Github: update translations

22 files changed, 5176 insertions, 184 deletions

diff --git a/docs/_locale/de/LC_MESSAGES/automation.mo b/docs/_locale/de/LC_MESSAGES/automation.mo
new file mode 100644
index 00000000..0c571a2e
--- /dev/null
+++ b/docs/_locale/de/LC_MESSAGES/automation.mo
diff --git a/docs/_locale/de/LC_MESSAGES/cli.mo b/docs/_locale/de/LC_MESSAGES/cli.mo
new file mode 100644
index 00000000..efb26dae
--- /dev/null
+++ b/docs/_locale/de/LC_MESSAGES/cli.mo
diff --git a/docs/_locale/de/LC_MESSAGES/configuration.mo b/docs/_locale/de/LC_MESSAGES/configuration.mo
index a4a72442..780cfc5c 100644
--- a/docs/_locale/de/LC_MESSAGES/configuration.mo
+++ b/docs/_locale/de/LC_MESSAGES/configuration.mo
diff --git a/docs/_locale/de/LC_MESSAGES/copyright.mo b/docs/_locale/de/LC_MESSAGES/copyright.mo
new file mode 100644
index 00000000..23772d99
--- /dev/null
+++ b/docs/_locale/de/LC_MESSAGES/copyright.mo
diff --git a/docs/_locale/de/LC_MESSAGES/documentation.mo b/docs/_locale/de/LC_MESSAGES/documentation.mo
new file mode 100644
index 00000000..bd88ebc5
--- /dev/null
+++ b/docs/_locale/de/LC_MESSAGES/documentation.mo
diff --git a/docs/_locale/de/LC_MESSAGES/index.mo b/docs/_locale/de/LC_MESSAGES/index.mo
new file mode 100644
index 00000000..fdea0b20
--- /dev/null
+++ b/docs/_locale/de/LC_MESSAGES/index.mo
diff --git a/docs/_locale/de/LC_MESSAGES/installation.mo b/docs/_locale/de/LC_MESSAGES/installation.mo
new file mode 100644
index 00000000..e3d86879
--- /dev/null
+++ b/docs/_locale/de/LC_MESSAGES/installation.mo
diff --git a/docs/_locale/de/LC_MESSAGES/introducing.mo b/docs/_locale/de/LC_MESSAGES/introducing.mo
new file mode 100644
index 00000000..3fa74d21
--- /dev/null
+++ b/docs/_locale/de/LC_MESSAGES/introducing.mo
diff --git a/docs/_locale/de/LC_MESSAGES/operation.mo b/docs/_locale/de/LC_MESSAGES/operation.mo
new file mode 100644
index 00000000..23f87dbe
--- /dev/null
+++ b/docs/_locale/de/LC_MESSAGES/operation.mo
diff --git a/docs/_locale/de/LC_MESSAGES/quick-start.mo b/docs/_locale/de/LC_MESSAGES/quick-start.mo
new file mode 100644
index 00000000..6988da10
--- /dev/null
+++ b/docs/_locale/de/LC_MESSAGES/quick-start.mo
diff --git a/docs/_locale/de/LC_MESSAGES/troubleshooting.mo b/docs/_locale/de/LC_MESSAGES/troubleshooting.mo
new file mode 100644
index 00000000..0976ac6f
--- /dev/null
+++ b/docs/_locale/de/LC_MESSAGES/troubleshooting.mo
diff --git a/docs/_locale/de/automation.pot b/docs/_locale/de/automation.pot
new file mode 100644
index 00000000..6d0be2c4
--- /dev/null
+++ b/docs/_locale/de/automation.pot
@@ -0,0 +1,817 @@
+msgid ""
+msgstr ""
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Localazy (https://localazy.com)\n"
+"Project-Id-Version: VyOS Documentation\n"
+"Language: de\n"
+"Plural-Forms: nplurals=2; plural=(n==1) ? 0 : 1;\n"
+
+#: ../../automation/cloud-init.rst:363
+msgid "**NOTE**: be carefull while copying and pasting previous commands. Doble quotes may need to be corrected."
+msgstr "**NOTE**: be carefull while copying and pasting previous commands. Doble quotes may need to be corrected."
+
+#: ../../automation/cloud-init.rst:305
+msgid "**meta-data**: empty file (required)."
+msgstr "**meta-data**: empty file (required)."
+
+#: ../../automation/cloud-init.rst:300
+msgid "**network-config**: file that will indicate to avoid dhcp client on first interface."
+msgstr "**network-config**: file that will indicate to avoid dhcp client on first interface."
+
+#: ../../automation/cloud-init.rst:333
+msgid "**network-config** file only has configuration that disables the automatic dhcp client on first interface."
+msgstr "**network-config** file only has configuration that disables the automatic dhcp client on first interface."
+
+#: ../../automation/cloud-init.rst:303
+msgid "**user-data**: includes vyos-commands."
+msgstr "**user-data**: includes vyos-commands."
+
+#: ../../automation/cloud-init.rst:314
+msgid "**user-data** file must start with ``#cloud-config`` and contains vyos-commands. For example:"
+msgstr "**user-data** file must start with ``#cloud-config`` and contains vyos-commands. For example:"
+
+#: ../../automation/vyos-api.rst:285
+msgid "/config-file"
+msgstr "/config-file"
+
+#: ../../automation/vyos-api.rst:228
+msgid "/configure"
+msgstr "/configure"
+
+#: ../../automation/vyos-api.rst:209
+msgid "/generate"
+msgstr "/generate"
+
+#: ../../automation/vyos-api.rst:147
+msgid "/image"
+msgstr "/image"
+
+#: ../../automation/vyos-api.rst:129
+msgid "/reset"
+msgstr "/reset"
+
+#: ../../automation/vyos-api.rst:44
+msgid "/retrieve"
+msgstr "/retrieve"
+
+#: ../../automation/vyos-api.rst:185
+msgid "/show"
+msgstr "/show"
+
+#: ../../automation/vyos-api.rst:41
+msgid "API Endpoints"
+msgstr "API Endpoints"
+
+#: ../../automation/cloud-init.rst:270
+msgid "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After clonning the repo, edit the file **qemu.yml** and comment the **download-iso** role."
+msgstr "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After clonning the repo, edit the file **qemu.yml** and comment the **download-iso** role."
+
+#: ../../automation/cloud-init.rst:63
+msgid "A cloud-config document is written in YAML. The file must begin with ``#cloud-config`` line. The only supported top-level keys are ``vyos_config_commands`` and ``write_files``. The use of these keys is described in the following two sections."
+msgstr "A cloud-config document is written in YAML. The file must begin with ``#cloud-config`` line. The only supported top-level keys are ``vyos_config_commands`` and ``write_files``. The use of these keys is described in the following two sections."
+
+#: ../../automation/command-scripting.rst:159
+msgid "A simple example is shown below, where the ops command executed in the post-hook script is \"show interfaces\"."
+msgstr "A simple example is shown below, where the ops command executed in the post-hook script is \"show interfaces\"."
+
+#: ../../automation/cloud-init.rst:82
+msgid "A single-quote symbol is not allowed inside command or value."
+msgstr "A single-quote symbol is not allowed inside command or value."
+
+#: ../../automation/vyos-salt.rst:32
+msgid "Accept minion key"
+msgstr "Accept minion key"
+
+#: ../../automation/vyos-api.rst:15
+msgid "All endpoints only listen on HTTP POST requests and the API KEY must set as ``key`` in the formdata."
+msgstr "All endpoints only listen on HTTP POST requests and the API KEY must set as ``key`` in the formdata."
+
+#: ../../automation/cloud-init.rst:115
+msgid "All of these can be overridden using the configuration in user-data."
+msgstr "All of these can be overridden using the configuration in user-data."
+
+#: ../../automation/cloud-init.rst:256
+msgid "Also, this lab considers:"
+msgstr "Also, this lab considers:"
+
+#: ../../automation/vyos-ansible.rst:6
+msgid "Ansible"
+msgstr "Ansible"
+
+#: ../../automation/command-scripting.rst:181
+#: ../../automation/command-scripting.rst:200
+msgid "Any modifications were done to work around unfixed bugs and implement enhancements that are not complete in the VyOS system can be placed here."
+msgstr "Any modifications were done to work around unfixed bugs and implement enhancements that are not complete in the VyOS system can be placed here."
+
+#: ../../automation/vyos-salt.rst:55
+msgid "At this step we can get some op-mode information from VyOS nodes:"
+msgstr "At this step we can get some op-mode information from VyOS nodes:"
+
+#: ../../automation/vyos-api.rst:13
+msgid "Authentication"
+msgstr "Authentication"
+
+#: ../../automation/cloud-init.rst:241
+msgid "Before starting, please refer to cloud-init `network-config-docs`_ in order to know how to import user and network configurations."
+msgstr "Before starting, please refer to cloud-init `network-config-docs`_ in order to know how to import user and network configurations."
+
+#: ../../automation/vyos-api.rst:18
+msgid "Below see one example for curl and one for python. The rest of the documentation is reduced to curl."
+msgstr "Below see one example for curl and one for python. The rest of the documentation is reduced to curl."
+
+#: ../../automation/vyos-salt.rst:20
+msgid "Check salt-keys on the salt master"
+msgstr "Check salt-keys on the salt master"
+
+#: ../../automation/vyos-salt.rst:161
+msgid "Check that proxy minion is alive:"
+msgstr "Check that proxy minion is alive:"
+
+#: ../../automation/vyos-salt.rst:45
+msgid "Check that salt master can communicate with minions"
+msgstr "Check that salt master can communicate with minions"
+
+#: ../../automation/cloud-init.rst:47
+msgid "Cloud-config modules"
+msgstr "Cloud-config modules"
+
+#: ../../automation/cloud-init.rst:420
+msgid "Cloud-init `network-config-docs`_."
+msgstr "Cloud-init `network-config-docs`_."
+
+#: ../../automation/cloud-init.rst:239
+msgid "Cloud-init on Proxmox"
+msgstr "Cloud-init on Proxmox"
+
+#: ../../automation/cloud-init.rst:9
+msgid "Cloud and virtualized instances of VyOS are initialized using the industry-standard cloud-init. Via cloud-init, the system performs tasks such as injecting SSH keys and configuring the network. In addition, the user can supply a custom configuration at the time of instance launch."
+msgstr "Cloud and virtualized instances of VyOS are initialized using the industry-standard cloud-init. Via cloud-init, the system performs tasks such as injecting SSH keys and configuring the network. In addition, the user can supply a custom configuration at the time of instance launch."
+
+#: ../../automation/cloud-init.rst:120
+msgid "Command Execution at Initial Boot"
+msgstr "Command Execution at Initial Boot"
+
+#: ../../automation/command-scripting.rst:6
+msgid "Command Scripting"
+msgstr "Command Scripting"
+
+#: ../../automation/cloud-init.rst:356
+msgid "Command for generating ``seed.iso``"
+msgstr "Command for generating ``seed.iso``"
+
+#: ../../automation/cloud-init.rst:78
+msgid "Commands requirements:"
+msgstr "Commands requirements:"
+
+#: ../../automation/cloud-init.rst:16
+msgid "Config Sources"
+msgstr "Config Sources"
+
+#: ../../automation/vyos-napalm.rst:85
+#: ../../automation/vyos-salt.rst:104
+msgid "Configuration"
+msgstr "Configuration"
+
+#: ../../automation/command-scripting.rst:23
+msgid "Configuration commands are executed just like from a normal config session. For example, if you want to disable a BGP peer on VRRP transition to backup:"
+msgstr "Configuration commands are executed just like from a normal config session. For example, if you want to disable a BGP peer on VRRP transition to backup:"
+
+#: ../../automation/vyos-napalm.rst:89
+msgid "Content of commands.conf"
+msgstr "Content of commands.conf"
+
+#: ../../automation/cloud-init.rst:337
+msgid "Content of network-config file:"
+msgstr "Content of network-config file:"
+
+#: ../../automation/cloud-init.rst:351
+msgid "Create seed.iso"
+msgstr "Create seed.iso"
+
+#: ../../automation/cloud-init.rst:189
+msgid "Create text files named user-data and meta-data. On linux-based systems, the mkisofs utility can be used to create the seed ISO. The following syntax will add these files to the ISO 9660 file system."
+msgstr "Create text files named user-data and meta-data. On linux-based systems, the mkisofs utility can be used to create the seed ISO. The following syntax will add these files to the ISO 9660 file system."
+
+#: ../../automation/cloud-init.rst:368
+msgid "Creating the VM"
+msgstr "Creating the VM"
+
+#: ../../automation/command-scripting.rst:156
+msgid "Custom scripts are not executed with root privileges (Use sudo inside if this is necessary)."
+msgstr "Custom scripts are not executed with root privileges (Use sudo inside if this is necessary)."
+
+#: ../../automation/cloud-init.rst:113
+msgid "DHCP on first Ethernet interface if no network configuration is provided."
+msgstr "DHCP on first Ethernet interface if no network configuration is provided."
+
+#: ../../automation/vyos-netmiko.rst:12
+msgid "Example"
+msgstr "Example"
+
+#: ../../automation/vyos-salt.rst:185
+msgid "Example of configuration:"
+msgstr "Example of configuration:"
+
+#: ../../automation/vyos-salt.rst:199
+msgid "Example of configuration commands from the file \"/srv/salt/states/commands.txt\""
+msgstr "Example of configuration commands from the file \"/srv/salt/states/commands.txt\""
+
+#: ../../automation/vyos-salt.rst:173
+msgid "Example of op-mode:"
+msgstr "Example of op-mode:"
+
+#: ../../automation/vyos-salt.rst:171
+msgid "Examples"
+msgstr "Examples"
+
+#: ../../automation/command-scripting.rst:102
+msgid "Executing Configuration Scripts"
+msgstr "Executing Configuration Scripts"
+
+#: ../../automation/command-scripting.rst:138
+msgid "Executing pre-hooks/post-hooks Scripts"
+msgstr "Executing pre-hooks/post-hooks Scripts"
+
+#: ../../automation/vyos-ansible.rst:24
+msgid "File contents"
+msgstr "File contents"
+
+#: ../../automation/cloud-init.rst:284
+msgid "File generated with previous command: ``/tmp/vyos-1.3.0-cloud-init-10G-qemu.qcow2``"
+msgstr "File generated with previous command: ``/tmp/vyos-1.3.0-cloud-init-10G-qemu.qcow2``"
+
+#: ../../automation/cloud-init.rst:347
+msgid "Finaly, file **meta-data** has no content, but it's required."
+msgstr "Finaly, file **meta-data** has no content, but it's required."
+
+#: ../../automation/command-scripting.rst:212
+msgid "For configuration/upgrade management issues, modification of this script should be the last option. Always try to find solutions based on CLI commands first."
+msgstr "For configuration/upgrade management issues, modification of this script should be the last option. Always try to find solutions based on CLI commands first."
+
+#: ../../automation/vyos-api.rst:9
+msgid "For configuration and enabling the API see :ref:`http-api`"
+msgstr "For configuration and enabling the API see :ref:`http-api`"
+
+#: ../../automation/vyos-api.rst:109
+msgid "For example, get the addresses of a ``dum0`` interface."
+msgstr "For example, get the addresses of a ``dum0`` interface."
+
+#: ../../automation/vyos-api.rst:189
+msgid "For example, show which images are installed."
+msgstr "For example, show which images are installed."
+
+#: ../../automation/cloud-init.rst:217
+msgid "For more information on the NoCloud data source, visit its `page <https://cloudinit.readthedocs.io/en/latest/reference/datasources/nocloud.html>`_ in the cloud-init documentation."
+msgstr "For more information on the NoCloud data source, visit its `page <https://cloudinit.readthedocs.io/en/latest/reference/datasources/nocloud.html>`_ in the cloud-init documentation."
+
+#: ../../automation/cloud-init.rst:411
+msgid "From cli or GUI, power on VM, and after it boots, verify configuration"
+msgstr "From cli or GUI, power on VM, and after it boots, verify configuration"
+
+#: ../../automation/cloud-init.rst:268
+msgid "Generate qcow image"
+msgstr "Generate qcow image"
+
+#: ../../automation/command-scripting.rst:82
+msgid "Here is a simple example:"
+msgstr "Here is a simple example:"
+
+#: ../../automation/cloud-init.rst:91
+msgid "Here is an example cloud-config that appends configuration at the time of first boot."
+msgstr "Here is an example cloud-config that appends configuration at the time of first boot."
+
+#: ../../automation/cloud-init.rst:377
+msgid "ISO files storage: ``local`` volume is used for ``.iso`` file storage. In this scenario ``local`` volume type is set to **directory**, abd attached to ``/var/lib/vz``."
+msgstr "ISO files storage: ``local`` volume is used for ``.iso`` file storage. In this scenario ``local`` volume type is set to **directory**, abd attached to ``/var/lib/vz``."
+
+#: ../../automation/cloud-init.rst:81
+msgid "If command ends in a value, it must be inside single quotes."
+msgstr "If command ends in a value, it must be inside single quotes."
+
+#: ../../automation/cloud-init.rst:250
+msgid "If no networking configuration is provided, then dhcp client is going to be enabled on first interface. Bare in mind that this configuration will be inyected at an OS level, so don't expect to find dhcp client configuration on vyos cli. Because of this behavior, in next example lab we will disable dhcp-client configuration on eth0."
+msgstr "If no networking configuration is provided, then dhcp client is going to be enabled on first interface. Bare in mind that this configuration will be inyected at an OS level, so don't expect to find dhcp client configuration on vyos cli. Because of this behavior, in next example lab we will disable dhcp-client configuration on eth0."
+
+#: ../../automation/cloud-init.rst:225
+msgid "If you encounter problems, verify that the cloud-config document contains valid YAML. Online resources such as https://www.yamllint.com/ provide a simple tool for validating YAML."
+msgstr "If you encounter problems, verify that the cloud-config document contains valid YAML. Online resources such as https://www.yamllint.com/ provide a simple tool for validating YAML."
+
+#: ../../automation/cloud-init.rst:153
+msgid "If you need to gather information from linux commands to configure VyOS, you can execute commands and then configure VyOS in the same script."
+msgstr "If you need to gather information from linux commands to configure VyOS, you can execute commands and then configure VyOS in the same script."
+
+#: ../../automation/command-scripting.rst:79
+msgid "If you want to script the configs in a language other than bash you can have your script output commands and then source them in a bash script."
+msgstr "If you want to script the configs in a language other than bash you can have your script output commands and then source them in a bash script."
+
+#: ../../automation/cloud-init.rst:298
+msgid "In Proxmox server three files are going to be used for this setup:"
+msgstr "In Proxmox server three files are going to be used for this setup:"
+
+#: ../../automation/cloud-init.rst:49
+msgid "In VyOS, by default, enables only two modules:"
+msgstr "In VyOS, by default, enables only two modules:"
+
+#: ../../automation/cloud-init.rst:307
+msgid "In this lab, all files are located in ``/tmp/``. So, before going on, lets move to that directory:"
+msgstr "In this lab, all files are located in ``/tmp/``. So, before going on, lets move to that directory:"
+
+#: ../../automation/cloud-init.rst:274
+msgid "In this lab, we are using 1.3.0 VyOS version and setting a disk of 10G. Download VyOS .iso file and save it as ``/tmp/vyos.iso``. Command used for generating qcow image:"
+msgstr "In this lab, we are using 1.3.0 VyOS version and setting a disk of 10G. Download VyOS .iso file and save it as ``/tmp/vyos.iso``. Command used for generating qcow image:"
+
+#: ../../automation/cloud-init.rst:71
+msgid "Initial Configuration"
+msgstr "Initial Configuration"
+
+#: ../../automation/cloud-init.rst:180
+msgid "Injecting configuration data is not limited to cloud platforms. Users can employ the NoCloud data source to inject user-data and meta-data on virtualization platforms such as VMware, Hyper-V and KVM."
+msgstr "Injecting configuration data is not limited to cloud platforms. Users can employ the NoCloud data source to inject user-data and meta-data on virtualization platforms such as VMware, Hyper-V and KVM."
+
+#: ../../automation/vyos-napalm.rst:11
+msgid "Install ``napalm-vyos`` module"
+msgstr "Install ``napalm-vyos`` module"
+
+#: ../../automation/vyos-salt.rst:98
+msgid "It is possible to configure VyOS via netmiko_ proxy module. It requires a minion with installed packet  ``python3-netmiko`` module who has a connection to VyOS nodes. Salt-minion have to communicate with salt master"
+msgstr "It is possible to configure VyOS via netmiko_ proxy module. It requires a minion with installed packet  ``python3-netmiko`` module who has a connection to VyOS nodes. Salt-minion have to communicate with salt master"
+
+#: ../../automation/cloud-init.rst:36
+msgid "Major cloud providers offer a means of providing user-data at the time of instance launch. It can be provided as plain text or as base64-encoded text, depending on cloud provider. Also, it can be compressed using gzip, which makes sense with a long configuration commands list, because of the hard limit to ~16384 bytes for the whole user-data."
+msgstr "Major cloud providers offer a means of providing user-data at the time of instance launch. It can be provided as plain text or as base64-encoded text, depending on cloud provider. Also, it can be compressed using gzip, which makes sense with a long configuration commands list, because of the hard limit to ~16384 bytes for the whole user-data."
+
+#: ../../automation/cloud-init.rst:20
+msgid "Metadata - Metadata is sourced by the cloud platform or hypervisor. In some clouds, there is implemented as an HTTP endpoint at ``http://169.254.169.254``."
+msgstr "Metadata - Metadata is sourced by the cloud platform or hypervisor. In some clouds, there is implemented as an HTTP endpoint at ``http://169.254.169.254``."
+
+#: ../../automation/cloud-init.rst:244
+msgid "Most important keys that needs to be considered:"
+msgstr "Most important keys that needs to be considered:"
+
+#: ../../automation/vyos-napalm.rst:6
+msgid "Napalm"
+msgstr "Napalm"
+
+#: ../../automation/vyos-netmiko.rst:6
+msgid "Netmiko"
+msgstr "Netmiko"
+
+#: ../../automation/vyos-salt.rst:96
+msgid "Netmiko-proxy"
+msgstr "Netmiko-proxy"
+
+#: ../../automation/cloud-init.rst:24
+msgid "Network configuration - This config source informs the system about the network settings like IP addresses, routes, DNS. Available only in several cloud and virtualization platforms."
+msgstr "Network configuration - This config source informs the system about the network settings like IP addresses, routes, DNS. Available only in several cloud and virtualization platforms."
+
+#: ../../automation/cloud-init.rst:248
+msgid "Networking configurations shouldn't be passed in user-data file."
+msgstr "Networking configurations shouldn't be passed in user-data file."
+
+#: ../../automation/cloud-init.rst:178
+msgid "NoCloud"
+msgstr "NoCloud"
+
+#: ../../automation/index.rst:6
+msgid "Nornir"
+msgstr "Nornir"
+
+#: ../../automation/cloud-init.rst:131
+msgid "Note that the /opt/vyatta/etc/config is used instead of the /config/scripts directory referenced in the :ref:`command-scripting` section of the documentation because the /config/script directory isn't mounted when the ``write_files`` module executes."
+msgstr "Note that the /opt/vyatta/etc/config is used instead of the /config/scripts directory referenced in the :ref:`command-scripting` section of the documentation because the /config/script directory isn't mounted when the ``write_files`` module executes."
+
+#: ../../automation/cloud-init.rst:370
+msgid "Notes for this particular example, that may need to be modified in other setups:"
+msgstr "Notes for this particular example, that may need to be modified in other setups:"
+
+#: ../../automation/cloud-init.rst:287
+msgid "Now, that file needs to be copied to proxmox server:"
+msgstr "Now, that file needs to be copied to proxmox server:"
+
+#: ../../automation/command-scripting.rst:108
+msgid "On VyOS this will cause the following problem: After modifying the configuration via script like this once, it is not possible to manually modify the config anymore:"
+msgstr "On VyOS this will cause the following problem: After modifying the configuration via script like this once, it is not possible to manually modify the config anymore:"
+
+#: ../../automation/cloud-init.rst:390
+msgid "On proxmox server:"
+msgstr "On proxmox server:"
+
+#: ../../automation/cloud-init.rst:353
+msgid "Once the three files were created, it's time to generate the ``seed.iso`` image, which needs to be mounted to the new VM as a cd."
+msgstr "Once the three files were created, it's time to generate the ``seed.iso`` image, which needs to be mounted to the new VM as a cd."
+
+#: ../../automation/cloud-init.rst:80
+msgid "One command per line."
+msgstr "One command per line."
+
+#: ../../automation/vyos-napalm.rst:21
+msgid "Op-mode"
+msgstr "Op-mode"
+
+#: ../../automation/command-scripting.rst:77
+msgid "Other script languages"
+msgstr "Other script languages"
+
+#: ../../automation/vyos-napalm.rst:129
+#: ../../automation/vyos-netmiko.rst:47
+msgid "Output"
+msgstr "Output"
+
+#: ../../automation/vyos-napalm.rst:48
+msgid "Output op-mode"
+msgstr "Output op-mode"
+
+#: ../../_include/need_improvement.txt:13
+msgid "Please take a look at the Contributing Guide for our :ref:`documentation`."
+msgstr "Please take a look at the Contributing Guide for our :ref:`documentation`."
+
+#: ../../automation/command-scripting.rst:195
+msgid "Postconfig on boot"
+msgstr "Postconfig on boot"
+
+#: ../../automation/cloud-init.rst:409
+msgid "Power on VM and verifications"
+msgstr "Power on VM and verifications"
+
+#: ../../automation/command-scripting.rst:176
+msgid "Preconfig on boot"
+msgstr "Preconfig on boot"
+
+#: ../../automation/cloud-init.rst:296
+msgid "Prepare cloud-init files"
+msgstr "Prepare cloud-init files"
+
+#: ../../automation/cloud-init.rst:258
+msgid "Proxmox IP address: **192.168.0.253/24**"
+msgstr "Proxmox IP address: **192.168.0.253/24**"
+
+#: ../../automation/cloud-init.rst:422
+msgid "Proxmox `Cloud-init-Support`_."
+msgstr "Proxmox `Cloud-init-Support`_."
+
+#: ../../automation/cloud-init.rst:416
+msgid "References"
+msgstr "References"
+
+#: ../../automation/cloud-init.rst:263
+msgid "Remove default dhcp client on first interface, and load other configuration during first boot, using cloud-init."
+msgstr "Remove default dhcp client on first interface, and load other configuration during first boot, using cloud-init."
+
+#: ../../automation/vyos-ansible.rst:80
+msgid "Run ansible"
+msgstr "Run ansible"
+
+#: ../../automation/command-scripting.rst:50
+msgid "Run commands remotely"
+msgstr "Run commands remotely"
+
+#: ../../automation/command-scripting.rst:21
+msgid "Run configuration commands"
+msgstr "Run configuration commands"
+
+#: ../../automation/command-scripting.rst:37
+msgid "Run operational commands"
+msgstr "Run operational commands"
+
+#: ../../automation/cloud-init.rst:111
+msgid "SSH is configured on port 22."
+msgstr "SSH is configured on port 22."
+
+#: ../../automation/vyos-salt.rst:8
+msgid "Salt"
+msgstr "Salt"
+
+#: ../../automation/vyos-salt.rst:106
+msgid "Salt master configuration:"
+msgstr "Salt master configuration:"
+
+#: ../../automation/vyos-api.rst:307
+msgid "Save a running configuration to a file."
+msgstr "Save a running configuration to a file."
+
+#: ../../automation/vyos-api.rst:289
+msgid "Save a running configuration to the startup configuration. When you don't specify the file when saving, it saves to ``/config/config.boot``."
+msgstr "Save a running configuration to the startup configuration. When you don't specify the file when saving, it saves to ``/config/config.boot``."
+
+#: ../../automation/vyos-napalm.rst:99
+msgid "Script vyos-napalm.py"
+msgstr "Script vyos-napalm.py"
+
+#: ../../automation/command-scripting.rst:152
+msgid "Scripts are run in alphabetical order. Their names must consist entirely of ASCII upper- and lower-case letters,ASCII digits, ASCII underscores, and ASCII minus-hyphens.No other characters are allowed."
+msgstr "Scripts are run in alphabetical order. Their names must consist entirely of ASCII upper- and lower-case letters,ASCII digits, ASCII underscores, and ASCII minus-hyphens.No other characters are allowed."
+
+#: ../../automation/command-scripting.rst:52
+msgid "Sometimes you simply wan't to execute a bunch of op-mode commands via SSH on a remote VyOS system."
+msgstr "Sometimes you simply wan't to execute a bunch of op-mode commands via SSH on a remote VyOS system."
+
+#: ../../automation/cloud-init.rst:260
+msgid "Storaged used: volume local, which is mounted on directory **/var/lib/vz**, and contains all type of content, including snippets."
+msgstr "Storaged used: volume local, which is mounted on directory **/var/lib/vz**, and contains all type of content, including snippets."
+
+#: ../../automation/vyos-salt.rst:119
+msgid "Structure of /srv/salt:"
+msgstr "Structure of /srv/salt:"
+
+#: ../../automation/vyos-ansible.rst:11
+msgid "Structure of files"
+msgstr "Structure of files"
+
+#: ../../automation/cloud-init.rst:107
+msgid "System Defaults/Fallbacks"
+msgstr "System Defaults/Fallbacks"
+
+#: ../../automation/vyos-api.rst:264
+msgid "The API pushes every request to a session and commit it. But some of VyOS components like DHCP and PPPoE Servers, IPSec, VXLAN, and other tunnels require full configuration for commit. The endpoint will process multiple commands when you pass them as a list to the ``data`` field."
+msgstr "The API pushes every request to a session and commit it. But some of VyOS components like DHCP and PPPoE Servers, IPSec, VXLAN, and other tunnels require full configuration for commit. The endpoint will process multiple commands when you pass them as a list to the ``data`` field."
+
+#: ../../automation/command-scripting.rst:197
+msgid "The ``/config/scripts/vyos-postconfig-bootup.script`` script is called on boot after the VyOS configuration is fully applied."
+msgstr "The ``/config/scripts/vyos-postconfig-bootup.script`` script is called on boot after the VyOS configuration is fully applied."
+
+#: ../../automation/command-scripting.rst:178
+msgid "The ``/config/scripts/vyos-preconfig-bootup.script`` script is called on boot before the VyOS configuration during boot process."
+msgstr "The ``/config/scripts/vyos-preconfig-bootup.script`` script is called on boot before the VyOS configuration during boot process."
+
+#: ../../automation/vyos-api.rst:187
+msgid "The ``/show`` endpoint is to show everything in the operational mode."
+msgstr "The ``/show`` endpoint is to show everything in the operational mode."
+
+#: ../../automation/vyos-api.rst:211
+msgid "The ``generate`` endpoint run a ``generate`` command."
+msgstr "The ``generate`` endpoint run a ``generate`` command."
+
+#: ../../automation/vyos-api.rst:131
+msgid "The ``reset`` endpoint run a ``reset`` command."
+msgstr "The ``reset`` endpoint run a ``reset`` command."
+
+#: ../../automation/cloud-init.rst:84
+msgid "The commands list produced by the ``show configuration commands`` command on a VyOS router should comply with all the requirements, so it is easy to get a proper commands list by copying it from another router."
+msgstr "The commands list produced by the ``show configuration commands`` command on a VyOS router should comply with all the requirements, so it is easy to get a proper commands list by copying it from another router."
+
+#: ../../automation/cloud-init.rst:88
+msgid "The configuration specified in the cloud-config document overwrites default configuration values and values configured via Metadata."
+msgstr "The configuration specified in the cloud-config document overwrites default configuration values and values configured via Metadata."
+
+#: ../../automation/command-scripting.rst:142
+msgid "The default directories where your custom Scripts should be located are:"
+msgstr "The default directories where your custom Scripts should be located are:"
+
+#: ../../automation/command-scripting.rst:184
+#: ../../automation/command-scripting.rst:203
+msgid "The default file looks like this:"
+msgstr "The default file looks like this:"
+
+#: ../../automation/cloud-init.rst:42
+msgid "The easiest way to configure the system via user-data is the Cloud-config syntax described below."
+msgstr "The easiest way to configure the system via user-data is the Cloud-config syntax described below."
+
+#: ../../automation/vyos-api.rst:287
+msgid "The endpoint ``/config-file`` is to save or load a configuration."
+msgstr "The endpoint ``/config-file`` is to save or load a configuration."
+
+#: ../../automation/cloud-init.rst:156
+msgid "The following example sets the hostname based on the instance identifier obtained from the EC2 metadata service."
+msgstr "The following example sets the hostname based on the instance identifier obtained from the EC2 metadata service."
+
+#: ../../automation/cloud-init.rst:136
+msgid "The following example shows how to execute commands after the initial configuration."
+msgstr "The following example shows how to execute commands after the initial configuration."
+
+#: ../../automation/cloud-init.rst:74
+msgid "The key used to designate a VyOS configuration is ``vyos_config_commands``. What follows is VyOS configuration using the \"set-style\" syntax. Both \"set\" and \"delete\" commands are supported."
+msgstr "The key used to designate a VyOS configuration is ``vyos_config_commands``. What follows is VyOS configuration using the \"set-style\" syntax. Both \"set\" and \"delete\" commands are supported."
+
+#: ../../automation/cloud-init.rst:197
+msgid "The seed.iso file can be attached to the virtual machine. As an example, the method with KVM to attach the ISO as a CD drive follows."
+msgstr "The seed.iso file can be attached to the virtual machine. As an example, the method with KVM to attach the ISO as a CD drive follows."
+
+#: ../../automation/command-scripting.rst:104
+msgid "There is a pitfall when working with configuration scripts. It is tempting to call configuration scripts with \"sudo\" (i.e., temporary root permissions), because that's the common way on most Linux platforms to call system commands."
+msgstr "There is a pitfall when working with configuration scripts. It is tempting to call configuration scripts with \"sudo\" (i.e., temporary root permissions), because that's the common way on most Linux platforms to call system commands."
+
+#: ../../automation/cloud-init.rst:109
+msgid "These are the VyOS defaults and fallbacks."
+msgstr "These are the VyOS defaults and fallbacks."
+
+#: ../../_include/need_improvement.txt:11
+msgid "This section needs improvements, examples and explanations."
+msgstr "This section needs improvements, examples and explanations."
+
+#: ../../automation/command-scripting.rst:118
+msgid "This will result in the following error message: ``Set failed`` If this happens, a reboot is required to be able to edit the config manually again."
+msgstr "This will result in the following error message: ``Set failed`` If this happens, a reboot is required to be able to edit the config manually again."
+
+#: ../../automation/vyos-api.rst:323
+msgid "To Load a configuration file."
+msgstr "To Load a configuration file."
+
+#: ../../automation/vyos-api.rst:149
+msgid "To add or delete an image, use the ``/image`` endpoint."
+msgstr "To add or delete an image, use the ``/image`` endpoint."
+
+#: ../../automation/command-scripting.rst:121
+msgid "To avoid these problems, the proper way is to call a script with the ``vyattacfg`` group, e.g., by using the ``sg`` (switch group) command:"
+msgstr "To avoid these problems, the proper way is to call a script with the ``vyattacfg`` group, e.g., by using the ``sg`` (switch group) command:"
+
+#: ../../automation/vyos-api.rst:48
+msgid "To get the whole configuration, pass an empty list to the ``path`` field"
+msgstr "To get the whole configuration, pass an empty list to the ``path`` field"
+
+#: ../../automation/command-scripting.rst:11
+msgid "To include VyOS specific functions and aliases you need to ``source /opt/vyatta/etc/functions/script-template`` files at the top of your script."
+msgstr "To include VyOS specific functions and aliases you need to ``source /opt/vyatta/etc/functions/script-template`` files at the top of your script."
+
+#: ../../automation/command-scripting.rst:128
+msgid "To make sure that a script is not accidentally called without the ``vyattacfg`` group, the script can be safeguarded like this:"
+msgstr "To make sure that a script is not accidentally called without the ``vyattacfg`` group, the script can be safeguarded like this:"
+
+#: ../../automation/vyos-api.rst:79
+msgid "To only get a part of the configuration, for example ``system syslog``."
+msgstr "To only get a part of the configuration, for example ``system syslog``."
+
+#: ../../automation/cloud-init.rst:223
+msgid "Troubleshooting"
+msgstr "Troubleshooting"
+
+#: ../../automation/command-scripting.rst:39
+msgid "Unlike a normal configuration session, all operational commands must be prepended with ``run``, even if you haven't created a session with configure."
+msgstr "Unlike a normal configuration session, all operational commands must be prepended with ``run``, even if you haven't created a session with configure."
+
+#: ../../automation/cloud-init.rst:34
+msgid "User-data"
+msgstr "User-data"
+
+#: ../../automation/cloud-init.rst:28
+msgid "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot."
+msgstr "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot."
+
+#: ../../automation/cloud-init.rst:373
+msgid "VM ID: in this example, VM ID used is 555."
+msgstr "VM ID: in this example, VM ID used is 555."
+
+#: ../../automation/cloud-init.rst:381
+msgid "VM Resources: these parameters can be modified as needed."
+msgstr "VM Resources: these parameters can be modified as needed."
+
+#: ../../automation/cloud-init.rst:375
+msgid "VM Storage: ``local`` volume is used."
+msgstr "VM Storage: ``local`` volume is used."
+
+#: ../../automation/vyos-api.rst:7
+msgid "VyOS API"
+msgstr "VyOS API"
+
+#: ../../automation/index.rst:3
+msgid "VyOS Automation"
+msgstr "VyOS Automation"
+
+#: ../../automation/cloud-init.rst:418
+msgid "VyOS `cloud-init-docs`_."
+msgstr "VyOS `cloud-init-docs`_."
+
+#: ../../automation/cloud-init.rst:7
+msgid "VyOS cloud-init"
+msgstr "VyOS cloud-init"
+
+#: ../../automation/cloud-init.rst:246
+msgid "VyOS configuration commands are defined in user-data file."
+msgstr "VyOS configuration commands are defined in user-data file."
+
+#: ../../automation/command-scripting.rst:140
+msgid "VyOS has the ability to run custom  scripts before and after each commit"
+msgstr "VyOS has the ability to run custom  scripts before and after each commit"
+
+#: ../../automation/cloud-init.rst:18
+msgid "VyOS support three types of config sources."
+msgstr "VyOS support three types of config sources."
+
+#: ../../automation/vyos-ansible.rst:8
+msgid "VyOS supports configuration via ansible. Need to install ``ansible`` and ``python3-paramiko`` module"
+msgstr "VyOS supports configuration via ansible. Need to install ``ansible`` and ``python3-paramiko`` module"
+
+#: ../../automation/vyos-netmiko.rst:8
+msgid "VyOS supports configuration via netmiko_. It requires to install ``python3-netmiko`` module."
+msgstr "VyOS supports configuration via netmiko_. It requires to install ``python3-netmiko`` module."
+
+#: ../../automation/command-scripting.rst:8
+msgid "VyOS supports executing configuration and operational commands non-interactively from shell scripts."
+msgstr "VyOS supports executing configuration and operational commands non-interactively from shell scripts."
+
+#: ../../automation/vyos-salt.rst:10
+msgid "VyOS supports op-mode and configuration via salt_."
+msgstr "VyOS supports op-mode and configuration via salt_."
+
+#: ../../automation/vyos-napalm.rst:8
+msgid "VyOS supports some napalm_ functions for configuration and op-mode. It requires more tests."
+msgstr "VyOS supports some napalm_ functions for configuration and op-mode. It requires more tests."
+
+#: ../../automation/cloud-init.rst:122
+msgid "VyOS supports the execution of operational commands and linux commands at initial boot. This is accomplished using ``write_files`` to certain files in the /opt/vyatta/etc/config/scripts directory. Commands specified in opt/vyatta/etc/config/scripts/vyos-preconfig-bootup.script are executed prior to configuration. The /opt/vyatta/etc/config/scripts/vyos-postconfig-bootup.script file contains commands to be executed after configuration. In both cases, commands are executed as the root user."
+msgstr "VyOS supports the execution of operational commands and linux commands at initial boot. This is accomplished using ``write_files`` to certain files in the /opt/vyatta/etc/config/scripts directory. Commands specified in opt/vyatta/etc/config/scripts/vyos-preconfig-bootup.script are executed prior to configuration. The /opt/vyatta/etc/config/scripts/vyos-postconfig-bootup.script file contains commands to be executed after configuration. In both cases, commands are executed as the root user."
+
+#: ../../automation/vyos-napalm.rst:87
+msgid "We need 2 files, commands.conf and script itself."
+msgstr "We need 2 files, commands.conf and script itself."
+
+#: ../../automation/cloud-init.rst:184
+msgid "While other methods exist, the most straightforward method for using the NoCloud data source is creating a seed ISO and attaching it to the virtual machine as a CD drive. The volume must be formatted as a vfat or ISO 9660 file system with the label \"cidata\" or \"CIDATA\"."
+msgstr "While other methods exist, the most straightforward method for using the NoCloud data source is creating a seed ISO and attaching it to the virtual machine as a CD drive. The volume must be formatted as a vfat or ISO 9660 file system with the label \"cidata\" or \"CIDATA\"."
+
+#: ../../automation/command-scripting.rst:63
+msgid "Will return:"
+msgstr "Will return:"
+
+#: ../../automation/vyos-api.rst:46
+msgid "With the ``retrieve`` endpoint you get parts or the whole configuration."
+msgstr "With the ``retrieve`` endpoint you get parts or the whole configuration."
+
+#: ../../automation/vyos-salt.rst:12
+msgid "Without proxy it requires VyOS minion configuration and support op-mode data:"
+msgstr "Without proxy it requires VyOS minion configuration and support op-mode data:"
+
+#: ../../automation/vyos-salt.rst:12
+msgid "Without proxy it requires VyOS minion configuration and supports op-mode data:"
+msgstr "Without proxy it requires VyOS minion configuration and supports op-mode data:"
+
+#: ../../automation/vyos-api.rst:230
+msgid "You can pass a ``set``, ``delete`` or ``comment`` command to the ``/configure`` endpoint."
+msgstr "You can pass a ``set``, ``delete`` or ``comment`` command to the ``/configure`` endpoint."
+
+#: ../../automation/vyos-api.rst:249
+msgid "``delete`` a single command"
+msgstr "``delete`` a single command"
+
+#: ../../automation/cloud-init.rst:383
+msgid "``seed.iso`` was previously created in directory ``/tmp/``. It's necessary to move it to ``/var/lib/vz/template/iso``"
+msgstr "``seed.iso`` was previously created in directory ``/tmp/``. It's necessary to move it to ``/var/lib/vz/template/iso``"
+
+#: ../../automation/vyos-api.rst:233
+msgid "``set`` a single command"
+msgstr "``set`` a single command"
+
+#: ../../automation/cloud-init.rst:55
+msgid "``vyos_userdata`` - the module accepts a list of CLI configuration commands in a ``vyos_config_commands`` section, which gives an easy way to configure the system during deployment."
+msgstr "``vyos_userdata`` - the module accepts a list of CLI configuration commands in a ``vyos_config_commands`` section, which gives an easy way to configure the system during deployment."
+
+#: ../../automation/cloud-init.rst:112
+msgid "``vyos``/``vyos`` credentials if no others specified by data source."
+msgstr "``vyos``/``vyos`` credentials if no others specified by data source."
+
+#: ../../automation/cloud-init.rst:51
+msgid "``write_files`` - this module allows to insert any files into the filesystem before the first boot, for example, pre-generated encryption keys, certificates, or even a whole ``config.boot`` file. The format is described in the cloudinit documentation `Cloud-init-write_files`_."
+msgstr "``write_files`` - this module allows to insert any files into the filesystem before the first boot, for example, pre-generated encryption keys, certificates, or even a whole ``config.boot`` file. The format is described in the cloudinit documentation `Cloud-init-write_files`_."
+
+#: ../../automation/vyos-api.rst:151
+msgid "add an image"
+msgstr "add an image"
+
+#: ../../automation/vyos-ansible.rst:26
+msgid "ansible.cfg"
+msgstr "ansible.cfg"
+
+#: ../../automation/cloud-init.rst:61
+msgid "cloud-config file format"
+msgstr "cloud-config file format"
+
+#: ../../automation/cloud-init.rst:229
+msgid "cloud-init logs to /var/log/cloud-init.log. This file can be helpful in determining why the configuration varies from what you expect. You can fetch the most important data filtering output for ``vyos`` keyword:"
+msgstr "cloud-init logs to /var/log/cloud-init.log. This file can be helpful in determining why the configuration varies from what you expect. You can fetch the most important data filtering output for ``vyos`` keyword:"
+
+#: ../../automation/vyos-salt.rst:153
+msgid "commands.txt"
+msgstr "commands.txt"
+
+#: ../../automation/vyos-api.rst:168
+msgid "delete an image, for example ``1.3-rolling-202006070117``"
+msgstr "delete an image, for example ``1.3-rolling-202006070117``"
+
+#: ../../automation/vyos-ansible.rst:42
+msgid "hosts"
+msgstr "hosts"
+
+#: ../../automation/vyos-ansible.rst:35
+msgid "id_rsa_docker.pub. Needs to declare only public key exactly."
+msgstr "id_rsa_docker.pub. Needs to declare only public key exactly."
+
+#: ../../automation/vyos-api.rst:106
+msgid "if you just want the Value of a multi-valued node, use the ``returnValues`` operation."
+msgstr "if you just want the Value of a multi-valued node, use the ``returnValues`` operation."
+
+#: ../../automation/vyos-ansible.rst:56
+msgid "main.yml"
+msgstr "main.yml"
+
+#: ../../automation/vyos-salt.rst:141
+msgid "r11-proxy.sls Includes parameters for connecting to salt-proxy minion"
+msgstr "r11-proxy.sls Includes parameters for connecting to salt-proxy minion"
+
+#: ../../automation/index.rst:7
+msgid "startup scripts"
+msgstr "startup scripts"
+
+#: ../../automation/vyos-salt.rst:131
+msgid "top.sls"
+msgstr "top.sls"
diff --git a/docs/_locale/de/cli.pot b/docs/_locale/de/cli.pot
new file mode 100644
index 00000000..06a89458
--- /dev/null
+++ b/docs/_locale/de/cli.pot
@@ -0,0 +1,437 @@
+msgid ""
+msgstr ""
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Localazy (https://localazy.com)\n"
+"Project-Id-Version: VyOS Documentation\n"
+"Language: de\n"
+"Plural-Forms: nplurals=2; plural=(n==1) ? 0 : 1;\n"
+
+#: ../../cli.rst:115
+msgid "**Active** or **running configuration** is the system configuration that is loaded  and currently active (used by VyOS). Any change in the configuration will have to be committed to belong to the active/running configuration."
+msgstr "**Active** or **running configuration** is the system configuration that is loaded  and currently active (used by VyOS). Any change in the configuration will have to be committed to belong to the active/running configuration."
+
+#: ../../cli.rst:382
+msgid "**Example:**"
+msgstr "**Example:**"
+
+#: ../../cli.rst:126
+msgid "**Saved configuration** is the one saved to a file using the :cfgcmd:`save` command. It allows you to keep safe a configuration for future uses. There can be multiple configuration files. The default or \"boot\" configuration is saved and loaded from the file ``/config/config.boot``."
+msgstr "**Saved configuration** is the one saved to a file using the :cfgcmd:`save` command. It allows you to keep safe a configuration for future uses. There can be multiple configuration files. The default or \"boot\" configuration is saved and loaded from the file ``/config/config.boot``."
+
+#: ../../cli.rst:120
+msgid "**Working configuration** is the one that is currently being modified in configuration mode. Changes made to the working configuration do not go into effect until the changes are committed with the :cfgcmd:`commit` command. At which time the working configuration will become the active or running configuration."
+msgstr "**Working configuration** is the one that is currently being modified in configuration mode. Changes made to the working configuration do not go into effect until the changes are committed with the :cfgcmd:`commit` command. At which time the working configuration will become the active or running configuration."
+
+#: ../../cli.rst:113
+msgid "A VyOS system has three major types of configurations:"
+msgstr "A VyOS system has three major types of configurations:"
+
+#: ../../cli.rst:576
+msgid "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit."
+msgstr "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit."
+
+#: ../../cli.rst:690
+msgid "Access opmode from config mode"
+msgstr "Access opmode from config mode"
+
+#: ../../cli.rst:697
+msgid "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode."
+msgstr "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode."
+
+#: ../../cli.rst:651
+msgid "Add comment as an annotation to a configuration node."
+msgstr "Add comment as an annotation to a configuration node."
+
+#: ../../cli.rst:539
+msgid "All changes in the working config will thus be lost."
+msgstr "All changes in the working config will thus be lost."
+
+#: ../../cli.rst:355
+msgid "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them."
+msgstr "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them."
+
+#: ../../cli.rst:676
+msgid "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show <section>`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment."
+msgstr "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show <section>`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment."
+
+#: ../../cli.rst:493
+msgid "Any change you do on the configuration, will not take effect until committed using the :cfgcmd:`commit` command in configuration mode."
+msgstr "Any change you do on the configuration, will not take effect until committed using the :cfgcmd:`commit` command in configuration mode."
+
+#: ../../cli.rst:221
+msgid "Both these ``show`` commands should be executed when in operational mode, they do not work directly in configuration mode. There is a special way on how to :ref:`run_opmode_from_config_mode`."
+msgstr "Both these ``show`` commands should be executed when in operational mode, they do not work directly in configuration mode. There is a special way on how to :ref:`run_opmode_from_config_mode`."
+
+#: ../../cli.rst:193
+msgid "By default, the configuration is displayed in a hierarchy like the above example, this is only one of the possible ways to display the configuration. When the configuration is generated and the device is configured, changes are added through a collection of :cfgcmd:`set` and :cfgcmd:`delete` commands."
+msgstr "By default, the configuration is displayed in a hierarchy like the above example, this is only one of the possible ways to display the configuration. When the configuration is generated and the device is configured, changes are added through a collection of :cfgcmd:`set` and :cfgcmd:`delete` commands."
+
+#: ../../cli.rst:5
+msgid "Command Line Interface"
+msgstr "Command Line Interface"
+
+#: ../../cli.rst:701
+msgid "Command completion and syntax help with ``?`` and ``[tab]`` will also work."
+msgstr "Command completion and syntax help with ``?`` and ``[tab]`` will also work."
+
+#: ../../cli.rst:754
+msgid "Compare configurations"
+msgstr "Compare configurations"
+
+#: ../../cli.rst:75
+msgid "Configuration Mode"
+msgstr "Configuration Mode"
+
+#: ../../cli.rst:102
+msgid "Configuration Overview"
+msgstr "Configuration Overview"
+
+#: ../../cli.rst:457
+msgid "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered."
+msgstr "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered."
+
+#: ../../cli.rst:535
+msgid "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used."
+msgstr "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used."
+
+#: ../../cli.rst:583
+msgid "Copy a configuration element."
+msgstr "Copy a configuration element."
+
+#: ../../cli.rst:447
+msgid "Editing the configuration"
+msgstr "Editing the configuration"
+
+#: ../../cli.rst:662
+msgid "Example:"
+msgstr "Example:"
+
+#: ../../cli.rst:30
+msgid "Example showing possible show commands:"
+msgstr "Example showing possible show commands:"
+
+#: ../../cli.rst:433
+msgid "Exiting from the configuration mode is done via the :cfgcmd:`exit` command from the top level, executing :cfgcmd:`exit` from within a sub-level takes you back to the top level."
+msgstr "Exiting from the configuration mode is done via the :cfgcmd:`exit` command from the top level, executing :cfgcmd:`exit` from within a sub-level takes you back to the top level."
+
+#: ../../cli.rst:21
+msgid "For example typing ``sh`` followed by the ``TAB`` key will complete to ``show``. Pressing ``TAB`` a second time will display the possible sub-commands of the ``show`` command."
+msgstr "For example typing ``sh`` followed by the ``TAB`` key will complete to ``show``. Pressing ``TAB`` a second time will display the possible sub-commands of the ``show`` command."
+
+#: ../../cli.rst:201
+msgid "Get a collection of all the set commands required which led to the running configuration."
+msgstr "Get a collection of all the set commands required which led to the running configuration."
+
+#: ../../cli.rst:930
+msgid "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config."
+msgstr "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config."
+
+#: ../../cli.rst:916
+msgid "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:"
+msgstr "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:"
+
+#: ../../cli.rst:413
+msgid "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`"
+msgstr "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`"
+
+#: ../../cli.rst:723
+msgid "Local Archive"
+msgstr "Local Archive"
+
+#: ../../cli.rst:714
+msgid "Managing configurations"
+msgstr "Managing configurations"
+
+#: ../../cli.rst:627
+msgid "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters."
+msgstr "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters."
+
+#: ../../cli.rst:11
+msgid "Operational Mode"
+msgstr "Operational Mode"
+
+#: ../../cli.rst:13
+msgid "Operational mode allows for commands to perform operational system tasks and view system and service status, while configuration mode allows for the modification of system configuration."
+msgstr "Operational mode allows for commands to perform operational system tasks and view system and service status, while configuration mode allows for the modification of system configuration."
+
+#: ../../cli.rst:85
+msgid "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``."
+msgstr "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``."
+
+#: ../../cli.rst:850
+msgid "Remote Archive"
+msgstr "Remote Archive"
+
+#: ../../cli.rst:616
+msgid "Rename a configuration element."
+msgstr "Rename a configuration element."
+
+#: ../../cli.rst:914
+msgid "Restore Default"
+msgstr "Restore Default"
+
+#: ../../cli.rst:725
+msgid "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong."
+msgstr "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong."
+
+#: ../../cli.rst:828
+msgid "Rollback Changes"
+msgstr "Rollback Changes"
+
+#: ../../cli.rst:835
+msgid "Rollback to revision N (currently requires reboot)"
+msgstr "Rollback to revision N (currently requires reboot)"
+
+#: ../../cli.rst:881
+msgid "Saving and loading manually"
+msgstr "Saving and loading manually"
+
+#: ../../cli.rst:94
+msgid "See the configuration section of this document for more information on configuration mode."
+msgstr "See the configuration section of this document for more information on configuration mode."
+
+#: ../../cli.rst:133
+msgid "Seeing and navigating the configuration"
+msgstr "Seeing and navigating the configuration"
+
+#: ../../cli.rst:810
+msgid "Show commit revision difference."
+msgstr "Show commit revision difference."
+
+#: ../../cli.rst:861
+msgid "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`"
+msgstr "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`"
+
+#: ../../cli.rst:111
+msgid "Terminology"
+msgstr "Terminology"
+
+#: ../../cli.rst:17
+msgid "The CLI provides a built-in help system. In the CLI the ``?`` key may be used to display available commands. The ``TAB`` key can be used to auto-complete commands and will present the help system upon a conflict or unknown value."
+msgstr "The CLI provides a built-in help system. In the CLI the ``?`` key may be used to display available commands. The ``TAB`` key can be used to auto-complete commands and will present the help system upon a conflict or unknown value."
+
+#: ../../cli.rst:7
+msgid "The VyOS :abbr:`CLI (Command-Line Interface)` comprises an operational and a configuration mode."
+msgstr "The VyOS :abbr:`CLI (Command-Line Interface)` comprises an operational and a configuration mode."
+
+#: ../../cli.rst:378
+msgid "The :cfgcmd:`show` command within configuration mode will show the working configuration indicating line changes with ``+`` for additions, ``>`` for replacements and ``-`` for deletions."
+msgstr "The :cfgcmd:`show` command within configuration mode will show the working configuration indicating line changes with ``+`` for additions, ``>`` for replacements and ``-`` for deletions."
+
+#: ../../cli.rst:653
+msgid "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes."
+msgstr "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes."
+
+#: ../../cli.rst:784
+msgid "The command :cfgcmd:`compare` allows you to compare different type of configurations. It also lets you compare different revisions through the :cfgcmd:`compare N M` command, where N and M are revision numbers. The output will describe how the configuration N is when compared to M indicating with a plus sign (``+``) the additional parts N has when compared to M, and indicating with a minus sign (``-``) the lacking parts N misses when compared to M."
+msgstr "The command :cfgcmd:`compare` allows you to compare different type of configurations. It also lets you compare different revisions through the :cfgcmd:`compare N M` command, where N and M are revision numbers. The output will describe how the configuration N is when compared to M indicating with a plus sign (``+``) the additional parts N has when compared to M, and indicating with a minus sign (``-``) the lacking parts N misses when compared to M."
+
+#: ../../cli.rst:813
+msgid "The command above also lets you see the difference between two commits. By default the difference with the running config is shown."
+msgstr "The command above also lets you see the difference between two commits. By default the difference with the running config is shown."
+
+#: ../../cli.rst:338
+msgid "The config mode"
+msgstr "The config mode"
+
+#: ../../cli.rst:449
+msgid "The configuration can be edited by the use of :cfgcmd:`set` and :cfgcmd:`delete` commands from within configuration mode."
+msgstr "The configuration can be edited by the use of :cfgcmd:`set` and :cfgcmd:`delete` commands from within configuration mode."
+
+#: ../../cli.rst:359
+msgid "The current hierarchy level can be changed by the :cfgcmd:`edit` command."
+msgstr "The current hierarchy level can be changed by the :cfgcmd:`edit` command."
+
+#: ../../cli.rst:869
+msgid "The number of revisions don't affect the commit-archive."
+msgstr "The number of revisions don't affect the commit-archive."
+
+#: ../../cli.rst:927
+msgid "Then you may want to :cfgcmd:`save` in order to delete the saved configuration too."
+msgstr "Then you may want to :cfgcmd:`save` in order to delete the saved configuration too."
+
+#: ../../cli.rst:422
+msgid "These commands are also relative to the level you are inside and only relevant configuration blocks will be displayed when entering a sub-level."
+msgstr "These commands are also relative to the level you are inside and only relevant configuration blocks will be displayed when entering a sub-level."
+
+#: ../../cli.rst:475
+msgid "These two commands above are essentially the same, just executed from different levels in the hierarchy."
+msgstr "These two commands above are essentially the same, just executed from different levels in the hierarchy."
+
+#: ../../cli.rst:824
+msgid "This means four commits ago we did ``set system ipv6 disable-forwarding``."
+msgstr "This means four commits ago we did ``set system ipv6 disable-forwarding``."
+
+#: ../../cli.rst:480
+msgid "To delete a configuration entry use the :cfgcmd:`delete` command, this also deletes all sub-levels under the current level you've specified in the :cfgcmd:`delete` command. Deleting an entry will also result in the element reverting back to its default value if one exists."
+msgstr "To delete a configuration entry use the :cfgcmd:`delete` command, this also deletes all sub-levels under the current level you've specified in the :cfgcmd:`delete` command. Deleting an entry will also result in the element reverting back to its default value if one exists."
+
+#: ../../cli.rst:77
+msgid "To enter configuration mode use the ``configure`` command:"
+msgstr "To enter configuration mode use the ``configure`` command:"
+
+#: ../../cli.rst:658
+msgid "To remove an existing comment from your current configuration, specify an empty string enclosed in double quote marks (``\"\"``) as the comment text."
+msgstr "To remove an existing comment from your current configuration, specify an empty string enclosed in double quote marks (``\"\"``) as the comment text."
+
+#: ../../cli.rst:225
+msgid "Use the ``show configuration commands | strip-private`` command when you want to hide private data. You may want to do so if you want to share your configuration on the `forum`_."
+msgstr "Use the ``show configuration commands | strip-private`` command when you want to hide private data. You may want to do so if you want to share your configuration on the `forum`_."
+
+#: ../../cli.rst:892
+msgid "Use this command to load a configuration which will replace the running configuration. Define the location of the configuration file to be loaded. You can use a path to a local file, an SCP address, an SFTP address, an FTP address, an HTTP address, an HTTPS address or a TFTP address."
+msgstr "Use this command to load a configuration which will replace the running configuration. Define the location of the configuration file to be loaded. You can use a path to a local file, an SCP address, an SFTP address, an FTP address, an HTTP address, an HTTPS address or a TFTP address."
+
+#: ../../cli.rst:508
+msgid "Use this command to preserve configuration changes upon reboot. By default it is stored at */config/config.boot*. In the case you want to store the configuration file somewhere else, you can add a local path, a SCP address, a FTP address or a TFTP address."
+msgstr "Use this command to preserve configuration changes upon reboot. By default it is stored at */config/config.boot*. In the case you want to store the configuration file somewhere else, you can add a local path, a SCP address, a FTP address or a TFTP address."
+
+#: ../../cli.rst:454
+msgid "Use this command to set the value of a parameter or to create a new element."
+msgstr "Use this command to set the value of a parameter or to create a new element."
+
+#: ../../cli.rst:760
+msgid "Use this command to spot what the differences are between different configurations."
+msgstr "Use this command to spot what the differences are between different configurations."
+
+#: ../../cli.rst:552
+msgid "Use this command to temporarily commit your changes and set the number of minutes available for validation. ``confirm`` must be entered within those minutes, otherwise the system will reboot into the previous configuration. The default value is 10 minutes."
+msgstr "Use this command to temporarily commit your changes and set the number of minutes available for validation. ``confirm`` must be entered within those minutes, otherwise the system will reboot into the previous configuration. The default value is 10 minutes."
+
+#: ../../cli.rst:730
+msgid "View all existing revisions on the local system."
+msgstr "View all existing revisions on the local system."
+
+#: ../../cli.rst:137
+msgid "View the current active configuration, also known as the running configuration, from the operational mode."
+msgstr "View the current active configuration, also known as the running configuration, from the operational mode."
+
+#: ../../cli.rst:233
+msgid "View the current active configuration in JSON format."
+msgstr "View the current active configuration in JSON format."
+
+#: ../../cli.rst:241
+msgid "View the current active configuration in readable JSON format."
+msgstr "View the current active configuration in readable JSON format."
+
+#: ../../cli.rst:852
+msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successfull the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``."
+msgstr "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successfull the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``."
+
+#: ../../cli.rst:716
+msgid "VyOS comes with an integrated versioning system for the system configuration. It automatically maintains a backup of every previous configuration which has been committed to the system. The configurations are versioned locally for rollback but they can also be stored on a remote host for archiving/backup reasons."
+msgstr "VyOS comes with an integrated versioning system for the system configuration. It automatically maintains a backup of every previous configuration which has been committed to the system. The configurations are versioned locally for rollback but they can also be stored on a remote host for archiving/backup reasons."
+
+#: ../../cli.rst:756
+msgid "VyOS lets you compare different configurations."
+msgstr "VyOS lets you compare different configurations."
+
+#: ../../cli.rst:104
+msgid "VyOS makes use of a unified configuration file for the entire system's configuration: ``/config/config.boot``. This allows easy template creation, backup, and replication of system configuration. A system can thus also be easily cloned by simply copying the required configuration files."
+msgstr "VyOS makes use of a unified configuration file for the entire system's configuration: ``/config/config.boot``. This allows easy template creation, backup, and replication of system configuration. A system can thus also be easily cloned by simply copying the required configuration files."
+
+#: ../../cli.rst:558
+msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be commited, and if you don't issue  the ``confirm`` command in 10 minutes, your system will reboot into previous config revision."
+msgstr "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be commited, and if you don't issue  the ``confirm`` command in 10 minutes, your system will reboot into previous config revision."
+
+#: ../../cli.rst:340
+msgid "When entering the configuration mode you are navigating inside a tree structure, to enter configuration mode enter the command :opcmd:`configure` when in operational mode."
+msgstr "When entering the configuration mode you are navigating inside a tree structure, to enter configuration mode enter the command :opcmd:`configure` when in operational mode."
+
+#: ../../cli.rst:351
+msgid "When going into configuration mode, prompt changes from ``$`` to ``#``."
+msgstr "When going into configuration mode, prompt changes from ``$`` to ``#``."
+
+#: ../../cli.rst:692
+msgid "When inside configuration mode you are not directly able to execute operational commands."
+msgstr "When inside configuration mode you are not directly able to execute operational commands."
+
+#: ../../cli.rst:61
+msgid "When the output of a command results in more lines than can be displayed on the terminal screen the output is paginated as indicated by a ``:`` prompt."
+msgstr "When the output of a command results in more lines than can be displayed on the terminal screen the output is paginated as indicated by a ``:`` prompt."
+
+#: ../../cli.rst:886
+msgid "When using the save_ command, you can add a specific location where to store your configuration file. And, when needed it, you will be able to load it with the ``load`` command:"
+msgstr "When using the save_ command, you can add a specific location where to store your configuration file. And, when needed it, you will be able to load it with the ``load`` command:"
+
+#: ../../cli.rst:72
+msgid "When viewing in page mode the following commands are available:"
+msgstr "When viewing in page mode the following commands are available:"
+
+#: ../../cli.rst:370
+msgid "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use eithe the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time."
+msgstr "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use eithe the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time."
+
+#: ../../cli.rst:618
+msgid "You can also rename config subtrees:"
+msgstr "You can also rename config subtrees:"
+
+#: ../../cli.rst:585
+msgid "You can copy and remove configuration subtrees. Suppose you set up a firewall ruleset ``FromWorld`` with one rule that allows traffic from specific subnet. Now you want to setup a similar rule, but for different subnet. Change your edit level to ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then modify rule 20."
+msgstr "You can copy and remove configuration subtrees. Suppose you set up a firewall ruleset ``FromWorld`` with one rule that allows traffic from specific subnet. Now you want to setup a similar rule, but for different subnet. Change your edit level to ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then modify rule 20."
+
+#: ../../cli.rst:830
+msgid "You can rollback configuration changes using the rollback command. This will apply the selected revision and trigger a system reboot."
+msgstr "You can rollback configuration changes using the rollback command. This will apply the selected revision and trigger a system reboot."
+
+#: ../../cli.rst:58
+msgid "You can scroll up with the keys ``[Shift]+[PageUp]`` and scroll down with ``[Shift]+[PageDown]``."
+msgstr "You can scroll up with the keys ``[Shift]+[PageUp]`` and scroll down with ``[Shift]+[PageDown]``."
+
+#: ../../cli.rst:747
+msgid "You can specify the number of revisions stored on disk. N can be in the range of 0 - 65535. When the number of revisions exceeds the configured value, the oldest revision is removed. The default setting for this value is to store 100 revisions locally."
+msgstr "You can specify the number of revisions stored on disk. N can be in the range of 0 - 65535. When the number of revisions exceeds the configured value, the oldest revision is removed. The default setting for this value is to store 100 revisions locally."
+
+#: ../../cli.rst:883
+msgid "You can use the ``save`` and ``load`` commands if you want to manually manage specific configuration files."
+msgstr "You can use the ``save`` and ``load`` commands if you want to manually manage specific configuration files."
+
+#: ../../cli.rst:871
+msgid "You may find VyOS not allowing the secure connection because it cannot verify the legitimacy of the remote server. You can use the workaround below to quickly add the remote host's SSH fingerprint to your ``~/.ssh/known_hosts`` file:"
+msgstr "You may find VyOS not allowing the secure connection because it cannot verify the legitimacy of the remote server. You can use the workaround below to quickly add the remote host's SSH fingerprint to your ``~/.ssh/known_hosts`` file:"
+
+#: ../../cli.rst:924
+msgid "You will be asked if you want to continue. If you accept, you will have to use :cfgcmd:`commit` if you want to make the changes active."
+msgstr "You will be asked if you want to continue. If you accept, you will have to use :cfgcmd:`commit` if you want to make the changes active."
+
+#: ../../cli.rst:67
+msgid "``b`` will scroll back one page"
+msgstr "``b`` will scroll back one page"
+
+#: ../../cli.rst:866
+msgid "``ftp://<user>:<passwd>@<host>/<dir>``"
+msgstr "``ftp://<user>:<passwd>@<host>/<dir>``"
+
+#: ../../cli.rst:71
+msgid "``left-arrow`` and ``right-arrow`` can be used to scroll left or right in the event that the output has lines which exceed the terminal size."
+msgstr "``left-arrow`` and ``right-arrow`` can be used to scroll left or right in the event that the output has lines which exceed the terminal size."
+
+#: ../../cli.rst:65
+msgid "``q`` key can be used to cancel output"
+msgstr "``q`` key can be used to cancel output"
+
+#: ../../cli.rst:68
+msgid "``return`` will scroll down one line"
+msgstr "``return`` will scroll down one line"
+
+#: ../../cli.rst:864
+msgid "``scp://<user>:<passwd>@<host>:/<dir>``"
+msgstr "``scp://<user>:<passwd>@<host>:/<dir>``"
+
+#: ../../cli.rst:865
+msgid "``sftp://<user>:<passwd>@<host>/<dir>``"
+msgstr "``sftp://<user>:<passwd>@<host>/<dir>``"
+
+#: ../../cli.rst:66
+msgid "``space`` will scroll down one page"
+msgstr "``space`` will scroll down one page"
+
+#: ../../cli.rst:867
+msgid "``tftp://<host>/<dir>``"
+msgstr "``tftp://<host>/<dir>``"
+
+#: ../../cli.rst:69
+msgid "``up-arrow`` and ``down-arrow`` will scroll up or down one line at a time respectively"
+msgstr "``up-arrow`` and ``down-arrow`` will scroll up or down one line at a time respectively"
diff --git a/docs/_locale/de/configuration.pot b/docs/_locale/de/configuration.pot
index 02238ad3..1a96d419 100644
--- a/docs/_locale/de/configuration.pot
+++ b/docs/_locale/de/configuration.pot
@@ -177,6 +177,10 @@ msgstr "**External check**"
 msgid "**Firewall mark**"
 msgstr "**Firewall mark**"
 
+#: ../../configuration/firewall/index.rst:41
+msgid "**For more information** of Netfilter hooks and Linux networking packet flows can be found in `Netfilter-Hooks <https://wiki.nftables.org/wiki-nftables/index.php/Netfilter_hooks>`_"
+msgstr "**For more information** of Netfilter hooks and Linux networking packet flows can be found in `Netfilter-Hooks <https://wiki.nftables.org/wiki-nftables/index.php/Netfilter_hooks>`_"
+
 #: ../../configuration/protocols/bgp.rst:94
 msgid "**IGP cost check**"
 msgstr "**IGP cost check**"
@@ -201,11 +205,11 @@ msgstr "**Important note:** This documentation is valid only for VyOS Sagitta pr
 msgid "**Important note:** This documentation is valid only for VyOS Sagitta prior to 1.4-rolling-YYYYMMDDHHmm"
 msgstr "**Wichtiger Hinweis: ** Diese Dokumentation ist nur für VyOS Sagitta vor 1.4-Rolling-YYYYMMDDHHMM gültig"
 
-#: ../../configuration/firewall/general.rst:79
+#: ../../configuration/firewall/general.rst:72
 msgid "**Important note about default-actions:** If default action for any chain is not defined, then the default action is set to **accept** for that chain. Only for custom chains, the default action is set to **drop**."
 msgstr "**Wichtiger Hinweis zu Standardaktionen: ** Wenn die Standardaktion für eine Kette nicht definiert ist, ist die Standardaktion für diese Kette auf ** accept** gesetzt. Nur für benutzerdefinierte Ketten ist die Standardaktion auf **drop** gesetzt."
 
-#: ../../configuration/firewall/general.rst:411
+#: ../../configuration/firewall/general.rst:404
 msgid "**Important note about default-actions:** If default action for any chain is not defined, then the default action is set to **drop** for that chain."
 msgstr "**Important note about default-actions:** If default action for any chain is not defined, then the default action is set to **drop** for that chain."
 
@@ -623,7 +627,7 @@ msgstr "**exporter**: aggregates packets into flows and exports flow records tow
 msgid "**firewall all-ping** affects only to LOCAL and it always behaves in the most restrictive way"
 msgstr "**firewall all-ping** affects only to LOCAL and it always behaves in the most restrictive way"
 
-#: ../../configuration/firewall/general.rst:106
+#: ../../configuration/firewall/general.rst:99
 msgid "**firewall global-options all-ping** affects only to LOCAL and it always behaves in the most restrictive way"
 msgstr "**firewall global-options all-ping** affects only to LOCAL and it always behaves in the most restrictive way"
 
@@ -1309,17 +1313,17 @@ msgstr "<x.x.x.x>: IP address to match."
 msgid "ARP"
 msgstr "ARP"
 
-#: ../../configuration/firewall/general.rst:309
+#: ../../configuration/firewall/general.rst:302
 #: ../../configuration/firewall/general-legacy.rst:257
 msgid "A **domain group** represents a collection of domains."
 msgstr "A **domain group** represents a collection of domains."
 
-#: ../../configuration/firewall/general.rst:291
+#: ../../configuration/firewall/general.rst:284
 #: ../../configuration/firewall/general-legacy.rst:242
 msgid "A **mac group** represents a collection of mac addresses."
 msgstr "A **mac group** represents a collection of mac addresses."
 
-#: ../../configuration/firewall/general.rst:266
+#: ../../configuration/firewall/general.rst:259
 #: ../../configuration/firewall/general-legacy.rst:217
 msgid "A **port group** represents only port numbers, not the protocol. Port groups can be referenced for either TCP or UDP. It is recommended that TCP and UDP groups are created separately to avoid accidentally filtering unnecessary ports. Ranges of ports can be specified by using `-`."
 msgstr "A **port group** represents only port numbers, not the protocol. Port groups can be referenced for either TCP or UDP. It is recommended that TCP and UDP groups are created separately to avoid accidentally filtering unnecessary ports. Ranges of ports can be specified by using `-`."
@@ -1481,7 +1485,7 @@ msgstr "A physical interface is required to connect this MACsec instance to. Tra
 msgid "A pool of addresses can be defined by using a hyphen between two IP addresses:"
 msgstr "A pool of addresses can be defined by using a hyphen between two IP addresses:"
 
-#: ../../configuration/firewall/general.rst:768
+#: ../../configuration/firewall/general.rst:761
 #: ../../configuration/firewall/general-legacy.rst:506
 msgid "A port can be set with a port number or a name which is here defined: ``/etc/services``."
 msgstr "A port can be set with a port number or a name which is here defined: ``/etc/services``."
@@ -1624,7 +1628,7 @@ msgstr "Action must be taken immediately - A condition that should be corrected
 msgid "Action which will be run once the ctrl-alt-del keystroke is received."
 msgstr "Action which will be run once the ctrl-alt-del keystroke is received."
 
-#: ../../configuration/firewall/general.rst:334
+#: ../../configuration/firewall/general.rst:327
 #: ../../configuration/policy/route.rst:238
 msgid "Actions"
 msgstr "Actions"
@@ -1697,6 +1701,10 @@ msgstr "Add public key portion for the certificate named `name` to the VyOS CLI.
 msgid "Add the CAs private key to the VyOS CLI. This should never leave the system, and is only required if you use VyOS as your certificate generator as mentioned above."
 msgstr "Add the CAs private key to the VyOS CLI. This should never leave the system, and is only required if you use VyOS as your certificate generator as mentioned above."
 
+#: ../../configuration/vpn/remoteaccess_ipsec.rst:163
+msgid "Add the commands from Snippet in the Windows side via PowerShell. Also import the root CA cert to the Windows “Trusted Root Certification Authorities” and establish the connection."
+msgstr "Add the commands from Snippet in the Windows side via PowerShell. Also import the root CA cert to the Windows “Trusted Root Certification Authorities” and establish the connection."
+
 #: ../../configuration/pki/index.rst:232
 msgid "Add the private key portion of this certificate to the CLI. This should never leave the system as it is used to decrypt the data."
 msgstr "Add the private key portion of this certificate to the CLI. This should never leave the system as it is used to decrypt the data."
@@ -1741,7 +1749,7 @@ msgstr "Address Conversion"
 msgid "Address Families"
 msgstr "Address Families"
 
-#: ../../configuration/firewall/general.rst:199
+#: ../../configuration/firewall/general.rst:192
 #: ../../configuration/firewall/general-legacy.rst:168
 msgid "Address Groups"
 msgstr "Address Groups"
@@ -1790,6 +1798,10 @@ msgstr "After commit the plaintext passwords will be hashed and stored in your c
 msgid "After committing the configuration we can verify all leaked routes are installed, and try to ICMP ping PC1 from PC3."
 msgstr "After committing the configuration we can verify all leaked routes are installed, and try to ICMP ping PC1 from PC3."
 
+#: ../../configuration/vpn/remoteaccess_ipsec.rst:80
+msgid "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this example are validated to work on Windows 10."
+msgstr "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this example are validated to work on Windows 10."
+
 #: ../../configuration/pki/index.rst:212
 msgid "After we have imported the CA certificate(s) we can now import and add certificates used by services on this router."
 msgstr "After we have imported the CA certificate(s) we can now import and add certificates used by services on this router."
@@ -1898,7 +1910,7 @@ msgstr "Allow host networking in a container. The network stack of the container
 msgid "Allow this BFD peer to not be directly connected"
 msgstr "Allow this BFD peer to not be directly connected"
 
-#: ../../configuration/firewall/general.rst:1144
+#: ../../configuration/firewall/general.rst:1137
 #: ../../configuration/firewall/general-legacy.rst:694
 msgid "Allowed values fpr TCP flags: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` When specifying more than one flag, flags should be comma separated. The ``!`` negate the selected protocol."
 msgstr "Allowed values fpr TCP flags: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` When specifying more than one flag, flags should be comma separated. The ``!`` negate the selected protocol."
@@ -1923,7 +1935,7 @@ msgstr "Allows you to configure the next-hop interface for an interface-based IP
 msgid "Already learned known_hosts files of clients need an update as the public key will change."
 msgstr "Already learned known_hosts files of clients need an update as the public key will change."
 
-#: ../../configuration/firewall/general.rst:384
+#: ../../configuration/firewall/general.rst:377
 msgid "Also, **default-action** is an action that takes place whenever a packet does not match any rule in it's chain. For base chains, possible options for **default-action** are **accept** or **drop**."
 msgstr "Also, **default-action** is an action that takes place whenever a packet does not match any rule in it's chain. For base chains, possible options for **default-action** are **accept** or **drop**."
 
@@ -1955,7 +1967,7 @@ msgstr "Alternative to multicast, the remote IPv4 address of the VXLAN tunnel ca
 msgid "Always exclude this address from any defined range. This address will never be assigned by the DHCP server."
 msgstr "Always exclude this address from any defined range. This address will never be assigned by the DHCP server."
 
-#: ../../configuration/firewall/general.rst:248
+#: ../../configuration/firewall/general.rst:241
 msgid "An **interface group** represents a collection of interfaces."
 msgstr "An **interface group** represents a collection of interfaces."
 
@@ -2007,7 +2019,7 @@ msgstr "An arbitrary netmask can be applied to mask addresses to only match agai
 msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 and a zone-based firewall as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses <https://datatracker.ietf.org/doc/id/draft-chown-6man-tokenised-ipv6-identifiers-02.txt>`_)."
 msgstr "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 and a zone-based firewall as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses <https://datatracker.ietf.org/doc/id/draft-chown-6man-tokenised-ipv6-identifiers-02.txt>`_)."
 
-#: ../../configuration/firewall/general.rst:626
+#: ../../configuration/firewall/general.rst:619
 msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses <https://datatracker.ietf.org/doc/id/draft-chown-6man-tokenised-ipv6-identifiers-02.txt>`_)"
 msgstr "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses <https://datatracker.ietf.org/doc/id/draft-chown-6man-tokenised-ipv6-identifiers-02.txt>`_)"
 
@@ -2213,6 +2225,14 @@ msgstr "As shown in the example above, one of the possibilities to match packets
 msgid "As shown in the last command of the example above, the `queue-type` setting allows these combinations. You will be able to use it in many policies."
 msgstr "As shown in the last command of the example above, the `queue-type` setting allows these combinations. You will be able to use it in many policies."
 
+#: ../../configuration/firewall/index.rst:81
+msgid "As the example image below shows, the device now needs rules to allow/block traffic to or from the services running on the device that have open connections on that interface."
+msgstr "As the example image below shows, the device now needs rules to allow/block traffic to or from the services running on the device that have open connections on that interface."
+
+#: ../../configuration/firewall/index.rst:60
+msgid "As the example image below shows, the device was configured with rules blocking inbound or outbound traffic on each interface."
+msgstr "As the example image below shows, the device was configured with rules blocking inbound or outbound traffic on each interface."
+
 #: ../../configuration/interfaces/tunnel.rst:69
 msgid "As the name implies, it's IPv4 encapsulated in IPv6, as simple as that."
 msgstr "As the name implies, it's IPv4 encapsulated in IPv6, as simple as that."
@@ -2333,7 +2353,7 @@ msgstr "Assured Forwarding(AF) 43"
 msgid "At every round, the deficit counter adds the quantum so that even large packets will have their opportunity to be dequeued."
 msgstr "At every round, the deficit counter adds the quantum so that even large packets will have their opportunity to be dequeued."
 
-#: ../../configuration/firewall/general.rst:1496
+#: ../../configuration/firewall/general.rst:1489
 #: ../../configuration/firewall/general-legacy.rst:972
 msgid "At the moment it not possible to look at the whole firewall log with VyOS operational commands. All logs will save to ``/var/logs/messages``. For example: ``grep '10.10.0.10' /var/log/messages``"
 msgstr "At the moment it not possible to look at the whole firewall log with VyOS operational commands. All logs will save to ``/var/logs/messages``. For example: ``grep '10.10.0.10' /var/log/messages``"
@@ -2764,7 +2784,7 @@ msgstr "By default, the BGP prefix is advertised even if it's not present in the
 msgid "By default, this bridging is allowed."
 msgstr "By default, this bridging is allowed."
 
-#: ../../configuration/firewall/general.rst:97
+#: ../../configuration/firewall/general.rst:90
 #: ../../configuration/firewall/general-legacy.rst:42
 msgid "By default, when VyOS receives an ICMP echo request packet destined for itself, it will answer with an ICMP echo reply, unless you avoid it through its firewall."
 msgstr "By default, when VyOS receives an ICMP echo request packet destined for itself, it will answer with an ICMP echo reply, unless you avoid it through its firewall."
@@ -2935,6 +2955,10 @@ msgstr "Client Address Pools"
 msgid "Client Authentication"
 msgstr "Client Authentication"
 
+#: ../../configuration/vpn/remoteaccess_ipsec.rst:137
+msgid "Client Configuration"
+msgstr "Client Configuration"
+
 #: ../../configuration/vpn/sstp.rst:278
 msgid "Client IP addresses will be provided from pool `192.0.2.0/25`"
 msgstr "Client IP addresses will be provided from pool `192.0.2.0/25`"
@@ -2975,7 +2999,7 @@ msgstr "Clock daemon"
 msgid "Command completion can be used to list available time zones. The adjustment for daylight time will take place automatically based on the time of year."
 msgstr "Command completion can be used to list available time zones. The adjustment for daylight time will take place automatically based on the time of year."
 
-#: ../../configuration/firewall/general.rst:537
+#: ../../configuration/firewall/general.rst:530
 msgid "Command for disabling a rule but keep it in the configuration."
 msgstr "Command for disabling a rule but keep it in the configuration."
 
@@ -2983,7 +3007,7 @@ msgstr "Command for disabling a rule but keep it in the configuration."
 msgid "Command should probably be extended to list also the real interfaces assigned to this one VRF to get a better overview."
 msgstr "Command should probably be extended to list also the real interfaces assigned to this one VRF to get a better overview."
 
-#: ../../configuration/firewall/general.rst:1551
+#: ../../configuration/firewall/general.rst:1544
 #: ../../configuration/firewall/general-legacy.rst:1054
 msgid "Command used to update GeoIP database and firewall sets."
 msgstr "Command used to update GeoIP database and firewall sets."
@@ -3081,7 +3105,7 @@ msgstr "Confidentiality – Encryption of packets to prevent snooping by an unau
 #: ../../configuration/system/flow-accounting.rst:43
 #: ../../configuration/system/lcd.rst:17
 #: ../../configuration/system/login.rst:241
-#: ../../configuration/system/login.rst:294
+#: ../../configuration/system/login.rst:310
 #: ../../configuration/system/sflow.rst:12
 #: ../../configuration/vpn/dmvpn.rst:38
 #: ../../configuration/vpn/dmvpn.rst:182
@@ -3099,6 +3123,8 @@ msgstr "Configuration"
 #: ../../configuration/protocols/pim6.rst:78
 #: ../../configuration/protocols/rip.rst:239
 #: ../../configuration/protocols/segment-routing.rst:187
+#: ../../configuration/system/login.rst:279
+#: ../../configuration/system/login.rst:348
 msgid "Configuration Example"
 msgstr "Configuration Example"
 
@@ -3211,11 +3237,11 @@ msgstr "Configure SNAT rule (40) to only NAT packets with a destination address
 msgid "Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It is the size (in bytes) of the largest ethernet frame sent on this link."
 msgstr "Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It is the size (in bytes) of the largest ethernet frame sent on this link."
 
-#: ../../configuration/system/login.rst:345
+#: ../../configuration/system/login.rst:373
 msgid "Configure `<message>` which is shown after user has logged in to the system."
 msgstr "Configure `<message>` which is shown after user has logged in to the system."
 
-#: ../../configuration/system/login.rst:340
+#: ../../configuration/system/login.rst:368
 msgid "Configure `<message>` which is shown during SSH connect and before a user is logged in."
 msgstr "Configure `<message>` which is shown during SSH connect and before a user is logged in."
 
@@ -3441,7 +3467,7 @@ msgstr "Configure service `<name>` mode TCP or HTTP"
 msgid "Configure service `<name>` to use the backend <name>"
 msgstr "Configure service `<name>` to use the backend <name>"
 
-#: ../../configuration/system/login.rst:364
+#: ../../configuration/system/login.rst:392
 msgid "Configure session timeout after which the user will be logged out."
 msgstr "Configure session timeout after which the user will be logged out."
 
@@ -3465,7 +3491,7 @@ msgstr "Configure the connection tracking protocol helper modules. All modules a
 msgid "Configure the discrete port under which the RADIUS server can be reached."
 msgstr "Configure the discrete port under which the RADIUS server can be reached."
 
-#: ../../configuration/system/login.rst:305
+#: ../../configuration/system/login.rst:321
 msgid "Configure the discrete port under which the TACACS server can be reached."
 msgstr "Configure the discrete port under which the TACACS server can be reached."
 
@@ -3744,7 +3770,7 @@ msgstr "Currently dynamic routing is supported for the following protocols:"
 msgid "Custom File"
 msgstr "Custom File"
 
-#: ../../configuration/firewall/general.rst:84
+#: ../../configuration/firewall/general.rst:77
 msgid "Custom firewall chains can be created, with commands ``set firewall [ipv4 | ipv6] [name | ipv6-name] <name> ...``. In order to use such custom chain, a rule with **action jump**, and the appropiate **target** should be defined in a base chain."
 msgstr "Custom firewall chains can be created, with commands ``set firewall [ipv4 | ipv6] [name | ipv6-name] <name> ...``. In order to use such custom chain, a rule with **action jump**, and the appropiate **target** should be defined in a base chain."
 
@@ -3875,7 +3901,7 @@ msgstr "DSCP values as per :rfc:`2474` and :rfc:`4595`:"
 msgid "DSSS/CCK Mode in 40 MHz, this sets ``[DSSS_CCK-40]``"
 msgstr "DSSS/CCK Mode in 40 MHz, this sets ``[DSSS_CCK-40]``"
 
-#: ../../configuration/firewall/general.rst:721
+#: ../../configuration/firewall/general.rst:714
 #: ../../configuration/firewall/general-legacy.rst:480
 msgid "Data is provided by DB-IP.com under CC-BY-4.0 license. Attribution required, permits redistribution so we can include a database in images(~3MB compressed). Includes cron script (manually callable by op-mode update geoip) to keep database and rules updated."
 msgstr "Data is provided by DB-IP.com under CC-BY-4.0 license. Attribution required, permits redistribution so we can include a database in images(~3MB compressed). Includes cron script (manually callable by op-mode update geoip) to keep database and rules updated."
@@ -3994,12 +4020,12 @@ msgstr "Define Conection Timeouts"
 msgid "Define IPv4/IPv6 management address transmitted via LLDP. Multiple addresses can be defined. Only addresses connected to the system will be transmitted."
 msgstr "Define IPv4/IPv6 management address transmitted via LLDP. Multiple addresses can be defined. Only addresses connected to the system will be transmitted."
 
-#: ../../configuration/firewall/general.rst:232
+#: ../../configuration/firewall/general.rst:225
 #: ../../configuration/firewall/general-legacy.rst:201
 msgid "Define a IPv4 or IPv6 Network group."
 msgstr "Define a IPv4 or IPv6 Network group."
 
-#: ../../configuration/firewall/general.rst:208
+#: ../../configuration/firewall/general.rst:201
 #: ../../configuration/firewall/general-legacy.rst:177
 msgid "Define a IPv4 or a IPv6 address group"
 msgstr "Define a IPv4 or a IPv6 address group"
@@ -4012,17 +4038,17 @@ msgstr "Define a Zone"
 msgid "Define a discrete source IP address of 100.64.0.1 for SNAT rule 20"
 msgstr "Define a discrete source IP address of 100.64.0.1 for SNAT rule 20"
 
-#: ../../configuration/firewall/general.rst:313
+#: ../../configuration/firewall/general.rst:306
 #: ../../configuration/firewall/general-legacy.rst:261
 msgid "Define a domain group."
 msgstr "Define a domain group."
 
-#: ../../configuration/firewall/general.rst:295
+#: ../../configuration/firewall/general.rst:288
 #: ../../configuration/firewall/general-legacy.rst:246
 msgid "Define a mac group."
 msgstr "Define a mac group."
 
-#: ../../configuration/firewall/general.rst:275
+#: ../../configuration/firewall/general.rst:268
 #: ../../configuration/firewall/general-legacy.rst:226
 msgid "Define a port group. A port name can be any name defined in /etc/services. e.g.: http"
 msgstr "Define a port group. A port name can be any name defined in /etc/services. e.g.: http"
@@ -4031,7 +4057,7 @@ msgstr "Define a port group. A port name can be any name defined in /etc/service
 msgid "Define allowed ciphers used for the SSH connection. A number of allowed ciphers can be specified, use multiple occurrences to allow multiple ciphers."
 msgstr "Define allowed ciphers used for the SSH connection. A number of allowed ciphers can be specified, use multiple occurrences to allow multiple ciphers."
 
-#: ../../configuration/firewall/general.rst:252
+#: ../../configuration/firewall/general.rst:245
 msgid "Define an interface group. Wildcard are accepted too."
 msgstr "Define an interface group. Wildcard are accepted too."
 
@@ -4127,22 +4153,22 @@ msgstr "Define different modes for sending replies in response to received ARP r
 msgid "Define different restriction levels for announcing the local source IP address from IP packets in ARP requests sent on interface."
 msgstr "Define different restriction levels for announcing the local source IP address from IP packets in ARP requests sent on interface."
 
-#: ../../configuration/firewall/general.rst:483
+#: ../../configuration/firewall/general.rst:476
 #: ../../configuration/firewall/general-legacy.rst:361
 msgid "Define length of packet payload to include in netlink message. Only applicable if rule log is enable and log group is defined."
 msgstr "Define length of packet payload to include in netlink message. Only applicable if rule log is enable and log group is defined."
 
-#: ../../configuration/firewall/general.rst:457
+#: ../../configuration/firewall/general.rst:450
 #: ../../configuration/firewall/general-legacy.rst:347
 msgid "Define log-level. Only applicable if rule log is enable."
 msgstr "Define log-level. Only applicable if rule log is enable."
 
-#: ../../configuration/firewall/general.rst:470
+#: ../../configuration/firewall/general.rst:463
 #: ../../configuration/firewall/general-legacy.rst:354
 msgid "Define log group to send message to. Only applicable if rule log is enable."
 msgstr "Define log group to send message to. Only applicable if rule log is enable."
 
-#: ../../configuration/firewall/general.rst:497
+#: ../../configuration/firewall/general.rst:490
 #: ../../configuration/firewall/general-legacy.rst:369
 msgid "Define number of packets to queue inside the kernel before sending them to userspace. Only applicable if rule log is enable and log group is defined."
 msgstr "Define number of packets to queue inside the kernel before sending them to userspace. Only applicable if rule log is enable and log group is defined."
@@ -4300,7 +4326,7 @@ msgstr "Disable a BFD peer"
 msgid "Disable a container."
 msgstr "Disable a container."
 
-#: ../../configuration/firewall/general.rst:1290
+#: ../../configuration/firewall/general.rst:1283
 msgid "Disable conntrack loose track option"
 msgstr "Disable conntrack loose track option"
 
@@ -4541,7 +4567,7 @@ msgstr "Does not need to be used together with proxy_arp."
 msgid "Domain"
 msgstr "Domain"
 
-#: ../../configuration/firewall/general.rst:307
+#: ../../configuration/firewall/general.rst:300
 #: ../../configuration/firewall/general-legacy.rst:255
 msgid "Domain Groups"
 msgstr "Domain Groups"
@@ -4866,17 +4892,17 @@ msgstr "Enable given legacy protocol on this LLDP instance. Legacy protocols inc
 msgid "Enable layer 7 HTTP health check"
 msgstr "Enable layer 7 HTTP health check"
 
-#: ../../configuration/firewall/general.rst:184
+#: ../../configuration/firewall/general.rst:177
 #: ../../configuration/firewall/general-legacy.rst:126
 msgid "Enable or Disable VyOS to be :rfc:`1337` conform. The following system parameter will be altered:"
 msgstr "Enable or Disable VyOS to be :rfc:`1337` conform. The following system parameter will be altered:"
 
-#: ../../configuration/firewall/general.rst:176
+#: ../../configuration/firewall/general.rst:169
 #: ../../configuration/firewall/general-legacy.rst:119
 msgid "Enable or Disable if VyOS use IPv4 TCP SYN Cookies. The following system parameter will be altered:"
 msgstr "Enable or Disable if VyOS use IPv4 TCP SYN Cookies. The following system parameter will be altered:"
 
-#: ../../configuration/firewall/general.rst:433
+#: ../../configuration/firewall/general.rst:426
 #: ../../configuration/firewall/general-legacy.rst:340
 msgid "Enable or disable logging for the matched packet."
 msgstr "Enable or disable logging for the matched packet."
@@ -5108,6 +5134,10 @@ msgstr "Every Virtual Ethernet interfaces behaves like a real Ethernet interface
 msgid "Every WWAN connection requires an :abbr:`APN (Access Point Name)` which is used by the client to dial into the ISPs network. This is a mandatory parameter. Contact your Service Provider for correct APN."
 msgstr "Every WWAN connection requires an :abbr:`APN (Access Point Name)` which is used by the client to dial into the ISPs network. This is a mandatory parameter. Contact your Service Provider for correct APN."
 
+#: ../../configuration/vpn/remoteaccess_ipsec.rst:98
+msgid "Every connection/remote-access pool we configure also needs a pool where we can draw our client IP addresses from. We provide one IPv4 and IPv6 pool. Authorized clients will receive an IPv4 address from the configured IPv4 prefix and an IPv6 address from the IPv6 prefix. We can also send some DNS nameservers down to our clients used on their connection."
+msgstr "Every connection/remote-access pool we configure also needs a pool where we can draw our client IP addresses from. We provide one IPv4 and IPv6 pool. Authorized clients will receive an IPv4 address from the configured IPv4 prefix and an IPv6 address from the IPv6 prefix. We can also send some DNS nameservers down to our clients used on their connection."
+
 #: ../../configuration/highavailability/index.rst:397
 #: ../../configuration/interfaces/bonding.rst:291
 #: ../../configuration/interfaces/l2tpv3.rst:86
@@ -5134,7 +5164,7 @@ msgstr "Every WWAN connection requires an :abbr:`APN (Access Point Name)` which
 #: ../../configuration/service/snmp.rst:145
 #: ../../configuration/service/tftp-server.rst:47
 #: ../../configuration/system/acceleration.rst:58
-#: ../../configuration/system/login.rst:367
+#: ../../configuration/system/login.rst:395
 #: ../../configuration/system/name-server.rst:28
 #: ../../configuration/system/name-server.rst:63
 #: ../../configuration/system/sflow.rst:49
@@ -5723,7 +5753,7 @@ msgstr "Example IPv6 only:"
 msgid "Example Network"
 msgstr "Example Network"
 
-#: ../../configuration/firewall/general.rst:1502
+#: ../../configuration/firewall/general.rst:1495
 #: ../../configuration/firewall/general-legacy.rst:979
 msgid "Example Partial Config"
 msgstr "Example Partial Config"
@@ -5744,7 +5774,7 @@ msgstr "Example for configuring a simple L2TP over IPsec VPN for remote access (
 msgid "Example of redirection:"
 msgstr "Example of redirection:"
 
-#: ../../configuration/firewall/general.rst:1285
+#: ../../configuration/firewall/general.rst:1278
 msgid "Example synproxy"
 msgstr "Example synproxy"
 
@@ -5920,8 +5950,7 @@ msgstr "Filtering is used for both input and output of the routing information.
 msgid "Finally, to apply the policy route to ingress traffic on our LAN interface, we use:"
 msgstr "Finally, to apply the policy route to ingress traffic on our LAN interface, we use:"
 
-#: ../../configuration/firewall/general.rst:7
-#: ../../configuration/firewall/index.rst:3
+#: ../../configuration/firewall/index.rst:5
 msgid "Firewall"
 msgstr "Firewall"
 
@@ -5929,7 +5958,15 @@ msgstr "Firewall"
 msgid "Firewall-Legacy"
 msgstr "Firewall-Legacy"
 
-#: ../../configuration/firewall/general.rst:502
+#: ../../configuration/firewall/general.rst:7
+msgid "Firewall Configuration"
+msgstr "Firewall Configuration"
+
+#: ../../configuration/firewall/general-legacy.rst:7
+msgid "Firewall Configuration (Deprecated)"
+msgstr "Firewall Configuration (Deprecated)"
+
+#: ../../configuration/firewall/general.rst:495
 msgid "Firewall Description"
 msgstr "Firewall Description"
 
@@ -5938,15 +5975,15 @@ msgstr "Firewall Description"
 msgid "Firewall Exceptions"
 msgstr "Firewall Exceptions"
 
-#: ../../configuration/firewall/general.rst:417
+#: ../../configuration/firewall/general.rst:410
 msgid "Firewall Logs"
 msgstr "Firewall Logs"
 
-#: ../../configuration/firewall/general.rst:325
+#: ../../configuration/firewall/general.rst:318
 msgid "Firewall Rules"
 msgstr "Firewall Rules"
 
-#: ../../configuration/firewall/general.rst:193
+#: ../../configuration/firewall/general.rst:186
 msgid "Firewall groups represent collections of IP addresses, networks, ports, mac addresses, domains or interfaces. Once created, a group can be referenced by firewall, nat and policy route rules as either a source or destination matcher, and as inbpund/outbound in the case of interface group."
 msgstr "Firewall groups represent collections of IP addresses, networks, ports, mac addresses, domains or interfaces. Once created, a group can be referenced by firewall, nat and policy route rules as either a source or destination matcher, and as inbpund/outbound in the case of interface group."
 
@@ -5990,6 +6027,10 @@ msgstr "First, you need to generate a key by running ``run generate pki openvpn
 msgid "First hop interface of a route to match."
 msgstr "First hop interface of a route to match."
 
+#: ../../configuration/vpn/remoteaccess_ipsec.rst:20
+msgid "First of all, we need to create a CA root certificate and server certificate on the server side."
+msgstr "First of all, we need to create a CA root certificate and server certificate on the server side."
+
 #: ../../configuration/protocols/bgp.rst:171
 msgid "First of all you must configure BGP router with the :abbr:`ASN (Autonomous System Number)`. The AS number is an identifier for the autonomous system. The BGP protocol uses the AS number for detecting whether the BGP connection is internal or external. VyOS does not have a special command to start the BGP process. The BGP process starts when the first neighbor is configured."
 msgstr "First of all you must configure BGP router with the :abbr:`ASN (Autonomous System Number)`. The AS number is an identifier for the autonomous system. The BGP protocol uses the AS number for detecting whether the BGP connection is internal or external. VyOS does not have a special command to start the BGP process. The BGP process starts when the first neighbor is configured."
@@ -6118,11 +6159,11 @@ msgstr "For example, if problems with poor time synchronization are experienced,
 msgid "For example:"
 msgstr "For example:"
 
-#: ../../configuration/firewall/general.rst:66
+#: ../../configuration/firewall/general.rst:59
 msgid "For firewall filtering, configuration should be done in ``set firewall [ipv4 | ipv6] ...``"
 msgstr "For firewall filtering, configuration should be done in ``set firewall [ipv4 | ipv6] ...``"
 
-#: ../../configuration/firewall/general.rst:327
+#: ../../configuration/firewall/general.rst:320
 msgid "For firewall filtering, firewall rules needs to be created. Each rule is numbered, has an action to apply if the rule is matched, and the ability to specify multiple criteria matchers. Data packets go through the rules from 1 - 999999, so order is crucial. At the first match the action of the rule will be executed."
 msgstr "For firewall filtering, firewall rules needs to be created. Each rule is numbered, has an action to apply if the rule is matched, and the ability to specify multiple criteria matchers. Data packets go through the rules from 1 - 999999, so order is crucial. At the first match the action of the rule will be executed."
 
@@ -6170,7 +6211,7 @@ msgstr "For optimal scalability, Multicast shouldn't be used at all, but instead
 msgid "For outbound updates the order of preference is:"
 msgstr "For outbound updates the order of preference is:"
 
-#: ../../configuration/firewall/general.rst:504
+#: ../../configuration/firewall/general.rst:497
 msgid "For reference, a description can be defined for every single rule, and for every defined custom chain."
 msgstr "For reference, a description can be defined for every single rule, and for every defined custom chain."
 
@@ -6210,15 +6251,15 @@ msgstr "For the ingress traffic of an interface, there is only one policy you ca
 msgid "For the sake of demonstration, `example #1 in the official documentation <https://www.zabbix.com/documentation/current/manual/installation/containers>`_ to the declarative VyOS CLI syntax."
 msgstr "For the sake of demonstration, `example #1 in the official documentation <https://www.zabbix.com/documentation/current/manual/installation/containers>`_ to the declarative VyOS CLI syntax."
 
-#: ../../configuration/firewall/general.rst:73
+#: ../../configuration/firewall/general.rst:66
 msgid "For traffic originated by the router, base chain is **output filter**: ``set firewall [ipv4 | ipv6] output filter ...``"
 msgstr "For traffic originated by the router, base chain is **output filter**: ``set firewall [ipv4 | ipv6] output filter ...``"
 
-#: ../../configuration/firewall/general.rst:76
+#: ../../configuration/firewall/general.rst:69
 msgid "For traffic towards the router itself, base chain is **input filter**: ``set firewall [ipv4 | ipv6] input filter ...``"
 msgstr "For traffic towards the router itself, base chain is **input filter**: ``set firewall [ipv4 | ipv6] input filter ...``"
 
-#: ../../configuration/firewall/general.rst:69
+#: ../../configuration/firewall/general.rst:62
 msgid "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``"
 msgstr "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``"
 
@@ -6375,7 +6416,7 @@ msgstr "Given the following example we have one VyOS router acting as OpenVPN se
 msgid "Gloabal"
 msgstr "Gloabal"
 
-#: ../../configuration/firewall/general.rst:91
+#: ../../configuration/firewall/general.rst:84
 msgid "Global Options"
 msgstr "Global Options"
 
@@ -6400,7 +6441,7 @@ msgstr "Graceful Restart"
 msgid "Gratuitous ARP"
 msgstr "Gratuitous ARP"
 
-#: ../../configuration/firewall/general.rst:191
+#: ../../configuration/firewall/general.rst:184
 #: ../../configuration/firewall/general-legacy.rst:153
 msgid "Groups"
 msgstr "Groups"
@@ -6682,6 +6723,10 @@ msgstr "IPSec IKE and ESP"
 msgid "IPSec IKE and ESP Groups;"
 msgstr "IPSec IKE and ESP Groups;"
 
+#: ../../configuration/vpn/remoteaccess_ipsec.rst:4
+msgid "IPSec IKEv2 Remote Access VPN"
+msgstr "IPSec IKEv2 Remote Access VPN"
+
 #: ../../configuration/vpn/site2site_ipsec.rst:281
 msgid "IPSec IKEv2 site2site VPN"
 msgstr "IPSec IKEv2 site2site VPN"
@@ -7003,7 +7048,7 @@ msgstr "If a response is heard, the lease is abandoned, and the server does not
 msgid "If a route has an ORIGINATOR_ID attribute because it has been reflected, that ORIGINATOR_ID will be used. Otherwise, the router-ID of the peer the route was received from will be used."
 msgstr "If a route has an ORIGINATOR_ID attribute because it has been reflected, that ORIGINATOR_ID will be used. Otherwise, the router-ID of the peer the route was received from will be used."
 
-#: ../../configuration/firewall/general.rst:336
+#: ../../configuration/firewall/general.rst:329
 msgid "If a rule is defined, then an action must be defined for it. This tells the firewall what to do if all criteria matchers defined for such rule do match."
 msgstr "If a rule is defined, then an action must be defined for it. This tells the firewall what to do if all criteria matchers defined for such rule do match."
 
@@ -7349,7 +7394,7 @@ msgstr "If this parameter is not set or 0, an on-demand link will not be taken d
 msgid "If unset, incoming connections to the RADIUS server will use the nearest interface address pointing towards the server - making it error prone on e.g. OSPF networks when a link fails and a backup route is taken."
 msgstr "If unset, incoming connections to the RADIUS server will use the nearest interface address pointing towards the server - making it error prone on e.g. OSPF networks when a link fails and a backup route is taken."
 
-#: ../../configuration/system/login.rst:323
+#: ../../configuration/system/login.rst:339
 msgid "If unset, incoming connections to the TACACS server will use the nearest interface address pointing towards the server - making it error prone on e.g. OSPF networks when a link fails and a backup route is taken."
 msgstr "If unset, incoming connections to the TACACS server will use the nearest interface address pointing towards the server - making it error prone on e.g. OSPF networks when a link fails and a backup route is taken."
 
@@ -7448,7 +7493,7 @@ msgstr "If you want to change the maximum number of flows, which are tracking si
 msgid "If you want to disable a rule but let it in the configuration."
 msgstr "If you want to disable a rule but let it in the configuration."
 
-#: ../../configuration/system/login.rst:278
+#: ../../configuration/system/login.rst:294
 msgid "If you want to have admin users to authenticate via RADIUS it is essential to sent the ``Cisco-AV-Pair shell:priv-lvl=15`` attribute. Without the attribute you will only get regular, non privilegued, system users."
 msgstr "If you want to have admin users to authenticate via RADIUS it is essential to sent the ``Cisco-AV-Pair shell:priv-lvl=15`` attribute. Without the attribute you will only get regular, non privilegued, system users."
 
@@ -7555,7 +7600,7 @@ msgstr "In a nutshell, the current implementation provides the following feature
 msgid "In addition, you can specify many other parameters to get BGP information:"
 msgstr "In addition, you can specify many other parameters to get BGP information:"
 
-#: ../../configuration/system/login.rst:285
+#: ../../configuration/system/login.rst:301
 msgid "In addition to :abbr:`RADIUS (Remote Authentication Dial-In User Service)`, :abbr:`TACACS (Terminal Access Controller Access Control System)` can also be found in large deployments."
 msgstr "In addition to :abbr:`RADIUS (Remote Authentication Dial-In User Service)`, :abbr:`TACACS (Terminal Access Controller Access Control System)` can also be found in large deployments."
 
@@ -7583,7 +7628,7 @@ msgstr "In addition you can also disable the whole service without the need to r
 msgid "In addition you will specifiy the IP address or FQDN for the client where it will connect to. The address parameter can be used up to two times and is used to assign the clients specific IPv4 (/32) or IPv6 (/128) address."
 msgstr "In addition you will specifiy the IP address or FQDN for the client where it will connect to. The address parameter can be used up to two times and is used to assign the clients specific IPv4 (/32) or IPv6 (/128) address."
 
-#: ../../configuration/firewall/general.rst:201
+#: ../../configuration/firewall/general.rst:194
 #: ../../configuration/firewall/general-legacy.rst:170
 msgid "In an **address group** a single IP address or IP address ranges are defined."
 msgstr "In an **address group** a single IP address or IP address ranges are defined."
@@ -7747,7 +7792,7 @@ msgstr "In the example above, the first 499 sessions connect without delay. PADO
 msgid "In the example used for the Quick Start configuration above, we demonstrate the following configuration:"
 msgstr "In the example used for the Quick Start configuration above, we demonstrate the following configuration:"
 
-#: ../../configuration/system/login.rst:369
+#: ../../configuration/system/login.rst:397
 msgid "In the following example, both `User1` and `User2` will be able to SSH into VyOS as user ``vyos`` using their very own keys. `User1` is restricted to only be able to connect from a single IP address. In addition if password base login is wanted for the ``vyos`` user a 2FA/MFA keycode is required in addition to the password."
 msgstr "In the following example, both `User1` and `User2` will be able to SSH into VyOS as user ``vyos`` using their very own keys. `User1` is restricted to only be able to connect from a single IP address. In addition if password base login is wanted for the ``vyos`` user a 2FA/MFA keycode is required in addition to the password."
 
@@ -7795,6 +7840,10 @@ msgstr "In this example, we will be using the example Quick Start configuration
 msgid "In this example all traffic destined to ports \"80, 2222, 8888\" protocol TCP marks to fwmark \"111\" and balanced between 2 real servers. Port \"0\" is required if multiple ports are used."
 msgstr "In this example all traffic destined to ports \"80, 2222, 8888\" protocol TCP marks to fwmark \"111\" and balanced between 2 real servers. Port \"0\" is required if multiple ports are used."
 
+#: ../../configuration/firewall/index.rst:36
+msgid "In this example image, a simplifed traffic flow is shown to help provide context to the terms of `forward`, `input`, and `output` for the new firewall CLI format."
+msgstr "In this example image, a simplifed traffic flow is shown to help provide context to the terms of `forward`, `input`, and `output` for the new firewall CLI format."
+
 #: ../../configuration/interfaces/openvpn.rst:334
 msgid "In this example we will use the most complicated case: a setup where each client is a router that has its own subnet (think HQ and branch offices), since simpler setups are subsets of it."
 msgstr "In this example we will use the most complicated case: a setup where each client is a router that has its own subnet (think HQ and branch offices), since simpler setups are subsets of it."
@@ -7958,7 +8007,7 @@ msgstr "Interconnect the global VRF with vrf \"red\" using the veth10 <-> veth 1
 msgid "Interface Configuration"
 msgstr "Interface Configuration"
 
-#: ../../configuration/firewall/general.rst:246
+#: ../../configuration/firewall/general.rst:239
 msgid "Interface Groups"
 msgstr "Interface Groups"
 
@@ -8020,6 +8069,10 @@ msgstr "Interfaces whose DHCP client nameservers to forward requests to."
 msgid "Internally, in flow-accounting processes exist a buffer for data exchanging between core process and plugins (each export target is a separated plugin). If you have high traffic levels or noted some problems with missed records or stopping exporting, you may try to increase a default buffer size (10 MiB) with the next command:"
 msgstr "Internally, in flow-accounting processes exist a buffer for data exchanging between core process and plugins (each export target is a separated plugin). If you have high traffic levels or noted some problems with missed records or stopping exporting, you may try to increase a default buffer size (10 MiB) with the next command:"
 
+#: ../../configuration/vpn/remoteaccess_ipsec.rst:6
+msgid "Internet Key Exchange version 2 (IKEv2) is a tunneling protocol, based on IPsec, that establishes a secure VPN communication between VPN devices,  and defines negotiation and authentication processes for IPsec security associations (SAs). It is often known as IKEv2/IPSec or IPSec IKEv2 remote-access — or road-warriors as others call it."
+msgstr "Internet Key Exchange version 2 (IKEv2) is a tunneling protocol, based on IPsec, that establishes a secure VPN communication between VPN devices,  and defines negotiation and authentication processes for IPsec security associations (SAs). It is often known as IKEv2/IPSec or IPSec IKEv2 remote-access — or road-warriors as others call it."
+
 #: ../../configuration/trafficpolicy/index.rst:791
 msgid "Internetwork Control"
 msgstr "Internetwork Control"
@@ -8185,6 +8238,10 @@ msgstr "Key Parameters:"
 msgid "Key Points:"
 msgstr "Key Points:"
 
+#: ../../configuration/vpn/remoteaccess_ipsec.rst:12
+msgid "Key exchange and payload encryption is done using IKE and ESP proposals as known from IKEv1 but the connections are faster to establish, more reliable, and also support roaming from IP to IP (called MOBIKE which makes sure your connection does not drop when changing networks from e.g. WIFI to LTE and back). Authentication can be achieved with X.509 certificates."
+msgstr "Key exchange and payload encryption is done using IKE and ESP proposals as known from IKEv1 but the connections are faster to establish, more reliable, and also support roaming from IP to IP (called MOBIKE which makes sure your connection does not drop when changing networks from e.g. WIFI to LTE and back). Authentication can be achieved with X.509 certificates."
+
 #: ../../configuration/pki/index.rst:167
 msgid "Key usage (CLI)"
 msgstr "Key usage (CLI)"
@@ -8283,6 +8340,10 @@ msgstr "Lease time will be left at the default value which is 24 hours"
 msgid "Lease timeout in seconds (default: 86400)"
 msgstr "Lease timeout in seconds (default: 86400)"
 
+#: ../../configuration/firewall/index.rst:47
+msgid "Legacy Firewall"
+msgstr "Legacy Firewall"
+
 #: ../../configuration/interfaces/vxlan.rst:112
 msgid "Let's assume PC4 on Leaf2 wants to ping PC5 on Leaf3. Instead of setting Leaf3 as our remote end manually, Leaf2 encapsulates the packet into a UDP-packet and sends it to its designated multicast-address via Spine1. When Spine1 receives this packet it forwards it to all other leaves who has joined the same multicast-group, in this case Leaf3. When Leaf3 receives the packet it forwards it, while at the same time learning that PC4 is reachable behind Leaf2, because the encapsulated packet had Leaf2's IP address set as source IP."
 msgstr "Let's assume PC4 on Leaf2 wants to ping PC5 on Leaf3. Instead of setting Leaf3 as our remote end manually, Leaf2 encapsulates the packet into a UDP-packet and sends it to its designated multicast-address via Spine1. When Spine1 receives this packet it forwards it to all other leaves who has joined the same multicast-group, in this case Leaf3. When Leaf3 receives the packet it forwards it, while at the same time learning that PC4 is reachable behind Leaf2, because the encapsulated packet had Leaf2's IP address set as source IP."
@@ -8347,7 +8408,7 @@ msgstr "Limiter"
 msgid "Limiter is one of those policies that uses classes_ (Ingress qdisc is actually a classless policy but filters do work in it)."
 msgstr "Limiter is one of those policies that uses classes_ (Ingress qdisc is actually a classless policy but filters do work in it)."
 
-#: ../../configuration/system/login.rst:351
+#: ../../configuration/system/login.rst:379
 msgid "Limits"
 msgstr "Limits"
 
@@ -8423,7 +8484,7 @@ msgstr "Load Balance"
 msgid "Load Balancing"
 msgstr "Load Balancing"
 
-#: ../../configuration/system/login.rst:392
+#: ../../configuration/system/login.rst:420
 msgid "Load the container image in op-mode."
 msgstr "Load the container image in op-mode."
 
@@ -8528,7 +8589,7 @@ msgstr "Log the connection tracking events per protocol."
 msgid "Logging"
 msgstr "Logging"
 
-#: ../../configuration/firewall/general.rst:419
+#: ../../configuration/firewall/general.rst:412
 msgid "Logging can be enable for every single firewall rule. If enabled, other log options can be defined."
 msgstr "Logging can be enable for every single firewall rule. If enabled, other log options can be defined."
 
@@ -8540,11 +8601,11 @@ msgstr "Logging to a remote host leaves the local logging configuration intact,
 msgid "Login/User Management"
 msgstr "Login/User Management"
 
-#: ../../configuration/system/login.rst:333
+#: ../../configuration/system/login.rst:361
 msgid "Login Banner"
 msgstr "Login Banner"
 
-#: ../../configuration/system/login.rst:353
+#: ../../configuration/system/login.rst:381
 msgid "Login limits"
 msgstr "Login limits"
 
@@ -8571,7 +8632,7 @@ msgstr "MAC/PHY information"
 msgid "MACVLAN - Pseudo Ethernet"
 msgstr "MACVLAN - Pseudo Ethernet"
 
-#: ../../configuration/firewall/general.rst:289
+#: ../../configuration/firewall/general.rst:282
 #: ../../configuration/firewall/general-legacy.rst:240
 msgid "MAC Groups"
 msgstr "MAC Groups"
@@ -8669,7 +8730,7 @@ msgstr "MTU"
 msgid "Mail system"
 msgstr "Mail system"
 
-#: ../../configuration/firewall/general.rst:27
+#: ../../configuration/firewall/general.rst:20
 msgid "Main structure is shown next:"
 msgstr "Main structure is shown next:"
 
@@ -8721,7 +8782,7 @@ msgstr "Match BGP large communities."
 msgid "Match IP addresses based on its geolocation. More info: `geoip matching <https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_."
 msgstr "Match IP addresses based on its geolocation. More info: `geoip matching <https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_."
 
-#: ../../configuration/firewall/general.rst:717
+#: ../../configuration/firewall/general.rst:710
 msgid "Match IP addresses based on its geolocation. More info: `geoip matching <https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_. Use inverse-match to match anything except the given country-codes."
 msgstr "Match IP addresses based on its geolocation. More info: `geoip matching <https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_. Use inverse-match to match anything except the given country-codes."
 
@@ -8733,17 +8794,17 @@ msgstr "Match RPKI validation result."
 msgid "Match a protocol criteria. A protocol number or a name which is defined in: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negates the selected protocol."
 msgstr "Match a protocol criteria. A protocol number or a name which is defined in: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negates the selected protocol."
 
-#: ../../configuration/firewall/general.rst:1098
+#: ../../configuration/firewall/general.rst:1091
 #: ../../configuration/firewall/general-legacy.rst:671
 msgid "Match a protocol criteria. A protocol number or a name which is here defined: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negate the selected protocol."
 msgstr "Match a protocol criteria. A protocol number or a name which is here defined: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negate the selected protocol."
 
-#: ../../configuration/firewall/general.rst:1165
+#: ../../configuration/firewall/general.rst:1158
 #: ../../configuration/firewall/general-legacy.rst:709
 msgid "Match against the state of a packet."
 msgstr "Match against the state of a packet."
 
-#: ../../configuration/firewall/general.rst:931
+#: ../../configuration/firewall/general.rst:924
 #: ../../configuration/firewall/general-legacy.rst:590
 msgid "Match based on dscp value."
 msgstr "Match based on dscp value."
@@ -8752,18 +8813,18 @@ msgstr "Match based on dscp value."
 msgid "Match based on dscp value criteria. Multiple values from 0 to 63 and ranges are supported."
 msgstr "Match based on dscp value criteria. Multiple values from 0 to 63 and ranges are supported."
 
-#: ../../configuration/firewall/general.rst:944
+#: ../../configuration/firewall/general.rst:937
 #: ../../configuration/firewall/general-legacy.rst:597
 msgid "Match based on fragment criteria."
 msgstr "Match based on fragment criteria."
 
-#: ../../configuration/firewall/general.rst:963
+#: ../../configuration/firewall/general.rst:956
 #: ../../configuration/firewall/general-legacy.rst:604
 #: ../../configuration/policy/route.rst:131
 msgid "Match based on icmp|icmpv6 code and type."
 msgstr "Match based on icmp|icmpv6 code and type."
 
-#: ../../configuration/firewall/general.rst:982
+#: ../../configuration/firewall/general.rst:975
 #: ../../configuration/firewall/general-legacy.rst:610
 msgid "Match based on icmp|icmpv6 type-name criteria. Use tab for information about what **type-name** criteria are supported."
 msgstr "Match based on icmp|icmpv6 type-name criteria. Use tab for information about what **type-name** criteria are supported."
@@ -8776,57 +8837,57 @@ msgstr "Match based on icmp|icmpv6 type-name criteria. Use tab for information a
 msgid "Match based on inbound/outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``"
 msgstr "Match based on inbound/outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``"
 
-#: ../../configuration/firewall/general.rst:994
+#: ../../configuration/firewall/general.rst:987
 msgid "Match based on inbound interface. Wilcard ``*`` can be used. For example: ``eth2*``"
 msgstr "Match based on inbound interface. Wilcard ``*`` can be used. For example: ``eth2*``"
 
-#: ../../configuration/firewall/general.rst:1020
+#: ../../configuration/firewall/general.rst:1013
 #: ../../configuration/firewall/general-legacy.rst:630
 msgid "Match based on ipsec criteria."
 msgstr "Match based on ipsec criteria."
 
-#: ../../configuration/firewall/general.rst:1006
+#: ../../configuration/firewall/general.rst:999
 msgid "Match based on outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``"
 msgstr "Match based on outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``"
 
-#: ../../configuration/firewall/general.rst:1071
+#: ../../configuration/firewall/general.rst:1064
 #: ../../configuration/firewall/general-legacy.rst:656
 #: ../../configuration/policy/route.rst:176
 msgid "Match based on packet length criteria. Multiple values from 1 to 65535 and ranges are supported."
 msgstr "Match based on packet length criteria. Multiple values from 1 to 65535 and ranges are supported."
 
-#: ../../configuration/firewall/general.rst:1085
+#: ../../configuration/firewall/general.rst:1078
 #: ../../configuration/firewall/general-legacy.rst:664
 #: ../../configuration/policy/route.rst:184
 msgid "Match based on packet type criteria."
 msgstr "Match based on packet type criteria."
 
-#: ../../configuration/firewall/general.rst:1046
+#: ../../configuration/firewall/general.rst:1039
 #: ../../configuration/firewall/general-legacy.rst:644
 msgid "Match based on the maximum average rate, specified as **integer/unit**. For example **5/minutes**"
 msgstr "Match based on the maximum average rate, specified as **integer/unit**. For example **5/minutes**"
 
-#: ../../configuration/firewall/general.rst:1033
+#: ../../configuration/firewall/general.rst:1026
 #: ../../configuration/firewall/general-legacy.rst:637
 msgid "Match based on the maximum number of packets to allow in excess of rate."
 msgstr "Match based on the maximum number of packets to allow in excess of rate."
 
-#: ../../configuration/firewall/general.rst:1131
+#: ../../configuration/firewall/general.rst:1124
 #: ../../configuration/firewall/general-legacy.rst:689
 msgid "Match bases on recently seen sources."
 msgstr "Match bases on recently seen sources."
 
-#: ../../configuration/firewall/general.rst:569
+#: ../../configuration/firewall/general.rst:562
 #: ../../configuration/firewall/general-legacy.rst:394
 msgid "Match criteria based on connection mark."
 msgstr "Match criteria based on connection mark."
 
-#: ../../configuration/firewall/general.rst:556
+#: ../../configuration/firewall/general.rst:549
 #: ../../configuration/firewall/general-legacy.rst:387
 msgid "Match criteria based on nat connection status."
 msgstr "Match criteria based on nat connection status."
 
-#: ../../configuration/firewall/general.rst:593
+#: ../../configuration/firewall/general.rst:586
 msgid "Match criteria based on source and/or destination address. This is similar to the network groups part, but here you are able to negate the matching addresses."
 msgstr "Match criteria based on source and/or destination address. This is similar to the network groups part, but here you are able to negate the matching addresses."
 
@@ -8834,7 +8895,7 @@ msgstr "Match criteria based on source and/or destination address. This is simil
 msgid "Match domain name"
 msgstr "Match domain name"
 
-#: ../../configuration/firewall/general.rst:1241
+#: ../../configuration/firewall/general.rst:1234
 #: ../../configuration/firewall/general-legacy.rst:732
 #: ../../configuration/policy/route.rst:234
 msgid "Match hop-limit parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'."
@@ -8848,18 +8909,18 @@ msgstr "Match local preference."
 msgid "Match route metric."
 msgstr "Match route metric."
 
-#: ../../configuration/firewall/general.rst:1229
+#: ../../configuration/firewall/general.rst:1222
 #: ../../configuration/firewall/general-legacy.rst:726
 #: ../../configuration/policy/route.rst:229
 msgid "Match time to live parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'."
 msgstr "Match time to live parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'."
 
-#: ../../configuration/firewall/general.rst:1266
+#: ../../configuration/firewall/general.rst:1259
 #: ../../configuration/firewall/general-legacy.rst:742
 msgid "Match when 'count' amount of connections are seen within 'time'. These matching criteria can be used to block brute-force attempts."
 msgstr "Match when 'count' amount of connections are seen within 'time'. These matching criteria can be used to block brute-force attempts."
 
-#: ../../configuration/firewall/general.rst:541
+#: ../../configuration/firewall/general.rst:534
 #: ../../configuration/firewall/general-legacy.rst:378
 #: ../../configuration/policy/route.rst:38
 msgid "Matching criteria"
@@ -8937,6 +8998,10 @@ msgstr "Monitoring functionality with ``telegraf`` and ``InfluxDB 2`` is provide
 msgid "More details about the IPsec and VTI issue and option disable-route-autoinstall https://blog.vyos.io/vyos-1-dot-2-0-development-news-in-july"
 msgstr "More details about the IPsec and VTI issue and option disable-route-autoinstall https://blog.vyos.io/vyos-1-dot-2-0-development-news-in-july"
 
+#: ../../configuration/vpn/remoteaccess_ipsec.rst:139
+msgid "Most operating systems include native client support for IPsec IKEv2 VPN connections, and others typically have an app or add-on package which adds the capability. This section covers IPsec IKEv2 client configuration for Windows 10."
+msgstr "Most operating systems include native client support for IPsec IKEv2 VPN connections, and others typically have an app or add-on package which adds the capability. This section covers IPsec IKEv2 client configuration for Windows 10."
+
 #: ../../configuration/container/index.rst:85
 msgid "Mount a volume into the container"
 msgstr "Mount a volume into the container"
@@ -9028,7 +9093,7 @@ msgid "Multiple networks/client IP addresses can be configured."
 msgstr "Multiple networks/client IP addresses can be configured."
 
 #: ../../configuration/system/login.rst:248
-#: ../../configuration/system/login.rst:301
+#: ../../configuration/system/login.rst:317
 msgid "Multiple servers can be specified."
 msgstr "Multiple servers can be specified."
 
@@ -9036,7 +9101,7 @@ msgstr "Multiple servers can be specified."
 msgid "Multiple services can be used per interface. Just specify as many services per interface as you like!"
 msgstr "Multiple services can be used per interface. Just specify as many services per interface as you like!"
 
-#: ../../configuration/firewall/general.rst:777
+#: ../../configuration/firewall/general.rst:770
 #: ../../configuration/firewall/general-legacy.rst:515
 msgid "Multiple source ports can be specified as a comma-separated list. The whole list can also be \"negated\" using ``!``. For example:"
 msgstr "Multiple source ports can be specified as a comma-separated list. The whole list can also be \"negated\" using ``!``. For example:"
@@ -9183,6 +9248,10 @@ msgstr "NetFlow is usually enabled on a per-interface basis to limit load on the
 msgid "NetFlow v5 example:"
 msgstr "NetFlow v5 example:"
 
+#: ../../configuration/firewall/index.rst:16
+msgid "Netfilter based"
+msgstr "Netfilter based"
+
 #: ../../configuration/policy/prefix-list.rst:43
 #: ../../configuration/policy/prefix-list.rst:76
 msgid "Netmask greater than length."
@@ -9205,7 +9274,7 @@ msgstr "Network Control"
 msgid "Network Emulator"
 msgstr "Network Emulator"
 
-#: ../../configuration/firewall/general.rst:222
+#: ../../configuration/firewall/general.rst:215
 #: ../../configuration/firewall/general-legacy.rst:191
 msgid "Network Groups"
 msgstr "Network Groups"
@@ -9505,6 +9574,10 @@ msgstr "Once created in the system, Pseudo-Ethernet interfaces can be referenced
 msgid "Once flow accounting is configured on an interfaces it provides the ability to display captured network traffic information for all configured interfaces."
 msgstr "Once flow accounting is configured on an interfaces it provides the ability to display captured network traffic information for all configured interfaces."
 
+#: ../../configuration/vpn/remoteaccess_ipsec.rst:73
+msgid "Once the command is completed, it will add the certificate to the configuration session, to the pki subtree. You can then review the proposed changes and commit them."
+msgstr "Once the command is completed, it will add the certificate to the configuration session, to the pki subtree. You can then review the proposed changes and commit them."
+
 #: ../../configuration/service/pppoe-server.rst:63
 msgid "Once the local tunnel endpoint ``set service pppoe-server gateway-address '10.1.1.2'`` has been defined, the client IP pool can be either defined as a range or as subnet using CIDR notation. If the CIDR notation is used, multiple subnets can be setup which are used sequentially."
 msgstr "Once the local tunnel endpoint ``set service pppoe-server gateway-address '10.1.1.2'`` has been defined, the client IP pool can be either defined as a range or as subnet using CIDR notation. If the CIDR notation is used, multiple subnets can be setup which are used sequentially."
@@ -9562,7 +9635,7 @@ msgstr "Only 802.1Q-tagged packets are accepted on Ethernet vifs."
 msgid "Only VRRP is supported. Required option."
 msgstr "Only VRRP is supported. Required option."
 
-#: ../../configuration/firewall/general.rst:738
+#: ../../configuration/firewall/general.rst:731
 #: ../../configuration/firewall/general-legacy.rst:490
 msgid "Only in the source criteria, you can specify a mac-address."
 msgstr "Only in the source criteria, you can specify a mac-address."
@@ -9696,7 +9769,7 @@ msgstr "Operating Modes"
 msgid "Operation"
 msgstr "Operation"
 
-#: ../../configuration/firewall/general.rst:1314
+#: ../../configuration/firewall/general.rst:1307
 #: ../../configuration/firewall/general-legacy.rst:778
 msgid "Operation-mode Firewall"
 msgstr "Operation-mode Firewall"
@@ -9872,7 +9945,7 @@ msgstr "Overview"
 msgid "Overview and basic concepts"
 msgstr "Overview and basic concepts"
 
-#: ../../configuration/firewall/general.rst:1468
+#: ../../configuration/firewall/general.rst:1461
 #: ../../configuration/firewall/general-legacy.rst:908
 msgid "Overview of defined groups. You see the type, the members, and where the group is used."
 msgstr "Overview of defined groups. You see the type, the members, and where the group is used."
@@ -10133,7 +10206,7 @@ msgstr "Policy for checking targets"
 msgid "Policy to track previously established connections."
 msgstr "Policy to track previously established connections."
 
-#: ../../configuration/firewall/general.rst:264
+#: ../../configuration/firewall/general.rst:257
 #: ../../configuration/firewall/general-legacy.rst:215
 msgid "Port Groups"
 msgstr "Port Groups"
@@ -10354,7 +10427,7 @@ msgstr "Protocols are: tcp, sctp, dccp, udp, icmp and ipv6-icmp."
 msgid "Provide TFTP server listening on both IPv4 and IPv6 addresses ``192.0.2.1`` and ``2001:db8::1`` serving the content from ``/config/tftpboot``. Uploading via TFTP to this server is disabled."
 msgstr "Provide TFTP server listening on both IPv4 and IPv6 addresses ``192.0.2.1`` and ``2001:db8::1`` serving the content from ``/config/tftpboot``. Uploading via TFTP to this server is disabled."
 
-#: ../../configuration/firewall/general.rst:219
+#: ../../configuration/firewall/general.rst:212
 #: ../../configuration/firewall/general-legacy.rst:188
 msgid "Provide a IPv4 or IPv6 address group description"
 msgstr "Provide a IPv4 or IPv6 address group description"
@@ -10363,21 +10436,21 @@ msgstr "Provide a IPv4 or IPv6 address group description"
 msgid "Provide a IPv4 or IPv6 network group description."
 msgstr "Provide a IPv4 or IPv6 network group description."
 
-#: ../../configuration/firewall/general.rst:522
+#: ../../configuration/firewall/general.rst:515
 #: ../../configuration/firewall/general-legacy.rst:334
 #: ../../configuration/policy/route.rst:30
 msgid "Provide a description for each rule."
 msgstr "Provide a description for each rule."
 
-#: ../../configuration/firewall/general.rst:321
+#: ../../configuration/firewall/general.rst:314
 msgid "Provide a domain group description."
 msgstr "Provide a domain group description."
 
-#: ../../configuration/firewall/general.rst:304
+#: ../../configuration/firewall/general.rst:297
 msgid "Provide a mac group description."
 msgstr "Provide a mac group description."
 
-#: ../../configuration/firewall/general.rst:286
+#: ../../configuration/firewall/general.rst:279
 #: ../../configuration/firewall/general-legacy.rst:237
 msgid "Provide a port group description."
 msgstr "Provide a port group description."
@@ -10387,15 +10460,15 @@ msgstr "Provide a port group description."
 msgid "Provide a rule-set description."
 msgstr "Provide a rule-set description."
 
-#: ../../configuration/firewall/general.rst:510
+#: ../../configuration/firewall/general.rst:503
 msgid "Provide a rule-set description to a custom firewall chain."
 msgstr "Provide a rule-set description to a custom firewall chain."
 
-#: ../../configuration/firewall/general.rst:243
+#: ../../configuration/firewall/general.rst:236
 msgid "Provide an IPv4 or IPv6 network group description."
 msgstr "Provide an IPv4 or IPv6 network group description."
 
-#: ../../configuration/firewall/general.rst:261
+#: ../../configuration/firewall/general.rst:254
 msgid "Provide an interface group description"
 msgstr "Provide an interface group description"
 
@@ -10816,7 +10889,7 @@ msgstr "Requirements"
 msgid "Requirements:"
 msgstr "Requirements:"
 
-#: ../../configuration/firewall/general.rst:1286
+#: ../../configuration/firewall/general.rst:1279
 msgid "Requirements to enable synproxy:"
 msgstr "Requirements to enable synproxy:"
 
@@ -11024,7 +11097,7 @@ msgstr "Routing tables that will be used in this example are:"
 msgid "Rule-Sets"
 msgstr "Rule-Sets"
 
-#: ../../configuration/firewall/general.rst:1317
+#: ../../configuration/firewall/general.rst:1310
 #: ../../configuration/firewall/general-legacy.rst:781
 msgid "Rule-set overview"
 msgstr "Rule-set overview"
@@ -11045,7 +11118,7 @@ msgstr "Rule 20 matches requests with URL paths ending in ``/mail`` or exact pat
 msgid "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``"
 msgstr "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``"
 
-#: ../../configuration/firewall/general.rst:526
+#: ../../configuration/firewall/general.rst:519
 msgid "Rule Status"
 msgstr "Rule Status"
 
@@ -11400,7 +11473,7 @@ msgstr "Set SNAT rule 30 to only NAT packets arriving from the 203.0.113.0/24 ne
 msgid "Set SSL certeficate <name> for service <name>"
 msgstr "Set SSL certeficate <name> for service <name>"
 
-#: ../../configuration/firewall/general.rst:1278
+#: ../../configuration/firewall/general.rst:1271
 msgid "Set TCP-MSS (maximum segment size) for the connection"
 msgstr "Set TCP-MSS (maximum segment size) for the connection"
 
@@ -11448,7 +11521,7 @@ msgstr "Set a destination and/or source port. Accepted input:"
 msgid "Set a human readable, descriptive alias for this connection. Alias is used by e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools."
 msgstr "Set a human readable, descriptive alias for this connection. Alias is used by e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools."
 
-#: ../../configuration/system/login.rst:357
+#: ../../configuration/system/login.rst:385
 msgid "Set a limit on the maximum number of concurrent logged-in users on the system."
 msgstr "Set a limit on the maximum number of concurrent logged-in users on the system."
 
@@ -11749,7 +11822,7 @@ msgstr "Set the IP address of the local interface to be used for the tunnel."
 msgid "Set the IP address of the remote peer. It may be specified as an IPv4 address or an IPv6 address."
 msgstr "Set the IP address of the remote peer. It may be specified as an IPv4 address or an IPv6 address."
 
-#: ../../configuration/firewall/general.rst:169
+#: ../../configuration/firewall/general.rst:162
 #: ../../configuration/firewall/general-legacy.rst:112
 msgid "Set the IPv4 source validation mode. The following system parameter will be altered:"
 msgstr "Set the IPv4 source validation mode. The following system parameter will be altered:"
@@ -11951,7 +12024,7 @@ msgstr "Set the timeout in secounds for a protocol or state in a custom rule."
 msgid "Set the tunnel id, which is a 32-bit integer value. Uniquely identifies the tunnel into which the session will be created."
 msgstr "Set the tunnel id, which is a 32-bit integer value. Uniquely identifies the tunnel into which the session will be created."
 
-#: ../../configuration/firewall/general.rst:1282
+#: ../../configuration/firewall/general.rst:1275
 msgid "Set the window scale factor for TCP window scaling"
 msgstr "Set the window scale factor for TCP window scaling"
 
@@ -11987,6 +12060,10 @@ msgstr "Setting name"
 msgid "Setting this up on AWS will require a \"Custom Protocol Rule\" for protocol number \"47\" (GRE) Allow Rule in TWO places. Firstly on the VPC Network ACL, and secondly on the security group network ACL attached to the EC2 instance. This has been tested as working for the official AMI image on the AWS Marketplace. (Locate the correct VPC and security group by navigating through the details pane below your EC2 instance in the AWS console)."
 msgstr "Setting this up on AWS will require a \"Custom Protocol Rule\" for protocol number \"47\" (GRE) Allow Rule in TWO places. Firstly on the VPC Network ACL, and secondly on the security group network ACL attached to the EC2 instance. This has been tested as working for the official AMI image on the AWS Marketplace. (Locate the correct VPC and security group by navigating through the details pane below your EC2 instance in the AWS console)."
 
+#: ../../configuration/vpn/remoteaccess_ipsec.rst:78
+msgid "Setting up IPSec:"
+msgstr "Setting up IPSec:"
+
 #: ../../configuration/interfaces/openvpn.rst:132
 msgid "Setting up OpenVPN"
 msgstr "Setting up OpenVPN"
@@ -11999,6 +12076,14 @@ msgstr "Setting up a full-blown PKI with a CA certificate would arguably defeat
 msgid "Setting up certificates"
 msgstr "Setting up certificates"
 
+#: ../../configuration/vpn/remoteaccess_ipsec.rst:19
+msgid "Setting up certificates:"
+msgstr "Setting up certificates:"
+
+#: ../../configuration/vpn/remoteaccess_ipsec.rst:113
+msgid "Setting up tunnel:"
+msgstr "Setting up tunnel:"
+
 #: ../../configuration/service/dhcp-server.rst:432
 msgid "Setup DHCP failover for network 192.0.2.0/24"
 msgstr "Setup DHCP failover for network 192.0.2.0/24"
@@ -12011,7 +12096,7 @@ msgstr "Setup encrypted password for given username. This is useful for transfer
 msgid "Setup the `<timeout>` in seconds when querying the RADIUS server."
 msgstr "Setup the `<timeout>` in seconds when querying the RADIUS server."
 
-#: ../../configuration/system/login.rst:315
+#: ../../configuration/system/login.rst:331
 msgid "Setup the `<timeout>` in seconds when querying the TACACS server."
 msgstr "Setup the `<timeout>` in seconds when querying the TACACS server."
 
@@ -12068,7 +12153,7 @@ msgstr "Show DHCP server daemon log file"
 msgid "Show DHCPv6 server daemon log file"
 msgstr "Show DHCPv6 server daemon log file"
 
-#: ../../configuration/firewall/general.rst:1489
+#: ../../configuration/firewall/general.rst:1482
 #: ../../configuration/firewall/general-legacy.rst:965
 msgid "Show Firewall log"
 msgstr "Show Firewall log"
@@ -12316,7 +12401,7 @@ msgstr "Show the list of all active containers."
 msgid "Show the local container images."
 msgstr "Show the local container images."
 
-#: ../../configuration/firewall/general.rst:1493
+#: ../../configuration/firewall/general.rst:1486
 #: ../../configuration/firewall/general-legacy.rst:969
 msgid "Show the logs of a specific Rule-Set."
 msgstr "Show the logs of a specific Rule-Set."
@@ -12463,7 +12548,7 @@ msgstr "Some RADIUS_ severs use an access control list which allows or denies qu
 msgid "Some application service providers (ASPs) operate a VPN gateway to provide access to their internal resources, and require that a connecting organisation translate all traffic to the service provider network to a source address provided by the ASP."
 msgstr "Some application service providers (ASPs) operate a VPN gateway to provide access to their internal resources, and require that a connecting organisation translate all traffic to the service provider network to a source address provided by the ASP."
 
-#: ../../configuration/firewall/general.rst:93
+#: ../../configuration/firewall/general.rst:86
 #: ../../configuration/firewall/general-legacy.rst:38
 msgid "Some firewall settings are global and have an affect on the whole system."
 msgstr "Some firewall settings are global and have an affect on the whole system."
@@ -12532,7 +12617,7 @@ msgstr "Source Prefix"
 msgid "Source all connections to the RADIUS servers from given VRF `<name>`."
 msgstr "Source all connections to the RADIUS servers from given VRF `<name>`."
 
-#: ../../configuration/system/login.rst:329
+#: ../../configuration/system/login.rst:345
 msgid "Source all connections to the TACACS servers from given VRF `<name>`."
 msgstr "Source all connections to the TACACS servers from given VRF `<name>`."
 
@@ -12685,7 +12770,7 @@ msgstr "Specifies which RADIUS server attribute contains the rate limit informat
 msgid "Specify IPv4/IPv6 listen address of SSH server. Multiple addresses can be defined."
 msgstr "Specify IPv4/IPv6 listen address of SSH server. Multiple addresses can be defined."
 
-#: ../../configuration/firewall/general.rst:670
+#: ../../configuration/firewall/general.rst:663
 #: ../../configuration/firewall/general-legacy.rst:455
 msgid "Specify a Fully Qualified Domain Name as source/destination matcher. Ensure router is able to resolve such dns query."
 msgstr "Specify a Fully Qualified Domain Name as source/destination matcher. Ensure router is able to resolve such dns query."
@@ -12736,7 +12821,7 @@ msgstr "Specify static route into the routing table sending all non local traffi
 msgid "Specify the IP `<address>` of the RADIUS server user with the pre-shared-secret given in `<secret>`."
 msgstr "Specify the IP `<address>` of the RADIUS server user with the pre-shared-secret given in `<secret>`."
 
-#: ../../configuration/system/login.rst:298
+#: ../../configuration/system/login.rst:314
 msgid "Specify the IP `<address>` of the TACACS server user with the pre-shared-secret given in `<secret>`."
 msgstr "Specify the IP `<address>` of the TACACS server user with the pre-shared-secret given in `<secret>`."
 
@@ -12840,6 +12925,10 @@ msgstr "Start by checking for IPSec SAs (Security Associations) with:"
 msgid "Starting from VyOS 1.4-rolling-202308040557, a new firewall structure can be found on all vyos instalations, and zone based firewall is no longer supported. Documentation for most of the new firewall CLI can be found in the `firewall <https://docs.vyos.io/en/latest/configuration/firewall/general.html>`_ chapter. The legacy firewall is still available for versions before 1.4-rolling-202308040557 and can be found in the :ref:`firewall-legacy` chapter. The examples in this section use the legacy firewall configuration commands, since this feature has been removed in earlier releases."
 msgstr "Starting from VyOS 1.4-rolling-202308040557, a new firewall structure can be found on all vyos instalations, and zone based firewall is no longer supported. Documentation for most of the new firewall CLI can be found in the `firewall <https://docs.vyos.io/en/latest/configuration/firewall/general.html>`_ chapter. The legacy firewall is still available for versions before 1.4-rolling-202308040557 and can be found in the :ref:`firewall-legacy` chapter. The examples in this section use the legacy firewall configuration commands, since this feature has been removed in earlier releases."
 
+#: ../../configuration/firewall/index.rst:8
+msgid "Starting from VyOS 1.4-rolling-202308040557, a new firewall structure can be found on all vyos installations."
+msgstr "Starting from VyOS 1.4-rolling-202308040557, a new firewall structure can be found on all vyos installations."
+
 #: ../../configuration/firewall/index.rst:5
 msgid "Starting from VyOS 1.4-rolling-202308040557, a new firewall structure can be found on all vyos installations. Documentation for most new firewall cli can be found here:"
 msgstr "Starting from VyOS 1.4-rolling-202308040557, a new firewall structure can be found on all vyos installations. Documentation for most new firewall cli can be found here:"
@@ -12971,15 +13060,15 @@ msgstr "Synamic instructs to forward to all peers which we have a direct connect
 msgid "Sync groups"
 msgstr "Sync groups"
 
-#: ../../configuration/firewall/general.rst:1271
+#: ../../configuration/firewall/general.rst:1264
 msgid "Synproxy"
 msgstr "Synproxy"
 
-#: ../../configuration/firewall/general.rst:1272
+#: ../../configuration/firewall/general.rst:1265
 msgid "Synproxy connections"
 msgstr "Synproxy connections"
 
-#: ../../configuration/firewall/general.rst:1289
+#: ../../configuration/firewall/general.rst:1282
 msgid "Synproxy relies on syncookies and TCP timestamps, ensure these are enabled"
 msgstr "Synproxy relies on syncookies and TCP timestamps, ensure these are enabled"
 
@@ -13048,19 +13137,19 @@ msgstr "System identifier: ``1921.6800.1002`` - for system idetifiers we recomme
 msgid "System is unusable - a panic condition"
 msgstr "System is unusable - a panic condition"
 
-#: ../../configuration/system/login.rst:283
+#: ../../configuration/system/login.rst:299
 msgid "TACACS+"
 msgstr "TACACS+"
 
-#: ../../configuration/system/login.rst:388
+#: ../../configuration/system/login.rst:416
 msgid "TACACS Example"
 msgstr "TACACS Example"
 
-#: ../../configuration/system/login.rst:289
+#: ../../configuration/system/login.rst:305
 msgid "TACACS is defined in :rfc:`8907`."
 msgstr "TACACS is defined in :rfc:`8907`."
 
-#: ../../configuration/system/login.rst:319
+#: ../../configuration/system/login.rst:335
 msgid "TACACS servers could be hardened by only allowing certain IP addresses to connect. As of this the source address of each TACACS query can be configured."
 msgstr "TACACS servers could be hardened by only allowing certain IP addresses to connect. As of this the source address of each TACACS query can be configured."
 
@@ -13117,7 +13206,7 @@ msgstr "Temporary disable this RADIUS server."
 msgid "Temporary disable this RADIUS server. It won't be queried."
 msgstr "Temporary disable this RADIUS server. It won't be queried."
 
-#: ../../configuration/system/login.rst:311
+#: ../../configuration/system/login.rst:327
 msgid "Temporary disable this TACACS server. It won't be queried."
 msgstr "Temporary disable this TACACS server. It won't be queried."
 
@@ -13345,7 +13434,7 @@ msgstr "The `show bridge` operational command can be used to display configured
 msgid "The above directory and default-config must be a child directory of /config/auth, since files outside this directory are not persisted after an image upgrade."
 msgstr "The above directory and default-config must be a child directory of /config/auth, since files outside this directory are not persisted after an image upgrade."
 
-#: ../../configuration/firewall/general.rst:339
+#: ../../configuration/firewall/general.rst:332
 msgid "The action can be :"
 msgstr "The action can be :"
 
@@ -13780,6 +13869,10 @@ msgstr "The largest MTU size you can use with DSL is 1492 due to PPPoE overhead.
 msgid "The last step is to define an interface route for 192.168.2.0/24 to get through the WireGuard interface `wg01`. Multiple IPs or networks can be defined and routed. The last check is allowed-ips which either prevents or allows the traffic."
 msgstr "The last step is to define an interface route for 192.168.2.0/24 to get through the WireGuard interface `wg01`. Multiple IPs or networks can be defined and routed. The last check is allowed-ips which either prevents or allows the traffic."
 
+#: ../../configuration/firewall/index.rst:12
+msgid "The legacy and zone-based firewall configuration options is not longer supported. They are here for reference purposes only."
+msgstr "The legacy and zone-based firewall configuration options is not longer supported. They are here for reference purposes only."
+
 #: ../../configuration/trafficpolicy/index.rst:552
 msgid "The limiter performs basic ingress policing of traffic flows. Multiple classes of traffic can be defined and traffic limits can be applied to each class. Although the policer uses a token bucket mechanism internally, it does not have the capability to delay a packet as a shaping mechanism does. Traffic exceeding the defined bandwidth limits is directly dropped. A maximum allowed burst can be configured too."
 msgstr "The limiter performs basic ingress policing of traffic flows. Multiple classes of traffic can be defined and traffic limits can be applied to each class. Although the policer uses a token bucket mechanism internally, it does not have the capability to delay a packet as a shaping mechanism does. Traffic exceeding the defined bandwidth limits is directly dropped. A maximum allowed burst can be configured too."
@@ -13864,6 +13957,10 @@ msgstr "The number parameter (1-10) configures the amount of accepted occurences
 msgid "The official port for OpenVPN is 1194, which we reserve for client VPN; we will use 1195 for site-to-site VPN."
 msgstr "The official port for OpenVPN is 1194, which we reserve for client VPN; we will use 1195 for site-to-site VPN."
 
+#: ../../configuration/firewall/index.rst:32
+msgid "The only stages VyOS will process as part of the firewall configuration is the `forward` (F4 stage), `input` (L4 stage), and `output` (L5 stage). All the other stages and steps are for reference and cant be manipulated through VyOS."
+msgstr "The only stages VyOS will process as part of the firewall configuration is the `forward` (F4 stage), `input` (L4 stage), and `output` (L5 stage). All the other stages and steps are for reference and cant be manipulated through VyOS."
+
 #: ../../configuration/protocols/ospf.rst:155
 msgid "The optional `disable` option allows to exclude interface from passive state. This command is used if the command :cfgcmd:`passive-interface default` was configured."
 msgstr "The optional `disable` option allows to exclude interface from passive state. This command is used if the command :cfgcmd:`passive-interface default` was configured."
@@ -14163,7 +14260,7 @@ msgstr "There's a variety of client GUI frontends for any platform"
 msgid "There are 3 default NTP server set. You are able to change them."
 msgstr "There are 3 default NTP server set. You are able to change them."
 
-#: ../../configuration/firewall/general.rst:543
+#: ../../configuration/firewall/general.rst:536
 #: ../../configuration/firewall/general-legacy.rst:380
 msgid "There are a lot of matching criteria against which the package can be tested."
 msgstr "There are a lot of matching criteria against which the package can be tested."
@@ -15373,7 +15470,7 @@ msgstr "This command will generate a default-route in L1 database."
 msgid "This command will generate a default-route in L2 database."
 msgstr "This command will generate a default-route in L2 database."
 
-#: ../../configuration/firewall/general.rst:1464
+#: ../../configuration/firewall/general.rst:1457
 #: ../../configuration/firewall/general-legacy.rst:904
 msgid "This command will give an overview of a rule in a single rule-set"
 msgstr "This command will give an overview of a rule in a single rule-set"
@@ -15382,7 +15479,7 @@ msgstr "This command will give an overview of a rule in a single rule-set"
 msgid "This command will give an overview of a rule in a single rule-set."
 msgstr "This command will give an overview of a rule in a single rule-set."
 
-#: ../../configuration/firewall/general.rst:1442
+#: ../../configuration/firewall/general.rst:1435
 #: ../../configuration/firewall/general-legacy.rst:932
 msgid "This command will give an overview of a single rule-set."
 msgstr "This command will give an overview of a single rule-set."
@@ -15462,7 +15559,7 @@ msgstr "This defaults to 300 seconds."
 msgid "This defaults to 30 seconds."
 msgstr "This defaults to 30 seconds."
 
-#: ../../configuration/system/login.rst:307
+#: ../../configuration/system/login.rst:323
 msgid "This defaults to 49."
 msgstr "This defaults to 49."
 
@@ -15510,7 +15607,7 @@ msgstr "This example shows how to target an MSS clamp (in our example to 1360 by
 msgid "This feature summarises originated external LSAs (Type-5 and Type-7). Summary Route will be originated on-behalf of all matched external LSAs."
 msgstr "This feature summarises originated external LSAs (Type-5 and Type-7). Summary Route will be originated on-behalf of all matched external LSAs."
 
-#: ../../configuration/firewall/general.rst:633
+#: ../../configuration/firewall/general.rst:626
 #: ../../configuration/firewall/general-legacy.rst:431
 msgid "This functions for both individual addresses and address groups."
 msgstr "This functions for both individual addresses and address groups."
@@ -15722,7 +15819,7 @@ msgstr "This option is mandatory in Access-Point mode."
 msgid "This option is required when running a DMVPN spoke."
 msgstr "This option is required when running a DMVPN spoke."
 
-#: ../../configuration/system/login.rst:360
+#: ../../configuration/system/login.rst:388
 msgid "This option must be used with ``timeout`` option."
 msgstr "This option must be used with ``timeout`` option."
 
@@ -15751,7 +15848,7 @@ msgstr "This prompted some ISPs to develop a policy within the :abbr:`ARIN (Amer
 msgid "This required setting defines the action of the current rule. If action is set to ``jump``, then ``jump-target`` is also needed."
 msgstr "This required setting defines the action of the current rule. If action is set to ``jump``, then ``jump-target`` is also needed."
 
-#: ../../configuration/firewall/general.rst:367
+#: ../../configuration/firewall/general.rst:360
 msgid "This required setting defines the action of the current rule. If action is set to jump, then jump-target is also needed."
 msgstr "This required setting defines the action of the current rule. If action is set to jump, then jump-target is also needed."
 
@@ -15797,7 +15894,7 @@ msgstr "This section needs improvements, examples and explanations."
 msgid "This set the default action of the rule-set if no rule matched a packet criteria. If defacult-action is set to ``jump``, then ``default-jump-target`` is also needed."
 msgstr "This set the default action of the rule-set if no rule matched a packet criteria. If defacult-action is set to ``jump``, then ``default-jump-target`` is also needed."
 
-#: ../../configuration/firewall/general.rst:399
+#: ../../configuration/firewall/general.rst:392
 msgid "This set the default action of the rule-set if no rule matched a packet criteria. If defacult-action is set to ``jump``, then ``default-jump-target`` is also needed. Note that for base chains, default action can only be set to ``accept`` or ``drop``, while on custom chain, more actions are available."
 msgstr "This set the default action of the rule-set if no rule matched a packet criteria. If defacult-action is set to ``jump``, then ``default-jump-target`` is also needed. Note that for base chains, default action can only be set to ``accept`` or ``drop``, while on custom chain, more actions are available."
 
@@ -15817,12 +15914,12 @@ msgstr "This setting, which defaults to 3600 seconds, puts a maximum on the amou
 msgid "This setting defaults to 1500 and is valid between 10 and 60000."
 msgstr "This setting defaults to 1500 and is valid between 10 and 60000."
 
-#: ../../configuration/firewall/general.rst:128
+#: ../../configuration/firewall/general.rst:121
 #: ../../configuration/firewall/general-legacy.rst:73
 msgid "This setting enable or disable the response of icmp broadcast messages. The following system parameter will be altered:"
 msgstr "This setting enable or disable the response of icmp broadcast messages. The following system parameter will be altered:"
 
-#: ../../configuration/firewall/general.rst:136
+#: ../../configuration/firewall/general.rst:129
 #: ../../configuration/firewall/general-legacy.rst:81
 msgid "This setting handle if VyOS accept packets with a source route option. The following system parameter will be altered:"
 msgstr "This setting handle if VyOS accept packets with a source route option. The following system parameter will be altered:"
@@ -15905,7 +16002,7 @@ msgstr "This will match TCP traffic with source port 80."
 msgid "This will render the following ddclient_ configuration entry:"
 msgstr "This will render the following ddclient_ configuration entry:"
 
-#: ../../configuration/firewall/general.rst:1321
+#: ../../configuration/firewall/general.rst:1314
 #: ../../configuration/firewall/general-legacy.rst:785
 msgid "This will show you a basic firewall overview"
 msgstr "This will show you a basic firewall overview"
@@ -15914,12 +16011,12 @@ msgstr "This will show you a basic firewall overview"
 msgid "This will show you a rule-set statistic since the last boot."
 msgstr "This will show you a rule-set statistic since the last boot."
 
-#: ../../configuration/firewall/general.rst:1486
+#: ../../configuration/firewall/general.rst:1479
 #: ../../configuration/firewall/general-legacy.rst:900
 msgid "This will show you a statistic of all rule-sets since the last boot."
 msgstr "This will show you a statistic of all rule-sets since the last boot."
 
-#: ../../configuration/firewall/general.rst:1384
+#: ../../configuration/firewall/general.rst:1377
 #: ../../configuration/firewall/general-legacy.rst:851
 msgid "This will show you a summary of rule-sets and groups"
 msgstr "This will show you a summary of rule-sets and groups"
@@ -15964,7 +16061,7 @@ msgstr "Time in seconds that the prefix will remain valid (default: 30 days)"
 msgid "Time is in minutes and defaults to 60."
 msgstr "Time is in minutes and defaults to 60."
 
-#: ../../configuration/firewall/general.rst:1218
+#: ../../configuration/firewall/general.rst:1211
 #: ../../configuration/firewall/general-legacy.rst:722
 #: ../../configuration/policy/route.rst:225
 msgid "Time to match the defined rule."
@@ -16015,12 +16112,12 @@ msgstr "To automatically assign the client an IP address as tunnel endpoint, a c
 msgid "To be used only when ``action`` is set to ``jump``. Use this command to specify jump target."
 msgstr "To be used only when ``action`` is set to ``jump``. Use this command to specify jump target."
 
-#: ../../configuration/firewall/general.rst:408
+#: ../../configuration/firewall/general.rst:401
 #: ../../configuration/firewall/general-legacy.rst:295
 msgid "To be used only when ``defult-action`` is set to ``jump``. Use this command to specify jump target for default rule."
 msgstr "To be used only when ``defult-action`` is set to ``jump``. Use this command to specify jump target for default rule."
 
-#: ../../configuration/firewall/general.rst:381
+#: ../../configuration/firewall/general.rst:374
 msgid "To be used only when action is set to jump. Use this command to specify jump target."
 msgstr "To be used only when action is set to jump. Use this command to specify jump target."
 
@@ -16036,6 +16133,18 @@ msgstr "To bypass the proxy for every request that is directed to a specific des
 msgid "To configure IPv6 assignments for clients, two options need to be configured. A global prefix which is terminated on the clients cpe and a delegated prefix, the client can use for devices routed via the clients cpe."
 msgstr "To configure IPv6 assignments for clients, two options need to be configured. A global prefix which is terminated on the clients cpe and a delegated prefix, the client can use for devices routed via the clients cpe."
 
+#: ../../configuration/firewall/index.rst:58
+msgid "To configure VyOS with the :doc:`legacy firewall configuration </configuration/firewall/general-legacy>`"
+msgstr "To configure VyOS with the :doc:`legacy firewall configuration </configuration/firewall/general-legacy>`"
+
+#: ../../configuration/firewall/index.rst:79
+msgid "To configure VyOS with the :doc:`zone-based firewall configuration </configuration/firewall/zone>`"
+msgstr "To configure VyOS with the :doc:`zone-based firewall configuration </configuration/firewall/zone>`"
+
+#: ../../configuration/firewall/index.rst:30
+msgid "To configure VyOS with the new :doc:`firewall configuration </configuration/firewall/general>`"
+msgstr "To configure VyOS with the new :doc:`firewall configuration </configuration/firewall/general>`"
+
 #: ../../configuration/service/webproxy.rst:386
 msgid "To configure blocking add the following to the configuration"
 msgstr "To configure blocking add the following to the configuration"
@@ -16056,7 +16165,7 @@ msgstr "To configure your LCD display you must first identify the used hardware,
 msgid "To create VLANs per user during runtime, the following settings are required on a per interface basis. VLAN ID and VLAN range can be present in the configuration at the same time."
 msgstr "To create VLANs per user during runtime, the following settings are required on a per interface basis. VLAN ID and VLAN range can be present in the configuration at the same time."
 
-#: ../../configuration/system/login.rst:347
+#: ../../configuration/system/login.rst:375
 msgid "To create a new line in your login message you need to escape the new line character by using ``\\\\n``."
 msgstr "To create a new line in your login message you need to escape the new line character by using ``\\\\n``."
 
@@ -16226,6 +16335,10 @@ msgstr "Track option to track non VRRP interface states. VRRP changes status to
 msgid "Traditional BGP did not have the feature to detect a remote peer's capabilities, e.g. whether it can handle prefix types other than IPv4 unicast routes. This was a big problem using Multiprotocol Extension for BGP in an operational network. :rfc:`2842` adopted a feature called Capability Negotiation. *bgpd* use this Capability Negotiation to detect the remote peer's capabilities. If a peer is only configured as an IPv4 unicast neighbor, *bgpd* does not send these Capability Negotiation packets (at least not unless other optional BGP features require capability negotiation)."
 msgstr "Traditional BGP did not have the feature to detect a remote peer's capabilities, e.g. whether it can handle prefix types other than IPv4 unicast routes. This was a big problem using Multiprotocol Extension for BGP in an operational network. :rfc:`2842` adopted a feature called Capability Negotiation. *bgpd* use this Capability Negotiation to detect the remote peer's capabilities. If a peer is only configured as an IPv4 unicast neighbor, *bgpd* does not send these Capability Negotiation packets (at least not unless other optional BGP features require capability negotiation)."
 
+#: ../../configuration/firewall/index.rst:54
+msgid "Traditionally firewalls weere configured with the concept of data going in and out of an interface. The router just listened to the data flowing through and responding as required if it was directed at the router itself."
+msgstr "Traditionally firewalls weere configured with the concept of data going in and out of an interface. The router just listened to the data flowing through and responding as required if it was directed at the router itself."
+
 #: ../../configuration/interfaces/openvpn.rst:9
 msgid "Traditionally hardware routers implement IPsec exclusively due to relative ease of implementing it in hardware and insufficient CPU power for doing encryption in software. Since VyOS is a software router, this is less of a concern. OpenVPN has been widely used on UNIX platform for a long time and is a popular option for remote access VPN, though it's also capable of site-to-site connections."
 msgstr "Traditionally hardware routers implement IPsec exclusively due to relative ease of implementing it in hardware and insufficient CPU power for doing encryption in software. Since VyOS is a software router, this is less of a concern. OpenVPN has been widely used on UNIX platform for a long time and is a popular option for remote access VPN, though it's also capable of site-to-site connections."
@@ -16254,7 +16367,7 @@ msgstr "Traffic from multicast sources will go to the Rendezvous Point, and rece
 msgid "Traffic from multicast sources will go to the Rendezvous Point, and receivers will pull it from a shared tree using MLD (Multicast Listener Discovery)."
 msgstr "Traffic from multicast sources will go to the Rendezvous Point, and receivers will pull it from a shared tree using MLD (Multicast Listener Discovery)."
 
-#: ../../configuration/firewall/general.rst:1288
+#: ../../configuration/firewall/general.rst:1281
 msgid "Traffic must be symmetric"
 msgstr "Traffic must be symmetric"
 
@@ -16383,7 +16496,7 @@ msgstr "Update"
 msgid "Update container image"
 msgstr "Update container image"
 
-#: ../../configuration/firewall/general.rst:1547
+#: ../../configuration/firewall/general.rst:1540
 #: ../../configuration/firewall/general-legacy.rst:1050
 msgid "Update geoip database"
 msgstr "Update geoip database"
@@ -16437,27 +16550,27 @@ msgstr "Use `delete system conntrack modules` to deactive all modules."
 msgid "Use a persistent LDAP connection. Normally the LDAP connection is only open while validating a username to preserve resources at the LDAP server. This option causes the LDAP connection to be kept open, allowing it to be reused for further user validations."
 msgstr "Use a persistent LDAP connection. Normally the LDAP connection is only open while validating a username to preserve resources at the LDAP server. This option causes the LDAP connection to be kept open, allowing it to be reused for further user validations."
 
-#: ../../configuration/firewall/general.rst:806
+#: ../../configuration/firewall/general.rst:799
 #: ../../configuration/firewall/general-legacy.rst:531
 msgid "Use a specific address-group. Prepend character ``!`` for inverted matching criteria."
 msgstr "Use a specific address-group. Prepend character ``!`` for inverted matching criteria."
 
-#: ../../configuration/firewall/general.rst:881
+#: ../../configuration/firewall/general.rst:874
 #: ../../configuration/firewall/general-legacy.rst:567
 msgid "Use a specific domain-group. Prepend character ``!`` for inverted matching criteria."
 msgstr "Use a specific domain-group. Prepend character ``!`` for inverted matching criteria."
 
-#: ../../configuration/firewall/general.rst:906
+#: ../../configuration/firewall/general.rst:899
 #: ../../configuration/firewall/general-legacy.rst:579
 msgid "Use a specific mac-group. Prepend character ``!`` for inverted matching criteria."
 msgstr "Use a specific mac-group. Prepend character ``!`` for inverted matching criteria."
 
-#: ../../configuration/firewall/general.rst:831
+#: ../../configuration/firewall/general.rst:824
 #: ../../configuration/firewall/general-legacy.rst:543
 msgid "Use a specific network-group. Prepend character ``!`` for inverted matching criteria."
 msgstr "Use a specific network-group. Prepend character ``!`` for inverted matching criteria."
 
-#: ../../configuration/firewall/general.rst:856
+#: ../../configuration/firewall/general.rst:849
 #: ../../configuration/firewall/general-legacy.rst:555
 msgid "Use a specific port-group. Prepend character ``!`` for inverted matching criteria."
 msgstr "Use a specific port-group. Prepend character ``!`` for inverted matching criteria."
@@ -16993,7 +17106,7 @@ msgstr "Use this command to enable the local router to try and connect with a ta
 msgid "Use this command to enable the logging of the default action."
 msgstr "Use this command to enable the logging of the default action."
 
-#: ../../configuration/firewall/general.rst:438
+#: ../../configuration/firewall/general.rst:431
 msgid "Use this command to enable the logging of the default action on custom chains."
 msgstr "Use this command to enable the logging of the default action on custom chains."
 
@@ -17394,6 +17507,10 @@ msgstr "Value to send to RADIUS server in NAS-Identifier attribute and to be mat
 msgid "Verification"
 msgstr "Verification"
 
+#: ../../configuration/vpn/remoteaccess_ipsec.rst:168
+msgid "Verification:"
+msgstr "Verification:"
+
 #: ../../configuration/highavailability/index.rst:291
 msgid "Version"
 msgstr "Version"
@@ -17502,6 +17619,10 @@ msgstr "VyOS also comes with a build in SSTP server, see :ref:`sstp`."
 msgid "VyOS also provides DHCPv6 server functionality which is described in this section."
 msgstr "VyOS also provides DHCPv6 server functionality which is described in this section."
 
+#: ../../configuration/vpn/remoteaccess_ipsec.rst:127
+msgid "VyOS also supports two different modes of authentication, local and RADIUS. To create a new local user named \"vyos\" with a password of \"vyos\" use the following commands."
+msgstr "VyOS also supports two different modes of authentication, local and RADIUS. To create a new local user named \"vyos\" with a password of \"vyos\" use the following commands."
+
 #: ../../configuration/vpn/dmvpn.rst:290
 msgid "VyOS can also run in DMVPN spoke mode."
 msgstr "VyOS can also run in DMVPN spoke mode."
@@ -17584,6 +17705,10 @@ msgstr "VyOS provide an HTTP API. You can use it to execute op-mode commands, up
 msgid "VyOS provides DNS infrastructure for small networks. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. For this we utilize PowerDNS recursor."
 msgstr "VyOS provides DNS infrastructure for small networks. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. For this we utilize PowerDNS recursor."
 
+#: ../../configuration/vpn/remoteaccess_ipsec.rst:144
+msgid "VyOS provides a command to generate a connection profile used by Windows clients that will connect to the \"rw\" connection on our VyOS server."
+msgstr "VyOS provides a command to generate a connection profile used by Windows clients that will connect to the \"rw\" connection on our VyOS server."
+
 #: ../../configuration/policy/as-path-list.rst:5
 msgid "VyOS provides policies commands exclusively for BGP traffic filtering and manipulation: **as-path-list** is one of them."
 msgstr "VyOS provides policies commands exclusively for BGP traffic filtering and manipulation: **as-path-list** is one of them."
@@ -17763,7 +17888,7 @@ msgstr "We only need a single step for this interface:"
 msgid "We route all traffic for the 192.168.2.0/24 network to interface `wg01`"
 msgstr "We route all traffic for the 192.168.2.0/24 network to interface `wg01`"
 
-#: ../../configuration/system/login.rst:390
+#: ../../configuration/system/login.rst:418
 msgid "We use a vontainer providing the TACACS serve rin this example."
 msgstr "We use a vontainer providing the TACACS serve rin this example."
 
@@ -17827,7 +17952,7 @@ msgstr "When configuring your filter, you can use the ``Tab`` key to see the man
 msgid "When configuring your traffic policy, you will have to set data rate values, watch out the units you are managing, it is easy to get confused with the different prefixes and suffixes you can use. VyOS will always show you the different units you can use."
 msgstr "When configuring your traffic policy, you will have to set data rate values, watch out the units you are managing, it is easy to get confused with the different prefixes and suffixes you can use. VyOS will always show you the different units you can use."
 
-#: ../../configuration/firewall/general.rst:528
+#: ../../configuration/firewall/general.rst:521
 msgid "When defining a rule, it is enable by default. In some cases, it is useful to just disable the rule, rather than removing it."
 msgstr "When defining a rule, it is enable by default. In some cases, it is useful to just disable the rule, rather than removing it."
 
@@ -17932,12 +18057,12 @@ msgstr "When the DHCP server is considering dynamically allocating an IP address
 msgid "When the close-action option is set on the peers, the connection-type of each peer has to considered carefully. For example, if the option is set on both peers, then both would attempt to initiate and hold open multiple copies of each child SA. This might lead to instability of the device or cpu/memory utilization."
 msgstr "When the close-action option is set on the peers, the connection-type of each peer has to considered carefully. For example, if the option is set on both peers, then both would attempt to initiate and hold open multiple copies of each child SA. This might lead to instability of the device or cpu/memory utilization."
 
-#: ../../configuration/firewall/general.rst:113
+#: ../../configuration/firewall/general.rst:106
 #: ../../configuration/firewall/general-legacy.rst:58
 msgid "When the command above is set, VyOS will answer every ICMP echo request addressed to itself, but that will only happen if no other rule is applied dropping or rejecting local echo requests. In case of conflict, VyOS will not answer ICMP echo requests."
 msgstr "When the command above is set, VyOS will answer every ICMP echo request addressed to itself, but that will only happen if no other rule is applied dropping or rejecting local echo requests. In case of conflict, VyOS will not answer ICMP echo requests."
 
-#: ../../configuration/firewall/general.rst:122
+#: ../../configuration/firewall/general.rst:115
 #: ../../configuration/firewall/general-legacy.rst:67
 msgid "When the command above is set, VyOS will answer no ICMP echo request addressed to itself at all, no matter where it comes from or whether more specific rules are being applied to accept them."
 msgstr "When the command above is set, VyOS will answer no ICMP echo request addressed to itself at all, no matter where it comes from or whether more specific rules are being applied to accept them."
@@ -17990,7 +18115,7 @@ msgstr "When using site-to-site IPsec with VTI interfaces, be sure to disable ro
 msgid "When utilizing VyOS in an environment with Arista gear you can use this blue print as an initial setup to get an LACP bond / port-channel operational between those two devices."
 msgstr "When utilizing VyOS in an environment with Arista gear you can use this blue print as an initial setup to get an LACP bond / port-channel operational between those two devices."
 
-#: ../../configuration/firewall/general.rst:64
+#: ../../configuration/firewall/general.rst:57
 msgid "Where, main key words and configuration paths that needs to be understood:"
 msgstr "Where, main key words and configuration paths that needs to be understood:"
 
@@ -18037,7 +18162,7 @@ msgstr "Which results in a configuration of:"
 msgid "Which would generate the following NAT destination configuration:"
 msgstr "Which would generate the following NAT destination configuration:"
 
-#: ../../configuration/firewall/general.rst:224
+#: ../../configuration/firewall/general.rst:217
 #: ../../configuration/firewall/general-legacy.rst:193
 msgid "While **network groups** accept IP networks in CIDR notation, specific IP addresses can be added as a 32-bit prefix. If you foresee the need to add a mix of addresses and networks, the network group is recommended."
 msgstr "While **network groups** accept IP networks in CIDR notation, specific IP addresses can be added as a 32-bit prefix. If you foresee the need to add a mix of addresses and networks, the network group is recommended."
@@ -18070,6 +18195,10 @@ msgstr "Will be recorded only packets/flows on **incoming** direction in configu
 msgid "Will drop `<shared-network-name>_` from client DNS record, using only the host declaration name and domain: `<hostname>.<domain-name>`"
 msgstr "Will drop `<shared-network-name>_` from client DNS record, using only the host declaration name and domain: `<hostname>.<domain-name>`"
 
+#: ../../configuration/vpn/remoteaccess_ipsec.rst:147
+msgid "Windows expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection."
+msgstr "Windows expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection."
+
 #: ../../configuration/interfaces/wireguard.rst:7
 #: ../../configuration/pki/index.rst:132
 msgid "WireGuard"
@@ -18116,6 +18245,10 @@ msgstr "Wireless options"
 msgid "Wireless options (Station/Client)"
 msgstr "Wireless options (Station/Client)"
 
+#: ../../configuration/firewall/index.rst:23
+msgid "With VyOS being based on top of Linux and its kernel, the Netfilter project created the iptables and now the successor nftables for the Linux kernel to work directly on the data flows. This now extends the concept of zone-based security to allow for manipulating the data at multiple stages once accepted by the network interface and the driver before being handed off to the destination (e.g. a web server OR another device)."
+msgstr "With VyOS being based on top of Linux and its kernel, the Netfilter project created the iptables and now the successor nftables for the Linux kernel to work directly on the data flows. This now extends the concept of zone-based security to allow for manipulating the data at multiple stages once accepted by the network interface and the driver before being handed off to the destination (e.g. a web server OR another device)."
+
 #: ../../configuration/interfaces/wireguard.rst:269
 msgid "With WireGuard, a Road Warrior VPN config is similar to a site-to-site VPN. It just lacks the ``address`` and ``port`` statements."
 msgstr "With WireGuard, a Road Warrior VPN config is similar to a site-to-site VPN. It just lacks the ``address`` and ``port`` statements."
@@ -18124,7 +18257,7 @@ msgstr "With WireGuard, a Road Warrior VPN config is similar to a site-to-site V
 msgid "With the ``name-server`` option set to ``none``, VyOS will ignore the nameservers your ISP sends you and thus you can fully rely on the ones you have configured statically."
 msgstr "With the ``name-server`` option set to ``none``, VyOS will ignore the nameservers your ISP sends you and thus you can fully rely on the ones you have configured statically."
 
-#: ../../configuration/firewall/general.rst:101
+#: ../../configuration/firewall/general.rst:94
 #: ../../configuration/firewall/general-legacy.rst:46
 msgid "With the firewall you can set rules to accept, drop or reject ICMP in, out or local traffic. You can also use the general **firewall all-ping** command. This command affects only to LOCAL (packets destined for your VyOS system), not to IN or OUT traffic."
 msgstr "With the firewall you can set rules to accept, drop or reject ICMP in, out or local traffic. You can also use the general **firewall all-ping** command. This command affects only to LOCAL (packets destined for your VyOS system), not to IN or OUT traffic."
@@ -18133,6 +18266,10 @@ msgstr "With the firewall you can set rules to accept, drop or reject ICMP in, o
 msgid "With this command, you can specify how the URL path should be matched against incoming requests."
 msgstr "With this command, you can specify how the URL path should be matched against incoming requests."
 
+#: ../../configuration/firewall/index.rst:73
+msgid "With zone-based firewalls a new concept was implemented, in addtion to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above."
+msgstr "With zone-based firewalls a new concept was implemented, in addtion to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above."
+
 #: ../../configuration/service/dhcp-server.rst:290
 #: ../../configuration/service/dhcp-server.rst:295
 #: ../../configuration/service/dhcp-server.rst:300
@@ -18151,7 +18288,7 @@ msgstr "Y"
 msgid "You apply a rule-set always to a zone from an other zone, it is recommended to create one rule-set for each zone pair."
 msgstr "You apply a rule-set always to a zone from an other zone, it is recommended to create one rule-set for each zone pair."
 
-#: ../../configuration/system/login.rst:335
+#: ../../configuration/system/login.rst:363
 msgid "You are able to set post-login or pre-login banner messages to display certain information for this system."
 msgstr "You are able to set post-login or pre-login banner messages to display certain information for this system."
 
@@ -18245,7 +18382,7 @@ msgstr "You can not run this in a VRRP setup, if multiple mDNS repeaters are lau
 msgid "You can now \"dial\" the peer with the follwoing command: ``sstpc --log-level 4 --log-stderr --user vyos --password vyos vpn.example.com -- call vyos``."
 msgstr "You can now \"dial\" the peer with the follwoing command: ``sstpc --log-level 4 --log-stderr --user vyos --password vyos vpn.example.com -- call vyos``."
 
-#: ../../configuration/system/login.rst:413
+#: ../../configuration/system/login.rst:441
 msgid "You can now SSH into your system using admin/admin as a default user supplied from the ``lfkeitel/tacacs_plus:latest`` container."
 msgstr "You can now SSH into your system using admin/admin as a default user supplied from the ``lfkeitel/tacacs_plus:latest`` container."
 
@@ -18346,10 +18483,18 @@ msgstr "Zebra supports prefix-lists and Route Mapss to match routes received fro
 msgid "Zone-Policy Overview"
 msgstr "Zone-Policy Overview"
 
+#: ../../configuration/firewall/index.rst:66
+msgid "Zone-based firewall"
+msgstr "Zone-based firewall"
+
 #: ../../configuration/firewall/zone.rst:7
 msgid "Zone Based Firewall"
 msgstr "Zone Based Firewall"
 
+#: ../../configuration/firewall/zone.rst:7
+msgid "Zone Based Firewall (Deprecated)"
+msgstr "Zone Based Firewall (Deprecated)"
+
 #: ../../configuration/protocols/ospf.rst:792
 msgid "[A.B.C.D] – link-state-id. With this specified the command displays portion of the network environment that is being described by the advertisement. The value entered depends on the advertisement’s LS type. It must be entered in the form of an IP address."
 msgstr "[A.B.C.D] – link-state-id. With this specified the command displays portion of the network environment that is being described by the advertisement. The value entered depends on the advertisement’s LS type. It must be entered in the form of an IP address."
@@ -18907,7 +19052,7 @@ msgstr "``accept-own-nexthop`` -           Well-known communities value accept-o
 msgid "``accept-own`` -                   Well-known communities value ACCEPT_OWN 0xFFFF0001"
 msgstr "``accept-own`` -                   Well-known communities value ACCEPT_OWN 0xFFFF0001"
 
-#: ../../configuration/firewall/general.rst:341
+#: ../../configuration/firewall/general.rst:334
 msgid "``accept``: accept the packet."
 msgstr "``accept``: accept the packet."
 
@@ -19083,7 +19228,7 @@ msgstr "``disable`` disable IPComp compression (default);"
 msgid "``disable`` disable MOBIKE;"
 msgstr "``disable`` disable MOBIKE;"
 
-#: ../../configuration/firewall/general.rst:343
+#: ../../configuration/firewall/general.rst:336
 msgid "``drop``: drop the packet."
 msgstr "``drop``: drop the packet."
 
@@ -19251,7 +19396,7 @@ msgstr "``interval`` keep-alive interval in seconds <2-86400> (default 30);"
 msgid "``isis`` - Intermediate System to Intermediate System (IS-IS)"
 msgstr "``isis`` - Intermediate System to Intermediate System (IS-IS)"
 
-#: ../../configuration/firewall/general.rst:347
+#: ../../configuration/firewall/general.rst:340
 msgid "``jump``: jump to another custom chain."
 msgstr "``jump``: jump to another custom chain."
 
@@ -19377,52 +19522,52 @@ msgstr "``n`` - 802.11n - 600 Mbits/sec"
 msgid "``name`` is used for the VyOS CLI command to identify this key. This key ``name`` is then used in the CLI configuration to reference the key instance."
 msgstr "``name`` is used for the VyOS CLI command to identify this key. This key ``name`` is then used in the CLI configuration to reference the key instance."
 
-#: ../../configuration/firewall/general.rst:149
+#: ../../configuration/firewall/general.rst:142
 #: ../../configuration/firewall/general-legacy.rst:93
 msgid "``net.ipv4.conf.all.accept_redirects``"
 msgstr "``net.ipv4.conf.all.accept_redirects``"
 
-#: ../../configuration/firewall/general.rst:139
+#: ../../configuration/firewall/general.rst:132
 #: ../../configuration/firewall/general-legacy.rst:84
 msgid "``net.ipv4.conf.all.accept_source_route``"
 msgstr "``net.ipv4.conf.all.accept_source_route``"
 
-#: ../../configuration/firewall/general.rst:164
+#: ../../configuration/firewall/general.rst:157
 #: ../../configuration/firewall/general-legacy.rst:108
 msgid "``net.ipv4.conf.all.log_martians``"
 msgstr "``net.ipv4.conf.all.log_martians``"
 
-#: ../../configuration/firewall/general.rst:172
+#: ../../configuration/firewall/general.rst:165
 #: ../../configuration/firewall/general-legacy.rst:115
 msgid "``net.ipv4.conf.all.rp_filter``"
 msgstr "``net.ipv4.conf.all.rp_filter``"
 
-#: ../../configuration/firewall/general.rst:157
+#: ../../configuration/firewall/general.rst:150
 #: ../../configuration/firewall/general-legacy.rst:101
 msgid "``net.ipv4.conf.all.send_redirects``"
 msgstr "``net.ipv4.conf.all.send_redirects``"
 
-#: ../../configuration/firewall/general.rst:131
+#: ../../configuration/firewall/general.rst:124
 #: ../../configuration/firewall/general-legacy.rst:76
 msgid "``net.ipv4.icmp_echo_ignore_broadcasts``"
 msgstr "``net.ipv4.icmp_echo_ignore_broadcasts``"
 
-#: ../../configuration/firewall/general.rst:187
+#: ../../configuration/firewall/general.rst:180
 #: ../../configuration/firewall/general-legacy.rst:129
 msgid "``net.ipv4.tcp_rfc1337``"
 msgstr "``net.ipv4.tcp_rfc1337``"
 
-#: ../../configuration/firewall/general.rst:179
+#: ../../configuration/firewall/general.rst:172
 #: ../../configuration/firewall/general-legacy.rst:122
 msgid "``net.ipv4.tcp_syncookies``"
 msgstr "``net.ipv4.tcp_syncookies``"
 
-#: ../../configuration/firewall/general.rst:150
+#: ../../configuration/firewall/general.rst:143
 #: ../../configuration/firewall/general-legacy.rst:94
 msgid "``net.ipv6.conf.all.accept_redirects``"
 msgstr "``net.ipv6.conf.all.accept_redirects``"
 
-#: ../../configuration/firewall/general.rst:140
+#: ../../configuration/firewall/general.rst:133
 #: ../../configuration/firewall/general-legacy.rst:85
 msgid "``net.ipv6.conf.all.accept_source_route``"
 msgstr "``net.ipv6.conf.all.accept_source_route``"
@@ -19544,7 +19689,7 @@ msgstr "``protocol`` - define the protocol for match traffic, which should be en
 msgid "``psk`` - Preshared secret key name:"
 msgstr "``psk`` - Preshared secret key name:"
 
-#: ../../configuration/firewall/general.rst:352
+#: ../../configuration/firewall/general.rst:345
 msgid "``queue``: Enqueue packet to userspace."
 msgstr "``queue``: Enqueue packet to userspace."
 
@@ -19552,7 +19697,7 @@ msgstr "``queue``: Enqueue packet to userspace."
 msgid "``rate``: Number of packets. Default 5."
 msgstr "``rate``: Number of packets. Default 5."
 
-#: ../../configuration/firewall/general.rst:345
+#: ../../configuration/firewall/general.rst:338
 msgid "``reject``: reject the packet."
 msgstr "``reject``: reject the packet."
 
@@ -19585,7 +19730,7 @@ msgstr "``respond`` - does not try to initiate a connection to a remote peer. In
 msgid "``restart`` set action to restart;"
 msgstr "``restart`` set action to restart;"
 
-#: ../../configuration/firewall/general.rst:349
+#: ../../configuration/firewall/general.rst:342
 msgid "``return``: Return from the current chain and continue at the next rule of the last chain."
 msgstr "``return``: Return from the current chain and continue at the next rule of the last chain."
 
@@ -19681,7 +19826,7 @@ msgstr "``static`` - Statically configured routes"
 msgid "``station`` - Connects to another access point"
 msgstr "``station`` - Connects to another access point"
 
-#: ../../configuration/firewall/general.rst:354
+#: ../../configuration/firewall/general.rst:347
 msgid "``synproxy``: synproxy the packet."
 msgstr "``synproxy``: synproxy the packet."
 
@@ -20019,7 +20164,7 @@ msgstr "domain-search"
 msgid "emerg"
 msgstr "emerg"
 
-#: ../../configuration/firewall/general.rst:154
+#: ../../configuration/firewall/general.rst:147
 msgid "enable or disable ICMPv4 redirect messages send by VyOS The following system parameter will be altered:"
 msgstr "enable or disable ICMPv4 redirect messages send by VyOS The following system parameter will be altered:"
 
@@ -20027,12 +20172,12 @@ msgstr "enable or disable ICMPv4 redirect messages send by VyOS The following sy
 msgid "enable or disable  ICMPv4 redirect messages send by VyOS The following system parameter will be altered:"
 msgstr "enable or disable  ICMPv4 redirect messages send by VyOS The following system parameter will be altered:"
 
-#: ../../configuration/firewall/general.rst:146
+#: ../../configuration/firewall/general.rst:139
 #: ../../configuration/firewall/general-legacy.rst:90
 msgid "enable or disable of ICMPv4 or ICMPv6 redirect messages accepted by VyOS. The following system parameter will be altered:"
 msgstr "enable or disable of ICMPv4 or ICMPv6 redirect messages accepted by VyOS. The following system parameter will be altered:"
 
-#: ../../configuration/firewall/general.rst:161
+#: ../../configuration/firewall/general.rst:154
 #: ../../configuration/firewall/general-legacy.rst:105
 msgid "enable or disable the logging of martian IPv4 packets. The following system parameter will be altered:"
 msgstr "enable or disable the logging of martian IPv4 packets. The following system parameter will be altered:"
diff --git a/docs/_locale/de/copyright.pot b/docs/_locale/de/copyright.pot
new file mode 100644
index 00000000..d5d53a50
--- /dev/null
+++ b/docs/_locale/de/copyright.pot
@@ -0,0 +1,29 @@
+msgid ""
+msgstr ""
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Localazy (https://localazy.com)\n"
+"Project-Id-Version: VyOS Documentation\n"
+"Language: de\n"
+"Plural-Forms: nplurals=2; plural=(n==1) ? 0 : 1;\n"
+
+#: ../../copyright.md:1
+msgid "Copyright Notice"
+msgstr "Copyright Notice"
+
+#: ../../copyright.md:3
+msgid "Copyright (C) 2018-2023 VyOS maintainers and contributors"
+msgstr "Copyright (C) 2018-2023 VyOS maintainers and contributors"
+
+#: ../../copyright.md:9
+msgid "Permission is granted to copy and distribute modified versions of this manual under the conditions for verbatim copying, provided that the entire resulting derived work is distributed under the terms of a permission notice identical to this one."
+msgstr "Permission is granted to copy and distribute modified versions of this manual under the conditions for verbatim copying, provided that the entire resulting derived work is distributed under the terms of a permission notice identical to this one."
+
+#: ../../copyright.md:14
+msgid "Permission is granted to copy and distribute translations of this manual into another language, under the above conditions for modified versions, except that this permission notice may be stated in a translation approved by the VyOS maintainers."
+msgstr "Permission is granted to copy and distribute translations of this manual into another language, under the above conditions for modified versions, except that this permission notice may be stated in a translation approved by the VyOS maintainers."
+
+#: ../../copyright.md:5
+msgid "Permission is granted to make and distribute verbatim copies of this manual provided the copyright notice and this permission notice are preserved on all copies."
+msgstr "Permission is granted to make and distribute verbatim copies of this manual provided the copyright notice and this permission notice are preserved on all copies."
diff --git a/docs/_locale/de/documentation.pot b/docs/_locale/de/documentation.pot
new file mode 100644
index 00000000..45c5de33
--- /dev/null
+++ b/docs/_locale/de/documentation.pot
@@ -0,0 +1,417 @@
+msgid ""
+msgstr ""
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Localazy (https://localazy.com)\n"
+"Project-Id-Version: VyOS Documentation\n"
+"Language: de\n"
+"Plural-Forms: nplurals=2; plural=(n==1) ? 0 : 1;\n"
+
+#: ../../documentation.rst:239
+msgid "16bit ASN: ``64496 - 64511``"
+msgstr "16bit ASN: ``64496 - 64511``"
+
+#: ../../documentation.rst:240
+msgid "32bit ASN: ``65536 - 65551``"
+msgstr "32bit ASN: ``65536 - 65551``"
+
+#: ../../documentation.rst:182
+msgid "A plugin will be used to generate a reference label for each headline. To reference a page or a section in the documentation use the ``:ref:`` command."
+msgstr "A plugin will be used to generate a reference label for each headline. To reference a page or a section in the documentation use the ``:ref:`` command."
+
+#: ../../documentation.rst:103
+msgid "Add modified files to Git index ``$ git add path/to/filename`` or add all unstaged files ``$ git add .``. All files added to the Git index will be part of you following Git commit."
+msgstr "Add modified files to Git index ``$ git add path/to/filename`` or add all unstaged files ``$ git add .``. All files added to the Git index will be part of you following Git commit."
+
+#: ../../documentation.rst:229
+msgid "Address space"
+msgstr "Address space"
+
+#: ../../documentation.rst:390
+msgid "All RST files must follow the same TOC Level syntax and have to start with"
+msgstr "All RST files must follow the same TOC Level syntax and have to start with"
+
+#: ../../documentation.rst:413
+msgid "An optional section follows. Some commands have requirements like compatible hardware (e.g. Wifi) or some commands you have to set before. For example, it is recommended to set a route-map before configuring BGP."
+msgstr "An optional section follows. Some commands have requirements like compatible hardware (e.g. Wifi) or some commands you have to set before. For example, it is recommended to set a route-map before configuring BGP."
+
+#: ../../documentation.rst:53
+msgid "And finally, remember that the reStructuredText files aren't exclusively for generating HTML and PDF. They should be human-readable and easily perused from a console."
+msgstr "And finally, remember that the reStructuredText files aren't exclusively for generating HTML and PDF. They should be human-readable and easily perused from a console."
+
+#: ../../documentation.rst:436
+msgid "Anything else"
+msgstr "Anything else"
+
+#: ../../documentation.rst:438
+msgid "Anything else that is not a configuration or an operation command has no predefined structure."
+msgstr "Anything else that is not a configuration or an operation command has no predefined structure."
+
+#: ../../documentation.rst:257
+msgid "Autolinter"
+msgstr "Autolinter"
+
+#: ../../documentation.rst:94
+msgid "Check your changes by locally building the documentation ``$ make livehtml``. Sphinx will build the html files in the ``docs/_build`` folder. We provide you with a Docker container for an easy-to-use user experience. Check the README.md_ file of this repository."
+msgstr "Check your changes by locally building the documentation ``$ make livehtml``. Sphinx will build the html files in the ``docs/_build`` folder. We provide you with a Docker container for an easy-to-use user experience. Check the README.md_ file of this repository."
+
+#: ../../documentation.rst:123
+msgid "Check your configured remote repositories:"
+msgstr "Check your configured remote repositories:"
+
+#: ../../documentation.rst:78
+msgid "Clone fork to local machine, then change to that directory ``$ cd vyos-documentation``"
+msgstr "Clone fork to local machine, then change to that directory ``$ cd vyos-documentation``"
+
+#: ../../documentation.rst:107
+msgid "Commit your changes with the message, ``$ git commit -m \"<commit message>\"`` or  use ``$ git commit -v`` to have your configured editor launched. You can type in a commit message. Again please make yourself comfortable without rules (:ref:`prepare_commit`)."
+msgstr "Commit your changes with the message, ``$ git commit -m \"<commit message>\"`` or  use ``$ git commit -v`` to have your configured editor launched. You can type in a commit message. Again please make yourself comfortable without rules (:ref:`prepare_commit`)."
+
+#: ../../documentation.rst:399
+msgid "Configuration mode pages"
+msgstr "Configuration mode pages"
+
+#: ../../documentation.rst:84
+msgid "Create a new branch for your work, use a descriptive name of your work: ``$ git checkout -b <branch-name>``"
+msgstr "Create a new branch for your work, use a descriptive name of your work: ``$ git checkout -b <branch-name>``"
+
+#: ../../documentation.rst:180
+msgid "Cross-References"
+msgstr "Cross-References"
+
+#: ../../documentation.rst:268
+msgid "Custom Sphinx-doc Markup"
+msgstr "Custom Sphinx-doc Markup"
+
+#: ../../documentation.rst:270
+msgid "Custom commands have been developed for writing the documentation. Please make yourself comfortable with those commands as this eases the way we render the documentation."
+msgstr "Custom commands have been developed for writing the documentation. Please make yourself comfortable with those commands as this eases the way we render the documentation."
+
+#: ../../documentation.rst:45
+msgid "Don't forget to update ``index.rst`` when adding a new node."
+msgstr "Don't forget to update ``index.rst`` when adding a new node."
+
+#: ../../documentation.rst:259
+msgid "Each GitHub pull request is automatically linted to check the address space and line length."
+msgstr "Each GitHub pull request is automatically linted to check the address space and line length."
+
+#: ../../documentation.rst:252
+msgid "Except in ``.. code-block::`` because it uses the html tag ``<pre>`` and renders the same line format from the source rst file."
+msgstr "Except in ``.. code-block::`` because it uses the html tag ``<pre>`` and renders the same line format from the source rst file."
+
+#: ../../documentation.rst:292
+msgid "For an inline configuration level command, use ``:cfgcmd:``"
+msgstr "For an inline configuration level command, use ``:cfgcmd:``"
+
+#: ../../documentation.rst:328
+msgid "For an inline operational level command, use ``:opcmd:``"
+msgstr "For an inline operational level command, use ``:opcmd:``"
+
+#: ../../documentation.rst:186
+msgid "For example, you want to reference the headline **VLAN** in the **ethernet.rst** page. The plugin generates the label based on the headline and the file path."
+msgstr "For example, you want to reference the headline **VLAN** in the **ethernet.rst** page. The plugin generates the label based on the headline and the file path."
+
+#: ../../documentation.rst:405
+msgid "For example:"
+msgstr "For example:"
+
+#: ../../documentation.rst:76
+msgid "Fork this project on GitHub https://github.com/vyos/vyos-documentation/fork"
+msgstr "Fork this project on GitHub https://github.com/vyos/vyos-documentation/fork"
+
+#: ../../documentation.rst:58
+msgid "Forking Workflow"
+msgstr "Forking Workflow"
+
+#: ../../documentation.rst:150
+msgid "Formating and Sphinxmarkup"
+msgstr "Formating and Sphinxmarkup"
+
+#: ../../documentation.rst:432
+msgid "General concepts for troubleshooting and detailed process descriptions belong here."
+msgstr "General concepts for troubleshooting and detailed process descriptions belong here."
+
+#: ../../documentation.rst:33
+msgid "Guidelines"
+msgstr "Guidelines"
+
+#: ../../documentation.rst:423
+msgid "If there some troubleshooting guides related to the commands. Explain it in the next optional part."
+msgstr "If there some troubleshooting guides related to the commands. Explain it in the next optional part."
+
+#: ../../documentation.rst:143
+msgid "If you also want to update your fork on GitHub, use the following: ``$ git push origin master``"
+msgstr "If you also want to update your fork on GitHub, use the following: ``$ git push origin master``"
+
+#: ../../documentation.rst:13
+msgid "If you are willing to contribute to our documentation this is the definite guide how to do so."
+msgstr "If you are willing to contribute to our documentation this is the definite guide how to do so."
+
+#: ../../documentation.rst:16
+msgid "In contrast to submitting code patches, there is no requirement that you open up a Phabricator_ task prior to submitting a Pull-Request to the documentation."
+msgstr "In contrast to submitting code patches, there is no requirement that you open up a Phabricator_ task prior to submitting a Pull-Request to the documentation."
+
+#: ../../documentation.rst:417
+msgid "In the configuration part of the page, all possible configuration options should be documented. Use ``.. cfgcmd::`` described above."
+msgstr "In the configuration part of the page, all possible configuration options should be documented. Use ``.. cfgcmd::`` described above."
+
+#: ../../documentation.rst:50
+msgid "Indent with two spaces."
+msgstr "Indent with two spaces."
+
+#: ../../documentation.rst:81
+msgid "Install the requirements ``$ pip install -r requirements.txt`` (or something similar)"
+msgstr "Install the requirements ``$ pip install -r requirements.txt`` (or something similar)"
+
+#: ../../documentation.rst:49
+msgid "Leave a newline before and after a header."
+msgstr "Leave a newline before and after a header."
+
+#: ../../documentation.rst:250
+msgid "Limit all lines to a maximum of 80 characters."
+msgstr "Limit all lines to a maximum of 80 characters."
+
+#: ../../documentation.rst:248
+msgid "Line length"
+msgstr "Line length"
+
+#: ../../documentation.rst:87
+msgid "Make all your changes - please keep our commit rules in mind (:ref:`prepare_commit`). This mainly applies to proper commit messages describing your change (how and why). Please check out the documentation of Sphinx-doc_ or reStructuredText_ if you are not familiar with it. This is used for writing our docs. Additional directives how to write in RST can be obtained from reStructuredTextDirectives_."
+msgstr "Make all your changes - please keep our commit rules in mind (:ref:`prepare_commit`). This mainly applies to proper commit messages describing your change (how and why). Please check out the documentation of Sphinx-doc_ or reStructuredText_ if you are not familiar with it. This is used for writing our docs. Additional directives how to write in RST can be obtained from reStructuredTextDirectives_."
+
+#: ../../documentation.rst:242
+msgid "Multicast MAC-Addresses: ``90-10-00`` to ``90-10-FF``"
+msgstr "Multicast MAC-Addresses: ``90-10-00`` to ``90-10-FF``"
+
+#: ../../documentation.rst:231
+msgid "Note the following RFCs (:rfc:`5737`, :rfc:`3849`, :rfc:`5389` and :rfc:`7042`), which describe the reserved public IP addresses and autonomous system numbers for the documentation:"
+msgstr "Note the following RFCs (:rfc:`5737`, :rfc:`3849`, :rfc:`5389` and :rfc:`7042`), which describe the reserved public IP addresses and autonomous system numbers for the documentation:"
+
+#: ../../documentation.rst:118
+msgid "Once pull requests have been approved, you may want to locally update your forked repository too. First you'll have to add a second remote called `upstream` which points to our main repository. ``$ git remote add upstream https://github.com/vyos/vyos-documentation.git``"
+msgstr "Once pull requests have been approved, you may want to locally update your forked repository too. First you'll have to add a second remote called `upstream` which points to our main repository. ``$ git remote add upstream https://github.com/vyos/vyos-documentation.git``"
+
+#: ../../documentation.rst:429
+msgid "Operation mode commands that do not fit in a related configuration mode command must be documented in this part of the documentation."
+msgstr "Operation mode commands that do not fit in a related configuration mode command must be documented in this part of the documentation."
+
+#: ../../documentation.rst:427
+msgid "Operation mode pages"
+msgstr "Operation mode pages"
+
+#: ../../documentation.rst:385
+msgid "Page content"
+msgstr "Page content"
+
+#: ../../documentation.rst:244
+msgid "Please do not use other public address space."
+msgstr "Please do not use other public address space."
+
+#: ../../documentation.rst:47
+msgid "Properly quote commands, filenames and brief code snippets with double backticks."
+msgstr "Properly quote commands, filenames and brief code snippets with double backticks."
+
+#: ../../documentation.rst:112
+msgid "Push commits to your GitHub project: ``$ git push -u origin <branch-name>``"
+msgstr "Push commits to your GitHub project: ``$ git push -u origin <branch-name>``"
+
+#: ../../documentation.rst:420
+msgid "Related operation command must be documented in the next part of the article. Use ``::opcmd..`` for these commands."
+msgstr "Related operation command must be documented in the next part of the article. Use ``::opcmd..`` for these commands."
+
+#: ../../documentation.rst:262
+msgid "Sometimes it is necessary to provide real IP addresses like in the :ref:`examples`. For this, please use the sphinx comment syntax ``.. stop_vyoslinter`` to stop the linter and ``.. start_vyoslinter`` to start."
+msgstr "Sometimes it is necessary to provide real IP addresses like in the :ref:`examples`. For this, please use the sphinx comment syntax ``.. stop_vyoslinter`` to stop the linter and ``.. start_vyoslinter`` to start."
+
+#: ../../documentation.rst:147
+msgid "Style Guide"
+msgstr "Style Guide"
+
+#: ../../documentation.rst:114
+msgid "Submit pull-request. In GitHub visit the main repository and you should see a banner suggesting to make a pull request. Fill out the form and describe what you do."
+msgstr "Submit pull-request. In GitHub visit the main repository and you should see a banner suggesting to make a pull request. Fill out the form and describe what you do."
+
+#: ../../documentation.rst:153
+msgid "TOC Level"
+msgstr "TOC Level"
+
+#: ../../documentation.rst:38
+msgid "Take a look at the :doc:`/documentation` page for an intricate explanation of the documentation process."
+msgstr "Take a look at the :doc:`/documentation` page for an intricate explanation of the documentation process."
+
+#: ../../documentation.rst:60
+msgid "The Forking Workflow is fundamentally different from other popular Git workflows. Instead of using a single server-side repository to act as the \"central\" codebase, it gives every developer their own server-side repository. This means that each contributor has not one, but two Git repositories: a private local one and a public server-side one."
+msgstr "The Forking Workflow is fundamentally different from other popular Git workflows. Instead of using a single server-side repository to act as the \"central\" codebase, it gives every developer their own server-side repository. This means that each contributor has not one, but two Git repositories: a private local one and a public server-side one."
+
+#: ../../documentation.rst:410
+msgid "The article starts with a short introduction about the command or the technology. Please include some helpful links or background information."
+msgstr "The article starts with a short introduction about the command or the technology. Please include some helpful links or background information."
+
+#: ../../documentation.rst:401
+msgid "The configuration mode folder and the articles cover the specific level of the commands. The exact level depends on the command. This should provide stability for URLs used in the forum or blogpost."
+msgstr "The configuration mode folder and the articles cover the specific level of the commands. The exact level depends on the command. This should provide stability for URLs used in the forum or blogpost."
+
+#: ../../documentation.rst:387
+msgid "The documentation has 3 different types of pages. The same kind of pages must have the same structure to achieve a recognition factor."
+msgstr "The documentation has 3 different types of pages. The same kind of pages must have the same structure to achieve a recognition factor."
+
+#: ../../documentation.rst:25
+msgid "The documentation source is kept in the Git repository at https://github.com/vyos/vyos-documentation and you can follow the instructions in the README.md_ to build and test your changes."
+msgstr "The documentation source is kept in the Git repository at https://github.com/vyos/vyos-documentation and you can follow the instructions in the README.md_ to build and test your changes."
+
+#: ../../documentation.rst:41
+msgid "The following is a quick summary of the rules:"
+msgstr "The following is a quick summary of the rules:"
+
+#: ../../documentation.rst:66
+msgid "The main advantage of the Forking Workflow is that contributions can be integrated without the need for everybody to push to a single central repository. Developers push to their own server-side repositories, and only the project maintainer can push to the official repository. This allows the maintainer to accept commits from any developer without giving them write access to the official codebase."
+msgstr "The main advantage of the Forking Workflow is that contributions can be integrated without the need for everybody to push to a single central repository. Developers push to their own server-side repositories, and only the project maintainer can push to the official repository. This allows the maintainer to accept commits from any developer without giving them write access to the official codebase."
+
+#: ../../documentation.rst:199
+msgid "The plugin will warn on build if a headline has a duplicate name in the same document. To prevent this warning, you have to put a custom link on top of the headline."
+msgstr "The plugin will warn on build if a headline has a duplicate name in the same document. To prevent this warning, you have to put a custom link on top of the headline."
+
+#: ../../documentation.rst:35
+msgid "There are a few things to keep in mind when contributing to the documentation, for the sake of consistency and readability."
+msgstr "There are a few things to keep in mind when contributing to the documentation, for the sake of consistency and readability."
+
+#: ../../documentation.rst:299
+msgid "To extract a defaultvalue from the XML definitions add a ``:defaultvalue:`` to ``.. cfgcmd::`` directive. To have this feature locally, the vyos-1x submodule must be initialized before. Please be aware to not update the submodule in your PR."
+msgstr "To extract a defaultvalue from the XML definitions add a ``:defaultvalue:`` to ``.. cfgcmd::`` directive. To have this feature locally, the vyos-1x submodule must be initialized before. Please be aware to not update the submodule in your PR."
+
+#: ../../documentation.rst:337
+msgid "To minimize redundancy, there is a special include directive. It includes a txt file and replace the ``{{ var0 }}`` - ``{{ var9 }}`` with the correct value."
+msgstr "To minimize redundancy, there is a special include directive. It includes a txt file and replace the ``{{ var0 }}`` - ``{{ var9 }}`` with the correct value."
+
+#: ../../documentation.rst:46
+msgid "Try not to exceed 80 characters per line, but don't break URLs over this."
+msgstr "Try not to exceed 80 characters per line, but don't break URLs over this."
+
+#: ../../documentation.rst:241
+msgid "Unicast MAC Addresses: ``00-53-00`` to ``00-53-FF``"
+msgstr "Unicast MAC Addresses: ``00-53-00`` to ``00-53-FF``"
+
+#: ../../documentation.rst:73
+msgid "Updates to our documentation should be delivered by a GitHub pull-request. This requires you already have a GitHub account."
+msgstr "Updates to our documentation should be delivered by a GitHub pull-request. This requires you already have a GitHub account."
+
+#: ../../documentation.rst:43
+msgid "Use American English at all times. It's always a good idea to run your text through a grammar and spell checker, such as `Grammarly`_."
+msgstr "Use American English at all times. It's always a good idea to run your text through a grammar and spell checker, such as `Grammarly`_."
+
+#: ../../documentation.rst:48
+msgid "Use literal blocks for longer snippets."
+msgstr "Use literal blocks for longer snippets."
+
+#: ../../documentation.rst:99
+msgid "View modified files by calling ``$ git status``. You will get an overview of all files modified by you. You can add individual files to the Git Index in the next step."
+msgstr "View modified files by calling ``$ git status``. You will get an overview of all files modified by you. You can add individual files to the Git Index in the next step."
+
+#: ../../documentation.rst:20
+msgid "VyOS documentation is written in reStructuredText and generated to Read the Docs pages with Sphinx, as per the Python tradition, as well as PDF files for offline use through LaTeX. We welcome all sorts of contributions to the documentation. Not just new additions but also corrections to existing documentation."
+msgstr "VyOS documentation is written in reStructuredText and generated to Read the Docs pages with Sphinx, as per the Python tradition, as well as PDF files for offline use through LaTeX. We welcome all sorts of contributions to the documentation. Not just new additions but also corrections to existing documentation."
+
+#: ../../documentation.rst:9
+msgid "We encourage every VyOS user to help us improve our documentation as we have a deficit like most software projects.  This not only helps you when reading but also everyone else."
+msgstr "We encourage every VyOS user to help us improve our documentation as we have a deficit like most software projects.  This not only helps you when reading but also everyone else."
+
+#: ../../documentation.rst:155
+msgid "We use the following syntax for Headlines."
+msgstr "We use the following syntax for Headlines."
+
+#: ../../documentation.rst:277
+msgid "When documenting CLI commands, use the ``.. cfgcmd::`` directive for all configuration mode commands. An explanation of the described command should be added below this statement. Replace all variable contents with <value> or something similar."
+msgstr "When documenting CLI commands, use the ``.. cfgcmd::`` directive for all configuration mode commands. An explanation of the described command should be added below this statement. Replace all variable contents with <value> or something similar."
+
+#: ../../documentation.rst:316
+msgid "When documenting operational level commands, use the ``.. opcmd::`` directive. An explanation of the described command should be added below this statement."
+msgstr "When documenting operational level commands, use the ``.. opcmd::`` directive. An explanation of the described command should be added below this statement."
+
+#: ../../documentation.rst:51
+msgid "When in doubt, follow the style of existing documentation."
+msgstr "When in doubt, follow the style of existing documentation."
+
+#: ../../documentation.rst:375
+msgid "When referencing to VyOS Phabricator Tasks, there is a custom Sphinx Markup command called ``vytask`` that automatically renders to a proper Phabricator URL. This is heavily used in the :ref:`release-notes` section."
+msgstr "When referencing to VyOS Phabricator Tasks, there is a custom Sphinx Markup command called ``vytask`` that automatically renders to a proper Phabricator URL. This is heavily used in the :ref:`release-notes` section."
+
+#: ../../documentation.rst:319
+msgid "With those custom commands, it is possible to render them in a more descriptive way in the resulting HTML/PDF manual."
+msgstr "With those custom commands, it is possible to render them in a more descriptive way in the resulting HTML/PDF manual."
+
+#: ../../documentation.rst:282
+msgid "With those custom commands, it will be possible to render them in a more descriptive way in the resulting HTML/PDF manual."
+msgstr "With those custom commands, it will be possible to render them in a more descriptive way in the resulting HTML/PDF manual."
+
+#: ../../documentation.rst:7
+msgid "Write Documentation"
+msgstr "Write Documentation"
+
+#: ../../documentation.rst:29
+msgid "You can either install Sphinx (and TeX Live for PDF output) and build the documentation locally, or use the Dockerfile_ to build it in a container."
+msgstr "You can either install Sphinx (and TeX Live for PDF output) and build the documentation locally, or use the Dockerfile_ to build it in a container."
+
+#: ../../documentation.rst:133
+msgid "Your remote repo on Github is called ``origin``, while the original repo you have forked is called ``upstream``. Now you can locally update your forked repo."
+msgstr "Your remote repo on Github is called ``origin``, while the original repo you have forked is called ``upstream``. Now you can locally update your forked repo."
+
+#: ../../documentation.rst:235
+msgid "``192.0.2.0/24``"
+msgstr "``192.0.2.0/24``"
+
+#: ../../documentation.rst:236
+msgid "``198.51.100.0/24``"
+msgstr "``198.51.100.0/24``"
+
+#: ../../documentation.rst:238
+msgid "``2001:db8::/32``"
+msgstr "``2001:db8::/32``"
+
+#: ../../documentation.rst:237
+msgid "``203.0.113.0/24``"
+msgstr "``203.0.113.0/24``"
+
+#: ../../documentation.rst:194
+msgid "``:ref:`Check out VLAN<configuration/interfaces/ethernet:vlan>``"
+msgstr "``:ref:`Check out VLAN<configuration/interfaces/ethernet:vlan>``"
+
+#: ../../documentation.rst:190
+msgid "``:ref:`configuration/interfaces/ethernet:vlan``"
+msgstr "``:ref:`configuration/interfaces/ethernet:vlan``"
+
+#: ../../documentation.rst:407
+msgid "``set firewall zone`` is written in ``firewall/zone.rst``"
+msgstr "``set firewall zone`` is written in ``firewall/zone.rst``"
+
+#: ../../documentation.rst:408
+msgid "``set interfaces ethernet`` is written in ``interfaces/ethernet.rst``"
+msgstr "``set interfaces ethernet`` is written in ``interfaces/ethernet.rst``"
+
+#: ../../documentation.rst:275
+msgid "cfgcmd"
+msgstr "cfgcmd"
+
+#: ../../documentation.rst:335
+msgid "cmdinclude"
+msgstr "cmdinclude"
+
+#: ../../documentation.rst:197
+msgid "handle build errors"
+msgstr "handle build errors"
+
+#: ../../documentation.rst:314
+msgid "opcmd"
+msgstr "opcmd"
+
+#: ../../documentation.rst:346
+msgid "the content of interface-address.txt looks like this"
+msgstr "the content of interface-address.txt looks like this"
+
+#: ../../documentation.rst:192
+msgid "to use an alternative hyperlink use it this way:"
+msgstr "to use an alternative hyperlink use it this way:"
+
+#: ../../documentation.rst:373
+msgid "vytask"
+msgstr "vytask"
diff --git a/docs/_locale/de/index.pot b/docs/_locale/de/index.pot
new file mode 100644
index 00000000..7c2896bd
--- /dev/null
+++ b/docs/_locale/de/index.pot
@@ -0,0 +1,89 @@
+msgid ""
+msgstr ""
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Localazy (https://localazy.com)\n"
+"Project-Id-Version: VyOS Documentation\n"
+"Language: de\n"
+"Plural-Forms: nplurals=2; plural=(n==1) ? 0 : 1;\n"
+
+#: ../../index.rst:0
+msgid "Add missing parts or improve the :ref:`Documentation<documentation:Write Documentation>`."
+msgstr "Add missing parts or improve the :ref:`Documentation<documentation:Write Documentation>`."
+
+#: ../../index.rst:70
+msgid "Adminguide"
+msgstr "Adminguide"
+
+#: ../../index.rst:31
+msgid "Automate"
+msgstr "Automate"
+
+#: ../../index.rst:23
+msgid "Configuration and Operation"
+msgstr "Configuration and Operation"
+
+#: ../../index.rst:44
+msgid "Contribute and Community"
+msgstr "Contribute and Community"
+
+#: ../../index.rst:83
+msgid "Development"
+msgstr "Development"
+
+#: ../../index.rst:0
+msgid "Discuss in `Slack <https://slack.vyos.io/>`_ or the `Forum <https://forum.vyos.io>`_."
+msgstr "Discuss in `Slack <https://slack.vyos.io/>`_ or the `Forum <https://forum.vyos.io>`_."
+
+#: ../../index.rst:38
+msgid "Examples"
+msgstr "Examples"
+
+#: ../../index.rst:61
+msgid "First Steps"
+msgstr "First Steps"
+
+#: ../../index.rst:11
+msgid "Get / Build VyOS"
+msgstr "Get / Build VyOS"
+
+#: ../../index.rst:40
+msgid "Get some inspiration from the :ref:`Configuration Blueprints<configexamples/index:Configuration Blueprints>` to build your infrastructure."
+msgstr "Get some inspiration from the :ref:`Configuration Blueprints<configexamples/index:Configuration Blueprints>` to build your infrastructure."
+
+#: ../../index.rst:16
+msgid "Install VyOS"
+msgstr "Install VyOS"
+
+#: ../../index.rst:33
+msgid "Integrate VyOS in your automation Workflow with :ref:`Ansible<vyos-ansible>`, have your own :ref:`local scripts<command-scripting>`, or configure VyOS with the :ref:`HTTPS-API<vyosapi>`."
+msgstr "Integrate VyOS in your automation Workflow with :ref:`Ansible<vyos-ansible>`, have your own :ref:`local scripts<command-scripting>`, or configure VyOS with the :ref:`HTTPS-API<vyosapi>`."
+
+#: ../../index.rst:96
+msgid "Misc"
+msgstr "Misc"
+
+#: ../../index.rst:0
+msgid "Or you can pick up a `Task <https://vyos.dev/>`_ and fix the :ref:`code<contributing/development:development>`."
+msgstr "Or you can pick up a `Task <https://vyos.dev/>`_ and fix the :ref:`code<contributing/development:development>`."
+
+#: ../../index.rst:13
+msgid "Quickly :ref:`Build<contributing/build-vyos:build vyos>` your own Image or take a look at how to :ref:`download<installation/install:download>` a free or supported version."
+msgstr "Quickly :ref:`Build<contributing/build-vyos:build vyos>` your own Image or take a look at how to :ref:`download<installation/install:download>` a free or supported version."
+
+#: ../../index.rst:18
+msgid "Read about how to install VyOS on :ref:`Bare Metal<installation/install:installation>` or in a :ref:`Virtual Environment<installation/virtual/index:running vyos in virtual environments>` and how to use an image with the usual :ref:`cloud<installation/cloud/index:running VyOS in Cloud Environments>` providers"
+msgstr "Read about how to install VyOS on :ref:`Bare Metal<installation/install:installation>` or in a :ref:`Virtual Environment<installation/virtual/index:running vyos in virtual environments>` and how to use an image with the usual :ref:`cloud<installation/cloud/index:running VyOS in Cloud Environments>` providers"
+
+#: ../../index.rst:0
+msgid "There are many ways to contribute to the project."
+msgstr "There are many ways to contribute to the project."
+
+#: ../../index.rst:25
+msgid "Use the :ref:`Quickstart Guide<quick-start:Quick Start>`, to have a fast overview. Or go deeper and set up :ref:`advanced routing<configuration/protocols/index:protocols>`, :ref:`VRFs<configuration/vrf/index:vrf>`, or :ref:`VPNs<configuration/vpn/index:vpn>` for example."
+msgstr "Use the :ref:`Quickstart Guide<quick-start:Quick Start>`, to have a fast overview. Or go deeper and set up :ref:`advanced routing<configuration/protocols/index:protocols>`, :ref:`VRFs<configuration/vrf/index:vrf>`, or :ref:`VPNs<configuration/vpn/index:vpn>` for example."
+
+#: ../../index.rst:5
+msgid "VyOS User Guide"
+msgstr "VyOS User Guide"
diff --git a/docs/_locale/de/installation.pot b/docs/_locale/de/installation.pot
new file mode 100644
index 00000000..55dbd7c8
--- /dev/null
+++ b/docs/_locale/de/installation.pot
@@ -0,0 +1,1976 @@
+msgid ""
+msgstr ""
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Localazy (https://localazy.com)\n"
+"Project-Id-Version: VyOS Documentation\n"
+"Language: de\n"
+"Plural-Forms: nplurals=2; plural=(n==1) ? 0 : 1;\n"
+
+#: ../../installation/virtual/docker.rst:62
+msgid "$ mkdir rootfs $ sudo mount -o loop vyos-1.4-rolling-202308240020-amd64.iso rootfs $ sudo apt-get install -y squashfs-tools $ mkdir unsquashfs $ sudo unsquashfs -f -d unsquashfs/ rootfs/live/filesystem.squashfs $ sudo tar -C unsquashfs -c . | docker import - vyos:1.4-rolling-202111281249 $ sudo umount rootfs $ cd .. $ sudo rm -rf vyos $ docker run -d --rm --name vyos --privileged -v /lib/modules:/lib/modules \\ > vyos:1.4-rolling-202111281249 /sbin/init $ docker exec -ti vyos su - vyos"
+msgstr "$ mkdir rootfs $ sudo mount -o loop vyos-1.4-rolling-202308240020-amd64.iso rootfs $ sudo apt-get install -y squashfs-tools $ mkdir unsquashfs $ sudo unsquashfs -f -d unsquashfs/ rootfs/live/filesystem.squashfs $ sudo tar -C unsquashfs -c . | docker import - vyos:1.4-rolling-202111281249 $ sudo umount rootfs $ cd .. $ sudo rm -rf vyos $ docker run -d --rm --name vyos --privileged -v /lib/modules:/lib/modules \\ > vyos:1.4-rolling-202111281249 /sbin/init $ docker exec -ti vyos su - vyos"
+
+#: ../../installation/virtual/gns3.rst:169
+msgid "**Advanced** settings tab: Mark the checkbox **Use as a linked base VM** and click ``OK`` to save the changes."
+msgstr "**Advanced** settings tab: Mark the checkbox **Use as a linked base VM** and click ``OK`` to save the changes."
+
+#: ../../installation/virtual/gns3.rst:160
+msgid "**CD/DVD** tab: Unmount the installation image file by clearing the **Image** entry field."
+msgstr "**CD/DVD** tab: Unmount the installation image file by clearing the **Image** entry field."
+
+#: ../../installation/virtual/gns3.rst:142
+msgid "**Delete the VM** from the GNS3 project."
+msgstr "**Delete the VM** from the GNS3 project."
+
+#: ../../installation/install.rst:33
+msgid "**Early Production Access**"
+msgstr "**Early Production Access**"
+
+#: ../../installation/install.rst:538
+msgid "**First** run a web server - you can use a simple one like `Python's SimpleHTTPServer`_ and start serving the `filesystem.squashfs` file. The file can be found inside the `/live` directory of the extracted contents of the ISO file."
+msgstr "**First** run a web server - you can use a simple one like `Python's SimpleHTTPServer`_ and start serving the `filesystem.squashfs` file. The file can be found inside the `/live` directory of the extracted contents of the ISO file."
+
+#: ../../installation/virtual/gns3.rst:156
+msgid "**General settings** tab: Set the boot priority to **HDD**"
+msgstr "**General settings** tab: Set the boot priority to **HDD**"
+
+#: ../../installation/install.rst:37
+msgid "**Long-Term Support**"
+msgstr "**Long-Term Support**"
+
+#: ../../installation/install.rst:21
+msgid "**Nightly (Beta)**"
+msgstr "**Nightly (Beta)**"
+
+#: ../../installation/install.rst:17
+msgid "**Nightly (Current)**"
+msgstr "**Nightly (Current)**"
+
+#: ../../installation/install.rst:29
+msgid "**Release Candidate**"
+msgstr "**Release Candidate**"
+
+#: ../../installation/install.rst:432
+msgid "**Requirements**"
+msgstr "**Requirements**"
+
+#: ../../installation/install.rst:543
+msgid "**Second**, edit the configuration file of the :ref:`install_from_tftp` so that it shows the correct URL at ``fetch=http://<address_of_your_HTTP_server>/filesystem.squashfs``."
+msgstr "**Second**, edit the configuration file of the :ref:`install_from_tftp` so that it shows the correct URL at ``fetch=http://<address_of_your_HTTP_server>/filesystem.squashfs``."
+
+#: ../../installation/install.rst:25
+msgid "**Snapshot**"
+msgstr "**Snapshot**"
+
+#: ../../installation/install.rst:300
+msgid "**Warning**: This will destroy all data on the USB drive!"
+msgstr "**Warning**: This will destroy all data on the USB drive!"
+
+#: ../../installation/vyos-on-baremetal.rst:20
+msgid "1x Crucial CT4G4DFS824A (4GB DDR4 RAM 2400 MT/s, PC4-19200)"
+msgstr "1x Crucial CT4G4DFS824A (4GB DDR4 RAM 2400 MT/s, PC4-19200)"
+
+#: ../../installation/vyos-on-baremetal.rst:102
+msgid "1x Kingston SUV500MS/120G"
+msgstr "1x Kingston SUV500MS/120G"
+
+#: ../../installation/vyos-on-baremetal.rst:21
+msgid "1x SanDisk Ultra Fit 32GB (USB-A 3.0 SDCZ43-032G-G46 mass storage for OS)"
+msgstr "1x SanDisk Ultra Fit 32GB (USB-A 3.0 SDCZ43-032G-G46 mass storage for OS)"
+
+#: ../../installation/vyos-on-baremetal.rst:18
+msgid "1x Supermicro A2SDi-2C-HLN4F (Intel Atom C3338, 2C/2T, 4MB cache, Quad LAN with Intel C3000 SoC 1GbE)"
+msgstr "1x Supermicro A2SDi-2C-HLN4F (Intel Atom C3338, 2C/2T, 4MB cache, Quad LAN with Intel C3000 SoC 1GbE)"
+
+#: ../../installation/vyos-on-baremetal.rst:16
+msgid "1x Supermicro CSE-505-203B (19\" 1U chassis, inkl. 200W PSU)"
+msgstr "1x Supermicro CSE-505-203B (19\" 1U chassis, inkl. 200W PSU)"
+
+#: ../../installation/vyos-on-baremetal.rst:30
+msgid "1x Supermicro MCP-120-00063-0N (Riser Card Bracket)"
+msgstr "1x Supermicro MCP-120-00063-0N (Riser Card Bracket)"
+
+#: ../../installation/vyos-on-baremetal.rst:17
+msgid "1x Supermicro MCP-260-00085-0B (I/O Shield for A2SDi-2C-HLN4F)"
+msgstr "1x Supermicro MCP-260-00085-0B (I/O Shield for A2SDi-2C-HLN4F)"
+
+#: ../../installation/vyos-on-baremetal.rst:22
+msgid "1x Supermicro MCP-320-81302-0B (optional FAN tray)"
+msgstr "1x Supermicro MCP-320-81302-0B (optional FAN tray)"
+
+#: ../../installation/vyos-on-baremetal.rst:29
+msgid "1x Supermicro RSC-RR1U-E8 (Riser Card)"
+msgstr "1x Supermicro RSC-RR1U-E8 (Riser Card)"
+
+#: ../../installation/vyos-on-baremetal.rst:103
+msgid "1x VARIA Group Item 326745 19\" dual rack for APU4"
+msgstr "1x VARIA Group Item 326745 19\" dual rack for APU4"
+
+#: ../../installation/vyos-on-baremetal.rst:101
+msgid "1x apu4c4 = 4 i211AT LAN / AMD GX-412TC CPU / 4 GB DRAM / dual SIM"
+msgstr "1x apu4c4 = 4 i211AT LAN / AMD GX-412TC CPU / 4 GB DRAM / dual SIM"
+
+#: ../../installation/vyos-on-baremetal.rst:91
+msgid "2 miniPCI express (one with SIM socket for 3G modem)."
+msgstr "2 miniPCI express (one with SIM socket for 3G modem)."
+
+#: ../../installation/vyos-on-baremetal.rst:89
+msgid "4 GB DDR3-1333 DRAM, with optional ECC support"
+msgstr "4 GB DDR3-1333 DRAM, with optional ECC support"
+
+#: ../../installation/vyos-on-baremetal.rst:92
+msgid "4 Gigabit Ethernet channels using Intel i211AT NICs"
+msgstr "4 Gigabit Ethernet channels using Intel i211AT NICs"
+
+#: ../../installation/vyos-on-baremetal.rst:87
+msgid "AMD Embedded G series GX-412TC, 1 GHz quad Jaguar core with 64 bit and AES-NI support, 32K data + 32K instruction cache per core, shared 2MB L2 cache."
+msgstr "AMD Embedded G series GX-412TC, 1 GHz quad Jaguar core with 64 bit and AES-NI support, 32K data + 32K instruction cache per core, shared 2MB L2 cache."
+
+#: ../../installation/vyos-on-baremetal.rst:None
+msgid "APU4 custom VyOS powder coat"
+msgstr "APU4 custom VyOS powder coat"
+
+#: ../../installation/vyos-on-baremetal.rst:None
+#: ../../installation/vyos-on-baremetal.rst:None
+msgid "APU4 desktop back"
+msgstr "APU4 desktop back"
+
+#: ../../installation/vyos-on-baremetal.rst:None
+#: ../../installation/vyos-on-baremetal.rst:None
+msgid "APU4 desktop closed"
+msgstr "APU4 desktop closed"
+
+#: ../../installation/vyos-on-baremetal.rst:None
+msgid "APU4 rack closed"
+msgstr "APU4 rack closed"
+
+#: ../../installation/vyos-on-baremetal.rst:None
+msgid "APU4 rack front"
+msgstr "APU4 rack front"
+
+#: ../../installation/vyos-on-baremetal.rst:None
+msgid "APU4 rack module #1"
+msgstr "APU4 rack module #1"
+
+#: ../../installation/vyos-on-baremetal.rst:None
+msgid "APU4 rack module #2"
+msgstr "APU4 rack module #2"
+
+#: ../../installation/vyos-on-baremetal.rst:None
+msgid "APU4 rack module #3 with PSU"
+msgstr "APU4 rack module #3 with PSU"
+
+#: ../../installation/virtual/gns3.rst:19
+msgid "A VyOS installation image (.iso file). You can find how to get it on the :ref:`installation` page"
+msgstr "A VyOS installation image (.iso file). You can find how to get it on the :ref:`installation` page"
+
+#: ../../installation/install.rst:487
+msgid "A directory named pxelinux.cfg which must contain the configuration file. We will use the configuration_ file shown below, which we named default_."
+msgstr "A directory named pxelinux.cfg which must contain the configuration file. We will use the configuration_ file shown below, which we named default_."
+
+#: ../../installation/install.rst:25
+msgid "A particularly stable release frozen from nightly each month after manual testing. Still contains experimental code."
+msgstr "A particularly stable release frozen from nightly each month after manual testing. Still contains experimental code."
+
+#: ../../installation/install.rst:269
+msgid "A permanent VyOS installation always requires to go first through a live installation."
+msgstr "A permanent VyOS installation always requires to go first through a live installation."
+
+#: ../../installation/virtual/gns3.rst:22
+msgid "A working GNS3 installation. For further information see the `GNS3 documentation <https://docs.gns3.com/>`__."
+msgstr "A working GNS3 installation. For further information see the `GNS3 documentation <https://docs.gns3.com/>`__."
+
+#: ../../installation/vyos-on-baremetal.rst:90
+msgid "About 6 to 10W of 12V DC power depending on CPU load"
+msgstr "About 6 to 10W of 12V DC power depending on CPU load"
+
+#: ../../installation/cloud/azure.rst:55
+msgid "Absorbing Routes"
+msgstr "Absorbing Routes"
+
+#: ../../installation/install.rst:15
+msgid "Access to Images"
+msgstr "Access to Images"
+
+#: ../../installation/install.rst:15
+msgid "Access to Source"
+msgstr "Access to Source"
+
+#: ../../installation/vyos-on-baremetal.rst:368
+msgid "Acrosser AND-J190N1"
+msgstr "Acrosser AND-J190N1"
+
+#: ../../installation/cloud/azure.rst:45
+msgid "Add interface"
+msgstr "Add interface"
+
+#: ../../installation/cloud/azure.rst:61
+msgid "Add one or more routes for networks you want to pass through the VyOS VM. Next hop type **Virtual Appliance** with the **Next Hop Address** of the VyOS ``LAN`` interface."
+msgstr "Add one or more routes for networks you want to pass through the VyOS VM. Next hop type **Virtual Appliance** with the **Next Hop Address** of the VyOS ``LAN`` interface."
+
+#: ../../installation/cloud/aws.rst:27
+msgid "Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skeep this step."
+msgstr "Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skeep this step."
+
+#: ../../installation/vyos-on-baremetal.rst:394
+msgid "Advanced > Serial Port Console Redirection > Console Redirection Settings:"
+msgstr "Advanced > Serial Port Console Redirection > Console Redirection Settings:"
+
+#: ../../installation/virtual/gns3.rst:139
+msgid "After a successful installation, shutdown the VM with the ``poweroff`` command."
+msgstr "After a successful installation, shutdown the VM with the ``poweroff`` command."
+
+#: ../../installation/cloud/gcp.rst:41
+msgid "After few seconds click to ``instance``"
+msgstr "After few seconds click to ``instance``"
+
+#: ../../installation/virtual/libvirt.rst:50
+msgid "After installation - exit from the console using the key combination ``Ctrl + ]`` and reboot the system."
+msgstr "After installation - exit from the console using the key combination ``Ctrl + ]`` and reboot the system."
+
+#: ../../installation/virtual/proxmox.rst:47
+msgid "After installation has completed, remove the installation iso using the GUI or ``qm set 200 --ide2 none``."
+msgstr "After installation has completed, remove the installation iso using the GUI or ``qm set 200 --ide2 none``."
+
+#: ../../installation/update.rst:81
+msgid "After reboot you might want to verify the version you are running with the :opcmd:`show version` command."
+msgstr "After reboot you might want to verify the version you are running with the :opcmd:`show version` command."
+
+#: ../../installation/install.rst:413
+msgid "After the installation is completed, remove the live USB stick or CD."
+msgstr "After the installation is completed, remove the live USB stick or CD."
+
+#: ../../installation/migrate-from-vyatta.rst:20
+msgid "Also, in Vyatta Core 6.5 remote access VPN interfaces have been renamed from ``pppX``  to ``l2tpX`` and ``pptpX``. If you are using zone based firewalling in Vyatta Core pre-6.5 versions, make sure to change interface names in rules for remote access VPN."
+msgstr "Also, in Vyatta Core 6.5 remote access VPN interfaces have been renamed from ``pppX``  to ``l2tpX`` and ``pptpX``. If you are using zone based firewalling in Vyatta Core pre-6.5 versions, make sure to change interface names in rules for remote access VPN."
+
+#: ../../installation/cloud/aws.rst:3
+msgid "Amazon AWS"
+msgstr "Amazon AWS"
+
+#: ../../installation/cloud/aws.rst:53
+msgid "Amazon CloudWatch Agent Usage"
+msgstr "Amazon CloudWatch Agent Usage"
+
+#: ../../installation/install.rst:450
+msgid "An IP address"
+msgstr "An IP address"
+
+#: ../../installation/vyos-on-baremetal.rst:334
+msgid "An external RS232 serial port is available, internally a GPIO header as well. It does have Realtek based audio on board for some reason, but you can disable that. Booting works on both USB2 and USB3 ports. Switching between serial BIOS mode and HDMI BIOS mode depends on what is connected at startup; it goes into serial mode if you disconnect HDMI and plug in serial, in all other cases it's HDMI mode."
+msgstr "An external RS232 serial port is available, internally a GPIO header as well. It does have Realtek based audio on board for some reason, but you can disable that. Booting works on both USB2 and USB3 ports. Switching between serial BIOS mode and HDMI BIOS mode depends on what is connected at startup; it goes into serial mode if you disconnect HDMI and plug in serial, in all other cases it's HDMI mode."
+
+#: ../../installation/install.rst:551
+msgid "And **third**, restart the TFTP service. If you are using VyOS as your TFTP Server, you can restart the service with ``sudo service tftpd-hpa restart``."
+msgstr "And **third**, restart the TFTP service. If you are using VyOS as your TFTP Server, you can restart the service with ``sudo service tftpd-hpa restart``."
+
+#: ../../installation/install.rst:240
+msgid "Another issue of GPG is that it creates a /root/.gnupg directory just for release checking. The dir is small so the fact that it's never used again is an aesthetic problem, but we've had that process fail in the past. But, small key size of the Ed25519 algorithm allows passing public keys in command line arguments, so verification process can be completely stateless:"
+msgstr "Another issue of GPG is that it creates a /root/.gnupg directory just for release checking. The dir is small so the fact that it's never used again is an aesthetic problem, but we've had that process fail in the past. But, small key size of the Ed25519 algorithm allows passing public keys in command line arguments, so verification process can be completely stateless:"
+
+#: ../../installation/install.rst:228
+msgid "Another point is that we are using RSA now, which requires absurdly large keys to be secure."
+msgstr "Another point is that we are using RSA now, which requires absurdly large keys to be secure."
+
+#: ../../installation/vyos-on-baremetal.rst:201
+msgid "As the APU board itself still used a serial setting of 115200 8N1 it is strongly recommended that you change the VyOS serial interface settings after your first successful boot."
+msgstr "As the APU board itself still used a serial setting of 115200 8N1 it is strongly recommended that you change the VyOS serial interface settings after your first successful boot."
+
+#: ../../installation/vyos-on-baremetal.rst:82
+msgid "As this platform seems to be quite common in terms of noise, cost, power and performance it makes sense to write a small installation manual."
+msgstr "As this platform seems to be quite common in terms of noise, cost, power and performance it makes sense to write a small installation manual."
+
+#: ../../installation/virtual/gns3.rst:100
+msgid "At the **CD/DVD** tab click on ``Browse...`` and locate the VyOS image you want to install."
+msgstr "At the **CD/DVD** tab click on ``Browse...`` and locate the VyOS image you want to install."
+
+#: ../../installation/virtual/gns3.rst:95
+msgid "At the **HDD** tab, change the Disk interface to **sata** to speed up the boot process."
+msgstr "At the **HDD** tab, change the Disk interface to **sata** to speed up the boot process."
+
+#: ../../installation/virtual/gns3.rst:120
+msgid "At the general **Preferences** window, click ``OK`` to save and close."
+msgstr "At the general **Preferences** window, click ``OK`` to save and close."
+
+#: ../../installation/cloud/aws.rst:59
+msgid "Attach the created role to your VyOS :abbr:`EC2 (Elastic Compute Cloud)` instance."
+msgstr "Attach the created role to your VyOS :abbr:`EC2 (Elastic Compute Cloud)` instance."
+
+#: ../../installation/install.rst:17
+msgid "Automatically built from the current branch. Always up to date with cutting edge development but guaranteed to contain bugs."
+msgstr "Automatically built from the current branch. Always up to date with cutting edge development but guaranteed to contain bugs."
+
+#: ../../installation/install.rst:21
+msgid "Automatically built from the development branch and released alongside snapshots. Most likely contains bugs."
+msgstr "Automatically built from the development branch and released alongside snapshots. Most likely contains bugs."
+
+#: ../../installation/cloud/azure.rst:3
+msgid "Azure"
+msgstr "Azure"
+
+#: ../../installation/cloud/azure.rst:51
+msgid "Azure does not allow you attach interface when the instance in the **Running** state."
+msgstr "Azure does not allow you attach interface when the instance in the **Running** state."
+
+#: ../../installation/cloud/azure.rst:68
+msgid "Azure has a way to access the serial console of a VM, but this needs to be configured on the VyOS. It's there by default, but keep it in mind if you are replacing config.boot and rebooting: ``set system console device ttyS0 speed '9600'``"
+msgstr "Azure has a way to access the serial console of a VM, but this needs to be configured on the VyOS. It's there by default, but keep it in mind if you are replacing config.boot and rebooting: ``set system console device ttyS0 speed '9600'``"
+
+#: ../../installation/vyos-on-baremetal.rst:382
+msgid "BIOS Settings:"
+msgstr "BIOS Settings:"
+
+#: ../../installation/install.rst:334
+msgid "Before a permanent installation, VyOS requires a :ref:`live_installation`."
+msgstr "Before a permanent installation, VyOS requires a :ref:`live_installation`."
+
+#: ../../installation/vyos-on-baremetal.rst:358
+msgid "Begin rapidly pressing delete on the keyboard. The boot prompt is very quick, but with a few tries you should be able to get into the BIOS."
+msgstr "Begin rapidly pressing delete on the keyboard. The boot prompt is very quick, but with a few tries you should be able to get into the BIOS."
+
+#: ../../installation/virtual/gns3.rst:80
+msgid "Being again at the **Preferences** window, having **Qemu VMs** selected and having our new VM selected, click the ``Edit`` button."
+msgstr "Being again at the **Preferences** window, having **Qemu VMs** selected and having our new VM selected, click the ``Edit`` button."
+
+#: ../../installation/vyos-on-baremetal.rst:397
+msgid "Bits per second : 9600"
+msgstr "Bits per second : 9600"
+
+#: ../../installation/install.rst:580
+msgid "Black screen on install"
+msgstr "Black screen on install"
+
+#: ../../installation/vyos-on-baremetal.rst:362
+msgid "Boot to the VyOS installer and install as usual."
+msgstr "Boot to the VyOS installer and install as usual."
+
+#: ../../installation/vyos-on-baremetal.rst:236
+msgid "Both device types operate without any moving parts and emit zero noise."
+msgstr "Both device types operate without any moving parts and emit zero noise."
+
+#: ../../installation/install.rst:66
+msgid "Building from source"
+msgstr "Building from source"
+
+#: ../../installation/virtual/libvirt.rst:13
+msgid "CLI"
+msgstr "CLI"
+
+#: ../../installation/vyos-on-baremetal.rst:None
+msgid "CSE-505-203B Back"
+msgstr "CSE-505-203B Back"
+
+#: ../../installation/vyos-on-baremetal.rst:None
+msgid "CSE-505-203B Front"
+msgstr "CSE-505-203B Front"
+
+#: ../../installation/vyos-on-baremetal.rst:None
+msgid "CSE-505-203B Open 1"
+msgstr "CSE-505-203B Open 1"
+
+#: ../../installation/vyos-on-baremetal.rst:None
+msgid "CSE-505-203B Open 2"
+msgstr "CSE-505-203B Open 2"
+
+#: ../../installation/vyos-on-baremetal.rst:None
+msgid "CSE-505-203B Open 3"
+msgstr "CSE-505-203B Open 3"
+
+#: ../../installation/vyos-on-baremetal.rst:None
+msgid "CSE-505-203B w/ 10GE Open"
+msgstr "CSE-505-203B w/ 10GE Open"
+
+#: ../../installation/vyos-on-baremetal.rst:None
+msgid "CSE-505-203B w/ 10GE Open 1"
+msgstr "CSE-505-203B w/ 10GE Open 1"
+
+#: ../../installation/vyos-on-baremetal.rst:None
+msgid "CSE-505-203B w/ 10GE Open 2"
+msgstr "CSE-505-203B w/ 10GE Open 2"
+
+#: ../../installation/vyos-on-baremetal.rst:None
+msgid "CSE-505-203B w/ 10GE Open 3"
+msgstr "CSE-505-203B w/ 10GE Open 3"
+
+#: ../../installation/cloud/gcp.rst:37
+msgid "Change Deployment name/Zone/Machine type and click ``Deploy``"
+msgstr "Change Deployment name/Zone/Machine type and click ``Deploy``"
+
+#: ../../installation/vyos-on-baremetal.rst:360
+msgid "Chipset > South Bridge > USB Configuration: set XHCI to Disabled and USB 2.0 (EHCI) to Enabled. Without doing this, the USB drive won't boot."
+msgstr "Chipset > South Bridge > USB Configuration: set XHCI to Disabled and USB 2.0 (EHCI) to Enabled. Without doing this, the USB drive won't boot."
+
+#: ../../installation/virtual/libvirt.rst:140
+#: ../../installation/virtual/libvirt.rst:180
+msgid "Choose Memory and CPU"
+msgstr "Choose Memory and CPU"
+
+#: ../../installation/virtual/libvirt.rst:171
+msgid "Choose ``Import existing disk`` image"
+msgstr "Choose ``Import existing disk`` image"
+
+#: ../../installation/virtual/libvirt.rst:132
+msgid "Choose ``Local install media`` (ISO)"
+msgstr "Choose ``Local install media`` (ISO)"
+
+#: ../../installation/virtual/libvirt.rst:136
+msgid "Choose path to iso vyos.iso. Operating System can be any Debian based."
+msgstr "Choose path to iso vyos.iso. Operating System can be any Debian based."
+
+#: ../../installation/cloud/aws.rst:18
+msgid "Choose the instance type. Minimum recommendation start from ``m3.medium``"
+msgstr "Choose the instance type. Minimum recommendation start from ``m3.medium``"
+
+#: ../../installation/virtual/libvirt.rst:175
+msgid "Choose the path to the image ``vyos_kvm.qcow2`` that was previously downloaded . Operation System can be any Debian based."
+msgstr "Choose the path to the image ``vyos_kvm.qcow2`` that was previously downloaded . Operation System can be any Debian based."
+
+#: ../../installation/cloud/azure.rst:12
+msgid "Choose vm name, resource group, region and click **Browse all public and private images**"
+msgstr "Choose vm name, resource group, region and click **Browse all public and private images**"
+
+#: ../../installation/cloud/gcp.rst:30
+msgid "Click **Add item** and paste your public ssh key. Click ``Save``."
+msgstr "Click **Add item** and paste your public ssh key. Click ``Save``."
+
+#: ../../installation/virtual/gns3.rst:74
+msgid "Click ``Finish`` to end the **New QEMU VM template** wizard."
+msgstr "Click ``Finish`` to end the **New QEMU VM template** wizard."
+
+#: ../../installation/cloud/azure.rst:29
+msgid "Click ``Review + create``. After a few seconds your deployment will be complete"
+msgstr "Click ``Review + create``. After a few seconds your deployment will be complete"
+
+#: ../../installation/virtual/gns3.rst:88
+msgid "Click on the ``Browse...`` button to choose the **Symbol** you want to have representing your VM."
+msgstr "Click on the ``Browse...`` button to choose the **Symbol** you want to have representing your VM."
+
+#: ../../installation/cloud/aws.rst:10
+msgid "Click to ``Instances`` and ``Launch Instance``"
+msgstr "Click to ``Instances`` and ``Launch Instance``"
+
+#: ../../installation/cloud/azure.rst:33
+msgid "Click to your new vm and find out your Public IP address."
+msgstr "Click to your new vm and find out your Public IP address."
+
+#: ../../installation/install.rst:562
+msgid "Client Boot"
+msgstr "Client Boot"
+
+#: ../../installation/install.rst:434
+msgid "Clients (where VyOS is to be installed) with a PXE-enabled NIC"
+msgstr "Clients (where VyOS is to be installed) with a PXE-enabled NIC"
+
+#: ../../installation/cloud/aws.rst:88
+msgid "CloudWatchAgentServerRole is too permisive and should be used for single configuration creation and deployment. That's why after completion of step #3 higly recommended to replace instance CloudWatchAgentAdminRole role with CloudWatchAgentServerRole."
+msgstr "CloudWatchAgentServerRole is too permisive and should be used for single configuration creation and deployment. That's why after completion of step #3 higly recommended to replace instance CloudWatchAgentAdminRole role with CloudWatchAgentServerRole."
+
+#: ../../installation/cloud/aws.rst:82
+msgid "CloudWatch SSM Configuration creation"
+msgstr "CloudWatch SSM Configuration creation"
+
+#: ../../installation/install.rst:12
+msgid "Comparison of VyOS image releases"
+msgstr "Comparison of VyOS image releases"
+
+#: ../../installation/vyos-on-baremetal.rst:117
+msgid "Compex WLE900VX mini-PCIe WiFi module, only supported in mPCIe slot 1."
+msgstr "Compex WLE900VX mini-PCIe WiFi module, only supported in mPCIe slot 1."
+
+#: ../../installation/install.rst:443
+msgid "Configuration"
+msgstr "Configuration"
+
+#: ../../installation/cloud/aws.rst:32
+msgid "Configure Security Group. It's recommended that you configure ssh access only from certain address sources. Or permit any (by default)."
+msgstr "Configure Security Group. It's recommended that you configure ssh access only from certain address sources. Or permit any (by default)."
+
+#: ../../installation/install.rst:448
+msgid "Configure a DHCP server to provide the client with:"
+msgstr "Configure a DHCP server to provide the client with:"
+
+#: ../../installation/install.rst:476
+msgid "Configure a TFTP server so that it serves the following:"
+msgstr "Configure a TFTP server so that it serves the following:"
+
+#: ../../installation/cloud/aws.rst:22
+msgid "Configure instance for your requirements. Select number of instances / network / subnet"
+msgstr "Configure instance for your requirements. Select number of instances / network / subnet"
+
+#: ../../installation/vyos-on-baremetal.rst:142
+msgid "Connect serial port to a PC through null modem cable (RXD / TXD crossed over). Set terminal emulator to 115200 8N1."
+msgstr "Connect serial port to a PC through null modem cable (RXD / TXD crossed over). Set terminal emulator to 115200 8N1."
+
+#: ../../installation/virtual/libvirt.rst:36
+msgid "Connect to VM  with command ``virsh console vyos_r1``"
+msgstr "Connect to VM  with command ``virsh console vyos_r1``"
+
+#: ../../installation/virtual/libvirt.rst:79
+msgid "Connect to VM  with command ``virsh console vyos_r2``"
+msgstr "Connect to VM  with command ``virsh console vyos_r2``"
+
+#: ../../installation/vyos-on-baremetal.rst:391
+msgid "Connect to serial (115200bps). Power on the appliance and press Del in the console when requested to enter BIOS settings."
+msgstr "Connect to serial (115200bps). Power on the appliance and press Del in the console when requested to enter BIOS settings."
+
+#: ../../installation/cloud/gcp.rst:49
+msgid "Connect to the instance. SSH key was generated in the first step."
+msgstr "Connect to the instance. SSH key was generated in the first step."
+
+#: ../../installation/cloud/aws.rst:45
+#: ../../installation/cloud/azure.rst:37
+msgid "Connect to the instance by SSH key."
+msgstr "Connect to the instance by SSH key."
+
+#: ../../installation/cloud/index.rst:7
+#: ../../installation/cloud/index.rst:7
+#: ../../installation/index.rst:7
+#: ../../installation/index.rst:7
+#: ../../installation/virtual/index.rst:5
+#: ../../installation/virtual/index.rst:5
+msgid "Content"
+msgstr "Content"
+
+#: ../../installation/virtual/proxmox.rst:14
+msgid "Copy the qcow2 image to a temporary directory on the Proxmox server."
+msgstr "Copy the qcow2 image to a temporary directory on the Proxmox server."
+
+#: ../../installation/virtual/libvirt.rst:18
+msgid "Create VM name ``vyos_r1``. You must specify the path to the ``ISO`` image, the disk ``qcow2`` will be created automatically. The ``default`` network is the virtual network (type Virtio) created by the hypervisor with NAT."
+msgstr "Create VM name ``vyos_r1``. You must specify the path to the ``ISO`` image, the disk ``qcow2`` will be created automatically. The ``default`` network is the virtual network (type Virtio) created by the hypervisor with NAT."
+
+#: ../../installation/virtual/libvirt.rst:63
+msgid "Create VM with ``import`` qcow2 disk option."
+msgstr "Create VM with ``import`` qcow2 disk option."
+
+#: ../../installation/vyos-on-baremetal.rst:412
+msgid "Create a VyOS bootable USB key. I used the 64-bit ISO (VyOS 1.1.7) and `LinuxLive USB Creator <http://www.linuxliveusb.com/>`_."
+msgstr "Create a VyOS bootable USB key. I used the 64-bit ISO (VyOS 1.1.7) and `LinuxLive USB Creator <http://www.linuxliveusb.com/>`_."
+
+#: ../../installation/vyos-on-baremetal.rst:140
+msgid "Create a bootable USB pendrive using e.g. Rufus_ on a Windows machine."
+msgstr "Create a bootable USB pendrive using e.g. Rufus_ on a Windows machine."
+
+#: ../../installation/virtual/gns3.rst:130
+msgid "Create a new project."
+msgstr "Create a new project."
+
+#: ../../installation/cloud/azure.rst:59
+msgid "Create a route table and browse to **Configuration**"
+msgstr "Create a route table and browse to **Configuration**"
+
+#: ../../installation/cloud/aws.rst:57
+msgid "Create an :abbr:`IAM (Identity and Access Management)` role for the :abbr:`EC2 (Elastic Compute Cloud)` instance to access CloudWatch service, and name it CloudWatchAgentServerRole. The role should contain two default policies: CloudWatchAgentServerPolicy and AmazonSSMManagedInstanceCore."
+msgstr "Create an :abbr:`IAM (Identity and Access Management)` role for the :abbr:`EC2 (Elastic Compute Cloud)` instance to access CloudWatch service, and name it CloudWatchAgentServerRole. The role should contain two default policies: CloudWatchAgentServerPolicy and AmazonSSMManagedInstanceCore."
+
+#: ../../installation/cloud/aws.rst:86
+msgid "Create an :abbr:`IAM (Identity and Access Management)` role for your :abbr:`EC2 (Elastic Compute Cloud)` instance to access the CloudWatch service. Name it CloudWatchAgentAdminRole. The role should contain at two default policies: CloudWatchAgentAdminPolicy and AmazonSSMManagedInstanceCore."
+msgstr "Create an :abbr:`IAM (Identity and Access Management)` role for your :abbr:`EC2 (Elastic Compute Cloud)` instance to access the CloudWatch service. Name it CloudWatchAgentAdminRole. The role should contain at two default policies: CloudWatchAgentAdminPolicy and AmazonSSMManagedInstanceCore."
+
+#: ../../installation/cloud/aws.rst:84
+msgid "Creating the Amazon Cloudwatch Agent Configuration in Amazon :abbr:`SSM (Systems Manager)` Parameter Store."
+msgstr "Creating the Amazon Cloudwatch Agent Configuration in Amazon :abbr:`SSM (Systems Manager)` Parameter Store."
+
+#: ../../installation/install.rst:216
+msgid "Currently we are using GPG for release signing (pretty much like everyone else)."
+msgstr "Currently we are using GPG for release signing (pretty much like everyone else)."
+
+#: ../../installation/cloud/azure.rst:25
+msgid "Define network, subnet, Public IP. Or it will be created by default."
+msgstr "Define network, subnet, Public IP. Or it will be created by default."
+
+#: ../../installation/image.rst:47
+msgid "Delete no longer needed images from the system. You can specify an optional image name to delete, the image name can be retrieved via a list of available images can be shown using the :opcmd:`show system image`."
+msgstr "Delete no longer needed images from the system. You can specify an optional image name to delete, the image name can be retrieved via a list of available images can be shown using the :opcmd:`show system image`."
+
+#: ../../installation/vyos-on-baremetal.rst:137
+msgid "Depending on the VyOS versions you intend to install there is a difference in the serial port settings (:vytask:`T1327`)."
+msgstr "Depending on the VyOS versions you intend to install there is a difference in the serial port settings (:vytask:`T1327`)."
+
+#: ../../installation/cloud/aws.rst:6
+#: ../../installation/cloud/azure.rst:6
+#: ../../installation/cloud/gcp.rst:6
+msgid "Deploy VM"
+msgstr "Deploy VM"
+
+#: ../../installation/virtual/proxmox.rst:12
+msgid "Deploy VyOS from CLI with qcow2 image"
+msgstr "Deploy VyOS from CLI with qcow2 image"
+
+#: ../../installation/virtual/proxmox.rst:35
+msgid "Deploy VyOS from CLI with rolling release ISO"
+msgstr "Deploy VyOS from CLI with rolling release ISO"
+
+#: ../../installation/cloud/aws.rst:8
+msgid "Deploy VyOS on Amazon :abbr:`AWS (Amazon Web Services)`"
+msgstr "Deploy VyOS on Amazon :abbr:`AWS (Amazon Web Services)`"
+
+#: ../../installation/cloud/azure.rst:8
+msgid "Deploy VyOS on Azure."
+msgstr "Deploy VyOS on Azure."
+
+#: ../../installation/virtual/docker.rst:49
+msgid "Deploy container from ISO"
+msgstr "Deploy container from ISO"
+
+#: ../../installation/virtual/libvirt.rst:16
+#: ../../installation/virtual/libvirt.rst:127
+msgid "Deploy from ISO"
+msgstr "Deploy from ISO"
+
+#: ../../installation/virtual/libvirt.rst:54
+#: ../../installation/virtual/libvirt.rst:159
+msgid "Deploy from qcow2"
+msgstr "Deploy from qcow2"
+
+#: ../../installation/install.rst:15
+msgid "Description"
+msgstr "Description"
+
+#: ../../installation/vyos-on-baremetal.rst:270
+msgid "Desktop / Bench Top"
+msgstr "Desktop / Bench Top"
+
+#: ../../installation/install.rst:17
+msgid "Developing VyOS, testing new features, experimenting."
+msgstr "Developing VyOS, testing new features, experimenting."
+
+#: ../../installation/install.rst:21
+msgid "Developing and testing the latest major version under development."
+msgstr "Developing and testing the latest major version under development."
+
+#: ../../installation/vyos-on-baremetal.rst:406
+msgid "Disable XHCI"
+msgstr "Disable XHCI"
+
+#: ../../installation/virtual/libvirt.rst:144
+msgid "Disk size"
+msgstr "Disk size"
+
+#: ../../installation/install.rst:547
+msgid "Do not change the name of the *filesystem.squashfs* file. If you are working with different versions, you can create different directories instead."
+msgstr "Do not change the name of the *filesystem.squashfs* file. If you are working with different versions, you can create different directories instead."
+
+#: ../../installation/virtual/docker.rst:7
+msgid "Docker is an open-source project for deploying applications as standardized units called containers. Deploying VyOS in a container provides a simple and lightweight mechanism for both testing and packet routing for container workloads."
+msgstr "Docker is an open-source project for deploying applications as standardized units called containers. Deploying VyOS in a container provides a simple and lightweight mechanism for both testing and packet routing for container workloads."
+
+#: ../../installation/install.rst:52
+msgid "Download"
+msgstr "Download"
+
+#: ../../installation/install.rst:90
+msgid "Download Verification"
+msgstr "Download Verification"
+
+#: ../../installation/virtual/libvirt.rst:161
+msgid "Download predefined VyOS.qcow2 image for ``KVM``"
+msgstr "Download predefined VyOS.qcow2 image for ``KVM``"
+
+#: ../../installation/virtual/docker.rst:51
+msgid "Download the ISO on which you want to base the container. In this example, the name of the ISO is ``vyos-1.4-rolling-202111281249-amd64.iso``. If you created a custom IPv6-enabled network, the ``docker run`` command below will require that this network be included as the ``--net`` parameter to ``docker run``."
+msgstr "Download the ISO on which you want to base the container. In this example, the name of the ISO is ``vyos-1.4-rolling-202111281249-amd64.iso``. If you created a custom IPv6-enabled network, the ``docker run`` command below will require that this network be included as the ``--net`` parameter to ``docker run``."
+
+#: ../../installation/virtual/docker.rst:51
+msgid "Download the ISO on which you want to base the container. In this example, the name of the ISO is ``vyos-1.4-rolling-202308240020-amd64.iso``. If you created a custom IPv6-enabled network, the ``docker run`` command below will require that this network be included as the ``--net`` parameter to ``docker run``."
+msgstr "Download the ISO on which you want to base the container. In this example, the name of the ISO is ``vyos-1.4-rolling-202308240020-amd64.iso``. If you created a custom IPv6-enabled network, the ``docker run`` command below will require that this network be included as the ``--net`` parameter to ``docker run``."
+
+#: ../../installation/virtual/proxmox.rst:37
+msgid "Download the rolling release iso from https://vyos.net/get/nightly-builds/. Non-subscribers can always get the LTS release by building it from source. Instructions can be found in the :ref:`build` section of this manual. VyOS source code repository is available https://github.com/vyos/vyos-build."
+msgstr "Download the rolling release iso from https://vyos.net/get/nightly-builds/. Non-subscribers can always get the LTS release by building it from source. Instructions can be found in the :ref:`build` section of this manual. VyOS source code repository is available https://github.com/vyos/vyos-build."
+
+#: ../../installation/virtual/gns3.rst:131
+msgid "Drag the newly created VyOS VM into it."
+msgstr "Drag the newly created VyOS VM into it."
+
+#: ../../installation/install.rst:256
+msgid "During an image upgrade VyOS performas the following command:"
+msgstr "During an image upgrade VyOS performas the following command:"
+
+#: ../../installation/virtual/vmware.rst:7
+msgid "ESXi 5.5 or later"
+msgstr "ESXi 5.5 or later"
+
+#: ../../installation/virtual/eve-ng.rst:3
+msgid "EVE-NG"
+msgstr "EVE-NG"
+
+#: ../../installation/virtual/docker.rst:31
+msgid "Edit /etc/docker/daemon.json to set the ``ipv6`` key to ``true`` and to specify the ``fixed-cidr-v6`` to your desired IPv6 subnet."
+msgstr "Edit /etc/docker/daemon.json to set the ``ipv6`` key to ``true`` and to specify the ``fixed-cidr-v6`` to your desired IPv6 subnet."
+
+#: ../../installation/vyos-on-baremetal.rst:407
+msgid "Enable USB 2.0 (EHCI) Support"
+msgstr "Enable USB 2.0 (EHCI) Support"
+
+#: ../../installation/cloud/aws.rst:61
+msgid "Ensure that amazon-cloudwatch-agent package is installed."
+msgstr "Ensure that amazon-cloudwatch-agent package is installed."
+
+#: ../../installation/install.rst:37
+msgid "Every major version"
+msgstr "Every major version"
+
+#: ../../installation/install.rst:25
+msgid "Every month until RC comes out"
+msgstr "Every month until RC comes out"
+
+#: ../../installation/install.rst:17
+#: ../../installation/install.rst:21
+msgid "Every night"
+msgstr "Every night"
+
+#: ../../installation/install.rst:343
+msgid "Every version is contained in its own squashfs image that is mounted in a union filesystem together with a directory for mutable data such as configurations, keys, or custom scripts."
+msgstr "Every version is contained in its own squashfs image that is mounted in a union filesystem together with a directory for mutable data such as configurations, keys, or custom scripts."
+
+#: ../../installation/install.rst:17
+#: ../../installation/install.rst:17
+#: ../../installation/install.rst:21
+#: ../../installation/install.rst:21
+#: ../../installation/install.rst:25
+#: ../../installation/install.rst:25
+#: ../../installation/install.rst:29
+#: ../../installation/install.rst:29
+#: ../../installation/install.rst:33
+#: ../../installation/install.rst:33
+#: ../../installation/install.rst:37
+msgid "Everyone"
+msgstr "Everyone"
+
+#: ../../installation/install.rst:76
+msgid "Everyone can download bleeding-edge VyOS rolling images from: https://downloads.vyos.io/"
+msgstr "Everyone can download bleeding-edge VyOS rolling images from: https://downloads.vyos.io/"
+
+#: ../../installation/update.rst:50
+msgid "Example"
+msgstr "Example"
+
+#: ../../installation/cloud/gcp.rst:13
+msgid "Example:"
+msgstr "Example:"
+
+#: ../../installation/install.rst:519
+msgid "Example of simple (no menu) configuration file:"
+msgstr "Example of simple (no menu) configuration file:"
+
+#: ../../installation/install.rst:499
+msgid "Example of the contents of the TFTP server:"
+msgstr "Example of the contents of the TFTP server:"
+
+#: ../../installation/vyos-on-baremetal.rst:109
+msgid "Extension Modules"
+msgstr "Extension Modules"
+
+#: ../../installation/install.rst:439
+msgid "Files *pxelinux.0* and *ldlinux.c32* `from the Syslinux distribution <https://kernel.org/pub/linux/utils/boot/syslinux/>`_"
+msgstr "Files *pxelinux.0* and *ldlinux.c32* `from the Syslinux distribution <https://kernel.org/pub/linux/utils/boot/syslinux/>`_"
+
+#: ../../installation/install.rst:564
+msgid "Finally, turn on your PXE-enabled client or clients. They will automatically get an IP address from the DHCP server and start booting into VyOS live from the files automatically taken from the TFTP and HTTP servers."
+msgstr "Finally, turn on your PXE-enabled client or clients. They will automatically get an IP address from the DHCP server and start booting into VyOS live from the files automatically taken from the TFTP and HTTP servers."
+
+#: ../../installation/install.rst:201
+msgid "Finally, verify the authenticity of the downloaded image:"
+msgstr "Finally, verify the authenticity of the downloaded image:"
+
+#: ../../installation/install.rst:285
+msgid "Find out the device name of your USB drive (you can use the ``lsblk`` command)"
+msgstr "Find out the device name of your USB drive (you can use the ``lsblk`` command)"
+
+#: ../../installation/cloud/gcp.rst:45
+msgid "Find out your external IP address"
+msgstr "Find out your external IP address"
+
+#: ../../installation/cloud/aws.rst:41
+msgid "Find out your public IP address."
+msgstr "Find out your public IP address."
+
+#: ../../installation/virtual/gns3.rst:30
+msgid "First, a virtual machine (VM) for the VyOS installation must be created in GNS3."
+msgstr "First, a virtual machine (VM) for the VyOS installation must be created in GNS3."
+
+#: ../../installation/install.rst:102
+msgid "First, install GPG or another OpenPGP implementation. On most GNU+Linux distributions it is installed by default as package managers use it to verify package signatures. If not pre-installed, it will need to be downloaded and installed."
+msgstr "First, install GPG or another OpenPGP implementation. On most GNU+Linux distributions it is installed by default as package managers use it to verify package signatures. If not pre-installed, it will need to be downloaded and installed."
+
+#: ../../installation/vyos-on-baremetal.rst:384
+msgid "First thing you want to do is getting a more user friendly console to configure BIOS. Default VT100 brings a lot of issues. Configure VT100+ instead."
+msgstr "First thing you want to do is getting a more user friendly console to configure BIOS. Default VT100 brings a lot of issues. Configure VT100+ instead."
+
+#: ../../installation/migrate-from-vyatta.rst:42
+msgid "For completion the key below corresponds to the key listed in the URL above."
+msgstr "For completion the key below corresponds to the key listed in the URL above."
+
+#: ../../installation/vyos-on-baremetal.rst:387
+msgid "For practical issues change speed from 115200 to 9600. 9600 is the default speed at which both linux kernel and VyOS will reconfigure the serial port when loading."
+msgstr "For practical issues change speed from 115200 to 9600. 9600 is the default speed at which both linux kernel and VyOS will reconfigure the serial port when loading."
+
+#: ../../installation/migrate-from-vyatta.rst:161
+msgid "Future releases of VyOS will break the direct upgrade path from Vyatta core. Please upgrade through an intermediate VyOS version e.g. VyOS 1.2. After this you can continue upgrading to newer releases once you bootet into VyOS 1.2 once."
+msgstr "Future releases of VyOS will break the direct upgrade path from Vyatta core. Please upgrade through an intermediate VyOS version e.g. VyOS 1.2. After this you can continue upgrading to newer releases once you bootet into VyOS 1.2 once."
+
+#: ../../installation/install.rst:192
+msgid "GPG verification"
+msgstr "GPG verification"
+
+#: ../../installation/install.rst:582
+msgid "GRUB attempts to redirect all output to a serial port for ease of installation on headless hosts. This appears to cause an hard lockup on some hardware that lacks a serial port, with the result being a black screen after selecting the `Live system` option from the installation image."
+msgstr "GRUB attempts to redirect all output to a serial port for ease of installation on headless hosts. This appears to cause an hard lockup on some hardware that lacks a serial port, with the result being a black screen after selecting the `Live system` option from the installation image."
+
+#: ../../installation/cloud/gcp.rst:10
+msgid "Generate SSH key pair type **ssh-rsa** from the host that will connect to VyOS."
+msgstr "Generate SSH key pair type **ssh-rsa** from the host that will connect to VyOS."
+
+#: ../../installation/cloud/azure.rst:21
+msgid "Generate new SSH key pair or use existing."
+msgstr "Generate new SSH key pair or use existing."
+
+#: ../../installation/cloud/azure.rst:10
+msgid "Go to the Azure services and Click to **Add new Virtual machine**"
+msgstr "Go to the Azure services and Click to **Add new Virtual machine**"
+
+#: ../../installation/virtual/gns3.rst:33
+msgid "Go to the GNS3 **File** menu, click **New template** and choose select **Manually create a new Template**."
+msgstr "Go to the GNS3 **File** menu, click **New template** and choose select **Manually create a new Template**."
+
+#: ../../installation/cloud/gcp.rst:3
+msgid "Google Cloud Platform"
+msgstr "Google Cloud Platform"
+
+#: ../../installation/install.rst:37
+msgid "Guaranteed to be stable and carefully maintained for several years after the release. No features are introduced but security updates are released in a timely manner."
+msgstr "Guaranteed to be stable and carefully maintained for several years after the release. No features are introduced but security updates are released in a timely manner."
+
+#: ../../installation/vyos-on-baremetal.rst:304
+msgid "Hardware"
+msgstr "Hardware"
+
+#: ../../installation/install.rst:45
+msgid "Hardware requirements"
+msgstr "Hardware requirements"
+
+#: ../../installation/virtual/docker.rst:22
+msgid "Here is a example using the macvlan driver."
+msgstr "Here is a example using the macvlan driver."
+
+#: ../../installation/install.rst:33
+msgid "Highly stable with no known bugs. Needs to be tested repeatedly under different conditions before it can become the final release."
+msgstr "Highly stable with no known bugs. Needs to be tested repeatedly under different conditions before it can become the final release."
+
+#: ../../installation/install.rst:25
+msgid "Home labs and simple networks that call for new features."
+msgstr "Home labs and simple networks that call for new features."
+
+#: ../../installation/vyos-on-baremetal.rst:132
+msgid "Huawei ME909u-521 miniPCIe card (LTE)"
+msgstr "Huawei ME909u-521 miniPCIe card (LTE)"
+
+#: ../../installation/vyos-on-baremetal.rst:415
+msgid "I'm not sure if it helps the process but I changed default option to live-serial (line “default xxxx”) on the USB key under syslinux/syslinux.cfg."
+msgstr "I'm not sure if it helps the process but I changed default option to live-serial (line “default xxxx”) on the USB key under syslinux/syslinux.cfg."
+
+#: ../../installation/virtual/docker.rst:13
+msgid "IPv6 Support for docker"
+msgstr "IPv6 Support for docker"
+
+#: ../../installation/vyos-on-baremetal.rst:346
+msgid "I believe this is actually the same hardware as the Protectli. I purchased it in June 2018. It came pre-loaded with pfSense."
+msgstr "I believe this is actually the same hardware as the Protectli. I purchased it in June 2018. It came pre-loaded with pfSense."
+
+#: ../../installation/vyos-on-baremetal.rst:418
+msgid "I connected the key to one black USB port on the back and powered on. The first VyOS screen has some readability issues. Press :kbd:`Enter` to continue."
+msgstr "I connected the key to one black USB port on the back and powered on. The first VyOS screen has some readability issues. Press :kbd:`Enter` to continue."
+
+#: ../../installation/vyos-on-baremetal.rst:10
+msgid "I opted to get one of the new Intel Atom C3000 CPUs to spawn VyOS on it. Running VyOS on an UEFI only device is supported as of VyOS release 1.2."
+msgstr "I opted to get one of the new Intel Atom C3000 CPUs to spawn VyOS on it. Running VyOS on an UEFI only device is supported as of VyOS release 1.2."
+
+#: ../../installation/cloud/azure.rst:47
+msgid "If instance was deployed with one **eth0** ``WAN`` interface and want to add new one. To add new interface an example **eth1** ``LAN`` you need shutdown the instance. Attach the interface in the Azure portal and then start the instance."
+msgstr "If instance was deployed with one **eth0** ``WAN`` interface and want to add new one. To add new interface an example **eth1** ``LAN`` you need shutdown the instance. Attach the interface in the Azure portal and then start the instance."
+
+#: ../../installation/update.rst:25
+msgid "If there is not enough **free disk space available**, the installation will be canceled. To delete images use the :opcmd:`delete system image` command."
+msgstr "If there is not enough **free disk space available**, the installation will be canceled. To delete images use the :opcmd:`delete system image` command."
+
+#: ../../installation/cloud/azure.rst:57
+msgid "If using as a router, you will want your LAN interface to absorb some or all of the traffic from your VNET by using a route table applied to the subnet."
+msgstr "If using as a router, you will want your LAN interface to absorb some or all of the traffic from your VNET by using a route table applied to the subnet."
+
+#: ../../installation/virtual/libvirt.rst:93
+msgid "If you can not go to this screen"
+msgstr "If you can not go to this screen"
+
+#: ../../installation/install.rst:319
+msgid "If you find difficulties with this method, prefer to use a GUI program, or have a different operating system, there are other programs you can use to create a bootable USB drive, like balenaEtcher_ (for GNU/Linux, macOS and Windows), Rufus_ (for Windows) and `many others`_. You can follow their instructions to create a bootable USB drive from an .iso file."
+msgstr "If you find difficulties with this method, prefer to use a GUI program, or have a different operating system, there are other programs you can use to create a bootable USB drive, like balenaEtcher_ (for GNU/Linux, macOS and Windows), Rufus_ (for Windows) and `many others`_. You can follow their instructions to create a bootable USB drive from an .iso file."
+
+#: ../../installation/install.rst:280
+msgid "If you have a GNU+Linux system, you can create your VyOS bootable USB stick with with the ``dd`` command:"
+msgstr "If you have a GNU+Linux system, you can create your VyOS bootable USB stick with with the ``dd`` command:"
+
+#: ../../installation/image.rst:114
+msgid "If you have access to the console, there is a another way to select your booting image: reboot and use the GRUB menu at startup."
+msgstr "If you have access to the console, there is a another way to select your booting image: reboot and use the GRUB menu at startup."
+
+#: ../../installation/update.rst:33
+msgid "If you have any personal files, like some scripts you created, and you don't want them to be lost during the upgrade, make sure those files are stored in ``/config`` as this directory is always copied to newer installed images."
+msgstr "If you have any personal files, like some scripts you created, and you don't want them to be lost during the upgrade, make sure those files are stored in ``/config`` as this directory is always copied to newer installed images."
+
+#: ../../installation/image.rst:99
+msgid "If you need to rollback to a previous image, you can easily do so. First check the available images through the :opcmd:`show system image` command and then select your image with the following command:"
+msgstr "If you need to rollback to a previous image, you can easily do so. First check the available images through the :opcmd:`show system image` command and then select your image with the following command:"
+
+#: ../../installation/cloud/azure.rst:63
+msgid "If you want to create a new default route for VMs on the subnet, use **Address Prefix** ``0.0.0.0/0`` Also note that if you want to use this as a typical edge device, you'll want masquerade NAT for the ``WAN`` interface."
+msgstr "If you want to create a new default route for VMs on the subnet, use **Address Prefix** ``0.0.0.0/0`` Also note that if you want to use this as a typical edge device, you'll want masquerade NAT for the ``WAN`` interface."
+
+#: ../../installation/vyos-on-baremetal.rst:26
+msgid "If you want to get additional ethernet ports or even 10GE connectivity the following optional parts will be required:"
+msgstr "If you want to get additional ethernet ports or even 10GE connectivity the following optional parts will be required:"
+
+#: ../../installation/image.rst:5
+msgid "Image Management"
+msgstr "Image Management"
+
+#: ../../installation/virtual/gns3.rst:90
+msgid "In **Category** select in which group you want to find your VM."
+msgstr "In **Category** select in which group you want to find your VM."
+
+#: ../../installation/install.rst:231
+msgid "In 2015, OpenBSD introduced signify. An alternative implementation of the same protocol is minisign, which is also available for Windows and macOS, and in most GNU/Linux distros it's in the repositories now."
+msgstr "In 2015, OpenBSD introduced signify. An alternative implementation of the same protocol is minisign, which is also available for Windows and macOS, and in most GNU/Linux distros it's in the repositories now."
+
+#: ../../installation/cloud/gcp.rst:20
+msgid "In name \"vyos@mypc\" The first value must be \"**vyos**\". Because default user is vyos and google api uses this option."
+msgstr "In name \"vyos@mypc\" The first value must be \"**vyos**\". Because default user is vyos and google api uses this option."
+
+#: ../../installation/install.rst:354
+msgid "In order to proceed with a permanent installation:"
+msgstr "In order to proceed with a permanent installation:"
+
+#: ../../installation/virtual/gns3.rst:114
+msgid "In the **Advanced** tab, unmark the checkbox **Use as a linked base VM** and click ``OK``, which will save and close the **QEMU VM template configuration** window."
+msgstr "In the **Advanced** tab, unmark the checkbox **Use as a linked base VM** and click ``OK``, which will save and close the **QEMU VM template configuration** window."
+
+#: ../../installation/virtual/gns3.rst:85
+msgid "In the **General settings** tab of your **QEMU VM template configuration**, do the following:"
+msgstr "In the **General settings** tab of your **QEMU VM template configuration**, do the following:"
+
+#: ../../installation/virtual/gns3.rst:108
+msgid "In the **Network** tab,  set **0** as the number of adapters, set the **Name format** to **eth{0}** and the **Type** to **Paravirtualized Network I/O (virtio-net-pci)**."
+msgstr "In the **Network** tab,  set **0** as the number of adapters, set the **Name format** to **eth{0}** and the **Type** to **Paravirtualized Network I/O (virtio-net-pci)**."
+
+#: ../../installation/install.rst:491
+msgid "In the example we configured our existent VyOS as the TFTP server too:"
+msgstr "In the example we configured our existent VyOS as the TFTP server too:"
+
+#: ../../installation/install.rst:454
+msgid "In this example we configured an existent VyOS as the DHCP server:"
+msgstr "In this example we configured an existent VyOS as the DHCP server:"
+
+#: ../../installation/vyos-on-baremetal.rst:410
+msgid "Install VyOS:"
+msgstr "Install VyOS:"
+
+#: ../../installation/install.rst:5
+#: ../../installation/vyos-on-baremetal.rst:352
+msgid "Installation"
+msgstr "Installation"
+
+#: ../../installation/index.rst:3
+msgid "Installation and Image Management"
+msgstr "Installation and Image Management"
+
+#: ../../installation/install.rst:594
+msgid "Installation can then continue as outlined above."
+msgstr "Installation can then continue as outlined above."
+
+#: ../../installation/vyos-on-baremetal.rst:224
+msgid "Installing the rolling release on an APU2 board does not require any change on the serial console from your host side as :vytask:`T1327` was successfully implemented."
+msgstr "Installing the rolling release on an APU2 board does not require any change on the serial console from your host side as :vytask:`T1327` was successfully implemented."
+
+#: ../../installation/vyos-on-baremetal.rst:118
+msgid "Intel Corporation AX200 mini-PCIe WiFi module, only supported in mPCIe slot 1. (see :ref:`wireless-interface-intel-ax200`)"
+msgstr "Intel Corporation AX200 mini-PCIe WiFi module, only supported in mPCIe slot 1. (see :ref:`wireless-interface-intel-ax200`)"
+
+#: ../../installation/install.rst:15
+msgid "Intended Use"
+msgstr "Intended Use"
+
+#: ../../installation/install.rst:29
+msgid "Irregularly until EPA comes out"
+msgstr "Irregularly until EPA comes out"
+
+#: ../../installation/install.rst:33
+msgid "Irregularly until LTS comes out"
+msgstr "Irregularly until LTS comes out"
+
+#: ../../installation/install.rst:110
+msgid "It can be retrieved directly from a key server:"
+msgstr "It can be retrieved directly from a key server:"
+
+#: ../../installation/virtual/vmware.rst:31
+msgid "It is advised that VyOS routers are configured in a resource group with adequate memory reservations so that ballooning is not inflicted on virtual VyOS guests."
+msgstr "It is advised that VyOS routers are configured in a resource group with adequate memory reservations so that ballooning is not inflicted on virtual VyOS guests."
+
+#: ../../installation/install.rst:235
+msgid "Its installed size (complete with libsodium) is less than that of GPG binary alone (not including libgcrypt and some other libs, which I think we only use for GPG). Since it uses elliptic curves, it gets away with much smaller keys, and it doesn't include as much metadata to begin with."
+msgstr "Its installed size (complete with libsodium) is less than that of GPG binary alone (not including libgcrypt and some other libs, which I think we only use for GPG). Since it uses elliptic curves, it gets away with much smaller keys, and it doesn't include as much metadata to begin with."
+
+#: ../../installation/install.rst:575
+msgid "Known Issues"
+msgstr "Known Issues"
+
+#: ../../installation/install.rst:92
+msgid "LTS images are signed by the VyOS lead package-maintainer private key. With the official public key, the authenticity of the package can be verified. :abbr:`GPG (GNU Privacy Guard)` is used for verification."
+msgstr "LTS images are signed by the VyOS lead package-maintainer private key. With the official public key, the authenticity of the package can be verified. :abbr:`GPG (GNU Privacy Guard)` is used for verification."
+
+#: ../../installation/install.rst:29
+msgid "Labs, small offices and non-critical production systems backed by a high-availability setup."
+msgstr "Labs, small offices and non-critical production systems backed by a high-availability setup."
+
+#: ../../installation/install.rst:37
+msgid "Large-scale enterprise networks, internet service providers, critical production environments that call for minimum downtime."
+msgstr "Large-scale enterprise networks, internet service providers, critical production environments that call for minimum downtime."
+
+#: ../../installation/vyos-on-baremetal.rst:32
+msgid "Latest VyOS rolling releases boot without any problem on this board. You also receive a nice IPMI interface realized with an ASPEED AST2400 BMC (no information about `OpenBMC <https://www.openbmc.org/>`_ so far on this motherboard)."
+msgstr "Latest VyOS rolling releases boot without any problem on this board. You also receive a nice IPMI interface realized with an ASPEED AST2400 BMC (no information about `OpenBMC <https://www.openbmc.org/>`_ so far on this motherboard)."
+
+#: ../../installation/virtual/libvirt.rst:7
+msgid "Libvirt is an open-source API, daemon and management tool for managing platform virtualization. There are several ways to deploy VyOS on libvirt kvm. Use Virt-manager and native CLI. In an example we will be use use 4 gigabytes of memory, 2 cores CPU and default network virbr0."
+msgstr "Libvirt is an open-source API, daemon and management tool for managing platform virtualization. There are several ways to deploy VyOS on libvirt kvm. Use Virt-manager and native CLI. In an example we will be use use 4 gigabytes of memory, 2 cores CPU and default network virbr0."
+
+#: ../../installation/image.rst:33
+msgid "List all available system images which can be booted on the current system."
+msgstr "List all available system images which can be booted on the current system."
+
+#: ../../installation/install.rst:267
+msgid "Live installation"
+msgstr "Live installation"
+
+#: ../../installation/install.rst:356
+msgid "Log into the VyOS live system (use the default credentials: vyos, vyos)"
+msgstr "Log into the VyOS live system (use the default credentials: vyos, vyos)"
+
+#: ../../installation/install.rst:555
+msgid "Make sure the available directories and files in both TFTP and HTTP server have the right permissions to be accessed from the booting clients."
+msgstr "Make sure the available directories and files in both TFTP and HTTP server have the right permissions to be accessed from the booting clients."
+
+#: ../../installation/virtual/vmware.rst:18
+msgid "Memory Contention Considerations"
+msgstr "Memory Contention Considerations"
+
+#: ../../installation/virtual/docker.rst:20
+msgid "Method 1: Create a docker network with IPv6 support"
+msgstr "Method 1: Create a docker network with IPv6 support"
+
+#: ../../installation/virtual/docker.rst:29
+msgid "Method 2: Add IPv6 support to the docker daemon"
+msgstr "Method 2: Add IPv6 support to the docker daemon"
+
+#: ../../installation/migrate-from-vyatta.rst:4
+msgid "Migrate from Vyatta Core"
+msgstr "Migrate from Vyatta Core"
+
+#: ../../installation/install.rst:214
+msgid "Minisign verification"
+msgstr "Minisign verification"
+
+#: ../../installation/virtual/libvirt.rst:148
+#: ../../installation/virtual/libvirt.rst:184
+msgid "Name of VM and network selection"
+msgstr "Name of VM and network selection"
+
+#: ../../installation/update.rst:6
+msgid "New system images can be added using the :opcmd:`add system image` command. The command will extract the chosen image and will prompt you to use the current system configuration and SSH security keys, allowing for the new image to boot using the current configuration."
+msgstr "New system images can be added using the :opcmd:`add system image` command. The command will extract the chosen image and will prompt you to use the current system configuration and SSH security keys, allowing for the new image to boot using the current configuration."
+
+#: ../../installation/migrate-from-vyatta.rst:99
+msgid "Next add the VyOS image."
+msgstr "Next add the VyOS image."
+
+#: ../../installation/install.rst:33
+msgid "Non-critical production environments, preparing for the LTS release."
+msgstr "Non-critical production environments, preparing for the LTS release."
+
+#: ../../installation/install.rst:68
+msgid "Non-subscribers can always get the LTS release by building it from source. Instructions can be found in the :ref:`build` section of this manual. VyOS source code repository is available for everyone at https://github.com/vyos/vyos-build."
+msgstr "Non-subscribers can always get the LTS release by building it from source. Instructions can be found in the :ref:`build` section of this manual. VyOS source code repository is available for everyone at https://github.com/vyos/vyos-build."
+
+#: ../../installation/vyos-on-baremetal.rst:166
+msgid "Now boot from the ``USB MSC Drive Generic Flash Disk 8.07`` media by pressing ``2``, the VyOS boot menu will appear, just wait 10 seconds or press ``Enter`` to continue."
+msgstr "Now boot from the ``USB MSC Drive Generic Flash Disk 8.07`` media by pressing ``2``, the VyOS boot menu will appear, just wait 10 seconds or press ``Enter`` to continue."
+
+#: ../../installation/virtual/gns3.rst:78
+msgid "Now the VM settings have to be edited."
+msgstr "Now the VM settings have to be edited."
+
+#: ../../installation/install.rst:347
+msgid "Older versions (prior to VyOS 1.1) used to support non-image installation (``install system`` command). Support for this has been removed from VyOS 1.2 and newer releases. Older releases can still be upgraded via the general ``add system image <image_path>`` upgrade command (consult :ref:`image-mgmt` for further information)."
+msgstr "Older versions (prior to VyOS 1.1) used to support non-image installation (``install system`` command). Support for this has been removed from VyOS 1.2 and newer releases. Older releases can still be upgraded via the general ``add system image <image_path>`` upgrade command (consult :ref:`image-mgmt` for further information)."
+
+#: ../../installation/cloud/gcp.rst:35
+msgid "On marketplace search \"VyOS\""
+msgstr "On marketplace search \"VyOS\""
+
+#: ../../installation/cloud/aws.rst:14
+msgid "On the marketplace search \"VyOS\""
+msgstr "On the marketplace search \"VyOS\""
+
+#: ../../installation/cloud/azure.rst:17
+msgid "On the marketplace search ``VyOS`` and choose the appropriate subscription"
+msgstr "On the marketplace search ``VyOS`` and choose the appropriate subscription"
+
+#: ../../installation/install.rst:315
+msgid "Once VyOS is completely loaded, enter the default credentials (login: vyos, password: vyos)."
+msgstr "Once VyOS is completely loaded, enter the default credentials (login: vyos, password: vyos)."
+
+#: ../../installation/install.rst:309
+msgid "Once ``dd`` has finished, pull the USB drive out and plug it into the powered-off computer where you want to install (or test) VyOS."
+msgstr "Once ``dd`` has finished, pull the USB drive out and plug it into the powered-off computer where you want to install (or test) VyOS."
+
+#: ../../installation/virtual/proxmox.rst:46
+msgid "Once booted into the live system, type ``install image`` into the command line and follow the prompts to install VyOS to the virtual drive."
+msgstr "Once booted into the live system, type ``install image`` into the command line and follow the prompts to install VyOS to the virtual drive."
+
+#: ../../installation/install.rst:569
+msgid "Once finished you will be able to proceed with the ``install image`` command as in a regular VyOS installation."
+msgstr "Once finished you will be able to proceed with the ``install image`` command as in a regular VyOS installation."
+
+#: ../../installation/vyos-on-baremetal.rst:211
+msgid "Once you ``commit`` the above changes access to the serial interface is lost until you set your terminal emulator to 115200 8N1 again."
+msgstr "Once you ``commit`` the above changes access to the serial interface is lost until you set your terminal emulator to 115200 8N1 again."
+
+#: ../../installation/update.rst:11
+msgid "Only LTS releases are PGP-signed."
+msgstr "Only LTS releases are PGP-signed."
+
+#: ../../installation/cloud/gcp.rst:24
+msgid "Open GCP console and navigate to the menu **Metadata**. Choose **SSH Keys** and click ``edit``."
+msgstr "Open GCP console and navigate to the menu **Metadata**. Choose **SSH Keys** and click ``edit``."
+
+#: ../../installation/virtual/libvirt.rst:129
+#: ../../installation/virtual/libvirt.rst:168
+msgid "Open :abbr:`VMM (Virtual Machine Manager)` and Create a new :abbr:`VM (Virtual Machine)`"
+msgstr "Open :abbr:`VMM (Virtual Machine Manager)` and Create a new :abbr:`VM (Virtual Machine)`"
+
+#: ../../installation/virtual/gns3.rst:133
+msgid "Open a console. The console should show the system booting. It will ask for the login credentials, you are at the VyOS live system."
+msgstr "Open a console. The console should show the system booting. It will ask for the login credentials, you are at the VyOS live system."
+
+#: ../../installation/virtual/libvirt.rst:107
+msgid "Open a secondary/parallel session and use this command to reboot the VM:"
+msgstr "Open a secondary/parallel session and use this command to reboot the VM:"
+
+#: ../../installation/install.rst:283
+msgid "Open your terminal emulator."
+msgstr "Open your terminal emulator."
+
+#: ../../installation/vyos-on-baremetal.rst:25
+msgid "Optional (10GE)"
+msgstr "Optional (10GE)"
+
+#: ../../installation/virtual/proxmox.rst:24
+msgid "Optionally, the user can attach a CDROM with an ISO as a cloud-init data source. The below command assumes the ISO has been uploaded to the `local` storage pool with the name `seed.iso`."
+msgstr "Optionally, the user can attach a CDROM with an ISO as a cloud-init data source. The below command assumes the ISO has been uploaded to the `local` storage pool with the name `seed.iso`."
+
+#: ../../installation/install.rst:118
+msgid "Or from the following block:"
+msgstr "Or from the following block:"
+
+#: ../../installation/install.rst:114
+msgid "Or it can be accessed via a web browser:"
+msgstr "Or it can be accessed via a web browser:"
+
+#: ../../installation/cloud/oracel.rst:3
+msgid "Oracle"
+msgstr "Oracle"
+
+#: ../../installation/vyos-on-baremetal.rst:80
+msgid "PC Engines APU4"
+msgstr "PC Engines APU4"
+
+#: ../../installation/install.rst:427
+msgid "PXE Boot"
+msgstr "PXE Boot"
+
+#: ../../installation/vyos-on-baremetal.rst:342
+msgid "Partaker i5"
+msgstr "Partaker i5"
+
+#: ../../installation/install.rst:332
+msgid "Permanent installation"
+msgstr "Permanent installation"
+
+#: ../../installation/vyos-on-baremetal.rst:38
+#: ../../installation/vyos-on-baremetal.rst:234
+msgid "Pictures"
+msgstr "Pictures"
+
+#: ../../installation/vyos-on-baremetal.rst:355
+msgid "Plug in VGA, power, USB keyboard, and USB drive"
+msgstr "Plug in VGA, power, USB keyboard, and USB drive"
+
+#: ../../installation/install.rst:218
+msgid "Popularity of GPG for release signing comes from the fact that many people already had it installed for email encryption/signing. Inside a VyOS image, signature checking is the only reason to have it installed. However, it still comes with all the features no one needs, such as support for multiple outdated cipher suits and ability to embed a photo in the key file. More importantly, web of trust, the basic premise of PGP, is never used in release signing context. Once you have a knowingly authentic image, authenticity of upgrades is checked using a key that comes in the image, and to get their first image people never rely on keyservers either."
+msgstr "Popularity of GPG for release signing comes from the fact that many people already had it installed for email encryption/signing. Inside a VyOS image, signature checking is the only reason to have it installed. However, it still comes with all the features no one needs, such as support for multiple outdated cipher suits and ability to embed a photo in the key file. More importantly, web of trust, the basic premise of PGP, is never used in release signing context. Once you have a knowingly authentic image, authenticity of upgrades is checked using a key that comes in the image, and to get their first image people never rely on keyservers either."
+
+#: ../../installation/vyos-on-baremetal.rst:324
+msgid "Power supply is a 12VDC barrel jack, and included switching power supply, which is why SATA power regulation is on-board. Internally it has a NUC-board-style on-board 12V input header as well, the molex locking style."
+msgstr "Power supply is a 12VDC barrel jack, and included switching power supply, which is why SATA power regulation is on-board. Internally it has a NUC-board-style on-board 12V input header as well, the molex locking style."
+
+#: ../../installation/install.rst:312
+msgid "Power the computer on, making sure it boots from the USB drive (you might need to select booting device or change booting settings)."
+msgstr "Power the computer on, making sure it boots from the USB drive (you might need to select booting device or change booting settings)."
+
+#: ../../installation/virtual/proxmox.rst:38
+msgid "Prepare VM for installation from ISO media. The commands below assume that your iso is available in a storage pool 'local', that you want it to have a VM ID '200' and want to create a new disk on storage pool 'local-lvm' of size 15GB."
+msgstr "Prepare VM for installation from ISO media. The commands below assume that your iso is available in a storage pool 'local', that you want it to have a VM ID '200' and want to create a new disk on storage pool 'local-lvm' of size 15GB."
+
+#: ../../installation/install.rst:100
+msgid "Preparing for the verification"
+msgstr "Preparing for the verification"
+
+#: ../../installation/vyos-on-baremetal.rst:356
+msgid "Press \"SW\" button on the front (this is the power button; I don't know what \"SW\" is supposed to mean)."
+msgstr "Press \"SW\" button on the front (this is the power button; I don't know what \"SW\" is supposed to mean)."
+
+#: ../../installation/virtual/proxmox.rst:7
+msgid "Proxmox is an open-source platform for virtualization. Please visit https://vyos.io to see how to get a qcow2 image that can be imported into Proxmox."
+msgstr "Proxmox is an open-source platform for virtualization. Please visit https://vyos.io to see how to get a qcow2 image that can be imported into Proxmox."
+
+#: ../../installation/vyos-on-baremetal.rst:291
+msgid "Qotom Q355G4"
+msgstr "Qotom Q355G4"
+
+#: ../../installation/vyos-on-baremetal.rst:240
+msgid "Rack Mount"
+msgstr "Rack Mount"
+
+#: ../../installation/install.rst:29
+msgid "Rather stable. All development focuses on testing and hunting down remaining bugs following the feature freeze."
+msgstr "Rather stable. All development focuses on testing and hunting down remaining bugs following the feature freeze."
+
+#: ../../installation/vyos-on-baremetal.rst:404
+msgid "Reboot into BIOS, Chipset > South Bridge > USB Configuration:"
+msgstr "Reboot into BIOS, Chipset > South Bridge > USB Configuration:"
+
+#: ../../installation/install.rst:416
+msgid "Reboot the system."
+msgstr "Reboot the system."
+
+#: ../../installation/virtual/proxmox.rst:48
+msgid "Reboot the virtual machine using the GUI or ``qm reboot 200``."
+msgstr "Reboot the virtual machine using the GUI or ``qm reboot 200``."
+
+#: ../../installation/vyos-on-baremetal.rst:114
+msgid "Refer to :ref:`wireless-interface` for additional information, below listed modules have been tested successfully on this Hardware platform:"
+msgstr "Refer to :ref:`wireless-interface` for additional information, below listed modules have been tested successfully on this Hardware platform:"
+
+#: ../../installation/vyos-on-baremetal.rst:124
+msgid "Refer to :ref:`wwan-interface` for additional information, below listed modules have been tested successfully on this Hardware platform using VyOS 1.3 (equuleus):"
+msgstr "Refer to :ref:`wwan-interface` for additional information, below listed modules have been tested successfully on this Hardware platform using VyOS 1.3 (equuleus):"
+
+#: ../../installation/cloud/aws.rst:99
+#: ../../installation/cloud/azure.rst:71
+#: ../../installation/cloud/gcp.rst:57
+#: ../../installation/cloud/oracel.rst:7
+#: ../../installation/virtual/eve-ng.rst:6
+#: ../../installation/virtual/vmware.rst:40
+msgid "References"
+msgstr "References"
+
+#: ../../installation/install.rst:55
+msgid "Registered Subscribers"
+msgstr "Registered Subscribers"
+
+#: ../../installation/install.rst:57
+msgid "Registered subscribers can log into https://support.vyos.io/ to access a variety of different downloads via the \"Downloads\" link. These downloads include LTS (Long-Term Support), the associated hot-fix releases, early public access releases, pre-built VM images, as well as device specific installation ISOs."
+msgstr "Registered subscribers can log into https://support.vyos.io/ to access a variety of different downloads via the \"Downloads\" link. These downloads include LTS (Long-Term Support), the associated hot-fix releases, early public access releases, pre-built VM images, as well as device specific installation ISOs."
+
+#: ../../installation/install.rst:15
+msgid "Release Cycle"
+msgstr "Release Cycle"
+
+#: ../../installation/install.rst:15
+msgid "Release Type"
+msgstr "Release Type"
+
+#: ../../installation/virtual/docker.rst:41
+msgid "Reload the docker configuration."
+msgstr "Reload the docker configuration."
+
+#: ../../installation/virtual/gns3.rst:15
+msgid "Requirements"
+msgstr "Requirements"
+
+#: ../../installation/cloud/aws.rst:69
+msgid "Retreive an existing CloudWatch Agent configuration from the :abbr:`SSM (Systems Manager)` Parameter Store."
+msgstr "Retreive an existing CloudWatch Agent configuration from the :abbr:`SSM (Systems Manager)` Parameter Store."
+
+#: ../../installation/install.rst:74
+msgid "Rolling Release"
+msgstr "Rolling Release"
+
+#: ../../installation/install.rst:79
+msgid "Rolling releases contain all the latest enhancements and fixes. This means that there will be new bugs of course. If you think you hit a bug please follow the guide at :ref:`bug_report`. We depend on your feedback to improve VyOS!"
+msgstr "Rolling releases contain all the latest enhancements and fixes. This means that there will be new bugs of course. If you think you hit a bug please follow the guide at :ref:`bug_report`. We depend on your feedback to improve VyOS!"
+
+#: ../../installation/cloud/aws.rst:90
+msgid "Run Cloudwatch configuration wizard."
+msgstr "Run Cloudwatch configuration wizard."
+
+#: ../../installation/install.rst:359
+msgid "Run the ``install image`` command and follow the wizard:"
+msgstr "Run the ``install image`` command and follow the wizard:"
+
+#: ../../installation/cloud/index.rst:3
+msgid "Running VyOS in Cloud Environments"
+msgstr "Running VyOS in Cloud Environments"
+
+#: ../../installation/virtual/index.rst:3
+msgid "Running VyOS in Virtual Environments"
+msgstr "Running VyOS in Virtual Environments"
+
+#: ../../installation/virtual/docker.rst:5
+msgid "Running in Docker Container"
+msgstr "Running in Docker Container"
+
+#: ../../installation/vyos-on-baremetal.rst:5
+msgid "Running on Bare Metal"
+msgstr "Running on Bare Metal"
+
+#: ../../installation/virtual/gns3.rst:5
+msgid "Running on GNS3"
+msgstr "Running on GNS3"
+
+#: ../../installation/virtual/libvirt.rst:5
+msgid "Running on Libvirt Qemu/KVM"
+msgstr "Running on Libvirt Qemu/KVM"
+
+#: ../../installation/virtual/proxmox.rst:5
+msgid "Running on Proxmox"
+msgstr "Running on Proxmox"
+
+#: ../../installation/virtual/vmware.rst:4
+msgid "Running on VMware ESXi"
+msgstr "Running on VMware ESXi"
+
+#: ../../installation/vyos-on-baremetal.rst:399
+msgid "Save, reboot and change serial speed to 9600 on your client."
+msgstr "Save, reboot and change serial speed to 9600 on your client."
+
+#: ../../installation/virtual/gns3.rst:55
+msgid "Select **New image** for the base disk image of your VM and click ``Create``."
+msgstr "Select **New image** for the base disk image of your VM and click ``Create``."
+
+#: ../../installation/virtual/gns3.rst:38
+msgid "Select **Quemu VMs** and then click on the ``New`` button."
+msgstr "Select **Quemu VMs** and then click on the ``New`` button."
+
+#: ../../installation/virtual/gns3.rst:46
+msgid "Select **qemu-system-x86_64** as Quemu binary, then **512MB** of RAM and click ``Next``."
+msgstr "Select **qemu-system-x86_64** as Quemu binary, then **512MB** of RAM and click ``Next``."
+
+#: ../../installation/virtual/gns3.rst:51
+msgid "Select **telnet** as your console type and click ``Next``."
+msgstr "Select **telnet** as your console type and click ``Next``."
+
+#: ../../installation/cloud/aws.rst:37
+msgid "Select SSH key pair and click ``Launch Instances``"
+msgstr "Select SSH key pair and click ``Launch Instances``"
+
+#: ../../installation/image.rst:105
+msgid "Select the default boot image which will be started on the next boot of the system."
+msgstr "Select the default boot image which will be started on the next boot of the system."
+
+#: ../../installation/cloud/azure.rst:66
+msgid "Serial Console"
+msgstr "Serial Console"
+
+#: ../../installation/virtual/gns3.rst:91
+msgid "Set the **Boot priority** to **CD/DVD-ROM**."
+msgstr "Set the **Boot priority** to **CD/DVD-ROM**."
+
+#: ../../installation/virtual/gns3.rst:69
+msgid "Set the disk size to 2000 MiB, and click ``Finish`` to end the **Quemu image creator**."
+msgstr "Set the disk size to 2000 MiB, and click ``Finish`` to end the **Quemu image creator**."
+
+#: ../../installation/virtual/gns3.rst:165
+msgid "Set the number of required network adapters, for example **4**."
+msgstr "Set the number of required network adapters, for example **4**."
+
+#: ../../installation/vyos-on-baremetal.rst:14
+#: ../../installation/vyos-on-baremetal.rst:99
+msgid "Shopping Cart"
+msgstr "Shopping Cart"
+
+#: ../../installation/image.rst:70
+msgid "Show current system image version."
+msgstr "Show current system image version."
+
+#: ../../installation/vyos-on-baremetal.rst:128
+msgid "Sierra Wireless AirPrime MC7304 miniPCIe card (LTE)"
+msgstr "Sierra Wireless AirPrime MC7304 miniPCIe card (LTE)"
+
+#: ../../installation/vyos-on-baremetal.rst:129
+msgid "Sierra Wireless AirPrime MC7430 miniPCIe card (LTE)"
+msgstr "Sierra Wireless AirPrime MC7430 miniPCIe card (LTE)"
+
+#: ../../installation/vyos-on-baremetal.rst:130
+msgid "Sierra Wireless AirPrime MC7455 miniPCIe card (LTE)"
+msgstr "Sierra Wireless AirPrime MC7455 miniPCIe card (LTE)"
+
+#: ../../installation/vyos-on-baremetal.rst:131
+msgid "Sierra Wireless AirPrime MC7710 miniPCIe card (LTE)"
+msgstr "Sierra Wireless AirPrime MC7710 miniPCIe card (LTE)"
+
+#: ../../installation/vyos-on-baremetal.rst:228
+msgid "Simply proceed with a regular image installation as described in :ref:`installation`."
+msgstr "Simply proceed with a regular image installation as described in :ref:`installation`."
+
+#: ../../installation/vyos-on-baremetal.rst:401
+msgid "Some options have to be changed for VyOS to boot correctly. With XHCI enabled the installer can’t access the USB key. Enable EHCI instead."
+msgstr "Some options have to be changed for VyOS to boot correctly. With XHCI enabled the installer can’t access the USB key. Enable EHCI instead."
+
+#: ../../installation/virtual/gns3.rst:7
+msgid "Sometimes you may want to test VyOS in a lab environment. `GNS3 <http://www.gns3.com>`__ is a network emulation software you might use for it."
+msgstr "Sometimes you may want to test VyOS in a lab environment. `GNS3 <http://www.gns3.com>`__ is a network emulation software you might use for it."
+
+#: ../../installation/virtual/gns3.rst:132
+msgid "Start the VM."
+msgstr "Start the VM."
+
+#: ../../installation/virtual/proxmox.rst:44
+msgid "Start the VM using the command ``qm start 200`` or using the start button located in the proxmox GUI."
+msgstr "Start the VM using the command ``qm start 200`` or using the start button located in the proxmox GUI."
+
+#: ../../installation/virtual/proxmox.rst:30
+msgid "Start the virtual machine in the proxmox GUI or CLI using ``qm start 200``."
+msgstr "Start the virtual machine in the proxmox GUI or CLI using ``qm start 200``."
+
+#: ../../installation/virtual/libvirt.rst:100
+msgid "Stayed in this stage. This is because the KVM console is chosen as the default boot option."
+msgstr "Stayed in this stage. This is because the KVM console is chosen as the default boot option."
+
+#: ../../installation/install.rst:446
+msgid "Step 1: DHCP"
+msgstr "Step 1: DHCP"
+
+#: ../../installation/install.rst:474
+msgid "Step 2: TFTP"
+msgstr "Step 2: TFTP"
+
+#: ../../installation/install.rst:531
+msgid "Step 3: HTTP"
+msgstr "Step 3: HTTP"
+
+#: ../../installation/install.rst:175
+msgid "Store the key in a new text file and import it into GPG via: ``gpg --import file_with_the_public_key``"
+msgstr "Store the key in a new text file and import it into GPG via: ``gpg --import file_with_the_public_key``"
+
+#: ../../installation/install.rst:37
+msgid "Subscribers, contributors, non-profits, emergency services, academic institutions"
+msgstr "Subscribers, contributors, non-profits, emergency services, academic institutions"
+
+#: ../../installation/vyos-on-baremetal.rst:8
+msgid "Supermicro A2SDi (Atom C3000)"
+msgstr "Supermicro A2SDi (Atom C3000)"
+
+#: ../../installation/image.rst:97
+msgid "System rollback"
+msgstr "System rollback"
+
+#: ../../installation/vyos-on-baremetal.rst:396
+msgid "Terminal Type : VT100+"
+msgstr "Terminal Type : VT100+"
+
+#: ../../installation/virtual/gns3.rst:144
+msgid "The *VyOS-hda.qcow2* file now contains a working VyOS image and can be used as a template. But it still needs some fixes before we can deploy VyOS in our labs."
+msgstr "The *VyOS-hda.qcow2* file now contains a working VyOS image and can be used as a template. But it still needs some fixes before we can deploy VyOS in our labs."
+
+#: ../../installation/install.rst:452
+msgid "The *bootfile name* (DHCP option 67), which is *pxelinux.0*"
+msgstr "The *bootfile name* (DHCP option 67), which is *pxelinux.0*"
+
+#: ../../installation/install.rst:479
+msgid "The *ldlinux.c32* file from the Syslinux distribution"
+msgstr "The *ldlinux.c32* file from the Syslinux distribution"
+
+#: ../../installation/install.rst:478
+msgid "The *pxelinux.0* file from the Syslinux distribution"
+msgstr "The *pxelinux.0* file from the Syslinux distribution"
+
+#: ../../installation/vyos-on-baremetal.rst:105
+msgid "The 19\" enclosure can accommodate up to two APU4 boards - there is a single and dual front cover."
+msgstr "The 19\" enclosure can accommodate up to two APU4 boards - there is a single and dual front cover."
+
+#: ../../installation/vyos-on-baremetal.rst:187
+msgid "The Kernel will now spin up using a different console setting. Set terminal emulator to 9600 8N1 and after a while your console will show:"
+msgstr "The Kernel will now spin up using a different console setting. Set terminal emulator to 9600 8N1 and after a while your console will show:"
+
+#: ../../installation/install.rst:451
+msgid "The TFTP server address (DHCP option 66). Sometimes referred as *boot server*"
+msgstr "The TFTP server address (DHCP option 66). Sometimes referred as *boot server*"
+
+#: ../../installation/virtual/gns3.rst:174
+msgid "The VyOS VM is now ready to be deployed."
+msgstr "The VyOS VM is now ready to be deployed."
+
+#: ../../installation/image.rst:7
+msgid "The VyOS image-based installation is implemented by creating a directory for each image on the storage device selected during the install process."
+msgstr "The VyOS image-based installation is implemented by creating a directory for each image on the storage device selected during the install process."
+
+#: ../../installation/cloud/aws.rst:77
+msgid "The VyOS platform-specific scripts feature is under development. Thus, this step should be repeated manually after changing system image (:doc:`/installation/update`)"
+msgstr "The VyOS platform-specific scripts feature is under development. Thus, this step should be repeated manually after changing system image (:doc:`/installation/update`)"
+
+#: ../../installation/update.rst:20
+msgid "The `add system image` command also supports installing new versions of VyOS through an optional given VRF. Also if URL in question requires authentication, you can specify an optional username and password via the commandline which will be passed as \"Basic-Auth\" to the server."
+msgstr "The `add system image` command also supports installing new versions of VyOS through an optional given VRF. Also if URL in question requires authentication, you can specify an optional username and password via the commandline which will be passed as \"Basic-Auth\" to the server."
+
+#: ../../installation/cloud/aws.rst:67
+msgid "The amazon-cloudwatch-agent package is normally included in VyOS 1.3.3+ and 1.4+"
+msgstr "The amazon-cloudwatch-agent package is normally included in VyOS 1.3.3+ and 1.4+"
+
+#: ../../installation/vyos-on-baremetal.rst:94
+msgid "The board can be powered via 12V from the front or via a 5V onboard connector."
+msgstr "The board can be powered via 12V from the front or via a 5V onboard connector."
+
+#: ../../installation/vyos-on-baremetal.rst:314
+msgid "The chassis is a U-shaped alu extrusion with removable I/O plates and removable bottom plate. Cooling is completely passive with a heatsink on the SoC with internal and external fins, a flat interface surface, thermal pad on top of that, which then directly attaches to the chassis, which has fins as well. It comes with mounting hardware and rubber feet, so you could place it like a desktop model or mount it on a VESA mount, or even wall mount it with the provided mounting plate. The closing plate doubles as internal 2.5\" mounting place for an HDD or SSD, and comes supplied with a small SATA cable and SATA power cable."
+msgstr "The chassis is a U-shaped alu extrusion with removable I/O plates and removable bottom plate. Cooling is completely passive with a heatsink on the SoC with internal and external fins, a flat interface surface, thermal pad on top of that, which then directly attaches to the chassis, which has fins as well. It comes with mounting hardware and rubber feet, so you could place it like a desktop model or mount it on a VESA mount, or even wall mount it with the provided mounting plate. The closing plate doubles as internal 2.5\" mounting place for an HDD or SSD, and comes supplied with a small SATA cable and SATA power cable."
+
+#: ../../installation/virtual/proxmox.rst:15
+msgid "The commands below assume that virtual machine ID 200 is unused and that the user wants the disk stored in a storage pool called `local-lvm`."
+msgstr "The commands below assume that virtual machine ID 200 is unused and that the user wants the disk stored in a storage pool called `local-lvm`."
+
+#: ../../installation/virtual/libvirt.rst:55
+msgid "The convenience of using :abbr:`KVM (Kernel-based Virtual Machine)` images is that they don't need to be installed. Download predefined VyOS.qcow2 image for ``KVM``"
+msgstr "The convenience of using :abbr:`KVM (Kernel-based Virtual Machine)` images is that they don't need to be installed. Download predefined VyOS.qcow2 image for ``KVM``"
+
+#: ../../installation/install.rst:326
+msgid "The default username and password for the live system is *vyos*."
+msgstr "The default username and password for the live system is *vyos*."
+
+#: ../../installation/image.rst:10
+msgid "The directory structure of the boot device:"
+msgstr "The directory structure of the boot device:"
+
+#: ../../installation/virtual/gns3.rst:17
+msgid "The following items are required:"
+msgstr "The following items are required:"
+
+#: ../../installation/install.rst:84
+msgid "The following link will always fetch the most recent VyOS build for AMD64 systems from the current branch: https://downloads.vyos.io/rolling/current/amd64/vyos-rolling-latest.iso"
+msgstr "The following link will always fetch the most recent VyOS build for AMD64 systems from the current branch: https://downloads.vyos.io/rolling/current/amd64/vyos-rolling-latest.iso"
+
+#: ../../installation/image.rst:19
+msgid "The image directory contains the system kernel, a compressed image of the root filesystem for the OS, and a directory for persistent storage, such as configuration. On boot, the system will extract the OS image into memory and mount the appropriate live-rw sub-directories to provide persistent storage system configuration."
+msgstr "The image directory contains the system kernel, a compressed image of the root filesystem for the OS, and a directory for persistent storage, such as configuration. On boot, the system will extract the OS image into memory and mount the appropriate live-rw sub-directories to provide persistent storage system configuration."
+
+#: ../../installation/vyos-on-baremetal.rst:180
+msgid "The image will be loaded and the last lines you will get will be:"
+msgstr "The image will be loaded and the last lines you will get will be:"
+
+#: ../../installation/install.rst:178
+msgid "The import can be verified with:"
+msgstr "The import can be verified with:"
+
+#: ../../installation/install.rst:483
+msgid "The initial ramdisk of the VyOS ISO you want to deploy. That is the *initrd.img* file inside the */live* directory of the extracted contents from the ISO file. Do not use an empty (0 bytes) initrd.img file you might find, the correct file may have a longer name."
+msgstr "The initial ramdisk of the VyOS ISO you want to deploy. That is the *initrd.img* file inside the */live* directory of the extracted contents from the ISO file. Do not use an empty (0 bytes) initrd.img file you might find, the correct file may have a longer name."
+
+#: ../../installation/vyos-on-baremetal.rst:293
+msgid "The install on this Q355G4 box is pretty much plug and play. The port numbering the OS does might differ from the labels on the outside, but the UEFI firmware has a port blink test built in with MAC addresses so you can very quickly identify which is which. MAC labels are on the inside as well, and this test can be done from VyOS or plain Linux too. Default settings in the UEFI will make it boot, but depending on your installation wishes (i.e. storage type, boot type, console type) you might want to adjust them. This Qotom company seems to be the real OEM/ODM for many other relabelling companies like Protectli."
+msgstr "The install on this Q355G4 box is pretty much plug and play. The port numbering the OS does might differ from the labels on the outside, but the UEFI firmware has a port blink test built in with MAC addresses so you can very quickly identify which is which. MAC labels are on the inside as well, and this test can be done from VyOS or plain Linux too. Default settings in the UEFI will make it boot, but depending on your installation wishes (i.e. storage type, boot type, console type) you might want to adjust them. This Qotom company seems to be the real OEM/ODM for many other relabelling companies like Protectli."
+
+#: ../../installation/install.rst:480
+msgid "The kernel of the VyOS software you want to deploy. That is the *vmlinuz* file inside the */live* directory of the extracted contents from the ISO file."
+msgstr "The kernel of the VyOS software you want to deploy. That is the *vmlinuz* file inside the */live* directory of the extracted contents from the ISO file."
+
+#: ../../installation/install.rst:47
+msgid "The minimum system requirements are 1024 MiB RAM and 2 GiB storage. Depending on your use, you might need additional RAM and CPU resources e.g. when having multiple BGP full tables in your system."
+msgstr "The minimum system requirements are 1024 MiB RAM and 2 GiB storage. Depending on your use, you might need additional RAM and CPU resources e.g. when having multiple BGP full tables in your system."
+
+#: ../../installation/update.rst:76
+msgid "The most up-do-date Rolling Release for AMD64 can be accessed using the following URL:"
+msgstr "The most up-do-date Rolling Release for AMD64 can be accessed using the following URL:"
+
+#: ../../installation/install.rst:107
+msgid "The official VyOS public key can be retrieved in a number of ways. Skip to :ref:`gpg-verification` if the key is already present."
+msgstr "The official VyOS public key can be retrieved in a number of ways. Skip to :ref:`gpg-verification` if the key is already present."
+
+#: ../../installation/install.rst:197
+msgid "The signature can be downloaded by appending `.asc` to the URL of the downloaded VyOS image. That small *.asc* file is the signature for the associated image."
+msgstr "The signature can be downloaded by appending `.asc` to the URL of the downloaded VyOS image. That small *.asc* file is the signature for the associated image."
+
+#: ../../installation/virtual/libvirt.rst:116
+msgid "The system is fully operational."
+msgstr "The system is fully operational."
+
+#: ../../installation/virtual/libvirt.rst:120
+msgid "The virt-manager application is a desktop user interface for managing virtual machines through libvirt. On the linux open :abbr:`VMM (Virtual Machine Manager)`."
+msgstr "The virt-manager application is a desktop user interface for managing virtual machines through libvirt. On the linux open :abbr:`VMM (Virtual Machine Manager)`."
+
+#: ../../installation/install.rst:587
+msgid "The workaround is to type `e` when the boot menu appears and edit the GRUB boot options.  Specifically, remove the:"
+msgstr "The workaround is to type `e` when the boot menu appears and edit the GRUB boot options.  Specifically, remove the:"
+
+#: ../../installation/vyos-on-baremetal.rst:421
+msgid "Then VyOS should boot and you can perform the ``install image``"
+msgstr "Then VyOS should boot and you can perform the ``install image``"
+
+#: ../../installation/virtual/libvirt.rst:113
+msgid "Then go to the first session where you opened the console. Select ``VyOS 1.4.x for QEMU (Serial console)`` and press ``Enter``"
+msgstr "Then go to the first session where you opened the console. Select ``VyOS 1.4.x for QEMU (Serial console)`` and press ``Enter``"
+
+#: ../../installation/image.rst:108
+msgid "Then reboot the system."
+msgstr "Then reboot the system."
+
+#: ../../installation/virtual/libvirt.rst:152
+#: ../../installation/virtual/libvirt.rst:188
+msgid "Then you will be taken to the console."
+msgstr "Then you will be taken to the console."
+
+#: ../../installation/vyos-on-baremetal.rst:328
+msgid "There are WDT options and auto-boot on power enable, which is great for remote setups. Firmware is reasonably secure (no backdoors found, BootGuard is enabled in enforcement mode, which is good but also means no coreboot option), yet has most options available to configure (so it's not locked out like most firmwares are)."
+msgstr "There are WDT options and auto-boot on power enable, which is great for remote setups. Firmware is reasonably secure (no backdoors found, BootGuard is enabled in enforcement mode, which is good but also means no coreboot option), yet has most options available to configure (so it's not locked out like most firmwares are)."
+
+#: ../../installation/vyos-on-baremetal.rst:306
+msgid "There are a number of other options, but they all seem to be close to Intel reference designs, with added features like more serial ports, more network interfaces and the likes. Because they don't deviate too much from standard designs all the hardware is well-supported by mainline. It accepts one LPDDR3 SO-DIMM, but chances are that if you need more than that, you'll also want something even beefier than an i5. There are options for antenna holes, and SIM slots, so you could in theory add an LTE/Cell modem (not tested so far)."
+msgstr "There are a number of other options, but they all seem to be close to Intel reference designs, with added features like more serial ports, more network interfaces and the likes. Because they don't deviate too much from standard designs all the hardware is well-supported by mainline. It accepts one LPDDR3 SO-DIMM, but chances are that if you need more than that, you'll also want something even beefier than an i5. There are options for antenna holes, and SIM slots, so you could in theory add an LTE/Cell modem (not tested so far)."
+
+#: ../../installation/virtual/vmware.rst:13
+msgid "There have been previous documented issues with GRE/IPSEC tunneling using the E1000 adapter on the VyOS guest, and use of the VMXNET3 has been advised."
+msgstr "There have been previous documented issues with GRE/IPSEC tunneling using the E1000 adapter on the VyOS guest, and use of the VMXNET3 has been advised."
+
+#: ../../installation/migrate-from-vyatta.rst:101
+msgid "This example uses VyOS 1.0.0, however, it's better to install the latest release."
+msgstr "This example uses VyOS 1.0.0, however, it's better to install the latest release."
+
+#: ../../installation/vyos-on-baremetal.rst:85
+msgid "This guide was developed using an APU4C4 board with the following specs:"
+msgstr "This guide was developed using an APU4C4 board with the following specs:"
+
+#: ../../installation/virtual/gns3.rst:11
+msgid "This guide will provide the necessary steps for installing and setting up VyOS on GNS3."
+msgstr "This guide will provide the necessary steps for installing and setting up VyOS on GNS3."
+
+#: ../../installation/install.rst:577
+msgid "This is a list of known issues that can arise during installation."
+msgstr "This is a list of known issues that can arise during installation."
+
+#: ../../installation/vyos-on-baremetal.rst:374
+msgid "This microbox network appliance was build to create OpenVPN bridges. It can saturate a 100Mbps link. It is a small (serial console only) PC with 6 Gb LAN"
+msgstr "This microbox network appliance was build to create OpenVPN bridges. It can saturate a 100Mbps link. It is a small (serial console only) PC with 6 Gb LAN"
+
+#: ../../installation/image.rst:25
+msgid "This process allows for a system to always boot to a known working state, as the OS image is fixed and non-persistent. It also allows for multiple releases of VyOS to be installed on the same storage device. The image can be selected manually at boot if needed, but the system will otherwise boot the image configured to be the default."
+msgstr "This process allows for a system to always boot to a known working state, as the OS image is fixed and non-persistent. It also allows for multiple releases of VyOS to be installed on the same storage device. The image can be selected manually at boot if needed, but the system will otherwise boot the image configured to be the default."
+
+#: ../../installation/cloud/aws.rst:75
+msgid "This step also enables systemd service and runs it."
+msgstr "This step also enables systemd service and runs it."
+
+#: ../../installation/install.rst:96
+msgid "This subsection only applies to LTS images, for Rolling images please jump to :ref:`live_installation`."
+msgstr "This subsection only applies to LTS images, for Rolling images please jump to :ref:`live_installation`."
+
+#: ../../installation/cloud/gcp.rst:8
+msgid "To deploy VyOS on GCP (Google Cloud Platform)"
+msgstr "To deploy VyOS on GCP (Google Cloud Platform)"
+
+#: ../../installation/virtual/gns3.rst:153
+msgid "To turn the template into a working VyOS machine, further steps are necessary as outlined below:"
+msgstr "To turn the template into a working VyOS machine, further steps are necessary as outlined below:"
+
+#: ../../installation/cloud/aws.rst:55
+msgid "To use Amazon CloudWatch Agent, configure it within the Amazon SSM Parameter Store. If you don't have a configuration yet, do :ref:`configuration_creation`."
+msgstr "To use Amazon CloudWatch Agent, configure it within the Amazon SSM Parameter Store. If you don't have a configuration yet, do :ref:`configuration_creation`."
+
+#: ../../installation/install.rst:248
+msgid "To verify a VyOS image starting off with VyOS 1.3.0-rc6 you can run:"
+msgstr "To verify a VyOS image starting off with VyOS 1.3.0-rc6 you can run:"
+
+#: ../../installation/install.rst:337
+msgid "Unlike general purpose Linux distributions, VyOS uses \"image installation\" that mimics the user experience of traditional hardware routers and allows keeping multiple VyOS versions installed simultaneously. This makes it possible to switch to a previous version if something breaks or miss-behaves after an image upgrade."
+msgstr "Unlike general purpose Linux distributions, VyOS uses \"image installation\" that mimics the user experience of traditional hardware routers and allows keeping multiple VyOS versions installed simultaneously. This makes it possible to switch to a previous version if something breaks or miss-behaves after an image upgrade."
+
+#: ../../installation/install.rst:288
+msgid "Unmount the USB drive. Replace X in the example below with the letter of your device and keep the asterisk (wildcard) to unmount all partitions."
+msgstr "Unmount the USB drive. Replace X in the example below with the letter of your device and keep the asterisk (wildcard) to unmount all partitions."
+
+#: ../../installation/update.rst:4
+msgid "Update VyOS"
+msgstr "Update VyOS"
+
+#: ../../installation/migrate-from-vyatta.rst:26
+msgid "Upgrade procedure"
+msgstr "Upgrade procedure"
+
+#: ../../installation/migrate-from-vyatta.rst:156
+msgid "Upon reboot, you should have a working installation of VyOS."
+msgstr "Upon reboot, you should have a working installation of VyOS."
+
+#: ../../installation/virtual/gns3.rst:60
+msgid "Use the defaults in the **Binary and format** window and click ``Next``."
+msgstr "Use the defaults in the **Binary and format** window and click ``Next``."
+
+#: ../../installation/virtual/gns3.rst:65
+msgid "Use the defaults in the **Qcow2 options** window and click ``Next``."
+msgstr "Use the defaults in the **Qcow2 options** window and click ``Next``."
+
+#: ../../installation/vyos-on-baremetal.rst:205
+msgid "Use the following command to adjust the :ref:`serial-console` settings:"
+msgstr "Use the following command to adjust the :ref:`serial-console` settings:"
+
+#: ../../installation/update.rst:16
+msgid "Use this command to install a new system image. You can reach the image from the web (``http://``, ``https://``) or from your local system, e.g.  /tmp/vyos-1.2.3-amd64.iso."
+msgstr "Use this command to install a new system image. You can reach the image from the web (``http://``, ``https://``) or from your local system, e.g.  /tmp/vyos-1.2.3-amd64.iso."
+
+#: ../../installation/virtual/proxmox.rst:45
+msgid "Using the proxmox webGUI, open the virtual console for your newly created vm. Login username/password is ``vyos/vyos``."
+msgstr "Using the proxmox webGUI, open the virtual console for your newly created vm. Login username/password is ``vyos/vyos``."
+
+#: ../../installation/virtual/gns3.rst:28
+msgid "VM setup"
+msgstr "VM setup"
+
+#: ../../installation/virtual/libvirt.rst:119
+msgid "Virt-manager"
+msgstr "Virt-manager"
+
+#: ../../installation/virtual/proxmox.rst:54
+msgid "Visit https://www.proxmox.com/en/ for more information about the download and installation of this hypervisor."
+msgstr "Visit https://www.proxmox.com/en/ for more information about the download and installation of this hypervisor."
+
+#: ../../installation/install.rst:272
+msgid "VyOS, as other GNU+Linux distributions, can be tested without installing it in your hard drive. **With your downloaded VyOS .iso file you can create a bootable USB drive that will let you boot into a fully functional VyOS system**. Once you have tested it, you can either decide to begin a :ref:`permanent_installation` in your hard drive or power your system off, remove the USB drive, and leave everything as it was."
+msgstr "VyOS, as other GNU+Linux distributions, can be tested without installing it in your hard drive. **With your downloaded VyOS .iso file you can create a bootable USB drive that will let you boot into a fully functional VyOS system**. Once you have tested it, you can either decide to begin a :ref:`permanent_installation` in your hard drive or power your system off, remove the USB drive, and leave everything as it was."
+
+#: ../../installation/vyos-on-baremetal.rst:135
+msgid "VyOS 1.2 (crux)"
+msgstr "VyOS 1.2 (crux)"
+
+#: ../../installation/vyos-on-baremetal.rst:222
+msgid "VyOS 1.2 (rolling)"
+msgstr "VyOS 1.2 (rolling)"
+
+#: ../../installation/migrate-from-vyatta.rst:6
+msgid "VyOS 1.x line aims to preserve backward compatibility and provide a safe upgrade path for existing Vyatta Core users. You may think of VyOS 1.0.0 as VC7.0."
+msgstr "VyOS 1.x line aims to preserve backward compatibility and provide a safe upgrade path for existing Vyatta Core users. You may think of VyOS 1.0.0 as VC7.0."
+
+#: ../../installation/install.rst:438
+msgid "VyOS ISO image to be installed (do not use images prior to VyOS 1.2.3)"
+msgstr "VyOS ISO image to be installed (do not use images prior to VyOS 1.2.3)"
+
+#: ../../installation/virtual/gns3.rst:151
+msgid "VyOS VM configuration"
+msgstr "VyOS VM configuration"
+
+#: ../../installation/image.rst:110
+msgid "VyOS automatically associates the configuration to the image, so you don't need to worry about that. Each image has a unique copy of its configuration."
+msgstr "VyOS automatically associates the configuration to the image, so you don't need to worry about that. Each image has a unique copy of its configuration."
+
+#: ../../installation/install.rst:429
+msgid "VyOS can also be installed through PXE. This is a more complex installation method that allows deploying VyOS through the network."
+msgstr "VyOS can also be installed through PXE. This is a more complex installation method that allows deploying VyOS through the network."
+
+#: ../../installation/update.rst:29
+msgid "VyOS configuration is associated to each image, and **each image has a unique copy of its configuration**. This is different than a traditional network router where the configuration is shared across all images."
+msgstr "VyOS configuration is associated to each image, and **each image has a unique copy of its configuration**. This is different than a traditional network router where the configuration is shared across all images."
+
+#: ../../installation/vyos-on-baremetal.rst:263
+msgid "VyOS custom print"
+msgstr "VyOS custom print"
+
+#: ../../installation/virtual/gns3.rst:128
+msgid "VyOS installation"
+msgstr "VyOS installation"
+
+#: ../../installation/install.rst:7
+msgid "VyOS installation requires a downloaded VyOS .iso file. That file is a live install image that lets you boot a live VyOS. From the live system, you can proceed to a permanent installation on a hard drive or any other type of storage."
+msgstr "VyOS installation requires a downloaded VyOS .iso file. That file is a live install image that lets you boot a live VyOS. From the live system, you can proceed to a permanent installation on a hard drive or any other type of storage."
+
+#: ../../installation/virtual/docker.rst:15
+msgid "VyOS requires an IPv6-enabled docker network. Currently linux distributions do not enable docker IPv6 support by default. You can enable IPv6 support in two ways."
+msgstr "VyOS requires an IPv6-enabled docker network. Currently linux distributions do not enable docker IPv6 support by default. You can enable IPv6 support in two ways."
+
+#: ../../installation/migrate-from-vyatta.rst:15
+msgid "Vyatta Core 6.4 and earlier may have incompatibilities. In Vyatta 6.5 the \"modify\" firewall was removed and replaced with the ``set policy route`` command family, old configs can not be automatically converted. You will have to adapt it to post-6.5 Vyatta syntax manually."
+msgstr "Vyatta Core 6.4 and earlier may have incompatibilities. In Vyatta 6.5 the \"modify\" firewall was removed and replaced with the ``set policy route`` command family, old configs can not be automatically converted. You will have to adapt it to post-6.5 Vyatta syntax manually."
+
+#: ../../installation/migrate-from-vyatta.rst:13
+msgid "Vyatta Core releases from 6.5 to 6.6 should be 100% compatible."
+msgstr "Vyatta Core releases from 6.5 to 6.6 should be 100% compatible."
+
+#: ../../installation/migrate-from-vyatta.rst:11
+msgid "Vyatta release compatibility"
+msgstr "Vyatta release compatibility"
+
+#: ../../installation/vyos-on-baremetal.rst:122
+msgid "WWAN"
+msgstr "WWAN"
+
+#: ../../installation/install.rst:306
+msgid "Wait until you get the outcome (bytes copied). Be patient, in some computers it might take more than one minute."
+msgstr "Wait until you get the outcome (bytes copied). Be patient, in some computers it might take more than one minute."
+
+#: ../../installation/vyos-on-baremetal.rst:364
+msgid "Warning the interface labels on my device are backwards; the left-most \"LAN4\" port is eth0 and the right-most \"LAN1\" port is eth3."
+msgstr "Warning the interface labels on my device are backwards; the left-most \"LAN4\" port is eth0 and the right-most \"LAN1\" port is eth3."
+
+#: ../../installation/install.rst:533
+msgid "We also need to provide the *filesystem.squashfs* file. That is a heavy file and TFTP is slow, so you could send it through HTTP to speed up the transfer. That is how it is done in our example, you can find that in the configuration file above."
+msgstr "We also need to provide the *filesystem.squashfs* file. That is a heavy file and TFTP is slow, so you could send it through HTTP to speed up the transfer. That is how it is done in our example, you can find that in the configuration file above."
+
+#: ../../installation/install.rst:437
+msgid "Webserver (HTTP) - optional, but we will use it to speed up installation"
+msgstr "Webserver (HTTP) - optional, but we will use it to speed up installation"
+
+#: ../../installation/cloud/aws.rst:96
+msgid "When prompted, answer \"yes\" to the question \"Do you want to store the config in the SSM parameter store?\"."
+msgstr "When prompted, answer \"yes\" to the question \"Do you want to store the config in the SSM parameter store?\"."
+
+#: ../../installation/virtual/vmware.rst:19
+msgid "When the underlying ESXi host is approaching ~92% memory utilisation it will start the balloon process in a 'soft' state to start reclaiming memory from guest operating systems. This causes an artificial pressure using the vmmemctl driver on memory usage on the virtual guest. As VyOS by default does not have a swap file, this vmmemctl pressure is unable to force processes to move in memory data to the paging file, and blindly consumes memory forcing the virtual guest into a low memory state with no way to escape. The balloon can expand to 65% of guest allocated memory, so a VyOS guest running >35% of memory usage, can encounter an out of memory situation, and trigger the kernel oom_kill process. At this point a weighted lottery favouring memory hungry processes will be run with the unlucky winner being terminated by the kernel."
+msgstr "When the underlying ESXi host is approaching ~92% memory utilisation it will start the balloon process in a 'soft' state to start reclaiming memory from guest operating systems. This causes an artificial pressure using the vmmemctl driver on memory usage on the virtual guest. As VyOS by default does not have a swap file, this vmmemctl pressure is unable to force processes to move in memory data to the paging file, and blindly consumes memory forcing the virtual guest into a low memory state with no way to escape. The balloon can expand to 65% of guest allocated memory, so a VyOS guest running >35% of memory usage, can encounter an out of memory situation, and trigger the kernel oom_kill process. At this point a weighted lottery favouring memory hungry processes will be run with the unlucky winner being terminated by the kernel."
+
+#: ../../installation/vyos-on-baremetal.rst:112
+msgid "WiFi"
+msgstr "WiFi"
+
+#: ../../installation/install.rst:194
+msgid "With the public key imported, the signature for the desired image needs to be downloaded."
+msgstr "With the public key imported, the signature for the desired image needs to be downloaded."
+
+#: ../../installation/vyos-on-baremetal.rst:354
+msgid "Write VyOS ISO to USB drive of some sort"
+msgstr "Write VyOS ISO to USB drive of some sort"
+
+#: ../../installation/virtual/gns3.rst:42
+msgid "Write a name for your VM, for instance \"VyOS\", and click ``Next``."
+msgstr "Write a name for your VM, for instance \"VyOS\", and click ``Next``."
+
+#: ../../installation/install.rst:296
+msgid "Write the image (your VyOS .iso file) to the USB drive. Note that here you want to use the device name (e.g. /dev/sdb), not the partition name (e.g. /dev/sdb1)."
+msgstr "Write the image (your VyOS .iso file) to the USB drive. Note that here you want to use the device name (e.g. /dev/sdb), not the partition name (e.g. /dev/sdb1)."
+
+#: ../../installation/update.rst:38
+msgid "You can access files from a previous installation and copy them to your current image if they were located in the ``/config`` directory. This can be done using the :opcmd:`copy` command. So, for instance, in order to copy ``/config/config.boot`` from VyOS 1.2.1 image, you would use the following command:"
+msgstr "You can access files from a previous installation and copy them to your current image if they were located in the ``/config`` directory. This can be done using the :opcmd:`copy` command. So, for instance, in order to copy ``/config/config.boot`` from VyOS 1.2.1 image, you would use the following command:"
+
+#: ../../installation/virtual/docker.rst:74
+msgid "You can execute ``docker stop vyos`` when you are finished with the container."
+msgstr "You can execute ``docker stop vyos`` when you are finished with the container."
+
+#: ../../installation/migrate-from-vyatta.rst:158
+msgid "You can go back to your Vyatta install using the ``set system image default-boot`` command and selecting the your previous Vyatta Core image."
+msgstr "You can go back to your Vyatta install using the ``set system image default-boot`` command and selecting the your previous Vyatta Core image."
+
+#: ../../installation/vyos-on-baremetal.rst:198
+msgid "You can now proceed with a regular image installation as described in :ref:`installation`."
+msgstr "You can now proceed with a regular image installation as described in :ref:`installation`."
+
+#: ../../installation/migrate-from-vyatta.rst:28
+msgid "You just use ``add system image``, as if it was a new VC release (see :ref:`update_vyos` for additional information). The only thing you want to do is to verify the new images digital signature. You will have to add the public key manually once as it is not shipped the first time."
+msgstr "You just use ``add system image``, as if it was a new VC release (see :ref:`update_vyos` for additional information). The only thing you want to do is to verify the new images digital signature. You will have to add the public key manually once as it is not shipped the first time."
+
+#: ../../installation/vyos-on-baremetal.rst:377
+msgid "You may have to add your own RAM and HDD/SSD. There is no VGA connector. But Acrosser provides a DB25 adapter for the VGA header on the motherboard (not used)."
+msgstr "You may have to add your own RAM and HDD/SSD. There is no VGA connector. But Acrosser provides a DB25 adapter for the VGA header on the motherboard (not used)."
+
+#: ../../installation/virtual/gns3.rst:105
+msgid "You probably will want to accept to copy the .iso file to your default image directory when you are asked."
+msgstr "You probably will want to accept to copy the .iso file to your default image directory when you are asked."
+
+#: ../../installation/install.rst:423
+msgid "You will boot now into a permanent VyOS system."
+msgstr "You will boot now into a permanent VyOS system."
+
+#: ../../installation/virtual/vmware.rst:9
+msgid ".ova files are available for supporting users, and a VyOS can also be stood up using a generic Linux instance, and attaching the bootable ISO file and installing from the ISO using the normal process around `install image`."
+msgstr ".ova files are available for supporting users, and a VyOS can also be stood up using a generic Linux instance, and attaching the bootable ISO file and installing from the ISO using the normal process around `install image`."
+
+#: ../../installation/virtual/gns3.rst:136
+msgid ":ref:`Install VyOS <installation>` as normal (that is, using the ``install image`` command)."
+msgstr ":ref:`Install VyOS <installation>` as normal (that is, using the ``install image`` command)."
+
+#: ../../installation/install.rst:435
+msgid ":ref:`dhcp-server`"
+msgstr ":ref:`dhcp-server`"
+
+#: ../../installation/install.rst:436
+msgid ":ref:`tftp-server`"
+msgstr ":ref:`tftp-server`"
+
+#: ../../installation/install.rst:246
+msgid ":vytask:`T2108` switched the validation system to prefer minisign over GPG keys."
+msgstr ":vytask:`T2108` switched the validation system to prefer minisign over GPG keys."
+
+#: ../../installation/vyos-on-baremetal.rst:349
+msgid "`Manufacturer product page <http://www.inctel.com.cn/product/detail/338.html>`_."
+msgstr "`Manufacturer product page <http://www.inctel.com.cn/product/detail/338.html>`_."
+
+#: ../../installation/install.rst:112
+msgid "``gpg --recv-keys FD220285A0FE6D7E``"
+msgstr "``gpg --recv-keys FD220285A0FE6D7E``"
+
+#: ../../installation/install.rst:590
+msgid "`console=ttyS0,115200`"
+msgstr "`console=ttyS0,115200`"
+
+#: ../../installation/cloud/azure.rst:72
+msgid "https://azure.microsoft.com"
+msgstr "https://azure.microsoft.com"
+
+#: ../../installation/cloud/aws.rst:100
+msgid "https://console.aws.amazon.com/"
+msgstr "https://console.aws.amazon.com/"
+
+#: ../../installation/cloud/gcp.rst:58
+msgid "https://console.cloud.google.com/"
+msgstr "https://console.cloud.google.com/"
+
+#: ../../installation/cloud/aws.rst:101
+msgid "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/create-iam-roles-for-cloudwatch-agent.html"
+msgstr "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/create-iam-roles-for-cloudwatch-agent.html"
+
+#: ../../installation/cloud/aws.rst:102
+msgid "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/install-CloudWatch-Agent-on-EC2-Instance-fleet.html"
+msgstr "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/install-CloudWatch-Agent-on-EC2-Instance-fleet.html"
+
+#: ../../installation/virtual/vmware.rst:44
+msgid "https://muralidba.blogspot.com/2018/03/how-does-linux-out-of-memory-oom-killer.html"
+msgstr "https://muralidba.blogspot.com/2018/03/how-does-linux-out-of-memory-oom-killer.html"
+
+#: ../../installation/install.rst:116
+msgid "https://pgp.mit.edu/pks/lookup?op=get&search=0xFD220285A0FE6D7E"
+msgstr "https://pgp.mit.edu/pks/lookup?op=get&search=0xFD220285A0FE6D7E"
+
+#: ../../installation/update.rst:79
+msgid "https://vyos.net/get/nightly-builds/"
+msgstr "https://vyos.net/get/nightly-builds/"
+
+#: ../../installation/virtual/eve-ng.rst:8
+msgid "https://www.eve-ng.net/"
+msgstr "https://www.eve-ng.net/"
+
+#: ../../installation/cloud/oracel.rst:8
+msgid "https://www.oracle.com/cloud/"
+msgstr "https://www.oracle.com/cloud/"
+
+#: ../../installation/virtual/docker.rst:73
+msgid "ly-builds/releases/download/1.4-rolling-202308240020/vyos-1.4-rolling-202308240020-amd64.iso"
+msgstr "ly-builds/releases/download/1.4-rolling-202308240020/vyos-1.4-rolling-202308240020-amd64.iso"
+
+#: ../../installation/install.rst:592
+msgid "option, and type CTRL-X to boot."
+msgstr "option, and type CTRL-X to boot."
diff --git a/docs/_locale/de/introducing.pot b/docs/_locale/de/introducing.pot
new file mode 100644
index 00000000..33c776c2
--- /dev/null
+++ b/docs/_locale/de/introducing.pot
@@ -0,0 +1,161 @@
+msgid ""
+msgstr ""
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Localazy (https://localazy.com)\n"
+"Project-Id-Version: VyOS Documentation\n"
+"Language: de\n"
+"Plural-Forms: nplurals=2; plural=(n==1) ? 0 : 1;\n"
+
+#: ../../introducing/history.rst:134
+msgid "A business model comparable to that of Redis, rather than that of VyOS today."
+msgstr "A business model comparable to that of Redis, rather than that of VyOS today."
+
+#: ../../introducing/history.rst:119
+msgid "A note on copyright"
+msgstr "A note on copyright"
+
+#: ../../introducing/about.rst:5
+msgid "About"
+msgstr "About"
+
+#: ../../introducing/history.rst:74
+msgid "Although Crux came with too many new features to mention here, some noteworthy ones are: an mDNS repeater, a broadcast relay, a high-performance PPPoE server, an HFSC scheduler, as well as support for Wireguard, unicast VRRP, RPKI for BGP and fully 802.1ad-compliant QinQ ethertype. The telnet server and support for P2P filtering were removed."
+msgstr "Although Crux came with too many new features to mention here, some noteworthy ones are: an mDNS repeater, a broadcast relay, a high-performance PPPoE server, an HFSC scheduler, as well as support for Wireguard, unicast VRRP, RPKI for BGP and fully 802.1ad-compliant QinQ ethertype. The telnet server and support for P2P filtering were removed."
+
+#: ../../introducing/history.rst:88
+msgid "As of 2022, Crux is still supported and maintained."
+msgstr "As of 2022, Crux is still supported and maintained."
+
+#: ../../introducing/history.rst:104
+msgid "As of 2022, Equuleus is in the stable."
+msgstr "As of 2022, Equuleus is in the stable."
+
+#: ../../introducing/history.rst:35
+msgid "Brocade was acquired by Broadcom in 2016 and sold what remains of erstwhile Vyatta to AT&T in 2017, who in turn sold it to Ciena in 2021."
+msgstr "Brocade was acquired by Broadcom in 2016 and sold what remains of erstwhile Vyatta to AT&T in 2017, who in turn sold it to Ciena in 2021."
+
+#: ../../introducing/history.rst:113
+msgid "Circinus (1.5)"
+msgstr "Circinus (1.5)"
+
+#: ../../introducing/history.rst:115
+msgid "Circinus (the Compass) is the codename of the upcoming development branch, so there's no VyOS 1.5 yet."
+msgstr "Circinus (the Compass) is the codename of the upcoming development branch, so there's no VyOS 1.5 yet."
+
+#: ../../introducing/history.rst:68
+msgid "Crux (1.2)"
+msgstr "Crux (1.2)"
+
+#: ../../introducing/history.rst:70
+msgid "Crux (the Southern Cross) came out on 28 January 2019 and was the first major release of VyOS as we know it today. The underlying Debian base was upgraded from Squeeze (6) to Jessie (8)."
+msgstr "Crux (the Southern Cross) came out on 28 January 2019 and was the first major release of VyOS as we know it today. The underlying Debian base was upgraded from Squeeze (6) to Jessie (8)."
+
+#: ../../introducing/history.rst:81
+msgid "Crux is the first version to feature the modular image build system. CLI definitions began to be written in the modern, verifiable XML templates. Python APIs were introduced for command scripting and configuration migration. Introduction of new Perl and shell code was proscribed and the rewriting of legacy Perl code in pure Python began with Crux."
+msgstr "Crux is the first version to feature the modular image build system. CLI definitions began to be written in the modern, verifiable XML templates. Python APIs were introduced for command scripting and configuration migration. Introduction of new Perl and shell code was proscribed and the rewriting of legacy Perl code in pure Python began with Crux."
+
+#: ../../introducing/history.rst:91
+msgid "Equuleus (1.3)"
+msgstr "Equuleus (1.3)"
+
+#: ../../introducing/history.rst:97
+msgid "Equuleus brought many long-desired features with it, most notably an SSTP VPN server, an IPoE server, an OpenConnect VPN server and a serial console server, in addition to reworked support for WWAN interfaces, support for GENEVE and MACSec interfaces, VRF, IS-IS routing, preliminary support for MPLS and LDP, and many other initialisms."
+msgstr "Equuleus brought many long-desired features with it, most notably an SSTP VPN server, an IPoE server, an OpenConnect VPN server and a serial console server, in addition to reworked support for WWAN interfaces, support for GENEVE and MACSec interfaces, VRF, IS-IS routing, preliminary support for MPLS and LDP, and many other initialisms."
+
+#: ../../introducing/history.rst:133
+msgid "From the Sanskrit adjective \"Vyātta\" (व्यात्त), meaning opened."
+msgstr "From the Sanskrit adjective \"Vyātta\" (व्यात्त), meaning opened."
+
+#: ../../introducing/history.rst:58
+msgid "Helium (1.1)"
+msgstr "Helium (1.1)"
+
+#: ../../introducing/history.rst:60
+msgid "Helium was released on 9 October 2014, exactly on the day VyOS Project first came into being in the previous year. Helium came with a lot of new features, including an event handler and support for L2TPv3, 802.1ad QinQ and IGMP proxy, as well as experimental support for VXLAN and DMVPN (the latter of which was also broken in Vyatta Core due to its reliance on a proprietary NHRP implementation)."
+msgstr "Helium was released on 9 October 2014, exactly on the day VyOS Project first came into being in the previous year. Helium came with a lot of new features, including an event handler and support for L2TPv3, 802.1ad QinQ and IGMP proxy, as well as experimental support for VXLAN and DMVPN (the latter of which was also broken in Vyatta Core due to its reliance on a proprietary NHRP implementation)."
+
+#: ../../introducing/history.rst:5
+msgid "History"
+msgstr "History"
+
+#: ../../introducing/history.rst:49
+msgid "Hydrogen (1.0)"
+msgstr "Hydrogen (1.0)"
+
+#: ../../introducing/history.rst:28
+msgid "In 2013, soon after Vyatta Core was abandoned, the community forked the last Vyatta Core version (6.6R1) and VyOS Project came into being. `Sentrium SL <https://blog.vyos.io/sentrium-what-sentrium>`_ was established by VyOS maintainers in 2014 to fund VyOS development by selling support, consulting services and prebuilt long-term support images."
+msgstr "In 2013, soon after Vyatta Core was abandoned, the community forked the last Vyatta Core version (6.6R1) and VyOS Project came into being. `Sentrium SL <https://blog.vyos.io/sentrium-what-sentrium>`_ was established by VyOS maintainers in 2014 to fund VyOS development by selling support, consulting services and prebuilt long-term support images."
+
+#: ../../introducing/history.rst:8
+msgid "In the beginning..."
+msgstr "In the beginning..."
+
+#: ../../introducing/history.rst:22
+msgid "It's worth noting that by the time Brocade acquired Vyatta, development of Vyatta Core was already stagnated. Vyatta Subscription Edition (and thus, Vyatta development as a whole) had been replacing core components with proprietary software, meaning few features made it to Vyatta Core, and those that did were bug-ridden and hamstrung."
+msgstr "It's worth noting that by the time Brocade acquired Vyatta, development of Vyatta Core was already stagnated. Vyatta Subscription Edition (and thus, Vyatta development as a whole) had been replacing core components with proprietary software, meaning few features made it to Vyatta Core, and those that did were bug-ridden and hamstrung."
+
+#: ../../introducing/history.rst:40
+msgid "Major releases"
+msgstr "Major releases"
+
+#: ../../introducing/history.rst:51
+msgid "Released just in time for holidays on 22 December 2013, Hydrogen was the first major VyOS release. It fixed features that were broken in Vyatta Core 6.6 (such as IPv4 BGP peer groups and DHCPv6 relay) and introduced command scripting, a task scheduler and web proxy LDAP authentication."
+msgstr "Released just in time for holidays on 22 December 2013, Hydrogen was the first major VyOS release. It fixed features that were broken in Vyatta Core 6.6 (such as IPv4 BGP peer groups and DHCPv6 relay) and introduced command scripting, a task scheduler and web proxy LDAP authentication."
+
+#: ../../introducing/history.rst:107
+msgid "Sagitta (1.4)"
+msgstr "Sagitta (1.4)"
+
+#: ../../introducing/history.rst:109
+msgid "Sagitta (the Arrow) is the codename of the current development branch, so there's no VyOS 1.4 yet."
+msgstr "Sagitta (the Arrow) is the codename of the current development branch, so there's no VyOS 1.4 yet."
+
+#: ../../introducing/history.rst:93
+msgid "The current long-term support version of VyOS, Equuleus (the Pony) came out on 21 December 2021, once again in time for the winter holidays."
+msgstr "The current long-term support version of VyOS, Equuleus (the Pony) came out on 21 December 2021, once again in time for the winter holidays."
+
+#: ../../introducing/about.rst:19
+msgid "The manual version is selected/specified by it's Git branch name. You can switch between versions of the documentation by selecting the appropriate branch on the bottom left corner."
+msgstr "The manual version is selected/specified by it's Git branch name. You can switch between versions of the documentation by selecting the appropriate branch on the bottom left corner."
+
+#: ../../introducing/history.rst:10
+msgid "There once was a network operating system based on Debian GNU/Linux, called Vyatta. [*]_ 2006 onwards, it was a great free software alternative to Cisco IOS and Jupiter JUNOS. It came in two editions: Vyatta Core (previously Vyatta Community Edition) that was completely free software, and Vyatta Subscription Edition that had proprietary features and was only available to paying customers. [*]_"
+msgstr "There once was a network operating system based on Debian GNU/Linux, called Vyatta. [*]_ 2006 onwards, it was a great free software alternative to Cisco IOS and Jupiter JUNOS. It came in two editions: Vyatta Core (previously Vyatta Community Edition) that was completely free software, and Vyatta Subscription Edition that had proprietary features and was only available to paying customers. [*]_"
+
+#: ../../introducing/history.rst:136
+msgid "This is not unlike how Linus Torvalds owns the trademark \"Linux\"."
+msgstr "This is not unlike how Linus Torvalds owns the trademark \"Linux\"."
+
+#: ../../introducing/history.rst:121
+msgid "Unlike Vyatta, VyOS never had (nor will ever have) proprietary code. The only proprietary material in VyOS is non-code assets, such as graphics and the trademark \"VyOS\". [*]_ This means you can build your own long-term support images (as the entire toolchain we use is free software) and even distribute them, given you rename it and remove such assets before building. Although note that we do not provide support for images distributed by a third-party. See the `artwork license <https://github.com/vyos/vyos-build/blob/current/LICENSE.artwork>`_ and the end-user license agreement at ``/usr/share/vyos/EULA`` in any pre-built image for more precise information."
+msgstr "Unlike Vyatta, VyOS never had (nor will ever have) proprietary code. The only proprietary material in VyOS is non-code assets, such as graphics and the trademark \"VyOS\". [*]_ This means you can build your own long-term support images (as the entire toolchain we use is free software) and even distribute them, given you rename it and remove such assets before building. Although note that we do not provide support for images distributed by a third-party. See the `artwork license <https://github.com/vyos/vyos-build/blob/current/LICENSE.artwork>`_ and the end-user license agreement at ``/usr/share/vyos/EULA`` in any pre-built image for more precise information."
+
+#: ../../introducing/about.rst:23
+msgid "VyOS CLI syntax may change between major (and sometimes minor) versions. Please always refer to the documentation matching your current, running installation. If a change in the CLI is required, VyOS will ship a so called migration script which will take care of adjusting the syntax. No action needs to be taken by you."
+msgstr "VyOS CLI syntax may change between major (and sometimes minor) versions. Please always refer to the documentation matching your current, running installation. If a change in the CLI is required, VyOS will ship a so called migration script which will take care of adjusting the syntax. No action needs to be taken by you."
+
+#: ../../introducing/about.rst:7
+msgid "VyOS is an open source network operating system based on Debian GNU/Linux."
+msgstr "VyOS is an open source network operating system based on Debian GNU/Linux."
+
+#: ../../introducing/history.rst:42
+msgid "VyOS major versions used to be named after elements in order of atomic numbers. With 1.2, this naming scheme was replaced with the much cooler scheme of Latin names of IAU designated constellations by solid angle area, starting from the smallest."
+msgstr "VyOS major versions used to be named after elements in order of atomic numbers. With 1.2, this naming scheme was replaced with the much cooler scheme of Latin names of IAU designated constellations by solid angle area, starting from the smallest."
+
+#: ../../introducing/history.rst:42
+msgid "VyOS major versions used to be named after elements in order of atomic numbers. With 1.2, this naming scheme was replaced with the much cooler scheme of Latin names of `IAU <https://en.wikipedia.org/wiki/IAU_designated_constellations_by_area>`_ designated constellations by solid angle area, starting from the smallest."
+msgstr "VyOS major versions used to be named after elements in order of atomic numbers. With 1.2, this naming scheme was replaced with the much cooler scheme of Latin names of `IAU <https://en.wikipedia.org/wiki/IAU_designated_constellations_by_area>`_ designated constellations by solid angle area, starting from the smallest."
+
+#: ../../introducing/about.rst:9
+msgid "VyOS provides a free routing platform that competes directly with other commercially available solutions from well known network providers. Because VyOS runs on standard amd64, i586 and ARM systems, it is able to be used as a router and firewall platform for cloud deployments."
+msgstr "VyOS provides a free routing platform that competes directly with other commercially available solutions from well known network providers. Because VyOS runs on standard amd64, i586 and ARM systems, it is able to be used as a router and firewall platform for cloud deployments."
+
+#: ../../introducing/history.rst:17
+msgid "Vyatta was acquired by Brocade Communication Systems in 2012. Shortly after, Brocade renamed Vyatta Subscription Edition to Brocade vRouter, discontinued Vyatta Core and shut down the community forum without a notice. The bug tracker and Git repositories followed next year."
+msgstr "Vyatta was acquired by Brocade Communication Systems in 2012. Shortly after, Brocade renamed Vyatta Subscription Edition to Brocade vRouter, discontinued Vyatta Core and shut down the community forum without a notice. The bug tracker and Git repositories followed next year."
+
+#: ../../introducing/about.rst:14
+msgid "We use multiple live versions of our manual, hosted thankfully by https://readthedocs.org. We will provide one version of the manual for every VyOS major version starting with VyOS 1.2 which will receive Long-term support (LTS)."
+msgstr "We use multiple live versions of our manual, hosted thankfully by https://readthedocs.org. We will provide one version of the manual for every VyOS major version starting with VyOS 1.2 which will receive Long-term support (LTS)."
diff --git a/docs/_locale/de/operation.pot b/docs/_locale/de/operation.pot
new file mode 100644
index 00000000..575bbd29
--- /dev/null
+++ b/docs/_locale/de/operation.pot
@@ -0,0 +1,326 @@
+msgid ""
+msgstr ""
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Localazy (https://localazy.com)\n"
+"Project-Id-Version: VyOS Documentation\n"
+"Language: de\n"
+"Plural-Forms: nplurals=2; plural=(n==1) ? 0 : 1;\n"
+
+#: ../../operation/raid.rst:154
+msgid "1 - Remove the failed disk from the RAID 1 set by issuing the following command:"
+msgstr "1 - Remove the failed disk from the RAID 1 set by issuing the following command:"
+
+#: ../../operation/raid.rst:113
+msgid "1 - To break apart the current RAID 1 set, enter “No” at the prompt. The"
+msgstr "1 - To break apart the current RAID 1 set, enter “No” at the prompt. The"
+
+#: ../../operation/raid.rst:71
+msgid "1 - To create a new RAID 1 array, enter “Yes” at the prompt. If the system detects a filesystem on the partitions being used for RAID 1 it will prompt you to indicate whether you want to continue creating the RAID 1 array."
+msgstr "1 - To create a new RAID 1 array, enter “Yes” at the prompt. If the system detects a filesystem on the partitions being used for RAID 1 it will prompt you to indicate whether you want to continue creating the RAID 1 array."
+
+#: ../../operation/raid.rst:162
+msgid "2- Physically remove the failed disk from the system. If the drives are not hot-swappable, then you must shut down the system before removing the disk."
+msgstr "2- Physically remove the failed disk from the system. If the drives are not hot-swappable, then you must shut down the system before removing the disk."
+
+#: ../../operation/raid.rst:123
+msgid "2 - To decline to set up a new RAID 1 configuration on the disks, enter “No” at the prompt. The system prompts you to indicate which partition you would like the system installed on."
+msgstr "2 - To decline to set up a new RAID 1 configuration on the disks, enter “No” at the prompt. The system prompts you to indicate which partition you would like the system installed on."
+
+#: ../../operation/raid.rst:79
+msgid "2 - To overwrite the old filesystem, enter “Yes”."
+msgstr "2 - To overwrite the old filesystem, enter “Yes”."
+
+#: ../../operation/raid.rst:131
+msgid "3 - Enter the partition where you would like the system installed. The system then prompts you to indicate whether you want to save the old configuration data. This represents the current VyOS configuration."
+msgstr "3 - Enter the partition where you would like the system installed. The system then prompts you to indicate whether you want to save the old configuration data. This represents the current VyOS configuration."
+
+#: ../../operation/raid.rst:165
+msgid "3 - Replace the failed drive with a drive of the same size or larger."
+msgstr "3 - Replace the failed drive with a drive of the same size or larger."
+
+#: ../../operation/raid.rst:81
+msgid "3 - The system informs you that all data on both drives will be erased. You are prompted to confirm that you want to continue"
+msgstr "3 - The system informs you that all data on both drives will be erased. You are prompted to confirm that you want to continue"
+
+#: ../../operation/raid.rst:88
+#: ../../operation/raid.rst:139
+msgid "4 - Enter “Yes” at the prompt to retain the current VyOS configuration once installation is complete. Enter “No” to delete the current VyOS configuration."
+msgstr "4 - Enter “Yes” at the prompt to retain the current VyOS configuration once installation is complete. Enter “No” to delete the current VyOS configuration."
+
+#: ../../operation/raid.rst:167
+msgid "4 - Format the new disk for RAID 1 by issuing the following command:"
+msgstr "4 - Format the new disk for RAID 1 by issuing the following command:"
+
+#: ../../operation/raid.rst:174
+msgid "5-Add the replacement disk to the RAID 1 set by issuing the following command:"
+msgstr "5-Add the replacement disk to the RAID 1 set by issuing the following command:"
+
+#: ../../operation/raid.rst:142
+msgid "5 - Continue with installation in the normal way."
+msgstr "5 - Continue with installation in the normal way."
+
+#: ../../operation/raid.rst:96
+msgid "5 - Enter “Yes” at the prompt to retain the current VyOS configuration once installation is complete. Enter “No” to delete the current VyOS configuration."
+msgstr "5 - Enter “Yes” at the prompt to retain the current VyOS configuration once installation is complete. Enter “No” to delete the current VyOS configuration."
+
+#: ../../operation/raid.rst:99
+msgid "6 - Continue with installation in the normal way."
+msgstr "6 - Continue with installation in the normal way."
+
+#: ../../operation/raid.rst:7
+msgid "A Redundant Array of Independent Disks (RAID) uses two or more hard disk drives to improve disk speed, store more data, and/or provide fault tolerance. There are several storage schemes possible in a RAID array, each offering a different combination of storage, reliability, and/or performance. The VyOS system supports a “RAID 1” deployment. RAID 1 allows two or more disks to mirror one another to provide system fault tolerance. In a RAID 1 solution, every sector of one disk is duplicated onto every sector of all disks in the array. Provided even one disk in the RAID 1 set is operational, the system continues to run, even through disk replacement (provided that the hardware supports in-service replacement of drives). RAID 1 can be implemented using special hardware or it can be implemented in software. The VyOS system supports software RAID 1 on two disks. The VyOS implementation of RAID 1 allows the following:"
+msgstr "A Redundant Array of Independent Disks (RAID) uses two or more hard disk drives to improve disk speed, store more data, and/or provide fault tolerance. There are several storage schemes possible in a RAID array, each offering a different combination of storage, reliability, and/or performance. The VyOS system supports a “RAID 1” deployment. RAID 1 allows two or more disks to mirror one another to provide system fault tolerance. In a RAID 1 solution, every sector of one disk is duplicated onto every sector of all disks in the array. Provided even one disk in the RAID 1 set is operational, the system continues to run, even through disk replacement (provided that the hardware supports in-service replacement of drives). RAID 1 can be implemented using special hardware or it can be implemented in software. The VyOS system supports software RAID 1 on two disks. The VyOS implementation of RAID 1 allows the following:"
+
+#: ../../operation/raid.rst:40
+msgid "Before a permanent installation, VyOS runs a live installation"
+msgstr "Before a permanent installation, VyOS runs a live installation"
+
+#: ../../operation/boot-options.rst:6
+msgid "Boot Options"
+msgstr "Boot Options"
+
+#: ../../operation/raid.rst:43
+msgid "Configuration"
+msgstr "Configuration"
+
+#: ../../operation/raid.rst:146
+msgid "Detecting and Replacing a Failed RAID 1 Disk"
+msgstr "Detecting and Replacing a Failed RAID 1 Disk"
+
+#: ../../operation/raid.rst:21
+msgid "Detection and reporting of disk failure"
+msgstr "Detection and reporting of disk failure"
+
+#: ../../operation/boot-options.rst:45
+msgid "Disable specific boot process steps"
+msgstr "Disable specific boot process steps"
+
+#: ../../operation/boot-options.rst:56
+msgid "Do not initialize default firewall chains, renders any firewall configuration unusable."
+msgstr "Do not initialize default firewall chains, renders any firewall configuration unusable."
+
+#: ../../operation/boot-options.rst:53
+msgid "Do not perform config migration."
+msgstr "Do not perform config migration."
+
+#: ../../operation/raid.rst:61
+msgid "Empty 2+ Disk"
+msgstr "Empty 2+ Disk"
+
+#: ../../operation/information.rst:34
+msgid "For additional details you can refer to https://vyos.dev/T2490."
+msgstr "For additional details you can refer to https://vyos.dev/T2490."
+
+#: ../../operation/information.rst:14
+msgid "Hardware"
+msgstr "Hardware"
+
+#: ../../operation/raid.rst:63
+msgid "If VyOS system detect two identical disks that are not currently part of a RAID-1 set, the VyOS installation utility automatically offers you the option of configuring RAID 1 mirroring for the drives, with the following prompt."
+msgstr "If VyOS system detect two identical disks that are not currently part of a RAID-1 set, the VyOS installation utility automatically offers you the option of configuring RAID 1 mirroring for the drives, with the following prompt."
+
+#: ../../operation/information.rst:40
+msgid "If a device is unplugged and re-plugged it will receive a new Port, Dev, If identification."
+msgstr "If a device is unplugged and re-plugged it will receive a new Port, Dev, If identification."
+
+#: ../../operation/raid.rst:57
+msgid "If you do not want to configure RAID 1 mirroring, enter “No” at the prompt and continue with installation in the normal way."
+msgstr "If you do not want to configure RAID 1 mirroring, enter “No” at the prompt and continue with installation in the normal way."
+
+#: ../../operation/information.rst:21
+msgid "In the past serial interface have been defined as ttySx and ttyUSBx where x was an instance number of the serial interface. It was discovered that from system boot to system boot the mapping of USB based serial interfaces will differ, depending which driver was loaded first by the operating system. This will become rather painful if you not only have serial interfaces for a console server connected but in addition also a serial backed :ref:`wwan-interface`."
+msgstr "In the past serial interface have been defined as ttySx and ttyUSBx where x was an instance number of the serial interface. It was discovered that from system boot to system boot the mapping of USB based serial interfaces will differ, depending which driver was loaded first by the operating system. This will become rather painful if you not only have serial interfaces for a console server connected but in addition also a serial backed :ref:`wwan-interface`."
+
+#: ../../operation/information.rst:7
+msgid "Information"
+msgstr "Information"
+
+#: ../../operation/raid.rst:30
+msgid "Installation Implications"
+msgstr "Installation Implications"
+
+#: ../../operation/raid.rst:183
+msgid "Operation"
+msgstr "Operation"
+
+#: ../../operation/index.rst:3
+msgid "Operation Mode"
+msgstr "Operation Mode"
+
+#: ../../operation/password-recovery.rst:5
+msgid "Password Recovery"
+msgstr "Password Recovery"
+
+#: ../../operation/raid.rst:103
+msgid "Present RAID-1"
+msgstr "Present RAID-1"
+
+#: ../../operation/raid.rst:5
+msgid "RAID-1"
+msgstr "RAID-1"
+
+#: ../../operation/information.rst:74
+msgid "Retrieve a list and description of all connected USB serial devices. The device name displayed, e.g. `usb0b2.4p1.0` can be directly used when accessing the serial console as console-server device."
+msgstr "Retrieve a list and description of all connected USB serial devices. The device name displayed, e.g. `usb0b2.4p1.0` can be directly used when accessing the serial console as console-server device."
+
+#: ../../operation/information.rst:38
+msgid "Retrieve a tree like representation of all connected USB devices."
+msgstr "Retrieve a tree like representation of all connected USB devices."
+
+#: ../../operation/information.rst:108
+msgid "Return the current running VyOS version and build information. This includes also the name of the release train which is ``crux`` on VyOS 1.2, ``equuleus`` on VyOS 1.3 and ``sagitta`` on VyOS 1.4."
+msgstr "Return the current running VyOS version and build information. This includes also the name of the release train which is ``crux`` on VyOS 1.2, ``equuleus`` on VyOS 1.3 and ``sagitta`` on VyOS 1.4."
+
+#: ../../operation/information.rst:146
+msgid "Return version number of FRR (Free Range Routing - https://frrouting.org/) used in this release. This is the routing control plane and a successor to GNU Zebra and Quagga."
+msgstr "Return version number of FRR (Free Range Routing - https://frrouting.org/) used in this release. This is the routing control plane and a successor to GNU Zebra and Quagga."
+
+#: ../../operation/information.rst:137
+msgid "Return version number of the Linux Kernel used in this release."
+msgstr "Return version number of the Linux Kernel used in this release."
+
+#: ../../operation/raid.rst:46
+msgid "Single disk, install as normal"
+msgstr "Single disk, install as normal"
+
+#: ../../operation/boot-options.rst:26
+msgid "Specify custom config file"
+msgstr "Specify custom config file"
+
+#: ../../operation/boot-options.rst:28
+msgid "Tells the system to use specified file instead of ``/config/config.boot``. If specified file does not exist or is not readable, fall back to default config. No additional verification is performed, so make sure you specify a valid config file."
+msgstr "Tells the system to use specified file instead of ``/config/config.boot``. If specified file does not exist or is not readable, fall back to default config. No additional verification is performed, so make sure you specify a valid config file."
+
+#: ../../operation/raid.rst:148
+msgid "The VyOS system automatically detects a disk failure within a RAID 1 set and reports it to the system console. You can verify the failure by issuing the show raid command."
+msgstr "The VyOS system automatically detects a disk failure within a RAID 1 set and reports it to the system console. You can verify the failure by issuing the show raid command."
+
+#: ../../operation/raid.rst:32
+msgid "The VyOS systems installation utility provides several options for installing to a RAID 1 set. You can:"
+msgstr "The VyOS systems installation utility provides several options for installing to a RAID 1 set. You can:"
+
+#: ../../operation/raid.rst:23
+msgid "The ability to boot the system with one failed disk"
+msgstr "The ability to boot the system with one failed disk"
+
+#: ../../operation/raid.rst:22
+msgid "The ability to maintain system operation with one failed disk"
+msgstr "The ability to maintain system operation with one failed disk"
+
+#: ../../operation/raid.rst:25
+msgid "The ability to monitor the status of remirroring"
+msgstr "The ability to monitor the status of remirroring"
+
+#: ../../operation/raid.rst:24
+msgid "The ability to replace a failed disk and initiate re-mirroring"
+msgstr "The ability to replace a failed disk and initiate re-mirroring"
+
+#: ../../operation/password-recovery.rst:14
+msgid "The stand-alone user-password recovery tool starts running and prompts you to reset the local system user password."
+msgstr "The stand-alone user-password recovery tool starts running and prompts you to reset the local system user password."
+
+#: ../../operation/boot-options.rst:47
+msgid "These options disable some boot steps. Make sure you understand the :ref:`boot process <boot-steps>` well before using them!"
+msgstr "These options disable some boot steps. Make sure you understand the :ref:`boot process <boot-steps>` well before using them!"
+
+#: ../../operation/raid.rst:196
+msgid "This command is typically used to prepare a disk to be added to a preexisting RAID 1 set (of which disk-device2 is already a member)."
+msgstr "This command is typically used to prepare a disk to be added to a preexisting RAID 1 set (of which disk-device2 is already a member)."
+
+#: ../../operation/boot-options.rst:8
+msgid "This function may be highly disruptive. It may cause major service interruption, so make sure you really need it and verify your input carefully."
+msgstr "This function may be highly disruptive. It may cause major service interruption, so make sure you really need it and verify your input carefully."
+
+#: ../../operation/raid.rst:185
+msgid "This part introduces how to add a disk partition to a RAID-1 set initiates mirror synchronization, check and display information."
+msgstr "This part introduces how to add a disk partition to a RAID-1 set initiates mirror synchronization, check and display information."
+
+#: ../../operation/boot-options.rst:37
+msgid "To load the *factory default* config, use:"
+msgstr "To load the *factory default* config, use:"
+
+#: ../../operation/information.rst:28
+msgid "To overcome this issue and the fact that in almost 50% of all cheap USB to serial converters there is no serial number programmed, the USB to serial interface is now directly identified by the USB root bridge and bus it connects to. This somehow mimics the new network interface definitions we see in recent Linux distributions."
+msgstr "To overcome this issue and the fact that in almost 50% of all cheap USB to serial converters there is no serial number programmed, the USB to serial interface is now directly identified by the USB root bridge and bus it connects to. This somehow mimics the new network interface definitions we see in recent Linux distributions."
+
+#: ../../operation/raid.rst:152
+msgid "To replace a bad disk within a RAID 1 set, perform the following steps:"
+msgstr "To replace a bad disk within a RAID 1 set, perform the following steps:"
+
+#: ../../operation/information.rst:19
+msgid "USB"
+msgstr "USB"
+
+#: ../../operation/raid.rst:38
+msgid "Use a previously-created RAID 1 set."
+msgstr "Use a previously-created RAID 1 set."
+
+#: ../../operation/raid.rst:35
+msgid "Use the install system to create the RAID 1 set"
+msgstr "Use the install system to create the RAID 1 set"
+
+#: ../../operation/raid.rst:36
+msgid "Use the underlying Linux commands to create a RAID 1 set before running the install system command."
+msgstr "Use the underlying Linux commands to create a RAID 1 set before running the install system command."
+
+#: ../../operation/raid.rst:190
+msgid "Use this command to add a member disk partition to the RAID 1 set. Adding a disk partition to a RAID 1 set initiates mirror synchronization, where all data on the existing member partition is copied to the new partition."
+msgstr "Use this command to add a member disk partition to the RAID 1 set. Adding a disk partition to a RAID 1 set initiates mirror synchronization, where all data on the existing member partition is copied to the new partition."
+
+#: ../../operation/raid.rst:232
+msgid "Use this command to display the formatting of a hard disk."
+msgstr "Use this command to display the formatting of a hard disk."
+
+#: ../../operation/password-recovery.rst:7
+msgid "Using the console, restart the VyOS router. The GRUB menu appears. Select the relevant option from the GRUB menu and press Enter. The option must start with “Lost password change.”"
+msgstr "Using the console, restart the VyOS router. The GRUB menu appears. Select the relevant option from the GRUB menu and press Enter. The option must start with “Lost password change.”"
+
+#: ../../operation/information.rst:104
+msgid "Version"
+msgstr "Version"
+
+#: ../../operation/information.rst:9
+msgid "VyOS features a rich set of operational level commands to retrieve arbitrary information about your running system."
+msgstr "VyOS features a rich set of operational level commands to retrieve arbitrary information about your running system."
+
+#: ../../operation/boot-options.rst:14
+msgid "VyOS has several kernel command line options to modify the normal boot process. To add an option, select the desired image in GRUB menu at load time, press **e**, edit the first line, and press **Ctrl-x** to boot when ready."
+msgstr "VyOS has several kernel command line options to modify the normal boot process. To add an option, select the desired image in GRUB menu at load time, press **e**, edit the first line, and press **Ctrl-x** to boot when ready."
+
+#: ../../operation/raid.rst:105
+msgid "When the VyOS software on a system with a RAID 1 set already configured, the installation utility will detect the array and will display the following prompt:"
+msgstr "When the VyOS software on a system with a RAID 1 set already configured, the installation utility will detect the array and will display the following prompt:"
+
+#: ../../operation/raid.rst:48
+msgid "When the VyOS system is installed, it automatically detects the presence of two disks not currently part of a RAID array. In these cases, the VyOS installation utility automatically offers you the option of configuring RAID 1 mirroring for the drives, with the following prompt."
+msgstr "When the VyOS system is installed, it automatically detects the presence of two disks not currently part of a RAID array. In these cases, the VyOS installation utility automatically offers you the option of configuring RAID 1 mirroring for the drives, with the following prompt."
+
+#: ../../operation/raid.rst:115
+msgid "installation utility detects that there are two identical disks and offers you the option of configuring RAID 1 mirroring on them, displaying the following prompt:"
+msgstr "installation utility detects that there are two identical disks and offers you the option of configuring RAID 1 mirroring on them, displaying the following prompt:"
+
+#: ../../operation/boot-options.rst:54
+msgid "no-vyos-firewall"
+msgstr "no-vyos-firewall"
+
+#: ../../operation/boot-options.rst:51
+msgid "no-vyos-migrate"
+msgstr "no-vyos-migrate"
+
+#: ../../operation/raid.rst:201
+msgid "shows output for show raid md0 as sdb1 is being added to the RAID 1 set and is in the process of being resynchronized."
+msgstr "shows output for show raid md0 as sdb1 is being added to the RAID 1 set and is in the process of being resynchronized."
+
+#: ../../operation/raid.rst:159
+msgid "where RAID-1-device is the name of the RAID 1 device (for example, md0) and disk-partition is the name of the failed disk partition (for example, sdb2)."
+msgstr "where RAID-1-device is the name of the RAID 1 device (for example, md0) and disk-partition is the name of the failed disk partition (for example, sdb2)."
+
+#: ../../operation/raid.rst:178
+msgid "where RAID-1-device is the name of the RAID 1 device (for example, md0) and disk-partition is the name of the replacement disk partition (for example, sdb2)."
+msgstr "where RAID-1-device is the name of the RAID 1 device (for example, md0) and disk-partition is the name of the replacement disk partition (for example, sdb2)."
+
+#: ../../operation/raid.rst:171
+msgid "where disk-device1 is the replacement disk (for example, sdb) and disk-device2 is the existing healthy disk (for example, sda)."
+msgstr "where disk-device1 is the replacement disk (for example, sdb) and disk-device2 is the existing healthy disk (for example, sda)."
diff --git a/docs/_locale/de/quick-start.pot b/docs/_locale/de/quick-start.pot
new file mode 100644
index 00000000..1b44e87e
--- /dev/null
+++ b/docs/_locale/de/quick-start.pot
@@ -0,0 +1,305 @@
+msgid ""
+msgstr ""
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Localazy (https://localazy.com)\n"
+"Project-Id-Version: VyOS Documentation\n"
+"Language: de\n"
+"Plural-Forms: nplurals=2; plural=(n==1) ? 0 : 1;\n"
+
+#: ../../quick-start.rst:178
+msgid "A default action of ``return``, which returns the packet back to the original chain if no action is taken."
+msgstr "A default action of ``return``, which returns the packet back to the original chain if no action is taken."
+
+#: ../../quick-start.rst:124
+msgid "A new firewall structure—which uses the ``nftables`` backend, rather than ``iptables``—is available on all installations starting from VyOS ``1.4-rolling-202308040557``. The firewall supports creation of distinct, interlinked chains for each `Netfilter hook <https://wiki.nftables.org/wiki-nftables/index.php/Netfilter_hooks>`_ and allows for more granular control over the packet filtering process."
+msgstr "A new firewall structure—which uses the ``nftables`` backend, rather than ``iptables``—is available on all installations starting from VyOS ``1.4-rolling-202308040557``. The firewall supports creation of distinct, interlinked chains for each `Netfilter hook <https://wiki.nftables.org/wiki-nftables/index.php/Netfilter_hooks>`_ and allows for more granular control over the packet filtering process."
+
+#: ../../quick-start.rst:180
+msgid "A rule to ``accept`` packets from established and related connections."
+msgstr "A rule to ``accept`` packets from established and related connections."
+
+#: ../../quick-start.rst:181
+msgid "A rule to ``drop`` packets from invalid connections."
+msgstr "A rule to ``drop`` packets from invalid connections."
+
+#: ../../quick-start.rst:125
+msgid "Add a set of firewall policies for our outside/WAN interface."
+msgstr "Add a set of firewall policies for our outside/WAN interface."
+
+#: ../../quick-start.rst:29
+msgid "After every configuration change, you need to apply the changes by using the following command:"
+msgstr "After every configuration change, you need to apply the changes by using the following command:"
+
+#: ../../quick-start.rst:65
+msgid "After switching to :ref:`quick-start-configuration-mode` issue the following commands, and your system will listen on every interface for incoming SSH connections. You might want to check the :ref:`ssh` chapter on how to listen on specific addresses only."
+msgstr "After switching to :ref:`quick-start-configuration-mode` issue the following commands, and your system will listen on every interface for incoming SSH connections. You might want to check the :ref:`ssh` chapter on how to listen on specific addresses only."
+
+#: ../../quick-start.rst:51
+msgid "After switching to :ref:`quick-start-configuration-mode` issue the following commands:"
+msgstr "After switching to :ref:`quick-start-configuration-mode` issue the following commands:"
+
+#: ../../quick-start.rst:301
+msgid "Allow Access to Services"
+msgstr "Allow Access to Services"
+
+#: ../../quick-start.rst:257
+msgid "Allow Management Access"
+msgstr "Allow Management Access"
+
+#: ../../quick-start.rst:208
+msgid "Alternatively, instead of configuring the ``CONN_FILTER`` chain described above, you can take the more traditional stateful connection filtering approach by creating rules on each hook's chain:"
+msgstr "Alternatively, instead of configuring the ``CONN_FILTER`` chain described above, you can take the more traditional stateful connection filtering approach by creating rules on each hook's chain:"
+
+#: ../../quick-start.rst:167
+msgid "Apply the firewall policies:"
+msgstr "Apply the firewall policies:"
+
+#: ../../quick-start.rst:367
+msgid "As above, commit your changes, save the configuration, and exit configuration mode:"
+msgstr "As above, commit your changes, save the configuration, and exit configuration mode:"
+
+#: ../../quick-start.rst:227
+msgid "Block Incoming Traffic"
+msgstr "Block Incoming Traffic"
+
+#: ../../quick-start.rst:17
+msgid "By default, VyOS is in operational mode, and the command prompt displays a `$`. To configure VyOS, you will need to enter configuration mode, resulting in the command prompt displaying a `#`, as demonstrated below:"
+msgstr "By default, VyOS is in operational mode, and the command prompt displays a `$`. To configure VyOS, you will need to enter configuration mode, resulting in the command prompt displaying a `#`, as demonstrated below:"
+
+#: ../../quick-start.rst:17
+msgid "By default, VyOS is in operational mode, and the command prompt displays a ``$``. To configure VyOS, you will need to enter configuration mode, resulting in the command prompt displaying a ``#``, as demonstrated below:"
+msgstr "By default, VyOS is in operational mode, and the command prompt displays a ``$``. To configure VyOS, you will need to enter configuration mode, resulting in the command prompt displaying a ``#``, as demonstrated below:"
+
+#: ../../quick-start.rst:27
+msgid "Commit and Save"
+msgstr "Commit and Save"
+
+#: ../../quick-start.rst:327
+msgid "Commit changes, save the configuration, and exit configuration mode:"
+msgstr "Commit changes, save the configuration, and exit configuration mode:"
+
+#: ../../quick-start.rst:15
+msgid "Configuration Mode"
+msgstr "Configuration Mode"
+
+#: ../../quick-start.rst:143
+msgid "Configure Firewall Groups"
+msgstr "Configure Firewall Groups"
+
+#: ../../quick-start.rst:162
+msgid "Configure Stateful Packet Filtering"
+msgstr "Configure Stateful Packet Filtering"
+
+#: ../../quick-start.rst:271
+msgid "Configure a rule on the ``input`` hook filter to jump to the ``VyOS_MANAGEMENT`` chain when new connections are addressed to port 22 (SSH) on the router itself:"
+msgstr "Configure a rule on the ``input`` hook filter to jump to the ``VyOS_MANAGEMENT`` chain when new connections are addressed to port 22 (SSH) on the router itself:"
+
+#: ../../quick-start.rst:233
+msgid "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicity allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network."
+msgstr "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicity allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network."
+
+#: ../../quick-start.rst:78
+msgid "DHCP/DNS quick-start"
+msgstr "DHCP/DNS quick-start"
+
+#: ../../quick-start.rst:87
+msgid "DHCP clients will be assigned IP addresses within the range of `192.168.0.9 - 192.168.0.254` and have a domain name of `internal-network`"
+msgstr "DHCP clients will be assigned IP addresses within the range of `192.168.0.9 - 192.168.0.254` and have a domain name of `internal-network`"
+
+#: ../../quick-start.rst:87
+msgid "DHCP clients will be assigned IP addresses within the range of ``192.168.0.9 - 192.168.0.254`` and have a domain name of ``internal-network``"
+msgstr "DHCP clients will be assigned IP addresses within the range of ``192.168.0.9 - 192.168.0.254`` and have a domain name of ``internal-network``"
+
+#: ../../quick-start.rst:89
+msgid "DHCP leases will hold for one day (86400 seconds)"
+msgstr "DHCP leases will hold for one day (86400 seconds)"
+
+#: ../../quick-start.rst:131
+msgid "Documentation for most of the new firewall CLI can be found in the :ref:`firewall` chapter.The legacy firewall is still available for versions before ``1.4-rolling-202308040557`` and can be found in the :ref:`firewall-legacy` chapter. The examples in this section use the new configuration."
+msgstr "Documentation for most of the new firewall CLI can be found in the :ref:`firewall` chapter.The legacy firewall is still available for versions before ``1.4-rolling-202308040557`` and can be found in the :ref:`firewall-legacy` chapter. The examples in this section use the new configuration."
+
+#: ../../quick-start.rst:341
+msgid "Especially if you are allowing SSH remote access from the outside/WAN interface, there are a few additional configuration steps that should be taken."
+msgstr "Especially if you are allowing SSH remote access from the outside/WAN interface, there are a few additional configuration steps that should be taken."
+
+#: ../../quick-start.rst:281
+msgid "Finally, configure the ``VyOS_MANAGEMENT`` chain to accept connection from the ``LAN`` interface group while limiting requests coming from the ``WAN`` interface group to 4 per minute:"
+msgstr "Finally, configure the ``VyOS_MANAGEMENT`` chain to accept connection from the ``LAN`` interface group while limiting requests coming from the ``WAN`` interface group to 4 per minute:"
+
+#: ../../quick-start.rst:357
+msgid "Finally, try and SSH into the VyOS install as your new user. Once you have confirmed that your new user can access your router without a password, delete the original ``vyos`` user and completely disable password authentication for :ref:`ssh`:"
+msgstr "Finally, try and SSH into the VyOS install as your new user. Once you have confirmed that your new user can access your router without a password, delete the original ``vyos`` user and completely disable password authentication for :ref:`ssh`:"
+
+#: ../../quick-start.rst:319
+msgid "Finally, we can now configure access to the services running on this router, allowing all connections coming from localhost:"
+msgstr "Finally, we can now configure access to the services running on this router, allowing all connections coming from localhost:"
+
+#: ../../quick-start.rst:122
+msgid "Firewall"
+msgstr "Firewall"
+
+#: ../../quick-start.rst:263
+msgid "First, create a new dedicated chain (``VyOS_MANAGEMENT``) for management access, which returns to the parent chain if no action is taken. Add a rule to accept traffic from the ``LAN`` interface group:"
+msgstr "First, create a new dedicated chain (``VyOS_MANAGEMENT``) for management access, which returns to the parent chain if no action is taken. Add a rule to accept traffic from the ``LAN`` interface group:"
+
+#: ../../quick-start.rst:339
+msgid "Hardening"
+msgstr "Hardening"
+
+#: ../../quick-start.rst:303
+msgid "Here we're allowing the router to respond to pings. Then, we can allow access to the DNS recursor we configured earlier, accepting traffic bound for port 53 from all hosts on the ``NET-INSIDE-v4`` network:"
+msgstr "Here we're allowing the router to respond to pings. Then, we can allow access to the DNS recursor we configured earlier, accepting traffic bound for port 53 from all hosts on the ``NET-INSIDE-v4`` network:"
+
+#: ../../quick-start.rst:146
+msgid "If you wanted to enable SSH access to your firewall from the outside/WAN interface, you could create some additional rules to allow that kind of traffic."
+msgstr "If you wanted to enable SSH access to your firewall from the outside/WAN interface, you could create some additional rules to allow that kind of traffic."
+
+#: ../../quick-start.rst:150
+msgid "In this case, we will create two interface groups—a ``WAN`` group for our interfaces connected to the public internet and a ``LAN`` group for the interfaces connected to our internal network. Additionally, we will create a network group, ``NET-INSIDE-v4``, that contains our internal subnet."
+msgstr "In this case, we will create two interface groups—a ``WAN`` group for our interfaces connected to the public internet and a ``LAN`` group for the interfaces connected to our internal network. Additionally, we will create a network group, ``NET-INSIDE-v4``, that contains our internal subnet."
+
+#: ../../quick-start.rst:44
+msgid "Interface Configuration"
+msgstr "Interface Configuration"
+
+#: ../../quick-start.rst:109
+msgid "NAT"
+msgstr "NAT"
+
+#: ../../quick-start.rst:229
+msgid "Now that we have configured stateful connection filtering to allow traffic from established and related connections, we can block all other incoming traffic addressed to our local network."
+msgstr "Now that we have configured stateful connection filtering to allow traffic from established and related connections, we can block all other incoming traffic addressed to our local network."
+
+#: ../../quick-start.rst:36
+msgid "Once your configuration works as expected, you can save it permanently by using the following command:"
+msgstr "Once your configuration works as expected, you can save it permanently by using the following command:"
+
+#: ../../quick-start.rst:92
+msgid "Only hosts from your internal/LAN network can use the DNS recursor"
+msgstr "Only hosts from your internal/LAN network can use the DNS recursor"
+
+#: ../../quick-start.rst:168
+msgid "Option 1: Common Chain"
+msgstr "Option 1: Common Chain"
+
+#: ../../quick-start.rst:206
+msgid "Option 2: Per-Hook Chain"
+msgstr "Option 2: Per-Hook Chain"
+
+#: ../../quick-start.rst:5
+msgid "Quick Start"
+msgstr "Quick Start"
+
+#: ../../quick-start.rst:344
+msgid "Replace the default ``vyos`` system user:"
+msgstr "Replace the default ``vyos`` system user:"
+
+#: ../../quick-start.rst:192
+msgid "Replace the default `vyos` system user:"
+msgstr "Replace the default `vyos` system user:"
+
+#: ../../quick-start.rst:63
+msgid "SSH Management"
+msgstr "SSH Management"
+
+#: ../../quick-start.rst:350
+msgid "Set up :ref:`ssh_key_based_authentication`:"
+msgstr "Set up :ref:`ssh_key_based_authentication`:"
+
+#: ../../quick-start.rst:85
+msgid "The address range `192.168.0.2/24 - 192.168.0.8/24` will be reserved for static assignments"
+msgstr "The address range `192.168.0.2/24 - 192.168.0.8/24` will be reserved for static assignments"
+
+#: ../../quick-start.rst:85
+msgid "The address range ``192.168.0.2/24 - 192.168.0.8/24`` will be reserved for static assignments"
+msgstr "The address range ``192.168.0.2/24 - 192.168.0.8/24`` will be reserved for static assignments"
+
+#: ../../quick-start.rst:176
+msgid "The chain we will create is called ``CONN_FILTER`` and has three rules:"
+msgstr "The chain we will create is called ``CONN_FILTER`` and has three rules:"
+
+#: ../../quick-start.rst:84
+msgid "The default gateway and DNS recursor address will be `192.168.0.1/24`"
+msgstr "The default gateway and DNS recursor address will be `192.168.0.1/24`"
+
+#: ../../quick-start.rst:84
+msgid "The default gateway and DNS recursor address will be ``192.168.0.1/24``"
+msgstr "The default gateway and DNS recursor address will be ``192.168.0.1/24``"
+
+#: ../../quick-start.rst:137
+msgid "The firewall begins with the base ``filter`` tables you define for each of the ``forward``, ``input``, and ``output`` Netfiter hooks. Each of these tables is populated with rules that are processed in order and can jump to other chains for more granular filtering."
+msgstr "The firewall begins with the base ``filter`` tables you define for each of the ``forward``, ``input``, and ``output`` Netfiter hooks. Each of these tables is populated with rules that are processed in order and can jump to other chains for more granular filtering."
+
+#: ../../quick-start.rst:80
+msgid "The following settings will configure DHCP and DNS services on your internal/LAN network, where VyOS will act as the default gateway and DNS server."
+msgstr "The following settings will configure DHCP and DNS services on your internal/LAN network, where VyOS will act as the default gateway and DNS server."
+
+#: ../../quick-start.rst:111
+msgid "The following settings will configure :ref:`source-nat` rules for our internal/LAN network, allowing hosts to communicate through the outside/WAN network via IP masquerade."
+msgstr "The following settings will configure :ref:`source-nat` rules for our internal/LAN network, allowing hosts to communicate through the outside/WAN network via IP masquerade."
+
+#: ../../quick-start.rst:194
+msgid "Then, we can jump to the common chain from both the ``forward`` and ``input`` hooks as the first filtering rule in the respective chains:"
+msgstr "Then, we can jump to the common chain from both the ``forward`` and ``input`` hooks as the first filtering rule in the respective chains:"
+
+#: ../../quick-start.rst:150
+msgid "These rules allow SSH traffic and rate limit it to 4 requests per minute. This blocks brute-forcing attempts:"
+msgstr "These rules allow SSH traffic and rate limit it to 4 requests per minute. This blocks brute-forcing attempts:"
+
+#: ../../quick-start.rst:7
+msgid "This chapter will guide you on how to get up to speed quickly using your new VyOS system. It will show you a very basic configuration example that will provide a :ref:`nat` gateway for a device with two network interfaces (``eth0`` and ``eth1``)."
+msgstr "This chapter will guide you on how to get up to speed quickly using your new VyOS system. It will show you a very basic configuration example that will provide a :ref:`nat` gateway for a device with two network interfaces (``eth0`` and ``eth1``)."
+
+#: ../../quick-start.rst:7
+msgid "This chapter will guide you on how to get up to speed quickly using your new VyOS system. It will show you a very basic configuration example that will provide a :ref:`nat` gateway for a device with two network interfaces (`eth0` and `eth1`)."
+msgstr "This chapter will guide you on how to get up to speed quickly using your new VyOS system. It will show you a very basic configuration example that will provide a :ref:`nat` gateway for a device with two network interfaces (`eth0` and `eth1`)."
+
+#: ../../quick-start.rst:127
+msgid "This configuration creates a proper stateful firewall that blocks all traffic which was not initiated from the internal/LAN side first."
+msgstr "This configuration creates a proper stateful firewall that blocks all traffic which was not initiated from the internal/LAN side first."
+
+#: ../../quick-start.rst:145
+msgid "To make firewall configuration easier, we can create groups of interfaces, networks, addresses, ports, and domains that describe different parts of our network. We can then use them for filtering within our firewall rulesets, allowing for more concise and readable configuration."
+msgstr "To make firewall configuration easier, we can create groups of interfaces, networks, addresses, ports, and domains that describe different parts of our network. We can then use them for filtering within our firewall rulesets, allowing for more concise and readable configuration."
+
+#: ../../quick-start.rst:90
+msgid "VyOS will serve as a full DNS recursor, replacing the need to utilize Google, Cloudflare, or other public DNS servers (which is good for privacy)"
+msgstr "VyOS will serve as a full DNS recursor, replacing the need to utilize Google, Cloudflare, or other public DNS servers (which is good for privacy)"
+
+#: ../../quick-start.rst:170
+msgid "We can create a common chain for stateful connection filtering of multiple interfaces (or multiple netfilter hooks on one interface). Those individual chains can then jump to the common chain for stateful connection filtering, returning to the original chain for further rule processing if no action is taken on the packet."
+msgstr "We can create a common chain for stateful connection filtering of multiple interfaces (or multiple netfilter hooks on one interface). Those individual chains can then jump to the common chain for stateful connection filtering, returning to the original chain for further rule processing if no action is taken on the packet."
+
+#: ../../quick-start.rst:259
+msgid "We can now configure access to the router itself, allowing SSH access from the inside/LAN network and rate limiting SSH access from the outside/WAN network."
+msgstr "We can now configure access to the router itself, allowing SSH access from the inside/LAN network and rate limiting SSH access from the outside/WAN network."
+
+#: ../../quick-start.rst:247
+msgid "We should also block all traffic destinated to the router itself that isn't explicitly allowed at some point in the chain for the ``input`` hook. As we've already configured stateful packet filtering above, we only need to set the default action to ``drop``:"
+msgstr "We should also block all traffic destinated to the router itself that isn't explicitly allowed at some point in the chain for the ``input`` hook. As we've already configured stateful packet filtering above, we only need to set the default action to ``drop``:"
+
+#: ../../quick-start.rst:164
+msgid "With the new firewall structure, we have have a lot of flexibility in how we group and order our rules, as shown by the two alternative approaches below."
+msgstr "With the new firewall structure, we have have a lot of flexibility in how we group and order our rules, as shown by the two alternative approaches below."
+
+#: ../../quick-start.rst:379
+msgid "You now should have a simple yet secure and functioning router to experiment with further. Enjoy!"
+msgstr "You now should have a simple yet secure and functioning router to experiment with further. Enjoy!"
+
+#: ../../quick-start.rst:48
+msgid "Your internal/LAN interface will be ``eth1``. It will use a static IP address of ``192.168.0.1/24``."
+msgstr "Your internal/LAN interface will be ``eth1``. It will use a static IP address of ``192.168.0.1/24``."
+
+#: ../../quick-start.rst:48
+msgid "Your internal/LAN interface will be `eth1`. It will use a static IP address of `192.168.0.1/24`."
+msgstr "Your internal/LAN interface will be `eth1`. It will use a static IP address of `192.168.0.1/24`."
+
+#: ../../quick-start.rst:46
+msgid "Your outside/WAN interface will be ``eth0``. It will receive its interface address via DHCP."
+msgstr "Your outside/WAN interface will be ``eth0``. It will receive its interface address via DHCP."
+
+#: ../../quick-start.rst:46
+msgid "Your outside/WAN interface will be `eth0`. It will receive its interface address via DHCP."
+msgstr "Your outside/WAN interface will be `eth0`. It will receive its interface address via DHCP."
diff --git a/docs/_locale/de/troubleshooting.pot b/docs/_locale/de/troubleshooting.pot
new file mode 100644
index 00000000..69110d91
--- /dev/null
+++ b/docs/_locale/de/troubleshooting.pot
@@ -0,0 +1,290 @@
+msgid ""
+msgstr ""
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Localazy (https://localazy.com)\n"
+"Project-Id-Version: VyOS Documentation\n"
+"Language: de\n"
+"Plural-Forms: nplurals=2; plural=(n==1) ? 0 : 1;\n"
+
+#: ../../troubleshooting/index.rst:73
+msgid "Advanced Connectivity Tests"
+msgstr "Advanced Connectivity Tests"
+
+#: ../../troubleshooting/index.rst:196
+msgid "And **a more generic way to fix it** is just deleting every MAC address at the configuration file of the cloned machine. They will be correctly regenerated automatically."
+msgstr "And **a more generic way to fix it** is just deleting every MAC address at the configuration file of the cloned machine. They will be correctly regenerated automatically."
+
+#: ../../troubleshooting/index.rst:193
+msgid "Another example could be when cloning VyOS VMs in GNS3 and you get into the same issue: interface names have changed."
+msgstr "Another example could be when cloning VyOS VMs in GNS3 and you get into the same issue: interface names have changed."
+
+#: ../../troubleshooting/index.rst:16
+msgid "Basic Connectivity Tests"
+msgstr "Basic Connectivity Tests"
+
+#: ../../troubleshooting/index.rst:411
+msgid "Boot Steps"
+msgstr "Boot Steps"
+
+#: ../../troubleshooting/index.rst:13
+msgid "Connectivity Tests"
+msgstr "Connectivity Tests"
+
+#: ../../troubleshooting/index.rst:111
+msgid "Discover routers via eth0."
+msgstr "Discover routers via eth0."
+
+#: ../../troubleshooting/index.rst:113
+#: ../../troubleshooting/index.rst:150
+msgid "Example:"
+msgstr "Example:"
+
+#: ../../troubleshooting/index.rst:446
+msgid "Finally it runs the post-config script ``/config/scripts/vyos-postconfig-bootup.script``"
+msgstr "Finally it runs the post-config script ``/config/scripts/vyos-postconfig-bootup.script``"
+
+#: ../../troubleshooting/index.rst:167
+msgid "For example, you have a VyOS VM with 4 Ethernet interfaces named eth0, eth1, eth2 and eth3. Then, you migrate your VyOS VM to a different host and find your interfaces now are eth4, eth5, eth6 and eth7."
+msgstr "For example, you have a VyOS VM with 4 Ethernet interfaces named eth0, eth1, eth2 and eth3. Then, you migrate your VyOS VM to a different host and find your interfaces now are eth4, eth5, eth6 and eth7."
+
+#: ../../troubleshooting/index.rst:419
+msgid "Grub then starts the Linux boot and loads the Linux Kernel ``/boot/vmlinuz``"
+msgstr "Grub then starts the Linux boot and loads the Linux Kernel ``/boot/vmlinuz``"
+
+#: ../../troubleshooting/index.rst:77
+msgid "However, another helper is available which combines ping and traceroute into a single tool. An example of its output is shown:"
+msgstr "However, another helper is available which combines ping and traceroute into a single tool. An example of its output is shown:"
+
+#: ../../troubleshooting/index.rst:102
+msgid "IPv6 Topology Discovery"
+msgstr "IPv6 Topology Discovery"
+
+#: ../../troubleshooting/index.rst:104
+msgid "IPv6 uses different techniques to discover its Neighbors/topology."
+msgstr "IPv6 uses different techniques to discover its Neighbors/topology."
+
+#: ../../troubleshooting/index.rst:188
+msgid "If it is a VM, go into the settings of the host and set the MAC address to the settings found in the config.boot file. You can also set the MAC to static if the host allows so."
+msgstr "If it is a VM, go into the settings of the host and set the MAC address to the settings found in the config.boot file. You can also set the MAC to static if the host allows so."
+
+#: ../../troubleshooting/index.rst:435
+msgid "If the config file was upgraded, runs any post upgrade scripts ``/config/scripts/post-upgrade.d``"
+msgstr "If the config file was upgraded, runs any post upgrade scripts ``/config/scripts/post-upgrade.d``"
+
+#: ../../troubleshooting/index.rst:164
+msgid "If you find the names of your interfaces have changed, this could be because your MAC addresses have changed."
+msgstr "If you find the names of your interfaces have changed, this could be because your MAC addresses have changed."
+
+#: ../../troubleshooting/index.rst:429
+msgid "Initialises the boot configuration file - copies over ``config.boot.default`` if there is no configuration"
+msgstr "Initialises the boot configuration file - copies over ``config.boot.default`` if there is no configuration"
+
+#: ../../troubleshooting/index.rst:275
+msgid "Interface Bandwidth Usage"
+msgstr "Interface Bandwidth Usage"
+
+#: ../../troubleshooting/index.rst:307
+msgid "Interface Performance"
+msgstr "Interface Performance"
+
+#: ../../troubleshooting/index.rst:162
+msgid "Interface names"
+msgstr "Interface names"
+
+#: ../../troubleshooting/index.rst:420
+msgid "Kernel Launches Systemd ``/lib/systemd/systemd``"
+msgstr "Kernel Launches Systemd ``/lib/systemd/systemd``"
+
+#: ../../troubleshooting/index.rst:173
+msgid "Log into VyOS and run this command to display your interface settings."
+msgstr "Log into VyOS and run this command to display your interface settings."
+
+#: ../../troubleshooting/index.rst:332
+msgid "Monitor command"
+msgstr "Monitor command"
+
+#: ../../troubleshooting/index.rst:203
+msgid "Monitoring"
+msgstr "Monitoring"
+
+#: ../../troubleshooting/index.rst:438
+msgid "Mounts the ``/boot`` partition"
+msgstr "Mounts the ``/boot`` partition"
+
+#: ../../troubleshooting/index.rst:145
+msgid "Neighbor Discovery"
+msgstr "Neighbor Discovery"
+
+#: ../../troubleshooting/index.rst:181
+msgid "Now, in order to update a MAC address in the configuration, run this command specifying the interface name and MAC address you want."
+msgstr "Now, in order to update a MAC address in the configuration, run this command specifying the interface name and MAC address you want."
+
+#: ../../troubleshooting/index.rst:171
+msgid "One way to fix this issue **taking control of the MAC addresses** is:"
+msgstr "One way to fix this issue **taking control of the MAC addresses** is:"
+
+#: ../../troubleshooting/index.rst:107
+msgid "Router Discovery"
+msgstr "Router Discovery"
+
+#: ../../troubleshooting/index.rst:433
+msgid "Runs The pre-config script, if there is one ``/config/scripts/vyos-preconfig-bootup.script``"
+msgstr "Runs The pre-config script, if there is one ``/config/scripts/vyos-preconfig-bootup.script``"
+
+#: ../../troubleshooting/index.rst:445
+msgid "Runs ``telinit q`` to tell the init system to reload ``/etc/inittab``"
+msgstr "Runs ``telinit q`` to tell the init system to reload ``/etc/inittab``"
+
+#: ../../troubleshooting/index.rst:431
+msgid "Runs the configuration migration, if the configuration is for an older version of VyOS"
+msgstr "Runs the configuration migration, if the configuration is for an older version of VyOS"
+
+#: ../../troubleshooting/index.rst:25
+msgid "Send ICMP echo requests to destination host. There are multiple options to ping, inkl. VRF support."
+msgstr "Send ICMP echo requests to destination host. There are multiple options to ping, inkl. VRF support."
+
+#: ../../troubleshooting/index.rst:97
+msgid "Several options are available for changing the display output. Press `h` to invoke the built in help system. To quit, just press `q` and you'll be returned to the VyOS command prompt."
+msgstr "Several options are available for changing the display output. Press `h` to invoke the built in help system. To quit, just press `q` and you'll be returned to the VyOS command prompt."
+
+#: ../../troubleshooting/index.rst:7
+msgid "Sometimes things break or don't work as expected. This section describes several troubleshooting tools provided by VyOS that can help when something goes wrong."
+msgstr "Sometimes things break or don't work as expected. This section describes several troubleshooting tools provided by VyOS that can help when something goes wrong."
+
+#: ../../troubleshooting/index.rst:364
+msgid "Sometimes you need to clear counters or statistics to troubleshoot better."
+msgstr "Sometimes you need to clear counters or statistics to troubleshoot better."
+
+#: ../../troubleshooting/index.rst:427
+msgid "Starts FRR_ - successor to `GNU Zebra`_ and Quagga_"
+msgstr "Starts FRR_ - successor to `GNU Zebra`_ and Quagga_"
+
+#: ../../troubleshooting/index.rst:437
+msgid "Starts ``rl-system`` and ``firewall``"
+msgstr "Starts ``rl-system`` and ``firewall``"
+
+#: ../../troubleshooting/index.rst:406
+msgid "System Information"
+msgstr "System Information"
+
+#: ../../troubleshooting/index.rst:421
+msgid "Systemd loads the VyOS service file ``/lib/systemd/system/vyos-router.service``"
+msgstr "Systemd loads the VyOS service file ``/lib/systemd/system/vyos-router.service``"
+
+#: ../../troubleshooting/index.rst:179
+msgid "Take note of MAC addresses."
+msgstr "Take note of MAC addresses."
+
+#: ../../troubleshooting/index.rst:362
+msgid "Terminal/Console"
+msgstr "Terminal/Console"
+
+#: ../../troubleshooting/index.rst:418
+msgid "The BIOS loads Grub (or isolinux for the Live CD)"
+msgstr "The BIOS loads Grub (or isolinux for the Live CD)"
+
+#: ../../troubleshooting/index.rst:319
+msgid "The ``accept`` command opens a listening iperf server on TCP Port 5001"
+msgstr "The ``accept`` command opens a listening iperf server on TCP Port 5001"
+
+#: ../../troubleshooting/index.rst:320
+msgid "The ``initiate`` command connects to that server to perform the test."
+msgstr "The ``initiate`` command connects to that server to perform the test."
+
+#: ../../troubleshooting/index.rst:334
+msgid "The ``monitor command`` command allows you to repeatedly run a command to view a continuously refreshed output. The command is run and output every 2 seconds, allowing you to monitor the output continuously without having to re-run the command. This can be useful to follow routing adjacency formation."
+msgstr "The ``monitor command`` command allows you to repeatedly run a command to view a continuously refreshed output. The command is run and output every 2 seconds, allowing you to monitor the output continuously without having to re-run the command. This can be useful to follow routing adjacency formation."
+
+#: ../../troubleshooting/index.rst:439
+msgid "The boot configuration file is then applied by ``/opt/vyatta/sbin/ vyatta-boot-config-loader/opt/vyatta/etc/config/config.boot``"
+msgstr "The boot configuration file is then applied by ``/opt/vyatta/sbin/ vyatta-boot-config-loader/opt/vyatta/etc/config/config.boot``"
+
+#: ../../troubleshooting/index.rst:383
+msgid "The command follow the same logic as the ``set`` command in configuration mode."
+msgstr "The command follow the same logic as the ``set`` command in configuration mode."
+
+#: ../../troubleshooting/index.rst:442
+msgid "The config loader script writes log entries to ``/var/log/vyatta-config-loader.log``"
+msgstr "The config loader script writes log entries to ``/var/log/vyatta-config-loader.log``"
+
+#: ../../troubleshooting/index.rst:94
+msgid "The output consumes the screen and will replace your command prompt."
+msgstr "The output consumes the screen and will replace your command prompt."
+
+#: ../../troubleshooting/index.rst:423
+msgid "The service file launches the VyOS router init script ``/usr/libexec/vyos/init/vyos-router`` - this is part of the vyatta-cfg_ Debian package"
+msgstr "The service file launches the VyOS router init script ``/usr/libexec/vyos/init/vyos-router`` - this is part of the vyatta-cfg_ Debian package"
+
+#: ../../troubleshooting/index.rst:416
+msgid "These are the boot steps for VyOS 1.2"
+msgstr "These are the boot steps for VyOS 1.2"
+
+#: ../../troubleshooting/index.rst:366
+msgid "To do this use the ``clear`` command in Operational mode."
+msgstr "To do this use the ``clear`` command in Operational mode."
+
+#: ../../troubleshooting/index.rst:242
+msgid "To monitor interface traffic, issue the :code:`monitor traffic interface <name>` command, replacing `<name>` with your chosen interface."
+msgstr "To monitor interface traffic, issue the :code:`monitor traffic interface <name>` command, replacing `<name>` with your chosen interface."
+
+#: ../../troubleshooting/index.rst:260
+msgid "To quit monitoring, press `Ctrl-c` and you'll be returned to the VyOS command prompt."
+msgstr "To quit monitoring, press `Ctrl-c` and you'll be returned to the VyOS command prompt."
+
+#: ../../troubleshooting/index.rst:309
+msgid "To take a look on the network bandwidth between two nodes, the ``monitor bandwidth-test`` command is used to run iperf."
+msgstr "To take a look on the network bandwidth between two nodes, the ``monitor bandwidth-test`` command is used to run iperf."
+
+#: ../../troubleshooting/index.rst:59
+msgid "Trace path to target."
+msgstr "Trace path to target."
+
+#: ../../troubleshooting/index.rst:240
+msgid "Traffic Dumps"
+msgstr "Traffic Dumps"
+
+#: ../../troubleshooting/index.rst:263
+msgid "Traffic can be filtered and saved."
+msgstr "Traffic can be filtered and saved."
+
+#: ../../troubleshooting/index.rst:5
+msgid "Troubleshooting"
+msgstr "Troubleshooting"
+
+#: ../../troubleshooting/index.rst:18
+msgid "Verifying connectivity can be done with the familiar `ping` and `traceroute` commands. The options for each are shown (the options for each command were displayed using the built-in help as described in the :ref:`cli` section and are omitted from the output here):"
+msgstr "Verifying connectivity can be done with the familiar `ping` and `traceroute` commands. The options for each are shown (the options for each command were displayed using the built-in help as described in the :ref:`cli` section and are omitted from the output here):"
+
+#: ../../troubleshooting/index.rst:413
+msgid "VyOS 1.2 uses `Debian Jessie`_ as the base Linux operating system. Jessie was the first version of Debian that uses systemd_ as the default init system."
+msgstr "VyOS 1.2 uses `Debian Jessie`_ as the base Linux operating system. Jessie was the first version of Debian that uses systemd_ as the default init system."
+
+#: ../../troubleshooting/index.rst:205
+msgid "VyOS features several monitoring tools."
+msgstr "VyOS features several monitoring tools."
+
+#: ../../troubleshooting/index.rst:343
+msgid "Will clear the screen and show you the output of ``show interfaces`` every 2 seconds."
+msgstr "Will clear the screen and show you the output of ``show interfaces`` every 2 seconds."
+
+#: ../../troubleshooting/index.rst:284
+msgid "show the following:"
+msgstr "show the following:"
+
+#: ../../troubleshooting/index.rst:393
+msgid "to clear counters on firewall rulesets or single rules"
+msgstr "to clear counters on firewall rulesets or single rules"
+
+#: ../../troubleshooting/index.rst:374
+msgid "to clear interface counters"
+msgstr "to clear interface counters"
+
+#: ../../troubleshooting/index.rst:368
+msgid "to clear the console output"
+msgstr "to clear the console output"
+
+#: ../../troubleshooting/index.rst:277
+msgid "to take a quick view on the used bandwidth of an interface use the ``monitor bandwidth`` command"
+msgstr "to take a quick view on the used bandwidth of an interface use the ``monitor bandwidth`` command"