Merge pull request #1362 from vyos/update-translations-master

Github: update translations
author: Robert Göhler <github@ghlr.de> 2024-04-09 21:19:01 +0200
committer: GitHub <noreply@github.com> 2024-04-09 21:19:01 +0200
commit: dcddb7e2b0fa29859c505664cee15602a505ea62 (patch)
tree: 2129faf8053e3990898d45a011515a530b5b02eb /docs/_locale/pt
parent: 8da48148f6e27443f3da78b366b14a669d2a9ef3 (diff)
parent: e421c3598b95922f1a55bd92aa9f6beb95d60d8f (diff)
download: vyos-documentation-dcddb7e2b0fa29859c505664cee15602a505ea62.tar.gz
vyos-documentation-dcddb7e2b0fa29859c505664cee15602a505ea62.zip
4 files changed, 385 insertions, 220 deletions
diff --git a/docs/_locale/pt/LC_MESSAGES/automation.mo b/docs/_locale/pt/LC_MESSAGES/automation.mo
index f7bc6003..2167fbe2 100644
--- a/docs/_locale/pt/LC_MESSAGES/automation.mo
+++ b/docs/_locale/pt/LC_MESSAGES/automation.mo
diff --git a/docs/_locale/pt/LC_MESSAGES/configuration.mo b/docs/_locale/pt/LC_MESSAGES/configuration.mo
index f1832ee1..8e628119 100644
--- a/docs/_locale/pt/LC_MESSAGES/configuration.mo
+++ b/docs/_locale/pt/LC_MESSAGES/configuration.mo
diff --git a/docs/_locale/pt/automation.pot b/docs/_locale/pt/automation.pot
index ca4ac990..6494fae3 100644
--- a/docs/_locale/pt/automation.pot
+++ b/docs/_locale/pt/automation.pot
@@ -155,12 +155,14 @@ msgstr "1 Collect all data in to file \"terraform.tfvars\" and create resources
 
 #: ../../automation/terraform/terraformAWS.rst:77
 #: ../../automation/terraform/terraformAZ.rst:54
+#: ../../automation/terraform/terraformGoogle.rst:76
 #: ../../automation/terraform/terraformvSphere.rst:53
 msgid "1 Create an UNIX instance whenever you want (local, cloud, and so on)"
 msgstr "1 Create an UNIX instance whenever you want (local, cloud, and so on)"
 
 #: ../../automation/terraform/terraformAWS.rst:54
 #: ../../automation/terraform/terraformAZ.rst:26
+#: ../../automation/terraform/terraformGoogle.rst:52
 #: ../../automation/terraform/terraformvSphere.rst:29
 msgid "1 Create an UNIX or Windows instance"
 msgstr "1 Create an UNIX or Windows instance"
@@ -173,6 +175,14 @@ msgstr "1 Create an account with AWS and get your \"access_key\", \"secret key\"
 msgid "1 Create an account with Azure"
 msgstr "1 Create an account with Azure"
 
+#: ../../automation/terraform/terraformGoogle.rst:22
+msgid "1 Create an account with google cloud and a new project"
+msgstr "1 Create an account with google cloud and a new project"
+
+#: ../../automation/terraform/terraformGoogle.rst:344
+msgid "1 Increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location)."
+msgstr "1 Increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location)."
+
 #: ../../automation/terraform/terraformAWS.rst:86
 msgid "2.1 Create a0 UNIX or Windows instance"
 msgstr "2.1 Create a0 UNIX or Windows instance"
@@ -237,12 +247,14 @@ msgstr "2 Create a key pair_ and download your .pem key"
 
 #: ../../automation/terraform/terraformAWS.rst:79
 #: ../../automation/terraform/terraformAZ.rst:56
+#: ../../automation/terraform/terraformGoogle.rst:78
 #: ../../automation/terraform/terraformvSphere.rst:55
 msgid "2 Download and install Ansible"
 msgstr "2 Download and install Ansible"
 
 #: ../../automation/terraform/terraformAWS.rst:56
 #: ../../automation/terraform/terraformAZ.rst:28
+#: ../../automation/terraform/terraformGoogle.rst:54
 #: ../../automation/terraform/terraformvSphere.rst:31
 msgid "2 Download and install Terraform"
 msgstr "2 Download and install Terraform"
@@ -251,6 +263,10 @@ msgstr "2 Download and install Terraform"
 msgid "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS. tf"
 msgstr "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS. tf"
 
+#: ../../automation/terraform/terraformGoogle.rst:347
+msgid "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS.tf"
+msgstr "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS.tf"
+
 #: ../../automation/vyos-terraform.rst:268
 #: ../../automation/vyos-terraform.rst:718
 #: ../../automation/vyos-terraform.rst:1016
@@ -306,6 +322,14 @@ msgstr "3 Create the folder for example /root/az/"
 msgid "3 Create the folder for example /root/azvyos/"
 msgstr "3 Create the folder for example /root/azvyos/"
 
+#: ../../automation/terraform/terraformGoogle.rst:56
+msgid "3 Create the folder for example /root/google"
+msgstr "3 Create the folder for example /root/google"
+
+#: ../../automation/terraform/terraformGoogle.rst:80
+msgid "3 Create the folder for example /root/google/"
+msgstr "3 Create the folder for example /root/google/"
+
 #: ../../automation/terraform/terraformvSphere.rst:33
 msgid "3 Create the folder for example /root/vsphereterraform"
 msgstr "3 Create the folder for example /root/vsphereterraform"
@@ -326,6 +350,10 @@ msgstr "4 Copy all files into your Ansible project \"/root/aws/\" (ansible.cfg,
 msgid "4 Copy all files into your Ansible project \"/root/az/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for Azure`_"
 msgstr "4 Copy all files into your Ansible project \"/root/az/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for Azure`_"
 
+#: ../../automation/terraform/terraformGoogle.rst:82
+msgid "4 Copy all files into your Ansible project \"/root/google/\" (ansible.cfg, instance.yml, mykey.json and \"all\"), more detailed see `Structure of files Ansible for google cloud`_"
+msgstr "4 Copy all files into your Ansible project \"/root/google/\" (ansible.cfg, instance.yml, mykey.json and \"all\"), more detailed see `Structure of files Ansible for google cloud`_"
+
 #: ../../automation/terraform/terraformvSphere.rst:59
 msgid "4 Copy all files into your Ansible project \"/root/vsphereterraform/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for vSphere`_"
 msgstr "4 Copy all files into your Ansible project \"/root/vsphereterraform/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for vSphere`_"
@@ -374,6 +402,10 @@ msgstr "After executing all the commands you will have your VyOS instance on the
 msgid "After executing all the commands you will have your VyOS instance on the Azure cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:"
 msgstr "After executing all the commands you will have your VyOS instance on the Azure cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:"
 
+#: ../../automation/terraform/terraformGoogle.rst:333
+msgid "After executing all the commands you will have your VyOS instance on the google cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:"
+msgstr "After executing all the commands you will have your VyOS instance on the google cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:"
+
 #: ../../automation/terraform/terraformvSphere.rst:75
 msgid "After executing all the commands you will have your VyOS instance on the vSphere with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:"
 msgstr "After executing all the commands you will have your VyOS instance on the vSphere with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:"
@@ -388,6 +420,7 @@ msgstr "All endpoints only listen on HTTP POST requests and the API KEY must set
 
 #: ../../automation/terraform/terraformAWS.rst:539
 #: ../../automation/terraform/terraformAZ.rst:484
+#: ../../automation/terraform/terraformGoogle.rst:705
 #: ../../automation/terraform/terraformvSphere.rst:397
 msgid "All files about the article can be found here_"
 msgstr "All files about the article can be found here_"
@@ -406,6 +439,7 @@ msgstr "Also, this lab considers:"
 
 #: ../../automation/terraform/terraformAWS.rst:74
 #: ../../automation/terraform/terraformAZ.rst:51
+#: ../../automation/terraform/terraformGoogle.rst:73
 #: ../../automation/terraform/terraformvSphere.rst:50
 #: ../../automation/vyos-ansible.rst:6
 msgid "Ansible"
@@ -566,6 +600,10 @@ msgstr "Deploying VyOS in the AWS cloud"
 msgid "Deploying VyOS in the Azure cloud"
 msgstr "Deploying VyOS in the Azure cloud"
 
+#: ../../automation/terraform/terraformGoogle.rst:6
+msgid "Deploying VyOS in the google cloud"
+msgstr "Deploying VyOS in the google cloud"
+
 #: ../../automation/terraform/terraformvSphere.rst:6
 msgid "Deploying VyOS in the vSphere infrastructure"
 msgstr "Deploying VyOS in the vSphere infrastructure"
@@ -622,6 +660,10 @@ msgstr "File contents of Ansible for AWS"
 msgid "File contents of Ansible for Azure"
 msgstr "File contents of Ansible for Azure"
 
+#: ../../automation/terraform/terraformGoogle.rst:651
+msgid "File contents of Ansible for google cloud"
+msgstr "File contents of Ansible for google cloud"
+
 #: ../../automation/terraform/terraformvSphere.rst:338
 msgid "File contents of Ansible for vSphere"
 msgstr "File contents of Ansible for vSphere"
@@ -634,6 +676,10 @@ msgstr "File contents of Terrafom for AWS"
 msgid "File contents of Terrafom for Azure"
 msgstr "File contents of Terrafom for Azure"
 
+#: ../../automation/terraform/terraformGoogle.rst:375
+msgid "File contents of Terrafom for google cloud"
+msgstr "File contents of Terrafom for google cloud"
+
 #: ../../automation/terraform/terraformvSphere.rst:96
 msgid "File contents of Terrafom for vSphere"
 msgstr "File contents of Terrafom for vSphere"
@@ -718,6 +764,10 @@ msgstr "How to create a single instance and install your configuration using Ter
 msgid "How to create a single instance and install your configuration using Terraform+Ansible+Vsphere Step by step:"
 msgstr "How to create a single instance and install your configuration using Terraform+Ansible+Vsphere Step by step:"
 
+#: ../../automation/terraform/terraformGoogle.rst:16
+msgid "How to create a single instance and install your configuration using Terraform+Ansible+google Step by step:"
+msgstr "How to create a single instance and install your configuration using Terraform+Ansible+google Step by step:"
+
 #: ../../automation/terraform/terraformvSphere.rst:16
 msgid "How to create a single instance and install your configuration using Terraform+Ansible+vSphere Step by step:"
 msgstr "How to create a single instance and install your configuration using Terraform+Ansible+vSphere Step by step:"
@@ -766,6 +816,10 @@ msgstr "In this case, we'll create the necessary files for Terraform and Ansible
 msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the Azure cloud and make provisioning using Ansible."
 msgstr "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the Azure cloud and make provisioning using Ansible."
 
+#: ../../automation/terraform/terraformGoogle.rst:11
+msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the google cloud and make provisioning using Ansible."
+msgstr "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the google cloud and make provisioning using Ansible."
+
 #: ../../automation/terraform/terraformvSphere.rst:11
 msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the vSphere cloud and make provisioning using Ansible."
 msgstr "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the vSphere cloud and make provisioning using Ansible."
@@ -807,9 +861,14 @@ msgid "Major cloud providers offer a means of providing user-data at the time of
 msgstr "Major cloud providers offer a means of providing user-data at the time of instance launch. It can be provided as plain text or as base64-encoded text, depending on cloud provider. Also, it can be compressed using gzip, which makes sense with a long configuration commands list, because of the hard limit to ~16384 bytes for the whole user-data."
 
 #: ../../automation/terraform/terraformAWS.rst:282
+#: ../../automation/terraform/terraformGoogle.rst:359
 msgid "Make sure that Ansible is pinging from Terrafom."
 msgstr "Make sure that Ansible is pinging from Terrafom."
 
+#: ../../automation/terraform/terraformGoogle.rst:345
+msgid "Make sure that you have opened access to the instance in the security group."
+msgstr "Make sure that you have opened access to the instance in the security group."
+
 #: ../../automation/cloud-init.rst:20
 msgid "Metadata - Metadata is sourced by the cloud platform or hypervisor. In some clouds, there is implemented as an HTTP endpoint at ``http://169.254.169.254``."
 msgstr "Metadata - Metadata is sourced by the cloud platform or hypervisor. In some clouds, there is implemented as an HTTP endpoint at ``http://169.254.169.254``."
@@ -835,6 +894,7 @@ msgid "Netmiko-proxy"
 msgstr "Netmiko-proxy"
 
 #: ../../automation/terraform/terraformAWS.rst:-1
+#: ../../automation/terraform/terraformGoogle.rst:-1
 msgid "Network Topology Diagram"
 msgstr "Network Topology Diagram"
 
@@ -924,6 +984,10 @@ msgstr "Preparation steps for deploying VyOS on AWS"
 msgid "Preparation steps for deploying VyOS on Azure"
 msgstr "Preparation steps for deploying VyOS on Azure"
 
+#: ../../automation/terraform/terraformGoogle.rst:14
+msgid "Preparation steps for deploying VyOS on google"
+msgstr "Preparation steps for deploying VyOS on google"
+
 #: ../../automation/terraform/terraformvSphere.rst:14
 msgid "Preparation steps for deploying VyOS on vSphere"
 msgstr "Preparation steps for deploying VyOS on vSphere"
@@ -1028,16 +1092,25 @@ msgstr "Sourse files for AWS from GIT"
 msgid "Sourse files for Azure from GIT"
 msgstr "Sourse files for Azure from GIT"
 
+#: ../../automation/terraform/terraformGoogle.rst:703
+msgid "Sourse files for google cloud from GIT"
+msgstr "Sourse files for google cloud from GIT"
+
 #: ../../automation/terraform/terraformvSphere.rst:395
 msgid "Sourse files for vSphere from GIT"
 msgstr "Sourse files for vSphere from GIT"
 
 #: ../../automation/terraform/terraformAWS.rst:88
 #: ../../automation/terraform/terraformAZ.rst:63
+#: ../../automation/terraform/terraformGoogle.rst:87
 #: ../../automation/terraform/terraformvSphere.rst:62
 msgid "Start"
 msgstr "Start"
 
+#: ../../automation/terraform/terraformGoogle.rst:101
+msgid "Start creating a google cloud instance and check the result"
+msgstr "Start creating a google cloud instance and check the result"
+
 #: ../../automation/terraform/terraformAWS.rst:102
 msgid "Start creating an AWS instance and check the result"
 msgstr "Start creating an AWS instance and check the result"
@@ -1067,6 +1140,10 @@ msgstr "Structure of files Ansible for AWS"
 msgid "Structure of files Ansible for Azure"
 msgstr "Structure of files Ansible for Azure"
 
+#: ../../automation/terraform/terraformGoogle.rst:639
+msgid "Structure of files Ansible for google cloud"
+msgstr "Structure of files Ansible for google cloud"
+
 #: ../../automation/terraform/terraformvSphere.rst:326
 msgid "Structure of files Ansible for vSphere"
 msgstr "Structure of files Ansible for vSphere"
@@ -1085,6 +1162,10 @@ msgstr "Structure of files Terrafom for AWS"
 msgid "Structure of files Terrafom for Azure"
 msgstr "Structure of files Terrafom for Azure"
 
+#: ../../automation/terraform/terraformGoogle.rst:362
+msgid "Structure of files Terrafom for google cloud"
+msgstr "Structure of files Terrafom for google cloud"
+
 #: ../../automation/terraform/terraformvSphere.rst:84
 msgid "Structure of files Terrafom for vSphere"
 msgstr "Structure of files Terrafom for vSphere"
@@ -1099,6 +1180,7 @@ msgstr "System Defaults/Fallbacks"
 
 #: ../../automation/terraform/terraformAWS.rst:51
 #: ../../automation/terraform/terraformAZ.rst:23
+#: ../../automation/terraform/terraformGoogle.rst:49
 #: ../../automation/terraform/terraformvSphere.rst:26
 msgid "Terraform"
 msgstr "Terraform"
@@ -1115,6 +1197,10 @@ msgstr "Terraform for VyOS"
 msgid "The API pushes every request to a session and commit it. But some of VyOS components like DHCP and PPPoE Servers, IPSec, VXLAN, and other tunnels require full configuration for commit. The endpoint will process multiple commands when you pass them as a list to the ``data`` field."
 msgstr "The API pushes every request to a session and commit it. But some of VyOS components like DHCP and PPPoE Servers, IPSec, VXLAN, and other tunnels require full configuration for commit. The endpoint will process multiple commands when you pass them as a list to the ``data`` field."
 
+#: ../../automation/terraform/terraformGoogle.rst:41
+msgid "The .JSON file download automaticly after creating and will look like:"
+msgstr "The .JSON file download automaticly after creating and will look like:"
+
 #: ../../automation/command-scripting.rst:197
 msgid "The ``/config/scripts/vyos-postconfig-bootup.script`` script is called on boot after the VyOS configuration is fully applied."
 msgstr "The ``/config/scripts/vyos-postconfig-bootup.script`` script is called on boot after the VyOS configuration is fully applied."
@@ -1234,11 +1320,13 @@ msgstr "To power off the system use the ``poweroff`` endpoint."
 
 #: ../../automation/cloud-init.rst:226
 #: ../../automation/terraform/terraformAWS.rst:264
+#: ../../automation/terraform/terraformGoogle.rst:342
 msgid "Troubleshooting"
 msgstr "Troubleshooting"
 
 #: ../../automation/terraform/terraformAWS.rst:91
 #: ../../automation/terraform/terraformAZ.rst:66
+#: ../../automation/terraform/terraformGoogle.rst:90
 #: ../../automation/terraform/terraformvSphere.rst:65
 msgid "Type the commands on your Terrafom instance:"
 msgstr "Type the commands on your Terrafom instance:"
@@ -1379,6 +1467,10 @@ msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastruc
 msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the Azure cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible."
 msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the Azure cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible."
 
+#: ../../automation/terraform/terraformGoogle.rst:8
+msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the google cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible."
+msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the google cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible."
+
 #: ../../automation/terraform/terraformvSphere.rst:8
 msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the vSphere. Also we will make provisioning using Ansible."
 msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the vSphere. Also we will make provisioning using Ansible."
@@ -1461,6 +1553,7 @@ msgstr "all"
 
 #: ../../automation/terraform/terraformAWS.rst:478
 #: ../../automation/terraform/terraformAZ.rst:428
+#: ../../automation/terraform/terraformGoogle.rst:653
 #: ../../automation/terraform/terraformvSphere.rst:340
 #: ../../automation/vyos-ansible.rst:26
 msgid "ansible.cfg"
@@ -1482,8 +1575,13 @@ msgstr "commands.txt"
 msgid "delete an image, for example ``1.3-rolling-202006070117``"
 msgstr "delete an image, for example ``1.3-rolling-202006070117``"
 
+#: ../../automation/terraform/terraformGoogle.rst:19
+msgid "google cloud"
+msgstr "google cloud"
+
 #: ../../automation/terraform/terraformAWS.rst:528
 #: ../../automation/terraform/terraformAZ.rst:470
+#: ../../automation/terraform/terraformGoogle.rst:693
 #: ../../automation/terraform/terraformvSphere.rst:381
 msgid "group_vars/all"
 msgstr "group_vars/all"
@@ -1502,6 +1600,7 @@ msgstr "if you just want the Value of a multi-valued node, use the ``returnValue
 
 #: ../../automation/terraform/terraformAWS.rst:495
 #: ../../automation/terraform/terraformAZ.rst:438
+#: ../../automation/terraform/terraformGoogle.rst:662
 #: ../../automation/terraform/terraformvSphere.rst:350
 msgid "instance.yml"
 msgstr "instance.yml"
@@ -1515,6 +1614,10 @@ msgstr "main.tf"
 msgid "main.yml"
 msgstr "main.yml"
 
+#: ../../automation/terraform/terraformGoogle.rst:84
+msgid "mykey.json you have to get using step 2 of the google cloud"
+msgstr "mykey.json you have to get using step 2 of the google cloud"
+
 #: ../../automation/terraform/terraformAWS.rst:488
 msgid "mykey.pem"
 msgstr "mykey.pem"
@@ -1542,6 +1645,7 @@ msgstr "startup scripts"
 
 #: ../../automation/terraform/terraformAWS.rst:452
 #: ../../automation/terraform/terraformAZ.rst:405
+#: ../../automation/terraform/terraformGoogle.rst:623
 #: ../../automation/terraform/terraformvSphere.rst:307
 msgid "terraform.tfvars"
 msgstr "terraform.tfvars"
@@ -1556,6 +1660,7 @@ msgstr "vSphere"
 
 #: ../../automation/terraform/terraformAWS.rst:415
 #: ../../automation/terraform/terraformAZ.rst:298
+#: ../../automation/terraform/terraformGoogle.rst:538
 #: ../../automation/terraform/terraformvSphere.rst:239
 msgid "var.tf"
 msgstr "var.tf"
@@ -1576,6 +1681,7 @@ msgstr "versus a non-existent path:"
 
 #: ../../automation/terraform/terraformAWS.rst:300
 #: ../../automation/terraform/terraformAZ.rst:95
+#: ../../automation/terraform/terraformGoogle.rst:377
 #: ../../automation/terraform/terraformvSphere.rst:98
 msgid "vyos.tf"
 msgstr "vyos.tf"
diff --git a/docs/_locale/pt/configuration.pot b/docs/_locale/pt/configuration.pot
index c5be31e6..9d4de791 100644
--- a/docs/_locale/pt/configuration.pot
+++ b/docs/_locale/pt/configuration.pot
@@ -76,6 +76,14 @@ msgstr "**9** - NetFlow version 9 (default)"
 msgid "**AS path length check**"
 msgstr "**AS path length check**"
 
+#: ../../configuration/service/dhcp-server.rst:175
+msgid "**Active-active**: both DHCP servers will respond to DHCP requests. If ``mode`` is not defined, this is the default behavior."
+msgstr "**Active-active**: both DHCP servers will respond to DHCP requests. If ``mode`` is not defined, this is the default behavior."
+
+#: ../../configuration/service/dhcp-server.rst:178
+msgid "**Active-passive**: only ``primary`` server will respond to DHCP requests. If this server goes offline, then ``secondary`` server will take place."
+msgstr "**Active-passive**: only ``primary`` server will respond to DHCP requests. If this server goes offline, then ``secondary`` server will take place."
+
 #: ../../configuration/protocols/bgp.rst:106
 msgid "**Already-selected external check**"
 msgstr "**Already-selected external check**"
@@ -170,9 +178,9 @@ msgstr "**Ethernet (protocol, destination address or source address)**"
 
 #: ../../configuration/service/dhcp-server.rst:63
 #: ../../configuration/service/dhcp-server.rst:158
-#: ../../configuration/service/dhcp-server.rst:240
-#: ../../configuration/service/dhcp-server.rst:627
-#: ../../configuration/service/dhcp-server.rst:668
+#: ../../configuration/service/dhcp-server.rst:256
+#: ../../configuration/service/dhcp-server.rst:646
+#: ../../configuration/service/dhcp-server.rst:687
 msgid "**Example:**"
 msgstr "**Example:**"
 
@@ -417,7 +425,7 @@ msgstr "**Prerouting**: several actions can be done in this stage, and currently
 msgid "**Prerouting**: several actions can be done in this stage, and currently these actions are defined in different parts in vyos configuration. Order is important, and all these actions are performed before any actions define under ``firewall`` section. Relevant configuration that acts in this stage are:"
 msgstr "**Prerouting**: several actions can be done in this stage, and currently these actions are defined in different parts in vyos configuration. Order is important, and all these actions are performed before any actions define under ``firewall`` section. Relevant configuration that acts in this stage are:"
 
-#: ../../configuration/service/dhcp-server.rst:431
+#: ../../configuration/service/dhcp-server.rst:448
 msgid "**Primary**"
 msgstr "**Primary**"
 
@@ -527,7 +535,7 @@ msgstr "**SW1**"
 msgid "**SW2**"
 msgstr "**SW2**"
 
-#: ../../configuration/service/dhcp-server.rst:440
+#: ../../configuration/service/dhcp-server.rst:458
 msgid "**Secondary**"
 msgstr "**Secondary**"
 
@@ -1047,7 +1055,7 @@ msgstr "0 if not defined, which means no refreshing."
 msgid "0 if not defined."
 msgstr "0 if not defined."
 
-#: ../../configuration/service/dhcp-server.rst:277
+#: ../../configuration/service/dhcp-server.rst:293
 #: ../../configuration/system/syslog.rst:114
 #: ../../configuration/system/syslog.rst:173
 #: ../../configuration/trafficpolicy/index.rst:801
@@ -1110,7 +1118,7 @@ msgstr "10 - 10 MBit/s"
 msgid "11"
 msgstr "11"
 
-#: ../../configuration/service/dhcp-server.rst:359
+#: ../../configuration/service/dhcp-server.rst:375
 msgid "119"
 msgstr "119"
 
@@ -1120,11 +1128,11 @@ msgstr "119"
 msgid "12"
 msgstr "12"
 
-#: ../../configuration/service/dhcp-server.rst:364
+#: ../../configuration/service/dhcp-server.rst:380
 msgid "121, 249"
 msgstr "121, 249"
 
-#: ../../configuration/service/dhcp-server.rst:344
+#: ../../configuration/service/dhcp-server.rst:360
 #: ../../configuration/system/syslog.rst:138
 #: ../../configuration/trafficpolicy/index.rst:870
 msgid "13"
@@ -1136,7 +1144,7 @@ msgstr "13"
 msgid "14"
 msgstr "14"
 
-#: ../../configuration/service/dhcp-server.rst:304
+#: ../../configuration/service/dhcp-server.rst:320
 #: ../../configuration/system/syslog.rst:142
 #: ../../configuration/trafficpolicy/index.rst:866
 msgid "15"
@@ -1160,7 +1168,7 @@ msgstr "172.16.0.0 to 172.31.255.255 (CIDR: 172.16.0.0/12)"
 msgid "18"
 msgstr "18"
 
-#: ../../configuration/service/dhcp-server.rst:309
+#: ../../configuration/service/dhcp-server.rst:325
 #: ../../configuration/system/syslog.rst:150
 msgid "19"
 msgstr "19"
@@ -1185,7 +1193,7 @@ msgstr "1: Enable DAD (default)"
 msgid "1 if not defined."
 msgstr "1 if not defined."
 
-#: ../../configuration/service/dhcp-server.rst:283
+#: ../../configuration/service/dhcp-server.rst:299
 #: ../../configuration/system/syslog.rst:116
 #: ../../configuration/system/syslog.rst:178
 #: ../../configuration/trafficpolicy/index.rst:799
@@ -1219,7 +1227,7 @@ msgstr "25000 - 25 GBit/s"
 msgid "2500 - 2.5 GBit/s"
 msgstr "2500 - 2.5 GBit/s"
 
-#: ../../configuration/service/dhcp-server.rst:369
+#: ../../configuration/service/dhcp-server.rst:385
 msgid "252"
 msgstr "252"
 
@@ -1247,7 +1255,7 @@ msgstr "2. Since this is the first packet, connection status of this connection,
 msgid "2: Enable DAD, and disable IPv6 operation if MAC-based duplicate link-local address has been found."
 msgstr "2: Enable DAD, and disable IPv6 operation if MAC-based duplicate link-local address has been found."
 
-#: ../../configuration/service/dhcp-server.rst:289
+#: ../../configuration/service/dhcp-server.rst:305
 #: ../../configuration/system/syslog.rst:118
 #: ../../configuration/system/syslog.rst:181
 #: ../../configuration/trafficpolicy/index.rst:797
@@ -1275,7 +1283,7 @@ msgstr "38"
 msgid "3. Add a full path to the script"
 msgstr "3. Add a full path to the script"
 
-#: ../../configuration/service/dhcp-server.rst:294
+#: ../../configuration/service/dhcp-server.rst:310
 #: ../../configuration/system/syslog.rst:120
 #: ../../configuration/system/syslog.rst:183
 #: ../../configuration/trafficpolicy/index.rst:795
@@ -1291,11 +1299,11 @@ msgstr "40000 - 40 GBit/s"
 msgid "40 MHz channels may switch their primary and secondary channels if needed or creation of 40 MHz channel maybe rejected based on overlapping BSSes. These changes are done automatically when hostapd is setting up the 40 MHz channel."
 msgstr "40 MHz channels may switch their primary and secondary channels if needed or creation of 40 MHz channel maybe rejected based on overlapping BSSes. These changes are done automatically when hostapd is setting up the 40 MHz channel."
 
-#: ../../configuration/service/dhcp-server.rst:314
+#: ../../configuration/service/dhcp-server.rst:330
 msgid "42"
 msgstr "42"
 
-#: ../../configuration/service/dhcp-server.rst:319
+#: ../../configuration/service/dhcp-server.rst:335
 msgid "44"
 msgstr "44"
 
@@ -1326,7 +1334,7 @@ msgstr "50000 - 50 GBit/s"
 msgid "5000 - 5 GBit/s"
 msgstr "5000 - 5 GBit/s"
 
-#: ../../configuration/service/dhcp-server.rst:324
+#: ../../configuration/service/dhcp-server.rst:340
 msgid "54"
 msgstr "54"
 
@@ -1339,7 +1347,7 @@ msgstr "5. Second packet for this connection is received by the router. Since co
 msgid "5 if not defined."
 msgstr "5 if not defined."
 
-#: ../../configuration/service/dhcp-server.rst:299
+#: ../../configuration/service/dhcp-server.rst:315
 #: ../../configuration/system/syslog.rst:124
 #: ../../configuration/system/syslog.rst:189
 #: ../../configuration/trafficpolicy/index.rst:791
@@ -1347,7 +1355,7 @@ msgstr "5 if not defined."
 msgid "6"
 msgstr "6"
 
-#: ../../configuration/service/dhcp-server.rst:334
+#: ../../configuration/service/dhcp-server.rst:350
 msgid "66"
 msgstr "66"
 
@@ -1355,11 +1363,11 @@ msgstr "66"
 msgid "66% of traffic is routed to eth0, eth1 gets 33% of traffic."
 msgstr "66% of traffic is routed to eth0, eth1 gets 33% of traffic."
 
-#: ../../configuration/service/dhcp-server.rst:339
+#: ../../configuration/service/dhcp-server.rst:355
 msgid "67"
 msgstr "67"
 
-#: ../../configuration/service/dhcp-server.rst:349
+#: ../../configuration/service/dhcp-server.rst:365
 msgid "69"
 msgstr "69"
 
@@ -1382,7 +1390,7 @@ msgstr "6in4 uses tunneling to encapsulate IPv6 traffic over IPv4 links as defin
 msgid "7"
 msgstr "7"
 
-#: ../../configuration/service/dhcp-server.rst:354
+#: ../../configuration/service/dhcp-server.rst:370
 msgid "70"
 msgstr "70"
 
@@ -1511,7 +1519,7 @@ msgstr "A GRE tunnel operates at layer 3 of the OSI model and is represented by
 msgid "A Rule-Set can be applied to every interface:"
 msgstr "A Rule-Set can be applied to every interface:"
 
-#: ../../configuration/service/dhcp-server.rst:601
+#: ../../configuration/service/dhcp-server.rst:620
 msgid "A SNTP server address can be specified for DHCPv6 clients."
 msgstr "A SNTP server address can be specified for DHCPv6 clients."
 
@@ -1527,7 +1535,7 @@ msgstr "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be c
 msgid "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com."
 msgstr "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com."
 
-#: ../../configuration/service/dhcp-server.rst:573
+#: ../../configuration/service/dhcp-server.rst:592
 msgid "A :abbr:`NIS (Network Information Service)` domain can be set to be used for DHCPv6 clients."
 msgstr "A :abbr:`NIS (Network Information Service)` domain can be set to be used for DHCPv6 clients."
 
@@ -1596,7 +1604,7 @@ msgstr "A firewall mark ``fwmark`` allows using multiple ports for high-availabi
 msgid "A full example of a Tunnelbroker.net config can be found at :ref:`here <examples-tunnelbroker-ipv6>`."
 msgstr "A full example of a Tunnelbroker.net config can be found at :ref:`here <examples-tunnelbroker-ipv6>`."
 
-#: ../../configuration/service/dhcp-server.rst:186
+#: ../../configuration/service/dhcp-server.rst:201
 msgid "A generic `<name>` referencing this sync service."
 msgstr "A generic `<name>` referencing this sync service."
 
@@ -1694,7 +1702,7 @@ msgstr "A segment ID that contains an IP address prefix calculated by an IGP in
 msgid "A sending station (computer or network switch) may be transmitting data faster than the other end of the link can accept it. Using flow control, the receiving station can signal the sender requesting suspension of transmissions until the receiver catches up."
 msgstr "A sending station (computer or network switch) may be transmitting data faster than the other end of the link can accept it. Using flow control, the receiving station can signal the sender requesting suspension of transmissions until the receiver catches up."
 
-#: ../../configuration/service/dhcp-server.rst:629
+#: ../../configuration/service/dhcp-server.rst:648
 msgid "A shared network named ``NET1`` serves subnet ``2001:db8::/64``"
 msgstr "A shared network named ``NET1`` serves subnet ``2001:db8::/64``"
 
@@ -1948,11 +1956,11 @@ msgstr "Address Families"
 msgid "Address Groups"
 msgstr "Address Groups"
 
-#: ../../configuration/service/dhcp-server.rst:632
+#: ../../configuration/service/dhcp-server.rst:651
 msgid "Address pool shall be ``2001:db8::100`` through ``2001:db8::199``."
 msgstr "Address pool shall be ``2001:db8::100`` through ``2001:db8::199``."
 
-#: ../../configuration/service/dhcp-server.rst:622
+#: ../../configuration/service/dhcp-server.rst:641
 msgid "Address pools"
 msgstr "Address pools"
 
@@ -2948,11 +2956,11 @@ msgstr "Bond / Link Aggregation"
 msgid "Bond options"
 msgstr "Bond options"
 
-#: ../../configuration/service/dhcp-server.rst:346
+#: ../../configuration/service/dhcp-server.rst:362
 msgid "Boot image length in 512-octet blocks"
 msgstr "Boot image length in 512-octet blocks"
 
-#: ../../configuration/service/dhcp-server.rst:341
+#: ../../configuration/service/dhcp-server.rst:357
 msgid "Bootstrap file name"
 msgstr "Bootstrap file name"
 
@@ -3197,7 +3205,7 @@ msgstr "Class treatment"
 msgid "Classes"
 msgstr "Classes"
 
-#: ../../configuration/service/dhcp-server.rst:366
+#: ../../configuration/service/dhcp-server.rst:382
 msgid "Classless static route"
 msgstr "Classless static route"
 
@@ -3245,11 +3253,11 @@ msgstr "Client Side"
 msgid "Client configuration"
 msgstr "Client configuration"
 
-#: ../../configuration/service/dhcp-server.rst:306
+#: ../../configuration/service/dhcp-server.rst:322
 msgid "Client domain name"
 msgstr "Client domain name"
 
-#: ../../configuration/service/dhcp-server.rst:361
+#: ../../configuration/service/dhcp-server.rst:377
 msgid "Client domain search"
 msgstr "Client domain search"
 
@@ -3261,7 +3269,7 @@ msgstr "Client isolation can be used to prevent low-level bridging of frames bet
 msgid "Clients are identified by the CN field of their x.509 certificates, in this example the CN is ``client0``:"
 msgstr "Clients are identified by the CN field of their x.509 certificates, in this example the CN is ``client0``:"
 
-#: ../../configuration/service/dhcp-server.rst:554
+#: ../../configuration/service/dhcp-server.rst:573
 msgid "Clients receiving advertise messages from multiple servers choose the server with the highest preference value. The range for this value is ``0...255``."
 msgstr "Clients receiving advertise messages from multiple servers choose the server with the highest preference value. The range for this value is ``0...255``."
 
@@ -3292,7 +3300,7 @@ msgstr "Command used to update GeoIP database and firewall sets."
 msgid "Commands"
 msgstr "Commands"
 
-#: ../../configuration/service/dhcp-server.rst:419
+#: ../../configuration/service/dhcp-server.rst:436
 msgid "Common configuration, valid for both primary and secondary node."
 msgstr "Common configuration, valid for both primary and secondary node."
 
@@ -3371,7 +3379,7 @@ msgstr "Confidentiality – Encryption of packets to prevent snooping by an unau
 #: ../../configuration/service/dhcp-relay.rst:19
 #: ../../configuration/service/dhcp-relay.rst:137
 #: ../../configuration/service/dhcp-server.rst:22
-#: ../../configuration/service/dhcp-server.rst:550
+#: ../../configuration/service/dhcp-server.rst:569
 #: ../../configuration/service/dns.rst:8
 #: ../../configuration/service/dns.rst:214
 #: ../../configuration/service/https.rst:14
@@ -3451,6 +3459,10 @@ msgstr "Configuration for these exported routes must, at a minimum, specify thes
 msgid "Configuration of :ref:`routing-static`"
 msgstr "Configuration of :ref:`routing-static`"
 
+#: ../../configuration/service/dhcp-server.rst:427
+msgid "Configuration of a DHCP HA pair:"
+msgstr "Configuration of a DHCP HA pair:"
+
 #: ../../configuration/service/dhcp-server.rst:411
 msgid "Configuration of a DHCP failover pair"
 msgstr "Configuration of a DHCP failover pair"
@@ -3882,6 +3894,10 @@ msgstr "Connections to the RPKI caching server can not only be established by HT
 msgid "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH you first need to create yoursels an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection."
 msgstr "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH you first need to create yoursels an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection."
 
+#: ../../configuration/protocols/rpki.rst:143
+msgid "Connections to the RPKI caching server can not only be established by TCP using the RTR protocol but you can also rely on a secure SSH session to the server. This provides transport integrity and confidentiality and it is a good idea if your validation software supports it.  To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection."
+msgstr "Connections to the RPKI caching server can not only be established by TCP using the RTR protocol but you can also rely on a secure SSH session to the server. This provides transport integrity and confidentiality and it is a good idea if your validation software supports it.  To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection."
+
 #: ../../configuration/system/conntrack.rst:4
 msgid "Conntrack"
 msgstr "Conntrack"
@@ -3989,11 +4005,11 @@ msgstr "Create a file named ``VyOS-1.3.6.1.4.1.44641.ConfigMgmt-Commands`` using
 msgid "Create a load balancing rule, it can be a number between 1 and 9999:"
 msgstr "Create a load balancing rule, it can be a number between 1 and 9999:"
 
-#: ../../configuration/service/dhcp-server.rst:223
+#: ../../configuration/service/dhcp-server.rst:239
 msgid "Create a new DHCP static mapping named `<description>` which is valid for the host identified by its DHCP unique identifier (DUID) `<identifier>`."
 msgstr "Create a new DHCP static mapping named `<description>` which is valid for the host identified by its DHCP unique identifier (DUID) `<identifier>`."
 
-#: ../../configuration/service/dhcp-server.rst:217
+#: ../../configuration/service/dhcp-server.rst:233
 msgid "Create a new DHCP static mapping named `<description>` which is valid for the host identified by its MAC `<address>`."
 msgstr "Create a new DHCP static mapping named `<description>` which is valid for the host identified by its MAC `<address>`."
 
@@ -4198,6 +4214,10 @@ msgstr "DCO support is a per-tunnel option and it is not automatically enabled b
 msgid "DDoS Protection"
 msgstr "DDoS Protection"
 
+#: ../../configuration/service/dhcp-server.rst:181
+msgid "DHCP High Availability must be configured explicitly by the following statements on both servers:"
+msgstr "DHCP High Availability must be configured explicitly by the following statements on both servers:"
+
 #: ../../configuration/service/dhcp-relay.rst:5
 msgid "DHCP Relay"
 msgstr "DHCP Relay"
@@ -4206,15 +4226,15 @@ msgstr "DHCP Relay"
 msgid "DHCP Server"
 msgstr "DHCP Server"
 
-#: ../../configuration/service/dhcp-server.rst:391
+#: ../../configuration/service/dhcp-server.rst:407
 msgid "DHCP failover parameters"
 msgstr "DHCP failover parameters"
 
-#: ../../configuration/service/dhcp-server.rst:381
+#: ../../configuration/service/dhcp-server.rst:397
 msgid "DHCP lease range"
 msgstr "DHCP lease range"
 
-#: ../../configuration/service/dhcp-server.rst:417
+#: ../../configuration/service/dhcp-server.rst:434
 msgid "DHCP range spans from `192.168.189.10` - `192.168.189.250`"
 msgstr "DHCP range spans from `192.168.189.10` - `192.168.189.250`"
 
@@ -4226,7 +4246,7 @@ msgstr "DHCP relay example"
 msgid "DHCP server is located at IPv4 address 10.0.1.4 on ``eth2``."
 msgstr "DHCP server is located at IPv4 address 10.0.1.4 on ``eth2``."
 
-#: ../../configuration/service/dhcp-server.rst:624
+#: ../../configuration/service/dhcp-server.rst:643
 msgid "DHCPv6 address pools must be configured for the system to act as a DHCPv6 server. The following example describes a common scenario."
 msgstr "DHCPv6 address pools must be configured for the system to act as a DHCPv6 server. The following example describes a common scenario."
 
@@ -4291,11 +4311,11 @@ msgstr "DNS name servers"
 msgid "DNS search list to advertise"
 msgstr "DNS search list to advertise"
 
-#: ../../configuration/service/dhcp-server.rst:301
+#: ../../configuration/service/dhcp-server.rst:317
 msgid "DNS server IPv4 address"
 msgstr "DNS server IPv4 address"
 
-#: ../../configuration/service/dhcp-server.rst:631
+#: ../../configuration/service/dhcp-server.rst:650
 msgid "DNS server is located at ``2001:db8::ffff``"
 msgstr "DNS server is located at ``2001:db8::ffff``"
 
@@ -4351,7 +4371,7 @@ msgstr "Default Router Preference"
 msgid "Default behavior - don't ask client for mppe, but allow it if client wants. Please note that RADIUS may override this option by MS-MPPE-Encryption-Policy attribute."
 msgstr "Default behavior - don't ask client for mppe, but allow it if client wants. Please note that RADIUS may override this option by MS-MPPE-Encryption-Policy attribute."
 
-#: ../../configuration/service/dhcp-server.rst:414
+#: ../../configuration/service/dhcp-server.rst:431
 msgid "Default gateway and DNS server is at `192.0.2.254`"
 msgstr "Default gateway and DNS server is at `192.0.2.254`"
 
@@ -4483,6 +4503,10 @@ msgstr "Define log group to send message to. Only applicable if rule log is enab
 msgid "Define number of packets to queue inside the kernel before sending them to userspace. Only applicable if rule log is enable and log group is defined."
 msgstr "Define number of packets to queue inside the kernel before sending them to userspace. Only applicable if rule log is enable and log group is defined."
 
+#: ../../configuration/service/dhcp-server.rst:187
+msgid "Define operation mode of High Availability feature. Default value if command is not specified is `active-active`"
+msgstr "Define operation mode of High Availability feature. Default value if command is not specified is `active-active`"
+
 #: ../../configuration/protocols/rpki.rst:108
 msgid "Define the time interval to update the local cache"
 msgstr "Define the time interval to update the local cache"
@@ -4560,7 +4584,7 @@ msgstr "Defines the specified device as a system console. Available console devi
 msgid "Defining Peers"
 msgstr "Defining Peers"
 
-#: ../../configuration/service/dhcp-server.rst:619
+#: ../../configuration/service/dhcp-server.rst:638
 msgid "Delegate prefixes from the range indicated by the start and stop qualifier."
 msgstr "Delegate prefixes from the range indicated by the start and stop qualifier."
 
@@ -5154,7 +5178,7 @@ msgstr "Enable IGMP and MLD querier."
 msgid "Enable IGMP and MLD snooping."
 msgstr "Enable IGMP and MLD snooping."
 
-#: ../../configuration/service/dhcp-server.rst:311
+#: ../../configuration/service/dhcp-server.rst:327
 msgid "Enable IP forwarding on client"
 msgstr "Enable IP forwarding on client"
 
@@ -5511,12 +5535,12 @@ msgstr "Every connection/remote-access pool we configure also needs a pool where
 #: ../../configuration/protocols/failover.rst:63
 #: ../../configuration/protocols/igmp-proxy.rst:61
 #: ../../configuration/protocols/pim.rst:217
-#: ../../configuration/protocols/rpki.rst:166
+#: ../../configuration/protocols/rpki.rst:168
 #: ../../configuration/service/broadcast-relay.rst:55
-#: ../../configuration/service/conntrack-sync.rst:190
+#: ../../configuration/service/conntrack-sync.rst:195
 #: ../../configuration/service/dhcp-relay.rst:85
 #: ../../configuration/service/dhcp-relay.rst:174
-#: ../../configuration/service/dhcp-server.rst:402
+#: ../../configuration/service/dhcp-server.rst:418
 #: ../../configuration/service/dns.rst:147
 #: ../../configuration/service/dns.rst:260
 #: ../../configuration/service/eventhandler.rst:83
@@ -5810,8 +5834,6 @@ msgstr "Facility Code"
 
 #: ../../configuration/loadbalancing/wan.rst:218
 #: ../../configuration/protocols/failover.rst:3
-#: ../../configuration/service/dhcp-server.rst:170
-#: ../../configuration/service/dhcp-server.rst:409
 msgid "Failover"
 msgstr "Failover"
 
@@ -6533,7 +6555,7 @@ msgstr "HT (High Throughput) capabilities (802.11n)"
 msgid "Hairpin NAT/NAT Reflection"
 msgstr "Hairpin NAT/NAT Reflection"
 
-#: ../../configuration/service/dhcp-server.rst:613
+#: ../../configuration/service/dhcp-server.rst:632
 msgid "Hand out prefixes of size `<length>` to clients in subnet `<prefix>` when they request for prefix delegation."
 msgstr "Hand out prefixes of size `<length>` to clients in subnet `<prefix>` when they request for prefix delegation."
 
@@ -6589,7 +6611,7 @@ msgstr "Here is a second example of a dual-stack tunnel over IPv6 between a VyOS
 msgid "Here is an example :abbr:`NET (Network Entity Title)` value:"
 msgstr "Here is an example :abbr:`NET (Network Entity Title)` value:"
 
-#: ../../configuration/protocols/rpki.rst:177
+#: ../../configuration/protocols/rpki.rst:179
 msgid "Here is an example route-map to apply to routes learned at import. In this filter we reject prefixes with the state `invalid`, and set a higher `local-preference` if the prefix is RPKI `valid` rather than merely `notfound`."
 msgstr "Here is an example route-map to apply to routes learned at import. In this filter we reject prefixes with the state `invalid`, and set a higher `local-preference` if the prefix is RPKI `valid` rather than merely `notfound`."
 
@@ -6619,6 +6641,11 @@ msgstr "Hewlett-Packard call it Source-Port filtering or port-isolation"
 msgid "High"
 msgstr "High"
 
+#: ../../configuration/service/dhcp-server.rst:170
+#: ../../configuration/service/dhcp-server.rst:425
+msgid "High Availability"
+msgstr "High Availability"
+
 #: ../../configuration/highavailability/index.rst:6
 msgid "High availability"
 msgstr "High availability"
@@ -6639,7 +6666,7 @@ msgstr "Host Information"
 msgid "Host name"
 msgstr "Host name"
 
-#: ../../configuration/service/dhcp-server.rst:672
+#: ../../configuration/service/dhcp-server.rst:691
 msgid "Host specific mapping shall be named ``client1``"
 msgstr "Host specific mapping shall be named ``client1``"
 
@@ -6787,7 +6814,7 @@ msgstr "IPSec VPN tunnels."
 msgid "IP address"
 msgstr "IP address"
 
-#: ../../configuration/service/dhcp-server.rst:242
+#: ../../configuration/service/dhcp-server.rst:258
 msgid "IP address ``192.168.1.100`` shall be statically mapped to client named ``client1``"
 msgstr "IP address ``192.168.1.100`` shall be statically mapped to client named ``client1``"
 
@@ -6796,19 +6823,19 @@ msgstr "IP address ``192.168.1.100`` shall be statically mapped to client named
 msgid "IP address ``192.168.2.1/24``"
 msgstr "IP address ``192.168.2.1/24``"
 
-#: ../../configuration/service/dhcp-server.rst:326
+#: ../../configuration/service/dhcp-server.rst:342
 msgid "IP address for DHCP server identifier"
 msgstr "IP address for DHCP server identifier"
 
-#: ../../configuration/service/dhcp-server.rst:316
+#: ../../configuration/service/dhcp-server.rst:332
 msgid "IP address of NTP server"
 msgstr "IP address of NTP server"
 
-#: ../../configuration/service/dhcp-server.rst:356
+#: ../../configuration/service/dhcp-server.rst:372
 msgid "IP address of POP3 server"
 msgstr "IP address of POP3 server"
 
-#: ../../configuration/service/dhcp-server.rst:351
+#: ../../configuration/service/dhcp-server.rst:367
 msgid "IP address of SMTP server"
 msgstr "IP address of SMTP server"
 
@@ -6824,7 +6851,7 @@ msgstr "IP address of route to match, based on prefix-list."
 msgid "IP address of route to match, based on specified prefix-length. Note that this can be used for kernel routes only. Do not apply to the routes of dynamic routing protocols (e.g. BGP, RIP, OSFP), as this can lead to unexpected results.."
 msgstr "IP address of route to match, based on specified prefix-length. Note that this can be used for kernel routes only. Do not apply to the routes of dynamic routing protocols (e.g. BGP, RIP, OSFP), as this can lead to unexpected results.."
 
-#: ../../configuration/service/dhcp-server.rst:386
+#: ../../configuration/service/dhcp-server.rst:402
 msgid "IP address to exclude from DHCP lease range"
 msgstr "IP address to exclude from DHCP lease range"
 
@@ -6912,11 +6939,11 @@ msgstr "IPv4/IPv6 remote address of the VXLAN tunnel. Alternative to multicast,
 msgid "IPv4 Firewall Configuration"
 msgstr "IPv4 Firewall Configuration"
 
-#: ../../configuration/service/dhcp-server.rst:331
+#: ../../configuration/service/dhcp-server.rst:347
 msgid "IPv4 address of next bootstrap server"
 msgstr "IPv4 address of next bootstrap server"
 
-#: ../../configuration/service/dhcp-server.rst:291
+#: ../../configuration/service/dhcp-server.rst:307
 msgid "IPv4 address of router on the client's subnet"
 msgstr "IPv4 address of router on the client's subnet"
 
@@ -6997,7 +7024,7 @@ msgstr "IPv6 SLAAC and IA-PD"
 msgid "IPv6 TCP filters will only match IPv6 packets with no header extension, see https://en.wikipedia.org/wiki/IPv6_packet#Extension_headers"
 msgstr "IPv6 TCP filters will only match IPv6 packets with no header extension, see https://en.wikipedia.org/wiki/IPv6_packet#Extension_headers"
 
-#: ../../configuration/service/dhcp-server.rst:670
+#: ../../configuration/service/dhcp-server.rst:689
 msgid "IPv6 address ``2001:db8::101`` shall be statically mapped"
 msgstr "IPv6 address ``2001:db8::101`` shall be statically mapped"
 
@@ -7033,7 +7060,7 @@ msgstr "IPv6 peering"
 msgid "IPv6 prefix."
 msgstr "IPv6 prefix."
 
-#: ../../configuration/service/dhcp-server.rst:671
+#: ../../configuration/service/dhcp-server.rst:690
 msgid "IPv6 prefix ``2001:db8:0:101::/64`` shall be statically mapped"
 msgstr "IPv6 prefix ``2001:db8:0:101::/64`` shall be statically mapped"
 
@@ -7045,7 +7072,7 @@ msgstr "IPv6 relay"
 msgid "IPv6 route source: bgp, connected, eigrp, isis, kernel, nhrp, ospfv3, ripng, static."
 msgstr "IPv6 route source: bgp, connected, eigrp, isis, kernel, nhrp, ospfv3, ripng, static."
 
-#: ../../configuration/service/dhcp-server.rst:542
+#: ../../configuration/service/dhcp-server.rst:561
 msgid "IPv6 server"
 msgstr "IPv6 server"
 
@@ -7065,7 +7092,7 @@ msgstr "IS-IS Global Configuration"
 msgid "IS-IS SR Configuration"
 msgstr "IS-IS SR Configuration"
 
-#: ../../configuration/service/dhcp-server.rst:273
+#: ../../configuration/service/dhcp-server.rst:289
 msgid "ISC-DHCP Option name"
 msgstr "ISC-DHCP Option name"
 
@@ -7336,7 +7363,7 @@ msgstr "If the statically mapped peer is running Cisco IOS, specify the cisco ke
 msgid "If the system detects an unconfigured wireless device, it will be automatically added the configuration tree, specifying any detected settings (for example, its MAC address) and configured to run in monitor mode."
 msgstr "If the system detects an unconfigured wireless device, it will be automatically added the configuration tree, specifying any detected settings (for example, its MAC address) and configured to run in monitor mode."
 
-#: ../../configuration/service/conntrack-sync.rst:130
+#: ../../configuration/service/conntrack-sync.rst:135
 msgid "If the table is empty and you have a warning message, it means conntrack is not enabled. To enable conntrack, just create a NAT or a firewall rule. :cfgcmd:`set firewall state-policy established action accept`"
 msgstr "If the table is empty and you have a warning message, it means conntrack is not enabled. To enable conntrack, just create a NAT or a firewall rule. :cfgcmd:`set firewall state-policy established action accept`"
 
@@ -7704,7 +7731,7 @@ msgstr "In large deployments it is not reasonable to configure each user individ
 msgid "In order for flow accounting information to be collected and displayed for an interface, the interface must be configured for flow accounting."
 msgstr "In order for flow accounting information to be collected and displayed for an interface, the interface must be configured for flow accounting."
 
-#: ../../configuration/service/dhcp-server.rst:195
+#: ../../configuration/service/dhcp-server.rst:211
 msgid "In order for the primary and the secondary DHCP server to keep their lease tables in sync, they must be able to reach each other on TCP port 647. If you have firewall rules in effect, adjust them accordingly."
 msgstr "In order for the primary and the secondary DHCP server to keep their lease tables in sync, they must be able to reach each other on TCP port 647. If you have firewall rules in effect, adjust them accordingly."
 
@@ -7732,7 +7759,7 @@ msgstr "In order to have VyOS Traffic Control working you need to follow 2 steps
 msgid "In order to have full control and make use of multiple static public IP addresses, your VyOS will have to initiate the PPPoE connection and control it. In order for this method to work, you will have to figure out how to make your DSL Modem/Router switch into a Bridged Mode so it only acts as a DSL Transceiver device to connect between the Ethernet link of your VyOS and the phone cable. Once your DSL Transceiver is in Bridge Mode, you should get no IP address from it. Please make sure you connect to the Ethernet Port 1 if your DSL Transceiver has a switch, as some of them only work this way."
 msgstr "In order to have full control and make use of multiple static public IP addresses, your VyOS will have to initiate the PPPoE connection and control it. In order for this method to work, you will have to figure out how to make your DSL Modem/Router switch into a Bridged Mode so it only acts as a DSL Transceiver device to connect between the Ethernet link of your VyOS and the phone cable. Once your DSL Transceiver is in Bridge Mode, you should get no IP address from it. Please make sure you connect to the Ethernet Port 1 if your DSL Transceiver has a switch, as some of them only work this way."
 
-#: ../../configuration/service/dhcp-server.rst:665
+#: ../../configuration/service/dhcp-server.rst:684
 msgid "In order to map specific IPv6 addresses to specific hosts static mappings can be created. The following example explains the process."
 msgstr "In order to map specific IPv6 addresses to specific hosts static mappings can be created. The following example explains the process."
 
@@ -8170,7 +8197,7 @@ msgstr "It helps to think of the syntax as: (see below). The 'rule-set' should b
 msgid "It is compatible with Cisco (R) AnyConnect (R) clients."
 msgstr "It is compatible with Cisco (R) AnyConnect (R) clients."
 
-#: ../../configuration/service/dhcp-server.rst:630
+#: ../../configuration/service/dhcp-server.rst:649
 msgid "It is connected to ``eth1``"
 msgstr "It is connected to ``eth1``"
 
@@ -8373,11 +8400,11 @@ msgstr "Label Distribution Protocol"
 msgid "Layer 2 Tunnelling Protocol Version 3 is an IETF standard related to L2TP that can be used as an alternative protocol to :ref:`mpls` for encapsulation of multiprotocol Layer 2 communications traffic over IP networks. Like L2TP, L2TPv3 provides a pseudo-wire service but is scaled to fit carrier requirements."
 msgstr "Layer 2 Tunnelling Protocol Version 3 is an IETF standard related to L2TP that can be used as an alternative protocol to :ref:`mpls` for encapsulation of multiprotocol Layer 2 communications traffic over IP networks. Like L2TP, L2TPv3 provides a pseudo-wire service but is scaled to fit carrier requirements."
 
-#: ../../configuration/service/dhcp-server.rst:633
+#: ../../configuration/service/dhcp-server.rst:652
 msgid "Lease time will be left at the default value which is 24 hours"
 msgstr "Lease time will be left at the default value which is 24 hours"
 
-#: ../../configuration/service/dhcp-server.rst:376
+#: ../../configuration/service/dhcp-server.rst:392
 msgid "Lease timeout in seconds (default: 86400)"
 msgstr "Lease timeout in seconds (default: 86400)"
 
@@ -8546,6 +8573,10 @@ msgstr "Local Configuration:"
 msgid "Local Configuration - Annotated:"
 msgstr "Local Configuration - Annotated:"
 
+#: ../../configuration/service/dhcp-server.rst:192
+msgid "Local IP `<address>` used when communicating to the HA peer."
+msgstr "Local IP `<address>` used when communicating to the HA peer."
+
 #: ../../configuration/service/dhcp-server.rst:177
 msgid "Local IP `<address>` used when communicating to the failover peer."
 msgstr "Local IP `<address>` used when communicating to the failover peer."
@@ -8578,11 +8609,11 @@ msgstr "Local User Account"
 msgid "Local path that includes the known hosts file."
 msgstr "Local path that includes the known hosts file."
 
-#: ../../configuration/protocols/rpki.rst:155
+#: ../../configuration/protocols/rpki.rst:157
 msgid "Local path that includes the private key file of the router."
 msgstr "Local path that includes the private key file of the router."
 
-#: ../../configuration/protocols/rpki.rst:159
+#: ../../configuration/protocols/rpki.rst:161
 msgid "Local path that includes the public key file of the router."
 msgstr "Local path that includes the public key file of the router."
 
@@ -8758,7 +8789,7 @@ msgstr "Main structure is shown next:"
 msgid "Maintenance mode"
 msgstr "Maintenance mode"
 
-#: ../../configuration/service/conntrack-sync.rst:111
+#: ../../configuration/service/conntrack-sync.rst:116
 msgid "Make sure conntrack is enabled by running and show connection tracking table."
 msgstr "Make sure conntrack is enabled by running and show connection tracking table."
 
@@ -9151,7 +9182,7 @@ msgstr "Most operating systems include native client support for IPsec IKEv2 VPN
 msgid "Mount a volume into the container"
 msgstr "Mount a volume into the container"
 
-#: ../../configuration/service/dhcp-server.rst:275
+#: ../../configuration/service/dhcp-server.rst:291
 msgid "Multi"
 msgstr "Multi"
 
@@ -9163,7 +9194,7 @@ msgstr "Multi-client server is the most popular OpenVPN mode on routers. It alwa
 msgid "Multi-homed. In a multi-homed network environment, the NAT66 device connects to an internal network and simultaneously connects to different external networks. Address translation can be configured on each external network side interface of the NAT66 device to convert the same internal network address into different external network addresses, and realize the mapping of the same internal address to multiple external addresses."
 msgstr "Multi-homed. In a multi-homed network environment, the NAT66 device connects to an internal network and simultaneously connects to different external networks. Address translation can be configured on each external network side interface of the NAT66 device to convert the same internal network address into different external network addresses, and realize the mapping of the same internal address to multiple external addresses."
 
-#: ../../configuration/service/dhcp-server.rst:399
+#: ../../configuration/service/dhcp-server.rst:415
 msgid "Multi: can be specified multiple times."
 msgstr "Multi: can be specified multiple times."
 
@@ -9266,18 +9297,18 @@ msgstr "Multiple users can connect to the same serial device but only one is all
 msgid "Multiprotocol extensions enable BGP to carry routing information for multiple network layer protocols. BGP supports an Address Family Identifier (AFI) for IPv4 and IPv6."
 msgstr "Multiprotocol extensions enable BGP to carry routing information for multiple network layer protocols. BGP supports an Address Family Identifier (AFI) for IPv4 and IPv6."
 
-#: ../../configuration/service/dhcp-server.rst:281
-#: ../../configuration/service/dhcp-server.rst:287
-#: ../../configuration/service/dhcp-server.rst:292
-#: ../../configuration/service/dhcp-server.rst:312
-#: ../../configuration/service/dhcp-server.rst:327
-#: ../../configuration/service/dhcp-server.rst:332
-#: ../../configuration/service/dhcp-server.rst:337
-#: ../../configuration/service/dhcp-server.rst:342
-#: ../../configuration/service/dhcp-server.rst:347
-#: ../../configuration/service/dhcp-server.rst:367
-#: ../../configuration/service/dhcp-server.rst:372
-#: ../../configuration/service/dhcp-server.rst:377
+#: ../../configuration/service/dhcp-server.rst:297
+#: ../../configuration/service/dhcp-server.rst:303
+#: ../../configuration/service/dhcp-server.rst:308
+#: ../../configuration/service/dhcp-server.rst:328
+#: ../../configuration/service/dhcp-server.rst:343
+#: ../../configuration/service/dhcp-server.rst:348
+#: ../../configuration/service/dhcp-server.rst:353
+#: ../../configuration/service/dhcp-server.rst:358
+#: ../../configuration/service/dhcp-server.rst:363
+#: ../../configuration/service/dhcp-server.rst:383
+#: ../../configuration/service/dhcp-server.rst:388
+#: ../../configuration/service/dhcp-server.rst:393
 msgid "N"
 msgstr "N"
 
@@ -9378,7 +9409,7 @@ msgstr "Name of installed certificate authority certificate."
 msgid "Name of installed server certificate."
 msgstr "Name of installed server certificate."
 
-#: ../../configuration/service/dhcp-server.rst:396
+#: ../../configuration/service/dhcp-server.rst:412
 msgid "Name of static mapping"
 msgstr "Name of static mapping"
 
@@ -9386,11 +9417,11 @@ msgstr "Name of static mapping"
 msgid "Name of the single table Only if set group-metrics single-table."
 msgstr "Name of the single table Only if set group-metrics single-table."
 
-#: ../../configuration/service/dhcp-server.rst:336
+#: ../../configuration/service/dhcp-server.rst:352
 msgid "Name or IPv4 address of TFTP server"
 msgstr "Name or IPv4 address of TFTP server"
 
-#: ../../configuration/service/dhcp-server.rst:321
+#: ../../configuration/service/dhcp-server.rst:337
 msgid "NetBIOS over TCP/IP name server"
 msgstr "NetBIOS over TCP/IP name server"
 
@@ -9569,7 +9600,7 @@ msgstr "Note the command with the public key (set pki key-pair ipsec-RIGHT publi
 msgid "Notice"
 msgstr "Notice"
 
-#: ../../configuration/service/conntrack-sync.rst:198
+#: ../../configuration/service/conntrack-sync.rst:203
 msgid "Now configure conntrack-sync service on ``router1`` **and** ``router2``"
 msgstr "Now configure conntrack-sync service on ``router1`` **and** ``router2``"
 
@@ -9641,7 +9672,7 @@ msgstr "OTP-key generation"
 msgid "Offloading"
 msgstr "Offloading"
 
-#: ../../configuration/service/dhcp-server.rst:285
+#: ../../configuration/service/dhcp-server.rst:301
 msgid "Offset of the client's subnet in seconds from Coordinated Universal Time (UTC)"
 msgstr "Offset of the client's subnet in seconds from Coordinated Universal Time (UTC)"
 
@@ -9653,7 +9684,7 @@ msgstr "Often we need to embed one policy into another one. It is possible to do
 msgid "Often you will also have to configure your *default* traffic in the same way you do with a class. *Default* can be considered a class as it behaves like that. It contains any traffic that did not match any of the defined classes, so it is like an open class, a class without matching filters."
 msgstr "Often you will also have to configure your *default* traffic in the same way you do with a class. *Default* can be considered a class as it behaves like that. It contains any traffic that did not match any of the defined classes, so it is like an open class, a class without matching filters."
 
-#: ../../configuration/service/conntrack-sync.rst:215
+#: ../../configuration/service/conntrack-sync.rst:220
 msgid "On active router run:"
 msgstr "On active router run:"
 
@@ -9669,7 +9700,7 @@ msgstr "On low rates (below 40Mbit) you may want to tune `quantum` down to somet
 msgid "On most scenarios, there's no need to change specific parameters, and using default configuration is enough. But there are cases were extra configuration is needed."
 msgstr "On most scenarios, there's no need to change specific parameters, and using default configuration is enough. But there are cases were extra configuration is needed."
 
-#: ../../configuration/service/conntrack-sync.rst:246
+#: ../../configuration/service/conntrack-sync.rst:251
 msgid "On standby router run:"
 msgstr "On standby router run:"
 
@@ -9704,7 +9735,7 @@ msgstr "On the RIGHT:"
 msgid "On the RIGHT (dynamic address):"
 msgstr "On the RIGHT (dynamic address):"
 
-#: ../../configuration/service/conntrack-sync.rst:211
+#: ../../configuration/service/conntrack-sync.rst:216
 msgid "On the active router, you should have information in the internal-cache of conntrack-sync. The same current active connections number should be shown in the external-cache of the standby router"
 msgstr "On the active router, you should have information in the internal-cache of conntrack-sync. The same current active connections number should be shown in the external-cache of the standby router"
 
@@ -9784,7 +9815,7 @@ msgstr "Once you have an Ethernet device connected, i.e. `eth0`, then you can co
 msgid "Once you have setup your SSTP server there comes the time to do some basic testing. The Linux client used for testing is called sstpc_. sstpc_ requires a PPP configuration/peer file."
 msgstr "Once you have setup your SSTP server there comes the time to do some basic testing. The Linux client used for testing is called sstpc_. sstpc_ requires a PPP configuration/peer file."
 
-#: ../../configuration/protocols/rpki.rst:193
+#: ../../configuration/protocols/rpki.rst:195
 msgid "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using the `RIPE Labs RPKI Test`_ experimental tool."
 msgstr "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using the `RIPE Labs RPKI Test`_ experimental tool."
 
@@ -9923,7 +9954,7 @@ msgstr "Operating Modes"
 #: ../../configuration/pki/index.rst:321
 #: ../../configuration/protocols/igmp-proxy.rst:73
 #: ../../configuration/protocols/static.rst:216
-#: ../../configuration/service/conntrack-sync.rst:107
+#: ../../configuration/service/conntrack-sync.rst:112
 #: ../../configuration/service/console-server.rst:76
 #: ../../configuration/service/dhcp-relay.rst:124
 #: ../../configuration/service/dhcp-relay.rst:201
@@ -9955,8 +9986,8 @@ msgstr "Operation-mode Firewall"
 msgid "Operation Commands"
 msgstr "Operation Commands"
 
-#: ../../configuration/service/dhcp-server.rst:452
-#: ../../configuration/service/dhcp-server.rst:706
+#: ../../configuration/service/dhcp-server.rst:471
+#: ../../configuration/service/dhcp-server.rst:725
 #: ../../configuration/system/acceleration.rst:42
 msgid "Operation Mode"
 msgstr "Operation Mode"
@@ -9992,11 +10023,11 @@ msgstr "Option"
 msgid "Option 43 for UniFI"
 msgstr "Option 43 for UniFI"
 
-#: ../../configuration/service/dhcp-server.rst:274
+#: ../../configuration/service/dhcp-server.rst:290
 msgid "Option description"
 msgstr "Option description"
 
-#: ../../configuration/service/dhcp-server.rst:272
+#: ../../configuration/service/dhcp-server.rst:288
 msgid "Option number"
 msgstr "Option number"
 
@@ -10046,7 +10077,7 @@ msgstr "Optionally set a specific static IPv4 or IPv6 address for the container.
 #: ../../configuration/interfaces/openvpn.rst:631
 #: ../../configuration/service/dhcp-relay.rst:53
 #: ../../configuration/service/dhcp-relay.rst:160
-#: ../../configuration/service/dhcp-server.rst:264
+#: ../../configuration/service/dhcp-server.rst:280
 msgid "Options"
 msgstr "Options"
 
@@ -10066,6 +10097,10 @@ msgstr "Or, for example ftp, `delete system conntrack modules ftp`."
 msgid "Or **binary** prefixes."
 msgstr "Or **binary** prefixes."
 
+#: ../../configuration/service/conntrack-sync.rst:107
+msgid "Order conntrackd to request a complete conntrack table resync against the other node at startup."
+msgstr "Order conntrackd to request a complete conntrack table resync against the other node at startup."
+
 #: ../../configuration/protocols/ospf.rst:73
 msgid "Originate an AS-External (type-5) LSA describing a default route into all external-routing capable areas, of the specified metric and metric type. If the :cfgcmd:`always` keyword is given then the default is always advertised, even when there is no default present in the routing table. The argument :cfgcmd:`route-map` specifies to advertise the default route if the route map is satisfied."
 msgstr "Originate an AS-External (type-5) LSA describing a default route into all external-routing capable areas, of the specified metric and metric type. If the :cfgcmd:`always` keyword is given then the default is always advertised, even when there is no default present in the routing table. The argument :cfgcmd:`route-map` specifies to advertise the default route if the route map is satisfied."
@@ -10338,7 +10373,7 @@ msgstr "Please refer to the :ref:`ipsec` documentation for the individual IPSec
 msgid "Please refer to the :ref:`tunnel-interface` documentation for the individual tunnel related options."
 msgstr "Please refer to the :ref:`tunnel-interface` documentation for the individual tunnel related options."
 
-#: ../../configuration/service/dhcp-server.rst:404
+#: ../../configuration/service/dhcp-server.rst:420
 msgid "Please see the :ref:`dhcp-dns-quick-start` configuration."
 msgstr "Please see the :ref:`dhcp-dns-quick-start` configuration."
 
@@ -10485,7 +10520,7 @@ msgstr "Preference associated with the default router"
 msgid "Prefix Conversion"
 msgstr "Prefix Conversion"
 
-#: ../../configuration/service/dhcp-server.rst:604
+#: ../../configuration/service/dhcp-server.rst:623
 msgid "Prefix Delegation"
 msgstr "Prefix Delegation"
 
@@ -10772,7 +10807,7 @@ msgstr "RADIUS source address"
 msgid "RFC 3768 defines a virtual MAC address to each VRRP virtual router. This virtual router MAC address will be used as the source in all periodic VRRP messages sent by the active node. When the rfc3768-compatibility option is set, a new VRRP interface is created, to which the MAC address and the virtual IP address is automatically assigned."
 msgstr "RFC 3768 defines a virtual MAC address to each VRRP virtual router. This virtual router MAC address will be used as the source in all periodic VRRP messages sent by the active node. When the rfc3768-compatibility option is set, a new VRRP interface is created, to which the MAC address and the virtual IP address is automatically assigned."
 
-#: ../../configuration/service/dhcp-server.rst:296
+#: ../../configuration/service/dhcp-server.rst:312
 msgid "RFC 868 time server IPv4 address"
 msgstr "RFC 868 time server IPv4 address"
 
@@ -10995,6 +11030,10 @@ msgstr "Remote ``InfluxDB`` bucket name"
 msgid "Remote database name."
 msgstr "Remote database name."
 
+#: ../../configuration/service/dhcp-server.rst:196
+msgid "Remote peer IP `<address>` of the second DHCP server in this HA cluster."
+msgstr "Remote peer IP `<address>` of the second DHCP server in this HA cluster."
+
 #: ../../configuration/service/dhcp-server.rst:181
 msgid "Remote peer IP `<address>` of the second DHCP server in this failover cluster."
 msgstr "Remote peer IP `<address>` of the second DHCP server in this failover cluster."
@@ -11087,7 +11126,7 @@ msgstr "Restart a given container"
 msgid "Restart mDNS repeater service."
 msgstr "Restart mDNS repeater service."
 
-#: ../../configuration/service/dhcp-server.rst:468
+#: ../../configuration/service/dhcp-server.rst:487
 msgid "Restart the DHCP server"
 msgstr "Restart the DHCP server"
 
@@ -11117,11 +11156,11 @@ msgstr "Results in:"
 msgid "Retransmit Timer"
 msgstr "Retransmit Timer"
 
-#: ../../configuration/service/conntrack-sync.rst:144
+#: ../../configuration/service/conntrack-sync.rst:149
 msgid "Retrieve current statistics of connection tracking subsystem."
 msgstr "Retrieve current statistics of connection tracking subsystem."
 
-#: ../../configuration/service/conntrack-sync.rst:177
+#: ../../configuration/service/conntrack-sync.rst:182
 msgid "Retrieve current status of connection tracking subsystem."
 msgstr "Retrieve current status of connection tracking subsystem."
 
@@ -11386,7 +11425,7 @@ msgstr "SSH client"
 msgid "SSH provides a secure channel over an unsecured network in a client-server architecture, connecting an SSH client application with an SSH server. Common applications include remote command-line login and remote command execution, but any network service can be secured with SSH. The protocol specification distinguishes between two major versions, referred to as SSH-1 and SSH-2."
 msgstr "SSH provides a secure channel over an unsecured network in a client-server architecture, connecting an SSH client application with an SSH server. Common applications include remote command-line login and remote command execution, but any network service can be secured with SSH. The protocol specification distinguishes between two major versions, referred to as SSH-1 and SSH-2."
 
-#: ../../configuration/protocols/rpki.rst:151
+#: ../../configuration/protocols/rpki.rst:153
 msgid "SSH username to establish an SSH connection to the cache server."
 msgstr "SSH username to establish an SSH connection to the cache server."
 
@@ -12292,7 +12331,7 @@ msgstr "Sets the unique id for this vxlan-interface. Not sure how it correlates
 msgid "Setting VRRP group priority"
 msgstr "Setting VRRP group priority"
 
-#: ../../configuration/service/dhcp-server.rst:271
+#: ../../configuration/service/dhcp-server.rst:287
 msgid "Setting name"
 msgstr "Setting name"
 
@@ -12329,6 +12368,10 @@ msgstr "Setting up tunnel:"
 msgid "Setting will only become active with the next reboot!"
 msgstr "Setting will only become active with the next reboot!"
 
+#: ../../configuration/service/dhcp-server.rst:429
+msgid "Setup DHCP HA for network 192.0.2.0/24"
+msgstr "Setup DHCP HA for network 192.0.2.0/24"
+
 #: ../../configuration/service/dhcp-server.rst:413
 msgid "Setup DHCP failover for network 192.0.2.0/24"
 msgstr "Setup DHCP failover for network 192.0.2.0/24"
@@ -12398,11 +12441,11 @@ msgstr "Shortcut syntax for specifying automatic leaking from vrf VRFNAME to the
 msgid "Show"
 msgstr "Show"
 
-#: ../../configuration/service/dhcp-server.rst:456
+#: ../../configuration/service/dhcp-server.rst:475
 msgid "Show DHCP server daemon log file"
 msgstr "Show DHCP server daemon log file"
 
-#: ../../configuration/service/dhcp-server.rst:710
+#: ../../configuration/service/dhcp-server.rst:729
 msgid "Show DHCPv6 server daemon log file"
 msgstr "Show DHCPv6 server daemon log file"
 
@@ -12528,11 +12571,11 @@ msgstr "Show configured serial ports and their respective interface configuratio
 msgid "Show connection data of load balanced traffic:"
 msgstr "Show connection data of load balanced traffic:"
 
-#: ../../configuration/service/conntrack-sync.rst:136
+#: ../../configuration/service/conntrack-sync.rst:141
 msgid "Show connection syncing external cache entries"
 msgstr "Show connection syncing external cache entries"
 
-#: ../../configuration/service/conntrack-sync.rst:140
+#: ../../configuration/service/conntrack-sync.rst:145
 msgid "Show connection syncing internal cache entries"
 msgstr "Show connection syncing internal cache entries"
 
@@ -12602,19 +12645,19 @@ msgstr "Show logs for mDNS repeater service."
 msgid "Show logs from a given container"
 msgstr "Show logs from a given container"
 
-#: ../../configuration/service/dhcp-server.rst:460
+#: ../../configuration/service/dhcp-server.rst:479
 msgid "Show logs from all DHCP client processes."
 msgstr "Show logs from all DHCP client processes."
 
-#: ../../configuration/service/dhcp-server.rst:714
+#: ../../configuration/service/dhcp-server.rst:733
 msgid "Show logs from all DHCPv6 client processes."
 msgstr "Show logs from all DHCPv6 client processes."
 
-#: ../../configuration/service/dhcp-server.rst:464
+#: ../../configuration/service/dhcp-server.rst:483
 msgid "Show logs from specific `interface` DHCP client process."
 msgstr "Show logs from specific `interface` DHCP client process."
 
-#: ../../configuration/service/dhcp-server.rst:718
+#: ../../configuration/service/dhcp-server.rst:737
 msgid "Show logs from specific `interface` DHCPv6 client process."
 msgstr "Show logs from specific `interface` DHCPv6 client process."
 
@@ -12626,16 +12669,16 @@ msgstr "Show only information for specified Certificate Authority."
 msgid "Show only information for specified certificate."
 msgstr "Show only information for specified certificate."
 
-#: ../../configuration/service/dhcp-server.rst:518
-#: ../../configuration/service/dhcp-server.rst:741
+#: ../../configuration/service/dhcp-server.rst:537
+#: ../../configuration/service/dhcp-server.rst:760
 msgid "Show only leases in the specified pool."
 msgstr "Show only leases in the specified pool."
 
-#: ../../configuration/service/dhcp-server.rst:750
+#: ../../configuration/service/dhcp-server.rst:769
 msgid "Show only leases with the specified state. Possible states: abandoned, active, all, backup, expired, free, released, reset (default = active)"
 msgstr "Show only leases with the specified state. Possible states: abandoned, active, all, backup, expired, free, released, reset (default = active)"
 
-#: ../../configuration/service/dhcp-server.rst:536
+#: ../../configuration/service/dhcp-server.rst:555
 msgid "Show only leases with the specified state. Possible states: all, active, free, expired, released, abandoned, reset, backup (default = active)"
 msgstr "Show only leases with the specified state. Possible states: all, active, free, expired, released, abandoned, reset, backup (default = active)"
 
@@ -12651,19 +12694,19 @@ msgstr "Show specific MACsec interface information"
 msgid "Show status of new setup:"
 msgstr "Show status of new setup:"
 
-#: ../../configuration/service/dhcp-server.rst:487
+#: ../../configuration/service/dhcp-server.rst:506
 msgid "Show statuses of all active leases:"
 msgstr "Show statuses of all active leases:"
 
-#: ../../configuration/service/dhcp-server.rst:505
+#: ../../configuration/service/dhcp-server.rst:524
 msgid "Show statuses of all active leases granted by local (this server) or remote (failover server):"
 msgstr "Show statuses of all active leases granted by local (this server) or remote (failover server):"
 
-#: ../../configuration/service/dhcp-server.rst:472
+#: ../../configuration/service/dhcp-server.rst:491
 msgid "Show the DHCP server statistics:"
 msgstr "Show the DHCP server statistics:"
 
-#: ../../configuration/service/dhcp-server.rst:483
+#: ../../configuration/service/dhcp-server.rst:502
 msgid "Show the DHCP server statistics for the specified pool."
 msgstr "Show the DHCP server statistics for the specified pool."
 
@@ -12712,7 +12755,7 @@ msgstr "Show transceiver information from plugin modules, e.g SFP+, QSFP"
 msgid "Showing BFD monitored static routes"
 msgstr "Showing BFD monitored static routes"
 
-#: ../../configuration/service/dhcp-server.rst:726
+#: ../../configuration/service/dhcp-server.rst:745
 msgid "Shows status of all assigned leases:"
 msgstr "Shows status of all assigned leases:"
 
@@ -12904,11 +12947,11 @@ msgstr "Some users tend to connect their mobile devices using WireGuard to their
 msgid "Sometimes option lines in the generated OpenVPN configuration require quotes. This is done through a hack on our config generator. You can pass quotes using the ``&quot;`` statement."
 msgstr "Sometimes option lines in the generated OpenVPN configuration require quotes. This is done through a hack on our config generator. You can pass quotes using the ``&quot;`` statement."
 
-#: ../../configuration/service/dhcp-server.rst:745
+#: ../../configuration/service/dhcp-server.rst:764
 msgid "Sort the output by the specified key. Possible keys: expires, iaid_duid, ip, last_comm, pool, remaining, state, type (default = ip)"
 msgstr "Sort the output by the specified key. Possible keys: expires, iaid_duid, ip, last_comm, pool, remaining, state, type (default = ip)"
 
-#: ../../configuration/service/dhcp-server.rst:531
+#: ../../configuration/service/dhcp-server.rst:550
 msgid "Sort the output by the specified key. Possible keys: ip, hardware_address, state, start, end, remaining, pool, hostname (default = ip)"
 msgstr "Sort the output by the specified key. Possible keys: ip, hardware_address, state, start, end, remaining, pool, hostname (default = ip)"
 
@@ -13098,7 +13141,7 @@ msgstr "Specifies the available :abbr:`MAC (Message Authentication Code)` algori
 msgid "Specifies the base DN under which the users are located."
 msgstr "Specifies the base DN under which the users are located."
 
-#: ../../configuration/service/dhcp-server.rst:279
+#: ../../configuration/service/dhcp-server.rst:295
 msgid "Specifies the clients subnet mask as per RFC 950. If unset, subnet declaration is used."
 msgstr "Specifies the clients subnet mask as per RFC 950. If unset, subnet declaration is used."
 
@@ -13206,15 +13249,15 @@ msgstr "Specify IPv4 and/or IPv6 networks which are going to be excluded."
 msgid "Specify a Fully Qualified Domain Name as source/destination matcher. Ensure router is able to resolve such dns query."
 msgstr "Specify a Fully Qualified Domain Name as source/destination matcher. Ensure router is able to resolve such dns query."
 
-#: ../../configuration/service/dhcp-server.rst:590
+#: ../../configuration/service/dhcp-server.rst:609
 msgid "Specify a NIS+ server address for DHCPv6 clients."
 msgstr "Specify a NIS+ server address for DHCPv6 clients."
 
-#: ../../configuration/service/dhcp-server.rst:585
+#: ../../configuration/service/dhcp-server.rst:604
 msgid "Specify a NIS server address for DHCPv6 clients."
 msgstr "Specify a NIS server address for DHCPv6 clients."
 
-#: ../../configuration/service/dhcp-server.rst:595
+#: ../../configuration/service/dhcp-server.rst:614
 msgid "Specify a :abbr:`SIP (Session Initiation Protocol)` server by IPv6 address of Fully Qualified Domain Name for all DHCPv6 clients."
 msgstr "Specify a :abbr:`SIP (Session Initiation Protocol)` server by IPv6 address of Fully Qualified Domain Name for all DHCPv6 clients."
 
@@ -13368,7 +13411,7 @@ msgstr "Starting with VyOS 1.2 a :abbr:`mDNS (Multicast DNS)` repeater functiona
 msgid "Static"
 msgstr "Static"
 
-#: ../../configuration/service/dhcp-server.rst:229
+#: ../../configuration/service/dhcp-server.rst:245
 msgid "Static DHCP IP address assign to host identified by `<description>`. IP address must be inside the `<subnet>` which is defined but can be outside the dynamic range created with :cfgcmd:`set service dhcp-server shared-network-name <name> subnet <subnet> range <n>`. If no ip-address is specified, an IP from the dynamic pool is used."
 msgstr "Static DHCP IP address assign to host identified by `<description>`. IP address must be inside the `<subnet>` which is defined but can be outside the dynamic range created with :cfgcmd:`set service dhcp-server shared-network-name <name> subnet <subnet> range <n>`. If no ip-address is specified, an IP from the dynamic pool is used."
 
@@ -13396,13 +13439,13 @@ msgstr "Static Routing or other dynamic routing protocols can be used over the v
 msgid "Static :abbr:`SAK (Secure Authentication Key)` mode can be configured manually on each device wishing to use MACsec. Keys must be set statically on all devices for traffic to flow properly. Key rotation is dependent on the administrator updating all keys manually across connected devices. Static SAK mode can not be used with MKA."
 msgstr "Static :abbr:`SAK (Secure Authentication Key)` mode can be configured manually on each device wishing to use MACsec. Keys must be set statically on all devices for traffic to flow properly. Key rotation is dependent on the administrator updating all keys manually across connected devices. Static SAK mode can not be used with MKA."
 
-#: ../../configuration/service/dhcp-server.rst:208
-#: ../../configuration/service/dhcp-server.rst:663
+#: ../../configuration/service/dhcp-server.rst:224
+#: ../../configuration/service/dhcp-server.rst:682
 msgid "Static mappings"
 msgstr "Static mappings"
 
-#: ../../configuration/service/dhcp-server.rst:500
-#: ../../configuration/service/dhcp-server.rst:736
+#: ../../configuration/service/dhcp-server.rst:519
+#: ../../configuration/service/dhcp-server.rst:755
 msgid "Static mappings aren't shown. To show all states, use ``show dhcp server leases state all``."
 msgstr "Static mappings aren't shown. To show all states, use ``show dhcp server leases state all``."
 
@@ -13950,9 +13993,9 @@ msgstr "The command pon TESTUNNEL establishes the PPTP tunnel to the remote syst
 msgid "The computers on an internal network can use any of the addresses set aside by the :abbr:`IANA (Internet Assigned Numbers Authority)` for private addressing (see :rfc:`1918`). These reserved IP addresses are not in use on the Internet, so an external machine will not directly route to them. The following addresses are reserved for private use:"
 msgstr "The computers on an internal network can use any of the addresses set aside by the :abbr:`IANA (Internet Assigned Numbers Authority)` for private addressing (see :rfc:`1918`). These reserved IP addresses are not in use on the Internet, so an external machine will not directly route to them. The following addresses are reserved for private use:"
 
-#: ../../configuration/service/dhcp-server.rst:250
-#: ../../configuration/service/dhcp-server.rst:642
-#: ../../configuration/service/dhcp-server.rst:686
+#: ../../configuration/service/dhcp-server.rst:266
+#: ../../configuration/service/dhcp-server.rst:661
+#: ../../configuration/service/dhcp-server.rst:705
 msgid "The configuration will look as follows:"
 msgstr "The configuration will look as follows:"
 
@@ -14008,7 +14051,7 @@ msgstr "The default is 1492."
 msgid "The default is ``802.1q``."
 msgstr "The default is ``802.1q``."
 
-#: ../../configuration/service/dhcp-server.rst:566
+#: ../../configuration/service/dhcp-server.rst:585
 msgid "The default lease time for DHCPv6 leases is 24 hours. This can be changed by supplying a ``default-time``, ``maximum-time`` and ``minimum-time``. All values need to be supplied in seconds."
 msgstr "The default lease time for DHCPv6 leases is 24 hours. This can be changed by supplying a ``default-time``, ``maximum-time`` and ``minimum-time``. All values need to be supplied in seconds."
 
@@ -14068,6 +14111,10 @@ msgstr "The destination port used for creating a VXLAN interface in Linux defaul
 msgid "The device can only receive packets with VNIs configured in the VNI filtering table."
 msgstr "The device can only receive packets with VNIs configured in the VNI filtering table."
 
+#: ../../configuration/service/dhcp-server.rst:215
+msgid "The dialogue between HA partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you have DHCP HA peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them to ensure that the HA partnership is immune to disruption (accidental or otherwise) via third parties."
+msgstr "The dialogue between HA partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you have DHCP HA peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them to ensure that the HA partnership is immune to disruption (accidental or otherwise) via third parties."
+
 #: ../../configuration/service/dhcp-server.rst:199
 msgid "The dialogue between failover partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you have DHCP failover peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them to ensure that the failover partnership is immune to disruption (accidental or otherwise) via third parties."
 msgstr "The dialogue between failover partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you have DHCP failover peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them to ensure that the failover partnership is immune to disruption (accidental or otherwise) via third parties."
@@ -14291,7 +14338,7 @@ msgstr "The hostname can be up to 63 characters. A hostname must start and end w
 msgid "The hostname or IP address of the master"
 msgstr "The hostname or IP address of the master"
 
-#: ../../configuration/service/dhcp-server.rst:674
+#: ../../configuration/service/dhcp-server.rst:693
 msgid "The identifier is the device's DUID: colon-separated hex list (as used by isc-dhcp option dhcpv6.client-id). If the device already has a dynamic lease from the DHCPv6 server, its DUID can be found with ``show service dhcpv6 server leases``. The DUID begins at the 5th octet (after the 4th colon) of IAID_DUID."
 msgstr "The identifier is the device's DUID: colon-separated hex list (as used by isc-dhcp option dhcpv6.client-id). If the device already has a dynamic lease from the DHCPv6 server, its DUID can be found with ``show service dhcpv6 server leases``. The DUID begins at the 5th octet (after the 4th colon) of IAID_DUID."
 
@@ -14407,7 +14454,7 @@ msgstr "The netmask or domain that EDNS Client Subnet should be enabled for in o
 msgid "The network topology is declared by shared-network-name and the subnet declarations. The DHCP service can serve multiple shared networks, with each shared network having 1 or more subnets. Each subnet must be present on an interface. A range can be declared inside a subnet to define a pool of dynamic addresses. Multiple ranges can be defined and can contain holes. Static mappings can be set to assign \"static\" addresses to clients based on their MAC address."
 msgstr "The network topology is declared by shared-network-name and the subnet declarations. The DHCP service can serve multiple shared networks, with each shared network having 1 or more subnets. Each subnet must be present on an interface. A range can be declared inside a subnet to define a pool of dynamic addresses. Multiple ranges can be defined and can contain holes. Static mappings can be set to assign \"static\" addresses to clients based on their MAC address."
 
-#: ../../configuration/service/conntrack-sync.rst:192
+#: ../../configuration/service/conntrack-sync.rst:197
 msgid "The next example is a simple configuration of conntrack-sync."
 msgstr "The next example is a simple configuration of conntrack-sync."
 
@@ -14483,11 +14530,11 @@ msgstr "The prefix and ASN that originated it match a signed ROA. These are prob
 msgid "The prefix or prefix length and ASN that originated it doesn't match any existing ROA. This could be the result of a prefix hijack, or merely a misconfiguration, but should probably be treated as untrustworthy route announcements."
 msgstr "The prefix or prefix length and ASN that originated it doesn't match any existing ROA. This could be the result of a prefix hijack, or merely a misconfiguration, but should probably be treated as untrustworthy route announcements."
 
-#: ../../configuration/service/dhcp-server.rst:415
+#: ../../configuration/service/dhcp-server.rst:432
 msgid "The primary DHCP server uses address `192.168.189.252`"
 msgstr "The primary DHCP server uses address `192.168.189.252`"
 
-#: ../../configuration/service/dhcp-server.rst:192
+#: ../../configuration/service/dhcp-server.rst:208
 msgid "The primary and secondary statements determines whether the server is primary or secondary."
 msgstr "The primary and secondary statements determines whether the server is primary or secondary."
 
@@ -14499,7 +14546,7 @@ msgstr "The primary option is only valid for active-backup, transmit-load-balanc
 msgid "The priority must be an integer number from 1 to 255. Higher priority value increases router's precedence in the master elections."
 msgstr "The priority must be an integer number from 1 to 255. Higher priority value increases router's precedence in the master elections."
 
-#: ../../configuration/service/dhcp-server.rst:579
+#: ../../configuration/service/dhcp-server.rst:598
 msgid "The procedure to specify a :abbr:`NIS+ (Network Information Service Plus)` domain is similar to the NIS domain one:"
 msgstr "The procedure to specify a :abbr:`NIS+ (Network Information Service Plus)` domain is similar to the NIS domain one:"
 
@@ -14608,7 +14655,7 @@ msgstr "The scheme above doesn't work when one of the routers has a dynamic exte
 msgid "The search filter can contain up to 15 occurrences of %s which will be replaced by the username, as in \"uid=%s\" for :rfc:`2037` directories. For a detailed description of LDAP search filter syntax see :rfc:`2254`."
 msgstr "The search filter can contain up to 15 occurrences of %s which will be replaced by the username, as in \"uid=%s\" for :rfc:`2037` directories. For a detailed description of LDAP search filter syntax see :rfc:`2254`."
 
-#: ../../configuration/service/dhcp-server.rst:416
+#: ../../configuration/service/dhcp-server.rst:433
 msgid "The secondary DHCP server uses address `192.168.189.253`"
 msgstr "The secondary DHCP server uses address `192.168.189.253`"
 
@@ -15951,7 +15998,7 @@ msgid "This configuration modifies the behavior of the network statement. If you
 msgstr "This configuration modifies the behavior of the network statement. If you have this configured the underlying network must exist in the routing table."
 
 #: ../../configuration/service/dhcp-server.rst:92
-#: ../../configuration/service/dhcp-server.rst:560
+#: ../../configuration/service/dhcp-server.rst:579
 msgid "This configuration parameter is required and must be unique to each subnet. It is required to map subnets to lease file entries."
 msgstr "This configuration parameter is required and must be unique to each subnet. It is required to map subnets to lease file entries."
 
@@ -16188,7 +16235,7 @@ msgstr "This is the configuration parameter for the entire shared network defini
 msgid "This is the configuration parameter for the entire shared network definition. All subnets will inherit this configuration item if not specified locally. Multiple DNS servers can be defined."
 msgstr "This is the configuration parameter for the entire shared network definition. All subnets will inherit this configuration item if not specified locally. Multiple DNS servers can be defined."
 
-#: ../../configuration/service/dhcp-server.rst:237
+#: ../../configuration/service/dhcp-server.rst:253
 msgid "This is the equivalent of the host block in dhcpd.conf of isc-dhcpd."
 msgstr "This is the equivalent of the host block in dhcpd.conf of isc-dhcpd."
 
@@ -16200,7 +16247,7 @@ msgstr "This is the name of the physical interface used to connect to your LCD d
 msgid "This is the policy that requieres the lowest resources for the same amount of traffic. But **very likely you do not need it as you cannot get much from it. Sometimes it is used just to enable logging.**"
 msgstr "This is the policy that requieres the lowest resources for the same amount of traffic. But **very likely you do not need it as you cannot get much from it. Sometimes it is used just to enable logging.**"
 
-#: ../../configuration/service/dhcp-server.rst:235
+#: ../../configuration/service/dhcp-server.rst:251
 msgid "This is useful, for example, in combination with hostfile update."
 msgstr "This is useful, for example, in combination with hostfile update."
 
@@ -16732,7 +16779,7 @@ msgstr "To generate the CA, the server private key and certificates the followin
 msgid "To get it to work as an access point with this configuration you will need to set up a DHCP server to work with that network. You can - of course - also bridge the Wireless interface with any configured bridge (:ref:`bridge-interface`) on the system."
 msgstr "To get it to work as an access point with this configuration you will need to set up a DHCP server to work with that network. You can - of course - also bridge the Wireless interface with any configured bridge (:ref:`bridge-interface`) on the system."
 
-#: ../../configuration/service/dhcp-server.rst:606
+#: ../../configuration/service/dhcp-server.rst:625
 msgid "To hand out individual prefixes to your clients the following configuration is used:"
 msgstr "To hand out individual prefixes to your clients the following configuration is used:"
 
@@ -16761,7 +16808,7 @@ msgstr "To perform a graceful shutdown, the FRR ``graceful-restart prepare ip os
 msgid "To request a /56 prefix from your ISP use:"
 msgstr "To request a /56 prefix from your ISP use:"
 
-#: ../../configuration/service/dhcp-server.rst:722
+#: ../../configuration/service/dhcp-server.rst:741
 msgid "To restart the DHCPv6 server"
 msgstr "To restart the DHCPv6 server"
 
@@ -17099,6 +17146,10 @@ msgstr "Use a specific network-group. Prepend character ``!`` for inverted match
 msgid "Use a specific port-group. Prepend character ``!`` for inverted matching criteria."
 msgstr "Use a specific port-group. Prepend character ``!`` for inverted matching criteria."
 
+#: ../../configuration/service/dhcp-server.rst:430
+msgid "Use active-active HA mode."
+msgstr "Use active-active HA mode."
+
 #: ../../configuration/nat/nat44.rst:259
 msgid "Use address `masquerade` (the interfaces primary address) on rule 30"
 msgstr "Use address `masquerade` (the interfaces primary address) on rule 30"
@@ -18219,7 +18270,7 @@ msgstr "VyOS SNMP supports both IPv4 and IPv6."
 msgid "VyOS also comes with a build in SSTP server, see :ref:`sstp`."
 msgstr "VyOS also comes with a build in SSTP server, see :ref:`sstp`."
 
-#: ../../configuration/service/dhcp-server.rst:544
+#: ../../configuration/service/dhcp-server.rst:563
 msgid "VyOS also provides DHCPv6 server functionality which is described in this section."
 msgstr "VyOS also provides DHCPv6 server functionality which is described in this section."
 
@@ -18316,6 +18367,10 @@ msgstr "VyOS provide an HTTP API. You can use it to execute op-mode commands, up
 msgid "VyOS provides DNS infrastructure for small networks. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. For this we utilize PowerDNS recursor."
 msgstr "VyOS provides DNS infrastructure for small networks. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. For this we utilize PowerDNS recursor."
 
+#: ../../configuration/service/dhcp-server.rst:172
+msgid "VyOS provides High Availability support for DHCP server. DHCP High Availability can act in two different modes:"
+msgstr "VyOS provides High Availability support for DHCP server. DHCP High Availability can act in two different modes:"
+
 #: ../../configuration/vpn/remoteaccess_ipsec.rst:144
 msgid "VyOS provides a command to generate a connection profile used by Windows clients that will connect to the \"rw\" connection on our VyOS server."
 msgstr "VyOS provides a command to generate a connection profile used by Windows clients that will connect to the \"rw\" connection on our VyOS server."
@@ -18481,7 +18536,7 @@ msgstr "We can't support all displays from the beginning. If your display type i
 msgid "We can also create the certificates using Cerbort which is an easy-to-use client that fetches a certificate from Let's Encrypt an open certificate authority launched by the EFF, Mozilla, and others and deploys it to a web server."
 msgstr "We can also create the certificates using Cerbort which is an easy-to-use client that fetches a certificate from Let's Encrypt an open certificate authority launched by the EFF, Mozilla, and others and deploys it to a web server."
 
-#: ../../configuration/protocols/rpki.rst:168
+#: ../../configuration/protocols/rpki.rst:170
 msgid "We can build route-maps for import based on these states. Here is a simple RPKI configuration, where `routinator` is the RPKI-validating \"cache\" server with ip `192.0.2.1`:"
 msgstr "We can build route-maps for import based on these states. Here is a simple RPKI configuration, where `routinator` is the RPKI-validating \"cache\" server with ip `192.0.2.1`:"
 
@@ -18537,7 +18592,7 @@ msgstr "We use a vontainer providing the TACACS serve rin this example."
 msgid "We will only accept traffic comming from interface eth0, protocol tcp and destination port 1122. All other traffic traspassing the router should be blocked."
 msgstr "We will only accept traffic comming from interface eth0, protocol tcp and destination port 1122. All other traffic traspassing the router should be blocked."
 
-#: ../../configuration/service/dhcp-server.rst:371
+#: ../../configuration/service/dhcp-server.rst:387
 msgid "Web Proxy Autodiscovery (WPAD) URL"
 msgstr "Web Proxy Autodiscovery (WPAD) URL"
 
@@ -18742,7 +18797,7 @@ msgstr "When using NAT for a large number of host systems it recommended that a
 msgid "When using SSH, known-hosts-file, private-key-file and public-key-file are mandatory options."
 msgstr "When using SSH, known-hosts-file, private-key-file and public-key-file are mandatory options."
 
-#: ../../configuration/protocols/rpki.rst:161
+#: ../../configuration/protocols/rpki.rst:163
 msgid "When using SSH, private-key-file and public-key-file are mandatory options."
 msgstr "When using SSH, private-key-file and public-key-file are mandatory options."
 
@@ -18912,20 +18967,24 @@ msgid "With this command, you can specify how the URL path should be matched aga
 msgstr "With this command, you can specify how the URL path should be matched against incoming requests."
 
 #: ../../configuration/firewall/index.rst:166
+msgid "With zone-based firewalls a new concept was implemented, in addition to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above."
+msgstr "With zone-based firewalls a new concept was implemented, in addition to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above."
+
+#: ../../configuration/firewall/index.rst:166
 msgid "With zone-based firewalls a new concept was implemented, in addtion to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above."
 msgstr "With zone-based firewalls a new concept was implemented, in addtion to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above."
 
-#: ../../configuration/service/dhcp-server.rst:297
-#: ../../configuration/service/dhcp-server.rst:302
-#: ../../configuration/service/dhcp-server.rst:307
-#: ../../configuration/service/dhcp-server.rst:317
-#: ../../configuration/service/dhcp-server.rst:322
-#: ../../configuration/service/dhcp-server.rst:352
-#: ../../configuration/service/dhcp-server.rst:357
-#: ../../configuration/service/dhcp-server.rst:362
-#: ../../configuration/service/dhcp-server.rst:382
-#: ../../configuration/service/dhcp-server.rst:387
-#: ../../configuration/service/dhcp-server.rst:397
+#: ../../configuration/service/dhcp-server.rst:313
+#: ../../configuration/service/dhcp-server.rst:318
+#: ../../configuration/service/dhcp-server.rst:323
+#: ../../configuration/service/dhcp-server.rst:333
+#: ../../configuration/service/dhcp-server.rst:338
+#: ../../configuration/service/dhcp-server.rst:368
+#: ../../configuration/service/dhcp-server.rst:373
+#: ../../configuration/service/dhcp-server.rst:378
+#: ../../configuration/service/dhcp-server.rst:398
+#: ../../configuration/service/dhcp-server.rst:403
+#: ../../configuration/service/dhcp-server.rst:413
 msgid "Y"
 msgstr "Y"
 
@@ -19037,7 +19096,7 @@ msgstr "You can only apply one policy per interface and direction, but you could
 msgid "You can run the UDP broadcast relay service on multiple routers connected to a subnet. There is **NO** UDP broadcast relay packet storm!"
 msgstr "You can run the UDP broadcast relay service on multiple routers connected to a subnet. There is **NO** UDP broadcast relay packet storm!"
 
-#: ../../configuration/service/dhcp-server.rst:210
+#: ../../configuration/service/dhcp-server.rst:226
 msgid "You can specify a static DHCP assignment on a per host basis. You will need the MAC address of the station and your desired IP address. The address must be inside the subnet definition but can be outside of the range statement."
 msgstr "You can specify a static DHCP assignment on a per host basis. You will need the MAC address of the station and your desired IP address. The address must be inside the subnet definition but can be outside of the range statement."
 
@@ -19481,7 +19540,7 @@ msgstr "`3. Add a full path to the script`_"
 msgid "`4. Add optional parameters`_"
 msgstr "`4. Add optional parameters`_"
 
-#: ../../configuration/service/dhcp-server.rst:188
+#: ../../configuration/service/dhcp-server.rst:203
 msgid "`<name>` must be identical on both sides!"
 msgstr "`<name>` must be identical on both sides!"
 
@@ -20744,23 +20803,23 @@ msgstr "bgpd"
 msgid "bonding"
 msgstr "bonding"
 
-#: ../../configuration/service/dhcp-server.rst:345
+#: ../../configuration/service/dhcp-server.rst:361
 msgid "boot-size"
 msgstr "boot-size"
 
-#: ../../configuration/service/dhcp-server.rst:338
+#: ../../configuration/service/dhcp-server.rst:354
 msgid "bootfile-name"
 msgstr "bootfile-name"
 
-#: ../../configuration/service/dhcp-server.rst:340
+#: ../../configuration/service/dhcp-server.rst:356
 msgid "bootfile-name, filename"
 msgstr "bootfile-name, filename"
 
-#: ../../configuration/service/dhcp-server.rst:328
+#: ../../configuration/service/dhcp-server.rst:344
 msgid "bootfile-server"
 msgstr "bootfile-server"
 
-#: ../../configuration/service/dhcp-server.rst:343
+#: ../../configuration/service/dhcp-server.rst:359
 msgid "bootfile-size"
 msgstr "bootfile-size"
 
@@ -20768,7 +20827,7 @@ msgstr "bootfile-size"
 msgid "bridge"
 msgstr "bridge"
 
-#: ../../configuration/service/dhcp-server.rst:276
+#: ../../configuration/service/dhcp-server.rst:292
 msgid "client-prefix-length"
 msgstr "client-prefix-length"
 
@@ -20820,7 +20879,7 @@ msgstr "debug"
 msgid "decrement-lifetime"
 msgstr "decrement-lifetime"
 
-#: ../../configuration/service/dhcp-server.rst:375
+#: ../../configuration/service/dhcp-server.rst:391
 msgid "default-lease-time, max-lease-time"
 msgstr "default-lease-time, max-lease-time"
 
@@ -20832,7 +20891,7 @@ msgstr "default-lifetime"
 msgid "default-preference"
 msgstr "default-preference"
 
-#: ../../configuration/service/dhcp-server.rst:288
+#: ../../configuration/service/dhcp-server.rst:304
 msgid "default-router"
 msgstr "default-router"
 
@@ -20848,7 +20907,7 @@ msgstr "deprecate-prefix"
 msgid "destination-hashing"
 msgstr "destination-hashing"
 
-#: ../../configuration/service/dhcp-server.rst:325
+#: ../../configuration/service/dhcp-server.rst:341
 msgid "dhcp-server-identifier"
 msgstr "dhcp-server-identifier"
 
@@ -20870,17 +20929,17 @@ msgstr "disable: No source validation"
 msgid "dnssl"
 msgstr "dnssl"
 
-#: ../../configuration/service/dhcp-server.rst:303
-#: ../../configuration/service/dhcp-server.rst:305
+#: ../../configuration/service/dhcp-server.rst:319
+#: ../../configuration/service/dhcp-server.rst:321
 msgid "domain-name"
 msgstr "domain-name"
 
-#: ../../configuration/service/dhcp-server.rst:300
+#: ../../configuration/service/dhcp-server.rst:316
 msgid "domain-name-servers"
 msgstr "domain-name-servers"
 
-#: ../../configuration/service/dhcp-server.rst:358
-#: ../../configuration/service/dhcp-server.rst:360
+#: ../../configuration/service/dhcp-server.rst:374
+#: ../../configuration/service/dhcp-server.rst:376
 msgid "domain-search"
 msgstr "domain-search"
 
@@ -20916,11 +20975,11 @@ msgstr "ethernet"
 msgid "exact-match: exact match of the network prefixes."
 msgstr "exact-match: exact match of the network prefixes."
 
-#: ../../configuration/service/dhcp-server.rst:383
+#: ../../configuration/service/dhcp-server.rst:399
 msgid "exclude"
 msgstr "exclude"
 
-#: ../../configuration/service/dhcp-server.rst:388
+#: ../../configuration/service/dhcp-server.rst:404
 msgid "failover"
 msgstr "failover"
 
@@ -20993,8 +21052,8 @@ msgstr "invalid"
 msgid "inverse-match: network/netmask to match (requires network be defined)."
 msgstr "inverse-match: network/netmask to match (requires network be defined)."
 
-#: ../../configuration/service/dhcp-server.rst:308
-#: ../../configuration/service/dhcp-server.rst:310
+#: ../../configuration/service/dhcp-server.rst:324
+#: ../../configuration/service/dhcp-server.rst:326
 msgid "ip-forwarding"
 msgstr "ip-forwarding"
 
@@ -21022,7 +21081,7 @@ msgstr "l2tpv3"
 msgid "ldpd"
 msgstr "ldpd"
 
-#: ../../configuration/service/dhcp-server.rst:373
+#: ../../configuration/service/dhcp-server.rst:389
 msgid "lease"
 msgstr "lease"
 
@@ -21184,12 +21243,12 @@ msgstr "more information related IGP  - :ref:`routing-isis`"
 msgid "more information related IGP  - :ref:`routing-ospf`"
 msgstr "more information related IGP  - :ref:`routing-ospf`"
 
-#: ../../configuration/service/dhcp-server.rst:298
+#: ../../configuration/service/dhcp-server.rst:314
 #: ../../configuration/service/router-advert.rst:1
 msgid "name-server"
 msgstr "name-server"
 
-#: ../../configuration/service/dhcp-server.rst:320
+#: ../../configuration/service/dhcp-server.rst:336
 msgid "netbios-name-servers"
 msgstr "netbios-name-servers"
 
@@ -21205,7 +21264,7 @@ msgstr "network: network/netmask to match (requires inverse-match be defined) BU
 msgid "news"
 msgstr "news"
 
-#: ../../configuration/service/dhcp-server.rst:330
+#: ../../configuration/service/dhcp-server.rst:346
 msgid "next-server"
 msgstr "next-server"
 
@@ -21229,11 +21288,11 @@ msgstr "notice"
 msgid "ntp"
 msgstr "ntp"
 
-#: ../../configuration/service/dhcp-server.rst:313
+#: ../../configuration/service/dhcp-server.rst:329
 msgid "ntp-server"
 msgstr "ntp-server"
 
-#: ../../configuration/service/dhcp-server.rst:315
+#: ../../configuration/service/dhcp-server.rst:331
 msgid "ntp-servers"
 msgstr "ntp-servers"
 
@@ -21281,8 +21340,8 @@ msgstr "policy extcommunity-list"
 msgid "policy large-community-list"
 msgstr "policy large-community-list"
 
-#: ../../configuration/service/dhcp-server.rst:353
-#: ../../configuration/service/dhcp-server.rst:355
+#: ../../configuration/service/dhcp-server.rst:369
+#: ../../configuration/service/dhcp-server.rst:371
 msgid "pop-server"
 msgstr "pop-server"
 
@@ -21299,8 +21358,8 @@ msgstr "prefix-list, distribute-list"
 msgid "pseudo-ethernet"
 msgstr "pseudo-ethernet"
 
-#: ../../configuration/service/dhcp-server.rst:378
-#: ../../configuration/service/dhcp-server.rst:380
+#: ../../configuration/service/dhcp-server.rst:394
+#: ../../configuration/service/dhcp-server.rst:396
 msgid "range"
 msgstr "range"
 
@@ -21316,7 +21375,7 @@ msgstr "reset commands"
 msgid "retrans-timer"
 msgstr "retrans-timer"
 
-#: ../../configuration/service/dhcp-server.rst:365
+#: ../../configuration/service/dhcp-server.rst:381
 msgid "rfc3442-static-route, windows-static-route"
 msgstr "rfc3442-static-route, windows-static-route"
 
@@ -21349,7 +21408,7 @@ msgstr "round-robin"
 msgid "route-map"
 msgstr "route-map"
 
-#: ../../configuration/service/dhcp-server.rst:290
+#: ../../configuration/service/dhcp-server.rst:306
 msgid "routers"
 msgstr "routers"
 
@@ -21366,7 +21425,7 @@ msgstr "sFlow is a technology that enables monitoring of network traffic by send
 msgid "security"
 msgstr "security"
 
-#: ../../configuration/service/dhcp-server.rst:323
+#: ../../configuration/service/dhcp-server.rst:339
 msgid "server-identifier"
 msgstr "server-identifier"
 
@@ -21387,7 +21446,7 @@ msgstr "sha256 Hashes"
 msgid "show commands"
 msgstr "show commands"
 
-#: ../../configuration/service/dhcp-server.rst:329
+#: ../../configuration/service/dhcp-server.rst:345
 msgid "siaddr"
 msgstr "siaddr"
 
@@ -21395,8 +21454,8 @@ msgstr "siaddr"
 msgid "slow: Request partner to transmit LACPDUs every 30 seconds"
 msgstr "slow: Request partner to transmit LACPDUs every 30 seconds"
 
-#: ../../configuration/service/dhcp-server.rst:348
-#: ../../configuration/service/dhcp-server.rst:350
+#: ../../configuration/service/dhcp-server.rst:364
+#: ../../configuration/service/dhcp-server.rst:366
 msgid "smtp-server"
 msgstr "smtp-server"
 
@@ -21416,11 +21475,11 @@ msgstr "spoke01-spoke04"
 msgid "spoke05"
 msgstr "spoke05"
 
-#: ../../configuration/service/dhcp-server.rst:393
+#: ../../configuration/service/dhcp-server.rst:409
 msgid "static-mapping"
 msgstr "static-mapping"
 
-#: ../../configuration/service/dhcp-server.rst:363
+#: ../../configuration/service/dhcp-server.rst:379
 msgid "static-route"
 msgstr "static-route"
 
@@ -21430,7 +21489,7 @@ msgstr "static-route"
 msgid "strict: Each incoming packet is tested against the FIB and if the interface is not the best reverse path the packet check will fail. By default failed packets are discarded."
 msgstr "strict: Each incoming packet is tested against the FIB and if the interface is not the best reverse path the packet check will fail. By default failed packets are discarded."
 
-#: ../../configuration/service/dhcp-server.rst:278
+#: ../../configuration/service/dhcp-server.rst:294
 msgid "subnet-mask"
 msgstr "subnet-mask"
 
@@ -21446,8 +21505,8 @@ msgstr "tail"
 msgid "tc_ is a powerful tool for Traffic Control found at the Linux kernel. However, its configuration is often considered a cumbersome task. Fortunately, VyOS eases the job through its CLI, while using ``tc`` as backend."
 msgstr "tc_ is a powerful tool for Traffic Control found at the Linux kernel. However, its configuration is often considered a cumbersome task. Fortunately, VyOS eases the job through its CLI, while using ``tc`` as backend."
 
-#: ../../configuration/service/dhcp-server.rst:333
-#: ../../configuration/service/dhcp-server.rst:335
+#: ../../configuration/service/dhcp-server.rst:349
+#: ../../configuration/service/dhcp-server.rst:351
 msgid "tftp-server-name"
 msgstr "tftp-server-name"
 
@@ -21456,16 +21515,16 @@ msgstr "tftp-server-name"
 msgid "this option allows to configure prefix-sid on SR. The ‘no-php-flag’ means NO Penultimate Hop Popping that allows SR node to request to its neighbor to not pop the label. The ‘explicit-null’ flag allows SR node to request to its neighbor to send IP packet with the EXPLICIT-NULL label. The ‘n-flag-clear’ option can be used to explicitly clear the Node flag that is set by default for Prefix-SIDs associated to loopback addresses. This option is necessary to configure Anycast-SIDs."
 msgstr "this option allows to configure prefix-sid on SR. The ‘no-php-flag’ means NO Penultimate Hop Popping that allows SR node to request to its neighbor to not pop the label. The ‘explicit-null’ flag allows SR node to request to its neighbor to send IP packet with the EXPLICIT-NULL label. The ‘n-flag-clear’ option can be used to explicitly clear the Node flag that is set by default for Prefix-SIDs associated to loopback addresses. This option is necessary to configure Anycast-SIDs."
 
-#: ../../configuration/service/dhcp-server.rst:282
-#: ../../configuration/service/dhcp-server.rst:284
+#: ../../configuration/service/dhcp-server.rst:298
+#: ../../configuration/service/dhcp-server.rst:300
 msgid "time-offset"
 msgstr "time-offset"
 
-#: ../../configuration/service/dhcp-server.rst:293
+#: ../../configuration/service/dhcp-server.rst:309
 msgid "time-server"
 msgstr "time-server"
 
-#: ../../configuration/service/dhcp-server.rst:295
+#: ../../configuration/service/dhcp-server.rst:311
 msgid "time-servers"
 msgstr "time-servers"
 
@@ -21526,7 +21585,7 @@ msgstr "weighted-round-robin"
 msgid "while a *byte* is written as a single **b**."
 msgstr "while a *byte* is written as a single **b**."
 
-#: ../../configuration/service/dhcp-server.rst:318
+#: ../../configuration/service/dhcp-server.rst:334
 msgid "wins-server"
 msgstr "wins-server"
 
@@ -21542,11 +21601,11 @@ msgstr "wireless"
 msgid "with :cfgcmd:`set system acceleration qat` on both systems the bandwidth increases."
 msgstr "with :cfgcmd:`set system acceleration qat` on both systems the bandwidth increases."
 
-#: ../../configuration/service/dhcp-server.rst:368
+#: ../../configuration/service/dhcp-server.rst:384
 msgid "wpad-url"
 msgstr "wpad-url"
 
-#: ../../configuration/service/dhcp-server.rst:370
+#: ../../configuration/service/dhcp-server.rst:386
 msgid "wpad-url, wpad-url code 252 = text"
 msgstr "wpad-url, wpad-url code 252 = text"
author	Robert Göhler <github@ghlr.de>	2024-04-09 21:19:01 +0200
committer	GitHub <noreply@github.com>	2024-04-09 21:19:01 +0200
commit	dcddb7e2b0fa29859c505664cee15602a505ea62 (patch)
tree	2129faf8053e3990898d45a011515a530b5b02eb /docs/_locale/pt
parent	8da48148f6e27443f3da78b366b14a669d2a9ef3 (diff)
parent	e421c3598b95922f1a55bd92aa9f6beb95d60d8f (diff)
download	vyos-documentation-dcddb7e2b0fa29859c505664cee15602a505ea62.tar.gz vyos-documentation-dcddb7e2b0fa29859c505664cee15602a505ea62.zip