diff options
| author | Robert Göhler <github@ghlr.de> | 2023-11-16 21:53:16 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-11-16 21:53:16 +0100 |
| commit | 1ea74f4d9bed32e5e0ddd4e9bd58340f5040ad94 (patch) | |
| tree | fed2d01986ee1b42faf259df258f5b8b9723a2da /docs/configuration/vpn | |
| parent | 47b3c5578528a09df987fe419d811eca14864061 (diff) | |
| parent | f0349e7f1f49a51658c7b317205091a93fec71bf (diff) | |
| download | vyos-documentation-1ea74f4d9bed32e5e0ddd4e9bd58340f5040ad94.tar.gz vyos-documentation-1ea74f4d9bed32e5e0ddd4e9bd58340f5040ad94.zip | |
Merge pull request #1153 from greenpsi/nat-update
Nat update
Diffstat (limited to 'docs/configuration/vpn')
| -rw-r--r-- | docs/configuration/vpn/l2tp.rst | 2 | ||||
| -rw-r--r-- | docs/configuration/vpn/site2site_ipsec.rst | 4 |
2 files changed, 3 insertions, 3 deletions
diff --git a/docs/configuration/vpn/l2tp.rst b/docs/configuration/vpn/l2tp.rst index 6ea1cc7d..26de47b3 100644 --- a/docs/configuration/vpn/l2tp.rst +++ b/docs/configuration/vpn/l2tp.rst @@ -60,7 +60,7 @@ To allow VPN-clients access via your external address, a NAT rule is required: .. code-block:: none - set nat source rule 110 outbound-interface 'eth0' + set nat source rule 110 outbound-interface name 'eth0' set nat source rule 110 source address '192.168.255.0/24' set nat source rule 110 translation address masquerade diff --git a/docs/configuration/vpn/site2site_ipsec.rst b/docs/configuration/vpn/site2site_ipsec.rst index 2b3403f5..8c0af774 100644 --- a/docs/configuration/vpn/site2site_ipsec.rst +++ b/docs/configuration/vpn/site2site_ipsec.rst @@ -245,13 +245,13 @@ If there is SNAT rules on eth1, need to add exclude rule # server side set nat source rule 10 destination address '10.0.0.0/24' set nat source rule 10 'exclude' - set nat source rule 10 outbound-interface 'eth1' + set nat source rule 10 outbound-interface name 'eth1' set nat source rule 10 source address '192.168.0.0/24' # remote office side set nat source rule 10 destination address '192.168.0.0/24' set nat source rule 10 'exclude' - set nat source rule 10 outbound-interface 'eth1' + set nat source rule 10 outbound-interface name 'eth1' set nat source rule 10 source address '10.0.0.0/24' To allow traffic to pass through to clients, you need to add the following |