6e 60 60 20 65 6e 63 72 79 70 74 | AES-CBC);.``encryption``.encrypt |
1240c0 | 69 6f 6e 20 61 6c 67 6f 72 69 74 68 6d 3b 00 60 60 65 6e 64 60 60 20 4d 61 74 63 68 65 73 20 74 | ion.algorithm;.``end``.Matches.t |
1240e0 | 68 65 20 65 6e 64 20 6f 66 20 74 68 65 20 55 52 4c 20 70 61 74 68 2e 00 60 60 65 73 70 2d 67 72 | he.end.of.the.URL.path..``esp-gr |
124100 | 6f 75 70 60 60 20 2d 20 64 65 66 69 6e 65 20 45 53 50 20 67 72 6f 75 70 20 66 6f 72 20 65 6e 63 | oup``.-.define.ESP.group.for.enc |
124120 | 72 79 70 74 20 74 72 61 66 66 69 63 2c 20 64 65 66 69 6e 65 64 20 62 79 20 74 68 69 73 20 74 75 | rypt.traffic,.defined.by.this.tu |
124140 | 6e 6e 65 6c 3b 00 60 60 65 73 70 2d 67 72 6f 75 70 60 60 20 2d 20 64 65 66 69 6e 65 20 45 53 50 | nnel;.``esp-group``.-.define.ESP |
124160 | 20 67 72 6f 75 70 20 66 6f 72 20 65 6e 63 72 79 70 74 20 74 72 61 66 66 69 63 2c 20 70 61 73 73 | .group.for.encrypt.traffic,.pass |
124180 | 65 64 20 74 68 69 73 20 56 54 49 20 69 6e 74 65 72 66 61 63 65 2e 00 60 60 65 78 61 63 74 60 60 | ed.this.VTI.interface..``exact`` |
1241a0 | 20 52 65 71 75 69 72 65 73 20 61 6e 20 65 78 61 63 74 6c 79 20 6d 61 74 63 68 20 6f 66 20 74 68 | .Requires.an.exactly.match.of.th |
1241c0 | 65 20 55 52 4c 20 70 61 74 68 00 60 60 66 64 70 60 60 20 2d 20 4c 69 73 74 65 6e 20 66 6f 72 20 | e.URL.path.``fdp``.-.Listen.for. |
1241e0 | 46 44 50 20 66 6f 72 20 46 6f 75 6e 64 72 79 20 72 6f 75 74 65 72 73 2f 73 77 69 74 63 68 65 73 | FDP.for.Foundry.routers/switches |
124200 | 00 60 60 66 69 6c 65 60 60 20 2d 20 70 61 74 68 20 74 6f 20 74 68 65 20 6b 65 79 20 66 69 6c 65 | .``file``.-.path.to.the.key.file |
124220 | 3b 00 60 60 66 6c 65 78 76 70 6e 60 60 20 41 6c 6c 6f 77 20 46 6c 65 78 56 50 4e 20 76 65 6e 64 | ;.``flexvpn``.Allow.FlexVPN.vend |
124240 | 6f 72 20 49 44 20 70 61 79 6c 6f 61 64 20 28 49 4b 45 76 32 20 6f 6e 6c 79 29 2e 20 53 65 6e 64 | or.ID.payload.(IKEv2.only)..Send |
124260 | 20 74 68 65 20 43 69 73 63 6f 20 46 6c 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 70 61 79 | .the.Cisco.FlexVPN.vendor.ID.pay |
124280 | 6c 6f 61 64 20 28 49 4b 45 76 32 20 6f 6e 6c 79 29 2c 20 77 68 69 63 68 20 69 73 20 72 65 71 75 | load.(IKEv2.only),.which.is.requ |
1242a0 | 69 72 65 64 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 6d 61 6b 65 20 43 69 73 63 6f 20 62 72 61 6e | ired.in.order.to.make.Cisco.bran |
1242c0 | 64 20 64 65 76 69 63 65 73 20 61 6c 6c 6f 77 20 6e 65 67 6f 74 69 61 74 69 6e 67 20 61 20 6c 6f | d.devices.allow.negotiating.a.lo |
1242e0 | 63 61 6c 20 74 72 61 66 66 69 63 20 73 65 6c 65 63 74 6f 72 20 28 66 72 6f 6d 20 73 74 72 6f 6e | cal.traffic.selector.(from.stron |
124300 | 67 53 77 61 6e 27 73 20 70 6f 69 6e 74 20 6f 66 20 76 69 65 77 29 20 74 68 61 74 20 69 73 20 6e | gSwan's.point.of.view).that.is.n |
124320 | 6f 74 20 74 68 65 20 61 73 73 69 67 6e 65 64 20 76 69 72 74 75 61 6c 20 49 50 20 61 64 64 72 65 | ot.the.assigned.virtual.IP.addre |
124340 | 73 73 20 69 66 20 73 75 63 68 20 61 6e 20 61 64 64 72 65 73 73 20 69 73 20 72 65 71 75 65 73 74 | ss.if.such.an.address.is.request |
124360 | 65 64 20 62 79 20 73 74 72 6f 6e 67 53 77 61 6e 2e 20 53 65 6e 64 69 6e 67 20 74 68 65 20 43 69 | ed.by.strongSwan..Sending.the.Ci |
124380 | 73 63 6f 20 46 6c 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 70 72 65 76 65 6e 74 73 20 74 | sco.FlexVPN.vendor.ID.prevents.t |
1243a0 | 68 65 20 70 65 65 72 20 66 72 6f 6d 20 6e 61 72 72 6f 77 69 6e 67 20 74 68 65 20 69 6e 69 74 69 | he.peer.from.narrowing.the.initi |
1243c0 | 61 74 6f 72 27 73 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 20 73 65 6c 65 63 74 6f 72 20 61 6e | ator's.local.traffic.selector.an |
1243e0 | 64 20 61 6c 6c 6f 77 73 20 69 74 20 74 6f 20 65 2e 67 2e 20 6e 65 67 6f 74 69 61 74 65 20 61 20 | d.allows.it.to.e.g..negotiate.a. |
124400 | 54 53 20 6f 66 20 30 2e 30 2e 30 2e 30 2f 30 20 3d 3d 20 30 2e 30 2e 30 2e 30 2f 30 20 69 6e 73 | TS.of.0.0.0.0/0.==.0.0.0.0/0.ins |
124420 | 74 65 61 64 2e 20 54 68 69 73 20 68 61 73 20 62 65 65 6e 20 74 65 73 74 65 64 20 77 69 74 68 20 | tead..This.has.been.tested.with. |
124440 | 61 20 22 74 75 6e 6e 65 6c 20 6d 6f 64 65 20 69 70 73 65 63 20 69 70 76 34 22 20 43 69 73 63 6f | a."tunnel.mode.ipsec.ipv4".Cisco |
124460 | 20 74 65 6d 70 6c 61 74 65 20 62 75 74 20 73 68 6f 75 6c 64 20 61 6c 73 6f 20 77 6f 72 6b 20 66 | .template.but.should.also.work.f |
124480 | 6f 72 20 47 52 45 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 3b 00 60 60 66 6c 65 78 76 70 6e 60 | or.GRE.encapsulation;.``flexvpn` |
1244a0 | 60 20 41 6c 6c 6f 77 73 20 46 6c 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 70 61 79 6c 6f | `.Allows.FlexVPN.vendor.ID.paylo |
1244c0 | 61 64 20 28 49 4b 45 76 32 20 6f 6e 6c 79 29 2e 20 53 65 6e 64 20 74 68 65 20 43 69 73 63 6f 20 | ad.(IKEv2.only)..Send.the.Cisco. |
1244e0 | 46 6c 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 70 61 79 6c 6f 61 64 20 28 49 4b 45 76 32 | FlexVPN.vendor.ID.payload.(IKEv2 |
124500 | 20 6f 6e 6c 79 29 2c 20 77 68 69 63 68 20 69 73 20 72 65 71 75 69 72 65 64 20 69 6e 20 6f 72 64 | .only),.which.is.required.in.ord |
124520 | 65 72 20 74 6f 20 6d 61 6b 65 20 43 69 73 63 6f 20 62 72 61 6e 64 20 64 65 76 69 63 65 73 20 61 | er.to.make.Cisco.brand.devices.a |
124540 | 6c 6c 6f 77 20 6e 65 67 6f 74 69 61 74 69 6e 67 20 61 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 | llow.negotiating.a.local.traffic |
124560 | 20 73 65 6c 65 63 74 6f 72 20 28 66 72 6f 6d 20 73 74 72 6f 6e 67 53 77 61 6e 27 73 20 70 6f 69 | .selector.(from.strongSwan's.poi |
124580 | 6e 74 20 6f 66 20 76 69 65 77 29 20 74 68 61 74 20 69 73 20 6e 6f 74 20 74 68 65 20 61 73 73 69 | nt.of.view).that.is.not.the.assi |
1245a0 | 67 6e 65 64 20 76 69 72 74 75 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 69 66 20 73 75 63 68 20 | gned.virtual.IP.address.if.such. |
1245c0 | 61 6e 20 61 64 64 72 65 73 73 20 69 73 20 72 65 71 75 65 73 74 65 64 20 62 79 20 73 74 72 6f 6e | an.address.is.requested.by.stron |
1245e0 | 67 53 77 61 6e 2e 20 53 65 6e 64 69 6e 67 20 74 68 65 20 43 69 73 63 6f 20 46 6c 65 78 56 50 4e | gSwan..Sending.the.Cisco.FlexVPN |
124600 | 20 76 65 6e 64 6f 72 20 49 44 20 70 72 65 76 65 6e 74 73 20 74 68 65 20 70 65 65 72 20 66 72 6f | .vendor.ID.prevents.the.peer.fro |
124620 | 6d 20 6e 61 72 72 6f 77 69 6e 67 20 74 68 65 20 69 6e 69 74 69 61 74 6f 72 27 73 20 6c 6f 63 61 | m.narrowing.the.initiator's.loca |
124640 | 6c 20 74 72 61 66 66 69 63 20 73 65 6c 65 63 74 6f 72 20 61 6e 64 20 61 6c 6c 6f 77 73 20 69 74 | l.traffic.selector.and.allows.it |
124660 | 20 74 6f 20 65 2e 67 2e 20 6e 65 67 6f 74 69 61 74 65 20 61 20 54 53 20 6f 66 20 30 2e 30 2e 30 | .to.e.g..negotiate.a.TS.of.0.0.0 |
124680 | 2e 30 2f 30 20 3d 3d 20 30 2e 30 2e 30 2e 30 2f 30 20 69 6e 73 74 65 61 64 2e 20 54 68 69 73 20 | .0/0.==.0.0.0.0/0.instead..This. |
1246a0 | 68 61 73 20 62 65 65 6e 20 74 65 73 74 65 64 20 77 69 74 68 20 61 20 22 74 75 6e 6e 65 6c 20 6d | has.been.tested.with.a."tunnel.m |
1246c0 | 6f 64 65 20 69 70 73 65 63 20 69 70 76 34 22 20 43 69 73 63 6f 20 74 65 6d 70 6c 61 74 65 20 62 | ode.ipsec.ipv4".Cisco.template.b |
1246e0 | 75 74 20 73 68 6f 75 6c 64 20 61 6c 73 6f 20 77 6f 72 6b 20 66 6f 72 20 47 52 45 20 65 6e 63 61 | ut.should.also.work.for.GRE.enca |
124700 | 70 73 75 6c 61 74 69 6f 6e 3b 00 60 60 66 6f 72 63 65 2d 75 64 70 2d 65 6e 63 61 70 73 75 6c 61 | psulation;.``force-udp-encapsula |
124720 | 74 69 6f 6e 60 60 20 2d 20 66 6f 72 63 65 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 6f 66 20 | tion``.-.force.encapsulation.of. |
124740 | 45 53 50 20 69 6e 74 6f 20 55 44 50 20 64 61 74 61 67 72 61 6d 73 2e 20 55 73 65 66 75 6c 20 69 | ESP.into.UDP.datagrams..Useful.i |
124760 | 6e 20 63 61 73 65 20 69 66 20 62 65 74 77 65 65 6e 20 6c 6f 63 61 6c 20 61 6e 64 20 72 65 6d 6f | n.case.if.between.local.and.remo |
124780 | 74 65 20 73 69 64 65 20 69 73 20 66 69 72 65 77 61 6c 6c 20 6f 72 20 4e 41 54 2c 20 77 68 69 63 | te.side.is.firewall.or.NAT,.whic |
1247a0 | 68 20 6e 6f 74 20 61 6c 6c 6f 77 73 20 70 61 73 73 69 6e 67 20 70 6c 61 69 6e 20 45 53 50 20 70 | h.not.allows.passing.plain.ESP.p |
1247c0 | 61 63 6b 65 74 73 20 62 65 74 77 65 65 6e 20 74 68 65 6d 3b 00 60 60 67 60 60 20 2d 20 38 30 32 | ackets.between.them;.``g``.-.802 |
1247e0 | 2e 31 31 67 20 2d 20 35 34 20 4d 62 69 74 73 2f 73 65 63 20 28 64 65 66 61 75 6c 74 29 00 60 60 | .11g.-.54.Mbits/sec.(default).`` |
124800 | 67 72 61 63 65 66 75 6c 2d 73 68 75 74 64 6f 77 6e 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 | graceful-shutdown``.-........... |
124820 | 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 47 52 | .Well-known.communities.value.GR |
124840 | 41 43 45 46 55 4c 5f 53 48 55 54 44 4f 57 4e 20 30 78 46 46 46 46 30 30 30 30 00 60 60 68 60 60 | ACEFUL_SHUTDOWN.0xFFFF0000.``h`` |
124860 | 20 2d 20 45 78 65 63 75 74 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 68 6f 75 72 73 00 60 | .-.Execution.interval.in.hours.` |
124880 | 60 68 61 73 68 60 60 20 68 61 73 68 20 61 6c 67 6f 72 69 74 68 6d 20 28 64 65 66 61 75 6c 74 20 | `hash``.hash.algorithm.(default. |
1248a0 | 73 68 61 31 29 2e 00 60 60 68 61 73 68 60 60 20 68 61 73 68 20 61 6c 67 6f 72 69 74 68 6d 2e 00 | sha1)..``hash``.hash.algorithm.. |
1248c0 | 60 60 68 6f 6c 64 60 60 20 73 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 68 6f 6c 64 20 28 64 65 66 | ``hold``.set.action.to.hold.(def |
1248e0 | 61 75 6c 74 29 00 60 60 68 6f 6c 64 60 60 20 73 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 68 6f 6c | ault).``hold``.set.action.to.hol |
124900 | 64 3b 00 60 60 68 74 34 30 2b 60 60 20 2d 20 42 6f 74 68 20 32 30 20 4d 48 7a 20 61 6e 64 20 34 | d;.``ht40+``.-.Both.20.MHz.and.4 |
124920 | 30 20 4d 48 7a 20 77 69 74 68 20 73 65 63 6f 6e 64 61 72 79 20 63 68 61 6e 6e 65 6c 20 61 62 6f | 0.MHz.with.secondary.channel.abo |
124940 | 76 65 20 74 68 65 20 70 72 69 6d 61 72 79 20 63 68 61 6e 6e 65 6c 00 60 60 68 74 34 30 2d 60 60 | ve.the.primary.channel.``ht40-`` |
124960 | 20 2d 20 42 6f 74 68 20 32 30 20 4d 48 7a 20 61 6e 64 20 34 30 20 4d 48 7a 20 77 69 74 68 20 73 | .-.Both.20.MHz.and.40.MHz.with.s |
124980 | 65 63 6f 6e 64 61 72 79 20 63 68 61 6e 6e 65 6c 20 62 65 6c 6f 77 20 74 68 65 20 70 72 69 6d 61 | econdary.channel.below.the.prima |
1249a0 | 72 79 20 63 68 61 6e 6e 65 6c 00 60 60 68 76 63 30 60 60 20 2d 20 58 65 6e 20 63 6f 6e 73 6f 6c | ry.channel.``hvc0``.-.Xen.consol |
1249c0 | 65 00 60 60 69 64 60 60 20 2d 20 73 74 61 74 69 63 20 49 44 27 73 20 66 6f 72 20 61 75 74 68 65 | e.``id``.-.static.ID's.for.authe |
1249e0 | 6e 74 69 63 61 74 69 6f 6e 2e 20 49 6e 20 67 65 6e 65 72 61 6c 20 6c 6f 63 61 6c 20 61 6e 64 20 | ntication..In.general.local.and. |
124a00 | 72 65 6d 6f 74 65 20 61 64 64 72 65 73 73 20 60 60 3c 78 2e 78 2e 78 2e 78 3e 60 60 2c 20 60 60 | remote.address.``<x.x.x.x>``,.`` |
124a20 | 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 60 60 20 6f 72 20 60 60 25 61 6e 79 60 60 3b | <h:h:h:h:h:h:h:h>``.or.``%any``; |
124a40 | 00 60 60 69 6b 65 2d 67 72 6f 75 70 60 60 20 2d 20 49 4b 45 20 67 72 6f 75 70 20 74 6f 20 75 73 | .``ike-group``.-.IKE.group.to.us |
124a60 | 65 20 66 6f 72 20 6b 65 79 20 65 78 63 68 61 6e 67 65 73 3b 00 60 60 69 6b 65 76 31 60 60 20 75 | e.for.key.exchanges;.``ikev1``.u |
124a80 | 73 65 20 49 4b 45 76 31 20 66 6f 72 20 4b 65 79 20 45 78 63 68 61 6e 67 65 3b 00 60 60 69 6b 65 | se.IKEv1.for.Key.Exchange;.``ike |
124aa0 | 76 32 2d 72 65 61 75 74 68 60 60 20 2d 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 65 20 72 65 6d | v2-reauth``.-.reauthenticate.rem |
124ac0 | 6f 74 65 20 70 65 65 72 20 64 75 72 69 6e 67 20 74 68 65 20 72 65 6b 65 79 69 6e 67 20 70 72 6f | ote.peer.during.the.rekeying.pro |
124ae0 | 63 65 73 73 2e 20 43 61 6e 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 69 74 68 20 49 4b 45 76 | cess..Can.be.used.only.with.IKEv |
124b00 | 32 2e 20 43 72 65 61 74 65 20 61 20 6e 65 77 20 49 4b 45 5f 53 41 20 66 72 6f 6d 20 74 68 65 20 | 2..Create.a.new.IKE_SA.from.the. |
124b20 | 73 63 72 61 74 63 68 20 61 6e 64 20 74 72 79 20 74 6f 20 72 65 63 72 65 61 74 65 20 61 6c 6c 20 | scratch.and.try.to.recreate.all. |
124b40 | 49 50 73 65 63 20 53 41 73 3b 00 60 60 69 6b 65 76 32 2d 72 65 61 75 74 68 60 60 20 77 68 65 74 | IPsec.SAs;.``ikev2-reauth``.whet |
124b60 | 68 65 72 20 72 65 6b 65 79 69 6e 67 20 6f 66 20 61 6e 20 49 4b 45 5f 53 41 20 73 68 6f 75 6c 64 | her.rekeying.of.an.IKE_SA.should |
124b80 | 20 61 6c 73 6f 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 65 20 74 68 65 20 70 65 65 72 2e 20 49 | .also.reauthenticate.the.peer..I |
124ba0 | 6e 20 49 4b 45 76 31 2c 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 61 6c 77 | n.IKEv1,.reauthentication.is.alw |
124bc0 | 61 79 73 20 64 6f 6e 65 2e 20 53 65 74 74 69 6e 67 20 74 68 69 73 20 70 61 72 61 6d 65 74 65 72 | ays.done..Setting.this.parameter |
124be0 | 20 65 6e 61 62 6c 65 73 20 72 65 6d 6f 74 65 20 68 6f 73 74 20 72 65 2d 61 75 74 68 65 6e 74 69 | .enables.remote.host.re-authenti |
124c00 | 63 61 74 69 6f 6e 20 64 75 72 69 6e 67 20 61 6e 20 49 4b 45 20 72 65 6b 65 79 2e 00 60 60 69 6b | cation.during.an.IKE.rekey..``ik |
124c20 | 65 76 32 2d 72 65 61 75 74 68 60 60 20 77 68 65 74 68 65 72 20 72 65 6b 65 79 69 6e 67 20 6f 66 | ev2-reauth``.whether.rekeying.of |
124c40 | 20 61 6e 20 49 4b 45 5f 53 41 20 73 68 6f 75 6c 64 20 61 6c 73 6f 20 72 65 61 75 74 68 65 6e 74 | .an.IKE_SA.should.also.reauthent |
124c60 | 69 63 61 74 65 20 74 68 65 20 70 65 65 72 2e 20 49 6e 20 49 4b 45 76 31 2c 20 72 65 61 75 74 68 | icate.the.peer..In.IKEv1,.reauth |
124c80 | 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 61 6c 77 61 79 73 20 64 6f 6e 65 3a 00 60 60 69 6b 65 | entication.is.always.done:.``ike |
124ca0 | 76 32 60 60 20 75 73 65 20 49 4b 45 76 32 20 66 6f 72 20 4b 65 79 20 45 78 63 68 61 6e 67 65 3b | v2``.use.IKEv2.for.Key.Exchange; |
124cc0 | 00 60 60 69 6e 60 60 3a 20 52 75 6c 65 73 65 74 20 66 6f 72 20 66 6f 72 77 61 72 64 65 64 20 70 | .``in``:.Ruleset.for.forwarded.p |
124ce0 | 61 63 6b 65 74 73 20 6f 6e 20 61 6e 20 69 6e 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 00 60 | ackets.on.an.inbound.interface.` |
124d00 | 60 69 6e 69 74 69 61 74 65 60 60 20 2d 20 64 6f 65 73 20 69 6e 69 74 69 61 6c 20 63 6f 6e 6e 65 | `initiate``.-.does.initial.conne |
124d20 | 63 74 69 6f 6e 20 74 6f 20 72 65 6d 6f 74 65 20 70 65 65 72 20 69 6d 6d 65 64 69 61 74 65 6c 79 | ction.to.remote.peer.immediately |
124d40 | 20 61 66 74 65 72 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 64 20 61 66 74 65 72 20 62 6f 6f | .after.configuring.and.after.boo |
124d60 | 74 2e 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 | t..In.this.mode.the.connection.w |
124d80 | 69 6c 6c 20 6e 6f 74 20 62 65 20 72 65 73 74 61 72 74 65 64 20 69 6e 20 63 61 73 65 20 6f 66 20 | ill.not.be.restarted.in.case.of. |
124da0 | 64 69 73 63 6f 6e 6e 65 63 74 69 6f 6e 2c 20 74 68 65 72 65 66 6f 72 65 20 73 68 6f 75 6c 64 20 | disconnection,.therefore.should. |
124dc0 | 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 44 50 44 20 6f | be.used.only.together.with.DPD.o |
124de0 | 72 20 61 6e 6f 74 68 65 72 20 73 65 73 73 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 6d 65 74 68 6f | r.another.session.tracking.metho |
124e00 | 64 73 3b 00 60 60 69 6e 74 65 6c 5f 69 64 6c 65 2e 6d 61 78 5f 63 73 74 61 74 65 3d 30 60 60 20 | ds;.``intel_idle.max_cstate=0``. |
124e20 | 44 69 73 61 62 6c 65 20 69 6e 74 65 6c 5f 69 64 6c 65 20 61 6e 64 20 66 61 6c 6c 20 62 61 63 6b | Disable.intel_idle.and.fall.back |
124e40 | 20 6f 6e 20 61 63 70 69 5f 69 64 6c 65 00 60 60 69 6e 74 65 72 66 61 63 65 60 60 20 49 6e 74 65 | .on.acpi_idle.``interface``.Inte |
124e60 | 72 66 61 63 65 20 4e 61 6d 65 20 74 6f 20 75 73 65 2e 20 54 68 65 20 6e 61 6d 65 20 6f 66 20 74 | rface.Name.to.use..The.name.of.t |
124e80 | 68 65 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 77 68 69 63 68 20 76 69 72 74 75 61 6c 20 49 50 | he.interface.on.which.virtual.IP |
124ea0 | 20 61 64 64 72 65 73 73 65 73 20 73 68 6f 75 6c 64 20 62 65 20 69 6e 73 74 61 6c 6c 65 64 2e 20 | .addresses.should.be.installed.. |
124ec0 | 49 66 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 74 68 65 20 61 64 64 72 65 73 73 65 73 20 77 | If.not.specified.the.addresses.w |
124ee0 | 69 6c 6c 20 62 65 20 69 6e 73 74 61 6c 6c 65 64 20 6f 6e 20 74 68 65 20 6f 75 74 62 6f 75 6e 64 | ill.be.installed.on.the.outbound |
124f00 | 20 69 6e 74 65 72 66 61 63 65 3b 00 60 60 69 6e 74 65 72 66 61 63 65 60 60 20 69 73 20 75 73 65 | .interface;.``interface``.is.use |
124f20 | 64 20 66 6f 72 20 74 68 65 20 56 79 4f 53 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 64 | d.for.the.VyOS.CLI.command.to.id |
124f40 | 65 6e 74 69 66 79 20 74 68 65 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 20 77 | entify.the.WireGuard.interface.w |
124f60 | 68 65 72 65 20 74 68 69 73 20 70 72 69 76 61 74 65 20 6b 65 79 20 69 73 20 74 6f 20 62 65 20 75 | here.this.private.key.is.to.be.u |
124f80 | 73 65 64 2e 00 60 60 69 6e 74 65 72 6e 65 74 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 | sed..``internet``.-............. |
124fa0 | 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 | ........Well-known.communities.v |
124fc0 | 61 6c 75 65 20 30 00 60 60 69 6e 74 65 72 76 61 6c 60 60 20 6b 65 65 70 2d 61 6c 69 76 65 20 69 | alue.0.``interval``.keep-alive.i |
124fe0 | 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 20 3c 32 2d 38 36 34 30 30 3e 20 28 64 65 | nterval.in.seconds.<2-86400>.(de |
125000 | 66 61 75 6c 74 20 33 30 29 3b 00 60 60 69 73 69 73 60 60 20 2d 20 49 6e 74 65 72 6d 65 64 69 61 | fault.30);.``isis``.-.Intermedia |
125020 | 74 65 20 53 79 73 74 65 6d 20 74 6f 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 73 74 65 6d | te.System.to.Intermediate.System |
125040 | 20 28 49 53 2d 49 53 29 00 60 60 6a 75 6d 70 60 60 3a 20 6a 75 6d 70 20 74 6f 20 61 6e 6f 74 68 | .(IS-IS).``jump``:.jump.to.anoth |
125060 | 65 72 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2e 00 60 60 6b 65 72 6e 65 6c 60 60 20 2d 20 4b 65 | er.custom.chain..``kernel``.-.Ke |
125080 | 72 6e 65 6c 20 72 6f 75 74 65 73 00 60 60 6b 65 79 2d 65 78 63 68 61 6e 67 65 60 60 20 77 68 69 | rnel.routes.``key-exchange``.whi |
1250a0 | 63 68 20 70 72 6f 74 6f 63 6f 6c 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 20 74 6f 20 69 6e | ch.protocol.should.be.used.to.in |
1250c0 | 69 74 69 61 6c 69 7a 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 49 66 20 6e 6f 74 20 73 | itialize.the.connection.If.not.s |
1250e0 | 65 74 20 62 6f 74 68 20 70 72 6f 74 6f 63 6f 6c 73 20 61 72 65 20 68 61 6e 64 6c 65 64 20 61 6e | et.both.protocols.are.handled.an |
125100 | 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 77 69 6c 6c 20 75 73 65 20 49 4b 45 76 32 20 77 68 65 | d.connections.will.use.IKEv2.whe |
125120 | 6e 20 69 6e 69 74 69 61 74 69 6e 67 2c 20 62 75 74 20 61 63 63 65 70 74 20 61 6e 79 20 70 72 6f | n.initiating,.but.accept.any.pro |
125140 | 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e 20 77 68 65 6e 20 72 65 73 70 6f 6e 64 69 6e 67 3a 00 60 | tocol.version.when.responding:.` |
125160 | 60 6b 65 79 60 60 20 2d 20 61 20 70 72 69 76 61 74 65 20 6b 65 79 2c 20 77 68 69 63 68 20 77 69 | `key``.-.a.private.key,.which.wi |
125180 | 6c 6c 20 62 65 20 75 73 65 64 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 6c 6f | ll.be.used.for.authenticating.lo |
1251a0 | 63 61 6c 20 72 6f 75 74 65 72 20 6f 6e 20 72 65 6d 6f 74 65 20 70 65 65 72 3a 00 60 60 6c 61 74 | cal.router.on.remote.peer:.``lat |
1251c0 | 65 6e 63 79 60 60 3a 20 41 20 73 65 72 76 65 72 20 70 72 6f 66 69 6c 65 20 66 6f 63 75 73 65 64 | ency``:.A.server.profile.focused |
1251e0 | 20 6f 6e 20 6c 6f 77 65 72 69 6e 67 20 6e 65 74 77 6f 72 6b 20 6c 61 74 65 6e 63 79 2e 20 54 68 | .on.lowering.network.latency..Th |
125200 | 69 73 20 70 72 6f 66 69 6c 65 20 66 61 76 6f 72 73 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 6f 76 | is.profile.favors.performance.ov |
125220 | 65 72 20 70 6f 77 65 72 20 73 61 76 69 6e 67 73 20 62 79 20 73 65 74 74 69 6e 67 20 60 60 69 6e | er.power.savings.by.setting.``in |
125240 | 74 65 6c 5f 70 73 74 61 74 65 60 60 20 61 6e 64 20 60 60 6d 69 6e 5f 70 65 72 66 5f 70 63 74 3d | tel_pstate``.and.``min_perf_pct= |
125260 | 31 30 30 60 60 2e 00 60 60 6c 65 61 73 74 2d 63 6f 6e 6e 65 63 74 69 6f 6e 60 60 20 44 69 73 74 | 100``..``least-connection``.Dist |
125280 | 72 69 62 75 74 65 73 20 72 65 71 75 65 73 74 73 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 20 77 | ributes.requests.to.the.server.w |
1252a0 | 69 74 68 20 74 68 65 20 66 65 77 65 73 74 20 61 63 74 69 76 65 20 63 6f 6e 6e 65 63 74 69 6f 6e | ith.the.fewest.active.connection |
1252c0 | 73 00 60 60 6c 65 61 73 74 2d 63 6f 6e 6e 65 63 74 69 6f 6e 60 60 20 44 69 73 74 72 69 62 75 74 | s.``least-connection``.Distribut |
1252e0 | 65 73 20 72 65 71 75 65 73 74 73 20 74 70 20 74 6a 65 20 73 65 72 76 65 72 20 77 6f 74 6a 20 74 | es.requests.tp.tje.server.wotj.t |
125300 | 68 65 20 66 65 77 65 73 74 20 61 63 74 69 76 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 60 60 6c | he.fewest.active.connections.``l |
125320 | 69 66 65 2d 62 79 74 65 73 60 60 20 45 53 50 20 6c 69 66 65 20 69 6e 20 62 79 74 65 73 20 3c 31 | ife-bytes``.ESP.life.in.bytes.<1 |
125340 | 30 32 34 2d 32 36 38 34 33 35 34 35 36 30 30 30 30 30 3e 2e 20 4e 75 6d 62 65 72 20 6f 66 20 62 | 024-26843545600000>..Number.of.b |
125360 | 79 74 65 73 20 74 72 61 6e 73 6d 69 74 74 65 64 20 6f 76 65 72 20 61 6e 20 49 50 73 65 63 20 53 | ytes.transmitted.over.an.IPsec.S |
125380 | 41 20 62 65 66 6f 72 65 20 69 74 20 65 78 70 69 72 65 73 3b 00 60 60 6c 69 66 65 2d 70 61 63 6b | A.before.it.expires;.``life-pack |
1253a0 | 65 74 73 60 60 20 45 53 50 20 6c 69 66 65 20 69 6e 20 70 61 63 6b 65 74 73 20 3c 31 30 30 30 2d | ets``.ESP.life.in.packets.<1000- |
1253c0 | 32 36 38 34 33 35 34 35 36 30 30 30 30 30 3e 2e 20 4e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 | 26843545600000>..Number.of.packe |
1253e0 | 74 73 20 74 72 61 6e 73 6d 69 74 74 65 64 20 6f 76 65 72 20 61 6e 20 49 50 73 65 63 20 53 41 20 | ts.transmitted.over.an.IPsec.SA. |
125400 | 62 65 66 6f 72 65 20 69 74 20 65 78 70 69 72 65 73 3b 00 60 60 6c 69 66 65 74 69 6d 65 60 60 20 | before.it.expires;.``lifetime``. |
125420 | 45 53 50 20 6c 69 66 65 74 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 20 3c 33 30 2d 38 36 34 30 | ESP.lifetime.in.seconds.<30-8640 |
125440 | 30 3e 20 28 64 65 66 61 75 6c 74 20 33 36 30 30 29 2e 20 48 6f 77 20 6c 6f 6e 67 20 61 20 70 61 | 0>.(default.3600)..How.long.a.pa |
125460 | 72 74 69 63 75 6c 61 72 20 69 6e 73 74 61 6e 63 65 20 6f 66 20 61 20 63 6f 6e 6e 65 63 74 69 6f | rticular.instance.of.a.connectio |
125480 | 6e 20 28 61 20 73 65 74 20 6f 66 20 65 6e 63 72 79 70 74 69 6f 6e 2f 61 75 74 68 65 6e 74 69 63 | n.(a.set.of.encryption/authentic |
1254a0 | 61 74 69 6f 6e 20 6b 65 79 73 20 66 6f 72 20 75 73 65 72 20 70 61 63 6b 65 74 73 29 20 73 68 6f | ation.keys.for.user.packets).sho |
1254c0 | 75 6c 64 20 6c 61 73 74 2c 20 66 72 6f 6d 20 73 75 63 63 65 73 73 66 75 6c 20 6e 65 67 6f 74 69 | uld.last,.from.successful.negoti |
1254e0 | 61 74 69 6f 6e 20 74 6f 20 65 78 70 69 72 79 3b 00 60 60 6c 69 66 65 74 69 6d 65 60 60 20 49 4b | ation.to.expiry;.``lifetime``.IK |
125500 | 45 20 6c 69 66 65 74 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 20 3c 30 2d 38 36 34 30 30 3e 20 | E.lifetime.in.seconds.<0-86400>. |
125520 | 28 64 65 66 61 75 6c 74 20 32 38 38 30 30 29 3b 00 60 60 6c 69 66 65 74 69 6d 65 60 60 20 49 4b | (default.28800);.``lifetime``.IK |
125540 | 45 20 6c 69 66 65 74 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 20 3c 33 30 2d 38 36 34 30 30 3e | E.lifetime.in.seconds.<30-86400> |
125560 | 20 28 64 65 66 61 75 6c 74 20 32 38 38 30 30 29 3b 00 60 60 6c 6c 67 72 2d 73 74 61 6c 65 60 60 | .(default.28800);.``llgr-stale`` |
125580 | 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 | .-...................Well-known. |
1255a0 | 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 4c 4c 47 52 5f 53 54 41 4c 45 20 30 78 46 | communities.value.LLGR_STALE.0xF |
1255c0 | 46 46 46 30 30 30 36 00 60 60 6c 6f 63 61 6c 2d 61 64 64 72 65 73 73 60 60 20 2d 20 6c 6f 63 61 | FFF0006.``local-address``.-.loca |
1255e0 | 6c 20 49 50 20 61 64 64 72 65 73 73 20 66 6f 72 20 49 50 53 65 63 20 63 6f 6e 6e 65 63 74 69 6f | l.IP.address.for.IPSec.connectio |
125600 | 6e 20 77 69 74 68 20 74 68 69 73 20 70 65 65 72 2e 20 49 66 20 64 65 66 69 6e 65 64 20 60 60 61 | n.with.this.peer..If.defined.``a |
125620 | 6e 79 60 60 2c 20 74 68 65 6e 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 77 68 69 63 68 20 63 | ny``,.then.an.IP.address.which.c |
125640 | 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 64 65 66 61 | onfigured.on.interface.with.defa |
125660 | 75 6c 74 20 72 6f 75 74 65 20 77 69 6c 6c 20 62 65 20 75 73 65 64 3b 00 60 60 6c 6f 63 61 6c 2d | ult.route.will.be.used;.``local- |
125680 | 61 73 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d | as``.-.....................Well- |
1256a0 | 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 4e 4f 5f 45 58 50 4f 52 | known.communities.value.NO_EXPOR |
1256c0 | 54 5f 53 55 42 43 4f 4e 46 45 44 20 30 78 46 46 46 46 46 46 30 33 00 60 60 6c 6f 63 61 6c 2d 69 | T_SUBCONFED.0xFFFFFF03.``local-i |
1256e0 | 64 60 60 20 2d 20 49 44 20 66 6f 72 20 74 68 65 20 6c 6f 63 61 6c 20 56 79 4f 53 20 72 6f 75 74 | d``.-.ID.for.the.local.VyOS.rout |
125700 | 65 72 2e 20 49 66 20 64 65 66 69 6e 65 64 2c 20 64 75 72 69 6e 67 20 74 68 65 20 61 75 74 68 65 | er..If.defined,.during.the.authe |
125720 | 6e 74 69 63 61 74 69 6f 6e 20 69 74 20 77 69 6c 6c 20 62 65 20 73 65 6e 64 20 74 6f 20 72 65 6d | ntication.it.will.be.send.to.rem |
125740 | 6f 74 65 20 70 65 65 72 3b 00 60 60 6c 6f 63 61 6c 2d 6b 65 79 60 60 20 2d 20 6e 61 6d 65 20 6f | ote.peer;.``local-key``.-.name.o |
125760 | 66 20 50 4b 49 20 6b 65 79 2d 70 61 69 72 20 77 69 74 68 20 6c 6f 63 61 6c 20 70 72 69 76 61 74 | f.PKI.key-pair.with.local.privat |
125780 | 65 20 6b 65 79 00 60 60 6c 6f 63 61 6c 60 60 20 2d 20 64 65 66 69 6e 65 20 61 20 6c 6f 63 61 6c | e.key.``local``.-.define.a.local |
1257a0 | 20 73 6f 75 72 63 65 20 66 6f 72 20 6d 61 74 63 68 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 | .source.for.match.traffic,.which |
1257c0 | 20 73 68 6f 75 6c 64 20 62 65 20 65 6e 63 72 79 70 74 65 64 20 61 6e 64 20 73 65 6e 64 20 74 6f | .should.be.encrypted.and.send.to |
1257e0 | 20 74 68 69 73 20 70 65 65 72 3a 00 60 60 6c 6f 63 61 6c 60 60 3a 20 52 75 6c 65 73 65 74 20 66 | .this.peer:.``local``:.Ruleset.f |
125800 | 6f 72 20 70 61 63 6b 65 74 73 20 64 65 73 74 69 6e 65 64 20 66 6f 72 20 74 68 69 73 20 72 6f 75 | or.packets.destined.for.this.rou |
125820 | 74 65 72 00 60 60 6d 60 60 20 2d 20 45 78 65 63 75 74 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 69 | ter.``m``.-.Execution.interval.i |
125840 | 6e 20 6d 69 6e 75 74 65 73 00 60 60 6d 61 69 6e 60 60 20 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 | n.minutes.``main``.Routing.table |
125860 | 20 75 73 65 64 20 62 79 20 56 79 4f 53 20 61 6e 64 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 | .used.by.VyOS.and.other.interfac |
125880 | 65 73 20 6e 6f 74 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 69 6e 20 50 42 52 00 60 60 6d 61 | es.not.participating.in.PBR.``ma |
1258a0 | 69 6e 60 60 20 75 73 65 20 4d 61 69 6e 20 6d 6f 64 65 20 66 6f 72 20 4b 65 79 20 45 78 63 68 61 | in``.use.Main.mode.for.Key.Excha |
1258c0 | 6e 67 65 73 20 69 6e 20 74 68 65 20 49 4b 45 76 31 20 50 72 6f 74 6f 63 6f 6c 20 28 52 65 63 6f | nges.in.the.IKEv1.Protocol.(Reco |
1258e0 | 6d 6d 65 6e 64 65 64 20 44 65 66 61 75 6c 74 29 3b 00 60 60 6d 65 73 73 61 67 65 60 60 3a 20 46 | mmended.Default);.``message``:.F |
125900 | 75 6c 6c 20 6d 65 73 73 61 67 65 20 74 68 61 74 20 68 61 73 20 74 72 69 67 67 65 72 65 64 20 74 | ull.message.that.has.triggered.t |
125920 | 68 65 20 73 63 72 69 70 74 2e 00 60 60 6d 69 74 69 67 61 74 69 6f 6e 73 3d 6f 66 66 60 60 00 60 | he.script..``mitigations=off``.` |
125940 | 60 6d 6f 62 69 6b 65 60 60 20 65 6e 61 62 6c 65 20 4d 4f 42 49 4b 45 20 53 75 70 70 6f 72 74 2e | `mobike``.enable.MOBIKE.Support. |
125960 | 20 4d 4f 42 49 4b 45 20 69 73 20 6f 6e 6c 79 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 49 4b | .MOBIKE.is.only.available.for.IK |
125980 | 45 76 32 3a 00 60 60 6d 6f 64 65 60 60 20 2d 20 6d 6f 64 65 20 66 6f 72 20 61 75 74 68 65 6e 74 | Ev2:.``mode``.-.mode.for.authent |
1259a0 | 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 56 79 4f 53 20 61 6e 64 20 72 65 6d 6f 74 65 20 | ication.between.VyOS.and.remote. |
1259c0 | 70 65 65 72 3a 00 60 60 6d 6f 64 65 60 60 20 49 4b 45 76 31 20 50 68 61 73 65 20 31 20 4d 6f 64 | peer:.``mode``.IKEv1.Phase.1.Mod |
1259e0 | 65 20 53 65 6c 65 63 74 69 6f 6e 3a 00 60 60 6d 6f 64 65 60 60 20 74 68 65 20 74 79 70 65 20 6f | e.Selection:.``mode``.the.type.o |
125a00 | 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 00 60 60 6d 6f 6e 69 74 6f 72 60 60 20 2d 20 | f.the.connection:.``monitor``.-. |
125a20 | 50 61 73 73 69 76 65 6c 79 20 6d 6f 6e 69 74 6f 72 20 61 6c 6c 20 70 61 63 6b 65 74 73 20 6f 6e | Passively.monitor.all.packets.on |
125a40 | 20 74 68 65 20 66 72 65 71 75 65 6e 63 79 2f 63 68 61 6e 6e 65 6c 00 60 60 6d 75 6c 74 69 2d 75 | .the.frequency/channel.``multi-u |
125a60 | 73 65 72 2d 62 65 61 6d 66 6f 72 6d 65 65 60 60 20 2d 20 53 75 70 70 6f 72 74 20 66 6f 72 20 6f | ser-beamformee``.-.Support.for.o |
125a80 | 70 65 72 61 74 69 6f 6e 20 61 73 20 73 69 6e 67 6c 65 20 75 73 65 72 20 62 65 61 6d 66 6f 72 6d | peration.as.single.user.beamform |
125aa0 | 65 72 00 60 60 6d 75 6c 74 69 2d 75 73 65 72 2d 62 65 61 6d 66 6f 72 6d 65 72 60 60 20 2d 20 53 | er.``multi-user-beamformer``.-.S |
125ac0 | 75 70 70 6f 72 74 20 66 6f 72 20 6f 70 65 72 61 74 69 6f 6e 20 61 73 20 73 69 6e 67 6c 65 20 75 | upport.for.operation.as.single.u |
125ae0 | 73 65 72 20 62 65 61 6d 66 6f 72 6d 65 72 00 60 60 6e 60 60 20 2d 20 38 30 32 2e 31 31 6e 20 2d | ser.beamformer.``n``.-.802.11n.- |
125b00 | 20 36 30 30 20 4d 62 69 74 73 2f 73 65 63 00 60 60 6e 61 6d 65 60 60 20 69 73 20 75 73 65 64 20 | .600.Mbits/sec.``name``.is.used. |
125b20 | 66 6f 72 20 74 68 65 20 56 79 4f 53 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 64 65 6e | for.the.VyOS.CLI.command.to.iden |
125b40 | 74 69 66 79 20 74 68 69 73 20 6b 65 79 2e 20 54 68 69 73 20 6b 65 79 20 60 60 6e 61 6d 65 60 60 | tify.this.key..This.key.``name`` |
125b60 | 20 69 73 20 74 68 65 6e 20 75 73 65 64 20 69 6e 20 74 68 65 20 43 4c 49 20 63 6f 6e 66 69 67 75 | .is.then.used.in.the.CLI.configu |
125b80 | 72 61 74 69 6f 6e 20 74 6f 20 72 65 66 65 72 65 6e 63 65 20 74 68 65 20 6b 65 79 20 69 6e 73 74 | ration.to.reference.the.key.inst |
125ba0 | 61 6e 63 65 2e 00 60 60 6e 65 74 2e 69 70 76 34 2e 63 6f 6e 66 2e 61 6c 6c 2e 61 63 63 65 70 74 | ance..``net.ipv4.conf.all.accept |
125bc0 | 5f 72 65 64 69 72 65 63 74 73 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e 63 6f 6e 66 2e 61 6c 6c | _redirects``.``net.ipv4.conf.all |
125be0 | 2e 61 63 63 65 70 74 5f 73 6f 75 72 63 65 5f 72 6f 75 74 65 60 60 00 60 60 6e 65 74 2e 69 70 76 | .accept_source_route``.``net.ipv |
125c00 | 34 2e 63 6f 6e 66 2e 61 6c 6c 2e 6c 6f 67 5f 6d 61 72 74 69 61 6e 73 60 60 00 60 60 6e 65 74 2e | 4.conf.all.log_martians``.``net. |
125c20 | 69 70 76 34 2e 63 6f 6e 66 2e 61 6c 6c 2e 72 70 5f 66 69 6c 74 65 72 60 60 00 60 60 6e 65 74 2e | ipv4.conf.all.rp_filter``.``net. |
125c40 | 69 70 76 34 2e 63 6f 6e 66 2e 61 6c 6c 2e 73 65 6e 64 5f 72 65 64 69 72 65 63 74 73 60 60 00 60 | ipv4.conf.all.send_redirects``.` |
125c60 | 60 6e 65 74 2e 69 70 76 34 2e 69 63 6d 70 5f 65 63 68 6f 5f 69 67 6e 6f 72 65 5f 62 72 6f 61 64 | `net.ipv4.icmp_echo_ignore_broad |
125c80 | 63 61 73 74 73 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e 74 63 70 5f 72 66 63 31 33 33 37 60 60 | casts``.``net.ipv4.tcp_rfc1337`` |
125ca0 | 00 60 60 6e 65 74 2e 69 70 76 34 2e 74 63 70 5f 73 79 6e 63 6f 6f 6b 69 65 73 60 60 00 60 60 6e | .``net.ipv4.tcp_syncookies``.``n |
125cc0 | 65 74 2e 69 70 76 36 2e 63 6f 6e 66 2e 61 6c 6c 2e 61 63 63 65 70 74 5f 72 65 64 69 72 65 63 74 | et.ipv6.conf.all.accept_redirect |
125ce0 | 73 60 60 00 60 60 6e 65 74 2e 69 70 76 36 2e 63 6f 6e 66 2e 61 6c 6c 2e 61 63 63 65 70 74 5f 73 | s``.``net.ipv6.conf.all.accept_s |
125d00 | 6f 75 72 63 65 5f 72 6f 75 74 65 60 60 00 60 60 6e 6f 2d 61 64 76 65 72 74 69 73 65 60 60 20 2d | ource_route``.``no-advertise``.- |
125d20 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d | .................Well-known.comm |
125d40 | 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 4e 4f 5f 41 44 56 45 52 54 49 53 45 20 30 78 46 46 46 | unities.value.NO_ADVERTISE.0xFFF |
125d60 | 46 46 46 30 32 00 60 60 6e 6f 2d 65 78 70 6f 72 74 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 | FFF02.``no-export``.-........... |
125d80 | 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 | .........Well-known.communities. |
125da0 | 76 61 6c 75 65 20 4e 4f 5f 45 58 50 4f 52 54 20 30 78 46 46 46 46 46 46 30 31 00 60 60 6e 6f 2d | value.NO_EXPORT.0xFFFFFF01.``no- |
125dc0 | 6c 6c 67 72 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 | llgr``.-......................We |
125de0 | 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 4e 4f 5f 4c 4c | ll-known.communities.value.NO_LL |
125e00 | 47 52 20 30 78 46 46 46 46 30 30 30 37 00 60 60 6e 6f 2d 70 65 65 72 60 60 20 2d 20 20 20 20 20 | GR.0xFFFF0007.``no-peer``.-..... |
125e20 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d | .................Well-known.comm |
125e40 | 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 4e 4f 50 45 45 52 20 30 78 46 46 46 46 46 46 30 34 00 | unities.value.NOPEER.0xFFFFFF04. |
125e60 | 60 60 6e 6f 60 60 20 64 69 73 61 62 6c 65 20 72 65 6d 6f 74 65 20 68 6f 73 74 20 72 65 2d 61 75 | ``no``.disable.remote.host.re-au |
125e80 | 74 68 65 6e 74 69 63 61 74 6f 6e 20 64 75 72 69 6e 67 20 61 6e 20 49 4b 45 20 72 65 6b 65 79 3b | thenticaton.during.an.IKE.rekey; |
125ea0 | 00 60 60 6e 6f 6e 65 60 60 20 2d 20 45 78 65 63 75 74 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 69 | .``none``.-.Execution.interval.i |
125ec0 | 6e 20 6d 69 6e 75 74 65 73 00 60 60 6e 6f 6e 65 60 60 20 2d 20 6c 6f 61 64 73 20 74 68 65 20 63 | n.minutes.``none``.-.loads.the.c |
125ee0 | 6f 6e 6e 65 63 74 69 6f 6e 20 6f 6e 6c 79 2c 20 77 68 69 63 68 20 74 68 65 6e 20 63 61 6e 20 62 | onnection.only,.which.then.can.b |
125f00 | 65 20 6d 61 6e 75 61 6c 6c 79 20 69 6e 69 74 69 61 74 65 64 20 6f 72 20 75 73 65 64 20 61 73 20 | e.manually.initiated.or.used.as. |
125f20 | 61 20 72 65 73 70 6f 6e 64 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 60 60 6e 6f 6e | a.responder.configuration..``non |
125f40 | 65 60 60 20 73 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 6e 6f 6e 65 20 28 64 65 66 61 75 6c 74 29 | e``.set.action.to.none.(default) |
125f60 | 3b 00 60 60 6e 6f 73 65 6c 65 63 74 60 60 20 6d 61 72 6b 73 20 74 68 65 20 73 65 72 76 65 72 20 | ;.``noselect``.marks.the.server. |
125f80 | 61 73 20 75 6e 75 73 65 64 2c 20 65 78 63 65 70 74 20 66 6f 72 20 64 69 73 70 6c 61 79 20 70 75 | as.unused,.except.for.display.pu |
125fa0 | 72 70 6f 73 65 73 2e 20 54 68 65 20 73 65 72 76 65 72 20 69 73 20 64 69 73 63 61 72 64 65 64 20 | rposes..The.server.is.discarded. |
125fc0 | 62 79 20 74 68 65 20 73 65 6c 65 63 74 69 6f 6e 20 61 6c 67 6f 72 69 74 68 6d 2e 00 60 60 6e 74 | by.the.selection.algorithm..``nt |
125fe0 | 73 60 60 20 65 6e 61 62 6c 65 73 20 4e 65 74 77 6f 72 6b 20 54 69 6d 65 20 53 65 63 75 72 69 74 | s``.enables.Network.Time.Securit |
126000 | 79 20 28 4e 54 53 29 20 66 6f 72 20 74 68 65 20 73 65 72 76 65 72 20 61 73 20 73 70 65 63 69 66 | y.(NTS).for.the.server.as.specif |
126020 | 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 38 39 31 35 60 00 60 60 6f 70 74 69 6f 6e 73 60 60 00 60 | ied.in.:rfc:`8915`.``options``.` |
126040 | 60 6f 73 70 66 60 60 20 2d 20 4f 70 65 6e 20 53 68 6f 72 74 65 73 74 20 50 61 74 68 20 46 69 72 | `ospf``.-.Open.Shortest.Path.Fir |
126060 | 73 74 20 28 4f 53 50 46 76 32 29 00 60 60 6f 73 70 66 76 33 60 60 20 2d 20 4f 70 65 6e 20 53 68 | st.(OSPFv2).``ospfv3``.-.Open.Sh |
126080 | 6f 72 74 65 73 74 20 50 61 74 68 20 46 69 72 73 74 20 28 49 50 76 36 29 20 28 4f 53 50 46 76 33 | ortest.Path.First.(IPv6).(OSPFv3 |
1260a0 | 29 00 60 60 6f 75 74 60 60 3a 20 52 75 6c 65 73 65 74 20 66 6f 72 20 66 6f 72 77 61 72 64 65 64 | ).``out``:.Ruleset.for.forwarded |
1260c0 | 20 70 61 63 6b 65 74 73 20 6f 6e 20 61 6e 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 | .packets.on.an.outbound.interfac |
1260e0 | 65 00 60 60 70 61 73 73 70 68 72 61 73 65 60 60 20 2d 20 6c 6f 63 61 6c 20 70 72 69 76 61 74 65 | e.``passphrase``.-.local.private |
126100 | 20 6b 65 79 20 70 61 73 73 70 68 72 61 73 65 00 60 60 70 61 73 73 70 68 72 61 73 65 60 60 20 2d | .key.passphrase.``passphrase``.- |
126120 | 20 70 72 69 76 61 74 65 20 6b 65 79 20 70 61 73 73 70 68 72 61 73 65 2c 20 69 66 20 6e 65 65 64 | .private.key.passphrase,.if.need |
126140 | 65 64 2e 00 60 60 70 61 73 73 77 6f 72 64 60 60 20 2d 20 70 61 73 73 70 68 72 61 73 65 20 70 72 | ed..``password``.-.passphrase.pr |
126160 | 69 76 61 74 65 20 6b 65 79 2c 20 69 66 20 6e 65 65 64 65 64 2e 00 60 60 70 65 65 72 60 60 20 69 | ivate.key,.if.needed..``peer``.i |
126180 | 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 56 79 4f 53 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 | s.used.for.the.VyOS.CLI.command. |
1261a0 | 74 6f 20 69 64 65 6e 74 69 66 79 20 74 68 65 20 57 69 72 65 47 75 61 72 64 20 70 65 65 72 20 77 | to.identify.the.WireGuard.peer.w |
1261c0 | 68 65 72 65 20 74 68 69 73 20 73 65 63 72 65 64 20 69 73 20 74 6f 20 62 65 20 75 73 65 64 2e 00 | here.this.secred.is.to.be.used.. |
1261e0 | 60 60 70 65 72 69 6f 64 60 60 3a 20 54 69 6d 65 20 77 69 6e 64 6f 77 20 66 6f 72 20 72 61 74 65 | ``period``:.Time.window.for.rate |
126200 | 20 63 61 6c 63 75 6c 61 74 69 6f 6e 2e 20 50 6f 73 73 69 62 6c 65 20 76 61 6c 75 65 73 3a 20 60 | .calculation..Possible.values:.` |
126220 | 60 73 65 63 6f 6e 64 60 60 20 28 6f 6e 65 20 73 65 63 6f 6e 64 29 2c 20 60 60 6d 69 6e 75 74 65 | `second``.(one.second),.``minute |
126240 | 60 60 20 28 6f 6e 65 20 6d 69 6e 75 74 65 29 2c 20 60 60 68 6f 75 72 60 60 20 28 6f 6e 65 20 68 | ``.(one.minute),.``hour``.(one.h |
126260 | 6f 75 72 29 2e 20 44 65 66 61 75 6c 74 20 69 73 20 60 60 73 65 63 6f 6e 64 60 60 2e 00 60 60 70 | our)..Default.is.``second``..``p |
126280 | 66 73 60 60 20 77 68 65 74 68 65 72 20 50 65 72 66 65 63 74 20 46 6f 72 77 61 72 64 20 53 65 63 | fs``.whether.Perfect.Forward.Sec |
1262a0 | 72 65 63 79 20 6f 66 20 6b 65 79 73 20 69 73 20 64 65 73 69 72 65 64 20 6f 6e 20 74 68 65 20 63 | recy.of.keys.is.desired.on.the.c |
1262c0 | 6f 6e 6e 65 63 74 69 6f 6e 27 73 20 6b 65 79 69 6e 67 20 63 68 61 6e 6e 65 6c 20 61 6e 64 20 64 | onnection's.keying.channel.and.d |
1262e0 | 65 66 69 6e 65 73 20 61 20 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 67 72 6f 75 70 20 66 6f | efines.a.Diffie-Hellman.group.fo |
126300 | 72 20 50 46 53 3a 00 60 60 70 6f 6f 6c 60 60 20 6d 6f 62 69 6c 69 7a 65 73 20 70 65 72 73 69 73 | r.PFS:.``pool``.mobilizes.persis |
126320 | 74 65 6e 74 20 63 6c 69 65 6e 74 20 6d 6f 64 65 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 77 69 74 | tent.client.mode.association.wit |
126340 | 68 20 61 20 6e 75 6d 62 65 72 20 6f 66 20 72 65 6d 6f 74 65 20 73 65 72 76 65 72 73 2e 00 60 60 | h.a.number.of.remote.servers..`` |
126360 | 70 6f 72 74 60 60 20 2d 20 64 65 66 69 6e 65 20 70 6f 72 74 2e 20 48 61 76 65 20 65 66 66 65 63 | port``.-.define.port..Have.effec |
126380 | 74 20 6f 6e 6c 79 20 77 68 65 6e 20 75 73 65 64 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 60 | t.only.when.used.together.with.` |
1263a0 | 60 70 72 65 66 69 78 60 60 3b 00 60 60 70 72 65 2d 73 68 61 72 65 64 2d 73 65 63 72 65 74 60 60 | `prefix``;.``pre-shared-secret`` |
1263c0 | 20 2d 20 75 73 65 20 70 72 65 64 65 66 69 6e 65 64 20 73 68 61 72 65 64 20 73 65 63 72 65 74 20 | .-.use.predefined.shared.secret. |
1263e0 | 70 68 72 61 73 65 3b 00 60 60 70 72 65 66 65 72 60 60 20 6d 61 72 6b 73 20 74 68 65 20 73 65 72 | phrase;.``prefer``.marks.the.ser |
126400 | 76 65 72 20 61 73 20 70 72 65 66 65 72 72 65 64 2e 20 41 6c 6c 20 6f 74 68 65 72 20 74 68 69 6e | ver.as.preferred..All.other.thin |
126420 | 67 73 20 62 65 69 6e 67 20 65 71 75 61 6c 2c 20 74 68 69 73 20 68 6f 73 74 20 77 69 6c 6c 20 62 | gs.being.equal,.this.host.will.b |
126440 | 65 20 63 68 6f 73 65 6e 20 66 6f 72 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 61 6d 6f | e.chosen.for.synchronization.amo |
126460 | 6e 67 20 61 20 73 65 74 20 6f 66 20 63 6f 72 72 65 63 74 6c 79 20 6f 70 65 72 61 74 69 6e 67 20 | ng.a.set.of.correctly.operating. |
126480 | 68 6f 73 74 73 2e 00 60 60 70 72 65 66 69 78 60 60 20 2d 20 49 50 20 6e 65 74 77 6f 72 6b 20 61 | hosts..``prefix``.-.IP.network.a |
1264a0 | 74 20 6c 6f 63 61 6c 20 73 69 64 65 2e 00 60 60 70 72 65 66 69 78 60 60 20 2d 20 49 50 20 6e 65 | t.local.side..``prefix``.-.IP.ne |
1264c0 | 74 77 6f 72 6b 20 61 74 20 72 65 6d 6f 74 65 20 73 69 64 65 2e 00 60 60 70 72 66 60 60 20 70 73 | twork.at.remote.side..``prf``.ps |
1264e0 | 65 75 64 6f 2d 72 61 6e 64 6f 6d 20 66 75 6e 63 74 69 6f 6e 2e 00 60 60 70 72 69 6f 72 69 74 79 | eudo-random.function..``priority |
126500 | 60 60 20 2d 20 41 64 64 20 70 72 69 6f 72 69 74 79 20 66 6f 72 20 70 6f 6c 69 63 79 2d 62 61 73 | ``.-.Add.priority.for.policy-bas |
126520 | 65 64 20 49 50 53 65 63 20 56 50 4e 20 74 75 6e 6e 65 6c 73 28 6c 6f 77 65 73 74 20 76 61 6c 75 | ed.IPSec.VPN.tunnels(lowest.valu |
126540 | 65 20 6d 6f 72 65 20 70 72 65 66 65 72 61 62 6c 65 29 00 60 60 70 72 6f 63 65 73 73 6f 72 2e 6d | e.more.preferable).``processor.m |
126560 | 61 78 5f 63 73 74 61 74 65 3d 31 60 60 20 4c 69 6d 69 74 20 70 72 6f 63 65 73 73 6f 72 20 74 6f | ax_cstate=1``.Limit.processor.to |
126580 | 20 6d 61 78 69 6d 75 6d 20 43 2d 73 74 61 74 65 20 31 00 60 60 70 72 6f 70 6f 73 61 6c 60 60 20 | .maximum.C-state.1.``proposal``. |
1265a0 | 45 53 50 2d 67 72 6f 75 70 20 70 72 6f 70 6f 73 61 6c 20 77 69 74 68 20 6e 75 6d 62 65 72 20 3c | ESP-group.proposal.with.number.< |
1265c0 | 31 2d 36 35 35 33 35 3e 3a 00 60 60 70 72 6f 70 6f 73 61 6c 60 60 20 74 68 65 20 6c 69 73 74 20 | 1-65535>:.``proposal``.the.list. |
1265e0 | 6f 66 20 70 72 6f 70 6f 73 61 6c 73 20 61 6e 64 20 74 68 65 69 72 20 70 61 72 61 6d 65 74 65 72 | of.proposals.and.their.parameter |
126600 | 73 3a 00 60 60 70 72 6f 74 6f 63 6f 6c 60 60 20 2d 20 64 65 66 69 6e 65 20 74 68 65 20 70 72 6f | s:.``protocol``.-.define.the.pro |
126620 | 74 6f 63 6f 6c 20 66 6f 72 20 6d 61 74 63 68 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 73 | tocol.for.match.traffic,.which.s |
126640 | 68 6f 75 6c 64 20 62 65 20 65 6e 63 72 79 70 74 65 64 20 61 6e 64 20 73 65 6e 64 20 74 6f 20 74 | hould.be.encrypted.and.send.to.t |
126660 | 68 69 73 20 70 65 65 72 3b 00 60 60 70 73 6b 60 60 20 2d 20 50 72 65 73 68 61 72 65 64 20 73 65 | his.peer;.``psk``.-.Preshared.se |
126680 | 63 72 65 74 20 6b 65 79 20 6e 61 6d 65 3a 00 60 60 71 75 65 75 65 60 60 3a 20 45 6e 71 75 65 75 | cret.key.name:.``queue``:.Enqueu |
1266a0 | 65 20 70 61 63 6b 65 74 20 74 6f 20 75 73 65 72 73 70 61 63 65 2e 00 60 60 72 61 74 65 60 60 3a | e.packet.to.userspace..``rate``: |
1266c0 | 20 4e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 2e 20 44 65 66 61 75 6c 74 20 35 2e 00 60 | .Number.of.packets..Default.5..` |
1266e0 | 60 72 65 6a 65 63 74 60 60 3a 20 72 65 6a 65 63 74 20 74 68 65 20 70 61 63 6b 65 74 2e 00 60 60 | `reject``:.reject.the.packet..`` |
126700 | 72 65 6d 6f 74 65 2d 61 64 64 72 65 73 73 60 60 20 2d 20 72 65 6d 6f 74 65 20 49 50 20 61 64 64 | remote-address``.-.remote.IP.add |
126720 | 72 65 73 73 20 6f 72 20 68 6f 73 74 6e 61 6d 65 20 66 6f 72 20 49 50 53 65 63 20 63 6f 6e 6e 65 | ress.or.hostname.for.IPSec.conne |
126740 | 63 74 69 6f 6e 2e 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 20 69 73 20 75 | ction..IPv4.or.IPv6.address.is.u |
126760 | 73 65 64 20 77 68 65 6e 20 61 20 70 65 65 72 20 68 61 73 20 61 20 70 75 62 6c 69 63 20 73 74 61 | sed.when.a.peer.has.a.public.sta |
126780 | 74 69 63 20 49 50 20 61 64 64 72 65 73 73 2e 20 48 6f 73 74 6e 61 6d 65 20 69 73 20 61 20 44 4e | tic.IP.address..Hostname.is.a.DN |
1267a0 | 53 20 6e 61 6d 65 20 77 68 69 63 68 20 63 6f 75 6c 64 20 62 65 20 75 73 65 64 20 77 68 65 6e 20 | S.name.which.could.be.used.when. |
1267c0 | 61 20 70 65 65 72 20 68 61 73 20 61 20 70 75 62 6c 69 63 20 49 50 20 61 64 64 72 65 73 73 20 61 | a.peer.has.a.public.IP.address.a |
1267e0 | 6e 64 20 44 4e 53 20 6e 61 6d 65 2c 20 62 75 74 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 63 | nd.DNS.name,.but.an.IP.address.c |
126800 | 6f 75 6c 64 20 62 65 20 63 68 61 6e 67 65 64 20 66 72 6f 6d 20 74 69 6d 65 20 74 6f 20 74 69 6d | ould.be.changed.from.time.to.tim |
126820 | 65 2e 00 60 60 72 65 6d 6f 74 65 2d 69 64 60 60 20 2d 20 64 65 66 69 6e 65 20 61 6e 20 49 44 20 | e..``remote-id``.-.define.an.ID. |
126840 | 66 6f 72 20 72 65 6d 6f 74 65 20 70 65 65 72 2c 20 69 6e 73 74 65 61 64 20 6f 66 20 75 73 69 6e | for.remote.peer,.instead.of.usin |
126860 | 67 20 70 65 65 72 20 6e 61 6d 65 20 6f 72 20 61 64 64 72 65 73 73 2e 20 55 73 65 66 75 6c 20 69 | g.peer.name.or.address..Useful.i |
126880 | 6e 20 63 61 73 65 20 69 66 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 69 73 20 62 65 68 | n.case.if.the.remote.peer.is.beh |
1268a0 | 69 6e 64 20 4e 41 54 20 6f 72 20 69 66 20 60 60 6d 6f 64 65 20 78 35 30 39 60 60 20 69 73 20 75 | ind.NAT.or.if.``mode.x509``.is.u |
1268c0 | 73 65 64 3b 00 60 60 72 65 6d 6f 74 65 2d 6b 65 79 60 60 20 2d 20 6e 61 6d 65 20 6f 66 20 50 4b | sed;.``remote-key``.-.name.of.PK |
1268e0 | 49 20 6b 65 79 2d 70 61 69 72 20 77 69 74 68 20 72 65 6d 6f 74 65 20 70 75 62 6c 69 63 20 6b 65 | I.key-pair.with.remote.public.ke |
126900 | 79 00 60 60 72 65 6d 6f 74 65 60 60 20 2d 20 64 65 66 69 6e 65 20 74 68 65 20 72 65 6d 6f 74 65 | y.``remote``.-.define.the.remote |
126920 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 66 6f 72 20 6d 61 74 63 68 20 74 72 61 66 66 69 63 2c 20 | .destination.for.match.traffic,. |
126940 | 77 68 69 63 68 20 73 68 6f 75 6c 64 20 62 65 20 65 6e 63 72 79 70 74 65 64 20 61 6e 64 20 73 65 | which.should.be.encrypted.and.se |
126960 | 6e 64 20 74 6f 20 74 68 69 73 20 70 65 65 72 3a 00 60 60 72 65 70 6c 61 79 2d 77 69 6e 64 6f 77 | nd.to.this.peer:.``replay-window |
126980 | 60 60 20 2d 20 49 50 73 65 63 20 72 65 70 6c 61 79 20 77 69 6e 64 6f 77 20 74 6f 20 63 6f 6e 66 | ``.-.IPsec.replay.window.to.conf |
1269a0 | 69 67 75 72 65 20 66 6f 72 20 74 68 69 73 20 43 48 49 4c 44 5f 53 41 20 28 64 65 66 61 75 6c 74 | igure.for.this.CHILD_SA.(default |
1269c0 | 3a 20 33 32 29 2c 20 61 20 76 61 6c 75 65 20 6f 66 20 30 20 64 69 73 61 62 6c 65 73 20 49 50 73 | :.32),.a.value.of.0.disables.IPs |
1269e0 | 65 63 20 72 65 70 6c 61 79 20 70 72 6f 74 65 63 74 69 6f 6e 00 60 60 72 65 71 2d 73 73 6c 2d 73 | ec.replay.protection.``req-ssl-s |
126a00 | 6e 69 60 60 20 53 53 4c 20 53 65 72 76 65 72 20 4e 61 6d 65 20 49 6e 64 69 63 61 74 69 6f 6e 20 | ni``.SSL.Server.Name.Indication. |
126a20 | 28 53 4e 49 29 20 72 65 71 75 65 73 74 20 6d 61 74 63 68 00 60 60 72 65 73 70 2d 74 69 6d 65 60 | (SNI).request.match.``resp-time` |
126a40 | 60 3a 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 72 65 73 70 6f 6e 73 65 20 74 69 6d 65 20 66 6f 72 | `:.the.maximum.response.time.for |
126a60 | 20 70 69 6e 67 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 52 61 6e 67 65 20 31 2e 2e 2e 33 30 2c 20 | .ping.in.seconds..Range.1...30,. |
126a80 | 64 65 66 61 75 6c 74 20 35 00 60 60 72 65 73 70 6f 6e 64 60 60 20 2d 20 64 6f 65 73 20 6e 6f 74 | default.5.``respond``.-.does.not |
126aa0 | 20 74 72 79 20 74 6f 20 69 6e 69 74 69 61 74 65 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f | .try.to.initiate.a.connection.to |
126ac0 | 20 61 20 72 65 6d 6f 74 65 20 70 65 65 72 2e 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 2c 20 74 68 | .a.remote.peer..In.this.mode,.th |
126ae0 | 65 20 49 50 53 65 63 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 65 73 74 61 62 6c 69 73 | e.IPSec.session.will.be.establis |
126b00 | 68 65 64 20 6f 6e 6c 79 20 61 66 74 65 72 20 69 6e 69 74 69 61 74 69 6f 6e 20 66 72 6f 6d 20 61 | hed.only.after.initiation.from.a |
126b20 | 20 72 65 6d 6f 74 65 20 70 65 65 72 2e 20 43 6f 75 6c 64 20 62 65 20 75 73 65 66 75 6c 20 77 68 | .remote.peer..Could.be.useful.wh |
126b40 | 65 6e 20 74 68 65 72 65 20 69 73 20 6e 6f 20 64 69 72 65 63 74 20 63 6f 6e 6e 65 63 74 69 76 69 | en.there.is.no.direct.connectivi |
126b60 | 74 79 20 74 6f 20 74 68 65 20 70 65 65 72 20 64 75 65 20 74 6f 20 66 69 72 65 77 61 6c 6c 20 6f | ty.to.the.peer.due.to.firewall.o |
126b80 | 72 20 4e 41 54 20 69 6e 20 74 68 65 20 6d 69 64 64 6c 65 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c | r.NAT.in.the.middle.of.the.local |
126ba0 | 20 61 6e 64 20 72 65 6d 6f 74 65 20 73 69 64 65 2e 00 60 60 72 65 73 74 61 72 74 60 60 20 69 6d | .and.remote.side..``restart``.im |
126bc0 | 6d 65 64 69 61 74 65 6c 79 20 74 72 69 65 73 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 | mediately.tries.to.re-negotiate. |
126be0 | 74 68 65 20 43 48 49 4c 44 5f 53 41 20 75 6e 64 65 72 20 61 20 66 72 65 73 68 20 49 4b 45 5f 53 | the.CHILD_SA.under.a.fresh.IKE_S |
126c00 | 41 3b 00 60 60 72 65 73 74 61 72 74 60 60 20 73 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 72 65 73 | A;.``restart``.set.action.to.res |
126c20 | 74 61 72 74 3b 00 60 60 72 65 74 75 72 6e 60 60 3a 20 52 65 74 75 72 6e 20 66 72 6f 6d 20 74 68 | tart;.``return``:.Return.from.th |
126c40 | 65 20 63 75 72 72 65 6e 74 20 63 68 61 69 6e 20 61 6e 64 20 63 6f 6e 74 69 6e 75 65 20 61 74 20 | e.current.chain.and.continue.at. |
126c60 | 74 68 65 20 6e 65 78 74 20 72 75 6c 65 20 6f 66 20 74 68 65 20 6c 61 73 74 20 63 68 61 69 6e 2e | the.next.rule.of.the.last.chain. |
126c80 | 00 60 60 72 69 70 60 60 20 2d 20 52 6f 75 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 50 | .``rip``.-.Routing.Information.P |
126ca0 | 72 6f 74 6f 63 6f 6c 20 28 52 49 50 29 00 60 60 72 69 70 6e 67 60 60 20 2d 20 52 6f 75 74 69 6e | rotocol.(RIP).``ripng``.-.Routin |
126cc0 | 67 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 6e 65 78 74 2d 67 65 6e 65 | g.Information.Protocol.next-gene |
126ce0 | 72 61 74 69 6f 6e 20 28 49 50 76 36 29 20 28 52 49 50 6e 67 29 00 60 60 72 6f 75 6e 64 2d 72 6f | ration.(IPv6).(RIPng).``round-ro |
126d00 | 62 69 6e 60 60 20 2d 20 52 6f 75 6e 64 2d 72 6f 62 69 6e 20 70 6f 6c 69 63 79 3a 20 54 72 61 6e | bin``.-.Round-robin.policy:.Tran |
126d20 | 73 6d 69 74 20 70 61 63 6b 65 74 73 20 69 6e 20 73 65 71 75 65 6e 74 69 61 6c 20 6f 72 64 65 72 | smit.packets.in.sequential.order |
126d40 | 20 66 72 6f 6d 20 74 68 65 20 66 69 72 73 74 20 61 76 61 69 6c 61 62 6c 65 20 73 6c 61 76 65 20 | .from.the.first.available.slave. |
126d60 | 74 68 72 6f 75 67 68 20 74 68 65 20 6c 61 73 74 2e 00 60 60 72 6f 75 6e 64 2d 72 6f 62 69 6e 60 | through.the.last..``round-robin` |
126d80 | 60 20 44 69 73 74 72 69 62 75 74 65 73 20 72 65 71 75 65 73 74 73 20 69 6e 20 61 20 63 69 72 63 | `.Distributes.requests.in.a.circ |
126da0 | 75 6c 61 72 20 6d 61 6e 6e 65 72 2c 20 73 65 71 75 65 6e 74 69 61 6c 6c 79 20 73 65 6e 64 69 6e | ular.manner,.sequentially.sendin |
126dc0 | 67 20 65 61 63 68 20 72 65 71 75 65 73 74 20 74 6f 20 74 68 65 20 6e 65 78 74 20 73 65 72 76 65 | g.each.request.to.the.next.serve |
126de0 | 72 20 69 6e 20 6c 69 6e 65 00 60 60 72 6f 75 74 65 2d 66 69 6c 74 65 72 2d 74 72 61 6e 73 6c 61 | r.in.line.``route-filter-transla |
126e00 | 74 65 64 2d 76 34 60 60 20 2d 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 | ted-v4``.-...Well-known.communit |
126e20 | 69 65 73 20 76 61 6c 75 65 20 52 4f 55 54 45 5f 46 49 4c 54 45 52 5f 54 52 41 4e 53 4c 41 54 45 | ies.value.ROUTE_FILTER_TRANSLATE |
126e40 | 44 5f 76 34 20 30 78 46 46 46 46 30 30 30 32 00 60 60 72 6f 75 74 65 2d 66 69 6c 74 65 72 2d 74 | D_v4.0xFFFF0002.``route-filter-t |
126e60 | 72 61 6e 73 6c 61 74 65 64 2d 76 36 60 60 20 2d 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f | ranslated-v6``.-...Well-known.co |
126e80 | 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 52 4f 55 54 45 5f 46 49 4c 54 45 52 5f 54 52 41 | mmunities.value.ROUTE_FILTER_TRA |
126ea0 | 4e 53 4c 41 54 45 44 5f 76 36 20 30 78 46 46 46 46 30 30 30 34 00 60 60 72 6f 75 74 65 2d 66 69 | NSLATED_v6.0xFFFF0004.``route-fi |
126ec0 | 6c 74 65 72 2d 76 34 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e | lter-v4``.-..............Well-kn |
126ee0 | 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 52 4f 55 54 45 5f 46 49 4c 54 | own.communities.value.ROUTE_FILT |
126f00 | 45 52 5f 76 34 20 30 78 46 46 46 46 30 30 30 33 00 60 60 72 6f 75 74 65 2d 66 69 6c 74 65 72 2d | ER_v4.0xFFFF0003.``route-filter- |
126f20 | 76 36 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 | v6``.-..............Well-known.c |
126f40 | 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 52 4f 55 54 45 5f 46 49 4c 54 45 52 5f 76 36 | ommunities.value.ROUTE_FILTER_v6 |
126f60 | 20 30 78 46 46 46 46 30 30 30 35 00 60 60 72 73 61 2d 6b 65 79 2d 6e 61 6d 65 60 60 20 2d 20 73 | .0xFFFF0005.``rsa-key-name``.-.s |
126f80 | 68 61 72 65 64 20 52 53 41 20 6b 65 79 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | hared.RSA.key.for.authentication |
126fa0 | 2e 20 54 68 65 20 6b 65 79 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 65 | ..The.key.must.be.defined.in.the |
126fc0 | 20 60 60 73 65 74 20 76 70 6e 20 72 73 61 2d 6b 65 79 73 60 60 20 73 65 63 74 69 6f 6e 3b 00 60 | .``set.vpn.rsa-keys``.section;.` |
126fe0 | 60 72 73 61 60 60 20 2d 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 52 53 41 20 61 75 74 68 65 6e 74 | `rsa``.-.options.for.RSA.authent |
127000 | 69 63 61 74 69 6f 6e 20 6d 6f 64 65 3a 00 60 60 72 73 61 60 60 20 2d 20 75 73 65 20 73 69 6d 70 | ication.mode:.``rsa``.-.use.simp |
127020 | 6c 65 20 73 68 61 72 65 64 20 52 53 41 20 6b 65 79 2e 00 60 60 72 73 61 60 60 20 2d 20 75 73 65 | le.shared.RSA.key..``rsa``.-.use |
127040 | 20 73 69 6d 70 6c 65 20 73 68 61 72 65 64 20 52 53 41 20 6b 65 79 2e 20 54 68 65 20 6b 65 79 20 | .simple.shared.RSA.key..The.key. |
127060 | 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 65 20 60 60 73 65 74 20 76 70 6e | must.be.defined.in.the.``set.vpn |
127080 | 20 72 73 61 2d 6b 65 79 73 60 60 20 73 65 63 74 69 6f 6e 3b 00 60 60 73 65 63 72 65 74 60 60 20 | .rsa-keys``.section;.``secret``. |
1270a0 | 2d 20 70 72 65 64 65 66 69 6e 65 64 20 73 68 61 72 65 64 20 73 65 63 72 65 74 2e 20 55 73 65 64 | -.predefined.shared.secret..Used |
1270c0 | 20 69 66 20 63 6f 6e 66 69 67 75 72 65 64 20 6d 6f 64 65 20 60 60 70 72 65 2d 73 68 61 72 65 64 | .if.configured.mode.``pre-shared |
1270e0 | 2d 73 65 63 72 65 74 60 60 3b 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 62 72 69 64 67 65 | -secret``;.``set.firewall.bridge |
127100 | 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 74 20 66 69 72 | .forward.filter....``..``set.fir |
127120 | 65 77 61 6c 6c 20 69 70 76 34 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e | ewall.ipv4.forward.filter....``. |
127140 | 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 69 6e 70 75 74 20 66 69 6c 74 65 | .``set.firewall.ipv4.input.filte |
127160 | 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 6f 75 74 | r....``..``set.firewall.ipv4.out |
127180 | 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c | put.filter....``..``set.firewall |
1271a0 | 20 69 70 76 36 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 | .ipv6.forward.filter....``..``se |
1271c0 | 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 69 6e 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e | t.firewall.ipv6.input.filter.... |
1271e0 | 60 60 2e 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 6f 75 74 70 75 74 20 66 | ``..``set.firewall.ipv6.output.f |
127200 | 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 69 6e 67 6c 65 2d 75 73 65 72 2d 62 65 61 6d 66 | ilter....``..``single-user-beamf |
127220 | 6f 72 6d 65 65 60 60 20 2d 20 53 75 70 70 6f 72 74 20 66 6f 72 20 6f 70 65 72 61 74 69 6f 6e 20 | ormee``.-.Support.for.operation. |
127240 | 61 73 20 73 69 6e 67 6c 65 20 75 73 65 72 20 62 65 61 6d 66 6f 72 6d 65 65 00 60 60 73 69 6e 67 | as.single.user.beamformee.``sing |
127260 | 6c 65 2d 75 73 65 72 2d 62 65 61 6d 66 6f 72 6d 65 72 60 60 20 2d 20 53 75 70 70 6f 72 74 20 66 | le-user-beamformer``.-.Support.f |
127280 | 6f 72 20 6f 70 65 72 61 74 69 6f 6e 20 61 73 20 73 69 6e 67 6c 65 20 75 73 65 72 20 62 65 61 6d | or.operation.as.single.user.beam |
1272a0 | 66 6f 72 6d 65 72 00 60 60 73 6f 6e 6d 70 60 60 20 2d 20 4c 69 73 74 65 6e 20 66 6f 72 20 53 4f | former.``sonmp``.-.Listen.for.SO |
1272c0 | 4e 4d 50 20 66 6f 72 20 4e 6f 72 74 65 6c 20 72 6f 75 74 65 72 73 2f 73 77 69 74 63 68 65 73 00 | NMP.for.Nortel.routers/switches. |
1272e0 | 60 60 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 60 60 20 44 69 73 74 72 69 62 75 74 65 73 20 72 | ``source-address``.Distributes.r |
127300 | 65 71 75 65 73 74 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 73 6f 75 72 63 65 20 49 50 20 61 | equests.based.on.the.source.IP.a |
127320 | 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 00 60 60 73 73 68 2d 64 73 73 60 60 | ddress.of.the.client.``ssh-dss`` |
127340 | 00 60 60 73 73 68 2d 65 64 32 35 35 31 39 60 60 00 60 60 73 73 68 2d 72 73 61 20 41 41 41 41 42 | .``ssh-ed25519``.``ssh-rsa.AAAAB |
127360 | 33 4e 7a 61 43 31 79 63 32 45 41 41 41 41 42 41 41 2e 2e 2e 56 42 44 35 6c 4b 77 45 57 42 20 75 | 3NzaC1yc2EAAAABAA...VBD5lKwEWB.u |
127380 | 73 65 72 6e 61 6d 65 40 68 6f 73 74 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 60 60 00 60 60 73 73 68 | sername@host.example.com``.``ssh |
1273a0 | 2d 72 73 61 60 60 00 60 60 73 73 6c 2d 66 63 2d 73 6e 69 2d 65 6e 64 60 60 20 53 53 4c 20 66 72 | -rsa``.``ssl-fc-sni-end``.SSL.fr |
1273c0 | 6f 6e 74 65 6e 64 20 6d 61 74 63 68 20 65 6e 64 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 53 | ontend.match.end.of.connection.S |
1273e0 | 65 72 76 65 72 20 4e 61 6d 65 00 60 60 73 73 6c 2d 66 63 2d 73 6e 69 60 60 20 53 53 4c 20 66 72 | erver.Name.``ssl-fc-sni``.SSL.fr |
127400 | 6f 6e 74 65 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 53 65 72 76 65 72 20 4e 61 6d 65 20 49 6e | ontend.connection.Server.Name.In |
127420 | 64 69 63 61 74 69 6f 6e 20 6d 61 74 63 68 00 60 60 73 74 61 72 74 60 60 20 74 72 69 65 73 20 74 | dication.match.``start``.tries.t |
127440 | 6f 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 72 65 2d 63 72 65 61 74 65 20 74 68 65 20 43 48 49 4c | o.immediately.re-create.the.CHIL |
127460 | 44 5f 53 41 3b 00 60 60 73 74 61 74 69 63 60 60 20 2d 20 53 74 61 74 69 63 61 6c 6c 79 20 63 6f | D_SA;.``static``.-.Statically.co |
127480 | 6e 66 69 67 75 72 65 64 20 72 6f 75 74 65 73 00 60 60 73 74 61 74 69 6f 6e 60 60 20 2d 20 43 6f | nfigured.routes.``station``.-.Co |
1274a0 | 6e 6e 65 63 74 73 20 74 6f 20 61 6e 6f 74 68 65 72 20 61 63 63 65 73 73 20 70 6f 69 6e 74 00 60 | nnects.to.another.access.point.` |
1274c0 | 60 73 79 6e 70 72 6f 78 79 60 60 3a 20 73 79 6e 70 72 6f 78 79 20 74 68 65 20 70 61 63 6b 65 74 | `synproxy``:.synproxy.the.packet |
1274e0 | 2e 00 60 60 73 79 73 63 74 6c 60 60 20 69 73 20 75 73 65 64 20 74 6f 20 6d 6f 64 69 66 79 20 6b | ..``sysctl``.is.used.to.modify.k |
127500 | 65 72 6e 65 6c 20 70 61 72 61 6d 65 74 65 72 73 20 61 74 20 72 75 6e 74 69 6d 65 2e 20 20 54 68 | ernel.parameters.at.runtime...Th |
127520 | 65 20 70 61 72 61 6d 65 74 65 72 73 20 61 76 61 69 6c 61 62 6c 65 20 61 72 65 20 74 68 6f 73 65 | e.parameters.available.are.those |
127540 | 20 6c 69 73 74 65 64 20 75 6e 64 65 72 20 2f 70 72 6f 63 2f 73 79 73 2f 2e 00 60 60 74 61 62 6c | .listed.under./proc/sys/..``tabl |
127560 | 65 20 31 30 60 60 20 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 75 73 65 64 20 66 6f 72 20 49 53 | e.10``.Routing.table.used.for.IS |
127580 | 50 31 00 60 60 74 61 62 6c 65 20 31 30 60 60 20 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 75 73 | P1.``table.10``.Routing.table.us |
1275a0 | 65 64 20 66 6f 72 20 56 4c 41 4e 20 31 30 20 28 31 39 32 2e 31 36 38 2e 31 38 38 2e 30 2f 32 34 | ed.for.VLAN.10.(192.168.188.0/24 |
1275c0 | 29 00 60 60 74 61 62 6c 65 20 31 31 60 60 20 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 75 73 65 | ).``table.11``.Routing.table.use |
1275e0 | 64 20 66 6f 72 20 49 53 50 32 00 60 60 74 61 62 6c 65 20 31 31 60 60 20 52 6f 75 74 69 6e 67 20 | d.for.ISP2.``table.11``.Routing. |
127600 | 74 61 62 6c 65 20 75 73 65 64 20 66 6f 72 20 56 4c 41 4e 20 31 31 20 28 31 39 32 2e 31 36 38 2e | table.used.for.VLAN.11.(192.168. |
127620 | 31 38 39 2e 30 2f 32 34 29 00 60 60 74 61 62 6c 65 60 60 20 2d 20 4e 6f 6e 2d 6d 61 69 6e 20 4b | 189.0/24).``table``.-.Non-main.K |
127640 | 65 72 6e 65 6c 20 52 6f 75 74 69 6e 67 20 54 61 62 6c 65 00 60 60 74 61 72 67 65 74 60 60 3a 20 | ernel.Routing.Table.``target``:. |
127660 | 74 68 65 20 74 61 72 67 65 74 20 74 6f 20 62 65 20 73 65 6e 74 20 49 43 4d 50 20 70 61 63 6b 65 | the.target.to.be.sent.ICMP.packe |
127680 | 74 73 20 74 6f 2c 20 61 64 64 72 65 73 73 20 63 61 6e 20 62 65 20 61 6e 20 49 50 76 34 20 61 64 | ts.to,.address.can.be.an.IPv4.ad |
1276a0 | 64 72 65 73 73 20 6f 72 20 68 6f 73 74 6e 61 6d 65 00 60 60 74 65 73 74 2d 73 63 72 69 70 74 60 | dress.or.hostname.``test-script` |
1276c0 | 60 3a 20 41 20 75 73 65 72 20 64 65 66 69 6e 65 64 20 73 63 72 69 70 74 20 6d 75 73 74 20 72 65 | `:.A.user.defined.script.must.re |
1276e0 | 74 75 72 6e 20 30 20 74 6f 20 62 65 20 63 6f 6e 73 69 64 65 72 65 64 20 73 75 63 63 65 73 73 66 | turn.0.to.be.considered.successf |
127700 | 75 6c 20 61 6e 64 20 6e 6f 6e 2d 7a 65 72 6f 20 74 6f 20 66 61 69 6c 2e 20 53 63 72 69 70 74 73 | ul.and.non-zero.to.fail..Scripts |
127720 | 20 61 72 65 20 6c 6f 63 61 74 65 64 20 69 6e 20 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2c | .are.located.in./config/scripts, |
127740 | 20 66 6f 72 20 64 69 66 66 65 72 65 6e 74 20 6c 6f 63 61 74 69 6f 6e 73 20 74 68 65 20 66 75 6c | .for.different.locations.the.ful |
127760 | 6c 20 70 61 74 68 20 6e 65 65 64 73 20 74 6f 20 62 65 20 70 72 6f 76 69 64 65 64 00 60 60 74 68 | l.path.needs.to.be.provided.``th |
127780 | 72 65 73 68 6f 6c 64 60 60 3a 20 60 60 62 65 6c 6f 77 60 60 20 6f 72 20 60 60 61 62 6f 76 65 60 | reshold``:.``below``.or.``above` |
1277a0 | 60 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 72 61 74 65 20 6c 69 6d 69 74 2e 00 60 60 74 68 | `.the.specified.rate.limit..``th |
1277c0 | 72 6f 75 67 68 70 75 74 60 60 3a 20 41 20 73 65 72 76 65 72 20 70 72 6f 66 69 6c 65 20 66 6f 63 | roughput``:.A.server.profile.foc |
1277e0 | 75 73 65 64 20 6f 6e 20 69 6d 70 72 6f 76 69 6e 67 20 6e 65 74 77 6f 72 6b 20 74 68 72 6f 75 67 | used.on.improving.network.throug |
127800 | 68 70 75 74 2e 20 54 68 69 73 20 70 72 6f 66 69 6c 65 20 66 61 76 6f 72 73 20 70 65 72 66 6f 72 | hput..This.profile.favors.perfor |
127820 | 6d 61 6e 63 65 20 6f 76 65 72 20 70 6f 77 65 72 20 73 61 76 69 6e 67 73 20 62 79 20 73 65 74 74 | mance.over.power.savings.by.sett |
127840 | 69 6e 67 20 60 60 69 6e 74 65 6c 5f 70 73 74 61 74 65 60 60 20 61 6e 64 20 60 60 6d 61 78 5f 70 | ing.``intel_pstate``.and.``max_p |
127860 | 65 72 66 5f 70 63 74 3d 31 30 30 60 60 20 61 6e 64 20 69 6e 63 72 65 61 73 69 6e 67 20 6b 65 72 | erf_pct=100``.and.increasing.ker |
127880 | 6e 65 6c 20 6e 65 74 77 6f 72 6b 20 62 75 66 66 65 72 20 73 69 7a 65 73 2e 00 60 60 74 69 6d 65 | nel.network.buffer.sizes..``time |
1278a0 | 6f 75 74 60 60 20 6b 65 65 70 2d 61 6c 69 76 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f | out``.keep-alive.timeout.in.seco |
1278c0 | 6e 64 73 20 3c 32 2d 38 36 34 30 30 3e 20 28 64 65 66 61 75 6c 74 20 31 32 30 29 20 49 4b 45 76 | nds.<2-86400>.(default.120).IKEv |
1278e0 | 31 20 6f 6e 6c 79 00 60 60 74 72 61 6e 73 6d 69 74 2d 6c 6f 61 64 2d 62 61 6c 61 6e 63 65 60 60 | 1.only.``transmit-load-balance`` |
127900 | 20 2d 20 41 64 61 70 74 69 76 65 20 74 72 61 6e 73 6d 69 74 20 6c 6f 61 64 20 62 61 6c 61 6e 63 | .-.Adaptive.transmit.load.balanc |
127920 | 69 6e 67 3a 20 63 68 61 6e 6e 65 6c 20 62 6f 6e 64 69 6e 67 20 74 68 61 74 20 64 6f 65 73 20 6e | ing:.channel.bonding.that.does.n |
127940 | 6f 74 20 72 65 71 75 69 72 65 20 61 6e 79 20 73 70 65 63 69 61 6c 20 73 77 69 74 63 68 20 73 75 | ot.require.any.special.switch.su |
127960 | 70 70 6f 72 74 2e 00 60 60 74 72 61 6e 73 70 6f 72 74 60 60 20 74 72 61 6e 73 70 6f 72 74 20 6d | pport..``transport``.transport.m |
127980 | 6f 64 65 3b 00 60 60 74 72 61 70 60 60 20 20 69 6e 73 74 61 6c 6c 73 20 61 20 74 72 61 70 20 70 | ode;.``trap``..installs.a.trap.p |
1279a0 | 6f 6c 69 63 79 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 63 61 74 63 68 20 6d 61 74 63 68 69 6e 67 | olicy,.which.will.catch.matching |
1279c0 | 20 74 72 61 66 66 69 63 20 61 6e 64 20 74 72 69 65 73 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 | .traffic.and.tries.to.re-negotia |
1279e0 | 74 65 20 74 68 65 20 74 75 6e 6e 65 6c 20 6f 6e 2d 64 65 6d 61 6e 64 3b 00 60 60 74 72 61 70 60 | te.the.tunnel.on-demand;.``trap` |
127a00 | 60 20 69 6e 73 74 61 6c 6c 73 20 61 20 74 72 61 70 20 70 6f 6c 69 63 79 20 66 6f 72 20 74 68 65 | `.installs.a.trap.policy.for.the |
127a20 | 20 43 48 49 4c 44 5f 53 41 3b 00 60 60 74 74 6c 2d 6c 69 6d 69 74 60 60 3a 20 46 6f 72 20 74 68 | .CHILD_SA;.``ttl-limit``:.For.th |
127a40 | 65 20 55 44 50 20 54 54 4c 20 6c 69 6d 69 74 20 74 65 73 74 20 74 68 65 20 68 6f 70 20 63 6f 75 | e.UDP.TTL.limit.test.the.hop.cou |
127a60 | 6e 74 20 6c 69 6d 69 74 20 6d 75 73 74 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 20 54 68 65 20 | nt.limit.must.be.specified..The. |
127a80 | 6c 69 6d 69 74 20 6d 75 73 74 20 62 65 20 73 68 6f 72 74 65 72 20 74 68 61 6e 20 74 68 65 20 70 | limit.must.be.shorter.than.the.p |
127aa0 | 61 74 68 20 6c 65 6e 67 74 68 2c 20 61 6e 20 49 43 4d 50 20 74 69 6d 65 20 65 78 70 69 72 65 64 | ath.length,.an.ICMP.time.expired |
127ac0 | 20 6d 65 73 73 61 67 65 20 69 73 20 6e 65 65 64 65 64 20 74 6f 20 62 65 20 72 65 74 75 72 6e 65 | .message.is.needed.to.be.returne |
127ae0 | 64 20 66 6f 72 20 61 20 73 75 63 63 65 73 73 66 75 6c 20 74 65 73 74 2e 20 64 65 66 61 75 6c 74 | d.for.a.successful.test..default |
127b00 | 20 31 00 60 60 74 74 79 53 4e 60 60 20 2d 20 53 65 72 69 61 6c 20 64 65 76 69 63 65 20 6e 61 6d | .1.``ttySN``.-.Serial.device.nam |
127b20 | 65 00 60 60 74 74 79 55 53 42 58 60 60 20 2d 20 55 53 42 20 53 65 72 69 61 6c 20 64 65 76 69 63 | e.``ttyUSBX``.-.USB.Serial.devic |
127b40 | 65 20 6e 61 6d 65 00 60 60 74 75 6e 6e 65 6c 60 60 20 2d 20 64 65 66 69 6e 65 20 63 72 69 74 65 | e.name.``tunnel``.-.define.crite |
127b60 | 72 69 61 20 66 6f 72 20 74 72 61 66 66 69 63 20 74 6f 20 62 65 20 6d 61 74 63 68 65 64 20 66 6f | ria.for.traffic.to.be.matched.fo |
127b80 | 72 20 65 6e 63 72 79 70 74 69 6e 67 20 61 6e 64 20 73 65 6e 64 20 69 74 20 74 6f 20 61 20 70 65 | r.encrypting.and.send.it.to.a.pe |
127ba0 | 65 72 3a 00 60 60 74 75 6e 6e 65 6c 60 60 20 74 75 6e 6e 65 6c 20 6d 6f 64 65 20 28 64 65 66 61 | er:.``tunnel``.tunnel.mode.(defa |
127bc0 | 75 6c 74 29 3b 00 60 60 74 79 70 65 60 60 3a 20 53 70 65 63 69 66 79 20 74 68 65 20 74 79 70 65 | ult);.``type``:.Specify.the.type |
127be0 | 20 6f 66 20 74 65 73 74 2e 20 74 79 70 65 20 63 61 6e 20 62 65 20 70 69 6e 67 2c 20 74 74 6c 20 | .of.test..type.can.be.ping,.ttl. |
127c00 | 6f 72 20 61 20 75 73 65 72 20 64 65 66 69 6e 65 64 20 73 63 72 69 70 74 00 60 60 75 73 65 2d 78 | or.a.user.defined.script.``use-x |
127c20 | 35 30 39 2d 69 64 60 60 20 2d 20 75 73 65 20 6c 6f 63 61 6c 20 49 44 20 66 72 6f 6d 20 78 35 30 | 509-id``.-.use.local.ID.from.x50 |
127c40 | 39 20 63 65 72 74 69 66 69 63 61 74 65 2e 20 43 61 6e 6e 6f 74 20 62 65 20 75 73 65 64 20 77 68 | 9.certificate..Cannot.be.used.wh |
127c60 | 65 6e 20 60 60 69 64 60 60 20 69 73 20 64 65 66 69 6e 65 64 3b 00 60 60 76 69 72 74 75 61 6c 2d | en.``id``.is.defined;.``virtual- |
127c80 | 61 64 64 72 65 73 73 60 60 20 2d 20 44 65 66 69 6e 65 73 20 61 20 76 69 72 74 75 61 6c 20 49 50 | address``.-.Defines.a.virtual.IP |
127ca0 | 20 61 64 64 72 65 73 73 20 77 68 69 63 68 20 69 73 20 72 65 71 75 65 73 74 65 64 20 62 79 20 74 | .address.which.is.requested.by.t |
127cc0 | 68 65 20 69 6e 69 74 69 61 74 6f 72 20 61 6e 64 20 6f 6e 65 20 6f 72 20 73 65 76 65 72 61 6c 20 | he.initiator.and.one.or.several. |
127ce0 | 49 50 76 34 20 61 6e 64 2f 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 61 | IPv4.and/or.IPv6.addresses.are.a |
127d00 | 73 73 69 67 6e 65 64 20 66 72 6f 6d 20 6d 75 6c 74 69 70 6c 65 20 70 6f 6f 6c 73 20 62 79 20 74 | ssigned.from.multiple.pools.by.t |
127d20 | 68 65 20 72 65 73 70 6f 6e 64 65 72 2e 00 60 60 76 69 72 74 75 61 6c 2d 69 70 60 60 20 41 6c 6c | he.responder..``virtual-ip``.All |
127d40 | 6f 77 20 69 6e 73 74 61 6c 6c 20 76 69 72 74 75 61 6c 2d 69 70 20 61 64 64 72 65 73 73 65 73 2e | ow.install.virtual-ip.addresses. |
127d60 | 20 43 6f 6d 6d 61 20 73 65 70 61 72 61 74 65 64 20 6c 69 73 74 20 6f 66 20 76 69 72 74 75 61 6c | .Comma.separated.list.of.virtual |
127d80 | 20 49 50 73 20 74 6f 20 72 65 71 75 65 73 74 20 69 6e 20 49 4b 45 76 32 20 63 6f 6e 66 69 67 75 | .IPs.to.request.in.IKEv2.configu |
127da0 | 72 61 74 69 6f 6e 20 70 61 79 6c 6f 61 64 73 20 6f 72 20 49 4b 45 76 31 20 4d 6f 64 65 20 43 6f | ration.payloads.or.IKEv1.Mode.Co |
127dc0 | 6e 66 69 67 2e 20 54 68 65 20 77 69 6c 64 63 61 72 64 20 61 64 64 72 65 73 73 65 73 20 30 2e 30 | nfig..The.wildcard.addresses.0.0 |
127de0 | 2e 30 2e 30 20 61 6e 64 20 3a 3a 20 72 65 71 75 65 73 74 20 61 6e 20 61 72 62 69 74 72 61 72 79 | .0.0.and.::.request.an.arbitrary |
127e00 | 20 61 64 64 72 65 73 73 2c 20 73 70 65 63 69 66 69 63 20 61 64 64 72 65 73 73 65 73 20 6d 61 79 | .address,.specific.addresses.may |
127e20 | 20 62 65 20 64 65 66 69 6e 65 64 2e 20 54 68 65 20 72 65 73 70 6f 6e 64 65 72 20 6d 61 79 20 72 | .be.defined..The.responder.may.r |
127e40 | 65 74 75 72 6e 20 61 20 64 69 66 66 65 72 65 6e 74 20 61 64 64 72 65 73 73 2c 20 74 68 6f 75 67 | eturn.a.different.address,.thoug |
127e60 | 68 2c 20 6f 72 20 6e 6f 6e 65 20 61 74 20 61 6c 6c 2e 00 60 60 76 69 72 74 75 61 6c 2d 69 70 60 | h,.or.none.at.all..``virtual-ip` |
127e80 | 60 20 41 6c 6c 6f 77 73 20 74 6f 20 69 6e 73 74 61 6c 6c 20 76 69 72 74 75 61 6c 2d 69 70 20 61 | `.Allows.to.install.virtual-ip.a |
127ea0 | 64 64 72 65 73 73 65 73 2e 20 43 6f 6d 6d 61 20 73 65 70 61 72 61 74 65 64 20 6c 69 73 74 20 6f | ddresses..Comma.separated.list.o |
127ec0 | 66 20 76 69 72 74 75 61 6c 20 49 50 73 20 74 6f 20 72 65 71 75 65 73 74 20 69 6e 20 49 4b 45 76 | f.virtual.IPs.to.request.in.IKEv |
127ee0 | 32 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 79 6c 6f 61 64 73 20 6f 72 20 49 4b 45 76 | 2.configuration.payloads.or.IKEv |
127f00 | 31 20 4d 6f 64 65 20 43 6f 6e 66 69 67 2e 20 54 68 65 20 77 69 6c 64 63 61 72 64 20 61 64 64 72 | 1.Mode.Config..The.wildcard.addr |
127f20 | 65 73 73 65 73 20 30 2e 30 2e 30 2e 30 20 61 6e 64 20 3a 3a 20 72 65 71 75 65 73 74 20 61 6e 20 | esses.0.0.0.0.and.::.request.an. |
127f40 | 61 72 62 69 74 72 61 72 79 20 61 64 64 72 65 73 73 2c 20 73 70 65 63 69 66 69 63 20 61 64 64 72 | arbitrary.address,.specific.addr |
127f60 | 65 73 73 65 73 20 6d 61 79 20 62 65 20 64 65 66 69 6e 65 64 2e 20 54 68 65 20 72 65 73 70 6f 6e | esses.may.be.defined..The.respon |
127f80 | 64 65 72 20 6d 61 79 20 72 65 74 75 72 6e 20 61 20 64 69 66 66 65 72 65 6e 74 20 61 64 64 72 65 | der.may.return.a.different.addre |
127fa0 | 73 73 2c 20 74 68 6f 75 67 68 2c 20 6f 72 20 6e 6f 6e 65 20 61 74 20 61 6c 6c 2e 20 44 65 66 69 | ss,.though,.or.none.at.all..Defi |
127fc0 | 6e 65 20 74 68 65 20 60 60 76 69 72 74 75 61 6c 2d 61 64 64 72 65 73 73 60 60 20 6f 70 74 69 6f | ne.the.``virtual-address``.optio |
127fe0 | 6e 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 69 6e | n.to.configure.the.IP.address.in |
128000 | 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 68 69 65 72 61 72 63 68 79 2e 00 60 60 76 6e 63 60 60 | .site-to-site.hierarchy..``vnc`` |
128020 | 20 2d 20 56 69 72 74 75 61 6c 20 4e 65 74 77 6f 72 6b 20 43 6f 6e 74 72 6f 6c 20 28 56 4e 43 29 | .-.Virtual.Network.Control.(VNC) |
128040 | 00 60 60 76 74 69 60 60 20 2d 20 75 73 65 20 61 20 56 54 49 20 69 6e 74 65 72 66 61 63 65 20 66 | .``vti``.-.use.a.VTI.interface.f |
128060 | 6f 72 20 74 72 61 66 66 69 63 20 65 6e 63 72 79 70 74 69 6f 6e 2e 20 41 6e 79 20 74 72 61 66 66 | or.traffic.encryption..Any.traff |
128080 | 69 63 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 73 65 6e 64 20 74 6f 20 56 54 49 20 69 6e | ic,.which.will.be.send.to.VTI.in |
1280a0 | 74 65 72 66 61 63 65 20 77 69 6c 6c 20 62 65 20 65 6e 63 72 79 70 74 65 64 20 61 6e 64 20 73 65 | terface.will.be.encrypted.and.se |
1280c0 | 6e 64 20 74 6f 20 74 68 69 73 20 70 65 65 72 2e 20 55 73 69 6e 67 20 56 54 49 20 6d 61 6b 65 73 | nd.to.this.peer..Using.VTI.makes |
1280e0 | 20 49 50 53 65 63 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 75 63 68 20 66 6c 65 78 69 62 | .IPSec.configuration.much.flexib |
128100 | 6c 65 20 61 6e 64 20 65 61 73 69 65 72 20 69 6e 20 63 6f 6d 70 6c 65 78 20 73 69 74 75 61 74 69 | le.and.easier.in.complex.situati |
128120 | 6f 6e 2c 20 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 61 64 | on,.and.allows.to.dynamically.ad |
128140 | 64 2f 64 65 6c 65 74 65 20 72 65 6d 6f 74 65 20 6e 65 74 77 6f 72 6b 73 2c 20 72 65 61 63 68 61 | d/delete.remote.networks,.reacha |
128160 | 62 6c 65 20 76 69 61 20 61 20 70 65 65 72 2c 20 61 73 20 69 6e 20 74 68 69 73 20 6d 6f 64 65 20 | ble.via.a.peer,.as.in.this.mode. |
128180 | 72 6f 75 74 65 72 20 64 6f 6e 27 74 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 64 64 69 | router.don't.need.to.create.addi |
1281a0 | 74 69 6f 6e 61 6c 20 53 41 2f 70 6f 6c 69 63 79 20 66 6f 72 20 65 61 63 68 20 72 65 6d 6f 74 65 | tional.SA/policy.for.each.remote |
1281c0 | 20 6e 65 74 77 6f 72 6b 3a 00 60 60 78 35 30 39 60 60 20 2d 20 6f 70 74 69 6f 6e 73 20 66 6f 72 | .network:.``x509``.-.options.for |
1281e0 | 20 78 35 30 39 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 6f 64 65 3a 00 60 60 78 35 30 | .x509.authentication.mode:.``x50 |
128200 | 39 60 60 20 2d 20 75 73 65 20 63 65 72 74 69 66 69 63 61 74 65 73 20 69 6e 66 72 61 73 74 72 75 | 9``.-.use.certificates.infrastru |
128220 | 63 74 75 72 65 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 00 60 60 78 6f 72 2d | cture.for.authentication..``xor- |
128240 | 68 61 73 68 60 60 20 2d 20 58 4f 52 20 70 6f 6c 69 63 79 3a 20 54 72 61 6e 73 6d 69 74 20 62 61 | hash``.-.XOR.policy:.Transmit.ba |
128260 | 73 65 64 20 6f 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 74 72 61 6e 73 6d 69 74 20 68 61 73 | sed.on.the.selected.transmit.has |
128280 | 68 20 70 6f 6c 69 63 79 2e 20 20 54 68 65 20 64 65 66 61 75 6c 74 20 70 6f 6c 69 63 79 20 69 73 | h.policy...The.default.policy.is |
1282a0 | 20 61 20 73 69 6d 70 6c 65 20 5b 28 73 6f 75 72 63 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 58 | .a.simple.[(source.MAC.address.X |
1282c0 | 4f 52 27 64 20 77 69 74 68 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 4d 41 43 20 61 64 64 72 65 73 | OR'd.with.destination.MAC.addres |
1282e0 | 73 20 58 4f 52 20 70 61 63 6b 65 74 20 74 79 70 65 20 49 44 29 20 6d 6f 64 75 6c 6f 20 73 6c 61 | s.XOR.packet.type.ID).modulo.sla |
128300 | 76 65 20 63 6f 75 6e 74 5d 2e 20 41 6c 74 65 72 6e 61 74 65 20 74 72 61 6e 73 6d 69 74 20 70 6f | ve.count]..Alternate.transmit.po |
128320 | 6c 69 63 69 65 73 20 6d 61 79 20 62 65 20 73 65 6c 65 63 74 65 64 20 76 69 61 20 74 68 65 20 3a | licies.may.be.selected.via.the.: |
128340 | 63 66 67 63 6d 64 3a 60 68 61 73 68 2d 70 6f 6c 69 63 79 60 20 6f 70 74 69 6f 6e 2c 20 64 65 73 | cfgcmd:`hash-policy`.option,.des |
128360 | 63 72 69 62 65 64 20 62 65 6c 6f 77 2e 00 60 60 79 65 73 60 60 20 65 6e 61 62 6c 65 20 72 65 6d | cribed.below..``yes``.enable.rem |
128380 | 6f 74 65 20 68 6f 73 74 20 72 65 2d 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 75 72 69 6e | ote.host.re-authentication.durin |
1283a0 | 67 20 61 6e 20 49 4b 45 20 72 65 6b 65 79 3b 00 60 69 67 6e 6f 72 65 60 3a 20 4e 6f 20 63 6f 72 | g.an.IKE.rekey;.`ignore`:.No.cor |
1283c0 | 72 65 63 74 69 6f 6e 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 63 6c 6f 63 6b 20 | rection.is.applied.to.the.clock. |
1283e0 | 66 6f 72 20 74 68 65 20 6c 65 61 70 20 73 65 63 6f 6e 64 2e 20 54 68 65 20 63 6c 6f 63 6b 20 77 | for.the.leap.second..The.clock.w |
128400 | 69 6c 6c 20 62 65 20 63 6f 72 72 65 63 74 65 64 20 6c 61 74 65 72 20 69 6e 20 6e 6f 72 6d 61 6c | ill.be.corrected.later.in.normal |
128420 | 20 6f 70 65 72 61 74 69 6f 6e 20 77 68 65 6e 20 6e 65 77 20 6d 65 61 73 75 72 65 6d 65 6e 74 73 | .operation.when.new.measurements |
128440 | 20 61 72 65 20 6d 61 64 65 20 61 6e 64 20 74 68 65 20 65 73 74 69 6d 61 74 65 64 20 6f 66 66 73 | .are.made.and.the.estimated.offs |
128460 | 65 74 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 6f 6e 65 20 73 65 63 6f 6e 64 20 65 72 72 6f 72 | et.includes.the.one.second.error |
128480 | 2e 00 60 73 6d 65 61 72 60 3a 20 57 68 65 6e 20 73 6d 65 61 72 69 6e 67 20 61 20 6c 65 61 70 20 | ..`smear`:.When.smearing.a.leap. |
1284a0 | 73 65 63 6f 6e 64 2c 20 74 68 65 20 6c 65 61 70 20 73 74 61 74 75 73 20 69 73 20 73 75 70 70 72 | second,.the.leap.status.is.suppr |
1284c0 | 65 73 73 65 64 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 20 61 6e 64 20 74 68 65 20 73 65 72 76 | essed.on.the.server.and.the.serv |
1284e0 | 65 64 20 74 69 6d 65 20 69 73 20 63 6f 72 72 65 63 74 65 64 20 73 6c 6f 77 6c 79 20 62 79 20 73 | ed.time.is.corrected.slowly.by.s |
128500 | 6c 65 77 69 6e 67 20 69 6e 73 74 65 61 64 20 6f 66 20 73 74 65 70 70 69 6e 67 2e 20 54 68 65 20 | lewing.instead.of.stepping..The. |
128520 | 63 6c 69 65 6e 74 73 20 64 6f 20 6e 6f 74 20 6e 65 65 64 20 61 6e 79 20 73 70 65 63 69 61 6c 20 | clients.do.not.need.any.special. |
128540 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 73 20 74 68 65 79 20 64 6f 20 6e 6f 74 20 6b 6e 6f | configuration.as.they.do.not.kno |
128560 | 77 20 74 68 65 72 65 20 69 73 20 61 6e 79 20 6c 65 61 70 20 73 65 63 6f 6e 64 20 61 6e 64 20 74 | w.there.is.any.leap.second.and.t |
128580 | 68 65 79 20 66 6f 6c 6c 6f 77 20 74 68 65 20 73 65 72 76 65 72 20 74 69 6d 65 20 77 68 69 63 68 | hey.follow.the.server.time.which |
1285a0 | 20 65 76 65 6e 74 75 61 6c 6c 79 20 62 72 69 6e 67 73 20 74 68 65 6d 20 62 61 63 6b 20 74 6f 20 | .eventually.brings.them.back.to. |
1285c0 | 55 54 43 2e 20 43 61 72 65 20 6d 75 73 74 20 62 65 20 74 61 6b 65 6e 20 74 6f 20 65 6e 73 75 72 | UTC..Care.must.be.taken.to.ensur |
1285e0 | 65 20 74 68 65 79 20 75 73 65 20 6f 6e 6c 79 20 4e 54 50 20 73 65 72 76 65 72 73 20 77 68 69 63 | e.they.use.only.NTP.servers.whic |
128600 | 68 20 73 6d 65 61 72 20 74 68 65 20 6c 65 61 70 20 73 65 63 6f 6e 64 20 69 6e 20 65 78 61 63 74 | h.smear.the.leap.second.in.exact |
128620 | 6c 79 20 74 68 65 20 73 61 6d 65 20 77 61 79 20 66 6f 72 20 73 79 6e 63 68 72 6f 6e 69 73 61 74 | ly.the.same.way.for.synchronisat |
128640 | 69 6f 6e 2e 00 60 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 60 20 61 6e 64 20 60 73 6f 75 72 63 | ion..`source-address`.and.`sourc |
128660 | 65 2d 69 6e 74 65 72 66 61 63 65 60 20 63 61 6e 20 6e 6f 74 20 62 65 20 75 73 65 64 20 61 74 20 | e-interface`.can.not.be.used.at. |
128680 | 74 68 65 20 73 61 6d 65 20 74 69 6d 65 2e 00 60 73 79 73 74 65 6d 60 3a 20 57 68 65 6e 20 69 6e | the.same.time..`system`:.When.in |
1286a0 | 73 65 72 74 69 6e 67 20 61 20 6c 65 61 70 20 73 65 63 6f 6e 64 2c 20 74 68 65 20 6b 65 72 6e 65 | serting.a.leap.second,.the.kerne |
1286c0 | 6c 20 73 74 65 70 73 20 74 68 65 20 73 79 73 74 65 6d 20 63 6c 6f 63 6b 20 62 61 63 6b 77 61 72 | l.steps.the.system.clock.backwar |
1286e0 | 64 73 20 62 79 20 6f 6e 65 20 73 65 63 6f 6e 64 20 77 68 65 6e 20 74 68 65 20 63 6c 6f 63 6b 20 | ds.by.one.second.when.the.clock. |
128700 | 67 65 74 73 20 74 6f 20 30 30 3a 30 30 3a 30 30 20 55 54 43 2e 20 57 68 65 6e 20 64 65 6c 65 74 | gets.to.00:00:00.UTC..When.delet |
128720 | 69 6e 67 20 61 20 6c 65 61 70 20 73 65 63 6f 6e 64 2c 20 69 74 20 73 74 65 70 73 20 66 6f 72 77 | ing.a.leap.second,.it.steps.forw |
128740 | 61 72 64 20 62 79 20 6f 6e 65 20 73 65 63 6f 6e 64 20 77 68 65 6e 20 74 68 65 20 63 6c 6f 63 6b | ard.by.one.second.when.the.clock |
128760 | 20 67 65 74 73 20 74 6f 20 32 33 3a 35 39 3a 35 39 20 55 54 43 2e 00 60 74 69 6d 65 7a 6f 6e 65 | .gets.to.23:59:59.UTC..`timezone |
128780 | 60 3a 20 54 68 69 73 20 64 69 72 65 63 74 69 76 65 20 73 70 65 63 69 66 69 65 73 20 61 20 74 69 | `:.This.directive.specifies.a.ti |
1287a0 | 6d 65 7a 6f 6e 65 20 69 6e 20 74 68 65 20 73 79 73 74 65 6d 20 74 69 6d 65 7a 6f 6e 65 20 64 61 | mezone.in.the.system.timezone.da |
1287c0 | 74 61 62 61 73 65 20 77 68 69 63 68 20 63 68 72 6f 6e 79 64 20 63 61 6e 20 75 73 65 20 74 6f 20 | tabase.which.chronyd.can.use.to. |
1287e0 | 64 65 74 65 72 6d 69 6e 65 20 77 68 65 6e 20 77 69 6c 6c 20 74 68 65 20 6e 65 78 74 20 6c 65 61 | determine.when.will.the.next.lea |
128800 | 70 20 73 65 63 6f 6e 64 20 6f 63 63 75 72 20 61 6e 64 20 77 68 61 74 20 69 73 20 74 68 65 20 63 | p.second.occur.and.what.is.the.c |
128820 | 75 72 72 65 6e 74 20 6f 66 66 73 65 74 20 62 65 74 77 65 65 6e 20 54 41 49 20 61 6e 64 20 55 54 | urrent.offset.between.TAI.and.UT |
128840 | 43 2e 20 49 74 20 77 69 6c 6c 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 63 68 65 63 6b 20 69 66 | C..It.will.periodically.check.if |
128860 | 20 32 33 3a 35 39 3a 35 39 20 61 6e 64 20 32 33 3a 35 39 3a 36 30 20 61 72 65 20 76 61 6c 69 64 | .23:59:59.and.23:59:60.are.valid |
128880 | 20 74 69 6d 65 73 20 69 6e 20 74 68 65 20 74 69 6d 65 7a 6f 6e 65 2e 20 54 68 69 73 20 6e 6f 72 | .times.in.the.timezone..This.nor |
1288a0 | 6d 61 6c 6c 79 20 77 6f 72 6b 73 20 77 69 74 68 20 74 68 65 20 72 69 67 68 74 2f 55 54 43 20 74 | mally.works.with.the.right/UTC.t |
1288c0 | 69 6d 65 7a 6f 6e 65 20 77 68 69 63 68 20 69 73 20 74 68 65 20 64 65 66 61 75 6c 74 00 60 74 77 | imezone.which.is.the.default.`tw |
1288e0 | 65 65 74 20 62 79 20 45 76 69 6c 4d 6f 67 60 5f 2c 20 32 30 32 30 2d 30 32 2d 32 31 00 61 20 62 | eet.by.EvilMog`_,.2020-02-21.a.b |
128900 | 61 6e 64 77 69 64 74 68 20 74 65 73 74 20 6f 76 65 72 20 74 68 65 20 56 50 4e 20 67 6f 74 20 74 | andwidth.test.over.the.VPN.got.t |
128920 | 68 65 73 65 20 72 65 73 75 6c 74 73 3a 00 61 20 62 6c 61 6e 6b 20 69 6e 64 69 63 61 74 65 73 20 | hese.results:.a.blank.indicates. |
128940 | 74 68 61 74 20 6e 6f 20 74 65 73 74 20 68 61 73 20 62 65 65 6e 20 63 61 72 72 69 65 64 20 6f 75 | that.no.test.has.been.carried.ou |
128960 | 74 00 61 65 73 32 35 36 20 45 6e 63 72 79 70 74 69 6f 6e 00 61 6c 65 72 74 00 61 6c 6c 00 61 6e | t.aes256.Encryption.alert.all.an |
128980 | 20 52 44 20 2f 20 52 54 4c 49 53 54 00 61 6e 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 61 | .RD./.RTLIST.an.interface.with.a |
1289a0 | 20 6e 65 78 74 68 6f 70 00 61 6e 79 3a 20 61 6e 79 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 | .nexthop.any:.any.IP.address.to. |
1289c0 | 6d 61 74 63 68 2e 00 61 6e 79 3a 20 61 6e 79 20 49 50 76 36 20 61 64 64 72 65 73 73 20 74 6f 20 | match..any:.any.IPv6.address.to. |
1289e0 | 6d 61 74 63 68 2e 00 61 75 74 68 00 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 00 61 75 74 6f 20 2d | match..auth.authorization.auto.- |
128a00 | 20 69 6e 74 65 72 66 61 63 65 20 64 75 70 6c 65 78 20 73 65 74 74 69 6e 67 20 69 73 20 61 75 74 | .interface.duplex.setting.is.aut |
128a20 | 6f 2d 6e 65 67 6f 74 69 61 74 65 64 00 61 75 74 6f 20 2d 20 69 6e 74 65 72 66 61 63 65 20 73 70 | o-negotiated.auto.-.interface.sp |
128a40 | 65 65 64 20 69 73 20 61 75 74 6f 2d 6e 65 67 6f 74 69 61 74 65 64 00 62 67 70 64 00 62 6f 6e 64 | eed.is.auto-negotiated.bgpd.bond |
128a60 | 69 6e 67 00 62 6f 6f 74 2d 73 69 7a 65 00 62 6f 6f 74 66 69 6c 65 2d 6e 61 6d 65 00 62 6f 6f 74 | ing.boot-size.bootfile-name.boot |
128a80 | 66 69 6c 65 2d 6e 61 6d 65 2c 20 66 69 6c 65 6e 61 6d 65 00 62 6f 6f 74 66 69 6c 65 2d 73 65 72 | file-name,.filename.bootfile-ser |
128aa0 | 76 65 72 00 62 6f 6f 74 66 69 6c 65 2d 73 69 7a 65 00 62 72 69 64 67 65 00 63 6c 69 65 6e 74 20 | ver.bootfile-size.bridge.client. |
128ac0 | 65 78 61 6d 70 6c 65 20 28 64 65 62 69 61 6e 20 39 29 00 63 6c 69 65 6e 74 2d 70 72 65 66 69 78 | example.(debian.9).client-prefix |
128ae0 | 2d 6c 65 6e 67 74 68 00 63 6c 6f 63 6b 00 63 6c 6f 63 6b 20 64 61 65 6d 6f 6e 20 28 6e 6f 74 65 | -length.clock.clock.daemon.(note |
128b00 | 20 32 29 00 63 72 69 74 00 63 72 6f 6e 00 64 61 65 6d 6f 6e 00 64 64 63 6c 69 65 6e 74 5f 20 68 | .2).crit.cron.daemon.ddclient_.h |
128b20 | 61 73 20 61 6e 6f 74 68 65 72 20 77 61 79 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 | as.another.way.to.determine.the. |
128b40 | 57 41 4e 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 69 73 20 63 6f 6e 74 72 6f 6c 6c | WAN.IP.address..This.is.controll |
128b60 | 65 64 20 62 79 3a 00 64 64 63 6c 69 65 6e 74 5f 20 75 73 65 73 20 74 77 6f 20 6d 65 74 68 6f 64 | ed.by:.ddclient_.uses.two.method |
128b80 | 73 20 74 6f 20 75 70 64 61 74 65 20 61 20 44 4e 53 20 72 65 63 6f 72 64 2e 20 54 68 65 20 66 69 | s.to.update.a.DNS.record..The.fi |
128ba0 | 72 73 74 20 6f 6e 65 20 77 69 6c 6c 20 73 65 6e 64 20 75 70 64 61 74 65 73 20 64 69 72 65 63 74 | rst.one.will.send.updates.direct |
128bc0 | 6c 79 20 74 6f 20 74 68 65 20 44 4e 53 20 64 61 65 6d 6f 6e 2c 20 69 6e 20 63 6f 6d 70 6c 69 61 | ly.to.the.DNS.daemon,.in.complia |
128be0 | 6e 63 65 20 77 69 74 68 20 3a 72 66 63 3a 60 32 31 33 36 60 2e 20 54 68 65 20 73 65 63 6f 6e 64 | nce.with.:rfc:`2136`..The.second |
128c00 | 20 6f 6e 65 20 69 6e 76 6f 6c 76 65 73 20 61 20 74 68 69 72 64 20 70 61 72 74 79 20 73 65 72 76 | .one.involves.a.third.party.serv |
128c20 | 69 63 65 2c 20 6c 69 6b 65 20 44 79 6e 44 4e 53 2e 63 6f 6d 20 6f 72 20 61 6e 79 20 6f 74 68 65 | ice,.like.DynDNS.com.or.any.othe |
128c40 | 72 20 73 69 6d 69 6c 61 72 20 77 65 62 73 69 74 65 2e 20 54 68 69 73 20 6d 65 74 68 6f 64 20 75 | r.similar.website..This.method.u |
128c60 | 73 65 73 20 48 54 54 50 20 72 65 71 75 65 73 74 73 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 74 68 | ses.HTTP.requests.to.transmit.th |
128c80 | 65 20 6e 65 77 20 49 50 20 61 64 64 72 65 73 73 2e 20 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 | e.new.IP.address..You.can.config |
128ca0 | 75 72 65 20 62 6f 74 68 20 69 6e 20 56 79 4f 53 2e 00 64 64 63 6c 69 65 6e 74 5f 20 75 73 65 73 | ure.both.in.VyOS..ddclient_.uses |
128cc0 | 20 74 77 6f 20 6d 65 74 68 6f 64 73 20 74 6f 20 75 70 64 61 74 65 20 61 20 44 4e 53 20 72 65 63 | .two.methods.to.update.a.DNS.rec |
128ce0 | 6f 72 64 2e 20 54 68 65 20 66 69 72 73 74 20 6f 6e 65 20 77 69 6c 6c 20 73 65 6e 64 20 75 70 64 | ord..The.first.one.will.send.upd |
128d00 | 61 74 65 73 20 64 69 72 65 63 74 6c 79 20 74 6f 20 74 68 65 20 44 4e 53 20 64 61 65 6d 6f 6e 2c | ates.directly.to.the.DNS.daemon, |
128d20 | 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 3a 72 66 63 3a 60 32 31 33 36 60 2e | .in.compliance.with.:rfc:`2136`. |
128d40 | 20 54 68 65 20 73 65 63 6f 6e 64 20 6f 6e 65 20 69 6e 76 6f 6c 76 65 73 20 61 20 74 68 69 72 64 | .The.second.one.involves.a.third |
128d60 | 20 70 61 72 74 79 20 73 65 72 76 69 63 65 2c 20 6c 69 6b 65 20 44 79 6e 44 4e 53 2e 63 6f 6d 20 | .party.service,.like.DynDNS.com. |
128d80 | 6f 72 20 61 6e 79 20 6f 74 68 65 72 20 73 75 63 68 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 | or.any.other.such.service.provid |
128da0 | 65 72 2e 20 54 68 69 73 20 6d 65 74 68 6f 64 20 75 73 65 73 20 48 54 54 50 20 72 65 71 75 65 73 | er..This.method.uses.HTTP.reques |
128dc0 | 74 73 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 74 68 65 20 6e 65 77 20 49 50 20 61 64 64 72 65 73 | ts.to.transmit.the.new.IP.addres |
128de0 | 73 2e 20 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 62 6f 74 68 20 69 6e 20 56 79 4f | s..You.can.configure.both.in.VyO |
128e00 | 53 2e 00 64 64 63 6c 69 65 6e 74 5f 20 77 69 6c 6c 20 73 6b 69 70 20 61 6e 79 20 61 64 64 72 65 | S..ddclient_.will.skip.any.addre |
128e20 | 73 73 20 6c 6f 63 61 74 65 64 20 62 65 66 6f 72 65 20 74 68 65 20 73 74 72 69 6e 67 20 73 65 74 | ss.located.before.the.string.set |
128e40 | 20 69 6e 20 60 3c 70 61 74 74 65 72 6e 3e 60 2e 00 64 65 62 75 67 00 64 65 63 72 65 6d 65 6e 74 | .in.`<pattern>`..debug.decrement |
128e60 | 2d 6c 69 66 65 74 69 6d 65 00 64 65 66 61 75 6c 74 20 6d 69 6e 2d 74 68 72 65 73 68 6f 6c 64 00 | -lifetime.default.min-threshold. |
128e80 | 64 65 66 61 75 6c 74 2d 6c 65 61 73 65 2d 74 69 6d 65 2c 20 6d 61 78 2d 6c 65 61 73 65 2d 74 69 | default-lease-time,.max-lease-ti |
128ea0 | 6d 65 00 64 65 66 61 75 6c 74 2d 6c 69 66 65 74 69 6d 65 00 64 65 66 61 75 6c 74 2d 70 72 65 66 | me.default-lifetime.default-pref |
128ec0 | 65 72 65 6e 63 65 00 64 65 66 61 75 6c 74 2d 72 6f 75 74 65 72 00 64 65 70 72 65 63 61 74 65 2d | erence.default-router.deprecate- |
128ee0 | 70 72 65 66 69 78 00 64 65 73 74 69 6e 61 74 69 6f 6e 2d 68 61 73 68 69 6e 67 00 64 68 63 70 2d | prefix.destination-hashing.dhcp- |
128f00 | 73 65 72 76 65 72 2d 69 64 65 6e 74 69 66 69 65 72 00 64 69 72 65 63 74 00 64 69 72 65 63 74 6f | server-identifier.direct.directo |
128f20 | 72 79 00 64 69 73 61 62 6c 65 3a 20 4e 6f 20 73 6f 75 72 63 65 20 76 61 6c 69 64 61 74 69 6f 6e | ry.disable:.No.source.validation |
128f40 | 00 64 6e 73 73 6c 00 64 6f 6d 61 69 6e 2d 6e 61 6d 65 00 64 6f 6d 61 69 6e 2d 6e 61 6d 65 2d 73 | .dnssl.domain-name.domain-name-s |
128f60 | 65 72 76 65 72 73 00 64 6f 6d 61 69 6e 2d 73 65 61 72 63 68 00 65 6d 65 72 67 00 65 6e 61 62 6c | ervers.domain-search.emerg.enabl |
128f80 | 65 20 6f 72 20 64 69 73 61 62 6c 65 20 20 49 43 4d 50 76 34 20 72 65 64 69 72 65 63 74 20 6d 65 | e.or.disable..ICMPv4.redirect.me |
128fa0 | 73 73 61 67 65 73 20 73 65 6e 64 20 62 79 20 56 79 4f 53 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e | ssages.send.by.VyOS.The.followin |
128fc0 | 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 | g.system.parameter.will.be.alter |
128fe0 | 65 64 3a 00 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 49 43 4d 50 76 34 20 72 65 64 | ed:.enable.or.disable.ICMPv4.red |
129000 | 69 72 65 63 74 20 6d 65 73 73 61 67 65 73 20 73 65 6e 64 20 62 79 20 56 79 4f 53 20 54 68 65 20 | irect.messages.send.by.VyOS.The. |
129020 | 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 | following.system.parameter.will. |
129040 | 62 65 20 61 6c 74 65 72 65 64 3a 00 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 6f 66 | be.altered:.enable.or.disable.of |
129060 | 20 49 43 4d 50 76 34 20 6f 72 20 49 43 4d 50 76 36 20 72 65 64 69 72 65 63 74 20 6d 65 73 73 61 | .ICMPv4.or.ICMPv6.redirect.messa |
129080 | 67 65 73 20 61 63 63 65 70 74 65 64 20 62 79 20 56 79 4f 53 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 | ges.accepted.by.VyOS..The.follow |
1290a0 | 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 | ing.system.parameter.will.be.alt |
1290c0 | 65 72 65 64 3a 00 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 74 68 65 20 6c 6f 67 67 | ered:.enable.or.disable.the.logg |
1290e0 | 69 6e 67 20 6f 66 20 6d 61 72 74 69 61 6e 20 49 50 76 34 20 70 61 63 6b 65 74 73 2e 20 54 68 65 | ing.of.martian.IPv4.packets..The |
129100 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c | .following.system.parameter.will |
129120 | 20 62 65 20 61 6c 74 65 72 65 64 3a 00 65 72 72 00 65 74 68 65 72 6e 65 74 00 65 78 61 63 74 2d | .be.altered:.err.ethernet.exact- |
129140 | 6d 61 74 63 68 3a 20 65 78 61 63 74 20 6d 61 74 63 68 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 | match:.exact.match.of.the.networ |
129160 | 6b 20 70 72 65 66 69 78 65 73 2e 00 65 78 63 6c 75 64 65 00 66 61 69 6c 6f 76 65 72 00 66 61 73 | k.prefixes..exclude.failover.fas |
129180 | 74 3a 20 52 65 71 75 65 73 74 20 70 61 72 74 6e 65 72 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 4c | t:.Request.partner.to.transmit.L |
1291a0 | 41 43 50 44 55 73 20 65 76 65 72 79 20 31 20 73 65 63 6f 6e 64 00 66 69 6c 65 20 3c 66 69 6c 65 | ACPDUs.every.1.second.file.<file |
1291c0 | 20 6e 61 6d 65 3e 00 66 69 6c 74 65 72 2d 6c 69 73 74 00 66 74 70 00 66 75 6c 6c 20 2d 20 61 6c | .name>.filter-list.ftp.full.-.al |
1291e0 | 77 61 79 73 20 75 73 65 20 66 75 6c 6c 2d 64 75 70 6c 65 78 00 67 65 6e 65 76 65 00 68 61 6c 66 | ways.use.full-duplex.geneve.half |
129200 | 20 2d 20 61 6c 77 61 79 73 20 75 73 65 20 68 61 6c 66 2d 64 75 70 6c 65 78 00 68 6f 70 2d 6c 69 | .-.always.use.half-duplex.hop-li |
129220 | 6d 69 74 00 68 6f 73 74 3a 20 73 69 6e 67 6c 65 20 68 6f 73 74 20 49 50 20 61 64 64 72 65 73 73 | mit.host:.single.host.IP.address |
129240 | 20 74 6f 20 6d 61 74 63 68 2e 00 68 74 74 70 73 3a 2f 2f 61 63 63 65 73 73 2e 72 65 64 68 61 74 | .to.match..https://access.redhat |
129260 | 2e 63 6f 6d 2f 73 69 74 65 73 2f 64 65 66 61 75 6c 74 2f 66 69 6c 65 73 2f 61 74 74 61 63 68 6d | .com/sites/default/files/attachm |
129280 | 65 6e 74 73 2f 32 30 31 35 30 31 2d 70 65 72 66 2d 62 72 69 65 66 2d 6c 6f 77 2d 6c 61 74 65 6e | ents/201501-perf-brief-low-laten |
1292a0 | 63 79 2d 74 75 6e 69 6e 67 2d 72 68 65 6c 37 2d 76 32 2e 31 2e 70 64 66 00 68 74 74 70 73 3a 2f | cy-tuning-rhel7-v2.1.pdf.https:/ |
1292c0 | 2f 63 6f 6d 6d 75 6e 69 74 79 2e 6f 70 65 6e 76 70 6e 2e 6e 65 74 2f 6f 70 65 6e 76 70 6e 2f 77 | /community.openvpn.net/openvpn/w |
1292e0 | 69 6b 69 2f 44 61 74 61 43 68 61 6e 6e 65 6c 4f 66 66 6c 6f 61 64 2f 46 65 61 74 75 72 65 73 00 | iki/DataChannelOffload/Features. |
129300 | 69 66 20 74 68 65 72 65 20 69 73 20 61 20 73 75 70 70 6f 72 74 65 64 20 64 65 76 69 63 65 2c 20 | if.there.is.a.supported.device,. |
129320 | 65 6e 61 62 6c 65 20 49 6e 74 65 6c c2 ae 20 51 41 54 00 69 66 20 74 68 65 72 65 20 69 73 20 6e | enable.Intel...QAT.if.there.is.n |
129340 | 6f 6e 20 64 65 76 69 63 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 73 68 6f 77 20 | on.device.the.command.will.show. |
129360 | 60 60 60 4e 6f 20 51 41 54 20 64 65 76 69 63 65 20 66 6f 75 6e 64 60 60 60 00 69 6e 66 6f 00 69 | ```No.QAT.device.found```.info.i |
129380 | 6e 74 65 72 76 61 6c 00 69 6e 76 61 6c 69 64 00 69 6e 76 65 72 73 65 2d 6d 61 74 63 68 3a 20 6e | nterval.invalid.inverse-match:.n |
1293a0 | 65 74 77 6f 72 6b 2f 6e 65 74 6d 61 73 6b 20 74 6f 20 6d 61 74 63 68 20 28 72 65 71 75 69 72 65 | etwork/netmask.to.match.(require |
1293c0 | 73 20 6e 65 74 77 6f 72 6b 20 62 65 20 64 65 66 69 6e 65 64 29 2e 00 69 70 2d 66 6f 72 77 61 72 | s.network.be.defined)..ip-forwar |
1293e0 | 64 69 6e 67 00 69 73 69 73 64 00 69 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 69 74 68 20 61 | ding.isisd.it.can.be.used.with.a |
129400 | 6e 79 20 4e 49 43 2c 00 69 74 20 64 6f 65 73 20 6e 6f 74 20 69 6e 63 72 65 61 73 65 20 68 61 72 | ny.NIC,.it.does.not.increase.har |
129420 | 64 77 61 72 65 20 64 65 76 69 63 65 20 69 6e 74 65 72 72 75 70 74 20 72 61 74 65 20 28 61 6c 74 | dware.device.interrupt.rate.(alt |
129440 | 68 6f 75 67 68 20 69 74 20 64 6f 65 73 20 69 6e 74 72 6f 64 75 63 65 20 69 6e 74 65 72 2d 70 72 | hough.it.does.introduce.inter-pr |
129460 | 6f 63 65 73 73 6f 72 20 69 6e 74 65 72 72 75 70 74 73 20 28 49 50 49 73 29 29 2e 00 6b 65 72 6e | ocessor.interrupts.(IPIs))..kern |
129480 | 00 6c 32 74 70 76 33 00 6c 64 70 64 00 6c 65 61 73 65 00 6c 65 61 73 74 2d 63 6f 6e 6e 65 63 74 | .l2tpv3.ldpd.lease.least-connect |
1294a0 | 69 6f 6e 00 6c 65 66 74 20 6c 6f 63 61 6c 5f 69 70 3a 20 31 39 32 2e 31 36 38 2e 30 2e 31 30 20 | ion.left.local_ip:.192.168.0.10. |
1294c0 | 23 20 56 50 4e 20 47 61 74 65 77 61 79 2c 20 62 65 68 69 6e 64 20 4e 41 54 20 64 65 76 69 63 65 | #.VPN.Gateway,.behind.NAT.device |
1294e0 | 00 6c 65 66 74 20 6c 6f 63 61 6c 5f 69 70 3a 20 60 31 39 38 2e 35 31 2e 31 30 30 2e 33 60 20 23 | .left.local_ip:.`198.51.100.3`.# |
129500 | 20 73 65 72 76 65 72 20 73 69 64 65 20 57 41 4e 20 49 50 00 6c 65 66 74 20 70 75 62 6c 69 63 5f | .server.side.WAN.IP.left.public_ |
129520 | 69 70 3a 31 37 32 2e 31 38 2e 32 30 31 2e 31 30 00 6c 65 66 74 20 73 75 62 6e 65 74 3a 20 60 31 | ip:172.18.201.10.left.subnet:.`1 |
129540 | 39 32 2e 31 36 38 2e 30 2e 30 2f 32 34 60 20 73 69 74 65 31 2c 20 73 65 72 76 65 72 20 73 69 64 | 92.168.0.0/24`.site1,.server.sid |
129560 | 65 20 28 69 2e 65 2e 20 6c 6f 63 61 6c 69 74 79 2c 20 61 63 74 75 61 6c 6c 79 20 74 68 65 72 65 | e.(i.e..locality,.actually.there |
129580 | 20 69 73 20 6e 6f 20 63 6c 69 65 6e 74 20 6f 72 20 73 65 72 76 65 72 20 72 6f 6c 65 73 29 00 6c | .is.no.client.or.server.roles).l |
1295a0 | 69 6e 6b 2d 6d 74 75 00 6c 6f 63 61 6c 20 75 73 65 20 30 20 28 6c 6f 63 61 6c 30 29 00 6c 6f 63 | ink-mtu.local.use.0.(local0).loc |
1295c0 | 61 6c 20 75 73 65 20 31 20 28 6c 6f 63 61 6c 31 29 00 6c 6f 63 61 6c 20 75 73 65 20 32 20 28 6c | al.use.1.(local1).local.use.2.(l |
1295e0 | 6f 63 61 6c 32 29 00 6c 6f 63 61 6c 20 75 73 65 20 33 20 28 6c 6f 63 61 6c 33 29 00 6c 6f 63 61 | ocal2).local.use.3.(local3).loca |
129600 | 6c 20 75 73 65 20 34 20 28 6c 6f 63 61 6c 34 29 00 6c 6f 63 61 6c 20 75 73 65 20 35 20 28 6c 6f | l.use.4.(local4).local.use.5.(lo |
129620 | 63 61 6c 35 29 00 6c 6f 63 61 6c 20 75 73 65 20 37 20 28 6c 6f 63 61 6c 37 29 00 6c 6f 63 61 6c | cal5).local.use.7.(local7).local |
129640 | 30 00 6c 6f 63 61 6c 31 00 6c 6f 63 61 6c 32 00 6c 6f 63 61 6c 33 00 6c 6f 63 61 6c 34 00 6c 6f | 0.local1.local2.local3.local4.lo |
129660 | 63 61 6c 35 00 6c 6f 63 61 6c 36 00 6c 6f 63 61 6c 37 00 6c 6f 63 61 6c 69 74 79 2d 62 61 73 65 | cal5.local6.local7.locality-base |
129680 | 64 2d 6c 65 61 73 74 2d 63 6f 6e 6e 65 63 74 69 6f 6e 00 6c 6f 67 61 6c 65 72 74 00 6c 6f 67 61 | d-least-connection.logalert.loga |
1296a0 | 75 64 69 74 00 6c 6f 6f 73 65 3a 20 45 61 63 68 20 69 6e 63 6f 6d 69 6e 67 20 70 61 63 6b 65 74 | udit.loose:.Each.incoming.packet |
1296c0 | 27 73 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 69 73 20 61 6c 73 6f 20 74 65 73 74 65 64 | 's.source.address.is.also.tested |
1296e0 | 20 61 67 61 69 6e 73 74 20 74 68 65 20 46 49 42 20 61 6e 64 20 69 66 20 74 68 65 20 73 6f 75 72 | .against.the.FIB.and.if.the.sour |
129700 | 63 65 20 61 64 64 72 65 73 73 20 69 73 20 6e 6f 74 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 | ce.address.is.not.reachable.via. |
129720 | 61 6e 79 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 70 61 63 6b 65 74 20 63 68 65 63 6b 20 77 | any.interface.the.packet.check.w |
129740 | 69 6c 6c 20 66 61 69 6c 2e 00 6c 70 72 00 6d 44 4e 53 20 52 65 70 65 61 74 65 72 00 6d 44 4e 53 | ill.fail..lpr.mDNS.Repeater.mDNS |
129760 | 20 72 65 70 65 61 74 65 72 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 72 | .repeater.can.be.configured.to.r |
129780 | 65 2d 62 72 6f 61 64 63 61 73 74 20 6f 6e 6c 79 20 73 70 65 63 69 66 69 63 20 73 65 72 76 69 63 | e-broadcast.only.specific.servic |
1297a0 | 65 73 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 61 6c 6c 20 73 65 72 76 69 63 65 73 20 61 72 65 | es..By.default,.all.services.are |
1297c0 | 20 72 65 2d 62 72 6f 61 64 63 61 73 74 65 64 2e 00 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 63 | .re-broadcasted..mDNS.repeater.c |
1297e0 | 61 6e 20 62 65 20 65 6e 61 62 6c 65 64 20 65 69 74 68 65 72 20 6f 6e 20 49 50 76 34 20 73 6f 63 | an.be.enabled.either.on.IPv4.soc |
129800 | 6b 65 74 20 6f 72 20 6f 6e 20 49 50 76 36 20 73 6f 63 6b 65 74 20 6f 72 20 62 6f 74 68 20 74 6f | ket.or.on.IPv6.socket.or.both.to |
129820 | 20 72 65 2d 62 72 6f 61 64 63 61 73 74 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 6d 44 4e 53 20 | .re-broadcast..By.default,.mDNS. |
129840 | 72 65 70 65 61 74 65 72 20 77 69 6c 6c 20 6c 69 73 74 65 6e 20 6f 6e 20 62 6f 74 68 20 49 50 76 | repeater.will.listen.on.both.IPv |
129860 | 34 20 61 6e 64 20 49 50 76 36 2e 00 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 63 61 6e 20 62 65 | 4.and.IPv6..mDNS.repeater.can.be |
129880 | 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 64 69 73 61 62 6c 65 64 20 77 69 74 68 6f 75 74 20 64 65 | .temporarily.disabled.without.de |
1298a0 | 6c 65 74 69 6e 67 20 74 68 65 20 73 65 72 76 69 63 65 20 75 73 69 6e 67 00 6d 61 69 6c 00 6d 61 | leting.the.service.using.mail.ma |
1298c0 | 6e 61 67 65 64 2d 66 6c 61 67 00 6d 61 74 63 68 2d 66 72 61 67 3a 20 53 65 63 6f 6e 64 20 61 6e | naged-flag.match-frag:.Second.an |
1298e0 | 64 20 66 75 72 74 68 65 72 20 66 72 61 67 6d 65 6e 74 73 20 6f 66 20 66 72 61 67 6d 65 6e 74 65 | d.further.fragments.of.fragmente |
129900 | 64 20 70 61 63 6b 65 74 73 2e 00 6d 61 74 63 68 2d 69 70 73 65 63 3a 20 6d 61 74 63 68 20 69 6e | d.packets..match-ipsec:.match.in |
129920 | 62 6f 75 6e 64 20 49 50 73 65 63 20 70 61 63 6b 65 74 73 2e 00 6d 61 74 63 68 2d 6e 6f 6e 2d 66 | bound.IPsec.packets..match-non-f |
129940 | 72 61 67 3a 20 48 65 61 64 20 66 72 61 67 6d 65 6e 74 73 20 6f 72 20 75 6e 66 72 61 67 6d 65 6e | rag:.Head.fragments.or.unfragmen |
129960 | 74 65 64 20 70 61 63 6b 65 74 73 2e 00 6d 61 74 63 68 2d 6e 6f 6e 65 3a 20 6d 61 74 63 68 20 69 | ted.packets..match-none:.match.i |
129980 | 6e 62 6f 75 6e 64 20 6e 6f 6e 2d 49 50 73 65 63 20 70 61 63 6b 65 74 73 2e 00 6d 69 6e 69 6d 61 | nbound.non-IPsec.packets..minima |
1299a0 | 6c 20 63 6f 6e 66 69 67 00 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 72 65 6c 61 74 65 | l.config.more.information.relate |
1299c0 | 64 20 49 47 50 20 20 2d 20 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 69 73 69 73 60 00 6d 6f 72 | d.IGP..-.:ref:`routing-isis`.mor |
1299e0 | 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 72 65 6c 61 74 65 64 20 49 47 50 20 20 2d 20 3a 72 65 | e.information.related.IGP..-.:re |
129a00 | 66 3a 60 72 6f 75 74 69 6e 67 2d 6f 73 70 66 60 00 6e 61 6d 65 2d 73 65 72 76 65 72 00 6e 65 74 | f:`routing-ospf`.name-server.net |
129a20 | 62 69 6f 73 2d 6e 61 6d 65 2d 73 65 72 76 65 72 73 00 6e 65 74 77 6f 72 6b 3a 20 6e 65 74 77 6f | bios-name-servers.network:.netwo |
129a40 | 72 6b 2f 6e 65 74 6d 61 73 6b 20 74 6f 20 6d 61 74 63 68 20 28 72 65 71 75 69 72 65 73 20 69 6e | rk/netmask.to.match.(requires.in |
129a60 | 76 65 72 73 65 2d 6d 61 74 63 68 20 62 65 20 64 65 66 69 6e 65 64 29 20 42 55 47 2c 20 4e 4f 20 | verse-match.be.defined).BUG,.NO. |
129a80 | 69 6e 76 65 72 74 2d 6d 61 74 63 68 20 6f 70 74 69 6f 6e 20 69 6e 20 61 63 63 65 73 73 2d 6c 69 | invert-match.option.in.access-li |
129aa0 | 73 74 36 00 6e 65 74 77 6f 72 6b 3a 20 6e 65 74 77 6f 72 6b 2f 6e 65 74 6d 61 73 6b 20 74 6f 20 | st6.network:.network/netmask.to. |
129ac0 | 6d 61 74 63 68 20 28 72 65 71 75 69 72 65 73 20 69 6e 76 65 72 73 65 2d 6d 61 74 63 68 20 62 65 | match.(requires.inverse-match.be |
129ae0 | 20 64 65 66 69 6e 65 64 29 2e 00 6e 65 77 73 00 6e 65 78 74 2d 73 65 72 76 65 72 00 6e 6f 2d 61 | .defined)..news.next-server.no-a |
129b00 | 75 74 6f 6e 6f 6d 6f 75 73 2d 66 6c 61 67 00 6e 6f 2d 6f 6e 2d 6c 69 6e 6b 2d 66 6c 61 67 00 6e | utonomous-flag.no-on-link-flag.n |
129b20 | 6f 74 66 6f 75 6e 64 00 6e 6f 74 69 63 65 00 6e 74 70 00 6e 74 70 2d 73 65 72 76 65 72 00 6e 74 | otfound.notice.ntp.ntp-server.nt |
129b40 | 70 2d 73 65 72 76 65 72 73 00 6f 6e 65 20 72 75 6c 65 20 77 69 74 68 20 61 20 4c 41 4e 20 28 69 | p-servers.one.rule.with.a.LAN.(i |
129b60 | 6e 62 6f 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 29 20 61 6e 64 20 74 68 65 20 57 41 4e 20 28 69 | nbound-interface).and.the.WAN.(i |
129b80 | 6e 74 65 72 66 61 63 65 29 2e 00 6f 70 65 6e 76 70 6e 00 6f 73 70 66 36 64 00 6f 73 70 66 64 00 | nterface)..openvpn.ospf6d.ospfd. |
129ba0 | 6f 73 70 66 64 20 73 75 70 70 6f 72 74 73 20 4f 70 61 71 75 65 20 4c 53 41 20 3a 72 66 63 3a 60 | ospfd.supports.Opaque.LSA.:rfc:` |
129bc0 | 32 33 37 30 60 20 61 73 20 70 61 72 74 69 61 6c 20 73 75 70 70 6f 72 74 20 66 6f 72 20 4d 50 4c | 2370`.as.partial.support.for.MPL |
129be0 | 53 20 54 72 61 66 66 69 63 20 45 6e 67 69 6e 65 65 72 69 6e 67 20 4c 53 41 73 2e 20 54 68 65 20 | S.Traffic.Engineering.LSAs..The. |
129c00 | 6f 70 61 71 75 65 2d 6c 73 61 20 63 61 70 61 62 69 6c 69 74 79 20 6d 75 73 74 20 62 65 20 65 6e | opaque-lsa.capability.must.be.en |
129c20 | 61 62 6c 65 64 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 6f 74 68 65 | abled.in.the.configuration..othe |
129c40 | 72 2d 63 6f 6e 66 69 67 2d 66 6c 61 67 00 70 61 67 65 73 20 74 6f 20 73 6f 72 74 00 70 6f 6c 69 | r-config-flag.pages.to.sort.poli |
129c60 | 63 79 20 61 73 2d 70 61 74 68 2d 6c 69 73 74 00 70 6f 6c 69 63 79 20 63 6f 6d 6d 75 6e 69 74 79 | cy.as-path-list.policy.community |
129c80 | 2d 6c 69 73 74 00 70 6f 6c 69 63 79 20 65 78 74 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 00 70 | -list.policy.extcommunity-list.p |
129ca0 | 6f 6c 69 63 79 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 00 70 6f 70 2d 73 | olicy.large-community-list.pop-s |
129cc0 | 65 72 76 65 72 00 70 72 65 66 65 72 72 65 64 2d 6c 69 66 65 74 69 6d 65 00 70 72 65 66 69 78 2d | erver.preferred-lifetime.prefix- |
129ce0 | 6c 69 73 74 2c 20 64 69 73 74 72 69 62 75 74 65 2d 6c 69 73 74 00 70 73 65 75 64 6f 2d 65 74 68 | list,.distribute-list.pseudo-eth |
129d00 | 65 72 6e 65 74 00 72 61 6e 67 65 00 72 65 61 63 68 61 62 6c 65 2d 74 69 6d 65 00 72 65 73 65 74 | ernet.range.reachable-time.reset |
129d20 | 20 63 6f 6d 6d 61 6e 64 73 00 72 65 74 72 61 6e 73 2d 74 69 6d 65 72 00 72 66 63 33 34 34 32 2d | .commands.retrans-timer.rfc3442- |
129d40 | 73 74 61 74 69 63 2d 72 6f 75 74 65 2c 20 77 69 6e 64 6f 77 73 2d 73 74 61 74 69 63 2d 72 6f 75 | static-route,.windows-static-rou |
129d60 | 74 65 00 72 66 63 33 37 36 38 2d 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 00 72 69 67 68 74 20 6c | te.rfc3768-compatibility.right.l |
129d80 | 6f 63 61 6c 5f 69 70 3a 20 31 37 32 2e 31 38 2e 32 30 32 2e 31 30 20 23 20 72 69 67 68 74 20 73 | ocal_ip:.172.18.202.10.#.right.s |
129da0 | 69 64 65 20 57 41 4e 20 49 50 00 72 69 67 68 74 20 6c 6f 63 61 6c 5f 69 70 3a 20 60 32 30 33 2e | ide.WAN.IP.right.local_ip:.`203. |
129dc0 | 30 2e 31 31 33 2e 32 60 20 23 20 72 65 6d 6f 74 65 20 6f 66 66 69 63 65 20 73 69 64 65 20 57 41 | 0.113.2`.#.remote.office.side.WA |
129de0 | 4e 20 49 50 00 72 69 67 68 74 20 73 75 62 6e 65 74 3a 20 60 31 30 2e 30 2e 30 2e 30 2f 32 34 60 | N.IP.right.subnet:.`10.0.0.0/24` |
129e00 | 20 73 69 74 65 32 2c 72 65 6d 6f 74 65 20 6f 66 66 69 63 65 20 73 69 64 65 00 72 69 70 64 00 72 | .site2,remote.office.side.ripd.r |
129e20 | 6f 75 6e 64 2d 72 6f 62 69 6e 00 72 6f 75 74 65 2d 6d 61 70 00 72 6f 75 74 65 72 73 00 73 46 6c | ound-robin.route-map.routers.sFl |
129e40 | 6f 77 00 73 46 6c 6f 77 20 69 73 20 61 20 74 65 63 68 6e 6f 6c 6f 67 79 20 74 68 61 74 20 65 6e | ow.sFlow.is.a.technology.that.en |
129e60 | 61 62 6c 65 73 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 6f 66 20 6e 65 74 77 6f 72 6b 20 74 72 61 66 | ables.monitoring.of.network.traf |
129e80 | 66 69 63 20 62 79 20 73 65 6e 64 69 6e 67 20 73 61 6d 70 6c 65 64 20 70 61 63 6b 65 74 73 20 74 | fic.by.sending.sampled.packets.t |
129ea0 | 6f 20 61 20 63 6f 6c 6c 65 63 74 6f 72 20 64 65 76 69 63 65 2e 00 73 65 63 75 72 69 74 79 00 73 | o.a.collector.device..security.s |
129ec0 | 65 72 76 65 72 20 65 78 61 6d 70 6c 65 00 73 65 72 76 65 72 2d 69 64 65 6e 74 69 66 69 65 72 00 | erver.example.server-identifier. |
129ee0 | 73 65 74 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 6e 64 2f 6f 72 20 73 6f 75 72 63 65 20 | set.a.destination.and/or.source. |
129f00 | 61 64 64 72 65 73 73 2e 20 41 63 63 65 70 74 65 64 20 69 6e 70 75 74 3a 00 73 68 61 32 35 36 20 | address..Accepted.input:.sha256. |
129f20 | 48 61 73 68 65 73 00 73 68 6f 77 20 63 6f 6d 6d 61 6e 64 73 00 73 69 61 64 64 72 00 73 6c 6f 77 | Hashes.show.commands.siaddr.slow |
129f40 | 3a 20 52 65 71 75 65 73 74 20 70 61 72 74 6e 65 72 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 4c 41 | :.Request.partner.to.transmit.LA |
129f60 | 43 50 44 55 73 20 65 76 65 72 79 20 33 30 20 73 65 63 6f 6e 64 73 00 73 6d 74 70 2d 73 65 72 76 | CPDUs.every.30.seconds.smtp-serv |
129f80 | 65 72 00 73 6f 66 74 77 61 72 65 20 66 69 6c 74 65 72 73 20 63 61 6e 20 65 61 73 69 6c 79 20 62 | er.software.filters.can.easily.b |
129fa0 | 65 20 61 64 64 65 64 20 74 6f 20 68 61 73 68 20 6f 76 65 72 20 6e 65 77 20 70 72 6f 74 6f 63 6f | e.added.to.hash.over.new.protoco |
129fc0 | 6c 73 2c 00 73 6f 75 72 63 65 2d 68 61 73 68 69 6e 67 00 73 70 6f 6b 65 30 31 2d 73 70 6f 6b 65 | ls,.source-hashing.spoke01-spoke |
129fe0 | 30 34 00 73 70 6f 6b 65 30 35 00 73 74 61 74 69 63 2d 6d 61 70 70 69 6e 67 00 73 74 61 74 69 63 | 04.spoke05.static-mapping.static |
12a000 | 2d 72 6f 75 74 65 00 73 74 72 69 63 74 3a 20 45 61 63 68 20 69 6e 63 6f 6d 69 6e 67 20 70 61 63 | -route.strict:.Each.incoming.pac |
12a020 | 6b 65 74 20 69 73 20 74 65 73 74 65 64 20 61 67 61 69 6e 73 74 20 74 68 65 20 46 49 42 20 61 6e | ket.is.tested.against.the.FIB.an |
12a040 | 64 20 69 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 6e 6f 74 20 74 68 65 20 62 65 | d.if.the.interface.is.not.the.be |
12a060 | 73 74 20 72 65 76 65 72 73 65 20 70 61 74 68 20 74 68 65 20 70 61 63 6b 65 74 20 63 68 65 63 6b | st.reverse.path.the.packet.check |
12a080 | 20 77 69 6c 6c 20 66 61 69 6c 2e 20 42 79 20 64 65 66 61 75 6c 74 20 66 61 69 6c 65 64 20 70 61 | .will.fail..By.default.failed.pa |
12a0a0 | 63 6b 65 74 73 20 61 72 65 20 64 69 73 63 61 72 64 65 64 2e 00 73 75 62 6e 65 74 2d 6d 61 73 6b | ckets.are.discarded..subnet-mask |
12a0c0 | 00 73 79 73 6c 6f 67 00 74 61 69 6c 00 74 63 5f 20 69 73 20 61 20 70 6f 77 65 72 66 75 6c 20 74 | .syslog.tail.tc_.is.a.powerful.t |
12a0e0 | 6f 6f 6c 20 66 6f 72 20 54 72 61 66 66 69 63 20 43 6f 6e 74 72 6f 6c 20 66 6f 75 6e 64 20 61 74 | ool.for.Traffic.Control.found.at |
12a100 | 20 74 68 65 20 4c 69 6e 75 78 20 6b 65 72 6e 65 6c 2e 20 48 6f 77 65 76 65 72 2c 20 69 74 73 20 | .the.Linux.kernel..However,.its. |
12a120 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 6f 66 74 65 6e 20 63 6f 6e 73 69 64 65 72 65 | configuration.is.often.considere |
12a140 | 64 20 61 20 63 75 6d 62 65 72 73 6f 6d 65 20 74 61 73 6b 2e 20 46 6f 72 74 75 6e 61 74 65 6c 79 | d.a.cumbersome.task..Fortunately |
12a160 | 2c 20 56 79 4f 53 20 65 61 73 65 73 20 74 68 65 20 6a 6f 62 20 74 68 72 6f 75 67 68 20 69 74 73 | ,.VyOS.eases.the.job.through.its |
12a180 | 20 43 4c 49 2c 20 77 68 69 6c 65 20 75 73 69 6e 67 20 60 60 74 63 60 60 20 61 73 20 62 61 63 6b | .CLI,.while.using.``tc``.as.back |
12a1a0 | 65 6e 64 2e 00 74 66 74 70 2d 73 65 72 76 65 72 2d 6e 61 6d 65 00 74 68 69 73 20 6f 70 74 69 6f | end..tftp-server-name.this.optio |
12a1c0 | 6e 20 61 6c 6c 6f 77 73 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 70 72 65 66 69 78 2d 73 69 64 | n.allows.to.configure.prefix-sid |
12a1e0 | 20 6f 6e 20 53 52 2e 20 54 68 65 20 e2 80 98 6e 6f 2d 70 68 70 2d 66 6c 61 67 e2 80 99 20 6d 65 | .on.SR..The....no-php-flag....me |
12a200 | 61 6e 73 20 4e 4f 20 50 65 6e 75 6c 74 69 6d 61 74 65 20 48 6f 70 20 50 6f 70 70 69 6e 67 20 74 | ans.NO.Penultimate.Hop.Popping.t |
12a220 | 68 61 74 20 61 6c 6c 6f 77 73 20 53 52 20 6e 6f 64 65 20 74 6f 20 72 65 71 75 65 73 74 20 74 6f | hat.allows.SR.node.to.request.to |
12a240 | 20 69 74 73 20 6e 65 69 67 68 62 6f 72 20 74 6f 20 6e 6f 74 20 70 6f 70 20 74 68 65 20 6c 61 62 | .its.neighbor.to.not.pop.the.lab |
12a260 | 65 6c 2e 20 54 68 65 20 e2 80 98 65 78 70 6c 69 63 69 74 2d 6e 75 6c 6c e2 80 99 20 66 6c 61 67 | el..The....explicit-null....flag |
12a280 | 20 61 6c 6c 6f 77 73 20 53 52 20 6e 6f 64 65 20 74 6f 20 72 65 71 75 65 73 74 20 74 6f 20 69 74 | .allows.SR.node.to.request.to.it |
12a2a0 | 73 20 6e 65 69 67 68 62 6f 72 20 74 6f 20 73 65 6e 64 20 49 50 20 70 61 63 6b 65 74 20 77 69 74 | s.neighbor.to.send.IP.packet.wit |
12a2c0 | 68 20 74 68 65 20 45 58 50 4c 49 43 49 54 2d 4e 55 4c 4c 20 6c 61 62 65 6c 2e 20 54 68 65 20 e2 | h.the.EXPLICIT-NULL.label..The.. |
12a2e0 | 80 98 6e 2d 66 6c 61 67 2d 63 6c 65 61 72 e2 80 99 20 6f 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 | ..n-flag-clear....option.can.be. |
12a300 | 75 73 65 64 20 74 6f 20 65 78 70 6c 69 63 69 74 6c 79 20 63 6c 65 61 72 20 74 68 65 20 4e 6f 64 | used.to.explicitly.clear.the.Nod |
12a320 | 65 20 66 6c 61 67 20 74 68 61 74 20 69 73 20 73 65 74 20 62 79 20 64 65 66 61 75 6c 74 20 66 6f | e.flag.that.is.set.by.default.fo |
12a340 | 72 20 50 72 65 66 69 78 2d 53 49 44 73 20 61 73 73 6f 63 69 61 74 65 64 20 74 6f 20 6c 6f 6f 70 | r.Prefix-SIDs.associated.to.loop |
12a360 | 62 61 63 6b 20 61 64 64 72 65 73 73 65 73 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 6e | back.addresses..This.option.is.n |
12a380 | 65 63 65 73 73 61 72 79 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 41 6e 79 63 61 73 74 2d 53 49 | ecessary.to.configure.Anycast-SI |
12a3a0 | 44 73 2e 00 74 69 6d 65 2d 6f 66 66 73 65 74 00 74 69 6d 65 2d 73 65 72 76 65 72 00 74 69 6d 65 | Ds..time-offset.time-server.time |
12a3c0 | 2d 73 65 72 76 65 72 73 00 74 75 6e 6e 65 6c 00 75 73 65 20 36 20 28 6c 6f 63 61 6c 36 29 00 75 | -servers.tunnel.use.6.(local6).u |
12a3e0 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 68 65 63 6b 20 69 66 20 74 68 65 72 | se.this.command.to.check.if.ther |
12a400 | 65 20 69 73 20 61 6e 20 49 6e 74 65 6c c2 ae 20 51 41 54 20 73 75 70 70 6f 72 74 65 64 20 50 72 | e.is.an.Intel...QAT.supported.Pr |
12a420 | 6f 63 65 73 73 6f 72 20 69 6e 20 79 6f 75 72 20 73 79 73 74 65 6d 2e 00 75 73 65 72 00 75 75 63 | ocessor.in.your.system..user.uuc |
12a440 | 70 00 76 61 6c 69 64 00 76 61 6c 69 64 2d 6c 69 66 65 74 69 6d 65 00 76 65 74 68 20 69 6e 74 65 | p.valid.valid-lifetime.veth.inte |
12a460 | 72 66 61 63 65 73 20 6e 65 65 64 20 74 6f 20 62 65 20 63 72 65 61 74 65 64 20 69 6e 20 70 61 69 | rfaces.need.to.be.created.in.pai |
12a480 | 72 73 20 2d 20 69 74 27 73 20 63 61 6c 6c 65 64 20 74 68 65 20 70 65 65 72 20 6e 61 6d 65 00 76 | rs.-.it's.called.the.peer.name.v |
12a4a0 | 78 6c 61 6e 00 77 61 72 6e 69 6e 67 00 77 65 20 64 65 73 63 72 69 62 65 64 20 74 68 65 20 63 6f | xlan.warning.we.described.the.co |
12a4c0 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 53 52 20 49 53 49 53 20 2f 20 53 52 20 4f 53 50 46 20 75 73 | nfiguration.SR.ISIS./.SR.OSPF.us |
12a4e0 | 69 6e 67 20 32 20 63 6f 6e 6e 65 63 74 65 64 20 77 69 74 68 20 74 68 65 6d 20 74 6f 20 73 68 61 | ing.2.connected.with.them.to.sha |
12a500 | 72 65 20 6c 61 62 65 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 77 65 69 67 68 74 65 64 2d 6c | re.label.information..weighted-l |
12a520 | 65 61 73 74 2d 63 6f 6e 6e 65 63 74 69 6f 6e 00 77 65 69 67 68 74 65 64 2d 72 6f 75 6e 64 2d 72 | east-connection.weighted-round-r |
12a540 | 6f 62 69 6e 00 77 68 69 6c 65 20 61 20 2a 62 79 74 65 2a 20 69 73 20 77 72 69 74 74 65 6e 20 61 | obin.while.a.*byte*.is.written.a |
12a560 | 73 20 61 20 73 69 6e 67 6c 65 20 2a 2a 62 2a 2a 2e 00 77 69 6e 73 2d 73 65 72 76 65 72 00 77 69 | s.a.single.**b**..wins-server.wi |
12a580 | 72 65 67 75 61 72 64 00 77 69 72 65 6c 65 73 73 00 77 69 74 68 20 3a 63 66 67 63 6d 64 3a 60 73 | reguard.wireless.with.:cfgcmd:`s |
12a5a0 | 65 74 20 73 79 73 74 65 6d 20 61 63 63 65 6c 65 72 61 74 69 6f 6e 20 71 61 74 60 20 6f 6e 20 62 | et.system.acceleration.qat`.on.b |
12a5c0 | 6f 74 68 20 73 79 73 74 65 6d 73 20 74 68 65 20 62 61 6e 64 77 69 64 74 68 20 69 6e 63 72 65 61 | oth.systems.the.bandwidth.increa |
12a5e0 | 73 65 73 2e 00 77 70 61 64 2d 75 72 6c 00 77 70 61 64 2d 75 72 6c 2c 20 77 70 61 64 2d 75 72 6c | ses..wpad-url.wpad-url,.wpad-url |
12a600 | 20 63 6f 64 65 20 32 35 32 20 3d 20 74 65 78 74 00 77 77 61 6e 00 7a 65 62 72 61 00 | .code.252.=.text.wwan.zebra. |